v2.109.2
This commit is contained in:
Balena CI
parent
90568b7545
commit
8a1cd47b73
3 changed files with 658 additions and 1 deletions
|
|
@ -1,3 +1,533 @@
|
|||
- commits:
|
||||
- subject: Update layers/meta-balena to 4cffdcd9cff0a3a7573811e98f15f44124a00ac0
|
||||
hash: 4d9a076c75801dc9a5634b10a90ff62dacbc1c2d
|
||||
body: Update layers/meta-balena
|
||||
footer:
|
||||
Changelog-entry: Update layers/meta-balena to 4cffdcd9cff0a3a7573811e98f15f44124a00ac0
|
||||
changelog-entry: Update layers/meta-balena to 4cffdcd9cff0a3a7573811e98f15f44124a00ac0
|
||||
author: Renovate Bot
|
||||
nested:
|
||||
- commits:
|
||||
- subject: "efitools: backport patch to fix build failure"
|
||||
hash: 4497229d9d3435384564cde802a3d16cbc47300c
|
||||
body: >
|
||||
Copied from buildroot mailing list:
|
||||
|
||||
http://lists.busybox.net/pipermail/buildroot/2021-April/610255.html
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "efitools: fix cross-compilation on arm"
|
||||
hash: 86887855e9023e56cd9c96fdfc29053f649366f5
|
||||
body: >
|
||||
efitools defaults ARCH to x86_64 when unset, leading to architecture
|
||||
|
||||
specific flags being misapplied, breaking the build
|
||||
|
||||
|
||||
Set ARCH based on the target architecture, and override OBJCOPY to the
|
||||
|
||||
binary provided by the target architecture's toolchain.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: Only include EFI tools if the machine feature is defined
|
||||
hash: ebeccdfa45e5e98215aa3b47429df1be82750021
|
||||
body: ""
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
author: Alex Gonzalez
|
||||
nested: []
|
||||
version: meta-balena-2.109.2
|
||||
title: ""
|
||||
date: 2023-02-07T09:05:22.787Z
|
||||
- commits:
|
||||
- subject: "resin-extra-udev-rules: Remove after all device types have been
|
||||
updated"
|
||||
hash: 75dd55660bcb9e37f458b505e23acc3f19dfddc7
|
||||
body: >
|
||||
This recipe has now been renamed to extra-udev-rules across all device
|
||||
|
||||
types repositories.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
author: Alex Gonzalez
|
||||
nested: []
|
||||
version: meta-balena-2.109.1
|
||||
title: ""
|
||||
date: 2023-02-06T20:35:12.019Z
|
||||
- commits:
|
||||
- subject: "kernel-balena: Remove apparmor support"
|
||||
hash: 18cd233a83554b58b3540164afd768fdeda60b03
|
||||
body: >
|
||||
Newer releases of moby expect appArmor userland tools when appArmor is
|
||||
|
||||
enabled in the kernel.
|
||||
footer:
|
||||
Change-type: minor
|
||||
change-type: minor
|
||||
Signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
author: Alex Gonzalez
|
||||
nested: []
|
||||
version: meta-balena-2.109.0
|
||||
title: ""
|
||||
date: 2023-02-05T16:28:20.664Z
|
||||
- commits:
|
||||
- subject: "flasher: handle user mode system w/out secure boot"
|
||||
hash: 73ca2d64f9bc22764694f774898db02a6c9e9825
|
||||
body: >
|
||||
When a user runs the flasher with secure boot enabled in `config.json`,
|
||||
|
||||
the public keys used to validate the bootloader are enrolled. If any
|
||||
|
||||
other bootloader signature fails to validate against this public key, it
|
||||
|
||||
won't be executed.
|
||||
|
||||
|
||||
If the user attempts to run the balenaOS flasher on that system again
|
||||
|
||||
without first enabling the secure boot option, the flasher won't enroll
|
||||
|
||||
keys, but the installed system will be signed. This will result in a
|
||||
|
||||
secure boot enabled system without full-disk encryption.
|
||||
|
||||
|
||||
Bail out in this case so the user must choose to explicitly opt-in to
|
||||
|
||||
secure boot for the new installation, and full-disk encryption along
|
||||
|
||||
with it. Otherwise, the user must reset the enrolled keys to install
|
||||
|
||||
without secure boot.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "flasher: fix keys not enrolling with secure boot enabled"
|
||||
hash: e9622bc5bb415d98bfd3c3277db96e5b585c583b
|
||||
body: >
|
||||
Extended globbing is not enabled by default, which makes the substring
|
||||
|
||||
match for trimming leading zeroes not work. This causes SETUPMODEVAR to
|
||||
|
||||
evaluate to "01", which fails comparison with the string "1", skipping
|
||||
|
||||
key enrollment when secure boot is enabled. Compare using an integer
|
||||
|
||||
expression instead.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "flasher: fix secure boot setup with enrolled keys"
|
||||
hash: 2116dc08fbc8e0df3739fc1067a3884712a55ade
|
||||
body: >
|
||||
When refactoring secure boot setup, a logic mistake in the purpose and
|
||||
|
||||
use of SECUREBOOT_VAR meant that devices booting the flasher with keys already
|
||||
|
||||
enrolled would bail out with an incorrect message about secure boot not
|
||||
|
||||
being supported in firmware.
|
||||
|
||||
|
||||
This variable is `00` on systems with secure boot support in firmware,
|
||||
|
||||
but not enabled and enforced, `01` on systems where secure boot is
|
||||
|
||||
enforced, and empty when secure boot is unsupported.
|
||||
|
||||
|
||||
Change this conditional to bail out only when the variable is empty,
|
||||
|
||||
indicating that secure boot is unsupported.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
version: meta-balena-2.108.39
|
||||
title: ""
|
||||
date: 2023-02-03T23:26:11.949Z
|
||||
- commits:
|
||||
- subject: Update leviathan to v2.17.4
|
||||
hash: c1bae2e96f6cc4209899a31e7bdb85078135076d
|
||||
body: |
|
||||
Update tests/leviathan
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Kyle Harding <kyle@balena.io>
|
||||
signed-off-by: Kyle Harding <kyle@balena.io>
|
||||
author: Kyle Harding
|
||||
nested:
|
||||
- commits:
|
||||
- subject: "patch: Upgrade client to v18"
|
||||
hash: 4a29cfca1dc2176bf47d032cfd920b01ca4df3a8
|
||||
body: ""
|
||||
footer:
|
||||
Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
author: Vipul Gupta (@vipulgupta2048)
|
||||
nested: []
|
||||
version: leviathan-2.17.4
|
||||
title: ""
|
||||
date: 2023-01-28T07:04:28.321Z
|
||||
- commits:
|
||||
- subject: "patch: Update client dependencies"
|
||||
hash: 453e1b5bdd03b724bd8331faa3ea04243efbbfce
|
||||
body: ""
|
||||
footer:
|
||||
Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
author: Vipul Gupta (@vipulgupta2048)
|
||||
nested: []
|
||||
version: leviathan-2.17.3
|
||||
title: ""
|
||||
date: 2023-01-26T20:41:43.701Z
|
||||
- commits:
|
||||
- subject: "chore(deps): update alpine docker tag to v3.17.1"
|
||||
hash: 2de5aacb8b4ba86bf2392e23551f9e865138736e
|
||||
body: |
|
||||
Update alpine to 3.17.1
|
||||
|
||||
Update alpine from 3.17.0 to 3.17.1
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
author: renovate[bot]
|
||||
nested: []
|
||||
version: leviathan-2.17.2
|
||||
title: ""
|
||||
date: 2023-01-19T21:20:13.041Z
|
||||
- commits:
|
||||
- subject: "patch: Convert balenaCloudInteractor to JS"
|
||||
hash: a8da6622d1ba6468f8130a51b260519847625583
|
||||
body: ""
|
||||
footer:
|
||||
Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
author: Vipul Gupta (@vipulgupta2048)
|
||||
nested: []
|
||||
version: leviathan-2.17.1
|
||||
title: ""
|
||||
date: 2023-01-19T15:53:32.738Z
|
||||
- commits:
|
||||
- subject: "chore(deps): update dependency json5 [security]"
|
||||
hash: 36d7967c770b7929948882f043f03c455416572f
|
||||
body: |
|
||||
Update json5 to 1.0.2
|
||||
|
||||
Update json5 from 1.0.1 to 1.0.2
|
||||
footer:
|
||||
Change-type: minor
|
||||
change-type: minor
|
||||
author: renovate[bot]
|
||||
nested: []
|
||||
version: leviathan-2.17.0
|
||||
title: ""
|
||||
date: 2023-01-19T01:06:24.777Z
|
||||
- commits:
|
||||
- subject: split swtpm service into separate compose file
|
||||
hash: 93d0160eb9a07c86c309cb2c0c2f1b709185884d
|
||||
body: >
|
||||
Not all platforms support secure boot, notably aarch64 using tianocore
|
||||
|
||||
firmware. Additionally, swtpm may not be available for all platforms.
|
||||
|
||||
Accordingly, move the swtpm service to a separate compose file that is
|
||||
|
||||
only used when secure boot is enabled.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
version: leviathan-2.16.1
|
||||
title: ""
|
||||
date: 2023-01-19T00:41:15.836Z
|
||||
- commits:
|
||||
- subject: "chore(deps): update core/contracts digest to 8392bb2"
|
||||
hash: ab31953ea1d8e8145be1ee27b876a838c21baa0a
|
||||
body: |
|
||||
Update core/contracts to
|
||||
|
||||
Update core/contracts from to
|
||||
footer:
|
||||
Change-type: minor
|
||||
change-type: minor
|
||||
author: renovate[bot]
|
||||
nested: []
|
||||
version: leviathan-2.16.0
|
||||
title: ""
|
||||
date: 2023-01-18T06:30:50.979Z
|
||||
- commits:
|
||||
- subject: "patch: Drop config NPM package"
|
||||
hash: f4cdd63b1b2976a6699e710e96355250ab439343
|
||||
body: ""
|
||||
footer:
|
||||
Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
signed-off-by: Vipul Gupta (@vipulgupta2048) <vipul@balena.io>
|
||||
author: Vipul Gupta (@vipulgupta2048)
|
||||
nested: []
|
||||
version: leviathan-2.15.1
|
||||
title: ""
|
||||
date: 2023-01-17T12:42:44.293Z
|
||||
- commits:
|
||||
- subject: "chore(deps): update dependency ansi-regex [security]"
|
||||
hash: 795fabd9701bb10b46f80b931648a9ccc50f1a48
|
||||
body: |
|
||||
Update ansi-regex to 4.1.1
|
||||
|
||||
Update ansi-regex from 4.1.0 to 4.1.1
|
||||
footer:
|
||||
Change-type: minor
|
||||
change-type: minor
|
||||
author: renovate[bot]
|
||||
nested: []
|
||||
version: leviathan-2.15.0
|
||||
title: ""
|
||||
date: 2023-01-14T15:28:50.892Z
|
||||
- commits:
|
||||
- subject: "compose: qemu: add swtpm service"
|
||||
hash: 302446a90ceedf0e406ed5edef7600925cf55c8c
|
||||
body: >
|
||||
QEMU is capable of using an emulated software TPM exposed via socket. A
|
||||
|
||||
TPM is necessary for full disk encryption (FDE), so add a service to
|
||||
|
||||
provide this to the QEMU worker.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
version: leviathan-2.14.9
|
||||
title: ""
|
||||
date: 2023-01-05T23:53:03.325Z
|
||||
version: meta-balena-2.108.38
|
||||
title: ""
|
||||
date: 2023-02-03T18:37:02.754Z
|
||||
- commits:
|
||||
- subject: Update balena-engine to v20.10.26
|
||||
hash: 488f4d5888f7133ec70a3c41cff6289bb23ef05b
|
||||
body: Update balena-engine
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
author: Renovate Bot
|
||||
nested: []
|
||||
version: meta-balena-2.108.37
|
||||
title: ""
|
||||
date: 2023-02-02T17:29:34.078Z
|
||||
- commits:
|
||||
- subject: "flasher: remove duplicate EFI boot entries"
|
||||
hash: f93eb1a115a74af3a1875cbbd26306ddb76acd63
|
||||
body: ""
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "flasher: create EFI boot entry"
|
||||
hash: 5979409faeaaa2b0df7503b408e202d87c6d2f7b
|
||||
body: >
|
||||
Some firmwares will not boot balenaOS by default without explicitly
|
||||
|
||||
creating a boot entry, so create one on EFI platforms after flashing.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "common: os-helpers-fs: fix get_dev_path_from_label w/ luks"
|
||||
hash: 3b7ad68f938776db770a067de6b2973876cc7430
|
||||
body: >
|
||||
get_dev_path_from_label() calls lsblk to get the name and label of a
|
||||
|
||||
disk, then filters the list using the label and returns a /dev path.
|
||||
|
||||
|
||||
The name returned when using a luks encrypted partition is the
|
||||
|
||||
/dev/mapper name, rather than the kernel's device mapper name under
|
||||
|
||||
/dev/dm-*. When assembling a path under /dev using the luks name, the
|
||||
|
||||
path is invalid, and the by-state links aren't created.
|
||||
|
||||
|
||||
This leads to the rootfs hook failing to find and mount the resin-rootA
|
||||
|
||||
partition.
|
||||
|
||||
|
||||
Change the attribute retrieved using lsblk to kname to fix this.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "flasher: make secure boot opt-in"
|
||||
hash: c6b84df2e571231bea8283e88750af949ca78df9
|
||||
body: >
|
||||
Opt-in to secure boot, full-disk encryption, and kernel lockdown with
|
||||
|
||||
the `secureboot` boolean in the `installer` object contained in
|
||||
|
||||
config.json.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "flasher: ensure image is signed before enrollment"
|
||||
hash: 765ec79b9760a8822fab5801459398b798bd5e31
|
||||
body: >
|
||||
The flasher image enrolls the secure boot keys before rebooting into
|
||||
|
||||
secured user mode and creating the encrypted luks volumes on disk.
|
||||
|
||||
|
||||
If the image is not signed, the key enrollment will fail, and the
|
||||
|
||||
flasher will enter a loop trying to enroll them and rebooting.
|
||||
|
||||
|
||||
Instead, skip the key enrollment if the image is not signed, resulting
|
||||
|
||||
in a non secure-boot installation.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
- subject: "flasher: refactor secure boot block"
|
||||
hash: 7127247bdabe96827b13837a573fc0c3966b1557
|
||||
body: >
|
||||
Improve readability and formatting of secure boot configuration section
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
signed-off-by: Joseph Kogut <joseph@balena.io>
|
||||
author: Joseph Kogut
|
||||
nested: []
|
||||
version: meta-balena-2.108.36
|
||||
title: ""
|
||||
date: 2023-02-02T10:23:47.357Z
|
||||
- commits:
|
||||
- subject: "renovate: Add regex manager for balena-engine"
|
||||
hash: 30e3fcdff7a2d02cbe6eb744f02e313471de9785
|
||||
body: ""
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Kyle Harding <kyle@balena.io>
|
||||
signed-off-by: Kyle Harding <kyle@balena.io>
|
||||
author: Kyle Harding
|
||||
nested: []
|
||||
version: meta-balena-2.108.35
|
||||
title: ""
|
||||
date: 2023-02-01T17:18:53.825Z
|
||||
- commits:
|
||||
- subject: "docs: Add secure boot and disk encryption overview"
|
||||
hash: 2c808fd7ea1355f3aa9541970f836a978e1bb7c9
|
||||
body: ""
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
author: Alex Gonzalez
|
||||
nested: []
|
||||
- subject: "hostapp-update-hooks: Fail if new keys are used"
|
||||
hash: e61b8183fc046b733f18c55ae21cdde29ec28064
|
||||
body: >
|
||||
Abort the hostOS update if new keys are detected so the device is
|
||||
|
||||
not bricked until updating keys is supported.
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
author: Alex Gonzalez
|
||||
nested: []
|
||||
- subject: "resin-init-flasher: In setupmode program new keys"
|
||||
hash: 46a0b3839eccb69e00d15fd69027b904a8613a89
|
||||
body: >
|
||||
If the device has been configured in setupmode, make the flasher images
|
||||
|
||||
program the balena keys from the boot partition.
|
||||
footer:
|
||||
Relates-to: "#2444"
|
||||
relates-to: "#2444"
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
signed-off-by: Alex Gonzalez <alexg@balena.io>
|
||||
author: Alex Gonzalez
|
||||
nested: []
|
||||
version: meta-balena-2.108.34
|
||||
title: ""
|
||||
date: 2023-02-01T13:14:46.064Z
|
||||
- commits:
|
||||
- subject: "tests: os: skip persistent logging test for pi0"
|
||||
hash: 2b35568f7d8743a59250dd7824858a42f8eb35fe
|
||||
body: ""
|
||||
footer:
|
||||
Change-type: patch
|
||||
change-type: patch
|
||||
Signed-off-by: Ryan Cooke <ryan@balena.io>
|
||||
signed-off-by: Ryan Cooke <ryan@balena.io>
|
||||
author: rcooke-warwick
|
||||
nested: []
|
||||
version: meta-balena-2.108.33
|
||||
title: ""
|
||||
date: 2023-01-31T18:21:33.712Z
|
||||
version: 2.109.2
|
||||
title: ""
|
||||
date: 2023-02-07T11:08:40.989Z
|
||||
- commits:
|
||||
- subject: Update layers/meta-balena to ccab7759d432f7be780c194087c38eca7e02084d
|
||||
hash: 2d8a79965bef688d70e38d3435152c96c7e0aa01
|
||||
|
|
|
|||
127
CHANGELOG.md
127
CHANGELOG.md
|
|
@ -1,6 +1,133 @@
|
|||
Change log
|
||||
-----------
|
||||
|
||||
# v2.109.2
|
||||
## (2023-02-07)
|
||||
|
||||
|
||||
<details>
|
||||
<summary> Update layers/meta-balena to 4cffdcd9cff0a3a7573811e98f15f44124a00ac0 [Renovate Bot] </summary>
|
||||
|
||||
> ## meta-balena-2.109.2
|
||||
> ### (2023-02-07)
|
||||
>
|
||||
> * efitools: backport patch to fix build failure [Joseph Kogut]
|
||||
> * efitools: fix cross-compilation on arm [Joseph Kogut]
|
||||
> * Only include EFI tools if the machine feature is defined [Alex Gonzalez]
|
||||
>
|
||||
> ## meta-balena-2.109.1
|
||||
> ### (2023-02-06)
|
||||
>
|
||||
> * resin-extra-udev-rules: Remove after all device types have been updated [Alex Gonzalez]
|
||||
>
|
||||
> ## meta-balena-2.109.0
|
||||
> ### (2023-02-05)
|
||||
>
|
||||
> * kernel-balena: Remove apparmor support [Alex Gonzalez]
|
||||
>
|
||||
> ## meta-balena-2.108.39
|
||||
> ### (2023-02-03)
|
||||
>
|
||||
> * flasher: handle user mode system w/out secure boot [Joseph Kogut]
|
||||
> * flasher: fix keys not enrolling with secure boot enabled [Joseph Kogut]
|
||||
> * flasher: fix secure boot setup with enrolled keys [Joseph Kogut]
|
||||
>
|
||||
> ## meta-balena-2.108.38
|
||||
> ### (2023-02-03)
|
||||
>
|
||||
>
|
||||
> <details>
|
||||
> <summary> Update leviathan to v2.17.4 [Kyle Harding] </summary>
|
||||
>
|
||||
>> ### leviathan-2.17.4
|
||||
>> #### (2023-01-28)
|
||||
>>
|
||||
>> * patch: Upgrade client to v18 [Vipul Gupta (@vipulgupta2048)]
|
||||
>>
|
||||
>> ### leviathan-2.17.3
|
||||
>> #### (2023-01-26)
|
||||
>>
|
||||
>> * patch: Update client dependencies [Vipul Gupta (@vipulgupta2048)]
|
||||
>>
|
||||
>> ### leviathan-2.17.2
|
||||
>> #### (2023-01-19)
|
||||
>>
|
||||
>> * chore(deps): update alpine docker tag to v3.17.1 [renovate[bot]]
|
||||
>>
|
||||
>> ### leviathan-2.17.1
|
||||
>> #### (2023-01-19)
|
||||
>>
|
||||
>> * patch: Convert balenaCloudInteractor to JS [Vipul Gupta (@vipulgupta2048)]
|
||||
>>
|
||||
>> ### leviathan-2.17.0
|
||||
>> #### (2023-01-19)
|
||||
>>
|
||||
>> * chore(deps): update dependency json5 [security] [renovate[bot]]
|
||||
>>
|
||||
>> ### leviathan-2.16.1
|
||||
>> #### (2023-01-19)
|
||||
>>
|
||||
>> * split swtpm service into separate compose file [Joseph Kogut]
|
||||
>>
|
||||
>> ### leviathan-2.16.0
|
||||
>> #### (2023-01-18)
|
||||
>>
|
||||
>> * chore(deps): update core/contracts digest to 8392bb2 [renovate[bot]]
|
||||
>>
|
||||
>> ### leviathan-2.15.1
|
||||
>> #### (2023-01-17)
|
||||
>>
|
||||
>> * patch: Drop config NPM package [Vipul Gupta (@vipulgupta2048)]
|
||||
>>
|
||||
>> ### leviathan-2.15.0
|
||||
>> #### (2023-01-14)
|
||||
>>
|
||||
>> * chore(deps): update dependency ansi-regex [security] [renovate[bot]]
|
||||
>>
|
||||
>> ### leviathan-2.14.9
|
||||
>> #### (2023-01-05)
|
||||
>>
|
||||
>> * compose: qemu: add swtpm service [Joseph Kogut]
|
||||
>>
|
||||
>
|
||||
> </details>
|
||||
>
|
||||
>
|
||||
> ## meta-balena-2.108.37
|
||||
> ### (2023-02-02)
|
||||
>
|
||||
> * Update balena-engine to v20.10.26 [Renovate Bot]
|
||||
>
|
||||
> ## meta-balena-2.108.36
|
||||
> ### (2023-02-02)
|
||||
>
|
||||
> * flasher: remove duplicate EFI boot entries [Joseph Kogut]
|
||||
> * flasher: create EFI boot entry [Joseph Kogut]
|
||||
> * common: os-helpers-fs: fix get_dev_path_from_label w/ luks [Joseph Kogut]
|
||||
> * flasher: make secure boot opt-in [Joseph Kogut]
|
||||
> * flasher: ensure image is signed before enrollment [Joseph Kogut]
|
||||
> * flasher: refactor secure boot block [Joseph Kogut]
|
||||
>
|
||||
> ## meta-balena-2.108.35
|
||||
> ### (2023-02-01)
|
||||
>
|
||||
> * renovate: Add regex manager for balena-engine [Kyle Harding]
|
||||
>
|
||||
> ## meta-balena-2.108.34
|
||||
> ### (2023-02-01)
|
||||
>
|
||||
> * docs: Add secure boot and disk encryption overview [Alex Gonzalez]
|
||||
> * hostapp-update-hooks: Fail if new keys are used [Alex Gonzalez]
|
||||
> * resin-init-flasher: In setupmode program new keys [Alex Gonzalez]
|
||||
>
|
||||
> ## meta-balena-2.108.33
|
||||
> ### (2023-02-01)
|
||||
>
|
||||
> * tests: os: skip persistent logging test for pi0 [rcooke-warwick]
|
||||
>
|
||||
|
||||
</details>
|
||||
|
||||
# v2.108.32
|
||||
## (2023-01-31)
|
||||
|
||||
|
|
|
|||
2
VERSION
2
VERSION
|
|
@ -1 +1 @@
|
|||
2.108.32
|
||||
2.109.2
|
||||
Loading…
Add table
Reference in a new issue