diff --git a/.versionbot/CHANGELOG.yml b/.versionbot/CHANGELOG.yml index 9e33dac..fc511f1 100644 --- a/.versionbot/CHANGELOG.yml +++ b/.versionbot/CHANGELOG.yml @@ -1,3 +1,4661 @@ +- commits: + - subject: Update layers/meta-balena to 798e236d25380d70e7be09d8d5dbb0349c05f413 + hash: bebdfd5065e15d573307e14889595918dbded3e8 + body: Update layers/meta-balena + footer: + Changelog-entry: Update layers/meta-balena to 798e236d25380d70e7be09d8d5dbb0349c05f413 + changelog-entry: Update layers/meta-balena to 798e236d25380d70e7be09d8d5dbb0349c05f413 + author: Renovate Bot + nested: + - commits: + - subject: "timeinit/timesync-https: Update rtc after setting system time" + hash: f16451b49b77bd7d3f5f82d20e0605a9797832eb + body: > + This solves a problem seen on a device on which, although + + timeinit-rtc finishes running before timesync-https, chronyd + + sets the system time to the incorrect rtc time + + as soon as timesync-https finished running and setting the correct date + + from the servers. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.98.6 + title: "'timeinit/timesync-https: Update rtc after setting system time'" + date: 2022-04-26T19:32:46.066Z + - commits: + - subject: "networkmanager: Use default DHCP timeout" + hash: 6175420731baa349c8d197151189462a23b2f460 + body: > + This reverts 5047757 where we set the global DHCP timeout for + ipv4 to + + infinity to mitigate problems with routers that do not respond to DHCP + + requests in time. + + + This however causes issues on some routers, which after power cycle fail to + + renew leases after they are expired. + + + The same ipv4.dhcp-timeout can be specified on per connection basis. Since + + the case with lease renewal due to router power cycle is a more common case, + + it is better to keep the global dhcp-timeout default unmodified. If the + + setting needs adjustment then it can be overwritten in the particular + + connection profile. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Zahari Petkov + signed-off-by: Zahari Petkov + author: Zahari Petkov + nested: [] + version: meta-balena-2.98.5 + title: "'networkmanager: Use default DHCP timeout'" + date: 2022-04-26T11:36:14.839Z + - commits: + - subject: Disable Engine startup timeouts + hash: c4ce541526455c8cb891e7c76889e0d4cb2735b1 + body: > + There are known situations in which balenaEngine times out + during + + initialization (for example, during aufs to overlayfs migrations, or + + when restarting a device that was running a large number of containers). + + When these time outs occur, Systemd kills the Engine, causing further + + problems. + + + To avoid these cases, this commit disables timeouts during the Engine + + initialization. + + + This is also aligned with the default Systemd settings distributed with + + the Moby project. + footer: + Signed-off-by: Leandro Motta Barros + signed-off-by: Leandro Motta Barros + Change-type: patch + change-type: patch + author: Leandro Motta Barros + nested: [] + version: meta-balena-2.98.4 + title: "'Disable Engine startup timeouts'" + date: 2022-04-25T22:36:18.725Z + - commits: + - subject: Add renovate configuration + hash: 2537c8eed6f50399ce60b9f2ccc22336fb7cb86a + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.98.3 + title: "'Add renovate configuration'" + date: 2022-04-25T18:07:21.534Z + - commits: + - subject: "balena-config-vars: unit-conf: Correct description" + hash: b1ff3f620ea823239442cfeccd52feef6928f405 + body: | + The os-networkmanager entry had an incorrect description. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "tests: os: Remove sshKeys test" + hash: 579aef0199ed91f31bca301f7dc8ebd517594583 + body: > + This is replaced by an SSH authentication test in the cloud + suite, which + + is more comprenhensive. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "tests: cloud: Add SSH authentication tests" + hash: e9f125a67aa61136fe36a5844ca751984ab679aa + body: > + This new test validates SSH authentication both in production + and + + development mode. + + + A managed device is always accessible via the configured custom keys. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "os-sshkeys: When ssh keys change, regenerate development + configuration" + hash: 0856b6e7acbe41a1bc60afb26906ee5bf9b253a9 + body: > + The behaviour of the SSH connection depends on whether custom + keys are + + present or not. This commit calls out to generate the development mode + + configuration file on ssh key change. + + + Fixes #2530 + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "development-features: use os-helpers-devmode include file" + hash: afb63f9bfb794fa7af14c6e03bf29e85705dbf7f + body: > + The development mode configuration file is now generated on a + helper + + script. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "os-helpers: Add os-helpers-devmode" + hash: dfaef0b9c7d07b31f254c2f9592772a58562f9e9 + body: > + This extracts the generation of the development mode + configuration file + + so it can be shared. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.98.2 + title: "'Apply sshKeys change on development Mode'" + date: 2022-04-25T08:16:24.320Z + - commits: + - subject: "tests/leviathan: Update leviathan to v2.2.4" + hash: 162c36be826eb3028a11fca2266407e8d2570d88 + body: | + Update leviathan from 2.0.4 to 2.2.4 + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.98.1 + title: "'tests/leviathan: Update leviathan to v2.2.4'" + date: 2022-04-23T18:56:56.077Z + - commits: + - subject: Refresh PKI assets from config endpoint + hash: 081fca887b36108bc192ee98da6ba088f9e909b9 + body: > + * Fixes #2569 + + * ensure OpenVPN client always starts with the latest CA certificate + from API config endpoint as this certificate may have changed and + we don't want VPN to be down for ~24 hours until os-config is triggered + by systemd timer + footer: + Change-type: minor + change-type: minor + author: ab77 + nested: [] + version: meta-balena-2.98.0 + title: "'Refresh PKI assets from config endpoint'" + date: 2022-04-23T10:43:47.657Z + - commits: + - subject: Update balena-engine to v20.10.16 + hash: 7affe9d563250d79906ffc26401d8d7beea74114 + body: | + Update balena-engine from 20.10.12 to 20.10.16 + footer: + Change-type: minor + change-type: minor + Signed-off-by: Leandro Motta Barros + signed-off-by: Leandro Motta Barros + Changelog-entry: Update balena-engine to v20.10.16 + changelog-entry: Update balena-engine to v20.10.16 + author: Leandro Motta Barros + nested: + - commits: + - subject: "contrib/init/systemd: update balena-engine.service" + hash: 4d3b831bfbe197a68792a3baf33cbea639811763 + body: | + Currently this file is used by Buildroot. + footer: + Change-type: patch + change-type: patch + Signed-off-by: TIAN Yuanhao + signed-off-by: TIAN Yuanhao + author: TIAN Yuanhao + nested: [] + version: balena-engine-20.10.16 + title: "'update balena-engine.service'" + date: 2022-04-07T05:22:26.128Z + - commits: + - subject: Log more info upon when raising errRootFSMismatch + hash: ab3db5c03663e0b2ee35213ceebf9038e4af6b62 + body: > + We currently do not log any information to help us + understanding the + + underlying issue -- not even to identify what is the exact point in + + which the error is raised. This commit improves on this situation. + footer: + Signed-off-by: Leandro Motta Barros + signed-off-by: Leandro Motta Barros + Change-type: patch + change-type: patch + author: Leandro Motta Barros + nested: [] + version: balena-engine-20.10.15 + title: "'Configure Renovate'" + date: 2022-04-05T07:56:50.137Z + - commits: + - subject: Add more integration tests for deltas + hash: 59f6cd6dc32ee178532dbf7595933ef606cebf39 + body: > + This adds two new integration tests: + + + * TestDeltaSize: this is meant to catch regressions on delta sizes. It + generates deltas and compare their sizes with the delta sizes we get + as of now. If the size increases, the test fails. + * TestDeltaCorrectness: checks if applying a delta indeed results in the + same image as we had originally. + + A number of different test cases (different images with distinct + + features) are tested for each of these integration tests. + footer: + Signed-off-by: Leandro Motta Barros + signed-off-by: Leandro Motta Barros + Change-type: patch + change-type: patch + author: Leandro Motta Barros + nested: [] + version: balena-engine-20.10.14 + title: "'Add more integration tests for deltas'" + date: 2022-04-01T13:30:28.649Z + - commits: + - subject: Add link to post to test landr + hash: 4688b2395c49dcd350a6107824da61a13a1c4765 + body: "" + footer: + Change-type: patch + change-type: patch + author: andrew + nested: [] + version: balena-engine-20.10.13 + title: "'Add link to post to test landr'" + date: 2022-03-09T23:12:06.832Z + version: meta-balena-2.97.0 + title: "'balena-engine: Update to 20.10.16'" + date: 2022-04-23T01:23:49.298Z + - commits: + - subject: "kernel-balena: Mention https protocol for github repository" + hash: e3ee5b0b70827fa5ae1f70b0721d9125885affe5 + body: | + Github now requires for the https protocol to be used + when cloning repositories. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.96.1 + title: "'kernel-balena: Mention https protocol for github repository'" + date: 2022-04-22T17:25:18.183Z + - commits: + - subject: "mobynit: Update to v0.2.0" + hash: 1a6dbc795aa2546f38bbd4cef30d77f167e60182 + body: | + Fixes #2589 + footer: + Change-type: minor + change-type: minor + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.96.0 + title: "'mobynit: Update to v0.2.0'" + date: 2022-04-22T12:42:16.844Z + - commits: + - subject: "resin-device-register: avoid blocking the flasher when not connected" + hash: b5c521404c14df8a5d14e2789c97eebe79eb7d96 + body: > + Starting with v2.91.6 device provisioning will not start if the + device + + was unable to register in the cloud due to lack of internet connectivity. + + To avoid this, we switch to retrying 3 times with the usual 2 second delay + + between attempts, after which the flashing process will start. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.95.17 + title: "'resin-device-register: improve provisioning'" + date: 2022-04-22T08:33:14.274Z + - commits: + - subject: Package iwlwifi-QuZ-a0-hr-b0 firmware separately + hash: 261534942e5fe5b60680f51b129f33f00363a88e + body: | + We add this fw on its own package so that boards can add it to + rootfs (for Intel NUC 11th generation more specifically) + footer: + Changelog-entry: Package iwlwifi-QuZ-a0-hr-b0 firmware separately + changelog-entry: Package iwlwifi-QuZ-a0-hr-b0 firmware separately + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.95.16 + title: "'linux-firmware: Package iwlwifi-QuZ-a0-hr-b0 firmware'" + date: 2022-04-19T13:00:33.214Z + - commits: + - subject: "kernel-headers-test: clean tools like fixdep" + hash: bdc217b2da79349989f32b65454a4e5e2509fa1a + body: | + Let's ensure tools like fixdep are built in container + and not reused from the yocto build, otherwise they + may not run if they were linked against a different + version of libc that may not be available in the kernel + modules build container. + + This fixes the following error encountered when doing + a Poky Honister build for the balena-intel repository: + + scripts/basic/fixdep: /lib64/libc.so.6: version `GLIBC_2.34' + not found (required by scripts/basic/fixdep) + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.95.15 + title: "'kernel-headers-test: clean tools like fixdep'" + date: 2022-04-06T12:39:17.305Z + - commits: + - subject: Updates SIM info for soracom and provides docs. + hash: 4706cc1f52e345e3409cd9580cdc9a1372545164 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Bucknall + signed-off-by: Alex Bucknall + author: Alex + nested: [] + version: meta-balena-2.95.14 + title: "'Updates SIM info for soracom and provides docs.'" + date: 2022-04-06T08:53:44.650Z + - commits: + - subject: "test/hup: fix unmounting error" + hash: 3a318468d90632360109aeea994a51819347742a + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.95.13 + title: "'test/hup: fix unmounting error'" + date: 2022-04-06T07:56:32.752Z + - commits: + - subject: "grub-efi: Remove patch passing secure boot status to the kernel" + hash: fb171dc507348e11ab2c6ed894289f51689fc874 + body: > + This was originally introduced in combination with a kernel + patch backported + + from Red Hat kernel that would enable kernel lockdown when secure boot + + is enabled. We have since changed the approach, dropped the kernel patch + + and when in secure boot mode use a different GRUB config file that enables + + lockdown on kernel command line unconditionally. + + + That said, while the patch works fine, we do not really need it and it adds + + extra overhead porting it to newer yocto versions so there is no point keeping + + it at this moment. If in the future there is need for the kernel to know + + whether it is in secure boot mode or not, we can roll this back and rebase. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.95.12 + title: "'grub-efi: Remove patch passing secure boot status to the kernel'" + date: 2022-03-31T14:45:57.845Z + - commits: + - subject: "hostapp-update: Mount data partition on target balena/tmp" + hash: 548c6c08f041f69786f0092eb2397f2fbf8e7e86 + body: > + In most cases there is not enough space on rootfs to extract + + and load a local hostapp image when the balena-host tmpdir + + is on the same partition. + + + This uses a data mount to ensure temporary extracted files of the + + compressed image will not fill the target sysroot. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.95.11 + title: "'hostapp-update: Mount data partition on target balena/tmp'" + date: 2022-03-30T17:20:46.022Z + - commits: + - subject: "tests/os: check supervisor is pulled after purge" + hash: 58a645684921797383602311821522604064fd62 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.95.10 + title: "'tests/os: check supervisor is pulled after purge'" + date: 2022-03-30T11:28:54.776Z + - commits: + - subject: "tests: update leviathan to 2.0.4" + hash: b90c280d8f08497fcf2ca7b5329bdb7e7dc7c22a + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: "tests: update config for new leviathan version" + hash: 788cacc8daadf487698e28e2ad308cc54f1d96b4 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.95.9 + title: "'tests: update config for new leviathan version'" + date: 2022-03-28T12:52:25.738Z + - commits: + - subject: "resindataexpander: Check and fix end GPT if necessary" + hash: 5d2435e17851f44f17cfba491b01f766d7930317 + body: > + Under certain circumstances that we haven't reproduced, + + it is reported that the alternate GPT may become corrupt, + + preventing the device from booting. + + + Should this happen, we use sgdisk to check and recover the end gpt + + from the main one. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.95.8 + title: "'Add gpt check'" + date: 2022-03-25T08:08:23.471Z + - commits: + - subject: "hostapp-update-hooks: Always update legacy development variants to + development mode" + hash: 8c7bd8d87d0db97851528f97c4853097c63273e4 + body: > + A legacy development image will update to development mode + enabled + + independently of whether the newOS is configured for development mode or + + not. The only case when a hostapp has developmentMode set is when locally + + building with `OS_DEVELOPMENT`. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.95.7 + title: "'Always update legacy development variants to development mode'" + date: 2022-03-23T12:47:07.162Z + - commits: + - subject: "balena-supervisor: Use architecture instead of device type to query + API" + hash: 419e1eefe64b6e5ffc9ff370e50cd256a319ef2c + body: > + This caters for the use case of custom device types that are not + + registered in balena-cloud but still need to fetch the supervisor from + + balena-cloud's registry by querying the `supervisor_version` endpoint, + + for example when using openBalena. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "update-balena-supervisor: Support passing command line image argument" + hash: 227fea72a17c00bcd7e8ee069414ccc006703072 + body: > + For balena-cloud managed devices, the supervisor update data is + managed + + by the API. + + + Providing the image name in the command line provides an update path + + for unmanaged devices, manual updates on ESR devices (which currently + + do not allow dashboard based updates) and openBalena use cases. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.95.6 + title: "'Supervisor update enhacements'" + date: 2022-03-22T15:05:51.376Z + - commits: + - subject: "tests/kernel-overlap: Prevent test run failure on older kernels" + hash: 3d230a9d003988924b6c16720d554c9f48a05c16 + body: > + The issue that this test is aimed at has been introduced in + + kernel versions above 4.13. On older kernels like for instance + + 4.9, the test will not pass. + + + Let's run this test on kernel versions where the issue was present. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.95.5 + title: "'tests/kernel-overlap: Prevent test run failure on older kernels'" + date: 2022-03-21T15:04:59.766Z + - commits: + - subject: "tests/os: wait for osconfig service to be inactive" + hash: da59749c901057a55adaf990643fc235480156aa + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.95.4 + title: "'Fix dns test'" + date: 2022-03-17T17:38:43.827Z + - commits: + - subject: "balena-supervisor: Update balena-supervisor to v12.11.38 Ensure + preloaded applications are ran when no internet is available on + first run" + hash: 08058f8671704f7d925ed97c3202b3620570a95b + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: 20k-ultra <3946250+20k-ultra@users.noreply.github.com> + signed-off-by: 20k-ultra <3946250+20k-ultra@users.noreply.github.com> + author: 20k-ultra + nested: [] + version: meta-balena-2.95.3 + title: "'balena-supervisor: Update balena-supervisor to v12.11.38'" + date: 2022-03-15T23:32:43.991Z + - commits: + - subject: "kernel-balena: Disable building gcc plugins" + hash: bd8d2de9983f47e46ffa0e689be88c5b12e46617 + body: > + Since + https://github.com/raspberrypi/linux/commit/1eee36a5520b5a89fb4d0d6af6f9cb0217a3164f + + was merged and included in kernel versions after 5.10.84, + + building the kernel-modules-headers fails due to various missing + + headers from the gmp and mpc packages. This problem is visible + + only after upgrading to a newer kernel, because until now the + + gcc plugins kernel config was not enabled at all, due to the + + failed check in the above mentioned patch. + + + Since we are not using the functions provided + + by the gcc plugins anyway, we can disable this + + config. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.95.2 + title: "'kernel-balena: Disable building of gcc plugins'" + date: 2022-03-11T17:26:05.533Z + - commits: + - subject: "tests: Add leviathan v2.0.0 as a submodule" + hash: 49b6fd8e07edc4facdef13795fa4fe079958977c + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/cloud: Cleanup wait until loops in cloud suite" + hash: 65775fdf08d260ee7a87dbe262038bc9831780f7 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/hup: Remove bluebird and this.context.get references" + hash: be472ff82d27a0ff5a67fd3202ae15e63aafb685 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/os: Remove bluebird and this.context.get references" + hash: c3570af3bd58f5fd8a134ffe5d71bce970b3ade8 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/cloud: Remove bluebird and this.context.get references" + hash: 8c901905dadfb66a157f05ed9fcea2f6499e15bd + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests: Cleanup suites config to support both testbot and qemu workers" + hash: e48e71e0bd2533806e7eff31f74b3e3a243e9493 + body: > + This avoids having to make perl regex changes in yocto-scripts + or in Jenkins. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/cloud: Update cloud suite to support core on client" + hash: 428d9d616edacbaf70df9df0f76bc731af247c98 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/hup: Update hup suite to support core on client" + hash: 2f386863408f32b0197090e786c46605e2ab7fcb + body: > + This also removes the need for a registry and performs hup from + file. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "tests/os: Update os suite to support core on client" + hash: fe68f8192c4875b575f86bc41c6e3ff9fb27f587 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.95.1 + title: "'tests: Suite updates for compatiblity with core moved to client'" + date: 2022-03-08T18:48:12.462Z + - commits: + - subject: Adds modem test suite + hash: c3cc64723e8a8d50aa5c6d4ece52d2c5a3b90e8a + body: "" + footer: + Change-type: minor + change-type: minor + Signed-off-by: Alex Bucknall + signed-off-by: Alex Bucknall + author: Alex + nested: [] + version: meta-balena-2.95.0 + title: "'Adds modem test suite'" + date: 2022-03-04T18:27:18.723Z + - commits: + - subject: Use by-state symlink for mounting the EFI partition when split + hash: 42d8ac8daaee2a67d5666c7220e1b9cd0e013e6e + body: > + In the current state the by-state symlink for balena-efi + partition + + is not generated for two reasons: + + - 60-resin-update-state.rules only react to resin-* partition names + + - the root device is not identified correctly in resin_update_state_probe + for LUKS devices + + This patch fixes both the issues and makes use of the by-state symlink + + instead of by-label. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "os-helpers: add TPM2 helpers" + hash: 78f7da3a3cdf1942861195238a6cea691899a140 + body: > + This helps with code duplication in flasher and initrd scripts + using + + the TPM to manipulate LUKS passphrase. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: Add PCR protection policy to TPM operation unlocking LUKS passphrase + hash: aa76a9b45e18192ecaa67f17ef68f9cfc4d66a66 + body: > + This patch adds the check for PCRs + + - 0 - firmware/UEFI blob + + - 1 - firmware/UEFI config + + - 2 - Expansion card firmware blobs + + - 3 - Expansion card firmware configs + + + The full protection is only applied on first boot after provisioning, + + flasher only locks against PCRs 0, 2 and 3. + + This is because when using flasher, the environment is not in the same + + state as the one we want to lock to. In particular the boot order is + + different (flasher is booted from a different drive than the resulting OS). + + As for now we were not able to find a better solution than fully locking + + only on first boot. This means the device must be booted in a secure + + environment at least once after provisioning. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.94.5 + title: "'Add PCR protection to LUKS/TPM manipulation'" + date: 2022-03-04T13:12:52.505Z + - commits: + - subject: "balena-supervisor: Fix supervisor tagging command" + hash: d25d6289b14edd9111d6abbc45448693ca872036 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.94.4 + title: "'balena-supervisor: Fix supervisor tagging command'" + date: 2022-03-04T05:54:28.770Z + - commits: + - subject: "tests/os: fix bracket in bbb overlay test" + hash: c11bc9d3e8ad4102f1b0d38a4d2658222687e156 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.94.3 + title: "'tests/os: fix bracket in bbb overlay test'" + date: 2022-03-02T12:06:17.701Z + - commits: + - subject: "tests: Enhance BeagleBone Black u-boot overlay test" + hash: 0051fa51e15b092f16b264cdf4a0147e37e5fd25 + body: | + Let's make sure that when we finish the test we leave + uEnv.txt as before we started the test. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.94.2 + title: "'tests: Enhance BeagleBone Black u-boot overlay test'" + date: 2022-03-02T09:01:45.548Z + - commits: + - subject: "balena-image: Default image type to balenaos-img" + hash: a3c276a1058d05e66991871bf167079fc2824843 + body: > + This avoids device repositories having to specify it, and it can + always + + be overwritten in append files. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: Remove legacy resinhup images. + hash: d895c90e6382da56f7327305b3def4ab5b37742c + body: > + These image types are no longer generated and are not used for + hostOS + + updates any longer. + footer: + Changelog-entry: Remove legacy resinhup images. + changelog-entry: Remove legacy resinhup images. + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.94.1 + title: "'images: Remove generation of legacy resinhup images'" + date: 2022-03-01T20:45:50.839Z + - commits: + - subject: Update balena-supervisor to v12.11.36 + hash: 8e9c3d992a5d681701580f52e5f9ba3d696bf1d8 + body: > + Update balena-supervisor from 12.11.32 to 12.11.36 + + + Includes a fix for https://github.com/balena-os/balena-supervisor/issues/1890 + footer: + Change-type: patch + change-type: patch + Changelog-entry: Update balena-supervisor to v12.11.36 + changelog-entry: Update balena-supervisor to v12.11.36 + Signed-off-by: Robert Günzler robertg@balena.io + signed-off-by: Robert Günzler robertg@balena.io + author: Robert Günzler + nested: + - commits: + - subject: Ignore selinux security opts when comparing services + hash: 1b54ce8bfd5dd3d1f14f573a0bfe17ee1dd81630 + body: > + The moby engine v20.x.y adds some selinux [security + configurations](https://docs.docker.com/engine/reference/run/#security-configuration) + + depending on the [container configuration](https://github.com/moby/moby/blob/master/daemon/create.go#L214). + + This would cause the supervisor to enter a service restart loop as the + + current and target service configurations will never match. The + + supervisor now ignores selinux specific security options since those are + + not supported by balenaOS. + footer: + Closes: "#1890" + closes: "#1890" + Change-type: patch + change-type: patch + author: Felipe Lalanne + nested: [] + version: balena-supervisor-12.11.36 + title: "'Ignore selinux security opts when comparing services'" + date: 2022-02-23T21:15:31.484Z + - commits: + - subject: Add troubleshooting notice for macOS + hash: 6ab314f8c0af647cdb0537b6a396ccb3d5ce060f + body: > + When developing on macOS (Darwin) DBus may have to be + installed. + footer: + Change-type: patch + change-type: patch + Signed-off-by: fisehara + signed-off-by: fisehara + author: fisehara + nested: [] + version: balena-supervisor-12.11.35 + title: "'Add troubleshooting notice for macOS'" + date: 2022-02-16T19:41:22.558Z + - commits: + - subject: Create `touch` and `getBootTime` utility functions + hash: a4d91d381a3e2dfda182bb7809a6d78b18aafebf + body: "" + footer: + Change-type: patch + change-type: patch + author: Felipe Lalanne + nested: [] + - subject: Add update lock check to PATCH /v1/device/host-config + hash: 5f1a77da25b9d0bd07c2fbec85cb5deefae18884 + body: > + This is necessary with the changes as of balenaOS + 2.82.6, which watches config.json + + and will restart balena-hostname and some other services automatically on file change. + footer: + Change-type: patch + change-type: patch + Relates-to: "#1876" + relates-to: "#1876" + Signed-off-by: Christina Wang + signed-off-by: Christina Wang + author: Christina Wang + nested: [] + version: balena-supervisor-12.11.34 + title: "'Make the supervisor more resistant to restarts during config changes'" + date: 2022-02-15T15:58:42.783Z + - commits: + - subject: Add support for local ipv6 reporting + hash: 72f6cbe4c7225623ed99083d20c4a2cb2f3b70ac + body: > + With more and more devices in ipv6 only networks, this + ensures the + + local addresses are reported to the cloud as part of the state patch. + footer: + Change-type: patch + change-type: patch + author: Felipe Lalanne + nested: [] + version: balena-supervisor-12.11.33 + title: "'Add support for local ipv6 reporting'" + date: 2022-02-09T17:57:09.778Z + - subject: "meta-resin-pyro: make sure $GO is set" + hash: f618d4575068be226b2fd6da5b74d6604236e5d5 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Refactor balena-engine recipe to more closely resemble upstream + hash: 1280c281d79b413d885e44dbf507a2b59005f25b + body: "" + footer: + Change-type: patch + change-type: patch + Changelog-entry: Refactor balena-engine recipe to more closely resemble upstream + changelog-entry: Refactor balena-engine recipe to more closely resemble upstream + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Update Golang recipes to 1.16.2 + hash: 475adc63cf7902fbc91a32e53a02af8d275daf2c + body: | + This reverts commit 4303346ccda6d3e3c4f83cc3782c73a6d1adb494. + footer: + Change-type: minor + change-type: minor + Changelog-entry: Update Golang recipes to 1.16.2 + changelog-entry: Update Golang recipes to 1.16.2 + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Update balena-engine to v20.10.12 + hash: ae632d7fb7cf10e0770c6f511dd9f454ee0d9dac + body: | + Update balena-engine from 19.03.30 to 20.10.12 + footer: + Change-type: minor + change-type: minor + Changelog-entry: Update balena-engine to v20.10.12 + changelog-entry: Update balena-engine to v20.10.12 + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: + - commits: + - subject: "storagemigration: keep going if migration fails" + hash: 2bde63c800b1df72fba7161d62b5b6da84a8d390 + body: > + the only hard error is if rollback (failcleanup) fails, + in all other + + scenarios we want the daemon to continue starting with the new + + graphdriver + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "graphdriver/copy: fix handling of sockets" + hash: 17a198cb53a53da456c848bf303dc3917ca538c5 + body: > + previously switch would treat S_IFIFO and S_IFSOCK as + the same, passing + + both of the to mkfifo, which lead to EINVAL errors when trying to create + + the socket, we instead handle socket separately. + + + Also adds cases for this to the unit and integration tests of the + + migrator. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "pkg/storagemigration: use graphdriver/copy.DirCopy" + hash: ffbb608492405488bff5e31ea62c0249fb416106 + body: | + instead of our own implementation + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Prune Jenkinsfile + hash: ea14e503181bbb248a4bed1b86a227d9c214cbfb + body: > + we are not using it for our CI, and it confuses jenkins + set up on the + + balena-os org + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Backport platform-detection fixes from containerd + hash: 9f71253561b1cd2f262ec0d6e81c5fbd09a7a0a1 + body: > + See https://github.com/containerd/containerd/pull/4530 + + and `git log ad25c1a9c34361e4071f508b9a91946b05fce165^..2055e12953bb538228d8d9fe627fa545d7cf82be ./platforms/` + + in the containerd repo + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "storagemigration: capture failcleanup logs in logfile" + hash: 4f7f543eff08766bc584024afdb57760dfb52130 + body: > + reorder the defer statements in the migrate function to + only teardown + + the logger after the failcleanup function ran. otherwise errors logged + + there won't show up in the logfile + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "storagemigration: move logic to package" + hash: 001835bf61172fdcfdb0416e000852ff05683c71 + body: > + This brings all migration logic into a single call into + the + + storagemigration package, which should make future maintenance easier + + and fixes the cleanup logic bug, where the old aufs root would never be + + cleaned up. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: prevent slice oob access in concatReadSeekCloser + hash: 1e7045ac957db17fe9838602c9339c0b5ae5c282 + body: "" + footer: + Change-type: patch + change-type: patch + author: Martin Rauscher + nested: [] + - subject: Make layer download resuming more resilient + hash: 582487f832c59c2f734a780ab0492833f29002c9 + body: > + This commit changes the way we retry layer downloads + after failures with + + the goal of making it more resilient, especially for cases involving + + large layers and unreliable network connections. + + + These are the changes: + + + * Make sure we also retry after failures in `v2LayerDescriptor.reset()`. + This method creates a new HTTP request to resume a failed download, + and therefore depends on a working network to succeed. + * Wait exponentially longer times between retries (instead of retrying + immediately as before). This shall increase of success in case of + network issues that take longer to get resolved. + * Increase the number of retries to 10. + + * Reset retry count whenever we successfully download anything at all. + The idea is that we want to give up downloading only after a long + continuous period of failures. Combined with the exponential back-off + strategy and increased number of retries described above, a layer pull + will fail only after about 17 minutes. + * Add a bit more logging to help with troubleshooting. + footer: + Change-type: minor + change-type: minor + Signed-off-by: Leandro Motta Barros + signed-off-by: Leandro Motta Barros + author: Leandro Motta Barros + nested: [] + - subject: Drop CODEOWNERS + hash: e70e1a9fe622563719993626e834c85efc17905c + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "pkg/storagemigration: poperly handle errors during state creation" + hash: b8170db554ac1d1abb3adcfe1f6265701e9147c5 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "pkg/storagemigration: allow writing logs to separate file" + hash: 77536d3866ac706f049a02d2eed44a7df1cb779c + body: > + This can be used to keep a record of failed migrations. + + Only runs if BALENA_MIGRATE_OVERLAY_LOGFILE is set to a path on disk. + + The log file will be deleted if there are no errors. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "storagemigration: defer commit to next start" + hash: bd1628e67136b78ca7e7c83c5569666207d28a84 + body: > + With this change the aufs data is kept around until the + next time we + + start. If we find both an aufs AND an overlay2 storage root, we cleanup + + the aufs data. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Lock destination layers while delta is being processed + hash: 0ad4281e11e4d3ef263010787aecd244c0ce333d + body: > + During fingerpinting of the source image the destination + layers are not + + exepmt from being released (e.g. when `balena image rm `) is run + + simultaneously. + + Similarly when processing the destination layers to generate deltas we + + only hold one reference at a time, leaving the subsequent layers + + vulnerable to the same issues. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Add aufs to overlay2 migrator + hash: b3a976b1294469e75222752bdc1fdc06bfcc97b8 + body: > + The main logic is under pkg/storagemigration. This is + able to seamlessly + + migrate images and containers from AUFS to overlay2. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Update the README + hash: 4a95df5bc30a40389191d9b2417b0f9bf35fefdc + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Cleanup repo + hash: de3a38940ab7410fbb3fd719190db401e419b77d + body: | + remove some obsolete files/directories + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Add a SECURITY.md + hash: 477d70db260a8dda71e2dba12ccd9f169fe9b480 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "top_unix.go: allow busybox ps with no args" + hash: 6617c4d76d275e05d6055d91aabbd7df25332342 + body: > + Busybox in balenaOS is compiled with desktop mode + disabled, + + so features like `-ef` and providing pids via `-q` are not + + supported. Add a 3rd condition to try ps with no args and allow + + parsePSOutput to filter by pid. + + + https://github.com/balena-os/balena-engine/issues/236 + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: Bump balena-os/balena-containerd to 1da48a8 + hash: ab1a49816fd8ae2ec73dc83152ad06a05a6b9799 + body: | + Fixes balena-engine-runc version format. + footer: + Change-type: patch + change-type: patch + Connects-to: balena-os/balena-containerd#6 + connects-to: balena-os/balena-containerd#6 + Signed-off-by: Tian Yuanhao + signed-off-by: Tian Yuanhao + author: Tian Yuanhao + nested: [] + - subject: Add changelog template to allow generating nested changelogs + hash: f272b547ee6c27c41be70da6b913699a2c5ef928 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Update github issue and pr templates + hash: 123449f806b691e3d193c340a9e72285839f8bb9 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Update codeowners + hash: 538f01a22413db44ce0304dedb704c285189d3a5 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "hack: Fix CLI versioning" + hash: a9d487d0751f7ad293ab66b3d24734505b41f85b + body: > + https://github.com/balena-os/balena-engine-cli/commit/20c19830a95455e8562551aad52c715ad0807cc6 + + moves the versioning variables to a separate package. We have to adjust + + the location in hack/make.sh too + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Fixed typos in getting-started.md docs + hash: f162d15114fdb5d2ea87eee08979f1a5882f52cc + body: "" + footer: + Closes: "#209" + closes: "#209" + Change-type: patch + change-type: patch + Signed-off-by: Miguel Casqueira + signed-off-by: Miguel Casqueira + author: Miguel Casqueira + nested: [] + - subject: Add integration tests for hostapp handling + hash: 0c18f60f1124567e51c752bb76d801c97bef5916 + body: > + This refactors mobynit to allow for testing parts of it + from + + the integration tests. + + Also adds some sanity checks for "bare" containers. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Fix container data deletion + hash: bbdf9e2137de87696d758847a2eb544eb04d828e + body: > + Previous implementation was not comparing graphdriver + content to layerStore mounts. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: "overlay2: Add List support" + hash: 90a45216050664742ed8088d5a00304dd097a791 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: "aufs: Add List support" + hash: c2f02fec80c89a7ad907cb21a4dedee8db854fac + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: "layer: Remove unreferenced driver layers on create" + hash: 152736dfbb764e6c74f1afc71df853e93488a91f + body: > + Earlier engine versions were not properly persisting + cacheID + + in layer metadata. As a result, because of abruptly terminated transactions, + + a lot of devices have unreferenced graphdriver layers on disk. + + + With this change, the engine will be able to clean up such unreferenced layers. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: "layer: Prune unused data on layer store creation" + hash: 01e4688f8c4f42e769d319353accdc0c34ffcc0b + body: > + When layer store is created, its tmp directory may + contain information + + about transactions that were abruptly treminated during the previous process run. + + Such data is now identified before any new transactions can be created, + + and a background process is started to delete both meta data and graph driver layeres. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: "layer: Persist cacheID early on transaction start" + hash: b1709e0881b3ed61c1608ef5ed19acf8008b2275 + body: > + If the engine process is terminated during the layer + extraction transaction, + + before Commit or Cancel is called on the transaction, a new FS layer can be created + + by the graph driver without any link to the layers metadata. + + + This change ensures we don't perform any actions on the graph driver storage until + + the FS layer ID (the cacheID) is persisted as a part of the transaction data. + + + We can use this data to clean up the graph driver storage on next process start + + deleting all data associated with the transactions terminated abruptly. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: "pkg/authorization: Fix test failures on macOS" + hash: 6e9af0514461f1ce3945ed308ef13e3ddbc7dc4f + body: > + On macOS, unit tests where failing with + + + root@c4101a75c792:/go/src/github.com/docker/docker/pkg/authorization# go test . + + --- FAIL: TestAuthZRequestPluginError (0.00s) + authz_unix_test.go:295: listen unix authz-test-plugin.sock: bind: file name too long + --- FAIL: TestAuthZRequestPlugin (0.00s) + authz_unix_test.go:295: listen unix authz-test-plugin.sock: bind: file name too long + --- FAIL: TestAuthZResponsePlugin (0.00s) + authz_unix_test.go:295: listen unix authz-test-plugin.sock: bind: file name too long + time="2020-04-07T10:07:04Z" level=warning msg="Request body is larger than: '1048576' skipping body" + + --- FAIL: TestMiddlewareWrapHandler (0.00s) + authz_unix_test.go:295: listen unix authz-test-plugin.sock: bind: file name too long + FAIL + + FAIL github.com/docker/docker/pkg/authorization 0.120s + + + This change moves the socket creation from a working test directory to a tmp directory, + + so the path is shorter. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Roman Mazur + signed-off-by: Roman Mazur + author: Roman Mazur + nested: [] + - subject: Move ci to balenaCI + hash: 9182c33542feb05ae46a66f2cfdeeefef6fa7333 + body: "" + footer: + Change-type: patch + change-type: patch + Connects-to: https://github.com/balena-io-modules/detectorist/pull/27 + connects-to: https://github.com/balena-io-modules/detectorist/pull/27 + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "contrib: Add balena-engine version of dind container" + hash: ef813f867206df9ae6f3ddf1cb5d3915f8718cc5 + body: > + This modifies https://github.com/docker-library/docker + for balena-engine + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "build.sh: Disable btrfs,zfs,devicemapper graphdrivers" + hash: 88a5416e94945bc6998ba00723da26b738eb5bcd + body: > + We don't support these on balenaOS anyway and we are + planning to drop + + support for them once we move to the new balenaCI-based pipeline. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "Bump CLI dependency to include fix for #178" + hash: de8d373699d5e45676a769f6ff5927e95df3dade + body: "" + footer: + Connects-to: https://github.com/balena-os/balena-engine/issues/178 + connects-to: https://github.com/balena-os/balena-engine/issues/178 + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Bump CLI dependency to include --cidenv flag + hash: bf7bfef7f8e8dee6dd7c17a81a69bc5ea891bec7 + body: "" + footer: + Change-type: patch + change-type: patch + Connects-to: https://github.com/balena-os/balena-engine-cli/pull/8 + connects-to: https://github.com/balena-os/balena-engine-cli/pull/8 + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Allow passing container ID to container via environment variable + hash: 635b48ca954c92ce7e35b2667c2001a52f43ef6d + body: > + This adds a new ContainerIDEnv field to HostConfig that + can pass an + + environment variable name, which will be set to the container ID and + + passed to the container environment. + footer: + Change-type: patch + change-type: patch + Connects-to: https://github.com/balena-os/balena-engine/issues/173 + connects-to: https://github.com/balena-os/balena-engine/issues/173 + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "contrib/install.sh: Add details to the success message" + hash: 876ea49bb8e948c97cd959fcb7413e84e33f7006 + body: > + First warn the user that balena-engine-daemon needs to + be started. + + Including instructions on how to make the system ready for that: + + - service files + + - balena-engine group + + - how to allow non-root users to run containers + footer: + Connects-to: "#51" + connects-to: "#51" + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "contrib/install.sh: Rename balena to balenaEngine in ASCII art output" + hash: 4d922b5df74978275dab83e7564359c0dfe99797 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "contrib/install.sh: Fail on error" + hash: f93ce1f5226a882b0115cf321fc40e7d55f0e583 + body: > + The install script should not print the success message + if it didn't + + actually succeed to install anything + footer: + Connects-to: "#54" + connects-to: "#54" + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Add daemon flags to configure max download/upload attempts during + pull/push + hash: feaeb5dd826eeb0a95908dfd91704238a59e8257 + body: > + The defaults remain the same (dl=5, ul=5), but are moved + from distribution/xfer to + + daemon/config. + footer: + Connects-to: https://github.com/balena-os/balena-engine/issues/160 + connects-to: https://github.com/balena-os/balena-engine/issues/160 + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "aufs,overlay2: Add driver opts for disk sync" + hash: 4fed10dd3a66e37f0f128b2f9fa227a9a6800da2 + body: > + This patch adds a driver option to enalble/disable the + to disk syncing introduced in + + 684d8ba6109c853b355bf11ca3733c4099f14b92. + + + The default is still to sync all currently mounted filesystems before + + reporting an ApplyDiff as successful. + footer: + Connects-to: https://github.com/balena-os/balena-engine/issues/133 + connects-to: https://github.com/balena-os/balena-engine/issues/133 + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Fix double locking in the event handling code of OOM events + hash: d0bc0e5326438656f7d41a1f25ae621693777c2f + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "integration-tests: Add test for containers with memory,cpu + constraints" + hash: ff2ac4d6823dfc30c115499a5d6f908752ea9223 + body: > + The only test from integration/ that covers any resource + constrained + + container scenarios is the OomKilled check in integration/container/kill_test.go + + + This adds two addional checks that try to create, startk, stop and + + inspect a busybox container with: + + a) a memory constraint like: balena-engine run -m 32m .. + + b) a memory constraint like: balena-engine run -cpus ".5" .. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Update Dockerfiles used for build to Go 1.10.8 + hash: fa51b5b458889c413f2ab82171e0f5fe3b3def5e + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "travis: Use the minimal machine" + hash: 1f6ab50f0cc20d21a5719e4a00f5407f231ed6f2 + body: > + Since we build in docker anyway we can save the time it + usually takes to + + set up the Go environment. + + See https://docs.travis-ci.com/user/languages/minimal-and-generic/ + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Add cli for tagging delta images + hash: 547a76a4924cf02e104fb31301f548a11c7bc4bb + body: > + Update vendor.conf and vendor/ to include + https://github.com/balena-os/balena-engine-cli/pull/7 + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: Allow tagging of image deltas on creation + hash: 7f569a1e2407800e1c5f5d94f715c4313c5c4300 + body: > + Similar to how the build command allows tagging of + images this allows + + specifying a repo:tag indentifier to tag the delta with + footer: + Requires: https://github.com/balena-os/balena-engine-cli/pull/7 + requires: https://github.com/balena-os/balena-engine-cli/pull/7 + Change-type: minor + change-type: minor + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "docs: Fix Docker capitalisation in balenaEngine docs" + hash: 06a6c66a5c69eed887d75030db211314449bb3d4 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Paulo Castro + signed-off-by: Paulo Castro + author: Paulo Castro + nested: [] + - subject: Update balenaEngine logo in README.md + hash: fccd0f311c732a74bdc02b2d14254f1ff13ac4a0 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Paulo Castro + signed-off-by: Paulo Castro + author: Paulo Castro + nested: [] + - subject: Disable incompatible integration tests + hash: 55bd77642535e56fa47d54d7cd1e86b318e17644 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Paulo Castro + signed-off-by: Paulo Castro + author: Paulo Castro + nested: [] + version: balena-engine-20.10.12 + title: "'Update to moby v20.10.11'" + date: 2022-02-18T11:34:33.484Z + - commits: + - subject: Merge upstream v20.10.11 + hash: 8bd50366a9390750523562b3be8087c87e977fda + body: "For full changelog see: + https://github.com/balena-os/balena-engine/blob/20.10-b\ + alena/CHANGELOG.md#2021-12-09-upstream-release" + footers: + change-type: major + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + version: balena-engine-20.10.11 + date: 2021-12-09T12:00:00.000Z + version: meta-balena-2.94.0 + title: "'balena-engine: Update to 20.10.12'" + date: 2022-03-01T18:22:50.587Z + - commits: + - subject: "prepare-openvpn: Make configurable" + hash: a475af4c69a7fafca28009286ddba7e4f3015ae4 + body: > + The prepare-openvpn service needs to be restarted to regenerate + the + + VPN keys when provisioning is finished and the `apiKey` is removed. + + + Note that flasher images make changes to `/mnt/boottmp/config.json` so + + we still need to manually kick `prepare-openvpn` in + + `resin-device-register`, which is preferable to modifying services to + + watch multiple paths. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.93.2 + title: "'Make restart on change'" + date: 2022-03-01T16:49:06.172Z + - commits: + - subject: "tests/cloud: Use deviceID returned from pre-registration" + hash: 7fdddb9a886bef14442a89f4440528a513239645 + body: > + Avoid additional wait and API call when we already have the + device ID. + + + This might also resolve a race condition that has been difficult to + + track down. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.93.1 + title: "'tests/cloud: Use deviceID returned from pre-registration'" + date: 2022-02-28T19:09:38.684Z + - commits: + - subject: "resin-device-register: Use supervisor version label instead of tag" + hash: 8219b38be32cfa5b3674d7d96cf6b81b31e95328 + body: > + This is just a name change that reflects the wider change that + the + + supervisor is no longer fetched from dockerhub but from Balena's registry. + footer: + Change-type: minor + change-type: minor + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-supervisor: Rename repository/tag to fleet/version" + hash: 2d284b2015e3d7f6c6a37a63ce49f6f89da7696d + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "docker-disk: entry.sh: Rename repository/tag to fleet/version" + hash: c308fbc1f040a708d44fda20dc2e81d75b07b6d3 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.93.0 + title: "'Rename repository/tag to fleet/version'" + date: 2022-02-26T15:34:40.619Z + - commits: + - subject: Update ModemManager to v1.18.4 + hash: ac680ef2005ae9c0f263e6fab7755bf29dc37977 + body: "" + footer: + Change-type: minor + change-type: minor + Changelog-entry: Update ModemManager to v1.18.4 + changelog-entry: Update ModemManager to v1.18.4 + Signed-off-by: Zahari Petkov + signed-off-by: Zahari Petkov + author: Zahari Petkov + nested: [] + version: meta-balena-2.92.0 + title: "'modemmanager: Update to v1.18.4'" + date: 2022-02-25T18:11:37.797Z + - commits: + - subject: "resin-device-register: Regenerate VPN credentials on registration" + hash: e6ccbc74b35c900f99998599e61bf36795dd4419 + body: > + Before registration the VPN credentials use the `apiKey`, once + the + + device is registered we need to regenerate the credentials to use the + + `deviceApiKey` instead. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "resin-init-flasher: Wait for resin-device-register to start" + hash: 314047e72cb133dcd531df2e7b8c632024f78694 + body: > + Unless the device has been registered, provisioning reports are + not + + sent to the fleet. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.91.6 + title: "'Improve provisioning'" + date: 2022-02-25T09:14:39.101Z + - commits: + - subject: "suites/os: Add testcase for RPi device-tree" + hash: 682d64ff8cd0290cd4788c332fbe021045299639 + body: | + Upstream kernel added a new fkms overlay for + the Pi4 and CM4 and switched to using it + from overlay-map, however, we were not aware + of this. + + Let's add a vcdbg testcase to warn in case the RPi + firmware fails to load any overlay or dtb, and set + gpu_mem to 64 so that vcdbg can run. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.91.5 + title: "'suites/os: Add testcase for RPi device-tree'" + date: 2022-02-24T22:45:17.483Z + - commits: + - subject: "openvpn: Remove dependency on timesync-http target" + hash: 13cf7c9fef0a6e0df6b042ba34ceaa7a0d005254 + body: > + We want the VPN to start unconditionally even if the + connectivity URL + + is not reachable. + + + The rationale for adding the dependency in the first place was that + + without an initial timesync certificate checks may fail. This can still + + happen, but the VPN will retry continuously and eventually succeed once + + the time is synched. + + + What happens now is that the VPN is delayed until the http sync, so if + + the connectivity URL is blocked or unreachable, but the internet is + + accessible, VPN will not even launch and no remote debugging is possible. + + + Fixes #2508 + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.91.4 + title: "'openvpn: Remove dependency on timesync-http target'" + date: 2022-02-24T20:29:51.915Z + - commits: + - subject: "tests/os: Wait for os-config-json service to be inactive" + hash: 1a7eead77e63c72cc1418a0f87d6b540e7deaa80 + body: | + Wait for os-config-json service to be inactive between tests + so the next changes to config.json are not missed by systemd. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.91.3 + title: "'tests/os: Wait for os-config-json service to be inactive'" + date: 2022-02-24T17:56:40.238Z + - commits: + - subject: "contributing-device-support.md: Updates to board support instructions" + hash: 47230867149db0a526a0dfdfa847e0eec9a3020b + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.91.2 + title: "'contributing-device-support.md: Updates to board support instructions'" + date: 2022-02-23T14:52:43.399Z + - commits: + - subject: "tests/cloud: wait for update lock message in logs" + hash: c50dd793f7409cb4b899e859478730ebe3c576e0 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: "tests/cloud: register teardown before online" + hash: 2b6f8cc7b91472ebb612c60d56044cbc03af3ca8 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.91.1 + title: "'fix journal log retrieval in cloud suite, and try to make override lock + test consistant'" + date: 2022-02-21T10:48:39.255Z + - commits: + - subject: "openssh: Add a dependency on os-sshkeys" + hash: 0abc9213ba004325b77d96541e856aaf93cfdde2 + body: > + This is required so that changes in the public keys are picked + up + + by the SSH server. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-supervisor: Add dependency on root CA" + hash: 64cb45211a909b25170227079a400c2dfc9afae9 + body: > + This is required so that the supervisor picks up a change in the + root CA + + certificate. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena: Add dependency on balena-hostname" + hash: b4d9569261de3a6640394ff416264f9e64c5367b + body: > + This is needed so that the hostname change is picked up by the + container + + applications. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: Make services configurable + hash: eb2028e5ed477ac4626bc55180cd872cd93f67b7 + body: > + Changes to the system configuration will now restart several + services. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "classes: Add balena-configurable" + hash: 5b26f9200e8051859906016e84c03ab3d72a11d1 + body: > + This class adds support to apply configuration changes to a + systemd + + unit. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-config-vars: Split config.json configuration on write" + hash: cd7dcc30dc58255d5c84c6e64142f4073797d557 + body: > + When config.json is written, use the config.json unit + configuration to create + + per-unit configuration files extracts. + + + These will then be monitored by the respective service units to trigger + + restarts, so that service units will only be restarted when there are + + configuration changes that apply to them. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: Remove config-json.target + hash: 5e5de909b648d97ca949e7f6fed08ebbd6471893 + body: > + Unit files that are configured via config.json and want to be + restarted + + on config.json changes are part of this target. + + + This causes a burst of service restarts each time config.json changes, + + independently of whether the configuration changes applies to the unit + + or not. + + + This commit removes all config-json.target instances in preparation for + + the introduction of a better, more fine grained mechanism. + footer: + Change-type: minor + change-type: minor + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.91.0 + title: "'Per-unit configuration files'" + date: 2022-02-14T09:30:35.337Z + - commits: + - subject: "resin-init-flasher: check for UEFI mode and set config variables" + hash: 102a710fbbcbbd347d801263a9b96e432ec5e7b9 + body: | + Check to see whether we are running in UEFI mode and set secure + boot configuration variables as appropriate. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Mark Corbin + signed-off-by: Mark Corbin + author: Mark Corbin + nested: [] + - subject: "resin-init-flasher: Fix flashing progress reporting for LUKS" + hash: 5c44a257073a993c81692e09eabba842f2aaca1a + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "resin-init-flasher: Use flasher kernel to emulate stage2 bootloader + with LUKS" + hash: ebd9c9b775cb82247c1cd9b5ed4fe44864aa2343 + body: > + In order to avoid the need to unlock encrypted partitions in + GRUB we want + + to use a custom stage2 bootloader. Since that is not ready yet, emulate that + + by copying flasher kernel to the EFI partition, start it from GRUB, have it + + unlock all the partitions, find the real kernel and kexec into it. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "resin-init-flasher: Add support for opt-in full disk encryption" + hash: 857f44dc37ed28d2bfe285e0243a9894d7315ffe + body: > + If resin-init-flasher.conf has LUKS=1 flasher will: + + - Add extra 2MB to each partition for the LUKS header + + - Split resin-boot into EFI and linux boot + + - LUKS-format the partitions, copy image contents after unlocking + + - Propagate signatures for secure boot + + + The default behavior (LUKS undefined) is unchanged + footer: + Change-Type: minor + change-type: minor + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.90.0 + title: "'Update flasher for LUKS encryption'" + date: 2022-02-13T18:21:21.805Z + - commits: + - subject: "README: Update versioning information" + hash: 3ac5a5aaac1be6364a5ec8519b313b1da979b6a3 + body: > + The `balena-` repositories now use the same versioning + scheme as + + application containers. This commit reflects this change in the + + documentation. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.89.19 + title: "'README: Update versioning information'" + date: 2022-02-13T12:49:17.731Z + - commits: + - subject: fix cloud suite teardown + hash: 6fd7cb7ac9b7612db859afe931c0c34f693d3521 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.89.18 + title: "'fix cloud suite teardown'" + date: 2022-02-11T20:46:38.043Z + - commits: + - subject: "suites/hup: Add under-voltage test before and after HUP" + hash: e12de74e6cdcec2af488a8e5f8e0e14613ac1658 + body: | + We add this this check since we discovered + that with newer boot firmware the Pi4 will + not reboot when under-voltage is reported. + + We don't mark the test as failed in + this case, since there may be devices that + continue to work even if under-powered and we + don't want to block or delay development if the + DUT is remote and cannot be checked or replaced + easily. + + This check provides an indication for further + debugging of failed test cases. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.89.17 + title: "'[tests]: Add under-voltage check for OS and HUP suites'" + date: 2022-02-09T16:48:41.543Z + - commits: + - subject: "balena-supervisor: Update balena-supervisor to v12.11.32" + hash: d222a1f6c84ff98f7698efd671063a0eeebb3ae3 + body: > + Includes improvements when writing to `config.json` to reduce + the chances of corruption. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Felipe Lalanne + signed-off-by: Felipe Lalanne + author: Felipe Lalanne + nested: [] + version: meta-balena-2.89.16 + title: "'balena-supervisor: Update balena-supervisor to v12.11.32'" + date: 2022-02-07T15:27:34.945Z + - commits: + - subject: "resindataexpander: do not return after resizing the partition only" + hash: dfb9a2e0b30ac5bbfef24332487ef537b6a830b1 + body: > + After moving the partition resizing code to execute on each + boot, + + we made it unreachable on first boot. We must not exit the script + + after resizing the partition only because that way the resizing + + is only finished on 2nd boot. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.89.15 + title: "'resindataexpander: do not return after resizing the partition only'" + date: 2022-02-07T10:54:58.341Z + - commits: + - subject: "resin-u-boot.bbclass: Do not error if no config_defaults.h" + hash: 74b297cd03bd6f6f8af9d4a9e60514770420a218 + body: | + The header has been removed in upstream commit + 5c6a4d5a2779d7c2611319076d9aa4a23981855f + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.89.14 + title: "'resin-u-boot.bbclass: Do not error if no config_defaults.h'" + date: 2022-02-03T17:15:47.568Z + - commits: + - subject: "docker-disk: Tag the supervisor digest with the repo name" + hash: 52c2b0843bc19865fbe2298e508a9196c7143a2f + body: > + This will allow us to refer to the supervisor image by the repo + name + + in docker commands, like docker inspect, and prevent re-downloading the + + image even though it already exists as an untagged digest. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.89.13 + title: "docker-disk: Tag the supervisor digest with the repo name" + date: 2022-02-01T21:39:09.997Z + - commits: + - subject: "resindataexpander: expand fs independent of partition" + hash: 2889cb431e02f1f3e030f6c05a42be7374457eeb + body: > + When resizing the filesystem fails, such as when resize2fs won't + touch + + it because it's dirty, the partition gets resized, but not the + + filesystem. The script will not attempt to resize the filesystem again, + + as it detects the partition has already been resized. + + + Split these actions apart, so that the filesystem resize is always + + attempted. If resize2fs detects that the filesystem is already filling + + available space, it will exit with no action taken. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.89.12 + title: "resindataexpander: expand fs independent of partition" + date: 2022-01-31T10:24:09.275Z + - commits: + - subject: "image_types_balena: Augment dependency on u-boot do_deploy task" + hash: e1782d968caa20e407386ba58bff3b1842006e9a + body: > + Some BSPs might only make use of UBOOT_MACHINE so let's consider + + this case in addition to UBOOT_CONFIG when setting dependency for + + u-boot's do_deploy task. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.89.11 + title: "image_types_balena: Augment dependency on u-boot do_deploy task" + date: 2022-01-29T08:06:09.408Z + - commits: + - subject: "tests: relax boot splash screen check" + hash: 114b0f752f3b6c25e959ea193a501b5cd669fa7c + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.89.10 + title: Ryan/boot splash improvement + date: 2022-01-28T10:11:36.644Z + - commits: + - subject: archive logs using local ssh + hash: 763fd146f042f60b4df5498d41e4dfe06dc931fe + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: put archiver in the right place + hash: 69234e0dff6dc1bd08bf70bd07d06d4c2b7d4edb + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: Enable UART serial console for supported devices + hash: 57733d47160d019452d8f9316a7728ac65bb9581 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: archive image on teardown + hash: 68cf636207c04a0a8f81e727edafda3bb53bfa31 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: put device in dev mode + hash: f1cd979692cd16dd93d8354230f5317bb78e76f8 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: "tests: add extra logging to cloud suite" + hash: 0f39876b55475b654cfed4b20dfda6243d21908f + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.89.9 + title: "tests: add extra logging to cloud suite" + date: 2022-01-27T14:55:54.155Z + - commits: + - subject: "u-boot: Move config fragments merging code out of common layer" + hash: 0396efaf0964dc46e0a72792c7dfc0ce17955231 + body: | + Let's only apply this code to pre-warrior as intended. Starting + with warrior this code is in poky so we can rely on it from + there instead of keeping a duplicate in meta-balena-common. + This helps with BSPs that may define their own tasks (configure, + compile and so on) for u-boot (keeping this fragments merging + code in meta-balena-common would have the effect of overwriting + these tasks from here and thus breaking the build). + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.89.8 + title: "" + date: 2022-01-27T09:45:12.608Z + - commits: + - subject: explain balenaRootCA better + hash: 3c5dccfbb0ad9f40f893274dc25748f0d35905c8 + body: "" + footer: + Change-type: patch + change-type: patch + author: Martin Rauscher + nested: [] + version: meta-balena-2.89.7 + date: 2022-01-26T14:54:38.251Z + - commits: + - subject: "classes/kernel-balena: Update aufs patches for kernel 5.10.82" + hash: 83a1ae95bef32ccfb54a742649165f0311c7ae7e + body: | + The aufs patches are used by the devices + that transition from aufs to overlay2. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.89.6 + date: 2022-01-26T10:10:09.799Z + - commits: + - subject: "os: tests: optimize fingerprint tests" + hash: 64afc5f3ca862cd23c639f702b00a55a4527f296 + body: > + Run fingerprint tests in parallel with Promise.any(). This + significantly + + reduces the amount of time taken in these tests. + + + - ok 1 - OS corruption tests # time=92739.718ms + + + ok 1 - OS corruption tests # time=2062.513ms + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.89.5 + date: 2022-01-24T15:41:27.529Z + - commits: + - subject: "tests: add cloud test suite" + hash: 4955539b5cd0b9ab5c56ce76f92847fa637ce90b + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.89.4 + date: 2022-01-21T15:30:16.116Z + - commits: + - subject: "initramfs-framework: Make cleaning udev database the last step" + hash: 333162a83daf742612a2e97353c9d3766eaad058 + body: > + To avoid issues, move the udev database cleanup just before + switching + + roots. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.89.3 + date: 2022-01-20T17:24:54.139Z + - commits: + - subject: "recipes-core/jq: Use 64bit time symbols" + hash: 010b8f2f655aecb39ef62f9cfac288f5042ebb80 + body: | + jq is used in the bootfiles hostapp-update + hook for accessing config.json, which may have + one of the modification dates invalid, + as we've seen during testing. We thus need to + avoid performing a touch on config.json + to avoid reloading of containers. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.89.2 + date: 2022-01-20T15:16:05.188Z + - commits: + - subject: "tests: Enable UART serial console where supported" + hash: c2847e272e271cbc06dead5c798ee47e8ec8ba8c + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.89.1 + date: 2022-01-19T14:28:24.489Z + - commits: + - subject: "docker-disk: Pull images from Balena's registry" + hash: 324a091d14e64928feb1635957930eda4e809f8d + body: | + Stop using dockerhub to pull container images from. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-supervisor: Use image location path instead of repository:tag" + hash: 10cf86186bef846123d5431f810fedc219f7e2ee + body: > + Balena's registry does not use repository:tag to identify images + but + + the image location path. + footer: + Change-type: minor + change-type: minor + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "distro: balena-os: Add default cloud environment distro setting" + hash: 6175fd72188766fc0fa05989f55d79f36434face + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.89.0 + date: 2022-01-19T09:42:10.888Z + - commits: + - subject: "intel-quark: Fix to honister syntax" + hash: c32e3f0c5421e46fbac991c5e5cb6240994422b2 + body: > + The converter script did not consider the intel-quark an + override, so + + fix manually. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "recipes-core/bash: Use 64bit time symbols" + hash: d26b1a09a6ac8a0def6ab2ec4d0249884aacb738 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + - subject: "recipes-core/busybox: Use 64bit time symbols" + hash: 989c0a3584b99bf637f2a727f8a6bda11fb05441 + body: | + So that commands like find can work with + files that have incorrect timestamps on 32bit systems. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.88.22 + date: 2022-01-18T17:55:03.016Z + - commits: + - subject: "tests: os: config-json: cleanup persistentLogging test" + hash: 1625e14c13da802e0bbd39467b106155861441be + body: > + Minor cleanup of persistentLogging configuration test. + Additionally, + + reduce the reboot count to one to save time. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: return promise from sshKeys test" + hash: caf3dfe4b43643ac5cfa219cb892f431992e0aaa + body: > + Return the promise from the sshKeys test instead of awaiting + inside the + + async function, a minor style improvement. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: cleanup dnsServers config test" + hash: 7a4872aa41435a3e386ad9051dc9dbfc64957762 + body: | + Simplify dnsServers config test, including using + worker.waitForServiceState(). + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: cleanup ntpServer config test" + hash: 85372adacd450186ba40e7d1e2bd9751e470a7d6 + body: | + Simplify ntpServer config test, including using + worker.waitForServiceState(). + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: cleanup hostname config test" + hash: 28983f940d9fe6dd342df9a367e2768501d1d408 + body: | + Simplify hostname configuration test, including using + worker.waitForServiceState(). + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: create waitForServiceState helper" + hash: 080ead9e17a20d47843ccec0bc2355ee0b9200f3 + body: | + Create helper to wait for a service to be active or inactive. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: remove reboot from randomMacAddressScan test" + hash: b832ef095532e54a8508c41441575ef9f5661557 + body: > + Restructure randomMacAddressScan test to remove unnecessary + reboot + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: remove reboot from connectivity test" + hash: c3988214cfb0fea2f92b3a8ad096cafd2d271417 + body: | + Restructure connectivity test to remove unnecessary reboot + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: os: config-json: remove reboot from udevRules test" + hash: 6f7ebbc7a0f201248b731acc188033a3ddc9a12f + body: | + Restructure udevRules test to remove unnecessary reboot + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.88.21 + date: 2022-01-17T18:42:06.387Z + - commits: + - subject: "chrony: fix mount service dependency for driftfile" + hash: 4823b0299002192820d36c90e5d2dfd9ff122ff5 + body: > + The chrony driftfile is not being updated at shutdown due to an + + incorrect mount service dependency in the systemd chronyd.service + + file. The current dependency on 'var-volatile-lib' does not cover the + + subsequent bind mounting of the '/var/lib/chrony' sub-directory, so + + the chrony directory gets unmounted at shutdown before the drift file + + has been updated. + + + This issue is solved by changing the mount service dependency from + + 'var-volatile-lib' to 'bind-var-lib-chrony' (which is similar to the + + way bind mount dependencies are already handled for the NetworkManager + + and bluetooth services). + footer: + Change-type: patch + change-type: patch + Connects-to: "#1995" + connects-to: "#1995" + Changelog-entry: "chrony: fix mount service dependency for driftfile" + changelog-entry: "chrony: fix mount service dependency for driftfile" + Signed-off-by: Mark Corbin + signed-off-by: Mark Corbin + author: Mark Corbin + nested: [] + version: meta-balena-2.88.20 + date: 2022-01-17T10:54:19.982Z + - commits: + - subject: "os: tests: optimize fsck tests" + hash: 15100419eb9e1fb8c0e99d0a9e07a09b8c8d415f + body: > + Chain operations using Promise.then(), and run commands in + parallel + + using Promise.map(). This reduces the time taken for fsck tests to about + + half. + + + - ok 1 - fsck.ext4 tests # time=152304.735ms + + + ok 1 - fsck.ext4 tests # time=75104.016ms + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.88.19 + date: 2022-01-12T19:19:10.768Z + - commits: + - subject: "conf/distro: Prefer rust v1.36 for releases older than Honister" + hash: f4025980e13f291b9e9778a4e545cfea490f9fe5 + body: | + Poky releases older than Honister should stick to rust v1.36 + which has been used in balenaOS builds so far. + + Newer ones should prefer v1.54, which is the latest rust + version to use the Honister syntax. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.88.18 + date: 2022-01-11T14:59:20.607Z + - commits: + - subject: "recipes-core/coreutils: Use 64bit time symbols" + hash: 1c86b30cbad9eecb74185610d146a71f81f70857 + body: > + We do this to avoid initial HUP failure that may + + occur when updating a freshly provisioned device, + + which has unitialized timestamps for files in the boot partition, + + to a newer release based on Honister with glibc-2.34. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + - subject: "classes/image_types_balena: Preserve file modification times with + mcopy" + hash: 7b5e1475838b2ba72ca31b82cfa41b32d47cfd02 + body: | + We should preserve the file modification times when + copying them to the boot filesystem, otherwise these + timestamps will be incorrect, as they will be set to + random values, like for instance: + + Access: 1961-11-25 17:31:44.000000000 +0000 + Modify: 1961-11-25 17:31:44.000000000 +0000 + Change: 1961-11-25 17:31:44.000000000 +0000 + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.88.17 + date: 2022-01-10T10:46:43.314Z + - commits: + - subject: "balena-os.inc: Switch balena backend storage to overlay2" + hash: 90b2630937ecc3171fd925a9c679ab1b20c20a4c + body: > + Now that we have the aufs to overlay2 migrator in place, let's + switch + + all our boards to overlay2. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.88.16 + date: 2022-01-05T09:44:10.265Z + - commits: + - subject: "initrdscripts: fsuuidinit: Generate resin-rootA last" + hash: 00d6ca48d32b2b1a111d400457b73be5cc36d6bf + body: > + As resin-rootA is used to decide whether to re-run the + generation, leave it + + last. As it stands, if resin-rootA is regenerated by any other fail, the + + UUID generation is not retried. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "lvm2: Add rule to persist dm devices in udev database" + hash: de2ff622473f2f0bc03c05dbd15f1df8c88f734e + body: > + On transitioning from the initramfs to the rootfs, the udev + database is + + cleanedup as the rules between initramfs and rootfs might defer. + + + However, dm devices are flagged not to be re-processed, so we need to + + set a sticky bit on them so they persist the cleanup. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "initrdscript: Cleanup udev database before transitioning to rootfs" + hash: a72061cfe9ba48809ba87b0bc03e01a6bc53cff4 + body: > + This is needed because the rules in the final rootfs might be + + different than the one in the initramfs. + + + Devices that need to persist, like dm devices, need to be flagged with + + the `db_persist` option. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "initrdscripts: Use /run as bootparam_root storage" + hash: 449dee77f54d4185f98854bca9148a6f42620bc8 + body: > + From v2.49, the hostapp-update utility creates the /run + directory in the + + root filesystem, however when huping from previous versions /run is not + + there. + + + Commit bab3cd7f50022127bfef50fde9cd445b6b55a7b2 switches to use /tmp + + to store the new UUID for the root partition on first boot after + + generating new UUIDs as this is backwards compatible. + + + However, this means that the udev database in the initramfs is recreated + + on the final system instead of reused. This becomes a problems for DM + + devices (used in luks based disk encryption), as they are not re-processed + + by udevd. + + + This change will use /run if available, so new releases that may implement + + disk encryption work, or /tmp if not so it still remains backwards + + compatible for HUP from older releases. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "lvm: Add lvm rules when secure boot is configured" + hash: d41eacad52fde90340c5f7eb4f9fb862aba364ef + body: | + This add udev rules to detect mapper devices. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-keys: Fetch DER keys and decode from base64" + hash: 2538a1c621979f83385729be57b53faa640326d1 + body: > + Some BIOS configuration, like TianoCore used in QEMU, needs DER + keys for + + secure boot setup. Also, der, auth and esl keys are served base64 encoded + + and need to be decoded before they can be used. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.88.15 + date: 2022-01-04T14:24:39.301Z + - commits: + - subject: Sync cached writes to disk when updating supervisor.conf + hash: cf51428b9daaf8325cafc850fb47e27a6a6bcb5d + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Miguel Casqueira + signed-off-by: Miguel Casqueira + author: Miguel Casqueira + nested: [] + version: meta-balena-2.88.14 + date: 2022-01-04T11:19:00.838Z + - commits: + - subject: "hostapp-update-hooks: Handle developmentMode updates" + hash: adc76c0588a67705ae20a8c61517f549f2e8549e + body: > + When updating from a legacy development image which has no + developmentMode + + set in config.json to an image configured with development mode, the hooks + + need to set developmentMode accordingly in config.json. + + + Updating to a development mode image from a production image will not + + set developmentMode. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.88.13 + date: 2022-01-04T09:48:57.491Z + - commits: + - subject: "systemd/timeinit: handle missing date field in HTTPS header" + hash: e11a421c24a9c4003e0d606ef681447e48b2823b + body: > + Update the timesync-https.sh script to handle the case where the + date + + field is missing from the returned HTTPS header. + + + When the date field is not present the script will now exit with a + + warning rather than blocking indefinitely. + footer: + Change-type: patch + change-type: patch + Changelog-entry: "systemd/timeinit: handle missing date field in HTTPS header" + changelog-entry: "systemd/timeinit: handle missing date field in HTTPS header" + Signed-off-by: Mark Corbin + signed-off-by: Mark Corbin + author: Mark Corbin + nested: [] + version: meta-balena-2.88.12 + date: 2022-01-03T14:25:50.684Z + - commits: + - subject: "balena-supervisor: Update balena-supervisor to v12.11.16 Update + balena-supervisor from 12.11.0 to 12.11.16" + hash: 00397eb39bde3aa313373ffa884ca24098781917 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Miguel Casqueira + signed-off-by: Miguel Casqueira + author: Miguel Casqueira + nested: [] + version: meta-balena-2.88.11 + date: 2021-12-22T04:08:44.540Z + - commits: + - subject: Update NetworkManager to 1.32.12 + hash: a6313f12e2efe0a6aae8741e7e95ad437a247b3c + body: | + Closes #2437 + footer: + Change-type: patch + change-type: patch + Changelog-entry: Update NetworkManager to 1.32.12 + changelog-entry: Update NetworkManager to 1.32.12 + Signed-off-by: Zahari Petkov + signed-off-by: Zahari Petkov + author: Zahari Petkov + nested: [] + version: meta-balena-2.88.10 + date: 2021-12-16T10:45:16.375Z + - commits: + - subject: "u-boot: Move u-boot configs inclusion into resin-u-boot.bbclass" + hash: 27e67bb1021f1f2c4c1cdcbb657f09c19908eed4 + body: | + Some BSPs name the u-boot such as u-boot-imx_2020 for example. + Because of that, our existing bbappend called u-boot_%.bbappend + will not match it and will fail to be applied. + This PR is a first pass at solving this by moving at least the + SRC_URI appending part from this bbappend and into the + resin-u-boot.bbclass instead. Further investigation is needed + to see if we can remove this bbappend altogether since we may + have all boards using Poky Warrior or newer, making this + u-boot bbappend obsolete. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.88.9 + date: 2021-12-15T14:45:29.240Z + - commits: + - subject: "patch: Add archiveLogs Teardown for HUP suite" + hash: 27abdfaab8ab0790020ebfce0fc64710c8efd609 + body: "" + footer: {} + author: Vipul Gupta + nested: [] + version: meta-balena-2.88.8 + date: 2021-12-09T19:58:29.923Z + - commits: + - subject: "tests: Ensure BDADDR is initialized" + hash: 7824025cb4722483a15cd95f7ee93207af2d8f8c + body: | + The CM4 IO-Board was the first device + which exhibited an issue in which + the MAC address was set to an + unprogrammed value AA:AA:AA...:AA. + + We've addressed this in the device repo, + meanwhile it has been fixed in upstream + too, so let's check and catch this should + it happen again. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.88.7 + date: 2021-12-06T15:07:42.139Z + - commits: + - subject: "docs: Fix links in Rollback documentation" + hash: 14399cfd115198b0913fb379760b9710c0710258 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.88.6 + date: 2021-12-04T17:29:48.922Z + - commits: + - subject: "tests: os: fix unhandled exception when unwrapping non-flasher image" + hash: ce2d33ad875e83b1ed01a16225a9ca19563836dc + body: > + Handle ENOENT ErrnoException when attempting to unwrap + non-flasher image + + in os/suite.js. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.88.5 + date: 2021-12-04T12:25:35.702Z + - commits: + - subject: "tests: Add basic checks for data loss during HUP" + hash: 160fba09251de9fc05b3b3ab7a45e6e4e6ca5586 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + - subject: "hostapp-update-hooks: Ensure data breadcrumb is present before HUP" + hash: 62b25ec26111003ef12bc16fe4890b5c327e6aba + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.88.4 + date: 2021-12-03T18:33:53.449Z + - commits: + - subject: "grub-conf: Delay grub boot in os development mode" + hash: 08b54c04b109341542ff1f2b82d00699369a8280 + body: > + When using the compile time OS_DEVELOPMENT switch, delay the + boot so + + the grub menu is displayed and it can be interacted with. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "grub-efi: Allow input/output in OS development mode" + hash: 7d450dddf397dc045779fa815b5003bd1b1ca7fa + body: | + When building with the compile-time OS_DEVELOPMENT switch allow + grub shell to work. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.88.3 + date: 2021-12-02T17:44:27.982Z + - commits: + - subject: "sign-efi.bbclass: Do not deploy the unused .signed symlink" + hash: 33c3e61eac60dff18a1bfe8e7a69cc31a8b16070 + body: > + do_deploy:append replaces the original file with its signed + counterpart, + + the signature just gets ignored for non secure boot setups. The .signed + + symlink was in place for backwards compatibility but nothing is using it + + anymore therefore we can safely remove it. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "sign-gpg.bbclass: Only deploy the detached signature" + hash: 40ead6aefea6d4ab56c76ec0a968da9b23acc887 + body: > + The original file should already be deployed, we only need to + add + + the signature in do_deploy:append. Re-deploying actually causes + + harm when chaining signatures, replacing a signed file with its + + unsigned counterpart. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "kernel-image-initramfs.bb: Ship kernel and matching signature" + hash: 73c254a9396dcf40ba421d70119400af7d4ef21f + body: > + This patch replaces the kernel being shipped with the one that + we eventually + + sign for EFI - without signing the original file used would be identical + + but after applying signature, the signed version is the one we want to ship. + + + It also fixes the file name for the detached signature, which must match + + the name of the associated file. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: Make kexec work under kernel lockdown + hash: 3f7ab2a82b29cdb5ddbf2be6ae8b384a76be999e + body: | + - EFI sign bzImage first + - GPG sign the result + - Enable kexec signature check in the kernel + - Load EFI keys to the kernel keyring + - Use -s with kexec load command + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.88.2 + date: 2021-12-02T12:47:16.559Z + - commits: + - subject: "bluez5: Update to bluez 5.61 from poky honister" + hash: 1ce83ba3726b77d679818cc8f10e7092cd094328 + body: | + This commit brings the bluez5 recipe from poky honnister. + + The code originated from poky's honnister branch + @ 5f87fbf13bd35169a488ca564875974681aafd4f + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.88.1 + date: 2021-12-02T10:41:20.034Z + - commits: + - subject: "systemd/timeinit: add HTTPS time synchronisation service" + hash: 2bb18707557979ed6466f45602de4ecf5b386c57 + body: > + Add a new timesync-https systemd service to synchronise the + system + + time at boot using an HTTPS header. The service uses curl to request + + an HTTPS header from either $API_ENDPOINT/connectivity-check (default) + + or the URL defined by the os.network.connectivity.uri field in + + config.json. The URL used *must* return HTTP code 204 (No Content) + + in response to a request so that we can determine that we have full + + network connectivity and are not operating behind a captive portal. + + + The date field returned by a valid header is used to set the current + + system time. The date/time derived from the header is assumed to be a + + reasonable source of 'truth' such that it can be used to adjust the + + system time both backwards and forwards. This will compensate for any + + erroneous timestamps saved via fake-hwclock or any invalid data + + read from an RTC. + + + The service will exit when a valid response has been received. Poll + + attempts will be made at an increasing interval starting at 2s and + + doubling up to a maximum of 64s. Polling will continue at the maximum + + interval until a valid response has been received. + + + This service will provide initial time synchronisation for devices + + where NTP ports have been blocked. For devices where NTP access is + + available it should ensure that any system 'time jump' is only a few + + seconds when NTP synchronisation is eventually achieved. It also + + allows other services to start with a reasonably accurate time + + without having to wait for the NTP synchronisation process to + + complete. + + + Services that are ordered after the new time-sync-https-wait target + + can be sure that full network connectivity has been achieved and that + + time has been synchronised with an accuracy of a few seconds. + footer: + Change-type: minor + change-type: minor + Connects-to: "#1337 #1776 #2044 #2139" + connects-to: "#1337 #1776 #2044 #2139" + Signed-off-by: Mark Corbin + signed-off-by: Mark Corbin + author: Mark Corbin + nested: [] + version: meta-balena-2.88.0 + date: 2021-12-01T15:06:07.577Z + - commits: + - subject: "tests: Add BeagleBone Black u-boot overlay test" + hash: d52a1754ba1620773e1f7f124fe382aa73e869eb + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Florin Sarbu + signed-off-by: Florin Sarbu + author: Florin Sarbu + nested: [] + version: meta-balena-2.87.32 + date: 2021-12-01T08:51:25.213Z + - commits: + - subject: "resin-update-state.rules: do not run for unnamed partitions" + hash: bc45916b90e60aa849a2b99903825bce98e36752 + body: > + When udev runs resin_update_state_probe for a non-balena + partition + + and ENV{ID_PART_ENTRY_NAME} is undefined it still gets expanded to random + + garbage accidentally lying at the eventual memory address. This can create + + a mess in /dev/disk/by-state e.g. when external devices are connected. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "resin_update_state_probe: do not skip device mapper devices" + hash: 4a8da59e5cbe2243518ed0591dc376e935a3175d + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.31 + date: 2021-11-30T17:23:29.588Z + - commits: + - subject: "tests: Add device specific RevPi Core 3 DIO module test" + hash: ffd31de2edf0358ede441aa001f5d32069ec8999 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.87.30 + date: 2021-11-30T15:30:47.078Z + - commits: + - subject: "common: image-balena: enable developmentMode when OS_DEVELOPMENT=1" + hash: 14b96077eb1899ebedce64610344989eaf4471cd + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.87.29 + date: 2021-11-29T14:22:50.702Z + - commits: + - subject: Add secure boot keys to the flasher boot partition + hash: e5e1c4446f26d028d1e5b6fbdaeb974d84d0a03f + body: | + Having the keys available in the flasher image allows to use the + flasher image as source to program the keys in the EFI. + footer: + Change-type: patch + change-type: patch + Changelog-entry: Add secure boot keys to the flasher boot partition + changelog-entry: Add secure boot keys to the flasher boot partition + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.28 + date: 2021-11-26T18:00:13.452Z + - commits: + - subject: "balena-os: make sure PAM support is not configured" + hash: abb515f6a0bf5d274af873852ddd4e60cf4ee89e + body: > + BalenaOS does not use PAM but some vendor BSPs enable it and + misconfigure + + the hostOS authentication. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.27 + date: 2021-11-25T14:36:15.066Z + - commits: + - subject: "tests: add test for filesystem checks" + hash: a58b4a8d89830d739b8a676b1f8669ead6c03e0e + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "common: initrdscript: fsck resin-data on boot" + hash: a035f37b4ae3003b41cd450ab24fffbe178ecdb2 + body: | + Check resin-data on boot to automatically repair any errors + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.87.26 + date: 2021-11-25T07:36:45.881Z + - commits: + - subject: "connectivity: reduce ping interval to minimum" + hash: b513920cd7d683f6511aee2d190d2e9df924fe87 + body: > + The interface test uses a simple ping to ensure a specific + interface + + works. It sends ten packets, and expects ten packets back. However, the + + default interval is one second, which increases the time taken for the + + test while not adding anything of value. + + + Reduce the timeout to the minimum non-privileged interval of 2ms. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.87.25 + date: 2021-11-25T02:05:13.102Z + - commits: + - subject: "tests: Fix dnsmasq tests in cases where 8.8.8.8 is assigned via DHCP" + hash: 970704092a2f73e120029464edca5b152296f486 + body: > + One of the test was making sure we were NOT using the default + 8.8.8.8 + + server even though that may be a valid upstream server provided by DHCP/PPP. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.87.24 + date: 2021-11-24T21:35:13.779Z + - commits: + - subject: "0-signed-update HUP hook: mount efivarfs if necessary" + hash: 1a6c772c9266d5fc219939e9304813356f85d34c + body: > + The hook tries to read EFI variables from efivarfs but this is + not always + + mounted within the container. We have already validated that we are running + + in EFI mode therefore we can just check whether it is already mounted + + and eventually mount with no further checks. + + + This also adds graceful handling of nonexistent variables since not all + + UEFI implementations come with secure boot support. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.23 + date: 2021-11-24T19:42:32.718Z + - commits: + - subject: "grub-efi: Accept no input and output nothing when in secure boot mode" + hash: ffe2f48ed1e770068eb98affc5b29ae39c244869 + body: > + At this moment GRUB drops to rescue shell if config is invalid + + or if signatures are missing/wrong. This lets the user disable the signature + + checks altogether. + + + With this patch GRUB outputs nothing and accepts no user input if signing + + is configured. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.22 + date: 2021-11-24T16:39:29.277Z + - commits: + - subject: "linux-firmware: Include MT7601U firmware" + hash: 33980c8b9ba464c91f016f9cade4140c278e7037 + body: > + The MT7601U WiFi driver fails to find its firmware, so it is + included now. + footer: + Change-type: patch + change-type: patch + Backport-to: next + backport-to: next + Signed-off-by: Zahari Petkov + signed-off-by: Zahari Petkov + author: Zahari Petkov + nested: [] + version: meta-balena-2.87.21 + date: 2021-11-24T12:49:04.437Z + - commits: + - subject: "balena-image: Add balena keys to boot partition if required" + hash: 14624e33c3a48baf71ac7314fc116e7cb21016c9 + body: > + When using secure boot, add the balena keys to the boot + partition. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "grub-conf: Enforce module signing and integrity lockdown on luks + config" + hash: 1ba23869473faace427782d2aea07a0b46bfbc0c + body: > + When booting in secure mode, enforce signed modules loading and + integrity + + lockdown. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "distro: balena-os: Add empty SIGN_API" + hash: b1cce6ee3d921dd8def909d959a48bd0d6805c30 + body: | + By default do not produce signed images. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "classes: image-balena: Copy signed files if present" + hash: cad39d9f0bf1630da4084cd9b6650cd612943f7d + body: > + Grub requires that the signed files carry the .sig suffix, so + copy then + + if present. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "classes/sign-gpg: Rename class to sign_gpg" + hash: b1e37430c2f83c045156057198140ba951ea5c5d + body: | + Use a less generic name. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "classes: Rename sign to sign-gpg" + hash: 07012bebb4e0c309a5f148f1ab70cf6bf4f15053 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "classes: sign: Drop suffix from deployed files" + hash: d3f05f3f36c1b9d2576e497ca5573dbd2b050efd + body: | + This way device repositories do not need to be customized. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "resin-init-flasher: Set fde grub.cfg if secure boot is enabled" + hash: 5d25ccbec30eacc449783b0b6f9c342befa10924 + body: | + When secure boot is enabled a special grub.cfg is required. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-image-initramfs: Add secure boot dependencies" + hash: 68d68cfb4523e4e012f174e91495949461782b9d + body: > + When buildinf an initramfs for secure boot add the needed + dependencies. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "kernel-image-initramfs: Install signed kernel images if available" + hash: 0af48f7555726e969b19bfe29321babb93f265b5 + body: | + Signed images are needed for secure boot. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "kernel-balena: Configure for secure boot" + hash: 52259791b2cc2bfd121255e009808bc5677fde0d + body: | + On secure boot builds, configure the kernel accordingly. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.20 + date: 2021-11-23T16:12:35.703Z + - commits: + - subject: "common: enable multi-label mDNS resolution and IPv6" + hash: 7d50c2b78a2c97172c9bdc558e835c8caf7a80ab + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.87.19 + date: 2021-11-22T22:45:22.434Z + - commits: + - subject: unwrap flasher images in os suite if needed + hash: e377cdf05d8d3baf456391889978a7a7bd49e9f0 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + - subject: bluetooth and hup test with qemu + hash: 2bf53fbce9bd2173b60253347a2e0c33d4c06e46 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.87.18 + date: 2021-11-22T17:26:50.431Z + - commits: + - subject: "efitools: Add recipe" + hash: 64daca47ee173b94ffc40ed042a19c114a4e371d + body: | + From + + https://github.com/jiazhang0/meta-secure-core at: + 3fa3fc6dcb41fb6392de84154445502d0668153c + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "sbsigntool: Add recipe" + hash: 32a22fa740bd06cbb399998f7d8fd12c2088de7c + body: | + Required by efitools. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.17 + date: 2021-11-21T17:23:50.379Z + - commits: + - subject: "peak: Modify kernel driver to use signing class" + hash: 12cbccc2a880bf3f9782b61c4afe4bd393a9414b + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.16 + date: 2021-11-21T10:54:01.163Z + - commits: + - subject: "kernel-balena.class: Add support for FDE and sign for secure boot" + hash: fa67eb58b88155bf4808181ff6429fd94704cad3 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.15 + date: 2021-11-21T08:53:19.604Z + - commits: + - subject: "sign-efi.bbclass: do not mix old and new bitbake syntax" + hash: fb8d7ed997f3cdc08d3a7d3b65e1ebd4aba6d90e + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: 'Revert "sign-efi.class, sign-kmod.class: Replace original files with + signed ones"' + hash: fe553becac56b973e0adc9adeb71655fa7d9883d + body: > + This reverts commit 853656e6bcfed0b0206d031c32cd1cde811b8146. + + + The change overwrites build files, though that is what we need, it is a hacky + + approach and we will look for a clean solution. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.14 + date: 2021-11-21T07:00:01.356Z + - commits: + - subject: "meta-resin-sumo/pyro: Fix initramfs-framework kexec dependencies" + hash: 9d2d1df166a80f693cfee8a34ffd6e1f5b7ff581 + body: > + On recent Yocto versions the findmnt package is split into its + own + + package, but sumo needs to include the whole util-linux package. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "initrdscripts: Use a 2nd stage bootloader to unlock LUKS partitions" + hash: acbc384d527436e5d7382504dcf62f799b9490d5 + body: > + GRUB can not use the TPM easily to unlock the volumes and find + the kernel + + on an encrypted partition. Instead, we choose to store a linux kernel + + and use it as 2nd stage bootloader to unlock the partition, load the actual + + kernel and kexec into it. This should eventually be replaced by a proper + + 2nd stage bootloader that is being worked on. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: "grub-efi: add support for signature verification in secure boot mode" + hash: ac22f29ffa370f48704fcfb6c7cdb8eec200ba18 + body: | + This incorporates multiple changes: + - Patch grub to propagate secure boot mode to the kernel + - Enable GPG signature verification in GRUB + - Sign GRUB config files + - Sign the grub EFI binary for secure boot + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.13 + date: 2021-11-20T22:06:37.895Z + - commits: + - subject: "initramfs-module-cryptsetup: add TPM dependencies" + hash: dfff22ad0315c9893d9def6829708b50153d691d + body: > + The TPM2 utilities were always pulled into the image during + development + + but for the final version they are not and this should pull them + + as dependencies. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.12 + date: 2021-11-20T15:38:45.684Z + - commits: + - subject: "balena-keys: Add recipe" + hash: 1436ac7e3cac2bd244fd387c80a8e52de7f68b5a + body: > + Add a recipe to deploy the signing keys to the deploy directory. + + Device types that use them should copy them into the boot partition. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.11 + date: 2021-11-20T12:30:28.072Z + - commits: + - subject: "sign-efi.class, sign-kmod.class: Replace original files with signed + ones" + hash: 853656e6bcfed0b0206d031c32cd1cde811b8146 + body: > + Currently the two classes would keep the original files + untouched and store + + the signed versions as .signed. This patch reverses the logic - the signed + + files replace the original ones and the unsigned version is stored as .unsigned. + + This is because there is no real use-case for the unsigned files, we always + + want to ship the signed version, even if the particular DT does not require it, + + this causes no harm. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + - subject: Add signing classes + hash: 5c128e6b234d75ba684212a322ababa7b5bd13d2 + body: > + Add classes for GPG, KMOD and EFI artifact signing. Inheriting + these classes + + won't run the signing tasks, they have to be manually added to recipes. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.10 + date: 2021-11-20T07:33:31.830Z + - commits: + - subject: "hostapp-update-hooks: Add a hook that aborts HUP to unsigned OS under + secure boot" + hash: 9db5d09428bdba067974ff5c5c62a8d35eab7a67 + body: > + When a device is running in secure boot mode, it must not be + possible to HUP + + to an unsigned version of the OS because UEFI would refuse to boot it before + + any of our self-recovering rollback mechanisms can be triggered. This would + + effectively brick the device, needing physical access to recover. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.9 + date: 2021-11-17T03:10:29.925Z + - commits: + - subject: "resin-mounts: mount EFI partition if it is split from boot" + hash: 1cf47718063093369e26ac8831dc83db904de214 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.8 + date: 2021-11-17T03:04:09.427Z + - commits: + - subject: "initrdscripts: add a script for unlocking LUKS volumes" + hash: 7b095c49d49a2ed08c827a872813db270830a503 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.7 + date: 2021-11-16T12:31:32.268Z + - commits: + - subject: "connectivity: proxy: move nadoo/glider to container" + hash: 07dbe414a1dfa556427d4fc94ce7fdec688cf0e2 + body: > + Previously, the core service exposed a /proxy endpoint that + would start + + up a proxy remotely, which would be used by a test in the connectivity + + module. However, the endpoint returned the address for the testbot to be + + used as the proxy in the response, and this required manual + + configuration of the interface. Additionally, it requires the worker + + service to install and provide glider for forward proxying. + + + Move the proxy (glider) to a container on the device being tested, + + which simplifies configuration, and reduces the complexity and size of + + the interface of Leviathan. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + version: meta-balena-2.87.6 + date: 2021-11-15T13:04:05.810Z + - commits: + - subject: "tests: os: Add exposed engine socket test" + hash: 612b7853a23441d0192de5580d37d0f89f7f3103 + body: > + This tests the engine socket being exposed in development mode + but not + + in production mode. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.87.5 + date: 2021-11-11T17:56:18.921Z + - commits: + - subject: "resindataexpander: also resize LUKS volume if necessary" + hash: aff55ab61db7842202d7aec2e16b3bab505daf60 + body: | + The behaviour for non-LUKS system should be the same as before, + an extra step is performed when LUKS resize is necessary. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.4 + date: 2021-11-11T14:56:27.092Z + - commits: + - subject: Add out-of-tree peak CAN driver + hash: 983c233bbc243f83c53706639867485655cafbfb + body: | + Only add the recipe, let DTs pull it as necessary + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.3 + date: 2021-11-11T12:59:58.982Z + - commits: + - subject: Add recipes for TPM2 tools + hash: baddbd39fd17d364ebfd69bf139980ca82abc8ba + body: > + Taken from + http://git.yoctoproject.org/cgit/cgit.cgi/meta-security/tree/meta-tpm/recipes-tpm2 + + Only add the recipes, let DTs pull it as necessary. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-2.87.2 + date: 2021-11-11T08:07:31.669Z + - commits: + - subject: "recipes-devtools/dosfstools: Fix build with Poky Honister" + hash: 4c47a01aab59afefbb9ad055fbb975c45f5dd262 + body: | + Poky Honister comes with dosfstools v4.2 + so we cannot use the v4.1 append in the + meta-balena-common layer. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.87.1 + date: 2021-11-10T17:07:04.950Z + - commits: + - subject: "meta-balena-common/conf: Switch layer to Honister compatibility" + hash: 8cc0c59efc9946b74fea6fb3a7d6b0d51bad015b + body: "" + footer: + Change-type: minor + change-type: minor + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-2.87.0 + date: 2021-11-09T09:42:26.620Z + - commits: + - subject: "patch: Fix URL to yocto project dependencies" + hash: 916b1d256a0ab3f23818e7307ce219cdaed2002f + body: "" + footer: + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.86.3 + date: 2021-11-09T00:07:14.996Z + - commits: + - subject: "dosfstools: selectively apply upstreamed patch" + hash: 8f04f1142bcb3074d86e2827dfda6c7d8c87fefd + body: > + This patch was submitted and accepted upstream, and is present + since + + v4.2. + + + https://github.com/dosfstools/dosfstools/commit/87a8f29785bb605350821f1638a42e6cf3e49ce3 + + + This fixes a build error applying a patch that's already been applied + + when building newer versions of dosfstools. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Joseph Kogut + signed-off-by: Joseph Kogut + author: Joseph Kogut + nested: [] + - subject: "tests: wait for the chronyd service become active" + hash: c49648a0f27f1a57376803ba9c85ec9ba729ebe9 + body: > + Add a test to wait for the chronyd service to become active + before + + starting the time sync tests. + + + The current chronyd tests assume that the chronyd service is + + instantly available at boot time. With the addition of the new + + HTTPS time synchronisation service the starting of chronyd can be + + delayed by a few seconds so we need to ensure that the service + + is actually running before proceeding. + footer: + Change-type: patch + change-type: patch + Changelog-entry: "tests: wait for the chronyd service become active" + changelog-entry: "tests: wait for the chronyd service become active" + Signed-off-by: Mark Corbin + signed-off-by: Mark Corbin + author: Mark Corbin + nested: [] + version: meta-balena-2.86.2 + date: 2021-11-08T15:41:30.313Z + - commits: + - subject: "tests/issue: Add test to check issues files" + hash: 472bf8a99a111e061e416557e9ab0f538041ae01 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "base files: Use HOSTOS_VERSION in issue and issue.net" + hash: fb9fd5c0a848c93b020a81521fa6e0cc0f3dd0bb + body: | + This allows to display ESR releases on the welcome login. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-2.86.1 + date: 2021-11-02T12:36:12.690Z + - commits: + - subject: Create new data partition reset service + hash: 60f7dd78b93c3a079aac346d5f587198e541a1a8 + body: | + Similar to state-reset, the data partition will be mostly + purged if the remove_me_to_reset file is removed. + footer: + Change-type: minor + change-type: minor + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.86.0 + date: 2021-10-29T12:26:28.613Z + - commits: + - subject: restrict dtoverlay test to rpi devices + hash: 98d8f80b6e2c49fabecad70f539a3e247ac20895 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.85.17 + date: 2021-10-28T13:26:21.042Z + - commits: + - subject: Update balena-engine to v19.03.30 + hash: abf610e022eeac709c054e4fb672b850ef08a940 + body: > + Fixes EINVAL errors caused by sockets during storage migration, + + https://github.com/balena-os/balena-engine/commit/17a198cb53a53da456c848bf303dc3917ca538c5 + + + Update balena-engine from 19.03.29 to 19.03.30 + footer: + Changelog-entry: Update balena-engine to v19.03.30 + changelog-entry: Update balena-engine to v19.03.30 + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: + - commits: + - subject: "storagemigration: keep going if migration fails" + hash: 2bde63c800b1df72fba7161d62b5b6da84a8d390 + body: > + the only hard error is if rollback (failcleanup) fails, + in all other + + scenarios we want the daemon to continue starting with the new + + graphdriver + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + - subject: "graphdriver/copy: fix handling of sockets" + hash: 17a198cb53a53da456c848bf303dc3917ca538c5 + body: > + previously switch would treat S_IFIFO and S_IFSOCK as + the same, passing + + both of the to mkfifo, which lead to EINVAL errors when trying to create + + the socket, we instead handle socket separately. + + + Also adds cases for this to the unit and integration tests of the + + migrator. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Robert Günzler + signed-off-by: Robert Günzler + author: Robert Günzler + nested: [] + version: balena-engine-19.03.30 + date: 2021-10-26T13:43:43.638Z + version: meta-balena-2.85.16 + date: 2021-10-27T10:26:55.185Z + - commits: + - subject: "linux-firmware: Include RTL8723BU firmware files" + hash: 2490287e51d96f3ceabd7e3d7a9cd93f49442ba7 + body: > + The driver for RTL8723BU wireless chipset is present, but its + firmware + + files are not loaded. This patch includes them. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Zahari Petkov + signed-off-by: Zahari Petkov + author: Zahari Petkov + nested: [] + version: meta-balena-2.85.15 + date: 2021-10-26T15:34:07.511Z + - commits: + - subject: "balena-supervisor: Update balena-supervisor to v12.11.0" + hash: 983eba7a9e61ba9fdd494807d516f1006a7a3504 + body: | + Update supervisor to latest version to add API backoff behavior. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Felipe Lalanne + signed-off-by: Felipe Lalanne + author: Felipe Lalanne + nested: [] + version: meta-balena-2.85.14 + date: 2021-10-25T15:51:29.429Z + - commits: + - subject: "balena-engine: Remove deprecated development drop-in service file" + hash: 8db04c4e70fc4f30ae6b9e5009d04d8c247d7364 + body: > + This file is no longer used since the merge of dev and prod + images. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Kyle Harding + signed-off-by: Kyle Harding + author: Kyle Harding + nested: [] + version: meta-balena-2.85.13 + date: 2021-10-21T13:51:52.714Z + - commits: + - subject: make led test work with beaglebone + hash: e615c008f916fb4542731c3b0c860be0d79a71b2 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: meta-balena-2.85.12 + date: 2021-10-21T10:59:58.802Z + - commits: + - subject: "patch: Add dtoverlay practical test" + hash: 76664fceb33d01cf504df464879569f8c147f2fd + body: "" + footer: + Signed-off-by: Vipul Gupta (@vipulgupta2048) + signed-off-by: Vipul Gupta (@vipulgupta2048) + author: Vipul Gupta (@vipulgupta2048) + nested: [] + version: meta-balena-2.85.11 + date: 2021-10-06T07:35:19.121Z + version: 2.98.6 + title: "'Update layers/meta-balena digest to 798e236'" + date: 2022-04-27T07:58:12.613Z - commits: - subject: Update balena-yocto-scripts to 13da1d2fd4483ba9a2cf9d3d7146985bbd720c6b hash: 6338bc343d9b556f515f53aa34d008e441a5c252 diff --git a/CHANGELOG.md b/CHANGELOG.md index 060bb21..7a70b36 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,892 @@ Change log ----------- +# v2.98.6 +## (2022-04-27) + + +
+ Update layers/meta-balena to 798e236d25380d70e7be09d8d5dbb0349c05f413 [Renovate Bot] + +> ## meta-balena-2.98.6 +> ### (2022-04-26) +> +> * timeinit/timesync-https: Update rtc after setting system time [Alexandru Costache] +> +> ## meta-balena-2.98.5 +> ### (2022-04-26) +> +> * networkmanager: Use default DHCP timeout [Zahari Petkov] +> +> ## meta-balena-2.98.4 +> ### (2022-04-25) +> +> * Disable Engine startup timeouts [Leandro Motta Barros] +> +> ## meta-balena-2.98.3 +> ### (2022-04-25) +> +> * Add renovate configuration [Kyle Harding] +> +> ## meta-balena-2.98.2 +> ### (2022-04-25) +> +> * balena-config-vars: unit-conf: Correct description [Alex Gonzalez] +> * tests: os: Remove sshKeys test [Alex Gonzalez] +> * tests: cloud: Add SSH authentication tests [Alex Gonzalez] +> * os-sshkeys: When ssh keys change, regenerate development configuration [Alex Gonzalez] +> * development-features: use os-helpers-devmode include file [Alex Gonzalez] +> * os-helpers: Add os-helpers-devmode [Alex Gonzalez] +> +> ## meta-balena-2.98.1 +> ### (2022-04-23) +> +> * tests/leviathan: Update leviathan to v2.2.4 [Kyle Harding] +> +> ## meta-balena-2.98.0 +> ### (2022-04-23) +> +> * Refresh PKI assets from config endpoint [ab77] +> +> ## meta-balena-2.97.0 +> ### (2022-04-23) +> +> +>
+> Update balena-engine to v20.10.16 [Leandro Motta Barros] +> +>> ### balena-engine-20.10.16 +>> #### (2022-04-07) +>> +>> * contrib/init/systemd: update balena-engine.service [TIAN Yuanhao] +>> +>> ### balena-engine-20.10.15 +>> #### (2022-04-05) +>> +>> * Log more info upon when raising errRootFSMismatch [Leandro Motta Barros] +>> +>> ### balena-engine-20.10.14 +>> #### (2022-04-01) +>> +>> * Add more integration tests for deltas [Leandro Motta Barros] +>> +>> ### balena-engine-20.10.13 +>> #### (2022-03-09) +>> +>> * Add link to post to test landr [andrew] +>> +>
+> +> +> ## meta-balena-2.96.1 +> ### (2022-04-22) +> +> * kernel-balena: Mention https protocol for github repository [Alexandru Costache] +> +> ## meta-balena-2.96.0 +> ### (2022-04-22) +> +> * mobynit: Update to v0.2.0 [Alex Gonzalez] +> +> ## meta-balena-2.95.17 +> ### (2022-04-22) +> +> * resin-device-register: avoid blocking the flasher when not connected [Alexandru Costache] +> +> ## meta-balena-2.95.16 +> ### (2022-04-19) +> +> * Package iwlwifi-QuZ-a0-hr-b0 firmware separately [Florin Sarbu] +> +> ## meta-balena-2.95.15 +> ### (2022-04-06) +> +> * kernel-headers-test: clean tools like fixdep [Alexandru Costache] +> +> ## meta-balena-2.95.14 +> ### (2022-04-06) +> +> * Updates SIM info for soracom and provides docs. [Alex] +> +> ## meta-balena-2.95.13 +> ### (2022-04-06) +> +> * test/hup: fix unmounting error [rcooke-warwick] +> +> ## meta-balena-2.95.12 +> ### (2022-04-01) +> +> * grub-efi: Remove patch passing secure boot status to the kernel [Michal Toman] +> +> ## meta-balena-2.95.11 +> ### (Invalid date) +> +> * hostapp-update: Mount data partition on target balena/tmp [Kyle Harding] +> +> ## meta-balena-2.95.10 +> ### (Invalid date) +> +> * tests/os: check supervisor is pulled after purge [rcooke-warwick] +> +> ## meta-balena-2.95.9 +> ### (2022-03-28) +> +> * tests: update leviathan to 2.0.4 [rcooke-warwick] +> * tests: update config for new leviathan version [rcooke-warwick] +> +> ## meta-balena-2.95.8 +> ### (2022-03-25) +> +> * resindataexpander: Check and fix end GPT if necessary [Alexandru Costache] +> +> ## meta-balena-2.95.7 +> ### (2022-03-23) +> +> * hostapp-update-hooks: Always update legacy development variants to development mode [Alex Gonzalez] +> +> ## meta-balena-2.95.6 +> ### (2022-03-22) +> +> * balena-supervisor: Use architecture instead of device type to query API [Alex Gonzalez] +> * update-balena-supervisor: Support passing command line image argument [Alex Gonzalez] +> +> ## meta-balena-2.95.5 +> ### (2022-03-21) +> +> * tests/kernel-overlap: Prevent test run failure on older kernels [Alexandru Costache] +> +> ## meta-balena-2.95.4 +> ### (2022-03-17) +> +> * tests/os: wait for osconfig service to be inactive [rcooke-warwick] +> +> ## meta-balena-2.95.3 +> ### (2022-03-15) +> +> * balena-supervisor: Update balena-supervisor to v12.11.38 Ensure preloaded applications are ran when no internet is available on first run [20k-ultra] +> +> ## meta-balena-2.95.2 +> ### (2022-03-11) +> +> * kernel-balena: Disable building gcc plugins [Alexandru Costache] +> +> ## meta-balena-2.95.1 +> ### (2022-03-08) +> +> * tests: Add leviathan v2.0.0 as a submodule [Kyle Harding] +> * tests/cloud: Cleanup wait until loops in cloud suite [Kyle Harding] +> * tests/hup: Remove bluebird and this.context.get references [Kyle Harding] +> * tests/os: Remove bluebird and this.context.get references [Kyle Harding] +> * tests/cloud: Remove bluebird and this.context.get references [Kyle Harding] +> * tests: Cleanup suites config to support both testbot and qemu workers [Kyle Harding] +> * tests/cloud: Update cloud suite to support core on client [Kyle Harding] +> * tests/hup: Update hup suite to support core on client [Kyle Harding] +> * tests/os: Update os suite to support core on client [Kyle Harding] +> +> ## meta-balena-2.95.0 +> ### (2022-03-04) +> +> * Adds modem test suite [Alex] +> +> ## meta-balena-2.94.5 +> ### (2022-03-04) +> +> * Use by-state symlink for mounting the EFI partition when split [Michal Toman] +> * os-helpers: add TPM2 helpers [Michal Toman] +> * Add PCR protection policy to TPM operation unlocking LUKS passphrase [Michal Toman] +> +> ## meta-balena-2.94.4 +> ### (2022-03-04) +> +> * balena-supervisor: Fix supervisor tagging command [Florin Sarbu] +> +> ## meta-balena-2.94.3 +> ### (2022-03-02) +> +> * tests/os: fix bracket in bbb overlay test [rcooke-warwick] +> +> ## meta-balena-2.94.2 +> ### (2022-03-02) +> +> * tests: Enhance BeagleBone Black u-boot overlay test [Florin Sarbu] +> +> ## meta-balena-2.94.1 +> ### (2022-03-01) +> +> * balena-image: Default image type to balenaos-img [Alex Gonzalez] +> * Remove legacy resinhup images. [Alex Gonzalez] +> +> ## meta-balena-2.94.0 +> ### (2022-03-01) +> +> +>
+> Update balena-supervisor to v12.11.36 [Robert Günzler] +> +>> ### balena-supervisor-12.11.36 +>> #### (2022-02-23) +>> +>> * Ignore selinux security opts when comparing services [Felipe Lalanne] +>> +>> ### balena-supervisor-12.11.35 +>> #### (2022-02-16) +>> +>> * Add troubleshooting notice for macOS [fisehara] +>> +>> ### balena-supervisor-12.11.34 +>> #### (2022-02-15) +>> +>> * Create `touch` and `getBootTime` utility functions [Felipe Lalanne] +>> * Add update lock check to PATCH /v1/device/host-config [Christina Wang] +>> +>> ### balena-supervisor-12.11.33 +>> #### (2022-02-09) +>> +>> * Add support for local ipv6 reporting [Felipe Lalanne] +>> +>
+> +> * meta-resin-pyro: make sure $GO is set [Robert Günzler] +> * Refactor balena-engine recipe to more closely resemble upstream [Robert Günzler] +> * Update Golang recipes to 1.16.2 [Robert Günzler] +> +>
+> Update balena-engine to v20.10.12 [Robert Günzler] +> +>> ### balena-engine-20.10.12 +>> #### (2022-02-18) +>> +>> * storagemigration: keep going if migration fails [Robert Günzler] +>> * graphdriver/copy: fix handling of sockets [Robert Günzler] +>> * pkg/storagemigration: use graphdriver/copy.DirCopy [Robert Günzler] +>> * Prune Jenkinsfile [Robert Günzler] +>> * Backport platform-detection fixes from containerd [Robert Günzler] +>> * storagemigration: capture failcleanup logs in logfile [Robert Günzler] +>> * storagemigration: move logic to package [Robert Günzler] +>> * prevent slice oob access in concatReadSeekCloser [Martin Rauscher] +>> * Make layer download resuming more resilient [Leandro Motta Barros] +>> * Drop CODEOWNERS [Robert Günzler] +>> * pkg/storagemigration: poperly handle errors during state creation [Robert Günzler] +>> * pkg/storagemigration: allow writing logs to separate file [Robert Günzler] +>> * storagemigration: defer commit to next start [Robert Günzler] +>> * Lock destination layers while delta is being processed [Robert Günzler] +>> * Add aufs to overlay2 migrator [Robert Günzler] +>> * Update the README [Robert Günzler] +>> * Cleanup repo [Robert Günzler] +>> * Add a SECURITY.md [Robert Günzler] +>> * top_unix.go: allow busybox ps with no args [Kyle Harding] +>> * Bump balena-os/balena-containerd to 1da48a8 [Tian Yuanhao] +>> * Add changelog template to allow generating nested changelogs [Robert Günzler] +>> * Update github issue and pr templates [Robert Günzler] +>> * Update codeowners [Robert Günzler] +>> * hack: Fix CLI versioning [Robert Günzler] +>> * Fixed typos in getting-started.md docs [Miguel Casqueira] +>> * Add integration tests for hostapp handling [Robert Günzler] +>> * Fix container data deletion [Roman Mazur] +>> * overlay2: Add List support [Roman Mazur] +>> * aufs: Add List support [Roman Mazur] +>> * layer: Remove unreferenced driver layers on create [Roman Mazur] +>> * layer: Prune unused data on layer store creation [Roman Mazur] +>> * layer: Persist cacheID early on transaction start [Roman Mazur] +>> * pkg/authorization: Fix test failures on macOS [Roman Mazur] +>> * Move ci to balenaCI [Robert Günzler] +>> * contrib: Add balena-engine version of dind container [Robert Günzler] +>> * build.sh: Disable btrfs,zfs,devicemapper graphdrivers [Robert Günzler] +>> * Bump CLI dependency to include fix for #178 [Robert Günzler] +>> * Bump CLI dependency to include --cidenv flag [Robert Günzler] +>> * Allow passing container ID to container via environment variable [Robert Günzler] +>> * contrib/install.sh: Add details to the success message [Robert Günzler] +>> * contrib/install.sh: Rename balena to balenaEngine in ASCII art output [Robert Günzler] +>> * contrib/install.sh: Fail on error [Robert Günzler] +>> * Add daemon flags to configure max download/upload attempts during pull/push [Robert Günzler] +>> * aufs,overlay2: Add driver opts for disk sync [Robert Günzler] +>> * Fix double locking in the event handling code of OOM events [Robert Günzler] +>> * integration-tests: Add test for containers with memory,cpu constraints [Robert Günzler] +>> * Update Dockerfiles used for build to Go 1.10.8 [Robert Günzler] +>> * travis: Use the minimal machine [Robert Günzler] +>> * Add cli for tagging delta images [Robert Günzler] +>> * Allow tagging of image deltas on creation [Robert Günzler] +>> * docs: Fix Docker capitalisation in balenaEngine docs [Paulo Castro] +>> * Update balenaEngine logo in README.md [Paulo Castro] +>> * Disable incompatible integration tests [Paulo Castro] +>> +>> ### balena-engine-20.10.11 +>> #### (2021-12-09) +>> +>> * Merge upstream v20.10.11 [Robert Günzler] +>> +>
+> +> +> ## meta-balena-2.93.2 +> ### (2022-03-01) +> +> * prepare-openvpn: Make configurable [Alex Gonzalez] +> +> ## meta-balena-2.93.1 +> ### (2022-02-28) +> +> * tests/cloud: Use deviceID returned from pre-registration [Kyle Harding] +> +> ## meta-balena-2.93.0 +> ### (2022-02-26) +> +> * resin-device-register: Use supervisor version label instead of tag [Alex Gonzalez] +> * balena-supervisor: Rename repository/tag to fleet/version [Alex Gonzalez] +> * docker-disk: entry.sh: Rename repository/tag to fleet/version [Alex Gonzalez] +> +> ## meta-balena-2.92.0 +> ### (2022-02-25) +> +> * Update ModemManager to v1.18.4 [Zahari Petkov] +> +> ## meta-balena-2.91.6 +> ### (2022-02-25) +> +> * resin-device-register: Regenerate VPN credentials on registration [Alex Gonzalez] +> * resin-init-flasher: Wait for resin-device-register to start [Alex Gonzalez] +> +> ## meta-balena-2.91.5 +> ### (2022-02-24) +> +> * suites/os: Add testcase for RPi device-tree [Alexandru Costache] +> +> ## meta-balena-2.91.4 +> ### (2022-02-24) +> +> * openvpn: Remove dependency on timesync-http target [Alex Gonzalez] +> +> ## meta-balena-2.91.3 +> ### (2022-02-24) +> +> * tests/os: Wait for os-config-json service to be inactive [Kyle Harding] +> +> ## meta-balena-2.91.2 +> ### (2022-02-23) +> +> * contributing-device-support.md: Updates to board support instructions [Florin Sarbu] +> +> ## meta-balena-2.91.1 +> ### (2022-02-21) +> +> * tests/cloud: wait for update lock message in logs [rcooke-warwick] +> * tests/cloud: register teardown before online [rcooke-warwick] +> +> ## meta-balena-2.91.0 +> ### (2022-02-14) +> +> * openssh: Add a dependency on os-sshkeys [Alex Gonzalez] +> * balena-supervisor: Add dependency on root CA [Alex Gonzalez] +> * balena: Add dependency on balena-hostname [Alex Gonzalez] +> * Make services configurable [Alex Gonzalez] +> * classes: Add balena-configurable [Alex Gonzalez] +> * balena-config-vars: Split config.json configuration on write [Alex Gonzalez] +> * Remove config-json.target [Alex Gonzalez] +> +> ## meta-balena-2.90.0 +> ### (2022-02-13) +> +> * resin-init-flasher: check for UEFI mode and set config variables [Mark Corbin] +> * resin-init-flasher: Fix flashing progress reporting for LUKS [Michal Toman] +> * resin-init-flasher: Use flasher kernel to emulate stage2 bootloader with LUKS [Michal Toman] +> * resin-init-flasher: Add support for opt-in full disk encryption [Michal Toman] +> +> ## meta-balena-2.89.19 +> ### (2022-02-13) +> +> * README: Update versioning information [Alex Gonzalez] +> +> ## meta-balena-2.89.18 +> ### (2022-02-11) +> +> * fix cloud suite teardown [rcooke-warwick] +> +> ## meta-balena-2.89.17 +> ### (2022-02-09) +> +> * suites/hup: Add under-voltage test before and after HUP [Alexandru Costache] +> +> ## meta-balena-2.89.16 +> ### (2022-02-07) +> +> * balena-supervisor: Update balena-supervisor to v12.11.32 [Felipe Lalanne] +> +> ## meta-balena-2.89.15 +> ### (2022-02-07) +> +> * resindataexpander: do not return after resizing the partition only [Michal Toman] +> +> ## meta-balena-2.89.14 +> ### (2022-02-03) +> +> * resin-u-boot.bbclass: Do not error if no config_defaults.h [Florin Sarbu] +> +> ## meta-balena-2.89.13 +> ### (2022-02-01) +> +> * docker-disk: Tag the supervisor digest with the repo name [Kyle Harding] +> +> ## meta-balena-2.89.12 +> ### (2022-02-01) +> +> * resindataexpander: expand fs independent of partition [Joseph Kogut] +> +> ## meta-balena-2.89.11 +> ### (2022-01-29) +> +> * image_types_balena: Augment dependency on u-boot do_deploy task [Florin Sarbu] +> +> ## meta-balena-2.89.10 +> ### (2022-01-28) +> +> * tests: relax boot splash screen check [rcooke-warwick] +> +> ## meta-balena-2.89.9 +> ### (2022-01-27) +> +> * archive logs using local ssh [rcooke-warwick] +> * put archiver in the right place [rcooke-warwick] +> * Enable UART serial console for supported devices [Kyle Harding] +> * archive image on teardown [rcooke-warwick] +> * put device in dev mode [rcooke-warwick] +> * tests: add extra logging to cloud suite [rcooke-warwick] +> +> ## meta-balena-2.89.8 +> ### (2022-01-27) +> +> * u-boot: Move config fragments merging code out of common layer [Florin Sarbu] +> +> ## meta-balena-2.89.7 +> ### (2022-01-26) +> +> * explain balenaRootCA better [Martin Rauscher] +> +> ## meta-balena-2.89.6 +> ### (2022-01-26) +> +> * classes/kernel-balena: Update aufs patches for kernel 5.10.82 [Alexandru Costache] +> +> ## meta-balena-2.89.5 +> ### (2022-01-24) +> +> * os: tests: optimize fingerprint tests [Joseph Kogut] +> +> ## meta-balena-2.89.4 +> ### (2022-01-21) +> +> * tests: add cloud test suite [rcooke-warwick] +> +> ## meta-balena-2.89.3 +> ### (2022-01-20) +> +> * initramfs-framework: Make cleaning udev database the last step [Alex Gonzalez] +> +> ## meta-balena-2.89.2 +> ### (2022-01-20) +> +> * recipes-core/jq: Use 64bit time symbols [Alexandru Costache] +> +> ## meta-balena-2.89.1 +> ### (2022-01-19) +> +> * tests: Enable UART serial console where supported [Kyle Harding] +> +> ## meta-balena-2.89.0 +> ### (2022-01-19) +> +> * docker-disk: Pull images from Balena's registry [Alex Gonzalez] +> * balena-supervisor: Use image location path instead of repository:tag [Alex Gonzalez] +> * distro: balena-os: Add default cloud environment distro setting [Alex Gonzalez] +> +> ## meta-balena-2.88.22 +> ### (2022-01-18) +> +> * intel-quark: Fix to honister syntax [Alex Gonzalez] +> * recipes-core/bash: Use 64bit time symbols [Alexandru Costache] +> * recipes-core/busybox: Use 64bit time symbols [Alexandru Costache] +> +> ## meta-balena-2.88.21 +> ### (2022-01-17) +> +> * tests: os: config-json: cleanup persistentLogging test [Joseph Kogut] +> * tests: os: config-json: return promise from sshKeys test [Joseph Kogut] +> * tests: os: config-json: cleanup dnsServers config test [Joseph Kogut] +> * tests: os: config-json: cleanup ntpServer config test [Joseph Kogut] +> * tests: os: config-json: cleanup hostname config test [Joseph Kogut] +> * tests: os: create waitForServiceState helper [Joseph Kogut] +> * tests: os: config-json: remove reboot from randomMacAddressScan test [Joseph Kogut] +> * tests: os: config-json: remove reboot from connectivity test [Joseph Kogut] +> * tests: os: config-json: remove reboot from udevRules test [Joseph Kogut] +> +> ## meta-balena-2.88.20 +> ### (2022-01-17) +> +> * chrony: fix mount service dependency for driftfile [Mark Corbin] +> +> ## meta-balena-2.88.19 +> ### (2022-01-12) +> +> * os: tests: optimize fsck tests [Joseph Kogut] +> +> ## meta-balena-2.88.18 +> ### (2022-01-11) +> +> * conf/distro: Prefer rust v1.36 for releases older than Honister [Alexandru Costache] +> +> ## meta-balena-2.88.17 +> ### (2022-01-10) +> +> * recipes-core/coreutils: Use 64bit time symbols [Alexandru Costache] +> * classes/image_types_balena: Preserve file modification times with mcopy [Alexandru Costache] +> +> ## meta-balena-2.88.16 +> ### (2022-01-05) +> +> * balena-os.inc: Switch balena backend storage to overlay2 [Florin Sarbu] +> +> ## meta-balena-2.88.15 +> ### (2022-01-04) +> +> * initrdscripts: fsuuidinit: Generate resin-rootA last [Alex Gonzalez] +> * lvm2: Add rule to persist dm devices in udev database [Alex Gonzalez] +> * initrdscript: Cleanup udev database before transitioning to rootfs [Alex Gonzalez] +> * initrdscripts: Use /run as bootparam_root storage [Alex Gonzalez] +> * lvm: Add lvm rules when secure boot is configured [Alex Gonzalez] +> * balena-keys: Fetch DER keys and decode from base64 [Alex Gonzalez] +> +> ## meta-balena-2.88.14 +> ### (2022-01-04) +> +> * Sync cached writes to disk when updating supervisor.conf [Miguel Casqueira] +> +> ## meta-balena-2.88.13 +> ### (2022-01-04) +> +> * hostapp-update-hooks: Handle developmentMode updates [Alex Gonzalez] +> +> ## meta-balena-2.88.12 +> ### (2022-01-03) +> +> * systemd/timeinit: handle missing date field in HTTPS header [Mark Corbin] +> +> ## meta-balena-2.88.11 +> ### (2021-12-22) +> +> * balena-supervisor: Update balena-supervisor to v12.11.16 Update balena-supervisor from 12.11.0 to 12.11.16 [Miguel Casqueira] +> +> ## meta-balena-2.88.10 +> ### (2021-12-16) +> +> * Update NetworkManager to 1.32.12 [Zahari Petkov] +> +> ## meta-balena-2.88.9 +> ### (2021-12-15) +> +> * u-boot: Move u-boot configs inclusion into resin-u-boot.bbclass [Florin Sarbu] +> +> ## meta-balena-2.88.8 +> ### (2021-12-09) +> +> * patch: Add archiveLogs Teardown for HUP suite [Vipul Gupta] +> +> ## meta-balena-2.88.7 +> ### (2021-12-06) +> +> * tests: Ensure BDADDR is initialized [Alexandru Costache] +> +> ## meta-balena-2.88.6 +> ### (2021-12-04) +> +> * docs: Fix links in Rollback documentation [Kyle Harding] +> +> ## meta-balena-2.88.5 +> ### (2021-12-04) +> +> * tests: os: fix unhandled exception when unwrapping non-flasher image [Joseph Kogut] +> +> ## meta-balena-2.88.4 +> ### (2021-12-03) +> +> * tests: Add basic checks for data loss during HUP [Kyle Harding] +> * hostapp-update-hooks: Ensure data breadcrumb is present before HUP [Kyle Harding] +> +> ## meta-balena-2.88.3 +> ### (2021-12-02) +> +> * grub-conf: Delay grub boot in os development mode [Alex Gonzalez] +> * grub-efi: Allow input/output in OS development mode [Alex Gonzalez] +> +> ## meta-balena-2.88.2 +> ### (2021-12-02) +> +> * sign-efi.bbclass: Do not deploy the unused .signed symlink [Michal Toman] +> * sign-gpg.bbclass: Only deploy the detached signature [Michal Toman] +> * kernel-image-initramfs.bb: Ship kernel and matching signature [Michal Toman] +> * Make kexec work under kernel lockdown [Michal Toman] +> +> ## meta-balena-2.88.1 +> ### (2021-12-02) +> +> * bluez5: Update to bluez 5.61 from poky honister [Kyle Harding] +> +> ## meta-balena-2.88.0 +> ### (2021-12-01) +> +> * systemd/timeinit: add HTTPS time synchronisation service [Mark Corbin] +> +> ## meta-balena-2.87.32 +> ### (2021-12-01) +> +> * tests: Add BeagleBone Black u-boot overlay test [Florin Sarbu] +> +> ## meta-balena-2.87.31 +> ### (Invalid date) +> +> * resin-update-state.rules: do not run for unnamed partitions [Michal Toman] +> * resin_update_state_probe: do not skip device mapper devices [Michal Toman] +> +> ## meta-balena-2.87.30 +> ### (Invalid date) +> +> * tests: Add device specific RevPi Core 3 DIO module test [Alexandru Costache] +> +> ## meta-balena-2.87.29 +> ### (2021-11-29) +> +> * common: image-balena: enable developmentMode when OS_DEVELOPMENT=1 [Joseph Kogut] +> +> ## meta-balena-2.87.28 +> ### (2021-11-26) +> +> * Add secure boot keys to the flasher boot partition [Alex Gonzalez] +> +> ## meta-balena-2.87.27 +> ### (2021-11-25) +> +> * balena-os: make sure PAM support is not configured [Alex Gonzalez] +> +> ## meta-balena-2.87.26 +> ### (2021-11-25) +> +> * tests: add test for filesystem checks [Joseph Kogut] +> * common: initrdscript: fsck resin-data on boot [Joseph Kogut] +> +> ## meta-balena-2.87.25 +> ### (2021-11-25) +> +> * connectivity: reduce ping interval to minimum [Joseph Kogut] +> +> ## meta-balena-2.87.24 +> ### (2021-11-24) +> +> * tests: Fix dnsmasq tests in cases where 8.8.8.8 is assigned via DHCP [Kyle Harding] +> +> ## meta-balena-2.87.23 +> ### (2021-11-24) +> +> * 0-signed-update HUP hook: mount efivarfs if necessary [Michal Toman] +> +> ## meta-balena-2.87.22 +> ### (2021-11-24) +> +> * grub-efi: Accept no input and output nothing when in secure boot mode [Michal Toman] +> +> ## meta-balena-2.87.21 +> ### (2021-11-24) +> +> * linux-firmware: Include MT7601U firmware [Zahari Petkov] +> +> ## meta-balena-2.87.20 +> ### (2021-11-23) +> +> * balena-image: Add balena keys to boot partition if required [Alex Gonzalez] +> * grub-conf: Enforce module signing and integrity lockdown on luks config [Alex Gonzalez] +> * distro: balena-os: Add empty SIGN_API [Alex Gonzalez] +> * classes: image-balena: Copy signed files if present [Alex Gonzalez] +> * classes/sign-gpg: Rename class to sign_gpg [Alex Gonzalez] +> * classes: Rename sign to sign-gpg [Alex Gonzalez] +> * classes: sign: Drop suffix from deployed files [Alex Gonzalez] +> * resin-init-flasher: Set fde grub.cfg if secure boot is enabled [Alex Gonzalez] +> * balena-image-initramfs: Add secure boot dependencies [Alex Gonzalez] +> * kernel-image-initramfs: Install signed kernel images if available [Alex Gonzalez] +> * kernel-balena: Configure for secure boot [Alex Gonzalez] +> +> ## meta-balena-2.87.19 +> ### (2021-11-22) +> +> * common: enable multi-label mDNS resolution and IPv6 [Joseph Kogut] +> +> ## meta-balena-2.87.18 +> ### (2021-11-22) +> +> * unwrap flasher images in os suite if needed [rcooke-warwick] +> * bluetooth and hup test with qemu [rcooke-warwick] +> +> ## meta-balena-2.87.17 +> ### (2021-11-21) +> +> * efitools: Add recipe [Alex Gonzalez] +> * sbsigntool: Add recipe [Alex Gonzalez] +> +> ## meta-balena-2.87.16 +> ### (2021-11-21) +> +> * peak: Modify kernel driver to use signing class [Alex Gonzalez] +> +> ## meta-balena-2.87.15 +> ### (2021-11-21) +> +> * kernel-balena.class: Add support for FDE and sign for secure boot [Michal Toman] +> +> ## meta-balena-2.87.14 +> ### (2021-11-21) +> +> * sign-efi.bbclass: do not mix old and new bitbake syntax [Michal Toman] +> * Revert "sign-efi.class, sign-kmod.class: Replace original files with signed ones" [Michal Toman] +> +> ## meta-balena-2.87.13 +> ### (2021-11-20) +> +> * meta-resin-sumo/pyro: Fix initramfs-framework kexec dependencies [Alex Gonzalez] +> * initrdscripts: Use a 2nd stage bootloader to unlock LUKS partitions [Michal Toman] +> * grub-efi: add support for signature verification in secure boot mode [Michal Toman] +> +> ## meta-balena-2.87.12 +> ### (2021-11-20) +> +> * initramfs-module-cryptsetup: add TPM dependencies [Michal Toman] +> +> ## meta-balena-2.87.11 +> ### (2021-11-20) +> +> * balena-keys: Add recipe [Alex Gonzalez] +> +> ## meta-balena-2.87.10 +> ### (2021-11-20) +> +> * sign-efi.class, sign-kmod.class: Replace original files with signed ones [Michal Toman] +> * Add signing classes [Alex Gonzalez] +> +> ## meta-balena-2.87.9 +> ### (2021-11-17) +> +> * hostapp-update-hooks: Add a hook that aborts HUP to unsigned OS under secure boot [Michal Toman] +> +> ## meta-balena-2.87.8 +> ### (2021-11-17) +> +> * resin-mounts: mount EFI partition if it is split from boot [Michal Toman] +> +> ## meta-balena-2.87.7 +> ### (2021-11-16) +> +> * initrdscripts: add a script for unlocking LUKS volumes [Michal Toman] +> +> ## meta-balena-2.87.6 +> ### (2021-11-15) +> +> * connectivity: proxy: move nadoo/glider to container [Joseph Kogut] +> +> ## meta-balena-2.87.5 +> ### (2021-11-11) +> +> * tests: os: Add exposed engine socket test [Alex Gonzalez] +> +> ## meta-balena-2.87.4 +> ### (2021-11-11) +> +> * resindataexpander: also resize LUKS volume if necessary [Michal Toman] +> +> ## meta-balena-2.87.3 +> ### (2021-11-11) +> +> * Add out-of-tree peak CAN driver [Michal Toman] +> +> ## meta-balena-2.87.2 +> ### (2021-11-11) +> +> * Add recipes for TPM2 tools [Michal Toman] +> +> ## meta-balena-2.87.1 +> ### (2021-11-10) +> +> * recipes-devtools/dosfstools: Fix build with Poky Honister [Alexandru Costache] +> +> ## meta-balena-2.87.0 +> ### (2021-11-09) +> +> * meta-balena-common/conf: Switch layer to Honister compatibility [Alexandru Costache] +> +> ## meta-balena-2.86.3 +> ### (2021-11-09) +> +> * patch: Fix URL to yocto project dependencies [Kyle Harding] +> +> ## meta-balena-2.86.2 +> ### (2021-11-08) +> +> * dosfstools: selectively apply upstreamed patch [Joseph Kogut] +> * tests: wait for the chronyd service become active [Mark Corbin] +> +> ## meta-balena-2.86.1 +> ### (2021-11-02) +> +> * tests/issue: Add test to check issues files [Alex Gonzalez] +> * base files: Use HOSTOS_VERSION in issue and issue.net [Alex Gonzalez] +> +> ## meta-balena-2.86.0 +> ### (2021-10-29) +> +> * Create new data partition reset service [Kyle Harding] +> +> ## meta-balena-2.85.17 +> ### (2021-10-28) +> +> * restrict dtoverlay test to rpi devices [rcooke-warwick] +> +> ## meta-balena-2.85.16 +> ### (2021-10-27) +> +> +>
+> Update balena-engine to v19.03.30 [Robert Günzler] +> +>> ### balena-engine-19.03.30 +>> #### (2021-10-26) +>> +>> * storagemigration: keep going if migration fails [Robert Günzler] +>> * graphdriver/copy: fix handling of sockets [Robert Günzler] +>> +>
+> +> +> ## meta-balena-2.85.15 +> ### (2021-10-26) +> +> * linux-firmware: Include RTL8723BU firmware files [Zahari Petkov] +> +> ## meta-balena-2.85.14 +> ### (2021-10-25) +> +> * balena-supervisor: Update balena-supervisor to v12.11.0 [Felipe Lalanne] +> +> ## meta-balena-2.85.13 +> ### (2021-10-21) +> +> * balena-engine: Remove deprecated development drop-in service file [Kyle Harding] +> +> ## meta-balena-2.85.12 +> ### (2021-10-21) +> +> * make led test work with beaglebone [rcooke-warwick] +> +> ## meta-balena-2.85.11 +> ### (2021-10-06) +> +> * patch: Add dtoverlay practical test [Vipul Gupta (@vipulgupta2048)] +> +
+ # v2.85.10+rev9 ## (2022-04-26) diff --git a/VERSION b/VERSION index 6bcf372..d5fab2e 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.85.10+rev9 \ No newline at end of file +2.98.6 \ No newline at end of file