Releases · nix-community/lanzaboote

23 Jan 13:56

RaitoBezarius

v0.4.2

a65905a

v0.4.2 Latest

Latest

This release fixes lanzaboote for systemd v257 and more versions.

Fixed in: #423 - thanks to @mjm and @ElvishJerricco for the fast turnover!!

It brings also minor improvements:

companions files are automatically loaded by the UEFI stub now, done by @RaitoBezarius
better errors are available when the public key is missing, thanks to @Mic92!

On the internal side of things: signature schemes are generalized and now offer the possibility to plug more signers backends, e.g. HSM, etc.

What's Changed

Update the crane flake input to prevent IFDs when building the UEFI stub by @korfuri in #360
Reorganize tests & add sort-key support by @nikstur in #359
module: revert sort-key from lanzaboote back to lanza by @nikstur in #364
chore(deps): lock file maintenance by @renovate in #363
Fix Matrix Room Link by @blitz in #365
fix(deps): update all dependencies by @renovate in #370
stub: load companions by @RaitoBezarius in #306
chore(deps): lock file maintenance by @renovate in #368
Drop no longer existing overwrite by @SuperSandro2000 in #378
chore(deps): lock file maintenance by @renovate in #379
fix(deps): update all dependencies by @renovate in #372
chore(deps): lock file maintenance by @renovate in #383
shared: generalize signature schemes by @RaitoBezarius in #303
chore(deps): update uefi to 0.31.0 by @nicholasbishop in #388
linux-bootloader: simplify get_loader_features by @nicholasbishop in #392
Minor coding style fix: lib.getExe instead of ${bin}/bin/bin by @kuflierl in #391
Replace uses of the RuntimeServices struct by @nicholasbishop in #396
linux-bootloader: Clean up remaining uses of RuntimeServices by @nicholasbishop in #398
Drop most uses of BootServices by @nicholasbishop in #399
chore(deps): lock file maintenance by @renovate in #386
Drop most uses of SystemTable by @nicholasbishop in #400
fix(deps): update rust crate uefi to 0.32.0 by @renovate in #385
fix(tool): better error if public key is missing by @Mic92 in #382
chore(deps): lock file maintenance by @renovate in #402
fix(deps): update all dependencies by @renovate in #401
chore(deps): lock file maintenance by @renovate in #403
chore(deps): lock file maintenance by @renovate in #405
fix(deps): update all dependencies by @renovate in #407
chore(deps): lock file maintenance by @renovate in #408
fix(deps): update all dependencies by @renovate in #410
Docs/framework by @pjungkamp in #418
fix(tool): parse osrel sections without trailing null by @mjm in #423
treewide: 0.4.1 -> 0.4.2 by @RaitoBezarius in #429

New Contributors

@korfuri made their first contribution in #360
@nicholasbishop made their first contribution in #388
@kuflierl made their first contribution in #391
@pjungkamp made their first contribution in #418
@mjm made their first contribution in #423

Full Changelog: v0.4.1...v0.4.2

Contributors

mjm, blitz, and 10 other contributors

Assets 2

12 Jun 07:58

nikstur

v0.4.1

b627ccd

v0.4.1

What's Changed

treewide: 0.3.0 -> 0.4.1 by @nikstur in #358

Full Changelog: v0.4.0...v0.4.1

Contributors

nikstur

Assets 2

09 Jun 19:44

nikstur

v0.4.0

56ed078

v0.4.0

What's Changed

fix(deps): update all dependencies by @renovate in #172
feat: minimal poc for exporting UEFI variables à la sd-boot by @RaitoBezarius in #166
fix(deps): update all dependencies by @renovate in #175
flake.lock: Update by @RaitoBezarius in #176
Add rustfmt checks by @nikstur in #177
feat: minimal poc for TPM measurements à la sd-stub by @RaitoBezarius in #167
chore: sync our crates version to latest tag by @RaitoBezarius in #180
tool(bootspec): remove boilerplate with newest bootspec by @RaitoBezarius in #179
deps: update to uefi-rs 0.21.0 by @RaitoBezarius in #178
fix(deps): update all dependencies by @renovate in #181
tool: improve command error messages by @nikstur in #184
Cleanup flake by @nikstur in #185
docs: add precision about dbx and OptionROMs by @erdnaxe in #186
docs: update upstreaming state by @RaitoBezarius in #188
docs: fixup stray ``` by @RaitoBezarius in #189
fix(deps): update rust crate log to 0.4.18 by @renovate in #191
stub: add fat variant by @nikstur in #182
stub: upgrade to uefi-rs 0.22.0 by @RaitoBezarius in #192
fix(deps): update all dependencies by @renovate in #193
feat(stub): throw compile error in case of enabling fat and thin feat… by @RaitoBezarius in #195
project: move to nixpkgs Rust infrastructure by @RaitoBezarius in #147
Fix eval when aliases are disabled by @SuperSandro2000 in #198
update QUICK_START.md bootspec by @Janik-Haag in #200
Further updates to QUICK_START.md by @Janik-Haag in #201
docs: suggest to track released versions rather than master by @RaitoBezarius in #207
flake: offer nix-community cache as a suggested substituter by @RaitoBezarius in #208
Update all dependencies besides goblin by @nikstur in #209
Revert "docs: suggest to track released versions rather than master " by @nikstur in #210
docs: suggest to use 0.3.0 tagged release of lanzaboote rather than master by @RaitoBezarius in #211
flake.lock: Update by @nikstur in #212
Fix lzbt build with recent nixos-unstable by @SuperSandro2000 in #217
Revert back to crane by @nikstur in #218
tool: only sync ESP filesystem by @tilpner in #219
stub: split up into a linux-bootloader crate by @RaitoBezarius in #215
docs: Add hyperlinks to lzbt, stub file locations instead of static paths by @tuxiqae in #214
flake: use an appropriate description by @nikstur in #222
lzbt: abstraction for multiple backends by @RaitoBezarius in #206
flake: remove nixConfig by @nikstur in #223
stub: remove TPM 1 support by @nikstur in #224
feat: support for AArch64 by @RaitoBezarius in #31
Fix eval in flakes when aliases are disabled by @SuperSandro2000 in #231
nix/modules/uki: fix ukify build by @RaitoBezarius in #230
docs: Add troubleshooting documentation by @alois31 in #233
Stop most overwriting in the ESP by @alois31 in #204
stub: update to latest uefi crates by @blitz in #235
Fix build with documentation.nixos.includeAllModules = true; by @Ma27 in #236
stub: pin to current goblin version by @blitz in #238
stub: improve handling of insecure boot by @alois31 in #232
fix(deps): update all dependencies by @renovate in #196
Pin EDK2 202305 by @blitz in #241
chore(deps): lock file maintenance by @renovate in #216
Consistently Display Generations in systemd-boot by @blitz in #242
chore(deps): lock file maintenance by @renovate in #243
linux_loader: improve code quality + bug fix by @phip1611 in #244
fix(deps): update all dependencies by @renovate in #246
chore(deps): lock file maintenance by @renovate in #247
docs: clarify migration path for new installations by @Mic92 in #248
Lightweight Shell by @blitz in #245
chore(deps): lock file maintenance by @renovate in #249
tests: add 5 minutes default timeout by @RaitoBezarius in #250
chore(deps): lock file maintenance by @renovate in #255
fix(deps): update rust crate serde_json to 1.0.108 by @renovate in #254
feat(flake): perform final fixups to the flake outputs by @RaitoBezarius in #257
fix(deps): update all dependencies by @renovate in #258
Remove Nondeterminism in Stub by @blitz in #261
Parse Systemd Release Candidate Versions by @blitz in #263
flake: remove "moving away the unsupportedChecks" by @RaitoBezarius in #265
fix(deps): update rust crate clap to 4.4.10 by @renovate in #267
fix(deps): update all dependencies by @renovate in #269
fix(deps): update rust crate anyhow to 1.0.76 by @renovate in #270
add framework specific instructions by @Mic92 in #272
add more helpful message in case of append_initrd_secrets script failure by @JulienMalka in #253
fix(deps): update all dependencies by @renovate in #276
Use the original os-release file parser by @rbran in #275
fix(deps): update all dependencies by @renovate in #281
chore(deps): update all dependencies by @renovate in #283
make pre-commit-hooks-nix optional by @Mic92 in #282
chore(deps): lock file maintenance by @renovate in #259
add aarch64 ci by @Mic92 in #280
readme: make upstreaming section more timeless by @nikstur in #286
Small fixes & updates by @nikstur in #287
fix(deps): update all dependencies by @renovate in #288
chore(deps): lock file maintenance by @renovate in #289
Revert "chore(deps): lock file maintenance" by @nikstur in #290
chore(deps): lock file maintenance by @renovate in #291
chore(deps): lock file maintenance by @renovate in #293
fix(deps): update rust crate serde_json to 1.0.113 by @renovate in #292
fix(deps): update all dependencies by @renovate in #297
chore(deps): lock file maintenance by @renovate in #298
fix(deps): update all depende...

Contributors

blitz, Mic92, and 18 other contributors

Assets 2

29 Apr 21:09

RaitoBezarius

v0.3.0

64b903c

v0.3.0

This version supports the officially merged Bootspec RFC-125 from NixOS. Previous versions are not guaranteed to work anymore with future versions of NixOS.

What's Changed

tests: correctly test appending secret to initrd by @nikstur in #117
Properly handle fwupd update capsules by @dasJ in #113
Revert "Properly handle fwupd update capsules" by @blitz in #119
docs: add non-flakes quick start documentation by @RaitoBezarius in #118
Configure Renovate by @renovate in #120
fix(deps): update all dependencies by @renovate in #122
tool: init configurable logging by @nikstur in #121
tool: fine tune a few log messages by @nikstur in #125
fix(deps): update all dependencies by @renovate in #130
Don't Reload Stub from the File System by @blitz in #132
chore(deps): lock file maintenance by @renovate in #138
fix(deps): update all dependencies by @renovate in #137
Properly handle fwupd update capsules, take 2 by @lilyinstarlight in #131
nixos-module: add settings key for the loader.conf by @kanashimia in #134
Use birth time instead of modify time for generation "built on" date by @adtya in #139
tool: drop buggy condition for when to sign by @Myaats in #142
fix(deps): update all dependencies by @renovate in #145
nix: clean up fwupd-efi handling a little bit by @lilyinstarlight in #141
stub: make it compatible with a stable Rust compiler (≥ 1.68.x) by @RaitoBezarius in #149
chore(deps): update all dependencies by @renovate in #152
stub: implement flush_instruction_cache on i686 and AArch64 by @alois31 in #151
Bump Rust Overlay by @blitz in #156
flake: reduce number of dependencies by @Mic92 in #157
Avoid Unbootable System on Bootspec Changes by @blitz in #155
tool: revert log level of malformed gens by @nikstur in #158
tool: Switch back to mtime by @dasJ in #160
fix(deps): update rust crate clap to 4.2.4 by @renovate in #159
tool: disable gc in the presence of malformed gens by @nikstur in #161
tool: improve log message about malformed gens by @nikstur in #164
bootspec: RFC-0125 final changes by @RaitoBezarius in #148
feat: enable synthesis support by @RaitoBezarius in #163