diff --git a/changelog b/changelog new file mode 100644 index 0000000..8f5b1f8 --- /dev/null +++ b/changelog @@ -0,0 +1,186 @@ +* Fri Aug 05 2022 Luca BRUNO - 18-10 +- Simplify sysusers.d fragment by using default 'nologin' shell + +* Wed Jul 20 2022 Fedora Release Engineering - 18-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + +* Fri Jul 8 2022 Sergio Arroutbi - 18-8 +- Support a null pin + +* Tue Jun 28 2022 Sergio Arroutbi - 18-7 + Start clevis-luks-askpass.patch service according to global policy + +* Wed Jan 19 2022 Fedora Release Engineering - 18-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Fri Oct 29 2021 Sergio Correia - 18-5 + Account for unlocking failures in clevis-luks-askpass + Resolves: rhbz#1878892 + +* Tue Sep 14 2021 Sahana Prasad - 18-4 +- Rebuilt with OpenSSL 3.0.0 + +* Wed Jul 21 2021 Fedora Release Engineering - 18-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Fri May 07 2021 Sergio Correia - 18-2 +- Port to OpenSSL 3 + Backport of upstream commit (ee1dfedb) + +* Thu Apr 15 2021 Sergio Correia - 18-1 +- Update to new clevis upstream release, v18. + +* Wed Apr 14 2021 Sergio Correia - 17-1 +- Update to new clevis upstream release, v17. + +* Tue Mar 16 2021 Sergio Correia - 16-2 +- Fix for -t option in clevis luks bind - backport upstream commit ea0d0c20 + +* Tue Feb 09 2021 Sergio Correia - 16-1 +- Update to new clevis upstream release, v16. + +* Tue Jan 26 2021 Fedora Release Engineering - 15-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Mon Nov 23 08:14:40 GMT 2020 Peter Robinson - 15-3 +- Upstream patch for tpm-tools 5.0 support + +* Thu Oct 29 2020 Sergio Correia - 15-2 +- Add jq to dependencies + +* Wed Oct 28 2020 Sergio Correia - 15-1 +- Update to new clevis upstream release, v15. + +* Tue Sep 08 2020 Sergio Correia - 14-5 +- Suppress output in pre scriptlet when adjusting users/groups + Resolves: rhbz#1876729 + +* Tue Sep 08 2020 Sergio Correia - 14-4 +- Backport upstream PR#230 - clevis-luks-askpass now exits cleanly + when receives a SIGTERM + Resolves: rhbz#1876001 + +* Sat Sep 05 2020 Sergio Correia - 14-3 +- If clevis-luks-askpass is enabled, it may be using a wrong target, + since that changed in v14. Check and update it, if required. + +* Mon Aug 31 2020 Sergio Correia - 14-2 +- Update sources file with new v14 release. + +* Mon Aug 31 2020 Sergio Correia - 14-1 +- Update to new clevis upstream release, v14. + +* Sun Aug 02 2020 Benjamin Gilbert - 13-3 +- Downgrade cracklib-dicts to Recommends + +* Mon Jul 27 2020 Fedora Release Engineering - 13-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Sun May 10 2020 Sergio Correia - 13-1 +- Update to new clevis upstream release, v13. + +* Thu May 07 2020 Sergio Correia - 12-4 +- cracklib-dicts should be also listed as a build dependency, since + it's required for running some of the tests + +* Mon Apr 06 2020 Sergio Correia - 12-3 +- Make cracklib-dicts a regular dependency + +* Tue Jan 28 2020 Fedora Release Engineering - 12-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Mon Jan 20 2020 Sergio Correia - 12-1 +- Update to new clevis upstream release, v12. + +* Thu Dec 19 2019 Sergio Correia - 11-11 +- Backport upstream PR#70 - Handle case where we try to use a partially + used luksmeta slot + Resolves: rhbz#1672371 + +* Thu Dec 05 2019 Sergio Correia - 11-10 +- Disable LUKS2 tests for now, since they fail randomly in Koji + builders, killing the build + +* Wed Dec 04 2019 Sergio Correia - 11-9 +- Backport of upstream patches and the following fixes: + - Rework the logic for reading the existing key + - fix for different output from 'luksAddKey' command w/cryptsetup v2.0.2 ( + - pins/tang: check that key derivation key is available + +* Wed Oct 30 2019 Peter Robinson 11-8 +- Drop need network patch + +* Fri Sep 06 2019 Javier Martinez Canillas - 11-7 +- Add support for tpm2-tools 4.0 + +* Wed Jul 24 2019 Fedora Release Engineering - 11-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Thu Jan 31 2019 Fedora Release Engineering - 11-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Thu Dec 6 2018 Peter Robinson 11-4 +- Update patch for work around + +* Thu Dec 6 2018 Peter Robinson 11-3 +- Work around network requirement for early boot + +* Fri Nov 09 2018 Javier Martinez Canillas - 11-2 +- Delete remaining references to the removed http pin +- Install cryptsetup and tpm2_pcrlist in the initramfs +- Add device TCTI library to the initramfs + Resolves: rhbz#1644876 + +* Tue Aug 14 2018 Nathaniel McCallum - 11-1 +- Update to v11 + +* Thu Jul 12 2018 Fedora Release Engineering - 10-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Mar 21 2018 Nathaniel McCallum - 10-1 +- Update to v10 + +* Tue Feb 13 2018 Nathaniel McCallum - 9-1 +- Update to v9 + +* Wed Feb 07 2018 Fedora Release Engineering - 8-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Mon Nov 13 2017 Nathaniel McCallum - 8-1 +- Update to v8 + +* Wed Nov 08 2017 Zbigniew Jędrzejewski-Szmek - 7-2 +- Rebuild for cryptsetup-2.0.0 + +* Fri Oct 27 2017 Nathaniel McCallum - 7-1 +- Update to v7 + +* Wed Aug 02 2017 Fedora Release Engineering - 6-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Tue Jun 27 2017 Nathaniel McCallum - 6-1 +- New upstream release +- Specify unprivileged user/group during configuration +- Move clevis user/group creation to base clevis package + +* Mon Jun 26 2017 Nathaniel McCallum - 5-1 +- New upstream release +- Run clevis decryption from udisks2 under an unprivileged user + +* Wed Jun 14 2017 Nathaniel McCallum - 4-1 +- New upstream release + +* Wed Jun 14 2017 Nathaniel McCallum - 3-1 +- New upstream release + +* Fri Feb 10 2017 Fedora Release Engineering - 2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Fri Nov 18 2016 Nathaniel McCallum - 2-1 +- New upstream release + +* Mon Nov 14 2016 Nathaniel McCallum - 1-1 +- First release diff --git a/clevis.spec b/clevis.spec index a4d26f7..81a2649 100644 --- a/clevis.spec +++ b/clevis.spec @@ -1,6 +1,6 @@ Name: clevis Version: 18 -Release: 10%{?dist} +Release: %autorelease Summary: Automated decryption framework License: GPLv3+ @@ -192,189 +192,4 @@ exit 0 systemctl preset %{name}-luks-askpass.path >/dev/null 2>&1 || : %changelog -* Fri Aug 05 2022 Luca BRUNO - 18-10 -- Simplify sysusers.d fragment by using default 'nologin' shell - -* Wed Jul 20 2022 Fedora Release Engineering - 18-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - -* Fri Jul 8 2022 Sergio Arroutbi - 18-8 -- Support a null pin - -* Tue Jun 28 2022 Sergio Arroutbi - 18-7 - Start clevis-luks-askpass.patch service according to global policy - -* Wed Jan 19 2022 Fedora Release Engineering - 18-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - -* Fri Oct 29 2021 Sergio Correia - 18-5 - Account for unlocking failures in clevis-luks-askpass - Resolves: rhbz#1878892 - -* Tue Sep 14 2021 Sahana Prasad - 18-4 -- Rebuilt with OpenSSL 3.0.0 - -* Wed Jul 21 2021 Fedora Release Engineering - 18-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - -* Fri May 07 2021 Sergio Correia - 18-2 -- Port to OpenSSL 3 - Backport of upstream commit (ee1dfedb) - -* Thu Apr 15 2021 Sergio Correia - 18-1 -- Update to new clevis upstream release, v18. - -* Wed Apr 14 2021 Sergio Correia - 17-1 -- Update to new clevis upstream release, v17. - -* Tue Mar 16 2021 Sergio Correia - 16-2 -- Fix for -t option in clevis luks bind - backport upstream commit ea0d0c20 - -* Tue Feb 09 2021 Sergio Correia - 16-1 -- Update to new clevis upstream release, v16. - -* Tue Jan 26 2021 Fedora Release Engineering - 15-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -* Mon Nov 23 08:14:40 GMT 2020 Peter Robinson - 15-3 -- Upstream patch for tpm-tools 5.0 support - -* Thu Oct 29 2020 Sergio Correia - 15-2 -- Add jq to dependencies - -* Wed Oct 28 2020 Sergio Correia - 15-1 -- Update to new clevis upstream release, v15. - -* Tue Sep 08 2020 Sergio Correia - 14-5 -- Suppress output in pre scriptlet when adjusting users/groups - Resolves: rhbz#1876729 - -* Tue Sep 08 2020 Sergio Correia - 14-4 -- Backport upstream PR#230 - clevis-luks-askpass now exits cleanly - when receives a SIGTERM - Resolves: rhbz#1876001 - -* Sat Sep 05 2020 Sergio Correia - 14-3 -- If clevis-luks-askpass is enabled, it may be using a wrong target, - since that changed in v14. Check and update it, if required. - -* Mon Aug 31 2020 Sergio Correia - 14-2 -- Update sources file with new v14 release. - -* Mon Aug 31 2020 Sergio Correia - 14-1 -- Update to new clevis upstream release, v14. - -* Sun Aug 02 2020 Benjamin Gilbert - 13-3 -- Downgrade cracklib-dicts to Recommends - -* Mon Jul 27 2020 Fedora Release Engineering - 13-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Sun May 10 2020 Sergio Correia - 13-1 -- Update to new clevis upstream release, v13. - -* Thu May 07 2020 Sergio Correia - 12-4 -- cracklib-dicts should be also listed as a build dependency, since - it's required for running some of the tests - -* Mon Apr 06 2020 Sergio Correia - 12-3 -- Make cracklib-dicts a regular dependency - -* Tue Jan 28 2020 Fedora Release Engineering - 12-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - -* Mon Jan 20 2020 Sergio Correia - 12-1 -- Update to new clevis upstream release, v12. - -* Thu Dec 19 2019 Sergio Correia - 11-11 -- Backport upstream PR#70 - Handle case where we try to use a partially - used luksmeta slot - Resolves: rhbz#1672371 - -* Thu Dec 05 2019 Sergio Correia - 11-10 -- Disable LUKS2 tests for now, since they fail randomly in Koji - builders, killing the build - -* Wed Dec 04 2019 Sergio Correia - 11-9 -- Backport of upstream patches and the following fixes: - - Rework the logic for reading the existing key - - fix for different output from 'luksAddKey' command w/cryptsetup v2.0.2 ( - - pins/tang: check that key derivation key is available - -* Wed Oct 30 2019 Peter Robinson 11-8 -- Drop need network patch - -* Fri Sep 06 2019 Javier Martinez Canillas - 11-7 -- Add support for tpm2-tools 4.0 - -* Wed Jul 24 2019 Fedora Release Engineering - 11-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - -* Thu Jan 31 2019 Fedora Release Engineering - 11-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - -* Thu Dec 6 2018 Peter Robinson 11-4 -- Update patch for work around - -* Thu Dec 6 2018 Peter Robinson 11-3 -- Work around network requirement for early boot - -* Fri Nov 09 2018 Javier Martinez Canillas - 11-2 -- Delete remaining references to the removed http pin -- Install cryptsetup and tpm2_pcrlist in the initramfs -- Add device TCTI library to the initramfs - Resolves: rhbz#1644876 - -* Tue Aug 14 2018 Nathaniel McCallum - 11-1 -- Update to v11 - -* Thu Jul 12 2018 Fedora Release Engineering - 10-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Wed Mar 21 2018 Nathaniel McCallum - 10-1 -- Update to v10 - -* Tue Feb 13 2018 Nathaniel McCallum - 9-1 -- Update to v9 - -* Wed Feb 07 2018 Fedora Release Engineering - 8-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Mon Nov 13 2017 Nathaniel McCallum - 8-1 -- Update to v8 - -* Wed Nov 08 2017 Zbigniew Jędrzejewski-Szmek - 7-2 -- Rebuild for cryptsetup-2.0.0 - -* Fri Oct 27 2017 Nathaniel McCallum - 7-1 -- Update to v7 - -* Wed Aug 02 2017 Fedora Release Engineering - 6-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Wed Jul 26 2017 Fedora Release Engineering - 6-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Tue Jun 27 2017 Nathaniel McCallum - 6-1 -- New upstream release -- Specify unprivileged user/group during configuration -- Move clevis user/group creation to base clevis package - -* Mon Jun 26 2017 Nathaniel McCallum - 5-1 -- New upstream release -- Run clevis decryption from udisks2 under an unprivileged user - -* Wed Jun 14 2017 Nathaniel McCallum - 4-1 -- New upstream release - -* Wed Jun 14 2017 Nathaniel McCallum - 3-1 -- New upstream release - -* Fri Feb 10 2017 Fedora Release Engineering - 2-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Fri Nov 18 2016 Nathaniel McCallum - 2-1 -- New upstream release - -* Mon Nov 14 2016 Nathaniel McCallum - 1-1 -- First release +%autochangelog