Revert OL modifications

import OL ignition-2.22.0-3.0.1.el10_1
import CS ignition-2.21.0-2.el10
2025-12-22 07:18:28 +00:00 · 2025-12-22 07:18:26 +00:00 · 2025-06-24 09:54:07 +00:00
6 changed files with 373 additions and 92 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1,2 +1,3 @@
-SOURCES/ignition-2.22.0.tar.gz
-SOURCES/ignition-edge-b8d1b7a.tar.gz
+gptfdisk-1.0.10.tar.gz
+ignition-2.22.0.tar.gz
+ignition-edge-b8d1b7a.tar.gz
--- a/.ignition.metadata
+++ b/.ignition.metadata
@ -1,2 +0,0 @@
-0e0e0229c4d32ca50d19df8c0adca27d28c4a9b9 SOURCES/ignition-2.22.0.tar.gz
-0069b62bce8673f82ac6a4b9959ec8db4ffed8ad SOURCES/ignition-edge-b8d1b7a.tar.gz
--- a/0001-Fix-device-mapper-partitioning.patch
+++ b/0001-Fix-device-mapper-partitioning.patch
@ -0,0 +1,76 @@
+From 13a44baf739dabb5687a7e54c0e612a496cf9e03 Mon Sep 17 00:00:00 2001
+From: Tiago Bueno <tiago.bueno@gmail.com>
+Date: Mon, 29 Sep 2025 11:58:40 -0300
+Subject: [PATCH] Fix device mapper partitioning
+
+When run ignition on a device mapper, ie, multipath, it fails because
+the function blockDevHeld returns true as the block device
+contains holders. A block device with holders do not necessary means
+the block device is in use (like mounted).
+The function blockDevInUse will not check if it is a device mapper
+and if so, do not check for blockDevHeld.
+
+Signed-off-by: Tiago Bueno <tiago.bueno@gmail.com>
+(cherry picked from commit 2d04de325c59cc60158a12530b5ac2f40ec1e8c9)
+---
+ docs/release-notes.md                    |  7 +++++++
+ internal/exec/stages/disks/partitions.go | 18 +++++++++++++++---
+ 2 files changed, 22 insertions(+), 3 deletions(-)
+
+diff --git a/docs/release-notes.md b/docs/release-notes.md
+index da586fc8..a6077cf5 100644
+--- a/docs/release-notes.md
+++ b/docs/release-notes.md
+@@ -14,6 +14,13 @@ nav_order: 9
+ 
+ ### Bug fixes
+ 
+## Ignition 2.22.1 (2025-11-07)
+Starting with this release, ignition-validate binaries are signed with the
+[Fedora 42 key](https://getfedora.org/security/).
+
+### Bug fixes
+
+- Fix multipath partitioning: ignore DM holders when no partitions are mounted;continue to refuse if the disk or any partition is active. ([#2128](https://github.com/coreos/ignition/issues/2128))
+ 
+ ## Ignition 2.22.0 (2025-07-08)
+ Starting with this release, ignition-validate binaries are signed with the
+diff --git a/internal/exec/stages/disks/partitions.go b/internal/exec/stages/disks/partitions.go
+index 801485a4..1ae42721 100644
+--- a/internal/exec/stages/disks/partitions.go
+++ b/internal/exec/stages/disks/partitions.go
+@@ -323,6 +323,13 @@ func (p PartitionList) Swap(i, j int) {
+ 	p[i], p[j] = p[j], p[i]
+ }
+ 
+func isBlockDevMapper(blockDevResolved string) bool {
+	blockDevNode := filepath.Base(blockDevResolved)
+	dmName := fmt.Sprintf("/sys/class/block/%s/dm/name", blockDevNode)
+	_, err := os.Stat(dmName)
+	return err == nil
+}
+
+ // Expects a /dev/xyz path
+ func blockDevHeld(blockDevResolved string) (bool, error) {
+ 	_, blockDevNode := filepath.Split(blockDevResolved)
+@@ -384,9 +391,14 @@ func blockDevPartitions(blockDevResolved string) ([]string, error) {
+ func blockDevInUse(blockDevResolved string, skipPartitionCheck bool) (bool, []string, error) {
+ 	// Note: This ignores swap and LVM usage
+ 	inUse := false
+-	held, err := blockDevHeld(blockDevResolved)
+-	if err != nil {
+-		return false, nil, fmt.Errorf("failed to check if %q is held: %v", blockDevResolved, err)
+	isDevMapper := isBlockDevMapper(blockDevResolved)
+	held := false
+	if !isDevMapper {
+		var err error
+		held, err = blockDevHeld(blockDevResolved)
+		if err != nil {
+			return false, nil, fmt.Errorf("failed to check if %q is held: %v", blockDevResolved, err)
+		}
+ 	}
+ 	mounted, err := blockDevMounted(blockDevResolved)
+ 	if err != nil {
+-- 
+2.51.1
+
--- a/0001-OCPBUGS-65684-Fix-invalid-random-source-in-FIPS-140.patch
+++ b/0001-OCPBUGS-65684-Fix-invalid-random-source-in-FIPS-140.patch
@ -0,0 +1,95 @@
+From a33a8402a215f008c22ac52c885606117adba6c5 Mon Sep 17 00:00:00 2001
+From: Tiago Bueno <tiago.bueno@gmail.com>
+Date: Mon, 17 Nov 2025 21:44:24 -0300
+Subject: [PATCH] OCPBUGS-65684: Fix invalid random source in FIPS 140-only
+ mode in FIPS mode
+
+When igntion is compiled with GOEXPERIMENT=strictfipsruntime and
+running in a computer with FIPS enabled, the random source is invalid.
+
+When FIPS is enabled, instead of use a custom random on TLS config,
+do not set a random source at all as it will use crypto/rand.Reader by
+default
+
+Co-authored-by: Steven Presti <47181335+prestist@users.noreply.github.com>
+Co-authored-by: Dusty Mabe <dusty@dustymabe.com>
+
+Signed-off-by: Tiago Bueno <tiago.bueno@gmail.com>
+---
+ internal/resource/http.go | 49 ++++++++++++++++++++++++++++++++++-----
+ 1 file changed, 44 insertions(+), 6 deletions(-)
+
+diff --git a/internal/resource/http.go b/internal/resource/http.go
+index 197f5731..aae40e90 100644
+--- a/internal/resource/http.go
+++ b/internal/resource/http.go
+@@ -25,6 +25,7 @@ import (
+ 	"net"
+ 	"net/http"
+ 	"net/url"
+	"os"
+ 	"strings"
+ 	"time"
+ 
+@@ -218,16 +219,52 @@ func (f *Fetcher) RewriteCAsWithDataUrls(cas []types.Resource) error {
+ 	return nil
+ }
+ 
+-// DefaultHTTPClient builds the default `http.client` for Ignition.
+-func defaultHTTPClient() (*http.Client, error) {
+-	urand, err := earlyrand.UrandomReader()
+func isFIPSEnabled() bool {
+	data, err := os.ReadFile("/proc/sys/crypto/fips_enabled")
+ 	if err != nil {
+-		return nil, err
+		// If the file doesn't exist or can't be read, assume FIPS is not enabled
+		return false
+ 	}
+	// Check if the content is "1" (with or without trailing newline)
+	return len(data) > 0 && data[0] == '1'
+}
+ 
+-	tlsConfig := tls.Config{
+-		Rand: urand,
+// DefaultHTTPClient builds the default `http.client` for Ignition.
+func defaultHTTPClient() (*http.Client, error) {
+	var tlsConfig tls.Config
+
+	if isFIPSEnabled() {
+		// In FIPS mode (GOEXPERIMENT=strictfipsruntime), we can't set a random source.
+		// Setting a custom random source like /dev/urandom causes the error:
+		// "crypto/ecdh: invalid random source in FIPS 140-only mode"
+		tlsConfig = tls.Config{}
+	} else {
+		// In non-FIPS mode let's use the `earlyrand.UrandomReader()`
+		// this source reads from `/dev/urandom` (`man urandom`) rather
+		// than calling the `getrandom` API (`man getrandom`).
+		//
+		//   > When  read, the /dev/urandom device returns random bytes
+		//   > using a pseudorandom number generator seeded from the entropy
+		//   > pool. Reads from this device do not block (i.e., the CPU is
+		//   > not yielded)
+		//
+		// This is a tradeoff to not block early boot because:
+		//
+		//   > When read during early boot time, /dev/urandom may return
+		//   > data prior to the entropy pool being initialized. If this
+		//   > is of concern in your application, use getrandom(2) or
+		//   > /dev/random instead.
+		//
+		// See https://github.com/coreos/ignition/issues/645
+		urand, err := earlyrand.UrandomReader()
+		if err != nil {
+			return nil, err
+		}
+		tlsConfig = tls.Config{
+			Rand: urand,
+		}
+ 	}
+
+ 	transport := http.Transport{
+ 		ResponseHeaderTimeout: time.Duration(defaultHttpResponseHeaderTimeout) * time.Second,
+ 		Dial: (&net.Dialer{
+-- 
+2.50.1 (Apple Git-155)
+
--- a/SPECS/ignition.spec
+++ b/SPECS/ignition.spec
@ -1,3 +1,13 @@
+## START: Set by rpmautospec
+## (rpmautospec version 0.8.1)
+## RPMAUTOSPEC: autorelease, autochangelog
+%define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
+    release_number = 3;
+    base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
+    print(release_number + base_release_number - 1);
+}%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
+## END: Set by rpmautospec
+
 # Generated by go2rpm 1.3
 %if 0%{?fedora}
 %bcond_without check
@ -10,6 +20,9 @@
 %global ignedgecommit b8d1b7a52c28fd5c33d15a0628d4b69f242f5c57
 %global ignedgeshortcommit %(c=%{ignedgecommit}; echo ${c:0:7})

+# For vendored gdisk
+%global gdiskversion 1.0.10
+
 # https://github.com/coreos/ignition
 %global goipath         github.com/coreos/ignition
 %global gomodulesmode   GO111MODULE=on
@ -22,14 +35,24 @@ Version:                2.22.0
 %global dracutlibdir %{_prefix}/lib/dracut

 Name:           ignition
-Release:        2%{?dist}
-Summary:        First boot installer and configuration tool (RHEL CoreOS only)
+Release:        %autorelease
+Summary:        First boot installer and configuration tool

 # Upstream license specification: Apache-2.0
-License:        ASL 2.0
+# gdisk: GPL-2.0-or-later
+License:        Apache-2.0 AND GPL-2.0-or-later
 URL:            %{gourl}
 Source0:        %{gosource}
 Source1:        https://github.com/fedora-iot/ignition-edge/archive/%{ignedgecommit}/ignition-edge-%{ignedgeshortcommit}.tar.gz
+# For vendored gdisk
+Source2:        http://downloads.sourceforge.net/gptfdisk/gptfdisk-%{gdiskversion}.tar.gz
+
+
+Patch01: 0001-Fix-device-mapper-partitioning.patch
+# Fix invalid random source in FIPS 140-only mode in FIPS mode
+# ([#2159](https://github.com/coreos/ignition/pull/2159))
+Patch02: 0001-OCPBUGS-65684-Fix-invalid-random-source-in-FIPS-140.patch
+

 BuildRequires: libblkid-devel
 BuildRequires: systemd-rpm-macros
@ -39,11 +62,17 @@ BuildRequires: systemd-rpm-macros
 Recommends: btrfs-progs
 %endif
 Requires: dosfstools
-Requires: gdisk
 Requires: dracut
 Requires: dracut-network

-Obsoletes: ignition-dracut < 0.31.0-3
+%if 0%{?rhel} && 0%{?rhel} == 10
+# For vendored gdisk
+BuildRequires: gcc-c++
+BuildRequires: libuuid-devel
+BuildRequires: make
+BuildRequires: ncurses-devel
+BuildRequires: popt-devel
+%endif

 # Generated by `go-mods-to-bundled-provides.py | sort`
 Provides: bundled(golang(cloud.google.com/go/compute/metadata)) = 0.7.0
@ -187,8 +216,6 @@ Provides: bundled(golang(google.golang.org/api/transport/http)) = 0.236.0
 Provides: bundled(golang(gopkg.in/yaml.v3)) = 3.0.1

 %description
-This software is currently only supported on RHEL CoreOS.
-
 Ignition is a utility used to manipulate systems during the initramfs.
 This includes partitioning disks, formatting partitions, writing files
 (regular files, systemd units, etc.), and configuring users. On first
@ -201,9 +228,7 @@ the configuration.
 %package validate

 Summary:  Validation tool for Ignition configs
-License:  ASL 2.0
-
-Conflicts: ignition < 0.31.0-3
+License:  Apache-2.0

 %description validate
 Ignition is a utility used to manipulate systems during the initramfs.
@ -221,11 +246,9 @@ This package contains a tool for validating Ignition configurations.
 %package validate-redistributable

 Summary:   Statically linked validation tool for Ignition configs
-License:   ASL 2.0
+License:   Apache-2.0
 BuildArch: noarch

-Conflicts: ignition < 0.31.0-3
-
 # In case someone has this subpackage installed, obsolete the old name
 # Drop in Fedora 38
 Obsoletes:     ignition-validate-nonlinux < 2.13.0-4
@ -237,6 +260,7 @@ It is only used for building release binaries to be signed by Fedora release
 engineering and uploaded to the Ignition GitHub releases page.
 %endif

+
 ############## grub subpackage ##############

 %package grub
@ -251,16 +275,14 @@ This package contains the grub2 config which is compatable with bootupd.

 ############## ignition-edge subpackage ##############

-%if 0%{?rhel} && !0%{?eln}
 %package edge

 Summary:  Enablement glue for Ignition on IoT/Edge systems
-License:  ASL 2.0
+License:  Apache-2.0

 %description edge
 This package contains dracut modules, services and binaries needed to enable
 Ignition on IoT/Edge systems.
-%endif

 %prep
 %if 0%{?fedora}
@ -268,7 +290,13 @@ Ignition on IoT/Edge systems.
 %autopatch -p1
 %else
 %forgeautosetup -p1
+%endif
+
 tar xvf %{SOURCE1}
+
+%if 0%{?rhel} && 0%{?rhel} == 10
+# Prep vendored gdisk
+tar xvf %{SOURCE2}
 %endif

 %build
@ -284,27 +312,32 @@ LDFLAGS+=' -compressdwarf=false '
 export GOFLAGS="-mod=vendor"

 echo "Building ignition..."
-%gobuild -o ./ignition internal/main.go
+GOEXPERIMENT=strictfipsruntime %gobuild -o ./ignition internal/main.go

 echo "Building ignition-validate..."
 %gobuild -o ./ignition-validate validate/main.go

-
 %global gocrossbuild go build -ldflags "${LDFLAGS:-} -B 0x$(cat /dev/urandom | tr -d -c '0-9a-f' | head -c16)" -a -v -x

 %if 0%{?fedora}
 echo "Building statically-linked Linux ignition-validate..."
-CGO_ENABLED=0 GOARCH=arm64 GOOS=linux %gocrossbuild -o ./ignition-validate-aarch64-unknown-linux-gnu-static validate/main.go
-CGO_ENABLED=0 GOARCH=ppc64le GOOS=linux %gocrossbuild -o ./ignition-validate-ppc64le-unknown-linux-gnu-static validate/main.go
-CGO_ENABLED=0 GOARCH=s390x GOOS=linux %gocrossbuild -o ./ignition-validate-s390x-unknown-linux-gnu-static validate/main.go
-CGO_ENABLED=0 GOARCH=amd64 GOOS=linux %gocrossbuild -o ./ignition-validate-x86_64-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=arm64 GOOS=linux %gocrossbuild -o ./ignition-validate-aarch64-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=ppc64le GOOS=linux %gocrossbuild -o ./ignition-validate-ppc64le-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=s390x GOOS=linux %gocrossbuild -o ./ignition-validate-s390x-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=amd64 GOOS=linux %gocrossbuild -o ./ignition-validate-x86_64-unknown-linux-gnu-static validate/main.go

 echo "Building macOS ignition-validate..."
-GOARCH=amd64 GOOS=darwin %gocrossbuild -o ./ignition-validate-x86_64-apple-darwin validate/main.go
-GOARCH=arm64 GOOS=darwin %gocrossbuild -o ./ignition-validate-aarch64-apple-darwin validate/main.go
+GOEXPERIMENT= GOARCH=amd64 GOOS=darwin %gocrossbuild -o ./ignition-validate-x86_64-apple-darwin validate/main.go
+GOEXPERIMENT= GOARCH=arm64 GOOS=darwin %gocrossbuild -o ./ignition-validate-aarch64-apple-darwin validate/main.go

 echo "Building Windows ignition-validate..."
-GOARCH=amd64 GOOS=windows %gocrossbuild -o ./ignition-validate-x86_64-pc-windows-gnu.exe validate/main.go
+GOEXPERIMENT= GOARCH=amd64 GOOS=windows %gocrossbuild -o ./ignition-validate-x86_64-pc-windows-gnu.exe validate/main.go
+%endif
+
+%if 0%{?rhel} && 0%{?rhel} == 10
+# Build vendored gdisk
+cd gptfdisk-%{gdiskversion}
+make CXXFLAGS="%{optflags} -D_FILE_OFFSET_BITS=64" LDFLAGS="%{build_ldflags}"
 %endif

 %install
@ -316,7 +349,6 @@ install -m 0755 -d %{buildroot}/%{_libexecdir}
 ln -sf ../lib/dracut/modules.d/30ignition/ignition %{buildroot}/%{_libexecdir}/ignition-apply
 ln -sf ../lib/dracut/modules.d/30ignition/ignition %{buildroot}/%{_libexecdir}/ignition-rmcfg

-
 # grub
 install -d -p %{buildroot}%{_prefix}/lib/bootupd/grub2-static/configs.d
 install -p -m 0644 grub2/05_ignition.cfg  %{buildroot}%{_prefix}/lib/bootupd/grub2-static/configs.d/
@ -340,8 +372,13 @@ install -p -m 0644 ./ignition-validate-x86_64-unknown-linux-gnu-static %{buildro
 # the command line.  Install directly into the dracut module dir.
 install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition

-%if 0%{?rhel} && !0%{?eln}
 %make_install -C ignition-edge-%{ignedgecommit}
+
+%if 0%{?rhel} && 0%{?rhel} == 10
+# Install vendored gdisk
+cd gptfdisk-%{gdiskversion}
+install -D -p -m 0755 sgdisk %{buildroot}%{_libexecdir}/ignition-sgdisk
+install -D -p -m 644 COPYING %{buildroot}%{_datadir}/licenses/gdisk/COPYING
 %endif

 %if %{with check}
@ -357,6 +394,9 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 %{_unitdir}/ignition-delete-config.service
 %{_libexecdir}/ignition-apply
 %{_libexecdir}/ignition-rmcfg
+# Vendored gdisk
+%{_libexecdir}/ignition-sgdisk
+%{_datadir}/licenses/gdisk/COPYING

 %files validate
 %doc README.md
@ -376,12 +416,6 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 %{_datadir}/ignition/ignition-validate-x86_64-unknown-linux-gnu-static
 %endif

-%files grub
-%doc README.md
-%license %{golicenses}
-%{_prefix}/lib/bootupd/grub2-static/configs.d/05_ignition.cfg
-
-%if 0%{?rhel} && !0%{?eln}
 %files edge
 %license %{golicenses}
 %doc %{godocs}
@ -394,89 +428,160 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 %{_unitdir}/ignition-firstboot-complete.service
 %{_libexecdir}/coreos-ignition-write-issues
 %{_libexecdir}/coreos-check-ssh-keys
-%endif
+
+%files grub
+%doc README.md
+%license %{golicenses}
+%{_prefix}/lib/bootupd/grub2-static/configs.d/05_ignition.cfg

 %changelog
-* Wed Jul 16 2025 Tiago Bueno <tbueno@redhat.com> - 2.22.0-1
+## START: Generated by rpmautospec
+* Tue Nov 18 2025 Steven Presti <spresti@redhat.com> - 2.22.0-3
+- spec: backport fips fix and update build with
+  goexperiment=strictfipsruntime
+
+* Fri Nov 07 2025 Tiago Bueno <tbueno@redhat.com> - 2.22.0-2
+- RHEL-125909: Backport patch to fix device mapper partitioning
+
+* Mon Jul 21 2025 Tiago Bueno <tbueno@redhat.com> - 2.22.0-1
+- spec: new upstream version 2.22.0
+
+* Tue Jun 03 2025 Tiago Bueno <tbueno@redhat.com> - 2.21.0-5
+- Fix TMT prepare plans
+
+* Mon May 19 2025 Tiago Bueno <tbueno@redhat.com> - 2.21.0-4
+- Add initial TMT Gating Test
+
+* Thu Mar 27 2025 Joseph Marrero Corchado <jmarrero@redhat.com> - 2.21.0-3
+- Resolves: #RHEL-85233
+
+* Mon Mar 24 2025 Yasmin Valim <ydesouza@redhat.com> - 2.21.0-2
+- Ignition.cfg -> 05_ignition.cfg rename
+
+* Fri Mar 21 2025 Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
+- spec: new upstream version 2.21.0
+
+* Mon Nov 04 2024 Steven Prestil <spresti@redhat.com> - 2.20.0-1
 - New release

-* Mon Mar 24 2025 Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
- Re-sync with upstream changes adding ignition-grub subpackage
-  and a few minor changes
+* Thu Sep 26 2024 Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
+- Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
+- Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2
+
+* Thu Aug 22 2024 Timothée Ravier <tim@siosm.fr> - 2.17.0-7
+- Vendor gdisk
+
+* Thu Aug 22 2024 Timothée Ravier <tim@siosm.fr> - 2.17.0-6
+- Remove gdisk require to prepare for the sfdisk migration
+
+* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 2.17.0-5
+- Bump release for June 2024 mass rebuild
+
+* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.17.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Sat Jan 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.17.0-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Fri Dec 15 2023 Steven Prestil <spresti@redhat.com> - 2.17.0-2
+- Add ignition-grub subpackage
+
+* Wed Nov 22 2023 Steven Prestil <spresti@redhat.com> - 2.17.0-1
 - New release

-* Mon Nov 04 2024 Steven Presti <spresti@redhat.com> - 2.20.0-1
+* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.16.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Wed Jul 12 2023 Benjamin Gilbert <bgilbert@redhat.com> - 2.16.2-1
 - New release

-* Mon Sep 09 2024 Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
- Update ignition-edge commit to support FIPS
-    - https://github.com/fedora-iot/ignition-edge/pull/2
-
-* Tue Jul 02 2024 Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-2
- Rebuild of 2.19.0 with a newer golang
-
-* Wed Jun 12 2024 Steven Presti <spresti@redhat.com> - 2.19.0-1
+* Mon Jul 10 2023 Benjamin Gilbert <bgilbert@redhat.com> - 2.16.1-1
 - New release

-* Thu Mar 07 2024 Yasmin Valim <ydesouza@redhat.com> - 2.18.0-1
+* Thu Jun 1 2023 Steven Presti <spresti@redhat.com> - 2.15.0-4
+- Switch License tags to SPDX
+
+* Thu Feb 23 2023 Benjamin Gilbert <bgilbert@redhat.com> - 2.15.0-3
+- Remove ignition-edge files from base package
+
+* Wed Feb 22 2023 Paul Whalen <pwhalen@fedoraproject.org> - 2.15.0-2
+- Enable ignition-edge in Fedora
+
+* Tue Feb 21 2023 Benjamin Gilbert <bgilbert@redhat.com> - 2.15.0-1
 - New release
+- Drop Conflicts/Obsoletes for ancient Ignition releases

-* Fri Feb 09 2024 Timothée Ravier <tim@siosm.fr> - 2.17.0-2
- Backport fix for unexpected Azure IMDS status codes
+* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.14.0-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

-* Mon Dec 18 2023 Yasmin Valim <ydesouza@redhat.com> - 2.17.0-1
- New release
-
-* Thu Jul 13 2023 Benjamin Gilbert <bgilbert@redhat.com> - 2.16.2-1
- New release
-
-* Tue May 30 2023 Antonio Murdaca <antoniomurdaca@gmail.com> - 2.15.0-2
- Fix Edge's Anaconda installer (#2203233)
-
-* Wed Feb 22 2023 Benjamin Gilbert <bgilbert@redhat.com> - 2.15.0-1
- New release
- Clarify -edge subpackage summary and description
-
-* Tue Nov 22 2022 Antonio Murdaca <antoniomurdaca@gmail.com> - 2.14.0-4
- Rebuild to include ignition-edge subpackage (#2144789)
-
-* Mon Oct 10 2022 Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-3
- Rebuild for unblocking ignition-validate subpackage (#2121002)
-
-* Tue Aug 9 2022 Christian Glombek <cglombek@redhat.com> - 2.14.0-2
+* Tue Aug 9 2022 Christian Glombek <cglombek@redhat.com> - 2.14.0-5
 - Enable writing ssh keys fragments on RHEL/CentOS >= 9

-* Thu May 26 2022 Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-1
+* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.14.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
+
+* Mon Jun 27 2022 Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-3
+- Add macOS aarch64 binary to -redistributable
+
+* Sat Jun 18 2022 Robert-André Mauchin <zebob.m@gmail.com> - 2.14.0-2
+- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
+  CVE-2022-29526, CVE-2022-30629
+
+* Mon May 16 2022 Steven Presti <spresti@redhat.com> - 2.14.0-1
 - New release
 - Add ignition-apply symlink
 - Add ignition-rmcfg symlink and ignition-delete-config.service

-* Mon Mar 21 2022 Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-2
+* Thu Mar 17 2022 Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-5
+- Avoid kernel lockdown on VMware when running with secure boot
+
+* Fri Jan 28 2022 Benjamin Gilbert <bgilbert@redhat.com> - 2.13.0-4
 - Rename -validate-nonlinux subpackage to -validate-redistributable
 - Add static Linux binaries to -redistributable
 - Fix macro invocation in comment
- Avoid kernel lockdown on VMware when running with secure boot

-* Thu Jan 20 2022 Benjamin Gilbert <bgilbert@redhat.com> - 2.13.0-1
- New release
+* Thu Jan 20 2022 Benjamin Gilbert <bgilbert@redhat.com> - 2.13.0-3
 - Fix LUKS volume reuse
- Avoid double patch application
+- Avoid double patch application on non-Fedora

-* Thu Sep 16 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
- Suppress hardcoded library path warning
- Fix go-mods-to-bundled-provides script to parse correct rpm version
- Import specfile from Fedora
+* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.13.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

-* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 2.9.0-7
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
-  Related: rhbz#1991688
+* Tue Nov 30 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-1
+- New release

-* Tue Jun 22 2021 Mohan Boddu <mboddu@redhat.com> - 2.9.0-6
- Rebuilt for RHEL 9 BETA for openssl 3.0
-  Related: rhbz#1971065
+* Wed Oct 13 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-3
+- Move Ignition report to /etc 

-* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.9.0-5
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+* Thu Aug 26 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-2
+- Disable file fragment writing logic for SSH authorized_keys on RHEL/CentOS
+- Disable compressdwarf flag to avoid build failures on RHEL/CentOS
+- Disable cross-building of Ignition-validate on RHEL/CentOS
+- Conditionalize Fedora-specific configuration
+
+* Fri Aug 6 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
+- New release
+
+* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.11.0-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
+
+* Thu Jul  8 2021 Benjamin Gilbert <bgilbert@redhat.com> - 2.11.0-2
+- Move ignition-firstboot-complete and ignition-setup-user services out of
+  package into distro glue
+
+* Fri Jun 25 2021 Benjamin Gilbert <bgilbert@redhat.com> - 2.11.0-1
+- New release
+
+* Wed May 26 2021 Jonathan Lebon <jonathan@jlebon.com> - 2.10.1-3
+- Backport patch for multipath on firstboot
+  https://github.com/coreos/ignition/pull/1208
+  https://github.com/coreos/fedora-coreos-config/pull/1011
+
+* Wed May 26 2021 Jonathan Lebon <jonathan@jlebon.com> - 2.10.1-2
+- Redo packaging using go2rpm
+
+* Thu Apr 29 2021 Stephen Lowrie <slowrie@redhat.com> - 2.10.1-1
+- New release

 * Fri Feb 05 2021 Benjamin Gilbert <bgilbert@redhat.com> - 2.9.0-4
 - Drop Git commit hash from Release
@ -790,3 +895,6 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition

 * Thu Jun 21 2018 Dusty Mabe <dusty@dustymabe.com> - 0.26.0-0.1.git7610725
 - First package for Fedora
+
+
+## END: Generated by rpmautospec
--- a/3
+++ b/3
@ -0,0 +1,3 @@
+SHA512 (gptfdisk-1.0.10.tar.gz) = 76764e176cd92470648a1d7a8d2570ebc41005204e73b0f2dd5a7aff2fc1981d3bec61a3bd68b855cc3474bcb7cf49c1cb2ea25843d4e7945bef7648d548383d
+SHA512 (ignition-2.22.0.tar.gz) = fd9fbe28b77c0593c4ca3f7d08fcb46c56c29d8fd4365c37856b8ccfd178d3cbb44dbe15effcfada3da851bece893edfe2b4de2c4873a90c909322a8c806143a
+SHA512 (ignition-edge-b8d1b7a.tar.gz) = 4ad167d89a4efeca8a24f24fe5a0bd2e5a1acfa86eb21653d84ad136236c727c328e7da890f3294a2e81b32e7b52435713e71fdbdd9d93d815f1c202b4f49f36
Author	SHA1	Message	Date
eabdullin	9995835a33	Revert OL modifications	2025-12-22 07:18:28 +00:00
eabdullin	04e3201802	import OL ignition-2.22.0-3.0.1.el10_1	2025-12-22 07:18:26 +00:00
eabdullin	f51af6e36e	import CS ignition-2.21.0-2.el10	2025-06-24 09:54:07 +00:00