Skip to content

Releases: ostreedev/ostree

v2024.9

05 Nov 15:18
Compare
Choose a tag to compare

Notable changes

  • deploy: Don't recompute verity checksums if not enabled by @cgwalters in #3326

This fixes a huge performance regression where we recomputed the fsverity checksum of all objects at deployment time for systems using composefs but not using fsverity.

  • prepare-root: allow sysroot.readonly=true with kernel cmdline ro by @ruihe774 in #3316

Other changes

New Contributors

Full Changelog: v2024.8...v2024.9

v2024.8

19 Sep 17:32
Compare
Choose a tag to compare

There are two notable changes in this release.

First, this release adapts to a change in libcurl 8.10.1 that caused ostree to start crashing. There is ongoing debate as to whether the curl change here was right, but in any case the adaption required on our side was trivial and to emphasize - it's quite safe to cherry pick the relevant commit to prior ostree releases too.

Second, for the booted host side, we've changed the mount propagation setup. More details in

Other than that there are a variety of more minor tweaks and fixes.

What's Changed

Full Changelog: v2024.7...v2024.8

2024.7

19 Jul 11:13
Compare
Choose a tag to compare

A relatively minor release; this has a bugfix for "transient-etc" users, and a new ostree.prepare-root.composefs kernel option that allows dynamic overrides for the composefs state. There's also a new API to directly create a composefs from an ostree commit.

What's Changed

New Contributors

Full Changelog: v2024.6...v2024.7

v2024.6

17 May 12:31
Compare
Choose a tag to compare

This release brings us various bug fixes on top of enhancements to ci, docs and tests.
What's Changed:

Alexander Larsson (3):
      _ostree_ensure_fsverity: Properly check for errors
      prepare-root: Handle non-AB aboot properly
      Fix _ostree_ensure_fsverity reporting of supports in early exit

Colin Walters (12):
      configure: post-release version bump
      curl: Also map HTTP errors for retries
      sepolicy: Add missing `(nullable)`
      init-fs: Add --epoch
      init-fs: Add --epoch=2
      tests: Skip composefs tests without the feature
      ci: Drop `SKIP_INSTALLDEPS=1`
      Switch to external composefs
      ci: Only run clang-format on ubuntu-stable GH runner
      ci: Also skip if we detect /run/.containerenv
      sysroot: Handle `/ostree/deploy` having epoch 0
      docs: Describe offline updates with static deltas

Dan Nicholson (2):
      tests: Correctly skip single fsverity test
      repo: Make summary and signature mtime match

Eric Curtin (3):
      README & docs: Remove "RHIVOS" acronym
      docs: More accurate diagram in bootloaders documentation for aboot
      docs: Fix spelling and grammer

Jonathan Lebon (1):
      ostree-prepare-root.service: add OnFailureJobMode=isolate

Joseph Marrero (3):
      ostree-sysroot-deploy: check if deployments are in the same stateroot.
      Release 2024.6
      configure: post-release version bump

Full Changelog: v2024.5...v2024.6

v2024.5

14 Mar 17:51
Compare
Choose a tag to compare

What's Changed

Full Changelog: v2024.4...v2024.5

v2024.4

23 Feb 21:23
Compare
Choose a tag to compare

What's Changed

  • Release 2024.3 by @cgwalters in #3172
  • rofiles-fuse: Check fsverity flag for copyup by @cgwalters in #3175
  • tests: Use long key IDs by @teythoon in #3178
  • docs: Add webrick dependancy for building site locally by @ericcurtin in #3179
  • tests: Use long key IDs, I found another one by @teythoon in #3180
  • README: Add Red Hat In-Vehicle Operating System by @ericcurtin in #3181
  • workflow/docs: Update to actions/checkout@v4 & dependabot: Update github-actions weekly by @travier in #3176
  • test-admin-deploy-var: Don't rely on OSTREE_FEATURES by @smcv in #3184
  • deploy: Don't fail if loading composefs configuration fails due to mi… by @alexlarsson in #3189
  • ostree-prepare-root: Amend comment about shared mounts by @rborn-tx in #3186
  • Docs fixes & SPDX identifiers uniformisation by @travier in #3185
  • prepare-root: Disallow hotfixes if using signed composefs images by @alexlarsson in #3194
  • generator: Fixes for Android Boot environment by @ericcurtin in #3192
  • sysroot: Reword comment and use gboolean over bool, error handling by @ericcurtin in #3195

New Contributors

Full Changelog: v2024.3...v2024.4

v2024.3

14 Feb 00:49
Compare
Choose a tag to compare

New features and notable changes

This release changes how /var works (again):

The mount setup also had a semantic change for those enabling root.transient:

  • prepare-root: Switch to a tmpfs for transient root by @cgwalters in #3173

Also related to prepare-root, it is now recommend to enable composefs by simply configuring ostree-prepare-root.conf and not the ex-integrity.composefs variable:

  • deploy: Honor prepare-root.conf at deploy time for composefs by @cgwalters in #3165

Other changes

New Contributors

Full Changelog: v2024.2...v2024.3

2024.2

08 Feb 19:43
Compare
Choose a tag to compare

What's Changed

New features

The ostree admin pin command learned more human-consumable verbs:

  • admin/pin: Add commands to pin booted, pending and rollbacks deployments by @ericcurtin in #3146
  • generator: Exit if there's no /run/ostree by @cgwalters in #3147

Bugfixes

  • deploy: Ignore sockets, fifos in /etc/ during merge by @yummypeng in #3143
  • grub2-15_ostree: Graceful exit if /etc/default/grub doesn't exist by @travier in #3150
  • Track deployment root/inode from prepare root by @cgwalters in #3164

Other changes

New Contributors

Full Changelog: v2024.1...v2024.2

2024.1

21 Jan 16:02
Compare
Choose a tag to compare

New features

There are two major new APIs around configuring mutability and persistence of the root filesystem.

First, OSTree gained support for a new root.transient flag that makes / an overlayfs that is persistent across reboots but not across upgrades. This makes the system behave a bit more similarly to e.g. Docker and following tools such as podman and Kubernetes.

There is a different approach in the (still classified as experimental) [email protected] unit:

This approach instead allows operating systems or downstream builders to choose to apply persistent merge semantics to specific targeted directories (e.g. /opt).

Notable bugfixes

  • prepare-root: Fix composefs + ostree admin unlock --hotfix compat by @cgwalters in #3129
  • lib/deploy: Round to block size in early prune space check by @jlebon in #3130

Other misc changes

New Contributors

Full Changelog: v2023.8...v2024.1

2023.8

06 Dec 16:13
Compare
Choose a tag to compare

This release stabilizes "deployment finalization locking" which
is very useful for automatic update workflows.

  • sysroot: Stabilize deployment finalization, add API by @cgwalters in #3090

There's a new post-copy command which may be useful for build
systems that generate a filesystem tree outside of ostree:

The commit logic started using reflinks (if available) which
can be a big speedup.

System root and bootloader:

Finally, ostree now ships a tmpfiles.d fragment which copies from /usr/share/factory/var to /var
by default: