aboutsummaryrefslogtreecommitdiff
path: root/CHANGELOG.rst
Commit message (Collapse)AuthorAgeFilesLines
* configs/releng/packages.x86_64: add boltnl67202023-09-241-0/+2
| | | | | | | bolt can be used to list and authorize Thunderbolt and USB4 devices. Inspired by https://bbs.archlinux.org/viewtopic.php?id=288731 where a user needed to install the package in the live environment.
* Add changelog for 72nl67202023-08-291-6/+18
|
* Use pcsclite for communicating with OpenPGP smartcardsDavid Runge2023-08-291-0/+1
| | | | | As opgpcard uses pcsclite and gnupg is able to use it as well, switch away from using gnupg's internal ccid driver.
* Add sequoia-sq and openpgp-card-tools to releng profileDavid Runge2023-08-291-0/+1
|
* Move custom sshd_config to /etc/ssh/sshd_config.d/nl67202023-08-261-0/+1
| | | | | | | | openssh 9.4p1-2 changed /etc/ssh/sshd_config to add support for drop-in files in /etc/ssh/sshd_config.d/. Using drop-in files avoids needing to keep up with changes to the default /etc/ssh/sshd_config.
* configs/releng/packages.x86_64: add tpm2-toolsnl67202023-08-261-0/+2
| | | | | The tools are useful for clearing, creating and reading keys and etc. on the TPM.
* Set IPv6PrivacyExtensions=yes in global systemd-netorkd configurationnl67202023-08-111-0/+1
| | | | | | Since systemd 245, IPv6PrivacyExtensions can be set not just per connection, but also globally for all connection with a configuration file in /etc/systemd/network.conf.d/.
* configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ↵nl67202023-08-051-0/+2
| | | | | | | | | tmpfs with noswap option Since tmpfs has a `noswap` option, use it instead of ramfs. Unlike ramfs, tmpfs has a limit to its size. This reverts commit 09b0428128700f37bd465eb54c6e45f69c17617d ("configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfs").
* configs/: move custom mkinitcpio.conf files to /etc/mkinitcpio.conf.d/nl67202023-06-211-0/+2
| | | | This allows to retain a pristine /etc/mkinitcpio.conf in the rootfs.
* mkarchiso: prevent interference from xorriso startup filesnl67202023-06-151-0/+1
| | | | | | | | | Options set in xorriso startup files (~/.xorrisorc) could interfere with the xorriso command run by mkarchiso. For example, if ~root/.xorrisorc contains -dummy on, then the ISO file will be empty. Pass -no_rc as the first option to xorriso to prevent interference and unintended behavior. Fixes #153.
* mkarchiso: run _cms_sign_artifact only oncenl67202023-06-011-0/+2
| | | | | | | | Since `_build_buildmode_netboot` runs `_build_iso_base` which runs `_prepare_airootfs_image`, the call to `_cms_sign_artifact` in `_build_buildmode_netboot` can be removed. Fixes #197
* Add changelog for 71 and update AUTHORS.rstnl67202023-05-281-7/+22
|
* Update configs/{baseline,releng}/pacman.confnl67202023-05-251-0/+1
| | | | | | | Update pacman.conf to match the one shipped with pacman 6.0.2-7. The community repository is gone. See https://archlinux.org/news/git-migration-completed/
* Add support for mDNS.Sorin Pânca2023-05-221-0/+1
|
* mkarchiso: add a -r option to delete the working directorynl67202023-05-171-0/+1
| | | | | | | | | | `-r` will instruct to delete the working directory at the end of a `mkarchiso` run. If the specified directory already exists, then it will not be deleted and instead produce a warning. Implements #211
* CHANGELOG.rst: remove stray git conflict markernl67202023-05-171-1/+0
| | | | Fixes 8cc0e9e5b09d504a50701a825f0ab9992ed73b6f
* configs/releng/packages.x86_64: add more terminfo packagesnl67202023-05-171-0/+2
| | | | | Add foot-terminfo and wezterm-terminfo packages to allow using their terminfo entries for installations via SSH.
* mkarchiso: read SOURCE_DATE_EPOCH from file earlynl67202023-05-171-0/+3
| | | | | | | When restarting an interrupted build, SOURCE_DATE_EPOCH needs to be available before `profiledef.sh` is read, since it may reference it. Fixes 7c6f266ec94e3eff23466ed8d0c45e4bee0ddae4
* Use UUIDs in all boot loader configuration filesnl67202023-05-171-0/+1
| | | | | | | Relying on the volume UUID instead of its LABEL avoids collisions of multiple ISOs created in the same month. Fixes #202
* mkarchiso: Fix the cp command arguments to retain mkarchiso's behavior prior ↵shivanandvp2023-05-171-1/+1
| | | | to the GNU Coreutils update. Fixes Issue #214
* Merge remote-tracking branch 'origin/merge-requests/322'nl67202023-05-171-0/+2
|\ | | | | | | | | | | | | | | | | | | | | By Antonio V * origin/merge-requests/322: Fixed subdirectories copy from grub/ to the ISO Subdirectories from grub/ are copied to the ISO Fixes https://gitlab.archlinux.org/archlinux/archiso/-/issues/215 See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/322
| * Fixed subdirectories copy from grub/ to the ISOAntonio V2023-05-141-0/+2
| |
* | Added classes for Memtest86+ and UEFI Shell menuentriesAntonio V2023-05-141-0/+2
|/
* Merge remote-tracking branch 'origin/merge-requests/235'nl67202023-05-131-0/+3
|\ | | | | | | | | | | | | | | By Zig Globulin * origin/merge-requests/235: wait for networkd online before curl invocation See merge request https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/235
| * wait for networkd online before curl invocationZig Globulin2023-03-021-0/+3
| | | | | | | | | | | | | | 1) wait for network-online.target before invoking curl as there's no synchronization with network setup for this script 2) don't hide curl errors - it may be easier to debug the issues 3) add log and comments
* | configs/baseline/profiledef.sh: compress morenl67202023-03-171-0/+3
|/ | | | | | | | * Use LZMA extreme compression level, * enable experimental compressed fragments feature to create a smaller image, * enable experimental data deduplication. This decreases the baseline profile's `airootfs.erofs` size by about ~16 MiB.
* Add changelog for 70nl67202023-02-271-0/+18
|
* Add changelog entry for terminal_output fixDavid Runge2023-02-271-0/+1
|
* README.transfer.rst: update instructionsnl67202023-02-241-0/+1
| | | | | | | | | | | Convert the file to reStructuredText markup. Fixes #39. Rewrite the instructions where possible or otherwise update them. E.g. fix the changed boot loader paths, etc. The "Manual formatting (BIOS only)", previosly "PC-BIOS (ISOHYBRID-MBR)", method is not tested and it is not clear if it still even works.
* Move SYSLINUX directory from /syslinux/ to /boot/syslinux/nl67202023-02-241-0/+1
| | | | | | | | | This allows to reduce the number of top-level directories by one and matches with the GRUB directory move. Most boot loader related things will now be in the /boot/ directory. Fixes #207
* Move the .uuid file to /boot/grub/YYYY-mm-dd-HH-MM-SS-00.uuidnl67202023-02-241-1/+1
| | | | | | | | | | | | | | To prevent the file from being accidentally missed when someone copies the ISO's contents, let's not place it in a directory that starts with a dot. Since all GRUB related files are in /boot/grub/, put it there too. Instead of using a more unique UUID for the file name, use `YYYY-mm-dd-HH-MM-SS-00.uuid` which matches the ISO's modification date in UTC,i.e. its "UUID". If multiple ISOs would be generated in the exact same second, the ISO 9660 modification date (i.e. its "UUID") would be the same, so there would be not way to distinguish between the volumes anyway. This also makes the file look less suspicious to the casual glance.
* mkarchiso: write grubenv in _make_common_bootmode_grub_cfgnl67202023-02-241-0/+3
| | | | | | | Add all variables that we replace with values in configuration files. Keep `${isofs_dir}/${install_dir}/grubenv` with fewer variables for backwards compatibility. It will be removed in the future.
* Move grub files from /EFI/BOOT/ to /boot/grub/ on ISO 9660nl67202023-02-221-0/+2
| | | | | | | | | | | | | | | | | Move the location of GRUB files so that there is boot-platform (BIOS vs EFI) neutral place for GRUB-specific files (e.g. configuration files, background images, etc.). The EFI binaries are obviosly staying in the default/fallback boot path `/EFI/BOOT/BOOT*.EFI`, otherwise there will be no UEFI booting. The /boot/grub/ directory will be used to store BIOS (i386-pc) GRUB bootsector images, if we get to that. It is also a requirement for implementing `loopback.cfg` support, since the file's path must be `/boot/grub/loopback.cfg`. Implements #206
* Do not duplicate grub.cfg in efiboot.imgnl67202023-02-221-0/+2
| | | | | | | | | | | | | | | Instruct the embeded grub.cfg to search for a volume with a `/.disk/%UUID_SEARCH_FILENAME%.uuid` file and load `/EFI/BOOT/grub.cfg` from it. This avoid duplicating GRUB configuration files in two places (ISO 9660 and FAT) and ensures there is no confusion about which is the _correct_ configuration file. Since nothing besides EFI binaries is copied to `efibootimg`, the `_make_common_bootmode_grub_copy_to_efibootimg` function is removed. Fixes #208
* configs/*/profiledef.sh: honor SOURCE_DATE_EPOCHnl67202023-02-221-0/+1
| | | | Ensure the **correct** date is used in `iso_label` and `iso_version`.
* mkarchiso: do not place memtest86+ in netboot artifactsnl67202023-02-101-0/+2
| | | | | | | | | Move memtest86+ to `/boot/memtest86+/` on ISO 9660. That directory is not copied to netboot artifact output. Netboot boot menu https://ipxe.archlinux.org/releng/netboot/archlinux.ipxe does not have entries for memtest and archiso-manager removes these files (not the EFI one, though) before uploading the release files anyway.
* Preload GRUB's NTFS, exFAT and UDF modulesnl67202023-02-021-0/+2
| | | | | | | | There are claims that some UEFI allegedly natively support NTFS. Preload the required GRUB modules to support booting from NTFS on such systems. Additionally preload the exFAT and UEF modules, because, why not?
* configs/*/grub/grub.cfg: search for a .uuid file in /.disk/ and use the ↵nl67202023-02-021-0/+7
| | | | | | | | | | | | | | | | | volume it's on Search for `/.disk/%UUID_SEARCH_FILENAME%.uuid` and pass the UUID of the volume it's on as `archisodevice`. mkarchiso will replace `%UUID_SEARCH_FILENAME%` with a hardcoded value generated using `SOURCE_DATE_EPOCH` durring ISO build. This allows to prepare an UEFI bootable installation medium by simply copying the directory structure without having to touch `grub.cfg`. Relying on the volume UUID instead of its LABEL also avoids collisions of multiple ISOs created in the same month. Fixes #202
* Update URLsnl67202023-01-291-1/+1
| | | | | | | | * Update mkinitcpio-archiso project link, * Update code of conduct link, * Update arch-releng mailing list link, * Use HTTPS where possible, * Replace dead link.
* Add changelog for 69nl67202022-12-241-3/+13
|
* archiso/mkarchiso: write "uninitialized" to /etc/machine-idChristian Hesse2022-12-221-0/+3
| | | | | | | This is a new value introduced in systemd v247. It makes sure a new machine-id is generated, but is handled as first boot as well. See "First Boot Semantics" in machine-id(5) for details.
* configs/baseline/profiledef.sh: use LZMA compression for the EROFS imagenl67202022-12-171-0/+2
| | | | | | | | | Now that xz 5.4 is out and erofs-utils is built with LZMA support, it is possible to compress the EROFS image with LZMA for higher compression. `mkfs.erofs` trows a few warnings about using experimental features, but they should not be an issue. Nothing changes for the releng profile, for now at least.
* mkarchiso: check if the code signing files specified with option -c existnl67202022-12-101-0/+1
| | | | | Look for the files in `*_validate_options` and error out early if they do not exist.
* mkarchiso: open the ARCHISO_GNUPG_FD, ARCHISO_TLS_FD and ARCHISO_TLSCA_FD ↵nl67202022-12-061-0/+2
| | | | | | file descriptors only for reading Nothing should ever be written to these files, so let's make sure it cannot happen.
* mkarchiso: do not try to use an non existent GPG public key filenl67202022-12-061-0/+2
| | | | | | | | | | | | | | | The `bootstrap` build mode never calls `_export_gpg_publickey`, so even if the GPG key is passed with the `-g` option and thus the `gpg_key` variable is set, the `${work_dir}/pubkey.gpg` file will not exist. This has not caused any issue so far because the `ARCHISO_GNUPG_FD` file descriptor opens the file for both reading and writing, which means the file gets created if it does not exist. Assign the exported public key file name to a `gpg_publickey` variable in `_export_gpg_publickey` and check for it when the file is used. Since the exist status of the gpg command cannot be checked, look for the exported public key file instead.
* Add Memtest86+ to x86_64 UEFI GRUB boot menuJonathan Liu2022-12-031-0/+1
| | | | Implements #203.
* Add changelog for 68nl67202022-10-301-3/+9
|
* configs/releng/airootfs/etc/mkinitcpio.conf: replace the deprecated ↵nl67202022-10-251-0/+1
| | | | | | | | archiso_kms hook with kms The archiso_kms hook was moved from mkinitcpio-archiso to the mkinitcpio project. See https://github.com/archlinux/mkinitcpio/commit/7bfe4861eacb3bf6cb70d9a17a0262542733a8ed and https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/commit/dec17db5324285118e2faee296cc990ff1281bd8
* configs/: remove "Copy to RAM" boot entries since it is automatic nownl67202022-10-221-0/+2
| | | | | | | | The default is now copytoram=auto which enables copying to RAM when the rootfs image size is less than 4 GiB and free RAM exceeds the rootfs image size + 2 GiB. See https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/issues/13 and https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/merge_requests/26. Implements #177.
* mkarchiso: do not sign .sig filesnl67202022-10-131-0/+2
| | | | | | | | Make sure existing sig files are deleted before creating new ones and make sure to not sign any sig files. This allows retrying failed mkarchiso runs without ending up with files such as vmlinuz.ipxe.sig.ipxe.sig. Fixes #198