Releases · nix-community/lanzaboote

fix(deps): update all dependencies by @renovate in #172
feat: minimal poc for exporting UEFI variables à la sd-boot by @RaitoBezarius in #166
fix(deps): update all dependencies by @renovate in #175
flake.lock: Update by @RaitoBezarius in #176
Add rustfmt checks by @nikstur in #177
feat: minimal poc for TPM measurements à la sd-stub by @RaitoBezarius in #167
chore: sync our crates version to latest tag by @RaitoBezarius in #180
tool(bootspec): remove boilerplate with newest bootspec by @RaitoBezarius in #179
deps: update to uefi-rs 0.21.0 by @RaitoBezarius in #178
fix(deps): update all dependencies by @renovate in #181
tool: improve command error messages by @nikstur in #184
Cleanup flake by @nikstur in #185
docs: add precision about dbx and OptionROMs by @erdnaxe in #186
docs: update upstreaming state by @RaitoBezarius in #188
docs: fixup stray ``` by @RaitoBezarius in #189
fix(deps): update rust crate log to 0.4.18 by @renovate in #191
stub: add fat variant by @nikstur in #182
stub: upgrade to uefi-rs 0.22.0 by @RaitoBezarius in #192
fix(deps): update all dependencies by @renovate in #193
feat(stub): throw compile error in case of enabling fat and thin feat… by @RaitoBezarius in #195
project: move to nixpkgs Rust infrastructure by @RaitoBezarius in #147
Fix eval when aliases are disabled by @SuperSandro2000 in #198
update QUICK_START.md bootspec by @Janik-Haag in #200
Further updates to QUICK_START.md by @Janik-Haag in #201
docs: suggest to track released versions rather than master by @RaitoBezarius in #207
flake: offer nix-community cache as a suggested substituter by @RaitoBezarius in #208
Update all dependencies besides goblin by @nikstur in #209
Revert "docs: suggest to track released versions rather than master " by @nikstur in #210
docs: suggest to use 0.3.0 tagged release of lanzaboote rather than master by @RaitoBezarius in #211
flake.lock: Update by @nikstur in #212
Fix lzbt build with recent nixos-unstable by @SuperSandro2000 in #217
Revert back to crane by @nikstur in #218
tool: only sync ESP filesystem by @tilpner in #219
stub: split up into a linux-bootloader crate by @RaitoBezarius in #215
docs: Add hyperlinks to lzbt, stub file locations instead of static paths by @tuxiqae in #214
flake: use an appropriate description by @nikstur in #222
lzbt: abstraction for multiple backends by @RaitoBezarius in #206
flake: remove nixConfig by @nikstur in #223
stub: remove TPM 1 support by @nikstur in #224
feat: support for AArch64 by @RaitoBezarius in #31
Fix eval in flakes when aliases are disabled by @SuperSandro2000 in #231
nix/modules/uki: fix ukify build by @RaitoBezarius in #230
docs: Add troubleshooting documentation by @alois31 in #233
Stop most overwriting in the ESP by @alois31 in #204
stub: update to latest uefi crates by @blitz in #235
Fix build with documentation.nixos.includeAllModules = true; by @Ma27 in #236
stub: pin to current goblin version by @blitz in #238
stub: improve handling of insecure boot by @alois31 in #232
fix(deps): update all dependencies by @renovate in #196
Pin EDK2 202305 by @blitz in #241
chore(deps): lock file maintenance by @renovate in #216
Consistently Display Generations in systemd-boot by @blitz in #242
chore(deps): lock file maintenance by @renovate in #243
linux_loader: improve code quality + bug fix by @phip1611 in #244
fix(deps): update all dependencies by @renovate in #246
chore(deps): lock file maintenance by @renovate in #247
docs: clarify migration path for new installations by @Mic92 in #248
Lightweight Shell by @blitz in #245
chore(deps): lock file maintenance by @renovate in #249
tests: add 5 minutes default timeout by @RaitoBezarius in #250
chore(deps): lock file maintenance by @renovate in #255
fix(deps): update rust crate serde_json to 1.0.108 by @renovate in #254
feat(flake): perform final fixups to the flake outputs by @RaitoBezarius in #257
fix(deps): update all dependencies by @renovate in #258
Remove Nondeterminism in Stub by @blitz in #261
Parse Systemd Release Candidate Versions by @blitz in #263
flake: remove "moving away the unsupportedChecks" by @RaitoBezarius in #265
fix(deps): update rust crate clap to 4.4.10 by @renovate in #267
fix(deps): update all dependencies by @renovate in #269
fix(deps): update rust crate anyhow to 1.0.76 by @renovate in #270
add framework specific instructions by @Mic92 in #272
add more helpful message in case of append_initrd_secrets script failure by @JulienMalka in #253
fix(deps): update all dependencies by @renovate in #276
Use the original os-release file parser by @rbran in #275
fix(deps): update all dependencies by @renovate in #281
chore(deps): update all dependencies by @renovate in #283
make pre-commit-hooks-nix optional by @Mic92 in #282
chore(deps): lock file maintenance by @renovate in #259
add aarch64 ci by @Mic92 in #280
readme: make upstreaming section more timeless by @nikstur in #286
Small fixes & updates by @nikstur in #287
fix(deps): update all dependencies by @renovate in #288
chore(deps): lock file maintenance by @renovate in #289
Revert "chore(deps): lock file maintenance" by @nikstur in #290
chore(deps): lock file maintenance by @renovate in #291
chore(deps): lock file maintenance by @renovate in #293
fix(deps): update rust crate serde_json to 1.0.113 by @renovate in #292
fix(deps): update all dependencies by @renovate in #297
chore(deps): lock file maintenance by @renovate in #298
fix(deps): update all depende...

Contributors

blitz, Mic92, and 18 other contributors

Assets 2

29 Apr 21:09

RaitoBezarius

v0.3.0

64b903c

v0.3.0

This version supports the officially merged Bootspec RFC-125 from NixOS. Previous versions are not guaranteed to work anymore with future versions of NixOS.

What's Changed

tests: correctly test appending secret to initrd by @nikstur in #117
Properly handle fwupd update capsules by @dasJ in #113
Revert "Properly handle fwupd update capsules" by @blitz in #119
docs: add non-flakes quick start documentation by @RaitoBezarius in #118
Configure Renovate by @renovate in #120
fix(deps): update all dependencies by @renovate in #122
tool: init configurable logging by @nikstur in #121
tool: fine tune a few log messages by @nikstur in #125
fix(deps): update all dependencies by @renovate in #130
Don't Reload Stub from the File System by @blitz in #132
chore(deps): lock file maintenance by @renovate in #138
fix(deps): update all dependencies by @renovate in #137
Properly handle fwupd update capsules, take 2 by @lilyinstarlight in #131
nixos-module: add settings key for the loader.conf by @kanashimia in #134
Use birth time instead of modify time for generation "built on" date by @adtya in #139
tool: drop buggy condition for when to sign by @Myaats in #142
fix(deps): update all dependencies by @renovate in #145
nix: clean up fwupd-efi handling a little bit by @lilyinstarlight in #141
stub: make it compatible with a stable Rust compiler (≥ 1.68.x) by @RaitoBezarius in #149
chore(deps): update all dependencies by @renovate in #152
stub: implement flush_instruction_cache on i686 and AArch64 by @alois31 in #151
Bump Rust Overlay by @blitz in #156
flake: reduce number of dependencies by @Mic92 in #157
Avoid Unbootable System on Bootspec Changes by @blitz in #155
tool: revert log level of malformed gens by @nikstur in #158
tool: Switch back to mtime by @dasJ in #160
fix(deps): update rust crate clap to 4.2.4 by @renovate in #159
tool: disable gc in the presence of malformed gens by @nikstur in #161
tool: improve log message about malformed gens by @nikstur in #164
bootspec: RFC-0125 final changes by @RaitoBezarius in #148
feat: enable synthesis support by @RaitoBezarius in #163