# changelog

author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if [ $1 -eq 0 ]; then 
    if [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
      /usr/sbin/semodule -n -X 200 -s ${_policytype} -r macro which uses priority 200. &> /dev/null || : 
      /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : 
    fi 
  fi 

    Change the install command in the %post section if the specfile
    to use the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
    /usr/sbin/semodule -n -s ${_policytype} -X 200 -i macro. 
    /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : 
  fi 

    Replace relabel commands with using the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
    [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre 
  fi 

    
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
     if [ -f /var/lib/rpm-state/file_contexts.pre ]; then 
       /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null 
       rm -f /var/lib/rpm-state/file_contexts.pre 
     fi 
  fi 

    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Dusty Mabe <dusty@dustymabe.com> - 0-6.git20cdfff
changelog:
  - Bump to 20cdfff
      * f897ff0 README: add notes for CLI invocation
      * 3870e93 coreos-installer: clear the trap handler after umount
      * 4bc7da9 coreos-installer: move reboot logic to dracut service
      * efe979d coreos-installer: make sure we run as root
      * 666303d coreos-installer: verify boot partition device
      * 520ff67 coreos-installer: make new mount_boot_partition function
      * 4bc70c3 dracut: alphabetical sort of dracut dependencies
      * c4703a0 coreos-installer: add check for image download exit status
      * 33ba62e Use `dd conv=sparse`
      * e5d01c7 30coreos-installer: drop unused inst_modules
      * 7cba048 *: drop dialog


author: Yu Qi Zhang <jerzhang@redhat.com> - 0-7.git0e6979c
changelog:
  - Bump to 0e6979c
      * coreos-installer: remove 'Fedora' from help text
      * coreos-installer: enable `pipefail` around `zcat | dd`
      * module-setup.sh: Explicitly add gzip


author: Allen Bai <abai@redhat.com> - 0-8.git2fcf441
changelog:
  - Bump to 2fcf441
      * 2fcf441 Add support to xz-compressed images
      * 03a8be4 readme: fix stale links and instructions
      * 77d4d03 installer: add some more logging statements
      * e52c0a5 parse-coreos:  persist ipv6.disable


author: Yu Qi Zhang <jerzhang@redhat.com> - 0-10.gita284cdb
changelog:
  - Bump to a284cdb and cut first release for 4.3 branch
      * Add various karg and platformid enhancements


author: Allen Bai <abai@redhat.com> - 0-13.rhaos4.3.gite5aa5dc
changelog:
  - Rebuild since previous build failed to get tagged
  - RCM ticket: https://projects.engineering.redhat.com/browse/RCM-73239


author: Lukas Nykryn <lnykryn@redhat.com> - 049-17.git20190725
changelog:
  - rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-24.git20190802
changelog:
  - 95fcoe: load 'libfcoe' module as a fallback
  - 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
  - dracut: let module handling function accept optional path option
  - squash: also squash systemctl if switch-root is not needed
  - squash: fix and simplify required_in_root
  - squash: squash systemd binary and udevadm


author: Tom Callaway <spot@fedoraproject.org> - 2.6.1-4
changelog:
  - add configure option to disable generic dynamic tls model
  - disable generic dynamic tls model on s390x and aarch64


author: Ben Howard <ben.howard@redhat.com> - 0.33.0-7-rhaos4.3.git3625532
changelog:
  - ignition: align to spec2x commit 362553247e57d7e706c492bb5267eacc34585ca4
      * Backport of `fetch` stage


author: Jonathan Lebon <jlebon@redhat.com> - 0.33.0-12.rhaos4.3.git3625532
changelog:
  - Update to latest spec2x for:
    https://github.com/coreos/ignition-dracut/pull/135#event-2779552254


author: Ben Howard <ben.howard@redhat.com> - 0.34.0-0-rhaos4.3.git92f874c
changelog:
  - ignition: align to spec2x commit 92f874c194d75ea32a4e63e531db3be4689b4850
      * Release of 0.34.0
      * Bug Fixes:
        - Fix bug where AWS region is not set correctly for fetches from s3
        - Fix bug where empty GPT labels were treated as errors
      * Changes:
        - Ignition now logs the name of the stage it is running
      * Features:
        - Add optional "fetch" stage to cache the rendered config, but not apply
          any of it
        - Add support for aliyun cloud


author: Sinny Kumari <ksinny@gmail.com> - 2019.1-3
changelog:
  - Backport patch to fix bare → bare imports
  - Backport patch to Set xattr on correct fd for bare-user → bare-user imports


author: Steve Milner <smilner@redhat.com> - 0.0.2-0.1
changelog:
  - Makefile: Add changelog target
  - cmd/root: Print pivoting msg before pull
  - cmd/root: Only support the latest labels
  - Support com.coreos.ostree-commit too
  - cmd/root: Make OSTree version we pivot to more prominent
  - cmd/root: Don't rely on refs, use checksum from label
  - cmd: only create, don't run the container
  - cmd: add --unchanged-exit-77
  - cmd: fix capitalization
  - Namespace move from ashcrow to openshift
  - README.md: update with more information
  - cmd: drop networking in the container
  - gofmt: Update formatting
  - cmd: ask rpm-ostree for state instead of marker file
  - cmd: implement full idempotency
  - types: use permalink to skopeo spec
  - utils: use glog.Infof for consistency
  - cmd: add the default cmdline flags
  - cmd: drop --touch-if-changed
  - Use pivot:// prefix for rpm-ostree custom URL
  - Pass custom origin information to rpm-ostree
  - Canonicalize to name@digest
  - Merge pull request #10 from ashcrow/misc-enhancements
  - utils: Add basic unittests
  - main.go: Generate header from build info
  - .travis.yml: Switch to 1.1[0,1].x golang versions
  - .gitignore: Ignore .vscode


author: Steve Milner <smilner@redhat.com> - 0.0.4-1
changelog:
  - Add basic kernel tuning functionality
  - Fix previous release bump
  - Don't pivot if identical sha256
  - vendor: Add github.com/containers/image/docker/reference
  - travis: Run tests
  - tests: Make TestRunExt predictable and fast
  - root: Fix missing format specifier
  - Use kubelet auth if available
  - README.md: Add some more concrete details on how it works
  - service: Use Type=oneshot
  - README.md: Add some more links for testing pivot
  - README.md: Fix reboot-needed path
  - tests: Set GOCACHE=off


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.6.2-0.1.git589261f
changelog:
  - Resolves: #1740920
  - built libpod commit 589261f275b485d78a6ac1bd7b95578257fc020f
  - built conmon v2.0.1
  - add libtrust_openssl buildtag


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-2
changelog:
  - synchronize with container-tools spec logic
  - remove BR: device-mapper-devel, minor spec file changes


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.5.0-5
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.7-9
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Fix a security flaw (GH#1175, CVE-2018-7750) in Paramiko's server mode
      (this does not impact client use) where authentication status was not
      checked before processing channel-open and other requests typically only
      sent after authenticating
    - Ed25519 auth key decryption raised an unexpected exception when given a
      unicode password string (typical in python 3) (GH#1039)


author: Paul Howarth <paul@city-fan.org> - 2.4.2-1
changelog:
  - Update to 2.4.2
    - Fix exploit (GH#1283, CVE-2018-1000805) in Paramiko’s server mode (not
      client mode) where hostile clients could trick the server into thinking
      they were authenticated without actually submitting valid authentication
    - Modify protocol message handling such that Transport does not respond to
      MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED; this behavior probably
      didn’t cause any outright errors, but it doesn’t seem to conform to the
      RFCs and could cause (non-infinite) feedback loops in some scenarios
      (usually those involving Paramiko on both ends)
    - Add *.pub files to the MANIFEST so distributed source packages contain
      some necessary test assets (GH#1262)
  - Test suite now requires mock ≥ 2.0.0


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-2
changelog:
  - Rebuilt for Python 3.7
  - Prolong the deadline for tests on s390x
  - Don't ignore the test results on arm, do the same as on s390x


author: Javier Peña <jpena@redhat.com> - 0.5-5.20170523git1f38ac
changelog:
  - Enable python 3 build on RHEL 8, disable python 2 build in that case
  - Remove python-zmq build dependency completely


