The System Transparency project is happy to announce a new ST collection release, st-1.1.0. See NEWS entries below for a summary of changes.
The documentation for this release is available at
https://docs.system-transparency.org/st-1.1.0/
A release tar file is published at
https://dist.system-transparency.org/st/st-1.1.0.tar.gz https://dist.system-transparency.org/st/st-1.1.0.tar.gz.sig
The release keys used for both the release tar file and the corresponding git tags are published at
https://www.system-transparency.org/keys
This collection release corresponds to the manifest file https://git.glasklar.is/system-transparency/core/system-transparency/-/blob/...
Project homepage and contact information can be found at
https://www.system-transparency.org/
Cheers, The System Transparency team
NEWS for st-1.1.0
This is an update to the st-1.0.0 collection release, with one bug fix and a few new features requested by users. It is intended to be backwards compatible with the st-1.0.0 collection.
Using a relative os_pkg_url for OS packages served (one of the new features) requires an stboot upgrade, or else the boot will fail.
Bug fixes:
* stboot: When stboot is started as the init process (pid 1), it now loads kernel modules *before* mounting the efivarfs. Previously, accessing EFI variables required that the efivarfs driver was compiled statically into the kernel, rather than as a module. See https://docs.system-transparency.org/st-1.1.0/docs/reference/stboot-system/#... for init process alternatives and how to configure module loading when stboot is started as the init process.
Features:
* stboot: If a provisioning OS package is included in the stboot image, the operator can force stboot into provisioning mode by pressing Ctrl-C to interrupt normal boot, and stboot can similarly enter provisioning mode if normal boot fails for any other reason. See https://docs.system-transparency.org/st-1.1.0/docs/reference/stboot-system/#...
* stboot, stmgr: the OS package archive URL (os_pkg_url) can now be relative to the OS package pointer. Avoid use of this extension if backwards compatibility with older stboot versions is needed. See https://docs.system-transparency.org/st-1.1.0/docs/reference/os_package/#des...
For information on how releases are made in System Transparency, see https://docs.system-transparency.org/st-1.1.0/docs/releases/
The included components and their versions are specified in the collection's manifest file. Documentation for the collection can be generated from the included components, see docs. Documentation is also published at https://docs.system-transparency.org/st-1.1.0/.