The System Transparency project is happy to announce a new ST collection release, st-1.2.0. See NEWS entries below for a summary of changes.
The documentation for this release is available at
https://docs.system-transparency.org/st-1.2.0/
A release tar file is published at
https://dist.system-transparency.org/st/st-1.2.0.tar.gz https://dist.system-transparency.org/st/st-1.2.0.tar.gz.sig
The release keys used for both the release tar file and the corresponding git tags are published at
https://www.system-transparency.org/keys
This collection release corresponds to the manifest file https://git.glasklar.is/system-transparency/core/system-transparency/-/blob/...
Project homepage and contact information can be found at
https://www.system-transparency.org/
Cheers, The System Transparency team
NEWS for st-1.2.0
This is an update to the st-1.1.0 collection release, with a few new features requested by users. It is intended to be backwards compatible with the st-1.0.0 and st-1.1.0 collections except for a new build-time requirement on go-1.22 or later.
The code components of st-1.2.0 are stboot v0.5.2, stmgr v0.5.2, and stprov v0.4.2 (also listed, with corresponding commit hashes, in the manifest file). Corresponding documentation is included in the collection, and it is also published at https://docs.system-transparency.org/st-1.2.0/.
Bug fixes:
* stprov: Don't add any extra dot when using default hostname (neither -h or -H specified on the command line).
* stmgr: Properly assign the issuer and subject in generated X.509 certificates.
Features:
* stboot: Add support for encrypted OS packages.
* stprov: For network autoselect (-A), prefer the fastest network interface.
* stboot, stprov: Improvements to logging.
* stboot, stprov: Display and populate the new (and optional) "description" field in the host configuration.
* stmgr: The uki subcommand can now produce both .uki and .iso in the same run.
For more details, see the NEWS files and documentation for respective component.