The ST team is happy to announce a new release of the stmgr program, tag v0.6.6, which succeeds the previous release at tag v0.5.2. The source code for this release is available from the git repository:

git clone -b v0.6.6 https://git.glasklar.is/system-transparency/core/stmgr.git

Authoritative ST release signing keys are published at https://www.system-transparency.org/keys, and the tag signature can be verified using the command

git -c gpg.format=ssh \ -c gpg.ssh.allowedSignersFile=allowed-ST-release-signers \ tag --verify v0.6.6

The expectations and intended use of the stmgr program is documented in the repository's RELEASES file. This RELEASES file also contains more information concerning the overall release process, see:

https://git.glasklar.is/system-transparency/core/stmgr/-/blob/v0.6.6/RELEASE...

Learn about what's new in a release from the repository's NEWS file. An excerpt from the latest NEWS-file entry is listed below for convenience.

If you find any bugs, please report them on the System Transparency discuss list or open an issue on GitLab in the stmgr repository:

https://lists.system-transparency.org/mailman3/postorius/lists/st-discuss.li... https://git.glasklar.is/system-transparency/core/stmgr/-/issues system-transparency-core-stmgr-issues@incoming.glasklar.is

Cheers, The ST team

--- NEWS for stmgr v0.6.6

This release adds several new subcommands, most notably related to supporting OS packages that are transparently signed with Sigsum.

New features:

* Verify OS package signatures using the new subcommand "ospkg verify". * Attach Sigsum proofs to an OS package descriptor using the new subcommand "ospkg sigsum". * Add subcommand `uki to-iso` such that UKIs and ISOs can be created in separate steps (cf. creating in the same step using "uki -format iso").

Miscellaneous:

* Improved error messages on invalid command-line input.

Incompatible changes:

* This version requires go version 1.23 or later when building.

This release has been tested to work with:

* All stprov tests which use stmgr, pre-release v0.5.3. https://git.glasklar.is/system-transparency/core/stprov/-/blob/v0.5.3/docs/t... * All stboot tests which use stmgr, pre-release v0.6.4. https://git.glasklar.is/system-transparency/core/stboot/-/blob/v0.6.4/docs/t...

This release implements the specifications at:

* https://git.glasklar.is/system-transparency/project/docs/-/tree/v0.5.2/conte...