Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
path: root/CHANGELOG.rst
AgeCommit message (Collapse)Author
2022-12-17configs/baseline/profiledef.sh: use LZMA compression for the EROFS imagenl6720
Now that xz 5.4 is out and erofs-utils is built with LZMA support, it is possible to compress the EROFS image with LZMA for higher compression. `mkfs.erofs` trows a few warnings about using experimental features, but they should not be an issue. Nothing changes for the releng profile, for now at least.
2022-12-10mkarchiso: check if the code signing files specified with option -c existnl6720
Look for the files in `*_validate_options` and error out early if they do not exist.
2022-12-06mkarchiso: open the ARCHISO_GNUPG_FD, ARCHISO_TLS_FD and ARCHISO_TLSCA_FD ↵nl6720
file descriptors only for reading Nothing should ever be written to these files, so let's make sure it cannot happen.
2022-12-06mkarchiso: do not try to use an non existent GPG public key filenl6720
The `bootstrap` build mode never calls `_export_gpg_publickey`, so even if the GPG key is passed with the `-g` option and thus the `gpg_key` variable is set, the `${work_dir}/pubkey.gpg` file will not exist. This has not caused any issue so far because the `ARCHISO_GNUPG_FD` file descriptor opens the file for both reading and writing, which means the file gets created if it does not exist. Assign the exported public key file name to a `gpg_publickey` variable in `_export_gpg_publickey` and check for it when the file is used. Since the exist status of the gpg command cannot be checked, look for the exported public key file instead.
2022-12-03Add Memtest86+ to x86_64 UEFI GRUB boot menuJonathan Liu
Implements #203.
2022-10-30Add changelog for 68nl6720
2022-10-25configs/releng/airootfs/etc/mkinitcpio.conf: replace the deprecated ↵nl6720
archiso_kms hook with kms The archiso_kms hook was moved from mkinitcpio-archiso to the mkinitcpio project. See https://github.com/archlinux/mkinitcpio/commit/7bfe4861eacb3bf6cb70d9a17a0262542733a8ed and https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/commit/dec17db5324285118e2faee296cc990ff1281bd8
2022-10-22configs/: remove "Copy to RAM" boot entries since it is automatic nownl6720
The default is now copytoram=auto which enables copying to RAM when the rootfs image size is less than 4 GiB and free RAM exceeds the rootfs image size + 2 GiB. See https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/issues/13 and https://gitlab.archlinux.org/mkinitcpio/mkinitcpio-archiso/-/merge_requests/26. Implements #177.
2022-10-13mkarchiso: do not sign .sig filesnl6720
Make sure existing sig files are deleted before creating new ones and make sure to not sign any sig files. This allows retrying failed mkarchiso runs without ending up with files such as vmlinuz.ipxe.sig.ipxe.sig. Fixes #198
2022-10-06configs/: Do not explicitly enable qemu-guest-agent.servicenl6720
qemu-guest-agent.service will be started by the /usr/lib/udev/rules.d/99-qemu-guest-agent.rules udev rule. Fixes #199
2022-09-25Add changelog for version 67David Runge
CHANGELOG.rst: Add changelog for version 67.
2022-09-25Add the ability to generate rootfs signatures using openssl CMS module if ↵Anton Hvornum
``-c`` is given. (gitlab ci) Added a CA structure to the codesigning certificates. This to test the functionality of optional CA being in the signing message. (mkarchiso) Removed the ``sign_netboot_artifacts`` variable and instead we'll now rely on ``if [[ -v cert_list ]]; then``. Added ``ARCHISO_TLS_FD`` and ``ARCHISO_TLSCA_FD`` environment variables to override the certificates used. This is so that third party CA's can be used during building in a meaningful way without distrupting the CA trust that is shipped by default. _cms_sign_artifact() was added which signs the rootfs using OpenSSL CMS. The files will be saved as "${artifact}.cms.sig". That would be for instance "${isofs_dir}/${install_dir}/${arch}/airootfs.sfs.cms.sig".
2022-09-25Add changelog entry for ordering pacman-init after time-sync.targetDavid Runge
CHANGELOG.rst: Add changelog entry for ordering pacman-init after time-sync.target
2022-09-01Order pacman-init.service before archlinux-keyring-wkd-sync.servicenl6720
archlinux-keyring-wkd-sync.service needs an initialized pacman keyring to work. Add BindsTo=etc-pacman.d-gnupg.mount to stop pacman-init.service if the mount unit suddenly enters inactive state.
2022-08-28Add changelog for 66nl6720
2022-08-26mkarchiso: touch clock-epoch for extra hint on date and timeChristian Hesse
This helps on systems with screwed or broken RTC.
2022-08-19mkarchiso: preload more GRUB modules and disable shim_lock verifiernl6720
--disable-shim-lock is required to support Secure Boot with custom signatures without using shim. Otherwise GRUB will trow an error when trying to boot a kernel: error: shim_lock protocol not found. error: you need to load the kernel first. The modules GRUB will use need to be preloaded otherwise the EFI binaries cannot be signed and used for Secure Boot. See https://bugs.archlinux.org/task/71382. GRUB will trow en error: error: verification requested but nobody cares These changes are done to support Secure Boot using custom keys (not shim) by simply extracting the boot loader (BOOTx64.EFI and BOOTIA32.EFI), kernel, UEFI shell, signing them and then repacking the ISO. For example. Extract the files: $ osirrox -indev archlinux-YYYY.MM.DD-x86_64.iso \ -extract_boot_images ./ \ -extract /EFI/BOOT/BOOTx64.EFI BOOTx64.EFI \ -extract /EFI/BOOT/BOOTIA32.EFI BOOTIA32.EFI \ -extract /shellx64.efi shellx64.efi \ -extract /shellia32.efi shellia32.efi \ -extract /arch/boot/x86_64/vmlinuz-linux vmlinuz-linux Make the files writable: $ chmod +w BOOTx64.EFI BOOTIA32.EFI shellx64.efi shellia32.efi vmlinuz-linux Sign the files: $ sbsign --key db.key --cert db.crt --output BOOTx64.EFI BOOTx64.EFI $ sbsign --key db.key --cert db.crt --output BOOTIA32.EFI BOOTIA32.EFI $ sbsign --key db.key --cert db.crt --output shellx64.efi shellx64.efi $ sbsign --key db.key --cert db.crt --output shellia32.efi shellia32.efi $ sbsign --key db.key --cert db.crt --output vmlinuz-linux vmlinuz-linux Copy the boot loader and UEFI shell to the EFI system partition image: $ mcopy -D oO -i eltorito_img2_uefi.img BOOTx64.EFI BOOTIA32.EFI ::/EFI/BOOT/ $ mcopy -D oO -i eltorito_img2_uefi.img shellx64.efi shellia32.efi ::/ Repack the ISO using the modified El Torito UEFI boot image and add the signed boot loader files, UEFI shell and kernel to ISO9660: $ xorriso -indev archlinux-YYYY.MM.DD-x86_64.iso \ -outdev archlinux-YYYY.MM.DD-x86_64-Secure_Boot.iso \ -boot_image any replay \ -append_partition 2 0xef eltorito_img2_uefi.img \ -map BOOTx64.EFI /EFI/BOOT/BOOTx64.EFI \ -map BOOTIA32.EFI /EFI/BOOT/BOOTIA32.EFI \ -map shellx64.efi /shellx64.efi \ -map shellia32.efi /shellia32.efi \ -map vmlinuz-linux /arch/boot/x86_64/vmlinuz-linux Boot the resulting archlinux-YYYY.MM.DD-x86_64-Secure_Boot.iso.
2022-08-17mkarchiso: copy all GRUB files to the ISOnl6720
Do not limit file copying to only grub.cfg and instead copy all GRUB configuration files and assets to both the ISO9660 and FAT image. This will allow for including custom images, fonts, etc. To easily match all non-configuration files (i.e. files without the .cfg extension), bash's extended glob feature will be enabled. Actions common to multiple _make_bootmode_uefi-*.grub are split off into dedicated functions: * _make_common_bootmode_grub_copy_to_efibootimg, * _make_common_bootmode_grub_copy_to_isofs, * _make_common_bootmode_grub_cfg. Use the same du command in all efiboot_imgsize variable assignments. Fixes #185.
2022-07-16Add efibootimg variable in place of full pathPellegrino Prevete
Update authors Update CHANGELOG
2022-06-30Add changelog for 65nl6720
2022-06-18configs/baseline/profiledef.sh: add `-E ztailpacking` to ↵nl6720
airootfs_image_tool_options for mkfs.erofs As the man page says, it saves more space, although the feature is experimental.
2022-06-10Update documentation for uefi x64 grub boot modesplainlinen
2022-06-09mkarchiso: use C.UTF-8nl6720
The glibc 2.35-6 package ships with the C.UTF-8 locale included, so mkarchiso does not need to use a non-UTF-8 locale anymore. Implements #175.
2022-06-09configs/: use the C.UTF-8 localenl6720
The glibc 2.35-6 package ships with the C.UTF-8 locale included. This means there is now a UTF-8 locale available by default and en_US.UTF-8, which requires editing /etc/locale.gen and running locale-gen, is not needed anymore. Implements #175.
2022-05-30Fix release date for v64 in CHANGELOG.rstnl6720
2022-05-28Add changelog for 64nl6720
2022-05-25Update CHANGELOG.Pellegrino Prevete
2022-04-30Add changelog for 63nl6720
2022-04-30configs/*: add VMware and Hyper-V guest packages and enable their servicesnl6720
* open-vm-tools package, vmtoolsd.service and vmware-vmblock-fuse.service for VMware. * hyperv package, hv_fcopy_daemon.service, hv_kvp_daemon.service and hv_vss_daemon.service for Hyper-V. Related to #118.
2022-04-28configs/releng/airootfs/etc/xdg/reflector/reflector.conf: use mirrors that ↵nl6720
support both IPv4 & IPv6 This ensures that IPv6-only systems get working mirrors.
2022-04-28configs/releng/packages.x86_64: add open-iscsinl6720
It is needed for installing Arch on an iSCSI target.
2022-04-07configs/releng/packages.x86_64: add dmidecodenl6720
It is useful for finding information about the system's hardware and firmware.
2022-04-06configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfsnl6720
When using tmpfs, it is possible that parts of it end up getting put in swap space (only if there is one). This may not be desired, so use ramfs instead.
2022-04-05Add changelog for 62.1David Runge
CHANGELOG.rst: Add changelog for 62.1
2022-03-31CHANGELOG.rst: version 62nl6720
2022-03-25configs/{baseline,releng}/: disable systemd-gpt-auto-generatornl6720
When booting the ISO, you can observe a message that systemd-gpt-auto-generator has failed: systemd-gpt-auto-generator[197]: Reading EFI variable /sys/firmware/efi/efivars/LoaderDevicePartUUID-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f. systemd-gpt-auto-generator[197]: open("/sys/firmware/efi/efivars/LoaderDevicePartUUID-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f") failed: No such file or directory systemd-gpt-auto-generator[197]: EFI loader partition unknown, exiting. systemd-gpt-auto-generator[197]: (The boot loader did not set EFI variable LoaderDevicePartUUID.) systemd-gpt-auto-generator[197]: Failed to open device: No such device Seeing as it started to appear relatively recently, it may be a systemd bug. Since we do not want any GPT partition automounting in the live environment anyway, systemd-gpt-auto-generator can simply be disabled. Fixes #164.
2022-03-25syslinux PXE: Forced all TFTP paths to be absoluteEric Toombs
By default, syslinux interprets TFTP paths as relative to the location of the *.c32 modules, regardless whether a path starts with a slash. Without the `::` that I added to all of these paths, syslinux cannot find these files. It searches for them in /%INSTALL_DIR%/syslinux//%INSTALL_DIR%/boot/x86_64/vmlinuz-linux, etc.
2022-01-31Add changelog for 61David Runge
CHANGELOG.rst: Add changelog entry for 61.
2021-12-28Add changelog for version 60David Runge
CHANGELOG.rst: Add a changelog entry for version 60.
2021-12-28Add dummy changelog entryDavid Runge
CHANGELOG.rst: Add a dummy changelog entry that serves as entry for any unreleased changes.
2021-11-30Add changelog for v59David Runge
CHANGELOG.rst: Add changelog information for v59.
2021-08-25Add changelog for v58David Runge
CHANGELOG.rst: Add changelog entries for v58.
2021-07-30Add changelog for 57David Runge
CHANGELOG.rst: Add an entry for v57.
2021-07-11Add changelog for 56.1David Runge
CHANGELOG.rst: Add a changelog entry for 56.1
2021-06-30Add changelog for v56David Runge
CHANGELOG.rst: Add a changelog entry for v56.
2021-05-30Add changelog for v55David Runge
CHANGELOG.rst: Add changelog entries for v55.
2021-05-13Add changelog for v54David Runge
CHANGELOG.rst: Add changelog entry for v54.
2021-05-01Add changelog for v53David Runge
CHANGELOG.rst: Add changelog for v53
2021-03-30Add changelog entry for v52David Runge
CHANGELOG.rst: Add changelog entry for v52
2021-02-01Add changelog fileDavid Runge
CHANGELOG.rst: Add file to track changes (at least for v51).

Copyright © 2002-2022 Judd Vinet and Aaron Griffin. Copyright © 2022 Erich Eckner.
The Arch Linux name and logo are recognized trademarks. Some rights reserved. The registered trademark Linux® is used pursuant to a sublicense from LMI, the exclusive licensee of Linus Torvalds, owner of the mark on a world-wide basis.