v2.10.1

Note: v2.10.0 was tagged, but not released, this includes notes for both. See the NEWS file for which changes are in which tag.

Starting with this release, ignition-validate binaries are signed with the Fedora 34 key.

Breaking Changes:

• Rename Custom struct to ClevisCustom (3.3.0-exp)
• Embed Clevis and ClevisCustom structs in parents (3.3.0-exp)
• Always include interior nodes in merge transcript

Features:

• Add kernel argument support (3.3.0-exp)

Bug Fixes:

• Fix fetching userdata on AWS when IMDSv1 is disabled
• Fix creating Tang-based LUKS volumes before network is up
• Document storage.filesystems.wipeFilesystem default
• Fix file mode of ignition-kargs-helper script

v2.9.0

Changes:

• Require storage.filesystems.format if wipeFilesystem or mountOptions is specified
• Refactor code to address golangci-lint warnings

Bug Fixes:

• Fix fetching configs from S3 resources when running on non-default AWS partitions
• Fix fetching userdata from IMDSv2 on AWS
• Fix crash on partitions with no number or label
• Correctly document storage.filesystems.path as optional
• Clarify documented semantics of systemd.units.name

v2.8.1

Bug Fixes:

• Correctly merge config fields behind a struct pointer (e.g. clevis)

v2.8.0

Starting with this release, ignition-validate binaries are signed with the Fedora 33 key.

Features:

• Support unmasking systemd units

Changes:

• Switch system base config from single file to .d directory
• Add Go merge API that produces a transcript of merge operations

v2.7.0

Features:

• Support resizing existing partitions (3.2.0)
• Support reusing LUKS devices not bound to Clevis (3.2.0)

Changes:

• Mark the 3.2.0 config spec as stable
• No longer accept configs with version 3.2.0-experimental
• Create new 3.3.0-experimental config spec from 3.2.0
• Require presence of a config source on CloudStack/OpenStack, and wait indefinitely for it to appear
• When executing in non-default AWS partitions (GovCloud or AWS China), fetch s3:// resources from the same partition

Bug Fixes:

• Fix bundled library unconditionally blocking for entropy at startup
• Fix config fetching on AzureStack
• Fix partition offset/length calculation on big-endian systems
• Fix premature logging of successful config fetch

v2.6.0

Features:

• Add release tag to ignition-validate container for latest release
• Support creating ephemeral LUKS volumes (3.2.0-exp)
• Support deleting users/groups (3.2.0-exp)

Bug Fixes:

• Request network when needed on CloudStack/OpenStack

v2.5.0

Changes:

• Merge ignition-dracut into the Ignition repository

Bug Fixes:

• Fix udev race determining filesystem type when creating filesystem

v2.4.1

Changes:

• Set LUKS key file directory to mode 700

Bug Fixes:

• Fix nondeterministic config provider precedence causing fetch failures
• Don't relabel symlink to home directory, since it might not be writable
• Fix failure looking up users/groups

v2.4.0

Features:

• Support creating LUKS volumes with Clevis or static key file (3.2.0-exp)
• Support Google Cloud Storage (gs://) resource URLs
• Support AWS IMDSv2
• Allow specifying multiple CA certificates in one resource
• Add Azure Stack platform
• Allow OS to avoid starting network if the config doesn't need it

Changes:

• When creating a filesystem, run wipefs on target device first
• Warn if filesystem probe finds multiple filesystem signatures
• Don't warn about unset file/directory mode in config
• Fetch AWS metadata version 2019-10-01 instead of 2009-04-04
• Refactor SELinux relabeling

Bug Fixes:

• Fix compressed CA certificates
• Fix hard links to files deeper than the hard link
• Write empty systemd dropin if requested
• Remember to relabel /etc/systemd/system-preset
• Ensure configs are only fetched during fetch stage
• Clarify docs about interaction between file contents and overwrite

v2.3.0

Starting with this release, ignition-validate binaries are signed with the Fedora 32 key.

Features:

• Allow specifying HTTP headers when fetching remote resources (3.1.0)
• Support compression for CA certs and merged/replaced configs (3.1.0)
• Support sha256 verification hashes (3.1.0)
• Support compression for data URIs
• Log structured journal entry when user config is found
• Log structured journal entry when SSH keys are written

Changes:

• Unify CaReference, ConfigReference, FileContents structs into Resource (3.1.0)
• Mark the 3.1.0 config spec as stable
• No longer accept configs with version 3.1.0-experimental
• Create new 3.2.0-experimental config spec from 3.1.0

Bug Fixes:

• Fix ignition-validate for config versions other than 3.0.0
• Fix config fetch and status reporting on Packet