v2024.3

Notable enhancements are:

- rpm-ostree now has experimental support for installing RPMs with files in `/opt` and `/usr/local`. This can be enabled at compose time (via the `opt-usrlocal-overlays` switch), or client-side using [an environment variable](coreos#233 (comment)). Feedback on the approach would be greatly appreciated! coreos#4728

```
Colin Walters (2):
      Port to ostree-ext 0.13, cap-std 3
      Release 2024.3

HuijingHei (3):
      proxy-test: verify proxy environment works
      Enhance 2 upgrade tests
      tests: minor fix for `client-layering-upgrade`

Jonathan Lebon (10):
      importer: Allow `/usr/local` RPM content
      Support RPMs installing in `/opt` and `/usr/local`
      app: Make `/var/usrlocal` and `/var/opt` compat symlinks in state overlay model
      core: Add knob to make it easier to test out state overlay model
      libpriv/rpm-util: Fix cap_t leak
      composepost: Add SELinux equivalency rule for /usr/lib/opt → /opt
      ci/prow: Build rpm instead
      .copr/Makefile: Allow building RPM without git remote

Scott Hebert (1):
      Update container.md

Timothée Ravier (1):
      docs: Add generic container image configuration support
```

* @scoheb made their first contribution in coreos#4808

**Full Changelog**: coreos/rpm-ostree@v2024.2...v2024.3

Git-EVTag-v0-SHA512: 7b14afdcb3227cd7b296d417444d5cd85f37de714951d531ee3753a48d44f8e95d7ae44644d7d1e6ac5d1e926cfc3a92b8b11bb87ad6f73050dd1bfb679ba4dc

v2024.2

Notable bug fixes are:

- rpm-ostree now will set the correct file capabilities by getting the actual xattr bytes: coreos#4769
- rpm-ostree (ostree-ext) now will not remove all environment variables: ostreedev/ostree-rs-ext#583. For example this can affect proxy configuration passed via environment variables.

```
Colin Walters (1):
      daemon: Add a bit more error prefixing

HuijingHei (1):
      test-misc-2.sh: update checking log

Jonathan Lebon (9):
      core: Don't touch /usr/local at assembly time
      app: Tweak tmpfiles.d integration entries for `/usr/local`
      app: Split out /var/{opt,usrlocal} tmpfiles.d entries in separate dropin
      ci/prow: temporarily stop composing with new rpm-ostree
      rust/lockfile: Drop unused imports
      libpriv: Stop digging in private libcap internals
      .github: add new issue template

Joseph Marrero (2):
      Update ostree-ext to 0.12.9
      Release 2024.2

Timothée Ravier (1):
      Cargo.toml: Exclude idna/tests for vendor tarball
```

**Full Changelog**: coreos/rpm-ostree@v2024.1...v2024.2

Git-EVTag-v0-SHA512: f85373344f5716e0786c5fc5f4842ed8464f378f590f4a0feccef6c8c7bc32f60ebd3107ece53777f7a1b45bbb3bbe8b866ef15388189c447f1f34296ff0fd20

Release 2024.1

This release fixes two regressions, one introduced in 2023.13
for upgrades with layered packages, and one for kernel
argument handling.

v2023.12

Notable bug fixes are:

- rpm-ostree now will remove duplicate tmpfiles entries coreos#4697
- rpm-ostree now will properly prune container layers coreos#4720

```
Colin Walters (9):
      tmpfiles: Add a unit test
      tmpfiles: Rename reader function
      tmpfiles: Change `read_tmpfiles` to return a direct hashmap
      tmpfiles: Collect into a BTreeMap for reproducibility
      tmpfiles: Drop intermediate re-allocation
      composepost: Support rootfs.transient=yes
      Ensure container image layers are pruned
      tmpfiles: Fix error contexts
      tmpfiles: Handle old caches

HuijingHei (4):
      rpm-ostree-0-integration.conf: remove `/var/lib` tmpfiles entry as it is duplicated in `var.conf`
      rpmostree-postprocess.cxx: remove `var/` in unified core mode
      utils.rs: remove duplicate tmpfiles entries
      tmpfiles.rs: minor update
```

**Full Changelog**: coreos/rpm-ostree@v2023.11...v2023.12

Git-EVTag-v0-SHA512: e6a2cda3eb1856ecb4388fb8d7149232b087c189c7fe8dd115e7fbc2eabd75cc0355a66f4c312fff4190937fc4bc4b030efffb9e64c73bf83634fcf4047280c2

v2023.11

This is a smaller release. Notable new features and bug fixes are:
* rpm-ostree now supports adding generic container configs coreos#4701
* rpm-ostree now adds padding between dracut's initramfs and random CPIO coreos#4683

```
Colin Walters (10):
      Update to ostree-ext 0.12.5
      daemon: Make one bit of C++ code compatible with f38+f39 clang-format
      ci/test-container: Drop modularity tests in F39
      ci/test-container: Update for f39
      Remove layering-modules test
      tests: Add f39 compatibility
      tests/container-build-integration: Use testing-devel
      tests: Skip tests that need the fix for systemd/systemd#29275
      lib: Update ostree-ext
      compose: Add support for specifying image config

Hongxu Jia (2):
      correct bash completion
      src/app/libmain.cxx: correct output of rpm-ostree compose -h

Jonathan Lebon (6):
      tests/layering-fedorainfra: update bodhi/koji URLs for f39
      tests/libtest: drop BuildArch from spec file for test RPMs
      ci: bump vmcheck timeout to 1 hour
      ci: cancel previous build on PR update
      lockfile: add SRPM name in metadata field
      libpriv/kernel: Add padding between dracut initramfs and random CPIO

Joseph Marrero (1):
      Stop vendoring bootc
```

* @hongxu-jia made their first contribution in coreos#4681

**Full Changelog**: coreos/rpm-ostree@v2023.10...v2023.11

Git-EVTag-v0-SHA512: b68eda4fc6378e9d7487698967e2b32632c33fe68fffb33c731554586f5c36e0a5983bb926736f975b7e9841f6c0e45957cd840274619059665b91c88e29fc12

Release 2023.10

This is a re-release of 2023.9 which had a wrong version number.

Release 2023.9

This release has a variety of smaller fixes and cleanups, plus one new opt-in new feature to ensure the SELinux labels for `/usr/etc` are the same as `/etc`, which is important for enabling "transient etc" with ostree.

* compose: Two minor cleanups by @cgwalters in coreos#4629
* ci: Bump hardcoded Ignition version by @cgwalters in coreos#4639
* deny: Add ring by @cgwalters in coreos#4630
* packaging/rpm-ostree: update python3 macros and builddep by @jmarrero in coreos#4641
* docs/handbook: Add more details about inactive overrides by @jlebon in coreos#4642
* Bump to ostree-ext 0.12.3 by @cgwalters in coreos#4665
* Hard require ostree 2023.7 by @cgwalters in coreos#4672
* Ensure rofiles-fuse gets SIGTERM if we exit by @cgwalters in coreos#4660
* ci/upgrade: disable `zincati.service` in config.bu by @HuijingHei in coreos#4671
* build(deps): bump tracing from 0.1.37 to 0.1.40 by @dependabot in coreos#4669
* treefile: Add option to label `/usr/etc` as `/etc` by @cgwalters in coreos#4640
* libpriv/rpm-util: Query package repo checksum under lock by @jlebon in coreos#4673

**Full Changelog**: coreos/rpm-ostree@v2023.8...v2023.9

The biggest feature in this release is support for

`rpm-ostree upgrade --check` when using a container flow;
this should unblock GUI tools like Plasma Discover and gnome-software
which want to check for updates and prompt the user for downloads.

There's a variety of other smaller bugfixes and features and internal
cleanups.

Colin Walters (32):
      daemon/search: Fix memory leaks
      Bump to containers-image-proxy 0.5.5
      search: Fix a NULL ptr deref with zero terms
      packaging: Write to target/
      ci: Add autovendor flow
      sysroot: Silence clang-analyzer warning
      pkg-builtins: Add assertions to quiet clang-analyzer
      ci/autovendor: Make it work
      cxx: Regenerate
      install/uninstall: Error out with --enablerepo on booted host
      Update to ostree-ext 0.11.6
      Remove unreferenced container images in cleanup, not rebase
      core: Print total imported
      core: Include repo name in download error
      core: Add warning when we have pkgs to download in cache-only mode
      scripts: Also ignore kernel-64k scripts
      ci: Run cosa unprivileged
      docs: Add bootc
      Pin bootc to a git tag
      lib: Update to bootc 0.1.1 (ostree-ext 0.12, cap-std-ext 3.x)
      lockfile: Port away from deprecated chrono method
      composepost: Use O_TMPFILE, not memfd
      rust: Drop dependency on `memfd`
      compose-image: Add `--initialize-mode`
      Port a few things from nix to rustix
      gitmodules: Switch to github for libglnx
      container: Make `rpmostree.inputhash` optional
      Update to ostree-ext 0.12.1
      build-sys: Hard require ostree 2023.6
      core: Add composefs digest for local commits too
      Update to ostree-ext 0.12.2
      Release 2023.8

CoreOS Bot (1):
      Sync repo templates ⚙

Jonathan Lebon (5):
      Cargo.toml: specify `nix` features to use
      core: Convert path to ostree convention when deleting
      tests/libvm.sh: Support `VMIMAGE` override
      tests/vmcheck: Add container-selinux hack in selinux override test
      libpriv/core: Tolerate rpmdb vs on-disk file type mismatch

Joseph Marrero (1):
      ci: update ignition on test-container test

Luke Yang (1):
      Add `container upgrade --check` function

dependabot[bot] (29):
      build(deps): bump openssl from 0.10.56 to 0.10.57
      build(deps): bump tokio from 1.29.1 to 1.32.0
      build(deps): bump camino from 1.1.4 to 1.1.6
      build(deps): bump serde_json from 1.0.104 to 1.0.105
      build(deps): bump rustix from 0.37.20 to 0.38.3
      build(deps): bump nix from 0.26.2 to 0.26.4
      build(deps): bump regex from 1.9.3 to 1.9.5
      build(deps): bump tempfile from 3.7.1 to 3.8.0
      build(deps): bump cxx-build from 1.0.105 to 1.0.107
      build(deps): bump libglnx from `c02eb59` to `54ad67d`
      build(deps): bump libc from 0.2.146 to 0.2.147
      build(deps): bump serde from 1.0.179 to 1.0.188
      build(deps): bump clap from 4.3.21 to 4.4.2
      build(deps): bump indicatif from 0.17.5 to 0.17.6
      build(deps): bump either from 1.8.1 to 1.9.0
      build(deps): bump chrono from 0.4.26 to 0.4.30
      build(deps): bump cxx from 1.0.105 to 1.0.107
      build(deps): bump libc from 0.2.147 to 0.2.148
      build(deps): bump rustix from 0.38.3 to 0.38.13
      build(deps): bump indoc from 2.0.3 to 2.0.4
      build(deps): bump nix from 0.26.4 to 0.27.1
      build(deps): bump anyhow from 1.0.71 to 1.0.75
      build(deps): bump libglnx from `54ad67d` to `aff1eea`
      build(deps): bump rustix from 0.38.13 to 0.38.14
      build(deps): bump serde_yaml from 0.9.21 to 0.9.25
      build(deps): bump clap from 4.4.2 to 4.4.4
      build(deps): bump rayon from 1.7.0 to 1.8.0
      build(deps): bump reqwest from 0.11.18 to 0.11.20
      build(deps): bump indicatif from 0.17.6 to 0.17.7

v2023.7

This is a bugfix release that includes:

* A bootc-lib fix for bootc-dev/bootc#112 which was breaking our builds.
* The fix for coreos#4508 which caused segfaults when any flag was passed between the `rpm-ostree` command and `usroverlay` option.

```
Colin Walters (3):
      man: Describe GPG key behavior
      main: Move usroverlay parsing back to C++ consistently
      usroverlay: Pass arguments to `ostree admin unlock`

Joseph Marrero (1):
      Update bootc-lib
```

**Full Changelog**: coreos/rpm-ostree@v2023.6...v2023.7

Git-EVTag-v0-SHA512: 0460d5e1e059257a60c04e78e2e1978bd56b200597df4d72365dab04b5a255697cf533dcab8c3af0cfca12dec846520dd2f1782db298f8a1d1d4ad1b0e9d971a

v2023.6

This version of rpm-ostree contains numerous bug fixes and enhancements. Notable features are:

* rpm-ostree now supports the "search" verb allowing users to use rpm-ostree to search for available packages. An example of this is: `rpm-ostree search *kernel`

* We now generate composefs metadata if ostree was compiled with support for composefs

* rpm-ostree now vendors `bootc`, and this functionality can be accessed by creating a symlink `ln -sr /usr/bin/rpm-ostree /usr/bin/bootc`
  This is an experimental feature for now.

```
Alexander Larsson (1):
      commit: Always enable generation pf composefs metadata if possible

Colin Walters (9):
      postprocess: Use --refresh now
      container: Clarify error for nonexistent previous manifest file
      client: Add an error prefix in deployment path
      main: Update ostree-ext, add provisional-repair entrypoint
      Bump to ostree-ext 0.11.4
      Revert "main: Drop deprecated `container-encapsulate` entrypoint"
      Use cap-tempfile via cap-std-ext
      status: Fix possibly uninitialized warning
      Bump to ostree-ext 0.11.5

Eric Curtin (1):
      kernel: Specify multiple kernel or initramfs in error message

Felix Yan (1):
      docs: correct a typo in Makefile.am

Huijing Hei (4):
      sysuers: fix error if running `groupadd` with `-f`
      passwd: Rename func `data_from_json` to `write_data_from_treefile` and add comment
      passwd: sync `etc/{,g}shadow` according to `etc/{passwd,group}`
      passwd: add `enum PasswdKind`

Joseph Marrero (4):
      ci/test-container.sh: use f37 ignition for replace test
      rust/src/main.rs: Add bootc entry point
      .cci.jenkinsfile: up build pod memory to 6GB
      scripts: also ignore kernel-debug-modules.posttrans

Luke Yang (2):
      Add a `search` CLI verb and DBus API
      Add `kola` tests and fix `Name & Summary` search

Timothée Ravier (2):
      docs: Document ostree native container URL format
      packaging/spec.in: Enable rpm-ostree-countme.timer following presets
```

* @ericcurtin made their first contribution in coreos#4494
* @felixonmars made their first contribution in coreos#4520

**Full Changelog**: coreos/rpm-ostree@v2023.5...v2023.6

Git-EVTag-v0-SHA512: b4d5062beff83db1a31d286ab218a077ad3940f001900f58b96ba57fc23e283dab2b1c7520acac2918dc7968b6fb78b4a08cd04fd10d2c218b6427126a6aeb8d