diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..73c092c --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/ignition-2.13.0.tar.gz diff --git a/.ignition.metadata b/.ignition.metadata new file mode 100644 index 0000000..d122ae5 --- /dev/null +++ b/.ignition.metadata @@ -0,0 +1 @@ +c3434d20b78cde599c03820a86c1b4107f0e8e5c SOURCES/ignition-2.13.0.tar.gz diff --git a/SOURCES/luks-volume-reuse.patch b/SOURCES/luks-volume-reuse.patch new file mode 100644 index 0000000..b27f481 --- /dev/null +++ b/SOURCES/luks-volume-reuse.patch @@ -0,0 +1,56 @@ +From aed47c18aee593d155d45c0fe9ba29a9e3123cf6 Mon Sep 17 00:00:00 2001 +From: Benjamin Gilbert +Date: Mon, 17 Jan 2022 21:17:08 -0500 +Subject: [PATCH] disks: fix reuse of statically keyed LUKS volume + +We need to persist a volume's keyfile to the real root even if we take +the early `continue` when reusing the volume. Rather than copying code, +enable persistence up front and then disable it afterward if we decide +not to persist the key. + +Fixes error: + + CRITICAL : Ignition failed: creating crypttab entries: missing persisted keyfile for [...] + +Fixes: https://github.com/coreos/ignition/issues/1305 +Fixes: 65e9c1611128 ("stages/disks: use State to persist keyfiles for files stage") +--- + internal/exec/stages/disks/luks.go | 15 ++++++++------- + 1 file changed, 8 insertions(+), 7 deletions(-) + +diff --git a/internal/exec/stages/disks/luks.go b/internal/exec/stages/disks/luks.go +index 77ecc24e..5fa15e70 100644 +--- a/internal/exec/stages/disks/luks.go ++++ b/internal/exec/stages/disks/luks.go +@@ -156,6 +156,13 @@ func (s *stage) createLuks(config types.Config) error { + } + } + } ++ // store the key to be persisted into the real root ++ // do this here so device reuse works correctly ++ key, err := ioutil.ReadFile(keyFilePath) ++ if err != nil { ++ return fmt.Errorf("failed to read keyfile %q: %w", keyFilePath, err) ++ } ++ s.State.LuksPersistKeyFiles[luks.Name] = dataurl.EncodeBytes(key) + + if !util.IsTrue(luks.WipeVolume) { + // If the volume isn't forcefully being created, then we need +@@ -329,13 +336,7 @@ func (s *stage) createLuks(config types.Config) error { + ); err != nil { + return fmt.Errorf("removing key file from luks device: %v", err) + } +- } else { +- // store the key to be persisted into the real root +- key, err := ioutil.ReadFile(keyFilePath) +- if err != nil { +- return fmt.Errorf("failed to read keyfile %q: %w", keyFilePath, err) +- } +- s.State.LuksPersistKeyFiles[luks.Name] = dataurl.EncodeBytes(key) ++ delete(s.State.LuksPersistKeyFiles, luks.Name) + } + } + +-- +2.33.1 + diff --git a/SPECS/ignition.spec b/SPECS/ignition.spec new file mode 100644 index 0000000..2c42301 --- /dev/null +++ b/SPECS/ignition.spec @@ -0,0 +1,646 @@ +# Generated by go2rpm 1.3 +%if 0%{?fedora} +%bcond_without check +%else +# %gocheck isn't currently provided on CentOS/RHEL +# https://bugzilla.redhat.com/show_bug.cgi?id=1982298 +%bcond_with check +%endif + +# https://github.com/coreos/ignition +%global goipath github.com/coreos/ignition +%global gomodulesmode GO111MODULE=on +Version: 2.13.0 + +%gometa + +%global golicenses LICENSE +%global godocs README.md docs/ +%global dracutlibdir %{_prefix}/lib/dracut + +Name: ignition +Release: 1%{?dist} +Summary: First boot installer and configuration tool + +# Upstream license specification: Apache-2.0 +License: ASL 2.0 +URL: %{gourl} +Source0: %{gosource} +# https://github.com/coreos/ignition/pull/1307 +Patch0: luks-volume-reuse.patch + +BuildRequires: libblkid-devel + +# Requires for 'disks' stage +%if 0%{?fedora} +Recommends: btrfs-progs +%endif +Requires: dosfstools +Requires: gdisk +Requires: dracut +Requires: dracut-network + +Obsoletes: ignition-dracut < 0.31.0-3 + +# Generated by `go-mods-to-bundled-provides.py | sort` +Provides: bundled(golang(cloud.google.com/go)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/compute/metadata)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/iam)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/internal)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/internal/optional)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/internal/trace)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/internal/version)) = 0.58.0 +Provides: bundled(golang(cloud.google.com/go/storage)) = 0.58.0 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/arn)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/awserr)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/awsutil)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/client)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/client/metadata)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/corehandlers)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/endpointcreds)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/processcreds)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/stscreds)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/csm)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/defaults)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/ec2metadata)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/endpoints)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/request)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/session)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/signer/v4)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/context)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/ini)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/s3err)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkio)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkmath)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkrand)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkuri)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/shareddefaults)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/strings)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sync/singleflight)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/eventstream)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/eventstream/eventstreamapi)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/json/jsonutil)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/query)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/query/queryutil)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/rest)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/restxml)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3/internal/arn)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3/s3iface)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3/s3manager)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/service/sts)) = 1.30.28 +Provides: bundled(golang(github.com/aws/aws-sdk-go/service/sts/stsiface)) = 1.30.28 +Provides: bundled(golang(github.com/coreos/go-semver/semver)) = 0.3.0 +Provides: bundled(golang(github.com/coreos/go-systemd/v22/dbus)) = 22.0.0 +Provides: bundled(golang(github.com/coreos/go-systemd/v22/journal)) = 22.0.0 +Provides: bundled(golang(github.com/coreos/go-systemd/v22/unit)) = 22.0.0 +Provides: bundled(golang(github.com/coreos/vcontext/json)) = 0.0.0-20210407161507.git4ee6c745c8bd +Provides: bundled(golang(github.com/coreos/vcontext/path)) = 0.0.0-20210407161507.git4ee6c745c8bd +Provides: bundled(golang(github.com/coreos/vcontext/report)) = 0.0.0-20210407161507.git4ee6c745c8bd +Provides: bundled(golang(github.com/coreos/vcontext/tree)) = 0.0.0-20210407161507.git4ee6c745c8bd +Provides: bundled(golang(github.com/coreos/vcontext/validate)) = 0.0.0-20210407161507.git4ee6c745c8bd +Provides: bundled(golang(github.com/google/renameio)) = 0.1.0 +Provides: bundled(golang(github.com/google/uuid)) = 1.1.1 +Provides: bundled(golang(github.com/pin/tftp)) = 2.1.0 +Provides: bundled(golang(github.com/pin/tftp/netascii)) = 2.1.0 +Provides: bundled(golang(github.com/stretchr/testify/assert)) = 1.5.1 +Provides: bundled(golang(github.com/vincent-petithory/dataurl)) = 0.0.0-20160330182126.git9a301d65acbb +Provides: bundled(golang(github.com/vmware/vmw-guestinfo/bdoor)) = 0.0.0-20170707015358.git25eff159a728 +Provides: bundled(golang(github.com/vmware/vmw-guestinfo/message)) = 0.0.0-20170707015358.git25eff159a728 +Provides: bundled(golang(github.com/vmware/vmw-guestinfo/rpcout)) = 0.0.0-20170707015358.git25eff159a728 +Provides: bundled(golang(github.com/vmware/vmw-guestinfo/rpcvmx)) = 0.0.0-20170707015358.git25eff159a728 +Provides: bundled(golang(github.com/vmware/vmw-guestinfo/vmcheck)) = 0.0.0-20170707015358.git25eff159a728 +Provides: bundled(golang(github.com/vmware/vmw-ovflib)) = 0.0.0-20170608004843.git1f217b9dc714 +Provides: bundled(golang(golang.org/x/net/context)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/context/ctxhttp)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/http2)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/http2/hpack)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/http/httpguts)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/http/httpproxy)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/idna)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/internal/timeseries)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/net/trace)) = 0.0.0-20200602114024.git627f9648deb9 +Provides: bundled(golang(golang.org/x/oauth2)) = 0.0.0-20200107190931.gitbf48bf16ab8d +Provides: bundled(golang(golang.org/x/oauth2/google)) = 0.0.0-20200107190931.gitbf48bf16ab8d +Provides: bundled(golang(golang.org/x/oauth2/internal)) = 0.0.0-20200107190931.gitbf48bf16ab8d +Provides: bundled(golang(golang.org/x/oauth2/jws)) = 0.0.0-20200107190931.gitbf48bf16ab8d +Provides: bundled(golang(golang.org/x/oauth2/jwt)) = 0.0.0-20200107190931.gitbf48bf16ab8d +Provides: bundled(golang(golang.org/x/sys/internal/unsafeheader)) = 0.0.0-20200610111108.git226ff32320da +Provides: bundled(golang(golang.org/x/sys/unix)) = 0.0.0-20200610111108.git226ff32320da +Provides: bundled(golang(golang.org/x/tools/cmd/goimports)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/analysis)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/analysis/passes/inspect)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/ast/astutil)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/ast/inspector)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/buildutil)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/gcexportdata)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/internal/cgo)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/internal/gcimporter)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/internal/packagesdriver)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/loader)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/packages)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/types/objectpath)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/go/types/typeutil)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/analysisinternal)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/event)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/event/core)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/event/keys)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/event/label)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/fastwalk)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/gocommand)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/gopathwalk)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/imports)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(golang.org/x/tools/internal/packagesinternal)) = 0.0.0-20200610160956.git3e83d1e96d0e +Provides: bundled(golang(google.golang.org/api/googleapi)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/googleapi/transport)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/internal)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/internal/gensupport)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/internal/third_party/uritemplates)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/iterator)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/option)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/option/internaloption)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/storage/v1)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/transport/cert)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/transport/http)) = 0.26.0 +Provides: bundled(golang(google.golang.org/api/transport/http/internal/propagation)) = 0.26.0 +Provides: bundled(golang(google.golang.org/genproto/googleapis/api/annotations)) = 0.0.0-20200610104632.gita5b850bcf112 +Provides: bundled(golang(google.golang.org/genproto/googleapis/iam/v1)) = 0.0.0-20200610104632.gita5b850bcf112 +Provides: bundled(golang(google.golang.org/genproto/googleapis/rpc/code)) = 0.0.0-20200610104632.gita5b850bcf112 +Provides: bundled(golang(google.golang.org/genproto/googleapis/rpc/status)) = 0.0.0-20200610104632.gita5b850bcf112 +Provides: bundled(golang(google.golang.org/genproto/googleapis/type/expr)) = 0.0.0-20200610104632.gita5b850bcf112 +Provides: bundled(golang(go.opencensus.io)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/internal)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/internal/tagencoding)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/metric/metricdata)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/metric/metricproducer)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/plugin/ochttp)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/plugin/ochttp/propagation/b3)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/resource)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/stats)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/stats/internal)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/stats/view)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/tag)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/trace)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/trace/internal)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/trace/propagation)) = 0.22.5 +Provides: bundled(golang(go.opencensus.io/trace/tracestate)) = 0.22.5 + +%description +Ignition is a utility used to manipulate systems during the initramfs. +This includes partitioning disks, formatting partitions, writing files +(regular files, systemd units, etc.), and configuring users. On first +boot, Ignition reads its configuration from a source of truth (remote +URL, network metadata service, hypervisor bridge, etc.) and applies +the configuration. + +############## validate subpackage ############## + +%package validate + +Summary: Validation tool for Ignition configs +License: ASL 2.0 + +Conflicts: ignition < 0.31.0-3 + +%description validate +Ignition is a utility used to manipulate systems during the initramfs. +This includes partitioning disks, formatting partitions, writing files +(regular files, systemd units, etc.), and configuring users. On first +boot, Ignition reads its configuration from a source of truth (remote +URL, network metadata service, hypervisor bridge, etc.) and applies +the configuration. + +This package contains a tool for validating Ignition configurations. + +############## validate-nonlinux subpackage ############## + +%if 0%{?fedora} +%package validate-nonlinux + +Summary: Validation tool for Ignition configs for macOS and Windows +License: ASL 2.0 +BuildArch: noarch + +Conflicts: ignition < 0.31.0-3 + +%description validate-nonlinux +This package contains macOS and Windows ignition-validate binaries built +through cross-compilation. Do not install it. It is only used for +building binaries to sign by Fedora release engineering and include on the +Ignition project's Github releases page. +%endif + +%prep +%if 0%{?fedora} +%goprep -k +%autopatch -p1 +%else +%forgeautosetup -p1 +%endif + +%build +export LDFLAGS="-X github.com/coreos/ignition/v2/internal/version.Raw=%{version} -X github.com/coreos/ignition/v2/internal/distro.selinuxRelabel=true " +%if 0%{?rhel} || 0%{?centos} +# Need uncompressed debug symbols for debuginfo extraction +LDFLAGS+=' -X github.com/coreos/ignition/v2/internal/distro.writeAuthorizedKeysFragment=false -compressdwarf=false ' +%endif +export GOFLAGS="-mod=vendor" + +echo "Building ignition..." +%gobuild -o ./ignition internal/main.go + +echo "Building ignition-validate..." +%gobuild -o ./ignition-validate validate/main.go + +%global gocrossbuild go build -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n')" -a -v -x + +%if 0%{?fedora} +echo "Building macOS ignition-validate..." +GOARCH=amd64 GOOS=darwin %gocrossbuild -o ./ignition-validate-x86_64-apple-darwin validate/main.go + +echo "Building Windows ignition-validate..." +GOARCH=amd64 GOOS=windows %gocrossbuild -o ./ignition-validate-x86_64-pc-windows-gnu.exe validate/main.go +%endif + +%install +# dracut modules +install -d -p %{buildroot}/%{dracutlibdir}/modules.d +cp -r dracut/* %{buildroot}/%{dracutlibdir}/modules.d/ + +# ignition +install -d -p %{buildroot}%{_bindir} +install -p -m 0755 ./ignition-validate %{buildroot}%{_bindir} + +%if 0%{?fedora} +install -d -p %{buildroot}%{_datadir}/ignition +install -p -m 0644 ./ignition-validate-x86_64-apple-darwin %{buildroot}%{_datadir}/ignition +install -p -m 0644 ./ignition-validate-x86_64-pc-windows-gnu.exe %{buildroot}%{_datadir}/ignition +%endif + +# The ignition binary is only for dracut, and is dangerous to run from +# the command line. Install directly into the dracut module dir. +install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition + +%if %{with check} +%check +# Exclude the blackbox tests +%gocheck -t tests +%endif + +%files +%license %{golicenses} +%doc %{godocs} +%{dracutlibdir}/modules.d/* + +%files validate +%doc README.md +%license %{golicenses} +%{_bindir}/ignition-validate + +%if 0%{?fedora} +%files validate-nonlinux +%license %{golicenses} +%dir %{_datadir}/ignition +%{_datadir}/ignition/ignition-validate-x86_64-apple-darwin +%{_datadir}/ignition/ignition-validate-x86_64-pc-windows-gnu.exe +%endif + +%changelog +* Thu Jan 20 2022 Benjamin Gilbert - 2.13.0-1 +- New release +- Fix LUKS volume reuse +- Avoid double patch application + +* Thu Sep 16 2021 Sohan Kunkerkar - 2.12.0-1 +- Suppress hardcoded library path warning +- Fix go-mods-to-bundled-provides script to parse correct rpm version +- Import specfile from Fedora + +* Mon Aug 09 2021 Mohan Boddu - 2.9.0-7 +- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags + Related: rhbz#1991688 + +* Tue Jun 22 2021 Mohan Boddu - 2.9.0-6 +- Rebuilt for RHEL 9 BETA for openssl 3.0 + Related: rhbz#1971065 + +* Fri Apr 16 2021 Mohan Boddu - 2.9.0-5 +- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + +* Fri Feb 05 2021 Benjamin Gilbert - 2.9.0-4 +- Drop Git commit hash from Release +- Correctly enable IMDS patch +- Switch to %%autosetup +- Set ExclusiveArch from %%go_arches +- Drop mention of networkd in package description + +* Tue Jan 26 2021 Fedora Release Engineering - 2.9.0-3.git1d56dc8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Tue Jan 12 2021 Sohan Kunkerkar - 2.9.0-2.git1d56dc8 +- Fix AWS probing by using the IMDS token URL to ensure that networking is up + +* Fri Jan 08 2021 Sohan Kunkerkar - 2.9.0-1.git1d56dc8 +- New release + +* Thu Dec 03 2020 Sohan Kunkerkar - 2.8.1-1.gitc733d23 +- New release + +* Wed Nov 25 2020 Sohan Kunkerkar - 2.8.0-1.gitdb4d30d +- New release + +* Wed Oct 14 2020 Stephen Lowrie - 2.7.0-1.git5be43fd +- New release + +* Wed Aug 12 2020 Benjamin Gilbert - 2.6.0-2.git947598e +- Fix sector size detection on s390x + +* Fri Aug 07 2020 Benjamin Gilbert - 2.6.0-1.git947598e +- New release + +* Fri Aug 07 2020 Jonathan Lebon - 2.5.0-3.git0d6f3e5 +- Backport conditional networking fix for OpenStack and CloudStack + https://github.com/coreos/ignition/pull/1057 + +* Tue Jul 28 2020 Fedora Release Engineering - 2.5.0-2.git0d6f3e5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Thu Jul 23 2020 Benjamin Gilbert - 2.5.0-1.git0d6f3e5 +- New release +- Ship support code from Ignition tarball instead of ignition-dracut + +* Thu Jul 16 2020 Benjamin Gilbert - 2.4.1-1.git5260a5b +- New release +- Bump ignition-dracut to fix warning in udev rule + +* Wed Jul 15 2020 Jonathan Lebon - 2.4.0-2.gitd18bf90 +- Backport root homedir relabeling fix + https://github.com/coreos/ignition/pull/1029 for + https://github.com/coreos/fedora-coreos-config/pull/426#issuecomment-658867731. + +* Mon Jul 13 2020 Benjamin Gilbert - 2.4.0-1.gitd18bf90 +- New release +- Bump ignition-dracut + +* Mon Jun 15 2020 Timothée Ravier - 2.3.0-3.gitee616d5 +- Update to latest ignition-dracut to fix coreos-gpt-setup unit + https://github.com/coreos/ignition-dracut/pull/191 + +* Mon Jun 01 2020 Jonathan Lebon - 2.3.0-2.gitee616d5 +- Update to latest ignition-dracut to fix error handling + https://github.com/coreos/ignition-dracut/pull/188 + +* Tue May 05 2020 Benjamin Gilbert - 2.3.0-1.gitee616d5 +- New release +- Bump ignition-dracut + +* Sun Apr 26 2020 Dusty Mabe - 2.2.1-5.git2d3ff58 +- Update to latest ignition-dracut for network fixes + https://github.com/coreos/ignition-dracut/pull/174 + +* Thu Apr 16 2020 Colin Walters - 2.2.1-4.git2d3ff58 +- Update to latest ignition-dracut for virtio dump + +* Mon Mar 30 2020 Benjamin Gilbert - 2.2.1-3.git2d3ff58 +- Bump ignition-dracut to fix umount stage network access + +* Sat Mar 28 2020 Benjamin Gilbert - 2.2.1-2.git2d3ff58 +- Fix userdata/metadata fetch on Packet + +* Tue Mar 24 2020 Benjamin Gilbert - 2.2.1-1.git2d3ff58 +- New release +- Bump ignition-dracut for initramfs network teardown + +* Sat Feb 01 2020 Benjamin Gilbert - 2.1.1-6.git40c0b57 +- Switch -validate-nonlinux to noarch; move files to /usr/share/ignition +- Improve -validate-nonlinux descriptive text + +* Fri Jan 31 2020 Jonathan Lebon - 2.1.1-5.git40c0b57 +- Bump ignition-dracut for ignition-diskful-subsequent target + https://github.com/coreos/ignition-dracut/pull/151 +- Kill grub dropin + https://github.com/coreos/ignition-dracut/pull/91 + +* Wed Jan 29 2020 Fedora Release Engineering - 2.1.1-4.git40c0b57 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Fri Dec 20 2019 Dusty Mabe - 2.1.1-3.git40c0b57 +- Backport upstream patch to workaround problem booting on live systems + - https://github.com/coreos/fedora-coreos-tracker/issues/339 + - https://github.com/coreos/ignition/pull/907 + +* Tue Dec 17 2019 Andrew Jeddeloh - 2.1.1-2.git40c0b57 +- Add ignition-validate-nonlinux subpackage. This should not be installed. It + is only used for building binaries to sign by Fedora release engineering and + include on the Ignition project's Github releases page. + +* Fri Dec 13 2019 Andrew Jeddeloh - 2.1.1-1.git40c0b57 +- New release 2.1.1 + +* Mon Dec 09 2019 Jonathan Lebon - 2.0.1-9.gita8f91fa +- Use the master branch of ignition-dracut, not spec2x + +* Fri Dec 06 2019 Jonathan Lebon - 2.0.1-8.gita8f91fa +- Bump Ignition for that sweet SELinux labeling: + https://github.com/coreos/ignition/pull/846 + +* Thu Dec 05 2019 Jonathan Lebon - 2.0.1-7.git641ec6a +- Don't require btrfs-progs, just recommend it + https://github.com/coreos/fedora-coreos-tracker/issues/323 + +* Wed Dec 04 2019 Allen Bai - 2.0.1-6.git641ec6a +- Update dracut to latest spec2x + * firstboot-complete: tell zipl to run + +* Thu Oct 31 2019 Colin Walters - 2.0.1-5.git641ec6a +- Update dracut + +* Wed Sep 25 2019 Colin Walters - 2.0.1-4.git641ec6a +- Bump to latest in prep for rootfs redeploy work + +* Sat Sep 21 2019 Peter Robinson 2.0.1-3.gite75cf24 +- Fix up arch dependencies for new golang specs + +* Fri Aug 16 2019 Colin Walters - 2.0.1-2.gite75cf24 +- Update dracut for gpt fixes + +* Thu Jul 25 2019 Andrew Jeddeloh - 2.0.1-1.gite75cf24 +- New release 2.0.1 + +* Thu Jul 25 2019 Fedora Release Engineering - 2.0.0-2.git0c1da80 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Mon Jun 10 2019 Andrew Jeddeloh - 2.0.0-1.git0c1da80 +- New release 2.0.0 + +* Fri May 03 2019 Jonathan Lebon - 2.0.0-beta.3.git910e6c6 +- Adapt distro.selinuxRelabel flag path for v2/ move + +* Fri May 03 2019 Jonathan Lebon - 2.0.0-beta.2.git910e6c6 +- Bump ignition-dracut dropping CoreOS integration files + +* Mon Apr 29 2019 Andrew Jeddeloh - 2.0.0-beta.1.git910e6c6 +- New release 2.0.0-beta + +* Mon Apr 08 2019 Jonathan Lebon - 2.0.0-alpha.3.git906cf04 +- ignition-dracut: update to latest + * dracut/30ignition: link to RHBZ in ignition-complete + * dracut/30ignition: add OnFailure= for ExecStop= services + * dracut/30ignition: order ExecStop= units before initrd-switch-root.target + * dracut/30ignition: re-order directives in remount-sysroot + * dracut/30ignition: add missing Before= for mount unit + * dracut/30ignition: order ignition-complete.target before initrd.target + * module_setup: include cdrom rules for openstack + +* Wed Mar 27 2019 Benjamin Gilbert - 2.0.0-alpha.2.git906cf04 +- Backport fix for SELinux relabeling of systemd units +- Drop obsolete override of chroot path + +* Wed Mar 27 2019 Jonathan Lebon - 2.0.0-alpha.1.git906cf04 +- New release 2.0.0-alpha +- ignition-dracut: Go back to master branch + +* Fri Mar 22 2019 Dusty Mabe - 0.31.0-7.gitf59a653 +- ignition-dracut: Pull in latest from spec2x branch + * grub: support overriding network kcmdline args +- ignition: pull in subuid/subgid files patch from spec2x branch + * stages/files: Also relabel subuid/subgid files + +* Wed Mar 20 2019 Michael Nguyen - 0.31.0-6.gitf59a653 +- Backport patch for supporting guestinfo.ignition.config.data + +* Mon Mar 18 2019 Dusty Mabe - 0.31.0-5.gitf59a653 +- Use the spec2x branch of ignition-dracut upstream +- * Since ignition-dracut master has moved to supporting ignition + spec 3.x we are applying 2.x related fixes to the spec2x + branch in the ignition-dracut repo. + * Summary of backports: https://github.com/coreos/ignition-dracut/pull/58 + +* Mon Mar 18 2019 Benjamin Gilbert - 0.31.0-4.gitf59a653 +- Move dracut modules into main ignition package +- Move ignition binary out of the PATH +- Move ignition-validate into a subpackage +- Include ignition-dracut license file +- Drop developer docs from base package + +* Mon Mar 18 2019 Colin Walters - 0.31.0-3.gitf59a653 +- Backport patch for networking + +* Mon Mar 04 2019 Dusty Mabe - 0.31.0-2.gitf59a653 +- ignition-dracut: backport patch for finding ignition.firstboot file on UEFI systems + https://github.com/coreos/ignition-dracut/pull/52 + +* Wed Feb 20 2019 Andrew Jeddeloh - 0.31.0-1.gitf59a653 +- New release 0.31.0 + +* Fri Feb 15 2019 Dusty Mabe - 0.30.0-4.git308d7a0 +- Bump to ignition-dracut 2c69925 +- * support platform configs and user configs in /boot + ^ https://github.com/coreos/ignition-dracut/pull/43 + * Add ability to parse config.ign file on boot + ^ https://github.com/coreos/ignition-dracut/pull/42 + +* Fri Feb 01 2019 Fedora Release Engineering - 0.30.0-3.git308d7a0 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Mon Jan 28 2019 Dusty Mabe - 0.30.0-2.git308d7a0 +- Bump to ignition-dracut fa7131b +- * 7579b92 journal: add clarifying comment for context + * a6551f1 Remount /sysroot rw (#38) + * ignition-firstboot-complete.service: Remount /boot rw + +* Sat Dec 15 2018 Benjamin Gilbert - 0.30.0-1.git308d7a0 +- New release 0.30.0 + +* Fri Dec 14 2018 Michael Nguyen - 0.29.1-3.gitb1ab0b2 +- define gopath for RHEL7 + +* Tue Dec 11 2018 Dusty Mabe - 0.29.1-2.gitb1ab0b2 +- require golang >= 1.10 and specify architecture list for RHEL7 + +* Tue Dec 11 2018 Andrew Jeddeloh - 0.29.1-1.gitb1ab0b2 +- New release 0.29.1 + +* Wed Nov 21 2018 Igor Gnatenko - 0.28.0-12.gitf707912 +- Rebuild for protobuf 3.6 in rawhide (f30) + +* Tue Nov 20 2018 Jonathan Lebon - 0.28.0-11.git7b83454 +- Bump to ignition-dracut 7b83454 + +* Thu Oct 25 2018 Dusty Mabe - 0.28.0-10.gitf707912 +- Bump to ignition-dracut decf63f +- * 03d8438 30ignition: only instmods if module available + +* Thu Oct 25 2018 Dusty Mabe - 0.28.0-9.gitf707912 +- Bump to ignition-dracut 7ee64ca +- * 3ec0b39 remove ignition-remount-sysroot.service files + * 66335f2 ignition: run files stage at original CL ordering + * 0301a03 ignition-disks.service: drop Requires=network.target + * a0bc135 ignition-ask-var-mount.service: use RemainAfterExit=yes + * ecf5779 module-setup.sh: explicitly install qemu_fw_cfg + +* Mon Oct 15 2018 Dusty Mabe - 0.28.0-8.gitf707912 +- Bump to ignition-dracut 4bdfb34 +- * 6d0763a module-setup: Make mkfs.btrfs optional + +* Wed Oct 10 2018 Jonathan Lebon - 0.28.0-7.gitf707912 +- Backport patch for handling sysctl files correctly + https://github.com/coreos/coreos-assembler/pull/128 + https://github.com/openshift/machine-config-operator/pull/123 + +* Wed Sep 26 2018 Dusty Mabe - 0.28.0-6.gitf707912 +- Bump to ignition-dracut c09ce6f +- * ce9f648 30ignition: add support for ignition-disks + +* Mon Sep 24 2018 Dusty Mabe - 0.28.0-5.gitf707912 +- Remove requires for btrfs on !fedora +- Bump to ignition-dracut 8c85eb3 +- * 26f2396 journal: Don't log to console AND kmsg + +* Mon Sep 17 2018 Jonathan Lebon - 0.28.0-4.gitf707912 +- Backport patch for relabeling /var/home on FCOS + https://github.com/coreos/fedora-coreos-config/issues/2 + +* Thu Sep 06 2018 Luca Bruno - 0.28.0-3.gitf707912 +- Add requires for disks stage + +* Thu Aug 30 2018 Dusty Mabe - 0.28.0-2.gitf707912 +- Bump to ignition-dracut d056287 +- * 3f41219 dracut/ignition: remove CL-legacy udev references +- * 92ef9dd coreos-firstboot-complete: RemainAfterExit=yes + +* Thu Aug 30 2018 Andrew Jeddeloh - 0.28.0-1.gitf707912 +- New release 0.28.0 + +* Fri Aug 17 2018 Dusty Mabe - 0.27.0-3.gitcc7ebe0 +- Bump to ignition-dracut 56aa514 + +* Wed Aug 15 2018 Jonathan Lebon - 0.27.0-2.gitcc7ebe0 +- Backport patch for /root relabeling + https://github.com/coreos/ignition/pull/613 + +* Fri Aug 10 2018 Jonathan Lebon - 0.27.0-1.gitcc7ebe0 +- New release 0.27.0 + +* Sat Jul 21 2018 Dusty Mabe - 0.26.0-0.6.git7610725 +- Bump to ignition-dracut d664657 + +* Fri Jul 13 2018 Fedora Release Engineering - 0.26.0-0.5.git7610725 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Fri Jun 29 2018 Dusty Mabe - 0.26.0-0.4.git7610725 +- Fix building on el7 (install -D not working) + +* Fri Jun 29 2018 Dusty Mabe - 0.26.0-0.3.git7610725 +- Bump to ignition-dracut 17a201b + +* Tue Jun 26 2018 Dusty Mabe - 0.26.0-0.2.git7610725 +- Rename dustymabe/bootengine upstrem to dustymabe/ignition-dracut + +* Thu Jun 21 2018 Dusty Mabe - 0.26.0-0.1.git7610725 +- First package for Fedora