# changelog

author: Lokesh Mandvekar <lsm5@redhat.com> - 1.11.3-1
changelog:
  - bump to v1.11.3
  - golang+openssl support in containers/image (v4.0.1)
  - debuginfo disabled (some weird build-id issue)


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - rebase to 1.11.6
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - Resolves: #1772179


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-3
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804218


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7.rhaos4.4
changelog:
  - fix "CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process"


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821204


author: Jindrich Novy <jnovy@redhat.com> - 2:2.131.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.131.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.132.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.132.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.132.0-1.rhaos4.4
changelog:
  - initial build for RHAOS-4.4
  - sync with Fedora and install selinux contexts file into /usr/share/containers/selinux/contexts
    (thanks to Dan Walsh)
  - do not print error in RPM transaction log when customizable_types file is missing


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-1.rhaos4.4
changelog:
  - initial build for rhaos4.4
  - update to https://github.com/containernetworking/plugins/releases/tag/v0.8.6
  - Related: #1840465


author: Allen Bai <abai@redhat.com> - 0-2.gite5aa5dc
changelog:
  - Rebuild since previous build failed to get tagged
  - RCM ticket: https://projects.engineering.redhat.com/browse/RCM-73239


author: Lukas Nykryn <lnykryn@redhat.com> - 049-60.git20191129
changelog:
  - 99squash: Only start the cleaner on switch-root
  - net-lib: check if addr exists before checking for dad state
  - always include sg module


author: Lukas Nykryn <lnykryn@redhat.com> - 049-63.git20200114
changelog:
  - network-legacy/ifup: fix typo when calling dhclient --timeout
  - network-legacy/ifup: dhclient should be started in oneshot mode
  - modules/network-manager: Install `ip`


author: Lukas Nykryn <lnykryn@redhat.com> - 049-68.git20200211
changelog:
  - Revert "wait for IPv6 RA if using none/static IPv6 assignment"
  - dhclient-script: ipv6 uses different variables for nameservers
  - 40network: bump rd.net.timeout.carrier to 10 seconds


author: Tom Callaway <spot@fedoraproject.org> - 2.6.1-4
changelog:
  - add configure option to disable generic dynamic tls model
  - disable generic dynamic tls model on s390x and aarch64


author: Jonathan Lebon <jlebon@redhat.com> - 0.33.0-12.rhaos4.3.git3625532
changelog:
  - Update to latest spec2x for:
    https://github.com/coreos/ignition-dracut/pull/135#event-2779552254


author: Ben Howard <ben.howard@redhat.com> - 0.34.0-0-rhaos4.4.git92f874c
changelog:
  - ignition: align to spec2x commit 92f874c194d75ea32a4e63e531db3be4689b4850
      * Release of 0.34.0
      * Bug Fixes:
        - Fix bug where AWS region is not set correctly for fetches from s3
        - Fix bug where empty GPT labels were treated as errors
      * Changes:
        - Ignition now logs the name of the stage it is running
      * Features:
        - Add optional "fetch" stage to cache the rendered config, but not apply
          any of it
        - Add support for aliyun cloud


author: Yu Qi Zhang <jerzhang@redhat.com> - 0.35.0-rhaos.4.4.git7afbeba
changelog:
  - Release of 0.35.0 based on upstream v0.35.0 tag
      * Mark the 2.4.0 config spec as stable
      * No longer accept configs with version 2.4.0-experimental
      * Create new 2.5.0-experimental config spec from 2.4.0
      * Allow specifying HTTP headers when fetching remote resources
  - ignition-dracut: align to spec2x commit d5d5663bf7676d070bfd0c3b6f9f78c0a49b68e4
      * Move to ip=dhcp,dhcp6
      * Down bonded interfaces properly


author: Ben Howard <ben.howard@redhat.com> - 0.35.2-rhaos.4.4.git7afbeba
changelog:
  - Release 0.35.2: update dracut to 7cfc5f9e1692036a688f4693d157d6600dc49bc8
      * Preserve the hostname set from ip=<ARGS> kernel commandline
      * Backport of 'ignition-diskful.target'


author: Prashanth Sundararaman <psundara@redhat.com> - 0.35.0-5-rhaos4.4.git7afbeba
changelog:
  * Patch ignition with commit e49283b90e7724e2e6314d5a368b31d61fc3f904 for ppc64le/s390x qemu support


author: Phil Sutter <psutter@redhat.com> - 1.8.4-3
changelog:
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: OSP Prod Chain <dev-null@redhat.com> 1:13.0.1-1
changelog:
  - Update patches
  - Merge "Do not ignore 'fields' query parameter when building next url" into stable/train
  - Do not ignore 'fields' query parameter when building next url


author: Bob Fournier <bfournie@redhat.com> 1:13.0.3-0.20191202201523.cfa58af
changelog:
  - Implement managed in-band inspection boot for redfish-virtual-media (rhbz#1779288)
  - redfish-vmedia: correctly pass ipa-debug (rhbz#1779288)
  - Wire in in-band inspection for PXE boot and neutron-based networking (rhbz#1779288)
  - Foundation for boot/network management for in-band inspection (rhbz#1779288)
  - Backward compatibility for the ramdisk_params change (rhbz#1779288)
  - Correct handling of ramdisk_params in (i)PXE boot (rhbz#1779288)


author: OSP Prod Chain <dev-null@redhat.com> 1:13.0.2-1
changelog:
  - Implement managed in-band inspection boot for redfish-virtual-media (rhbz#1779288)
  - Wire in in-band inspection for PXE boot and neutron-based networking (rhbz#1779288)
  - Fix use of urlparse.urljoin


author: OSP Prod Chain <dev-null@redhat.com> 9.2.0-1
changelog:
  - Update patches
  - Merge "Do not update/delete ports upon inspection of active nodes" into stable/train
  - Do not update/delete ports upon inspection of active nodes
  - Get details when listing ports upon inspection of active nodes


author: OSP Prod Chain <dev-null@redhat.com> 5.0.0-1
changelog:
  - Update patches
  - Merge "Skip nic numa_node discovery if it's not assigned to a numa_node" into stable/train
  - Set rd.md.uuid kernel parameter when deploying on software raid
  - Skip nic numa_node discovery if it's not assigned to a numa_node


author: OSP Prod Chain <dev-null@redhat.com> 5.0.0-1
changelog:
  - Update patches
  - Merge "Avoid grub2-install when on UEFI boot mode" into stable/train
  - Merge "Search for efi partition" into stable/train
  - Merge "Don't try to put a bootloader in place when bootable" into stable/train
  - Avoid grub2-install when on UEFI boot mode
  - Search for efi partition
  - Don't try to put a bootloader in place when bootable


author: Sinny Kumari <ksinny@gmail.com> - 2019.1-3
changelog:
  - Backport patch to fix bare → bare imports
  - Backport patch to Set xattr on correct fd for bare-user → bare-user imports


author: Steve Milner <smilner@redhat.com> - 0.0.2-0.1
changelog:
  - Makefile: Add changelog target
  - cmd/root: Print pivoting msg before pull
  - cmd/root: Only support the latest labels
  - Support com.coreos.ostree-commit too
  - cmd/root: Make OSTree version we pivot to more prominent
  - cmd/root: Don't rely on refs, use checksum from label
  - cmd: only create, don't run the container
  - cmd: add --unchanged-exit-77
  - cmd: fix capitalization
  - Namespace move from ashcrow to openshift
  - README.md: update with more information
  - cmd: drop networking in the container
  - gofmt: Update formatting
  - cmd: ask rpm-ostree for state instead of marker file
  - cmd: implement full idempotency
  - types: use permalink to skopeo spec
  - utils: use glog.Infof for consistency
  - cmd: add the default cmdline flags
  - cmd: drop --touch-if-changed
  - Use pivot:// prefix for rpm-ostree custom URL
  - Pass custom origin information to rpm-ostree
  - Canonicalize to name@digest
  - Merge pull request #10 from ashcrow/misc-enhancements
  - utils: Add basic unittests
  - main.go: Generate header from build info
  - .travis.yml: Switch to 1.1[0,1].x golang versions
  - .gitignore: Ignore .vscode


author: Steve Milner <smilner@redhat.com> - 0.0.4-1
changelog:
  - Add basic kernel tuning functionality
  - Fix previous release bump
  - Don't pivot if identical sha256
  - vendor: Add github.com/containers/image/docker/reference
  - travis: Run tests
  - tests: Make TestRunExt predictable and fast
  - root: Fix missing format specifier
  - Use kubelet auth if available
  - README.md: Add some more concrete details on how it works
  - service: Use Type=oneshot
  - README.md: Add some more links for testing pivot
  - README.md: Fix reboot-needed path
  - tests: Set GOCACHE=off


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-3
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804210


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-7.rhaos4.4
changelog:
  - fix "Podman can't reuse a container name, even if the container that was using it is no longer around"
  - Resolves: #1807439


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-8.rhaos4.4
changelog:
  - fix "[FJ8.2 Bug]: [REG]The "--group-add" option of "podman create" doesn't function."
  - Resolves: #1808704


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-12.rhaos4.4
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817792


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.5.0-5
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.19-4
changelog:
  - Python 2 binary package renamed to python2-netaddr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: OSP Prod Chain <dev-null@redhat.com> 0.36.1-1
changelog:
  - Update patches
  - Keep connection backrefs with weakref.proxy
  - baremetal node: 'error' is a failed state
  - Fix server for later microversion
  - Use has_service in functional test's require_service
  - Update TOX/UPPER_CONSTRAINTS_FILE for stable/train
  - Update .gitreview for stable/train


author: Bob Fournier <bfournie@redhat.com> 0.36.1-0.20200225114654.50c9898
changelog:
  - baremetal-introspection: add manage_boot argument to start_introspection (rhbz#1810101)
  - Merge "Fix error handling on add/remove router iface calls" into stable/train
  - Merge "Handle HTTP errors in add/remove router interface calls" into stable/train
  - Fix error handling in network trunks operations
  - Fix error handling on add/remove router iface calls
  - Handle HTTP errors in add/remove router interface calls


author: OSP Prod Chain <dev-null@redhat.com> 2.0.1-1
changelog:
  - Update patches
  - SSC.disks_sizes_bytes handle CapacityBytes is None
  - Update TOX/UPPER_CONSTRAINTS_FILE for stable/train
  - Update .gitreview for stable/train


author: Bob Fournier <bfournie@redhat.com> 2.0.1-0.20200211145512.2f961fc
changelog:
  - Fix 'None' field value processing (rhbz#1802721)
  - Relax required Redfish fields handling (rhbz#1802721)
  - Handle incomplete messages in MessageRegistry (rhbz#1802721)


author: Micah Abbott <miabbott@redhat.com> - 0.0.7-1.rhaos4.4.el8
changelog:
  - New upstream release 0.0.7
      - Fixes problem with consecutive execution of toolbox container (RHBZ#1803112)


