Skip to content
Release 2022.3

A big patch landed to update our baseline GLib requirement to 2.66
(in preparation for a libsoup update, which is also coming).  Thanks
so much to Daniel Kolesa!

Various test suite improvements and documentation improvements;
we now publish man pages!  Thanks Dan Nicholson.

How to use Linux IMA with ostree is now documented - this
I think is a key point in helping "bridge" between the original
goal of ostree being a "flexible" Linux system with the stronger
security guarantees of other systems that use e.g. dm-verity.
More to come here!

A few static analyzer fixes (nothing critical).  Some improvements
to the test suite.

As far as bugfixes, there's a notable one to the `OstreeRepoAutoTransaction`
refcounting that showed up in valgrind.

And last but not least, we *finally* closed a longstanding conflict
between ostree and per-machine SELinux policy customizations; ostree
learned how to use bubblewrap to create a container targeting
the pending deployment to re-build the policy if necessary.

Thanks so much to all contributors!

```
Colin Walters (17):
      configure: post-release version bump
      tmpfiles: Create `/run/ostree`
      tests: Stop using inventory crate
      Update to nix 0.23
      Update to ostree-ext 0.6
      Update to rand 0.8
      ci: Disable Ubuntu LTS
      ci: Update docs workflow to use fcos-buildroot
      Update to sh-inline 0.2
      deploy: Be a bit more verbose about SELinux bits
      libarchive: Handle `archive_entry_symlink()` returning NULL
      fetcher/curl: Consistently check return value `curl_easy_setopt`
      ci: Mask zincati for synthetic update
      docs: Add new IMA document
      Update docs/ima.md
      Add an `ostree-boot-complete.service` to propagate staging failures
      Release 2022.3

Damiano Donati (1):
      README.md: update ostree-rs language binding link

Dan Nicholson (5):
      man: Remove unnecessary nbsp's from ostree man page
      man: Allow building HTML man pages
      man: Use custom XSL stylesheet for HTML output
      man: Create an HTML index
      docs: Publish man pages

Daniel Kolesa (1):
      glib: bump glib requirement to 2.66 and port to GUri

Jan Tojnar (1):
      tests/test-cli-extensions: Fix with single-binary coreutils

Joe Talbott (1):
      Add Fedora Kinoite link to index.md also.

Luca BRUNO (2):
      apidoc: add missing page includes
      tests: move fixture to fix installed tests

Ondrej Mosnacek (1):
      deploy: Try to rebuild policy in new deployment if needed

Philip Withnall (1):
      ostree-repo-pull: Take correct out path on error

Simon McVittie (5):
      s390x-se-luks-gencpio: Fix shebang syntax
      s390x-se-luks-gencpio: Use interoperable path for bash
      test-prune: Read to the end of cut(1) output
      repo: Factor out _ostree_repo_auto_transaction_new()
      repo: Correctly initialize refcount of temporary transaction
```

Git-EVTag-v0-SHA512: 1e1ef032836c9b65dcd4de8140e4b742e73b87432c7ffa47cc7cc47e95a74680ff03f872295f8e4af316869ceabcfb74a65ec447bf005998ad1a2220fc5bbfbb