-
Notifications
You must be signed in to change notification settings - Fork 6
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
6b86e9d
commit 8fa0746
Showing
3 changed files
with
453 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,334 @@ | ||
| - commits: | ||
| - subject: Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 | ||
| hash: 7888d6b09b4a537cb72c7cd9ef5618629e0d666f | ||
| body: Update layers/meta-balena | ||
| footer: | ||
| Changelog-entry: Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 | ||
| changelog-entry: Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 | ||
| author: Self-hosted Renovate Bot | ||
| nested: | ||
| - commits: | ||
| - subject: Update tests/leviathan digest to 7c94243 | ||
| hash: fe9fcfac3f90fd78c8e704a268a16d9b93527a0f | ||
| body: Update tests/leviathan | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: | ||
| - commits: | ||
| - subject: Update balena-os/leviathan-worker to v2.9.28 | ||
| hash: 756cd0253d0e061e7fa7eaba8d64e9356558dde7 | ||
| body: | | ||
| Update balena-os/leviathan-worker from 2.9.27 to 2.9.28 | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.41 | ||
| title: "" | ||
| date: 2024-01-26T15:03:05.906Z | ||
| version: meta-balena-5.1.16 | ||
| title: "" | ||
| date: 2024-01-27T02:56:42.770Z | ||
| - commits: | ||
| - subject: "networkmanager: make FORWARD rules for shared interfaces last in | ||
| chain" | ||
| hash: 089f4d639383a4981d4840f9e22cccc97270b339 | ||
| body: > | ||
| At this moment there is a race condition between NetworkManager | ||
|
|
||
| and the engine when a shared interface is configured. If the interface | ||
|
|
||
| is configured first and the engine second, the containers are allowed | ||
|
|
||
| to access DHCP hosts behind the shared interface. If the engine comes | ||
|
|
||
| up first and the shared interface second, access will be denied. | ||
|
|
||
|
|
||
| This patch adds a dispatcher script that always configures the firewall | ||
|
|
||
| rules as if the engine came up last. This does not really address | ||
|
|
||
| the underlying issue but it overcomes the race condition and makes | ||
|
|
||
| the behavior deterministic, which is good enough at this point. | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Michal Toman <[email protected]> | ||
| signed-off-by: Michal Toman <[email protected]> | ||
| author: Michal Toman | ||
| nested: [] | ||
| version: meta-balena-5.1.15 | ||
| title: "" | ||
| date: 2024-01-26T20:11:41.626Z | ||
| - commits: | ||
| - subject: Update tests/leviathan digest to e618772 | ||
| hash: 134b8f2e7f8f75c67e4aa49feb8d0d38c0e5121b | ||
| body: Update tests/leviathan | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: | ||
| - commits: | ||
| - subject: Update Lock file maintenance | ||
| hash: 601c03a87a8073ffa13e1abcdf51bb403f571f66 | ||
| body: | | ||
| Update | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.40 | ||
| title: "" | ||
| date: 2024-01-23T19:29:48.498Z | ||
| - commits: | ||
| - subject: Update actions/upload-artifact digest to 26f96df | ||
| hash: f9f08bf7810406b4fb16a3b1ac2345ad205d3c83 | ||
| body: | | ||
| Update actions/upload-artifact | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.39 | ||
| title: "" | ||
| date: 2024-01-23T18:31:12.292Z | ||
| version: meta-balena-5.1.14 | ||
| title: "" | ||
| date: 2024-01-24T00:07:16.859Z | ||
| - commits: | ||
| - subject: Start extract-balena-ca before os-config update | ||
| hash: 1b43e70a712145abe11c6fe6332d29b4dde50c49 | ||
| body: | | ||
| For os-config to use the OS wide ca certificate | ||
| instead of an existing balenaRootCA in the | ||
| config.json | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: jaomaloy | ||
| nested: [] | ||
| version: meta-balena-5.1.13 | ||
| title: "" | ||
| date: 2024-01-23T10:52:48.191Z | ||
| - commits: | ||
| - subject: Update tests/leviathan digest to 6be4049 | ||
| hash: 889c23e5e8134f4e456681fc8a2bacc6d126271c | ||
| body: Update tests/leviathan | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: | ||
| - commits: | ||
| - subject: Update actions/upload-artifact digest to 694cdab | ||
| hash: e8ac025c685a10b02c074d34f6321bfa9a85715e | ||
| body: | | ||
| Update actions/upload-artifact | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.38 | ||
| title: "" | ||
| date: 2024-01-18T22:30:12.106Z | ||
| - commits: | ||
| - subject: Update actions/upload-artifact digest to 1eb3cb2 | ||
| hash: fdc77c10964cd4ad712773ce9c67ded83e5dbd58 | ||
| body: | | ||
| Update actions/upload-artifact | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.37 | ||
| title: "" | ||
| date: 2024-01-15T01:57:42.562Z | ||
| - commits: | ||
| - subject: Update Lock file maintenance | ||
| hash: 526e3b151506e979ad587f31c07aa5734609a796 | ||
| body: | | ||
| Update | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.36 | ||
| title: "" | ||
| date: 2024-01-15T00:50:36.593Z | ||
| version: meta-balena-5.1.12 | ||
| title: "" | ||
| date: 2024-01-19T03:26:08.587Z | ||
| - commits: | ||
| - subject: "kernel-balena: Only sign initramfs for EFI machines" | ||
| hash: 5e56bc8cace0b71bcbf8e216dfe2a194144ba783 | ||
| body: > | ||
| UEFI firmware in secure boot needs to authenticate the kernel | ||
| plus | ||
|
|
||
| initramfs in the chain of trust. Other firmware implements secure boot | ||
|
|
||
| differently and does not need this. | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "balena-image: Add TPM tools conditionally on tpm machine feature" | ||
| hash: 28ec059dd898de5c61ab314475f620d8c979e0d4 | ||
| body: "" | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "initrdscripts: Add TPM/EFI tools conditionally on tpm machine feature" | ||
| hash: 090e79747eb1344d056cfd406d672c194dcb3bbb | ||
| body: "" | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "os-helpers: rename os-helpers-secureboot to os-helpers-efi" | ||
| hash: 3f03b92c533e7c77f72128a6c5b0f345ceaf53eb | ||
| body: > | ||
| Secure boot is device specific, this helper contains EFI | ||
| specific | ||
|
|
||
| helper functions. | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "image-balena: extract hup boot partition checks into a function" | ||
| hash: 4caceb149848091203c1328c843cc7ce4ad4cccb | ||
| body: "" | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "balena-keys: Distinguish EFI devices" | ||
| hash: dc78e4ff39bbebf11706e52c77895b6403f0730c | ||
| body: | | ||
| Non EFI devices do not need the UEFI secure boot keys. | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "balena-image-flasher: only add grub configuration for EFI devices" | ||
| hash: 0c0966bc40a632945f22a2fb04c505ff42fd44e2 | ||
| body: "" | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| - subject: "balena-image: only add grub configuration for EFI machines" | ||
| hash: 25be7ade2fbb272101047629f8f9d0378b370cc3 | ||
| body: > | ||
| Only EFI systems need grub configuration added to the boot | ||
| partition - | ||
|
|
||
| other device types that also use the signing API do not. | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alex Gonzalez <[email protected]> | ||
| signed-off-by: Alex Gonzalez <[email protected]> | ||
| author: Alex Gonzalez | ||
| nested: [] | ||
| version: meta-balena-5.1.11 | ||
| title: "" | ||
| date: 2024-01-18T19:25:25.796Z | ||
| - commits: | ||
| - subject: "tests/bluetooth: Leave Autokit host discoverable on BT for a longer | ||
| period of time" | ||
| hash: a4f57877b7582b0e36672269471c178a7511d18f | ||
| body: > | ||
| We've noticed that leaving the host discoverable indefinitely on | ||
| Pi3 Autokit hosts solves sporadic scan failures. Thus, leaving | ||
| the host discoverable for 20 minutes should be sufficient to | ||
| prevent these cases. | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Alexandru Costache <[email protected]> | ||
| signed-off-by: Alexandru Costache <[email protected]> | ||
| author: Alexandru Costache | ||
| nested: [] | ||
| version: meta-balena-5.1.10 | ||
| title: "" | ||
| date: 2024-01-12T15:29:12.742Z | ||
| - commits: | ||
| - subject: Update tests/leviathan digest to 0210c02 | ||
| hash: 50e34dfc6013518a459c1be749804fbf837803d9 | ||
| body: Update tests/leviathan | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: | ||
| - commits: | ||
| - subject: change to ssh tunnel | ||
| hash: c15d5183a61e4ed9d437642560c2db071b1d7672 | ||
| body: "" | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| Signed-off-by: Ryan Cooke <[email protected]> | ||
| signed-off-by: Ryan Cooke <[email protected]> | ||
| author: rcooke-warwick | ||
| nested: [] | ||
| version: leviathan-2.29.35 | ||
| title: "" | ||
| date: 2024-01-11T12:51:52.503Z | ||
| - commits: | ||
| - subject: Update core/contracts digest to 14a10d9 | ||
| hash: bd5f29abd2bbe194df6f7657b69b860f435b1ef7 | ||
| body: | | ||
| Update core/contracts | ||
| footer: | ||
| Change-type: patch | ||
| change-type: patch | ||
| author: Self-hosted Renovate Bot | ||
| nested: [] | ||
| version: leviathan-2.29.34 | ||
| title: "" | ||
| date: 2024-01-10T11:32:06.062Z | ||
| version: meta-balena-5.1.9 | ||
| title: "" | ||
| date: 2024-01-11T18:57:27.371Z | ||
| version: 5.1.16 | ||
| title: "" | ||
| date: 2024-01-27T06:28:32.375Z | ||
| - commits: | ||
| - subject: "linux-tegra: Enable binder config for Jetson Orin Nano" | ||
| hash: d9b9c250e484d354fd80da11764831dab55a1f1d | ||
|
|
||
Oops, something went wrong.