[ubuntu/lunar-proposed] cryptsetup 2:2.5.0-6ubuntu1 (Accepted)

Steve Langasek steve.langasek at ubuntu.com
Mon Nov 7 16:41:17 UTC 2022


cryptsetup (2:2.5.0-6ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/control:
      + Recommend plymouth.
      + Depend on busybox-initramfs instead of busybox | busybox-static.
      + Move cryptsetup-initramfs back to cryptsetup's Recommends.
      + Do not build cryptsetup-suspend binary package on i386.
    - Fix cryptroot-unlock for busybox compatibility.
    - Fix warning and error when running on ZFS on root
      - d/functions: Return an empty devno for ZFS devices as they don't have
        major:minor device numbers.
      - d/initramfs/hooks/cryptroot: Ignore and don't print an error message
        when devices don't have a devno.
    - debian/patches/decrease_memlock_ulimit.patch
      Fixed FTBFS due to a restricted build environment
    - Disable failing Debian-tailored cryptroot-* autopkgtests

cryptsetup (2:2.5.0-6) unstable; urgency=medium

  * d/t/cryptroot-*: Mask systemd-firstboot.service.
  * d/t/cryptroot-*: Use camel case for apt.conf(5) settings.
  * d/t/cryptroot-*: _apt(): Sort apt.conf(5) settings.
  * d/t/cryptroot-*: Honor apt_preferences(5) settings under autopkgtest.
  * d/t/cryptroot-*: init: bind mount temporary filesystems to fix
    autopkgtests with systemd 252. (Closes: #1022970)

cryptsetup (2:2.5.0-5) unstable; urgency=medium

  * d/t/cryptroot-*: Bump setup timeout to 3600s so autopkgtests don't fail on
    debci runners lacking KVM support.

cryptsetup (2:2.5.0-4) unstable; urgency=medium

  * suspend.conf: Improve description and typofix.
  * d/t/cryptroot-*: Fix race condition between creating new partition and
    using them.
  * d/t/cryptroot-*: Fail the test after a reasonable timeout.
    (Closes: #1020714)
  * d/t/cryptroot-*: setup_apt(): Add 'Identifier: Packages' to `apt-get
    indextargets` filter.
  * cryptsetup-suspend-wrapper: Explicitly disable udev support when resuming.
    (Closes: #1020553)
  * d/t/cryptroot-*: Pin versions for all packages in PKGS_EXTRA that are part
    of src:cryptsetup.

cryptsetup (2:2.5.0-3) unstable; urgency=low

  * d/t/cryptroot-*: Disable VGA card on the guest.
  * d/t/cryptroot-*: Communicate with guests on /dev/hvc0 and remove
    console=hvc0 from the kernel command line to get a noise-free channel.
  * d/t/cryptroot-*: poweroff(): Use poweroff(8) not `echo o
    >/proc/sysrq-trigger`.
  * d/t/cryptroot-*: hibernate(): Use systemctl(1) not `echo disk
    >/sys/power/state`.
  * d/t/cryptroot-*: Use a separate logfile for each communication channel.
  * Refactor d/t/utils/mock.pm and add QMP support; this adds 'Depends:
    libjson-perl' to cryptroot-* autopkgtests.
  * d/t/cryptroot-*: Use the QMP "quit" command to destroy guests early.
  * d/t/cryptroot-*: Start getty on /dev/hvc0 only (not /dev/ttyS0) in
    non-interactive mode.
  * d/t/cryptroot-*: Remove console=tty0 from the kernel command line.
  * d/t/cryptroot-*: Mask all timer units to avoid cluttering test
    environments with background jobs.
  * d/t/cryptroot-lvm: Also test cryptsetup-suspend (enter to and resume from
    S3 state).
  * d/t/cryptroot-*: Simplify login prompt regex.
  * d/t/cryptroot-*: Use $' when consuming input buffers.
  * Salsa CI: Include recipes/debian.yml.
  * Salsa CI: Remove redundant variable RELEASE=unstable.
  * Salsa CI: Re-enable autopkgtest job with partial coverage.
  * cryptsetup-suspend-wrapper: Improve quoting.
  * cryptsetup-suspend-wrapper: Use crypttab_find_entry()'s return status.
  * d/copyright: Improve wording.
  * d/copyright: Fix license for d/scripts/suspend/cryptsetup-suspend.c .
  * Add license headers for d/scripts/suspend/*.
  * Relicense own code from GPLv2+ to GPLv3+.
  * cryptsetup-suspend-wrapper: Don't bindmount temporary filesystems.
  * cryptsetup-suspend-wrapper: Improve $INITRAMFS_DIR detection and cleanup.
  * cryptsetup-suspend-wrapper: Improve TODO comment.
  * d/t/cryptroot-*: Add a network device in interactive mode.
  * d/t/cryptroot-lvm: Test I/O on the root FS after wakeup to make sure the
    device is not suspended.
  * cryptsetup-suspend-wrapper: Harden chroot environment: mount ramfs
    read-only and with the 'nodev' option, make it unbindable, and use a
    restrictive root mode.
  * initramfs hook: Remove duplicate unmangling.
  * initramfs hook: populate_CRYPTO_HASHES(): Add missing call to
    crypttab_parse_options().
  * d/functions: crypttab_parse_options(): Always reset $CRYPTTAB_TYPE.
  * cryptsetup-suspend-wrapper: Ignore $KEEP_INITRAMFS if a newer initrd is
    detected.
  * d/functions: resume_device(): Fix resuming by keyscript.
  * d/functions: Refactor resume_device() and freeze_cgroups().
  * cryptsetup-suspend-wrapper: Don't copy /lib/firmware if it already exists
    in the initrd.
  * cryptsetup-suspend-wrapper: Don't treat udevd specially as luksResume now
    appears to work when udevd is still frozen.
  * cryptsetup-suspend-wrapper: Populate ACTIVE_DEVICES via callback.
  * cryptsetup-suspend-wrapper: Use FD3 to list remaining devices.
  * d/t/utils/debootstrap: Strip colon and suffix from package (Pre-)Depends.
  * d/t/utils/debootstrap: Remove obsolete comment and Pre-Depends.
  * d/t/cryptroot-*: Manually create merged-/usr layout and install
    usr-is-merged.

Date: Mon, 07 Nov 2022 08:36:38 -0800
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/cryptsetup/2:2.5.0-6ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 07 Nov 2022 08:36:38 -0800
Source: cryptsetup
Built-For-Profiles: noudeb
Architecture: source
Version: 2:2.5.0-6ubuntu1
Distribution: lunar
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Closes: 1020553 1020714 1022970
Changes:
 cryptsetup (2:2.5.0-6ubuntu1) lunar; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - debian/control:
       + Recommend plymouth.
       + Depend on busybox-initramfs instead of busybox | busybox-static.
       + Move cryptsetup-initramfs back to cryptsetup's Recommends.
       + Do not build cryptsetup-suspend binary package on i386.
     - Fix cryptroot-unlock for busybox compatibility.
     - Fix warning and error when running on ZFS on root
       - d/functions: Return an empty devno for ZFS devices as they don't have
         major:minor device numbers.
       - d/initramfs/hooks/cryptroot: Ignore and don't print an error message
         when devices don't have a devno.
     - debian/patches/decrease_memlock_ulimit.patch
       Fixed FTBFS due to a restricted build environment
     - Disable failing Debian-tailored cryptroot-* autopkgtests
 .
 cryptsetup (2:2.5.0-6) unstable; urgency=medium
 .
   * d/t/cryptroot-*: Mask systemd-firstboot.service.
   * d/t/cryptroot-*: Use camel case for apt.conf(5) settings.
   * d/t/cryptroot-*: _apt(): Sort apt.conf(5) settings.
   * d/t/cryptroot-*: Honor apt_preferences(5) settings under autopkgtest.
   * d/t/cryptroot-*: init: bind mount temporary filesystems to fix
     autopkgtests with systemd 252. (Closes: #1022970)
 .
 cryptsetup (2:2.5.0-5) unstable; urgency=medium
 .
   * d/t/cryptroot-*: Bump setup timeout to 3600s so autopkgtests don't fail on
     debci runners lacking KVM support.
 .
 cryptsetup (2:2.5.0-4) unstable; urgency=medium
 .
   * suspend.conf: Improve description and typofix.
   * d/t/cryptroot-*: Fix race condition between creating new partition and
     using them.
   * d/t/cryptroot-*: Fail the test after a reasonable timeout.
     (Closes: #1020714)
   * d/t/cryptroot-*: setup_apt(): Add 'Identifier: Packages' to `apt-get
     indextargets` filter.
   * cryptsetup-suspend-wrapper: Explicitly disable udev support when resuming.
     (Closes: #1020553)
   * d/t/cryptroot-*: Pin versions for all packages in PKGS_EXTRA that are part
     of src:cryptsetup.
 .
 cryptsetup (2:2.5.0-3) unstable; urgency=low
 .
   * d/t/cryptroot-*: Disable VGA card on the guest.
   * d/t/cryptroot-*: Communicate with guests on /dev/hvc0 and remove
     console=hvc0 from the kernel command line to get a noise-free channel.
   * d/t/cryptroot-*: poweroff(): Use poweroff(8) not `echo o
     >/proc/sysrq-trigger`.
   * d/t/cryptroot-*: hibernate(): Use systemctl(1) not `echo disk
     >/sys/power/state`.
   * d/t/cryptroot-*: Use a separate logfile for each communication channel.
   * Refactor d/t/utils/mock.pm and add QMP support; this adds 'Depends:
     libjson-perl' to cryptroot-* autopkgtests.
   * d/t/cryptroot-*: Use the QMP "quit" command to destroy guests early.
   * d/t/cryptroot-*: Start getty on /dev/hvc0 only (not /dev/ttyS0) in
     non-interactive mode.
   * d/t/cryptroot-*: Remove console=tty0 from the kernel command line.
   * d/t/cryptroot-*: Mask all timer units to avoid cluttering test
     environments with background jobs.
   * d/t/cryptroot-lvm: Also test cryptsetup-suspend (enter to and resume from
     S3 state).
   * d/t/cryptroot-*: Simplify login prompt regex.
   * d/t/cryptroot-*: Use $' when consuming input buffers.
   * Salsa CI: Include recipes/debian.yml.
   * Salsa CI: Remove redundant variable RELEASE=unstable.
   * Salsa CI: Re-enable autopkgtest job with partial coverage.
   * cryptsetup-suspend-wrapper: Improve quoting.
   * cryptsetup-suspend-wrapper: Use crypttab_find_entry()'s return status.
   * d/copyright: Improve wording.
   * d/copyright: Fix license for d/scripts/suspend/cryptsetup-suspend.c .
   * Add license headers for d/scripts/suspend/*.
   * Relicense own code from GPLv2+ to GPLv3+.
   * cryptsetup-suspend-wrapper: Don't bindmount temporary filesystems.
   * cryptsetup-suspend-wrapper: Improve $INITRAMFS_DIR detection and cleanup.
   * cryptsetup-suspend-wrapper: Improve TODO comment.
   * d/t/cryptroot-*: Add a network device in interactive mode.
   * d/t/cryptroot-lvm: Test I/O on the root FS after wakeup to make sure the
     device is not suspended.
   * cryptsetup-suspend-wrapper: Harden chroot environment: mount ramfs
     read-only and with the 'nodev' option, make it unbindable, and use a
     restrictive root mode.
   * initramfs hook: Remove duplicate unmangling.
   * initramfs hook: populate_CRYPTO_HASHES(): Add missing call to
     crypttab_parse_options().
   * d/functions: crypttab_parse_options(): Always reset $CRYPTTAB_TYPE.
   * cryptsetup-suspend-wrapper: Ignore $KEEP_INITRAMFS if a newer initrd is
     detected.
   * d/functions: resume_device(): Fix resuming by keyscript.
   * d/functions: Refactor resume_device() and freeze_cgroups().
   * cryptsetup-suspend-wrapper: Don't copy /lib/firmware if it already exists
     in the initrd.
   * cryptsetup-suspend-wrapper: Don't treat udevd specially as luksResume now
     appears to work when udevd is still frozen.
   * cryptsetup-suspend-wrapper: Populate ACTIVE_DEVICES via callback.
   * cryptsetup-suspend-wrapper: Use FD3 to list remaining devices.
   * d/t/utils/debootstrap: Strip colon and suffix from package (Pre-)Depends.
   * d/t/utils/debootstrap: Remove obsolete comment and Pre-Depends.
   * d/t/cryptroot-*: Manually create merged-/usr layout and install
     usr-is-merged.
Checksums-Sha1:
 4ae2afa1e484c63b3a0ebdcee9dcd57170ea0076 3784 cryptsetup_2.5.0-6ubuntu1.dsc
 f865d9d3447400530a24023cff04d2ed370bcbb8 165244 cryptsetup_2.5.0-6ubuntu1.debian.tar.xz
 42aed396e3c2de39affac3f8baa74821c771b84d 7559 cryptsetup_2.5.0-6ubuntu1_source.buildinfo
Checksums-Sha256:
 fb32c192e22628d6a8dd5cfbf0475d2e5c6a20dedb8380ac65cf033931fd0729 3784 cryptsetup_2.5.0-6ubuntu1.dsc
 7b6b85e1ebcc6576623ff66452972de8c86915b791ec728e1b62cae7dd86a442 165244 cryptsetup_2.5.0-6ubuntu1.debian.tar.xz
 3bddc4c3297589b02f010de31cd78674b910557ea69eab47416d2c13efac1eb5 7559 cryptsetup_2.5.0-6ubuntu1_source.buildinfo
Files:
 f0196d2efd1c753595e4fb19a0af2622 3784 admin optional cryptsetup_2.5.0-6ubuntu1.dsc
 fdbc29a360163c55f6a6eb66f6c74983 165244 admin optional cryptsetup_2.5.0-6ubuntu1.debian.tar.xz
 121648450f621fc87c957309e1babaa9 7559 admin optional cryptsetup_2.5.0-6ubuntu1_source.buildinfo
Original-Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel at alioth-lists.debian.net>


More information about the lunar-changes mailing list