vyatta-image-tools (5.57) unstable; urgency=medium

  * vyatta-install-image.functions: check_binary_signatures also trusts the
    certificates enrolled as MOK when checking grub and the kernel. 5.56 made
    the shim check pass, but on a Secure Boot machine the check then failed at
    grub: this image's grub and kernel are signed by the OBS project
    certificate, which is enrolled as a MOK and is not in the firmware db, and
    it is shim, not the firmware, that verifies them against the MOK list.
    The MOK certificates are exported with mokutil --export and compared the
    same way as db (openssl compat subject). Shim is still checked against db
    alone, since firmware does not consult MOK for it. Without mokutil or with
    nothing enrolled only db counts, as before.
    Checked on an installed system under OVMF Secure Boot with the real shim,
    grub and kernel: the check returns 0 with the MOK included and fails at grub
    with it disabled.

 -- i-danos dev <dev@i-danos.dev>  Sat, 26 Sep 2026 12:10:00 +0800

vyatta-image-tools (5.56) unstable; urgency=medium

  * vyatta-install-image.functions: check_binary_signatures now accepts a
    binary whose signing chain reaches a certificate in the firmware db,
    instead of comparing only the signing certificate's subject. Firmware
    verifies a chain up to a db entry, and for a Microsoft-signed shim that
    entry is "Microsoft Corporation UEFI CA 2011", not the leaf ("Microsoft
    Windows UEFI Driver Publisher"), which is never in db. sbverify --list
    prints one "subject:" line per certificate and the old code read them as one
    string, so the comparison could not succeed even when the CA was in db. On a
    Secure Boot machine add system image reported "no match in signature list"
    for shim and its default answer refused an image the machine would have
    booted. The comparison is now the new helper sig_chain_in_db, which also
    tells "no signature" from "no match".

 -- i-danos dev <dev@i-danos.dev>  Sat, 26 Sep 2026 10:30:00 +0800

vyatta-image-tools (5.55) unstable; urgency=medium

  * vyatta-install-image.functions: drop linuxefi from the hardcoded GRUB EFI
    module list. GRUB 2.12 (Debian 13) folded it into the linux module and no
    longer ships linuxefi.mod, so on any UEFI machine install_grub_efi's
    grub-install failed with "cannot open /usr/lib/grub/x86_64-efi/linuxefi.mod"
    and the whole installation exited: the image could not be installed to disk
    on UEFI at all. Of the 55 modules listed, linuxefi was the only one missing
    from the image; the same grub-install command, run against a loop device
    with a real ESP, fails with it and finishes without it.
  * Includes the 5.54 change (flush the new image to disk before the boot menu
    is pointed at it).

 -- i-danos dev <dev@i-danos.dev>  Thu, 24 Sep 2026 18:10:00 +0800

vyatta-image-tools (5.54) unstable; urgency=medium

  * vyatta-install-image.functions: flush the new image to disk before
    run_post_install points the boot menu at it. install_image() copied the
    squashfs, kernel and initrd and returned without any sync; the grub.cfg
    update that follows is written by rename over the old file, which ext4
    flushes eagerly, so grub.cfg (already naming the new image as the
    default) could reach the disk while the image data was still in the page
    cache. A power cut in that window left a machine that cannot boot and
    cannot recover on its own: "file /boot/<name>/vmlinuz not found" waiting
    at "Press any key to continue" at the GRUB prompt, or, with the kernel
    present and the squashfs truncated, "Can not mount ... .squashfs" and an
    (initramfs) shell. Both need someone at the console to pick the old image.
    Found by cutting power at 13 points across an "add system image" run: the
    two cuts at 24.7s and 26.3s of a 31s install left an unbootable default.

 -- i-danos dev <dev@i-danos.dev>  Thu, 24 Sep 2026 16:45:00 +0800

vyatta-image-tools (5.53) unstable; urgency=medium

  * vyatta_update_grub.pl: write grub.cfg to the same path list_images() and
    GRUB itself read from. The hardcoded '/boot/grub/grub.cfg' resolves,
    through the running system's own root overlay, into the currently
    running image's private persistence directory -- not the shared on-disk
    location. A second image added via "add system image" copied its files
    correctly and reported success, but was never actually registered in a
    bootable grub entry. Found and root-caused doing the first full
    upgrade/rollback acceptance pass: fetch a newer image, select it, reboot
    into it, select the original back, reboot into that -- all four steps
    now verified end to end on a real disk.

 -- DANOS Open <miwide20190328@gmail.com>  Tue, 22 Sep 2026 12:45:00 +0800

vyatta-image-tools (5.52) unstable; urgency=medium

  * install image: exclude ./.disk/mkisofs from the ISO checksum check.
    Debian 13's live-build writes that file -- the exact xorriso command
    line used to assemble the ISO -- during ISO assembly itself, after its
    own checksums stage has already recorded md5sum.txt. The file differs
    from what was hashed on every build, by construction (it embeds the
    ISO's own output filename and build timestamp), not by corruption.
    Left unexcluded this failed "add system image" against every 2608
    ISO; discovered by acceptance-testing an upgrade against the official
    2105 ISO, whose live-build did not write this file.

 -- DANOS Open <miwide20190328@gmail.com>  Tue, 22 Sep 2026 11:45:00 +0800

vyatta-image-tools (5.51) unstable; urgency=medium

  * install image: show useradd's stderr only when it fails, so sssd 2.x's
    "SSSD isn't configured" no longer prints twice during a successful
    install, and stop the install if useradd fails

 -- DANOS Open <miwide20190328@gmail.com>  Mon, 21 Sep 2026 23:36:52 +0800

vyatta-image-tools (5.50) unstable; urgency=medium

  * Find the live rootfs where current live-boot mounts it. Through Debian 10
    the read-only rootfs appeared under /lib/live/mount/rootfs/; current
    live-boot puts it under /run/live/rootfs/ with the medium on
    /run/live/medium. get_live_rootfs_path() looked only at the old path, so
    "install image" partitioned the disk, set up grub and then failed with
    "Cannot find the squashfs image" -- the documented way to install DANOS
    did not work on 2608 at all. Reproduced on both QEMU and VMware.

 -- i-danos dev <dev@i-danos.dev>  Sat, 30 Aug 2026 19:00:00 +0800

vyatta-image-tools (5.49) unstable; urgency=medium

  * Use environment variables to pass credentials from RPC to script
  * Use environment variables to pass credentials from Yang to script

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Thu, 26 Aug 2021 08:35:09 +0100

vyatta-image-tools (5.48) unstable; urgency=medium

  [ Sharmila Podury ]
  * Create device-cache shared mutable directory

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Fri, 16 Jul 2021 23:02:18 +0100

vyatta-image-tools (5.47) unstable; urgency=medium

  [ Nachiketa Prachanda ]
  * scripts: Remove unnecessary message

  [ Mike Manning ]
  * Installer should check signed binaries if secure boot if enabled

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Fri, 18 Jun 2021 20:13:44 +0100

vyatta-image-tools (5.46) unstable; urgency=medium

  [ Nicholas Brown ]
  * 'y' installer option does not need an argument

  [ Nachiketa Prachanda ]
  * grub: per image env file for crashkernel cmdline
  * script: add vyatta-grub-editenv script

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Fri, 11 Jun 2021 10:07:08 +0100

vyatta-image-tools (5.45) unstable; urgency=medium

  [ Charles (Chas) Williams ]
  * defer-boot: add option to not set new image as default (Bugfix: VRVDR-53509)

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Wed, 07 Apr 2021 12:56:45 +0100

vyatta-image-tools (5.44) unstable; urgency=medium

  * Improve check for ONIE boot

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 23 Mar 2021 19:21:20 +0000

vyatta-image-tools (5.43) unstable; urgency=medium

  [ Duncan Eastoe ]
  * yang: username/password rt inst. add image args

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Wed, 17 Feb 2021 14:17:24 +0000

vyatta-image-tools (5.42) unstable; urgency=medium

  * "running image" not always shown in output from "show system image"

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 16 Nov 2020 15:28:36 +0000

vyatta-image-tools (5.41) unstable; urgency=medium

  [ Robert Shearman ]
  * yang: add top-level help for "show raid" (Fixes: VRVDR-53437)

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 02 Nov 2020 12:06:20 +0000

vyatta-image-tools (5.40) unstable; urgency=medium

  [ Charles (Chas) Williams ]
  * postinstall.d/55-update-grub: fix grep syntax (Bugfix: VRVDR-53096)
  * postinstall.d/55-update-grub: only run once (Bugfix: VRVDR-53096)
  * xen: remove installer support for Xen (Bugfix: VRVDR-53096)
  * vyatta-postinstall-configure: use rename (Bugfix: VRVDR-53096)
  * vyatta_upgrade_grub: use rename (Bugfix: VRVDR-53096)
  * vyatta_upgrade_grub: respect kernel cmdline (Bugfix: VRVDR-53096)
  * vyatta_upgrade_grub: update grub.cfg when changed (Bugfix: VRVDR-53096)

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 20 Oct 2020 16:54:12 +0100

vyatta-image-tools (5.39) unstable; urgency=medium

  * Improve temporary file handling for postinstall
  * Improve temporary file handling for installer log
  * Improve temporary directory handling when getting image version
  * Pass arguments as an array for system calls when getting image version

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 12 Oct 2020 13:10:38 +0100

vyatta-image-tools (5.38) unstable; urgency=medium

  * Do not show Grub password in installer logs
  * Do not show sensitive information in URL displayed in installer logs
  * Revert to explicit use of vyatta-curl-wrapper
  * Do not show sensitive information in argument displayed in installer logs

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Fri, 09 Oct 2020 11:56:25 +0100

vyatta-image-tools (5.37) unstable; urgency=medium

  [ Nicholas Brown ]
  * Use YANG for adding image in a routing instance (Closes: VRVDR-52953)

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Fri, 02 Oct 2020 07:22:44 +0100

vyatta-image-tools (5.36) unstable; urgency=medium

  [ James Wheatley ]
  * Set vyatta_sbindir in 55-update-signed-efi

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 14 Sep 2020 17:52:39 +0100

vyatta-image-tools (5.35) unstable; urgency=medium

  [ Nachiketa Prachanda ]
  * scripts: do not overlay mount on current image

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 01 Sep 2020 20:36:22 +0100

vyatta-image-tools (5.34) unstable; urgency=medium

  * "show system image" prints error on uninstalled image

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Thu, 06 Aug 2020 16:36:33 +0100

vyatta-image-tools (5.33) unstable; urgency=medium

  * Failed to set new admin user account password during live cd image install
  * Help text for "set system boot-loader" contains spelling mistake
  * Image upgrade errors if config not saved

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 28 Jul 2020 09:40:08 +0100

vyatta-image-tools (5.32) unstable; urgency=medium

  * Allow concurrent removal of hosts from ssh_known_hosts
  * Modelled copy command in a VRF should not need prior config of ssh-known-hosts

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Thu, 02 Jul 2020 09:34:26 +0100

vyatta-image-tools (5.31) unstable; urgency=medium

  [ Charles (Chas) Williams ]
  * Convert .mount units to generators (Bugfix: VRVDR-34903)

  [ Mike Manning ]
  * Provide an option to skip host validation for the modelled copy command

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Wed, 01 Jul 2020 15:08:43 +0100

vyatta-image-tools (5.30) unstable; urgency=medium

  * Run perltidy -ce on vyatta-image-tools.pl
  * Modelled copy command should not require prior config of ssh-known-hosts

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 15 Jun 2020 07:56:50 +0100

vyatta-image-tools (5.29) unstable; urgency=medium

  [ Nicholas Brown ]
  * Remove external control of machine-id copying
  * Don't install machine-id generated by the live-cd (Closes: VRVDR-51179)

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 19 May 2020 09:34:29 +0100

vyatta-image-tools (5.28) unstable; urgency=medium

  [ Nicholas Brown ]
  * persist /etc/machine-id between installs (Closes: VRVDR-51008)

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 18 May 2020 13:42:23 +0100

vyatta-image-tools (5.27) unstable; urgency=medium

  * Modify default username/password for auto-install such as ONIE install

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Fri, 24 Apr 2020 10:32:16 +0100

vyatta-image-tools (5.26) unstable; urgency=medium

  * Remove default and force selection of user and grub user on install

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 21 Apr 2020 12:30:40 +0100

vyatta-image-tools (5.25) unstable; urgency=medium

  [ James Wheatley ]
  * Fix query for iommu config when YANG not present (Fixes: VRVDR-50431)

  [ Mike Manning ]

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 30 Mar 2020 15:21:14 +0100

vyatta-image-tools (5.24) unstable; urgency=medium

  [ Mike Manning ]
  * ONIE install for UEFI: check for ESP on drive, not partition
  * ONIE install for UEFI: specify EFI dir when installing grub master
  * ONIE install for UEFI: use secure-boot option for grub master
  * ONIE install for UEFI: fix chainloader for grub master

  [ James Wheatley ]
  * Allow option to configure IOMMU passthrough mode (Fixes: VRVDR-50431)

  [ Mike Manning ]

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 30 Mar 2020 11:12:10 +0100

vyatta-image-tools (5.23) unstable; urgency=medium

  * HOTFIX: Clear build time sources
  * HOTFIX: Special handling of apt-get commands
  * HOTFIX: Dont use dist-upgrade for dry-run
  * HOTFIX: Shell fixes
  * HOTFIX: Relax regex for image and package names
  * HOTFIX: Print an error for each erroneous file
  * HOTFIX: Use random number for cloned image name
  * HOTFIX: Perltidy

 -- Erik Ziegenbalg <Erik.Ziegenbalg@vyatta.att-mail.com>  Tue, 14 Jan 2020 11:00:25 -0800

vyatta-image-tools (5.22) unstable; urgency=medium

  * Vyatta-HOTFIX
  * Don't use croak & releax regex
  * HOTFIX: Remove temporary apt repo after upgrade
  * HOTFIX: Mount /proc in chroot as well
  * HOTFIX: Use approp. v-i-t wrappers & hide dir changes
  * HOTFIX: Safely run apt-get
  * HOTFIX: Add install failure output messages.
  * HOTFIX: Handle unsafe exits
  * HOTFIX: Missing semicolon

 -- Erik Ziegenbalg <Erik.Ziegenbalg@vyatta.att-mail.com>  Thu, 09 Jan 2020 15:02:48 -0800

vyatta-image-tools (5.21) unstable; urgency=medium

  * DANOS Import master

 -- Vyatta Package Maintainers <DL-vyatta-help@att.com>  Tue, 12 Nov 2019 08:35:54 -0800
