Release v1.16.6

bootc 1.16.6

What's Changed

• bootloader: Chroot into composefs image root for bootupd installs by @cgwalters in #2302
• Sync common files from infra repository by @bootc-bot[bot] in #2332
• Update GitHub Actions by @bootc-bot[bot] in #2338
• Release 1.16.6 by @bootc-bot[bot] in #2344

Assets

• bootc-1.16.6-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.16.6.tar.zstd - Source archive

Full Changelog: v1.16.5...v1.16.6

Release v1.16.5

bootc 1.16.5

What's Changed

• system-reinstall-bootc: Parse sshd config case-insensitive by @jeckersb in #2320
• docs: Add top-level LICENSE file for OpenSSF badge compliance by @gursewak1997 in #2321
• cfs: Restore download progress for update and switch by @cgwalters in #2322
• Update Rust by @bootc-bot[bot] in #2325
• store: Fix upgrade with existing V2 composefs repo by @jmarrero in #2329
• Release 1.16.5 by @bootc-bot[bot] in #2326

Assets

• bootc-1.16.5-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.16.5.tar.zstd - Source archive

Full Changelog: v1.16.4...v1.16.5

Release v1.16.4

bootc 1.16.4

Features

• Improved handling of merging files in /etc
  • Etc merge changes by @Johan-Liebert1 in #2301

Bugfixes and other changes

• initramfs: tolerate pre-existing /run/systemd/volatile-root symlink by @ricardosalveti in #2276
• Composefs changes, disable failing ostree test by @Johan-Liebert1 in #2277
• UKI Cleanup by @Johan-Liebert1 in #2200
• Sync common files from infra repository by @bootc-bot[bot] in #2282
• ci: Don't let heavy jobs block merge-queue entry in PRs by @cgwalters in #2274
• Replace local bootc-kernel-cmdline crate with linux-kernel-cmdline by @jeckersb in #2297
• Update composefs-rs by @cgwalters in #2295
• ci: A few improvements by @cgwalters in #2293
• docs/composefs: Update with latest by @cgwalters in #2298
• composefs/bls: Add user provided kargs by @Johan-Liebert1 in #2305
• ostree-ext: Remove privilege dropping for container pulls by @gursewak1997 in #2307
• ostree-ext: Remove unused isolation parameter and proxy indirection by @gursewak1997 in #2312
• Update Rust by @bootc-bot[bot] in #2308
• ci: Run unit tests once per OS instead of once per test-integration leg by @cgwalters in #2311
• Release 1.16.4 by @bootc-bot[bot] in #2310

New Contributors

• @ricardosalveti made their first contribution in #2276

Full Changelog: v1.16.3...v1.16.4

Release v1.16.3

bootc 1.16.3

This release is a bit delayed from our ~new weekly schedule mainly because of CI infrastructure flakes.

Features

• Support uki key in BLSConfig by @Johan-Liebert1 in #2269

Bugfixes and other changes

• docs: Revamp image requirements by @cgwalters in #2257
• switch: fix --apply not rebooting when already staged by @jlebon in #2249
• Update GitHub Actions by @bootc-bot[bot] in #2260
• ostree-ext: Adapt to new containers policy config load order by @cgwalters in #2264
• GrubCC binary integration by @Johan-Liebert1 in #2223
• ci: Fix f45 by @cgwalters in #2267
• Sync common files from infra repository by @bootc-bot[bot] in #2272
• Update composefs by @orowith2os in #2262
• Release 1.16.3 by @bootc-bot[bot] in #2271
• xtask/tmt: Abort run and dump diagnostics on VM launch failure by @cgwalters in #2273

New Contributors

• @orowith2os made their first contribution in #2262

Full Changelog: v1.16.2...v1.16.3

Assets

• bootc-1.16.3-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.16.3.tar.zstd - Source archive

Release v1.16.2

bootc 1.16.2

Continuing our new ~weekly release cadence!

Changes

• sd-boot: Only use --random-seed flag on systemd >= 257 by @yeetypete in #2253
• docs: tiny typo fix in SUMMARY.md by @Scanf-s in #2255
• fix(composefs): restore registry auth discovery on direct pull by @yeetypete in #2259
• Release 1.16.2 by @bootc-bot[bot] in #2261

Assets

• bootc-1.16.2-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.16.2.tar.zstd - Source archive

New Contributors

• @Scanf-s made their first contribution in #2255

Full Changelog: v1.16.1...v1.16.2

Release v1.16.1

bootc 1.16.1

First of our new weekly release schedule - delayed a bit because we're hitting some CI flakes. Just smaller bug fixes here and prep for larger changes.

What's Changed

• README.md: Link website and blog by @cgwalters in #2233
• fix(deps): update rust by @bootc-bot[bot] in #2226
• Prepwork for #2200 by @Johan-Liebert1 in #2240
• Do not recursively clean tempdir by @Johan-Liebert1 in #2245
• Update shlex to 2.0.1 by @jeckersb in #2244
• A few CI tweaks by @cgwalters in #2232
• Release 1.16.1 by @bootc-bot[bot] in #2254

Assets

• bootc-1.16.1-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.16.1.tar.zstd - Source archive

Full Changelog: v1.16.0...v1.16.1

Release v1.16.0

bootc 1.16.0

Release cadence change

Starting with this release, bootc switches to a weekly release cadence. Patch version bumps will be the default; the minor version will be reserved for releases with notable features. See #2225.

New features

• composefs: Transient /etc, transient root, and volatile /var — bootc now properly supports running with a transient (overlayfs) /etc, a transient root, and documents the systemd.volatile=state path for volatile /var. This is particularly useful for sealed/immutable image configurations. (#2201)

• Unified storage update — The composefs manifest is now a GC root, replacing the legacy .imginfo sidecar files. The chain is now: bootloader entry → deployment → origin file → manifest digest → manifest → objects. Old .imginfo-based systems are still supported for backward compatibility. (#2044). This is part of heading towards declaring the composefs fully stable - a lot more to come!

• BOOTC_EXP_EXTERNAL_CONTAINER_TOOL env override — A new experimental environment variable allows substituting an alternative binary in place of both podman and skopeo, useful for downstream projects shipping a single unified container tool. (#2192)

• ostree-ext: Reuse prior packing layout with exclusive components — When exclusive components have already been split into dedicated layers, the prior-build packing layout is now reused, improving layer stability across rebuilds. (#2109)

Notable bugfixes

• Fix orphaned /etc/shadow and /etc/gshadow entries before sysusers — Adds a generator that detects and removes shadow file entries left behind during the migration from nss-altfiles to systemd-sysusers, preventing fatal boot errors. (#2207)

• install: Don't fsfreeze VFAT — bootc install to-filesystem no longer attempts to freeze VFAT filesystems (e.g. the ESP mounted at /boot), which do not support FIFREEZE/FITHAW. (#2196)

• bootloader: Fix systemd-boot installs — Several issues with systemd-boot-based installs are resolved: bootctl now runs with --generic-image to avoid touching EFI variables, temporary writes that require a writable /etc are redirected, and SYSTEMD_RELAX_ESP_CHECKS=1 is set to avoid unnecessary udev lookups. (#2191)

• composefs GC: Clean up bootloader binaries on finalize — After atomically swapping staged bootloader entries, GC now runs for BLS/UKI binaries no longer referenced by any entry. The composefs object repository is pruned on the next update/switch. (#2206)

• Rollback fixes — Staged deployments are now removed on rollback (matching ostree behavior), and bootloader entry sorting for composefs is now correct for both systemd-boot (by sort-key) and GRUB (by filename). (#2213)

• bootloader: Run bootupctl via chroot instead of bwrap — Avoids issues in environments where bwrap is unavailable or restricted. (#2210)

• blockdev: Restore multipath partition number fallback — Fixes partition number detection from device path for multipath devices. (#2219)

What's Changed

• Add meetings directory with instructions to find meetings and notes by @mohan-shash in #2181
• Use --replacepkgs when installing local builds by @jeckersb in #2180
• ci: Hard require that generated code is updated in CI by @cgwalters in #2183
• Include meetings info by @mohan-shash in #2182
• Update composefs, unified storage by @cgwalters in #2044
• ci: Split up network fetches and retry with Justfile targets by @cgwalters in #2187
• Fix two external issues breaking cfs on latest f44+ by @cgwalters in #2195
• deps: Update containers-image-proxy to 0.10.0 by @jeckersb in #2188
• install: don't fsfreeze VFAT by @supakeen in #2196
• ci: Fix kernel downgrade to let scriptlets run with TMPDIR=/var/tmp by @cgwalters in #2198
• fix(deps): update rust by @bootc-bot[bot] in #2139
• Clean up docs warnings and add CI gate by @jeckersb in #2189
• Remove bootupd copr install by @jeckersb in #2199
• Sync common files from infra repository by @bootc-bot[bot] in #2193
• fix(deps): update rust by @bootc-bot[bot] in #2202
• bootloader: Fix a few things related to systemd-boot installs by @cgwalters in #2191
• composefs: Support transient /etc, transient root, and volatile /var by @cgwalters in #2201
• utils: add BOOTC_EXP_EXTERNAL_CONTAINER_TOOL env override by @ericcurtin in #2192
• Composefs GC changes by @Johan-Liebert1 in #2206
• bootloader: Run bootupctl via chroot instead of bwrap by @cdellacqua in #2210
• ostree-ext: reuse prior packing with exclusive components by @officialasishkumar in #2109
• generator: Fix orphaned /etc/shadow and /etc/gshadow entries before sysusers by @cgwalters in #2207
• Minor fixes by @Johan-Liebert1 in #2214
• project: Use ImageReference from containers_image_proxy by @Johan-Liebert1 in #2204
• docs: Flesh out some unified storage docs/code a bit by @cgwalters in #2216
• deps: Bump bcvk-qemu to e953294 by @jeckersb in #2217
• Bump Composefs-rs, use buffered UKI readers by @Johan-Liebert1 in #2215
• fix(deps): update rust by @bootc-bot[bot] in #2211
• blockdev: Restore multipath partition number fallback from device path by @ckyrouac in #2219
• xtask: Use insecure firmware for all non-sealed VM tests by @jmarrero in #2235
• docs: Replace bootc-dev.github.io with bootc.dev by @jeckersb in #2234
• MAINTAINERS: Add Mark Russell. by @jmarrero in #2222
• Switch over to weekly releases by default by @cgwalters in #2225
• Rollback Fixes by @Johan-Liebert1 in #2213
• Release 1.16.0 by @bootc-bot[bot] in #2242

New Contributors

• @supakeen made their first contribution in #2196
• @cdellacqua made their first contribution in #2210
• @officialasishkumar made their first contribution in #2109

Full Changelog: v1.15.2...v1.16.0

New Contributors

• @supakeen made their first contribution in #2196
• @cdellacqua made their first contribution in #2210
• @officialasishkumar made their first contribution in #2109

Full Changelog: v1.15.2...v1.16.0

Assets

• bootc-1.16.0-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.16.0.tar.zstd - Source archive

Release v1.15.2

bootc 1.15.2

New features

• install: Add discoverable-partitions config option by @cgwalters in #2123
• install: Add a config knob for container sigpolicy by @jbtrystram in #2116

Other changes

Mostly smaller bugfixes.

• sd-boot: Don't generate random seed for generic images by @Johan-Liebert1 in #2134
• Update cap-std-ext to 5.1.2, use new CmdFds API by @cgwalters in #2143
• blockdev: handle ZFS dataset sources in list_dev_by_dir by @hanthor in #2138
• fix: add riscv64 to this_arch_root by @woltere in #2125
• provision-derived: Don't hardcode bootupd version by @jeckersb in #2145
• Use --nosignature when installing dev rpms by @jeckersb in #2147
• chore(deps): update actions/upload-pages-artifact action to v5 by @bootc-bot[bot] in #2149
• tests: Skip BLI detection test when discoverable-partitions config is absent by @jmarrero in #2155
• install/ostree: Set zipl as the bootloader for s390x by @jbtrystram in #2152
• install: Pass explicit filesystem type to mount after mkfs by @jeckersb in #2153
• loader-entries: Add set-options-for-source for source-tracked kargs by @jmarrero in #2114
• ci: Disable test-coreos by @cgwalters in #2165
• ci: Enable merge_group trigger for merge queue support by @cgwalters in #2166
• blockdev: Fall back to blkid -p when udev is unavailable by @cgwalters in #2169
• cli: Handle PermissionDenied when reading /proc/1/ns/ipc by @jmarrero in #2162
• composefs/uki: Remove stripping .staged suffix on finalize by @Johan-Liebert1 in #2171
• ci: Run full tests only on merge queue, add ci/tier-1 and ci/merge labels by @cgwalters in #2173
• Sync common files from infra repository by @bootc-bot[bot] in #2167
• ci: Also skip test-install by default by @cgwalters in #2176
• Tests for unsealed composefs UKI by @Johan-Liebert1 in #2146
• A few CI fixes by @cgwalters in #2178
• Release 1.15.2 by @bootc-bot[bot] in #2179

New Contributors

• @hanthor made their first contribution in #2138
• @woltere made their first contribution in #2125

Full Changelog: https://github.com/bootc-dev/bootc/compare/v1.15.1...v1.15.2### Assets

• bootc-1.15.2-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.15.2.tar.zstd - Source archive

Release v1.15.1

bootc 1.15.1

Changes

The primary goal of this bugfix release is to support installing on Intel VROC systems. We otherwise have a variety of smaller bugfixes, and one effective feature in --karg-delete.

Thanks to all contributors!

• fix(install): set DM_DISABLE_UDEV=1 to prevent dm semaphore deadlock in container IPC namespace by @andrewdunndev in #2090
• BLS shared entries GC fix by @Johan-Liebert1 in #2108
• test: skip OSCI gating AVC test by @henrywang in #2106
• system-reinstall-bootc: add progress indication during install steps by @judavi in #2091
• cli: Gate IPC namespace entrance on CAP_SYS_ADMIN by @cgwalters in #2117
• install: Add --karg-delete by @hone in #2105
• cli: Initialize bootc storage before upgrade --check by @cgwalters in #2118
• composefs: add a systemd.mount-extra kernel argument to the BLS boot entry by @henrywang in #2121
• fix(deps): update rust by @bootc-bot[bot] in #2126
• install: Enable installing to multi device parents by @ckyrouac in #1911
• sysext: Add fast path dev flow by @cgwalters in #2127
• blockdev: Handle ESP discovery on Intel VROC RAID devices by @ckyrouac in #2129
• Release 1.15.1 by @bootc-bot[bot] in #2140

New Contributors

• @judavi made their first contribution in #2091
• @hone made their first contribution in #2105

Full Changelog: v1.15.0...v1.15.1

Assets

• bootc-1.15.1-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.15.1.tar.zstd - Source archive

Release v1.15.0

bootc 1.15.0

Features

• Add usroverlay --readonly by @evan-goode in #2046
• cli: Add tag-aware upgrade operations by @gursewak1997 in #2094
• status: Render cached update info in human-readable output by @cgwalters in #2047
• install/aleph: include the image labels in aleph by @jbtrystram in #2043

Composefs

• fix(composefs): merge default proxy opts for registry auth discovery by @yeetypete in #2086
• ComposeFS fixes for missing verity by @Johan-Liebert1 in #2085
• composefs: add pre-flight disk space check for native backend by @shi2wei3 in #2084
• tests: Add composefs-upgrade test for sealed UKI builds by @cgwalters in #2049

Bug Fixes

• deploy: fix progress bar math for containers-storage transport by @andrewdunndev in #2067
• podstorage: fsync storage root before and after creating .bootc_labeled by @andrewdunndev in #2066
• tar: fix etc remapping of paths with non-ASCII characters by @yeetypete in #2073
• initramfs: Inherit SELinux label on transient root tmpfs by @andrewdunndev in #2071
• ostree-ext: Match on diff_ids as well as layer digest on import by @alexlarsson in #2081
• ostree-ext/store: Relabel layer commits to avoid duplicate objects by @jlebon in #2088
• container-export: Handle metacopy=off overlay setups by @cgwalters in #2097

Other changes (Docs, CI, Internal)

• blockdev: Bump crate version to 0.2.0 by @ckyrouac in #2061
• Sync common files from infra repository by @bootc-bot[bot] in #2062, #2064, #2076
• Update Universal Blue vendor entry in ADOPTERS.md by @KyleGospo in #2065
• ci: Update for Fedora 44 branching from rawhide by @jeckersb in #1986
• ci: Add manual crates release action and update crates versions to match bootc version on release by @ckyrouac in #2063
• fix(deps): update rust by @bootc-bot[bot] in #2068, #2083, #2103
• ci: Fix bug in crates-release by @ckyrouac in #2072
• chore(deps): update github actions by @bootc-bot[bot] in #2069, #2104
• ci: Fix crates-release gh action cargo info invocation by @ckyrouac in #2075
• xtask: Handle being in the right git dir without looking for ADOPTERS.md by @cgwalters in #2077
• tmt: Disable rhel-ci AVC check for expected SELinux denials by @cgwalters in #2082
• Add an "upgrade from previous" test by @cgwalters in #2060
• Release 1.15.0 by @bootc-bot[bot] in #2107

Assets

• bootc-1.15.0-vendor.tar.zstd - Vendored dependencies archive
• bootc-1.15.0.tar.zstd - Source archive

New Contributors

• @KyleGospo made their first contribution in #2065
• @andrewdunndev made their first contribution in #2067
• @yeetypete made their first contribution in #2073
  Full Changelog: v1.14.1...v1.15.0