v1.3.0

What's Changed

• CRITICAL: Update to pre-boot authentication image to more reliably open the encrypted container.
• Fix re-enable command by @Siecje in #74
• Remove unused DISK_IDENTIFIER by @Siecje in #75
• Introduce the Device Manufacturing Database, and private key extraction support by @tdewey-rpi in #80

Full Changelog: v1.2.1...v1.3.0

v1.2.1

What's Changed

• service: Remove extraneous disk-id parameter by @tdewey-rpi in #71
• README: How to disable rpi-sb-provisioner by @tdewey-rpi in #72
• meta: v1.2.1 by @tdewey-rpi in #73

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• debian/control: Add missing python3-virtualenv build dep by @tdewey-rpi in #58
• Fixup monitor status watching by @tdewey-rpi in #60
• Improve observability by @tdewey-rpi in #61
• provisioner: Don't eat timeout errors by @tdewey-rpi in #62
• Fix 'Failed' handling by @tdewey-rpi in #63
• Cleanup systemctl_python by @Siecje in #65
• Cleanup config by @Siecje in #66
• Cleanup validator by @Siecje in #64
• Monitor: Find completed devices correctly. by @tdewey-rpi in #67
• v1.2.0: Changelog by @tdewey-rpi in #68
• v1.2.0: Security Policy update by @tdewey-rpi in #69

Full Changelog: v1.1.1...v1.2.0

v1.1.1

What's Changed

• Avoid look before you leap in systemctl_python by @Siecje in #43
• Remove unused imports by @Siecje in #44
• v1.1.1: Roll up by @tdewey-rpi in #48
• triage: Remove terminal-functions dependency by @tdewey-rpi in #53
• config/default: Add blank metadata field by @tdewey-rpi in #54
• Update fastboot-gadget.img by @roliver-rpi in #55
• Update cryptroot_initramfs by @roliver-rpi in #56
• Update Pre-Boot Authentication image by @tdewey-rpi in #57

META: keywriter service has been merged into the provisioner service, which resolves a race with udev rules.

This release does not require a change of your configuration file, but will require a change of your monitoring infrastructure.

Full Changelog: v1.1.0...v1.1.1

v1.1.0

What's Changed

• debian/control: Add jq depdendency by @tdewey-rpi in #33
• Prefix DEVICE_SERIAL_STORE, to match the docs by @tdewey-rpi in #35
• debian/install: Install known-good recovery.bin by @tdewey-rpi in #37
• v1.1.0: Roll up by @tdewey-rpi in #38

Full Changelog: v1.0.2...v1.1.0

v1.0.2

What's Changed

• provisioner: keywriter: Move logs to serial-priority directory structure by @tdewey-rpi in #10
• rpi-sb-provision monitor by @bebon901 in #13
• Changed "app" to "monitor" and updated nfpm.yaml to install monitor by @bebon901 in #16
• Packaging: Prunes and moves by @tdewey-rpi in #15
• Added configuration app by @bebon901 in #17
• Make package service POSIX sh compatible + run shellcheck by @roliver-rpi in #21
• Add support for HSM-based signing by @tdewey-rpi in #20
• Addresses textual dependencies by @roliver-rpi in #24
• HSM: Fixup string passing of signing directives by @tdewey-rpi in #25
• provisioner: Use get_fastboot_config_file by @roliver-rpi in #27
• Correct log file names by @torntrousers in #29
• Create SECURITY.md by @tdewey-rpi in #30
• Metadata Support by @bebon901 in #22
• Add ci prepare script to install dependencies for package build by @tdewey-rpi in #31

New Contributors

• @torntrousers made their first contribution in #29

Particular thanks is issued to @bebon901, who has just completed their second internship with Raspberry Pi and materially improved this project.

Full Changelog: v1.0.1...v1.0.2

v1.0.1: Logging fixes

What's Changed

• Add fetch-repo-package-list timer and service by @roliver-rpi in #4
• Add rpi-package-download service by @roliver-rpi in #5
• Added missing "Optional" text by @bebon901 in #6
• Update rpi-sb-provisioner.service by @tdewey-rpi in #7
• Update rpi-sb-keywriter.service by @tdewey-rpi in #8
• meta: v1.0.1 by @tdewey-rpi in #9

New Contributors

• @roliver-rpi made their first contribution in #4
• @bebon901 made their first contribution in #6

Full Changelog: v1.0.0...v1.0.1

v1.0.0: Initial release

Full Changelog: https://github.com/tdewey-rpi/rpi-sb-provisioner/commits/v1.0.0