This is largely a bugfix release with a couple of changes.
mkinitcpio hook
contrib/mkinitcpio/sbctl now contains a hook for mkinitcpio.
Similar to recent mkinitcpio changes, sbctl will now also sign when dkms modules change.
Fix create-keys flags
--export,-e and --database-path,-d now works properly and doesn't overwrite the create-keys variables internally.
remove erronous dbx enrollment
Previous release implemented support for dbx that doesn't really work as expected. It would also fail to enroll keys for previously setup clients. Implementation has been removed and will be iterated upon at a later date.
Generated list of changes:
What's Changed
- Update documentation for custom dbx by @Cornelicorn in #253
- Check and return Open errs by @quite in #254
- keys.go: drop the keyUsage bitfield by @dkwo in #255
- Update README.md by @scardracs in #256
create-keysallows for specifying an export directory by @cosmastech in #259- tests/utils/certs.go: drop keyUsage bitfield by @dkwo in #261
- Update 91-sbctl.install by @cvlc12 in #266
- BUGFIX: f.StringVarP() was clearing the exportPath/databasePath strings by @spillner in #267
- Ignore Setup mode and immutable variables for export by @Cornelicorn in #269
- Fixed typo, removed mention enroll-keys enables Secure Boot automatic… by @tblancher in #270
- Ensure file signing hook is run when initrd is rebuilt by @Joseph-DiGiovanni in #271
New Contributors
- @quite made their first contribution in #254
- @dkwo made their first contribution in #255
- @scardracs made their first contribution in #256
- @cosmastech made their first contribution in #259
- @cvlc12 made their first contribution in #266
- @spillner made their first contribution in #267
- @tblancher made their first contribution in #270
- @Joseph-DiGiovanni made their first contribution in #271
Full Changelog: 0.12...0.13