-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Aug 2021 13:08:39 +0200 Source: dropbear Architecture: source Version: 2020.81-4 Distribution: unstable Urgency: low Maintainer: Guilhem Moulin <guilhem@debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 907082 958526 962132 Changes: dropbear (2020.81-4) unstable; urgency=low . * d/control: Remove <pape> from Uploaders. Thanks to gerrit for their work on the dropbear package! (Closes: #907082) * d/control: dropbear: Demote 'dropbear-initramfs' to Suggests. (Closes: #962132) * d/control: Bump Standards-Version to 4.6.0 (no changes necessary). * initramfs boot script: Don't exit when IP={none,off}. (Closes: #958526) * Rename /etc/dropbear-initramfs to /etc/dropbear/initramfs, and /etc/dropbear-initramfs/config to /etc/dropbear/initramfs/dropbear.conf. * d/t/on-lvm-and-luks: Near-complete rewrite: - Adjust partition sizes to account for the current needs of the distro. - Set 'Architecture: amd64' to properly skip the test on other architectures. - Run mmdebstrap(1) with --mode=auto instead of --mode=root. This uses --mode=unshare when kernel.unprivileged_userns_clone is set to 1, otherwise --mode=fakeroot (#944929 is now fixed) - Consolidate style. - Ensure we're testing the current dropbear-initramfs version. - Use KVM acceleration when possible. Also, try to create /dev/kvm if missing (for instance in a chroot where /dev is not managed by udev). - Raise timeout values so the test has a chance to complete when KVM is not supported/used. - Adjust copyright. - Replace 'Depends: libguestfs-tools, sleepenh, time' with 'Depends: cryptsetup-initramfs, fdisk, initramfs-tools-core, lvm2'. Instead of using guestfish(1) to set up a first system which is in turn used to set up the target system, we build a custom initramfs image containing the required dependencies, boot into it and entirely set up the target system from there. - Unconditionally dump (in real time) the guest's serial console into the standard output. Before it was only done upon error. - Use a random key file instead of a hardcoded/pre-chosen passphrase. - Restrict the guest's ability to reach external hosts. - Assign static addresses under 10.0.2.128/25 instead of using DHCP. That way we don't have to include 'isc-dhcp-client' in the debootstrap chroot. - Use dropbear instead of OpenSSH in the main system as well, not just in the initramfs. After all we're testing dropbear here :-) - Instead of having the root and swap (resume) devices each in its own LV held by a LUKS device, we put the root FS directly on the root device, and add a new plain dm-crypt partition for a transient swap device. This removes 'Depends: lvm2'. Consequently, the test is renamed to 'remote-unlocking'. Checksums-Sha1: 975171b439bc7d0a2d1ce07709e49a5993b04d7b 2537 dropbear_2020.81-4.dsc 6efc4b800550d5341240979f0aec731f49a7f4bb 30824 dropbear_2020.81-4.debian.tar.xz a15da74425db3f186e495ee32611e8a51e56297f 6967 dropbear_2020.81-4_amd64.buildinfo Checksums-Sha256: bd1ef39a72f5f6b142e55d3d172ba495dde819b7641a51c253c2f4e83f2d0883 2537 dropbear_2020.81-4.dsc c7d8575fabb70ad6b402f70ca50c5b46343d42fc440f77be753bf23b66d790c0 30824 dropbear_2020.81-4.debian.tar.xz 224461575fb107ffc9e56b0b0092c2f7bee57d67ace4c4101b0c3f2c1993f0dd 6967 dropbear_2020.81-4_amd64.buildinfo Files: 6ff4a54c4a21cccd8543e97da53f0739 2537 net optional dropbear_2020.81-4.dsc 771793803107c1361746f0db219655d1 30824 net optional dropbear_2020.81-4.debian.tar.xz ff2cb8e6b11f333bfcd1516fc5281de2 6967 net optional dropbear_2020.81-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmEePXcACgkQ05pJnDwh pVL8NhAAl5PUEPsHlAR4f9Cik97P+nwtvXu0aXfp60XsZKzoXGTdFwX86QOxCcAs ziIcratUK6MznaGGBeKKWuumAz8AGZcIYmN8v+FPsgcnUMxFTQKZy/9NX7gSGj5C Rzid4lbeg3WeJ6VomEDPQl01P6geZP2PmOL7rAt98O6PeRtapH6mVVDQhUPFtXqy IXCQdTPgElM5EWIKLp/hgzRLPZPlqhhdByXoYYr9ZKjUTI81TD0MPoaOYzbaG44+ gV6lxiOcjnWDQqr8cXlM0oCKSCTEIcg9MSdIGtocnupu3mxvRycp66vtDAtiSFno h1PgxtaiAHq0pq5RxrgVBaILikrUnek9vCHLgi/AZPqOuwRPjLhUitPchWeMsrFM 2nCNniG2xIZVPu5mB0SQrR4NzUn3nih3zEF9jZb8deyJAILcrANTa7u6yg4DsHFY UKweunbO5zS++Ru5E+b5hbRQQPWAN3S9uqPoJI4+xxjk+M2WawAbsMJNzFGUscLB r0mRHl2zhEG65J5bQVy0dxPeRLOHwSauBwlHxGsQENv9lMIR3e8cL5deGWbl/EI5 TOC35T5txfNa2c+Xb+Pfwge/OdaEtFXJzw+EWyNcmfmeOIJg5XGy8BN/PNsPIxdi wv8r2IvVLNokkBJT7C5cxiTcRRPlAOTXnWryBZ1yex0b9C6lCyA= =Yi5e -----END PGP SIGNATURE-----