2.0.0-pre2

• Architecture and Core Changes:

  • Split pre-and-post-Fastboot phases for better reliability
  • Add support for multiple Fastboot devices with improved
    device tracking
  • Add support for state tracking database with SQLite
  • Add WebUI for provisioning management and monitoring
  • Remove TUI (Python-based) provisioning interface

• Provisioning Modes and Device Support:

  • Introduce FDE-Only, Naked and Secure-Boot provisioning modes
  • Add support for Zero 2W (2710) devices
  • Improve JTAG lock configuration

• Performance Improvements:

  • Implement ethernet data transfer when available for faster
    provisioning
  • Use sparse boot images for improved performance
  • Restructure environment setup and cleanup processes
  • Enhance timeout handling with reduced fatal timeouts

• Security and Reliability:

  • Add branch protection and other hardening measures
  • Enhance error management and logging across all provisioners
  • Add manufacturing database integration and device metadata
    collection
  • Remove DEMO_MODE from all components

• UI and Configuration:

  • Add customisation scripts to the WebUI
  • Add version check and GitHub link in WebUI
  • Add Debian hardening options and build improvements
  • Removed RPI_DEVICE_FETCH_METADATA, we now always fetch metadata

• System Integration:

  • Add systemd service integration
  • Fix lintian warnings and implement proper systemd service
    handling
  • Increase specificity in device handling and ignore rpiboot
    mass-storage endpoint

2.0.0-pre

FOR TESTING ONLY

What's Changed

1. Architecture
2. Performance
3. Options

Consult the README or manpage for more information.

v1.3.6

What's Changed

• Make timeout_nonfatal less fatal by @tdewey-rpi in #129
• 1.3.6: Sparse, ethernet fixes by @tdewey-rpi in #131

Full Changelog: v1.3.4...v1.3.6

v1.3.4

What's Changed

• Delete all mention of DEMO_MODE by @tdewey-rpi in #120
• sb-provsisioner: Use ethernet if available by @tdewey-rpi in #110
• debian/source: Ignore .git in tar by @tdewey-rpi in #125
• Use rpi-make-boot-image by @tdewey-rpi in #126
• Fixup manpage generation by @tdewey-rpi in #127
• Update 1.3.4 changelog by @tdewey-rpi in #128

Full Changelog: v1.3.3...v1.3.4

v1.3.3

What's Changed

• SECURITY.md: Update for 1.3.2 by @tdewey-rpi in #117
• Fixup Debian control attributes, add manpage by @tdewey-rpi in #109
• Remove unsafe retry mechanism for partial signing situations by @tdewey-rpi in #118
• meta: v1.3.3 by @tdewey-rpi in #119

Full Changelog: v1.3.2...v1.3.3

Assets re-uploaded February 10th due to apt repository import failures, no code changes

v1.3.2

What's Changed

ALL USERS ARE STRONGLY ENCOURAGED TO UPDATE TO THIS VERSION.

• README: rpi-sb-provisioner is installable from apt! by @tdewey-rpi in #98
• Set SOURCE_EEPROM_IMAGE using rpi-eeprom-update logic by @roliver-rpi in #100
• README: Reference CM5, CM5IO by @tdewey-rpi in #93
• provisioner: Attempt automatic pre-signed device recovery by @tdewey-rpi in #102
• security: Update cryptroot_image fom pi-gen-micro 0.3.0 by @tdewey-rpi in #115
• Meta/v1.3.2 by @tdewey-rpi in #116

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Update SECURITY.md: v1.3.0 onward only. by @tdewey-rpi in #83
• Generate depmod info whilst augmenting initramfs by @roliver-rpi in #87
• Keypair retrieval fixes by @roliver-rpi in #88
• Python TUI requires sudo by @tdewey-rpi in #92
• Allow specifying FDE cipher via RPI_DEVICE_STORAGE_CIPHER by @roliver-rpi in #95
• v1.3.1: Release by @tdewey-rpi in #96

Full Changelog: v1.3.0...v1.3.1

v1.3.0

What's Changed

• CRITICAL: Update to pre-boot authentication image to more reliably open the encrypted container.
• Fix re-enable command by @Siecje in #74
• Remove unused DISK_IDENTIFIER by @Siecje in #75
• Introduce the Device Manufacturing Database, and private key extraction support by @tdewey-rpi in #80

Full Changelog: v1.2.1...v1.3.0

v1.2.1

What's Changed

• service: Remove extraneous disk-id parameter by @tdewey-rpi in #71
• README: How to disable rpi-sb-provisioner by @tdewey-rpi in #72
• meta: v1.2.1 by @tdewey-rpi in #73

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• debian/control: Add missing python3-virtualenv build dep by @tdewey-rpi in #58
• Fixup monitor status watching by @tdewey-rpi in #60
• Improve observability by @tdewey-rpi in #61
• provisioner: Don't eat timeout errors by @tdewey-rpi in #62
• Fix 'Failed' handling by @tdewey-rpi in #63
• Cleanup systemctl_python by @Siecje in #65
• Cleanup config by @Siecje in #66
• Cleanup validator by @Siecje in #64
• Monitor: Find completed devices correctly. by @tdewey-rpi in #67
• v1.2.0: Changelog by @tdewey-rpi in #68
• v1.2.0: Security Policy update by @tdewey-rpi in #69

Full Changelog: v1.1.1...v1.2.0