v1.1

First release where CML daemons, the scd and tpm2d, are running inside so called units. A unit is a special type of container using the internal compartment implementation for isolation. I.e. the userns is unshared and device access restrictions are applied. However, no cgroup resource isolation are applied as well the host file system is used inside units.

What's Changed

• Dev access by @quitschbo in #525
• Cleanup network interfaces in container instead of c0 by @mpeltzer-dev in #526
• daemon: Remove logs upon retrieval by @davidsonntag in #527
• daemon/cc_mode/control: enable log removal feature by @davidsonntag in #528
• daemon/c_user,cmld: Increase and refactor UID_MAX by @MPeisl in #531
• daemon/c_seccomp/seccomp: Disable SYS_mknod on riscv by @quitschbo in #530
• Cryptfs fstrim + FDE fix by @quitschbo in #532
• common/event: Always check timers after epoll by @k0ch4lo in #534
• Split install paths by @jwsbck in #536
• common/sock: Modify socket Permissions by @ddiasalmeida in #533
• Reload BPF program in starting state by @mpeltzer-dev in #537
• daemon/c_cap: Do not drop CAP_IPC_LOCK by @davidsonntag in #539
• daemon/compartment: Fix NULL dereference for double init env sources by @jwsbck in #540
• daemon/c_servce: Fix log message by @k0ch4lo in #542
• treewide: Adapt to updated clang formatting by @k0ch4lo in #543
• Handling of keyfile corruption during key unwrap by @quitschbo in #544
• daemon/control: Fix log removal in case of failure by @davidsonntag in #546
• daemon/device_config: device_config_get_audit_size() return uint64_t by @quitschbo in #547
• daemon/c_vol: Use DM_LAZY_CHECK_ONLY build flag by @quitschbo in #541
• Unit compartment by @quitschbo in #545
• scd/scd: Limit hw_name and hw_serial value by @ewachter-dev in #555
• deamon: Introduce STORE_ONLY mount type by @jwsbck in #557
• common/logf: add condition to the unlink mechanism by @ewachter-dev in #559
• A/B Update by @jwsbck in #556
• daemon/c_run: avoid double free on readloop error by @quitschbo in #560
• Jenkinsfile: Test tqmlx2160a instead of tqma8mpxl for PRs by @jwsbck in #561
• daemon/c_run: maintain per session write buffers for pending data by @quitschbo in #562
• common/network: Add netlink-based routing rule and route management by @davidsonntag in #564
• daemon/c_net: change evalution macro of c_net_is_veth_used by @ewachter-dev in #566
• Unit compartment refactoring, start tpm2d in unit by @quitschbo in #558
• A/B Update improvements by @jwsbck in #563
• Unit compartments, audit and tpm fixes by @quitschbo in #567
• daemon/guestos_mgr: fixed some arch specific format strings by @quitschbo in #568
• scd: refactor token api by @MPeisl in #565
• Some security fixes by @quitschbo in #569
• bugfixes concerning units by @quitschbo in #572
• A/B Update improvements by @jwsbck in #574

New Contributors

• @ddiasalmeida made their first contribution in #533
• @ewachter-dev made their first contribution in #555

Full Changelog: v1.0...v1.1

v1.0

Original release date: Feb 25, 2025 (c0d878a)

What's Changed

• Jenkinsfile: mark static analysis error as unstable by @quitschbo in #79
• cmld: introduce mount type for bind mounting files by @quitschbo in #78
• Fixed: Missing java_package in some protobuf files by @quitschbo in #81
• Feature/automatic code formatting by @0xd35a2ee in #85
• some bugfixes for cmld to crashes by @quitschbo in #87
• Enable compile- and link-time binary hardening by @0xd35a2ee in #77
• Bug fixes by @0xd35a2ee in #89
• cmld: Forward usb devices to container by @quitschbo in #88
• Fix missing syntax version by @Heosuabi in #92
• Bugfixes by @quitschbo in #93
• daemon/control: Properly answer to unsupported commands. by @quitschbo in #98
• Feature: Make userns available for trustx by @quitschbo in #94
• cmld: fixed error signaling on container start through control by @quitschbo in #99
• Feature: private netns for c0 by @quitschbo in #95
• cmld: Shift ids of cgroups in case of userns is enabled by @quitschbo in #102
• Bugfixes by @quitschbo in #103
• Bugfixes for device population in 'usernamespaced' containers by @quitschbo in #104
• Bugfixes by @k0ch4lo in #105
• device tree filtering and bugfixes by @quitschbo in #106
• Introduce one-way comunication from c0 to other containers by @k0ch4lo in #107
• Bugfixes by @quitschbo in #108
• use c0 as uplink for CML by @quitschbo in #110
• Bugfixes by @quitschbo in #111
• Jenkinsfile: compress artifact with xz by @quitschbo in #112
• service/service.c: only run signal handlers if running with pid 1 by @quitschbo in #114
• allow reboots in containers by @quitschbo in #113
• private mount for cml and several bugfixes by @quitschbo in #115
• Fix preprocessor definitions by @ceppleaisec in #116
• Shiftfs fix + default route in containers + Jenkins fix by @quitschbo in #117
• daemon/container: fixed memory allocation for init_env by @quitschbo in #118
• General fixes by @0xd35a2ee in #120
• swtpm-docker: add 'libseccomp-dev' to dependencies by @ceppleaisec in #119
• Bugfix for push_guestos_config by @quitschbo in #121
• fixed guestos partition flashing for updates by @quitschbo in #122
• Hardening of mem.c, add support for a testing harness, bug fixes by @0xd35a2ee in #123
• Bugfix for mem_free triggered assertions by @quitschbo in #124
• device.proto: update the default c0 OS to 'trustx-coreos' by @ceppleaisec in #125
• Fix and harden heap buffer allocation sites by @0xd35a2ee in #126
• Remove NULL ptr assertion in mem_free by @0xd35a2ee in #129
• Bug fixes by @0xd35a2ee in #128
• Separate development from production build by @0xd35a2ee in #130
• download of updates by local file:// url by @quitschbo in #131
• daemon/uevent.c: fixed device node creation and runtime net if handling by @quitschbo in #132
• Bugfixes by @quitschbo in #133
• common/nl: use unspecific nlattr instead of rtattr by @quitschbo in #134
• correctly move wifi interfaces using generic netlink nl80211 by @quitschbo in #138
• Own subsystem for FIFO code + fixes by @k0ch4lo in #139
• Security fixes and code cleanup by @quitschbo in #140
• Fixed is_selinux_enabled() by @k0ch4lo in #142
• Pipeline by @quitschbo in #143
• Feature/usbtoken by @ceppleaisec in #144
• Fix memory corruption bug in guestos_mgr_register_newca() by @SaschaWessel in #146
• Fix memory corruption bug in smartcard_push_cert() by @SaschaWessel in #147
• Rename network interfaces on cmld startup by @k0ch4lo in #145
• Minor makefile adaptions + bugfixes by @k0ch4lo in #150
• daemon/uevent.c:disbale tracing ouput by default by @ceppleaisec in #151
• [WIP] Feature/usbtoken apdu relay by @ceppleaisec in #152
• Bind token comm socket to corresponding container by @k0ch4lo in #153
• Feature: Hostedmode for cmld to allow cmld to run inside standard linux distributions by @quitschbo in #154
• Lsb conform builds + bugfixes by @quitschbo in #155
• Adapt interface addtion in hosted mode by @k0ch4lo in #156
• control: Password handling and control flow by @quitschbo in #157
• daemon/guestos_mgr.c: fix ca_register by @ceppleaisec in #160
• Sanity checks added, fixed typos and small bugs by @jpecholt in #158
• Implementation of new time namespaces + proper subtree mounting + consistency fixes by @quitschbo in #159
• some c_run fixes and simplifications by @quitschbo in #161
• usbtoken: increase APDU buffer size by @ceppleaisec in #164
• Fixes for the APDU-Relay by @k0ch4lo in #165
• Updated certificate format check by @jpecholt in #162
• Properly activate and handle ram_limit of containers + fixes by @quitschbo in #166
• Exec process with cap_sys_time in container with enabled userns by @quitschbo in #168
• Handle token attachment and detachment + related fixes by @k0ch4lo in #169
• Fixes uevent handling by @quitschbo in #171
• README.md: Added DCO documentation by @quitschbo in #173
• Minor leak fixes and additional checks by @jpecholt in #163
• Enhanced cleanup on container destruction by @ceppleaisec in #172
• Feature usb pin reader by @smo4201 in #170
• Assign netif by mac and fixed netdev assignment (mainly in uevent) by @quitschbo in #176
• uevent: properly handle coldboot for containers by @quitschbo in #180
• Fixes by @smo4201 in #178
• Uevent fixes by @quitschbo in #181
• Feature cmd limitation by @smo4201 in #177
• Uevent and c_net refactoring by @quitschbo in #182
• Feature: Lxcfs + Fix Setup mode by @quitschbo in #183
• daemon/c_cgroups: more restrictive white list for devices by @quitschbo in #184
• daemon/control.c: Refactored handling of privileged and unprivileged messages by @smo4201 in #186
• daemon: Introduce container config signature validation by @quitschbo in #187
• daemon/smartcard.c: Fix container being created even if its usbtoken could not be by @ceppleaisec in #192
• daemon/container: keep GuestOS version of signed container configs by @quitschbo in #193
• daemon/container: keep states for encrypted volumes during reboot by @quitschbo in #194
• Pin entry improvements by @smo4201 in #189
• control: add support for signed containers + help text by @quitschbo in #195
• common/cryptfs: use internal ioctl wrapper for non glibc builds by @quitschbo in #190
• tpm2d: allow to start tpm2d without initializing keys for attestation by @quitschbo in #196
• scd/usbtoken: apdu relay info as TRACE by @ceppleaisec in #197
• Fixes by @smo4201 in #198
• Lxcfs fixes by @quitschbo in https://gith...

v0.1.1

daemon c_vol.c: restructured to remove overlayfs code duplications