kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
rhel8
s390-tools/CHANGELOG.md
Marc Hartmayer 074de1e14e genprotimg: add host-key document verification support 
Add host-key document verification support to genprotimg. This ensures
that a host-key document is genuine and provided by IBM. For this the
user must provide the IBM Z signing key, the intermediate CA
certificate (signed by the root CA used) so a chain of trust starting
from the host-key document and ending in the root CA can be
established.

By default, genprotimg tries to download all revocation lists needed
by looking up in the corresponding certificate on how CRL information
can be obtained (see https://tools.ietf.org/html/rfc5280#section-4.2.1.13
for details).

Acked-by: Patrick Steuer <patrick.steuer@de.ibm.com>
Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
2020-11-18 11:28:35 +01:00

14 KiB
Raw Permalink Blame History

Release history for s390-tools (MIT version)

  • v2.15.x (2020-xx-xx)

    For Linux kernel version: 5.x

    Changes of existing tools:

    • hsci: New tool to manage HSCI interfaces
    • genprotimg: Add host-key document verification support

    Bug Fixes:

  • v2.15.1 (2020-10-28)

    For Linux kernel version: 5.9

    Changes of existing tools:

    • lsstp: Improve wording and fix typos in man page
    • zkey: Ensure zkey and friends are skipped with HAVE_OPENSSL=0
    • zkey: Add library versioning for libekmfweb and zkey-ekmfweb
    • libutil: Add function to determine base device of a partition block device

    Bug Fixes:

    • dasdfmt: Fix bad file descriptor error when running on symlinks
    • libdasd: Fix dasd_get_host_access_count()
    • zipl: Fix multivolume dump
    • zgetdump: Fix device node determination via sysfs to work with multivolume again
    • genprotimg/boot: Fix build by disabling SSP
    • zipl/boot: Fix build by disabling SSP

  • v2.15.0 (2020-10-15)

    For Linux kernel version: 5.9

    Add new tool:

    • lsstp: A small utility to display the Server Time Protocol (STP) information present in sysfs

    Changes of existing tools:

    • dumpconf: support NVMe dump/reipl device
    • ipl_tools: support clear attribute for nvme re-IPL
    • zcrypt: Support new config state with lszcrypt and chzcrypt
    • zkey: Add support for key management system plugins including the KMS commands: bind, unbind, info, configure, rencipher, list, import, refresh
    • zkey: Add EKMFWeb support to remotely generate secure keys
    • libekmfweb: Add new EKMFWeb client library
    • libutil: Add util_file_read_va()
    • libutil: Add util_file_read_i()/util_file_read_ui()

    Bug Fixes:

    • cpumf: Fix version and help printout when CPUMF is not installed
    • ziomon/ziorep_printers: fix virtual adapter CSV output
    • zipl: Fix Error when title is not the first field in BLS file

  • v2.14.0 (2020-08-21)

    For Linux kernel version: 5.7 / 5.8

    Changes of existing tools:

    • cpacfstats: Add ECC counters
    • dbginfo: Added collection of /proc/softirqs
    • ipl-tools: Add nvme device support to lsreipl/chreipl
    • zdsfs: Add coordinated read access
    • libzds: Add curl interface to access zosmf rest api
    • util_opt: Change util_opt_init() to honor current command, if set Bug Fixes:
    • lsluns: Try harder to find udevadm
    • mon_tools: Update udevadm location
    • zipl: Fix NVMe partition and base device detection
    • zipl/stage3: Correctly handle diag308 response code
    • znetconf: Introduce better ways to locate udevadm

  • v2.13.0 (2020-05-06)

    For Linux kernel version: 5.5 / 5.6

    Add new tool:

    • genprotimg: Add genprotimg to create protected virtualization images
    • genprotimg: Add sample script to verify host keys

    Changes of existing tools:

    • dbginfo: Gather bridge related data (using 'bridge')
    • dbginfo: Removed collection of /var/log/opencryptoki/
    • dbginfo: collect softnet_stat
    • dbginfo: gather ethtool output for per-queue coalescing
    • ipl_tools: Support clear attribute for FCP and CCW re-IPL
    • zdev: Report FC Endpoint Security of zfcp devices
    • zdev/dracut/95zdev/module-setup.sh: Add ctcm kernel module
    • cpumf/data: Add new deflate counters for IBM z15
    • zkey: Add support for EP11 secure keys
    • zpcictl: Initiate recover after reset
    • zipl: Add support for NVMe devices
    • zipl: A multitude of code and stability improvements

    Bug Fixes:

    • zipl: Prevent endless loop during IPL
    • zipl/libc: Fix potential buffer overflow in printf
    • zkey: Fix listing of keys on file systems reporting DT_UNKNOWN
    • zkey: Fix display of clear key size for XTS, CCA-AESCIPHER, and EP11-AES XTS keys

  • v2.12.0 (2019-12-17)

    For Linux kernel version: 5.4

    Changes of existing tools:

    • dbginfo: Gather qdisc related data (using 'tc')
    • dbginfo: Gather extended network statistics (using 'ip link')
    • dbginfo: Collect all files under /usr/lib/systemd/system/
    • cpumf/cpumf_helper: Add IBM z15 machine name
    • zkey: Display MKVP when validating a secure key
    • zkey: Cross check APQNs when generating, validating, or importing secure keys, and when changing APQN associations
    • zkey: Check crypto card level during APQN cross checking
    • zkey: Add support for generating, validating, and re-enciphering AES CIPHER keys
    • zkey-cryptsetup: Add --to-new and --from-old options
    • zkey-cryptsetup: Allow setkey to set different key types
    • lszcrypt/chzcrypt: CEX7S exploitation support
    • zcryptstats: Add support for CEX7 crypto card
    • zipl: Ship a minimal zipl.conf
    • zipl: Add value of target= as search path for BLS case

    Bug Fixes:

    • dasdview: Fix exit status in error cases
    • zipl: Fix various compile warnings
    • zipl: Fix dependency generation in zipl/boot
    • zipl: Fix entry point for stand-alone kdump
    • zipl: Add missing options to help output

  • v2.11.0 (2019-09-06)

    For Linux kernel version: 5.3

    Changes of existing tools:

    • dasdfmt: Add support for thin-provisioned volumes
    • lsdasd: Add support for thin-provisioned volumes
    • libdasd: Provide function to utilise release space ioctl
    • libdasd: Provide function to read ese sysfs attribute
    • dbginfo: Add lspci (PCI devices) and smc_dbg (SMC sockets)
    • dbginfo: Gather ethtool related data

    Bug Fixes:

    • zipl: Fix freeing of uninitialized pointer
    • zipl: Set correct secure IPL default value

  • v2.10.0 (2019-07-31)

    For Linux kernel version: 5.2

    Changes of existing tools:

    • zdev: Add zfcp dix parameter handling
    • cpumf: Add support for CPU-Measurement Facility counters SVN 6

    Bug Fixes:

    • libutil: Add functions to test path is read/write-only
    • zdev: Fix reporting of read-only sysfs attributes
    • zdev: Improve handling of invalid udev rules
    • zipl: Fix stfle zero padding
    • zipl: Fix build issues
    • zipl: Remove trailing spaces from the fields defined in BLS files
    • zipl: Do not overwrite BOOT_IMAGE entry
    • zkey: Fix auto-detection of clear key bitsize for XTS keys

  • v2.9.0 (2019-05-21)

    For Linux kernel version: 5.0 / 5.1

    Add new tool:

    • zcryptstats: Add zcryptstats to display usage statistics of IBM Crypto Express adapters

    Changes of existing tools:

    • lszfcp: New command line option to show module parameters
    • lszfcp: Sdev attributes for scsi_disk, block, integrity, queue, iosched
    • lszfcp: Add new output marker for non-good SCSI devices (luns)
    • lszfcp: Add new output marker for non-good fc_rports
    • lszfcp: Clean up whitespace (mixed indentation, trailing)
    • lschp: Add support for specifying a CHPID
    • zipl: Add secure boot capabilities
    • zkey: Add common passphrase options for cryptsetup and crypttab
    • zkey: Add batch-mode option to cryptsetup and zkey-cryptsetup
    • libu2s: Remove the entire library and provide more robust functionality in libdasd and libutil instead

    Bug Fixes:

    • lszfcp: Allow to show zfcp_units without associated SCSI device
    • lszfcp: Attribute details for: css, zfcp_port, zfcp_unit
    • lszfcp: Allow to also enumerate FCP device that have never been online
    • lszfcp: Fix error message if no zfcp-attached SCSI device found
    • lszfcp: Fix to show defunct FCP devices again
    • lszfcp: Fix to show non-good target ports again
    • lszfcp: Fix missing block & sg device output without CONFIG_SYSFS_DEPRECATED
    • lszfcp: New command line option for extended output format
    • zfcpdbf: Warn about ambiguous payload records with dup reqid & payarea
    • zpcictl: Check for regular directory to prevent possible buffer overflow

  • v2.8.0 (2019-02-15)

    For Linux kernel version: 4.20

    Changes of existing tools:

    • Switch to using /run directory instead of the legacy /var/run
    • zkey: Add --pbkdf pbkdf2 to generated cryptsetup luksFormat command
    • zdsfs: Add online VTOC refresh
    • pkey: Support autoloading kernel pkey module

    Bug Fixes:

    • zkey: Avoid EPERM on key change if user is not owner of key file
    • cpumf/cpumf_helper: Always return list reference for --sfb-size

  • v2.7.1 (2018-12-13)

    For Linux kernel version: 4.19

    Changes of existing tools:

    • zkey: Enhance file read/write error handling
    • cmsfs-fuse: Write more than a single line in linefeed mode
    • zpcictl: Add warning for unsupported operations
    • zipl: Use the BLS "title" field as the IPL section name

    Bug Fixes:

    • cmsfs-fuse: Fix iconv buffer aliasing
    • cmsfs-fuse: Fix memory leak in cmsfs_rename()
    • fdasd: Fix possible integer overflow
    • fdasd: Fix resource leak in fdasd_parse_conffile()
    • zdev: Fix memory leak in misc_readlink()
    • dasdinfo: Display error messages on stderr
    • zkey: Include /sbin into PATH when executing commands
    • Makefile: Fix parallel build
    • GCC8 warning fixes across the board for: cmsfs-fuse, dasdinfo, dasdview, dump2tar, fdasd, hmcdrvfs, hyptop, ip_watcher, libvmdump, libvtoc, lsqeth, lszcrypt, qethqoat, zdev, zdsfs, zgetdump, zipl, zpcictl

  • v2.7.0 (2018-10-31)

    For Linux kernel version: 4.19

    Add new tool:

    • zcryptctl: Add zcryptctl for multiple zcrypt node management
    • zpcictl: Add zpcictl for reporting defective PCI devices

    Changes of existing tools:

    • qethqoat: Add OSA-Express7S support
    • lszcrypt: Add support for alternative zcrypt device drivers
    • zfcpdump: Add install script for zfcpdump
    • zipl: Make zipl work with XFS by using the FIEMAP mapping ioctl

    Bug Fixes:

    • lstape: Fix output with SCSI lin_tape and multiple paths to same unit
    • lstape: Fix output without SCSI generic (sg)
    • lsluns: Fix to prevent error messages if there are non-zfcp SCSI devices
    • lstape: Fix to prevent error messages if there are non-zfcp SCSI devices
    • lstape: Fix description of --type and filter for channel tapes
    • lstape: Fix SCSI output description in man page
    • lstape: Fix SCSI HBA CCW device bus-ID e.g. for virtio-scsi-ccw
    • Direct --help and --version output to stdout for several tools
    • osasnmpd: Start without real OSA devices

  • v2.6.0 (2018-08-10)

    For Linux kernel version: 4.18

    Add new tool:

    • zkey: Add zkey-cryptsetup tool Changes of existing tools:
    • netboot: add BOOTIF support

    Bug Fixes:

    • mon_procd: fix parsing of /proc//stat
    • netboot: Include compressed kernel modules in initramfs
    • netboot: Send client architecture and handle path prefix

  • v2.5.0 (2018-06-08)

    For Linux kernel version: 4.17

    Changes of existing tools:

    • zdev: Add support for reading firmware configuration files
    • zipl: Add BootLoaderSpec support
    • scripts: Add script to switch zipl config to a BootLoaderSpec setup

    Bug Fixes:

    • lsluns: Print a message if no adapter or port exists

  • v2.4.0 (2018-05-07)

    For Linux kernel version: 4.16

    Changes of existing tools:

    • dbginfo: Gather nvme related data
    • zipl: Rewrite helper script in C
    • libutil: Add function util_strstrip
    • libvmcp: Introduce libvmcp
    • zipl: Extend DASD stand-alone dumpers to drop zero pages
    • zgetdump: Add verbose option
    • zgetdump: Add 'Dump file size' field for zgetdump -i output
    • cpumf: Add IBM z14 ZR1 to the CPU Measurement Facility model list
    • zkey: Add build dependency to OpenSSL (libcrypto)
    • zkey: Add keystore implementation

    Bug Fixes:

    • hmcdrvfs: fix parsing of link count >= 1000
    • zgetdump: Avoid Segfault on processing dumps with memory limit
    • chreipl: correct fcp reipl sysfs write sequence
    • udev: Replace WAIT_FOR with TEST keyword

  • v2.3.0 (2018-01-30)

    For Linux kernel version: 4.15

    Changes of existing tools:

    • lscpumf: Add support for IBM z14 hardware counters
    • libdasd: Introduce libdasd and use for dasd tools
    • zipl: Always build and link without PIE

    Bug Fixes:

    • zgetdump: Fix handling of DASD multi-volume dump for partitions above 4 GB
    • zdev: Fix zdev dracut module aborting on unknown root device

  • v2.2.0 (2017-12-07)

    For Linux kernel version: 4.14

    Removed tools:

    • lsmem/chmem: Moved to util-linux >= 2.30

    Changes of existing tools:

    • lszcrypt: Add CEX6S support
    • cpuplugd/mon_tools: Improve systemctl start error handling
    • systemd: Install also the unit configuration files

    Bug Fixes:

    • build process: Fix parallel build for libutil
    • cpi: Add missing Install section to service unit
    • lsluns: Do not scan (all) if filters match nothing
    • lsluns: Enhance usage statement and man page
    • zdev: Use correct path to vmcp binary
    • ziomon: Re-add missing line in ziomon_fcpconf
    • ziomon: Fix non-zero return code in ziomon_util
    • zipl: Remove invalid dasdview command line option

  • v2.1.0 (2017-09-25)

    For Linux kernel version: 4.13

    Added new tools:

    • netboot: Scripts for building a PXE-style netboot image for KVM
    • 90-cpi.rules/cpictl: New udev rule to update CPI when KVM is used

    Changes of existing tools:

    • lsqeth/zdev: Add VNIC Characteristics support

    Bug Fixes:

    • chzcrypt: Corrected handling of insufficient permissions
    • cpacfstats: Add size setting to perf event
    • fdasd: Skip partition check with the force option
    • ttyrun: Fix deprecated BindTo usage in ttyrun-getty@.service.in
    • lszcrypt: Fix core dump caused by stack overwrite
    • lszcrypt: Fix random domain printout when no config available
    • zdev: Fix segfault with unknown qeth attribute
    • zdev: Fix IPv6 NDP proxy description
    • zdev: Fix zdev dracut module temp file location
    • zkey: Correctly detect abbreviated commands
    • zkey: Validate XTS key: ignore domain and card
    • zkey: Use octal values instead of S_IRWX* constants
    • zkey: Properly set umask to prohibit permissions to group and others
    • zkey: Add -ldl to LDLIBS (not LDFLAGS)
    • znetconf: Re-add missing line in lsznet.raw
    • Fix several gcc 7 warnings

  • v2.0.0 (2017-08-21)

    • Publish package under the MIT license with the same contents as the already available s390-tools-1.39.0

Previous releases of s390-tools can be found on the IBM Developer Works web pages:

Reference in New Issue View Git Blame Copy Permalink