From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=MAILING_LIST_MULTI, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 16917 invoked from network); 14 Jun 2022 11:49:25 -0000 Received: from alyss.skarnet.org (95.142.172.232) by inbox.vuxu.org with ESMTPUTF8; 14 Jun 2022 11:49:25 -0000 Received: (qmail 25482 invoked by uid 89); 14 Jun 2022 11:49:48 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm Sender: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Received: (qmail 25466 invoked from network); 14 Jun 2022 11:49:47 -0000 From: "Laurent Bercot" To: "skaware@list.skarnet.org" Subject: [announce] skarnet.org Summer 2022 release Cc: "supervision@list.skarnet.org" Date: Tue, 14 Jun 2022 11:49:21 +0000 Message-Id: Reply-To: "Laurent Bercot" User-Agent: eM_Client/9.0.1708.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hello, New versions of some skarnet.org packages are available. skalibs has undergone a major update, mostly to yet again revamp librandom. This time I am happy with the API and implementation: I=20 believe it finally addresses all the cases in a satisfying way, providing cross- platform failure-free pseudorandom number generation with options to=20 choose between waiting until the entropy pool has been initialized and possibly getting less cryptographically secure data if the entropy pool is too shallow. It wasn't easy to design; it's here at last. Compatibility with previous skalibs version is not assured, but apart from librandom, and one additional function, no other interface has been modified, so the compatibility breaks are minimal and a lot of software will still build with this version without needing any modification. Most of the rest of the skarnet.org software stack has undergone at=20 least a release bump, in order to build with the new skalibs; a large part of=20 it has also received some changes and fixes. Some packages did not need changing at all: no release is provided for these, they should keep=20 building with the new stack. execline comes with a quality-of-life parser change: backslashes at the end of lines are now ignored, which makes it possible to directly copy some multiline commands from shell scripts. s6-linux-utils comes with a new utility, rngseed, which is an original implementation of Jason Donenfeld's seedrng[1]. This is the work that made it necessary to get librandom right once and for all. With rngseed, no Linux system should ever have uninitialized entropy pool problems=20 ever again. The new versions are the following: skalibs-2.12.0.0 (major) utmps-0.1.2.0 (minor) execline-2.9.0.0 (major) s6-2.11.1.1 (release) s6-rc-0.5.3.2 (release) s6-linux-init-1.0.8.0 (minor) s6-portable-utils-2.2.5.0 (minor) s6-linux-utils-2.6.0.0 (major) s6-dns-2.3.5.4 (release) s6-networking-2.5.1.1 (release) mdevd-0.1.5.2 (release) dnsfunnel-0.0.1.4 (release) Details of some of these package changes follow. * skalibs-2.12.0.0 ---------------- - librandom rewritten. random_init and random_finish functions removed. The new random_buf function, which replaces random_strin), never fails. It blocks if the entropy pool is not initialized; the new=20 random_buf_early function is the same, but does not block. random_devurandom is now exported, but should not be needed except in very specific cases=20 (rngseed). - New functions added: waitn_posix and waitn_reap_posix, openc*_at. - readnclose is now exported. - openreadnclose_at() now returns an ssize_t, aligning with=20 openreadnclose(). You should check your code for any use of openreadnclose_at(), and adapt=20 it to the new API. (Previously it returned a size_t and the user was=20 supposed to assume an error if it didn't fill the entire length of the buffer.=20 Now errors are reported with -1.) - Endianness conversion primitives reworked. The nonportability of=20 endian.h and bswap has always been a pain point; the new portable functions in=20 skalibs should now be just as efficient as the system-dependent endian.h=20 functions. - Added an implementation of the blake2s hash. https://skarnet.org/software/skalibs/ git://git.skarnet.org/skalibs * utmps-0.1.2.0 ------------- - Nothing to do with the new skalibs; utmps-0.1.2.0 has been available=20 for a while, but was never properly announced. The main feature is that utmps-wtmpd can now take an argument naming its database file. This is useful for implementing btmp, one of the numerous idiosyncrasies of=20 historic Linux software. https://skarnet.org/software/utmps/ git://git.skarnet.org/utmps * execline-2.9.0.0 ---------------- - Bugfixes. - The execlineb parser has been rewritten and its transition table is=20 now documented. - The wait command can now wait for *one* of the listed processes, in addition to its original capability of waiting for *all* of them. It can also stop waiting after a timeout. The new features can be used even=20 when wait is used in posix mode. https://skarnet.org/software/execline/ git://git.skarnet.org/execline * s6-linux-init-1.0.8.0 --------------------- - The system scandir is now configurable at compile-time via the --scandir configure option. It is a relative path under the tmpfsdir. The default is still "service", for a /run/service default scandir. https://skarnet.org/software/s6-linux-init/ git://git.skarnet.org/s6-linux-init * s6-portable-utils-2.2.5.0 ------------------------- - s6-test now understands the =3D~ operator, matching its left argument against an extended regular expression given as its right argument (this is originally a GNU bash extension to test). https://skarnet.org/software/s6-portable-utils/ git://git.skarnet.org/s6-portable-utils * s6-linux-utils-2.6.0.0 ---------------------- - New command: rngseed. It can read a seed file from the disk and use=20 it to seed the Linux kernel's RNG, wait until the entropy pool is initialized, and get a new seed and write it to the disk. All these operations can be performed separately - always in a secure fashion, but giving more=20 control to the user than the original seedrng[1] implementation. - s6-fillurandompool removed. Its functionality is implemented by=20 rngseed. [1] https://git.zx2c4.com/seedrng/about/ https://skarnet.org/software/s6-linux-utils/ git://git.skarnet.org/s6-linux-utils * mdevd-0.1.5.2 ------------- - This is only a bugfix release, but worth mentioning because the fixed bug is an important one. Previously, "-" markers, meaning "keep reading=20 the file after interpreting this line", did not interact correctly with spawned commands. This version implements the semantics of "-" markers=20 as it was intended. https://skarnet.org/software/mdevd/ git://git.skarnet.org/mdevd Enjoy, Bug-reports welcome. -- Laurent