1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
Major changes in 0.4.7
======================
* Enabled build of libxdg-app by default, now the API is stable
enough for e.g. gnome-software to use it.
* Restructured the command line interface to xdg-app, it is now
more streamlined and easy to use. For instance, to install
both apps or runtimes, now use "xdg-app install $name".
The old commands still work, but are deprecated and not
in the docs.
* xdg-app-builder has gotten a bunch of new features that
makes it easier to build apps, and some initial work to
make it possible to create runtimes using it
* build-export now finds and export any app-info installed by
the app, and build-update-repo collects all such exports
into a per-repo branch for appstream and icons.
* The client (and libs) support for locally mirroring the appstream
branch for each remote. This allows use to create graphical appstores
with user-readable information and icons.
* On the client side one can now specify priorities for each
remote.
Major changes in 0.4.6
======================
* Added an initial version of libxdg-app, a highlevel library
intended to be used by user interface frontends to xdg-app.
It is not yet API stable, so it is disabled by default.
Enable with --enable-libxdgapp
* Added xdg-app-builder, a separate tool that makes it easier to build
applications with external dependencies.
* Add support for single-file bundles, which can be a useful way
to distribute apps on e.g. a usb stick. Only works with the
latest version of ostree.
* Always allow apps to talk to the built-in portals
* Support granting read-only access to the filesystem with e.g. --filesystem=host:ro
* Add /run/user/$uid/xdg-app-info file that contains the current permissions of the app
* Add --writable-sdk option to xdg-app build-init
* Add file locking to better handle concurrent xdg-app operations like update and install
* Various fixes
Major changes in 0.4.5
======================
* Support signing commits in build-export
* Correctly handle symlinks in host root when app has host-fs access
* Always regenerate summary after build-export
* Make uninstall a bit more robust
* Install the dbus introspection files
* Add human readable size to build-export report
* Add /dev/ptmx symlink in app
* Fix apps not getting SIGCHILD
* Only expose minimal /etc/[passwd|group] in app
Major changes in 0.4.4
======================
* Fix race condition in fuse fs
* Don't save uid/gid/xattrs in build-export
* run: Handle existing mounts with spaces in them
* propagate xauth cookies to sandbox
Major changes in 0.4.3
======================
* Build with older ostree
* Add --nofilesystem flag to e.g. xdg-app run
* Add xdg-app dump-runtime command
Major changes in 0.4.2.1
======================
* Fix dbus proxy
Major changes in 0.4.2
======================
* Fix build with older versions of glib
* Fix regression in filesystem access configuration
* Make seccomp use optional (for arches without it)
* Add xdg-app enter command to enter a running sandbox
* Fix /var/cache being readonly
* Add /var/data and /var/config shortcuts for per-app data
* Minor fixes to bash completion
Major changes in 0.4.1
======================
* Fixed a parallel build issue
* Fixed a build issue where openat() didn't get a mode passed
* Don't block ptrace and perf in debug and build runs
* Put nvidia drivers in sandbox if DRI allowed
* Support specifying a version for runtime extensions
Major changes in 0.4.0
======================
* A new permissions store was added to the dbus api.
This can be used by portal implementations that want to store
per-app permissions for objects.
* The document portal was added. This is a dbus api
which you can use to create document ids and assign
apps permissions to see these documents. The documents
themselves are accessed via a custom fuse filesystem.
* perf and strace are now blocked via the seccomp filters
* You can now override application metadata on a system
and per-user level, giving apps more or less access
than what they request.
* New command modify-remote added which lets you change
configuration of a remote after it has been added with
add-remote.
* Support for adding trusted gpg keys on a per-remote basis
has been added to add-remote and modify-remote.
* The repo-contents command has been renamed to ls-remote
to better match the other commands.
* The list-remotes command can now show more information
about the remotes.
* The bash completion implementation has been improved.
Major changes in 0.3.6
======================
* Fix a typo in the socket seccomp rules that made ipv6 not work
* Export the users fonts (~/.local/share/fonts or ~/.fonts) in the sandbox
* Fix seccomp rules to work on i386
* Make exposing xdg user dirs work right
|
