forked from flatpak/flatpak
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathNEWS
1569 lines (1378 loc) · 70.4 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changes in 1.0.1
================
This fixes various build and test failures that were detected when
packaging 1.0, as well as translations and doc udpates. It also
has some minor features, including a new subcommand "flatpak ps"
to list the running flatpak instances for your user.
* Print application tags in the prompt when installing/updating.
* Make sure we don't accidentally leak the host /proc into
the sandbox.
* Translation updates.
* Added a "flatpak ps" command that lists running flatpak instances.
* Improve error reporting when exporting documents.
* Improve detection of dynamic p2p remotes.
* Build fixes for older versions of glib.
* Fix threading issue in the OCI support that was causing the
installed tests to sometimes fail.
* Fix OCI AppStream support on 32bit architectures.
* Fix utf8 issue in the dbus API description.
* Some install fixes to make installed tests work
* Make the tests work with python3 (as well as python2)
* Improve introspection annotations in libflatpak
* Improve libflatpak API docs
Changes in 1.0
==============
Flatpak 1.0 is the first version in a new stable release series. This
new 1.x series is the successor to the 0.10.x series, which was first
introduced in October 2017. 1.0 is the new standard Flatpak version,
and distributions are recommended to update to it as soon as possible.
The following release notes describe the major changes since
0.10.0. For a complete overview of Flatpak, please see
[docs.flatpak.org](http://docs.flatpak.org/en/latest/).
## For users, app developers and distributors
Flatpak 1.0 marks a significant improvement in performance and
reliability, and includes a big collection of bug fixes. 1.0 also
includes a collection of new features, including:
* Faster installation and updates.
* Applications can now be marked as end-of-life. App centers and
desktops can use this information to warn users who have an end-of-life
version installed.
* Permissions now use an up-front verification model: users are
asked to confirm app permissions at install time, if an update
requires additional permissions, the user must also confirm.
* A [new portal](https://flatpak.github.io/xdg-desktop-portal/portal-docs.html#gdbus-org.freedesktop.portal.Flatpak)
allows apps to create sandboxes and restart themselves. This allows
applications to restart themselves after they have been updated (to
start using the new version), and to increase sandboxing for parts
of the application.
* `flatpak-spawn` is a new tool for running host commands (if
permissions allow) and creating new sandboxes from an app (this
uses the above portals APIs).
* Apps can now export D-Bus services for all the D-Bus names they are
privileged to own (rather than just the application ID).
* Flatpak's support for OCI bundles has been updated to the latest
specification. Also, AppData can now be distributed through OCI
repositories.
* Host TLS certificates are now exposed to applications, using
p11-kit-server. This removes a point of friction when accessing
network services in some environments.
* Apps can now request access the host SSH agent to securely access
remote servers or Git repositories.
* A new application permission can be used to grant access to
Bluetooth devices.
* A new `fallback-x11` permission grants X11 access, but only if the
user is running in a X11 session. For applications that support
both Wayland and X11, this can be used to ensure that the app
doesn't have unnecessary X11 access while in Wayland, but still
works in an X11 session.
* Peer-to-peer installation (via USB sticks or local network) is now
enabled and supported by default in all builds.
The Flatpak command line also introduces new commands and options, including:
* `uninstall --unused` automatically removes unused runtimes and
extensions (if you've removed all apps that depend on a runtime, or
all the apps you had depending on it have upgraded to a newer
version).
* New `info` options, including `--show-permissions`,
`--file-access`, `--show-location`, `--show-runtime`, `--show-sdk`.
* `repair` - fixes broken installs by scanning for errors, removing
invalid objects and reinstalling anything that's missing.
* `permission-*` - allows interaction with the portals permissions
store. This is useful for testing and for getting back to a clean
state.
* `create-usb` - can be used to prepare an repository to be used as a
local updates source.
Finally, the command line has a collection of other improvements, such as:
* If `--system` or `--user` aren't specified, one is automatically
picked if it is obvious (or it will ask if the correct option isn't
obvious).
* The `install`, `update` and `uninstall` commands now ask for
confirmation of changes before proceeding, in order to prevent
mistakes, and to show the required application permissions.
* The `uninstall` command now does not allow you to remove a runtime
if some installed application requires it.
* `flatpak remove` is now an alias for `flatpak uninstall`.
## For Linux distributors, OS and platform developers
* Flatpak no longer requires a filesystem that supports `xattr`.
* Portals are now more cleanly separated from Flatpak, thanks to the
document portal and permission store having been moved to
`xdg-desktop-portal`. It is recommended that the flatpak package has
a weak dependency on `xdg-desktop-portal`.
* `libflatpak` now has a transaction API for install, update and
uninstall operations. This means that it is much easier to use as
the basis of app centers and other graphical app management
software.
* Flatpak now sets several HTTP headers when installing applications,
which make it easier for Flatpak repositories to log things like
app download statistics and Flatpak versions in use.
* It is now recommended that Flatpak packages add a dependency on
p11-kit-server, as this allows apps to access host
certificates. However, this does not need to be a hard dependency.
* Requires bubblewrap 0.2.1 or later, and comes bundled with 0.3.0.
* Requires OSTree 2018.7.
Major changes in 0.99.3
=======================
* Fixed case where system install would sometimes fail
due to the system-helper idle exiting.
* Support installing flatpakref files in FlatpakTransaction,
including a new signal add-new-remote for when remotes
might be added.
* Added some new FlatpakError codes.
* We now support .flatpakrepo files with no gpg signatures
* Fix crash in system-helper when updating appstream
* New command create-usb which can be used to prepare
an repo for offline updates.
* Fix some non-handled cases of the CLI not working when
/var/lib/flatpak doesn't exist.
* Fix crash when running with a gid that is not in
/etc/groups.
* Add new permission-* commands to interact with the
permissions store from the portals.
* Include appdata in OCI bundle.
Major changes in 0.99.2
=======================
* Fix race condition on instance id allocation
* Translation updates
* Build fixes for new glibc versions
* Build fixes for new libsoup versions
* Build fixes for old glib versions
Major changes in 0.99.1
=======================
This is the first pre-release before flatpak 1.0. This is considered
feature-complete and we expect no features or major changes before
1.0, only bugfixes.
Note: There were some (minor) API changes in the FlatpakTransaction
APIs that were added in 0.11.8, so please don't use the old
version. (Note: I know of no user of this API).
Changes since last minor release:
* Ostree 2018.6 is required, and with this, the p2p code in
flatpak is made non-optional.
* flatpak install/update/ininstall now lists all the operations
that it will do and asks for confirmation before starting.
* In the above confirmation the permissions (new permissions
for updates) are shown for all applications.
* The FlatpakTranscation API has a new ::ready signal that
allows users to do similar confirmation prompts.
* P2P updates are more efficient
* system-wide installation uses less fsync calls so should
installation should be faster.
* New ssh agent permissions allows granting an app
ssh access.
Major changes in 0.11.8.3
=========================
* Fix a 25 second timeout on startup if using p11-kit < 0.23.10
* Minor change in dbus proxy default filter, now broadcasts are
not accepted from portals.
Major changes in 0.11.8.2
=========================
* Fix crash when building some apps
* Allow multiple appstream components per app
* Fix handling of gl drivers in uninstall --unused
* Don't prompt if nothing changed in uninstall --unused
* Longer timeouts in test suite
* Updated translations
Major changes in 0.11.8.1
=========================
* Fixed regression running apps with --own=* permissions
Major changes in 0.11.8
=======================
* Flatpak uninstall now accepts --all to remove everything and --unused to remove unused
runtimes.
* New command "flatpak repair" allows checking and repairing a flatpak installation.
* New permission --allow=bluetooth allows use of AF_BLUETOOTH sockets
* If p11-kit-server is installed on the host, this is now used to forward the host
certificate trust store to the sandboxed app.
* New transaction API in libflatpak that makes it much easier to implement
installation and updates in frontends.
* Flatpak uninstall now does not allow you to remove a runtime if some installed app requires it.
* We now have tab-completion for zsh.
* New installations of flatpak now defaults to bare-user-only repos, which means
that it works with filesystems that don't support xattrs.
* New flatpak info options: --show-location, --show-runtime, --show-sdk
* New flatpak remote-info options: --show-runtime, --show-sdk
* p2p operations now work when offline.
* Work around hanging on app startup on blocking autofs mounts.
* The dbus proxy filtering now works matches the new dbus containers filtering API.
* Various optimizations make installation and updates faster. In particular
operations like running triggers and pruning only happens once per
install/update operation.
* We now respect multiple extension versions matches when auto-downloading extensions.
* New http header Flatpak-Upgrade-From sent when upgrading.
* Commands like "flatpak info/list/remotes/seach" now work properly if /var/lib/flatpak doesn't exist.
* The bubblewrap version required for system-bwrap is now 0.2.1.
Major changes in 0.11.7
=======================
* Fix regression in installing .flatpak bundles
Major changes in 0.11.6
=======================
* Further work on the export filename regression, now also fixes the
same issue as in 0.11.5 but in flatpak build-finish.
* Fix segfault when installing from .flatpakref in gnome-software
* Build yacc parser from source.
* Don't tab-complete Sources/Locale/Debug extension by default.
* Fix tests on debian.
Major changes in 0.11.5
=======================
* Fix a regression which caused installation of epiphany and
other apps that export multiple .service files to fail.
* Fix appstream updates in p2p mode.
* Don't distribute generated gdbus code with tarball.
* Add documentation for the flatpak portal
Major changes in 0.11.4
=======================
* flatpak remove is now an alias for flatpak uninstall.
* flatpak uninstall now picks system or user automatically if not specified
* New appstream branch format which is more efficient to distribute,
the old is still generated for backwards compat.
* Appstream data now contains compatible arches (for applications
that doesn't exist for the primary arch). For example, an
i386-only app is now listed in the x86-64 appstream.
* The flatpak version is included in the user agent when downloading.
* The Flatpak-Ref http header is set to the currently installing ref when
downloading.
* New argument --timestamp in build-commit-from.
* When updating many apps we now only prune the local repo when all
updates are done, making multi-app updates faster.
* flatpak build now always allows multiarch use.
* flatpak build now mounts app extensions during build.
* flatpak build-init now supports --extension to add extension points earlier
than build-finish. Also build-finish now supports --remove-extension.
* New flatpak portal allows applications to sandbox themselves and restart a
newer version of themselves.
* New flatpak run options: --no-a11y-bus, --no-documents-portal.
* Initial support for end-of-life:ing applications.
* New option X-Flatpak-RunOptions in exported desktop/files allow you to specify
no-a11y-bus and no-documents-portal.
* Support for tagged extension points, which is useful if you want to use
the same extension id (but maybe different versions) multiple times in an app.
* We now export .service files for names that the app is allowed to own on
the session bus.
* libflatpak got new methods for listing remotes by type.
* libflatpak now has support in FlatpakRemoteRef for getting remote metadata
such as end-of-life, download size, metadata etc.
* There was some internal restructuring on how installs/updates are done
which should improve performance and maintainability.
Major changes in 0.11.3
=======================
* Fix "open with" and flatpak run --file-forwarding crash
* Fix build with glibc 2.27
Major changes in 0.11.2
=======================
* Remove fuse dependency, since we don't ship document portal anymore
* Fix various issues with /home being a symlink to /var/home (atomic)
* Allow downgrades when using collection ids
* Search on all supported architectures
Major changes in 0.11.1
=======================
This release removes the document portal and the permission store as they
have been added to xdg-desktop-portal 0.10. Packagers need to update
these two in lock-step. Flatpak technically doesn't depend on
xdg-desktop-portal, but it is recommended that the flatpak package
depends on xdg-desktop-portal in some way, because most flatpaks will
want it.
* Remove document portal and permission store
* Add --socket=fallback-x11 permission
* Fix dbus proxy vulnerability in authentication phase
* Allow personality syscall in devel mode
* commit-from: Migrate static deltas with commit
* Add "network" storage type for installations
* Add flatpak info --show-permissions
* Add flatpak info --file-access
* search: Update appstream (if stale) before searching
* Make libflatpak work when /var/lib/flatpak is empty
* build-bundle: Add --from-commit option
* Allow appstream ids that don't end in .desktop
* Make permission handling ignore unknown permissions for forwards
compatibility
* Removed incorrect error message in update --appdata when there
was no updates
* Fix handling of abort in the duplicate remote prompt
* Fix division by zero in progress calculation
* Fix flatpak remote-info --show-metadata
* Fixed crash when installing some flatpak bundle files
* Fix installation of telegram
* remote-ls -u only considers app from the origin remote
* Fix assertion error in extra-data progress reporting
* Report nicer errors when trying to downgrade as non-root
* pulseaudio: Try to find pulseaudio socket better
* Fixed some warnings reported by coverity
* Cleaned up code by splitting up some large source files
Major changes in 0.10.2
=======================
* Flatpak now requires OSTree 2017.14
* flatpak update now updates from both system and user installations
by default.
* flatpak update is less noisy when updating appstream info.
* All the remote-* commands now by default automatically decide to use
--user or --system based on the given remote name.
* flatpak remote-ls with no remote lists the content of all remotes
* Fixed regression that made xdg-user-dirs and theme selection
for kde apps break.
* flatpak override with no argument now overrides globally, i.e. for
all apps.
* flatpak override now supports --nofilesystem properly. For example
flatpak override --nofilesystem=~/.ssh hides the ssh dir for all
apps, even those who have homedir access.
* flatpak install now takes a --reinstall argument which uninstalls
a previously installed version if necessary. This is very useful
when you want to install a new version from a different source.
* flatpak install now allows you to pass an absolute pathname as
remote name, which will create a temporary remote and install
from that. The remote will be removed when the app is uninstalled.
This is very useful during development and testing.
* Flatpak now creates CLI wrappers for all installed apps, so if you
add /var/lib/flatpak/exports/bin or ~/.local/share/flatpak/exports/bin
to your PATH you can easily start flatpak apps by their application id.
Major changes in 0.10.1
=======================
* New command "flatpak remote-info" shows information about applications
in a remote. In particular the --log operation shows the history and
can be used in combination with flatpak upate --commit=XYZ to roll
back to a previous version.
* New command "flatpak search" which allows you to search the appstream
data from the commandline.
* flatpak update now upates appstream data for all confured remotes, which
is important for search to work.
* Allow automatic installation of gtk themes matching the active theme.
* Handle the case when /etc/resolv.conf is a symlink
* /usr an /etc are now expose in /run/host in the app if the app has
full filesystem access.
* flatpak remote-add now works as a user when /var/lib/flatpak is empty,
allowing flatpak to work on stateless systems.
* Add support for flatpak build --log-session/system-bus, similar to
what flatpak run already does.
* flatpak build --readonly runs with the target directory (normally /app)
mounted read-only.
* Fall back to LD_LIBRARY_PATH if a runtime doesn't have /usr/bin/ldconfig.
* Updated the support for OCI remotes. This is work in progress and still
disabled by default though.
Major changes in 0.10
=====================
This is the first release in a new series of stable releases called
0.10.x. New features will be added to 0.11.x, and bugfixes will be
backported to 0.10.x. During the early phase of the 0.10.x series we
may also backport minor features, but we guarantee backwards
compatibility.
Changes since 0.9.99
* Added the flatpak config option which can set the language settings
* Fix issue where sometimes ld.so.conf were not generated
* /dev/mali0 is added to --device=dri
* Work around ostree static delta issues in some cases
Major changes in 0.9.99
=======================
* Requires ostree 2017.12 for important pull stability fix
* New libflatpak API: flatpak_dir_cleanup_undeployed_refs, flatpak_installation_prune_local_repo,
flatpak_installation_remove_local_ref_sync, flatpak_installation_cleanup_local_refs_sync
* build: FLATPAK_ID and FLATPAK_ARCH are now set in the environment when building
* update: Don't fail the entire update if some remote fails to update its metadata
* run: /.flatpak-info now lists exact commits and extensions in use
* run: We now use a per-app ld.so.cache file whenn running. This should speed things up,
and allows ldconfig to report the correct results.
* The verbose mode was changed into two levels, use -vv to show the more detailed info, which
currently only contains the full bubblewrap argument lists.
* run: Some common problematic host environment variables are now unset in the sandbox
(PYTHONPATH, PERLLIB, PERL5LIB and XCURSOR_PATH)
* run: Fixed failure when a higher prio extensions depended on a lower prio one.
* run: The extension ld path order is now: app extensions, app, runtime extension, runtime.
This was previously incorrect in that the app could override app extensions.
* Extensions are now not downloaded if a matching unmaintained extension is already installed
* Preemptive changes to handle new bubblewrap change which doesn't user /newroot
* document portal: Disable debug spew that was accidentally enabled
* build-finish: New --extension-priority option
* run: Fix regression in --persist in 0.9.98
* run: Use sealed memfds (instead of just temporary files) when passing data to bubblewrap
Major changes in 0.9.98.2
=========================
* Fix permission denied when using the system-helper
Major changes in 0.9.98.1
=========================
* run: Fix homedir access if the app has --filesystem=host access
* build-update: Fix appstream update in case one arch didn't change
Major changes in 0.9.98
=======================
* libflatpak now correctly finds metadata for subset installations (like locale data)
* flatpak build now supports --appdir which exposes the per-app directory in the
user homedir. This is useful when testing builds.
* The host fontconfig caches are exposed to the sandbox, next to the fonts in /run/host.
This will (pending fontconfig work) allow sharing host fontconfig caches, allowing
much faster initial startup for flatpak apps.
* flatpak install now supports --no-pull
* Added new extension property "locale-subset", which makes the extension point
act like a locale extension (i.e. only install the subset configured by the
locale).
* flatpak remote-add --oci is disabled for now, as this is not up to date with
the latest OCI work, and we don't want to break existing deployments if this
has to change when this lands.
* Parallel installation/updates are now safe because we take a filesystem lock
whenever we prune the local ostree repo.
* Flatpak run now works when important paths like $HOME, etc, are symlinks.
* The ostree min-free-space property is is set to zero by default for the
flatpak repos. This was causing a lot of problems for people, but the feature
is still there if you manually enable it.
Major changes in 0.9.12
=======================
* Fixed a regression in extra-data installation
* Don't expose the a11y bus in flatpak build
Major changes in 0.9.11
=======================
* You can now show all outstanding updates with: flatpak remote-ls --updates
* The dbus filter "org.name.*" now means all subnames of org.name, not just
the first level. This matches how dbus arg0namespace works, and how the
comming dbus container support will work.
* Fixed segfauld on update
* Better commandline tab completion
* Flatpak now exposes host icons readonly as /run/host/share/icons to the sandbox.
Major changes in 0.9.10
=======================
Fix regression in dbus proxy that causes some apps to not
work in 0.9.9.
Major changes in 0.9.9
======================
flatpak-builder was split out into its own module:
https://github.com/flatpak/flatpak-builder
* When downloading to a temporary directory for later install to the
system repo we now write to /var/tmp instead of $HOME. This is more
likely to be the same filesystem as /var/lib/flatpak, and thus will
not run into issues with e.g. filesystem full.
* We now get the default language list from AccountService if possible.
* A regression that made --devel crash was fixed.
* New feature for flatpakrefs, SuggestRemoteName=remotename will cause
flatpak to ask if you want to create a generic (not app specific)
remote for the repo url.
* flatpak build now does not die with the parent by default, you have
to pass --die-with-parent. This was done because die-with-parent
uses PR_SET_PDEATHSIG which does not work well if the parent is
threaded, like e.g. gnome-software is.
* We now always re-set the personality in the sandboxed process
in order to avoid inheriting weird settings.
* We now share a single dbus proxy instance for all proxies for a sandbox.
* dbus-proxy now properly disallows old-style eavesdropping.
* We now support accessibility by starting a customized dbus proxy for the
a11y bus.
Major changes in 0.9.8
======================
Core:
* Experimental support for peer2peer installation, enable with --enable-p2p
* Add default language setting to flatpak config. Defaults to all locales for
system installs and the users locale for per-user installs.
* build-update-repo: Now always keeps the *two* latest deltas around to avoid
race conditions with outstanding downloads at the time or running the update.
* Support loading extra data from local lookaside cache.
Flatpak-builder:
* Set terminal title to the currently building module
* Added ability to specify http url for sources mirror with --extra-sources-url.
* --install-deps-from=REMOTE installs the dependencies needed for the
manifest.
* New option --delete-build-dirs to always delete build directories,
even on a failed build.
* New property "add-extension" makes it nicer to create extension points.
Major changes in 0.9.7
======================
* Don't re-download git repo when bundling sources
* Build modules with no source if buildsystem is "simple"
* Build cleanups
Major changes in 0.9.6
======================
This version requires the latest ostree version (2017.7) because it
uses a new feature that hardens the security of flatpak. Previously,
if you installed to a system-wide repository, the files created for an
application were as specified by the remote repo, but owned by root,
which could include problematic permissions like setuid or
world-writable. We now never create such problematic files or
directories on disk. Flatpak export was also changed to never
create problematic files in new apps.
Related to this, newly created flatpak installations also use the
new "bare-user-only" mode for the repositories, which means you
can now install applications even if your filesystem does not
support extended attributes.
Other changes:
* flatpak info --show-metadata now only shows the metadata, in
a machine parseable way.
* build-export now records the flatpak version in the commit message
* builder: The .pyc timestamp fixer now allows .pyc files with no
corresponding .py file.
* builder: New feature 'inherit-extensions' lets you copy extension
info from the parent runtime.
* builder: Set ExtensionOf in auto-created extensions (like Locale
and Debug)
* builder: Setting CPPFLAGS now works
Major changes in 0.9.5
======================
Changes in flatpak:
* Fix installation of installed tests
* Don't show an error when updating if a remote is disabled
* Store the app id in the X-Flatpak key when exporting a
desktop file.
* flatpak run: Handle paths when rewriting %u urls during
file forwarding.
* builder: Always assume separate builddir when using meson, as
meson only works with this.
* document-portal: The app-specific directory is always accessible
to the app, take this into consideration for AddFull.
* builder: Don't warn for unknown keys if they start with x-
* Fix a race condition whe restarting the document portal
* build-update-repo: Don't list removed deltas in the summary
* list: Don't show .Locale/.Debug/.Sources by default. Show with -a.
* remote-ls: Don't show .Locale/.Debug/.Sources, or non-primary
arches (unless the primary does not exist) by default.
Show with -a.
* dbus-portal: Fix handling of NameHasOwner
* builder: Add --export-only to export a previous build.
* run: Allow regular files for --filesystem=xdg-config/path
* run: Allow --filesystem=xdg-config/subdir:ro (previously
it needed to be writable).
* build-commit-from: Properly handle xa.ref when rewriting
refnames.
Major changes in 0.9.4
======================
Changes in flatpak:
* Now requires ostree 2017.6 and bubblewrap 0.1.8
* Better progress reporting in CLI and UI
* Improved output from commands info, list, remotes,
remote-ls: More detail, colors, nicer table formating.
* New command flatpak repo that lets you show information
about local repositories.
* When launching exported desktop files, the paths
passed to it are automatically created as documents
to allow access to the arguments, if needed.
* Flatpak install of an already installed application is
now a warning, not an error.
* flatpak build now kills all the processes in the
sandbox when it exits.
* flatpak update --subpath=... now updates the app event
if there is no new upstream version, but the subpath is
different from what is currently installed.
* Exports are now whitelisted, and the only thing you can
export are:
desktop files, icons, dbus services, mime definitions, and
gnome-shell search providers
* Exported gnome-shell search providers are automatically
disabled by default.
* Exported mimetypes are rewritten to only allow globs, and to
make the globs have a low priority vs system mime info.
* A remote can now redirect to a new URL and/or a new GPG key, by
using build-update-repo --redirect-url=URL --gpg-import=FILE.
When clients see this they permanently change the local configuration.
This is very useful when migrating official repositories.
* flatpak caches in the homedir are now stored in ~/.cache
(or $XDG_CACHE_HOME) instead of ~/.local/share/flatpak/system-cache.
* Added version field to all exported dbus interfaces.
* New AddFull method in the Document Portal, which allows
exporting multiple files, as-needed by a particular target
app. This is useful for implementations of dbus activation
for desktop files.
* New flag --no-static-deltas for install/update without
using static deltas. Mostly useful for debugging.
* TMPDIR is now unset in the sandbox, if set on the
host. Each sandbox has a personal /tmp that is used.
* Flatpak run now works if /tmp is a symlink on the
host.
* /etc/hosts and /etc/hosts.conf from the host are now exposed
in the sandbox in addition to /etc/resolv.conf.
* Titles and default branches are now automatically updated from
the remote unless they are explicitly set. You no longer have
to run flatpak remote-modify --update.
* Some performance inprovements when installing apps.
* When exporting a build, the commit objects now always include
the branchname, the metadata and install/download size.
The sizes are reused for faster summary building, and the
others changes are for future use. The fields are verified
against the deployed metadata during installation, so it
is trusted.
* Fixed minor race condition in portal application identification.
* lib: New flatpak_installation_update_appstream_full_sync method
that allows progress reporting.
* bash-completion: Fix out-of-bounds read that could produce
weird completion at times.
Changes in flatpak-builder:
* Added support for appdata screenshot mirroring.
* New property "install-rule" lets you change what Makefile rule to
use in the install phase.
* The git "commit" property can now specify both a tag object and the
commit object it refers to.
* New cppflags property, similar to e.g. cflags.
* The "env" property now overrides the cflags/cxxflags/ldflags
properties, to allow these to be reset.
* Initial checkout of git/bzr to a temporary directory so that errors
during checkout do not persist.
* Properly take the "buildsystem" field into account when calculating
cache freshness.
* Don't crash if appstream-compose fails.
* "ldflags" property now works correctly.
Major changes in 0.9.3
======================
Changes in flatpak-builder:
* "rename-icon" renames in translated icons too
* Moved manifest format docs to own manpage, "flatpak-manifest".
* "bootstrap.sh" is now recognized as an autogen.sh alternative
* Fall back to not using rofiles-fuse if it is not available.
* Make sure flatpak-builder --run grants the app access to dbus.
* Make paths paths for module includes and module dependencies
relative to the included module rather than the "base" json file.
* When cross-compiling 32bit apps on 64bit arches (like i386 on x86-64)
then we automatically set a linux32 personallity.
* Print warnings for unhandled json properties.
* Make sure flatpak-builder --run works if --extra-data is in the
finish args.
* Take build-commands into consideration when considering if the
build cache is stale.
* Support for --extra-sources= to pre-seed downloaded sources.
* Support for --bundle-sources which creates a runtime with the sources
that were used to build the app.
* Handle trailing whitespace in git submodule uris
* Progress reporting while downloading files.
Other changes:
* build-export now always exports directories as readable and executable.
* build-update-repo --generate-static-deltas now fork the work process
rather than using threads, which avoids problems with this using
a lot of memory in a single process in some cases.
* Report flatpak version in HTTP request user agent.
* New "flatpak repo" command added that has some options for maintaining
a repository.
* flatpak info can now report more information and handles multiple
installed branches better.
* Support non-default WAYLAND_DISPLAY environment var.
* Handle application ids that end with .desktop when generating
appstream data.
* Documentation updates
Major changes in 0.9.2
======================
* Fixed a use-after-free and some leaks in the dbus-proxy. This
is not currently believed to be exploitable, but the proxy is a
security boundary, so we still recommend to update.
* Regular updates now never allow updates to an older version
than what is currently installed (unless you explicitly specify
an old commit id). This closes a hole where a MITM attacker can
force clients to downgrade to an earlier (gpg-signed) version of
the application.
* The automatic detection of --from in flatpak install now detects
flatpakref extensions even in URIs that end in a query string such as
https://git.gnome.org/browse/gnome-apps-nightly/plain/gedit.flatpakref?h=stable
* OCI support now supports GPG signatures
* OCI support now works with the system-helper for unprivileged systemwide
installation.
* Experimental support for the new ostree bare-user-only repo mode that
allows flatpak to run on filesytems without xattrs. Set
FLATPAK_OSTREE_REPO_MODE=user-only in the environment to use this.
* builder: New property disable-fsckobjects for git sources
* builder: New property commit for git sources. This lets you specify
both a tag (for readability) and a commit id (to ensure the tag doesn't
change).
* builder: The manifest file format docs have been split out into its
own manpage.
* builder: App manifests now support specifying sdk-extensions that has
to be installed for the app to build.
* builder: When creating the platform, remove all sdk-specific extensions,
allowing creation of sdk-specific extensions.
* builder: Correctly handle absolute pathnames in the specified
command.
* builder: Support --default-branch which defined the branch to build in
case the manifest doesn't specify one.
* When exporting builds to ostree we now use the canonical permissions
for bare-user files, which means the resulting builds can safely
be used with the new ostree bare-user-only repository type.
* The detection of "unmaintained" system extensions was broken, and
in some cases these extensions were not found. This now always
works.
* Flatpak now builds with latest OSTree. This required some fixing for
multiple definitions of the g_auto* macros as OSTree now exports
those.
* We no longer rely on ostree trivial-httpd for the tests, because
this is optional in later versions of ostree. Instead we use
they python SimpleHTTPServer.
* The minimum glib version has been corrected to 2.44.
* The minumum automake version has been increased to 1.13.4
because some older version didn't work.
Major changes in 0.9.1
======================
This release mostly has changes to flatpak-builder and the build
machinery. All flatpaks built with this version can run
on flatpak 0.8.x, but there has been additions and minor
changes in flatpak-builder that may require minor changes
to existing builder manifests, see below.
The flatpak-builder build cache now uses an ostree feature called
rofiles-fuse. This allows the build to work directly against
hardlinked checkouts of the cache, because rofiles-fuse disallows
writes to the hardlinked files (but allows replacing them). This makes
cache commits and checkouts much faster. However, it also means that
installation cannot do in-place modification of files in the
installation directory. There is a new per-module property called
"ensure-writable" that takes a list of patterns and ensures all files
matching them are writable (by manually breaking the hardlinks). This
may need to be added to some manifests to keep them building in the new
version.
The cflags and cxxflags module properties now work by appending,
rather that replacing, when there are multiple values specified. For
instance, the per-arch or per-module cflags will be appended to the
base cflags. This may cause old json files do duplicate cflags in
some cases. Normally compiler flags are repeatable without problems
though, so it is unlikely to cause problems.
Here are a short summary of the rest of the flatpak-builder changes:
* The build cache was changed so that it is not invalidated if
the installed version of the SDK changed. This means that the app
will not rebuilt if you updated the SDK. This is generally the right
thing to do, as SDKs are meant to be compatible. If you want
to avoid this (for instance when building against an unstable sdk)
you can use the --rebuild-on-sdk-change argument.
* The build cache is now per-arch, so building on one arch doesn't
invalidate the cache for another arch.
* New buildsystem "cmake-ninja" which works like "cmake", but builds
using ninja, rather than make.
* New buildsystem "simple" which doesn't use configure or make, it
just runs a set of shell commands specified in the "build-commands"
property. Note: build-commands is also available to other buildsystems
and are run between make and make install.
* flatpak-builder now has build-runtime and build-extension properties that
makes it easier to build runtimes and extensions.
* FLATPAK_DEST is set in the build environment to the installation
destination (i.e. typically /app). It is particularly useful when
building an extension where the destination is more complex.
* flatpak-builder now supports --from-git=URL which pulls the
json manifest and related files directly from a git repo.
* modules have a new no-make-install property which skips
the make install step.
* Modules and sources have only-arches and skip-arches properties,
which lets you enable/disable them based on the build architecture.
* build-options has a new property ldflags, which is similar
to cflags and cxxflags.
* flatpak build (and thus flatpak-builder --run) now supports
dbus proxies when needed.
* All git repos are cloned with fsckObjects=true, which means
we verify that the repos are valid.
* New flatpak-builder argument --build-shell=MODULE extracts and
prepares the sources for a specified module and then starts
a build sandbox inside it.
There are also some other changes:
* build-export: Now supports --timestamp=ISO-8601-TIMESTAMP, which
allows you to create reproducible commits.
* The OCI support has been updated to the latest version of the
OCI image specification format.
* There is a new flatpak-bisect script that can be used to bisect
flatpak applications, looking for regressions.
* flatpak list got a revamp. It now shows more information, and
shows both apps and runtimes by default.
* flatpak remote-list was renamed flatpak remotes in order
to minimize confusion with flatpak remote-ls. The old name
is deprecated but still works.
Major changes in 0.8.4
======================
In addition to the regular list of bugfixes this stable release
include backports of one more feature required for making OpenGL work
well. Now extra-data using extensions (such as the nvidia driver) can
specify that it doesn't need a runtime to run its apply script. We use
this in the nvidia driver by making the script a static binary, which
lets us use the nvidia driver for multiple runtimes without requering
that a particular one is installed. We also support an extension point
supporting multiple versions, which will be use for sharing the
nvidia driver between different runtime versions.
Additional fixes:
* Documentation fixes
* Crash fixes
* Fix xauth propagation in some cases
* Don't remove origin remotes on uninstall if some other app
is installed from it.
* Don't reset what locales are installed when updating a locale
extension
* Disable splice for the documentation portal as it seems
to be broken in fuse
* Append, don't override XDG_DATA_DIRS in profile script
* Fix progress reporting in libflatpak to go from 0 to
100% once, merging the various phases.
Major changes in 0.8.3
======================
In addition to the regular list of bugfixes this stable release
include backports of a the updated OpenGL support from master. This,
in combination with the work in the runtime allows flatpak to work out
of the box with out-of-tree OpenGL drivers, including the nvidia
driver.
Additionally, due to some complicated issues wrt ptrace and user
namespaces this version disables the use of user namespaces if
bubblewrap is setuid, as it cause problems for the way flatpak
portals identifies applications. (See issue #557 for details)
* Better handling of errors for extra-data
* Handle extra-data properly for runtimes (as well as apps)
* Respect required version for runtimes (as well as apps)
* flatpak list: Don't break if some local ref is not deployed
* builder: Look for appstream data in /app/share/metadata also
* builder: Fix buildsystem=cmake builds
* Add progress reporting to extra-data download
* Fix uid/gid for directories in document portal
Major changes in 0.8.2
======================
This is a bugfix and security update.
Some of the bind-mounts that flatpak sets up were not read-only as
they should have. This includes: extensions, system fonts,
resolv.conf, localtime and machine-id. Many of thse are typically only
writable by root, but some, like the user-specific fonts and
user-installed extensions could be modified from the sandbox.
Everyone using 0.8.x is recommended to update to this version.
Other fixes:
* There are new configure options for where to install dbus configuration
* Broken symlinks in the root directory no longer break flatpak run
* flatpak run with HOME in /var now works
* dri access now also handles mali devices
* install handles --arch when installing flatpakrefs
* system-helper activation fixed on systemd-less setups
* dbus-proxy now works without /run
* During installation, failing to update a dependency is now not
fatal.
* /etc is now fully writable when building runtimes
* --filesystem=xdg-config/foo now sets up the bind-mount from the host dir
even when not using :create.
Major changes in 0.8.1
======================
This is a bugfix and security update (CVE-2017-5226).
Flatpak now uses seccomp to disallow the TIOCSTI ioctl in the sandbox,
which works around the possibility to inject text on the controlling
tty (CVE-2017-5226).
This was previously fixed in bubblewrap in 0.1.6, but that change has
now been reverted as it introduced other problems for flatpak.
* Update bundled bubblewrap to 0.1.7
* Fix writing new file with O_EXCL in the document portal.
* Allow appstream data that doesn't have .desktop in the component id,
such as data for runtimes.
* Drop json-glib dependency from 1.2 to 1.0
* Builder: Fail if unable to read included file
* OCI: Ensure exported layers are readable by everyone
* Fix extra-data download in gnome-software
* Fix update-mime-database trigger when installing via
the system helper.
* Updating an app by installing a newer bundle now works
again.
* Make /var/tmp not be on a tmpfs (it is now in
~/.var/app/$appid/cache/tmp).
* Documentation / translation updates
Major changes in 0.8.0
======================
This is the first release in a new series of stable releases called
0.8.x. New features will be added to 0.9.x, and only bugfixes will be
backported to 0.8.x. The featureset of this release is a good base to
target if you're creating flatpaks that should be widely usable.
This release technically requires only OSTree 2016.14, and it build
fine with this, but we recommend using OSTree 2016.15, because of the
change in how it verifies the checksums of commits in delta files.
* Flatpakrepo files now support a RuntimeRepo= key which points to
a flatpakrepo file. This means the user don't have to manually
configure a remote for the runtime, just reply to the prompt
to automatically do this when installing the app.
* We now support dependencies when installing bundles. This includes
required runtimes, related refs, and the equivalent of RuntimeRepo.
* The support for OCI in flatpak has been updated to the latest
OCI spec version, and support has been added to directly install
flatpak applications from an OCI image.
* In flatpak install, the --from and --bundle options are now optional
if the argument has the correct suffix (.flatpakref and .flatpak)
* Flatpak install now supports -y to let you avoid interactive prompts.
* build-finish: We now export mime type files with the right name.
* build-finish: New --require-version option let you specify a particular
version of flatpak, and older version of flatpak will not install
or update to the new version.
* build-sign: Allow signing all apps by omitting the id.
* Fix regression in the document portal when adding named files.
* build-import-bundle now signs the commit if you specify a gpg key.
* Flatpak now reads configuration from /etc/flatpak/installations.d
which lets you support multiple system-level installation paths.
These can be accessed with new --installation=... arguments to
most of the commands.
* flatpak-builder: Support --jobs=N to limit parallel builds