Release: 0.14

Another bugfix release with two new commands

New commands

• export-enrolled-keys will export all enrolled keys on the system to a directory
• list-enrolled-keys will list the enrolled keys on the system

New things

The test suite has now been rewritten to use the new vmtest library.

Bugfixes

• sign-all won't abort when it encounters a file it can't sign.

Packaging changes

• The kernel-install hook won't try to sign things if there are no signing keys available.
• The kernel-install hook will now only remove things if they actually did exist on the system.
• The mkinitcpio hook now only sign the built kernel/UKI instead of all the sbctl files.

Generated list of changes

What's Changed

• 91-sbctl.install: don't sign without signing keys by @ajakk in #188
• Mention COPR package by @dngray in #274
• Add openSUSE to Installation in README by @photosheep in #279
• sign-all don't stop signing if one file does not exist anymore by @jvllmr in #280
• Update the mkinitcpio post hook to only sign the kernel/UKI which is currently being built instead of all the files in the sbctl database by @into-the-v0id in #285
• ci.yaml: use github container registry by @pheiduck in #288
• only remove entries if they are there by @hboetes in #294
• Add list-enrolled-keys command by @jimmykarily in #296
• Add Option ROM warning to Usage section of the manpage by @00-kat in #300
• Run integration using uroot by @jimmykarily in #302
• Add export-enrolled-keys command by @jimmykarily in #303
• Update README.md by @hboetes in #305

New Contributors

• @ajakk made their first contribution in #188
• @dngray made their first contribution in #274
• @photosheep made their first contribution in #279
• @jvllmr made their first contribution in #280
• @into-the-v0id made their first contribution in #285
• @pheiduck made their first contribution in #288
• @hboetes made their first contribution in #294
• @jimmykarily made their first contribution in #296
• @00-kat made their first contribution in #300

Full Changelog: 0.13...0.14