Containers only

To improve the sysupgrade security and reproducibility I decided to use containers instead of running the ImageBuilders bare-metal. The advantage is that broken or malicious packages have a harder time breaking the server itself. Previously package post-install script could modify anything on the server.

With this approach I also added the possibility to add external package feeds that are trusted. To do so a client may request extra repositories by supplying repositories and repository_keys in a request. Details are available in the OpenAPI specifications.

With all the great stuff of containers and Podman, whenever Podman acts up the server is broken so I spent quite some time restarting dead Podman sockets or cleaning left-over containers which wouldn't be cleaned up (contrary the API docs).

All in all I'm happy with the change and suggest everyone to use this release instead of the old one.

What's Changed

• build: use podman for image creation by @aparcar in https://github.com/openwrt/asu/pull/478
• minor fixups of podman-compose by @aparcar in https://github.com/openwrt/asu/pull/510
• api: use generic images for armsr target by @mcbridematt in https://github.com/openwrt/asu/pull/519
• Multiple fixes to make Podman work and simplify the setup by @aparcar in https://github.com/openwrt/asu/pull/577
• fix: correctly handle rc container names by @aparcar in https://github.com/openwrt/asu/pull/578
• build: store request in job for easier debugging by @aparcar in https://github.com/openwrt/asu/pull/580
• drop flask-cors package by @aparcar in https://github.com/openwrt/asu/pull/582
• poetry: update by @aparcar in https://github.com/openwrt/asu/pull/583
• sign created images after build by @aparcar in https://github.com/openwrt/asu/pull/587
• janitor: don't delete old images by @aparcar in https://github.com/openwrt/asu/pull/589
• workarounds for next release by @aparcar in https://github.com/openwrt/asu/pull/602
• Add 23.05.0 stable release by @vincejv in https://github.com/openwrt/asu/pull/606
• fix package adding with diff_packages: False by @aparcar in https://github.com/openwrt/asu/pull/627
• add package_changes.py by @aparcar in https://github.com/openwrt/asu/pull/637
• branches: add 23.05.2 by @dgilman in https://github.com/openwrt/asu/pull/657
• openapi.yml: fix "defaults" maxLength documentation by @bam80 in https://github.com/openwrt/asu/pull/693
• Update README.md by @UltraHKR in https://github.com/openwrt/asu/pull/721

New Contributors

• @mcbridematt made their first contribution in https://github.com/openwrt/asu/pull/519
• @vincejv made their first contribution in https://github.com/openwrt/asu/pull/606
• @dgilman made their first contribution in https://github.com/openwrt/asu/pull/657
• @bam80 made their first contribution in https://github.com/openwrt/asu/pull/693
• @UltraHKR made their first contribution in https://github.com/openwrt/asu/pull/721

Full Changelog: https://github.com/openwrt/asu/compare/v0.7.20...v0.8.0