Release 2.0.0

sha256sums

e74b1d4c9f2ea133dd8c97c6c8ff6c2394f41c99b59258178e5ed57be7579ace  voidvault-2.0.0.tar.gz

Release Notes

As promised, this release contains support for LUKS2 and 2FA. Unfortunately, issues with upstream dracut prevent either of these features from working correctly. I decided to release 2.0.0 a bit prematurely — albeit not without considerable personal usage and testing in the interim — because too many breaking changes had worked their way into the master branch. For the highlights, see: CHANGES.md.

Release 1.16.0

sha256sums

e5c65969c9355a3f54359bece8b9c715b698f56aede7674df766ae7c4ed9674d  voidvault-1.16.0.tar.gz

Release Notes

This release adds several new features and optimizations.

1. The --packages flag

It’s now possible to specify additional packages to install during bootstrap via the newly added --packages flag.

Because users can pass --packages "<list of space separated packages>", VV now installs less packages by default. The philosophy behind the packages installed is to reflect base-minimal with light additions to enable booting Void with FDE and obtaining an internet connection.

2. Support for multiple --repository flags

Users can now pass the --repository flag more than once. This can be used in combination with --packages for installing custom templates residing in a local repo on disk, e.g.

# build binpkgs elsewhere then transfer to live installer
voidvault \
  --packages="my-custom-template my-other-custom-template" \
  --repository=/home/user/voidpkgs/hostdir/binpkgs \
  --repository=https://ftp.swin.edu.au/voidlinux/current \
  --repository=https://ftp.swin.edu.au/voidlinux/current/nonfree \
  --ignore-conf-repos \
  new

3. The --enable-serial-console flag

Serial console can now be enabled in the bootstrapped system, but see #10 for caveats.

4. Btrfs: Alter checksum algorithm and compression

Replace the default crc32c checksum algorithm with xxhash.

Replace compress mount option with compress-force for additional space savings

5. Update arch-install-scripts integration to v24

Notable for fixing repetitive btrfs subvolume mount options in /etc/fstab.

6. Demote nftables log spam to info level

Nftables log spam clobbering the virtual console is now a thing of the past.

7. Modernize OpenSSH configuration

Use post-quantum key exchange algorithm (sntrup761x25519-sha512@openssh.com) in anticipation of this becoming standard in an upcoming release of OpenSSH.

ChallengeResponseAuthentication has been renamed to KbdInteractiveAuthentication.

Set MaxSessions 1 to disable SSH session multiplexing as a security measure.

Further lock down sftp with ForceCommand internal-sftp -d %u -P symlink,hardlink,fsync,rmdir,remove,rename,posix-rename.

Upcoming Features

v1.16.0 marks the last stable release before the v2.0.0 development cycle begins.

The next major version will add support for LUKS2 and 2FA.

Release 1.15.0

sha256sums

d0a33227639c44b1cb40b7fa4f499e6e1fdff08cc385d328194a7b7f3d8b792c  voidvault-1.15.0.tar.gz

Release Notes

Void recently switched from LibreSSL to OpenSSL. The latest Void live image (2021-09-30) ships OpenSSL, unlike previous live images. Voidvault v1.15.0 no longer attempts to install/upgrade LibreSSL before bootstrapping the system.

Voidvault should continue working on legacy live images until their use of LibreSSL alone begins to break the Voidvault installer. If Voidvault can reach the bootstrapping stage with an unupgraded version of LibreSSL, then bootstrapping should continue functioning properly on legacy Void live images. However, it isn’t known how the use of unupgraded LibreSSL might interact with dependant software e.g. cryptsetup. To quote the documentation:

It's best practice to always use the newest version of the official Void installation medium.

Release 1.14.0

sha256sums

0d4978025ec4bd71912623304ca427d0c9135fdcbfbe280f419c96bc77194334  voidvault-1.14.0.tar.gz

Release 1.13.0

sha256sums

b7f84ce4fc7ed74c3da6213e3deea6b31860207945a268cbd1c82aed3aa19cb2  voidvault-1.13.0.tar.gz

Release 1.12.0

sha256sums

dc86e3455e2319ec016a330610adb7ce6f098c3181365128de5d69fa18a08835  voidvault-1.12.0.tar.gz

Release 1.11.1

sha256sums

754e6df388d3c0719b946895a4a4203671016fbbd767439a96728764db960510  voidvault-1.11.1.tar.gz

Release 1.11.0

sha256sums

5bdf8456e011fe7c302e2bb2ba03d35ff00b8f7ca20f5ebd315fa061392bc802  voidvault-1.11.0.tar.gz

Release 1.10.0

sha256sums

660aa5d5a4aac87fe79e1ef9a88375750710642da9d23681154dae89f6def63d  voidvault-1.10.0.tar.gz

Release 1.9.1

sha256sums:

f83c70381b2a39076e695cdb4a6ce8de28ecd629dadcf6b4df8f2c96f86de47d  voidvault-1.9.1.tar.gz