All notable changes to the meta-container-deploy layer are documented in this file.
The format is based on Keep a Changelog.
- Documentation updated with SBOM/Provenance in features list (9e560f3)
- SBOM/Provenance support: Automatic digest resolution at build time for all configuration methods (61cf61a, f6b8e0f)
- Container image tags are resolved to immutable SHA256 digests
- Digest manifest written to
/usr/share/containers/container-digests.json - Digest manifest deployed to
DEPLOYDIRfor external CI/CD tooling (fcb7aa2) - OCI labels extraction (title, version, revision, source, licenses)
- Inherit deploy class for proper DEPLOYDIR support (f0e5d64)
- Company attribution in LICENSE file (7d0ecc3)
- Private registry support: Authentication, TLS verification, and custom CA certificates (81d863b, ee54d23)
AUTH_FILE/auth_secretfor registry authenticationTLS_VERIFYoption to disable certificate verification for self-signed certsCERT_DIRfor custom CA certificate directories- Improved error messages for authentication and TLS failures
- Documentation updated with private registry configuration examples (2c8e36f)
- Advanced container options across all configuration methods (ef413a5):
- Health checks (command, interval, timeout, retries, start_period)
- Security options (seccomp, apparmor, selinux, no_new_privileges)
- Resource limits (memory, CPU, ulimits, pids_limit)
- Logging configuration (driver, options)
- DNS settings (servers, search domains, options)
- Additional mounts (tmpfs, bind propagation)
- rootfs-expand: Fixed arithmetic errors with lsblk output (e2d0cb5)
- rootfs-expand: Use
-dflag to get device size without children (4463915) - rootfs-expand: Ensure kernel sees new partition size before filesystem resize (932a7e7)
- rootfs-expand: Use sfdisk instead of cloud-utils-growpart as fallback (19a98d5)
- rootfs-expand: Use shell arithmetic instead of bc for portability (77c7476)
- rootfs-expand recipe: Automatic root filesystem expansion on first boot (939789e)
- Supports ext2/ext3/ext4, btrfs, xfs, and f2fs filesystems
- Supports SD cards (mmcblk), NVMe, and SATA/USB drives
- Systemd service for automatic execution
- Container image verification: Pre-pull and post-pull verification (4435134)
- Pre-pull verification using
skopeo inspect(optional, enable withCONTAINER_VERIFY) - Post-pull verification of OCI structure (default)
- Deterministic task hashes with file-checksums and vardeps (091780b)
- Skopeo output now flows to task logs for better debugging (7d9590f)
- Podman pod support: Atomic multi-container deployments (d38683a)
- Pod definitions in YAML manifests
- Quadlet
.podfile generation - Shared networking, volumes, and resource limits for pods
- Initial release of meta-container-deploy layer (0f985f1)
- Four configuration methods:
- Method 1: Direct recipe using
container-image.bbclass - Method 2: local.conf variables using
container-localconf.bbclass - Method 3: YAML/JSON manifest using
container-manifest.bbclass - Method 4: Packagegroup combining multiple container recipes
- Method 1: Direct recipe using
- OCI image pulling at build time using skopeo-native
- Quadlet
.containerfile generation for systemd integration - First-boot container import service
- Support for Yocto Scarthgap and Styhead releases