[ubuntu/resolute-proposed] swtpm 0.10.1+ds-1ubuntu2 (Accepted)
Lena Voytek
lena.voytek at canonical.com
Tue Jan 6 14:11:16 UTC 2026
swtpm (0.10.1+ds-1ubuntu2) resolute; urgency=medium
* d/control: Remove gnutls-bin runtime dependency, using openssl instead.
swtpm (0.10.1+ds-1ubuntu1) resolute; urgency=medium
* Merge with Debian unstable (LP: #2126004).
This is the first merge of swtpm histories between Debian and Ubuntu. As
such, all superficial differences in the packaging have been removed in
favor of matching Debian to reduce delta. Non-trivial changes from Debian
include:
- Addition of swtpm-libs binary package containing swtpm common libraries.
- Addition of swtpm-dev binary package containing files for the CUSE
interface.
- d/copyright cleanup.
- Additional patches:
+ increase-poll-timeout.patch: Double poll timeout to account for when
swtpm creates a key.
+ automake-do-not-remove-checked-in-selinux-source-files.patch: Avoid
cleaning up checked-in SELinux source files on distclean.
+ automake-remove-more-generated-files-on-distclean.patch: Remove
additional unneeded files on distclean.
+ swtpm-install-sysusers.d-and-tmpfiles.d-configs.patch: Install
sysusers.d and tmpfiles.d configs and remove swtpm-tools.postinst from
configure.ac inclusions.
+ tests-Retry-NVWrite-command-after-0x922-return-code.patch: Retry
NVWrite command in tests after 0x922 return code.
- Add hardening=+all
- Use --without-selinux in configuration.
- Include binaries in self-tests.
- Add command-line autopkgtest.
* Remaining changes:
- d/t/run-tests: Add autopkgtest to run upstream test suite.
- d/swtpm-tools.postinst: Include upstream packaging fixes in postinst.
- Use swtpm user for swtpm to avoid overloading tss user already used for
physical tpm ACLs (LP #1949060).
+ d/rules: Set tss user in configure.
+ d/swtpm-tools.postinst: Swap from tss user to swtpm user.
+ d/control: Add adduser dependency to swtpm-tools for creating swtpm
user.
- d/p/openssl-not-certtool.patch: Use openssl at runtime, not certtool.
- d/control: Add openssl runtime dependency to swtpm-tools.
- Add apparmor profile to swtpm (LP #1950631).
+ d/usr.bin.swtpm: Create new apparmor profile.
+ d/swtpm.install: Copy apparmor profile to /etc/apparmor.d/.
+ d/rules: Deploy the swtpm apparmor profile.
+ d/control: Add dh-apparmor as a dependency.
- d/clean: Clean man and gch files from source tree during build.
- d/rules: Add dh_clean override from upstream.
- d/p/fortify-source.patch: Add patch to force the buildsystem to build
with -D_FORTIFY_SOURCE=3.
- d/rules: Ignore make check tests when nocheck option set.
* Dropped Changes:
- d/p/no-autoconf-in-debian.patch
[Included in swtpm-install-sysusers.d-and-tmpfiles.d-configs.patch]
- d/swtpm-tools.install: swtpm_setup and swtpm-localca manpage inclusions.
[Files removed upstream in 0.8]
* d/NEWS: Add NEWS file to document changes from this initial Debian merge.
Date: Mon, 05 Jan 2026 11:21:05 -0500
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/swtpm/0.10.1+ds-1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Mon, 05 Jan 2026 11:21:05 -0500
Source: swtpm
Built-For-Profiles: noudeb
Architecture: source
Version: 0.10.1+ds-1ubuntu2
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2126004
Changes:
swtpm (0.10.1+ds-1ubuntu2) resolute; urgency=medium
.
* d/control: Remove gnutls-bin runtime dependency, using openssl instead.
.
swtpm (0.10.1+ds-1ubuntu1) resolute; urgency=medium
.
* Merge with Debian unstable (LP: #2126004).
This is the first merge of swtpm histories between Debian and Ubuntu. As
such, all superficial differences in the packaging have been removed in
favor of matching Debian to reduce delta. Non-trivial changes from Debian
include:
- Addition of swtpm-libs binary package containing swtpm common libraries.
- Addition of swtpm-dev binary package containing files for the CUSE
interface.
- d/copyright cleanup.
- Additional patches:
+ increase-poll-timeout.patch: Double poll timeout to account for when
swtpm creates a key.
+ automake-do-not-remove-checked-in-selinux-source-files.patch: Avoid
cleaning up checked-in SELinux source files on distclean.
+ automake-remove-more-generated-files-on-distclean.patch: Remove
additional unneeded files on distclean.
+ swtpm-install-sysusers.d-and-tmpfiles.d-configs.patch: Install
sysusers.d and tmpfiles.d configs and remove swtpm-tools.postinst from
configure.ac inclusions.
+ tests-Retry-NVWrite-command-after-0x922-return-code.patch: Retry
NVWrite command in tests after 0x922 return code.
- Add hardening=+all
- Use --without-selinux in configuration.
- Include binaries in self-tests.
- Add command-line autopkgtest.
* Remaining changes:
- d/t/run-tests: Add autopkgtest to run upstream test suite.
- d/swtpm-tools.postinst: Include upstream packaging fixes in postinst.
- Use swtpm user for swtpm to avoid overloading tss user already used for
physical tpm ACLs (LP #1949060).
+ d/rules: Set tss user in configure.
+ d/swtpm-tools.postinst: Swap from tss user to swtpm user.
+ d/control: Add adduser dependency to swtpm-tools for creating swtpm
user.
- d/p/openssl-not-certtool.patch: Use openssl at runtime, not certtool.
- d/control: Add openssl runtime dependency to swtpm-tools.
- Add apparmor profile to swtpm (LP #1950631).
+ d/usr.bin.swtpm: Create new apparmor profile.
+ d/swtpm.install: Copy apparmor profile to /etc/apparmor.d/.
+ d/rules: Deploy the swtpm apparmor profile.
+ d/control: Add dh-apparmor as a dependency.
- d/clean: Clean man and gch files from source tree during build.
- d/rules: Add dh_clean override from upstream.
- d/p/fortify-source.patch: Add patch to force the buildsystem to build
with -D_FORTIFY_SOURCE=3.
- d/rules: Ignore make check tests when nocheck option set.
* Dropped Changes:
- d/p/no-autoconf-in-debian.patch
[Included in swtpm-install-sysusers.d-and-tmpfiles.d-configs.patch]
- d/swtpm-tools.install: swtpm_setup and swtpm-localca manpage inclusions.
[Files removed upstream in 0.8]
* d/NEWS: Add NEWS file to document changes from this initial Debian merge.
Checksums-Sha1:
b6c9165ac85f6c68c7279145839fb45ed651d308 2569 swtpm_0.10.1+ds-1ubuntu2.dsc
01e3c387804b6643abc85a4fde8732c869f6198a 309776 swtpm_0.10.1+ds.orig.tar.xz
57489072779669ad672f7aa10f8d72da957699fb 17792 swtpm_0.10.1+ds-1ubuntu2.debian.tar.xz
269b418a4b8c436fba5cf4982bcee4b16d938fb7 9358 swtpm_0.10.1+ds-1ubuntu2_source.buildinfo
Checksums-Sha256:
2c91904ebe03f9db025e3f39b488188926349cc849c5c10cdcae4c44845dc7a4 2569 swtpm_0.10.1+ds-1ubuntu2.dsc
bbecbe844fa84b1db0c26ade347374e5073e10c59df226066e04ce0ee09f105f 309776 swtpm_0.10.1+ds.orig.tar.xz
951fd3972c39ea4e1772c6ff8b9cb8b078d972b272cba2501286bd359c4754bf 17792 swtpm_0.10.1+ds-1ubuntu2.debian.tar.xz
c4cfb049b66ea9f6460b4cfd7e3c37e9ab7d6465a6c70ede10019abfa513162b 9358 swtpm_0.10.1+ds-1ubuntu2_source.buildinfo
Files:
e7f3c5dc97c18c77230584fcd0cd3a8f 2569 misc optional swtpm_0.10.1+ds-1ubuntu2.dsc
4e970efb7da8a190436823e0b6661e32 309776 misc optional swtpm_0.10.1+ds.orig.tar.xz
99335faec0efae5cf7f1ff42dfc3e2a7 17792 misc optional swtpm_0.10.1+ds-1ubuntu2.debian.tar.xz
b03306bcf5a31f8d75e6091161cd4665 9358 misc optional swtpm_0.10.1+ds-1ubuntu2_source.buildinfo
Original-Maintainer: Luca Boccassi <bluca at debian.org>
Vcs-Git: https://git.launchpad.net/~lvoytek/ubuntu/+source/swtpm
Vcs-Git-Commit: a132afab3ab8f09d8146099325c3125dbac583fd
Vcs-Git-Ref: refs/heads/remove-gnutls-runtime-depends
More information about the Resolute-changes
mailing list