From f5476a0a1ca49ab2a12a5696e4ae9da2f3607559 Mon Sep 17 00:00:00 2001 From: Brian Fjeldstad Date: Mon, 31 Aug 2026 11:18:57 -0700 Subject: [PATCH 1/4] trident: update to version 0.27.0 --- SPECS/trident/trident.spec | 52 +++++++++++++++++++++++++++----------- 1 file changed, 37 insertions(+), 15 deletions(-) diff --git a/SPECS/trident/trident.spec b/SPECS/trident/trident.spec index 60149f4e3d9..f557fb07214 100644 --- a/SPECS/trident/trident.spec +++ b/SPECS/trident/trident.spec @@ -9,7 +9,7 @@ Summary: Declarative, security-first OS lifecycle agent designed primarily for Azure Linux Name: trident # Use hard-coded versions for distro build -Version: 0.26.0 +Version: 0.27.0 Release: 1%{?dist} License: MIT Vendor: Microsoft Corporation @@ -77,6 +77,7 @@ Trident. This package provides the Trident tool and its dependencies for managing the lifecycle of Azure Linux hosts. %files +%license LICENSE NOTICE %{_bindir}/%{name} %dir /etc/%{name} %{_unitdir}/%{name}d.service @@ -101,6 +102,7 @@ Requires: %{name} = %{version}-%{release} Trident files for the provisioning OS %files provisioning +%license LICENSE %{_unitdir}/%{name}-network.service %post provisioning @@ -123,6 +125,7 @@ Conflicts: %{name}-install-service Trident files for SystemD commit services %files service +%license LICENSE %{_unitdir}/%{name}.service %post service @@ -145,6 +148,7 @@ Conflicts: %{name}-service Trident files for SystemD install service %files install-service +%license LICENSE %{_unitdir}/%{name}-install.service %post install-service @@ -164,12 +168,22 @@ BuildArch: noarch Requires: selinux-policy-%{selinuxtype} Requires(post): selinux-policy-%{selinuxtype} BuildRequires: selinux-policy-devel -%{?selinux_requires} +# Explicit scriptlet-time deps for %%selinux_modules_install/%%selinux_modules_uninstall +# (semodule, selinuxenabled, load_policy) used below. Deliberately NOT using the +# %%{?selinux_requires} macro: on Azure Linux it also adds +# Requires(post): policycoreutils-python-utils, which transitively pulls in the +# full audit daemon package via audit-libs-python3/python3-audit. That package set +# is unrelated to loading a compiled SELinux policy module and is not needed here. +Requires(post): libselinux-utils +Requires(post): policycoreutils +Requires(postun): libselinux-utils +Requires(postun): policycoreutils %description selinux Custom SELinux policy module %files selinux +%license LICENSE %{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2 %{_datadir}/selinux/devel/include/distributed/%{name}.if %ghost %verify(not md5 size mode mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{name} @@ -202,21 +216,31 @@ Statically defined .pcrlock files for PCR-based encryption. This is a workaround be removed once the fix is merged in AZL 4.0. %files static-pcrlock-files +%license LICENSE %{_sharedstatedir}/pcrlock.d # ------------------------------------------------------------------------------ -%if %{defined rpm_ver} -%package acl-agent -Summary: Trident ACL Agent +%package acl +Summary: Trident ACL Components Requires: %{name} = %{version}-%{release} -%description acl-agent -The Trident ACL Agent triggers updates of ACL images. +%description acl +The Trident ACL components required to orchestrate servicing of ACL images. -%files acl-agent +%files acl +%license LICENSE NOTICE %{_bindir}/%{name}-acl-agent -%endif +%{_unitdir}/%{name}-acl-agent.service + +%post acl +%systemd_post %{name}-acl-agent.service + +%preun acl +%systemd_preun %{name}-acl-agent.service + +%postun acl +%systemd_postun_with_restart %{name}-acl-agent.service # ------------------------------------------------------------------------------ @@ -248,11 +272,7 @@ export TRIDENT_VERSION="%{version}-%{release}" # Use %{trident_version} for Trident repo build export TRIDENT_VERSION="%{trident_version}" %endif -%if %{defined rpm_ver} cargo build --release -p trident -p trident-acl-agent -%else -cargo build --release -p trident -%endif mkdir selinux cp -p packaging/selinux-policy-trident/trident.fc selinux/ @@ -282,9 +302,8 @@ cargo test --all --no-fail-fast -- --skip test_run_systemd_check --skip test_pre %install install -D -m 755 target/release/%{name} %{buildroot}/%{_bindir}/%{name} -%if %{defined rpm_ver} install -D -m 755 target/release/%{name}-acl-agent %{buildroot}/%{_bindir}/%{name}-acl-agent -%endif +install -D -m 644 packaging/systemd/%{name}-acl-agent.service %{buildroot}%{_unitdir}/%{name}-acl-agent.service # Copy Trident SELinux policy module to /usr/share/selinux/packages install -D -m 0644 %{name}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2 @@ -313,6 +332,9 @@ mkdir -p "$pcrlockroot" ) %changelog +* Mon Aug 31 2026 Brian Fjeldstad - 0.27.0-1 +- Update to version 0.27.0 + * Wed Jul 29 2026 Brian Fjeldstad - 0.26.0-1 - Update to version 0.26.0 From 10531778cf0b8855e812b90fa501a586e286007c Mon Sep 17 00:00:00 2001 From: Brian Fjeldstad Date: Mon, 31 Aug 2026 11:19:58 -0700 Subject: [PATCH 2/4] trident: update signatures for v0.27.0 --- SPECS/trident/trident.signatures.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SPECS/trident/trident.signatures.json b/SPECS/trident/trident.signatures.json index f6380b9493b..6874bc35d39 100644 --- a/SPECS/trident/trident.signatures.json +++ b/SPECS/trident/trident.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "trident-0.26.0.tar.gz": "335db982d8eb7096beb88db685cafab76b2d6a8466299c4ff16c45ecee5b1216", - "trident-0.26.0-cargo.tar.gz": "f5f0091580081960edffb55dd73d0b76e91bfe33929219ba0a6ba980706a2779" + "trident-0.27.0.tar.gz": "01655056b4fe63ec2440585d0af33a2116210dc87c5a2ee1ed92812316799b92", + "trident-0.27.0-cargo.tar.gz": "e159501ff2b1d2096c925605870a45712c9a125ad814b682ed6ad289dc408f44" } } From 91dd9cd84143802449a8edad4564afb3464119d0 Mon Sep 17 00:00:00 2001 From: Brian Fjeldstad Date: Mon, 31 Aug 2026 11:20:15 -0700 Subject: [PATCH 3/4] trident: update cgmanifest.json for v0.27.0 --- cgmanifest.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cgmanifest.json b/cgmanifest.json index 29214ff6c58..3ad6a1ef116 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -29606,8 +29606,8 @@ "type": "other", "other": { "name": "trident", - "version": "0.26.0", - "downloadUrl": "https://github.com/microsoft/trident/archive/refs/tags/v0.26.0.tar.gz" + "version": "0.27.0", + "downloadUrl": "https://github.com/microsoft/trident/archive/refs/tags/v0.27.0.tar.gz" } } }, From 1b4e2891fa8dec1e32376633f36ee651763d861e Mon Sep 17 00:00:00 2001 From: Brian Fjeldstad Date: Wed, 2 Sep 2026 19:16:16 +0000 Subject: [PATCH 4/4] trident: update to version 0.28.0 (supersedes 0.27.0) --- SPECS/trident/trident.signatures.json | 12 ++++++------ SPECS/trident/trident.spec | 6 +++--- cgmanifest.json | 4 ++-- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/SPECS/trident/trident.signatures.json b/SPECS/trident/trident.signatures.json index 6874bc35d39..50892d30421 100644 --- a/SPECS/trident/trident.signatures.json +++ b/SPECS/trident/trident.signatures.json @@ -1,6 +1,6 @@ -{ - "Signatures": { - "trident-0.27.0.tar.gz": "01655056b4fe63ec2440585d0af33a2116210dc87c5a2ee1ed92812316799b92", - "trident-0.27.0-cargo.tar.gz": "e159501ff2b1d2096c925605870a45712c9a125ad814b682ed6ad289dc408f44" - } -} +{ + "Signatures": { + "trident-0.28.0.tar.gz": "606d54c7190e43088159b8b3b644f3da7ceee0c4ee73760d5bd6b8717792403b", + "trident-0.28.0-cargo.tar.gz": "a48ee6f563d85a804fca6d85330b240a8e703332120cccd4123444b042566a3d" + } +} \ No newline at end of file diff --git a/SPECS/trident/trident.spec b/SPECS/trident/trident.spec index f557fb07214..d397f896cca 100644 --- a/SPECS/trident/trident.spec +++ b/SPECS/trident/trident.spec @@ -9,7 +9,7 @@ Summary: Declarative, security-first OS lifecycle agent designed primarily for Azure Linux Name: trident # Use hard-coded versions for distro build -Version: 0.27.0 +Version: 0.28.0 Release: 1%{?dist} License: MIT Vendor: Microsoft Corporation @@ -332,8 +332,8 @@ mkdir -p "$pcrlockroot" ) %changelog -* Mon Aug 31 2026 Brian Fjeldstad - 0.27.0-1 -- Update to version 0.27.0 +* Wed Sep 02 2026 Brian Fjeldstad - 0.28.0-1 +- Update to version 0.28.0 * Wed Jul 29 2026 Brian Fjeldstad - 0.26.0-1 - Update to version 0.26.0 diff --git a/cgmanifest.json b/cgmanifest.json index 3ad6a1ef116..514abddc695 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -29606,8 +29606,8 @@ "type": "other", "other": { "name": "trident", - "version": "0.27.0", - "downloadUrl": "https://github.com/microsoft/trident/archive/refs/tags/v0.27.0.tar.gz" + "version": "0.28.0", + "downloadUrl": "https://github.com/microsoft/trident/archive/refs/tags/v0.28.0.tar.gz" } } },