the second candidate for releases of the next significant release of Debian 10 "Buster". Currently 75 critical bugs blocking the release (there were 98 two weeks ago, and 132 a month and a half ago). The Testing branch has been frozen completely from changes (exceptions are made only for emergencies). The final release of Debian 10 is on July 6.
Compared to test release of the installer, the following changes are presented:
- In cryptsetup, a section "Unlocking LUKS devices from GRUB" has been added, indicating the settings for unlocking partitions at the GRUB level;
- In debian-archive-keyring, Buster release verification keys have been added;
- A working image has been prepared that fits on a 16 GB USB Flash. The package selection process is optimized to fit multi-arch firmware in a 700 MB image, excluding the PAE kernel for i686;
- A haveged-udeb package has been added to solve issues with low quality of the pseudo-random number generator's entropy;
- The Dark theme has been renamed to Accessible high contrast;
- Support for verified boot (UEFI Secure Boot) has been added for the amd64 architecture. To enable Secure Boot, the Shim bootloader, signed with a digital signature from Microsoft (shim-signed), is used along with the verification of the kernel and grub bootloader (grub-efi-amd64-signed) with the project's own certificate (shim acts as a layer for the distribution to use its own keys). The shim-signed and grub-efi-ARCH-signed packages are included in the build dependencies for amd64, i386, and arm64. The bootloader and grub, signed with the working certificate, are included in the EFI images for amd64, i386, and arm64;
- Support for network bootable (netboot) images for SD cards has been added;
- u-boot images for a64-olinuxino, orangepi_zero_plus2
and teres_i have been added. Support for NanoPi NEO2 and Marvell 8040 MACCHIATOBin has been added; - All drivers for supporting hardware random number generators have been added to the kernel package (kernel-image), and all keyboard drivers have been added to the input-modules package.
Source: opennet.ru
