turnkey-lxc-15.1 (1) turnkey; urgency=low

  * Enhancements
    - now compatible with ``confconsole``
    - updated documentation
    [ John Carver - <dude4linux@gmail.com> ]

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Jeremy Davis <jeremy@turnkeylinux.org>  Thu, 02 May 2019 14:45:08 +1000

turnkey-lxc-15.0 (1) turnkey; urgency=low

  * Update lxc to newest debian/stretch (2.0.7)

  * Added several enhancements
    - configure containers to use apt-cacher-ng by default
    - make dns resolution more robust by not relying on upstream dhcp
    - apply sysvinit updates only for legacy v14.x apps
    - revised iptables rules for better security
    - version resolver downloads latest version by default
        Stefan Davis <stefan@turnkeylinux.org>
    - cleans unused packages from apt cache
    - purges config files from removed packages
    - removes ntp server config; containers get time from host
    - adds system hardening for legacy appliances
    - indicate patching stunnel only when actually patching
    - keep legacy /etc/network/interfaces
    - add hostname to dhcp interfaces so dnsmasq works properly
    - make it easier to override system hardening
    - allow cli to override version_resolver
    - updated inithooks.conf examples and docs
    - removed support for squeeze (now obsolete)

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- John Carver <dude4linux@gmail.com>  Wed, 04 Jul 2018 18:26:20 +0000

turnkey-lxc-14.2 (1) turnkey; urgency=low

  * Updates for TurnKey GNU/Linux 14.2
    - latest upstream version of LXC
    - defaults to version 14.2 containers
    - always checks for new upstream versions and updates cache
    - download signature first and update only when it has changed
    - flag obsolete versions, 13.0 and 14.0, which have been removed
      from the TurnKey mirrors
    - issue local, unicast MAC addresses instead of global addresses
    - patch containers for stunnel timeout

  * Security
    - verify gpg signatures using sha512sum
    - handle old .sig and new .hash signatures

 -- John Carver <dude4linux@gmail.com>  Fri, 19 May 2017 14:07:37 +0000

turnkey-lxc-14.1 (1) turnkey; urgency=low

  * Bugfix release
    - patch containers for sysvinit 
    - automount cgroups in containers
    - get mac address from container config
    - copy sysv init script to systemd autostart helper
    - fix lxc lock issue by replacing /etc/init.d/lxc

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- John Carver <dude4linux@gmail.com>  Thu, 11 Feb 2016 03:47:24 +0000

turnkey-lxc-14.0 (1) turnkey; urgency=low

  * Credits: Special thanks to John Carver and Anton Pyrogovskyi who made this
    release possible.
    
  * Latest upstream version of LXC

  * Security: verify gpg signatures of downloaded images

  * Ansible integration: allows Ansible appliance to manage LXC containers

  * Improved lxc admin tools

    - Let lxc-create handle network configuration (-f option)
    - Added lxc-destroy wrapper to cleanup after container is removed
    - added -x|--aptproxy option to lxc-turnkey, updated docs

  * TurnKey v14.0 support

    - Use Proxmox images for v14.x containers
    - Use Openvz images for v13.0 containers

  * Added support for default lvm volume group 'turnkey'

  * Updated nginx-proxy to support v14.0 certs and lvm backing store

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Liraz Siri <liraz@turnkeylinux.org>  Tue, 19 Jan 2016 21:26:00 +0200

turnkey-lxc-13.0 (1) turnkey; urgency=low

  * Initial public release of TurnKey LXC.

  * LXC related:

    - Generic TurnKey LXC template for downloading and creating a 
      container of any TurnKey appliance, supporting preseeding and
      customization of network link.
    - Custom nginx-proxy script for exposing containers web services.
    - Changed webshell port to 22320 to support nginx-proxy.
    - Changed webmin port to 22321 to support nginx-proxy.
    - Custom iptable-nat script for exposing containers ports.
    - Preconfigured network bridge interface.
    - Preconfigured network NAT bridge interface.
    - Preconfigured dnsmasq on NAT interface pricing DHCP and DNS.
    - Preconfigured to support IP forwarding.
    - Inithook to setup and enable control groups.
    - Includes TurnKey web control panel.
    - Includes example inithooks configuration for preseeding.

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Thu, 12 Dec 2013 16:20:32 +0200