v14.9.2

.versionbot/CHANGELOG.yml

@@ -1,3 +1,31 @@
+- commits:
+    - subject: Replace BALENA-FIREWALL rule in INPUT chain instead of flushing
+      hash: 84a9e7e9acd803b6b49d58ae3040694a5e2f823d
+      body: >
+        The issue with the original Supervisor implementation of the firewall is
+        that
+
+        on Supervisor start, the Supervisor flushes the INPUT chain of the filter table.
+
+        This doesn't play well with services that add to the INPUT chain on startup that
+
+        may start up before the Supervisor, such as certain NetworkManager connection
+
+        profiles. This change only replaces the BALENA-FIREWALL rule in the INPUT chain,
+
+        preserving the other rules as well as their order.
+      footer:
+        Closes: "#1482"
+        closes: "#1482"
+        Change-type: patch
+        change-type: patch
+        Signed-off-by: Christina Ying Wang <christina@balena.io>
+        signed-off-by: Christina Ying Wang <christina@balena.io>
+      author: Christina Ying Wang
+      nested: []
+  version: 14.9.2
+  title: ""
+  date: 2023-03-02T21:48:06.727Z
 - commits:
     - subject: Always lower case the cpu id to avoid bouncing between casing when
         reporting

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+# v14.9.2
+## (2023-03-02)
+
+* Replace BALENA-FIREWALL rule in INPUT chain instead of flushing [Christina Ying Wang]
+
 # v14.9.1
 ## (2023-02-15)
 

VERSION

@@ -1 +1 @@
-14.9.1
+14.9.2

balena.yml

@@ -2,6 +2,6 @@ name: balena-supervisor
 description: 'Balena Supervisor: balena''s agent on devices.'
 joinable: false
 type: sw.application
-version: 14.9.1
+version: 14.9.2
 provides:
   - slug: sw.compose.long-volume-syntax

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "balena-supervisor",
-  "version": "14.9.1",
+  "version": "14.9.2",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "balena-supervisor",
-      "version": "14.9.1",
+      "version": "14.9.2",
       "license": "Apache-2.0",
       "dependencies": {
         "@balena/happy-eyeballs": "0.0.6",

package.json

@@ -1,7 +1,7 @@
 {
   "name": "balena-supervisor",
   "description": "This is balena's Supervisor, a program that runs on IoT devices and has the task of running user Apps (which are Docker containers), and updating them as the balena API informs it to.",
-  "version": "14.9.1",
+  "version": "14.9.2",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -146,6 +146,6 @@
     }
   },
   "versionist": {
-    "publishedAt": "2023-02-15T14:13:57.833Z"
+    "publishedAt": "2023-03-02T21:48:07.347Z"
   }
 }