pawletprofiled (1.0.0-1) trixie; urgency=medium

  * Initial release for PawletOS 10.0 "Rainier".
  * Unified binary: profile daemon + ZTE client in one process.
  * Profile service: 55 payload types, CMS/PKCS#7 signature verification,
    PBKDF2-SHA256 removal password hashing, D-Bus system service.
  * WiFi/Ethernet: NetworkManager keyfile-based (no nmcli exec), full
    802.1X EAP support (TLS/PEAP/TTLS/EAP-FAST), WPA3-SAE, proxy.
  * ZTE client: DMI UUID/serial, board serial, machine-id, permanent MACs,
    EFI GUID, TPM detection. Priority-ordered primary serial derivation.
    SHA-256 hardware fingerprint for fuzzy server-side matching.
  * ZTE deferred enrollment: watches NetworkManager StateChanged and
    PropertiesChanged D-Bus signals; checks current state at startup.
  * Preinstalled profile support: applies profiles from
    /etc/pawletprofiled/preinstalled/ before cloud-init runs.
  * first-boot payload: suppresses GNOME Initial Setup and cloud-init
    wizard modules; writes cloud-init drop-in before cloud-init starts.
  * systemd ordering: Before=cloud-init-local.service ensures preinstalled
    profiles and ZTE drops are in place before cloud-init runs.
  * AppArmor profile included.

 -- oxmc <packages@oxmc.me>  Sun, 19 Apr 2026 00:00:00 +0000