34887 Commits

Author SHA1 Message Date
Adrian Vladu
0871a3161a overlay coreos-base/coreos: add erofs-utils
containerd complains that erofs tools do not exist at startup,
adding these tools to the image.

Implements: https://github.com/flatcar/Flatcar/issues/2047.

Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2026-04-27 12:50:35 +00:00
James Le Cuirot
983315c398
Merge pull request #3955 from flatcar/chewi/more-sdk-fixes 2026-04-27 13:31:48 +01:00
flatcar-ci
6e8746f372 Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-24 23:10:05 +00:00
flatcar-ci
03425fd0c9 New version: main-4680.0.0-nightly-20260424-2100-INTERMEDIATE
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-24 21:00:39 +00:00
James Le Cuirot
2fb7105dba
Merge pull request #3936 from flatcar/firmware-20260410-main
Upgrade Linux Firmware in main from 20260309 to 20260410
2026-04-24 13:24:37 +01:00
flatcar-ci
63c4137c94 Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-23 23:00:56 +00:00
flatcar-ci
56f0755cf8 New version: main-4679.0.0-nightly-20260423-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-23 21:00:36 +00:00
flatcar-ci
d515161137 Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-22 22:59:05 +00:00
flatcar-ci
2e399ee52d New version: main-4678.0.0-nightly-20260422-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-22 21:00:33 +00:00
James Le Cuirot
c8915792a8
Merge pull request #3956 from zhijianli88/fix-image-scripts
Fix image scripts
2026-04-22 11:21:23 +01:00
James Le Cuirot
22028e4595
Merge pull request #3954 from jqueuniet/secureboot_params
Parameterize secure boot keys
2026-04-22 11:04:51 +01:00
Johann Queuniet
e48c9ffebe
Parameterize secure boot keys
Signed-off-by: Johann Queuniet <sub_code.git@queuniet.fr>
2026-04-22 06:30:48 +02:00
Li Zhijian
87c3463c99 image_to_vm.sh: keep compression source for seamless VM launch
Previously, the compression source was deleted after compression.
Keep it to allow seamless VM launching.

Signed-off-by: Li Zhijian <lizhijian@fujitsu.com>
2026-04-22 02:55:24 +00:00
Li Zhijian
73caf995db vm_image_util.sh: use -display curses for QEMU 7.1+
The -curses option was removed in QEMU 7.1, use -display curses
as the replacement.

Signed-off-by: Li Zhijian <lizhijian@fujitsu.com>
2026-04-22 02:53:22 +00:00
James Le Cuirot
28831b50a6
sys-apps/baselayout: Modify ${ROOT} rather than ${D} in pkg_preinst
update_sdk_container_image failed to update baselayout because it
touched /sys, which is not allowed in an unprivileged docker build
environment.

dumb-tmpfiles-proc.sh does not touch existing directories, but it was
modifying the staging directory rather than the live filesystem, causing
Portage to record /sys in the package's CONTENTS and then make changes
to it when merging.

We only need to create the directories in pkg_preinst because the other
file types are already created in src_install.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:05 +01:00
James Le Cuirot
8f8977f668
build_image_util: Don't install packages to image with bad USE flags
This generally shouldn't happen, given that we mostly only keep one
instance of a bin package, but just in case.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:04 +01:00
James Le Cuirot
433f8c40fd
app-shells/bash: Apply tentative patch to try to fix wait error
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:03 +01:00
James Le Cuirot
d42574d094
sdk_lib: Don't disable the Portage sandboxes most of the time
We have long run with the ipc, network, and pid sandboxes disabled in
the belief that these did not work in a container even if it was
privileged. I suspect it really did work back then, but it certainly
does work now regardless.

update_sdk_container_image uses Portage in an unprivileged docker build
environment, so it is still necessary to disable these here. However,
this can be done more easily through the environment, and the regular
sandbox should work fine.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:02 +01:00
James Le Cuirot
d121b9594e
update_sdk_container_image: Don't truncate docker build output
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:01 +01:00
James Le Cuirot
d85bbc31a1
overlay profiles: Don't complain when rm_masked_debug_files does nothing
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:14:57 +01:00
flatcar-ci
ad886d8959 New version: main-4676.0.0-nightly-20260420-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4676.0.0-nightly-20260420-2100
2026-04-20 21:00:39 +00:00
James Le Cuirot
2d47b638a2
Merge pull request #3952 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
debug-rclone-config
2026-04-20 11:30:56 +01:00
Flatcar Buildbot
d63830d234 Update mantle container image to latest HEAD
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-20 10:27:52 +00:00
Sayan Chowdhury
05e9069a2f
Merge pull request #3948 from flatcar/sayan/update-the-az-kv-token
Update the signing cert on the azure KV
2026-04-20 15:57:38 +05:30
Sayan Chowdhury
ac41293871
Update the signing cert on the azure KV
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2026-04-20 15:18:20 +05:30
Flatcar Buildbot
1752158c22 sys-kernel/coreos-firmware: Update from 20260309 to 20260410
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-16 07:34:39 +00:00
flatcar-ci
02ea97d938 New version: main-4671.0.0-nightly-20260415-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-15 21:00:35 +00:00
James Le Cuirot
2291572849
Merge pull request #3934 from flatcar/chewi/ignition-mounting
Drop old Ignition OEM mounting code and bump bootengine with new mount handling
2026-04-15 15:32:02 +01:00
James Le Cuirot
32f35c29b1
coreos-base/coreos-init: Bump for new Ignition OEM mount handling
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 15:23:44 +01:00
James Le Cuirot
a69494ae03
sys-kernel/bootengine: Bump for new Ignition OEM mount handling
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 15:23:43 +01:00
James Le Cuirot
3f8baedc51
sys-apps/ignition: Drop the old OEM mounting code
bootengine will mount the partition before Ignition starts instead.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 15:23:41 +01:00
James Le Cuirot
52dec2ded5
Merge pull request #3935 from flatcar/chewi/sdk-portage-patches
update_chroot: Fix /etc/portage/patches symlink
2026-04-15 12:29:45 +01:00
James Le Cuirot
84a195436c
update_chroot: Fix /etc/portage/patches symlink
This was accidentally broken by #3795. I took that change from a branch
where the `COREOS_OVERLAY` variable was no longer used at all.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 12:14:30 +01:00
Mathieu Tortuyaux
0f1bcae7cc
Merge pull request #3933 from flatcar/tormath1/azurekv
sbsign: update Azure key vault location
2026-04-15 11:58:45 +02:00
Mathieu Tortuyaux
65a7e5d43e
Merge pull request #3932 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2026-04-15 11:11:49 +02:00
Mathieu Tortuyaux
5ca3c89a2e
sbsign: update Azure key vault location
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2026-04-15 10:35:33 +02:00
Flatcar Buildbot
f9dc297d83 Update mantle container image to latest HEAD
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-13 21:00:46 +00:00
flatcar-ci
c5834ad4c9 New version: main-4669.0.0-nightly-20260413-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-13 21:00:29 +00:00
Jan Bronicki
b362a4252e
Merge pull request #3927 from flatcar/john15321/automated/add-community-docs-and-update-readme
## Summary

This PR adds standardized community documentation files and updates the README:

### New files
- **`SECURITY.md`** — Links to the [main Flatcar Security Policy](https://github.com/flatcar/Flatcar/blob/main/SECURITY.md) with a section for repo-specific security notes
- **`MAINTAINERS.md`** — Links to the [main Flatcar MAINTAINERS file](https://github.com/flatcar/Flatcar/blob/main/MAINTAINERS.md) with a section for repo-specific maintainers
- **`GOVERNANCE.md`** — Links to the [main Flatcar Governance document](https://github.com/flatcar/Flatcar/blob/main/governance.md) with a section for repo-specific governance
- **`CODE_OF_CONDUCT.md`** — Links to the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md) and the [main Flatcar Code of Conduct](https://github.com/flatcar/Flatcar/blob/main/CODE_OF_CONDUCT.md)

### Updated files
- **`CONTRIBUTING.md`** — Added a note directing users to the [central Flatcar issue tracker](https://github.com/flatcar/Flatcar/issues)

### README.md updates
- Added **Discord** badge ([Flatcar Discord server](https://discord.gg/PMYjFUsJyq))
- Added **OpenSSF Best Practices** badge ([project 10926](https://www.bestpractices.dev/projects/10926))
- Added a note pointing to the [central Flatcar issue tracker](https://github.com/flatcar/Flatcar/issues)
- Appended a **Community & Project Documentation** reference section linking to all community docs

This change is part of a batch update across all Flatcar repositories to ensure consistent community documentation.

Ref: https://github.com/flatcar/Flatcar/issues/1865
2026-04-13 19:53:03 +02:00
Jan Bronicki
8e12828295
docs: Fix readme note about filing issues and links
Signed-off-by: Jan Bronicki <janbronicki@gmail.com>
2026-04-13 19:49:14 +02:00
Jan Bronicki
6b5e76fb87 docs: add community docs, update README badges and references
Add standardized SECURITY.md, MAINTAINERS.md, GOVERNANCE.md, and
CODE_OF_CONDUCT.md. Update README.md with Discord and OpenSSF Best
Practices badges, and append a community documentation reference section.

Ref: https://github.com/flatcar/Flatcar/issues/1865
Signed-off-by: Jan Bronicki <janbronicki@gmail.com>
2026-04-13 16:58:56 +02:00
Mathieu Tortuyaux
1d75b468df
Merge pull request #3923 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2026-04-13 15:28:19 +02:00
Flatcar Buildbot
f5754d5277 Update mantle container image to latest HEAD
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-13 13:14:30 +00:00
Sayan Chowdhury
9aa417653e
Merge pull request #3919 from flatcar/linux-6.12.81-main
Upgrade Linux Kernel for main from 6.12.77 to 6.12.81
2026-04-13 18:44:16 +05:30
Mathieu Tortuyaux
132e48e8d8
Merge pull request #3869 from flatcar/cacerts-3.122-main
Update ca-certificates in main from 3.121 to 3.122
2026-04-13 10:26:59 +02:00
Mathieu Tortuyaux
1879b624d1
Merge pull request #3915 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2026-04-13 10:21:43 +02:00
Flatcar Buildbot
5baff0e498 sys-kernel/coreos-sources: Update from 6.12.77 to 6.12.81
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-12 07:33:07 +00:00
Flatcar Buildbot
fb4dbdf2e4 Update mantle container image to latest HEAD
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-11 04:29:40 +00:00
flatcar-ci
3f46247811 New version: main-4666.0.0-nightly-20260410-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-11 04:29:26 +00:00
flatcar-ci
3ac3569f62 New version: main-4666.0.0-nightly-20260410-2100-INTERMEDIATE
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-10 21:00:35 +00:00