Adrian Vladu
0871a3161a
overlay coreos-base/coreos: add erofs-utils
...
containerd complains that erofs tools do not exist at startup,
adding these tools to the image.
Implements: https://github.com/flatcar/Flatcar/issues/2047 .
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2026-04-27 12:50:35 +00:00
James Le Cuirot
983315c398
Merge pull request #3955 from flatcar/chewi/more-sdk-fixes
2026-04-27 13:31:48 +01:00
flatcar-ci
6e8746f372
Revert failed version back to 4676.0.0+nightly-20260420-2100
2026-04-24 23:10:05 +00:00
flatcar-ci
03425fd0c9
New version: main-4680.0.0-nightly-20260424-2100-INTERMEDIATE
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-24 21:00:39 +00:00
James Le Cuirot
2fb7105dba
Merge pull request #3936 from flatcar/firmware-20260410-main
...
Upgrade Linux Firmware in main from 20260309 to 20260410
2026-04-24 13:24:37 +01:00
flatcar-ci
63c4137c94
Revert failed version back to 4676.0.0+nightly-20260420-2100
2026-04-23 23:00:56 +00:00
flatcar-ci
56f0755cf8
New version: main-4679.0.0-nightly-20260423-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-23 21:00:36 +00:00
flatcar-ci
d515161137
Revert failed version back to 4676.0.0+nightly-20260420-2100
2026-04-22 22:59:05 +00:00
flatcar-ci
2e399ee52d
New version: main-4678.0.0-nightly-20260422-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-22 21:00:33 +00:00
James Le Cuirot
c8915792a8
Merge pull request #3956 from zhijianli88/fix-image-scripts
...
Fix image scripts
2026-04-22 11:21:23 +01:00
James Le Cuirot
22028e4595
Merge pull request #3954 from jqueuniet/secureboot_params
...
Parameterize secure boot keys
2026-04-22 11:04:51 +01:00
Johann Queuniet
e48c9ffebe
Parameterize secure boot keys
...
Signed-off-by: Johann Queuniet <sub_code.git@queuniet.fr>
2026-04-22 06:30:48 +02:00
Li Zhijian
87c3463c99
image_to_vm.sh: keep compression source for seamless VM launch
...
Previously, the compression source was deleted after compression.
Keep it to allow seamless VM launching.
Signed-off-by: Li Zhijian <lizhijian@fujitsu.com>
2026-04-22 02:55:24 +00:00
Li Zhijian
73caf995db
vm_image_util.sh: use -display curses for QEMU 7.1+
...
The -curses option was removed in QEMU 7.1, use -display curses
as the replacement.
Signed-off-by: Li Zhijian <lizhijian@fujitsu.com>
2026-04-22 02:53:22 +00:00
James Le Cuirot
28831b50a6
sys-apps/baselayout: Modify ${ROOT} rather than ${D} in pkg_preinst
...
update_sdk_container_image failed to update baselayout because it
touched /sys, which is not allowed in an unprivileged docker build
environment.
dumb-tmpfiles-proc.sh does not touch existing directories, but it was
modifying the staging directory rather than the live filesystem, causing
Portage to record /sys in the package's CONTENTS and then make changes
to it when merging.
We only need to create the directories in pkg_preinst because the other
file types are already created in src_install.
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:05 +01:00
James Le Cuirot
8f8977f668
build_image_util: Don't install packages to image with bad USE flags
...
This generally shouldn't happen, given that we mostly only keep one
instance of a bin package, but just in case.
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:04 +01:00
James Le Cuirot
433f8c40fd
app-shells/bash: Apply tentative patch to try to fix wait error
...
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:03 +01:00
James Le Cuirot
d42574d094
sdk_lib: Don't disable the Portage sandboxes most of the time
...
We have long run with the ipc, network, and pid sandboxes disabled in
the belief that these did not work in a container even if it was
privileged. I suspect it really did work back then, but it certainly
does work now regardless.
update_sdk_container_image uses Portage in an unprivileged docker build
environment, so it is still necessary to disable these here. However,
this can be done more easily through the environment, and the regular
sandbox should work fine.
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:02 +01:00
James Le Cuirot
d121b9594e
update_sdk_container_image: Don't truncate docker build output
...
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:01 +01:00
James Le Cuirot
d85bbc31a1
overlay profiles: Don't complain when rm_masked_debug_files does nothing
...
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:14:57 +01:00
flatcar-ci
ad886d8959
New version: main-4676.0.0-nightly-20260420-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4676.0.0-nightly-20260420-2100
2026-04-20 21:00:39 +00:00
James Le Cuirot
2d47b638a2
Merge pull request #3952 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
debug-rclone-config
2026-04-20 11:30:56 +01:00
Flatcar Buildbot
d63830d234
Update mantle container image to latest HEAD
...
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-20 10:27:52 +00:00
Sayan Chowdhury
05e9069a2f
Merge pull request #3948 from flatcar/sayan/update-the-az-kv-token
...
Update the signing cert on the azure KV
2026-04-20 15:57:38 +05:30
Sayan Chowdhury
ac41293871
Update the signing cert on the azure KV
...
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2026-04-20 15:18:20 +05:30
Flatcar Buildbot
1752158c22
sys-kernel/coreos-firmware: Update from 20260309 to 20260410
...
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-16 07:34:39 +00:00
flatcar-ci
02ea97d938
New version: main-4671.0.0-nightly-20260415-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-15 21:00:35 +00:00
James Le Cuirot
2291572849
Merge pull request #3934 from flatcar/chewi/ignition-mounting
...
Drop old Ignition OEM mounting code and bump bootengine with new mount handling
2026-04-15 15:32:02 +01:00
James Le Cuirot
32f35c29b1
coreos-base/coreos-init: Bump for new Ignition OEM mount handling
...
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 15:23:44 +01:00
James Le Cuirot
a69494ae03
sys-kernel/bootengine: Bump for new Ignition OEM mount handling
...
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 15:23:43 +01:00
James Le Cuirot
3f8baedc51
sys-apps/ignition: Drop the old OEM mounting code
...
bootengine will mount the partition before Ignition starts instead.
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 15:23:41 +01:00
James Le Cuirot
52dec2ded5
Merge pull request #3935 from flatcar/chewi/sdk-portage-patches
...
update_chroot: Fix /etc/portage/patches symlink
2026-04-15 12:29:45 +01:00
James Le Cuirot
84a195436c
update_chroot: Fix /etc/portage/patches symlink
...
This was accidentally broken by #3795 . I took that change from a branch
where the `COREOS_OVERLAY` variable was no longer used at all.
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-15 12:14:30 +01:00
Mathieu Tortuyaux
0f1bcae7cc
Merge pull request #3933 from flatcar/tormath1/azurekv
...
sbsign: update Azure key vault location
2026-04-15 11:58:45 +02:00
Mathieu Tortuyaux
65a7e5d43e
Merge pull request #3932 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2026-04-15 11:11:49 +02:00
Mathieu Tortuyaux
5ca3c89a2e
sbsign: update Azure key vault location
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2026-04-15 10:35:33 +02:00
Flatcar Buildbot
f9dc297d83
Update mantle container image to latest HEAD
...
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-13 21:00:46 +00:00
flatcar-ci
c5834ad4c9
New version: main-4669.0.0-nightly-20260413-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-13 21:00:29 +00:00
Jan Bronicki
b362a4252e
Merge pull request #3927 from flatcar/john15321/automated/add-community-docs-and-update-readme
...
## Summary
This PR adds standardized community documentation files and updates the README:
### New files
- **`SECURITY.md`** — Links to the [main Flatcar Security Policy](https://github.com/flatcar/Flatcar/blob/main/SECURITY.md ) with a section for repo-specific security notes
- **`MAINTAINERS.md`** — Links to the [main Flatcar MAINTAINERS file](https://github.com/flatcar/Flatcar/blob/main/MAINTAINERS.md ) with a section for repo-specific maintainers
- **`GOVERNANCE.md`** — Links to the [main Flatcar Governance document](https://github.com/flatcar/Flatcar/blob/main/governance.md ) with a section for repo-specific governance
- **`CODE_OF_CONDUCT.md`** — Links to the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md ) and the [main Flatcar Code of Conduct](https://github.com/flatcar/Flatcar/blob/main/CODE_OF_CONDUCT.md )
### Updated files
- **`CONTRIBUTING.md`** — Added a note directing users to the [central Flatcar issue tracker](https://github.com/flatcar/Flatcar/issues )
### README.md updates
- Added **Discord** badge ([Flatcar Discord server](https://discord.gg/PMYjFUsJyq ))
- Added **OpenSSF Best Practices** badge ([project 10926](https://www.bestpractices.dev/projects/10926 ))
- Added a note pointing to the [central Flatcar issue tracker](https://github.com/flatcar/Flatcar/issues )
- Appended a **Community & Project Documentation** reference section linking to all community docs
This change is part of a batch update across all Flatcar repositories to ensure consistent community documentation.
Ref: https://github.com/flatcar/Flatcar/issues/1865
2026-04-13 19:53:03 +02:00
Jan Bronicki
8e12828295
docs: Fix readme note about filing issues and links
...
Signed-off-by: Jan Bronicki <janbronicki@gmail.com>
2026-04-13 19:49:14 +02:00
Jan Bronicki
6b5e76fb87
docs: add community docs, update README badges and references
...
Add standardized SECURITY.md, MAINTAINERS.md, GOVERNANCE.md, and
CODE_OF_CONDUCT.md. Update README.md with Discord and OpenSSF Best
Practices badges, and append a community documentation reference section.
Ref: https://github.com/flatcar/Flatcar/issues/1865
Signed-off-by: Jan Bronicki <janbronicki@gmail.com>
2026-04-13 16:58:56 +02:00
Mathieu Tortuyaux
1d75b468df
Merge pull request #3923 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2026-04-13 15:28:19 +02:00
Flatcar Buildbot
f5754d5277
Update mantle container image to latest HEAD
...
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-13 13:14:30 +00:00
Sayan Chowdhury
9aa417653e
Merge pull request #3919 from flatcar/linux-6.12.81-main
...
Upgrade Linux Kernel for main from 6.12.77 to 6.12.81
2026-04-13 18:44:16 +05:30
Mathieu Tortuyaux
132e48e8d8
Merge pull request #3869 from flatcar/cacerts-3.122-main
...
Update ca-certificates in main from 3.121 to 3.122
2026-04-13 10:26:59 +02:00
Mathieu Tortuyaux
1879b624d1
Merge pull request #3915 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2026-04-13 10:21:43 +02:00
Flatcar Buildbot
5baff0e498
sys-kernel/coreos-sources: Update from 6.12.77 to 6.12.81
...
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-12 07:33:07 +00:00
Flatcar Buildbot
fb4dbdf2e4
Update mantle container image to latest HEAD
...
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-11 04:29:40 +00:00
flatcar-ci
3f46247811
New version: main-4666.0.0-nightly-20260410-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-11 04:29:26 +00:00
flatcar-ci
3ac3569f62
New version: main-4666.0.0-nightly-20260410-2100-INTERMEDIATE
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-10 21:00:35 +00:00