34917 Commits

Author SHA1 Message Date
James Le Cuirot
afa87c3184
coreos-devel/board-packages: Drop the OEM sysext dependencies
It is no longer necessary to include these as they are explicitly built
with --onlydeps in build_sysext_packages().

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-30 14:34:51 +01:00
James Le Cuirot
b991daa0e3
build_library: Refresh our Vagrant support
The CoreOS support we have been carrying was merged upstream years ago.
The network configuration still needs special handling because our
cloud-init is called coreos-cloudinit, breaking the detection.

Flatcar's documentation used to point users at coreos-vagrant. This is
long dead and used the old Ignition VirtualBox support, which no longer
works. Rather than revive that, we can capture the essence of what
coreos-vagrant did in our base Vagrantfile.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-30 14:34:50 +01:00
James Le Cuirot
649e88437b
Convert remaining OEM packages to sysexts and rework how they are built
common-oem-files was a giant hack. oem-release can now be easily be
generated from metadata embedded in the sysext image itself. grub.cfg is
often just a couple of lines, so there's no point in having all this
complex logic around generating it, especially when that logic has some
exceptions anyway. It's far easier to just explicitly store each variant
under build_library/oem. The list of OEMs is now generated by looking
for coreos-base/oem-*/*.ebuild.
2026-04-30 14:34:49 +01:00
James Le Cuirot
0d8e0d6b1e
ci: Fix bad handling of image format names
This is what caused vagrant_vmware_fusion to not be built.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:11 +01:00
James Le Cuirot
e7c519d6fd
Drop the vagrant_vmware_fusion image
It turns out we haven't even been building this for years because of a
CI bug. There's no point in reviving it now.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:10 +01:00
James Le Cuirot
e040e9efec
Drop the vagrant_virtualbox image in favour of the vagrant image
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:09 +01:00
James Le Cuirot
bc6d20c5e8
Drop the vmware_insecure image
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:08 +01:00
James Le Cuirot
ffda107907
Drop support for Equinix Metal (Packet)
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:07 +01:00
James Le Cuirot
4892c5c6ab
Drop support for Rackspace
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:06 +01:00
James Le Cuirot
7b75de6f91
sys-kernel/bootengine: Bump for better oem.id handling and vboxguest
This allows us to drop an Ignition patch.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:05 +01:00
James Le Cuirot
d7ba8a608d
sys-kernel/coreos-modules: Enable the vboxguest kernel module
This allows the VirtualBox image to actually boot. It broke when
upstream Ignition changed how the VirtualBox support works.

VirtualBox supports arm64 these days, so we could enable this in the
common config, but we don't currently produce an arm64 VirtualBox image,
and I don't propose that we start now.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:04 +01:00
James Le Cuirot
2b6b41e7f9
coreos-base/coreos-cloudinit: Bump for new OEM config location
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:03 +01:00
James Le Cuirot
e5f29b7a19
build_sysext: Populate SYSEXT_ID/NAME/VERSION_ID/HOME_URL/BUG_REPORT_URL
These extension-release.d fields are equivalent to their non-SYSEXT
os-release counterparts. SYSEXT_ID is taken from the sysext's name as
given to build_sysext. SYSEXT_NAME, SYSEXT_VERSION_ID, and
SYSEXT_HOME_URL are taken from the package if only one is given.
SYSEXT_NAME is the new name for the OEM_NAME variable.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:02 +01:00
James Le Cuirot
8546bd4b24
build_sysext: Safely quote the extension-release.d fields
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:01 +01:00
James Le Cuirot
a27f187431
Drop the per-OEM USE flags
Having a USE flag per OEM is unnecessary when we only really need to
know whether the package will be installed in an OEM sysext or not. A
single USE flag could do this, but our existing flatcar_target() helper
avoids the complexity of binpkg-multi-instance. The flag names were also
prone to conflicts (e.g. qemu) and we don't currently make use of them
anyway.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:10:00 +01:00
James Le Cuirot
a43747d63a
build_sysext: Ensure sysexts are entirely built from binary packages
It is no longer necessary to build the meta packages from source as they
are now covered by build_packages.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:09:59 +01:00
James Le Cuirot
85d9c51033
build_packages: Exclude OEM sysext packages when running eclean packages
Also simplify the exclusion mechanism while we're at it.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:09:58 +01:00
James Le Cuirot
aae53b1537
sys-apps/baselayout: Don't need to explicitly create /oem any more
It's handled by dumb-tmpfiles-proc.sh.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-29 17:09:57 +01:00
Krzesimir Nowak
2c1e758318
Merge pull request #3983 from flatcar/krnowak/select-oem-sysext
build_image: Allow specifying which OEM sysexts to build
2026-04-29 15:54:14 +02:00
Krzesimir Nowak
ecb2e3cd76 build_image: Allow specifying which OEM sysexts to build
Useful if we want to locally generate one kind of image for testing.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-04-29 13:01:13 +02:00
flatcar-ci
30a0171ddc New version: main-4684.0.0-nightly-20260428-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4684.0.0-nightly-20260428-2100
2026-04-29 09:33:05 +00:00
flatcar-ci
ae2e05911c Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-28 22:58:26 +00:00
flatcar-ci
87799f19e1 New version: main-4684.0.0-nightly-20260428-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-28 21:00:29 +00:00
Jan Bronicki
8c571a62be
Merge pull request #3964 from flatcar/john15321/update-sdk-scripts-to-have-better-msgs
Improve SDK container setup messages for new users
2026-04-28 17:40:16 +02:00
Dongsu Park
694490e3f1
Merge pull request #3963 from flatcar/dongsu/ue-rs-20260423
overlay ue-rs: update to 2026-04-28
2026-04-28 17:23:32 +02:00
Dongsu Park
6463a796a9 overlay ue-rs: update to 2026-04-28
Update ue-rs to 2026-04-28.

Pulls in following PRs:
* https://github.com/flatcar/ue-rs/pull/104
* https://github.com/flatcar/ue-rs/pull/105
* https://github.com/flatcar/ue-rs/pull/106
* https://github.com/flatcar/ue-rs/pull/108
* https://github.com/flatcar/ue-rs/pull/109

Signed-off-by: Dongsu Park <dongsu@dpark.io>
2026-04-28 11:46:17 +02:00
flatcar-ci
b09e9e856a Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-27 23:50:10 +00:00
flatcar-ci
e5c8901a3d New version: main-4683.0.0-nightly-20260427-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-27 21:00:36 +00:00
Mathieu Tortuyaux
75776dcff7
Merge pull request #3965 from flatcar/cacerts-3.123.1-main
Update ca-certificates in main from 3.122 to 3.123.1
2026-04-27 17:04:55 +02:00
James Le Cuirot
983315c398
Merge pull request #3955 from flatcar/chewi/more-sdk-fixes 2026-04-27 13:31:48 +01:00
Flatcar Buildbot
20a59b28e8 app-misc/ca-certificates: Update from 3.122 to 3.123.1
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2026-04-27 07:54:00 +00:00
flatcar-ci
6e8746f372 Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-24 23:10:05 +00:00
flatcar-ci
03425fd0c9 New version: main-4680.0.0-nightly-20260424-2100-INTERMEDIATE
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-24 21:00:39 +00:00
James Le Cuirot
2fb7105dba
Merge pull request #3936 from flatcar/firmware-20260410-main
Upgrade Linux Firmware in main from 20260309 to 20260410
2026-04-24 13:24:37 +01:00
Jan Bronicki
2d7b05f635
Improve curl command output and update fallback message for SDK tarball download
Signed-off-by: Jan Bronicki <janbronicki@gmail.com>
2026-04-24 13:50:27 +02:00
flatcar-ci
63c4137c94 Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-23 23:00:56 +00:00
flatcar-ci
56f0755cf8 New version: main-4679.0.0-nightly-20260423-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-23 21:00:36 +00:00
flatcar-ci
d515161137 Revert failed version back to 4676.0.0+nightly-20260420-2100 2026-04-22 22:59:05 +00:00
flatcar-ci
2e399ee52d New version: main-4678.0.0-nightly-20260422-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-04-22 21:00:33 +00:00
James Le Cuirot
c8915792a8
Merge pull request #3956 from zhijianli88/fix-image-scripts
Fix image scripts
2026-04-22 11:21:23 +01:00
James Le Cuirot
22028e4595
Merge pull request #3954 from jqueuniet/secureboot_params
Parameterize secure boot keys
2026-04-22 11:04:51 +01:00
Johann Queuniet
e48c9ffebe
Parameterize secure boot keys
Signed-off-by: Johann Queuniet <sub_code.git@queuniet.fr>
2026-04-22 06:30:48 +02:00
Li Zhijian
87c3463c99 image_to_vm.sh: keep compression source for seamless VM launch
Previously, the compression source was deleted after compression.
Keep it to allow seamless VM launching.

Signed-off-by: Li Zhijian <lizhijian@fujitsu.com>
2026-04-22 02:55:24 +00:00
Li Zhijian
73caf995db vm_image_util.sh: use -display curses for QEMU 7.1+
The -curses option was removed in QEMU 7.1, use -display curses
as the replacement.

Signed-off-by: Li Zhijian <lizhijian@fujitsu.com>
2026-04-22 02:53:22 +00:00
James Le Cuirot
28831b50a6
sys-apps/baselayout: Modify ${ROOT} rather than ${D} in pkg_preinst
update_sdk_container_image failed to update baselayout because it
touched /sys, which is not allowed in an unprivileged docker build
environment.

dumb-tmpfiles-proc.sh does not touch existing directories, but it was
modifying the staging directory rather than the live filesystem, causing
Portage to record /sys in the package's CONTENTS and then make changes
to it when merging.

We only need to create the directories in pkg_preinst because the other
file types are already created in src_install.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:05 +01:00
James Le Cuirot
8f8977f668
build_image_util: Don't install packages to image with bad USE flags
This generally shouldn't happen, given that we mostly only keep one
instance of a bin package, but just in case.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:04 +01:00
James Le Cuirot
433f8c40fd
app-shells/bash: Apply tentative patch to try to fix wait error
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:03 +01:00
James Le Cuirot
d42574d094
sdk_lib: Don't disable the Portage sandboxes most of the time
We have long run with the ipc, network, and pid sandboxes disabled in
the belief that these did not work in a container even if it was
privileged. I suspect it really did work back then, but it certainly
does work now regardless.

update_sdk_container_image uses Portage in an unprivileged docker build
environment, so it is still necessary to disable these here. However,
this can be done more easily through the environment, and the regular
sandbox should work fine.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:02 +01:00
James Le Cuirot
d121b9594e
update_sdk_container_image: Don't truncate docker build output
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:15:01 +01:00
James Le Cuirot
d85bbc31a1
overlay profiles: Don't complain when rm_masked_debug_files does nothing
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2026-04-21 14:14:57 +01:00