23004 Commits

Author SHA1 Message Date
Kai Lueke
aab279e546 sys-apps/systemd: add update checklist file for other repos
The "init" repo has a systemd unit with lines that should be kept in
sync with upstream. Normally changes are not expected but in case there
are some, it may be good to be aware.
2022-04-13 20:42:45 +09:00
Kai Lueke
b72f6270ae coreos-base/coreos-init: skip ensure-sysext unit
This pulls in https://github.com/flatcar-linux/init/pull/68 to skip
the ensure-sysext unit when systemd-sysext is skipped to prevent a
dependency failure being reported.

Closes: https://github.com/flatcar-linux/Flatcar/issues/710
2022-04-13 20:42:45 +09:00
Krzesimir Nowak
004eb51116 Merge pull request #1806 from flatcar-linux/linux-5.15.33-main
Upgrade Linux Kernel in main from 5.15.32 to 5.15.33
2022-04-13 13:14:04 +02:00
Mathieu Tortuyaux
4d352c07ca
Merge pull request #271 from flatcar-linux/tormath1/packet
ci-automation/vms: rename equinix_metal to packet
2022-04-13 13:10:45 +02:00
Mathieu Tortuyaux
de7e05403b
ci-automation/vms: rename equinix_metal to packet
this is required to keep "packet" in the SDK linguo while the user can
use "equinix_metal" term.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Co-authored-by: Krzesimir Nowak <knowak@microsoft.com>
2022-04-13 13:09:51 +02:00
Flatcar Buildbot
1b0798a8cf dev-lang: Upgrade Go 1.17.8 to 1.17.9 2022-04-13 08:49:29 +00:00
Dongsu Park
3f9e8fe33d profiles: accept keywords ~arm64 for app-arch/libarchive 3.6.1
Accept keywords ~arm64 for app-arch/libarchive 3.6.1.
2022-04-13 10:24:47 +02:00
Dongsu Park
c734e9c3da changelog: add changelog for libarchive 3.6.1 2022-04-13 10:23:31 +02:00
flatcar-ci
6efbee7429 New version: main-3208.0.0-nightly-20220413-0155 2022-04-13 04:46:50 +00:00
Jeremi Piotrowski
8127e67ec7 coreos-base/oem-gce: allow container to mess with /sys and /proc/irq
The container performs multi-queue optimizations for ssd and network devices
which requires touching /proc and /sys/ mounts which systemd-nspawn usually
mounts readonly. Allow the container to modify those by setting the appropriate
environment variable (found via https://systemd.io/ENVIRONMENT/).
2022-04-12 15:38:23 +02:00
Jeremi Piotrowski
2a3c23cd62 app-emulation/google-compute-engine: update to 20190124
and add missing dependencies on dev-python/distro and sys-apps/coreutils. We
need to bump the version to 20190124 because:

* 20180611 is not compatible with python 3.9 because of missing distro module and
  trying to access os.errno (instead of importing the errno module). Also why we
  need the dependency on dev-python/distro

* 20190124 is the last version before the repo was split and reorganized which
  would require more work to the ebuilds

The coreutils dependency is necessary because the scripts call basename/nproc/cat
but previously coreutils was pulled in by the following dependency chain:

(dependency required by "app-admin/eselect-1.4.16::portage-stable" [binary])
(dependency required by "app-eselect/eselect-python-20160516::portage-stable" [binary])
(dependency required by "dev-lang/python-2.7.15::portage-stable" [binary])
(dependency required by "dev-python/boto-2.48.0::portage-stable" [binary])
(dependency required by "app-emulation/google-compute-engine-20180611::coreos" [binary])
(dependency required by "coreos-base/coreos-oem-gce-0.0.1-r5::coreos" [binary])
(dependency required by "coreos-base/coreos-oem-gce" [argument])

This chain seems to not hold any longer and we should be explicit about
dependencies.
2022-04-12 15:34:32 +02:00
Jeremi Piotrowski
5a5e01afff profiles/.../oem-aci: allow python3 in oem-aci images
The oem-aci profile previously removed python3 from the produced oem
images by having an entry saying dev-lang/python-3.X is provided and
removing all python3 files. This only worked as long as python2 was
available and installed instead, but since python2 was removed from the
tree these entries in the profile resulted in oem-aci having no python
at all. This prevents the oem-gce service from working, since a lot of
what it does is python.

Remove the INSTALL_MASK and package.provided entries for python3 to
allow python3 into oem-aci images.
2022-04-12 15:32:57 +02:00
Dongsu Park
55eced2cf1 app-arch/libarchive: update to 3.6.1
Update app-arch/libarchive to 3.6.1 mainly to address CVE-2022-26280.
2022-04-12 12:01:23 +02:00
Dongsu Park
aa1e2bd64b Merge pull request #1807 from flatcar-linux/rust-1.60.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.59.0 to 1.60.0
2022-04-12 10:50:56 +02:00
Flatcar Buildbot
cadfeeaa21 dev-lang: Upgrade dev-lang/rust 1.59.0 to 1.60.0 2022-04-11 08:32:12 +00:00
Jeremi Piotrowski
6f7b4b3a9d dev-python/distro: Import from gentoo
This package is needed by the current version of google-compute-engine that we
ship but the dependency has been missing. We haven't noticed because the
package has actually been broken since python2 was dropped from the tree.
distro is needed to replace some functionality removed from the python standard
library around python 3.7.

Upstream commit 7f74353b350b409329b5bb37aea3c05fbb8cb00d
2022-04-11 07:38:05 +00:00
Flatcar Buildbot
d036d79ec9 sys-kernel: Upgrade Kernel 5.15.32 to 5.15.33 2022-04-09 07:22:27 +00:00
flatcar-ci
8459c55d36 New version: main-3204.0.0-nightly-20220409-0155 2022-04-09 04:46:28 +00:00
Mathieu Tortuyaux
450f468bfb Merge pull request #1801 from flatcar-linux/tormath1/rapl
sys-kernel/coreos-modules: build RAPL module
2022-04-08 21:14:20 +02:00
Mathieu Tortuyaux
8d414910a4 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-08 15:28:07 +02:00
Mathieu Tortuyaux
78aaf24880 sys-kernel/coreos-modules: build RAPL module
This enables support for the Intel Running Average Power Limit (RAPL)
technology via MSR interface, which allows power limits to be enforced
and monitored on modern Intel processors.

It can be useful for energy consumption monitoring tools.

src: https://github.com/torvalds/linux/blob/master/drivers/powercap/Kconfig

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-08 15:27:46 +02:00
Mathieu Tortuyaux
01ca43750d Merge pull request #1769 from flatcar-linux/tormath1/afterburn
coreos-base/afterburn: sync with 5.2.0
2022-04-08 11:23:21 +02:00
Mathieu Tortuyaux
3dcf25a213 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-08 11:22:44 +02:00
Mathieu Tortuyaux
fc0098caf4 coreos-base/afterburn: apply flatcar changes
* partially revert cl-legacy feature (without update-ssh-keys dependency)
  to bring back `vagrant_virtualbox` provider and ec2, gce
  cmdline support
* backport kernel parameters patch
* backport systemd-networkd-wait-online patch
* add Alias= to services
* sed AFTERBURN -> COREOS, AWS -> EC2, GCP -> GCE
* use update-ssh-keys to generate .ssh/authorized_keys

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-08 11:22:41 +02:00
flatcar-ci
0fb52387a0 New version: main-3202.0.0-nightly-20220407-0155 2022-04-07 04:54:41 +00:00
Mathieu Tortuyaux
60441ac4ea coreos-base/afterburn: sync with the upstream
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-06 16:58:15 +02:00
Mathieu Tortuyaux
146e8915e7
Merge pull request #269 from flatcar-linux/tormath1/fix-gce
kola/gce: shrink hostname to be lower than 63 char
2022-04-06 16:46:01 +02:00
Mathieu Tortuyaux
ae73d66a07
kola/gce: shrink hostname to be lower than 63 char
GCP Pro is failing because hostname is > 63 char:
```
Apr  5 19:52:27.522820 kubelet[1762]: E0405 19:52:27.522513    1762 kubelet_node_status.go:93] "Unable to register node with API server" err="Node \"jenkins-gce-pro-5-91a967ef5450cb932bc5.c.flatcar-212911.internal\" is invalid: metadata.labels: Invalid value: \"jenkins-gce-pro-5-91a967ef5450cb932bc5.c.flatcar-212911.internal\": must be no more than 63 characters" node="jenkins-gce-pro-5-91a967ef5450cb932bc5.c.flatcar-212911.internal"
```

Let's remove `jenkins` and `gce` from the hostname, these
information are not critical for debugging purposes.

Hostname should now looks like
"basic-5-91a967ef5450cb932bc5.c.flatcar-212911.internal" or
"pro-5-91a967ef5450cb932bc5.c.flatcar-212911.internal"

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-06 16:45:31 +02:00
Krzesimir Nowak
80a6408ba5 Merge pull request #1178 from flatcar-linux/krnowak/update-go
Update golang update job to update multiple golang versions
2022-04-06 16:21:47 +02:00
flatcar-ci
8a92736a1d New version: main-3201.0.0-nightly-20220406-0155 2022-04-06 04:46:22 +00:00
Dongsu Park
3f27ce29f9 Merge pull request #1781 from flatcar-linux/runc-1.1.1-main
Upgrade Runc in main from 1.1.0 to 1.1.1
2022-04-05 16:12:52 +02:00
Flatcar Buildbot
5a78721f2c app-emulation: Upgrade Runc 1.1.0 to 1.1.1 2022-04-05 12:49:16 +02:00
flatcar-ci
c547aed816 New version: main-3200.0.0-nightly-20220405-0155 2022-04-05 04:57:50 +00:00
Kai Lüke
fbcc7639e8 Merge pull request #1794 from flatcar-linux/kai/update-ssh-keys-after-ignition
coreos-base/coreos-init: run update-ssh-keys once after Ignition
2022-04-04 20:35:25 +02:00
Kai Lueke
5bc2d57025 coreos-base/coreos-init: run update-ssh-keys once after Ignition
This pulls in
https://github.com/flatcar-linux/init/pull/66
to fix the problem that Ignition keys would be lost as soon as
update-ssh-keys runs. This is done by placing Ignition's keys in as
files in the authorized_keys.d folder and calling update-ssh-keys after
Ignition ran.
2022-04-04 20:35:07 +02:00
Krzesimir Nowak
f0240c5530 Merge pull request #1799 from flatcar-linux/cacerts-3.77-main
Upgrade ca-certificates in main from 3.76 to 3.77
2022-04-04 17:56:08 +02:00
Krzesimir Nowak
809e511e67 Merge pull request #1783 from flatcar-linux/krnowak/pkg-updates-2020
Profile cleanups for package updates, 2020 edition
2022-04-04 17:31:13 +02:00
Krzesimir Nowak
0e9397c108 Merge pull request #320 from flatcar-linux/krnowak/pkg-updates-2020
Update packages from 2020
2022-04-04 17:31:12 +02:00
Krzesimir Nowak
3d4c729901 Merge pull request #318 from flatcar-linux/krnowak/downgrade-selinux-sssd
sec-policy/selinux-sssd: Downgrade to match other SELinux packages
2022-04-04 17:27:36 +02:00
Kai Lüke
7376494ef2
Merge pull request #266 from flatcar-linux/kai/sdk-from-release-tag
ci-automation: use a single git tag and skip nightlies with no changes
2022-04-04 17:12:36 +02:00
Krzesimir Nowak
ebbf086971 Merge pull request #1789 from flatcar-linux/mantle-update-main
Upgrade mantle to latest HEAD in main
2022-04-04 14:30:08 +02:00
flatcar-ci
ae6d9d78ff New version: sdk-3199.0.0-nightly-20220404-0656 sdk-3199.0.0-nightly-20220404-0656 2022-04-04 10:10:17 +00:00
Flatcar Buildbot
da81edf384 app-misc: Upgrade ca-certificates 3.76 to 3.77 2022-04-04 07:23:34 +00:00
flatcar-ci
6a922baf36 New version: sdk-3199.0.0-nightly-20220404-0140 sdk-3199.0.0-nightly-20220404-0140 2022-04-04 04:40:56 +00:00
flatcar-ci
9d31755e33 New version: sdk-3198.0.0-nightly-20220403-0140 sdk-3198.0.0-nightly-20220403-0140 2022-04-03 04:36:00 +00:00
flatcar-ci
0e74fe0306 New version: sdk-3197.0.0-nightly-20220402-0140 sdk-3197.0.0-nightly-20220402-0140 2022-04-02 04:37:29 +00:00
Krzesimir Nowak
69ef222c6f .github: Update multiple golang versions
Usually last two versions are supported, so make sure we keep them
both updated, not only just the latest. But try to also update the
newest unsupported version in case there was a window where the update
happened and then new major version was released.
2022-04-01 22:25:06 +02:00
Krzesimir Nowak
5daf5eb1ca .github: Allow specifying a start number for generated patches
When an action generates a couple of patches separately, then it might
be a good idea to specify a numbering, so applying the patches is done
in the desired order. Without that, all the generated patches would
start with "0001-" prefix.
2022-04-01 22:15:59 +02:00
Krzesimir Nowak
caf091343a dev-lang/go: Drop the patch for go 1.12
The patch dropped some security changes related to URL parsing in
go-1.12 to avoid breaking rkt. Since rkt is gone, the patch could be
dropped too.
2022-04-01 21:21:35 +02:00
Kai Lueke
bd970357c8 ci-automation: use a single git tag and skip nightlies with no changes
The pipeline created two tags if an SDK was built, one for the SDK and
one for the OS build (which was a free-standing tag or a local state
that was equivalent to the existing tag of the same name). The
nightlies created update commits on the main branch, even if no change
was done, and on the release branches we lacked these commits.

Create the release tag in the nightly SDK bootstrap already and reuse
it for the nightly OS build. Instead of local state, checkout the
existing tags explicitly. Extend the nightly update commit logic to
cover release branches and detect if we can skip building because no
changes were done.
2022-04-01 17:18:51 +02:00