Commit Graph

31512 Commits

Author SHA1 Message Date
Mathieu Tortuyaux
fb68706bb4
Merge pull request #2915 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-05-15 17:05:48 +02:00
Flatcar Buildbot
9c3084c8b9 Update mantle container image to latest HEAD 2025-05-15 15:05:28 +00:00
Dongsu Park
682339a53e changelog: add changelog for afterburn 5.8.2
Add changelog for coreos-base/afterburn 5.8.2.
2025-05-15 11:37:24 +02:00
Dongsu Park
d75a3cb7d0 overlay afterburn: update to 5.8.2
Update coreos-base/afterburn to 5.8.2, mainly to address CVE-2025-3416.

* Adjust Flatcar patches based on the new upstream.
* Remove the openssl patch, which is already included in the upstream.
* Remove proxmoxve patches, also already in the upstream.
2025-05-15 11:37:21 +02:00
Flatcar Buildbot
bcb3e5a409 sys-kernel/coreos-firmware: Update from 20250410 to 20250509 2025-05-15 07:05:49 +00:00
flatcar-ci
835111e92f New version: main-4334.0.0-nightly-20250513-2100 2025-05-13 21:00:29 +00:00
Daniel Zatovic
0d1dcb5cfb changelog: add enttries (NVIDIA sysext and OOT signing) 2025-05-13 17:31:43 +02:00
Mathieu Tortuyaux
542beedb6c
Merge pull request #2906 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-05-13 11:57:55 +02:00
Daniel Zatovic
a96ba6d0ca sysext: build nvidia-persistenced daemon 2025-05-13 11:26:09 +02:00
Daniel Zatovic
c18b565984 acct-user/nvpd: Add from Gentoo
Needed for the nvidia-persistenced daemon.

It's from Gentoo commit e36ce47183552f9fc23556492d70ab4dc5f11e81.
2025-05-13 11:26:09 +02:00
Daniel Zatovic
ee918fb32b sysext: don't build nvidia-drivers on ARM 2025-05-13 11:26:09 +02:00
Daniel Zatovic
9cb0d0c8e5 sysext: allow for architecture-specific sysexts 2025-05-13 11:26:09 +02:00
Daniel Zatovic
894c794aeb sysext: Use SLOT notation in NVIDIA drivers version 2025-05-13 11:26:09 +02:00
Daniel Zatovic
820bc74c3b sysext: Change the sysext seperator from : to |
To be able to use the SLOT syntax, which uses : we need to change the
sysext seperator to |.
2025-05-13 11:26:09 +02:00
Daniel Zatovic
5f54ecfd9e setup-nvidia: Stop when NVIDIA sysext is loaded
Don't build NVIDIA drivers when the flatcar-nvidia-drivers sysext is
loaded, only load the prebuilt modules. Also make the nvidia.service run
after the sysexts are merged. Otherwise, it might start building the
modules and conflict with the prebuilt drivers sysext.
2025-05-13 11:26:09 +02:00
Daniel Zatovic
4efb615a55 sysext: Add pre-built NVIDIA drivers 2025-05-13 11:26:09 +02:00
Daniel Zatovic
305d999148 sysext: Allow per-sysext USE flags 2025-05-13 11:26:09 +02:00
Daniel Zatovic
31093f0b75 overlay profiles: configure nvidia-drivers package
Accept the NVIDIA-r2 license and don't build the NVIDIA tools.
2025-05-13 11:26:09 +02:00
Daniel Zatovic
be2cbc7bd4 portage-stable: Add nvidia-drivers ebuilds
From Gentoo commit 9fbc01bc73344c66498d3a3ccbf4fff5be10219b
2025-05-13 11:26:09 +02:00
Daniel Zatovic
ab90a85304 Rename nvidia-drivers to nvidia-drivers-service 2025-05-13 11:26:09 +02:00
Flatcar Buildbot
e9dddcb6d8 Update mantle container image to latest HEAD 2025-05-13 08:58:11 +00:00
Adrian Vladu
482ab8790b
Merge pull request #2300 from flatcar/ader1990/linux_kernel_6_10
Upgrade Linux kernel from 6.6 to 6.12
2025-05-13 08:48:10 +03:00
Adrian Vladu
87e5a37edf
Update changelog/updates/2025-04-25-kernel-6.12.md
Co-authored-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-05-13 08:45:00 +03:00
flatcar-ci
8dc37f6f42 New version: main-4333.0.0-nightly-20250512-2100 2025-05-12 21:00:30 +00:00
Mathieu Tortuyaux
15fd9f1d05
Merge pull request #2900 from flatcar/tormath1/bpf-tools
coreos-base/misc-files: add back BCC tools
2025-05-12 17:26:58 +02:00
Mathieu Tortuyaux
89a01dd504
changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2025-05-12 16:05:27 +02:00
Mathieu Tortuyaux
1d09e252e3
coreos-base/misc-files: add back BCC tools
This file was not sourced because it does not have '.bash' or '.sh'
suffix.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2025-05-12 16:05:14 +02:00
Adrian Vladu
951883e793 linux: re-add CONFIG_MD_LINEAR=m
See: 127186cfb1
2025-05-12 10:27:02 +00:00
Adrian Vladu
82015b771d linux: add changelog for Linux kernel 6.12 upgrade 2025-05-12 10:25:42 +00:00
Adrian Vladu
4da9105948 linux: config: add and remove required build configs
Remove CONFIG_AMD_IOMMU_V2, CONFIG_FB_ARMCLCD, CONFIG_MD_LINEAR, CONFIG_NET_ACT_IPT.

Add CONFIG_MODULE_COMPRESS.

See: 5a0b11a180

linux: remove CONFIG_MD_LINEAR

See: 849d18e27b

linux: remove CONFIG_NET_ACT_IPT

See: 86fe596b58

linux: add required CONFIG_MODULE_COMPRESS=y

See: c7ff693fa2

linux: remove CONFIG_FB_ARMCLCD

See: dee56ccb46
2025-05-12 10:25:42 +00:00
Adrian Vladu
e9dcdfb12b app-emulation/hv_daemons: update the hv_fcopy to hv_fcopy_uio, add hv_fcopy_uio_daemon
See: 82b0945ce2wq

Also fix hv tools build for arm64.
2025-05-12 10:25:42 +00:00
Jeremi Piotrowski
da743a4b46 coreos-modules: Disable DRM_FBDEV_EMULATION
The out-of-tree nvidia driver requires symbols that are behind DRM_TTM_HELPER
if DRM_FBDEV_EMULATION is enabled, but DRM_TTM_HELPER can't be selected unless
we build more drm drivers (which is undesirable). To get out of this, disable
DRM_FBDEV_EMULATION.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-05-12 10:25:42 +00:00
Adrian Vladu
1fa0474efa linux: pahole flags moved to scripts/Makefile.btf
pahole: added a revamped patch to remove the parallel implementation
kernel: use pahole 1.27 feature of reproducible builds
2025-05-12 10:25:42 +00:00
Adrian Vladu
38cd59cab3 kernel: use new patches for secure boot
From: https://sources.debian.org/data/main/l/linux/6.12~rc6-1~exp1/debian/patches/features/all/lockdown/
2025-05-12 10:25:42 +00:00
Adrian Vladu
d67a07b8f0 kernel: upgrade from 6.6 to 6.12.20 2025-05-12 10:25:42 +00:00
Mathieu Tortuyaux
659610b07f
Merge pull request #2894 from flatcar/cacerts-3.111-main
Update ca-certificates in main from 3.110 to 3.111
2025-05-12 10:07:42 +02:00
Flatcar Buildbot
79a0f6e7ea app-misc/ca-certificates: Update from 3.110 to 3.111 2025-05-12 07:10:52 +00:00
flatcar-ci
d6d304936e New version: main-4330.0.0-nightly-20250509-2100 2025-05-10 02:37:59 +00:00
flatcar-ci
650be5eaf9 New version: main-4330.0.0-nightly-20250509-2100-INTERMEDIATE 2025-05-09 21:00:28 +00:00
Krzesimir Nowak
ff22ccb5bd
Merge pull request #2886 from flatcar/krnowak/pkg-auto-fix-occurences
pkg-auto: Fix occurences generation
2025-05-09 11:29:57 +02:00
Krzesimir Nowak
45faa790cc pkg-auto: Fix occurences generation
Occurences file shows where the package name shows up in the
repository. It tries to be smart, so that checking for sys-devel/gcc
will not be showing sys-devel/gcc-config. But the smart check was
flawed as it ignored the forms like sys-devel/gcc-${PV}. Noticed when
trying to check occurences for sys-libs/libsepol and there were not
enough occurences shown.
2025-05-09 09:24:10 +02:00
flatcar-ci
8418d9f5e7 New version: main-4329.0.0-nightly-20250508-2100 2025-05-08 21:00:28 +00:00
Krzesimir Nowak
5bde4cbecf
Merge pull request #2871 from flatcar/buildbot/weekly-portage-stable-package-updates-2025-05-05
Weekly portage-stable package updates 2025-05-05
2025-05-08 12:26:50 +02:00
Krzesimir Nowak
48c1f6dd43 changelog: Add an entry 2025-05-08 12:25:50 +02:00
James Le Cuirot
b10387a933
Merge pull request #2863 from flatcar/chewi/extract-vmlinuz-mkdir
build_library: Fix extraction script and sort content listings
2025-05-08 08:04:40 +01:00
James Le Cuirot
10498c29fb
build_library: Create extraction script temp files in $TMPDIR or /tmp
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-05-08 07:59:54 +01:00
James Le Cuirot
68def073cf
build_library: Sort content listings for more consistent output
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-05-08 07:59:53 +01:00
James Le Cuirot
ec904175e6
build_library: Fix directory handling in extraction script
I thought cpio was always creating the output directory automatically,
but it was silently failing. It would only extract the next rootfs when
run a subsequent time.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-05-08 07:59:52 +01:00
Sayan Chowdhury
9af775ba36
Merge pull request #2867 from flatcar/linux-6.6.89-main
Upgrade Linux Kernel for main from 6.6.88 to 6.6.89
2025-05-08 10:31:23 +05:30
Krzesimir Nowak
20b1a3904a overlay coreos/config: Update install mask for net-firewall/nftables
The nftables-restore service was split into nftables-load and
nftables-store.
2025-05-07 13:36:50 +02:00