Commit Graph

22792 Commits

Author SHA1 Message Date
Dongsu Park
51a6e7f667 app-admin/sudo: update to 1.9.13_p3
Update app-admin/sudo to 1.9.13_p3, mainly to address
CVE-2023-27320, CVE-2023-28486, CVE-2023-28487.

Gentoo commit: 4aebe55f8c434205f2ea3d28ffacb834a401bc1f
2023-06-02 11:31:15 +02:00
Gabriel
1cfedaf8b3
Merge pull request #862 from flatcar/gabriel-samfira/add-on-pr-workflow
Add on pr workflow
2023-06-02 10:32:24 +03:00
Gabriel Adrian Samfira
6819fd1a9e
Properly reference inputs
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2023-06-01 19:18:23 +03:00
Gabriel Adrian Samfira
3a0a28e32a
Make jobs cancelable
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2023-06-01 18:39:14 +03:00
Gabriel Adrian Samfira
91b96b21b3
Define output for update_sdk
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2023-06-01 17:42:24 +03:00
Gabriel Adrian Samfira
66bfe6a6e5
Look for /update-sdk in PR description
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2023-06-01 16:59:37 +03:00
Krzesimir Nowak
29646ff054 overlay profiles: Drop obsolete accept keywords for sys-process/tini 2023-06-01 15:50:11 +02:00
Krzesimir Nowak
ce824ba166 overlay app-emulation/docker: Drop one modification 2023-06-01 15:50:11 +02:00
Krzesimir Nowak
211ae347e9 .github: Add sys-process/tini to packages list 2023-06-01 15:45:19 +02:00
Krzesimir Nowak
744788efe4 sys-process/tini: Move to portage-stable and sync with Gentoo
It's from Gentoo commit 3d3624f4ebb26b9fc9c9ecbff7ff0c67b3f9aa4f.

We used to have it as a fork to replace cmake-based build system with
an autotools-based one. The reason was that we didn't provide cmake in
SDK, which is not true any more.
2023-06-01 15:44:18 +02:00
Flatcar Buildbot
276357658a portage-stable/metadata: Monthly GLSA metadata updates 2023-06-01 07:15:06 +00:00
flatcar-ci
dc7412c405 New version: main-3621.0.0-nightly-20230531-2100 2023-05-31 21:00:24 +00:00
Gabriel Adrian Samfira
215fb8f823
Refactor workflows
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2023-05-31 15:17:32 +03:00
Gabriel Adrian Samfira
0513a6e82c
enable on PR
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2023-05-31 14:56:33 +03:00
Kai Lüke
a3a3cc4510
Merge pull request #851 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-05-31 10:28:05 +02:00
Flatcar Buildbot
a2a366683b Update mantle container image to latest HEAD 2023-05-31 07:23:48 +00:00
Thilo Fromm
0a8f4a54a9
Merge pull request #846 from flatcar/t-lo/fix-pr-test-results-comment
workflows/pr-comment,run-kola: fix concurrency + results comment
2023-05-31 09:23:29 +02:00
flatcar-ci
78769d88d0 New version: main-3620.0.0-nightly-20230530-2100 2023-05-30 21:00:28 +00:00
Thilo Fromm
5e1a2c270d workflows/pr-comment-builds: remove always() condition
Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2023-05-30 18:13:11 +02:00
Krzesimir Nowak
b5dbef8d2b
Merge pull request #701 from flatcar/krnowak/move-oem-mountpoint
/usr/share/oem -> /oem
2023-05-30 16:00:33 +02:00
Krzesimir Nowak
d35a6c7de5 changelog: Add an entry 2023-05-30 15:59:37 +02:00
Krzesimir Nowak
a0b195f876 ci-automation: Allow using --devcontainer-file option too
I seem to have problems with getting a network connectivity inside
QEMU vm when running the tests in the azure machine. I don't know
what's the cause, but for the dev container tests these problems can
be worked around by using the locally provided dev container
image. Make it possible by specifying QEMU_DEVCONTAINER_FILE in the
environment.
2023-05-30 15:59:37 +02:00
Krzesimir Nowak
0634f969a6 overlay: Put OEM files into /oem now
The mountpoint for the OEM partition got moved from /usr/share/oem to
/oem to avoid complications when applying a OEM sysext image in the
OEM partition - systemd was unmounting all the mountpoints under /usr
before applying the sysext, which made our OEM images unavailable.

There's still the /usr/share/oem symlink for compatibility, but it's
better to use the new location right away.
2023-05-30 15:59:37 +02:00
Krzesimir Nowak
33d2af5600 build_library: Adapt to /oem being the new OEM partition mountpoint
This requires us to add another directory to keep when removing a
regenerable state from rootfs. Other changes were straightforward find
and replace.
2023-05-30 15:53:17 +02:00
Kai Lüke
84166fcc00
Merge pull request #830 from ader1990/arm64_qemu_enable_vnc_display
arm64: fix vnc console on qemu-kvm arm64
2023-05-30 13:02:27 +02:00
flatcar-ci
2cc8309173 New version: main-3619.0.0-nightly-20230529-2100 2023-05-29 21:00:24 +00:00
Dongsu Park
37e8700d7a changelog: add changelog for Go 1.20.4, amazon-ssm-agent 3.2.985.0 2023-05-29 12:47:08 +05:30
Dongsu Park
a1505ce339 .github: add go-bootstrap to list of the auto updated packages 2023-05-29 12:47:08 +05:30
Dongsu Park
077433411e app-emulation/amazon-ssm-agent: update to 3.2.985.0
Use Go 1.19 as Go 1.12 does not exist.
Update amazon-ssm-agent to 3.2.985.0, because 2.3.1319.0 does not work
with Go 1.19.
Clean up unnecessary patches.
2023-05-29 12:47:08 +05:30
Dongsu Park
57fbd63a3b dev-lang/go-bootstrap: update to 1.18.6
Update dev-lang/go-bootstrap to 1.18.6, by syncing with Gentoo commit
1b3154a4473deedaf3d1deb978f9a19739ac03af.

This is necessary because Go >= 1.20 requires go-bootstrap to be at
least 1.17.13.

Drop unnecessary Flatcar patches from go-bootstrap, and move the ebuild
from coreos-overlay to portage-stable.
2023-05-29 12:47:08 +05:30
Dongsu Park
73bf57ac22 coreos-base/hard-host-depends: add Go 1.20, remove 1.18
Add Go 1.20 to the SDK, delete the unnecessary 1.18.
Delete 1.12 which does not work with go-bootstrap 1.18.
2023-05-29 12:47:08 +05:30
Dongsu Park
93a898312d app-emulation/docker*: build docker with Go 1.19
Go 1.18 is already EOL, so no security update at all. Since
upstream docker projects already have Go 1.19, Flatcar should also have
that.

See also
5d6db84223/Dockerfile (L6).
2023-05-29 12:47:08 +05:30
Dongsu Park
1d2ea91f6a eclass: install pkg/linux_{amd64,arm64} only for 1.19 or older
Since Go 1.20 stopped shipping pre-compiled package archives for the
standard library in $GOROOT/pkg, it became impossible to install
pkg/linux_{amd64,arm64} for every version. To avoid build failure,
install the library if the Go slot number is 1.19 or older.

Also depend on go-bootstrap 1.17.13 or newer.

See also https://go.dev/doc/go1.20.
2023-05-29 12:47:08 +05:30
Dongsu Park
886cdf4485 eclass: update the default Go version to 1.20.4
Update the default Go version from 1.19 to the latest 1.20.

Note, we still keep setting COREOS_GO_VERSION="go1.19" for
containerd, cri-tools, docker, docker-cli, docker-proxy, docker-runc,
following the default version of upstream projects.
2023-05-29 12:47:08 +05:30
Dongsu Park
487a2a1065 dev-lang/go: add 1.20.4, drop 1.18.10, 1.12.17
Add Go 1.20.4 and drop unnecessary versions 1.18.10, 1.12.17.
2023-05-29 12:47:08 +05:30
flatcar-ci
886364ccdc New version: main-3616.0.0-nightly-20230526-2100-INTERMEDIATE 2023-05-26 21:00:26 +00:00
Dongsu Park
f2abe8b755
Merge pull request #842 from flatcar/linux-6.1.30-main
Upgrade Linux Kernel for main from 6.1.27 to 6.1.30
2023-05-26 18:51:06 +02:00
Adrian Vladu
c76e969d47 arm64: fix vnc console on qemu-kvm arm64
Without DRM configured in the Linux kernel, the VNC console will show a
screen with the message: "Display output is not active".

Although the on QEMU-KVM AMD64 the issue is not presented, I have
enabled the same flags for consistency.

Fixes: https://github.com/flatcar/Flatcar/issues/1030
2023-05-26 15:55:13 +03:00
Thilo Fromm
af686c0f41 workflows/pr-comment-dispatcher: post link to workflow run
Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2023-05-26 10:07:00 +02:00
Thilo Fromm
a14a89f2b8 workflows/pr-comment,run-kola: fix concurrency + results comment
This change includes 2 unrelated small fixes to the "PR comment command"
build+test feature:

1. The concurrency group now contains the PR number, ensuring that
   builds for multiple PRs can run in parallel. This addresses an issue
   in which starting a build on a PR would cancel a running build of
   another PR.
2. Post test results to the PR where the build command was issued on.
   The add-pr-comment step's condition was not updated when switching
   to PR comment commands for starting builds, so the step would only
   run if the action was triggered by a PR change event. Since we now
   trigger on issue_comment, the step never ran.

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2023-05-26 09:48:49 +02:00
flatcar-ci
d69e400f0b New version: main-3615.0.0-nightly-20230525-2100 2023-05-25 21:00:31 +00:00
Krzesimir Nowak
ce53ba7512
Merge pull request #831 from flatcar/buildbot/weekly-portage-stable-package-updates-2023-05-22
Weekly portage-stable package updates 2023-05-22
2023-05-25 17:03:17 +02:00
Krzesimir Nowak
92b5e09c5f changelog: Add entries 2023-05-25 12:50:27 +02:00
Krzesimir Nowak
60aded12f5 build_library/catalyst.sh: Fix and extend snapshot handling
- Fix the snapshot name, it is not "portage-${VERSION}", but rather
  "gentoo-${VERSION}".

- After building the snapshot, remove all the similar files from the
  snapshots directory - Catalyst gets easily confused by them and
  bails out.

- Extend the `build_snapshot` function to optionally accept the config
  path and the snapshot name, so SDK's stage1 code can use this
  function instead of duplicating parts of it.
2023-05-25 12:35:29 +02:00
Flatcar Buildbot
e59c23a97a sys-kernel/coreos-sources: Update from 6.1.27 to 6.1.30 2023-05-25 07:12:03 +00:00
Krzesimir Nowak
120a746c88 build_library/catalyst.sh: Make some variables local 2023-05-24 13:50:50 +02:00
Krzesimir Nowak
ea29482d9a overlay coreos-base/hard-host-depends: Rename the dependency
It's dev-python/flit-core now, not dev-python/flit_core.
2023-05-24 07:04:24 +02:00
Krzesimir Nowak
f32eb01fc3 .github: Update the packages list 2023-05-24 07:04:24 +02:00
Krzesimir Nowak
13f69c791f dev-python/flit-core: Rename from flit_core and sync from Gentoo
It's from Gentoo commit ddd30c82eba4638c87aa9bc8d35ba614f0c88898.
2023-05-24 07:04:24 +02:00
Krzesimir Nowak
32d94be1da sys-apps/sed: Sync with Gentoo
It's from Gentoo commit ff260cd0c5b917a91d5700b868eba84e78a785b5.
2023-05-24 07:04:24 +02:00