Commit Graph

8370 Commits

Author SHA1 Message Date
Krzesimir Nowak
26475e5ebf sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit 77cec48da70c6d6424ed6dba4357dd8eacd262c2.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5b7f8b1525 profiles: Add accept keywords for sys-devel/crossdev 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
fd214759a9 app-torcx/docker: Bump dev-libs/libltdl dependency 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5089a6ee6e profiles: Drop accept_keywords for sys-libs/zlib
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
93e861952f coreos-config: Drop fixes for sys-devel/gettext
Let's see if they are still necessary.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
6fdfa61738 profiles: gcc sanitize should be working on arm64 too
Let's check if this is the case.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
60cfb42af6 coreos/config: Drop flex fixes
Let's see if there are still problems with bootstrapping.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
864ea5fd61 coreos/config: Drop libtool fixes
These seem to be quite old and most likely not needed any more. Let's
see if it's true, otherwise this commit will be reverted.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
d458f790fd coreos/config: Drop unnecessary fix for perl
We just updated dev-lang/perl to a version that contains the fix.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
4c8cd9ffe6 profiles: Drop sys-libs/binutils-libs from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
3e0a85a6f0 profiles: Drop sys-devel/binutils from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Mathieu Tortuyaux
87eaf07fb2 Merge pull request #2110 from EhsanLunar/patch-1
Flatcar support for EKS on versions above 1.21
2022-08-23 15:47:09 +02:00
Dongsu Park
94254df06c Merge pull request #2109 from flatcar-linux/cacerts-3.82-main
Upgrade ca-certificates in main from 3.81 to 3.82
2022-08-23 13:25:21 +02:00
Ehsan Assgari
050c0cf8e5 Update changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md
Co-authored-by: Mathieu Tortuyaux <mathieu.tortuyaux@gmail.com>
2022-08-22 17:07:33 +02:00
Ehsan Assgari
d58ef937d9 Create 2022-08-22-eks-support-for-versions-above-1.21.md 2022-08-22 15:57:43 +02:00
Ehsan Assgari
3c3b111746 Update coreos-base/flatcar-eks/files/download-kubelet.sh
Co-authored-by: Mathieu Tortuyaux <mathieu.tortuyaux@gmail.com>
2022-08-22 14:36:48 +02:00
Ehsan Assgari
be29c3cc35 Flatcar support for EKS on versions above 1.21
## Description

When an EC2 instance boots up with a flatcar image (even the latest) the kubelet fails.
The userdata defines (and should do so) that the `/etc/eks/bootstrap.sh` should run, which it does.

This seems to add a ExecStartPre to the kubelet.service:
`ExecStartPre=/usr/share/oem/eks/download-kubelet.sh`

Both the `bootstrap.sh` and the `download-kubelet.sh` are consistent with:
https://github.com/flatcar-linux/coreos-overlay/blob/main/coreos-base/flatcar-eks/files/bootstrap.sh
https://github.com/flatcar-linux/coreos-overlay/blob/main/coreos-base/flatcar-eks/files/download-kubelet.sh

The `download-kubelet.sh` fails with `Unsupported Kubernetes version` because in the case statement on line 24->50 (https://github.com/flatcar-linux/coreos-overlay/blob/main/coreos-base/flatcar-eks/files/download-kubelet.sh#L25) only has values for kubernetes version 1.15 -> 1.21

If I manually alter the file and add 1.22 (when I test this on 1.22.9 kubernetes version deployment) and re-run the `bootsrap.sh` it works fine as far as I can see, the node than joins the cluster and shows up as `Ready` and pods starting running on the node.

The last PR I can see on this particular thing was done about a year ago f0da7f8c9e

## Impact

No EKS support for kubernetes versions higher than 1.21

## Environment and steps to reproduce

1. **Set-up**: Create an EKS cluster with the latest flatcar AMI in the worker nodes
2. **Task**: SSH into the node (probably through a Bastion)
3. **Action(s)**:  No actions needed
4. **Error**: kubelet.service fails because the download-kubelet.sh doesn't have download locations for kubernetes version above 1.21

## Expected behavior

Download locations for kubernetes versions 1.22 and 1.23 (EKS doesn't have support for 1.24 yet it seems) should be located inside the download-kubelet.sh

## Additional information

By running `aws s3 ls s3://amazon-eks/` you can list the available locations of the other versions, so for it should result in this:

``` sh
case $CLUSTER_VERSION in
  1.23)
    S3_PATH="1.23.9/2022-07-27/"
    ;;
  1.22)
    S3_PATH="1.22.12/2022-07-27/"
    ;;
  1.21)
    S3_PATH="1.21.2/2021-07-05"
    ;;
  1.20)
    S3_PATH="1.20.4/2021-04-12"
    ;;
  1.19)
    S3_PATH="1.19.6/2021-01-05"
    ;;
  1.18)
    S3_PATH="1.18.9/2020-11-02"
    ;;
  1.17)
    S3_PATH="1.17.12/2020-11-02"
    ;;
  1.16)
    S3_PATH="1.16.15/2020-11-02"
    ;;
  1.15)
    S3_PATH="1.15.12/2020-11-02"
    ;;
  *)
    echo "Unsupported Kubernetes version"
    exit 1
    ;;
esac
```
2022-08-22 13:27:25 +02:00
Flatcar Buildbot
eb7632d2d3 app-misc: Upgrade ca-certificates 3.81 to 3.82 2022-08-22 07:22:53 +00:00
Flatcar Buildbot
133b75c5c5 sys-kernel: Upgrade Kernel 5.15.61 to 5.15.62 2022-08-22 07:22:28 +00:00
Krzesimir Nowak
6209071399 Merge pull request #2097 from flatcar-linux/krnowak/mirror-calico
.github: find latest calico tag from tigera operator using github API
2022-08-19 14:46:55 +02:00
Krzesimir Nowak
5e26cf2807 Merge pull request #2090 from flatcar-linux/rust-1.63.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.62.1 to 1.63.0
2022-08-19 11:39:25 +02:00
Krzesimir Nowak
645da379e6 .github: Find latest calico release using github API
We fetch the latest release of calico from calicoproject/calico
releases instead of from calico-version.yaml file in tigera/operator
repo. This is because we download the Tigera Operator manifest from
the calico repository, so we can expect that when the release happens,
both calico and the operator agree on versions used (so we expect that
calico 3.24.0 is using operator version 1.28.0, and the operator
1.28.0 is using calico 3.24.0).
2022-08-19 11:15:18 +02:00
Krzesimir Nowak
127de15c9b sys-kernel/coreos-firmware: Sync intel ice firmware version
The firmware got updated to version 1.3.30.0. Reflect this in the
ebuild.
2022-08-18 16:56:10 +02:00
Flatcar Buildbot
27073a3eb0 sys-kernel: Upgrade Linux Firmware 20220708 to 20220815 2022-08-18 16:56:10 +02:00
Krzesimir Nowak
4c225455f1 Merge pull request #2095 from flatcar-linux/linux-5.15.61-main
Upgrade Linux Kernel in main from 5.15.60 to 5.15.61
2022-08-18 16:55:19 +02:00
Flatcar Buildbot
a74828991c dev-lang: Upgrade dev-lang/rust 1.62.1 to 1.63.0 2022-08-18 15:01:52 +02:00
Krzesimir Nowak
4860ed8ae8 changelog: Fix a link 2022-08-18 13:27:06 +02:00
Krzesimir Nowak
1217d6c0fa coreos/config: Add a fix for dev-libs/cyrus-sasl cross-compilation 2022-08-18 10:43:35 +02:00
Krzesimir Nowak
723745befc profiles: Drop redundant entry in package.provides in target profile
It's already a part of a base profile.
2022-08-18 10:42:07 +02:00
Krzesimir Nowak
6c60feb9a7 dev-libs/cyrus-sasl: Move to portage-stable 2022-08-18 10:34:49 +02:00
Flatcar Buildbot
7d5371aee8 sys-kernel: Upgrade Kernel 5.15.60 to 5.15.61 2022-08-18 07:22:54 +00:00
Flatcar Buildbot
e44aacf2d5 sys-kernel: Upgrade Kernel 5.15.59 to 5.15.60 2022-08-16 21:16:34 +02:00
Jeremi Piotrowski
39a5eddec4 Merge pull request #2027 from flatcar-linux/t-lo/slsa-record-provenance-main
Record SLSA provenance data by extending profile bashrc with phase hooks.
2022-08-15 13:38:21 +02:00
Flatcar Buildbot
f87b7996f0 app-emulation: Upgrade Containerd 1.6.7 to 1.6.8 2022-08-12 13:04:27 +02:00
Sayan Chowdhury
046403e71d app-editors/vim,vim-core: Add accept_keywords for vim & vim-core
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-12 14:53:32 +05:30
Kai Lueke
a3e20e8bc5 coreos-base/coreos-init: Add new image signing key to flatcar-install
This pulls in
https://github.com/flatcar-linux/init/pull/79
to updated the embedded pub key in flatcar-install to include the new
subkey that is used for signing new releases.
2022-08-11 15:27:24 +02:00
Dongsu Park
e5dc9fac33 profiles: enable dev-vcs/git 2.37.1
To be able to address CVE-2022-29187, we need to accept keywords
and unmask dev-vcs/git 2.37.1.
2022-08-09 16:25:19 +02:00
Dongsu Park
9d1c45fc11 changelog: add changelog for Go 1.18.5 2022-08-08 14:39:51 +02:00
Flatcar Buildbot
110a8c0b0c dev-lang: Upgrade Go 1.18.4 to 1.18.5 2022-08-08 07:31:17 +00:00
Flatcar Buildbot
cac72c0f5a dev-lang: Upgrade Go 1.17.12 to 1.17.13 2022-08-08 07:31:17 +00:00
Krzesimir Nowak
1315e7e8bd Merge pull request #2076 from flatcar-linux/linux-5.15.59-main
Upgrade Linux Kernel in main from 5.15.58 to 5.15.59
2022-08-05 19:09:26 +02:00
Dongsu Park
3e41b06e26 Merge pull request #2079 from flatcar-linux/containerd-1.6.7-main
Upgrade Containerd in main from 1.6.6 to 1.6.7
2022-08-05 14:40:08 +02:00
Flatcar Buildbot
f8020786b7 app-emulation: Upgrade Containerd 1.6.6 to 1.6.7 2022-08-05 08:25:17 +00:00
Dongsu Park
e739f9bfa4 changelog: add changelog for libtirpc 1.3.2-r1 2022-08-04 18:04:07 +02:00
Dongsu Park
a729ef7c9a net-libs/libtirpc: Apply Flatcar modifications
Update keywords to stable amd64 and arm64.

Note, fix-dos patch is not necessary any more, because 1.3.2-r1 from
upstream Gentoo already has the patch.

Based on commit f3150e4b458e8d8979a37a91e44a7e1d2334d2aa.
2022-08-04 18:04:07 +02:00
Dongsu Park
382a18c125 net-libs/libtirpc: update to 1.3.2-r1
Update net-libs/libtirpc to 1.3.2-r1 mainly to address CVE-2021-46828.
2022-08-04 18:04:07 +02:00
Jeremi Piotrowski
1da35c897e Merge pull request #2070 from flatcar-linux/jepio/coreos-cloudinit-update
coreos-base/coreos-cloudinit: bump commit for imdsv2 and go.mod support
2022-08-04 15:43:40 +02:00
Jeremi Piotrowski
cd37e46bb8 changelog: add entry for coreos-cloudinit update 2022-08-04 14:47:13 +02:00
Jeremi Piotrowski
f2c0730ab7 coreos-base/coreos-cloudinit: pull in AWS IMDSv2 and go-module support
This pulls in these PRs:
- https://github.com/flatcar-linux/coreos-cloudinit/pull/13 (imdsv2)
- https://github.com/flatcar-linux/coreos-cloudinit/pull/14 (go.mod)

Since go.mod is now present, rework the ebuild to remove unused bits and
enable go module support.
2022-08-04 10:30:09 +02:00
Flatcar Buildbot
43279010b9 sys-kernel: Upgrade Kernel 5.15.58 to 5.15.59 2022-08-04 07:23:00 +00:00