1158 Commits

Author SHA1 Message Date
Kai Lüke
74f04c59f7
Reuse correct binary packages for a Flatcar version
Two Flatcar versions were used in /etc/portage/make.conf both in the SDK
and in the boards.
Use only a single version by default to get the expected results and not
something else when using binary packages.

The Rust crossdev package was never uploaded to /sdk/ and always
had to be compiled again.
Upload it in a separate toolchain-arm64 directory because /Packages in /crossdev/
doesn't refer to the Rust package and its use flags.
2020-05-11 15:45:21 +02:00
Kai Lüke
d1fb202fe2
build_library/dev_container_util.sh: Use correct BINHOST URLs
The BINHOST was still configured to be the CoreOS CL upstream location
which does not work for independent Flatcar CL releases. This broke
binary package installation in the development container.
Use the correct BINHOST to fix installation of binary packages in the
development container.
2020-05-04 13:17:59 +02:00
Kai Lüke
aebba12996
build_library/template_vmware.ovf: Document and add cloud-init OVF vars
The configuration variables for the Ignition configuration also serve as
data source for coreos-cloudinit config data (which includes plain scripts).
Document them properly and also call out that the networking variables only
work if coreos-cloudinit data is used.
For some use cases, too few networking variables were available. Add secondary
routing variables for the main network interface and add a second interface.
2020-04-27 13:48:10 +02:00
Kai Lüke
42cf3423d4
build_library/template_vmware.ovf: Remove old CoreOS OVF variables
There was a logical mistake in Ignition that caused ignition.config.*
only to work when it was part of the ovfenv. Thus they were added but
the old CoreOS variables marked deprecated and kept. With both as OVF
variables each of them worked but directly specifying ignition.config.*
as guest variable still didn't because of the logical mistake.
Now there is a fix and both work well when specified directly as guest
variable (https://github.com/flatcar-linux/ignition/pull/11).
Delete the old CoreOS OVF variables because they just clutter the UI
and only the Ignition variables should be used in the UI.
2020-04-17 17:05:02 +02:00
Kai Lüke
687bbefad8
build_library/vm_image_util.sh: Generate iPXE script
Write out an iPXE script file for Packet.
The script uses relative URLs to refer to
the other PXE files and thus can be copied
along with the files to any server.
This is useful because it saves the creation
of an iPXE script for a release/channel on a
third-party service. For CI testing it is
also helpful because the script does not only
end up on the release server but also already
on the Google buckets, refering to unpublished
PXE payloads.
2020-03-18 16:09:40 +01:00
Kai Lüke
f9c8feb09c
build_library/template_vmware.ovf: Use Ignition OVF vars
For the Ignition variables to be usable they need to be
specified in the OVF.
Call out that the CoreOS variables are deprecated to
reduce confusion when both are displayed besides each other.
2020-03-10 13:18:36 +01:00
Kai Lüke
1bf2bba4bf
build_library/dev_container_util.sh: Correct repo URLs
Same content as in flatcar-build-2387.
2020-02-19 14:12:02 +01:00
Kai Lüke
42068f1cbc
build_image: Add prodtar command to build a tar ball
Create a tar ball with the contents of the / and /usr partitions
to be used as follows with systemd-nspawn (via machinectl):
  machinectl import-tar flatcar-container.tar.gz flatcar-container
  machinectl start flatcar-container
  machinectl shell flatcar-container
or with docker by converting it to an OCI image:
  docker import -c "CMD /bin/bash" flatcar-container.tar.gz flatcar-container

Since the new "prodtar" command relies on the results of the "prod" command,
it bundles it so that "prod prodtar" and "prodtar" is the same.
2020-02-07 17:33:37 +01:00
Kai Lüke
1a1fcadf0a
Use same APPID for arm64 and amd64
Nebraska supports an additional arch
variable to distinguish both boards.
2020-01-22 10:50:25 +01:00
Andrew Jeddeloh
15745d520e
disk_util: retry loopback mounts if they fail
This fails frequently but should succeed if retried. This should reduce
failed builds.
2020-01-21 13:29:45 +01:00
Andrew Jeddeloh
00d77d199a
build_library/disk_util: work around losetup bug
Retry losetup if it fails, up to 5 times with 5 seconds between retries.
2020-01-21 13:29:30 +01:00
Flatcar Buildbot
8ac3182bc3 2345.0.1 2019-12-05 09:01:56 +01:00
Flatcar Buildbot
c7bbb2b1e2 2345.0.0 2019-12-04 14:59:11 +01:00
Flatcar Buildbot
7ee9c9c033 2331.0.0 2019-11-22 14:34:26 +01:00
Flatcar Buildbot
1dad511f69 2317.0.1 2019-11-07 19:40:01 +01:00
Benjamin Gilbert
bd79eaf9d1 test_image_content: whitelist Perl and dbus GLSAs
Backported the dbus GLSA.  Ignoring the Perl one.
2019-09-10 21:47:55 -04:00
Benjamin Gilbert
97e61a164b test_image_content: whitelist polkit GLSA
Both CVE fixes were backported.
2019-08-24 01:28:29 -04:00
David Michael
9b863fa7ae Revert "build_library: Add temporary workaround for binutils update"
This reverts commit faf07f1b8f24c5ec82305579337e074af3a9b818.
2019-08-08 15:53:06 +00:00
David Michael
faf07f1b8f build_library: Add temporary workaround for binutils update
Revert this after the new binutils is built into the SDK.
2019-08-03 16:24:27 +00:00
Andrew Jeddeloh
006fe8765d disk_layout: bump dev container from 3 to 4GB
Builds are beginning to run out of space with 3GB. Bump to 4GB.
2019-06-11 21:39:02 +00:00
David Michael
2791e33eb5 Revert "catalyst: Temporarily disable update_seed again"
This reverts commit a85cb08443788f37d38b7c854a3a60ba283528c2.
2019-05-02 03:23:07 +00:00
David Michael
a85cb08443 catalyst: Temporarily disable update_seed again
The glib security update blocks itself.  Disable this until a new
SDK is generated, then it can be reverted again.
2019-04-23 03:29:09 +00:00
David Michael
3254c63690 build_library: Drop whitelisted systemd GLSA
This no longer matches since upgrading to 241.
2019-03-12 16:29:48 +00:00
David Michael
4bd4cd5a8e disk_util: Add -I for mkfs.vfat
When loop device partition nodes aren't cleaned up, building images
will fail with:

mkfs.vfat: Partitions or virtual mappings on device '/dev/loop0', not making filesystem (use -I to override)

Just add the flag unconditionally to work around it.
2019-02-10 02:44:01 +00:00
David Michael
cea88d9c52 Revert "catalyst: Temporarily disable update_seed again"
This reverts commit 7d99b4dbddf9d4bd0ae9777e41d0fac82067c6f6.
2019-01-28 15:58:47 +00:00
David Michael
06cbc02e0c check_root: Silence libperl warnings 2019-01-25 21:52:27 +00:00
David Michael
7d99b4dbdd catalyst: Temporarily disable update_seed again
The Perl update will break SDK bootstrapping during seed update, so
disable it again.  This can be reverted after bumping the SDK to a
version that includes the new Perl.
2019-01-25 18:12:55 +00:00
David Michael
7b7c78b592 build_library: Drop old workarounds for toolchain binpkgs 2019-01-24 23:25:51 +00:00
David Michael
45c9ef7867 build_library: Drop whitelisted Go GLSAs
Since Go is no longer cross-compiled, it won't hit the boards' GLSA
tests anymore.
2018-12-21 16:27:55 +00:00
David Michael
e1761bee54 Revert "catalyst: Temporarily disable update_seed again"
This reverts commit 373d5a814ba7b4ecba181ad37b8b4c8b98bd0402.
2018-11-16 14:11:00 +00:00
David Michael
103c7425fe build_library: Whitelist the systemd GLSA until we have 239 2018-11-01 14:45:21 +00:00
David Michael
373d5a814b catalyst: Temporarily disable update_seed again
This works around the edk2 rename breaking SDK bootstrapping.  It
can be reverted when an SDK has the new version built into it.
2018-10-25 17:08:02 -04:00
David Michael
f9432f6702 vm_image_util: Switch back to edk2-ovmf paths
The custom sys-firmware/edk2 package has been replaced by Gentoo's
sys-firmware/edk2-ovmf package now that only amd64 is supported.

This partially reverts 1761d9d071794f50267da782d135fb44b8344e8b .
2018-10-25 17:15:03 +00:00
David Michael
2467923d56 Remove arm64 from supported board operations 2018-10-25 16:00:09 +00:00
David Michael
a598864413 catalyst: Update sharedir for catalyst 3 2018-10-19 12:12:46 -04:00
David Michael
23c5b018c6 prod_image_util: Drop /usr/include
This should be covered by INSTALL_MASK, but it apparently gets
confused by a symlink loop installed by json-c.  Remove it here.
2018-10-18 16:32:32 +00:00
David Michael
9adb659106 prod_image_util: Drop the portage cache database 2018-10-18 15:58:27 +00:00
David Michael
729575c22e update_chroot: Allow upgrading glibc and binutils 2018-10-12 17:58:09 +00:00
David Michael
c887cfdce6 bootstrap_sdk: Explicitly set the Python version to 2.7
It has recently started picking Python 3 for /usr/bin/python.
2018-09-28 13:53:13 +00:00
David Michael
5ffb938934 image_to_vm: Fix OEM install roots for new portage 2018-08-30 00:53:17 +00:00
David Michael
afff45366a build_toolchains: Update sysroot settings for newer portage
Since EAPI=7 was supported, portage can no longer use different
ROOT and SYSROOT values.  This adjusts the paths so that the first
phase builds cross-toolchains under /usr/${CHOST}, then the native
toolchains are built under /build/${BOARD} (as was being done
previously).  Now that the cross-toolchain development files can't
be used when building the native toolchain, the headers and libs
are stupidly copied into the board root to be used used and then
overwritten by the board packages as they are built.  Since this is
all done in a chroot, these changes shouldn't affect the SDK host.
2018-08-29 21:40:21 +00:00
David Michael
ecc6d6bd3e build_toolchains: Stop building arm64 toolchains 2018-08-29 18:04:55 +00:00
Andrew Jeddeloh
16d5f05275 build_image: rename dev_image to dev_container 2018-07-25 13:11:17 -07:00
Andrew Jeddeloh
1718adb22a *: remove dev image
The dev image has been broken for some time. Some bits are left because
the dev container (not broken) still uses them. They should be renamed.
2018-07-25 13:11:17 -07:00
David Michael
be1344f12d Revert "catalyst: Temporarily disable update_seed"
This reverts commit efbc542c595757a6210d31ad798ca7b2fd1261a4.
2018-06-29 13:38:08 +00:00
David Michael
efbc542c59 catalyst: Temporarily disable update_seed
This can be reverted after switching to an SDK with Python 3.6
built into it.
2018-06-25 09:28:37 -04:00
Benjamin Gilbert
25fffe839d build_library: update VMware virtual hardware version to 11
This will run on ESXi 6.0 and above, and all non-EOL versions of Fusion
and Workstation.

Also enable a few useful VMX features (HPET; CPU and memory hotplug) that
are added by VMware Workstation 14.1.1's Change Hardware Compatibility
wizard. Correspondingly, enable CPU/memory hotplug in the OVF; omit
HPET because there's no obvious way to enable it.
2018-05-18 16:23:32 -04:00
Benjamin Gilbert
e9d1fd1d10
Merge pull request #815 from bgilbert/unrestricted
build_library: add --unrestricted to default GRUB menuentry
2018-05-17 17:37:21 -04:00
Benjamin Gilbert
819c0803dd build_library: add --unrestricted to default GRUB menuentry
This allows booting the default entry even if GRUB authentication is
configured in /usr/share/oem/grub.cfg.
2018-05-17 16:57:22 -04:00
Benjamin Gilbert
1717709dbf build_library: avoid obsolete QEMU -net syntax
It's been deprecated since QEMU 0.12. Fixes warning on QEMU startup:

    qemu-system-x86_64: -net nic,vlan=0,model=virtio: 'vlan' is deprecated. Please use 'netdev' instead.
2018-05-15 17:33:27 -04:00