Commit Graph

4592 Commits

Author SHA1 Message Date
Benjamin Gilbert
7bab03e772 Merge pull request #638 from bgilbert/reinject
Add script to inject kernel/GRUB/shim
2017-02-02 17:39:08 -08:00
Benjamin Gilbert
5541e1521e Merge pull request #639 from bgilbert/other-boards
build_image: Correctly disable verity on unsupported boards
2017-02-02 17:18:22 -08:00
Benjamin Gilbert
d8d7b1ee86 Merge pull request #636 from bgilbert/secure-boot
build_image: Extract and upload GRUB/shim EFI images for signing
2017-02-02 17:17:53 -08:00
Benjamin Gilbert
b11d3a7c1d build_image: Correctly disable verity on unsupported boards
Fixes up missing bit from e630a36e50.
2017-02-02 17:08:01 -08:00
Benjamin Gilbert
e65d5101cf build_image: Extract and upload GRUB/shim EFI images for signing
On arm64, extract only GRUB, since there is no shim.  On dev builds,
extract neither.
2017-02-02 17:00:15 -08:00
Benjamin Gilbert
f16226acb5 grub_install: Install shim in official amd64 builds 2017-02-02 16:58:52 -08:00
Benjamin Gilbert
dd3fbb8ece image_inject_bootchain: New script to inject kernel/GRUB/shim
Add script to replace the unsigned kernel, EFI GRUB, and shim in an
image's EFI System Partition with (externally-produced) signed ones.
2017-02-02 16:53:16 -08:00
Benjamin Gilbert
5443a101f7 build_image: Move one message to logging framework 2017-02-02 16:51:58 -08:00
David Michael
7419751493 Merge pull request #637 from dm0-/fix-verity
Fix verity in our automated builds
2017-02-02 16:48:11 -08:00
David Michael
e630a36e50 Revert "build_image: Remove disable_read_write variable"
This reverts commit a7ffba9a9f.

The build_image script can build multiple formats.  When our
releases and automated builds are creating developer containers and
production images from the same command, the verity flag would be
disabled while building the container and remain disabled when building
the production image.  This resulted in no verity in all our builds.
2017-02-02 15:08:43 -08:00
Benjamin Gilbert
8751c85494 image_set_group: Move generic setup/teardown code into a library 2017-02-02 12:51:35 -08:00
Benjamin Gilbert
dcc3367164 Merge pull request #635 from bgilbert/vmware-bin
image_to_vm: Add vmware_raw image type
2017-02-01 15:46:36 -08:00
Alex Crawford
fd402748be Merge pull request #634 from jeanfabrice/jeanfabrice/guestinfo
Set ovf transport mode so guestinfo gets available to coreos-cloudinit
2017-02-01 15:46:23 -08:00
Michael Marineau
74edf63449 Merge pull request #611 from glevand/for-merge-arm64-verity
scripts: Add arm64 verity support
2017-01-30 11:07:21 -08:00
Benjamin Gilbert
b363484c3b image_to_vm: Add vmware_raw image type
Allow "coreos-install -o vmware_raw" to install Container Linux with
the vmware OEM.

Use base DISK_LAYOUT to reduce the minimum disk size.

Fixes coreos/bugs#359.
2017-01-19 14:34:53 -08:00
Benjamin Gilbert
60ef04a6a0 Merge pull request #633 from bgilbert/ignition-version
build_image: Include {ignition,bootengine} in {packages,licenses}.txt
2017-01-19 10:58:01 -08:00
jeanfabrice
fe7c43a794 Set ovf transport mode so guestinfo gets available to coreos-cloudinit 2017-01-19 19:34:28 +01:00
Benjamin Gilbert
e878dc51ea build_image: Include {ignition,bootengine} in {packages,licenses}.txt
They're not in the root fs, but they are in the initramfs.  Handle this
by augmenting the package list with packages that are both

- build dependencies of coreos-kernel, and
- configured to cause rebuilds of coreos-kernel when their sub-slot
  changes.
2017-01-18 16:37:37 -08:00
David Michael
56dd41d011 Merge pull request #632 from dm0-/bugs-1628
disk_util: differentiate between partition and FS labels
2017-01-18 16:27:24 -08:00
David Michael
08ed31d70d disk_util: differentiate between partition and FS labels 2017-01-18 16:21:19 -08:00
David Michael
e23d10223a Merge pull request #631 from dm0-/ignore-doc-scripts
check_root: ignore scripts in documentation
2017-01-17 13:53:02 -08:00
David Michael
eef53ab5b6 check_root: ignore scripts in documentation 2017-01-17 13:47:04 -08:00
Alex Crawford
6a0a5f954f Merge pull request #626 from crawford/lsb
set_lsb_release: properly quote lsb-release
2017-01-06 12:15:58 -08:00
Alex Crawford
4cb4904654 set_lsb_release: properly quote lsb-release 2017-01-06 10:23:00 -08:00
Euan Kemp
7ab582ed7f Merge pull request #618 from euank/minor-docs
build_image: specify arguments more clearly
2017-01-05 10:03:48 -08:00
David Michael
80c1671a5e Merge pull request #619 from dm0-/bugs-1139
check_root: make #!/usr/bin/env a special case
2017-01-04 19:19:43 -08:00
David Michael
98718496a4 check_root: make #!/usr/bin/env a special case 2017-01-04 17:30:05 -08:00
Alex Crawford
0e1849a138 Merge pull request #624 from crawford/regions
oem/ami: add eu-west-2 and ca-central-1 regions
2017-01-04 11:00:02 -08:00
Alex Crawford
f507a06b8a oem/ami: add eu-west-2 and ca-central-1 regions 2017-01-04 08:25:08 -08:00
Alex Crawford
cb2e40da70 Merge pull request #620 from crawford/lsb
set_lsb_release: update name and color
2016-12-29 12:34:56 -08:00
Alex Crawford
ab60f519ec set_lsb_release: update name and color 2016-12-29 12:33:02 -08:00
Euan Kemp
302e5bd405 build_image: specify arguments more clearly 2016-12-19 14:22:47 -08:00
Geoff Levand
2839b73177 build_image: Add arm64 rootfs verification
Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-12-13 13:46:05 -08:00
Geoff Levand
4ca0c5bc19 build_image: Cleanup enable_rootfs_verification
To clean things up and prepare for arrm64 support move
all the enable_rootfs_verification processing into one
location and add some comments.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-12-13 13:46:05 -08:00
Geoff Levand
0ef44633ef build_image: Remove enable_verity flag
To make verity work both enable_rootfs_verification and enable_verity
need to be set.  Without one verity just gets half enabled.  Remove
the enable_verity flag and do the full verity setup when
enable_rootfs_verification is set.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-12-13 13:46:05 -08:00
Geoff Levand
a7ffba9a9f build_image: Remove disable_read_write variable
The disable_read_write variable was just a copy of FLAGS_enable_rootfs_verification,
so to make things less confusing just use FLAGS_enable_rootfs_verification.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-12-13 13:46:05 -08:00
Alex Crawford
f845a97532 Merge pull request #617 from crawford/codename
set_lsb_release: update codename
2016-12-12 18:28:03 -08:00
Alex Crawford
44a9f03df1 set_lsb_release: update codename 2016-12-12 13:57:44 -08:00
Michael Marineau
a2af8649c2 Merge pull request #610 from glevand/for-merge-acpi
grub.cfg: Enable arm64 ACPI
2016-12-06 11:46:12 -08:00
Geoff Levand
acd0566352 grub.cfg: Enable arm64 ACPI
Add a new grub variable extra_options, the contents of which is
added to the linux command line.  Use extra_options to set
the ACPI options needed for arm64.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-12-01 10:09:51 -08:00
Alex Crawford
f5345de53e Merge pull request #612 from crawford/ignition
build_library: support ignition in qemu template
2016-11-30 14:42:53 -08:00
Nick Owens
8028b75d4d Merge pull request #615 from mischief/vpc-force-size
build_library: pass force_size when converting disks to vpc
2016-11-29 14:34:21 -08:00
Nick Owens
2b46ddc20c build_library: pass force_size when converting disks to vpc
this stops qemu-img info from choking on vpc-type images made with our
patched qemu.
2016-11-28 17:17:20 -08:00
Alex Crawford
c93416caf2 build_library: support ignition in qemu template 2016-11-22 19:17:42 -08:00
David Michael
2ba6e9c43e Merge pull request #609 from dm0-/fix-jenkins
build_library: remove extract_docs()
2016-11-09 11:54:54 -08:00
David Michael
2dfab3fd79 build_library: remove extract_docs()
Since coreos-doc was removed from coreos-overlay, there are no more
files in /usr/share/coreos/doc, causing this function to fail.
2016-11-09 11:44:11 -08:00
Alex Crawford
1d651dbf96 Merge pull request #608 from crawford/snapshot
oem/ami: make snapshots public
2016-11-02 13:59:15 -07:00
Alex Crawford
ae4e46edeb Merge pull request #607 from crawford/imageVersions
oem/azure: remove deprecated imageVersions field
2016-11-02 13:56:43 -07:00
Alex Crawford
f649a32d48 oem/ami: make snapshots public
This is needed so that users can copy the public AMIs into their own
accounts.
2016-11-02 13:50:36 -07:00
Alex Crawford
ed1c3d8d09 oem/azure: remove deprecated imageVersions field 2016-11-02 12:12:45 -07:00