Commit Graph

10589 Commits

Author SHA1 Message Date
Krzesimir Nowak
66b8c112f7 sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - don't run sanity checks in pkg_pretend to prevent gcc checks when
    only the binary package is installed.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2022-08-23 16:01:22 +02:00
Krzesimir Nowak
26475e5ebf sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit 77cec48da70c6d6424ed6dba4357dd8eacd262c2.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5b7f8b1525 profiles: Add accept keywords for sys-devel/crossdev 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
fd214759a9 app-torcx/docker: Bump dev-libs/libltdl dependency 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5089a6ee6e profiles: Drop accept_keywords for sys-libs/zlib
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
93e861952f coreos-config: Drop fixes for sys-devel/gettext
Let's see if they are still necessary.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
6fdfa61738 profiles: gcc sanitize should be working on arm64 too
Let's check if this is the case.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
60cfb42af6 coreos/config: Drop flex fixes
Let's see if there are still problems with bootstrapping.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
864ea5fd61 coreos/config: Drop libtool fixes
These seem to be quite old and most likely not needed any more. Let's
see if it's true, otherwise this commit will be reverted.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
d458f790fd coreos/config: Drop unnecessary fix for perl
We just updated dev-lang/perl to a version that contains the fix.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
4c8cd9ffe6 profiles: Drop sys-libs/binutils-libs from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
3e0a85a6f0 profiles: Drop sys-devel/binutils from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Mathieu Tortuyaux
87eaf07fb2 Merge pull request #2110 from EhsanLunar/patch-1
Flatcar support for EKS on versions above 1.21
2022-08-23 15:47:09 +02:00
Dongsu Park
94254df06c Merge pull request #2109 from flatcar-linux/cacerts-3.82-main
Upgrade ca-certificates in main from 3.81 to 3.82
2022-08-23 13:25:21 +02:00
Krzesimir Nowak
eedf37575d Merge pull request #2108 from flatcar-linux/linux-5.15.62-main
Upgrade Linux Kernel in main from 5.15.61 to 5.15.62
2022-08-23 08:13:46 +02:00
Ehsan Assgari
050c0cf8e5 Update changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md
Co-authored-by: Mathieu Tortuyaux <mathieu.tortuyaux@gmail.com>
2022-08-22 17:07:33 +02:00
Ehsan Assgari
d58ef937d9 Create 2022-08-22-eks-support-for-versions-above-1.21.md 2022-08-22 15:57:43 +02:00
Ehsan Assgari
3c3b111746 Update coreos-base/flatcar-eks/files/download-kubelet.sh
Co-authored-by: Mathieu Tortuyaux <mathieu.tortuyaux@gmail.com>
2022-08-22 14:36:48 +02:00
Ehsan Assgari
be29c3cc35 Flatcar support for EKS on versions above 1.21
## Description

When an EC2 instance boots up with a flatcar image (even the latest) the kubelet fails.
The userdata defines (and should do so) that the `/etc/eks/bootstrap.sh` should run, which it does.

This seems to add a ExecStartPre to the kubelet.service:
`ExecStartPre=/usr/share/oem/eks/download-kubelet.sh`

Both the `bootstrap.sh` and the `download-kubelet.sh` are consistent with:
https://github.com/flatcar-linux/coreos-overlay/blob/main/coreos-base/flatcar-eks/files/bootstrap.sh
https://github.com/flatcar-linux/coreos-overlay/blob/main/coreos-base/flatcar-eks/files/download-kubelet.sh

The `download-kubelet.sh` fails with `Unsupported Kubernetes version` because in the case statement on line 24->50 (https://github.com/flatcar-linux/coreos-overlay/blob/main/coreos-base/flatcar-eks/files/download-kubelet.sh#L25) only has values for kubernetes version 1.15 -> 1.21

If I manually alter the file and add 1.22 (when I test this on 1.22.9 kubernetes version deployment) and re-run the `bootsrap.sh` it works fine as far as I can see, the node than joins the cluster and shows up as `Ready` and pods starting running on the node.

The last PR I can see on this particular thing was done about a year ago f0da7f8c9e

## Impact

No EKS support for kubernetes versions higher than 1.21

## Environment and steps to reproduce

1. **Set-up**: Create an EKS cluster with the latest flatcar AMI in the worker nodes
2. **Task**: SSH into the node (probably through a Bastion)
3. **Action(s)**:  No actions needed
4. **Error**: kubelet.service fails because the download-kubelet.sh doesn't have download locations for kubernetes version above 1.21

## Expected behavior

Download locations for kubernetes versions 1.22 and 1.23 (EKS doesn't have support for 1.24 yet it seems) should be located inside the download-kubelet.sh

## Additional information

By running `aws s3 ls s3://amazon-eks/` you can list the available locations of the other versions, so for it should result in this:

``` sh
case $CLUSTER_VERSION in
  1.23)
    S3_PATH="1.23.9/2022-07-27/"
    ;;
  1.22)
    S3_PATH="1.22.12/2022-07-27/"
    ;;
  1.21)
    S3_PATH="1.21.2/2021-07-05"
    ;;
  1.20)
    S3_PATH="1.20.4/2021-04-12"
    ;;
  1.19)
    S3_PATH="1.19.6/2021-01-05"
    ;;
  1.18)
    S3_PATH="1.18.9/2020-11-02"
    ;;
  1.17)
    S3_PATH="1.17.12/2020-11-02"
    ;;
  1.16)
    S3_PATH="1.16.15/2020-11-02"
    ;;
  1.15)
    S3_PATH="1.15.12/2020-11-02"
    ;;
  *)
    echo "Unsupported Kubernetes version"
    exit 1
    ;;
esac
```
2022-08-22 13:27:25 +02:00
Flatcar Buildbot
eb7632d2d3 app-misc: Upgrade ca-certificates 3.81 to 3.82 2022-08-22 07:22:53 +00:00
Flatcar Buildbot
133b75c5c5 sys-kernel: Upgrade Kernel 5.15.61 to 5.15.62 2022-08-22 07:22:28 +00:00
Krzesimir Nowak
6209071399 Merge pull request #2097 from flatcar-linux/krnowak/mirror-calico
.github: find latest calico tag from tigera operator using github API
2022-08-19 14:46:55 +02:00
Krzesimir Nowak
5e26cf2807 Merge pull request #2090 from flatcar-linux/rust-1.63.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.62.1 to 1.63.0
2022-08-19 11:39:25 +02:00
Krzesimir Nowak
1bc11c0283 Merge pull request #2091 from flatcar-linux/firmware-20220815-main
Upgrade Linux Firmware in main from 20220708 to 20220815
2022-08-19 11:35:27 +02:00
Krzesimir Nowak
645da379e6 .github: Find latest calico release using github API
We fetch the latest release of calico from calicoproject/calico
releases instead of from calico-version.yaml file in tigera/operator
repo. This is because we download the Tigera Operator manifest from
the calico repository, so we can expect that when the release happens,
both calico and the operator agree on versions used (so we expect that
calico 3.24.0 is using operator version 1.28.0, and the operator
1.28.0 is using calico 3.24.0).
2022-08-19 11:15:18 +02:00
Krzesimir Nowak
127de15c9b sys-kernel/coreos-firmware: Sync intel ice firmware version
The firmware got updated to version 1.3.30.0. Reflect this in the
ebuild.
2022-08-18 16:56:10 +02:00
Flatcar Buildbot
27073a3eb0 sys-kernel: Upgrade Linux Firmware 20220708 to 20220815 2022-08-18 16:56:10 +02:00
Krzesimir Nowak
4c225455f1 Merge pull request #2095 from flatcar-linux/linux-5.15.61-main
Upgrade Linux Kernel in main from 5.15.60 to 5.15.61
2022-08-18 16:55:19 +02:00
Krzesimir Nowak
e54223895b Merge pull request #2096 from flatcar-linux/krnowak/cyrus-sasl
dev-libs/cyrus-sasl: Move to portage-stable
2022-08-18 16:29:07 +02:00
Flatcar Buildbot
a74828991c dev-lang: Upgrade dev-lang/rust 1.62.1 to 1.63.0 2022-08-18 15:01:52 +02:00
Krzesimir Nowak
4860ed8ae8 changelog: Fix a link 2022-08-18 13:27:06 +02:00
Krzesimir Nowak
1217d6c0fa coreos/config: Add a fix for dev-libs/cyrus-sasl cross-compilation 2022-08-18 10:43:35 +02:00
Krzesimir Nowak
723745befc profiles: Drop redundant entry in package.provides in target profile
It's already a part of a base profile.
2022-08-18 10:42:07 +02:00
Krzesimir Nowak
6c60feb9a7 dev-libs/cyrus-sasl: Move to portage-stable 2022-08-18 10:34:49 +02:00
Flatcar Buildbot
7d5371aee8 sys-kernel: Upgrade Kernel 5.15.60 to 5.15.61 2022-08-18 07:22:54 +00:00
Krzesimir Nowak
7e5e70b702 Merge pull request #2088 from flatcar-linux/linux-5.15.60-main
Upgrade Linux Kernel in main from 5.15.59 to 5.15.60
2022-08-17 08:30:26 +02:00
Flatcar Buildbot
e44aacf2d5 sys-kernel: Upgrade Kernel 5.15.59 to 5.15.60 2022-08-16 21:16:34 +02:00
Jeremi Piotrowski
39a5eddec4 Merge pull request #2027 from flatcar-linux/t-lo/slsa-record-provenance-main
Record SLSA provenance data by extending profile bashrc with phase hooks.
2022-08-15 13:38:21 +02:00
Dongsu Park
0147014ac5 Merge pull request #2089 from flatcar-linux/containerd-1.6.8-main
Upgrade Containerd in main from 1.6.7 to 1.6.8
2022-08-12 16:29:29 +02:00
Flatcar Buildbot
f87b7996f0 app-emulation: Upgrade Containerd 1.6.7 to 1.6.8 2022-08-12 13:04:27 +02:00
Sayan Chowdhury
b3c92ffb61 Merge pull request #2037 from flatcar-linux/sayan/update-vim-8.2.5066
app-editors/vim,vim-core: Add accept_keywords for vim & vim-core
2022-08-12 14:54:12 +05:30
Sayan Chowdhury
046403e71d app-editors/vim,vim-core: Add accept_keywords for vim & vim-core
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-12 14:53:32 +05:30
Kai Lüke
451f910d48 Merge pull request #2082 from flatcar-linux/kai/new-subkey-2022
coreos-base/coreos-init: Add new image signing key to flatcar-install
2022-08-11 16:27:35 +02:00
Kai Lueke
a3e20e8bc5 coreos-base/coreos-init: Add new image signing key to flatcar-install
This pulls in
https://github.com/flatcar-linux/init/pull/79
to updated the embedded pub key in flatcar-install to include the new
subkey that is used for signing new releases.
2022-08-11 15:27:24 +02:00
Dongsu Park
33c5f132bb Merge pull request #2081 from flatcar-linux/dongsu/git-2.37.1
profiles: enable dev-vcs/git 2.37.1
2022-08-10 17:05:27 +02:00
Dongsu Park
e5dc9fac33 profiles: enable dev-vcs/git 2.37.1
To be able to address CVE-2022-29187, we need to accept keywords
and unmask dev-vcs/git 2.37.1.
2022-08-09 16:25:19 +02:00
Dongsu Park
3dded48503 Merge pull request #2080 from flatcar-linux/go-1.17.13-and-1.18.5-main
Upgrade Go from 1.17.12 and 1.18.4 to 1.17.13 and 1.18.5
2022-08-08 14:41:13 +02:00
Dongsu Park
9d1c45fc11 changelog: add changelog for Go 1.18.5 2022-08-08 14:39:51 +02:00
Flatcar Buildbot
110a8c0b0c dev-lang: Upgrade Go 1.18.4 to 1.18.5 2022-08-08 07:31:17 +00:00
Flatcar Buildbot
cac72c0f5a dev-lang: Upgrade Go 1.17.12 to 1.17.13 2022-08-08 07:31:17 +00:00