mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2026-02-08 09:12:08 +01:00
Code Issues Packages Projects Releases Wiki Activity
33,717 Commits 632 Branches 414 Tags
Commit Graph

33717 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
James Le Cuirot
6182948bb0
app-emulation/hv-daemons: Drop 9999 ebuild 
It doesn't make any sense because there is no 9999 version of coreos-sources.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2026-01-09 13:25:38 +00:00
James Le Cuirot
8f3b2294bf
github: Fix and simplify kernel-apply-patch.sh regarding hv-daemons 
This action is kicked off from main for all channels, but the script is
run against each branch, so we can assume that hv-daemons is there.

COREOS_SOURCE_REVISION isn't in the hv-daemons ebuild, but that doesn't
matter. sed will do nothing.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2026-01-09 10:52:06 +01:00
flatcar-ci
83fd18dd1b New version: alpha-4547.0.0-nightly-20260106-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2026-01-06 21:00:24 +00:00
James Le Cuirot
728ec62d89
coreos-base/misc-files: Drop Ciphers, MACs, KexAlgorithms from sshd conf 
Setting an absolute list was preventing newer options from being
enabled, leading to this scary error message from newer clients.

    $ ssh flatcar
    Warning: Permanently added '[127.0.0.1]:2222' (ED25519) to the list of known hosts.
    ** WARNING: connection is not using a post-quantum key exchange algorithm.
    ** This session may be vulnerable to "store now, decrypt later" attacks.
    ** The server may need to be upgraded. See https://openssh.com/pq.html
    Last login: Wed Oct 15 10:05:46 UTC 2025 from 10.0.2.2 on pts/0
    Flatcar Container Linux by Kinvolk beta 4426.1.0 for QEMU

After going through each of the options, the only ones we were adding
above the current 10.2p1 defaults were the diffie-hellman-group KEX
algorithms. These were dropped upstream in 2024 because they are slower
while providing no benefit over other options. The continued presence of
ecdh-sha2-nistp256 ensures compatibility with default clients at least
as far back as 2016.

I think we should just continue to follow the upstream defaults unless
some significant client breakage is reported. They're usually quite
forgiving.

The order of these is significant, and our order did differ from
upstream's slightly, but I trust their order over ours.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2026-01-06 13:47:20 +00:00
flatcar-ci
ad43488ea0 New version: alpha-4547.0.0-nightly-20260102-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2026-01-02 21:00:23 +00:00
James Le Cuirot
ed6476daa9
Merge pull request #3611 from flatcar/mantle-update-flatcar-4547 
Upgrade mantle container image to latest HEAD in flatcar-4547
 2026-01-02 10:57:05 +00:00
Flatcar Buildbot
50af9ce028 Update mantle container image to latest HEAD 
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
 2026-01-02 10:56:55 +00:00
flatcar-ci
7eb6d000d8 New version: alpha-4547.0.0-nightly-20261230-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-30 21:00:25 +00:00
flatcar-ci
758b2ba55b New version: alpha-4547.0.0-nightly-20251223-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-23 21:00:24 +00:00
flatcar-ci
03d5f1b5b8 New version: alpha-4547.0.0-nightly-20251222-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-22 21:00:25 +00:00
James Le Cuirot
e42bcaba4a
Merge pull request #3600 from flatcar/mantle-update-flatcar-4547 
Upgrade mantle container image to latest HEAD in flatcar-4547
 2025-12-22 14:15:25 +00:00
Flatcar Buildbot
4312aeb707 Update mantle container image to latest HEAD 
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
 2025-12-22 13:14:17 +00:00
Mathieu Tortuyaux
d3ac100270
Merge pull request #3597 from flatcar/mantle-update-flatcar-4547 
Upgrade mantle container image to latest HEAD in flatcar-4547
 2025-12-22 14:14:12 +01:00
Flatcar Buildbot
e6f303dc91 Update mantle container image to latest HEAD 
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
 2025-12-22 11:26:09 +00:00
flatcar-ci
3b13eb583d New version: alpha-4547.0.0-nightly-20251219-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-19 21:00:24 +00:00
Kai Lüke
d7d3c2a8f1 Merge pull request #3590 from flatcar/scripts 
coreos-base/coreos-init: Add noop systemd-sysupdate transfer config
 2025-12-19 18:01:58 +09:00
Kai Lueke
08d57768a2 coreos-base/coreos-init: Add noop systemd-sysupdate transfer config 
This pulls in https://github.com/flatcar/init/pull/139 as workaround for
https://github.com/flatcar/flatcar/issues/1979 and should be backported
to Alpha/Beta.

Signed-off-by: Kai Lueke <kailuke@microsoft.com>
 2025-12-19 18:01:58 +09:00
flatcar-ci
fbd7cf9936 New version: alpha-4547.0.0-nightly-20251218-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-18 21:00:23 +00:00
Mathieu Tortuyaux
65db7b3b15
Merge pull request #3585 from flatcar/mantle-update-flatcar-4547 
Upgrade mantle container image to latest HEAD in flatcar-4547
 2025-12-18 18:03:17 +01:00
Flatcar Buildbot
0d4d5d53b4 Update mantle container image to latest HEAD 
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
 2025-12-18 17:00:51 +00:00
Julian Tölle
31adc57d4f
scripts: update hetzner amd64 instance type 
The currently used server type (`cpx11`) was deprecated and will be
removed on 2026-01-01.

- https://www.hetzner.com/news/new-cloud-plans/
- https://docs.hetzner.cloud/changelog#2025-10-16-new-server-types-with-categories
- https://docs.hetzner.cloud/changelog#2025-10-16-server-types-deprecated

Signed-off-by: Julian Tölle <julian.toelle@hetzner-cloud.de>
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2025-12-18 13:35:50 +01:00
Robin Schneider
ab629224bb
Use a less powerful machine for amd64 tests 
Signed-off-by: Robin Schneider <robin.schneider@stackit.cloud>
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2025-12-18 10:33:27 +01:00
Jan Bronicki
4c81a07176 New version: alpha-4547.0.0 
Signed-off-by: Jan Bronicki <janbronicki@microsoft.com>
alpha-4547.0.0 		2025-12-15 18:45:24 +01:00
Daniel
704f0cd8f0 Revert PR #3534 "sysext: Add OS-dependent sysext compression" 
Revert PR #3162 "Signed OS-dependent sysexts"

Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>
 2025-12-15 18:21:02 +01:00
Sayan Chowdhury
ccd27d8278
New version: alpha-4547.0.0 
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
 2025-12-13 20:13:16 +05:30
Sayan Chowdhury
94ceccb4a5
Merge pull request #3534 from flatcar/scripts 
sysext: Add OS-dependent sysext compression
 2025-12-13 20:11:04 +05:30
Daniel Zatovic
3aee8a7275
sysext: Add OS-dependent sysext compression 
We removed the sysext compression, because we double-compression is
redundant for sysexts stored in already coimpressed BTRFS /usr. However,
OS-dependent sysexts that are downloaded on-demand were now also
uncompressed. This commit brings back the compression via
SYSTEMD_REPART_MKFS_OPTIONS_EROFS option.

Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>
 2025-12-13 20:11:01 +05:30
Jan Bronicki
8621e7681c New version: alpha-4547.0.0 
Signed-off-by: Jan Bronicki <janbronicki@microsoft.com>
 2025-12-12 14:51:13 +01:00
Dongsu Park
585f734799
Merge pull request #3545 from flatcar/dongsu/ue-rs-fix-downloadresult 
overlay ue-rs: fix download regression by returning Ok
 2025-12-12 14:07:15 +01:00
Dongsu Park
3bff39990f
Merge pull request #3495 from flatcar/buildbot/weekly-portage-stable-package-updates-2025-11-17 
Weekly portage-stable package updates 2025-11-17
 2025-12-12 12:57:27 +01:00
flatcar-ci
c1c79e68fd Revert failed version back to 4545.0.0+nightly-20251210-2100 2025-12-12 01:24:56 +00:00
flatcar-ci
fa201d1892 New version: main-4546.0.0-nightly-20251211-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-11 21:00:27 +00:00
Dongsu Park
5feee4aac6 overlay ue-rs: fix download regression by returning Ok 
Pulls in https://github.com/flatcar/ue-rs/pull/100.

Signed-off-by: Dongsu Park <dongsu@dpark.io>
 2025-12-11 15:29:56 +01:00
Mathieu Tortuyaux
67927a764d
Merge pull request #3556 from flatcar/mantle-update-main 
Upgrade mantle container image to latest HEAD in main
 2025-12-11 12:01:24 +01:00
Flatcar Buildbot
fe2cc7053e Update mantle container image to latest HEAD 
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
 2025-12-11 10:54:02 +00:00
Mathieu Tortuyaux
bc844a940f
Merge pull request #3287 from stackitcloud/stackit 2025-12-11 11:53:51 +01:00
flatcar-ci
d9175f6b00 New version: main-4545.0.0-nightly-20251210-2100 
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
 2025-12-10 21:00:30 +00:00
James Le Cuirot
197015bd23
Merge pull request #3552 from flatcar/mantle-update-main 
Upgrade mantle container image to latest HEAD in main
 2025-12-10 16:29:39 +00:00
Flatcar Buildbot
2da938011d Update mantle container image to latest HEAD 
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
 2025-12-10 15:18:32 +00:00
Mathieu Tortuyaux
20a5323e9a
Merge pull request #3542 from flatcar/cacerts-3.119-main 
Update ca-certificates in main from 3.118 to 3.119
 2025-12-10 16:18:19 +01:00
Krzesimir Nowak
bb5bbf9286 changelog: Add entries 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
b5994ce55d overlay sys-apps/baselayout: Pull in shadow group fixes 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
257a3c6eab build_library: Add a hack for shadow group ownership 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
0c21b66778 overlay profiles: Drop accept keywords for sys-apps/coreutils 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
25acd753c2 overlay sys-fs/overlaybd: Depend on virtual/zlib instead of sys-libs/zlib 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
97fbc236a4 overlay profiles: Update accept keywords for dev-libs/jose 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
6c4f176635 .github: Add dev-libs/jose to automation 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
1afb85b3ae dev-libs/jose: Sync with Gentoo 
It's from Gentoo commit 6a3644bf2f9aace46ad9bbab2e4f3bccd747079e.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:35 +01:00
Krzesimir Nowak
1768ba6899 overlay dev-libs/jose: Move to portage-stable 
The package has moved from GURU to Gentoo, so we can just use that.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:34 +01:00
Krzesimir Nowak
758d54bb56 overlay profiles: Drop accept keywords for net-misc/curl 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
 2025-12-10 14:21:34 +01:00