Commit Graph

30147 Commits

Author SHA1 Message Date
James Le Cuirot
80dfea84b0
Revert "build_image: Temporarily nobble condition around generate_update"
This reverts commit 94f95acdc7.
2025-03-21 18:02:38 +05:30
James Le Cuirot
33ced76b95
sys-boot/shim-signed: Bump to sign with our temporary certificate
We're still waiting to have the shim officially signed, but we want to start
using our signed release process now.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-03-21 18:02:38 +05:30
Sayan Chowdhury
cdb45e62b3
build_libary/vm_image_util: Add the temporary shim signing cert
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-03-21 18:02:37 +05:30
Sayan Chowdhury
450a8983cc
build_library/sbsign_util: Update the SBSIGN_KEY & AZURE_KEYVAULT_URL
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-03-21 18:02:30 +05:30
Mathieu Tortuyaux
4866932210
Merge pull request #2716 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-03-19 10:34:52 +01:00
Flatcar Buildbot
509b882344 Update mantle container image to latest HEAD 2025-03-17 21:00:44 +00:00
flatcar-ci
e92778a937 New version: main-4277.0.0-nightly-20250317-2100 2025-03-17 21:00:26 +00:00
flatcar-ci
24d8122b96 New version: main-4274.0.0-nightly-20250314-2100 2025-03-15 02:43:10 +00:00
flatcar-ci
3c0178fb02 New version: main-4274.0.0-nightly-20250314-2100-INTERMEDIATE 2025-03-14 21:00:29 +00:00
Mathieu Tortuyaux
c6b875fdb9
Merge pull request #2748 from flatcar/linux-6.6.83-main
Upgrade Linux Kernel for main from 6.6.82 to 6.6.83
2025-03-14 18:29:20 +01:00
Flatcar Buildbot
a58741ce3f sys-kernel/coreos-sources: Update from 6.6.82 to 6.6.83 2025-03-14 17:28:36 +00:00
Jeremi Piotrowski
88d0c1b2dc
Merge pull request #2694 from flatcar/setup-nvidia-fixes
nvidia.service arm64 support & fixes
2025-03-14 10:57:10 +01:00
Jeremi Piotrowski
e313934fea changelog: Add entries for nvidia.service changes
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
f61987b23c nvidia-drivers: Split amd64 and arm64 driver version
The R535 driver branch, which is LTS, does not compile on arm64 with GCC
14/kernel 6.6. Keep amd64 on R535 and switch arm64 to R570 by default.
R570 is the first driver version that I found that is currently
supported and works for arm64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
73cbffea56 setup-nvidia: Overlay host /lib/modules into devcontainer
So that we can pick-up kmods contained in sysexts (like zfs) and generate
complete module dependency information. I thought we could skip running depmod
for nvidia drivers because we manually insmod them, but nvidia's GPU operator
driver validation expects to be able to run modprobe - so we have to generate
them.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
48e42f8ab6 setup-nvidia: Keep systemd unit when running nspawn container
The nspawn container runs in it's own scope, which journal output is then
associated with. By passing `--keep-unit` we can guarantee that all log output
will stay associated with the nvidia.service and can be viewed by running
`journalctl -u nvidia.service`.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
bfde33bcc3 install-nvidia: Force building proprietary kernel module
Installers for 570 sometimes default to Open drivers, which we can't support
properly at this time. Force proprietary drivers. There are also additional
options that suppress certain worrisome error strings - enable those if
supported too.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
b048140f97 coreos-modules: Cross-compile module build tools
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
3b08a39c46
Merge pull request #2725 from flatcar/t-lo/add-2025-image-signing-subkey
generate_payload: add 2025 image signing subkey
2025-03-14 10:49:17 +01:00
Jeremi Piotrowski
f8b8b8ce40 setup-nvidia: Keep devcontainer image sparse
This saves space at runtime.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:47:10 +01:00
Jeremi Piotrowski
03925e1ca3 setup-nvidia: Make "current" symlink logic more robust
Users have reported that in some cases the nvidia.service fails because
/opt/nvidia/current is a directory and the symbolic link gets created inside
it. I have no idea how we get there, but to make the service robust in the face
of this kind of issue:

- remove the directory if it exists
- use `-T` with ln to ensure that symbolic link creation fails if `current` is a directory

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:47:10 +01:00
Jeremi Piotrowski
3c4c7c6cb0 setup-nvidia: Support aarch64 installer
Use `uname -m` to fetch the correct driver installer for aarch64 or x86_64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:47:10 +01:00
flatcar-ci
209c3ab163 New version: main-4273.0.0-nightly-20250313-2100 2025-03-13 21:00:31 +00:00
Dongsu Park
c780966069
Merge pull request #2740 from flatcar/firmware-20250311-main
Upgrade Linux Firmware in main from 20250211 to 20250311
2025-03-13 17:45:56 +01:00
Thilo Fromm
8082f4710d generate_payload: add 2025 image signing subkey
Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2025-03-13 16:52:04 +01:00
Flatcar Buildbot
d90ca1b2e1 sys-kernel/coreos-firmware: Update from 20250211 to 20250311 2025-03-13 07:05:02 +00:00
flatcar-ci
79e8a67860 New version: main-4272.0.0-nightly-20250312-2100 2025-03-12 21:00:26 +00:00
Mathieu Tortuyaux
ba1c96c71e
Merge pull request #2736 from flatcar/linux-6.6.82-main
Upgrade Linux Kernel for main from 6.6.80 to 6.6.82
2025-03-12 14:19:31 +01:00
Flatcar Buildbot
5cfc96c1bb
sys-kernel/coreos-sources: Update from 6.6.80 to 6.6.82 2025-03-12 09:18:27 +01:00
flatcar-ci
17f2f0b943 New version: main-4271.0.0-nightly-20250311-2100 2025-03-11 21:00:28 +00:00
flatcar-ci
f1fc6373f9 Revert failed version back to 4266.0.0+nightly-20250306-2100 2025-03-11 00:44:48 +00:00
flatcar-ci
01562a168d New version: main-4270.0.0-nightly-20250310-2100 2025-03-10 21:00:30 +00:00
Dongsu Park
70704145a4
Merge pull request #2738 from flatcar/dongsu/new-subkey-2025
overlay coreos-init: Distribute new sub key 2025
2025-03-10 16:04:52 +01:00
Dongsu Park
03cec03bbd overlay coreos-init: Distribute new sub key 2025
This pulls in https://github.com/flatcar/init/pull/129
to distribute the new sub key.
2025-03-10 15:49:27 +01:00
flatcar-ci
096e48472e Revert failed version back to 4266.0.0+nightly-20250306-2100 2025-03-08 00:49:37 +00:00
flatcar-ci
6102a17f0c New version: main-4267.0.0-nightly-20250307-2100-INTERMEDIATE 2025-03-07 21:00:32 +00:00
Thilo Fromm
9e441ded2c
coreos-modules: move mana kmod to commonconfig (#2723)
This change moves CONFIG_MICROSOFT_MANA=m from amd64_defconfig-6.6 to
commonconfig-6.6 to support the MANA network driver on ARM64 instances,
too.

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2025-03-07 16:46:28 +01:00
flatcar-ci
259a318204 New version: main-4266.0.0-nightly-20250306-2100 2025-03-07 09:11:21 +00:00
flatcar-ci
d08aafd6c8 Revert failed version back to 4265.0.0+nightly-20250305-2100 2025-03-07 00:26:57 +00:00
flatcar-ci
1127ca14b2 New version: main-4266.0.0-nightly-20250306-2100 2025-03-06 21:00:28 +00:00
Dongsu Park
47e03fe44e
Merge pull request #2721 from flatcar/dongsu/afterburn-openssl
overlay afterburn: update rust-openssl to 0.10.70
2025-03-06 16:41:07 +01:00
Dongsu Park
f7bc7a773a changelog: add changelog for afterburn
Add changelog for afterburn, updating rust-openssl to 0.10.70.
2025-03-06 09:47:22 +01:00
flatcar-ci
e5aee927c5 New version: main-4265.0.0-nightly-20250305-2100 2025-03-05 21:00:26 +00:00
James Le Cuirot
7706bd0702
Merge pull request #2720 from John15321/add-readme-badges
Add README badges with socials and the main website
2025-03-05 16:51:33 +00:00
Jan Bronicki
b24e003cf5 Add better badges centering 2025-03-05 17:40:41 +01:00
Dongsu Park
94afc5e76b overlay afterburn: update rust-openssl to 0.10.70
Apply patch for updating rust-openssl to 0.10.70, mainly for addressing
CVE-2025-0977.

Pulls in https://github.com/coreos/afterburn/pull/1164.
2025-03-05 17:15:48 +01:00
Jan Bronicki
e949595763 Add README badges with socials and the main website 2025-03-05 14:25:09 +01:00
Krzesimir Nowak
810427f9ed
Merge pull request #2615 from flatcar/krnowak/fill-the-gaps
Improve package updates reporting and add more build deps to SDK
2025-03-05 12:51:19 +01:00
Krzesimir Nowak
309fb0e22e overlay coreos-base/hard-host-depends: Add more build deps into SDK
Without those additions, these packages are being built into the SDK
during the board packages job.
2025-03-05 12:42:20 +01:00
Krzesimir Nowak
014d7accea overlay coreos-devel/sdk-depends: Improve package updates reporting
These dependencies are pulled into SDK at some point during the
multi-stage SDK build, but our package automation is not smart enough
to catch this. Help it by listing some packages explicitly.
2025-03-05 12:42:20 +01:00