mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-17 01:46:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
28,798 Commits 629 Branches 394 Tags 166 MiB
85d76d4480
Commit Graph

28798 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Flatcar Buildbot
a037d7c6fc app-alternatives/bc: Sync with Gentoo 
It's from Gentoo commit 0e727a3a16bc2abfd39386f10821d3e5ce89c45a.
 2024-10-01 12:36:31 +02:00
Flatcar Buildbot
fe7194b75e app-alternatives/awk: Sync with Gentoo 
It's from Gentoo commit 0e727a3a16bc2abfd39386f10821d3e5ce89c45a.
 2024-10-01 12:36:31 +02:00
Flatcar Buildbot
87c6679eba app-admin/perl-cleaner: Sync with Gentoo 
It's from Gentoo commit 0e727a3a16bc2abfd39386f10821d3e5ce89c45a.
 2024-10-01 12:36:31 +02:00
Flatcar Buildbot
dc3e37e5c6 app-admin/eselect: Sync with Gentoo 
It's from Gentoo commit 0e727a3a16bc2abfd39386f10821d3e5ce89c45a.
 2024-10-01 12:36:31 +02:00
Flatcar Buildbot
9c3cc8a0ff portage-stable/metadata: Monthly GLSA metadata updates 2024-10-01 07:22:24 +00:00
flatcar-ci
db07824f82 New version: main-4109.0.0-nightly-20240930-2100 2024-09-30 21:00:25 +00:00
Dongsu Park
ab9a7c6ace
Merge pull request #2345 from flatcar/cacerts-3.105-main 
Update ca-certificates in main from 3.104 to 3.105
 2024-09-30 15:51:25 +02:00
Flatcar Buildbot
98d6d7bec7 app-misc/ca-certificates: Update from 3.104 to 3.105 2024-09-30 07:09:35 +00:00
flatcar-ci
f06a731f7c New version: main-4105.0.0-nightly-20240926-2100 2024-09-26 21:00:25 +00:00
James Le Cuirot
d34ab03f21
Merge pull request #2333 from flatcar/chewi/grub-version 
sys-boot/grub: Adjust version string to include flatcar1 suffix
 2024-09-26 12:17:49 +01:00
flatcar-ci
743c1e2d30 New version: main-4102.0.0-nightly-20240923-2100 2024-09-23 21:00:30 +00:00
Thilo Fromm
433f62c0e0
SDK container: include circular deps pkgs (#2340) 
This change builds all packages required to break circular dependencies
and includes these in the SDK image. This way, emerge-<arch> can be used
right away and build_packages only builds packages with production USE
flags.

The change significantly reduces the build time at the cost of a larger
SDK image and longer SDK container build time. Uncompressed:
               Size before       Size after
all arches       7.75GB             9.29GB
arm64            5.7GB              6.58GB
amd64            5.64GB             6.45GB

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
 2024-09-23 12:20:43 +02:00
flatcar-ci
fc5f364a63 New version: main-4099.0.0-nightly-20240920-2100 2024-09-21 01:40:42 +00:00
flatcar-ci
01fe40570b New version: main-4099.0.0-nightly-20240920-2100-INTERMEDIATE 2024-09-20 21:00:27 +00:00
Mathieu Tortuyaux
3306b82576
Merge pull request #2338 from flatcar/tormath1/afterburn 
coreos-base/afterburn: bump to 5.7.0
 2024-09-20 10:00:02 +02:00
flatcar-ci
a25feb6ea6 New version: main-4098.0.0-nightly-20240919-2100 2024-09-19 21:00:29 +00:00
Mathieu Tortuyaux
abccffc040
Merge pull request #2336 from flatcar/linux-6.6.52-main 
Upgrade Linux Kernel for main from 6.6.51 to 6.6.52
 2024-09-19 13:46:59 +02:00
Flatcar Buildbot
5fb6c4e048
sys-kernel/coreos-sources: Update from 6.6.51 to 6.6.52 2024-09-19 13:46:27 +02:00
Mathieu Tortuyaux
ec620689f5
changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-09-19 10:05:19 +02:00
Mathieu Tortuyaux
28955f9fb8
coreos-base/afterburn: bump to 5.7.0 
This mainly pulls:
* Already upstreamed Hetzner patches
* Proxmox support

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-09-19 10:05:19 +02:00
flatcar-ci
8c5cd5bcfd New version: main-4097.0.0-nightly-20240918-2100 2024-09-18 21:00:24 +00:00
Mathieu Tortuyaux
a8c5761097
Merge pull request #2329 from flatcar/mantle-update-main 
Upgrade mantle container image to latest HEAD in main
 2024-09-18 17:11:37 +02:00
Flatcar Buildbot
cffbf33b13 Update mantle container image to latest HEAD 2024-09-17 21:00:44 +00:00
flatcar-ci
ad32cbd71a New version: main-4096.0.0-nightly-20240917-2100 2024-09-17 21:00:27 +00:00
James Le Cuirot
59953b79b6
sys-boot/grub: Adjust version string to include flatcar1 suffix 
We will bump this every time we or Gentoo change patches that modify
parts of GRUB that are installed to the boot partition. We will reset
the version back to 1 when the upstream GRUB version changes.

Without this, we are bound by Gentoo's PVR string, which we cannot
change when we need to make changes to our own patches. The shim review
wants to know the full version number of our GRUB build, and it would
look bad to make such changes without changing the version.

This suffix is also applied to the Flatcar entry in the SBAT, which is
especially important for the shim review.

The published binary package will still be labelled with the Gentoo PVR,
but that seems less important given that end users cannot update
individual packages on Flatcar installations.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-09-17 15:49:01 +01:00
Jeremi Piotrowski
a23e5bbed2
Merge pull request #2299 from flatcar/jepio+sayan/sboot-lockdown 
secure boot: lockdown, grub fallback, CI
 2024-09-17 13:55:49 +02:00
James Le Cuirot
ea395fe5c9
Merge pull request #2318 from flatcar/chewi/grub-2.12 
sys-boot/grub: Move to portage-stable, bump to 2.12
 2024-09-17 10:31:03 +01:00
Jeremi Piotrowski
fd54cca8ec Switch remaining uses of QEMU_UEFI_BIOS to QEMU_UEFI_FIRMWARE 
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-09-17 11:01:06 +02:00
Jeremi Piotrowski
7b8f43756c changelog: Add entry for kernel lockdown changes 
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-09-17 11:01:06 +02:00
Sayan Chowdhury
5a2c5c61a8 ci-automation: qemu: Support passing OVMF vars and secure-boot flag 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-09-17 11:01:06 +02:00
Jeremi Piotrowski
be652a29d5 build_library/grub.cfg: Enable grub fallback behavior 
With secure boot a failed shim signature check will leave us stuck in grub.
Enable automatic fallback in that case.
 2024-09-17 11:01:06 +02:00
Jeremi Piotrowski
580c181df8 sys-kernel/coreos-modules: Enable lockdown when booted with secure boot 
This is a requirement of the shim signing process.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-09-17 11:01:06 +02:00
Jeremi Piotrowski
8393a4cf4b sys-kernel/coreos-sources: Add secure-boot-lockdown patches 
Shim signing for secure boot requires enforcing lockdown. There are three ways
we can do this:

1. setting CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y. This unconditionally
   prevents loading unsigned kernel modules.
2. setting lockdown=integrity on the kernel cmdline from a signed Grub
   configuration. This would be OK, but Grub is not updated in the field right
   now, so we'd be stuck.
3. incorporate the secure-boot-lockdown patches that other major distros are using.

We're going to go with 3, because this only enforces lockdown when secure boot
is actually enabled and lets us change approach later on.

These patches are sourced from Debian:
https://sources.debian.org/src/linux/6.6.13-1~bpo12%2B1/debian/patches/features/all/lockdown/.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-09-17 11:01:06 +02:00
Mathieu Tortuyaux
00bd0915ce
Merge pull request #2324 from flatcar/linux-6.6.51-main 
Upgrade Linux Kernel for main from 6.6.50 to 6.6.51
 2024-09-17 09:55:13 +02:00
flatcar-ci
2b10aa94a1 New version: main-4095.0.0-nightly-20240916-2100 2024-09-16 21:00:25 +00:00
Krzesimir Nowak
e9197a75da
Merge pull request #2326 from flatcar/krnowak/gh-action-linux-lts 
.github: Follow-up fix for missing app-emulation/hv-daemons
 2024-09-16 16:58:43 +02:00
Krzesimir Nowak
b108abf170 .github: Follow-up fix for missing app-emulation/hv-daemons 2024-09-16 16:53:15 +02:00
Flatcar Buildbot
bc5e1fce44 sys-kernel/coreos-sources: Update from 6.6.50 to 6.6.51 2024-09-16 14:40:58 +00:00
Krzesimir Nowak
af3b2d1323
Merge pull request #2321 from flatcar/krnowak/gh-action-linux-lts 
.github: Handle missing app-emulation/hv-daemons
 2024-09-16 16:37:42 +02:00
Krzesimir Nowak
475cb08109
.github: Make app-emulation/hv-daemons a relative link 
Co-authored-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-09-16 15:23:48 +02:00
Mathieu Tortuyaux
7234433f87
Merge pull request #2308 from flatcar/tormath1/ignition 
sys-kernel/bootengine: pull ignition changes
 2024-09-16 14:20:57 +02:00
Mathieu Tortuyaux
c7d080bfb6
Merge pull request #2310 from flatcar/firmware-20240909-main 
Upgrade Linux Firmware in main from 20240811 to 20240909
 2024-09-16 14:17:43 +02:00
Krzesimir Nowak
90388548d1 .github: Handle missing app-emulation/hv-daemons 
LTS channel has no such package, so the action for finding the kernel
update was failing. Fix it by updating the package only if it exists.
 2024-09-16 12:20:56 +02:00
Mathieu Tortuyaux
677bcdaa57
changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-09-16 09:51:38 +02:00
Mathieu Tortuyaux
46d44d3b16
sys-kernel/bootengine: pull ignition changes 
this pulls Ignition reordering to fix Equinix Metal issues.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-09-16 09:39:09 +02:00
Mathieu Tortuyaux
e46b859e0e
Merge pull request #2316 from flatcar/mantle-update-main 
Upgrade mantle container image to latest HEAD in main
 2024-09-16 09:28:29 +02:00
Flatcar Buildbot
b7bd8570e5 Update mantle container image to latest HEAD 2024-09-14 01:56:57 +00:00
flatcar-ci
4eea8c4a3d New version: main-4092.0.0-nightly-20240913-2100 2024-09-14 01:56:41 +00:00
flatcar-ci
78210dcd9a New version: main-4092.0.0-nightly-20240913-2100-INTERMEDIATE 2024-09-13 21:00:27 +00:00
Thilo Fromm
775cbf6b3e
board-packages: add hyperv hv-daemons (#2319) 
This change adds the Azure and HyperV OEM "hv-daemons" to board-packages
so build_packages.sh will actually build these. This un-breaks a build
issue with the Azure and HyperV images.

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
 2024-09-13 15:32:34 +02:00