22893 Commits

Author SHA1 Message Date
Sayan Chowdhury
4052dc2ce5 Merge pull request #1151 from kinvolk/sayan/update-libarchive-3.5.1
profiles: Remove libarchive-3.3.1 from ACCEPT_KEYWORDS
2021-08-03 20:15:07 +05:30
Sayan Chowdhury
a3be6bfecf Merge pull request #192 from kinvolk/sayan/update-libarchive-3.5.1
Sync libarchive to 3.5.1, xz-utils to 5.2.5 with Gentoo upstream
2021-08-03 20:15:00 +05:30
Sayan Chowdhury
7d0075e163 Merge pull request #1150 from kinvolk/sayan/update-expat-2.4.1
dev-libs/expat: Sync with Gentoo upstream; updates to 2.4.1
2021-08-03 20:14:36 +05:30
Sayan Chowdhury
2726b348d6 profiles: Remove libarchive-3.3.1 from ACCEPT_KEYWORDS
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-03 19:50:09 +05:30
Sayan Chowdhury
ae033984a8 Merge pull request #1157 from kinvolk/linux-5.10.55-main
Upgrade Linux Kernel in main from 5.10.52 to 5.10.55
2021-08-03 19:33:20 +05:30
Jeremi Piotrowski
cbc6a8fb90 coreos-base/oem-ec2-compat: make ssm agent conditional on ec2
and properly include all deps in RDEPEND.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-03 13:32:26 +00:00
Jeremi Piotrowski
26767b01aa Revert "Revert "Build app-emulation/amazon-ssm-agent with EC2 AMI images""
Now that the OEM partition is a btrfs partition with compression, we have
enough space to install ssm agent.

This reverts commit b6abb59c544be13e923a3e7240b5c9395c281fca.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-03 12:55:42 +00:00
Jeremi Piotrowski
0875344378 app-emulation/amazon-ssm-agent: cross-compile and use correct go version
The ebuild was missing a call to go_export() which exports GOARCH, and so was
always built for host architecture. While COREOS_GO_VERSION was specified as
go1.12, src_compile() has to use '${EGO}' to make use of it, so we were
building with go1.16 (latest).  Upstream builds with 1.12 for this version, so
we will do the same.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-03 12:33:48 +00:00
Jeremi Piotrowski
ba7b460518 Merge pull request #1130 from kinvolk/jepio/arm64-sdk-support
enable arm64 SDK bootstrap
2021-08-03 14:28:15 +02:00
Jeremi Piotrowski
a8a57c733b
Merge pull request #134 from kinvolk/jepio/arm64-sdk-support
bootstrap_sdk: enable arm64 sdk bootstrap
alpha-2955.0.0
2021-08-03 12:18:01 +02:00
Kai Lüke
25dc4d4259
Merge pull request #139 from kinvolk/kai/switch-oem-to-btrfs
Revert "Revert "disk_layout: use btrfs for the OEM partition""
2021-08-03 11:07:46 +02:00
Kai Lüke
4321b2ab83 Revert "Revert "disk_layout: use btrfs for the OEM partition""
This reverts commit bb9ddfb08a83a456fc56962e62538bdfc0031a2f,
meaning that the planned change is now done and we switch the OEM
partition to btrfs. The reason for the revert is resolved in
https://github.com/kinvolk/ignition/pull/22
2021-08-03 10:50:06 +02:00
Kai Lüke
393a8aa440 Merge pull request #1159 from kinvolk/kai/network-cleanup-wait
sys-kernel/bootengine: finish network-cleanup.service before rootfs switch
2021-08-03 10:45:41 +02:00
Kai Lüke
1b2ab70890 sys-kernel/bootengine: finish network-cleanup.service before rootfs switch
This pulls in
https://github.com/kinvolk/bootengine/pull/27
2021-08-03 10:45:23 +02:00
Kai Lüke
2148ced2f2 Merge pull request #1153 from kinvolk/kai/ignition-oem-auto
sys-apps/ignition: Ignore filesystem format mismatches for the OEM partition
2021-08-03 10:39:59 +02:00
Kai Lüke
9139387127 sys-apps/ignition: Ignore filesystem format mismatches for the OEM partition
This pulls in
https://github.com/kinvolk/ignition/pull/22
2021-08-03 10:39:40 +02:00
Dongsu Park
c449236fb1 Merge pull request #934 from kinvolk/dongsu/delete-boost-build-1.67
dev-util/boost-build: delete boost-build 1.67
2021-08-03 10:26:59 +02:00
Sayan Chowdhury
39db514ce3 dev-libs/expat: Apply Flatcar changes
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-02 22:22:14 +05:30
Sayan Chowdhury
564f8f7b1d dev-libs/expat: Sync with Gentoo upstream; updates to 2.4.1
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-02 22:22:14 +05:30
Sayan Chowdhury
af9d9bc3ca nvidia-{drivers, metadata}: Update NVIDIA to 470.57.02
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-02 22:21:24 +05:30
Dongsu Park
349a9ba532 Merge pull request #1129 from kinvolk/dongsu/github-actions-exclude-rcbeta
.github: list only ebuilds with a unique VERSION_OLD for runc
2021-08-02 14:12:17 +02:00
Kai Lüke
3088fd3cac Merge pull request #1138 from kinvolk/kai/dm-verity-corruption-panic
sys-kernel/bootengine: issue a kernel panic on dm-verity corruption
2021-08-02 13:34:24 +02:00
Kai Lüke
ee14557288 sys-kernel/bootengine: issue a kernel panic on dm-verity corruption
This pulls in
https://github.com/kinvolk/bootengine/pull/26
2021-08-02 13:34:08 +02:00
Dongsu Park
40f5f348af Merge pull request #1127 from kinvolk/firmware-20210716-main
Upgrade Linux Firmware in main from 20210511 to 20210716
2021-08-02 12:26:29 +02:00
Kai Lüke
832917d09e
Merge pull request #138 from kinvolk/kai/revert-oem-to-ext4
Revert "disk_layout: use btrfs for the OEM partition"
2021-08-02 12:00:51 +02:00
Flatcar Buildbot
736682d437 sys-kernel: Upgrade Kernel 5.10.52 to 5.10.55 2021-07-31 07:10:22 +00:00
Kai Lüke
bb9ddfb08a Revert "disk_layout: use btrfs for the OEM partition"
This reverts commit bc97e15c3cd55f10cc11016578673744e3220ffc.
2021-07-30 20:44:36 +02:00
Kai Lüke
eb06982881 Merge pull request #1146 from kinvolk/kai/gce-oem-net-admin
coreos-base/oem-gce: grant CAP_NET_ADMIN to set routes for LB
2021-07-30 18:31:08 +02:00
Kai Lüke
6c13e2c3a7
Merge pull request #137 from kinvolk/kai/remove-kernel-from-usr
build_image_util.sh: delete vmlinuz file from /usr partition
2021-07-30 15:18:41 +02:00
Mathieu Tortuyaux
22c2e57360 Merge pull request #1149 from kinvolk/tormath1/fix-457
docker/torcx: disable SELinux by default on `dockerd` wrapper script
2021-07-30 15:00:12 +02:00
Kai Lüke
9a70c06140 Merge pull request #1145 from kinvolk/kai/cilium_vxlan
coreos-base/coreos-init: prevent networkd interference with cilium_vxlan
2021-07-30 14:10:49 +02:00
Sayan Chowdhury
b0968259d0 app-arch/xz-utils: Sync with Gentoo upstream; updates to 5.2.5
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-30 15:52:02 +05:30
Sayan Chowdhury
4edec94842 app-arch/libarchive: Sync with Gentoo upstream; updates to 3.5.1
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2021-07-30 10:11:20 +00:00
Dongsu Park
b37bce7dff sys-kernel/coreos-firmware: fix builds by updating CXGB version
Fix build failures by updating CXGB firmware version to 1.26.0.0.
2021-07-30 11:03:41 +02:00
Mathieu Tortuyaux
be50e579c8 app-emulation/docker: update wrapper to disable selinux
this is now the default behavior - since this script is deprecated
we do a minimum update on it

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-30 10:34:03 +02:00
Mathieu Tortuyaux
501d937d7e app-arch/torcx: update wrapper to disable selinux
it's the default behavior now. Since this script is deprecated, we
do a minimum change on it.

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-30 10:33:36 +02:00
Kai Lüke
f3cf8d4f41 Merge pull request #190 from kinvolk/kai/update-cryptsetup
sys-fs/cryptsetup: Sync with Gentoo
2021-07-30 10:03:20 +02:00
Jeremi Piotrowski
b42cfedcf5 profiles: use correct lib64 path to sysroot-wrappers
Sysroot-wrappers contains binaries installed to /usr/lib64/sysroot-wrappers,
but the profile referenced them through the 'lib -> lib64' symlink. Stop
relying on that symlink, which is not present in arm64 profiles, and is
not part of 17.1 amd64 profiles.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-30 07:43:15 +00:00
Kai Lüke
764d5c6baf coreos-base/coreos-init: prevent networkd interference with cilium_vxlan
This pulls in
https://github.com/kinvolk/init/pull/43
2021-07-29 20:01:50 +02:00
Kai Lüke
daf0a01b55 coreos-base/oem-gce: grant CAP_NET_ADMIN to set routes for LB
With the switch from rkt to systemd-nspawn the ability for the service
to set the routing entries for the TCP load balancer got lost,
resulting in an unreachable LB as reported in
https://github.com/kinvolk/Flatcar/issues/459

The fix also reported there is to retain CAP_NET_ADMIN when starting
the service.
2021-07-29 15:30:39 +02:00
Flatcar Buildbot
990e4f82b8 sys-kernel: Upgrade Linux Firmware 20210511 to 20210716 2021-07-29 07:07:37 +00:00
Kai Lüke
c1b2d88aa2 build_image_util.sh: delete vmlinuz file from /usr partition
The vmlinuz kernel image gets installed to /usr/boot/ but isn't usable
for dm-verity until it gets copied over to /boot/flatcar/ and the hash
gets embedded at a particular offset. The file in /usr/boot/ uses space
while it's not having a real purpose as long as dm-verity is used.

Delete the vmlinuz file under /usr/boot/ to free up space. When
generating the ISO image we use the vmlinuz file from /boot/flatcar/
which also has the advantage that we only distribute a single vmlinuz
file with one particular checksum.
2021-07-28 20:59:16 +02:00
Kai Lüke
1c0936769d sys-fs/cryptsetup: Sync with Gentoo 2021-07-28 19:43:22 +02:00
Jeremi Piotrowski
6ce5d3165f
build_library/toolchain_util: check CBUILD+CHOST for rust warning
For consistency with code further down in the file: aarch64 cross compilation only applies when CBUILD is x86,
for native aarch64 builds rust is guaranteed to have aarch64 rustlibs.
2021-07-28 16:47:13 +02:00
Kai Lüke
b892315775
Merge pull request #131 from kinvolk/kai/btrfs-usr-oem
disk_util: support compressed btrfs filesystems, use btrfs for the OEM partition
2021-07-28 13:34:50 +02:00
Kai Lüke
beabd977e1 Merge pull request #1106 from kinvolk/kai/bootengine-verity-hashoffset
Support BTRFS in OEM and /usr partitions
2021-07-28 13:34:37 +02:00
Kai Lüke
622a99058c coreos-base/update_engine: support btrfs as /usr filesystem
This pulls in
https://github.com/kinvolk/update_engine/pull/11
2021-07-28 13:29:02 +02:00
Kai Lüke
ab2467e547 sys-apps/seismograph: support btrfs in rootdev
This pulls in
https://github.com/kinvolk/seismograph/pull/6
2021-07-28 13:28:55 +02:00
Kai Lüke
e45a6140d0 sys-apps/ignition: support btrfs on the OEM partition
This pulls in
https://github.com/kinvolk/ignition/pull/21
2021-07-28 13:28:45 +02:00
Kai Lüke
bdc7f36d4f sys-kernel/coreos-modules: use 4k pages for arm64
Btrfs filesystems do not support a non-standard 64k page size on arm64
when the filesystem was created by a 4k page size system.

Use the default page size for arm64 to ensure compatibility with
btrfs filesystems created by amd64 systems.
2021-07-28 13:28:45 +02:00