17137 Commits

Author SHA1 Message Date
Dongsu Park
2a8db14e90
Merge pull request #1453 from flatcar/buildbot/monthly-glsa-metadata-updates-2023-12-01
Monthly GLSA metadata 2023-12-01
2023-12-05 13:52:50 +01:00
Mathieu Tortuyaux
eba1c71ae3
Merge pull request #1454 from flatcar/containerd-1.7.10-main
Upgrade Containerd in main from 1.7.9 to 1.7.10
2023-12-04 18:19:54 +01:00
Mathieu Tortuyaux
1cb7be951d
coreos-base/oem-gce: remove ACI built image
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-12-04 18:16:06 +01:00
Mathieu Tortuyaux
5cfbf6e1eb
coreos-base/oem-gce: migrate gce to sysext format
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-12-04 18:15:58 +01:00
Flatcar Buildbot
1af961999c app-misc/ca-certificates: Update from 3.94 to 3.95 2023-12-04 07:19:24 +00:00
Flatcar Buildbot
dabb09d499 sys-kernel/coreos-sources: Update from 6.1.63 to 6.1.65 2023-12-03 07:11:14 +00:00
Mathieu Tortuyaux
586fc12b5e
Merge pull request #1445 from flatcar/tormath1/gcp-oslogin
gcp: fixed OS Login enabling
2023-12-01 15:06:49 +01:00
Mathieu Tortuyaux
31f4f31622
coreos-base/oem-gce: keep unit after its run
Otherwise it gets restarted a few times, which displays this line in the
logs:
```
Nov 30 13:28:41.819250 enable-oslogin[1232]: /etc/pam.d/sshd already exists. Not enabling OS Login
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-12-01 10:58:32 +01:00
Mathieu Tortuyaux
c927a7aeef
net-misc/openssh: fix duplicate slash
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-12-01 10:58:31 +01:00
Flatcar Buildbot
d3de8e602d app-containers/containerd: Update from 1.7.9 to 1.7.10 2023-12-01 08:17:04 +00:00
Flatcar Buildbot
1a3b2b8adb portage-stable/metadata: Monthly GLSA metadata updates 2023-12-01 07:15:03 +00:00
Kai Lüke
73af503a13
Merge pull request #1442 from flatcar/kai/overlay-whiteouts
build_image_util: Store path list for recreating tmpfiles rules
2023-11-30 11:58:31 +01:00
Kai Lueke
5590da400e build_image_util: Store path list for recreating tmpfiles rules
The removal of files in the overlay present in the lowerdir creates
whiteout entries that mask the lowerdir entries. For those files that
have a tmpfile rule for creation, a reboot would cause the file to be
created in the upperdir, meaning this file is not updated from the
lowerdir when it changes. In addition we have filtered out some tmpfile
rules that caused upcopies (symlinks and directories) which meant that
removing the /etc/resolv.conf symlink didn't bring it back after reboot.
To make files from the lowerdir show up if they have a tmpfile rule that
normally would recreate them we keep a list of whiteout entries that we
clean up on boot. This also prevents freezing files because
systemd-tmpfiles does not need to recreate them in the upperdir.
2023-11-30 11:57:27 +01:00
Kai Lueke
319c9501e5 sys-kernel/bootengine: Bump ebuild revision 2023-11-29 15:26:15 +01:00
Kai Lueke
0735fcb692 coreos-base/update_engine: bump revision 2023-11-29 12:59:00 +01:00
Kai Lueke
5a2c696e21 coreos-base/update_engine: Ensure /etc/extensions is mergable
This pulls in
https://github.com/flatcar/update_engine/pull/32
to make the Docker/containerd sysexts show up when updating from Beta
3760.1.0.
2023-11-29 12:59:00 +01:00
Mathieu Tortuyaux
a98abadccb
Merge pull request #1410 from flatcar/linux-6.1.63-main
Upgrade Linux Kernel for main from 6.1.62 to 6.1.63
2023-11-24 18:49:05 +01:00
Krzesimir Nowak
71eed26ee0 overlay, ci-automation: Try making common-oem-files a valid ebuild
Assignment of EAPI must be the first non-comment, non-blank line in
the ebuild, otherwise portage masks it as corrupted.
2023-11-21 16:00:00 +01:00
Krzesimir Nowak
9a780a3e90 overlay coreos-base/common-oem-files: Move hack description down
EAPI needs to be defined within first 24 lines, so the description
would push the definition too much down as it needs to happen after
possible declaration of EAPI as local for the source case.
2023-11-21 16:00:00 +01:00
Krzesimir Nowak
8a75eba906 overlay, ci-automation: Another attempt at providing OEMID info
Please read the comment at the top of the coreos-base/common-oem-files
ebuild for details.
2023-11-21 16:00:00 +01:00
Krzesimir Nowak
f542807a9e overlay, ci-automation: Factor out OEMID info to a separate file
Image changes job needs a list of OEMIDs that are built for a specific
architecture. Similar information already existed in the
coreos-base/common-oem-files ebuild, so factor it out to a separate
file, so the image changes job does not need to source the entire
ebuild (or process it in other way), but rather source the smaller
file.
2023-11-21 16:00:00 +01:00
Krzesimir Nowak
a7853de174 overlay coreos-base/common-oem-files: Add some arch info about OEM
For now we don't have a single place where we could learn about which
OEMs with a sysext image gets built for certain architecture. So add
it for now to the coreos-base/common-oem-files package. Missing
architecture info for an OEM that gets built only in a certain arch is
not going to be fatal for the image changes job - we will just get a
report for this OEM with messages about failures to download some
files.
2023-11-21 16:00:00 +01:00
Flatcar Buildbot
94ec7b09dc sys-kernel/coreos-sources: Update from 6.1.62 to 6.1.63 2023-11-21 07:11:50 +00:00
Jeremi Piotrowski
c2f04328a3
Merge pull request #1395 from flatcar/update-azure-linux-agent
app-emulation/wa-linux-agent: Update to 2.9.1.1
2023-11-20 16:41:17 +01:00
Jeremi Piotrowski
590fa87486 app-emulation/wa-linux-agent: Update to 2.9.1.1
This is the current version being deployed to the Azure fleet for other
distros. This update contains a fix for:

  Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1640'

The upstream fix (stripping MainPid=) is in
https://github.com/Azure/WALinuxAgent/pull/2784.

The patch has also been updated to fix the error:

  Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service'

by redirecting unit file installation to /etc/systemd/system. This change
requires handling in manglefs.sh as package installation unfortunately uses the
same path. This also requires adding a dependency on systemd-sysext.service to
that unit, as it depends on python, which is done through a drop-in.

A final change is handling interface restart. RedHat and Ubuntu bounce a single
link while Flatcar has so far used the "coreos" implementation (restart the
whole systemd-networkd), which forced a full dhcp lease renewal. Follow the
approaches of other distros by copying their implementation of restart_if.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2023-11-20 12:52:24 +01:00
Kai Lüke
d15fe243f5
Merge pull request #1400 from flatcar/kai/sshkeys.service
coreos-base/coreos-init: Make sshkeys.service more robust
2023-11-17 16:14:13 +01:00
Kai Lueke
cf261147e9 coreos-base/coreos-init: Bump ebuild revision after change 2023-11-17 15:51:53 +01:00
Mathieu Tortuyaux
5e5da0f34d
Merge pull request #1398 from flatcar/containerd-1.7.9-main
Upgrade Containerd in main from 1.7.8 to 1.7.9
2023-11-17 15:45:51 +01:00
Kai Lueke
16a7e2a294 coreos-base/coreos-init: Make sshkeys.service more robust
This pulls in
https://github.com/flatcar/init/pull/112
to only run coreos-metadata-sshkeys@core.service when not masked and
also retry on failure.
2023-11-17 15:43:57 +01:00
Flatcar Buildbot
af615bf169 app-containers/containerd: Update from 1.7.8 to 1.7.9 2023-11-17 08:16:33 +00:00
Dongsu Park
79031fd97c
Merge pull request #1397 from flatcar/dongsu/ue-rs-2023-11-16
overlay ue-rs: update to 0.1.0-r3, 2023-11-16
2023-11-17 09:15:18 +01:00
Dongsu Park
422d00a8ac
Merge pull request #1393 from flatcar/dongsu/uss-clap4-fix-options
overlay update-ssh-keys: fix number of arguments of clap4 options
2023-11-17 09:11:51 +01:00
Kai Lüke
bd36d82fe6
Merge pull request #1391 from flatcar/kai/brightbox
Use OpenStack image for Brightbox
2023-11-16 18:30:51 +01:00
Mathieu Tortuyaux
8f5c266d81
Merge pull request #1385 from flatcar/go-1.19.13-and-1.20.11-main
Upgrade Go from 1.20.10 to 1.20.11
2023-11-16 15:33:31 +01:00
Dongsu Park
6c04bbdd7a overlay update-ssh-keys: fix number of arguments of clap4 options
In case of clap 4, it is necessary to set the number of args to 0,
if the option does not take any parameter.

Pulls in https://github.com/flatcar/update-ssh-keys/pull/16
2023-11-16 15:01:15 +01:00
Mathieu Tortuyaux
00850644f8
Merge pull request #1396 from flatcar/firmware-20231111-main
Upgrade Linux Firmware in main from 20231030 to 20231111
2023-11-16 13:12:12 +01:00
Krzesimir Nowak
680bff2353 overlay profiles: Update accept keywords for net-libs/libnetfilter_ct{helper,timeout} 2023-11-16 13:12:05 +01:00
Krzesimir Nowak
d3e3ead762 net-libs/libssh2: Sync with Gentoo
It's from Gentoo commit e34e106c9ff5de63b4823f2fe74474cb3d61da9e.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
36765eece3 net-libs/libnfnetlink: Sync with Gentoo
It's from Gentoo commit 78213a89b4a602460bf81ba5fab8eed561091ade.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
800c08d4a9 net-libs/libnetfilter_queue: Sync with Gentoo
It's from Gentoo commit 78213a89b4a602460bf81ba5fab8eed561091ade.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
861f81784e net-libs/libnetfilter_cttimeout: Sync with Gentoo
It's from Gentoo commit 78213a89b4a602460bf81ba5fab8eed561091ade.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
020c5c3338 net-libs/libnetfilter_cthelper: Sync with Gentoo
It's from Gentoo commit 78213a89b4a602460bf81ba5fab8eed561091ade.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
d1a788e1f1 net-libs/libnetfilter_conntrack: Sync with Gentoo
It's from Gentoo commit 78213a89b4a602460bf81ba5fab8eed561091ade.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
cc37bfe017 net-libs/libmnl: Sync with Gentoo
It's from Gentoo commit 78213a89b4a602460bf81ba5fab8eed561091ade.
2023-11-16 13:12:05 +01:00
Krzesimir Nowak
2ce866abd7 net-libs/http-parser: Sync with Gentoo
It's from Gentoo commit 41fdf7567a3cf179892c3170d55cecaabb74d542.
2023-11-16 13:12:05 +01:00
Dongsu Park
b5bb5c859b overlay ue-rs: update to 0.1.0-r3, 2023-11-16
Update ue-rs to 0.1.0-r3, 2023-11-16.
Pulls in https://github.com/flatcar/ue-rs/pull/23 and
https://github.com/flatcar/ue-rs/pull/24.
2023-11-16 12:56:39 +01:00
Flatcar Buildbot
203c78e109 sys-kernel/coreos-firmware: Update from 20231030 to 20231111 2023-11-16 07:11:44 +00:00
Kai Lueke
87ff566aae Use OpenStack image for Brightbox
The special Brightbox image uses the OpenStack userdata in Ignition but
lacked Afterburn usage. It actually works to use the OpenStack image and
directly which also enables Afterburn, thus we can drop the special
image.
Don't build a special image for Brightbox but recommend to use OpenStack
images directly. A symlink is added to help with the download of
hardcoded user scripts.
2023-11-15 13:33:55 +01:00
Krzesimir Nowak
e6bad5d0d3 overlay profiles: Update accept keywords for dev-libs/ding-libs 2023-11-15 09:55:23 +01:00
Krzesimir Nowak
e7a03395fd overlay profiles: Install ntp modifications on generic images 2023-11-15 09:55:23 +01:00