Commit Graph

26055 Commits

Author SHA1 Message Date
Kai Lüke
a60bf6f12e
Merge pull request #1874 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2024-04-11 10:49:01 +02:00
Flatcar Buildbot
6d28507cc6 Update mantle container image to latest HEAD 2024-04-11 08:02:39 +00:00
Kai Lüke
265ba817dc
Merge pull request #1866 from flatcar/kai/openstack-grub
coreos-base/common-oem-files: Enable flatcar.autologin for OpenStack
2024-04-11 10:02:25 +02:00
Kai Lueke
f57a928b4a coreos-base/common-oem-files: Enable flatcar.autologin for OpenStack
So far the console in OpenStack (or Brightbox which shares the image)
was not usable well until one issues a reboot to add the autologin in
the GRUB menu.
Add it by default so that one doesn't need this reboot trick.
2024-04-11 16:48:31 +09:00
flatcar-ci
225c0d349f New version: main-3936.0.0-nightly-20240410-2100 2024-04-10 21:00:29 +00:00
Kai Lüke
a6d22b99e9
Merge pull request #1865 from flatcar/kai/ga-nobz
.github: Remove bz2 compression layer from zip artifacts
2024-04-10 15:39:41 +02:00
Kai Lueke
f5a172deb8 .github: Add flatcar_production_qemu.sh to generic image zip
When downloading the generic image to run a test it would be nice to
have the qemu script in the zip bundle.
2024-04-10 20:37:42 +09:00
Kai Lueke
bc0e34c04f .github: Remove bz2 compression layer from zip artifacts
The GitHub Action artifacts are compressed zip files which include
bz2 files which are either the raw .bin images that have many zero bytes
in the rootfs but the main data in /usr is using zstd compression, or
they are the qcow2 .img images which are compressed themselves (and of
course have the same /usr compression). The bz2 compression doesn't help
in our case.
Remove the bz2 compression layer. If in the future non-zip artifacts
are supported we can add it back for the .bin image only by using
explicit calls only for that file instead of the
--image_compression_formats= flag for all images.
2024-04-10 20:28:23 +09:00
Kai Lüke
de3a39b39c
Merge pull request #1861 from flatcar/kai/grub-tpm
build_library/grub.cfg: Enable TPM module by default
2024-04-10 13:20:27 +02:00
Kai Lüke
f389ea578e
Merge pull request #1863 from flatcar/kai/arm64-nosb
Skip non-UEFI qemu image symlink/script for arm64
2024-04-10 13:14:05 +02:00
Kai Lueke
286a8ca4c1 Skip non-UEFI qemu image symlink/script for arm64
We didn't generate this before and don't need it.
2024-04-10 16:42:36 +09:00
flatcar-ci
a9cd30c4b4 New version: main-3935.0.0-nightly-20240409-2100 2024-04-09 21:00:31 +00:00
Kai Lueke
834d32efa8 build_library/grub.cfg: Enable TPM module by default
For binding a secret to the OS we need TPM PCRs that measure the kernel
and boot configuration (UEFI). Used for:
https://github.com/flatcar/flatcar-website/pull/317
2024-04-09 22:17:18 +09:00
Kai Lüke
0bebfd9243
Merge pull request #1847 from flatcar/kai/unify-qemu
Set up symlinks for same image artifacts to remove qemu/qemu_uefi_secure
2024-04-09 15:09:54 +02:00
Kai Lueke
de4eb8f755 Set up symlinks for same image artifacts to remove qemu/qemu_uefi_secure
The qemu and qemu_uefi_secure images have the same contents as the
qemu_uefi image which wastes space on the release server. A similar
case is the PXE vmlinuz which is the same as the regular one, too.

Set up symlinks for same images, and also detect this when compressing
to set up symlinks there as well. To reduce complexity, the qemu and
qemu_uefi_secure images are not supported anymore and the Jenkins or
GitHub CI will skip over them if specified. Users that build their own
images need to adapt, though.
2024-04-09 15:09:29 +02:00
Adrian Vladu
385b929ec6
Merge pull request #1791 from flatcar/ader1990/hyperv-vhdx-support
image_to_vm: add support for hyperv_vhdx format
2024-04-09 10:53:45 +03:00
Adrian Vladu
7d4917d67c image_to_vm: add support for hyper-v vhdx format
Add support for Gen 2 Hyper-V VMs.

`./image_to_vm` tool has now a new supported format: `hyperv_vhdx`,
that produces .vhdx dynamic disks.

How to use:

```bash
 ./image_to_vm.sh --from ../build/images/amd64-usr/developer-latest/ --format hyperv_vhdx
```

See: https://github.com/flatcar/Flatcar/issues/1009

Uses PR: https://github.com/flatcar/bootengine/pull/92

Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-04-09 10:52:06 +03:00
Mathieu Tortuyaux
fd2766ce94
Merge pull request #1860 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2024-04-09 09:34:11 +02:00
Flatcar Buildbot
dc524ef145 Update mantle container image to latest HEAD 2024-04-08 21:00:44 +00:00
flatcar-ci
8620729062 New version: main-3934.0.0-nightly-20240408-2100 2024-04-08 21:00:27 +00:00
Mathieu Tortuyaux
b932ebcfa1
Merge pull request #1850 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2024-04-08 09:45:50 +02:00
Flatcar Buildbot
b3732e4400 Update mantle container image to latest HEAD 2024-04-08 07:11:07 +00:00
flatcar-ci
0a0cfb8835 New version: main-3930.0.0-nightly-20240404-2100 2024-04-04 21:00:27 +00:00
Kai Lüke
9ed63f4813
Merge pull request #1841 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2024-04-04 11:01:14 +02:00
Flatcar Buildbot
49266cc443 Update mantle container image to latest HEAD 2024-04-04 08:23:49 +00:00
Kai Lüke
395c884a38
Merge pull request #1827 from flatcar/kai/qemu-swtpm
qemu_template.sh: Add support for attaching a software TPM
2024-04-04 10:21:39 +02:00
Kai Lueke
5e7b4b6b3d qemu_template.sh: Allow parameters for kernel and initrd
With the PXE script it is easy to boot different versions from one
folder without any copies because the kernel and PXE initrd are always
"fresh".
Instead of only supporting hardcoded file names, support parameters for
the kernel and initrd file to be used.
2024-04-04 16:53:08 +09:00
Kai Lueke
9d3200bc47 build_library/qemu_template.sh: Add notes for swtpm init commands
For the swtpm version in Ubuntu some init command is required first.
2024-04-04 16:53:08 +09:00
Mathieu Tortuyaux
ef267c47f5
Merge pull request #1829 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2024-04-04 09:37:01 +02:00
Kai Lueke
71866e4824 qemu_template.sh: Allow parameters for VM pflash firmware
The qemu UEFI and regular qemu script only differ by having a default
value for the firmware. If one tries to switch between different
firmwares one normally would modify the script.
Make it easier to switch boot modes and use custom firmwares by
supporting a flag to set the pflash contents.
2024-04-04 12:55:37 +09:00
Kai Lueke
48780dc375 qemu_template.sh: Add support for attaching a software TPM
For testing TPM2-backed rootfs encryption it is handy to have a software
TPM option for the qemu script.
Add a flag for a software TPM with swtpm like kola also does. The user
has to specify a folder for the secret state and this won't be removed
because the same store should be able to be passed when booting the VM
again after shutdown.
2024-04-04 12:55:37 +09:00
Kai Lueke
7379db37e8 vm_image_util.sh: Bump default VM memory to 2 GB
While Flatcar itself runs fine with 1 GB, many workloads do not and
having to debug this is time consuming when one forgets to bump the VM
memory, e.g., in the Qemu script.
Default to 2 GB as known-good setting for things like Kubernetes or
setting up LUKS devices.
2024-04-04 12:55:37 +09:00
Kai Lueke
4d5e46432a qemu_template.sh: Allow parameters for VM image and memory
When testing multiple images one always has to copy them to the
expected file name, and when trying to run two VMs this means one needs
to either use separate directories or modify the qemu script. One also
needs to modify the qemu script to bump the memory for K8s or for LUKS.

Support parameters for the VM image name and the VM memory.
2024-04-04 12:55:37 +09:00
Flatcar Buildbot
5328eb5ec6 Update mantle container image to latest HEAD 2024-04-03 21:00:40 +00:00
flatcar-ci
83fbd6dc31 New version: main-3929.0.0-nightly-20240403-2100 2024-04-03 21:00:24 +00:00
Krzesimir Nowak
5dd2ebf680
Merge pull request #1788 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-03-25
Weekly portage-stable package updates 2024-03-25
2024-04-03 13:20:45 +02:00
Kai Lüke
405cff9076
Merge pull request #1817 from flatcar/kai/remove-acbuild
app-emulation/actool,acbuild: Remove actool and acbuild
2024-04-03 16:19:13 +09:00
Kai Lueke
1513f3a966 Remove ACI image building bits
The ACI OEM container image was used with rkt for GCE. For long time
this has been migrated to systemd-nspawn and now systemd-sysext.
Remove the unused build library code.
2024-04-03 16:18:56 +09:00
Kai Lueke
6d01140927 app-emulation/actool,acbuild: Remove actool and acbuild
Both actool and acbuild upstream are deprecated and probably not in
use anymore.
Remove actool from the image and acbuild from the SDK.
2024-04-03 16:18:56 +09:00
Krzesimir Nowak
c70df0dbd5 changelog: Add entries 2024-04-03 08:54:01 +02:00
Krzesimir Nowak
101090ea78 overlay profiles: Mask potentially compromised version of app-arch/xz-utils 2024-04-03 08:54:01 +02:00
Krzesimir Nowak
d4297977d8 overlay user-patches: Update our patch for SELinux refpolicy 2024-04-03 08:54:01 +02:00
Krzesimir Nowak
f6598dea74 overlay user-patches: Regenerate our patch for SELinux refpolicy 2024-04-03 08:53:20 +02:00
Krzesimir Nowak
f568f7f9c6 overlay profiles: Drop a mask of installkernel in sys-apps/debianutils
The use flag and the dependency on sys-kernel/installkernel were
dropped from the package.
2024-04-03 08:53:20 +02:00
Krzesimir Nowak
b6b6e79798 overlay profiles: Drop accept keywords for sys-apps/coreutils 2024-04-03 08:53:20 +02:00
Krzesimir Nowak
59686a863d overlay profiles: Drop accept keywords for net-misc/curl 2024-04-03 08:53:20 +02:00
Krzesimir Nowak
246b567586 overlay profiles: Drop accept keywords for net-dns/dnsmasq 2024-04-03 08:53:20 +02:00
Krzesimir Nowak
33e5fbe43a overlay profiles: Add accept keywords for net-dns/c-ares 2024-04-03 08:53:20 +02:00
Krzesimir Nowak
47489cae1c overlay profiles: Drop accept keywords for dev-util/bpftool 2024-04-03 08:53:20 +02:00
Krzesimir Nowak
186b55f095 overlay profiles: Update accept keywords for dev-libs/libdnet 2024-04-03 08:53:20 +02:00