8838 Commits

Author SHA1 Message Date
Dongsu Park
d8f726d0d7 sys-kernel/coreos-firmware: fix build issue with intel/ice/ddp/ice.pkg
Since linux-firmware 20220509, intel/ice/ddp/ice-1.3.26.0.pkg was
updated to ice-1.3.28.0.pkg. As a result the symlink ice.pkg needs to be
also updated so it points to the correct version of the file.
Create a variable for the ICE DDP version for better maintenance.
2022-05-13 11:30:51 +02:00
Dongsu Park
14761dc4da changelog: add security changelog for runc 1.1.2 2022-05-12 17:35:53 +02:00
Flatcar Buildbot
54b6479bb0 app-emulation: Upgrade Runc 1.1.1 to 1.1.2 2022-05-12 17:34:36 +02:00
Krzesimir Nowak
c7c189e7ae profiles: Work around the build-id collisions 2022-05-12 16:14:31 +02:00
Jeremi Piotrowski
d675d2f74a Merge pull request #1876 from flatcar-linux/jepio/remove-xen-pci-patch
sys-kernel/coreos-sources: remove Xen-PCI-revert patch
2022-05-12 14:06:47 +02:00
Flatcar Buildbot
d7d50d5444 sys-kernel: Upgrade Linux Firmware 20220411 to 20220509 2022-05-12 07:11:57 +00:00
Dongsu Park
961dd018a9 changelog: add changelog for Go 1.18.2 2022-05-11 14:34:02 +02:00
Dongsu Park
8a19d74c15 .github: remove unnecessary version Go 1.16
Go 1.16 was deprecated some time ago, so we do not need that in Github
Actions.
2022-05-11 14:34:02 +02:00
Dongsu Park
601cbca305 *: Use Go 1.18 instead of 1.17
Use Go 1.18 instead of 1.17 by default in all ebuilds.
Note, we still keep building app-emulation/docker{,-cli} with Go 1.17,
to be consistent with upstream Docker 20.10.x, which still builds with
Go 1.17. That should avoid potential unexpected regressions that
happened in the past.
2022-05-11 14:34:02 +02:00
Dongsu Park
2ef1472e32 dev-lang/go: add 1.18.2
Update the default version of dev-lang/go to 1.18.2.
Keep go1.17 as well to build docker{,-cli} with Go 1.17.
Use EAPI=7 for all versions.
See also https://go.dev/doc/go1.18.
2022-05-11 14:34:02 +02:00
Dongsu Park
7619b554b8 eclass: use ver_cut instead of get_version_component_range
We should update EAPI from 6 to 7, to deprecate old EAPIs in general.
To make it work with EAPI=7, replace get_version_component_range with
ver_cut, as get_version_component_range does not work any more with EAPI
7. As a result, the versionator eclass is not needed any more.
2022-05-11 14:34:02 +02:00
Dongsu Park
0bd7c888f2 Merge pull request #1877 from flatcar-linux/docker-20.10.15-main
Upgrade Docker in main from 20.10.14 to 20.10.15
2022-05-11 14:32:43 +02:00
Jeremi Piotrowski
a71094c33b sys-kernel/coreos-sources: remove Xen-PCI-revert patch
There was a kernel regression on Xen HVM with regard to MSI interrupts that
affected certain AWS instances (m4 and similar). We reverted the patch that
broke networking, but in the meantime upstream found the actual cause and
provided a proper fix which is part of 5.15.38. Remove the obsolete patch.

Link: https://lore.kernel.org/all/20220504153056.686401990@linuxfoundation.org/
2022-05-11 12:51:58 +02:00
Mathieu Tortuyaux
75f1725a0f Merge pull request #1874 from flatcar-linux/tormath1/bootengine
sys-kernel/bootengine: bump commit ID
2022-05-11 09:49:01 +02:00
Flatcar Buildbot
41c7dcd724 app-emulation: Upgrade Docker 20.10.14 to 20.10.15 2022-05-11 07:46:12 +00:00
Kai Lueke
96b90f616f coreos-base/coreos-init: Ensure /etc/flatcar/update.conf exists
This pulls in
https://github.com/flatcar-linux/init/pull/71
to create /etc/flatcar/update.conf if missing.
2022-05-11 15:23:05 +09:00
Krzesimir Nowak
0c52e4f3fd Merge pull request #1873 from flatcar-linux/linux-5.15.38-main
Upgrade Linux Kernel in main from 5.15.37 to 5.15.38
2022-05-10 15:52:10 +02:00
Mathieu Tortuyaux
0b3cbd519d changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-10 13:52:09 +02:00
Dongsu Park
4cc38f04c5 Merge pull request #1865 from flatcar-linux/dongsu/changelog-example
changelog: use a specific project name in the example
2022-05-10 11:25:18 +02:00
Jeremi Piotrowski
1c2e75e940 Merge pull request #1838 from flatcar-linux/jepio/cross-binutils-keywords
profiles: add keywords to cross-*/binutils as well
2022-05-10 09:55:09 +02:00
Mathieu Tortuyaux
2edfc016e9 sys-kernel/bootengine: bump commit ID
this pulls:
* https://github.com/flatcar-linux/bootengine/pull/45

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-10 09:32:37 +02:00
Flatcar Buildbot
d4f751a8b3 sys-kernel: Upgrade Kernel 5.15.37 to 5.15.38 2022-05-10 07:23:47 +00:00
Dongsu Park
eb0cf00c5e changelog: add changelog for torcx 2022-05-06 15:21:46 +02:00
Dongsu Park
431c87c98e app-arch/torcx: update golang.org/x/crypto
Update golang.org/x/crypto to v0.0.0-20220314234659-1baeb1ce4c0b mainly
to address CVE-2022-27191.

Pulls in https://github.com/flatcar-linux/torcx/pull/12 .
2022-05-06 15:21:46 +02:00
Dongsu Park
d18978d5e6 Merge pull request #1864 from flatcar-linux/containerd-1.6.4-main
Upgrade Containerd in main from 1.6.3 to 1.6.4
2022-05-06 15:19:29 +02:00
Dongsu Park
6bd35179ce changelog: use a specific project name in the example
To be able to distinguish changelog entries from each other, we should
write a specific project name, e.g. coreos-overlay, instead of `PR`.
Changelog entries with a simple `PR` usually cause so much additional
rework when doing actual releases.
2022-05-06 12:19:02 +02:00
Dongsu Park
89db3c0785 Merge pull request #1861 from flatcar-linux/dongsu/rsync-3.2.4
profiles: accept keywords for net-misc/rsync
2022-05-06 10:59:58 +02:00
Dongsu Park
4cff4fb85e Merge pull request #1860 from flatcar-linux/dongsu/git-2.35.3
profiles: accept keywords for git 2.35.3
2022-05-06 10:57:22 +02:00
Flatcar Buildbot
bed28648f6 app-emulation: Upgrade Containerd 1.6.3 to 1.6.4 2022-05-06 08:29:08 +00:00
Dongsu Park
6159fa199b profiles: accept keywords for git 2.35.3
We need to build 2.35.3 to address CVE-2022-24765.
2022-05-06 08:27:25 +02:00
Dongsu Park
164bdd524b profiles: accept keywords for net-misc/rsync
We need to allow net-misc/rsync 3.2.4-r1, to address security issues
in its bundled zlib.
2022-05-05 17:17:55 +02:00
Kai Lueke
26432fe63c .github: add cacerts/kernel actions for current LTS
The GitHub Actions were defined for the LTS stream directly but we can
now follow the approach used for the other channels. This means that
in the future we could decide to create new Actions for 2022 by copying
the current one and modifying it when 2023 gets the new current LTS -
anyway some manual work would be required to set up Actions for both
old and new at the same time (we have no "previous" symlink on Origin).
We could retire the old LTS Actions immediately because the releases
don't occur on a fixed schedule but I think the automation is nice to
keep.
2022-05-04 14:24:37 +09:00
Dongsu Park
48f7788853 Merge pull request #1857 from flatcar-linux/linux-5.15.37-main
Upgrade Linux Kernel in main from 5.15.35 to 5.15.37
2022-05-03 16:44:55 +02:00
Dongsu Park
24f5e0f1a4 Merge pull request #1858 from flatcar-linux/cacerts-3.78-main
Upgrade ca-certificates in main from 3.77 to 3.78
2022-05-02 19:19:20 +02:00
Flatcar Buildbot
2c01f8e685 app-misc: Upgrade ca-certificates 3.77 to 3.78 2022-05-02 07:24:12 +00:00
Flatcar Buildbot
fde16102ed sys-kernel: Upgrade Kernel 5.15.35 to 5.15.37 2022-05-02 07:24:00 +00:00
Flatcar Buildbot
59b3d4bacc app-emulation: Upgrade Containerd 1.6.2 to 1.6.3 2022-04-29 08:30:47 +00:00
Mathieu Tortuyaux
909f276006 Merge pull request #1842 from flatcar-linux/tormath1/ignition
sys-apps/ignition: use upstream
2022-04-27 10:08:54 +02:00
Mathieu Tortuyaux
208574039c sys-apps/ignition: use upstream
use upstream ignition (coreos/ignition) and apply our patches on top of
it.

It's currently done in the same way with coreos/afterburn.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-26 15:27:23 +02:00
Kai Lueke
8ee228d5ce Move mantle's dnsmasq dependency to the SDK dependencies
The removal of the mantle ebuild file also meant that dnsmasq isn't
installed into the SDK anymore, yet we actually need it to run kola
QEMU tests in the SDK on the original CI pipeline. As long as the
original CI pipeline is kept, we have to keep kola's dependencies
like QEMU and dnsmasq around.
2022-04-26 15:09:13 +09:00
Jeremi Piotrowski
c5e7ff8c9e Add missing pahole dependencies
pahole is a build-time dependency of our kernel build, due to us setting
CONFIG_BTF_DEBUG_INFO. If pahole is missing, a `make modules_prepare` with our
kernel config results in symbols in the config changing. This will affect
people building kernel modules against coreos-sources in the developer
container, but not the SDK because pahole is already in sdk-depends.

pahole is now an (explicit) BDEPEND of all the coreos-kernel/coreos-modules
packages, and we'll make it an RDEPEND of coreos-sources so that it is pulled
in whenever it might be necessary.  Also add it to the coreos-dev package so
that it is included in developer container by default, uncompressed size
increase is <1MB.
2022-04-25 14:28:02 +02:00
Jeremi Piotrowski
76c3130791 x11-drivers/nvidia-drivers: add more device node creation
This is the fallback path that nvidia publishes for verifying device node
creation was successful. It now handles multiple gpus and creating the
nvidia-uvm node, with a dynamic major.

The weird thing is that nvidia-smi and nvidia-modprobe also create some device
nodes and files under /dev, but this does not appear to be well documented. So
keep the static creation.
2022-04-25 14:24:22 +02:00
Jeremi Piotrowski
a6c4454b36 x11-drivers/nvidia-drivers: rework install paths of files to match OS
This involves putting libraries under /usr/lib64 and kernel modules under
/usr/lib/module. This is an experiment at making the nvidia installation work
as a sysext as well, but there are still some issues around that. The major
issue was that `systemd-sysext refresh` would remove the OEM symlink and I
don't feel comfortable with `systemctl restart systemd-sysext` from within
another unit.

If anyone wants to try it, it's now a matter of:

  ln -s /opt/nvidia/current /run/extensions/nvidia-driver

Bonus points for moving nvidia binaries from /opt/bin to
/opt/nvidia/current/usr/bin.
2022-04-25 14:00:09 +02:00
Jeremi Piotrowski
08b86ad7dd x11-drivers/nvidia-drivers: keep developer container image read-only
Since we no longer need to run emerge in the developer container, we can as
well just treat the developer container more like a container image and use an
ephemeral overlay.
2022-04-25 13:54:51 +02:00
Jeremi Piotrowski
d01ecae74c x11-drivers/nvidia-drivers: make service re-entrant
Currently the setup-nvidia script fails when re-executed. It should work in
cases when the driver is already built and just needs to be loaded, or when it
needs to be rebuilt for a new kernel (but driver version may not have changed).

To make this work, several changes where necessary:

* `./nvidia*.run -x -s` fails when already unpacked. Allow it so that we can
  rebuild
* there are several module dependencies for nvidia modules that are implicit,
  related to i2c/ipmi. Probe those explicitly.
* `[ -f /dev/nvidia* ]` fails because those are character devices, so need a
  `[ -c ...]` check.
* `nvidia-modprobe` previously always failed, because it doesn't actually know
  the location of the modules and can only call modprobe (modprobe looks into
  /lib/modules/). We now explicitly probe the important modules, at that point
  nvidia-modprobe just creates additional device nodes.
* `is_nvidia_installation_required` checks whether building and loading is needed.
  Factor out the loading check so that we can reload the module after an update.
2022-04-25 12:35:29 +02:00
Jeremi Piotrowski
67bf5476c3 x11-drivers/nvidia-drivers: use versioned developer container filenames
Currently the script will reuse a developer container that was downloaded once,
without ensuring that the same version is used as the running image. This works
on the first boot, but wouldn't be correct after an OS update.

To resolve this, add a version number to the downloaded filename, and check for
the versioned dev container file. When the file is missing we also cleanup all
other dev container files via glob remove.
2022-04-25 10:34:43 +02:00
Jeremi Piotrowski
a4ac14c66c x11-drivers/nvidia-drivers: use lbzip2 to speed up developer container decompression 2022-04-25 10:26:36 +02:00
Jeremi Piotrowski
d6ea20ddd6 x11-drivers/nvidia-drivers: allow user to override nvidia-metadata
...by providing /etc/flatcar/nvidia-metadata. Newer driver packages do not
support some older Nvidia cards. An example is the Tesla K80 cards in
Standard_NC6 VMs on Azure, which are only supported up to the 470.x driver
version. To allow users to continue using those, give them a way to override
the driver version through /etc/flatcar/nvidia-metadata. For example, this
entry could be used to pin a specific driver version:

NVIDIA_DRIVER_VERSION=470.103.01
2022-04-25 10:22:45 +02:00
Jeremi Piotrowski
85f7b86c00 x11-drivers/nvidia-drivers: build driver against /lib/modules
There are two ways to build the nvidia-driver - either against a full kernel
source tree in /usr/src/linux, or against a slim kernel-devel equivalent in
/lib/modules/*/build. The /lib/modules/*/build is provided by
sys-kernel/coreos-module, see `install_build_source`. The interesting thing is
that in absence of --kernel-source-path, nvidia-installer will autodetect which
to use and already builds against /lib/modules/*/build on Flatcar right now. By
passing --kernel-name, we make that choice explicit and this allows us to skip
the emerge steps of the build.

Since this runs in the developer container, there is also no point in trying to
execute systemctl or depmod, so pass the flags to disable usage of those.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-04-25 09:53:24 +02:00
Kai Lüke
b9f2da8566 Merge pull request #1820 from flatcar-linux/kai/sysext-oem-partition
coreos-base/coreos-init: add systemd-sysext.service for OEM mount
2022-04-25 13:12:45 +09:00