33432 Commits

Author SHA1 Message Date
Krzesimir Nowak
b4c59b6435 overlay sys-apps/baselayout: Pull in pam files removal, cleanups
We are building sssd on arm64, so drop the unnecessary code. Also
create some more compatibility symlinks.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:04:49 +01:00
Krzesimir Nowak
1a0727e04e .github: Add sys-auth/pambase to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
fa4e6f2bd0 overlay coreos/user-patches: Add patches for sys-auth/pambase
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
14c8a7bc0c sys-auth/pambase: Sync with Gentoo
It's from Gentoo commit f32e281b3b124b273302ddffeb06c0e6f20852e9.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
c9573f1f79 overlay sys-auth/pambase: Move to portage-stable
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
8718063db2 build_library: Add a check for PAM configs
This is to make sure that all the packages installing pam configs
actually have them in the vendor directory.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
8ed59960ee .github: Add sys-libs/pam to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
5e7e0957bf sys-libs/pam: Sync with Gentoo
It's from Gentoo commit 197e3931b76a596e0df99bd22809d1db04ec5131.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
1973743a18 overlay sys-libs/pam: Move to portage-stable
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
86df95db83 overlay coreos/config: Add config overrides for sys-libs/pam
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:53 +01:00
Krzesimir Nowak
2b120cc866 overlay profiles: Add a function for vendorizing pam files
This is meant to be used by packages installing pam config files. The
function should be invoked in a post src_install hook.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:52 +01:00
Krzesimir Nowak
d4b29659d3 overlay coreos/user-patches: Add a user patch for sys-libs/pam
It's a patch for adding the account locking functionality.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-12 18:00:52 +01:00
James Le Cuirot
2e94c9f2c7
Merge pull request #3470 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-11-12 14:42:58 +00:00
Flatcar Buildbot
7c7efac281 Update mantle container image to latest HEAD
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-11-12 07:39:09 +00:00
Kai Lüke
b1ba1c8f21
Merge pull request #3481 from flatcar/kai/release-bucket-failure
ci-automation/release.sh: Skip bucket copy on failure until it works
2025-11-12 08:38:57 +01:00
Kai Lueke
e9e70ced98 ci-automation/release.sh: Skip bucket copy on failure until it works
We got a DNS resolution problem due to UDP packets not going to the
configured server. For now try the host network (and otherwise maybe
a custom DNS server?).
But in any case we should not block the release on that and continue.

Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-11-12 16:20:23 +09:00
flatcar-ci
28cf73c46e New version: main-4516.0.0-nightly-20251111-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4516.0.0-nightly-20251111-2100
2025-11-11 21:00:28 +00:00
Kai Lüke
cad1faf52b
Merge pull request #3480 from flatcar/kai/release-rclone
ci-automation/release: Set up rclone config for mapping into container
2025-11-11 15:33:54 +01:00
Kai Lueke
39a03b4f8f ci-automation/release.sh: Update comment about current state
Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-11-11 23:31:39 +09:00
Kai Lueke
0702b7bcfb ci-automation/release: Set up rclone config for mapping into container
The wrong variable was used to set up the mapping of the rclone config
into the rclone container and it wasn't set up in the right function.
Move it into the right function and use the right variable name but also
don't rely on /proc/PID/fd/FD to be mappable into the container but
instead use a regular temp file.

Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-11-11 23:31:39 +09:00
flatcar-ci
50b4233835 New version: main-4515.0.0-nightly-20251110-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4515.0.0-nightly-20251110-2100
2025-11-10 21:00:28 +00:00
Krzesimir Nowak
3f74e83ad3
Merge pull request #3459 from flatcar/buildbot/weekly-portage-stable-package-updates-2025-11-03
Weekly portage-stable package updates 2025-11-03
2025-11-10 15:31:36 +01:00
flatcar-ci
cc57523459 New version: main-4512.0.0-nightly-20251107-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4512.0.0-nightly-20251107-2100
2025-11-08 02:31:36 +00:00
flatcar-ci
bcfa5b66dc New version: main-4512.0.0-nightly-20251107-2100-INTERMEDIATE
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4512.0.0-nightly-20251107-2100-INTERMEDIATE
2025-11-07 21:00:30 +00:00
Kai Lüke
3c73015c93
Merge pull request #3474 from flatcar/kai/fallback-loadmodules
sys-kernel/bootengine: Try to load modules for all devices on timeout
2025-11-07 16:58:03 +01:00
Kai Lueke
5ed6e9a3ee sys-kernel/bootengine: Try to load modules for all devices on timeout
This pulls in https://github.com/flatcar/bootengine/pull/114
just to be sure that we tried all available modules based on the
modalias when we don't make progress in the minimal initrd. So far we
don't know if this helps (it won't for completly missing kernel modules
of course) but it's good to have this done automatically instead of
having to ask users if it helps for them when they hit an issue. It also
prints the current state again which otherwise might be a bit hidden if
a kernel message gets printed after the initial message.

Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-11-08 00:36:03 +09:00
Krzesimir Nowak
06f3ae5305
Merge pull request #3472 from flatcar/krnowak/main-runc-containerd
Bump runc to 1.3.3 and containerd to 2.1.5 in main
2025-11-07 16:31:01 +01:00
Kai Lüke
6923d75aab
Merge pull request #3471 from flatcar/kai/message-fusion-drivers
sys-kernel/coreos-kernel: Add Fusion storage drivers back to initrd
2025-11-07 16:23:37 +01:00
Krzesimir Nowak
d50f08e583 changelog: Add entries
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 15:37:33 +01:00
Krzesimir Nowak
5a1e0e96c1 app-containers/containerd: Add 2.1.5
This is a hack - the ebuild will disappear on next weekly updates,
unless Gentoo gets the 2.1.5 ebuild by then.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 15:28:56 +01:00
Krzesimir Nowak
43ed514eeb app-containers/runc: Sync with Gentoo
It's from Gentoo commit b4c450b220406a895ed093b19b92241746408a66.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 15:28:56 +01:00
James Le Cuirot
006eea2708
Merge pull request #3445 from flatcar/chewi/extmod
sys-kernel/coreos-modules: Install external mod build files with script
2025-11-07 14:26:08 +00:00
Kai Lueke
26e698c425 sys-kernel/coreos-kernel: Add Fusion storage drivers back to initrd
The Fusion MPT SCSI storage drivers were missing from the new minimal
initrd because they are not together with the other storage driver
modules but live in their own "message/fusion/" folder.
Add the "message/fusion/" folder to the initrd modules so that we can
load the disk. Dependencies will be resolved by dracut-install as
needed.

Fixes https://github.com/flatcar/Flatcar/issues/1924

Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-11-07 22:33:40 +09:00
Kai Lüke
44be28edb3
Merge pull request #3463 from flatcar/tormath1/rclone
ci-automation/release.sh: 'the input device is not a TTY'
2025-11-07 14:14:59 +01:00
Krzesimir Nowak
424e9c3f25 changelog: Add entries
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:24:00 +01:00
Krzesimir Nowak
6dd7c26560 overlay sys-fs/overlaybd: Bump to 1.0.16, update the patches
- add patch for yaml-cpp to fix cmake 4.0 issues

- drop two cross patches as they are already upstreamed (keep the
  cross fixes for photon, though)

- drop tcmu pin patch (upstreamed)

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
73b7eabe67 overlay profiles: Drop accept keywords for sys-libs/binutils-libs
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
bd7f69bc1e overlay profiles: Drop accept keywords for sys-devel/binutils
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
4718b9bd8f overlay profiles: Drop accept keywords for net-fs/cifs-utils
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
6e48644aa1 overlay profiles: Drop accept keywords for dev-util/glib-utils
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
aed4bb98f8 overlay profiles: Drop accept keywords for dev-util/gdbus-codegen
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
19aad7666b overlay profiles: Drop accept keywords for dev-libs/glib
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:21:01 +01:00
Krzesimir Nowak
dba6cf24db overlay profiles: Add accept keywords for sys-apps/coreutils
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:20:58 +01:00
Krzesimir Nowak
e75d87abec overlay profiles: Stop masking ssl in app-crypt/gnupg
We do ship gnutls in production images and the mask is making problems
with new app-alternatives/gpg.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:19:50 +01:00
Krzesimir Nowak
c4e50412e4 overlay profiles: Force reference variant of gpg
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:19:50 +01:00
Krzesimir Nowak
ced7b336de github: Add app-alternatives/gpg to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:19:50 +01:00
Krzesimir Nowak
3c9707706a app-alternatives/gpg: Add from Gentoo
It's from Gentoo commit 2947d17edabe4b46250546c20009e83a6bae645c.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-11-07 12:19:50 +01:00
Flatcar Buildbot
42762597ed x11-drivers/nvidia-drivers: Sync with Gentoo
It's from Gentoo commit f444d0057769fc0dac912ff5a6c8d9e4d183d7c7.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-11-07 12:19:50 +01:00
Flatcar Buildbot
0397db07f3 sys-process/tini: Sync with Gentoo
It's from Gentoo commit 330b5683752e103508f32f0eef4425afc4e4eba9.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-11-07 12:19:50 +01:00
Flatcar Buildbot
07f50b6052 sys-libs/libsepol: Sync with Gentoo
It's from Gentoo commit 73a775712b08395812bfc0ec0fef0a01a03963ea.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-11-07 12:19:50 +01:00