Mickaël Salaün
b2be807349
sys-kernel/coreos-modules: Enable Landlock
...
Landlock is a feature to create security sandboxes thanks to 3 dedicated
system calls. They are designed to be safe to used by any processes,
which can only drop their privileges, similarly to seccomp.
The new Landlock LSM is build in the kernel (CONFIG_SECURITY_LANDLOCK=y)
but it is not enough to make it usable by default. As a stackable LSM,
it is required to enable it at boot time with the CONFIG_LSM list. See
https://docs.kernel.org/userspace-api/landlock.html#kernel-support
As for other stackable LSMs, prepending Landlock to the default LSM list
enables users to potentially get more protection by default by letting
programs sandbox themselves.
As a dependency, CONFIG_SECURITY_PATH=y will be automatically set.
Signed-off-by: Mickaël Salaün <mic@digikod.net>
2024-07-29 15:10:55 +02:00
Flatcar Buildbot
87c73ec262
app-misc/ca-certificates: Update from 3.102 to 3.102.1
2024-07-29 07:21:21 +00:00
Mathieu Tortuyaux
696f0168fd
changelog: add entries
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-23 12:01:30 +02:00
Mathieu Tortuyaux
dd9035644f
Merge pull request #2126 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-07-16
...
Weekly portage-stable package updates 2024-07-16
2024-07-22 17:13:02 +02:00
Mathieu Tortuyaux
bef1feca36
changelog: add entries
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-22 17:10:16 +02:00
Mathieu Tortuyaux
98500cd0be
Merge pull request #2139 from flatcar/containerd-1.7.20-main
...
Upgrade Containerd in main from 1.7.19 to 1.7.20
2024-07-19 17:03:45 +02:00
Flatcar Buildbot
cfb72f2e85
app-containers/containerd: Update from 1.7.19 to 1.7.20
2024-07-19 08:17:51 +00:00
Flatcar Buildbot
361d7d99e1
sys-kernel/coreos-sources: Update from 6.6.40 to 6.6.41
2024-07-19 07:14:34 +00:00
Mathieu Tortuyaux
ca6660d6b0
Merge pull request #2123 from flatcar/linux-6.6.40-main
...
Upgrade Linux Kernel for main from 6.6.39 to 6.6.40
2024-07-17 09:24:14 +02:00
Krzesimir Nowak
503159972d
changelog: Add entries
2024-07-16 12:38:05 +02:00
Flatcar Buildbot
ad0c776d0e
sys-kernel/coreos-sources: Update from 6.6.39 to 6.6.40
2024-07-16 07:14:12 +00:00
Mathieu Tortuyaux
a706c8bd22
Merge pull request #2116 from flatcar/linux-6.6.39-main
...
Upgrade Linux Kernel for main from 6.6.38 to 6.6.39
2024-07-15 17:19:24 +02:00
James Le Cuirot
1d7d53fad9
Upgrade to Catalyst 4
...
Catalyst 4 has totally changed the way repositories are handled. It only
works when the name of the directory containing the repository matches
the configured name of that repository. This was not the case for us,
with the coreos repository residing in the coreos-overlay directory. We
wanted to move and rename our repositories anyway, but this is a big
change, so we'll do separately. For now, this just renames coreos to
coreos-overlay.
Catalyst 4 also ingests the main repository snapshot as a squashfs
rather than a tarball. It features a utility to generate such a
snapshot, but it doesn't fit Flatcar well, particularly because it
expects each ebuild repository to reside at the top level of its own git
repository. It was very easy to call tar2sqfs manually though.
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-07-15 14:27:59 +01:00
Flatcar Buildbot
e244dff3e5
sys-kernel/coreos-sources: Update from 6.6.38 to 6.6.39
2024-07-12 07:13:48 +00:00
Flatcar Buildbot
d310d76937
sys-kernel/coreos-firmware: Update from 20240610 to 20240709
2024-07-11 07:13:05 +00:00
Mathieu Tortuyaux
a21af09393
Merge pull request #2111 from flatcar/linux-6.6.38-main
...
Upgrade Linux Kernel for main from 6.6.37 to 6.6.38
2024-07-10 14:49:21 +02:00
Mathieu Tortuyaux
07375b0f29
Merge pull request #2090 from flatcar/containerd-1.7.19-main
...
Upgrade Containerd in main from 1.7.18 to 1.7.19
2024-07-10 13:48:31 +02:00
Flatcar Buildbot
94ee7cba59
sys-kernel/coreos-sources: Update from 6.6.37 to 6.6.38
2024-07-10 07:14:47 +00:00
Mathieu Tortuyaux
7ac20b64c9
Merge pull request #2110 from flatcar/tormath1/nasm
...
dev-lang/nasm: sync with the upstream
2024-07-09 09:21:25 +02:00
Adrian Vladu
fe5f145b30
Merge pull request #2089 from flatcar/ader1990/systemd-minor-version-upgrade-255-8
...
sys-apps/systemd: updated to minor version 255.8
2024-07-08 20:03:09 +03:00
Mathieu Tortuyaux
a6dd623a13
Merge pull request #2108 from flatcar/cacerts-3.102-main
...
Update ca-certificates in main from 3.101 to 3.102
2024-07-08 15:20:17 +02:00
Mathieu Tortuyaux
68d97c5771
changelog: add runc entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-08 14:46:07 +02:00
Flatcar Buildbot
58788d8dbc
app-containers/containerd: Update from 1.7.18 to 1.7.19
2024-07-08 14:27:56 +02:00
Mathieu Tortuyaux
939575795b
changelog: add entries
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-08 10:24:57 +02:00
Flatcar Buildbot
b0b84ed05e
app-misc/ca-certificates: Update from 3.101 to 3.102
2024-07-08 07:21:32 +00:00
Flatcar Buildbot
2299e4c4b6
sys-kernel/coreos-sources: Update from 6.6.36 to 6.6.37
2024-07-06 07:11:28 +00:00
Adrian Vladu
2821acad27
sys-apps/systemd: add changelog for 225.8
2024-07-03 15:34:58 +03:00
Mathieu Tortuyaux
a568f62513
Merge pull request #2088 from flatcar/vmware-12.4.5-main
...
Upgrade open-vm-tools in main from 12.4.0 to 12.4.5
2024-07-03 14:26:18 +02:00
Mathieu Tortuyaux
2da4ca94d7
Merge pull request #2075 from flatcar/cacerts-3.101.1-main
...
Update ca-certificates in main from 3.101 to 3.101.1
2024-07-03 14:23:26 +02:00
Flatcar Buildbot
9c0eda19ae
app-emulation/open-vm-tools: Update from 12.4.0 to 12.4.5
2024-07-03 07:09:14 +00:00
Sayan Chowdhury
2e27b6ec42
changelog: Add the changelog for openssh
...
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-07-01 19:33:39 +05:30
Flatcar Buildbot
0860b5f73a
app-misc/ca-certificates: Update from 3.101 to 3.101.1
2024-07-01 07:21:18 +00:00
Mathieu Tortuyaux
ca891106f7
Merge pull request #2065 from flatcar/linux-6.6.36-main
...
Upgrade Linux Kernel for main from 6.6.35 to 6.6.36
2024-06-28 15:36:42 +02:00
Flatcar Buildbot
c6d6da2d8e
sys-kernel/coreos-sources: Update from 6.6.35 to 6.6.36
2024-06-28 07:14:08 +00:00
Mark Farrell
b79b81648c
sys-libs/pam: add changelog
2024-06-27 09:04:02 +10:00
James Le Cuirot
355cfe0227
coreos-base/coreos-init: Bump to fix flatcar-install custom key issue ( #2062 )
...
Closes: https://github.com/flatcar/scripts/pull/1471
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-06-25 16:56:02 +01:00
Flatcar Buildbot
2f19712f68
sys-kernel/coreos-sources: Update from 6.6.34 to 6.6.35
2024-06-22 07:14:00 +00:00
Adrian Vladu
6fbfa5c034
grub_install: add changelog for the file removals
...
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-06-21 11:10:20 +03:00
Mathieu Tortuyaux
101ef8c4f3
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-06-19 15:38:03 +02:00
Mathieu Tortuyaux
f5389cc531
Merge pull request #2041 from flatcar/tormath1/afterburn
...
coreos-base/afterburn: sync with 5.6.0
2024-06-19 15:37:11 +02:00
Mathieu Tortuyaux
34aa9c9e88
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-06-19 10:27:51 +02:00
Flatcar Buildbot
969f12a531
dev-lang/rust: Update from 1.78.0 to 1.79.0
2024-06-18 07:44:40 +00:00
Flatcar Buildbot
dc456862d7
sys-kernel/coreos-sources: Update from 6.6.33 to 6.6.34
2024-06-17 07:12:56 +00:00
Mathieu Tortuyaux
345c5e25b8
Merge pull request #2030 from flatcar/linux-6.6.33-main
...
Upgrade Linux Kernel for main from 6.6.32 to 6.6.33
2024-06-13 18:05:46 +02:00
Flatcar Buildbot
524cac0445
sys-kernel/coreos-sources: Update from 6.6.32 to 6.6.33
2024-06-13 07:12:41 +00:00
Flatcar Buildbot
30d4bb340e
sys-kernel/coreos-firmware: Update from 20240513 to 20240610
2024-06-13 07:12:24 +00:00
Mathieu Tortuyaux
8381ea1783
Merge pull request #2020 from flatcar/containerd-1.7.18-main
...
Upgrade Containerd in main from 1.7.17 to 1.7.18
2024-06-10 19:21:18 +02:00
Mathieu Tortuyaux
427b6b77b6
Merge pull request #2026 from flatcar/cacerts-3.101-main
...
Update ca-certificates in main from 3.100 to 3.101
2024-06-10 14:30:07 +02:00
Mathieu Tortuyaux
5f151a08bc
Merge pull request #1979 from JeWe37/python-sysext
...
sysext: Add python sysext
2024-06-10 14:26:52 +02:00
Mathieu Tortuyaux
f48098f31b
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-06-10 14:07:12 +02:00
Flatcar Buildbot
c6a30d5959
app-misc/ca-certificates: Update from 3.100 to 3.101
2024-06-10 07:20:55 +00:00
Mathieu Tortuyaux
7915f23486
sys-apps/ignition: bump to 2.19.0
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-06-07 14:09:06 +02:00
Flatcar Buildbot
6e27c525c5
app-containers/containerd: Update from 1.7.17 to 1.7.18
2024-06-07 08:18:17 +00:00
Alejandro Ripoll
68cf358c8f
OpenStack: Changed metadata hostname source order
...
Change `flatcar-openstack-hostname.service` to use afterburn `openstack` provider implemented on coreos/afterburn#462 instead of `openstack-metadata`.
BootEngine PR: flatcar/bootengine#96
2024-06-03 14:18:19 +02:00
Jendrik Weise
64c9ed5820
sysext: Add python sysext
...
Minimal sysext containing dev-lang/python and dev-python/pip.
Enabled ensurepip for python and added required packages from Gentoo.
2024-05-29 19:18:18 +02:00
Flatcar Buildbot
814790d93d
sys-kernel/coreos-sources: Update from 6.6.31 to 6.6.32
2024-05-26 07:12:39 +00:00
Krzesimir Nowak
0c82cdcd14
Merge pull request #1732 from flatcar/krnowak/crypt
...
Migrate from glibc libcrypt to sys-libs/libxcrypt
2024-05-24 10:04:51 +02:00
Mathieu Tortuyaux
295bf97417
Merge pull request #1992 from flatcar/linux-6.6.31-main
...
Upgrade Linux Kernel for main from 6.6.30 to 6.6.31
2024-05-23 13:02:57 +02:00
Krzesimir Nowak
f1636fc6de
changelog: Add an entry
2024-05-23 11:19:30 +02:00
Dongsu Park
ba12d45e16
Merge pull request #1981 from flatcar/rust-1.78.0-main
...
Upgrade dev-lang/rust and virtual/rust in main from 1.77.2 to 1.78.0
2024-05-22 17:52:24 +02:00
Flatcar Buildbot
b5c85fee12
sys-kernel/coreos-sources: Update from 6.6.30 to 6.6.31
2024-05-18 07:11:58 +00:00
Dongsu Park
1c4b67fb21
Merge pull request #1970 from flatcar/linux-6.6.30-main
...
Upgrade Linux Kernel for main from 6.6.28 to 6.6.30
2024-05-17 16:14:33 +02:00
Dongsu Park
6aebb2b70c
Merge pull request #1990 from flatcar/dongsu/glibc-2.38-r13
...
sys-libs/glibc: update to 2.38-r13
2024-05-17 16:09:02 +02:00
Flatcar Buildbot
53d6706380
app-containers/containerd: Update from 1.7.16 to 1.7.17
2024-05-17 08:17:33 +00:00
Dongsu Park
e9047ca1fb
changelog: add security changelog for glibc 2.38-r13
2024-05-16 11:20:45 +02:00
Flatcar Buildbot
f11bd27baa
sys-kernel/coreos-firmware: Update from 20240410 to 20240513
2024-05-16 07:10:19 +00:00
Flatcar Buildbot
40b8c2b4d0
app-misc/ca-certificates: Update from 3.99 to 3.100
2024-05-13 07:20:39 +00:00
Flatcar Buildbot
1c3f15ab2a
dev-lang/rust: Update from 1.77.2 to 1.78.0
2024-05-07 07:34:30 +00:00
Jendrik Weise
cd849d6849
sysext: Add podman sysext
...
Enabled user session dbus in base image to support podman rootless mode.
Extension images can now be created from multiple packages by seperating
them with a comma. The podman sysext includes app-containers/podman and
net-misc/passt.
It can be enabled by adding podman to /etc/flatcar/enabled-sysext.conf.
Potential TODO: gpgme had to be added as BDEPEND to podman ebuild.
2024-05-03 22:59:36 +09:00
Flatcar Buildbot
5ce9e14fec
sys-kernel/coreos-sources: Update from 6.6.28 to 6.6.30
2024-05-03 07:12:18 +00:00
Adrian Vladu
6efe345d89
image: add kubevirt image build
...
As Ignition supports KubeVirt, add a custom oem for it and also the
required parts to be able to build an image in .qcow2 format that
is already using internal .qcow2 gzip compression.
Fixes: https://github.com/flatcar/Flatcar/issues/1358
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-04-30 09:19:16 +03:00
Flatcar Buildbot
3a7330f697
app-containers/containerd: Update from 1.7.15 to 1.7.16
2024-04-26 08:16:43 +00:00
Mathieu Tortuyaux
0a7819a5f0
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-04-26 09:47:29 +02:00
Krzesimir Nowak
ed642d106b
Merge pull request #1949 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-04-22
...
Weekly portage-stable package updates 2024-04-22
2024-04-25 17:16:42 +02:00
Krzesimir Nowak
eb19d6916f
changelog: Add entries
2024-04-25 17:15:51 +02:00
Jeremi Piotrowski
0d40f3cba6
Merge pull request #1950 from flatcar/jepio/azure-fixes
...
Update Azure patch.
Add azure-nvme-utils for nvme symlinks.
Disable interface restart during waagent init on Azure.
2024-04-25 15:34:26 +02:00
Jeremi Piotrowski
7a1a004700
changelog: Add entry for azure-nvme-utils
2024-04-24 16:03:31 +00:00
Flatcar Buildbot
e62221d757
sys-kernel/coreos-sources: Update from 6.6.21 to 6.6.28
2024-04-24 15:05:13 +02:00
Krzesimir Nowak
413c66fbe3
changelog: Add entries
2024-04-22 16:47:47 +02:00
Flatcar Buildbot
65e180acb4
dev-lang/rust: Update from 1.77.1 to 1.77.2
2024-04-18 18:46:49 +09:00
Julian Tölle
08ba85c6a3
changelog: add entry for hetzner images
2024-04-16 17:08:04 +02:00
Flatcar Buildbot
ce925402f2
app-containers/containerd: Update from 1.7.14 to 1.7.15
2024-04-12 08:16:57 +00:00
Adrian Vladu
ab2cb0fff3
ci-automation/vms: provide Hyper-V images with .zip compression
...
On Windows, the .bz2 compression format is not supported by native
tooling and external tools like 7zip need to be installed.
Switching to .zip compression, there will be no need for the extra step
of having external tools.
See: https://github.com/flatcar/Flatcar/issues/1009
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-04-11 15:43:07 +03:00
Mathieu Tortuyaux
144a0c417a
Merge pull request #1867 from flatcar/firmware-20240410-main
...
Upgrade Linux Firmware in main from 20240312 to 20240410
2024-04-11 14:00:45 +02:00
Krzesimir Nowak
0998e78944
changelog: Add entries
2024-04-11 12:39:59 +02:00
Dongsu Park
f861c8cbb9
Merge pull request #1855 from flatcar/dongsu/samba-4.18.9
...
net-fs/samba: update to 4.18.9
2024-04-11 11:14:17 +02:00
Kai Lueke
f57a928b4a
coreos-base/common-oem-files: Enable flatcar.autologin for OpenStack
...
So far the console in OpenStack (or Brightbox which shares the image)
was not usable well until one issues a reboot to add the autologin in
the GRUB menu.
Add it by default so that one doesn't need this reboot trick.
2024-04-11 16:48:31 +09:00
Flatcar Buildbot
87f6e07a44
sys-kernel/coreos-firmware: Update from 20240312 to 20240410
2024-04-11 07:12:30 +00:00
Kai Lueke
834d32efa8
build_library/grub.cfg: Enable TPM module by default
...
For binding a secret to the OS we need TPM PCRs that measure the kernel
and boot configuration (UEFI). Used for:
https://github.com/flatcar/flatcar-website/pull/317
2024-04-09 22:17:18 +09:00
Kai Lueke
de4eb8f755
Set up symlinks for same image artifacts to remove qemu/qemu_uefi_secure
...
The qemu and qemu_uefi_secure images have the same contents as the
qemu_uefi image which wastes space on the release server. A similar
case is the PXE vmlinuz which is the same as the regular one, too.
Set up symlinks for same images, and also detect this when compressing
to set up symlinks there as well. To reduce complexity, the qemu and
qemu_uefi_secure images are not supported anymore and the Jenkins or
GitHub CI will skip over them if specified. Users that build their own
images need to adapt, though.
2024-04-09 15:09:29 +02:00
Adrian Vladu
7d4917d67c
image_to_vm: add support for hyper-v vhdx format
...
Add support for Gen 2 Hyper-V VMs.
`./image_to_vm` tool has now a new supported format: `hyperv_vhdx`,
that produces .vhdx dynamic disks.
How to use:
```bash
./image_to_vm.sh --from ../build/images/amd64-usr/developer-latest/ --format hyperv_vhdx
```
See: https://github.com/flatcar/Flatcar/issues/1009
Uses PR: https://github.com/flatcar/bootengine/pull/92
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-04-09 10:52:06 +03:00
Dongsu Park
3ded55a8f9
changelog: add changelog for samba 4.18.9
2024-04-08 15:52:48 +02:00
Kai Lueke
7379db37e8
vm_image_util.sh: Bump default VM memory to 2 GB
...
While Flatcar itself runs fine with 1 GB, many workloads do not and
having to debug this is time consuming when one forgets to bump the VM
memory, e.g., in the Qemu script.
Default to 2 GB as known-good setting for things like Kubernetes or
setting up LUKS devices.
2024-04-04 12:55:37 +09:00
Krzesimir Nowak
5dd2ebf680
Merge pull request #1788 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-03-25
...
Weekly portage-stable package updates 2024-03-25
2024-04-03 13:20:45 +02:00
Kai Lueke
6d01140927
app-emulation/actool,acbuild: Remove actool and acbuild
...
Both actool and acbuild upstream are deprecated and probably not in
use anymore.
Remove actool from the image and acbuild from the SDK.
2024-04-03 16:18:56 +09:00
Krzesimir Nowak
c70df0dbd5
changelog: Add entries
2024-04-03 08:54:01 +02:00
Dongsu Park
ef31aa7956
Merge pull request #1818 from flatcar/rust-1.77.1-main
...
Upgrade dev-lang/rust and virtual/rust in main from 1.77.0 to 1.77.1
2024-04-02 16:39:11 +02:00
Kai Lueke
29dae1e506
app-arch/xz-utils: Sync with Gentoo (revert to known-good)
...
The 5.6 release contained a backdoor for SSH. The 5.6 release wasn't
used in Flatcar and so far it seems that the backdoor wouldn't even be
compiled for Gentoo. However, we so far don't know whether the other
patches are malicious.
Revert to 5.4.2 as last known-good release (like Gentoo did).
Note that the Flatcar main branch had a copy of the 5.6 ebuild but was
not using it. Flatcar Alpha was on 5.4.6-r1, so before the backdoor but
the malicious contributor did other changes of unclear impact part of
this release. Similarly, Beta is on 5.4.5 and Stable is on 5.4.3. These
should get downgraded, too.
2024-04-02 16:03:16 +02:00
Flatcar Buildbot
a60b812a57
dev-lang/rust: Update from 1.77.0 to 1.77.1
2024-04-02 13:19:59 +02:00
Jeremi Piotrowski
dd9e0303c4
Merge pull request #1792 from flatcar/jepio/clock
...
NTP/PTP by default on Azure/AWS/GCP
2024-03-28 12:14:27 +01:00
Jeremi Piotrowski
d93f0807b0
changelog: Add entry for PTP/NTP changes
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-28 12:13:48 +01:00
Kai Lueke
44086829b0
sys-kernel/bootengine: Install libcryptsetup-token-systemd-tpm2 plugin
...
This pulls in https://github.com/flatcar/bootengine/pull/93
to support systemd-cryptenroll for the rootfs with TPMs.
2024-03-28 16:55:19 +09:00
Gabriel
d47a052ebf
Update changelog/bugfixes/2024-03-25-disable-user-configdrive-on-openstack.md
...
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
2024-03-27 17:05:46 +02:00
Gabriel Adrian Samfira
041662aaa9
Update coreos-cloudinit to latest main branch
...
This change updates coreos-cloudinit to the latest flatcar-master commit.
This change disables user-configdrive.service on OpenStack,
as coreos-cloudinit.service already runs on OpenStack when the system is
not configured via ignition.
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
2024-03-27 17:05:46 +02:00
Dongsu Park
21a7da41fc
Merge pull request #1797 from flatcar/vmware-12.4.0-main
...
Upgrade open-vm-tools in main from 12.3.5 to 12.4.0
2024-03-27 14:21:38 +01:00
Flatcar Buildbot
9c1e19f2a6
dev-lang/rust: Update from 1.76.0 to 1.77.0
2024-03-27 10:07:27 +01:00
Flatcar Buildbot
25c05d92e2
app-emulation/open-vm-tools: Update from 12.3.5 to 12.4.0
2024-03-27 07:07:00 +00:00
David Eichin
e5179b2e78
changelog: upgrade toolbox to latest version
...
This version fixes that mounted snapshots with ctr are being gc'ed which
breaks the toolbox.
2024-03-26 08:25:57 +01:00
Henrik Schmidt
1bd8373430
Changelog: sys-kernel/coreos-modules: Enable CONFIG_IGC=y
2024-03-26 00:45:51 +09:00
Krzesimir Nowak
361731d4a9
changelog: Add an entry
2024-03-21 17:44:52 +01:00
Jeremi Piotrowski
7b937f2ddb
Merge pull request #1770 from flatcar/jepio/amd-pstate
...
sys-kernel/coreos-modules: Enable CONFIG_X86_AMD_PSTATE=y
2024-03-19 16:38:54 +01:00
Jeremi Piotrowski
8417eda473
changelog: Add entry for X86_AMD_PSTATE
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-19 16:38:19 +01:00
Jeremi Piotrowski
b790241057
Merge pull request #1771 from flatcar/multipathd-disable-rt
...
sys-fs/multipath-tools: Disable realtime scheduling for multipathd
2024-03-19 15:41:07 +01:00
Jeremi Piotrowski
71ffac206b
changelog: Add entry for multipath realtime change
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-19 14:37:04 +00:00
Dongsu Park
d30566da4b
Merge pull request #1768 from flatcar/cacerts-3.99-main
...
Update ca-certificates in main from 3.98 to 3.99
2024-03-19 14:36:46 +01:00
Dongsu Park
c34fb9f7fc
Merge pull request #1752 from flatcar/containerd-1.7.14-main
...
Upgrade Containerd in main from 1.7.13 to 1.7.14
2024-03-18 16:40:54 +01:00
Flatcar Buildbot
3f97fcf360
app-misc/ca-certificates: Update from 3.98 to 3.99
2024-03-18 07:19:26 +00:00
Kai Lüke
f446fe851f
Merge pull request #1744 from flatcar/firmware-20240312-main
...
Upgrade Linux Firmware in main from 20240220 to 20240312
2024-03-15 20:14:23 +01:00
Flatcar Buildbot
8830c57dc6
sys-kernel/coreos-sources: Update from 6.6.17 to 6.6.21
2024-03-15 11:54:18 +01:00
Flatcar Buildbot
c4fb5d03ac
app-containers/containerd: Update from 1.7.13 to 1.7.14
2024-03-15 08:16:08 +00:00
Adrian Vladu
467287eb5b
sys-apps/systemd: added changelog entry for 252 to 255 upgrade
...
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-03-14 12:07:07 +00:00
Simon Campion
2a5917deb9
changelog: add entry for disk encryption
2024-03-14 12:09:16 +01:00
Flatcar Buildbot
fae8931aef
sys-kernel/coreos-firmware: Update from 20240220 to 20240312
2024-03-14 07:13:42 +00:00
Kai Lüke
e5867917ec
Merge pull request #1742 from flatcar/jepio/zfs-sysext
...
Build ZFS sysext with each release
2024-03-13 23:24:30 +01:00
Jeremi Piotrowski
3aa9cd21ac
changelog: Add entry for zfs sysext
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-13 23:23:44 +01:00
Adrian Vladu
89cca15171
Merge pull request #1734 from flatcar/ader1990/decrease_initrd_size_v1
...
initrd_size_decrease: remove mlxsw_spectrum/mlxsw_core kernel modules
2024-03-12 19:36:29 +02:00
Adrian Vladu
3da9f859be
initrd_size_decrease: remove mlxsw_spectrum/mlxsw_core kernel modules
...
This commit is part of the effort to decrease the initrd size:
Partially-Fixes: https://github.com/flatcar/Flatcar/issues/1381
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-03-12 16:51:35 +00:00
Mathieu Tortuyaux
009220ff54
Merge pull request #1683 from flatcar/tormath1/scaleway
...
oem: provide scaleway images
2024-03-11 09:34:05 +01:00
Krzesimir Nowak
93c4a369a8
Merge pull request #1727 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-03-04
...
Weekly portage-stable package updates 2024-03-04
2024-03-06 16:05:13 +01:00
Kai Lüke
a2aa30f487
Merge pull request #1729 from flatcar/kai/sysext-merge-contents
...
build_sysext: Remove any opaque directory markers
2024-03-05 17:03:15 +01:00
Kai Lueke
5aecc0a802
build_sysext: Remove any opaque directory markers
...
The Flatcar extension images built with build_sysext created directories
in the overlay in a way that masked contents from other layers.
Instead of fixing the way we create directories, make use of
postprocessing to avoid any similar problems show up again in the
future.
2024-03-05 17:01:43 +01:00
Kai Lüke
6c2c11db7d
Merge pull request #1707 from flatcar/kai/pxe-compat
...
sys-kernel/bootengine: Restore support for custom PXE OEM contents
2024-03-05 16:35:42 +01:00
Kai Lueke
b0ce20639b
sys-kernel/bootengine: Restore support for custom PXE OEM contents
...
This pulls in https://github.com/flatcar/bootengine/pull/88
to restore looking at the documented /usr/share/oem path in a custom
PXE OEM initrd instead of /oem.
2024-03-05 16:35:03 +01:00
Mathieu Tortuyaux
fab18fdb42
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-03-05 13:51:07 +01:00
Mathieu Tortuyaux
a701d71e59
changelog: update entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-03-04 17:34:53 +01:00
Dongsu Park
a842366ed9
Merge pull request #1669 from flatcar/linux-6.6.17-main
...
Upgrade Linux Kernel for main from 6.6.16 to 6.6.17
2024-03-04 15:08:23 +01:00
Krzesimir Nowak
89559227ee
changelog: Add entries
2024-03-04 13:56:02 +01:00
Krzesimir Nowak
91853181d1
changelog: Add an entry
2024-03-01 16:14:22 +01:00
Krzesimir Nowak
f2d7be8cd9
Merge pull request #1702 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-02-26
...
Weekly portage-stable package updates 2024-02-26
2024-02-28 14:51:01 +01:00
Kai Lüke
d35414a2ba
Merge pull request #1589 from flatcar/sayan/secureboot-changes
...
Initial implementation for Secure boot support
2024-02-26 15:46:31 +01:00
Sayan Chowdhury
0fc380cf21
sys-boot/shim: Add the changelog for shim upgrade, and secureboot
...
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 15:46:12 +01:00
Dongsu Park
dbd40fbf90
Merge pull request #1686 from flatcar/firmware-20240220-main
...
Upgrade Linux Firmware in main from 20240115 to 20240220
2024-02-26 14:24:29 +01:00
Krzesimir Nowak
08baf293ef
changelog: Add an entry
2024-02-26 10:31:23 +01:00
Mathieu Tortuyaux
c3c046529c
Merge pull request #1689 from flatcar/tormath1/keyutils
...
sys-apps/keyutils: sync with upstream
2024-02-23 14:54:09 +01:00
Mathieu Tortuyaux
e5970bb3cb
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-02-23 14:53:10 +01:00
Mathieu Tortuyaux
ea3d0cf1c4
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-02-23 14:33:29 +01:00
Krzesimir Nowak
bf4b088cb8
Merge pull request #1672 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-02-19
...
Weekly portage-stable package updates 2024-02-19
2024-02-22 09:01:41 +01:00
Flatcar Buildbot
d4a5f08dc7
sys-kernel/coreos-firmware: Update from 20240115 to 20240220
2024-02-22 07:11:34 +00:00
Dongsu Park
051232e560
Merge pull request #1681 from flatcar/dongsu/gnupg-2.2.42
...
app-crypt/gnupg: update to 2.2.42-r2
2024-02-21 16:04:41 +01:00
Mathieu Tortuyaux
2c2b20dd7d
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-02-21 15:47:14 +01:00
Krzesimir Nowak
1020bc7dcf
changelog: Add entries
2024-02-21 11:05:42 +01:00
Dongsu Park
bbb70f3de1
changelog: add changelog for gnupg 2.2.42
2024-02-20 13:37:45 +01:00
Flatcar Buildbot
1d5d073308
app-misc/ca-certificates: Update from 3.97 to 3.98
2024-02-19 07:19:41 +00:00
Flatcar Buildbot
b0829ce5b4
sys-kernel/coreos-sources: Update from 6.6.16 to 6.6.17
2024-02-17 07:10:38 +00:00
Dongsu Park
020e604d4e
Merge pull request #1662 from flatcar/dongsu/sudo-1.9.15
...
app-admin/sudo: update to 1.9.15_p5
2024-02-14 15:10:20 +01:00
Adrian Vladu
f770658e7b
Merge pull request #1654 from flatcar/ader1990/fix-kmod-static-nodes
...
bootengine: fix kmod-static-nodes
2024-02-14 14:21:48 +02:00
Krzesimir Nowak
aaeea98037
Merge pull request #1609 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-01-29
...
Weekly portage-stable package updates 2024-01-29
2024-02-14 12:46:20 +01:00
Adrian Vladu
70ad180b0c
bootengine: fix kmod static node creation
...
Update the bootengine commit id to use the fix from:
https://github.com/flatcar/bootengine/pull/85
Fixes kubevirt vm creation by ensuring that /dev/vhost-net static node gets created
Fixes: https://github.com/flatcar/Flatcar/issues/1336
Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-02-14 10:38:37 +00:00
Dongsu Park
29f32b1f18
changelog: add changelog for sudo 1.9.15p5
2024-02-14 09:25:55 +01:00
Dongsu Park
19e97c359d
Merge pull request #1653 from flatcar/rust-1.76.0-main
...
Upgrade dev-lang/rust and virtual/rust in main from 1.75.0 to 1.76.0
2024-02-14 09:23:12 +01:00
Dongsu Park
97ba68b68b
Merge pull request #1651 from flatcar/go-1.19.13-and-1.20.14-main
...
Upgrade Go from 1.20.13 to 1.20.14
2024-02-14 09:17:52 +01:00
Flatcar Buildbot
d18efe61a5
dev-lang/rust: Update from 1.75.0 to 1.76.0
2024-02-13 17:09:33 +01:00
Krzesimir Nowak
60fc0f9d4f
Merge pull request #1567 from flatcar/krnowak/glibc-update
...
Update sys-libs/glibc to 2.38
2024-02-13 15:06:26 +01:00
Kai Lueke
c0b2f1ce2f
coreos-base/update_engine: Support updating old airgapped clients
...
This pulls in https://github.com/flatcar/update_engine/pull/38
with two workarounds to read out proxy env vars from the service unit
and to read out the XML response from the journal logs, because the XML
passing and the passing of proxy env vars is not present in old clients.
2024-02-12 17:13:34 +01:00
Flatcar Buildbot
d55c31f6f9
dev-lang/go: Update from 1.20.13 to 1.20.14
2024-02-12 07:22:18 +00:00
Krzesimir Nowak
a02e04d6ae
Merge pull request #1631 from daMupfel/cloudinit-cloudsigma-fix-duplicated-service-execution
...
changelog: remove cloudsigma custom cloudinit service configuration
2024-02-08 15:29:22 +01:00
David Eichin
0cff10309b
changelog: remove cloudsigma custom cloudinit service configuration
...
CloudSigma uses a serial port to transfer metadata into a running
instance. Because the service was overwritten with the configuration
"restart" it was possible that the previous instance got interrupted.
This left the serial connection in an non-deterministic state as the
next user would get output from the previous request. The service in
general was not needed as the cloud oem is already set to cloudsigma.
2024-02-08 15:18:04 +01:00
Krzesimir Nowak
8af400c51b
changelog: Add entries
2024-02-08 14:27:11 +01:00
Krzesimir Nowak
9f6479e58e
changelog: Add entries
2024-02-08 14:20:17 +01:00
Krzesimir Nowak
4590ad3d6e
changelog: Add entries
2024-02-07 10:16:32 +01:00
Sayan Chowdhury
14ffb04418
Merge pull request #1627 from flatcar/linux-6.6.16-main
...
Upgrade Linux Kernel for main from 6.6.12 to 6.6.16
2024-02-06 18:36:02 +05:30
Flatcar Buildbot
f4e78b34eb
sys-kernel/coreos-sources: Update from 6.6.12 to 6.6.16
2024-02-06 07:11:20 +00:00
Flatcar Buildbot
55a27b72da
app-containers/containerd: Update from 1.7.12 to 1.7.13
2024-02-02 08:16:09 +00:00
Kai Lüke
a97efb8882
Merge pull request #1601 from flatcar/kai/oem-optional
...
coreos-base/coreos-init: Add flatcar-update flag to skip OEM payloads
2024-02-01 19:27:58 +01:00
Kai Lueke
e16da83984
coreos-base/coreos-init: Add flatcar-update flag to skip OEM payloads
...
This pulls in https://github.com/flatcar/init/pull/114 to
support a flag to skip providing OEM payloads, with the goal of easing
downgrades to non-sysext-OEM releases or, when backported to LTS with
the default behavior switched, to opt-in to OEM payloads for airgapped
updates that can't use the fallback download.
2024-02-01 19:27:38 +01:00
Flatcar Buildbot
3676e6ad8f
app-misc/ca-certificates: Update from 3.96 to 3.97
2024-01-29 07:17:57 +00:00
Krzesimir Nowak
24dab44337
Merge pull request #1569 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-01-15
...
Weekly portage-stable package updates 2024-01-15
2024-01-25 18:15:17 +01:00
Dongsu Park
75ca7d9e79
Merge pull request #1591 from flatcar/containerd-1.7.12-main
...
Upgrade Containerd in main from 1.7.11 to 1.7.12
2024-01-25 17:56:17 +01:00
Kai Lueke
32737a23dc
coreos-base/update_engine: Forward proxy env for postinstall script
...
This pulls in https://github.com/flatcar/update_engine/pull/37
to forward the proxy env vars for curl and ue-rs download_sysext
(Flatcar Stable currently uses curl, Alpha uses ue-rs).
2024-01-24 14:52:46 +01:00
Dongsu Park
e114c3717f
Merge pull request #1582 from flatcar/firmware-20240115-main
...
Upgrade Linux Firmware in main from 20231211 to 20240115
2024-01-19 10:15:54 +01:00
Flatcar Buildbot
1a86cb7abc
app-containers/containerd: Update from 1.7.11 to 1.7.12
2024-01-19 08:17:28 +00:00
Kai Lüke
b4f339220a
Merge pull request #1580 from flatcar/kai/ue-rs-target-filename
...
coreos-base/(ue-rs|update_engine): Control extracted OEM payload name
2024-01-18 11:54:17 +01:00
Kai Lueke
d05773b8ee
coreos-base/(ue-rs|update_engine): Control extracted OEM payload name
...
This pulls in https://github.com/flatcar/ue-rs/pull/49 and
https://github.com/flatcar/update_engine/pull/36 to fix the handling
of OEM update payloads in a Nebraska response with self-hosted packages.
Before this fix the processing failed and had to rely on the fallback
download from the release server.
2024-01-18 11:53:54 +01:00
Flatcar Buildbot
c6ec730945
sys-kernel/coreos-firmware: Update from 20231211 to 20240115
2024-01-18 07:13:00 +00:00
Dongsu Park
d7415b2aec
changelog: add update changelog for afterburn 5.5.1
2024-01-17 10:18:44 +01:00
Dongsu Park
4f789d1cd6
Merge pull request #1573 from flatcar/linux-6.6.12-main
...
Upgrade Linux Kernel for main from 6.6.8 to 6.6.12
2024-01-16 17:34:03 +01:00
Jeremi Piotrowski
625fe5c2c8
Merge pull request #1572 from flatcar/tormath1/ssm-agent
...
app-emulation/amazon-ssm-agent: use upstream makefile
2024-01-16 15:26:19 +01:00
Krzesimir Nowak
63b41be8fe
changelog: Add an entry
2024-01-16 12:57:28 +01:00
Mathieu Tortuyaux
631a11fdf0
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-01-16 11:28:17 +01:00
Jeremi Piotrowski
892a51e552
Add changelog for coreos-cloudinit bugfix
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-01-16 09:44:36 +01:00
Flatcar Buildbot
a7d28a8f60
sys-kernel/coreos-sources: Update from 6.6.8 to 6.6.12
2024-01-16 07:12:10 +00:00
Dongsu Park
38ae73f075
Merge pull request #1565 from flatcar/go-1.19.13-and-1.20.13-main
...
Upgrade Go from 1.20.12 to 1.20.13
2024-01-12 11:32:57 +01:00
Krzesimir Nowak
5ddb24bc40
changelog: Drop a CVE that does not affect Flatcar
2024-01-11 18:45:54 +01:00
Krzesimir Nowak
8fd9282da0
changelog: Add missing CVEs for openssh update
2024-01-11 18:45:32 +01:00
Krzesimir Nowak
82c53eb1f9
Merge pull request #1535 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-01-01
...
Weekly portage-stable package updates 2024-01-01
2024-01-11 18:18:28 +01:00
Flatcar Buildbot
79cd73d7ad
dev-lang/go: Update from 1.20.12 to 1.20.13
2024-01-11 18:00:56 +01:00
Krzesimir Nowak
a642a4fc55
Merge pull request #1552 from flatcar/krnowak/openssl-update
...
Update dev-libs/openssl
2024-01-09 10:36:57 +01:00
Krzesimir Nowak
eed6e16fd7
Merge pull request #1551 from flatcar/krnowak/openssh-update
...
Update net-misc/openssh
2024-01-09 10:36:44 +01:00
Krzesimir Nowak
bdf9c33519
changelog: Update an entry
2024-01-08 17:48:02 +01:00
Krzesimir Nowak
685069e01e
changelog: Add entries
2024-01-08 17:42:23 +01:00