mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-11-03 17:51:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
32,167 Commits 620 Branches 437 Tags
Commit Graph

22343 Commits

Author SHA1 Message Date
Krzesimir Nowak
291a2be16c overlay coreos/config: Add Flatcar modifications for net-libs/libtirpc 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
02f850289b net-fs/samba: Sync with Gentoo 
It's from Gentoo commit 9633a3b92e639be48800e37b61a0126f785f80b7.
 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
e2db91d331 overlay net-fs/samba: Move to portage-stable 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
7328b58ee1 overlay coreos/config: Add Flatcar modifications for net-fs/samba 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
b4118604d0 overlay profiles: Add more packages to package.provided 
This is in preparation for moving net-fs/samba to portage-stable.
 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
9dd28d5f92 overlay profiles: Update use flags for net-fs/nfs-utils 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
e1b1b378b1 net-fs/nfs-utils: Sync with Gentoo 
It's from Gentoo commit 3e3629046e131c3cb490b2e5afbe8f57659b4015.
 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
b3d123f22e overlay net-fs/nfs-utils: Move to portage-stable 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
6ddbec0b8e overlay coreos/config: Add Flatcar modifications for net-fs/nfs-utils 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
8f8fc62c37 net-firewall/nftables: Sync with Gentoo 
It's from Gentoo commit 96b47bf70929b78f8dc593c047b119fa88483403.
 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
a9a1084128 overlay net-firewall/nftables: Move to portage-stable 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
1dc9f9306c overlay coreos/config: Add Flatcar modifications for net-firewall/nftables 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
db84f45224 net-firewall/iptables: Sync with Gentoo 
It's from Gentoo commit 15806edd2b2a5b18feba06d981e988e1c90d826c.
 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
c374197b8b overlay net-firewall/iptables: Move to portage-stable 2025-04-24 15:26:14 +02:00
Krzesimir Nowak
73bda1dbfa overlay coreos/config: Add Flatcar modifications for net-firewall/iptables 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
0858dfce6a net-firewall/ebtables: Sync with Gentoo 
It's from Gentoo commit 92c570a45fd1bd66377736bdb155746a7737c71c.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
9409f66b3b overlay net-firewall/ebtables: Move to portage-stable 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
4a4bcc7915 overlay coreos/config: Add Flatcar modifications for net-firewall/ebtables 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
51995bb304 overlay profiles: Add accept keywords for dev-util/bsdiff 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
1e3f94d46d dev-util/bsdiff: Sync with Gentoo 
It's from Gentoo commit 0e727a3a16bc2abfd39386f10821d3e5ce89c45a.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
8358a1e583 overlay dev-util/bsdiff: Move to portage-stable 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
dd9de5bd19 overlay coreos/user-patches: Add patches for dev-util/bsdiff 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
fb14831995 overlay coreos/config: Add Flatcar modifications for dev-util/bsdiff 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
bc979c2ec9 dev-libs/dbus-glib: Sync with Gentoo 
It's from Gentoo commit 192d81163fe990fffea21cc814f528187a0635e0.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
026ff80ec5 overlay dev-libs/dbus-glib: Move to portage-stable 
The cross-compile fix seems to be unnecessary - local build for arm64
picked up the build host's glib_genmarshal tool.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
8946716448 app-crypt/trousers: Sync with Gentoo 
It's from Gentoo commit 794061a3298b5716db015defa7b3e2c583b73980.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
af135cd230 overlay app-crypt/trousers: Move to portage-stable 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
336930c736 overlay coreos/config: Add Flatcar modifications for app-crypt/trousers 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
92f813bf60 app-crypt/sbsigntools: Sync with Gentoo 
It's from Gentoo commit 18c124079dd14ab994e3c4a576a80bbb24e9fa12.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
21b9f61d96 overlay app-crypt/sbsigntools: Move to portage-stable 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
2b015fb31e overlay profiles: Add accept keywords for app-containers/syft 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
77de05dc5d app-containers/syft: Sync with Gentoo 
It's from Gentoo commit bd2e8861ed30ceecc60aaa3fb9b4014f31878b9e.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
d477d877ba overlay app-containers/syft: Move to portage-stable 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
8ab019945f overlay coreos/config: Add Flatcar modifications for app-containers/syft 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
15977c97a4 overlay profiles: Drop logrotate config from install mask 
I have no idea why it was there, since earlier the config was in
/usr/share/logrotate.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
e77aebf54e app-admin/logrotate: Sync with Gentoo 
It's from Gentoo commit 4cfcb24b782236658e799f383fbe517b2448f025.
 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
84df3781a1 overlay app-admin/logrotate: Move to portage-stable 2025-04-24 15:26:13 +02:00
Krzesimir Nowak
0a031b1396 overlay coreos/config: Add Flatcar modifications for app-admin/logrotate 2025-04-24 15:26:13 +02:00
James Le Cuirot
2f587621ab
dev-util/checkbashisms: Drop package as qemu script now uses Bash 
The check for that script was the only consumer.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-24 12:23:46 +01:00
James Le Cuirot
2af957f377
sys-firmware/intel-microcode: Don't install the split microcode 
This is only needed for direct loading by the kernel, which is
dangerous, and we include all the microcode in the initrd anyway.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 13:51:12 +01:00
James Le Cuirot
7b3aac22d4
sys-firmware/intel-microcode: Fix inclusion of microcode in the initrd 
The microcode was accidentally dropped from Flatcar a while back because
Gentoo started telling Dracut to not include it when USE=-initramfs.
Flatcar disabled that flag because the microcode is installed to /boot.
This is only done under the board root though, not in the final image,
so there's no harm in enabling it.

That Dracut setting also affected the AMD microcode, which is part of
coreos-firmware, so this fixes that too.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 13:51:11 +01:00
James Le Cuirot
959e0715a9
sys-apps/systemd: Avoid initrd bloat by using OpenSSL instead of gcrypt 
systemd-journal's Forward Secure Sealing feature requires gcrypt, but
Flatcar doesn't need it.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 13:51:10 +01:00
James Le Cuirot
e5ef9e4f36
sys-kernel/coreos-kernel: Adapt for new Dracut + bootengine with sysroot 
Dracut includes native binaries that are executed during the creation of
the initrd, so it always needs to be installed to /. For now, it expects
to find its modules in the sysroot, so it needs to be installed there
too, though that may change.

bootengine only needs to be installed to sysroot for its Dracut modules.
The update-bootengine tool is a Bash script, so it doesn't really need
to be installed to /.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 13:51:09 +01:00
Dongsu Park
218bf4f17a overlay ue-rs: update to 2025-04-23 
Update coreos-base/ue-rs to 2025-04-23, mainly to fix security issues,
CVE-2024-12224 (GHSA-h97m-ww89-6jmq), GHSA-4fcv-w3qc-ppgg,
GHSA-rr8g-9fpq-6wmg.

Pulls in the following PRs:
* https://github.com/flatcar/ue-rs/pull/60
* https://github.com/flatcar/ue-rs/pull/61
* https://github.com/flatcar/ue-rs/pull/62
* https://github.com/flatcar/ue-rs/pull/64
 2025-04-23 14:33:52 +02:00
James Le Cuirot
841cf196d7
sys-kernel/dracut: Heavily patch for the better sysroot functionality 
This is code I have submitted upstream that has not yet been merged.
This also includes a small "catch up" patch from 106 to current main for
both a clean base and because these changes actually look important.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 12:25:47 +01:00
James Le Cuirot
9bdf3ef1fc
sys-kernel/dracut: Disable the dracut-cpio feature, which requires Rust 
Flatcar can't benefit from this performance boost for several reasons,
the main one being the use of binary packages.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 12:25:45 +01:00
James Le Cuirot
092e50f8e3
sys-kernel/dracut: Use Gentoo package instead, upgrading to 106 
Apply our patch using user-patches instead.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-23 12:25:44 +01:00
James Le Cuirot
d1a38bfa94
sys-kernel/coreos-modules: Compress initrd with xz rather than zstd 
Again, zstd is faster but we're getting seriously short on space. Unlike
the kernel itself, this applies to both amd64 and arm64.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-22 13:14:01 +01:00
James Le Cuirot
48ba5fbc6d
sys-kernel/coreos-modules: Compress kernel with xz rather than zstd 
zstd is faster but we're getting seriously short on space.
Unfortunately, the arm64 kernel still cannot be compressed, but it has
benefited from another space saving measure recently, and GRUB also
takes up less space in /boot.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-22 13:14:00 +01:00
James Le Cuirot
a072bde74c
sys-apps/systemd: Bump to v257.5 for the SDK only 
We need this for dracut-install to have JSON support. It doesn't matter
that the Flatcar image will still have v256.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2025-04-22 13:13:59 +01:00