mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-10-31 16:21:04 +01:00
Code Issues Packages Projects Releases Wiki Activity
28,558 Commits 613 Branches 431 Tags
Commit Graph

28558 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeremi Piotrowski
26a4ed8229 sys-boot/shim: Fix parallel build 
The bundled gnu-efi build is implemented in a buggy way that can break when
built in parallel. We've hit this in the nightly sdk build. Add a patch for it.

The patch has been posted upstream at https://github.com/rhboot/shim/pull/643.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-02-29 14:34:11 +01:00
Krzesimir Nowak
128037e808
Merge pull request #1708 from flatcar/krnowak/prune-obsolete-overrides 
overlay coreos/config: Drop overrides for packages we do not have
 2024-02-29 12:09:33 +01:00
Jeremi Piotrowski
e2162e2008 Revert "New version: main-3894.0.0-nightly-20240228-2100" 
Last nightly SDK failed to build due to a shim error, go back to the previous
build.

This reverts commit 735b2698bac434f9827b96b132eebabb8277bf31.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-02-29 11:05:37 +01:00
flatcar-ci
735b2698ba New version: main-3894.0.0-nightly-20240228-2100 2024-02-28 21:00:39 +00:00
Jeremi Piotrowski
f62bdf60c4
Merge pull request #1709 from flatcar/xattr-spam-fix 
build_library: Ignore btrfs xattrs
 2024-02-28 15:08:47 +01:00
Krzesimir Nowak
f2d7be8cd9
Merge pull request #1702 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-02-26 
Weekly portage-stable package updates 2024-02-26
 2024-02-28 14:51:01 +01:00
Jeremi Piotrowski
e51a90d8ed build_library: Ignore btrfs xattrs 
To prevent mksquashfs from spamming the console about btrfs.compression.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-02-28 12:25:06 +01:00
Krzesimir Nowak
a038fcf482 overlay coreos/config: Drop overrides for packages we do not have 2024-02-28 11:33:59 +01:00
flatcar-ci
f681d90689 New version: main-3893.0.0-nightly-20240227-2100 2024-02-27 21:00:24 +00:00
Krzesimir Nowak
8e21401fc2
Merge pull request #1704 from flatcar/krnowak/drop-docker-proxy 
Drop app-containers/docker-proxy package
 2024-02-27 07:49:50 +01:00
flatcar-ci
ddb384a1a8 New version: main-3892.0.0-nightly-20240226-2100 2024-02-26 21:00:35 +00:00
Dongsu Park
5c2799e506
Merge pull request #1691 from flatcar/mantle-update-main 
Upgrade mantle container image to latest HEAD in main
 2024-02-26 16:12:07 +01:00
Krzesimir Nowak
c7653ee64e .github: Drop app-containers/docker-proxy from automation 2024-02-26 16:03:29 +01:00
Krzesimir Nowak
74e06b1541 app-containers/docker-proxy: Drop unnecessary package 
Nothing pulls it in now. Looks like it got merged into
app-containers/docker package.
 2024-02-26 16:01:49 +01:00
Flatcar Buildbot
1c0d96b70d Update mantle container image to latest HEAD 2024-02-26 14:46:46 +00:00
Kai Lüke
d35414a2ba
Merge pull request #1589 from flatcar/sayan/secureboot-changes 
Initial implementation for Secure boot support
 2024-02-26 15:46:31 +01:00
Kai Lueke
7db81c27f9 sys-boot/shim: Update to 15.8 2024-02-26 15:46:13 +01:00
Sayan Chowdhury
3627046730 ci-automation: Update to include the qemu_uefi_secure test 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 15:46:13 +01:00
Sayan Chowdhury
52ce21a5ab grub_install.sh: ship mokmanager, and rename to grubx64 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 15:46:13 +01:00
Sayan Chowdhury
3bc6944409 .github/workflow: Add the packages to automation list 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 15:46:12 +01:00
Sayan Chowdhury
16b3a2a10b vendor-testing: Add qemu_uefi_secure, symlinked to qemu.sh 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 15:46:12 +01:00
Sayan Chowdhury
0fc380cf21 sys-boot/shim: Add the changelog for shim upgrade, and secureboot 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 15:46:12 +01:00
Dongsu Park
dbd40fbf90
Merge pull request #1686 from flatcar/firmware-20240220-main 
Upgrade Linux Firmware in main from 20240115 to 20240220
 2024-02-26 14:24:29 +01:00
Dongsu Park
c5aa253d10 overlay coreos-firmware: update ice ddp version to 1.3.36.0 
Fix build issues of coreos-firmware, by bumping the ice firmware version
to 1.3.36.0.
 2024-02-26 12:10:06 +01:00
Sayan Chowdhury
99bfcf5f32 shim, coreos-sb-keys, grub_install.sh: retab to spaces 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:10 +01:00
Sayan Chowdhury
4648be9dbb sys-boot/grub: Make sed silently fail when updating sbat 
Co-authored-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-02-26 12:01:10 +01:00
Sayan Chowdhury
97ebc770ea sys-boot/shim: Move from cros_workon to upstream 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:10 +01:00
Sayan Chowdhury
04005652dd build_library: Drop redundant config from grub.cfg 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:10 +01:00
Sayan Chowdhury
c1bdbd9d90 build_image_util: Sign the vmlinuz with the shim key 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:10 +01:00
Jeremi Piotrowski
6ff9f8b098 Add support for secure boot in qemu_template.sh 
We have an existing qemu_uefi_secure format definition, but it is
necessary to update it so that it actually works. Qemu needs to be
passed the correct flags to enable SMM, we need to switch to the Q35
machine, and we need to copy over the secboot variant of the OVMF
firmware.
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
fc28e72322 sys-boot/grub: install file with sbat contents, add --sbat to script 
This is just the contents of the section, but the section
itself is written by grub-mkimage. sbat.csv needs to be passed
with --sbat.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Jeremi Piotrowski
64556256db grub_install: switch to BOARD_GRUB by default 
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
0479480ef1 grub_install.sh: Sign the GRUB/MM with the proper keys 
Add the linux.mod file back

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
b42e3ad58b sys-boot/shim: Update shim to include signing keys, and build mm.efi 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
348a26201a coreos-sb-keys: Add the shim keys 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
65fe1f4cdb sys-boot/shim: make the shim buildable 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
fc4acb6b40 sys-boot/shim: updates to 15.7 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Jeremi Piotrowski
8019f7fd9f vm_image_util.sh: update path to arm64 UEFI firmware 
The arm64 firmware is now called AAVMF with the updated edk2-aarch64
ebuild.
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
58806c5342 eclass/rpm: Add from Gentoo 
It's from Gentoo commit 78e5f99cb41eaa50da930e7ab2dc7993fa243e1f.
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
af68df3d43 coreos-devel/board-packages: remove edk2-ovmf from arm64 dependencies 
This package is not used, we use edk2-aarch64 on arm64 but and it is
fetched during image_to_vm.sh because the ebuild simply wraps a binary
file.

Original Author: Jeremi Piotrowski <jpiotrowski@microsoft.com>

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
ceb1480e48 sys-firmware/edk2-aarch64: drop old package and replace with new 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
984233b9e8 coreo-base/coreos: Add mokutil to the base amd64 image 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-02-26 12:01:09 +01:00
Sayan Chowdhury
6e497dbd0d sys-boot/mokutil: Add from Gentoo 
It's from Gentoo commit cf90a21600e8d81c12b7e1143f43cd28f58dd70d.
 2024-02-26 10:53:45 +01:00
Krzesimir Nowak
08baf293ef changelog: Add an entry 2024-02-26 10:31:23 +01:00
Krzesimir Nowak
c6ec4f22c3 .github: Drop dev-python/pyparsing from automation 2024-02-26 10:31:23 +01:00
Krzesimir Nowak
7c19269514 dev-python/pyparsing: Remove unused package 
dev-python/packaging used to pull it in, but not anymore.
 2024-02-26 10:31:23 +01:00
Krzesimir Nowak
3af1e37643 overlay profiles: Drop accept keywords for app-emulation/qemu 2024-02-26 10:06:05 +01:00
Krzesimir Nowak
ad6b2c6476 overlay profiles: Updated accept keywords for app-crypt/mit-krb5 2024-02-26 10:04:50 +01:00
Krzesimir Nowak
f1cee356c0 overlay profiles: Add accept keywords for net-libs/libpsl 2024-02-26 09:51:13 +01:00
Krzesimir Nowak
84ac7b1cb0 overlay profiles: Add accept keywords for app-arch/xz-utils 2024-02-26 09:50:59 +01:00