Commit Graph

25901 Commits

Author SHA1 Message Date
Krzesimir Nowak
a038fcf482 overlay coreos/config: Drop overrides for packages we do not have 2024-02-28 11:33:59 +01:00
flatcar-ci
f681d90689 New version: main-3893.0.0-nightly-20240227-2100 2024-02-27 21:00:24 +00:00
Krzesimir Nowak
8e21401fc2
Merge pull request #1704 from flatcar/krnowak/drop-docker-proxy
Drop app-containers/docker-proxy package
2024-02-27 07:49:50 +01:00
flatcar-ci
ddb384a1a8 New version: main-3892.0.0-nightly-20240226-2100 2024-02-26 21:00:35 +00:00
Dongsu Park
5c2799e506
Merge pull request #1691 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2024-02-26 16:12:07 +01:00
Krzesimir Nowak
c7653ee64e .github: Drop app-containers/docker-proxy from automation 2024-02-26 16:03:29 +01:00
Krzesimir Nowak
74e06b1541 app-containers/docker-proxy: Drop unnecessary package
Nothing pulls it in now. Looks like it got merged into
app-containers/docker package.
2024-02-26 16:01:49 +01:00
Flatcar Buildbot
1c0d96b70d Update mantle container image to latest HEAD 2024-02-26 14:46:46 +00:00
Kai Lüke
d35414a2ba
Merge pull request #1589 from flatcar/sayan/secureboot-changes
Initial implementation for Secure boot support
2024-02-26 15:46:31 +01:00
Kai Lueke
7db81c27f9 sys-boot/shim: Update to 15.8 2024-02-26 15:46:13 +01:00
Sayan Chowdhury
3627046730 ci-automation: Update to include the qemu_uefi_secure test
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 15:46:13 +01:00
Sayan Chowdhury
52ce21a5ab grub_install.sh: ship mokmanager, and rename to grubx64
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 15:46:13 +01:00
Sayan Chowdhury
3bc6944409 .github/workflow: Add the packages to automation list
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 15:46:12 +01:00
Sayan Chowdhury
16b3a2a10b vendor-testing: Add qemu_uefi_secure, symlinked to qemu.sh
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 15:46:12 +01:00
Sayan Chowdhury
0fc380cf21 sys-boot/shim: Add the changelog for shim upgrade, and secureboot
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 15:46:12 +01:00
Dongsu Park
dbd40fbf90
Merge pull request #1686 from flatcar/firmware-20240220-main
Upgrade Linux Firmware in main from 20240115 to 20240220
2024-02-26 14:24:29 +01:00
Dongsu Park
c5aa253d10 overlay coreos-firmware: update ice ddp version to 1.3.36.0
Fix build issues of coreos-firmware, by bumping the ice firmware version
to 1.3.36.0.
2024-02-26 12:10:06 +01:00
Sayan Chowdhury
99bfcf5f32 shim, coreos-sb-keys, grub_install.sh: retab to spaces
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:10 +01:00
Sayan Chowdhury
4648be9dbb sys-boot/grub: Make sed silently fail when updating sbat
Co-authored-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-02-26 12:01:10 +01:00
Sayan Chowdhury
97ebc770ea sys-boot/shim: Move from cros_workon to upstream
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:10 +01:00
Sayan Chowdhury
04005652dd build_library: Drop redundant config from grub.cfg
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:10 +01:00
Sayan Chowdhury
c1bdbd9d90 build_image_util: Sign the vmlinuz with the shim key
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:10 +01:00
Jeremi Piotrowski
6ff9f8b098 Add support for secure boot in qemu_template.sh
We have an existing qemu_uefi_secure format definition, but it is
necessary to update it so that it actually works. Qemu needs to be
passed the correct flags to enable SMM, we need to switch to the Q35
machine, and we need to copy over the secboot variant of the OVMF
firmware.
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
fc28e72322 sys-boot/grub: install file with sbat contents, add --sbat to script
This is just the contents of the section, but the section
itself is written by grub-mkimage. sbat.csv needs to be passed
with --sbat.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Jeremi Piotrowski
64556256db grub_install: switch to BOARD_GRUB by default
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
0479480ef1 grub_install.sh: Sign the GRUB/MM with the proper keys
Add the linux.mod file back

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
b42e3ad58b sys-boot/shim: Update shim to include signing keys, and build mm.efi
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
348a26201a coreos-sb-keys: Add the shim keys
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
65fe1f4cdb sys-boot/shim: make the shim buildable
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
fc4acb6b40 sys-boot/shim: updates to 15.7
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Jeremi Piotrowski
8019f7fd9f vm_image_util.sh: update path to arm64 UEFI firmware
The arm64 firmware is now called AAVMF with the updated edk2-aarch64
ebuild.
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
58806c5342 eclass/rpm: Add from Gentoo
It's from Gentoo commit 78e5f99cb41eaa50da930e7ab2dc7993fa243e1f.
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
af68df3d43 coreos-devel/board-packages: remove edk2-ovmf from arm64 dependencies
This package is not used, we use edk2-aarch64 on arm64 but and it is
fetched during image_to_vm.sh because the ebuild simply wraps a binary
file.

Original Author: Jeremi Piotrowski <jpiotrowski@microsoft.com>

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
ceb1480e48 sys-firmware/edk2-aarch64: drop old package and replace with new
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
984233b9e8 coreo-base/coreos: Add mokutil to the base amd64 image
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-02-26 12:01:09 +01:00
Sayan Chowdhury
6e497dbd0d sys-boot/mokutil: Add from Gentoo
It's from Gentoo commit cf90a21600e8d81c12b7e1143f43cd28f58dd70d.
2024-02-26 10:53:45 +01:00
Krzesimir Nowak
08baf293ef changelog: Add an entry 2024-02-26 10:31:23 +01:00
Krzesimir Nowak
c6ec4f22c3 .github: Drop dev-python/pyparsing from automation 2024-02-26 10:31:23 +01:00
Krzesimir Nowak
7c19269514 dev-python/pyparsing: Remove unused package
dev-python/packaging used to pull it in, but not anymore.
2024-02-26 10:31:23 +01:00
Krzesimir Nowak
3af1e37643 overlay profiles: Drop accept keywords for app-emulation/qemu 2024-02-26 10:06:05 +01:00
Krzesimir Nowak
ad6b2c6476 overlay profiles: Updated accept keywords for app-crypt/mit-krb5 2024-02-26 10:04:50 +01:00
Krzesimir Nowak
f1cee356c0 overlay profiles: Add accept keywords for net-libs/libpsl 2024-02-26 09:51:13 +01:00
Krzesimir Nowak
84ac7b1cb0 overlay profiles: Add accept keywords for app-arch/xz-utils 2024-02-26 09:50:59 +01:00
Flatcar Buildbot
3c2a94bc3c sys-libs/zlib: Sync with Gentoo
It's from Gentoo commit 3fe97570438a126e8c274b6ff29a60b81198f277.
2024-02-26 09:24:31 +01:00
Flatcar Buildbot
36f109af80 sys-libs/libcap: Sync with Gentoo
It's from Gentoo commit eef4caf31a0d3c276e17b270fc18285cae367802.
2024-02-26 09:24:31 +01:00
Flatcar Buildbot
d3194e51df sys-fs/xfsprogs: Sync with Gentoo
It's from Gentoo commit 53a7b5d448f2079ba8eac7801f9f2673dbda6438.
2024-02-26 09:24:31 +01:00
Flatcar Buildbot
7bb026fbc5 sys-fs/multipath-tools: Sync with Gentoo
It's from Gentoo commit 5d080387eead3b713ae6e98fb36dda7c0b184c4d.
2024-02-26 09:24:31 +01:00
Flatcar Buildbot
d0f0f10210 sys-devel/gettext: Sync with Gentoo
It's from Gentoo commit 1922bfee73c961edf09e5f28a5bfdbaaa378fe7a.
2024-02-26 09:24:31 +01:00
Flatcar Buildbot
4531763808 sys-devel/gcc: Sync with Gentoo
It's from Gentoo commit fdddc3f25ee18636c46f1a82080b9cb2ed105db1.
2024-02-26 09:24:31 +01:00
Flatcar Buildbot
584f938985 sys-apps/smartmontools: Sync with Gentoo
It's from Gentoo commit 49a34318d9702773834a4af66768ec6978dfdec6.
2024-02-26 09:24:31 +01:00