mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-09 05:56:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
28,773 Commits 621 Branches 391 Tags 160 MiB
e3c524c91d
Commit Graph

20183 Commits

Author SHA1 Message Date
James Le Cuirot
e3c524c91d
app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:20 +00:00
James Le Cuirot
13516911f1
app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable 
The cross issues that were previously addressed by our fork are no
longer an issue since p11-kit migrated to Meson.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:19 +00:00
James Le Cuirot
7b0a1ae4f9
coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit 
p11-kit is a dependency of azure-keyvault-pkcs11, but we will also use
it directly to fetch the certificate from Azure Key Vault.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:18 +00:00
Sayan Chowdhury
2d73ea8fa1
profiles: Add the azure-keyvault-pkcs11 to accept_keywords 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:17 +00:00
Sayan Chowdhury
987a3e675f
app-crypt/azure-keyvault-pkcs11: Add new package 
It hasn't been added to Gentoo yet.
 2024-11-13 12:19:16 +00:00
Sayan Chowdhury
8ebf73f6aa
dev-cpp/azure-identity: Add from Gentoo 
It's from Gentoo commit 82ec02943f7f0ddaa87f623cee138608571a3978.
 2024-11-13 12:19:14 +00:00
Sayan Chowdhury
ecb2ee89a1
dev-cpp/azure-security-keyvault-keys: Add from Gentoo 
It's from Gentoo commit 768b3c1959debce15854362ff7db176cda76c055.
 2024-11-13 12:19:13 +00:00
Sayan Chowdhury
b8609dc2a0
dev-cpp/azure-security-keyvault-certificates: Add from Gentoo 
It's from Gentoo commit 69e4044b72d971f5603df77793db86c40e582e2e.
 2024-11-13 12:19:12 +00:00
Sayan Chowdhury
8dc736d755
dev-cpp/azure-core: Add from Gentoo 
It's from Gentoo commit d286faf494dcb60f81f0de921fa623d952962fc1.
 2024-11-13 12:19:11 +00:00
Sayan Chowdhury
a15ff23bdb
shim, shim-signed: Move the packages from SDK to BOARD packages 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:10 +00:00
James Le Cuirot
b401cee2a9
sys-boot/shim-signed: Add shim-signed package to place signed binaries 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:09 +00:00
Sayan Chowdhury
761bc04a19
sys-boot/shim: Append the suffix to the shim binary 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:08 +00:00
Sayan Chowdhury
02c0bdaa28
sys-boot/shim: Include @@VERSION@@ in SBAT for version 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:07 +00:00
Sayan Chowdhury
eef935e596
sys-boot/shim: Add the SBAT data to shim binary 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:06 +00:00
Sayan Chowdhury
b8f290bae4
sys-boot/shim: Add a use flag to use a DER files for shim builds 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:18:44 +00:00
James Le Cuirot
d18a373cb7
Merge pull request #2442 from flatcar/chewi/root-deps 
Drop --root-deps and --root-deps=rdeps emerge options
 2024-11-13 09:19:23 +00:00
Flatcar Buildbot
6cb21a37e1
sys-apps/portage: Sync with Gentoo 
It's from Gentoo commit ba2693dfc0f0f5535e6371c4e4d19806109537c9.
 2024-11-12 22:08:27 +00:00
flatcar-ci
9085e02c75 New version: main-4152.0.0-nightly-20241112-2100 2024-11-12 21:00:29 +00:00
James Le Cuirot
010afcd35d
sys-boot/mokutil: Install on arm64 now that it supports Secure Boot 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-12 12:02:01 +00:00
James Le Cuirot
5125317506
coreos-base/coreos-sb-keys: Drop unnecessary PK and KEK certificates 
These are only needed when you are going to ship DB updates to existing
systems, which we are not going to do. Our EFI variables are only for
testing. End users are expected to use EFI variables provided by their
hosts or hardware vendors. We presumably provided these before because
some PK and KEK does need to be provided, but we can now use the
Microsoft and Red Hat ones provided via Gentoo's edk2 package.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-12 12:02:00 +00:00
James Le Cuirot
e50fe0a7e4
sys-firmware/edk2-aarch64: Drop in favour of edk2-bin 
edk2-bin now supports multiple platforms, including QEMU on arm64, so we
no longer need to use Fedora's build. Note that the Secure Boot
implementation is currently insecure as it lacks SMM, which is needed to
protect the EFI variable store.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-12 12:01:58 +00:00
Mathieu Tortuyaux
c80760c999
Merge pull request #1783 from flatcar/kai/proxmox-support 
OEM: Provide Proxmox images
 2024-11-12 12:52:31 +01:00
Mathieu Tortuyaux
c1cd33684b
coreos-base/afterburn: fix instance boots 
Without configdrive the instance is failing to boot - this patch is
currently under review on PR#1128 (coreos/afterburn)

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-11-12 12:51:36 +01:00
Mathieu Tortuyaux
6e674b26d3
oem: provide proxmox images 
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-11-12 12:51:36 +01:00
flatcar-ci
f708975b80 New version: main-4151.0.0-nightly-20241111-2100 2024-11-11 21:00:29 +00:00
Flatcar Buildbot
087d5e8bf4 sys-kernel/coreos-sources: Update from 6.6.59 to 6.6.60 2024-11-09 07:04:43 +00:00
flatcar-ci
024fbd7981 New version: main-4148.0.0-nightly-20241108-2100 2024-11-09 02:17:58 +00:00
flatcar-ci
610c7c7197 New version: main-4148.0.0-nightly-20241108-2100-INTERMEDIATE 2024-11-08 21:00:27 +00:00
James Le Cuirot
2bce0a69b9
Merge pull request #2431 from flatcar/chewi/grub-redhat-patches 
sys-boot/grub: Apply Red Hat's large patch set (and drop Gentoo's)
 2024-11-08 11:58:42 +00:00
Mathieu Tortuyaux
c6d69ef8aa
Merge pull request #2432 from flatcar/go-1.22.9-main 
Upgrade Go from 1.22.8 to 1.22.9
 2024-11-08 09:22:26 +01:00
Flatcar Buildbot
bf7d649c8e
dev-lang/go: Update from 1.22.8 to 1.22.9 2024-11-08 09:21:47 +01:00
flatcar-ci
5efd7a3bf4 New version: main-4147.0.0-nightly-20241107-2100 2024-11-07 21:00:28 +00:00
James Le Cuirot
e0109ef1c6
sys-boot/grub: Fix fallback mechanism broken by Red Hat's patches 
This fix has been submitted to Red Hat. It will hopefully be merged
soon.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-07 14:26:05 +00:00
James Le Cuirot
fb3c9cff98
sys-boot/grub: Apply Red Hat's large patch set (and drop Gentoo's) 
We initially thought we would need Red Hat's patch set. Then it looked
like we wouldn't because the TPM Event Log appeared to work without it.
We later discovered that on amd64, it only works with Secure Boot
disabled. The patch set also fixes Secure Boot on arm64, which would
have otherwise needed a couple of patches from Canonical.

We have to drop Gentoo's patches because they conflict, but they don't
affect Flatcar anyway.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-07 14:26:04 +00:00
James Le Cuirot
2fcff863dc
Merge pull request #2430 from flatcar/chewi/virt-firmware 
app-crypt/efitools: Drop in favour of app-emulation/virt-firmware
 2024-11-07 11:43:45 +00:00
flatcar-ci
97af4e5eb9 New version: main-4146.0.0-nightly-20241106-2100 2024-11-06 21:00:29 +00:00
James Le Cuirot
bcd203ebcb
app-crypt/efitools: Drop in favour of app-emulation/virt-firmware 
virt-fw-vars handles X.509 conversion and QCOW2 conversion transparently
and can update all the variables in a single invocation.

Bonus: Asking it to list the variables doesn't cause a segfault due to
the feature not really being implemented. :D

The 00000000-0000-0000-0000-000000000000 owner GUID is what flash-var
used to set, as we didn't specify the -g argument. We don't need to set
a meaningful value as this file is only for testing.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-06 12:04:18 +00:00
James Le Cuirot
86ebb70552
app-emulation/virt-firmware: Import from Gentoo to replace efitools 
Unfortunately, it pulls in a number of dependencies.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-06 11:58:23 +00:00
Mathieu Tortuyaux
b6a76ca848
x11-drivers/nvidia: update to 535.216.01 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2024-11-06 10:13:30 +01:00
Flatcar Buildbot
7dee46f4d8 Update mantle container image to latest HEAD 2024-11-05 21:00:50 +00:00
flatcar-ci
725e44465d New version: main-4145.0.0-nightly-20241105-2100 2024-11-05 21:00:27 +00:00
Mathieu Tortuyaux
5677ea6d60
Merge pull request #2419 from flatcar/linux-6.6.59-main 
Upgrade Linux Kernel for main from 6.6.58 to 6.6.59
 2024-11-05 11:33:04 +01:00
flatcar-ci
5310817b30 New version: main-4144.0.0-nightly-20241104-2100 2024-11-04 21:00:33 +00:00
flatcar-ci
bd313b34df New version: main-4141.0.0-nightly-20241101-2100 2024-11-02 02:45:31 +00:00
flatcar-ci
50e64c853e New version: main-4141.0.0-nightly-20241101-2100-INTERMEDIATE 2024-11-01 21:00:29 +00:00
Flatcar Buildbot
2d86f41650 portage-stable/metadata: Monthly GLSA metadata updates 2024-11-01 07:05:51 +00:00
Flatcar Buildbot
d9da11dda3 sys-kernel/coreos-sources: Update from 6.6.58 to 6.6.59 2024-11-01 07:05:04 +00:00
flatcar-ci
4213bb3d15 New version: main-4139.0.0-nightly-20241030-2100 2024-10-30 21:00:27 +00:00
Adrian Vladu
5a76525c84
Merge pull request #2390 from flatcar/ader1990/fix-nfs-read-plus 
sys-kernel/coreos-modules: disable CONFIG_NFS_V4_2_READ_PLUS
 2024-10-30 15:59:52 +02:00
flatcar-ci
41b5bf0565 New version: main-4138.0.0-nightly-20241029-2100 2024-10-29 21:00:28 +00:00