Commit Graph

9214 Commits

Author SHA1 Message Date
Jeremi Piotrowski
28f2b152e4 app-emulation/docker-runc: switch to building with go1.16
Upstream builds with go1.16. Additionally fixup the VERSION variable specify the
current Flatcar Docker version 20.10.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-24 13:24:00 +00:00
Jeremi Piotrowski
194291a6e3 app-emulation/docker-proxy: remove old versions
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-24 13:24:00 +00:00
Jeremi Piotrowski
2d352084ec app-emulation/docker-proxy: switch to building with go1.16
Upstream builds go through github.com/docker/docker repo and that builds
with go1.16 with module support disabled.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-24 13:23:18 +00:00
Krzesimir Nowak
acd4548a09 app-emulation/nova-agent: Drop unused and outdated package
I'm not sure if we ever built it - it's not a dependency of anything
at all. Also one of its dependencies, dev-python/pyxenstore, was
dropped in 2014, so the package is broken for about seven years
now. Looks like that the rackspace oem package is rather pulling
nova-agent through the coreos-base/nova-agent-container package.
2021-08-24 12:00:26 +02:00
Jeremi Piotrowski
4b49289cf5 Merge pull request #1212 from ryanm101/EnableFSEncryption
Re-enable  FS_ENCRYPTION. Closes https://github.com/kinvolk/Flatcar/issues/286.
2021-08-24 11:01:01 +02:00
Jeremi Piotrowski
5bc0c080f3 Merge pull request #1214 from kinvolk/jepio/containerd-config-fix
explicitly set 'runtime_type' in containerd config
2021-08-24 10:33:41 +02:00
Jeremi Piotrowski
850584d45b app-emulation/containerd: adjust config to prevent runtime_type from being unset
The containerd config works in mysterious ways - sometimes it acts hierarchical
with respect to the section headers, other times not. In this case, setting
runc.options resets all the fields of the runc section, including
'runtime_type'. Having an unset runtime_type causes containerd to fail to spawn
containers (but the daemon itself starts succesfully) returning the error:

    kubelet[13148]: E0823 11:57:17.030551   13148 remote_runtime.go:116] "RunPodSandbox from runtime service failed" err="rpc error: code = InvalidArgument desc = failed to create containerd container: create container failed validation: container.Runtime.Name must be set: invalid argument"

Explicitly set the runtime_type in all containerd configs, and bump the config
version to 2.

Reported as https://github.com/kinvolk/Flatcar/issues/484

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-23 16:28:34 +00:00
Ryan McLean
d5e0de9dc9 Re-enable FS_ENCRYPTION 2021-08-20 20:52:53 +01:00
Aniruddha Basak
aacdb5472f Add app-arch/lbzip2 to the coreos ebuild dependencies 2021-08-20 18:52:39 +00:00
Krzesimir Nowak
214c1da209 Merge pull request #1200 from kinvolk/krnowak/update-wa-linux-agent
app-emulation/wa-linux-agent: Update to 2.3.1.1
2021-08-20 17:47:02 +02:00
Dongsu Park
035f33982f Merge pull request #1210 from kinvolk/dongsu/move-strace
dev-util/strace: move to portage-stable
2021-08-20 16:50:35 +02:00
Dongsu Park
2887296087 profiles: remove accept_keywords for dev-util/strace
As dev-util/strace is gone, remove accept_keywords as well from profile.
2021-08-20 16:21:44 +02:00
Dongsu Park
5ddbe57d48 dev-util/strace: move to portage-stable
Now that we have dev-util/pkgconfig 0.29.2, there is no need to
keep third-party patch for avoiding cross-build issues in
dev-util/strace. Let's simply drop the patch, and move strace to
portage-stable.
2021-08-20 16:21:08 +02:00
Dongsu Park
06555981bc Merge pull request #1207 from kinvolk/dongsu/delete-sdk-extras
coreos-devel/sdk-extras: delete sdk-extras
2021-08-20 16:03:29 +02:00
Jeremi Piotrowski
9116ccf8ea app-emulation/containerd: remove old versions
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-20 11:31:47 +02:00
Jeremi Piotrowski
d98781487a app-emulation/containerd: switch to building with go1.16
Upstream builds with go1.16 too.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-20 11:31:44 +02:00
Jeremi Piotrowski
e80bee6629 app-emulation/docker-cli: remove GO_BUILDTAGS setting
We now build with go1.16 and the go1.16 tag does not show up anywhere in
the cli repo.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-20 11:31:39 +02:00
Jeremi Piotrowski
7d63f3f426 Merge pull request #1199 from kinvolk/docker-20.10.8-main
Upgrade Docker in main from 20.10.7 to 20.10.8, and build with go1.16.
2021-08-20 10:37:05 +02:00
Dongsu Park
44ea3e801a coreos-devel/sdk-extras: delete sdk-extras
Apparently the `coreos-devel/sdk-extras` was originally meant to work
as a meta package to pull in all the optional packages in the SDK at once.
It has been unmaintained since 2~3 years, so an attempt of `emerge
coreos-devel/sdk-extras` will give you a huge list of conflicts to
resolve. It is difficult to resurrect sdk-extras at the moment.

Delete `coreos-devel/sdk-extras` completely. Doing that, we can delete
more than 20 other packages from the source tree.
2021-08-19 09:55:43 +02:00
Dongsu Park
1aaee6d3c0 profiles: clean up unnecessary configs
Now that coreos-devel/sdk-extras are gone, delete unnecessary configs
in profiles, for app-portage/repoman, dev-go/glide, dev-go/godep,
dev-python/awscli, dev-python/botocore, dev-python/s3transfer.
2021-08-19 09:50:54 +02:00
Dongsu Park
63745e2a95 coreos-base/hard-host-depends: remove obsolete comments
Now that coreos-devel/sdk-extras are deleted, we do not need to keep
obsolete comments about sdk-extras.
2021-08-19 09:50:10 +02:00
Dongsu Park
6848f95797 app-portage/repoman: delete repoman
Delete deprecated ebuild that was pulled in by coreos-devel/sdk-extras.
2021-08-19 09:47:56 +02:00
Krzesimir Nowak
33943a3833 app-emulation/wa-linux-agent: Update to 2.3.1.1
This version has an officially documented support for python3, so it
plays along our plans of removing python2 in favor of python3. When
the switch actually happens, we will need to update the ebuild to
mention the correct path to python modules. The path contains python
version, which is a hindrance. Would be nice to have it hidden behind
some variable.

There is also a version 2.4.0.2, but it's marked as a prerelease on
github, so decided to package 2.3.1.1 instead.
2021-08-19 09:30:49 +02:00
Jeremi Piotrowski
ff2481c2ed app-emulation/docker{,-cli}: switch to go1.16
Upstream has switched to go 1.16, but still doesn't use go modules. The ebuilds
needed fixing up after the automated PR was created.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-18 11:49:49 +02:00
Flatcar Buildbot
a6aa1a604d app-emulation: Upgrade Docker 20.10.7 to 20.10.8 2021-08-18 07:44:50 +00:00
Kai Lüke
4e800b6ad0 Merge pull request #1196 from kinvolk/kai/azure-oem
Compile Azure OEM contents for all boards
2021-08-16 19:43:43 +02:00
Kai Lueke
a8352fc7a9 Compile Azure OEM contents for all boards
While not used at the moment we still can lift the restriction to only
compile for the amd64 board.
2021-08-16 18:52:37 +02:00
Sayan Chowdhury
cc561269f9 Merge pull request #1194 from kinvolk/linux-5.10.59-main
Upgrade Linux Kernel in main from 5.10.58 to 5.10.59
2021-08-16 16:08:05 +05:30
Flatcar Buildbot
97a3d1282a sys-kernel: Upgrade Kernel 5.10.58 to 5.10.59 2021-08-16 07:11:04 +00:00
Sayan Chowdhury
df7015f381 Merge pull request #1189 from kinvolk/sayan/update-systemd-247.9
sys-apps/systemd: Updates to v247.9
2021-08-13 17:40:01 +05:30
Dongsu Park
ae77d17c80 Merge pull request #1183 from kinvolk/dongsu/mit-krb5-1.19.2
app-crypt/mit-krb5: update to 1.19.2
2021-08-13 11:23:42 +02:00
Sayan Chowdhury
b9d5973279 Merge pull request #1188 from kinvolk/linux-5.10.58-main
Upgrade Linux Kernel in main from 5.10.57 to 5.10.58
2021-08-13 14:48:05 +05:30
Flatcar Buildbot
f877517682 sys-kernel: Upgrade Kernel 5.10.57 to 5.10.58 2021-08-13 07:10:35 +00:00
Dongsu Park
7685839a2e app-crypt/mit-krb5: add warn-crossbuild.patch
Set PYTHON_COMPAT to python 3.6 and 3.7 to be suitable for the current
code base.

Add a custom patch to replace error with warning when running autoconf
for cross builds, because libkrb5 is not able to detect
cross-compilation.

Based on 64e33c9f826d8fd951fd58ba1ed70debaf65be8d .
2021-08-13 08:54:02 +02:00
Dongsu Park
78fd33033f app-crypt/mit-krb5: update to 1.19.2
Update app-crypt/mit-krb5 to 1.19.2 mainly to address CVE-2021-36222.

Gentoo ref: cce302e49bbc62cbce863f756ea8252e57259a99
2021-08-13 08:54:02 +02:00
Dongsu Park
075ef5dbe6 Merge pull request #1148 from kinvolk/containerd-1.5.5-main
Upgrade Containerd in main from 1.5.4 to 1.5.5
2021-08-13 08:49:34 +02:00
Sayan Chowdhury
977e6d9845 Merge pull request #1176 from kinvolk/linux-5.10.57-main
Upgrade Linux Kernel in main from 5.10.56 to 5.10.57
2021-08-13 00:06:30 +05:30
Sayan Chowdhury
f977110d3d sys-apps/systemd: Updates to v247.9
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-13 00:01:24 +05:30
Flatcar Buildbot
bb01f17d4a app-emulation: Upgrade Containerd 1.5.4 to 1.5.5 2021-08-12 17:46:22 +02:00
Jeremi Piotrowski
faf23d9488 Merge pull request #931 from jepio/for-main/cgroupv2+docker-20.10
Move to unified cgroupv2 hierarchy and upgrade Docker to 20.10.
2021-08-12 17:33:08 +02:00
Jeremi Piotrowski
56e10bb557 app-emulation/containerd: add config file for use during migration
The SystemdCgroup=true setting is incompatible with kubelet
cgroupDriver: cgroupfs. So to prevent kube clusters from failing, we
will be freezing a nodes config.toml during an update. For that purpose,
we install a second configuration file that can then be selected using a
systemd drop-in unit.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 15:29:34 +00:00
Mathieu Tortuyaux
fbeae5cc8e Merge pull request #1181 from kinvolk/tormath1/fix-flannel-selinux
sec-policy/selinux-virt: add rules to run `flannel` with SELinux enforced mode
2021-08-12 15:37:32 +02:00
Jeremi Piotrowski
ea7cfa336e coreos-base/coreos-init: add motd warning when cgroupv1 is found
This pulls in https://github.com/kinvolk/init/pull/44

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
db724e4706 coreos-base/update_engine: add postinstall hook to stay on cgroupv1
This pulls in https://github.com/kinvolk/update_engine/pull/13

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
330595c9d0 sys-apps/systemd: Switch to unified cgroup hierarchy
Now that Docker has been updated to 20.10, we can use cgroupv2 so have
systemd mount the unified cgroup hierarchy by default. Other ways of
achieving the same would have been to pass 'systemd.unified_cgroup_hierarchy=1'
on the kernel cmdline, but this way the change propagates nicely to all
OEM consumers.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
61cac349d9 app-torcx/docker: Remove torcx packages for older docker versions
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
eff02fb3f0 .github: Adapt docker-release-main action to Docker 20
The upstream docker repository location has changed to docker/docker.
Additionally, the cli component has been split out which which requires
fetching two hashes and updating two ebuilds. We also took the chance to
align the ebuild with gentoo's, which means there are is no more live ebuild
and no symlink.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
6e085a168e coreos-base/flatcar-eks: update supported kubernetes versions for cgroupv2
We are switching flatcar to cgroupv2 which is support by docker 20.10 and
kubernetes 1.19. This requires setting the systemd cgroup driver in the kubelet
config.

Due to the unified cgroup hierarchy, kubernetes <1.19 will not work so
remove all older versions.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
31c8a6afe8 app-torcx/docker: Add a Docker 20.10 torcx image
Compared to previous torcx images the docker-cli package is a separate
package, following upstream Docker repo layout changes.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
742c507270 app-emulation/docker: Apply Flatcar patches
The patches do the following:

* install flatcar specific wrappers and systemd config
* force some USE flags to default on
* allow injecting CFLAGS/LDFLAGS so that torcx can work
* force building with go1.13 (like upstream does) - this won't be
  necessary next time because docker master already uses go1.16
2021-08-12 09:58:56 +00:00