30170 Commits

Author SHA1 Message Date
flatcar-ci
e8e923d862 Revert failed version back to 4285.0.0+nightly-20250325-2100 2025-03-26 22:06:10 +00:00
flatcar-ci
45ac446526 New version: main-4286.0.0-nightly-20250326-2100 2025-03-26 21:00:25 +00:00
Krzesimir Nowak
7848f25a64
Merge pull request #2638 from flatcar/krnowak/avc-check
Pass image version to kola
2025-03-26 15:36:45 +01:00
Krzesimir Nowak
e96337f8c8 Update mantle container image to latest HEAD 2025-03-26 15:27:10 +01:00
Krzesimir Nowak
37496b3131 ci-automation: Pass image version to kola 2025-03-26 15:26:31 +01:00
Mathieu Tortuyaux
376ae52999
Merge pull request #2769 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-03-26 13:32:49 +01:00
Flatcar Buildbot
345a4a633e Update mantle container image to latest HEAD 2025-03-26 09:55:33 +00:00
James Le Cuirot
f098452630
Merge pull request #2765 from flatcar/chewi/update-ssh-keys-better-clap
coreos-base/update-ssh-keys: Bump for improved docs with better Clap use
2025-03-26 09:55:17 +00:00
flatcar-ci
60e738626f New version: main-4285.0.0-nightly-20250325-2100 2025-03-25 21:00:27 +00:00
Mathieu Tortuyaux
7f8611bed6
Merge pull request #2759 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-03-25 16:39:13 +01:00
James Le Cuirot
70ca73a3c2
coreos-base/update-ssh-keys: Bump for improved docs with better Clap use
Closes: https://github.com/flatcar/Flatcar/issues/1554
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-03-25 14:47:53 +00:00
Flatcar Buildbot
da4c34a968 Update mantle container image to latest HEAD 2025-03-24 21:06:51 +00:00
flatcar-ci
3d9ec51471 New version: main-4284.0.0-nightly-20250324-2100 2025-03-24 21:00:28 +00:00
James Le Cuirot
78534984a8
sys-boot/shim-signed: Fix the Manifest
We think my last commit got lost somewhere.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-03-24 14:33:05 +00:00
Sayan Chowdhury
3b0b65da72
Merge pull request #2754 from flatcar/sayan/signed-images
Add changes to have a Flatcar signed image with our signed release process.
2025-03-24 18:30:20 +05:30
Sayan Chowdhury
3a1934d200
changelog: Add changelog for updating shim secureboot
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-03-24 17:00:57 +05:30
flatcar-ci
86797b315e New version: main-4281.0.0-nightly-20250321-2100 2025-03-22 02:17:57 +00:00
flatcar-ci
1f418bc4fc New version: main-4281.0.0-nightly-20250321-2100-INTERMEDIATE 2025-03-21 21:00:26 +00:00
James Le Cuirot
cf8da7bc9c
Merge pull request #2753 from danzatt/danzatt/baselayout-fix
overlay sys-apps/baselayout: Don't create empty /etc configs
2025-03-21 16:44:52 +00:00
Sayan Chowdhury
7d7bcb02e1
grub_install.sh: copy signed shim to location
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-03-21 18:02:38 +05:30
James Le Cuirot
76729bea7f
Revert "prod_image_util.sh: Temporarily nobble removing unsigned kernel and GRUB"
This reverts commit 3f68400908c8ad61b7c83f3cad4af09c98d6267d.
2025-03-21 18:02:38 +05:30
James Le Cuirot
80dfea84b0
Revert "build_image: Temporarily nobble condition around generate_update"
This reverts commit 94f95acdc7b6f15f93ea5d17a9951da6c382f284.
2025-03-21 18:02:38 +05:30
James Le Cuirot
33ced76b95
sys-boot/shim-signed: Bump to sign with our temporary certificate
We're still waiting to have the shim officially signed, but we want to start
using our signed release process now.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2025-03-21 18:02:38 +05:30
Sayan Chowdhury
cdb45e62b3
build_libary/vm_image_util: Add the temporary shim signing cert
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-03-21 18:02:37 +05:30
Sayan Chowdhury
450a8983cc
build_library/sbsign_util: Update the SBSIGN_KEY & AZURE_KEYVAULT_URL
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2025-03-21 18:02:30 +05:30
flatcar-ci
09e5216d4a New version: main-4279.0.0-nightly-20250319-2100 2025-03-19 21:00:28 +00:00
Mathieu Tortuyaux
4866932210
Merge pull request #2716 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2025-03-19 10:34:52 +01:00
Flatcar Buildbot
509b882344 Update mantle container image to latest HEAD 2025-03-17 21:00:44 +00:00
flatcar-ci
e92778a937 New version: main-4277.0.0-nightly-20250317-2100 2025-03-17 21:00:26 +00:00
Daniel Zatovic
21bcf1aea2 overlay sys-apps/baselayout: Don't create empty /etc configs
There is a bug in coreos baselayout which wipes
/etc/{group,gshadow,passwd,shadow} when
reinstalling/removing/upgrading the baselayout package.

The deleted files are touched in staging area, so the package ships
empty configuration files, overwriting the original configs on the
system. Instead we move the touch to postinst, which only touches the
existing files (or creates them when they're nonexistent).
2025-03-17 17:03:01 +01:00
flatcar-ci
24d8122b96 New version: main-4274.0.0-nightly-20250314-2100 2025-03-15 02:43:10 +00:00
flatcar-ci
3c0178fb02 New version: main-4274.0.0-nightly-20250314-2100-INTERMEDIATE 2025-03-14 21:00:29 +00:00
Mathieu Tortuyaux
c6b875fdb9
Merge pull request #2748 from flatcar/linux-6.6.83-main
Upgrade Linux Kernel for main from 6.6.82 to 6.6.83
2025-03-14 18:29:20 +01:00
Flatcar Buildbot
a58741ce3f sys-kernel/coreos-sources: Update from 6.6.82 to 6.6.83 2025-03-14 17:28:36 +00:00
Jeremi Piotrowski
88d0c1b2dc
Merge pull request #2694 from flatcar/setup-nvidia-fixes
nvidia.service arm64 support & fixes
2025-03-14 10:57:10 +01:00
Jeremi Piotrowski
e313934fea changelog: Add entries for nvidia.service changes
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
f61987b23c nvidia-drivers: Split amd64 and arm64 driver version
The R535 driver branch, which is LTS, does not compile on arm64 with GCC
14/kernel 6.6. Keep amd64 on R535 and switch arm64 to R570 by default.
R570 is the first driver version that I found that is currently
supported and works for arm64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
73cbffea56 setup-nvidia: Overlay host /lib/modules into devcontainer
So that we can pick-up kmods contained in sysexts (like zfs) and generate
complete module dependency information. I thought we could skip running depmod
for nvidia drivers because we manually insmod them, but nvidia's GPU operator
driver validation expects to be able to run modprobe - so we have to generate
them.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
48e42f8ab6 setup-nvidia: Keep systemd unit when running nspawn container
The nspawn container runs in it's own scope, which journal output is then
associated with. By passing `--keep-unit` we can guarantee that all log output
will stay associated with the nvidia.service and can be viewed by running
`journalctl -u nvidia.service`.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
bfde33bcc3 install-nvidia: Force building proprietary kernel module
Installers for 570 sometimes default to Open drivers, which we can't support
properly at this time. Force proprietary drivers. There are also additional
options that suppress certain worrisome error strings - enable those if
supported too.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
b048140f97 coreos-modules: Cross-compile module build tools
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:51:35 +01:00
Jeremi Piotrowski
3b08a39c46
Merge pull request #2725 from flatcar/t-lo/add-2025-image-signing-subkey
generate_payload: add 2025 image signing subkey
2025-03-14 10:49:17 +01:00
Jeremi Piotrowski
f8b8b8ce40 setup-nvidia: Keep devcontainer image sparse
This saves space at runtime.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:47:10 +01:00
Jeremi Piotrowski
03925e1ca3 setup-nvidia: Make "current" symlink logic more robust
Users have reported that in some cases the nvidia.service fails because
/opt/nvidia/current is a directory and the symbolic link gets created inside
it. I have no idea how we get there, but to make the service robust in the face
of this kind of issue:

- remove the directory if it exists
- use `-T` with ln to ensure that symbolic link creation fails if `current` is a directory

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:47:10 +01:00
Jeremi Piotrowski
3c4c7c6cb0 setup-nvidia: Support aarch64 installer
Use `uname -m` to fetch the correct driver installer for aarch64 or x86_64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2025-03-14 10:47:10 +01:00
flatcar-ci
209c3ab163 New version: main-4273.0.0-nightly-20250313-2100 2025-03-13 21:00:31 +00:00
Dongsu Park
c780966069
Merge pull request #2740 from flatcar/firmware-20250311-main
Upgrade Linux Firmware in main from 20250211 to 20250311
2025-03-13 17:45:56 +01:00
Thilo Fromm
8082f4710d generate_payload: add 2025 image signing subkey
Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2025-03-13 16:52:04 +01:00
Flatcar Buildbot
d90ca1b2e1 sys-kernel/coreos-firmware: Update from 20250211 to 20250311 2025-03-13 07:05:02 +00:00
flatcar-ci
79e8a67860 New version: main-4272.0.0-nightly-20250312-2100 2025-03-12 21:00:26 +00:00