28291 Commits

Author SHA1 Message Date
Kai Lüke
2ea7f40401
Merge pull request #1560 from simoncampion/add-clevis-krish
Add support for TPM- and Tang-based disk encryption
2024-03-14 12:51:29 +01:00
Simon Campion
2a5917deb9 changelog: add entry for disk encryption 2024-03-14 12:09:16 +01:00
Simon Campion
d02dc2bf52 sys-kernel/bootengine: Add support for disk encryption 2024-03-14 12:09:14 +01:00
Simon Campion
1caa75b66c sys-kernel/coreos-kernel: add dependency to app-crypt/clevis
app-crypt/clevis includes dracut modules that must be installed before the initramfs is built
2024-03-14 12:08:36 +01:00
Simon Campion
e00130883a coreos-base/coreos: add dependency to app-crypt/clevis for disk encryption 2024-03-14 12:08:36 +01:00
Simon Campion
204f809d5b overlay profiles: Add accept keywords for app-crypt/clevis 2024-03-14 12:08:36 +01:00
Simon Campion
069aaf6085 app-crypt/clevis: Apply Flatcar modifications 2024-03-14 12:08:36 +01:00
Simon Campion
e4ebd6c302 app-crypt/clevis: Add from Gentoo 2024-03-14 12:08:36 +01:00
Simon Campion
78be5d5982 overlay profiles: Add accept keywords for dev-libs/luksmeta 2024-03-14 12:08:36 +01:00
Simon Campion
5cc473a5c1 dev-libs/luksmeta: Add from Gentoo
It's from GURU commit 05abdcd720bc767a152082750d9c7a044d638059
2024-03-14 12:08:36 +01:00
Simon Campion
f385595ad1 overlay profiles: Add accept keywords for dev-libs/jose 2024-03-14 12:08:36 +01:00
Simon Campion
1ca55bb8da dev-libs/jose: Add from Gentoo
It's from GURU commit 05abdcd720bc767a152082750d9c7a044d638059
2024-03-14 12:08:35 +01:00
Simon Campion
7e46092fc2 sys-libs/libblockdev: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
f910aca38d sys-libs/cracklib: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
08233eedfb sys-fs/udisks: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
90e1783241 sys-auth/polkit: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
7007d513fe sys-apps/keyutils: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
136fcc4d1f dev-libs/libpwquality: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
c6b88015ea dev-libs/libgudev: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
4c9ea0c483 dev-libs/libbytesize: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
2c26b8efa3 dev-libs/libatasmart: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
5d0e408434 app-crypt/tpm2-tss: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Simon Campion
f71638f7ef app-crypt/tpm2-tools: Add from Gentoo
It's from Gentoo commit 2f6a333fb9bed9c7ab9b5a49065d157b62e48420
2024-03-14 12:08:35 +01:00
Flatcar Buildbot
fae8931aef sys-kernel/coreos-firmware: Update from 20240220 to 20240312 2024-03-14 07:13:42 +00:00
Kai Lüke
e5867917ec
Merge pull request #1742 from flatcar/jepio/zfs-sysext
Build ZFS sysext with each release
2024-03-13 23:24:30 +01:00
Jeremi Piotrowski
3aa9cd21ac changelog: Add entry for zfs sysext
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-13 23:23:44 +01:00
flatcar-ci
344b180b51 New version: main-3908.0.0-nightly-20240313-2100 2024-03-13 21:00:28 +00:00
Jeremi Piotrowski
333e72244d sys-kernel/bootengine: Bump commit for sysext mkdir fix
Fix a missing mkdir of /sysroot/etc/flatcar/sysext from the initrd before
attempting to move sysext files there. Also explicitly omit dracut zfs module
from initrd generation.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-13 18:13:51 +01:00
Jeremi Piotrowski
69c644905f
Merge pull request #1743 from flatcar/emerge-gitclone-license
emerge-gitclone: Fix license information
2024-03-13 15:11:42 +01:00
Jeremi Piotrowski
340e7892b7 emerge-gitclone: Fix license information
emerge-gitclone was never GPL-2.0, it was BSD-3. We're switching it to
Apache-2.0 with this commit.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-13 11:55:30 +01:00
flatcar-ci
ddc48ae1a1 New version: main-3907.0.0-nightly-20240312-2100 2024-03-12 21:00:25 +00:00
Adrian Vladu
89cca15171
Merge pull request #1734 from flatcar/ader1990/decrease_initrd_size_v1
initrd_size_decrease: remove mlxsw_spectrum/mlxsw_core kernel modules
2024-03-12 19:36:29 +02:00
Adrian Vladu
3da9f859be initrd_size_decrease: remove mlxsw_spectrum/mlxsw_core kernel modules
This commit is part of the effort to decrease the initrd size:
Partially-Fixes: https://github.com/flatcar/Flatcar/issues/1381

Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-03-12 16:51:35 +00:00
Jeremi Piotrowski
61c3af32fa
Merge pull request #1730 from flatcar/jepio/btrfs-opt
Mount btrfs fs with rescue= option
2024-03-12 15:05:08 +01:00
Jeremi Piotrowski
24d88e2f61 coreos-base/update_engine: Switch to rescue=nologreplay btrfs option
'norecovery' was deprecated and has been removed in kernel v6.8 so switch to
the new way of doing things.

This pulls in https://github.com/flatcar/update_engine/pull/40.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-12 10:56:15 +01:00
flatcar-ci
9e94b1bde4 New version: main-3906.0.0-nightly-20240311-2100 2024-03-11 21:00:32 +00:00
Jeremi Piotrowski
1ec40b2dac build_library: create_prod_sysexts: Move artifacts to BUILD_DIR
Putting things in a sysexts subdir results in the same layout on
bincache and does not follow the expected url schema for fetching the
sysext.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 21:03:16 +01:00
Jeremi Piotrowski
42ed2d9b7e coreos-kernel.eclass: Install host arch Makefiles into source dir
Gentoo's linux-info.eclass tries to check the kernel version by
including /lib/modules/.../source/Makefile and printing $(VERSION).  It
unsets ARCH= before doing this (no clue why) which works with a full
source tree but not with our minimized one. To fix this we need to
archive arch/x86/Makefile also for arm64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 17:24:24 +00:00
Jeremi Piotrowski
79294342a9 build_library: Place EXTRA_SYSEXTS in a separate file
This allows it to be sourced from other scripts and used e.g. in
generating an image changes summary.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 12:51:09 +00:00
Jeremi Piotrowski
53e164969f ci: Build sysexts together with image
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
87262e4f91 build_library: Add mangle script for zfs sysext
There are two challenges with the sysext: it needs config files in /etc
and it needs udev rules for mounting during boot to work. The etc files
are placed in the standard flatcar etc overlay path but the overlay is
mounted from the initrd. So instead, we create a tmpfiles.d rule that
symlinks the best important files over. For the udev issue, we create a
drop-in in /etc that ensures udev runs after systemd-sysext.

We also can't rely on systemd presets to work, so instead parse the
preset file and statically create the service dependencies. For the
primary zfs.target we rely on an Upholds entry. Users can still disabled
unwanted services if they want.

We also removed unnecessary files:
- development files
- initramfs related scripts

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
6ccd5b6d8f board-packages: Add zfs dep
We need zfs build as a board package so that we can provide a zfs
sysext.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
e8b4b308c9 coreos/config: Add hooks for zfs ebuilds
The zfs-kmod ebuild needs KERNEL_DIR to point to the correct
/lib/modules directory.

The zfs ebuild installs two systemd unit masks to /usr/lib/systemd which
result in "dangling symlink" errors during the image build. These
systemd unit masks are only necessary for old Ubuntu systems that have
sysv-init-systemd compat wrappers.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
bda8148236 .github: Add zfs ebuilds and related eclasses to sync list
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
8e1b1517f9 portage-stable: Add zfs & zfs-kmod ebuilds
From Gentoo commit df182f2891606e757be3e8406a69f4a0e53ee324. Also import
dist-kernel-utils.eclass.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
a4da571874 profiles/coreos: Add zfs useflags
and a package.provided entry for a dependency that we don't need.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
1b4ca8ac27 coreos-base/coreos: Switch to app-alternatives/awk
We explicitly install gawk but our profile explicitly forces the gawk
useflag for app-alternatives/awk.  Some packages, like zfs, depend on
app-alternatives/awk and it also installs the awk -> gawk that the gawk
ebuild creates through pkg_postinst. So switch to app-alternatives/awk
to make the implementation cleaner.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
a134b02a48 coreos-kernel.eclass: Adapt install_build_source for compatibility
build/source, which is accidentally an empty directory, needs to be a
symlink so that Gentoo kmod ebuilds can build when setting
KERNEL_DIR=/lib/modules/.../build. They detect the proper layout with
the symlink.

The other issue is building the Nvidia driver with
SYSSRC=/lib/modules/.../build. This works on Ubuntu but fails on
Flatcar. Ubuntus build directory contains symlinks to includes from the
source tree so recreate the same layout.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
601adeb434 update_ebuilds: Fix support for rsync of eclass
For eclasses we need to skip the mkdir and trailing slash.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00
Jeremi Piotrowski
1bb108e326 build_image: Allow building sysexts for an existing image
by skipping the check for an existing image directory if we're not
building an image. This makes './build_image sysext' work.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-03-11 11:57:45 +00:00