23028 Commits

Author SHA1 Message Date
Dongsu Park
742241952b profiles: update rsync version to 3.2.6
To address CVE-2022-29154, we need to accept keywords ~amd64 and
~arm64 for rsync 3.2.6.
2022-09-12 11:54:57 +02:00
Dongsu Park
a113b6b50f net-misc/rsync: update to 3.2.6
Update net-misc/rsync to 3.2.6, mainly to address CVE-2022-29154.
2022-09-12 11:52:27 +02:00
flatcar-ci
04ea6a2d95 New version: main-3357.0.0-nightly-20220909-2100 2022-09-09 21:00:28 +00:00
Kai Lüke
ad382857fc
Merge pull request #466 from flatcar-linux/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2022-09-09 12:44:53 +02:00
Flatcar Buildbot
47e060d21b Update mantle container image to latest HEAD 2022-09-08 21:00:41 +00:00
flatcar-ci
3f05f3297d New version: main-3356.0.0-nightly-20220908-2100 2022-09-08 21:00:24 +00:00
Kai Lüke
c6043c5a86
Merge pull request #461 from flatcar-linux/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2022-09-08 15:54:34 +02:00
Flatcar Buildbot
5d4f9700cb Update mantle container image to latest HEAD 2022-09-08 13:07:49 +00:00
Krzesimir Nowak
040d69e700
Merge pull request #464 from flatcar-linux/krnowak/fix-official
bootstrap_sdk_container: Fix a check for an official build
2022-09-08 15:07:32 +02:00
Krzesimir Nowak
27c36a2f5e bootstrap_sdk_container: Fix a check for an official build
It should happen after we had a chance of processing input parameters,
otherwise we were always operating on empty values which resulted in
always having an unofficial build.
2022-09-08 14:57:21 +02:00
Mathieu Tortuyaux
47f20d2dab
Merge pull request #457 from flatcar-linux/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2022-09-08 14:48:26 +02:00
Sayan Chowdhury
6a0d50e64b emerge-gitclone: update workon_commit ref to latest commit
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-09-08 11:35:14 +05:30
Flatcar Buildbot
45b0717ed2 Update mantle container image to latest HEAD 2022-09-07 21:00:49 +00:00
flatcar-ci
38908c0da6 New version: main-3355.0.0-nightly-20220907-2100 2022-09-07 21:00:28 +00:00
Kai Lueke
4ce84b37de Use new website domain
There are redirections for flatcar-linux.org but use the new domain
flatcar.org where possible.
2022-09-07 15:15:14 +02:00
Krzesimir Nowak
0f0d243fea
Merge pull request #452 from flatcar-linux/krnowak/torcx-extra-urls
*: Allow specifying extra URLs for torcx packages
2022-09-07 15:11:06 +02:00
Krzesimir Nowak
5a93f08705 Merge pull request #2130 from flatcar-linux/krnowak/polkit
sys-auth/polkit: Update to 121
2022-09-07 15:06:53 +02:00
Krzesimir Nowak
802b5014bf Merge pull request #355 from flatcar-linux/krnowak/polkit
dev-lang/duktape: Sync with Gentoo
2022-09-07 15:06:39 +02:00
Krzesimir Nowak
69eeeea1e3 Merge pull request #354 from flatcar-linux/krnowak/unzip
Update unzip
2022-09-07 15:06:17 +02:00
Dongsu Park
9063464f0c Merge pull request #2128 from flatcar-linux/runc-1.1.4-main
Upgrade Runc in main from 1.1.3 to 1.1.4
2022-09-07 10:24:22 +02:00
Krzesimir Nowak
1c36811c28 changelog: Add entries 2022-09-06 17:29:06 +02:00
Mathieu Tortuyaux
1a2cc3e309 sys-auth/polkit: Apply Flatcar modifications
- Fix config install paths, use systemd-tmpfiles (all configs should
be installed to /usr and tmpfiles should be used to create and fix
directory permissions instead of the ebuild's postinst.)

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-09-06 17:20:30 +02:00
Krzesimir Nowak
f57c8c8ecd profiles: Drop accept keywords for dev-lang/duktape
It's stable now for both amd64 and arm64.
2022-09-06 17:12:57 +02:00
Krzesimir Nowak
db1ddd19f8 sys-auth/polkit: Sync with Gentoo
It's from Gentoo commit 1c933cc8488a4af530d8a23e8f5b914c1d8e9aa6.
2022-09-06 17:11:58 +02:00
Krzesimir Nowak
cef7bc0107 dev-lang/duktape: Sync with Gentoo
It's from Gentoo commit 8c0df49ac77e2cc9fd33a11d99db49e1931c11a9.
2022-09-06 17:09:21 +02:00
Flatcar Buildbot
2cfbe48ede app-emulation: Upgrade Runc 1.1.3 to 1.1.4 2022-09-06 16:54:16 +02:00
Krzesimir Nowak
ec30b5e03f changelog: Add entries 2022-09-06 16:46:11 +02:00
Krzesimir Nowak
8f6a9d85c4 app-arch/unzip: Sync with Gentoo
It's from Gentoo commit 61c5554abac45ae69690163fdf543b41c8971777.
2022-09-06 16:41:42 +02:00
Krzesimir Nowak
1ecea3544f ci-automation: Change the way we prepare torcx manifest for testing
Now URLs for torcx packages are always present in the torcx manifest,
but for releases they may be pointing to the origin server where the
packages will be eventually uploaded. At the time of running the
tests, those packages are still only in the build cache, so change the
URLs to point to the build cache, so the test can pass.
2022-09-06 14:00:50 +02:00
Krzesimir Nowak
b2d6f7fc6e *: Allow specifying extra URLs for torcx packages
Torcx manifest may contain paths and URLs as locations of
packages. There are two kinds of packages - vendored and
extra. Vendored packages normally have two locations - path to the
directory inside the image where the package is (which is why it's
called vendored), and a URL to the package on some remote
server. Extra packages only have a URL. But the URLs are added only
when we tell the build_torcx_store script to upload the packages at
the same time, which is what the old build pipeline was doing. With
the new pipeline, the upload happens as a separate step, thus the
upload is disabled when invoking build_torcx_store, and so the
packages are not getting URLs set. This change went unnoticed, because
a kola test checking the generated torcx manifest was only checking if
there is at least one location, either path or URL, and all the new
releases have no extra packages, only vendored ones.

When backporting the new pipeline to old LTS, the kola tests started
to fail, because old LTS had one extra package, and this is how I
noticed the problem.
2022-09-06 14:00:50 +02:00
flatcar-ci
6d8d88cbe4 New version: main-3353.0.0-nightly-20220905-2100 2022-09-05 21:00:27 +00:00
Kai Lüke
bcd78fcb5c
Merge pull request #445 from flatcar-linux/kai/release-job
ci-automation: Prepare new release job
2022-09-05 16:09:43 +02:00
Kai Lueke
b30654ef22 ci-automation: Prepare release job
The old pipeline had a release job where mantle's plume release tool
was invoked to publish the cloud images.
Implement a release job in the new pipeline with the same goals and
eventually even more automation.
2022-09-05 11:41:41 +02:00
Kai Lueke
1319e4c95a ci-automation: Move image change report to own file
To review the image changes and the changelog more easily and in case
of fixes, iterate over it without rebuilding the image, move this logic
to its own file where a new job could call it.
2022-09-05 11:41:41 +02:00
Kai Lüke
13c87ba1a3
Merge pull request #447 from flatcar-linux/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2022-09-05 09:33:44 +02:00
Flatcar Buildbot
6dd9a8e681 Update mantle container image to latest HEAD 2022-09-05 07:25:34 +00:00
flatcar-ci
c1bcd1f07c New version: main-3349.0.0-nightly-20220901-2100 2022-09-01 21:00:26 +00:00
Kai Lüke
9aedbcc2c0 Merge pull request #2122 from flatcar-linux/kai/equinix-metal-m3.small
coreos-base/oem-packet: Use i386 serial settings for x86_64 to fix m3
2022-09-01 13:36:10 +02:00
Kai Lüke
7b7c3e5b76
Merge pull request #425 from flatcar-linux/kai/em-m3
Cover Equinix Metal m3.small.x86 instances in release test
2022-09-01 13:34:20 +02:00
Kai Lüke
a791cb8657
Merge pull request #438 from flatcar-linux/kai/allow-id-500
Support running under UID 500
2022-09-01 10:58:56 +02:00
Kai Lüke
9c299a0671
Merge pull request #441 from flatcar-linux/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2022-09-01 10:55:18 +02:00
Flatcar Buildbot
79565dbea2 Update mantle container image to latest HEAD 2022-08-31 21:00:38 +00:00
flatcar-ci
aa714d8394 New version: main-3348.0.0-nightly-20220831-2100 2022-08-31 21:00:25 +00:00
Kai Lueke
834e0c11d7 Support running under UID 500
When started by the Flatcar core user, the SDK failed to use UID 500
because inside the SDK there already is the core user from nss-altfiles
with the same ID. This way, the SDK user was continuing with UID 1000
and had permission errors.
Allow to reuse an existing ID for the SDK user. However, this only
works when usermod doesn't find a process that uses this ID, and we had
a race between the SDK entry points called by "docker start" and by
"docker exec". The race is unwanted anyway because we don't want to
execute the commands while setup_board is still running. Solve it by
setting the entrypoint for "docker start" directly to "bash -l" in
"docker create" (this is also what the entry point does as last step:
sudo su -l).
2022-08-31 15:16:21 +02:00
Kai Lueke
d0ef3dace7 run_sdk_container: Use sdk_entry.sh from repo instead of inbuilt copy
The SDK container has a copy of sdk_entry.sh for standalone use. This
was also used by run_sdk_container which required creating new SDK
container images for changes to take effect.
Use the repository's version from run_sdk_container for fixes to take
effect without requiring new SDK containers.
2022-08-31 14:46:40 +02:00
Kai Lüke
695825b845
Merge pull request #433 from flatcar-linux/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2022-08-31 12:29:09 +02:00
Flatcar Buildbot
e77d8590c1 Update mantle container image to latest HEAD 2022-08-31 10:08:58 +00:00
Krzesimir Nowak
ffa9542e08
Merge pull request #437 from flatcar-linux/krnowak/cleanups
Small cleanups in tests
2022-08-31 12:08:45 +02:00
Krzesimir Nowak
8b52a9b04c ci-automation: Use an array for storing failed tests 2022-08-31 09:37:18 +02:00
Krzesimir Nowak
8cd06230ba ci-automation: Print failed tests nicer
Instead of printing failed tests like this:

    Failed tests: kubeadm.v1.25.0.cilium.base
    kubeadm.v1.24.1.cilium.base

Do it like this:

    Failed tests:
    kubeadm.v1.25.0.cilium.base
    kubeadm.v1.24.1.cilium.base
2022-08-31 09:37:18 +02:00