24050 Commits

Author SHA1 Message Date
Kai Lüke
eb3aadda98
Merge pull request #3241 from flatcar/kai/initrd-in-usr
Use a minimal initrd to switch to the full initrd stored in /usr
2025-10-09 07:57:45 +02:00
Kai Lueke
5f1944b072 Use a minimal initrd to switch to the full initrd stored in /usr
The growth of binaries over time and the inclusion of new features
filled the available boot partition space, so that the kernel+initrd
almost couldn't fit twice anymore as required for updates. We employed
workarounds such as wrapper scripts for ignition, afterburn and other
binaries so that they are loaded from /usr. However, this was still not
enough and we would have to do the same for (network) kernel modules and
firmware. To avoid making this ever more complex we can use a dedicated
initrd focused on loading the full initrd from /usr and then this full
initrd can use dracut as before and even drop all the workarounds we
accumulated.

Generate a minimal initrd to use instead of the full bootengine initrd.
The bootengine initrd gets stored as squashfs on /usr. The minimal
initrd still includes the early_cpio for amd64 microcode updates.
We have a fixed list of modules or module directories to include, only
focused on loading /usr and any emergency console interaction. This
requires also checking for module dependencies to copy over.
The busybox, veritysetup, and kmod binaries are needed and get their
required libraries resolved and copied over. They are not static and
use shared libraries which should be ok for now. The resulting vmlinuz
file is 27 MB for amd64, down from ~60 MB, so we have enough room to
include more kernel modules and so on for the next years while we also
grow the boot partition and wait for users to redeploy until we can rely
on a larger boot partition and eventually drop the minimal initrd again.

Pulls in https://github.com/flatcar/bootengine/pull/110 for the
minimal initrd script and https://github.com/flatcar/seismograph/pull/12
for making the device mapper discovery for the "rootdev" command more
reliable.

This also requied a backport of a kernel patch from 2017 that exposes
the PARTUUID in the /sys uevent file.

Co-authored-by: James Le Cuirot <jlecuirot@microsoft.com>
Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-10-09 14:55:52 +09:00
flatcar-ci
ee4b7c936b New version: main-4482.0.0-nightly-20251008-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2025-10-08 21:00:31 +00:00
Krzesimir Nowak
8a095cf544
Merge pull request #3295 from flatcar/buildbot/weekly-portage-stable-package-updates-2025-09-22
Weekly portage-stable package updates 2025-09-22
2025-10-08 08:11:59 +02:00
flatcar-ci
5352f0567e New version: main-4481.0.0-nightly-20251007-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2025-10-07 21:00:31 +00:00
Kai Lueke
1ff7c42ed7 sys-apps/busybox: Import from Gentoo
It's from Gentoo commit 573964683c6f490e3a1ff040ec21c9d3b8d8b154.

Signed-off-by: Kai Lueke <kailuke@microsoft.com>
2025-10-07 23:04:57 +09:00
James Le Cuirot
198eb733d8
Merge pull request #3346 from flatcar/linux-6.12.51-main
Upgrade Linux Kernel for main from 6.12.50 to 6.12.51
2025-10-07 14:30:12 +01:00
Mathieu Tortuyaux
cb2e770a11
Merge pull request #3339 from flatcar/cacerts-3.117-main
Update ca-certificates in main from 3.116 to 3.117
2025-10-07 10:26:31 +02:00
Flatcar Buildbot
27d0051376 sys-kernel/coreos-sources: Update from 6.12.50 to 6.12.51
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-07 07:07:28 +00:00
flatcar-ci
28814816a8 New version: main-4480.0.0-nightly-20251006-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2025-10-06 21:00:27 +00:00
Flatcar Buildbot
207668f640 app-misc/ca-certificates: Update from 3.116 to 3.117
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-06 07:11:58 +00:00
flatcar-ci
fe383ec228 New version: main-4477.0.0-nightly-20251003-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2025-10-04 02:44:33 +00:00
flatcar-ci
059f5e3845 New version: main-4477.0.0-nightly-20251003-2100-INTERMEDIATE
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2025-10-03 21:00:29 +00:00
Flatcar Buildbot
33895aa63e
sys-kernel/coreos-sources: Update from 6.12.49 to 6.12.50
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-03 13:12:26 +02:00
Mathieu Tortuyaux
b9bc40cc2e
Revert "portage-stable/metadata: Monthly GLSA metadata updates"
This reverts commit 9dd978405dd2d335499ce8bf59a8769678359b6e.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2025-10-03 12:57:32 +02:00
Flatcar Buildbot
b897980708 Update mantle container image to latest HEAD
Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 21:00:46 +00:00
flatcar-ci
f2eddff52c New version: main-4476.0.0-nightly-20251002-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2025-10-02 21:00:29 +00:00
James Le Cuirot
beedbca3fe
Merge pull request #3321 from flatcar/buildbot/monthly-glsa-metadata-updates-2025-10-01
Monthly GLSA metadata 2025-10-01
2025-10-02 16:58:56 +01:00
Krzesimir Nowak
c83e4744ac overlay profiles: Add some accept keywords
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-10-02 11:49:35 +02:00
Krzesimir Nowak
21458843c0 overlay profiles: Add accept keywords for net-misc/curl
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-10-02 11:49:35 +02:00
Krzesimir Nowak
b668141d14 overlay profiles: Drop masking of unicode from app-editors/nano
Many things have changed in the way we are building the SDK, and this
specific thing stopped being a problem along the way.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-10-02 11:49:35 +02:00
Krzesimir Nowak
e512763aaa overlay profiles: Add accept keywords for binutils
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-10-02 11:49:10 +02:00
Krzesimir Nowak
617eb8a68e overlay profiles: Sort systemd accept keywords
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2025-10-02 11:48:44 +02:00
Flatcar Buildbot
041b40b0c6 x11-drivers/nvidia-drivers: Sync with Gentoo
It's from Gentoo commit 9959e6da40a274a3b405a6c5bf0f0ccb156c161f.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
c7d73a2d68 virtual/ldb: Sync with Gentoo
It's from Gentoo commit 0e3fd9be1b4b7cfa2d906062aabf114da03abf14.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
2971af0797 sys-libs/tevent: Sync with Gentoo
It's from Gentoo commit 34ebced8d8ba2f722dc6141f63f0a7a74d9b7944.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
c285511073 sys-libs/tdb: Sync with Gentoo
It's from Gentoo commit 77b06a35f6d953826d98441d82cc4fc76d5afb0a.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
a6080dc834 sys-libs/talloc: Sync with Gentoo
It's from Gentoo commit 91e3e204f69696a13560b3bc378463e3e45d0e5b.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
72e43b2a7f sys-libs/readline: Sync with Gentoo
It's from Gentoo commit de8dc0af1de52be670465dc426976c1072ccbea2.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
140e37ed10 sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit 390ba58c130c544f51729eac31bc8d8e66b01883.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
100c04eab9 sys-libs/binutils-libs: Sync with Gentoo
It's from Gentoo commit f3bfbb59d155c2286cf7fcfb8c823582575b90d3.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
8208103e4b sys-kernel/dracut: Sync with Gentoo
It's from Gentoo commit e4e4094036b4f29e127a0a284231ef140b7c641c.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
6bbd4e83fd sys-fs/squashfs-tools: Sync with Gentoo
It's from Gentoo commit 130f3cbc7a9520727cf4739cf012571f8b88d13d.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
37356748e1 sys-fs/inotify-tools: Sync with Gentoo
It's from Gentoo commit 2bc5c20fe023c52c5a72fb48a34e086faf4b3de8.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
d3877004a0 sys-fs/fuse: Sync with Gentoo
It's from Gentoo commit 320c35c90053870c684e3f91aab54a2cf441b4b6.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
a1173d23df sys-fs/e2fsprogs: Sync with Gentoo
It's from Gentoo commit b26d78c25a77ac1b1c5529afcbdf9c4160163565.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
9a9f56e3e5 sys-fs/cryptsetup: Sync with Gentoo
It's from Gentoo commit dac607e46a25eae590c111b7be91a3a0be4a3c46.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
bdf95d9e2c sys-fs/btrfs-progs: Sync with Gentoo
It's from Gentoo commit a9875cf7829a2aa090423891a0cde48aaf5cf3af.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
22a6f2a3fb sys-devel/gcc: Sync with Gentoo
It's from Gentoo commit 91c03700a79309adc92c246b638b489b7012a841.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
19c4617fee sys-devel/binutils: Sync with Gentoo
It's from Gentoo commit b1123281aa2233f74003500c510cb504a5838efe.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
daaf83b7ee sys-auth/polkit: Sync with Gentoo
It's from Gentoo commit ae37e3f389808700bd0f4343ee04888f0ef179d2.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
28fb46a95d sys-apps/sed: Sync with Gentoo
It's from Gentoo commit 649663f64ecf8c578e88125841fcd1b2ca9f6bdc.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
bb0b4db9f5 sys-apps/portage: Sync with Gentoo
It's from Gentoo commit 58ecc34767a360fb377eb88b45c73d0e5a72f4fc.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
448d2d4211 sys-apps/locale-gen: Sync with Gentoo
It's from Gentoo commit d8be6f6a57289e5adda8264737fbf6bf7197efeb.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
26b31f22b1 sys-apps/kbd: Sync with Gentoo
It's from Gentoo commit 612ed11aed9a36a04e606099db55dc301fd598ab.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
c4315caf69 sys-apps/hwdata: Sync with Gentoo
It's from Gentoo commit e94c78a7b5c35cfd4ed1e21043857b30a1ce5242.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
e9b641ce03 sys-apps/grep: Sync with Gentoo
It's from Gentoo commit 89f74e3f499eca1bbf1ec6960e44b70e6a637044.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
f2676172c2 sys-apps/findutils: Sync with Gentoo
It's from Gentoo commit 996847ecc26de0ca2b7d4cd7bf4218159e9706ec.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
97429c18f3 sys-apps/file: Sync with Gentoo
It's from Gentoo commit 0a069ac30646256087c5e40eaae4963cfe8ec9cf.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00
Flatcar Buildbot
648989052d sys-apps/coreutils: Sync with Gentoo
It's from Gentoo commit 5291f9eef355ea4562f87b40d6ccf92509148f50.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
2025-10-02 11:44:20 +02:00