Commit Graph

249 Commits

Author SHA1 Message Date
Jeremi Piotrowski
a23e5bbed2
Merge pull request #2299 from flatcar/jepio+sayan/sboot-lockdown
secure boot: lockdown, grub fallback, CI
2024-09-17 13:55:49 +02:00
James Le Cuirot
ea395fe5c9
Merge pull request #2318 from flatcar/chewi/grub-2.12
sys-boot/grub: Move to portage-stable, bump to 2.12
2024-09-17 10:31:03 +01:00
Jeremi Piotrowski
fd54cca8ec Switch remaining uses of QEMU_UEFI_BIOS to QEMU_UEFI_FIRMWARE
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-09-17 11:01:06 +02:00
Krzesimir Nowak
b108abf170 .github: Follow-up fix for missing app-emulation/hv-daemons 2024-09-16 16:53:15 +02:00
Krzesimir Nowak
475cb08109
.github: Make app-emulation/hv-daemons a relative link
Co-authored-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-09-16 15:23:48 +02:00
Krzesimir Nowak
90388548d1 .github: Handle missing app-emulation/hv-daemons
LTS channel has no such package, so the action for finding the kernel
update was failing. Fix it by updating the package only if it exists.
2024-09-16 12:20:56 +02:00
Thilo Fromm
32c40fa1cb
oem-azure: add hyperv daemons (#2309)
* oem-azure: add hyperv daemons

This change adds hyperv daemons hv_fcopy, hv_kvp, and hv_vss to the
Azure and HyperV OEM sysexts. hv_kvp specifically is needed to submit OS version
information to the Azure hypervisor.

The daemons, tough userspace programs, are built from the kernel sources
as they are included in the Linux kernel.

As the ebuild is (somewhat)  kernel specific, it should be updated when the kernel
is updated. Respective additions have been made to the kernel update GitHub actions
automation.

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
Co-authored-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-09-12 16:37:25 +02:00
James Le Cuirot
9d2026b40e
sys-boot/grub: Move to portage-stable, bump to 2.12
We can now use Gentoo's upstream ebuild, save for a few small overrides
in a separate env file.

This bumps GRUB from 2.06 to 2.12, The existing two Flatcar patches have
been rebased.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-09-12 11:55:22 +01:00
Krzesimir Nowak
788535918b .github: Add new packages to automation 2024-09-04 14:44:38 +02:00
Krzesimir Nowak
f9d68df8dc
Merge pull request #2204 from flatcar/krnowak/add-buildx
Add app-containers/docker-buildx
2024-09-03 15:07:50 +02:00
James Le Cuirot
40e1c0e2b9
sys-block/open-iscsi: Migrate coreos-stable to portage-stable, 2.1.10
The old version 2.1.4 does not cross-compile without help from QEMU that
we cannot rely on going forwards. 2.1.10 is Meson-based and handles this
much better.

Rather than update the package in-place, migrate it to portage-stable
and cover the differences with a small patch and env script.

Upstream now carries the systemd files, so we do not need to add these.

/etc is now automatically moved to /usr/share/flatcar/etc, so we no
longer need any special handling for that here, but I have added a
compatibility symlink for iscsid.conf.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-09-02 13:22:45 +01:00
Krzesimir Nowak
4f62b200f9 .github: Add app-containers/docker-buildx to automation 2024-09-02 14:05:56 +02:00
James Le Cuirot
99543e30c6
Update .github/workflows/portage-stable-packages-list
Co-authored-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-08-26 10:41:54 +01:00
James Le Cuirot
0fd0ea6dc2
azure-nvme-utils: Migrate coreos-overlay to portage-stable, 0.2.0 bump
The coreos-overlay package under app-admin was written by Jeremi around
the same time I added it to Gentoo under sys-apps. It has had a new
release since.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-08-23 16:06:41 +01:00
Krzesimir Nowak
5ca1dfc47d
.github: Drop removed eclasses from automation 2024-08-23 13:24:17 +01:00
Krzesimir Nowak
6e9797482d
Merge pull request #2214 from flatcar/krnowak/rest-automation
Put rest of the packages in portage-stable under automation
2024-08-21 13:13:11 +02:00
Krzesimir Nowak
2777506332 .github: Add new packages to automation 2024-08-19 15:34:07 +02:00
Krzesimir Nowak
6a234ef713 .github: Add rest of the packages under automation 2024-08-16 15:54:10 +02:00
James Le Cuirot
8e5b5af225
dev-lang/rust: Drop our custom package in favour of upstream Gentoo's
It is not clear why this was forked originally. One reason was to avoid
the sys-apps/lsb-release dependency, but it probably wasn't just that.
It seems likely that the upstream package did not support cross targets
at the time. Now it does.

It appears that LTO was previously enabled by us following Gentoo rather
than through an explicit decision. They now disable it by default, so we
do likewise. It previously used "fat" LTO, which makes Rust especially
slow to build and reportedly made rustc slower than with "thin" LTO!
There seems little benefit in using thin LTO given that we rebuild Rust
almost as much as the packages that use it, plus we don't enable LTO
anywhere else.

We still avoid rustdoc to keep the size down using INSTALL_MASK. This
isn't as good as not building it in the first place, but this alone
isn't worth keeping a fork.

Cross targets are now handled via the admittedly experimental
RUST_CROSS_TARGETS support. This has been in place for a while, and I
think it is fairly widely used now. If it does disappear, it would
almost certainly be for something even better.

This also updates Rust from 1.80.0 to 1.80.1.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-08-15 16:54:11 +01:00
James Le Cuirot
b88b31acb9
sys-apps/lsb-release: Import from Gentoo
We have previously avoided this package because its /etc/lsb-release
clashes with the symlink created by our sys-apps/baselayout. This has
led to the need to fork some packages, such as dev-lang/rust, just to
avoid the dependency.

Instead, we can just stop it from installing /etc/lsb-release with
INSTALL_MASK. I also considered having it create the symlink instead of
baselayout, but baselayout has the tmpfiles.d handling, so this is
simpler.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-08-15 13:51:08 +01:00
Krzesimir Nowak
95079d4b23 .github: Drop dev-lang/lua from automation 2024-08-09 14:12:26 +02:00
Krzesimir Nowak
69b292bdc5 .github: Drop nmap from automation, add openbsd-netcat to it 2024-08-09 14:12:26 +02:00
Krzesimir Nowak
03b25f48f2 .github: Add new eclasses to automation 2024-08-08 12:50:28 +02:00
Krzesimir Nowak
71dacd8477 .github: Add dev-* packages to automation 2024-08-06 17:11:50 +02:00
Krzesimir Nowak
7aa0166ea2
Merge pull request #2167 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-07-29
Weekly portage-stable package updates 2024-07-29
2024-08-05 16:36:47 +02:00
James Le Cuirot
7d85ee75da
Skip Catalyst stage2 as recommended by upstream Gentoo
From https://wiki.gentoo.org/wiki/Catalyst/Stage_Creation#Build_Stage3:

> It is not necessary to build stage2 in order to build stage3. Gentoo
> release engineering does not build stage2, and you should not need to
> unless you're intentionally building a stage2 as your goal.

We can now sync portage-stable/scripts with upstream because
bootstrap.sh is only used during stage2, and the changes we had are no
longer relevant. It seems likely the changes were already redundant
anyway.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-08-01 13:31:56 +01:00
Krzesimir Nowak
94d1bb3920 .github: Add sys-fs/btrfs-progs to automation 2024-08-01 12:57:34 +02:00
James Le Cuirot
36d0432a20
Add Catalyst 4 dependencies to package automation list
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-07-17 11:31:43 +01:00
Mathieu Tortuyaux
199c24da65
.github: add selinux-policykit to portage-stable-packages-list
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-16 12:38:06 +02:00
Krzesimir Nowak
2719ff020b
.github: Drop unused packages from automation 2024-07-16 09:38:12 +02:00
Krzesimir Nowak
2db5584138
.github: Add new package to automation 2024-07-16 09:38:10 +02:00
Krzesimir Nowak
1f6b7bac4b
.github: Add new package to automation 2024-07-16 09:38:10 +02:00
Krzesimir Nowak
7d85d23bcf
.github: Add new eclass to automation 2024-07-16 09:38:09 +02:00
Krzesimir Nowak
1bba36be7e
.github: Add new eclass to automation 2024-07-16 09:38:09 +02:00
Krzesimir Nowak
8a4e806555
.github: Add more packages under automation 2024-07-16 09:38:09 +02:00
Krzesimir Nowak
1f6bf4634b
.github: Add new packages to automation 2024-07-16 09:38:07 +02:00
Krzesimir Nowak
e040c30c69
.github: Drop unused package from automation 2024-07-16 09:38:06 +02:00
Mathieu Tortuyaux
3d5cc805be
.github: add dev-lang/nasm to portage-stable-packages-list
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-08 10:25:41 +02:00
Sayan Chowdhury
0df428fc19
.github: Add the net-misc/openssh package into automation
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-07-01 19:33:38 +05:30
James Le Cuirot
12ce55a392
Drop the dev-vcs/repo tool now that cros_workon no longer uses it
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-06-21 10:47:54 +01:00
Adrian Vladu
7e1045bb1a
Merge pull request #2027 from flatcar/ader1990/netperf_upstream_mit_license
netperf: use the MIT licensed version
2024-06-20 11:53:21 +03:00
Adrian Vladu
2d29eaa777 net-analyzer/netperf: use the MIT licensed version
As the net-analyzer/netperf stable version does not have a clear
License, the upstream Gentoo package has a masked ebuild that uses the
source from Github commit:
3bc455b23f

This change unmasks netperf-2.7.0_p20210121 for amd64 and arm64, in
order to use the MIT licensed version of netperf.

Also, added netperf to the github actions sync list so that it gets
automatically synced with the upstream Gentoo.

Fixes: https://github.com/flatcar/Flatcar/issues/1459

Signed-off-by: Adrian Vladu <avladu@cloudbasesolutions.com>
2024-06-19 09:00:54 +03:00
James Le Cuirot
e90451ff2b
rust-toolchain.eclass: Sync with Gentoo
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-06-17 10:44:41 +01:00
Jendrik Weise
64c9ed5820 sysext: Add python sysext
Minimal sysext containing dev-lang/python and dev-python/pip.
Enabled ensurepip for python and added required packages from Gentoo.
2024-05-29 19:18:18 +02:00
Krzesimir Nowak
0b0991e007 .github: Add sys-libs/libxcrypt to automation 2024-05-23 11:19:30 +02:00
Jendrik Weise
cd849d6849 sysext: Add podman sysext
Enabled user session dbus in base image to support podman rootless mode.
Extension images can now be created from multiple packages by seperating
them with a comma. The podman sysext includes app-containers/podman and
net-misc/passt.
It can be enabled by adding podman to /etc/flatcar/enabled-sysext.conf.
Potential TODO: gpgme had to be added as BDEPEND to podman ebuild.
2024-05-03 22:59:36 +09:00
Kai Lueke
5055ad99bb .github: Add Flatcar extensions to vm-images artifact
The Flatcar extensions get built by the GitHub PR CI but only their
content files get archived. Add the .raw image itself so that one can
copy it into the image (downloading it at boot time won't work because
this uses bincache - so one could get an extension image in case the but
version happens to match but it won't be the one that was built in the
GitHub CI).
2024-05-02 19:05:15 +09:00
Kai Lueke
526b889678 .github: Disable debug output for image-changes
The "set -x" bash debug output is very noisy and one doesn't even see
the actual output in this noise.
2024-04-15 22:08:18 +09:00
Krzesimir Nowak
f2f4b8b583 .github: Drop unused packages from automation 2024-04-11 12:39:59 +02:00
Kai Lueke
f5a172deb8 .github: Add flatcar_production_qemu.sh to generic image zip
When downloading the generic image to run a test it would be nice to
have the qemu script in the zip bundle.
2024-04-10 20:37:42 +09:00