12 Commits

Author	SHA1	Message	Date
Andrey Smirnov	263f699ea4	chore: annotate extensions with tiers ... Fixes #10940 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2025-08-26 20:58:30 +04:00
Mateusz Urbanek	c66e678b2b	docs: add SBOM for container-runtimes ... Partial for #10940 Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>	2025-07-23 16:16:54 +02:00
Dmitrii Sharshakov	da519cf25a	feat: update various extensions ... Updated Gvisor, Kata-containers, crun, Glib, Glibc, libseccomp, Open-iSCSI, mdadm, ecr-credential-provider, qemu-guest-agent, tailscale, as well as pkgs and wolfi-base base images Move all hashes to vars for easier updates Use tools instead of base Remove dependency on packages which are in tools Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>	2025-03-10 21:23:04 +01:00
Dmitry Sharshakov	5cd226e3ea	chore: build with new toolchain ... Move modules, firmware and libraries to accommodate usrmerged rootfs Only use network where needed via new bldr, pre-download Go dependencies in prepare step, improve Go cache Bump xen-guest-agent to make it build with current Alpine Rust Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>	2025-02-10 16:00:19 +01:00
Noel Georgi	9c92bda95b	fix: unable to override runtime defaults ... This fixes the issue when `.machine.files` using `/etc/cri/conf.d/20-customization.part` is sometimes unable to merge the values. The fix is to prefix the the files with `10-` prefix so the customization with `20-` takes precedence when merging. `gvisor-debug` is prefixed with `11-` since it should overwrite the gvisor defaults. This also fixes where the order of gvisor extensions mattered previously. Fixes: #578 Signed-off-by: Noel Georgi <git@frezbo.dev>	2025-01-10 19:10:22 +05:30
Andrey Smirnov	e5544b5363	feat: update dependencies ... ``` | Package | Type | Update | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---|---|---| | cgr.dev/chainguard/wolfi-base | | digest | `8dd9cea` -> `3b271f8` | | | | | | [containerd/stargz-snapshotter](https://redirect.github.com/containerd/stargz-snapshotter) | | patch | `v0.16.2` -> `v0.16.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [containers/crun](https://redirect.github.com/containers/crun) | | minor | `1.18.2` -> `1.19.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | git://git.kernel.org/pub/scm/libs/libcap/libcap.git | | minor | `2.72` -> `2.73` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | golang.org/x/sys | require | minor | `v0.27.0` -> `v0.28.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [https://github.com/containerd/runwasi.git](https://redirect.github.com/containerd/runwasi) | | minor | `v0.4.0` -> `v0.5.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [https://github.com/qemu/qemu.git](https://redirect.github.com/qemu/qemu) | | minor | `9.1.2` -> `9.2.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [https://gitlab.gnome.org/GNOME/glib.git](https://gitlab.gnome.org/GNOME/glib) | | minor | `2.82.0` -> `2.83.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [kubernetes/cloud-provider-aws](https://redirect.github.com/kubernetes/cloud-provider-aws) | | patch | `v1.31.1` -> `v1.31.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [open-iscsi/open-isns](https://redirect.github.com/open-iscsi/open-isns) | | minor | `0.102` -> `0.103` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [siderolabs/talos-metal-agent](https://redirect.github.com/siderolabs/talos-metal-agent) | | patch | `v0.1.0-beta.0` -> `v0.1.0-beta.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | | minor | `1.76.6` -> `1.78.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ``` Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-12-26 16:20:59 +04:00
Andrey Smirnov	c5fa260bd8	feat: bump dependencies ... ``` | Package | Update | Change | |---|---|---| | [containerd/stargz-snapshotter](https://redirect.github.com/containerd/stargz-snapshotter) | minor | `v0.15.1` -> `v0.16.2` | | [containers/crun](https://redirect.github.com/containers/crun) | minor | `1.17` -> `1.18.2` | | git://git.kernel.org/pub/scm/libs/libcap/libcap.git | minor | `2.70` -> `2.72` | | git://sourceware.org/git/elfutils.git | minor | `0.191` -> `0.192` | | [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20241007.0` -> `20241118.0` | | [https://github.com/qemu/qemu.git](https://redirect.github.com/qemu/qemu) | patch | `9.1.0` -> `9.1.2` | | [https://github.com/spinkube/containerd-shim-spin.git](https://redirect.github.com/spinkube/containerd-shim-spin) | minor | `v0.16.0` -> `v0.17.0` | | [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | patch | `1.76.0` -> `1.76.6` | ``` Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-11-28 17:52:13 +04:00
Andrey Smirnov	862d0ac63d	feat: update dependencies ... ``` | Package | Update | Change | |---|---|---| | [containers/crun](https://redirect.github.com/containers/crun) | minor | `1.16.1` -> `1.17` | | [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20240826.0` -> `20241007.0` | | [https://github.com/spinkube/containerd-shim-spin.git](https://redirect.github.com/spinkube/containerd-shim-spin) | minor | `v0.15.1` -> `v0.16.0` | | [kubernetes/cloud-provider-aws](https://redirect.github.com/kubernetes/cloud-provider-aws) | patch | `v1.31.0` -> `v1.31.1` | | [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | minor | `1.72.1` -> `1.76.0` | ``` Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-10-18 15:32:24 +04:00
Andrey Smirnov	11f48c567f	fix: image reproducibility with finalize ... See https://github.com/tonistiigi/fsutil/issues/207 The result of this issue is that we can't use `finalize` steps where destination is a directory, so refactor things to pull in such steps into the `install` step. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-09-16 21:03:24 +04:00
Andrey Smirnov	4563de58b2	feat: bump dependencies ... Rekres, bump Go deps. ``` | Package | Update | Change | |---|---|---| | [containers/crun](https://togithub.com/containers/crun) | patch | `1.16` -> `1.16.1` | | [intel/Intel-Linux-Processor-Microcode-Data-Files](https://togithub.com/intel/Intel-Linux-Processor-Microcode-Data-Files) | minor | `20240531` -> `20240813` | | [kubernetes/cloud-provider-aws](https://togithub.com/kubernetes/cloud-provider-aws) | minor | `v1.30.3` -> `v1.31.0` | | [tailscale/tailscale](https://togithub.com/tailscale/tailscale) | minor | `1.70.0` -> `1.72.1` | | cgr.dev/chainguard/wolfi-base | | digest | `bf0547b` -> `72c8bfe` | ``` Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-08-29 18:49:30 +04:00
Noel Georgi	03337d706d	chore: bump deps ... Bump more missing deps and fix release notes and renovate config. Signed-off-by: Noel Georgi <git@frezbo.dev>	2024-08-07 19:03:55 +05:30
Henrik Gerdes	26c505db8c	feat: add crun container-runtime extension ... This adds the crun CRI implementation as an optional system extension Signed-off-by: Henrik Gerdes <hegerdes@outlook.de> Signed-off-by: Noel Georgi <git@frezbo.dev>	2024-08-02 19:42:13 +05:30