Commit Graph

15 Commits

Author SHA1 Message Date
Mateusz Urbanek
c66e678b2b
docs: add SBOM for container-runtimes
Partial for #10940

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-07-23 16:16:54 +02:00
Dmitrii Sharshakov
da519cf25a
feat: update various extensions
Updated Gvisor, Kata-containers, crun, Glib, Glibc, libseccomp, Open-iSCSI, mdadm, ecr-credential-provider, qemu-guest-agent, tailscale, as well as pkgs and wolfi-base base images
Move all hashes to vars for easier updates
Use tools instead of base
Remove dependency on packages which are in tools

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-03-10 21:23:04 +01:00
Dmitry Sharshakov
5cd226e3ea
chore: build with new toolchain
Move modules, firmware and libraries to accommodate usrmerged rootfs

Only use network where needed via new bldr, pre-download Go dependencies in prepare step, improve Go cache

Bump xen-guest-agent to make it build with current Alpine Rust

Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-02-10 16:00:19 +01:00
Andrey Smirnov
70da87510b
feat: update dependencies
* NVIDIA drivers and container toolkit
* spin
* ecr-credential-helper
* wolfi-base
* LLDPD

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-21 17:49:18 +04:00
Noel Georgi
9c92bda95b
fix: unable to override runtime defaults
This fixes the issue when `.machine.files` using
`/etc/cri/conf.d/20-customization.part` is sometimes unable to merge the
values.

The fix is to prefix the the files with `10-` prefix so the
customization with `20-` takes precedence when merging.

`gvisor-debug` is prefixed with `11-` since it should overwrite the
gvisor defaults. This also fixes where the order of gvisor extensions
mattered previously.

Fixes: #578

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-10 19:10:22 +05:30
Andrey Smirnov
c5fa260bd8
feat: bump dependencies
```
| Package | Update | Change |
|---|---|---|
| [containerd/stargz-snapshotter](https://redirect.github.com/containerd/stargz-snapshotter) | minor | `v0.15.1` -> `v0.16.2` |
| [containers/crun](https://redirect.github.com/containers/crun) | minor | `1.17` -> `1.18.2` |
| git://git.kernel.org/pub/scm/libs/libcap/libcap.git | minor | `2.70` -> `2.72` |
| git://sourceware.org/git/elfutils.git | minor | `0.191` -> `0.192` |
| [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20241007.0` -> `20241118.0` |
| [https://github.com/qemu/qemu.git](https://redirect.github.com/qemu/qemu) | patch | `9.1.0` -> `9.1.2` |
| [https://github.com/spinkube/containerd-shim-spin.git](https://redirect.github.com/spinkube/containerd-shim-spin) | minor | `v0.16.0` -> `v0.17.0` |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | patch | `1.76.0` -> `1.76.6` |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-28 17:52:13 +04:00
Andrey Smirnov
862d0ac63d
feat: update dependencies
```
| Package | Update | Change |
|---|---|---|
| [containers/crun](https://redirect.github.com/containers/crun) | minor | `1.16.1` -> `1.17` |
| [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20240826.0` -> `20241007.0` |
| [https://github.com/spinkube/containerd-shim-spin.git](https://redirect.github.com/spinkube/containerd-shim-spin) | minor | `v0.15.1` -> `v0.16.0` |
| [kubernetes/cloud-provider-aws](https://redirect.github.com/kubernetes/cloud-provider-aws) | patch | `v1.31.0` -> `v1.31.1` |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | minor | `1.72.1` -> `1.76.0` |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-10-18 15:32:24 +04:00
Andrey Smirnov
11f48c567f
fix: image reproducibility with finalize
See https://github.com/tonistiigi/fsutil/issues/207

The result of this issue is that we can't use `finalize` steps where
destination is a directory, so refactor things to pull in such steps
into the `install` step.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-09-16 21:03:24 +04:00
Dmitriy Matrenichev
d6c324dc1f
chore: bump deps
- run rekres
- siderolabs/pkgs to v1.8.0-alpha.0-41-ga97d58f
- golang.org/x/sys to v0.23.0
- linux firmware to 20240709
- google/gvisor to 20240729.0
- cloud-provider-aws to v1.30.3
- containerd-shim-spin to v0.15.1
- qemu to 9.0.2
- glib to 2.81.1
- siderolabs/talos-vmtoolsd to v0.6.0
- tailscale/tailscale to 1.70.0
- util-linux to 2.40.2

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-08-06 22:34:19 +03:00
Andrey Smirnov
ab77645a00
fix: update CRI config parts for containerd config v3
The CRI plugin name got changed.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-07-31 18:40:22 +04:00
Rui Lopes
86511dff5b
chore: update spin extension to v0.15.0
Spin extension update.

Signed-off-by: Rui Lopes <rgl@ruilopes.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-06-30 15:53:14 +04:00
Noel Georgi
d07caf7eed
chore: add extensions validator
Add validation for extensions rootfs and names.

Fixes: #379

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-05-23 21:29:10 +05:30
Rui Lopes
d6f0b54661
chore: update spin extension to v0.14.1
Update spin extension to v0.14.1.

Signed-off-by: Rui Lopes <rgl@ruilopes.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-05-14 16:26:11 +05:30
Kingdon Barrett
76d3797fed
docs: update Spin README.md
Fix title in README.md for Spin runtime.

Signed-off-by: Kingdon Barrett <kingdon+notify@tuesdaystudios.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-04-17 09:04:48 +05:30
Sven Pfennig
213ef326c1
feat: add spin wasm runtime
This commit adds the spin runtime, analogous to the wasmedge runtime, to use Talos Linux with spinkube.dev.

Signed-off-by: Sven Pfennig <s.pfennig@reply.de>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-04-10 16:27:35 +04:00