Mateusz Urbanek
efcb066a66
docs: add SBOM for more extensions
...
Partial for #10940
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-07-31 16:17:06 +02:00
Noel Georgi
f9b5bf630d
fix: nvidia builds
...
`libtirpc` fails to build with newer gcc-15 from wolfi-base. Pin to use
`gcc-14`.
Fixes : #719
Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-06-02 20:53:02 +05:30
Andrey Smirnov
f632ef9687
feat: bump dependencies
...
```
| Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|
| cgr.dev/chainguard/wolfi-base | | digest | `de8e5bd` -> `e3ce0a3` | | | | |
| git://git.kernel.org/pub/scm/libs/libcap/libcap.git | | minor | `2.75` -> `2.76` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| git://git.kernel.org/pub/scm/utils/mdadm/mdadm.git | | minor | `4.3` -> `4.4` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| git://sourceware.org/git/elfutils.git | | minor | `0.192` -> `0.193` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| golang.org/x/sys | require | minor | `v0.32.0` -> `v0.33.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [google/gvisor](https://redirect.github.com/google/gvisor ) | | minor | `20250331.0` -> `20250505.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [https://github.com/qemu/qemu.git ](https://redirect.github.com/qemu/qemu ) | | major | `9.2.3` -> `10.0.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [kata-containers/kata-containers](https://redirect.github.com/kata-containers/kata-containers ) | | minor | `3.15.0` -> `3.16.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [kubernetes/cloud-provider-aws](https://redirect.github.com/kubernetes/cloud-provider-aws ) | | minor | `v1.32.2` -> `v1.33.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [libfuse/libfuse](https://redirect.github.com/libfuse/libfuse ) | | patch | `3.17.1` -> `3.17.2` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [networkupstools/nut](https://redirect.github.com/networkupstools/nut ) | | patch | `2.8.2` -> `2.8.3` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [nvidia/libnvidia-container](https://redirect.github.com/nvidia/libnvidia-container ) | | patch | `v1.17.5` -> `v1.17.6` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [nvidia/nvidia-container-toolkit](https://redirect.github.com/nvidia/nvidia-container-toolkit ) | | patch | `v1.17.5` -> `v1.17.6` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale ) | | patch | `1.82.0` -> `1.82.5` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
```
NVIDIA LTS: 535.247.01
NVIDIA Production: 570.133.20
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-05-08 20:16:40 +04:00
Dmitrii Sharshakov
da519cf25a
feat: update various extensions
...
Updated Gvisor, Kata-containers, crun, Glib, Glibc, libseccomp, Open-iSCSI, mdadm, ecr-credential-provider, qemu-guest-agent, tailscale, as well as pkgs and wolfi-base base images
Move all hashes to vars for easier updates
Use tools instead of base
Remove dependency on packages which are in tools
Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-03-10 21:23:04 +01:00
Dmitry Sharshakov
8591d3c8ba
fix: update NVIDIA runtime and make its CLI build with current Go
...
Go 1.24 update in Wolfi made this not build due to deprecation of older language features apparently.
Before the fix is upstreamed keep it in-tree, remove when it lands in a tagged release.
Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-02-13 10:49:02 +01:00
Dmitry Sharshakov
5cd226e3ea
chore: build with new toolchain
...
Move modules, firmware and libraries to accommodate usrmerged rootfs
Only use network where needed via new bldr, pre-download Go dependencies in prepare step, improve Go cache
Bump xen-guest-agent to make it build with current Alpine Rust
Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-02-10 16:00:19 +01:00
Andrey Smirnov
70da87510b
feat: update dependencies
...
* NVIDIA drivers and container toolkit
* spin
* ecr-credential-helper
* wolfi-base
* LLDPD
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-21 17:49:18 +04:00
Andrey Smirnov
e5544b5363
feat: update dependencies
...
```
| Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|
| cgr.dev/chainguard/wolfi-base | | digest | `8dd9cea` -> `3b271f8` | | | | |
| [containerd/stargz-snapshotter](https://redirect.github.com/containerd/stargz-snapshotter ) | | patch | `v0.16.2` -> `v0.16.3` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [containers/crun](https://redirect.github.com/containers/crun ) | | minor | `1.18.2` -> `1.19.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| git://git.kernel.org/pub/scm/libs/libcap/libcap.git | | minor | `2.72` -> `2.73` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| golang.org/x/sys | require | minor | `v0.27.0` -> `v0.28.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [https://github.com/containerd/runwasi.git ](https://redirect.github.com/containerd/runwasi ) | | minor | `v0.4.0` -> `v0.5.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [https://github.com/qemu/qemu.git ](https://redirect.github.com/qemu/qemu ) | | minor | `9.1.2` -> `9.2.0` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [https://gitlab.gnome.org/GNOME/glib.git ](https://gitlab.gnome.org/GNOME/glib ) | | minor | `2.82.0` -> `2.83.2` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [kubernetes/cloud-provider-aws](https://redirect.github.com/kubernetes/cloud-provider-aws ) | | patch | `v1.31.1` -> `v1.31.4` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [open-iscsi/open-isns](https://redirect.github.com/open-iscsi/open-isns ) | | minor | `0.102` -> `0.103` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [siderolabs/talos-metal-agent](https://redirect.github.com/siderolabs/talos-metal-agent ) | | patch | `v0.1.0-beta.0` -> `v0.1.0-beta.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale ) | | minor | `1.76.6` -> `1.78.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-26 16:20:59 +04:00
Noel Georgi
4168af94f2
chore: bump nvidia toolkit
...
Bump NVIDIA toolkit to `v.17.2`.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-11-28 23:57:40 +05:30
Andrey Smirnov
c5fa260bd8
feat: bump dependencies
...
```
| Package | Update | Change |
|---|---|---|
| [containerd/stargz-snapshotter](https://redirect.github.com/containerd/stargz-snapshotter ) | minor | `v0.15.1` -> `v0.16.2` |
| [containers/crun](https://redirect.github.com/containers/crun ) | minor | `1.17` -> `1.18.2` |
| git://git.kernel.org/pub/scm/libs/libcap/libcap.git | minor | `2.70` -> `2.72` |
| git://sourceware.org/git/elfutils.git | minor | `0.191` -> `0.192` |
| [google/gvisor](https://redirect.github.com/google/gvisor ) | minor | `20241007.0` -> `20241118.0` |
| [https://github.com/qemu/qemu.git ](https://redirect.github.com/qemu/qemu ) | patch | `9.1.0` -> `9.1.2` |
| [https://github.com/spinkube/containerd-shim-spin.git ](https://redirect.github.com/spinkube/containerd-shim-spin ) | minor | `v0.16.0` -> `v0.17.0` |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale ) | patch | `1.76.0` -> `1.76.6` |
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-28 17:52:13 +04:00
Noel Georgi
37f2297e6b
feat: support lts and production nvidia modules
...
Support LTS and production versions of NVIDIA kernel modules as per https://docs.nvidia.com/datacenter/tesla/drivers/index.html#lifecycle
Part of: https://github.com/siderolabs/talos/issues/9086
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-08-06 22:31:38 +05:30
Noel Georgi
d6773dd25a
chore: bump deps
...
Bump dependencies
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-07-05 16:07:09 +05:30
Noel Georgi
5334e89374
fix: glibc search paths for nvidia
...
Set `glibc/lib` as first `rpath` for `nvidia-container-cli`. Also
install nvidia libraries to `/usr/local/glibc/lib` so any musl libraries
lives separately.
`nvidia-container-cli` explicitly sets an `RPATH` as `$ORIGIN/../$LIB` here:
https://gitlab.com/nvidia/container-toolkit/libnvidia-container/-/blob/v1.14.6/Makefile?ref_type=tags#L183 ,
this means `/usr/local/lib` would be searched first, since `zfs` and
nvidia ship their own `libtirpc`, `nvidia-container-cli` first tries to
use the `libtirpc` shippeed with `zfs` at `/usr/local/lib` instead of
the one at `/usr/local/glibc/lib`. Fix this by setting an additional
`RPATH` as `$ORIGIN/../glibc/$LIB`, so that libraries in
`/usr/local/glibc/lib` have higher preference.
```bash
❯ scanelf -r _out/rootfs/rootfs/usr/local/bin/nvidia-container-cli
TYPE RPATH FILE
ET_DYN $ORIGIN/../glibc/$LIB:$ORIGIN/../$LIB _out/rootfs/rootfs/usr/local/bin/nvidia-container-cli
```
Properly fixes : #380
Fixes from #401 and #410 were not complete.
Manually tested by spinning up a NVIDIA worker in AWS.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-06-24 14:15:15 +05:30
Noel Georgi
3526f4507a
fix: zfs extensions with nvidia
...
Introduce a proper fix for #401 , keep musl path's as is, and use
`/usr/local/glibc` as install path for all glibc related stuff so that
any new common libraries will not cause an issue in the future.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-06-12 16:00:09 +08:00
Noel Georgi
4ed9ee5849
fix: zfs-tools libtirpc path
...
Use a custom path for libtirpc shipped with zfs-tools so that it doesn't
conflict with libtirpc built for nvidia-container-toolkit (as it's
linked against glibc).
Fixes : #380
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-06-07 21:58:38 +08:00
Noel Georgi
eb79cf81c2
chore: bump dependencies
...
Bump dependencies and bring in stable pkgs.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-04-02 19:17:14 +05:30
Andrey Smirnov
ba40f6e508
feat: update Go to 1.22.1, update releases
...
```
| Package | Update | Change |
|---|---|---|
| git://git.kernel.org/pub/scm/utils/mdadm/mdadm.git | minor | `4.2` -> `4.3` |
| git://sourceware.org/git/elfutils.git | minor | `0.190` -> `0.191` |
| [https://github.com/qemu/qemu.git ](https://togithub.com/qemu/qemu ) | patch | `8.2.1` -> `8.2.2` |
| [tailscale/tailscale](https://togithub.com/tailscale/tailscale ) | patch | `1.60.0` -> `1.60.1` |
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-03-07 16:02:21 +04:00
Noel Georgi
9cdf805a5d
chore: bump dependencies
...
Bump dependencies.
Use [go1.20 for building nvidia stuff](https://github.com/NVIDIA/nvidia-container-toolkit/issues/372 ).
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-02-21 23:47:01 +05:30
Andrey Smirnov
9105eef354
feat: bump dependencies
...
```
| Package | Update | Change |
|---|---|---|
| git://sourceware.org/git/elfutils.git | minor | `0.189` -> `0.190` |
| [https://github.com/qemu/qemu.git ](https://togithub.com/qemu/qemu ) | patch | `8.1.2` -> `8.1.3` |
| [nvidia/open-gpu-kernel-modules](https://togithub.com/nvidia/open-gpu-kernel-modules ) | minor | `535.54.03` -> `535.129.03` |
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2023-11-28 22:27:45 +04:00
Noel Georgi
7c68b1b932
chore: use kres to manage project
...
Move to using kres to manage project.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-11-03 19:00:52 +05:30
Noel Georgi
a5c0b0086b
chore: revert nvidia bumps from #220
...
Revert nvidia bumps from #220 . The extensions-test fail and there's not
much debug info available for now.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-09-05 19:18:06 +05:30
Noel Georgi
d9145f9b6b
chore: bump deps
...
| Package | Update | Change |
|---|---|---|
| [https://github.com/qemu/qemu.git ](https://togithub.com/qemu/qemu ) | minor | `8.0.2` -> `v8.1.0` |
| [https://gitlab.com/nvidia/container-toolkit/container-toolkit.git ](https://gitlab.com/nvidia/container-toolkit/container-toolkit ) | minor | `v1.13.5` -> `v1.14.0` |
| [https://gitlab.com/nvidia/container-toolkit/libnvidia-container.git ](https://gitlab.com/nvidia/container-toolkit/libnvidia-container ) | minor | `v1.13.5` -> `v1.14.0` |
| [https://gitlab.gnome.org/GNOME/glib.git ](https://gitlab.gnome.org/GNOME/glib ) | minor | `2.76.3` -> `2.77.3` |
| [siderolabs/bldr](https://togithub.com/siderolabs/bldr ) | patch | `v0.2.0` -> `v0.2.1` |
| [tailscale/tailscale](https://togithub.com/tailscale/tailscale ) | minor | `1.46.1` -> `1.48.1` |
Also fix the wolfi-base variable to get renovate updates.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-09-04 23:37:48 +05:30
Noel Georgi
d4d42e52d9
feat: use wolfi as base for nvidia
...
Use wolfi base as toolchain for NVIDIA build.
This removes a lot of hacks and patches we maintain.
Fixes : #171
Fixes: https://github.com/siderolabs/pkgs/issues/720
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-08-02 21:36:00 +05:30
Noel Georgi
130ebd5798
chore: bump deps
...
Bump dependencies.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-03-22 23:34:00 +05:30
Noel Georgi
8cb8014ce2
chore: bump deps
...
Bump dependencies and reduce renovate noise
Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-02-17 16:08:17 +05:30
Noel Georgi
b4edb73cd4
chore: bump deps
...
Bump deps
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-22 12:03:40 +05:30
Noel Georgi
eac3211468
feat: enable renovate bot
...
Enable renovate bot for dependency updates.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-08-30 02:11:40 +05:30
Noel Georgi
e77f3477ee
feat: publish nvidia modules and toolkit
...
Publish the OSS Nvidia kernel modules built against a release version of
Talos and also the nvidia toolkit required for running GPU workloads on
Kubernetes.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-08-18 22:44:10 +05:30
