-
Notifications
You must be signed in to change notification settings - Fork 52
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
overlay sys-kernel/coreos-firmware: update to 20230625_p20230724 for main #1040
Conversation
For the image content/size diff I started http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/2243/cldsv/ |
Build action triggered: https://github.com/flatcar/scripts/actions/runs/5748400458 |
I am already running Jenkins CI http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/2242/cldsv/, with CI tests for a few more cloud providers. That is to be sure if it has no regression, especially because of the invasive changes done in this PR. |
Update coreos-firmware to 20230625_p20230724, syncing with linux-firmware of Gentoo, mainly to address CVE-2023-20593. Gentoo ref: 6390ce05738eac80fc06663a73ca6b22fdaee8d1
Apply Flatcar modifications on top of Gentoo ebuilds. * Specify coreos-* directories for Kernel builds. * Use hard-coded linux-firmware directory instead of ${PN} as well as ${S} to avoid naming conflicts. * Depend on packages of Kernel source and modules. * Create symlinks for CXGB and ICE DDP firmware files. * Rewrite src_prepare and src_install. * Remove acenic/tg?.bin from unknown_license to force to install.
Add a license linux-fw-redistributable to ACCEPT_LICENSE, to be able to build coreos-firmware as needed by linux-firmware of Gentoo.
e9db08f
to
388896f
Compare
I see that it removes a lot of firmware files. Is this intentional?
|
The firmware is still part of the upstream tree: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/?id=59fbffa9ec8e4b0b31d2d13e715cf6580ad0e99c |
What you see is CI result of the previous version, from yesterday. |
CI passed, and it does not have the issue of missing firmware any more. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you!
Update
sys-kernel/coreos-firmware
to20230625_p20230724
, mainly to address CVE-2023-20593.Based on Gentoo commit 6390ce05738e.
Reset to Gentoo, apply Flatcar changes in a separate commit.
Fix issue of dealing with snapshot directory to avoid build failure.
See also flatcar/Flatcar#1134.
Testing done
CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/2255/cldsv/
changelog/
directory (user-facing change, bug fix, security fix, update)/boot
and/usr
size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.