Itxaka
8fc921c406
Always umount+mount oem ( #804 )
2025-06-05 16:28:19 +02:00
Itxaka
14e33f375f
Fix mountpoint in grub hook ( #803 )
2025-06-05 09:29:24 +02:00
Itxaka
24f88fa7a4
Fix the hooks order, unmounting and such ( #801 )
...
* Fix the hooks order, unmounting and such
Signed-off-by: Itxaka <itxaka@kairos.io>
* Update internal/agent/hooks/finish.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update internal/agent/hooks/bundles.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---------
Signed-off-by: Itxaka <itxaka@kairos.io>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-06-04 19:14:54 +02:00
Itxaka
7231150ac8
Fix grub after install hook ( #797 )
2025-06-04 09:25:11 +02:00
Itxaka
79cd5620c5
Drop kcrypt, use sdk ( #769 )
2025-05-06 09:02:44 +00:00
Itxaka
d0f0710c78
Use grub binaries and libs from rootfs ( #760 )
2025-04-25 10:43:21 +02:00
Itxaka
4975b9b914
Bump yip and diskfs ( #717 )
...
* Bump yip and diskfs
---------
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-03-26 11:57:29 +01:00
Itxaka
db703db5e5
Try to fix hooks ( #718 )
...
* fix hooks
---------
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-03-24 16:05:39 +01:00
Itxaka
b5869b4017
Fix hooks under encrypted partitions ( #702 )
...
* Fix hooks under encrypted partitions
We had a mess of mounting and unmounting things around when we try to
copy things to persistent.
Part of the changes (using the by-label to mount the persistent) are due
to the change in kcrypt. As we set the same label to the encrypted fs
and unencrypted fs, our utils.Mount could get mistaken and return the
first hit, which usually its the encrypted one, and we cannot mount that
one.
This patch brings it up to date.
- Makes bundles and logs hooks work when we have encrypted persistent.
It didnt work before.
- Makes both workflows the same.
- Locks everything once its over, to not leave encrypted parts around
- Mounts OEM so kcrypt can read the config if we are using a remote
server for encryption
- Mounts by label so there is not a change of getting the wrong device
- Uses the mount syscall directly. The util can mistake and return the
actual encrypted part if they both have the same label and finds it
first
---------
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-03-13 11:22:26 +01:00
Itxaka
488841ebf2
Use extensions dir path as source ( #660 )
...
Otherwise it will copy the dir itself and we just want to copy the
contents of the dir
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-01-14 10:59:45 +01:00
Itxaka
895e571bb3
Expose pcrs for uki encryption ( #603 )
2024-11-20 10:41:52 +01:00
Itxaka
dcad8beac2
Drop those stupid github and vfs deps bumps ( #591 )
2024-11-06 12:50:14 +01:00
Itxaka
3e99d75331
Move to use our ghw clone ( #535 )
2024-09-17 15:27:31 +02:00
Itxaka
02eb9d32a0
Let kcrypt add the allow discards option ( #434 )
2024-07-31 18:00:29 +02:00
Itxaka
0d8d534d5d
Encrypt luks partition with allow-discards ( #423 )
2024-07-29 09:47:03 +02:00
Itxaka
aebc8f6083
Bump kcrypt and adapt hooks ( #385 )
2024-06-20 11:19:29 +02:00
Björn Brauer
54a528a44a
Ensure only numeric part of systemd version is converted to int ( #362 )
2024-06-12 10:08:19 +02:00
Itxaka
91e18dd4b3
Copy extensions to passive as well
...
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-06-10 15:58:44 +02:00
Itxaka
b176b47f56
Copy any found sysextensions into active+passive efi dir ( #372 )
2024-06-07 16:45:50 +02:00
Dimitris Karakasilis
382b1944b3
Move udevadm triggering in kcrypt
...
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-05-23 16:05:31 +03:00
Itxaka
d1f65cd334
Centralize uki hooks for encryption reasons ( #309 )
2024-04-24 16:42:51 +02:00
Itxaka
1602276133
Add missing hooks to after install uki ( #307 )
2024-04-23 14:37:21 +02:00
Itxaka
15a15a1f0c
Keep logs after reset ( #288 )
2024-04-11 11:35:31 +02:00
Itxaka
b1489daff8
Converge all yaml libs into v3 ( #266 )
...
* Converge all yaml libs into v3
Signed-off-by: Itxaka <itxaka@kairos.io>
* go mod tid
Signed-off-by: Itxaka <itxaka@kairos.io>
---------
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-03-20 16:53:42 +01:00
Itxaka
8583d38b68
Retry unlock if we cant find the unlocked partitions ( #241 )
2024-03-19 09:27:13 +01:00
Itxaka
0ae9c04eb4
Make sure kcrypt hook umounts persistent ( #244 )
2024-03-07 15:11:51 +01:00
Itxaka
2e0af77fbc
Use new logger facilities ( #236 )
2024-03-01 12:27:26 +01:00
mudler
958ae9393d
fix(after-install): run after-install hook after partitions are encrypted
2024-02-27 17:28:11 +01:00
Itxaka
33c8e8f29c
Add reset for uki ( #221 )
2024-02-02 13:20:06 +01:00
Itxaka
1a46f0910f
[uki] Wait for oem to appear after encryption ( #216 )
2024-01-30 14:28:54 +01:00
Ettore Di Giacinto
79a577d0f3
feat(uki-partitioning): respect additional encrypted partition list ( #206 )
2024-01-24 10:48:33 +01:00
Itxaka
53f49169b1
Fix uki mode detection ( #198 )
2024-01-10 10:38:31 +01:00
Itxaka
3254b8a36e
Uki upgrade ( #182 )
2023-12-18 11:38:26 +01:00
Itxaka
7ca39f2729
Encrypt uki partitions after install ( #176 )
2023-12-12 20:51:55 +00:00
Itxaka
6e1d761ded
Fix unwanted reboot from install config in upgrade/reset ( #178 )
2023-12-05 15:46:11 +01:00
Dimitris Karakasilis
c98c791f60
Call exec.Command properly, splitting the cmd and args
...
This was failing but wasn't visible because it needs
`fail_on_bundles_errors: true` to be set in the Kairos config.
We need to find whether we need a new test or an existing one can be
adapted to catch this.
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-11-20 13:54:05 +02:00
Itxaka
1b967cccd8
[uki] Lyfecycle ( #148 )
2023-10-03 11:15:17 +02:00
Itxaka
677254e570
Pass the install event to the collector directly ( #150 )
2023-09-26 07:38:58 +00:00
Itxaka
3e4693d697
Workaround for bundle install in new /var/lib/extensions directory ( #147 )
2023-09-15 15:40:27 +02:00
Dimitris Karakasilis
51ca8a8589
Revert "debug extension"
...
This reverts commit 98ccb57799
2023-09-15 15:36:42 +03:00
Itxaka
98ccb57799
debug extension
...
Signed-off-by: Itxaka <itxaka@kairos.io>
2023-09-15 14:33:41 +02:00
Itxaka
7c060a764e
Fix manual-install reboot/poweroff flags ( #131 )
2023-08-18 12:54:42 +02:00
Itxaka
f7bdba2dda
Merge elemental config into agent config ( #102 )
2023-07-25 15:21:34 +02:00
Itxaka
5b945303c9
Drop runconfig in favour of config ( #101 )
2023-07-25 11:08:27 +02:00
Itxaka
956f86f99c
Rework reboot/shutdown to use the hooks ( #96 )
2023-07-24 12:28:59 +02:00
Itxaka
9bff3742c1
Load elemental config/spec from cloud config ( #82 )
2023-07-20 15:53:48 +02:00
Itxaka
9c5731baa2
Rename go module kairos-agent ( #81 )
2023-07-10 14:39:48 +02:00
Itxaka
1afe3c2dbd
✨ Run stages directly from code instead of shelling out ( #23 )
...
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-05-16 18:06:49 +02:00
Itxaka
cda46877ba
Mount OEM during kcrypt hook ( #18 )
2023-05-09 21:57:16 +02:00
Itxaka
10df8d98cb
Drop kcrypt mappings ( #14 )
2023-05-08 09:43:47 +02:00
