Commit Graph

493 Commits

Author SHA1 Message Date
Mauro Morales
d8671d1152
Check both pcrphase and pcrextend (#279)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-04-10 16:39:44 +02:00
Itxaka
c97a3ae559 Recover original 755 perms for dir creation
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-10 11:22:15 +02:00
renovate[bot]
ac1c1be9f8 Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.10 2024-04-09 22:36:56 +00:00
dependabot[bot]
cf4595d3cb
Bump the go_modules group across 1 directory with 3 updates (#267)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Itxaka <itxaka.garcia@spectrocloud.com>
2024-04-09 10:57:17 +02:00
renovate[bot]
2cdab212cb
Update github.com/kairos-io/kcrypt digest to 05628ae (#262)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-09 10:53:04 +02:00
Itxaka
ade21d4663
Fix lint and new uki steps (#274)
* Fix lint and add new uki step

Make it simpler by dividing the actual base mounts and pivot into new
sysroot into two different steps

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix constant name and gosec issues

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-09 10:40:47 +02:00
Itxaka
b9fe50bf84
Add timeout wait for sysroot (#278) 2024-04-09 10:40:28 +02:00
renovate[bot]
b4654ffb47
Update actions/checkout action to v4 (#269)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-09 10:38:39 +02:00
renovate[bot]
efa81ce145
Update github/codeql-action action to v3 (#270)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-04-09 10:38:25 +02:00
Itxaka
d3e1092e42
Bump sdk (#275) 2024-04-08 12:57:02 +02:00
Itxaka
266d06334f
Rework uki to pivot at start (#271)
* Rework uki to pivot at start

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix secureboot check

Signed-off-by: Itxaka <itxaka@kairos.io>

* debug

Signed-off-by: Itxaka <itxaka@kairos.io>

* Change order of initial stuff

first mount the barebone stuff and then do the movement

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop sleep

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-02 10:26:07 +00:00
renovate[bot]
8a142fe41f Update golangci/golangci-lint Docker tag to v1.57.2 2024-03-29 02:04:06 +00:00
Ettore Di Giacinto
3a7c8a81ca
Create secscan.yaml 2024-03-28 10:29:56 +01:00
renovate[bot]
e6455b3326 Update module github.com/kairos-io/kairos-sdk to v0.0.28 2024-03-28 01:33:18 +00:00
renovate[bot]
a983df1560 Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.9 2024-03-27 22:52:25 +00:00
renovate[bot]
63f5846c53 Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.8 2024-03-22 22:50:25 +00:00
Itxaka
94e643622a
Set autoreset sentinel (#259) 2024-03-22 13:21:31 +01:00
renovate[bot]
2bd94e44ab Update golangci/golangci-lint Docker tag to v1.57.1 2024-03-20 23:16:22 +00:00
dependabot[bot]
fb45ba7c33
Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#253)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-20 16:28:42 +01:00
Itxaka
08c8205fd9
Tidy up after golang updates (#252) 2024-03-20 16:13:48 +01:00
renovate[bot]
73b875e289
Update golangci/golangci-lint Docker tag to v1.57.0 (#250)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-20 14:46:46 +01:00
Itxaka
8a2bb88bfc
Update unit-tests.yaml 2024-03-20 14:02:13 +01:00
Itxaka
93f5cf5de6
Rework immucore (#246) 2024-03-20 11:48:51 +01:00
Itxaka
ddfe8b7648
Recover the remouon / RO (#249) 2024-03-20 11:08:38 +01:00
Itxaka
572002fb38
Bump lint and fix issues (#245) 2024-03-18 14:38:57 +01:00
Itxaka
1720e4b22f
Test several go versions (#244) 2024-03-18 12:43:16 +01:00
renovate[bot]
eb8e1c0950 Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.7 2024-03-15 22:21:17 +00:00
Itxaka
efb4d45aa8
Bump to vfs4 (#230) 2024-03-15 12:26:26 +01:00
Itxaka
a78e2b7ce7
Fix mounts (#241)
Co-authored-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-03-15 09:24:54 +01:00
renovate[bot]
f25066af47 Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.6 2024-03-14 00:48:13 +00:00
renovate[bot]
73590f9207 Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.5 2024-03-07 22:08:44 +00:00
renovate[bot]
49dd162fdb
Update github.com/kairos-io/kcrypt digest to 4715d08 (#226)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-06 18:51:53 +01:00
renovate[bot]
3041e600a2
Update module golang.org/x/sys to v0.18.0 (#222)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-06 18:45:46 +01:00
renovate[bot]
5c0d531e7a
Update module github.com/onsi/ginkgo/v2 to v2.16.0 (#231)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-06 18:45:35 +01:00
renovate[bot]
2c40ad1b19
Update codecov/codecov-action action to v4 (#219)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-06 18:45:23 +01:00
renovate[bot]
e7bbe4ddd1
Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.4 (#217)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-06 18:44:35 +01:00
Itxaka
25975a5594
Chroot into a new dir before starting the system (#234)
* Chroot into a new dir before starting the system

Signed-off-by: Itxaka <itxaka@kairos.io>

* Use ReadDir and copy files int eh rootdir to the enw rootdir

Signed-off-by: Itxaka <itxaka@kairos.io>

* logggg

Signed-off-by: Itxaka <itxaka@kairos.io>

* Several fixes

Mount /dev at start so we can log to kmesg/ttyS0
Log more
Store the mountpoints found in root to bind them later to the new
sysroot

Signed-off-by: Itxaka <itxaka@kairos.io>

* debvuy

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix

Signed-off-by: Itxaka <itxaka@kairos.io>

* more debufg

Signed-off-by: Itxaka <itxaka@kairos.io>

* fix

Signed-off-by: Itxaka <itxaka@kairos.io>

* sfder

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix symlinks

Signed-off-by: Itxaka <itxaka@kairos.io>

* final

Signed-off-by: Itxaka <itxaka@kairos.io>

* disable mobving the / root mountpoint

Im not sure this works on our side or how, I just get errors

Signed-off-by: Itxaka <itxaka@kairos.io>

* Debug

Signed-off-by: Itxaka <itxaka@kairos.io>

* Disable remounting / as RO and enable remounting the new sysroot as RO

Signed-off-by: Itxaka <itxaka@kairos.io>

* Dont drop to bash like that

Signed-off-by: Itxaka <itxaka@kairos.io>

* Move "sysroot" to a constant, dry code and handle errors

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Fix linting errors by removing superflows `else` statements

because the `if`s end with `continue`

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Apply suggestions from code review

* Remove loggers that don't work

because `/dev` is not there yet (?). In any case, we need to switch to
the new logger

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
Co-authored-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-03-06 17:09:26 +02:00
Itxaka
a52b9651ad
Change the secureboot disable to not collide with disable immucore (#233) 2024-03-06 10:30:18 +01:00
Itxaka
3604633112
Check secureboot if on uki mode and panic if not (#205)
* Check secureboot if on uki mode and panic if not

Signed-off-by: Itxaka <itxaka@kairos.io>

* Check cmdline for disable secureboot

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix tests

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-03-01 09:42:03 +01:00
Mauro Morales
a45bcef2f0
Use latest sdk, to fix UKI detect boot issues (#229) 2024-02-29 22:14:58 +01:00
Mauro Morales
0cfddd485d
extend kernel modules list (#228)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-02-29 10:31:30 +01:00
Itxaka
4c2ba5883b
Be slower to find the install media (#227) 2024-02-28 12:28:50 +01:00
Dimitris Karakasilis
4521fe6fcd
2226 detect boot state (#225)
* WIP

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* WIP

Signed-off-by: Dimitris Karakasilis <dimitris@spectrocloud.com>
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* WIP add logs everywhere (EOD wip)

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Do the livecd check as late as possible

because the herd condition is evaluated too early before the /sys
is mounted and thus we don't detect the installed system correctly in
UKI mode.

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Wrap NewRuntime to allow passing down a logger

so that kairos-sdk logs make it to the immucore.log file

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Add TODOs and remove redundant check in code

the livecd check already happens some lines above

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Replace the "replace" with an actual tag

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Remoce "replace" directive and use wrapper method for UnlockAll

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Remove unecessary TODO

the log message describes what happened

* Re-use the method from kairos-sdk for uki boot detection

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Move messages from Info() to Debug() (PR review request)

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

---------

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
Signed-off-by: Dimitris Karakasilis <dimitris@spectrocloud.com>
Co-authored-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-02-19 13:42:06 +02:00
Itxaka
c9c9edb261
Mount cdrom efiboot contents under /run/rootfsbase (#224)
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-02-11 18:37:24 +01:00
Itxaka
a2874ca3ee
Mount livecd in /run/initramfs/live under uki (#223) 2024-02-08 14:22:44 +01:00
Itxaka
f3f2b71e4f Bump sdk
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-02-01 15:25:52 +01:00
renovate[bot]
bd5cfecca9 Update module github.com/containerd/containerd to v1.7.13 2024-01-31 22:33:00 +00:00
Itxaka
77c9d5894a
Bump kcrypt (#216) 2024-01-24 10:07:48 +01:00
renovate[bot]
f4adf6d409
Update quay.io/kairos/osbuilder-tools Docker tag to v0.11.1 (#211)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-24 10:04:04 +01:00
renovate[bot]
8096568047
Update module golang.org/x/sys to v0.16.0 (#207)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-24 10:03:47 +01:00