Commit Graph

107 Commits

Author SHA1 Message Date
Itxaka
ad38cc5f59 Use default upstream executor (#483) 2025-06-13 13:01:18 +02:00
Itxaka
00d9e81d9d Enable nfit modules in uki paths
Signed-off-by: Itxaka <itxaka@kairos.io>
2025-05-27 16:21:44 +02:00
Itxaka
917540d0a0 Move to Kairos logger (#474) 2025-05-19 18:23:34 +02:00
Itxaka
19a0c2d681 Add a UKI transition step (#460) 2025-04-09 18:48:49 +02:00
Itxaka
367ab5610e Implement generic sysext management (#459) 2025-04-09 11:21:22 +02:00
Itxaka
d455c7f6ec Restore Secureboot check
Something is missing from our implementation, which makes it break

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-02-21 13:26:28 +01:00
Itxaka
b819f9fb5d Adapt to kcrypt bump
Basically create a fake KairosLogger to pass to kcrypt

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-02-18 14:48:44 +01:00
Itxaka
a597656fe0 Improve deps (#431) 2025-02-18 14:41:54 +01:00
Itxaka
adc29fca67 Add modules for mmc disks (#380) 2024-09-27 13:07:21 +02:00
Itxaka
3042aae185 2599 (#336) 2024-06-13 12:08:37 +02:00
Itxaka
906bfdae73 Add some missing run dirs on uki (#337) 2024-06-13 11:27:22 +02:00
Itxaka
c9924a3205 Support copying sysextensions into final dir (#330) 2024-06-10 10:10:54 +02:00
Itxaka
cbf38f553c Use a pure golang pcr extend (#286) 2024-04-19 13:43:05 +02:00
Ettore Di Giacinto
d14a047aa6 fix(mount): call sync before/after operations (#288)
* fix(mount): call sync after mount ops

Signed-off-by: mudler <mudler@kairos.io>

* refactor(mount): replace calls wrapped with sync

Signed-off-by: mudler <mudler@kairos.io>

* be consistent

Signed-off-by: mudler <mudler@kairos.io>

* lint fixes

Signed-off-by: mudler <mudler@kairos.io>

---------

Signed-off-by: mudler <mudler@kairos.io>
2024-04-19 10:01:16 +00:00
Itxaka
ade21d4663 Fix lint and new uki steps (#274)
* Fix lint and add new uki step

Make it simpler by dividing the actual base mounts and pivot into new
sysroot into two different steps

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix constant name and gosec issues

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-09 10:40:47 +02:00
Itxaka
266d06334f Rework uki to pivot at start (#271)
* Rework uki to pivot at start

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix secureboot check

Signed-off-by: Itxaka <itxaka@kairos.io>

* debug

Signed-off-by: Itxaka <itxaka@kairos.io>

* Change order of initial stuff

first mount the barebone stuff and then do the movement

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop sleep

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-02 10:26:07 +00:00
Itxaka
93f5cf5de6 Rework immucore (#246) 2024-03-20 11:48:51 +01:00
Itxaka
ddfe8b7648 Recover the remouon / RO (#249) 2024-03-20 11:08:38 +01:00
Itxaka
572002fb38 Bump lint and fix issues (#245) 2024-03-18 14:38:57 +01:00
Itxaka
efb4d45aa8 Bump to vfs4 (#230) 2024-03-15 12:26:26 +01:00
Itxaka
a78e2b7ce7 Fix mounts (#241)
Co-authored-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-03-15 09:24:54 +01:00
Itxaka
25975a5594 Chroot into a new dir before starting the system (#234)
* Chroot into a new dir before starting the system

Signed-off-by: Itxaka <itxaka@kairos.io>

* Use ReadDir and copy files int eh rootdir to the enw rootdir

Signed-off-by: Itxaka <itxaka@kairos.io>

* logggg

Signed-off-by: Itxaka <itxaka@kairos.io>

* Several fixes

Mount /dev at start so we can log to kmesg/ttyS0
Log more
Store the mountpoints found in root to bind them later to the new
sysroot

Signed-off-by: Itxaka <itxaka@kairos.io>

* debvuy

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix

Signed-off-by: Itxaka <itxaka@kairos.io>

* more debufg

Signed-off-by: Itxaka <itxaka@kairos.io>

* fix

Signed-off-by: Itxaka <itxaka@kairos.io>

* sfder

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix symlinks

Signed-off-by: Itxaka <itxaka@kairos.io>

* final

Signed-off-by: Itxaka <itxaka@kairos.io>

* disable mobving the / root mountpoint

Im not sure this works on our side or how, I just get errors

Signed-off-by: Itxaka <itxaka@kairos.io>

* Debug

Signed-off-by: Itxaka <itxaka@kairos.io>

* Disable remounting / as RO and enable remounting the new sysroot as RO

Signed-off-by: Itxaka <itxaka@kairos.io>

* Dont drop to bash like that

Signed-off-by: Itxaka <itxaka@kairos.io>

* Move "sysroot" to a constant, dry code and handle errors

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Fix linting errors by removing superflows `else` statements

because the `if`s end with `continue`

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Apply suggestions from code review

* Remove loggers that don't work

because `/dev` is not there yet (?). In any case, we need to switch to
the new logger

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
Co-authored-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-03-06 17:09:26 +02:00
Mauro Morales
0cfddd485d extend kernel modules list (#228)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-02-29 10:31:30 +01:00
Itxaka
4c2ba5883b Be slower to find the install media (#227) 2024-02-28 12:28:50 +01:00
Dimitris Karakasilis
4521fe6fcd 2226 detect boot state (#225)
* WIP

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* WIP

Signed-off-by: Dimitris Karakasilis <dimitris@spectrocloud.com>
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* WIP add logs everywhere (EOD wip)

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Do the livecd check as late as possible

because the herd condition is evaluated too early before the /sys
is mounted and thus we don't detect the installed system correctly in
UKI mode.

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Wrap NewRuntime to allow passing down a logger

so that kairos-sdk logs make it to the immucore.log file

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Add TODOs and remove redundant check in code

the livecd check already happens some lines above

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Replace the "replace" with an actual tag

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Remoce "replace" directive and use wrapper method for UnlockAll

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Remove unecessary TODO

the log message describes what happened

* Re-use the method from kairos-sdk for uki boot detection

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Move messages from Info() to Debug() (PR review request)

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

---------

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
Signed-off-by: Dimitris Karakasilis <dimitris@spectrocloud.com>
Co-authored-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-02-19 13:42:06 +02:00
Itxaka
c9c9edb261 Mount cdrom efiboot contents under /run/rootfsbase (#224)
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-02-11 18:37:24 +01:00
Itxaka
a2874ca3ee Mount livecd in /run/initramfs/live under uki (#223) 2024-02-08 14:22:44 +01:00
Itxaka
c4ad991e0c unlock partitions with UKI TPM values (#191) 2023-11-30 22:19:47 +01:00
Itxaka
ad83785e37 Fix log to add timestamp (#161) 2023-09-26 10:56:32 +02:00
Itxaka
7f2813e5b7 Mount ESP under /efi if possible + identify EFI run source (#158) 2023-09-25 14:14:56 +02:00
Dimitris Karakasilis
6b07d39073 Add awk (#157)
* Add awk and gawk in the initrafms

to allow growpart to work. Also include libraries which dracut fails to
auto-detect

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Bump yip

to get this fix: https://github.com/mudler/yip/pull/110

as part of this: https://github.com/kairos-io/kairos/issues/1831

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

* Fix lint errors

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

---------

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2023-09-25 10:32:45 +03:00
Itxaka
5412c76ebb Uki changes for iso/install (#156) 2023-09-22 14:56:26 +02:00
Itxaka
a1710b8589 Set basic /run mount from the start to be able to always log (#154) 2023-09-19 09:51:57 +02:00
Itxaka
471c9782da Drop logrus and use zerolog for yip (#141) 2023-08-08 17:58:17 +02:00
Dimitris Karakasilis
13b06d9e35 1448 use yip (#135)
Co-authored-by: Mauro Morales <mauro.morales@spectrocloud.com>
Co-authored-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-07-04 14:52:26 +02:00
Itxaka
0811f0f054 Increase compatibility with alpine systems (#132) 2023-05-30 21:51:03 +02:00
Itxaka
d59fa6789c Set logger before running the version command (#125) 2023-05-08 16:13:31 +02:00
Itxaka
14426d39b4 Upgrade kcrypt partitions on boot (#122)
Co-authored-by: Dimitris Karakasilis <jimmykarily@gmail.com>
2023-05-08 09:44:43 +02:00
Itxaka
2e9e5de03e Fix missing sysroot mount in fstab (#121) 2023-05-05 12:34:23 +02:00
Itxaka
d644fb0af9 Run kcrypt unlock via immucore (#118) 2023-05-04 18:58:26 +02:00
Itxaka
d1f4669f03 🐛 Retry getting the state label (#115) 2023-04-29 12:21:33 +02:00
Itxaka
06ff33cc97 ⬆️ Bump deps (#114) 2023-04-28 09:30:56 +02:00
Itxaka
f1c3aad0ee 🌱 activate LVM volumes at the start (#113) 2023-04-19 16:23:51 +02:00
Itxaka
6bf656cd21 Try to mount oem under livemedia (#110) 2023-04-12 16:19:21 +02:00
Itxaka
5c4703dac7 Fix logger (#99)
We were sending a message in a given level instead of setting the level
of the logger

Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-03-14 15:19:55 +01:00
Itxaka
8f7d808dec Bring UKI to a working state (#97)
- Mount the needed base mounts (/proc /dev /sys /tmp)
 - Use our own console for yip (required to add the PATH under uki)
 - Order the DAG in a proper way (was out of order and not working)

Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-03-14 10:33:38 +01:00
Itxaka
217fdaa8e6 Fix for runtime being fixed
Now the proper label is under the filesystem label

Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-03-10 00:02:14 +01:00
Itxaka
44c2a5be26 Update kairos sdk to latest master (#89)
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-03-09 19:45:24 +01:00
Itxaka
b2f3615534 🐛 Add custom layout plugin (#87)
The default plugin does not support gpt

Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
2023-03-09 17:19:15 +01:00
Itxaka
88a2ca8a9b Conditional for loading oem (#85) 2023-03-09 12:57:10 +01:00