github kinvolk/manifest v2605.9.0

latest releases: v3346.0.0, v3277.1.2, v3227.2.2...
3 years ago

Security fixes:

Bug fixes

  • Added systemd-tmpfiles directives for /opt and /opt/bin to ensure that the folders have correct permissions even when /opt/ was once created by containerd (Flatcar#279)
  • Make the automatic filesystem resizing more robust against a race and add more logging (kinvolk/init#31)
  • Allow inactive network interfaces to be bound to a bonding interface, by encoding additional configuration for systemd-networkd-wait-online (afterburn PR #10)
  • Do not configure ccache in Jenkins (scripts PR #100)
  • Azure: Exclude bonded SR-IOV network interfaces with newer drivers from networkd (in addition to the old drivers) to prevent them being configured instead of just the bond interface (init PR#29, bootengine PR#19)

Changes:

  • Update-engine now detects rollbacks and reports them as errors to the update server (PR#6)
  • The zstd tools were added (version 1.4.4)
  • The kernel config CONFIG_PSI was set to support Pressure Stall Information, more information also under https://facebookmicrosites.github.io/psi/docs/overview (Flatcar#162)
  • The kernel config CONFIG_BPF_JIT_ALWAYS_ON was set to use the BPF just-in-time compiler by default for faster execution
  • The kernel config CONFIG_POWER_SUPPLY was set
  • The kernel configs CONFIG_OVERLAY_FS_METACOPY and CONFIG_OVERLAY_FS_REDIRECT_DIR were set. With the first overlayfs will only copy up metadata when a metadata-specific operation like chown/chmod is performed. The full file will be copied up later when the file is opened for write operations. With the second, which is equivalent to setting "redirect_dir=on" in the kernel command-line, overlayfs will copy up the directory first before the actual content (Flatcar#170).
  • Remove unnecessary kernel module nf-conntrack-ipv4 (overlay PR#649)
  • Compress kernel modules with xz (overlay PR#628)
  • Add containerd-runc-shim-v* binaries required by kubelet custom CRI endpoints (overlay PR#623)
  • Equinix Metal (Packet): Exclude unused network interfaces from networkd, disregard the state of the bonded interfaces for the network-online.target and only require the bond interface itself to have at least one active link instead of routable which requires both links to be active (afterburn PR#10)
  • QEMU: Use flatcar.autologin kernel command line parameter for auto login on the console (Flatcar #71)

Updates:

Don't miss a new manifest release

NewReleases is sending notifications on new releases.