kinvolk/manifest v3227.0.0

on GitHub

New Alpha Release 3227.0.0

Changes since Alpha 3200.0.0

Security fixes:

• Linux (CVE-2022-28390, CVE-2022-0168, CVE-2022-1158, CVE-2022-1353, CVE-2022-1198, CVE-2022-28389, CVE-2022-28388, CVE-2022-1516, CVE-2022-1263, CVE-2022-29582, CVE-2022-1204, CVE-2022-1205, CVE-2022-0500, CVE-2022-23222)
• Go (CVE-2022-24675)
• libarchive (CVE-2022-26280)
• gzip,xz-utils (CVE-2022-1271)

Bug fixes:

• GCE: Restored oem-gce.service functionality on GCP (coreos-overlay#1813)
• Skipped starting ensure-sysext.service if systemd-sysext.service won't be started, to prevent reporting a dependency failure (Flatcar#710)
• Added a remount action as systemd-sysext.service drop-in unit to restore the OEM partition mount after the overlay mounts in /usr are done (init#69)
• Added pahole to developer container, without it kernel modules built against /usr/src/linux may fail to probe with an 'invalid relocation target' error (coreos-overlay#1839)

Changes:

• GCE: Enabled GVE kernel driver, which adds support for Google Virtual NIC on GCP (coreos-overlay#1802)
• Enabled CONFIG_INTEL_RAPL on AMD64 Kernel config to compile intel_rapl_common module in order to allow power monitoring on modern Intel processors (coreos-overlay#1801)
• Azure: Set up /etc/hostname from instance metadata with Afterburn
• AWS EC2: Removed the setup of /etc/hostname from the instance metadata because it used a long FQDN but we can just use use the hostname set via DHCP (Flatcar#707)
• SDK: Dropped the mantle binaries (kola, ore, etc.) from the SDK, they are now provided by the ghcr.io/flatcar-linux/mantle image (coreos-overlay#1827, scripts#275)

Updates:

• Linux (5.15.37 (includes 5.15.36, 5.15.35, 5.15.34, 5.15.33))
• Linux Firmware (20220411)
• Go (1.17.9)
• afterburn (5.2.0)
• ca-certificates (3.78)
• containerd (1.6.3)
• gzip (1.12)
• libarchive (3.6.1)
• GCE: google compute-image-packages (20190124)
• SDK: Rust (1.60.0)