owned this note   changed a year ago  
Published Linked with GitHub

Flatcar Container Linux Release - October 4th, 2023

Alpha 3745.0.0

  • AMD64-usr
    • Platforms succeeded: digitalocean, openstack, aws, vmware, gce, equinix metal, qemu_update
    • Platforms failed: qemu, qemu_uefi, azure
      • qemu/qemu_uefi: cl.sysext.fallbackdownload know issue, because there is not yet uploaded oem sysext images on the update server
      • azure: extra-test.[Standard_NC6s_v3].cl.misc.nvidia because https://github.com/flatcar/mantle/pull/451 is not merged
    • Platforms not tested: none
  • ARM64-usr
    • Platforms succeeded: azure, aws, qemu_update
    • Platforms failed: qemu_uefi
      • qemu/qemu_uefi: cl.sysext.fallbackdownload know issue, because there is not yet uploaded oem sysext images on the update server
    • Platforms not tested: equinix metal

VERDICT: GO / WAIT / NO-GO

Beta 3732.1.0

  • AMD64-usr
    • Platforms succeeded: none
    • Platforms failed: all
      • kubeadm.*.cilium.* tests are failing because they run in enforced mode
      • qemu/qemu_uefi: cl.sysext.fallbackdownload know issue, because there is not yet uploaded oem sysext images on the update server
      • azure: extra-test.[Standard_NC6s_v3].cl.misc.nvidia because https://github.com/flatcar/mantle/pull/451 is not merged
    • Platforms not tested: none
  • ARM64-usr
    • Platforms succeeded: none
    • Platforms failed: all
      • kubeadm.*.cilium.* tests are failing because they run in enforced mode
      • qemu/qemu_uefi: cl.sysext.fallbackdownload know issue, because there is not yet uploaded oem sysext images on the update server
    • Platforms not tested: equinix metal

VERDICT: GO / WAIT / NO-GO

Stable 3602.2.0

  • AMD64-usr
    • Platforms succeeded: none
    • Platforms failed: all
      • kubeadm.*.cilium.* tests are failing because they run in enforced mode
    • Platforms not tested: none
  • ARM64-usr
    • Platforms succeeded: none
    • Platforms failed: all
      • kubeadm.*.cilium.* tests are failing because they run in enforced mode
    • Platforms not tested: equinix metal

VERDICT: GO / WAIT / NO-GO

LTS 3510.3.0

  • AMD64-usr
    • Platforms succeeded: none
    • Platforms failed: all
      • kubeadm.*.cilium.* tests are failing because they run in enforced mode
    • Platforms not tested: none
  • ARM64-usr
    • Platforms succeeded: none
    • Platforms failed: all
      • kubeadm.*.cilium.* tests are failing because they run in enforced mode
    • Platforms not tested: equinix metal

VERDICT: GO / WAIT / NO-GO

Communication

Guidelines / Things to Remember

Announcement Message

Subject: Announcing new releases Alpha 3745.0.0, Beta 3732.1.0, Stable 3602.2.0, LTS-2023 3510.3.0

Hello,
We are pleased to announce a new Flatcar Container Linux release for the Alpha, Beta, Stable, LTS-2023 channel.

New Alpha Release 3745.0.0

Changes since Alpha 3732.0.0

Security fixes:

Bug fixes:

  • Triggered re-reading of partition table to fix adding partitions to the boot disk (scripts#1202)

Changes:

  • Reworked the VMware OEM software to be shipped as A/B updated systemd-sysext image
  • Started shipping default ssh client and ssh daemon configs in /etc/ssh/ssh_config and /etc/ssh/sshd_config which include config snippets in /etc/ssh/ssh_config.d and /etc/ssh/sshd_config.d, respectively.
  • Use qcow2 compressed format instead of additional compression layer in Qemu images (Flatcar#1135, scripts#1132)
  • AWS: AWS OEM images now use a systemd-sysext image for layering additional platform-specific software on top of /usr
  • SDK: Experimental support for prefix builds to create distro independent, portable, self-contained applications w/ all dependencies included. With contributions from chewi and HappyTobi.
  • VMware: The open-vm-tools package in VMware OEM now comes with vmhgfs-fuse, udev rules, pam and vgauth

Updates:

New Beta Release 3732.1.0

Changes since Alpha 3732.0.0

Security fixes:

Bug fixes:

  • Triggered re-reading of partition table to fix adding partitions to the boot disk (scripts#1202)

Changes:

Updates:

Changes compared to Beta 3602.1.6

Security fixes:

Bug fixes:

  • Fix the RemainAfterExit clause in nvidia.service (Flatcar#1169)
  • Fixed bug in handling renamed network interfaces when generating login issue (init#102)
  • Triggered re-reading of partition table to fix adding partitions to the boot disk (scripts#1202)

Changes:

  • Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
    Dropped support for niftycloud and interoute. For interoute we haven't been generating the images for some time already. (scripts#971)
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
  • Added TLS Kernel module (scripts#865)
  • Added support for multipart MIME userdata in coreos-cloudinit. Ignition now detects multipart userdata and delegates execution to coreos-cloudinit. (scripts#873)
  • Azure and QEMU OEM images now use systemd-sysext images for layering additional platform-specific software on top of /usr. For Azure images this also means that the image has a normal Python installation available through the sysext image. The OEM software is still not updated but this will be added soon.
  • Change nvidia.service to type oneshot (from the default "simple") so the subsequent services (configured with "Requires/After") are executed after the driver installation is successfully finished (flatcar/Flatcar#1136)
  • Enabled the virtio GPU driver (scripts#830)
  • Migrate to Type=notify in containerd.service. Changed the unit to Type=notify, utilizing the existing containerd support for sd_notify call after socket setup.
  • Migrated the NVIDIA installer from the Azure/AWS OEM partition to /usr to make it available on all platforms (scripts#932, Flatcar#1077)
  • Moved a mountpoint of the OEM partition from /usr/share/oem to /oem. /usr/share/oem became a symlink to /oem for backward compatibility. Despite the move, the initrd images providing files through /usr/share/oem should keep using /usr/share/oem. The move was done to enable activating the OEM sysext images that are placed in the OEM partition.
  • OEM vendor tools are now A/B updated if they are shipped as systemd-sysext images, the migration happens when both partitions require a systemd-sysext OEM image - note that this will delete the nvidia.service from /etc on Azure because it's now part of /usr (Flatcar#60)
  • Updated locksmith to use non-deprecated resource control options in the systemd unit (Locksmith#20)
  • Use qcow2 compressed format instead of additional compression layer in Qemu images (Flatcar#1135, scripts#1132)

Updates:

New Stable Release 3602.2.0

Changes since Beta 3602.1.6

Security fixes:

Bug fixes:

  • Triggered re-reading of partition table to fix adding partitions to the boot disk (scripts#1202)

Changes:

Updates:

Changes compared to Stable 3510.2.8

Security fixes:

Bug fixes:

  • Ensured that /var/log/journal/ is created early enough for systemd-journald to persist the logs on first boot (bootengine#60, baselayout#29)
  • Fixed journalctl --user permission issue (Flatcar#989)
  • Ensured that the folder /var/log/sssd is created if it doesn't exist, required for sssd.service (Flatcar#1096)
  • Fixed a miscompilation of getfacl causing it to dump core when executed (scripts#809)
  • Restored the reboot warning and delay for non-SSH console sessions (locksmith#21)
  • Triggered re-reading of partition table to fix adding partitions to the boot disk (scripts#1202)
  • Worked around a bash regression in flatcar-install and added error reporting for disk write failures (Flatcar#1059)

Changes:

  • Added pigz to the image, a parallel gzip implementation, which is useful to speed up the (de)compression for large container image imports/exports (coreos-overlay#2504)
  • Added a new flatcar-reset tool and boot logic for selective OS resets to reconfigure the system with Ignition while avoiding config drift (bootengine#55, init#91)
  • Enabled elfutils support in systemd-coredump. A backtrace will now appear in the journal for any program that dumps core (coreos-overlay#2489)
  • Improved the OS reset tool to offer preview, backup and restore (init#94)
  • On boot any files in /etc that are the same as provided by the booted /usr/share/flatcar/etc default for the overlay mount on /etc are deleted to ensure that future updates of /usr/share/flatcar/etc are propagated - to opt out create /etc/.no-dup-update in case you want to keep an unmodified config file as is or because you fear that a future Flatcar version may use the same file as you at which point your copy is cleaned up and any other future Flatcar changes would be applied (bootengine#54)
  • Switched systemd log reporting to the combined format of both unit description, as before, and now the unit name to easily find the unit (coreos-overlay#2436)
  • /etc is now set up as overlayfs with the original /etc folder being the store for changed files/directories and /usr/share/flatcar/etc providing the lower default directory tree (bootengine#53, scripts#666)
  • Changed coreos-cloudinit to now set the short hostname instead of the FQDN when fetched from the metadata service (coreos-cloudinit#19)
  • Use qcow2 compressed format instead of additional compression layer in Qemu images (Flatcar#1135, scripts#1132)

Updates:

Next page: https://hackmd.io/d2G9WGULTnyOaZ4MViy2Pw

Select a repo