Commit Graph

3471 Commits

Author SHA1 Message Date
Jonathan Lebon
88c0175858 libpriv/kernel: Allow optional initramfs tmpf
Teach `rpmostree_finalize_kernel` to automatically select the in-tree
initramfs if no initramfs tmpf is passed in. This seems silly right now
since the only reason you'd call that function is either for a new
initramfs or a new kernel (and initramfs). But it's prep for a future
patch.
2020-08-04 20:32:05 +02:00
Jonathan Lebon
e424476f9a src/{daemon,libpriv}: Better error prefixing
Found these useful when debugging code.
2020-08-04 20:32:05 +02:00
Jonathan Lebon
64eb26b7d5 libpriv/kernel: Link initramfs into place earlier
No functional change otherwise. Prep for future patch.
2020-08-04 20:32:05 +02:00
Jonathan Lebon
7f5bb1ec07 libpriv/origin: Factor out helper to set key from hash table
Prep for future patch.
2020-08-04 20:32:05 +02:00
Jonathan Lebon
90e3b93f4c app/ex: Drop reset alias 2020-08-04 20:32:05 +02:00
Jeff Law
3097af804d spec: Disable LTO 2020-07-31 11:07:18 -04:00
Jonathan Lebon
bcf241d572 Release 2020.4
Thin release. Mostly for a bunch of RHCOS-relevant fixes and
enhancements: 752f4f09 (#2178), 4d836dd8 (#2151) and f608eb09 (#2158).
2020-07-29 10:41:43 -04:00
Jonathan Lebon
752f4f09de daemon/deploy: Finish OstreeAsyncProgress after pull
Otherwise it might still own tasks on the main context when reusing it
later on. And because it was already cleared, we can get `SIGSEGV`. See
also c9cbad94 (#1676).

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1859269
2020-07-28 18:30:14 -04:00
Jonathan Lebon
1c9ea5dab3 ci: Bump MSRV to 1.43.1
This is available in the RHEL 8.2 buildroot now. Also fixes compilation
with latest `openat-ext` crate which uses `std::usize::MAX`.
2020-07-27 21:14:43 +02:00
dependabot-preview[bot]
b196136b4f build(deps): bump openat-ext from 0.1.2 to 0.1.4 in /rust
Bumps [openat-ext](https://github.com/cgwalters/openat-ext) from 0.1.2 to 0.1.4.
- [Release notes](https://github.com/cgwalters/openat-ext/releases)
- [Commits](https://github.com/cgwalters/openat-ext/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 21:14:43 +02:00
dependabot-preview[bot]
e53281bef6 build(deps): bump serde_json from 1.0.56 to 1.0.57 in /rust
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.56 to 1.0.57.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.56...v1.0.57)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 19:57:32 +02:00
dependabot-preview[bot]
5e1565941f build(deps): bump nix from 0.17.0 to 0.18.0 in /rust
Bumps [nix](https://github.com/nix-rust/nix) from 0.17.0 to 0.18.0.
- [Release notes](https://github.com/nix-rust/nix/releases)
- [Changelog](https://github.com/nix-rust/nix/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nix-rust/nix/compare/v0.17.0...v0.18.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 18:32:16 +02:00
dependabot-preview[bot]
421be07737 build(deps): bump curl from 0.4.30 to 0.4.31 in /rust
Bumps [curl](https://github.com/alexcrichton/curl-rust) from 0.4.30 to 0.4.31.
- [Release notes](https://github.com/alexcrichton/curl-rust/releases)
- [Commits](https://github.com/alexcrichton/curl-rust/compare/curl-sys-0.4.30...curl-sys-0.4.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 17:27:23 +02:00
dependabot-preview[bot]
0d8399a012 build(deps): bump libdnf from dd15584 to be77400
Bumps [libdnf](https://github.com/rpm-software-management/libdnf) from `dd15584` to `be77400`.
- [Release notes](https://github.com/rpm-software-management/libdnf/releases)
- [Commits](dd15584e31...be774002d6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 16:28:47 +02:00
dependabot-preview[bot]
15cea98dca build(deps): bump anyhow from 1.0.31 to 1.0.32 in /rust
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.31 to 1.0.32.
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.31...1.0.32)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-27 16:02:07 +02:00
Tom Stellard
27c14d5809 spec: Use make macros
This pull request was create automatically for the f33 change:
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

(Upstreamed from
https://src.fedoraproject.org/rpms/rpm-ostree/pull-request/39).
2020-07-22 18:43:17 +02:00
dependabot-preview[bot]
1d0ebd16da build(deps): bump libc from 0.2.72 to 0.2.73 in /rust/libdnf-sys
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.72 to 0.2.73.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.72...0.2.73)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-20 09:56:35 -04:00
dependabot-preview[bot]
58075b1d9a build(deps): bump libdnf from 4a72432 to dd15584
Bumps [libdnf](https://github.com/rpm-software-management/libdnf) from `4a72432` to `dd15584`.
- [Release notes](https://github.com/rpm-software-management/libdnf/releases)
- [Commits](4a72432434...dd15584e31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 18:27:23 -04:00
dependabot-preview[bot]
35c40eff2b build(deps): bump libc from 0.2.71 to 0.2.72 in /rust
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.71 to 0.2.72.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.71...0.2.72)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 18:06:29 -04:00
dependabot-preview[bot]
58a085859f build(deps): bump serde_json from 1.0.55 to 1.0.56 in /rust
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.55 to 1.0.56.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.55...v1.0.56)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 17:12:02 -04:00
dependabot-preview[bot]
1fbf4b8ba4 build(deps): bump libc from 0.2.71 to 0.2.72 in /rust/libdnf-sys
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.71 to 0.2.72.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.71...0.2.72)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 16:50:13 -04:00
Jonathan Lebon
2c6d24de0a vmcheck/rojig: Don't use ci.centos.org
It doesn't resolve to the right node from inside the CentOS CI:
https://lists.centos.org/pipermail/ci-users/2016-July/000301.html
2020-07-16 15:46:06 -04:00
Jonathan Lebon
fda0be62ce ci: Constrain parallel build jobs
The default `_NPROCESSORS_ONLN` heuristic we have isn't cgroups aware.
So it thinks it has e.g. 40 CPUs when running in a k8s pod. This can
then blow through our allocated resource limits.

Declare some modest amount of RAM and CPU resources and override `make`
parallelism.

This matches what ostree does in
https://github.com/ostreedev/ostree/pull/2151.
2020-07-16 15:46:06 -04:00
Jonathan Lebon
89d79f3505 ci: request 2G of RAM for compilation
I think the `fork` errors CI is hitting might be due to more stringent
memory limit enforcements in OCP4. Let's be more explicit and actually
request 2G of RAM. We can adjust from there.

(One related thing is CPU requests; it's possible we might need to also
make that explicit and in turn adjust the `_smp_mflags` RPM macro, since
the default is unlikely to be k8s/cgroups-aware.)
2020-07-16 15:46:06 -04:00
Jonathan Lebon
2235fb6c5b ci: pull Fedora image from Quay.io
Seems like the Fedora registry is having trouble right now.
2020-07-16 15:46:06 -04:00
dependabot-preview[bot]
7e32318fb3 build(deps): bump chrono from 0.4.11 to 0.4.13 in /rust
Bumps [chrono](https://github.com/chronotope/chrono) from 0.4.11 to 0.4.13.
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.11...v0.4.13)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 15:46:06 -04:00
Kelvin Fan
4d836dd88e treefile: Allow greater/less than versions for pkgs
Add a helper function for whitespace_split_packages() so that it now
splits a String by whitespace only if it is not wrapped between single
quotes.

This should allow RHCOS to use syntax like podman > 1.4 in the treefile.

Also add new unit tests and tweak existing compose tests to test this
functionality.
2020-07-08 19:25:41 +02:00
Jonathan Lebon
f608eb09ed app: Add --lock-finalization switch to other commands
Both `upgrade` and `deploy` already support this. There's no reason why
all the remaining "deployment-creating" commands shouldn't. Prompted by
https://github.com/openshift/machine-config-operator/issues/1897 which
will need this specifically for `rebase`.
2020-07-08 16:02:59 +02:00
Colin Walters
d29627ca6e postprocess: Add a symlink /usr/lib/sysimage/rpm to the rpmdb
Following on to:

- http://lists.rpm.org/pipermail/rpm-maint/2017-October/006681.html
- https://github.com/coreos/rpm-ostree/pull/1142/
- https://github.com/openSUSE/libsolv/pull/386

Write a symlink in `/usr/lib/sysimage/rpm` pointing to our current
`/usr/share/rpm` - this way clients can start looking for it there,
and then at some point we'll flip the symlink around and
have `/usr/share/rpm` pointing to the new location.

(Doing a hard swap now has upgrade implications)
2020-07-08 03:30:15 +02:00
dependabot-preview[bot]
e6b06f1fb2 build(deps): bump curl from 0.4.29 to 0.4.30 in /rust
Bumps [curl](https://github.com/alexcrichton/curl-rust) from 0.4.29 to 0.4.30.
- [Release notes](https://github.com/alexcrichton/curl-rust/releases)
- [Commits](https://github.com/alexcrichton/curl-rust/compare/curl-sys-0.4.29...curl-sys-0.4.30)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-29 12:19:29 -04:00
Jonathan Lebon
2441751d90 ci/installdeps: add distribution-gpg-keys
This is needed by the compose tests. This is part of cosa already, which
is why CI isn't hitting this, but we want to support users not
developing on top of the cosa buildroot container that can just run
`ci/installdeps.sh`.
2020-06-24 16:45:28 -04:00
Jonathan Lebon
fc1e660454 Move release instructions to RELEASE.md
The instructions for doing a release were outdated. Take the opportunity
to just move it to a dedicated markdown file and breaking it out to make
it easier to follow.

This is one step short of using a release checklist like some of the
other CoreOS projects do. This is a good base to eventually do that if
we want.
2020-06-23 16:14:51 -04:00
dependabot-preview[bot]
a5745314ef build(deps): bump structopt from 0.3.14 to 0.3.15 in /rust
Bumps [structopt](https://github.com/TeXitoi/structopt) from 0.3.14 to 0.3.15.
- [Release notes](https://github.com/TeXitoi/structopt/releases)
- [Changelog](https://github.com/TeXitoi/structopt/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TeXitoi/structopt/compare/v0.3.14...v0.3.15)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-23 14:50:29 -04:00
dependabot-preview[bot]
490067a753 build(deps): bump serde_derive from 1.0.112 to 1.0.114 in /rust
Bumps [serde_derive](https://github.com/serde-rs/serde) from 1.0.112 to 1.0.114.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.112...v1.0.114)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-23 13:54:37 -04:00
dependabot-preview[bot]
60f8ebf4d4 build(deps): bump serde from 1.0.112 to 1.0.114 in /rust
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.112 to 1.0.114.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.112...v1.0.114)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-23 18:10:15 +02:00
dependabot-preview[bot]
e6bd206a25 build(deps): bump libdnf from 44c436b to 4a72432
Bumps [libdnf](https://github.com/rpm-software-management/libdnf) from `44c436b` to `4a72432`.
- [Release notes](https://github.com/rpm-software-management/libdnf/releases)
- [Commits](44c436bbe9...4a72432434)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-23 17:50:27 +02:00
dependabot-preview[bot]
5b421ddaf0 build(deps): bump libglnx from 3c285a7 to 84b981a
Bumps libglnx from `3c285a7` to `84b981a`.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-22 15:35:06 +02:00
dependabot-preview[bot]
9baa188084 build(deps): bump rayon from 1.3.0 to 1.3.1 in /rust
Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.3.0 to 1.3.1.
- [Release notes](https://github.com/rayon-rs/rayon/releases)
- [Changelog](https://github.com/rayon-rs/rayon/blob/master/RELEASES.md)
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.3.0...v1.3.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-22 14:46:54 +02:00
Jonathan Lebon
f3ccd92cd7 Release 2020.3
Seems about time, but also to get the crypto-policies workaround out:
https://github.com/coreos/fedora-coreos-tracker/issues/540
2020-06-19 11:39:16 -04:00
Colin Walters
0207d17fcd ffiutil: Format full errors from anyhow
We need to use this alternative formatter to get full errors
including the full context chain.  IMO the anyhow default is broken.
2020-06-17 17:39:42 -04:00
Jonathan Lebon
8e632156f7 ci: Adapt to workspace being HOME
The CoreOS CI shared lib sets `HOME` to the workspace:

a81bfab789

and there's no easy way for it to detect when `HOME` is correctly set:

8574f04d96
853d5fdef3

For now, just work around this until we have a cleaner solution. (Though
it makes sense overall to uses `$HOME` anyway instead of hardcoding
`/root`).
2020-06-17 15:05:53 -04:00
Jonathan Lebon
83b385bc59 libpriv/scripts: Replace crypto-policies lua script
The latest crypto-policies package changed recently to dynamically set
the policy at install time so that if FIPS is enabled, the selected
backend is `FIPS`:

9b9c9f7378

This doesn't really make sense for us though since the compose server
configuration should be decoupled from the installroot. (More generally,
this also affects e.g. `yum install --installroot`).

Override the script for now so that we always select the `DEFAULT`
policy. We'll discuss with upstream to see what the right solution is
there.

This also works around the fact that rpm-ostree doesn't yet implement
Lua (#749).

Related: https://bugzilla.redhat.com/show_bug.cgi?id=1847454
Resolves: https://github.com/coreos/fedora-coreos-tracker/issues/540
2020-06-17 15:05:53 -04:00
dependabot-preview[bot]
3156b545f2 build(deps): bump serde_json from 1.0.53 to 1.0.55 in /rust
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.53 to 1.0.55.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.53...v1.0.55)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 17:29:01 -04:00
dependabot-preview[bot]
3c7f8a8742 build(deps): bump serde from 1.0.111 to 1.0.112 in /rust
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.111 to 1.0.112.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.111...v1.0.112)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 16:33:31 -04:00
dependabot-preview[bot]
c3d07889fd build(deps): bump openat from 0.1.18 to 0.1.19 in /rust
Bumps [openat](https://github.com/tailhook/openat) from 0.1.18 to 0.1.19.
- [Release notes](https://github.com/tailhook/openat/releases)
- [Commits](https://github.com/tailhook/openat/compare/v0.1.18...v0.1.19)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 15:35:05 -04:00
dependabot-preview[bot]
bbc87124ef build(deps): bump serde_derive from 1.0.111 to 1.0.112 in /rust
Bumps [serde_derive](https://github.com/serde-rs/serde) from 1.0.111 to 1.0.112.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.111...v1.0.112)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 14:31:07 -04:00
dependabot-preview[bot]
0e40a4102d build(deps): bump indicatif from 0.14.0 to 0.15.0 in /rust
Bumps [indicatif](https://github.com/mitsuhiko/indicatif) from 0.14.0 to 0.15.0.
- [Release notes](https://github.com/mitsuhiko/indicatif/releases)
- [Commits](https://github.com/mitsuhiko/indicatif/compare/0.14.0...0.15.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 13:37:59 -04:00
dependabot-preview[bot]
b47d2826bf build(deps): bump serde_yaml from 0.8.12 to 0.8.13 in /rust
Bumps [serde_yaml](https://github.com/dtolnay/serde-yaml) from 0.8.12 to 0.8.13.
- [Release notes](https://github.com/dtolnay/serde-yaml/releases)
- [Commits](https://github.com/dtolnay/serde-yaml/compare/0.8.12...0.8.13)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 13:05:39 -04:00
dependabot-preview[bot]
bb39dac1cd build(deps): bump libdnf from 066c627 to 44c436b
Bumps [libdnf](https://github.com/rpm-software-management/libdnf) from `066c627` to `44c436b`.
- [Release notes](https://github.com/rpm-software-management/libdnf/releases)
- [Commits](066c6273ef...44c436bbe9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 13:05:31 -04:00
dependabot-preview[bot]
748704a7c8 build(deps): bump libglnx from fc9073e to 3c285a7
Bumps libglnx from `fc9073e` to `3c285a7`.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-15 12:40:54 -04:00