diff --git a/hack/e2e.sh b/hack/e2e.sh index 8a44c62c..84fde469 100755 --- a/hack/e2e.sh +++ b/hack/e2e.sh @@ -113,8 +113,6 @@ machine: - usermode_helper=disabled - name: zfs - name: spl - install: - image: ghcr.io/aenix-io/cozystack/talos:v1.8.4 files: - content: | [plugins] diff --git a/packages/core/installer/images/talos/profiles/initramfs.yaml b/packages/core/installer/images/talos/profiles/initramfs.yaml index 1a793728..8c251abc 100644 --- a/packages/core/installer/images/talos/profiles/initramfs.yaml +++ b/packages/core/installer/images/talos/profiles/initramfs.yaml @@ -3,14 +3,14 @@ arch: amd64 platform: metal secureboot: false -version: v1.8.4 +version: v1.9.1 input: kernel: path: /usr/install/amd64/vmlinuz initramfs: path: /usr/install/amd64/initramfs.xz baseInstaller: - imageRef: ghcr.io/siderolabs/installer:v1.8.4 + imageRef: ghcr.io/siderolabs/installer:v1.9.1 systemExtensions: - imageRef: ghcr.io/siderolabs/amd-ucode:20241210 - imageRef: ghcr.io/siderolabs/amdgpu-firmware:20241110 @@ -19,8 +19,8 @@ input: - imageRef: ghcr.io/siderolabs/intel-ice-firmware:20241210 - imageRef: ghcr.io/siderolabs/intel-ucode:20241112 - imageRef: ghcr.io/siderolabs/qlogic-firmware:20241210 - - imageRef: ghcr.io/siderolabs/drbd:9.2.11-v1.8.4 - - imageRef: ghcr.io/siderolabs/zfs:2.2.6-v1.8.4 + - imageRef: ghcr.io/siderolabs/drbd:9.2.12-v1.9.1 + - imageRef: ghcr.io/kvaps/talos/zfs:2.2.7-v1.9.1-2-gc043c0a output: kind: initramfs imageOptions: {} diff --git a/packages/core/installer/images/talos/profiles/installer.yaml b/packages/core/installer/images/talos/profiles/installer.yaml index 2d686ffb..e834e974 100644 --- a/packages/core/installer/images/talos/profiles/installer.yaml +++ b/packages/core/installer/images/talos/profiles/installer.yaml @@ -3,14 +3,14 @@ arch: amd64 platform: metal secureboot: false -version: v1.8.4 +version: v1.9.1 input: kernel: path: /usr/install/amd64/vmlinuz initramfs: path: /usr/install/amd64/initramfs.xz baseInstaller: - imageRef: ghcr.io/siderolabs/installer:v1.8.4 + imageRef: ghcr.io/siderolabs/installer:v1.9.1 systemExtensions: - imageRef: ghcr.io/siderolabs/amd-ucode:20241210 - imageRef: ghcr.io/siderolabs/amdgpu-firmware:20241110 @@ -19,8 +19,8 @@ input: - imageRef: ghcr.io/siderolabs/intel-ice-firmware:20241210 - imageRef: ghcr.io/siderolabs/intel-ucode:20241112 - imageRef: ghcr.io/siderolabs/qlogic-firmware:20241210 - - imageRef: ghcr.io/siderolabs/drbd:9.2.11-v1.8.4 - - imageRef: ghcr.io/siderolabs/zfs:2.2.6-v1.8.4 + - imageRef: ghcr.io/siderolabs/drbd:9.2.12-v1.9.1 + - imageRef: ghcr.io/kvaps/talos/zfs:2.2.7-v1.9.1-2-gc043c0a output: kind: installer imageOptions: {} diff --git a/packages/core/installer/images/talos/profiles/iso.yaml b/packages/core/installer/images/talos/profiles/iso.yaml index 3ab4ff59..c614d6e2 100644 --- a/packages/core/installer/images/talos/profiles/iso.yaml +++ b/packages/core/installer/images/talos/profiles/iso.yaml @@ -3,14 +3,14 @@ arch: amd64 platform: metal secureboot: false -version: v1.8.4 +version: v1.9.1 input: kernel: path: /usr/install/amd64/vmlinuz initramfs: path: /usr/install/amd64/initramfs.xz baseInstaller: - imageRef: ghcr.io/siderolabs/installer:v1.8.4 + imageRef: ghcr.io/siderolabs/installer:v1.9.1 systemExtensions: - imageRef: ghcr.io/siderolabs/amd-ucode:20241210 - imageRef: ghcr.io/siderolabs/amdgpu-firmware:20241110 @@ -19,8 +19,8 @@ input: - imageRef: ghcr.io/siderolabs/intel-ice-firmware:20241210 - imageRef: ghcr.io/siderolabs/intel-ucode:20241112 - imageRef: ghcr.io/siderolabs/qlogic-firmware:20241210 - - imageRef: ghcr.io/siderolabs/drbd:9.2.11-v1.8.4 - - imageRef: ghcr.io/siderolabs/zfs:2.2.6-v1.8.4 + - imageRef: ghcr.io/siderolabs/drbd:9.2.12-v1.9.1 + - imageRef: ghcr.io/kvaps/talos/zfs:2.2.7-v1.9.1-2-gc043c0a output: kind: iso imageOptions: {} diff --git a/packages/core/installer/images/talos/profiles/kernel.yaml b/packages/core/installer/images/talos/profiles/kernel.yaml index b49fd93a..e032f254 100644 --- a/packages/core/installer/images/talos/profiles/kernel.yaml +++ b/packages/core/installer/images/talos/profiles/kernel.yaml @@ -3,14 +3,14 @@ arch: amd64 platform: metal secureboot: false -version: v1.8.4 +version: v1.9.1 input: kernel: path: /usr/install/amd64/vmlinuz initramfs: path: /usr/install/amd64/initramfs.xz baseInstaller: - imageRef: ghcr.io/siderolabs/installer:v1.8.4 + imageRef: ghcr.io/siderolabs/installer:v1.9.1 systemExtensions: - imageRef: ghcr.io/siderolabs/amd-ucode:20241210 - imageRef: ghcr.io/siderolabs/amdgpu-firmware:20241110 @@ -19,8 +19,8 @@ input: - imageRef: ghcr.io/siderolabs/intel-ice-firmware:20241210 - imageRef: ghcr.io/siderolabs/intel-ucode:20241112 - imageRef: ghcr.io/siderolabs/qlogic-firmware:20241210 - - imageRef: ghcr.io/siderolabs/drbd:9.2.11-v1.8.4 - - imageRef: ghcr.io/siderolabs/zfs:2.2.6-v1.8.4 + - imageRef: ghcr.io/siderolabs/drbd:9.2.12-v1.9.1 + - imageRef: ghcr.io/kvaps/talos/zfs:2.2.7-v1.9.1-2-gc043c0a output: kind: kernel imageOptions: {} diff --git a/packages/core/installer/images/talos/profiles/metal.yaml b/packages/core/installer/images/talos/profiles/metal.yaml index a096be76..d9f2b83a 100644 --- a/packages/core/installer/images/talos/profiles/metal.yaml +++ b/packages/core/installer/images/talos/profiles/metal.yaml @@ -3,14 +3,14 @@ arch: amd64 platform: metal secureboot: false -version: v1.8.4 +version: v1.9.1 input: kernel: path: /usr/install/amd64/vmlinuz initramfs: path: /usr/install/amd64/initramfs.xz baseInstaller: - imageRef: ghcr.io/siderolabs/installer:v1.8.4 + imageRef: ghcr.io/siderolabs/installer:v1.9.1 systemExtensions: - imageRef: ghcr.io/siderolabs/amd-ucode:20241210 - imageRef: ghcr.io/siderolabs/amdgpu-firmware:20241110 @@ -19,8 +19,8 @@ input: - imageRef: ghcr.io/siderolabs/intel-ice-firmware:20241210 - imageRef: ghcr.io/siderolabs/intel-ucode:20241112 - imageRef: ghcr.io/siderolabs/qlogic-firmware:20241210 - - imageRef: ghcr.io/siderolabs/drbd:9.2.11-v1.8.4 - - imageRef: ghcr.io/siderolabs/zfs:2.2.6-v1.8.4 + - imageRef: ghcr.io/siderolabs/drbd:9.2.12-v1.9.1 + - imageRef: ghcr.io/kvaps/talos/zfs:2.2.7-v1.9.1-2-gc043c0a output: kind: image imageOptions: { diskSize: 1306525696, diskFormat: raw } diff --git a/packages/core/installer/images/talos/profiles/nocloud.yaml b/packages/core/installer/images/talos/profiles/nocloud.yaml index 9784ac79..580d829b 100644 --- a/packages/core/installer/images/talos/profiles/nocloud.yaml +++ b/packages/core/installer/images/talos/profiles/nocloud.yaml @@ -3,14 +3,14 @@ arch: amd64 platform: nocloud secureboot: false -version: v1.8.4 +version: v1.9.1 input: kernel: path: /usr/install/amd64/vmlinuz initramfs: path: /usr/install/amd64/initramfs.xz baseInstaller: - imageRef: ghcr.io/siderolabs/installer:v1.8.4 + imageRef: ghcr.io/siderolabs/installer:v1.9.1 systemExtensions: - imageRef: ghcr.io/siderolabs/amd-ucode:20241210 - imageRef: ghcr.io/siderolabs/amdgpu-firmware:20241110 @@ -19,8 +19,8 @@ input: - imageRef: ghcr.io/siderolabs/intel-ice-firmware:20241210 - imageRef: ghcr.io/siderolabs/intel-ucode:20241112 - imageRef: ghcr.io/siderolabs/qlogic-firmware:20241210 - - imageRef: ghcr.io/siderolabs/drbd:9.2.11-v1.8.4 - - imageRef: ghcr.io/siderolabs/zfs:2.2.6-v1.8.4 + - imageRef: ghcr.io/siderolabs/drbd:9.2.12-v1.9.1 + - imageRef: ghcr.io/kvaps/talos/zfs:2.2.7-v1.9.1-2-gc043c0a output: kind: image imageOptions: { diskSize: 1306525696, diskFormat: raw } diff --git a/packages/system/kubevirt/templates/disable-selinux-workaround.yaml b/packages/system/kubevirt/templates/disable-selinux-workaround.yaml new file mode 100644 index 00000000..c096dce9 --- /dev/null +++ b/packages/system/kubevirt/templates/disable-selinux-workaround.yaml @@ -0,0 +1,41 @@ +# See: +# - https://github.com/siderolabs/talos/issues/10083 +--- +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: disable-selinux + namespace: cozy-kubevirt + labels: + app: disable-selinux +spec: + selector: + matchLabels: + app: disable-selinux + template: + metadata: + labels: + app: disable-selinux + spec: + containers: + - command: + - sh + - -exc + - test -f /host/sys/fs/selinux/enforce && mount -t tmpfs tmpfs /host/sys/fs/selinux; sleep infinity + image: docker.io/library/alpine + name: mount + securityContext: + privileged: true + volumeMounts: + - mountPath: /host + mountPropagation: Bidirectional + name: host-root + hostIPC: true + hostNetwork: true + hostPID: true + tolerations: + - operator: Exists + volumes: + - hostPath: + path: / + name: host-root