sys-kernel/bootengine: Bump commit for root unlocking service

[simoncampion]

sys-kernel/bootengine: Bump commit for root unlocking service

Bumps bootengine to version in this PR in flatcar/bootengine. Once merged, I'll change the CROS_WORKON_PROJECT and CROS_WORKON_COMMIT in this PR to point to the flatcar-master.

How to use

See this PR.

Testing done

See this PR.

• Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
• Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

[simoncampion]

Once review is finished in the bootengine PR (but before merging), we should run CI against the tests in this kola PR, if possible, and check whether the amd64 and arm64 tests for TPM and Tang pass.

[pothos]

I've already merged the mantle PR and since you checked that it passed I would not kick of another long-running build here - we also have nightly builds to check for issues.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/8464637318

[pothos]

The last piece now would be to add a new Butane Flatcar config level that allows to use clevis.

[pothos]

Not sure what merge commit ID I was using but it doesn't exist now 😓

[pothos]

Ah, it was the mantle merge commit ID

[simoncampion]

The last piece now would be to add a new Butane Flatcar config level that allows to use clevis.

Happy to open a PR in coreos/butane for that. Should I add it to Flatcar v1.2.0-experimental, in the code and documentation?

[pothos]

Yes, sounds right, and then we could stabilize it?

[simoncampion]

Sounds good. Since adding Clevis support and stabilizing should probably be done in two separate PRs, I opened a first PR to add it to Flatcar v1.2.0-experimental, without stabilizing. @pothos If the changes look good to you, I'll change the PR from draft to ready.