Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
da4ccea
WIP: move from portage-stable to plain Gentoo
t-lo Sep 14, 2026
8e0bf4b
Rename x-crossdev repo to crossdev so crossdev picks it automatically
chewi Sep 14, 2026
f719a05
sys-boot/shim(-signed): Install under /usr/share rather than /usr/lib
chewi Sep 15, 2026
227d10b
Automatically generate package.mask to prioritise overlays over Gentoo
chewi Sep 15, 2026
8080719
update_ebuilds: Drop redundant script
chewi Sep 15, 2026
772f76e
.github: Drop update-metadata-glsa workflow
chewi Sep 15, 2026
c0d8616
update_sdk_container_image: Add -a option to only build the -all image
t-lo Sep 15, 2026
685866b
Drop package repo overrides for the show-changes environment
chewi Sep 15, 2026
fd373a6
coreos-overlay: Drop old repoman config
chewi Sep 15, 2026
a9bcfd7
Dockerfile.sdk-update: regenerate configs before doing anything else
t-lo Sep 15, 2026
7537ac6
update_metadata: Drop ancient unused script
chewi Sep 15, 2026
b96b523
Amend several documented references to portage-stable
chewi Sep 15, 2026
56e9899
find_overlay_dups: Replace instances of portage-stable
chewi Sep 15, 2026
77698f3
tag_release: Drop ancient unused script
chewi Sep 15, 2026
0a932ed
checkout: Drop ancient unused script
chewi Sep 15, 2026
8228248
build_library/dev_container_util.sh: Replace instances of portage-stable
chewi Sep 15, 2026
78b1d06
bootstrap_sdk: Rename --portage_stable option to --gentoo_repo
chewi Sep 17, 2026
5599f5d
.github: Replace workflow for portage-stable with gentoo submodule one
chewi Sep 17, 2026
642ec64
build_library/dev_container_util.sh: Drop basic Portage data from image
chewi Sep 16, 2026
36450bd
coreos-base/emerge-gitclone: Bump for new dev container layout
chewi Sep 18, 2026
61d687c
bootstrap_sdk_container: Drop unused -l (log directory) option
chewi Sep 18, 2026
5103704
common.sh: Use SHA512 and BLAKE2B for SDK digests like Gentoo does
chewi Sep 18, 2026
cf8b64b
Allow the SDK seed tarball to be given as a URL and overridden by CI
chewi Sep 18, 2026
6af0867
Prefix: remove overlay, call out in Readme that porting is needed
t-lo Sep 23, 2026
742e7e1
dev-util/catalyst: Backport fix for recent Portage changes
chewi Sep 26, 2026
165b6e0
Revert "dev-python/gpep517: Patch to fix cross-compiling with setupto…
chewi Sep 29, 2026
9a44432
coreos-base/update_engine: Bump for unused variable fix
chewi Sep 29, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
The diff you're trying to view is too large. We only load the first 3000 changed files.
2 changes: 0 additions & 2 deletions .github/workflows/image_changes.sh
Original file line number Diff line number Diff line change
Expand Up @@ -25,8 +25,6 @@ function github_ricj_callback() {
show_changes_env+=(
# Override the default locations of repositories.
"SCRIPTS_REPO=."
"COREOS_OVERLAY_REPO=../coreos-overlay"
"PORTAGE_STABLE_REPO=../portage-stable"
)
show_changes_params+=(
# We may not have a tag handy, so we tell show-changes
Expand Down
36 changes: 0 additions & 36 deletions .github/workflows/update-metadata-glsa.yaml

This file was deleted.

117 changes: 39 additions & 78 deletions .github/workflows/update-portage-stable-packages-from-list.yaml
Original file line number Diff line number Diff line change
@@ -1,92 +1,53 @@
name: Keep portage-stable packages updated
name: Keep Gentoo submodule updated
on:
schedule:
- cron: '0 7 * * 1'
- cron: '0 4 * * 0-4'
workflow_dispatch:

jobs:
keep-packages-updated:
keep-gentoo-updated:
runs-on: ubuntu-latest
steps:
- name: Check out scripts
uses: actions/checkout@v4
uses: actions/checkout@v7
with:
token: ${{ secrets.GITHUB_TOKEN }}
path: ./scripts
- name: Check out Gentoo
uses: actions/checkout@v4
with:
repository: gentoo/gentoo
path: gentoo
# Gentoo is quite a large repo, so limit ourselves to last
# quarter milion of commits. It is about two years worth of changes.
# Is is needed by the sync script to find out the hash of the last commit
# that made the changes to the package.
fetch-depth: 250000
ref: master
- name: Check out build scripts
uses: actions/checkout@v4
with:
repository: flatcar/flatcar-build-scripts
path: flatcar-build-scripts
- name: Update listed packages
id: update-listed-packages
token: ${{ secrets.BOT_PR_TOKEN }}
path: scripts
sparse-checkout: |
.gitmodules
.github/workflows/common.sh
sparse-checkout-cone-mode: false
- name: Update Gentoo submodule
id: update-gentoo
env:
WORK_SCRIPTS_DIR: "${{ github.workspace }}/scripts"
run: |
git config --global user.name "Flatcar Buildbot"
git config --global user.email "buildbot@flatcar-linux.org"
old_head=$(git -C scripts rev-parse HEAD)
packages_list=$(realpath scripts/.github/workflows/portage-stable-packages-list)
gentoo_repo=$(realpath gentoo)
build_scripts=$(realpath flatcar-build-scripts)
pushd scripts/sdk_container/src/third_party/portage-stable
while read -r package; do
if [[ ! -e "${package}" ]]; then
# If this happens, it means that the package was moved to overlay
# or dropped, the list ought to be updated.
echo "::warning title=${package}::Nonexistent package"
continue
fi
if [[ ! -e "${gentoo_repo}/${package}" ]]; then
# If this happens, it means that the package was obsoleted or moved
# in Gentoo. The obsoletion needs to be handled in the case-by-case
# manner, while move should be handled by doing the same move
# in portage-stable. The build should not break because of the move,
# because most likely it's already reflected in the profiles/updates
# directory.
echo "::warning title=${package}::Obsolete or moved package"
continue
fi
GENTOO_REPO="${gentoo_repo}" "${build_scripts}/sync-with-gentoo" "${package}"
done < <(grep '^[^#]' "${packages_list}")
popd
new_head=$(git -C scripts rev-parse HEAD)
updated=0
if [[ "${new_head}" != "${old_head}" ]]; then
updated=1
set -euo pipefail
source scripts/.github/workflows/common.sh
prepare_git_repo
submodule=sdk_container/src/third_party/gentoo
url=$(git -C "${WORK_SCRIPTS_DIR}" config --file .gitmodules --get "submodule.${submodule}.url")
branch=$(git -C "${WORK_SCRIPTS_DIR}" config --file .gitmodules --get "submodule.${submodule}.branch")
read -r latest_commit _ < <(git ls-remote --exit-code "${url}" "refs/heads/${branch}")
short_commit=${latest_commit:0:12}
git -C "${WORK_SCRIPTS_DIR}" update-index --cacheinfo "160000,${latest_commit},${submodule}"
if git -C "${WORK_SCRIPTS_DIR}" diff --cached --quiet -- "${submodule}"; then
echo 'UPDATE_NEEDED=0' >>"${GITHUB_OUTPUT}"
exit 0
fi
todaydate=$(date +%Y-%m-%d)
echo "UPDATED=${updated}" >>"${GITHUB_OUTPUT}"
echo "TODAYDATE=${todaydate}" >>"${GITHUB_OUTPUT}"
- name: Create pull request for main branch
uses: peter-evans/create-pull-request@v6
if: steps.update-listed-packages.outputs.UPDATED == 1
git -C "${WORK_SCRIPTS_DIR}" commit --signoff -m "gentoo: Update to ${short_commit}"
cleanup_repo
echo 'UPDATE_NEEDED=1' >>"${GITHUB_OUTPUT}"
echo "LATEST_COMMIT=${latest_commit}" >>"${GITHUB_OUTPUT}"
echo "SHORT_COMMIT=${short_commit}" >>"${GITHUB_OUTPUT}"
- name: Create pull request
uses: peter-evans/create-pull-request@v8
if: steps.update-gentoo.outputs.UPDATE_NEEDED == 1
with:
token: ${{ secrets.GITHUB_TOKEN }}
token: ${{ secrets.BOT_PR_TOKEN }}
path: scripts
branch: buildbot/weekly-portage-stable-package-updates-${{steps.update-listed-packages.outputs.TODAYDATE }}
branch: buildbot/update-gentoo-submodule
delete-branch: true
base: main
title: Weekly portage-stable package updates ${{steps.update-listed-packages.outputs.TODAYDATE }}
body: |
CI: TODO

--

TODO: Changes.

--

- [ ] changelog
- [ ] image diff
labels: main
draft: true
title: Update gentoo submodule to ${{ steps.update-gentoo.outputs.SHORT_COMMIT }}
body: Update `sdk_container/src/third_party/gentoo` to flatcar-hub/gentoo@${{ steps.update-gentoo.outputs.LATEST_COMMIT }}.
labels: auto-ci,jenkins-ci,main
5 changes: 5 additions & 0 deletions .gitmodules
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
[submodule "sdk_container/src/third_party/gentoo"]
path = sdk_container/src/third_party/gentoo
url = https://github.com/flatcar-hub/gentoo.git
branch = master
shallow = true
Comment thread
t-lo marked this conversation as resolved.
Comment thread
t-lo marked this conversation as resolved.
Comment thread
t-lo marked this conversation as resolved.
Comment on lines +1 to +5
8 changes: 8 additions & 0 deletions PREFIX.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,11 @@
# !!! OUTDATED. This needs to be ported to match the changes after the Gentoo move !!!

If anything, working with prefixes should be a lot easier now.
But the below is outdated and will not work.
`prefix-overlay` has been removed too, as it duplicated ebuilds now available via `gentoo`.

# !!! OUTDATED. This needs to be ported to match the changes after the Gentoo move !!!

# Prefix - build portable, distro-independent apps

**!!! NOTE: Prefix support in the Flatcar SDK is EXPERIMENTAL at this time !!!**
Expand Down
11 changes: 5 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,18 +28,17 @@ The SDK can be used to
# Using the scripts repository

The repository is meant to be the entry point for Flatcar builds and development.
Ebuilds for all packages reside in one of 2 subdirectories - [coreos-overlay](sdk_container/src/third_party/coreos-overlay) and [portage-stable](sdk_container/src/third_party/portage-stable/):
Ebuilds for all packages reside in one of 2 subdirectories - [coreos-overlay](sdk_container/src/third_party/coreos-overlay) and [gentoo](sdk_container/src/third_party/gentoo/):
```
scripts
+--sdk_container
+---------src
+--third_party
+------coreos-overlay
+------portage-stable
+------gentoo
```

`portage-stable` is kept in alignment with upstream Gentoo and should not contain any modifications (with only minor, well-justified exceptions).
Consider it a small sub-set of Gentoo.
`gentoo` is a git submodule, pointing to Flatcar's fork of the main upstream Gentoo package repository. That fork is generally aligned with Gentoo and only occasionally diverges into alternative branches for brief periods to apply fixes shortly before upstream does. It includes far more packages than Flatcar actually uses.

`coreos-overlay` contains significantly modified or even entirely self-written ebuilds.

Expand All @@ -66,7 +65,7 @@ While work on a native ARM64 native SDK is ongoing, it's unfortunately not ready

The container can be run in one of two ways - "standalone", or integrated with the [scripts](https://github.com/flatcar/scripts) repo:
* Standalone mode will use no host volumes and will allow you to play with the SDK in a sandboxed throw-away environment. In standalone mode, you interface with Docker directly to use the SDK container.
* Integrated mode will closely integrate with the scripts repo directory and bind-mount it as well as the portage-stable and coreos-overlay directories into the container. Integrated mode uses wrapper scripts to interact with the SDK container. This is the recommended way for developing patches for Flatcar.
* Integrated mode will closely integrate with the scripts repo directory and bind-mount it as well as the gentoo and coreos-overlay directories into the container. Integrated mode uses wrapper scripts to interact with the SDK container. This is the recommended way for developing patches for Flatcar.

## Standalone mode

Expand Down Expand Up @@ -96,7 +95,7 @@ To start a container in privileged mode with `/dev` available use:

This is the preferred mode of working with the SDK.
Interaction with the container happens via wrapper scripts from the scripts repository.
Both the host's scripts repo as well as the ebuild paths (portage-stable and coreos-overlay) are made available in the container, allowing for work on these directly.
Both the host's scripts repo as well as the ebuild directories (gentoo and coreos-overlay) are made available in the container, allowing for work on these directly.
The wrapper scripts will re-use existing containers instead of creating new ones to preserve your work in the container, enabling consistency.

To clone the scripts repo and pick a version:
Expand Down
13 changes: 8 additions & 5 deletions bootstrap_sdk_container
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,10 @@ set -eu
cd $(dirname "$0")
source sdk_lib/sdk_container_common.sh

unset seed_tarball
bootstrap_args=()
seed_version=""
target_version=""
logdir=''

declare -a cleanup

Expand All @@ -28,10 +29,10 @@ usage() {
echo " The SDK container will be pulled and the tarball"
echo " downloaded if necessary."
echo " <new-sdk-vernum> - SDK version number (e.g. '3027.0.0') of the new SDK."
echo " --seed_tarball <x> - Optional path or URL to override the default seed tarball."
echo " -x <cleanup-script> - For each resource generated during build (container etc.)"
echo " add a cleanup line to <script> which, when run, will free"
echo " the resource. Useful for CI."
echo " -l <directory> - Gather build logs here."
echo " -h - Print this help."
echo
}
Expand All @@ -40,8 +41,8 @@ usage() {
while [ 0 -lt $# ] ; do
case "$1" in
-h) usage; exit 0;;
-l) logdir=${2}; shift 2;;
-x) cleanup=("-x" "$2"); shift; shift;;
-x) cleanup=("-x" "$2"); shift 2;;
--seed_tarball) seed_tarball=$2; shift 2 ;;
*) if [ -z "$seed_version" ] ; then
seed_version="$1"
elif [ -z "$target_version" ] ; then
Expand Down Expand Up @@ -74,10 +75,12 @@ if $official; then
export COREOS_OFFICIAL=1
fi

[[ -n ${seed_tarball-} ]] && bootstrap_args+=( --seed_tarball "$seed_tarball" )

# bootstrap_sdk needs FLATCAR_SDK_VERSION set to the seed version
failed=''
./run_sdk_container "${cleanup[@]}" -V "$seed_version" -v "$target_version" \
sudo -E ./bootstrap_sdk || failed=x
sudo -E ./bootstrap_sdk "${bootstrap_args[@]}" || failed=x

# Update versionfile to the actual SDK version
create_versionfile "${target_version}"
Expand Down
4 changes: 2 additions & 2 deletions build_library/build_image_util.sh
Original file line number Diff line number Diff line change
Expand Up @@ -294,7 +294,7 @@ get_metadata() {
local mirror="$(echo "${v}" | grep mirror:// | cut -d '/' -f 3)"
if [ -n "${mirror}" ]; then
# Take only first mirror, those not working should be removed
local location="$(grep "^${mirror}"$'\t' /mnt/host/source/src/third_party/portage-stable/profiles/thirdpartymirrors | cut -d $'\t' -f 2- | cut -d ' ' -f 1 | tr -d $'\t')"
local location="$(grep "^${mirror}"$'\t' /mnt/host/source/src/third_party/gentoo/profiles/thirdpartymirrors | cut -d $'\t' -f 2- | cut -d ' ' -f 1 | tr -d $'\t')"
v="$(echo "${v}" | sed "s#mirror://${mirror}/#${location}#g")"
fi
new_val+="${v} "
Expand Down Expand Up @@ -419,7 +419,7 @@ EOF
license_list="$(jq -r '.[] | "\(.licenses | .[])"' "${json_input}" | sort | uniq)"
local license_dirs=(
"/mnt/host/source/src/third_party/coreos-overlay/licenses/"
"/mnt/host/source/src/third_party/portage-stable/licenses/"
"/mnt/host/source/src/third_party/gentoo/licenses/"
"none"
)
for license_file in ${license_list}; do
Expand Down
Loading
Loading