Commit graph

521 commits

Author SHA1 Message Date
Kyle Gospodnetich
f12b59dff9
feat: Restore kvmfr kmod to extra, remove tmff2 kmod (#499) 2026-04-06 23:53:44 -07:00
Kyle Gospodnetich
70ba37b7f5
chore: Drop terra from common akmods, it will remain in extra (#498) 2026-04-05 00:08:18 -07:00
Kyle Gospodnetich
f374ed9ba9
fix: Drop the terra include for now, cache makes this unneeded (#497) 2026-04-04 23:55:05 -07:00
Kyle Gospodnetich
7d2919698b
chore: Increase version (#496) 2026-04-04 23:09:15 -07:00
Kyle Gospodnetich
174c74895a
fix: Include terra gpg key (#495) 2026-04-04 22:45:44 -07:00
Kyle Gospodnetich
49ebcc2f5e
fix: Use the OGC xonedo package from Terra (#493) 2026-04-04 22:02:33 -07:00
ubot-7274[bot]
7bf34b6677
chore(deps): update ghcr.io/ublue-os/devcontainer:latest docker digest to 5abc615 (#494)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-04-04 21:35:12 -07:00
Kyle Gospodnetich
6d0145b5aa
fix: Restore the old xpadneo (#492) 2026-04-04 09:34:31 -07:00
Kyle Gospodnetich
0bc7380c0a
feat: Use Terra repository for some akmods, add steering wheel and elgato drivers to extra repo (#489)
* feat: Add steering wheel force feedback akmods from Terra to extra
feat: Add sc0710 akmod for Elgato capture cards
fix: Use OpenGamingCollective version of xone and zenergy from Terra where it auto-updates
chore(README): Update list of packages

* fix: Use rpmkeys

* fix: Add terra.repo to akmods spec
2026-04-03 21:46:44 -07:00
Dylan M. Taylor
1fa5099b5b
fix: remove hardcoded sslcacert from nvidia repo config (#488)
Fedora 44 dropped /etc/pki/tls/certs/ca-bundle.crt in favor of
directory-hash certs. Removing the sslcacert line lets dnf use its
default CA store.
2026-04-03 04:47:15 +00:00
Dylan M. Taylor
00d1d7a489
fix: use Fedora version-specific tag for OGC kernel packages (#487) 2026-04-03 01:33:32 +00:00
Dylan M. Taylor
79f9814abb
feat: add OGC Fedora 44 builds (#485) 2026-04-02 10:50:07 +00:00
Kyle Gospodnetich
cb7d29003d
fix: Handle OGC version number properly (#484) 2026-03-31 23:34:33 -07:00
Kyle Gospodnetich
59869377fa
chore(README): Add OGC build badge (#482) 2026-03-31 00:20:27 -07:00
Kyle Gospodnetich
80810d08b5
fix: Add missing permission (#481) 2026-03-31 00:14:18 -07:00
Kyle Gospodnetich
0b76c7fe4e
fix: Correct kernel version check for OGC kernel (#480)
* fix: Correct kernel version check for OGC kernel

* fix: Remove need for docker in our devcontainer
2026-03-31 00:00:41 -07:00
ubot-7274[bot]
3432883e13
chore(deps): pin ghcr.io/ublue-os/devcontainer docker tag to 36742df (#392)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-30 23:50:19 -07:00
ubot-7274[bot]
44081a7714
chore(deps): update github/codeql-action digest to c10b806 (#476)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-30 23:49:53 -07:00
dependabot[bot]
3a3f6a5196
chore(deps): bump github/codeql-action from 4.33.0 to 4.35.1 (#479)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b1bff81932...c10b8064de)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-30 23:49:39 -07:00
ubot-7274[bot]
18f7d162de
chore(deps): update actions/cache digest to 6682284 (#472)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-30 23:49:14 -07:00
Kyle Gospodnetich
4dbb8996da
fix: Add needed login-action for attestation (#475) 2026-03-20 09:07:57 -07:00
Kyle Gospodnetich
a0821117d2
feat: Add improvements recommended by the OpenSSF (#474)
* feat: Add OpenSSF Badge

* feat: Add build attestation
2026-03-20 08:54:42 -07:00
Kyle Gospodnetich
23ccfeec77
feat: Restore akmod-extra with a subset of the old akmods (#468)
* feat: Restore akmod-extra with a subset of the old akmods

* chore: Only build extra for OGC kernel for now
2026-03-19 19:07:31 -07:00
ubot-7274[bot]
75f96d113c
chore(deps): update actions/cache action to v5.0.4 (#473)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-19 18:10:18 -07:00
Kyle Gospodnetich
33b23a8e96
fix: Newer versions of Mesa no longer build mesa-va-drivers (#471) 2026-03-18 00:16:57 -07:00
Kyle Gospodnetich
7a09c56e67
fix: Use new OGC OCI name (#470) 2026-03-17 12:30:20 -07:00
Kyle Gospodnetich
66c38b28ee
feat: add OGC kernel support to fetch-kernel.sh for dual signing (#469) 2026-03-17 12:06:43 +00:00
Kyle Gospodnetich
877217a0ed
feat: restore xpadneo akmod (#465)
* feat: restore xpadneo akmod

* fix codacy requirements

---------

Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>
2026-03-16 14:36:24 -04:00
Kyle Gospodnetich
87f474d4d9
chore: Remove unneeded skip (#467) 2026-03-16 16:27:22 +00:00
dependabot[bot]
402d6b87a5
chore(deps): bump actions/checkout from 5.0.1 to 6.0.2 (#466)
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5.0.1...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-16 15:09:54 +00:00
Kyle Gospodnetich
73a6f664b3
feat: Add support for the Open Gaming Collective kernel (#463) 2026-03-16 09:48:51 +00:00
ubot-7274[bot]
06eff5a062
chore(deps): update actions/checkout digest to 93cb6ef (#424)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-16 05:20:04 +00:00
Benjamin Sherman
eb0db9e4c7
fix(ci): use explicit --add for safe.directory (#462)
* fix(ci): correct safe-directory flag and cache restore keys

The workflow used an abbreviated git flag that is easy to misread and brittle for future maintenance. Use the explicit --add form and align cache restore key prefixes with the primary cache key format so fallback restore can match as intended.

Assisted-by: OpenCode (gpt-5.3-codex)

* revert(ci): keep architecture-first cache restore keys

The architecture-first restore key pattern was intentionally introduced recently. Revert the follow-up change so this PR stays scoped to the safe.directory flag fix only.

Assisted-by: OpenCode (gpt-5.3-codex)
2026-03-15 23:45:30 +00:00
ubot-7274[bot]
822665bcd6
chore(deps): update actions/cache action to v5.0.3 (#444)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-15 16:24:28 -07:00
dependabot[bot]
ed9695be59
chore(deps): bump actions/checkout from 5.0.0 to 6.0.2 (#449)
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](08c6903cd8...de0fac2e45)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-15 16:24:19 -07:00
ubot-7274[bot]
6b4c6b23be
chore(deps): update actions/cache digest to cdf6c1f (#451)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-03-15 16:24:11 -07:00
dependabot[bot]
b4b6ae389d
chore(deps): bump actions/cache from 5.0.1 to 5.0.3 (#452)
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.1 to 5.0.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](9255dc7a25...cdf6c1fa76)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-15 16:24:03 -07:00
Adam Fidel
e30435b77c
chore: add Fedora 44 (#460)
* chore: add Fedora 44 to images.yaml

* restore old cron schedules

* Remove coreos variants

* Regenerate workflows

* Bump rawhide guards

---------

Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
2026-03-12 06:40:04 +00:00
renner
6a445c98dc
fix(nvidia): install missing packages (#461)
This doesn't seem to be pulled in anymore compared to using the script
from main. These also don't depend on a specific driver version so this
is fine to not bundle.
2026-03-11 22:37:32 -05:00
m2
c24805395e
fix: RPM package paths in nvidia-install.sh (#459) 2026-03-07 22:08:25 -05:00
m2
6c23f86ad8
chore(ci): Reorder Key to enable fallback (#458)
Right now for arm64/x86 builds, the KCKEY needs to have the same kernel
version.

Right now, longterm-6.12 is failing due to a version mismatch. This
setups a fallback using the restore-keys option for the cache-action. To
better support this, the documentation recommends going from least
specific to most specific. For us that would be arch - kernel_flavor -
kernel_version.

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
2026-03-07 23:19:32 +00:00
m2
d75d580945
feat: bundle the nvidia-install script into nvidia images (#457)
* feat: bundle the nvidia-install script into nvidia images

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* feat(nvidia): allow opt-out of 32 bit libraries

When calling this script it's now possible to opt out of installing 32
bit libraries by setting MULITLIB=0. Default behavior does not change as
the current behavior is definitely relied on.

This makes sense for images like Aurora and Bluefin that use Flatpak
steam and friends so you don't need the 32 bit libraries on the host as
this pulls in mesa, some parts of the nvidia stack and other core
system libraries. This makes the Aurora nvidia variant roughly 900MiB
lighter.

* chore: remove supergfxctl-plasmoid

According to one user this doesn't even work that well in the first
place, upstream is inactive. It's also causing build failures/partial
upgrades due to the upgraded libplasma 6.6.1. I think this is not worth
keeping around then.

See: https://github.com/ublue-os/main/pull/2139

* modeset=1 is enabled by default now

* update test-prep to use bundled rpms

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

---------

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
2026-03-07 17:06:39 -05:00
m2
906e565f71
fix: fix manifest handling (#456)
Signed-off-by: m2Giles <69128853+m2Giles@users.noreply.github.com>
2026-02-20 15:18:15 -05:00
m2
0e17812d3b
fix: update podman image list command and manifest push logic (#455)
Podman Image List no longer returns all tags associated with tagged image. This fixes that by instead getting the tags associated with 1 container ID.

Manifest Push also had an issue where the kernel-version manifest was not being pushed to registry.

Signed-off-by: m2Giles <69128853+m2Giles@users.noreply.github.com>
2026-02-19 14:42:56 -05:00
m2
7734dcccfa
feat: cache kmods common files when building kmods (#454)
* feat: cache nvidia rpms that are tied to driver version

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* cache all kmod files

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* xorg packages don't exist for lts repo.

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* update test script

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* fix unbound variable

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* remove src.rpms and install with globs

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

* Skip over broadcom-wl for aarch64. RPM Fusion does not provide the package

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>

---------

Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
2026-02-17 15:31:46 -06:00
Mathias Ringhof
56d2bb1341
feat: set zfs minor version per kernel flavor (#447)
moved fixed ZFS version out of Containerfile.in into the Justfile
enabling version selection by kernel flavor
coreos-stable: 2.3, coreos-testing: 2.4, default: 2.3

Assisted-by: GPT 5.2 Codex via Opencode
2026-01-27 11:54:38 -06:00
Benjamin Sherman
43628efe28
chore: release 6.17.12 coreos_stable_kernel_pin (#443)
Upstream CoreOS has handled the concern for 6.17.12, and this pin
has not actually been required.

CoreOS 43.20260105 will have 6.17.12 and a future release should
jump to 6.18.5.

https://fedoraproject.org/coreos/release-notes?arch=x86_64&stream=next
2026-01-15 09:44:41 -06:00
Benjamin Sherman
928db2b115
feat: use just var 'coreos_stable_kernel_pin' to limit kernel upgrades (#441) 2026-01-12 10:50:03 +02:00
Adam Fidel
a0fda5bc15
chore: remove f40 workaround (#438) 2026-01-11 11:07:24 +02:00
Benjamin Sherman
b61a7a2ad6
fix: ensure ZFS_MINOR_VERSION pin is respected (#436)
The ARG ZFS_MINOR_VERSION was too early in Containerfile, before the
last FROM statement before building ZFS kmod, thus it was ignored by
the RUN which built the kmod.

This moves it into the correct location and adds an echo to debug
what the provided version actually was.

Since zpools created on 2.4.0 can still be imported in 2.3.5
(verified in local testing), this will not only ensure we don't have
this occur again, but revert to 2.3.x for now.
2025-12-22 13:11:28 -06:00