Repository navigation
package.accept_keywords: unmask incus-7.5.1 - #4362
Conversation
There was a problem hiding this comment.
🟢 Approval recommended
No active review issues are reported for the Incus 7.5.1 keyword acceptance change.
No open issues 🎉
What changed in this PR
Updates Flatcar’s keyword acceptance to allow Incus 7.5.1 on AMD64 and ARM64, addressing the lack of a stable ARM64 version in Gentoo.
Changes:
- Replaces the Incus 7.4-r1 entry with an exact 7.5.1 entry.
- Updates the accompanying comment to describe its experimental status in Gentoo.
| File | Description |
|---|---|
| sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords | Accepts Incus 7.5.1 in the shared Flatcar profile. |
Review effort: Balanced
tormath1
left a comment
There was a problem hiding this comment.
LGTM - but we might add some CVEs entries to the security changelog, at least: CVE-2026-85185 and CVE-2026-85185
That's the same CVE, and it's LXD though? |
Sorry, I meant: And yes it's for LXD but they still share code (Incus is a community fork of LXD). |
This change unmasks incus-7.5.1 for Flatcar. 7.0 is stable in Gentoo, 7.4 was stable in portage-stable before the Gentoo move. Gentoo currently does not have a stable version available for ARM64 at all. To mitigate, we unmask 7.5.1 for AMD64 and ARM64 for Flatcar. Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
4a259bd to
44a706f
Compare
Added, thank you! Long term, we really want these to be added automatically. All we're doing here is rebuilding Gentoo ebuilds; this information must be available somewhere in Gentoo, or via generic CVE information? |
Co-authored-by: Krzesimir Nowak <knowak@microsoft.com> Signed-off-by: Thilo Fromm <thilo.alexander@gmail.com>
341d126 to
fb30b1c
Compare
This change unmasks incus-7.5.1 for Flatcar. 7.0 is stable in Gentoo, 7.4 was stable in portage-stable before the Gentoo move. Gentoo currently does not have a stable version available for ARM64 at all.
To mitigate, we unmask 7.5.1 for AMD64 and ARM64 for Flatcar.
Ran a build for amd64 and arm64 locally (no tests).