Skip to content

sys-kernel/coreos-modules: Enable dm-verity signature support - #1115

Open
jepio wants to merge 1 commit into
mainfrom
jepio/dm-verity-sig
Open

sys-kernel/coreos-modules: Enable dm-verity signature support#1115
jepio wants to merge 1 commit into
mainfrom
jepio/dm-verity-sig

Conversation

@jepio

@jepio jepio commented Sep 6, 2023

Copy link
Copy Markdown
Member

Enable dm-verity signature support

This allows checking against the primary kernel keyring, but not the secondary. It is a prerequisite for the ioctl to inject the signature to be supported in the first place.

How to use

Test with sysext with signature: flatcar/sysext-bakery#24.

Testing done

Not yet. Will see if ioctl still reports error after an image for this PR is built.

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

@jepio
jepio temporarily deployed to development September 6, 2023 16:01 — with GitHub Actions Inactive
@pothos

pothos commented Sep 6, 2023 •
edited
Loading

Copy link
Copy Markdown
Member

I think we can also enable the secondary keyring with CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING

The other options mentioned in flatcar/Flatcar#855 require a newer kernel
Edit: Forgot we are on 6.1, so CONFIG_INTEGRITY_MACHINE_KEYRING should work, too

@github-actions

github-actions Bot commented Sep 6, 2023 •
edited
Loading

Copy link
Copy Markdown

Test report for 4866.0.0+nightly-20261027-2100 / amd64

Platforms tested : qemu_uefi-amd64

🟢 ok bpf.ig; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.basic; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.cloudinit.basic; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.cloudinit.multipart-mime; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.cloudinit.script; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.disk.raid0.data; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.disk.raid0.root; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.disk.raid1.data; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.disk.raid1.root; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.etcd-member.discovery; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.etcd-member.etcdctlv3; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.etcd-member.v2-backup-restore; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.filesystem; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.flannel.udp; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.flannel.vxlan; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.instantiated.enable-unit; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.kargs; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.luks; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.oem.indirect; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.oem.indirect.new; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.oem.regular; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.oem.regular.new; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.oem.reuse; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.oem.wipe; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.partition_on_boot_disk; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.symlink; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.translation; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.btrfsroot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.ext4root; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.groups; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.once; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.sethostname; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.users; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v1.xfsroot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2.btrfsroot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2.ext4root; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2.users; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2.xfsroot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2_1.ext4checkexisting; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2_1.swap; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.ignition.v2_1.vfat; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.install.cloudinit; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.internet; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.locksmith.cluster; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.network.initramfs.second-boot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.network.iptables; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.network.listeners; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.network.nftables; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.network.wireguard; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.omaha.ping; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.osreset.ignition-rerun; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.overlay.cleanup; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.swap_activation; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.sysext.boot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.sysext.fallbackdownload # SKIP; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tang.nonroot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tang.root; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.toolbox.dnf-install; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tpm.eventlog; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tpm.nonroot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tpm.root; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tpm.root-cryptenroll; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tpm.root-cryptenroll-pcr-noupdate; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.tpm.root-cryptenroll-pcr-withupdate; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.update.badverity; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.update.reboot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.users.shells; Succeeded: qemu_uefi-amd64 (1)

🟢 ok cl.verity; Succeeded: qemu_uefi-amd64 (1)

🟢 ok confext.skiprefresh; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.auth.verify; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.groups; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.once; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.resource.local; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.resource.remote; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.resource.s3.versioned; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.security.tls; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.sethostname; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.ignition.systemd.enable-service; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.locksmith.reboot; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.locksmith.tls; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.selinux.boolean; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.selinux.enforce; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.tls.fetch-urls; Succeeded: qemu_uefi-amd64 (1)

🟢 ok coreos.update.badusr; Succeeded: qemu_uefi-amd64 (1)

❌ not ok devcontainer.docker; Failed: qemu_uefi-amd64 (1, 2, 3, 4, 5)

                Diagnostic output for qemu_uefi-amd64, run 5 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3072 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 4 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3080 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 3 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3050 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 2 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3090 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 1 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3080 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "

❌ not ok devcontainer.systemd-nspawn; Failed: qemu_uefi-amd64 (1, 2, 3, 4, 5)

                Diagnostic output for qemu_uefi-amd64, run 5 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3101 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 4 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3077 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 3 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3101 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 2 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3067 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 1 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3051 ms: Could not connect to server"
    L34: "devcontainer.go:236: main script failed: Process exited with status 7_"
    L35: " "

🟢 ok docker.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.btrfs-storage; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.containerd-restart; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.enable-service.sysext; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.lib-coreos-dockerd-compat; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.network-openbsd-nc; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.selinux; Succeeded: qemu_uefi-amd64 (1)

🟢 ok docker.userns; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.35.1.calico.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.35.1.cilium.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.35.1.flannel.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.36.1.calico.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.36.1.cilium.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.36.1.flannel.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.37.0.calico.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.37.0.cilium.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok kubeadm.v1.37.0.flannel.base; Succeeded: qemu_uefi-amd64 (1)

🟢 ok linux.nfs.v3; Succeeded: qemu_uefi-amd64 (1)

🟢 ok linux.nfs.v4; Succeeded: qemu_uefi-amd64 (1)

🟢 ok linux.ntp; Succeeded: qemu_uefi-amd64 (1)

🟢 ok misc.fips; Succeeded: qemu_uefi-amd64 (1)

🟢 ok packages; Succeeded: qemu_uefi-amd64 (3); Failed: qemu_uefi-amd64 (1, 2)

                Diagnostic output for qemu_uefi-amd64, run 2 
    L1: " _packages/sys-block/open-iscsi (34.45s)"
    L2: "cluster.go:125: Unable to find image _ghcr.io/flatcar/targetcli-fb:latest_ locally"
    L3: "cluster.go:125: latest: Pulling from flatcar/targetcli-fb"
    L4: "cluster.go:125: 3d3086a1439f: Pulling fs layer"
    L5: "cluster.go:125: a2318d6c47ec: Pulling fs layer"
    L6: "cluster.go:125: 71446780c71e: Download complete"
    L7: "cluster.go:125: a2318d6c47ec: Download complete"
    L8: "cluster.go:125: 3d3086a1439f: Download complete"
    L9: "cluster.go:125: a2318d6c47ec: Pull complete"
    L10: "cluster.go:125: 3d3086a1439f: Pull complete"
    L11: "cluster.go:125: Digest: sha256:b6cd65db981974e8b74938617218dd023775b969f9a059ced21e6ce6fa4763c1"
    L12: "cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/targetcli-fb:latest"
    L13: "cluster.go:125: mke2fs 1.47.4 (6-Mar-2025)"
    L14: "cluster.go:125: Created symlink _/etc/systemd/system/remote-fs.target.wants/iscsi.service_ ??? _/usr/lib/systemd/system/iscsi.service_."
    L15: "cluster.go:145: __sudo /check__ failed: output no /dev/sda device after reboot, status Process exited with status 1_"
    L16: " "
                Diagnostic output for qemu_uefi-amd64, run 1 
    L1: " _packages/sys-block/open-iscsi (35.88s)"
    L2: "cluster.go:125: Unable to find image _ghcr.io/flatcar/targetcli-fb:latest_ locally"
    L3: "cluster.go:125: latest: Pulling from flatcar/targetcli-fb"
    L4: "cluster.go:125: 3d3086a1439f: Pulling fs layer"
    L5: "cluster.go:125: a2318d6c47ec: Pulling fs layer"
    L6: "cluster.go:125: 71446780c71e: Download complete"
    L7: "cluster.go:125: a2318d6c47ec: Download complete"
    L8: "cluster.go:125: 3d3086a1439f: Download complete"
    L9: "cluster.go:125: a2318d6c47ec: Pull complete"
    L10: "cluster.go:125: 3d3086a1439f: Pull complete"
    L11: "cluster.go:125: Digest: sha256:b6cd65db981974e8b74938617218dd023775b969f9a059ced21e6ce6fa4763c1"
    L12: "cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/targetcli-fb:latest"
    L13: "cluster.go:125: mke2fs 1.47.4 (6-Mar-2025)"
    L14: "cluster.go:125: Created symlink _/etc/systemd/system/remote-fs.target.wants/iscsi.service_ ??? _/usr/lib/systemd/system/iscsi.service_."
    L15: "cluster.go:145: __sudo /check__ failed: output no /dev/sda device after reboot, status Process exited with status 1_"
    L16: " "

🟢 ok sysext.custom-docker.sysext; Succeeded: qemu_uefi-amd64 (1)

❌ not ok sysext.custom-oem; Failed: qemu_uefi-amd64 (1, 2, 3, 4, 5)

                Diagnostic output for qemu_uefi-amd64, run 5 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3071 ms: Could not connect to server"
    L34: "sysext.go:391: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 4 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3060 ms: Could not connect to server"
    L34: "sysext.go:391: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 3 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3076 ms: Could not connect to server"
    L34: "sysext.go:391: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 2 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3089 ms: Could not connect to server"
    L34: "sysext.go:391: main script failed: Process exited with status 7_"
    L35: " "
                Diagnostic output for qemu_uefi-amd64, run 1 
    L1: " Error: _cluster.go:125: + set -euo pipefail"
    L2: "cluster.go:125: + source /home/core/download-library.sh"
    L3: "cluster.go:125: + download_dev_container_image flatcar_developer_container.bin"
    L4: "cluster.go:125: + local output_bin=flatcar_developer_container.bin"
    L5: "cluster.go:125: + shift"
    L6: "cluster.go:125: + local arch version image_url bzip2cat"
    L7: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L8: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L9: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L10: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L11: "cluster.go:125: ++ echo amd64"
    L12: "cluster.go:125: + arch=amd64"
    L13: "cluster.go:125: ++ source /usr/share/flatcar/release"
    L14: "cluster.go:125: +++ FLATCAR_RELEASE_VERSION=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L15: "cluster.go:125: +++ FLATCAR_RELEASE_BOARD=amd64-usr"
    L16: "cluster.go:125: +++ FLATCAR_RELEASE_APPID=_{e96281a6-d1af-4bde-9a0a-97b76e56dc57}_"
    L17: "cluster.go:125: ++ echo 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L18: "cluster.go:125: + version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L19: "cluster.go:125: ++ process_template http://10.0.17.217:12345/flatcar_developer_container.bin.bz2 amd64 4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L20: "cluster.go:125: ++ local template=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L21: "cluster.go:125: ++ shift"
    L22: "cluster.go:125: ++ local arch=amd64"
    L23: "cluster.go:125: ++ shift"
    L24: "cluster.go:125: ++ local version=4866.0.0+nightly-20261027-2100-9-g8d570b19db"
    L25: "cluster.go:125: ++ shift"
    L26: "cluster.go:125: ++ local result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L27: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L28: "cluster.go:125: ++ result=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L29: "cluster.go:125: ++ echo http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L30: "cluster.go:125: + image_url=http://10.0.17.217:12345/flatcar_developer_container.bin.bz2"
    L31: "cluster.go:125: + echo _Fetching developer container from http://10.0.17.217:12345/flatcar_developer_container.bin.bz2_"
    L32: "cluster.go:125: + curl --fail --silent --show-error --location --retry-delay 1 --retry 60 --retry-connrefused --retry-max-time 60 --connect-timeout 20 --remote-name http://10.0.17.217:12345/flatcar_de?veloper_container.bin.bz2"
    L33: "cluster.go:125: curl: (7) Failed to connect to 10.0.17.217:12345 after 3071 ms: Could not connect to server"
    L34: "sysext.go:391: main script failed: Process exited with status 7_"
    L35: " "

🟢 ok sysext.disable-containerd; Succeeded: qemu_uefi-amd64 (1)

🟢 ok sysext.disable-docker; Succeeded: qemu_uefi-amd64 (1)

🟢 ok sysext.simple; Succeeded: qemu_uefi-amd64 (1)

🟢 ok systemd.journal.remote; Succeeded: qemu_uefi-amd64 (1)

🟢 ok systemd.journal.user; Succeeded: qemu_uefi-amd64 (1)

🟢 ok systemd.sysusers.gshadow; Succeeded: qemu_uefi-amd64 (1)

@dongsupark

dongsupark commented Sep 26, 2023

Copy link
Copy Markdown
Member

Moved to backlog. Feel free to update.

@github-actions github-actions Bot mentioned this pull request Nov 9, 2023
Closed
@t-lo

t-lo commented Mar 5, 2026

Copy link
Copy Markdown
Member

@danzatt What's the status - we might have implemented this accidentally already?

@chewi chewi mentioned this pull request Aug 12, 2026
Open
@chewi chewi mentioned this pull request Oct 27, 2026
Merged
1 of 2 tasks
Jeremi Piotrowski @chewi
sys-kernel/coreos-modules: Enable dm-verity signature support
8d570b1 
This allows checking against the primary kernel keyring, but not the secondary.
It is a prerequisite for the ioctl to inject the signature to be supported in
the first place.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
@chewi
chewi force-pushed the jepio/dm-verity-sig branch from 9e5881b to 8d570b1 Compare October 28, 2026 18:18
@chewi
chewi requested a review from a team as a code owner October 28, 2026 18:18
@chewi chewi self-assigned this Oct 28, 2026
@chewi
chewi deployed to development October 28, 2026 18:18 — with GitHub Actions Active

This branch was successfully deployed

1 active deployment
development — 8d570b19 Deployed Oct 28, 2026 by chewi via Wait for approval #6040
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@chewi chewi

Labels

main

Projects

Flatcar tactical, release planning, and roadmap
Status: 🪵Backlog

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@jepio @pothos @dongsupark @t-lo @chewi