Replies: 2 comments 8 replies
-
Still affected by:
Reported OKD 4.9 as affected 2 weeks ago to https://bugzilla.redhat.com/buglist.cgi?quicksearch=product%3AOKD%20component%3Asecurity but didn't got any reply yet. Can we get a kernel / fedora coreos update ? |
Beta Was this translation helpful? Give feedback.
-
|
We're fetching latest F34 (from updates) when building okd-machine-os, so we'll have it as soon as it hits F35. F35 cannot be used atm due to https://bugzilla.redhat.com/show_bug.cgi?id=2000963 (needs kube rebases to land in 4.10/4.9) |
Beta Was this translation helpful? Give feedback.
-
|
Mmm kernel-5.15.5-100.fc34 shipped to updates 2 weeks ago. But I see only fc35 builds on https://builds.coreos.fedoraproject.org/ would it work asking for a f34 update on coreos tracker? |
Beta Was this translation helpful? Give feedback.
-
|
As mentioned in the opened ticket, we won't be making any Fedora 34 based releases of Fedora CoreOS. One option for OKD is to update the manifest pins & lockfiles with the kernel version needed with the fixes to create an updated machine-os-content but that would be untested from the Fedora CoreOS perspective. |
Beta Was this translation helpful? Give feedback.
-
|
That needs to be a Fedora release. OKD doesn't use lockfiles, so unless kernel version is pinned, we'd be using whatever is latest in F34 repos (including |
Beta Was this translation helpful? Give feedback.
-
|
I'm not sure I fully understand the discussion here. As @travier mentioned our FCOS streams have all moved to Fedora Linux 35. For Fedora 34 (which I think you are stuck on in OKD as mentioned in #1015 (reply in thread)), here are the list of most recent kernel updates: https://bodhi.fedoraproject.org/updates/?search=&packages=kernel&releases=F34 |
Beta Was this translation helpful? Give feedback.
-
|
Well then if okd-machine-os isn't build using the Fedora CoreOS lockfiles, you will simply get the latest kernels by rebuilding. |
Beta Was this translation helpful? Give feedback.
-
We'd really love to use lockfile, but we need to use older selinux-profiles so its the risk we have to take for now. |
Beta Was this translation helpful? Give feedback.
-
Client tools for OpenShift
These archives contain the client tooling for OpenShift.
To verify the contents of this directory, use the 'gpg' and 'shasum' tools to
ensure the archives you have downloaded match those published from this location.
The openshift-install binary has been preconfigured to install the following release:
This discussion was created from the release 4.9.0-0.okd-2021-12-12-025847.
Beta Was this translation helpful? Give feedback.
All reactions