Commit Graph

4857 Commits

Author SHA1 Message Date
0c958efbca Merge pull request #2375 from balena-os/alexgg/sb
Add NXP support to balenaOS secure boot
2024-10-28 11:03:27 -03:00
619f644299 Add NXP support to balenaOS secure boot
On NXP iMX devices the partitions are not encrypted with LUKS but with
the lower level dm-crypt subsystem.

Adapt the partition mount script to use dmsetup which works for both
LUKS and dm-crypt encrypted partitions.

Change-type: patch
Signed-off-by: Alex Gonzalez <alexg@balena.io>
2024-10-18 13:53:14 -03:00
43bb9523f0 v16.7.2 v16.7.2 2024-10-18 15:21:01 +00:00
6954e7c6cf Merge pull request #2380 from balena-os/bookworm
Use bookworm image to source journalctl binaries
2024-10-18 15:19:13 +00:00
57a17ea207 Use bookworm image to source journalctl binaries
Debian no longer publishes linux/arm/v5 images for bullseye, breaking
support for raspberry pi zero.

This change might not solve the issue indefinitely
as we don't know how long debian will continue publishing armv5 images.

Change-type: patch
2024-10-18 10:42:52 -03:00
cb465a1d81 v16.7.1 v16.7.1 2024-09-26 14:28:10 +00:00
c429daafc9 Merge pull request #2373 from balena-os/add-compose-init-support
Add support for init field from compose
2024-09-26 07:27:01 -07:00
ed1c18e369 Add support for init field from compose
Init supports boolean values, and is not included in the config when
not defined.

Change-type: patch
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-09-26 10:39:59 -03:00
e01aaaaafb v16.7.0 v16.7.0 2024-09-02 15:33:44 +00:00
23d74b7ca3 Merge pull request #2342 from balena-os/update-status
Report app release update status to the API
2024-09-02 15:32:39 +00:00
e9a52e6786 Store rejected apps in the database
This moves from throwing an error when an app is rejected due to unmet
requirements (because of contracts) to storing the target with a
`rejected` flag on the database.

The application manager filters rejected apps when calculating steps to
prevent them from affecting the current state. The state engine uses the
rejection info to generate the state report.

Change-type: minor
2024-08-30 10:52:11 -04:00
227fee9941 Set the app update status when reporting state
Change-type: minor
2024-08-30 10:52:11 -04:00
48e526ec43 Refactor contracts validation code
This updates the interfaces on lib/contracts and the validation in
the application-manager module.
2024-08-30 10:52:11 -04:00
e9f460fd75 Add update status to types
Change-type: minor
2024-08-30 10:52:11 -04:00
9b819e4837 Update typescript to 5.5.4 2024-08-30 10:52:11 -04:00
649a20fbe0 v16.6.1 v16.6.1 2024-08-29 16:36:13 +00:00
70a4fa3274 Merge pull request #2369 from balena-os/remove-patch-device
Remove unused patchDevice function
2024-08-29 16:35:17 +00:00
788afee9a1 Remove unused patchDevice function
This function was a remainder of the dependent devices code that no
was removed on #2105

Change-type: patch
2024-08-29 10:34:43 -04:00
5a1c81a408 v16.6.0 v16.6.0 2024-08-28 22:47:12 +00:00
da6f4bdbaf Merge pull request #2284 from balena-os/enable-redsocks-dnsu2t
Enable redsocks dnsu2t
2024-08-28 22:46:17 +00:00
186a412ecf Add dnsu2t support to API docs for PATCH /v1/device/host-config
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-28 14:01:58 -07:00
eaa07e97a9 Add support for redsocks dnsu2t config
Users may specify dnsu2t config by including a `dns` field
in the `proxy` section of PATCH /v1/device/host-config's body:
```
{
  network: {
    proxy: {
      dns: '1.1.1.1:53',
    }
  }
}
```

If `dns` is a string, ADDRESS and PORT are required and should be
in the format `ADDRESS:PORT`. The endpoint with error with
code 400 if either ADDRESS or PORT are missing.

`dns` may also be a boolean. If true, defaults will be configured.
If false, the dns configuration will be removed.

If `proxy` is patched to empty, `dns` will be removed regardless
of its current or input configs, as `dns` depends on an active
redsocks proxy to function.

Change-type: minor
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-28 14:01:51 -07:00
8bf346a6fd Parse dnsu2t block to dns config
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-28 13:51:46 -07:00
b775f8f14d Stringify dns subsection of redsocks input config to dnsu2t
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-28 13:51:46 -07:00
e724f60beb Strip additional fields from HostConfiguration type
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-28 13:51:46 -07:00
78f0561988 v16.5.8 v16.5.8 2024-08-27 22:41:44 +00:00
ead2c5b772 Merge pull request #2368 from balena-os/renovate/npm-webpack-vulnerability
Update webpack to v5.94.0 [SECURITY]
2024-08-27 22:40:50 +00:00
a480266c56 Update webpack to v5.94.0 [SECURITY]
Update webpack from 5.76.0 to 5.94.0

Change-type: patch
2024-08-27 22:08:57 +00:00
13c42ef014 v16.5.7 v16.5.7 2024-08-27 21:18:32 +00:00
6577ded0cd Merge pull request #2366 from balena-os/using-infer-steps-lock-unit-test
Add unit test for usingInferStepsLock
2024-08-27 21:17:44 +00:00
51e59725f8 Add unit test for usingInferStepsLock
Change-type: patch
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-26 13:44:51 -07:00
3049b03cba v16.5.6 v16.5.6 2024-08-23 00:24:33 +00:00
6fbf95e93f Merge pull request #2365 from balena-os/revert-2364
Revert PR #2364
2024-08-22 17:23:34 -07:00
3cebfa9f78 Revert PR #2364
Change-type: patch
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-22 14:31:35 -07:00
2b03771bae v16.5.5 v16.5.5 2024-08-21 04:35:59 +00:00
7f3a057797 Merge pull request #2364 from balena-os/avoid-unnecessary-config-calls-during-startup
Avoid unnecessary config calls during startup
2024-08-20 21:35:00 -07:00
539114f968 Fix FromAsCasing Dockerfile warning
See: https://docs.docker.com/reference/build-checks/from-as-casing/
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-20 19:12:14 -07:00
fc6927e53d Avoid unnecessary config calls during Supervisor init
Change-type: patch
Signed-off-by: Christina Ying Wang <christina@balena.io>
2024-08-20 19:11:14 -07:00
401d3f8143 v16.5.4 v16.5.4 2024-08-16 14:36:35 +00:00
38a2037aad Merge pull request #2363 from balena-os/kmod-module-compression
Add kmod to runtime-base
2024-08-16 14:35:25 +00:00
aeb9c621a5 Add kmod to runtime-base
balenaOS v6 enables zstd module compression by default. Add kmod to
runtime-base to support loading of compressed modules.

Change-type: patch
Signed-off-by: Joseph Kogut <joseph@balena.io>
2024-08-15 13:30:32 -07:00
901176952d v16.5.3 v16.5.3 2024-08-08 16:40:43 +00:00
6eafde9f59 Merge pull request #2361 from balena-os/host-config-noproxy
Do not write `noProxy` to redsocks.conf
2024-08-08 16:39:55 +00:00
b088b78a3e Do not write noProxy to redsocks.conf
This fixes a regression introduced by the refactor in #2329 where
`noProxy` was being included in the data added to redsocks.conf.

Change-type: patch
2024-08-08 11:59:20 -04:00
338fdfdfb5 v16.5.2 v16.5.2 2024-08-07 21:59:17 +00:00
0fc969d247 Merge pull request #2362 from balena-os/blinking-errors
Verify that LED_FILE exists on blinking setup
2024-08-07 21:58:09 +00:00
a255001c2e Verify that LED_FILE exists on blinking setup
Before v1, the blinking module would not throw when the passed led file
does not exist. This change checks for file existence and defaults to
`/dev/null` otherwise

Change-type: patch
2024-08-07 15:33:07 -04:00
8f5131c680 v16.5.1 v16.5.1 2024-08-05 19:17:37 +00:00
b31cbf0db8 Merge pull request #2360 from balena-os/memory-improvements
Memory usage improvements
2024-08-05 19:16:24 +00:00
0d2e2e5e52 Update blinking to v1
This module would use promise recursion for the blinking pattern, which
it would slowly increase memory usage of the supervisor.
2024-08-02 12:19:40 -04:00