Draft
Conversation
Contributor
|
Website deployed to CF Pages, 👀 preview link https://b7c7e519.balena-os.pages.dev |
Copied from mickledore branch of meta-virtualization. Signed-off-by: Kyle Harding <kyle@balena.io>
Includes runc 1.2.8 with security fixes: - CVE-2025-31133: Fixed race condition in /etc/hosts handling - CVE-2025-52565: Fixed container breakout via /proc/self/fd - CVE-2025-52881: Fixed TOCTOU vulnerability in rootfs handling Includes librsync-go 0.9.0 with performance improvements to delta generation: - delta: read more than 1 byte when possible - bufferize signature output Change-type: minor Signed-off-by: Kyle Harding <kyle@balena.io>
This release removes support for aufs to overlay migration. Change-type: major Signed-off-by: Kyle Harding <kyle@balena.io>
Update dynbinary-use-go-cross-compiler patch from the meta-virtualization scarthgap branch for moby v25 compatibility Signed-off-by: Kyle Harding <kyle@balena.io>
Signed-off-by: Kyle Harding <kyle@balena.io>
Balena engine v25 requires Go 1.23+. OE-Core skipped 1.23 entirely (scarthgap=1.22, walnascar=1.24), so we adopt the upstream-validated walnascar Go 1.24.6 recipes rather than hand-rolling untested 1.23 patches. Changes from scarthgap 1.22.12: - New source checksums and license md5 for Go 1.24.6 - Remove GOROOT_FINAL (Go 1.24 uses dynamic GOROOT discovery) - Add -trimpath to shared lib install for reproducibility - Add patch 0010 (GOROOT trimpath fix for shared builds) - Add patch 6d265b (remove forced binutils-gold on aarch64) - Drop 14 CVE patches (all fixed upstream in 1.24.6) - Update line offsets in 9 existing patches go-crosssdk.inc and go-cross-canadian.inc are intentionally kept at scarthgap versions to preserve SDK dependency naming compatibility. Change-type: patch Signed-off-by: Kyle Harding <kyle@balena.io>
Engine v25 removes aufs support entirely, making the BALENA_MIGRATE_OVERLAY env var a no-op. Remove the systemd drop-in that set it and its install logic from the recipe. Change-type: patch Signed-off-by: Kyle Harding <kyle@balena.io>
Engine v25 drops aufs support. Update the sanity check to only accept overlay2, remove the conditional aufs-util-auplink dependency from the packagegroup, and fix the stale comment in balena-os.inc. Change-type: patch Signed-off-by: Kyle Harding <kyle@balena.io>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Balena engine v25 requires Go 1.23+. OE-Core skipped 1.23 entirely
(scarthgap=1.22, walnascar=1.24), so we adopt the upstream-validated
walnascar Go 1.24.6 recipes rather than hand-rolling untested 1.23
patches.
This release removes support for aufs to overlay migration.
generic-aarch64 binary sizes
/usr/bin/balena-engine is 51,724,928 bytes (~49.3 MiB).
/usr/bin/balena-engine in generic-aarch64-6.12.1-v17.6.3.img: 46,930,320 bytes (~44.8 MiB)
Device CI Runs
Raspberry Pi 5
https://github.com/balena-os/balena-raspberrypi/actions/runs/23509631407
https://dashboard.balena-cloud.com/apps/2086169/releases/3973707/summary
balena device os-update <uuid> --version 6.10.24-1774386961231+rev3Raspberry Pi 4 (64-bit)
https://github.com/balena-os/balena-raspberrypi/actions/runs/23544936579
https://dashboard.balena-cloud.com/apps/1520936/releases/3975396/summary
balena device os-update <uuid> --version 6.10.24-1774451131517+rev3https://github.com/balena-os/balena-raspberrypi/actions/runs/23912572572
https://dashboard.balena-cloud.com/apps/1520936/releases/3993567/summary
balena device os-update <uuid> --version 6.12.3-1775172682413Raspberry Pi 3 (32-bit)
https://github.com/balena-os/balena-raspberrypi/actions/runs/23545071329
https://dashboard.balena-cloud.com/apps/1520929/releases/3975288/summary
balena device os-update <uuid> --version 6.10.24-1774449316688+rev3https://github.com/balena-os/balena-raspberrypi/actions/runs/23759759474
https://dashboard.balena-cloud.com/apps/1520929/releases/3985989/summary
balena device os-update <uuid> --version 6.10.24-1774901221084+rev4IOT-GATE-iMX8PLUS 2G-4G DRAM
https://github.com/balena-os/balena-iot-gate-imx8plus/actions/runs/23509998923
https://dashboard.balena-cloud.com/apps/2025310/releases/3973585/summary
balena device os-update <uuid> --version 6.11.11-1774384416873+rev2Generic AARCH64
https://github.com/balena-os/balena-generic/actions/runs/23511274177
https://dashboard.balena-cloud.com/apps/1520901/releases/3973901/summary
balena device os-update <uuid> --version 6.12.1-1774396298472Generic x84-64 GPT
https://github.com/balena-os/balena-generic/actions/runs/23511283788
https://dashboard.balena-cloud.com/apps/1956990/releases/3973775/summary
balena device os-update <uuid> --version 6.12.1-1774389671255Contributor checklist
Change-typepresent on at least one commitSigned-off-byis presentReviewer Guidelines