Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

k3s_1_26: 1.26.5+k3s1 -> 1.26.6+k3s1 #242272

Merged
merged 1 commit into from
Jul 19, 2023
Merged

k3s_1_26: 1.26.5+k3s1 -> 1.26.6+k3s1 #242272

merged 1 commit into from
Jul 19, 2023

Conversation

euank
Copy link
Member

@euank euank commented Jul 8, 2023

Description of changes

This update was made via nix-shell maintainers/scripts/update.nix --argstr package k3s_1_26 , and no additional changes were needed beyond what the script did.

Upstream release notes: https://github.com/k3s-io/k3s/releases/tag/v1.26.6%2Bk3s1

This also fixes CVE-2023-2728.
The upstream k3s notes don't mention it, but the k8s ones do

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
    NixOS tests:
    $ nix build '.#k3s_1_26.tests.multi-node' 
    $ nix build '.#k3s_1_26.tests.single-node' 
    
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.11 Release Notes (or backporting 23.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@Frostman
Copy link
Member

Frostman commented Jul 9, 2023

Result of nixpkgs-review pr 242272 run on x86_64-linux 1

1 package built:
  • k3s_1_26

Copy link
Contributor

@LeSuisse LeSuisse left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Build looks OK and tests are passing.

Should this upgrade be backported to 23.05? Or do we need to apply the security fix to the version we currently have on 23.05?

Result of nixpkgs-review pr 242272 run on x86_64-linux 1

1 package built:
  • k3s_1_26

@LeSuisse LeSuisse merged commit dbd0bd3 into NixOS:master Jul 19, 2023
18 checks passed
@github-actions
Copy link
Contributor

Backport failed for release-23.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-23.05
git worktree add -d .worktree/backport-242272-to-release-23.05 origin/release-23.05
cd .worktree/backport-242272-to-release-23.05
git checkout -b backport-242272-to-release-23.05
ancref=$(git merge-base 141f167f1430b4c712b73321c4f182261e88329c f4079a45d31bac551b5853ad6f229e27f99a3ad6)
git cherry-pick -x $ancref..f4079a45d31bac551b5853ad6f229e27f99a3ad6

@euank
Copy link
Member Author

euank commented Jul 20, 2023

Yup, for security reasons this should be backported.

A shame the automatic backport bot failed, I'll do it by hand

@euank
Copy link
Member Author

euank commented Jul 20, 2023

Ahh, the backport failed because #242293 isn't merged yet.

I'll cherry-pick this commit onto that branch too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants