Timmy Welch
b8fc58bd9f
Add support for defining package capabilities
gokrazy CI / CI (macos-latest) (push) Has been cancelled
gokrazy CI / CI (ubuntu-latest) (push) Has been cancelled
gokrazy CI / CI (windows-latest) (push) Has been cancelled
2025-12-28 14:51:38 -08:00
Michael Stapelberg
ba6a8936f4
packer: do not check for HTTP→HTTPS redirect
...
This check was broken: it tried to construct a http URL
by changing the updateBaseUrl schema instead of constructing
such a URL based on the configured HTTPPort.
I also don’t think this check is useful:
HTTPS will be used for updates regardless of the check.
Even if an attacker intercepted HTTP traffic and removed the redirect,
that has no bearing on the update, so why bother checking.
One thing the check (implicitly) did is the required fallback
on initial installation when --insecure is specified.
We now solve that by falling back from HTTPS to HTTP explicitly
(only when --insecure is specified, of course).
related to https://github.com/gokrazy/tools/pull/94
2025-12-09 17:11:22 +01:00
Michael Stapelberg
0daf1b1ae4
packer: stop using tlsflag global state
2025-12-08 21:32:59 +01:00
Michael Stapelberg
8320e69ccc
packer: move error check closer to error assignment
2025-12-08 20:58:14 +01:00
Michael Stapelberg
0a82ebcb52
remove stale comment
...
git commit 87444dca50 accidentally
removed the code (partuuid = 0), but not the comment.
2025-12-08 20:57:45 +01:00
Michael Stapelberg
715673f4b5
packer: clean up sbomHook hack
2025-12-06 21:54:52 +01:00
Michael Stapelberg
2848fa1a69
packer: move findPackageFiles to packerprepare.go
2025-12-06 21:38:46 +01:00
Michael Stapelberg
ab66901132
packer: move find* to packerprepare.go
2025-12-06 21:37:13 +01:00
Michael Stapelberg
0bb33e2ae8
packer: move addToFileInfo to write.go
2025-12-06 21:35:56 +01:00
Michael Stapelberg
6ae03bee7a
packer: move countingWriter to packerwrite.go
2025-12-06 21:32:21 +01:00
Michael Stapelberg
4fab9e7759
packer: move find* to packerprepare.go
2025-12-06 21:28:53 +01:00
Michael Stapelberg
cfba731eae
packer: move partitionPath to packerwrite.go
2025-12-06 21:23:36 +01:00
Michael Stapelberg
bd1faa7647
packer: move overwrite{File,Device} to packerwrite.go
2025-12-06 21:21:00 +01:00
Michael Stapelberg
3def6ed054
packer: move printHowToInteract to packerwrite.go
2025-12-06 21:17:15 +01:00
Michael Stapelberg
8b448cc312
packer: move update into packerupdate.go
2025-12-06 21:16:38 +01:00
Michael Stapelberg
df53492c98
packer: move write into packerwrite.go
2025-12-06 21:14:44 +01:00
Michael Stapelberg
f5ddd27c7e
packer: move build into packerbuild.go
2025-12-06 21:12:44 +01:00
Michael Stapelberg
23ac917f5b
packer: move prepare into packerprepare.go
2025-12-06 21:11:31 +01:00
Michael Stapelberg
485405edac
cleanup: remove unused parameters
2025-12-06 21:09:00 +01:00
Michael Stapelberg
45b2b940f6
cleanup: move write{Boot,Root}File next to write{Boot,Root}
2025-12-06 21:04:34 +01:00
Michael Stapelberg
67382a6dbe
cleanup: move kernel GOARCH validation code into its own file
2025-12-06 20:59:01 +01:00
Michael Stapelberg
b513356080
refactor: split printHowToInteract into its own method
...
Also remove duplicate URL construction code
2025-12-06 20:55:30 +01:00
Michael Stapelberg
cbfacd97a6
refactor: split logicUpdate into a separate method
2025-12-06 20:42:09 +01:00
Michael Stapelberg
1921f918ee
cleanup: inline programName now that the old packer is gone
2025-12-06 20:23:57 +01:00
Michael Stapelberg
9e3ab11076
packer: add test for losing HTTPS certificates
...
related to https://github.com/gokrazy/tools/pull/68
2025-12-06 08:49:22 +01:00
julienrbrt
9c9a33515b
fix partuuid probing with --insecure after losing HTTPS certificates ( #68 )
2025-12-06 08:48:38 +01:00
Michael Stapelberg
52cab9f145
packer: stop using updateflag global state
...
related to https://github.com/gokrazy/tools/pull/68
2025-12-06 08:37:24 +01:00
Michael Stapelberg
dc8c88b368
gokupdate_test: refactor to use readConfig/writeConfig
2025-12-05 08:36:19 +01:00
Michael Stapelberg
91c487c959
packer: use HTTPS client despite -insecure (post-update) (+test)
...
While adding the integration test for
https://gokrazy.org/userguide/tls-for-untrusted-networks/ ,
I noticed that the packer does not actually successfully complete
the initial HTTPS deployment (where -insecure is used).
After writing the image to disk and rebooting, the packer was stuck at:
device not yet reachable: Get "https://localhost:9080/ ": http:
server gave HTTP response to HTTPS client
related to https://github.com/gokrazy/tools/pull/94
2025-11-29 12:39:22 +01:00
Michael Stapelberg
d1929f390f
integration: enable QEMU hardware acceleration
2025-11-29 11:24:47 +01:00
Michael Stapelberg
2c805ed001
refactor cobra command initialization to avoid stale state
...
Before this commit, we held onto *cobra.Command objects,
but that is not actually supported: after the first Execute(),
commands like updateCmd are stuck on the first-ever provided ctx.
Instead, turn command initialization into functions.
I only noticed this when trying to do two 'gok update'
from within the same test, where the fake build timestamp
is injected via the context (the timestamp was always the same).
2025-11-29 10:47:48 +01:00
Michael Stapelberg
d588a72286
integration: start QEMU VM for 'gok update' test
...
related to https://github.com/gokrazy/tools/pull/94
2025-11-29 09:56:11 +01:00
Michael Stapelberg
50ceea79c7
internal/packer: apply BootloaderExtraEEPROM
...
related to https://github.com/gokrazy/gokrazy/issues/338
2025-11-16 19:09:52 +01:00
Michael Stapelberg
d57f04bf53
add internal/eeprom package (with test against other impls)
...
related to https://github.com/gokrazy/gokrazy/issues/338
2025-11-16 15:08:21 +01:00
Michael Stapelberg
4950fd73f6
add a flake.nix providing the two other rpi eeprom tools
...
see also: https://michael.stapelberg.ch/posts/2025-07-27-dev-shells-with-nix-4-quick-examples/
related to https://github.com/gokrazy/gokrazy/issues/338
2025-11-16 15:08:12 +01:00
Michael Stapelberg
57f559232c
packer: eeprom: only write vl805-*.bin if present (Pi 4)
...
The rpi5-eeprom package no longer contains vl805, which is Pi 4-specific.
related to https://github.com/gokrazy/gokrazy/issues/332
2025-11-16 09:57:09 +01:00
Michael Stapelberg
2f0aac76a0
packer: include timestamp (ts: unixtime) in firmware .sig files
...
Otherwise the Pi 5 firmware will default to a timestamp of 0
and skip the update always.
related to https://github.com/gokrazy/gokrazy/issues/332
2025-11-16 09:08:03 +01:00
Michael Stapelberg
9a9519186b
integration: add 'gok update' test
gokrazy CI / CI (macos-latest) (push) Has been cancelled
gokrazy CI / CI (ubuntu-latest) (push) Has been cancelled
gokrazy CI / CI (windows-latest) (push) Has been cancelled
2025-10-03 19:12:17 +02:00
Michael Stapelberg
5675dbb2eb
packer: set Accept header (request), not Content-Type (response)
2025-10-03 19:11:55 +02:00
Michael Stapelberg
ab29b81133
tests: use t.Chdir now that we are on Go 1.24
2025-10-03 18:32:43 +02:00
Michael Stapelberg
19d09ffb32
switch from breml/rootcerts to x/crypto fallback bundle
...
related to https://github.com/golang/go/issues/69898
2025-09-12 09:34:42 +02:00
dependabot[bot]
8143336564
build(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.27.0 ( #93 )
...
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-version: 0.27.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-19 10:26:58 +02:00
Michael Stapelberg
2979dc9b26
pull in latest gokrazy/updater
2025-07-05 15:59:45 +02:00
Michael Stapelberg
ab76ef531d
update to latest gokrazy/updater (now needs a context)
2025-06-01 08:57:36 +02:00
Michael Stapelberg
2e390edb12
gok vm run: print a tip for how to enable the serial console
...
This should make it a little easier for users.
2025-05-30 19:00:00 +02:00
Michael Stapelberg
d145a5b689
go.mod: update to latest versions of dependencies
2025-05-30 16:58:56 +02:00
Michael Stapelberg
a0558bc6a0
GitHub Actions: verify gok builds on Windows and macOS, too
...
related to https://github.com/gokrazy/tools/issues/89
2025-05-29 17:03:18 +02:00
Michael Stapelberg
6ae0267df2
gok add: use renameio/maybe on GOOS=windows
...
related to https://github.com/gokrazy/tools/issues/89
2025-05-29 16:23:38 +02:00
Michael Stapelberg
5b15ffbd42
packer: move unix-specific code into build tag guarded files
...
related to https://github.com/gokrazy/tools/issues/89
2025-05-29 16:17:58 +02:00
Michael Stapelberg
f606b3de4f
gok sbom: buffer build output and only print (to stderr!) on error
...
fixes https://github.com/gokrazy/tools/issues/91
2025-05-29 15:26:31 +02:00