Thilo Fromm

BUG: Files are not accessible across filesystems

1

Files stored in the FAT filesystem are not accessible from ext2, and vice versa. Clearly, this is a bug (and not a missing feature) :smiling_imp:

[RFE] Add supply chain provenance to Flatcar releases

1

## Current situation While our supply chain security story is rather good we do not generate user-verifiable provenance (e.g. in accordance with https://slsa.dev/provenance/v0.2). ## Impact Users are unable to attest...

[RFE] Repos: enforce PR reviews (2-person rule) for scripts and ebuild repos

2

## Current situation 2-person rule is obeyed for most changes but not enforced. ## Impact In theory the same person filing a PR could merge it. ## Ideal future situation...

## Current situation Per-package SLSA provenance is generated and available in the live image at `/usr/share/SLSA/`. Package provenance contains all materials (sources, patches, and build logic files) for all subjects...

## Current situation Builder ID (github actions, Jenkins timer, manual trigger) is not generated with SLSA provenance. ## Impact SLSA provenance does not record what action or individual triggered the...

**Description** Create a document on the Flatcar Container Linux package retirement process. **Impact** Package retirements - removing packages that upstream retired - need a well-documented process so users are up...

Move Flatcar repositories and website (back) to its own Github org

6

Revive the [flatcar-linux github org](https://github.com/flatcar-linux/) as the go-to point for everything Flatcar Linux. **Items** - [x] Move repositories from kinvolk org back to flatcar-linux - [ ] Use Github pages...

Add documentation on running Flatcar with EKS

7

Now that the former EKS PRO feature is available in our community images, add documentation on how to do this to https://github.com/flatcar-linux/flatcar-docs/blob/main/docs/installing/cloud/aws-ec2.md and maybe add "...EKS" to the AWS doc...

[RFE] ci-automation: remove requirement for google bucket for running Equinix Metal tests

3

## Current situation Kola uses a google bucket for images, ignition configs, and PXE scripts for the Equinix Metal tests. ## Impact The containerised ci-automation aims to reduce infrastructure complexity...

(GitHub CI) Productise containerised build and release pipeline

3

**Issue** - Build and release automation largely implemented in custom logic which is product specific (Jenkins / pipelines) - coreos-overlay / portage-stable needs to be manually tested against Jenkins **Impact**...