2711 Commits

Author SHA1 Message Date
d21679b3c6 Drop experimental and ip6tables config (#4173)
The ip6tables configuration is now enabled by default since Docker 27
(see https://github.com/moby/moby/pull/47747). The experimental config
got introduced with the ip6tables flag in #2051. There is no other
experimental feature used from what I am aware of, so lets remove the
experimental flag as well.
2025-07-16 16:14:32 +02:00
b239b9152f Linux: Update kernel to 6.12.38 (#4170)
* https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.37
* https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.38
2025-07-16 15:39:10 +02:00
ecce801263 Linux: Update kernel to 6.12.36 (#4148)
* Linux: Update kernel to 6.12.36

* https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.36

* Remove patches adding support for RTL8125D

These patches are not necessary anymore as all the three commits are included
in 6.12.36.

Refs #4014
2025-07-14 16:17:21 +02:00
bd140acc92 Merge branch 'main' into dev 2025-07-09 15:30:08 +02:00
f6fab12683 Bump OS to release version 16.0 16.0 2025-07-09 12:05:44 +02:00
d357adfd69 Bump OS to pre-release version 16.0.rc3 16.0.rc3 2025-07-03 17:06:42 +02:00
2fb98a4a73 Unbind Broadcom HCI driver on RPi/CM without WiFi (#4139)
Unbind the Bluetooth driver for Broadcom HCI module before the bluetooth
service starts if running on board without WiFi module. This is a replacement
for #2948 but using a more targeted approach for removing the particular driver
and better detection of no-WiFi (thus no-Bluetooth) models.

This still means the driver will be probed and couple of lines printed when it
fails to set baudrate and reset the module, yet this should be benign, at least
the all-zero MAC device no longers appears in Bluetooth stack.

(cherry picked from commit aff1f81817)
2025-07-03 17:06:01 +02:00
3c1aa91376 Fix Hailo v4.21.0 driver traces due to missing lock (#4138)
Backport patch for traces appearing since v4.21.0 bump, introduced in #4095.
This change is not available in any newer tagged release of the driver and the
commit message upstream is messed up, hence the reworded patch.

(cherry picked from commit 286f5a66ca)
2025-07-03 17:05:58 +02:00
6735603d89 Make all Raspberry Pi LAN drivers built-in (#4137)
Make sure that all LAN drivers used on Raspberry Pi boards are built-in.
Although they are defined as such in the base defconfig, we change them to
modules in device support includes. For simplicity and keeping kernel config
close to the RPi OS config, change them all to built-in in the main RPi include
for all RPi targets.

This is not only a formal change - at least one regression is known if the PHY
driver on RPi 5 is not built-in and MAC driver is - in that case the PHY hooked
up to the RP1 isn't initialized properly, and it is reported as "Generic PHY"
instead, e.g. breaking the control of LEDs through dtparams. Relevant dmesg log
before the change:

 macb 1f00100000.ethernet end0: PHY [1f00100000.ethernet-ffffffff:01] driver [Generic PHY] (irq=POLL)

And after the change:

 macb 1f00100000.ethernet eth0: PHY [1f00100000.ethernet-ffffffff:01] driver [Broadcom BCM54213PE] (irq=POLL)

Fixes #3333

(cherry picked from commit a338b67144)
2025-07-03 17:05:55 +02:00
19ca37696a Update Docker to v28.3.0 (#4135)
Update Docker and related services to latest versions.

* buildroot 758ae477cd...9366ce5635 (6):
  > package/runc: bump version to v1.3.0
  > package/containerd: bump version to v2.1.3
  > package/docker-cli: bump version to v28.3.0
  > package/docker-engine: bump version to v28.3.0
  > package/docker-cli: Fix go module version information
  > package/docker-engine: Fix go module version information

(cherry picked from commit bc484f6409)
2025-07-03 17:05:53 +02:00
9d7f8a234f Mount Systemd Journal socket to the Supervisor container (#4133)
Bind-mount Systemd Journal socket to the Supervisor container. This way
Supervisor can use the socket directly for writing log entries using the
Systemd native Journal protocol [1] instead of logging to stderr of the
container.

[1] https://systemd.io/JOURNAL_NATIVE_PROTOCOL/

(cherry picked from commit dffbe89147)
2025-07-03 17:05:50 +02:00
7c7cbf40be Do not disable RPi Bluetooth if Wi-Fi is not present (#4132)
This reverts commit eab18076ad.

This change was added in #2948 as a workaround for all-zero adapter appearing
in the HA frontend (#2944). With changes implemented in [1], this is no longer
needed, the only minor issue is that the ghost adapter still appears in
hciconfig (and other utilities') output as reported in [2]. However, this
should be less problematic than the Bluetooth being unavailable if WiFi is
disabled through disable-wifi DT overlay, so let's start with removing the
workaround.

Fixes #2975

[1] https://github.com/Bluetooth-Devices/bluetooth-adapters/pull/105
[2] https://github.com/raspberrypi/linux/issues/5756

(cherry picked from commit 17ae2d4741)
2025-07-03 17:05:47 +02:00
a5906f52e3 Make tests involving reboot more robust (#4131)
The tests that are involving reboots are flaky and fail when waiting for the
command to return or when waiting for a new login prompt. To mitigate this, do
not use run_check, as it needs the shell prompt to reappear, and instead use
sendline and wait up to a minute for the GRUB message.

(cherry picked from commit 9803f5fb4f)
2025-07-03 17:05:44 +02:00
c33657e568 Linux: Update kernel to 6.12.35 (#4130)
* https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.35

(cherry picked from commit 1e3773c68a)
2025-07-03 17:05:38 +02:00
aff1f81817 Unbind Broadcom HCI driver on RPi/CM without WiFi (#4139)
Unbind the Bluetooth driver for Broadcom HCI module before the bluetooth
service starts if running on board without WiFi module. This is a replacement
for #2948 but using a more targeted approach for removing the particular driver
and better detection of no-WiFi (thus no-Bluetooth) models.

This still means the driver will be probed and couple of lines printed when it
fails to set baudrate and reset the module, yet this should be benign, at least
the all-zero MAC device no longers appears in Bluetooth stack.
2025-07-02 17:07:36 +02:00
286f5a66ca Fix Hailo v4.21.0 driver traces due to missing lock (#4138)
Backport patch for traces appearing since v4.21.0 bump, introduced in #4095.
This change is not available in any newer tagged release of the driver and the
commit message upstream is messed up, hence the reworded patch.
2025-07-02 16:01:01 +02:00
a338b67144 Make all Raspberry Pi LAN drivers built-in (#4137)
Make sure that all LAN drivers used on Raspberry Pi boards are built-in.
Although they are defined as such in the base defconfig, we change them to
modules in device support includes. For simplicity and keeping kernel config
close to the RPi OS config, change them all to built-in in the main RPi include
for all RPi targets.

This is not only a formal change - at least one regression is known if the PHY
driver on RPi 5 is not built-in and MAC driver is - in that case the PHY hooked
up to the RP1 isn't initialized properly, and it is reported as "Generic PHY"
instead, e.g. breaking the control of LEDs through dtparams. Relevant dmesg log
before the change:

 macb 1f00100000.ethernet end0: PHY [1f00100000.ethernet-ffffffff:01] driver [Generic PHY] (irq=POLL)

And after the change:

 macb 1f00100000.ethernet eth0: PHY [1f00100000.ethernet-ffffffff:01] driver [Broadcom BCM54213PE] (irq=POLL)

Fixes #3333
2025-07-02 16:00:52 +02:00
bc484f6409 Update Docker to v28.3.0 (#4135)
Update Docker and related services to latest versions.

* buildroot 758ae477cd...9366ce5635 (6):
  > package/runc: bump version to v1.3.0
  > package/containerd: bump version to v2.1.3
  > package/docker-cli: bump version to v28.3.0
  > package/docker-engine: bump version to v28.3.0
  > package/docker-cli: Fix go module version information
  > package/docker-engine: Fix go module version information
2025-07-01 17:33:30 +02:00
dffbe89147 Mount Systemd Journal socket to the Supervisor container (#4133)
Bind-mount Systemd Journal socket to the Supervisor container. This way
Supervisor can use the socket directly for writing log entries using the
Systemd native Journal protocol [1] instead of logging to stderr of the
container.

[1] https://systemd.io/JOURNAL_NATIVE_PROTOCOL/
2025-07-01 17:32:18 +02:00
17ae2d4741 Do not disable RPi Bluetooth if Wi-Fi is not present (#4132)
This reverts commit eab18076ad.

This change was added in #2948 as a workaround for all-zero adapter appearing
in the HA frontend (#2944). With changes implemented in [1], this is no longer
needed, the only minor issue is that the ghost adapter still appears in
hciconfig (and other utilities') output as reported in [2]. However, this
should be less problematic than the Bluetooth being unavailable if WiFi is
disabled through disable-wifi DT overlay, so let's start with removing the
workaround.

Fixes #2975

[1] https://github.com/Bluetooth-Devices/bluetooth-adapters/pull/105
[2] https://github.com/raspberrypi/linux/issues/5756
2025-07-01 17:32:07 +02:00
9803f5fb4f Make tests involving reboot more robust (#4131)
The tests that are involving reboots are flaky and fail when waiting for the
command to return or when waiting for a new login prompt. To mitigate this, do
not use run_check, as it needs the shell prompt to reappear, and instead use
sendline and wait up to a minute for the GRUB message.
2025-07-01 09:44:12 +02:00
1e3773c68a Linux: Update kernel to 6.12.35 (#4130)
* https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.35
2025-06-30 15:53:28 +02:00
da9c5312f3 Bump OS to development version 16.1.dev0 2025-06-30 13:47:54 +02:00
abd9ad4398 Bump OS to pre-release version 16.0.rc2 16.0.rc2 2025-06-26 16:58:40 +02:00
6a61f25668 Fix journal-gatewayd returning duplicated lines when following logs (#4124)
When following logs in Home Assitant frontend, the last line may be duplicated
over time when no new lines are added. This is because systemd-journal-gatewayd
incorrectly processed the num_skip part of the Range header, always returning
the last entry even when it should have been skipped.

Backport the patch for Systemd that processes the header correctly.

Fixes #4101

(cherry picked from commit 4a4da64f31)
2025-06-26 16:54:17 +02:00
83e85d96d9 Enable parallel gzip for faster Docker pulls (#4123)
* Bump buildroot to update package/pigz

* Enable parallel gzip for faster Docker pulls

Docker checks if unpigz is available, and if so uses it to unpack
container layers with multiple CPU cores. This should make Docker pulls
faster, especially on lower end hardware.

(cherry picked from commit 42a5e6becb)
2025-06-26 16:54:14 +02:00
fd842de47a Bump Buildroot to 2025.02.4 (#4122)
* buildroot 49ec2543bf...8ee621588f (2):
  > Revert "package/openvmtools: add upstream security patch for CVE-2025-22247"
  > Merge tag '2025.02.4' into 2025.02.x-haos

(cherry picked from commit b863427a52)
2025-06-26 16:54:12 +02:00
fec70eac09 Bump docker/setup-buildx-action from 3.11.0 to 3.11.1 (#4118)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 0aa4a129cb)
2025-06-26 16:54:09 +02:00
f9da1a6ef5 Enable Intel IXGBE driver, clean up Intel NIC config options (#4115)
Enable Intel NIC support only in the PCI include fragment and keep VF-related
options enabled only in the OVA config.

Refs #4021

(cherry picked from commit b25fce69b6)
2025-06-26 16:54:06 +02:00
1e99a466bc Fix flaky timeout after boot slot switching test (#4113)
Add timeout to expect call when waiting for the OS reboot after
switching slots. While it never fails for me locally, it regularly
breaks tests in GHA.

(cherry picked from commit 98a7a55df6)
2025-06-26 16:54:04 +02:00
dfa68f76e5 Backport patch making num_entries in systemd-journal-gatewayd optional (#4116)
Since update to Systemd v256.x the Range header requires the num_entries part
and fails if it's not provided, which we worked around by [1]. With this patch
that was already accepted upstream, the workaround shouldn't be necessary
anymore.

[1] https://github.com/home-assistant/supervisor/pull/5827

(cherry picked from commit f5efac66a0)
2025-06-26 16:54:01 +02:00
619930e667 Update request feature link (#4114)
(cherry picked from commit 69d5fb0c99)
2025-06-26 16:53:59 +02:00
18ca296825 Update open-vm-tools to v13.0.0 (#4111)
* buildroot c3c769f53b...49ec2543bf (1):
  > package/openvmtools: bump to version 13.0.0

Fixes #4069

(cherry picked from commit 6528e3e959)
2025-06-26 16:53:56 +02:00
05a0387d79 Add tests for OS update and boot slot switching (#4108)
Add test that OS update works - use the whole stack using CLI to update to the
latest stable version (unless executed manually on the latest stable release,
this version should never be the same as the currently tested one).

With this test in place, we can also test command for switching the slots, so
add an extra test for that too.

Fixes #4103

(cherry picked from commit 90d36147f7)
2025-06-26 16:53:53 +02:00
684a6331ac Add firmware for Intel AX211D2W Wi-Fi card (#4106)
* buildroot 30ef1047d9...c3c769f53b (1):
  > package/linux-firmware: add firmware for Intel Ma models

Fixes #4074

(cherry picked from commit 98a3386b32)
2025-06-26 16:53:49 +02:00
b35a219c02 Add Marvell 88E1XXX driver for x86-64 (#4105)
Add driver for Marvell PHYs, such as 88E1543(4L) on an ASRock C3758D4I-4L
board. Adding it to x86 config only, as it seems it's not widely used anywhere
else.

Fixes #4025

(cherry picked from commit 6f854b67b0)
2025-06-26 16:53:46 +02:00
589ac5edfb Linux: Update kernel to 6.12.34 (#4109)
* https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.34

(cherry picked from commit 19b848cbbd)
2025-06-26 16:53:43 +02:00
5baf08f1fa Remove bug label from the bug report issue template (#4104)
Same reasoning as in home-assistant/supervisor#5955, don't apply any labels or
issue types before triaging.

(cherry picked from commit 5e36e681ae)
2025-06-26 16:53:40 +02:00
491a8c5c58 Add Intel Cannon Lake pinctrl driver (#4091)
Add pinctrl driver for board like CBx2 (a former chromebox with a Cannon Lake Intel Celeron).

(cherry picked from commit 9431351036)
2025-06-26 16:53:37 +02:00
a5f82b2fa7 Bump docker/setup-buildx-action from 3.10.0 to 3.11.0 (#4100)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.10.0 to 3.11.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3.10.0...v3.11.0)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit cc265b9e2b)
2025-06-26 16:53:27 +02:00
4a4da64f31 Fix journal-gatewayd returning duplicated lines when following logs (#4124)
When following logs in Home Assitant frontend, the last line may be duplicated
over time when no new lines are added. This is because systemd-journal-gatewayd
incorrectly processed the num_skip part of the Range header, always returning
the last entry even when it should have been skipped.

Backport the patch for Systemd that processes the header correctly.

Fixes #4101
2025-06-26 12:10:44 +02:00
42a5e6becb Enable parallel gzip for faster Docker pulls (#4123)
* Bump buildroot to update package/pigz

* Enable parallel gzip for faster Docker pulls

Docker checks if unpigz is available, and if so uses it to unpack
container layers with multiple CPU cores. This should make Docker pulls
faster, especially on lower end hardware.
2025-06-25 17:09:50 +02:00
b863427a52 Bump Buildroot to 2025.02.4 (#4122)
* buildroot 49ec2543bf...8ee621588f (2):
  > Revert "package/openvmtools: add upstream security patch for CVE-2025-22247"
  > Merge tag '2025.02.4' into 2025.02.x-haos
2025-06-24 14:48:35 +02:00
0aa4a129cb Bump docker/setup-buildx-action from 3.11.0 to 3.11.1 (#4118)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-23 19:53:17 +02:00
b25fce69b6 Enable Intel IXGBE driver, clean up Intel NIC config options (#4115)
Enable Intel NIC support only in the PCI include fragment and keep VF-related
options enabled only in the OVA config.

Refs #4021
2025-06-23 15:39:47 +02:00
98a7a55df6 Fix flaky timeout after boot slot switching test (#4113)
Add timeout to expect call when waiting for the OS reboot after
switching slots. While it never fails for me locally, it regularly
breaks tests in GHA.
2025-06-23 15:39:35 +02:00
f5efac66a0 Backport patch making num_entries in systemd-journal-gatewayd optional (#4116)
Since update to Systemd v256.x the Range header requires the num_entries part
and fails if it's not provided, which we worked around by [1]. With this patch
that was already accepted upstream, the workaround shouldn't be necessary
anymore.

[1] https://github.com/home-assistant/supervisor/pull/5827
2025-06-23 15:34:08 +02:00
69d5fb0c99 Update request feature link (#4114) 2025-06-23 13:19:35 +02:00
6528e3e959 Update open-vm-tools to v13.0.0 (#4111)
* buildroot c3c769f53b...49ec2543bf (1):
  > package/openvmtools: bump to version 13.0.0

Fixes #4069
2025-06-20 15:25:36 +02:00
90d36147f7 Add tests for OS update and boot slot switching (#4108)
Add test that OS update works - use the whole stack using CLI to update to the
latest stable version (unless executed manually on the latest stable release,
this version should never be the same as the currently tested one).

With this test in place, we can also test command for switching the slots, so
add an extra test for that too.

Fixes #4103
2025-06-20 10:20:29 +02:00