* Bump libraries to incorporate CVE fixes
Bump golang.org/x/net to cover CVE-2025-22870 and fix bsc#1238700.
Bump golang.org/x/crypto to cover CVE-2025-22869 and fix bsc#1239335.
In addition and as a requirement of the new x/crypto library go is bumped to 1.23
Signed-off-by: David Cassany <dcassany@suse.com>
* Dockerfile: bump golang container to 1.24 (#912)
Required since vendored x/crypto lib requires go ver >= 1.23
Related to #dd41431b0b2792f0fca005adf3abc3cf471877c4
Signed-off-by: Francesco Giudici <francesco.giudici@suse.com>
* CVE-2025-22872
Bump golang.org/x/net
https://github.com/advisories/GHSA-vvgc-356p-c3xw
Signed-off-by: Francesco Giudici <francesco.giudici@suse.com>
* go mod vendor
Signed-off-by: Francesco Giudici <francesco.giudici@suse.com>
---------
Signed-off-by: David Cassany <dcassany@suse.com>
Signed-off-by: Francesco Giudici <francesco.giudici@suse.com>
Co-authored-by: David Cassany <dcassany@suse.com>
Since leap does not include a compatible version of xorriso, switch back
to tumbleweed.
Got errors when trying to install util-linux package on tumbleweed, but
it does not seem to be needed.
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
* feat: Add Type field to SeedImageSpec
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
* feat: Add raw disk build generation to SeedImage
If SeedImageSpec.Type is set to 'raw' we now try to run elemental
build-disk to generate the disk image.
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
* Add elemental-toolkit to seedimage-builder
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
* feat: Update yip to v1.4.5
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
* feat: Reset yaml
Add yip cloud-config for raw disk-image that will extract the
elemental-register configuration to /oem/registration/config.yaml and
Start the elemental-register-install.service in the post-reset hook.
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
* feat: Use new toolkit param deploy-command
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
---------
Signed-off-by: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
Francesco Giudici