Agenda for the Flatcar Office Hours on Wednesday, 9th of July 2025, 2:30pm UTC

[t-lo]

In the office hours we discuss news and happenings in and around Flatcar, provide a space for our user community to discuss with maintainers, show demos, and do our release planning.

Join if you want to learn about the project and get in contact with other users and with maintainers.

• Jitsi: https://meet.flatcar.org/OfficeHours
• Youtube live stream / recording: https://www.youtube.com/live/eLJ9RvdiEsI
  • All recordings: https://www.youtube.com/@FlatcarLinux/live
• Community Calls calendar (all future calls): Google Calendar
  • iCal version: ical

Welcome

• Brief intro/check-in of the new participants joining the call. Please introduce yourself and share what brings you here today.

Announcements

End of support for CGroupsV1 in Q2 2025

Flatcar will stop supporting the cgroups v1 backwards compatibility mode in Q2 2025.

• With our adoption of systemd-256, support for legacy CGroupsV1 will end in Alpha, Beta, and eventually Stable.
• Enabling legacy CGroupsV1 during deployment will not be supported anymore.
• Nodes that use CGroupsV1 legacy mode will fail to update. This ensures your workloads will not be disrupted. Enable CGroupsV2 on your legacy CGroupsV1 nodes in order to successfully update.
• The June 2025 Stable major release will not support CGroupsV1 anymore. The change has been in Beta for more than 2 months now.
• LTS-2024 will support CGroupsV1 until late 2025.

Nebraska update breaking changes

• OIDC authorization flow is about to be refactored to make it stateless in the backend. Since authorization was still done through the usage of an access token, the changes should be backward compatible, but this will be confirmed after rigorous testing.

Agenda items

• First "Maintenance Mode Day" review - https://hackmd.io/UWbxQ6F0S_O8dcNQFFnTEw?view and announcement of July 25th "Maintenance Mode": The Maintenance Mode on Friday, July 25th 2025 [All Day] #1799
• Demos!
  • New Incus sysext
  • New bakery.sh boot command
• ClusterAPI Node Bootstrap providers rework: Contributors wanted! Development via kubevirt contributed to CAPI; CAPI WIP branch for clean bootstrap provider separation rebased on latest main and upgraded to v1beta2.
  • WG NoBo Agenda / Minutes: https://docs.google.com/document/d/12v6NFr7xal9RH3GEB_1IR6HENq2GMuzALS3l5elvrMg/edit?tab=t.0
• New release this week to address sudo flaw.
• SecureBoot progress update
• Your Item here (add a comment below, we'll update the agenda)

Release Planning

• Flatcar tactical, release planning, and roadmap (view)

Administrative tasks after meeting concluded

• Create a new Github discussion for the next Flatcar Office Hours: https://github.com/flatcar/Flatcar/discussions/new?category=flatcar-office-hours
• Close this discussion as "Resolved".

[t-lo]

Question from Martin: UEFI keys expire and would need to be updated via a firmware update (Richard Hughes' fwupd).

@chewi We might want to update fwupd, maybe as a sysext? CC @mmailand
Keepalived in the bakery does static compilation.