k3s-io / k3s

Lightweight Kubernetes
https://k3s.io
Apache License 2.0
28.13k stars 2.35k forks source link

[Release-1.30] - Bump k3s-root for buildroot security updates #11296

Closed dereknola closed 1 week ago

dereknola commented 1 week ago

Backport fix for Bump k3s-root for buildroot security updates

endawkins commented 1 week ago

Validated on branch release-1.30 with commit 5d2bc57 / version v1.30

Environment Details

Infrastructure

Node(s) CPU architecture, OS, and Version:

Linux ip-172-31-3-15 5.14.21-150500.55.44-default #1 SMP PREEMPT_DYNAMIC Mon Jan 15 10:03:40 UTC 2024 (cc7d8b6) x86_64 x86_64 x86_64 GNU/Linux
NAME="SLES"
VERSION="15-SP5"
VERSION_ID="15.5"
PRETTY_NAME="SUSE Linux Enterprise Server 15 SP5"
ID="sles"
ID_LIKE="suse"
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:suse:sles:15:sp5"
DOCUMENTATION_URL="https://documentation.suse.com/"

Cluster Configuration:

N/A - configuration does not matter

Config.yaml:

N/A

Additional files

N/A

Testing Steps

  1. Copy config.yaml
    $ sudo mkdir -p /etc/rancher/k3s && sudo cp config.yaml /etc/rancher/k3s
  2. Install k3s
  3. /var/lib/rancher/k3s/data/current/bin/busybox

Replication Results: https://github.com/k3s-io/k3s/issues/11284#issuecomment-2471360191

Validation Results:

$ /var/lib/rancher/k3s/data/current/bin/busybox
BusyBox v1.36.1 (2024-11-08 20:32:42 UTC) multi-call binary.

Additional context / logs:

N/A