Add support for Oracle Cloud Infrastructure by navaneeth-dev · Pull Request #3846 · flatcar/scripts

navaneeth-dev · 2026-03-22T04:53:52Z

Add support for Oracle Cloud Infrastructure

I want official builds of flatcar for Oracle Cloud.

How to use

Right now I verified it works. I will try to work on CI builds tomorrow.
I will fix the conventions soon.

Testing done

Right now I verified it works.

Related to: flatcar/Flatcar#1855

CI: https://jenkins.flatcar.org/job/container/job/packages_all_arches/99/cldsv/

navaneeth-dev · 2026-03-22T05:13:17Z

@tormath1 you can review it now. Also do I need to provide an oracle test script?

chewi · 2026-03-23T17:29:21Z

@tormath1 is away at KubeCon, so he may take some time to respond. He knows this area best.

tormath1

Thanks a lot for this contribution. It looks good.

Only SSH keys and hostname are missing.Any chance to enable it and give it a try ?

Also do I need to provide an oracle test script?

There is a full test suite defined here: https://github.com/flatcar/mantle - if OCI has a Go SDK, then we can check to implement OCI support in Mantle (e.g: flatcar/mantle#652) but this can be done in a second time (it will give me time to investigate OCI test sponsoring. :))

navaneeth-dev · 2026-03-29T14:47:12Z

I will check SSH & hostname support.
Yes OCI has a Go SDK: https://github.com/oracle/oci-go-sdk

tormath1 · 2026-03-30T15:08:34Z

I will check SSH & hostname support. Yes OCI has a Go SDK: https://github.com/oracle/oci-go-sdk

Thanks. For what is worth, I asked CNCF about OCI sponsoring to enable Flatcar tests on this cloud provider.

On another aspect, I kicked-off a CI run to see if everything builds correctly. Thanks for your work so far!

navaneeth-dev · 2026-03-30T15:27:25Z

Anything I can do to help on the OCI sponsoring part? I can ask the oracle community here.

I can also create documentation later.

Will test the hostname and ssh in a few days.

navaneeth-dev · 2026-04-02T03:52:16Z

./run_sdk_container -t

###### Writing versionfile 'sdk_container/.repo/manifests/version.txt' to SDK '4643.0.0+nightly-20260318-2100', OS '4643.0.0+nightly-20260318-2100-14-ga616119ae7'. ######

###### Creating a new container 'flatcar-sdk-all-4643.0.0-nightly-20260318-2100_os-main-4643.0.0-nightly-20260318-2100-14-ga616119ae7' ######
-v /home/rize/.config/gcloud:/home/rize/.config/gcloud
Error response from daemon: manifest unknown
Falling back to tar ball download...

How do I fix this? I am not able to test the builds on my feature branch. Can I change version.txt to a stable version?

tormath1 · 2026-04-02T07:19:35Z

Hey @navaneeth-dev thanks - we have some issues with the CI right now, that might explain the issue you see. You should be able to run the SDK using the latest released image:

./run_sdk_container -t -a amd64 -C ghcr.io/flatcar/flatcar-sdk-amd64:4628.0.0

Anything I can do to help on the OCI sponsoring part? I can ask the oracle community here.

Thanks a lot for asking, I've created a ticket to the CNCF a few days ago - let's see how it goes. ❤️

navaneeth-dev · 2026-04-02T17:11:41Z

INFO    build_packages: Checking /build/amd64-usr
/usr/bin/grog: /usr/bin/perl does not exist
/usr/bin/gpinyin: (env)/perl does not exist
/usr/bin/gperl: (env)/perl does not exist
/usr/bin/glilypond: (env)/perl does not exist
/usr/bin/chem: (env)/perl does not exist
/usr/bin/diff-highlight: /usr/bin/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/bootgraph.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkdeclares.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkincludes.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkstack.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkversion.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/cleanfile: (env)/perl does not exist

Still unable to build.

./run_sdk_container -t -a amd64 -C ghcr.io/flatcar/flatcar-sdk-amd64:4628.0.0 -n oci
./build_packages

FLATCAR_VERSION=4628.0.0+nightly-20260318-2100-1-g7b5d4182bc
FLATCAR_VERSION_ID=4628.0.0
FLATCAR_BUILD_ID="nightly-20260318-2100-1-g7b5d4182bc"
FLATCAR_SDK_VERSION=4628.0.0

Lot of HTTP 404 Portage errors.

tormath1 · 2026-04-03T07:30:10Z

INFO build_packages: Checking /build/amd64-usr
/usr/bin/grog: /usr/bin/perl does not exist
/usr/bin/gpinyin: (env)/perl does not exist
/usr/bin/gperl: (env)/perl does not exist
/usr/bin/glilypond: (env)/perl does not exist
/usr/bin/chem: (env)/perl does not exist
/usr/bin/diff-highlight: /usr/bin/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/bootgraph.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkdeclares.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkincludes.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkstack.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/checkversion.pl: (env)/perl does not exist
/usr/lib/modules/6.12.77-flatcar/build/scripts/cleanfile: (env)/perl does not exist

@navaneeth-dev this should not be an issue - it's only warnings. Do you have an actual error message at the end of the command?

navaneeth-dev · 2026-04-03T07:31:54Z

!!! All ebuilds that could satisfy ">=dev-libs/elfutils-0.158:0/0=" for /mnt/host/source/src/build/images/amd64-usr/developer-4643.0.0+nightly-20260318-2100-13-gc6927109d7-a1/prod-image-rootfs/ have been masked.
!!! One of the following masked packages is required to complete your request:
- dev-libs/elfutils-0.194::portage-stable (masked by: ~amd64 keyword)

(dependency required by "sys-apps/systemd-258.3::portage-stable" [binary])
(dependency required by "sys-libs/pam-1.7.2::portage-stable" [binary])
(dependency required by "app-admin/sudo-1.9.17_p2::portage-stable" [binary])
(dependency required by "coreos-base/coreos-0.0.1-r319::coreos-overlay" [binary])
(dependency required by "coreos-base/coreos" [argument])
For more information, see the MASKED PACKAGES section in the emerge
man page or refer to the Gentoo Handbook.

ERROR   build_image: script called: build_image
ERROR   build_image: Backtrace:  (most recent call is last)
ERROR   build_image:   file build_image, line 181, called: create_prod_image 'flatcar_production_image.bin' 'base' 'developer' 'coreos-base/coreos' 'containerd-flatcar|app-containers/containerd,docker-flatcar|app-containers/docker&a
pp-containers/docker-cli&app-containers/docker-buildx'
ERROR   build_image:   file prod_image_util.sh, line 97, called: emerge_to_image '/mnt/host/source/src/build/images/amd64-usr/developer-4643.0.0+nightly-20260318-2100-13-gc6927109d7-a1/prod-image-rootfs' 'coreos-base/coreos'
ERROR   build_image:   file build_image_util.sh, line 152, called: die_err_trap 'sudo -E ROOT="${root_fs_dir}" FEATURES="-ebuild-locks" PORTAGE_CONFIGROOT="${BUILD_DIR}"/configroot emerge --usepkgonly --jobs="${NUM_JOBS}" --verbose
"$@"' '1'
ERROR   build_image:
ERROR   build_image: Command failed:
ERROR   build_image:   Command 'sudo -E ROOT="${root_fs_dir}" FEATURES="-ebuild-locks" PORTAGE_CONFIGROOT="${BUILD_DIR}"/configroot emerge --usepkgonly --jobs="${NUM_JOBS}" --verbose "$@"' exited with nonzero code: 1
ERROR   build_image:   !!!!!!!!!!!!!!!!!!!!!!!!!
ERROR   build_image:   !! BEGIN DEBUG OUTPUT: !!
ERROR   build_image:   !!!!!!!!!!!!!!!!!!!!!!!!!

chewi · 2026-04-03T10:53:33Z

dev-libs/elfutils in both main-4643.0.0-nightly-20260318-2100 and current main have a stable arm64 keyword rather than ~arm64, so perhaps your working tree has got into a bad state.

chewi · 2026-04-03T11:02:31Z

Oh wait, it was amd64. Still, that should be fine.

navaneeth-dev · 2026-04-03T11:11:41Z

Oh wait, it was amd64. Still, that should be fine.

I have deleted my repo locally and cloned again. Trying to build again.

tormath1 · 2026-04-07T15:07:14Z

Hey @navaneeth-dev, apologize we experimented some unexpected CI issues in the last days. I kicked-off a new build of your branch to get build results.

tormath1 · 2026-04-07T20:25:35Z

@navaneeth-dev built images are available here: https://bincache.flatcar-linux.net/images/amd64/9999.9.111+tormath1-oci/

navaneeth-dev · 2026-04-08T17:42:43Z

@navaneeth-dev built images are available here: https://bincache.flatcar-linux.net/images/amd64/9999.9.111+tormath1-oci/

Tested this, its working. hostname is not working yet. About the SSH keys support, how would that work? ssh key would be added to which user?

Also is the CI fixed now as per docs for me to continue the testing of the above features?

Also should we enable flatcar.autologin so the OCI console can run commands?

tormath1 · 2026-04-10T08:06:33Z

@navaneeth-dev built images are available here: https://bincache.flatcar-linux.net/images/amd64/9999.9.111+tormath1-oci/

Tested this, its working. hostname is not working yet. About the SSH keys support, how would that work? ssh key would be added to which user?

Also is the CI fixed now as per docs for me to continue the testing of the above features?

Also should we enable flatcar.autologin so the OCI console can run commands?

Thank you so much for testing this image. For SSH keys, things should be set as mentioned here: #3846 (review) - you just need to add ...oem.id = oraclecloud to those systemd units to automatically pull SSH keys for the core user and set hostname based on Oraclecloud metadata.

Also should we enable flatcar.autologin so the OCI console can run commands?

Here, it depends. Does OCI has a mechanism to prevent console access to the users? If yes, then we can consider setting flatcar.autologin if no, it's up to the user to manually provide flatcar.autologin into the Ignition configuration.

navaneeth-dev · 2026-04-10T09:01:28Z

I'll test it today.

Prevent console access to the users meaning like IAM permissions to deny console access per user basis?

navaneeth-dev · 2026-04-25T16:50:00Z

@tormath1 Can we merge the above 2 PRs? I guess only then I can test SSH support

tormath1 · 2026-04-27T08:11:53Z

@tormath1 Can we merge the above 2 PRs? I guess only then I can test SSH support

Thanks for the PRs. I'll create a build using this PR and the two others, for you to test SSH support.

EDIT: This will be available here: https://bincache.flatcar-linux.net/images/amd64/9999.9.113+tormath1-oci/

navaneeth-dev · 2026-04-30T14:36:10Z

I tried the build above, it is not working. Neither ssh or hostname.

But metadata is being retrieved successfully

root@localhost ~ # /usr/bin/coreos-metadata --cmdline --hostname=/sysroot/etc/hostname
Apr 30 13:27:50.254 INFO Fetching http://169.254.169.254/opc/v2/instance: Attempt #1
Apr 30 13:27:50.259 INFO Fetch successful
Apr 30 13:27:50.264 INFO wrote hostname jitsi to /sysroot/etc/hostname
root@localhost ~ # cat /sysroot/etc/hostname
jitsi

navaneeth-dev · 2026-05-16T07:24:00Z

@tormath1 Any update on this?

chewi · 2026-05-18T09:36:42Z

This will need some rebasing since my changes got merged. I thought yours might go in first, so sorry about that. I can do it myself.

chewi · 2026-05-18T10:08:21Z

That's now rebased. As you can see, it's a bit simpler now. 🙂 I would merge it, but I don't know why SSH and hostname isn't working.

tormath1 · 2026-06-02T13:28:22Z

Hey @navaneeth-dev, sorry for the back and forth on this contribution - I was on and off in May.

I finally been able to test your image on OCI, and things seems to work correctly. I spawned an instance without Ignition and I've been able to SSH into, which means that SSH keys injection works and hostname settings as well:

core@instance-20260602-1458 ~ $ systemctl status coreos-metadata-sshkeys@core.service
● coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys)
     Loaded: loaded (/usr/lib/systemd/system/coreos-metadata-sshkeys@.service; disabled; preset: disabled)
     Active: active (exited) since Tue 2026-06-02 13:01:33 UTC; 13min ago
 Invocation: 2732d5cbc9a8475095a1b6e54b93b970
    Process: 1666 ExecStart=/usr/bin/coreos-metadata ${COREOS_METADATA_OPT_PROVIDER} --ssh-keys=core (code=exited, status=0/SUCCESS)
    Process: 1789 ExecStartPost=/usr/bin/update-ssh-keys -u core (code=exited, status=0/SUCCESS)
   Main PID: 1666 (code=exited, status=0/SUCCESS)
   Mem peak: 3.3M
        CPU: 35ms
Jun 02 13:01:32 instance-20260602-1458 systemd[1]: Starting coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys)...
Jun 02 13:01:32 instance-20260602-1458 coreos-metadata[1666]: Jun 02 13:01:32.668 INFO Fetching http://169.254.169.254/opc/v2/instance: Attempt #1
Jun 02 13:01:32 instance-20260602-1458 coreos-metadata[1666]: Jun 02 13:01:32.675 INFO Fetch successful
Jun 02 13:01:32 instance-20260602-1458 coreos-metadata[1666]: wrote ssh authorized keys file for user: core
Jun 02 13:01:33 instance-20260602-1458 update-ssh-keys[1789]: Updated "/home/core/.ssh/authorized_keys"
Jun 02 13:01:33 instance-20260602-1458 systemd[1]: Finished coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys).
core@instance-20260602-1458 ~ $ hostname
instance-20260602-1458
core@instance-20260602-1458 ~ $ cat /run/metadata/flatcar
COREOS_ORACLECLOUD_INSTANCE_ID=ocid1.instance.oc1.iad.anuwcljswgbfqiqcdtg4xtol5hcsfudmxkvsupmdg3wxu6osc42bvsinu7za
COREOS_ORACLECLOUD_FAULT_DOMAIN=FAULT-DOMAIN-1
COREOS_ORACLECLOUD_AVAILABILITY_DOMAIN=YQPA:US-ASHBURN-AD-1
COREOS_ORACLECLOUD_COMPARTMENT_ID=ocid1.tenancy.oc1..aaaaaaaailtvxun7g5yn5skya637c5ombbj6soono3ob7eiik7uiqwd3gn2a
COREOS_ORACLECLOUD_INSTANCE_SHAPE=VM.Standard.E5.Flex
COREOS_ORACLECLOUD_REGION_ID=us-ashburn-1
COREOS_ORACLECLOUD_HOSTNAME=instance-20260602-1458

I've tested the Ignition provisioning and it works as well:

core@instance-20260602-1520 ~ $ sudo cat /var/run/ignition.json | jq .storage
{
  "files": [
    {
      "group": {},
      "path": "/etc/foo",
      "user": {},
      "contents": {
        "compression": "",
        "source": "data:,bar%0A",
        "verification": {}
      }
    }
  ]
}
core@instance-20260602-1520 ~ $ cat /etc/foo
bar

EDIT: Thanks again @navaneeth-dev for this contribution, before merging this PR, we miss 3 things:

A changelog entry (e.g: https://github.com/flatcar/scripts/blob/f47aaefba2b739cd1ae90bb6724dc00dc8d9d21f/changelog/changes/2024-02-21-scaleway.md)
Update the commit ID in ./sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r205.ebuild to use the new commit: flatcar/init@0bf7e11 (and bump the revision from r205 to r206) - this will pull your flatcar/init changes.
Update the commit ID in ./sdk_container/src/third_party/coreos-overlay/sys-kernel/bootengine/bootengine-0.0.38-r45.ebuild to use the new commit: flatcar/bootengine@944410b (and bump the revision from r45 to r46) - this will pull your flatcar/bootengine changes.

With this done, OracleCloud support will be available in the Alpha of the next release.

Signed-off-by: Navaneeth <me@rizexor.com>

tormath1

Thanks a lot for your contribution and your patience. Feel free to join the next Flatcar office hours if you want to demo your work with a simple Flatcar deployment on OCI :) flatcar/Flatcar#2134

navaneeth-dev force-pushed the oci branch from 574fac0 to ae865e0 Compare March 22, 2026 04:54

navaneeth-dev mentioned this pull request Mar 22, 2026

Investigate Oracle Cloud Infrastructure (OCI) support flatcar/Flatcar#1855

Open

tormath1 added alpha beta stable main labels Mar 26, 2026

tormath1 added this to Flatcar tactical, release planning, and roadmap Mar 26, 2026

tormath1 moved this to ⚒️ In Progress in Flatcar tactical, release planning, and roadmap Mar 26, 2026

tormath1 moved this from ⚒️ In Progress to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Mar 26, 2026

tormath1 reviewed Mar 26, 2026

View reviewed changes

Comment thread ...er/src/third_party/coreos-overlay/coreos-base/common-oem-files/common-oem-files-0-r12.ebuild Outdated

navaneeth-dev force-pushed the oci branch from 3e43161 to 4e180f9 Compare March 30, 2026 13:16

navaneeth-dev force-pushed the oci branch from fa2da59 to a616119 Compare April 1, 2026 12:45

navaneeth-dev force-pushed the oci branch from a616119 to 5e498bd Compare April 3, 2026 11:04

github-actions Bot mentioned this pull request Apr 22, 2026

Monthly contributions report 2026-03-22 - 2026-04-21 flatcar/Flatcar#2090

Open

navaneeth-dev force-pushed the oci branch 2 times, most recently from b005a23 to 2d746a7 Compare April 24, 2026 15:54

This was referenced Apr 25, 2026

feat: enable oraclecloud ssh keys support flatcar/init#144

Merged

feat: add oraclecloud support flatcar/bootengine#122

Merged

chewi force-pushed the oci branch 2 times, most recently from a568729 to ec0b68f Compare May 18, 2026 10:08

tormath1 removed alpha beta stable labels Jun 2, 2026

navaneeth-dev added 2 commits June 3, 2026 19:33

feat: oraclecloud support

4baa62c

Signed-off-by: Navaneeth <me@rizexor.com>

feat: pass oem id via coreos-metadata.service

7c3a6e0

Signed-off-by: Navaneeth <me@rizexor.com>

navaneeth-dev force-pushed the oci branch from ec0b68f to 7c3a6e0 Compare June 3, 2026 14:03

feat: support oraclecloud ssh keys & hostname

4c2fd29

Signed-off-by: Navaneeth <me@rizexor.com>

navaneeth-dev force-pushed the oci branch from e9ddf2f to 4c2fd29 Compare June 3, 2026 14:19

navaneeth-dev marked this pull request as ready for review June 3, 2026 14:21

navaneeth-dev requested a review from a team as a code owner June 3, 2026 14:21

tormath1 approved these changes Jun 3, 2026

View reviewed changes

tormath1 merged commit 9ae4461 into flatcar:main Jun 3, 2026
4 checks passed

github-project-automation Bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Jun 3, 2026

Conversation

navaneeth-dev commented Mar 22, 2026 • edited by tormath1 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Add support for Oracle Cloud Infrastructure

How to use

Testing done

Uh oh!

navaneeth-dev commented Mar 22, 2026

Uh oh!

chewi commented Mar 23, 2026

Uh oh!

tormath1 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

navaneeth-dev commented Mar 29, 2026

Uh oh!

tormath1 commented Mar 30, 2026

Uh oh!

navaneeth-dev commented Mar 30, 2026

Uh oh!

navaneeth-dev commented Apr 2, 2026

Uh oh!

tormath1 commented Apr 2, 2026

Uh oh!

navaneeth-dev commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tormath1 commented Apr 3, 2026

Uh oh!

navaneeth-dev commented Apr 3, 2026

Uh oh!

chewi commented Apr 3, 2026

Uh oh!

chewi commented Apr 3, 2026

Uh oh!

navaneeth-dev commented Apr 3, 2026

Uh oh!

tormath1 commented Apr 7, 2026

Uh oh!

tormath1 commented Apr 7, 2026

Uh oh!

navaneeth-dev commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tormath1 commented Apr 10, 2026

Uh oh!

navaneeth-dev commented Apr 10, 2026

Uh oh!

navaneeth-dev commented Apr 25, 2026

Uh oh!

tormath1 commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

navaneeth-dev commented Apr 30, 2026

Uh oh!

navaneeth-dev commented May 16, 2026

Uh oh!

chewi commented May 18, 2026

Uh oh!

chewi commented May 18, 2026

Uh oh!

tormath1 commented Jun 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tormath1 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

navaneeth-dev commented Mar 22, 2026 •

edited by tormath1

Loading

navaneeth-dev commented Apr 2, 2026 •

edited

Loading

navaneeth-dev commented Apr 8, 2026 •

edited

Loading

tormath1 commented Apr 27, 2026 •

edited

Loading

tormath1 commented Jun 2, 2026 •

edited

Loading