[ader1990]

Part of the effort to add risc-v support.

Add riscv keyword for coreos-overlay packages

grep -r KEYWORDS sdk_container/src/third_party/coreos-overlay/ | grep "amd64" | grep -v '~amd64' | grep -v '~riscv' | awk -F: '{print $1}' | xargs sed -i 's/KEYWORDS="a.*/KEYWORDS="amd64 arm64 riscv"/g

How to use

Currently, this is just adding the risc-v keywords, so it cannot be tested functionally and should not impact any amd64/arm64 functionality.

Testing done

This change is a no-op, just needed for future support of risc-v.

• Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
• Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

[Copilot]

🟡 Changes recommended

Several newly keyworded packages still lack the architecture handling, kernel configuration or signed-artifact metadata needed for RISC-V builds.

5 open issues

• Map riscv64 toolchains to Go's riscv64 GOARCH · New
• Defer RISC-V keyword until Xen architecture support exists · New
• Restrict package until signed RISC-V artifact is available · New
• Add RISC-V support to coreos-kernel kernel_path helper · New
• Add RISC-V kernel defconfig before enabling keyword · New

What changed in this PR

Prepares Flatcar’s coreos-overlay package metadata for future RISC-V support by updating architecture keywords without changing build logic.

Changes:

• Adds riscv keywords across system, SDK, utility and OEM packages.
• Adds or stabilizes arm64 for some packages.
• Replaces existing keyword lists, removing other architecture keywords from several packages.

Paths are relative to sdk_container/src/third_party/coreos-overlay/.

File	Description
x11-drivers/​nvidia-drivers-service/​nvidia-drivers-service-580.178.04.ebuild	Adds RISC-V keyword.
virtual/​linux-sources/​linux-sources-2-r2.ebuild	Adds RISC-V; removes arm/x86 keywords.
sys-libs/​nss-usrfiles/​nss-usrfiles-9999.ebuild	Adds RISC-V; removes arm/x86 keywords.
sys-libs/​libsemanage/​libsemanage-3.11.ebuild	Retains RISC-V; removes arm/mips/x86 keywords.
sys-kernel/​coreos-sources/​coreos-sources-6.18.58.ebuild	Adds RISC-V keyword for kernel sources.
sys-kernel/​coreos-modules/​coreos-modules-6.18.58.ebuild	Adds RISC-V keyword for kernel modules.
sys-kernel/​coreos-kernel/​coreos-kernel-6.18.58.ebuild	Adds RISC-V keyword for the kernel.
sys-kernel/​bootengine/​bootengine-9999.ebuild	Adds RISC-V; removes arm/x86 keywords.
sys-fs/​overlaybd/​overlaybd-9999.ebuild	Adds RISC-V keyword.
sys-cluster/​ipvsadm/​ipvsadm-1.31-r1.ebuild	Adds RISC-V, stabilizes arm64 and removes other keywords.
sys-boot/​shim/​shim-16.1.ebuild	Adds RISC-V keyword for shim.
sys-boot/​shim-signed/​shim-signed-16.1.ebuild	Adds RISC-V keyword and generated artifact selection.
sys-auth/​realmd/​realmd-0.17.0-r2.ebuild	Adds RISC-V keyword.
sys-auth/​google-oslogin/​google-oslogin-20200910.00-r4.ebuild	Adds arm64 and RISC-V keywords.
sys-apps/​seismograph/​seismograph-9999.ebuild	Adds RISC-V; removes arm/x86 keywords.
sys-apps/​policycoreutils/​policycoreutils-3.11.ebuild	Adds RISC-V; removes arm/x86 keywords.
sys-apps/​ignition/​ignition-9999.ebuild	Adds RISC-V keyword.
sys-apps/​baselayout/​baselayout-9999.ebuild	Adds RISC-V keyword.
net-misc/​google-cloud-sdk/​google-cloud-sdk-355.0.0-r4.ebuild	Adds arm64 and RISC-V keywords.
coreos-devel/​sdk-depends/​sdk-depends-0.0.1.ebuild	Adds RISC-V keyword for SDK dependencies.
coreos-devel/​board-packages/​board-packages-0.0.1.ebuild	Adds RISC-V keyword for board packages.
coreos-base/​update-ssh-keys/​update-ssh-keys-9999.ebuild	Adds RISC-V keyword.
coreos-base/​update_engine/​update_engine-9999.ebuild	Adds RISC-V keyword.
coreos-base/​ue-rs/​ue-rs-9999.ebuild	Adds RISC-V keyword.
coreos-base/​oem-vmware/​oem-vmware-13.0.10.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-virtualbox/​oem-virtualbox-1.0.0.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-vagrant/​oem-vagrant-1.0.0.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-stackit/​oem-stackit-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-scaleway/​oem-scaleway-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-qemu/​oem-qemu-0.0.2.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-proxmoxve/​oem-proxmoxve-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-oraclecloud/​oem-oraclecloud-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-openstack/​oem-openstack-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-nutanix/​oem-nutanix-0.0.1.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-kubevirt/​oem-kubevirt-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-hyperv/​oem-hyperv-0.2.0.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-hetzner/​oem-hetzner-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-gce/​oem-gce-20260504.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-exoscale/​oem-exoscale-1.0.0.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-digitalocean/​oem-digitalocean-0.1.1-r2.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-cloudstack/​oem-cloudstack-1.0.0.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-cloudsigma/​oem-cloudsigma-1.0.0.ebuild	Adds arm64 and RISC-V OEM keywords.
coreos-base/​oem-azure/​oem-azure-2.12.0.4-r2.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-ami/​oem-ami-3.3.2299.0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​oem-akamai/​oem-akamai-0.ebuild	Adds RISC-V OEM keyword.
coreos-base/​hard-host-depends/​hard-host-depends-0.0.1.ebuild	Adds RISC-V; removes x86 keyword.
coreos-base/​flatcar-eks/​flatcar-eks-0.0.1-r4.ebuild	Adds RISC-V keyword.
coreos-base/​emerge-gitclone/​emerge-gitclone-9999.ebuild	Adds RISC-V; removes arm/x86 keywords.
coreos-base/​coreos/​coreos-0.0.1.ebuild	Adds RISC-V; removes arm/x86 keywords.
coreos-base/​coreos-sb-keys/​coreos-sb-keys-1.0.0.ebuild	Adds RISC-V keyword for Secure Boot keys.
coreos-base/​coreos-init/​coreos-init-9999.ebuild	Adds RISC-V; removes arm/x86 keywords.
coreos-base/​coreos-dev/​coreos-dev-0.1.0.ebuild	Adds RISC-V keyword for development packages.
coreos-base/​coreos-cloudinit/​coreos-cloudinit-9999.ebuild	Adds RISC-V keyword.
coreos-base/​coreos-au-key/​coreos-au-key-0.0.2.ebuild	Adds RISC-V; removes arm/x86 keywords.
coreos-base/​afterburn/​afterburn-9999.ebuild	Adds RISC-V keyword.
app-misc/​ca-certificates/​ca-certificates-3.132.ebuild	Adds RISC-V keyword.
app-emulation/​xenstore/​xenstore-4.14.2-r3.ebuild	Adds RISC-V; removes testing arm/x86 keywords.
app-emulation/​xenserver-pv-version/​xenserver-pv-version-6.2.0.ebuild	Adds arm64 and RISC-V keywords.
app-emulation/​wa-linux-agent/​wa-linux-agent-2.12.0.4-r2.ebuild	Adds RISC-V keyword.
app-emulation/​open-vm-tools/​open-vm-tools-13.0.10.ebuild	Adds arm64/RISC-V; removes x86 keyword.
app-emulation/​hv-daemons/​hv-daemons-6.18.58.ebuild	Adds RISC-V keyword.
app-emulation/​google-compute-engine/​google-compute-engine-20190124-r4.ebuild	Adds arm64 and RISC-V keywords.
app-emulation/​amazon-ssm-agent/​amazon-ssm-agent-3.3.2299.0-r1.ebuild	Adds RISC-V keyword.
app-crypt/​tpmpolicy/​tpmpolicy-20160404.ebuild	Adds RISC-V; removes x86 keyword.
app-crypt/​go-tspi/​go-tspi-9999.ebuild	Adds RISC-V keyword.
app-crypt/​clevis/​clevis-19-r2.ebuild	Adds RISC-V keyword.
app-containers/​accelerated-container-image/​accelerated-container-image-9999.ebuild	Adds RISC-V keyword.
app-admin/​updateservicectl/​updateservicectl-9999.ebuild	Adds RISC-V keyword.
app-admin/​toolbox/​toolbox-9999.ebuild	Adds RISC-V keyword.
app-admin/​sdnotify-proxy/​sdnotify-proxy-9999.ebuild	Adds RISC-V keyword.
app-admin/​mayday/​mayday-9999.ebuild	Adds RISC-V keyword.
app-admin/​locksmith/​locksmith-9999.ebuild	Adds RISC-V keyword.
app-admin/​google-guest-configs/​google-guest-configs-20260504.00.ebuild	Adds arm64 and RISC-V keywords.
app-admin/​flannel-wrapper/​flannel-wrapper-0.14.0-r1.ebuild	Adds RISC-V keyword.
app-admin/​etcd-wrapper/​etcd-wrapper-3.5.33.ebuild	Adds RISC-V keyword.

_{Review effort: Balanced}

[Copilot]

🟡 Changes recommended

Newly enabled architectures expose unsupported build and dependency paths, including an ARM64 GCE configuration that lacks required authentication files.

8 open issues

• Map riscv64 targets to supported Go architecture · New
• Avoid hardcoded amd64 target in RISC-V build · New
• Restrict hv_fcopy_uio_daemon installation to x86 · New
• Exclude RISC-V until xenstore supports the architecture · New
• Add RISC-V support to bootstrap and binary selection · New
• Limit syslinux dependency to supported x86 architectures · New
• Restrict GCE extension until OS Login supports new architectures · New
• Map riscv64 toolchains to Go's riscv64 GOARCH

4 resolved since last review

• Add RISC-V kernel defconfig before enabling keyword
• Add RISC-V support to coreos-kernel kernel_path helper
• Restrict package until signed RISC-V artifact is available
• Defer RISC-V keyword until Xen architecture support exists

_{Review effort: Balanced}

[Copilot]

🟡 Changes recommended

New architecture keywords expose critical RISC-V build and dependency failures, while ARM64 GCE enablement can break first-boot authentication due to missing OS Login components.

4 open issues

• Add riscv64 GOARCH mapping to the shared Go helper · New
• Keep GCE OEM restricted until ARM64 OS Login is supported · New
• Do not keyword RISC-V without Photon cross-build support · New
• Avoid expanding OEM build matrices with ARM64 · New

8 resolved since last review

• Restrict GCE extension until OS Login supports new architectures
• Limit syslinux dependency to supported x86 architectures
• Add RISC-V support to bootstrap and binary selection
• Exclude RISC-V until xenstore supports the architecture
• Restrict hv_fcopy_uio_daemon installation to x86
• Avoid hardcoded amd64 target in RISC-V build
• Map riscv64 targets to supported Go architecture
• Map riscv64 toolchains to Go's riscv64 GOARCH

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

The new RISC-V keywords expose blocking failures from an incorrect Go architecture mapping, an unsupported syslinux dependency, and installation of a Hyper-V fcopy daemon that is not built for RISC-V.

No open issues 🎉

4 resolved since last review

• Do not keyword RISC-V without Photon cross-build support
• Keep GCE OEM restricted until ARM64 OS Login is supported
• Add riscv64 GOARCH mapping to the shared Go helper
• Avoid expanding OEM build matrices with ARM64

_{Review effort: Balanced}

[chewi]

Steady on, @sayanchowdhury, this is still in draft and not actually working yet!

[ader1990]

Steady on, @sayanchowdhury, this is still in draft and not actually working yet!

I think we can merge this before the other work is done, as a small step. This is not impacting anything.

I would hold this though until #4294 gets merged, so that there are no conflicts to be resolved there.

[ader1990]

Rebase done on the latest main HEAD, ready for review.

[Copilot]

🟡 Changes recommended

RISC-V enablement introduces critical failures: hv-daemons installs an unbuilt binary, open-vm-tools and shim lack RISC-V support, and hard-host-depends requires SYSLINUX without matching keywords.

2 open issues

• Keep RISC-V unkeyworded until configure supports the architecture · New
• Keep RISC-V unkeyworded until Shim supports the architecture · New

_{Review effort: Balanced}