datadog-agent/7.60.0 package update

datadog-agent-nvml.yaml

@@ -1,7 +1,7 @@
 package:
   name: datadog-agent-nvml
   version: 1.0.9
-  epoch: 3
+  epoch: 4
   description: "Checks NVIDIA Management Library (NVML) exposed metrics through the Datadog Agent and can correlate them with the exposed Kubernetes devices"
   copyright:
     - license: Apache-2.0
@@ -18,14 +18,15 @@ environment:
       - busybox
       - datadog-agent
       - datadog-agent-core-integrations
-      - python-${{vars.python_version}}-dev # strictly requires python3.11
+      - py${{vars.python_version}}-grpcio
+      - python-${{vars.python_version}}-dev
       - rsync
 
 vars:
   dd_conf: /etc/datadog-agent/conf.d
   dd_home: / # agent being run by root expects /.
   dd_shared: /opt/datadog-agent/embedded
-  python_version: "3.11"
+  python_version: "3.12"
 
 pipeline:
   # This integration wheel comes from the integrations-extras repository
@@ -35,6 +36,11 @@ pipeline:
       tag: nvml-${{package.version}}
       expected-commit: d38c5cdb4ab4d07f4432afb25e0ccd70341efb51
 
+  - runs: |
+      # use system python grpcio to avoid compiling it
+      # this makes the build use a system grpcio package which is greater than or equal to the one in the requirements.in
+      sed -i 's/grpcio==\(.*\)/grpcio>=\1/' ./nvml/requirements.in
+
   - runs: |
       # Create and activate a virtual environment.
       python -m venv .venv

datadog-agent.yaml

@@ -2,8 +2,8 @@ package:
   name: datadog-agent
   # This package has two git checkouts. For each new release, the commit SHA for
   # DataDog/integrations-core must also be updated.
-  version: 7.59.1
-  epoch: 1
+  version: 7.60.0
+  epoch: 0
   description: "Collect events and metrics from your hosts that send data to Datadog."
   copyright:
     - license: Apache-2.0
@@ -13,11 +13,12 @@ package:
       - datadog-agent-core-integrations
       - findutils
       - grep
+      - libpcap
       - libseccomp
       - shadow
 
 vars:
-  py-version: "3.11"
+  py-version: "3.12"
   destd: /opt/datadog-agent
 
 var-transforms:
@@ -61,24 +62,25 @@ environment:
       - krb5-dev
       - libbpf-dev
       - libedit-dev
+      - libpcap-dev
       - libzip
       - linux-headers
       - ninja
       - openssf-compiler-options
       - procps-dev
       - py${{vars.py-version}}-pip
       - py${{vars.py-version}}-semver
-      - python-${{vars.py-version}}-dev # strictly requires python3.11
+      - python-${{vars.py-version}}-dev
       - systemd-dev
       - util-linux-misc # unshare
       - wget # Required for downloading clang-12 and kernel headers from debian
   environment:
     # CGo allows Go programs to call C code
     CGO_ENABLED: "1"
     # -Os optimizes the code for size and add the directory to rtlinkers includes
-    CGO_CFLAGS: "-Os -I${{targets.destdir}}/usr/include/"
+    CGO_CFLAGS: "-Os -I/usr/include/"
     # Pass options to the linker.
-    CGO_LDFLAGS: "-L${{targets.destdir}}/usr/lib/"
+    CGO_LDFLAGS: "-L/usr/lib/"
     # disables generation of debugging information
     # omits the symbol table and debug information, further reducing the size of the binary.
     GOFLAGS: "-ldflags=-w -ldflags=-s"
@@ -92,7 +94,7 @@ pipeline:
     with:
       repository: https://github.com/DataDog/datadog-agent
       tag: ${{package.version}}
-      expected-commit: 3638fcd32dcce71adaebe6eb4be4283ab139f6a3
+      expected-commit: 799e2984e88a0857828fb7f21a001c6d6aca23e6
 
   # Install `invoke` (build) dependencies. We ultimately package with venv so
   # these won't leak into the package.
@@ -134,6 +136,11 @@ pipeline:
       wget "https://github.com/llvm/llvm-project/releases/download/llvmorg-12.0.1/clang+llvm-12.0.1-x86_64-linux-gnu-ubuntu-16.04.tar.xz" -O /tmp/clang.tar.xz  -o /dev/null
       echo "6b3cc55d3ef413be79785c4dc02828ab3bd6b887872b143e3091692fc6acefe7  /tmp/clang.tar.xz" | sha256sum --check
 
+  # need to link libpcap.a to /home/build/dev/lib/libpcap.a else the build will attempt to download libpcap
+  - runs: |
+      mkdir -p /home/build/dev/lib
+      ln -s /usr/lib/libpcap.a /home/build/dev/lib/libpcap.a
+
   - runs: |
       wget -O common.deb http://deb.debian.org/debian-security/pool/updates/main/l/linux-5.10/linux-headers-${LINUX_HEADERS_VERSION}-common_${LINUX_KERNEL_VERSION}_all.deb
       dpkg -x common.deb /tmp/common
@@ -164,7 +171,6 @@ pipeline:
 
   - runs: |
       invoke -e rtloader.make \
-        --python-runtimes=3 \
         --install-prefix="${{targets.destdir}}/usr" \
         --cmake-options="\
           -DCMAKE_INSTALL_LIBDIR=lib \
@@ -180,7 +186,6 @@ pipeline:
         --bundle system-probe \
         --bundle security-agent \
         --exclude-rtloader \
-        --python-runtimes 3 \
         --no-development \
         --bundle-ebpf \
         --embedded-path /usr/lib
@@ -286,7 +291,7 @@ subpackages:
             with:
               repository: https://github.com/DataDog/integrations-core
               branch: ${{vars.datadog-major-minor-x}} # 7.59.x
-              expected-commit: cff91adb18fe879fd875d62d285a67deb69040fe # needs to be updated with each new release
+              expected-commit: 3189af0e0ae840c9a4bab3131662c7fd6b0de7fb # needs to be updated with each new release
           - uses: patch
             with:
               patches: /home/build/int-core-datadog_checks_dev-pyproject-toml.patch /home/build/int-core-mysql-hatch-toml.patch /home/build/int-core-singlestore-hatch-toml.patch /home/build/int-core-agent_requirements-in.patch /home/build/int-core-snowflake-pyproject-toml.patch
@@ -298,7 +303,7 @@ subpackages:
               python${{vars.py-version}} -m venv .venv
 
               # Install locked dependencies
-              .venv/bin/pip install --require-hashes --only-binary=:all: --no-deps -r .deps/resolved/linux-${{build.arch}}_py3.txt
+              .venv/bin/pip install --require-hashes --only-binary=:all: --no-deps -r .deps/resolved/linux-${{build.arch}}_${{vars.py-version}}.txt
 
               excludes="datadog_checks_base datadog_checks_dev datadog_checks_tests_helper docker_daemon esxi teleport"
               checks=$(invoke -r /home/build agent.collect-integrations /home/integrations/ 3 linux --excluded "$excludes")

datadog-agent/int-core-agent_requirements-in.patch

@@ -1,13 +1,13 @@
 diff --git a/agent_requirements.in b/agent_requirements.in
-index b4c724713e..0713f9b365 100644
+index 859d088..11f529c 100644
 --- a/agent_requirements.in
 +++ b/agent_requirements.in
-@@ -66,7 +66,7 @@ semver==3.0.2
+@@ -65,7 +65,7 @@ securesystemslib[crypto,pynacl]==0.28.0
+ semver==3.0.2
  service-identity[idna]==24.1.0
  simplejson==3.19.3
- six==1.16.0
 -snowflake-connector-python==3.12.1
 +snowflake-connector-python==3.12.3; python_version > '3.0'
  supervisor==4.2.5
  tuf==4.0.0
- uptime==3.0.1
+ uptime==3.0.1