overlay baselayout: symlink networks, protocols, rpc, services into /etc

[dongsupark]

Pulls in flatcar/baselayout#44.

/etc/protocols, /etc/services, /etc/rpc and /etc/networks are not on disk in flatcar. Glibc finds them under /usr/share/baselayout/ through the usrfiles NSS module wired up in nsswitch.conf, so getprotobyname() and friends work fine and nothing looks broken.

Anything that opens those paths directly does break though. Statically linked binaries and go programs parse /etc/protocols themselves, and kubernetes workloads that mount the file as a hostPath with type: File do not even start, because kubelet requires the path to exist on the host, this is what azure-npm runs into.

So this PR adds four L lines to baselayout-etc.conf pointing back at the copies in /usr/share/baselayout/, exactly how /etc/nsswitch.conf and /etc/issue are already handled. L leaves an existing path alone, so anyone who put their own file in /etc keeps it.

/cc @satwiksps

Fixes flatcar/Flatcar#1852

Testing done

CI: https://jenkins.flatcar.org/job/container/job/sdk/130/cldsv/ (passed)

• Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
• Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

[Copilot]

Pull request overview

Updates the Flatcar sys-apps/baselayout overlay package to a baselayout commit that adds tmpfiles “L” symlinks so /etc/protocols, /etc/services, /etc/rpc, and /etc/networks exist on-disk (improving compatibility with static/Go binaries and Kubernetes hostPath type: File).

Changes:

• Bump the baselayout distfile referenced by the ebuilds/Manifest to commit a84fe9fe7c680a9de488ed58f85debf08432cbdd.
• Add a new versioned ebuild baselayout-3.6.8-r23 pinned to that commit.
• Update the existing baselayout-9999.ebuild (non-9999 branch metadata) to the same commit.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/Manifest	Updates the distfile checksum/size for the new baselayout commit tarball.
sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild	Updates the pinned commit metadata in the non-live code path.
sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.6.8-r23.ebuild	Introduces a versioned, keyworded ebuild pinned to the baselayout commit containing the fix.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.

Suppressed comments (1)

changelog/bugfixes/2026-08-06-baselayout-nss-files.md:1

• Changelog entry is grammatically unclear (“symlinks protocols, services, rpc, networks …”). Suggest rephrasing to explicitly say “symlinks for …” and (ideally) include the actual /etc/* paths for clarity/consistency with other changelog items.

- Added missing symlinks protocols, services, rpc, networks from /usr/share/baselayout to /etc. ([Flatcar#1852](https://github.com/flatcar/Flatcar/issues/1852))