diff --git a/sdk_container/src/third_party/coreos-overlay/.gitignore b/sdk_container/src/third_party/coreos-overlay/.gitignore new file mode 100644 index 0000000000..70cffbf46e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/.gitignore @@ -0,0 +1 @@ +metadata/md5-cache diff --git a/sdk_container/src/third_party/coreos-overlay/.travis.yml b/sdk_container/src/third_party/coreos-overlay/.travis.yml new file mode 100644 index 0000000000..5afcfddad5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/.travis.yml @@ -0,0 +1,21 @@ +# Derived from https://github.com/mrueg/repoman-travis/ + +sudo: required +language: python +python: + - pypy + +# For some reason portage is defaulting to lbzip2/lbunzip2 here and then complaining when they don't +# exist, so use plain old b{,un}zip2. +env: + - PORTAGE_VER="2.3.40" PORTAGE_BZIP2_COMMAND="bzip2" PORTAGE_BUNZIP2_COMMAND="bunzip2" + +before_install: + - sudo apt-get -qq update + - pip install lxml pyyaml + +before_script: ./.travis/setup_repoman.sh + +script: + - cd /usr/coreos-overlay + - /tmp/portage/portage-${PORTAGE_VER}/repoman/bin/repoman --experimental-repository-modules=y -dx full diff --git a/sdk_container/src/third_party/coreos-overlay/.travis/coreos.conf b/sdk_container/src/third_party/coreos-overlay/.travis/coreos.conf new file mode 100644 index 0000000000..f95be5e178 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/.travis/coreos.conf @@ -0,0 +1,8 @@ +[DEFAULT] +main-repo = portage-stable + +[coreos] +location = /usr/coreos-overlay + +[portage-stable] +location = /usr/portage diff --git a/sdk_container/src/third_party/coreos-overlay/.travis/setup_repoman.sh b/sdk_container/src/third_party/coreos-overlay/.travis/setup_repoman.sh new file mode 100755 index 0000000000..bfad0f2cf6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/.travis/setup_repoman.sh @@ -0,0 +1,23 @@ +#!/bin/bash + +set -euo pipefail + +# Set up directory permissions/portage user and group. +sudo chmod a+rwX /etc/passwd /etc/group /etc /usr +echo "portage:x:250:250:portage:/var/tmp/portage:/bin/false" >> /etc/passwd +echo "portage::250:portage,travis" >> /etc/group + +# Shuffle portage repositories around into the right places. +mkdir -p /etc/portage/repos.conf /usr/coreos-overlay +mv * /usr/coreos-overlay/ +mv .git /usr/coreos-overlay/ +git clone https://github.com/coreos/portage-stable /usr/portage/ +cp .travis/coreos.conf /etc/portage/repos.conf/ +ln -s /usr/coreos-overlay/profiles/coreos/amd64/sdk /etc/portage/make.profile +mkdir -p /usr/portage/metadata/{dtd,xml-schema} +wget -O /usr/portage/metadata/dtd/metadata.dtd https://www.gentoo.org/dtd/metadata.dtd +wget -O /usr/portage/metadata/xml-schema/metadata.xsd https://www.gentoo.org/xml-schema/metadata.xsd + +# Download portage. +mkdir /tmp/portage && cd /tmp/portage +wget -qO - "https://gitweb.gentoo.org/proj/portage.git/snapshot/portage-${PORTAGE_VER}.tar.gz" | tar xz diff --git a/sdk_container/src/third_party/coreos-overlay/CHANGELOG.md b/sdk_container/src/third_party/coreos-overlay/CHANGELOG.md new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/MAINTAINERS.md b/sdk_container/src/third_party/coreos-overlay/MAINTAINERS.md new file mode 100644 index 0000000000..170f832519 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/MAINTAINERS.md @@ -0,0 +1,8 @@ +# Maintainers + +* Krzesimir Nowak @krnowak +* Thilo Fromm @t-lo + +See [Governance](https://github.com/flatcar/Flatcar/blob/main/governance.md) for governance, commit, and vote guidelines as well as maintainer responsibilities. Everybody listed in this file is a committer as per governance definition. + +The contents of this file are synchronized from [Flatcar/MAINTAINERS.md](https://github.com/flatcar/Flatcar/blob/main/MAINTAINERS.md). diff --git a/sdk_container/src/third_party/coreos-overlay/README.md b/sdk_container/src/third_party/coreos-overlay/README.md new file mode 100644 index 0000000000..150fb7b649 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/README.md @@ -0,0 +1,57 @@ +# Overview + +This overlay contains Container Linux specific packages and Gentoo packages +that differ from their upstream Gentoo versions. + +See the [portage-stable](https://github.com/coreos/portage-stable) repo +for packages which do not have Container Linux specific changes. + +Licensing information can be found in the respective files, so consult +them directly. Most ebuilds are licensed under the GPL version 2. + +Upstream Gentoo sources: https://gitweb.gentoo.org/repo/gentoo.git + +# Important packages + +`coreos-base/coreos` is the package responsible for everything that gets +built into a production image and is not OEM specific. + +`coreos-base/coreos-dev` is the package responsible for everything that +gets built into a developer image and is not OEM specific. + +`coreos-devel/sdk-depends` is the package responsible for everything that +gets built into the Container Linux SDK. + +`coreos-devel/board-packages` is everything that could be built into a +development or production image, plus any OEM specific packages. + +`coreos-base/oem-*` are the OEM specific packages. They mostly install things +that belong in the OEM partition. Any RDEPENDS from these packages should +be copied to the RDEPENDS in `board-packages` to ensure they are built. + +`coreos-base/coreos-oem-*` are metapackages for OEM specific ACIs. + +# Updating + +To update follow the following steps: + +* Remove or rename the whole folder of the package to prepare the import from + upstream Gentoo, not only resetting the ebuild file but also any additional + files like patches or downstream additions under `files`. +* Run `~/trunk/src/scripts/update_ebuilds --portage_stable . CATEGORY/PACKAGE` + in the `coreos-overlay` folder to import a new version from upstream Gentoo. + Drop the ebuild files that you don't plan to use. +* Commit the changes with a message like `CATEGORY/PACKAGE: Sync from Gentoo`, + and mention the the commit ID in the body (`git show update_ebuilds/master`). +* Now find all downstream patches for the package by running + `git log CATEGORY/PACKAGE`. If everybody followed the process of resetting + before importing an upstream update, you only have to look for the commits + after the last update and port them to the new version. Otherwise you have + to compare the files manually to their upstream versions from older + [portage](https://github.com/gentoo/portage/) revisions. +* You can combine all old and new downstream patches into a single new commit + with the message `CATEGORY/PACKAGE: Apply Flatcar patches` to keep the number of + commits to port low, or have separate commits. Make sure that you explain + the changes and carry the explanations from old commits over, either in the + commit message, through comments in the ebuild file, or through a `README.md` + in the folder. diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/etcd-wrapper-3.5.0-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/etcd-wrapper-3.5.0-r1.ebuild new file mode 100644 index 0000000000..62e4fd6ecb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/etcd-wrapper-3.5.0-r1.ebuild @@ -0,0 +1,36 @@ +# Copyright (c) 2016 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +TMPFILES_OPTIONAL=1 +inherit systemd tmpfiles + +DESCRIPTION="etcd (System Application Container)" +HOMEPAGE="https://github.com/etcd-io/etcd" +KEYWORDS="amd64 arm64" + +LICENSE="Apache-2.0" +IUSE="" +SLOT=0 + +DEPEND="" + +RDEPEND=">=app-admin/sdnotify-proxy-0.1.0" + +S=${WORKDIR} + +src_install() { + local tag="v${PV}" + if [[ "${ARCH}" != "amd64" ]]; then + tag+="-${ARCH}" + fi + + exeinto /usr/lib/flatcar + doexe "${FILESDIR}"/etcd-wrapper + + sed "s|@ETCD_IMAGE_TAG@|${tag}|g" \ + "${FILESDIR}"/etcd-member.service > ${T}/etcd-member.service + systemd_dounit ${T}/etcd-member.service + dotmpfiles "${FILESDIR}"/etcd-wrapper.conf +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-member.service b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-member.service new file mode 100644 index 0000000000..1ebc82e893 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-member.service @@ -0,0 +1,29 @@ +[Unit] +Description=etcd (System Application Container) +Documentation=https://github.com/etcd-io/etcd +Wants=network-online.target network.target +After=network-online.target +Conflicts=etcd.service +Conflicts=etcd2.service + +[Service] +Type=notify +NotifyAccess=all +Restart=always +RestartSec=10s +TimeoutStartSec=0 +LimitNOFILE=40000 + +Environment="ETCD_IMAGE_URL=quay.io/coreos/etcd" +Environment="ETCD_IMAGE_TAG=@ETCD_IMAGE_TAG@" +Environment="ETCD_NAME=%m" +Environment="ETCD_USER=etcd" +Environment="ETCD_DATA_DIR=/var/lib/etcd" +Environment="ETCD_SSL_DIR=/etc/ssl/certs" + +ExecStart=/usr/lib/flatcar/etcd-wrapper $ETCD_OPTS +ExecStop=/usr/bin/docker stop etcd-member +ExecStopPost=/usr/bin/docker rm etcd-member + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-wrapper b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-wrapper new file mode 100755 index 0000000000..7a2296c350 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-wrapper @@ -0,0 +1,36 @@ +#!/bin/bash +# The "etcd-wrapper" script can't be deleted because ct overwrites +# the ExecStart directive with etcd-wrapper. Do the new action of +# ExecStart here. +set -e + +# Since etcd/v3 we can't use both `--name` and `ETCD_NAME` at the same time. +# We parse the etcd command line options to find a `--name/-name` flag if we found one, +# we unset the `ETCD_NAME` to not conflict with it. +for f in "${@}"; do + if [[ $f =~ ^-?-name=? ]]; then + unset ETCD_NAME + break + fi +done + + +# Do not pass ETCD_DATA_DIR through to the container. The default path, +# /var/lib/etcd is always used inside the container. +etcd_data_dir="${ETCD_DATA_DIR}" +ETCD_DATA_DIR="/var/lib/etcd" +mkdir -p ${etcd_data_dir} +chown -R etcd:etcd ${etcd_data_dir} +chmod 700 ${etcd_data_dir} +# A better way to run the Flannel/etcd container image is Podman because +# Flannel depends on etcd but wants to be run before Docker so that it +# can set up the Docker networking. Etcd and Flannel are part of the +# Container Linux Config specification and thus can't be dropped easily. +# For now we have to resort to running these services with Docker and try +# to restart Docker for the Flannel options to take effect. +/usr/bin/docker stop etcd-member || true +/usr/bin/docker rm -f etcd-member || true +# set umask so that sdnotify-proxy creates /run/etcd-notify with the same relaxed permissions as NOTIFY_SOCKET (/run/systemd/notify) normally has, to allow ETCD_USER to write to it +umask 000 +# mapping only /run/etcd-notify does not work and we use the full /run, also we must set NOTIFY_SOCKET in the container but use the original for /usr/libexec/sdnotify-proxy +/usr/libexec/sdnotify-proxy /run/etcd-notify /usr/bin/docker run --name etcd-member --network=host --ipc=host -u $(id -u ${ETCD_USER}):$(id -g ${ETCD_USER}) -v /run:/run -v /usr/share/ca-certificates:/usr/share/ca-certificates:ro -v ${etcd_data_dir}:/var/lib/etcd:rw -v ${ETCD_SSL_DIR}:/etc/ssl/certs:ro --env-file <(env; echo PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin; echo NOTIFY_SOCKET=/run/etcd-notify) --entrypoint /usr/local/bin/etcd ${ETCD_IMAGE:-${ETCD_IMAGE_URL}:${ETCD_IMAGE_TAG}} "$@" diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-wrapper.conf b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-wrapper.conf new file mode 100644 index 0000000000..1ebc5a2316 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/files/etcd-wrapper.conf @@ -0,0 +1 @@ +d /var/lib/etcd 0700 etcd etcd - - diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.link b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.link new file mode 100644 index 0000000000..202aea5ba0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.link @@ -0,0 +1,5 @@ +[Match] +OriginalName=flannel* + +[Link] +MACAddressPolicy=none diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.network b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.network new file mode 100644 index 0000000000..e5d48d739b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.network @@ -0,0 +1,5 @@ +[Match] +Name=flannel* + +[Link] +Unmanaged=yes diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-docker-opts.service b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-docker-opts.service new file mode 100644 index 0000000000..9ab7ddce64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-docker-opts.service @@ -0,0 +1,24 @@ +[Unit] +Description=flannel docker export service - Network fabric for containers (System Application Container) +Documentation=https://github.com/coreos/flannel +PartOf=flanneld.service +Requires=flanneld.service +After=flanneld.service + +[Service] +Type=oneshot +RemainAfterExit=true +Restart=on-failure +RestartSec=5s + +Environment="FLANNEL_IMAGE_URL=quay.io/coreos/flannel" +Environment="FLANNEL_IMAGE_TAG=@FLANNEL_IMAGE_TAG@" +Environment="FLANNEL_CMD=/opt/bin/mk-docker-opts.sh" +Environment="FLANNEL_CONTAINER=flannel-docker-opts" + +ExecStart=/usr/lib/flatcar/flannel-wrapper -d /run/flannel/flannel_docker_opts.env -i +ExecStop=/usr/bin/docker stop flannel-docker-opts +ExecStopPost=/usr/bin/docker rm flannel-docker-opts + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-wrapper b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-wrapper new file mode 100755 index 0000000000..c8aa3b05a9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-wrapper @@ -0,0 +1,42 @@ +#!/bin/bash +# The "flannel-wrapper" script can't be deleted because ct overwrites +# the ExecStart directive with flannel-wrapper. Do the new action of +# ExecStart here. +set -e + +ETCD_SSL_DIR="${ETCD_SSL_DIR:-/etc/ssl/etcd}" +RUN_ARGS="" +if [[ -d "${ETCD_SSL_DIR}" ]]; then + RUN_ARGS="-v ${ETCD_SSL_DIR}:${ETCD_SSL_DIR}:ro" +fi + +mkdir --parents /run/flannel + + +WRAP="" +if [[ -S "${NOTIFY_SOCKET}" ]]; then + WRAP="/usr/libexec/sdnotify-proxy /run/${FLANNEL_CONTAINER}-notify" +fi + +# A better way to run the Flannel/etcd container image is Podman because +# Flannel depends on etcd but wants to be run before Docker so that it +# can set up the Docker networking. Etcd and Flannel are part of the +# Container Linux Config specification and thus can't be dropped easily. +# For now we have to resort to running these services with Docker and try +# to restart Docker for the Flannel options to take effect (but that also +# terminates the etcd and flannel containers, causing the services to +# restart). +RESTART_DOCKER=0 +if [ "${FLANNEL_CMD}" = "/opt/bin/mk-docker-opts.sh" ] && [ "$1" = "-d" ] && [ ! -f "$2" ]; then + # only restart Docker only on first run, propagating updates on later runs was not done before in the rkt version, so keep the behavior + # (which also helps to break the loop which otherwise exists because "restart docker" mentioned above) + RESTART_DOCKER=1 +fi +/usr/bin/docker stop ${FLANNEL_CONTAINER} || true +/usr/bin/docker rm -f ${FLANNEL_CONTAINER} || true +# mapping only /run/${FLANNEL_CONTAINER}-notify does not work and we map the full /run (using /run:/run covers /run/flannel, too), also we must set NOTIFY_SOCKET in the container but use the original for /usr/libexec/sdnotify-proxy +${WRAP} /usr/bin/docker run --name ${FLANNEL_CONTAINER} --privileged --network=host --ipc=host ${RUN_ARGS} -v /run:/run:rw -v /etc/ssl/certs:/etc/ssl/certs:ro -v /usr/share/ca-certificates:/usr/share/ca-certificates:ro --env-file <(env; echo PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin; echo NOTIFY_SOCKET=/run/${FLANNEL_CONTAINER}-notify) --entrypoint ${FLANNEL_CMD} ${FLANNEL_IMAGE:-${FLANNEL_IMAGE_URL}:${FLANNEL_IMAGE_TAG}} "$@" +if [ "${RESTART_DOCKER}" = 1 ]; then + systemctl restart docker + echo "Restarted Docker to apply Flannel options" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flanneld.service b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flanneld.service new file mode 100644 index 0000000000..7fa589d6bf --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flanneld.service @@ -0,0 +1,29 @@ +[Unit] +Description=flannel - Network fabric for containers (System Application Container) +Documentation=https://github.com/coreos/flannel +After=etcd.service etcd2.service etcd-member.service +Requires=flannel-docker-opts.service + +[Service] +Type=notify +NotifyAccess=all +Restart=always +RestartSec=10s +TimeoutStartSec=300 +LimitNOFILE=40000 +LimitNPROC=1048576 + +Environment="FLANNEL_IMAGE_URL=quay.io/coreos/flannel" +Environment="FLANNEL_IMAGE_TAG=@FLANNEL_IMAGE_TAG@" +Environment="FLANNEL_OPTS=--ip-masq=true" +Environment="FLANNEL_CMD=/opt/bin/flanneld" +Environment="FLANNEL_CONTAINER=flannel" +EnvironmentFile=-/run/flannel/options.env + +ExecStartPre=/sbin/modprobe ip_tables +ExecStart=/usr/lib/flatcar/flannel-wrapper $FLANNEL_OPTS +ExecStop=/usr/bin/docker stop flannel +ExecStopPost=/usr/bin/docker rm flannel + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/flannel-wrapper-0.14.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/flannel-wrapper-0.14.0.ebuild new file mode 100644 index 0000000000..31fe837498 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/flannel-wrapper-0.14.0.ebuild @@ -0,0 +1,45 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +inherit systemd + +DESCRIPTION="flannel (System Application Container)" +HOMEPAGE="https://github.com/coreos/flannel" + +KEYWORDS="amd64 arm64" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +RDEPEND=" + !app-admin/flannel + >=app-admin/sdnotify-proxy-0.1.0 +" + +S="$WORKDIR" + +src_install() { + local tag="v${PV}" + if [[ "${ARCH}" != "amd64" ]]; then + tag+="-${ARCH}" + fi + + exeinto /usr/lib/flatcar + doexe "${FILESDIR}"/flannel-wrapper + + sed "s|@FLANNEL_IMAGE_TAG@|${tag}|g" \ + "${FILESDIR}"/flanneld.service > ${T}/flanneld.service + systemd_dounit ${T}/flanneld.service + + sed "s|@FLANNEL_IMAGE_TAG@|${tag}|g" \ + "${FILESDIR}"/flannel-docker-opts.service > ${T}/flannel-docker-opts.service + systemd_dounit ${T}/flannel-docker-opts.service + + insinto /usr/lib/systemd/network + doins "${FILESDIR}"/50-flannel.network + doins "${FILESDIR}"/50-flannel.link +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/locksmith-0.7.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/locksmith-0.7.0.ebuild new file mode 120000 index 0000000000..5771961c24 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/locksmith-0.7.0.ebuild @@ -0,0 +1 @@ +locksmith-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/locksmith-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/locksmith-9999.ebuild new file mode 100644 index 0000000000..0b063ed000 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/locksmith-9999.ebuild @@ -0,0 +1,37 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/locksmith" +CROS_WORKON_LOCALNAME="locksmith" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/flatcar/locksmith" +inherit cros-workon systemd coreos-go + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="c4cca93a15c7b7fd175e6687a83fc2725029a17a" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="locksmith" +HOMEPAGE="https://github.com/flatcar/locksmith" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +src_compile() { + COREOS_GO_MOD=vendor go_build "${COREOS_GO_PACKAGE}/locksmithctl" +} + +src_install() { + dobin ${GOBIN}/locksmithctl + dodir /usr/lib/locksmith + dosym ../../../bin/locksmithctl /usr/lib/locksmith/locksmithd + + systemd_dounit "${S}"/systemd/locksmithd.service + systemd_enable_service multi-user.target locksmithd.service +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/locksmith/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/Manifest b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/Manifest new file mode 100644 index 0000000000..5c4851c7dd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/Manifest @@ -0,0 +1,2 @@ +DIST logrotate-3.20.1.tar.xz 166712 BLAKE2B 8481e0d746c6bcbe10f2686a921334c6f957c8d92520927de7bc8fb0b7631a444fedaa80f35bc2de7961b3d5833ce4ab885b1298b235b7f8b33cc3ae05438da6 SHA512 a9ed5796ab254f511d0029a8f29ef7557f62e12e3ea9af24e30b5b9f348b1c1a16df26d44314b78299916fb3b5000b9cd9eed7cee2cee8df11cfd8e40c79b092 +DIST logrotate-3.20.1.tar.xz.asc 833 BLAKE2B afc02177335bcd580e0617af8c50846b371c2d00ecd8fe329c2e298dc8c48823137625f455cea3d983a0d9971733297fa2c4d98ba3c6f72d2c07f8f21108cfe4 SHA512 2dd207feec431b223ff12f09f6cce14409d45e5bb3abaf2275dd773c7ee7c59ed7d32395e5869bfed70c970be4158fd299e6e269838378843dcb63ca5ebfa029 diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate-3.15.0-ignore-hidden.patch b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate-3.15.0-ignore-hidden.patch new file mode 100644 index 0000000000..cb2fc073bc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate-3.15.0-ignore-hidden.patch @@ -0,0 +1,14 @@ +diff -Nuar a/config.c b/config.c +--- a/config.c 2018-10-05 17:01:21.000000000 +0200 ++++ b/config.c 2018-12-19 16:33:52.280129804 +0100 +@@ -417,7 +417,9 @@ + int i; + + /* Check if fname is '.' or '..'; if so, return false */ +- if (fname[0] == '.' && (!fname[1] || (fname[1] == '.' && !fname[2]))) ++ /* Don't include 'hidden' files either; this breaks Gentoo ++ portage config file management http://bugs.gentoo.org/87683 */ ++ if (fname[0] == '.') + return 0; + + /* Check if fname is ending in a taboo-extension; if so, return false */ diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate-3.20.1-log-changes.patch b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate-3.20.1-log-changes.patch new file mode 100644 index 0000000000..b7c4bb5275 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate-3.20.1-log-changes.patch @@ -0,0 +1,147 @@ +https://bugs.gentoo.org/847382#c3 +https://github.com/logrotate/logrotate/commit/31cf1099ab8514dfcae5a980bc77352edd5292f8 +https://github.com/logrotate/logrotate/commit/7b1fa328bf70eb8434166f151bd075cd1440d0dc + +From 31cf1099ab8514dfcae5a980bc77352edd5292f8 Mon Sep 17 00:00:00 2001 +From: Kamil Dudka +Date: Fri, 27 May 2022 09:56:07 +0200 +Subject: [PATCH] lockState: do not print `error:` when exit code is unaffected + +Closes: https://github.com/logrotate/logrotate/pull/448 +--- a/logrotate.c ++++ b/logrotate.c +@@ -3050,8 +3050,8 @@ static int lockState(const char *stateFilename, int skip_state_lock) + } + + if (sb.st_mode & S_IROTH) { +- message(MESS_ERROR, "state file %s is world-readable and thus can" +- " be locked from other unprivileged users." ++ message(MESS_NORMAL, "warning: state file %s is world-readable" ++ " and thus can be locked from other unprivileged users." + " Skipping lock acquisition...\n", + stateFilename); + close(lockFd); + +From 7b1fa328bf70eb8434166f151bd075cd1440d0dc Mon Sep 17 00:00:00 2001 +From: Kamil Dudka +Date: Fri, 27 May 2022 16:02:57 +0200 +Subject: [PATCH] log: unify handling of log levels + +Use MESS_WARN instead of MESS_NORMAL and make it always use +the `warning:` prefix. MESS_WARN is now mapped to LOG_WARNING +for syslog. + +Also drop MESS_VERBOSE, which was not set anywhere. + +Closes: https://github.com/logrotate/logrotate/pull/239 +Closes: https://github.com/logrotate/logrotate/pull/449 +--- a/config.c ++++ b/config.c +@@ -643,7 +643,7 @@ static void set_criterium(enum criterium *pDst, enum criterium src, int *pSet) + { + if (*pSet && (*pDst != src)) { + /* we are overriding a previously set criterium */ +- message(MESS_VERBOSE, "warning: '%s' overrides previously specified '%s'\n", ++ message(MESS_DEBUG, "note: '%s' overrides previously specified '%s'\n", + crit_to_string(src), crit_to_string(*pDst)); + } + *pDst = src; +@@ -1021,7 +1021,7 @@ static int readConfigFile(const char *configFile, struct logInfo *defConfig) + + if (getuid() == ROOT_UID) { + if ((sb_config.st_mode & 07533) != 0400) { +- message(MESS_NORMAL, ++ message(MESS_WARN, + "Potentially dangerous mode on %s: 0%o\n", + configFile, (unsigned) (sb_config.st_mode & 07777)); + } +@@ -1386,7 +1386,7 @@ static int readConfigFile(const char *configFile, struct logInfo *defConfig) + RAISE_ERROR(); + } + } else if (!strcmp(key, "errors")) { +- message(MESS_NORMAL, ++ message(MESS_WARN, + "%s: %d: the errors directive is deprecated and no longer used.\n", + configFile, lineNum); + } else if (!strcmp(key, "mail")) { +--- a/log.c ++++ b/log.c +@@ -40,9 +40,12 @@ static void log_once(FILE *where, int level, const char *format, va_list args) + { + switch (level) { + case MESS_DEBUG: +- case MESS_NORMAL: +- case MESS_VERBOSE: + break; ++ ++ case MESS_WARN: ++ fprintf(where, "warning: "); ++ break; ++ + default: + fprintf(where, "error: "); + break; +@@ -78,10 +81,11 @@ void message(int level, const char *format, ...) + priority |= LOG_DEBUG; + break; + case MESS_DEBUG: +- case MESS_VERBOSE: +- case MESS_NORMAL: + priority |= LOG_INFO; + break; ++ case MESS_WARN: ++ priority |= LOG_WARNING; ++ break; + case MESS_ERROR: + priority |= LOG_ERR; + break; +--- a/log.h ++++ b/log.h +@@ -5,8 +5,7 @@ + + #define MESS_REALDEBUG 1 + #define MESS_DEBUG 2 +-#define MESS_VERBOSE 3 +-#define MESS_NORMAL 4 ++#define MESS_WARN 4 + #define MESS_ERROR 5 + #define MESS_FATAL 6 + +--- a/logrotate.c ++++ b/logrotate.c +@@ -3050,7 +3050,7 @@ static int lockState(const char *stateFilename, int skip_state_lock) + } + + if (sb.st_mode & S_IROTH) { +- message(MESS_NORMAL, "warning: state file %s is world-readable" ++ message(MESS_WARN, "state file %s is world-readable" + " and thus can be locked from other unprivileged users." + " Skipping lock acquisition...\n", + stateFilename); +@@ -3106,7 +3106,7 @@ int main(int argc, const char **argv) + POPT_AUTOHELP { NULL, 0, 0, NULL, 0, NULL, NULL } + }; + +- logSetLevel(MESS_NORMAL); ++ logSetLevel(MESS_WARN); + setlocale (LC_ALL, ""); + + optCon = poptGetContext("logrotate", argc, argv, options, 0); +@@ -3117,7 +3117,7 @@ int main(int argc, const char **argv) + switch (arg) { + case 'd': + debug = 1; +- message(MESS_NORMAL, "WARNING: logrotate in debug mode does nothing" ++ message(MESS_WARN, "logrotate in debug mode does nothing" + " except printing debug messages! Consider using verbose" + " mode (-v) instead if this is not what you want.\n\n"); + /* fallthrough */ +--- a/test/test-0080.sh ++++ b/test/test-0080.sh +@@ -10,4 +10,4 @@ cleanup 80 + preptest test.log 80 1 0 + + $RLR -d test-config.80 2>&1 | \ +- grep -q "warning: 'daily' overrides previously specified 'size'" ++ grep -q "note: 'daily' overrides previously specified 'size'" + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.conf b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.conf new file mode 100644 index 0000000000..0b1d0b9265 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.conf @@ -0,0 +1,47 @@ +# Flatcar: This is a modified version of the default config that came +# with Gentoo Linux. + +# +# Default logrotate(8) configuration file for Gentoo Linux. +# See "man logrotate" for details. + +# rotate log files weekly. +#weekly +#daily + +# keep 4 weeks worth of backlogs. +#rotate 4 + +# Flatcar: keep only the most recent old log. +rotate 1 + +# create new (empty) log files after rotating old ones. +create + +# use date as a suffix of the rotated file. +dateext + +# compress rotated log files. +compress + +# Flatcar: If a file to rotate is missing, don't log an error. +missingok +notifempty +nomail +noolddir + +# packages can drop log rotation information into this directory. +include /etc/logrotate.d + +# no packages own wtmp and btmp -- we'll rotate them here. +# must match creation rules in /usr/lib/tmpfiles.d/var.conf +/var/log/wtmp { + create 0664 root utmp + size 1M +} +/var/log/btmp { + create 0600 root utmp + size 1M +} + +# system-specific logs may also be configured here. diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.service b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.service new file mode 100644 index 0000000000..92dcd0368e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.service @@ -0,0 +1,5 @@ +[Unit] +Description=Rotate and Compress System Logs + +[Service] +ExecStart=/usr/bin/logrotate /usr/share/logrotate/logrotate.conf diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.tmpfiles b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.tmpfiles new file mode 100644 index 0000000000..e0c2f7c293 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/files/logrotate.tmpfiles @@ -0,0 +1,2 @@ +d /var/lib/misc +d /etc/logrotate.d - - - - - diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/logrotate-3.20.1-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/logrotate-3.20.1-r1.ebuild new file mode 100644 index 0000000000..59e516b607 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/logrotate-3.20.1-r1.ebuild @@ -0,0 +1,109 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/kamildudka.asc +inherit systemd tmpfiles verify-sig + +DESCRIPTION="Rotates, compresses, and mails system logs" +HOMEPAGE="https://github.com/logrotate/logrotate" +SRC_URI="https://github.com/${PN}/${PN}/releases/download/${PV}/${P}.tar.xz" +SRC_URI+=" verify-sig? ( https://github.com/${PN}/${PN}/releases/download/${PV}/${P}.tar.xz.asc )" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86" +IUSE="acl +cron selinux" + +DEPEND=">=dev-libs/popt-1.5 + selinux? ( sys-libs/libselinux ) + acl? ( virtual/acl )" +RDEPEND="${DEPEND} + selinux? ( sec-policy/selinux-logrotate ) + cron? ( virtual/cron )" +BDEPEND="verify-sig? ( sec-keys/openpgp-keys-kamildudka )" + +STATEFILE="${EPREFIX}/var/lib/misc/logrotate.status" +OLDSTATEFILE="${EPREFIX}/var/lib/logrotate.status" + +PATCHES=( + "${FILESDIR}"/${PN}-3.15.0-ignore-hidden.patch + "${FILESDIR}"/${P}-log-changes.patch +) + +move_old_state_file() { + elog "logrotate state file is now located at ${STATEFILE}" + elog "See bug #357275" + if [[ -e "${OLDSTATEFILE}" ]] ; then + elog "Moving your current state file to new location: ${STATEFILE}" + mv -n "${OLDSTATEFILE}" "${STATEFILE}" || die + fi +} + +install_cron_file() { + exeinto /etc/cron.daily + newexe "${S}"/examples/logrotate.cron "${PN}" +} + +src_prepare() { + default + + sed -i -e 's#/usr/sbin/logrotate#/usr/bin/logrotate#' examples/logrotate.{cron,service} || die +} + +src_configure() { + econf \ + $(use_with acl) \ + $(use_with selinux) \ + --with-state-file-path="${STATEFILE}" +} + +src_install() { + dobin logrotate + doman logrotate.8 + dodoc ChangeLog.md + + # Flatcar: Put our config under /usr. We will point logrotate + # to use this configuration in the systemd unit we install + # below. User can always customize logrotate configuration by + # using drop-ins to point to a different path or by adding + # logrotate config files to /etc/logrotate.d. + insinto /usr/share/logrotate + doins "${FILESDIR}"/logrotate.conf + + use cron && install_cron_file + + # Flatcar: Install our own systemd service file and enable it + # by default. + # + # TODO: We probably should just patch the example logrotate + # service unit, as it has a bunch of hardening and performance + # tuning stuff done. + systemd_dounit examples/logrotate.timer + systemd_dounit "${FILESDIR}"/logrotate.service + systemd_enable_service multi-user.target logrotate.timer + newtmpfiles "${FILESDIR}"/${PN}.tmpfiles ${PN}.conf + + keepdir /etc/logrotate.d +} + +pkg_postinst() { + elog + elog "The ${PN} binary is now installed under /usr/bin. Please" + elog "update your links" + elog + + move_old_state_file + + tmpfiles_process ${PN}.conf + + if [[ -z ${REPLACING_VERSIONS} ]] ; then + elog "If you wish to have logrotate e-mail you updates, please" + elog "emerge virtual/mailx and configure logrotate in" + elog "/etc/logrotate.conf appropriately" + elog + elog "Additionally, /etc/logrotate.conf may need to be modified" + elog "for your particular needs. See man logrotate for details." + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/metadata.xml new file mode 100644 index 0000000000..5fc3fca470 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/logrotate/metadata.xml @@ -0,0 +1,30 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + Logrotate allows for the automatic rotation compression, removal + and mailing of log files. Logrotate can be set to handle a log + file daily, weekly, monthly or when the log file gets to a certain + size. + + + Logrotate permite la rotación, compresión, eliminación y + notificación por correo electrónico de forma automática de ficheros + de registro (logs). Logrotate se puede configurar para gestionar + estos ficheros diariamente, semanalmente, mensualmente o cuando + su tamaño alcanza cierto valor. + + + Installs acl support + Installs cron file + Installs Security Enhanced Linux support + + + logrotate/logrotate + cpe:/a:logrotate_project:logrotate + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/mayday-1.0.0-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/mayday-1.0.0-r2.ebuild new file mode 120000 index 0000000000..f1e34b30f4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/mayday-1.0.0-r2.ebuild @@ -0,0 +1 @@ +mayday-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/mayday-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/mayday-9999.ebuild new file mode 100644 index 0000000000..7aaf9801c4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/mayday-9999.ebuild @@ -0,0 +1,35 @@ +# Copyright (c) 2015 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/mayday" +CROS_WORKON_LOCALNAME="mayday" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/flatcar/mayday" +inherit coreos-go cros-workon + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="9de08c8f9f4360fe52cb3a56a7fb8f4bc4e75dcc" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="mayday" +HOMEPAGE="https://github.com/flatcar/mayday" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +src_compile() { + COREOS_GO_MOD=vendor go_build "${COREOS_GO_PACKAGE}" +} + +src_install() { + newbin ${GOBIN}/mayday mayday + insinto /usr/share/mayday + doins "${S}/default.json" +} + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/mayday/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/sdnotify-proxy-0.1.0-r3.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/sdnotify-proxy-0.1.0-r3.ebuild new file mode 120000 index 0000000000..e74a1470d7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/sdnotify-proxy-0.1.0-r3.ebuild @@ -0,0 +1 @@ +sdnotify-proxy-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/sdnotify-proxy-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/sdnotify-proxy-9999.ebuild new file mode 100644 index 0000000000..09741cb18f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sdnotify-proxy/sdnotify-proxy-9999.ebuild @@ -0,0 +1,31 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="kinvolk/sdnotify-proxy" +CROS_WORKON_LOCALNAME="sdnotify-proxy" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/coreos/sdnotify-proxy" +COREOS_GO_GO111MODULE="off" +inherit coreos-go cros-workon + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="0f8ef1aa86c59fc6d54eadaffb248feaccd1018b" # master + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="sdnotify-proxy" +HOMEPAGE="https://github.com/coreos/sdnotify-proxy" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +src_install() { + # Put sdnotify-proxy into its well-know location. + exeinto /usr/libexec + doexe ${GOBIN}/sdnotify-proxy +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/Manifest b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/Manifest new file mode 100644 index 0000000000..b9cba5d253 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/Manifest @@ -0,0 +1,2 @@ +DIST sudo-1.9.12p2.tar.gz 4909431 BLAKE2B 79eac710b757acae7aa98e6e6f495a475e5236be456e4687fb1441345ee296672ff80a5a60902cffcd257aa81a01fbc3857f3c52e51bb46f56c060fd299e0c05 SHA512 5e035246137d5820691f7ddfc13faec3886e3cf1563ed56633667d86ab4f1306f34cc0e27808f56790b6c6a4614826e54c5b7e47b31eb009b96dde3e52170c45 +DIST sudo-1.9.12p2.tar.gz.sig 566 BLAKE2B fa679038c33d2bf1476b56944872d3a18b66bf5c5fb2e660d1f8777cdb209928912ddd8d89d878bd2218df3acd1e7fee5aa850e8d01a1cfac6ab310c788149fa SHA512 0b2f10488c44bfcd94eed97002865d89f4a03a92ef3b890fac3121ef0f9e6c55387771ddead1a94dc92d85c35e3d28b4730f35cdc2aafb51128594555ea29876 diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/README.md b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/README.md new file mode 100644 index 0000000000..c90febe8b2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/README.md @@ -0,0 +1,8 @@ +## Flatcar changes +- Remove Perl Runtime Dependency +- Remove OpenLDAP schema files for sudo +``` +insinto /etc/openldap/schema +newins doc/schema.OpenLDAP sudo.schema +``` +- Remove sudo.conf file as it is shipped via baselayout diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/metadata.xml new file mode 100644 index 0000000000..7660289e00 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/metadata.xml @@ -0,0 +1,25 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + Sudo (superuser do) allows a system administrator to give certain + users (or groups of users) the ability to run some (or all) + commands as root or another user while logging the commands and + arguments. + + + Use message digest functions from dev-libs/libgcrypt instead of sudo's + Let sudo print insults when the user types the wrong password + Allow sudo to send emails with sendmail + Add System Security Services Daemon support + Replace PATH variable with compile time secure paths + + + cpe:/a:todd_miller:sudo + sudo-project/sudo + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/sudo-1.9.12_p2.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/sudo-1.9.12_p2.ebuild new file mode 100644 index 0000000000..ea00511120 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/sudo/sudo-1.9.12_p2.ebuild @@ -0,0 +1,291 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit pam libtool tmpfiles toolchain-funcs + +MY_P="${P/_/}" +MY_P="${MY_P/beta/b}" + +DESCRIPTION="Allows users or groups to run commands as other users" +HOMEPAGE="https://www.sudo.ws/" + +if [[ ${PV} == 9999 ]] ; then + inherit mercurial + EHG_REPO_URI="https://www.sudo.ws/repos/sudo" +else + VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/sudo.ws.asc + inherit verify-sig + + uri_prefix= + case ${P} in + *_beta*|*_rc*) uri_prefix=beta/ ;; + esac + + SRC_URI=" + https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz + ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz + verify-sig? ( + https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz.sig + ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz.sig + ) + " + + if [[ ${PV} != *_beta* && ${PV} != *_rc* ]] ; then + KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~sparc-solaris" + fi + + BDEPEND+="verify-sig? ( sec-keys/openpgp-keys-sudo )" +fi + +S="${WORKDIR}/${MY_P}" + +# Basic license is ISC-style as-is, some files are released under +# 3-clause BSD license +LICENSE="ISC BSD" +SLOT="0" +IUSE="gcrypt ldap nls offensive pam sasl +secure-path selinux +sendmail skey ssl sssd" + +DEPEND=" + sys-libs/zlib:= + virtual/libcrypt:= + gcrypt? ( dev-libs/libgcrypt:= ) + ldap? ( + >=net-nds/openldap-2.1.30-r1:= + sasl? ( + dev-libs/cyrus-sasl + net-nds/openldap:=[sasl] + ) + ) + pam? ( sys-libs/pam ) + sasl? ( dev-libs/cyrus-sasl ) + selinux? ( sys-libs/libselinux ) + skey? ( >=sys-auth/skey-1.1.5-r1 ) + ssl? ( dev-libs/openssl:0= ) + sssd? ( sys-auth/sssd[sudo] ) +" +#Flatcar: Remove Perl runtime dependency +# ldap? ( dev-lang/perl ) +RDEPEND=" + ${DEPEND} + >=app-misc/editor-wrapper-3 + virtual/editor + pam? ( sys-auth/pambase ) + selinux? ( sec-policy/selinux-sudo ) + sendmail? ( virtual/mta ) +" +BDEPEND+=" + sys-devel/bison + virtual/pkgconfig +" + +REQUIRED_USE=" + ?? ( pam skey ) + ?? ( gcrypt ssl ) +" + +MAKEOPTS+=" SAMPLES=" + +src_prepare() { + default + + elibtoolize +} + +set_secure_path() { + # First extract the default ROOTPATH from build env + SECURE_PATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") + + case "${SECURE_PATH}" in + */usr/sbin*) + ;; + *) + SECURE_PATH=$(unset PATH; . "${EPREFIX}"/etc/profile.env; echo "${PATH}") + ;; + esac + + if [[ -z ${SECURE_PATH} ]] ; then + ewarn " Failed to detect SECURE_PATH, please report this" + fi + + # Then remove duplicate path entries + cleanpath() { + local newpath thisp IFS=: + for thisp in $1 ; do + if [[ :${newpath}: != *:${thisp}:* ]] ; then + newpath+=:${thisp} + else + einfo " Duplicate entry ${thisp} removed..." + fi + done + SECURE_PATH=${newpath#:} + } + cleanpath /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin${SECURE_PATH:+:${SECURE_PATH}} + + # Finally, strip gcc paths, bug #136027 + rmpath() { + local e newpath thisp IFS=: + for thisp in ${SECURE_PATH} ; do + for e ; do + [[ ${thisp} == ${e} ]] && continue 2 ; + done + newpath+=:${thisp} + done + SECURE_PATH=${newpath#:} + } + rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' +} + +src_configure() { + local SECURE_PATH + + set_secure_path + + # bug #767712 + tc-export PKG_CONFIG + + # - audit: somebody got to explain me how I can test this before I + # enable it.. - Diego + # - plugindir: autoconf code is crappy and does not delay evaluation + # until `make` time, so we have to use a full path here rather than + # basing off other values. + local myeconfargs=( + # We set all of the relevant options by ourselves (patched + # into the toolchain) and setting these in the build system + # actually causes a downgrade when using e.g. -D_FORTIFY_SOURCE=3 + # (it'll downgrade to =2). So, this has no functional effect on + # the hardening for users. It's safe. + --disable-hardening + + # requires some python eclass + --disable-python + --enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d + --enable-zlib=system + --with-editor="${EPREFIX}"/usr/libexec/editor + --with-env-editor + --with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo + --with-rundir="${EPREFIX}"/run/sudo + --with-vardir="${EPREFIX}"/var/db/sudo + --without-linux-audit + --without-opie + $(use_enable gcrypt) + $(use_enable nls) + $(use_enable sasl) + $(use_enable ssl openssl) + $(use_with ldap) + $(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) + $(use_with offensive insults) + $(use_with offensive all-insults) + $(use_with pam) + $(use_with pam pam-login) + $(use_with secure-path secure-path "${SECURE_PATH}") + $(use_with selinux) + $(use_with sendmail) + $(use_with skey) + $(use_with sssd) + ) + + econf "${myeconfargs[@]}" +} + +src_install() { + default + + if use ldap ; then + dodoc README.LDAP.md + + cat <<-EOF > "${T}"/ldap.conf.sudo + # See ldap.conf(5) and README.LDAP.md for details + # This file should only be readable by root + + # supported directives: host, port, ssl, ldap_version + # uri, binddn, bindpw, sudoers_base, sudoers_debug + # tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key} + EOF + + if use sasl ; then + cat <<-EOF >> "${T}"/ldap.conf.sudo + + # SASL directives: use_sasl, sasl_mech, sasl_auth_id + # sasl_secprops, rootuse_sasl, rootsasl_auth_id, krb5_ccname + EOF + fi + + insinto /etc + doins "${T}"/ldap.conf.sudo + fperms 0440 /etc/ldap.conf.sudo + + #Flatcar: we don't ship OpenLDAP schemas + + fi + + if use pam ; then + pamd_mimic system-auth sudo auth account session + pamd_mimic system-auth sudo-i auth account session + fi + + keepdir /var/db/sudo/lectured + fperms 0700 /var/db/sudo/lectured + # bug #652958 + fperms 0711 /var/db/sudo + + # Don't install into /run as that is a tmpfs most of the time + # (bug #504854) + rm -rf "${ED}"/run || die + + # bug #697812 + find "${ED}" -type f -name "*.la" -delete || die + + # Flatcar: Remove sudo.conf as it is shipped via baselayout + rm "${ED}/etc/sudo.conf" || die + +} + +pkg_postinst() { + tmpfiles_process sudo.conf + + # bug #652958 + local sudo_db="${EROOT}/var/db/sudo" + if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then + chmod 711 "${sudo_db}" || die + fi + + if use ldap ; then + ewarn + ewarn "sudo uses the ${ROOT}/etc/ldap.conf.sudo file for ldap configuration." + ewarn + if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then + ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" + ewarn "configured in ${ROOT}/etc/nsswitch.conf." + ewarn + ewarn "To make use of LDAP, add this line to your ${ROOT}/etc/nsswitch.conf:" + ewarn " sudoers: ldap files" + ewarn + fi + fi + if use prefix ; then + ewarn + ewarn "To use sudo on Prefix, you need to change file ownership and permissions" + ewarn "with root privileges, as follows:" + ewarn + ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" + ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" + ewarn " # chown root:root ${EPREFIX}/etc/sudoers" + ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" + ewarn " # chown root:root ${EPREFIX}/var/db/sudo" + ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" + ewarn + fi + + elog "To use the -A (askpass) option, you need to install a compatible" + elog "password program from the following list. Starred packages will" + elog "automatically register for the use with sudo (but will not force" + elog "the -A option):" + elog "" + elog " [*] net-misc/ssh-askpass-fullscreen" + elog " net-misc/x11-ssh-askpass" + elog "" + elog "You can override the choice by setting the SUDO_ASKPASS environmnent" + elog "variable to the program you want to use." +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/toolbox-0.0.0-r16.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/toolbox-0.0.0-r16.ebuild new file mode 120000 index 0000000000..54febbc58a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/toolbox-0.0.0-r16.ebuild @@ -0,0 +1 @@ +toolbox-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/toolbox-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/toolbox-9999.ebuild new file mode 100644 index 0000000000..75f1d6f125 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/toolbox/toolbox-9999.ebuild @@ -0,0 +1,28 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/toolbox" +CROS_WORKON_LOCALNAME="toolbox" +CROS_WORKON_REPO="https://github.com" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="9695c9b42036ac958fae10a6268f95ae5c3fcc2b" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +inherit cros-workon + +DESCRIPTION="toolbox" +HOMEPAGE="https://github.com/flatcar/toolbox" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +src_install() { + dobin ${S}/toolbox +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/updateservicectl-2.1.0-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/updateservicectl-2.1.0-r1.ebuild new file mode 120000 index 0000000000..5a4f2b118e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/updateservicectl-2.1.0-r1.ebuild @@ -0,0 +1 @@ +updateservicectl-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/updateservicectl-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/updateservicectl-9999.ebuild new file mode 100644 index 0000000000..1b45eaafdf --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-admin/updateservicectl/updateservicectl-9999.ebuild @@ -0,0 +1,32 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/updateservicectl" +CROS_WORKON_LOCALNAME="updateservicectl" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/flatcar/updateservicectl" +COREOS_GO_GO111MODULE="on" +inherit cros-workon coreos-go + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="446f13594465503a3fdfc9106fd8a0c3123249c2" # main + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="CoreUpdate Management CLI" +HOMEPAGE="https://github.com/flatcar/updateservicectl" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +RDEPEND="!app-admin/updatectl" + +src_prepare() { + coreos-go_src_prepare + GOPATH+=":${S}/Godeps/_workspace" +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/compat-wrapper.sh b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/compat-wrapper.sh new file mode 100644 index 0000000000..122162deca --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/compat-wrapper.sh @@ -0,0 +1,33 @@ +#!/bin/bash +set -e + +bin=${0##*/} +seal=/run/metadata/torcx + +if [ -z "${bin}" ] +then + echo 'Failed to determine the executed program name.' 1>&2 + exit 1 +fi + +if [ -s "${seal}" ] +then + . "${seal}" +else + echo "The program ${bin} is managed by torcx, which did not run." 1>&2 + exit 1 +fi + +if [ -z "${TORCX_BINDIR-}" ] +then + echo "The torcx seal file ${seal} is invalid." 1>&2 + exit 1 +fi + +if [ ! -x "${TORCX_BINDIR}/${bin}" ] +then + echo "The current torcx profile did not install a ${bin} program." 1>&2 + exit 1 +fi + +PATH="${TORCX_BINDIR}${PATH:+:${PATH}}" exec "${TORCX_BINDIR}/${bin}" "$@" diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/docker-1.12-no.json b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/docker-1.12-no.json new file mode 100644 index 0000000000..4480c4e767 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/docker-1.12-no.json @@ -0,0 +1,11 @@ +{ + "kind": "profile-manifest-v0", + "value": { + "images": [ + { + "name": "docker", + "reference": "com.coreos.cl" + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/dockerd-wrapper.sh b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/dockerd-wrapper.sh new file mode 100644 index 0000000000..19c440bdda --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/dockerd-wrapper.sh @@ -0,0 +1,41 @@ +#!/bin/bash +# Wrapper for launching docker daemons with selinux default on +# This wrapper script has been deprecated (euank: 2017-05-09) and is retained +# for backwards compatibility. + +set -e + +parse_docker_args() { + local flag + while [[ $# -gt 0 ]]; do + flag="$1" + shift + + # treat --flag=foo and --flag foo identically + if [[ "${flag}" == *=* ]]; then + set -- "${flag#*=}" "$@" + flag="${flag%=*}" + fi + + case "${flag}" in + --selinux-enabled) + ARG_SELINUX="$1" + shift + ;; + *) + # ignore everything else + ;; + esac + done +} + +parse_docker_args "$@" + +USE_SELINUX="" +# Do not override selinux if it is already explicitly configured. +if [[ -z "${ARG_SELINUX}" ]]; then + # If unspecified, default off + USE_SELINUX="--selinux-enabled=false" +fi + +exec dockerd "$@" ${USE_SELINUX} diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/torcx.target b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/torcx.target new file mode 100644 index 0000000000..adfd836204 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/torcx.target @@ -0,0 +1,7 @@ +[Unit] +Description=Verify torcx succeeded +DefaultDependencies=no +AssertPathExists=/run/metadata/torcx + +[Install] +WantedBy=basic.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/vendor.json b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/vendor.json new file mode 100644 index 0000000000..4480c4e767 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/files/vendor.json @@ -0,0 +1,11 @@ +{ + "kind": "profile-manifest-v0", + "value": { + "images": [ + { + "name": "docker", + "reference": "com.coreos.cl" + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/torcx-0.2.0-r8.ebuild b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/torcx-0.2.0-r8.ebuild new file mode 120000 index 0000000000..a82f2db352 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/torcx-0.2.0-r8.ebuild @@ -0,0 +1 @@ +torcx-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/torcx-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/torcx-9999.ebuild new file mode 100644 index 0000000000..0f46c47f77 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-arch/torcx/torcx-9999.ebuild @@ -0,0 +1,58 @@ +# Copyright (c) 2017-2018 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/torcx" +CROS_WORKON_LOCALNAME="torcx" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/flatcar/torcx" +COREOS_GO_GO111MODULE="off" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="3e7173395658a7e43ec0cb0dd2077795931d857f" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +inherit coreos-go cros-workon systemd + +DESCRIPTION="torcx is a boot-time addon manager for immutable systems" +HOMEPAGE="https://github.com/flatcar/torcx" +LICENSE="Apache-2.0" +SLOT="0" + +src_compile() { + CGO_ENABLED=0 go_export + ${EGO} build -v \ + -p "$(makeopts_jobs)" \ + -ldflags "-X ${COREOS_GO_PACKAGE}/pkg/version.VERSION=${PV}" \ + -o "bin/${ARCH}/torcx" \ + -tags containers_image_openpgp \ + "${COREOS_GO_PACKAGE}" +} + +src_install() { + local generatordir=/usr/lib/systemd/system-generators + local vendordir=/usr/share/torcx + local libcoreosdir=/usr/lib/flatcar + + # Install generator and userland. + exeinto "${generatordir}" + newexe "${S}/bin/${ARCH}/torcx" torcx-generator + dosym ../systemd/system-generators/torcx-generator "${libcoreosdir}/torcx" + systemd_dounit "${FILESDIR}/torcx.target" + + insinto "${vendordir}/profiles" + doins "${FILESDIR}/docker-1.12-no.json" + doins "${FILESDIR}/vendor.json" + dodir "${vendordir}/store" + + # Preserve program paths for torcx packages. + newbin "${FILESDIR}/compat-wrapper.sh" docker + for link in {docker-,}{containerd{,-shim},runc} ctr docker-{init,proxy} dockerd tini + do ln -fns docker "${ED}/usr/bin/${link}" + done + exeinto /usr/lib/flatcar + newexe "${FILESDIR}/dockerd-wrapper.sh" dockerd +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-containers/syft/Manifest b/sdk_container/src/third_party/coreos-overlay/app-containers/syft/Manifest new file mode 100644 index 0000000000..351ff57f43 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-containers/syft/Manifest @@ -0,0 +1,2 @@ +DIST syft-0.51.0-deps.tar.xz 632084588 BLAKE2B f9b3e4e41521c25b6e338f2b8f3bba0be08e7608d95de7dba6f5f104e22b8de8a4b419e574e19634099a3bbc55556f83949c68abd5ae52d14b5e97cb9306bf22 SHA512 819236c275762cc42c60339ee2d6886f0998f34609ab0bbef3150b23fbcf3cecaea63d92f6e2e161bf3ec30edae00ef467755900fd1c98389db2f9cd8113fbf4 +DIST syft-0.51.0.tar.gz 3727474 BLAKE2B ae9f54f421faa530aabbbadd985071f603ccaa32c6cd5f0dd400ea9163a218e8ddd5e7035042a7eda6cd06910ce96ae0f42b7422c932992fad812431a42ac059 SHA512 fb844a76d3f3f303e781cea40ac6fb573927f6465a39da10fe9cffeb08ce7b1e8b8ed4acb219206e53159f802eaa12dce73ce5bc3b868f6f4270a30498b6b767 diff --git a/sdk_container/src/third_party/coreos-overlay/app-containers/syft/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-containers/syft/metadata.xml new file mode 100644 index 0000000000..3b2a9c5910 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-containers/syft/metadata.xml @@ -0,0 +1,8 @@ + + + + +williamh@gentoo.org +William Hubbs + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-containers/syft/syft-0.51.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-containers/syft/syft-0.51.0.ebuild new file mode 100644 index 0000000000..7f44b825c0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-containers/syft/syft-0.51.0.ebuild @@ -0,0 +1,24 @@ +# Copyright 2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 +inherit go-module + +DESCRIPTION="Generate a Software Bill of Materials from container images and filesystems" +HOMEPAGE="https://www.anchore.com" +SRC_URI="https://github.com/anchore/syft/archive/v${PV}.tar.gz -> ${P}.tar.gz" +SRC_URI+=" https://dev.gentoo.org/~williamh/dist/${P}-deps.tar.xz" + +LICENSE="Apache-2.0" +SLOT="0" +# Flatcar: keyword for arm64 and amd64 +KEYWORDS="amd64 arm64" + +src_compile() { + # Flatcar: add ldflags to set version + ego build -o bin/syft -ldflags "-X github.com/anchore/syft/internal/version.version=${PV}" ./cmd/syft +} + +src_install() { + dobin bin/* +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/Manifest b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/Manifest new file mode 100644 index 0000000000..5e6b9023e6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/Manifest @@ -0,0 +1,2 @@ +DIST gnupg-2.2.35.tar.bz2 7262687 BLAKE2B 18b5965151ded3b3f28d139824e14d7a6f1673c5192ec5f5a80366a6d5f2e04ed7fa035e2bff105e1752753584f992626ccc9ea8840c2bfa39ffe7ca39b81f7f SHA512 ad9f8d10890b7fafb15a7422e2cebaf0f85ce7cf5f880f4edd8d1dec46aa73c01f9096e601f6edd665f8684d1f5892634991a400e00b3185e6b201f549004d3e +DIST gnupg-2.2.35.tar.bz2.sig 119 BLAKE2B d95323703c12c9474b21fa91ddb70d4d4d464c794223e21f6ae5d4de955f07a5cabde50612e977168ea6071c4b12be3262cbafe9bcaa8e9a0b009318c0ff6718 SHA512 9043894730520e974e7bc17e0f95419c319fbcd514f102faf644e2f5580e238719cecb8b5e778ecf20f9212ee2554206eb0686e8b5fce7f8c556146657660fe2 diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-2.1.20-gpgscm-Use-shorter-socket-path-lengts-to-improve-tes.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-2.1.20-gpgscm-Use-shorter-socket-path-lengts-to-improve-tes.patch new file mode 100644 index 0000000000..dd75e3a5e9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-2.1.20-gpgscm-Use-shorter-socket-path-lengts-to-improve-tes.patch @@ -0,0 +1,33 @@ +From e3bdb7d17264b8d5bd9abab97c96d9c4a50e4f61 Mon Sep 17 00:00:00 2001 +From: Kristian Fiskerstrand +Date: Mon, 3 Apr 2017 23:44:56 +0300 +Subject: [PATCH] gpgscm: Use shorter socket path lengts to improve test + reliability + +-- +As socket lengths are normally restricted to 108 characters +(UNIX_PATH_MAX variable in /usr/include/linux/un.h), using 42 characters +by default easily results in errors. +--- + tests/gpgscm/tests.scm | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/tests/gpgscm/tests.scm b/tests/gpgscm/tests.scm +index 592b36f..f54a387 100644 +--- a/tests/gpgscm/tests.scm ++++ b/tests/gpgscm/tests.scm +@@ -273,9 +273,9 @@ + (canonical-path (_mkdtemp (if (null? components) + (path-join + (get-temp-path) +- (string-append "gpgscm-" (get-isotime) "-" ++ (string-append "gscm" + (basename-suffix *scriptname* ".scm") +- "-XXXXXX")) ++ "XXXXXX")) + (apply path-join components))))) + + ;; Make a temporary directory and remove it at interpreter shutdown. +-- +2.10.2 + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-2.2.35-status-messages-garbled.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-2.2.35-status-messages-garbled.patch new file mode 100644 index 0000000000..23dbf00b18 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-2.2.35-status-messages-garbled.patch @@ -0,0 +1,45 @@ +https://bugs.gentoo.org/855395 +https://marc.info/?l=oss-security&m=165657063921408&w=2 +https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=7b1db7192e6e4d0cfc439b23b13831837c85bc21 + +From 7b1db7192e6e4d0cfc439b23b13831837c85bc21 Mon Sep 17 00:00:00 2001 +From: Werner Koch +Date: Tue, 14 Jun 2022 11:33:27 +0200 +Subject: [PATCH] g10: Fix garbled status messages in NOTATION_DATA + +* g10/cpr.c (write_status_text_and_buffer): Fix off-by-one +-- + +Depending on the escaping and line wrapping the computed remaining +buffer length could be wrong. Fixed by always using a break to +terminate the escape detection loop. Might have happened for all +status lines which may wrap. + +GnuPG-bug-id: T6027 +--- a/g10/cpr.c ++++ b/g10/cpr.c +@@ -328,20 +328,15 @@ write_status_text_and_buffer (int no, const char *string, + } + first = 0; + } +- for (esc=0, s=buffer, n=len; n && !esc; s++, n--) ++ for (esc=0, s=buffer, n=len; n; s++, n--) + { + if (*s == '%' || *(const byte*)s <= lower_limit + || *(const byte*)s == 127 ) + esc = 1; + if (wrap && ++count > wrap) +- { +- dowrap=1; +- break; +- } +- } +- if (esc) +- { +- s--; n++; ++ dowrap=1; ++ if (esc || dowrap) ++ break; + } + if (s != buffer) + es_fwrite (buffer, s-buffer, 1, statusfp); diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch new file mode 100644 index 0000000000..a6173968f5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch @@ -0,0 +1,32 @@ +From: Vincent Breitmoser +Date: Thu, 13 Jun 2019 21:27:43 +0200 +Subject: gpg: accept subkeys with a good revocation but no self-sig during + import + +* g10/import.c (chk_self_sigs): Set the NODE_GOOD_SELFSIG flag when we +encounter a valid revocation signature. This allows import of subkey +revocation signatures, even in the absence of a corresponding subkey +binding signature. + +-- + +This fixes the remaining test in import-incomplete.scm. + +GnuPG-Bug-id: 4393 +Signed-off-by: Daniel Kahn Gillmor +--- + g10/import.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/g10/import.c b/g10/import.c +index f9acf95..9217911 100644 +--- a/g10/import.c ++++ b/g10/import.c +@@ -3602,6 +3602,7 @@ chk_self_sigs (ctrl_t ctrl, kbnode_t keyblock, u32 *keyid, int *non_self) + /* It's valid, so is it newer? */ + if (sig->timestamp >= rsdate) + { ++ knode->flag |= NODE_GOOD_SELFSIG; /* Subkey is valid. */ + if (rsnode) + { + /* Delete the last revocation sig since diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-allow-import-of-previously-known-keys-even-without-UI.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-allow-import-of-previously-known-keys-even-without-UI.patch new file mode 100644 index 0000000000..4b5690f955 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/files/gnupg-allow-import-of-previously-known-keys-even-without-UI.patch @@ -0,0 +1,106 @@ +From: Vincent Breitmoser +Date: Thu, 13 Jun 2019 21:27:42 +0200 +Subject: gpg: allow import of previously known keys, even without UIDs + +* g10/import.c (import_one): Accept an incoming OpenPGP certificate that +has no user id, as long as we already have a local variant of the cert +that matches the primary key. + +-- + +This fixes two of the three broken tests in import-incomplete.scm. + +GnuPG-Bug-id: 4393 +Signed-off-by: Daniel Kahn Gillmor +--- + g10/import.c | 44 +++++++++++--------------------------------- + 1 file changed, 11 insertions(+), 33 deletions(-) + +diff --git a/g10/import.c b/g10/import.c +index 5d3162c..f9acf95 100644 +--- a/g10/import.c ++++ b/g10/import.c +@@ -1788,7 +1788,6 @@ import_one_real (ctrl_t ctrl, + size_t an; + char pkstrbuf[PUBKEY_STRING_SIZE]; + int merge_keys_done = 0; +- int any_filter = 0; + KEYDB_HANDLE hd = NULL; + + if (r_valid) +@@ -1825,14 +1824,6 @@ import_one_real (ctrl_t ctrl, + log_printf ("\n"); + } + +- +- if (!uidnode ) +- { +- if (!silent) +- log_error( _("key %s: no user ID\n"), keystr_from_pk(pk)); +- return 0; +- } +- + if (screener && screener (keyblock, screener_arg)) + { + log_error (_("key %s: %s\n"), keystr_from_pk (pk), +@@ -1907,17 +1898,10 @@ import_one_real (ctrl_t ctrl, + } + } + +- if (!delete_inv_parts (ctrl, keyblock, keyid, options ) ) +- { +- if (!silent) +- { +- log_error( _("key %s: no valid user IDs\n"), keystr_from_pk(pk)); +- if (!opt.quiet ) +- log_info(_("this may be caused by a missing self-signature\n")); +- } +- stats->no_user_id++; +- return 0; +- } ++ /* Delete invalid parts, and note if we have any valid ones left. ++ * We will later abort import if this key is new but contains ++ * no valid uids. */ ++ delete_inv_parts (ctrl, keyblock, keyid, options); + + /* Get rid of deleted nodes. */ + commit_kbnode (&keyblock); +@@ -1927,24 +1911,11 @@ import_one_real (ctrl_t ctrl, + { + apply_keep_uid_filter (ctrl, keyblock, import_filter.keep_uid); + commit_kbnode (&keyblock); +- any_filter = 1; + } + if (import_filter.drop_sig) + { + apply_drop_sig_filter (ctrl, keyblock, import_filter.drop_sig); + commit_kbnode (&keyblock); +- any_filter = 1; +- } +- +- /* If we ran any filter we need to check that at least one user id +- * is left in the keyring. Note that we do not use log_error in +- * this case. */ +- if (any_filter && !any_uid_left (keyblock)) +- { +- if (!opt.quiet ) +- log_info ( _("key %s: no valid user IDs\n"), keystr_from_pk (pk)); +- stats->no_user_id++; +- return 0; + } + + /* The keyblock is valid and ready for real import. */ +@@ -2002,6 +1973,13 @@ import_one_real (ctrl_t ctrl, + err = 0; + stats->skipped_new_keys++; + } ++ else if (err && !any_uid_left (keyblock)) ++ { ++ if (!silent) ++ log_info( _("key %s: new key but contains no user ID - skipped\n"), keystr(keyid)); ++ err = 0; ++ stats->no_user_id++; ++ } + else if (err) /* Insert this key. */ + { + /* Note: ERR can only be NO_PUBKEY or UNUSABLE_PUBKEY. */ diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/gnupg-2.2.35-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/gnupg-2.2.35-r1.ebuild new file mode 100644 index 0000000000..7f49ba7cf7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/gnupg-2.2.35-r1.ebuild @@ -0,0 +1,165 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +# Flatcar: use EAPI=7, until EAPI 8 could be fully supported +EAPI=7 + +VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/gnupg.asc +inherit flag-o-matic systemd toolchain-funcs verify-sig + +MY_P="${P/_/-}" + +DESCRIPTION="The GNU Privacy Guard, a GPL OpenPGP implementation" +HOMEPAGE="https://gnupg.org/" +SRC_URI="mirror://gnupg/gnupg/${MY_P}.tar.bz2" +SRC_URI+=" verify-sig? ( mirror://gnupg/gnupg/${P}.tar.bz2.sig )" +S="${WORKDIR}/${MY_P}" + +LICENSE="GPL-3" +SLOT="0" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" +IUSE="bzip2 doc ldap nls readline selinux +smartcard ssl test tofu tools usb user-socket wks-server" +RESTRICT="!test? ( test )" + +# Existence of executables is checked during configuration. +# Note: On each bump, update dep bounds on each version from configure.ac! +DEPEND=">=dev-libs/libassuan-2.5.0 + >=dev-libs/libgcrypt-1.8.0:= + >=dev-libs/libgpg-error-1.29 + >=dev-libs/libksba-1.3.5 + >=dev-libs/npth-1.2 + >=net-misc/curl-7.10 + sys-libs/zlib + bzip2? ( app-arch/bzip2 ) + ldap? ( net-nds/openldap:= ) + readline? ( sys-libs/readline:0= ) + smartcard? ( usb? ( virtual/libusb:1 ) ) + ssl? ( >=net-libs/gnutls-3.0:0= ) + tofu? ( >=dev-db/sqlite-3.7 )" + +RDEPEND="${DEPEND} + app-crypt/pinentry + nls? ( virtual/libintl ) + selinux? ( sec-policy/selinux-gpg ) + wks-server? ( virtual/mta )" + +BDEPEND="virtual/pkgconfig + doc? ( sys-apps/texinfo ) + nls? ( sys-devel/gettext ) + verify-sig? ( sec-keys/openpgp-keys-gnupg )" + +DOCS=( + ChangeLog NEWS README THANKS TODO VERSION + doc/FAQ doc/DETAILS doc/HACKING doc/TRANSLATE doc/OpenPGP doc/KEYSERVER +) + +PATCHES=( + "${FILESDIR}"/${PN}-2.1.20-gpgscm-Use-shorter-socket-path-lengts-to-improve-tes.patch + "${FILESDIR}"/${P}-status-messages-garbled.patch + # Flatcar: the patches below are added only for Flatcar, to address the + # upstream gnupg issue https://dev.gnupg.org/T4393. + "${FILESDIR}/${PN}-allow-import-of-previously-known-keys-even-without-UI.patch" + "${FILESDIR}/${PN}-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch" +) + +src_prepare() { + default + + # Inject SSH_AUTH_SOCK into user's sessions after enabling gpg-agent-ssh.socket in systemctl --user mode, + # idea borrowed from libdbus, see + # https://gitlab.freedesktop.org/dbus/dbus/-/blob/master/bus/systemd-user/dbus.socket.in#L6 + # + # This cannot be upstreamed, as it requires determining the exact prefix of 'systemctl', + # which in turn requires discovery in Autoconf, something that upstream deeply resents. + sed -e "/DirectoryMode=/a ExecStartPost=-${EPREFIX}/bin/systemctl --user set-environment SSH_AUTH_SOCK=%t/gnupg/S.gpg-agent.ssh" \ + -i doc/examples/systemd-user/gpg-agent-ssh.socket || die +} + +src_configure() { + local myconf=( + $(use_enable bzip2) + $(use_enable nls) + $(use_enable smartcard scdaemon) + $(use_enable ssl gnutls) + $(use_enable test all-tests) + $(use_enable test tests) + $(use_enable tofu) + $(use smartcard && use_enable usb ccid-driver || echo '--disable-ccid-driver') + $(use_enable wks-server wks-tools) + $(use_with ldap) + $(use_with readline) + --with-mailprog=/usr/libexec/sendmail + --disable-ntbtls + --enable-gpg + --enable-gpgsm + --enable-large-secmem + + CC_FOR_BUILD="$(tc-getBUILD_CC)" + GPG_ERROR_CONFIG="${ESYSROOT}/usr/bin/${CHOST}-gpg-error-config" + KSBA_CONFIG="${ESYSROOT}/usr/bin/ksba-config" + LIBASSUAN_CONFIG="${ESYSROOT}/usr/bin/libassuan-config" + LIBGCRYPT_CONFIG="${ESYSROOT}/usr/bin/${CHOST}-libgcrypt-config" + NPTH_CONFIG="${ESYSROOT}/usr/bin/npth-config" + + $("${S}/configure" --help | grep -o -- '--without-.*-prefix') + ) + + if use prefix && use usb; then + # bug #649598 + append-cppflags -I"${EPREFIX}/usr/include/libusb-1.0" + fi + + # bug #663142 + if use user-socket; then + myconf+=( --enable-run-gnupg-user-socket ) + fi + + # glib fails and picks up clang's internal stdint.h causing weird errors + tc-is-clang && export gl_cv_absolute_stdint_h="${ESYSROOT}"/usr/include/stdint.h + + # Hardcode mailprog to /usr/libexec/sendmail even if it does not exist. + # As of GnuPG 2.3, the mailprog substitution is used for the binary called + # by wks-client & wks-server; and if it's autodetected but not not exist at + # build time, then then 'gpg-wks-client --send' functionality will not + # work. This has an unwanted side-effect in stage3 builds: there was a + # [R]DEPEND on virtual/mta, which also brought in virtual/logger, bloating + # the build where the install guide previously make the user chose the + # logger & mta early in the install. + + econf "${myconf[@]}" +} + +src_compile() { + default + + use doc && emake -C doc html +} + +src_test() { + # bug #638574 + use tofu && export TESTFLAGS=--parallel + + default +} + +src_install() { + default + + use tools && + dobin \ + tools/{convert-from-106,gpg-check-pattern} \ + tools/{gpg-zip,gpgconf,gpgsplit,lspgpot,mail-signed-keys} \ + tools/make-dns-cert + + dosym gpg /usr/bin/gpg2 + dosym gpgv /usr/bin/gpgv2 + echo ".so man1/gpg.1" > "${ED}"/usr/share/man/man1/gpg2.1 || die + echo ".so man1/gpgv.1" > "${ED}"/usr/share/man/man1/gpgv2.1 || die + + dodir /etc/env.d + echo "CONFIG_PROTECT=/usr/share/gnupg/qualified.txt" >> "${ED}"/etc/env.d/30gnupg || die + + use doc && dodoc doc/gnupg.html/* doc/*.png + + systemd_douserunit doc/examples/systemd-user/*.{service,socket} +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/metadata.xml new file mode 100644 index 0000000000..9704490d3e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/gnupg/metadata.xml @@ -0,0 +1,40 @@ + + + + + zlogene@gentoo.org + Mikle Kolyada + + + base-system@gentoo.org + Gentoo Base System + + + + Build scdaemon software. Enables usage of OpenPGP cards. For + other type of smartcards, try app-crypt/gnupg-pkcs11-scd. + Bring in dev-libs/libusb as a dependency; enable scdaemon. + + + Build direct CCID access for scdaemon; requires dev-libs/libusb. + + + try a socket directory which is not removed by init manager at session end + + + Enable support for Trust on First use trust model; requires dev-db/sqlite. + + + Install extra tools (including gpgsplit and gpg-zip). + + + Enable TPM support via app-crypt/tpm2-tss and build tpm2d. + + + Install the wks-server + + + + cpe:/a:gnupg:gnupg + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/files/tpmd.service b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/files/tpmd.service new file mode 100644 index 0000000000..edf5c70aed --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/files/tpmd.service @@ -0,0 +1,11 @@ +[Unit] +Description=TPM remote access daemon +Requires=tcsd.service + +[Service] +ExecStart=/bin/tpmd 23179 +Restart=always +RestartSec=0 + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-0.1-r4.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-0.1-r4.ebuild new file mode 120000 index 0000000000..b5bacefd3d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-0.1-r4.ebuild @@ -0,0 +1 @@ +go-tspi-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-9999.ebuild new file mode 100644 index 0000000000..efacbff37d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/go-tspi/go-tspi-9999.ebuild @@ -0,0 +1,31 @@ +EAPI=7 + +inherit coreos-go eutils git-r3 systemd +COREOS_GO_PACKAGE="github.com/coreos/go-tspi" +COREOS_GO_GO111MODULE="off" +EGIT_REPO_URI="https://github.com/coreos/go-tspi.git" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + EGIT_COMMIT="27182e3e7b1dfcfb398b5408a619abc4f652a38b" + KEYWORDS="amd64 arm64" +fi + +IUSE="" + +LICENSE="Apache-2.0" +SLOT="0" + +RDEPEND="app-crypt/trousers" +DEPEND="${RDEPEND}" + +src_compile() { + go_build "${COREOS_GO_PACKAGE}/tpmd" + go_build "${COREOS_GO_PACKAGE}/tpmown" +} + +src_install() { + dobin ${GOBIN}/* + systemd_dounit "${FILESDIR}"/tpmd.service +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/Manifest b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/Manifest new file mode 100644 index 0000000000..8b75e07bb5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/Manifest @@ -0,0 +1 @@ +DIST p11-kit-0.23.22.tar.xz 830016 BLAKE2B 4e1edfd9e2441d237c07a16c003aee5ffde38f1cf545c26e435645429f2cfa4fe7ca61cdc3c3940390aa040ba991f2ee3995b14cc31bb886d5eeffa8ed5e1721 SHA512 098819e6ca4ad9cc2a0bc2e478aea67354d051a4f03e6c7d75d13d2469b6dc7654f26b15530052f6ed51acb35531c2539e0f971b31e29e6673e857c903afb080 diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/README.md b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/README.md new file mode 100644 index 0000000000..92a3038272 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/README.md @@ -0,0 +1,4 @@ +We forked this package to fix the systemd user unit directory and bash +completion directory detection in the cross-compilation scenario. + +These fixes could be upstreamed to gentoo. diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/metadata.xml new file mode 100644 index 0000000000..ff17590b69 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/metadata.xml @@ -0,0 +1,15 @@ + + + + + zlogene@gentoo.org + Mikle Kolyada + + + Enable ASN.1 certificate support + Build the trust policy module + + + p11-glue/p11-kit + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/p11-kit-0.23.22.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/p11-kit-0.23.22.ebuild new file mode 100644 index 0000000000..b36df3db26 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/p11-kit/p11-kit-0.23.22.ebuild @@ -0,0 +1,69 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +# Flatcar: inherit systemd eclass for the systemd user unit directory +# getter, and bash-completion-r1 for bash completion directory getter. +inherit multilib-minimal systemd bash-completion-r1 + +DESCRIPTION="Provides a standard configuration setup for installing PKCS#11" +HOMEPAGE="https://p11-glue.github.io/p11-glue/p11-kit.html" +SRC_URI="https://github.com/p11-glue/p11-kit/releases/download/${PV}/${P}.tar.xz" + +LICENSE="MIT" +SLOT="0" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" +IUSE="+asn1 debug +libffi systemd +trust" +REQUIRED_USE="trust? ( asn1 )" + +RDEPEND="asn1? ( >=dev-libs/libtasn1-3.4:=[${MULTILIB_USEDEP}] ) + libffi? ( dev-libs/libffi:=[${MULTILIB_USEDEP}] ) + systemd? ( sys-apps/systemd:= ) + trust? ( app-misc/ca-certificates )" +DEPEND="${RDEPEND}" +BDEPEND="virtual/pkgconfig" + +pkg_setup() { + # disable unsafe tests, bug#502088 + export FAKED_MODE=1 +} + +src_prepare() { + if [[ ${CHOST} == *-solaris2.* && ${CHOST##*-solaris2.} -lt 11 ]] ; then + # Solaris 10 and before doesn't know about XPG7 (XOPEN_SOURCE=700) + # drop to XPG6 to make feature_tests.h happy + sed -i -e '/define _XOPEN_SOURCE/s/700/600/' common/compat.c || die + # paths.h isn't available, oddly enough also not used albeit included + sed -i -e '/#include /d' trust/test-trust.c || die + # we don't have SUN_LEN here + sed -i -e 's/SUN_LEN \(([^)]\+)\)/strlen (\1->sun_path)/' \ + p11-kit/server.c || die + fi + default +} + +multilib_src_configure() { + # Flatcar: Override the detection of the systemd user unit + # directory and bash completion directory with these + # environment variables. + local -x systemduserunitdir=$(systemd_get_userunitdir) + local -x bashcompdir=$(get_bashcompdir) + ECONF_SOURCE="${S}" econf \ + $(use_enable trust trust-module) \ + $(use_with trust trust-paths ${EPREFIX}/etc/ssl/certs/ca-certificates.crt) \ + $(use_enable debug) \ + $(use_with libffi) \ + $(use_with asn1 libtasn1) \ + $(multilib_native_use_with systemd) + + if multilib_is_native_abi; then + # re-use provided documentation + ln -s "${S}"/doc/manual/html doc/manual/html || die + fi +} + +multilib_src_install_all() { + einstalldocs + find "${D}" -name '*.la' -delete || die +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/Manifest b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/Manifest new file mode 100644 index 0000000000..25850541d8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/Manifest @@ -0,0 +1,2 @@ +DIST sbsigntool-0.8-ccan.tar.gz 113537 BLAKE2B 8fbf27463d30c1895930628a145be2d521ae4f6adb7af3299bf2f5f4319fd643df0a07347ef6851bd41d233af4c3fc5f77002771af1c43aa0f20665aef2390b8 SHA512 6857096879f116f1802eb6b44789cbea7bb24440bc0f16503aeadf5f276fa45943f322f844dbb9abee717655205d82b830143be3a7f4424fd4146b9360674a09 +DIST sbsigntools-0.9.4.tar.gz 57714 BLAKE2B 94797af6c98a9c13cb71e52ba6f7ff07de70660af2194b14061e0cb618d6effff52ef7a4dd2fd4e44e75f022b979442d4290b1d65d63017b2fbebdca5951c5c9 SHA512 953d3d9a7f92b837da966eabe3572163a29c5292e792d5ef17cf842d7373ffaa901377cb4ec68006a6ef2f9c97d48db8ffdd3a6d2853be67016d3484a118bba9 diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/files/openssl-3-compat.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/files/openssl-3-compat.patch new file mode 100644 index 0000000000..2304bd432a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/files/openssl-3-compat.patch @@ -0,0 +1,15 @@ +diff --git a/src/idc.c b/src/idc.c +index 6d87bd4..0a82218 100644 +--- a/src/idc.c ++++ b/src/idc.c +@@ -189,7 +189,7 @@ int IDC_set(PKCS7 *p7, PKCS7_SIGNER_INFO *si, struct image *image) + + idc->data->type = OBJ_nid2obj(peid_nid); + idc->data->value = ASN1_TYPE_new(); +- type_set_sequence(image, idc->data->value, peid, &IDC_PEID_it); ++ type_set_sequence(image, idc->data->value, peid, ASN1_ITEM_rptr(IDC_PEID)); + + idc->digest->alg->parameter = ASN1_TYPE_new(); + idc->digest->alg->algorithm = OBJ_nid2obj(NID_sha256); +-- +2.25.1 diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/metadata.xml new file mode 100644 index 0000000000..ef5313d421 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/metadata.xml @@ -0,0 +1,10 @@ + + + + + tamiko@gentoo.org + + + ubuntu + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/sbsigntools-0.9.4.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/sbsigntools-0.9.4.ebuild new file mode 100644 index 0000000000..41cf7c59c5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/sbsigntools/sbsigntools-0.9.4.ebuild @@ -0,0 +1,54 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +MY_PN="${PN::-1}" + +inherit autotools toolchain-funcs + +DESCRIPTION="Utilities for signing and verifying files for UEFI Secure Boot" +HOMEPAGE="https://git.kernel.org/cgit/linux/kernel/git/jejb/sbsigntools.git/" +SRC_URI="https://git.kernel.org/pub/scm/linux/kernel/git/jejb/${PN}.git/snapshot/${P}.tar.gz + https://dev.gentoo.org/~tamiko/distfiles/${MY_PN}-0.8-ccan.tar.gz" + +LICENSE="GPL-3 LGPL-3 LGPL-2.1 CC0-1.0" +SLOT="0" +KEYWORDS="amd64 arm64 ~x86" +IUSE="" + +RDEPEND=" + dev-libs/openssl:0= + sys-apps/util-linux" +DEPEND="${RDEPEND} + sys-apps/help2man + sys-boot/gnu-efi + sys-libs/binutils-libs + virtual/pkgconfig" + +PATCHES=( + "${FILESDIR}"/openssl-3-compat.patch +) + +src_prepare() { + mv "${WORKDIR}"/lib/ccan "${S}"/lib || die "mv failed" + rmdir "${WORKDIR}"/lib || die "rmdir failed" + + local iarch + case ${ARCH} in + amd64) iarch=x86_64 ;; + arm64) iarch=aarch64 ;; + ia64) iarch=ia64 ;; + x86) iarch=ia32 ;; + *) die "unsupported architecture: ${ARCH}" ;; + esac + sed -i "/^EFI_ARCH=/s:=.*:=${iarch}:" configure.ac || die + sed -i 's/-m64$/& -march=x86-64/' tests/Makefile.am || die + sed -i "/^AR /s:=.*:= $(tc-getAR):" lib/ccan/Makefile.in || die #481480 + + # Flatcar change required to compile with OpenSSLv3 + sed -i "s/-Werror//g" src/Makefile.am || die + + default + eautoreconf +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/tpmpolicy/files/tpm_hostpolicy b/sdk_container/src/third_party/coreos-overlay/app-crypt/tpmpolicy/files/tpm_hostpolicy new file mode 100755 index 0000000000..10bd015ec4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/tpmpolicy/files/tpm_hostpolicy @@ -0,0 +1,33 @@ +#!/bin/bash + +set -e + +if [ ! -c /dev/tpm0 ]; then + >&2 echo "System has no TPM" + exit 1 +fi + +echo -n '{' +VALUES=(); +while read PCR value type event; do + if [ $PCR = 4 ] && [ $type != 0d ]; then + VALUES+=("{\"value\": \"$value\", \"description\": \"$event\"}"); + fi; +done + + + + mjg59@srcf.ucam.org + Tools for generating TPM policy + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/tpmpolicy/tpmpolicy-20160404.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/tpmpolicy/tpmpolicy-20160404.ebuild new file mode 100644 index 0000000000..4f085209f8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/tpmpolicy/tpmpolicy-20160404.ebuild @@ -0,0 +1,18 @@ +# Copyright 1999-2013 Gentoo Foundation +# Copyright 2016 CoreOS, Inc +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="Tools for generating TPM policy" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 x86 arm64" +IUSE="" + +S="${WORKDIR}" + +src_install() { + dosbin "${FILESDIR}"/tpm_hostpolicy +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/Manifest b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/Manifest new file mode 100644 index 0000000000..bbdd682524 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/Manifest @@ -0,0 +1 @@ +DIST trousers-0.3.14.tar.gz 1378438 BLAKE2B 3dc2824fa2ca1b1f1181f98d59e85276e7d38af4bfc07ee8246431d9ccb300a8e0820b318643d4cf5d757d2a49492c8686e2fe9de03484263d2189d4bbaa32d0 SHA512 bf87f00329cf1d76a12cf6b6181fa22f90e76af3c5786e6e2db98438d2d3f0c0e05364374664173f45e3a2f6c0e2364948d0b958a7845cb23fcb340150cd9b21 diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/61-trousers.rules b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/61-trousers.rules new file mode 100644 index 0000000000..20e89cbe3a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/61-trousers.rules @@ -0,0 +1,2 @@ +KERNEL=="tpm[0-9]*", MODE="0660", OWNER="tss", GROUP="tss", SYMLINK+="tpm" +# vim: ft=udevrules: diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/system.data b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/system.data new file mode 100644 index 0000000000..b498fd495d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/system.data @@ -0,0 +1 @@ +/ diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.confd b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.confd new file mode 100644 index 0000000000..78bedb9fda --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.confd @@ -0,0 +1,9 @@ +# /etc/conf.d/tscd + +# Configuration file for the TrouSerS' TCS daemon (tcsd) init script +# Have a look on /etc/tcsd.conf too, there is more to configure there. + +# TPM_MODULES: name of the module(s) that should be loaded. You only need to +# set this if your driver is not compiled in kernel and is not already loaded +# on boot. (default: unset) +#TPM_MODULES="tpm_atmel" diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.initd b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.initd new file mode 100644 index 0000000000..c9c050cb06 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.initd @@ -0,0 +1,38 @@ +#!/sbin/openrc-run +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +depend() { + use logger + need net +} + +checkconfig() { + local mod + if [ -n "${TPM_MODULES}" ] ; then + for mod in ${TPM_MODULES} ; do + lsmod | grep -q "^${mod}\b" \ + || modprobe ${mod} &>/dev/null \ + || ewarn "Failed to load module ${mod}" + done + # Should we sleep or something to wait for device creation? + fi + if [ ! -c /dev/tpm ] && [ ! -c /dev/tpm0 ] ; then + eerror "No TPM device found!" + return 1 + fi + return 0 +} + +start() { + ebegin "Starting TrouSerS' TCS daemon (tcsd)" + checkconfig || eend $? + start-stop-daemon --start --user tss --exec /usr/sbin/tcsd + eend $? +} + +stop() { + ebegin "Stopping TrouSerS' TCS daemon (tcsd)" + start-stop-daemon --stop --quiet --exec /usr/sbin/tcsd --user tss + eend $? +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.service b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.service new file mode 100644 index 0000000000..c4dc803dfc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tcsd.service @@ -0,0 +1,13 @@ +[Unit] +Description=TCG Core Services Daemon +ConditionPathExists=/dev/tpm0 +ConditionSecurity=!tpm2 + +[Service] +User=tss +ExecCondition=/bin/bash -c "/usr/bin/test $(cat /sys/class/tpm/*/tpm_version_major | grep -m 1 1 || echo 0) -eq 1" +ExecStart=/usr/sbin/tcsd -f + +[Install] +WantedBy=multi-user.target + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tmpfiles.d/trousers.conf b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tmpfiles.d/trousers.conf new file mode 100644 index 0000000000..ad2171ad3d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/tmpfiles.d/trousers.conf @@ -0,0 +1,3 @@ +d /var/lib/tpm 0755 tss tss - - +C /etc/tcsd.conf 0640 root tss - /usr/share/trousers/tcsd.conf +C /var/lib/tpm/system.data 0600 tss tss - /usr/share/trousers/system.data diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.13-nouseradd.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.13-nouseradd.patch new file mode 100644 index 0000000000..5426e9929f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.13-nouseradd.patch @@ -0,0 +1,12 @@ +diff -urNp trousers-0.3.13.org/dist/Makefile.am trousers-0.3.13/dist/Makefile.am +--- trousers-0.3.13.org/dist/Makefile.am 2014-04-24 21:05:43.000000000 +0300 ++++ trousers-0.3.13/dist/Makefile.am 2015-04-08 10:05:51.018955728 +0300 +@@ -11,8 +11,6 @@ endif + install-exec-hook: + /bin/sh -c 'if [ ! -e ${DESTDIR}/@localstatedir@/lib/tpm ];then mkdir -p ${DESTDIR}/@localstatedir@/lib/tpm; fi' + if !NOUSERCHECK +- /usr/sbin/groupadd tss || true +- /usr/sbin/useradd -r tss -g tss || true + /bin/chown tss:tss ${DESTDIR}/@localstatedir@/lib/tpm || true + /bin/chmod 0700 ${DESTDIR}/@localstatedir@/lib/tpm + endif diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-CVE-2020-24330_CVE-2020-24331_CVE-2020-24332.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-CVE-2020-24330_CVE-2020-24331_CVE-2020-24332.patch new file mode 100644 index 0000000000..10031e0882 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-CVE-2020-24330_CVE-2020-24331_CVE-2020-24332.patch @@ -0,0 +1,58 @@ +Index: trousers-0.3.14/src/tcs/ps/tcsps.c +=================================================================== +--- trousers-0.3.14.orig/src/tcs/ps/tcsps.c ++++ trousers-0.3.14/src/tcs/ps/tcsps.c +@@ -72,7 +72,7 @@ get_file() + } + + /* open and lock the file */ +- system_ps_fd = open(tcsd_options.system_ps_file, O_CREAT|O_RDWR, 0600); ++ system_ps_fd = open(tcsd_options.system_ps_file, O_CREAT|O_RDWR|O_NOFOLLOW, 0600); + if (system_ps_fd < 0) { + LogError("system PS: open() of %s failed: %s", + tcsd_options.system_ps_file, strerror(errno)); +Index: trousers-0.3.14/src/tcsd/svrside.c +=================================================================== +--- trousers-0.3.14.orig/src/tcsd/svrside.c ++++ trousers-0.3.14/src/tcsd/svrside.c +@@ -473,6 +473,7 @@ main(int argc, char **argv) + } + return TCSERR(TSS_E_INTERNAL_ERROR); + } ++ setgid(pwd->pw_gid); + setuid(pwd->pw_uid); + #endif + #endif +Index: trousers-0.3.14/src/tcsd/tcsd_conf.c +=================================================================== +--- trousers-0.3.14.orig/src/tcsd/tcsd_conf.c ++++ trousers-0.3.14/src/tcsd/tcsd_conf.c +@@ -743,7 +743,7 @@ conf_file_init(struct tcsd_config *conf) + #ifndef SOLARIS + struct group *grp; + struct passwd *pw; +- mode_t mode = (S_IRUSR|S_IWUSR); ++ mode_t mode = (S_IRUSR|S_IWUSR|S_IRGRP); + #endif /* SOLARIS */ + TSS_RESULT result; + +@@ -798,15 +798,15 @@ conf_file_init(struct tcsd_config *conf) + } + + /* make sure user/group TSS owns the conf file */ +- if (pw->pw_uid != stat_buf.st_uid || grp->gr_gid != stat_buf.st_gid) { ++ if (stat_buf.st_uid != 0 || grp->gr_gid != stat_buf.st_gid) { + LogError("TCSD config file (%s) must be user/group %s/%s", tcsd_config_file, +- TSS_USER_NAME, TSS_GROUP_NAME); ++ "root", TSS_GROUP_NAME); + return TCSERR(TSS_E_INTERNAL_ERROR); + } + +- /* make sure only the tss user can manipulate the config file */ ++ /* make sure only the tss user can read (but not manipulate) the config file */ + if (((stat_buf.st_mode & 0777) ^ mode) != 0) { +- LogError("TCSD config file (%s) must be mode 0600", tcsd_config_file); ++ LogError("TCSD config file (%s) must be mode 0640", tcsd_config_file); + return TCSERR(TSS_E_INTERNAL_ERROR); + } + #endif /* SOLARIS */ diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-Makefile.am-Mark-tddl.a-nodist.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-Makefile.am-Mark-tddl.a-nodist.patch new file mode 100644 index 0000000000..f777b629ce --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-Makefile.am-Mark-tddl.a-nodist.patch @@ -0,0 +1,25 @@ +From 5b1dbb5f8eada9002ec10f4ebc0bc418272e58b2 Mon Sep 17 00:00:00 2001 +From: Salah Coronya +Date: Sun, 7 Jun 2020 12:34:03 -0500 +Subject: [PATCH] src/tddl/Makefile.am: Mark tddl.a nodist + +This makes tddl.a nodist like the others, so it is not installed + +Signed-off-by: Salah Coronya +--- + src/tddl/Makefile.am | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/tddl/Makefile.am b/src/tddl/Makefile.am +index 607eb8e..2cd599b 100644 +--- a/src/tddl/Makefile.am ++++ b/src/tddl/Makefile.am +@@ -1,4 +1,4 @@ +-lib_LIBRARIES=libtddl.a ++noinst_LIBRARIES=libtddl.a + + libtddl_a_SOURCES=tddl.c + libtddl_a_CFLAGS=-DAPPID=\"TCSD\ TDDL\" -I${top_srcdir}/src/include -fPIE -DPIE +-- +2.26.2 + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-fno-common.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-fno-common.patch new file mode 100644 index 0000000000..5046bc7088 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-fno-common.patch @@ -0,0 +1,15 @@ +diff --git a/src/include/tcsd.h b/src/include/tcsd.h +index 5b9462b..05bae97 100644 +--- a/src/include/tcsd.h ++++ b/src/include/tcsd.h +@@ -166,8 +166,8 @@ void thread_signal_init(); + + /* signal handling */ + #ifndef __APPLE__ +-struct sigaction tcsd_sa_int; +-struct sigaction tcsd_sa_chld; ++extern struct sigaction tcsd_sa_int; ++extern struct sigaction tcsd_sa_chld; + #endif + + #endif diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-libressl.patch b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-libressl.patch new file mode 100644 index 0000000000..9ee7c167e2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/files/trousers-0.3.14-libressl.patch @@ -0,0 +1,28 @@ +From b8b1cda430270f03dc556cf9cf7d2fd478101525 Mon Sep 17 00:00:00 2001 +From: Alon Bar-Lev +Date: Wed, 7 Dec 2016 09:36:34 +0200 +Subject: [PATCH] tspi: support libressl + +Bug: https://sourceforge.net/p/trousers/bugs/222/ + +Signed-off-by: Alon Bar-Lev +--- + src/trspi/crypto/openssl/rsa.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/trspi/crypto/openssl/rsa.c b/src/trspi/crypto/openssl/rsa.c +index 2b1205f..3e56015 100644 +--- a/src/trspi/crypto/openssl/rsa.c ++++ b/src/trspi/crypto/openssl/rsa.c +@@ -38,7 +38,7 @@ + #define DEBUG_print_openssl_errors() + #endif + +-#if OPENSSL_VERSION_NUMBER < 0x10100001L ++#if OPENSSL_VERSION_NUMBER < 0x10100001L || (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L) + static int + RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d) + { +-- +2.7.3 + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/metadata.xml new file mode 100644 index 0000000000..643c6bf8c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/metadata.xml @@ -0,0 +1,16 @@ + + + + + salah.coronya@gmail.com + Salah Coronya + + + proxy-maint@gentoo.org + Proxy Maintainers + + + cpe:/a:debian:trousers + trousers + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/trousers-0.3.14-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/trousers-0.3.14-r2.ebuild new file mode 100644 index 0000000000..b00c14f14c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-crypt/trousers/trousers-0.3.14-r2.ebuild @@ -0,0 +1,91 @@ +# Flatcar modifications: +# - added "Flatcar:" customizations +# - added condition to files/tcsd.service +# - created files/tmpfiles.d/trousers.conf +# - created files/system.data +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +TMPFILES_OPTIONAL=1 +inherit autotools linux-info readme.gentoo-r1 systemd tmpfiles udev + +DESCRIPTION="An open-source TCG Software Stack (TSS) v1.1 implementation" +HOMEPAGE="http://trousers.sf.net" +SRC_URI="mirror://sourceforge/trousers/${PN}/${P}.tar.gz" + +LICENSE="CPL-1.0 GPL-2" +SLOT="0" +KEYWORDS="amd64 arm arm64 ~m68k ~ppc ppc64 ~s390 x86" +IUSE="doc libressl selinux" # gtk + +# gtk support presently does NOT compile. +# gtk? ( >=x11-libs/gtk+-2 ) + +DEPEND="acct-group/tss + acct-user/tss + >=dev-libs/glib-2 + !libressl? ( >=dev-libs/openssl-0.9.7:0= ) + libressl? ( dev-libs/libressl:0= )" +RDEPEND="${DEPEND} + selinux? ( sec-policy/selinux-tcsd )" +BDEPEND="virtual/pkgconfig" + +PATCHES=( + "${FILESDIR}/${PN}-0.3.13-nouseradd.patch" + "${FILESDIR}/${P}-libressl.patch" + "${FILESDIR}/${P}-fno-common.patch" + "${FILESDIR}/${P}-Makefile.am-Mark-tddl.a-nodist.patch" + "${FILESDIR}/${P}-CVE-2020-24330_CVE-2020-24331_CVE-2020-24332.patch" +) + +DOCS="AUTHORS ChangeLog NICETOHAVES README TODO" + +DOC_CONTENTS=" + If you have problems starting tcsd, please check permissions and + ownership on /dev/tpm* and ~tss/system.data +" +S="${WORKDIR}" + +CONFIG_CHECK="~TCG_TPM" + +src_prepare() { + default + eautoreconf +} + +src_configure() { + # econf --with-gui=$(usex gtk gtk openssl) + econf --with-gui=openssl +} + +src_install() { + default + find "${D}" -name '*.la' -delete || die + + keepdir /var/lib/tpm + use doc && dodoc doc/* + # Flatcar: Comment out the openrc stuff. + # newinitd "${FILESDIR}"/tcsd.initd tcsd + # newconfd "${FILESDIR}"/tcsd.confd tcsd + fowners root:tss /etc/tcsd.conf + + systemd_dounit "${FILESDIR}"/tcsd.service + + # Flatcar: + systemd_enable_service multi-user.target tcsd.service + + udev_dorules "${FILESDIR}"/61-trousers.rules + fowners tss:tss /var/lib/tpm + readme.gentoo_create_doc + + # Flatcar: + insinto /usr/share/trousers/ + doins "${FILESDIR}"/system.data + # stash a copy of the config so we can restore it from tmpfiles + doins "${D}"/etc/tcsd.conf + fowners tss:tss /usr/share/trousers/system.data + fowners root:tss /usr/share/trousers/tcsd.conf + dotmpfiles "${FILESDIR}"/tmpfiles.d/trousers.conf +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/acbuild/acbuild-0.4.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/acbuild/acbuild-0.4.0.ebuild new file mode 120000 index 0000000000..64278d411f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/acbuild/acbuild-0.4.0.ebuild @@ -0,0 +1 @@ +acbuild-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/acbuild/acbuild-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/acbuild/acbuild-9999.ebuild new file mode 100644 index 0000000000..ca430b3f2b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/acbuild/acbuild-9999.ebuild @@ -0,0 +1,49 @@ +# Copyright (c) 2015 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="appc/acbuild" +CROS_WORKON_REPO="https://github.com" +CROS_WORKON_LOCALNAME="appc-acbuild" +COREOS_GO_PACKAGE="github.com/appc/acbuild" +COREOS_GO_GO111MODULE="off" +inherit coreos-go toolchain-funcs cros-workon + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="2d120a832bd4c3601ca307bf7dd1612a12b55d29" # v0.4.0 + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="A build tool for ACIs" +HOMEPAGE="https://github.com/appc/acbuild" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +RDEPEND="sys-apps/kmod + app-crypt/gnupg + sys-apps/systemd" + +src_compile(){ + if [[ "${PV}" == 9999 ]]; then + # set semver + local v + v=$(git describe --long --dirty) || die + v=${v#v} + v=${v/-/+} + GO_LDFLAGS="-X ${COREOS_GO_PACKAGE}/lib.Version=${v}" + else + GO_LDFLAGS="-X ${COREOS_GO_PACKAGE}/lib.Version=${PV}" + fi + + go_build "${COREOS_GO_PACKAGE}/acbuild" +} + +src_install(){ + dobin "${WORKDIR}/gopath/bin/acbuild" +} + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/actool-0.8.11.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/actool-0.8.11.ebuild new file mode 120000 index 0000000000..394b35eae1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/actool-0.8.11.ebuild @@ -0,0 +1 @@ +actool-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/actool-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/actool-9999.ebuild new file mode 100644 index 0000000000..03ed2192cd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/actool-9999.ebuild @@ -0,0 +1,33 @@ +# Copyright (c) 2015 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="appc/spec" +CROS_WORKON_REPO="https://github.com" +CROS_WORKON_LOCALNAME="appc-spec" +COREOS_GO_PACKAGE="github.com/appc/spec" +COREOS_GO_GO111MODULE="off" +inherit coreos-go cros-workon + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="cbe99b7160b1397bf89f9c8bb1418f69c9424049" # v0.8.11 + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="App Container builder and validator" +HOMEPAGE="https://github.com/appc/spec" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +src_compile() { + go_build "${COREOS_GO_PACKAGE}/actool" +} + +src_install() { + dobin "${WORKDIR}/gopath/bin/actool" +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/actool/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/Manifest new file mode 100644 index 0000000000..2098798341 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/Manifest @@ -0,0 +1 @@ +DIST amazon-ssm-agent-2.3.1319.0.tar.gz 22207875 BLAKE2B 9c94f6837079d8117dffea09b1f793d261ac0cb2321c5e0f5a422ea1c57f5abeb3eb38fae74f91481d70ab3bb55dd2098fca4136c37a692d182b45560ed05900 SHA512 bb1d09704981277701bd0b70fadb8c6c917b72fce3f228511def621ea85ee4f401b20456e82bd7e9eed28350260b63076d49cf5f4004555fa16d645bafbecc41 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/amazon-ssm-agent-2.3.1319.0-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/amazon-ssm-agent-2.3.1319.0-r1.ebuild new file mode 100644 index 0000000000..ce6c39e455 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/amazon-ssm-agent-2.3.1319.0-r1.ebuild @@ -0,0 +1,60 @@ +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +COREOS_GO_PACKAGE="${GITHUB_URI}" +COREOS_GO_VERSION="go1.12" + +inherit coreos-go-depend golang-vcs-snapshot + +EGO_PN="github.com/aws/${PN}" +DESCRIPTION="AWS Systems Manager Agent" +HOMEPAGE="https://github.com/aws/amazon-ssm-agent" +LICENSE="Apache-2.0" +SRC_URI="https://${EGO_PN}/archive/${PV}.tar.gz -> ${P}.tar.gz ${EGO_VENDOR_URI}" +SLOT="0" +KEYWORDS="amd64 arm64" + +S="${WORKDIR}/${PN}-${PV}/src/${EGO_PN}" + +PATCHES=( + # patch generated by `goimports -w ./agent` command + "${FILESDIR}"/${P}-goimports.patch +) + +src_prepare() { + default + ln -s ${PWD}/vendor/src/* ${PWD}/vendor/ +} + +src_compile() { + go_export + + # this is replication of commands from the vendor makefile + # but without network activity during build phase + local GO_LDFLAGS="-s -w -extldflags=-Wl,-z,now,-z,relro,-z,defs" + export GOPATH="${WORKDIR}/${PN}-${PV}" + export GO111MODULE="off" + # set agent release version + BRAZIL_PACKAGE_VERSION=${PV} ${EGO} run ./agent/version/versiongenerator/version-gen.go + # build all the tools + ${EGO} build -v -ldflags "${GO_LDFLAGS}" -buildmode=pie \ + -o bin/amazon-ssm-agent ./agent || die + ${EGO} build -v -ldflags "${GO_LDFLAGS}" -buildmode=pie \ + -o bin/ssm-cli ./agent/cli-main || die + ${EGO} build -v -ldflags "${GO_LDFLAGS}" -buildmode=pie \ + -o bin/ssm-document-worker ./agent/framework/processor/executer/outofproc/worker || die + ${EGO} build -v -ldflags "${GO_LDFLAGS}" -buildmode=pie \ + -o bin/ssm-session-logger ./agent/session/logging || die + ${EGO} build -v -ldflags "${GO_LDFLAGS}" -buildmode=pie \ + -o bin/ssm-session-worker ./agent/framework/processor/executer/outofproc/sessionworker || die +} + +src_install() { + into "/usr/share/oem" + dobin bin/amazon-ssm-agent bin/ssm-cli bin/ssm-document-worker bin/ssm-session-logger bin/ssm-session-worker + # files used by ignition on a first run + insinto "/usr/share/oem/ssm" + newins seelog_unix.xml seelog.xml.template + doins amazon-ssm-agent.json.template +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/files/amazon-ssm-agent-2.3.1319.0-goimports.patch b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/files/amazon-ssm-agent-2.3.1319.0-goimports.patch new file mode 100644 index 0000000000..390ada1d53 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/files/amazon-ssm-agent-2.3.1319.0-goimports.patch @@ -0,0 +1,23 @@ +diff --git a/agent/plugins/inventory/gatherers/application/dataProvider.go b/agent/plugins/inventory/gatherers/application/dataProvider.go +index d252ffb4..d1a010ed 100644 +--- a/agent/plugins/inventory/gatherers/application/dataProvider.go ++++ b/agent/plugins/inventory/gatherers/application/dataProvider.go +@@ -7,7 +7,6 @@ import ( + "fmt" + + "github.com/aws/amazon-ssm-agent/agent/context" +- "github.com/aws/amazon-ssm-agent/agent/plugins/configurepackage/localpackages" + "github.com/aws/amazon-ssm-agent/agent/plugins/inventory/model" + ) + +diff --git a/agent/plugins/inventory/gatherers/application/dataProvider_unix_test.go b/agent/plugins/inventory/gatherers/application/dataProvider_unix_test.go +index af51fa2d..a2757005 100644 +--- a/agent/plugins/inventory/gatherers/application/dataProvider_unix_test.go ++++ b/agent/plugins/inventory/gatherers/application/dataProvider_unix_test.go +@@ -241,4 +241,4 @@ func TestApplicationDataWithPackageRepositoryData(t *testing.T) { + data := CollectApplicationData(mockContext) + assert.Equal(t, len(sampleDataParsed), len(data)) + assert.NotEqual(t, len(mockData), len(data)) +-} +\ No newline at end of file ++} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/metadata.xml new file mode 100644 index 0000000000..f30b435f18 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/amazon-ssm-agent/metadata.xml @@ -0,0 +1,15 @@ + + + + + Amazon EC2 Simple Systems Manager (SSM) Agent is software developed + for the Simple Systems Manager Service. + + + samm@os2.kiev.ua + Oleksii Samorukov + + + aws/amazon-ssm-agent + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/Manifest new file mode 100644 index 0000000000..948c86b097 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/Manifest @@ -0,0 +1 @@ +DIST containerd-1.6.20.tar.gz 8749093 BLAKE2B b2168f68ba45f5e0c589946fdfcded8c57801340e10f4fe6374ab9caaa740888246df49322b880a06bd665ad98bbafc8c39d44059a00f446c7cc24bbdb357eb8 SHA512 dd9708c99d95773a78b0fcd77b388cb8a971d0d65502c8b86cbb3b29c48bac31366ae0603d7710a13c21c33adcd341cdec69dcb3c3a06a2d753c4c59f2549d75 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/containerd-1.6.20.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/containerd-1.6.20.ebuild new file mode 120000 index 0000000000..c5606b90ce --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/containerd-1.6.20.ebuild @@ -0,0 +1 @@ +containerd-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/containerd-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/containerd-9999.ebuild new file mode 100644 index 0000000000..bec55bebd1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/containerd-9999.ebuild @@ -0,0 +1,69 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +GITHUB_URI="github.com/containerd/containerd" +COREOS_GO_PACKAGE="${GITHUB_URI}" +COREOS_GO_VERSION="go1.19" + +if [[ ${PV} == *9999 ]]; then + EGIT_REPO_URI="https://${GITHUB_URI}.git" + inherit git-r3 +else + MY_PV="${PV/_rc/-rc.}" + EGIT_COMMIT="v${MY_PV}" + CONTAINERD_COMMIT="0b7d72e9a8d8b1b7694cca5b6c0fc6dccf9c4d71" + SRC_URI="https://${GITHUB_URI}/archive/${EGIT_COMMIT}.tar.gz -> ${P}.tar.gz" + KEYWORDS="amd64 arm64" + inherit vcs-snapshot +fi + +inherit coreos-go systemd + +DESCRIPTION="A daemon to control runC" +HOMEPAGE="https://containerd.tools" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="+btrfs hardened" + +DEPEND="btrfs? ( sys-fs/btrfs-progs )" +RDEPEND="~app-emulation/docker-runc-1.1.5 + sys-libs/libseccomp" + +S=${WORKDIR}/${P}/src/${COREOS_GO_PACKAGE} + +RESTRICT="test" + +src_unpack() { + mkdir -p "${S}" + tar --strip-components=1 -C "${S}" -xf "${DISTDIR}/${A}" +} + +src_prepare() { + coreos-go_src_prepare + if [[ ${PV} != *9999* ]]; then + sed -i -e "s/git describe --match.*$/echo ${PV})/"\ + -e "s/git rev-parse HEAD.*$/echo $CONTAINERD_COMMIT)/"\ + -e "s/-s -w//" \ + Makefile || die + fi +} + +src_compile() { + local options=( $(usex btrfs "" "no_btrfs") ) + export GOPATH="${WORKDIR}/${P}" # ${PWD}/vendor + export GO111MODULE=on + export GOFLAGS="-v -x -mod=vendor" + LDFLAGS=$(usex hardened '-extldflags -fno-PIC' '') emake BUILDTAGS="${options[*]}" +} + +src_install() { + dobin bin/containerd{-shim,-shim-runc-v*,} bin/ctr + systemd_newunit "${FILESDIR}/${PN}-1.0.0.service" "${PN}.service" + systemd_enable_service multi-user.target "${PN}.service" + insinto /usr/share/containerd + doins "${FILESDIR}/config.toml" + doins "${FILESDIR}/config-cgroupfs.toml" +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/config-cgroupfs.toml b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/config-cgroupfs.toml new file mode 100644 index 0000000000..e2b6806b14 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/config-cgroupfs.toml @@ -0,0 +1,34 @@ +version = 2 + +# persistent data location +root = "/var/lib/containerd" +# runtime state information +state = "/run/containerd" +# set containerd as a subreaper on linux when it is not running as PID 1 +subreaper = true +# set containerd's OOM score +oom_score = -999 +disabled_plugins = [] + +# grpc configuration +[grpc] +address = "/run/containerd/containerd.sock" +# socket uid +uid = 0 +# socket gid +gid = 0 + +[plugins."containerd.runtime.v1.linux"] +# shim binary name/path +shim = "containerd-shim" +# runtime binary name/path +runtime = "runc" +# do not use a shim when starting containers, saves on memory but +# live restore is not supported +no_shim = false + +[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc] +# setting runc.options unsets parent settings +runtime_type = "io.containerd.runc.v2" +[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options] +SystemdCgroup = false diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/config.toml b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/config.toml new file mode 100644 index 0000000000..c6b44e6634 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/config.toml @@ -0,0 +1,38 @@ +version = 2 + +# persistent data location +root = "/var/lib/containerd" +# runtime state information +state = "/run/containerd" +# set containerd as a subreaper on linux when it is not running as PID 1 +subreaper = true +# set containerd's OOM score +oom_score = -999 +disabled_plugins = [] + +# grpc configuration +[grpc] +address = "/run/containerd/containerd.sock" +# socket uid +uid = 0 +# socket gid +gid = 0 + +[plugins."containerd.runtime.v1.linux"] +# shim binary name/path +shim = "containerd-shim" +# runtime binary name/path +runtime = "runc" +# do not use a shim when starting containers, saves on memory but +# live restore is not supported +no_shim = false + +[plugins."io.containerd.grpc.v1.cri"] +# enable SELinux labeling +enable_selinux = true + +[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc] +# setting runc.options unsets parent settings +runtime_type = "io.containerd.runc.v2" +[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options] +SystemdCgroup = true diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/containerd-1.0.0.service b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/containerd-1.0.0.service new file mode 100644 index 0000000000..ac2b18d806 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/containerd-1.0.0.service @@ -0,0 +1,24 @@ +[Unit] +Description=containerd container runtime +Documentation=https://containerd.io +After=network.target + +[Service] +Delegate=yes +Environment=CONTAINERD_CONFIG=/usr/share/containerd/config.toml +ExecStartPre=mkdir -p /run/docker/libcontainerd +ExecStartPre=ln -fs /run/containerd/containerd.sock /run/docker/libcontainerd/docker-containerd.sock +ExecStart=/usr/bin/containerd --config ${TORCX_UNPACKDIR}${TORCX_IMAGEDIR}${CONTAINERD_CONFIG} +KillMode=process +Type=notify +Restart=always +RestartSec=5 + +# (lack of) limits from the upstream docker service unit +LimitNOFILE=1048576 +LimitNPROC=infinity +LimitCORE=infinity +TasksMax=infinity + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/containerd.service b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/containerd.service new file mode 100644 index 0000000000..5af2182266 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/files/containerd.service @@ -0,0 +1,20 @@ +[Unit] +Description=Containerd Container Daemon +Documentation=http://github.com/docker/containerd + +[Service] +Type=simple +ExecStart=/usr/bin/containerd --listen unix:///var/run/docker/libcontainerd/docker-containerd.sock --shim /usr/bin/containerd-shim --state-dir /var/run/docker/libcontainerd/containerd --start-timeout 2m +Restart=always + +# (lack of) limits from the upstream docker service unit +LimitNOFILE=1048576 +LimitNPROC=infinity +LimitCORE=infinity +TasksMax=infinity + +# set delegate yes so that systemd does not reset the cgroups of containers +Delegate=yes + +[Install] +WantedBy=multi-user.target early-docker.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/metadata.xml new file mode 100644 index 0000000000..7cc4630534 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/containerd/metadata.xml @@ -0,0 +1,29 @@ + + + + + Containerd is a daemon with an API and a command line client, to manage + containers on one machine. It uses runC to run containers according to + the OCI specification. Containerd has advanced features such as seccomp + and user namespace support as well as checkpoint and restore for cloning + and live migration of containers. + + + admwiggin@gmail.com + Tianon + + + mrueg@gentoo.org + Manuel Rüger + + + williamh@gentoo.org + William Hubbs + + + Support for BTRFS snapshot driver + + + docker/containerd + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/Manifest new file mode 100644 index 0000000000..519a794127 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/Manifest @@ -0,0 +1 @@ +DIST cri-tools-1.24.2.tar.gz 5968560 BLAKE2B 8dce8d16d5218aa73705b4a49b31391eaa25b21deb97f3dfe553f43d7371adf58206d9198f3e22e1c9cbcb7f41b832b0600b324d7c0f943ef313dc89900da46d SHA512 9b5907b37bb5f00295eff4fa4207ae55d930feae7e0f48fa130c7ecc936bcd259a11d59ed240684a3e12c8bcee40f2c67d7f4af52c2a76df3d7bf82e5e388a75 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/cri-tools-1.24.2.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/cri-tools-1.24.2.ebuild new file mode 100644 index 0000000000..ec5b2f855c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/cri-tools-1.24.2.ebuild @@ -0,0 +1,46 @@ +# Copyright 2021-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +# Flatcar: remove bash-completion, inherit coreos-go +inherit go-module coreos-go + +COREOS_GO_VERSION="go1.19" +COREOS_GO_PACKAGE="github.com/kubernetes-sigs/cri-tools" +COREOS_GO_MOD="vendor" + +MY_PV="v${PV/_beta/-beta.}" + +EGO_PN="${COREOS_GO_PACKAGE}" +DESCRIPTION="CLI and validation tools for Kubelet Container Runtime (CRI)" +HOMEPAGE="https://github.com/kubernetes-sigs/cri-tools" +SRC_URI="https://github.com/kubernetes-sigs/cri-tools/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="Apache-2.0 BSD BSD-2 CC-BY-SA-4.0 ISC MIT MPL-2.0" +SLOT="0" +# Flatcar: keyword arm64 +KEYWORDS="amd64 arm64" + +S=${WORKDIR}/cri-tools-${PV} + +RESTRICT+=" test" + +src_compile() { + # Flatcar: make use of the existing helpers provided by `coreos-go.eclass`. + # To optimize the binary size of crictl, add "-X" to GO_LDFLAGS, + # like "-X $(PROJECT)/pkg/version.Version=$(VERSION)" in the original + # Makefile of cri-tools. We cannot follow way of Gentoo ebuilds like `emake`, + # because Makefile of cri-tools does not allow users to pass in ${GOARCH}. + # Remove shell completions. + GO_LDFLAGS="-s -w -extldflags=-Wl,-z,now,-z,relro,-z,defs " + GO_LDFLAGS+="-X ${COREOS_GO_PACKAGE}/pkg/version.Version=${PV} " + go_build "${COREOS_GO_PACKAGE}/cmd/crictl" +} + +src_install() { + # Flatcar: install only crictl binary, remove shell completions. + dobin "${GOBIN}/crictl" + + dodoc -r docs {README,RELEASE,CHANGELOG,CONTRIBUTING}.md +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/metadata.xml new file mode 100644 index 0000000000..8d6a4c5d53 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/cri-tools/metadata.xml @@ -0,0 +1,11 @@ + + + + + zmedico@gentoo.org + Zac Medico + + + kubernetes-sigs/cri-tools + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-cli/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-cli/Manifest new file mode 100644 index 0000000000..934f8dcbab --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-cli/Manifest @@ -0,0 +1 @@ +DIST docker-cli-20.10.24.tar.gz 7589761 BLAKE2B 353298fba483dc9ce2797397398bb99f9194302e09f943614b5101f24d7a6b404c5e8a1890acf76450e85d295e623f18fb21ab55a3faabfd04596ca520f740c5 SHA512 5996c24070986e18c0530d0db1a9b4a2c0188c1d22b4c0d99161b2f69bb9cecd4221b628afc0db3078d17918a6e312c6b6ca63f889e634006d4e04c677257a27 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-cli/docker-cli-20.10.24.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-cli/docker-cli-20.10.24.ebuild new file mode 100644 index 0000000000..3bff4d2c15 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-cli/docker-cli-20.10.24.ebuild @@ -0,0 +1,62 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +GIT_COMMIT=e78084afe5 +EGO_PN="github.com/docker/cli" + +COREOS_GO_PACKAGE="${EGO_PN}" +COREOS_GO_VERSION="go1.18" + +inherit bash-completion-r1 golang-vcs-snapshot coreos-go-depend + +DESCRIPTION="the command line binary for docker" +HOMEPAGE="https://www.docker.com/" +MY_PV=${PV/_/-} +SRC_URI="https://github.com/docker/cli/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="hardened" + +RDEPEND="! + + + + williamh@gentoo.org + William Hubbs + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/Manifest new file mode 100644 index 0000000000..f11ead0a94 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/Manifest @@ -0,0 +1 @@ +DIST docker-proxy-0.8.0_p20210525.tar.gz 3154432 BLAKE2B 3f273cd4c2dd3c797117bebfe06eb3ae8ce3b3f70d495cb0c77a372d64e23f1d9ad31e8efef64df494cc462e9f4fda9311c99ae7e7218f0fc41b6bf44cf8c08d SHA512 6a94fe23ce1bab0a428ee4bbe20089f5a4470e72c5da156b2b1a89de01cca803374fd9cdcd4c5b25b86af1c4e956c75a1a5ad7fb6639def7bcec69859a77c047 \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/docker-proxy-0.8.0_p20210525.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/docker-proxy-0.8.0_p20210525.ebuild new file mode 120000 index 0000000000..dafe77c5fe --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/docker-proxy-0.8.0_p20210525.ebuild @@ -0,0 +1 @@ +docker-proxy-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/docker-proxy-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/docker-proxy-9999.ebuild new file mode 100644 index 0000000000..5646ae3c26 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-proxy/docker-proxy-9999.ebuild @@ -0,0 +1,43 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 +EGO_PN="github.com/docker/libnetwork" + +COREOS_GO_PACKAGE="${EGO_PN}" +COREOS_GO_VERSION="go1.18" +COREOS_GO_GO111MODULE="off" + +if [[ ${PV} == *9999 ]]; then + KEYWORDS="~amd64 ~arm64" + inherit golang-vcs +else + EGIT_COMMIT="64b7a4574d1426139437d20e81c0b6d391130ec8" + SRC_URI="https://${EGO_PN}/archive/${EGIT_COMMIT}.tar.gz -> ${P}.tar.gz" + KEYWORDS="amd64 arm64" + inherit golang-vcs-snapshot +fi + +inherit coreos-go + +DESCRIPTION="Docker container networking" +HOMEPAGE="https://github.com/docker/libnetwork" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +S=${WORKDIR}/${P}/src/${EGO_PN} + +RDEPEND="! + + + + tianon@dockerproject.org + Tianon + + + mrueg@gentoo.org + Manuel Rüger + + + williamh@gentoo.org + William Hubbs + + + docker/libnetwork + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/Manifest new file mode 100644 index 0000000000..8fd3f19b0b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/Manifest @@ -0,0 +1 @@ +DIST docker-runc-1.1.5.tar.gz 2337543 BLAKE2B ed2aed98c4e8fcfe7040772df9e090e38a95355bcfa2948030866b83b8097794df9e0ebe2bb1a99f5c63a6d5300493d67493018957f6116ee07d66872f87bef3 SHA512 8a4cde9a8aaa5e1f75ec6731b18f56aa34ab969246f4a8d6ebfea5d100b0c113553bec49f29b851129d371a13c803c1e86425779eb8d498dba588c63d2a2ac57 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/docker-runc-1.1.5.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/docker-runc-1.1.5.ebuild new file mode 100644 index 0000000000..4375e1bb59 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/docker-runc-1.1.5.ebuild @@ -0,0 +1,64 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +GITHUB_URI="github.com/opencontainers/runc" +COREOS_GO_PACKAGE="${GITHUB_URI}" +COREOS_GO_VERSION="go1.18" +# the commit of runc that docker uses. +# see https://github.com/docker/docker-ce/blob/v19.03.15/components/engine/hack/dockerfile/install/runc.installer#L4 +COMMIT_ID="4ef48971e5d827018b74876a06e32ab7636f0a26" + +inherit eutils flag-o-matic coreos-go vcs-snapshot + +SRC_URI="https://${GITHUB_URI}/archive/${COMMIT_ID}.tar.gz -> ${P}.tar.gz" +KEYWORDS="amd64 arm64" + +DESCRIPTION="runc container cli tools (docker fork)" +HOMEPAGE="http://runc.io" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="ambient apparmor hardened +seccomp selinux" + +RDEPEND=" + apparmor? ( sys-libs/libapparmor ) + seccomp? ( sys-libs/libseccomp ) +" + +S=${WORKDIR}/${P}/src/${COREOS_GO_PACKAGE} + +RESTRICT="test" + +src_unpack() { + mkdir -p "${S}" + tar --strip-components=1 -C "${S}" -xf "${DISTDIR}/${A}" +} + +PATCHES=( + "${FILESDIR}/0001-Delay-unshare-of-clone-newipc-for-selinux.patch" +) + +src_compile() { + # Taken from app-emulation/docker-1.7.0-r1 + export CGO_CFLAGS="-I${SYSROOT}/usr/include" + export CGO_LDFLAGS="$(usex hardened '-fno-PIC ' '') + -L${SYSROOT}/usr/$(get_libdir)" + + # build up optional flags + local options=( + $(usex ambient 'ambient' '') + $(usex apparmor 'apparmor' '') + $(usex seccomp 'seccomp' '') + $(usex selinux 'selinux' '') + ) + + GOPATH="${WORKDIR}/${P}" emake BUILDTAGS="${options[*]}" \ + VERSION=1.1.5+dev.docker-20.10 \ + COMMIT="${COMMIT_ID}" +} + +src_install() { + dobin runc +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/0001-Delay-unshare-of-clone-newipc-for-selinux.patch b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/0001-Delay-unshare-of-clone-newipc-for-selinux.patch new file mode 100644 index 0000000000..d9b38e9a88 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/0001-Delay-unshare-of-clone-newipc-for-selinux.patch @@ -0,0 +1,46 @@ +From ab3a3b89d712bb1c6ca2e09ffc375f4b837e9401 Mon Sep 17 00:00:00 2001 +From: Mrunal Patel +Date: Thu, 2 Feb 2017 11:23:26 -0800 +Subject: [PATCH] Delay unshare of CLONE_NEWIPC for SELinux + +We ensure that mqueue is owned by user namespace root +by unsharing CLONE_NEWIPC after we become user namespace +root. This allows us to apply the container SELinux label +to mqueue. + +Signed-off-by: Mrunal Patel +(dpark: Adjust the logic according to the new code of v1.1.5) +Signed-off-by: Dongsu Park +--- + libcontainer/nsenter/nsexec.c | 12 +++++++++++- + 1 file changed, 11 insertions(+), 1 deletion(-) + +diff --git a/libcontainer/nsenter/nsexec.c b/libcontainer/nsenter/nsexec.c +index 2d224bab..4865261f 100644 +--- a/libcontainer/nsenter/nsexec.c ++++ b/libcontainer/nsenter/nsexec.c +@@ -1241,7 +1241,12 @@ void nsexec(void) + * some old kernel versions where clone(CLONE_PARENT | CLONE_NEWPID) + * was broken, so we'll just do it the long way anyway. + */ +- try_unshare(config.cloneflags & ~CLONE_NEWCGROUP, "remaining namespaces (except cgroupns)"); ++ uint32_t apply_cloneflags = config.cloneflags; ++ if ((config.cloneflags & CLONE_NEWUSER) && (config.cloneflags & CLONE_NEWIPC)) { ++ apply_cloneflags &= ~CLONE_NEWIPC; ++ } ++ ++ try_unshare(apply_cloneflags & ~CLONE_NEWCGROUP, "remaining namespaces (except cgroupns)"); + + /* Ask our parent to send the mount sources fds. */ + if (config.mountsources) { +@@ -1362,6 +1367,10 @@ void nsexec(void) + try_unshare(CLONE_NEWCGROUP, "cgroup namespace"); + } + ++ if ((config.cloneflags & CLONE_NEWUSER) && (config.cloneflags & CLONE_NEWIPC)) { ++ try_unshare(CLONE_NEWIPC, "ipc namespace"); ++ } ++ + write_log(DEBUG, "signal completion to stage-0"); + s = SYNC_CHILD_FINISH; + if (write(syncfd, &s, sizeof(s)) != sizeof(s)) diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch new file mode 100644 index 0000000000..92b024eb4e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch @@ -0,0 +1,334 @@ +From 2d069bb79260e594870ce3e7466477e54a0c5307 Mon Sep 17 00:00:00 2001 +From: Aleksa Sarai +Date: Wed, 9 Jan 2019 13:40:01 +1100 +Subject: [PATCH] nsenter: clone /proc/self/exe to avoid exposing host binary + to container + +There are quite a few circumstances where /proc/self/exe pointing to a +pretty important container binary is a _bad_ thing, so to avoid this we +have to make a copy (preferably doing self-clean-up and not being +writeable). + +We require memfd_create(2) -- though there is an O_TMPFILE fallback -- +but we can always extend this to use a scratch MNT_DETACH overlayfs or +tmpfs. The main downside to this approach is no page-cache sharing for +the runc binary (which overlayfs would give us) but this is far less +complicated. + +This is only done during nsenter so that it happens transparently to the +Go code, and any libcontainer users benefit from it. This also makes +ExtraFiles and --preserve-fds handling trivial (because we don't need to +worry about it). + +Fixes: CVE-2019-5736 +Co-developed-by: Christian Brauner +Signed-off-by: Aleksa Sarai +--- + libcontainer/nsenter/cloned_binary.c | 268 +++++++++++++++++++++++++++ + libcontainer/nsenter/nsexec.c | 11 ++ + 2 files changed, 279 insertions(+) + create mode 100644 libcontainer/nsenter/cloned_binary.c + +diff --git a/libcontainer/nsenter/cloned_binary.c b/libcontainer/nsenter/cloned_binary.c +new file mode 100644 +index 000000000000..c8a42c23f73f +--- /dev/null ++++ b/libcontainer/nsenter/cloned_binary.c +@@ -0,0 +1,268 @@ ++/* ++ * Copyright (C) 2019 Aleksa Sarai ++ * Copyright (C) 2019 SUSE LLC ++ * ++ * Licensed under the Apache License, Version 2.0 (the "License"); ++ * you may not use this file except in compliance with the License. ++ * You may obtain a copy of the License at ++ * ++ * http://www.apache.org/licenses/LICENSE-2.0 ++ * ++ * Unless required by applicable law or agreed to in writing, software ++ * distributed under the License is distributed on an "AS IS" BASIS, ++ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. ++ * See the License for the specific language governing permissions and ++ * limitations under the License. ++ */ ++ ++#define _GNU_SOURCE ++#include ++#include ++#include ++#include ++#include ++#include ++#include ++#include ++ ++#include ++#include ++#include ++#include ++#include ++#include ++ ++/* Use our own wrapper for memfd_create. */ ++#if !defined(SYS_memfd_create) && defined(__NR_memfd_create) ++# define SYS_memfd_create __NR_memfd_create ++#endif ++#ifdef SYS_memfd_create ++# define HAVE_MEMFD_CREATE ++/* memfd_create(2) flags -- copied from . */ ++# ifndef MFD_CLOEXEC ++# define MFD_CLOEXEC 0x0001U ++# define MFD_ALLOW_SEALING 0x0002U ++# endif ++int memfd_create(const char *name, unsigned int flags) ++{ ++ return syscall(SYS_memfd_create, name, flags); ++} ++#endif ++ ++/* This comes directly from . */ ++#ifndef F_LINUX_SPECIFIC_BASE ++# define F_LINUX_SPECIFIC_BASE 1024 ++#endif ++#ifndef F_ADD_SEALS ++# define F_ADD_SEALS (F_LINUX_SPECIFIC_BASE + 9) ++# define F_GET_SEALS (F_LINUX_SPECIFIC_BASE + 10) ++#endif ++#ifndef F_SEAL_SEAL ++# define F_SEAL_SEAL 0x0001 /* prevent further seals from being set */ ++# define F_SEAL_SHRINK 0x0002 /* prevent file from shrinking */ ++# define F_SEAL_GROW 0x0004 /* prevent file from growing */ ++# define F_SEAL_WRITE 0x0008 /* prevent writes */ ++#endif ++ ++#define RUNC_SENDFILE_MAX 0x7FFFF000 /* sendfile(2) is limited to 2GB. */ ++#ifdef HAVE_MEMFD_CREATE ++# define RUNC_MEMFD_COMMENT "runc_cloned:/proc/self/exe" ++# define RUNC_MEMFD_SEALS \ ++ (F_SEAL_SEAL | F_SEAL_SHRINK | F_SEAL_GROW | F_SEAL_WRITE) ++#endif ++ ++static void *must_realloc(void *ptr, size_t size) ++{ ++ void *old = ptr; ++ do { ++ ptr = realloc(old, size); ++ } while(!ptr); ++ return ptr; ++} ++ ++/* ++ * Verify whether we are currently in a self-cloned program (namely, is ++ * /proc/self/exe a memfd). F_GET_SEALS will only succeed for memfds (or rather ++ * for shmem files), and we want to be sure it's actually sealed. ++ */ ++static int is_self_cloned(void) ++{ ++ int fd, ret, is_cloned = 0; ++ ++ fd = open("/proc/self/exe", O_RDONLY|O_CLOEXEC); ++ if (fd < 0) ++ return -ENOTRECOVERABLE; ++ ++#ifdef HAVE_MEMFD_CREATE ++ ret = fcntl(fd, F_GET_SEALS); ++ is_cloned = (ret == RUNC_MEMFD_SEALS); ++#else ++ struct stat statbuf = {0}; ++ ret = fstat(fd, &statbuf); ++ if (ret >= 0) ++ is_cloned = (statbuf.st_nlink == 0); ++#endif ++ close(fd); ++ return is_cloned; ++} ++ ++/* ++ * Basic wrapper around mmap(2) that gives you the file length so you can ++ * safely treat it as an ordinary buffer. Only gives you read access. ++ */ ++static char *read_file(char *path, size_t *length) ++{ ++ int fd; ++ char buf[4096], *copy = NULL; ++ ++ if (!length) ++ return NULL; ++ ++ fd = open(path, O_RDONLY | O_CLOEXEC); ++ if (fd < 0) ++ return NULL; ++ ++ *length = 0; ++ for (;;) { ++ int n; ++ ++ n = read(fd, buf, sizeof(buf)); ++ if (n < 0) ++ goto error; ++ if (!n) ++ break; ++ ++ copy = must_realloc(copy, (*length + n) * sizeof(*copy)); ++ memcpy(copy + *length, buf, n); ++ *length += n; ++ } ++ close(fd); ++ return copy; ++ ++error: ++ close(fd); ++ free(copy); ++ return NULL; ++} ++ ++/* ++ * A poor-man's version of "xargs -0". Basically parses a given block of ++ * NUL-delimited data, within the given length and adds a pointer to each entry ++ * to the array of pointers. ++ */ ++static int parse_xargs(char *data, int data_length, char ***output) ++{ ++ int num = 0; ++ char *cur = data; ++ ++ if (!data || *output != NULL) ++ return -1; ++ ++ while (cur < data + data_length) { ++ num++; ++ *output = must_realloc(*output, (num + 1) * sizeof(**output)); ++ (*output)[num - 1] = cur; ++ cur += strlen(cur) + 1; ++ } ++ (*output)[num] = NULL; ++ return num; ++} ++ ++/* ++ * "Parse" out argv and envp from /proc/self/cmdline and /proc/self/environ. ++ * This is necessary because we are running in a context where we don't have a ++ * main() that we can just get the arguments from. ++ */ ++static int fetchve(char ***argv, char ***envp) ++{ ++ char *cmdline = NULL, *environ = NULL; ++ size_t cmdline_size, environ_size; ++ ++ cmdline = read_file("/proc/self/cmdline", &cmdline_size); ++ if (!cmdline) ++ goto error; ++ environ = read_file("/proc/self/environ", &environ_size); ++ if (!environ) ++ goto error; ++ ++ if (parse_xargs(cmdline, cmdline_size, argv) <= 0) ++ goto error; ++ if (parse_xargs(environ, environ_size, envp) <= 0) ++ goto error; ++ ++ return 0; ++ ++error: ++ free(environ); ++ free(cmdline); ++ return -EINVAL; ++} ++ ++static int clone_binary(void) ++{ ++ int binfd, memfd; ++ ssize_t sent = 0; ++ ++#ifdef HAVE_MEMFD_CREATE ++ memfd = memfd_create(RUNC_MEMFD_COMMENT, MFD_CLOEXEC | MFD_ALLOW_SEALING); ++#else ++ memfd = open("/tmp", O_TMPFILE | O_EXCL | O_RDWR | O_CLOEXEC, 0711); ++#endif ++ if (memfd < 0) ++ return -ENOTRECOVERABLE; ++ ++ binfd = open("/proc/self/exe", O_RDONLY | O_CLOEXEC); ++ if (binfd < 0) ++ goto error; ++ ++ sent = sendfile(memfd, binfd, NULL, RUNC_SENDFILE_MAX); ++ close(binfd); ++ if (sent < 0) ++ goto error; ++ ++#ifdef HAVE_MEMFD_CREATE ++ int err = fcntl(memfd, F_ADD_SEALS, RUNC_MEMFD_SEALS); ++ if (err < 0) ++ goto error; ++#else ++ /* Need to re-open "memfd" as read-only to avoid execve(2) giving -EXTBUSY. */ ++ int newfd; ++ char *fdpath = NULL; ++ ++ if (asprintf(&fdpath, "/proc/self/fd/%d", memfd) < 0) ++ goto error; ++ newfd = open(fdpath, O_RDONLY | O_CLOEXEC); ++ free(fdpath); ++ if (newfd < 0) ++ goto error; ++ ++ close(memfd); ++ memfd = newfd; ++#endif ++ return memfd; ++ ++error: ++ close(memfd); ++ return -EIO; ++} ++ ++int ensure_cloned_binary(void) ++{ ++ int execfd; ++ char **argv = NULL, **envp = NULL; ++ ++ /* Check that we're not self-cloned, and if we are then bail. */ ++ int cloned = is_self_cloned(); ++ if (cloned > 0 || cloned == -ENOTRECOVERABLE) ++ return cloned; ++ ++ if (fetchve(&argv, &envp) < 0) ++ return -EINVAL; ++ ++ execfd = clone_binary(); ++ if (execfd < 0) ++ return -EIO; ++ ++ fexecve(execfd, argv, envp); ++ return -ENOEXEC; ++} +diff --git a/libcontainer/nsenter/nsexec.c b/libcontainer/nsenter/nsexec.c +index 28269dfc027f..7750af35ea92 100644 +--- a/libcontainer/nsenter/nsexec.c ++++ b/libcontainer/nsenter/nsexec.c +@@ -534,6 +534,9 @@ void join_namespaces(char *nslist) + free(namespaces); + } + ++/* Defined in cloned_binary.c. */ ++extern int ensure_cloned_binary(void); ++ + void nsexec(void) + { + int pipenum; +@@ -549,6 +552,14 @@ void nsexec(void) + if (pipenum == -1) + return; + ++ /* ++ * We need to re-exec if we are not in a cloned binary. This is necessary ++ * to ensure that containers won't be able to access the host binary ++ * through /proc/self/exe. See CVE-2019-5736. ++ */ ++ if (ensure_cloned_binary() < 0) ++ bail("could not ensure we are a cloned binary"); ++ + /* Parse all of the netlink configuration. */ + nl_parse(pipenum, &config); + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/docker-runc-1.0.0_rc2-mount-propagation.patch b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/docker-runc-1.0.0_rc2-mount-propagation.patch new file mode 100644 index 0000000000..c284e9972d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/files/docker-runc-1.0.0_rc2-mount-propagation.patch @@ -0,0 +1,41 @@ +From db55cd4f29298ae08b20f92b8953735723ee2167 Mon Sep 17 00:00:00 2001 +From: Euan Kemp +Date: Fri, 22 Sep 2017 02:31:17 -0700 +Subject: [PATCH] libcontainer: default mount propagation correctly + +The code in prepareRoot (https://github.com/opencontainers/runc/blob/e385f67a0e45fa1d8ef8154e2aea5128ea1d331b/libcontainer/rootfs_linux.go#L599-L605) +attempts to default the rootfs mount to `rslave`. However, since the spec +conversion has already defaulted it to `rprivate`, that code doesn't +actually ever do anything. + +This changes the spec conversion code to accept "" and treat it as 0. + +Implicitly, this makes rootfs propagation default to `rslave`, which is +a part of fixing the moby bug https://github.com/moby/moby/issues/34672 + +Alternate implementatoins include changing this defaulting to be +`rslave` and removing the defaulting code in prepareRoot, or skipping +the mapping entirely for "", but I think this change is the cleanest of +those options. + +Signed-off-by: Euan Kemp +--- + libcontainer/specconv/spec_linux.go | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/libcontainer/specconv/spec_linux.go b/libcontainer/specconv/spec_linux.go +index 1575ae03..8a2947f6 100644 +--- a/libcontainer/specconv/spec_linux.go ++++ b/libcontainer/specconv/spec_linux.go +@@ -36,7 +36,7 @@ var mountPropagationMapping = map[string]int{ + "slave": syscall.MS_SLAVE, + "rshared": syscall.MS_SHARED | syscall.MS_REC, + "shared": syscall.MS_SHARED, +- "": syscall.MS_PRIVATE | syscall.MS_REC, ++ "": 0, + } + + var allowedDevices = []*configs.Device{ +-- +2.13.5 + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/metadata.xml new file mode 100644 index 0000000000..9fe8126b58 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker-runc/metadata.xml @@ -0,0 +1,19 @@ + + + + + runc is a CLI tool for spawning and running containers according + to the OCF (Open Container Format) specification. + + + mrueg@gentoo.org + Manuel Rüger + + + Enable support for ambient capability + Enable AppArmor support + + + docker/runc + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/Manifest new file mode 100644 index 0000000000..9f7524a118 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/Manifest @@ -0,0 +1 @@ +DIST docker-20.10.24.tar.gz 11235129 BLAKE2B abeae0ff9e2d03bd7c901a9e3c1f5a3ccf84afefb034ce032f4e559349ea01ab69ebe120d6c0992885aafa153a784a8c253ed3f7345b921860b758da8e0474ef SHA512 2e82d8048fbf53e3d8ac87eb155d2e321378ca9c9ee038d13bb1b510db31df0f9951db51df81bad28a64c25285e21f8e541b4ce58a68af81fa66d5c07dd3f4d3 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-20.10.24.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-20.10.24.ebuild new file mode 100644 index 0000000000..28035af927 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-20.10.24.ebuild @@ -0,0 +1,306 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +EGO_PN=github.com/docker/docker +GIT_COMMIT=d6cbf44b8c +COREOS_GO_VERSION="go1.18" +COREOS_GO_GO111MODULE="off" + +inherit bash-completion-r1 linux-info systemd udev golang-vcs-snapshot +inherit coreos-go-depend + +DESCRIPTION="The core functions you need to create Docker images and run Docker containers" +HOMEPAGE="https://www.docker.com/" +MY_PV=${PV/_/-} +SRC_URI="https://github.com/moby/moby/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 ~arm arm64 ppc64 ~x86" +# Flatcar: default enable required USE flags +IUSE="apparmor aufs +btrfs +cli +container-init +device-mapper +hardened +overlay +seccomp +journald" + +DEPEND=" + acct-group/docker + >=dev-db/sqlite-3.7.9:3 + apparmor? ( sys-libs/libapparmor ) + btrfs? ( >=sys-fs/btrfs-progs-3.16.1 ) + device-mapper? ( >=sys-fs/lvm2-2.02.89[thin] ) + seccomp? ( >=sys-libs/libseccomp-2.2.1 ) +" + +# Flatcar: +# For CoreOS builds coreos-kernel must be installed because this ebuild +# checks the kernel config. The kernel config is left by the kernel compile +# or an explicit copy when installing binary packages. See coreos-kernel.eclass +DEPEND+="sys-kernel/coreos-kernel" + +# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies +# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#optional-dependencies +# https://github.com/moby/moby/tree/master//hack/dockerfile/install +# make sure docker-proxy is pinned to exact version from ^, +# for appropriate branchch/version of course +# Flatcar: +# containerd ebuild doesn't support apparmor, device-mapper and seccomp use flags +# tini ebuild doesn't support static use flag +RDEPEND=" + ${DEPEND} + >=net-firewall/iptables-1.4 + sys-process/procps + >=dev-vcs/git-1.7 + >=app-arch/xz-utils-4.9 + dev-libs/libltdl + >=app-emulation/containerd-1.4.6[btrfs?] + ~app-emulation/docker-proxy-0.8.0_p20210525 + cli? ( app-emulation/docker-cli ) + container-init? ( >=sys-process/tini-0.19.0 ) +" + +# https://github.com/docker/docker/blob/master/project/PACKAGERS.md#build-dependencies +# Flatcar: drop go-md2man +BDEPEND=" + >=dev-lang/go-1.13.12 + virtual/pkgconfig +" +# tests require running dockerd as root and downloading containers +RESTRICT="installsources strip test" + +S="${WORKDIR}/${P}/src/${EGO_PN}" + +PATCHES=( + "${FILESDIR}/ppc64-buildmode.patch" +) + +# see "contrib/check-config.sh" from upstream's sources +CONFIG_CHECK=" + ~NAMESPACES ~NET_NS ~PID_NS ~IPC_NS ~UTS_NS + ~CGROUPS ~CGROUP_CPUACCT ~CGROUP_DEVICE ~CGROUP_FREEZER ~CGROUP_SCHED ~CPUSETS ~MEMCG + ~CGROUP_NET_PRIO + ~KEYS + ~VETH ~BRIDGE ~BRIDGE_NETFILTER + ~IP_NF_FILTER ~IP_NF_TARGET_MASQUERADE ~NETFILTER_XT_MARK + ~NETFILTER_NETLINK ~NETFILTER_XT_MATCH_ADDRTYPE ~NETFILTER_XT_MATCH_CONNTRACK ~NETFILTER_XT_MATCH_IPVS + ~IP_NF_NAT ~NF_NAT + ~POSIX_MQUEUE + + ~USER_NS + ~SECCOMP + ~CGROUP_PIDS + ~MEMCG_SWAP + + ~BLK_CGROUP ~BLK_DEV_THROTTLING + ~CGROUP_PERF + ~CGROUP_HUGETLB + ~NET_CLS_CGROUP + ~CFS_BANDWIDTH ~FAIR_GROUP_SCHED + ~IP_VS ~IP_VS_PROTO_TCP ~IP_VS_PROTO_UDP ~IP_VS_NFCT ~IP_VS_RR + + ~VXLAN + ~CRYPTO ~CRYPTO_AEAD ~CRYPTO_GCM ~CRYPTO_SEQIV ~CRYPTO_GHASH ~XFRM_ALGO ~XFRM_USER + ~IPVLAN + ~MACVLAN ~DUMMY + + ~OVERLAY_FS ~!OVERLAY_FS_REDIRECT_DIR + ~EXT4_FS_SECURITY + ~EXT4_FS_POSIX_ACL +" + +ERROR_KEYS="CONFIG_KEYS: is mandatory" +ERROR_MEMCG_SWAP="CONFIG_MEMCG_SWAP: is required if you wish to limit swap usage of containers" +ERROR_RESOURCE_COUNTERS="CONFIG_RESOURCE_COUNTERS: is optional for container statistics gathering" + +ERROR_BLK_CGROUP="CONFIG_BLK_CGROUP: is optional for container statistics gathering" +ERROR_IOSCHED_CFQ="CONFIG_IOSCHED_CFQ: is optional for container statistics gathering" +ERROR_CGROUP_PERF="CONFIG_CGROUP_PERF: is optional for container statistics gathering" +ERROR_CFS_BANDWIDTH="CONFIG_CFS_BANDWIDTH: is optional for container statistics gathering" +ERROR_XFRM_ALGO="CONFIG_XFRM_ALGO: is optional for secure networks" +ERROR_XFRM_USER="CONFIG_XFRM_USER: is optional for secure networks" + +pkg_setup() { + + if kernel_is lt 4 5; then + CONFIG_CHECK+=" + ~MEMCG_KMEM + " + ERROR_MEMCG_KMEM="CONFIG_MEMCG_KMEM: is optional" + fi + + if kernel_is lt 4 7; then + CONFIG_CHECK+=" + ~DEVPTS_MULTIPLE_INSTANCES + " + fi + + if kernel_is lt 5 1; then + CONFIG_CHECK+=" + ~NF_NAT_IPV4 + ~IOSCHED_CFQ + ~CFQ_GROUP_IOSCHED + " + fi + + if kernel_is lt 5 2; then + CONFIG_CHECK+=" + ~NF_NAT_NEEDED + " + fi + + if kernel_is lt 5 8; then + CONFIG_CHECK+=" + ~MEMCG_SWAP_ENABLED + " + fi + + if use aufs; then + CONFIG_CHECK+=" + ~AUFS_FS + ~EXT4_FS_POSIX_ACL ~EXT4_FS_SECURITY + " + ERROR_AUFS_FS="CONFIG_AUFS_FS: is required to be set if and only if aufs is patched to kernel instead of using standalone" + fi + + if use btrfs; then + CONFIG_CHECK+=" + ~BTRFS_FS + ~BTRFS_FS_POSIX_ACL + " + fi + + if use device-mapper; then + CONFIG_CHECK+=" + ~BLK_DEV_DM ~DM_THIN_PROVISIONING ~EXT4_FS ~EXT4_FS_POSIX_ACL ~EXT4_FS_SECURITY + " + fi + + linux-info_pkg_setup +} + +src_compile() { + # Flatcar: for cross-compilation + go_export + export DOCKER_GITCOMMIT="${GIT_COMMIT}" + export GOPATH="${WORKDIR}/${P}" + export VERSION=${PV} + + # setup CFLAGS and LDFLAGS for separate build target + # see https://github.com/tianon/docker-overlay/pull/10 + # Flatcar: allow injecting CFLAGS/LDFLAGS, which is needed for torcx rpath + export CGO_CFLAGS="${CGO_CFLAGS} -I${ESYSROOT}/usr/include" + export CGO_LDFLAGS="${CGO_LDFLAGS} -L${ESYSROOT}/usr/$(get_libdir)" + + # let's set up some optional features :) + export DOCKER_BUILDTAGS='' + for gd in aufs btrfs device-mapper overlay; do + if ! use $gd; then + DOCKER_BUILDTAGS+=" exclude_graphdriver_${gd//-/}" + fi + done + + for tag in apparmor seccomp journald; do + if use $tag; then + DOCKER_BUILDTAGS+=" $tag" + fi + done + + # Flatcar: + # inject LDFLAGS for torcx + if use hardened; then + sed -i "s#EXTLDFLAGS_STATIC='#&-fno-PIC $LDFLAGS #" hack/make.sh || die + grep -q -- '-fno-PIC' hack/make.sh || die 'hardened sed failed' + sed "s#LDFLAGS_STATIC_DOCKER='#&-extldflags \"-fno-PIC $LDFLAGS\" #" \ + -i hack/make/dynbinary-daemon || die + grep -q -- '-fno-PIC' hack/make/dynbinary-daemon || die 'hardened sed failed' + fi + + # build daemon + ./hack/make.sh dynbinary || die 'dynbinary failed' +} + +src_install() { + dosym containerd /usr/bin/docker-containerd + dosym containerd-shim /usr/bin/docker-containerd-shim + dosym runc /usr/bin/docker-runc + use container-init && dosym tini /usr/bin/docker-init + newbin bundles/dynbinary-daemon/dockerd dockerd + + newinitd contrib/init/openrc/docker.initd docker + newconfd contrib/init/openrc/docker.confd docker + + # Flatcar: + # install our systemd units/network config and our wrapper into + # /usr/lib/flatcar/docker for backwards compatibility + exeinto /usr/lib/flatcar + doexe "${FILESDIR}/dockerd" + + systemd_dounit "${FILESDIR}/docker.service" + systemd_dounit "${FILESDIR}/docker.socket" + + insinto /usr/lib/systemd/network + doins "${FILESDIR}/50-docker.network" + doins "${FILESDIR}/90-docker-veth.network" + + udev_dorules contrib/udev/*.rules + + dodoc AUTHORS CONTRIBUTING.md CHANGELOG.md NOTICE README.md + dodoc -r docs/* + + # Flatcar: + # don't install contrib bits +} + +pkg_postinst() { + udev_reload + + elog + elog "To use Docker, the Docker daemon must be running as root. To automatically" + elog "start the Docker daemon at boot:" + if systemd_is_booted || has_version sys-apps/systemd; then + elog " systemctl enable docker.service" + else + elog " rc-update add docker default" + fi + elog + elog "To use Docker as a non-root user, add yourself to the 'docker' group:" + elog ' usermod -aG docker ' + elog + + if use device-mapper; then + elog " Devicemapper storage driver has been deprecated" + elog " It will be removed in a future release" + elog + fi + + if use overlay; then + elog " Overlay storage driver/USEflag has been deprecated" + elog " in favor of overlay2 (enabled unconditionally)" + elog + fi + + if has_version sys-fs/zfs; then + elog " ZFS storage driver is available" + elog " Check https://docs.docker.com/storage/storagedriver/zfs-driver for more info" + elog + fi + + if use cli; then + ewarn "Starting with docker 20.10.2, docker has been split into" + ewarn "two packages upstream, so Gentoo has followed suit." + ewarn + ewarn "app-emulation/docker contains the daemon and" + ewarn "app-emulation/docker-cli contains the docker command." + ewarn + ewarn "docker currently installs docker-cli using the cli use flag." + ewarn + ewarn "This use flag is temporary, so you need to take the" + ewarn "following actions:" + ewarn + ewarn "First, disable the cli use flag for app-emulation/docker" + ewarn + ewarn "Then, if you need docker-cli and docker on the same machine," + ewarn "run the following command:" + ewarn + ewarn "# emerge --noreplace docker-cli" + ewarn + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/50-docker.network b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/50-docker.network new file mode 100644 index 0000000000..a0d17b5368 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/50-docker.network @@ -0,0 +1,6 @@ +[Match] +Type=bridge +Name=docker* br-* + +[Link] +Unmanaged=yes diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/90-docker-veth.network b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/90-docker-veth.network new file mode 100644 index 0000000000..3ca3816c23 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/90-docker-veth.network @@ -0,0 +1,5 @@ +[Match] +Driver=veth + +[Link] +Unmanaged=yes diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/docker.service b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/docker.service new file mode 100644 index 0000000000..a8f1bf4ef5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/docker.service @@ -0,0 +1,37 @@ +[Unit] +Description=Docker Application Container Engine +Documentation=http://docs.docker.com +After=containerd.service docker.socket network-online.target +Wants=network-online.target +Requires=containerd.service docker.socket + +[Service] +Type=notify +EnvironmentFile=-/run/flannel/flannel_docker_opts.env +Environment=DOCKER_SELINUX=--selinux-enabled=true + +# the default is not to use systemd for cgroups because the delegate issues still +# exists and systemd currently does not support the cgroup feature set required +# for containers run by docker +ExecStart=/usr/bin/dockerd --host=fd:// --containerd=/var/run/docker/libcontainerd/docker-containerd.sock $DOCKER_SELINUX $DOCKER_OPTS $DOCKER_CGROUPS $DOCKER_OPT_BIP $DOCKER_OPT_MTU $DOCKER_OPT_IPMASQ +ExecReload=/bin/kill -s HUP $MAINPID +LimitNOFILE=1048576 +# Having non-zero Limit*s causes performance problems due to accounting overhead +# in the kernel. We recommend using cgroups to do container-local accounting. +LimitNPROC=infinity +LimitCORE=infinity +# Uncomment TasksMax if your systemd version supports it. +# Only systemd 226 and above support this version. +TasksMax=infinity +TimeoutStartSec=0 +# set delegate yes so that systemd does not reset the cgroups of docker containers +Delegate=yes +# kill only the docker process, not all processes in the cgroup +KillMode=process +# restart the docker process if it exits prematurely +Restart=on-failure +StartLimitBurst=3 +StartLimitInterval=60s + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/docker.socket b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/docker.socket new file mode 100644 index 0000000000..53133c4f8f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/docker.socket @@ -0,0 +1,13 @@ +[Unit] +Description=Docker Socket for the API +PartOf=docker.service + +[Socket] +ListenStream=/var/run/docker.sock +SocketMode=0660 +SocketUser=root +SocketGroup=docker + +[Install] +WantedBy=sockets.target + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/dockerd b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/dockerd new file mode 100644 index 0000000000..19c440bdda --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/dockerd @@ -0,0 +1,41 @@ +#!/bin/bash +# Wrapper for launching docker daemons with selinux default on +# This wrapper script has been deprecated (euank: 2017-05-09) and is retained +# for backwards compatibility. + +set -e + +parse_docker_args() { + local flag + while [[ $# -gt 0 ]]; do + flag="$1" + shift + + # treat --flag=foo and --flag foo identically + if [[ "${flag}" == *=* ]]; then + set -- "${flag#*=}" "$@" + flag="${flag%=*}" + fi + + case "${flag}" in + --selinux-enabled) + ARG_SELINUX="$1" + shift + ;; + *) + # ignore everything else + ;; + esac + done +} + +parse_docker_args "$@" + +USE_SELINUX="" +# Do not override selinux if it is already explicitly configured. +if [[ -z "${ARG_SELINUX}" ]]; then + # If unspecified, default off + USE_SELINUX="--selinux-enabled=false" +fi + +exec dockerd "$@" ${USE_SELINUX} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/ppc64-buildmode.patch b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/ppc64-buildmode.patch new file mode 100644 index 0000000000..2d677a71ab --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/ppc64-buildmode.patch @@ -0,0 +1,30 @@ +From c4135e37e54a6480abfe18746f227f05cb9269ab Mon Sep 17 00:00:00 2001 +From: Georgy Yakovlev +Date: Thu, 10 Jun 2021 16:19:22 -0700 +Subject: [PATCH] don't use buildmode=pie on ppc64 + +It's already omitted for ppc64 in +hack/dockerfile/install/install.sh +not using wildcard, because GOARCH=ppc64le supports pie + +Signed-off-by: Georgy Yakovlev +--- + hack/make/.binary | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/hack/make/.binary b/hack/make/.binary +index 5ea3e373f2..7a911de15a 100644 +--- a/hack/make/.binary ++++ b/hack/make/.binary +@@ -70,7 +70,7 @@ hash_files() { + if [[ " $BUILDFLAGS " != *" -race "* ]]; then + # -buildmode=pie is not supported on Windows and Linux on mips and riscv64. + case "$(go env GOOS)/$(go env GOARCH)" in +- windows/* | linux/mips* | linux/riscv*) ;; ++ windows/* | linux/mips* | linux/riscv* | linux/ppc64) ;; + + *) + BUILDFLAGS+=("-buildmode=pie") +-- +2.32.0 + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/metadata.xml new file mode 100644 index 0000000000..1ec7d35307 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/metadata.xml @@ -0,0 +1,53 @@ + + + + + Docker is an open-source project to easily create lightweight, + portable, self-sufficient containers from any application. The same + container that a developer builds and tests on a laptop can run at + scale, in production, on VMs, bare metal, OpenStack clusters, public + clouds and more. + + + williamh@gentoo.org + William Hubbs + + + gyakovlev@gentoo.org + Georgy Yakovlev + + + + Enables dependencies for the "aufs" graph driver, including + necessary kernel flags. + + + Enable AppArmor support. + + + Enables dependencies for the "btrfs" graph driver, including + necessary kernel flags. + + + This is a temporary use flag which pulls in + app-emulation/docker-cli, the docker command line client. + This flag is here to assist in the transition to split packages + and will be removed in a future release. + + + Makes the a staticly-linked init system tini available inside a + container. + + + Enables dependencies for the "devicemapper" graph driver, including + necessary kernel flags. + + + Enables dependencies for the "overlay" graph driver, including + necessary kernel flags. + + + + moby/moby + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/google-compute-engine/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/google-compute-engine/Manifest new file mode 100644 index 0000000000..ff0c0c21a2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/google-compute-engine/Manifest @@ -0,0 +1 @@ +DIST 20190124.tar.gz 126211 BLAKE2B 7608ec8370f9c1aa1da4cf0f0ec20ff86ef07846bdcb6aabac6de441326a78e98b559502b11ee4028065eb8056f9ee6c2f3247e26485e8c9af70892d955236f7 SHA512 8f12c2a361ebd833b0eb3fa6ef26f42a82b4ef6497d8e5231eeaaf5b2e6dd1662ec596e1bbad73e06207ac29e098863311538c360c62efe9fd5cc9b58d1b8ad4 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/google-compute-engine/google-compute-engine-20190124-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/google-compute-engine/google-compute-engine-20190124-r1.ebuild new file mode 100644 index 0000000000..0d61ec344a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/google-compute-engine/google-compute-engine-20190124-r1.ebuild @@ -0,0 +1,41 @@ +# Copyright (c) 2016-2018 CoreOS, Inc. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +inherit eutils + +DESCRIPTION="Linux Guest Environment for Google Compute Engine" +HOMEPAGE="https://github.com/GoogleCloudPlatform/compute-image-packages" +SRC_URI="https://github.com/GoogleCloudPlatform/compute-image-packages/archive/${PV}.tar.gz" + +LICENSE="MIT" +SLOT="0" +KEYWORDS="amd64 x86" +IUSE="" + +DEPEND="dev-python/setuptools" + +# These dependencies cover all commands called by the scripts. +RDEPEND=" + app-admin/sudo + dev-python/boto + dev-python/distro + dev-python/setuptools + sys-apps/ethtool + sys-apps/coreutils + sys-apps/gawk + sys-apps/grep + sys-apps/iproute2 + sys-apps/shadow +" + +S="${WORKDIR}/compute-image-packages-${PV}" + +src_compile() { + (cd "${S}" && exec python3 setup.py build) +} + +src_install() { + (cd "${S}" && exec python3 setup.py install -O1 --skip-build --root "${D}") +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/Manifest new file mode 100644 index 0000000000..89b695fd68 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/Manifest @@ -0,0 +1 @@ +DIST open-vm-tools-12.2.0-21223074.tar.gz 4365836 BLAKE2B ecac1ada523b9ba6e6f9e880f700a9c35200e9093c81f3367ce3b196365166f682f7d8ba290f624417b83c3573894020fe6b4cbd82a117412ebe80df283f32db SHA512 d663d8ea455264cad7d3eaac16c5d08672e8e10f7a9171be40fff69e208ae697bc0e8af498c978d8de470ed273351b42c54994b2c552fdc05b828c80f4826b84 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/README b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/README new file mode 100644 index 0000000000..aff503a9c8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/README @@ -0,0 +1,3 @@ +When updating the version of open-vm-tools the ebuild version of +oem-vmware must be updated to match as well. That way the reported "OEM" +version directly reflects the installed tools. diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/files/open-vm-tools-0001-configure-Add-options-for-fuse-hgfs-and-udev.patch b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/files/open-vm-tools-0001-configure-Add-options-for-fuse-hgfs-and-udev.patch new file mode 100644 index 0000000000..1501b9ba31 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/files/open-vm-tools-0001-configure-Add-options-for-fuse-hgfs-and-udev.patch @@ -0,0 +1,31 @@ +From d41aae8430eb0148dda9f71f311626bbe779d115 Mon Sep 17 00:00:00 2001 +From: Benjamin Gilbert +Date: Tue, 21 Mar 2017 16:04:30 -0700 +Subject: [PATCH] configure: Add options for fuse, hgfs, and udev + +--- + open-vm-tools/configure.ac | 16 +++++++++++++++- + 1 file changed, 15 insertions(+), 1 deletion(-) + +diff --git a/open-vm-tools/configure.ac b/open-vm-tools/configure.ac +index ab315b84..33839087 100644 +--- a/open-vm-tools/configure.ac ++++ b/open-vm-tools/configure.ac +@@ -1425,7 +1433,13 @@ if test "$os" = "solaris"; then + fi + fi + +-if test "$os" = "linux"; then ++AC_ARG_WITH([udev-rules], ++ [AS_HELP_STRING([--without-udev-rules], ++ [don't install udev rules])], ++ [], ++ [with_udev_rules=yes]) ++ ++if test "$os" = "linux" -a "$with_udev_rules" = "yes"; then + have_udev="yes" + AC_ARG_WITH([udev-rules-dir], + [AS_HELP_STRING([--with-udev-rules-dir=DIR], +-- +2.26.3 + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/metadata.xml new file mode 100644 index 0000000000..9e8e61bb81 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/metadata.xml @@ -0,0 +1,36 @@ + + + + + floppym@gentoo.org + Mike Gilbert + + + vmware@gentoo.org + Gentoo VMware Project + + + The Open Virtual Machine Tools (open-vm-tools) are the open source + implementation of VMware Tools. They are a set of guest operating system + virtualization components that enhance performance and user experience + of virtual machines. + + + Build Common Agent Framework + Build deploypkg plugin + Enable support for nicinfo + Generate API documentation + Enable vmblock-fuse/vmhgfs-fuse + Build grabbitmqproxy plugin + Compile with Gtkmm and sigc++ (Recommended) + Enable multimon (Requires X) + Force shared libraries to be built as PIC + Build the linux/unix resolutionkms module + Build vgauth + Build vgauth with xml-security-c instead of xmlsec1 + Build vgauth with xmlsec1 instead of xml-security-c + + + vmware/open-vm-tools + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/open-vm-tools-12.2.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/open-vm-tools-12.2.0.ebuild new file mode 100644 index 0000000000..9e878058d7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vm-tools/open-vm-tools-12.2.0.ebuild @@ -0,0 +1,109 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +inherit autotools flag-o-matic multilib toolchain-funcs + +DESCRIPTION="Opensourced tools for VMware guests" +HOMEPAGE="https://github.com/vmware/open-vm-tools" +MY_P="${P}-21223074" +SRC_URI="https://github.com/vmware/open-vm-tools/releases/download/stable-${PV}/${MY_P}.tar.gz" + +LICENSE="LGPL-2.1" +SLOT="0" +KEYWORDS="amd64 ~x86" +# Flatcar: add USE flag salt-minion +IUSE="+deploypkg +dnet +pic salt-minion" # TODO: pam + +DEPEND="dev-libs/glib:2 + net-libs/libtirpc + deploypkg? ( dev-libs/libmspack ) + dnet? ( dev-libs/libdnet )" + +# Runtime dependencies provided by CoreOS, not the OEM: +# dev-libs/glib:2 +# sys-apps/ethtool +# pam? ( sys-libs/pam ) +RDEPEND="dnet? ( dev-libs/libdnet ) + deploypkg? ( dev-libs/libmspack )" + +S="${WORKDIR}/${MY_P}" + +PATCHES=( + "${FILESDIR}/${PN}-0001-configure-Add-options-for-fuse-hgfs-and-udev.patch" +) + +src_prepare() { + eapply -p2 "${PATCHES[@]}" + eapply_user + eautoreconf +} + +# Override configure's use of pkg-config to ensure ${SYSROOT} is respected. +override_vmw_check_lib() { + local lib="$1" + local var="$2" + local pkgconfig="$(tc-getPKG_CONFIG)" + export "CUSTOM_${var}_CPPFLAGS=$(${pkgconfig} --cflags ${lib})" + export "CUSTOM_${var}_LIBS=$(${pkgconfig} --libs ${lib})" +} + +src_configure() { + local oemlib="/usr/share/oem/$(get_libdir)" + local oeminc="/usr/share/oem/include" + + # set rpath even if oem is in ld.so.conf + append-ldflags "-Wl,-rpath,${oemlib}" + + # libdnet is installed to /usr/share/oem + export CUSTOM_DNET_CPPFLAGS="-I=${oeminc}" + export CUSTOM_DNET_LIBS="-L=${oemlib}" + export CUSTOM_MSPACK_CPPFLAGS="-I=${oeminc}" + export CUSTOM_MSPACK_LIBS="-L=${oemlib}" + + # for everything else configure is still wrong because it calls + # pkg-config directly instead of favoring the ${CHOST}-pkg-config + # wrapper or using the standard autoconf macro. + override_vmw_check_lib glib-2.0 GLIB2 + override_vmw_check_lib gmodule-2.0 GMODULE + override_vmw_check_lib gobject-2.0 GOBJECT + override_vmw_check_lib gthread-2.0 GTHREAD + + local myeconfargs=( + --prefix=/usr/share/oem + $(use_enable deploypkg) + $(use_enable salt-minion) + --disable-containerinfo + --disable-docs + --disable-multimon + --disable-tests + --without-fuse + --without-icu + --without-kernel-modules + --without-pam + --without-udev-rules + --without-x + --disable-vgauth + $(use_with dnet) + $(use_with pic) + ) + # TODO: $(use_with pam) + + econf "${myeconfargs[@]}" + + # Bugs 260878, 326761 + find ./ -name Makefile | xargs sed -i -e 's/-Werror//g' || die "sed out Werror failed" +} + +src_install() { + # Relocate event scripts, a symlink will be created by the systemd + # unit. + emake DESTDIR="${D}" confdir=/usr/share/oem/vmware-tools install + + rm "${D}"/etc/pam.d/vmtoolsd + # TODO: pamd_mimic_system vmtoolsd auth account + + # We never bother with i10n on CoreOS + rm -rf "${D}"/usr/share/open-vm-tools +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vmdk/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vmdk/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vmdk/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vmdk/open-vmdk-1.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vmdk/open-vmdk-1.0.ebuild new file mode 100644 index 0000000000..7cdbc88c59 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/open-vmdk/open-vmdk-1.0.ebuild @@ -0,0 +1,29 @@ +# Copyright 2014 VMware +# Distributed under the terms of the GNU General Public License v2 +# $Header: $ + +EAPI=7 + +inherit git-r3 + +DESCRIPTION="Tool to convert vmdk to an ova file" +HOMEPAGE="https://github.com/vmware/open-vmdk" +LICENSE="Apache-2.0" +SLOT="0" + +EGIT_REPO_URI="https://github.com/vmware/open-vmdk" +EGIT_BRANCH="master" +EGIT_COMMIT="8349c98ec8a617f5658b70d7de7d7d2830e18eaf" + +KEYWORDS="amd64 ~x86" +IUSE="" + +DEPEND="" +RDEPEND="${DEPEND}" + +PATCHES=( +) + +src_install() { + emake DESTDIR="${D}" install +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/Manifest new file mode 100644 index 0000000000..448200fa2a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/Manifest @@ -0,0 +1 @@ +DIST wa-linux-agent-2.6.0.2.tar.gz 1530936 BLAKE2B f47a4293a939da03859dafac2f422c4066dc2e92d6d4417a7e61e64abf22f1e096fcc7fc4ddfbe3166427ca44df75d967dbd1379d06c1b409fc3edc6340a17f2 SHA512 8826482ceb9e47a9b7f7271c5db19bf46ccabcefd327119e44f2760b147206a1fd3905a0cc8178527fe3326d4179f84bab8f7c673ede3c6de8dcacde0008e405 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/files/waagent.conf b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/files/waagent.conf new file mode 100644 index 0000000000..3d65d06b50 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/files/waagent.conf @@ -0,0 +1,127 @@ +# +# Microsoft Azure Linux Agent Configuration +# + +# Enable instance creation +Provisioning.Enabled=y + +# Enable extension handling. Do not disable this unless you do not need password reset, +# backup, monitoring, or any extension handling whatsoever. +Extensions.Enabled=y + +# Rely on cloud-init to provision +Provisioning.UseCloudInit=n + +# Password authentication for root account will be unavailable. +Provisioning.DeleteRootPassword=n + +# Generate fresh host key pair. +Provisioning.RegenerateSshHostKeyPair=n + +# Supported values are "rsa", "dsa", "ecdsa", "ed25519", and "auto". +# The "auto" option is supported on OpenSSH 5.9 (2011) and later. +Provisioning.SshHostKeyPairType=auto + +# Monitor host name changes and publish changes via DHCP requests. +Provisioning.MonitorHostName=y + +# Decode CustomData from Base64. +Provisioning.DecodeCustomData=y + +# Execute CustomData after provisioning. +Provisioning.ExecuteCustomData=n + +# Algorithm used by crypt when generating password hash. +#Provisioning.PasswordCryptId=6 + +# Length of random salt used when generating password hash. +#Provisioning.PasswordCryptSaltLength=10 + +# Allow reset password of sys user +Provisioning.AllowResetSysUser=n + +# Format if unformatted. If 'n', resource disk will not be mounted. +ResourceDisk.Format=y + +# File system on the resource disk +# Typically ext3 or ext4. FreeBSD images should use 'ufs2' here. +ResourceDisk.Filesystem=ext4 + +# Mount point for the resource disk +ResourceDisk.MountPoint=/mnt/resource + +# Create and use swapfile on resource disk. +ResourceDisk.EnableSwap=n + +# Size of the swapfile. +ResourceDisk.SwapSizeMB=0 + +# Comma-seperated list of mount options. See man(8) for valid options. +ResourceDisk.MountOptions=None + +# Enable verbose logging (y|n) +Logs.Verbose=n + +# Is FIPS enabled +OS.EnableFIPS=n + +# Root device timeout in seconds. +OS.RootDeviceScsiTimeout=300 + +# If "None", the system default version is used. +OS.OpensslPath=None + +# Set the SSH ClientAliveInterval +# OS.SshClientAliveInterval=180 + +# Set the path to SSH keys and configuration files +OS.SshDir=/etc/ssh + +# If set, agent will use proxy server to access internet +#HttpProxy.Host=None +#HttpProxy.Port=None + +# Detect Scvmm environment, default is n +# DetectScvmmEnv=n + +# +# Lib.Dir=/var/lib/waagent + +# +# DVD.MountPoint=/mnt/cdrom/secure + +# +# Pid.File=/var/run/waagent.pid + +# +# Extension.LogDir=/var/log/azure + +# +# Home.Dir=/home + +# Enable RDMA management and set up, should only be used in HPC images +# OS.EnableRDMA=y + +# Enable or disable goal state processing auto-update, default is enabled +# AutoUpdate.Enabled=y + +# Determine the update family, this should not be changed +# AutoUpdate.GAFamily=Prod + +# Determine if the overprovisioning feature is enabled. If yes, hold extension +# handling until inVMArtifactsProfile.OnHold is false. +# Default is enabled +# EnableOverProvisioning=y + +# Allow fallback to HTTP if HTTPS is unavailable +# Note: Allowing HTTP (vs. HTTPS) may cause security risks +# OS.AllowHTTP=n + +# Add firewall rules to protect access to Azure host node services +OS.EnableFirewall=y + +# Enforce control groups limits on the agent and extensions +CGroups.EnforceLimits=n + +# CGroups which are excluded from limits, comma separated +CGroups.Excluded=customscript,runcommand diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/wa-linux-agent-2.6.0.2-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/wa-linux-agent-2.6.0.2-r1.ebuild new file mode 100644 index 0000000000..6b824a1d69 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/wa-linux-agent/wa-linux-agent-2.6.0.2-r1.ebuild @@ -0,0 +1,36 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="Windows Azure Linux Agent" +HOMEPAGE="https://github.com/Azure/WALinuxAgent" +KEYWORDS="amd64 arm64" +SRC_URI="${HOMEPAGE}/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +# Depending on specific version of python-oem allows us to notice when +# we update the major version of python and then to make sure that we +# install the package in correctly versioned site-packages directory. +DEP_PYVER="3.10" + +RDEPEND=" +dev-lang/python-oem:${DEP_PYVER} +dev-python/distro-oem +" + +S="${WORKDIR}/WALinuxAgent-${PV}" + +src_install() { + into "/usr/share/oem" + dobin "${S}/bin/waagent" + + insinto "/usr/share/oem/python/$(get_libdir)/python${DEP_PYVER}/site-packages" + doins -r "${S}/azurelinuxagent/" + + insinto "/usr/share/oem" + doins "${FILESDIR}/waagent.conf" +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/files/xenserver-pv-version.service b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/files/xenserver-pv-version.service new file mode 100644 index 0000000000..37e243d69a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/files/xenserver-pv-version.service @@ -0,0 +1,18 @@ +[Unit] +Description=Set fake PV driver version for XenServer +DefaultDependencies=false +Requires=proc-xen.mount +After=proc-xen.mount +IgnoreOnIsolate=true +ConditionVirtualization=xen + +[Service] +Type=oneshot +RemainAfterExit=true +# Only attempt the write if 'attr' exists, it may not. +ExecStart=/bin/sh -c \ + 'if xenstore exists attr; then xenstore write \ + attr/PVAddons/MajorVersion @@MAJOR@@ \ + attr/PVAddons/MinorVersion @@MINOR@@ \ + attr/PVAddons/MicroVersion @@MICRO@@ \ + data/updated 1; fi' diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/xenserver-pv-version-6.2.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/xenserver-pv-version-6.2.0.ebuild new file mode 100644 index 0000000000..dca7ab0561 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenserver-pv-version/xenserver-pv-version-6.2.0.ebuild @@ -0,0 +1,36 @@ +# Copyright 1999-2014 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: $ + +EAPI=7 + +inherit systemd + +DESCRIPTION="Fake data for XenServer's PV driver version detection." +HOMEPAGE="http://xenserver.org/" +SRC_URI="" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +DEPEND="" +RDEPEND="app-emulation/xenstore" + +S="${WORKDIR}" + +src_prepare() { + default + local split=($(ver_cut 1-3)) + sed -e "s/@@MAJOR@@/${split[0]}/" \ + -e "s/@@MINOR@@/${split[1]}/" \ + -e "s/@@MICRO@@/${split[2]}/" \ + "${FILESDIR}"/xenserver-pv-version.service \ + > "${T}"/xenserver-pv-version.service || die +} + +src_install() { + systemd_dounit "${T}"/xenserver-pv-version.service + systemd_enable_service sysinit.target xenserver-pv-version.service +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/Manifest b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/Manifest new file mode 100644 index 0000000000..6b7f56e7aa --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/Manifest @@ -0,0 +1 @@ +DIST xen-4.14.2.tar.gz 39973157 BLAKE2B db5d3570f79e0fd97872f5e5dd57a4eb39e005728387bfef3b51fabe1c693cfd8108d09b1026f5a5a7eb79de71be6f4af36d252f7e0b35a65a1567b7949e3e29 SHA512 83c9333b70dbee3e29c6bf08e5ad030676e6c4a32b976f3f5e6a8f8d0dd9e4898bac88dd8e1c9d2ad3509cebb5d212e1745f9392a469d7afeb841d79801ccf39 diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/Tools.mk b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/Tools.mk new file mode 100644 index 0000000000..4a4d14eaa2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/Tools.mk @@ -0,0 +1,72 @@ +# Tools path +BISON := +FLEX := +PYTHON := # overridden in ebuild +PYTHON_PATH := +PY_NOOPT_CFLAGS := +PERL := # overridden in ebuild +BASH := +XGETTTEXT := +AS86 := +LD86 := +BCC := +IASL := +AWK := # overridden in ebuild +FETCHER := + +# Extra folder for libs/includes +PREPEND_INCLUDES := +PREPEND_LIB := +APPEND_INCLUDES := +APPEND_LIB := + +PTHREAD_CFLAGS := -pthread +PTHREAD_LDFLAGS := -pthread +PTHREAD_LIBS := + +PTYFUNCS_LIBS := + +LIBNL3_LIBS := +LIBNL3_CFLAGS := +XEN_TOOLS_RPATH := n + +# Download GIT repositories via HTTP or GIT's own protocol? +# GIT's protocol is faster and more robust, when it works at all (firewalls +# may block it). We make it the default, but if your GIT repository downloads +# fail or hang, please pass --enable-githttp to configure. +GIT_HTTP ?= n + +# Optional components +XENSTAT_XENTOP := n +OCAML_TOOLS := n +FLASK_POLICY := y # TODO +CONFIG_OVMF := n +CONFIG_ROMBIOS := n +CONFIG_SEABIOS := n +CONFIG_IPXE := n +CONFIG_QEMU_TRAD := n +CONFIG_QEMU_XEN := n +CONFIG_QEMUU_EXTRA_ARGS := +CONFIG_LIBNL := n +CONFIG_GOLANG := n + +CONFIG_SYSTEMD := n +SYSTEMD_CFLAGS := +SYSTEMD_LIBS := +XEN_SYSTEMD_DIR := +XEN_SYSTEMD_MODULES_LOAD := +CONFIG_9PFS := + +LINUX_BACKEND_MODULES := + +#System options +ZLIB := +CONFIG_LIBICONV := n +EXTFS_LIBS := +CURSES_LIBS := +TINFO_LIBS := +ARGP_LDFLAGS := + +FILE_OFFSET_BITS := + +CONFIG_PV_SHIM := n diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/config.h b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/config.h new file mode 100644 index 0000000000..8a640521da --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/config.h @@ -0,0 +1,139 @@ +/* config.h. Generated from config.h.in by configure. */ +/* config.h.in. Generated from configure.ac by autoheader. */ + +/* Enabling support partial device tree in libxl */ +/* #undef ENABLE_PARTIAL_DEVICE_TREE */ + +/* Define to 1 if you have the declaration of `fdt_first_subnode', and to 0 if + you don't. */ +/* #undef HAVE_DECL_FDT_FIRST_SUBNODE */ + +/* Define to 1 if you have the declaration of `fdt_next_subnode', and to 0 if + you don't. */ +/* #undef HAVE_DECL_FDT_NEXT_SUBNODE */ + +/* Define to 1 if you have the declaration of `fdt_property_u32', and to 0 if + you don't. */ +/* #undef HAVE_DECL_FDT_PROPERTY_U32 */ + +/* Define to 1 if you have the `fdt_first_subnode' function. */ +/* #undef HAVE_FDT_FIRST_SUBNODE */ + +/* Define to 1 if you have the `fdt_next_subnode' function. */ +/* #undef HAVE_FDT_NEXT_SUBNODE */ + +/* Define to 1 if you have the header file. */ +#define HAVE_INTTYPES_H 1 + +/* Define to 1 if you have the `fdt' library (-lfdt). */ +/* #undef HAVE_LIBFDT */ + +/* Define to 1 if you have the `lzma' library (-llzma). */ +/* #undef HAVE_LIBLZMA */ + +/* Define to 1 if you have the `yajl' library (-lyajl). */ +/* #undef HAVE_LIBYAJL */ + +/* Define to 1 if you have the `z' library (-lz). */ +/* #undef HAVE_LIBZ */ + +/* Define to 1 if you have the header file. */ +#define HAVE_MEMORY_H 1 + +/* Qemu traditional enabled */ +/* #undef HAVE_QEMU_TRADITIONAL */ + +/* ROMBIOS enabled */ +/* #undef HAVE_ROMBIOS */ + +/* Define to 1 if you have the header file. */ +#define HAVE_STDINT_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_STDLIB_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_STRINGS_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_STRING_H 1 + +/* Systemd available and enabled */ +/* #undef HAVE_SYSTEMD */ + +/* Define to 1 if you have the header file. */ +#define HAVE_SYS_EVENTFD_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_SYS_STAT_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_SYS_TYPES_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_UNISTD_H 1 + +/* Define to 1 if you have the header file. */ +#define HAVE_UTMP_H 1 + +/* Define to 1 if you have the header file. */ +/* #undef HAVE_VALGRIND_MEMCHECK_H */ + +/* Define to 1 if you have the header file. */ +/* #undef HAVE_YAJL_YAJL_VERSION_H */ + +/* Define curses header to use */ +/* #undef INCLUDE_CURSES_H */ + +/* Define extfs header to use */ +/* #undef INCLUDE_EXTFS_H */ + +/* libutil header file name */ +/* #undef INCLUDE_LIBUTIL_H */ + +/* IPXE path */ +/* #undef IPXE_PATH */ + +/* OVMF path */ +/* #undef OVMF_PATH */ + +/* Define to the address where bug reports for this package should be sent. */ +#define PACKAGE_BUGREPORT "xen-devel@lists.xen.org" + +/* Define to the full name of this package. */ +#define PACKAGE_NAME "Xen Hypervisor Tools" + +/* Define to the full name and version of this package. */ +#define PACKAGE_STRING "Xen Hypervisor Tools 4.14" + +/* Define to the one symbol short name of this package. */ +#define PACKAGE_TARNAME "xen" + +/* Define to the home page for this package. */ +#define PACKAGE_URL "http://www.xen.org/" + +/* Define to the version of this package. */ +#define PACKAGE_VERSION "4.14" + +/* Qemu Xen path */ +/* #undef QEMU_XEN_PATH */ + +/* SeaBIOS path */ +/* #undef SEABIOS_PATH */ + +/* Define to 1 if you have the ANSI C header files. */ +#define STDC_HEADERS 1 + +/* QMP proxy path */ +/* #undef STUBDOM_QMP_PROXY_PATH */ + +/* Enable large inode numbers on Mac OS X 10.5. */ +#ifndef _DARWIN_USE_64_BIT_INODE +# define _DARWIN_USE_64_BIT_INODE 1 +#endif + +/* Number of bits in a file offset, on hosts where this is settable. */ +/* #undef _FILE_OFFSET_BITS */ + +/* Define for large files, on AIX-style hosts. */ +/* #undef _LARGE_FILES */ diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/proc-xen.mount b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/proc-xen.mount new file mode 100644 index 0000000000..2213272f5c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/files/proc-xen.mount @@ -0,0 +1,9 @@ +[Unit] +Before=local-fs.target +DefaultDependencies=false +ConditionVirtualization=xen + +[Mount] +What=xenfs +Where=/proc/xen +Type=xenfs diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/xenstore-4.14.2-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/xenstore-4.14.2-r1.ebuild new file mode 100644 index 0000000000..3e52034a5d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/xenstore/xenstore-4.14.2-r1.ebuild @@ -0,0 +1,86 @@ +# Copyright 1999-2014 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-4.4.0.ebuild,v 1.3 2014/04/04 01:06:31 idella4 Exp $ + +EAPI=7 + +PYTHON_COMPAT=( python3_{6..10} ) + +inherit multilib python-any-r1 systemd toolchain-funcs + +MY_PV=${PV/_/-} +S="${WORKDIR}/xen-${MY_PV}" + +DESCRIPTION="Xen's xenstore client utility" +HOMEPAGE="https://www.xenproject.org" +SRC_URI="https://downloads.xenproject.org/release/xen/${MY_PV}/xen-${MY_PV}.tar.gz" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 ~arm arm64 ~x86" +IUSE="" + +DEPEND=" + ${PYTHON_DEPS} + dev-lang/perl +" +RDEPEND="" + +pkg_setup() { + python-any-r1_pkg_setup + + if [[ -z ${XEN_TARGET_ARCH} ]] ; then + if use x86 && use amd64; then + die "Confusion! Both x86 and amd64 are set in your use flags!" + elif use x86; then + export XEN_TARGET_ARCH="x86_32" + elif use amd64 ; then + export XEN_TARGET_ARCH="x86_64" + elif use arm; then + export XEN_TARGET_ARCH="arm32" + elif use arm64; then + export XEN_TARGET_ARCH="arm64" + else + die "Unsupported architecture!" + fi + fi +} + +src_prepare() { + default + cp "${FILESDIR}"/config.h tools/ || die + cp "${FILESDIR}"/Tools.mk config/ || die +} + +src_configure() { + : # configured manually +} + +src_compile() { + local opts=( + prefix="/usr" + libdir="/usr/$(get_libdir)" + + AR="$(tc-getAR)" + AWK='awk' + CC="$(tc-getCC)" + LD="$(tc-getLD)" + PERL='perl' + PYTHON="${PYTHON}" + RANLIB="$(tc-getRANLIB)" + ) + unset LDFLAGS + unset CFLAGS + emake "${opts[@]}" -C tools/include all + emake "${opts[@]}" -C tools/libs/toolcore all + emake "${opts[@]}" -C tools/xenstore clients +} + +src_install() { + dolib.so tools/libs/toolcore/libxentoolcore.so* + dolib.so tools/xenstore/libxenstore.so* + dobin tools/xenstore/xenstore + + systemd_dounit "${FILESDIR}"/proc-xen.mount + systemd_enable_service local-fs.target proc-xen.mount +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/Manifest b/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/Manifest new file mode 100644 index 0000000000..1fed1134a7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/Manifest @@ -0,0 +1 @@ +DIST eselect-go-0.1.0.tar.gz 104232 SHA256 541de8bc7b77d93f070f907f17760bb30dc3fa8244216d565fcdfb58ab04381b SHA512 b7e9bf07bc7026115d639ed893c54332d63cd2d7a46a6f3b2f8a6748658dfb82f09e875def8bf9abecfb1e39f054ef194b39b0c415ac9ce69ea03332125d4c1f WHIRLPOOL 77996759041eea27f169eadab48f122e55ec11886e851d583ebdd0cf667500d7ca45a62a9edfb99400cc69cbd936887ddface15e7c81d2b301ba111c53123a6a diff --git a/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/eselect-go-0.1.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/eselect-go-0.1.0.ebuild new file mode 100644 index 0000000000..b2478f5963 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/eselect-go-0.1.0.ebuild @@ -0,0 +1,36 @@ +# Copyright 2016 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI=6 + +DESCRIPTION="Eselect module for managing multiple Go versions" +HOMEPAGE="https://github.com/coreos/eselect-go" +SRC_URI="${HOMEPAGE}/releases/download/v${PV}/${P}.tar.gz" +# Note for future releases: the tarball was generated via `make dist` and +# uploaded to GitHub so there is no need for initializing autotools here. + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="test" + +DEPEND="test? ( dev-libs/glib )" +RDEPEND="app-admin/eselect + !dev-lang/go:0" + +src_configure() { + # Go is installed to /usr/lib, not /usr/lib64 + econf --libdir=/usr/lib +} + +src_install() { + keepdir /etc/env.d/go + default +} + +pkg_postinst() { + if has_version 'dev-lang/go'; then + eselect go update --if-unset + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/metadata.xml new file mode 100644 index 0000000000..5b46f1713c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-eselect/eselect-go/metadata.xml @@ -0,0 +1,9 @@ + + + + + This tool is intended for use in the CoreOS SDK in order to support + packages or architectures that cannot upgrade to the same Go version + all at the same time. Gentoo doesn't support this use case. + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest new file mode 100644 index 0000000000..a4743b4e9c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest @@ -0,0 +1 @@ +DIST nss-3.89.tar.gz 71617802 BLAKE2B 92428a635167f311b258411420c8073fafdbadef5b1fc4ff8400e41834fc67a03f2151265d5bbfb64ae53b9a8acb29750352f6c2c83d1cd9a2f89a2139ad34c9 SHA512 1db06d4575f2c16d2a0629007981211e714f99c014c0a6256dd33d0caf8c809ba8d5be204d018f9d1cc99b9fcd055ac1fb99b399486ed43c9cf3f55f2747de82 diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.89.ebuild b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.89.ebuild new file mode 100644 index 0000000000..ccf8d89c08 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.89.ebuild @@ -0,0 +1,101 @@ +# Copyright 2014 The CoreOS Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +PYTHON_COMPAT=( python3_{6..10} ) +TMPFILES_OPTIONAL=1 +inherit python-any-r1 systemd tmpfiles + +RTM_NAME="NSS_${PV//./_}_RTM" +MY_PN="nss" +MY_P="${MY_PN}-${PV}" +S="${WORKDIR}" + +DESCRIPTION="Mozilla's CA Certificate Store" +HOMEPAGE="http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/" +SRC_URI="ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/${RTM_NAME}/src/${MY_P}.tar.gz" + +# NSS is licensed under the MPL, files/certdata2pem.py is GPL +LICENSE="MPL-2.0 GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +RDEPEND="dev-libs/openssl + sys-apps/findutils + sys-apps/systemd" +DEPEND="${RDEPEND} + ${PYTHON_DEPS}" + +pkg_setup() { + python-any-r1_pkg_setup + + # Deal with the case where older ca-certificates installed a + # dir here, but newer one installs symlinks. Portage will + # barf when you try to transition file types. + # This trick is stolen from sys-libs/timezone-data + if cd "${EROOT}"/usr/share/${PN} 2>/dev/null ; then + # In case of a failed upgrade, clean up the symlinks #506570 + if [ -L .gentoo-upgrade ] ; then + rm -rf mozilla .gentoo-upgrade + fi + if [ -d mozilla ] ; then + rm -rf .gentoo-upgrade #487192 + mv mozilla .gentoo-upgrade || die + ln -s .gentoo-upgrade mozilla || die + fi + fi +} + +gen_hash_links() { + local certfile certhash + for certfile in "$@"; do + certhash=$(openssl x509 -hash -noout -in "${certfile}") || die + # This assumes the hashes have no collisions + ln -s "${certfile}" "${certhash}.0" || die + done +} + +gen_tmpfiles() { + local certfile + echo "d /etc/ssl - - - - -" + echo "d /etc/ssl/certs - - - - -" + for certfile in "$@"; do + local l="/etc/ssl/certs/${certfile}" + local p="../../../usr/share/${PN}/${certfile}" + echo "L ${l} - - - - ${p}" + done +} + +src_compile() { + local certdata="${MY_P}/nss/lib/ckfw/builtins/certdata.txt" + ${PYTHON} "${FILESDIR}/certdata2pem.py" "${certdata}" certs || die + + cd certs || die + gen_hash_links *.pem + cat *.pem > ca-certificates.crt || die + gen_tmpfiles * > "${S}/${PN}.conf" || die +} + +src_install() { + insinto /usr/share/${PN} + doins certs/* + + # for compatibility with older directory structure + dosym . /usr/share/${PN}/mozilla + + dosbin "${FILESDIR}/update-ca-certificates" + systemd_dounit "${FILESDIR}/clean-ca-certificates.service" + systemd_dounit "${FILESDIR}/update-ca-certificates.service" + systemd_enable_service sysinit.target clean-ca-certificates.service + systemd_enable_service sysinit.target update-ca-certificates.service + dotmpfiles ${PN}.conf + + # Setup initial links in /etc + dodir /etc/ssl/certs + systemd-tmpfiles --root="${D}" --create +} + +pkg_postinst() { + rm -rf "${EROOT}"/usr/share/${PN}/.gentoo-upgrade +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py new file mode 100644 index 0000000000..d8e9d51996 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/certdata2pem.py @@ -0,0 +1,136 @@ +#!/usr/bin/python3 +# vim:set et sw=4: +# +# certdata2pem.py - splits certdata.txt into multiple files +# +# Copyright (C) 2009 Philipp Kern +# Copyright (C) 2014 The CoreOS Authors +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, +# USA. + +import base64 +import os.path +import re +import sys +import textwrap + +if len(sys.argv) != 3: + sys.stderr.write("Usage: certdata2pem.py certdata.txt output_dir\n") + sys.exit(1) + +certdata = sys.argv[1] +output_dir = sys.argv[2] +objects = [] + +# Dirty file parser. +in_data, in_multiline, in_obj = False, False, False +field, field_type, value, obj = None, None, None, dict() +for line in open(certdata, mode='r', encoding='utf8'): + # Ignore the file header. + if not in_data: + if line.startswith('BEGINDATA'): + in_data = True + continue + # Ignore comment lines. + if line.startswith('#'): + continue + # Empty lines are significant if we are inside an object. + if in_obj and len(line.strip()) == 0: + objects.append(obj) + obj = dict() + in_obj = False + continue + if len(line.strip()) == 0: + continue + if in_multiline: + if not line.startswith('END'): + line = line.strip() + value += line + continue + obj[field] = value + in_multiline = False + continue + if line.startswith('CKA_CLASS'): + in_obj = True + line_parts = line.strip().split(' ', 2) + if len(line_parts) > 2: + field, field_type = line_parts[0:2] + value = ' '.join(line_parts[2:]) + elif len(line_parts) == 2: + field, field_type = line_parts + value = None + else: + raise NotImplementedError('line_parts < 2 not supported.') + if field_type == 'MULTILINE_OCTAL': + in_multiline = True + value = "" + continue + obj[field] = value +if len(list(obj.items())) > 0: + objects.append(obj) + +# Build up trust database. +trust = dict() +for obj in objects: + if obj['CKA_CLASS'] not in ('CKO_NETSCAPE_TRUST', 'CKO_NSS_TRUST'): + continue + elif obj['CKA_TRUST_SERVER_AUTH'] in ('CKT_NETSCAPE_TRUSTED_DELEGATOR', + 'CKT_NSS_TRUSTED_DELEGATOR'): + trust[obj['CKA_LABEL']] = True + elif obj['CKA_TRUST_EMAIL_PROTECTION'] in ('CKT_NETSCAPE_TRUSTED_DELEGATOR', + 'CKT_NSS_TRUSTED_DELEGATOR'): + trust[obj['CKA_LABEL']] = True + else: + print("Ignoring certificate %s. SAUTH=%s, EPROT=%s" % \ + (obj['CKA_LABEL'], obj['CKA_TRUST_SERVER_AUTH'], + obj['CKA_TRUST_EMAIL_PROTECTION'])) + +if not os.path.isdir(output_dir): + os.makedirs(output_dir) +os.chdir(output_dir) + +for obj in objects: + if obj['CKA_CLASS'] == 'CKO_CERTIFICATE': + if not obj['CKA_LABEL'] in trust or not trust[obj['CKA_LABEL']]: + continue + fname = obj['CKA_LABEL'][1:-1].replace('/', '_')\ + .replace(' ', '_')\ + .replace('(', '=')\ + .replace(')', '=')\ + .replace(',', '_') + '.pem' + # fname can be either in utf8 form ("NetLock Arany (Class + # Gold) Főtanúsítvány") or in an encoded form ("AC Ra\xC3\xADz + # Certic\xC3\xA1mara S.A.") + # + # If fname.encode('latin1') fails, then we assume the first form. + try: + # Don't ask, this seems to be the way to convert a string + # like "T\xc3\x9c\x42\xC4\xB0TAK" into "TÜBİTAK". + # + # https://docs.python.org/3/library/codecs.html#text-encodings + fname = fname.encode('latin1').decode('unicode_escape').encode('latin1').decode('utf8') + except (UnicodeEncodeError, UnicodeDecodeError): + pass + + f = open(fname.encode(encoding=sys.getfilesystemencoding(), errors="ignore"), 'w') + f.write("-----BEGIN CERTIFICATE-----\n") + # obj['CKA_VALUE'] is a string of octals like '\060\311…', + # with a number not greater than octal 377 (which is 255, + # which fits in a byte). + match_to_int = lambda match: int(match.group(1), 8) + raw = bytes(map(match_to_int, re.finditer(r'\\([0-3][0-7][0-7])', obj['CKA_VALUE']))) + f.write("\n".join(textwrap.wrap(base64.b64encode(raw).decode('utf8'), 64))) + f.write("\n-----END CERTIFICATE-----\n") diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/clean-ca-certificates.service b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/clean-ca-certificates.service new file mode 100644 index 0000000000..e7842407e4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/clean-ca-certificates.service @@ -0,0 +1,13 @@ +[Unit] +Description=Clean up broken links in /etc/ssl/certs +# Since other services depend on the certificate store run this early +DefaultDependencies=no +Wants=systemd-tmpfiles-setup.service sysroot.mount sysroot-usr.mount +After=systemd-tmpfiles-setup.service sysroot.mount sysroot-usr.mount +Before=sysinit.target +ConditionPathIsReadWrite=/etc/ssl/certs + +[Service] +Type=oneshot +RemainAfterExit=yes +ExecStart=/usr/bin/find -L /etc/ssl/certs -type l -delete diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates new file mode 100644 index 0000000000..ea7cb27cff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates @@ -0,0 +1,42 @@ +#!/bin/bash + +set -e + +CERTSDIR="${ROOT}/etc/ssl/certs" +CERTBUNDLE="${CERTSDIR}/ca-certificates.crt" +SKIP_REHASH=0 + +while [[ $# -gt 0 ]]; do + case "$1" in + --skip-rehash) + SKIP_REHASH=1 ;; + --help|-h|*) + echo "$0 [--skip-rehash]" + exit ;; + esac + shift +done + +if [[ ! -w "${CERTSDIR}" ]]; then + echo "Error: SSL certificate directory ${CERTSDIR} isn't writable" >&2 + exit 1 +fi + +if [[ ${SKIP_REHASH} -ne 1 ]]; then + c_rehash "${CERTSDIR}" +fi + +if [[ ! -e "${CERTBUNDLE}" || "${CERTSDIR}" -nt "${CERTBUNDLE}" ]]; then + echo "Recreating certificate bundle ${CERTBUNDLE}" + TEMPBUNDLE=$(mktemp "${CERTBUNDLE}.XXXXXXXXXX") + trap "rm -f '${CERTSDIR}/${TEMPBUNDLE}'" EXIT + + # Use .0 instead of .pem to pull in only what c_rehash validated + cat "${CERTSDIR}"/*.[0-9] > "${TEMPBUNDLE}" + chmod 644 "${TEMPBUNDLE}" + mv -f "${TEMPBUNDLE}" "${CERTBUNDLE}" + trap - EXIT + + # Update the bundle's mtime so future runs know not to regenerate it + touch --reference="${CERTSDIR}" "${CERTBUNDLE}" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates.service b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates.service new file mode 100644 index 0000000000..3de77d8864 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/files/update-ca-certificates.service @@ -0,0 +1,14 @@ +[Unit] +Description=Update CA bundle at /etc/ssl/certs/ca-certificates.crt +# Since other services depend on the certificate store run this early +DefaultDependencies=no +Wants=systemd-tmpfiles-setup.service clean-ca-certificates.service +After=systemd-tmpfiles-setup.service clean-ca-certificates.service +Before=sysinit.target +ConditionPathIsReadWrite=/etc/ssl/certs +# Do nothing if update-ca-certificates has never been run before +ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt + +[Service] +Type=oneshot +ExecStart=/usr/sbin/update-ca-certificates --skip-rehash diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/metadata.xml new file mode 100644 index 0000000000..9f0fc84b66 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/metadata.xml @@ -0,0 +1,11 @@ + + + +base-system + + + Include root certs from CAcert (http://www.cacert.org/) and + Software in the Public Interest (http://www.spi-inc.org/) + + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/Manifest b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/Manifest new file mode 100644 index 0000000000..30ee235cba --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/Manifest @@ -0,0 +1,35 @@ +DIST bash-5.1.tar.gz 10458638 BLAKE2B 42059556694b604911b5b7936f94d42d8923f2931f3ebacefd95454274c7baadb1ec97629a524c1542e2e282dae66f1389334f8edc572ca8ee841cc3ac449ba7 SHA512 c44a0ce381469219548a3a27589af3fea4f22eda1ca4e9434b59fc16da81b471c29ce18e31590e0860a6a251a664b68c2b45e3a17d22cfc02799ffd9a208390c +DIST bash-5.1.tar.gz.sig 95 BLAKE2B ac9209d6a4ab4436c511a7a195594e9036d7d1aef7887972f61a0e97378a9685b882621d7f95f5326b155dc155c41635417ce2ca41ac6d0dda78bd293ea4249f SHA512 3966404c0f683c7ef214fcf283b551e5441af3897009f778308c2e34067d98d57c95561453416a54ca5b1daf9a1288dbf950fe3f13353703cead12f5eec5fad8 +DIST bash-5.1_p16-patches.tar.xz 388 BLAKE2B 1575d54d311872c7ca71e13711fa0f7e3534fca16fd9d1ca045b6c696c9ca56f6a0ed5023a05d847ab5ddbefc22b8ef2c2a681f09571520f0294d83b495f0015 SHA512 c85e5b83f6ee1a7345647fa937d9718cab13be1a65886755d26a78d21fea4246650c7441a34fd729212e220366985b410562002d74c02c18de7ef0469b409ac7 +DIST bash51-001 2894 BLAKE2B 7918eb48d4afe91a167eed666f0d15ca220e002d824cfc5ebb753430144a8bf884e8895e6d050158153e08c115fb0b90659608ed98b18aec737e75b5e61098f3 SHA512 1cd86805a2639614372aec29a710bc456e330abcbbaa0867820c94f714a1fa5fb5c1b18aa2c10263ae0bce9dad7579c7af2f732282315c1c34bfd6a90777bfd2 +DIST bash51-001.sig 95 BLAKE2B 1f4cb69130029cd8ac46961898bdc15b2a6fc36ea84cccae08aa1ac374a4f4eb3a314a9c6a4a40975c42d76027e27dbf3e71e3253f50bb1561c086b66123d29a SHA512 a72af2444c327180fe91d5780b89aab69d2bd67e7437503e1565ec6618fecb4954dcaa4998186f8d10e4a02ba36a1eb50733d3fedaba60865fee75d38d20f065 +DIST bash51-002 1575 BLAKE2B 70336d2ef04c63fa29a625a2719c0b36f7e34818cadbb4b09e1434d72d6695dd882c758a00f2ea48f38d3918abc15f494780825b7d2f7cfc6c747a3be89ac497 SHA512 923e7822a9629645347d3aea0058fb5e2d52223507159a62369309f264612df44a84931c19e0ccb3852e98ce672dfbd454477090b4041b5a0de477c94eb61088 +DIST bash51-002.sig 95 BLAKE2B b5280e5bb04517302cb05d076f01a083b0c367ac32e7fa262972c24aafb01751aa2fb7444b98ffc8d90b48922f6d2821e2d84c941505c0ef45ebc8c66cac97c1 SHA512 c981e9e42f33548a3ae2605be690b012e934cbfae55519b555593c30f0f4dd0fcf078af3b550e5c988e8872b9f4f5b72588da2f1f5a552646a444c2a21262836 +DIST bash51-003 1800 BLAKE2B 6dd284666273016d3b9007537502d75ad7c4e1347c3a13dcdab2325e4f191a149180ee86f9904fc96291ed8217e1d26dcd2b8b20c283ea616f322dbd293d1998 SHA512 01e952dcfdae58624723d64912ea3444eed2fdcd266ba1a929b95ec3abd70f914bf400607c3f7bb7a94ac2925f794f91f37c1929d5bb987de2ba7f60a19cb8bd +DIST bash51-003.sig 95 BLAKE2B 8f5e7dbf9bf61c1c0778d6347dd5b5f7c90cd02c67ad4b91645bad8afa43469b46dbf786ae31df2224bb6d19b258f3d32e56eb35dee22ae1390eb7ad6e880b08 SHA512 e09e2959cf763509cec4b7ff7fcbf32704913ea37506c6c93fa265ccdf090812db68351d44df073014d329d8bb7030e27ee089ec845631103a43d744d84770fa +DIST bash51-004 3745 BLAKE2B dbbe2713c1cc4aa6de99366c1d91e136d1a7a86ac11108e8dd1aea3823ba0f9e005f48f1507acd1f86ce2f3c2f4ac60ae04ff066e5587229e7f19aefbe4d6e39 SHA512 10ff24cd91a2cd88818bfa7218050843af6b409e43fcca89f5ec70d8266020c6c2a55132426271f165cd0f154f49eb0f8ec2761b80fc066c921b83120bb543ce +DIST bash51-004.sig 95 BLAKE2B 7bb42a219397a1c9d5976908e62dce092f074cbe9a26e9ce4c18b998b00a3f8d69bc5b5d146cb970d3a72bbd4b25878e9b79516ef5538c4d164725de19ee3355 SHA512 445c33cf59a21f5c5f2cbf44f3f1f1756db1850281b4fad7c506665e9e26f840c9fb5647c44a74fde8be2ec832651fd10df624b1649ea3af2858ce3e0e3197a2 +DIST bash51-005 2577 BLAKE2B 573dafdff4a0d11cf6c458d6a3c9087b728542000fce5e16266636444278b7a9b4c75b05e6de31648e2b1ad5ffc2b55336d9fec088ea2c4c6c854eb7e16527aa SHA512 fa83d894fe874a05b9a7d47b8bca8e5b7f4067221d82e8b1af616d17725592c3737c621f2a8ad3c917b29846012c37c85acd34dcbb43eb6b05065ccce89b260c +DIST bash51-005.sig 95 BLAKE2B 7a645c5fe6d903f0843b3878fe53ee74c575595814e051ce562132b57db75c684d19943138e5a4d4df58b5695de2c06326329a2429ec5075cf79f3b42b5228b2 SHA512 8fae2c63808d0730304da59bd6a50849837f98da32a814e3bfa14a9a5b34bacc0ecf9faeea355b729d88c0ebf11836e36516e1c93c1a19e73eb331fd9f6d8129 +DIST bash51-006 1412 BLAKE2B 3b32c69cef9438f66afaad0279627567d6aac32fabbec5af899552427489f2a87b148a3886bc30139647ec4204241c2e77cad83cdae1251176b7ec54699e1445 SHA512 b9b6e3d71f7b7718e2e8598ec8e337dcc675571fb233c29e5230ebf14eab2249204531f2fe8c4d1459c5fed10acb679048588d1e457e98dbc00ffc4d2cd227e3 +DIST bash51-006.sig 95 BLAKE2B 4727ec0cefbb2ef159b22fe9c9ca9800dae7d1b23fcfcac76e78f0f8f28c6ff81ee6425809bb547c54e16de0c55ff3cb46812b0d2c129fc269c704408967083a SHA512 6801224df73194a581d83a0d137b4b9c7e19609528602e6f13b4dc59810b20b0666317c229df470784e082cf205f1c94ffeb9f6ab7465d05959a03bf4b8159c2 +DIST bash51-007 2621 BLAKE2B f2802bc7267efe69abecb5c4d0cf5879bb57219e9e972d4c74f86ca88f99ba4dd3d9314beaca9c426351ffe429ddb4a03615776f569bad9962df7c5094d52a28 SHA512 e4ebdc47e780ddc2588ecdfcfe00cb618039c7044e250ab2b836b0735c461ebacd15beaf2145e277c70b7f51cded55bd8dde7757df810f33f8dae306ee5ba571 +DIST bash51-007.sig 95 BLAKE2B 42e58e5479a12014e62061abca3cc2abfbcb03767c46f3034b60141e954cd95f3f80e640f44847149dc7691e99536ae79bd9c9209960480b43c20969649f56a1 SHA512 b38c4450bed3740368ddcb24d14a28afaa9832771a81c8fa0c3fffde4e6e1bfe7425799c854e8ceea31906a86ba24f3815c20e80b07e90629208976e7c939c6f +DIST bash51-008 1821 BLAKE2B 9820066c99c8ed5f6322fceb2346f8900ac77b6c50c75de39c9ff7472c33f78b054f8bd0493ce7a4b8e17c70456d867aa6791e892246bce64624549a95c3211d SHA512 97f9558a08a66cc9da62c285bf9118b39328e25ed3b9277728e0539b1ac0adef176a090e39cd96dc03d6fd900d8155bd58040cb3390a09f637bab1de8af3faf6 +DIST bash51-008.sig 95 BLAKE2B 6616c8a60b2b2ea87f2ea609709812d194904b18409fbf5ef8e922e9ce57fad8c72cfb4d190fc2cfa21ade985bdf4539a7f8a688e2f3520d34e61ad7c0ee3bb8 SHA512 38e2e83ec4d9b9aa56d67d5816ed2151fb20789fb0b950ad372ebe5a3fea62c193702b2b5be2979063c923f664bd1437058820a3fac68d46c7598aad48ffc8f4 +DIST bash51-009 1627 BLAKE2B 95e47909080c9c8d11f08db6a9fa764b1422f11a55183ee773837c79898db318d997ca6634cc7134245c88231b30245bd5dbd0e5be93528d89544afc1170da1f SHA512 2d3c65162ec4e5c3dfeb439891950ef2c43973a84122fcdf6b56c388466c7e671dbc9b236d2253f01411b668c365855263995dbacb8e6f9e9dbcb7e6c2cc518c +DIST bash51-009.sig 95 BLAKE2B 9b4a41db7280feacb834917bffdd9ef165c60a3cfe0ed758adbf8e2e51a4c5e847251663cc3ac0da7000d172232f84475c3aa79225677d9d9efd7454ce3d7019 SHA512 d8eef6aecc6d86262c779d5c725bf6eaa44ea635ab7ae4e46c32d7ff0ada1ee0ba963ed788f2b7f059b7eef1cec845049a315221a7101978d88f92c23a7af369 +DIST bash51-010 1700 BLAKE2B d391ac7fa3124f001bb06f3020a531b786ce601e8756ac853872420b82a002cfe744f6ba3c0db869b24eb456bbf571fc5ef869a6e4dd4e1c2ffdc3055c67692b SHA512 aac4a0b72b559566334f1029c52754f4c98185af99e09436e401d83ab81bab7882d0d8050674b30f171733f3628157777a264566e927e93db2ea5a18d26630f1 +DIST bash51-010.sig 95 BLAKE2B 6858d5c968090f2ef0127a0a4ec811bcb1a05970247d35248d17efe1de224e7f53cd09577ee2a1e70af7a2cdad0a356e2ed755fc3aa08cc15cc7adcae5bb2f01 SHA512 8d0dd246ceb10167ec4517ca730f8ced6556dc3411ebd1130b3b4914f81b7088355387b29214d5cd23deef9b072862981e2380f64675424063ddfaf6e637100f +DIST bash51-011 2229 BLAKE2B d439ffeef6b42c90d3817d8800a9e842327facb87ad0921313ba8071ae6720a10a79f259b1c8373afba4c1d28b9c2257aa325a160dd9ce9df6c34d31cc33c1b4 SHA512 bb9e47a570bb9758c365831f9650b9379b60862b8cef572edc3cd833df96ebb8b9612de474bdc2a03ff4efc2275f871d55962295385e38f3658874488e974b81 +DIST bash51-011.sig 95 BLAKE2B 01919fc0fedb735f2680ecd7a149d2cc2d88b6463ef3aa4614c9356ffb838aa8c4933c463a16d68d9c168aae5010f13328446c99a1361da2d1c65e50c443d9e0 SHA512 a317cd7449ce3a451295053089fc4a100f7102ae3322c43f7d65570311ceb60d25a7f12b2c0fc679743493de9a3762aaad7fbea6b5b69900dae2025b0d3e7235 +DIST bash51-012 6372 BLAKE2B e2a650ef81333eb4d257b97e63ed215e777f6960f31248930e8f34acdd5f1e8f9b79e636ecad3e14a4fa6b5d3227865e0757ff2b5d8f982eb589cdca753df393 SHA512 59819914b6821d9f4af0aade7b9b7ea92368c2b8eb8407cea11dfeee7208905dd06bdef7a049d7b1c4fac41c44d9a130b95a061957a9649050b37471b3044cf1 +DIST bash51-012.sig 95 BLAKE2B ae1a45dbca035b5692c17384ff56c7def8c07bf464761537aa2a6ee6b5fd87b4fbb6928a9895e2d55f565d62f9a4461e66ad29805e3531ba5f2f0f60d904256d SHA512 7602d2f705638964ee61197edaa1c2ead29bc7932e2fb36c51e971fdc4d9143ec3705da595daef22851cc9d9673aebff7f9a3a448a7f1fc8ccf87c0acd32fa5c +DIST bash51-013 1277 BLAKE2B 78bb6df0f4fbd412fcdd84858a02a055978747c60be3251dd5ec79be9ae0babb94f23fc83debb470b0741b16c2fbbeb066a24c00ef133b13622bd102971fbef8 SHA512 67535155f49a7f54f151e62aba9274f82d01f33a1a1a7e5efd1aa0d63ba2d078765f0b5e22cb24db7132eff2d8c5852a3688298baa5217b8b6e159aae065d748 +DIST bash51-013.sig 95 BLAKE2B 349e1a2dc1341711bb9c1d688b667849bd17340f2ae1cee0a17e7045c39cdeb52600c053f051e76c9cc87985692a550808bd7ddb476376a1795d2339886a6572 SHA512 9cc69bb93e8ce3254df51320a6d60a225d52d77e5618475ea644de5e8e1e39dfe556a2584b2d9eff8f317bc2c2d57063e7c08c9830b982d64569c1f9a775be4f +DIST bash51-014 1456 BLAKE2B e5ddf01208fa06b7bfb3731b496c72d0d1716841f7a601176128180debd8a7eeab5d7d66338d6be03fd6030c431a330b0c4c5d9920d2ac27d757ea4fe94397bd SHA512 f658ab7ef01ba1d26f735e24b23bf35687e15b0d5d20f90da233d000745a55bdba142c11e9fba52e3b84470ec625fab60cc74cd6be533d990496a3795c658e88 +DIST bash51-014.sig 95 BLAKE2B 6478cd78c4c95710b2ef82da748b407f55a237325c378888f9d4e6ffc8e50a63cc6245d738a47f46690d932d8121c5dd0d4bbe6776a3a901990e1c0d247dab49 SHA512 4c9b2defe7bea90533a9cf2c4b2f581338255fd036e3ca31992feea7799eaf544e2914e731e735af35c7883a687a49f45c8238d752ffc7256f5b0d0a3642b63b +DIST bash51-015 1409 BLAKE2B c9f4d7bb13727cbea142200ff61f09d5b06a117d863afd8a451a078c040fbaf48291263264ad6e5d9bd1d309d8e23543cd2e847d593714969ea99f7054064fd9 SHA512 fd4bc85f942a3a16c545f7e951a24f620ff2d884640dea6e05f305aaf88ed41862bfb05eea2258881608de696f9dc7a0fe3bebb51a011f50b720ea7a66699184 +DIST bash51-015.sig 95 BLAKE2B 236e63344a1d4f82acee460b84c7a0153ab27a5f8a1429eadb2db29c2506293828330a7da337a89d4e33cc1578ad47a427c574f669f6a4c560ffb7db719205bb SHA512 6dd83302c2dffa701ccb5ecb6d655714479609f2297bd53c5d02a9d8169fe52cea09149d122b679405da0ecbaeb4252b8834dd5397e89aaad1b87528d18ea7fb +DIST bash51-016 2122 BLAKE2B c44d269366cf13d896602bc14ebefd8f5826cb10820e9bace83b643f5af0264cff0240da81cabcbb36af55a009795420cc622100969656bcb3c977ee9359d810 SHA512 020b3f3db77ca603a27a3423323538db5c9844be17ee428cf7cda80bebdcc715d30eab6c95773541cb8d14f3ad9e6142bf0adcda0e745ee638242508cc0ab05f +DIST bash51-016.sig 95 BLAKE2B 6da76c4dc413b0a4560ae6b7ec550090c819b7a3e05dc2e000ee709b8430ae6373003f7c99dc94a13cfcce33e393199bd9b8f670a120375c929bf40b9e5a2a15 SHA512 d008d91db6b6bccea9431f962665fc4976cbeed87b24ea133044e9a15b0aba14f1d6361e524f00096377aa11a9b1daeea2bbeb65e82396cb12bc57cb560940f0 diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/bash-5.1_p16-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/bash-5.1_p16-r2.ebuild new file mode 100644 index 0000000000..9a73109ff8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/bash-5.1_p16-r2.ebuild @@ -0,0 +1,314 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/chetramey.asc +inherit flag-o-matic toolchain-funcs prefix verify-sig + +# Uncomment if we have a patchset +GENTOO_PATCH_DEV="sam" +GENTOO_PATCH_VER="${PV}" + +# Official patchlevel +# See ftp://ftp.cwru.edu/pub/bash/bash-5.1-patches/ +PLEVEL="${PV##*_p}" +MY_PV="${PV/_p*}" +MY_PV="${MY_PV/_/-}" +MY_P="${PN}-${MY_PV}" +MY_PATCHES=() + +is_release() { + case ${PV} in + *_alpha*|*_beta*|*_rc*) + return 1 + ;; + *) + return 0 + ;; + esac +} + +[[ ${PV} != *_p* ]] && PLEVEL=0 + +# The version of readline this bash normally ships with. +READLINE_VER="8.1" + +DESCRIPTION="The standard GNU Bourne again shell" +HOMEPAGE="https://tiswww.case.edu/php/chet/bash/bashtop.html" + +if is_release ; then + SRC_URI="mirror://gnu/bash/${MY_P}.tar.gz" + SRC_URI+=" verify-sig? ( mirror://gnu/bash/${MY_P}.tar.gz.sig )" + + if [[ ${PLEVEL} -gt 0 ]] ; then + # bash-5.1 -> bash51 + my_p=${PN}$(ver_rs 1-2 '' $(ver_cut 1-2)) + + patch_url= + my_patch_index= + + for ((my_patch_index=1; my_patch_index <= ${PLEVEL} ; my_patch_index++)) ; do + for url in mirror://gnu/${pn} ftp://ftp.cwru.edu/pub/bash ; do + patch_url=$(printf "${url}/${PN}-$(ver_cut 1-2)-patches/${my_p}-%03d" ${my_patch_index}) + SRC_URI+=" ${patch_url}" + SRC_URI+=" verify-sig? ( ${patch_url}.sig )" + + done + + MY_PATCHES+=( "${DISTDIR}"/$(printf ${my_p}-%03d ${my_patch_index}) ) + done + + unset my_pn patch_url my_patch_index + fi +else + SRC_URI="ftp://ftp.cwru.edu/pub/bash/${MY_P}.tar.gz" + SRC_URI+=" verify-sig? ( ftp://ftp.cwru.edu/pub/bash/${MY_P}.tar.gz.sig )" +fi + +if [[ -n ${GENTOO_PATCH_VER} ]] ; then + SRC_URI+=" https://dev.gentoo.org/~${GENTOO_PATCH_DEV}/distfiles/${CATEGORY}/${PN}/${PN}-${GENTOO_PATCH_VER}-patches.tar.xz" +fi + +LICENSE="GPL-3" +SLOT="0" +[[ "${PV}" == *_rc* ]] || \ +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" +IUSE="afs bashlogger examples mem-scramble +net nls plugins +readline" + +DEPEND=" + >=sys-libs/ncurses-5.2-r2:0= + nls? ( virtual/libintl ) + readline? ( >=sys-libs/readline-${READLINE_VER}:0= ) +" +RDEPEND=" + ${DEPEND} +" +# We only need yacc when the .y files get patched (bash42-005, bash51-011) +BDEPEND="app-alternatives/yacc + verify-sig? ( sec-keys/openpgp-keys-chetramey )" + +S="${WORKDIR}/${MY_P}" + +PATCHES=( + # Patches from Chet sent to bashbug ml + "${WORKDIR}"/${PN}-${GENTOO_PATCH_VER}-patches/${PN}-5.0-syslog-history-extern.patch +) + +pkg_setup() { + # bug #7332 + if is-flag -malign-double ; then + eerror "Detected bad CFLAGS '-malign-double'. Do not use this" + eerror "as it breaks LFS (struct stat64) on x86." + die "remove -malign-double from your CFLAGS mr ricer" + fi + + if use bashlogger ; then + ewarn "The logging patch should ONLY be used in restricted (i.e. honeypot) envs." + ewarn "This will log ALL output you enter into the shell, you have been warned." + fi +} + +src_unpack() { + if [[ ${PV} == 9999 ]] ; then + git-r3_src_unpack + else + if use verify-sig ; then + verify-sig_verify_detached "${DISTDIR}"/${MY_P}.tar.gz{,.sig} + + local patch + for patch in "${MY_PATCHES[@]}" ; do + verify-sig_verify_detached ${patch}{,.sig} + done + fi + + unpack ${MY_P}.tar.gz + + if [[ -n ${GENTOO_PATCH_VER} ]] ; then + unpack ${PN}-${GENTOO_PATCH_VER}-patches.tar.xz + fi + fi +} + +src_prepare() { + # Include official patches + [[ ${PLEVEL} -gt 0 ]] && eapply -p0 "${MY_PATCHES[@]}" + + # Clean out local libs so we know we use system ones w/releases. + if is_release ; then + rm -rf lib/{readline,termcap}/* || die + touch lib/{readline,termcap}/Makefile.in || die # for config.status + sed -ri -e 's:\$[{(](RL|HIST)_LIBSRC[)}]/[[:alpha:]_-]*\.h::g' Makefile.in || die + fi + + # Prefixify hardcoded path names. No-op for non-prefix. + hprefixify pathnames.h.in + + # Avoid regenerating docs after patches, bug #407985 + sed -i -r '/^(HS|RL)USER/s:=.*:=:' doc/Makefile.in || die + touch -r . doc/* || die + + eapply -p0 "${PATCHES[@]}" + eapply_user +} + +src_configure() { + local myconf=( + --disable-profiling + + # Force linking with system curses ... the bundled termcap lib + # sucks bad compared to ncurses. For the most part, ncurses + # is here because readline needs it. But bash itself calls + # ncurses in one or two small places :(. + --with-curses + + $(use_enable mem-scramble) + $(use_enable net net-redirections) + $(use_enable readline) + $(use_enable readline bang-history) + $(use_enable readline history) + $(use_with afs) + $(use_with mem-scramble bash-malloc) + ) + + # For descriptions of these, see config-top.h + # bashrc/#26952 bash_logout/#90488 ssh/#24762 mktemp/#574426 + append-cppflags \ + -DDEFAULT_PATH_VALUE=\'\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\"\' \ + -DSTANDARD_UTILS_PATH=\'\"/bin:/usr/bin:/sbin:/usr/sbin\"\' \ + -DSYS_BASHRC=\'\"/etc/bash/bashrc\"\' \ + -DSYS_BASH_LOGOUT=\'\"/etc/bash/bash_logout\"\' \ + -DNON_INTERACTIVE_LOGIN_SHELLS \ + -DSSH_SOURCE_BASHRC \ + $(use bashlogger && echo -DSYSLOG_HISTORY) + + # Don't even think about building this statically without + # reading bug #7714 first. If you still build it statically, + # don't come crying to us with bugs ;). + #use static && export LDFLAGS="${LDFLAGS} -static" + use nls || myconf+=( --disable-nls ) + + # Historically, we always used the builtin readline, but since + # our handling of SONAME upgrades has gotten much more stable + # in the PM (and the readline ebuild itself preserves the old + # libs during upgrades), linking against the system copy should + # be safe. + # Exact cached version here doesn't really matter as long as it + # is at least what's in the DEPEND up above. + export ac_cv_rl_version=${READLINE_VER%%_*} + + if is_release ; then + # Use system readline only with released versions. + myconf+=( --with-installed-readline=. ) + fi + + if use plugins ; then + append-ldflags -Wl,-rpath,"${EPREFIX}"/usr/$(get_libdir)/bash + else + # Disable the plugins logic by hand since bash doesn't + # provide a way of doing it. + export ac_cv_func_dl{close,open,sym}=no \ + ac_cv_lib_dl_dlopen=no ac_cv_header_dlfcn_h=no + + sed -i \ + -e '/LOCAL_LDFLAGS=/s:-rdynamic::' \ + configure || die + fi + + # bug #444070 + tc-export AR + + econf "${myconf[@]}" +} + +src_compile() { + emake + + if use plugins ; then + emake -C examples/loadables all others + fi +} + +src_install() { + local d f + + default + + dodir /bin + mv "${ED}"/usr/bin/bash "${ED}"/bin/ || die + dosym bash /bin/rbash + + insinto /usr/share/bash + for f in bash{_logout,rc} ; do + doins "${FILESDIR}"/${f} + dosym ../../usr/share/bash/${f} /etc/bash/${f} + done + + insinto /usr/share/skel + for f in bash{_logout,_profile,rc} ; do + newins "${FILESDIR}"/dot-${f} .${f} + dosym ../../usr/share/skel/.${f} /etc/skel/.${f} + done + + local sed_args=( + -e "s:#${USERLAND}#@::" + -e '/#@/d' + ) + + if ! use readline ; then + # bug #432338 + sed_args+=( + -e '/^shopt -s histappend/s:^:#:' + -e 's:use_color=true:use_color=false:' + ) + fi + + sed -i \ + "${sed_args[@]}" \ + "${ED}"/usr/share/skel/.bashrc \ + "${ED}"/usr/share/bash/bashrc || die + + if use plugins ; then + exeinto /usr/$(get_libdir)/bash + doexe $(echo examples/loadables/*.o | sed 's:\.o::g') + + insinto /usr/include/bash-plugins + doins *.h builtins/*.h include/*.h lib/{glob/glob.h,tilde/tilde.h} + fi + + if use examples ; then + for d in examples/{functions,misc,scripts,startup-files} ; do + exeinto /usr/share/doc/${PF}/${d} + docinto ${d} + for f in ${d}/* ; do + if [[ ${f##*/} != PERMISSION ]] && [[ ${f##*/} != *README ]] ; then + doexe ${f} + else + dodoc ${f} + fi + done + done + fi + + # Install bash_builtins.1 and rbash.1 + emake -C doc DESTDIR="${D}" install_builtins + sed 's:bash\.1:man1/&:' doc/rbash.1 > "${T}"/rbash.1 || die + doman "${T}"/rbash.1 + + newdoc CWRU/changelog ChangeLog + dosym bash.info /usr/share/info/bashref.info +} + +pkg_preinst() { + if [[ -e ${EROOT}/etc/bashrc ]] && [[ ! -d ${EROOT}/etc/bash ]] ; then + mkdir -p "${EROOT}"/etc/bash + mv -f "${EROOT}"/etc/bashrc "${EROOT}"/etc/bash/ + fi +} + +pkg_postinst() { + # If /bin/sh does not exist, provide it + if [[ ! -e ${EROOT}/bin/sh ]] ; then + ln -sf bash "${EROOT}"/bin/sh + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bash-5.0-syslog-history-extern.patch b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bash-5.0-syslog-history-extern.patch new file mode 100644 index 0000000000..79909a3d0c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bash-5.0-syslog-history-extern.patch @@ -0,0 +1,15 @@ +*** ../bash-5.0-patched/builtins/shopt.def 2018-10-05 14:49:02.000000000 -0400 +--- builtins/shopt.def 2019-01-23 09:55:22.000000000 -0500 +*************** +*** 123,127 **** + #endif + +! #if defined (SYSLOG_HISTORY) && defined (SYSLOG_SHOPT) + extern int syslog_history; + #endif +--- 123,127 ---- + #endif + +! #if defined (SYSLOG_HISTORY) + extern int syslog_history; + #endif diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bash_logout b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bash_logout new file mode 100644 index 0000000000..50a79331c0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bash_logout @@ -0,0 +1,9 @@ +# /etc/bash/bash_logout + +# This file is sourced when a login shell terminates. + +# You may wish to clear everyone's screen when they logout. +#clear + +# Or maybe you want to leave a thoughtful note. +#fortune diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bashrc b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bashrc new file mode 100644 index 0000000000..b7202a361d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/bashrc @@ -0,0 +1,107 @@ +# /etc/bash/bashrc +# +# This file is sourced by all *interactive* bash shells on startup, +# including some apparently interactive shells such as scp and rcp +# that can't tolerate any output. So make sure this doesn't display +# anything or bad things will happen ! + + +# Test for an interactive shell. There is no need to set anything +# past this point for scp and rcp, and it's important to refrain from +# outputting anything in those cases. +if [[ $- != *i* ]] ; then + # Shell is non-interactive. Be done now! + return +fi + +# Bash won't get SIGWINCH if another process is in the foreground. +# Enable checkwinsize so that bash will check the terminal size when +# it regains control. #65623 +# http://cnswww.cns.cwru.edu/~chet/bash/FAQ (E11) +shopt -s checkwinsize + +# Disable completion when the input buffer is empty. i.e. Hitting tab +# and waiting a long time for bash to expand all of $PATH. +shopt -s no_empty_cmd_completion + +# Enable history appending instead of overwriting when exiting. #139609 +shopt -s histappend + +# Save each command to the history file as it's executed. #517342 +# This does mean sessions get interleaved when reading later on, but this +# way the history is always up to date. History is not synced across live +# sessions though; that is what `history -n` does. +# Disabled by default due to concerns related to system recovery when $HOME +# is under duress, or lives somewhere flaky (like NFS). Constantly syncing +# the history will halt the shell prompt until it's finished. +#PROMPT_COMMAND='history -a' + +# Change the window title of X terminals +case ${TERM} in + [aEkx]term*|rxvt*|gnome*|konsole*|interix|tmux*) + PS1='\[\033]0;\u@\h:\w\007\]' + ;; + screen*) + PS1='\[\033k\u@\h:\w\033\\\]' + ;; + *) + unset PS1 + ;; +esac + +# Set colorful PS1 only on colorful terminals. +# dircolors --print-database uses its own built-in database +# instead of using /etc/DIR_COLORS. Try to use the external file +# first to take advantage of user additions. +# We run dircolors directly due to its changes in file syntax and +# terminal name patching. +use_color=false +if type -P dircolors >/dev/null ; then + # Enable colors for ls, etc. Prefer ~/.dir_colors #64489 + LS_COLORS= + if [[ -f ~/.dir_colors ]] ; then + eval "$(dircolors -b ~/.dir_colors)" + elif [[ -f /etc/DIR_COLORS ]] ; then + eval "$(dircolors -b /etc/DIR_COLORS)" + else + eval "$(dircolors -b)" + fi + # Note: We always evaluate the LS_COLORS setting even when it's the + # default. If it isn't set, then `ls` will only colorize by default + # based on file attributes and ignore extensions (even the compiled + # in defaults of dircolors). #583814 + if [[ -n ${LS_COLORS:+set} ]] ; then + use_color=true + else + # Delete it if it's empty as it's useless in that case. + unset LS_COLORS + fi +else + # Some systems (e.g. BSD & embedded) don't typically come with + # dircolors so we need to hardcode some terminals in here. + case ${TERM} in + [aEkx]term*|rxvt*|gnome*|konsole*|screen|tmux|cons25|*color) use_color=true;; + esac +fi + +if ${use_color} ; then + if [[ ${EUID} == 0 ]] ; then + PS1+='\[\033[01;31m\]\h\[\033[01;34m\] \w \$\[\033[00m\] ' + else + PS1+='\[\033[01;32m\]\u@\h\[\033[01;34m\] \w \$\[\033[00m\] ' + fi + + #BSD#@export CLICOLOR=1 + #GNU#@alias ls='ls --color=auto' + alias grep='grep --colour=auto' +else + # show root@ when we don't have colors + PS1+='\u@\h \w \$ ' +fi + +for sh in /etc/bash/bashrc.d/* ; do + [[ -r ${sh} ]] && source "${sh}" +done + +# Try to keep environment pollution down, EPA loves us. +unset use_color sh diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bash_logout b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bash_logout new file mode 100644 index 0000000000..44b6f79ca8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bash_logout @@ -0,0 +1,6 @@ +# /etc/skel/.bash_logout + +# This file is sourced when a login shell terminates. + +# Clear the screen for security's sake. +clear diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bash_profile b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bash_profile new file mode 100644 index 0000000000..1de05a45e3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bash_profile @@ -0,0 +1,7 @@ +# /etc/skel/.bash_profile + +# This file is sourced by bash for login shells. The following line +# runs your .bashrc and is recommended by the bash info pages. +if [[ -f ~/.bashrc ]] ; then + . ~/.bashrc +fi diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bashrc b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bashrc new file mode 100644 index 0000000000..f020892b5c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/files/dot-bashrc @@ -0,0 +1,27 @@ +# /etc/skel/.bashrc +# +# This file is sourced by all *interactive* bash shells on startup, +# including some apparently interactive shells such as scp and rcp +# that can't tolerate any output. So make sure this doesn't display +# anything or bad things will happen ! + + +# Test for an interactive shell. There is no need to set anything +# past this point for scp and rcp, and it's important to refrain from +# outputting anything in those cases. +if [[ $- != *i* ]] ; then + # Shell is non-interactive. Be done now! + return +fi + + +# Put your fun stuff here. + +alias_bcc_tool() { + local tool="${1}" + alias iovisor-${tool}="docker run --rm -it -v /lib/modules:/lib/modules -v /sys/kernel/debug:/sys/kernel/debug -v /sys/fs/cgroup:/sys/fs/cgroup -v /sys/fs/bpf:/sys/fs/bpf --privileged --net host --pid host quay.io/iovisor/bcc /usr/share/bcc/tools/${tool}" +} + +bcc_debug_toolset=( tcpretrans tcpconnect tcpaccept biolatency ) + +for t in "${bcc_debug_toolset[@]}"; do alias_bcc_tool "${t}"; done diff --git a/sdk_container/src/third_party/coreos-overlay/app-shells/bash/metadata.xml b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/metadata.xml new file mode 100644 index 0000000000..9459ebc90e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-shells/bash/metadata.xml @@ -0,0 +1,32 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + + Log ALL commands typed into bash; should ONLY be + used in restricted environments such as honeypots + + + Build with custom malloc/free overwriting allocated/freed memory + + + Enable /dev/tcp/host/port redirection + + + Add support for loading builtins at runtime via 'enable' + + + Optimize the build using Profile Guided Optimization (PGO) + + + + mailto:bug-bash@gnu.org + https://tiswww.case.edu/php/chet/bash/NEWS + cpe:/a:gnu:bash + bash + + diff --git a/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/docker-20.10.ebuild b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/docker-20.10.ebuild new file mode 100644 index 0000000000..f8639f406b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/docker-20.10.ebuild @@ -0,0 +1,32 @@ +# Copyright (c) 2017-2018 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="Packages to be installed in a torcx image for Docker" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64" + +# Explicitly list all packages that will be built into the image. +RDEPEND=" + ~app-emulation/docker-20.10.24 + ~app-emulation/docker-cli-20.10.24 + ~app-emulation/containerd-1.6.20 + ~app-emulation/docker-proxy-0.8.0_p20210525 + ~app-emulation/docker-runc-1.1.5 + =dev-libs/libltdl-2.4.7 + ~sys-process/tini-0.19.0 +" + +S="${WORKDIR}" + +src_install() { + insinto /.torcx + newins "${FILESDIR}/${P}-manifest.json" manifest.json + + # Enable the Docker socket by default. + local unitdir=/usr/lib/systemd/system + dosym ../docker.socket "${unitdir}/sockets.target.wants/docker.socket" +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-17.03-manifest.json b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-17.03-manifest.json new file mode 100644 index 0000000000..190f9e8538 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-17.03-manifest.json @@ -0,0 +1,29 @@ +{ + "kind": "image-manifest-v0", + "value": { + "bin": [ + "/bin/containerd", + "/bin/containerd-shim", + "/bin/ctr", + "/bin/docker", + "/bin/docker-containerd", + "/bin/docker-containerd-shim", + "/bin/docker-init", + "/bin/docker-proxy", + "/bin/docker-runc", + "/bin/dockerd", + "/bin/runc", + "/bin/tini" + ], + "network": [ + "/lib/systemd/network/50-docker.network", + "/lib/systemd/network/90-docker-veth.network" + ], + "units": [ + "/lib/systemd/system/containerd.service", + "/lib/systemd/system/docker.service", + "/lib/systemd/system/docker.socket", + "/lib/systemd/system/sockets.target.wants" + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-19.03-manifest.json b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-19.03-manifest.json new file mode 100644 index 0000000000..190f9e8538 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-19.03-manifest.json @@ -0,0 +1,29 @@ +{ + "kind": "image-manifest-v0", + "value": { + "bin": [ + "/bin/containerd", + "/bin/containerd-shim", + "/bin/ctr", + "/bin/docker", + "/bin/docker-containerd", + "/bin/docker-containerd-shim", + "/bin/docker-init", + "/bin/docker-proxy", + "/bin/docker-runc", + "/bin/dockerd", + "/bin/runc", + "/bin/tini" + ], + "network": [ + "/lib/systemd/network/50-docker.network", + "/lib/systemd/network/90-docker-veth.network" + ], + "units": [ + "/lib/systemd/system/containerd.service", + "/lib/systemd/system/docker.service", + "/lib/systemd/system/docker.socket", + "/lib/systemd/system/sockets.target.wants" + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-20.10-manifest.json b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-20.10-manifest.json new file mode 100644 index 0000000000..418acbdcd9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-torcx/docker/files/docker-20.10-manifest.json @@ -0,0 +1,30 @@ +{ + "kind": "image-manifest-v0", + "value": { + "bin": [ + "/bin/containerd", + "/bin/containerd-shim", + "/bin/ctr", + "/bin/docker", + "/bin/docker-containerd", + "/bin/docker-containerd-shim", + "/bin/docker-init", + "/bin/docker-proxy", + "/bin/docker-runc", + "/bin/dockerd", + "/bin/runc", + "/bin/tini" + ], + "network": [ + "/lib/systemd/network/50-docker.network", + "/lib/systemd/network/90-docker-veth.network" + ], + "units": [ + "/lib/systemd/system/containerd.service", + "/lib/systemd/system/docker.service", + "/lib/systemd/system/docker.socket", + "/lib/systemd/system/sockets.target.wants", + "/lib/systemd/system/multi-user.target.wants" + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/README.md b/sdk_container/src/third_party/coreos-overlay/changelog/README.md new file mode 100644 index 0000000000..1467208cb0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/README.md @@ -0,0 +1,39 @@ +The `changelog` directory contains the description of the changes introduced +into the repository. The changes are essentially divided into 4 categories: +- changes: PRs bringing Changes and/or Enhancements +- bugfixes: PRs fixing existing issues +- security: PRs fixing security issues +- updates: PRs updating packages + +## How to add the file + +Based on the category the PR falls into create a new file in the respective +directory with the filename format `YYYY-MM-DD-.md` +(can be generated via: `$(date '+%Y-%m-%d')-.md`). +The file should contain a markdown bullet point entry (`- TEXT...`). + +Example for the bugfix section: + +``` +- The Torcx profile `docker-1.12-no` got fixed to reference the current Docker version instead of 19.03 which wasn't found on the image, causing Torcx to fail to provide Docker [coreos-overlay#1456](https://github.com/flatcar-linux/coreos-overlay/pull/1456) +``` + +The contents of the file should describe the changes in a concise manner, +and only contain information relevant for the end users. +(use the past tense for the change/bugfix description to avoid confusion with +the imperative voice for actions the user should do as a result). Security +fixes of upstream packages and package updates can be kept short in most cases +and follow a standard format. + +As `Updates` refer to the package updates, contents of the file should be of +the following format: `- Package Name ([Version](link to changelog))`. Example: +`- Linux ([5.10.77](https://lwn.net/Articles/874852/))`. Note the leading dash +that will create a bullet list in the rendered markdown. + +The security section follows this format: + +``` +- Package Name ([CVE-NUMBER](NIST-LINK), [CVE-NUMBER](NIST-LINK), ...) +``` + +E.g., `Linux ([CVE-2021-4002](https://nvd.nist.gov/vuln/detail/CVE-2021-4002), [CVE-2020-27820](https://nvd.nist.gov/vuln/detail/CVE-2020-27820))`. diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/.gitkeep b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/.gitkeep new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-01-torcx-docker-1.12-no-profile.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-01-torcx-docker-1.12-no-profile.md new file mode 100644 index 0000000000..dc8fc42a15 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-01-torcx-docker-1.12-no-profile.md @@ -0,0 +1 @@ +- The Torcx profile `docker-1.12-no` got fixed to reference the current Docker version instead of 19.03 which wasn't found on the image, causing Torcx to fail to provide Docker [PR#1456](https://github.com/flatcar-linux/coreos-overlay/pull/1456) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-09-set-kubenet-cbr0-unmanaged.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-09-set-kubenet-cbr0-unmanaged.md new file mode 100644 index 0000000000..95759ff32a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-09-set-kubenet-cbr0-unmanaged.md @@ -0,0 +1 @@ +- Excluded the Kubenet cbr0 interface from networkd's DHCP config and set it to Unmanaged to prevent interference and ensure that it is not part of the network online check ([PR#55](https://github.com/flatcar-linux/init/pull/55)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-ensure-xtables-lock-exists.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-ensure-xtables-lock-exists.md new file mode 100644 index 0000000000..b145ad3fb5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-ensure-xtables-lock-exists.md @@ -0,0 +1 @@ +- Ensured that the `/run/xtables.lock` coordination file exists for modifications of the xtables backend from containers (must be bind-mounted) or the `iptables-legacy` binaries on the host ([PR#57](https://github.com/flatcar-linux/init/pull/57)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-policycoreutils-fix-semodule-postinst.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-policycoreutils-fix-semodule-postinst.md new file mode 100644 index 0000000000..0b37dfe269 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-policycoreutils-fix-semodule-postinst.md @@ -0,0 +1 @@ +- SDK: Fixed build error popping up in the new SDK Container because `policycoreutils` used the wrong ROOT to update the SELinux store ([PR#1502](https://github.com/flatcar-linux/coreos-overlay/pull/1502)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-09-initrd-setup-root.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-09-initrd-setup-root.md new file mode 100644 index 0000000000..cfda2d073c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-09-initrd-setup-root.md @@ -0,0 +1 @@ +- The rootfs setup in the initrd now runs systemd-tmpfiles on every boot, not only when Ignition runs, to fix a dbus failure due to missing files ([Flatcar#944](https://github.com/flatcar/Flatcar/issues/944)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-12-dracut-ignition-emergency.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-12-dracut-ignition-emergency.md new file mode 100644 index 0000000000..bb2dabc85c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-12-dracut-ignition-emergency.md @@ -0,0 +1 @@ +- Fixed the dracut emergency Ignition log printing that had a scripting error causing the cat command to fail ([PR#33](https://github.com/flatcar-linux/bootengine/pull/33)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-13-policycoreutils-fix-root-path.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-13-policycoreutils-fix-root-path.md new file mode 100644 index 0000000000..77fb882557 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-13-policycoreutils-fix-root-path.md @@ -0,0 +1 @@ +- Fixed leak of SELinux policy store to the root filesystem top directory due to wrong store path in `policycoreutils` instead of `/var/lib/selinux` ([flatcar-linux/Flatcar#596](https://github.com/flatcar-linux/Flatcar/issues/596)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-14-enable-icmpv6-router-adverts.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-14-enable-icmpv6-router-adverts.md new file mode 100644 index 0000000000..59812f9b67 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-14-enable-icmpv6-router-adverts.md @@ -0,0 +1 @@ +- network: Accept ICMPv6 Router Advertisements to fix IPv6 address assignment in the default DHCP setting ([PR#51](https://github.com/flatcar-linux/init/pull/51), [PR#12](https://github.com/flatcar-linux/coreos-cloudinit/pull/12), [PR#30](https://github.com/flatcar-linux/bootengine/pull/30)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-26-flatcar-update-user-env-var.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-26-flatcar-update-user-env-var.md new file mode 100644 index 0000000000..b4dbb414b5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-01-26-flatcar-update-user-env-var.md @@ -0,0 +1 @@ +- flatcar-update: Stopped checking for the `USER` environment variable which may not be set in all environments, causing the script to fail unless a workaround was used like prepending an additional `sudo` invocation ([PR#58](https://github.com/flatcar-linux/init/pull/58)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-07-networkd-foreign-routes-cilium.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-07-networkd-foreign-routes-cilium.md new file mode 100644 index 0000000000..8faa6f3f90 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-07-networkd-foreign-routes-cilium.md @@ -0,0 +1 @@ +- Disabled the systemd-networkd settings `ManageForeignRoutes` and `ManageForeignRoutingPolicyRules` by default to ensure that CNIs like Cilium don't get their routes or routing policy rules discarded on network reconfiguration events ([Flatcar#620](https://github.com/flatcar-linux/Flatcar/issues/620)). diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-10-aws-arm64-console.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-10-aws-arm64-console.md new file mode 100644 index 0000000000..422b8c0a42 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-10-aws-arm64-console.md @@ -0,0 +1 @@ +- AWS: specify correct console (ttyS0) on kernel command line for ARM64 instances ([PR#1628](https://github.com/flatcar-linux/coreos-overlay/pull/1628)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-16-ignition-udev-race.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-16-ignition-udev-race.md new file mode 100644 index 0000000000..cbaeabef68 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-02-16-ignition-udev-race.md @@ -0,0 +1 @@ +- Prevented hitting races when creating filesystems in Ignition, these races caused boot failures like `fsck[1343]: Failed to stat /dev/disk/by-label/ROOT: No such file or directory` when creating a btrfs root filesystem ([PR#35](https://github.com/flatcar-linux/ignition/pull/35)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-02-kernel-ipsec-id0-revert.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-02-kernel-ipsec-id0-revert.md new file mode 100644 index 0000000000..9a7ddaedb8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-02-kernel-ipsec-id0-revert.md @@ -0,0 +1 @@ +- Reverted the Linux kernel change to forbid xfrm id 0 for IPSec state because it broke Cilium ([Flatcar#626](https://github.com/flatcar-linux/Flatcar/issues/626), [PR#1682](https://github.com/flatcar-linux/coreos-overlay/pull/1682)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-14-kernel-msi-revert.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-14-kernel-msi-revert.md new file mode 100644 index 0000000000..23ab59bbbc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-14-kernel-msi-revert.md @@ -0,0 +1 @@ +- Reverted the Linux kernel commit which broke networking on AWS instances which use Intel 82559 NIC (c4/m4) ([Flatcar#665](https://github.com/flatcar-linux/Flatcar/issues/665), [PR#1723](https://github.com/flatcar-linux/coreos-overlay/pull/1723)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-14-readd-initramfs-kernel-modules.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-14-readd-initramfs-kernel-modules.md new file mode 100644 index 0000000000..2f06bc37c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-03-14-readd-initramfs-kernel-modules.md @@ -0,0 +1 @@ +- Re-added the `brd drbd nbd rbd xen-blkfront zram libarc4 lru_cache zsmalloc` kernel modules to the initramfs since they were missing compared to the Flatcar 3033.2.x releases where the 5.10 kernel is used ([PR#40](https://github.com/flatcar-linux/bootengine)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-01-preserve-ignition-keys.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-01-preserve-ignition-keys.md new file mode 100644 index 0000000000..8b35c15ddc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-01-preserve-ignition-keys.md @@ -0,0 +1 @@ +- Made Ignition write the SSH keys into a file under `authorized_keys.d/ignition` again and added a call to `update-ssh-keys` after Ignition ran to create the merged `authorized_keys` file, which fixes the problem that keys added by Ignition get lost when `update-ssh-keys` runs ([PR#66](https://github.com/flatcar-linux/init/pull/66)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-12-fix-gcp-oem-service.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-12-fix-gcp-oem-service.md new file mode 100644 index 0000000000..a98195bbb0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-12-fix-gcp-oem-service.md @@ -0,0 +1 @@ +- GCE: Restored oem-gce.service functionality on GCP ([PR#1813](https://github.com/flatcar-linux/coreos-overlay/pull/1813)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-12-skip-ensure-sysext.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-12-skip-ensure-sysext.md new file mode 100644 index 0000000000..26833e5092 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-12-skip-ensure-sysext.md @@ -0,0 +1 @@ +- Skipped starting `ensure-sysext.service` if `systemd-sysext.service` won't be started, to prevent reporting a dependency failure ([Flatcar#710](https://github.com/flatcar-linux/Flatcar/issues/710)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-14-systemd-sysext-oem-mount.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-14-systemd-sysext-oem-mount.md new file mode 100644 index 0000000000..3c2d714b16 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-14-systemd-sysext-oem-mount.md @@ -0,0 +1 @@ +- Added a remount action as `systemd-sysext.service` drop-in unit to restore the OEM partition mount after the overlay mounts in `/usr` are done ([PR#69](https://github.com/flatcar-linux/init/pull/69)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-25-fix-dev-container-module-builds.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-25-fix-dev-container-module-builds.md new file mode 100644 index 0000000000..43e313a564 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-04-25-fix-dev-container-module-builds.md @@ -0,0 +1 @@ +- Added pahole to developer container, without it kernel modules built against /usr/src/linux may fail to probe with an 'invalid relocation target' error ([PR#1839](https://github.com/flatcar-linux/coreos-overlay/pull/1839)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-11-create-etc-flatcar-update.conf.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-11-create-etc-flatcar-update.conf.md new file mode 100644 index 0000000000..9f4c6b307b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-11-create-etc-flatcar-update.conf.md @@ -0,0 +1 @@ +- Ensured `/etc/flatcar/update.conf` exists because it happens to be used as flag file for Ansible ([init#71](https://github.com/flatcar-linux/init/pull/71)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-22-bootengine.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-22-bootengine.md new file mode 100644 index 0000000000..3a1e0b92dd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-22-bootengine.md @@ -0,0 +1 @@ +- Fixed Ignition's OEM ID to be `metal` to follow the Ignition upstream change which otherwise resulted in a broken boot when the Flatcar OEM ID `pxe` was used ([bootengine#45](https://github.com/flatcar-linux/bootengine/pull/45)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-22-ignition-networkd.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-22-ignition-networkd.md new file mode 100644 index 0000000000..3a46f99648 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-22-ignition-networkd.md @@ -0,0 +1 @@ +- Added `networkd` translation to `files` section when converting from Ignition 2.x to Ignition 3.x ([coreos-overlay#1910](https://github.com/flatcar-linux/coreos-overlay/pull/1910), [flatcar#741](https://github.com/flatcar-linux/Flatcar/issues/741)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-23-gcp-shutdown.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-23-gcp-shutdown.md new file mode 100644 index 0000000000..912d92e48a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-05-23-gcp-shutdown.md @@ -0,0 +1 @@ +- GCP: Fixed shutdown script execution ([coreos-overlay#1912](https://github.com/flatcar-linux/coreos-overlay/pull/1912), [flatcar#743](https://github.com/flatcar-linux/Flatcar/issues/743)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-06-30-remove-outdated-lts-motd.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-06-30-remove-outdated-lts-motd.md new file mode 100644 index 0000000000..1e2d3d6189 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-06-30-remove-outdated-lts-motd.md @@ -0,0 +1 @@ +- Removed outdated LTS channel information printed on login ([init#75](https://github.com/flatcar-linux/init/pull/75)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-13-ignition-kargs.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-13-ignition-kargs.md new file mode 100644 index 0000000000..1fa80f4c0b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-13-ignition-kargs.md @@ -0,0 +1 @@ +- The Ignition v3 kargs directive failed before when used with the generic image where no `grub.cfg` exists, this was fixed by creating it first ([bootengine#47](https://github.com/flatcar-linux/bootengine/pull/47)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-26-restore-resolv-conf.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-26-restore-resolv-conf.md new file mode 100644 index 0000000000..38a68be572 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-26-restore-resolv-conf.md @@ -0,0 +1 @@ +- Fixed `/etc/resolv.conf` symlink by pointing it at `resolv.conf` instead of `stub-resolv.conf`. This bug was present since the update to systemd v250 ([coreos-overlay#2057](https://github.com/flatcar-linux/coreos-overlay/pull/2057)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-27-ignition-networkd.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-27-ignition-networkd.md new file mode 100644 index 0000000000..f6471abe09 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-27-ignition-networkd.md @@ -0,0 +1 @@ +- Fixed space escaping in the `networkd` Ignition translation ([Flatcar#812](https://github.com/flatcar-linux/Flatcar/issues/812)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-27-networkd.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-27-networkd.md new file mode 100644 index 0000000000..33b11d885a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-07-27-networkd.md @@ -0,0 +1 @@ +- Excluded Wireguard interface from `systemd-networkd` default management ([Flatcar#808](https://github.com/flatcar-linux/Flatcar/issues/808)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-03-cloudinit.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-03-cloudinit.md new file mode 100644 index 0000000000..12a116e4fc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-03-cloudinit.md @@ -0,0 +1 @@ +- Added support for Openstack for cloud-init activation ([flatcar-linux/init#76](https://github.com/flatcar-linux/init/pull/76)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-03-systemd-networkd.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-03-systemd-networkd.md new file mode 100644 index 0000000000..3ef7ae6aa6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-03-systemd-networkd.md @@ -0,0 +1 @@ +- Fixed excluded interface type from default systemd-networkd configuration ([flatcar-linux/init#78](https://github.com/flatcar-linux/init/pull/78)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md new file mode 100644 index 0000000000..e256d7c336 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md @@ -0,0 +1 @@ +- AWS: added EKS support for version 1.22 and 1.23. ([coreos-overlay#2110](https://github.com/flatcar-linux/coreos-overlay/pull/2110), [Flatcar#829](https://github.com/flatcar-linux/Flatcar/issues/829)) \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-29-vmware-wireguard.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-29-vmware-wireguard.md new file mode 100644 index 0000000000..7142a1080a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-29-vmware-wireguard.md @@ -0,0 +1 @@ +- VMWare: excluded `wireguard` (and others) from `systemd-networkd` management. ([init#80](https://github.com/flatcar-linux/init/pull/80)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-30-equinix-metal-serial.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-30-equinix-metal-serial.md new file mode 100644 index 0000000000..8443b27da8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-08-30-equinix-metal-serial.md @@ -0,0 +1 @@ +- Equinix Metal: Fixed serial console settings for the `m3.small.x86` instance by expanding the GRUB check for `i386` to `x86_64` [coreos-overlay#2122](https://github.com/flatcar-linux/coreos-overlay/pull/2122) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-09-13-gettext.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-09-13-gettext.md new file mode 100644 index 0000000000..2d34861365 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-09-13-gettext.md @@ -0,0 +1 @@ +- Added back `gettext` to the OS ([Flatcar#849](https://github.com/flatcar-linux/Flatcar/issues/849)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-09-27-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-09-27-ignition.md new file mode 100644 index 0000000000..881de34a85 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-09-27-ignition.md @@ -0,0 +1 @@ +- Added merging of Ignition systemd duplicated units when auto-translating from Ignition 2 to Ignition 3. ([coreos-overlay#2187](https://github.com/flatcar/coreos-overlay/pull/2187)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-10-17-iommu-arm64.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-10-17-iommu-arm64.md new file mode 100644 index 0000000000..fdef805513 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-10-17-iommu-arm64.md @@ -0,0 +1 @@ +- Enabled IOMMU on arm64 kernels, the lack of which prevented some systems from booting ([coreos-overlay#2235](https://github.com/flatcar/coreos-overlay/pull/2235)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-11-10-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-11-10-ignition.md new file mode 100644 index 0000000000..f09179324b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-11-10-ignition.md @@ -0,0 +1 @@ +- Fixed Ignition btrfs forced formatting for OEM partition ([coreos-overlay#2277](https://github.com/flatcar/coreos-overlay/pull/2277)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-11-15-update-ssh-keys.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-11-15-update-ssh-keys.md new file mode 100644 index 0000000000..9748106f06 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-11-15-update-ssh-keys.md @@ -0,0 +1 @@ +- Added support for hardware security keys in update-ssh-keys ([update-ssh-keys#7](https://github.com/flatcar/update-ssh-keys/pull/7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-12-06-kernel-bug-847.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-12-06-kernel-bug-847.md new file mode 100644 index 0000000000..b66b0bcc0d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2022-12-06-kernel-bug-847.md @@ -0,0 +1 @@ +- Fix "ext4 deadlock under heavy I/O load" kernel issue. The patch for this is included provisionally while we wait for it to be merged upstream ([Flatcar#847](https://github.com/flatcar/Flatcar/issues/847), [coreos-overlay#2315](https://github.com/flatcar/coreos-overlay/pull/2315)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-01-03-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-01-03-ignition.md new file mode 100644 index 0000000000..75e880c3fc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-01-03-ignition.md @@ -0,0 +1 @@ +- Added back Ignition support for Vagrant [coreos-overlay#2351](https://github.com/flatcar/coreos-overlay/pull/2351) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-01-17-tmpfiles.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-01-17-tmpfiles.md new file mode 100644 index 0000000000..9b80c69f62 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-01-17-tmpfiles.md @@ -0,0 +1 @@ +- Fixed a regression (in Alpha/Beta) where machines failed to boot if they didn't have the `core` user or group in `/etc/passwd` or `/etc/group` ([baselayout#26](https://github.com/flatcar/baselayout/pull/26)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-02-20-preserve-kubernetes-interfaces.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-02-20-preserve-kubernetes-interfaces.md new file mode 100644 index 0000000000..ec2d3ee1b3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-02-20-preserve-kubernetes-interfaces.md @@ -0,0 +1 @@ +- Excluded the special Kubernetes network interfaces `nodelocaldns` and `kube-ipvs0` from being managed with systemd-networkd which interfered with the setup ([init#89](https://github.com/flatcar/init/pull/89)). diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-20-ignition-oem-partition.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-20-ignition-oem-partition.md new file mode 100644 index 0000000000..e6cf04392d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-20-ignition-oem-partition.md @@ -0,0 +1 @@ +- Restored the support to specify OEM partition files in Ignition when `/usr/share/oem` is given as initrd mount point ([bootengine#58](https://github.com/flatcar/bootengine/pull/58)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-23-journalctl-user.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-23-journalctl-user.md new file mode 100644 index 0000000000..4a0d81e9ed --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-23-journalctl-user.md @@ -0,0 +1 @@ +- Fixed `journalctl --user` permission issue ([Flatcar#989](https://github.com/flatcar/Flatcar/issues/989)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-30-var-log-journal.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-30-var-log-journal.md new file mode 100644 index 0000000000..e724343450 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2023-03-30-var-log-journal.md @@ -0,0 +1 @@ +- Ensured that `/var/log/journal/` is created early enough for systemd-journald to persist the logs on first boot ([bootengine#60](https://github.com/flatcar/bootengine/pull/60), [baselayout#29](https://github.com/flatcar/baselayout/pull/29)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/.gitkeep b/sdk_container/src/third_party/coreos-overlay/changelog/changes/.gitkeep new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-02-flatcar-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-02-flatcar-update.md new file mode 100644 index 0000000000..f33d4e7019 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-02-flatcar-update.md @@ -0,0 +1 @@ +- Added a new flatcar-update tool to the image to ease manual updates, rollbacks, channel/release jumping, and airgapped updates ([PR#53](https://github.com/flatcar-linux/init/pull/53)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-06-update-engine-kured.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-06-update-engine-kured.md new file mode 100644 index 0000000000..b3efd2bbc4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-06-update-engine-kured.md @@ -0,0 +1 @@ +- Update-engine now creates the `/run/reboot-required` flag file for [kured](https://github.com/weaveworks/kured) ([PR#15](https://github.com/flatcar-linux/update_engine/pull/15)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-16-exclude-bridge-and-tunnels-from-DHCP.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-16-exclude-bridge-and-tunnels-from-DHCP.md new file mode 100644 index 0000000000..c8de356f59 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-16-exclude-bridge-and-tunnels-from-DHCP.md @@ -0,0 +1 @@ +- Excluded special network interface devices like bridge, tunnel, vxlan, and veth devices from the default DHCP configuration to prevent networkd interference ([PR#56](https://github.com/flatcar-linux/init/pull/56)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-21-iproute-with-elf.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-21-iproute-with-elf.md new file mode 100644 index 0000000000..c84ccdfaad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-21-iproute-with-elf.md @@ -0,0 +1 @@ +- Backported `elf` support for `iproute2` [flatcar-linux/coreos-overlay#1256](https://github.com/flatcar-linux/coreos-overlay/pull/1526) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-22-kernel-config-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-22-kernel-config-update.md new file mode 100644 index 0000000000..21bc895753 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2021-12-22-kernel-config-update.md @@ -0,0 +1 @@ +- Added CONFIG_NF_CT_NETLINK_HELPER (for libnetfilter_cthelper), CONFIG_NET_VRF (for virtual routing and forwarding) and CONFIG_KEY_DH_OPERATIONS (for keyutils) to the kernel config ([PR#1524](https://github.com/flatcar-linux/coreos-overlay/pull/1524)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-01-31-enable-fips-kernel.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-01-31-enable-fips-kernel.md new file mode 100644 index 0000000000..bdb227d25c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-01-31-enable-fips-kernel.md @@ -0,0 +1 @@ +- Enabled the FIPS support for the Linux kernel, which users can now choose through a kernel parameter in `grub.cfg` (check it taking effect with `cat /proc/sys/crypto/fips_enabled`) ([PR#1602](https://github.com/flatcar-linux/coreos-overlay/pull/1602)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-15-auditd.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-15-auditd.md new file mode 100644 index 0000000000..155bbf5715 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-15-auditd.md @@ -0,0 +1,2 @@ +- Added `auditd.service` but left it disabled by default, a custom configuration can be created by removing `/etc/audit/auditd.conf` and replacing it with an own file ([PR#1636](https://github.com/flatcar-linux/coreos-overlay/pull/1636)) + diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-16-networkd-foreign-routes.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-16-networkd-foreign-routes.md new file mode 100644 index 0000000000..8d17efc203 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-16-networkd-foreign-routes.md @@ -0,0 +1 @@ +- The systemd-networkd `ManageForeignRoutes` and `ManageForeignRoutingPolicyRules` settings are now disabled through a drop-in file and thus can only be enabled again by a drop-in file under `/etc/systemd/networkd.conf.d/` because drop-in files take precedence over `/etc/systemd/networkd.conf` ([PR#61](https://github.com/flatcar-linux/init/pull/61)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-22-enable-kerberos-for-nfsv4.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-22-enable-kerberos-for-nfsv4.md new file mode 100644 index 0000000000..543c5735bb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-22-enable-kerberos-for-nfsv4.md @@ -0,0 +1 @@ +- Bring in dependencies for NFS4 with Kerberos both in kernel and userspace. Tested against NFS4.1 server. [PR#1664](https://github.com/flatcar-linux/coreos-overlay/pull/1664) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-28-merge-pro-features-into-regular-image.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-28-merge-pro-features-into-regular-image.md new file mode 100644 index 0000000000..1730c3ee55 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-28-merge-pro-features-into-regular-image.md @@ -0,0 +1 @@ +- Merge the Flatcar Pro features into the regular Flatcar images ([#1679](https://github.com/flatcar-linux/coreos-overlay/pull/1679)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-01-cgroupv1.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-01-cgroupv1.md new file mode 100644 index 0000000000..37ef4534ba --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-01-cgroupv1.md @@ -0,0 +1 @@ +- Added support for switching back to CGroupsV1 without requiring a reboot. Create `/etc/flatcar-cgroupv1` through ignition. ([PR#1666](https://github.com/flatcar-linux/coreos-overlay/pull/1666)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-07-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-07-ignition.md new file mode 100644 index 0000000000..42706e9719 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-07-ignition.md @@ -0,0 +1 @@ +- Besides Ignition v1 and v2 configurations, Ignition configurations with specification v3 (up to 3.3.0) are now supported, see the [docs section for details](https://www.flatcar.org/docs/latest/provisioning/ignition/specification/#ignition-v3) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-08-containerd-selinux.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-08-containerd-selinux.md new file mode 100644 index 0000000000..16909ec38a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-08-containerd-selinux.md @@ -0,0 +1,2 @@ +- Made SELinux enabled by default in default containerd configuration file. ([PR#1699](https://github.com/flatcar-linux/coreos-overlay/pull/1699)) + diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-09-rngd.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-09-rngd.md new file mode 100644 index 0000000000..9a525d89c0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-09-rngd.md @@ -0,0 +1 @@ +- Removed rngd.service because it is not essential anymore for the kernel to boot fast in VM environments ([PR#1700](https://github.com/flatcar-linux/coreos-overlay/pull/1700)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-17-enable-systemd-sysext.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-17-enable-systemd-sysext.md new file mode 100644 index 0000000000..21bc62fe38 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-17-enable-systemd-sysext.md @@ -0,0 +1 @@ +- Enabled `systemd-sysext.service` to activate systemd-sysext images on boot, to disable you will need to mask it. Also added a helper service `ensure-sysext.service` which reloads the systemd units to reevaluate the `sockets`, `timers`, and `multi-user` targets when `systemd-sysext.service` is (re)started, making it possible to enable units that are part of a sysext image ([PR#65](https://github.com/flatcar-linux/init/pull/65)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-17-lib-and-lib64-split.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-17-lib-and-lib64-split.md new file mode 100644 index 0000000000..d09e951e60 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-17-lib-and-lib64-split.md @@ -0,0 +1 @@ +- For amd64 `/usr/lib` used to be a symlink to `/usr/lib64` but now they became two separate folders as common in other distributions (and was the case for arm64 already). Compatibility symlinks exist in case `/usr/lib64` was used to access, e.g., the `modules` folder or the `systemd` folder ([PR#1713](https://github.com/flatcar-linux/coreos-overlay/pull/1713), [PR#255](https://github.com/flatcar-linux/scripts/pull/255)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-22-fips.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-22-fips.md new file mode 100644 index 0000000000..fd86567f6e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-22-fips.md @@ -0,0 +1 @@ +- Enabled FIPS mode for cryptsetup ([flatcar-linux/coreos-overlay#1747](https://github.com/flatcar-linux/coreos-overlay/pull/1747)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-24-bootengine.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-24-bootengine.md new file mode 100644 index 0000000000..f4e252e812 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-03-24-bootengine.md @@ -0,0 +1 @@ +- Added `cryptsetup` to the initramfs for the Ignition `luks` directive ([flatcar-linux/coreos-overlay#1760](https://github.com/flatcar-linux/coreos-overlay/pull/1760)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-07-google-gve.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-07-google-gve.md new file mode 100644 index 0000000000..1273d09105 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-07-google-gve.md @@ -0,0 +1 @@ +- GCE: Enabled GVE kernel driver, which adds support for Google Virtual NIC on GCP ([PR#1802](https://github.com/flatcar-linux/coreos-overlay/pull/1802)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-08-kernel.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-08-kernel.md new file mode 100644 index 0000000000..3e4640f401 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-08-kernel.md @@ -0,0 +1 @@ +- Enabled `CONFIG_INTEL_RAPL` on AMD64 Kernel config to compile `intel_rapl_common` module in order to allow power monitoring on modern Intel processors ([flatcar#coreos-overlay#1801](https://github.com/flatcar-linux/coreos-overlay/pull/1801)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-13-hostname-setup-with-afterburn.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-13-hostname-setup-with-afterburn.md new file mode 100644 index 0000000000..9e0b767028 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-13-hostname-setup-with-afterburn.md @@ -0,0 +1,2 @@ +- Azure: Set up `/etc/hostname` from instance metadata with Afterburn +- AWS EC2: Removed the setup of `/etc/hostname` from the instance metadata because it used a long FQDN but we can just use use the hostname set via DHCP ([Flatcar#707](https://github.com/flatcar-linux/Flatcar/issues/707)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-20-mantle-sdk.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-20-mantle-sdk.md new file mode 100644 index 0000000000..ff8b6b17e4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-04-20-mantle-sdk.md @@ -0,0 +1 @@ +- SDK: Dropped the mantle binaries (kola, ore, etc.) from the SDK, they are now provided by the `ghcr.io/flatcar-linux/mantle` image ([PR#1827](https://github.com/flatcar-linux/coreos-overlay/pull/1827), [PR#275](https://github.com/flatcar-linux/scripts/pull/275)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-05-12-bootengine.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-05-12-bootengine.md new file mode 100644 index 0000000000..4958555321 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-05-12-bootengine.md @@ -0,0 +1 @@ +- Added VMware networking configuration in the initramfs via guestinfo settings ([bootengine#44](https://github.com/flatcar-linux/bootengine/pull/44), [flatcar#717](https://github.com/flatcar-linux/Flatcar/issues/717)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-10-arm64-cifsutils-realmd-sssd-adcli-gotspi.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-10-arm64-cifsutils-realmd-sssd-adcli-gotspi.md new file mode 100644 index 0000000000..b15f3961ea --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-10-arm64-cifsutils-realmd-sssd-adcli-gotspi.md @@ -0,0 +1,3 @@ +- ARM64: Added [sssd](https://sssd.io/), [adcli](https://www.freedesktop.org/software/realmd/adcli/adcli.html) and realmd for ARM64 +- ARM64: Added [cifs-utils](https://wiki.samba.org/index.php/LinuxCIFS_utils) for ARM64 +- SDK / ARM64: Added [go-tspi](https://pkg.go.dev/github.com/coreos/go-tspi) bindings for ARM64 diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-12-efibootmgr.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-12-efibootmgr.md new file mode 100644 index 0000000000..eb6e360485 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-12-efibootmgr.md @@ -0,0 +1 @@ +- Added efibootmgr binary to the image ([coreos-overlay#1955](https://github.com/flatcar-linux/coreos-overlay/pull/1955)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-12-uefibootentry.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-12-uefibootentry.md new file mode 100644 index 0000000000..5f274466bc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-12-uefibootentry.md @@ -0,0 +1 @@ +- flatcar-install: Added option to create UEFI boot entry ([init#74](https://github.com/flatcar-linux/init/pull/74)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-14-ignition-rmcfg-vmware.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-14-ignition-rmcfg-vmware.md new file mode 100644 index 0000000000..32889bf0ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-14-ignition-rmcfg-vmware.md @@ -0,0 +1 @@ +- VMWare: Added `ignition-delete-config.service` to remove Ignition config from VM metadata, see also [here](https://coreos.github.io/ignition/operator-notes/#automatic-config-deletion) ([coreos-overlay#1948](https://github.com/flatcar-linux/coreos-overlay/pull/1948)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-16-kubernetes.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-16-kubernetes.md new file mode 100644 index 0000000000..d615197052 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-06-16-kubernetes.md @@ -0,0 +1 @@ +- Enabled `containerd.service` unit, `br_netfilter` and `overlay` modules by default to follow Kubernetes requirements ([coreos-overlay#1944](https://github.com/flatcar-linux/coreos-overlay/pull/1944), [init#72](https://github.com/flatcar-linux/init/pull/72)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-07-19-ncat.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-07-19-ncat.md new file mode 100644 index 0000000000..5c9853b90c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-07-19-ncat.md @@ -0,0 +1 @@ +- Added symlink from `nc` to `ncat`. `-q` option is [not yet supported](https://github.com/nmap/nmap/issues/2422) ([flatcar#545](https://github.com/flatcar-linux/Flatcar/issues/545)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-08-03-coreos-cloudinit.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-08-03-coreos-cloudinit.md new file mode 100644 index 0000000000..e60e3dec19 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-08-03-coreos-cloudinit.md @@ -0,0 +1 @@ +- Added AWS IMDSv2 support to coreos-cloudinit ([flatcar-linux/coreos-cloudinit#13](https://github.com/flatcar-linux/coreos-cloudinit/pull/13)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-08-11-new-image-signing-subkey.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-08-11-new-image-signing-subkey.md new file mode 100644 index 0000000000..6a37f7604b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-08-11-new-image-signing-subkey.md @@ -0,0 +1 @@ +- The new image signing subkey was added to the public key embedded into `flatcar-install` (the old expired on 10th August 2022), only an updated `flatcar-install` script can verify releases signed with the new key ([init#79](https://github.com/flatcar-linux/init/pull/79)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-09-08-emerge-gitclone.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-09-08-emerge-gitclone.md new file mode 100644 index 0000000000..d398ca6ad9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-09-08-emerge-gitclone.md @@ -0,0 +1 @@ +- emerge-gitclone: Migrate emerge-gitclone to use scripts repo tags and submodule refs diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-09-30-kernel-strip.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-09-30-kernel-strip.md new file mode 100644 index 0000000000..a87f3d3a68 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-09-30-kernel-strip.md @@ -0,0 +1 @@ +- Switched from `--strip-unneeded` to `--strip-debug` when installing kernel modules, which makes kernel stacktraces more accurate and makes debugging issues easier ([coreos-overlay#2196](https://github.com/flatcar/coreos-overlay/pull/2196)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-04-flatcar-update-new-flags.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-04-flatcar-update-new-flags.md new file mode 100644 index 0000000000..f891a17bec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-04-flatcar-update-new-flags.md @@ -0,0 +1 @@ +- The flatcar-update tool got two new flags to customize ports used on the host while updating flatcar ([PR#81](https://github.com/flatcar/init/pull/81)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-07-kernel-enable-bridge-conntrack.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-07-kernel-enable-bridge-conntrack.md new file mode 100644 index 0000000000..722108249b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-07-kernel-enable-bridge-conntrack.md @@ -0,0 +1 @@ +- Added `CONFIG_NF_CONNTRACK_BRIDGE` (for nf_conntrack_bridge) and `CONFIG_NFT_BRIDGE_META` (for nft_meta_bridge) to the kernel config to allow using conntrack rules for bridges in nftables and to match on bridge interface names ([coreos-overlay#2207](https://github.com/flatcar/coreos-overlay/pull/2207)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-19-openstack-metadata.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-19-openstack-metadata.md new file mode 100644 index 0000000000..66ad09b2f3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-19-openstack-metadata.md @@ -0,0 +1 @@ +- OpenStack: enabled `coreos-metadata-sshkeys@.service` to provision SSH keys from metadata. ([Flatcar#817](https://github.com/flatcar/Flatcar/issues/817), [coreos-overlay#2246](https://github.com/flatcar/coreos-overlay/pull/2246)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-24-kernel-options.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-24-kernel-options.md new file mode 100644 index 0000000000..0360f8e62e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-24-kernel-options.md @@ -0,0 +1,2 @@ +- Disable several arch specific arm64 kernel config options for unsupported platforms to save space on boot partition ([coreos-overlay#2239](https://github.com/flatcar/coreos-overlay/pull/2239)) +- Change CONFIG_WIREGUARD kernel option to module to save space on boot partition ([coreos-overlay#2239](https://github.com/flatcar/coreos-overlay/pull/2239)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-27-toolbox.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-27-toolbox.md new file mode 100644 index 0000000000..59255b3451 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-27-toolbox.md @@ -0,0 +1 @@ +- Toolbox now uses containerd to download and mount the image ([toolbox#7](https://github.com/flatcar/toolbox/pull/7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-09-systemd.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-09-systemd.md new file mode 100644 index 0000000000..493a082c6a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-09-systemd.md @@ -0,0 +1 @@ +- Switched systemd log reporting to the combined format of both unit description, as before, and now the unit name to easily find the unit ([coreos-overlay#2436](https://github.com/flatcar/coreos-overlay/pull/2436)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-20-etc-overlayfs.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-20-etc-overlayfs.md new file mode 100644 index 0000000000..cd3ade4ca4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-20-etc-overlayfs.md @@ -0,0 +1 @@ +- `/etc` is now set up as overlayfs with the original `/etc` folder being the store for changed files/directories and `/usr/share/flatcar/etc` providing the lower default directory tree ([bootengine#53](https://github.com/flatcar/bootengine/pull/53), [scripts#666](https://github.com/flatcar/scripts/pull/666)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-23-os-reset.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-23-os-reset.md new file mode 100644 index 0000000000..da4c6d1fb6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-23-os-reset.md @@ -0,0 +1 @@ +- Added a new `flatcar-reset` tool and boot logic for selective OS resets to reconfigure the system with Ignition while avoiding config drift ([bootengine#55](https://github.com/flatcar/bootengine/pull/55), [init#91](https://github.com/flatcar/init/pull/91)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-24-etc-overlay-cleanup.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-24-etc-overlay-cleanup.md new file mode 100644 index 0000000000..7c0975d34c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-02-24-etc-overlay-cleanup.md @@ -0,0 +1 @@ +- On boot any files in `/etc` that are the same as provided by the booted `/usr/share/flatcar/etc` default for the overlay mount on `/etc` are deleted to ensure that future updates of `/usr/share/flatcar/etc` are propagated - to opt out create `/etc/.no-dup-update` in case you want to keep an unmodified config file as is or because you fear that a future Flatcar version may use the same file as you at which point your copy is cleaned up and any other future Flatcar changes would be applied ([bootengine#54](https://github.com/flatcar/bootengine/pull/54)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-08-systemd-elfutils.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-08-systemd-elfutils.md new file mode 100644 index 0000000000..0ff4ebecbe --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-08-systemd-elfutils.md @@ -0,0 +1 @@ +- Enabled elfutils support in systemd-coredump. A backtrace will now appear in the journal for any program that dumps core ([coreos-overlay#2489](https://github.com/flatcar/coreos-overlay/pull/2489)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-09-image-signing-key.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-09-image-signing-key.md new file mode 100644 index 0000000000..2d7ed5d8a0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-09-image-signing-key.md @@ -0,0 +1 @@ +- Added new image signing pub key to `flatcar-install`, needed for download verification of releases built from July 2023 onwards, if you have copies of `flatcar-install` or the image signing pub key, you need to update them as well ([init#92](https://github.com/flatcar/init/pull/92)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-09-pigz.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-09-pigz.md new file mode 100644 index 0000000000..f5457e2a49 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-09-pigz.md @@ -0,0 +1 @@ +- Added `pigz` to the image, a parallel gzip implementation, which is useful to speed up the (de)compression for large container image imports/exports ([coreos-overlay#2504](https://github.com/flatcar/coreos-overlay/pull/2504)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-20-ignition-oem-files.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-20-ignition-oem-files.md new file mode 100644 index 0000000000..7d6471b475 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-03-20-ignition-oem-files.md @@ -0,0 +1 @@ +- Specifying the OEM filesystem in Ignition to write files to `/usr/share/oem` is not needed anymore ([bootengine#58](https://github.com/flatcar/bootengine/pull/58)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-04-05-os-reset-backup.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-04-05-os-reset-backup.md new file mode 100644 index 0000000000..db14a69a17 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2023-04-05-os-reset-backup.md @@ -0,0 +1 @@ +- Improved the OS reset tool to offer preview, backup and restore ([init#94](https://github.com/flatcar/init/pull/94)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/.gitkeep b/sdk_container/src/third_party/coreos-overlay/changelog/security/.gitkeep new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-11-30-golang-text-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-11-30-golang-text-ignition.md new file mode 100644 index 0000000000..a833c13b71 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-11-30-golang-text-ignition.md @@ -0,0 +1 @@ +- Ignition ([CVE-2020-14040](https://nvd.nist.gov/vuln/detail/CVE-2020-14040), [CVE-2021-38561](https://nvd.nist.gov/vuln/detail/CVE-2021-38561)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-02-qemu-6.1.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-02-qemu-6.1.md new file mode 100644 index 0000000000..ce82b3aacd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-02-qemu-6.1.md @@ -0,0 +1 @@ +- QEMU ([CVE-2020-35504](https://nvd.nist.gov/vuln/detail/CVE-2020-35504), [CVE-2020-35505](https://nvd.nist.gov/vuln/detail/CVE-2020-35505), [CVE-2020-35506](https://nvd.nist.gov/vuln/detail/CVE-2020-35506), [CVE-2020-35517](https://nvd.nist.gov/vuln/detail/CVE-2020-35517), [CVE-2021-20203](https://nvd.nist.gov/vuln/detail/CVE-2021-20203), [CVE-2021-20255](https://nvd.nist.gov/vuln/detail/CVE-2021-20255), [CVE-2021-20257](https://nvd.nist.gov/vuln/detail/CVE-2021-20257), [CVE-2021-20263](https://nvd.nist.gov/vuln/detail/CVE-2021-20263), [CVE-2021-3409](https://nvd.nist.gov/vuln/detail/CVE-2021-3409), [CVE-2021-3416](https://nvd.nist.gov/vuln/detail/CVE-2021-3416), [CVE-2021-3527](https://nvd.nist.gov/vuln/detail/CVE-2021-3527), [CVE-2021-3544](https://nvd.nist.gov/vuln/detail/CVE-2021-3544), [CVE-2021-3545](https://nvd.nist.gov/vuln/detail/CVE-2021-3545), [CVE-2021-3546](https://nvd.nist.gov/vuln/detail/CVE-2021-3546), [CVE-2021-3582](https://nvd.nist.gov/vuln/detail/CVE-2021-3582), [CVE-2021-3607](https://nvd.nist.gov/vuln/detail/CVE-2021-3607), [CVE-2021-3608](https://nvd.nist.gov/vuln/detail/CVE-2021-3608), [CVE-2021-3682](https://nvd.nist.gov/vuln/detail/CVE-2021-3682)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-03-mantle-golang-crypto-text.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-03-mantle-golang-crypto-text.md new file mode 100644 index 0000000000..aba9daefcd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-03-mantle-golang-crypto-text.md @@ -0,0 +1 @@ +- SDK: mantle ([CVE-2021-3121](https://nvd.nist.gov/vuln/detail/CVE-2021-3121), [CVE-2021-38561](https://nvd.nist.gov/vuln/detail/CVE-2021-38561), [CVE-2021-43565](https://nvd.nist.gov/vuln/detail/CVE-2021-43565)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-03-torcx-golang-crypto-text.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-03-torcx-golang-crypto-text.md new file mode 100644 index 0000000000..f96bef56c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-03-torcx-golang-crypto-text.md @@ -0,0 +1 @@ +- torcx ([CVE-2021-38561](https://nvd.nist.gov/vuln/detail/CVE-2021-38561), [CVE-2021-43565](https://nvd.nist.gov/vuln/detail/CVE-2021-43565)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-09-golang-1.17.5.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-09-golang-1.17.5.md new file mode 100644 index 0000000000..8e34f9a441 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-09-golang-1.17.5.md @@ -0,0 +1 @@ +- Go ([CVE-2021-44716](https://nvd.nist.gov/vuln/detail/CVE-2021-44716), [CVE-2021-44717](https://nvd.nist.gov/vuln/detail/CVE-2021-44717)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-09-openssh-8.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-09-openssh-8.8.md new file mode 100644 index 0000000000..b1a7178872 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-12-09-openssh-8.8.md @@ -0,0 +1 @@ +- OpenSSH ([CVE-2021-41617](https://nvd.nist.gov/vuln/detail/CVE-2021-41617)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-07-containerd-1.5.9.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-07-containerd-1.5.9.md new file mode 100644 index 0000000000..0fa563d5e1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-07-containerd-1.5.9.md @@ -0,0 +1 @@ +- containerd ([CVE-2021-43816](https://nvd.nist.gov/vuln/detail/CVE-2021-43816)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-09-systemd-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-09-systemd-update.md new file mode 100644 index 0000000000..8b6586e0ed --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-09-systemd-update.md @@ -0,0 +1 @@ +- systemd ([CVE-2022-3821](https://nvd.nist.gov/vuln/detail/CVE-2022-3821), [CVE-2022-4415](https://nvd.nist.gov/vuln/detail/CVE-2022-4415)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-17-openssl301.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-17-openssl301.md new file mode 100644 index 0000000000..cecddd3aa9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-17-openssl301.md @@ -0,0 +1 @@ +- openssl ([CVE-2021-4044](https://nvd.nist.gov/vuln/detail/CVE-2021-4044)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-21-rust-1.58.1.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-21-rust-1.58.1.md new file mode 100644 index 0000000000..b26290b7f8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-21-rust-1.58.1.md @@ -0,0 +1 @@ +- SDK: rust ([CVE-2022-21658](https://nvd.nist.gov/vuln/detail/CVE-2022-21658)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-24-systemd-250.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-24-systemd-250.md new file mode 100644 index 0000000000..db779a8f8c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-24-systemd-250.md @@ -0,0 +1 @@ +- systemd ([CVE-2021-3997](https://nvd.nist.gov/vuln/detail/CVE-2021-3997)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-27-polkit.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-27-polkit.md new file mode 100644 index 0000000000..f930a00379 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-27-polkit.md @@ -0,0 +1 @@ +- polkit ([CVE-2021-4034](https://nvd.nist.gov/vuln/detail/CVE-2021-4034)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-28-glibc-2.33-r10.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-28-glibc-2.33-r10.md new file mode 100644 index 0000000000..61d88af1f4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-01-28-glibc-2.33-r10.md @@ -0,0 +1 @@ +- glibc ([CVE-2021-3998](https://nvd.nist.gov/vuln/detail/CVE-2021-3998), [CVE-2021-3999](https://nvd.nist.gov/vuln/detail/CVE-2021-3999), [CVE-2022-23218](https://nvd.nist.gov/vuln/detail/CVE-2022-23218), [CVE-2022-23219](https://nvd.nist.gov/vuln/detail/CVE-2022-23219)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-14-go-1.17.7.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-14-go-1.17.7.md new file mode 100644 index 0000000000..64ffd2b669 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-14-go-1.17.7.md @@ -0,0 +1 @@ +- go ([CVE-2022-23806](https://nvd.nist.gov/vuln/detail/CVE-2022-23806), [CVE-2022-23772](https://nvd.nist.gov/vuln/detail/CVE-2022-23772), [CVE-2022-23773](https://nvd.nist.gov/vuln/detail/CVE-2022-23773)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-17-nvidia-drivers-510.47.03.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-17-nvidia-drivers-510.47.03.md new file mode 100644 index 0000000000..83bf231a6f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-17-nvidia-drivers-510.47.03.md @@ -0,0 +1 @@ +- nvidia-drivers ([CVE-2022-21814](https://nvd.nist.gov/vuln/detail/CVE-2022-21814), [CVE-2022-21813](https://nvd.nist.gov/vuln/detail/CVE-2022-21813)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-18-shadow-4.11.1.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-18-shadow-4.11.1.md new file mode 100644 index 0000000000..2b4b1d02cf --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-02-18-shadow-4.11.1.md @@ -0,0 +1 @@ +- shadow ([CVE-2013-4235](https://nvd.nist.gov/vuln/detail/CVE-2013-4235)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-09-containerd-1.6.1.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-09-containerd-1.6.1.md new file mode 100644 index 0000000000..cfeab84903 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-09-containerd-1.6.1.md @@ -0,0 +1 @@ +- containerd ([CVE-2022-23648](https://nvd.nist.gov/vuln/detail/CVE-2022-23648)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-11-go-1.17.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-11-go-1.17.8.md new file mode 100644 index 0000000000..28ed4e09f9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-11-go-1.17.8.md @@ -0,0 +1 @@ +- go ([CVE-2022-24921](https://nvd.nist.gov/vuln/detail/CVE-2022-24921)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-16-openssl.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-16-openssl.md new file mode 100644 index 0000000000..df73230713 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-16-openssl.md @@ -0,0 +1 @@ +- openssl ([CVE-2022-0778](https://nvd.nist.gov/vuln/detail/CVE-2022-0778)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-18-intel-microcode-20220207_p20220207.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-18-intel-microcode-20220207_p20220207.md new file mode 100644 index 0000000000..6a07feedc4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-18-intel-microcode-20220207_p20220207.md @@ -0,0 +1 @@ +- intel-microcode ([CVE-2021-0127](https://nvd.nist.gov/vuln/detail/CVE-2021-0127), [CVE-2021-0146](https://nvd.nist.gov/vuln/detail/CVE-2021-0146)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-24-containerd-1.6.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-24-containerd-1.6.2.md new file mode 100644 index 0000000000..72ec0a4252 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-03-24-containerd-1.6.2.md @@ -0,0 +1 @@ +- containerd ([CVE-2022-24769](https://nvd.nist.gov/vuln/detail/CVE-2022-24769)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-04-13-go-1.17.9.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-04-13-go-1.17.9.md new file mode 100644 index 0000000000..9143483542 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-04-13-go-1.17.9.md @@ -0,0 +1 @@ +- go ([CVE-2022-24675](https://nvd.nist.gov/vuln/detail/CVE-2022-24675)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-06-torcx-golang-crypto.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-06-torcx-golang-crypto.md new file mode 100644 index 0000000000..503cf22ab2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-06-torcx-golang-crypto.md @@ -0,0 +1 @@ +- torcx ([CVE-2022-27191](https://nvd.nist.gov/vuln/detail/CVE-2022-27191)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-11-go-1.18.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-11-go-1.18.2.md new file mode 100644 index 0000000000..ebc598fc99 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-11-go-1.18.2.md @@ -0,0 +1 @@ +- go ([CVE-2022-29526](https://nvd.nist.gov/vuln/detail/CVE-2022-29526)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-12-runc-1.1.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-12-runc-1.1.2.md new file mode 100644 index 0000000000..41df80f923 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-12-runc-1.1.2.md @@ -0,0 +1 @@ +- runc ([CVE-2022-29162](https://nvd.nist.gov/vuln/detail/CVE-2022-29162)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-17-ncurses-6.3_p20220423.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-17-ncurses-6.3_p20220423.md new file mode 100644 index 0000000000..efa0db9d0d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-17-ncurses-6.3_p20220423.md @@ -0,0 +1 @@ +- ncurses ([CVE-2022-29458](https://nvd.nist.gov/vuln/detail/CVE-2022-29458)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-17-openssl-3.0.3.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-17-openssl-3.0.3.md new file mode 100644 index 0000000000..9a7855c46c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-17-openssl-3.0.3.md @@ -0,0 +1 @@ +- openssl ([CVE-2022-1292](https://nvd.nist.gov/vuln/detail/CVE-2022-1292), [CVE-2022-1343](https://nvd.nist.gov/vuln/detail/CVE-2022-1343), [CVE-2022-1434](https://nvd.nist.gov/vuln/detail/CVE-2022-1434), [CVE-2022-1473](https://nvd.nist.gov/vuln/detail/CVE-2022-1473)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-18-docker-20.10.16.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-18-docker-20.10.16.md new file mode 100644 index 0000000000..1e2655baa0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-18-docker-20.10.16.md @@ -0,0 +1 @@ +- Docker ([CVE-2022-29526](https://nvd.nist.gov/vuln/detail/CVE-2022-29526)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-19-nvidia-drivers-510.73.05.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-19-nvidia-drivers-510.73.05.md new file mode 100644 index 0000000000..88b780d62d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-05-19-nvidia-drivers-510.73.05.md @@ -0,0 +1 @@ +- nvidia-drivers ([CVE-2022-28181](https://nvd.nist.gov/vuln/detail/CVE-2022-28181), [CVE-2022-28183](https://nvd.nist.gov/vuln/detail/CVE-2022-28183), [CVE-2022-28184](https://nvd.nist.gov/vuln/detail/CVE-2022-28184), [CVE-2022-28185](https://nvd.nist.gov/vuln/detail/CVE-2022-28185)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-09-containerd-1.6.6.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-09-containerd-1.6.6.md new file mode 100644 index 0000000000..c97dc4b244 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-09-containerd-1.6.6.md @@ -0,0 +1 @@ +- containerd ([CVE-2022-31030](https://nvd.nist.gov/vuln/detail/CVE-2022-31030)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-09-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-09-ignition.md new file mode 100644 index 0000000000..2477009969 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-09-ignition.md @@ -0,0 +1 @@ +- ignition ([CVE-2022-1706](https://nvd.nist.gov/vuln/detail/CVE-2022-1706)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-17-intel-microcode-20220510_p20220508.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-17-intel-microcode-20220510_p20220508.md new file mode 100644 index 0000000000..cdc5500bf8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-06-17-intel-microcode-20220510_p20220508.md @@ -0,0 +1 @@ +- intel-microcode ([CVE-2022-21151](https://nvd.nist.gov/vuln/detail/CVE-2022-21151)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-07-11-gnupg-2.2.35.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-07-11-gnupg-2.2.35.md new file mode 100644 index 0000000000..a13b6994c0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-07-11-gnupg-2.2.35.md @@ -0,0 +1 @@ +- gnupg ([CVE-2022-34903](https://nvd.nist.gov/vuln/detail/CVE-2022-34903)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-07-13-go-1.18.4-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-07-13-go-1.18.4-update.md new file mode 100644 index 0000000000..491e0b4e84 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-07-13-go-1.18.4-update.md @@ -0,0 +1 @@ +- Go ([CVE-2022-1705](https://nvd.nist.gov/vuln/detail/CVE-2022-1705), [CVE-2022-1962](https://nvd.nist.gov/vuln/detail/CVE-2022-1962), [CVE-2022-28131](https://nvd.nist.gov/vuln/detail/CVE-2022-28131), [CVE-2022-30630](https://nvd.nist.gov/vuln/detail/CVE-2022-30630), [CVE-2022-30631](https://nvd.nist.gov/vuln/detail/CVE-2022-30631), [CVE-2022-30632](https://nvd.nist.gov/vuln/detail/CVE-2022-30632), [CVE-2022-30633](https://nvd.nist.gov/vuln/detail/CVE-2022-30633), [CVE-2022-30635](https://nvd.nist.gov/vuln/detail/CVE-2022-30635), [CVE-2022-32148](https://nvd.nist.gov/vuln/detail/CVE-2022-32148)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-03-libtirpc-CVE-2021-46828.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-03-libtirpc-CVE-2021-46828.md new file mode 100644 index 0000000000..8c0f5fbbdc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-03-libtirpc-CVE-2021-46828.md @@ -0,0 +1 @@ +- libtirpc ([CVE-2021-46828](https://nvd.nist.gov/vuln/detail/CVE-2021-46828)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-08-go-1.18.5-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-08-go-1.18.5-update.md new file mode 100644 index 0000000000..7f09219c98 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-08-go-1.18.5-update.md @@ -0,0 +1 @@ +- Go ([CVE-2022-32189](https://nvd.nist.gov/vuln/detail/CVE-2022-32189)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-23-open-vm-tools-12.1.0.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-23-open-vm-tools-12.1.0.md new file mode 100644 index 0000000000..c8b456bb1d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-23-open-vm-tools-12.1.0.md @@ -0,0 +1 @@ +- open-vm-tools ([CVE-2022-31676](https://nvd.nist.gov/vuln/detail/CVE-2022-31676)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-26-shadow-4.12.3.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-26-shadow-4.12.3.md new file mode 100644 index 0000000000..2b4b1d02cf --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-08-26-shadow-4.12.3.md @@ -0,0 +1 @@ +- shadow ([CVE-2013-4235](https://nvd.nist.gov/vuln/detail/CVE-2013-4235)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-06-polkit.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-06-polkit.md new file mode 100644 index 0000000000..d8ae3f33eb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-06-polkit.md @@ -0,0 +1 @@ +- polkit ([CVE-2021-4115](https://nvd.nist.gov/vuln/detail/CVE-2021-4115)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-13-go-1.18.6-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-13-go-1.18.6-update.md new file mode 100644 index 0000000000..1717fd8928 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-13-go-1.18.6-update.md @@ -0,0 +1 @@ +- Go ([CVE-2022-27664](https://nvd.nist.gov/vuln/detail/CVE-2022-27664), [CVE-2022-32190](https://nvd.nist.gov/vuln/detail/CVE-2022-32190)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-14-docker-20.10.18.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-14-docker-20.10.18.md new file mode 100644 index 0000000000..9ea95eb20e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-14-docker-20.10.18.md @@ -0,0 +1 @@ +- Docker ([CVE-2022-36109](https://nvd.nist.gov/vuln/detail/CVE-2022-36109)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-20-vim-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-20-vim-update.md new file mode 100644 index 0000000000..18149971f3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-09-20-vim-update.md @@ -0,0 +1 @@ +- vim ([CVE-2022-2042](https://nvd.nist.gov/vuln/detail/CVE-2022-2042), [CVE-2022-2124](https://nvd.nist.gov/vuln/detail/CVE-2022-2124), [CVE-2022-2125](https://nvd.nist.gov/vuln/detail/CVE-2022-2125), [CVE-2022-2126](https://nvd.nist.gov/vuln/detail/CVE-2022-2126), [CVE-2022-2129](https://nvd.nist.gov/vuln/detail/CVE-2022-2129), [CVE-2022-2175](https://nvd.nist.gov/vuln/detail/CVE-2022-2175), [CVE-2022-2182](https://nvd.nist.gov/vuln/detail/CVE-2022-2182), [CVE-2022-2183](https://nvd.nist.gov/vuln/detail/CVE-2022-2183), [CVE-2022-2206](https://nvd.nist.gov/vuln/detail/CVE-2022-2206), [CVE-2022-2207](https://nvd.nist.gov/vuln/detail/CVE-2022-2207), [CVE-2022-2208](https://nvd.nist.gov/vuln/detail/CVE-2022-2208), [CVE-2022-2210](https://nvd.nist.gov/vuln/detail/CVE-2022-2210), [CVE-2022-2231](https://nvd.nist.gov/vuln/detail/CVE-2022-2231), [CVE-2022-2257](https://nvd.nist.gov/vuln/detail/CVE-2022-2257), [CVE-2022-2264](https://nvd.nist.gov/vuln/detail/CVE-2022-2264), [CVE-2022-2284](https://nvd.nist.gov/vuln/detail/CVE-2022-2284), [CVE-2022-2285](https://nvd.nist.gov/vuln/detail/CVE-2022-2285), [CVE-2022-2286](https://nvd.nist.gov/vuln/detail/CVE-2022-2286), [CVE-2022-2287](https://nvd.nist.gov/vuln/detail/CVE-2022-2287), [CVE-2022-2288](https://nvd.nist.gov/vuln/detail/CVE-2022-2288), [CVE-2022-2289](https://nvd.nist.gov/vuln/detail/CVE-2022-2289), [CVE-2022-2304](https://nvd.nist.gov/vuln/detail/CVE-2022-2304), [CVE-2022-2343](https://nvd.nist.gov/vuln/detail/CVE-2022-2343), [CVE-2022-2344](https://nvd.nist.gov/vuln/detail/CVE-2022-2344), [CVE-2022-2345](https://nvd.nist.gov/vuln/detail/CVE-2022-2345), [CVE-2022-2522](https://nvd.nist.gov/vuln/detail/CVE-2022-2522), [CVE-2022-2816](https://nvd.nist.gov/vuln/detail/CVE-2022-2816), [CVE-2022-2817](https://nvd.nist.gov/vuln/detail/CVE-2022-2817), [CVE-2022-2819](https://nvd.nist.gov/vuln/detail/CVE-2022-2819), [CVE-2022-2845](https://nvd.nist.gov/vuln/detail/CVE-2022-2845), [CVE-2022-2849](https://nvd.nist.gov/vuln/detail/CVE-2022-2849), [CVE-2022-2862](https://nvd.nist.gov/vuln/detail/CVE-2022-2862), [CVE-2022-2874](https://nvd.nist.gov/vuln/detail/CVE-2022-2874), [CVE-2022-2889](https://nvd.nist.gov/vuln/detail/CVE-2022-2889), [CVE-2022-2923](https://nvd.nist.gov/vuln/detail/CVE-2022-2923), [CVE-2022-2946](https://nvd.nist.gov/vuln/detail/CVE-2022-2946), [CVE-2022-2980](https://nvd.nist.gov/vuln/detail/CVE-2022-2980), [CVE-2022-2982](https://nvd.nist.gov/vuln/detail/CVE-2022-2982), [CVE-2022-3016](https://nvd.nist.gov/vuln/detail/CVE-2022-3016), [CVE-2022-3099](https://nvd.nist.gov/vuln/detail/CVE-2022-3099), [CVE-2022-3134](https://nvd.nist.gov/vuln/detail/CVE-2022-3134), [CVE-2022-3153](https://nvd.nist.gov/vuln/detail/CVE-2022-3153)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-dbus-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-dbus-update.md new file mode 100644 index 0000000000..6ec81db562 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-dbus-update.md @@ -0,0 +1 @@ +- dbus ([CVE-2022-42010](https://nvd.nist.gov/vuln/detail/CVE-2022-42010), [CVE-2022-42011](https://nvd.nist.gov/vuln/detail/CVE-2022-42011), [CVE-2022-42012](https://nvd.nist.gov/vuln/detail/CVE-2022-42012)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-logrotate-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-logrotate-update.md new file mode 100644 index 0000000000..0de49c50a4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-logrotate-update.md @@ -0,0 +1 @@ +- logrotate ([CVE-2022-1348](https://nvd.nist.gov/vuln/detail/CVE-2022-1348)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-rust-1.64.0.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-rust-1.64.0.md new file mode 100644 index 0000000000..51dfe60d66 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-11-rust-1.64.0.md @@ -0,0 +1 @@ +- SDK: rust ([CVE-2022-36113](https://nvd.nist.gov/vuln/detail/CVE-2022-36113), [CVE-2022-36114](https://nvd.nist.gov/vuln/detail/CVE-2022-36114)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-20-curl-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-20-curl-update.md new file mode 100644 index 0000000000..b793942929 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-10-20-curl-update.md @@ -0,0 +1 @@ +- curl ([CVE-2022-35252](https://nvd.nist.gov/vuln/detail/CVE-2022-35252)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-11-01-openssl-fix.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-11-01-openssl-fix.md new file mode 100644 index 0000000000..06478ef5f6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-11-01-openssl-fix.md @@ -0,0 +1 @@ +- OpenSSL ([CVE-2022-3602](https://nvd.nist.gov/vuln/detail/CVE-2022-3602), [CVE-2022-3786](https://nvd.nist.gov/vuln/detail/CVE-2022-3786)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-02-sudo-1.9.12_p1.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-02-sudo-1.9.12_p1.md new file mode 100644 index 0000000000..0c0dc1403f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-02-sudo-1.9.12_p1.md @@ -0,0 +1 @@ +- sudo ([CVE-2022-43995](https://nvd.nist.gov/vuln/detail/CVE-2022-43995)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-09-containerd-1.6.12.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-09-containerd-1.6.12.md new file mode 100644 index 0000000000..8672ea4b2f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-09-containerd-1.6.12.md @@ -0,0 +1 @@ +- containerd ([CVE-2022-23471](https://nvd.nist.gov/vuln/detail/CVE-2022-23471)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-12-go-1.19.4.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-12-go-1.19.4.md new file mode 100644 index 0000000000..50f141be35 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2022-12-12-go-1.19.4.md @@ -0,0 +1 @@ +- Go ([CVE-2022-41717](https://nvd.nist.gov/vuln/detail/CVE-2022-41717)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-01-17-rust-1.66.1.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-01-17-rust-1.66.1.md new file mode 100644 index 0000000000..7453e391db --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-01-17-rust-1.66.1.md @@ -0,0 +1 @@ +- SDK: rust ([CVE-2022-46176](https://nvd.nist.gov/vuln/detail/CVE-2022-46176)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-02-sudo-1.9.12_p2.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-02-sudo-1.9.12_p2.md new file mode 100644 index 0000000000..49ade26cc7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-02-sudo-1.9.12_p2.md @@ -0,0 +1 @@ +- sudo ([CVE-2023-22809](https://nvd.nist.gov/vuln/detail/CVE-2023-22809)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-08-openssl-3.0.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-08-openssl-3.0.8.md new file mode 100644 index 0000000000..c34c4ef379 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-08-openssl-3.0.8.md @@ -0,0 +1 @@ +- OpenSSL ([CVE-2022-4203](https://nvd.nist.gov/vuln/detail/CVE-2022-4203), [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0216](https://nvd.nist.gov/vuln/detail/CVE-2023-0216), [CVE-2023-0217](https://nvd.nist.gov/vuln/detail/CVE-2023-0217), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0401](https://nvd.nist.gov/vuln/detail/CVE-2023-0401)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-14-openssh-9.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-14-openssh-9.2.md new file mode 100644 index 0000000000..2f52146fea --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-14-openssh-9.2.md @@ -0,0 +1 @@ +- OpenSSH ([CVE-2023-25136](https://nvd.nist.gov/vuln/detail/CVE-2023-25136)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-17-containerd-1.6.18.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-17-containerd-1.6.18.md new file mode 100644 index 0000000000..3564fd8e1c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-17-containerd-1.6.18.md @@ -0,0 +1 @@ +- containerd ([CVE-2023-25153](https://nvd.nist.gov/vuln/detail/CVE-2023-25153), [CVE-2023-25173](https://nvd.nist.gov/vuln/detail/CVE-2023-25173)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-20-go-1.19.6.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-20-go-1.19.6.md new file mode 100644 index 0000000000..d003b42efd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-20-go-1.19.6.md @@ -0,0 +1 @@ +- Go ([CVE-2022-41723](https://nvd.nist.gov/vuln/detail/CVE-2022-41723), [CVE-2022-41724](https://nvd.nist.gov/vuln/detail/CVE-2022-41724), [CVE-2022-41725](https://nvd.nist.gov/vuln/detail/CVE-2022-41725)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-23-torcx-golang-text.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-23-torcx-golang-text.md new file mode 100644 index 0000000000..799122a837 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-02-23-torcx-golang-text.md @@ -0,0 +1 @@ +- torcx ([CVE-2022-32149](https://nvd.nist.gov/vuln/detail/CVE-2022-32149)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-03-13-go-1.19.7.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-03-13-go-1.19.7.md new file mode 100644 index 0000000000..88406768ea --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-03-13-go-1.19.7.md @@ -0,0 +1 @@ +- Go ([CVE-2023-24532](https://nvd.nist.gov/vuln/detail/CVE-2023-24532)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-docker-20.10.24.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-docker-20.10.24.md new file mode 100644 index 0000000000..9a795916b3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-docker-20.10.24.md @@ -0,0 +1 @@ +- Docker ([CVE-2023-28840](https://nvd.nist.gov/vuln/detail/CVE-2023-28840), [CVE-2023-28841](https://nvd.nist.gov/vuln/detail/CVE-2023-28841), [CVE-2023-28842](https://nvd.nist.gov/vuln/detail/CVE-2023-28842)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-go-1.19.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-go-1.19.8.md new file mode 100644 index 0000000000..75f332f906 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-go-1.19.8.md @@ -0,0 +1 @@ +- Go ([CVE-2023-24534](https://nvd.nist.gov/vuln/detail/CVE-2023-24534), [CVE-2023-24536](https://nvd.nist.gov/vuln/detail/CVE-2023-24536), [CVE-2023-24537](https://nvd.nist.gov/vuln/detail/CVE-2023-24537), [CVE-2023-24538](https://nvd.nist.gov/vuln/detail/CVE-2023-24538)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-runc-1.1.5.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-runc-1.1.5.md new file mode 100644 index 0000000000..d8d6d14737 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2023-04-11-runc-1.1.5.md @@ -0,0 +1 @@ +- runc ([CVE-2023-25809](https://nvd.nist.gov/vuln/detail/CVE-2023-25809), [CVE-2023-27561](https://nvd.nist.gov/vuln/detail/CVE-2023-27561), [CVE-2023-28642](https://nvd.nist.gov/vuln/detail/CVE-2023-28642)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/.gitkeep b/sdk_container/src/third_party/coreos-overlay/changelog/updates/.gitkeep new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-11-30-kernel-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-11-30-kernel-update.md new file mode 100644 index 0000000000..110f32cc9e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-11-30-kernel-update.md @@ -0,0 +1,4 @@ +- Linux ([5.15.4](https://lwn.net/Articles/876611/)) +- systemd ([249.7](https://github.com/systemd/systemd-stable/blob/v249.7/NEWS)) +- audit ([3.0.6](https://listman.redhat.com/archives/linux-audit/2021-October/msg00000.html)) +- btrfs-progs ([5.15.1](https://btrfs.wiki.kernel.org/index.php/Changelog#btrfs-progs_v5.15_.28Nov_2021.29)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-02-qemu-6.1.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-02-qemu-6.1.md new file mode 100644 index 0000000000..0db562f66a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-02-qemu-6.1.md @@ -0,0 +1 @@ +- qemu ([6.1.0](https://wiki.qemu.org/ChangeLog/6.1) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-03-golang-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-03-golang-update.md new file mode 100644 index 0000000000..60783397e2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-03-golang-update.md @@ -0,0 +1 @@ +- Go ([1.17.4](https://go.googlesource.com/go/+/refs/tags/go1.17.4)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-03-mantle-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-03-mantle-update.md new file mode 100644 index 0000000000..04e2a82b33 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-03-mantle-update.md @@ -0,0 +1 @@ +- mantle ([0.17.0](https://github.com/flatcar-linux/mantle/releases/tag/v0.17.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-06-ca-certificates-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-06-ca-certificates-update.md new file mode 100644 index 0000000000..944d052880 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-06-ca-certificates-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.73](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_73.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-06-runc-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-06-runc-update.md new file mode 100644 index 0000000000..9e46f2d86b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-06-runc-update.md @@ -0,0 +1 @@ +- runc ([1.0.3](https://github.com/opencontainers/runc/releases/tag/v1.0.3)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-07-rust-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-07-rust-update.md new file mode 100644 index 0000000000..80770201c5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-07-rust-update.md @@ -0,0 +1 @@ +- Rust ([1.57.0](https://github.com/rust-lang/rust/releases/tag/1.57.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-golang-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-golang-update.md new file mode 100644 index 0000000000..e17ec77eef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-golang-update.md @@ -0,0 +1 @@ +- Go ([1.17.5](https://go.googlesource.com/go/+/refs/tags/go1.17.5)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-linux-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-linux-update.md new file mode 100644 index 0000000000..f6969d4dae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-linux-update.md @@ -0,0 +1 @@ +- Linux ([5.15.7](https://lwn.net/Articles/878040)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-openssh-8.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-openssh-8.8.md new file mode 100644 index 0000000000..4ccf56de64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-09-openssh-8.8.md @@ -0,0 +1 @@ +- openssh ([8.8](http://www.openssh.com/txt/release-8.8)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-10-python-oem.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-10-python-oem.md new file mode 100644 index 0000000000..ab58c2c367 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-10-python-oem.md @@ -0,0 +1 @@ +- Python for OEM images (Azure) ([3.9.8](https://www.python.org/downloads/release/python-398/)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-15-docker-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-15-docker-update.md new file mode 100644 index 0000000000..5cac3b1a13 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-15-docker-update.md @@ -0,0 +1 @@ +- Docker ([20.10.12](https://docs.docker.com/engine/release-notes/#201012)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-20-ca-certificates-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-20-ca-certificates-update.md new file mode 100644 index 0000000000..ada326ed28 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-20-ca-certificates-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.73.1](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_73_1.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-21-linux-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-21-linux-update.md new file mode 100644 index 0000000000..89bb1bbdf3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-21-linux-update.md @@ -0,0 +1 @@ +- Linux ([5.15.10](https://lwn.net/Articles/879023) (includes [5.15.9](https://lwn.net/Articles/878898), [5.15.8](https://lwn.net/Articles/878631))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-23-linux-firmware-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-23-linux-firmware-update.md new file mode 100644 index 0000000000..8c8e2b8d1b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2021-12-23-linux-firmware-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20211216](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20211216)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-01-timezone-data-2021a-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-01-timezone-data-2021a-update.md new file mode 100644 index 0000000000..1876cf8871 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-01-timezone-data-2021a-update.md @@ -0,0 +1 @@ +- timezone-data ([2021a](https://mm.icann.org/pipermail/tz-announce/2021-January/000065.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-03-linux-5.15.12-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-03-linux-5.15.12-update.md new file mode 100644 index 0000000000..b0be10f3a7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-03-linux-5.15.12-update.md @@ -0,0 +1 @@ +- Linux ([5.15.12](https://lwn.net/Articles/879997) (includes [5.15.11](https://lwn.net/Articles/879496))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-06-linux-5.15.13-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-06-linux-5.15.13-update.md new file mode 100644 index 0000000000..036ae078b5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-06-linux-5.15.13-update.md @@ -0,0 +1 @@ +- Linux ([5.15.13](https://lwn.net/Articles/880469)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-07-containerd-1.5.9-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-07-containerd-1.5.9-update.md new file mode 100644 index 0000000000..f50bb32247 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-07-containerd-1.5.9-update.md @@ -0,0 +1 @@ +- containerd ([1.5.9](https://github.com/containerd/containerd/releases/tag/v1.5.9)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-09-systemd-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-09-systemd-update.md new file mode 100644 index 0000000000..d3d235636d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-09-systemd-update.md @@ -0,0 +1 @@ +- systemd ([251.10](https://github.com/systemd/systemd-stable/commits/v251.10) (includes [251](https://github.com/systemd/systemd/releases/tag/v251))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-10-ca-certificates-3.74-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-10-ca-certificates-3.74-update.md new file mode 100644 index 0000000000..33e4e716a8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-10-ca-certificates-3.74-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.74](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_74.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-10-golang-1.17.6-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-10-golang-1.17.6-update.md new file mode 100644 index 0000000000..11d16ecc0a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-10-golang-1.17.6-update.md @@ -0,0 +1 @@ +- Go ([1.17.6](https://go.googlesource.com/go/+/refs/tags/go1.17.6)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-12-linux-5.15.14-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-12-linux-5.15.14-update.md new file mode 100644 index 0000000000..ccf2a8740b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-12-linux-5.15.14-update.md @@ -0,0 +1 @@ +- Linux ([5.15.14](https://lwn.net/Articles/881018)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-12-mantle.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-12-mantle.md new file mode 100644 index 0000000000..57e6311871 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-12-mantle.md @@ -0,0 +1 @@ +- mantle ([0.18.0](https://github.com/flatcar-linux/mantle/releases/tag/v0.18.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-17-linux-5.15.15-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-17-linux-5.15.15-update.md new file mode 100644 index 0000000000..ab15e5f6b1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-17-linux-5.15.15-update.md @@ -0,0 +1 @@ +- Linux ([5.15.15](https://lwn.net/Articles/881548)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-17-openssl301.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-17-openssl301.md new file mode 100644 index 0000000000..eeb55ef744 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-17-openssl301.md @@ -0,0 +1 @@ +- openssl ([3.0.1](https://www.openssl.org/news/changelog.html#openssl-30)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-19-runc-1.1.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-19-runc-1.1.0-update.md new file mode 100644 index 0000000000..20fa2e7458 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-19-runc-1.1.0-update.md @@ -0,0 +1 @@ +- runc ([1.1.0](https://github.com/opencontainers/runc/releases/tag/v1.1.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-21-linux-5.15.16-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-21-linux-5.15.16-update.md new file mode 100644 index 0000000000..a0d9e7fe95 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-21-linux-5.15.16-update.md @@ -0,0 +1 @@ +- Linux ([5.15.16](https://lwn.net/Articles/881963)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-21-rust-1.58.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-21-rust-1.58.1-update.md new file mode 100644 index 0000000000..9de7e45d4f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-21-rust-1.58.1-update.md @@ -0,0 +1 @@ +- Rust ([1.58.1](https://github.com/rust-lang/rust/releases/tag/1.58.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-24-systemd-250-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-24-systemd-250-update.md new file mode 100644 index 0000000000..5d19a6ac7f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-24-systemd-250-update.md @@ -0,0 +1 @@ +- systemd ([250.3](https://github.com/systemd/systemd-stable/releases/tag/v250.3)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-27-polkit.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-27-polkit.md new file mode 100644 index 0000000000..ca862e5fc2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-27-polkit.md @@ -0,0 +1 @@ +- polkit ([0.120](https://gitlab.freedesktop.org/polkit/polkit/-/blob/0.120/NEWS)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-28-linux-5.15.17-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-28-linux-5.15.17-update.md new file mode 100644 index 0000000000..8888089c7d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-28-linux-5.15.17-update.md @@ -0,0 +1 @@ +- Linux ([5.15.17](https://lwn.net/Articles/882911)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-30-linux-5.15.18-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-30-linux-5.15.18-update.md new file mode 100644 index 0000000000..733fbb95f3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-30-linux-5.15.18-update.md @@ -0,0 +1 @@ +- Linux ([5.15.18](https://lwn.net/Articles/883326/)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-31-sbsigntools.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-31-sbsigntools.md new file mode 100644 index 0000000000..cb20665086 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-01-31-sbsigntools.md @@ -0,0 +1 @@ +- sbsigntools ([0.9.4](https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/tag/?h=v0.9.4)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-02-linux-5.15.19-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-02-linux-5.15.19-update.md new file mode 100644 index 0000000000..3e9791be6f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-02-linux-5.15.19-update.md @@ -0,0 +1 @@ +- Linux ([5.15.19](https://lwn.net/Articles/883441)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-07-ca-certificates-3.75-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-07-ca-certificates-3.75-update.md new file mode 100644 index 0000000000..5b1595a5dd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-07-ca-certificates-3.75-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.75](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_75.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-08-gcc-10-prep.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-08-gcc-10-prep.md new file mode 100644 index 0000000000..ec4fb93e57 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-08-gcc-10-prep.md @@ -0,0 +1 @@ +- nfs-utils ([2.5.4](https://lore.kernel.org/linux-fsdevel/c8795653-7728-18a4-93dc-58943ad0fe09@redhat.com/)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-09-linux-5.15.22-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-09-linux-5.15.22-update.md new file mode 100644 index 0000000000..2bfa723f02 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-09-linux-5.15.22-update.md @@ -0,0 +1 @@ +- Linux ([5.15.22](https://lwn.net/Articles/884107) (includes [5.15.21](https://lwn.net/Articles/883958), [5.15.20](https://lwn.net/Articles/883951))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-09-walinuxagent.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-09-walinuxagent.md new file mode 100644 index 0000000000..7a894d3964 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-09-walinuxagent.md @@ -0,0 +1 @@ +- WALinuxAgent ([2.6.0.2](https://github.com/Azure/WALinuxAgent/releases/tag/v2.6.0.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-10-linux-firmware-20220209-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-10-linux-firmware-20220209-update.md new file mode 100644 index 0000000000..b538dbe077 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-10-linux-firmware-20220209-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220209](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220209)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-12-linux-5.15.23-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-12-linux-5.15.23-update.md new file mode 100644 index 0000000000..50c68d67ce --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-12-linux-5.15.23-update.md @@ -0,0 +1 @@ +- Linux ([5.15.23](https://lwn.net/Articles/884527)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-14-golang-1.17.7-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-14-golang-1.17.7-update.md new file mode 100644 index 0000000000..eecbaa23d9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-14-golang-1.17.7-update.md @@ -0,0 +1 @@ +- Go ([1.17.7](https://go.googlesource.com/go/+/refs/tags/go1.17.7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-16-containerd-1.6.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-16-containerd-1.6.0-update.md new file mode 100644 index 0000000000..25de6395cc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-16-containerd-1.6.0-update.md @@ -0,0 +1 @@ +- containerd ([1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-17-linux-5.15.24-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-17-linux-5.15.24-update.md new file mode 100644 index 0000000000..6229bc2f9d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-17-linux-5.15.24-update.md @@ -0,0 +1 @@ +- Linux ([5.15.24](https://lwn.net/Articles/884973)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-17-nvidia-drivers-510.47.03.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-17-nvidia-drivers-510.47.03.md new file mode 100644 index 0000000000..e376ea50f7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-17-nvidia-drivers-510.47.03.md @@ -0,0 +1 @@ +- nvidia-drivers ([510.47.03](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-510-47-03/index.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-18-shadow-4.11.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-18-shadow-4.11.1-update.md new file mode 100644 index 0000000000..2c621b4181 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-18-shadow-4.11.1-update.md @@ -0,0 +1 @@ +- shadow ([4.11.1](https://github.com/shadow-maint/shadow/releases/tag/v4.11.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-23-libmspack.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-23-libmspack.md new file mode 100644 index 0000000000..ce0690e374 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-23-libmspack.md @@ -0,0 +1 @@ +- libmspack ([0.10.1_alpha](https://github.com/kyz/libmspack/blob/v0.10.1alpha/libmspack/ChangeLog)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-24-linux-5.15.25-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-24-linux-5.15.25-update.md new file mode 100644 index 0000000000..76c399853d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-02-24-linux-5.15.25-update.md @@ -0,0 +1 @@ +- Linux ([5.15.25](https://lwn.net/Articles/885895)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-04-containerd-1.6.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-04-containerd-1.6.1-update.md new file mode 100644 index 0000000000..3d9b810e64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-04-containerd-1.6.1-update.md @@ -0,0 +1 @@ +- containerd ([1.6.1](https://github.com/containerd/containerd/releases/tag/v1.6.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-ca-certificates-3.76-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-ca-certificates-3.76-update.md new file mode 100644 index 0000000000..127a94bff8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-ca-certificates-3.76-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.76](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_76.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-golang-1.17.8-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-golang-1.17.8-update.md new file mode 100644 index 0000000000..4e14e9cb59 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-golang-1.17.8-update.md @@ -0,0 +1 @@ +- Go ([1.17.8](https://go.googlesource.com/go/+/refs/tags/go1.17.8)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-ignition.md new file mode 100644 index 0000000000..3b85bc1cb7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-07-ignition.md @@ -0,0 +1 @@ +- ignition ([2.13.0](https://github.com/coreos/ignition/releases/tag/v2.13.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-09-linux-5.15.27-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-09-linux-5.15.27-update.md new file mode 100644 index 0000000000..e82bc163ed --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-09-linux-5.15.27-update.md @@ -0,0 +1 @@ +- Linux ([5.15.27](https://lwn.net/Articles/887219) (includes [5.15.26](https://lwn.net/Articles/886569))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-09-open-vm-tools-12.0.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-09-open-vm-tools-12.0.0-update.md new file mode 100644 index 0000000000..55cd8de235 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-09-open-vm-tools-12.0.0-update.md @@ -0,0 +1 @@ +- open-vm-tools ([12.0.0](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.0.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-12-linux-5.15.28-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-12-linux-5.15.28-update.md new file mode 100644 index 0000000000..ba79a74d64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-12-linux-5.15.28-update.md @@ -0,0 +1 @@ +- Linux ([5.15.28](https://lwn.net/Articles/887638)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-16-docker-20.10.13-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-16-docker-20.10.13-update.md new file mode 100644 index 0000000000..204e9edf7a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-16-docker-20.10.13-update.md @@ -0,0 +1 @@ +- Docker ([20.10.13](https://docs.docker.com/engine/release-notes/#201013)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-16-openssl.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-16-openssl.md new file mode 100644 index 0000000000..04610f9131 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-16-openssl.md @@ -0,0 +1 @@ +- openssl ([3.0.2](https://www.openssl.org/news/changelog.html#openssl-30)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-17-linux-firmware-20220310-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-17-linux-firmware-20220310-update.md new file mode 100644 index 0000000000..02f53cc239 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-17-linux-firmware-20220310-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220310](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220310)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-17-pam-1.5.1_p20210622-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-17-pam-1.5.1_p20210622-update.md new file mode 100644 index 0000000000..cfb88d4323 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-17-pam-1.5.1_p20210622-update.md @@ -0,0 +1 @@ +- pam ([1.5.1_p20210622](https://github.com/linux-pam/linux-pam/commit/fe1307512fb8892b5ceb3d884c793af8dbd4c16a)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-intel-microcode-20220207_p20220207.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-intel-microcode-20220207_p20220207.md new file mode 100644 index 0000000000..0fb5344071 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-intel-microcode-20220207_p20220207.md @@ -0,0 +1 @@ +- intel-microcode ([20220207_p20220207](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220207) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-pambase-20220214.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-pambase-20220214.md new file mode 100644 index 0000000000..363472c912 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-pambase-20220214.md @@ -0,0 +1 @@ +- pambase (20220214) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-rust-1.59.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-rust-1.59.0-update.md new file mode 100644 index 0000000000..27b9f1cac9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-18-rust-1.59.0-update.md @@ -0,0 +1 @@ +- Rust ([1.59.0](https://github.com/rust-lang/rust/releases/tag/1.59.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-20-linux-5.15.30-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-20-linux-5.15.30-update.md new file mode 100644 index 0000000000..dbaab8ad33 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-20-linux-5.15.30-update.md @@ -0,0 +1 @@ +- Linux ([5.15.30](https://lwn.net/Articles/888521) (includes [5.15.29](https://lwn.net/Articles/888116))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-24-containerd-1.6.2-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-24-containerd-1.6.2-update.md new file mode 100644 index 0000000000..61b30a92ec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-24-containerd-1.6.2-update.md @@ -0,0 +1 @@ +- containerd ([1.6.2](https://github.com/containerd/containerd/releases/tag/v1.6.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-24-linux-5.15.31-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-24-linux-5.15.31-update.md new file mode 100644 index 0000000000..b9628300ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-24-linux-5.15.31-update.md @@ -0,0 +1 @@ +- Linux ([5.15.31](https://lwn.net/Articles/889001)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-29-linux-5.15.32-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-29-linux-5.15.32-update.md new file mode 100644 index 0000000000..3e10f49840 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-29-linux-5.15.32-update.md @@ -0,0 +1 @@ +- Linux ([5.15.32](https://lwn.net/Articles/889438)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-30-docker-20.10.14-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-30-docker-20.10.14-update.md new file mode 100644 index 0000000000..3a1a8bf1db --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-30-docker-20.10.14-update.md @@ -0,0 +1 @@ +- Docker ([20.10.14](https://docs.docker.com/engine/release-notes/#201014)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-afterburn.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-afterburn.md new file mode 100644 index 0000000000..6c743c984a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-afterburn.md @@ -0,0 +1 @@ +- afterburn ([5.2.0](https://github.com/coreos/afterburn/releases/tag/v5.2.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-mdadm-4.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-mdadm-4.2.md new file mode 100644 index 0000000000..dd234d9f3f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-mdadm-4.2.md @@ -0,0 +1 @@ +- mdadm ([4.2](https://lore.kernel.org/all/28fdbc45-96ca-7cdb-3ced-a5f65d978048@trained-monkey.org/T/)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-runc-1.1.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-runc-1.1.1-update.md new file mode 100644 index 0000000000..e176ee424a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-03-31-runc-1.1.1-update.md @@ -0,0 +1 @@ +- runc ([1.1.1](https://github.com/opencontainers/runc/releases/tag/v1.1.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-04-ca-certificates-3.77-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-04-ca-certificates-3.77-update.md new file mode 100644 index 0000000000..5d1abc5e26 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-04-ca-certificates-3.77-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.77](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_77.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-09-linux-5.15.33-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-09-linux-5.15.33-update.md new file mode 100644 index 0000000000..c4b4cb8aae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-09-linux-5.15.33-update.md @@ -0,0 +1 @@ +- Linux ([5.15.33](https://lwn.net/Articles/890722)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-11-rust-1.60.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-11-rust-1.60.0-update.md new file mode 100644 index 0000000000..92e9ab06b9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-11-rust-1.60.0-update.md @@ -0,0 +1 @@ +- Rust ([1.60.0](https://github.com/rust-lang/rust/releases/tag/1.60.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-12-google-compute-engine.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-12-google-compute-engine.md new file mode 100644 index 0000000000..51abef1c42 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-12-google-compute-engine.md @@ -0,0 +1 @@ +- GCE: google compute-image-packages ([20190124](https://github.com/GoogleCloudPlatform/compute-image-packages/releases/tag/20190124)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-13-golang-1.17.9-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-13-golang-1.17.9-update.md new file mode 100644 index 0000000000..d4df350f37 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-13-golang-1.17.9-update.md @@ -0,0 +1 @@ +- Go ([1.17.9](https://go.googlesource.com/go/+/refs/tags/go1.17.9)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-14-linux-5.15.34-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-14-linux-5.15.34-update.md new file mode 100644 index 0000000000..572482d4b7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-14-linux-5.15.34-update.md @@ -0,0 +1 @@ +- Linux ([5.15.34](https://lwn.net/Articles/891251)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-14-linux-firmware-20220411-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-14-linux-firmware-20220411-update.md new file mode 100644 index 0000000000..4dafa97e36 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-14-linux-firmware-20220411-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220411](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220411)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-21-linux-5.15.35-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-21-linux-5.15.35-update.md new file mode 100644 index 0000000000..a207912af0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-21-linux-5.15.35-update.md @@ -0,0 +1 @@ +- Linux ([5.15.35](https://lwn.net/Articles/892002)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-29-containerd-1.6.3-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-29-containerd-1.6.3-update.md new file mode 100644 index 0000000000..fd213cd42f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-04-29-containerd-1.6.3-update.md @@ -0,0 +1 @@ +- containerd ([1.6.3](https://github.com/containerd/containerd/releases/tag/v1.6.3)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-02-ca-certificates-3.78-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-02-ca-certificates-3.78-update.md new file mode 100644 index 0000000000..d62ea9bfbd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-02-ca-certificates-3.78-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.78](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_78.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-02-linux-5.15.37-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-02-linux-5.15.37-update.md new file mode 100644 index 0000000000..c7a70811ae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-02-linux-5.15.37-update.md @@ -0,0 +1 @@ +- Linux ([5.15.37](https://lwn.net/Articles/893264) (includes [5.15.36](https://lwn.net/Articles/892812))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-06-containerd-1.6.4-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-06-containerd-1.6.4-update.md new file mode 100644 index 0000000000..a1da98dcfc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-06-containerd-1.6.4-update.md @@ -0,0 +1 @@ +- containerd ([1.6.4](https://github.com/containerd/containerd/releases/tag/v1.6.4)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-10-linux-5.15.38-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-10-linux-5.15.38-update.md new file mode 100644 index 0000000000..a2b6ea438b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-10-linux-5.15.38-update.md @@ -0,0 +1 @@ +- Linux ([5.15.38](https://lwn.net/Articles/894357)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-11-docker-20.10.15-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-11-docker-20.10.15-update.md new file mode 100644 index 0000000000..1bbc3c73ba --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-11-docker-20.10.15-update.md @@ -0,0 +1 @@ +- Docker ([20.10.15](https://docs.docker.com/engine/release-notes/#201015)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-11-golang-1.18.2-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-11-golang-1.18.2-update.md new file mode 100644 index 0000000000..f32b8b5ffa --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-11-golang-1.18.2-update.md @@ -0,0 +1 @@ +- Go ([1.18.2](https://go.googlesource.com/go/+/refs/tags/go1.18.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-dbus-and-samba-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-dbus-and-samba-update.md new file mode 100644 index 0000000000..3090f25133 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-dbus-and-samba-update.md @@ -0,0 +1,2 @@ +- dbus ([1.12.22](https://gitlab.freedesktop.org/dbus/dbus/-/blob/177ab044bc87cbc4ded75d21b900795a6fefef76/NEWS)) +- samba ([4.15.4](https://www.samba.org/samba/history/samba-4.15.4.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-linux-firmware-20220509-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-linux-firmware-20220509-update.md new file mode 100644 index 0000000000..a01cce2e85 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-linux-firmware-20220509-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220509](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220509)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-runc-1.1.2-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-runc-1.1.2-update.md new file mode 100644 index 0000000000..d6f6dbf97b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-12-runc-1.1.2-update.md @@ -0,0 +1 @@ +- runc ([1.1.2](https://github.com/opencontainers/runc/releases/tag/v1.1.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-16-linux-5.15.40-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-16-linux-5.15.40-update.md new file mode 100644 index 0000000000..e6e7f597ac --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-16-linux-5.15.40-update.md @@ -0,0 +1 @@ +- Linux ([5.15.40](https://lwn.net/Articles/895318) (includes [5.15.39](https://lwn.net/Articles/895070))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-17-ncurses-6.3_p20220423.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-17-ncurses-6.3_p20220423.md new file mode 100644 index 0000000000..7025519804 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-17-ncurses-6.3_p20220423.md @@ -0,0 +1 @@ +- ncurses ([6.3_p20220423](https://lists.gnu.org/archive/html/info-gnu/2021-11/msg00001.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-17-openssl-3.0.3.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-17-openssl-3.0.3.md new file mode 100644 index 0000000000..70dac55522 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-17-openssl-3.0.3.md @@ -0,0 +1 @@ +- openssl ([3.0.3](https://www.openssl.org/news/changelog.html#openssl-30)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-18-docker-20.10.16-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-18-docker-20.10.16-update.md new file mode 100644 index 0000000000..249baf6e0e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-18-docker-20.10.16-update.md @@ -0,0 +1 @@ +- Docker ([20.10.16](https://docs.docker.com/engine/release-notes/#201016)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-19-linux-5.15.41-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-19-linux-5.15.41-update.md new file mode 100644 index 0000000000..c8a0ebd803 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-19-linux-5.15.41-update.md @@ -0,0 +1 @@ +- Linux ([5.15.41](https://lwn.net/Articles/895645)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-19-nvidia-drivers-510.73.05.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-19-nvidia-drivers-510.73.05.md new file mode 100644 index 0000000000..046ecd06a8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-19-nvidia-drivers-510.73.05.md @@ -0,0 +1 @@ +- nvidia-drivers ([510.73.05](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-510-73-05/index.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-23-python-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-23-python-update.md new file mode 100644 index 0000000000..d850c9c262 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-23-python-update.md @@ -0,0 +1,2 @@ +- OEM: python ([3.9.12](https://www.python.org/downloads/release/python-3912/)) +- OEM: distro ([1.7.0](https://github.com/python-distro/distro/releases/tag/v1.7.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-24-rust-1.61.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-24-rust-1.61.0-update.md new file mode 100644 index 0000000000..6f48cd4f14 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-24-rust-1.61.0-update.md @@ -0,0 +1 @@ +- Rust ([1.61.0](https://github.com/rust-lang/rust/releases/tag/1.61.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-25-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-25-ignition.md new file mode 100644 index 0000000000..fefc10ed63 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-25-ignition.md @@ -0,0 +1 @@ +- ignition ([2.14.0](https://github.com/coreos/ignition/releases/tag/v2.14.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-25-open-vm-tools-12.0.5-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-25-open-vm-tools-12.0.5-update.md new file mode 100644 index 0000000000..28069244fc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-25-open-vm-tools-12.0.5-update.md @@ -0,0 +1 @@ +- open-vm-tools ([12.0.5](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.0.5)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-26-linux-5.15.43-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-26-linux-5.15.43-update.md new file mode 100644 index 0000000000..7726ac6902 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-26-linux-5.15.43-update.md @@ -0,0 +1 @@ +- Linux ([5.15.43](https://lwn.net/Articles/896220) (includes [5.15.42](https://lwn.net/Articles/896226))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-31-linux-5.15.44-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-31-linux-5.15.44-update.md new file mode 100644 index 0000000000..73ef5e8ee9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-05-31-linux-5.15.44-update.md @@ -0,0 +1 @@ +- Linux ([5.15.44](https://lwn.net/Articles/896647)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-02-ca-certificates-3.79-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-02-ca-certificates-3.79-update.md new file mode 100644 index 0000000000..8650bb0a1d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-02-ca-certificates-3.79-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.79](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_79.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-08-docker-20.10.17-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-08-docker-20.10.17-update.md new file mode 100644 index 0000000000..1ad5bd93c3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-08-docker-20.10.17-update.md @@ -0,0 +1 @@ +- Docker ([20.10.17](https://docs.docker.com/engine/release-notes/#201017)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-09-containerd-1.6.6-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-09-containerd-1.6.6-update.md new file mode 100644 index 0000000000..2cf8a15676 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-09-containerd-1.6.6-update.md @@ -0,0 +1 @@ +- containerd ([1.6.6](https://github.com/containerd/containerd/releases/tag/v1.6.6)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-09-runc-1.1.3-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-09-runc-1.1.3-update.md new file mode 100644 index 0000000000..e9aba1383f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-09-runc-1.1.3-update.md @@ -0,0 +1 @@ +- runc ([1.1.3](https://github.com/opencontainers/runc/releases/tag/v1.1.3)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-13-gdb-11.2-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-13-gdb-11.2-update.md new file mode 100644 index 0000000000..70ecbc4715 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-13-gdb-11.2-update.md @@ -0,0 +1 @@ +- gdb ([11.2](https://lists.gnu.org/archive/html/info-gnu/2022-01/msg00009.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-13-glibc-2.34-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-13-glibc-2.34-update.md new file mode 100644 index 0000000000..d7400879fb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-13-glibc-2.34-update.md @@ -0,0 +1 @@ +- glibc ([2.34](https://sourceware.org/pipermail/libc-alpha/2021-August/129718.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-15-linux-5.15.47-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-15-linux-5.15.47-update.md new file mode 100644 index 0000000000..68a007a48f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-15-linux-5.15.47-update.md @@ -0,0 +1 @@ +- Linux ([5.15.47](https://lwn.net/Articles/897904) (includes [5.15.46](https://lwn.net/Articles/897377), [5.15.45](https://lwn.net/Articles/897167))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-16-linux-firmware-20220610-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-16-linux-firmware-20220610-update.md new file mode 100644 index 0000000000..75b37c0a4a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-16-linux-firmware-20220610-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220610](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220610)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-17-intel-microcode-20220510_p20220508.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-17-intel-microcode-20220510_p20220508.md new file mode 100644 index 0000000000..22760ee1be --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-17-intel-microcode-20220510_p20220508.md @@ -0,0 +1 @@ +- intel-microcode ([20220510](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220510)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-17-linux-5.15.48-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-17-linux-5.15.48-update.md new file mode 100644 index 0000000000..ba6460ae44 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-17-linux-5.15.48-update.md @@ -0,0 +1 @@ +- Linux ([5.15.48](https://lwn.net/Articles/898124)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-26-linux-5.15.50-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-26-linux-5.15.50-update.md new file mode 100644 index 0000000000..359b364ea2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-26-linux-5.15.50-update.md @@ -0,0 +1 @@ +- Linux ([5.15.50](https://lwn.net/Articles/899091) (includes [5.15.49](https://lwn.net/Articles/898622))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-27-ca-certificates-3.80-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-27-ca-certificates-3.80-update.md new file mode 100644 index 0000000000..e671efb4b8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-27-ca-certificates-3.80-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.80](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_80.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-27-sudo-1.9.10-r1.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-27-sudo-1.9.10-r1.md new file mode 100644 index 0000000000..10f583c330 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-27-sudo-1.9.10-r1.md @@ -0,0 +1 @@ +- sudo ([1.9.10](https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_10)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-29-linux-5.15.51-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-29-linux-5.15.51-update.md new file mode 100644 index 0000000000..f877e72c64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-06-29-linux-5.15.51-update.md @@ -0,0 +1 @@ +- Linux ([5.15.51](https://lwn.net/Articles/899370)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-03-linux-5.15.52-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-03-linux-5.15.52-update.md new file mode 100644 index 0000000000..955aaa58aa --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-03-linux-5.15.52-update.md @@ -0,0 +1 @@ +- Linux ([5.15.52](https://lwn.net/Articles/899788)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-05-rust-1.62.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-05-rust-1.62.0-update.md new file mode 100644 index 0000000000..14cd3e156d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-05-rust-1.62.0-update.md @@ -0,0 +1 @@ +- Rust ([1.62.0](https://github.com/rust-lang/rust/releases/tag/1.62.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-11-gnupg-2.2.35-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-11-gnupg-2.2.35-update.md new file mode 100644 index 0000000000..918e2a733a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-11-gnupg-2.2.35-update.md @@ -0,0 +1 @@ +- gnupg ([2.2.35](https://dev.gnupg.org/T5928)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-13-go-1.18.4-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-13-go-1.18.4-update.md new file mode 100644 index 0000000000..2761799a91 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-13-go-1.18.4-update.md @@ -0,0 +1 @@ +- Go ([1.18.4](https://go.dev/doc/devel/release#go1.18.4)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-13-linux-5.15.54-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-13-linux-5.15.54-update.md new file mode 100644 index 0000000000..1f9c2ad015 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-13-linux-5.15.54-update.md @@ -0,0 +1 @@ +- Linux ([5.15.54](https://lwn.net/Articles/900911) (includes [5.15.53](https://lwn.net/Articles/900321))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-14-linux-firmware-20220708-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-14-linux-firmware-20220708-update.md new file mode 100644 index 0000000000..0fbb8eae99 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-14-linux-firmware-20220708-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220708](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220708)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-16-linux-5.15.55-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-16-linux-5.15.55-update.md new file mode 100644 index 0000000000..5d286d5e6d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-16-linux-5.15.55-update.md @@ -0,0 +1 @@ +- Linux ([5.15.55](https://lwn.net/Articles/901380)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-22-linux-5.15.56-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-22-linux-5.15.56-update.md new file mode 100644 index 0000000000..dddcc0dad4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-22-linux-5.15.56-update.md @@ -0,0 +1 @@ +- Linux ([5.15.56](https://lwn.net/Articles/902101)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-25-ca-certificates-3.81-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-25-ca-certificates-3.81-update.md new file mode 100644 index 0000000000..dd30dc48de --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-25-ca-certificates-3.81-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.81](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_81.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-26-rust-1.62.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-26-rust-1.62.1-update.md new file mode 100644 index 0000000000..a3c0a74af7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-26-rust-1.62.1-update.md @@ -0,0 +1 @@ +- Rust ([1.62.1](https://github.com/rust-lang/rust/releases/tag/1.62.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-30-linux-5.15.58-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-30-linux-5.15.58-update.md new file mode 100644 index 0000000000..12bae95348 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-07-30-linux-5.15.58-update.md @@ -0,0 +1 @@ +- Linux ([5.15.58](https://lwn.net/Articles/902917) (includes [5.15.57](https://lwn.net/Articles/902317))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-04-linux-5.15.59-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-04-linux-5.15.59-update.md new file mode 100644 index 0000000000..7265705f7f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-04-linux-5.15.59-update.md @@ -0,0 +1 @@ +- Linux ([5.15.59](https://lwn.net/Articles/903688)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-05-containerd-1.6.7-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-05-containerd-1.6.7-update.md new file mode 100644 index 0000000000..b50704c049 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-05-containerd-1.6.7-update.md @@ -0,0 +1 @@ +- containerd ([1.6.7](https://github.com/containerd/containerd/releases/tag/v1.6.7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-12-containerd-1.6.8-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-12-containerd-1.6.8-update.md new file mode 100644 index 0000000000..a489bd90cb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-12-containerd-1.6.8-update.md @@ -0,0 +1 @@ +- containerd ([1.6.8](https://github.com/containerd/containerd/releases/tag/v1.6.8)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-12-linux-5.15.60-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-12-linux-5.15.60-update.md new file mode 100644 index 0000000000..2d83999767 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-12-linux-5.15.60-update.md @@ -0,0 +1 @@ +- Linux ([5.15.60](https://lwn.net/Articles/904461)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-16-rust-1.63.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-16-rust-1.63.0-update.md new file mode 100644 index 0000000000..3a4f21e7fb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-16-rust-1.63.0-update.md @@ -0,0 +1 @@ +- Rust ([1.63.0](https://github.com/rust-lang/rust/releases/tag/1.63.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-18-linux-5.15.61-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-18-linux-5.15.61-update.md new file mode 100644 index 0000000000..3941f8fe4e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-18-linux-5.15.61-update.md @@ -0,0 +1 @@ +- Linux ([5.15.61](https://lwn.net/Articles/904959)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-18-linux-firmware-20220815-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-18-linux-firmware-20220815-update.md new file mode 100644 index 0000000000..2849c435d3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-18-linux-firmware-20220815-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220815](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220815)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-22-ca-certificates-3.82-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-22-ca-certificates-3.82-update.md new file mode 100644 index 0000000000..284a995296 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-22-ca-certificates-3.82-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.82](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_82.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-22-linux-5.15.62-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-22-linux-5.15.62-update.md new file mode 100644 index 0000000000..a5c9130bf2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-22-linux-5.15.62-update.md @@ -0,0 +1 @@ +- Linux ([5.15.62](https://lwn.net/Articles/905533)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-24-open-vm-tools-12.1.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-24-open-vm-tools-12.1.0-update.md new file mode 100644 index 0000000000..235f6a2f64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-24-open-vm-tools-12.1.0-update.md @@ -0,0 +1 @@ +- open-vm-tools ([12.1.0](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.1.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-26-linux-5.15.63-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-26-linux-5.15.63-update.md new file mode 100644 index 0000000000..728286d913 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-26-linux-5.15.63-update.md @@ -0,0 +1 @@ +- Linux ([5.15.63](https://lwn.net/Articles/906059)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-26-shadow-4.12.3.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-26-shadow-4.12.3.md new file mode 100644 index 0000000000..22a31036ce --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-08-26-shadow-4.12.3.md @@ -0,0 +1 @@ +- shadow ([4.12.3](https://github.com/shadow-maint/shadow/releases/tag/4.12.3)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-01-runc-1.1.4-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-01-runc-1.1.4-update.md new file mode 100644 index 0000000000..55b526a034 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-01-runc-1.1.4-update.md @@ -0,0 +1 @@ +- runc ([1.1.4](https://github.com/opencontainers/runc/releases/tag/v1.1.4)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-06-polkit.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-06-polkit.md new file mode 100644 index 0000000000..9e921a08c1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-06-polkit.md @@ -0,0 +1 @@ +- polkit ([121](https://gitlab.freedesktop.org/polkit/polkit/-/commit/827b0ddac5b1ef00a47fca4526fcf057bee5f1db)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-gettext.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-gettext.md new file mode 100644 index 0000000000..549368a140 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-gettext.md @@ -0,0 +1 @@ +- gettext ([0.21](https://www.gnu.org/software/gettext/)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-go-1.18.6-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-go-1.18.6-update.md new file mode 100644 index 0000000000..ec612b9581 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-go-1.18.6-update.md @@ -0,0 +1 @@ +- Go ([1.18.6](https://go.dev/doc/devel/release#go1.18.6)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-linux-5.15.67-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-linux-5.15.67-update.md new file mode 100644 index 0000000000..2c120a58fe --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-13-linux-5.15.67-update.md @@ -0,0 +1 @@ +- Linux ([5.15.67](https://lwn.net/Articles/907526) (includes [5.15.66](https://lwn.net/Articles/907524), [5.15.65](https://lwn.net/Articles/907204), [5.15.64](https://lwn.net/Articles/906630))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-14-docker-20.10.18-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-14-docker-20.10.18-update.md new file mode 100644 index 0000000000..e1bf4a44ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-14-docker-20.10.18-update.md @@ -0,0 +1 @@ +- Docker ([20.10.18](https://docs.docker.com/engine/release-notes/#201018)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-14-locksmith.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-14-locksmith.md new file mode 100644 index 0000000000..ab265e79f6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-14-locksmith.md @@ -0,0 +1 @@ +- locksmith([0.7.0](https://github.com/flatcar/locksmith/blob/v0.7.0/CHANGELOG.md#v070--30112021)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-15-linux-firmware-20220913-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-15-linux-firmware-20220913-update.md new file mode 100644 index 0000000000..c231f271c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-15-linux-firmware-20220913-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20220913](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20220913)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-19-ca-certificates-3.83-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-19-ca-certificates-3.83-update.md new file mode 100644 index 0000000000..4adee883c2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-19-ca-certificates-3.83-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.83](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_83.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-20-vim-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-20-vim-update.md new file mode 100644 index 0000000000..aa7d4e969a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-20-vim-update.md @@ -0,0 +1 @@ +- vim ([9.0.0469](https://github.com/vim/vim/releases/tag/v9.0.0469)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-24-linux-5.15.70-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-24-linux-5.15.70-update.md new file mode 100644 index 0000000000..54d068b8eb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-24-linux-5.15.70-update.md @@ -0,0 +1 @@ +- Linux ([5.15.70](https://lwn.net/Articles/909212) (includes [5.15.69](https://lwn.net/Articles/908782), [5.15.68](https://lwn.net/Articles/908140))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-27-rust-1.64.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-27-rust-1.64.0-update.md new file mode 100644 index 0000000000..7233b98863 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-27-rust-1.64.0-update.md @@ -0,0 +1 @@ +- Rust ([1.64.0](https://github.com/rust-lang/rust/releases/tag/1.64.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-29-linux-5.15.71-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-29-linux-5.15.71-update.md new file mode 100644 index 0000000000..fb68e796de --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-09-29-linux-5.15.71-update.md @@ -0,0 +1 @@ +- Linux ([5.15.71](https://lwn.net/Articles/909679)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-06-linux-5.15.72-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-06-linux-5.15.72-update.md new file mode 100644 index 0000000000..af56cd3440 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-06-linux-5.15.72-update.md @@ -0,0 +1 @@ +- Linux ([5.15.72](https://lwn.net/Articles/910398)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-10-go-1.18.7-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-10-go-1.18.7-update.md new file mode 100644 index 0000000000..7ef222e432 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-10-go-1.18.7-update.md @@ -0,0 +1 @@ +- Go ([1.18.7](https://go.dev/doc/devel/release#1.18.7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-10-go-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-10-go-update.md new file mode 100644 index 0000000000..2081d2a893 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-10-go-update.md @@ -0,0 +1 @@ +- go ([CVE-2022-41715](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715), [CVE-2022-2880](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880), [CVE-2022-2879](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-11-dbus-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-11-dbus-update.md new file mode 100644 index 0000000000..eb3df8797e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-11-dbus-update.md @@ -0,0 +1 @@ +- dbus ([1.14.4](https://gitlab.freedesktop.org/dbus/dbus/-/raw/dbus-1.14.4/NEWS)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-11-logrotate-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-11-logrotate-update.md new file mode 100644 index 0000000000..e7b662c1ec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-11-logrotate-update.md @@ -0,0 +1 @@ +- logrotate ([3.20.1](https://github.com/logrotate/logrotate/releases/tag/3.20.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-13-linux-5.15.73-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-13-linux-5.15.73-update.md new file mode 100644 index 0000000000..58c1820cce --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-13-linux-5.15.73-update.md @@ -0,0 +1 @@ +- Linux ([5.15.73](https://lwn.net/Articles/910957)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-13-linux-firmware-20221012-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-13-linux-firmware-20221012-update.md new file mode 100644 index 0000000000..52d7e3899e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-13-linux-firmware-20221012-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20221012](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20221012)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-14-update-glibc.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-14-update-glibc.md new file mode 100644 index 0000000000..9f48e7f020 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-14-update-glibc.md @@ -0,0 +1 @@ +- glibc ([2.35](https://savannah.gnu.org/forum/forum.php?forum_id=10111)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-15-linux-5.15.74-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-15-linux-5.15.74-update.md new file mode 100644 index 0000000000..597fdc08e5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-15-linux-5.15.74-update.md @@ -0,0 +1 @@ +- Linux ([5.15.74](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v5.15.74)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-17-ca-certificates-3.84-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-17-ca-certificates-3.84-update.md new file mode 100644 index 0000000000..89cbe646fd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-17-ca-certificates-3.84-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.84](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_84.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-19-docker-20.10.20-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-19-docker-20.10.20-update.md new file mode 100644 index 0000000000..c22a59f080 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-19-docker-20.10.20-update.md @@ -0,0 +1 @@ +- Docker ([20.10.20](https://docs.docker.com/engine/release-notes/#201020)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-20-curl-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-20-curl-update.md new file mode 100644 index 0000000000..3ca94c7285 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-20-curl-update.md @@ -0,0 +1 @@ +- curl ([7.85](https://curl.se/mail/archive-2022-08/0012.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-26-docker-20.10.21-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-26-docker-20.10.21-update.md new file mode 100644 index 0000000000..821bace6c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-26-docker-20.10.21-update.md @@ -0,0 +1 @@ +- Docker ([20.10.21](https://docs.docker.com/engine/release-notes/#201021)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-28-containerd-1.6.9-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-28-containerd-1.6.9-update.md new file mode 100644 index 0000000000..a3388dbd5d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-10-28-containerd-1.6.9-update.md @@ -0,0 +1 @@ +- containerd ([1.6.9](https://github.com/containerd/containerd/releases/tag/v1.6.9)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-03-go-1.19.3-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-03-go-1.19.3-update.md new file mode 100644 index 0000000000..ad0ddf21a0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-03-go-1.19.3-update.md @@ -0,0 +1 @@ +- Go ([1.19.3](https://go.dev/doc/devel/release#go1.19.3)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-03-openssl-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-03-openssl-update.md new file mode 100644 index 0000000000..d327cb8095 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-03-openssl-update.md @@ -0,0 +1 @@ +- OpenSSL ([3.0.7](https://www.openssl.org/news/openssl-3.0-notes.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-04-linux-5.15.77-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-04-linux-5.15.77-update.md new file mode 100644 index 0000000000..df616c1a64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-04-linux-5.15.77-update.md @@ -0,0 +1 @@ +- Linux ([5.15.77](https://lwn.net/Articles/913681) (includes [5.15.76](https://lwn.net/Articles/912997), [5.15.75](https://lwn.net/Articles/912500))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-08-rust-1.65.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-08-rust-1.65.0-update.md new file mode 100644 index 0000000000..94be156512 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-08-rust-1.65.0-update.md @@ -0,0 +1 @@ +- Rust ([1.65.0](https://github.com/rust-lang/rust/releases/tag/1.65.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-10-linux-firmware-20221109-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-10-linux-firmware-20221109-update.md new file mode 100644 index 0000000000..c9c18a8c50 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-10-linux-firmware-20221109-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20221109](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20221109)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-11-openssh-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-11-openssh-update.md new file mode 100644 index 0000000000..9c7f63b1f8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-11-openssh-update.md @@ -0,0 +1 @@ +- OpenSSH ([9.1](http://www.openssh.com/releasenotes.html#9.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-14-ca-certificates-3.85-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-14-ca-certificates-3.85-update.md new file mode 100644 index 0000000000..19525ed265 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-14-ca-certificates-3.85-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.85](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_85.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-17-linux-5.15.79-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-17-linux-5.15.79-update.md new file mode 100644 index 0000000000..eb2a7e40d4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-17-linux-5.15.79-update.md @@ -0,0 +1 @@ +- Linux ([5.15.79](https://lwn.net/Articles/915100) (includes [5.15.78](https://lwn.net/Articles/914423))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-18-containerd-1.6.10-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-18-containerd-1.6.10-update.md new file mode 100644 index 0000000000..e2eae7ad40 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-18-containerd-1.6.10-update.md @@ -0,0 +1 @@ +- containerd ([1.6.10](https://github.com/containerd/containerd/releases/tag/v1.6.10)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-30-open-vm-tools-12.1.5-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-30-open-vm-tools-12.1.5-update.md new file mode 100644 index 0000000000..4a8a5761ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-11-30-open-vm-tools-12.1.5-update.md @@ -0,0 +1 @@ +- open-vm-tools ([12.1.5](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.1.5)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-02-sudo-1.9.12_p1.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-02-sudo-1.9.12_p1.md new file mode 100644 index 0000000000..5cd76671f8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-02-sudo-1.9.12_p1.md @@ -0,0 +1 @@ +- sudo ([1.9.12_p1](https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_12p1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-03-linux-5.15.81-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-03-linux-5.15.81-update.md new file mode 100644 index 0000000000..33a240db3a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-03-linux-5.15.81-update.md @@ -0,0 +1 @@ +- Linux ([5.15.81](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v5.15.81) (includes [5.15.80](https://lwn.net/Articles/916003))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-09-containerd-1.6.12-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-09-containerd-1.6.12-update.md new file mode 100644 index 0000000000..e67d60bb3b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-09-containerd-1.6.12-update.md @@ -0,0 +1 @@ +- containerd ([1.6.12](https://github.com/containerd/containerd/releases/tag/v1.6.12)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-ca-certificates-3.86-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-ca-certificates-3.86-update.md new file mode 100644 index 0000000000..f90a1e7838 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-ca-certificates-3.86-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.86](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_86.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-glibc-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-glibc-update.md new file mode 100644 index 0000000000..4cd0bcd3b1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-glibc-update.md @@ -0,0 +1 @@ +- GNU C Library ([2.36](https://sourceware.org/pipermail/libc-alpha/2022-August/141193.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-go-1.18.9-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-go-1.18.9-update.md new file mode 100644 index 0000000000..9f3abdecb9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-go-1.18.9-update.md @@ -0,0 +1 @@ +- Go ([1.18.9](https://go.dev/doc/devel/release#go1.18.9)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-go-1.19.4-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-go-1.19.4-update.md new file mode 100644 index 0000000000..f86257483a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-12-go-1.19.4-update.md @@ -0,0 +1 @@ +- Go ([1.19.4](https://go.dev/doc/devel/release#go1.19.4)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-15-linux-firmware-20221214-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-15-linux-firmware-20221214-update.md new file mode 100644 index 0000000000..c0e9ef5aac --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-15-linux-firmware-20221214-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20221214](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20221214)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-16-containerd-1.6.13-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-16-containerd-1.6.13-update.md new file mode 100644 index 0000000000..eb21e2d89a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-16-containerd-1.6.13-update.md @@ -0,0 +1 @@ +- containerd ([1.6.13](https://github.com/containerd/containerd/releases/tag/v1.6.13)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-19-systemd-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-19-systemd-update.md new file mode 100644 index 0000000000..2fa3997667 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-19-systemd-update.md @@ -0,0 +1 @@ +- systemd ([250.7](https://github.com/systemd/systemd-stable/releases/tag/v250.7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-20-rust-1.66.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-20-rust-1.66.0-update.md new file mode 100644 index 0000000000..b8bff4f6d2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-20-rust-1.66.0-update.md @@ -0,0 +1 @@ +- Rust ([1.66.0](https://github.com/rust-lang/rust/releases/tag/1.66.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-21-docker-20.10.22-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-21-docker-20.10.22-update.md new file mode 100644 index 0000000000..e80e568f02 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-21-docker-20.10.22-update.md @@ -0,0 +1 @@ +- Docker ([20.10.22](https://docs.docker.com/engine/release-notes/#201022)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-23-containerd-1.6.14-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-23-containerd-1.6.14-update.md new file mode 100644 index 0000000000..b479e9583b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2022-12-23-containerd-1.6.14-update.md @@ -0,0 +1 @@ +- containerd ([1.6.14](https://github.com/containerd/containerd/releases/tag/v1.6.14)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-01-linux-5.15.86-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-01-linux-5.15.86-update.md new file mode 100644 index 0000000000..bae60d4f3b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-01-linux-5.15.86-update.md @@ -0,0 +1 @@ +- Linux ([5.15.86](https://lwn.net/Articles/918808) (includes [5.15.85](https://lwn.net/Articles/918329), [5.15.84](https://lwn.net/Articles/918206), [5.15.83](https://lwn.net/Articles/917896), [5.15.82](https://lwn.net/Articles/917400))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-06-containerd-1.6.15-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-06-containerd-1.6.15-update.md new file mode 100644 index 0000000000..30a54d5d26 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-06-containerd-1.6.15-update.md @@ -0,0 +1 @@ +- containerd ([1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-09-ca-certificates-3.87-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-09-ca-certificates-3.87-update.md new file mode 100644 index 0000000000..c544c6e34f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-09-ca-certificates-3.87-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.87](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_87.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-12-python-oem-3.9.16.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-12-python-oem-3.9.16.md new file mode 100644 index 0000000000..ef911dfe1b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-12-python-oem-3.9.16.md @@ -0,0 +1 @@ +- python-oem ([3.9.16](https://www.python.org/downloads/release/python-3916/)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-15-linux-5.15.88-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-15-linux-5.15.88-update.md new file mode 100644 index 0000000000..6e5c0e1cb7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-15-linux-5.15.88-update.md @@ -0,0 +1 @@ +- Linux ([5.15.88](https://lwn.net/Articles/920012) (includes [5.15.87](https://lwn.net/Articles/919793))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-16-go-1.18.10-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-16-go-1.18.10-update.md new file mode 100644 index 0000000000..77d6218ef9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-16-go-1.18.10-update.md @@ -0,0 +1 @@ +- Go ([1.18.10](https://go.dev/doc/devel/release#go1.18.10)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-16-go-1.19.5-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-16-go-1.19.5-update.md new file mode 100644 index 0000000000..292a603e9a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-16-go-1.19.5-update.md @@ -0,0 +1 @@ +- Go ([1.19.5](https://go.dev/doc/devel/release#go1.19.5)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-17-rust-1.66.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-17-rust-1.66.1-update.md new file mode 100644 index 0000000000..8360fe1c40 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-17-rust-1.66.1-update.md @@ -0,0 +1 @@ +- Rust ([1.66.1](https://github.com/rust-lang/rust/releases/tag/1.66.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-18-shadow-4.13.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-18-shadow-4.13.md new file mode 100644 index 0000000000..f2df123b59 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-18-shadow-4.13.md @@ -0,0 +1 @@ +- shadow ([4.13](https://github.com/shadow-maint/shadow/releases/tag/4.13)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-19-linux-5.15.89-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-19-linux-5.15.89-update.md new file mode 100644 index 0000000000..d6bfdbd8dc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-19-linux-5.15.89-update.md @@ -0,0 +1 @@ +- Linux ([5.15.89](https://lwn.net/Articles/920321)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-19-linux-firmware-20230117-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-19-linux-firmware-20230117-update.md new file mode 100644 index 0000000000..6e986b4fb4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-19-linux-firmware-20230117-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20230117](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20230117)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-25-docker-20.10.23-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-25-docker-20.10.23-update.md new file mode 100644 index 0000000000..b1ed79b43a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-25-docker-20.10.23-update.md @@ -0,0 +1 @@ +- Docker ([20.10.23](https://docs.docker.com/engine/release-notes/#201023)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-26-cri-tools-1.24.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-26-cri-tools-1.24.2.md new file mode 100644 index 0000000000..61c1251845 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-26-cri-tools-1.24.2.md @@ -0,0 +1 @@ +- cri-tools ([1.24.2](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-31-rust-1.67.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-31-rust-1.67.0-update.md new file mode 100644 index 0000000000..6864cf2340 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-01-31-rust-1.67.0-update.md @@ -0,0 +1 @@ +- Rust ([1.67.0](https://github.com/rust-lang/rust/releases/tag/1.67.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-02-sudo-1.9.12_p2.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-02-sudo-1.9.12_p2.md new file mode 100644 index 0000000000..e966f0ea8a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-02-sudo-1.9.12_p2.md @@ -0,0 +1 @@ +- sudo ([1.9.12_p2](https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_12p2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-03-containerd-1.6.16-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-03-containerd-1.6.16-update.md new file mode 100644 index 0000000000..59633cd68e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-03-containerd-1.6.16-update.md @@ -0,0 +1 @@ +- containerd ([1.6.16](https://github.com/containerd/containerd/releases/tag/v1.6.16)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-03-iptables-1.8.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-03-iptables-1.8.8.md new file mode 100644 index 0000000000..6f3e814a2f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-03-iptables-1.8.8.md @@ -0,0 +1 @@ +- iptables ([1.8.8](https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.8.txt)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-06-linux-5.15.92-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-06-linux-5.15.92-update.md new file mode 100644 index 0000000000..60033cfe73 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-06-linux-5.15.92-update.md @@ -0,0 +1 @@ +- Linux ([5.15.92](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v5.15.92) (includes [5.15.91](https://lwn.net/Articles/921851), [5.15.90](https://lwn.net/Articles/921029))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-08-openssl-3.0.8.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-08-openssl-3.0.8.md new file mode 100644 index 0000000000..93cbff5d25 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-08-openssl-3.0.8.md @@ -0,0 +1 @@ +- OpenSSL ([3.0.8](https://github.com/openssl/openssl/blob/openssl-3.0.8/NEWS.md#major-changes-between-openssl-307-and-openssl-308-7-feb-2023)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-09-systemd-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-09-systemd-update.md new file mode 100644 index 0000000000..d9f0b78ed2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-09-systemd-update.md @@ -0,0 +1 @@ +- systemd ([252.5](https://github.com/systemd/systemd-stable/releases/tag/v252.5) (includes [252](https://github.com/systemd/systemd/releases/tag/v252))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-13-ca-certificates-3.88.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-13-ca-certificates-3.88.1-update.md new file mode 100644 index 0000000000..8f0d11ee93 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-13-ca-certificates-3.88.1-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.88.1](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_88_1.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-14-openssh-9.2.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-14-openssh-9.2.md new file mode 100644 index 0000000000..1419458c22 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-14-openssh-9.2.md @@ -0,0 +1 @@ +- OpenSSH ([9.2](http://www.openssh.com/releasenotes.html#9.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-14-rust-1.67.1-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-14-rust-1.67.1-update.md new file mode 100644 index 0000000000..3d1e1e5289 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-14-rust-1.67.1-update.md @@ -0,0 +1 @@ +- Rust ([1.67.1](https://github.com/rust-lang/rust/releases/tag/1.67.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-16-linux-firmware-20230210-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-16-linux-firmware-20230210-update.md new file mode 100644 index 0000000000..7e5ffe356f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-16-linux-firmware-20230210-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20230210](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20230210)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-17-containerd-1.6.18-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-17-containerd-1.6.18-update.md new file mode 100644 index 0000000000..cf2cc1f6ac --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-17-containerd-1.6.18-update.md @@ -0,0 +1 @@ +- containerd ([1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-17-python-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-17-python-update.md new file mode 100644 index 0000000000..5d6f600590 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-17-python-update.md @@ -0,0 +1 @@ +- btrfs-progs ([6.0.2](https://btrfs.readthedocs.io/en/latest/CHANGES.html#btrfs-progs-6-0-2-2022-11-24), includes [6.0](https://btrfs.readthedocs.io/en/latest/CHANGES.html#btrfs-progs-6-0-2022-10-11)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-20-go-1.19.6-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-20-go-1.19.6-update.md new file mode 100644 index 0000000000..266c4ff1af --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-20-go-1.19.6-update.md @@ -0,0 +1 @@ +- Go ([1.19.6](https://go.dev/doc/devel/release#go1.19.6)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-24-ignition.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-24-ignition.md new file mode 100644 index 0000000000..330e2df6af --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-24-ignition.md @@ -0,0 +1 @@ +- ignition ([2.15.0](https://coreos.github.io/ignition/release-notes/#ignition-2150-2023-02-21)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-26-linux-5.15.96-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-26-linux-5.15.96-update.md new file mode 100644 index 0000000000..61be0091d0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-02-26-linux-5.15.96-update.md @@ -0,0 +1 @@ +- Linux ([5.15.96](https://lwn.net/Articles/924441) (includes [5.15.95](https://lwn.net/Articles/924073), [5.15.94](https://lwn.net/Articles/923308), [5.15.93](https://lwn.net/Articles/922814))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-03-containerd-1.6.19-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-03-containerd-1.6.19-update.md new file mode 100644 index 0000000000..b217a235a3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-03-containerd-1.6.19-update.md @@ -0,0 +1 @@ +- containerd ([1.6.19](https://github.com/containerd/containerd/releases/tag/v1.6.19)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-04-linux-5.15.98-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-04-linux-5.15.98-update.md new file mode 100644 index 0000000000..69eb48d30d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-04-linux-5.15.98-update.md @@ -0,0 +1 @@ +- Linux ([5.15.98](https://lwn.net/Articles/925080) (includes [5.15.97](https://lwn.net/Articles/925064))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-08-open-vm-tools-12.2.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-08-open-vm-tools-12.2.0-update.md new file mode 100644 index 0000000000..c96ab269d3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-08-open-vm-tools-12.2.0-update.md @@ -0,0 +1 @@ +- open-vm-tools ([12.2.0](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.2.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-13-ca-certificates-3.89-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-13-ca-certificates-3.89-update.md new file mode 100644 index 0000000000..39fa5965f4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-13-ca-certificates-3.89-update.md @@ -0,0 +1 @@ +- ca-certificates ([3.89](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_89.html)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-13-go-1.19.7-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-13-go-1.19.7-update.md new file mode 100644 index 0000000000..bee03d72e2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-13-go-1.19.7-update.md @@ -0,0 +1 @@ +- Go ([1.19.7](https://go.dev/doc/devel/release#go1.19.7)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-14-rust-1.68.0-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-14-rust-1.68.0-update.md new file mode 100644 index 0000000000..1b72c147bc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-14-rust-1.68.0-update.md @@ -0,0 +1 @@ +- Rust ([1.68.0](https://github.com/rust-lang/rust/releases/tag/1.68.0)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-16-linux-firmware-20230310-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-16-linux-firmware-20230310-update.md new file mode 100644 index 0000000000..fd03e73c7b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-16-linux-firmware-20230310-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20230310](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20230310)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-17-linux-5.15.103-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-17-linux-5.15.103-update.md new file mode 100644 index 0000000000..3265c4df06 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-17-linux-5.15.103-update.md @@ -0,0 +1 @@ +- Linux ([5.15.103](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v5.15.103) (includes [5.15.102](https://lwn.net/Articles/925991), [5.15.101](https://lwn.net/Articles/925939), [5.15.100](https://lwn.net/Articles/925913), [5.15.99](https://lwn.net/Articles/925844))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-30-runc-1.1.5-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-30-runc-1.1.5-update.md new file mode 100644 index 0000000000..8367fcbdd7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-03-30-runc-1.1.5-update.md @@ -0,0 +1 @@ +- runc ([1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-04-rust-1.68.2-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-04-rust-1.68.2-update.md new file mode 100644 index 0000000000..d5bae42e34 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-04-rust-1.68.2-update.md @@ -0,0 +1 @@ +- Rust ([1.68.2](https://github.com/rust-lang/rust/releases/tag/1.68.2)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-06-linux-5.15.106-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-06-linux-5.15.106-update.md new file mode 100644 index 0000000000..f1354aa119 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-06-linux-5.15.106-update.md @@ -0,0 +1 @@ +- Linux ([5.15.106](https://lwn.net/Articles/928343) (includes [5.15.105](https://lwn.net/Articles/927860), [5.15.104](https://lwn.net/Articles/926873))) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-06-linux-firmware-20230404-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-06-linux-firmware-20230404-update.md new file mode 100644 index 0000000000..9b00ee50ee --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-06-linux-firmware-20230404-update.md @@ -0,0 +1 @@ +- Linux Firmware ([20230404](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20230404)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-10-go-1.19.8-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-10-go-1.19.8-update.md new file mode 100644 index 0000000000..c999a183c2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-10-go-1.19.8-update.md @@ -0,0 +1 @@ +- Go ([1.19.8](https://go.dev/doc/devel/release#go1.19.8)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-11-docker-20.10.24-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-11-docker-20.10.24-update.md new file mode 100644 index 0000000000..fafb68f0ae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-11-docker-20.10.24-update.md @@ -0,0 +1 @@ +- Docker ([20.10.24](https://docs.docker.com/engine/release-notes/20.10/#201024)) diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-12-containerd-1.6.20-update.md b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-12-containerd-1.6.20-update.md new file mode 100644 index 0000000000..39b1a3cc97 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/updates/2023-04-12-containerd-1.6.20-update.md @@ -0,0 +1 @@ +- containerd ([1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20)) diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/Manifest b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/Manifest new file mode 100644 index 0000000000..4a4a9725e7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/Manifest @@ -0,0 +1,186 @@ +DIST aho-corasick-0.7.18.crate 112923 BLAKE2B 4f6947d1aacf89ccfab0592cdc55fa61ef09cea38231d3f758765dbce328a810c0b588be4ba96e81d64955379ee005722d22a7aec39caea6e72342245d7ca34f SHA512 7a23b16231a90d23ee60ad4c81bc225410599a4560d33d3a203138fc540c39cf1000100fed3aed40dcc371c3635656a3792545dca5dd1aefbde00d8774eebd00 +DIST ansi_term-0.12.1.crate 24838 BLAKE2B f636772c34e2d68cda7b8d3b2b86abda074585a62bd2654812ce92384244655a9197fa66e6939e19a674c0148ca605313d83de262bb18c2339a8a4eb4438a791 SHA512 b840e28b3e7700689a69a39659b1e066560078dd4a58326b91a028915819e7af883399ee53e920db68fd974c58d35bb1ddf8d427af5937d5f696f57c4376b671 +DIST anyhow-1.0.52.crate 44224 BLAKE2B 79d68d3390d27e0e27f9db784ad10b5d7845dec7949fbc722f944ef3988419acd72c509b44a4544e99bea5e57407da5b1ce40a96277d307fc408c958ea915c31 SHA512 b87e0b304daff85894c34060b97379d8e3d9be03078275313035c7142c76b3e59922b25924ac98a0b1b70fc98746eb174ca4b7ef33a26e115f294c1f1200aa6a +DIST arc-swap-1.3.0.crate 63680 BLAKE2B 11ce7c65810b8870c1736b85f1feefe3a1478f70070569ffdea1bec85254916346f646c5c9b605d11fb35751167c3132a7bb2d7d2f77bab7df3bc479e07d4392 SHA512 750786c5e9044d92d6809a1b5b10dac4fe3408094f21cf87294e6716055e2f6ed42cb91d54af6803977099f63bec49a9524c9049e8425c77f5cf8703c252418d +DIST assert-json-diff-2.0.1.crate 10892 BLAKE2B 6081f046ebe7d188516ed00d891c0efeed1fa7e5385e18ddff360b7606d2002ba780501f81b88acb3e171cb96b83464862d8ef018b9613b8555942184f60f9ba SHA512 a9bcb87cd62382c676ee539f526a7543f69382f5c11a4644cae353e3b689a79f7ae7e35824b4c5e29aaedf7a55415560030055c5c38ec8b1639393a79fd535af +DIST atty-0.2.14.crate 5470 BLAKE2B 2db856a9e898a430258f059aeaf7c844a153293e8856d90ac81f7d91a888c89198768ad5cb09303c23241fe85c560a55148fa56a303651a82b0edb895616bfab SHA512 d7b6c4b9a0f898d91ddbc41a5ee45bbf45d1d269508c8cc87ee3e3990500e41e0ec387afb1f3bc7db55bedac396dd86c6509f4bf9e5148d809c3802edcc5e1d9 +DIST autocfg-1.0.1.crate 12908 BLAKE2B 40c53cab298e4f26634c3acff3ece6a3371188d91dbf377ed664eabedcde20536edaa93daf406618f37edde019f049a6e7b9a47f627344587dbd126bee2b5e3a SHA512 630b348acb98b012e97804e6325d03c89abc22f2157762c59144c04e6c733daf550bdc7f0fe0b9f3b50e15dae8c1c3c4bdfce3d805b02f0fc987311f5332419b +DIST base64-0.10.1.crate 41988 BLAKE2B 6e28a70cc0d5e426d9a3944825952851928ec2e32fa2543a8e1d1b886ad306f38fd6e673da62e96581e56613f133265feeff5b0d2f1e2e34593e58c0424eee9e SHA512 674a8cbee95a41f755499a4e3bb93ebd3f80140c3e8e2d44a0b73890ee423754e7ba8abcd92132683cd54501ff5d14438d023a202eaf12776aecbe36df9e5535 +DIST base64-0.13.0.crate 62070 BLAKE2B b957f65cdb1e28baeca0cefc92fa98be797409b7dabd15e0e88db6cdfb89779b662cba9f2270fbf3b7b66948fdc46c118b8040a78ab72049c48a928fa802bee0 SHA512 991a72999839daa232f508c5b24e7d3225e8a26db8d1d0e747881b115af9e408b92374e163b31e0b0d324c1c2e57e8e38d66861b61eb0a1dba87bb5871940151 +DIST bitflags-1.3.2.crate 23021 BLAKE2B eb990bb27b2bdeb66fd7212ce582cb36e1c616debbac85df642d0c82b25439e6bf9b1e811fac76b59e58ea3c1bbea6170d03a61e8f9a395e4334a0e2e2987eda SHA512 3c698f757b5cc62f815f9a1cce365c3d2dd88e4db71f331dff8bba86c2865f755b81cb4c9bfc59bd86b7643b0943f9e09a7c4f8ad75eb2ab0e714803d0129f62 +DIST block-buffer-0.10.0.crate 10088 BLAKE2B 4af449e0071de2b367f7311f8e4a18b29ed2bdd1d0f5f623a45a9287af040cb2e0a8ae088d817e8249130a64abdd9df2b3909eca7f64a717d952a0b1cde4f54f SHA512 aa71e7463ce6520b2a8e1b1e571474c16a052129e0b0dcb8bf57bb4304182f5a75a079311a50363fcf2368318c277c2f3cc06ea9cac47764e0cedc8ecb79a7b6 +DIST block-buffer-0.9.0.crate 7108 BLAKE2B 42e99ec46c6e43d5f85e8d6d0a8fcef7175c97828758c93e55505c0e18e2646ae77bf264076041bf682532e28268a4978dd9c822c0475347ee3d29c5df2601fb SHA512 2d0f8908f59d4b1cccd1fbca0c1fa3cc4b224f09549669b28a16af5acfd4369b66851e9be8d65e1df71be998fbc42fc130ad32b71e035d6055724e8fa31fbf98 +DIST bumpalo-3.7.0.crate 134261 BLAKE2B 15c4944abc803537c57076dfa8f5fb4b59949909450edd9e043a6cd438ddd227820e20e95236324c06e40cb27ec1e4d958bebf3d38df90f0723b8e30df79b6ef SHA512 0b570e1baee530b5c3f775330ead7cf5f8878eab75e5a6a61b5d3f64d4d82912cb26de1c098ec9492c29c7a04fc49565db97a54373c546d8ef58aab276d77c59 +DIST byteorder-1.4.3.crate 22512 BLAKE2B d39c546ba7346df315297fc53da4bfc77ecb1f38567ddb788549ee31cae2719a8bc0b7d1f1705abb3cff033aa57af004987d90748f5a31765273b3223a011c0d SHA512 8c8000eb8ecf40351c9ce36a3a8acd7a02f81786d1b11aab85adfeffa0f2267ed74df29b2ca5d1d38128484d1d3cad2b673aa0d0441dcd0620dfd3934bb888fa +DIST bytes-1.0.1.crate 48142 BLAKE2B 3ffe07c5429d7d2df821c04325b8dc84b343c634b4699e9c08b07181e741c06233a0501d987b95f513be57ac169537bd0812defd118305e0648ef41f6802d19a SHA512 885d3229e51c0deffe06824e81e8a016e3244106e7ed382a721a938cd2e69fcad7f5e757f95cb07ee1be83de04fcf98f9774f8f2e07aaa9a1ff068eaabf2fe87 +DIST cc-1.0.68.crate 55936 BLAKE2B 9bbbeda78b8c3aca487e770cddbe11bf4686424bd33d023ad66e1fbdfc8dcbc17fd85c15905e0edbed8745202c01aea13d4f03a7f8f655e5806da152565419aa SHA512 faca9aa91488808f920f1d88422cc8a69790aa6dbd7bd2cc5d08a579d248faafd0fd675e8499e56aef6715398c278db1fa2079511d211d41aa65741de5d5ac8c +DIST cfg-if-1.0.0.crate 7934 BLAKE2B e99a5589c11d79d77a4537b34ce0a45d37b981c123b79b807cea836c89fc3926d693458893baca2882448d3d44e3f64e06141f6d916b748daa10b8cc1ae16d1b SHA512 0fb16a8882fd30e86b62c5143b1cb18ab564e84e75bd1f28fd12f24ffdc4a42e0d2e012a99abb606c12efe3c11061ff5bf8e24ab053e550ae083f7d90f6576ff +DIST charset-0.1.2.crate 14490 BLAKE2B 78e776003334cb5a7c8980b8f6f5563b0eb3da8b9c039106347b6ce47f9f0147647c7c643acc18ba3fd9b2a7c897974e2433cfeb3725b5287362ad73ed80a7f1 SHA512 8a740dbd4f7088653addb6fa4293a7d62b8f6a9f727413e2ee46289179b36d6c18ad48b1f3d548f9c153166e16937d9c60b79fcb0ecb5412a635bc6fad11b54a +DIST chrono-0.4.19.crate 155663 BLAKE2B c92c273fb6475bbb2546dfb75eaa23321bc8f9a5fa8a7c652f527649b96ff8718fa932f52b500b02a4acae7837df5bdb14f69cb821d4962be2790dbd1d023a54 SHA512 a119349bfc2243a249f1d18b1ae548a04b30fecb75913a56f26d1ff8c0eb53097a2674d9141e2094018191cbbc1620843fbddaf52999824e077c1157f0907980 +DIST clap-2.34.0.crate 202210 BLAKE2B f383adf1d757ac4b68995132b33837686ce451f85a02a8d05d2c746da398510d05d46330f3efade063c3952aacb1754cdac73dd0afcae0df5340a89f9353aa1c SHA512 c648a761b9996a7e7464a538bb53621bae22090b846a42c3b729beca3363958ae67e3da9f93f58b10a10e043cadf7ff930388680d168646178c2824177832db8 +DIST colored-2.0.0.crate 21619 BLAKE2B 5abcc05a95cd74a106c4e4f3c9b1722a7a9493c7d16c2d73f2a116d1d0d20f93d00c414a19871930e6286aa60cdcb0f4f4411ae059e7e76b7632cfca3a55ebe9 SHA512 c9ee830c1e8a32372ab8c7ce569701deaa6533fa369fc1b4c04bed57b1e686ed775fc76c3d9815ad21ee69cfc7c30d645abcbacad39081c7e37ff83ebb6d9e8a +DIST core-foundation-0.9.1.crate 25985 BLAKE2B 22e70b7b1cd1f39c4ac287f406dabc549e3ba750ecf17955f129ff83afe67bb4bdee7e7907287eac0c28597df971de27dae77619f44d0368864c08798def1ae2 SHA512 d6dae760082ef9dcfc37d18acfa9a6ad8ee491335d17ee17447c5bccad623564f1e8bdc54460fb260aebe9276ce5ea4d8a389a83b5c7d17193614906c3d2bea9 +DIST core-foundation-sys-0.8.2.crate 17461 BLAKE2B bafa6f6af67f55b34c20e50093a5426bed35c159058a97c03d28c99b6f0075305596907291d26b170ee2ce1bf0c74bd51e2c54f11ef021399791129de6cabb57 SHA512 1c66f2012c11185603a0e4c09311d32bc4ffe639ef7626e49bb15006306fbed4c963f2c53d3b853a254b29cda73c393e0236436575d217992268463441ac7348 +DIST cpufeatures-0.1.5.crate 10419 BLAKE2B 77e0eb2c8b1b638b9812ebb3a1ac5c48b9c2f7690fa9ef7a9c14a49a880958c2a39afc00e981115078bec98725e4f76eb338465935017958caf5922f3f124933 SHA512 700c31a677867df05c69ab098575c66d4d9f2de077431f938c1e0036492e00e876e6c563b705e22cc82c937fa01049b42d577c9b4c84ede4fee774ac30362478 +DIST cpufeatures-0.2.1.crate 10500 BLAKE2B 92e676cd9a8901cdb344340dc7cd7b6d66114a15bd72cdaf600283c79c2339fc8f89b57ac38808141037ea45ae32628e9485cb825c7bcc25abd94c41b6549407 SHA512 0db2486beb0f287b2b4f8543f0f02c4e6d00f66e65c9785a1ecd2868c460553f016b33426c24d0b0ade1417906f5853cfbdeed98ad85cfb73b4f7ad3af85a613 +DIST crossbeam-channel-0.5.1.crate 86919 BLAKE2B b223d0dcacbb09850d457825cb2a018494d798d0000a20eed3f54b1152e41ebca4698e7d50e81f467b86543779155ad08566da9496eee36aa06644b69cf5d7eb SHA512 f15aff67e9105584f5fe41e1ee650ae4fdd0d0ca0fa9202ee83c6f6025398a300decaa50d1b4682e8afb9bd6e11e95b69bcf23f68ae117419aa84df14ee7747b +DIST crossbeam-utils-0.8.5.crate 38414 BLAKE2B 8a10162cbc54f77737602b6f8574b65a02765577f0e2f59d71e1d87662180fe24a781df542f3e765c4d64b7a0666575157e000766dac138bd4fc0356944092ad SHA512 fd4d2ae10340bb96c22b31190b300aab54e96b8089fd62489e102c76a944e6a16c582a90bc40f5e188f13f841293a4b9becf30830c2ece04f3ce78c29066532f +DIST crypto-common-0.1.1.crate 8271 BLAKE2B 49e323fe068d38f541d7e387aa53e2481ab09626c38fe8e950561592d89f34ada998a507e2dc79a265466cfe13afe516e40203643f03cd9bf440c06b06e48412 SHA512 63eb9a8f0fc962443a5c09d92b7f0fa7b6f2b6c02ae806076d4f8d6203492832922e31cb6c1d8b573c550541bba16739ef40ad262bafb38db57e88089f9a5bf7 +DIST difference-2.0.0.crate 147616 BLAKE2B d720202ba8d73fb9b3cc6a982208e4fbe22eda4b3e296f4238a7b2d8ed0339827ca5a3d93a983396901614a9eabe36a0baf55ecc5f55075ebf7fa1e4c0699eb2 SHA512 cc9956757770ecf237d8f46abef25ce219193c877be6cf83163e87c494956cca3202951ac01bba0728e7202fcde2261009c1b4599f389cf979858f25936a5482 +DIST digest-0.10.1.crate 18909 BLAKE2B ca28e71cd2912bea3cd6fe73194cf54a7cfa174365a0df422f7900ad71b395ff4f8f175387d54c90fce93131bf118d34b8d5d880370c9d44ce6172a0212e11f7 SHA512 7a2067d050797830ce9900b11f230c6b7d28de0b8d2f3aa23517988d531b217e9f2d7eacb2213a85ef017d9a5ad4deb1cdc02dd545b7dc3c73e855687bd7fd58 +DIST digest-0.9.0.crate 13247 BLAKE2B c5f2fa8a5bc12021d99ea63f08fa8c8b5b3353d90cf9d58ba84252b3f81b88b52f28c15c24c61fcee44f7d547a0bad11def7fa8f4616d070db163e48f89ab64b SHA512 8637a322c429f51ecb0fa4c3b58fabef01368c1a093492fad65f48eeeec2366fd1b7876e6e47723e089ec5ce11f881bfe4dcebdc605811252b797db027746a45 +DIST dirs-next-2.0.0.crate 11689 BLAKE2B f5022bc51dd50bad4ad0fd05b159a4117aca47afbea66dc42c8306ca58f3a550165afbcf9f5f721ef5ad8d357eaff305c6f6e42789354a910d5f1d05d3b7b7c6 SHA512 6ccb732da8ccf7bf35952c22a3b0caa8238319feb0a6cd3b0957e6be12548a2ce507c69cb6d3cbd2adfb37e13e6521c6229da5999edb0e47a292a41c3ea1a766 +DIST dirs-sys-next-0.1.2.crate 10681 BLAKE2B 71431533dbfd6016cc309c14a842ac8d43577abe768e69bd2caaf7d19d743f3ca95b9b0be1747077282089c64485f3d4e24bec8e56d4d883f25e494d328fbf3a SHA512 b3c40a8e93d4f9f4a890718076e14779aedd67a79da61b466788268c1eaea19aa493f043a7e410f5023a23d5509e639a6fc6681fbee30e252a601091cfffa2d5 +DIST encoding_rs-0.8.28.crate 1368577 BLAKE2B bc10eff55063286b48590c3100841c7319268cf17e10176aec7adb39f3d2106e80e25d8ca68e5b4e568083be75d596eaff53807385c4e8d1b59d4aed7ed08ca0 SHA512 8b3f7450789e33f1ad9306d152f1bd230e66c7e799de52046acd5b11f903e8c86cbe2f0aa2cfb0f0e60bd64b194250defe05ef2a171b707e129a2324de47a9b0 +DIST errno-0.2.7.crate 8960 BLAKE2B 5035ddeae88e3adb6ee5dd274cd5e1f8340f7525ef39c165abac5db46ac999a6afc9715323b26eb384df446225b6d6e0e3af928c843692f4885570dcea4afefc SHA512 2d22a44159176d1f898569fe892fec795fb2b9bc35ba735c7275a1dc23c2f9e31bffa2f1d36c4b02230f623206c954e4bbbd704d606e5ff5ccc5e73fb2f536ab +DIST errno-dragonfly-0.1.1.crate 1370 BLAKE2B 8cc4cec5a33af40aa3578ed95d097acf532f3a0a774c653111763a955c90682089f65ca422bf2d22e1fec1a3a053860a0cffc5b44d40745042d167cdd933ded3 SHA512 04d2db15d92ed8e770ff4fd0e200c78ee9235d0f856c163373fdc3fbc063e01daa91f958db212b977c49406e2287dda34e98901f1b1516a6a467ea2cc501d074 +DIST fastrand-1.6.0.crate 11338 BLAKE2B 2862c5d40364b3412c7a6fbceab0f883a012412f22a24b960008b7951f3d6f0d5410fb28f75913d0bf3ac6254fde72b591343425e4e1016d77b9e53c8f5a934f SHA512 85f0c5e01b9e549b6a170561600138caea9604f18eccafcc4c37c2bd70f992e77e852bec20302028ffeee40d85fe8e8dcb812c0d996010a0427fb68a0ed7b029 +DIST fnv-1.0.7.crate 11266 BLAKE2B 81da85889c91b6567e0f555e37dd915f1bd919719d1ca10c31a6861d7aec29a49ae9c1e8bc500791bf9d6b8dbb318c096d04872c5872a4b1f7d45fbd8e12842d SHA512 2195a4b34a78e2dd9838caf0ee556bf87cbb4a8ef5505aac663b614eb59dcfc0c40f432463ede41ecca57bfe7711f72673d39a85fe03d426f1324097d5628334 +DIST foreign-types-0.3.2.crate 7504 BLAKE2B 520818b702d990d296ecd31a8646850202509ccfa18edd0e1b260289619a6c351e758f317ec0824bd76eccb209b6f087057c25f1bd01a47897715013dd834867 SHA512 bf27b8243ed482c202d120383374f19ff09422535e24b9c1aebccc66529bf300ca17b8bbc76d67f98ac092e614497afe3add9dc68aa69c93074df05762f91232 +DIST foreign-types-shared-0.1.1.crate 5672 BLAKE2B d2e42e04b6657e7a69fe0bd20c672176629c743e49a55fd007bb30e289710b70045d445ae9cae0eeaa747ee708c90e8abd9b5fc39bad8ec0666befe1b696d4f1 SHA512 bafdb2143e136fb0818e2ffd90b5c862b7181647d6568947d4e4531012bbf7a57b597221ec7056c1b562dfc0c3b5dead26d1a4111ebc15e7863737a873518a4a +DIST form_urlencoded-1.0.1.crate 8773 BLAKE2B e2d2224dbd85d053343aea29ef1bd540fb8be12fd600289e9c048e3b74bfb009d0770f8296556309ef756086f22feec4713dfed1006e1101075c8897be5471cc SHA512 3ab371c223561a27ffbd35cf648ef4a9145d47bba9d71900a7c54cfc2f089175e9361f6352331a9a7fa018923b15e7a3553c8f9ff9fae80e1626e641a5faff68 +DIST futures-channel-0.3.15.crate 31867 BLAKE2B 4dfffcba38e26f7805b55e09413e114976e205507f21454eda084ac975034183ca1083f4d9df624bf17c05d98d1e3a84e0b6cfbb99521792d56cd2e1d3dce997 SHA512 d612c1425286eaa1a713e073edfae8ab8fb4e0b7c82ffdade57bc5dd06c54de6de46119b1cd87d7686cd4efbec38228c4a82d250ac693daa39dcfbf365b7ad25 +DIST futures-core-0.3.15.crate 14514 BLAKE2B c24ac1060c981887896b73ddaf85007a8a56c4fe03c6ea731d3e8389294bc7d97cc478d8ba7ff5d0e7a2cb17f54d1c7b2bbb2a2a0646c44fe1f5bff670495cea SHA512 e8c6710882e7328493e7975fecc360f2071ae39d1ea88a04a38e4228c48f9af4c545c6aead868d13689cfe33f4c98c5b5bff2f9cfdb0105368b11ab2d652efb4 +DIST futures-io-0.3.15.crate 9058 BLAKE2B ab496ea8852ac74edf96f7c91bf074739bf3972d22c2dfa1ba3138244910e39098c99994679b0f4211ed9e49542523bce2caf7bbe972da6a550dd6169a69df50 SHA512 9e8787d8066636351de2958169d6ad21d02a3b871cb242dd4fef64b97dcfc14397740107f13d1e48c27640b768fada821fb433187b5d0f0a03e7555d15eb5917 +DIST futures-sink-0.3.15.crate 7672 BLAKE2B 10386b796da43d3c2c18a53ce0e0f0db862ebc45f71bf277e2e0912d2fbe04ffe8411ac1f0f4b530fbcd1e37258df46640db7e68d84c5fe8863508ae530eeff4 SHA512 319a8367c2ad4f9410a3eba4a345ab2d49a896d9b9b2ef2a888918ff0289491283afd17a29e618eb4e064b7c76008e28d5b16f00e888fd5a506b65d5b79a2dc7 +DIST futures-task-0.3.15.crate 11811 BLAKE2B 65c6fbbc9f3b2f39765550f673d5e21eb455521db8b9251645b173fdd898bde9ba69f8efa8597e1ffb051e7c8f2749f2141affa5a5c64c92604992410aaba199 SHA512 66529a849c924ac08603f5ade52954bbcfc3e1796f20dd49eb0289d2ad9cab34e31f07e942736b635d6c1903dba299a7d9a36defbd4902c019ca382c4a376040 +DIST futures-util-0.3.15.crate 141962 BLAKE2B f31ef9a97f05807c995aa73d181050a0ab6af4369058f548c9a6ea6f7e055ecfd5e3c6efadccea2c3d39982cda280ca6a6b7f9a404e8c6bf19df64206598b851 SHA512 a89ffe93d277a93e9c825cdeccfe50dd797d9de6360a1ba44748a46bff6238261e60c9eea9659a0c7e13294973c0976595b20b0740c36c1f9204144102e204ca +DIST gcc-0.3.55.crate 37262 BLAKE2B 3341dc7136c14fa822a67fdeb72f7ea50b1264823e695e189d69604b8b8cce898ee2d40d8a536d0f520f5e190576afde16afa5d9cbe0a2c4b8600cf50bbd1447 SHA512 b045b60cf65c1deae44e4f40d0f511dab05c82be5065390dfbdaf5b51ee2d0653c3a6d8d1e7606e4bb6d234adfd22a8c68bde724406f3edb4bb6366617d46a86 +DIST generic-array-0.14.4.crate 28916 BLAKE2B 41adcb738bb316d17967e029a829dcf7377427977309b010c2f2e365f16306b44991eb5f65698782497f614b129b14cad11bfeba2ae19b45efd117114492517e SHA512 34ac71fee2cd50ff786d39b4abacd9e090a8598baf4dc36ba5fecfb7171cd8e4f58e5360cbb0baf02a87eea26b7dca85b35555b82bbefe06635d2fd38f7b8b40 +DIST getrandom-0.2.3.crate 26261 BLAKE2B 3e52a87b9355f850e07e5080c20e1ab3acfa927bae28c63bb8bfd6a773ad77be96d3ba770c344631cc0f2d9a95aac920790173168b102e25f50480ee96663569 SHA512 e6da64ed529cb0fc000b613f75187ed6b20f716e721d8a02ac2ae39c507fb9f6189ebb66b522d28584eff1e7e9efc274cad6bfe43f464f58053701e1d51c603d +DIST h2-0.3.10.crate 161733 BLAKE2B 214dfed37128bb4c6bf25728f0fc036d44b7b8bde17edd2a84b20a2c7e5ea8c1aef9ec3c9a74b3fb1c42298fcecc0a0f13b70f9ccc8f40cc2c49718478af9c0f SHA512 919f27360e8aee1121805796687a9e5be7857d53445a3f7d524bcf344d3f8c83d5056e68d69b1dbad1942dedaa0702155500181bc4499b643910ab9c6bb2b07a +DIST hashbrown-0.11.2.crate 85713 BLAKE2B 402f9f1bdcb92631206f9b72923ee35e28db8623e87469c0f1496664bc7185077013ab3c8aea68268241e5b2504f10cddc613a350abd4291050deda6c112e559 SHA512 c21ca68fd49bbb741901f59fed04cc124b8da99e2a4dfc26e2e5e1140637872b344612a01691bd30cc771575c571be15f756c84dde225441699cd2322af2ad6c +DIST hermit-abi-0.1.19.crate 9979 BLAKE2B 801e8052b85341cca388ada9db4b06bb1bd7b64474185b2ad06c0256b9e597639bd3dd4ba0053ea010f922e53969a4ab47b90d451fd9b94c8f2324055d151ea1 SHA512 1c877fcd562b15d2de9c151fd6c5f3ea4bf48abcb799e6139a180ffad5d64b632f0000d5707bbd92ff23a0e5f349157b9e0f5be8b50f03680b0fa47315dbb78a +DIST hmac-0.12.0.crate 42552 BLAKE2B f05dc8b56effc123099948e6b22730e8f4aedeb604f62329558180890f686610e36add7b276ca1398b65f513283bf0be92f877935bbdbf0f8985f9146dc4ce19 SHA512 01a28db669418e93ef6ae7afd2b23e6f687bf5b7005e10c40b4e41ae80d10fa86d375872cc08641075278de3068c43a082c6c73d3474a84c3f35b488de0622cc +DIST hostname-0.3.1.crate 9272 BLAKE2B cafcae4bbfadd51d058e3daba3e63d897bc3418723d8e843fd941d9663dbc89dba131c77d14ce7a5da552650ea3c40c4e418c88d465f1bab2fa20c178596852d SHA512 a90407996353c9bcf5b76be03713e3a0455ac80a50892e77a508744cf436a938ddb87ef97d8cc91ec7dc4353cfb7bca0fd28c90a72f8a9ecd4f29220d174edf2 +DIST http-0.2.4.crate 105489 BLAKE2B 07acee6b91b6a316f3277ad324df6da1d2ac804a409983384d2fc027ab63ed05390278b21867c0096730c91a00b8f8971ab6a66d17b9764f119d245592a1cfb6 SHA512 0b5c609c12ae4020801a184dd6c751919bfd4db985844c55b53368afbe2b9f641cf9aa523ae49a0b25a251cd8f19ed634fa28990d4582cf7a27f10c4304eb465 +DIST http-body-0.4.2.crate 7603 BLAKE2B cb3739c4207e678dace73889a621d56ce85cb87c32df8174112bd3812e1d804454694679a38c268d13bfe49de4f364ffca3c279317beeb26e89949c86b335b58 SHA512 69bd0a9324626953d2114ef4dddb69da8bb9f90236529e6d40cde0ed92c210f6b6849fe4558fcae50a578dff74e70c57fe8853bac4980101404fffc0b0cfb6fe +DIST httparse-1.4.1.crate 25592 BLAKE2B 4527521876c4c44306819336bb4b53ca92b427b1b7e6d41f7b1c284812d6c5256870f074bf5273e63922da50297fbeead19c451816f76d9b9b500a5a4316dfb3 SHA512 0dd0f41076009616a80e6b43b317e8560918f5ffffa7467d58fc9885bcfec758ee521beecd665e75d1ee6fcf7dc7c9bf8aa560c2eb885b4e42b84e24bf2ed9a4 +DIST httpdate-1.0.1.crate 10293 BLAKE2B f25b69244fd82beeb0c9c8f4691d1d057df6f835883f6cde069a4eb28bdbd7808b5f02c8a48b88ca4f60e14c2e0dcc84f4cadd733edea2f8f3d061bb485fff1a SHA512 1a63f11759e331e5938697d181c7f021e953e3616741116437253eaf6da862b6cdb08a0fef5808042d8367de9fac31b63ebcc917cfb81b0244b4d238f95538ab +DIST hyper-0.14.11.crate 169467 BLAKE2B d4640bf1619711c15c155777a84cad1c5d9220d6d029ec808d953f46ec409b14664e8a5ffb489250874790ee512c4a30d1c298d974d9da83c40a88690c6dfeeb SHA512 c04875f2e3c1732ed29c4f73de24fc197486d157325fa8304aa29e6948984a01d91ae7e9455f56337d3cff2c270694cdec0dad950f1b4bc3f8b3c7964fc079af +DIST hyper-tls-0.5.0.crate 13257 BLAKE2B 50cbe4ca7c1862fd3fff192de070341dd32bfb9f108b516e1e261ec8da7c4f7972b7b66e3d45c1497733a913b0281bef706994270ec8bd03eba7368612127aa4 SHA512 45dc16cc9ce48706e0b3575dca35ba1b6b3084dda8c2cc489d126e1c4f0bb96a9b2baa860d09f68c5e0a48c2a69e3eaf62f4f0406fffc4efefcd79d26c82896e +DIST idna-0.2.3.crate 271023 BLAKE2B 157ece18825fd3f8055581ccbd14191a6923da4c806ce51b3d6376682878db000a1b873f744c8e9e1966e4c1f8393643bcb603deae299ed0bd87847b0bd2c591 SHA512 1278bd561ce329e1dc7a6f24a10f83d9a068af5d15a088414f3921c6728b0d54f4d60d6f4d0d5a786596ad226263e1e50c3842f192d5758aa4665ba4ed5c269f +DIST indexmap-1.7.0.crate 50363 BLAKE2B b45318ae2a6e1f008494db77a3159eea3fed4f77eb04ae65599be9392d6ef78d4677b65d04fefab8f917f6808fee821a33bcf53a50b88785fae5ef6848e3a08a SHA512 9b882b4a7068a686acaee0a08bd4f3b35b58d36e786358cf14a3436eb61339649e64f1757331cc7833a2fa364c76eb6b75cf0c732afaeb202113de1e66b72ab9 +DIST instant-0.1.12.crate 6128 BLAKE2B 728923f757c1ee4e4a7afb90e460eed81392068961240a538e5c6468e15a0b6491f590fb5f6cc46e6d78901ca232351f65abb9f2f230d8f4983c5e58c4011902 SHA512 fae494c00111c51c840f9dd6a10febe403e27ebb933dd16633a213e9c20f2bc11adeb431c71f8a6713bf88f270a010941e15d83df294e658791934f83a5d2407 +DIST ipnet-2.3.1.crate 24932 BLAKE2B 26be72376dd7f62d3d01cb9d3287f9aa19e7f52e01f3b47ba8dca1734f959683f17506d4ce071072b8f288e7c494b3daba9054770b9f5f9959e9a450b82a0baf SHA512 db74ad4850e61b20b5280d0637a33a0a1dc2e3388bda38efbbdc221c04dfe04d304d57c3704fa68a824e65e8a3bdea2e743b2d0c2d06b1a8710c192cec1b6100 +DIST ipnetwork-0.18.0.crate 15515 BLAKE2B b3c67fbf16575a865c8f2156695d1e9d156c877c6974aaccdeb643f3f94654a1df0c00dabf512da09275c17462d18916b645139e00c11fe9542a489d802576ab SHA512 f5898e31c40937ee9789531c6e0c695dc9d50e32019c8f411f27aebedb70f2b22b8e48844d34583b4425adb4a77b0029f28f7a941142cb0a2231b7aa8a7525c3 +DIST itoa-0.4.7.crate 12099 BLAKE2B 0e4ffbaad504565056f74c3ef560a87eff321a0da6d7a2c8fa35813c207713c22d77080c3b830fefbb21370dd29cfbc6a2807044485b38ac1e0c9c1de3ccebc5 SHA512 c61eb50aa00591af28698b45c528c36bd92088f7cd2f453cf686a1824f4656292638bebc468cf67f903473a5045f22777af623cc0515ef3bf25146b89a7c454f +DIST itoa-1.0.1.crate 11059 BLAKE2B 5a2e22ab891ec883a90f652c88f924113252765579c03c783e43210fb2604e9e3ccbd4c1571087791be07bb99c4e85c7f85253be831b3ea883bc0ac18a927980 SHA512 8e7bc1e9bf4fc06871b9fe20caad4e0af965477d724f4c8d0e2a3a4d87aedf99f92e4e583a6440ce574d0fb43fc9d6a2e80add52a2f64210c6aa3b402e424295 +DIST js-sys-0.3.51.crate 67124 BLAKE2B 4f4c28c1ea1a490551ff759ccc494536b099fee6d2eaa597f6ef5ab22e7dbcb72ee870df5550205efbee181aea8cf6623abdb6ecc35418eb17ebd2bf3f56877b SHA512 e352238ec085a9381c27fbd849000c8a26d71d947b75ccabecf941612a87e446c45f793eaa152062e7c699cdae74512a016d44ed06f3298b4cc7d32ae5139f5e +DIST lazy_static-1.4.0.crate 10443 BLAKE2B 25b2e61bbac48f0dcbc79c81d7bf01f2403d8269ecb6be3ea6147bd00f7a588df15a91f44dfc18ada19b21faa71de4637c7d493a8628cbecd0e547d74e616a23 SHA512 e124c0521ec7c950f3c4a066821918da7a9c6e711115d98009ae7c351928fdddead852e7596fea5937a9c30e4e4ce8eee7099b20248b5d6e3b2494b6a6d88cb8 +DIST libc-0.2.103.crate 540563 BLAKE2B cc99ae88783e6f3044ecec5154e0de81a7f792b89415cc2736eb4a436edd316277d690971c4aa0eff7935b5a355c8966805c4ee72c5fec8caecf65a29c13caf9 SHA512 79e1c99bfeb30283f85742cf17867000301bbe022c6b2ace415b4a767068dd64b09581bcc802d42150e45849f5adf8ee2720a0c695324d87d3d96a5c554a216d +DIST libsystemd-0.5.0.crate 29268 BLAKE2B 0d4492f5a61aba9ef681702a9c24a998ea4be6829c3010823aa47c65e8efc1f0ba628f383e7c18d597a48aef1529d3d82b735b8ec6ae4877a73b2c0f773f9faa SHA512 8aac2a09fe9087db8ea1a4e6c96f7a2f0e7156b401ac22e67182352ea4253ace22f9345700445545897a1350fc150960652bfbf9d388b39551bd843e93a7374c +DIST linked-hash-map-0.5.4.crate 16166 BLAKE2B d6bfa091265355ae124885f76212c968f2a87af80f3d306c13223ab7fa1d6a449ffda8d042bdb887501d2ffd8adbc638f18cdfeefc16c39a1eb9f57b7c658bf0 SHA512 2938883357ec0e7d9c9fc5746063ae419c97250ddceeb8de3480c89e97e0a29d175cc9199bdb3ddf81cd5d6a2a1e319ee1644a7309eea96058221074cf87c0b6 +DIST log-0.4.14.crate 34582 BLAKE2B ddfba35947ae1f5905cd9ecb9eb862a78af6f00ee8b8fe6258b369b140928fe677a02b1b3ca5bdec36ff2b16abd85a9f49688fd5f3d1ba2b2905e7f96b8a84c1 SHA512 796100167663d85a7bc4244cd305e9b3f0a1b1520764b63464698eb136318d0928c40c16f5d19d9f602a5bf769851275bbd48d66b088b0c37be7a6fb62def7cc +DIST mailparse-0.13.7.crate 34737 BLAKE2B 33ce9844ac364c80c57973e6afe09953f3e73385d5fefc390e42d6018c91a55a25b92bed1df9ec7e3f08fa822368dee8f88c35cafa3a8c5d2936477040c00599 SHA512 00c7e418c3625b7220a677e76589ce7d00d0873d28461716a30d34e2e92f67dee75a64c2fd53b916993240c82c5741fc27ec1d074f80f8d044e6626ecca39f12 +DIST maplit-1.0.2.crate 8871 BLAKE2B 3cf975d35de2d2fbd50227a6d2c5e72227e99197b620c8f29be97bd3666ec162deeef0d9e6bd327a063f175201beeb73c4ed27272449b1df0b78238b2d36ca22 SHA512 917b5cf665e12b687035c895b60b2ae05622963f495f5693515fd24d56f49e95a06ffced68606d061bd20822c655100035930673fd4b0d4790168763b6961a9f +DIST match_cfg-0.1.0.crate 7153 BLAKE2B d3f40e5b16761fed337ed18dfa9db9e46aa2ad84ca8cfdc7cf7c72bea7cff8d084d95214ce013b3515bbe5b1ad4b8527bfce692569551e4588fe6f396a8a96ee SHA512 fd36f2b128d70a0f278e708bcb3274d90380229f754aed7ce9b808138b0189d5e1a07e0ba732216f788a530cecddcdd980559b3f71efa371d8805a213ff8f2d6 +DIST matches-0.1.8.crate 2216 BLAKE2B f18176110921b1cf6e58d52d12f1d1a3455ce2dc04421fbf1b392f66cdd81a88e924571fa27e307a06301d83b04f3b8a0ca3ae40d2da6f2decb8aac4e2801fbb SHA512 98b58f6a2694b03a7dd1be69ebf7e3ad14483fc8e4cb6e6c26a4937e4e660e843efb4dd04a7312dd9659ca02acd3775678f73b8faac44a76ffafaf873c22f590 +DIST md-5-0.9.1.crate 15494 BLAKE2B 25218518792be16223f78ab0bd81284005b4a65defc538fba79dd3dc99c7d80dbc8b8ceeda51dbea4851bf1da86d3f66fb64dcaea86b5486a235c43719a3dc3b SHA512 300723a785c7edad2a9abf18fd9f8f9a40ba54676b394cb5712894d1170cc48199a0ca9ccd3b525f82832d5b33413c2565a0c079b6dd08c63d782f1a91fc3e0b +DIST memchr-2.4.0.crate 63392 BLAKE2B a3f30546c3b58ff4eba534bd7046446e96ad793718edfd3379bd125c47eb270728c4aed4aed1c6afa27032f74078b2b2ddddd5cc6044e117e2b956bb13f902a6 SHA512 b142e308a5aef8e45910411789031e194349ee540c4ced0e2384d864dc1913299fb63a161ceb5228256e97d0949661b7f83a169ef9d4b78afbd9004cb7b8a2fb +DIST memoffset-0.6.4.crate 7664 BLAKE2B 098783d0fde7268b16fc5c9f5df005b93daac18092f04d981559b9f0fa310344c6fbbb93d42587ec7107a5c4e8d757508377dadf03471dbd7022f3bdb5b3da4b SHA512 bf8d05b72571ccdef32a93cc4489ab4cb7abd41415d55572d1dfb983053afe3eb2615e968d87a326af90c5702b9959150f985a4186acfd61df9b69a74e99713d +DIST mime-0.3.16.crate 15206 BLAKE2B 9a599ca82fd0dd6d3d2dea68a47b8441b1024d016ee1fb23cc6431b39ead20c9b3fe1ff3397af79c2c1b2cd277c440d4fff69f6b28c550ddbe15f680923c834b SHA512 cb1d691610cb82720e553247336fc5eab63407ad37febf2eb50aaa4e329cca70959ecd8bb8c7af5753acec2c8e86fc9a0f8ad9ad2de93fe9295ce84033d6054c +DIST minimal-lexical-0.2.1.crate 94841 BLAKE2B e6b8919b80d938d0b98d60d4f5f29ce43d77ebfcf8b18bde08909141915c6ef4f0d07a543538d4f3ba8527a9f55926d4a8e83473248469d087e80b274d701d61 SHA512 385fab51884bdcc7b0f2728a219ab164d0dc8efe42160b918f2c09f79ecf853fb12bda006d11e649f097bae1499dcd41ddf2a8784ee7d178cf2c28059e46078c +DIST mio-0.7.13.crate 87027 BLAKE2B fa1b8287981c3a96c0b6f29de221241d12bbda1c19a95e315f5e026e130e2bff6199774524d5c178718bba47710cc50dc632e942a590f5d5af598e4d59fad269 SHA512 3f9adb95db494dd39041ec1abda0d476b308296024347f28bfaf5883d7896ee052edda026c25a9ccea9a31cbc5431d95c0e13948e90fc8ca7b1a91a19748a45c +DIST miow-0.3.7.crate 24563 BLAKE2B 24375754245e4ac50620a8b6da6b21958914a6af6422a470487841c2524587d596673cc3718a85979ee911f104d71b59b38fbe9db28c1c7e4b702b9373215cb7 SHA512 451073e8913148889493de0373bc0450c8b23e136e151b48b9976292e4e03b7c3f3279ecf49dda5196badfe662a661a998cfa456d2ec340a495d54a4d2382699 +DIST mockito-0.30.0.crate 28648 BLAKE2B a4574b468bc1b7881934035db21165fd988617589d67356d0f815df1665f3396d2187392d8aba8217b0924c86b274ea932a52783d7c849198db930745cd598b8 SHA512 ca68bb9e0bb8e52b7ec0c23ce1666367c4969904ad5537b6578d7e662ab774738cd1463f1dd9115fabcdfe56cd0ae99d8f6816476d2d5ef61f38e494c9e61689 +DIST native-tls-0.2.8.crate 24956 BLAKE2B e5b130b717c04e3d9413d6cf45986b67060f31793e2825585b8e4026e73927340ee9edd5f5f2d6750200bc9eb0a4b8fbabe0a1578d6a8ea17208f2fb28d2a201 SHA512 3648272b1c2f10c3eb9c7121c20a26da149efcf248187522fe07fde9b506a2b687e8bde8e09c0f8f74d19db5b84ea98b19b177c6daf38bf8a0c3ec05907006a7 +DIST nix-0.23.1.crate 240531 BLAKE2B 8e03f4edbad39a467c1557083cfbbd6eff4b78d5ec4e0f1ba06eb043f853352f5154f115ce75556e0d672f0499a9d4c03650bc5a1f57ba1b920cd1595cc50ea9 SHA512 23431030b094ebb027200d8cdc05d0ac1730fbb86ee088795a2314f1ba19b76ed5f24373c1aba8125575bf69f8e7d4d9c08344b9cb49a4ae3d8f7987b5f4e6b6 +DIST nom-7.1.0.crate 115647 BLAKE2B 5adbe8250d168379aa7051a4fad7fce3cee74820043ba8233f1016417f91ecff64887c3bec1dd6bf4cc6b3b3803a2c19a44513f1affc635d8be6212bdc8ee47d SHA512 aacf14e84be17edced412e3d256734508426a8acb8352e83a5d9d4f26d640f60a881d8f70fbc6edf1843173af63ec05be7694fcd6c6287d871e40518e2ed04ee +DIST ntapi-0.3.6.crate 127221 BLAKE2B 5e530c90eab66c73fa1864084eb462490bb0cce58ecd9e22659d4933ae94871c722dd2e9b351f9ab620a0e45779cc2030cc65bc6badcf9ccc6263d0850c11447 SHA512 c07f2ae51e4fbbe55de9f617d333e4042a93de69e9bfcdd44acc1b342edd88cc2a360fe6710d9568594e2c0990776004400d0741e61d1a2a1cec4a645c4cb035 +DIST num-integer-0.1.44.crate 22216 BLAKE2B e1c08427e006cde6f2084adadb6086e87e6d6f8bb8dfa757a8228aa671e862a366e4bd8ca5e0500008c18bab128aead9bd5b1e53568a4f40afadcaf3882ee98f SHA512 d07e27ede02a1d007373935fd91e57a26e0e84ae14bbe24be66763baae6850788bd64ad2598d2bde4f4fad6c8a4675c40bfe0927164b16b9b69de5e9a83d9771 +DIST num-traits-0.2.14.crate 45476 BLAKE2B ae310d9d5640acc3e45e1e5d1d2f519539795922c0058ee940c94c94b6654b39358b7c18dd23a276f2c1b16a30dd4de4cbc8575bcda6a5c11e70665d670e6439 SHA512 c3028eca9f7b718de0db3a36cf3e462bdba43562d52c9b809ed4cc0aa6af403aea542d6d4da743cd1dd541397815a3c5a84cef4d6e40122994e4be6a62319b2e +DIST num_cpus-1.13.0.crate 14704 BLAKE2B e7a26e597ad5e45309393a9500b031ba64a77831320cbb96d7861139a2f7a453b7ba06a3255439b43ac1e2e36269b0a350d514020d3cd82c2513b57934b3ebbc SHA512 e75ec298fa682be84bf4efb6cf40126da9233ef25f07e887c2fa7421ee78790204564e6406c8219466651f47421e27f69eca690bb9cdfc982b644d78cc10de3f +DIST once_cell-1.8.0.crate 28925 BLAKE2B 7681b1a7497b5711e663773c1a7e076f333c06c10d3f289079a781c36f050c1620cc279742ea8e5b15ec48f3d6038a6079bbda7fee3ae8e1128bd916d53ed43a SHA512 88e55c9433225ce85a08353168c87fca2237615482160a5c28f3ac17f06d48c63e0c21b5f7ef81f82ca133436e371802ea099453844f1c111003bcb6ba89e827 +DIST opaque-debug-0.3.0.crate 5767 BLAKE2B fb5d32c876a271b41582563f5d6978d75bc1cba2cc34167f491bc198e6eded45b9dea65effa3aa972ede20978808b37ad1aadb6837f926fa3378ffd382076d41 SHA512 9909b06668a4f97b4d0e916de3e1d0a922a5a0b911a7ce190de786f62ceaccd382cbd0dbe01ab0f15e5472c10848482da2307a6d897928b6b7d5365bc0321cae +DIST openssh-keys-0.5.0.crate 19953 BLAKE2B 1f522bae646a26b883895849febf76e04812ad117db3d717390cb05695f2a1f606cddc923b51bd66e779de1796cf2698e32450fbf3b72ae9a81ff08625e3fec4 SHA512 f910d4ec02832b0fe073ad94fbe301abc86712fa4b5cab5387a0db2cf6c91dedfd3a2976880a005196c6e8fa297732b40a6630cd6055a7fb669b20a34c006831 +DIST openssl-0.10.38.crate 207436 BLAKE2B e2c999f1f04f7646e765fd0c1b51058136043d84c052812c4fcb0dc3cd3605768a8104d9b3ab9ada3d7d57ac057cc6ee0e7addb6e4f5897cda9236de3402a3ff SHA512 3cdd25b722b036779187a8906c11abefe69ead198204ecb8cd71aab549c910c3992761439336baf82c61dd6eb3258a365fad7eae4e4b7bd1959a979ac6c3faaa +DIST openssl-probe-0.1.4.crate 7066 BLAKE2B 656434ec1d34466e903e5c69289a277d14623aa7bd8a7c19bea974c7de57fcec9b2b4ed212f37d7f7b90fbf02a486a8ac7f7c318cfb3b3930e54e276103154b9 SHA512 c5d4ffcc6faf009b38dc715ec85fd75b3e3b0c0293041ea26071bb6d19d8d018a43ec166bf79ef1c7a126cf783bd4a7121d5dfcbed36db5ebf0fe4decb198f17 +DIST openssl-sys-0.9.70.crate 55280 BLAKE2B 799452261bb293d97ee2d97368dcd4c79d69e9dfea243d1f28b01fd76fe00c25973cedcd2957cf83acbbbea52c91ae74382a524871bc6fc94fafb7ad61b6b660 SHA512 d4e591699f125edd3fddd07071ec9e7eafb1ca93e53511ef18811d361f652e7198790182b54aef5751904b356794db6a240755ca6c2a202323407fa6f9ea7089 +DIST percent-encoding-2.1.0.crate 9748 BLAKE2B f3ff35ac683724b15e40c85e0fb8ececb07b61beeea82b7020f02d27df05a8a3535f157b3cd688533e414d6541de7de8640ef4756706d8061af0fec94ba04ab3 SHA512 98af4dfa7c6a3cf0d5aa929c436f9eb1ba1b576a944513f1284e6df2ad06be7cab9eba145d888d50af88f8c970bacc702b323041bec6d4fa1dc34095186c628a +DIST pin-project-lite-0.2.7.crate 27212 BLAKE2B 71997c66fe24bbded0030acf9d460c8ecdd07f7a047007413ad5daee06ade30ce487e7f921d610f9e0bc7aa036391f6c595493d9b7d95c17e9195f5a2b23441a SHA512 c948201981269f6f54da069470c56c5b9c4c6f52e349dc7970ad828d412facfbb66a09745c0565b4320fbfd1aa7983f3664604f7ade37a30cf25ce253afe8749 +DIST pin-utils-0.1.0.crate 7580 BLAKE2B 457e1287202f16d1873b24bf4f1de1828300128c4ba3131758e64f9784d36d47365f22d85493c3a85d854f0d8dbb4c6cef3a0f5b064014dc03943e58b7ba9178 SHA512 828422b8440cc82ac6b0743e0112fa7540d437aed457564999092b1462cd7672cd6b1f0201b67075431aeedd3d9c5127468a3dd028744109944f7f023c82fd70 +DIST pkg-config-0.3.19.crate 15451 BLAKE2B dc23b5ef12719b4b3d2fc5c93c087399ba954a5e127be91b26619466d5d7422e71684d02905304dca65273d69b66338d94c0642e3810a14df845ef507ddc0bfb SHA512 42bc13c4e39c8f71690db527d815884acdfd2ccf5fbfea700c6ed60257e852cdcb1c443e7774409e51da53612b0ff0aa165554b99fd0cba973f94a8df52982d9 +DIST pnet_base-0.28.0.crate 8371 BLAKE2B f3ac5c16593099671a3899a034ac0d518b11bbb97b4a6af84c60448ea81d2468d972ecdb4140203b129a5d0282a26aea20b9fad11f3a9f40868bd46bf8ac93fc SHA512 9cba379afe7d20027369c307e119fdc619c55d50adb007a2d15b146cac35e016e88978489b3e031f77cef51252f7af4b670482b6c9008f7fd8482a0ef3d17cbe +DIST pnet_datalink-0.28.0.crate 26031 BLAKE2B 1b2d731d412862c5c9dd5d42d8dc1aee88f3b731f7e1d1a688194f52e62d449f86c6caf93916784d3756aeb066821ace80b7b38ec759f381bf22e72f12bf0477 SHA512 0fade69b356b4196f463d80b8c5fe5d0098028a7ce9e29ab400abea740d6f4e9ac411129ee6b01013cb98a570ba2bef2b9a2ea5cf768bb9e86d1a5d0e97867a4 +DIST pnet_sys-0.28.0.crate 9683 BLAKE2B e413c92c3e134f386dcd68bc3267eabb6044dabf18bc9f070aa83c9c35f21720d674fb2bdb85c5c4987d5a31c82a1d776882adf17371abb7cde0e88c61b684a1 SHA512 bf01de5fbc46d1f929bb2a337c3840656652bf89958e71401b438d1e45a84c49367ecc912b8a57473407d72ae69d8ab96c685c6cb66941a5f2650c78c163fb3a +DIST ppv-lite86-0.2.10.crate 20915 BLAKE2B 83a075381c24b2b89f5266929f5672ce051c3781c1a199252738dadbf471618c8b87452ce84e1cd87a9eac11b44107002894f544091210cc7e77bf52c045288e SHA512 c9941052e504b9b310024064026e4b1d540dd877705ef450a833d9ff6dee70ba874cdad68c46381a71d5b54482cd80b3dbb8e0c225758fd339069031a55195f1 +DIST proc-macro2-1.0.27.crate 38625 BLAKE2B a55e2404e3c7444c6da8aca6c0e7702b865ec56cfd2c20fec319e737fc83b00bbf505c15dadaa8740d5a6d07c089ed4854a173049b1be9872bba132ae7cbc8db SHA512 3227bcaa726e88bfdb1b4d1243a4eb216ad2394a7a3b4b258de342ac76a1ab1a39a07f28f3490e42e2c2034176bf0d84b1c1fcadba2444c0abcc5878b02f93a4 +DIST quote-1.0.9.crate 25042 BLAKE2B 26ef31e89fd2f0cc21ff65f8072f30c7977ac634d2536cf9845a0894d6659f62a96cd0a6ee48f7706036c2c1b898ef8c9167bd62714ad0c9cba4fb02f30922af SHA512 dd6cdaea183b85400531ef01e56657edbec0d8f7c27898c1e591b72dff755fa5875b33ca320bd65be0e9aecfc6a61ec119a4bd1291e9f2057fca642ab5b198c8 +DIST quoted_printable-0.4.3.crate 6141 BLAKE2B 77a3d6b5ecf43336316baa72df3bed2485c014d56aa26c461ab5c699a8756acb62a157818db1fe2fafa7e5a3808791f2778e738c15e32e9362735f86fe87df2a SHA512 95542a68a88b81b59f937d7cee9c13459f92c4c1c88f8901b656e7eecdbd705b79e511908731cfbeb797cecfb3acdfb9b18bddd43c7d2dc115a3c93ec56458f5 +DIST rand-0.8.4.crate 87406 BLAKE2B c09358416d2425a8243b623346fe71bf6f03fddab1a23fc752f4303ba7c241b3606629e4edf0ea720785bda0bca534acd675c2de079b78eac3df24a1ad6ba654 SHA512 77ae0e988e31e12f7d3f2c40814f930eecbc94c4aced827c337be78eeeabf39fde2dc5c4fda059afdc01285ff4afe30393c32694377de004feff16207606558e +DIST rand_chacha-0.3.1.crate 15251 BLAKE2B 645771b2c3e274f085e0837a20306b1d59f6e9032fba8eb38a6d1b30180d15e2f89ffa2a162bf6358da41e030098242d81e71dab4321980d0a4f6ddfc2974ce3 SHA512 8198c580b1b9b0429758ffa49cd8138fa3ce724f0dcf73c767ea7e55611d6a2e4c7cad9950896510def500ce4062b594386c947ac3d89425b4e5c9b04d0b8075 +DIST rand_core-0.6.3.crate 21938 BLAKE2B 7c73e2da6d423c68dbbca31f6528bdb3f42fa39b30d0951ca7058e05ce16ef09ef5e047697b33ec17720314f934512c0907aeb892df93d63abd8b63eda2b50a7 SHA512 0fc31f96ca8ebba8c179367de01458e909265e1d627ec0c5620be7c8e83d2f9570471d6ec2cb2bc4bc531505b02fc31f1165708cc1357906791c87123b06ee87 +DIST rand_hc-0.3.1.crate 11891 BLAKE2B b3aa810638390eea4245ebb711de88ccdc2a64350a5c6e14064fea7685d49746b4b77215dbb8374fa7a6cbc2cfd79fb553513d6e551acf64586d8303f7d4f3a0 SHA512 582bb44b81c27e698eb57c6f06444b8a7c9d3f7ee73f4e14be8004c4bfd3bbfd9795c69f7294b5e87107e86b90fa3e91ad080964474af81c92705d356e43fbb5 +DIST redox_syscall-0.2.9.crate 23533 BLAKE2B edff38a41e57f40f9285d43deaacea32d518f5d87382d535b0349f123569613d50e7b45a70e4013f35632485951967a5157146593811102f3c0a7d9177f07fed SHA512 4f3c9dcb925c57253fa27f6355482d4f984fe31c4f562f2cd22e953c6f1f475e0687003e495167f400f77d2594ffb9a69548454db8086da5913c00643ecd337f +DIST redox_users-0.4.0.crate 13023 BLAKE2B 66d0d1169f98a27a00930c86365f289c38659c0d7b248a6870d1c144dfe63c9752429b2912006527d42aa321f9605892ffa85257eeff1ae148254bf370dafd02 SHA512 4058ffb2fd57631eb6346c8839262653af3f2e670a69bb5739d64adeef7347849b18e191c594303da1f5e29b4a3cb000161fc1b3ea4b7f94585977597a2574b9 +DIST regex-1.5.4.crate 236581 BLAKE2B 6efaf69d1a99dc3a2e04b2d1a96b036f631e9a0ad0d3aa57263febd47f7ec12765526f06f9c52a5497bf0d9b455f1d1b39e011adc4c28530c44b65c8a453efc0 SHA512 1a9208358c4ab87c19ec91bcf5c1e35dede46f3a0c0097061b7b53fa77a1e5ad38090d243aab274956f09c491e5fbe3b3b35a91db079b82a2dde2fd9fbad4c19 +DIST regex-syntax-0.6.25.crate 293293 BLAKE2B d5ca0dbc26b03c6a1818026f9a69cd226ec934e7c64094d0ebe843052b648617ffae7aa3a074f8da46d03c46996d8b547d8916576342000bd9711089b3e57d73 SHA512 a3d31f82aadc6be1796f76c03152ff24f37fe42d6ce27fb98e2f55ab102f86502bc37ccd563f6e0eba61aab20d002184c618517b678b3b93cb8f0497cc046ca5 +DIST remove_dir_all-0.5.3.crate 9184 BLAKE2B ab7ef94e0230ddc9b363f038254a180881bbc20eb04a254f97e6f71ed491c99ba1c88f5e85632d450243882a4a0df63f3b8b183bc1fbca9caf30ec23d577b1d7 SHA512 50417d6d8a33912193a1ed37eb72b47431b12ae65d2780cdb7080c3d141e63819da13751c3fb737685cea322f70b36d413389c3dc01aa12b4dce615aefed0e2c +DIST reqwest-0.11.9.crate 139175 BLAKE2B 7975a4d81f1e3e8785afafbdd2f6af6e148514f79e358e7ac9823d7f7fce8c76003cf1c3582458b2dc120a6943140a36239e3eddcb97f3465d4efd3b8a171b88 SHA512 32ded6af5b775650de573cf0e3ca1b315b65d5c2710eec2499674c6c4500802d0f4aa7b6ba7a02123b65902e79b990ffed62bb561347c57c02c54637b91afa3a +DIST rustversion-1.0.5.crate 16984 BLAKE2B 314d4a7b78a91fe6a0f35d850ef7a4dda72859fec7f603307154d2b25722ef6be71d5986991b4958009ba066d3078a53131691b0d375677985b9e351876dcd15 SHA512 43f3ed12e007e0a7bf0ecbe44edec5ff092c88973903ad8032b12d678d98d8827a9e51040fa157b0d5b07d26a5b6cd314b410553fec46689b3a31b392c24770a +DIST ryu-1.0.5.crate 49570 BLAKE2B 3bfba4a5f290a429de7ac3b86823b2a973f40eb6f48c15329173d95964d31ada36f2618be4b36774a03f97f2ce61364900c6a3ad5465a294e2df311a1f4104ed SHA512 d1708ffa3112a684edf2956b6730ead040401d38f1457cde074eaaa59c249007dc8b925629e7f6df89f7ea757e9d0826649d685cc8ede0a04d50296048bf476c +DIST schannel-0.1.19.crate 42755 BLAKE2B 11503202bb6c8fdff3cc716558a5c00ca7497f7aaa4890d332084754e0d1e1013719d5bd744d8aa12b8b042401f4828fda8453c104d5feeb9b437d7cc51b5273 SHA512 319d9931cdeaa0f6b50c46e413fed2b6e97b28fe8c4825d4e5ed0fe22083e686e124117bfab7c89bcce815a31a3478f8c230cdedae6a852a31719a0df34645b0 +DIST security-framework-2.3.1.crate 61581 BLAKE2B cd6baf84a2d93261050e6f4d292fa32b9c1a9f4b397e209f03277dfa9186e031fd641091406f65acad1046a57bc34b66d95f2021456c7dc6321292087b776728 SHA512 732a575f36d1bccefa71ad051e07b636e683a53fc4e78517cf6c7a60cc819492e8a430893b592cffd5383f6cdbdee496722cd5fe274cc7726d668ed1a8d36238 +DIST security-framework-sys-2.3.0.crate 12561 BLAKE2B 32e385f88bd467795649b68edc18fe498f607095c46831bbbbacf9838daf3b92d773cbd4ca851d269d1afe5e22671a0900234835a679edb013e5afd6b6197022 SHA512 1d7271bf6332acad5e6db7f48047f40133e9923a471ca9236102809dd50efd5a525eba49ed4f0792c0c7e33c3fecb3ee49d79f90bdc6ee889bd7828140755c6d +DIST serde-1.0.133.crate 75566 BLAKE2B c6f9334c6a3f722fc3f8b75a031f3c34acf81de1488953addce546ed1dbfeb2350a2a2b25b6088920f47172e2cc9e755c4ef682c19c579a2b70e7f4ae4a7ffb1 SHA512 53f6027a23688a5a303ad9ad169a333c02272ff9c0dc827705c75c162b70040ddf676428f38d04b9aaa49ddd4cee96b5ea5e1dc03f09b90d5f12d8ad22dced0a +DIST serde-xml-rs-0.5.1.crate 19283 BLAKE2B fa893cc24ba0042211a84937daf411f679c10baf07751f4e63713e336d204d6771ba3d4df0c152dcf255da5d99583bf2fa3ae062741004b959925a5dfb6765f6 SHA512 3bbf0dea57df7f49931b8d4e459b44050f8acef23249b1ca3ca165edbd98d93bdc92fc2cae12c66b899dee9137234269369b98f999ce3d5df0d478d1a0d42a68 +DIST serde_derive-1.0.133.crate 54726 BLAKE2B c59d71b857513be8b7377b4b9182b7f60e441f7fa5428939ff8a25567ab645eab8ed54178dbb4b41967b7b9073b51cdae68f5a910c91a26cfc2baad0c0344b9a SHA512 d8c18ab50c1b500dc49eed1b5ea26bb46b9adf98b3b3c6c97f9c5d11324368342188ffbfef4c8a092c69577622ec85e672341a49853a957b10bf8dcbc6c0f441 +DIST serde_json-1.0.74.crate 115919 BLAKE2B 230d205687c29f361705f80192e26a15e97c5dc1497a02bd56fa8399a4d562d087461729d17fbefe61af9662886381f8674aee91471b10f11f29e9ad9c14a39d SHA512 da070221e805495b9b8c56a203ded1b2651b81851ae473a73dbf46656c44375cd5ef7db01272792684abb4d7836e193c85a622e83c59125a393fb484431fb061 +DIST serde_urlencoded-0.7.0.crate 12489 BLAKE2B ef64d92d79b80521ffe90f18534d0a0f20834e692c708e3126d3486b1585aa228e3140be81984256f0adc71c764d5c2bb66b755b9475eebefcff67c952d42372 SHA512 2e49d1113a863a45235e4c5df3de1221398091c33b9eb5a806ea496902090f82d6dcf4f478f897ea54eea44f553fc20aeb2c1c124b81806b0704dd33d5650a13 +DIST serde_yaml-0.8.23.crate 42140 BLAKE2B 49d28913954173d1c062fe4668c2228286adde3d3e210befd09e04f8e43dcde469c6aeb86349a7a604188343d0c211078c9520c079249780923a4d70e3132d9b SHA512 7831299cedf0fa9155a76b61436ec1cbc06adfe672a102973e8cffc8b277d99b4104d70951ed16b18283f3291c8047d6af413e0438da3e6bc6745bfb6816628a +DIST sha2-0.10.1.crate 20128 BLAKE2B 9eb517cfb31928a7a157a79bebf5e0a5afba618d196d8b04a5537fd9f4758c46dac51b57db9f37ec9921058526747ef87e3c6a0b641cfea2e4982ebc1f451457 SHA512 775cc22edd350145e83be362b4fb4910c1fa50d413ce5496777a2aa3f049df4a8d5d5556147d132189fe3bec91528a52ead8283fcc6f00556280cab8375f1b20 +DIST sha2-0.9.5.crate 19912 BLAKE2B f2afa14bce588a73477672f439a397be38445932f921edfb35934b15bac634a1ccb5da49597fa22361d09ab3968f79cb53f747ea155f382036bc78ce650fc52f SHA512 c4149abf96d9ba5bf18a29c45dbc0e7d44bb5eadbed26fe2915a7e3b9f253381d090d880a96e9d79eb6399bfdd9d27550961ae07a96d1cf8070ad77d09a1fe52 +DIST slab-0.4.3.crate 15681 BLAKE2B d7e3eb0374de081d1870d2b46c9137e5ec75950a8fec217e3b120e455fe847e9245884990fbff4d01d512ea297c2012cb1a64f9b169264168081f5f7d6b20b39 SHA512 8649f32f26c1354b3281534fa0e062a145b62813c46f9ff5989ae688154221b00ed1b8c044c67a4b78c00a2e3478a8eb9c1c96fb424c24cd6cefd4df875fbb15 +DIST slog-2.7.0.crate 45432 BLAKE2B 69b3e8d826cb3a60b2707e6b0afac2226daab5a72a29c3bc1bbc141cc8f082e53a1cea43d3b4e5c7e54821eca0990248f17536aa52df116c356958c780e528b3 SHA512 13bab46e288596d856adac80a6481d803646f27ef7bc1669ee2f7667b321b33beceb050348007a0ef28d0722bb597fed2139eef4685d01269ffe271830d1b15b +DIST slog-async-2.7.0.crate 19369 BLAKE2B 7ca379b650931e852acfe5f00672bda000aa3f51eb9669910a3e074d937999876f8a2cee00f1046373e2d4e1abde69625083079e1cb08038decb5a34bbecacd5 SHA512 2888c9dcf718d1dd0be787357fb0a2c0b9c3a6cd1de97a2f6b442721f0b0265a4820dac3fd8eac68902c2aee106b91d949287bddc8187347b1ef52c9f8e9e8c0 +DIST slog-scope-4.4.0.crate 16753 BLAKE2B cbe478979cd8ca21108d512721698502d160701302e404c01a6d15e11d72a289e37fcd0e42a0d2c8694bdac716d5430ae764add500d419baf2ea4636952eef1b SHA512 9e428b3a832e8b2f45c90ef93fcf5251cafd83e5fe63f05a783df2e816441fdc170e8ff843486fca3c075f8c03c75db45a7cb1e9ea0e95da1ceba11b91709dc9 +DIST slog-term-2.8.0.crate 25251 BLAKE2B c701ed6b0e48303ebc2cce9de9dcadf861c6ef3c775b6074e767981854df98e59b2d2db8a9197173438cbd4180712fd5e3099f552aa9e6021f25bf606240efb7 SHA512 be9cdfa8e3838c1163d7ef1d84d6ce34fa4a8c2910f94572d1645bc9277f1c6ceefa105ced6659ac1eaef5f8f50325e063dc8e7661c1b7c4f3d7b255388b2f21 +DIST socket2-0.4.0.crate 37949 BLAKE2B 10cad25fc39a2141913c82eb1d33c14cc7cf54ef7323c0031558aac89b1045f7433a81a8bba83f21523a3ed0ec793189d6333ed19ad06cfc1b70c28d730aa9a6 SHA512 7731bf377bc2f6f06b95d563452bdf1405aafebabc9211f4bd3a13847cc154ae9cff0951130e630fad9f7a53eadd30dfb92b918ae239d7cdec57c327f2cc464d +DIST strsim-0.8.0.crate 9309 BLAKE2B 40a8be506c43ee1ffe006ddc7dee98c3d418bdd205d57b78f5d1e4c9312feb57e1eaf952e02d92d4e0932db240c6fba45beb06ea8c4fc6de1cf1faa8b6a3a939 SHA512 1d55a8d946cd55f5f37d06aea536549ded95739fa58c0f2da285a0041154c181f663682bdcac643aa198b3e762d694a04f058db985c62ebe22b5c16327ba6d34 +DIST subtle-2.4.0.crate 12411 BLAKE2B 32968997d71c6eab4bf2736090469afdb1adab3d2064afd1ab34a2711294bed1f00a715c2c748b25412ef9732c96bd132e20384019ca6bcc0a01ab602ec24117 SHA512 ffa173d6678879c382d9165ed8ac4480bfda2f03a451ff120767d90b2fa17ecaf234af15c2d153be0d96c8363de82f0be1fffb7770f3bd417e2567d146b61c86 +DIST syn-1.0.73.crate 232706 BLAKE2B c580f9ab914c54e731c8503c9b9d577d05032edb6bd12d7a183a3c0e3532fcf24196479a9ee40d09cb7e09ba6d94add36e338331affc2625058ce54419621ee4 SHA512 b37beb1b6d483cfdbc44d806af9955cdf52c4b0d5f918782019b089d06e107c7e23ced343a3bece20235a24752783795ebba8e603b61a6302e82ee7027843d8b +DIST take_mut-0.2.2.crate 4263 BLAKE2B 3660c519b5ce8a39ab4f06dd61ac062f645de321f36913e948e8f10ead18866e2aae2609eb1f7f5faa7cc2500083743fcad816578defaddede456c6c05b3244e SHA512 f75a5ce723e710809130878b0ff5df368f5929201e557661dd0154f3b31ea58d7d30d84672ca5a684fbfcae5f82ab2c21b1b5d9edc4c67d08c221228bd9de814 +DIST tempfile-3.3.0.crate 27578 BLAKE2B e98c5ed4c59b6ff411e89ad4eb529bbe15264d6744edca8675c89bfb4397fbbb8da60bbc582da24bf9953afd9bb17cdb22654d933468697e9fa9e9903e6a7c77 SHA512 ba6faafb2dd56d694efe424752099a2efb50316afc0a4db9fdb7620ae3f1a31dfbb2a7b41724878cb977fa11f7568a406bd3b6a4f7cfc0b88b86b2cc616b953e +DIST term-0.7.0.crate 37082 BLAKE2B cb7947c696f71fc68bab3b25cc6cbde74b92380fdde5447399b06de99534b0cb2160963792824ac74a350444ce41a4fa16d6a9792a68d84578a15ab37ab76ca2 SHA512 9de6e836f1fd205b3b58645ec880eaabfc0fd8991e3980ef90bc6184b370a14676edb688a2a75bce412dd8ebd97345aef742afe5b964250e2b6f84e6b15b486a +DIST textwrap-0.11.0.crate 17322 BLAKE2B 257428908342774593bbd3528fcdae710712ff54e8a711393a24356d8ba0e16e466a4b20c05f942c48ca76b3b5b5aaa90ec202f782cad892caa8b71ccf124da6 SHA512 f5c0fe4f28ff1a3a0931e8e235b5157a45f67967985bcc752418c5ec3481fca44a8ae4800088889b37e8cd0533f53d3c456d5ffd19b767b3f83a87b49a2e209a +DIST thiserror-1.0.26.crate 16711 BLAKE2B 4524c3ef351eaa1266cbbbafec6082695d5c1485cec7bcfdffd64719fd57efb4e40f119435eae5c6f574a80f59a68bd8c868e2493ddf36f4882e7de65fd4bf93 SHA512 bfe93a14006a3d9e0e996b310718223f8442802a384a1b999c15dd1a25f642c5cb2db7a50a69cbb097ec50ee3b0129b509f19225ca714a5c459d4dfc8255d84b +DIST thiserror-impl-1.0.26.crate 13431 BLAKE2B dc753a4cc1e7b8b3eb44bd9462b6b19ee983fefbfe1f60a974195a536fdbc68395942a229a1d2ec7a8594669a439a6efd3cd22573a647a7fb7a371e793fba645 SHA512 43eea818b72469bc4d5c28e449c2e284c1e11b2674b9e67b1788af7ab66bd64afabfd8f5861938a7f9547a9c13387e0ce400419c6283bbe1e899d18d998cd921 +DIST thread_local-1.1.3.crate 13111 BLAKE2B 1ac2d9f6b9d5f685857cec0377f41faa2941614c9a0642b8c8d209590ce72c0dcf16f89b5da58d016b26a41e6103407811658a81217716cde0b0c69bc3939877 SHA512 89fe00c005b2bcbb77f2286475dc04f1400b3cd3bc165162f70c1a91f7fe98132f5d0a65e5f1bb36fd8c33617e6d548f3a68df7a2302ea3a177717c71fc112b6 +DIST time-0.1.43.crate 28653 BLAKE2B 95fe69647e8d52784be1fd3457578896aa38279d00f51f1070eadab111d39450583c63854c73d4384f2e4349b0250f1c9bff9901529b776c596846c057c93335 SHA512 c3e0c68cab1ed2f33f41955f83e632c51924e4d3c1d22dd0c4ae98499e03f3cafde8b0c2d9e69b67a78d6e4055e464ee00d1ed6af5eb9fa75052405b43e24a25 +DIST tinyvec-1.2.0.crate 41625 BLAKE2B d7ffe63aa2f076ecf57a2c8af3269abc7c811b7e19c3bb6ce4830f9d12a9942620a43786f4f578000d01883a9cc33105619e4357b29d64babb9d6313ad99bbd1 SHA512 eae5ef44a90995a3e7186e52c1d90447f677b9b6db2f4e120e5c32f2077f324f000a16474e347eae702b7fa2a487f3e5ff06baa2082f3904ecf404c27ceae74e +DIST tinyvec_macros-0.1.0.crate 1817 BLAKE2B a3d1966bf57c11afcd026269135a6189f149f905bb70b47537c0a7bcaef0bfc6c89bdcbdb0f6cb8e5255632855134631c683fc90606a254ec8ba818fd5ef0794 SHA512 d6afc83a3c70cde916a6ff599e2772588e4bbfa7a5b1c7e5c8aa0f4a8a5c9426182497a644e4a88194ece986d38fa64b6c8eda9eb1630441c8e65a8741a45873 +DIST tokio-1.15.0.crate 540198 BLAKE2B 1da03444dc29cc899679d06a31f395f433bf07014883814d86f495506eb8f6d66ea52caa52b47e09a65f7f2c8b2be6047eaa51ca9bf555d3cf73aef11c14c656 SHA512 a6c263beb37b22b19b7bff10891a53bbf56a49085eb1d6d12f35f52ac9aa6619d2c9a3f6d3ead2043d116013c0b5dc70164331e931b68bdd5a36273115ae06d3 +DIST tokio-native-tls-0.3.0.crate 20759 BLAKE2B 5073c5d93f5fa08170ffc76e21404b67100df5d944daa9cfe73420d4cb2409ca2617a0b1c25058a8b356b51fc4815972692aed7baa47ee3a11574a3109ce1691 SHA512 a8aa7586f15a3347ba9152497db84a098e751797c06df1a75d9b108689e14d6692b4efc6e5b49b5bf8f8fdb3bfc4f1157f56b3b0c9d9e753a8b31a61e65dfc4d +DIST tokio-util-0.6.7.crate 73201 BLAKE2B 4bed0bdc343b9fce03c12c0ab442cd7eaf3681232090547a0269bef5f362e1d96d2a10cf78708c6775234e23e8e2e00697333dc861df56136a29583d7a2401d2 SHA512 f6d81191a1caffd2cf78175bf0de3432bec684c739378072cf23daa1280b54d1781cf43d663a49b0cb34662043c1747073c97291414cf0407581325cb091b263 +DIST tower-service-0.3.1.crate 6299 BLAKE2B f56562faebe3a933f39f8e2093af65378bd307c59f9695408510ea9ca2230c68228c6726a0a2c7c42943002837dd9d86ce0a1d4b7849ba5c61df28df7632d909 SHA512 d23f9db2d6632f561970b55eaeaac22a20c8b9af18931cd564db193688eb2a2973127b440e175cfd7358f3d0ead53f7a759e34b7b86c293751079af9c2181ba7 +DIST tracing-0.1.26.crate 68583 BLAKE2B dbdeb4081dddb777d52afd1afb043e018e72f99ce6c4fbb16cb14e618da9c794ee594252cdd7a6d4a7c149a8ea86d63f6e4f1d75ad3bd76590d70af107616eac SHA512 19ddccaebb2d3b2230a6ceda5f72af29200ae760e8d411c2073e7338a6ca2231c8b2b14180eabec78dd521ab7b48996966b0419725adf8c67a03d1775ec834be +DIST tracing-core-0.1.18.crate 48381 BLAKE2B f175efd5481bbc9e881a36dad6c29eeb4b39400dd117e178d9e7a0e765cfdd3f36abe7e3fc2a537c79c5af544c764a0273a382cae907f5e79b6c140ffd2b9a91 SHA512 a5fddcc04651d05e61c2422d028a399cca260672f7a8e5c072126d9d4e21ef7a38911fca09e32c6da287a0f1cb6d1297d30e0f6fbb951fc190d2a67281a115b7 +DIST try-lock-0.2.3.crate 4158 BLAKE2B d8bb2fd8ba10285871ac3dee069474d4225e312c0a13b6bc238604c5207fe33437541abfdb507a6b400fc3359b78d39a7e9a5bebca426692b5dab4622b09c192 SHA512 ebae7ba9227e6fc20499b48ab85169943765342d4790bb4a31ac33a2be0af9401e2854c8e00b9d3b7e225d16875c90700b1c3fa99af07833d3b7a91b7a414fc3 +DIST typenum-1.13.0.crate 40238 BLAKE2B 5e5f9c8c60a4406c5a9a487033ddf7e8fd835bc255547e8b3f94c966e0f661f9b8a2f4a844661c00ee3c7e01f9fa109ac79c6bf53a064335c317dc9d9f8b0923 SHA512 0cd0b884509a5b4a252bed10309139350fce24b5d4bb887f4c0757ed18cb2481e331d7dc32fc81f4cabeeb5849e89ea5d92ea9815cb2985e5df4a022ac703de1 +DIST unicode-bidi-0.3.5.crate 33423 BLAKE2B 26434df7646ca6fc3b655ac2482c2be70700bd84fdd31d016f49b5276b23308d1f9258d40ff97a4090e3dd603d3a19f8fe45c13c5dcde6b00816dcee1695c7d3 SHA512 4541d84db17eef16da6ea59f1ff7103549ff338d6ffabef21e75fbfcfdb1a3fd0f8e8fe18abab7b6117e997cefeaa5e87fb01fed8fedbcd0657fc913743de8ad +DIST unicode-normalization-0.1.19.crate 107353 BLAKE2B 4c69d50efcae131eb4b91d385a64b49412a11ba913b3c0364cd04ad107d59e31adbda74d34ed13a065d9a7825d79fb740e82a4dc66b7813a9837af4352ac9e16 SHA512 7459e9d2867308cac80a98d8dd0b0cce797e2830ea5ff55b878f7a37a6f5e1f0bc14340e1a29955298d660ba2be57754a1478d74851b1b90576dd5bc4231729f +DIST unicode-width-0.1.8.crate 16732 BLAKE2B 5aa7b87eef1322e4151a3fcf981ade311b8fa030527d7561815950e58d3f15156163dfe34da6a708c37dccc3f7652bf7fc2cd899fe8bb0118b67c4113ff3a2d2 SHA512 0abba6da6981a2451e01d93bbd47652c46eb6fb07cc0214f33259fb29945bfd5ee2b302e883ddca8f68e921635f222701b7310e7da2a5e225f854980d1e474b0 +DIST unicode-xid-0.2.2.crate 14955 BLAKE2B 6c6da49ac08dbd8b3248272224d6bff96b9cd1f36029b1937a58a0b929c3a48326053305ed49e73edd70f572f5abbc4817cedc899c69e3457805ad056669f6af SHA512 92ffd0dd34e3ca235ecf110b38c447d3ec1faa23d76c112457f28d432f92fa6b5f428bc5e1bfd278f361f55426dd96e19ecb0d3eff6cf250892f069c52bd89a8 +DIST url-2.2.2.crate 68555 BLAKE2B f8e59f784b6c2e16bacfba36ad68670a6af17c16ea3b0866b5aa98e5bf4686cf1b1aac9b1f0a0ea3b89a01e044a2ca37830416f42d147158ea8e88f23fd28ac2 SHA512 f9b6ad99d69ff303283b3fd9e98945fbd6cb411a3d141badcbb3a0566723a451375e6dd5d5357e3eb7a1b5b1ee5756a2347c43817db2de6fe35b9004b090e077 +DIST users-0.11.0.crate 21980 BLAKE2B c106e9ed67b9ad766bb7318506261579768185aea3d956d9e8b2adb52349525fe69703ee3bb2e4fb02aa223bfa6fc92a14d8128412623f70654254f842d7322c SHA512 e28028f895780bd59a11069b81b87470a287a447e42566cfb8de0e2d4ba8c90a3ce92901e253dcd2628383c8ed06c10714bc0181a57bf257f7edb3510936e596 +DIST uuid-0.8.2.crate 37909 BLAKE2B e6ede5f8ae05572d4c55909eb3fe6946de6f10ad9bf71bd357739bc01201bf93f59ccbb3dabcbfd7b3e54b0c98c3b52d21f1bf1877b7283c6df623e9b2b3f33f SHA512 5a1f5ead9a920b9bbc120c02049c24b62ec215765e486d3a15c5015ef49fa506206efb737e6f6555cf6e2eddddfe55f0ca1d7dcfa9aa8bcf3e0ef570a54fa2d8 +DIST vcpkg-0.2.15.crate 228735 BLAKE2B 6b6bacd9a7fa38919241f45a97f58cae957e58d3aac99df208a26aa718e4f1644f4ccefa31b09151e5c1952288e0e5837c363918b98c7f55079a948a952c1c50 SHA512 7322a21e8811b2fe4e79e09dc321458068ecdf1953f05d36233f3278ecc0b1dfc64194db7010dd46fcf692285f42475beb090c6c6cac0c8f9fe0eb5c770e3172 +DIST vec_map-0.8.2.crate 14466 BLAKE2B 8f109fbff19604b82ea2aa61c952e2ce9b5597ccc8e1ef4e847648e2de08dece8c4debe92889edeccb8d393645fd0b62436b49d236ded7ad181c4a51239a9539 SHA512 4f1ef59bc2c437e79f1f84fe021bce5aa8ccd581f500f3d5776913d5f17d45b03ccee64f5bd03d47656318cfc9344a1f4311079d471fa409a8e4e94c143973f9 +DIST version_check-0.9.3.crate 12547 BLAKE2B 85761c300a8d755e0b376191ef0604728ae641261fdb10682a3134a828eadc4a33216426d286bcdbd8d0c5fcfe6ca8ba20ed078c4f53066b959739a0e73daec0 SHA512 4b3b428214a0322af536a18e6f050438398766af6589389f20a804121a6721962ba411e2dcfded60aaa74313128fb0e831bea31378e2695c29b29bdc24d7cbfd +DIST vmw_backdoor-0.2.1.crate 13983 BLAKE2B 1b7c78e0dae93c61912200ec39ca4a8de600197021e2b8d5929bc5aecc69ae7538b2e20ecf6a43e8b77a49392bb1da92585404f99f2828da75e728966245e99e SHA512 fe7f53c36c94c203340dc4caff9b33ba44823ef8c523675e51579e7ccb84eaa9dc9a32915425cadb943f015d62817f5b5e55b14274ee422eb80994a26f00b1fc +DIST want-0.3.0.crate 6550 BLAKE2B d97ac51dd5e49bec27cd196711110679013bb7aca520235db3f38c7d4399a2a17b9cf599cd0811137df957f2341e75442d48483dc7aed6910f0eed7a78ddad37 SHA512 7e7af8ddcc6faed3e3d18384a000339617187b74b0adf111a02bc15fdb152c88007844d6fe6f35a47a13f3384a19ee4723b884623de7d45c6619d76aa6699404 +DIST wasi-0.10.2+wasi-snapshot-preview1.crate 27505 BLAKE2B 4eb8644b945633d6e856ad80dd74990be19eb6af99823b147163384f61d471e2d9ec054d78a7064072344be53783e57073e8fffc6d5555c149b4834a9bf31dba SHA512 06977a294d76369a3867c45abdd8a87ea5c84e5a3681075ba0d14af1aee3114ff24495c7e7f7fe1e6e42230e65fba0e062898e69bc89e0209af62c2d14094ec7 +DIST wasm-bindgen-0.2.74.crate 158439 BLAKE2B 28a0be539d0bdec4e23d4c5a613ec0727c00112d1da1948c050d4ce6f5f42a07fce6d1f2fafa7a66ecee9183fee9a7c23845e12eb50d206f760bfc76dad41491 SHA512 21ac04c54be9f3d3f32edbcffcd24cb9401418e0a398a3f00b6d4a0302bb32b7b044b513163a12952b09b9465b07ec7e4c26a83ad88f8ae39ac5fdc9439a1af5 +DIST wasm-bindgen-backend-0.2.74.crate 25434 BLAKE2B 211365a4407865646376bc40fbfd9865715b137aadc18f267a9d32be8e0e585d05286f8a40cba20060e3591e3a5afa49f678bac6546cde7ef88c2bde36909724 SHA512 df9fdca6c48ecf1926552c4fe06a5936f7ea0523d62e0c62f104ce5eeae7ced1fa33875e2d3ef43d58a6395f77dd37e4882850443eb1d6aa59f0ec0bcf537cfb +DIST wasm-bindgen-futures-0.4.24.crate 14759 BLAKE2B 608e230509509508130e955d839cb1cef0b3f4c2ce4b69ec61e6357397b9d476e63b69335510f18289de74d63dd007486b5bb74020b9e79344d4c2bb91db0825 SHA512 a1b2220c7760300fe07937b039eb6dbb86e0110f5600d366a6a365ab74ca7894ff251902a78bf5aa3757cdc55a9de316e24fa26c68bbfda4ecabdc42e273a385 +DIST wasm-bindgen-macro-0.2.74.crate 11536 BLAKE2B 65cd4b6206cc3f8303f89a76628cf54f7e31b31857eac3cc2c377b4a11f7c32548faf6a87f4a821e4ac6f66ca8d36427f4563eac8cc84e2612d5a9438b8df861 SHA512 34c7f3703ee1ee2060ba6ae638bc69193d32ced9e30c40d75bae1431efdd76b4f3adca8f9a72fb7c75f894de42a478556828e1a3854e436427bbd5dc6dc7b838 +DIST wasm-bindgen-macro-support-0.2.74.crate 17831 BLAKE2B 29f3828f58b0e8eaae04e1d73bbf0b4cea7b75c1a5ae4348938a5f77d9eb1a1ee13dd137f9750f4c8defa6f2f5444d66b6715bc5052c57a603bf3a94cb05a428 SHA512 feab4a3661a879d5fdef852531e3261060db46f1d80106926bc8a8294a19adb104a9cfb59f3fead693abf3707118084a063906248d3f4c566b43e9aa9c2983b4 +DIST wasm-bindgen-shared-0.2.74.crate 7163 BLAKE2B 076464004d12495342a4b24f1dedc629f0ebb49993fce74271a5e59cd39e9a38ceea9a287716c65c2e61744c829388f7cdd7597a541da22b4f794b8bc3d44094 SHA512 4613c677d04abcabe6132f8f2a5a24f622cb1cb0c084f535e2f97584acba7a0faa12fd0636186b58756a7e4a82f364b04ea73330d7841940917f5e3324d0e60a +DIST web-sys-0.3.51.crate 651133 BLAKE2B 330aaa7323a516eb840b2a6ff0ee2e076ed70990c04679dca328d5eeae9aac01fb07a4e2852615715f14abe368989f84f159ac72a4c320c01437056dd7dec706 SHA512 fd0e1ec156d88699adc271d092dd1adf4d41cd554b2b49e2c53423eabbc2215b539a435d1b9146dccc40282339d766565ccdedef82febcafca43cb6e1437e5fc +DIST winapi-0.3.9.crate 1200382 BLAKE2B cb5799749ccd935ea2d7068d953cecf19f543d9db7dc16ad4584bb7005373ada34937a3ced7225544d8bc765da599911c7a3190efefb3a25b7c1bb7123b4f673 SHA512 ff8b7b78065f3d8999ec03c725a0460ebc059771bf071c7a3df3f0ecd733edf3b0a2450024d4e24e1aedddaecd9038ce1376c0d8bbf45132068cf45cf4a53a97 +DIST winapi-i686-pc-windows-gnu-0.4.0.crate 2918815 BLAKE2B 4d357e4d30f9552972170d65b9a5358b69c46a3e772fe05efc22f3d4ffc1caeeaad7aacdc7abd503a7ad0545f8bd7d22bf351dcb6df76f812fa4d45c34d65df0 SHA512 a672ccefd0730a8166fef1d4e39f9034d9ae426a3f5e28d1f4169fa5c5790767693f281d890e7804773b34acdb0ae1febac33cde8c50c0044a5a6152c7209ec2 +DIST winapi-x86_64-pc-windows-gnu-0.4.0.crate 2947998 BLAKE2B 2ad1ea8b5fa07d544e910ccba043ae925269b76b26c9da356305b34b86741dd8b9aff0b9ffe3d562db4fcd7d7c46a11ce9e3168b782b1d89ae6881742b7ede82 SHA512 4a654af6a5d649dc87e00497245096b35a2894ae66f155cb62389902c3b93ddcc5cf7d0d8b9dd97b291d2d80bc686af2298e80abef6ac69883f4a54e79712513 +DIST winreg-0.7.0.crate 21225 BLAKE2B 5841db683dc0aa8b92de8ec43100403b029c8d3e544adcaab030d998e5af4644ea176ac0bcd97141d137450a7bd761a5291405202c445a326da7d4f240686230 SHA512 a0b7a2d239e30cea89a863b879831bc32b5f2988ef3f0586ddadda48827cafc82d3602d2f8df3c47dc1e80537149a1ca1dc1506f9fbf960d9ba081dff1bac731 +DIST xml-rs-0.8.3.crate 52547 BLAKE2B cffdece0269b9c04c763481af3a3a25df53d7593552c0956a0efa30669aae497e7c4865c92bcf267f4d7684d0ab957fab3d62b76a241fbfd6497eae25bd9154f SHA512 e44048aa2a010c6242d79c8590bceb300d7056cfd1397c4e4e4411089a3c3686b49603fc2336ea69596b6775b729f1197ab6d9d7d8f83a758e2d962c07aec033 +DIST yaml-rust-0.4.5.crate 47783 BLAKE2B 3e888c5cc7afb43eaf3aaab2b6f47b86df164a66eb54d4e166b965cc84b1e06cd17bd992a0d6ee175d9a73a76e2b44a13167246383ed054afcf3cc1710b309cb SHA512 7621dc8dfd5e7d4a7a8805b2a7e8319b63b852367655f2359d4e3e8fec6c4fad52d75c46ce1161e4c674eac0780b757ce9d34e664e304d8d2beec7afa0363ea0 diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/afterburn-5.2.0.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/afterburn-5.2.0.ebuild new file mode 120000 index 0000000000..a9c82b7799 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/afterburn-5.2.0.ebuild @@ -0,0 +1 @@ +afterburn-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/afterburn-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/afterburn-9999.ebuild new file mode 100644 index 0000000000..e15fffc360 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/afterburn-9999.ebuild @@ -0,0 +1,257 @@ +# Copyright (c) 2017 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +CROS_WORKON_PROJECT="coreos/afterburn" +CROS_WORKON_LOCALNAME="afterburn" +CROS_WORKON_REPO="https://github.com" + +if [[ ${PV} == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="43dc76d7c38921d8eb0dc24d3b0b18787fa8ee07" # v5.2.0 + KEYWORDS="amd64 arm64" +fi + +# https://github.com/gentoo/cargo-ebuild +CRATES=" +aho-corasick-0.7.18 +ansi_term-0.12.1 +anyhow-1.0.52 +arc-swap-1.3.0 +assert-json-diff-2.0.1 +atty-0.2.14 +autocfg-1.0.1 +base64-0.10.1 +base64-0.13.0 +bitflags-1.3.2 +block-buffer-0.10.0 +block-buffer-0.9.0 +bumpalo-3.7.0 +byteorder-1.4.3 +bytes-1.0.1 +cc-1.0.68 +cfg-if-1.0.0 +charset-0.1.2 +chrono-0.4.19 +clap-2.34.0 +colored-2.0.0 +core-foundation-0.9.1 +core-foundation-sys-0.8.2 +cpufeatures-0.1.5 +cpufeatures-0.2.1 +crossbeam-channel-0.5.1 +crossbeam-utils-0.8.5 +crypto-common-0.1.1 +difference-2.0.0 +digest-0.10.1 +digest-0.9.0 +dirs-next-2.0.0 +dirs-sys-next-0.1.2 +encoding_rs-0.8.28 +errno-0.2.7 +errno-dragonfly-0.1.1 +fastrand-1.6.0 +fnv-1.0.7 +foreign-types-0.3.2 +foreign-types-shared-0.1.1 +form_urlencoded-1.0.1 +futures-channel-0.3.15 +futures-core-0.3.15 +futures-io-0.3.15 +futures-sink-0.3.15 +futures-task-0.3.15 +futures-util-0.3.15 +gcc-0.3.55 +generic-array-0.14.4 +getrandom-0.2.3 +h2-0.3.10 +hashbrown-0.11.2 +hermit-abi-0.1.19 +hmac-0.12.0 +hostname-0.3.1 +http-0.2.4 +http-body-0.4.2 +httparse-1.4.1 +httpdate-1.0.1 +hyper-0.14.11 +hyper-tls-0.5.0 +idna-0.2.3 +indexmap-1.7.0 +instant-0.1.12 +ipnet-2.3.1 +ipnetwork-0.18.0 +itoa-0.4.7 +itoa-1.0.1 +js-sys-0.3.51 +lazy_static-1.4.0 +libc-0.2.103 +libsystemd-0.5.0 +linked-hash-map-0.5.4 +log-0.4.14 +mailparse-0.13.7 +maplit-1.0.2 +match_cfg-0.1.0 +matches-0.1.8 +md-5-0.9.1 +memchr-2.4.0 +memoffset-0.6.4 +mime-0.3.16 +minimal-lexical-0.2.1 +mio-0.7.13 +miow-0.3.7 +mockito-0.30.0 +native-tls-0.2.8 +nix-0.23.1 +nom-7.1.0 +ntapi-0.3.6 +num-integer-0.1.44 +num-traits-0.2.14 +num_cpus-1.13.0 +once_cell-1.8.0 +opaque-debug-0.3.0 +openssh-keys-0.5.0 +openssl-0.10.38 +openssl-probe-0.1.4 +openssl-sys-0.9.70 +percent-encoding-2.1.0 +pin-project-lite-0.2.7 +pin-utils-0.1.0 +pkg-config-0.3.19 +pnet_base-0.28.0 +pnet_datalink-0.28.0 +pnet_sys-0.28.0 +ppv-lite86-0.2.10 +proc-macro2-1.0.27 +quote-1.0.9 +quoted_printable-0.4.3 +rand-0.8.4 +rand_chacha-0.3.1 +rand_core-0.6.3 +rand_hc-0.3.1 +redox_syscall-0.2.9 +redox_users-0.4.0 +regex-1.5.4 +regex-syntax-0.6.25 +remove_dir_all-0.5.3 +reqwest-0.11.9 +rustversion-1.0.5 +ryu-1.0.5 +schannel-0.1.19 +security-framework-2.3.1 +security-framework-sys-2.3.0 +serde-1.0.133 +serde-xml-rs-0.5.1 +serde_derive-1.0.133 +serde_json-1.0.74 +serde_urlencoded-0.7.0 +serde_yaml-0.8.23 +sha2-0.10.1 +sha2-0.9.5 +slab-0.4.3 +slog-2.7.0 +slog-async-2.7.0 +slog-scope-4.4.0 +slog-term-2.8.0 +socket2-0.4.0 +strsim-0.8.0 +subtle-2.4.0 +syn-1.0.73 +take_mut-0.2.2 +tempfile-3.3.0 +term-0.7.0 +textwrap-0.11.0 +thiserror-1.0.26 +thiserror-impl-1.0.26 +thread_local-1.1.3 +time-0.1.43 +tinyvec-1.2.0 +tinyvec_macros-0.1.0 +tokio-1.15.0 +tokio-native-tls-0.3.0 +tokio-util-0.6.7 +tower-service-0.3.1 +tracing-0.1.26 +tracing-core-0.1.18 +try-lock-0.2.3 +typenum-1.13.0 +unicode-bidi-0.3.5 +unicode-normalization-0.1.19 +unicode-width-0.1.8 +unicode-xid-0.2.2 +url-2.2.2 +users-0.11.0 +uuid-0.8.2 +vcpkg-0.2.15 +vec_map-0.8.2 +version_check-0.9.3 +vmw_backdoor-0.2.1 +want-0.3.0 +wasi-0.10.2+wasi-snapshot-preview1 +wasm-bindgen-0.2.74 +wasm-bindgen-backend-0.2.74 +wasm-bindgen-futures-0.4.24 +wasm-bindgen-macro-0.2.74 +wasm-bindgen-macro-support-0.2.74 +wasm-bindgen-shared-0.2.74 +web-sys-0.3.51 +winapi-0.3.9 +winapi-i686-pc-windows-gnu-0.4.0 +winapi-x86_64-pc-windows-gnu-0.4.0 +winreg-0.7.0 +xml-rs-0.8.3 +yaml-rust-0.4.5 +" + +inherit coreos-cargo cros-workon systemd + +DESCRIPTION="A tool for collecting instance metadata from various providers" +HOMEPAGE="https://github.com/coreos/afterburn" +SRC_URI="$(cargo_crate_uris ${CRATES})" + +LICENSE="Apache-2.0" +SLOT="0" + +DEPEND="dev-libs/openssl:0=" + +RDEPEND=" + ${DEPEND} + !coreos-base/coreos-metadata +" + +PATCHES=( + "${FILESDIR}"/0001-Revert-remove-cl-legacy-feature.patch + "${FILESDIR}"/0002-util-cmdline-Handle-the-cmdline-flags-as-list-of-sup.patch + "${FILESDIR}"/0003-encode-information-for-systemd-networkd-wait-online.patch +) + +src_unpack() { + cros-workon_src_unpack "$@" + coreos-cargo_src_unpack "$@" +} + +src_prepare() { + default + + # tell the rust-openssl bindings where the openssl library and include dirs are + export PKG_CONFIG_ALLOW_CROSS=1 + export OPENSSL_LIB_DIR=/usr/lib64/ + export OPENSSL_INCLUDE_DIR=/usr/include/openssl/ +} + +src_compile() { + cargo_src_compile --features cl-legacy "$@" +} + +src_install() { + cargo_src_install --features cl-legacy "$@" + mv "${D}/usr/bin/afterburn" "${D}/usr/bin/coreos-metadata" + + systemd_dounit "${FILESDIR}/coreos-metadata.service" + systemd_dounit "${FILESDIR}/coreos-metadata-sshkeys@.service" +} + +src_test() { + cargo_src_test --features cl-legacy "$@" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0001-Revert-remove-cl-legacy-feature.patch b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0001-Revert-remove-cl-legacy-feature.patch new file mode 100644 index 0000000000..d6aa8814ab --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0001-Revert-remove-cl-legacy-feature.patch @@ -0,0 +1,188 @@ +From cb9d27d40fe7b34bdabe846764c0290fd9d36b8c Mon Sep 17 00:00:00 2001 +From: Mathieu Tortuyaux +Date: Wed, 30 Mar 2022 09:17:45 +0200 +Subject: [PATCH 1/3] Revert "*: remove cl-legacy feature" + +This reverts commit 3e4b623b390ab756a6be963eec7198b3e7f44e20. + +Signed-off-by: Mathieu Tortuyaux +--- + Cargo.toml | 3 + + src/metadata.rs | 8 +++ + src/providers/mod.rs | 2 + + src/providers/vagrant_virtualbox/mod.rs | 79 +++++++++++++++++++++++++ + src/util/cmdline.rs | 4 ++ + 5 files changed, 96 insertions(+) + create mode 100644 src/providers/vagrant_virtualbox/mod.rs + +diff --git a/Cargo.toml b/Cargo.toml +index e5b3dc3..f9b3e46 100644 +--- a/Cargo.toml ++++ b/Cargo.toml +@@ -26,6 +26,9 @@ lto = true + # We assume we're being delivered via e.g. RPM which supports split debuginfo + debug = true + ++[features] ++cl-legacy = [] ++ + [dependencies] + anyhow = "1.0" + base64 = "0.13" +diff --git a/src/metadata.rs b/src/metadata.rs +index 758bb1e..8544de9 100644 +--- a/src/metadata.rs ++++ b/src/metadata.rs +@@ -30,6 +30,8 @@ use crate::providers::openstack; + use crate::providers::openstack::network::OpenstackProviderNetwork; + use crate::providers::packet::PacketProvider; + use crate::providers::powervs::PowerVSProvider; ++#[cfg(feature = "cl-legacy")] ++use crate::providers::vagrant_virtualbox::VagrantVirtualboxProvider; + use crate::providers::vmware::VmwareProvider; + use crate::providers::vultr::VultrProvider; + +@@ -48,6 +50,8 @@ pub fn fetch_metadata(provider: &str) -> Result box_result!(AliyunProvider::try_new()?), + "aws" => box_result!(AwsProvider::try_new()?), ++ #[cfg(feature = "cl-legacy")] ++ "ec2" => box_result!(AwsProvider::try_new()?), + "azure" => box_result!(Azure::try_new()?), + "azurestack" => box_result!(AzureStack::try_new()?), + "cloudstack-metadata" => box_result!(CloudstackNetwork::try_new()?), +@@ -55,6 +59,8 @@ pub fn fetch_metadata(provider: &str) -> Result box_result!(DigitalOceanProvider::try_new()?), + "exoscale" => box_result!(ExoscaleProvider::try_new()?), + "gcp" => box_result!(GcpProvider::try_new()?), ++ #[cfg(feature = "cl-legacy")] ++ "gce" => box_result!(GcpProvider::try_new()?), + // IBM Cloud - VPC Generation 2. + "ibmcloud" => box_result!(IBMGen2Provider::try_new()?), + // IBM Cloud - Classic infrastructure. +@@ -63,6 +69,8 @@ pub fn fetch_metadata(provider: &str) -> Result box_result!(OpenstackProviderNetwork::try_new()?), + "packet" => box_result!(PacketProvider::try_new()?), + "powervs" => box_result!(PowerVSProvider::try_new()?), ++ #[cfg(feature = "cl-legacy")] ++ "vagrant-virtualbox" => box_result!(VagrantVirtualboxProvider::new()), + "vmware" => box_result!(VmwareProvider::try_new()?), + "vultr" => box_result!(VultrProvider::try_new()?), + _ => bail!("unknown provider '{}'", provider), +diff --git a/src/providers/mod.rs b/src/providers/mod.rs +index f684d22..a67546c 100644 +--- a/src/providers/mod.rs ++++ b/src/providers/mod.rs +@@ -35,6 +35,8 @@ pub mod microsoft; + pub mod openstack; + pub mod packet; + pub mod powervs; ++#[cfg(feature = "cl-legacy")] ++pub mod vagrant_virtualbox; + pub mod vmware; + pub mod vultr; + +diff --git a/src/providers/vagrant_virtualbox/mod.rs b/src/providers/vagrant_virtualbox/mod.rs +new file mode 100644 +index 0000000..d7a9e0e +--- /dev/null ++++ b/src/providers/vagrant_virtualbox/mod.rs +@@ -0,0 +1,79 @@ ++// Copyright 2017 CoreOS, Inc. ++// ++// Licensed under the Apache License, Version 2.0 (the "License"); ++// you may not use this file except in compliance with the License. ++// You may obtain a copy of the License at ++// ++// http://www.apache.org/licenses/LICENSE-2.0 ++// ++// Unless required by applicable law or agreed to in writing, software ++// distributed under the License is distributed on an "AS IS" BASIS, ++// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. ++// See the License for the specific language governing permissions and ++// limitations under the License. ++ ++//! vagrant/virtualbox metadata fetcher ++ ++use std::collections::HashMap; ++use std::net::IpAddr; ++use std::thread; ++use std::time::Duration; ++ ++use anyhow::{anyhow,Context,Result}; ++use slog_scope::info; ++ ++use crate::providers::MetadataProvider; ++ ++#[derive(Clone, Copy, Debug)] ++pub struct VagrantVirtualboxProvider; ++ ++impl VagrantVirtualboxProvider { ++ pub fn new() -> Self { ++ Self ++ } ++ ++ fn get_ip() -> Result { ++ let max_attempts = 30; ++ for _ in 0..max_attempts { ++ if let Some(iface) = Self::find_eth1() { ++ for a in iface.ips { ++ if let IpAddr::V4(a) = a.ip() { ++ return Ok(format!("{}", a)); ++ } ++ } ++ } ++ info!("eth1 not found or is lacking an ipv4 address; waiting 2 seconds"); ++ thread::sleep(Duration::from_secs(2)); ++ } ++ Err(anyhow!("eth1 was not found!")) ++ } ++ ++ fn find_eth1() -> Option { ++ pnet_datalink::interfaces() ++ .into_iter() ++ .find(|i| i.name == "eth1") ++ } ++ ++ /// Get the hostname from local system settings. ++ fn system_hostname() -> Result { ++ let hostname = hostname::get() ++ .context("unable to get hostname")? ++ .to_string_lossy() ++ .into_owned(); ++ Ok(hostname) ++ } ++} ++ ++impl MetadataProvider for VagrantVirtualboxProvider { ++ fn attributes(&self) -> Result> { ++ let hostname = Self::system_hostname()?; ++ let ip = Self::get_ip()?; ++ ++ let attributes = maplit::hashmap! { ++ "VAGRANT_VIRTUALBOX_HOSTNAME".to_string() => hostname, ++ "VAGRANT_VIRTUALBOX_PRIVATE_IPV4".to_string() => ip, ++ }; ++ ++ Ok(attributes) ++ } ++} +diff --git a/src/util/cmdline.rs b/src/util/cmdline.rs +index 8821265..e7b5550 100644 +--- a/src/util/cmdline.rs ++++ b/src/util/cmdline.rs +@@ -23,7 +23,11 @@ use anyhow::{bail, Context, Result}; + use slog_scope::trace; + + /// Platform key. ++#[cfg(not(feature = "cl-legacy"))] + const CMDLINE_PLATFORM_FLAG: &str = "ignition.platform.id"; ++/// Platform key (CL and RHCOS legacy name: "OEM"). ++#[cfg(feature = "cl-legacy")] ++const CMDLINE_PLATFORM_FLAG: &str = "coreos.oem.id"; + + /// Get platform/OEM value from cmdline file. + pub fn get_platform(fpath: &str) -> Result { +-- +2.34.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0002-util-cmdline-Handle-the-cmdline-flags-as-list-of-sup.patch b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0002-util-cmdline-Handle-the-cmdline-flags-as-list-of-sup.patch new file mode 100644 index 0000000000..1bb0fe0240 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0002-util-cmdline-Handle-the-cmdline-flags-as-list-of-sup.patch @@ -0,0 +1,111 @@ +From 4ba9549019683e4ece7bd1ddb27da67f8b260ea7 Mon Sep 17 00:00:00 2001 +From: Mathieu Tortuyaux +Date: Tue, 29 Mar 2022 16:01:19 +0200 +Subject: [PATCH 2/3] util/cmdline: Handle the cmdline flags as list of + supported names + +Flatcar Container Linux uses flatcar.oem.id as kernel parameter and has +support for coreos.oem.id. Afterburn's ignition.oem.id is not supported +and even if, it would not be the sole option. +Handle both flatcar.oem.id and coreos.oem.id. The first name in the +list takes precedence, any other present names are ignored. +--- + src/util/cmdline.rs | 64 +++++++++++++++++++++++++-------------------- + 1 file changed, 36 insertions(+), 28 deletions(-) + +diff --git a/src/util/cmdline.rs b/src/util/cmdline.rs +index e7b5550..5c1cfda 100644 +--- a/src/util/cmdline.rs ++++ b/src/util/cmdline.rs +@@ -24,29 +24,36 @@ use slog_scope::trace; + + /// Platform key. + #[cfg(not(feature = "cl-legacy"))] +-const CMDLINE_PLATFORM_FLAG: &str = "ignition.platform.id"; +-/// Platform key (CL and RHCOS legacy name: "OEM"). ++const CMDLINE_PLATFORM_FLAGS: [&'static str; 1] = ["ignition.platform.id"]; ++/// Backwards-compatible platform keys, the first name takes precedence. + #[cfg(feature = "cl-legacy")] +-const CMDLINE_PLATFORM_FLAG: &str = "coreos.oem.id"; ++const CMDLINE_PLATFORM_FLAGS: [&'static str; 2] = ["flatcar.oem.id", "coreos.oem.id"]; + + /// Get platform/OEM value from cmdline file. + pub fn get_platform(fpath: &str) -> Result { + let content = std::fs::read_to_string(fpath) + .with_context(|| format!("Failed to read cmdline file ({})", fpath))?; + +- match find_flag_value(CMDLINE_PLATFORM_FLAG, &content) { +- Some(platform) => { +- trace!("found '{}' flag: {}", CMDLINE_PLATFORM_FLAG, platform); +- Ok(platform) ++ for flagname in &CMDLINE_PLATFORM_FLAGS { ++ match find_flag_value(flagname, &content) { ++ Some(platform) => { ++ trace!("found '{}' flag: {}", flagname, platform); ++ return Ok(platform); ++ } ++ None => { ++ continue; ++ } + } +- None => bail!( +- "Couldn't find flag '{}' in cmdline file ({})", +- CMDLINE_PLATFORM_FLAG, +- fpath +- ), + } ++ ++ bail!( ++ "Couldn't find one of the flags '{:?}' in cmdline file ({})", ++ CMDLINE_PLATFORM_FLAGS, ++ fpath ++ ) + } + ++ + /// Check whether kernel cmdline file contains flags for network configuration. + #[allow(unused)] + pub fn has_network_kargs(fpath: &str) -> Result { +@@ -99,22 +106,23 @@ mod tests { + + #[test] + fn test_find_flag() { +- let flagname = "coreos.oem.id"; +- let tests = vec![ +- ("", None), +- ("foo=bar", None), +- ("coreos.oem.id", None), +- ("coreos.oem.id=", None), +- ("coreos.oem.id=\t", None), +- ("coreos.oem.id=ec2", Some("ec2".to_string())), +- ("coreos.oem.id=\tec2", Some("ec2".to_string())), +- ("coreos.oem.id=ec2\n", Some("ec2".to_string())), +- ("foo=bar coreos.oem.id=ec2", Some("ec2".to_string())), +- ("coreos.oem.id=ec2 foo=bar", Some("ec2".to_string())), +- ]; +- for (tcase, tres) in tests { +- let res = find_flag_value(flagname, tcase); +- assert_eq!(res, tres, "failed testcase: '{}'", tcase); ++ for flagname in &CMDLINE_PLATFORM_FLAGS { ++ let tests = vec![ ++ ("".to_string(), None), ++ ("foo=bar".to_string(), None), ++ (format!("{}", flagname), None), ++ (format!("{}=", flagname), None), ++ (format!("{}=\t", flagname), None), ++ (format!("{}=ec2", flagname), Some("ec2".to_string())), ++ (format!("{}=\tec2", flagname), Some("ec2".to_string())), ++ (format!("{}=ec2\n", flagname), Some("ec2".to_string())), ++ (format!("foo=bar {}=ec2", flagname), Some("ec2".to_string())), ++ (format!("{}=ec2 foo=bar", flagname), Some("ec2".to_string())), ++ ]; ++ for (tcase, tres) in tests { ++ let res = find_flag_value(flagname, &tcase); ++ assert_eq!(res, tres, "failed testcase: '{}'", &tcase); ++ } + } + } + +-- +2.34.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0003-encode-information-for-systemd-networkd-wait-online.patch b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0003-encode-information-for-systemd-networkd-wait-online.patch new file mode 100644 index 0000000000..33a434c7d4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/0003-encode-information-for-systemd-networkd-wait-online.patch @@ -0,0 +1,368 @@ +From f88600293ee1c3e7d08ee724b18944dd1c40deff Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Kai=20L=C3=BCke?= +Date: Thu, 15 Oct 2020 15:49:02 +0900 +Subject: [PATCH 3/3] network: Encode information for + systemd-networkd-wait-online + +The network-online.target can use systemd-networkd-wait-online.service +to wait for all interfaces to come up. It will fail if the interfaces +didn't came up but sometimes it is actually ok for some interfaces to +be down because they are unused or they are just one of two parts of a +bond. We should encode when interfaces will never come up and when it +is acceptable to have interfaces in a degraded state and which. +Extend the network logic to handle this additional configuration. For +Packet we expect the metadata to specify all interfaces, and any other +physical NICs can be set to "unmanaged" so that we don't wait for them. +Introduce "Path" matching in the networkd unit file for that. +We also allow bonds to operate with only one working link, and we don't +wait for all bonded interfaces to be configured. +This is a port of https://github.com/flatcar-linux/afterburn/pull/10 +to afterburn's main branch. +--- + src/network.rs | 99 +++++++++++++++++++++++++-- + src/providers/digitalocean/mod.rs | 2 + + src/providers/ibmcloud_classic/mod.rs | 2 + + src/providers/packet/mod.rs | 30 ++++++++ + 4 files changed, 128 insertions(+), 5 deletions(-) + +diff --git a/src/network.rs b/src/network.rs +index abf36f2..40f18a8 100644 +--- a/src/network.rs ++++ b/src/network.rs +@@ -72,6 +72,8 @@ pub struct Interface { + pub name: Option, + /// Interface MAC address. + pub mac_address: Option, ++ /// Path as identifier ++ pub path: Option, + /// Relative priority for interface configuration. + pub priority: u8, + pub nameservers: Vec, +@@ -79,6 +81,8 @@ pub struct Interface { + pub routes: Vec, + pub bond: Option, + pub unmanaged: bool, ++ /// Optional requirement setting instead of the default ++ pub required_for_online: Option, + } + + /// A virtual network interface. +@@ -126,10 +130,11 @@ impl NetDevKind { + impl Interface { + /// Return a deterministic `systemd.network` unit name for this device. + pub fn sd_network_unit_name(&self) -> Result { +- let iface_name = match (&self.name, &self.mac_address) { +- (Some(ref name), _) => name.clone(), +- (None, Some(ref addr)) => addr.to_string(), +- (None, None) => bail!("network interface without name nor MAC address"), ++ let iface_name = match (&self.name, &self.mac_address, &self.path) { ++ (Some(ref name), _, _) => name.clone(), ++ (None, Some(ref addr), _) => addr.to_string(), ++ (None, None, Some(ref path)) => path.to_string(), ++ (None, None, None) => bail!("network interface without name nor MAC address"), + }; + let unit_name = format!("{:02}-{}.network", self.priority, iface_name); + Ok(unit_name) +@@ -146,6 +151,9 @@ impl Interface { + if let Some(mac) = self.mac_address { + config.push_str(&format!("MACAddress={}\n", mac)); + } ++ if let Some(path) = &self.path { ++ config.push_str(&format!("Path={}\n", path)); ++ } + + // [Network] section + config.push_str("\n[Network]\n"); +@@ -157,8 +165,14 @@ impl Interface { + } + + // [Link] section ++ if self.unmanaged || self.required_for_online.is_some() { ++ config.push_str("\n[Link]\n"); ++ } + if self.unmanaged { +- config.push_str("\n[Link]\nUnmanaged=yes\n"); ++ config.push_str("Unmanaged=yes\n"); ++ } ++ if let Some(operational_state) = &self.required_for_online { ++ config.push_str(&format!("RequiredForOnline={}\n", operational_state)); + } + + // [Address] sections +@@ -225,12 +239,14 @@ mod tests { + Interface { + name: Some(String::from("lo")), + mac_address: Some(MacAddr(0, 0, 0, 0, 0, 0)), ++ path: None, + priority: 20, + nameservers: vec![], + ip_addresses: vec![], + routes: vec![], + bond: None, + unmanaged: false, ++ required_for_online: None, + }, + "20-lo.network", + ), +@@ -238,12 +254,14 @@ mod tests { + Interface { + name: Some(String::from("lo")), + mac_address: Some(MacAddr(0, 0, 0, 0, 0, 0)), ++ path: None, + priority: 10, + nameservers: vec![], + ip_addresses: vec![], + routes: vec![], + bond: None, + unmanaged: false, ++ required_for_online: None, + }, + "10-lo.network", + ), +@@ -251,12 +269,14 @@ mod tests { + Interface { + name: None, + mac_address: Some(MacAddr(0, 0, 0, 0, 0, 0)), ++ path: None, + priority: 20, + nameservers: vec![], + ip_addresses: vec![], + routes: vec![], + bond: None, + unmanaged: false, ++ required_for_online: None, + }, + "20-00:00:00:00:00:00.network", + ), +@@ -264,15 +284,32 @@ mod tests { + Interface { + name: Some(String::from("lo")), + mac_address: None, ++ path: None, + priority: 20, + nameservers: vec![], + ip_addresses: vec![], + routes: vec![], + bond: None, + unmanaged: false, ++ required_for_online: None, + }, + "20-lo.network", + ), ++ ( ++ Interface { ++ name: None, ++ mac_address: None, ++ path: Some("pci-*".to_owned()), ++ priority: 20, ++ nameservers: vec![], ++ ip_addresses: vec![], ++ routes: vec![], ++ bond: None, ++ unmanaged: false, ++ required_for_online: None, ++ }, ++ "20-pci-*.network", ++ ), + ]; + + for (iface, expected) in cases { +@@ -286,12 +323,14 @@ mod tests { + let i = Interface { + name: None, + mac_address: None, ++ path: None, + priority: 20, + nameservers: vec![], + ip_addresses: vec![], + routes: vec![], + bond: None, + unmanaged: false, ++ required_for_online: None, + }; + i.sd_network_unit_name().unwrap_err(); + } +@@ -333,6 +372,7 @@ mod tests { + Interface { + name: Some(String::from("lo")), + mac_address: Some(MacAddr(0, 0, 0, 0, 0, 0)), ++ path: None, + priority: 20, + nameservers: vec![ + IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1)), +@@ -352,6 +392,7 @@ mod tests { + }], + bond: Some(String::from("james")), + unmanaged: false, ++ required_for_online: None, + }, + "[Match] + Name=lo +@@ -380,16 +421,64 @@ Gateway=127.0.0.1 + Interface { + name: None, + mac_address: None, ++ path: None, + priority: 10, + nameservers: vec![], + ip_addresses: vec![], + routes: vec![], + bond: None, + unmanaged: false, ++ required_for_online: None, + }, + "[Match] + + [Network] ++", ++ ), ++ // test the path and required_for_online settings ++ ( ++ Interface { ++ name: None, ++ mac_address: None, ++ path: Some("pci-*".to_owned()), ++ priority: 10, ++ nameservers: vec![], ++ ip_addresses: vec![], ++ routes: vec![], ++ bond: None, ++ unmanaged: false, ++ required_for_online: Some("no".to_owned()), ++ }, ++ "[Match] ++Path=pci-* ++ ++[Network] ++ ++[Link] ++RequiredForOnline=no ++", ++ ), ++ // test the unmanaged setting ++ ( ++ Interface { ++ name: Some("*".to_owned()), ++ mac_address: None, ++ path: None, ++ priority: 10, ++ nameservers: vec![], ++ ip_addresses: vec![], ++ routes: vec![], ++ bond: None, ++ unmanaged: true, ++ required_for_online: None, ++ }, ++ "[Match] ++Name=* ++ ++[Network] ++ ++[Link] ++Unmanaged=yes + ", + ), + ]; +diff --git a/src/providers/digitalocean/mod.rs b/src/providers/digitalocean/mod.rs +index 3d74d29..381b90b 100644 +--- a/src/providers/digitalocean/mod.rs ++++ b/src/providers/digitalocean/mod.rs +@@ -159,8 +159,10 @@ impl DigitalOceanProvider { + routes, + bond: None, + name: None, ++ path: None, + priority: 10, + unmanaged: false, ++ required_for_online: None, + }, + ); + } +diff --git a/src/providers/ibmcloud_classic/mod.rs b/src/providers/ibmcloud_classic/mod.rs +index 25e83b5..d8f0086 100644 +--- a/src/providers/ibmcloud_classic/mod.rs ++++ b/src/providers/ibmcloud_classic/mod.rs +@@ -243,12 +243,14 @@ impl IBMClassicProvider { + let iface = network::Interface { + name: Some(name), + mac_address: Some(mac_addr), ++ path: None, + priority: 10, + nameservers: nameservers.clone(), + ip_addresses: vec![ip_net], + routes, + bond: None, + unmanaged: false, ++ required_for_online: None, + }; + output.push(iface); + } +diff --git a/src/providers/packet/mod.rs b/src/providers/packet/mod.rs +index 7a643e8..e789773 100644 +--- a/src/providers/packet/mod.rs ++++ b/src/providers/packet/mod.rs +@@ -219,6 +219,7 @@ impl PacketProvider { + mac_address: Some(mac), + bond: i.bond.clone(), + name: None, ++ path: None, + priority: 10, + nameservers: Vec::new(), + ip_addresses: Vec::new(), +@@ -226,6 +227,15 @@ impl PacketProvider { + // the interface should be unmanaged if it doesn't have a bond + // section + unmanaged: i.bond.is_none(), ++ required_for_online: if i.bond.is_none() { ++ // use the default requirement ++ None ++ } else { ++ // We care about the state of the bond interface and accept if any of the bonded ++ // interfaces are down. Actually the desired minimal state is "no-carrier" but ++ // systemd-networkd-wait-online does not work well with it currently, thus "no". ++ Some("no".to_owned()) ++ }, + }); + + // if there is a bond key, make sure we have a bond device for it +@@ -235,10 +245,12 @@ impl PacketProvider { + priority: 5, + nameservers: dns_servers.clone(), + mac_address: None, ++ path: None, + bond: None, + ip_addresses: Vec::new(), + routes: Vec::new(), + unmanaged: false, ++ required_for_online: Some("degraded-carrier".to_owned()), + }; + if !bonds + .iter() +@@ -319,6 +331,24 @@ impl PacketProvider { + interfaces.push(bond) + } + ++ // Create a fallback rule for all physical NICs that haven't been configured ++ // because otherwise systemd-networkd-wait-online will wait for them and even if told ++ // to only wait for bond0 this won't work with systemd 246 because the bond0 interface ++ // never leaves the "configuring" phase when the other NICs are also still configuring. ++ let fallback = Interface { ++ path: Some("pci-*".to_owned()), ++ unmanaged: true, ++ priority: 80, ++ name: None, ++ mac_address: None, ++ bond: None, ++ nameservers: Vec::new(), ++ ip_addresses: Vec::new(), ++ routes: Vec::new(), ++ required_for_online: None, ++ }; ++ interfaces.push(fallback); ++ + Ok((interfaces, network_devices)) + } + } +-- +2.34.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/coreos-metadata-sshkeys@.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/coreos-metadata-sshkeys@.service new file mode 100644 index 0000000000..4818dadc37 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/coreos-metadata-sshkeys@.service @@ -0,0 +1,16 @@ +[Unit] +Description=Flatcar Metadata Agent (SSH Keys) + +[Service] +Type=oneshot +RemainAfterExit=yes +Restart=on-failure +RestartSec=10 +Environment=COREOS_METADATA_OPT_PROVIDER=--cmdline +ExecStart=/usr/bin/coreos-metadata ${COREOS_METADATA_OPT_PROVIDER} --ssh-keys=%i +ExecStartPost=/usr/bin/update-ssh-keys -u %i + +[Install] +DefaultInstance=core +RequiredBy=multi-user.target +Alias=afterburn-sshkeys@.service diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/coreos-metadata.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/coreos-metadata.service new file mode 100644 index 0000000000..20098d1be3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/files/coreos-metadata.service @@ -0,0 +1,16 @@ +[Unit] +Description=Flatcar Metadata Agent + +[Service] +Type=oneshot +RemainAfterExit=yes +Restart=on-failure +RestartSec=10 +Environment=COREOS_METADATA_OPT_PROVIDER=--cmdline +ExecStart=/usr/bin/coreos-metadata ${COREOS_METADATA_OPT_PROVIDER} --attributes=/run/metadata/flatcar +ExecStartPost=/usr/bin/sed --in-place "s/AFTERBURN/COREOS/g ; s/AWS/EC2/g ; s/GCP/GCE/g" /run/metadata/flatcar +ExecStartPost=/usr/bin/ln -fs /run/metadata/flatcar /run/metadata/coreos + +[Install] +RequiredBy=metadata.target +Alias=afterburn.service diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/afterburn/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.2.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.2.ebuild new file mode 100644 index 0000000000..e933aa3efa --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.2.ebuild @@ -0,0 +1,29 @@ +# Copyright (c) 2013 CoreOS Inc. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="CoreOS auto update signing keys." +HOMEPAGE="http://github.com/coreos/" +SRC_URI="" +LICENSE="BSD" +SLOT="0" +KEYWORDS="amd64 arm arm64 x86" +IUSE="cros_host official" + +# Do not enable offical and SDK at the same time, +# the SDK only needs developer keys. +REQUIRED_USE="?? ( cros_host official )" + +# No source to unpack +S="${WORKDIR}" + +src_install() { + insinto /usr/share/update_engine + if use official; then + newins "${FILESDIR}/official-v2.pub.pem" update-payload-key.pub.pem + else + newins "${FILESDIR}/developer-v1.key.pem" update-payload-key.key.pem + newins "${FILESDIR}/developer-v1.pub.pem" update-payload-key.pub.pem + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/developer-v1.key.pem b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/developer-v1.key.pem new file mode 100644 index 0000000000..ac660a755e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/developer-v1.key.pem @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEAzFS5uVJ+pgibcFLD3kbYk02Edj0HXq31ZT/Bva1sLp3Ysv+Q +Tv/ezjf0gGFfASdgpz6G+zTipS9AIrQr0yFR+tdp1ZsHLGxVwvUoXFftdapqlyj8 +uQcWjjbN7qJsZu0Ett/qo93hQ5nHW7Sv5dRm/ZsDFqk2Uvyaoef4bF9r03wYpZq7 +K3oALZ2smETv+A5600mj1Xg5M52QFU67UHlsEFkZphrGjiqiCdp9AAbAvE7a5rFc +Jf86YR73QX08K8BX7OMzkn3DsqdnWvLB3l3W6kvIuP+75SrMNeYAcU8PI1+bzLcA +G3VN3jA78zeKALgynUNH50mxuiiU3DO4DZ+p5QIDAQABAoIBAH7ENbE+9+nkPyMx +hekaBPVmSz7b3/2iaTNWmckmlY5aSX3LxejtH3rLBjq7rihWGMXJqg6hodcfeGfP +Zb0H2AeKq1Nlac7qq05XsKGRv3WXs6dyO1BDkH/Minh5dk1o0NrwEm91kXLSLfe8 +IsCwxPCjwgfGFTjpFLpL4zjA/nFmWRyk2eyvs5VYRGKbbC83alUy7LutyRdZfw1b +nwXldw2m8k/HPbGhaAqPpXTOjckIXZS5Dcp3smrOzwObZ6c3gQzg8upaRmxJVOmk +cgCFTe0yUB2GMTEE3SUmuWJyZqECoyQtuiu0yT3igH8MZQpjg9NXm0eho/bXjN36 +frH+ikUCgYEA7VdCRcisnYWct29j+Bnaio9yXwwxhfoee53a4LQgjw5RLGUe1mXe +j56oZ1Mak3Hh55sVQLNXZBuXHQqPsr7KkWXJXedDNFfq1u6by4LeJV0YYiDjjaCM +T5G4Tcs7xhBWszLMCjhpJCrwHdGk3aa65UQ+angZlxhyziULCjpb5rMCgYEA3GUb +VkqlVuNkHoogOMwg+h1jUSkwtWvP/z/FOXrKjivuwSgQ+i6PsildI3FL/WQtJxgd +arB+l0L8TZJ6spFdNXwGmdCLqEcgEBYl11EojOXYLa7oLONI41iRQ3/nBBIqC38P +Cs6CZQG/ZpKSoOzXE34BwcrOL99MA2oaVpGHuQcCgYA1IIk3Mbph8FyqOwb3rGHd +Dksdt48GXHyiUy2BixCWtS+6blA+0cLGB0/PAS07wAw/WdmiCAMR55Ml7w1Hh6m0 +bkJrAK9schmhTvwUzBCJ8JLatF37f+qojQfichHJPjMKHd7KkuIGNI5XPmxXKVFA +rMwD7SpdRh28w1H7UiDsPQKBgGebnFtXohyTr2hv9K/evo32LM9ltsFC2rga6YOZ +BwoI+yeQx1JleyX9LgzQYTHQ2y0quAGE0S4YznVFLCswDQpssMm0cUL9lMQbNVTg +kViTYKoxNHKNsqE17Kw3v4l5ZIydAZxJ8qC7TphQxV+jl4RRU1AgIAf/SEO+qH0T +0yMXAoGBAN+y9QpGnGX6cgwLQQ7IC6MC+3NRed21s+KxHzpyF+Zh/q6NTLUSgp8H +dBmeF4wAZTY+g/fdB9drYeaSdRs3SZsM7gMEvjspjYgE2rV/5gkncFyGKRAiNOR4 +bsy1Gm/UYLTc8+S3fq/xjg9RCjW9JMwavAwL6oVNNt7nyAXPfvSu +-----END RSA PRIVATE KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/developer-v1.pub.pem b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/developer-v1.pub.pem new file mode 100644 index 0000000000..ccee9ee90b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/developer-v1.pub.pem @@ -0,0 +1,9 @@ +-----BEGIN PUBLIC KEY----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFS5uVJ+pgibcFLD3kbY +k02Edj0HXq31ZT/Bva1sLp3Ysv+QTv/ezjf0gGFfASdgpz6G+zTipS9AIrQr0yFR ++tdp1ZsHLGxVwvUoXFftdapqlyj8uQcWjjbN7qJsZu0Ett/qo93hQ5nHW7Sv5dRm +/ZsDFqk2Uvyaoef4bF9r03wYpZq7K3oALZ2smETv+A5600mj1Xg5M52QFU67UHls +EFkZphrGjiqiCdp9AAbAvE7a5rFcJf86YR73QX08K8BX7OMzkn3DsqdnWvLB3l3W +6kvIuP+75SrMNeYAcU8PI1+bzLcAG3VN3jA78zeKALgynUNH50mxuiiU3DO4DZ+p +5QIDAQAB +-----END PUBLIC KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/official-v2.pub.pem b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/official-v2.pub.pem new file mode 100644 index 0000000000..bdc2f1af89 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/official-v2.pub.pem @@ -0,0 +1,9 @@ +-----BEGIN PUBLIC KEY----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/NZ5Tvc93KynOLPDOxa +hyAGRKB2NvgF9l2A61SsFw5CuZc/k02u1/BvFehK4XL/eOo90Dt8A2l28D/YKs7g +2IPUSAnA9hc5OKBbpHsDzisxlAh7kg4FpeeJJWJMzO8NDCG5NZVqXEpGjCmX0qSh +5MLiTDr9dU2YhLo93/92dKnTvsLjUVv5wnuF55Lt2wJv4CbxVn4hHwotGfSomTBO ++7o6hE3VIIo1C6lkP+FAqMyWKA9s6U0x4tGxCXszW3hPWOANLIT4m0e55ayxiy5A +ESEVW/xx6Rul75u925m21AqA6wwaEB6ZPKTnUiWoNKNv1xi8LPIz12+0nuE6iT1K +jQIDAQAB +-----END PUBLIC KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-cloudinit/coreos-cloudinit-1.14.0-r4.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-cloudinit/coreos-cloudinit-1.14.0-r4.ebuild new file mode 120000 index 0000000000..2fef540816 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-cloudinit/coreos-cloudinit-1.14.0-r4.ebuild @@ -0,0 +1 @@ +coreos-cloudinit-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-cloudinit/coreos-cloudinit-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-cloudinit/coreos-cloudinit-9999.ebuild new file mode 100644 index 0000000000..fe3d1fa8c6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-cloudinit/coreos-cloudinit-9999.ebuild @@ -0,0 +1,54 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/coreos-cloudinit" +CROS_WORKON_LOCALNAME="coreos-cloudinit" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/flatcar/coreos-cloudinit" +COREOS_GO_GO111MODULE="on" +inherit cros-workon systemd toolchain-funcs udev coreos-go + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="2c383a41a1718f66be2add7f58a885df5b89d86f" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="coreos-cloudinit" +HOMEPAGE="https://github.com/flatcar/coreos-cloudinit" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +DEPEND="! + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0-r83.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0-r83.ebuild new file mode 120000 index 0000000000..ca6eabbbd6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0-r83.ebuild @@ -0,0 +1 @@ +coreos-dev-0.1.0.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0.ebuild new file mode 100644 index 0000000000..7d80b997f5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/coreos-dev-0.1.0.ebuild @@ -0,0 +1,49 @@ +# Copyright (c) 2012 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="CoreOS developer images and containers (meta package)" +HOMEPAGE="http://coreos.com" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm arm64 x86" + +# The dependencies here are meant to capture "all the packages +# developers want to use for development, test, or debug". This +# category is meant to include all developer use cases, including +# software test and debug, performance tuning, hardware validation, +# and debugging failures. +RDEPEND=" + app-portage/gentoolkit + coreos-base/coreos + coreos-base/emerge-gitclone + dev-lang/python + dev-util/pahole + dev-util/strace + dev-vcs/repo + net-analyzer/netperf + net-analyzer/traceroute + net-dialup/minicom + net-misc/iperf + net-misc/iputils + net-misc/openssh + net-misc/rsync + sys-apps/coreutils + sys-apps/diffutils + sys-apps/file + sys-apps/findutils + sys-apps/i2c-tools + sys-apps/kbd + sys-apps/less + sys-apps/portage + sys-apps/smartmontools + sys-apps/which + sys-devel/gcc + sys-devel/gdb + sys-fs/lvm2 + sys-fs/squashfs-tools + sys-process/procps + sys-process/psmisc + " diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-dev/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/README new file mode 100644 index 0000000000..ecfbc513fb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/README @@ -0,0 +1,2 @@ +If /etc/sshd_config changes make sure to apply the change to sys-auth/google-oslogin. +Those files must be kept in sync. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r179.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r179.ebuild new file mode 120000 index 0000000000..df02d424d0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r179.ebuild @@ -0,0 +1 @@ +coreos-init-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild new file mode 100644 index 0000000000..78afc1b446 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild @@ -0,0 +1,61 @@ +# Copyright (c) 2013 The CoreOS Authors. All rights reserved. +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/init" +CROS_WORKON_LOCALNAME="init" +CROS_WORKON_REPO="https://github.com" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm ~arm64 ~x86" +else + CROS_WORKON_COMMIT="17224c8d6f71b17676bbcf34919072fb67a6bf4c" # flatcar-master + KEYWORDS="amd64 arm arm64 x86" +fi + +PYTHON_COMPAT=( python3_{6..10} ) + +inherit cros-workon systemd python-any-r1 + +DESCRIPTION="Init scripts for CoreOS" +HOMEPAGE="http://www.coreos.com/" +SRC_URI="" + +LICENSE="BSD" +SLOT="0/${PVR}" +IUSE="test symlink-usr" + +REQUIRED_USE="symlink-usr" + +# Daemons we enable here must installed during build/install in addition to +# during runtime so the systemd unit enable step works. +DEPEND=" + net-misc/openssh + net-nds/rpcbind + !coreos-base/oem-service + test? ( ${PYTHON_DEPS} ) + " +RDEPEND="${DEPEND} + app-admin/logrotate + sys-block/parted + sys-apps/gptfdisk + >=sys-apps/systemd-207-r5 + >=coreos-base/coreos-cloudinit-0.1.2-r5 + " + +src_install() { + emake DESTDIR="${D}" install + + # Enable some sockets that aren't enabled by their own ebuilds. + systemd_enable_service sockets.target sshd.socket + + # Enable some services that aren't enabled elsewhere. + systemd_enable_service rpcbind.target rpcbind.service + + # Create compatibility symlinks in case /usr/lib64/ instead of /usr/lib/ was used + local compat + for compat in modules flatcar coreos ; do + dosym "../lib/${compat}" "/usr/lib64/${compat}" + done +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/coreos-oem-gce-0.0.1-r5.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/coreos-oem-gce-0.0.1-r5.ebuild new file mode 120000 index 0000000000..348c68c571 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/coreos-oem-gce-0.0.1-r5.ebuild @@ -0,0 +1 @@ +coreos-oem-gce-0.0.1.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/coreos-oem-gce-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/coreos-oem-gce-0.0.1.ebuild new file mode 100644 index 0000000000..e1ee050a08 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/coreos-oem-gce-0.0.1.ebuild @@ -0,0 +1,19 @@ +# Copyright (c) 2016 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="CoreOS OEM suite for Google Compute Engine (meta package)" +HOMEPAGE="" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +RDEPEND=" + app-emulation/google-compute-engine + app-shells/bash + sys-libs/glibc + sys-libs/nss-usrfiles +" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/files/manglefs.sh b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/files/manglefs.sh new file mode 100644 index 0000000000..ac499577bb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/files/manglefs.sh @@ -0,0 +1,54 @@ +#!/bin/sh +set -e + +# GCE can work with our normal file system, but it needs an "init system". +# Here is a better place to install this script so it doesn't get put in real +# images built from the GCE Python package. +cat << 'EOF' > init.sh && chmod 755 init.sh +#!/bin/bash -ex + +# Write a configuration template if it does not exist. +[ -e /etc/default/instance_configs.cfg.template ] || +echo -e > /etc/default/instance_configs.cfg.template \ + '[InstanceSetup]\nset_host_keys = false' + +# Run the initialization scripts. +/usr/bin/google_instance_setup +/usr/bin/google_metadata_script_runner --script-type startup + +# Handle the signal to shut down this service. +trap 'stopping=1 ; kill "${daemon_pids[@]}" || :' SIGTERM + +# Fork the daemon processes. +daemon_pids=() +for d in accounts clock_skew network +do + /usr/bin/google_${d}_daemon & daemon_pids+=($!) +done + +# Notify the host that everything is running. +NOTIFY_SOCKET=/run/systemd/notify /usr/bin/systemd-notify --ready + +# Pause while the daemons are running, and stop them all when one dies. +wait -n "${daemon_pids[@]}" || : +kill "${daemon_pids[@]}" || : + +# If a daemon died while we're not shutting down, fail. +test -n "$stopping" || exit 1 + +# Otherwise, run the shutdown script before quitting. +exec /usr/bin/google_metadata_script_runner --script-type shutdown +EOF + +# Disable PAM checks in the container. +rm -f usr/lib/pam.d/* +cat << 'EOF' > usr/lib/pam.d/other +account optional pam_permit.so +auth optional pam_permit.so +password optional pam_permit.so +session optional pam_permit.so +EOF + +# Don't bundle these paths, since they are useless to us. +mv usr/lib/systemd/lib*.so* usr/lib64/ +rm -fr boot etc/* usr/lib/systemd var/db/pkg diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/files/manifest.in b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/files/manifest.in new file mode 100644 index 0000000000..b7a8896f85 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/files/manifest.in @@ -0,0 +1,33 @@ +{ + "acKind": "ImageManifest", + "acVersion": "0.8.6", + "name": "@ACI_NAME@", + "labels": [ + {"name": "arch", "value": "@ACI_ARCH@"}, + {"name": "os", "value": "linux"}, + {"name": "version", "value": "@ACI_VERSION@"} + ], + "app": { + "exec": [ "/init.sh" ], + "user": "0", + "group": "0", + + "mountPoints": [ + { + "name": "etc", + "path": "/etc", + "readOnly": false + }, + { + "name": "home", + "path": "/home", + "readOnly": false + }, + { + "name": "runsystemd", + "path": "/run/systemd", + "readOnly": false + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-oem-gce/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/coreos-sb-keys-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/coreos-sb-keys-0.0.1.ebuild new file mode 100644 index 0000000000..9ff15fdf5d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/coreos-sb-keys-0.0.1.ebuild @@ -0,0 +1,24 @@ +# Copyright (c) 2015 CoreOS Inc. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="CoreOS Secure Boot keys" +HOMEPAGE="" +SRC_URI="" +LICENSE="BSD" +SLOT="0" +KEYWORDS="amd64 arm arm64 x86" +IUSE="" + +S="${WORKDIR}" + +src_install() { + insinto /usr/share/sb_keys + newins "${FILESDIR}/PK.key" PK.key + newins "${FILESDIR}/PK.crt" PK.crt + newins "${FILESDIR}/KEK.key" KEK.key + newins "${FILESDIR}/KEK.crt" KEK.crt + newins "${FILESDIR}/DB.key" DB.key + newins "${FILESDIR}/DB.crt" DB.crt +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/DB.crt b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/DB.crt new file mode 100644 index 0000000000..e621892143 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/DB.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDBTCCAe2gAwIBAgIJALVWTDRRd7EnMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNV +BAMMDkNvcmVPUyB0ZXN0IERCMB4XDTE1MDQxMzE4MzM0NloXDTE1MDUxMzE4MzM0 +NlowGTEXMBUGA1UEAwwOQ29yZU9TIHRlc3QgREIwggEiMA0GCSqGSIb3DQEBAQUA +A4IBDwAwggEKAoIBAQCwQoQNxPH1ei+RNEcxmdn8cCNc/tYXuLObAUHtTp9AqCYr +BkZiFZ25RmujfmJDdK4fPN81tpNC0aKKr71UYgcj13noHmOgR9Rv3rRxwBib3n7S +K4RjnpW6V2aRDYNo0BH25lk/5M8IE6SX0SIuG1vCFavAj5s0dg5ycPHkDj1Ypbmv +Q6froIdCVX3fSNXSgPY812Eb36yNyZFybetQupfVRsl0auCUNh3anNLPCFre1oZf +lkx+U3BFXDZ0k8Fjq+fzvKxu4ef9XpZmXieow5YCwemCRItl+ftBeWD/OjXoNXBR +sij3QNi/CxrO59DiklpGolPaCVA0oJYWL5XkWI/dAgMBAAGjUDBOMB0GA1UdDgQW +BBRmPA/wBsfGI3EH2/X5W/SuwY1NOzAfBgNVHSMEGDAWgBRmPA/wBsfGI3EH2/X5 +W/SuwY1NOzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCW9TbpGhGv +ZPPlb0X05wXYnzKUUq6U3IlxGVghwjLeE6/IIQvWn+sl7l9PNainzPATx1jZ7YSR +HTCXhtfbnM9WICOV/h4Vztt7Z2m65gDa+/5679VpQfrqG5oV7FhucmPiMNbiy92Y +F5SjB/HmRaSfimew3RmnOVUeUySW7Nw7tA5ka/nG0U9hXd296z7ghJlZQj1qTYtr +1Y2yv4QSiRWNZcJSOq79tdGbAJqkqibo775UH6sj/UfHMoDQTvAenF8H/4F80r+6 +X2pgnX96ihshJ2MAXQnhbLLmPtXn/pV122xis/177yrefavHFTp14KPbnU1K3jeW +hoLJhYcZKXdz +-----END CERTIFICATE----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/DB.key b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/DB.key new file mode 100644 index 0000000000..37b3b90688 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/DB.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCwQoQNxPH1ei+R +NEcxmdn8cCNc/tYXuLObAUHtTp9AqCYrBkZiFZ25RmujfmJDdK4fPN81tpNC0aKK +r71UYgcj13noHmOgR9Rv3rRxwBib3n7SK4RjnpW6V2aRDYNo0BH25lk/5M8IE6SX +0SIuG1vCFavAj5s0dg5ycPHkDj1YpbmvQ6froIdCVX3fSNXSgPY812Eb36yNyZFy +betQupfVRsl0auCUNh3anNLPCFre1oZflkx+U3BFXDZ0k8Fjq+fzvKxu4ef9XpZm +Xieow5YCwemCRItl+ftBeWD/OjXoNXBRsij3QNi/CxrO59DiklpGolPaCVA0oJYW +L5XkWI/dAgMBAAECggEBAJ3d1XynqrbciwIYurM4Qz+QCHxgWszAR01LoQq04nn8 +oMLkSeHLzoqFAh9bMRONy+56jMkFD3xHWrewk3iinBaEBdHadgy2iRTxeNhw3xmr +/Batl1PKU/ykD19XpR0ZTx2+Tq2ld7CaN08qptx48IQy+LPta2tfWa0yb9R81IEx +4NwuVe/wevPkcZYSL/G9PDKXBe6IoJoIP8RhqxPpYOxlyOpMxiIbjDRwsUSPM9FX +coZ8kZ4Ypa3phyRcjSHdQBXwJdGu6jFbsg+lbVIETM6mGvygDgIIXLALBJk0SsGs +pwZZqk3SAVL5veV8pCFab8xoa0P9352e54W8yJKBmgECgYEA3toELmYnPs/Gotd1 +MnTwkzIYdGn5OVOM1lmg3boizVkGAdC3EUQ/gdb5dUs6ondPcKvDWiJjnxQjGmqH +en2mSLJSDpHv+zs+MhTdRBoGkqMPJZK5IEe8DU2ITv7io7gkyA7tecbftQEkzZCL +wLUqFPOOt5xVbrazva+x1P28y8ECgYEAynpTsXVTjcXwrFqG3JPSfvAKYbO2SaBg +FaBKtGa/Ve0ReKxbSDis4nDOdM64Vu1EGH50TBO4mp8EoTL8CaNGXI6nebMpFlID +6AYkbwafo/qrQ/jG/bo6D+83Hmve3iCBqhaTlzIAIWQha3iHRJmtu5CJAmg/IV6r +dt6472MAOx0CgYAWWqw8s0aQiGsWfqJk81IGkeneE5tKYtUn00nNtBQ1oQ53NCaI +9t2f+p5/Y5J4JZu0Y6Zu7jAsDusOhU0dvmjlte2BRKZb/y9X+rvPTwUFxJGKZVNo +p4l3lCVuNyco4Rnfb4/mvUpHb9vvOuap6AJWo6/XPzlap70T9AHUqbc8gQKBgQDE +iWS/tkD6No5c3ipV5W7HJD0PhR+F7BQYKdUZszo6L7lrxvF78vdtfU4Jd7bbOceF +dwlv5xyjiYM27YRT3pantRi/OrbBIa8FAyFOW8GNq/2eJtcQ5jkBypNYBiD4v9jc +vrlYY4JY5xbBeObkIb/PdoZnPcU5oOkSozIju5c3yQKBgB696ZmO9FJy/mojDbhT +zgzusTRs9AG0eHp/uAcwAb61UfDnmu8SonS+ba9M+UjAG0UlsN60RYjh2EKSUugv +h1xOm4UCQzey7VhgJoHXWuxLWZ8rc3/wldf3ggDUgq1+aia+uwSBnjj9BtbfCy9Z +LuqCnBSr1dq9sP2vNa71tpEk +-----END PRIVATE KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/KEK.crt b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/KEK.crt new file mode 100644 index 0000000000..54646e2aae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/KEK.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDBzCCAe+gAwIBAgIJAN/ga2oSNhyiMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV +BAMMD0NvcmVPUyB0ZXN0IEtFSzAeFw0xNTA0MTMxODMzMzRaFw0xNTA1MTMxODMz +MzRaMBoxGDAWBgNVBAMMD0NvcmVPUyB0ZXN0IEtFSzCCASIwDQYJKoZIhvcNAQEB +BQADggEPADCCAQoCggEBAL/DE8ss0bgdKgLmyQ6CQsAUpeWwLlxMNca+LROR5+UH +VAa/Xph30xdfmpydWxUO0Ga1ZnyTfZp+UfOWya9kYkzzmmuKAzC0HLzolSWxQ3sL +EDsXEbpfl7KsjDvPuXdVoJukdN8EppqP6DLGjHbY5lk5AfXj7xCP3wHlLzMsPoxu +hkfDfZSB0qJ5r+L6egz50Vufvxn1oiolMWh7zorkQaM5i4cP6BEQtan7WNhKDJAZ +3fbApmcJyOP7TvWLHcAyuI2FM13J89bc7vrclb2PrtAoijNyDnNImLb187/gC8Ab +kHVFIm8KyZ8ZByNoU5hy4bA1U/EEZ+slyIqqKcnWbukCAwEAAaNQME4wHQYDVR0O +BBYEFC1uWlFmCG6L18813V9Xy12dQ/MJMB8GA1UdIwQYMBaAFC1uWlFmCG6L1881 +3V9Xy12dQ/MJMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAEOKN7AS +2szIJ4ejcxRJhih5rBFwVkim80rwBX8Ga3sStAAKEpdZC7fjrxXm8UWYbEa8Qisz ++O74T7QqXaCRoxh3ij4fgg4clULOfjGGWWEghl4rtpUIsarCk3HWtEzqLWbAQOA0 +co3B08KbwYhOYfx1MkRE1K6kFKojJ1tod/w9jxY1/w/qmJKFP/vM6//H9dhVPr14 +4ySqz/NYhb0FZRVGJkeLbXWy4sLZy2Of+ojCRjjAgmY9RAT6ZxovgyXqVBDWfboX +4Yp9bAboktfNtX6+9wMIW5bTuZ5yZjK+I+MnHSqbRVh/6T/kh5j5+jdPXnKgZGXy +PWAnhbRJTjUAVTY= +-----END CERTIFICATE----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/KEK.key b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/KEK.key new file mode 100644 index 0000000000..0536b49f82 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/KEK.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC/wxPLLNG4HSoC +5skOgkLAFKXlsC5cTDXGvi0TkeflB1QGv16Yd9MXX5qcnVsVDtBmtWZ8k32aflHz +lsmvZGJM85prigMwtBy86JUlsUN7CxA7FxG6X5eyrIw7z7l3VaCbpHTfBKaaj+gy +xox22OZZOQH14+8Qj98B5S8zLD6MboZHw32UgdKiea/i+noM+dFbn78Z9aIqJTFo +e86K5EGjOYuHD+gRELWp+1jYSgyQGd32wKZnCcjj+071ix3AMriNhTNdyfPW3O76 +3JW9j67QKIozcg5zSJi29fO/4AvAG5B1RSJvCsmfGQcjaFOYcuGwNVPxBGfrJciK +qinJ1m7pAgMBAAECggEAL5jxMc4nJAcBJYU5RIOqo9i8MN3hNAGqm3Ea6S+fGqcO +ATrA9SFQ4Q1W6Cbas8hgjA3cqXFGjPFr0AWOfB1zlNwmaSjxj8Y1F+K3Gor8T+84 +ESKxwMv3cF8J09LEm01Ctz9DzxNtcxHjNa84sEs4Kc9PoEP6U+cSGHtVkuMZh2t9 +hNad8DfdM2oZi5IPcVcBXr/+QmyjereKlTij5BPSdeKw2JKprv0NWgzuZkDlhtAF +aSNLkODk3NT9+zMSqvuSkNkWuvcl8kFG32strHzsEKneugEbLQPLwEA2hRz6gDo2 +alPUo9shg4o54r47pascVJjbiFPevIvF0GTgmv/VAQKBgQDodWPClJZiyifJ6M65 +V4p+N4evhr6xBTxYMTfXoXIT6IwqyiDyhDnjUApM9wwr9YTxixJukAdcdDnWOMJb +qR2JquGXeChPAArH69FzsuybVXURpBiIOBBNFmWf/T97Aw55l6OXxzA/aAuQMFyF +H8zEQddC57yEMIpToTuNkNq8CQKBgQDTLpvNtsqKBxIpnybv2gRo2MDgJtk+PGu/ +UN3f1GDP1C9nhEVWb1n4v7n9bhYs5zra3vYkgvr317QVAbKF+PUmIPLmid5gN8J5 +46+qdVvK88UPJye2cuIrHO/XScWiC95SzQo6KfVNqawLJhioZ3OlK69pOcLoXWsO +/nJC5i6T4QKBgQCM6hx/Z/OCD2nvS+GFGTwrJx5pmRUf2jyqeauQW53704yko8M1 +QFKXKX4VCe2m+D6O7e9OdqD/urUU13N6fRoayivW1lAZE711U860hFJKF5PQDdmR +Oesnz9vrEGna+A9eRj41U9o7labs0WREjvJiRkdnl3L/7yzrZWHkf1sZgQKBgQDJ +X49oKR6XYci68a0yV8WOqOm6lLDhPMJNy3HXBvBOHXoajrGDi2jS3xgehoQUy2V+ +4c763/8qqIBq65RtVgmGEzMsDFmFjIYgrrGKrKAcNjk5is++lWv/SneV5h3TuNeG +Q0i2T94+8UVB2FD4/LT00mRQxaiK5NG6mX0hN9dAYQKBgEC8GarO5+lPEXNhkqcM +rWBtZTszTP9WGs0nB6+ZGZ+23uMwNA/6YZvyvAssfJ9yr4pyI/r2WH0rHa9146s0 +rJx+Xs/TSbGRYDq7BcwjN3DuSvoCg/0arVeoptrmoDIrFOzhlgQWdrIOMqVKTNKi +s/B7OsUuIhJ7HAJSatt2uzam +-----END PRIVATE KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/PK.crt b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/PK.crt new file mode 100644 index 0000000000..9fcb2a2e17 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/PK.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDBTCCAe2gAwIBAgIJAPrtEex/4ln3MA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNV +BAMMDkNvcmVPUyB0ZXN0IFBLMB4XDTE1MDQxMzE4MzMyMloXDTE1MDUxMzE4MzMy +MlowGTEXMBUGA1UEAwwOQ29yZU9TIHRlc3QgUEswggEiMA0GCSqGSIb3DQEBAQUA +A4IBDwAwggEKAoIBAQCrAWnfZoNaw4FVFbdkQo+aBTjMnaEs643EdqoXRn8ohmJu +gCnNNy4mcwsxrx7ksSyfU3ZeVeFXFcydAt53F0hFLsWEi/Riw59AImOuyOXxcrK5 +CAzaOqWIs0RvDqvEJjm7JSuOVndeTVFp7d/2up0zJoXltMaZLs3748AyI29aL2jr +PEW8+FZRqp/z9/EWpifcPZXFzqc7QYTwamfznwqUIFXMLqW5bREroFpZ9MMTmc86 +WMQYUySPdCxvQKKgvGyf0qYWVw2mPp6jZZF84dELn1FvNJ4AMIa/d2TGSkNOpPkn +0VTWtmJTZoY2n/0/KHFQPT1Ot7M9/s6pRd8IIfDzAgMBAAGjUDBOMB0GA1UdDgQW +BBRHBFY7ba7b2aOujtUZB1dHVQUqFDAfBgNVHSMEGDAWgBRHBFY7ba7b2aOujtUZ +B1dHVQUqFDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCT3Xs/My5E +ST//7SrupTakH+QRd7/qIFj2/coXuWE0Qp9cWiWIy9GDyd0oyQsKQklVbuLArju4 +N8oekgtJnNoYbJnLs0JPfAIC5Np3wYTNCyjVi8kSyKSWdXM2vKkycG023sFiFdSk +0pgmwCO1E8fGxe9YDjCdtRTp8+j6m5GrRkl3YYfqYtUFfXy+BhcKs1H6AlfaKAZH +m1fYDGmGGuOTij/5yEyY38NJybjL8Aak89nwuVrHm76whldsA3LfPYenjLk5qTd8 +yEYgvoajAZDIXkT05F9E9SdSaob2ZK1nDp98kG+rnv7dN/xQVfaKywuM3cdy5TKk +VqV0ENF7w+O5 +-----END CERTIFICATE----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/PK.key b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/PK.key new file mode 100644 index 0000000000..589fef190e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/files/PK.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCrAWnfZoNaw4FV +FbdkQo+aBTjMnaEs643EdqoXRn8ohmJugCnNNy4mcwsxrx7ksSyfU3ZeVeFXFcyd +At53F0hFLsWEi/Riw59AImOuyOXxcrK5CAzaOqWIs0RvDqvEJjm7JSuOVndeTVFp +7d/2up0zJoXltMaZLs3748AyI29aL2jrPEW8+FZRqp/z9/EWpifcPZXFzqc7QYTw +amfznwqUIFXMLqW5bREroFpZ9MMTmc86WMQYUySPdCxvQKKgvGyf0qYWVw2mPp6j +ZZF84dELn1FvNJ4AMIa/d2TGSkNOpPkn0VTWtmJTZoY2n/0/KHFQPT1Ot7M9/s6p +Rd8IIfDzAgMBAAECggEAZI/0Ptf+LwYBrJOUwXUTFbQ0br/T5KKxP/O4mu9uH9rH +T8w2yOPGU/4beyBMvpgicZ+XYGqIlbnQFhV11frvGSAkL4pOMTZxFDok/MhP0Olu +iLlfNYZ/iiBCAj1SbYs9L/zv3Eik8ePuGKk2p9WeVFI3M5pXoAWSRKruf42vEg0Q +mAvjpabEFi41RavmO6EuDt5m6VOO3wgGXBZw/+skTtCtlhABK08aggV4a1jrrAJX +FVH8+XmYG7xknxMLxQYSuG1H0n86iext1+jtL74qd51PeaVzfXfE00xjnM08naV+ +XivpwhxsSo0aSMsuOipvMefvQDDwbYVN1RVlEIDuoQKBgQDhRy7j2Dz1zN+C0Bg3 +X2xInQGHq3MineGa/DCzN17rGT0jYB/9FMZTSfk60RNzFacHgLhfSxk0sPfBdi+J +WGWjm48nVz/vsx6V8DNOYiHoi2DxdpHoohUzdxKccySnv1vMDcVRQg3gb47UNp0p +FRqi/g47Ts+JSLS29X6vqB/iBwKBgQDCU31L4ipLXOWbiJDQVGq5A0N0zAo2j+Jx +Kr3G+R72XRHTBLCvverayCwrI+fvUyvAeUs/trswQ/PmXdkmg40EEJDCJ87ktfEW +MfgRJhloPJkyTf+JKaLlUQwgV7YVtV932EWC8V9Rdcf8rNZ9gt9TiiwGOTCrNDH4 +tL1d1T9OtQKBgAXgw5pyU/Td6Z8SKu+W785dOmL92D04/V/74JFsim978xpvMaZ6 +2knmDji4p9dC417Qvv7NiNTVIUHNAaSFx/Ei5/NQ1Xw9ojirUctjyBq3OEpUm64E +PKVhH/0xC+3MkmqamWFrZc1LW+CxpBwkTtOd6WUmw0eDvCNh+HJA4sQVAoGBAKFN +rDPRCEqGUhFIyuwjJnNswhGxTMj9pnlJgT4ojAr0NldzDTbT7p6sif1FUMDXyPl7 +tXqts7PctBgEzrupduRo28BOSu6OGBDUaZXSikR8CK45EGRKq2yuWeJ+7CYY56YT +X5/Ru81idx7GWUTV3Yr6ppCD6GI0cUaAwK+i02oBAoGAcCho+7uZ0+I2BkR9Fxz/ +gdHgL3Cw5o3x7i1erXXCoxN9YLHwidOtj9w+8IS9dSY9ii08w8LE4BXpgoFe+TGU +yXgEnl8qOUAcXKMu4jRj4LqNaJWXnAZ7J+1WJZ4h7ygGEJh0aYByiUdL5aShs/YJ +CevUdCQxnWbrAySfMEMIXg0= +-----END PRIVATE KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-sb-keys/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1-r305.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1-r305.ebuild new file mode 120000 index 0000000000..cea9644219 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1-r305.ebuild @@ -0,0 +1 @@ +coreos-0.0.1.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild new file mode 100644 index 0000000000..78f1ee5523 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild @@ -0,0 +1,211 @@ +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="CoreOS (meta package)" +HOMEPAGE="http://coreos.com" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm arm64 x86" +IUSE="selinux" + + +################################################################################ +# +# READ THIS BEFORE ADDING PACKAGES TO THIS EBUILD! +# +################################################################################ +# +# Every coreos dependency (along with its dependencies) is included in the +# release image -- more packages contribute to longer build times, a larger +# image, slower and bigger auto-updates, increased security risks, etc. Consider +# the following before adding a new package: +# +# 1. Does the package really need to be part of the release image? +# +# Some packages can be included only in the developer or test images, i.e., the +# chromeos-dev or chromeos-test ebuilds. If the package will eventually be used +# in the release but it's still under development, consider adding it to +# chromeos-dev initially until it's ready for production. +# +# 2. Why is the package a direct dependency of the chromeos ebuild? +# +# It makes sense for some packages to be included as a direct dependency of the +# chromeos ebuild but for most it doesn't. The package should be added as a +# direct dependency of the ebuilds for all packages that actually use it -- in +# time, this ensures correct builds and allows easier cleanup of obsolete +# packages. For example, if a utility will be invoked by the session manager, +# its package should be added as a dependency in the chromeos-login ebuild. Or +# if the package adds a daemon that will be started through an upstart job, it +# should be added as a dependency in the chromeos-init ebuild. If the package +# really needs to be a direct dependency of the chromeos ebuild, consider adding +# a comment why the package is needed and how it's used. +# +# 3. Are all default package features and dependent packages needed? +# +# The release image should include only packages and features that are needed in +# the production system. Often packages pull in features and additional packages +# that are never used. Review these and consider pruning them (e.g., through USE +# flags). +# +# 4. What is the impact on the image size? +# +# Before adding a package, evaluate the impact on the image size. If the package +# and its dependencies increase the image size significantly, consider +# alternative packages or approaches. +# +# 5. Is the package needed on all targets? +# +# If the package is needed only on some target boards, consider making it +# conditional through USE flags in the board overlays. +# +################################################################################ + +RDEPEND=">=sys-apps/baselayout-3.0.0" + +# Optionally enable SELinux for dbus and systemd (but always install packages and pull in the SELinux policy for containers) +RDEPEND="${RDEPEND} + sys-apps/dbus[selinux?] + sys-apps/systemd[selinux?] + " + +# Only applicable or available on amd64 +RDEPEND="${RDEPEND} + amd64? ( + app-emulation/xenserver-pv-version + app-emulation/xenstore + )" + +# sys-devel/gettext: it embeds 'envsubst' binary which is useful for simple file templating. +RDEPEND="${RDEPEND} + app-admin/etcd-wrapper + app-admin/flannel-wrapper + app-admin/locksmith + app-admin/mayday + app-admin/sdnotify-proxy + app-admin/sudo + app-admin/toolbox + app-arch/gzip + app-arch/bzip2 + app-arch/lbzip2 + app-arch/lz4 + app-arch/pigz + app-arch/xz-utils + app-arch/zstd + app-arch/tar + app-arch/torcx + app-arch/unzip + app-arch/zip + app-arch/ncompress + app-crypt/adcli + app-crypt/gnupg + app-crypt/go-tspi + app-crypt/tpmpolicy + app-editors/vim + app-emulation/actool + app-emulation/cri-tools + app-misc/ca-certificates + app-misc/jq + app-misc/pax-utils + app-shells/bash + coreos-base/afterburn + coreos-base/coreos-cloudinit + coreos-base/coreos-init + coreos-base/update-ssh-keys + coreos-base/update_engine + dev-db/etcdctl + dev-libs/libsodium + dev-libs/openssl + dev-util/bpftool + dev-util/bsdiff + dev-util/strace + dev-vcs/git + net-analyzer/nmap + net-analyzer/tcpdump + net-analyzer/traceroute + net-dns/bind-tools + net-firewall/conntrack-tools + net-firewall/ebtables + net-firewall/ipset + net-firewall/iptables + net-firewall/nftables + net-fs/nfs-utils + net-fs/cifs-utils + net-misc/bridge-utils + net-misc/curl + net-misc/iputils + net-misc/ntp + net-misc/rsync + net-misc/socat + net-misc/wget + net-misc/whois + net-vpn/wireguard-tools + sec-policy/selinux-virt + sec-policy/selinux-base + sec-policy/selinux-base-policy + sec-policy/selinux-unconfined + sys-apps/acl + sys-apps/attr + sys-apps/coreutils + sys-apps/checkpolicy + sys-apps/dbus + sys-apps/diffutils + sys-apps/ethtool + sys-apps/findutils + sys-apps/gawk + sys-apps/gptfdisk + sys-apps/grep + sys-apps/ignition + sys-apps/iproute2 + sys-apps/kexec-tools + sys-apps/keyutils + sys-apps/less + sys-apps/lshw + sys-apps/net-tools + sys-apps/nvme-cli + sys-apps/pciutils + sys-apps/policycoreutils + sys-apps/sed + sys-apps/seismograph + sys-apps/semodule-utils + sys-apps/shadow + sys-apps/usbutils + sys-apps/util-linux + sys-apps/which + sys-auth/realmd + sys-auth/sssd + sys-block/open-iscsi + sys-block/parted + sys-boot/efibootmgr + sys-cluster/ipvsadm + sys-devel/gettext + sys-fs/btrfs-progs + sys-fs/cryptsetup + sys-fs/dosfstools + sys-fs/e2fsprogs + sys-fs/lsscsi + sys-fs/lvm2 + sys-fs/mdadm + sys-fs/multipath-tools + sys-fs/quota + sys-fs/xfsprogs + sys-kernel/coreos-firmware + sys-kernel/coreos-kernel + sys-libs/glibc + sys-libs/nss-usrfiles + sys-libs/timezone-data + sys-power/acpid + sys-process/lsof + sys-process/procps + x11-drivers/nvidia-metadata +" + +# OEM specific bits that need to go in USR +RDEPEND+=" + amd64? ( + app-emulation/qemu-guest-agent + sys-auth/google-oslogin + ) +" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/metadata.xml new file mode 100644 index 0000000000..78c72fa819 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/metadata.xml @@ -0,0 +1,20 @@ + + + +chromium + + chromium-os-dev@chromium.org + Maintained by The Chromium OS Authors. + +The Chromium OS base package pulls in dependencies to build a Chromium OS system. + + Enables dependencies on X. + Enables bluetooth dependencies. + Enables firmware bootimage dependencies. + Enables coreboot. + Enables CrOS Embedded Controller. + Enables WiMax dependencies. + Enables bootchart. + Enables OpenGL ES. + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/emerge-gitclone-0.0.1-r590.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/emerge-gitclone-0.0.1-r590.ebuild new file mode 120000 index 0000000000..9e6a3d1fe6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/emerge-gitclone-0.0.1-r590.ebuild @@ -0,0 +1 @@ +emerge-gitclone-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/emerge-gitclone-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/emerge-gitclone-9999.ebuild new file mode 100644 index 0000000000..88b22bb742 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/emerge-gitclone-9999.ebuild @@ -0,0 +1,36 @@ +# Copyright (c) 2012 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/flatcar-dev-util" +CROS_WORKON_REPO="https://github.com" +CROS_WORKON_LOCALNAME="dev" +CROS_WORKON_LOCALDIR="src/platform" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm ~arm64 ~x86" +else + CROS_WORKON_COMMIT="401e84df7b12b0f385879583003a7cc0bd9bbc60" # flatcar-master + KEYWORDS="amd64 arm arm64 x86" +fi + +PYTHON_COMPAT=( python3_{6..10} ) + +inherit cros-workon python-single-r1 + +DESCRIPTION="emerge utilities for Flatcar developer images" +HOMEPAGE="https://github.com/flatcar/flatcar-dev-util/" + +LICENSE="GPL-2" +SLOT="0" +IUSE="" + +RDEPEND="sys-apps/portage" + +src_compile() { + echo "Nothing to compile" +} + +src_install() { + python_doscript emerge-gitclone +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/emerge-gitclone/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/bootstrap.patch b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/bootstrap.patch new file mode 100644 index 0000000000..084ca79b76 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/bootstrap.patch @@ -0,0 +1,99 @@ +--- orig/bootstrap.sh 2021-02-02 14:04:27.121358890 +0100 ++++ flatcar/bootstrap.sh 2021-02-02 14:07:15.175175277 +0100 +@@ -268,6 +268,9 @@ + exit 1 + fi + ++# Store the cluster name in a config file, to use it from other sources ++mkdir -p /etc/eks ++echo "CLUSTER_NAME=\"${CLUSTER_NAME}\"" > /etc/eks/cluster.conf + + TOKEN=$(get_token) + AWS_DEFAULT_REGION=$(get_meta_data 'latest/dynamic/instance-identity/document' | jq .region -r) +@@ -284,7 +287,8 @@ + PAUSE_CONTAINER="$PAUSE_CONTAINER_IMAGE:$PAUSE_CONTAINER_VERSION" + + ### kubelet kubeconfig +- ++shopt -s expand_aliases ++alias aws="docker run --rm --network host amazon/aws-cli" + CA_CERTIFICATE_DIRECTORY=/etc/kubernetes/pki + CA_CERTIFICATE_FILE_PATH=$CA_CERTIFICATE_DIRECTORY/ca.crt + mkdir -p $CA_CERTIFICATE_DIRECTORY +@@ -324,9 +328,9 @@ + + echo $B64_CLUSTER_CA | base64 -d > $CA_CERTIFICATE_FILE_PATH + +-sed -i s,CLUSTER_NAME,$CLUSTER_NAME,g /var/lib/kubelet/kubeconfig +-sed -i s,MASTER_ENDPOINT,$APISERVER_ENDPOINT,g /var/lib/kubelet/kubeconfig +-sed -i s,AWS_REGION,$AWS_DEFAULT_REGION,g /var/lib/kubelet/kubeconfig ++sed -i s,CLUSTER_NAME,$CLUSTER_NAME,g /usr/share/oem/eks/kubelet-kubeconfig ++sed -i s,MASTER_ENDPOINT,$APISERVER_ENDPOINT,g /usr/share/oem/eks/kubelet-kubeconfig ++sed -i s,AWS_REGION,$AWS_DEFAULT_REGION,g /usr/share/oem/eks/kubelet-kubeconfig + ### kubelet.service configuration + + if [[ -z "${DNS_CLUSTER_IP}" ]]; then +@@ -345,7 +349,7 @@ + DNS_CLUSTER_IP="${DNS_CLUSTER_IP}" + fi + +-KUBELET_CONFIG=/etc/kubernetes/kubelet/kubelet-config.json ++KUBELET_CONFIG=/usr/share/oem/eks/kubelet-config.json + echo "$(jq ".clusterDNS=[\"$DNS_CLUSTER_IP\"]" $KUBELET_CONFIG)" > $KUBELET_CONFIG + + INTERNAL_IP=$(get_meta_data 'latest/meta-data/local-ipv4') +@@ -357,7 +361,7 @@ + # with this formula when scheduling pods: Allocatable = Capacity - Reserved - Eviction Threshold. + + #calculate the max number of pods per instance type +-MAX_PODS_FILE="/etc/eks/eni-max-pods.txt" ++MAX_PODS_FILE="/usr/share/oem/eks/eni-max-pods.txt" + set +o pipefail + MAX_PODS=$(cat $MAX_PODS_FILE | awk "/^${INSTANCE_TYPE:-unset}/"' { print $2 }') + set -o pipefail +@@ -382,6 +386,8 @@ + fi + fi + ++cp /usr/share/oem/eks/kubelet.service /etc/systemd/system/ ++ + mkdir -p /etc/systemd/system/kubelet.service.d + + cat < /etc/systemd/system/kubelet.service.d/10-kubelet-args.conf +@@ -396,10 +402,16 @@ + EOF + fi + ++ + # Replace with custom docker config contents. ++mkdir -p /etc/docker + if [[ -n "$DOCKER_CONFIG_JSON" ]]; then + echo "$DOCKER_CONFIG_JSON" > /etc/docker/daemon.json + systemctl restart docker ++else ++ # Copy the docker config shipped in /usr/share/oem ++ cp /usr/share/oem/eks/docker-daemon.json /etc/docker/daemon.json ++ systemctl restart docker + fi + + if [[ "$ENABLE_DOCKER_BRIDGE" = "true" ]]; then +@@ -409,7 +421,19 @@ + systemctl restart docker + fi + ++# sysctl tweaking ++cat <" + echo "Bootstraps an instance into an EKS cluster" + echo "" + echo "-h,--help print this help" + echo "--use-max-pods Sets --max-pods for the kubelet when true. (default: true)" + echo "--b64-cluster-ca The base64 encoded cluster CA content. Only valid when used with --apiserver-endpoint. Bypasses calling \"aws eks describe-cluster\"" + echo "--apiserver-endpoint The EKS cluster API Server endpoint. Only valid when used with --b64-cluster-ca. Bypasses calling \"aws eks describe-cluster\"" + echo "--kubelet-extra-args Extra arguments to add to the kubelet. Useful for adding labels or taints." + echo "--enable-docker-bridge Restores the docker default bridge network. (default: false)" + echo "--aws-api-retry-attempts Number of retry attempts for AWS API call (DescribeCluster) (default: 3)" + echo "--docker-config-json The contents of the /etc/docker/daemon.json file. Useful if you want a custom config differing from the default one in the AMI" + echo "--dns-cluster-ip Overrides the IP address to use for DNS queries within the cluster. Defaults to 10.100.0.10 or 172.20.0.10 based on the IP address of the primary interface" + echo "--pause-container-account The AWS account (number) to pull the pause container from" + echo "--pause-container-version The tag of the pause container" +} + +POSITIONAL=() + +while [[ $# -gt 0 ]]; do + key="$1" + case $key in + -h|--help) + print_help + exit 1 + ;; + --use-max-pods) + USE_MAX_PODS="$2" + shift + shift + ;; + --b64-cluster-ca) + B64_CLUSTER_CA=$2 + shift + shift + ;; + --apiserver-endpoint) + APISERVER_ENDPOINT=$2 + shift + shift + ;; + --kubelet-extra-args) + KUBELET_EXTRA_ARGS=$2 + shift + shift + ;; + --enable-docker-bridge) + ENABLE_DOCKER_BRIDGE=$2 + shift + shift + ;; + --aws-api-retry-attempts) + API_RETRY_ATTEMPTS=$2 + shift + shift + ;; + --docker-config-json) + DOCKER_CONFIG_JSON=$2 + shift + shift + ;; + --pause-container-account) + PAUSE_CONTAINER_ACCOUNT=$2 + shift + shift + ;; + --pause-container-version) + PAUSE_CONTAINER_VERSION=$2 + shift + shift + ;; + --dns-cluster-ip) + DNS_CLUSTER_IP=$2 + shift + shift + ;; + *) # unknown option + POSITIONAL+=("$1") # save it in an array for later + shift # past argument + ;; + esac +done + +set +u +set -- "${POSITIONAL[@]}" # restore positional parameters +CLUSTER_NAME="$1" +set -u + +USE_MAX_PODS="${USE_MAX_PODS:-true}" +B64_CLUSTER_CA="${B64_CLUSTER_CA:-}" +APISERVER_ENDPOINT="${APISERVER_ENDPOINT:-}" +SERVICE_IPV4_CIDR="${SERVICE_IPV4_CIDR:-}" +DNS_CLUSTER_IP="${DNS_CLUSTER_IP:-}" +KUBELET_EXTRA_ARGS="${KUBELET_EXTRA_ARGS:-}" +ENABLE_DOCKER_BRIDGE="${ENABLE_DOCKER_BRIDGE:-false}" +API_RETRY_ATTEMPTS="${API_RETRY_ATTEMPTS:-3}" +DOCKER_CONFIG_JSON="${DOCKER_CONFIG_JSON:-}" +PAUSE_CONTAINER_VERSION="${PAUSE_CONTAINER_VERSION:-3.1-eksbuild.1}" + +function get_pause_container_account_for_region () { + local region="$1" + case "${region}" in + ap-east-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-800184023465}";; + me-south-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-558608220178}";; + cn-north-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-918309763551}";; + cn-northwest-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-961992271922}";; + us-gov-west-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-013241004608}";; + us-gov-east-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-151742754352}";; + af-south-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-877085696533}";; + eu-south-1) + echo "${PAUSE_CONTAINER_ACCOUNT:-590381155156}";; + *) + echo "${PAUSE_CONTAINER_ACCOUNT:-602401143452}";; + esac +} + +function _get_token() { + local token_result= + local http_result= + + token_result=$(curl -s -w "\n%{http_code}" -X PUT -H "X-aws-ec2-metadata-token-ttl-seconds: 600" "http://169.254.169.254/latest/api/token") + http_result=$(echo "$token_result" | tail -n 1) + if [[ "$http_result" != "200" ]] + then + echo -e "Failed to get token:\n$token_result" + return 1 + else + echo "$token_result" | head -n 1 + return 0 + fi +} + +function get_token() { + local token= + local retries=20 + local result=1 + + while [[ retries -gt 0 && $result -ne 0 ]] + do + retries=$[$retries-1] + token=$(_get_token) + result=$? + [[ $result != 0 ]] && sleep 5 + done + [[ $result == 0 ]] && echo "$token" + return $result +} + +function _get_meta_data() { + local path=$1 + local metadata_result= + + metadata_result=$(curl -s -w "\n%{http_code}" -H "X-aws-ec2-metadata-token: $TOKEN" http://169.254.169.254/$path) + http_result=$(echo "$metadata_result" | tail -n 1) + if [[ "$http_result" != "200" ]] + then + echo -e "Failed to get metadata:\n$metadata_result\nhttp://169.254.169.254/$path\n$TOKEN" + return 1 + else + local lines=$(echo "$metadata_result" | wc -l) + echo "$metadata_result" | head -n $(( lines - 1 )) + return 0 + fi +} + +function get_meta_data() { + local metadata= + local path=$1 + local retries=20 + local result=1 + + while [[ retries -gt 0 && $result -ne 0 ]] + do + retries=$[$retries-1] + metadata=$(_get_meta_data $path) + result=$? + [[ $result != 0 ]] && TOKEN=$(get_token) + done + [[ $result == 0 ]] && echo "$metadata" + return $result +} + +# Helper function which calculates the amount of the given resource (either CPU or memory) +# to reserve in a given resource range, specified by a start and end of the range and a percentage +# of the resource to reserve. Note that we return zero if the start of the resource range is +# greater than the total resource capacity on the node. Additionally, if the end range exceeds the total +# resource capacity of the node, we use the total resource capacity as the end of the range. +# Args: +# $1 total available resource on the worker node in input unit (either millicores for CPU or Mi for memory) +# $2 start of the resource range in input unit +# $3 end of the resource range in input unit +# $4 percentage of range to reserve in percent*100 (to allow for two decimal digits) +# Return: +# amount of resource to reserve in input unit +get_resource_to_reserve_in_range() { + local total_resource_on_instance=$1 + local start_range=$2 + local end_range=$3 + local percentage=$4 + resources_to_reserve="0" + if (( $total_resource_on_instance > $start_range )); then + resources_to_reserve=$(((($total_resource_on_instance < $end_range ? \ + $total_resource_on_instance : $end_range) - $start_range) * $percentage / 100 / 100)) + fi + echo $resources_to_reserve +} + +# Calculates the amount of memory to reserve for kubeReserved in mebibytes. KubeReserved is a function of pod +# density so we are calculating the amount of memory to reserve for Kubernetes systems daemons by +# considering the maximum number of pods this instance type supports. +# Args: +# $1 the max number of pods per instance type (MAX_PODS) based on values from /etc/eks/eni-max-pods.txt +# Return: +# memory to reserve in Mi for the kubelet +get_memory_mebibytes_to_reserve() { + local max_num_pods=$1 + memory_to_reserve=$((11 * $max_num_pods + 255)) + echo $memory_to_reserve +} + +# Calculates the amount of CPU to reserve for kubeReserved in millicores from the total number of vCPUs available on the instance. +# From the total core capacity of this worker node, we calculate the CPU resources to reserve by reserving a percentage +# of the available cores in each range up to the total number of cores available on the instance. +# We are using these CPU ranges from GKE (https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#node_allocatable): +# 6% of the first core +# 1% of the next core (up to 2 cores) +# 0.5% of the next 2 cores (up to 4 cores) +# 0.25% of any cores above 4 cores +# Return: +# CPU resources to reserve in millicores (m) +get_cpu_millicores_to_reserve() { + local total_cpu_on_instance=$(($(nproc) * 1000)) + local cpu_ranges=(0 1000 2000 4000 $total_cpu_on_instance) + local cpu_percentage_reserved_for_ranges=(600 100 50 25) + cpu_to_reserve="0" + for i in ${!cpu_percentage_reserved_for_ranges[@]}; do + local start_range=${cpu_ranges[$i]} + local end_range=${cpu_ranges[(($i+1))]} + local percentage_to_reserve_for_range=${cpu_percentage_reserved_for_ranges[$i]} + cpu_to_reserve=$(($cpu_to_reserve + \ + $(get_resource_to_reserve_in_range $total_cpu_on_instance $start_range $end_range $percentage_to_reserve_for_range))) + done + echo $cpu_to_reserve +} + +if [ -z "$CLUSTER_NAME" ]; then + echo "CLUSTER_NAME is not defined" + exit 1 +fi + + +TOKEN=$(get_token) +AWS_DEFAULT_REGION=$(get_meta_data 'latest/dynamic/instance-identity/document' | jq .region -r) +AWS_SERVICES_DOMAIN=$(get_meta_data '2018-09-24/meta-data/services/domain') + +MACHINE=$(uname -m) +if [[ "$MACHINE" != "x86_64" && "$MACHINE" != "aarch64" ]]; then + echo "Unknown machine architecture '$MACHINE'" >&2 + exit 1 +fi + +PAUSE_CONTAINER_ACCOUNT=$(get_pause_container_account_for_region "${AWS_DEFAULT_REGION}") +PAUSE_CONTAINER_IMAGE=${PAUSE_CONTAINER_IMAGE:-$PAUSE_CONTAINER_ACCOUNT.dkr.ecr.$AWS_DEFAULT_REGION.$AWS_SERVICES_DOMAIN/eks/pause} +PAUSE_CONTAINER="$PAUSE_CONTAINER_IMAGE:$PAUSE_CONTAINER_VERSION" + +### kubelet kubeconfig + +CA_CERTIFICATE_DIRECTORY=/etc/kubernetes/pki +CA_CERTIFICATE_FILE_PATH=$CA_CERTIFICATE_DIRECTORY/ca.crt +mkdir -p $CA_CERTIFICATE_DIRECTORY +if [[ -z "${B64_CLUSTER_CA}" ]] || [[ -z "${APISERVER_ENDPOINT}" ]]; then + DESCRIBE_CLUSTER_RESULT="/tmp/describe_cluster_result.txt" + + # Retry the DescribeCluster API for API_RETRY_ATTEMPTS + for attempt in `seq 0 $API_RETRY_ATTEMPTS`; do + rc=0 + if [[ $attempt -gt 0 ]]; then + echo "Attempt $attempt of $API_RETRY_ATTEMPTS" + fi + + aws eks wait cluster-active \ + --region=${AWS_DEFAULT_REGION} \ + --name=${CLUSTER_NAME} + + aws eks describe-cluster \ + --region=${AWS_DEFAULT_REGION} \ + --name=${CLUSTER_NAME} \ + --output=text \ + --query 'cluster.{certificateAuthorityData: certificateAuthority.data, endpoint: endpoint, kubernetesNetworkConfig: kubernetesNetworkConfig.serviceIpv4Cidr}' > $DESCRIBE_CLUSTER_RESULT || rc=$? + if [[ $rc -eq 0 ]]; then + break + fi + if [[ $attempt -eq $API_RETRY_ATTEMPTS ]]; then + exit $rc + fi + jitter=$((1 + RANDOM % 10)) + sleep_sec="$(( $(( 5 << $((1+$attempt)) )) + $jitter))" + sleep $sleep_sec + done + B64_CLUSTER_CA=$(cat $DESCRIBE_CLUSTER_RESULT | awk '{print $1}') + APISERVER_ENDPOINT=$(cat $DESCRIBE_CLUSTER_RESULT | awk '{print $2}') + SERVICE_IPV4_CIDR=$(cat $DESCRIBE_CLUSTER_RESULT | awk '{print $3}') +fi + +echo $B64_CLUSTER_CA | base64 -d > $CA_CERTIFICATE_FILE_PATH + +sed -i s,CLUSTER_NAME,$CLUSTER_NAME,g /var/lib/kubelet/kubeconfig +sed -i s,MASTER_ENDPOINT,$APISERVER_ENDPOINT,g /var/lib/kubelet/kubeconfig +sed -i s,AWS_REGION,$AWS_DEFAULT_REGION,g /var/lib/kubelet/kubeconfig +### kubelet.service configuration + +if [[ -z "${DNS_CLUSTER_IP}" ]]; then + if [[ ! -z "${SERVICE_IPV4_CIDR}" ]] && [[ "${SERVICE_IPV4_CIDR}" != "None" ]] ; then + #Sets the DNS Cluster IP address that would be chosen from the serviceIpv4Cidr. (x.y.z.10) + DNS_CLUSTER_IP=${SERVICE_IPV4_CIDR%.*}.10 + else + MAC=$(get_meta_data 'latest/meta-data/network/interfaces/macs/' | head -n 1 | sed 's/\/$//') + TEN_RANGE=$(get_meta_data "latest/meta-data/network/interfaces/macs/$MAC/vpc-ipv4-cidr-blocks" | grep -c '^10\..*' || true ) + DNS_CLUSTER_IP=10.100.0.10 + if [[ "$TEN_RANGE" != "0" ]]; then + DNS_CLUSTER_IP=172.20.0.10 + fi + fi +else + DNS_CLUSTER_IP="${DNS_CLUSTER_IP}" +fi + +KUBELET_CONFIG=/etc/kubernetes/kubelet/kubelet-config.json +echo "$(jq ".clusterDNS=[\"$DNS_CLUSTER_IP\"]" $KUBELET_CONFIG)" > $KUBELET_CONFIG + +INTERNAL_IP=$(get_meta_data 'latest/meta-data/local-ipv4') +INSTANCE_TYPE=$(get_meta_data 'latest/meta-data/instance-type') + +# Sets kubeReserved and evictionHard in /etc/kubernetes/kubelet/kubelet-config.json for worker nodes. The following two function +# calls calculate the CPU and memory resources to reserve for kubeReserved based on the instance type of the worker node. +# Note that allocatable memory and CPU resources on worker nodes is calculated by the Kubernetes scheduler +# with this formula when scheduling pods: Allocatable = Capacity - Reserved - Eviction Threshold. + +#calculate the max number of pods per instance type +MAX_PODS_FILE="/etc/eks/eni-max-pods.txt" +set +o pipefail +MAX_PODS=$(cat $MAX_PODS_FILE | awk "/^${INSTANCE_TYPE:-unset}/"' { print $2 }') +set -o pipefail +if [ -z "$MAX_PODS" ] || [ -z "$INSTANCE_TYPE" ]; then + echo "No entry for type '$INSTANCE_TYPE' in $MAX_PODS_FILE" + exit 1 +fi + +# calculates the amount of each resource to reserve +mebibytes_to_reserve=$(get_memory_mebibytes_to_reserve $MAX_PODS) +cpu_millicores_to_reserve=$(get_cpu_millicores_to_reserve) +# writes kubeReserved and evictionHard to the kubelet-config using the amount of CPU and memory to be reserved +echo "$(jq '. += {"evictionHard": {"memory.available": "100Mi", "nodefs.available": "10%", "nodefs.inodesFree": "5%"}}' $KUBELET_CONFIG)" > $KUBELET_CONFIG +echo "$(jq --arg mebibytes_to_reserve "${mebibytes_to_reserve}Mi" --arg cpu_millicores_to_reserve "${cpu_millicores_to_reserve}m" \ + '. += {kubeReserved: {"cpu": $cpu_millicores_to_reserve, "ephemeral-storage": "1Gi", "memory": $mebibytes_to_reserve}}' $KUBELET_CONFIG)" > $KUBELET_CONFIG + +if [[ "$USE_MAX_PODS" = "true" ]]; then + if [[ -n "$MAX_PODS" ]]; then + echo "$(jq ".maxPods=$MAX_PODS" $KUBELET_CONFIG)" > $KUBELET_CONFIG + else + echo "No entry for $INSTANCE_TYPE in $MAX_PODS_FILE. Not setting max pods for kubelet" + fi +fi + +mkdir -p /etc/systemd/system/kubelet.service.d + +cat < /etc/systemd/system/kubelet.service.d/10-kubelet-args.conf +[Service] +Environment='KUBELET_ARGS=--node-ip=$INTERNAL_IP --pod-infra-container-image=$PAUSE_CONTAINER' +EOF + +if [[ -n "$KUBELET_EXTRA_ARGS" ]]; then + cat < /etc/systemd/system/kubelet.service.d/30-kubelet-extra-args.conf +[Service] +Environment='KUBELET_EXTRA_ARGS=$KUBELET_EXTRA_ARGS' +EOF +fi + +# Replace with custom docker config contents. +if [[ -n "$DOCKER_CONFIG_JSON" ]]; then + echo "$DOCKER_CONFIG_JSON" > /etc/docker/daemon.json + systemctl restart docker +fi + +if [[ "$ENABLE_DOCKER_BRIDGE" = "true" ]]; then + # Enabling the docker bridge network. We have to disable live-restore as it + # prevents docker from recreating the default bridge network on restart + echo "$(jq '.bridge="docker0" | ."live-restore"=false' /etc/docker/daemon.json)" > /etc/docker/daemon.json + systemctl restart docker +fi + +systemctl daemon-reload +systemctl enable kubelet +systemctl start kubelet + +# gpu boost clock +if command -v nvidia-smi &>/dev/null ; then + echo "nvidia-smi found" + + sudo nvidia-smi -pm 1 # set persistence mode + sudo nvidia-smi --auto-boost-default=0 + + GPUNAME=$(nvidia-smi -L | head -n1) + echo $GPUNAME + + # set application clock to maximum + if [[ $GPUNAME == *"A100"* ]]; then + nvidia-smi -ac 1215,1410 + elif [[ $GPUNAME == *"V100"* ]]; then + nvidia-smi -ac 877,1530 + elif [[ $GPUNAME == *"K80"* ]]; then + nvidia-smi -ac 2505,875 + elif [[ $GPUNAME == *"T4"* ]]; then + nvidia-smi -ac 5001,1590 + elif [[ $GPUNAME == *"M60"* ]]; then + nvidia-smi -ac 2505,1177 + else + echo "unsupported gpu" + fi +else + echo "nvidia-smi not found" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/docker-daemon.json b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/docker-daemon.json new file mode 100644 index 0000000000..4d4b2a5e72 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/docker-daemon.json @@ -0,0 +1,20 @@ +{ + "bridge": "none", + "exec-opts": [ + "native.cgroupdriver=systemd" + ], + "log-driver": "json-file", + "log-opts": { + "max-size": "10m", + "max-file": "10" + }, + "live-restore": true, + "max-concurrent-downloads": 10, + "default-ulimits": { + "memlock": { + "Hard": -1, + "Name": "memlock", + "Soft": -1 + } + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/download-kubelet.sh b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/download-kubelet.sh new file mode 100755 index 0000000000..a5897dee69 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/download-kubelet.sh @@ -0,0 +1,68 @@ +#!/bin/bash +set -euo pipefail + +# Get the cluster name from /etc/eks/cluster.conf +. /etc/eks/cluster.conf +if [[ -z "${CLUSTER_NAME}" ]]; then + echo "No cluster name found. Aborting" + exit 1 +fi + +# Query the Kubernetes version of the cluster +mkdir -p /opt/eks +shopt -s expand_aliases +alias aws="docker run --rm --network host -v /opt/eks:/eks amazon/aws-cli" +CLUSTER_VERSION=$(aws eks describe-cluster --name "${CLUSTER_NAME}" --output text --query cluster.version) + +if [[ -z "${CLUSTER_VERSION}" ]]; then + echo "No cluster version found. Aborting" + exit 1 +fi + +# Select the right path depending on the Kubernetes version. +# https://github.com/awslabs/amazon-eks-ami/blob/master/Makefile +case $CLUSTER_VERSION in + 1.23) + S3_PATH="1.23.9/2022-07-27" + ;; + 1.22) + S3_PATH="1.22.12/2022-07-27" + ;; + 1.21) + S3_PATH="1.21.2/2021-07-05" + ;; + 1.20) + S3_PATH="1.20.4/2021-04-12" + ;; + 1.19) + S3_PATH="1.19.6/2021-01-05" + ;; + 1.18) + S3_PATH="1.18.9/2020-11-02" + ;; + 1.17) + S3_PATH="1.17.12/2020-11-02" + ;; + 1.16) + S3_PATH="1.16.15/2020-11-02" + ;; + 1.15) + S3_PATH="1.15.12/2020-11-02" + ;; + *) + echo "Unsupported Kubernetes version" + exit 1 + ;; +esac + +# Sync the contents of the corresponding EKS bucket +aws s3 sync s3://amazon-eks/${S3_PATH}/bin/linux/amd64/ /eks/ + +# Install AWS CNI +mkdir -p /opt/cni/bin /etc/cni/net.d +tar -C /opt/cni/bin -zxvf /opt/eks/cni-amd64-v0.6.0.tgz +tar -C /opt/cni/bin -zxvf /opt/eks/cni-plugins-linux-amd64-v0.8.6.tgz + +# Make binaries executable +chmod +x /opt/eks/kubelet +chmod +x /opt/eks/aws-iam-authenticator diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/eni-max-pods.txt b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/eni-max-pods.txt new file mode 100644 index 0000000000..99e61b9ecb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/eni-max-pods.txt @@ -0,0 +1,411 @@ +# Copyright Amazon.com Inc. or its affiliates. All Rights Reserved. +# +# Licensed under the Apache License, Version 2.0 (the "License"). You may +# not use this file except in compliance with the License. A copy of the +# License is located at +# +# http://aws.amazon.com/apache2.0/ +# +# or in the "license" file accompanying this file. This file is distributed +# on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either +# express or implied. See the License for the specific language governing +# permissions and limitations under the License. +# +# This file was generated at 2021-01-13T12:54:18-08:00 +# +# Mapping is calculated from AWS EC2 API using the following formula: +# * First IP on each ENI is not used for pods +# * +2 for the pods that use host-networking (AWS CNI and kube-proxy) +# +# # of ENI * (# of IPv4 per ENI - 1) + 2 +# +# https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html#AvailableIpPerENI +# +a1.2xlarge 58 +a1.4xlarge 234 +a1.large 29 +a1.medium 8 +a1.metal 234 +a1.xlarge 58 +c1.medium 12 +c1.xlarge 58 +c3.2xlarge 58 +c3.4xlarge 234 +c3.8xlarge 234 +c3.large 29 +c3.xlarge 58 +c4.2xlarge 58 +c4.4xlarge 234 +c4.8xlarge 234 +c4.large 29 +c4.xlarge 58 +c5.12xlarge 234 +c5.18xlarge 737 +c5.24xlarge 737 +c5.2xlarge 58 +c5.4xlarge 234 +c5.9xlarge 234 +c5.large 29 +c5.metal 737 +c5.xlarge 58 +c5a.12xlarge 234 +c5a.16xlarge 737 +c5a.24xlarge 737 +c5a.2xlarge 58 +c5a.4xlarge 234 +c5a.8xlarge 234 +c5a.large 29 +c5a.metal 737 +c5a.xlarge 58 +c5ad.12xlarge 234 +c5ad.16xlarge 737 +c5ad.24xlarge 737 +c5ad.2xlarge 58 +c5ad.4xlarge 234 +c5ad.8xlarge 234 +c5ad.large 29 +c5ad.metal 737 +c5ad.xlarge 58 +c5d.12xlarge 234 +c5d.18xlarge 737 +c5d.24xlarge 737 +c5d.2xlarge 58 +c5d.4xlarge 234 +c5d.9xlarge 234 +c5d.large 29 +c5d.metal 737 +c5d.xlarge 58 +c5n.18xlarge 737 +c5n.2xlarge 58 +c5n.4xlarge 234 +c5n.9xlarge 234 +c5n.large 29 +c5n.metal 737 +c5n.xlarge 58 +c6g.12xlarge 234 +c6g.16xlarge 737 +c6g.2xlarge 58 +c6g.4xlarge 234 +c6g.8xlarge 234 +c6g.large 29 +c6g.medium 8 +c6g.metal 737 +c6g.xlarge 58 +c6gd.12xlarge 234 +c6gd.16xlarge 737 +c6gd.2xlarge 58 +c6gd.4xlarge 234 +c6gd.8xlarge 234 +c6gd.large 29 +c6gd.medium 8 +c6gd.metal 737 +c6gd.xlarge 58 +c6gn.12xlarge 234 +c6gn.16xlarge 737 +c6gn.2xlarge 58 +c6gn.4xlarge 234 +c6gn.8xlarge 234 +c6gn.large 29 +c6gn.medium 8 +c6gn.xlarge 58 +cc2.8xlarge 234 +cr1.8xlarge 234 +d2.2xlarge 58 +d2.4xlarge 234 +d2.8xlarge 234 +d2.xlarge 58 +d3.2xlarge 18 +d3.4xlarge 38 +d3.8xlarge 59 +d3.xlarge 10 +d3en.12xlarge 89 +d3en.2xlarge 18 +d3en.4xlarge 38 +d3en.6xlarge 58 +d3en.8xlarge 78 +d3en.xlarge 10 +f1.16xlarge 394 +f1.2xlarge 58 +f1.4xlarge 234 +g2.2xlarge 58 +g2.8xlarge 234 +g3.16xlarge 737 +g3.4xlarge 234 +g3.8xlarge 234 +g3s.xlarge 58 +g4ad.16xlarge 234 +g4ad.4xlarge 29 +g4ad.8xlarge 58 +g4dn.12xlarge 234 +g4dn.16xlarge 58 +g4dn.2xlarge 29 +g4dn.4xlarge 29 +g4dn.8xlarge 58 +g4dn.metal 737 +g4dn.xlarge 29 +h1.16xlarge 737 +h1.2xlarge 58 +h1.4xlarge 234 +h1.8xlarge 234 +hs1.8xlarge 234 +i2.2xlarge 58 +i2.4xlarge 234 +i2.8xlarge 234 +i2.xlarge 58 +i3.16xlarge 737 +i3.2xlarge 58 +i3.4xlarge 234 +i3.8xlarge 234 +i3.large 29 +i3.metal 737 +i3.xlarge 58 +i3en.12xlarge 234 +i3en.24xlarge 737 +i3en.2xlarge 58 +i3en.3xlarge 58 +i3en.6xlarge 234 +i3en.large 29 +i3en.metal 737 +i3en.xlarge 58 +inf1.24xlarge 321 +inf1.2xlarge 38 +inf1.6xlarge 234 +inf1.xlarge 38 +m1.large 29 +m1.medium 12 +m1.small 8 +m1.xlarge 58 +m2.2xlarge 118 +m2.4xlarge 234 +m2.xlarge 58 +m3.2xlarge 118 +m3.large 29 +m3.medium 12 +m3.xlarge 58 +m4.10xlarge 234 +m4.16xlarge 234 +m4.2xlarge 58 +m4.4xlarge 234 +m4.large 20 +m4.xlarge 58 +m5.12xlarge 234 +m5.16xlarge 737 +m5.24xlarge 737 +m5.2xlarge 58 +m5.4xlarge 234 +m5.8xlarge 234 +m5.large 29 +m5.metal 737 +m5.xlarge 58 +m5a.12xlarge 234 +m5a.16xlarge 737 +m5a.24xlarge 737 +m5a.2xlarge 58 +m5a.4xlarge 234 +m5a.8xlarge 234 +m5a.large 29 +m5a.xlarge 58 +m5ad.12xlarge 234 +m5ad.16xlarge 737 +m5ad.24xlarge 737 +m5ad.2xlarge 58 +m5ad.4xlarge 234 +m5ad.8xlarge 234 +m5ad.large 29 +m5ad.xlarge 58 +m5d.12xlarge 234 +m5d.16xlarge 737 +m5d.24xlarge 737 +m5d.2xlarge 58 +m5d.4xlarge 234 +m5d.8xlarge 234 +m5d.large 29 +m5d.metal 737 +m5d.xlarge 58 +m5dn.12xlarge 234 +m5dn.16xlarge 737 +m5dn.24xlarge 737 +m5dn.2xlarge 58 +m5dn.4xlarge 234 +m5dn.8xlarge 234 +m5dn.large 29 +m5dn.xlarge 58 +m5n.12xlarge 234 +m5n.16xlarge 737 +m5n.24xlarge 737 +m5n.2xlarge 58 +m5n.4xlarge 234 +m5n.8xlarge 234 +m5n.large 29 +m5n.xlarge 58 +m5zn.12xlarge 737 +m5zn.2xlarge 58 +m5zn.3xlarge 234 +m5zn.6xlarge 234 +m5zn.large 29 +m5zn.metal 737 +m5zn.xlarge 58 +m6g.12xlarge 234 +m6g.16xlarge 737 +m6g.2xlarge 58 +m6g.4xlarge 234 +m6g.8xlarge 234 +m6g.large 29 +m6g.medium 8 +m6g.metal 737 +m6g.xlarge 58 +m6gd.12xlarge 234 +m6gd.16xlarge 737 +m6gd.2xlarge 58 +m6gd.4xlarge 234 +m6gd.8xlarge 234 +m6gd.large 29 +m6gd.medium 8 +m6gd.metal 737 +m6gd.xlarge 58 +mac1.metal 234 +p2.16xlarge 234 +p2.8xlarge 234 +p2.xlarge 58 +p3.16xlarge 234 +p3.2xlarge 58 +p3.8xlarge 234 +p3dn.24xlarge 737 +p4d.24xlarge 737 +r3.2xlarge 58 +r3.4xlarge 234 +r3.8xlarge 234 +r3.large 29 +r3.xlarge 58 +r4.16xlarge 737 +r4.2xlarge 58 +r4.4xlarge 234 +r4.8xlarge 234 +r4.large 29 +r4.xlarge 58 +r5.12xlarge 234 +r5.16xlarge 737 +r5.24xlarge 737 +r5.2xlarge 58 +r5.4xlarge 234 +r5.8xlarge 234 +r5.large 29 +r5.metal 737 +r5.xlarge 58 +r5a.12xlarge 234 +r5a.16xlarge 737 +r5a.24xlarge 737 +r5a.2xlarge 58 +r5a.4xlarge 234 +r5a.8xlarge 234 +r5a.large 29 +r5a.xlarge 58 +r5ad.12xlarge 234 +r5ad.16xlarge 737 +r5ad.24xlarge 737 +r5ad.2xlarge 58 +r5ad.4xlarge 234 +r5ad.8xlarge 234 +r5ad.large 29 +r5ad.xlarge 58 +r5b.12xlarge 234 +r5b.16xlarge 737 +r5b.24xlarge 737 +r5b.2xlarge 58 +r5b.4xlarge 234 +r5b.8xlarge 234 +r5b.large 29 +r5b.metal 737 +r5b.xlarge 58 +r5d.12xlarge 234 +r5d.16xlarge 737 +r5d.24xlarge 737 +r5d.2xlarge 58 +r5d.4xlarge 234 +r5d.8xlarge 234 +r5d.large 29 +r5d.metal 737 +r5d.xlarge 58 +r5dn.12xlarge 234 +r5dn.16xlarge 737 +r5dn.24xlarge 737 +r5dn.2xlarge 58 +r5dn.4xlarge 234 +r5dn.8xlarge 234 +r5dn.large 29 +r5dn.xlarge 58 +r5n.12xlarge 234 +r5n.16xlarge 737 +r5n.24xlarge 737 +r5n.2xlarge 58 +r5n.4xlarge 234 +r5n.8xlarge 234 +r5n.large 29 +r5n.xlarge 58 +r6g.12xlarge 234 +r6g.16xlarge 737 +r6g.2xlarge 58 +r6g.4xlarge 234 +r6g.8xlarge 234 +r6g.large 29 +r6g.medium 8 +r6g.metal 737 +r6g.xlarge 58 +r6gd.12xlarge 234 +r6gd.16xlarge 737 +r6gd.2xlarge 58 +r6gd.4xlarge 234 +r6gd.8xlarge 234 +r6gd.large 29 +r6gd.medium 8 +r6gd.metal 737 +r6gd.xlarge 58 +t1.micro 4 +t2.2xlarge 44 +t2.large 35 +t2.medium 17 +t2.micro 4 +t2.nano 4 +t2.small 11 +t2.xlarge 44 +t3.2xlarge 58 +t3.large 35 +t3.medium 17 +t3.micro 4 +t3.nano 4 +t3.small 11 +t3.xlarge 58 +t3a.2xlarge 58 +t3a.large 35 +t3a.medium 17 +t3a.micro 4 +t3a.nano 4 +t3a.small 8 +t3a.xlarge 58 +t4g.2xlarge 58 +t4g.large 35 +t4g.medium 17 +t4g.micro 4 +t4g.nano 4 +t4g.small 11 +t4g.xlarge 58 +u-12tb1.metal 147 +u-18tb1.metal 737 +u-24tb1.metal 737 +u-6tb1.metal 147 +u-9tb1.metal 147 +x1.16xlarge 234 +x1.32xlarge 234 +x1e.16xlarge 234 +x1e.2xlarge 58 +x1e.32xlarge 234 +x1e.4xlarge 58 +x1e.8xlarge 58 +x1e.xlarge 29 +z1d.12xlarge 737 +z1d.2xlarge 58 +z1d.3xlarge 234 +z1d.6xlarge 234 +z1d.large 29 +z1d.metal 737 +z1d.xlarge 58 diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet-config.json b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet-config.json new file mode 100644 index 0000000000..607de83feb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet-config.json @@ -0,0 +1,36 @@ +{ + "kind": "KubeletConfiguration", + "apiVersion": "kubelet.config.k8s.io/v1beta1", + "address": "0.0.0.0", + "authentication": { + "anonymous": { + "enabled": false + }, + "webhook": { + "cacheTTL": "2m0s", + "enabled": true + }, + "x509": { + "clientCAFile": "/etc/kubernetes/pki/ca.crt" + } + }, + "authorization": { + "mode": "Webhook", + "webhook": { + "cacheAuthorizedTTL": "5m0s", + "cacheUnauthorizedTTL": "30s" + } + }, + "clusterDomain": "cluster.local", + "hairpinMode": "hairpin-veth", + "readOnlyPort": 0, + "cgroupDriver": "systemd", + "cgroupRoot": "/", + "featureGates": { + "RotateKubeletServerCertificate": true + }, + "protectKernelDefaults": true, + "serializeImagePulls": false, + "serverTLSBootstrap": true, + "tlsCipherSuites": ["TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_GCM_SHA256"] +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet-kubeconfig b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet-kubeconfig new file mode 100644 index 0000000000..27ff3bd652 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet-kubeconfig @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: Config +clusters: +- cluster: + certificate-authority: /etc/kubernetes/pki/ca.crt + server: MASTER_ENDPOINT + name: kubernetes +contexts: +- context: + cluster: kubernetes + user: kubelet + name: kubelet +current-context: kubelet +users: +- name: kubelet + user: + exec: + apiVersion: client.authentication.k8s.io/v1alpha1 + command: /opt/eks/aws-iam-authenticator + args: + - "token" + - "-i" + - "CLUSTER_NAME" + - --region + - "AWS_REGION" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet.service new file mode 100644 index 0000000000..73a3884950 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/files/kubelet.service @@ -0,0 +1,29 @@ +[Unit] +Description=EKS Kubelet +Documentation=https://github.com/kubernetes/kubernetes +Wants=docker.service coreos-metadata.service +Requires=docker.service coreos-metadata.service +After=docker.service iptables-restore.service + +[Service] +EnvironmentFile=/run/metadata/flatcar +ExecStartPre=/usr/share/oem/eks/download-kubelet.sh +ExecStartPre=/sbin/iptables -P FORWARD ACCEPT -w 5 +ExecStart=/opt/eks/kubelet \ + --cloud-provider aws \ + --config /usr/share/oem/eks/kubelet-config.json \ + --kubeconfig /usr/share/oem/eks/kubelet-kubeconfig \ + --container-runtime docker \ + --network-plugin cni \ + --cni-bin-dir=/opt/cni/bin \ + --cni-conf-dir=/etc/cni/net.d \ + --hostname-override ${COREOS_EC2_HOSTNAME} \ + $KUBELET_ARGS \ + $KUBELET_EXTRA_ARGS + +Restart=always +RestartSec=5 +KillMode=process + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/flatcar-eks-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/flatcar-eks-0.0.1.ebuild new file mode 100644 index 0000000000..69a63b5648 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/flatcar-eks-0.0.1.ebuild @@ -0,0 +1,57 @@ +# Copyright (c) 2021 Kinvolk GmbH +# Distributed under the terms of the Apache License 2.0 + +# This package is heavily based on the files distributed in +# https://github.com/awslabs/amazon-eks-ami, the files have been adapted to fit +# Flatcar Container Linux instead of Amazon Linux. + +EAPI=6 + +inherit eutils + +DESCRIPTION="Configuration for EKS worker nodes" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + # The bootstrap.sh file has been downloaded from: + # https://raw.githubusercontent.com/awslabs/amazon-eks-ami/master/files/bootstrap.sh + # We keep our patches separate to facilitate sychronizing changes + cp "${FILESDIR}/bootstrap.sh" "${WORKDIR}/" + eapply -p1 "${FILESDIR}/bootstrap.patch" + eapply_user +} + +src_install() { + insinto /usr/share/oem/eks + doins "${WORKDIR}/bootstrap.sh" + + # These files are based on the ones found on the amazon-eks-ami repository, + # but adapted to fit Flatcar needs. Since they are a lot simpler, we don't + # use the patching technique, but rather just edit them as needed. + doins "${FILESDIR}/kubelet-kubeconfig" + doins "${FILESDIR}/kubelet.service" + + # These files are taken verbatim from the amazon-eks-ami repository: + # https://raw.githubusercontent.com/awslabs/amazon-eks-ami/master/files/kubelet-config.json + # https://raw.githubusercontent.com/awslabs/amazon-eks-ami/master/files/docker-daemon.json + # https://raw.githubusercontent.com/awslabs/amazon-eks-ami/master/files/eni-max-pods.txt + doins "${FILESDIR}/kubelet-config.json" + doins "${FILESDIR}/docker-daemon.json" + doins "${FILESDIR}/eni-max-pods.txt" + + # This downloading script has been created specially for Flatcar. It gets + # the current EKS Cluster Kubernetes version and downloads all the + # necessary files to run the kubelet on the node. + doins "${FILESDIR}/download-kubelet.sh" + + chmod +x "${D}/usr/share/oem/eks/bootstrap.sh" "${D}/usr/share/oem/eks/download-kubelet.sh" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/flatcar-eks/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1-r207.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1-r207.ebuild new file mode 120000 index 0000000000..fdabb0fbff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1-r207.ebuild @@ -0,0 +1 @@ +hard-host-depends-0.0.1.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1.ebuild new file mode 100644 index 0000000000..95e47322a0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/hard-host-depends-0.0.1.ebuild @@ -0,0 +1,127 @@ +# Copyright (c) 2009 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="List of packages that are needed on the buildhost (meta package)" +HOMEPAGE="http://src.chromium.org" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64 x86" +IUSE="" + +# Needed to run setup crossdev, run build scripts, and make a bootable image. +RDEPEND="${RDEPEND} + app-arch/lzop + app-arch/pigz + app-admin/sudo + sys-apps/less + dev-embedded/u-boot-tools + !arm64? ( sys-boot/syslinux ) + sys-devel/crossdev + sys-devel/sysroot-wrappers + sys-fs/dosfstools + " + +# Host dependencies for building cross-compiled packages. +# TODO: chromeos-base/chromeos-installer +RDEPEND="${RDEPEND} + >=app-arch/pbzip2-1.1.1-r1 + app-arch/rpm2targz + app-arch/sharutils + app-arch/unzip + app-emulation/qemu + app-text/asciidoc + app-text/xmlto + dev-lang/go-bootstrap + dev-lang/go:1.12 + dev-lang/go:1.18 + dev-lang/go:1.19 + dev-lang/nasm + =dev-lang/python-3* + dev-lang/swig + dev-lang/tcl + dev-lang/yasm + dev-libs/dbus-glib + >=dev-libs/glib-2.26.1 + dev-libs/libgcrypt + dev-libs/libxslt + dev-libs/libyaml + dev-libs/nspr + dev-libs/protobuf + dev-python/flit_core + dev-python/gpep517 + dev-python/setuptools + dev-python/wheel + dev-util/gdbus-codegen + dev-util/gperf + >=dev-util/gtk-doc-am-1.13 + dev-util/patchutils + >=dev-vcs/git-1.7.2 + net-libs/libtirpc + amd64? ( net-misc/google-cloud-sdk ) + sys-apps/gptfdisk + sys-apps/systemd + sys-apps/usbutils + sys-devel/bc + sys-libs/nss-usrfiles + virtual/udev + " + +# Host dependencies that create usernames/groups we need to pull over to target. +RDEPEND="${RDEPEND} + sys-apps/dbus + " + +# Host dependencies that are needed by mod_image_for_test. +RDEPEND="${RDEPEND} + sys-process/lsof + " + +# Useful utilities for developers. +RDEPEND="${RDEPEND} + app-arch/zip + app-containers/syft + app-doc/eclass-manpages + app-portage/gentoolkit + app-portage/portage-utils + app-editors/vim + dev-util/perf + sys-apps/pv + app-shells/bash-completion + " + +# Host dependencies that are needed to create and sign images +# TODO: sys-apps/mosys +RDEPEND="${RDEPEND} + sys-fs/squashfs-tools + " + +# Host dependencies that are needed for delta_generator. +RDEPEND="${RDEPEND} + coreos-base/update_engine + " + +# Host dependencies for python +RDEPEND="${RDEPEND} + dev-python/docutils + " + +# Host dependencies to scp binaries from the binary component server +# TODO: chromeos-base/ssh-known-hosts +# chromeos-base/ssh-root-dot-dir +RDEPEND="${RDEPEND} + net-misc/openssh + net-misc/wget + " + +# Host dependencies for building ISOs +RDEPEND="${RDEPEND} + app-cdr/cdrtools + " + +# Uninstall these packages. +RDEPEND="${RDEPEND} + !coreos-base/google-breakpad + " diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/hard-host-depends/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/Manifest b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/Manifest new file mode 100644 index 0000000000..b1077281b9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/Manifest @@ -0,0 +1 @@ +DIST nova-agent-container-0.0.1.tar.gz 6634988 SHA256 ccaea8ea597111d5b89649e9fb03f6a9fdf8530e69c18c8af6e059d7ac20a029 SHA512 71468307ed8d87fafcaf44d1cb48b5499a42e9902a61d97d6ea191fed3e0e81cc8c3beb61839449f5ec87f54717801d2aa56df848bfa2b6602419360e3196005 WHIRLPOOL 0989323868fcf751c8aa4381130c0607cb19f8271c531018ee7bc12676b89e0f908f3999a7da6462c4654673eed822f427ed24d93da4e46d3ea0ddf7a8cc6eed diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/nova-agent-container-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/nova-agent-container-0.0.1.ebuild new file mode 100644 index 0000000000..5c38688da0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-container/nova-agent-container-0.0.1.ebuild @@ -0,0 +1,18 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="nova agent for rackspace images" +HOMEPAGE="https://github.com/coreos/nova-agent-container" +SRC_URI="${HOMEPAGE}/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" +IUSE="" + +src_install() { + dodir /usr/share/oem/nova-agent + rsync -aq "${S}/" "${D}/usr/share/oem/nova-agent/" || die +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/nova-agent-watcher-0.0.7-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/nova-agent-watcher-0.0.7-r1.ebuild new file mode 120000 index 0000000000..9723e177c8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/nova-agent-watcher-0.0.7-r1.ebuild @@ -0,0 +1 @@ +nova-agent-watcher-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/nova-agent-watcher-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/nova-agent-watcher-9999.ebuild new file mode 100644 index 0000000000..7a8f5bc73f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/nova-agent-watcher/nova-agent-watcher-9999.ebuild @@ -0,0 +1,31 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="coreos/nova-agent-watcher" +CROS_WORKON_LOCALNAME="nova-agent-watcher" +CROS_WORKON_REPO="https://github.com" +COREOS_GO_PACKAGE="github.com/coreos/nova-agent-watcher" +COREOS_GO_GO111MODULE="off" +inherit cros-workon systemd coreos-go + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="2262401fe363cfdcc4c6f02144622466d506de43" + KEYWORDS="amd64 arm64" +fi + +DESCRIPTION="nova-agent-watcher" +HOMEPAGE="https://github.com/coreos/nova-agent-watcher" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="" + +src_install() { + into "/usr/share/oem" + dobin ${S}/scripts/gentoo-to-networkd + dobin ${GOBIN}/nova-agent-watcher +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/base/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/base/README new file mode 100644 index 0000000000..d128309fef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/base/README @@ -0,0 +1,4 @@ +These Ignition configs are part of the OEM configuration. Do not modify +them. If you want to write an Ignition config directly to disk, put it in +../config.ign and it will be applied at first boot instead of a config +in userdata. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/base/base.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/base/base.ign new file mode 100644 index 0000000000..5c359a9410 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/base/base.ign @@ -0,0 +1,37 @@ +{ + "ignition": { + "version": "2.1.0" + }, + "storage": { + "files": [ + { + "filesystem": "root", + "path": "/etc/systemd/system/waagent.service", + "contents": { + "source": "oem:///units/waagent.service" + }, + "mode": 292 + }, + { + "filesystem": "root", + "path": "/etc/systemd/system/nvidia.service", + "contents": { + "source": "oem:///units/nvidia.service" + }, + "mode": 292 + } + ] + }, + "systemd": { + "units": [ + { + "name": "waagent.service", + "enabled": true + }, + { + "name": "nvidia.service", + "enabled": true + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/grub.cfg new file mode 100644 index 0000000000..15e7e50555 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/grub.cfg @@ -0,0 +1,16 @@ +# Flatcar GRUB settings + +set oem_id="azure" + +set linux_append="flatcar.autologin" + +# Azure only has a serial console. +serial --unit=0 --speed=115200 --word=8 --parity=no +terminal_input serial +terminal_output serial + +if [ "$grub_cpu" = arm64 ]; then + set linux_console="console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000" +else + set linux_console="console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/oem-release new file mode 100644 index 0000000000..fa11b4c3e0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/oem-release @@ -0,0 +1,5 @@ +ID=azure +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="Microsoft Azure" +HOME_URL="https://azure.microsoft.com/" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/units/waagent.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/units/waagent.service new file mode 100644 index 0000000000..cf34281af7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/files/units/waagent.service @@ -0,0 +1,15 @@ +[Unit] +Description=Microsoft Azure Agent +Wants=network-online.target sshd-keygen.service +After=network-online.target sshd-keygen.service + +[Service] +Type=simple +Restart=always +RestartSec=5s +Environment=PATH=/usr/share/oem/python/bin:/usr/share/oem/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin +Environment=PYTHONUNBUFFERED=x +ExecStart=/usr/share/oem/bin/waagent -daemon + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/oem-azure-2.6.0.2-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/oem-azure-2.6.0.2-r1.ebuild new file mode 100644 index 0000000000..575bba6467 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-azure/oem-azure-2.6.0.2-r1.ebuild @@ -0,0 +1,36 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for Azure" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +RDEPEND=" + ~app-emulation/wa-linux-agent-${PV} + x11-drivers/nvidia-drivers +" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" + doins -r "${FILESDIR}/base" + doins -r "${FILESDIR}/units" + dosym "/usr/bin/true" "/usr/share/oem/bin/eject" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/files/cloud-config.yml new file mode 100644 index 0000000000..b78f16b7f0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/files/cloud-config.yml @@ -0,0 +1,21 @@ +#cloud-config + +coreos: + units: + - name: oem-cloudinit.service + command: restart + runtime: yes + content: | + [Unit] + Description=Cloudinit from CloudSigma metadata + + [Service] + Type=oneshot + ExecStart=/usr/bin/coreos-cloudinit --oem=cloudsigma + + oem: + id: cloudsigma + name: CloudSigma + version-id: @@OEM_VERSION_ID@@ + home-url: https://www.cloudsigma.com/ + bug-report-url: https://issues.flatcar.org diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/files/grub.cfg new file mode 100644 index 0000000000..5c95fb979f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="cloudsigma" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/oem-cloudsigma-0.0.3-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/oem-cloudsigma-0.0.3-r2.ebuild new file mode 100644 index 0000000000..a847e20728 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudsigma/oem-cloudsigma-0.0.3-r2.ebuild @@ -0,0 +1,27 @@ +# Copyright (c) 2015 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for CloudSigma images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloud-config.yml new file mode 100644 index 0000000000..ece76e7899 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloud-config.yml @@ -0,0 +1,34 @@ +#cloud-config + +coreos: + units: + - name: cloudstack-ssh-key.service + command: restart + runtime: yes + content: | + [Unit] + Description=Sets SSH key from metadata + + [Service] + Type=oneshot + StandardOutput=journal+console + ExecStart=/usr/share/oem/bin/cloudstack-ssh-key + - name: cloudstack-cloudinit.service + command: restart + runtime: yes + content: | + [Unit] + Description=Cloudinit from CloudStack-style metadata + Requires=flatcar-setup-environment.service + After=flatcar-setup-environment.service + + [Service] + Type=oneshot + EnvironmentFile=/etc/environment + ExecStart=/usr/share/oem/bin/cloudstack-coreos-cloudinit + oem: + id: cloudstack + name: CloudStack + version-id: @@OEM_VERSION_ID@@ + home-url: http://cloudstack.apache.org/ + bug-report-url: https://github.com/coreos/coreos-overlay diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-coreos-cloudinit b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-coreos-cloudinit new file mode 100644 index 0000000000..67f178c01a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-coreos-cloudinit @@ -0,0 +1,9 @@ +#!/bin/bash + +. /usr/share/oem/bin/cloudstack-dhcp + +DHCP_SERVER=$(get_dhcp_ip) +USERDATA_URL="http://${DHCP_SERVER}/latest/user-data" + +block-until-url "${USERDATA_URL}" +coreos-cloudinit --from-url="${USERDATA_URL}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-dhcp b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-dhcp new file mode 100644 index 0000000000..72615f76e4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-dhcp @@ -0,0 +1,21 @@ +#!/bin/bash + +get_dhcp_ip() { + local leases_dir="/run/systemd/netif/leases" + local found=0 + while true; do + for leasefile in $(find "${leases_dir}" -type f -size +1c); do + dhcp_server_ip=$(cat $leasefile | awk -F= '/SERVER_ADDRESS/ { print $2 }') + if [[ -n "${dhcp_server_ip}" ]]; then + metadata_url="http://${dhcp_server_ip}/latest/meta-data/" + if curl --fail -s "${metadata_url}" >/dev/null; then + echo $dhcp_server_ip + found=1 + break + fi + fi + done + [[ $found -eq 0 ]] || break + sleep .5 + done +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-ssh-key b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-ssh-key new file mode 100644 index 0000000000..5dfdaebb0e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/cloudstack-ssh-key @@ -0,0 +1,9 @@ +#!/bin/bash + +. /usr/share/oem/bin/cloudstack-dhcp + +DHCP_SERVER=$(get_dhcp_ip) +KEY_URL="http://${DHCP_SERVER}/latest/meta-data/public-keys" + +block-until-url "${KEY_URL}" +curl --fail -s "${KEY_URL}" | update-ssh-keys -a cloudstack diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/flatcar-setup-environment b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/flatcar-setup-environment new file mode 100644 index 0000000000..70540418ca --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/flatcar-setup-environment @@ -0,0 +1,32 @@ +#!/bin/bash + +ENV=$1 + +if [[ -z "$ENV" ]]; then + echo "usage: $0 /etc/environment" >&2 + exit 1 +fi + +# Make sure that the file is writable +touch $ENV +if [[ $? -ne 0 ]]; then + echo "$0: unable to modify ${ENV}" >&2 + exit 1 +fi + +sed -i -e '/^COREOS_PUBLIC_IPV4=/d' \ + -e '/^COREOS_PRIVATE_IPV4=/d' \ + "${ENV}" + +. /usr/share/oem/bin/cloudstack-dhcp + +DHCP_SERVER=$(get_dhcp_ip) +METADATA_URL="http://${DHCP_SERVER}/latest/meta-data/" + +block-until-url "${METADATA_URL}" + +PUBLIC_IP=$(curl --fail -s "${METADATA_URL}public-ipv4") +echo COREOS_PUBLIC_IPV4=${PUBLIC_IP} >> $ENV + +PRIVATE_IP=$(curl --fail -s "${METADATA_URL}local-ipv4") +echo COREOS_PRIVATE_IPV4=${PRIVATE_IP} >> $ENV diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/grub.cfg new file mode 100644 index 0000000000..f35d20bd2a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="cloudstack" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/oem-cloudstack-0.0.4.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/oem-cloudstack-0.0.4.ebuild new file mode 100644 index 0000000000..2dc8b8e901 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-cloudstack/oem-cloudstack-0.0.4.ebuild @@ -0,0 +1,38 @@ +# +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 +# $Header:$ +# + +EAPI=7 + +DESCRIPTION="OEM suite for CloudStack images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + into "/usr/share/oem" + dobin "${FILESDIR}/cloudstack-dhcp" + dobin "${FILESDIR}/cloudstack-ssh-key" + dobin "${FILESDIR}/cloudstack-coreos-cloudinit" + dobin "${FILESDIR}/flatcar-setup-environment" + + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/base/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/base/README new file mode 100644 index 0000000000..d128309fef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/base/README @@ -0,0 +1,4 @@ +These Ignition configs are part of the OEM configuration. Do not modify +them. If you want to write an Ignition config directly to disk, put it in +../config.ign and it will be applied at first boot instead of a config +in userdata. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/base/base.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/base/base.ign new file mode 100644 index 0000000000..bfcfd84e05 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/base/base.ign @@ -0,0 +1,13 @@ +{ + "ignition": { + "version": "2.1.0" + }, + "systemd": { + "units": [ + { + "name": "coreos-metadata-sshkeys@.service", + "enabled": true + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/grub.cfg new file mode 100644 index 0000000000..a595676b61 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="digitalocean" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/oem-release new file mode 100644 index 0000000000..3d6d250197 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/files/oem-release @@ -0,0 +1,5 @@ +ID=digitalocean +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="DigitalOcean" +HOME_URL="https://www.digitalocean.com/" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/oem-digitalocean-0.1.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/oem-digitalocean-0.1.1.ebuild new file mode 100644 index 0000000000..ec4976d690 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-digitalocean/oem-digitalocean-0.1.1.ebuild @@ -0,0 +1,28 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for DigitalOcean images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" + doins -r "${FILESDIR}/base" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/README new file mode 100644 index 0000000000..d128309fef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/README @@ -0,0 +1,4 @@ +These Ignition configs are part of the OEM configuration. Do not modify +them. If you want to write an Ignition config directly to disk, put it in +../config.ign and it will be applied at first boot instead of a config +in userdata. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/base-ec2.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/base-ec2.ign new file mode 100644 index 0000000000..6a18954039 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/base-ec2.ign @@ -0,0 +1,58 @@ +{ + "ignition": { + "version": "2.1.0" + }, + "systemd": { + "units": [ + { + "name": "coreos-metadata-sshkeys@.service", + "enabled": true + }, + { + "name": "amazon-ssm-agent.service", + "enabled": true, + "contents": "[Unit]\nDescription=amazon-ssm-agent\nAfter=network-online.target\n\n[Service]\nType=simple\nWorkingDirectory=/usr/share/oem\nExecStart=/usr/share/oem/bin/amazon-ssm-agent\nKillMode=process\nRestart=on-failure\nRestartForceExitStatus=SIGPIPE\nRestartSec=15min\n\n[Install]\nWantedBy=multi-user.target\n" + }, + { + "name": "nvidia.service", + "enabled": true + } + ] + }, + "storage": { + "files": [ + { + "filesystem": "root", + "path": "/etc/amazon/ssm/amazon-ssm-agent.json", + "contents": { + "source": "oem:///ssm/amazon-ssm-agent.json.template" + }, + "mode": 292 + }, + { + "filesystem": "root", + "path": "/etc/amazon/ssm/seelog.xml", + "contents": { + "source": "oem:///ssm/seelog.xml.template" + }, + "mode": 292 + }, + { + "filesystem": "root", + "path": "/etc/eks/bootstrap.sh", + "contents": { + "source": "oem:///eks/bootstrap.sh" + }, + "mode": 493 + }, + { + "filesystem": "root", + "path": "/etc/systemd/system/nvidia.service", + "contents": { + "source": "oem:///units/nvidia.service" + }, + "mode": 292 + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/openstack.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/openstack.ign new file mode 100644 index 0000000000..7a06909927 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/base/openstack.ign @@ -0,0 +1,13 @@ +{ + "ignition": { + "version": "3.3.0" + }, + "systemd": { + "units": [ + { + "enabled": true, + "name": "coreos-metadata-sshkeys@.service" + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-brightbox.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-brightbox.cfg new file mode 100644 index 0000000000..2d41cdd4ec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-brightbox.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings for EC2 + +set oem_id="brightbox" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-ec2.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-ec2.cfg new file mode 100644 index 0000000000..2ee4b3f33f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-ec2.cfg @@ -0,0 +1,17 @@ +# Flatcar GRUB settings for EC2 + +set oem_id="ec2" + +# Blacklist the Xen framebuffer module so it doesn't get loaded at boot +# Disable `ens3` style names, so eth0 is used for both ixgbevf or xen. +set linux_append="modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295" + +if [ "$grub_platform" = pc ]; then + set linux_console="console=ttyS0,115200n8" + serial com0 --speed=115200 --word=8 --parity=no + terminal_input serial_com0 + terminal_output serial_com0 +fi +if [ "$grub_cpu" = arm64 ]; then + set linux_console="console=tty1 console=ttyS0,115200n8 earlycon" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-openstack.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-openstack.cfg new file mode 100644 index 0000000000..1e71da2f21 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/grub-openstack.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings for EC2 + +set oem_id="openstack" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/oem-release new file mode 100644 index 0000000000..ad1968916f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/files/oem-release @@ -0,0 +1,5 @@ +ID=@@OEM_ID@@ +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="@@OEM_NAME@@" +HOME_URL="@@OEM_HOME_URL@@" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/oem-ec2-compat-0.1.2-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/oem-ec2-compat-0.1.2-r2.ebuild new file mode 100644 index 0000000000..468d56b36b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-ec2-compat/oem-ec2-compat-0.1.2-r2.ebuild @@ -0,0 +1,70 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for EC2 compatible images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 arm64 x86" +IUSE="ec2 openstack brightbox" +REQUIRED_USE="^^ ( ec2 openstack brightbox )" + +RDEPEND=" + ec2? ( app-emulation/amazon-ssm-agent ) + coreos-base/flatcar-eks + x11-drivers/nvidia-drivers +" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + if use ec2 ; then + ID="ami" + NAME="Amazon EC2" + HOME_URL="http://aws.amazon.com/ec2/" + elif use openstack ; then + ID="openstack" + NAME="Openstack" + HOME_URL="https://www.openstack.org/" + elif use brightbox ; then + ID="brightbox" + NAME="Brightbox" + HOME_URL="http://brightbox.com/" + else + die "Unknown OEM!" + fi + + sed -e "s\\@@OEM_ID@@\\${ID}\\g" \ + -e "s\\@@OEM_NAME@@\\${NAME}\\g" \ + -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + -e "s\\@@OEM_HOME_URL@@\\${HOME_URL}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${T}/oem-release" + if use ec2 ; then + newins "${FILESDIR}/grub-ec2.cfg" grub.cfg + elif use openstack ; then + newins "${FILESDIR}/grub-openstack.cfg" grub.cfg + elif use brightbox ; then + newins "${FILESDIR}/grub-brightbox.cfg" grub.cfg + fi + + insinto "/usr/share/oem/base" + doins "${FILESDIR}/base/README" + if use ec2 ; then + newins "${FILESDIR}/base/base-ec2.ign" base.ign + fi + + if use openstack; then + newins "${FILESDIR}/base/openstack.ign" base.ign + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/cloud-config.yml new file mode 100644 index 0000000000..c76e47250c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/cloud-config.yml @@ -0,0 +1,34 @@ +#cloud-config + +coreos: + units: + - name: exoscale-ssh-key.service + command: restart + runtime: yes + content: | + [Unit] + Description=Sets SSH key from metadata + + [Service] + Type=oneshot + StandardOutput=journal+console + ExecStart=/usr/share/oem/bin/exoscale-ssh-key + - name: exoscale-cloudinit.service + command: restart + runtime: yes + content: | + [Unit] + Description=Cloudinit from exoscale (cloudstack-style) metadata + Requires=flatcar-setup-environment.service + After=flatcar-setup-environment.service + + [Service] + Type=oneshot + EnvironmentFile=/etc/environment + ExecStart=/usr/share/oem/bin/exoscale-coreos-cloudinit + oem: + id: exoscale + name: exoscale + version-id: @@OEM_VERSION_ID@@ + home-url: http://www.exoscale.ch + bug-report-url: https://github.com/coreos/coreos-overlay diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-coreos-cloudinit b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-coreos-cloudinit new file mode 100644 index 0000000000..bbf68bb5cd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-coreos-cloudinit @@ -0,0 +1,9 @@ +#!/bin/bash + +. /usr/share/oem/bin/exoscale-dhcp + +DHCP_SERVER=$(get_dhcp_ip) +USERDATA_URL="http://${DHCP_SERVER}/latest/user-data" + +block-until-url "${USERDATA_URL}" +coreos-cloudinit --from-url="${USERDATA_URL}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-dhcp b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-dhcp new file mode 100644 index 0000000000..72615f76e4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-dhcp @@ -0,0 +1,21 @@ +#!/bin/bash + +get_dhcp_ip() { + local leases_dir="/run/systemd/netif/leases" + local found=0 + while true; do + for leasefile in $(find "${leases_dir}" -type f -size +1c); do + dhcp_server_ip=$(cat $leasefile | awk -F= '/SERVER_ADDRESS/ { print $2 }') + if [[ -n "${dhcp_server_ip}" ]]; then + metadata_url="http://${dhcp_server_ip}/latest/meta-data/" + if curl --fail -s "${metadata_url}" >/dev/null; then + echo $dhcp_server_ip + found=1 + break + fi + fi + done + [[ $found -eq 0 ]] || break + sleep .5 + done +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-ssh-key b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-ssh-key new file mode 100644 index 0000000000..e94b0c0253 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/exoscale-ssh-key @@ -0,0 +1,9 @@ +#!/bin/bash + +. /usr/share/oem/bin/exoscale-dhcp + +DHCP_SERVER=$(get_dhcp_ip) +KEY_URL="http://${DHCP_SERVER}/latest/public-keys" + +block-until-url "${KEY_URL}" +curl --fail -s "${KEY_URL}" | update-ssh-keys -a exoscale diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/flatcar-setup-environment b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/flatcar-setup-environment new file mode 100644 index 0000000000..b441401aa5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/flatcar-setup-environment @@ -0,0 +1,32 @@ +#!/bin/bash + +ENV=$1 + +if [[ -z "$ENV" ]]; then + echo "usage: $0 /etc/environment" >&2 + exit 1 +fi + +# Make sure that the file is writable +touch $ENV +if [[ $? -ne 0 ]]; then + echo "$0: unable to modify ${ENV}" >&2 + exit 1 +fi + +sed -i -e '/^COREOS_PUBLIC_IPV4=/d' \ + -e '/^COREOS_PRIVATE_IPV4=/d' \ + "${ENV}" + +. /usr/share/oem/bin/exoscale-dhcp + +DHCP_SERVER=$(get_dhcp_ip) +METADATA_URL="http://${DHCP_SERVER}/latest/" + +block-until-url "${METADATA_URL}" + +PUBLIC_IP=$(curl --fail -s "${METADATA_URL}public-ipv4") +echo COREOS_PUBLIC_IPV4=${PUBLIC_IP} >> $ENV + +PRIVATE_IP=$(curl --fail -s "${METADATA_URL}local-ipv4") +echo COREOS_PRIVATE_IPV4=${PRIVATE_IP} >> $ENV diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/grub.cfg new file mode 100644 index 0000000000..9cdb448381 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="exoscale" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/oem-exoscale-0.0.5.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/oem-exoscale-0.0.5.ebuild new file mode 100644 index 0000000000..51ef86022d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-exoscale/oem-exoscale-0.0.5.ebuild @@ -0,0 +1,38 @@ +# +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 +# $Header:$ +# + +EAPI=7 + +DESCRIPTION="OEM suite for Exoscale images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + into "/usr/share/oem" + dobin "${FILESDIR}/exoscale-dhcp" + dobin "${FILESDIR}/exoscale-ssh-key" + dobin "${FILESDIR}/exoscale-coreos-cloudinit" + dobin "${FILESDIR}/flatcar-setup-environment" + + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/base/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/base/README new file mode 100644 index 0000000000..d128309fef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/base/README @@ -0,0 +1,4 @@ +These Ignition configs are part of the OEM configuration. Do not modify +them. If you want to write an Ignition config directly to disk, put it in +../config.ign and it will be applied at first boot instead of a config +in userdata. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/base/base.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/base/base.ign new file mode 100644 index 0000000000..ee30505752 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/base/base.ign @@ -0,0 +1,57 @@ +{ + "ignition": { + "version": "2.2.0" + }, + "storage": { + "files": [ + { + "filesystem": "root", + "path": "/etc/systemd/system/oem-gce.service", + "contents": { + "source": "oem:///units/oem-gce.service" + }, + "mode": 292 + }, + { + "filesystem": "root", + "path": "/etc/systemd/system/oem-gce-enable-oslogin.service", + "contents": { + "source": "oem:///units/oem-gce-enable-oslogin.service" + }, + "mode": 292 + }, + { + "filesystem": "root", + "path": "/etc/hosts", + "contents": { + "source": "oem:///files/hosts" + }, + "mode": 292 + }, + { + "filesystem": "root", + "path": "/etc/profile.d/google-cloud-sdk.sh", + "contents": { + "source": "oem:///files/google-cloud-sdk.sh" + }, + "mode": 292 + } + ] + }, + "systemd": { + "units": [ + { + "name": "coreos-metadata-sshkeys@.service", + "enabled": true + }, + { + "name": "oem-gce.service", + "enabled": true + }, + { + "name": "oem-gce-enable-oslogin.service", + "enabled": true + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/bin/enable-oslogin b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/bin/enable-oslogin new file mode 100644 index 0000000000..abf9899b67 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/bin/enable-oslogin @@ -0,0 +1,30 @@ +#!/usr/bin/bash + +# Verify all the config files were not touched by the user. Do not try to +# enable oslogin if the user has messed with them + +if [ -e '/etc/pam.d/sshd' ]; then + echo '/etc/pam.d/sshd already exists. Not enabling OS Login' + exit 0 +fi + +if [ "$(readlink -f /etc/nsswitch.conf)" != '/usr/share/baselayout/nsswitch.conf' ]; then + echo '/etc/nsswitch.conf is not a symlink to /usr/share/baselayout/nsswitch.conf. Not enabling OS Login' + exit 0 +fi + +if [ "$(readlink -f /etc/ssh/sshd_config)" != '/usr/share/ssh/sshd_config' ]; then + echo '/etc/ssh/sshd_config is not a symlink to /usr/share/ssh/sshd_config. Not enabling OS Login' + exit 0 +fi + +# Actually start enabling things. Die if we fail. +set -e + +mkdir -m 0750 -p '/var/lib/google-sudoers.d' +mkdir -m 0750 -p '/var/lib/google-users.d' +ln -f -s '/usr/share/google-oslogin/pam_sshd' '/etc/pam.d/sshd' +ln -f -s '/usr/share/google-oslogin/nsswitch.conf' '/etc/nsswitch.conf' +ln -f -s '/usr/share/google-oslogin/sshd_config' '/etc/ssh/sshd_config' +ln -f -s '/usr/share/google-oslogin/oslogin-sudoers' '/etc/sudoers.d/oslogin-sudoers' +ln -f -s '/usr/share/google-oslogin/group.conf' '/etc/security/group.conf' diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/files/google-cloud-sdk.sh b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/files/google-cloud-sdk.sh new file mode 100644 index 0000000000..9114c0d400 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/files/google-cloud-sdk.sh @@ -0,0 +1,5 @@ +#!/bin/sh +alias gcloud="(docker images google/cloud-sdk || docker pull google/cloud-sdk) > /dev/null;docker run -ti --rm --net=host -v $HOME/.config:/root/.config -v /var/run/docker.sock:/var/run/docker.sock google/cloud-sdk gcloud" +alias gsutil="(docker images google/cloud-sdk || docker pull google/cloud-sdk) > /dev/null;docker run -ti --rm --net=host -v $HOME/.config:/root/.config google/cloud-sdk gsutil" +alias python="(docker images python:2-slim || docker pull python:2-slim) > /dev/null;docker run -ti --rm --net=host -v $HOME/.config:/root/.config -v "$PWD":/usr/src/pyapp -w /usr/src/pyapp python:2-slim python" +alias python3="(docker images python:3-slim || docker pull python:3-slim) > /dev/null;docker run -ti --rm --net=host -v $HOME/.config:/root/.config -v "$PWD":/usr/src/pyapp -w /usr/src/pyapp python:3-slim python" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/files/hosts b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/files/hosts new file mode 100644 index 0000000000..61c0c6b265 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/files/hosts @@ -0,0 +1,2 @@ +169.254.169.254 metadata metadata.google.internal +127.0.0.1 localhost diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/grub.cfg new file mode 100644 index 0000000000..8366e12a55 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/grub.cfg @@ -0,0 +1,9 @@ +# Flatcar GRUB settings + +set oem_id="gce" + +# GCE only has a serial console. +set linux_console="console=ttyS0,115200n8" +serial com0 --speed=115200 --word=8 --parity=no +terminal_input serial_com0 +terminal_output serial_com0 diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/oem-release new file mode 100644 index 0000000000..92a20acf95 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/oem-release @@ -0,0 +1,5 @@ +ID=gce +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="Google Compute Engine" +HOME_URL="https://cloud.google.com/products/compute-engine/" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/units/oem-gce-enable-oslogin.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/units/oem-gce-enable-oslogin.service new file mode 100644 index 0000000000..51e5c56c73 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/units/oem-gce-enable-oslogin.service @@ -0,0 +1,15 @@ +[Unit] +Description=Enable GCE OS Login +ConditionFirstBoot=true +DefaultDependencies=false +After=systemd-tmpfiles-setup.service +Before=sshd.service +Before=sshd.socket + +[Service] +Type=oneshot + +ExecStart=/usr/share/oem/bin/enable-oslogin + +[Install] +WantedBy=sysinit.target diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/units/oem-gce.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/units/oem-gce.service new file mode 100644 index 0000000000..50d06d05de --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/files/units/oem-gce.service @@ -0,0 +1,31 @@ +[Unit] +Description=GCE Linux Agent +After=local-fs.target network-online.target + +[Service] +Type=notify +NotifyAccess=all +Restart=always +RestartSec=5 + +# There is a custom main process that kills all of the contained services. +KillMode=process +KillSignal=SIGTERM + +ExecStartPre=/usr/bin/rm -f /var/lib/flatcar-oem-gce.img +ExecStartPre=/usr/bin/truncate -s 1G /var/lib/flatcar-oem-gce.img +ExecStartPre=/usr/sbin/mkfs.ext4 /var/lib/flatcar-oem-gce.img +ExecStartPre=/usr/bin/rm -rf /var/lib/flatcar-oem-gce +ExecStartPre=/usr/bin/mkdir -p /var/lib/flatcar-oem-gce +ExecStartPre=-/usr/bin/umount /var/lib/flatcar-oem-gce.img +ExecStartPre=/usr/bin/mount /var/lib/flatcar-oem-gce.img /var/lib/flatcar-oem-gce +ExecStartPre=/usr/bin/tar --directory=/var/lib/flatcar-oem-gce --extract --file=/usr/share/oem/flatcar-oem-gce.aci --strip-components=1 rootfs +ExecStartPre=/usr/bin/umount /var/lib/flatcar-oem-gce.img +# the container expects to be able to optmize irq settings in /proc/irq and /sys/ +Environment=SYSTEMD_NSPAWN_API_VFS_WRITABLE=1 +ExecStart=/usr/bin/systemd-nspawn --keep-unit --register=no --link-journal=no \ + --machine=oem-gce --capability=CAP_NET_ADMIN --bind=/dev/log --bind=/run/systemd --tmpfs=/run/lock --bind=/etc --bind=/home --bind-ro=/usr/share/google-oslogin/nsswitch.conf \ + --read-only --volatile=overlay --image=/var/lib/flatcar-oem-gce.img --kill-signal=SIGTERM /init.sh + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/oem-gce-20180823-r3.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/oem-gce-20180823-r3.ebuild new file mode 100644 index 0000000000..67dec02712 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-gce/oem-gce-20180823-r3.ebuild @@ -0,0 +1,33 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for Google Compute Engine images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" + doins -r "${FILESDIR}/base" + doins -r "${FILESDIR}/files" + doins -r "${FILESDIR}/units" + exeinto "/usr/share/oem/bin" + doexe "${FILESDIR}/bin/enable-oslogin" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/files/grub.cfg new file mode 100644 index 0000000000..7782d17b95 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="hyperv" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/files/oem-release new file mode 100644 index 0000000000..1259a0aa68 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/files/oem-release @@ -0,0 +1,4 @@ +ID=hyperv +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="Microsoft Hyper-V" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/oem-hyperv-0.1.0.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/oem-hyperv-0.1.0.ebuild new file mode 100644 index 0000000000..30eb2ec8a0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-hyperv/oem-hyperv-0.1.0.ebuild @@ -0,0 +1,28 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for Hyper-V" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloud-config.yml new file mode 100644 index 0000000000..26154beb35 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloud-config.yml @@ -0,0 +1,61 @@ +#cloud-config + +coreos: + units: + - name: vmtoolsd.service + command: start + content: | + [Unit] + Description=VMware Tools Agent + Documentation=http://open-vm-tools.sourceforge.net/ + ConditionVirtualization=vmware + + [Service] + ExecStartPre=/usr/bin/ln -sfT /usr/share/oem/vmware-tools /etc/vmware-tools + ExecStart=/usr/share/oem/bin/vmtoolsd + TimeoutStopSec=5 + - name: cloudstack-ssh-key.service + command: restart + runtime: yes + content: | + [Unit] + Description=Sets SSH key from metadata + Requires=flatcar-setup-environment.service + After=flatcar-setup-environment.service + + [Service] + Type=oneshot + StandardOutput=journal+console + EnvironmentFile=/etc/environment + ExecStart=/usr/share/oem/bin/cloudstack-ssh-key + - name: cloudstack-cloudinit.service + command: restart + runtime: yes + content: | + [Unit] + Description=Cloudinit from CloudStack-style metadata + Requires=flatcar-setup-environment.service + After=flatcar-setup-environment.service + + [Service] + Type=oneshot + EnvironmentFile=/etc/environment + ExecStart=/usr/share/oem/bin/cloudstack-coreos-cloudinit + - name: cloudstack-set-guest-password.service + runtime: yes + content: | + [Unit] + Description=CloudStack Guest Password Reset + Requires=flatcar-setup-environment.service + After=flatcar-setup-environment.service + + [Service] + Type=oneshot + ExecStart=/usr/share/oem/bin/cloudstack-set-guest-password + EnvironmentFile=/etc/environment + oem: + id: interoute + name: Interoute + version-id: @@OEM_VERSION_ID@@ + home-url: http://interoute.com/ + bug-report-url: https://issues.flatcar.org diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-coreos-cloudinit b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-coreos-cloudinit new file mode 100644 index 0000000000..67ce925a42 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-coreos-cloudinit @@ -0,0 +1,7 @@ +#!/bin/bash + +DHCP_SERVER=${NIC_1_GATEWAY} +USERDATA_URL="http://${DHCP_SERVER}/latest/user-data" + +block-until-url "${USERDATA_URL}" +coreos-cloudinit --from-url="${USERDATA_URL}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-set-guest-password b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-set-guest-password new file mode 100644 index 0000000000..cf348b1479 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-set-guest-password @@ -0,0 +1,101 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. +# +# Installation steps (ArchLinux using base/dhcpcd-6.0.5-1) +# +# Install "wget" and "dhcpcd" +# $ pacman -S wget dhcpcd +# $ systemctl enable dhcpcd@eth0 +# Copy script to /usr/lib/systemd/scripts/ +# $ cp -v cloudstack-set-guest-password \ +# /usr/lib/systemd/scripts/ +# Copy the service file to /usr/lib/systemd/system/ +# $ cp -v cloudstack-set-guest-password.service \ +# /usr/lib/systemd/system/ +# Enable the service +# $ systemctl enable cloudstack-set-guest-password.service + +# Modified: Dong Xie, 02-09-2015 + +user=root +password_received=0 + +if [ ! -x /usr/sbin/chpasswd ]; then + logger -t "cloudstack" "$0 requires /usr/sbin/chpasswd command" + exit 1 +fi + +PASSWORD_SERVER_IP=${NIC_1_GATEWAY} + +if [ -n $PASSWORD_SERVER_IP ]; then + logger -t "cloudstack" "Found password server IP $PASSWORD_SERVER_IP" + logger -t "cloudstack" "Sending request to password server at $PASSWORD_SERVER_IP" + password=$(wget -q -t 3 -T 20 -O - --header "DomU_Request: send_my_password" $PASSWORD_SERVER_IP:8080) + if [ $? -ne 0 ]; then + logger -t "cloudstack" "Failed to run wget correctly. Network not ready?" + exit 1 + fi + password=$(echo $password | tr -d '\r') + logger -t "cloudstack" "Got password as - $password - " + + if [ $? -eq 0 ]; then + logger -t "cloudstack" "Got response from server at $PASSWORD_SERVER_IP" + + case $password in + "") + logger -t "cloudstack" "Password server at $PASSWORD_SERVER_IP did not have any password for the VM" + ;; + + "bad_request") + logger -t "cloudstack" "VM sent an invalid request to password server at $PASSWORD_SERVER_IP" + ;; + + "saved_password") + logger -t "cloudstack" "VM has already saved a password from the password server at $PASSWORD_SERVER_IP" + ;; + + *) + logger -t "cloudstack" "VM got a valid password from server at $PASSWORD_SERVER_IP" + password_received=1 + ;; + esac + else + logger -t "cloudstack" "Failed to send request to password server at $PASSWORD_SERVER_IP" + fi +else + logger -t "cloudstack" "Could not find password server IP for $interface" +fi + +if [ "$password_received" == "1" ]; then + logger -t "cloudstack" "Changing password ..." + echo $user:$password | /usr/sbin/chpasswd + + if [ $? -gt 0 ]; then + logger -t "cloudstack" "Failed to change password for user $user" + exit 1 + fi + + logger -t "cloudstack" "Successfully changed password for user $user" + logger -t "cloudstack" "Sending acknowledgment to password server at $PASSWORD_SERVER_IP" + + wget -t 3 -T 20 -O - --header "DomU_Request: saved_password" $PASSWORD_SERVER_IP:8080 +fi + +exit 0 +# vim: set ts=2 sw=2 expandtab diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-ssh-key b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-ssh-key new file mode 100644 index 0000000000..f048a938d7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/cloudstack-ssh-key @@ -0,0 +1,7 @@ +#!/bin/bash + +DHCP_SERVER=${NIC_1_GATEWAY} +KEY_URL="http://${DHCP_SERVER}/latest/meta-data/public-keys" + +block-until-url "${KEY_URL}" +curl --fail -s "${KEY_URL}" | update-ssh-keys -a cloudstack diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/flatcar-setup-environment b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/flatcar-setup-environment new file mode 100644 index 0000000000..d694441427 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/flatcar-setup-environment @@ -0,0 +1,64 @@ +#!/bin/bash + +ENV=$1 +leases_dir="/run/systemd/netif/leases" + +if [[ -z "$ENV" ]]; then + echo "usage: $0 /etc/environment" >&2 + exit 1 +fi + +# Make sure that the file is writable +touch $ENV +if [[ $? -ne 0 ]]; then + echo "$0: unable to modify ${ENV}" >&2 + exit 1 +fi + +# Clean up values +sed -i -e '/^COREOS_PUBLIC_IPV4=/d' \ + -e '/^COREOS_PRIVATE_IPV4=/d' \ + "${ENV}" + +sed -i -e '/^NIC_[0-9]*_IPV4=/d' \ + -e '/^NIC_[0-9]*_GATEWAY=/d' \ + "${ENV}" + +# Fetch number of NIC +nic_count=$(ip link show | grep ens | wc -l) + +# Loop until all lease files ready +while true; do + if [[ $(find "${leases_dir}" -maxdepth 1 -type f -size +1c | wc -l) -ge $nic_count ]]; then + break + fi + sleep .5 +done + +# Get leases in var +leases=$(find "${leases_dir}" -type f | sort) + +# Take first lease which should be the default NIC +default_lease=$(echo "${leases}" | head -n1) +DHCP_SERVER=$(cat $default_lease | awk -F= '/SERVER_ADDRESS/ { print $2 }') +METADATA_URL="http://${DHCP_SERVER}/latest/meta-data/" + +block-until-url "${METADATA_URL}" + +PUBLIC_IP=$(curl --fail -s "${METADATA_URL}public-ipv4") +echo COREOS_PUBLIC_IPV4=${PUBLIC_IP} >> $ENV + +PRIVATE_IP=$(curl --fail -s "${METADATA_URL}local-ipv4") +echo COREOS_PRIVATE_IPV4=${PRIVATE_IP} >> $ENV + +# Loop to export interoute style info into ENV +count=1 +for lease in $leases; +do + ip=$(cat $lease | awk -F= '/^ADDRESS/ { print $2 }') + gateway=$(cat $lease | awk -F= '/SERVER_ADDRESS/ { print $2 }') + echo "NIC_${count}_IPV4"=${ip} >> $ENV + echo "NIC_${count}_GATEWAY"=${gateway} >> $ENV + count=$(expr $count + 1) +done + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/grub.cfg new file mode 100644 index 0000000000..f3d466d03f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="interoute" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/oem-interoute-0.0.3-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/oem-interoute-0.0.3-r1.ebuild new file mode 100644 index 0000000000..b53f7aec86 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-interoute/oem-interoute-0.0.3-r1.ebuild @@ -0,0 +1,43 @@ +# +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 +# $Header:$ +# + +EAPI=7 + +DESCRIPTION="OEM suite for Interoute images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +DEPEND=" + app-emulation/open-vm-tools + " +RDEPEND="${DEPEND}" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + into "/usr/share/oem" + dobin "${FILESDIR}/cloudstack-set-guest-password" + dobin "${FILESDIR}/cloudstack-ssh-key" + dobin "${FILESDIR}/cloudstack-coreos-cloudinit" + dobin "${FILESDIR}/flatcar-setup-environment" + + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/cloud-config.yml new file mode 100644 index 0000000000..fda0724d3e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/cloud-config.yml @@ -0,0 +1,57 @@ +#cloud-config + +coreos: + units: + - name: oem-ens192.network + content: | + [Match] + Name=ens192 + + [Network] + DHCP=v4 + DNS=8.8.8.8 + DNS=8.8.4.4 + - name: vmtoolsd.service + command: start + content: | + [Unit] + Description=VMware Tools Agent + Documentation=http://open-vm-tools.sourceforge.net/ + ConditionVirtualization=vmware + + [Service] + ExecStartPre=/usr/bin/ln -sfT /usr/share/oem/vmware-tools /etc/vmware-tools + ExecStart=/usr/share/oem/bin/vmtoolsd + ExecStartPost=/usr/share/oem/bin/vmware-toolbox-cmd timesync enable + TimeoutStopSec=5 + - name: niftycloud-coreos-cloudinit.service + command: restart + runtime: yes + content: | + [Unit] + After=flatcar-setup-environment.service + After=vmtoolsd.service + Requires=flatcar-setup-environment.service + Requires=vmtoolsd.service + + [Service] + Type=oneshot + EnvironmentFile=/etc/environment + ExecStart=/usr/share/oem/bin/niftycloud-coreos-cloudinit + - name: niftycloud-ssh-key.service + command: restart + runtime: yes + content: | + [Unit] + Description=Sets SSH key from vmtoolsd + [Service] + Type=oneshot + StandardOutput=journal+console + ExecStart=/usr/share/oem/bin/niftycloud-ssh-key + + oem: + id: niftycloud + name: NIFTY Cloud + version-id: @@OEM_VERSION_ID@@ + home-url: http://cloud.nifty.com/ + bug-report-url: https://issues.flatcar.org diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/flatcar-setup-environment b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/flatcar-setup-environment new file mode 100755 index 0000000000..3df9436164 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/flatcar-setup-environment @@ -0,0 +1,35 @@ +#!/bin/bash -e + +ENV=$1 + +if [ -z "$ENV" ]; then + echo usage: $0 /etc/environment + exit 1 +fi + +# test for rw +touch $ENV +if [ $? -ne 0 ]; then + echo exiting, unable to modify: $ENV + exit 1 +fi + +sed -i -e '/^COREOS_PUBLIC_IPV4=/d' \ + -e '/^COREOS_PRIVATE_IPV4=/d' \ + "${ENV}" + +function get_ip () { + IF=$1 + IP= + while [ 1 ]; do + IP=$(ip addr show $IF | awk '/inet /{print $2}' | awk -F'/' '{print $1}') + if [ "$IP" != "" ]; then + break + fi + sleep .1 + done + echo $IP +} + +echo COREOS_PUBLIC_IPV4=$(get_ip ens192) >> $ENV +echo COREOS_PRIVATE_IPV4=$(get_ip ens224) >> $ENV diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/grub.cfg new file mode 100644 index 0000000000..b4f808396d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="niftycloud" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/niftycloud-coreos-cloudinit b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/niftycloud-coreos-cloudinit new file mode 100644 index 0000000000..2e579cb690 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/niftycloud-coreos-cloudinit @@ -0,0 +1,30 @@ +#!/bin/bash + +VMTOOLSD="" +if [ -x /usr/share/oem/bin/vmtoolsd ]; then + VMTOOLSD="/usr/share/oem/bin/vmtoolsd" +else + exit 1 +fi + +USER_DATA_DIR=/var/lib/flatcar-niftycloud +USER_DATA_PATH=${USER_DATA_DIR}/user-data +USER_DATA_FLAG=$(${VMTOOLSD} --cmd 'info-get guestinfo.set_user_data') + +if [ "$USER_DATA_FLAG" == "1" ]; then + TMPFILE=$(mktemp /tmp/XXXXXX-cloud-init) + ${VMTOOLSD} --cmd 'info-get guestinfo.user_data' | openssl enc -d -base64 > "${TMPFILE}" + if [ -s "${TMPFILE}" ]; then + coreos-cloudinit --from-file="${TMPFILE}" || exit $? + if [ "$(head -n 1 ${TMPFILE} | tr -d '\r' | tr -d '\n')" = "#cloud-config" ]; then + mkdir -p ${USER_DATA_DIR} + cp -p ${TMPFILE} ${USER_DATA_PATH} + fi + else + echo "guestinfo.user_data undefined." >&2 + exit 1 + fi + ${VMTOOLSD} --cmd 'info-set guestinfo.set_user_data 0' +elif [ -f ${USER_DATA_PATH} ]; then + coreos-cloudinit --from-file="${USER_DATA_PATH}" || exit $? +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/niftycloud-ssh-key b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/niftycloud-ssh-key new file mode 100644 index 0000000000..f835ac223c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/files/niftycloud-ssh-key @@ -0,0 +1,25 @@ +#!/bin/bash -e + +set -e + +VMTOOLSD="" +if [ -x /usr/share/oem/bin/vmtoolsd ]; then + VMTOOLSD="/usr/share/oem/bin/vmtoolsd" +else + exit 1 +fi + +INIT=$(${VMTOOLSD} --cmd 'info-get guestinfo.init' 2>&1) +if [ $? -ne 0 ]; then + echo "guestinfo.init undefined." + ${VMTOOLSD} --cmd 'info-set guestinfo.init_result 9999' + exit 0 +fi +echo "guestinfo.init: $INIT" + +if [ $INIT == "1" ]; then + ${VMTOOLSD} --cmd 'info-get guestinfo.ssh_authorized_key' | update-ssh-keys -a "niftycloud" - + ${VMTOOLSD} --cmd 'info-set guestinfo.init 0' +fi + +${VMTOOLSD} --cmd 'info-set guestinfo.init_result 1' diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/oem-niftycloud-0.0.3-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/oem-niftycloud-0.0.3-r1.ebuild new file mode 100644 index 0000000000..c9701bdd87 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-niftycloud/oem-niftycloud-0.0.3-r1.ebuild @@ -0,0 +1,38 @@ +# Copyright (c) 2014 NIFTY Corp.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for NIFTY Cloud images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +DEPEND=" + app-emulation/open-vm-tools + " +RDEPEND="${DEPEND}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + into "/usr/share/oem" + dobin "${FILESDIR}/niftycloud-ssh-key" + dobin "${FILESDIR}/niftycloud-coreos-cloudinit" + dobin "${FILESDIR}/flatcar-setup-environment" + + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/base/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/base/README new file mode 100644 index 0000000000..d128309fef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/base/README @@ -0,0 +1,4 @@ +These Ignition configs are part of the OEM configuration. Do not modify +them. If you want to write an Ignition config directly to disk, put it in +../config.ign and it will be applied at first boot instead of a config +in userdata. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/base/base.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/base/base.ign new file mode 100644 index 0000000000..5c530660c4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/base/base.ign @@ -0,0 +1,29 @@ +{ + "ignition": { + "version": "2.1.0" + }, + "storage": { + "files": [ + { + "filesystem": "root", + "path": "/etc/systemd/system/packet-phone-home.service", + "contents": { + "source": "oem:///units/packet-phone-home.service" + }, + "mode": 292 + } + ] + }, + "systemd": { + "units": [ + { + "name": "coreos-metadata-sshkeys@.service", + "enabled": true + }, + { + "name": "packet-phone-home.service", + "enabled": true + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/grub.cfg new file mode 100644 index 0000000000..f780fd76ec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/grub.cfg @@ -0,0 +1,9 @@ +# Flatcar GRUB settings + +set oem_id="packet" +set linux_append="flatcar.autologin" + +if [ "$grub_cpu" = i386 ] || [ "$grub_cpu" = x86_64 ]; then + set gfxpayload="1024x768x8,1024x768" + set linux_console="console=tty0 console=ttyS1,115200n8" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/oem-release new file mode 100644 index 0000000000..61c35df879 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/oem-release @@ -0,0 +1,5 @@ +ID=packet +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="Packet" +HOME_URL="https://packet.net" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/units/packet-phone-home.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/units/packet-phone-home.service new file mode 100644 index 0000000000..c74cf022ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/files/units/packet-phone-home.service @@ -0,0 +1,14 @@ +[Unit] +Description=Report Success to Packet +ConditionFirstBoot=true +Requires=coreos-metadata.service +After=coreos-metadata.service + +[Service] +EnvironmentFile=/run/metadata/flatcar +ExecStart=/usr/bin/curl --header "Content-Type: application/json" --request POST "${COREOS_PACKET_PHONE_HOME_URL}" +Restart=on-failure +RestartSec=2 + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/oem-packet-0.2.2.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/oem-packet-0.2.2.ebuild new file mode 100644 index 0000000000..4551e0bf8b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-packet/oem-packet-0.2.2.ebuild @@ -0,0 +1,29 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for Packet images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 arm64 x86" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" + doins -r "${FILESDIR}/base" + doins -r "${FILESDIR}/units" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/files/grub.cfg new file mode 100644 index 0000000000..2cd3a0a310 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/files/grub.cfg @@ -0,0 +1,4 @@ +# Flatcar GRUB settings + +set oem_id="qemu" +set linux_append="flatcar.autologin" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/files/oem-release new file mode 100644 index 0000000000..280e43175d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/files/oem-release @@ -0,0 +1,5 @@ +ID=qemu +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="QEMU" +HOME_URL="https://www.qemu.org/" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/oem-qemu-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/oem-qemu-0.0.1.ebuild new file mode 100644 index 0000000000..22b47c2ef6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-qemu/oem-qemu-0.0.1.ebuild @@ -0,0 +1,28 @@ +# Copyright (c) 2020 Kinvolk GmbH. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for QEMU" +HOMEPAGE="" +SRC_URI="" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/files/cloud-config.yml new file mode 100644 index 0000000000..c051c235bc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/files/cloud-config.yml @@ -0,0 +1,42 @@ +#cloud-config + +coreos: + units: + - name: user-configdrive.service.d/netconf.conf + runtime: yes + content: | + [Service] + ExecStart= + ExecStart=/usr/bin/coreos-cloudinit --oem=rackspace-onmetal + - name: ping-out.service + runtime: yes + enable: yes + content: | + [Unit] + After=user-config.target + + [Service] + Type=oneshot + RemainAfterExit=yes + ExecStart=/usr/bin/sh -c "ping -A -c1 $(ip route | awk '/default/ { print $3 }')" + + [Install] + WantedBy=user-config.target + - name: media-configdrive.mount + command: start + runtime: yes + content: | + [Unit] + Wants=user-configdrive.service + Before=user-configdrive.service + + [Mount] + What=/dev/disk/by-label/config-2 + Where=/media/configdrive + Options=ro + oem: + id: onmetal + name: Rackspace OnMetal + version-id: @@OEM_VERSION_ID@@ + home-url: http://www.rackspace.com/ + bug-report-url: https://issues.flatcar.org diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/files/grub.cfg new file mode 100644 index 0000000000..9519ecd969 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/files/grub.cfg @@ -0,0 +1,13 @@ +# Flatcar GRUB settings + +set oem_id="rackspace-onmetal" + +# Rackspace wanted a longer timeout, I forget why. (15 seconds) +set timeout=15 + +# Switch default console to ttyS4, only applies to Linux since +# GRUB needs exact IO ports for non-standard serial devices. +set linux_console="console=ttyS4,115200n8 8250.nr_uarts=5" + +# Blacklist MEI, the firmware is just plain broken. +set linux_append="modprobe.blacklist=mei_me net.ifnames=0" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/oem-rackspace-onmetal-0.0.8-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/oem-rackspace-onmetal-0.0.8-r1.ebuild new file mode 100644 index 0000000000..f896684cca --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace-onmetal/oem-rackspace-onmetal-0.0.8-r1.ebuild @@ -0,0 +1,27 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for Rackspace Teeth images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/cloud-config.yml new file mode 100644 index 0000000000..6d9e4656ec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/cloud-config.yml @@ -0,0 +1,37 @@ +#cloud-config + +coreos: + units: + - name: nova-agent-auto.service + command: restart + runtime: yes + content: | + [Unit] + After=dbus.service + [Service] + Environment=HOME=/root + ExecStartPre=/bin/mount -t proc none /usr/share/oem/nova-agent/proc + ExecStartPre=/bin/mount -t xenfs none /usr/share/oem/nova-agent/proc/xen + ExecStartPre=/bin/mount --bind /dev /usr/share/oem/nova-agent/dev + ExecStartPre=/bin/mount --bind /sys /usr/share/oem/nova-agent/sys + ExecStart=/usr/bin/chroot /usr/share/oem/nova-agent/ /usr/share/nova-agent/0.0.1.38/sbin/nova-agent -o - -n -l info /usr/share/nova-agent/nova-agent.py + ExecStopPost=/bin/umount -f /usr/share/oem/nova-agent/sys + ExecStopPost=/bin/umount -f /usr/share/oem/nova-agent/dev + ExecStopPost=/bin/umount -f /usr/share/oem/nova-agent/proc/xen + ExecStopPost=/bin/umount -f /usr/share/oem/nova-agent/proc + - name: nova-agent-watcher.service + command: restart + runtime: yes + content: | + [Unit] + After=dbus.service + + [Service] + ExecStart=/usr/share/oem/bin/nova-agent-watcher -watch-dir=/usr/share/oem/nova-agent -scripts-dir=/usr/share/oem/bin/ + + oem: + id: rackspace + name: Rackspace Cloud Servers + version-id: @@OEM_VERSION_ID@@ + home-url: https://www.rackspace.com/cloud/servers/ + bug-report-url: https://issues.flatcar.org diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/flatcar-setup-environment b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/flatcar-setup-environment new file mode 100755 index 0000000000..2e5f9c1bd0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/flatcar-setup-environment @@ -0,0 +1,35 @@ +#!/bin/bash -e + +ENV=$1 + +if [ -z "$ENV" ]; then + echo usage: $0 /etc/environment + exit 1 +fi +# test for rw +touch $ENV +if [ $? -ne 0 ]; then + echo exiting, unable to modify: $ENV + exit 1 +fi + +sed -i -e '/^COREOS_PUBLIC_IPV4=/d' \ + -e '/^COREOS_PRIVATE_IPV4=/d' \ + "${ENV}" + +# We spin loop until the nova-agent sets up the ip addresses +function get_ip () { + IF=$1 + IP= + while [ 1 ]; do + IP=$(ifconfig $IF | awk '/inet /{print $2}') + if [ "$IP" != "" ]; then + break + fi + sleep .1 + done + echo $IP +} + +echo COREOS_PUBLIC_IPV4=$(get_ip eth0) >> $ENV +echo COREOS_PRIVATE_IPV4=$(get_ip eth1) >> $ENV diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/grub.cfg new file mode 100644 index 0000000000..8e05a0e064 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="rackspace" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/oem-rackspace-0.0.4-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/oem-rackspace-0.0.4-r2.ebuild new file mode 100644 index 0000000000..246c6c63bd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-rackspace/oem-rackspace-0.0.4-r2.ebuild @@ -0,0 +1,39 @@ +# +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 +# $Header:$ +# + +EAPI=7 + +DESCRIPTION="oem suite for rackspace images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 x86" +IUSE="" + +RDEPEND=" + coreos-base/nova-agent-container + coreos-base/nova-agent-watcher +" + +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" + + into "/usr/share/oem" + dobin "${FILESDIR}/flatcar-setup-environment" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/files/cloud-config.yml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/files/cloud-config.yml new file mode 100644 index 0000000000..9fd8f6a434 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/files/cloud-config.yml @@ -0,0 +1,4 @@ +#cloud-config + +ssh_authorized_keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/files/grub.cfg new file mode 100644 index 0000000000..d42817d100 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="vagrant" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/oem-vagrant-key-0.0.3.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/oem-vagrant-key-0.0.3.ebuild new file mode 100644 index 0000000000..82b074789d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-key/oem-vagrant-key-0.0.3.ebuild @@ -0,0 +1,22 @@ +# Copyright 2013 The CoreOS Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for login access via Vagrant's ssh key." +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/cloud-config.yml" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/Vagrantfile b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/Vagrantfile new file mode 100644 index 0000000000..e5c4a2fe7b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/Vagrantfile @@ -0,0 +1,31 @@ +# -*- mode: ruby -*- +# # vi: set ft=ruby : + +if Vagrant::VERSION < "1.6.0" + raise "Need at least vagrant version 1.6.0, please update" +end + +require_relative 'change_host_name.rb' +require_relative 'configure_networks.rb' +require_relative 'base_mac.rb' + +Vagrant.configure("2") do |config| + # always use Vagrants insecure key + config.ssh.insert_key = false + + # SSH in as the default 'core' user, it has the vagrant ssh key. + config.ssh.username = "core" + + # Disable the base shared folder, guest additions are unavailable. + config.vm.synced_folder ".", "/vagrant", disabled: true + + config.vm.provider :virtualbox do |vb| + # Guest Additions are unavailable. + vb.check_guest_additions = false + vb.functional_vboxsf = false + + # Fix docker not being able to resolve private registry in VirtualBox + vb.customize ["modifyvm", :id, "--natdnshostresolver1", "on"] + vb.customize ["modifyvm", :id, "--natdnsproxy1", "on"] + end +end diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/base_mac.rb b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/base_mac.rb new file mode 100644 index 0000000000..1f26796e07 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/base_mac.rb @@ -0,0 +1,4 @@ +# This file must be rewritten with a real value for VirtualBox +Vagrant.configure("2") do |config| + config.vm.base_mac = "080027000000" +end diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/change_host_name.rb b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/change_host_name.rb new file mode 100644 index 0000000000..a4d5654b04 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/change_host_name.rb @@ -0,0 +1,18 @@ +# -*- mode: ruby -*- +# # vi: set ft=ruby : + +# NOTE: This monkey-patching is done to disable to old cloud config based +# change_host_name built into the upstream vagrant project + +require Vagrant.source_root.join("plugins/guests/coreos/cap/change_host_name.rb") + +module VagrantPlugins + module GuestCoreOS + module Cap + class ChangeHostName + def self.change_host_name(machine, name) + end + end + end + end +end diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/configure_networks.rb b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/configure_networks.rb new file mode 100644 index 0000000000..4788bd1b19 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/box/configure_networks.rb @@ -0,0 +1,18 @@ +# -*- mode: ruby -*- +# # vi: set ft=ruby : + +# NOTE: This monkey-patching is done to disable to old cloud config based +# configure_networks built into the upstream vagrant project + +require Vagrant.source_root.join("plugins/guests/coreos/cap/configure_networks.rb") + +module VagrantPlugins + module GuestCoreOS + module Cap + class ConfigureNetworks + def self.configure_networks(machine, networks) + end + end + end + end +end diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/grub.cfg new file mode 100644 index 0000000000..22ef469458 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="vagrant-virtualbox" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/oem-vagrant-virtualbox-0.0.2.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/oem-vagrant-virtualbox-0.0.2.ebuild new file mode 100644 index 0000000000..2bfcd7b39b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant-virtualbox/oem-vagrant-virtualbox-0.0.2.ebuild @@ -0,0 +1,22 @@ +# Copyright 2017 The CoreOS Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for vagrant images (virtualbox)" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_install() { + insinto "/usr/share/oem" + doins -r "${FILESDIR}/box" + doins "${FILESDIR}/grub.cfg" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/Vagrantfile b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/Vagrantfile new file mode 100644 index 0000000000..7bed8e3643 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/Vagrantfile @@ -0,0 +1,41 @@ +# -*- mode: ruby -*- +# # vi: set ft=ruby : + +if Vagrant::VERSION < "1.6.0" + raise "Need at least vagrant version 1.6.0, please update" +end + +require_relative 'change_host_name.rb' +require_relative 'configure_networks.rb' +require_relative 'base_mac.rb' + +Vagrant.configure("2") do |config| + # always use Vagrants insecure key + config.ssh.insert_key = false + + # SSH in as the default 'core' user, it has the vagrant ssh key. + config.ssh.username = "core" + + # Disable the base shared folder, guest additions are unavailable. + config.vm.synced_folder ".", "/vagrant", disabled: true + + config.vm.provider :virtualbox do |vb| + # Guest Additions are unavailable. + vb.check_guest_additions = false + vb.functional_vboxsf = false + + # Fix docker not being able to resolve private registry in VirtualBox + vb.customize ["modifyvm", :id, "--natdnshostresolver1", "on"] + vb.customize ["modifyvm", :id, "--natdnsproxy1", "on"] + end + + config.vm.provider :vmware_fusion do |vf| + vf.functional_hgfs = false + end + + config.vm.provider :parallels do |prl| + # Guest Tools are unavailable. + prl.check_guest_tools = false + prl.functional_psf = false + end + end diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/base_mac.rb b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/base_mac.rb new file mode 100644 index 0000000000..1f26796e07 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/base_mac.rb @@ -0,0 +1,4 @@ +# This file must be rewritten with a real value for VirtualBox +Vagrant.configure("2") do |config| + config.vm.base_mac = "080027000000" +end diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/change_host_name.rb b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/change_host_name.rb new file mode 100644 index 0000000000..bae625e235 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/box/change_host_name.rb @@ -0,0 +1,37 @@ +# -*- mode: ruby -*- +# # vi: set ft=ruby : + +# NOTE: This monkey-patching of the coreos guest plugin is a terrible +# hack that needs to be removed once the upstream plugin works with +# alpha CoreOS images. + +require 'tempfile' +require Vagrant.source_root.join("plugins/guests/coreos/cap/change_host_name.rb") + +CLOUD_CONFIG = <&2 + echo "Using localhost, for default public and private IPs" >&2 + echo "COREOS_PUBLIC_IPV4=127.0.0.1" >> "$ENV" + echo "COREOS_PRIVATE_IPV4=127.0.0.1" >> "$ENV" + exit + fi + sleep 0.1 +done diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/grub.cfg new file mode 100644 index 0000000000..d42817d100 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="vagrant" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/oem-vagrant-0.0.3.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/oem-vagrant-0.0.3.ebuild new file mode 100644 index 0000000000..97dbbee8c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vagrant/oem-vagrant-0.0.3.ebuild @@ -0,0 +1,32 @@ +# Copyright 2013 The CoreOS Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for vagrant images" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/cloud-config.yml" > "${T}/cloud-config.yml" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${T}/cloud-config.yml" + doins -r "${FILESDIR}/box" + doins "${FILESDIR}/grub.cfg" + + into "/usr/share/oem" + dobin "${FILESDIR}/flatcar-setup-environment" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/files/grub.cfg new file mode 100644 index 0000000000..67a990fe17 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/files/grub.cfg @@ -0,0 +1,3 @@ +# Flatcar GRUB settings + +set oem_id="virtualbox" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/files/oem-release new file mode 100644 index 0000000000..8a357cf6ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/files/oem-release @@ -0,0 +1,4 @@ +ID=virtualbox +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="Oracle VirtualBox" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/oem-virtualbox-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/oem-virtualbox-0.0.1.ebuild new file mode 100644 index 0000000000..5ed1442b9e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-virtualbox/oem-virtualbox-0.0.1.ebuild @@ -0,0 +1,28 @@ +# Copyright (c) 2013 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for VirtualBox" +HOMEPAGE="" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/README new file mode 100644 index 0000000000..bdc50aeed4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/README @@ -0,0 +1 @@ +The OEM version should match the current version of open-vm-tools. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/base/README b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/base/README new file mode 100644 index 0000000000..97bd5f6738 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/base/README @@ -0,0 +1,4 @@ +These Ignition configs are part of the OEM configuration. Do not modify +them. If you want to write an Ignition config directly to disk, put it in +../config.ign and it will be applied at first boot instead of a config +in guestinfo. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/base/base.ign b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/base/base.ign new file mode 100644 index 0000000000..cd57bdbb54 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/base/base.ign @@ -0,0 +1,25 @@ +{ + "ignition": { + "version": "2.1.0" + }, + "storage": { + "files": [ + { + "filesystem": "root", + "path": "/etc/systemd/system/vmtoolsd.service", + "contents": { + "source": "oem:///units/vmtoolsd.service" + }, + "mode": 292 + } + ] + }, + "systemd": { + "units": [ + { + "name": "vmtoolsd.service", + "enabled": true + } + ] + } +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/grub.cfg new file mode 100644 index 0000000000..d58568ab54 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/grub.cfg @@ -0,0 +1,4 @@ +# Flatcar GRUB settings + +set oem_id="vmware" +set linux_append="flatcar.autologin" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/oem-release new file mode 100644 index 0000000000..9d6442280a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/oem-release @@ -0,0 +1,5 @@ +ID=vmware +VERSION_ID=@@OEM_VERSION_ID@@ +NAME="VMware" +HOME_URL="https://www.vmware.com/" +BUG_REPORT_URL="https://issues.flatcar.org" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/units/vmtoolsd.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/units/vmtoolsd.service new file mode 100644 index 0000000000..85efdeb719 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/files/units/vmtoolsd.service @@ -0,0 +1,13 @@ +[Unit] +Description=VMware Tools Agent +Documentation=https://github.com/vmware/open-vm-tools +ConditionVirtualization=vmware + +[Service] +ExecStartPre=/usr/bin/ln -sfT /usr/share/oem/vmware-tools /etc/vmware-tools +ExecStart=/usr/share/oem/bin/vmtoolsd +TimeoutStopSec=5 +PrivateTmp=true + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/oem-vmware-12.2.0.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/oem-vmware-12.2.0.ebuild new file mode 100644 index 0000000000..357d9cdd08 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-vmware/oem-vmware-12.2.0.ebuild @@ -0,0 +1,35 @@ +# Copyright (c) 2014 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="OEM suite for VMware" +HOMEPAGE="https://github.com/flatcar/coreos-overlay/tree/main/coreos-base" +SRC_URI="" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64" +IUSE="" + +DEPEND=" + ~app-emulation/open-vm-tools-${PV} + " +RDEPEND="${DEPEND}" + +# no source directory +S="${WORKDIR}" + +src_prepare() { + default + sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \ + "${FILESDIR}/oem-release" > "${T}/oem-release" || die +} + +src_install() { + insinto "/usr/share/oem" + doins "${FILESDIR}/grub.cfg" + doins "${T}/oem-release" + doins -r "${FILESDIR}/base" + doins -r "${FILESDIR}/units" +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/Manifest b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/Manifest new file mode 100644 index 0000000000..55b6cd46a8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/Manifest @@ -0,0 +1,35 @@ +DIST ansi_term-0.12.1.crate 24838 BLAKE2B f636772c34e2d68cda7b8d3b2b86abda074585a62bd2654812ce92384244655a9197fa66e6939e19a674c0148ca605313d83de262bb18c2339a8a4eb4438a791 SHA512 b840e28b3e7700689a69a39659b1e066560078dd4a58326b91a028915819e7af883399ee53e920db68fd974c58d35bb1ddf8d427af5937d5f696f57c4376b671 +DIST atty-0.2.14.crate 5470 BLAKE2B 2db856a9e898a430258f059aeaf7c844a153293e8856d90ac81f7d91a888c89198768ad5cb09303c23241fe85c560a55148fa56a303651a82b0edb895616bfab SHA512 d7b6c4b9a0f898d91ddbc41a5ee45bbf45d1d269508c8cc87ee3e3990500e41e0ec387afb1f3bc7db55bedac396dd86c6509f4bf9e5148d809c3802edcc5e1d9 +DIST base64-0.13.1.crate 61002 BLAKE2B 3b3a5b26e2ef18e9b4f1ede72b1bd160a1494751878e8441d463f8a514e6cb9ac859231536989e19fb1261fd864617fe31440df1b5855a0ec625521fc6fcef91 SHA512 1eb76aff9a84057f2ccb7082e9c57b015c2d71a28173089b02e7aacd09a7d311bedf0a943529611ada29f8d7b536d7ae4de256d98eee8450003a3a9a652bda4b +DIST bitflags-1.3.2.crate 23021 BLAKE2B eb990bb27b2bdeb66fd7212ce582cb36e1c616debbac85df642d0c82b25439e6bf9b1e811fac76b59e58ea3c1bbea6170d03a61e8f9a395e4334a0e2e2987eda SHA512 3c698f757b5cc62f815f9a1cce365c3d2dd88e4db71f331dff8bba86c2865f755b81cb4c9bfc59bd86b7643b0943f9e09a7c4f8ad75eb2ab0e714803d0129f62 +DIST block-buffer-0.10.3.crate 10465 BLAKE2B 32f0089971bb759244b73a75bdbbeb2d24f0422e92ceb0ae0afe3c698e3fabb371112a2eba3dab16a3859420d492c0ac984bfbb25e59e0c31951501cc652aab7 SHA512 e29faab70f8f2965a58089728274ec34bc97d681526687868c9cb1a2c145db00717f97e77b79a04fa52bd76817d796e104b509cd2a3163085b214f8eb68ac04f +DIST byteorder-1.4.3.crate 22512 BLAKE2B d39c546ba7346df315297fc53da4bfc77ecb1f38567ddb788549ee31cae2719a8bc0b7d1f1705abb3cff033aa57af004987d90748f5a31765273b3223a011c0d SHA512 8c8000eb8ecf40351c9ce36a3a8acd7a02f81786d1b11aab85adfeffa0f2267ed74df29b2ca5d1d38128484d1d3cad2b673aa0d0441dcd0620dfd3934bb888fa +DIST cfg-if-1.0.0.crate 7934 BLAKE2B e99a5589c11d79d77a4537b34ce0a45d37b981c123b79b807cea836c89fc3926d693458893baca2882448d3d44e3f64e06141f6d916b748daa10b8cc1ae16d1b SHA512 0fb16a8882fd30e86b62c5143b1cb18ab564e84e75bd1f28fd12f24ffdc4a42e0d2e012a99abb606c12efe3c11061ff5bf8e24ab053e550ae083f7d90f6576ff +DIST clap-2.34.0.crate 202210 BLAKE2B f383adf1d757ac4b68995132b33837686ce451f85a02a8d05d2c746da398510d05d46330f3efade063c3952aacb1754cdac73dd0afcae0df5340a89f9353aa1c SHA512 c648a761b9996a7e7464a538bb53621bae22090b846a42c3b729beca3363958ae67e3da9f93f58b10a10e043cadf7ff930388680d168646178c2824177832db8 +DIST cpufeatures-0.2.5.crate 11251 BLAKE2B 2724be40d3bc0e2fda957f645e1cd6472450dee68db3592ab607bdac444283f571f3c904e47981a3fdaa06cab4032734a54470e3dd6e1b67fd856daf010e1277 SHA512 d02327a27ca9fc3c587dcbd10da6b1370671cd7b1df8dfc9078b47180744d0572ef41a7ec205ae9f1c571e5b7f4bc81278ab4c6b076c6ccac0167100e346e74e +DIST crypto-common-0.1.6.crate 8760 BLAKE2B f2422bfb89c15d47a8f91c8f6695e05eb56990a922e3cdf3d426044736f9932324c0d899a151a6df4d6683e6a6b21659c657d3988734014c02cd854bb4b924e7 SHA512 471dbc43f517089d2cfe0868e29510c6ca579875b3bb5d013c70796db969b609b6c4bb35c9a07b9a2917012dc5708b717d48e317a20038adbe7e7039bf3ada6f +DIST digest-0.10.5.crate 19503 BLAKE2B a73ef5f7b85869f8f6e2bd1c83f88f155ffab8ae1c687018ddd12f5806385a2664c163101aec84d4c20647a8bfd04095aa997e088a3f56e2664adabff1c5614f SHA512 3542fc0322a8b10dbc229ae83475a0df5f9beee4f879eacab1fda53a7b61136df2961265472ae66d896681bd17f8a68148b25827733bd782c6bae05d2f307951 +DIST error-chain-0.12.4.crate 29274 BLAKE2B d082bcbce47411477e8b597cfcb76985cc7d6f1696926cb5314f4e84d2c8642939f5263e110aaef56353ec086a21874a8093bcea1d018be81c86ca42c2c30d71 SHA512 c0ee19a0ba2d79ff1843148d0a582045e68466a9dc429e5f3c8a3a75bc1b6e0d6de03ad69fce851bc0297e7db77b2c6817a13c37e1c3d4501ed41db8a454bf79 +DIST fs2-0.4.3.crate 13138 BLAKE2B a8c53130014affc276544360425718c480fe6b6583675e15e8bf25dca0cd2752aeb0793135fce1bdc12bcfc0ef21fb7f6aa298981d61ac150300eb134c2014e0 SHA512 b83fefa9123f304e4813ec1dacbb1aee5dc0c94e1316cd7c8a434aa2a242c9c42523d2bd8232d78e6c84c4e172b5c46ef8605e93b54216a2d4496fdf885dcf50 +DIST generic-array-0.14.6.crate 15889 BLAKE2B 7beac5446f5da4d077598af43c238eb7e71a12b0b91e6be5dbfc1ca33dc21d128fc93c9c8b18caac4b88830c8c8a643f2033acaca1d9a9f3d95329d042276156 SHA512 254e6fb6658f083f26e022916795c9ebfac241b9df2d811aac8316b17e1375e1c5aa54d72f1bf6c2627a88484a7df4b14eca231c90578e9aa3d9997047fa0f20 +DIST hermit-abi-0.1.19.crate 9979 BLAKE2B 801e8052b85341cca388ada9db4b06bb1bd7b64474185b2ad06c0256b9e597639bd3dd4ba0053ea010f922e53969a4ab47b90d451fd9b94c8f2324055d151ea1 SHA512 1c877fcd562b15d2de9c151fd6c5f3ea4bf48abcb799e6139a180ffad5d64b632f0000d5707bbd92ff23a0e5f349157b9e0f5be8b50f03680b0fa47315dbb78a +DIST libc-0.2.137.crate 606185 BLAKE2B 6724b7ddc2460fef1d0f20efee8726162d904b92987f9de2d3dda06c9cd49124c9fa43a9b39e84d78c03d217ed8ffd30e0dc55a4eb31970413d56fd58ea00adb SHA512 1ef979dc59a7ec4aad7229ec5b40be0ec9a8496c7a2177d325db62f3eab00d72c8d2277d517c0093e0750de12fbb4e45b67133604afeef9153b8e1d4aa0baac4 +DIST md-5-0.10.5.crate 14573 BLAKE2B d757d4f0bca7f1226380654bea1f51b4c7cb28f6b6e039094511a49dbc714f7663c9ea1987bd2a89173a1ed66365fb648725e6a9c12c49161b88074ddf52fd21 SHA512 3d362db0dc16e5d172dd581c9daebeeef39392a605a4c7e7527c2c0378aa8538def33dcac9a1431ea4ef2a5057b8785444b2a89da0b37b18f9f8f6e94273262b +DIST openssh-keys-0.5.1-alpha.0.crate 20330 BLAKE2B 7f630c0f0d331640309e2c1c930c27b7f79f2f059624c8e5f6cb36bdf2fae05fae8b052df3d6f24a7cee526cc3f73ed1ed58fe3817a6a96d76ee62fd4af8d4bb SHA512 889d6441e2c639d804dfaf7a048a44f8c577e4b7692b5f228d29810890888a4766cd2d404fea4f7ee02fa915667178f9291130195edccd1ea65cea14cb16fad1 +DIST proc-macro2-1.0.47.crate 41955 BLAKE2B dbfc20b61443225130d08b05deeba56e63e76921e56359c9b0531798b18778d6ddcb56c3372fb6ccc68586a6c1dc725054f0e83f93e8623cb5ff6a7a2ed3dc83 SHA512 60c5d0dcbdee7ddab40664882d3cf5a868f7ea5b49ebab3b4419c3f325582b816625e73e0d1737bbd46bd7d765ece6c81c2ff4be894555d4b255f5cb9255e931 +DIST quote-1.0.21.crate 28030 BLAKE2B 547344ba9272874f5fbb4bd27a69ef5be99823e10e1318afe71971b18f37e9c73d54168f16efb82c53a332e4874c80a82ea951fb2c85fad50cdfe783622b79fc SHA512 0728eb4df7e1f7c4d32ab08c901c2c969db8eb46b03bcec3e4956a4f6b360939d32abc6b6ebd7a31058e8e9b69c3d995a24cb484f93656f05b4ee963be1c74fc +DIST sha2-0.10.6.crate 20558 BLAKE2B ceae6f1e28606371f93f5e4fd617b2cb057ed9aa4aa2d81bf4c6af4ca47d639a51f50d0fe4fa77667022c770056d6d711beb4835b2341ae0a8d667f11a4a51a3 SHA512 38dea4c300ea8dee22587ab0af6d66dbde824e1cb071e02e7790bf978efff6bdb6d4076d61c5acb38e86e69261a65811a7bd0182299d53ef053202ee54d2b05c +DIST strsim-0.8.0.crate 9309 BLAKE2B 40a8be506c43ee1ffe006ddc7dee98c3d418bdd205d57b78f5d1e4c9312feb57e1eaf952e02d92d4e0932db240c6fba45beb06ea8c4fc6de1cf1faa8b6a3a939 SHA512 1d55a8d946cd55f5f37d06aea536549ded95739fa58c0f2da285a0041154c181f663682bdcac643aa198b3e762d694a04f058db985c62ebe22b5c16327ba6d34 +DIST syn-1.0.103.crate 236495 BLAKE2B fd139b1a8b4449e9be6eddf0036c19b93b876182a03f36954f79eaf79abd5e53667a8a9fcb5c872c96639779307fa293f597831ff838a41d90e1ea201f8a4797 SHA512 3dc0f564ac1a4ce85060926c0897158da0baa127a46bb318506f4fdc79e53d9439295e8ed6a2d5ffcf15d9f6651081b7602cc2a091538e8df061b545f7e3bfe7 +DIST textwrap-0.11.0.crate 17322 BLAKE2B 257428908342774593bbd3528fcdae710712ff54e8a711393a24356d8ba0e16e466a4b20c05f942c48ca76b3b5b5aaa90ec202f782cad892caa8b71ccf124da6 SHA512 f5c0fe4f28ff1a3a0931e8e235b5157a45f67967985bcc752418c5ec3481fca44a8ae4800088889b37e8cd0533f53d3c456d5ffd19b767b3f83a87b49a2e209a +DIST thiserror-1.0.37.crate 18752 BLAKE2B b8d792715cfdffccba72af132e414a6ef28f8e4dfc0608bea49bda1bde5b6acb13da24feaabf4467b8aeace9b6d90a97e2202f7d24bfb753cc4019c2243bda25 SHA512 07f0cf9da1bf1029d70c1b6f0c54bc41ed759214683f35cf6b321ec2d69173e3da0abf80a692115a1e4630400b1fbf462878053853fdc6026edb40f7e13be72e +DIST thiserror-impl-1.0.37.crate 15428 BLAKE2B d91e9f058e1a2b722f604d9a399c0f291c5309299c4bc103427f8927ba41c9937c7e7cd4c0f394dfb9d96799be8a3d5b33f8e869045f58228a43354dead5117b SHA512 37d90875118fe45b51afa89dd0acfbe4d9852b899ad391b419b5181a92bda115cf5569ffef57caf6020964d5d847c2b1f191c99e2c0caf7d4166f531bd19f952 +DIST typenum-1.15.0.crate 40741 BLAKE2B 5752d80396d0a37b0069b98ace9efe96d94ccaf41b33b8149c8b8c6a767537dbffe64251bbf61f3812465ecbc8cb45544f177dc97ac9735d84454282e4d1ed66 SHA512 a3c1ceac85e1aed98d0829449c35f4f36db860218b955b4e5f8f01da1d27ee6213f3c60e2b25c3745dcd67369049da5de737a9473fa9402db99cf7cddeb42288 +DIST unicode-ident-1.0.5.crate 35455 BLAKE2B 7e14ce97ac53a88ccec015dea690918a673dc5b49e44de7fdcb5421871da35c4f514c6db9a363d6f4bfcf2e9a61a50a593d345d0b6f388ea882b17a00cd0335d SHA512 d355370daac356d900cd4c0a792d6c0eff114524c4bffce4d7e74469fe2117883ee00bf0e27d950b72e88739473f2045d5f83440a0aedfede97b4d9163b64a6c +DIST unicode-width-0.1.10.crate 18968 BLAKE2B 6174e307fd3ee290d0a5d1d31233baaa5315cdb73f19b8580718e9f9eb04cfd3aeaeb474af1e50c4b9fecc6fc777937dedc527c9dc9ed14ccf42af099e591f31 SHA512 9836a8d489d18ea1ecfe1957ed6d5da7dce825e138cd1848aef093fa8d2eb83fcf01eabb1a2446df4f5ede4e67316e9e81b5d58b59d4e8c5d67870e8fa5dca3b +DIST users-0.9.1.crate 20456 BLAKE2B 49a2dd188f8d944d361a4e58f3f437718af7510c2b684e22209058e97dfd9d5ecec2c901cbe2cef36ab74d11091b1280de8b94135da523f57b02372ed5571fe0 SHA512 e372f8402d241e924c77a13621053836a1a36a6a6b9b66d5e187a582be0a85638270ea140c048e07f6739ed228711095fc98705303c499f2b542fd548df0819a +DIST vec_map-0.8.2.crate 14466 BLAKE2B 8f109fbff19604b82ea2aa61c952e2ce9b5597ccc8e1ef4e847648e2de08dece8c4debe92889edeccb8d393645fd0b62436b49d236ded7ad181c4a51239a9539 SHA512 4f1ef59bc2c437e79f1f84fe021bce5aa8ccd581f500f3d5776913d5f17d45b03ccee64f5bd03d47656318cfc9344a1f4311079d471fa409a8e4e94c143973f9 +DIST version_check-0.9.4.crate 14895 BLAKE2B fa1fa4008af165bfc1fdbe560488afd9d232cfafee94104fbcc4cbc52f234849bff9ddfa88109a1ac682f6d9c1d86b0459893d223f64e65adc08966aaf93dc89 SHA512 b172dc9a3759a4a683ffc39b9a40b03b9974b626a088217de87090466cef695226557c226cf3e469b2b25ee7297b7eb0d7719878cab42457f80146a81943c0c8 +DIST winapi-0.3.9.crate 1200382 BLAKE2B cb5799749ccd935ea2d7068d953cecf19f543d9db7dc16ad4584bb7005373ada34937a3ced7225544d8bc765da599911c7a3190efefb3a25b7c1bb7123b4f673 SHA512 ff8b7b78065f3d8999ec03c725a0460ebc059771bf071c7a3df3f0ecd733edf3b0a2450024d4e24e1aedddaecd9038ce1376c0d8bbf45132068cf45cf4a53a97 +DIST winapi-i686-pc-windows-gnu-0.4.0.crate 2918815 BLAKE2B 4d357e4d30f9552972170d65b9a5358b69c46a3e772fe05efc22f3d4ffc1caeeaad7aacdc7abd503a7ad0545f8bd7d22bf351dcb6df76f812fa4d45c34d65df0 SHA512 a672ccefd0730a8166fef1d4e39f9034d9ae426a3f5e28d1f4169fa5c5790767693f281d890e7804773b34acdb0ae1febac33cde8c50c0044a5a6152c7209ec2 +DIST winapi-x86_64-pc-windows-gnu-0.4.0.crate 2947998 BLAKE2B 2ad1ea8b5fa07d544e910ccba043ae925269b76b26c9da356305b34b86741dd8b9aff0b9ffe3d562db4fcd7d7c46a11ce9e3168b782b1d89ae6881742b7ede82 SHA512 4a654af6a5d649dc87e00497245096b35a2894ae66f155cb62389902c3b93ddcc5cf7d0d8b9dd97b291d2d80bc686af2298e80abef6ac69883f4a54e79712513 diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/files/0001-eclass-trick.patch b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/files/0001-eclass-trick.patch new file mode 100644 index 0000000000..3a66228dfc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/files/0001-eclass-trick.patch @@ -0,0 +1,40 @@ +From b91011089663e9633e0f0866eff618f8b6d16b3d Mon Sep 17 00:00:00 2001 +From: Kai Lueke +Date: Tue, 15 Nov 2022 18:55:42 +0100 +Subject: [PATCH] Workaround for the gentoo eclass + +--- + Cargo.lock | 3 ++- + Cargo.toml | 2 +- + 2 files changed, 3 insertions(+), 2 deletions(-) + +diff --git a/Cargo.lock b/Cargo.lock +index f9e965e..f3827fc 100644 +--- a/Cargo.lock ++++ b/Cargo.lock +@@ -155,7 +155,8 @@ dependencies = [ + [[package]] + name = "openssh-keys" + version = "0.5.1-alpha.0" +-source = "git+https://github.com/pothos/openssh-keys?branch=add-sk-keys#66e2295928e09c596ba258482b0fad78f50d167b" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "91103a05342d53a67cf387a8610e523347143a4230814f385d31759431ddfa8d" + dependencies = [ + "base64", + "byteorder", +diff --git a/Cargo.toml b/Cargo.toml +index 1ff4f81..5ff86d7 100644 +--- a/Cargo.toml ++++ b/Cargo.toml +@@ -14,7 +14,7 @@ clap = "2.33" + fs2 = "0.4" + # Public dependencies, exposed through library API. + error-chain = { version = "0.12", default-features = false } +-openssh-keys = { git = "https://github.com/pothos/openssh-keys", branch = "add-sk-keys" } ++openssh-keys = "0.5.1-alpha.0" + users = "0.9" + + [[bin]] +-- +2.38.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/update-ssh-keys-0.3.0-r6.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/update-ssh-keys-0.3.0-r6.ebuild new file mode 120000 index 0000000000..e2e03e9c09 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/update-ssh-keys-0.3.0-r6.ebuild @@ -0,0 +1 @@ +update-ssh-keys-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/update-ssh-keys-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/update-ssh-keys-9999.ebuild new file mode 100644 index 0000000000..1f2e9b9105 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update-ssh-keys/update-ssh-keys-9999.ebuild @@ -0,0 +1,76 @@ +# Copyright (c) 2017 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +CROS_WORKON_PROJECT="flatcar/update-ssh-keys" +CROS_WORKON_LOCALNAME="update-ssh-keys" +CROS_WORKON_REPO="https://github.com" + +if [[ ${PV} == 9999 ]]; then + KEYWORDS="~amd64 ~arm64" +else + CROS_WORKON_COMMIT="fd2490edf05579f81bc587bcce2279e596bd6ddd" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +PATCHES=( + "${FILESDIR}"/0001-eclass-trick.patch +) + +# sed -n 's/^"checksum \([^ ]*\) \([^ ]*\) .*/\1-\2/p' Cargo.lock +CRATES=" +ansi_term-0.12.1 +atty-0.2.14 +base64-0.13.1 +bitflags-1.3.2 +block-buffer-0.10.3 +byteorder-1.4.3 +cfg-if-1.0.0 +clap-2.34.0 +cpufeatures-0.2.5 +crypto-common-0.1.6 +digest-0.10.5 +error-chain-0.12.4 +fs2-0.4.3 +generic-array-0.14.6 +hermit-abi-0.1.19 +libc-0.2.137 +md-5-0.10.5 +openssh-keys-0.5.1-alpha.0 +proc-macro2-1.0.47 +quote-1.0.21 +sha2-0.10.6 +strsim-0.8.0 +syn-1.0.103 +textwrap-0.11.0 +thiserror-1.0.37 +thiserror-impl-1.0.37 +typenum-1.15.0 +unicode-ident-1.0.5 +unicode-width-0.1.10 +users-0.9.1 +vec_map-0.8.2 +version_check-0.9.4 +winapi-0.3.9 +winapi-i686-pc-windows-gnu-0.4.0 +winapi-x86_64-pc-windows-gnu-0.4.0 +" + +inherit coreos-cargo cros-workon + +DESCRIPTION="Utility for managing OpenSSH authorized public keys" +HOMEPAGE="https://github.com/flatcar/update-ssh-keys" +SRC_URI="https://mirror.release.flatcar-linux.net/coreos/openssh-keys-0.5.1-alpha.0.crate -> openssh-keys-0.5.1-alpha.0.crate $(cargo_crate_uris ${CRATES})" + +LICENSE="Apache-2.0" +SLOT="0" + +# make sure we have a new enough coreos-init that we won't conflict with the +# old bash script +RDEPEND="! + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.4.10-r10.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.4.10-r10.ebuild new file mode 120000 index 0000000000..a0bfb1ef67 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.4.10-r10.ebuild @@ -0,0 +1 @@ +update_engine-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild new file mode 100644 index 0000000000..297549bd82 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild @@ -0,0 +1,107 @@ +# Copyright (c) 2012 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/update_engine" +CROS_WORKON_REPO="https://github.com" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm ~arm64 ~x86" +else + CROS_WORKON_COMMIT="c6f566d47d8949632f7f43871eb8d5c625af3209" # flatcar-master + KEYWORDS="amd64 arm64" +fi + +TMPFILES_OPTIONAL=1 +inherit autotools flag-o-matic toolchain-funcs cros-workon systemd tmpfiles + +DESCRIPTION="CoreOS OS Update Engine" +HOMEPAGE="https://github.com/coreos/update_engine" +SRC_URI="" + +LICENSE="BSD" +SLOT="0" +IUSE="cros-debug cros_host -delta_generator symlink-usr" + +RDEPEND="!coreos-base/coreos-installer + app-arch/bzip2 + coreos-base/coreos-au-key + dev-cpp/gflags + dev-cpp/glog[gflags] + dev-libs/dbus-glib + dev-libs/glib + dev-libs/libsodium + dev-libs/libxml2 + dev-libs/openssl + dev-libs/protobuf:= + dev-util/bsdiff + net-misc/curl + >=sys-apps/seismograph-2.2.0 + sys-fs/e2fsprogs" +BDEPEND="dev-util/glib-utils" +DEPEND="dev-cpp/gtest + ${BDEPEND} + ${RDEPEND}" + +src_prepare() { + default + eautoreconf +} + +src_configure() { + # Disable PIE when building for the SDK, this works around a bug that + # breaks using delta_generator from the update.zip bundle. + # https://code.google.com/p/chromium/issues/detail?id=394508 + # https://code.google.com/p/chromium/issues/detail?id=394241 + if use cros_host; then + append-flags -no-pie + append-ldflags -no-pie + fi + + # Work around new gdbus-codegen output. + append-flags -Wno-unused-function + + local myconf=( + $(use_enable cros-debug debug) + $(use_enable delta_generator) + ) + + if tc-is-cross-compiler; then + # Override glib-genmarshal path + local build_pkg_config="$(tc-getBUILD_PROG PKG_CONFIG pkg-config)" + myconf+=(GLIB_GENMARSHAL="$("${build_pkg_config}" --variable=glib_genmarshal glib-2.0)") + fi + + econf "${myconf[@]}" +} + +src_test() { + if use cros_host; then + default + else + ewarn "Skipping tests on cross-compiled target platform..." + fi +} + +src_install() { + default + + if use symlink-usr; then + dosym sbin/flatcar-postinst /usr/postinst + else + dosym usr/sbin/flatcar-postinst /postinst + fi + + systemd_dounit systemd/update-engine.service + systemd_dounit systemd/update-engine-stub.service + systemd_dounit systemd/update-engine-stub.timer + + systemd_enable_service multi-user.target update-engine.service + systemd_enable_service multi-user.target update-engine-stub.timer + + insinto /usr/share/dbus-1/system.d + doins com.coreos.update1.conf + + # Install rule to remove old UpdateEngine.conf from /etc + dotmpfiles "${FILESDIR}"/update-engine.conf +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/board-packages-0.0.1-r10.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/board-packages-0.0.1-r10.ebuild new file mode 120000 index 0000000000..b6c615eeb3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/board-packages-0.0.1-r10.ebuild @@ -0,0 +1 @@ +board-packages-0.0.1.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/board-packages-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/board-packages-0.0.1.ebuild new file mode 100644 index 0000000000..0be0428a6b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/board-packages-0.0.1.ebuild @@ -0,0 +1,39 @@ +# Copyright 2013 The CoreOS Authors +# Distributed under the terms of the GNU General Public License v2 +# $Header: $ + +EAPI=7 + +DESCRIPTION="Meta ebuild for building all binary packages." +HOMEPAGE="http://coreos.com/docs/sdk/" +SRC_URI="" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +# Depend on everything OEMs need, but not the OEMs themselves. +# This makes the built packages available for image_vm_util.sh but +# avoids copying the oem specific files (e.g. grub configs) before +# the oem partition is set up. +DEPEND="" +RDEPEND=" + amd64? ( + app-emulation/open-vm-tools + coreos-base/coreos-oem-gce + coreos-base/nova-agent-container + coreos-base/nova-agent-watcher + ) + arm64? ( + sys-boot/grub + sys-firmware/edk2-ovmf-bin + ) + app-emulation/amazon-ssm-agent + app-emulation/wa-linux-agent + coreos-base/coreos + coreos-base/coreos-dev + coreos-base/flatcar-eks + dev-lang/python-oem + x11-drivers/nvidia-drivers + " diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/board-packages/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/Manifest b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/Manifest new file mode 100644 index 0000000000..2c9c729562 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/Manifest @@ -0,0 +1,133 @@ +DIST aho-corasick-0.6.4.crate 25443 BLAKE2B b866fec3f2d7bf39152b30d4c95c921c3912c832cb5d7016c771bf19cb8bf02851ee942c891cc95f339b35c0545f9b45e26ce893486660b26227129aa7792b84 SHA512 0191f627896469bdb271f1b9d2f3d3b0f7952579cd07c2659996ad66a961dbe605c6a4a929100d6b9c246e65199c0e180b1e8349943f06a6f08250e003e62b65 +DIST ansi_term-0.11.0.crate 17087 BLAKE2B 9bd35c045a01ce4c6c4a5db1b4f15e9412bb97426eec19d4421dffbec633de8d13452c13c1dc1b30998690b78d7ed38311aca700087f13a81f66bd1d5d7300c4 SHA512 a637466a380748f939b3af090b8c0333f35581925bc03f4dda9b3f95d338836403cf5487ae3af9ff68f8245a837f8ab061aabe57a126a6a2c20f2e972c77d1fa +DIST arrayref-0.3.4.crate 7028 BLAKE2B 90a1d155801035d6883fd40b636e9c5c1f20f56b0823346f841035c8b93cdeccc9c62e448e0bba6c56daf7a6bc11d483728e85a34ed814330b7d53e7519dd3c3 SHA512 64a53e4fa200b2a43396ae79e7bebf9f7d6e97ce407f97493f80a220bdeac795915ef267804a137426ce2322fffdff1768bc8fbeef8436cb99cd95e79d7493d5 +DIST atty-0.2.10.crate 5962 BLAKE2B 36a2fe57eb500124f20464a7d67f86bc6270c2143f8273683011599adee180ee71fb0ea565c38171b9d471479d63041e4bbba4f713dfb92239b7d298e9d89e7e SHA512 76cbf960475073101d617bdaf12ed1e93dfdd96e22182674e1ec04c955fb1de2e3aa132345c50a1bebc579932d43c74c9aac64ae64107e98648a0f1f6562285b +DIST backtrace-0.3.6.crate 28437 BLAKE2B 63f056086b8c56707e7a3f9719e211a70368584c85a6a3b05ed8ad31cf3ac86f6fc091c826392439fcaf9a0f4066de8da00449a9715d90c1585d450fff63bbdd SHA512 c42e9891a2297aefa08e6ec627520bfd3f93f7eddc2782cb5eb277092d588b1d84e75ac724d29548eab77de19de3400748b90bf2eccfed5ce1e20a979dd210e6 +DIST backtrace-sys-0.1.16.crate 283418 BLAKE2B d15f9c692dd805c61dbd219c70f0b47bb6d2a18bdb2657bd5b5bf6f94f1df621f6be56e2774d2d5d218f044c1358b1af4251705123c5d48ce5575ff3a2f3b50a SHA512 2fd32fee7c13d1c83be5e86341a4c1c0da06876a73a9fb74c680994132510eac9a3444144c97ddcb78919da044e628650d604a20a06ca7852289168da8d754b4 +DIST base64-0.8.0.crate 33091 BLAKE2B 9e72a457841f532956b684a30906924756fd791da2b1fbe6cd0ff4c418738f6eeea15d1a8379e6e033d0acec17736c78c4b01dd352dd5e9d59fd230be91235eb SHA512 7ce30633e5fa48cf0103ec66183192ecfec03a64b8147f42e5fd4dc9bb0d2e7885c19f7aadb130d306b8fbef6798b97199a1ab65b7c19a08b6d35d2e076d518d +DIST bindgen-0.32.3.crate 172240 BLAKE2B f0f71a49778fb0dc6f99c690c9bb06975d181c686bac60b0666190ec3df3f11f2fb098f0364bef181daf3ad7190c097603014b226ea64452c7a9dfb314c41e75 SHA512 c20b844849d2f67f3e4d4b39ee372833cc94082b749954bb5969fe20b56bbdd01d28383f97a6ec70cd358e823aa1fc192165920fd6a6abe843739d07c5028a67 +DIST bit-vec-0.4.4.crate 17895 BLAKE2B 5c53607cd8a88ae518ccb6a1802ea56b67f619ade59ee40c13ac87d8a0bc2c7179eac8a27d075c3bfe84c166356fbe8a7e488faf2ca9567988cd256d7d6e2a47 SHA512 e42790ba17117c5b60c5408c06097ee6b0e142995cc32d6b626a31ef17e054f7fde7af0792cfeb38290b54a822f951ba06f4794a1e8a4e03934447eec1f6e021 +DIST bitflags-1.0.3.crate 13838 BLAKE2B d053495250ce43970d4dbca6ec7dd541e5f5ca6597f35b8ac7cae3230e80f95d8f056f3ea030c12dd02228b51184c8020f8d2ab5ee4da4dad88a97638ea3db41 SHA512 c1410967948a0c44c434bcf952c586166cea656f98532980156bce5eb68ea2966ad7457abd2e45e7444d346f47950aad9d6b4d6779486cddfbda70dee5716bd8 +DIST block-buffer-0.3.3.crate 7070 BLAKE2B 696a4e1d56b684eb1b03cb0851724d5118e02c4e8d428c8e4d22cd2b86e8120c7524c9a6298657c5869f33ff6367aa343f583cf42dd8b48e83b3ca849070827a SHA512 4214c64c16e66824776ea141241e2c2e5ec8249e99ce9706eb573b13e338976388338d484528d41587af48ece63e5403c813c43578457b7a550b7db31373679f +DIST byte-tools-0.2.0.crate 6454 BLAKE2B 8fac079ccb1f8bdafacfd54d0bb20628b3c1c08ffdc86feb70c44ae973cb36dbdb8bf92fcf859535d5de0098b936592db68e4951edba8890902107d8952fc314 SHA512 bad83b237d3f8dd1784f9031f26dd8ce2772aa9d307951cf6f5eb6c445567f80b554c26f597a2933d4164adc110e42db618f35ee68e951a0bb837abf20f6b0b5 +DIST byteorder-1.2.2.crate 18909 BLAKE2B 69b23142053a738768028a9b28935461d5f12e1ac8849e30a007e7f223efe81004c4815ba13b92fa9e23867d32867810d889586f4d70bd5bac3280dfa5a6eb51 SHA512 b3b0aa23f0d6a5023fbc8571e73cb7aabd8148f9dcba8da9aad49cabf97dabbbb3a05764cd3604edbd00ecb56ee0695cd30a67d9d51264539169e400d7bbc478 +DIST bzip2-0.3.2.crate 14720 BLAKE2B 532e2e5e41eb2f24a2a96ef5313da1f6c12f2a6875179c1b57c0e44f86380699fa607c3b470b584b6c0407611cb12f90188cf549219e789f561067dd75ba2386 SHA512 da7fca72b1a4e476d39fc670fa7f92bc3963c21c19cb6fe4ac878a0dd4d2a72d0795087b3bbeeecd3c600b7ff8e353dd0217c3a17c9594e1ba2a774bb8aa70a4 +DIST bzip2-sys-0.1.6.crate 609274 BLAKE2B 8203c31de6279f5f80fc2549978eb2762630e43d85ee534bc942b36fb00daa076ed8314468a84c4ab6320948c80b1b0d455d571873fe60703783dd3eb67531a1 SHA512 d7c69e8eff1b9f1317577ccf0cbaffb6ed284c3f1f6c18db96e2e5380e69a818406107e6bc2634222c2f3ed56c478a1cb9ca58b7b3df29ee4a82e76493533d63 +DIST cc-1.0.15.crate 41839 BLAKE2B a00d432720c168b0d69fc7d321d3abec3e18662c6e0c44e6092482e7215dc51688b1f01888150f060e57c88f3003e58b5f8985f1dd31731bb259921bd7a45d9f SHA512 220b88ad675b076b6fc322253f4f8de641fb2c3b27814a3fa5fdc2f79c52e93f2de4e6fc176a6d3a0b7a9fff46d9bd2d4396310cfde4a68f7082224510a9a831 +DIST cexpr-0.2.3.crate 15747 BLAKE2B 59f416a367b2d129cbc520a04fedf867740e0bddbf9cbf9ace4ba0396e9168f066b517aac365d7c40c40eced6667f4cc5d1fd42b7142c275d1533ee5c16a2bf0 SHA512 93d87866dc192af4c091dc43484af58da6470cdec61f1b638abe3c084772efc084ce3a04ae3499a7c7dd89a19b672f383c68e74444fe67a984bcb1d968ae1e2d +DIST cfg-if-0.1.2.crate 6668 BLAKE2B fd1960dfd30b3514bdb9943dba6418957068aaad3548667216d6dd4e4921a0df07d96cc4131f7b5121cacfb91aa59a802a47663a7b04ff401fa5b25ee1d321ea SHA512 ed6732d8ef2c99d99861f5dcfec3bcd2d1b62dcf6e8e4e88ca25148b5566f86418270dbbe9a7d2fae62a8320d432c5e0474059fa25a11c0f66787084e36f36aa +DIST chrono-0.4.2.crate 129309 BLAKE2B 691be25cb01dc36b65dac214b7e0246515f85d646deb2754adb53243ccd30f84d659eef6c2c2d9169af98adfb27b52dc04a345ce6ade3236ece4a37cf097d4e7 SHA512 1433e5293931b41598ff7e50f233c8b17c6297617fb86ea293ae0f6dbea2d074b896ea8eb63edd4fb0f5c16fb8663666370cb76e7b3789efade06af202d6a74d +DIST clang-sys-0.21.2.crate 31272 BLAKE2B 35109e6bf0f4f7167510f96a48aaf5c2d927164924ab3c22cc3d69fbda79efdb01644b48b07203eb20890750c42ff45d159e9185f21984af6fd61cc2b163fc0f SHA512 01209eee3355f63952f05039fc2c5c044de9c9c8709dcd7a8d37326a5b8807813d0ceae8ab559efa8676cf501d2e34ababb4aab159d40815df330cb936318ce7 +DIST clap-2.31.2.crate 194051 BLAKE2B 67ff210e200d387008fb5ddbb4b0a7961f568886a4df57b12b8aa1dd4c87b0408d11d9797980f3dadfbc9aa30bdf71586474a3d905d0d45eee13165692505bb8 SHA512 f43c3e2736a7fcd5c59ba4c80bcdb28fe436b85fe33ef74a53b76b7aab009d9315d2be007a52c1abdee2f754b118ab8132640e6e6954fd60017a17d0cc086127 +DIST cmake-0.1.30.crate 12477 BLAKE2B 23529899687c844e3d0e864272d964d5d4ea1900afbee9e4c323a4712fe9341378f41667463cd3b9e6944bc56c123c6331161e25e8816143a8efc3109164e14b SHA512 c27e7b6e50e77409f1e7481a88839e2de64ce6d94345cd955e9b3ff6f5720a090f02adcc1067113471cd48125b236952c0177920be7e03cf15bf2baa323788b1 +DIST conv-0.3.3.crate 22124 BLAKE2B 9a05d9beecbd288168438e920ab4f42075f1217f224c9dc91d8e23869808868274e108ae5f881da157276cd407a63f2e8dd990b7cd9fa1731045c2cbd2f3a48e SHA512 f050cff8528f0fb5a8dd936995c423c5478afc47041c3a8cc8611ceae3228098b80589fdadf78d0028e960fa354768440dd7084cf295a29f2c6aeb554f47a8cb +DIST cstr-argument-0.0.2.crate 4402 BLAKE2B ae1de0d3c0ad08619b91a55cdeb202d726702c0bae1dfc9d6d5c6db137e03636fed5cf28575076d7c496e962c943a4c74cdc386dc9b719b5d8c50f8c5733aa18 SHA512 2039633777ea82202430a22d0f34aa6e3d5abcbb2636c70ef211bad747ab588864acf6a6fab10e88b7135d6dd7b89e39880d5106929ceeb409bf2aae2a46018d +DIST custom_derive-0.1.7.crate 10700 BLAKE2B 205c46bd4f052873ff9790974052f8d81ca1fb16815b591d20db96fb330ef5b782a54eca9c07615edc5e55ba93eb38fcd37c1225f49251e83ea6059ed2cc3910 SHA512 593a98f7c9adfbd07eeacbc6915d3de053ffb33076099f425f5a72c089ee0dfabab8ea31f525cd3eb5da5c19782925ddd14a3672bd9999c6866fd9f14150518c +DIST diesel-1.2.2.crate 169803 BLAKE2B 8b5d8ffd45dee99dfedc85b66f9bf31b728f68c1be24684f25ada00bb1694085f58724df092639c4f10ce2e98b52167ed00108feb8ab4417459f79c6a9b3e13b SHA512 f9b8e47e83d8a5bfe42bd74dc5159a07cf8d254797815c4b982753f58e945d3bfe3d973af02cde08a0746a6a0f1518a31da84d23564dccc13fe9ea539fe2a196 +DIST diesel-derive-enum-0.4.4.crate 9636 BLAKE2B e17461f4f65abac2602f10a0e2ca3ecaceda3b4027ddb230be5e01fcab212a253b21d4246d034ef4de2d3c4493e3bd78d4ef4e561cf8ea4a6690cfbbf58c0356 SHA512 98610d5ebe65ee9343e6c387aa3aac1606bc7d41a6ec24226d45a5351a9b0cdcaa6da689bf380bf83a343367c9a5dd647eb662fda3da947eac1e1f91383e1e80 +DIST diesel_derives-1.2.0.crate 16087 BLAKE2B 5406f7120ba5c1a66c981e06cc36477b98be148348ebb688ea6cdd21088fe297b766e09f841e741bcc99732a7962bafcd6151eb10f8d4ce559102d07b9e01be5 SHA512 1dc38f333c6ce8b660318130e52f45b665a8a44853789c0dd0bbc689c3a0c0f860d20bed552622b23257e77602b803399b1d44f8556a508bb63824e7a976f0d0 +DIST diesel_migrations-1.2.0.crate 3081 BLAKE2B 4f18cab86c00071d7e177f4d3647246f7c2a0a29bea6a086ac18f20d34c932e614ae0f9c1dac5f8e7f4ecc7a32d2e96b10fd122314a362689a65b74d45c3df13 SHA512 c3c2af2993968c703728831cdfb2e4792ef07d005beb96f306e52f73aa21c7943a35310afc8b2517e7023279768cb7f34092b81c8c27ae9ca01ddd2c726bef08 +DIST digest-0.7.2.crate 8386 BLAKE2B 1b83e7ddcd3ab570381a25097eb93e51744d3df76d9b64be9af46594373e6460668f9ea58e94899119df4278720781261d319eaf2ffc5190c0a1d7389e5025c5 SHA512 8232be4fbc7a77d437933d18423ed6c113abbc84084ceb998fac26413b374266975fd3c00e90131985c800dd0b83ff006dd9e77629d2e6ee19638bd67295ff85 +DIST env_logger-0.4.3.crate 10891 BLAKE2B acbe308cb75ad68f824dd8cbbef13a9bab3234f121952f16af274180ce87bbde6f6327bd98f0d2a4623fa7a4980b554ffecc9280b709df1323de149399537d6d SHA512 ba2c10608f87804e528a2de28c236e780485413dbc3835b5bd9acf4a9c11d9c66665a310747b5d8a5ef7752186ab8a1ab5fbf6042657a3447380cb0869722246 +DIST error-chain-0.11.0.crate 27207 BLAKE2B e50c4e2d6a173e9866311bb81adbde4bddd64d529bfcc919ecade60926112b537cff491a4ba8e84586b3dc63e87e2b3c0695452c165ddf202d6901b2d6247f2c SHA512 a7c06be660a554b4c50deacaf6ef0699cf6e8cf234d9610324c70dac0cffeff1540dfbf10efd41427858551b095c998d670f1287c9459c35217bd78d8887c60b +DIST failure-0.1.1.crate 26782 BLAKE2B 6e00d30bc0189325e540a0a9290e517747ebbc79a94a884540de1f46fc0a64d257b59604725cdc30e62731b51e45b6aec215d2d488bffea6511b6ff53be50a0b SHA512 3c4075dc13c3ea6557582455ab3bb35ea81bd43892de5fac103e7dbcdf24ca3614e3b3673f694256d9fb9c6bdf97375ea17fbe290148881599403c01dab0e5e4 +DIST failure_derive-0.1.1.crate 9312 BLAKE2B 14dcb7bab17f874e5f3efa9abd059e079a4580d918017825de104851fab0b0cfb88aba4f71513f387ca645ab74a3199c5f0268853c156111c67351e1c7e9327d SHA512 885b45ebe5098f04699bc0c7cf2b6816d3afec6f111f8d244b0fa824c0198127ac3062e23c052186e196832755e9e0b271e5efb005df35e6d1e4d671640b8e91 +DIST fake-simd-0.1.2.crate 5398 BLAKE2B 40437b18ca7b77258577f518232dcf67e2bf09b64234dc3f02b9eba0c5c1fede8f8d1dc7cbc112ce80e4f0bf317387d1b8046d41a4f83a7c54981fd2b71fc8e2 SHA512 d57242c54ea3283185eaecbf8d96a4c9decbada3ae3aceb516a79710be9bf038a6e06a29b9ba4ebcd41b8f42943a3024a983ea23e36b17edc445a8c4980f2893 +DIST flate2-1.0.1.crate 61869 BLAKE2B 3f9b94327ae0d044f962759fe498776d7bef014fb93328e3454f5cd8f37c8ac8c8c5d3f38825e4744a07dc873f93ba5fb420450677a55622afca8492c9423057 SHA512 2be6cf3228e9df76643e7b45ab1ea4956e7618e90e9bf8cce62f6d0bac864e2bd7a808aad1b54728797831b170801acf43a6a254d9268c8fc57052f1e2d172b9 +DIST fuchsia-zircon-0.3.3.crate 22565 BLAKE2B a4dac3457036efab8f79fe5d5b4545e4091e994d3dc63188f71fafbcc28bf98ef359dcd20add30ac1d990ab2e66159723302fb66697349c65fab0aa58d54535e SHA512 a43ee59452d49742111e506d6bdd8b8399a3a646e08648e25292864d7f71460c1dd1f2d77b8efa8ed09ac21fa4ff0442a2709f16d8833a3849bde0c388d83a93 +DIST fuchsia-zircon-sys-0.3.3.crate 7191 BLAKE2B 530bb5d475ac828843af248c6bbd24ca3b5dd8118c8884ccc6d7261818cff1c79038077114ffa04bc73a078177527824c4d9d20a9b022e4057afee3330258cff SHA512 978b7e8795a5877a68409ed3a1d7b4246263f8e7e7ce9ba8a022643be98f58f329cc1c234717df80a509db849da4394f39e90a8e2a6f56f8fa8dd3c07e7d4386 +DIST futures-0.1.21.crate 155902 BLAKE2B 224db9e9767d76daccb8dac39f8b9f536d53829334a8dca0e14ec9f1b84aaf387d4bedbf116b635a4f3d63c7ec38a771f4ecee269a64d514e813f7a21f14b679 SHA512 b6079674974489fc325182404896ddd6c2fb3a3a230d0a5ebb611a418a404378442550c92c9895aad9742a6d305a90f3099c9d6ca5bdce55ed1dab2b3e01e755 +DIST gag-0.1.10.crate 5491 BLAKE2B a734246685628166de020a44d34968ecc53739f65e058d9208b133afafaadfc187697076b3b6aea158442178495f8ba53c4f6a77723da88ba72127e41c509cf6 SHA512 db76c8acedfc9ddd255f6b4ec1162c6f0391578b603807ac725564b79f2af7f78c231f36831e574775c22626ffd8f2309126ab862d43abd12345cb013fcc6d32 +DIST generic-array-0.9.0.crate 10702 BLAKE2B 4b8216493f7ffbe4dd6633b0595c0e0fc70aeea7de19da510241fbac3af4dc02e12c7986361246b1fd7167f73e0a1435b80d64804cc6fb66174d42825be79ab8 SHA512 e2a00d8856a4231a5c29bae592b2a84b98c70737058104fd67570af1220259994d11cb4506f1a1412f3c8a04576fe2617ef015600f677ecfccc8ff7a07425400 +DIST glob-0.2.11.crate 18065 BLAKE2B 8531890ce378023f0119baccd5c556f297128d3f09c07d320d5cdc3c90032447f2e5a4f2fad0097bd3c6faf93b83256b387d232b3c9f9d3c40e54c48245321eb SHA512 91a1a751bc4ed3b13154aa056180f2b8123c33627cbe972bdd7986fb0b6f1ef90e59abd4128d6e4db5e69523d757440c7df9b9721a61f5ea5a091ffc9843e10e +DIST gpg-error-0.3.2.crate 4161 BLAKE2B 1fccab9b0a2e35c721ec168635d2a757f49b085ccf625e9d8def40e3d536319c061618910565fac8a0206efbd3dfde8d932e06f41810d7334643d221a836b8e2 SHA512 5dd640067556e00f3ec51cc9869a81d10e243b6db85d8da2351a97f3b8052d3097d7436f2602770ad2d4712e936b47bcd3116b2ec80e41ab088e13ad12725f93 +DIST gpgme-0.7.2.crate 75595 BLAKE2B 608d662a62c053fa038b7933c5c512953bfaed8e5f685c36189a60959b20677fc1b42726ec2ab4f09368d6b368bb5f7a749d10d68c1bec08425725d60425de5a SHA512 f975ba04a380dae698d5360ff31c0100149e6316a877ae9dd1029b6cc99bc2607bb5237ecc84b69e5322b4ca9a3021cf9da2e899304fc3b74f76a6b5f539d119 +DIST gpgme-sys-0.7.0.crate 1799939 BLAKE2B 9dff707f1c93a05c57f79294df47d630efdb136c60793808fea4f3d6a16d873b22ea2c6406f286ae1d33445a909084ea25d668372862a1c479f16d150aa5bac4 SHA512 d7f85d3013da0dc0f23715601818eed7e3b88f09fae1ac00068177f8caa42cbcd0ef80fba2049966e2452f08b7ad15a4ba2caf68bf95f21848ea53b16ce3012e +DIST grpcio-0.2.3.crate 47106 BLAKE2B e79d0e437c3780ef0028ba968f8d8ae4843e168f86efc626f1fc57caf79083150c12b443e20d08af0b04884468cd7d2cbcef2abe9ef7a172e2035c8533deda72 SHA512 03dc64dd058b8302971032b01e250c7ab55213b51cf81fc5a1824851ad5d9f0417d7495b10c98782c0ae6ba75f9350241d01a81e469c0945bd185363712349e8 +DIST grpcio-compiler-0.2.0.crate 5456 BLAKE2B 9e9d302d860e305ad7ba67b43776cacc4d6438fb3b3d0dbb4812bea80198268444e05304582eca75d944386f368aced0ca94be9c67602ff72cb1d97a16698e70 SHA512 d693ad6d60123992984341ccdf671b37ad6cf5949154c0435da85a8f2fc3ecd975c56a0d0cc608c3fc6169c6849b1371e274ffb8a9d24c429203bc5868404a1f +DIST grpcio-sys-0.2.3.crate 8844428 BLAKE2B f397e64f643bd5060eee6044c63a6180205e34c3064c0e79b1a8af1f1a81e2a1fd2922c302b5085f983488b9462ebda42d2d153cd9e59ef50499c5ebe2fd362c SHA512 23cac70f2e1a2b70e87bc10ef5b08bb23e47811f5f1ff4e095a6ff185c6f1c97cf1b4d9737c2780bb10c4f43f1cde5c15445881874146d2aa21ea603a7f05bd2 +DIST heck-0.3.0.crate 54128 BLAKE2B e2b922c722afa5d67e2c8a1ec2195ce579541141c9fc983afb2589de4c5208702476bd57c928b5358a5f8d09c5e67c179c7c43bf6bcdf4031cc0b78385c92c94 SHA512 6987552f783d26064968c2860e1ffac9ec1cdeaf69bcc2966e81c151bc001e481157179742704d41d7094198559720b89ad4113b989a9d3288ef2f2550c67903 +DIST kernel32-sys-0.2.2.crate 24537 BLAKE2B dfc4a1e31d3ec9e2ac62b890839919fb7fed1444070c1dcd75bb75acfb53556d6cf2eddf5a6639e7852a3df2a0cc715c5ce1d3fc898ef16a1687020d98f715bc SHA512 682bc7c629aefd035966a2873518fd60719121cca7d63d89d6c97ff5306f24d8b5055a3c91b4eedaec22b1d5dd3fb8b48ff7341a05bbd72d86e06c422dab473b +DIST lazy_static-1.0.0.crate 12611 BLAKE2B c7ffeb553b82cacfeacf214ab069cd0abbc6b83d670ad84704ecd30919c390055b3679ddc85e9a7d0add530df588f6cba4cfd7c5e44e9158b609edef2fe85e4e SHA512 73044fce4d00002d35931d4b28810feb5c28c3debfb7bd570d9a8434cf15c29c17f0daf29ac04d748a32f52a205d5f52ecf69aa395f49d46b825e3fc0cbcd41b +DIST libc-0.2.40.crate 327272 BLAKE2B fbad5d1e07d6ad43cf0c94d1e5e1ae9dc11490d7a500a796060fadef39b4b58778aaf9eea27c6bf93b9481b3d94cb807e192860eb074c682ac559349de9bf9df SHA512 21dfb230796885d4459b1119de31f2615ee4f1020578e74d2e07fa5340777fde4c2f60aabba7444f00434519c95f12e6e1a3bfc496b83c11cea582a219005dd4 +DIST libgpg-error-sys-0.3.2.crate 842786 BLAKE2B b8320dd583e7957c63ed7013b98f97c9ad1476815f454a3def0a15126fe1013ff2fdd717faa978b562c3cb7bae4c5d6a50bff30f2edf78eab7427089918dc721 SHA512 8c12bf87ede2108c5e53e74af1ec9c7b9d2c0756cfccfb21038f5995181f23d916f943da08558e5f9e10c109d6ef7bbd9a497faf7d65933989abc0595567a9c1 +DIST libloading-0.4.3.crate 15613 BLAKE2B b2c8c60e8f336043ba30bf17006a10f260b740fd167e139f98f2fef8704b331740084a6916667f960394e562c09a9c1c7f87e48133b4e947c4203f0ca1e1592f SHA512 ca5f6eef2241e7246d0d00808fc2feecfda4a424a2a34e5125ba020f5b555f6bad9aa26236b99b2515c465016dcb0a549cf3138cd8973d3a52e5ce12b75b9bc0 +DIST libsqlite3-sys-0.9.1.crate 2025898 BLAKE2B 17752c3a6963c5d0118e594f0795842785886e48ac8dcb2f2c0b087e38c4f3c67069693e552b0c01523816c8ecfdae22c9dfa527045113812b5c979307f735ab SHA512 a889fe811afe6aad12270cda3c9b98e24eafe32bb9aa86bbe902f3b4a774d828c8a2fe4ace3fd412b2f020242727d7d4e2d492f1f009de0176636790f69b6076 +DIST libyubihsm-0.2.1.crate 34948 BLAKE2B 355ffcaba8ee7fc18f46e98a0ebb31888e709ceef235e680d9b67a5345c3ef0e97298b0cb83091cadc61ca4b33e85111aef86a202b5865ec65aa8a0dcf513add SHA512 5786399f1d9a83dc4807215048c67ed7905ee10317575c2e9258768dc4b7fa02653120b720554dbbe0efd0594336a0822d7d1121455474b4e1ba639f3f40a647 +DIST log-0.3.9.crate 16686 BLAKE2B 543a8a2425c88bd3cf00d4cd2b4790ef344f9743b61776d65f1d8aaaa1ee1069933e33aec114a2dcaada5cf698bbd983fb22354aa50bca58b161a36b2f1efc47 SHA512 1d49a0dcff0a17c1238aba6a6cbc485a61986e8c4768805ded912c5014d0fba6ca38c9bd038f3f53900a6309d41fc0216682f137362e63715878195453d2de6f +DIST log-0.4.1.crate 20731 BLAKE2B 5936919ddf0e218ca42d669b56271836e9eca61afa4145896a55970e5fb768196f18ac6f028caf8eaf505f5bb797700ca2f238970e1ad54edadea566efb6ca16 SHA512 a142f4d230cbe64a4efe2c46055722bf06e7af500c0f14d66f1d7d7fec99d552081ee9541d4a5b3aa5f46bc3be42f7702dff76132cc1eed7734234b2db37c0f0 +DIST loggerv-0.7.1.crate 10074 BLAKE2B 2590f84dc12ca93e5bccfdf96b08f615408346e33301fa59127ed19c12474a22da53ec5c0e728cdd45ba00e7c66cce3c83c5717e156a88b613bc55b8b97ed3df SHA512 51ef7ff7ebdbedb5c23d4dbda9466bdac12df97fe1247e198323517ea7e34761b744d4ca083eae37a73241417213dc1e90441df9c4bdc2ecbee7854a04dc9c10 +DIST md-5-0.7.0.crate 12771 BLAKE2B 55e02ba50fcd3089c500599952af8788cc0cbe23a33644306125f6bc4ac07aa9193fe107b663e403c4dd30061fb347578818be40b5bd4d46e03bb510efda59b3 SHA512 8e89377c0451e73ed119ece369078c52374f856e03893aff94935144d90cd184e31ce5cda35c2e9c295b8f0f53a6624084e719081d8016dc658fb045d9a794a8 +DIST memchr-1.0.2.crate 8639 BLAKE2B 3177eb1792892c0a74c5a7696ba6a4543fd5fabbea60d77e9b55e9d7eed365f3ed1b6dce44911246b52b8ad9a05e51679f42f9ffd4e6bbdbb5d01b5155eef280 SHA512 322b70bb881bcc2f9046f2daac5d939fd581370fee82b7e0500e27738d1d91e11c3f65fbf4576e0d987043cd08e5cd2b39a5ecf66d0ba7d95f48b6fee502bc24 +DIST memchr-2.0.1.crate 9858 BLAKE2B ccf5530245bdcf1b892b98858d1cfd8cdeec3765422f6d1503bfaf3e48744dabfbc1767212b310d1951f1594ec3d4ca09447ca72782ed272cc396113a7f9fef8 SHA512 50daeb73062c30b244c8fec965ff0c69c29571022a9228dafd1ed397164956e39fbe260b8adce33522b5cedcd7f9135500ac45d6bc0b5e72bf9e89ebea0954d1 +DIST migrations_internals-1.2.0.crate 7412 BLAKE2B 4b4faca0af25143713fba7d761871ff02ec11f61c2ea996d3bbd9a07589806a4d297eb37af5643c11a1e922e218e33b0320a9ba66717c98ed754e6a7ab8475e0 SHA512 20846c56986d95c5976b63376064d7907116dfbc2f3eb7cefed4be0596ffeec4fcb574d17a4799e69a32d6f77b62400563c0216aafcf53b21937247c4472dce8 +DIST migrations_macros-1.2.0.crate 3611 BLAKE2B de588b0bcd89c4c3c7c485e6474191377cd421dbbe4847278d2e866f86446e59f6bb673f5ed602c1aa99ffce2fc50bd4ac371ed1ebabbf283bc76fcd54de863a SHA512 1c9c5d6b6a59925b050d6c816deca70d2257d274c8eefe046e202bf0963694368e556237ad7c7d92ec135878edd9f38b6b83c90c5e0e53103dd028c1d75f3841 +DIST miniz-sys-0.1.10.crate 53357 BLAKE2B 88c511d46cfd47fc2053bf618180d6da3e7912bc9d0e84e4f904506daeaa5664c5f7c5036f3536c8c6def2a5b2d0615bb3bcd309653544c236ac3be64987cfaa SHA512 d7a6f0bc462cf10a5f630ea20f4c991830059b359f67780e160a662671a8bab21bbc29aae2220694d008817b1227b9b8e0c3c458b99a29ad2e5d141241c60844 +DIST nom-3.2.1.crate 104073 BLAKE2B 0aadea9d5b79fb0b34ace1c1c410119c954982810d928a033ebc280a824da6af61035bd1b31fe5f610812b9ebdcc02839ad5e863148aa01733b5c8472335d70e SHA512 2baf05e568c426eaa1560569538e0f08706e40333a797374bd3f897bcadfcf239c6dc9eaabb99e9ac72d8b79e46f12ade8b5d88b04ce10ef24e8b21513392c77 +DIST num-0.1.42.crate 8323 BLAKE2B 24c31affacb1a4bdfc30e30afc402d92344d4d17079b9cfc103e5a7fda50b0c62a877180b94af79a8898bb2b81de44324b04c00d5983c8d10d30581f3027464f SHA512 d8d48080f84dbda59d16418f39aca158deda1fabfba2aed1944f77b3c6099a244d7a32e79f28b9b72dad4cd446a8f4f854afaf3f368e3ffbbd124e64e4aef3cc +DIST num-bigint-0.1.43.crate 63022 BLAKE2B 428c1bb5c0e0ce0c3b5a0658a555ef79496f52384c1df393563c17baca1888d4ffc1088ecfe06028190b3265829887d95cef1839484748361fd0ef3f5625ea7b SHA512 07119e28588b22236fce2f5cbd074ccc1b5a31081a9f5ca3d5981680ebe68231b21c1250d80f656ab1411f0ab3aa942d54889845c03935f28e68fd510ae943cb +DIST num-complex-0.1.43.crate 17731 BLAKE2B 4b18c7839e7826c16c60b15f9d5c6bbf9f9874e962429cfaad6fc9fc9bca9dfb260ae390e051dac2b2e6cbd4700666851318ccff137badab00bd39f8c4407732 SHA512 e82f3ea86e9725a51e6669aad07b87dfe86cbf2fcbf76629a2479bcb9b7c5ea2cdc2fab7a98091686c15f4ae7ab68c66e01982f35738f9055a41938930e72582 +DIST num-integer-0.1.36.crate 12168 BLAKE2B b492ae16a4143996d447dd2cdd348ebee6237d924e2f756ffb4a236b9de166a9b12355ba8e9027bebb58c50404ec64f392b0c52bf336c6205128e27d1184cca2 SHA512 9f7f8ae499ab181d77d69f6e761457fc170305767a0867142ccd549cf55c24b9731434f6289856d959ac239aee32a6574c77a5a783a701ca583310ed9134911d +DIST num-iter-0.1.35.crate 9013 BLAKE2B adfc4bfb7f390e2abbed94fb64348f4f4e7d6652f0bd5aab4d7f06a59c1cdeb46a5190ce3868e64705bec208a3ae4292516d99db2aef120153de5eb01a6e4251 SHA512 df4fc06ff7ae28b4576a1004d2284d49865e899ae315c5621258aa1087c951b2927e1e413d2a8fa992ede242c2e73eb40c6efbf3feb1adbbe5aad8ea323d9e4c +DIST num-rational-0.1.42.crate 17253 BLAKE2B a3aad3fac51192e00f00a4489590c1358adf1bc7d0704dd069375501fb820c1413089f542900ad5593745d4c5f775f7101a38d65c1e2fe892dedf3d6f83245da SHA512 f0ad3c6e807db1cccb5260caa1b2abce354d1aca63e765c0bb2d18401e941d57a47c8edbe485ff0d67ab363c937592e2adcb89538132b5a2d6d4408141f17ef7 +DIST num-traits-0.2.2.crate 34777 BLAKE2B affa210c22e3c27f743d6b23393fc61749e37c066fb4503f7d9d5e634a2236c2632bb9fcb4130be10aea64a583e15160d33e28570fbbaf8ef935b1864fc0a9e8 SHA512 2b2baea40084f4b1c7b4aace26681e92f0d4fc40686ce248849ca9672b2e24f545dd168e37f33ef162b07663e192d81c9b1f2ede1cd45afa5910fe9aa2c365a5 +DIST peeking_take_while-0.1.2.crate 6697 BLAKE2B 31571604d00872900abcb677a483da93654de523bbdb0331c326dc9a3e531f246e571bebcb983e79dc46e33ed6dd32b978be509841ec0d9f1e7209c06289c22a SHA512 7bf8721987c3e2e1986683dd897746592a909382f02b840b777effec7d8b0a864c1a83b03c73d555e359f22c423168a54b75448a7e7b996b739527ce8c88b721 +DIST pem-0.5.0.crate 6752 BLAKE2B 95dc8a87c9d6a14d7732a8f79a3b6f8ddf5bb8c8901976c371020065368887df6849970e207f3b5c2f4be173cee4355790e563c5f00b8e25e4cae73c01d9774a SHA512 dbe99097d09a439b4a0b21be6e8f9d756ed202b80b5789a4ef37ccc024b9e7d37b6d9bc102b611752de7498db2fc575e3ff104ac580ca00c36afc620da2190c4 +DIST pkg-config-0.3.11.crate 13227 BLAKE2B f22a748d9330848379d9bcc32026c9ba4bcffc043495b864af95dde36ce3fe71344bf5b0534aa61574f677b9a3d1ec0e09f774dea0ee57c1810f1e6bd7edc1e4 SHA512 c5e53a9dd777bce55889fdf7028418443896890ff120beb2fda5e5fcc55624aaefc2ac058c2b4bc88519d48bacc477351b0ab1c4d4a65b4e4bf66a69a419aae6 +DIST pretty-good-0.2.2.crate 18766 BLAKE2B a7e5779bcd69420acf18417ee6528e9c73a940f7d9f90538e985b5e216583f14376a8089caf9eacafc1589d5dfc29c7cd1aec45624ed31e35d61b52b63b57bf3 SHA512 77fc2219f1834d09ac7e0686b1740add648c552e0401f680058686526fd5f59ee3b8de16d3476cf1d6b8a518cb919aefafa84453fb0f8d776efa77797a0d0a4a +DIST proc-macro2-0.2.3.crate 21558 BLAKE2B 1facd121547c01345fdd4426a3584ced6939e15689aa0f9403fdbe15a2a499249b235fa59903a94cbaa776965f35d23f3bf8631935732ffb64c0d4b46a45cd6f SHA512 4805769dfba01ab6a10f1192189028cff8944ce4e3765ecd2a2ddbe6a66b0b4f884a51775391029277c69b8faaad4a9770835dd85c79a8ce4b9f5047496fc6f3 +DIST proc-macro2-0.4.6.crate 27767 BLAKE2B de75113c1481c23c97e2628db2fa1bcb97212778f566a0eb111cd8f2453dafdf688eb7879415d066babc1cb94545c6c71091bacf4d342839521a43b5ec935e01 SHA512 d5f92bee40455cdcbadae9a4ca8ebb08959f2d4996bf5165f1bc70ac02f55520286ac1342ca7bc7804d5116bd9a1dc18d2c6bd47e503f3c585c4682d3464b73a +DIST protobuf-1.5.1.crate 165142 BLAKE2B 9d05f1d4bb723914ded40c51476eeac342a4f41523a25e59a976cf02478fc88b8446937e62ddfb99e5dc68380d282247b8ba2cdd842dd535daba10de1deb4f6f SHA512 d9729b419637e5858c497c1780b3632c245aecb5afc521da7935dda7618f72477c51eca2dd24ea42e9c6c5109bb98c1464b701aeb3748cbfcbd6ba5fc0020a89 +DIST protoc-1.5.1.crate 2692 BLAKE2B 06c527ffa59eebdd3429b741a9bd47bb6f2e91209928e14dc650f588cc143fb3bd1444fc448c2d4f16fd1459e5b93002462361480a2d86ec65e4ab491ffe34fa SHA512 3461de8c79934e7f9d4fe38a934a9c9718b56180bf99cb1b08334f6d58084bf3f23f42e43693314b0449a1bf22c8e0344edff3c963788cde00fbbd956fc5dfa9 +DIST quote-0.3.15.crate 12041 BLAKE2B c5796b464539b018351b41b5e2287398681ccb2ca76f46178b4f310e61a8184afe9ea2b8dd7638f27bf5bf37f60458895497e51c82b31326abf6feb4f69404d7 SHA512 2e5dbe725c0f76a81c6624181b43b60b95dceac208e2babaad3fa6d1487794805169e2ffd967659e4bb4e1abebe96505be5a1007c514d10f2a63ef282d699ea7 +DIST quote-0.4.2.crate 14756 BLAKE2B 0387aa925e862704403e88b552a11d07ef7c0337288024b0decf89e86e7cb819d852776adc43ce953f1bb0979949d98f9cf9a5f163b0e126513abee31c0c96fd SHA512 9ca038ee67a2b3e527cafbd7cd3536c92316ad6a05b4d9e787e882c12e0548b5fac648efe1da98b9a517f213581b2afc57b5838f9e968b5385a5292fe9c93a2a +DIST quote-0.6.3.crate 14154 BLAKE2B 16a31875577eefec9568e3b990ed17b0afa5af6ec936f0b8d1f05303b7e1dae1737677a86089a048cf51b602c71f4b3c7802ee40fb9caadf2e13fc0e6df134a8 SHA512 f2ff3cd617c69007c4f60961728c73a7ac7a2eaeb1d6da51218d2fbc9e85c06baeaccc9b82771a304bace04024479a192b88336546f96e17c6446ba85df94a10 +DIST rand-0.4.2.crate 76170 BLAKE2B 28c9965519db48357f23517b5ac43a641d1f0ffc4396c42933d22181fda3c6df1cfe08dae66a188e60df0708112839781daaa5b5cbf667d6850b10bcc4448f99 SHA512 ac6eaf9f0914fd966c835a04ec644c5a8d62a4a634187d538cecfb711955a977234dc5fe487cd4d351514bc0de4f51cbd0f09a8f6aac56aa0467ae5eb17a4fad +DIST redox_syscall-0.1.37.crate 13980 BLAKE2B 9896615b819ccee17b18093c28a778bf6b4e0b4f6986f071e9e956a9bbc9724e151fd497d394c669d0feb8dcb95c3258a4103af9aacfe8381fc930cd5a1acd8a SHA512 147e48d44227cfe8ea190d543f9f8ab1e49fe2336c80f7e2b83546e617d0eeb8a1e94ce6e4d6f633b92ca72241cbfe0aec082425bc5f7b63d5efd164b51d5e48 +DIST redox_termios-0.1.1.crate 3227 BLAKE2B 0b109d34e942735e804dd3da2a9639506e8bf6eb5b1f69ae021b115b0b75ae5159e8457abdf647dabfc19d5119cd3a44b8966635d7862cc66a8a997e4468e1ab SHA512 201d051900e919e2c6c6769ef252e51979d90133df16b6605e2a2f424cfb2e6e505e21add75ef5854fe5e0cab1ed1f1c1451010f072ae4bc8703c585a4323981 +DIST regex-0.2.11.crate 209507 BLAKE2B d8e52b078e96c64663a730208d14af4808abb62d7f2ddc21026410d78305bcf45c8fa5bd6bc28a61a62dffc3dbed6118562bf5294d176f04a9aa8b3eac295a5c SHA512 e0f48ab9a692f7ebd83a21bc70060aed0a7dccc9aaaef6995262fa4e2e33f4404a04a217588b72025820b1a0e4697c076ad47a017e7c51cdd4b6c1909c015ead +DIST regex-syntax-0.5.6.crate 233912 BLAKE2B 828c35471d8a91be9fbcad00e036c40ff0e2c38d008c5d916cb096f0a6856f124a64a203d547fb5ef45cc296565221e5f96343754413cf6bf2fd1463c7e02f1d SHA512 4ee43272d0d6e5cc0b554816e20e2d93b0ee774fd71643d5edae06627b295d374769ecdc3c1233a688d306d1cb86a83b6850ffe4022baa3db78beeea1190b455 +DIST remove_dir_all-0.5.1.crate 8726 BLAKE2B b654deae9905c03b068f07d17b5fe3715393cf7c495ee017467fe1cdf955bf44781516d0e6aaa1dd738ace3b3bdd4fb38f7edaaab062eeba02baf50a1250ed0f SHA512 9ee9a11717d45aebd28cd2f50719a2183cc623bdb1af099701e4edbdb9c98bc14cf2278ba06aca4658bfeddaffff00d0d1464c82d175fba7d6fb272918dd6928 +DIST ripemd160-0.7.0.crate 9716 BLAKE2B 9e24e43955c6de0dca5805e0f2b908f3dc00262de4c46b41c1a5308a630388b4c23176b7855adeed450f1fcd9adcbc25f85f2d1babb5575fbd500cdf4585416f SHA512 5c791c169e8ed9cd040184ff12dd37c1832e4f43b91199799a20a045725bccdb6926671b296fd146f123e8553bc12852c69a835e64b893e7f43aa45eb39b9dab +DIST rpassword-2.0.0.crate 8586 BLAKE2B c70ac825ab002abcbb8d63ed7d8e4fd1efed823ad706915799bde67e5f2882078af81c094968448d90f550651bc8d5084223a1dc5b98f666e5bf193fea1a0130 SHA512 ba9ecebc150b95af013fd0d26fda9242fb5bc4df37bea9ca1e14d435e4da9fbf3f165ebde3d8714dbbd75c25701109dc25dedb17a0b78f1b9992c0fc3b938792 +DIST rustc-demangle-0.1.7.crate 10681 BLAKE2B 2679a27863f3172712d13d24cc76e13c67b61ae018cdb1ce01296625a2aa4b53c3c44572e9d2bc639ce9f663e221fed8e91f79296bf721a3934b8d4267587b86 SHA512 75dd8581fd0dccfcc8cd2afaf18b9f44a5cea95f6c6573bf9e0b23d79cf5e959b3565bea0e9e26ee5b80f3142a16b549eefa99f5f65aa0ca9c780307091358ec +DIST rustc-serialize-0.3.24.crate 45926 BLAKE2B 11dee8dac7eb007067ee0eb19d122bf45d912e6cefa95fd5ae3db7a4585a3f37e66b123c8c7bb761cc451b402cb9191dd5c974618331bb9aa9efbe9215115abc SHA512 60b40a0b41678287627cf5898e0ff6ac5668865f1ce5a482190ecd7539b59a955a73c675fedac76e68a5126efb92ff0cf1d1b4f24359a932463434bb76d9e884 +DIST safemem-0.2.0.crate 6450 BLAKE2B 44598e47fa6185ec0890b4ba6d0e7b5f52f8892875741c3819559dfa61491736d4326fa1713916ca41d6daac72829ad31d0905f2e339a069a987d9715f340795 SHA512 71901f472668572e849504a8a830d4dd9a742729b0158d2c6865a5ad86e65cae8b5bb83707240ba03a7a74c610ace87f8b59bde68998d2bd66c19849aec4fc8a +DIST secstr-0.3.0.crate 6483 BLAKE2B c4158fe045887c020099b6c52e02e8292f2a92fbf47dd4842f864c95454e3754ac780b9f97b0ae521e0d7cc780107b30c77b8a9cc0708483ba92b42efe8f0fcf SHA512 524d90be4b53ae2123a6f309e066431e8c0effb9c5e7b795628521ffdd7e08503ef94b192aaa9b6a25884d723d52111fb557013d05348c439dfae35374cb41bf +DIST semver-0.9.0.crate 17344 BLAKE2B ae782bc78f29e45577de8574ee58959c70b54bb0b6f45a5a7b09cc4d358d9a0a80bbefc6e0f2a330e2b55adfbbe5c1f64f4ec9bb94c4adf7bb3e4fc9c142db6c SHA512 03a2ea563456f812c301721c3572370fe4934a22db60079da0dd6ffa33fa789e5e2436ef09e62fc35e0b742b06fabc290992c74eed80419a353c9de9449928dc +DIST semver-parser-0.7.0.crate 10268 BLAKE2B e46b7cf9d292f8fc54561fca4df8534dc96f6be920a5c869c405ddb31b9d1a18eab0799207113cf4910a52cc0df5017ab1bc1883a7c3787ebf2d60f09ac0ab4f SHA512 17320468ec6b9862d595f358d70c09ac6e09db7885fe0ead7a1e596f79350a6306e8bfde5bbd6512008a7c5454da1c7ae55fe1e3bc1c1ff02ac9df54c0a6121f +DIST sha-1-0.7.0.crate 10710 BLAKE2B 50d78edf4ecb19362c8a76af9cf6731af66bd705edd2e39f2f955b4e63a5d7e0965db531b2ca42659420a92e2c635d7be1b603faba213dbd86febf9210d80773 SHA512 29201f72adf901eefc6360baf39e42d320f5ab0377d3f2b8b5026c9c26f319309f3c93136bd40e6b9faaf10d2f5293d43dd560132921524e8c7c0b5eafd37daa +DIST sha2-0.7.1.crate 17626 BLAKE2B 1811030e01ba9e33040747448718133cc2f1967468bc06d404fd7c14e183a3932be6c466362453190331f8fb149744836a6cd9bc1b4eff42259119dd4225b274 SHA512 356ec3d0764ef922b2ddb9168538115b6e5e6475ee34464a9d59f87276bbb697214cc85eb2bf1d7e90662169c56ae0c6454b851fda13e0010db464c936a84ccc +DIST smallvec-0.6.5.crate 20238 BLAKE2B 2c75f111c37e8327e18b806cb038713f8e3a7358a40d35289a55dbdcb30961c8ea4bf4e243ddd939b6f9f4a4515f11eeb25ad697ffb52f3b7fc88e6ffdf65bef SHA512 8fed4990c761151bfb2d66392505bdb6a5591aee8b90aaf9032079d0a68c2b3e36c4136d307b6eebc714cf0cabc0155080a0f2cc5f59fa099363c5144e7eed31 +DIST strsim-0.7.0.crate 8435 BLAKE2B 6869075bc3949fbdec1b74548b816560d1bf3759ba4c3e972a84f885e6732edd25596d75a4b6f6b85d93821f559757d096cb5f0b0eb04dabd8bb974d214f3188 SHA512 3f92df0f444129b16fbb15c533b7bc1d6f18970b487b57345f74747fb7f41e3dc0cb61255712e94d419a5777b8f6a9cdf1a716718698c479eb98dfb6464d1983 +DIST structopt-0.2.10.crate 21488 BLAKE2B 44e64a23e9daa5115f316f964e3e113a4ad3c7f773fdf213a6e500784493b41714ff86a5d9c50b62d80d799ddac05d86d4ab57244694a6bb0416eb1934c6699a SHA512 890e53afc1161025606e09930494c1f1abb80d1d126966e5e7763862b7b7716a937f6c399db8ae4e0861a7e7db5467cd8cc61db1b32dc817bd74a5fe9153eda5 +DIST structopt-derive-0.2.10.crate 11091 BLAKE2B d85d51371e0e6acdfbadb005065f85e76c9130beb18484c447d5a2d075d6192ce14c896f4e555f1979138c286b79d391e41bb99f8b61e1c903867c6dc87f91ad SHA512 082826c52d88f61e07dc430861a345af78ebc6caffd115aeb8a0ad2388d7f0aa51fa071657b8c66f1c885d929f1e2cdaccab716905581d656a691fd74325b036 +DIST syn-0.11.11.crate 63309 BLAKE2B ee33d3f02af356faafd0c03539d1c86ade1f46db8bc30054f76536c1cf537b8fa0d990c78f86b1e5187392b31c5d7364ad5767ae96de5844e252c9c7c41ec962 SHA512 285bdc1f9b53fe791bd35b10a06fc106231c4eca908244f7ba7366a865452ec2dc8bbff275a52725d29c48d2065790ff6eb37c6eb9c1968aeb0af38c028d173e +DIST syn-0.12.15.crate 132636 BLAKE2B 4b0dd0f05f8e7c774b8400c088561c1af247a74846a8ef4e309b92fa1dd50c2f4859485014854ac975f79ee04c6bcd60aa28dfabe497090a8cf429b6e9a53310 SHA512 6d6afca4a83a8adf6f56b3609ecdc6bfafe0df7b51a5197dc6546dc53735351228faa49b5792b0819df52eeeb86416941513006d29fd161426535dae5cc32864 +DIST syn-0.14.4.crate 133818 BLAKE2B 30341fda4688c0e3f93d7b20e1cbac991e34b86a0e80b1bd5720026c983d348325a5486546c1aeb4649408f675351ca95ec982cc7c75ac914f55437b2d023878 SHA512 248aa29bab8403def4aba211fe7789efca3fc88571ff9646eadfcddb24b29b481066fb37ecc1fed947cbfa1d7a20a3f94384a9577b6ccc4d1fde9f52eb942ff6 +DIST synom-0.11.3.crate 17120 BLAKE2B 30c6bdaff48eb2f3c28a348f737ad4b9ebf4b385de75ec2510aa9fef3b426a8a00041d0dd1649d11a9ba39cd4b9363e0e3f7d808cd0b2d588a38edb395be86d5 SHA512 a9c75d667be94c82c7f545e0569bb5858afd1bfca6e045fd52f4ae18ec4fd440e7d374ef45dafc97bda6c749cd4b4e185d8192b833661657323229803ef4a28e +DIST synstructure-0.6.1.crate 11257 BLAKE2B 28a71b4f0e49a658064dd5b4eee0f1a61ef5502a24de4edb7aaa0f0741529a7640b874d19400757feef527ff78432e29fbe8574732e19a7395d13f2cef23d39d SHA512 e3234d03a99373a7c35a33611e7d5383b282f232a17c592d630dc2ef5613ca272d3f8419a87d40cf1d50f3ff982a01086d9b7a0202c5a819463d157f684d41b9 +DIST tempdir-0.3.7.crate 11468 BLAKE2B 65850a69a07c5c7e5c25d77bfc9881c994b1fe8466b1712b904d9758b234f8d12db6e1b740d461a48b13667bdeca8178e75c956fd6eaa0c0d5aca5aa1ac7523b SHA512 e5b02f7d260ff594fc2dbbd441eb8adfa36ede937f32c8c812b458167c0e49f5cf493c6ebf83ce8007a0aeb97016169fda7f5d2996fecc72f9409d6f463d9bbe +DIST tempfile-3.0.2.crate 20825 BLAKE2B 0165940c98b5a28dcc087bdbaebd94dffe532fd571b7f28c440583848fa2368029c9416be914291f3ff0366066b2c99b8a241f3e581209f73fbfbf8c71188530 SHA512 8ece130a10d4a698884d3d29530c925944ef6d9bf8375b87abdad890cf1baa196b0c80b461b6ff436a8fb29931e181b4d0acba50e851ebbf4c0e9aa512e823c6 +DIST termion-1.5.1.crate 20659 BLAKE2B 5b4291c2c26a074c16eac2e7bcb40467380181bac69c941e5c958059dc239cbbfd74872d9bd3da65245d010f9fc39804c43dc96f4caab2499b021cf35977a6b0 SHA512 1d1536f08600c7c1f414b4579a1a6e7eff91f4c105504125118d3cadf71c7886a352d1c5f7e07f3d7c28aa8b4752f07b51eddb4d9adc6a9286f7b6bade2bec76 +DIST textwrap-0.9.0.crate 15795 BLAKE2B c4dd89d5757da74c145b6971cd08844f3a6eeb5d29ca012b67010743a2637ed83bca00eefb54ec3ddb1d02a06c9cc3b84984919e6fd187dd71ed9c2e8af41f63 SHA512 e176f703f971eefb5cfc1ecf9047858bd7610a58fa4103879fd963b292c79872bd8466ef8fc9742a428ac707400dade307e72fa965dc4d61da66e932e5b20c35 +DIST thread_local-0.3.5.crate 11794 BLAKE2B 775c55a2165b942eec4cfaa78653e3ff06a6b951635e95dd176f8bde9c58f789a4e3698cc7fa5eb7a9d173fb6c1eb8da682c65a36aa29beded1facae01817336 SHA512 c17bb6bb58e8ef5f27cd6b0a4290752ec00c9856753c9800664e1debc347a26930970b073ba87d6f95936b1be540f87559a8410151b18d01ecc3fe77c45d6cb6 +DIST time-0.1.39.crate 29295 BLAKE2B b94696ad093d016b7e7ad92744d30191d8221a7c4695bed3f3ec79a97d3acff853345fc703ce126107efe7add614b641317a859581ed49360943caa34f61e544 SHA512 522e9f3a1fc712a6dbb428d5bfe4ea32067028137d5c68c3e9059bb31c874785993aace65e9ac137fb8355f762def9c2602ec08217f395d8ef8bfc790b38108d +DIST typenum-1.10.0.crate 30009 BLAKE2B ea68f463c2edd2cd7ace126571a88cead26ea37beb8a13ebc00eb033d9a6e9d7060bebcdb208830cea4944a2b2eae16e7ed7a60f0b9270868559292bf99df6c7 SHA512 9ff611df79e312b8ab32522007981220213f2beddd959118a855d08b94b7a7d35d38378694c8667c2d6aa324933307a47a4072a89cacf7e594537794385b9449 +DIST ucd-util-0.1.1.crate 24221 BLAKE2B b03c4b21f30b1d7497814e22471f0ec94f52bf9815a8d8c454ab998040593e179e869e6e3d2fde61f993fc8d15ad6cd689f878bac9f0e1ea9a658d2dda242bf3 SHA512 3101bb088f9a804f311c23cfbec1b59ed6daebcc985af3c4a25cee5c1a0c0b8fe15a3b95516361cfc75bf0322895f2acc4835ee94122c782abfc8b0a1e6f8738 +DIST unicode-segmentation-1.2.1.crate 68223 BLAKE2B 935c15d99571fc7fd597c2af9cee9333ccb1f19153fe7c8a835dce4f8cf13bd69e424d9e42b0a056b7035a9122bb5169cfbb96239aa2b3839e317aa495559e70 SHA512 431da71eb9056902c51a5ab53d239c8cf6448dc2f87be727628cb40a4808f5700f427936a9da4ef41935156896d9e0234b9de80aaae342b839e95c9a80d053b3 +DIST unicode-width-0.1.4.crate 15283 BLAKE2B 61a72cc00c929624bbf46ab89a8850270ce36d0c986dd302b436b98405e2b53c1199588c70920a3379fa55c9dadd070404a8d3580544c02ffe9bbdb6ed078215 SHA512 f06b243e533ab9c68d88ccd06a283dfff5fd13e9340cf11bfa74473fc9100bb704c34e7fb66919202a97e7d2ba2e7eed968eced02d557835a06e6a0166865ea3 +DIST unicode-xid-0.0.4.crate 16034 BLAKE2B 7ce4752eab109f457a1f8cdd3a9bebfe637652d7e2c0625b6c6f76dcd2d5f3e8b66c89dc4ca158282044dc1a2b030adb1b28e3a44b5a462c7e206cd25d925e66 SHA512 7a3a60936a18d54001dc477f6da1c9784bec53263f13e5c21ba00228ae4ff09f7bb8445cfb39febde957b8500bd1a4a998cc5cfd18046aacbc68e9993510e091 +DIST unicode-xid-0.1.0.crate 16000 BLAKE2B 159004a7bbb7476b39e982b51dbf615717095fd5946536e757653aa941bbf1b774f331db744ecc33bb2ead4b0a6d254fde86cfd6cd8b83ab9983fa89928eddbe SHA512 cc5343e2166938322cfd7c73f1f918f2a9c46846ac0ef55933d1e44cdfaf6f7da2b7ff18b68e356c47b6d8ba5565eda0db42c347dcbde830683f341ac2b1849d +DIST unreachable-1.0.0.crate 6355 BLAKE2B c41706721e8124c695259c12741ee95f98d3599871bb7fae2f8cb0d63a04f0cff11e01ab0376867de4de8707fd50fbd02f8b6d9c19bedda84bb5938876c5d803 SHA512 054e0a471d1068b7703853d838c7c381ac6865ac1f8abae08747581e3754416ccec5b80a5b04fedbcd01e68bfeba286b849e3b8ea67bbe62444f2974655e4948 +DIST utf8-ranges-1.0.0.crate 8599 BLAKE2B eb356d94a937f5f7cd6ed17ba85c03fc1ced30ab9215aad1cda3e600dc6efd8bedef744a2dadc9664dc2cac0ef815f451e88db5b75f70eb1f50670dceeb7e244 SHA512 da498433597582970860db1c66ff1cc2ed8b0e2bf816e6aabdb40424ec03c3f28e6ca5e7592e464442004077735dca4144acd13c8f6a2e799d67504699422643 +DIST vcpkg-0.2.3.crate 6015 BLAKE2B 8259f1e9c137fdbbc0277976bfaec28074af3ce87149fffb441a5692c84b0e4a9c70b61b57d82c82d7603569fb3a9a86244a68a1834797e4745f179b941d1ce6 SHA512 ff1440f2d7d2e231fd959a328fc07ac1d4e4041f42723d2edf2226b74024aa13016eaaa364d7221ca8440381769ca03c24bc1c8d49aa2b5708871541b8a9ef0a +DIST vec_map-0.8.0.crate 13742 BLAKE2B 5e1fd880c56f01d69d1680d77b361c89f94e77d75b0c8d1d49c780e6b729e3bc5e8d9a72e3a298bb350b1c27fac02dd7b31eb2f2018208f242b02d8d6d64af21 SHA512 7ce0c05c0b410577b489adb4d35376bc2a55c6041ce50e011b78415e952b5fb7fcff89fdd00b95e086de742f26ff057e99e55585824bbc0482e0ac2134406520 +DIST void-1.0.2.crate 2356 BLAKE2B 41578fb5507f94e7d135f9595cec107ed00a926f4968df8b59792d1676ba5b6980cd67310f820fc37a9c14ebe43a171833fa8dfc09eac5dd42f2ebe808632a83 SHA512 1cc7d282600dc0164d7e410aa895d5dc99de1174991549c6733c94cc2027026517f66797751d737869eae58c560fa26edbf43f36b3015eb2fd99828fe40e0aa1 +DIST which-1.0.5.crate 5366 BLAKE2B fea2fd7040addae5f4511c48ca7c3140414fda04853e30a797e3a3c67df6dd6dde75d2c6537716d7d12b2aad2a0e113add7a13f994654da6b296b46b14fbe3cb SHA512 5f6f794abdac8479d0f2fe130cc72fa57dcb3f9c1310befcefa4110551bc5084dbbde503c48023a65dce9d73ceed8a705163508bcf1cb0fb975fb8c5202988ac +DIST winapi-0.2.8.crate 455145 BLAKE2B 50f3c2a0cf4eeedd6891b11392e520c1cca139a71f8f736eabaf43aa7e4b1b5d57697918978220459572d373940edf971eb8302f292cbff832283e905076319a SHA512 115e6f027cdd4a56f77ca24f4ab249d2a6cac1e1f955c826a9b6ee05db4861790a533f5e674aebbb540370fff52ed41618c2cd7c906e73200e92df213109cebe +DIST winapi-0.3.4.crate 905247 BLAKE2B a6dacb223c0f7743af4c16d4256eea6fdab49ef7f48b9d80bd3da8bc25d6c53e12e98d45e50eff17d08c20099fb92ebcf5ed50928ea2e0873df20461f30b9a5a SHA512 4636ceea813181de46c0bb2f837982936a69376e2b3a58d541a982a494ab4e5b52f3baf820f714a81a2e742def2bf07a2d8313e31b45e51dc7e4d350a5b24579 +DIST winapi-build-0.1.1.crate 669 BLAKE2B 6c8d8e0f81574c086f06fb3f234b0e6759d293d1d254857c3d491e4d43279e5c2f57f2fcfdc9d5d7b083280f4cc2a75a6ee9bc1541ec6ce8f8d904ded0567faf SHA512 8b0a239e205a5368892f41c870a8a7ea16e3468c364b03382bef7fa3a2e7159b09c07661e95b1227578f6d72c14879daa4444b28c51ae20ef15d985d59ca5a77 +DIST winapi-i686-pc-windows-gnu-0.4.0.crate 2918815 BLAKE2B 4d357e4d30f9552972170d65b9a5358b69c46a3e772fe05efc22f3d4ffc1caeeaad7aacdc7abd503a7ad0545f8bd7d22bf351dcb6df76f812fa4d45c34d65df0 SHA512 a672ccefd0730a8166fef1d4e39f9034d9ae426a3f5e28d1f4169fa5c5790767693f281d890e7804773b34acdb0ae1febac33cde8c50c0044a5a6152c7209ec2 +DIST winapi-x86_64-pc-windows-gnu-0.4.0.crate 2947998 BLAKE2B 2ad1ea8b5fa07d544e910ccba043ae925269b76b26c9da356305b34b86741dd8b9aff0b9ffe3d562db4fcd7d7c46a11ce9e3168b782b1d89ae6881742b7ede82 SHA512 4a654af6a5d649dc87e00497245096b35a2894ae66f155cb62389902c3b93ddcc5cf7d0d8b9dd97b291d2d80bc686af2298e80abef6ac69883f4a54e79712513 +DIST yasna-0.1.3.crate 19608 BLAKE2B 15d29bfa7c89756a8bbe3a14c94a1cf2e91c197904cb0919cd2d56b060959a7feb3a9365a181ee459a849fc96a8dcb23882c92608157c83aab36042137035728 SHA512 3edcb3ac918cc5f3b79f9699399650a8ccd9a80954abd7cdc2093ca0441c7603f73822de1eb376adf4ead7b8499af0981014436961b27ce4285f6984ce1f94a2 diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/fero-client-0.1.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/fero-client-0.1.1.ebuild new file mode 120000 index 0000000000..9c3c9626e1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/fero-client-0.1.1.ebuild @@ -0,0 +1 @@ +fero-client-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/fero-client-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/fero-client-9999.ebuild new file mode 100644 index 0000000000..4bb4ac7507 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/fero-client-9999.ebuild @@ -0,0 +1,196 @@ +# Copyright (c) 2018 CoreOS, Inc.. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +CROS_WORKON_PROJECT="coreos/fero" +CROS_WORKON_LOCALNAME="fero" +CROS_WORKON_REPO="https://github.com" + +if [[ ${PV} == 9999 ]]; then + KEYWORDS="~amd64" +else + CROS_WORKON_COMMIT="1fb33da499e51b2699394d158b0b66d36fc52974" # v0.1.1 + KEYWORDS="amd64" +fi + +inherit cargo cros-workon + +DESCRIPTION="Client for fero signing server" +HOMEPAGE="https://github.com/coreos/fero" +LICENSE="LGPL-2.1+" +SLOT="0" + +IUSE="" + +DEPEND=">=dev-libs/protobuf-3.0.0 + dev-util/cmake" +RDEPEND=">=dev-libs/protobuf-3.0.0" + +src_unpack() { + cros-workon_src_unpack "$@" + cargo_src_unpack "$@" +} + +src_prepare() { + # fero-client uses the grpcio-sys-0.2.3 Rust crate (amond others, see CRATES) + # grpcio-sys-0.2.3 needs a patch to compile against >=glibc-2.30. + # The crates's sources are put in ECARGO_HOME so we need to change + # directories before applying the patch. + local cwd="$(pwd)" + cd "${ECARGO_HOME}" + eapply -p0 "${FILESDIR}/0001-gettid-glibc-2.30.patch" + eapply_user + cd "$cwd" +} + +src_compile() { + export CARGO_HOME="${ECARGO_HOME}" + cargo build -v -j $(makeopts_jobs) $(usex debug "" --release) -p ${PN} \ + || die "cargo build failed" +} + +src_install() { + cargo install -j $(makeopts_jobs) --root="${D}/usr" $(usex debug --debug "") --path fero-client \ + || die "cargo install failed" + rm -f "${D}/usr/.crates.toml" +} + +# sed -n 's/^"checksum \([^ ]*\) \([^ ]*\) .*/\1-\2/p' Cargo.lock +CRATES=" +aho-corasick-0.6.4 +ansi_term-0.11.0 +arrayref-0.3.4 +atty-0.2.10 +backtrace-0.3.6 +backtrace-sys-0.1.16 +base64-0.8.0 +bindgen-0.32.3 +bit-vec-0.4.4 +bitflags-1.0.3 +block-buffer-0.3.3 +byte-tools-0.2.0 +byteorder-1.2.2 +bzip2-0.3.2 +bzip2-sys-0.1.6 +cc-1.0.15 +cexpr-0.2.3 +cfg-if-0.1.2 +chrono-0.4.2 +clang-sys-0.21.2 +clap-2.31.2 +cmake-0.1.30 +conv-0.3.3 +cstr-argument-0.0.2 +custom_derive-0.1.7 +diesel-1.2.2 +diesel-derive-enum-0.4.4 +diesel_derives-1.2.0 +diesel_migrations-1.2.0 +digest-0.7.2 +env_logger-0.4.3 +error-chain-0.11.0 +failure-0.1.1 +failure_derive-0.1.1 +fake-simd-0.1.2 +flate2-1.0.1 +fuchsia-zircon-0.3.3 +fuchsia-zircon-sys-0.3.3 +futures-0.1.21 +gag-0.1.10 +generic-array-0.9.0 +glob-0.2.11 +gpg-error-0.3.2 +gpgme-0.7.2 +gpgme-sys-0.7.0 +grpcio-0.2.3 +grpcio-compiler-0.2.0 +grpcio-sys-0.2.3 +heck-0.3.0 +kernel32-sys-0.2.2 +lazy_static-1.0.0 +libc-0.2.40 +libgpg-error-sys-0.3.2 +libloading-0.4.3 +libsqlite3-sys-0.9.1 +libyubihsm-0.2.1 +log-0.3.9 +log-0.4.1 +loggerv-0.7.1 +md-5-0.7.0 +memchr-1.0.2 +memchr-2.0.1 +migrations_internals-1.2.0 +migrations_macros-1.2.0 +miniz-sys-0.1.10 +nom-3.2.1 +num-0.1.42 +num-bigint-0.1.43 +num-complex-0.1.43 +num-integer-0.1.36 +num-iter-0.1.35 +num-rational-0.1.42 +num-traits-0.2.2 +peeking_take_while-0.1.2 +pem-0.5.0 +pkg-config-0.3.11 +pretty-good-0.2.2 +proc-macro2-0.2.3 +proc-macro2-0.4.6 +protobuf-1.5.1 +protoc-1.5.1 +quote-0.3.15 +quote-0.4.2 +quote-0.6.3 +rand-0.4.2 +redox_syscall-0.1.37 +redox_termios-0.1.1 +regex-0.2.11 +regex-syntax-0.5.6 +remove_dir_all-0.5.1 +ripemd160-0.7.0 +rpassword-2.0.0 +rustc-demangle-0.1.7 +rustc-serialize-0.3.24 +safemem-0.2.0 +secstr-0.3.0 +semver-0.9.0 +semver-parser-0.7.0 +sha-1-0.7.0 +sha2-0.7.1 +smallvec-0.6.5 +strsim-0.7.0 +structopt-0.2.10 +structopt-derive-0.2.10 +syn-0.11.11 +syn-0.12.15 +syn-0.14.4 +synom-0.11.3 +synstructure-0.6.1 +tempdir-0.3.7 +tempfile-3.0.2 +termion-1.5.1 +textwrap-0.9.0 +thread_local-0.3.5 +time-0.1.39 +typenum-1.10.0 +ucd-util-0.1.1 +unicode-segmentation-1.2.1 +unicode-width-0.1.4 +unicode-xid-0.0.4 +unicode-xid-0.1.0 +unreachable-1.0.0 +utf8-ranges-1.0.0 +vcpkg-0.2.3 +vec_map-0.8.0 +void-1.0.2 +which-1.0.5 +winapi-0.2.8 +winapi-0.3.4 +winapi-build-0.1.1 +winapi-i686-pc-windows-gnu-0.4.0 +winapi-x86_64-pc-windows-gnu-0.4.0 +yasna-0.1.3 +" + +SRC_URI="$(cargo_crate_uris ${CRATES})" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/files/0001-gettid-glibc-2.30.patch b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/files/0001-gettid-glibc-2.30.patch new file mode 100644 index 0000000000..8174587758 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/files/0001-gettid-glibc-2.30.patch @@ -0,0 +1,34 @@ +grpcio-sys-0.2.3 defines its own gettid() function which conflicts with gettid() +shipped with glibc-2.30 and above. So we only define that function if +glibc < 2.30. + +Fixes: +grpcio-sys-0.2.3/grpc/src/core/lib/support/log_linux.c:42:13: error: conflicting types for 'gettid' + 42 | static long gettid(void) { return syscall(__NR_gettid); } + | ^~~~~~ + In file included from /usr/include/unistd.h:1187, + from grpcio-sys-0.2.3/grpc/src/core/lib/support/log_linux.c:40: + /usr/include/bits/unistd_ext.h:34:16: note: previous declaration of 'gettid' was here + 34 | extern __pid_t gettid (void) __THROW; + | ^~~~~~ + +--- gentoo/grpcio-sys-0.2.3/grpc/src/core/lib/support/log_linux.c 2020-11-23 18:29:18.053038547 +0000 ++++ gentoo/grpcio-sys-0.2.3/grpc/src/core/lib/support/log_linux.c 2020-11-23 18:32:39.502926134 +0000 +@@ -39,7 +39,17 @@ + #include + #include + ++/* glibc-2.30 and above ship gettid */ ++#define NEED_GETTID 1 ++#if defined(__GLIBC_PREREQ) ++# if __GLIBC_PREREQ(2,30) ++# define NEED_GETTID 0 ++# endif ++#endif ++ ++#if NEED_GETTID + static long gettid(void) { return syscall(__NR_gettid); } ++#endif + + void gpr_log(const char *file, int line, gpr_log_severity severity, + const char *format, ...) { diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/fero-client/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1-r45.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1-r45.ebuild new file mode 120000 index 0000000000..67c65bd845 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1-r45.ebuild @@ -0,0 +1 @@ +sdk-depends-0.0.1.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1.ebuild new file mode 100644 index 0000000000..4f6d96b08f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1.ebuild @@ -0,0 +1,64 @@ +# Copyright 2013 The CoreOS Authors +# Distributed under the terms of the GNU General Public License v2 +# $Header: $ + +EAPI=7 + +DESCRIPTION="Meta ebuild for everything that needs to be in the SDK." +HOMEPAGE="http://coreos.com/docs/sdk/" +SRC_URI="" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +DEPEND=" + app-admin/sudo + app-admin/updateservicectl + app-arch/pbzip2 + app-crypt/efitools + app-crypt/sbsigntools + app-emulation/acbuild + app-emulation/actool + app-emulation/open-vmdk + app-eselect/eselect-python + app-misc/jq + app-shells/bash-completion + coreos-base/hard-host-depends + coreos-base/coreos-sb-keys + coreos-devel/fero-client + dev-libs/gobject-introspection + dev-python/setuptools + dev-python/six + dev-util/b2 + dev-util/catalyst + dev-util/checkbashisms + dev-util/pahole + dev-util/patchelf + dev-vcs/repo + net-dns/bind-tools + >=net-dns/dnsmasq-2.72[dhcp,ipv6] + net-libs/rpcsvc-proto + net-misc/curl + sys-apps/debianutils + sys-apps/iproute2 + amd64? ( sys-apps/iucode_tool ) + sys-apps/seismograph + sys-boot/grub + amd64? ( sys-boot/shim ) + sys-firmware/edk2-ovmf-bin + sys-fs/btrfs-progs + sys-fs/cryptsetup + dev-perl/Parse-Yapp + " + +# Must match the build-time dependencies listed in selinux-policy-2.eclass +DEPEND="${DEPEND} + !arm64? ( + >=sys-apps/checkpolicy-2.0.21 + >=sys-apps/policycoreutils-2.0.82 + ) + sys-devel/m4" + +RDEPEND="${DEPEND}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/.bash_profile b/sdk_container/src/third_party/coreos-overlay/coreos/config/.bash_profile new file mode 100644 index 0000000000..2da80632aa --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/.bash_profile @@ -0,0 +1,9 @@ +# /etc/skel/.bash_profile + +# This file is sourced by bash for login shells. The following line +# runs your .bashrc and is recommended by the bash info pages. +[[ -f ~/.bashrc ]] && . ~/.bashrc + +# Chromium OS build environment settings +export CROS_WORKON_SRCROOT="/home/${USER}/trunk" +export PORTAGE_USERNAME="${USER}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/.bashrc b/sdk_container/src/third_party/coreos-overlay/coreos/config/.bashrc new file mode 100644 index 0000000000..96eb997b24 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/.bashrc @@ -0,0 +1,24 @@ +# /etc/skel/.bashrc +# +# This file is sourced by all *interactive* bash shells on startup, +# including some apparently interactive shells such as scp and rcp +# that can't tolerate any output. So make sure this doesn't display +# anything or bad things will happen ! + + +# Test for an interactive shell. There is no need to set anything +# past this point for scp and rcp, and it's important to refrain from +# outputting anything in those cases. +if [[ $- != *i* ]] ; then + # Shell is non-interactive. Be done now! + return +fi + + +# Chromium OS interactive shell settings + +# Settings necessary for both users and automation belong in bash_profile, +# while user-specific and site-specific settings belong in ~/.cros_chrootrc +# outside the chroot. + +export PS1="(cros-chroot) ${PS1}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-admin/setools b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-admin/setools new file mode 100644 index 0000000000..882a117cd1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-admin/setools @@ -0,0 +1,2 @@ +export ac_cv_file__build_amd64_usr__usr_lib64_libsepol_a=yes + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-crypt/mit-krb5 b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-crypt/mit-krb5 new file mode 100644 index 0000000000..abb586975c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-crypt/mit-krb5 @@ -0,0 +1,10 @@ +# Work around configure test that cannot be cross compiled :( +# +# When checking if this is still applicable, try grepping the +# configure script for lines with "$cross_compiling", like +# +# grep -B 20 -F 'when cross compiling' configure + +export krb5_cv_attr_constructor_destructor=yes,yes +export ac_cv_func_regcomp=yes +export ac_cv_printf_positional=yes diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/xen b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/xen new file mode 100644 index 0000000000..60101e0239 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/xen @@ -0,0 +1,5 @@ +# Creating symlinks on FAT doesn't work, so don't do that +INSTALL_MASK="${INSTALL_MASK} + /boot/xen-?.?.gz + /boot/xen-?.gz + /boot/xen.gz" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/xen-tools b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/xen-tools new file mode 100644 index 0000000000..422b8b0eda --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/xen-tools @@ -0,0 +1,6 @@ +# We provide xenstore as a standalone package +INSTALL_MASK="${INSTALL_MASK} + /usr/bin/xenstore + /usr/lib/debug/usr/bin/xenstore.debug + /usr/lib/debug/usr/lib*/libxenstore.so* + /usr/lib*/libxenstore.so*" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-shells/bash b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-shells/bash new file mode 100644 index 0000000000..b7b266cfe9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-shells/bash @@ -0,0 +1 @@ +export bash_cv_getcwd_malloc=yes diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-lang/python-oem b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-lang/python-oem new file mode 100644 index 0000000000..8b527f5a5d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-lang/python-oem @@ -0,0 +1,9 @@ +# Work around configure test that cannot be cross compiled :( +# +# When checking if this is still applicable, try grepping the +# configure script for lines with "$cross_compiling", like +# +# grep -B 20 -F 'when cross compiling' configure + +export ac_cv_file__dev_ptc=no +export ac_cv_file__dev_ptmx=yes diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl new file mode 100644 index 0000000000..f730ae0878 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl @@ -0,0 +1,5 @@ +# Checking if a GSSAPI implementation supports SPNEGO feature involves +# running a binary built during the configuration phase. This +# obviously won't work in case of cross-compilation, so we state up +# front that SPNEGO is supported. +export ac_cv_gssapi_supports_spnego=yes diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-analyzer/tcpdump b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-analyzer/tcpdump new file mode 100644 index 0000000000..297dc03d2a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-analyzer/tcpdump @@ -0,0 +1,2 @@ +# Override the prefix that breaks building with sysroots. +export EXTRA_ECONF="--with-crypto=yes" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-dns/bind-tools b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-dns/bind-tools new file mode 100644 index 0000000000..837a89d7a8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-dns/bind-tools @@ -0,0 +1,12 @@ +# Work around lame function attribute checks when cross-compiling. +# Linker emits a bunch of irrelevant warnings and that trips configure +# script up into thinking that those attributes are not +# supported. Upstream bind-tools already fixed that by being smarter +# and grepping for -Wattributes instead, but we are not yet packaging +# it. We also know that constructor and destructor attributes are +# supported - they are available since at least gcc 3.4. +# +# Drop this when updating to bind tools 9.17.13 or newer. + +EXTRA_ECONF+=" ax_cv_have_func_attribute_constructor=yes" +EXTRA_ECONF+=" ax_cv_have_func_attribute_destructor=yes" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/openssh b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/openssh new file mode 100644 index 0000000000..f2b6e78792 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/openssh @@ -0,0 +1,11 @@ +# We install these with our chromeos-base package. +if [[ $(cros_target) != "cros_host" ]] ; then + openssh_mask=" + /etc/ssh/ssh_config + /etc/ssh/sshd_config + /usr/lib*/misc/ssh-keysign + " + PKG_INSTALL_MASK+=" ${openssh_mask}" + INSTALL_MASK+=" ${openssh_mask}" + unset openssh_mask +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-nds/openldap b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-nds/openldap new file mode 100644 index 0000000000..ee4df86ccf --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-nds/openldap @@ -0,0 +1,2 @@ +# We know that memcmp works fine for us, but the configure script decides that it won't work just because we are cross-compiling. +export ac_cv_func_memcmp_working=yes diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-nds/rpcbind b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-nds/rpcbind new file mode 100644 index 0000000000..d972f62095 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-nds/rpcbind @@ -0,0 +1 @@ +export EXTRA_ECONF="--with-nss-modules='files usrfiles'" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/busybox b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/busybox new file mode 100644 index 0000000000..e02063bc6f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/busybox @@ -0,0 +1,5 @@ +# savedconfig by default saves the currently generated config into +# /etc/portage/savedconfig. However we want to avoid placing it here +# so that every re-emerge will pick up the configs from +# chromeos-base/busybox-config +INSTALL_MASK+=" /etc/portage/savedconfig" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/efunctions b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/efunctions new file mode 100644 index 0000000000..14e19ac0dc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/efunctions @@ -0,0 +1,3 @@ +# Don't filter out /etc/init.d/functions.sh +PKG_INSTALL_MASK="${PKG_INSTALL_MASK/\/etc\/init.d}" +INSTALL_MASK="${INSTALL_MASK/\/etc\/init.d}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/sssd b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/sssd new file mode 100644 index 0000000000..dc3db79940 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/sssd @@ -0,0 +1 @@ +export ac_cv_member_struct_ldap_conncb_lc_arg=no diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-boot/efibootmgr b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-boot/efibootmgr new file mode 100644 index 0000000000..413ab46720 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-boot/efibootmgr @@ -0,0 +1 @@ +export CROSS_COMPILE="${CHOST}-" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-boot/grub b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-boot/grub new file mode 100644 index 0000000000..97fb8b8383 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-boot/grub @@ -0,0 +1,14 @@ +PKG_INSTALL_MASK+=" /etc/grub.d/00_header + /etc/grub.d/10_linux + /etc/grub.d/30_os-prober + /etc/grub.d/40_custom + /etc/grub.d/README + /lib64/grub/grub-mkconfig_lib + /lib64/grub/update-grub_lib" +INSTALL_MASK+=" /etc/grub.d/00_header + /etc/grub.d/10_linux + /etc/grub.d/30_os-prober + /etc/grub.d/40_custom + /etc/grub.d/README + /lib64/grub/grub-mkconfig_lib + /lib64/grub/update-grub_lib" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-cluster/ipvsadm b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-cluster/ipvsadm new file mode 100644 index 0000000000..1adaae9363 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-cluster/ipvsadm @@ -0,0 +1,4 @@ +# The package does not understand cross-compiling. +export PKG_CONFIG_LIBDIR="${ROOT}usr/lib/pkgconfig:${ROOT}usr/lib64/pkgconfig" +export PKG_CONFIG_PATH="${PKG_CONFIG_LIBDIR}:${ROOT}usr/share/pkgconfig" +export PKG_CONFIG_SYSROOT_DIR="${ROOT}" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/scripts/build_packages b/sdk_container/src/third_party/coreos-overlay/coreos/scripts/build_packages new file mode 120000 index 0000000000..c43c4e9b0c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/scripts/build_packages @@ -0,0 +1 @@ +../../../../scripts/build_packages \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/scripts/config_wrapper b/sdk_container/src/third_party/coreos-overlay/coreos/scripts/config_wrapper new file mode 100755 index 0000000000..1444f8a91e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/scripts/config_wrapper @@ -0,0 +1,48 @@ +#!/bin/bash +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Use of this source code is governed by a BSD-style license that can be +# found in the LICENSE file. + +# Wrap all the old style config scripts. + +# We'll be working with the env: +# argv[0]: armv7a-cros-linux-gnueabi-ncurses5-config +# CHOST: armv7a-cros-linux-gnueabi +# SYSROOT: /build/arm-generic +# See if there's a wrapper in the SYSROOT for us to execute, let's do +# that, and then filter the output for any -I/-L paths that'd screw us up. + +wrap=${0##*/} + +if [[ -z ${CHOST} ]] ; then + # Let's figure out the answer from $0. Do it piece by piece as + # we cannot assume the number of components in the target tuple + # or in the config script name. Tuples can have 1, 2, 3, or 4 + # components, and config scripts can have as many as they want + # (although most of the time, it's just 2). + parts=( ${wrap//-/ } ) + i=$(( ${#parts[@]} - 1 )) + cfg=${parts[${i}]} + while [[ $(( --i )) -ge 0 ]] ; do + cfg="${parts[${i}]}-${cfg}" + if [[ -e ${SYSROOT}/usr/bin/${cfg} ]] ; then + CHOST=${wrap%-${cfg}} + type -P ${CHOST}-gcc >/dev/null && break + unset CHOST + fi + done +else + cfg=${wrap#${CHOST}-} +fi + +if [[ -z ${CHOST} ]] || [[ -z ${SYSROOT} ]] ; then + echo "${wrap}: please set CHOST/SYSROOT in the env" 1>&2 + exit 1 +fi + +# Some wrappers will dynamically figure out where they're being run from, +# and then output a full path -I/-L path based on that. So we trim any +# expanded sysroot paths that might be in the output already to avoid +# having it be -L${SYSROOT}${SYSROOT}/usr/lib. +set -o pipefail +exec ${SYSROOT}/usr/bin/${cfg} "$@" | sed -r "s:(-[IL])(${SYSROOT})?:\1${SYSROOT}:g" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/scripts/setup_board b/sdk_container/src/third_party/coreos-overlay/coreos/scripts/setup_board new file mode 120000 index 0000000000..1ae2ca87e1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/scripts/setup_board @@ -0,0 +1 @@ +../../../../scripts/setup_board \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/0000-bump-baselayout-coreos-overlay.sh b/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/0000-bump-baselayout-coreos-overlay.sh new file mode 100755 index 0000000000..9910b1cfef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/0000-bump-baselayout-coreos-overlay.sh @@ -0,0 +1,30 @@ +#!/bin/bash + +set -euo pipefail + +stage1_repo="${1}" +new_repo="${2}" + +good_version="3.6.8-r10" +stage1_version='' + +for f in "${stage1_repo}/sys-apps/baselayout/baselayout-"*'.ebuild'; do + f="${f##*/}" + if [[ "${f}" = *9999* ]]; then continue; fi + f="${f%.ebuild}" + f="${f#baselayout-}" + stage1_version="${f}" +done + +if [[ -z "${stage1_version}" ]]; then exit 1; fi + +older_version=$(printf '%s\n' "${stage1_version}" "${good_version}" | sort -V | head -n 1) + +if [[ "${older_version}" = "${good_version}" ]]; then + # Stage1 version is equal or newer than the good version, nothing + # to do. + exit 0 +fi + +rm -rf "${stage1_repo}/sys-apps/baselayout" +cp -a "${new_repo}/sys-apps/baselayout" "${stage1_repo}/sys-apps/baselayout" diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/0001-update-profile-coreos-overlay.sh b/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/0001-update-profile-coreos-overlay.sh new file mode 100755 index 0000000000..e9a01036ae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/0001-update-profile-coreos-overlay.sh @@ -0,0 +1,25 @@ +#!/bin/bash +set -x +set -euo pipefail + +stage1_repo="${1}" +new_repo="${2}" +parent_file='profiles/coreos/amd64/parent' +old_parent_line='portage-stable:default/linux/amd64/17.0/no-multilib/hardened' +stage1_parent="${stage1_repo}/${parent_file}" +new_parent="${new_repo}/${parent_file}" + +if [[ ! -e "${new_parent}" ]]; then + echo "no file '${parent_file}' in new repo, nothing to do" + exit 0 +fi + +if [[ ! -e "${stage1_parent}" ]]; then + echo "no file '${parent_file}' in stage1 repo, nothing to do" + exit 0 +fi + +if grep --quiet --fixed-strings --line-regexp --regexp="${old_parent_line}" -- "${stage1_parent}"; then + rm -f "${stage1_parent}" + cp -a "${new_parent}" "${stage1_parent}" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/README.md b/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/README.md new file mode 100644 index 0000000000..d31163fe6c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/stage1_hooks/README.md @@ -0,0 +1,18 @@ +The scripts in this directory are called by the SDK bootstrapping +script when setting up the portage-stable and coreos-overlay repos for +the stage1 build. The scripts are invoked with two arguments - a path +to the stage1 repository, and a path to the current repository. The +difference between the two is that the stage1 repository is a copy of +a repository saved in the seed SDK (thus it's going to be an older +version of the repository), whereas the current repository is a +repository that will be a base of the new SDK. The idea here is that +something in the stage1 repository may be too old, thus it should be +replaced with its equivalent from the current repository. + +For more information about the bootstrap process, please see the +`bootstrap_sdk` script in [the scripts +repository](https://github.com/flatcar/scripts). + +The script for portage-stable should end with `-portage-stable.sh`, +and the script for coreos-overlay with '-coreos-overlay.sh`. For +example: `0000-replace-ROOTPATH-coreos-overlay.sh`. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/README.md b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/README.md new file mode 100644 index 0000000000..c7f7d1418c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/README.md @@ -0,0 +1,14 @@ +This directory gets symlinked from `${ROOT}/etc/portage/patches`. It +may contain patches for packages that will be applied during the +prepare phase. Basic usage of this directory is more or less as +follows: if you have a patch for e.g. the sys-devel/gcc package then +create a `sys-devel/gcc` directory and drop the patch there. The patch +needs to end with either `.patch` or `.diff` to be picked up. Ideally +the patches should be prefixed with a number (`git format-patch` +style) so the order of patch application is obvious. Also remember +that you can't patch ebuild files that way. + +For more details about user patches, please refer to Gentoo Wiki page +about it: + +https://wiki.gentoo.org/wiki//etc/portage/patches diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-portage/gentoolkit/0001-profile-Default-to-main-repo-name.patch b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-portage/gentoolkit/0001-profile-Default-to-main-repo-name.patch new file mode 100644 index 0000000000..4bb48fea1d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-portage/gentoolkit/0001-profile-Default-to-main-repo-name.patch @@ -0,0 +1,53 @@ +From e40cd8c76bee4f7c108c1066d60aaf5d8c3adede Mon Sep 17 00:00:00 2001 +From: Krzesimir Nowak +Date: Thu, 8 Dec 2022 16:25:39 +0100 +Subject: [PATCH] profile: Default to main repo name + +In Flatcar we have a different repo marked as a default one +(portage-stable), so "equery keywords" was crashing because it was +trying to use gentoo repo anyways. + +Signed-off-by: Krzesimir Nowak +Closes: https://github.com/gentoo/gentoolkit/pull/24 +Signed-off-by: Sam James +--- + pym/gentoolkit/profile.py | 13 ++++++++++--- + 1 file changed, 10 insertions(+), 3 deletions(-) + +diff --git a/pym/gentoolkit/profile.py b/pym/gentoolkit/profile.py +index dcd02cc..c880137 100644 +--- a/pym/gentoolkit/profile.py ++++ b/pym/gentoolkit/profile.py +@@ -23,19 +23,26 @@ def warning(msg): + print('warning: %s' % msg, file=sys.stderr) + + +-def load_profile_data(portdir=None, repo='gentoo'): ++def load_profile_data(portdir=None, repo=''): + """Load the list of known arches from the tree + + Args: + portdir: The repository to load all data from (and ignore |repo|) +- repo: Look up this repository by name to locate profile data ++ repo: Look up this repository by name to locate profile data (if empty, uses main repo name) + + Returns: + A dict mapping the keyword to its preferred state: + {'x86': ('stable', 'arch'), 'mips': ('dev', '~arch'), ...} + """ + if portdir is None: +- portdir = portage.db[portage.root]['vartree'].settings.repositories[repo].location ++ repos = portage.db[portage.root]["vartree"].settings.repositories ++ if repo == "": ++ main_repo = repos.mainRepo() ++ if main_repo is None: ++ repo = "gentoo" ++ else: ++ repo = main_repo.name ++ portdir = repos[repo].location + + arch_status = {} + +-- +2.25.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-portage/gentoolkit/README.md b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-portage/gentoolkit/README.md new file mode 100644 index 0000000000..fbdc106104 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/app-portage/gentoolkit/README.md @@ -0,0 +1 @@ +Drop `0001-profile-Default-to-main-repo-name.patch` when we have gentoolkit 0.6.2 or greater. diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-devel/gcc-config/0001-gcc-config-Use-relative-paths-for-liblto-and-cc-syml.patch b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-devel/gcc-config/0001-gcc-config-Use-relative-paths-for-liblto-and-cc-syml.patch new file mode 100644 index 0000000000..c745f0b60e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-devel/gcc-config/0001-gcc-config-Use-relative-paths-for-liblto-and-cc-syml.patch @@ -0,0 +1,47 @@ +From d245197378818f66c978d4427b6d0d81fbfaefc6 Mon Sep 17 00:00:00 2001 +From: Krzesimir Nowak +Date: Thu, 10 Nov 2022 16:45:48 +0100 +Subject: [PATCH] gcc-config: Use relative paths for liblto and cc symlink + targets + +That way, for ROOT different than / (like /build/amd64-usr) these +symlinks won't dangle after chrooting into ROOT. + +Bug: https://bugs.gentoo.org/880977 +Signed-off-by: Krzesimir Nowak +Closes: https://github.com/gentoo/gcc-config/pull/2 +Signed-off-by: Sam James +--- + gcc-config | 5 +++-- + 1 file changed, 3 insertions(+), 2 deletions(-) + +diff --git a/gcc-config b/gcc-config +index a44fced..f39dd5c 100755 +--- a/gcc-config ++++ b/gcc-config +@@ -345,7 +345,7 @@ update_wrappers() { + # But create our own ${CTARGET}-cc in /usr/bin to avoid fallbacks + # to the symlinks LLVM creates (sys-devel/clang-toolchain-symlinks). + # bug #872416. +- atomic_ln "${EROOT}usr/bin/${CTARGET}-gcc" "${EROOT}usr/bin" "${CTARGET}-cc" ++ atomic_ln "${CTARGET}-gcc" "${EROOT}usr/bin" "${CTARGET}-cc" + + # handle the canonical cpp wrapper + if ! is_cross_compiler ; then +@@ -813,11 +813,12 @@ switch_profile() { + # Update LTO plugin for GCC. Supported as of binutils 2.25. + local BFD_PLUGINS_DIR + local LIBLTO_PLUGIN +- LIBLTO_PLUGIN="${EROOT}usr/libexec/gcc/${CTARGET}/${CC_COMP_VERSION}/liblto_plugin.so" + if is_cross_compiler; then + BFD_PLUGINS_DIR="${EROOT}usr/${CHOST}/${CTARGET}/binutils-bin/lib/bfd-plugins" ++ LIBLTO_PLUGIN="../../../../../libexec/gcc/${CTARGET}/${CC_COMP_VERSION}/liblto_plugin.so" + else + BFD_PLUGINS_DIR="${EROOT}usr/${CHOST}/binutils-bin/lib/bfd-plugins" ++ LIBLTO_PLUGIN="../../../../libexec/gcc/${CTARGET}/${CC_COMP_VERSION}/liblto_plugin.so" + fi + mkdir -p "${BFD_PLUGINS_DIR}" + ln -sf "${LIBLTO_PLUGIN}" "${BFD_PLUGINS_DIR}" +-- +2.25.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-devel/gcc-config/README.md b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-devel/gcc-config/README.md new file mode 100644 index 0000000000..ab450503dc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-devel/gcc-config/README.md @@ -0,0 +1 @@ +Drop `0001-gcc-config-Use-relative-paths-for-liblto-and-cc-syml.patch` when we have gcc-config 2.10 or greater. diff --git a/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/Manifest new file mode 100644 index 0000000000..f7b58efc8e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/Manifest @@ -0,0 +1,575 @@ +DIST cloud.google.com%2Fgo%2F@v%2Fv0.26.0.mod 27 BLAKE2B 814b0fa8f12d5ce6171fa629b5a7eb34e0e882cc0c5430986896bb38c243e08dc83098f271227f4ba019e78f16dc97fbb381e833aff1819833d243b08add916b SHA512 5132f3438533427c0ab0fbb7a12112a7830ea9122662ed46019ff89c71d9cf80c02edc32dd5c892da572031b5a2cce100f2602fa6a19bea6be7c02781f701273 +DIST cloud.google.com%2Fgo%2F@v%2Fv0.34.0.mod 27 BLAKE2B 814b0fa8f12d5ce6171fa629b5a7eb34e0e882cc0c5430986896bb38c243e08dc83098f271227f4ba019e78f16dc97fbb381e833aff1819833d243b08add916b SHA512 5132f3438533427c0ab0fbb7a12112a7830ea9122662ed46019ff89c71d9cf80c02edc32dd5c892da572031b5a2cce100f2602fa6a19bea6be7c02781f701273 +DIST cloud.google.com%2Fgo%2F@v%2Fv0.38.0.mod 1006 BLAKE2B 9d321b9bad7e881795f0215828ca23ff5753b8ca9cbe64ca085bcd2f64d36d0d5bdd5c3e80eb64e19e067748b6b23eb7837827cede0e75a840ed1cfa2b00c1a8 SHA512 8aa90e6ce7d50af3db56c8a7abdd16822f6351cabb96e6b75ac0cdefa15bb4a2d402aa84e6212fec4d599ec6f13cb1891bb37f41200e6a05a27642375a89a959 +DIST cloud.google.com%2Fgo%2F@v%2Fv0.44.1.mod 1150 BLAKE2B dba381727351af838c47c0d81a0d842d3851dc4e4a6cce1fbea14ccef9dc21407dbe2749fcaf130df4211b083ddac015bc532f7285450e767064855cf729ecce SHA512 6a49609209f9d51e4851ed5c55a06b9451c0101de3bd92b7fa5b3662b2e85df4a667ad8068288773b9a85670c65fbba46f88c643aac290d1f65e2a44ef531409 +DIST cloud.google.com%2Fgo%2F@v%2Fv0.44.2.mod 1075 BLAKE2B 370ba9f085033653a0fe9d328aca613b7feb50eb9407e55ed583d7b9302fd844856c9a1a9dca69c67c360c0a7b49ebff6ebd22946fb83c6c7061b9b8c573e99e SHA512 a58f7bd34b5ba8affd021a2d34be64e49dab0d9bb893ad25e00bf5b50ff92c4762b6d9093134b483dff2573ad3c0ebb5f42808dfbe33081cef0e96dc5215074f +DIST cloud.google.com%2Fgo%2F@v%2Fv0.45.1.mod 998 BLAKE2B 8dc0e29275055b37db12138b6e30fb22a6ccd995b3c3566efbb616f799660cd7073bfee935e41a77f311a95d0ec40ef9b5e40673ff8e59c9c06e5cfa32675adb SHA512 ade24f2b10476b5e5eb42d6f471b73ccb7d8107e6a26c5b1fd38191dc7d4ffee31552088fa5854983c47a2c4868a13bfc22d7f92f834662c75f7c4c88e0274ea +DIST cloud.google.com%2Fgo%2F@v%2Fv0.46.3.mod 960 BLAKE2B 879529244d38fbecdaea27588031c2d0d82551d8173f7e41f004dae8356e2264259d80e66953e941aa856a9613ae82211ea8dc0b12f9188f65bdf54487052952 SHA512 cbe178d04fe28f9b7dd07b0317fd4404d805e80ceada4953ad47763bafa2f215f88464c1315261a902ebcc52145af09df4c96a341e42644d38526909fcef313c +DIST cloud.google.com%2Fgo%2F@v%2Fv0.46.3.zip 1195278 BLAKE2B 34c2662f7ff89dc98d6e9f156e77eafdfd26df0f6fd5d4858bac571261e9488dc5d4541e745b173387f42dcd497cd02345ca3e0acce0e326129997b77ca04a81 SHA512 bbcda7aee6a580061cfd9858fc8d7dbafefd8eecfad25e4c6825d16b2e038e6a5be7b5d876b348d86059763a0e0eeae7d1546fe35fc98f5b479f478a25a11512 +DIST cloud.google.com%2Fgo%2Fbigquery%2F@v%2Fv1.0.1.mod 319 BLAKE2B 99d93b5a4dbd4c90f3e8dfb58e64ed41fdbb484f2348297a90c8dabe03b036ef6917c2c9fb7cc4795d0c8d25af10cefebff4c4bc1b2ebcdc876b6db8beae5eb8 SHA512 338a067f7ad15d8549da11ac146b65657923ae4fee3caf2eff888c104c0df0edcdf0d98f5be6a67a764aa39210d5cad811ebd9d604084a67049b753246fbf89a +DIST cloud.google.com%2Fgo%2Fdatastore%2F@v%2Fv1.0.0.mod 433 BLAKE2B b3d58e290d719434bd433ffda9572fb233171493c7b81bfe353d9b7730130d5dec365f4e93a136a25467851b5f26cb21be6be06486696f010ccff1fcea140662 SHA512 8082ab039764aa6abd6615b1cf3a1830f2813dd5b791a27b7f0ebf5fa1ee68fe040a5e12988e6c91ba5d032a0a6666d384d6eceff12165d394a75ba56b744382 +DIST cloud.google.com%2Fgo%2Ffirestore%2F@v%2Fv1.1.0.mod 568 BLAKE2B d3d62f2d5c018c4ea3c829f7485e5a1239e2d810f79306af4d08ac32acda4d33e8e90c66c63540c4c95231f5fa116634758858dbf4af2a953a17b0db2b5c1cc9 SHA512 adb3d294ec1e9476bed820afa92aea5cabf77e7996d83bd1f03dff8447dfb13dd18ab4f091ad6ee209128151dcbfedb4967f99ccf7e10f5286e90b2ad56441d6 +DIST cloud.google.com%2Fgo%2Fpubsub%2F@v%2Fv1.0.1.mod 508 BLAKE2B 9915d1d1a768852b3f262784771c8fe2e7e176e61f7d77841f8d3adac571dc141e36c6455c19090cf00a98a7a5ef0c2c887424142e2ecad339f8105b1c30f91e SHA512 8a393b8614207c22c73a706ccc3e66a8a16d2f305ab95d8f70774f13d0bcb7396b0ac5095daa57ebb991225a1db08c3110f1e85c26dd72f3bbcaf73fea536d9c +DIST cloud.google.com%2Fgo%2Fstorage%2F@v%2Fv1.0.0.mod 374 BLAKE2B 4fef9f7da9f23e94efe43be0e279958715949a889c5d51e388f5b66ec9a7cdbf15a717c988883647032998facd71359ad1dcacebcf3334100144abbfa12dac03 SHA512 faf4a02a513ae4c23f931b8917e74a056c528b4267ef3b5b704949283910bfc5d41fdd7264b78d4fc1f6e5b370474a7c9933a2fad36bb5c872006def71f8ed0b +DIST dmitri.shuralyov.com%2Fgpu%2Fmtl%2F@v%2Fv0.0.0-20190408044501-666a987793e9.mod 36 BLAKE2B b430ef9388b0dfe932b201495a00275a6036338c99160d7362556be1e25924584b0802061d193533f23b1f76719dfd6a9484572babd25f1af0e53fd9bf07ac00 SHA512 196affe091247f94ceda4b56629bd62d4ee2b397f2c0f56c9534c02e43531b46705ad33543b58c1a4fc7a48e25e5923db087fe0485a93966a4086581c0d1d3e1 +DIST etcdctl-3.5.0.tar.gz 4020010 BLAKE2B abd4c1aa7206d20033cc7ae41dad5e3c40d637a540b28f773aa82e6dfcd5cb935df5186ad0fd96b27364d4cf3ef08b9b04d079e0ea78c63f5f1b893c6d641a5f SHA512 ea332fe99c9bce842dc9919b7cf676db2024adf83c23c37dcd8db48bc2a2d3f98879893701644a2317dea69dc15f747f42f5473f14f4343fe7aee9a6b4ebceca +DIST github.com%2F!burnt!sushi%2Ftoml%2F@v%2Fv0.3.1.mod 34 BLAKE2B ce54a247aef91043830bdf0603c8452ba38eceb1495af6e7a74c9119234a0dc5cd080cb25258c28f5e270acf91189a5ed33e361cbf17de2be5e37dadbda1d90d SHA512 320941bc3b7fb8bc595e6135cbc513a7583d129f0cd92508055291e141191066303cf75148e25198c21f6c6c539a790ea3210f3ecf5de6a2a03b70c753091146 +DIST github.com%2F!burnt!sushi%2Ftoml%2F@v%2Fv0.3.1.zip 56132 BLAKE2B 5edcfe991d7fc40094d637bae8d8d6f1f897ab3d3786ade2bb80287738103264520681ced8d30d2037253206c32d3f867f4d024a571cb9aad030ebc451e198eb SHA512 43ed64ae515738487e9b75a2290d0b2bc25e83c021a9f29b21487c37adbf34e74e1e7d3d5ec0dfe678c8396356f95c3993a5f5610d1791ff62056cd182a4272f +DIST github.com%2F!burnt!sushi%2Fxgb%2F@v%2Fv0.0.0-20160522181843-27f122750802.mod 33 BLAKE2B d234bf9be3dd919cb1f8d33750a24dca68c90fea110fd0ff62f0dba86d2ebbfc66d55fea62745b6383c5607bc91cfd78c9d2cf12df251397e85995c04707caa2 SHA512 dbfa64ac31b25fdbff12110c6f9815abfde65f281e40852e7165499a2cefb6656c74fe0b82f0f018304daa02b83b421e9c15654efabad39787c69c1b2996a79d +DIST github.com%2F!one!of!one%2Fxxhash%2F@v%2Fv1.2.2.mod 34 BLAKE2B 83966cb7de9bb687f99f17c5c89c03718258d2df34e3dda01b96a2fcb1273a0ba0e3253ba5950d5458193d3e54962371317a8fe85020ae338b44e864bd96667f SHA512 9081c69a2480ef726f547047306dc9136211ac7550882e68d458e2c04e5343366cb08f20525a51c804ab9a554dfe8363a1d9660bc0f9e501e1d996f7b6f320e4 +DIST github.com%2Falecthomas%2Ftemplate%2F@v%2Fv0.0.0-20160405071501-a0175ee3bccc.mod 38 BLAKE2B 2e1a897393e3527f0f82e6ab9baf62558d9cf54b56ada5d79aa1b206128de30395d9082bc600c4aa2a17e81095e429cc5874de95047854531cccc9ea0b867de7 SHA512 072ca7ba3d5ca815f58848db201002cc572d95334aeacfe44cb226505ad20d82ce06eb2ee059650912ae499db6291822c583296cb65a66e54adce62d6d850929 +DIST github.com%2Falecthomas%2Ftemplate%2F@v%2Fv0.0.0-20190718012654-fb15b899a751.mod 38 BLAKE2B 2e1a897393e3527f0f82e6ab9baf62558d9cf54b56ada5d79aa1b206128de30395d9082bc600c4aa2a17e81095e429cc5874de95047854531cccc9ea0b867de7 SHA512 072ca7ba3d5ca815f58848db201002cc572d95334aeacfe44cb226505ad20d82ce06eb2ee059650912ae499db6291822c583296cb65a66e54adce62d6d850929 +DIST github.com%2Falecthomas%2Funits%2F@v%2Fv0.0.0-20151022065526-2efee857e7cf.mod 35 BLAKE2B 873b4b9c8491117a0b99bcc183ae96fc7e392c68d7271b73b5d7876574a5c7d67580425b35445ff2fff326c5cc7f328326d5d11946699c213cb2b84e8a9a0aad SHA512 7f23b8c5622c02b295646c7baf6f2ea3dd01e11e18ac9c263b853c7f771f5d098d8bcb75971f0cdc33d1c4765b563f3382ec5dc4bf20010065c3f1bc94e93175 +DIST github.com%2Falecthomas%2Funits%2F@v%2Fv0.0.0-20190717042225-c3de453c63f4.mod 35 BLAKE2B 873b4b9c8491117a0b99bcc183ae96fc7e392c68d7271b73b5d7876574a5c7d67580425b35445ff2fff326c5cc7f328326d5d11946699c213cb2b84e8a9a0aad SHA512 7f23b8c5622c02b295646c7baf6f2ea3dd01e11e18ac9c263b853c7f771f5d098d8bcb75971f0cdc33d1c4765b563f3382ec5dc4bf20010065c3f1bc94e93175 +DIST github.com%2Falecthomas%2Funits%2F@v%2Fv0.0.0-20190924025748-f65c72e2690d.mod 79 BLAKE2B 51cb1c2c33300626f74f843ce56c333b194b9a46230d3befe94343fe9daa62314a59b74a6d78c97415f839997fb42700c762fe02ef76240924ba52d18f723ad6 SHA512 df2dd357e057bb1fc65ef4869f64149f6446257406886e89a39f7dbc7e6c9da25a8c17567b14c8d3adefaf21fba98e0f2663924c7d32a4f82d30377ab4032162 +DIST github.com%2Fantihax%2Foptional%2F@v%2Fv1.0.0.mod 44 BLAKE2B 9ee187c88e6e4eba0b58dc16701725ff50dfc3af729ff9b58c3dcd200854af59d50689ffc51caafbe6af5685d5796331fc69dcb4a1813f6124c4e6f1a0bb5725 SHA512 e594fe55205c9dd96af55f58d011e5ef916c66eb057f7c0cb73fda0388133b6b476bce423969f85c1b95eb87ed9ed48bce7570fdbd131e0ad5e7ac6010514c58 +DIST github.com%2Farmon%2Fcircbuf%2F@v%2Fv0.0.0-20150827004946-bbbad097214e.mod 32 BLAKE2B f5b653f20e85bc44cbd3882fdd8f425c0b71733eae4bcdf2623952f1ed2524e8067a169f1cc0025f6570aaa4653969baa7d4626db6cf0dccb0d7378cc36da6b2 SHA512 a201f9c169bba0d962c2595ee8c625a2b7e39873e4bb3eb1ca646340638917dabb2309f1ba4b71d9fca4cf2da2d3684076c67ba362dd07a39538a45240f7f987 +DIST github.com%2Farmon%2Fgo-metrics%2F@v%2Fv0.0.0-20180917152333-f0300d1749da.mod 35 BLAKE2B 97d3ccde6ba4ad06a5344183f954cd6dfea580673607a6d54f1c0f3a643aee512bbe5fe7bdbc22629e6ffeb58f70422b9b80577d70fb58db9b03ababc0552ba5 SHA512 fe8dfbec1d09d7da5829af43760a4ddb5495b6a63eeb76fb3758aeb2fcf83d83ea443a15789d7042a0f5e637664babc9c388dbebc63ff7d35fb9545c7c7da991 +DIST github.com%2Farmon%2Fgo-radix%2F@v%2Fv0.0.0-20180808171621-7fddfc383310.mod 33 BLAKE2B f9ad41153ccea8eeb725d791dd7f44f2c5d8c997d85a091c0091ebc2ae38601928fcf13cfc0e326ab459538d16a3147f762c6b1d9b2abccbaebeb35691b0e5dc SHA512 98f0f51365ecedecd1abe944a765160f99ccde69abe92a44d4f0e30f72a664b828cddb085886d8460ea7faabd0cbe7abdbde905ac758be0a3752c9a8f3600b6f +DIST github.com%2Fbenbjohnson%2Fclock%2F@v%2Fv1.0.3.mod 45 BLAKE2B 57350526cf25f10ae2018fd72f9944dae239a72c2a44db02f0a7414d802cd03b48e58d3c63fea3cf02cffc26e6c7b334190b2f7a76b7e24ec50aaecdeba1a442 SHA512 d17d2e4a7184b75fde3ef47d7158c9913611ae55dc2e67ad2d0db87afaaf894d0eaf5f0f5b027e2d888c592735dec2d381c83c7992576eb164492e98b24b5f1d +DIST github.com%2Fbenbjohnson%2Fclock%2F@v%2Fv1.0.3.zip 7220 BLAKE2B 0a7e9be6781be8c5c8726ac7acdce2d55c4b6690c151954442577b7a10005329261b1bac7d0ec9e0b15dd712762ad81c9614d90e03f7d32541eb99de904c8e2d SHA512 acb1039ee94aedeaab9cb25b218a2b7953ba22352198260630a168b1341f1d04dff827142a968b039cc03295055d2528fda134c696573ec1bee02648915ab22c +DIST github.com%2Fbeorn7%2Fperks%2F@v%2Fv0.0.0-20180321164747-3a771d992973.mod 31 BLAKE2B f69b0989e51b0b649f81b044169fe4309f130eba5bcc6ff33aa9666b1b754aa0e524b8c7a627a91000ccc4f93bf93cdee3e97bd3b2184b050878bc3f413f0c72 SHA512 f21fd002853e4435421f8396e6be016f65be1537815c60d23940caf26e3f14dd6f2caac802cb64cd586b1b1f1220b2727de347b3d1816b8e741f68d87ebcf03f +DIST github.com%2Fbeorn7%2Fperks%2F@v%2Fv1.0.0.mod 40 BLAKE2B ce42c81a7dcb03d21a99d6240ce12f8455297722513497b1a75f2c848b5fb7ef70b577c2406638442f16beedd68806de890a5c299cf1c008c439df23df2f5bb1 SHA512 ec4424da8e1e3849408da7bfe83d37e21ac75edb889de8ef63be897d59678679b018f4606be78500952e7eee73a6252ee6e477b1a1612e2d036dbf72c17b9c9b +DIST github.com%2Fbeorn7%2Fperks%2F@v%2Fv1.0.1.mod 40 BLAKE2B 6cc86f2bceda8617678a251604b6c049cfdc80f9afcae0cead6b2cd04f90fe1b5d5d56d0c29f98fddd7f4ff6fb4a0f97c052193b153dbfc772cf6597d664c09d SHA512 d0c78b8f08d177e05148ce845f8d720fe79a193a420c12ce15504af8fa3dffc4d2fcebea8030f5cca90aff5775013e2252e0c289d4ed5094e07657ea97a79570 +DIST github.com%2Fbeorn7%2Fperks%2F@v%2Fv1.0.1.zip 14678 BLAKE2B 6647c66a45f2dc67b83a1e493bc73d4439de7962f7f1472dc267be9a9408b5ddda66b8ee2fdadf18b2973648035fb3907fe539a8b7ccb768b8c99c4cae573eab SHA512 f973efba5ce7c651d9c3e4e467a1423b00b102034a054874d09977957b7b55557e05da06fb4c158e693db7bac01bf601f950cae0d411dc92afd0686d7e1de4cf +DIST github.com%2Fbgentry%2Fspeakeasy%2F@v%2Fv0.1.0.mod 36 BLAKE2B ad3bb22bde28277f26a819b093ab7392da57c027bfb91bbbab4686d225ddc4e239c0905f6eec64cda2fd47746bd625682f663a11007bdbbf64f9cbff7dd1de76 SHA512 f961ced2c3e902be60fb862fff6b1c4457c57bd7586375a18857863be63d9b3ea998b05fc0c9c3a7270387e9907861d6f9d6ce4024643ec84ea6a63e59e915c1 +DIST github.com%2Fbgentry%2Fspeakeasy%2F@v%2Fv0.1.0.zip 9262 BLAKE2B 50feca006319c5a8d957976be1c02a0a6a7247441fa0e903b1a03de85859f2afd0c93cf8599f60974686f47bdb7f0c94e58c6ec01ffa3fc33cf5d04da3bfd08d SHA512 0e52838ad73009c795d6a43d7d52d082b0ec134e0f07015fa51caab7d1dd141b19df7807a7ab146312848567f8635966c6ce7ac22b934a630e0131383caef9cf +DIST github.com%2Fbketelsen%2Fcrypt%2F@v%2Fv0.0.3-0.20200106085610-5cbc8cc4026c.mod 568 BLAKE2B a2769032d81e02d8f4945648d36e862a996841d0e138077fd190b47b700fa08cd4e8e8d300925fcae5ebe48ea972afed0dcde81870f3673a3227ba90beb5e341 SHA512 262ec838f5c4b97bc186533c20456e62633038ae74747c7b884788bd06ce01863a59237557877d35f37338ebc018d2c1c8ae963e4a42dd42e0823a5b3ec81bb3 +DIST github.com%2Fcensus-instrumentation%2Fopencensus-proto%2F@v%2Fv0.2.1.mod 58 BLAKE2B d724c8e5ab039b227f3c437ba570398b789f53fe80db6f8e57fd2cb2199a5e7acef24d7451f9b27a4da464770660d31fc785c7165deafbc35009718851329fc6 SHA512 23d6171dbcf339c72fe25ab7a7e70cb385dffd654998824fac0f6b6464717873332d39fe1f96101414f5e2d240faaab0b960da2e31c08ef98443aa238bbf02d4 +DIST github.com%2Fcertifi%2Fgocertifi%2F@v%2Fv0.0.0-20191021191039-0944d244cd40.mod 45 BLAKE2B c21093aebb1ef513bf84d13f3cc94ca5ed3dedfcb396d07a0e146031984a72d1ff488473cc8868303906fb397842b105bd81c8f725120eb80c17d59762ddeba3 SHA512 c1ab1e40d352c16aff7a2b91123ecab7500817522ca8cad2e5ed3c45d6dde6e63cf153f124ad3317c0ff4f6b74491d952e01fc3b329d0827b472878a6f001c10 +DIST github.com%2Fcertifi%2Fgocertifi%2F@v%2Fv0.0.0-20200922220541-2c3bb06c6054.mod 45 BLAKE2B c21093aebb1ef513bf84d13f3cc94ca5ed3dedfcb396d07a0e146031984a72d1ff488473cc8868303906fb397842b105bd81c8f725120eb80c17d59762ddeba3 SHA512 c1ab1e40d352c16aff7a2b91123ecab7500817522ca8cad2e5ed3c45d6dde6e63cf153f124ad3317c0ff4f6b74491d952e01fc3b329d0827b472878a6f001c10 +DIST github.com%2Fcertifi%2Fgocertifi%2F@v%2Fv0.0.0-20200922220541-2c3bb06c6054.zip 160134 BLAKE2B dddc0f17e3319db4c6e1a1d3499796d53a5f07bb78fd16670ebea4cc107a241393d02605603466508c081b63a4df4156e337d59ef4697c889d580bcdba7b69f6 SHA512 242da15e7bf049254e74a18974dce49cb2eae9f2e7abfbaf3a55ded4816906efca1959597bdf0775427a1407b8cae0651ba5fad77919977d27853d589e1d6fe0 +DIST github.com%2Fcespare%2Fxxhash%2F@v%2Fv1.1.0.mod 146 BLAKE2B 5efa8dad622ae253ffa106eafea277fd947fc0f28e6962e461283ce2267d992b85b1f0eb9074a90009d8ed1d47f9e1f3e03cfc0eb7ad7df104282cfd144cc12a SHA512 32c34a590e6c113a16700ef2faa5124ebb6c8773cd76594312157bd2b70d54cd939ff2c32fac47421b5615e804142cb7b393394d4745d5894f9b68392bc37ad9 +DIST github.com%2Fcespare%2Fxxhash%2F@v%2Fv1.1.0.zip 12221 BLAKE2B ea2f826b4582ec60f51c65783408df0e065d2a752d1cba17aaf277e0c2b48779a3bf3579982dcc26e5566c899c3f933e4c711d2f1e01c98c13e73d46fa08baad SHA512 09432cff34f69e9b0cc6f0d5bb9af376efccb85ab4396c14a4e0c072272f3172a93c240c5ae0aa89eab91799d1bed1a0e7e00ba83682843f46344c9e2fc2d4b6 +DIST github.com%2Fcespare%2Fxxhash%2Fv2%2F@v%2Fv2.1.1.mod 45 BLAKE2B 350e937e3f7b254b5c590445a9a7f7cc908daa2a5f208e293ac414d50b46bd29671bb483e55daeedca41d70a42fdcc62ce17fffd9992a932e29153ab6ca1168e SHA512 c1b9f572957bc4ed1ad0c61d22b7b5d6a4c863df2aaeb4cf914e304af21d949c9cfc53dc8eb67aacdf3dd56f339ee6f4a1f5fa464121d9db79b7b3febfb3251b +DIST github.com%2Fcespare%2Fxxhash%2Fv2%2F@v%2Fv2.1.1.zip 12031 BLAKE2B 47bd92ee66282b671cdfea60969710e371540e79b3c1e2f510380e3dbbfe40ff76be23ab48f44855b1cbbbed7cdbfc4f1ea21bc4bd7a37716de7c27a7ef81329 SHA512 dc5efd476875fe3cfb3c5f5ce9314920bb2175be85fd1a4667faddee1b5360113b66bdc2f17e4fe889a7d104d684558744bdc6c56c8ac3afc585d7aad0114486 +DIST github.com%2Fclient9%2Fmisspell%2F@v%2Fv0.3.4.mod 35 BLAKE2B 45d27e6bbd9255a355b6bd14ac839c7d87fabb393693a8b862ad974017af01309e5d36fa99d4925905c1617c0d90b5263b54cd95af2dbab186e293936dc86459 SHA512 ca8192c6321468b4332eb63c765a5798150dce9312873123b48d9ec67ebb4229cffc7b7e8054b8b0a6f45611f08130008031edf33da3468bb9a4ee9455fa02a5 +DIST github.com%2Fcncf%2Fudpa%2Fgo%2F@v%2Fv0.0.0-20191209042840-269d4d468f6f.mod 170 BLAKE2B 68adbd7d4176fc66228fa579cbbffb2239322158a9fe1226a106a2db6a7210cf9811ec30fbed4bd26e260906a214b9546d178cc1f6efef57866d378cda457166 SHA512 3877a1f5b47e6316c7a4d4e14959b355381eb3a32fb11270c646617b9908299d7dc806869d21b1fa6faca7a326f168dd1a268735cd1d532be2c318ddf9237014 +DIST github.com%2Fcncf%2Fudpa%2Fgo%2F@v%2Fv0.0.0-20201120205902-5459f2c99403.mod 170 BLAKE2B c8f3e464fd2cb8f38cf999a300b44307a1e3d40101460176aaac8467ec7d371f08c69ebbcae7ad8086a48a02a0dd7fc4b1cda1bbd7b5199c4b76f1ff0492d7b3 SHA512 4cb0a4f9d5f74f3115a10661469cafa88044a8ed2de959b26054441714080fe8d639485b69df02e0f91fa9040db259fbef8281971c28a67953a5abe5b7220ccf +DIST github.com%2Fcockroachdb%2Fdatadriven%2F@v%2Fv0.0.0-20200714090401-bf6692d28da5.mod 473 BLAKE2B a92fb866f551f78d532cdf06f354e02d27f64b0b6cf63529f2b272f94a88cdda0d67d10f20adfbc9cc64035437b78bd6935612889a7fefe3f6ab8736bb9ceb9a SHA512 76b1f03cf391c4a365282cc3caf4e1701c195cd0c0fff1e580333a722403868902dc28355f013cfe0e069a4013e2f54f28b10747e2cc1df00c64b84fffc947fd +DIST github.com%2Fcockroachdb%2Fdatadriven%2F@v%2Fv0.0.0-20200714090401-bf6692d28da5.zip 23935 BLAKE2B 9ad133155820405e4b31287c275b4ad37fdbe8489de1d9d6745a8d849ad28bb696db84767a4dae74d79d3c85fad79d617270be266c60f255e73563a90213d312 SHA512 3fe25ed0c343c03e97d2230d829d93212603eacf9e2238e7c4a440e17710a854852c2fedb4234b7fe82f2a6921adc2aea28f4d1f0646dbf2102732d8f4ceaeb6 +DIST github.com%2Fcockroachdb%2Ferrors%2F@v%2Fv1.2.4.mod 37 BLAKE2B 1cfd7c10c31fcc2d78708be02ddb7fe18098782df3764f4394b2bbbed579fbd4e7692d2f75e1481a994c35e5f2355549eac6de2319ca1d07ea2bda3939cf5013 SHA512 1b62593fcfd90463192016f145a970fcb4c458b8482e60b10505a53e49f0df7ab3cb9bf5acef1d79cc278a2fd742d08df4cd0969e0b0ac04eda6fe35c5cb5bcf +DIST github.com%2Fcockroachdb%2Ferrors%2F@v%2Fv1.2.4.zip 186141 BLAKE2B 6d071ceb36c2b67ceb7d79d66998044a3ce4cc262c446eca88b9cb4ff0fc62f3e397409fef1cfe4b7d668b96ec585bc0eed1d015e1fb2e45736e7d7611c19195 SHA512 feabfb2f518a47efd7f201b5f357b1e7bba5565112ff9ec4d5504042a4eab699f312a4779fc2c5bb217ad1cee459b43ddb91fdfa420b6c5bdef44243607bd11c +DIST github.com%2Fcockroachdb%2Flogtags%2F@v%2Fv0.0.0-20190617123548-eb05cc24525f.mod 38 BLAKE2B 2b11ff7691f470b19935549dd6f4c0f112c2efcabf9d32a1b1e8130685b328f14c54907a51188deb8521cd6179a2d92a2c0f63d9a8dedb63a5bbbaa50f077232 SHA512 38726c73deabf25e639f9887a0f3787e43109d9c788427664d138ced64d883133c68cc75a2373483c3f54abd13daef92e0ca8d243f545058f0c0c59f995a6763 +DIST github.com%2Fcockroachdb%2Flogtags%2F@v%2Fv0.0.0-20190617123548-eb05cc24525f.zip 10900 BLAKE2B ffa7b16838c7d8faa4145da4ff60a8e602988ce9722e69b79bf4ed0deb4180554849256083e0f09afd762572d73d1796b97b91bc5e399e2d1a59aaad6d6a96fb SHA512 6860441048d1edb1abcca59f89d5e6f27c3d4cb3895b5e127d7024267dad809fe4e3107c49df40b0fd96078653dc1ff219c7d0f3a4faf53a61a69100fab4a637 +DIST github.com%2Fcoreos%2Fbbolt%2F@v%2Fv1.3.2.mod 31 BLAKE2B 7bbb809c199d39bac173751c3dc21b23ee8b020f20b4447c33681469b5083c64e74f699fa8d3dd55446b76ed44fc0949337303a776efeed90a764af1d751c8a4 SHA512 12f6b0e7090b257656ee9068083207fdd1b6d9f0b27546cb5b3a5a520e5944f3eccb8f6dd644a17e1089bbf787fd26b3e83eb0f0353071c8c4ef23ca99bc6251 +DIST github.com%2Fcoreos%2Fetcd%2F@v%2Fv3.3.13+incompatible.mod 30 BLAKE2B d511bd14351d68fcde2b3be3f008373eb12d2c61133c80aa3a1938e53ffa061c0aa51065f07b208a073b448c25309c3b2d67c0ed19ad3697309a679fcb844414 SHA512 a986c2cac4728288aaf90667b54ffe9cbb9e1a55697347f9541e6aa0dbfc5b8d245c2ac15e8a9558d41862d98325f3f2f4055b02bcf1e9045b78bb3577b3f45f +DIST github.com%2Fcoreos%2Fgo-semver%2F@v%2Fv0.3.0.mod 35 BLAKE2B 931ceb7bcae15a876b79910a59b0f4ec67ae8f0ac5fbd401e80233107e7683d9cc4a947548c4d08b26f2d47ad6bfe4916f99ffd2a98abe26e8161af87eb49c64 SHA512 58d88566898778823c24b5f4ff7ac50384075312e3eb332aa01233ada3ff385cd8a0e3b8727a77ecf068f13b52a304fbdb5f47a27957333dbd5a8fb1448956c2 +DIST github.com%2Fcoreos%2Fgo-semver%2F@v%2Fv0.3.0.zip 13848 BLAKE2B dc2ec3bf79baaafad410ac2b4625dbc1c520803659b480c2014ffef484d409135ea5d09035669457162457962dc6b3532a480893f399b876810fbc1adfdab8e2 SHA512 918009558869443193fed748b3cc807dbfc540967d60e0315c74c6a09324d7d783067e0f21c5461ebadcdec3c7e6417522565a00e33617af8a8168281a0040c3 +DIST github.com%2Fcoreos%2Fgo-systemd%2F@v%2Fv0.0.0-20190321100706-95778dfbb74e.mod 36 BLAKE2B bec7662666b7a5313f4b7ed0789ca75f07dcebed3b4498cced2b75b3622bc4c8c7d624066338fc6d77adea4b778c89f0a1218fad524c6804ef350deae2f24d68 SHA512 00ccb440abed145db781cbc7bc12695057b7dfa034c8ebd7ab1aaf5ea509fafc0be7147328dd9654e3fc2623bbbf91fd3992a86ff29e78bfa3e868d994b47e7d +DIST github.com%2Fcoreos%2Fgo-systemd%2F@v%2Fv0.0.0-20190321100706-95778dfbb74e.zip 109838 BLAKE2B 82e02c44f4fa60aa7257b79e385af47e23508e260415f0f768e4f7aac6a5962c713488458a50f1bc98308446ee3f45de973d5240811dc5a113e5b9577f33bab3 SHA512 7acd6ca00d067e6a81fbb12697ae9d46fa9880834934065549bb23671153012a8596d4c7875705578ca58a259ff81b1165e45aa65c93406d2c324c61954ea4df +DIST github.com%2Fcoreos%2Fgo-systemd%2Fv22%2F@v%2Fv22.3.2.mod 91 BLAKE2B 75d03e4a6fc970743c11a4a9d52dedc93f72b3dd3052c72cdd660af9df42b014f48ecd65961248e3b20f3e258d1ea36e058879a7039ea58441902ec5f339e382 SHA512 722430decd4f1022e8b035bcc7c1ed295db21a3c64f9dbdf409bd0442356664d378d4af37b7de828c02453014a5a9ddefb3397cbbbc8481c14179ecba9499a5a +DIST github.com%2Fcoreos%2Fgo-systemd%2Fv22%2F@v%2Fv22.3.2.zip 120397 BLAKE2B b34e5bae7f632d263c866a599ed6eb9058636e8c69c972409497acb9e93ae0e5228899020c507d9041080ba8c57b8a8dd82cf74cc409edfb19ea5a3a2d6b6d4e SHA512 52b3913281e95bc58c31efab3112186e660ccd74b575f482ab6e830e7331aeec8b92778400259114816ba58648463f505de42c5aaf322a30184a8aec5a08b1e3 +DIST github.com%2Fcoreos%2Fpkg%2F@v%2Fv0.0.0-20180928190104-399ea9e2e55f.mod 29 BLAKE2B db9b03b0adf02e3b379eb06d67988a60f2e2034d1217e56b40ebafc1262cb4803500b73a3e697a5a73418615c84310bd7f7aeca6db56f6ddbcf6c044cce0e9f3 SHA512 ea629c85891049bdff24f75a4dbce34f048a9627fc126b44f497b3ae65602045ca4fe0856e1b3d7ba050bb867226b90c25912565867c696bc370697341681c33 +DIST github.com%2Fcpuguy83%2Fgo-md2man%2Fv2%2F@v%2Fv2.0.0-20190314233015-f79a8a8ca69d.mod 217 BLAKE2B 4232fdc22064d42e7b97efa666b5345f93d53d40ba11231778e5d17bc7d48c6178d27f4e8678d2139ba4e40a90d46a6caeab1a9696b76db5aa361fc17d3c8c93 SHA512 000449de8fe27ac12c5e7614bfb48a31d506b582ce2deaf0a0709d3673c9fad41e3b97e25df872609c5a190e899a56755d2d9f974a38523c51c9fa3af521d73d +DIST github.com%2Fcpuguy83%2Fgo-md2man%2Fv2%2F@v%2Fv2.0.0.mod 217 BLAKE2B 4232fdc22064d42e7b97efa666b5345f93d53d40ba11231778e5d17bc7d48c6178d27f4e8678d2139ba4e40a90d46a6caeab1a9696b76db5aa361fc17d3c8c93 SHA512 000449de8fe27ac12c5e7614bfb48a31d506b582ce2deaf0a0709d3673c9fad41e3b97e25df872609c5a190e899a56755d2d9f974a38523c51c9fa3af521d73d +DIST github.com%2Fcpuguy83%2Fgo-md2man%2Fv2%2F@v%2Fv2.0.0.zip 11426 BLAKE2B 645000d6293b81d736462fbd50a8f96483b39d07e5bb56e5a6d2fbef55a760499237f963e4b45eabe34b955280997f8218c656eb6db0a1a35093d2ab8f17cc63 SHA512 140a934e4d50fc1e5bb36bc3bfebc05863b32a50fbb6e203abb3aee1f9e9cd1c2af6ee5e0757f9d6199522c30e06377a3c94842d877513e5c9339ef7d1dcbc9c +DIST github.com%2Fcreack%2Fpty%2F@v%2Fv1.1.11.mod 39 BLAKE2B 71e70b038748ac19649698b1c0e59af99ce0b1c5d7c9177e8c55751eea9e82d4828b27dabb17cc04978142c9fb7a54d90c062a7cc3fdbb86116034026e40baf6 SHA512 9cf1687520933d3d6bbec9d7c51472998d3bdbe1b3d2a7478fca80f9e7944f9040a2b8ec7d49f1458bd46a5121bae4810d314725add41efd413319a5006b944a +DIST github.com%2Fcreack%2Fpty%2F@v%2Fv1.1.9.mod 39 BLAKE2B 71e70b038748ac19649698b1c0e59af99ce0b1c5d7c9177e8c55751eea9e82d4828b27dabb17cc04978142c9fb7a54d90c062a7cc3fdbb86116034026e40baf6 SHA512 9cf1687520933d3d6bbec9d7c51472998d3bdbe1b3d2a7478fca80f9e7944f9040a2b8ec7d49f1458bd46a5121bae4810d314725add41efd413319a5006b944a +DIST github.com%2Fdavecgh%2Fgo-spew%2F@v%2Fv1.1.0.mod 34 BLAKE2B 7e09c2779bf7a84a9271e31522ebbe600a1c11b107d651d91f58c8373e4336332a3a881f3e12b382543d75f20398af66085fcb3e780eed341e870e9c30f29267 SHA512 5e079462f7e0dff0efda71f580aa185700cfa936b718a19d0e2a8c63212e47a07022dca0c282832d48e5165aae8e82aeeeb2ac3664268f1148fc772010fb860e +DIST github.com%2Fdavecgh%2Fgo-spew%2F@v%2Fv1.1.1.mod 34 BLAKE2B 7e09c2779bf7a84a9271e31522ebbe600a1c11b107d651d91f58c8373e4336332a3a881f3e12b382543d75f20398af66085fcb3e780eed341e870e9c30f29267 SHA512 5e079462f7e0dff0efda71f580aa185700cfa936b718a19d0e2a8c63212e47a07022dca0c282832d48e5165aae8e82aeeeb2ac3664268f1148fc772010fb860e +DIST github.com%2Fdavecgh%2Fgo-spew%2F@v%2Fv1.1.1.zip 60320 BLAKE2B 86bdbc333e5c23ccf4f805945ca9f2aecc5c242d2ae824d20127eceaa2bf7bbab239ff2799572a2c8fa206166a36e97d5eccc8fc5021743d8ad32f39cd53b9eb SHA512 7b4e4df2fea731e23e05437f26f24e32b2e99028d685b72e3a726c1cb616ada4a77ca4fb9db4a6fae48178cc5172e724b74499bc776d63a9110cb97377d5edeb +DIST github.com%2Fdgrijalva%2Fjwt-go%2F@v%2Fv3.2.0+incompatible.mod 35 BLAKE2B ae3ae89fc373221646f196cb2112e003afec9206977905007426d522c584b455fa207f105eaa35cc716fae74d605fcc2a88c0ab5b62e4025b7a739749410fbd9 SHA512 4d46c1b3280c5b4984d22e57b0541cc6762853c0f6cea19a7a5f392c23039e29ca616a4bd8f283c2a35c3c045ec54716f5000cb4f0f43f07f0464c12ed1369ec +DIST github.com%2Fdgryski%2Fgo-sip13%2F@v%2Fv0.0.0-20181026042036-e10d5fee7954.mod 35 BLAKE2B 8f9b63ec3e5f70db4f7f0185a03aee0608efdaf267377c48bc0e1aa6c37d431119d6e422c8e7c9bd93f0819796ca0aac423804ff0acdd49458265dc37e9d439e SHA512 2b6a3774801edff4f0b3fd40ae8e5396782e796e36b02b4d2f34e5dcce19d2f064a7a8d0787a9cb994b9208acf39b466f291525cf6f459ecd7c45d947dfba50e +DIST github.com%2Fdustin%2Fgo-humanize%2F@v%2Fv1.0.0.mod 37 BLAKE2B f097ba062c5ae93b06edbf7827cc21a40d6bf6d2130c44fc8002344e860b3471742cf930e505a74a6a2af3a77a6dcc7d01b103d01f6f208c96dd9ca713c96344 SHA512 be96d9da23cc31932c1001e2ed367e55d06ccf2af41cc106e83b92fb866b61110d06ff224797c942b9ab6104bdcba4542f2214b9fb2d88df63e69be8158c6e2b +DIST github.com%2Fdustin%2Fgo-humanize%2F@v%2Fv1.0.0.zip 26356 BLAKE2B 665fb778605fc05dc686b59a3ad82a6df9020017243cc84498e4113c7b18343507a0084cd67febc329fa6b44e675696f99f632cd282ead5bb06f93ff3bd50bea SHA512 88e19d0139de7de602272e14586a99eda26b2867ea60ef56b517d13b37c0d28b1ab62c05b2f9cf1a9b8dcc8e5afa9c915baf7a30b0f17c4fbd47d5c71d0a3965 +DIST github.com%2Fenvoyproxy%2Fgo-control-plane%2F@v%2Fv0.9.0.mod 378 BLAKE2B 571b914afee85b0d13a567132dd40a80f60224e20685279cfaa1e5e875897c8e0fc94d7097992881495f4c0c090b27c87f6d95db0161e1064434ca0434ae06dd SHA512 f0135b61ef0638fe384c875786abbf8ed9a93836f6ed29d19a2e9a626cf6d6c6a252146352eb32298b826e93bb61b8c733f8a6aa683e5856ebec37cccc64ce58 +DIST github.com%2Fenvoyproxy%2Fgo-control-plane%2F@v%2Fv0.9.1-0.20191026205805-5f8ba28d4473.mod 378 BLAKE2B 571b914afee85b0d13a567132dd40a80f60224e20685279cfaa1e5e875897c8e0fc94d7097992881495f4c0c090b27c87f6d95db0161e1064434ca0434ae06dd SHA512 f0135b61ef0638fe384c875786abbf8ed9a93836f6ed29d19a2e9a626cf6d6c6a252146352eb32298b826e93bb61b8c733f8a6aa683e5856ebec37cccc64ce58 +DIST github.com%2Fenvoyproxy%2Fgo-control-plane%2F@v%2Fv0.9.4.mod 471 BLAKE2B bc51330df71ca612b3a573a93a8ebe57ef4e677157835221dfc5f7bcbada1fd90f7a6a3a002cbde08c6a95642477789d532ddc80e7ecae1f9e6e7c081364e970 SHA512 323c4b1c27bdc5bfb1795f1353d21ad6b7a2056bb0b364adab5960aabb7bea20ab3287ba60685df130abddbd66c3d82dc98a291aff1849dbce8c182c63c7b0bf +DIST github.com%2Fenvoyproxy%2Fgo-control-plane%2F@v%2Fv0.9.9-0.20201210154907-fd9021fe5dad.mod 543 BLAKE2B 35a7d739e1bc24c321c5732b27fcfc0bd4ef872610759ae867d08f2dea85e55b3f515698fc48299902703b7a8cff9658f30f855a6b472d4f4945f38101ee42d8 SHA512 b52cfc5fde9300a89cb4e59585c549582fbe75c33ca19fe06d1d8797216fdccee4f35a30fb794f37a16ac0a5d54dee0ce53fd938073b42b73cd96203b3819c61 +DIST github.com%2Fenvoyproxy%2Fgo-control-plane%2F@v%2Fv0.9.9-0.20210217033140-668b12f5399d.mod 543 BLAKE2B 35a7d739e1bc24c321c5732b27fcfc0bd4ef872610759ae867d08f2dea85e55b3f515698fc48299902703b7a8cff9658f30f855a6b472d4f4945f38101ee42d8 SHA512 b52cfc5fde9300a89cb4e59585c549582fbe75c33ca19fe06d1d8797216fdccee4f35a30fb794f37a16ac0a5d54dee0ce53fd938073b42b73cd96203b3819c61 +DIST github.com%2Fenvoyproxy%2Fprotoc-gen-validate%2F@v%2Fv0.1.0.mod 49 BLAKE2B d910253a9c976078b790d134a9d75e53cbde427e7733ab9e09c9060b312a5749aa083fc48263501e3339a580cc409b5859dafb820a4465827e7fba4eaca31ecd SHA512 755a3d173d43e70ca40fde2d5ce16c405365da90ff595003ef64598c9b9734b7200fe07a16fd555e4209f83e5e17561d18227c46a5f25a41976ff7ac024cb9aa +DIST github.com%2Fetcd-io%2Fgofail%2F@v%2Fv0.0.0-20190801230047-ad7f989257ca.mod 33 BLAKE2B e2d862747cffddd2d31ecd2975d44483f471d2690388ee362fd8d23979d2435291fa6a3cc3e74d247d4d90b10bd034d47bda73a44b2f9f2dde1f80333c5f9113 SHA512 8c2d922b5fd4c24a92fec8f5478ce95aad498f9039e890c803794684a74175f41b40b5fb60b0275e4feb1df6d932f891da950015202059f1df89fff8b8519478 +DIST github.com%2Ffatih%2Fcolor%2F@v%2Fv1.7.0.mod 30 BLAKE2B cdd74965525563fa7e3db19aae87c777b2de65faeaf2987957ea3bb4c0c6a91ab82fe02bfeeab4d6f523214bc2e929628c082edb967d49309e75483ff4c3bb41 SHA512 2dfc66b2f6accb7ecaccc48cb3daa338173f4751d954cb2912025d881f17a7a2df0457b2d7420f2d93b50519a2437a763450c4d639a26b3289fce7bdec5bb144 +DIST github.com%2Ffatih%2Fcolor%2F@v%2Fv1.7.0.zip 11987 BLAKE2B bb585868c568466b366c1c50762376d9e2b6f3d3ac287af94c45f7d348516d2e80ee96c6980a4b5fede40f1302f0e3e900e24aae16fec29801a795cb7e514dec SHA512 70f78081c04bdbb52e8f5d24b8926b39a28c4f069beaee0d7bf24be946f2b0ee3bc08d8ecc1305412623670e1767433a37d458df3fc849d244c63b6222f1f599 +DIST github.com%2Fform3tech-oss%2Fjwt-go%2F@v%2Fv3.2.3+incompatible.mod 39 BLAKE2B 03c2848adc48e404015826fc857d2a7b923efe39f2b11ec28e238ad2b06b0c5f4539f256443f91a116bc135923de7c4013a44285763b482d2baab5db1bdbefc8 SHA512 6c5546d979277d5488fb31eeb9fc33999dea631baec6902f937e19f4d65a23a2bb8620481c3ec69606eabd019be0096553097040bc778522b05f85ebc56bb787 +DIST github.com%2Fform3tech-oss%2Fjwt-go%2F@v%2Fv3.2.3+incompatible.zip 59518 BLAKE2B 84f0fae94cf0c3c9661d671782662babb1f21c5d27a7964330d7f97cfb6ca838afe7ee72de0254ee204b9ed2e115647a87b2810959126241eeb74bda1c066b44 SHA512 621eb4f8ca54e2bcf28aacabfdd3a5bcc842011348d03810dd7c59890e64f0429dd686c14f8a8e4d662bee266d187ed2d77afa9e864172fe3e2b129319d5dbfc +DIST github.com%2Ffsnotify%2Ffsnotify%2F@v%2Fv1.4.7.mod 36 BLAKE2B 2b77fbdbb6c6c20767c120b390fbd2992bf79dcae0a35c27121a6e755233da3ecb7d74e74c38c0a2463976b546ed8bbfb8a8d8cb140526dd9a0c4f524cc131a4 SHA512 5749d33fb085d63b7c12f43df824c96f168323cf6d88cfea3e2536eeb7b56689dab9dddb8cde1ec8bc9c2848e7148b8a37abf8523a99c55ce10f896245c5f341 +DIST github.com%2Fgetsentry%2Fraven-go%2F@v%2Fv0.2.0.mod 37 BLAKE2B f12e861904648d4931055fc40635565ba64e9e43909af9b6a238105ee85b98a01fc31da46c6ad7b737162f88648d4efe30f428a7d253cdcef7c38e9ff3863d5d SHA512 b10d9112b673106e50e51a54496b9f82af44ded3ae88811eefafcc0c1908b7fc89a1512d438a04748147326beb28026e01ca3e4dc3e833be7cb3d2b49d98e81f +DIST github.com%2Fgetsentry%2Fraven-go%2F@v%2Fv0.2.0.zip 26210 BLAKE2B e7d3ba9ba27946dcb3f7ac50b439849fcd56ddc1fc1bc9925892c6ab2c28b5a1a94aa3a8b940e6799f6f601bf6620efe0cae8c1dc4c89c8018c4637860b59672 SHA512 51752c4fc76e160d0a3c5a9efb627f15d16c9b9a005a93e7a5c44f374d18e932ca5219debcd89900225a3cc2bcfd5842c59195f5ad3d8217a5d35d19bd053fdf +DIST github.com%2Fghodss%2Fyaml%2F@v%2Fv1.0.0.mod 30 BLAKE2B 6a680b6e14f0cbca536b1ca02d633e16b2010cee7f590088748339785b2989cb0f86a51fba709da938d4c10ec810d5fe022d7d1a5c269d5ece253a78a5b2069f SHA512 7ffc7a5c3e0b39831e590ce3402dbf5c95392e88a08576a16d9e1887b11400efa71a9d183d3f1e080081246f28a70262a679348f009f7da6bd41f253a60b0741 +DIST github.com%2Fgo-gl%2Fglfw%2F@v%2Fv0.0.0-20190409004039-e6da0acd62b1.mod 29 BLAKE2B 1cefa73995b3d0b4206aea263f55c672b675dd22d42c61a92f7380b6e726f2d7ea40e0a9e456181f34808f5386eae3c485bd2872857caf1824254fe4a55cb635 SHA512 a709c650da5d5f513e94891b88c26697826fafebc1ca964fb9544415637ca14e3b9f1f4ddcf738e28032e10a2d39b619678ec5c8d44cc0a1dff738c75645e2f8 +DIST github.com%2Fgo-kit%2Fkit%2F@v%2Fv0.8.0.mod 29 BLAKE2B e43df3e551bcfb1d4a4843ddf00f1a9432cf768420f49943ee2936fcf3e890e59734b71ecbfcb85a70212122df3f03582335e37ca7330df9e335214e75a849d6 SHA512 2ace9d4bc029947991eb7237e7343fa31c5192d63927de1701434c305a659cb88fdae12e9b604f06ab318f1c26b207821edbe11e8d9382a0447544b782630c6c +DIST github.com%2Fgo-kit%2Fkit%2F@v%2Fv0.9.0.mod 29 BLAKE2B e43df3e551bcfb1d4a4843ddf00f1a9432cf768420f49943ee2936fcf3e890e59734b71ecbfcb85a70212122df3f03582335e37ca7330df9e335214e75a849d6 SHA512 2ace9d4bc029947991eb7237e7343fa31c5192d63927de1701434c305a659cb88fdae12e9b604f06ab318f1c26b207821edbe11e8d9382a0447544b782630c6c +DIST github.com%2Fgo-kit%2Flog%2F@v%2Fv0.1.0.mod 121 BLAKE2B 6463ba6a856a7bb4efcd00a3369f6593b31b8ef39da4bb16ce1acd741c0808d2243ca7787c0a52d4653a5b402841159e97cd4b42e0f6172ad39429beb2b06993 SHA512 564f0a1b0318004a7ed478c8f3a371ea2f59efd56eb2efec4fc806183de1b4a065d5b44aab6dbd40446d28caf5a74545a7ff6a3d428b1b41cb6df5eefc11e5c3 +DIST github.com%2Fgo-logfmt%2Flogfmt%2F@v%2Fv0.3.0.mod 35 BLAKE2B 0868f712c026b68559846a28bd29f39f584603cd79e1189a9ad76909cce7423a811f71265baf5b7f381a33bee76917759a9cb6ac131ab21450b4b52558cb6190 SHA512 526b97ecd0ccf878c0ada56c5217405c34c59d4c9cb53808f98b24a2823c0b3f1a74e862b9b1a5594034e570aa6749574d5e49212d6d48724e984f528b8c67ea +DIST github.com%2Fgo-logfmt%2Flogfmt%2F@v%2Fv0.4.0.mod 100 BLAKE2B 2558b7edc234429c8bc0926d347231c2352cbfe83d83bc3c7e76ed0ac4b3a843de65cc3e0dede3f0acb7a2dedc623584eff8cb236787c12d7f5a47c9e1c39145 SHA512 5782a5d5e5d4c64244a8463e0f15dfb97de4b60b9fed527ebbd8dc5a26999af8ad0b3ce0064da30182c757785ea9b35f253c5946b233fa3d9a61c873b23011c7 +DIST github.com%2Fgo-logfmt%2Flogfmt%2F@v%2Fv0.5.0.mod 44 BLAKE2B 0122d72cea88331beb9500849a0936a966e7a48abdd2e76363151bbb124e35481e7248fd896523eba3c51c5f4575dbc13304c2471477757c1eb2f8fb2eee9cc1 SHA512 bfebb8d865586729abcb0dcf4c19a8938f06f9b502c78bed92d01c18d1d037f7df44cc1a1fbd4ca094b1835b8aefbd48fb5988e2884656ca44be0aa83206aadd +DIST github.com%2Fgo-stack%2Fstack%2F@v%2Fv1.8.0.mod 33 BLAKE2B 366a1ff397488b2b1c7e42db8a946bced1eb8d4260a6c177a978eb978e14f89265e7ac1d0bcd77905bc89eb35b68b3ebb028c0dfc67ff71395ab14b62335d16c SHA512 f3dc70dfcf086b785750d5b346ea07d0dc7903937bdbba58eace0fb903e656b02ddf3a1d49b486ac29b1cac9ca9d346e964d55d3a4cc5ee5ae79ac40b24d0cd0 +DIST github.com%2Fgodbus%2Fdbus%2Fv5%2F@v%2Fv5.0.4.mod 42 BLAKE2B 79541bfacd3378a6c6dbe9591309a80390444f2dc2419fb0137c723c6a2ec1e0588c00704ce3c19dc93297b19db89f79bfa09daa2632f6674e35e76819473cb0 SHA512 b9aad4f1c1d4f2c43b293b0c9ca8a600a37ca407ba8b22b0f826c8355828cb7860a96a85df84f720fe8aa2840974807ea7ea7b790790c6dafed794e761f1f26b +DIST github.com%2Fgogo%2Fprotobuf%2F@v%2Fv1.1.1.mod 32 BLAKE2B 939b72a591bc5fbb649c21a95b2c4b3f5d3ade273377f1f89407e55f436e7a863f15d708aabfc5435334500c8cb1e3ba057439c8ec81cfde68c1ec6794c6de6e SHA512 ab6c57ada3b0d1e36c91f3e0f45e573b91a4869f230f02a7e5e3e5a8f7e020bf56c63df1cbdc5b552ef9a4229ab739cf76df7f799091a2efa148ab9e5c12b1c5 +DIST github.com%2Fgogo%2Fprotobuf%2F@v%2Fv1.2.1.mod 88 BLAKE2B 0699027ef7284edb7deb6a2640db52a5b93076e3250d42710bf02a1cd7d5f591f1d335ffb1e7e753dda5fe177837fad87a25bf69b03466bb545708fb2952fd7d SHA512 b91b25b4fe769a403fd7a1f82d7720bdb0526a349ffe7cfdfff09a2ba5e0015d5a3446cd8e0e5fe46479b7d2296a8616de38a8183c0185f84fcfc75d202db106 +DIST github.com%2Fgogo%2Fprotobuf%2F@v%2Fv1.3.1.mod 139 BLAKE2B 0c793b0070acfae7ad92de8d8e177d6b9a2519d521bb397da4dc2610927374e4c010db6a4454783556edaabf64e585b00112aea05820874c49f9bb4c4f049fb4 SHA512 232bef55468d9ff66ef7f446d8096a44a0a947533c8665f0f018300b7ec1804a634299a1a6ab64deaa67f1475e9ef68e7be233dc72fb2d9173559800f01af142 +DIST github.com%2Fgogo%2Fprotobuf%2F@v%2Fv1.3.2.mod 215 BLAKE2B 0077e3bcaad8a354f484c15844594107eb1a56d551e7ec55cd75e4594e50af02fe3850d9d212b0bc425da71c20bfd7dd470aa37be046b4eb88c28cb6bb63bb53 SHA512 8f928dfbe495a84c91744bf72527c5662422e608125f8b58908803289a39abfec1823d4628a52b987ab5150103ca588509ae0074fb08799d075e7ffc4157dc33 +DIST github.com%2Fgogo%2Fprotobuf%2F@v%2Fv1.3.2.zip 2700673 BLAKE2B 84605b73500cebee7cae122f45003110ec3a50074d0649b9e7e1e25915b1c5e789017c628e8305523edb28d8f93733b9032f5b20a186b4cba4a38f90c0add6b6 SHA512 5d27fdbda403bc5ca722280af1fc331e48e45dc97d6e0b9f99f0d48d2d173292ae88904236f43851173528d0523fca86dc15a633dae218bbe05bc0fc22e1d477 +DIST github.com%2Fgolang%2Fglog%2F@v%2Fv0.0.0-20160126235308-23def4e6c14b.mod 30 BLAKE2B 6dea6116bb7fb72123a93cc8b83dca5455b76591c7948524ffe664bf966780799c4d007154502922e21f688aef5148211db6b0e3dd3f6b545c4192f5bd5166a8 SHA512 3714d2a95d0435a113c36df5feb13f77a07a1514fdf6b5f01e6e8cc5d159067736e0065bad8062dc636fa5c52c98e3fea6985075005b2838bdf53e0b07093024 +DIST github.com%2Fgolang%2Fgroupcache%2F@v%2Fv0.0.0-20190129154638-5b532d6fd5ef.mod 36 BLAKE2B 3eee85c76d1ccaca7488ee3039bae6a7a9b4c8253481cdf6d62d1126623312a07264ed0e061bf5d7bde3aafb23e078b2bc86c3718cb2fff6618976c420c7dcae SHA512 5a0f44d45d666885e31206077a515fa02246d56699aa02f7809868029fdf6a718a5df8edac0ec245880f982882c2f4ca1d13a1dc0c7c0f79d7e89c6c46fab523 +DIST github.com%2Fgolang%2Fgroupcache%2F@v%2Fv0.0.0-20210331224755-41bb18bfe9da.mod 36 BLAKE2B 3eee85c76d1ccaca7488ee3039bae6a7a9b4c8253481cdf6d62d1126623312a07264ed0e061bf5d7bde3aafb23e078b2bc86c3718cb2fff6618976c420c7dcae SHA512 5a0f44d45d666885e31206077a515fa02246d56699aa02f7809868029fdf6a718a5df8edac0ec245880f982882c2f4ca1d13a1dc0c7c0f79d7e89c6c46fab523 +DIST github.com%2Fgolang%2Fgroupcache%2F@v%2Fv0.0.0-20210331224755-41bb18bfe9da.zip 39744 BLAKE2B b1bd8b2983e8b27709639e447fdcb2fa10c1f6602d90b06f03445e294dd3f243d8f0ed1715c569acaa7e8b9455b4c8f9fef55ea64b1e625c927d89ff863e2070 SHA512 52a3eade285f16ca743f29de8676a7ce7dfcfd4728d1f2fe1ab64d372082a621fa160520a31ca9bf231e32f650f4b7faeb91ec172c769022bd55dcfb0d7856b5 +DIST github.com%2Fgolang%2Fmock%2F@v%2Fv1.1.1.mod 30 BLAKE2B 5c355e64d858c99536e459f9fc4428dc00435bea944b67bf3dda5b61edb5f0c193c5857eb10bed926987cef865836c3f7ae3d8f081a58551ccd0772e4eb565b1 SHA512 ae6a1a6f8d31592ea6141f2ea39c9b60cd28e73ffae74bcf370fa739865b95a7ed56f687975f017b42c59e3b0f1c02884fbd5c93140bce268771380c8c7a7a96 +DIST github.com%2Fgolang%2Fmock%2F@v%2Fv1.2.0.mod 30 BLAKE2B 5c355e64d858c99536e459f9fc4428dc00435bea944b67bf3dda5b61edb5f0c193c5857eb10bed926987cef865836c3f7ae3d8f081a58551ccd0772e4eb565b1 SHA512 ae6a1a6f8d31592ea6141f2ea39c9b60cd28e73ffae74bcf370fa739865b95a7ed56f687975f017b42c59e3b0f1c02884fbd5c93140bce268771380c8c7a7a96 +DIST github.com%2Fgolang%2Fmock%2F@v%2Fv1.3.1.mod 93 BLAKE2B aa4bc48d8914434d540f570e6017b3572dc4b75563174e73ecce9f86460669a264389e1e24ce26cbe056a26865b3cee294457315034b6ae9779001b7306d91a3 SHA512 5dff0170dc085e1be63ce69886cb019b9df09a5678128b3b0a1b174756500f7d4bd62dc25ee7546977e298f719746ce951119908ff59463a79a1aec7a8882e32 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.2.0.mod 34 BLAKE2B a4239cba934b6e80714b93d47e88f22ad28ce41d1d984c4261cc3f5f3b857fb28785223fa911b258e2665be2a9d24ffbd925e9e0f374452a2aacd712ad9d5f75 SHA512 e059a34363bb826bbcb8981adbfc10da90e04b86dc5376ab20bdfe1fab135953cff41ef1daa116aff10e9f3e6503168f6baf902f09aa0e8cd9a0da96b932f4b6 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.3.1.mod 34 BLAKE2B a4239cba934b6e80714b93d47e88f22ad28ce41d1d984c4261cc3f5f3b857fb28785223fa911b258e2665be2a9d24ffbd925e9e0f374452a2aacd712ad9d5f75 SHA512 e059a34363bb826bbcb8981adbfc10da90e04b86dc5376ab20bdfe1fab135953cff41ef1daa116aff10e9f3e6503168f6baf902f09aa0e8cd9a0da96b932f4b6 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.3.2.mod 34 BLAKE2B a4239cba934b6e80714b93d47e88f22ad28ce41d1d984c4261cc3f5f3b857fb28785223fa911b258e2665be2a9d24ffbd925e9e0f374452a2aacd712ad9d5f75 SHA512 e059a34363bb826bbcb8981adbfc10da90e04b86dc5376ab20bdfe1fab135953cff41ef1daa116aff10e9f3e6503168f6baf902f09aa0e8cd9a0da96b932f4b6 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.3.3.mod 43 BLAKE2B 1985b508a7ca5fbf7283bfe42510dd54e1e409894b4bf404c918943c8bbc38a3682d00322514c8fef7d6528059fc547534bd956fb262f91fc63dfd6e97fe0bcd SHA512 17d97ea39719fd59908591504c8df288f5914243fcc43a2cd8cba6c2c50fd6f5315b17afa008f92ecdbda732d5447f848d31bbbfe59ef9bec78aaa3f25f51833 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.0-rc.1.0.20200221234624-67d41d38c208.mod 151 BLAKE2B 9c1bc32114f742984396777149c3fad997bb47288dfe265614a1d17412ae3946581c2e60ff9ab87e784d71cfbe423b7ed1ea5864b6cd3f81f35e9103c8c08a00 SHA512 431b8d4756fe79e43cdc2f8478f3171ac9c90912222e50503301fc83d34c90001fb6ee0fee3bc05f66e47d657977395769e54efa0fb74ba35f34429cc0dac5c3 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.0-rc.1.mod 151 BLAKE2B 260f1bb3e48b0bf9870ea3b725b13f84d2f18a12c6ca1275afcc2897bef547fcc1e893bd6b1efd46330bc1de66a00e3ef133a4418a50a075302aa3141abed8e5 SHA512 b6d7911148c590b3ce2a14a158cfbb94dd56dd402b3a4a2399adcd0421604f85d904244ddf5f8dba65326f04a7817d5652b30a306c65f44fd248ed269485a21c +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.0-rc.2.mod 151 BLAKE2B efe8a8f8394f082a813ed4983158ada7bcd20f92f9f8b9b0d0e61e8dbb968b3c825432ae05d69c9b61a04ad57533c1e60438d9a1964312d4c9168f86864ba2d3 SHA512 2df7aaf6cb36a18165dc458a7b3f4158e2bce3bf10165418de401dd43e06d44378511dd4fea6530cb668a8ebb17b4c3f294ba35f5018e6aeb1b7b9082aac8a84 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.0-rc.4.0.20200313231945-b860323f09d0.mod 154 BLAKE2B 8645404d124dde54c3e9c284b1243b1faf2124f2b7d6c5e6566ca600d3c965f7787f09f6825840f5e3ea6d36c016ef2c7fef10e8e12dce354593f7a8a3210a33 SHA512 4c9416c4777123a39b23b49ecf6265295fc3432de083a04dbefc87264b8c69f0d9e342ebb7e8e488f30c3efdc02951fd7dec23dfd1fef0802c8f0250f96612a8 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.0.mod 124 BLAKE2B 4c032e7f2e1c8765cdd720690c1067c7c0ba1005bbfae01cd928bc60d96bd82321052fdb18a4ae12119144e34865cf910e306c5116e4f4f56cc5f70f5d52004e SHA512 acbd5afd399b3798d4b24529479b18523ae4009e21acde15a3893d2af75f9a6e65fcbd5a237423849003eb8903718eaa0b1aed9177c390972ab9490f3acc0d1f +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.1.mod 124 BLAKE2B 9e60030e0014cbc67c0bc7064eef3b127dec57dfe25bbf7f0d0e2b9c8c77e28477066daf073a6793428116419900e7c9f6dea6e8841a5f61812cf11ff77e7009 SHA512 14a0f1fed404939fad835398d5889ad57621edeb0e183785b3094957183bb29a2026e2af939b94c7155f8496e966116c4a6a2497fab113a175a9aef3f7ec3f32 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.2.mod 124 BLAKE2B 3242575be48f0e1f74e2d0976d2a11f0edccc59c7b74cecde37233c19f97c51e576cd3032175cfad3c1ce9721cd41053f459341182fba836e0ff0456126e493e SHA512 9586be76b697c6a5c3216762ac13a7d297372ebe0c7ac5941d16c326d1580c8a73fb475236ed9a4214d158a7386e761877be16cdbd4ac2074e8a5e1dfdc95b54 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.4.3.mod 124 BLAKE2B 3242575be48f0e1f74e2d0976d2a11f0edccc59c7b74cecde37233c19f97c51e576cd3032175cfad3c1ce9721cd41053f459341182fba836e0ff0456126e493e SHA512 9586be76b697c6a5c3216762ac13a7d297372ebe0c7ac5941d16c326d1580c8a73fb475236ed9a4214d158a7386e761877be16cdbd4ac2074e8a5e1dfdc95b54 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.5.0.mod 129 BLAKE2B 15d140a0b2b22d6c9886ee9e517f923fda26ee8179755702a8eebf1ae8cf75be48e8d28a1df1bf875a7bfd499075d83a541c9716601856abe0e7c850a3ec68fd SHA512 467a3f6fb4c941cd55d8d4b2d6a2015966c60a8614691539c88c4bf0da2f8022055be8561cddd0e60b118f74f010be5998dd128b7b136f14edd2674e5650db2a +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.5.1.mod 124 BLAKE2B 4f470777c8d8816c52e0fb82b2ef37d4e9879c46fa93e8e4fc87c46b85c36ee6b4b1ffea22db22af2946c0fd3a12affa9df706f13f2367b14bb1a72c737ddb66 SHA512 6b46c8a019e49c6ed2307e7bf633d4fa04627938bcdffec22da42f722aeceb35de8655b04f69eb651fbc662ac5554b54b393340bec3ef4cdd01be2d7f6d07eab +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.5.2.mod 192 BLAKE2B 08ac45ddd213c260f4b9d33fec4ba9758ce949c699e2d8d6c7b31bc0fbd7498618cd5144a6ccc3e1b852e9f1a6b7d00191ada7d464dd5784d132506c9a8639ce SHA512 44c996ad31bf02aec42bef934d7cd65379ae5eca4d1069dab8c478be169f9479cbd55f8f72bd9567e51535d31c9f65cd1d56bbefb8b745f96cad0f5953f8c420 +DIST github.com%2Fgolang%2Fprotobuf%2F@v%2Fv1.5.2.zip 206858 BLAKE2B 42c113333104cf0335d16d24748ca111dc44a52b3c6ceb8e11388c85b8ac80c5c324ca9c6d90d08c07dc865909eed4510fb145153024890e4e160cde2b877269 SHA512 6df84a92489b04e55e35bb2334f7e9e55f4fac646e9ad904eca189d069443609fe1affc4cf5e92d0f90ea9c75162a72f134c6298f828608efe9a71b6e496eeb5 +DIST github.com%2Fgoogle%2Fbtree%2F@v%2Fv0.0.0-20180813153112-4030bb1f1f0c.mod 31 BLAKE2B 910f367210db741c9f31a77f8eaaea348d3accbf0f219efbed95a780b93e2416fe64dd420ae45ff13da94a8f2a0c7b19850b13e1d9fc6cc1249d327bf04b5fd9 SHA512 f2ff873ecf0144b7f434810af1b49f66f09b4bcadc91d99201465a6ce36c7e7f05996f52800be287dcb3b62e14b75fcebb7c32be0eeda6bb0a15a23058c2d410 +DIST github.com%2Fgoogle%2Fbtree%2F@v%2Fv1.0.0.mod 31 BLAKE2B 910f367210db741c9f31a77f8eaaea348d3accbf0f219efbed95a780b93e2416fe64dd420ae45ff13da94a8f2a0c7b19850b13e1d9fc6cc1249d327bf04b5fd9 SHA512 f2ff873ecf0144b7f434810af1b49f66f09b4bcadc91d99201465a6ce36c7e7f05996f52800be287dcb3b62e14b75fcebb7c32be0eeda6bb0a15a23058c2d410 +DIST github.com%2Fgoogle%2Fbtree%2F@v%2Fv1.0.1.mod 629 BLAKE2B 301265d55a1b721f15a6761e5fa5123266ef57f11adac54db2d55b14a89b40dce70b307411dd012ff946c215fecf8a3c2b5342512ed0e974501c177499b95b2a SHA512 b1f1c83260a976b4d1e79b029bdcf7813184e3f6d45b066400f329b099ab478ac54afcddce10b3e358a14ae8af48c7a1b56dd231388ece034b6092fd11cc44c7 +DIST github.com%2Fgoogle%2Fbtree%2F@v%2Fv1.0.1.zip 18241 BLAKE2B 3fad298fbe3af586c31506677c832e5b98afc31a1cf180af912cd65bc8f45ce9448a663867c1c172ef485be458b021ae5804daf974019a1ac1abb7a6af5ec16c SHA512 b82644edae6e2d95dcbc7a7575e5eff35765fae183459dc809f44f337826ed38cf84ebfd01f142b79e3cdecfa3c0b65f9ff83aa91fb33a1a0c7c0bf48d472c63 +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.2.0.mod 32 BLAKE2B 7c7baa1e29b9806fb97e0d557200e8722f2d373e149127307efa285cdfedb36dd57355168554d1a1bada62144e6a6a00c4d3246aa9afc7d0ffae0f087459c552 SHA512 7229d917bb0c788b07297e1b09b8f7952f951998a56f17ea1f69ff7c2f565a5686b212f42f45c6b8351905d6740a2ec5a235e493daa531ae00cb709faf67ae45 +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.3.0.mod 40 BLAKE2B c717b6aaf18662c20120746a021b0ca878e7b190b3456cab24ec98032390a85b0af8540295e470647d403bf1beb582c8f8a74fa7129c4cbf747257206235c5a5 SHA512 351dc24af135b9c9d714aadce40fe9fa1ec05a35a4df90af79926d5119c3f33a6510ab9d78243748d7dad10bd2178f47d342ea2389972b88d5e9b4be6dee7daa +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.3.1.mod 40 BLAKE2B c717b6aaf18662c20120746a021b0ca878e7b190b3456cab24ec98032390a85b0af8540295e470647d403bf1beb582c8f8a74fa7129c4cbf747257206235c5a5 SHA512 351dc24af135b9c9d714aadce40fe9fa1ec05a35a4df90af79926d5119c3f33a6510ab9d78243748d7dad10bd2178f47d342ea2389972b88d5e9b4be6dee7daa +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.4.0.mod 105 BLAKE2B ffd22df03c1b351fb766a97818d46cc6aebeef365632d5263c90cf45a4acffdf5811da10ea2cd4747bc9691f74661c0b655961a065ed15a0194eeb4d1d12ca9b SHA512 cb203760fc6ca9c9d64811cf1342752faa5a95f27934c298407dc865f9561081210dd1b82b15ee2f5337b70d4c55d102d8884b5b9a5f70d9cbf85227a32b9713 +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.5.0.mod 105 BLAKE2B ffd22df03c1b351fb766a97818d46cc6aebeef365632d5263c90cf45a4acffdf5811da10ea2cd4747bc9691f74661c0b655961a065ed15a0194eeb4d1d12ca9b SHA512 cb203760fc6ca9c9d64811cf1342752faa5a95f27934c298407dc865f9561081210dd1b82b15ee2f5337b70d4c55d102d8884b5b9a5f70d9cbf85227a32b9713 +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.5.4.mod 105 BLAKE2B ffd22df03c1b351fb766a97818d46cc6aebeef365632d5263c90cf45a4acffdf5811da10ea2cd4747bc9691f74661c0b655961a065ed15a0194eeb4d1d12ca9b SHA512 cb203760fc6ca9c9d64811cf1342752faa5a95f27934c298407dc865f9561081210dd1b82b15ee2f5337b70d4c55d102d8884b5b9a5f70d9cbf85227a32b9713 +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.5.5.mod 105 BLAKE2B ffd22df03c1b351fb766a97818d46cc6aebeef365632d5263c90cf45a4acffdf5811da10ea2cd4747bc9691f74661c0b655961a065ed15a0194eeb4d1d12ca9b SHA512 cb203760fc6ca9c9d64811cf1342752faa5a95f27934c298407dc865f9561081210dd1b82b15ee2f5337b70d4c55d102d8884b5b9a5f70d9cbf85227a32b9713 +DIST github.com%2Fgoogle%2Fgo-cmp%2F@v%2Fv0.5.5.zip 130974 BLAKE2B 6e4efb8abb584c3839c7b1ab80c8060c125b695bddddd44c57f72c0fbf9de85d40595ecff57f57ddb533e34dbe72a95e0e8043d91d462d68818699f194766e90 SHA512 9cff1690cb177e70b1d67ddd305e4317e3d1ef2825f5f3ed4639210f7f2ee6e89ff03970495757b922f16fade5fafae5cc14c8da2b95694faa3fa48c63f3313d +DIST github.com%2Fgoogle%2Fgofuzz%2F@v%2Fv1.0.0.mod 41 BLAKE2B 32370943a480c13662a0847b33fadc7d7f909784d044619ae8b00f03c9f537115448140ef2ea1b47606dbc64d7593e07cc8f9b9000fc5382e4f1ae94ae4086e9 SHA512 3dcfdb76a938cf370310213720ca952c6aa99c8b1b96afe41eb05f1bff15df7d98d279509d921893c0c749337c83d4bf40613813e117c01205859a041716b2ee +DIST github.com%2Fgoogle%2Fmartian%2F@v%2Fv2.1.0+incompatible.mod 33 BLAKE2B 694b57887cca857fe6950b0df444dc6e3d757dde540c1846ddcd4bb8f96a5eef3f469eaec30cf415541ff2f53acaafffbf4032189122875603d7e5e3dad2ef97 SHA512 cffb5dc1c6531ae9d5998b3a57ba14de5dd8631a36dd48975da07ce5ec052d97b6f632c5d30ab9ab695f178758837aae8a6344c67d57c7a39ca8e9243f8211df +DIST github.com%2Fgoogle%2Fpprof%2F@v%2Fv0.0.0-20181206194817-3ea8567a2e57.mod 31 BLAKE2B 705b12f16ca8f0258457d0972bc8845b553e9e8d9001de0f4a4a548afe23424b0902fee4c84e94bcbc4615401d1369730a60bc57de85aa674300c1a96ad1f128 SHA512 c7e8b1bdd0360b88ccdcfd0cfe73e5cce50010a21db41ec2d533f7863b67930fbb84f430b9ffb663c394256628b05e884b812c040354779e0fdac2a422ac57e9 +DIST github.com%2Fgoogle%2Fpprof%2F@v%2Fv0.0.0-20190515194954-54271f7e092f.mod 31 BLAKE2B 705b12f16ca8f0258457d0972bc8845b553e9e8d9001de0f4a4a548afe23424b0902fee4c84e94bcbc4615401d1369730a60bc57de85aa674300c1a96ad1f128 SHA512 c7e8b1bdd0360b88ccdcfd0cfe73e5cce50010a21db41ec2d533f7863b67930fbb84f430b9ffb663c394256628b05e884b812c040354779e0fdac2a422ac57e9 +DIST github.com%2Fgoogle%2Frenameio%2F@v%2Fv0.1.0.mod 34 BLAKE2B 1eabef50b2977886d7980d7da197828b826c54018766418b3160f5cd512784635e5791a40cc4fb806d52f5ead99f941fae8037872d6cedfd6c851103f3be1a74 SHA512 a46cae976ce90d1cef802eeaa873c059cc9ec3678d5c3c304a9de45f44f20a24d68fa290cfdcf78c4ac222a6d619a005825de8f11e72b9a5af476a0b0180092b +DIST github.com%2Fgoogle%2Fuuid%2F@v%2Fv1.1.2.mod 30 BLAKE2B 704029826c505198458e86463528ce2c1b209376f376b92d4f05a0f4094d161b45470d04ed3c1b5635397aca3126c25911299711139d794cca3e9b2bb373ee17 SHA512 695f3424e0cc247a069fbd6b94820554e003030eb0e208ba7be38f660c5fc29f74a057e60031ec77918b5b320913d6deabdf19a0f0666b0f5bc5e2724e1fddba +DIST github.com%2Fgoogleapis%2Fgax-go%2Fv2%2F@v%2Fv2.0.4.mod 88 BLAKE2B 840afaa28e8d5b816289e6556e114311f039b477e5ac86fc1c2ac80b1f8d7729ab6a83b99baa4c03de9634240481feb13900fd4049753b8de839656d6a7cef8f SHA512 31e50016a01fd485775368e2e430959278cb6c03ae6b1871b3d0c173fd43e91654ae87d1758c08daf897e55be8b4044bcb47fc072ec645d16e2594f345b46c73 +DIST github.com%2Fgoogleapis%2Fgax-go%2Fv2%2F@v%2Fv2.0.5.mod 79 BLAKE2B 21f442637ef0be838858e192b563e158bf6ed1f7e06e09a3872fbcd613046b095c5209d9ccd9cc0853ef14947b6b70d4483675505d0905a1d2aab15e7bfdf80a SHA512 2af320b0514b032ee87a92d99d673579981571f325d0d46133e212a639eca274d5a6f8164a7256cfa6c063967b98ace36e637f53d90331903fd6e4a21f1a5a19 +DIST github.com%2Fgopherjs%2Fgopherjs%2F@v%2Fv0.0.0-20181017120253-0766667cb4d1.mod 36 BLAKE2B d7cd8f31950392cb5de7f4223ff9fe3257568dd0a1c1b81c8b97934ba92379753dc936c81c39e5b553e4101bc7c035ce81c8d669d85ed1d1eee41a74218f3d88 SHA512 35151946ce44fde9d3bde1d0626749ac4bc68cc448736c3b0f056f40a9ae30aef591db614b271df3eba3a96dbc94052ea5bf7ff68749ec980088d60361934771 +DIST github.com%2Fgorilla%2Fwebsocket%2F@v%2Fv1.4.2.mod 45 BLAKE2B 5f187c997ed74f2aab1da57c9a828be383e41f47905531da8babc1360612ba5d4cc0fc6cc48106647ffa450f334c7cc5f455bea7f6e6b9734f3e55734cf623c6 SHA512 81ef224435efb5cbd429dd4339e8410234855f4a268302a61d34e76c388e89ea22c97ae90d71a6ef910ca00d3178e40d3587eaf484112966050fbd1f1f4843ab +DIST github.com%2Fgorilla%2Fwebsocket%2F@v%2Fv1.4.2.zip 79096 BLAKE2B dfe472a48935e77689778e60ac3379abac11b1fd632c35033f4ba19afc601175a26e38bcdcaecdc56250d1b90aaa2f7f499010040eccc49e477dc904202de4b7 SHA512 4506c31c8d95fadde5570686eff451f177ff4bcc80469a5bdba92b65afcfb2597d05f14ca724e8dd40b43b867ab9eef1f62d98d7afed6bf93cd33b689d646c3c +DIST github.com%2Fgrpc-ecosystem%2Fgo-grpc-middleware%2F@v%2Fv1.0.0.mod 52 BLAKE2B 51b2a4332061cdef080fa53a14d29b65645776c1077922e6cc37f02db2ddaf924c0f2f71c2cca4586c582075c7cf76861161ccf39d11cf803482276b78321b15 SHA512 6e5556550286ca0fed117d3db2f43d6023d7f0e7625762ca76c773e410fe51d6092c6acb574db7578284188bbf79cb9050aab7000f09510338b24195ea395945 +DIST github.com%2Fgrpc-ecosystem%2Fgo-grpc-middleware%2F@v%2Fv1.3.0.mod 746 BLAKE2B 91753d65b726ac5bfc246b9b84783a9374369c8883cffc0f4a55379ce12332f6bd611f698334d5431f9f39386d076e0e4c02c1303c3e7268b4f4fbd89f8a072a SHA512 3554fb792cf0898b664445f00e1d93a7298e3a8bfef948686f13b915592715e447c3c7e1214d640a582ff0bd83ee5ef1113709c0cb202c218ba80a6534c4f7b1 +DIST github.com%2Fgrpc-ecosystem%2Fgo-grpc-middleware%2F@v%2Fv1.3.0.zip 166741 BLAKE2B dc31b1a683b3c7e1a34c79b2716a3c8bdd9acc625fe3fcb5656f07c12efa00ff83fd23f29c5834d00d200bb09a4aeca00bd082a06d76aac4d53a0800bca3c21e SHA512 8a95316e4e86e6406603124aba7daa8854798da59c0590309942ae545794cf011b2cb709161f9abd22432e3c0d669b45a91ce9bca5a1bca7080660d80edb4a21 +DIST github.com%2Fgrpc-ecosystem%2Fgo-grpc-prometheus%2F@v%2Fv1.2.0.mod 52 BLAKE2B 9e5de5c147fb3f100119fc7c290e9790af57892762b7ea8b2a8328c397432466ba56ee20b64ced6dc548d58bf8ef0ecb2e62a51de2524f90a0ff39921d0f2a3f SHA512 c9e15e4a4436ffdedfe5ece51858a45806d6fd77d2306c35eb986a866a3da5bec0d5d06ddba55a05ca45c8c29a51bc7c58150849b5dbde569a6810012f3ace4e +DIST github.com%2Fgrpc-ecosystem%2Fgo-grpc-prometheus%2F@v%2Fv1.2.0.zip 35110 BLAKE2B 4ebd3cf0dc4580a53cbefe7a955cf05cb6d1d60a69951ea4e18eaaf108ce2cd5bfd0b2dc4bed62a12b48922f6f9dcdf1e598b77a946bfa0267314caea827286d SHA512 5c8e6beedefdf390a9eda76fd8d5042323e1c9a6306605ec7ca8b1612bc038a6cb0c02ca1093e0b6373a05ea64b7eb0c0bc62720a74b37d4ceb61564f4d46753 +DIST github.com%2Fgrpc-ecosystem%2Fgrpc-gateway%2F@v%2Fv1.16.0.mod 588 BLAKE2B b3d6657ba787034ed2a14fdb98a7dee43e3d9dbcf253558c588f9dc550b58a294db9022d548d48717ece007f20f52f5004ccec0fe92415120f9110ccad5c9288 SHA512 6d314f14132c60d5dc614c81746fa3492dc821c77f2c0cfa90dccb3dddd5dac671682cd842d9ec4b0d03aefe1da92e5bc2275e9bfa2bbce60e8bcb8ea6bdb173 +DIST github.com%2Fgrpc-ecosystem%2Fgrpc-gateway%2F@v%2Fv1.16.0.zip 685854 BLAKE2B 2de9f99bde4593ee24aeb819c12df9fe950a62e7e78428dfc18051012c5c3dd791da1e157a1e2f8c5f9367f2ba404ae8e5132071c1ab3bda1ce70cd1aab391de SHA512 0d0ee621079056418847820d55f794befc0eda9a9e569c06c9f099887e680be31683943dd4aa25813caff89e0e573c6d2ed3b27ee7c99cfaa381c34c0d1c1edc +DIST github.com%2Fgrpc-ecosystem%2Fgrpc-gateway%2F@v%2Fv1.9.0.mod 661 BLAKE2B c7566b98c99bd43fb31dcd6de0086533bc499df099dbfc3c37aeba4996bbf46cf11b98e0c356ecebd0c7adbcabf4ab54fb31c41309287c26c083e78cd1639451 SHA512 35fbfcc2b6fb04830cf6d4966469ccf37e4b7593c8d8c5479dd2322722bb325b7f303ca836989c3ea96f862a4c85bae7863c415f94b72bb91742763ef08bcb49 +DIST github.com%2Fhashicorp%2Fconsul%2Fapi%2F@v%2Fv1.1.0.mod 449 BLAKE2B 1fbabe18b977c8e6283312fc1f8d8b35514104080a4880afd4445b92fa20af4db49ef3f7fe1da703d4237e6bd78902e64fcc7e9d4db85e84153c2bdbc6a6366b SHA512 a6d33e281b580e5a3461edadbf4e5ebe6aa74a8a929b9f0e96582592b24c85eea1ab202457f88f648018cf5991d267811132ec77255ab4886b6ccf958487d5eb +DIST github.com%2Fhashicorp%2Fconsul%2Fsdk%2F@v%2Fv0.1.1.mod 220 BLAKE2B bfe2c5d746b4762c2a5e90ebf1db1e0489fae5f8de20cc1a16f4c9aaba016fc4500251efd3daa8a14b0a6145220b6e429ce1608cf11d7d69605c68fbcdddb684 SHA512 883151379f088d2645429c88fd2fc598b736fcee56feed40d05efe4540562d409cb54ec061b58d9dfd5f8a363bf3e5183af3a44cc669ce23ac7fc7b9f512950c +DIST github.com%2Fhashicorp%2Ferrwrap%2F@v%2Fv1.0.0.mod 36 BLAKE2B e3101c1f32c24b5d5bd3de55b4f15645e7f0b338cdcfa00d30cc4c063bf4e9e31e68972979e8282d04920ffcb54f112c8c8f6e0e109824e56881a6a699cdf622 SHA512 2b68ca06311d8602f04eb738a68a24951a9187aa70018d938e549cf7b555bf54dadbda5825501436c52f6103bcd220ed170c99e4cf777187e2b997c87f05fb0d +DIST github.com%2Fhashicorp%2Fgo-cleanhttp%2F@v%2Fv0.5.1.mod 41 BLAKE2B 927bedbe012a3bba2fb1363bf0157795f58be7dde5d303332f72ae6d7bd13775e9e1e034db821821857801b21b2366a92a28bcb84c00704a12925db0ce19a4e4 SHA512 302b6f472b54597aaeb4b43528098b5a5264acc97abf2228d8cb62bf32e6a29a7171ec6fb8898b494ffe837ee044e58f5596bff425214985aacd2b8b69934341 +DIST github.com%2Fhashicorp%2Fgo-immutable-radix%2F@v%2Fv1.0.0.mod 137 BLAKE2B ca790b5dd3ebd80c7fa24936acad0e033a7376302440c349d53debe64672d75703e83086fdaab607bb87dca35fe7640b2ed941069692dfc9ae37d4a256c7be3e SHA512 aadecf34782d4b40af684ef29e5e45f560d3593b52d5b6ac6b95664c02c04565fd29dc2d48bf1519091129b86856aec732fde408a8acdba41ff9a7ca12bab140 +DIST github.com%2Fhashicorp%2Fgo-msgpack%2F@v%2Fv0.5.3.mod 39 BLAKE2B c5b445c060258545233b5453482e0c739f815c1ff605b539610f3b0bdbadb6da88954c6a408084f171354256bb8521b528573f56080d4125f4fac474ff9bde83 SHA512 45b4424a023ea15d95167322e022269e32f7a718dbeaf192d0cee9f6bd136f5b4a26827d6d041a8103a95f622a0dc92123b32e6463254199893f360ad8680de0 +DIST github.com%2Fhashicorp%2Fgo-multierror%2F@v%2Fv1.0.0.mod 87 BLAKE2B 34587a565b583aac6338d7d23b4e7c2ce12deb6700e00bec711d3d8d829ef1ae356eb1b28873d5bc2a0d6ed249dd6095539a1dfd8c177bec32e08d97f4003620 SHA512 d47dfa43806a386eb74b60f692b3bc580997edb9d7feff6633992a5adbf94d102a238e036d828952e204960152c62895288af6f09e2582e8b1408d259fb834c0 +DIST github.com%2Fhashicorp%2Fgo-rootcerts%2F@v%2Fv1.0.0.mod 89 BLAKE2B 9e53a988f41eb9425cc2fe3051c0bbe67c65208e6988ae1b455450183c225739b540edb0e59cdd8d010c34e89c4e4acb70687c2bcb861d379443a5c36e261458 SHA512 3446ae69871561766d2b70963eccaf443edafd9328f0f58a97630fde61fa746e59d26ee5d833548a92711555656aa9c1f44bb9e241aa87e21f4424a1f10fbe1a +DIST github.com%2Fhashicorp%2Fgo-sockaddr%2F@v%2Fv1.0.0.mod 40 BLAKE2B 211ec0a2a2a91bfe13a6ad5d7c6cac97497b62796053c633e945a51aa13dc946b6dee1adf040db0e270e1aeca614a43242673dfe44baf06034856d89a61b4030 SHA512 756eee5fa17dc2f37aa9bd623aa2ea86e6ca35a804da1b48067b08fcabd4083ebcca867bb3562453d17f517aa1e6aaec0143cf5776fdf3686ed562f11147293d +DIST github.com%2Fhashicorp%2Fgo-syslog%2F@v%2Fv1.0.0.mod 38 BLAKE2B 9696a247ecfb868250995f7fde811a647e8b01d6f3a33996109c44aaa16bc85c0c70e9bc621857db7208f5ef49706cd3b2313f13b9e6f3327aebac20f72b4a8f SHA512 dec8c92389eca1dc304cce77cc70a3b51940f073581320117627c759edd5b523c379473179865f1e3e3f86deb9f323a5fff54951871053ed43293b0454182871 +DIST github.com%2Fhashicorp%2Fgo-uuid%2F@v%2Fv1.0.0.mod 36 BLAKE2B 8596defaedca9def85f29cb25a0ae25f8d2ec8eb64d64bd143a237d54d4d23b6851cad71a580667127188cc22d499be07628ce9c916dba946e7b189b612cfc76 SHA512 900755decba72d81cb348184648aa676c4a4c7359cc88ba3b41ebdd7691eeff401a41a495bdca7747e82274b3b2b61499b599e67b5c7369caaf766ea3e488d0e +DIST github.com%2Fhashicorp%2Fgo-uuid%2F@v%2Fv1.0.1.mod 36 BLAKE2B 8596defaedca9def85f29cb25a0ae25f8d2ec8eb64d64bd143a237d54d4d23b6851cad71a580667127188cc22d499be07628ce9c916dba946e7b189b612cfc76 SHA512 900755decba72d81cb348184648aa676c4a4c7359cc88ba3b41ebdd7691eeff401a41a495bdca7747e82274b3b2b61499b599e67b5c7369caaf766ea3e488d0e +DIST github.com%2Fhashicorp%2Fgo.net%2F@v%2Fv0.0.1.mod 35 BLAKE2B e084dc4953a472039fcdbfaceb0046f7af0cbe4078af4f2560457d8a47e3bf4654c725578f4f54ca1d41f48e37ff6bd1b3968e9b061773ce9fbda5fa5c50f17f SHA512 a36b4a70bb4b943055ad91fc4f754d55473b48f1e6330c9526e4a50dc4aba3b3462b787c71d7f2e863f78518e945ce15f9198a9bd0d6817146f92799733460f1 +DIST github.com%2Fhashicorp%2Fgolang-lru%2F@v%2Fv0.5.0.mod 39 BLAKE2B 13f90f934356dd1daefd27a94bb7a8c31f09835ea69f3fc83d343004858c6728bdd6bfaaa919331f7ee04744d18ac37f46a13be9feaa20e24e88ee364991a9b0 SHA512 bc3e0c3b16454e0f079bef539857c22f09ebf11e78ac1744a22f5af87d7297979b7ccdd48e4f59605cac562c268c3cacdbf2745f65be5c934f73f216707120e1 +DIST github.com%2Fhashicorp%2Fgolang-lru%2F@v%2Fv0.5.1.mod 39 BLAKE2B 13f90f934356dd1daefd27a94bb7a8c31f09835ea69f3fc83d343004858c6728bdd6bfaaa919331f7ee04744d18ac37f46a13be9feaa20e24e88ee364991a9b0 SHA512 bc3e0c3b16454e0f079bef539857c22f09ebf11e78ac1744a22f5af87d7297979b7ccdd48e4f59605cac562c268c3cacdbf2745f65be5c934f73f216707120e1 +DIST github.com%2Fhashicorp%2Fhcl%2F@v%2Fv1.0.0.mod 75 BLAKE2B a44a3c2185418f331e2648bdef36882414dbf8416884b8fd385b7e926c9b837d317322a433e7312e14c27eb095cbed26a74eec9822f0f063a2d14e753031f632 SHA512 045ed40015294ebd8f7a6df06b418415da8f091d09fb4d34fd70718bbf5ce9f49dca7399dc5649336de3fc83bbbd93e740ad6f62d41ea540fae3b17f349cd66b +DIST github.com%2Fhashicorp%2Flogutils%2F@v%2Fv1.0.0.mod 37 BLAKE2B b9e2cfa29511ec268d1dc1e0d8a8eeeaf1c246c1cd828fe6c2618c2f7d313deb4456e5d35d60034825585430da755b96d25ee003028f55c1b2aebaee2fbda535 SHA512 82c9a364ab098ebb6f830753e089529036cb405aed375df5b55459b203a1d2d02299103925bcf4dff94bf4868e7005f114367e90fd2d24d5f1db3e0287628f66 +DIST github.com%2Fhashicorp%2Fmdns%2F@v%2Fv1.0.0.mod 376 BLAKE2B dd92d033685d65d1876a52156317b2f1196028c035f6ef039849df4066b93fc518e9f9c06a666b4fb1fb803d984266f57fd9eecd891e241bc50f8b54ed6a9952 SHA512 541dffe3beadcf5eeebe266671462e3827262ae700a146c4a08700b325018b183252650b50a7d4e539e872c0b6e5d7e35de4f1abdd955dcad51543ea6b22acc1 +DIST github.com%2Fhashicorp%2Fmemberlist%2F@v%2Fv0.1.3.mod 921 BLAKE2B df064db28a23bae411857c5abc0e9a0e4635556e51326db806eaa79008505c49b9ed1579a7db6f72a9cbd6128fc10cb858cdaac6d71725fa4b21b43526767c04 SHA512 8128789efce7912b540284205af308c33ab47af7dcbcb165c1d0a86e342b17bbc8dc5c8cd6d5c5e751c412b6b4b8e80bb6d2f3b4fadd813dc147301ec27c45b6 +DIST github.com%2Fhashicorp%2Fserf%2F@v%2Fv0.8.2.mod 774 BLAKE2B 3b47f3c78972eb538f84348d5e698a2e44d86d4f51316b8cf596be23433e91a763c24ea9463cea0f52476c656067ee4e254d5cb905464d7e32a6b69aaed0bb56 SHA512 7fb4f6b07a08973d6cf33be6f03356eb1b176d816955274a4aa1571b8965fc311ff0c832901fe9a716c5d5bb697e7c861c458ce618fd7d2d4eecb316b2efbbdd +DIST github.com%2Finconshreveable%2Fmousetrap%2F@v%2Fv1.0.0.mod 44 BLAKE2B 764581d416faa477a91695a42c68cef5638d019a1622fb3bcee976c1581e904995d33c79ffed1d3b805f660931ece844b3e17437f158f8b82ddae82e95f0358f SHA512 0c77200112d96f9cddf8cf7da0059204914b06a8c400e2e672443bd02a45d9ebb3274275c20e6e7ee0728992e77579d945b36de44ccbaab2ee92fd55f382f7ac +DIST github.com%2Finconshreveable%2Fmousetrap%2F@v%2Fv1.0.0.zip 3712 BLAKE2B f4f79741bb83862583f51f2ac5e80181eb0e9c2a4578df32f7e24eb98f4f548b99333e0e6a377e03ef701057b01e852e6b710ab885b65170c861bef556863da4 SHA512 e16bd414c1df566a12944e4a99ebd84d2103f0cb3bf8ec312e3de400f20b3eae27845db50672801c10474dbf1dc61d0c2e16e5dcd3c4447681c0b77f9114a411 +DIST github.com%2Fjonboulle%2Fclockwork%2F@v%2Fv0.1.0.mod 38 BLAKE2B 091e824ab9156af7978fe3aa6f61ae046588510903cf635ec166225395e40df6a1c715e4eb3c47aee849435eca3cc10db971a7c28acdae233eda85a4408c7520 SHA512 377d94cf7dd50f88b57ba829ded5169a6c41c5a304814660df0a3447d10860b87855f25cdb945a6e4de14c41281651330d4109c6dd6684c86fa4dbba27a3872d +DIST github.com%2Fjonboulle%2Fclockwork%2F@v%2Fv0.2.2.mod 47 BLAKE2B 82b32db5fad59fe9737687b615cbf4308dda3e892b04b34369022f27141f03b55e2cf1f348a7c18f763d67eb6f2e445b89cd49c938b396584d88d2490b99c778 SHA512 fab84681255c85de89c3909b709a0d535c078ae87832eec2386b43a07d73a1913ae2801a658f7023c83907ab7d4b489c82f7a69f83ecf867f22e7a78b531fe5f +DIST github.com%2Fjonboulle%2Fclockwork%2F@v%2Fv0.2.2.zip 12459 BLAKE2B 663f1cef77a317ea2a7a2318bf62ffb7f230ca2127a3e5c983d3aa92f48a269058f65d48f1dfc567153771946d4642af5d2be411e47a14afb69964332dbdfac1 SHA512 be5c859d29e9b7aeaa9e4933cd74f417528756bc667653158addbf7a79b72d4a3bc9c8a52592e07e868fa7be7f59388ca3031345cdc3962c9346584be7042169 +DIST github.com%2Fjpillora%2Fbackoff%2F@v%2Fv1.0.0.mod 44 BLAKE2B eb9ba00998f4a45590f7ab28d94adcda4e2b511ae7078f5583bfdcc792d34b6eded81b8c0f71ced35b782cd1bf344542673677915b44b9eb31873e9c5d69e133 SHA512 4d591cc0f2d11ba450f294361950972fe0dd71bdff5bb0c3e72b673cad6ea990335680bf7650093e1f9978bc8556a0ef9329ae2e8a14c10b7de668aead7afe33 +DIST github.com%2Fjson-iterator%2Fgo%2F@v%2Fv1.1.10.mod 295 BLAKE2B c143c3fdf7abf77b2a2f55a66f8efff4f0e99478a89cd3cfaf50fb042e0da2fda5dd1e203c227597cc2caa7039f269daa48339701233a3e21f898eaa028ecc87 SHA512 395eb3069c417f996120ec06ea8d7a712f6d8915c7398da1f346c5bf5e0fde4492bae0ff3833f3316a41a28d23fc7c9c494db312da72d5cacdf52b2bb95da6ff +DIST github.com%2Fjson-iterator%2Fgo%2F@v%2Fv1.1.11.mod 295 BLAKE2B c143c3fdf7abf77b2a2f55a66f8efff4f0e99478a89cd3cfaf50fb042e0da2fda5dd1e203c227597cc2caa7039f269daa48339701233a3e21f898eaa028ecc87 SHA512 395eb3069c417f996120ec06ea8d7a712f6d8915c7398da1f346c5bf5e0fde4492bae0ff3833f3316a41a28d23fc7c9c494db312da72d5cacdf52b2bb95da6ff +DIST github.com%2Fjson-iterator%2Fgo%2F@v%2Fv1.1.11.zip 139812 BLAKE2B 508f9a7823b1b52f042ecfd5bf1f12abc59d3a1d059e6168c10f2e9f0bfe6692e2a3eab75fd061d961459a2b98ffe21d29230c0a0f29f3871a5f95310eef792b SHA512 f922b107c536ef5b737ac5555074c237e92046bf0a8754f062c3f2dd0ec04820e32474b5ae3d9b32ef8272800e21fcfb90c5225b8bb466f0022b4adf1d79e910 +DIST github.com%2Fjson-iterator%2Fgo%2F@v%2Fv1.1.6.mod 35 BLAKE2B aa26eb3b67893fa913ea0f88bf22ac283c6cbac246683f41ede681940cb2e4437d033811fc12f2b47f9d94337dca9cdc926fbb5f044b2caed19c8e46a5879432 SHA512 e8bb59637bc1154ed648179314c4e20fa7f549353d094f4861e2fdfaeb70da1c1711c1159e78d82914a35b8ce184641937efd8808ffb1384136c7a6f3fbeb78c +DIST github.com%2Fjstemmer%2Fgo-junit-report%2F@v%2Fv0.0.0-20190106144839-af01ea7f8024.mod 43 BLAKE2B 02346f7c8a28f8d40ef233bc1fc6f3cee54a54bfd79b374ab7f3435039a5d9f7da5d7fb7824c618d25034cde1d355b503bddd76b804d610828a080ccb2707dc2 SHA512 801663d67d1aead6b01df89e329c8ca969a1f860b5ee2c2018094791060bf6e8cddac8e2d788ac823e32278d4e9ad1dbd72935e4da2cf6e65a34dc97f195ce7c +DIST github.com%2Fjtolds%2Fgls%2F@v%2Fv4.20.0+incompatible.mod 29 BLAKE2B 8efd6f84dfcb696fa2ebf7b09c7405d57457dc67e03a2cc753cddd93698b1b03d84022f241c4b652dd80e0521b2b1ede8127fa15dd47d1f678a7fe1c31fafedc SHA512 3a397e0ee84d8d426eb5a1f39c07d608e0ed53b1d4b2fdbd137d23bf9f401840802d18d5203bc468fac76402c508bfebf49bb20869d8a715e44c49e21fd3da4f +DIST github.com%2Fjulienschmidt%2Fhttprouter%2F@v%2Fv1.2.0.mod 43 BLAKE2B 2b7883d00bddf90261a91670917e335bf5c59101032ed3ef5ab6752eb4da25e8417071b1d0021441fd887158b519f4fca4b028b6ea52fe3ae9a41b84441c8c06 SHA512 60340233f2a0205ee4b1a7b2d78ed52d88fe5d39887413d0e62d6ed006c51eda83ac117454b0c1a31ab29c5aceae13810ec719dadc554d10480219c1afc3e5bc +DIST github.com%2Fjulienschmidt%2Fhttprouter%2F@v%2Fv1.3.0.mod 51 BLAKE2B 2e102c58874af58833146011d2b9d64950522530e5bb51d643b06f98b258d7cb52efa2caa36a1fd4d39d4307a37712de7f22d45990ebab7a755b7cacedcc861f SHA512 e208321653fa4f40d2af68b6db37a368134e27463a45691a1642bfbe67186efa2a6fa41cddb3e443e465c7425d8d44cee8364953b39e1b08fc16b447431cecb3 +DIST github.com%2Fkisielk%2Ferrcheck%2F@v%2Fv1.1.0.mod 143 BLAKE2B 128f8934f81d0e497e1258ec65129fe5d8831b66058669a5aef3fdb2fbe5f6d8ab30bfe97a1de7befadd34aafd55d6d15bb787e8948fb7718761392817203874 SHA512 c5e546822036a7114a29454e28290f8e1082392a47a101fb1d370e0969fc2c83186b4487473f903dd638abb8a763ce3180dc87993906895a2df33db7d8bc4790 +DIST github.com%2Fkisielk%2Ferrcheck%2F@v%2Fv1.2.0.mod 98 BLAKE2B b9d3c55999054ed927f666a43066ccc6758a6c5f550651f43ad5d85b5403c882ee76ac2b2553803d71789da33c60ea41857ed545003072ab6c666dbb77118e00 SHA512 3529b37d770af511a716a612b7fd7fb6a4805d13166e3a6f9378950443f6eceb2f3d95db5a46027437ce55b36e571c75bba72a03769d21ecdc97888019d80a68 +DIST github.com%2Fkisielk%2Ferrcheck%2F@v%2Fv1.5.0.mod 107 BLAKE2B cd132ab287312d1ae53abd542a75e6bdd5cecdcd46c5311be91da88d54e1a114019440b12d71a9357851585672f440dc66eaf359a99b7682ce1bd4ee03869325 SHA512 302828b5c2b6eec77f4a2ed075cd8b721da8d62a8747883d4382d5674a7c82dcea01a7de664d15d5eeba7e35b9667347dceae9b4ec93858ed3acf8adee692967 +DIST github.com%2Fkisielk%2Fgotool%2F@v%2Fv1.0.0.mod 35 BLAKE2B 2f43dcbab430f12316fde243db4bafe24372c74d60874b05917269e249a36660309c23da151db31d89c0d0a8fd0f179e2dd7f386af3ca533c95ef74017609af9 SHA512 86aca37f7f94ada381e0528a535b344c8fdbab9e0dcc7b71d716083501ad3d61db701ee159ccfb5455a351fc18a405301abe798037dd1200f9950bdd805d3dc9 +DIST github.com%2Fkonsorten%2Fgo-windows-terminal-sequences%2F@v%2Fv1.0.1.mod 58 BLAKE2B 4cf48282c28d2b8237fe9ff852ad25d102cce038fbd1852a1938bcf69c895df05dfdef6e533b3c0b4da28103eb5e3a9561f802414ccdd99b2d3ec2e2db0807ee SHA512 fe33ca4de6588b95f0155458b8b6daab218553b58de5dac220efe54019dfab085838cc6a22012a106fa36a6094447f744825cad04aaf0b158fce5aa676048fe5 +DIST github.com%2Fkonsorten%2Fgo-windows-terminal-sequences%2F@v%2Fv1.0.3.mod 58 BLAKE2B 4cf48282c28d2b8237fe9ff852ad25d102cce038fbd1852a1938bcf69c895df05dfdef6e533b3c0b4da28103eb5e3a9561f802414ccdd99b2d3ec2e2db0807ee SHA512 fe33ca4de6588b95f0155458b8b6daab218553b58de5dac220efe54019dfab085838cc6a22012a106fa36a6094447f744825cad04aaf0b158fce5aa676048fe5 +DIST github.com%2Fkr%2Flogfmt%2F@v%2Fv0.0.0-20140226030751-b84e30acd515.mod 28 BLAKE2B fddd4b3cdef60f53bc3f8da5a3154d10b49dd180c12837d3740c22b442947cba2025649f3ac7321bcf0c73a272527659b0ccd9be141ddca13caa7594bf6ad3fe SHA512 3c623d077e39697506174a50c0380cb7787a05a52819b1a73c2f64ba8dd819fd500777de83c83d8d9e80f19c828128a569b4cd783667b4d6b9a375b0e3d527a7 +DIST github.com%2Fkr%2Fpretty%2F@v%2Fv0.1.0.mod 67 BLAKE2B 2e1b4a8a38998179a32db321d331db54f881770a89719410876cdde1799cb8558ca2862bc70838d606540606d05918c4b115cf1c125945a77ed376c2efc4aa85 SHA512 4d841fc7a022e4e09e0a95925ad92a75809a67c30fb88de9190e4a2196383038dab9a5b3294b6a0b4786248977a0e09eea857a34100cbf22f8a52912ce9fa58d +DIST github.com%2Fkr%2Fpretty%2F@v%2Fv0.1.0.zip 11159 BLAKE2B c176e4bc9b5534b0df153e027f22be7d28eefbea1c0adab10979f19d601b95d300c54086b5ee388f453c73b9931339b9b04208fc5e6512385b348c49faff5488 SHA512 bad73f3c47f70de55a90a977a1e2b4a68de545a8425c71533de081c7a8f71d7ab1b489001c56ba2e88dcb78c08804275f7f8128c812f50d005a074ed6dd9286f +DIST github.com%2Fkr%2Fpty%2F@v%2Fv1.1.1.mod 25 BLAKE2B 63db8520df2f699bca5a7ccecc44ee04973307d86099cfe66ded30e2ca1bdd76fc3db48cfca0138673c20c6f94061caf219f018b21b9d67231fe959eef338596 SHA512 967fcdce835c12afbf3b12bb204a256f32d46a3da535e2a7250159f62781a163ee107dd2a4fa20743b76bbf52b97e627e11e895c8d5ef73aede37d6a89e326eb +DIST github.com%2Fkr%2Ftext%2F@v%2Fv0.1.0.mod 64 BLAKE2B 475c51201a379df2cc4ff8c5681b6a7a1524f60d0b8fd0853fef569dea754efabf3425cd4b84e8427db8a6cf3e9b1141d5050d48d5d429cc1ce82162aa70050c SHA512 11d2502a7d241a0edf4e67bcb651a890a12f49d00f8b944cc9eb8f6e9cf5fbb2b2827e696021649bc795ffa275e95ee700e4a1706e03e88fa9ae079f5b9f48ce +DIST github.com%2Fkr%2Ftext%2F@v%2Fv0.2.0.mod 68 BLAKE2B 91222794e2d517a33cb43bb9430e2e7b497ace820ab8c47dcde253226e54f08b922404df7ba7a2dc74555a059e95b81471dc36fc5b63b55e385004fd9a16d61f SHA512 9fbff125d97ce2c4b9b301021a987edbeb686b37927504df4e5c2f0ddbebc8ed28ee5152de7db2eceb0a0fc5728579823dc4145f36df9ba1961b9c2da1ac4461 +DIST github.com%2Fkr%2Ftext%2F@v%2Fv0.2.0.zip 12607 BLAKE2B 40090e35e5bfb0f1570cc11a3d3c3b6f9c4d097ffadb161280ac4dda90e7b74fe3784dbd31a74be243a2a0d6f3f3273f24a0dcb07523c7db8975171327de25d5 SHA512 5fbe5884d311244c5250d4a1b249749a84fc6a50d4d5d6b3967a4bccb317ebb807917fe540f13fea788abd863d7d2f2537a40b57cf156a3f920b15cd8b365ac0 +DIST github.com%2Fmagiconair%2Fproperties%2F@v%2Fv1.8.1.mod 40 BLAKE2B b8e71ef21c42894c31d75cce0e7423b21e716de0539a8a7ff462e0d5c05c77795238598630208055ad808af2db8c56a997e7e114ef391c07d380b996ce533544 SHA512 8a724e5cfce28512549e7b06ec42c9e02625adfb3398fd45af07f8c512782002a262e8567669929626814758f9d12041c318bd4258f88d110a851630537bd5d1 +DIST github.com%2Fmattn%2Fgo-colorable%2F@v%2Fv0.0.9.mod 37 BLAKE2B 6bd675a05c0bb6f9dc12d09203d13de115801888cf8c02cb5d609f72d214b7e7ebf13a72ddfa2eb9172e9c2ba1f3e5a040f089a86ce9fe873d49288d5f7dc5a7 SHA512 3cc3ae26618b96a0fc076b18bab6f8f0f6a1064d6a9913c1015a9867fd3571d17f5d2867d72cec008e9bc7005883a596edb21424084f82ad5b572443de90f976 +DIST github.com%2Fmattn%2Fgo-colorable%2F@v%2Fv0.0.9.zip 10606 BLAKE2B d9aed996970ecc4828716e86ddbc85a7949f60ceacc7326708ce499bfc09250bc8ee336806b229a44064839e7ce34f5cb2a7607da5e82c417a737ea869f97f03 SHA512 dd1763a8d04540b3e579d397fa4888c4bd8c00c3963cfcd1fe42af7c1990ef85f9a2e2fd5c5f2c7d3e6817448df5e2237241ff5a2cda651b061cc8932e0afdca +DIST github.com%2Fmattn%2Fgo-isatty%2F@v%2Fv0.0.3.mod 34 BLAKE2B 55253c2475bc0169df729915bc92689eaad2908ff7b9dd81b8a553bd75d5f866c308a85fd69d664d31b0d2d373d8d52ee1701677cbebb07e361612ab8cf17f2a SHA512 00c272b4652db259c46875641b29489ecada2602e38beede8c8bd529d73b6e123bff58f8e0f8cadd2d680a6a5485aadffa448e9445548abbd2fb424b059a31e1 +DIST github.com%2Fmattn%2Fgo-isatty%2F@v%2Fv0.0.3.zip 7014 BLAKE2B 077be89b06969ca8149b1f3838940633896f1da465e21a189809ca1efda41755d33c5f52b3c6dab971726c2d8044b169950198c62f3223cc01ff813f6439bcb4 SHA512 bb4845cfecd934818a6352ee9d9311d795e0c6e7f8af97da4676b9e2085154bd0175599f745e3cc30ddf123cc807ce50ca02d82fdb665b2582edb842c001a8f7 +DIST github.com%2Fmattn%2Fgo-runewidth%2F@v%2Fv0.0.9.mod 45 BLAKE2B a7d3b1ffaf20b96cc98161ea6756d62d8380e7557859606dc7975b3de91a2d4142932d5008caf40b41d8ff2ac1ff33f672dbfac351f3e518922a036d7c116a93 SHA512 0cfd4101dd8ed90f80b7f4ce2928cd322b93855764abae65d66c5ff9888a7c8aec6ee6581c7f05d1c80db5c78003ee2afc8537fda8a3855e2349bfb8267aba61 +DIST github.com%2Fmattn%2Fgo-runewidth%2F@v%2Fv0.0.9.zip 20005 BLAKE2B c0f71323efd262296b78867d2b387a74491cfae3f4498e0dd22c036b20dd6fc1b6569171eebf267effd140ec009527fa5ccbcedda4f8cebab2679582766331ea SHA512 fad08292597cbd4a359e06f85bc7cc37b3d3d84b8046e47828259e36872063069c4ab17b7c89f2a5de4b5d0ab1ca5cc66cc515847a7887339a3a04b5f44e3c92 +DIST github.com%2Fmatttproud%2Fgolang_protobuf_extensions%2F@v%2Fv1.0.1.mod 56 BLAKE2B 50d2d6dc9c1ee92d629af8c9aae9fe5f70a0c6fe270a95a8232cee3c50132ef90c68218ac64a3b5b72d94e23ecbea5f567fef39a81be3d4585bae3f4f5348545 SHA512 5235188477921a263176fefaffccdaca4bf8175a2e248356a06596e37fa868400203172c7fe9fb80d0a65d335d23d80edefd242657de0eb83d9360589e063bba +DIST github.com%2Fmatttproud%2Fgolang_protobuf_extensions%2F@v%2Fv1.0.1.zip 44378 BLAKE2B 15ccda2b94bb024656859fb8a6968782b9a1bffb786b0b1ed69a3284b01f4a2100b3f3c46b6ebcb8f7febedb5bd4f6762fe333b7d4f1d14c700f8fce60843352 SHA512 e9349ee2a7d5e5b129ec6a1c0507854aebca82cf9ac2d0a681cac2f4630ea35551ede48e1931494362232a83dc9f26b6b4162c6114e0176084c50101b1da46b0 +DIST github.com%2Fmiekg%2Fdns%2F@v%2Fv1.0.14.mod 28 BLAKE2B 7846fb7a9c146e4b4cd0db250d3a84bca13c7c3b8292ba71215a041006c8ea39a36b88dac7749a9bba96dc463b499633591f6f19d43369067b0f4f46594b8ddc SHA512 4ce4d3df63fbdbfe3505816e81dc7e806554d79cfe0254ce8e0228bc16eafc014c98475c24f4a6e0c6efb6fa16e891e2e47c43c9ea10ce20a95dc69f686f6361 +DIST github.com%2Fmitchellh%2Fcli%2F@v%2Fv1.0.0.mod 416 BLAKE2B 845f9f6d79c8b18d4a070255eb93aac9afc50ad01593fc5c6076c59e4b5c09f34856b29ab24809a67fd10ffc5cc28908faff8358a52cc8885947c53622d6090d SHA512 7cbcae5e1749c55a0c3fa25b007035c0c44c8f982a37635735afb95c63a20ba019a51e74244c568a170b5a379ccb10cc8c9df716b6261d324755ea92c7f462f4 +DIST github.com%2Fmitchellh%2Fgo-homedir%2F@v%2Fv1.0.0.mod 39 BLAKE2B e28ca0cdd6db21c4b97e47151a6c11487314f26d5a259f9d7f5581f3d92648a57d931e1d6b004597f76cf10916fbe14728c99192e24b6da674de2cdc9cc4e78e SHA512 a2b7ed5a25e6dcab620357d5c216546bdb554edbc6fd927a0703e788d7e7a10a743471d10f5c7cc56ad829ab35c7272c61d210e55947363447832e924844e9ee +DIST github.com%2Fmitchellh%2Fgo-homedir%2F@v%2Fv1.1.0.mod 39 BLAKE2B e28ca0cdd6db21c4b97e47151a6c11487314f26d5a259f9d7f5581f3d92648a57d931e1d6b004597f76cf10916fbe14728c99192e24b6da674de2cdc9cc4e78e SHA512 a2b7ed5a25e6dcab620357d5c216546bdb554edbc6fd927a0703e788d7e7a10a743471d10f5c7cc56ad829ab35c7272c61d210e55947363447832e924844e9ee +DIST github.com%2Fmitchellh%2Fgo-testing-interface%2F@v%2Fv1.0.0.mod 49 BLAKE2B d388b11419bfd0c80b52fb3bb5a2600712364115efe7b40ac02ba2da11d40ca30dffac19646056a4aa754de05c490d1f68af4549bdd1fab7596dae593eada97d SHA512 3e334e248e9584b050eb81bd23071a8542185c64b5f112f46b82c6842d2b8707099403bbba1b8485d64cd62faaacab3fd52e868bb405ca6e6067034e66ffc51b +DIST github.com%2Fmitchellh%2Fgox%2F@v%2Fv0.4.0.mod 32 BLAKE2B d511476a16a86c50db84dbacb40afb4b30ac3f72c4fd5a8b20fdd8bc6de1c46592bd16b24f77bd037dcb23ba86cd217fa740b59a784c6fff0fea1720d2045695 SHA512 451fbf9129c151784d97cfe6af29d27a277b6821411cfa5b23e6730ba0f5d5a830054eb6ed660dd2192c16abd54d5999be5b80e39bbac3499c3198311d01ec1f +DIST github.com%2Fmitchellh%2Fiochan%2F@v%2Fv1.0.0.mod 35 BLAKE2B 0b603da65c4738d257fb759b8aa3971011ee721c1fc783663e1b26175335c6c90ad56eab45ddb6422e39dc0c6603e13ea64756f8a97bbfcc5e77845248b16a74 SHA512 2249854bef533dc77479041f9dc5610e14c549be1aac292a39b8b74b36c9fc42c04d211d8d5b71082c05971cc26a94a57751c3e61895050d41909270ee5123f3 +DIST github.com%2Fmitchellh%2Fmapstructure%2F@v%2Fv0.0.0-20160808181253-ca63d7c062ee.mod 41 BLAKE2B 291f73049327af60c94a2b2113b8e370f90d2a3fc7074c58ac523ce2a613ebada88ce048a73cf882c68ff552dd6df0be42f796f4ed11a549c0b7ca6c67f61c38 SHA512 7816e3703475601df65f20ad4e5d1f6bbedc4a7c87c594518358c1a9c24421aa5ccb6e8389ad983a514a823674c6f0f771f1f367b10d99691dbd8db7105ec44e +DIST github.com%2Fmitchellh%2Fmapstructure%2F@v%2Fv1.1.2.mod 41 BLAKE2B 291f73049327af60c94a2b2113b8e370f90d2a3fc7074c58ac523ce2a613ebada88ce048a73cf882c68ff552dd6df0be42f796f4ed11a549c0b7ca6c67f61c38 SHA512 7816e3703475601df65f20ad4e5d1f6bbedc4a7c87c594518358c1a9c24421aa5ccb6e8389ad983a514a823674c6f0f771f1f367b10d99691dbd8db7105ec44e +DIST github.com%2Fmodern-go%2Fconcurrent%2F@v%2Fv0.0.0-20180228061459-e0a39a4cb421.mod 39 BLAKE2B a4d082021123db99b5d72a1d8d0011a517a79ff7b07238f0f01e550be684f18be03907b6280e673aaabee5ea837ce14b9e4daf278a23605c8dca8fba76bf40ac SHA512 4f29e15b1d18a8952c14f5142aa863b77b7be820129512cfeb3f8bc3335ff637a8a86c0284832a20543abc2c5351a3c0f992d52db895385e45f176af899b5844 +DIST github.com%2Fmodern-go%2Fconcurrent%2F@v%2Fv0.0.0-20180306012644-bacd9c7ef1dd.mod 39 BLAKE2B a4d082021123db99b5d72a1d8d0011a517a79ff7b07238f0f01e550be684f18be03907b6280e673aaabee5ea837ce14b9e4daf278a23605c8dca8fba76bf40ac SHA512 4f29e15b1d18a8952c14f5142aa863b77b7be820129512cfeb3f8bc3335ff637a8a86c0284832a20543abc2c5351a3c0f992d52db895385e45f176af899b5844 +DIST github.com%2Fmodern-go%2Fconcurrent%2F@v%2Fv0.0.0-20180306012644-bacd9c7ef1dd.zip 10936 BLAKE2B b045256d37d4973e88d0d9c6dbad7397160ddd7b3102ea8420f92be2e8c3ebf6362f350eff10b52fc7fb447d98b00f07c2bc1da3f6e442ebdb8e90103492c8c5 SHA512 e7986e7dfb362e346309cf77ee3969c2881056959e34db07d2dfa0e505106844b7424270d8f17f1a89d335071688e98b992ac81e8ffe0c98c8a0e3d145144d4c +DIST github.com%2Fmodern-go%2Freflect2%2F@v%2Fv0.0.0-20180701023420-4b7aa43c6742.mod 37 BLAKE2B 3643a4250f81729708917dc751cbff6ab6e37761ca94784062a4eaf243682a9e2c755ce793024cba1737d0eee1c52c29984fe3008a2471ed24a759da87ec7081 SHA512 72fe8dfeed7041bf92af829dd84513f0c97f709d69586a044f830fd3de43deb27d0b02000338e00897a44c57806ad036cafcdb9661b1852ff76886ad92bd83f9 +DIST github.com%2Fmodern-go%2Freflect2%2F@v%2Fv1.0.1.mod 37 BLAKE2B 3643a4250f81729708917dc751cbff6ab6e37761ca94784062a4eaf243682a9e2c755ce793024cba1737d0eee1c52c29984fe3008a2471ed24a759da87ec7081 SHA512 72fe8dfeed7041bf92af829dd84513f0c97f709d69586a044f830fd3de43deb27d0b02000338e00897a44c57806ad036cafcdb9661b1852ff76886ad92bd83f9 +DIST github.com%2Fmodern-go%2Freflect2%2F@v%2Fv1.0.1.zip 25694 BLAKE2B 59d0a645e3fc29e94a04fbed5329cfaf2162f5779f1c13bfe96c9d979c7acd1b356587b6e30760568607ea15d2088a76bb58e4504e17abf360f2702eb6e8c3c8 SHA512 8fb62179a48e212b74f0e8af79ee1c20479b1725c089c75a12b43bf4936caaf87d42b35f2b7a7de87c60e793347bb185486beb8061e588b8085ac354a3ef8562 +DIST github.com%2Fmwitkow%2Fgo-conntrack%2F@v%2Fv0.0.0-20161129095857-cc309e4a2223.mod 39 BLAKE2B 391eaf696f1a5c764f9e156ae3f6285ae5bf8a4abf2a735fd13fd1591f3bb97737502b79df093156305503ed4b63e0d458900e61fa8717f96ee17a6d43bc2f79 SHA512 9fccb6717f5b37cff2d858cc31f7e16aed120a67498c2f0d24aa30ffac4eba2e87822b12d62f700a0c62d7561708bab2e13e35e89cf5407cfb06a0de5c70808b +DIST github.com%2Fmwitkow%2Fgo-conntrack%2F@v%2Fv0.0.0-20190716064945-2f068394615f.mod 39 BLAKE2B 391eaf696f1a5c764f9e156ae3f6285ae5bf8a4abf2a735fd13fd1591f3bb97737502b79df093156305503ed4b63e0d458900e61fa8717f96ee17a6d43bc2f79 SHA512 9fccb6717f5b37cff2d858cc31f7e16aed120a67498c2f0d24aa30ffac4eba2e87822b12d62f700a0c62d7561708bab2e13e35e89cf5407cfb06a0de5c70808b +DIST github.com%2Foklog%2Fulid%2F@v%2Fv1.3.1.mod 29 BLAKE2B f74d75a495f683f4e9047201721611229ecddc37ed01b5d4b5d81a06220a6385f06d0f99e514bf19cc2030fbdba6de3a08fd38b750e6651a822b10bf69c45327 SHA512 b426d975637bd2b4dddc10d7c88b70f8b946201f311859f22520d53ae0a2d9911ab358460c089771f7900d7a8740bbc0c6d3814ab8f955108fc31b7b602ab5cf +DIST github.com%2Folekukonko%2Ftablewriter%2F@v%2Fv0.0.5.mod 96 BLAKE2B 7014a0ac5adf29ba3e90a2ef7400121b655c47924fa0fffe686fdf4234b4e01fe92ba04e82b5153b63c8d20c8b466af03f0fd0975f5a9d6e8dc2f305e4712cef SHA512 79c65033c9ed8b95230cc1f11ae5f1684a3a0d48ca9c47bc33d46376b732be4d08a8b6d39788e388b86ec16e502e378fea4654424e81ab3fa372ff30e87bfdfb +DIST github.com%2Folekukonko%2Ftablewriter%2F@v%2Fv0.0.5.zip 24933 BLAKE2B 930a6651270418384adf858856eb9b603a289230f1f6ffc65d0f816f7b20a8d7e1f5dd3c6bc27eea4369670da7e5e5b512fc966b0b6d06eb6735625a53c85eff SHA512 51ac6647cf44f5ba36d9209576dff1f2f133ec8b0a13a957e4642e3034b2d2b755de8ebf34a0c77f146b3f33044cc2f71a85e512690553e3a3bf311c2f46bae8 +DIST github.com%2Fopentracing%2Fopentracing-go%2F@v%2Fv1.1.0.mod 45 BLAKE2B 7a7820ed255877b390c76ffd281258a8e70dbb2812b7d2d0bf63bb431e8e4f52faad48d4e6801b301ce35cd6dcd49ceac6ab94b32e35befe2e6df56e1a1e8eec SHA512 13b356ebfd062cecffa1e323aa7768d933c6915c2963eff50b1f743712d48cb24f137ba839a7df211e6e02979a4d1c9d32eec8194227edd995c3d35849edeb54 +DIST github.com%2Fpascaldekloe%2Fgoe%2F@v%2Fv0.0.0-20180627143212-57f6aae5913c.mod 35 BLAKE2B 3db6c40257f2c4b0254a26c6e414fdc87c037f6312d4bf7bbd39420d6df70f50eab84c387b54cc71fe16068e1b25e3fc63a833e11cf5b4346f842bc61328b0dc SHA512 0b378d1e15db4fc5a3d7d711b63dedefd141d607192344c8d1ab2ac755ab9c6e91b2c320378ac8a485cf94deee59e6628e7930017c6d659bead6ba89cd78a802 +DIST github.com%2Fpelletier%2Fgo-toml%2F@v%2Fv1.2.0.mod 36 BLAKE2B a388b7d0db7c8b9a589164ac639887f1e54d3f5d59ed9bfdbb427b88d381d95455cec1f3474d6dadf847925b7b0e9944a3713656f4870db4fadaa1774595c3f1 SHA512 b74e16c113ace53ce6b7a4df1fc73f21a5acdcf3d2343a4c4f1ad7a2cd8d2282ef7ede98de8c1c46f7d35feae28c9f49ba4a2dff1071357cb4e88e93f25b521d +DIST github.com%2Fpkg%2Ferrors%2F@v%2Fv0.8.0.mod 29 BLAKE2B 7fb53b19bd1be0e783039647b42ecbe2070f51af102e473ec6d3544eea0ffa5863f1874ca1615348d5f8abbaa39c841b4fe18d43a8a615fa648cf22f35955e38 SHA512 0c156e21d35c45a89c1a1b69ff1976b4f7511b3870bf96126121f5a5effa3723eb45bf080e840d5c8b96898c65207dba83eb3e1a23668dd8a5e20ee6be775cc0 +DIST github.com%2Fpkg%2Ferrors%2F@v%2Fv0.8.1.mod 29 BLAKE2B 7fb53b19bd1be0e783039647b42ecbe2070f51af102e473ec6d3544eea0ffa5863f1874ca1615348d5f8abbaa39c841b4fe18d43a8a615fa648cf22f35955e38 SHA512 0c156e21d35c45a89c1a1b69ff1976b4f7511b3870bf96126121f5a5effa3723eb45bf080e840d5c8b96898c65207dba83eb3e1a23668dd8a5e20ee6be775cc0 +DIST github.com%2Fpkg%2Ferrors%2F@v%2Fv0.9.1.mod 29 BLAKE2B 7fb53b19bd1be0e783039647b42ecbe2070f51af102e473ec6d3544eea0ffa5863f1874ca1615348d5f8abbaa39c841b4fe18d43a8a615fa648cf22f35955e38 SHA512 0c156e21d35c45a89c1a1b69ff1976b4f7511b3870bf96126121f5a5effa3723eb45bf080e840d5c8b96898c65207dba83eb3e1a23668dd8a5e20ee6be775cc0 +DIST github.com%2Fpkg%2Ferrors%2F@v%2Fv0.9.1.zip 17866 BLAKE2B bb8d50b9e736f5f1e129482bd50f720b7dbe80935fcb6cfbec6d5a5f5ba5d5434476d66a362f12bedc304e89c9886d4868d310710aa100c357900a742d4ee341 SHA512 82b0ed1ceadd44a2871b56e733a118003b1bae9e38fe95251e0aa06a0a4c9b4940c485336fa11335974e0df536dcd0491ec1b2e545ecdddc7f9ce59771f86321 +DIST github.com%2Fpmezard%2Fgo-difflib%2F@v%2Fv1.0.0.mod 37 BLAKE2B 94636062c94f8ff68cdcab7593a3acae7b9ffff616cad7b1d5c9cd147a4a1042d33666cbeed6fd816d6793113abfb595183097dcc46de7a3dfadc1423ed43e79 SHA512 c3d5c48cdb8ba6af7071a07cfede06e0ab67e3726d9de592a952fad40167dcbdd9621dc2c4df1bd3c28eb99d70b1b6d8d812441237c35bf492e5b7f07bd33902 +DIST github.com%2Fpmezard%2Fgo-difflib%2F@v%2Fv1.0.0.zip 12433 BLAKE2B 0c911c9d173080abd8edbbab1f47222343801d8eeae36b4add24773e3282fc2a39283fdf519a3d4483e39cdb7d9509b8570d151f46841ac1a616f312dc4cb0ba SHA512 3b85697185ba85cdef6202444ab6cabeabfad8a03d66b3839a852586b1f91ddae7897a57c8c138d5647022aa44906c7ef3c5339d520f90eeea0742a935da8cf2 +DIST github.com%2Fposener%2Fcomplete%2F@v%2Fv1.1.1.mod 35 BLAKE2B 763a350270dbd9e5a8f735ded2a13c7bde23a356f8f4187b4fe430b1dbf995cc9ca2dad54a38e927c07ba01b5c21f8aadcce69b8a94baaafee013d4a9fd0c988 SHA512 79b29fa26101598261ce7406c81be4fa53d79e89a7bed072abcd572d7f35f3a408da45055f1b05c7ace8acdb0ac2ea005d79a4766e7657087ca46327ebce842c +DIST github.com%2Fprometheus%2Fclient_golang%2F@v%2Fv0.9.1.mod 43 BLAKE2B 2bfedb841a10d8d6a861189203de74eb9bc6bc37bb10cdfc2404b1e972b7672568ed27d235e143d831cf2f840943c039398296cb78f1309f00d1ad9e0ce21056 SHA512 191cf6496c41b2b82c9a8f2ab2aeab63ede47807160f7cf746c548b3e92e367fc8f80ff8c6efbb7e91ca5903d5672b235c1ab9f14d3f9f988e8ff1c821d3b8bf +DIST github.com%2Fprometheus%2Fclient_golang%2F@v%2Fv0.9.3.mod 379 BLAKE2B 6a6db2bee0b69257e5c4d37b1d5395693ba6a88bce129a580b8c0ac986a7702729ebfaec726caa3b6c4d2537bd62a7d728705dd0cc6f6d8b6c9a4460c9bb33e2 SHA512 fe6b74b26571ed4afb49f8f2c6745644cb7db7b5fe95138761c78effdd05d9948c09aded96218ca0cf9d8da6372705901048c14290a4faca56b1d05ca3d74130 +DIST github.com%2Fprometheus%2Fclient_golang%2F@v%2Fv1.0.0.mod 535 BLAKE2B a8d3fb22b519e88dcb6b6f305a80c94e8b40fba8bdc96941230b354cc6bd8ec4bfd121b8e5ee57e9883e0b01b6224ff22a55fa8434bee1623133cf59489e64d0 SHA512 1d3646f93821b2ff1a4d80074f773eca22ff3675caca9d267762a31c1ec719ab464ba7ade7c8e2aa79b16a4f35f5a64f779fd909060a0c3056f09af77cebd655 +DIST github.com%2Fprometheus%2Fclient_golang%2F@v%2Fv1.11.0.mod 468 BLAKE2B 4ac6ec5b71271218f33b753092c494ec6dd01e73373df68af2f399d8d8ba32de0f02150c1c5fdac8518ac244391f126cdac602c63ec862bff559d76015cc78f5 SHA512 9c6244491c9a3012c4a2e575cdb361f7fa577f391ced254adfd8d567c361f073ce23ddd57a0f18ec3327189cf97ad737254c0d0ef2872085af6af7bf9dec1d72 +DIST github.com%2Fprometheus%2Fclient_golang%2F@v%2Fv1.11.0.zip 240896 BLAKE2B 4745181476be50303fdf0e66ec147d643995c809a1fd969c846f656d453025f2cd67089f3065b41bede74bfcaa65e5307dd9541457ed7f7ace31b6b567e2e135 SHA512 20c4e6baf239cbc8c8a754ec1b9ee814ff29df1b41332f75f7440b27864bc28397071f3f4d60ba6ff4d0aa531b7a20857e11ecca93057784f76f03876151e8f8 +DIST github.com%2Fprometheus%2Fclient_golang%2F@v%2Fv1.7.1.mod 569 BLAKE2B 0c975c1c48f40792b02fd8756be3b6bc044ca05725ae179445a858baed4861011ba76051aa25fb10be23c6cf14738cb9cab928418be49d8ad85211d398089ec8 SHA512 6fe81bf3c591058f2ff968b3c6656766d9d3fd74c8577b3e7cfac17e463392eed3268248237d252c98751b2f97bc7c48a8db15bfc3fbcd4afbbaca0e2970819b +DIST github.com%2Fprometheus%2Fclient_model%2F@v%2Fv0.0.0-20180712105110-5c3871d89910.mod 42 BLAKE2B 5519896b44b7bc3089a8965dc61aae63745c64ba1a390d3fff1202be7f8dd34f59862c04b49e377d6616a93a0341662becce65d431d445703a160ba49eda208b SHA512 c84dfe43954b19c1e4ac5ff8738e79db469f3bc1dc55e69b12503d0a5cf125cc74f4797ddbfe64b2a1bd1e2940575c32678671d51f67161c4f5b53b2a85ac46a +DIST github.com%2Fprometheus%2Fclient_model%2F@v%2Fv0.0.0-20190129233127-fd36f4220a90.mod 164 BLAKE2B ed42e8dec25021e488793be8e008c34ab5bdd6b5b884762d69f40d6c8968bb539041920ac7108e685ae56f2ef71b7174245772d96cc8f20463eba71580afae29 SHA512 4e0e6941b43c17cdce0205e9ba3d9fb18937f426ea2ac9a9e53396c906101d6ec2eb501cd8a791ee3ba9a32185f86495e9189134b8a9858134c73238d98ce0f6 +DIST github.com%2Fprometheus%2Fclient_model%2F@v%2Fv0.0.0-20190812154241-14fe0d1b01d4.mod 164 BLAKE2B ed42e8dec25021e488793be8e008c34ab5bdd6b5b884762d69f40d6c8968bb539041920ac7108e685ae56f2ef71b7174245772d96cc8f20463eba71580afae29 SHA512 4e0e6941b43c17cdce0205e9ba3d9fb18937f426ea2ac9a9e53396c906101d6ec2eb501cd8a791ee3ba9a32185f86495e9189134b8a9858134c73238d98ce0f6 +DIST github.com%2Fprometheus%2Fclient_model%2F@v%2Fv0.2.0.mod 164 BLAKE2B ed42e8dec25021e488793be8e008c34ab5bdd6b5b884762d69f40d6c8968bb539041920ac7108e685ae56f2ef71b7174245772d96cc8f20463eba71580afae29 SHA512 4e0e6941b43c17cdce0205e9ba3d9fb18937f426ea2ac9a9e53396c906101d6ec2eb501cd8a791ee3ba9a32185f86495e9189134b8a9858134c73238d98ce0f6 +DIST github.com%2Fprometheus%2Fclient_model%2F@v%2Fv0.2.0.zip 13785 BLAKE2B 2cd44410ea7af88683792807b0f2c31b0943d8664a4be050f2e422095ef3674e6d42f4b9b6a76083e13bc9f44be1578cb06a7389b4a4b201b5a88e756b40193c SHA512 db2396362357b6d5e99b21bd4aa8d8dc193dd2676a8f437c62eafae849a56a53875bce7411d58ad78e4fe36445b72ee1a34360b174a23ca84de911f5df189354 +DIST github.com%2Fprometheus%2Fcommon%2F@v%2Fv0.0.0-20181113130724-41aa239b4cce.mod 36 BLAKE2B 39120b6af83d45857c990115ff52d8828278a9ce158b01621d8dcc517c23ff139532a2c2e53ec97616f0c65a2e0db3ede7c5fe59eb33be277e2c60650362b232 SHA512 1b262da0100655c3a56c0e551866491b81d2b88fd5fed9cc43a57bce3634c88c82c798ed1a823237011f6be68b5f0e1fe8284526cd68204851de30a44fc34fbf +DIST github.com%2Fprometheus%2Fcommon%2F@v%2Fv0.10.0.mod 817 BLAKE2B b4cabfb93633359c6ac6dcd400484e6162bc6b609bf0edfc4a82a2cc0137edef114d0d3e9c55bc47d1abd906d9ac00f9d84f07ee7072452c570ba9f98118f4b2 SHA512 7e1b17c424c8ec889d0efb0f5a171043ac0fffb48725144836d8ac635c036e877e65f34f75055359747142051afd00374cec9e39911175adddca2c50fde4c893 +DIST github.com%2Fprometheus%2Fcommon%2F@v%2Fv0.26.0.mod 794 BLAKE2B 91c9bb4469ac63bd98bdd1ce4d2f2cf3a233f62f6c30b1da0b2a94eb1215a975f3a19cf066c6bc5847fd1a642da6082b8377825987ab5ba21620c2ed9ef26af4 SHA512 05a0bd8a7de559925fc5ba7753d9fc80db41271fedfcd0ca3137f9620c68468c0bfb706e0b4915151657c74a5d64f52a5594736e19fa1421aa65124f551f0ddf +DIST github.com%2Fprometheus%2Fcommon%2F@v%2Fv0.26.0.zip 175437 BLAKE2B e86832a3d0eea09f43735d7b45ec2335200d530bad4981da1d7cb12939d284cd769dab8e85412482c3b58a778cc910de6f5492765ff9745ec9a03b8276440411 SHA512 979628ae2384dde963f40dca23a77bd12138dad2b8d7bdd261cba5951678cf9287c47c335d40d4e7b54b561cc3101fcbd6eb7d9b1d039dc603917dbc84c1c4ef +DIST github.com%2Fprometheus%2Fcommon%2F@v%2Fv0.4.0.mod 1223 BLAKE2B 969e069f2e210c2863b54504d62dec9ca606c485612ab1c42249e623a4bbde4e4ad0b41da30f83594b7efb4d4a44e0a68a5faa8c115263d73738773c35a98dab SHA512 02db8fa79cd8368060c72ba3925624c779bcc9e39817b6ed86ba143024959496db2c23c1aefe93a5d9f22b48e742072382e2ccaab430c1c9eae6254184e2358f +DIST github.com%2Fprometheus%2Fcommon%2F@v%2Fv0.4.1.mod 1223 BLAKE2B 969e069f2e210c2863b54504d62dec9ca606c485612ab1c42249e623a4bbde4e4ad0b41da30f83594b7efb4d4a44e0a68a5faa8c115263d73738773c35a98dab SHA512 02db8fa79cd8368060c72ba3925624c779bcc9e39817b6ed86ba143024959496db2c23c1aefe93a5d9f22b48e742072382e2ccaab430c1c9eae6254184e2358f +DIST github.com%2Fprometheus%2Fprocfs%2F@v%2Fv0.0.0-20181005140218-185b4288413d.mod 36 BLAKE2B 3c6acbd1022261065a321c6f3cfa2946b58011f45fae9b98761397eb7e5e0984dae4ea34c4f837f798ab29ca8e26ed3f07771be10e500a99ce7e5e9f4c401b5c SHA512 05f032eba0c264b186936c2b9831624a01999972d4f1bba6aa15c452407eb10d402f1ac674eb41e2d24fa66e85ae2e56efd2326fc4ecc741169b9908d7935335 +DIST github.com%2Fprometheus%2Fprocfs%2F@v%2Fv0.0.0-20190507164030-5867b95ac084.mod 98 BLAKE2B 23576c142554e5a22a11d704cbff1bbaf1029518ceec7f04e22aa849763a7aa5e26ad1405a8cbc0d87097264a5fa7cfa3d655cad18148f5de6209a06580722d3 SHA512 0897ba1b7b4a32f206763327e138d3b460194097d19bedb8ee1bb6889b9d188afae9439178d1c2151fbe17b7d18545cd6cfebd050bade93cd39b435b35b6acdb +DIST github.com%2Fprometheus%2Fprocfs%2F@v%2Fv0.0.2.mod 98 BLAKE2B 23576c142554e5a22a11d704cbff1bbaf1029518ceec7f04e22aa849763a7aa5e26ad1405a8cbc0d87097264a5fa7cfa3d655cad18148f5de6209a06580722d3 SHA512 0897ba1b7b4a32f206763327e138d3b460194097d19bedb8ee1bb6889b9d188afae9439178d1c2151fbe17b7d18545cd6cfebd050bade93cd39b435b35b6acdb +DIST github.com%2Fprometheus%2Fprocfs%2F@v%2Fv0.1.3.mod 198 BLAKE2B 9b5c175c915db6a1fdf18f440acf348e395fd2059e1f44fb1fd556e7c2c6821cfa397f88d2123f681b41fe5c5689ebc58c7c75865ef63f7f1c61fd8d323d8117 SHA512 7a54bddb87350ba24423842fcf1cd8b031be427e9f689467503d8d6a876691b209a5d2ac33d848a977d2c3890284d816fe4f2fa9391642010c96c3c0d691efcb +DIST github.com%2Fprometheus%2Fprocfs%2F@v%2Fv0.6.0.mod 198 BLAKE2B 954749eeaffd58f7885eff94ed89b9c933b2506dce66db05c8aa640fc7e8ff21032d855776ad091c86d43b77bd9e2d1db3cfa7b176f2984ea66c4a49b4373d9c SHA512 539fdd264ff10a459bf00eefdfcd2d3d079426cbcce7c4ecd27e1191d6392e0451804bddd5a39f7279e3c91e63a40ed882ebe1bcce7e71913d6109b7b6ba403b +DIST github.com%2Fprometheus%2Fprocfs%2F@v%2Fv0.6.0.zip 282768 BLAKE2B 22c62ac51bb14578571aa93f0acdecb984ca370b4617122078b28b8ec5ab4ac8cbd6e986d60335d5f9848028f51f94d8fcdae3d8b428c8d3c8196d97cb2f04db SHA512 1b73a550dfdda98e41da9ace048b230ba05bfe7518cec7b5f877c11afa58bdf9d53ad25fa848e316fcb5b25ff6eabb0a2d2688c1cfbd9642a8670b72c3f90a92 +DIST github.com%2Fprometheus%2Ftsdb%2F@v%2Fv0.7.1.mod 1346 BLAKE2B a46e52b7acf7ff0783cc3c18a1320f66e02ab9c6879434dccc9fe182b4c7fe4594a0be504c45ee5958e1a42c781870ae754648f5bb5ef4cd45c42d78ba189ca7 SHA512 7463ee6ed6735cf101502b6c0128c75960c55d6f9e42f37531e65afc02fb35b62d882a72f95c2fd76f3d0e253e9e70a9a2df2ddf782f53c4138135b370b69d0a +DIST github.com%2Frogpeppe%2Ffastuuid%2F@v%2Fv0.0.0-20150106093220-6724a57986af.mod 36 BLAKE2B 6faef3be0b5f137ecc89a7875bed1f576d144f11623905c04cc44f93812b80f3e5b56f05ddb3343848e7fde7fc439f49627f4fbd10730b1e9c2c9153a2d3067c SHA512 8cedf150caf05299c5b9f8b4fcaa17e4771c613fa06bac434586048ffee22ba9501e0fa540da90a3a24f3e4f662c9517571a23a0353fbb29c881d6d6c26d5f1d +DIST github.com%2Frogpeppe%2Ffastuuid%2F@v%2Fv1.2.0.mod 45 BLAKE2B 6fe371f17a31bcd132ac67cb50052f6f3874c9f62e2d67f48d52d241026fd21e58ca9abdc15fd53cb949f79e7d40dd0c289af3849da3d4d9ff75b491e8235c10 SHA512 ea2e9a81d7720b4e11129fbdd4772be224b6e1267157c29b9d33813b6f4ae905e43c3840cf1ade6ff5f73bd22c103430a0bc882355c16715e124b442652cd4da +DIST github.com%2Frogpeppe%2Fgo-internal%2F@v%2Fv1.3.0.mod 73 BLAKE2B 21e3545a4518c64daac1cf36e47a2c8e1fc8ab7402372f2e871052d0dd9d83fc2aa44babb2f8751180cb66dcd2af82ed202afbf5ad3a219c4562da23ae8ce185 SHA512 4fd07ae7c00bcc135cc10a0b34ab102a893ed8ea4708f9d38da52f98b09fb66144f970ffd8795476fd6625b25c9e48390a5b1c5c99bd0c8d536a94201dc96613 +DIST github.com%2Frussross%2Fblackfriday%2Fv2%2F@v%2Fv2.0.1.mod 42 BLAKE2B 23dbba19737db7327590adaf3988abb9b5548cb3f959a9746a3b745c51f3c1397f071f2573a413a088f58e32959a2210c2b5354c47c263e90ad2ff1506872a5d SHA512 ac376a387fa39fe35dc4d073d8becd74e79f52e9d36b0a6628740dfe0e7c1f4fb6533fc262212663b105afcaa104082e055fa87d20cb3068359faae6dcba7738 +DIST github.com%2Frussross%2Fblackfriday%2Fv2%2F@v%2Fv2.0.1.zip 110026 BLAKE2B 862c858d51e59569c38e1304de08c256752db260cde7f7f44fab41d22695999fe73483d3854166f4e8d3da9b4f8e41b7999d7e44510ab8c2ca6c0120173b77e3 SHA512 992df87104aa66dec048d39496c85819cab19bc890cb2c60326660d011642f49cd926b082d3eb4136b229a6e4893ed023a133e4bf83a4993c534b24e14d77b4d +DIST github.com%2Fryanuber%2Fcolumnize%2F@v%2Fv0.0.0-20160712163229-9b3edd62028f.mod 37 BLAKE2B 6f0d51a83cccf661003d3c9a10b10fca12a5933730c676a4279c47a0b8563ae5d897845ac84079070bf47b32ea1c2ec80879b85bf8ac72b91f1a63239292758f SHA512 0af9557d073093339188a1d8f226798eccb05d43e1394ac9d207118ada9449332077161e2d6ba2327d9b736aafae79d4a08abad233ae9aca9917c677809ce2c7 +DIST github.com%2Fsean-%2Fseed%2F@v%2Fv0.0.0-20170313163322-e2103e2c3529.mod 29 BLAKE2B 8f509981164937fb0aab63b0344ddbf25c183b926a6e87400e745f6aee9dcc478f0ed455c62a9753722954acb3506be5f7810915a15d03647668e7bb707c09c0 SHA512 c7dc34c7a73c5899ca207c0cac88dd38ddebaffa04b5dd511a86dd10160e60be2806dfc6e079a5871b0cb6142f53d7d7dc87ddbe3fb19240bf894430feac5875 +DIST github.com%2Fshurcoo!l%2Fsanitized_anchor_name%2F@v%2Fv1.0.0.mod 49 BLAKE2B 47bc5235e81d233e28b446ec2403accc442b4cc1ee956a0b7d47b5dac2a525f22bba87d05c3fe09179837860655f27191e073a3f6d7d0dad81c9a750752fe5f8 SHA512 6f6b924c2a3af28ef4342cdf8b83b726f2c409accf19c6ba0a4a47c6ae61857e4b69727fceb9e9e16fb8ce660a7181952714d49b6cafaacb282fa4e8af6e13b3 +DIST github.com%2Fshurcoo!l%2Fsanitized_anchor_name%2F@v%2Fv1.0.0.zip 3399 BLAKE2B 348c2171bf3404d8b69166fd412707d8a348e1d808618036de2ae01fce77e3880fc782ef301f9b4135a19d81ca9ded5cc0cc4fd73d36b66b121b7f0baa73df51 SHA512 d02d5e4b8a24b1709c053138c4128d4bd6347d4adef95d1e25141935cf560fdcfd5c2b7837d6e690f175f1cd5a21b0279ce97b8b3b66d5e0a5006e4103b25f46 +DIST github.com%2Fsirupsen%2Flogrus%2F@v%2Fv1.2.0.mod 393 BLAKE2B b9d712acd24d7a0605c74920733902a8eb1f9151fe0b0c575f01e2f821705ca7323f854c5b88d5bc534ccc9155571c083d4f53c6f6892879c829146bd95729f3 SHA512 c1621afd4618d1027b2d89a8e9653d18dabe098a7004b376ca2be63955ab783879540a890ab1324c2560dae9e6f3198dacc32d5fb0afd4b5a779d29a8c28f035 +DIST github.com%2Fsirupsen%2Flogrus%2F@v%2Fv1.4.2.mod 337 BLAKE2B 94ce7d2e23281061ee0ac0b1be2f8c3439c86e62c56ecf556a81123d57d819b1e0e95ec3b7c6425f13abaaa1683942b7a3d0bb8ad489577284b2a6063c777b37 SHA512 38a79599dbd09661614d54fc92149fe581575b7833e89dd73a3f754fafa4bc549c6c9078753ab8e2a85ce2be3ab81e528e29b6d19e7c329e0cb0f74896d2e418 +DIST github.com%2Fsirupsen%2Flogrus%2F@v%2Fv1.6.0.mod 301 BLAKE2B 5322be7914862368eba07f521c046dbd7580edafd47ac633116b8c9f4b61526d0d63df11ba6894223590a1ffcf4bf478c394a335c305010ca9fc18107d4e61b7 SHA512 8fe5a437a5f3f8c1ce0aff067ee261a946d946d7640aa5acf7c34b9c8c4ee65128a6421aa38bbb1feeba1339b356952ad58b4bad98f1c89ac455d94e86684a8c +DIST github.com%2Fsirupsen%2Flogrus%2F@v%2Fv1.7.0.mod 242 BLAKE2B 68986e3744d3ae593a16a24b6ce79876723d93cdf96c978c185b14e4fb8d73d379d4ba05e138b412973b465a76a98a458c6606137b0affdd085dbcf20851471e SHA512 ba06d3386a03812f2ce65f0597b932beb62b70b4da92974c5f5ed81c150fb71ce0285a2d9779ec8a40916870b0e4da5c2c8c5591c3687f3b8e829652a01ec1f6 +DIST github.com%2Fsirupsen%2Flogrus%2F@v%2Fv1.7.0.zip 66939 BLAKE2B 20b3a98bf2aa70e3e1e923d1dab88b543c0a14377518497f960b5f89812f982cb09fe24158d117938c8b8f1da47ad29a330e82f5f952461cf4180fdf267aedd6 SHA512 5f7f556c264900b79a512f17005c7d3d3b1e5d26485002cfc828411e5b183b62d88cc4e3a4c0a352751ef9a561997903ea2ff4cbab419592afe0abd69977dfee +DIST github.com%2Fsmartystreets%2Fassertions%2F@v%2Fv0.0.0-20180927180507-b2de0cb4f26d.mod 43 BLAKE2B ea265a40bcaaba6e4401504643cb9bc2f775a23792b1802d6c1b665121c49db7d4d850ba03c31087fbd6f344b08349ce00a106e430c8690b8016c95318cf3973 SHA512 222b0edcf745e14eb775eac28668dfa0c52051cbf302ec441b58d75846fc2570a0fc2e616cbec68f6312a1648fd7e6997b6597b160b1a7f84c1c500a42e93e6d +DIST github.com%2Fsmartystreets%2Fgoconvey%2F@v%2Fv1.6.4.mod 302 BLAKE2B 69fd290c3e72f4ee0597f480bae8647d80ab5c4acab21ac3ea19e847e3af4ac91a767876fac04c94c2db8bc782a24577d3478d3d0653f673609f2d57d6cc3427 SHA512 24806ff2cbf2719f50bb37cc5ffadeca1b64c7b089a1647695b45d647ddac16332504c7026813b4ab9316e53e755ad0ebbf6db9ca88179d0526ca2634e27e25f +DIST github.com%2Fsoheilhy%2Fcmux%2F@v%2Fv0.1.4.mod 32 BLAKE2B cf220acb07f93b3927afcfb4211e356e17f28dbef71cfdf777366d8cd09440282cd23e7800c7e86949615b90ec60ad4f2601ef21e58d4470349913c348758b0a SHA512 def5f190323350b58be18ef9f1b00e4810987a37e1fa9332be62a638a01df7f070788c75a19a0c11949890ccbc395419de45bf9c5f7fb38fdbef56118c681d32 +DIST github.com%2Fsoheilhy%2Fcmux%2F@v%2Fv0.1.5.mod 102 BLAKE2B 437487bf75334bee113c97152964774acc961e5046807a28eb13a45886d61579182ca22a8b4cb29aea27604dfbca6d2fd16ec561c7b2ba59cd108821289af699 SHA512 761412f1b7047c5a737b2e930431fad9daf21cbcf40aafaec5879173c08779699f0072fa40357b427f8274aa68d9f31c466ce63b91a9d11f0cd2c115f76b1a4b +DIST github.com%2Fsoheilhy%2Fcmux%2F@v%2Fv0.1.5.zip 23712 BLAKE2B 4726b92c206a75b20efe33ddbca7776b21c8d91c36f65e9ec7aec53a62b5831d8eccc5cb4cc2585ce24321034b652ae24c33e16b95729986f6907d0193586e53 SHA512 3587b3b4530120a27f3f8fbc0ced4625b523671995b1330b45066d3b74b5b24b715b9fabbd567341a8533e9c9a808f388c2581e72fa51f2087f9d20fc1ad57a4 +DIST github.com%2Fspaolacci%2Fmurmur3%2F@v%2Fv0.0.0-20180118202830-f09979ecbc72.mod 36 BLAKE2B 1ba81fe6a6b84ed40868e0fff431dc8485b912700c192d90181c22588345e7250af63160673c297129add94a41281d7f0ddca5733c2b32e20f65ca7c27046306 SHA512 d14779867dcbbe24d451e82ac72c823f80551cec89758ecd39c9e72fd75560694a0b8261726020b738ad4f447ce1093f910c12797c58b8dede38f6bc737b9a25 +DIST github.com%2Fspf13%2Fafero%2F@v%2Fv1.1.2.mod 30 BLAKE2B 9bf213acd16f9456f4a010a7c300a1fb7bf1ab248d1ac9eed7883deae7f9a6f6d0c761127b7b2c84e8dc46e7b0da2eecac9b334fd5a94d2995d56858d345edb9 SHA512 3166c898d741be502c0b733653cdca0e8ac4999fa6a5d67460b3962799287c9176b7f0243f0c0da394a4b7737ed1d1a6a2ee4f84a8917cf7076c774ba9a2a648 +DIST github.com%2Fspf13%2Fcast%2F@v%2Fv1.3.0.mod 175 BLAKE2B 9077c3a2c65f4025500a3215c440b1b3856e09f1543cad7ca6a37fe5b42d51af01c2032b905c72cce445807bb311ed461c4a5fd4fe680a81ac7a1c0d94759c67 SHA512 7a0a21f6a7564b3261bccc8b1e1cd39d5d1a95bd0dd3debea914b1d37b687fbacdaee5f1dd5f1f74e4da11664c12f7ee63b484d690cd79389423cb79ff38dee9 +DIST github.com%2Fspf13%2Fcobra%2F@v%2Fv1.1.3.mod 265 BLAKE2B 22909466af108048bc272b0e67db40f6fcac375de02b29aaee7bc31153d73b2c1130faab8e27a82dba9b5930c789de1840468fe9eafaa8881cbee126b0c9df1d SHA512 17049e0eb9bab7ebe298bcc1fd3ffe0eebd40a7642c48f4e5c2447dc37a3099359d04dd929643497f25ed55a71d7ab6ad6bf0e75553afd4fc98616295745a25b +DIST github.com%2Fspf13%2Fcobra%2F@v%2Fv1.1.3.zip 190543 BLAKE2B 692f5c496466f8d914c1172446f3cb79b1ff9c9e08d7afe44d8af3fe1248b6c1b31fecca3fdd8343afc2b014535dc8e1d3f49a3c71f360d46933ee28002c4c40 SHA512 12bf06f87e15ee039ca148873a13f5944ac6aa6800999ccd5df5175a79fca03edf4672236e2c25ebfe1a28a0aca24d0f6965c8b040c09fb648650976baf8c305 +DIST github.com%2Fspf13%2Fjwalterweatherman%2F@v%2Fv1.0.0.mod 42 BLAKE2B 1f0af0f4518708edd09c0f02aec6103960b023a6bc178181276c54cd86b653e8bd1ddd60c5d49fa75a85f1fa0d18f670a9c2ead381da7c4f2d5e611b24f51ca9 SHA512 748b5648bf8bec4d1efe13f4dc37608e7378acc2a7d954e9d3b649a4b170a1e2d1c61338f6bee8d9007ad75a5bde87487612b47a692d6f966bca56490dcb834d +DIST github.com%2Fspf13%2Fpflag%2F@v%2Fv1.0.3.mod 30 BLAKE2B 18c9fb79a291aaf800991a296c8d7b1933cf45bf56082301a64ce17ea64dd15fd304094fd4b0561bd99c48ada545dfe7fa8cf47a15593cd3166eb66657a5e114 SHA512 d08b4540b799cee9c5f088c4e1fe002c9fda86f1634380409eec1404598b84376d3ca26b4c1cbcf58bc19234ab56531ab11db8a00c6dd2e15a53f3b4ae757efc +DIST github.com%2Fspf13%2Fpflag%2F@v%2Fv1.0.5.mod 39 BLAKE2B c9d700f96874e0a3977c2ffc7fd321acfffd8081aaa70ca50421ca55253fbe0636d48eca8f7093df202861f0a5f908fa00303533232c83c78bdba84e2973bba7 SHA512 8071c316d33aff1d8ffcabaeb42e8f9320465d83600cb57ac5ef071569f948d5cfd69e1bd2e92855c061395c1b814e84d1705f42e37f00d5bc713b6e724f29f5 +DIST github.com%2Fspf13%2Fpflag%2F@v%2Fv1.0.5.zip 88931 BLAKE2B 7adcdaa60d4a3fd99b0f3e7e6888178b0a8d141ebcc0166b12df4bd4566500929bc792c391d33201b1ce215b6ca8ebb578cfcabb027ba453a54986270f5e37a1 SHA512 9a81f0635ca8ac059c48a15cbf625a7c91513f95a9b402ba166d48ab72d5d38cbd941d5309446f5637bd7c23eef35b60fef2f06e8b557f415dd8409a6ddf43e9 +DIST github.com%2Fspf13%2Fviper%2F@v%2Fv1.7.0.mod 1694 BLAKE2B 195244bf4042b519551efc149dfbd9fe10ff87e5b2ffe6f9a2d3777516315db8b43968533ff089b257c10f94f99babd076ff0a7203a434a79ea5aa7e39eb9818 SHA512 9f614a57ccae909af00a67e464b04eb91a92eebf1c28de3809351363b441d22a4a6628a1902fde8b67956d0bdedd91423d20158eaa6b9cd994fb7e284a35e061 +DIST github.com%2Fstretchr%2Fobjx%2F@v%2Fv0.1.0.mod 32 BLAKE2B d698910da1ef00a70a1673b8c74105de195020ccd95d1e70c5dd1e1615210886ff9acbc9cfd03f46e99f5223b60b04695b8d362b9e0edd4e485480f802bd229a SHA512 4e366e5a60559a8863cb2a50280deb307d8bf885ca5440cce1b49a084b4cc4583b3481240125f35f161226592a43f2c0a426152f117d79b68c92c72a93f751d5 +DIST github.com%2Fstretchr%2Fobjx%2F@v%2Fv0.1.1.mod 32 BLAKE2B d698910da1ef00a70a1673b8c74105de195020ccd95d1e70c5dd1e1615210886ff9acbc9cfd03f46e99f5223b60b04695b8d362b9e0edd4e485480f802bd229a SHA512 4e366e5a60559a8863cb2a50280deb307d8bf885ca5440cce1b49a084b4cc4583b3481240125f35f161226592a43f2c0a426152f117d79b68c92c72a93f751d5 +DIST github.com%2Fstretchr%2Ftestify%2F@v%2Fv1.2.2.mod 35 BLAKE2B 0357260904c9ba41892132c7e07d2add9b10ce4a09e8db4966219d1f515f917581e2afa0987094c90759634bc2aeb66e758074e023ff331a8337f5090c0102f6 SHA512 5b7ce867497852e4918b8cde5f75ecf2f24b9c95ad112478ac132322e904243f1cea3d16f5731646efb669256dbefc129ac70a499c8b1d25403a14c7e4fad10b +DIST github.com%2Fstretchr%2Ftestify%2F@v%2Fv1.3.0.mod 154 BLAKE2B 60cd7801e7cd33746305cd636b048b25a86270ec3b29a21c3c078c7e95b769bce7e80c2c7c5474113786bd788c7f88f3719e34f02141038e0d161b36e32f39b9 SHA512 bb808fad059f5abd0171e4bdc724411eff2c7e8d303a4ffb3608a00e21bb3cfafe9e83b4b4e9bccd42c9a4331f67ddc6043e3dd5eaa9a122c86626eed43a8383 +DIST github.com%2Fstretchr%2Ftestify%2F@v%2Fv1.4.0.mod 179 BLAKE2B 3bb7cee3118f0d335ade107dfefc3a594dc3883564fe4c9e96d615e179d394a49a3d6cd6584ba9c684772bc3dc6479af6a168dd3841c03957252667384f6ba11 SHA512 243bf1f69c146252164ad72f853773dcc77f15d7c9e9b731bee26a95e7c8f4ce9ed9738db601b01edb82f4b3808873e1f153a6d4a0c97be0babbe65abc0f8d52 +DIST github.com%2Fstretchr%2Ftestify%2F@v%2Fv1.5.1.mod 188 BLAKE2B e47d78f037db3684a329905985b02b7ddf0a609ab4c69dd4346202ed0981712d54d0fa1b9c230b50d1857854edbbf77ee144d54b12c7c46833e6542d6034171e SHA512 70adf6a86dc6f934ee611f6aefa459f1287b7294297eb9221a747427d031b10c3e606696a656be4c2746a25480c322106099ea2bb360cbe782f4d03c85cd9fcb +DIST github.com%2Fstretchr%2Ftestify%2F@v%2Fv1.7.0.mod 216 BLAKE2B c597010cf6690e73cd265e800f0f0bbea331fb76217457b6326f5a19481eca044aa5426fa32519870b2f0f4b3bed95768a23d3138dbcc9739b7cf7e044f50668 SHA512 197e6ef15edb27ded67ccfb636c252fe522f0930ff012341a4b593f25b5dd8282e4f658970931cfdeb8f2c5ee0b4ebac6738fe7634bf00896d12270fcbf4b31b +DIST github.com%2Fstretchr%2Ftestify%2F@v%2Fv1.7.0.zip 105564 BLAKE2B 7b082ff11190ff27ce4a3de68896fffbbbf80ebdead7612aa3b06981171974ad2935bee7d5d71cb9ea29b110a82b3e04447248e7b9376e84c8f3f53d5001ae4b SHA512 be80972112f0a3907bde960637cb2c08d6ba4256ca27cfa07de5a0a8e523d0dfbd8e90ae593e5302d7351b7dbddecf69dc3985a9d19b96087732dd886eff371f +DIST github.com%2Fsubosito%2Fgotenv%2F@v%2Fv1.2.0.mod 34 BLAKE2B 85a4e50642e7088ee26b82c69c65e1bb0396d4e8819088fbdf1d93a8348d7aab950630e3bba1747517d01e0cfb9a9dd1b95341df0722480bbecf18399ba84674 SHA512 50b858817db72f0615a74431c9966f969d12a85fccc3f0dde25a72fbda32f77f3ac76cba50b12fdfd87ed7a7b3a337a291b1f9c86e1fbde81d2d0c2890c1c21d +DIST github.com%2Ftmc%2Fgrpc-websocket-proxy%2F@v%2Fv0.0.0-20190109142713-0ad062ec5ee5.mod 43 BLAKE2B a0f8fc8639040a1b7194a35a4020cff543111ee47a3b013163e93d14d42325146b1f6c2acfd595438721c4f6e80f9e5871811c058accbf06c6500bdfd9524004 SHA512 b3b02f5e9f8b68a93f531ce9bece44fbaa691f1527528555327c15b574ecee209ba7f6b713d8ae1f6b58b1416a9eb39546be646ef73b4328e79d8bdf605dcf9b +DIST github.com%2Ftmc%2Fgrpc-websocket-proxy%2F@v%2Fv0.0.0-20201229170055-e5319fda7802.mod 43 BLAKE2B a0f8fc8639040a1b7194a35a4020cff543111ee47a3b013163e93d14d42325146b1f6c2acfd595438721c4f6e80f9e5871811c058accbf06c6500bdfd9524004 SHA512 b3b02f5e9f8b68a93f531ce9bece44fbaa691f1527528555327c15b574ecee209ba7f6b713d8ae1f6b58b1416a9eb39546be646ef73b4328e79d8bdf605dcf9b +DIST github.com%2Ftmc%2Fgrpc-websocket-proxy%2F@v%2Fv0.0.0-20201229170055-e5319fda7802.zip 14190 BLAKE2B 977064b97a044fcfe3086306dcab8f6eac6e8d7458f5ae0cd6db9469e70be478c2207cef3e703d5bf3604c1e722f5e5f327323896b1a32f44a43b9bd9bc06749 SHA512 1950754e1fc01ec7f540f807ace45a022177e6170a41ff104d64d578cebe5da90af46bedd9a339eb7411def462e304161ce47ce060e803240b1cec3db89299dd +DIST github.com%2Furfave%2Fcli%2F@v%2Fv1.22.4.mod 180 BLAKE2B 5d858ca40ba2af791726707bdab12d76aebc9f9c9ea79e49a6125308b079cb945d6ed06ca2425116f19604651eb56f29b3ec8d79fd9f38ed044e745c9b73ddb6 SHA512 b5431ec3fbdaf9efda016ea275ff597106916f5d5781b2ca82e075e42da98f6c5d34a00410fe65ac3a3e64b3ac0e1ab02e68579effc426ccc5ee19a583c44d2c +DIST github.com%2Furfave%2Fcli%2F@v%2Fv1.22.4.zip 109532 BLAKE2B ff6116d5112581b9836cb8e441ca181192f397d29b465522694d14c262c204a021212f35b619cac9e7259570a31a7d3907f9e68b707683a388054d8ac6c4e6c1 SHA512 fa67796ec04ffbfce4a84d55de6ebec571240d2c7a0642b4d2d403545d8a5ae36b4426f14d3fdfc679ed770b3a2e70643392c3317bd40d2a47cee27da3ac33bb +DIST github.com%2Fxiang90%2Fprobing%2F@v%2Fv0.0.0-20190116061207-43a291ad63a2.mod 34 BLAKE2B da6bd307f61b08eb749a0b2d9a9f445dfc057c8cafaa13f4a7c6d2d2324f7812c9c8269d9747cc21db9c3478f73558da05035b3f1ce9940f5c5befb16dcdd159 SHA512 b9773f617e5b48c6767051fc7dd2faa63a8a9d537ee42fb51efe6db5b3d24060dea0a264568bb5324915de8917a334f3563dc49d35651a4ee7c15042faad2964 +DIST github.com%2Fxiang90%2Fprobing%2F@v%2Fv0.0.0-20190116061207-43a291ad63a2.zip 5264 BLAKE2B f6d986c7f5fbb1960fa1b62a5722d426c3ab79d865cb179bb9bca5a213bb2008a3cf4edb59dba1a336928cb0bd05d31f7083f394cec09270e66b55cd4a045b37 SHA512 2a8e1f10d10e4479568374b9e51b1b8dbbf1077d8af413d7dcd254ba1dc1cd38ee19e75a4661a4e237d3662e51cbcf96a08bc69a2e5beaf34a2559fcfb9d653c +DIST github.com%2Fyuin%2Fgoldmark%2F@v%2Fv1.1.27.mod 41 BLAKE2B 44917ea3a6fc533933ccd76d1594e19246c682d96311e030eeeeaeac3c126f6cd2c2de67ca410c89738918c5ab0594f1e9b2c2202c48f462c368ad31fb5feff6 SHA512 b7d81f5cbf1b55ebebcbb86ae89899ffec6fcd730144f1719947a76080f587d298d0e37a073a8768d7768ef64fc47b1673104335203a32a557f31e42a4e5a950 +DIST github.com%2Fyuin%2Fgoldmark%2F@v%2Fv1.2.1.mod 41 BLAKE2B 44917ea3a6fc533933ccd76d1594e19246c682d96311e030eeeeaeac3c126f6cd2c2de67ca410c89738918c5ab0594f1e9b2c2202c48f462c368ad31fb5feff6 SHA512 b7d81f5cbf1b55ebebcbb86ae89899ffec6fcd730144f1719947a76080f587d298d0e37a073a8768d7768ef64fc47b1673104335203a32a557f31e42a4e5a950 +DIST github.com%2Fyuin%2Fgoldmark%2F@v%2Fv1.3.5.mod 41 BLAKE2B d7c63b68781b147d3baf10d81bce0539aaf0a046a70cd91958b59541dfb35107e01a73937b19de74504f42fe49983b46985a9635c45239e4d7a3e2cca2b85f72 SHA512 a6233a0864081261d4b9cda2d73cf37b236acada8f5fbc85b7b7978ccfbc3bd2949632f2fb67a7ba9db6eb43b41796df54460728379e0172082922820d6143a7 +DIST go.etcd.io%2Fbbolt%2F@v%2Fv1.3.2.mod 24 BLAKE2B f23f0532ce6fece605e76cd16e5f9a1fbf40657f26b2aa6a135bf300a232ffe8eaa9161f93d2845312b10ccb6dd5c4cfea40a2256b6481787ce9ddca7555b0fc SHA512 8988baa04517a19f905b323768f98690b19ce302d54da4648bf72baa2766c8ea8362efaf1c8dd2f02a82fb9c76e72f32373fd04cf48ff133804b6b251bd48529 +DIST go.etcd.io%2Fbbolt%2F@v%2Fv1.3.6.mod 94 BLAKE2B 097619943e3530007d2f8f9798cdbac483ba077b239096303e4ff7637459e7cb6d28c7a98d893d52e6686ecbcf3fa8900fe8ce46fc16b9061c1f4b0011ede3ea SHA512 d8a4fceaca0875493f0788147e464f36a1a1b9806376318fe88f8b0091ea3ae4bd5ec141ccc7c8bb86d88f34f25a36d2061dbc24d0346a9d68c1fbe45173fdde +DIST go.etcd.io%2Fbbolt%2F@v%2Fv1.3.6.zip 118439 BLAKE2B 8cabb2171e4dc3f7587d6c2d7d56390dcc6ae14cd5cdc84b9b59afa8deabdff025c03090a8b86f3a45287b9e8eb51855076d7fe1fa6eaacbd434282aef81627a SHA512 2e71f7b8606ae949fb9f3287b76dcbc02c5273a44568bdb9b750c381dc1284ed9c4887fdcec652f572eb0e7066e4592a3bb9aa17117b039dfb65355033a0d54e +DIST go.opencensus.io%2F@v%2Fv0.21.0.mod 305 BLAKE2B 73735106ac582b2e9d5f0d739412c3396e0df8627a6adbe810ac560998e4cf2eda12e449b6e336dd6b433eaf57c885b4a927359d0bc1bd6eba9432bb0793c35d SHA512 448e90223b8d67e4d5e4b150055ac83eacf9ef48aa34036c2e59559f21443f796e721df3c0395a829bf5d10d229cdc7beb956c8f90273e50f0989e45a82aace8 +DIST go.opencensus.io%2F@v%2Fv0.22.0.mod 408 BLAKE2B c96dc637d392594cdf710b9542b90504fb090392662ab45208d45abe2cbaac5b64e55f2f62d1afe5542d2747abef1eedfcff97cfc48d6e0649c23b9b8293f7e5 SHA512 823e1ca3a9adedb1a98f5ac900e190bd51480686872bd901cc20a394cf03be6c8fd69cfe7343e42cb6f9d3500282a8097b6c32376aeb3e92bf0b1ce3e75872d1 +DIST go.opentelemetry.io%2Fcontrib%2F@v%2Fv0.20.0.mod 44 BLAKE2B a52ef031b2b9283ad316c95ccaf3958a369fe3d07c90cc54e28718f824fb0df687588be003bbc03149ac9ae4dcbd931be08f1e49d7504a10cc3b04be9473e3fd SHA512 2aeb2810ba46082ee859e3928d6117196accf750332c2b2e5f9e572e44845221e90b714f270786a46e8e34a1b4f6fbe053b63c21a9996b6dc5680669cc68a99f +DIST go.opentelemetry.io%2Fcontrib%2F@v%2Fv0.20.0.zip 31129 BLAKE2B b2fa4255f50670c47c49644aae18488724ec855937dc13770dc69602164d5d907c0cb36f617965fc8ea864788f07c3cd76ceb2d155eeeaf6b5fa49b0e7ace8ec SHA512 b6b38dcefbf9b47d5a37540dc106969f4dea913a258a2d015cd1c7bc43b1f7289ad1f8512148a34837e9539739efe57a9cfeb723ed3ab0fba7b8afb6b6ebb2ff +DIST go.opentelemetry.io%2Fcontrib%2Finstrumentation%2Fgoogle.golang.org%2Fgrpc%2Fotelgrpc%2F@v%2Fv0.20.0.mod 443 BLAKE2B dd18627161ac6a1840d7264f79ed7bd42d8cd28c9761839032ce2e1f72ae3381acab73da7a3063f9c8a6e2da13cda99ba1d8d06e312cee2d7a3a9c72be358674 SHA512 c375129bd65f22e9f24e52be6cafcaec52319a6d0811a9af7452a3d1ea143f351db541afca8026171d01c595b46eb37efc09e3423e7ccf43de3e9c1ff32c1117 +DIST go.opentelemetry.io%2Fcontrib%2Finstrumentation%2Fgoogle.golang.org%2Fgrpc%2Fotelgrpc%2F@v%2Fv0.20.0.zip 24107 BLAKE2B 07b25cbdb1c9680b37197037c1024aef34a99ce8b63078c965f8160deae5d1bddc89c519826b1875fcc85ce13b8c4373d31bed3a3595aa61de1e6726f14fb8ec SHA512 bc359a39ce84edc3ceb7b743c5a49890374d24f1955a979578fc7ffc1b6572e5b3d57626d9c33f996fd7bd3bdc88cd550270caa1e41ce4e6874b9f697b6fc348 +DIST go.opentelemetry.io%2Fotel%2F@v%2Fv0.20.0.mod 1800 BLAKE2B e2005eaddd67d04b79f8295f1bf4d0018106f36cfe8a697a23ee1ac6767faad43b48a87b8fd0412c813139977f7188db008bd0c278fcfc0aa1000d5260487ae0 SHA512 0c44b58671f37f097def825346d69f0f0288e81926075b4fdb970e74757e333d22a8f552657ecbb152145e27277aeeaeeb2d09122de5fb1d1e284b1e93e68bed +DIST go.opentelemetry.io%2Fotel%2F@v%2Fv0.20.0.zip 171776 BLAKE2B b1540b229942993a2d5848fc72023c3b6ca7be44258674d82ea427dfe40b9495afddfc70e4c3a2d062565d921a086438aedc35c42bec9185f29680e5cd355155 SHA512 95680313994d81ea8d92fb6e5b087aa136234fe2fa9c483ff9f382a34eb94498c5092fc49661e7212be7339d077ea9753f07c5e6cffca0c7a9f3b65516372de4 +DIST go.opentelemetry.io%2Fotel%2Fexporters%2Fotlp%2F@v%2Fv0.20.0.mod 2062 BLAKE2B 446cef219447a1bf7da98f287595f5c1896ace21bcf84df7cea23519e4e04a47b61803278955b5a27ee4800ac73cae159078e84df909b7cffc04c99153542cd8 SHA512 a70147113108c327fc4fd41f64639aa6071c399d0e2690e74c369537add86dc3e6fce69c6add549b9fba88fd05d14bd47738bfe3f29d9780b3b4b7bb68ce2812 +DIST go.opentelemetry.io%2Fotel%2Fexporters%2Fotlp%2F@v%2Fv0.20.0.zip 93655 BLAKE2B 8b76d9250c68acee2e5ee26a11bc3ce99da06289a6706d38c98407bcff0b042d77d3b605c80e346def2d4f3d9486a824413c640ea7e610da91f952f051243cda SHA512 8782c496c66ce9efe398924875fe918c6a1868539e7dc8aadca1cd20b62b90f9aee08ca80162c2044ec8bbd3eaa3b0a0e302ac17861393b40024a34baf1bbea4 +DIST go.opentelemetry.io%2Fotel%2Fmetric%2F@v%2Fv0.20.0.mod 1775 BLAKE2B 1d218c7e1adf5e04b19fe3447d1dd7da1da15cc71b3e9294d7a51e0397265b64857ca8d32c6ebc3b61d82a0614ad371bd46d812569dd378508b9a1a61363981f SHA512 34f8d2fc9d8032e6548ca24f7680e8dcb0d528ee183cce383cfc23d4f1b643f52ca4ef624e34dd04cfd37cc9d7fb784a36e09bcc171cdfdc13aa5208951a9350 +DIST go.opentelemetry.io%2Fotel%2Fmetric%2F@v%2Fv0.20.0.zip 35718 BLAKE2B 351b3220ee70c388e75cc861141d0241c6f62820c922d4804d35d251319750b82681c021963b5da54198c4400fdc61514f1b30c4c08f3cfa7b3b11f99246a824 SHA512 d6ea1e3ac0fbbce6dca5ef7f4347d4e425cc8697ca280811004b80b933b124d11f32a754ea1539bae36b04e3ac206b263ed5a0fa9df04ea7cbda6d7625875049 +DIST go.opentelemetry.io%2Fotel%2Foteltest%2F@v%2Fv0.20.0.mod 1744 BLAKE2B f053ca414f157096060ae3a07ac0d7f4723b716db892692152036f397d113dff46d43ca2b39679337bb47d48ffcfd6fbe3a49a8c63774383ce3518cba5854057 SHA512 cd84eadbecf933ea3f0785d4a604e5724d95deff0a152fb66a48ec38203f640da45780fdc86cb61d2cb8b996c9596e20fab92d6f54acb4f7fd22bad2354b0c41 +DIST go.opentelemetry.io%2Fotel%2Foteltest%2F@v%2Fv0.20.0.zip 27684 BLAKE2B 6c08e07d96e8d817eabc719c26b3d610a653284f5d8919ea81f73121fdd5eccdfaae5d5736a5e266e16297b5731b6c05c89fa970ec9bb9dcde89e5930bc92898 SHA512 0213e9fd8f5141e3a2d0d8dd58e299050724bc1ef7623d62e7a92f2ada2d34738c8169289ecd03351f743d3de7aaba7ad1280a2d9d12e2f4fb952319d2857357 +DIST go.opentelemetry.io%2Fotel%2Fsdk%2F@v%2Fv0.20.0.mod 1805 BLAKE2B ea3d75f8a92ae83eb39ed4230255d84c1897ba1c4658cbd603886aa9ff817279f6f79b336de3ab0dc4901add3bc256dc477d3c11a323e27c36e7e11aa7522dc5 SHA512 33568d8d5f47cb528f78f141f4f4970a3099ee9a1a651c1172c117a67dda0977372b9b052bc7ed258677ce7aeab7d22e33b0ce4a54deecbe50f2a744bed4f199 +DIST go.opentelemetry.io%2Fotel%2Fsdk%2F@v%2Fv0.20.0.zip 85289 BLAKE2B 7bf28721a0f3640fab40f7edb59e73f072c1a2bbf03182a6c437bad90c74192edd1080ed39238fa58d780c6f890b1e53625c32126c38c0c972b5b8ce002ab1c4 SHA512 7b3afba37331efd61fa640c5287e864df3a868bff6cb2862d7ce1933c1228374c25bfa301fafe8fe4c9a2778aa1f8df5341a42a600a1b71e4590f30e03b17ef8 +DIST go.opentelemetry.io%2Fotel%2Fsdk%2Fexport%2Fmetric%2F@v%2Fv0.20.0.mod 1889 BLAKE2B 60980f58ebb7d0599609030f781ddb70f4d46240813658c51ea200cc061ad7444705f26250e3c0083814939c4b89dbce571b012035325ff85f038e361de16833 SHA512 2088e8a3e6c25b15511ba67618c9a68037aba4a6f63642cb3f772c14783daa2fba808db696d335dab13ab8dcd18ec014d56c5dc4d89274c726049c60337b9903 +DIST go.opentelemetry.io%2Fotel%2Fsdk%2Fexport%2Fmetric%2F@v%2Fv0.20.0.zip 18321 BLAKE2B 2995bc13a6241ed5b6eb83fc3bac76b43fec49b0d0d8e410029b4e696e48c7611dd7913910f5eb326d96180fbfd6b8cb6e3dc1010a364bbb903cc91163d2028c SHA512 f86727e05b024343b53b453c261bec4c36a58ba42f44588305828333ccc396aec1648a02055454ed10cec439a019ef480a6d43679a032901fe9f3c0f1188cae8 +DIST go.opentelemetry.io%2Fotel%2Fsdk%2Fmetric%2F@v%2Fv0.20.0.mod 1980 BLAKE2B d77532489fd26a0b67b6e29c01f258c932b3a25521cab45b5dfe94ba3915f691e8a99aecd41f1bc3cc4987f7197eeb412d05dcea7222fc5d03a417fbb30da031 SHA512 80f4e868f589281a2b083aa5f7a2e352262d95a49ccdf7c71afc4c0c6c0947de7107b00b6b890e1f17401a18d3e0905af6ffc49f2210e0585dfe28f6f325a68b +DIST go.opentelemetry.io%2Fotel%2Fsdk%2Fmetric%2F@v%2Fv0.20.0.zip 91170 BLAKE2B 4a427a12e932d6767a6195ca843d60402a59cc7be10b6d49b20ccb2db49b634e7504cb4450e56af4d886437cc00fc2cc12abf623589703880575dd8716936ac4 SHA512 0f56b5e46bcf7fbe0c5466c1bf2c011db3e324e81964c25e4687eafe5fc6ecce2914fbf4a7427cefe0b7530acd669b77b4fc3c7dade148f73dc12de8bf5898bf +DIST go.opentelemetry.io%2Fotel%2Ftrace%2F@v%2Fv0.20.0.mod 1732 BLAKE2B 63cbf98b7152adbb31a47908f91f994355df404ae5010388ac4a99ec19594ced0ab7947f11edca423e7539c0796df908876f6c4370dc6e0fb4316b07d50e125d SHA512 262d653a0e1d1ec20d5dc2fbb3df55f84100bfa803184ddb1bcaf86eeb055d927cf090f5909795558698ff0104703cda2b1826bef34660fda3b2154667461f1f +DIST go.opentelemetry.io%2Fotel%2Ftrace%2F@v%2Fv0.20.0.zip 26199 BLAKE2B abbec25b57ce85d471f9298a26bc3c1cd0227bc79be1643f1b323e4d469449a333ab7337990312a2b1384055e143e2be00bea9e28d67f2911ab7af4d51c59ded SHA512 789659153f297a0dd12cf7c4cec8ddcd4dd114a262fe288c802c1183feebc52805a1fe55733f622913e8f33974de1f898ed866d6b934f8a75fa0fc7bb7847da9 +DIST go.opentelemetry.io%2Fproto%2Fotlp%2F@v%2Fv0.7.0.mod 211 BLAKE2B 108e3a16472a1401b8ec1b18180c109e034394988b06050b6dd7e918d578917d1b6d139296b39046e09a9f6e251ea665a2cabb749b4b342cb301e6caa2cf0498 SHA512 4348e909c754b1ca8cabbafa293377cbb8f2b4f4d67ec412f6bcae4171d7d0212851d90631c1354e8b04b7955eb0a8077e5a86fbf8ed38d179e9ffb2e1ef16ae +DIST go.opentelemetry.io%2Fproto%2Fotlp%2F@v%2Fv0.7.0.zip 70804 BLAKE2B 5f2abff8a7130e5612dbde3b199e49d9fd496acac585c24df348477d096179caaba38ba1ff870b8a0d7718e9efc0d1faeea27f9e5b0c910a910465807def174f SHA512 4ed01d37056b955c8ba2a3ba43eb5ab32359885913557b077e29f46f11d56b2f93788cd03df805b93aed00c53687143ad72e47bb3c5322d713e203ae3148e23e +DIST go.uber.org%2Fatomic%2F@v%2Fv1.4.0.mod 26 BLAKE2B 00521092f85fc8940d69a5885423e84d8e6987a29749d886be3f40c230e563b55d96779ccd2efb99e939167c93067e8d37117750cf2567fc49e70bce9e847d07 SHA512 4c66fd56c35d6d25a3091f83a2d3872ba395092c10519e052aaccf3edca281fb874a46e86e7a7294b4f42a5d5a51d3cc0f066081e5ab945288a48ac223bc19e6 +DIST go.uber.org%2Fatomic%2F@v%2Fv1.7.0.mod 131 BLAKE2B 0abc8845d865fa3a1e96e938a9df81733f6d658b39592df46f26eb3292431b0db554eb5db00671f12471cc3c0e454bdf227215c0f9adb182493b5c146a12e3ee SHA512 ac727a2635d02ba4d12c9af7a9ca2d27c0f1bbdb2f2ef797a2852cf569d33cced35be8ce3e95e2ff3b13a0085b723622656ddb8731c055719fbf62cf10caa4df +DIST go.uber.org%2Fatomic%2F@v%2Fv1.7.0.zip 53254 BLAKE2B 55083a93da944305baacb592cc1145f191412b4fa0a98ff3f4180484d7a3bf4dc65561d71670b8a462126f10ea82a3ca2846f73bacde8c9d8c485e895b329598 SHA512 127df97ad28854e4db92b6ef8f147c50eecf49e6a3f70dd0524325f24aa6bfe977127513443cd8926589587654212acfa4cb8f153e2290b8b27aaa09dd846368 +DIST go.uber.org%2Fgoleak%2F@v%2Fv1.1.10.mod 312 BLAKE2B 16bf4900b2afadc331814e16a34fa8cae0cfdc78c7ea9704312f121e166c93b7811db3604f6c167fc526faefdd1eb0ffca1dd09581094bfea4847fe0f62ecd91 SHA512 8814a6b8138027c366f3ebeea9033a71019990faf1cb613d75a25498a3a74d61fa2ba662302254150370a49a2a6f56da5c54889d4465117cf8afed4ec6cd9f63 +DIST go.uber.org%2Fgoleak%2F@v%2Fv1.1.10.zip 24823 BLAKE2B 25394ce97a80093bcc7113c651d95fc383863a5efbb47825d053890ee2946f04ba4b9c4bb708458183b91f195133d22fb4bde840a25b6150c1c6a756ef417fd5 SHA512 cad58d0a0f37a7ba9ce7fc5d4598d511eda4bc675689f968b1d02c4b2e95d15976b6aae9d4b8655d2aa85e255308414e474fa6d42e4f49b31092e2b943648b36 +DIST go.uber.org%2Fmultierr%2F@v%2Fv1.1.0.mod 28 BLAKE2B 4f0c4b42b00093024ef494b1b0a07896ec41eb140fb953affc085921181eab44bab0baa38ab559b9e36e022acf5cb9ebad5ddcc7303f33982d9012e9e150cb03 SHA512 7939dfe977dd42ac3ca8b91824a73046222ac9bed4f9cbcf0f2d332727b92a094540a56dfb19d095df6d5917b30cec86a6e9e1b082581049fb05bb7bb10106a4 +DIST go.uber.org%2Fmultierr%2F@v%2Fv1.6.0.mod 113 BLAKE2B 9c82de4ac4a30a4f5ef4881d70b75dc7433664ee90632c6d4dcd1594f3c08082aada1cea4740d38b79ea7753abe47cbba9a173051577c2be869a45ac1e90902a SHA512 850531fa2e156bb78b5a66f4afe89148f048e90ad6753308f4d36aa886f5bd179d2dd5ca67c99cb98976ced5aa6b14e4e463bb27f0d002b8a0e1814fc5316873 +DIST go.uber.org%2Fmultierr%2F@v%2Fv1.6.0.zip 17500 BLAKE2B 5d8607a8fde2c57caeb30459232e9d33bcb9c8cb3d1f046f5714510467ddecb6f82180959ec7d28c15053615390ea2ab114ee472988b6ccfc80de7247e74b0c9 SHA512 ab8d76e47875c4435d00d346ab4f9a04f570711f9e03d7eec23abe6a8d29dc49c4538150397da95e89276dc9ae617b8ce90b90422694b38d03b7773127bfd8e5 +DIST go.uber.org%2Fzap%2F@v%2Fv1.10.0.mod 23 BLAKE2B c60cbd3c1e15e71a99909c113b100de3909740d9e0f939da800209ed1ccde49f77be7a8c22e045b9edc663859995859bc7ccd60bb6953846829ca3164115f3fa SHA512 263e322e5615c91e810fb9ba30a601508e1e3e418f87c7c74de962c341f207e703930f2ad41ae1bf7b2ad106831dc37b0b96637b816d130bddc7225d41911946 +DIST go.uber.org%2Fzap%2F@v%2Fv1.17.0.mod 257 BLAKE2B b03dc3f61ab15720e3e89d8725be6a3a500f9aeba17419403df4bff7ae52b60abafb43af2ef785479017f625c6a3170913ca975fac64c36c65c0476b519540b5 SHA512 9677119c715a41ff061ea5caef85c35b23f79648aa09015e7427ded423c7ed73c0ba7da24d8fb586ea038499bf42ff211e5a328102573b67122ab3a74bfd9ebe +DIST go.uber.org%2Fzap%2F@v%2Fv1.17.0.zip 232744 BLAKE2B 1d18d6beb771fa235ee9b999c4315817e068d0f4feda90ac270b90e81b67ced86e1622e30777871def262923a71950e81661d08d53ffb64398078e367cf9609b SHA512 4e5aaf0142e579b5b5231adab8b5c9e0a05aa5cd535ab16d04814ba39ff6aa4caa938d8af7de00dc1cd3834328dd2bc424a522261a971590e87a0dda4fb41520 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20180904163835-0709b304e793.mod 27 BLAKE2B f91145aab2cee00c3567772e97f6162b9681d6cbcbe67a1b5b2f59b8f912572f705a0d1280fdced086d92efd10c50ecede26d1cfa3d5419217e5eef95097b4b1 SHA512 a88da5b983ff482a4e8b512761eeee466a8b0664b42da54ec9772c2eb3cb1bc5b7545045e283bac82552336802d8bc8efe137ba16f3530228b529366744a33e6 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20181029021203-45a5f77698d3.mod 27 BLAKE2B f91145aab2cee00c3567772e97f6162b9681d6cbcbe67a1b5b2f59b8f912572f705a0d1280fdced086d92efd10c50ecede26d1cfa3d5419217e5eef95097b4b1 SHA512 a88da5b983ff482a4e8b512761eeee466a8b0664b42da54ec9772c2eb3cb1bc5b7545045e283bac82552336802d8bc8efe137ba16f3530228b529366744a33e6 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20190308221718-c2843e01d9a2.mod 88 BLAKE2B aec7d0eea1278eb3d1568d5bfb4041267501ad14457ebfcbdbc5fe21473170b8616ca4028f52af2edbfd85922cbe04540b4b0df7f69f63197698143cc5557a7a SHA512 2df49895053b36fed7ea905aa73f86568fbafd79ff0a7976679d8c77cf15025129435d9dbfd89367b611b1aadbea4f4bd1835eb4efa9ea702466e443638d379e +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20190510104115-cbcb75029529.mod 146 BLAKE2B 6fe18cbe4eb6c3f6c26a4d2f9f309c48eb9ea59017125179cbfd61bb1e62395515c8cb286e1139fbcf54d37dcb2baa1a2f98dcfbcb6178b7f7df3b51929ff5c5 SHA512 f40c7b620b28b5bdc6ce92d43768af71b5869e7f0eb7872dd0f2751eed2bd15a17f7af26bf2dc5c6f7e6b816a174d010bfd22b3f8f5dd72f22dc4e4357dea842 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20190605123033-f99c8df09eb5.mod 146 BLAKE2B 6fe18cbe4eb6c3f6c26a4d2f9f309c48eb9ea59017125179cbfd61bb1e62395515c8cb286e1139fbcf54d37dcb2baa1a2f98dcfbcb6178b7f7df3b51929ff5c5 SHA512 f40c7b620b28b5bdc6ce92d43768af71b5869e7f0eb7872dd0f2751eed2bd15a17f7af26bf2dc5c6f7e6b816a174d010bfd22b3f8f5dd72f22dc4e4357dea842 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20191011191535-87dc89f01550.mod 146 BLAKE2B 6fe18cbe4eb6c3f6c26a4d2f9f309c48eb9ea59017125179cbfd61bb1e62395515c8cb286e1139fbcf54d37dcb2baa1a2f98dcfbcb6178b7f7df3b51929ff5c5 SHA512 f40c7b620b28b5bdc6ce92d43768af71b5869e7f0eb7872dd0f2751eed2bd15a17f7af26bf2dc5c6f7e6b816a174d010bfd22b3f8f5dd72f22dc4e4357dea842 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20200622213623-75b288015ac9.mod 155 BLAKE2B 8bba3353db8ceb3b9fe40b8fd59aacde169776a4a553a069a04836bbf15e5a9a8d7a2d39feed98dac6cb890198180fda39f26b528ff95f24c5b2bbf6601b45c3 SHA512 7c5a755a03063d47d259fda0a6c2faa63c2f30b98dbac583e106aaa817d6cde3e07551e0b5e08f3a25db4c4ca45a23cebe993ae6f3d39c88deeaf2c7d8086a06 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20201002170205-7f63de1d35b0.mod 155 BLAKE2B 8bba3353db8ceb3b9fe40b8fd59aacde169776a4a553a069a04836bbf15e5a9a8d7a2d39feed98dac6cb890198180fda39f26b528ff95f24c5b2bbf6601b45c3 SHA512 7c5a755a03063d47d259fda0a6c2faa63c2f30b98dbac583e106aaa817d6cde3e07551e0b5e08f3a25db4c4ca45a23cebe993ae6f3d39c88deeaf2c7d8086a06 +DIST golang.org%2Fx%2Fcrypto%2F@v%2Fv0.0.0-20201002170205-7f63de1d35b0.zip 1878084 BLAKE2B 3c16360d960d416d175ed4c93d3fa78d8798971d368e189acccb9e12bc4620f24894c739ac2d350ba5561dcaa6f2d297f3f8b51d5cf556f5a19c5f3c67d6d84d SHA512 8aa88bbc68d280a791035d107c67735b859afd5d69d802136d0d06f05e65d750e0f7d5d6e5db47b4edf8b5d07ea0850ea987055f64f6d2ea50a61ac31a97bdcc +DIST golang.org%2Fx%2Fexp%2F@v%2Fv0.0.0-20190121172915-509febef88a4.mod 24 BLAKE2B 9615629f1bf7d58419f5b73842e19f6be3a8c8cefb217364917f1aaf68aec00de41d96700378b048d6cc385e154ed6d3db59256b4a00e9165bac7951cd0bcbab SHA512 9131017b8ab0c2362b74e0c010daeb849689025aa31cb464dc379b0e34d0fcdb66749329b111041127997440bac052249dab522ab27239858405c056e3ac5dbf +DIST golang.org%2Fx%2Fexp%2F@v%2Fv0.0.0-20190306152737-a1d7652674e8.mod 24 BLAKE2B 9615629f1bf7d58419f5b73842e19f6be3a8c8cefb217364917f1aaf68aec00de41d96700378b048d6cc385e154ed6d3db59256b4a00e9165bac7951cd0bcbab SHA512 9131017b8ab0c2362b74e0c010daeb849689025aa31cb464dc379b0e34d0fcdb66749329b111041127997440bac052249dab522ab27239858405c056e3ac5dbf +DIST golang.org%2Fx%2Fexp%2F@v%2Fv0.0.0-20190510132918-efd6b22b2522.mod 327 BLAKE2B 209bd1491b6099491fca7ccfd2fabb500b56112557b4b359819b5f9d18e1587b8b1551acab53ac6c222b66b825c4058ecd6adb1d886f1868b7b96ebbd5865eea SHA512 e16919da8b2302c45f8fab5f0d200f41c2c978ad31eab2b4db18310bfbe09079d738f682920ef6530f1d5f53359ddc3d4bf33fe5cefbcefd440212b31e72ef28 +DIST golang.org%2Fx%2Fexp%2F@v%2Fv0.0.0-20190829153037-c13cbed26979.mod 352 BLAKE2B 5e146ef1d6b71ec65511cb06d8392eddb9a126b6194213f3b2ac6b675977dcdc77cbb3e46fc936189269583df4d0d80d2e393523c3ba4c55f1e8f9294e0dcaa1 SHA512 8ea874c371c0a582410e682cf475628b4fe6a0c0f57b05566a03343999da063250dcb987d9a863b96a8e1ee913612f323de296b4ddbcfecb166884bee06a8af9 +DIST golang.org%2Fx%2Fexp%2F@v%2Fv0.0.0-20191030013958-a1ab85dbe136.mod 475 BLAKE2B 3be94804cb1c692471ca7f2af890586ef57ed45a306a50fd6d6eaec9c7a161e2e4945ed11640ed30ab6f0e48ca644ec06b6b12e232b0990d4e9a08347c27491a SHA512 4b495d303e08e9bb4b43ff0c82665107a6e0a9cdd33a6d14aea491e634901fedb6341fe9e47c45fca1f89688ea3548f57ac8d62b79ef4ccb596ef4eb2e809241 +DIST golang.org%2Fx%2Fimage%2F@v%2Fv0.0.0-20190227222117-0694c2d4d067.mod 60 BLAKE2B 1c8445e3c9313293a0551c8a2acc31a1738724b96886bdf165c74de6cf2d25b784baefa2c41997a64ff189333a8c59756fac7ac41b0ae1d4f167c38574905351 SHA512 c466f8b348acdc26208bcb782cf330a979d9af086a95f307a785884492430f11fe45d1ddc3abdc1b092654b3880a5e7a456740293935b1912a1d39b658de80e8 +DIST golang.org%2Fx%2Fimage%2F@v%2Fv0.0.0-20190802002840-cff245a6509b.mod 69 BLAKE2B f2318e92793bd626374b94e2917ea05ec2b41285c169f1461365edfa00412a798775a8ce137221e1c280983a62d03bf1cc97eadaf8668661ed4387ef5823963b SHA512 d463167481b44386a011b867d6e26eaf2fe81c750325ea89f631af7b065c5152249084c45e7195a662d9b9ddde0e81a5273d8110f73a18c4d841c155c67ea0f6 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20181026193005-c67002cb31c3.mod 25 BLAKE2B 8942ceba0f85f2e950663feb634e602815315834dea89d18f7319100c19a27f15746a11b50157d682756fc922138660512cd6c8e75a2458b0cd512aba19760da SHA512 3ba23f3472e0ae7904b4250e2e3a1b04c719c4bb66c59ccfaf96fae2fb25ae0abf19f542f03c7179a312a008521acaf4ff389517b11dba8b6f581a9dded44883 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20190227174305-5b3e6a55c961.mod 88 BLAKE2B ce393846b227c374753f46fc076385826a6288b0c85095e097c041b844f46b87120774c68924492c4f33c33729103a2d916d2335e24953022630314b63f606d0 SHA512 0097db2957ab98a21a73960d2a37c526e5cabcd5ba4825e44f0ec4851ef83743ae171c8dc4b6c09ea4d931c15879c247e362ca53ef8dc762b484f1ddcc483d04 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20190301231843-5614ed5bae6f.mod 25 BLAKE2B 8942ceba0f85f2e950663feb634e602815315834dea89d18f7319100c19a27f15746a11b50157d682756fc922138660512cd6c8e75a2458b0cd512aba19760da SHA512 3ba23f3472e0ae7904b4250e2e3a1b04c719c4bb66c59ccfaf96fae2fb25ae0abf19f542f03c7179a312a008521acaf4ff389517b11dba8b6f581a9dded44883 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20190313153728-d0100b6bd8b3.mod 88 BLAKE2B 04ec98f76d6779784920b4f746fccafdba5ee6f365edc58985219675791d417746575165985de6d866ee891b6c768d317360a4229e61f19a1f05e4f0bafdb111 SHA512 5e787e9d2c16c87238995214eab353f87d009acf8ef78889295d11dfabef73cea4e8cabfc2999f9ef0c936efb84c22963e0aa2bce4b3678680a389cbe23df961 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20190409202823-959b441ac422.mod 88 BLAKE2B 04ec98f76d6779784920b4f746fccafdba5ee6f365edc58985219675791d417746575165985de6d866ee891b6c768d317360a4229e61f19a1f05e4f0bafdb111 SHA512 5e787e9d2c16c87238995214eab353f87d009acf8ef78889295d11dfabef73cea4e8cabfc2999f9ef0c936efb84c22963e0aa2bce4b3678680a389cbe23df961 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20190909230951-414d861bb4ac.mod 88 BLAKE2B 04ec98f76d6779784920b4f746fccafdba5ee6f365edc58985219675791d417746575165985de6d866ee891b6c768d317360a4229e61f19a1f05e4f0bafdb111 SHA512 5e787e9d2c16c87238995214eab353f87d009acf8ef78889295d11dfabef73cea4e8cabfc2999f9ef0c936efb84c22963e0aa2bce4b3678680a389cbe23df961 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20190930215403-16217165b5de.mod 88 BLAKE2B 04ec98f76d6779784920b4f746fccafdba5ee6f365edc58985219675791d417746575165985de6d866ee891b6c768d317360a4229e61f19a1f05e4f0bafdb111 SHA512 5e787e9d2c16c87238995214eab353f87d009acf8ef78889295d11dfabef73cea4e8cabfc2999f9ef0c936efb84c22963e0aa2bce4b3678680a389cbe23df961 +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20210508222113-6edffad5e616.mod 97 BLAKE2B 6bf1c22438e1c18af0d845f52a62fc4c96b6752486228e0201a794540a44aca52a045366ef1beee95fb7780c9d0a37aa53fea0b669241d45a0529731bd91c2c4 SHA512 5e1e301c678b32fcb56cd538fb907900e5e60162a44c285e04f0fc8db49f1b31f346e736055872ae9a69fe63798823466d7f159d2ffffb4880bb39b17d4ba5fe +DIST golang.org%2Fx%2Flint%2F@v%2Fv0.0.0-20210508222113-6edffad5e616.zip 46224 BLAKE2B 6a3961daa35b847f0bd943fba549cf89b69af80881d5de257cef88ea147f4f903598ae9e36232c00bf192dcaffc9375ce99854fbf32f897c81cb55dc2c31f7d2 SHA512 6a0f52ae48069a22d899047df2c2dc8b33ba053a5092eaf4f5b5dca59b97c38e189099918a725746b09fe02de5d68079926770d5f915424de223d2d4406362d2 +DIST golang.org%2Fx%2Fmobile%2F@v%2Fv0.0.0-20190312151609-d3739f865fa6.mod 27 BLAKE2B 9bc664bbb78cd778f132bf3504160bf8f6d9950342fa73c461db815f07c0ce2ae5bb2a0ac099457d022e1edf2d07e536566fea043a77aa8b21054254ae854c46 SHA512 a105eb088532321694d3adb5da0b3cdceb7781670a2d4a8a757799e3c8fde02784b981747714cfa8770ed29eb1a0228e0945ad3c363220c39108a7432fc29a32 +DIST golang.org%2Fx%2Fmobile%2F@v%2Fv0.0.0-20190719004257-d2bd2a29d028.mod 222 BLAKE2B 5f1962cf1df6a0e8d748eacc5616c3bf0b8de117d29e57da32017cfe26eafc879d33427deeb888b283eeab56d48b3c72ef1ad0aa3706a1dcaed208026eeb0054 SHA512 6689d7c55fea7d8cfb8d2b1a934ca45793dc8d4cf4fc5b001bafe676367a93b8a8c4964d8131ba145e5e41c4da50a238d6df01dd3fc336eeb18be61b49e62416 +DIST golang.org%2Fx%2Fmod%2F@v%2Fv0.0.0-20190513183733-4bf6d317e70e.mod 97 BLAKE2B f6c97d5de5c229ab22e047250a7030c201829f8237b63c0b272c0453dd8ea91360f4a73f9d2b56212103c76c36c01699231d9dd31d48ba8624554b5b36499190 SHA512 15deca99c6d866dcffdd51b1334fbe7f33ce88e1fd82badec64f5155782681887e7fd959ec2686fb35adf70afbe08d743e36c6a891f43462074663357e5b309a +DIST golang.org%2Fx%2Fmod%2F@v%2Fv0.1.0.mod 97 BLAKE2B 54b5bbd5b0908619326ca8bcebebf13f45b2838737d22008f20d3f40ae52fb4f8fdb8c73cbd98b57873aefc8b37c7328aab2bf02ad82a7d5f83e0d75a9283e81 SHA512 4e955424df3c1cce0b716fc518eed10196feb34ec718c1fe537350ce99efd0676276c2000feca6faaa6f3db8ce626e2d330f700fa43a10c73120dd13f5f1a764 +DIST golang.org%2Fx%2Fmod%2F@v%2Fv0.1.1-0.20191105210325-c90efee705ee.mod 159 BLAKE2B 7124b4e21f0b1ff142fe4cd5c57a22de7bc5b1c578e16e8661085d475d67573279c1ce3165e05a28c77a41eac43fe29b1d98854abdcc7b0b66167f82db652dd8 SHA512 5e225da646ef87b8bf435b745313187cecd1bd3e88660f8a90cd2a6fdcadbe8fc51f53edae4b3aa2357ad273a8e58034920bb61a1cd5898b95d3fe39f30ec648 +DIST golang.org%2Fx%2Fmod%2F@v%2Fv0.2.0.mod 214 BLAKE2B 9a9c23e4a6fbf1e2168cc2559ab0eea14e2a1bbf32cab7eb95e276c3c1f2e06dadf6c58e39a4722211fb882e48f25a8de2969422590c62851292747f1da76b02 SHA512 16d72a943c436bf27c18ee65deb1e1a3b1283dcfcc76a49f01919df97f41ae6ef7c5fe7f95b5bb62cf6f6fee57eb9654ca27ec3bae448ebfe894f8d6d0101fa1 +DIST golang.org%2Fx%2Fmod%2F@v%2Fv0.3.0.mod 214 BLAKE2B 9a9c23e4a6fbf1e2168cc2559ab0eea14e2a1bbf32cab7eb95e276c3c1f2e06dadf6c58e39a4722211fb882e48f25a8de2969422590c62851292747f1da76b02 SHA512 16d72a943c436bf27c18ee65deb1e1a3b1283dcfcc76a49f01919df97f41ae6ef7c5fe7f95b5bb62cf6f6fee57eb9654ca27ec3bae448ebfe894f8d6d0101fa1 +DIST golang.org%2Fx%2Fmod%2F@v%2Fv0.4.2.mod 214 BLAKE2B 9a9c23e4a6fbf1e2168cc2559ab0eea14e2a1bbf32cab7eb95e276c3c1f2e06dadf6c58e39a4722211fb882e48f25a8de2969422590c62851292747f1da76b02 SHA512 16d72a943c436bf27c18ee65deb1e1a3b1283dcfcc76a49f01919df97f41ae6ef7c5fe7f95b5bb62cf6f6fee57eb9654ca27ec3bae448ebfe894f8d6d0101fa1 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20180724234803-3673e40ba225.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20180826012351-8a410e7b638d.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20181023162649-9b4f9f5ad519.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20181114220301-adae6a3d119a.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20181201002055-351d144fa1fc.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20181220203305-927f97764cc3.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190108225652-1e06a53dbb7e.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190213061140-3a22650c66bd.mod 24 BLAKE2B dad51d0aff48ef669f448f7b41bcdb153dbdc48863761ba1cac6aa3e3eaeec838e22733e6c61796b22bcc95d9e0a274085676bf191a8072717a398a067fe9e62 SHA512 d7446d3dd844b97512470f7ff05fce72d099f7800396e2738a54d41796f0f76be07e7aea1f638fee0190c7d8ce65eefc54eebe6917a06d14da04d0c9c8f9891a +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190311183353-d8887717615a.mod 119 BLAKE2B e042b2716739483252c3340451b2c3c7b421fdf8d6b3e0333e979802fca66159596982ea63a24b6a64457b2757a0ad24cbb9ea032bab4c5377edf84a3ea18b97 SHA512 26b6c92eecd2208967336d4d23f8a71f77f9a73643ad1e5cd84dee36b2f626fffc806e4dd33acc284831a0961e2b363d898a747903235945fbfb665c5b4d5ef2 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190404232315-eb5bcb51f2a3.mod 119 BLAKE2B e042b2716739483252c3340451b2c3c7b421fdf8d6b3e0333e979802fca66159596982ea63a24b6a64457b2757a0ad24cbb9ea032bab4c5377edf84a3ea18b97 SHA512 26b6c92eecd2208967336d4d23f8a71f77f9a73643ad1e5cd84dee36b2f626fffc806e4dd33acc284831a0961e2b363d898a747903235945fbfb665c5b4d5ef2 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190501004415-9ce7a6920f09.mod 119 BLAKE2B e042b2716739483252c3340451b2c3c7b421fdf8d6b3e0333e979802fca66159596982ea63a24b6a64457b2757a0ad24cbb9ea032bab4c5377edf84a3ea18b97 SHA512 26b6c92eecd2208967336d4d23f8a71f77f9a73643ad1e5cd84dee36b2f626fffc806e4dd33acc284831a0961e2b363d898a747903235945fbfb665c5b4d5ef2 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190503192946-f4e77d36d62c.mod 119 BLAKE2B e042b2716739483252c3340451b2c3c7b421fdf8d6b3e0333e979802fca66159596982ea63a24b6a64457b2757a0ad24cbb9ea032bab4c5377edf84a3ea18b97 SHA512 26b6c92eecd2208967336d4d23f8a71f77f9a73643ad1e5cd84dee36b2f626fffc806e4dd33acc284831a0961e2b363d898a747903235945fbfb665c5b4d5ef2 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190603091049-60506f45cf65.mod 172 BLAKE2B 6c58510adee25cabb2e31dcbd88939145c6c0856ba2fd1f0b78f82ec6f2589fe0dcce736a192d145dbab8f4ba892bebb80cb6cea4ea89fbef72f7822d157c1a1 SHA512 5b9748f38f64301e4895d9d2bc106fc9bd05a29feff5cfb53e248d168af998fd1a501c1a3c27e23af663b283093d2a48393bb0798bea449256d89ae119b225eb +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190613194153-d28f0bde5980.mod 181 BLAKE2B 95ef87cbad118eb6bfc963893e37a555067b7fcf70e52cf4261de029eb46b739b12f50530a46fb91ec9119febcf5033176324a55064f589c17b240a23a15bb4a SHA512 2794c616072f01ca3324107aad2ed97e05f6e6c1e9811a1749073376a89c9ce57a910cfdc8dd6bdc2583d133bb53605c7a68917eaa221ec5c1c8319e5dfbb236 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20190620200207-3b0461eec859.mod 181 BLAKE2B 95ef87cbad118eb6bfc963893e37a555067b7fcf70e52cf4261de029eb46b739b12f50530a46fb91ec9119febcf5033176324a55064f589c17b240a23a15bb4a SHA512 2794c616072f01ca3324107aad2ed97e05f6e6c1e9811a1749073376a89c9ce57a910cfdc8dd6bdc2583d133bb53605c7a68917eaa221ec5c1c8319e5dfbb236 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20200226121028-0de0cce0169b.mod 181 BLAKE2B 95ef87cbad118eb6bfc963893e37a555067b7fcf70e52cf4261de029eb46b739b12f50530a46fb91ec9119febcf5033176324a55064f589c17b240a23a15bb4a SHA512 2794c616072f01ca3324107aad2ed97e05f6e6c1e9811a1749073376a89c9ce57a910cfdc8dd6bdc2583d133bb53605c7a68917eaa221ec5c1c8319e5dfbb236 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20200625001655-4c5254603344.mod 181 BLAKE2B 05d6754fa387bac4a6481ad34fb7b681064fc6443b3f70cba316fe2fd0896050e4a772fd8e1be655130a00bb5feaded4725ffea1c5dd6ba55ba55315aaae34d2 SHA512 54d242da2536da38e292b62a955b3961f7b0a9789fe36c5f7ae93577eeac734a6e5bac21a657cf71d488395278cd7683db538e16a9c853835277a800a9d43471 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20200822124328-c89045814202.mod 181 BLAKE2B 05d6754fa387bac4a6481ad34fb7b681064fc6443b3f70cba316fe2fd0896050e4a772fd8e1be655130a00bb5feaded4725ffea1c5dd6ba55ba55315aaae34d2 SHA512 54d242da2536da38e292b62a955b3961f7b0a9789fe36c5f7ae93577eeac734a6e5bac21a657cf71d488395278cd7683db538e16a9c853835277a800a9d43471 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20201021035429-f5854403a974.mod 181 BLAKE2B 3d3ddd23252ae7c54121211421c04a53076d3c347a9511c24494ded58863b0e96b2fefbdd10ee783bb3c0089cca1af91358701ef709fbd52a2c2d1fdec011939 SHA512 098a7d7eadb99bc1eb8695f1d86e1ed2ec2f5f625045f3ed77648d4ef7047818cfc449d46c8a6ccf285f95956baf228c1c57d6e281da1f63f67cfa0f93ca4230 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20201202161906-c7110b5ffcbb.mod 181 BLAKE2B 3d3ddd23252ae7c54121211421c04a53076d3c347a9511c24494ded58863b0e96b2fefbdd10ee783bb3c0089cca1af91358701ef709fbd52a2c2d1fdec011939 SHA512 098a7d7eadb99bc1eb8695f1d86e1ed2ec2f5f625045f3ed77648d4ef7047818cfc449d46c8a6ccf285f95956baf228c1c57d6e281da1f63f67cfa0f93ca4230 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20210405180319-a5a99cb37ef4.mod 179 BLAKE2B d4f0ad22973a6e0a06b186e217dedbea3abb1800b259c56a29da9075c36808160620b42b0a485127f713760b24b4d9d6d9a61119c5739927340436bac307f5c4 SHA512 f48731641ffad3b90daf0a8bb79fdfc607c076961dbda1c51e71eab787dca0681e5984ffce048bd655ceb56052fa64426b30b32e6ee32957c92418a16d1c9f06 +DIST golang.org%2Fx%2Fnet%2F@v%2Fv0.0.0-20210405180319-a5a99cb37ef4.zip 1565731 BLAKE2B 25099f5d276bba9b2d3c5e75c603dac06f3364fd09d2a2c53aaf5030d4698fc3638758d23c0a82fc118a05661b40377b74ea55c2e8f5d9add2d03527104ae80b SHA512 23da0e9ed2c647eb043e4b57e384ae335119b3766411f84cb009496a1fae85c7cefed14a92154b3e8d7e93d92187dbfde9b9cc07236ea3a7ca4052b93c6dc0dd +DIST golang.org%2Fx%2Foauth2%2F@v%2Fv0.0.0-20180821212333-d2e6202438be.mod 27 BLAKE2B 078fc99b981406f4ee3f8da94c83954e80619e76ea63cf6323f27614bbcb870bb650eb5ffaac865a374f3ed0ef0619d97e11f05924c92e395e72cb73f28630e6 SHA512 53431e560b5d6a9b50f44997ef6755f71741ccca155767dd954da41f11f53a3e8d01d7e01a2bb9de1fdd551dd2e734cb65e5641cf5de5c9a8a6a25a4894336f5 +DIST golang.org%2Fx%2Foauth2%2F@v%2Fv0.0.0-20190226205417-e64efc72b421.mod 233 BLAKE2B 5a1feba7e2d9703a864889f35f70eb18d30f9c0179a1425b0f4cddf17b03d2d187ba36346243a97820ae45e03a136ac26aedfefa09c0c7bf6cbd246eddf36c50 SHA512 9e91ec99aeb8b639d63fde3cc38f750d0a29d4a05864595beec0de0667ef9193007d89cb899b1d5ba44f0675121b2cff1e09b86bad4331378a66e15ef2f4e26b +DIST golang.org%2Fx%2Foauth2%2F@v%2Fv0.0.0-20190604053449-0f29369cfe45.mod 233 BLAKE2B 5a1feba7e2d9703a864889f35f70eb18d30f9c0179a1425b0f4cddf17b03d2d187ba36346243a97820ae45e03a136ac26aedfefa09c0c7bf6cbd246eddf36c50 SHA512 9e91ec99aeb8b639d63fde3cc38f750d0a29d4a05864595beec0de0667ef9193007d89cb899b1d5ba44f0675121b2cff1e09b86bad4331378a66e15ef2f4e26b +DIST golang.org%2Fx%2Foauth2%2F@v%2Fv0.0.0-20200107190931-bf48bf16ab8d.mod 233 BLAKE2B 5a1feba7e2d9703a864889f35f70eb18d30f9c0179a1425b0f4cddf17b03d2d187ba36346243a97820ae45e03a136ac26aedfefa09c0c7bf6cbd246eddf36c50 SHA512 9e91ec99aeb8b639d63fde3cc38f750d0a29d4a05864595beec0de0667ef9193007d89cb899b1d5ba44f0675121b2cff1e09b86bad4331378a66e15ef2f4e26b +DIST golang.org%2Fx%2Foauth2%2F@v%2Fv0.0.0-20200107190931-bf48bf16ab8d.zip 84373 BLAKE2B 39bd0256afae566a53bb0b7b95adf0416653fd003bf5312c7a316a2d7c3e5d1fa25fd08bdbcdf75df45a56116fea54dcb1bf9b68b07d15d3a909e072f8f9fa06 SHA512 10a924e5fb556c2726795462c91fe7086472d6baab511ac21c1fb3c137e5a3e0db55f9ce8fe1952566d887225e3528ec8b747136f8984163acf71e869a0d8c58 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20180314180146-1d60e4601c6f.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20181108010431-42b317875d0f.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20181221193216-37e7f081c4d4.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20190227155943-e225da77a7e6.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20190423024810-112230192c58.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20190911185100-cd5d95a43a6e.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20201020160332-67f06af15bc9.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20201207232520-09787c993a3a.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20210220032951-036812b2e83c.mod 25 BLAKE2B 01f7f78a0324ca728efd4d662ea130d7e200ab25805125e472720ca01feaaf2625b15bf53f51837a6913e35e060a19018928a38851d7445f39e6e42e237dfda2 SHA512 a9dd073f69c5be1153aaab6e84dd3bb1610a0df8b9882ca4c486c6625d4b5201e5032f86e5014421358dff564d93c4e67f20e5fd1d21ed5e259ddfbc90af43c0 +DIST golang.org%2Fx%2Fsync%2F@v%2Fv0.0.0-20210220032951-036812b2e83c.zip 28693 BLAKE2B 3d6a34fa6da642f5ca71c930bd69a41439013f20ee60dde5d4dfab4bf688f1edb150a0477cb006670424c6c59e90d4bac9e5eb34f9fb4c518d903dfd26fb6cb7 SHA512 48b983589bd682ff9275c47733ec73637ebb5e58e1bca0c7744101229237d5cb34170efab63db0061aec857052cce9ef03c3497702b90a86287e6be88e1b33aa +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20180823144017-11551d06cbcc.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20180830151530-49385e6e1522.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20180905080454-ebe1bf3edb33.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20181026203630-95b1ffbd15a5.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20181107165924-66b7b1311ac8.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20181116152217-5ac8a444bdc5.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190215142949-d0b11bdaac8a.mod 24 BLAKE2B 64a70c4594f5d3c37d962c1ed07630fba8abeaf534242f8f1509af271684499252af9a2320d5bac8e44064dba344b807535e4e9dd085fc0fb47bd9304120601a SHA512 ffe50fccf7f1d200f2ebc805b190e3f10c5a3184458a38f4590e520d7ce115e1520fbabe56651bbdc2e08da4a8db5ac86d0e88728efde3ab26c64ab4e0cd604c +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190312061237-fead79001313.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190412213103-97732733099d.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190422165155-953cdadca894.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190502145724-3ef323f4f1fd.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190507160741-ecd444e8653b.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190606165138-5da285871e9c.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20190624142023-c5567b49c5d0.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20191026070338-33540a1f6037.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20200106162015-b016eb3dc98e.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20200323222414-85ca7c5b95cd.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20200615200032-f1bc736245b1.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20200625212154-ddb9806d33ae.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20200923182605-d9f96fdee20d.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20200930185726-fdedc70b468f.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20201119102817-f84b799fce68.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20210124154548-22da62e12c0c.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20210330210617-4fbd30eecc44.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20210403161142-5e06dd20ab57.mod 33 BLAKE2B 8be160de26713fd50f15adfb6fd7fff2643ee587aa17de9385b1e315869d0ecf102fc567294666bf232aa677d1ab04ba8341157f3d9b66a0f53543a7a47cf148 SHA512 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20210510120138-977fb7262007.mod 33 BLAKE2B b74677ab15ab6b31640d71b052db667b0fb585ed6d1044e26bc5e4cf8da90e1ede81f8876babea843dd322b8b707189138e70c24d13d931f1f6dd04978ac222c SHA512 85e511b1261c1935f5ee4754ad31d1d946f9e10f0af9905f44c4348d6ce5104319c03fb38517dde616698f6487b0c62788cfa96bc0ffb3b6db80accd7e552655 +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20210603081109-ebe580a85c40.mod 33 BLAKE2B b74677ab15ab6b31640d71b052db667b0fb585ed6d1044e26bc5e4cf8da90e1ede81f8876babea843dd322b8b707189138e70c24d13d931f1f6dd04978ac222c SHA512 85e511b1261c1935f5ee4754ad31d1d946f9e10f0af9905f44c4348d6ce5104319c03fb38517dde616698f6487b0c62788cfa96bc0ffb3b6db80accd7e552655 +DIST golang.org%2Fx%2Fsys%2F@v%2Fv0.0.0-20210603081109-ebe580a85c40.zip 1639382 BLAKE2B 3d70aca9182ad2dd59a1260987d32b876da2d668a5181e6a94ce07f252399a5e861787ef0ddf5d3fb45a93c77b3289243fe23f724150f0719c0519dbc9db6a3e SHA512 ef385003c7858782b40f36e70eb0d4af9c9b18cf705872e474c7720eb2de61b889a6a9c85a2c9e1ecde43522cab440f97afba80598ab26f1c11703fe1e76eb77 +DIST golang.org%2Fx%2Fterm%2F@v%2Fv0.0.0-20201126162022-7de9c90e9dd1.mod 95 BLAKE2B 8385688f2081360fc2694f05d128ff0c587ef131e1b5757a942d9335870200e06545318afb1a7d1f059d060f51fe94fc16a48a1d7ec31a9a83e07b3c93f34ce3 SHA512 a3401e3d20dc1aaaebbf3c296a783668003f2182ed77ec830431f97339e07eda1859fe8c3c7fdfb0125b3ed331d23208519df520f86e20c1a05c822b3d766b08 +DIST golang.org%2Fx%2Ftext%2F@v%2Fv0.3.0.mod 25 BLAKE2B 31009af0fdcd0f8730c9985287e6e364ec4e5183e57e92560dbc80a2010eced51b8a90f01a82b49384268c8a0adbf69d179c205d3f68e0eb459169d2ea9528f0 SHA512 ca081ef7cccd7bbedc6843fbe0c452352661a07e1298cd02ff338ed79d807c6401d613a3cf20011189d2f98a794ffa410547b3e352eb58a6f0a84822285d391d +DIST golang.org%2Fx%2Ftext%2F@v%2Fv0.3.1-0.20180807135948-17ff2d5776d2.mod 25 BLAKE2B 31009af0fdcd0f8730c9985287e6e364ec4e5183e57e92560dbc80a2010eced51b8a90f01a82b49384268c8a0adbf69d179c205d3f68e0eb459169d2ea9528f0 SHA512 ca081ef7cccd7bbedc6843fbe0c452352661a07e1298cd02ff338ed79d807c6401d613a3cf20011189d2f98a794ffa410547b3e352eb58a6f0a84822285d391d +DIST golang.org%2Fx%2Ftext%2F@v%2Fv0.3.2.mod 88 BLAKE2B f3dd520e0e4e9b57feab62ecabb9169f37f1ce49b2846b949f9266f807767d38f55e4aa8ea006229c6f81cfc1e2c9dc0d1e3c186235e416dfb90fe7e04751d07 SHA512 d9361afb453b10c9d02787568ec33ea4c97a115899c6b3d1a1246547a749244e9218475ae5ae9f741d9b355260d2d3c33852673e805fcdd5f26f3ca40f035884 +DIST golang.org%2Fx%2Ftext%2F@v%2Fv0.3.3.mod 97 BLAKE2B ed93c1d43f199d8cbd43cb25edac5de569cb78773d7f3232d59a0a4de6d174c5c100db2b02ca42c51f3e17e0f5e781ba9b5641a512b0dc72dcfaa5f6bd7d451b SHA512 f3f68808ccf5223453f765f59db1ef551b2130069eb83518878961c2d4a2044f9049f8d49df6e67699fcd2645cf90b84d35626590b2cfbca302fcf0eac76dc8b +DIST golang.org%2Fx%2Ftext%2F@v%2Fv0.3.5.mod 97 BLAKE2B ed93c1d43f199d8cbd43cb25edac5de569cb78773d7f3232d59a0a4de6d174c5c100db2b02ca42c51f3e17e0f5e781ba9b5641a512b0dc72dcfaa5f6bd7d451b SHA512 f3f68808ccf5223453f765f59db1ef551b2130069eb83518878961c2d4a2044f9049f8d49df6e67699fcd2645cf90b84d35626590b2cfbca302fcf0eac76dc8b +DIST golang.org%2Fx%2Ftext%2F@v%2Fv0.3.5.zip 8609319 BLAKE2B a4459cdb830dd5de499cab9b0a37afa88f0cee1b3733a9d765a6693eea89fa5f7b2aafd9f5b27405c9bd38f27f715ef311845e52d3dedbcbf2ba020a04334898 SHA512 f40c677e92a896b7158f0b3ddb786e670a954fff7d981be3e0d3bc6d789d4f069174273050a0cedb8e2438d780e6950e027d84a2e2d64b7936e61edc613acd36 +DIST golang.org%2Fx%2Ftime%2F@v%2Fv0.0.0-20181108054448-85acf8d2951c.mod 25 BLAKE2B ba9e31cf2a4ab0f78a5c67d78026c2ef9571bcff7c820ce212637c8360420af274bfc47cb14bbc3df24457a4d3acb5dee38448a848abbd4e82232bef05b6b2e9 SHA512 6e51811c33b84ddd4a7548013579204266e466bd2e87aa9b6e34892570aa09c607ffa806f8a420474e26ca0e277ab23c81bb07b0ebf2c3b6ed193014c1bc37a7 +DIST golang.org%2Fx%2Ftime%2F@v%2Fv0.0.0-20190308202827-9d24e82272b4.mod 25 BLAKE2B ba9e31cf2a4ab0f78a5c67d78026c2ef9571bcff7c820ce212637c8360420af274bfc47cb14bbc3df24457a4d3acb5dee38448a848abbd4e82232bef05b6b2e9 SHA512 6e51811c33b84ddd4a7548013579204266e466bd2e87aa9b6e34892570aa09c607ffa806f8a420474e26ca0e277ab23c81bb07b0ebf2c3b6ed193014c1bc37a7 +DIST golang.org%2Fx%2Ftime%2F@v%2Fv0.0.0-20210220033141-f8bda1e9f3ba.mod 25 BLAKE2B ba9e31cf2a4ab0f78a5c67d78026c2ef9571bcff7c820ce212637c8360420af274bfc47cb14bbc3df24457a4d3acb5dee38448a848abbd4e82232bef05b6b2e9 SHA512 6e51811c33b84ddd4a7548013579204266e466bd2e87aa9b6e34892570aa09c607ffa806f8a420474e26ca0e277ab23c81bb07b0ebf2c3b6ed193014c1bc37a7 +DIST golang.org%2Fx%2Ftime%2F@v%2Fv0.0.0-20210220033141-f8bda1e9f3ba.zip 12060 BLAKE2B b2dde82c9b26a012e4c7047d5a267b4b6b78cf510a292dc98cd26bc9d58ca6c9fda4be3df63e687a0560ee44a783a5610f75764f80c1e31a88227903eb6fc0bc SHA512 f90053946276726caeab58ba23b298a9c36a576c0450ea558c35edcba87396d32318f1257fe39285dc30137e46b7b0a588d7231a4c1b6a4cc59eb2d22a3bdf01 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20180221164845-07fd8470d635.mod 26 BLAKE2B 2a44c2cc034af3473d9a1d4e1c23b0f4542333853bfc0ecbfcf9eacacbb3593b449fcfc94d23f49ccc16e5a844bc72a3462a3e08a5c26194106a64d1f2732e0a SHA512 3c166b18c0ce47a47e95da9eeede63879a92b0205bd4589d554f7bae89699be0efa83e1f5bba8e50f47714ea23e759b07f4543fe06301995d39373da2db16fc0 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20180917221912-90fa682c2a6e.mod 26 BLAKE2B 2a44c2cc034af3473d9a1d4e1c23b0f4542333853bfc0ecbfcf9eacacbb3593b449fcfc94d23f49ccc16e5a844bc72a3462a3e08a5c26194106a64d1f2732e0a SHA512 3c166b18c0ce47a47e95da9eeede63879a92b0205bd4589d554f7bae89699be0efa83e1f5bba8e50f47714ea23e759b07f4543fe06301995d39373da2db16fc0 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20181030221726-6c7e314b6563.mod 26 BLAKE2B 2a44c2cc034af3473d9a1d4e1c23b0f4542333853bfc0ecbfcf9eacacbb3593b449fcfc94d23f49ccc16e5a844bc72a3462a3e08a5c26194106a64d1f2732e0a SHA512 3c166b18c0ce47a47e95da9eeede63879a92b0205bd4589d554f7bae89699be0efa83e1f5bba8e50f47714ea23e759b07f4543fe06301995d39373da2db16fc0 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190114222345-bf090417da8b.mod 26 BLAKE2B 2a44c2cc034af3473d9a1d4e1c23b0f4542333853bfc0ecbfcf9eacacbb3593b449fcfc94d23f49ccc16e5a844bc72a3462a3e08a5c26194106a64d1f2732e0a SHA512 3c166b18c0ce47a47e95da9eeede63879a92b0205bd4589d554f7bae89699be0efa83e1f5bba8e50f47714ea23e759b07f4543fe06301995d39373da2db16fc0 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190226205152-f727befe758c.mod 194 BLAKE2B 94f62204dd4fd9b865aca70366a7a7754e2e92ed27591beaf789b268ad272dfb34ca0906d888c608393b4c71bc5c9f975fc86c164528ed7d0390e41b66206ec4 SHA512 8b68acbca48744320e64a70a983a471e9e2fc2249562064b10256269033473fd50264b6544646227fb666f075c4f266df1835ca3f88ee679bb97d34bf62bd195 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190311212946-11955173bddd.mod 87 BLAKE2B 32cb406deea05323b1121386bf61f344f8eda0b5370e95bb73828ce0bea50bee375ae3e9b076b9d683a4d89561709c5e97e45e6b08344fbdf6b03b3ce4398dcd SHA512 18ae9b2f54109b4ec5cdea433ee0e3b7006e4d5ea57022d6e8151d4d364735a6b55cf7b5eb2f43b602ec786b2b6819ad78dfc33151ee1a63a0b1199f54ce34a1 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190312151545-0bb0c0a6e846.mod 87 BLAKE2B 32cb406deea05323b1121386bf61f344f8eda0b5370e95bb73828ce0bea50bee375ae3e9b076b9d683a4d89561709c5e97e45e6b08344fbdf6b03b3ce4398dcd SHA512 18ae9b2f54109b4ec5cdea433ee0e3b7006e4d5ea57022d6e8151d4d364735a6b55cf7b5eb2f43b602ec786b2b6819ad78dfc33151ee1a63a0b1199f54ce34a1 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190312170243-e65039ee4138.mod 87 BLAKE2B 32cb406deea05323b1121386bf61f344f8eda0b5370e95bb73828ce0bea50bee375ae3e9b076b9d683a4d89561709c5e97e45e6b08344fbdf6b03b3ce4398dcd SHA512 18ae9b2f54109b4ec5cdea433ee0e3b7006e4d5ea57022d6e8151d4d364735a6b55cf7b5eb2f43b602ec786b2b6819ad78dfc33151ee1a63a0b1199f54ce34a1 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190328211700-ab21143f2384.mod 87 BLAKE2B 32cb406deea05323b1121386bf61f344f8eda0b5370e95bb73828ce0bea50bee375ae3e9b076b9d683a4d89561709c5e97e45e6b08344fbdf6b03b3ce4398dcd SHA512 18ae9b2f54109b4ec5cdea433ee0e3b7006e4d5ea57022d6e8151d4d364735a6b55cf7b5eb2f43b602ec786b2b6819ad78dfc33151ee1a63a0b1199f54ce34a1 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190425150028-36563e24a262.mod 146 BLAKE2B 78e7f7eaadf244c74a90edd8a3e8d092b255cc9246320ca921558467fa02e84ccc68bc6c4d1d5d4baf3c9cab7da37cf6515e4d4889d490d21f374fc4415f1733 SHA512 e9c7b67e28905435e1420333a531e6c0a8f025dc3023f22e5067d5395c8d081bd7993ceeb6ae08c4cd2d1f13aa0f46274a8788e1be085e4b12eaef785f3d7213 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190506145303-2d16b83fe98c.mod 146 BLAKE2B 78e7f7eaadf244c74a90edd8a3e8d092b255cc9246320ca921558467fa02e84ccc68bc6c4d1d5d4baf3c9cab7da37cf6515e4d4889d490d21f374fc4415f1733 SHA512 e9c7b67e28905435e1420333a531e6c0a8f025dc3023f22e5067d5395c8d081bd7993ceeb6ae08c4cd2d1f13aa0f46274a8788e1be085e4b12eaef785f3d7213 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190524140312-2c0ae7006135.mod 146 BLAKE2B 78e7f7eaadf244c74a90edd8a3e8d092b255cc9246320ca921558467fa02e84ccc68bc6c4d1d5d4baf3c9cab7da37cf6515e4d4889d490d21f374fc4415f1733 SHA512 e9c7b67e28905435e1420333a531e6c0a8f025dc3023f22e5067d5395c8d081bd7993ceeb6ae08c4cd2d1f13aa0f46274a8788e1be085e4b12eaef785f3d7213 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190606124116-d0a3d012864b.mod 155 BLAKE2B 538451f0cc08c6752c81241193caad56fcb8fb7a5cdc2ad6840ae44a1f5c3e1539067634352ded872712c84da7046b32053f9634da76c4888eec9046035a0935 SHA512 5823f6ea0fb08243f243a9577cd31397999bb387c8e29312304ca2dd0e73391cad60891a2a1181ac5fb665c1b01824933c295289a5d4cd580fc77f1bd828955b +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190621195816-6e04913cbbac.mod 155 BLAKE2B 538451f0cc08c6752c81241193caad56fcb8fb7a5cdc2ad6840ae44a1f5c3e1539067634352ded872712c84da7046b32053f9634da76c4888eec9046035a0935 SHA512 5823f6ea0fb08243f243a9577cd31397999bb387c8e29312304ca2dd0e73391cad60891a2a1181ac5fb665c1b01824933c295289a5d4cd580fc77f1bd828955b +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190628153133-6cdbf07be9d0.mod 155 BLAKE2B 538451f0cc08c6752c81241193caad56fcb8fb7a5cdc2ad6840ae44a1f5c3e1539067634352ded872712c84da7046b32053f9634da76c4888eec9046035a0935 SHA512 5823f6ea0fb08243f243a9577cd31397999bb387c8e29312304ca2dd0e73391cad60891a2a1181ac5fb665c1b01824933c295289a5d4cd580fc77f1bd828955b +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190816200558-6889da9d5479.mod 212 BLAKE2B ab1d99a25eed3af5426d8a58d249b827e4d30a046302df72c7e0b59955e65b636f4645c5c436bb21ec54ec3745b9996bce92d29826ad93cbc9120a06dc19b49a SHA512 6a0316ac3b01aba3f186b5db540a368ab780a821252f7f0975f9e44afea9170c4b3e7027dc5f79a54ebc6af290cbb59b876d3b53bbf26fd05fc3a80a06fae109 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20190911174233-4f2ddba30aff.mod 212 BLAKE2B ab1d99a25eed3af5426d8a58d249b827e4d30a046302df72c7e0b59955e65b636f4645c5c436bb21ec54ec3745b9996bce92d29826ad93cbc9120a06dc19b49a SHA512 6a0316ac3b01aba3f186b5db540a368ab780a821252f7f0975f9e44afea9170c4b3e7027dc5f79a54ebc6af290cbb59b876d3b53bbf26fd05fc3a80a06fae109 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20191012152004-8de300cfc20a.mod 212 BLAKE2B ab1d99a25eed3af5426d8a58d249b827e4d30a046302df72c7e0b59955e65b636f4645c5c436bb21ec54ec3745b9996bce92d29826ad93cbc9120a06dc19b49a SHA512 6a0316ac3b01aba3f186b5db540a368ab780a821252f7f0975f9e44afea9170c4b3e7027dc5f79a54ebc6af290cbb59b876d3b53bbf26fd05fc3a80a06fae109 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20191108193012-7d206e10da11.mod 212 BLAKE2B ab1d99a25eed3af5426d8a58d249b827e4d30a046302df72c7e0b59955e65b636f4645c5c436bb21ec54ec3745b9996bce92d29826ad93cbc9120a06dc19b49a SHA512 6a0316ac3b01aba3f186b5db540a368ab780a821252f7f0975f9e44afea9170c4b3e7027dc5f79a54ebc6af290cbb59b876d3b53bbf26fd05fc3a80a06fae109 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20191112195655-aa38f8e97acc.mod 212 BLAKE2B ab1d99a25eed3af5426d8a58d249b827e4d30a046302df72c7e0b59955e65b636f4645c5c436bb21ec54ec3745b9996bce92d29826ad93cbc9120a06dc19b49a SHA512 6a0316ac3b01aba3f186b5db540a368ab780a821252f7f0975f9e44afea9170c4b3e7027dc5f79a54ebc6af290cbb59b876d3b53bbf26fd05fc3a80a06fae109 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20191119224855-298f0cb1881e.mod 212 BLAKE2B ab1d99a25eed3af5426d8a58d249b827e4d30a046302df72c7e0b59955e65b636f4645c5c436bb21ec54ec3745b9996bce92d29826ad93cbc9120a06dc19b49a SHA512 6a0316ac3b01aba3f186b5db540a368ab780a821252f7f0975f9e44afea9170c4b3e7027dc5f79a54ebc6af290cbb59b876d3b53bbf26fd05fc3a80a06fae109 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20200130002326-2f3ba24bd6e7.mod 267 BLAKE2B d21181b3e1491ef78b09fc3546ed8ffbfeb7a4578039aaa24e2f5cc2352885c1a4d7dbfaf2853c421daa2a06691ac47513b5f186d31893fb1ef476cf9d4bb9bc SHA512 91b0380c7073eac4442bfd1924d311fc7b50b098ec4c72ea72fcc831273012326a44245add9b05a90895be46d11052ddcc942ea6bb909bda51d782f95acddff8 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20200619180055-7c47624df98f.mod 271 BLAKE2B a7f35788b75abb2e24bcb7310d0584fa51045a86c35beb84ebc00cd6eaabb0e1ea2c81394a693ac528969222da686c64d064fd827f709b3d6695b80ae8e57e96 SHA512 8281ef87f633ddec7f1c4711773b09563e5695a44ef8140d062cdd9a14731a2edf24fde739c42e2a52038d6e100c3c5d7039db9adb62001e5e27a2e282faa057 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.0.0-20210106214847-113979e3529a.mod 270 BLAKE2B e62694003f3e6a15a1494d429bb8d7388cbdeac1d09d28cb20244ca09eeb72b706a2c244d9cf77d7b3ff2b15a193fe35f411e9f5c34ff46a9c42abf813178730 SHA512 749bf78130d1fe8da6c022ea7f5fa65e66cd010cd4ea8278bcfdef116acc52d4d632e46a4a3070ddb7d775ef23b39e78724dbbab36e635ced32058174cbcd052 +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.1.2.mod 323 BLAKE2B db1fc72e77cc95fbe79c62b179628f8e6e130846832146af32f604bd063c6610a6a8cebd1f166294ad4adae451c6760a0988e431846e35d25ad741920e06e839 SHA512 6fa4c11d23d3c08fed7331586d9e8da5299602dc97e861d74ce68f248c2e8b1d9ba5e55d2acbb96eaa3e1484f9d287b7d8c2f0e96f75109c957bfee88776996f +DIST golang.org%2Fx%2Ftools%2F@v%2Fv0.1.2.zip 3441487 BLAKE2B c91d9d98cb01c8562aa2a33931de3ca86d51d815a1514a6e55533854ada4d520f22c8a08c69b9ece3714156c787c46fb9ceba156f99f4b8bbc08d685ed2621d6 SHA512 0ee51d19f7a03af6f79771598ba4201f54b9035f38086829e9e9ea837156bb6e42b900d9f75151ace7e522b6439b21e0a86fe2c70f3d24f37bcf5a70a084cee7 +DIST golang.org%2Fx%2Fxerrors%2F@v%2Fv0.0.0-20190717185122-a985d3407aa7.mod 37 BLAKE2B 7449be81e1998a6439070de1a0ddf5bfd1e4971c90c2e358590a9c1c41128bfc1daa42a9bbc3709506df2442ec8420e6354343a095c837be46335c180083f28a SHA512 659d18a7a3a1be45ff6dc9e7475276b82ee7f11c47d39b0c237d7f872836a1dbdfff0902f21d6cd8093663997865da92e3e5a4acf1ad6129f972dc5e667b4f05 +DIST golang.org%2Fx%2Fxerrors%2F@v%2Fv0.0.0-20191011141410-1b5146add898.mod 37 BLAKE2B 7449be81e1998a6439070de1a0ddf5bfd1e4971c90c2e358590a9c1c41128bfc1daa42a9bbc3709506df2442ec8420e6354343a095c837be46335c180083f28a SHA512 659d18a7a3a1be45ff6dc9e7475276b82ee7f11c47d39b0c237d7f872836a1dbdfff0902f21d6cd8093663997865da92e3e5a4acf1ad6129f972dc5e667b4f05 +DIST golang.org%2Fx%2Fxerrors%2F@v%2Fv0.0.0-20191204190536-9bdfabe68543.mod 37 BLAKE2B 7449be81e1998a6439070de1a0ddf5bfd1e4971c90c2e358590a9c1c41128bfc1daa42a9bbc3709506df2442ec8420e6354343a095c837be46335c180083f28a SHA512 659d18a7a3a1be45ff6dc9e7475276b82ee7f11c47d39b0c237d7f872836a1dbdfff0902f21d6cd8093663997865da92e3e5a4acf1ad6129f972dc5e667b4f05 +DIST golang.org%2Fx%2Fxerrors%2F@v%2Fv0.0.0-20200804184101-5ec99f83aff1.mod 37 BLAKE2B 7449be81e1998a6439070de1a0ddf5bfd1e4971c90c2e358590a9c1c41128bfc1daa42a9bbc3709506df2442ec8420e6354343a095c837be46335c180083f28a SHA512 659d18a7a3a1be45ff6dc9e7475276b82ee7f11c47d39b0c237d7f872836a1dbdfff0902f21d6cd8093663997865da92e3e5a4acf1ad6129f972dc5e667b4f05 +DIST golang.org%2Fx%2Fxerrors%2F@v%2Fv0.0.0-20200804184101-5ec99f83aff1.zip 22295 BLAKE2B 310f892b8ce32810a1afef53335428d73bc23e749e52d00d7624afea2d10422b1b73507026daf23efd2384b81262c4c7862c22da23f6fb43c1b5f79a51170d5e SHA512 34044424d303f5032d4fd302bbf1aca390d45e876583cc223fddf0d685a6eec2bde0a4c1b82c4e471eb5be97fc8aea9b14695b07940d1ecde806636a85d12051 +DIST google.golang.org%2Fapi%2F@v%2Fv0.13.0.mod 851 BLAKE2B 16f0842a8e0082a8532a7c8f5cf5092cd196a90197b3e05c6fe0275e10390e0b97477f60c07d26b422d0da9289fe3c8f2d8fb8fe2fec63af9e005adc26921724 SHA512 bd693c28b65c1b369f89a6b1926a127c91df98feb137ab5595bf141c1a67e3adcf25f79b4cbf3e4c44755d45b9f4876dacafbf18afa1e8c09fd89a8f9d0e9330 +DIST google.golang.org%2Fapi%2F@v%2Fv0.4.0.mod 506 BLAKE2B 6933fe30be88a21cca041b800cb9d095b1daf787f3701c0311da2606287d03799df9b556451d9170d02be8028ce686aaf69eaf941d2a8bdb4769c319c50c9905 SHA512 9fa566a26f8345a101dc94986755468b4782d78689d5a163aa5b960b507d4a0e8e435a8ce84073e07187745a156e2c9f586136895db2f08cfc4cd3329fc1e23a +DIST google.golang.org%2Fapi%2F@v%2Fv0.7.0.mod 802 BLAKE2B 59277c0ab43500926ae727289dfd892ce524164f7acea3d6ede2f4efceb5e89e71e88c2c9fa3e4785da4d2a69c59e5c81c4d735887a6ab52c0b07a8b6baca88d SHA512 617883d94a4de6e07dfd82d046148ccfc5ab4eaf73840a76a9823e5cf03a60b0e0b4f1b62712620de28895d013f01bcd39477cb87bfb94524a634be8818c268c +DIST google.golang.org%2Fapi%2F@v%2Fv0.8.0.mod 850 BLAKE2B c338a815e2222182387fe11a60a2eb1e463851f38725da6e7884be1c2dbdea72473ecee4fca65bd50299c5f9095ac5e52848569b7979106da3876205e5cde41f SHA512 37c90eac881c258cb947f9507ae97466b355df015f64ef2d3ecbcbc154216623676340a000362e8229f3e842e68818a73ae64b5f63e3e1820cbff7b1e7b6d89e +DIST google.golang.org%2Fapi%2F@v%2Fv0.9.0.mod 850 BLAKE2B c338a815e2222182387fe11a60a2eb1e463851f38725da6e7884be1c2dbdea72473ecee4fca65bd50299c5f9095ac5e52848569b7979106da3876205e5cde41f SHA512 37c90eac881c258cb947f9507ae97466b355df015f64ef2d3ecbcbc154216623676340a000362e8229f3e842e68818a73ae64b5f63e3e1820cbff7b1e7b6d89e +DIST google.golang.org%2Fappengine%2F@v%2Fv1.1.0.mod 35 BLAKE2B 24fb6ba95138448c45da7f1ecc4c87391485006b54b8e7ff96ec582c2659f9ea77574b4d5fef2442eff9e5564f3c3263ed8e6963c5d21cde8772a7143d82f3ed SHA512 6644c398d639794470e49cad4402d17765422934915b5a13e13e1f84d8890cc8fad9e6ea8c580d114aefea70d894242e05ce3a432ee596f772b98b6b73069fe2 +DIST google.golang.org%2Fappengine%2F@v%2Fv1.4.0.mod 162 BLAKE2B 21c4d160665b6a87101d2aec39d2f7faef9a66f6be50f7293706686022f808b131c9ce7ddfcba6c2b6d27d15f9414101650436a2403f156a0368de2bce72e482 SHA512 60fb2454326103e4905f79f23a25320cb2c0035b7a0e3c228af845ed7dae23014efb81685f29805303edf277e8b1a2d9a7530b8f3a1a8e57caa1a85edeb52475 +DIST google.golang.org%2Fappengine%2F@v%2Fv1.5.0.mod 162 BLAKE2B 21c4d160665b6a87101d2aec39d2f7faef9a66f6be50f7293706686022f808b131c9ce7ddfcba6c2b6d27d15f9414101650436a2403f156a0368de2bce72e482 SHA512 60fb2454326103e4905f79f23a25320cb2c0035b7a0e3c228af845ed7dae23014efb81685f29805303edf277e8b1a2d9a7530b8f3a1a8e57caa1a85edeb52475 +DIST google.golang.org%2Fappengine%2F@v%2Fv1.6.1.mod 362 BLAKE2B 2d6d24186c2748c4d8f559feb269b351d4260c9c0e0b9342377f23af9e5ecc02fc7f84f7be299aedb0da1b1a6d6d67c3271a826b776bb7cc034256550479a0f5 SHA512 e3c391dfcc5f14fdc5430d7a1d239d4ebec89399b17851e4d7643b8c0c70077aaec3a1bc1a8dd5e3320d8bc6e1562a26e3fe1121d75ce578f37f5d2e84a4ddf6 +DIST google.golang.org%2Fappengine%2F@v%2Fv1.6.1.zip 418135 BLAKE2B d3a64e18959e36aa267f235f1636d00ad545cb32a9245641bd771d511d8168c8070a2e517ae2b65d4d5911c1202267ea8cdd8ea8ed009cec3ccdb9013ad9a0ba SHA512 36a2b9842757e17959c520fe02243502017b8a074da8105763de86ba14c61659f49b3bb8b1eaf8b7c93f2ed297889a26dd43f3f87a139e205390cebb36f2e446 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20180817151627-c66870c02cf8.mod 34 BLAKE2B cd6cb61b9f55a3c1e8b33588e98e62c9c27613ac20fb039cd70c9ecbe41c34d11d80246290ab73a9faf3ec809a15fc00267654b0eb00dbf23fe5c9758c705d9c SHA512 1c29af2b4f8b54234f09dfbfad120b4b11d4fe67e9578b0553412f1587cac2fa2bfe5537fbf15e6d52dcb04332413231c250c3c460b04e64326d2eaed3102464 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190307195333-5fe7a883aa19.mod 450 BLAKE2B bf0efd5f0ff915b9f59fa81611892e70644a4b14fefd15190d0ff68043f7809f51d53766dc50fc0eb9372df3e6590d3fbcf51aec5e9b0c18027e156ce53b8df1 SHA512 37a99611220df08ac5f15ed6f718f37a35523f5cef392b7b7da86b0eaf05e4fa5e52aceb42a6b6ddf6924b1f7cc151876d2e532c83dd2edbcca7c41b9191c427 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190418145605-e7d98fc518a7.mod 450 BLAKE2B bf0efd5f0ff915b9f59fa81611892e70644a4b14fefd15190d0ff68043f7809f51d53766dc50fc0eb9372df3e6590d3fbcf51aec5e9b0c18027e156ce53b8df1 SHA512 37a99611220df08ac5f15ed6f718f37a35523f5cef392b7b7da86b0eaf05e4fa5e52aceb42a6b6ddf6924b1f7cc151876d2e532c83dd2edbcca7c41b9191c427 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190425155659-357c62f0e4bb.mod 450 BLAKE2B bf0efd5f0ff915b9f59fa81611892e70644a4b14fefd15190d0ff68043f7809f51d53766dc50fc0eb9372df3e6590d3fbcf51aec5e9b0c18027e156ce53b8df1 SHA512 37a99611220df08ac5f15ed6f718f37a35523f5cef392b7b7da86b0eaf05e4fa5e52aceb42a6b6ddf6924b1f7cc151876d2e532c83dd2edbcca7c41b9191c427 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190502173448-54afdca5d873.mod 450 BLAKE2B bf0efd5f0ff915b9f59fa81611892e70644a4b14fefd15190d0ff68043f7809f51d53766dc50fc0eb9372df3e6590d3fbcf51aec5e9b0c18027e156ce53b8df1 SHA512 37a99611220df08ac5f15ed6f718f37a35523f5cef392b7b7da86b0eaf05e4fa5e52aceb42a6b6ddf6924b1f7cc151876d2e532c83dd2edbcca7c41b9191c427 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190801165951-fa694d86fc64.mod 331 BLAKE2B 63923e4fcfa896f163dc77009fbdee8ce8c2e31a4694b6ccddf3397cad5c89a3be5796dbc65b77cf059f1601729d976f9afd2969bd426c0cd8781b106ffe0be8 SHA512 9f22a11a1d639cc7a465b6e826c2bc3915fe0ac847159a38c470f0b1631d6f6b2e0ae0548344f7a8e97161d4c6b80113062c04062b7ab887d7d615c39cbfc2dd +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190819201941-24fa4b261c55.mod 331 BLAKE2B 63923e4fcfa896f163dc77009fbdee8ce8c2e31a4694b6ccddf3397cad5c89a3be5796dbc65b77cf059f1601729d976f9afd2969bd426c0cd8781b106ffe0be8 SHA512 9f22a11a1d639cc7a465b6e826c2bc3915fe0ac847159a38c470f0b1631d6f6b2e0ae0548344f7a8e97161d4c6b80113062c04062b7ab887d7d615c39cbfc2dd +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20190911173649-1774047e7e51.mod 339 BLAKE2B 06dd6c875e6235007ea4f4a8350a7f80b3285e21f8ef599ea1e955a6185c5e11658040d073937a4110910c3d21d923487427c0dc626e342e10fef8efbfa95b2b SHA512 8d2fe5cf81319645c17ff8be71f966294976889b7aff74a5b234913dc34a1c7ac03548bcc9ed29120ef651705e7dc6da0c2aff892c9262d67d0044fec5685ac3 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20191108220845-16a3f7862a1a.mod 340 BLAKE2B bb2207855662037de3179be2e667a9cd8798e2d3c1b1eeb939f76095b9c32cca6dacd47439429b5705ad1d5c5597cb4170f17e49bcfa310c0733f1e68ffc1610 SHA512 1095755ae781f0370bb3dd72fca348c5d6640a4f89b6eddfcdd349f320ae117a4da47e48707f66743fc8dc4067285750d816d178b484dee0d21de0b2d1b129b2 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20200423170343-7949de9c1215.mod 287 BLAKE2B ac895df309c4c2533900f7ff3aaecd59bf883fad6fde8fc7ffef9928fc8f18402fb2198bb3f0b75e876adb7d5d0e37073fc251d149245847ebdd95de1cdf6cd3 SHA512 44dc287d4a33c4225229768c59d1b9e61b51fdc27b1745a8161b17bdef4499cb08ebc565c56caa01673317cbef46cb228ac69b9ada7d4bac870b22eddf5a2977 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20200513103714-09dca8ec2884.mod 287 BLAKE2B ac895df309c4c2533900f7ff3aaecd59bf883fad6fde8fc7ffef9928fc8f18402fb2198bb3f0b75e876adb7d5d0e37073fc251d149245847ebdd95de1cdf6cd3 SHA512 44dc287d4a33c4225229768c59d1b9e61b51fdc27b1745a8161b17bdef4499cb08ebc565c56caa01673317cbef46cb228ac69b9ada7d4bac870b22eddf5a2977 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20200526211855-cb27e3aa2013.mod 353 BLAKE2B 7e159067adb934153bc2a45c1a091ea85083c9e52927db8aba3e7ef9e13f984dd738aaf3890e85f7daf86afdab8e5717775250715285c0edc05625a544664cd2 SHA512 17266a643d974e2fae18e7055986002b9705bd2a7fb1e3cd3664fe6dbefbc7a04aef6900146c1e1c3ed84bea8b4d1bda4d6c355af2cda013c01f19eed57568d5 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20210602131652-f16073e35f0c.mod 278 BLAKE2B bc29676533b5813b8383ab995cd9c117cfa3712c1a7091b504a3feb60614b704fd031692dabd7a479fef427efc584b697b74346fdea2fd6df6d09cca8efecf9e SHA512 dbc012381b6e5c891ca583f791ec02094b4d1c43f0c22d1d4a992497d5f2503fcc78fb8f119c891a474156dd8fcde92acc27e75f40cc026cd37913aa83298fc5 +DIST google.golang.org%2Fgenproto%2F@v%2Fv0.0.0-20210602131652-f16073e35f0c.zip 11160629 BLAKE2B 22ee67ad1080d743f680eaf4f208f8832f7d8c196d532dd0869a574cd3d1ec3f663b445ab8bbcb847fa422763f5ea49c9867b32eec4f7cf1ca20565653481871 SHA512 90fb80975cb11ac20012ad30211ad4f34907adc353ac037df4f7e14f516946bbded4cf33c0595f53d7aeb34fd0b5384ceca19318c5261e455c50cd0d2eff2e2b +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.19.0.mod 833 BLAKE2B 71052eaeaf40883bff624eecce8fd6f5669fdea9355e6ae0db9c86c841a62f7176d5ab58838d1645f59b9cb4ad4b636048aa3e9f1d7db521104b8f09dc535bc7 SHA512 38c4f75a0121cecd31b2628da3c3d77aeeb9b2c1974eef2d2d2bb7a3eb507d330debb7f14a724c8910174439b38ab54458096aaf665ea4af87a83f866ca0452e +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.20.1.mod 795 BLAKE2B b825f2ab62a96b9b164410f761228575fd9882de37635c09803b9d2ce682ebbec30f301fd874aafaad95a5aa2431ba25962073e1bd4f336d8cb137e5939a8708 SHA512 585d4cf68b50a70d7967ac3941a7a83b83ed5df1a31773589a38348b6fdf247eb49e7778f7054b78ba1a65eef48d004a815abad932876cb1af2c09deea9c0db8 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.21.1.mod 828 BLAKE2B a57ef0fe7edabd002918282ba9ef83386689db2688fd8f1b9ebedd191bb0b7059cc0b99d95974ab68112cd48e1865558d314dda64c71ab239de39fe6e8f0db5b SHA512 f9ab0c8ed5a58799a39f64c63b995badb24d8ba1148c7a1be1e3342d1b0d6a6e334fa2cab16f8e9396907e60386cbccb6495dbbe3ca09440bb878e10e1686d62 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.23.0.mod 762 BLAKE2B 3c67c1bfdf0cef36f702e4a56d42cd7861cc573282ecf1667c7b19b97b8329a67f34a4c2ef3b2b865cabbd35a03dc43284e4c1af90dd8bb6018b0d8a192484b5 SHA512 4ea69ff3644e3e51f4a9ce73325a995b119088a9c97fec4a4811d1d9f119799182cd4dac377e3b58d96e10b8f6ba500a85ad72463ef4305d04ed1c55261526c2 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.25.1.mod 532 BLAKE2B 4c46c03905fc660d54c7acdb5cd614db9429b0e1add087fa5068f41a72d04b2f776e8326d1181e63ce29078f075d2312f9b0baeaeb048ea3d73f2fdba111e35d SHA512 0171fadf89079d7c0f18b1401aedfd886888d0a4ec4e107aec191c3875c640990532e1f57a3f5306a2e5705ddcf7e09ab2ce4953710347c09deb1d9d5f2d3c1f +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.27.0.mod 562 BLAKE2B 33a46aa2516aa10a1bfed0431c4f3d41554aa8ab5cff1f259323c47999696d0cdf9113f162eebf3bbc18cea163f1c6f8225777653191380cfccf06e5921db81e SHA512 6e06146c3ee73338a24698b08d0091dca5cc67d033e1a98ca28157dccd8e056a3a2624c798180eda5917f90e1e37aff31158cb8ab2cedeb8e4578324719605ef +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.29.1.mod 542 BLAKE2B d2411d4096489755e1a83388e3b3271930614b11b5d677af4a7ce0ee9c5d4618bda9ccf29c9dce7a2d0254676dfea8bd54c88ec857473f4beaee92d61da9c209 SHA512 a8ff8c888452392a2026849edd07ad5aa36691f7cb30357c33aee3457e03cac9daf48195b90c2ea62b71337c37bcea23d7a5996eaddc4330749487789dd70fb3 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.33.1.mod 542 BLAKE2B e4b2b7b1fa60a14dbc498ae1ba77dfe6056d4f990c8b699323802ca3f5c31896c498d907c766b49c093d0c89edf7d57604daac7f64a543fc5e0745e7b6fd1bc2 SHA512 4e4f309652556a76b4dcd3bc14b32c69d8aac9dde500456d1d9f9f4c773a5aeaa19061f29f5148f7e815c0c5dd0ba377470975d004b0b73213206e7d5aeb89df +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.36.0.mod 608 BLAKE2B 01e491f455fd8b3faf2dabdc8ba3e343c67461f3c58621a9c63575940474e3b4346e4eb1c8f260e78f3ca7cfecddf54f7656f590665d3596e6af1391974b284f SHA512 33faa853ccdf8c52a82c9c44e4b5f2dae76e5cc2c1e8227036f8f5fe7f1b496066fa72a379714491c6d2ac14e0ea8fe5419dc0a1626f9e60933b897903377b45 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.37.0.mod 608 BLAKE2B 7de276dcb3541de0e9509c95860d13991855aa3f9193d32fe540fd41b28db88e3787c767073a6be9c294b6ece11742d80d13a98cbc1a57c48fe81d1bb7c45004 SHA512 bf2d4e70b656e1345aee9029d35a922424bdbdd05edb45fd8f0267af3a17da53d1d1ff005d58b99d721883e7371b2d2ea99fb67bda9ae880f5ea12a32d8f2078 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.38.0.mod 608 BLAKE2B 7de276dcb3541de0e9509c95860d13991855aa3f9193d32fe540fd41b28db88e3787c767073a6be9c294b6ece11742d80d13a98cbc1a57c48fe81d1bb7c45004 SHA512 bf2d4e70b656e1345aee9029d35a922424bdbdd05edb45fd8f0267af3a17da53d1d1ff005d58b99d721883e7371b2d2ea99fb67bda9ae880f5ea12a32d8f2078 +DIST google.golang.org%2Fgrpc%2F@v%2Fv1.38.0.zip 1561437 BLAKE2B 6d0db85a058df199dd8237906082862bba5de66e2c6f92e01e8d90a6473100a0a9075b7239be96495457d7b822b67ff84b9f00d6cbcc4cc2f24dfa3dd0977f4f SHA512 197022bcb7846cbc2257410b6bf0f1b64592e889b222633ed6c3cc3cc9efe1ab3ea36e57b5bd8fa2cf72bae75271821888e91a354b3cf57e3932f05a2bb8678c +DIST google.golang.org%2Fprotobuf%2F@v%2Fv0.0.0-20200109180630-ec00e32a8dfd.mod 83 BLAKE2B 4cef0579e4d6b156c1af532343070021171ead815734fe1210a0be6a8ba9bc5f3d11b97ee14cde810f2556bca76c206520f56363ee82af7409772d33301e413d SHA512 3cb3393e78f44d9de80074244756d5e309d19adca15e8313a392b925a687edad46e93c612da1539dc09d0c0072a063eede6f04fbd9e5671059e9857da0f7b1e6 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv0.0.0-20200221191635-4d8936d0db64.mod 128 BLAKE2B 79cca062b7c73fedaa5357b7b43af16adc1ef83a86be48787887ec450e022d31e0700b7ca4cf5dca03bf2ad9db79727da0fbb89c73bdb006db6b68d75c3e1751 SHA512 bf45db2ba4ae10b447c471118551d337125d5432142f5aa4ba964054d09393730c23373e42eb34574ca93f9b1a12364669be13ba7faa7d9908cacb982984d414 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv0.0.0-20200228230310-ab0ca4ff8a60.mod 158 BLAKE2B 8cafd0a40647244f2dd1d3d3da7ef8e376c6eb3823fca68d7aeb041d480e1147b70b70c49c65e47ff1e9b92eba026a109c67c7900da88cf8569ebd037912a35c SHA512 7d00ab108b35ba41ed8c6ad54533bbbd967e0cdf39e62cb8914c0c6e4a531c779a28ea3fb2a4a7f6f4af7f3c922246a8d8ec8eabb779758245cedbebfdd97378 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.20.1-0.20200309200217-e05f789c0967.mod 128 BLAKE2B e36e105129abbd7729a6d509724246766c16df526ce22637e92ca8f29bf854b66622a0afc5afe8e4ad29c9efc498c488a87020fad5969e044757d49ed4bd6399 SHA512 802c0df5ed11f0bb2e221c01152c6339d3634068f89aac760654411884e6b936b031cbfabad57c5add340f9d504edfcd683c77cb0ba7d753e06bc604095257ce +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.21.0.mod 158 BLAKE2B 46e19153fe487751cddafb86818a962b621b10c109e513ef22e7f5c93b44dd94c6a1636e6c03d0db6e5099536901821549859bcf84f06c00483637d5d4284c43 SHA512 4797f4305d5b0159aba0825c0432cc5678cb74e55cd95eb5c42e9879a62db5aefa76c6286a436aee9a31b096193e8a3bc2e67175f0296c9d5eca3d03e98ab2d9 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.22.0.mod 123 BLAKE2B 1c4e918b0eba97f6cbf2766da4d81d59be965582a63fcb5d876194d0e57575bfc91ed40418bd435b7cb13f244c44acbe00821098b52b6d64111a4f812e4a5909 SHA512 dab1668079153e90bea3913c9aae022543d17d61e275e3d0e2ba7dfda3dd8f82642bcfd1e4d4add2b8f4fed342efd66ee6c7d7fe1e65e67e4e62f2d0ffd2387c +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.23.0.mod 123 BLAKE2B 1c4e918b0eba97f6cbf2766da4d81d59be965582a63fcb5d876194d0e57575bfc91ed40418bd435b7cb13f244c44acbe00821098b52b6d64111a4f812e4a5909 SHA512 dab1668079153e90bea3913c9aae022543d17d61e275e3d0e2ba7dfda3dd8f82642bcfd1e4d4add2b8f4fed342efd66ee6c7d7fe1e65e67e4e62f2d0ffd2387c +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.23.1-0.20200526195155-81db48ad09cc.mod 123 BLAKE2B 1c4e918b0eba97f6cbf2766da4d81d59be965582a63fcb5d876194d0e57575bfc91ed40418bd435b7cb13f244c44acbe00821098b52b6d64111a4f812e4a5909 SHA512 dab1668079153e90bea3913c9aae022543d17d61e275e3d0e2ba7dfda3dd8f82642bcfd1e4d4add2b8f4fed342efd66ee6c7d7fe1e65e67e4e62f2d0ffd2387c +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.25.0.mod 186 BLAKE2B 7df4a9ba66d7fcfc40d73332ba6fcece38a38ffef4e9686fe7887272cdc81904438cfdd0e733224058289d24ee23efe087ed9a2b4f2dc31e7213bc3038ed9512 SHA512 1b0e5543fcdbca876b51ed261aa7b8abf09e985e4622111d46378893b7a2bbad882135fc1eb26ebbf97078800f6ad9f2983dd11c62a8aaa2ab1a4f0774585e65 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.26.0-rc.1.mod 83 BLAKE2B 0e4901ba1d4e31ef22f0f978ee7b7d926ac2cd3a1cb5d8d8a81a33e02f9dc81aad6508280d65659862c3a9bc0667c334cb6cd8c0c532d5fdb3735a415c2a5eca SHA512 a7b2aad691925341e3d1f6d1d1453b68386902a4e2e1c0deb406bc157d04328c5519a01ce938a33a6e358cbd9dc0c2f862c9822bde5314d2eb9d416d7bf789d2 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.26.0.mod 123 BLAKE2B 73f875413489557d8f0bbcd665c06356b900f87e2cd9ef0ee5aba218a3a910842912d36dc9e653afa538c99cc723d28327a8bec6eac1f6bd93277d70fa891339 SHA512 d618524aca1cb3e525060bb66b0c8f06c9ad6be5389be228d265dbcdb368442f4f0a7e98f8c9082916b2579d77e627a550904f0b1c058b7d5e45eb7ceb77c2e0 +DIST google.golang.org%2Fprotobuf%2F@v%2Fv1.26.0.zip 1557709 BLAKE2B bc672854cc46d48461bf28395c5be02fe99ff9da1d23e212078e549bf3e2beeaf953cc185e059c73a374f3e2662cb81fd6c3ff53472934964b8461f370b51a78 SHA512 de309c033d05be35503d6073e14ead585db4e6b75d478a674a37f93c7757e914c67bad446cf7ce04ccd49659d1ab2f9a024ee639a7536480ef92bb6b8b52dfdb +DIST gopkg.in%2Falecthomas%2Fkingpin.v2%2F@v%2Fv2.2.6.mod 38 BLAKE2B e7781691d8c15b764ef6c89fcdf20e69fc28d46e8df2703b6fdc342247595c10ed25e3cc5b30cd29b81c57837f5685e4122e1b2c218a51fffbb1567c85b0835a SHA512 585188d3a75067e6b7d8a8321959fe7df80c6a19f8668a87f0d1b8687c4d2cefc039167446f6d02f7eeeb147371bc7a673348213bcb07f4d90bebc0ccf9f2015 +DIST gopkg.in%2Fcheck.v1%2F@v%2Fv0.0.0-20161208181325-20d25e280405.mod 25 BLAKE2B 6470f3d94700c4d8b3176d692bdb91646750f2c6a866ff2ef4183aff1de01f024a8757f97b4626ec0355092e5f25e7ded91cd5be845f627d107c58b1daf400d7 SHA512 9ac0f80ef05881387cb2f48f81560f3207fe586ea16495383662e6d62e43d93fac01dfe72e1d0063d3ab065331dab3a8098d7da4f1830ba1aff6f27f8e1bc1b2 +DIST gopkg.in%2Fcheck.v1%2F@v%2Fv1.0.0-20180628173108-788fd7840127.mod 25 BLAKE2B 6470f3d94700c4d8b3176d692bdb91646750f2c6a866ff2ef4183aff1de01f024a8757f97b4626ec0355092e5f25e7ded91cd5be845f627d107c58b1daf400d7 SHA512 9ac0f80ef05881387cb2f48f81560f3207fe586ea16495383662e6d62e43d93fac01dfe72e1d0063d3ab065331dab3a8098d7da4f1830ba1aff6f27f8e1bc1b2 +DIST gopkg.in%2Fcheck.v1%2F@v%2Fv1.0.0-20190902080502-41f04d3bba15.mod 25 BLAKE2B 6470f3d94700c4d8b3176d692bdb91646750f2c6a866ff2ef4183aff1de01f024a8757f97b4626ec0355092e5f25e7ded91cd5be845f627d107c58b1daf400d7 SHA512 9ac0f80ef05881387cb2f48f81560f3207fe586ea16495383662e6d62e43d93fac01dfe72e1d0063d3ab065331dab3a8098d7da4f1830ba1aff6f27f8e1bc1b2 +DIST gopkg.in%2Fcheck.v1%2F@v%2Fv1.0.0-20190902080502-41f04d3bba15.zip 41481 BLAKE2B b952f04dc8d4717c839de5a5b7780ec2434915d11f897cc759647f71073dd3df717e1195ff2f4f804457195886c63620b342a089fc489f5deafa9c928708d4bb SHA512 40a523fc1dcc36677a0dc0e626313d44a308fa2ad5eedf7b616470ae2972dd8f5b78c18384efffa65d58391e60b704ed35db5557a5dce8362ae45204f64b721d +DIST gopkg.in%2Fcheggaaa%2Fpb.v1%2F@v%2Fv1.0.28.mod 31 BLAKE2B 1a4baffd98c62173795d54bc25845b710fe8391726fc5d67cd6025131f783a3d94cd474299d72f5f077dc529203dcdf7a069268dc30fa39d9b3f7fab566df45b SHA512 b8685a6e649de49671d079375ba2132a467bb015a29a7182744caa9464f5e7ac72a952b10faf04e5b6d745ec955b565dc03cbc4ca9849d23ebd5303a12f18401 +DIST gopkg.in%2Fcheggaaa%2Fpb.v1%2F@v%2Fv1.0.28.zip 18118 BLAKE2B 554da95a16c0993b4cf83b7cfa01a09f8a74c5d6ab80b3732bc066e82fa73abb8fc49f92f6d73acbf7296346f335f202de0d10604ed3e42b4d32d8b4169a0718 SHA512 6575eb0dea6524b8e5072a7eeb8d57f57ea2d6c6354d137b28befe9a85cc13bddf061fbe6f0da7d418bcb4ad293b38a3664424096930eadf5e16c4554cdd450f +DIST gopkg.in%2Ferrgo.v2%2F@v%2Fv2.1.0.mod 133 BLAKE2B c4ac637e2bf2d6635065be5213d73f23a1870054c58e9f1cce93af4627ed6fdefa96798b0fbbd27666573757f8b4a48c694ddf3f86c98e898124294459500771 SHA512 cac59fd7470fc9d3203dab6b9e881d4182cfca5acf0a19207a9aff2964d42f20422f9a164bb52b2fa73c523e3caafd63028189bd4190a1670870154dbf3e8178 +DIST gopkg.in%2Fini.v1%2F@v%2Fv1.51.0.mod 23 BLAKE2B 4e15082dd2b6e386e93baa78307538fba456343420c52605d453c6309f256e8062ea4b821d70c926096ae58a8feb33c6b796726d2dcc886c58e8293f99ac92a7 SHA512 7650ff592e6f5a0393f794fbdf17a28ad228a2d29ca79685c9ab8d9ec395554f1691b2a0d061e6248cf542f89be4d9a68884f7b24de7c8ddfef9c02cfeedda73 +DIST gopkg.in%2Fnatefinch%2Flumberjack.v2%2F@v%2Fv2.0.0.mod 40 BLAKE2B 33144c2d794f0c82dd97c993506bb6267aa9c65eb99c535e92b206dfdbba0d257a64b12d553f85ec2c770c87c196db9fda863c7f757778e4b36d4cb0fc98f844 SHA512 93ccbb29e7c38516a22d7ac174d4c2e9b87203061ae7bcdffa92499f30470e90d7e88f515f789e1a15c34cfaa6e7c50249e3d26ea1ef8b2afcd92dde62cba044 +DIST gopkg.in%2Fnatefinch%2Flumberjack.v2%2F@v%2Fv2.0.0.zip 17854 BLAKE2B 5580929fb891fd24550919ed250bbf70129f991a250669895a8b22d40ec40e691646dee8c243b39ce5f36accdfd749d46276b0358daf0512371f09f516819949 SHA512 26024daf1aec9a7b1e760b6fe789dd66d3f8300a9b413098c044d3f7c47d050dbad9809f9c807a1c8eb45d9d12d1821a45c8c8f0b14a96cfdf9752e271bb4de4 +DIST gopkg.in%2Fresty.v1%2F@v%2Fv1.12.0.mod 86 BLAKE2B a2c81f0cabd00084e6e52de82e9ba9a5bdf42d45123b7a58ebe4baa07b41631498c7590535884282869c4947b4f4f9ea0f41bfd28c1c7bbd516ea5631f207e30 SHA512 84c11a71dfd5f94cbcc79aaa8d387600ea3eec89cdb44bc63e55daad5700dc20aa719ce7a5c960cf97900231bedd118afbd93c408aec449e68ed5d8c5641ff57 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.0.0-20170812160011-eb3733d160e7.mod 24 BLAKE2B 1cb17a1c6b1eb33cebd983f9e965f6db03f5095441d7cd72aff6df805501eef4dc249c22ecc85da360c27696a7c4ae613f0769a1f89e73f286281de89ffd3ef2 SHA512 89b481cc62ed7a486990ebfcf65cf7a344e5d189deef680e6ddd82dc93f31d166af05fc27b4a95ea27c33fd3ced1b87d4050d617d52008ca059c4a5d3b6c26a9 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.2.1.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.2.2.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.2.3.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.2.4.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.2.5.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.2.8.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.3.0.mod 95 BLAKE2B adb3684980f1d8e6c23444e91028f8db55f1bc496114eb3508dbecf9917dbc8a0a4bed7c0d761123335a75b9ffe727e180f2d6aa5f84312edb05a798185c8362 SHA512 916ff67ddb6c2ba39905db4277ce42596d9ca5a42f8aa7f47f16335e78d91a1b30419fd1b7b6967b37e248363397ec527b38d2f500b3546edda5d2bce1944379 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.4.0.mod 95 BLAKE2B 888532a43aa7569fc03a62d78507081f30342eb4be40c01252683b16cd3658dd7b30d5f8a071dffe2c05f57bbee3afbc1ee4324c471788c633a878d498ff7d57 SHA512 2790882fbfa812468b9b3443630b1f1ee67a968eb20da8e4a1bfd410e4b516a8a7e77c07414b64f17e11e2151161b85d019e172cc833a45b19e66d4c70f89f82 +DIST gopkg.in%2Fyaml.v2%2F@v%2Fv2.4.0.zip 81183 BLAKE2B 0e3222d715fe7e9e8e9a10abad817f75bdd095f9af250d6bdf1ee2881930c739111de8b526175c9204995c48e0ade9852541a7f22b0ce1261f473986a2739182 SHA512 d6f4ac547609c943adfc6b518ff03ac09da566ba2b29466abe8f6db3d5a41ae7e5c187068dce4e77271905b1aa88497ca49a43bb9bbf9c94011b7ccf1b4b2f42 +DIST gopkg.in%2Fyaml.v3%2F@v%2Fv3.0.0-20200313102051-9f266ea9e77c.mod 95 BLAKE2B fbb87f0644ec9da5d4386358d23cdb15b0d23e8212e712f16f338455a3a0ad19fbfd63e92c955c359237ddfa8bb76d6d08280eead24d321668431891eca1e8ab SHA512 307ca9123efc577ca04828996ee9d8edbb51794ccb4b8d9f169ba689e7276aa5f6ae106a04b22b7fab853ffacfebcbf74468b64eaefd57445864c1fbc77fad9d +DIST gopkg.in%2Fyaml.v3%2F@v%2Fv3.0.0-20210107192922-496545a6307b.mod 95 BLAKE2B fbb87f0644ec9da5d4386358d23cdb15b0d23e8212e712f16f338455a3a0ad19fbfd63e92c955c359237ddfa8bb76d6d08280eead24d321668431891eca1e8ab SHA512 307ca9123efc577ca04828996ee9d8edbb51794ccb4b8d9f169ba689e7276aa5f6ae106a04b22b7fab853ffacfebcbf74468b64eaefd57445864c1fbc77fad9d +DIST gopkg.in%2Fyaml.v3%2F@v%2Fv3.0.0-20210107192922-496545a6307b.zip 105245 BLAKE2B f0bcfd9d097905364d9c2b032b92a8aad64b63e0942eb864759b156eb97ac58769fbc035acf4ba57bd55db1b6596499ddc6d36e6d2e5cc584c2a465256ca3a73 SHA512 f9c0400f1f5590d7185ae3fdac7adf1787a5f5198e52ebd02841b7df5113c5e34de6a66fa01b2f5735be4b21190dffb46e9d8b084ad5c00ebd99599a39ff73db +DIST honnef.co%2Fgo%2Ftools%2F@v%2Fv0.0.0-20190102054323-c2f93a96b099.mod 26 BLAKE2B db6cc87a17bed88b955e6b36a17568930239c94a969211b02c2d5acc70386fbea63ac44365a0d3241e900125bd64644d698d8f1bdcabc3e6cf99c47259c63df5 SHA512 d00ae74b24e7fb3ff351ff68b88e59636153bbcf92b36e81e91556e3e75a7ccfb08ce471f757f92fd7612378944de3d7309c73923812e2df6a26b74e999ca9ce +DIST honnef.co%2Fgo%2Ftools%2F@v%2Fv0.0.0-20190106161140-3f1c8253044a.mod 26 BLAKE2B db6cc87a17bed88b955e6b36a17568930239c94a969211b02c2d5acc70386fbea63ac44365a0d3241e900125bd64644d698d8f1bdcabc3e6cf99c47259c63df5 SHA512 d00ae74b24e7fb3ff351ff68b88e59636153bbcf92b36e81e91556e3e75a7ccfb08ce471f757f92fd7612378944de3d7309c73923812e2df6a26b74e999ca9ce +DIST honnef.co%2Fgo%2Ftools%2F@v%2Fv0.0.0-20190418001031-e561f6794a2a.mod 26 BLAKE2B db6cc87a17bed88b955e6b36a17568930239c94a969211b02c2d5acc70386fbea63ac44365a0d3241e900125bd64644d698d8f1bdcabc3e6cf99c47259c63df5 SHA512 d00ae74b24e7fb3ff351ff68b88e59636153bbcf92b36e81e91556e3e75a7ccfb08ce471f757f92fd7612378944de3d7309c73923812e2df6a26b74e999ca9ce +DIST honnef.co%2Fgo%2Ftools%2F@v%2Fv0.0.0-20190523083050-ea95bdfd59fc.mod 26 BLAKE2B db6cc87a17bed88b955e6b36a17568930239c94a969211b02c2d5acc70386fbea63ac44365a0d3241e900125bd64644d698d8f1bdcabc3e6cf99c47259c63df5 SHA512 d00ae74b24e7fb3ff351ff68b88e59636153bbcf92b36e81e91556e3e75a7ccfb08ce471f757f92fd7612378944de3d7309c73923812e2df6a26b74e999ca9ce +DIST honnef.co%2Fgo%2Ftools%2F@v%2Fv0.0.1-2019.2.3.mod 300 BLAKE2B 3e3f5a2be0918cbaacd5e43e59fcc6c7c6999645f0c9214cd5a522c31d34b6d3dad61e3ddae8ccdb2f3f0d90b406c047802ee3d9d54dc40fe6eff9cd35620792 SHA512 0c8aa788d0c03d6d049f0dd7468d0f81ce2131ccedd5a5a3a18362b7d30eef7ef325277844eefe4b707b1ad71c6f83a44e110b7af7b98e05406d347237a7bafb +DIST rsc.io%2Fbinaryregexp%2F@v%2Fv0.2.0.mod 36 BLAKE2B 61110bed2b9e99e0250cf6e8b842257202c89b3462edf9368b73cab29f9dbd4dcc66c3e290a1d6329b7d62321eecc52082a8c4c0797eac743a29a8a00910a93f SHA512 db50ff677b0bdccbc1a1ad3df7c5cc76f2fcccf3ab99d08d1c2868440eb9b893fe89452f4286f7d42f2f16abf0f4acda67fe86e174dcfa730a743aafcc166774 +DIST sigs.k8s.io%2Fyaml%2F@v%2Fv1.2.0.mod 106 BLAKE2B bd5d8af6c5046c6de9b171ea2915c308de08e9696a8c82b3831bf5dc01f8aefc21b13b5b9a210f24ff8782909308137c25363074753427109e009889b7860f5f SHA512 712a936d07bfe4c2e67a4f199346d7e96db35486a0f051365c4636ddbc6505cf540995bc67e6a03b1b58e1e4816ece573418f23bf9ce93fcdc141a05f922f527 +DIST sigs.k8s.io%2Fyaml%2F@v%2Fv1.2.0.zip 20937 BLAKE2B 1bc20da34d11c6704b2d34eb93b06fd376d1b0932626c7dcbdaf43df8c8eb14e07529e84e028576bb67ce1961c3c86d0303d375d8d0aa372ded259c3561b9291 SHA512 52a52b3d380ae6e2cbe1b2c849d3089f74aa876fb3fadfbd02eada97446e0f2cf387f10ddb527f2dfefd57dccba8c82b0b349efbecaa0e6e3d00dc2b5d4fc21e diff --git a/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/etcdctl-3.5.0.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/etcdctl-3.5.0.ebuild new file mode 100644 index 0000000000..6791566d89 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/etcdctl-3.5.0.ebuild @@ -0,0 +1,607 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DESCRIPTION="The etcd command line client, v3, compatible with v2" +HOMEPAGE="https://github.com/etcd-io/etcd" +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="amd64 arm64" +IUSE="" + +S=${WORKDIR}/etcd-${PV} + +inherit coreos-go-utils go-module + +# generated by merging /go.sum and /etcdctl/go.sum +EGO_SUM=( + "cloud.google.com/go v0.26.0/go.mod" + "cloud.google.com/go v0.34.0/go.mod" + "cloud.google.com/go v0.38.0/go.mod" + "cloud.google.com/go v0.44.1/go.mod" + "cloud.google.com/go v0.44.2/go.mod" + "cloud.google.com/go v0.45.1/go.mod" + "cloud.google.com/go v0.46.3" + "cloud.google.com/go v0.46.3/go.mod" + "cloud.google.com/go/bigquery v1.0.1/go.mod" + "cloud.google.com/go/datastore v1.0.0/go.mod" + "cloud.google.com/go/firestore v1.1.0/go.mod" + "cloud.google.com/go/pubsub v1.0.1/go.mod" + "cloud.google.com/go/storage v1.0.0/go.mod" + "dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod" + "github.com/BurntSushi/toml v0.3.1" + "github.com/BurntSushi/toml v0.3.1/go.mod" + "github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod" + "github.com/OneOfOne/xxhash v1.2.2/go.mod" + "github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod" + "github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod" + "github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod" + "github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod" + "github.com/alecthomas/units v0.0.0-20190924025748-f65c72e2690d/go.mod" + "github.com/antihax/optional v1.0.0/go.mod" + "github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod" + "github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod" + "github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod" + "github.com/benbjohnson/clock v1.0.3" + "github.com/benbjohnson/clock v1.0.3/go.mod" + "github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod" + "github.com/beorn7/perks v1.0.0/go.mod" + "github.com/beorn7/perks v1.0.1" + "github.com/beorn7/perks v1.0.1/go.mod" + "github.com/bgentry/speakeasy v0.1.0" + "github.com/bgentry/speakeasy v0.1.0/go.mod" + "github.com/bketelsen/crypt v0.0.3-0.20200106085610-5cbc8cc4026c/go.mod" + "github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod" + "github.com/certifi/gocertifi v0.0.0-20191021191039-0944d244cd40/go.mod" + "github.com/certifi/gocertifi v0.0.0-20200922220541-2c3bb06c6054" + "github.com/certifi/gocertifi v0.0.0-20200922220541-2c3bb06c6054/go.mod" + "github.com/cespare/xxhash v1.1.0" + "github.com/cespare/xxhash v1.1.0/go.mod" + "github.com/cespare/xxhash/v2 v2.1.1" + "github.com/cespare/xxhash/v2 v2.1.1/go.mod" + "github.com/client9/misspell v0.3.4/go.mod" + "github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod" + "github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod" + "github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5" + "github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5/go.mod" + "github.com/cockroachdb/errors v1.2.4" + "github.com/cockroachdb/errors v1.2.4/go.mod" + "github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f" + "github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f/go.mod" + "github.com/coreos/bbolt v1.3.2/go.mod" + "github.com/coreos/etcd v3.3.13+incompatible/go.mod" + "github.com/coreos/go-semver v0.3.0" + "github.com/coreos/go-semver v0.3.0/go.mod" + "github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e" + "github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e/go.mod" + "github.com/coreos/go-systemd/v22 v22.3.2" + "github.com/coreos/go-systemd/v22 v22.3.2/go.mod" + "github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f/go.mod" + "github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod" + "github.com/cpuguy83/go-md2man/v2 v2.0.0" + "github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod" + "github.com/creack/pty v1.1.9/go.mod" + "github.com/creack/pty v1.1.11/go.mod" + "github.com/davecgh/go-spew v1.1.0/go.mod" + "github.com/davecgh/go-spew v1.1.1" + "github.com/davecgh/go-spew v1.1.1/go.mod" + "github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod" + "github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod" + "github.com/dustin/go-humanize v1.0.0" + "github.com/dustin/go-humanize v1.0.0/go.mod" + "github.com/envoyproxy/go-control-plane v0.9.0/go.mod" + "github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod" + "github.com/envoyproxy/go-control-plane v0.9.4/go.mod" + "github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod" + "github.com/envoyproxy/go-control-plane v0.9.9-0.20210217033140-668b12f5399d/go.mod" + "github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod" + "github.com/etcd-io/gofail v0.0.0-20190801230047-ad7f989257ca/go.mod" + "github.com/fatih/color v1.7.0" + "github.com/fatih/color v1.7.0/go.mod" + "github.com/form3tech-oss/jwt-go v3.2.3+incompatible" + "github.com/form3tech-oss/jwt-go v3.2.3+incompatible/go.mod" + "github.com/fsnotify/fsnotify v1.4.7/go.mod" + "github.com/getsentry/raven-go v0.2.0" + "github.com/getsentry/raven-go v0.2.0/go.mod" + "github.com/ghodss/yaml v1.0.0/go.mod" + "github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod" + "github.com/go-kit/kit v0.8.0/go.mod" + "github.com/go-kit/kit v0.9.0/go.mod" + "github.com/go-kit/log v0.1.0/go.mod" + "github.com/go-logfmt/logfmt v0.3.0/go.mod" + "github.com/go-logfmt/logfmt v0.4.0/go.mod" + "github.com/go-logfmt/logfmt v0.5.0/go.mod" + "github.com/go-stack/stack v1.8.0/go.mod" + "github.com/godbus/dbus/v5 v5.0.4/go.mod" + "github.com/gogo/protobuf v1.1.1/go.mod" + "github.com/gogo/protobuf v1.2.1/go.mod" + "github.com/gogo/protobuf v1.3.1/go.mod" + "github.com/gogo/protobuf v1.3.2" + "github.com/gogo/protobuf v1.3.2/go.mod" + "github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod" + "github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef/go.mod" + "github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da" + "github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod" + "github.com/golang/mock v1.1.1/go.mod" + "github.com/golang/mock v1.2.0/go.mod" + "github.com/golang/mock v1.3.1/go.mod" + "github.com/golang/protobuf v1.2.0/go.mod" + "github.com/golang/protobuf v1.3.1/go.mod" + "github.com/golang/protobuf v1.3.2/go.mod" + "github.com/golang/protobuf v1.3.3/go.mod" + "github.com/golang/protobuf v1.4.0-rc.1/go.mod" + "github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod" + "github.com/golang/protobuf v1.4.0-rc.2/go.mod" + "github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod" + "github.com/golang/protobuf v1.4.0/go.mod" + "github.com/golang/protobuf v1.4.1/go.mod" + "github.com/golang/protobuf v1.4.2/go.mod" + "github.com/golang/protobuf v1.4.3/go.mod" + "github.com/golang/protobuf v1.5.0/go.mod" + "github.com/golang/protobuf v1.5.1/go.mod" + "github.com/golang/protobuf v1.5.2" + "github.com/golang/protobuf v1.5.2/go.mod" + "github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod" + "github.com/google/btree v1.0.0/go.mod" + "github.com/google/btree v1.0.1" + "github.com/google/btree v1.0.1/go.mod" + "github.com/google/go-cmp v0.2.0/go.mod" + "github.com/google/go-cmp v0.3.0/go.mod" + "github.com/google/go-cmp v0.3.1/go.mod" + "github.com/google/go-cmp v0.4.0/go.mod" + "github.com/google/go-cmp v0.5.0/go.mod" + "github.com/google/go-cmp v0.5.4/go.mod" + "github.com/google/go-cmp v0.5.5" + "github.com/google/go-cmp v0.5.5/go.mod" + "github.com/google/gofuzz v1.0.0/go.mod" + "github.com/google/martian v2.1.0+incompatible/go.mod" + "github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod" + "github.com/google/pprof v0.0.0-20190515194954-54271f7e092f/go.mod" + "github.com/google/renameio v0.1.0/go.mod" + "github.com/google/uuid v1.1.2/go.mod" + "github.com/googleapis/gax-go/v2 v2.0.4/go.mod" + "github.com/googleapis/gax-go/v2 v2.0.5/go.mod" + "github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod" + "github.com/gorilla/websocket v1.4.2" + "github.com/gorilla/websocket v1.4.2/go.mod" + "github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod" + "github.com/grpc-ecosystem/go-grpc-middleware v1.3.0" + "github.com/grpc-ecosystem/go-grpc-middleware v1.3.0/go.mod" + "github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0" + "github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod" + "github.com/grpc-ecosystem/grpc-gateway v1.9.0/go.mod" + "github.com/grpc-ecosystem/grpc-gateway v1.16.0" + "github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod" + "github.com/hashicorp/consul/api v1.1.0/go.mod" + "github.com/hashicorp/consul/sdk v0.1.1/go.mod" + "github.com/hashicorp/errwrap v1.0.0/go.mod" + "github.com/hashicorp/go-cleanhttp v0.5.1/go.mod" + "github.com/hashicorp/go-immutable-radix v1.0.0/go.mod" + "github.com/hashicorp/go-msgpack v0.5.3/go.mod" + "github.com/hashicorp/go-multierror v1.0.0/go.mod" + "github.com/hashicorp/go-rootcerts v1.0.0/go.mod" + "github.com/hashicorp/go-sockaddr v1.0.0/go.mod" + "github.com/hashicorp/go-syslog v1.0.0/go.mod" + "github.com/hashicorp/go-uuid v1.0.0/go.mod" + "github.com/hashicorp/go-uuid v1.0.1/go.mod" + "github.com/hashicorp/go.net v0.0.1/go.mod" + "github.com/hashicorp/golang-lru v0.5.0/go.mod" + "github.com/hashicorp/golang-lru v0.5.1/go.mod" + "github.com/hashicorp/hcl v1.0.0/go.mod" + "github.com/hashicorp/logutils v1.0.0/go.mod" + "github.com/hashicorp/mdns v1.0.0/go.mod" + "github.com/hashicorp/memberlist v0.1.3/go.mod" + "github.com/hashicorp/serf v0.8.2/go.mod" + "github.com/inconshreveable/mousetrap v1.0.0" + "github.com/inconshreveable/mousetrap v1.0.0/go.mod" + "github.com/jonboulle/clockwork v0.1.0/go.mod" + "github.com/jonboulle/clockwork v0.2.2" + "github.com/jonboulle/clockwork v0.2.2/go.mod" + "github.com/jpillora/backoff v1.0.0/go.mod" + "github.com/json-iterator/go v1.1.6/go.mod" + "github.com/json-iterator/go v1.1.10/go.mod" + "github.com/json-iterator/go v1.1.11" + "github.com/json-iterator/go v1.1.11/go.mod" + "github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod" + "github.com/jtolds/gls v4.20.0+incompatible/go.mod" + "github.com/julienschmidt/httprouter v1.2.0/go.mod" + "github.com/julienschmidt/httprouter v1.3.0/go.mod" + "github.com/kisielk/errcheck v1.1.0/go.mod" + "github.com/kisielk/errcheck v1.2.0/go.mod" + "github.com/kisielk/errcheck v1.5.0/go.mod" + "github.com/kisielk/gotool v1.0.0/go.mod" + "github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod" + "github.com/konsorten/go-windows-terminal-sequences v1.0.3/go.mod" + "github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod" + "github.com/kr/pretty v0.1.0" + "github.com/kr/pretty v0.1.0/go.mod" + "github.com/kr/pty v1.1.1/go.mod" + "github.com/kr/text v0.1.0/go.mod" + "github.com/kr/text v0.2.0" + "github.com/kr/text v0.2.0/go.mod" + "github.com/magiconair/properties v1.8.1/go.mod" + "github.com/mattn/go-colorable v0.0.9" + "github.com/mattn/go-colorable v0.0.9/go.mod" + "github.com/mattn/go-isatty v0.0.3" + "github.com/mattn/go-isatty v0.0.3/go.mod" + "github.com/mattn/go-runewidth v0.0.9" + "github.com/mattn/go-runewidth v0.0.9/go.mod" + "github.com/matttproud/golang_protobuf_extensions v1.0.1" + "github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod" + "github.com/miekg/dns v1.0.14/go.mod" + "github.com/mitchellh/cli v1.0.0/go.mod" + "github.com/mitchellh/go-homedir v1.0.0/go.mod" + "github.com/mitchellh/go-homedir v1.1.0/go.mod" + "github.com/mitchellh/go-testing-interface v1.0.0/go.mod" + "github.com/mitchellh/gox v0.4.0/go.mod" + "github.com/mitchellh/iochan v1.0.0/go.mod" + "github.com/mitchellh/mapstructure v0.0.0-20160808181253-ca63d7c062ee/go.mod" + "github.com/mitchellh/mapstructure v1.1.2/go.mod" + "github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod" + "github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd" + "github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod" + "github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod" + "github.com/modern-go/reflect2 v1.0.1" + "github.com/modern-go/reflect2 v1.0.1/go.mod" + "github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod" + "github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod" + "github.com/oklog/ulid v1.3.1/go.mod" + "github.com/olekukonko/tablewriter v0.0.5" + "github.com/olekukonko/tablewriter v0.0.5/go.mod" + "github.com/opentracing/opentracing-go v1.1.0/go.mod" + "github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod" + "github.com/pelletier/go-toml v1.2.0/go.mod" + "github.com/pkg/errors v0.8.0/go.mod" + "github.com/pkg/errors v0.8.1/go.mod" + "github.com/pkg/errors v0.9.1" + "github.com/pkg/errors v0.9.1/go.mod" + "github.com/pmezard/go-difflib v1.0.0" + "github.com/pmezard/go-difflib v1.0.0/go.mod" + "github.com/posener/complete v1.1.1/go.mod" + "github.com/prometheus/client_golang v0.9.1/go.mod" + "github.com/prometheus/client_golang v0.9.3/go.mod" + "github.com/prometheus/client_golang v1.0.0/go.mod" + "github.com/prometheus/client_golang v1.7.1/go.mod" + "github.com/prometheus/client_golang v1.11.0" + "github.com/prometheus/client_golang v1.11.0/go.mod" + "github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod" + "github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod" + "github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod" + "github.com/prometheus/client_model v0.2.0" + "github.com/prometheus/client_model v0.2.0/go.mod" + "github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod" + "github.com/prometheus/common v0.4.0/go.mod" + "github.com/prometheus/common v0.4.1/go.mod" + "github.com/prometheus/common v0.10.0/go.mod" + "github.com/prometheus/common v0.26.0" + "github.com/prometheus/common v0.26.0/go.mod" + "github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod" + "github.com/prometheus/procfs v0.0.0-20190507164030-5867b95ac084/go.mod" + "github.com/prometheus/procfs v0.0.2/go.mod" + "github.com/prometheus/procfs v0.1.3/go.mod" + "github.com/prometheus/procfs v0.6.0" + "github.com/prometheus/procfs v0.6.0/go.mod" + "github.com/prometheus/tsdb v0.7.1/go.mod" + "github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod" + "github.com/rogpeppe/fastuuid v1.2.0/go.mod" + "github.com/rogpeppe/go-internal v1.3.0/go.mod" + "github.com/russross/blackfriday/v2 v2.0.1/go.mod" + "github.com/russross/blackfriday/v2 v2.0.1" + "github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod" + "github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod" + "github.com/shurcooL/sanitized_anchor_name v1.0.0" + "github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod" + "github.com/sirupsen/logrus v1.2.0/go.mod" + "github.com/sirupsen/logrus v1.4.2/go.mod" + "github.com/sirupsen/logrus v1.6.0/go.mod" + "github.com/sirupsen/logrus v1.7.0" + "github.com/sirupsen/logrus v1.7.0/go.mod" + "github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod" + "github.com/smartystreets/goconvey v1.6.4/go.mod" + "github.com/soheilhy/cmux v0.1.4/go.mod" + "github.com/soheilhy/cmux v0.1.5" + "github.com/soheilhy/cmux v0.1.5/go.mod" + "github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod" + "github.com/spf13/afero v1.1.2/go.mod" + "github.com/spf13/cast v1.3.0/go.mod" + "github.com/spf13/cobra v1.1.3" + "github.com/spf13/cobra v1.1.3/go.mod" + "github.com/spf13/jwalterweatherman v1.0.0/go.mod" + "github.com/spf13/pflag v1.0.3/go.mod" + "github.com/spf13/pflag v1.0.5" + "github.com/spf13/pflag v1.0.5/go.mod" + "github.com/spf13/viper v1.7.0/go.mod" + "github.com/stretchr/objx v0.1.0/go.mod" + "github.com/stretchr/objx v0.1.1/go.mod" + "github.com/stretchr/testify v1.2.2/go.mod" + "github.com/stretchr/testify v1.3.0/go.mod" + "github.com/stretchr/testify v1.4.0/go.mod" + "github.com/stretchr/testify v1.5.1/go.mod" + "github.com/stretchr/testify v1.7.0" + "github.com/stretchr/testify v1.7.0/go.mod" + "github.com/subosito/gotenv v1.2.0/go.mod" + "github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod" + "github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802" + "github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802/go.mod" + "github.com/urfave/cli v1.22.4" + "github.com/urfave/cli v1.22.4/go.mod" + "github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2" + "github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod" + "github.com/yuin/goldmark v1.1.27/go.mod" + "github.com/yuin/goldmark v1.2.1/go.mod" + "github.com/yuin/goldmark v1.3.5/go.mod" + "go.etcd.io/bbolt v1.3.2/go.mod" + "go.etcd.io/bbolt v1.3.6" + "go.etcd.io/bbolt v1.3.6/go.mod" + "go.opencensus.io v0.21.0/go.mod" + "go.opencensus.io v0.22.0/go.mod" + "go.opentelemetry.io/contrib v0.20.0" + "go.opentelemetry.io/contrib v0.20.0/go.mod" + "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.20.0" + "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.20.0/go.mod" + "go.opentelemetry.io/otel v0.20.0" + "go.opentelemetry.io/otel v0.20.0/go.mod" + "go.opentelemetry.io/otel/exporters/otlp v0.20.0" + "go.opentelemetry.io/otel/exporters/otlp v0.20.0/go.mod" + "go.opentelemetry.io/otel/metric v0.20.0" + "go.opentelemetry.io/otel/metric v0.20.0/go.mod" + "go.opentelemetry.io/otel/oteltest v0.20.0" + "go.opentelemetry.io/otel/oteltest v0.20.0/go.mod" + "go.opentelemetry.io/otel/sdk v0.20.0" + "go.opentelemetry.io/otel/sdk v0.20.0/go.mod" + "go.opentelemetry.io/otel/sdk/export/metric v0.20.0" + "go.opentelemetry.io/otel/sdk/export/metric v0.20.0/go.mod" + "go.opentelemetry.io/otel/sdk/metric v0.20.0" + "go.opentelemetry.io/otel/sdk/metric v0.20.0/go.mod" + "go.opentelemetry.io/otel/trace v0.20.0" + "go.opentelemetry.io/otel/trace v0.20.0/go.mod" + "go.opentelemetry.io/proto/otlp v0.7.0" + "go.opentelemetry.io/proto/otlp v0.7.0/go.mod" + "go.uber.org/atomic v1.4.0/go.mod" + "go.uber.org/atomic v1.7.0" + "go.uber.org/atomic v1.7.0/go.mod" + "go.uber.org/goleak v1.1.10" + "go.uber.org/goleak v1.1.10/go.mod" + "go.uber.org/multierr v1.1.0/go.mod" + "go.uber.org/multierr v1.6.0" + "go.uber.org/multierr v1.6.0/go.mod" + "go.uber.org/zap v1.10.0/go.mod" + "go.uber.org/zap v1.17.0" + "go.uber.org/zap v1.17.0/go.mod" + "golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod" + "golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod" + "golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod" + "golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod" + "golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod" + "golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod" + "golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod" + "golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0" + "golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0/go.mod" + "golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod" + "golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod" + "golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod" + "golang.org/x/exp v0.0.0-20190829153037-c13cbed26979/go.mod" + "golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod" + "golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod" + "golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod" + "golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod" + "golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod" + "golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod" + "golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod" + "golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod" + "golang.org/x/lint v0.0.0-20190909230951-414d861bb4ac/go.mod" + "golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod" + "golang.org/x/lint v0.0.0-20210508222113-6edffad5e616" + "golang.org/x/lint v0.0.0-20210508222113-6edffad5e616/go.mod" + "golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod" + "golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod" + "golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod" + "golang.org/x/mod v0.1.0/go.mod" + "golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod" + "golang.org/x/mod v0.2.0/go.mod" + "golang.org/x/mod v0.3.0/go.mod" + "golang.org/x/mod v0.4.2/go.mod" + "golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod" + "golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod" + "golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod" + "golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod" + "golang.org/x/net v0.0.0-20181201002055-351d144fa1fc/go.mod" + "golang.org/x/net v0.0.0-20181220203305-927f97764cc3/go.mod" + "golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod" + "golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod" + "golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod" + "golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod" + "golang.org/x/net v0.0.0-20190501004415-9ce7a6920f09/go.mod" + "golang.org/x/net v0.0.0-20190503192946-f4e77d36d62c/go.mod" + "golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod" + "golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod" + "golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod" + "golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod" + "golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod" + "golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod" + "golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod" + "golang.org/x/net v0.0.0-20201202161906-c7110b5ffcbb/go.mod" + "golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4" + "golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod" + "golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod" + "golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod" + "golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod" + "golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d" + "golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod" + "golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod" + "golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod" + "golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod" + "golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod" + "golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod" + "golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod" + "golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod" + "golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod" + "golang.org/x/sync v0.0.0-20210220032951-036812b2e83c" + "golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod" + "golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod" + "golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod" + "golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod" + "golang.org/x/sys v0.0.0-20181026203630-95b1ffbd15a5/go.mod" + "golang.org/x/sys v0.0.0-20181107165924-66b7b1311ac8/go.mod" + "golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod" + "golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod" + "golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod" + "golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod" + "golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod" + "golang.org/x/sys v0.0.0-20190502145724-3ef323f4f1fd/go.mod" + "golang.org/x/sys v0.0.0-20190507160741-ecd444e8653b/go.mod" + "golang.org/x/sys v0.0.0-20190606165138-5da285871e9c/go.mod" + "golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0/go.mod" + "golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod" + "golang.org/x/sys v0.0.0-20200106162015-b016eb3dc98e/go.mod" + "golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod" + "golang.org/x/sys v0.0.0-20200615200032-f1bc736245b1/go.mod" + "golang.org/x/sys v0.0.0-20200625212154-ddb9806d33ae/go.mod" + "golang.org/x/sys v0.0.0-20200923182605-d9f96fdee20d/go.mod" + "golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod" + "golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod" + "golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod" + "golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod" + "golang.org/x/sys v0.0.0-20210403161142-5e06dd20ab57/go.mod" + "golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod" + "golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40" + "golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40/go.mod" + "golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod" + "golang.org/x/text v0.3.0/go.mod" + "golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod" + "golang.org/x/text v0.3.2/go.mod" + "golang.org/x/text v0.3.3/go.mod" + "golang.org/x/text v0.3.5" + "golang.org/x/text v0.3.5/go.mod" + "golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod" + "golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod" + "golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba" + "golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba/go.mod" + "golang.org/x/tools v0.0.0-20180221164845-07fd8470d635/go.mod" + "golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod" + "golang.org/x/tools v0.0.0-20181030221726-6c7e314b6563/go.mod" + "golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod" + "golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod" + "golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod" + "golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod" + "golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod" + "golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod" + "golang.org/x/tools v0.0.0-20190425150028-36563e24a262/go.mod" + "golang.org/x/tools v0.0.0-20190506145303-2d16b83fe98c/go.mod" + "golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod" + "golang.org/x/tools v0.0.0-20190606124116-d0a3d012864b/go.mod" + "golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod" + "golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod" + "golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod" + "golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod" + "golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod" + "golang.org/x/tools v0.0.0-20191108193012-7d206e10da11/go.mod" + "golang.org/x/tools v0.0.0-20191112195655-aa38f8e97acc/go.mod" + "golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod" + "golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod" + "golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod" + "golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod" + "golang.org/x/tools v0.1.2" + "golang.org/x/tools v0.1.2/go.mod" + "golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod" + "golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod" + "golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod" + "golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1" + "golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod" + "google.golang.org/api v0.4.0/go.mod" + "google.golang.org/api v0.7.0/go.mod" + "google.golang.org/api v0.8.0/go.mod" + "google.golang.org/api v0.9.0/go.mod" + "google.golang.org/api v0.13.0/go.mod" + "google.golang.org/appengine v1.1.0/go.mod" + "google.golang.org/appengine v1.4.0/go.mod" + "google.golang.org/appengine v1.5.0/go.mod" + "google.golang.org/appengine v1.6.1" + "google.golang.org/appengine v1.6.1/go.mod" + "google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod" + "google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod" + "google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod" + "google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod" + "google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod" + "google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod" + "google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod" + "google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod" + "google.golang.org/genproto v0.0.0-20191108220845-16a3f7862a1a/go.mod" + "google.golang.org/genproto v0.0.0-20200423170343-7949de9c1215/go.mod" + "google.golang.org/genproto v0.0.0-20200513103714-09dca8ec2884/go.mod" + "google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod" + "google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c" + "google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c/go.mod" + "google.golang.org/grpc v1.19.0/go.mod" + "google.golang.org/grpc v1.20.1/go.mod" + "google.golang.org/grpc v1.21.1/go.mod" + "google.golang.org/grpc v1.23.0/go.mod" + "google.golang.org/grpc v1.25.1/go.mod" + "google.golang.org/grpc v1.27.0/go.mod" + "google.golang.org/grpc v1.29.1/go.mod" + "google.golang.org/grpc v1.33.1/go.mod" + "google.golang.org/grpc v1.36.0/go.mod" + "google.golang.org/grpc v1.37.0/go.mod" + "google.golang.org/grpc v1.38.0" + "google.golang.org/grpc v1.38.0/go.mod" + "google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod" + "google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod" + "google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod" + "google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod" + "google.golang.org/protobuf v1.21.0/go.mod" + "google.golang.org/protobuf v1.22.0/go.mod" + "google.golang.org/protobuf v1.23.0/go.mod" + "google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod" + "google.golang.org/protobuf v1.25.0/go.mod" + "google.golang.org/protobuf v1.26.0-rc.1/go.mod" + "google.golang.org/protobuf v1.26.0" + "google.golang.org/protobuf v1.26.0/go.mod" + "gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod" + "gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod" + "gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod" + "gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15" + "gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod" + "gopkg.in/cheggaaa/pb.v1 v1.0.28" + "gopkg.in/cheggaaa/pb.v1 v1.0.28/go.mod" + "gopkg.in/errgo.v2 v2.1.0/go.mod" + "gopkg.in/ini.v1 v1.51.0/go.mod" + "gopkg.in/natefinch/lumberjack.v2 v2.0.0" + "gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod" + "gopkg.in/resty.v1 v1.12.0/go.mod" + "gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod" + "gopkg.in/yaml.v2 v2.2.1/go.mod" + "gopkg.in/yaml.v2 v2.2.2/go.mod" + "gopkg.in/yaml.v2 v2.2.3/go.mod" + "gopkg.in/yaml.v2 v2.2.4/go.mod" + "gopkg.in/yaml.v2 v2.2.5/go.mod" + "gopkg.in/yaml.v2 v2.2.8/go.mod" + "gopkg.in/yaml.v2 v2.3.0/go.mod" + "gopkg.in/yaml.v2 v2.4.0" + "gopkg.in/yaml.v2 v2.4.0/go.mod" + "gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod" + "gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b" + "gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod" + "honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod" + "honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod" + "honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod" + "honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod" + "honnef.co/go/tools v0.0.1-2019.2.3/go.mod" + "rsc.io/binaryregexp v0.2.0/go.mod" + "sigs.k8s.io/yaml v1.2.0" + "sigs.k8s.io/yaml v1.2.0/go.mod" +) + +go-module_set_globals + +SRC_URI="${HOMEPAGE}/archive/v${PV}.tar.gz -> ${P}.tar.gz + ${EGO_SUM_SRC_URI}" + +src_compile() { + go_export + { cd etcdctl && CGO_ENABLED=0 go build -v -installsuffix=cgo -ldflags=-X=go.etcd.io/etcd/api/v3/version.GitSHA=GitNotFound -o=../bin/etcdctl . && cd .. ; } || die "build failed" +} + +src_install() { + dobin ${WORKDIR}/etcd-${PV}/bin/etcdctl +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-db/etcdctl/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/ChangeLog b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/ChangeLog new file mode 100644 index 0000000000..6e69f814a4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/ChangeLog @@ -0,0 +1,17 @@ +# ChangeLog for dev-lang/go-bootstrap +# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 +# $Header: /var/cvsroot/gentoo-x86/dev-lang/go-bootstrap/ChangeLog,v 1.2 2015/03/18 00:51:29 williamh Exp $ + +*go-bootstrap-1.4.2 (18 Mar 2015) + + 18 Mar 2015; William Hubbs +go-bootstrap-1.4.2.ebuild: + version bump + +*go-bootstrap-1.4.1 (20 Jan 2015) + + 20 Jan 2015; William Hubbs +go-bootstrap-1.4.1.ebuild, + +metadata.xml: + Initial commit of go-bootstrap for bug #536960. + go-bootstrap is intended only as a build time dependency used to build + newer versions of go. + See https://golang.org/s/go15bootstrap for how this works. diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/Manifest new file mode 100644 index 0000000000..110c990929 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/Manifest @@ -0,0 +1,2 @@ +DIST go-linux-amd64-bootstrap.tbz 48722911 SHA256 0ab0842fb1f6cc6f10a85f225ff1a2b9e5e4b38128a7136d0c1896819421a986 SHA512 ce4dbc979b63a4612f4a8f7e7a6c5247e11bbc3a2d62ab0537a1b405ec8ab22f153012421d2240a7d6a4f91a79bb3f1370454f9e843fac43b99757c17134e5b7 WHIRLPOOL a94d0e0a1c44e3385d23f8973d15e6ef041450a3578c38987f158c4f9f231d315bc5204539d9dc7322cc9ecb96b7618b22d023f906474e1348c5d666792dff58 +DIST go-linux-arm64-bootstrap.tbz 45369354 SHA256 810c998e6701580fe0f26d46c5796eefce648e252ff9d6d761304e60556b7fc0 SHA512 3f64869430c03efa77796ed74d07a337e2a205802485605cbdd67778a08e5ce041ce3925b7a5cca0a6b4ad24ab70e07ee54091b010f67ec7370a985022f5a21e WHIRLPOOL f6f470081d5f23c190310280aaf7454a4f58fe4e7545bbd219046711f8d27ce97cc5f5f1c207e777067d1f6332e4b3f2c819b178e899d21c2d5d1d466a42cc37 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/go-bootstrap-1.5.3.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/go-bootstrap-1.5.3.ebuild new file mode 100644 index 0000000000..047bfb4cc1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/go-bootstrap-1.5.3.ebuild @@ -0,0 +1,47 @@ +# Copyright 1999-2015 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI=6 + +inherit coreos-go-utils + +BOOTSTRAP_DIST="https://dev.gentoo.org/~williamh/dist" +SRC_URI="amd64? ( ${BOOTSTRAP_DIST}/go-linux-amd64-bootstrap.tbz ) + arm64? ( ${BOOTSTRAP_DIST}/go-linux-arm64-bootstrap.tbz ) +" + +KEYWORDS="-* amd64 arm64" + +DESCRIPTION="Version of go compiler used for bootstrapping" +HOMEPAGE="http://www.golang.org" + +LICENSE="BSD" +SLOT="0" +IUSE="" + +DEPEND="" +RDEPEND="" + +# Disable all QA_* checks since these are pre-built binaries. +QA_PREBUILT="usr/lib/go-bootstrap/*" + +# Test data is never executed so don't check link dependencies. +REQUIRES_EXCLUDE="/usr/lib/go-bootstrap/src/debug/elf/testdata/*" + +# The go language uses *.a files which are _NOT_ libraries and should not be +# stripped. The test data objects should also be left alone and unstripped. +STRIP_MASK="*.a /usr/lib/go-bootstrap/src/*" + +S="${WORKDIR}"/go-$(go_os)-$(go_arch)-bootstrap + +src_install() { + dodir /usr/lib/go-bootstrap + exeinto /usr/lib/go-bootstrap/bin + doexe bin/* + + insopts -m0644 -p # preserve timestamps + insinto /usr/lib/go-bootstrap + doins -r lib pkg src + fperms -R +x /usr/lib/go-bootstrap/pkg/tool +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/metadata.xml new file mode 100644 index 0000000000..afdfdb9907 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go-bootstrap/metadata.xml @@ -0,0 +1,13 @@ + + + + + williamh@gentoo.org + William Hubbs + + + This package is only necessary until gccgo supports go-1.4. It + will be removed as soon as stable gcc supports this. + It is here so that >=dev-lang/go 1.5 can use it to bootstrap. + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/Manifest new file mode 100644 index 0000000000..c2e7a5c515 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/Manifest @@ -0,0 +1,3 @@ +DIST go1.12.17.src.tar.gz 20725913 BLAKE2B 2eef7374195302656268a42409619445dfeb3ede1f9218ae4eab195916876b97f7510cc62585a0bfdd9f86dddf8a74000032a84b29bc9891d84fc69db94f0274 SHA512 069f8f445d9d2268ebb14b2446fab34843d56283c04561636d122fd8b4c1ea0b63640a84437db7a7be71039440ffe170cd3f8025b03b0acf95f2a56fa2febec6 +DIST go1.18.10.src.tar.gz 22880022 BLAKE2B e458ecd02a4d77b77f2b6b65ecac45195c0f567782542ee65b9857e87d992b58082b7d45b9ff191cc6dea83de9f3d5abaffdd72edf60d7f229284bdaa5d190bb SHA512 5ae4c054a9e7c5fe159a27d46a37517797d8a1545f0920dc50234cc229977d02ecebf2445da5d4c641fbab574546d2c92c0ccb9cddc99be250967e2bb2ad9287 +DIST go1.19.8.src.tar.gz 26553006 BLAKE2B db085e575f1bc978502cc5d9e45206542cdf9c6edd6769b1918f07a6be7afb4a387cb18ffb7cb37f5de936bb970c703504cbb6bf88c597dc30aab4d80eeb8820 SHA512 d7ecbae3034211d7c64df4c0fce6894bae3e7e8de20bd2aa9f24b39cc040fa64d8a3bea311582cf4455a981dc3c8f319141f7f357db4eebd27d4451fee05727a diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.12.17-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.12.17-r1.ebuild new file mode 100644 index 0000000000..5d9ffb8ccb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.12.17-r1.ebuild @@ -0,0 +1,8 @@ +# Copyright 2019 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit coreos-go-lang + +KEYWORDS="-* amd64 arm64" diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.18.10.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.18.10.ebuild new file mode 100644 index 0000000000..7951a795c1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.18.10.ebuild @@ -0,0 +1,8 @@ +# Copyright 2022 Flatcar Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit coreos-go-lang + +KEYWORDS="-* amd64 arm64" diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.19.8.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.19.8.ebuild new file mode 100644 index 0000000000..7951a795c1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/go-1.19.8.ebuild @@ -0,0 +1,8 @@ +# Copyright 2022 Flatcar Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit coreos-go-lang + +KEYWORDS="-* amd64 arm64" diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/go/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/metadata.xml new file mode 100644 index 0000000000..b8d86563d8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/go/metadata.xml @@ -0,0 +1,13 @@ + + + + + williamh@gentoo.org + William Hubbs + + + Go is a new systems programming language developped at google by + Rob Pike. It has garbage collection, coroutines, communication + channels and a clean syntax. + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/Manifest new file mode 100644 index 0000000000..a60f8dcf2a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/Manifest @@ -0,0 +1,3 @@ +DIST Python-3.10.10.tar.xz 19627028 BLAKE2B 57fc6869fa05586158a170c1892d93a3036823bfafb9484b9d70bca6cdc3e76f75357622eace4bde9a4c0ca62a1bb79665e5751b41655f9f4d7e345547013ad8 SHA512 f0aee65970a68287b34c4eafcf35c6fa09c81ba234ac356db16fbbc6c36417e4ac67071e616d118f5e192d541d7f177dcab5585b9780e842f656c09e01c37ced +DIST Python-3.10.10.tar.xz.asc 833 BLAKE2B fd60e6268f7dd6676ea58bd7e80c513506ac9810c1a62ff060134207b0fd8e7b096d5f11f3cc536a1578144ff54c00bcb076d3c3f5889a69a898660dd280312b SHA512 591746d74c6123bf36c763b6e8e1de1554f02eeff30c855623ef0f12d3864d5573eb5efe96d6e142f24627c77b90738ada3456df4ad59bddcb008658f2ca8af9 +DIST python-gentoo-patches-3.10.10_p2.tar.xz 13992 BLAKE2B e18e708888dd28c8f238d4897aff79483a679396a168d8b5ff4f5e8c7f09cec5f1b13aeb327d3dc3e2149c2117c25da050987f1f1c3322b56c87245ba2d0b54d SHA512 14bc218a2f3c64ef9f42682fd1364208bcaa74f787dee39bd9566e40764c260a65fd42961be47a6e6c6227091cb2fef83e1d689302448647560689e20e07efe0 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/README.md b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/README.md new file mode 100644 index 0000000000..12b071faeb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/README.md @@ -0,0 +1,45 @@ +Modifications made: + +- Keep using internal expat and libffi, thus dropping dev-libs/libffi + and dev-libs/expat from the dependencies. + +- Drop dev-python/gentoo-common dependency, it provides the + EXTERNALLY-MANAGED file, but we will provide our own. + +- Since this package is installed only for OEM partition as a binary + package, and the installation there happens after the packages + database is removed, we unset the RDEPEND variable. The RDEPEND + variable needs to be empty as it's also used during the binary + package installation. The contents of RDEPEND are already inside the + DEPEND variable, so we are safe. + +- We modify the configure flags: + + - Add `--prefix=/usr/share/oem/python` as `/usr/share/oem` is where + the OEM partition is mounted. + + - Add `--with-platlibdir="$(get_libdir)"`, this is to make sure that + consistent library directory gets picked. In our case for both + amd64 and arm64, it's lib64. + + - Change `--enable-shared` to `--disable-shared`. This will skip + building dynamic libraries, as we don't need them. + + - Add `--includedir=/discard/include` and change `--mandir` and + `--infodir` to also use `/discard` to install files there. Makes + it easy to remove the unnecessary files. + + - We disable loadable sqlite extensions. + + - As we want to use the internal versions of expat and libffi, we + change `--with-system-{expat,ffi}` to + `--without-system-{expat,ffi}`. + + - Comment out the `--with-wheel-pkg-dir` as it's some ensurepip + stuff we are disabling anyway. + +- Essentially drop `src_install` and write our own variant, where we + run `make altinstall`, remove unnecessary files (the original + `src_install` could be read to find out which files to remove), + creates a versionless python symlink, adds an EXTERNALLY-MANAGED + file, and removes the `/discard` directory. diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/metadata.xml new file mode 100644 index 0000000000..66d5aec84c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/metadata.xml @@ -0,0 +1,43 @@ + + + + + python@gentoo.org + Python + + + + Build Bluetooth protocol support in socket module + + + Install the ensurepip module that uses bundled wheels + to bootstrap pip and setuptools (if disabled, it will + be only possible to use venv `--without-pip`) + + + Link readline extension against dev-libs/libedit + instead of sys-libs/readline + + + Optimize the build using Profile Guided Optimization (PGO) + by running Python's test suite and collecting statistics + based on its performance. This will take longer to build. + + + Optimize the build using Link Time Optimization (LTO) + + + Disable pymalloc when running under + dev-util/valgrind is detected (may incur minor + performance penalty even when valgrind is not used) + + + Install Windows executables required to create an executable + installer for MS Windows + + + + cpe:/a:python:python + python/cpython + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/python-oem-3.10.10_p2.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/python-oem-3.10.10_p2.ebuild new file mode 100644 index 0000000000..a97cd66392 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/python-oem/python-oem-3.10.10_p2.ebuild @@ -0,0 +1,461 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" +WANT_LIBTOOL="none" + +inherit autotools check-reqs flag-o-matic multiprocessing pax-utils +inherit prefix python-utils-r1 toolchain-funcs verify-sig + +MY_PV=${PV/_rc/rc} +MY_P="Python-${MY_PV%_p*}" +PYVER=$(ver_cut 1-2) +PATCHSET="python-gentoo-patches-${MY_PV}" + +DESCRIPTION="An interpreted, interactive, object-oriented programming language" +HOMEPAGE=" + https://www.python.org/ + https://github.com/python/cpython/ +" +SRC_URI=" + https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz + https://dev.gentoo.org/~mgorny/dist/python/${PATCHSET}.tar.xz + verify-sig? ( + https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz.asc + ) +" +S="${WORKDIR}/${MY_P}" + +LICENSE="PSF-2" +SLOT="${PYVER}" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86" +IUSE=" + bluetooth build +ensurepip examples gdbm hardened libedit lto + +ncurses pgo +readline +sqlite +ssl test tk valgrind +xml +" +RESTRICT="!test? ( test )" + +# Do not add a dependency on dev-lang/python to this ebuild. +# If you need to apply a patch which requires python for bootstrapping, please +# run the bootstrap code on your dev box and include the results in the +# patchset. See bug 447752. + +# Flatcar: Drop a dependency on dev-libs/expat, we will use the internal one. +# Flatcar: Drop a dependency on dev-libs/libffi, we will use the internal one. +# Flatcar: Drop a dependency on dev-python/gentoo-common, we will install our own EXTERNALLY-MANAGED file +RDEPEND=" + app-arch/bzip2:= + app-arch/xz-utils:= + dev-lang/python-exec[python_targets_python3_10(-)] + dev-python/gentoo-common + sys-apps/util-linux:= + >=sys-libs/zlib-1.1.3:= + virtual/libcrypt:= + virtual/libintl + ensurepip? ( dev-python/ensurepip-wheels ) + gdbm? ( sys-libs/gdbm:=[berkdb] ) + ncurses? ( >=sys-libs/ncurses-5.2:= ) + readline? ( + !libedit? ( >=sys-libs/readline-4.1:= ) + libedit? ( dev-libs/libedit:= ) + ) + sqlite? ( >=dev-db/sqlite-3.3.8:3= ) + ssl? ( >=dev-libs/openssl-1.1.1:= ) + tk? ( + >=dev-lang/tcl-8.0:= + >=dev-lang/tk-8.0:= + dev-tcltk/blt:= + dev-tcltk/tix + ) + !! /dev/null || die + # We disable _ctypes and _crypt for CBUILD because Python's setup.py can't handle locating + # libdir correctly for cross. + PYTHON_DISABLE_MODULES="${PYTHON_DISABLE_MODULES} _ctypes _crypt" \ + ECONF_SOURCE="${S}" econf_build "${myeconfargs_cbuild[@]}" + + # Avoid as many dependencies as possible for the cross build. + cat >> Makefile <<-EOF || die + MODULE_NIS=disabled + MODULE__DBM=disabled + MODULE__GDBM=disabled + MODULE__DBM=disabled + MODULE__SQLITE3=disabled + MODULE__HASHLIB=disabled + MODULE__SSL=disabled + MODULE__CURSES=disabled + MODULE__CURSES_PANEL=disabled + MODULE_READLINE=disabled + MODULE__TKINTER=disabled + MODULE_PYEXPAT=disabled + MODULE_ZLIB=disabled + EOF + + # Unfortunately, we do have to build this immediately, and + # not in src_compile, because CHOST configure for Python + # will check the existence of the Python it was pointed to + # immediately. + PYTHON_DISABLE_MODULES="${PYTHON_DISABLE_MODULES} _ctypes _crypt" emake + popd &> /dev/null || die + fi + + # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get + # propagated to sysconfig for built extensions + local -x CFLAGS_NODIST=${CFLAGS} + local -x LDFLAGS_NODIST=${LDFLAGS} + local -x CFLAGS= LDFLAGS= + + # Fix implicit declarations on cross and prefix builds. Bug #674070. + if use ncurses; then + append-cppflags -I"${ESYSROOT}"/usr/include/ncursesw + fi + + hprefixify setup.py + econf "${myeconfargs[@]}" + + if grep -q "#define POSIX_SEMAPHORES_NOT_ENABLED 1" pyconfig.h; then + eerror "configure has detected that the sem_open function is broken." + eerror "Please ensure that /dev/shm is mounted as a tmpfs with mode 1777." + die "Broken sem_open function (bug 496328)" + fi + + # install epython.py as part of stdlib + echo "EPYTHON='python${PYVER}'" > Lib/epython.py || die +} + +src_compile() { + # Ensure sed works as expected + # https://bugs.gentoo.org/594768 + local -x LC_ALL=C + # Prevent using distutils bundled by setuptools. + # https://bugs.gentoo.org/823728 + export SETUPTOOLS_USE_DISTUTILS=stdlib + + # Save PYTHONDONTWRITEBYTECODE so that 'has_version' doesn't + # end up writing bytecode & violating sandbox. + # bug #831897 + local -x _PYTHONDONTWRITEBYTECODE=${PYTHONDONTWRITEBYTECODE} + + if use pgo ; then + # bug 660358 + local -x COLUMNS=80 + local -x PYTHONDONTWRITEBYTECODE= + + addpredict "/usr/lib/python${PYVER}/site-packages" + fi + + # also need to clear the flags explicitly here or they end up + # in _sysconfigdata* + emake CPPFLAGS= CFLAGS= LDFLAGS= + + # Restore saved value from above. + local -x PYTHONDONTWRITEBYTECODE=${_PYTHONDONTWRITEBYTECODE} + + # Work around bug 329499. See also bug 413751 and 457194. + if has_version dev-libs/libffi[pax-kernel]; then + pax-mark E python + else + pax-mark m python + fi +} + +src_test() { + # Tests will not work when cross compiling. + if tc-is-cross-compiler; then + elog "Disabling tests due to crosscompiling." + return + fi + + local test_opts=( + -u-network + -j "$(makeopts_jobs)" + + # fails + -x test_gdb + ) + + if use sparc ; then + # bug #788022 + test_opts+=( + -x test_multiprocessing_fork + -x test_multiprocessing_forkserver + ) + fi + + # workaround docutils breaking tests + cat > Lib/docutils.py <<-EOF || die + raise ImportError("Thou shalt not import!") + EOF + + # bug 660358 + local -x COLUMNS=80 + local -x PYTHONDONTWRITEBYTECODE= + # workaround https://bugs.gentoo.org/775416 + addwrite "/usr/lib/python${PYVER}/site-packages" + + nonfatal emake test EXTRATESTOPTS="${test_opts[*]}" \ + CPPFLAGS= CFLAGS= LDFLAGS= < /dev/tty + local ret=${?} + + rm Lib/docutils.py || die + + [[ ${ret} -eq 0 ]] || die "emake test failed" +} + +# Flatcar: Rewrite src_install to just run make altinstall, remove +# some installed files (refer to the original src_install to see which +# files to drop), adding symlinks and the EXTERNALLY-MANAGED file, and +# removing the /discard directory. +src_install() { + local prefix=/usr/share/oem/python + local eprefix="${ED}${prefix}" + local libdir="${prefix}/$(get_libdir)" + local elibdir="${eprefix}/$(get_libdir)" + local pythonplatlibdir="${libdir}/python${PYVER}" + local epythonplatlibdir="${elibdir}/python${PYVER}" + local bindir="${prefix}/bin" + local ebindir="${eprefix}/bin" + + emake DESTDIR="${D}" altinstall + + rm -r "${epythonplatlibdir}"/ensurepip || die + rm -r "${epythonplatlibdir}/"{sqlite3,test/test_sqlite*} || die + rm -r "${ebindir}/idle${PYVER}" || die + rm -r "${epythonplatlibdir}/"{idlelib,tkinter,test/test_tk*} || die + + # create a simple versionless 'python' symlink + dosym "python${PYVER}" "${bindir}/python" + dosym "python${PYVER}" "${bindir}/python3" + + insinto "${pythonplatlibdir}" + # https://peps.python.org/pep-0668/ + newins - EXTERNALLY-MANAGED <<-EOF + [externally-managed] + Error= + Please contact Flatcar maintainers if some python package + is necessary for this OEM image. + EOF + + rm -r "${ED}/discard" || die +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/Manifest new file mode 100644 index 0000000000..6a2626a293 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/Manifest @@ -0,0 +1,34 @@ +DIST rust-1.67.1-aarch64-unknown-linux-gnu.tar.xz 257819328 BLAKE2B 7d2b033f447f5df5879be3e6d55c26a96996910026db8a751e85cc1a0c034e508cb3b207f45a3ddfd491c6f97993374f5a285eb2b6cd0233954f4126db260828 SHA512 b49ad763f88db3414fa5b10e3462992bc880ff36437642f5fc29effe54d7b6bdef16119e039cbb7ae291f142e88b48ab213b9a51cd38c65fd57ccf2bdfaab3db +DIST rust-1.67.1-aarch64-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 94e00367ba680137847d41bd8bef7493eac46f04a5b42c0b8252642c30d25db5f813de3603e450cab9a1cdde4c0f065f58d03ee72c29a5c321d87a063a01d05a SHA512 8b558c63fefa00ee0d50cc1b22560572ce5babd9759350f5178eb82e86230e9f9e4f9f4339dcba976e1837f167dc0e3e4f376be7352f9127f0d7af545e93694c +DIST rust-1.67.1-aarch64-unknown-linux-musl.tar.xz 236561572 BLAKE2B 19168415f8199dec3ce4c148394c7c86dea81df0ecb7cb776395d8f0e7b910ecf8de4c9ef7a87baadfe52af65e612779ae3de8599808032e91c726c4d967139f SHA512 f2931563300d78af1c09dff10a9b8f73d441c559dfffc3907e5a2425d12027061ad2492683404cc2b58cf429446645807f6d3f70caa2dcb6cffe40ac39252f25 +DIST rust-1.67.1-aarch64-unknown-linux-musl.tar.xz.asc 801 BLAKE2B 7f4bd1c432971ce5f5346f2f39dd1f5bdbc19f13524ee7cae82eb6a3f30a5ecb69fb367fb4e0063e06656f457cff68a2b81ba5ca896a5857312a11fbaea0baf7 SHA512 d568b2d4cbbcba327bd04e9253f25839e0f183c144cafa1e8104b82d64bae3515fe8f16ccce2ff975210b6f54254d451c64fc4a070b80981a945d164897b1c7f +DIST rust-1.67.1-arm-unknown-linux-gnueabi.tar.xz 215162200 BLAKE2B d922e271d04e2cc18f21fcef6f1aa8f283a7bf56228a1b1a7d81be697333a0f16fdadb12e7350ae130dfac2ca78766990df2001a3b0fc898ad4233c51a7f39c2 SHA512 06bca6150bf088ae19fbdfc0ce74dc0a8f24c111290f9592cb65164dd6cc03c1468a599514052cafabbd1b4040673a0cea69e14b266d59a42bcd7c1701e212ba +DIST rust-1.67.1-arm-unknown-linux-gnueabi.tar.xz.asc 801 BLAKE2B c85feb559064bc24b25dab825ac6758c7759cc027dad4885bc87eff0f331f1177963b39096f4ab78490c54d82a0daaab035f58a0d6992eee1acca2a1add4fb50 SHA512 7754053412a2d17b9092166d37ec713c45ff32c9f161fa261bc075b89b43af716861aa15ab8dcf4472ea49d6e3d2f3c4085d536946cec6ff862f75f83debb7d6 +DIST rust-1.67.1-arm-unknown-linux-gnueabihf.tar.xz 215944916 BLAKE2B 7e04f28292669fd0c34dc317c42d67e1b27ad0b910186ee846eab88dec1c14f89a3b599a93d7c81c88c1b040052c3df11a50e6344528054095113131094acc66 SHA512 e4c54745b55e0a5b6b36e9dc058265ae4774855122f111a0029415df2fe5bb564cb641e332ebc1c00d792c7dce6ca370e6440ec20658012c1a605939cd8efa03 +DIST rust-1.67.1-arm-unknown-linux-gnueabihf.tar.xz.asc 801 BLAKE2B 0ca0c0ed5423c89e988f0c93e4aa8d8d6cb0e401b664f9ccdb642d736f4e4cfc2fd39d0a142b07d8e5dcacddd304c8dea04617b5e3264a3865a16bfaf49d1274 SHA512 e573a36c401fe5c543f4505bbec1b5e7c962831aba062cdf8e417f5fc3c6eff2bd6c44a6c01bec4cc5fc4ddeea1c5023f90c7f1c44a26a39b9520fee923b61b2 +DIST rust-1.67.1-armv7-unknown-linux-gnueabihf.tar.xz 218109412 BLAKE2B 256cf45036132ba6f4a4dceb80fef0a2bf079fd54b4119e8a869fcf9e093e76e1d7ac84eb920e272b766a328548514e7b0249b6287d8950528aa049ed92b21ba SHA512 05ef4e7f2abdbed1cda6209ab3500f8532e516c7e4f9d08ef0c1cfa790c2454b952ed59a43ed4453e7385b12f672d5029c6c436601d7a34368418c0800f0126d +DIST rust-1.67.1-armv7-unknown-linux-gnueabihf.tar.xz.asc 801 BLAKE2B cc15e8f68745d252e8851b79441684cea1f1214e7088d7ae6592a5d47719d9dd61abb01f37882775c3c00e1b318562ca050caf5ab06a665946886f50575bb1e2 SHA512 68d66234f3bb9c452aa4a2bb5bceaf26dcb71466f05a0aa7f7b7803a866be5cfda1bf3a8f71cc8e84c2168812641da07a0726d7f2f49882b892ae41f51465477 +DIST rust-1.67.1-i686-unknown-linux-gnu.tar.xz 235056732 BLAKE2B b02479f7d145b6ad3db16d62120a6b324a9db79ef0ff7a5900d7ffd9f5cff0416fa74120a70c1c2ef5bc05c6db4a70b18cf52aa49e0972a5c75becd995795803 SHA512 64f0f887f711b276bd9561fa258aee97bef234d84b02912c1c01ec8caccfe3b0bbfdfcfce98cbd6423043c312e577d0fa574f4c703292a58163a7d3286bbf6db +DIST rust-1.67.1-i686-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 602b2769db2e4810fdb962ce1241118e00d3ee6131267815b9c8602298bd55d249e75ce42b4a4965aa6835d8af762d6e23fb1ba3a3b8a954ef08fa5dd88b30b2 SHA512 18999437af3b51b836cfeb8096c55afa2027e783d32f492eb620964c1731f367d76cf72533b35bd67f3800be4e457f4a1192aa85bfe00a41d673484f2ff56eb1 +DIST rust-1.67.1-mips-unknown-linux-gnu.tar.xz 195834044 BLAKE2B feab999cd49f72bb0865324c3671d92025ebca88601b2b6257ad11ec66b506e65bb3cdfc9a459014d9f2af52bfb410837c30e3bd0c85f407f8ebe4f98be7439a SHA512 3dfbe7e846289cc22da42b630bee54b98749c1d659a0652559b9d4febfac6eb786da18ad1be1316aa3dccc4e213f1f20efc8556da88df7226a5d8a8890b830b2 +DIST rust-1.67.1-mips-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 100dcd13886287128065952d0b535208a0807c22175dd8fd04f16a16d76d2c9d32dd6b6da5ca929c517519e167e100607c7749ed6c512fae89e2e0313e7b7202 SHA512 5cebd45755d5accb15da29423eb7addf18a72326238ef6a0c2ca09776ac008490165d2b1fb069ec7a34d509bdfa7cf1212a87344e0dda4746dfb89afe404225a +DIST rust-1.67.1-mips64-unknown-linux-gnuabi64.tar.xz 193892140 BLAKE2B d17cc8b42ad0e2a658dbc170dfc7256ecfd0b520cb6670eac4be63e1a92c54ff9018ee4ef9cf90b1e29d052cb6076ccbb163348b99113fd2e0d9155436129f91 SHA512 92e5c3238d4544583ed8ab989d598275e729e7795b0d645a822ca7cdb5be9fe419fba3a7f2d8db11393ce03ac02873ee876ae55f959609f0a6f4b4f1273a7929 +DIST rust-1.67.1-mips64-unknown-linux-gnuabi64.tar.xz.asc 801 BLAKE2B 95c5e4829068b02c16f7e8e38b2d94a4f913bbd77b226d1c83c8cdc7ef198192b76ff67dc86f7978dd1b9cbb14bb627dc106fc2921a501c340f7d0442629f8e6 SHA512 32be92455ccb54328d1f62381501009e8dbe15f1b4f83e99a894bf5e7eb469a23aeeb3ef440be1ee798e00bfe865ec21d2dd6b2c58a475e1ec789425e53bd356 +DIST rust-1.67.1-mipsel-unknown-linux-gnu.tar.xz 199598332 BLAKE2B b894bef4c2f847a26be0badc6d069fad636f0cf1286a1643b876709ff292bfe3a2307f1a2904bf6e0c596c13dccd91baba0e0c4fcb45a7cfb71e555207a61292 SHA512 9574f8f078deae22bcdbeb89c7aaf1c26a49fb61cd9a7d777421497b85c243fdcbad8c25d1a80aab4ae0b03f6849628318371dc323e27e308c85ac556e2d649f +DIST rust-1.67.1-mipsel-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B dac540a5283281c495e4cc629e7d81279c55db4fce3191af55e88cfcb857a0f86eebeff9a0b8ba95d4da4654c5b11c0fb5364db876a4464b799499285f0184a0 SHA512 ccc990923cb5b73391b09e8c7f4479998bb378b07ee12b5a83d6fbe6044f6925429590a116a944163a2d8f7f6a210b6f2302cb5976a99174e012b7646d7cef5c +DIST rust-1.67.1-powerpc-unknown-linux-gnu.tar.xz 222275832 BLAKE2B e63426d9441a601044d8f0cc8f181bafa7f47bce972518676913d506be5566654e0afe84d63ad0c3a31596231b0a1a10c96e9246fca9bd2b0438f9d72613fc9d SHA512 66fab7b5679bfe59f12dfc5b863196c2cb0b5d0f53d0bd88700586a90a6e8ad4c986fb44979b4320e74ed8b9e4c62b4ab2b3e64e44254355577fc9d1e6b688e4 +DIST rust-1.67.1-powerpc-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 312da822216930be24d368f4c449b757f1b633e71b6897b19c9d45b7419ff0c39171804d2d8196a967e6e2296bbfcb87f0b2372b3260c6cb62c8fbd9fa192c4b SHA512 38f5ed49201ef0a99c24dd3e0549628e4bedf53f41d62f6e719a91b3afe3aba64ef7ed51a6984b21469c1ea2c5def284d13ff035c67eeee45d304ec04b34fd2a +DIST rust-1.67.1-powerpc64-unknown-linux-gnu.tar.xz 220473512 BLAKE2B d932865dbf797827507426c61107a0d89aac02d56cf552e21566ef6356173925697b72e3acf3fb8825b10814b476d28f9cee98ece21cb748d83c1526f9d7ebc6 SHA512 6f7b1e33da99bc46014785223bdc9aa5bfbb1a5619037cf48fe5ec46aa82e42e09fc8828b4e2b904bc122f61ccb24cf56caa7077260a1e7486dc3badf018be69 +DIST rust-1.67.1-powerpc64-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B aa72e61de6481748dc29cfb0f40662fb4a7ee6c3792b67efdd55df47abdfe75db4ab1f560175a3dfaaa036a3de0435ea6e2d9ceb1b4ba315c95c561fbfde0ca0 SHA512 e983fe67613257744fb7a147e4b29370795d52833a247b2c568610993a6e3eb5f6212fa511cb72636bcd7209c15181dca9ace05eb4866fcd09e69afad5ad9b77 +DIST rust-1.67.1-powerpc64le-unknown-linux-gnu.tar.xz 232947736 BLAKE2B d7448f4a7196eb67d35f5a280d5c53bdf1e08a7ca640503bac3d8cfa5b43680b231d9d1f560d4907ce7a191cf5f43973a0296e369bb81befbd7ff3f05fd12034 SHA512 c2602a03f389e3cee19c7f775ddab12a0635bb4f3a7d1242eca62cccbe91949ac9900ab1066074a2551b7c9fee57539949236ed37ae941a2c7dc0626320eecc7 +DIST rust-1.67.1-powerpc64le-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B f48881d0e3c1b1d78898720a46166794a4c52ff8f1bdd8a1e792a0c4be585d7c9e5ff369d2c80d3083d18fc548ec4e24b78fa27aef9b69a240095cc8e09decee SHA512 52af4cbb1792345347ce8864109e28ba0acdc3aab2c88f2db201a79a53d903872d3c70ab84a147d311d36000b2b84a64e2b8b97a9470e41b9d7c390c17facf6c +DIST rust-1.67.1-riscv64gc-unknown-linux-gnu.tar.xz 199552128 BLAKE2B acfeb341ff2ea1ff035445e616a668d565e0b52a7453c30a46a6cfadad0b0ef6eb72d89904095fd5f0363cabeffd2fbe97b435047d5c3606475da41fb50c6be8 SHA512 5c7e0b8942872d211779f46862d0826240a15f46c95d4038f2f8835ca68cf20f8add3231040a331ca761bf4351e0976518095d606303eac66752e5598df49442 +DIST rust-1.67.1-riscv64gc-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 246adaf9b5980413ac32af57d2e089e765336e085bb45799aaeb80311a7a5d73545779c8b2e810b763520d9d5a5d475f764675191c12a2d4b2b313c11230d311 SHA512 bf447737b414839b126fe258bb5dd6d34bb9d47d57fdb68a4cd0b9296fda2c47aa267cc9722f7821bab365b95ee4a2c93631786f89c7cb5197c283897c413016 +DIST rust-1.67.1-s390x-unknown-linux-gnu.tar.xz 235970856 BLAKE2B efbe49525e880b07de613be0d22bb87065e0d64f7006ae07c9deb020b65bcbb6dd20cdc250e740763480426baf9c64adfd06e005b616543f2ef9451e99b7d411 SHA512 308aa7bc5e32c50a0b5c2fdb5e9bae60d8c8ea32fcab72205aea9832f24df35d9331c63503e092ecfee18c1eedcb5a50138837e29bb50d74f526aafbad9e71aa +DIST rust-1.67.1-s390x-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 875b4168bf1458376ba31aa8b27d7bb331cb3bcfaf2645e65d0a2167cf55e6a6a2a0bf5f66438e7cca7c73f1cc02fddeea3be570e37ca80f5cc14fc5e0349423 SHA512 97a0e05fabc4755ffaf23ada6d77dde78b410ef530437a8700673ee986c1fc5015665948fb4c63f2e0716bc022ef7d6f061fee0a1516995a6a4d7ea100d234d2 +DIST rust-1.67.1-x86_64-unknown-linux-gnu.tar.xz 186714164 BLAKE2B 648efbb30233335e31c9a90aed4958325258365cd4aef5e01312005606f23ea42cb6788eb82a11e61fb5111c4d32e052ed815e455c32ed3f6fcb18d963589669 SHA512 1a65ce569fb3262dfb805d0fa2c5c9f987c2c69e547fce366d9d371c8b19a90de279099a942919690aa6d58e2462cfd7bf54240f7ef51dc22ce12e292c46038d +DIST rust-1.67.1-x86_64-unknown-linux-gnu.tar.xz.asc 801 BLAKE2B 669b7c4b0d5382a7d1d0fe49405f2798f67a9e745711dc2c8e7548ea6fdc8f0fefdab37d0594aec14b2745ce45e7c469e79c0cb1d86077ad9c7b6aafc2656827 SHA512 067681cb4140a29adfa5f4b141e2f3450dad34b95a1e549a6bc8d759e57da5d2ae69cc165efcdef9d83e2eee06edb6acd587d38c9b2f3d000d7a3f79daccc671 +DIST rust-1.67.1-x86_64-unknown-linux-musl.tar.xz 269831452 BLAKE2B a36498528454f1bf0e1812eba005f27e3e281e4e2c117477785f5e48468c3fe316947b7e4360f573f0f4cd6f117e4102db8aeaa616be5bef09fb7518fd230b23 SHA512 9a3eb67239a88b875fe55846a2fffbbb1f2a4cc8eed18b5558f0f989d544a8ddfe0861d5b2b860a779833a1660ee622b30320ec9ef83e841724f7a32f08fda06 +DIST rust-1.67.1-x86_64-unknown-linux-musl.tar.xz.asc 801 BLAKE2B b12d0ce1136e355ee027780dfe185ee443de402e531ecc743600aecf081990d4e998fa4a6e6f0f46a886cd806918e23c5e4ccb7cecb0324cb67189984192283f SHA512 37428f0d1d8e2ddb7ce52bce3a297a7f666789d00e7e240180c3e1f7fb5b30bf5e17593cbedebdef95c50406ee82d40ef1f75a576a1a0e02387e1a12ed977c77 +DIST rustc-1.68.2-src.tar.xz 147835648 BLAKE2B 4b6deab818d915afe67a96f4d32a758c15a832041a77d9da5d065a903ea2718e0e7ebbc0cd1baaa436b655bdb93a62e0fb76f9e37aed595c064e0857201bb091 SHA512 8b085d0351e19100e9abc24b10c44a0939a1d35ba23421da4ece345d7373f7dbad1dc6a2ae153c1259404dd96b41e2682e711cf2b0b63fd03a196760cddbcdd3 +DIST rustc-1.68.2-src.tar.xz.asc 801 BLAKE2B 6ac2444950e5f919d09823ea3eef50364ad7b295126b090178872970f03c43ca9747779e0873138ca3a0b753eff79d2ef36d8b70c6a6050039ba9f9018571016 SHA512 86ccbb8ea89f820ba92ad9cbfb8f4bda3393e2c24d699355fd559a2339ff39bcce2a027ebd1b043f11de24b00cdac8c42d252915b36e711eb1d80f49a8007d47 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.62.1-musl-dynamic-linking.patch b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.62.1-musl-dynamic-linking.patch new file mode 100644 index 0000000000..fd56396d12 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.62.1-musl-dynamic-linking.patch @@ -0,0 +1,25 @@ +From e42709c46647dab342b826d30324f3e6e5590e00 Mon Sep 17 00:00:00 2001 +From: Jory Pratt +Date: Tue, 2 Aug 2022 18:32:53 -0500 +Subject: [PATCH] Enable dynamic linking by default for musl + +Signed-off-by: Jory Pratt +--- + compiler/rustc_target/src/spec/linux_musl_base.rs | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/compiler/rustc_target/src/spec/linux_musl_base.rs b/compiler/rustc_target/src/spec/linux_musl_base.rs +index 207a87ab0..8a5a43363 100644 +--- a/compiler/rustc_target/src/spec/linux_musl_base.rs ++++ b/compiler/rustc_target/src/spec/linux_musl_base.rs +@@ -10,7 +10,7 @@ pub fn opts() -> TargetOptions { + base.crt_objects_fallback = Some(CrtObjectsFallback::Musl); + + // These targets statically link libc by default +- base.crt_static_default = true; ++ base.crt_static_default = false; + + base + } +-- +2.35.1 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.65.0-ignore-broken-and-non-applicable-tests.patch b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.65.0-ignore-broken-and-non-applicable-tests.patch new file mode 100644 index 0000000000..5121ee1738 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.65.0-ignore-broken-and-non-applicable-tests.patch @@ -0,0 +1,40 @@ +From 1879d1d1a284bf51c752e47db284ce22701ed5d0 Mon Sep 17 00:00:00 2001 +From: Samuel Holland +Date: Sun, 16 Sep 2018 16:38:48 +0000 +Subject: [PATCH 12/15] Ignore broken and non-applicable tests + +c-link-to-rust-va-list-fn: unstable feature, broken on aarch64, #56475 +env-funky-keys: can't handle LD_PRELOAD (e.g. sandbox) +long-linker-command-lines: takes >10 minutes to run (but still passes) +simd-intrinsic-generic-bitmask.rs: broken on BE, #59356 +sparc-struct-abi: no sparc target +sysroot-crates-are-unstable: can't run rustc without RPATH +--- + tests/run-make-fulldeps/sysroot-crates-are-unstable/Makefile | 2 ++ + tests/ui/env-funky-keys.rs | 1 + + 6 files changed, 10 insertions(+) + +diff --git a/tests/run-make-fulldeps/sysroot-crates-are-unstable/Makefile b/tests/run-make-fulldeps/sysroot-crates-are-unstable/Makefile +index 9e770706857..6d92ec5cec8 100644 +--- a/tests/run-make-fulldeps/sysroot-crates-are-unstable/Makefile ++++ b/tests/run-make-fulldeps/sysroot-crates-are-unstable/Makefile +@@ -1,1 +1,3 @@ ++# ignore-test ++ + all: + python2.7 test.py +diff --git a/tests/ui/env-funky-keys.rs b/tests/ui/env-funky-keys.rs +index c5c824ac58d..f3fe047a79c 100644 +--- a/tests/ui/env-funky-keys.rs ++++ b/tests/ui/env-funky-keys.rs +@@ -1,6 +1,7 @@ + // run-pass + // Ignore this test on Android, because it segfaults there. + ++// ignore-test + // ignore-android + // ignore-windows + // ignore-emscripten no execve +-- +2.24.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.67.0-doc-wasm.patch b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.67.0-doc-wasm.patch new file mode 100644 index 0000000000..06011deb79 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/files/1.67.0-doc-wasm.patch @@ -0,0 +1,34 @@ +From 92aa5f6b272bcdc020a34f8d90f9ef851b5b4504 Mon Sep 17 00:00:00 2001 +From: John Millikin +Date: Mon, 9 Jan 2023 13:54:21 +0900 +Subject: [PATCH] Disable `linux_ext` in wasm32 and fortanix rustdoc builds. + +The `std::os::unix` module is stubbed out when building docs for these +target platforms. The introduction of Linux-specific extension traits +caused `std::os::net` to depend on sub-modules of `std::os::unix`, +which broke rustdoc for the `wasm32-unknown-unknown` target. + +Adding an additional `#[cfg]` guard solves that rustdoc failure by +not declaring `linux_ext` on targets with a stubbed `std::os::unix`. +--- + library/std/src/os/net/mod.rs | 9 +++++++++ + 1 file changed, 9 insertions(+) + +diff --git a/library/std/src/os/net/mod.rs b/library/std/src/os/net/mod.rs +index 5ec267c41e97c..b7046dd7c598c 100644 +--- a/library/std/src/os/net/mod.rs ++++ b/library/std/src/os/net/mod.rs +@@ -1,4 +1,13 @@ + //! OS-specific networking functionality. + ++// See cfg macros in `library/std/src/os/mod.rs` for why these platforms must ++// be special-cased during rustdoc generation. ++#[cfg(not(all( ++ doc, ++ any( ++ all(target_arch = "wasm32", not(target_os = "wasi")), ++ all(target_vendor = "fortanix", target_env = "sgx") ++ ) ++)))] + #[cfg(any(target_os = "linux", target_os = "android", doc))] + pub(super) mod linux_ext; diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/metadata.xml new file mode 100644 index 0000000000..f64700dcc7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/metadata.xml @@ -0,0 +1,30 @@ + + + + + gyakovlev@gentoo.org + Georgy Yakovlev + + + rust@gentoo.org + Rust Project + + + Install clippy, Rust code linter + Install dist tarballs (used for bootstrapping) + Install miri, an interpreter for Rust's mid-level intermediate representation (requires USE=nightly, sometimes is broken) + Enable nightly (UNSTABLE) features (NOTE: it does not install nightly version, just enables features marked as nightly at time of release) + Build a multi-threaded rustc (experimental, not tested by upstream) + Build the profiler runtime and rust-demangler tool (needed for '-C profile-generate' or '-C instrument-coverage' codegen opts) + Install rls, Rust Language Server (used with IDEs supporting RLS protocol) + Install rustfmt, Rust code formatter + Install rust-analyzer, A Rust compiler front-end for IDEs (like rls) + Install rust-src, needed by developer tools and for build-std (cross) + Bootstrap using installed rust compiler + Use the system LLVM installation + Build support for the wasm32-unknown-unknown target + + + rust-lang/rust + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/rust-1.68.2.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/rust-1.68.2.ebuild new file mode 100644 index 0000000000..dc35c602de --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-lang/rust/rust-1.68.2.ebuild @@ -0,0 +1,771 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{9..11} ) + +inherit bash-completion-r1 check-reqs estack flag-o-matic llvm multiprocessing \ + multilib multilib-build python-any-r1 rust-toolchain toolchain-funcs verify-sig + +if [[ ${PV} = *beta* ]]; then + betaver=${PV//*beta} + BETA_SNAPSHOT="${betaver:0:4}-${betaver:4:2}-${betaver:6:2}" + MY_P="rustc-beta" + SLOT="beta/${PV}" + SRC="${BETA_SNAPSHOT}/rustc-beta-src.tar.xz -> rustc-${PV}-src.tar.xz" +else + ABI_VER="$(ver_cut 1-2)" + SLOT="stable/${ABI_VER}" + MY_P="rustc-${PV}" + SRC="${MY_P}-src.tar.xz" + # Flatcar: re-enable keywords disabled from upstream + KEYWORDS="~amd64 ~arm ~arm64 ~mips ~ppc64 ~riscv ~sparc ~x86" +fi + +RUST_STAGE0_VERSION="1.$(($(ver_cut 2) - 1)).1" + +DESCRIPTION="Systems programming language from Mozilla" +HOMEPAGE="https://www.rust-lang.org/" + +SRC_URI=" + https://static.rust-lang.org/dist/${SRC} + verify-sig? ( https://static.rust-lang.org/dist/${SRC}.asc ) + !system-bootstrap? ( $(rust_all_arch_uris rust-${RUST_STAGE0_VERSION}) ) +" + +# keep in sync with llvm ebuild of the same version as bundled one. +ALL_LLVM_TARGETS=( AArch64 AMDGPU ARM AVR BPF Hexagon Lanai Mips MSP430 + NVPTX PowerPC RISCV Sparc SystemZ WebAssembly X86 XCore ) +ALL_LLVM_TARGETS=( "${ALL_LLVM_TARGETS[@]/#/llvm_targets_}" ) +LLVM_TARGET_USEDEPS=${ALL_LLVM_TARGETS[@]/%/(-)?} + +LICENSE="|| ( MIT Apache-2.0 ) BSD BSD-1 BSD-2 BSD-4 UoI-NCSA" + +IUSE="clippy cpu_flags_x86_sse2 debug dist doc llvm-libunwind miri nightly parallel-compiler profiler rustfmt rust-analyzer rust-src system-bootstrap system-llvm test wasm ${ALL_LLVM_TARGETS[*]}" + +# Please keep the LLVM dependency block separate. Since LLVM is slotted, +# we need to *really* make sure we're not pulling more than one slot +# simultaneously. + +# How to use it: +# List all the working slots in LLVM_VALID_SLOTS, newest first. +LLVM_VALID_SLOTS=( 15 ) +LLVM_MAX_SLOT="${LLVM_VALID_SLOTS[0]}" + +# splitting usedeps needed to avoid CI/pkgcheck's UncheckableDep limitation +# (-) usedep needed because we may build with older llvm without that target +LLVM_DEPEND="|| ( " +for _s in ${LLVM_VALID_SLOTS[@]}; do + LLVM_DEPEND+=" ( " + for _x in ${ALL_LLVM_TARGETS[@]}; do + LLVM_DEPEND+=" + ${_x}? ( sys-devel/llvm:${_s}[${_x}(-)] ) + wasm? ( sys-devel/lld:${_s} )" + done + LLVM_DEPEND+=" )" +done +unset _s _x +LLVM_DEPEND+=" ) + /dev/null) ) + rustc_version=${rustc_version[0]#rust-bin-} + rustc_version=${rustc_version#rust-} + + [[ -z "${rustc_version}" ]] && die "Failed to determine rust version, check 'eselect rust' output" + + if ver_test "${rustc_version}" -lt "${rustc_wanted}" ; then + eerror "Rust >=${rustc_wanted} is required" + eerror "please run 'eselect rust' and set correct rust version" + die "selected rust version is too old" + elif ver_test "${rustc_version}" -ge "${rustc_toonew}" ; then + eerror "Rust <${rustc_toonew} is required" + eerror "please run 'eselect rust' and set correct rust version" + die "selected rust version is too new" + else + einfo "Using rust ${rustc_version} to build" + fi +} + +pre_build_checks() { + local M=8192 + # multiply requirements by 1.3 if we are doing x86-multilib + if use amd64; then + M=$(( $(usex abi_x86_32 13 10) * ${M} / 10 )) + fi + M=$(( $(usex clippy 128 0) + ${M} )) + M=$(( $(usex miri 128 0) + ${M} )) + M=$(( $(usex rustfmt 256 0) + ${M} )) + # add 2G if we compile llvm and 256M per llvm_target + if ! use system-llvm; then + M=$(( 2048 + ${M} )) + local ltarget + for ltarget in ${ALL_LLVM_TARGETS[@]}; do + M=$(( $(usex ${ltarget} 256 0) + ${M} )) + done + fi + M=$(( $(usex wasm 256 0) + ${M} )) + M=$(( $(usex debug 2 1) * ${M} )) + eshopts_push -s extglob + if is-flagq '-g?(gdb)?([1-9])'; then + M=$(( 15 * ${M} / 10 )) + fi + eshopts_pop + M=$(( $(usex system-bootstrap 0 1024) + ${M} )) + M=$(( $(usex doc 256 0) + ${M} )) + CHECKREQS_DISK_BUILD=${M}M check-reqs_pkg_${EBUILD_PHASE} +} + +llvm_check_deps() { + has_version -r "sys-devel/llvm:${LLVM_SLOT}[${LLVM_TARGET_USEDEPS// /,}]" +} + +# Is LLVM being linked against libc++? +is_libcxx_linked() { + local code='#include +#if defined(_LIBCPP_VERSION) + HAVE_LIBCXX +#endif +' + local out=$($(tc-getCXX) ${CXXFLAGS} ${CPPFLAGS} -x c++ -E -P - <<<"${code}") || return 1 + [[ ${out} == *HAVE_LIBCXX* ]] +} + +pkg_pretend() { + pre_build_checks +} + +pkg_setup() { + pre_build_checks + python-any-r1_pkg_setup + + export LIBGIT2_NO_PKG_CONFIG=1 #749381 + + use system-bootstrap && bootstrap_rust_version_check + + if use system-llvm; then + llvm_pkg_setup + + local llvm_config="$(get_llvm_prefix "${LLVM_MAX_SLOT}")/bin/llvm-config" + export LLVM_LINK_SHARED=1 + export RUSTFLAGS="${RUSTFLAGS} -Lnative=$("${llvm_config}" --libdir)" + fi +} + +esetup_unwind_hack() { + # https://bugs.gentoo.org/870280 + # this is a hack needed to bootstrap with libgcc_s linked tarball on llvm-libunwind system. + # it should trigger for internal bootstrap or system-bootstrap with rust-bin. + # the whole idea is for stage0 to bootstrap with fake libgcc_s. + # final stage will receive -L${T}/lib but not -lgcc_s args, producing clean compiler. + local fakelib="${T}/fakelib" + mkdir -p "${fakelib}" || die + # we need both symlinks, one for cargo runtime, other for linker. + ln -s "${ESYSROOT}/usr/lib/libunwind.so" "${fakelib}/libgcc_s.so.1" || die + ln -s "${ESYSROOT}/usr/lib/libunwind.so" "${fakelib}/libgcc_s.so" || die + export LD_LIBRARY_PATH="${fakelib}" + export RUSTFLAGS+=" -L${fakelib}" + # this is a literally magic variable that gets through cargo cache, without it some + # crates ignore RUSTFLAGS. + # this variable can not contain leading space. + export MAGIC_EXTRA_RUSTFLAGS+="${MAGIC_EXTRA_RUSTFLAGS:+ }-L${fakelib}" +} + +src_prepare() { + if ! use system-bootstrap; then + has_version sys-devel/gcc || esetup_unwind_hack + local rust_stage0_root="${WORKDIR}"/rust-stage0 + local rust_stage0="rust-${RUST_STAGE0_VERSION}-$(rust_abi)" + + "${WORKDIR}/${rust_stage0}"/install.sh --disable-ldconfig \ + --without=rust-docs-json-preview,rust-docs --destdir="${rust_stage0_root}" --prefix=/ || die + fi + + default +} + +src_configure() { + filter-flags '-flto*' # https://bugs.gentoo.org/862109 https://bugs.gentoo.org/866231 + + local rust_target="" rust_targets="" arch_cflags + + # Collect rust target names to compile standard libs for all ABIs. + for v in $(multilib_get_enabled_abi_pairs); do + rust_targets+=",\"$(rust_abi $(get_abi_CHOST ${v##*.}))\"" + done + if use wasm; then + rust_targets+=",\"wasm32-unknown-unknown\"" + if use system-llvm; then + # un-hardcode rust-lld linker for this target + # https://bugs.gentoo.org/715348 + sed -i '/linker:/ s/rust-lld/wasm-ld/' compiler/rustc_target/src/spec/wasm_base.rs || die + fi + fi + # Flatcar: Auto-enable cross-building only if the cross-compiler is available + if [ "${CBUILD}" != "aarch64-unknown-linux-gnu" ] && [ -f /usr/bin/aarch64-cros-linux-gnu-gcc ]; then + rust_targets="${rust_targets},\"aarch64-unknown-linux-gnu\"" + fi + rust_targets="${rust_targets#,}" + + local tools='"cargo"' + use clippy && tools+=',"clippy"' + use miri && tools+=',"miri"' + use profiler && tools+=',"rust-demangler"' + use rustfmt && tools+=',"rustfmt"' + use rust-analyzer && tools+=',"rust-analyzer","analysis"' + use rust-src && tools+=',"src"' + + local rust_stage0_root + if use system-bootstrap; then + local printsysroot + printsysroot="$(rustc --print sysroot || die "Can't determine rust's sysroot")" + rust_stage0_root="${printsysroot}" + else + rust_stage0_root="${WORKDIR}"/rust-stage0 + fi + # in case of prefix it will be already prefixed, as --print sysroot returns full path + [[ -d ${rust_stage0_root} ]] || die "${rust_stage0_root} is not a directory" + + rust_target="$(rust_abi)" + + local cm_btype="$(usex debug DEBUG RELEASE)" + cat <<- _EOF_ > "${S}"/config.toml + changelog-seen = 2 + [llvm] + download-ci-llvm = false + optimize = $(toml_usex !debug) + release-debuginfo = $(toml_usex debug) + assertions = $(toml_usex debug) + ninja = true + targets = "${LLVM_TARGETS// /;}" + experimental-targets = "" + link-shared = $(toml_usex system-llvm) + $(if is_libcxx_linked; then + # https://bugs.gentoo.org/732632 + echo "use-libcxx = true" + echo "static-libstdcpp = false" + fi) + $(case "${rust_target}" in + i586-*-linux-*) + # https://github.com/rust-lang/rust/issues/93059 + echo 'cflags = "-fcf-protection=none"' + echo 'cxxflags = "-fcf-protection=none"' + echo 'ldflags = "-fcf-protection=none"' + ;; + *) + ;; + esac) + [llvm.build-config] + CMAKE_VERBOSE_MAKEFILE = "ON" + CMAKE_C_FLAGS_${cm_btype} = "${CFLAGS}" + CMAKE_CXX_FLAGS_${cm_btype} = "${CXXFLAGS}" + CMAKE_EXE_LINKER_FLAGS_${cm_btype} = "${LDFLAGS}" + CMAKE_MODULE_LINKER_FLAGS_${cm_btype} = "${LDFLAGS}" + CMAKE_SHARED_LINKER_FLAGS_${cm_btype} = "${LDFLAGS}" + CMAKE_STATIC_LINKER_FLAGS_${cm_btype} = "${ARFLAGS}" + [build] + build-stage = 2 + test-stage = 2 + build = "${rust_target}" + host = ["${rust_target}"] + target = [${rust_targets}] + cargo = "${rust_stage0_root}/bin/cargo" + rustc = "${rust_stage0_root}/bin/rustc" + rustfmt = "${rust_stage0_root}/bin/rustfmt" + docs = $(toml_usex doc) + compiler-docs = false + submodules = false + python = "${EPYTHON}" + locked-deps = true + vendor = true + extended = true + tools = [${tools}] + verbose = 2 + sanitizers = false + profiler = $(toml_usex profiler) + cargo-native-static = false + [install] + prefix = "${EPREFIX}/usr/lib/${PN}/${PV}" + sysconfdir = "etc" + docdir = "share/doc/rust" + bindir = "bin" + libdir = "lib" + mandir = "share/man" + [rust] + # https://github.com/rust-lang/rust/issues/54872 + codegen-units-std = 1 + optimize = true + debug = $(toml_usex debug) + debug-assertions = $(toml_usex debug) + debug-assertions-std = $(toml_usex debug) + debuginfo-level = $(usex debug 2 0) + debuginfo-level-rustc = $(usex debug 2 0) + debuginfo-level-std = $(usex debug 2 0) + debuginfo-level-tools = $(usex debug 2 0) + debuginfo-level-tests = 0 + backtrace = true + incremental = false + default-linker = "$(tc-getCC)" + parallel-compiler = $(toml_usex parallel-compiler) + channel = "$(usex nightly nightly stable)" + description = "gentoo" + rpath = false + verbose-tests = true + optimize-tests = $(toml_usex !debug) + codegen-tests = true + dist-src = false + remap-debuginfo = true + lld = $(usex system-llvm false $(toml_usex wasm)) + # only deny warnings if doc+wasm are NOT requested, documenting stage0 wasm std fails without it + # https://github.com/rust-lang/rust/issues/74976 + # https://github.com/rust-lang/rust/issues/76526 + deny-warnings = $(usex wasm $(usex doc false true) true) + backtrace-on-ice = true + jemalloc = false + [dist] + src-tarball = false + compression-formats = ["xz"] + _EOF_ + + for v in $(multilib_get_enabled_abi_pairs); do + rust_target=$(rust_abi $(get_abi_CHOST ${v##*.})) + arch_cflags="$(get_abi_CFLAGS ${v##*.})" + + export CFLAGS_${rust_target//-/_}="${arch_cflags}" + + cat <<- _EOF_ >> "${S}"/config.toml + [target.${rust_target}] + ar = "$(tc-getAR)" + cc = "$(tc-getCC)" + cxx = "$(tc-getCXX)" + linker = "$(tc-getCC)" + ranlib = "$(tc-getRANLIB)" + llvm-libunwind = "$(usex llvm-libunwind $(usex system-llvm system in-tree) no)" + _EOF_ + if use system-llvm; then + cat <<- _EOF_ >> "${S}"/config.toml + llvm-config = "$(get_llvm_prefix "${LLVM_MAX_SLOT}")/bin/llvm-config" + _EOF_ + fi + # by default librustc_target/spec/linux_musl_base.rs sets base.crt_static_default = true; + # but we patch it and set to false here as well + if use elibc_musl; then + cat <<- _EOF_ >> "${S}"/config.toml + crt-static = false + _EOF_ + fi + done + # Flatcar: workaround for cross-compile. Could soon be replaced + # by the "experimental cross support" below + if [ "${CBUILD}" != "aarch64-unknown-linux-gnu" ] && [ -f /usr/bin/aarch64-cros-linux-gnu-gcc ]; then + cat <<- 'EOF' > "${S}/cc.sh" + #!/bin/bash + args=("$@") + filtered=() + for i in "${args[@]}"; do + if [ "$i" != "-mindirect-branch-register" ] && [ "$i" != "-mindirect-branch=thunk" ]; then + filtered+=("$i") + fi + done + aarch64-cros-linux-gnu-gcc --sysroot=/usr/aarch64-cros-linux-gnu "${filtered[@]}" + EOF + sed 's/gcc/g++/g' "${S}/cc.sh" > "${S}/cxx.sh" + chmod +x "${S}/cc.sh" "${S}/cxx.sh" + cat <<- EOF >> "${S}"/config.toml + [target.aarch64-unknown-linux-gnu] + cc = "${S}/cc.sh" + cxx = "${S}/cxx.sh" + linker = "${S}/cc.sh" + ar = "aarch64-cros-linux-gnu-ar" + EOF + fi + if use wasm; then + cat <<- _EOF_ >> "${S}"/config.toml + [target.wasm32-unknown-unknown] + linker = "$(usex system-llvm lld rust-lld)" + # wasm target does not have profiler_builtins https://bugs.gentoo.org/848483 + profiler = false + _EOF_ + fi + + if [[ -n ${I_KNOW_WHAT_I_AM_DOING_CROSS} ]]; then # whitespace intentionally shifted below + # experimental cross support + # discussion: https://bugs.gentoo.org/679878 + # TODO: c*flags, clang, system-llvm, cargo.eclass target support + # it would be much better if we could split out stdlib + # complilation to separate ebuild and abuse CATEGORY to + # just install to /usr/lib/rustlib/ + + # extra targets defined as a bash array + # spec format: :: + # best place would be /etc/portage/env/dev-lang/rust + # Example: + # RUST_CROSS_TARGETS=( + # "AArch64:aarch64-unknown-linux-gnu:aarch64-unknown-linux-gnu" + # ) + # no extra hand holding is done, no target transformations, all + # values are passed as-is with just basic checks, so it's up to user to supply correct values + # valid rust targets can be obtained with + # rustc --print target-list + # matching cross toolchain has to be installed + # matching LLVM_TARGET has to be enabled for both rust and llvm (if using system one) + # only gcc toolchains installed with crossdev are checked for now. + + # BUG: we can't pass host flags to cross compiler, so just filter for now + # BUG: this should be more fine-grained. + filter-flags '-mcpu=*' '-march=*' '-mtune=*' + + local cross_target_spec + for cross_target_spec in "${RUST_CROSS_TARGETS[@]}";do + # extracts first element form :: + local cross_llvm_target="${cross_target_spec%%:*}" + # extracts toolchain triples, : + local cross_triples="${cross_target_spec#*:}" + # extracts first element after before : separator + local cross_rust_target="${cross_triples%%:*}" + # extracts last element after : separator + local cross_toolchain="${cross_triples##*:}" + use llvm_targets_${cross_llvm_target} || die "need llvm_targets_${cross_llvm_target} target enabled" + command -v ${cross_toolchain}-gcc > /dev/null 2>&1 || die "need ${cross_toolchain} cross toolchain" + + cat <<- _EOF_ >> "${S}"/config.toml + [target.${cross_rust_target}] + ar = "${cross_toolchain}-ar" + cc = "${cross_toolchain}-gcc" + cxx = "${cross_toolchain}-g++" + linker = "${cross_toolchain}-gcc" + ranlib = "${cross_toolchain}-ranlib" + _EOF_ + if use system-llvm; then + cat <<- _EOF_ >> "${S}"/config.toml + llvm-config = "$(get_llvm_prefix "${LLVM_MAX_SLOT}")/bin/llvm-config" + _EOF_ + fi + if [[ "${cross_toolchain}" == *-musl* ]]; then + cat <<- _EOF_ >> "${S}"/config.toml + musl-root = "$(${cross_toolchain}-gcc -print-sysroot)/usr" + _EOF_ + fi + + # append cross target to "normal" target list + # example 'target = ["powerpc64le-unknown-linux-gnu"]' + # becomes 'target = ["powerpc64le-unknown-linux-gnu","aarch64-unknown-linux-gnu"]' + + rust_targets="${rust_targets},\"${cross_rust_target}\"" + sed -i "/^target = \[/ s#\[.*\]#\[${rust_targets}\]#" config.toml || die + + ewarn + ewarn "Enabled ${cross_rust_target} rust target" + ewarn "Using ${cross_toolchain} cross toolchain" + ewarn + if ! has_version -b 'sys-devel/binutils[multitarget]' ; then + ewarn "'sys-devel/binutils[multitarget]' is not installed" + ewarn "'strip' will be unable to strip cross libraries" + ewarn "cross targets will be installed with full debug information" + ewarn "enable 'multitarget' USE flag for binutils to be able to strip object files" + ewarn + ewarn "Alternatively llvm-strip can be used, it supports stripping any target" + ewarn "define STRIP=\"llvm-strip\" to use it (experimental)" + ewarn + fi + done + fi # I_KNOW_WHAT_I_AM_DOING_CROSS + + einfo "Rust configured with the following flags:" + echo + echo RUSTFLAGS="\"${RUSTFLAGS}\"" + echo RUSTFLAGS_BOOTSTRAP="\"${RUSTFLAGS_BOOTSTRAP}\"" + echo RUSTFLAGS_NOT_BOOTSTRAP="\"${RUSTFLAGS_NOT_BOOTSTRAP}\"" + echo MAGIC_EXTRA_RUSTFLAGS="\"${MAGIC_EXTRA_RUSTFLAGS}\"" + env | grep "CARGO_TARGET_.*_RUSTFLAGS=" + env | grep "CFLAGS_.*" + echo + einfo "config.toml contents:" + cat "${S}"/config.toml || die + echo +} + +src_compile() { + RUST_BACKTRACE=1 "${EPYTHON}" ./x.py build -vv --config="${S}"/config.toml -j$(makeopts_jobs) || die +} + +src_test() { + # https://rustc-dev-guide.rust-lang.org/tests/intro.html + + # those are basic and codegen tests. + local tests=( + codegen + codegen-units + compile-fail + incremental + mir-opt + pretty + run-make + ) + + # fails if llvm is not built with ALL targets. + # and known to fail with system llvm sometimes. + use system-llvm || tests+=( assembly ) + + # fragile/expensive/less important tests + # or tests that require extra builds + # TODO: instead of skipping, just make some nonfatal. + if [[ ${ERUST_RUN_EXTRA_TESTS:-no} != no ]]; then + tests+=( + rustdoc + rustdoc-js + rustdoc-js-std + rustdoc-ui + run-make-fulldeps + ui + ui-fulldeps + ) + fi + + local i failed=() + einfo "rust_src_test: enabled tests ${tests[@]/#/src/test/}" + for i in "${tests[@]}"; do + local t="src/test/${i}" + einfo "rust_src_test: running ${t}" + if ! RUST_BACKTRACE=1 "${EPYTHON}" ./x.py test -vv --config="${S}"/config.toml \ + -j$(makeopts_jobs) --no-doc --no-fail-fast "${t}" + then + failed+=( "${t}" ) + eerror "rust_src_test: ${t} failed" + fi + done + + if [[ ${#failed[@]} -ne 0 ]]; then + eerror "rust_src_test: failure summary: ${failed[@]}" + die "aborting due to test failures" + fi +} + +src_install() { + DESTDIR="${D}" "${EPYTHON}" ./x.py install -vv --config="${S}"/config.toml -j$(makeopts_jobs) || die + + # bug #689562, #689160 + rm -v "${ED}/usr/lib/${PN}/${PV}/etc/bash_completion.d/cargo" || die + rmdir -v "${ED}/usr/lib/${PN}/${PV}"/etc{/bash_completion.d,} || die + newbashcomp src/tools/cargo/src/etc/cargo.bashcomp.sh cargo + + local symlinks=( + cargo + rustc + rustdoc + rust-gdb + rust-gdbgui + rust-lldb + ) + + use clippy && symlinks+=( clippy-driver cargo-clippy ) + use miri && symlinks+=( miri cargo-miri ) + use profiler && symlinks+=( rust-demangler ) + use rustfmt && symlinks+=( rustfmt cargo-fmt ) + use rust-analyzer && symlinks+=( rust-analyzer ) + + einfo "installing eselect-rust symlinks and paths: ${symlinks[@]}" + local i + for i in "${symlinks[@]}"; do + # we need realpath on /usr/bin/* symlink return version-appended binary path. + # so /usr/bin/rustc should point to /usr/lib/rust//bin/rustc- + # need to fix eselect-rust to remove this hack. + local ver_i="${i}-${PV}" + if [[ -f "${ED}/usr/lib/${PN}/${PV}/bin/${i}" ]]; then + einfo "Installing ${i} symlink" + ln -v "${ED}/usr/lib/${PN}/${PV}/bin/${i}" "${ED}/usr/lib/${PN}/${PV}/bin/${ver_i}" || die + else + ewarn "${i} symlink requested, but source file not found" + ewarn "please report this" + fi + dosym "../lib/${PN}/${PV}/bin/${ver_i}" "/usr/bin/${ver_i}" + done + + # symlinks to switch components to active rust in eselect + dosym "${PV}/lib" "/usr/lib/${PN}/lib-${PV}" + dosym "${PV}/libexec" "/usr/lib/${PN}/libexec-${PV}" + dosym "${PV}/share/man" "/usr/lib/${PN}/man-${PV}" + dosym "rust/${PV}/lib/rustlib" "/usr/lib/rustlib-${PV}" + dosym "../../lib/${PN}/${PV}/share/doc/rust" "/usr/share/doc/${P}" + + newenvd - "50${P}" <<-_EOF_ + LDPATH="${EPREFIX}/usr/lib/rust/lib" + MANPATH="${EPREFIX}/usr/lib/rust/man" + _EOF_ + + rm -rf "${ED}/usr/lib/${PN}/${PV}"/*.old || die + rm -rf "${ED}/usr/lib/${PN}/${PV}/doc"/*.old || die + + # note: eselect-rust adds EROOT to all paths below + cat <<-_EOF_ > "${T}/provider-${P}" + /usr/bin/cargo + /usr/bin/rustdoc + /usr/bin/rust-gdb + /usr/bin/rust-gdbgui + /usr/bin/rust-lldb + /usr/lib/rustlib + /usr/lib/rust/lib + /usr/lib/rust/libexec + /usr/lib/rust/man + /usr/share/doc/rust + _EOF_ + + if use clippy; then + echo /usr/bin/clippy-driver >> "${T}/provider-${P}" + echo /usr/bin/cargo-clippy >> "${T}/provider-${P}" + fi + if use miri; then + echo /usr/bin/miri >> "${T}/provider-${P}" + echo /usr/bin/cargo-miri >> "${T}/provider-${P}" + fi + if use profiler; then + echo /usr/bin/rust-demangler >> "${T}/provider-${P}" + fi + if use rustfmt; then + echo /usr/bin/rustfmt >> "${T}/provider-${P}" + echo /usr/bin/cargo-fmt >> "${T}/provider-${P}" + fi + if use rust-analyzer; then + echo /usr/bin/rust-analyzer >> "${T}/provider-${P}" + fi + + insinto /etc/env.d/rust + doins "${T}/provider-${P}" + + if use dist; then + insinto "/usr/lib/${PN}/${PV}/dist" + doins -r "${S}/build/dist/." + fi +} + +pkg_postinst() { + eselect rust update + + if has_version sys-devel/gdb || has_version dev-util/lldb; then + elog "Rust installs a helper script for calling GDB and LLDB," + elog "for your convenience it is installed under /usr/bin/rust-{gdb,lldb}-${PV}." + fi + + if has_version app-editors/emacs; then + elog "install app-emacs/rust-mode to get emacs support for rust." + fi + + if has_version app-editors/gvim || has_version app-editors/vim; then + elog "install app-vim/rust-vim to get vim support for rust." + fi +} + +pkg_postrm() { + eselect rust cleanup +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/Manifest new file mode 100644 index 0000000000..1c633be509 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/Manifest @@ -0,0 +1 @@ +DIST dbus-glib-0.112.tar.gz 715340 BLAKE2B 24e1c222f0116b32c109682816f6c35771647f4c63cab93a6621bd68b71ea4dca62fbf9e6bb360386b8658146dbf34b0d7dc471db7525585412d120340c4c969 SHA512 7c9f393f065dfb3d698f35e6554caf15fe539f5dd52d2b2bb6ed1770e130f5dab8e45379232520301455bae9bb77e25a109faf175153fcd4b9dd11d7de4a546e diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/dbus-glib-0.112.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/dbus-glib-0.112.ebuild new file mode 100644 index 0000000000..248dee046e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/dbus-glib-0.112.ebuild @@ -0,0 +1,109 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit autotools bash-completion-r1 multilib-minimal toolchain-funcs + +DESCRIPTION="D-Bus bindings for glib" +HOMEPAGE="https://dbus.freedesktop.org/" +SRC_URI="https://dbus.freedesktop.org/releases/${PN}/${P}.tar.gz" + +LICENSE="|| ( GPL-2 AFL-2.1 )" +SLOT="0" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~sparc-solaris ~x86-solaris" +IUSE="debug static-libs test" +RESTRICT="!test? ( test )" + +DEPEND=" + >=dev-libs/expat-2.1.0-r3[${MULTILIB_USEDEP}] + >=dev-libs/glib-2.40:2[${MULTILIB_USEDEP}] + >=sys-apps/dbus-1.8[${MULTILIB_USEDEP}] +" +RDEPEND="${DEPEND}" +BDEPEND=" + >=dev-libs/expat-2.1.0-r3 + >=dev-libs/glib-2.40:2 + >=sys-apps/dbus-1.8 + >=dev-util/glib-utils-2.40 + >=dev-util/gtk-doc-am-1.14 + virtual/pkgconfig +" # CBUILD dependencies are needed to make a native tool while cross-compiling. + +DOCS=( AUTHORS CONTRIBUTING.md NEWS README ) + +set_TBD() { + # out of sources build dir for make check + export TBD="${BUILD_DIR}-tests" +} + +src_prepare() { + default + eautoreconf +} + +multilib_src_configure() { + local myconf=( + --localstatedir="${EPREFIX}"/var + --enable-bash-completion + --disable-gtk-doc + $(use_enable debug asserts) + $(use_enable static-libs static) + ) + + # Configure a CBUILD directory to make a native build tool. + if tc-is-cross-compiler; then + mkdir "${BUILD_DIR}-build" || die + cd "${BUILD_DIR}-build" || die + ECONF_SOURCE="${S}" econf_build + myconf+=( --with-dbus-binding-tool="$PWD/dbus/dbus-binding-tool" ) + cd - || die + # Flatcar: override glib-genmarshal path + local build_pkg_config="$(tc-getBUILD_PROG PKG_CONFIG pkg-config)" + myconf+=(GLIB_GENMARSHAL="$("${build_pkg_config}" --variable=glib_genmarshal glib-2.0)") + fi + + ECONF_SOURCE="${S}" econf "${myconf[@]}" + + ln -s "${S}"/doc/reference/html doc/reference/html || die #460042 + + if use test; then + set_TBD + mkdir "${TBD}" || die + cd "${TBD}" || die + einfo "Running configure in ${TBD}" + ECONF_SOURCE="${S}" econf \ + "${myconf[@]}" \ + $(use_enable test checks) \ + $(use_enable test tests) \ + $(use_enable test asserts) + fi +} + +multilib_src_compile() { + tc-is-cross-compiler && emake -C "${BUILD_DIR}-build" + + emake + + if use test; then + set_TBD + cd "${TBD}" || die + einfo "Running make in ${TBD}" + emake + fi +} + +multilib_src_test() { + set_TBD + cd "${TBD}" || die + emake check +} + +multilib_src_install_all() { + einstalldocs + + newbashcomp "${ED}"/etc/bash_completion.d/dbus-bash-completion.sh dbus-send + rm -r "${ED}"/etc/bash_completion.d || die + + find "${ED}" -type f -name '*.la' -delete || die +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/metadata.xml new file mode 100644 index 0000000000..d73e5f1efb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/dbus-glib/metadata.xml @@ -0,0 +1,10 @@ + + + + + freedesktop-bugs@gentoo.org + + + cpe:/a:freedesktop:dbus-glib + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/Manifest new file mode 100644 index 0000000000..dad5f443f9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/Manifest @@ -0,0 +1 @@ +DIST libdnet-1.14.tar.gz 520833 BLAKE2B 97e241fc374fc9489e70d440db5e19199f4e653650af85e24af56bbbc0167db1c451349c43fcb630a26c61f8ca15c58f5c879e0d82654e275189ca3e140bb22a SHA512 ce8d95228f5175e4d9a8ff71bb99eb1ccc3ccd599a85dd07adbfd9842fc54066235d362c8060828fb3ba8129d0e1e8e071e93d60d69c6d03be310c80e61cea93 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/README.md b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/README.md new file mode 100644 index 0000000000..a99664f330 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/README.md @@ -0,0 +1,6 @@ +This is a fork of gentoo package. It's a dependency of the +open-vm-tools which is installed in the oem partition. We have it in +overlay, because: + +- We drop python stuff from the package. +- We change the prefix and sbindir. diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/files/libdnet-1.14-ndisc.patch b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/files/libdnet-1.14-ndisc.patch new file mode 100644 index 0000000000..439ffb7cb9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/files/libdnet-1.14-ndisc.patch @@ -0,0 +1,796 @@ +From 1c324828f4c6c64c9340f169bc059152dba1f998 Mon Sep 17 00:00:00 2001 +From: Stas Grabois +Date: Sat, 5 Sep 2020 13:15:32 +0300 +Subject: [PATCH] IPv6 support + +--- + configure | 20 ++++ + configure.ac | 7 ++ + include/dnet.h | 1 + + include/dnet/Makefile.am | 2 +- + include/dnet/Makefile.in | 2 +- + include/dnet/ip6.h | 3 + + include/dnet/ndisc.h | 35 +++++++ + include/dnet/route.h | 3 + + src/Makefile.in | 2 +- + src/intf.c | 101 +++++++++++++------- + src/ip6.c | 56 +++++++++++ + src/ndisc-linux.c | 197 +++++++++++++++++++++++++++++++++++++++ + src/ndisc-none.c | 55 +++++++++++ + src/route-linux.c | 95 ++++++++++++++++++- + 14 files changed, 541 insertions(+), 38 deletions(-) + create mode 100644 include/dnet/ndisc.h + create mode 100644 src/ndisc-linux.c + create mode 100644 src/ndisc-none.c + +--- a/configure ++++ b/configure +@@ -22025,6 +22025,26 @@ + + fi + ++if test "$ac_cv_dnet_linux_procfs" = yes ; then ++ case $LIBOBJS in ++ "ndisc-linux.$ac_objext" | \ ++ *" ndisc-linux.$ac_objext" | \ ++ "ndisc-linux.$ac_objext "* | \ ++ *" ndisc-linux.$ac_objext "* ) ;; ++ *) LIBOBJS="$LIBOBJS ndisc-linux.$ac_objext" ;; ++esac ++ ++else ++ case $LIBOBJS in ++ "ndisc-none.$ac_objext" | \ ++ *" ndisc-none.$ac_objext" | \ ++ "ndisc-none.$ac_objext "* | \ ++ *" ndisc-none.$ac_objext "* ) ;; ++ *) LIBOBJS="$LIBOBJS ndisc-none.$ac_objext" ;; ++esac ++ ++fi ++ + if test "$ac_cv_header_linux_if_tun_h" = yes ; then + case $LIBOBJS in + "tun-linux.$ac_objext" | \ +--- a/configure.ac ++++ b/configure.ac +@@ -303,6 +303,13 @@ + AC_LIBOBJ([route-none]) + fi + ++dnl Check for ndisc interface. ++if test "$ac_cv_dnet_linux_procfs" = yes ; then ++ AC_LIBOBJ([ndisc-linux]) ++else ++ AC_LIBOBJ([ndisc-none]) ++fi ++ + dnl Check for tun interface. + if test "$ac_cv_header_linux_if_tun_h" = yes ; then + AC_LIBOBJ([tun-linux]) +--- a/include/dnet.h ++++ b/include/dnet.h +@@ -16,6 +16,7 @@ + #include + #include + #include ++#include + #include + #include + #include +--- a/include/dnet/Makefile.am ++++ b/include/dnet/Makefile.am +@@ -5,4 +5,4 @@ + dnetincludedir = $(includedir)/dnet + + dnetinclude_HEADERS = addr.h arp.h blob.h eth.h fw.h icmp.h intf.h ip.h \ +- ip6.h os.h rand.h route.h tcp.h tun.h udp.h sctp.h ++ ip6.h os.h rand.h route.h tcp.h tun.h udp.h sctp.h ndisc.h +--- a/include/dnet/Makefile.in ++++ b/include/dnet/Makefile.in +@@ -106,7 +106,7 @@ + dnetincludedir = $(includedir)/dnet + + dnetinclude_HEADERS = addr.h arp.h blob.h eth.h fw.h icmp.h intf.h ip.h \ +- ip6.h os.h rand.h route.h tcp.h tun.h udp.h sctp.h ++ ip6.h os.h rand.h route.h tcp.h tun.h udp.h sctp.h ndisc.h + + subdir = include/dnet + mkinstalldirs = $(SHELL) $(top_srcdir)/config/mkinstalldirs +--- a/include/dnet/ip6.h ++++ b/include/dnet/ip6.h +@@ -179,6 +179,9 @@ + char *ip6_ntoa(const ip6_addr_t *ip6); + #define ip6_aton ip6_pton + ++ssize_t ip6_add_option(void *buf, size_t len, ++ int proto, const void *optbuf, size_t optlen); ++ + void ip6_checksum(void *buf, size_t len); + __END_DECLS + +new file mode 100644 +--- a//dev/null ++++ b/include/dnet/ndisc.h +@@ -0,0 +1,35 @@ ++/* ++ * ndisc.c ++ * ++ * Kernel arp/ndisc table operations. ++ * ++ * Copyright (c) 2000 Dug Song ++ * ++ */ ++ ++#ifndef DNET_NDISC_H ++#define DNET_NDISC_H ++ ++/* ++ * NDISC cache entry ++ */ ++struct ndisc_entry { ++ int intf_index; ++ struct addr ndisc_pa; /* protocol address */ ++ struct addr ndisc_ha; /* hardware address */ ++}; ++ ++typedef struct ndisc_handle ndisc_t; ++ ++typedef int (*ndisc_handler)(const struct ndisc_entry *entry, void *arg); ++ ++__BEGIN_DECLS ++ndisc_t *ndisc_open(void); ++int ndisc_add(ndisc_t *n, const struct ndisc_entry *entry); ++int ndisc_delete(ndisc_t *n, const struct ndisc_entry *entry); ++int ndisc_get(ndisc_t *n, struct ndisc_entry *entry); ++int ndisc_loop(ndisc_t *n, ndisc_handler callback, void *arg); ++ndisc_t *ndisc_close(ndisc_t *r); ++__END_DECLS ++ ++#endif /* DNET_NDISC_H */ +--- a/include/dnet/route.h ++++ b/include/dnet/route.h +@@ -26,7 +26,10 @@ + __BEGIN_DECLS + route_t *route_open(void); + int route_add(route_t *r, const struct route_entry *entry); ++int route_add_dev(route_t *r, const struct route_entry *entry, const char* dev); ++int route6_add(route_t *r, const struct route_entry *entry, int intf_index); + int route_delete(route_t *r, const struct route_entry *entry); ++int route6_delete(route_t *r, const struct route_entry *entry, int intf_index); + int route_get(route_t *r, struct route_entry *entry); + int route_loop(route_t *r, route_handler callback, void *arg); + route_t *route_close(route_t *r); +--- a/src/Makefile.in ++++ b/src/Makefile.in +@@ -144,7 +144,7 @@ + intf-win32.c intf.c ip-cooked.c ip-win32.c ip.c memcmp.c \ + route-bsd.c route-hpux.c route-linux.c route-none.c \ + route-win32.c strlcat.c strlcpy.c strsep.c tun-bsd.c \ +- tun-linux.c tun-none.c tun-solaris.c ++ tun-linux.c tun-none.c tun-solaris.c ndisc-linux.c ndisc-none.c + SOURCES = $(libdnet_la_SOURCES) + + all: all-am +--- a/src/intf.c ++++ b/src/intf.c +@@ -20,6 +20,9 @@ + # define IP_MULTICAST + #endif + #include ++#ifdef HAVE_NET_IF_DL_H ++# include ++#endif + #ifdef HAVE_NET_IF_VAR_H + # include + #endif +@@ -79,6 +82,21 @@ + u_char ifcbuf[4192]; + }; + ++/* TODO: move to .h */ ++union sockunion { ++#ifdef HAVE_NET_IF_DL_H ++ struct sockaddr_dl sdl; ++#endif ++ struct sockaddr_in sin; ++#ifdef HAVE_SOCKADDR_IN6 ++ struct sockaddr_in6 sin6; ++#endif ++ struct sockaddr sa; ++#ifdef AF_RAW ++ struct sockaddr_raw sr; ++#endif ++}; ++ + static int + intf_flags_to_iff(u_short flags, int iff) + { +@@ -129,14 +147,10 @@ + + setsockopt(intf->fd, SOL_SOCKET, SO_BROADCAST, + (const char *) &one, sizeof(one)); +-#ifdef SIOCGIFNETMASK_IN6 + if ((intf->fd6 = socket(AF_INET6, SOCK_DGRAM, 0)) < 0) { +-# ifdef EPROTONOSUPPORT + if (errno != EPROTONOSUPPORT) +-# endif + return (intf_close(intf)); + } +-#endif + } + return (intf); + } +@@ -586,34 +600,50 @@ + return (_intf_get_aliases(intf, entry)); + } + ++static int ++get_max_bits(const struct addr *a) ++{ ++ if (a->addr_type == ADDR_TYPE_IP) { ++ return IP_ADDR_BITS; ++ } else if (a->addr_type == ADDR_TYPE_IP6) { ++ return IP6_ADDR_BITS; ++ } else { ++ return 0; ++ } ++} ++ + static int + _match_intf_src(const struct intf_entry *entry, void *arg) + { +- int matched = 0; +- int cnt; + struct intf_entry *save = (struct intf_entry *)arg; +- +- if (entry->intf_addr.addr_type == ADDR_TYPE_IP && +- entry->intf_addr.addr_ip == save->intf_addr.addr_ip) { +- matched = 1; +- } else { +- for (cnt = 0; !matched && cnt < (int) entry->intf_alias_num; cnt++) { +- if (entry->intf_alias_addrs[cnt].addr_type != ADDR_TYPE_IP) +- continue; +- if (entry->intf_alias_addrs[cnt].addr_ip == save->intf_addr.addr_ip) +- matched = 1; +- } ++ int len = save->intf_len < entry->intf_len ? save->intf_len : entry->intf_len; ++ int i; ++ ++ struct addr a, saved_addr; ++ ++ saved_addr = save->intf_addr; ++ saved_addr.addr_bits = get_max_bits(&saved_addr); ++ ++ a = entry->intf_addr; ++ a.addr_bits = get_max_bits(&a); ++ ++ if (addr_cmp(&a, &saved_addr) == 0) { ++ memcpy(save, entry, len); ++ return 1; + } + +- if (matched) { +- /* XXX - truncated result if entry is too small. */ +- if (save->intf_len < entry->intf_len) +- memcpy(save, entry, save->intf_len); +- else +- memcpy(save, entry, entry->intf_len); +- return (1); ++ for (i = 0; i < (int)entry->intf_alias_num; i++) { ++ a = entry->intf_alias_addrs[i]; ++ a.addr_bits = get_max_bits(&a); ++ ++ if (addr_cmp(&a, &saved_addr) == 0) { ++ memcpy(save, entry, len); ++ save->intf_addr = entry->intf_alias_addrs[i]; ++ return 1; ++ } + } +- return (0); ++ ++ return 0; + } + + int +@@ -631,24 +661,27 @@ + int + intf_get_dst(intf_t *intf, struct intf_entry *entry, struct addr *dst) + { +- struct sockaddr_in sin; ++ union sockunion sun; + socklen_t n; + +- if (dst->addr_type != ADDR_TYPE_IP) { ++ int fd; ++ ++ if (dst->addr_type != ADDR_TYPE_IP && dst->addr_type != ADDR_TYPE_IP6) { + errno = EINVAL; + return (-1); + } +- addr_ntos(dst, (struct sockaddr *)&sin); +- sin.sin_port = htons(666); +- +- if (connect(intf->fd, (struct sockaddr *)&sin, sizeof(sin)) < 0) ++ addr_ntos(dst, (struct sockaddr *)&sun); ++ sun.sin.sin_port = htons(666); ++ ++ fd = dst->addr_type == ADDR_TYPE_IP6 ? intf->fd6 : intf->fd; ++ if (connect(fd, (struct sockaddr *)&sun, sizeof(sun)) < 0) + return (-1); + +- n = sizeof(sin); +- if (getsockname(intf->fd, (struct sockaddr *)&sin, &n) < 0) ++ n = sizeof(sun); ++ if (getsockname(fd, (struct sockaddr *)&sun, &n) < 0) + return (-1); + +- addr_ston((struct sockaddr *)&sin, &entry->intf_addr); ++ addr_ston((struct sockaddr *)&sun, &entry->intf_addr); + + if (intf_loop(intf, _match_intf_src, entry) != 1) + return (-1); +--- a/src/ip6.c ++++ b/src/ip6.c +@@ -9,6 +9,8 @@ + #include "config.h" + + #include "dnet.h" ++#include ++#include + + #define IP6_IS_EXT(n) \ + ((n) == IP_PROTO_HOPOPTS || (n) == IP_PROTO_DSTOPTS || \ +@@ -70,3 +72,57 @@ + } + } + } ++ ++ssize_t ++ip6_add_option(void *buf, size_t len, int proto, ++ const void *optbuf, size_t optlen) ++{ ++ struct ip6_hdr *ip6; ++ struct tcp_hdr *tcp = NULL; ++ u_char *p; ++ int hl, datalen, padlen; ++ ++ if (proto != IP_PROTO_TCP) { ++ errno = EINVAL; ++ return (-1); ++ } ++ ++ ip6 = (struct ip6_hdr *)buf; ++ p = (u_char *)buf + IP6_HDR_LEN; ++ ++ tcp = (struct tcp_hdr *)p; ++ hl = tcp->th_off << 2; ++ p = (u_char *)tcp + hl; ++ ++ datalen = ntohs(ip6->ip6_plen) + IP6_HDR_LEN - (p - (u_char *)buf); ++ ++ /* Compute padding to next word boundary. */ ++ if ((padlen = 4 - (optlen % 4)) == 4) ++ padlen = 0; ++ ++ /* XXX - IP_HDR_LEN_MAX == TCP_HDR_LEN_MAX */ ++ if (hl + optlen + padlen > IP_HDR_LEN_MAX || ++ ntohs(ip6->ip6_plen) + IP6_HDR_LEN + optlen + padlen > len) { ++ errno = EINVAL; ++ return (-1); ++ } ++ ++ /* Shift any existing data. */ ++ if (datalen) { ++ memmove(p + optlen + padlen, p, datalen); ++ } ++ /* XXX - IP_OPT_NOP == TCP_OPT_NOP */ ++ if (padlen) { ++ memset(p, IP_OPT_NOP, padlen); ++ p += padlen; ++ } ++ memmove(p, optbuf, optlen); ++ p += optlen; ++ optlen += padlen; ++ ++ tcp->th_off = (p - (u_char *)tcp) >> 2; ++ ++ ip6->ip6_plen = htons(ntohs(ip6->ip6_plen) + optlen); ++ ++ return (optlen); ++} +new file mode 100644 +--- a//dev/null ++++ b/src/ndisc-linux.c +@@ -0,0 +1,197 @@ ++/* ++ * ndisc-linux.c ++ * ++ * Copyright (c) 2000 Dug Song ++ * ++ */ ++ ++#include "config.h" ++ ++#include ++#include ++#include ++#include ++ ++#include ++#include ++#include ++#include ++ ++#include ++ ++#include ++#include ++#include ++#include ++#include ++#include ++ ++#include "dnet.h" ++ ++struct ndisc_handle ++{ ++ int nlfd; ++ int seq; ++}; ++ ++ndisc_t * ++ndisc_open(void) ++{ ++ struct sockaddr_nl snl; ++ ndisc_t *n; ++ ++ if ((n = calloc(1, sizeof(*n))) != NULL) { ++ n->nlfd = -1; ++ ++ if ((n->nlfd = socket(AF_NETLINK, SOCK_RAW, ++ NETLINK_ROUTE)) < 0) ++ return (ndisc_close(n)); ++ ++ memset(&snl, 0, sizeof(snl)); ++ snl.nl_family = AF_NETLINK; ++ ++ if (bind(n->nlfd, (struct sockaddr *)&snl, sizeof(snl)) < 0) ++ return (ndisc_close(n)); ++ } ++ return (n); ++} ++ ++static int ++netlink_addattr(struct nlmsghdr *n, int type, const void *data, int data_len) ++{ ++ int len = RTA_LENGTH(data_len); ++ struct rtattr *rta; ++ ++ rta = (struct rtattr *)((uint8_t*)n + NLMSG_ALIGN(n->nlmsg_len)); ++ rta->rta_type = type; ++ rta->rta_len = len; ++ memcpy(RTA_DATA(rta), data, data_len); ++ n->nlmsg_len = NLMSG_ALIGN(n->nlmsg_len) + RTA_ALIGN(len); ++ return 0; ++} ++ ++int ++ndisc_modify(ndisc_t *n, const struct ndisc_entry *entry, int type, int flags) ++{ ++ struct nlmsghdr *nmsg; ++ struct ndmsg *ndm; ++ struct rtattr *rta; ++ struct sockaddr_nl snl; ++ struct iovec iov; ++ struct msghdr msg; ++ u_char buf[512]; ++ int i, af, alen; ++ ++ switch (entry->ndisc_pa.addr_type) { ++ case ADDR_TYPE_IP: ++ af = AF_INET; ++ alen = IP_ADDR_LEN; ++ break; ++ case ADDR_TYPE_IP6: ++ af = AF_INET6; ++ alen = IP6_ADDR_LEN; ++ break; ++ default: ++ errno = EINVAL; ++ return (-1); ++ } ++ memset(buf, 0, sizeof(buf)); ++ ++ nmsg = (struct nlmsghdr *)buf; ++ nmsg->nlmsg_len = NLMSG_LENGTH(sizeof(struct ndmsg)); ++ nmsg->nlmsg_flags = NLM_F_REQUEST | flags; ++ nmsg->nlmsg_type = type; ++ nmsg->nlmsg_seq = ++n->seq; ++ ++ nmsg->nlmsg_flags |= NLM_F_ACK; ++ ++ ndm = (struct ndmsg *)(nmsg + 1); ++ ndm->ndm_family = af; ++ ndm->ndm_state = NUD_PERMANENT; ++ ndm->ndm_ifindex = entry->intf_index; ++ ++ netlink_addattr(nmsg, NDA_DST, &entry->ndisc_pa.addr_data8[0], ++ alen); ++ ++ if (type == RTM_NEWNEIGH) { ++ netlink_addattr(nmsg, NDA_LLADDR, ++ &entry->ndisc_ha.addr_data8[0], ETH_ADDR_LEN); ++ } ++ ++ memset(&snl, 0, sizeof(snl)); ++ snl.nl_family = AF_NETLINK; ++ ++ iov.iov_base = nmsg; ++ iov.iov_len = nmsg->nlmsg_len; ++ ++ memset(&msg, 0, sizeof(msg)); ++ msg.msg_name = &snl; ++ msg.msg_namelen = sizeof(snl); ++ msg.msg_iov = &iov; ++ msg.msg_iovlen = 1; ++ ++ if (sendmsg(n->nlfd, &msg, 0) < 0) ++ return (-1); ++ ++ iov.iov_base = buf; ++ iov.iov_len = sizeof(buf); ++ ++ if ((i = recvmsg(n->nlfd, &msg, 0)) <= 0) ++ return (-1); ++ ++ if (nmsg->nlmsg_len < (int)sizeof(*nmsg) || nmsg->nlmsg_len > i || ++ nmsg->nlmsg_seq != n->seq) { ++ errno = EINVAL; ++ return (-1); ++ } ++ if (nmsg->nlmsg_type == NLMSG_ERROR) { ++ struct nlmsgerr *err = (struct nlmsgerr*)NLMSG_DATA(nmsg); ++ errno = -err->error; ++ if (errno == 0) { ++ return 0; ++ } ++ ++ return (-1); ++ } ++ ++ return (-1); ++} ++ ++int ++ndisc_add(ndisc_t *n, const struct ndisc_entry *entry) ++{ ++ return ndisc_modify(n, entry, RTM_NEWNEIGH, NLM_F_CREATE | NLM_F_EXCL); ++} ++ ++int ++ndisc_delete(ndisc_t *n, const struct ndisc_entry *entry) ++{ ++ return ndisc_modify(n, entry, RTM_DELNEIGH, 0); ++} ++ ++int ++ndisc_get(ndisc_t *n, struct ndisc_entry *entry) ++{ ++ /* TBD */ ++ errno = ENOSYS; ++ return (-1); ++} ++ ++int ++nsidc_loop(ndisc_t *n, ndisc_handler callback, void *arg) ++{ ++ /* TBD */ ++ errno = ENOSYS; ++ return (-1); ++} ++ ++ndisc_t * ++ndisc_close(ndisc_t *n) ++{ ++ if (n != NULL) { ++ if (n->nlfd >= 0) ++ close(n->nlfd); ++ free(n); ++ } ++ return (NULL); ++} +new file mode 100644 +--- a//dev/null ++++ b/src/ndisc-none.c +@@ -0,0 +1,55 @@ ++/* ++ * ndisc-linux.c ++ * ++ * Copyright (c) 2000 Dug Song ++ * ++ */ ++ ++#include "config.h" ++ ++#include ++#include ++#include ++ ++#include "dnet.h" ++ ++ndisc_t * ++ndisc_open(void) ++{ ++ errno = ENOSYS; ++ return (NULL); ++} ++ ++int ++ndisc_add(ndisc_t *n, const struct ndisc_entry *entry) ++{ ++ errno = ENOSYS; ++ return (-1); ++} ++ ++int ++ndisc_delete(ndisc_t *n, const struct ndisc_entry *entry) ++{ ++ errno = ENOSYS; ++ return (-1); ++} ++ ++int ++ndisc_get(ndisc_t *n, struct ndisc_entry *entry) ++{ ++ errno = ENOSYS; ++ return (-1); ++} ++ ++int ++nsidc_loop(ndisc_t *n, ndisc_handler callback, void *arg) ++{ ++ errno = ENOSYS; ++ return (-1); ++} ++ ++ndisc_t * ++ndisc_close(ndisc_t *n) ++{ ++ return (NULL); ++} +--- a/src/route-linux.c ++++ b/src/route-linux.c +@@ -39,6 +39,7 @@ + + struct route_handle { + int fd; ++ int fd6; + int nlfd; + }; + +@@ -49,10 +50,13 @@ + route_t *r; + + if ((r = calloc(1, sizeof(*r))) != NULL) { +- r->fd = r->nlfd = -1; ++ r->fd = r->fd6 = r->nlfd = -1; + + if ((r->fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) + return (route_close(r)); ++ ++ if ((r->fd6 = socket(AF_INET6, SOCK_DGRAM, 0)) < 0) ++ return (route_close(r)); + + if ((r->nlfd = socket(AF_NETLINK, SOCK_RAW, + NETLINK_ROUTE)) < 0) +@@ -90,6 +94,67 @@ + return (ioctl(r->fd, SIOCADDRT, &rt)); + } + ++int ++route_add_dev(route_t *r, const struct route_entry *entry, const char* dev) ++{ ++ struct rtentry rt; ++ struct addr dst; ++ ++ memset(&rt, 0, sizeof(rt)); ++ rt.rt_flags = RTF_UP; ++ rt.rt_dev = (char*)dev; ++ ++ if (ADDR_ISHOST(&entry->route_dst)) { ++ rt.rt_flags |= RTF_HOST; ++ memcpy(&dst, &entry->route_dst, sizeof(dst)); ++ } else ++ addr_net(&entry->route_dst, &dst); ++ ++ if (entry->route_gw.addr_ip != 0) { ++ rt.rt_flags |= RTF_GATEWAY; ++ } ++ ++ if (addr_ntos(&dst, &rt.rt_dst) < 0 || ++ addr_ntos(&entry->route_gw, &rt.rt_gateway) < 0 || ++ addr_btos(entry->route_dst.addr_bits, &rt.rt_genmask) < 0) ++ return (-1); ++ ++ int ret = (ioctl(r->fd, SIOCADDRT, &rt)); ++ return ret; ++} ++ ++int ++route6_add(route_t *r, const struct route_entry *entry, int intf_index) ++{ ++ struct in6_rtmsg rt; ++ struct addr dst; ++ ++ memset(&rt, 0, sizeof(rt)); ++ rt.rtmsg_flags = RTF_UP; ++ ++ if (ADDR_ISHOST(&entry->route_dst)) { ++ rt.rtmsg_flags |= RTF_HOST; ++ memcpy(&dst, &entry->route_dst, sizeof(dst)); ++ } else { ++ addr_net(&entry->route_dst, &dst); ++ } ++ ++ rt.rtmsg_dst_len = entry->route_dst.addr_bits; ++ rt.rtmsg_ifindex = intf_index; ++ rt.rtmsg_metric = 1; ++ ++ memcpy(&rt.rtmsg_dst, &dst.addr_ip6, sizeof(rt.rtmsg_dst)); ++ ++ if (!IN6_IS_ADDR_UNSPECIFIED(&entry->route_gw.addr_ip6)) { ++ rt.rtmsg_flags |= RTF_GATEWAY; ++ memcpy(&rt.rtmsg_gateway, &entry->route_gw.addr_ip6, ++ sizeof(rt.rtmsg_gateway)); ++ } ++ ++ int ret = (ioctl(r->fd6, SIOCADDRT, &rt)); ++ return ret; ++} ++ + int + route_delete(route_t *r, const struct route_entry *entry) + { +@@ -112,6 +177,32 @@ + return (ioctl(r->fd, SIOCDELRT, &rt)); + } + ++int ++route6_delete(route_t *r, const struct route_entry *entry, int intf_index) ++{ ++ struct in6_rtmsg rt; ++ struct addr dst; ++ ++ memset(&rt, 0, sizeof(rt)); ++ rt.rtmsg_flags = RTF_UP; ++ ++ if (ADDR_ISHOST(&entry->route_dst)) { ++ rt.rtmsg_flags |= RTF_HOST; ++ memcpy(&dst, &entry->route_dst, sizeof(dst)); ++ } else ++ addr_net(&entry->route_dst, &dst); ++ ++ rt.rtmsg_dst_len = entry->route_dst.addr_bits; ++ rt.rtmsg_ifindex = intf_index; ++ rt.rtmsg_metric = 1; ++ ++ memcpy(&rt.rtmsg_dst, &dst, sizeof(rt.rtmsg_dst)); ++ memcpy(&rt.rtmsg_gateway, &entry->route_gw, sizeof(rt.rtmsg_gateway)); ++ ++ int ret = (ioctl(r->fd6, SIOCDELRT, &rt)); ++ return ret; ++} ++ + int + route_get(route_t *r, struct route_entry *entry) + { +@@ -278,6 +369,8 @@ + if (r != NULL) { + if (r->fd >= 0) + close(r->fd); ++ if (r->fd6 >= 0) ++ close(r->fd6); + if (r->nlfd >= 0) + close(r->nlfd); + free(r); diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/files/libdnet-1.14-strlcpy.patch b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/files/libdnet-1.14-strlcpy.patch new file mode 100644 index 0000000000..abc3a6b0f2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/files/libdnet-1.14-strlcpy.patch @@ -0,0 +1,10 @@ +--- a/python/dnet.c ++++ b/python/dnet.c +@@ -22,6 +22,7 @@ + #endif + __PYX_EXTERN_C double pow(double, double); + #include "dnet.h" ++#include "config.h" + + + typedef struct {const char *s; const void **p;} __Pyx_CApiTabEntry; /*proto*/ diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/libdnet-1.14-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/libdnet-1.14-r2.ebuild new file mode 100644 index 0000000000..8c64e16bb7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/libdnet-1.14-r2.ebuild @@ -0,0 +1,64 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +AT_M4DIR="config" + +inherit autotools + +DESCRIPTION="simplified, portable interface to several low-level networking routines" +HOMEPAGE="https://github.com/ofalk/libdnet" +SRC_URI="https://github.com/ofalk/${PN}/archive/${P}.tar.gz" +S="${WORKDIR}/${PN}-${P}" + +LICENSE="LGPL-2" +SLOT="0" +KEYWORDS="~alpha amd64 arm ~arm64 ~hppa ~ia64 ~mips ppc ppc64 ~riscv sparc x86" +IUSE="test" +REQUIRED_USE="" +RESTRICT="!test? ( test )" + +DEPEND="" +RDEPEND="${DEPEND}" +BDEPEND=" +" + +DOCS=( README.md THANKS ) + +PATCHES=( + "${FILESDIR}/${PN}-1.14-ndisc.patch" + "${FILESDIR}/${PN}-1.14-strlcpy.patch" +) + +src_prepare() { + default + + sed -i \ + -e 's/libcheck.a/libcheck.so/g' \ + -e 's|AM_CONFIG_HEADER|AC_CONFIG_HEADERS|g' \ + configure.ac || die + sed -i \ + -e 's|-L$libdir ||g' \ + dnet-config.in || die + sed -i \ + -e '/^SUBDIRS/s|python||g' \ + Makefile.am || die + + eautoreconf +} + +src_configure() { + # Install into OEM, don't bother with a sbin directory. + econf \ + --prefix=/usr/share/oem \ + --sbindir=/usr/share/oem/bin \ + --disable-static \ + --without-python +} + +src_install() { + default + + find "${ED}" -name '*.la' -delete || die +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/metadata.xml new file mode 100644 index 0000000000..bc78db4058 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libdnet/metadata.xml @@ -0,0 +1,12 @@ + + + + + netmon@gentoo.org + Gentoo network monitoring and analysis project + + + libdnet + dugsong/libdnet + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/Manifest new file mode 100644 index 0000000000..698014b976 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/Manifest @@ -0,0 +1 @@ +DIST libmspack-0.10.1alpha.tar.gz 963274 BLAKE2B 39bcb3b7ea419d6d00850b70c217c802a2095dd4398038e594ae7c01ca12e71508218c1cfca5ae8b102636ab9517b13d55c1e411b31e87d28aa46331cd0127e6 SHA512 a7b5f7caa49190c5021f3e768b92f2e51cc0ce685c9ab6ed6fb36de885c73231b58d47a8a3b5c5aa5c9ac56c25c500eb683d84dbf11f09f97f6cb4fff5adc245 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/libmspack-0.10.1_alpha.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/libmspack-0.10.1_alpha.ebuild new file mode 100644 index 0000000000..0cdeca7571 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/libmspack-0.10.1_alpha.ebuild @@ -0,0 +1,74 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit autotools multilib-minimal + +if [[ ${PV} == "9999" ]] ; then + EGIT_REPO_URI="https://github.com/kyz/libmspack.git" + inherit git-r3 + MY_P="${PN}-9999" +else + KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ppc ppc64 ~riscv ~s390 sparc x86 ~x64-macos ~x64-solaris" + MY_PV="${PV/_alpha/alpha}" + MY_P="${PN}-${MY_PV}" + SRC_URI="https://www.cabextract.org.uk/libmspack/libmspack-${MY_PV}.tar.gz" +fi + +DESCRIPTION="A library for Microsoft compression formats" +HOMEPAGE="https://www.cabextract.org.uk/libmspack/" + +LICENSE="LGPL-2.1" +SLOT="0" +IUSE="debug doc static-libs" + +DEPEND="" +RDEPEND="" + +S="${WORKDIR}/${MY_P}" + +src_prepare() { + if [[ ${PV} == "9999" ]] ; then + # Re-create file layout from release tarball + pushd "${WORKDIR}" &>/dev/null || die + cp -aL "${S}"/${PN} "${WORKDIR}"/${PN}-source || die + rm -r "${S}" || die + mv "${WORKDIR}"/${PN}-source "${S}" || die + popd &>/dev/null || die + fi + + default + + eautoreconf + + multilib_copy_sources +} + +multilib_src_configure() { + ECONF_SOURCE="${S}" econf \ + --prefix=/usr/share/oem \ + $(use_enable debug) \ + $(use_enable static-libs static) +} + +multilib_src_test() { + if multilib_is_native_abi; then + default + cd "${S}"/test && "${BUILD_DIR}"/test/cabd_test || die + fi +} + +multilib_src_install_all() { + DOCS=(AUTHORS ChangeLog NEWS README TODO) + use doc && HTML_DOCS=(doc/*) + default_src_install + if use doc; then + rm "${ED}"/usr/share/doc/"${PF}"/html/{Makefile*,Doxyfile*} || die + fi + + find "${ED}" -name '*.la' -delete || die + if ! use static-libs ; then + find "${ED}" -name "*.a" -delete || die + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/metadata.xml new file mode 100644 index 0000000000..ea25c82c21 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/libmspack/metadata.xml @@ -0,0 +1,8 @@ + + + + + reavertm@gentoo.org + Maciej Mrozowski + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/Manifest new file mode 100644 index 0000000000..8a76994a31 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/Manifest @@ -0,0 +1,2 @@ +DIST openssl-3.0.8.tar.gz 15151328 BLAKE2B e163cc9b8b458f72405a2f1bde3811c8d0eb22e8b08ff5608ec64799975f1546dcdce31466b8a1d5ed29bc90d19aa6017d711987c81b71f4b20e279828cf753a SHA512 8ce10be000d7d4092c8efc5b96b1d2f7da04c1c3a624d3a7923899c6b1de06f369016be957e36e8ab6d4c9102eaeec5d1973295d547f7893a7f11f132ae42b0d +DIST openssl-3.0.8.tar.gz.asc 833 BLAKE2B 1949801150e254e9be648f33014a4a16f803b42ca5a302c3942d377013e983e0ea0cca8aed594e3f9ecde26c6e31d222581e991af5fae6cd451d7ee83541f4bb SHA512 e1c04f1179aded228b39005fd9e9f6f75aedafb938b77ac58c97a00973eb412d93b92ad1c447332a5d96850b62b01093502928e6c190bdd0234a94c4e815d2a6 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/gentoo.config-1.0.4 b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/gentoo.config-1.0.4 new file mode 100644 index 0000000000..573a97de35 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/gentoo.config-1.0.4 @@ -0,0 +1,176 @@ +#!/usr/bin/env bash +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 +# +# Openssl doesn't play along nicely with cross-compiling +# like autotools based projects, so let's teach it new tricks. +# +# Review the bundled 'config' script to see why kind of targets +# we can pass to the 'Configure' script. + + +# Testing routines +if [[ $1 == "test" ]] ; then + for c in \ + "arm-gentoo-linux-uclibc |linux-generic32 -DL_ENDIAN" \ + "armv5b-linux-gnu |linux-armv4 -DB_ENDIAN" \ + "x86_64-pc-linux-gnu |linux-x86_64" \ + "alpha-linux-gnu |linux-alpha-gcc" \ + "alphaev56-unknown-linux-gnu |linux-alpha+bwx-gcc" \ + "i686-pc-linux-gnu |linux-elf" \ + "whatever-gentoo-freebsdX.Y |BSD-generic32" \ + "i686-gentoo-freebsdX.Y |BSD-x86-elf" \ + "sparc64-alpha-freebsdX.Y |BSD-sparc64" \ + "ia64-gentoo-freebsd5.99234 |BSD-ia64" \ + "x86_64-gentoo-freebsdX.Y |BSD-x86_64" \ + "hppa64-aldsF-linux-gnu5.3 |linux-generic32 -DB_ENDIAN" \ + "powerpc-gentOO-linux-uclibc |linux-ppc" \ + "powerpc64-unk-linux-gnu |linux-ppc64" \ + "powerpc64le-linux-gnu |linux-ppc64le" \ + "x86_64-apple-darwinX |darwin64-x86_64-cc" \ + "powerpc64-apple-darwinX |darwin64-ppc-cc" \ + "i686-apple-darwinX |darwin-i386-cc" \ + "i386-apple-darwinX |darwin-i386-cc" \ + "powerpc-apple-darwinX |darwin-ppc-cc" \ + "i586-pc-winnt |winnt-parity" \ + "s390-ibm-linux-gnu |linux-generic32 -DB_ENDIAN" \ + "s390x-linux-gnu |linux64-s390x" \ + ;do + CHOST=${c/|*} + ret_want=${c/*|} + ret_got=$(CHOST=${CHOST} "$0") + + if [[ ${ret_want} == "${ret_got}" ]] ; then + echo "PASS: ${CHOST}" + else + echo "FAIL: ${CHOST}" + echo -e "\twanted: ${ret_want}" + echo -e "\twe got: ${ret_got}" + fi + done + exit 0 +fi +[[ -z ${CHOST} && -n $1 ]] && CHOST=$1 + + +# Detect the operating system +case ${CHOST} in + *-aix*) system="aix";; + *-darwin*) system="darwin";; + *-freebsd*) system="BSD";; + *-hpux*) system="hpux";; + *-linux*) system="linux";; + *-solaris*) system="solaris";; + *-winnt*) system="winnt";; + x86_64-*-mingw*) system="mingw64";; + *mingw*) system="mingw";; + *) exit 0;; +esac + + +# Compiler munging +compiler="gcc" +if [[ ${CC} == "ccc" ]] ; then + compiler=${CC} +fi + + +# Detect target arch +machine="" +chost_machine=${CHOST%%-*} +case ${system} in +linux) + case ${chost_machine}:${ABI} in + aarch64*be*) machine="aarch64 -DB_ENDIAN";; + aarch64*) machine="aarch64 -DL_ENDIAN";; + alphaev56*|\ + alphaev[678]*)machine=alpha+bwx-${compiler};; + alpha*) machine=alpha-${compiler};; + armv[4-9]*b*) machine="armv4 -DB_ENDIAN";; + armv[4-9]*) machine="armv4 -DL_ENDIAN";; + arm*b*) machine="generic32 -DB_ENDIAN";; + arm*) machine="generic32 -DL_ENDIAN";; + avr*) machine="generic32 -DL_ENDIAN";; + bfin*) machine="generic32 -DL_ENDIAN";; + # hppa64*) machine=parisc64;; + hppa*) machine="generic32 -DB_ENDIAN";; + i[0-9]86*|\ + x86_64*:x86) machine=x86;; + ia64*) machine=ia64;; + loongarch64*) machine="loongarch64 -DL_ENDIAN" system=linux64;; + m68*) machine="latomic -DB_ENDIAN";; + mips*el*:o32) machine="mips32 -DL_ENDIAN";; + mips*:o32) machine="mips32 -DB_ENDIAN";; + mips*el*:n32) machine="mips64 -DL_ENDIAN";; + mips*:n32) machine="mips64 -DB_ENDIAN";; + mips*el*:n64) machine="mips64 -DL_ENDIAN" system=linux64;; + mips*:n64) machine="mips64 -DB_ENDIAN" system=linux64;; + powerpc64*le*)machine=ppc64le;; + powerpc64*) machine=ppc64;; + powerpc*le*) machine="generic32 -DL_ENDIAN";; + powerpc*) machine=ppc;; + riscv32*) machine="generic32 -DL_ENDIAN";; + riscv64*) machine="riscv64 -DL_ENDIAN" system=linux64;; + # sh64*) machine=elf;; + sh*b*) machine="generic32 -DB_ENDIAN";; + sh*) machine="generic32 -DL_ENDIAN";; + # TODO: Might want to do -mcpu probing like glibc to determine a + # better default for sparc-linux-gnu targets. This logic will + # break v7 and older systems when they use it. + sparc*v7*) machine="generic32 -DB_ENDIAN";; + sparc64*) machine=sparcv9 system=linux64;; + sparc*v9*) machine=sparcv9;; + sparc*v8*) machine=sparcv8;; + sparc*) machine=sparcv8;; + s390x*) machine=s390x system=linux64;; + s390*) machine="generic32 -DB_ENDIAN";; + x86_64*:x32) machine=x32;; + x86_64*) machine=x86_64;; + esac + ;; +BSD) + case ${chost_machine} in + alpha*) machine=generic64;; + i[6-9]86*) machine=x86-elf;; + ia64*) machine=ia64;; + sparc64*) machine=sparc64;; + x86_64*) machine=x86_64;; + *) machine=generic32;; + esac + ;; +aix) + machine=${compiler} + ;; +darwin) + case ${chost_machine} in + powerpc64) machine=ppc-cc; system=${system}64;; + powerpc) machine=ppc-cc;; + i?86*) machine=i386-cc;; + x86_64) machine=x86_64-cc; system=${system}64;; + esac + ;; +hpux) + case ${chost_machine} in + ia64) machine=ia64-${compiler} ;; + esac + ;; +solaris) + case ${chost_machine} in + i386) machine=x86-${compiler} ;; + x86_64*) machine=x86_64-${compiler}; system=${system}64;; + sparcv9*) machine=sparcv9-${compiler}; system=${system}64;; + sparc*) machine=sparcv8-${compiler};; + esac + ;; +winnt) + machine=parity + ;; +mingw*) + # special case ... no xxx-yyy style name + echo ${system} + ;; +esac + + +# If we have something, show it +[[ -n ${machine} ]] && echo ${system}-${machine} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/openssl.conf b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/openssl.conf new file mode 100644 index 0000000000..d8788d2929 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/openssl.conf @@ -0,0 +1,3 @@ +d /etc/ssl - - - - - +d /etc/ssl/private 0700 - - - - +L /etc/ssl/openssl.cnf - - - - ../../usr/share/ssl/openssl.cnf diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/metadata.xml new file mode 100644 index 0000000000..bb40ddbf82 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/metadata.xml @@ -0,0 +1,31 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + Support assembly hand optimized crypto functions (i.e. faster run time) + Disable/Restrict EC algorithms (as they seem to be patented) -- note: changes the ABI + Enable FIPS provider + Enable support for Kernel implementation of TLS (kTLS) + Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers) + Support for the old/insecure SSLv2 protocol -- note: not required for TLS/https + Support for the old/insecure SSLv3 protocol -- note: not required for TLS/https + Enable support for discouraged TLS compression + Enable the Heartbeat Extension in TLS and DTLS + Build support for SSL/TLS ciphers that are considered "weak" + + + cpe:/a:openssl:openssl + openssl/openssl + + + For building against. This is the only slot + that provides headers and command line tools. + For binary compatibility, provides libcrypto.so.0.9.8 + and libssl.so.0.9.8 only. + Reflect ABI of libcrypto.so and libssl.so. + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/openssl-3.0.8.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/openssl-3.0.8.ebuild new file mode 100644 index 0000000000..27820abb08 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/openssl-3.0.8.ebuild @@ -0,0 +1,265 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/openssl.org.asc +TMPFILES_OPTIONAL=1 +inherit edo flag-o-matic linux-info toolchain-funcs multilib-minimal multiprocessing verify-sig systemd tmpfiles + +DESCRIPTION="Robust, full-featured Open Source Toolkit for the Transport Layer Security (TLS)" +HOMEPAGE="https://www.openssl.org/" + +MY_P=${P/_/-} + +if [[ ${PV} == 9999 ]] ; then + EGIT_REPO_URI="https://github.com/openssl/openssl.git" + + inherit git-r3 +else + SRC_URI="mirror://openssl/source/${MY_P}.tar.gz + verify-sig? ( mirror://openssl/source/${MY_P}.tar.gz.asc )" + #KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x86-linux" + KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86" +fi + +S="${WORKDIR}"/${MY_P} + +LICENSE="Apache-2.0" +SLOT="0/3" # .so version of libssl/libcrypto +IUSE="+asm cpu_flags_x86_sse2 fips ktls rfc3779 sctp static-libs test tls-compression vanilla verify-sig weak-ssl-ciphers" +RESTRICT="!test? ( test )" + +# Flatcar: Gentoo dropped dependency on c_rehash, a required tool for +# generating certs, and does not provide a built-in tool either. +# Continue shipping it. +COMMON_DEPEND=" + >=app-misc/c_rehash-1.7-r1 + tls-compression? ( >=sys-libs/zlib-1.2.8-r1[static-libs(+)?,${MULTILIB_USEDEP}] ) +" +BDEPEND=" + >=dev-lang/perl-5 + sctp? ( >=net-misc/lksctp-tools-1.0.12 ) + test? ( + sys-apps/diffutils + sys-devel/bc + sys-process/procps + ) + verify-sig? ( >=sec-keys/openpgp-keys-openssl-20230207 )" + +DEPEND="${COMMON_DEPEND}" +RDEPEND="${COMMON_DEPEND}" +PDEPEND="app-misc/ca-certificates" + +MULTILIB_WRAPPED_HEADERS=( + /usr/include/openssl/configuration.h +) + +pkg_setup() { + if use ktls ; then + if kernel_is -lt 4 18 ; then + ewarn "Kernel implementation of TLS (USE=ktls) requires kernel >=4.18!" + else + CONFIG_CHECK="~TLS ~TLS_DEVICE" + ERROR_TLS="You will be unable to offload TLS to kernel because CONFIG_TLS is not set!" + ERROR_TLS_DEVICE="You will be unable to offload TLS to kernel because CONFIG_TLS_DEVICE is not set!" + use test && CONFIG_CHECK+=" ~CRYPTO_USER_API_SKCIPHER" + + linux-info_pkg_setup + fi + fi + + [[ ${MERGE_TYPE} == binary ]] && return + + # must check in pkg_setup; sysctl doesn't work with userpriv! + if use test && use sctp ; then + # test_ssl_new will fail with "Ensure SCTP AUTH chunks are enabled in kernel" + # if sctp.auth_enable is not enabled. + local sctp_auth_status=$(sysctl -n net.sctp.auth_enable 2>/dev/null) + if [[ -z "${sctp_auth_status}" ]] || [[ ${sctp_auth_status} != 1 ]] ; then + die "FEATURES=test with USE=sctp requires net.sctp.auth_enable=1!" + fi + fi +} + +src_unpack() { + # Can delete this once test fix patch is dropped + if use verify-sig ; then + # Needed for downloaded patch (which is unsigned, which is fine) + verify-sig_verify_detached "${DISTDIR}"/${P}.tar.gz{,.asc} + fi + + default +} + +src_prepare() { + # Allow openssl to be cross-compiled + cp "${FILESDIR}"/gentoo.config-1.0.4 gentoo.config || die + chmod a+rx gentoo.config || die + + # Keep this in sync with app-misc/c_rehash + SSL_CNF_DIR="/etc/ssl" + + # Make sure we only ever touch Makefile.org and avoid patching a file + # that gets blown away anyways by the Configure script in src_configure + rm -f Makefile + + if ! use vanilla ; then + PATCHES+=( + # Add patches which are Gentoo-specific customisations here + ) + fi + + default + + if use test && use sctp && has network-sandbox ${FEATURES} ; then + einfo "Disabling test '80-test_ssl_new.t' which is known to fail with FEATURES=network-sandbox ..." + rm test/recipes/80-test_ssl_new.t || die + fi + + # Quiet out unknown driver argument warnings since openssl + # doesn't have well-split CFLAGS and we're making it even worse + # and 'make depend' uses -Werror for added fun (bug #417795 again) + tc-is-clang && append-flags -Qunused-arguments + + # We really, really need to build OpenSSL w/ strict aliasing disabled. + # It's filled with violations and it *will* result in miscompiled + # code. This has been in the ebuild for > 10 years but even in 2022, + # it's still relevant: + # - https://github.com/llvm/llvm-project/issues/55255 + # - https://github.com/openssl/openssl/issues/18225 + # - https://github.com/openssl/openssl/issues/18663#issuecomment-1181478057 + # Don't remove the no strict aliasing bits below! + filter-flags -fstrict-aliasing + append-flags -fno-strict-aliasing + + append-flags $(test-flags-CC -Wa,--noexecstack) + + local sslout=$(./gentoo.config) + einfo "Using configuration: ${sslout:-(openssl knows best)}" + edo perl Configure ${sslout} --test-sanity + + multilib_copy_sources +} + +multilib_src_configure() { + # bug #197996 + unset APPS + # bug #312551 + unset SCRIPTS + # bug #311473 + unset CROSS_COMPILE + + tc-export AR CC CXX RANLIB RC + + use_ssl() { usex $1 "enable-${2:-$1}" "no-${2:-$1}" " ${*:3}" ; } + + local krb5=$(has_version app-crypt/mit-krb5 && echo "MIT" || echo "Heimdal") + + # See if our toolchain supports __uint128_t. If so, it's 64bit + # friendly and can use the nicely optimized code paths, bug #460790. + #local ec_nistp_64_gcc_128 + # + # Disable it for now though (bug #469976) + # Do NOT re-enable without substantial discussion first! + # + #echo "__uint128_t i;" > "${T}"/128.c + #if ${CC} ${CFLAGS} -c "${T}"/128.c -o /dev/null >&/dev/null ; then + # ec_nistp_64_gcc_128="enable-ec_nistp_64_gcc_128" + #fi + + local sslout=$(./gentoo.config) + einfo "Using configuration: ${sslout:-(openssl knows best)}" + + # https://github.com/openssl/openssl/blob/master/INSTALL.md#enable-and-disable-features + local myeconfargs=( + ${sslout} + + $(use cpu_flags_x86_sse2 || echo "no-sse2") + enable-camellia + enable-ec + enable-ec2m + enable-sm2 + enable-srp + $(use elibc_musl && echo "no-async") + enable-idea + enable-mdc2 + enable-rc5 + $(use fips && echo "enable-fips") + $(use_ssl asm) + $(use_ssl ktls) + $(use_ssl rfc3779) + $(use_ssl sctp) + $(use test || echo "no-tests") + $(use_ssl tls-compression zlib) + $(use_ssl weak-ssl-ciphers) + + --prefix="${EPREFIX}"/usr + --openssldir="${EPREFIX}"${SSL_CNF_DIR} + --libdir=$(get_libdir) + + shared + threads + ) + + edo perl Configure "${myeconfargs[@]}" +} + +multilib_src_compile() { + emake build_sw + + if multilib_is_native_abi; then + emake build_docs + fi +} + +multilib_src_test() { + # VFP = show subtests verbosely and show failed tests verbosely + # Normal V=1 would show everything verbosely but this slows things down. + emake HARNESS_JOBS="$(makeopts_jobs)" VFP=1 test +} + +multilib_src_install() { + emake DESTDIR="${D}" install_sw + if use fips; then + emake DESTDIR="${D}" install_fips + fi + + if multilib_is_native_abi; then + emake DESTDIR="${D}" install_ssldirs + emake DESTDIR="${D}" DOCDIR='$(INSTALLTOP)'/share/doc/${PF} install_docs + fi + + # This is crappy in that the static archives are still built even + # when USE=static-libs. But this is due to a failing in the openssl + # build system: the static archives are built as PIC all the time. + # Only way around this would be to manually configure+compile openssl + # twice; once with shared lib support enabled and once without. + if ! use static-libs ; then + rm "${ED}"/usr/$(get_libdir)/lib{crypto,ssl}.a || die + fi +} + +multilib_src_install_all() { + # openssl installs perl version of c_rehash by default, but + # we provide a shell version via app-misc/c_rehash + rm "${ED}"/usr/bin/c_rehash || die + + dodoc {AUTHORS,CHANGES,NEWS,README,README-PROVIDERS}.md doc/*.txt doc/${PN}-c-indent.el + + # bug #254521 + dodir /etc/sandbox.d + echo 'SANDBOX_PREDICT="/dev/crypto"' > "${ED}"/etc/sandbox.d/10openssl + + # flatcar changes: do not keep the sample CA files in `/etc` + rm -rf "${ED}"${SSL_CNF_DIR} + + # flatcar changes: save the default `openssl.cnf` in `/usr` + dodir /usr/share/ssl + insinto /usr/share/ssl + doins "${S}"/apps/openssl.cnf + dotmpfiles "${FILESDIR}"/openssl.conf + + # flatcar changes: package `tmpfiles.d` setup for SDK bootstrapping. + systemd-tmpfiles --create --root="${ED}" "${FILESDIR}"/openssl.conf +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/Manifest new file mode 100644 index 0000000000..fbb1ae14b6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/Manifest @@ -0,0 +1 @@ +DIST distro-1.7.0.tar.gz 58164 BLAKE2B 22bbd2daf9cac589530eac9a58767db6b9e389b77719516f7386a9377b49ba4c9b696165701acc42366b760b9a632c70a2243a58c12a367fef2a0a770a4aea44 SHA512 14516ecab33ee8c57c35a8279eb515fd699031fabac7d8886092ea98696797d55503179870aeb513a85e1a66c7e69f2f60bb6ea9fc935be975cb5135e1917ecc diff --git a/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/README.md b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/README.md new file mode 100644 index 0000000000..7fcb570b32 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/README.md @@ -0,0 +1,4 @@ +This package is a hacked-up way to install a distro module for oem +packages to use. It's meant to be used by dev-lang/python-oem, thus +not using any python-specific eclasses and whatnot, to avoid pulling +python dependency into the production image. diff --git a/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/distro-oem-1.7.0-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/distro-oem-1.7.0-r1.ebuild new file mode 100644 index 0000000000..149cfc59a4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/distro-oem-1.7.0-r1.ebuild @@ -0,0 +1,41 @@ +# Copyright 2021-2022 Microsoft Corporation +# Distributed under the terms of GNU General Public License v2 + +EAPI=8 + +MY_PN='distro' +MY_P="${MY_PN}-${PV}" + +DESCRIPTION="Reliable machine-readable Linux distribution information for Python" +HOMEPAGE=" + https://distro.readthedocs.io/en/latest/ + https://pypi.org/project/distro/ + https://github.com/python-distro/distro/" +SRC_URI="mirror://pypi/${MY_PN:0:1}/${MY_PN}/${MY_P}.tar.gz" + +LICENSE="Apache-2.0" +KEYWORDS="amd64 arm64" + +# Depending on specific version of python-oem allows us to notice when +# we update the major version of python and then to make sure that we +# install the package in correctly versioned site-packages directory. +DEP_PYVER="3.10" + +SLOT="0" +RDEPEND="dev-lang/python-oem:${DEP_PYVER}" + +S="${WORKDIR}/${MY_P}" + +src_compile() { + # nothing to do + : +} + +src_install() { + insinto "/usr/share/oem/python/$(get_libdir)/python${DEP_PYVER}/site-packages" + local ssd="${S}/src/distro" + doins "${ssd}/distro.py" + doins "${ssd}/__init__.py" + doins "${ssd}/__main__.py" + doins "${ssd}/py.typed" +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/metadata.xml new file mode 100644 index 0000000000..097975e3ad --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-python/distro-oem/metadata.xml @@ -0,0 +1,4 @@ + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/Manifest b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/Manifest new file mode 100644 index 0000000000..8adbb42319 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/Manifest @@ -0,0 +1 @@ +DIST bsdiff-4.3.tar.gz 5740 BLAKE2B 869b957fac9de5977216b82ae46f5a291af4f64e8f4199b129b5e9963385e8f23d8593c307ddf953001fc54446ba66a0c57f9f9a841854afc3d32aee26fffc4e SHA512 bde46b393b74bcc9f05532ea4d45b12c104c4f182fdd49d4176aad5f02a2b357f435819f13a5a7ddefe27df0ca82980f06fad764094014a6d068622263e319c3 diff --git a/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/bsdiff-4.3-r4.ebuild b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/bsdiff-4.3-r4.ebuild new file mode 100644 index 0000000000..3b66dbd7b0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/bsdiff-4.3-r4.ebuild @@ -0,0 +1,39 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit edo flag-o-matic toolchain-funcs + +DESCRIPTION="bsdiff: Binary Differencer using a suffix alg" +HOMEPAGE="https://www.daemonology.net/bsdiff/" +SRC_URI="https://www.daemonology.net/bsdiff/${P}.tar.gz" + +LICENSE="BSD-2" +SLOT="0" +KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~ia64 ~mips ppc sparc x86 ~amd64-linux ~x86-linux ~ppc-macos" + +RDEPEND="app-arch/bzip2" +DEPEND="${RDEPEND}" + +PATCHES=( + "${FILESDIR}/${P}-CVE-2014-9862.patch" + # Flatcar: Apply patch to change suffix sort to sais-lite, and + # to fix heap overflow vulnerability CVE-2020-14315. + "${FILESDIR}/${PV}_bsdiff-convert-to-sais-lite-suffix-sort.patch" + "${FILESDIR}/${P}-CVE-2020-14315.patch" +) + +src_compile() { + append-lfs-flags + + # Flatcar: build including sais.c, which comes from 3rd-party patch + # 4.3_bsdiff-convert-to-sais-lite-suffix-sort.patch. + edo $(tc-getCC) ${CPPFLAGS} ${CFLAGS} ${LDFLAGS} -o bsdiff bsdiff.c sais.c -lbz2 + edo $(tc-getCC) ${CPPFLAGS} ${CFLAGS} ${LDFLAGS} -o bspatch bspatch.c -lbz2 +} + +src_install() { + dobin bs{diff,patch} + doman bs{diff,patch}.1 +} diff --git a/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/4.3_bsdiff-convert-to-sais-lite-suffix-sort.patch b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/4.3_bsdiff-convert-to-sais-lite-suffix-sort.patch new file mode 100644 index 0000000000..589ecad248 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/4.3_bsdiff-convert-to-sais-lite-suffix-sort.patch @@ -0,0 +1,754 @@ +From f220517e188924e67040c6171ca7e0dede16c6b4 Mon Sep 17 00:00:00 2001 +From: Geoff Levand +Date: Tue, 14 Jul 2015 14:29:21 -0700 +Subject: [PATCH 2/2] bsdiff: Convert to sais-lite suffix sort + +Convert the bsdiff suffix sort algorithm from its own qsufsort implementation to +the sais-lite suffix sort algorithm from [1]. Fixes problems with slow +operation and program hangs as reported in [2] through [4]. + + [1] https://sites.google.com/site/yuta256/sais + [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=409664 + [3] https://github.com/sparkle-project/Sparkle/pull/515 + [4] https://chromium.googlesource.com/chromiumos/third_party/bsdiff/+/e2b85ce4ea246ca804ee2a9e18005c44e193d868 + +Signed-off-by: Geoff Levand +--- + bsdiff.c | 104 +------------ + sais.c | 534 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + sais.h | 59 +++++++ + 3 files changed, 597 insertions(+), 100 deletions(-) + create mode 100644 sais.c + create mode 100644 sais.h + +diff --git a/bsdiff.c b/bsdiff.c +index 150a7f7..5c6c94f 100644 +--- a/bsdiff.c ++++ b/bsdiff.c +@@ -38,106 +38,9 @@ __FBSDID("$FreeBSD: src/usr.bin/bsdiff/bsdiff/bsdiff.c,v 1.1 2005/08/06 01:59:05 + #include + #include + +-#define MIN(x,y) (((x)<(y)) ? (x) : (y)) +- +-static void split(off_t *I,off_t *V,off_t start,off_t len,off_t h) +-{ +- off_t i,j,k,x,tmp,jj,kk; +- +- if(len<16) { +- for(k=start;kstart) split(I,V,start,jj-start,h); +- +- for(i=0;ikk) split(I,V,kk,start+len-kk,h); +-} ++#include "sais.h" + +-static void qsufsort(off_t *I,off_t *V,u_char *old,off_t oldsize) +-{ +- off_t buckets[256]; +- off_t i,h,len; +- +- for(i=0;i<256;i++) buckets[i]=0; +- for(i=0;i0;i--) buckets[i]=buckets[i-1]; +- buckets[0]=0; +- +- for(i=0;i ++#include ++#include "sais.h" ++ ++#ifndef UCHAR_SIZE ++# define UCHAR_SIZE 256 ++#endif ++#ifndef MINBUCKETSIZE ++# define MINBUCKETSIZE 256 ++#endif ++ ++#define sais_bool_type int ++#define SAIS_LMSSORT2_LIMIT 0x3fffffff ++ ++#define SAIS_MYMALLOC(_num, _type) ((_type *)malloc((_num) * sizeof(_type))) ++#define SAIS_MYFREE(_ptr, _num, _type) free((_ptr)) ++#define chr(_a) (cs == sizeof(sais_index_type) ? ((sais_index_type *)T)[(_a)] : ((unsigned char *)T)[(_a)]) ++ ++/* find the start or end of each bucket */ ++static ++void ++getCounts(const void *T, sais_index_type *C, sais_index_type n, sais_index_type k, int cs) { ++ sais_index_type i; ++ for(i = 0; i < k; ++i) { C[i] = 0; } ++ for(i = 0; i < n; ++i) { ++C[chr(i)]; } ++} ++static ++void ++getBuckets(const sais_index_type *C, sais_index_type *B, sais_index_type k, sais_bool_type end) { ++ sais_index_type i, sum = 0; ++ if(end) { for(i = 0; i < k; ++i) { sum += C[i]; B[i] = sum; } } ++ else { for(i = 0; i < k; ++i) { sum += C[i]; B[i] = sum - C[i]; } } ++} ++ ++/* sort all type LMS suffixes */ ++static ++void ++LMSsort1(const void *T, sais_index_type *SA, ++ sais_index_type *C, sais_index_type *B, ++ sais_index_type n, sais_index_type k, int cs) { ++ sais_index_type *b, i, j; ++ sais_index_type c0, c1; ++ ++ /* compute SAl */ ++ if(C == B) { getCounts(T, C, n, k, cs); } ++ getBuckets(C, B, k, 0); /* find starts of buckets */ ++ j = n - 1; ++ b = SA + B[c1 = chr(j)]; ++ --j; ++ *b++ = (chr(j) < c1) ? ~j : j; ++ for(i = 0; i < n; ++i) { ++ if(0 < (j = SA[i])) { ++ assert(chr(j) >= chr(j + 1)); ++ if((c0 = chr(j)) != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert(i < (b - SA)); ++ --j; ++ *b++ = (chr(j) < c1) ? ~j : j; ++ SA[i] = 0; ++ } else if(j < 0) { ++ SA[i] = ~j; ++ } ++ } ++ /* compute SAs */ ++ if(C == B) { getCounts(T, C, n, k, cs); } ++ getBuckets(C, B, k, 1); /* find ends of buckets */ ++ for(i = n - 1, b = SA + B[c1 = 0]; 0 <= i; --i) { ++ if(0 < (j = SA[i])) { ++ assert(chr(j) <= chr(j + 1)); ++ if((c0 = chr(j)) != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert((b - SA) <= i); ++ --j; ++ *--b = (chr(j) > c1) ? ~(j + 1) : j; ++ SA[i] = 0; ++ } ++ } ++} ++static ++sais_index_type ++LMSpostproc1(const void *T, sais_index_type *SA, ++ sais_index_type n, sais_index_type m, int cs) { ++ sais_index_type i, j, p, q, plen, qlen, name; ++ sais_index_type c0, c1; ++ sais_bool_type diff; ++ ++ /* compact all the sorted substrings into the first m items of SA ++ 2*m must be not larger than n (proveable) */ ++ assert(0 < n); ++ for(i = 0; (p = SA[i]) < 0; ++i) { SA[i] = ~p; assert((i + 1) < n); } ++ if(i < m) { ++ for(j = i, ++i;; ++i) { ++ assert(i < n); ++ if((p = SA[i]) < 0) { ++ SA[j++] = ~p; SA[i] = 0; ++ if(j == m) { break; } ++ } ++ } ++ } ++ ++ /* store the length of all substrings */ ++ i = n - 1; j = n - 1; c0 = chr(n - 1); ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) >= c1)); ++ for(; 0 <= i;) { ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) <= c1)); ++ if(0 <= i) { ++ SA[m + ((i + 1) >> 1)] = j - i; j = i + 1; ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) >= c1)); ++ } ++ } ++ ++ /* find the lexicographic names of all substrings */ ++ for(i = 0, name = 0, q = n, qlen = 0; i < m; ++i) { ++ p = SA[i], plen = SA[m + (p >> 1)], diff = 1; ++ if((plen == qlen) && ((q + plen) < n)) { ++ for(j = 0; (j < plen) && (chr(p + j) == chr(q + j)); ++j) { } ++ if(j == plen) { diff = 0; } ++ } ++ if(diff != 0) { ++name, q = p, qlen = plen; } ++ SA[m + (p >> 1)] = name; ++ } ++ ++ return name; ++} ++static ++void ++LMSsort2(const void *T, sais_index_type *SA, ++ sais_index_type *C, sais_index_type *B, sais_index_type *D, ++ sais_index_type n, sais_index_type k, int cs) { ++ sais_index_type *b, i, j, t, d; ++ sais_index_type c0, c1; ++ assert(C != B); ++ ++ /* compute SAl */ ++ getBuckets(C, B, k, 0); /* find starts of buckets */ ++ j = n - 1; ++ b = SA + B[c1 = chr(j)]; ++ --j; ++ t = (chr(j) < c1); ++ j += n; ++ *b++ = (t & 1) ? ~j : j; ++ for(i = 0, d = 0; i < n; ++i) { ++ if(0 < (j = SA[i])) { ++ if(n <= j) { d += 1; j -= n; } ++ assert(chr(j) >= chr(j + 1)); ++ if((c0 = chr(j)) != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert(i < (b - SA)); ++ --j; ++ t = c0; t = (t << 1) | (chr(j) < c1); ++ if(D[t] != d) { j += n; D[t] = d; } ++ *b++ = (t & 1) ? ~j : j; ++ SA[i] = 0; ++ } else if(j < 0) { ++ SA[i] = ~j; ++ } ++ } ++ for(i = n - 1; 0 <= i; --i) { ++ if(0 < SA[i]) { ++ if(SA[i] < n) { ++ SA[i] += n; ++ for(j = i - 1; SA[j] < n; --j) { } ++ SA[j] -= n; ++ i = j; ++ } ++ } ++ } ++ ++ /* compute SAs */ ++ getBuckets(C, B, k, 1); /* find ends of buckets */ ++ for(i = n - 1, d += 1, b = SA + B[c1 = 0]; 0 <= i; --i) { ++ if(0 < (j = SA[i])) { ++ if(n <= j) { d += 1; j -= n; } ++ assert(chr(j) <= chr(j + 1)); ++ if((c0 = chr(j)) != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert((b - SA) <= i); ++ --j; ++ t = c0; t = (t << 1) | (chr(j) > c1); ++ if(D[t] != d) { j += n; D[t] = d; } ++ *--b = (t & 1) ? ~(j + 1) : j; ++ SA[i] = 0; ++ } ++ } ++} ++static ++sais_index_type ++LMSpostproc2(sais_index_type *SA, sais_index_type n, sais_index_type m) { ++ sais_index_type i, j, d, name; ++ ++ /* compact all the sorted LMS substrings into the first m items of SA */ ++ assert(0 < n); ++ for(i = 0, name = 0; (j = SA[i]) < 0; ++i) { ++ j = ~j; ++ if(n <= j) { name += 1; } ++ SA[i] = j; ++ assert((i + 1) < n); ++ } ++ if(i < m) { ++ for(d = i, ++i;; ++i) { ++ assert(i < n); ++ if((j = SA[i]) < 0) { ++ j = ~j; ++ if(n <= j) { name += 1; } ++ SA[d++] = j; SA[i] = 0; ++ if(d == m) { break; } ++ } ++ } ++ } ++ if(name < m) { ++ /* store the lexicographic names */ ++ for(i = m - 1, d = name + 1; 0 <= i; --i) { ++ if(n <= (j = SA[i])) { j -= n; --d; } ++ SA[m + (j >> 1)] = d; ++ } ++ } else { ++ /* unset flags */ ++ for(i = 0; i < m; ++i) { ++ if(n <= (j = SA[i])) { j -= n; SA[i] = j; } ++ } ++ } ++ ++ return name; ++} ++ ++/* compute SA and BWT */ ++static ++void ++induceSA(const void *T, sais_index_type *SA, ++ sais_index_type *C, sais_index_type *B, ++ sais_index_type n, sais_index_type k, int cs) { ++ sais_index_type *b, i, j; ++ sais_index_type c0, c1; ++ /* compute SAl */ ++ if(C == B) { getCounts(T, C, n, k, cs); } ++ getBuckets(C, B, k, 0); /* find starts of buckets */ ++ j = n - 1; ++ b = SA + B[c1 = chr(j)]; ++ *b++ = ((0 < j) && (chr(j - 1) < c1)) ? ~j : j; ++ for(i = 0; i < n; ++i) { ++ j = SA[i], SA[i] = ~j; ++ if(0 < j) { ++ --j; ++ assert(chr(j) >= chr(j + 1)); ++ if((c0 = chr(j)) != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert(i < (b - SA)); ++ *b++ = ((0 < j) && (chr(j - 1) < c1)) ? ~j : j; ++ } ++ } ++ /* compute SAs */ ++ if(C == B) { getCounts(T, C, n, k, cs); } ++ getBuckets(C, B, k, 1); /* find ends of buckets */ ++ for(i = n - 1, b = SA + B[c1 = 0]; 0 <= i; --i) { ++ if(0 < (j = SA[i])) { ++ --j; ++ assert(chr(j) <= chr(j + 1)); ++ if((c0 = chr(j)) != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert((b - SA) <= i); ++ *--b = ((j == 0) || (chr(j - 1) > c1)) ? ~j : j; ++ } else { ++ SA[i] = ~j; ++ } ++ } ++} ++static ++sais_index_type ++computeBWT(const void *T, sais_index_type *SA, ++ sais_index_type *C, sais_index_type *B, ++ sais_index_type n, sais_index_type k, int cs) { ++ sais_index_type *b, i, j, pidx = -1; ++ sais_index_type c0, c1; ++ /* compute SAl */ ++ if(C == B) { getCounts(T, C, n, k, cs); } ++ getBuckets(C, B, k, 0); /* find starts of buckets */ ++ j = n - 1; ++ b = SA + B[c1 = chr(j)]; ++ *b++ = ((0 < j) && (chr(j - 1) < c1)) ? ~j : j; ++ for(i = 0; i < n; ++i) { ++ if(0 < (j = SA[i])) { ++ --j; ++ assert(chr(j) >= chr(j + 1)); ++ SA[i] = ~((sais_index_type)(c0 = chr(j))); ++ if(c0 != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert(i < (b - SA)); ++ *b++ = ((0 < j) && (chr(j - 1) < c1)) ? ~j : j; ++ } else if(j != 0) { ++ SA[i] = ~j; ++ } ++ } ++ /* compute SAs */ ++ if(C == B) { getCounts(T, C, n, k, cs); } ++ getBuckets(C, B, k, 1); /* find ends of buckets */ ++ for(i = n - 1, b = SA + B[c1 = 0]; 0 <= i; --i) { ++ if(0 < (j = SA[i])) { ++ --j; ++ assert(chr(j) <= chr(j + 1)); ++ SA[i] = (c0 = chr(j)); ++ if(c0 != c1) { B[c1] = b - SA; b = SA + B[c1 = c0]; } ++ assert((b - SA) <= i); ++ *--b = ((0 < j) && (chr(j - 1) > c1)) ? ~((sais_index_type)chr(j - 1)) : j; ++ } else if(j != 0) { ++ SA[i] = ~j; ++ } else { ++ pidx = i; ++ } ++ } ++ return pidx; ++} ++ ++/* find the suffix array SA of T[0..n-1] in {0..255}^n */ ++static ++sais_index_type ++sais_main(const void *T, sais_index_type *SA, ++ sais_index_type fs, sais_index_type n, sais_index_type k, int cs, ++ sais_bool_type isbwt) { ++ sais_index_type *C, *B, *D, *RA, *b; ++ sais_index_type i, j, m, p, q, t, name, pidx = 0, newfs; ++ sais_index_type c0, c1; ++ unsigned int flags; ++ ++ assert((T != NULL) && (SA != NULL)); ++ assert((0 <= fs) && (0 < n) && (1 <= k)); ++ ++ if(k <= MINBUCKETSIZE) { ++ if((C = SAIS_MYMALLOC((size_t)k, sais_index_type)) == NULL) { return -2; } ++ if(k <= fs) { ++ B = SA + (n + fs - k); ++ flags = 1; ++ } else { ++ if((B = SAIS_MYMALLOC((size_t)k, sais_index_type)) == NULL) { SAIS_MYFREE(C, k, sais_index_type); return -2; } ++ flags = 3; ++ } ++ } else if(k <= fs) { ++ C = SA + (n + fs - k); ++ if(k <= (fs - k)) { ++ B = C - k; ++ flags = 0; ++ } else if(k <= (MINBUCKETSIZE * 4)) { ++ if((B = SAIS_MYMALLOC((size_t)k, sais_index_type)) == NULL) { return -2; } ++ flags = 2; ++ } else { ++ B = C; ++ flags = 8; ++ } ++ } else { ++ if((C = B = SAIS_MYMALLOC((size_t)k, sais_index_type)) == NULL) { return -2; } ++ flags = 4 | 8; ++ } ++ if((n <= SAIS_LMSSORT2_LIMIT) && (2 <= (n / k))) { ++ if(flags & 1) { flags |= ((k * 2) <= (fs - k)) ? 32 : 16; } ++ else if((flags == 0) && ((k * 2) <= (fs - k * 2))) { flags |= 32; } ++ } ++ ++ /* stage 1: reduce the problem by at least 1/2 ++ sort all the LMS-substrings */ ++ getCounts(T, C, n, k, cs); getBuckets(C, B, k, 1); /* find ends of buckets */ ++ for(i = 0; i < n; ++i) { SA[i] = 0; } ++ b = &t; i = n - 1; j = n; m = 0; c0 = chr(n - 1); ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) >= c1)); ++ for(; 0 <= i;) { ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) <= c1)); ++ if(0 <= i) { ++ *b = j; b = SA + --B[c1]; j = i; ++m; ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) >= c1)); ++ } ++ } ++ ++ if(1 < m) { ++ if(flags & (16 | 32)) { ++ if(flags & 16) { ++ if((D = SAIS_MYMALLOC((size_t)k * 2, sais_index_type)) == NULL) { ++ if(flags & (1 | 4)) { SAIS_MYFREE(C, k, sais_index_type); } ++ if(flags & 2) { SAIS_MYFREE(B, k, sais_index_type); } ++ return -2; ++ } ++ } else { ++ D = B - k * 2; ++ } ++ assert((j + 1) < n); ++ ++B[chr(j + 1)]; ++ for(i = 0, j = 0; i < k; ++i) { ++ j += C[i]; ++ if(B[i] != j) { assert(SA[B[i]] != 0); SA[B[i]] += n; } ++ D[i] = D[i + k] = 0; ++ } ++ LMSsort2(T, SA, C, B, D, n, k, cs); ++ name = LMSpostproc2(SA, n, m); ++ if(flags & 16) { SAIS_MYFREE(D, k * 2, sais_index_type); } ++ } else { ++ LMSsort1(T, SA, C, B, n, k, cs); ++ name = LMSpostproc1(T, SA, n, m, cs); ++ } ++ } else if(m == 1) { ++ *b = j + 1; ++ name = 1; ++ } else { ++ name = 0; ++ } ++ ++ /* stage 2: solve the reduced problem ++ recurse if names are not yet unique */ ++ if(name < m) { ++ if(flags & 4) { SAIS_MYFREE(C, k, sais_index_type); } ++ if(flags & 2) { SAIS_MYFREE(B, k, sais_index_type); } ++ newfs = (n + fs) - (m * 2); ++ if((flags & (1 | 4 | 8)) == 0) { ++ if((k + name) <= newfs) { newfs -= k; } ++ else { flags |= 8; } ++ } ++ assert((n >> 1) <= (newfs + m)); ++ RA = SA + m + newfs; ++ for(i = m + (n >> 1) - 1, j = m - 1; m <= i; --i) { ++ if(SA[i] != 0) { ++ RA[j--] = SA[i] - 1; ++ } ++ } ++ if(sais_main(RA, SA, newfs, m, name, sizeof(sais_index_type), 0) != 0) { ++ if(flags & 1) { SAIS_MYFREE(C, k, sais_index_type); } ++ return -2; ++ } ++ ++ i = n - 1; j = m - 1; c0 = chr(n - 1); ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) >= c1)); ++ for(; 0 <= i;) { ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) <= c1)); ++ if(0 <= i) { ++ RA[j--] = i + 1; ++ do { c1 = c0; } while((0 <= --i) && ((c0 = chr(i)) >= c1)); ++ } ++ } ++ for(i = 0; i < m; ++i) { SA[i] = RA[SA[i]]; } ++ if(flags & 4) { ++ if((C = B = SAIS_MYMALLOC((size_t)k, sais_index_type)) == NULL) { return -2; } ++ } ++ if(flags & 2) { ++ if((B = SAIS_MYMALLOC((size_t)k, sais_index_type)) == NULL) { ++ if(flags & 1) { SAIS_MYFREE(C, k, sais_index_type); } ++ return -2; ++ } ++ } ++ } ++ ++ /* stage 3: induce the result for the original problem */ ++ if(flags & 8) { getCounts(T, C, n, k, cs); } ++ /* put all left-most S characters into their buckets */ ++ if(1 < m) { ++ getBuckets(C, B, k, 1); /* find ends of buckets */ ++ i = m - 1, j = n, p = SA[m - 1], c1 = chr(p); ++ do { ++ q = B[c0 = c1]; ++ while(q < j) { SA[--j] = 0; } ++ do { ++ SA[--j] = p; ++ if(--i < 0) { break; } ++ p = SA[i]; ++ } while((c1 = chr(p)) == c0); ++ } while(0 <= i); ++ while(0 < j) { SA[--j] = 0; } ++ } ++ if(isbwt == 0) { induceSA(T, SA, C, B, n, k, cs); } ++ else { pidx = computeBWT(T, SA, C, B, n, k, cs); } ++ if(flags & (1 | 4)) { SAIS_MYFREE(C, k, sais_index_type); } ++ if(flags & 2) { SAIS_MYFREE(B, k, sais_index_type); } ++ ++ return pidx; ++} ++ ++/*---------------------------------------------------------------------------*/ ++ ++sais_index_type ++sais(const unsigned char *T, sais_index_type *SA, int n) { ++ if((T == NULL) || (SA == NULL) || (n < 0)) { return -1; } ++ if(n <= 1) { if(n == 1) { SA[0] = 0; } return 0; } ++ return sais_main(T, SA, 0, n, UCHAR_SIZE, sizeof(unsigned char), 0); ++} ++ ++sais_index_type ++sais_int(const int *T, sais_index_type *SA, int n, int k) { ++ if((T == NULL) || (SA == NULL) || (n < 0) || (k <= 0)) { return -1; } ++ if(n <= 1) { if(n == 1) { SA[0] = 0; } return 0; } ++ return sais_main(T, SA, 0, n, k, sizeof(int), 0); ++} ++ ++sais_index_type ++sais_bwt(const unsigned char *T, unsigned char *U, sais_index_type *A, int n) { ++ int i; ++ sais_index_type pidx; ++ if((T == NULL) || (U == NULL) || (A == NULL) || (n < 0)) { return -1; } ++ if(n <= 1) { if(n == 1) { U[0] = T[0]; } return n; } ++ pidx = sais_main(T, A, 0, n, UCHAR_SIZE, sizeof(unsigned char), 1); ++ if(pidx < 0) { return pidx; } ++ U[0] = T[n - 1]; ++ for(i = 0; i < pidx; ++i) { U[i + 1] = (unsigned char)A[i]; } ++ for(i += 1; i < n; ++i) { U[i] = (unsigned char)A[i]; } ++ pidx += 1; ++ return pidx; ++} ++ ++sais_index_type ++sais_int_bwt(const sais_index_type *T, sais_index_type *U, sais_index_type *A, int n, int k) { ++ int i; ++ sais_index_type pidx; ++ if((T == NULL) || (U == NULL) || (A == NULL) || (n < 0) || (k <= 0)) { return -1; } ++ if(n <= 1) { if(n == 1) { U[0] = T[0]; } return n; } ++ pidx = sais_main(T, A, 0, n, k, sizeof(int), 1); ++ if(pidx < 0) { return pidx; } ++ U[0] = T[n - 1]; ++ for(i = 0; i < pidx; ++i) { U[i + 1] = A[i]; } ++ for(i += 1; i < n; ++i) { U[i] = A[i]; } ++ pidx += 1; ++ return pidx; ++} +diff --git a/sais.h b/sais.h +new file mode 100644 +index 0000000..1abd0af +--- /dev/null ++++ b/sais.h +@@ -0,0 +1,59 @@ ++/* ++ * sais.h for sais-lite ++ * Copyright (c) 2008-2010 Yuta Mori All Rights Reserved. ++ * ++ * Permission is hereby granted, free of charge, to any person ++ * obtaining a copy of this software and associated documentation ++ * files (the "Software"), to deal in the Software without ++ * restriction, including without limitation the rights to use, ++ * copy, modify, merge, publish, distribute, sublicense, and/or sell ++ * copies of the Software, and to permit persons to whom the ++ * Software is furnished to do so, subject to the following ++ * conditions: ++ * ++ * The above copyright notice and this permission notice shall be ++ * included in all copies or substantial portions of the Software. ++ * ++ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, ++ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES ++ * OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND ++ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT ++ * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, ++ * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING ++ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR ++ * OTHER DEALINGS IN THE SOFTWARE. ++ */ ++ ++#ifndef _SAIS_H ++#define _SAIS_H 1 ++ ++#ifdef __cplusplus ++extern "C" { ++#endif /* __cplusplus */ ++ ++#include ++ ++#define sais_index_type off_t ++ ++/* find the suffix array SA of T[0..n-1] ++ use a working space (excluding T and SA) of at most 2n+O(lg n) */ ++sais_index_type ++sais(const unsigned char *T, sais_index_type *SA, int n); ++ ++/* find the suffix array SA of T[0..n-1] in {0..k-1}^n ++ use a working space (excluding T and SA) of at most MAX(4k,2n) */ ++sais_index_type ++sais_int(const int *T, sais_index_type *SA, int n, int k); ++ ++/* burrows-wheeler transform */ ++sais_index_type ++sais_bwt(const unsigned char *T, unsigned char *U, sais_index_type *A, int n); ++sais_index_type ++sais_int_bwt(const sais_index_type *T, sais_index_type *U, sais_index_type *A, int n, int k); ++ ++ ++#ifdef __cplusplus ++} /* extern "C" */ ++#endif /* __cplusplus */ ++ ++#endif /* _SAIS_H */ +-- +2.1.0 + diff --git a/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/bsdiff-4.3-CVE-2014-9862.patch b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/bsdiff-4.3-CVE-2014-9862.patch new file mode 100644 index 0000000000..7aab818090 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/bsdiff-4.3-CVE-2014-9862.patch @@ -0,0 +1,15 @@ +diff --git a/bspatch.c b/bspatch.c +index 8d95633..ab77722 100644 +--- a/bspatch.c ++++ b/bspatch.c + +@@ -187,6 +187,10 @@ + }; + + /* Sanity-check */ ++ if ((ctrl[0] < 0) || (ctrl[1] < 0)) ++ errx(1,"Corrupt patch\n"); ++ ++ /* Sanity-check */ + if(newpos+ctrl[0]>newsize) + errx(1,"Corrupt patch\n"); diff --git a/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/bsdiff-4.3-CVE-2020-14315.patch b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/bsdiff-4.3-CVE-2020-14315.patch new file mode 100644 index 0000000000..1ee302dca2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/files/bsdiff-4.3-CVE-2020-14315.patch @@ -0,0 +1,22 @@ +--- a/bspatch.c 2021-01-11 15:53:32.642707355 +0100 ++++ b/bspatch.c 2021-01-11 16:00:14.704637769 +0100 +@@ -35,6 +35,7 @@ + #include + #include + #include ++#include + + static off_t offtin(u_char *buf) + { +@@ -152,8 +153,9 @@ + }; + + /* Sanity-check */ +- if ((ctrl[0] < 0) || (ctrl[1] < 0)) +- errx(1,"Corrupt patch\n"); ++ if (ctrl[0] < 0 || ctrl[0] > INT_MAX || ++ ctrl[1] < 0 || ctrl[1] > INT_MAX) ++ errx(1, "Corrupt patch\n"); + + /* Sanity-check */ + if(newpos+ctrl[0]>newsize) diff --git a/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/metadata.xml b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/metadata.xml new file mode 100644 index 0000000000..115e9d64a6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/dev-util/bsdiff/metadata.xml @@ -0,0 +1,5 @@ + + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/binutils-funcs.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/binutils-funcs.eclass new file mode 100644 index 0000000000..32c32d1c21 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/binutils-funcs.eclass @@ -0,0 +1,22 @@ +# Copyright (c) 2011 The Chromium Authors. All rights reserved. +# Use of this source code is governed by a BSD-style license that can be +# found in the LICENSE file. +# $Header: + +# @ECLASS: binutils-funcs.eclass +# @MAINTAINER: +# Raymes Khoury +# @DESCRIPTION: +# Functions to get the paths to binutils installations for gold and for GNU ld. + +inherit toolchain-funcs + +get_binutils_path_ld() { + local ld_path=$(readlink -f $(type -p $(tc-getLD ${1}))) + local binutils_dir=$(dirname ${ld_path}) + echo ${binutils_dir} +} + +get_binutils_path_gold() { + echo $(get_binutils_path_ld ${1})-gold +} diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/coreos-cargo.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-cargo.eclass new file mode 100644 index 0000000000..c7076edefb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-cargo.eclass @@ -0,0 +1,111 @@ +# Copyright 2017-2018 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS: coreos-cargo.eclass +# @MAINTAINER: +# team-os@coreos.com +# @AUTHOR: +# David Michael +# @BLURB: cargo cross-compilation support for CoreOS/ChromeOS targets + +if [[ -z ${_COREOS_CARGO_ECLASS} ]]; then +_COREOS_CARGO_ECLASS=1 + +# XXX: Don't require host dependencies to also be in the sysroot. +CATEGORY=dev-util PN=cargo inherit cargo +inherit toolchain-funcs + +EXPORT_FUNCTIONS src_unpack + +# @FUNCTION: coreos-cargo_src_unpack +# @DESCRIPTION: +# This amends the src_unpack from cargo.eclass to add support for Rust +# cross-compiling to the ChromeOS targets. It maps the host triplet to +# one built into rustc and uses the board root as its sysroot. +coreos-cargo_src_unpack() { + debug-print-function ${FUNCNAME} "$@" + cargo_src_unpack "$@" + + [[ ${CBUILD:-${CHOST}} != ${CHOST} ]] || return 0 + + # Map the SDK host triplet to one that is built into rustc. + function rust_builtin_target() case "$1" in + aarch64-*-linux-gnu) echo aarch64-unknown-linux-gnu ;; + x86_64-*-linux-gnu) echo x86_64-unknown-linux-gnu ;; + *) die "Unknown host triplet: $1" ;; + esac + + # Set the gcc-rs flags for cross-compiling. + export TARGET_CFLAGS="${CFLAGS}" + export TARGET_CXXFLAGS="${CXXFLAGS}" + + # Wrap ar for gcc-rs to work around rust-lang/cargo#4456. + export TARGET_AR="${T}/rustproof-ar" + cat <<- EOF > "${TARGET_AR}" && chmod 0755 "${TARGET_AR}" + #!/bin/sh + unset LD_LIBRARY_PATH + exec $(tc-getAR) "\$@" + EOF + + # Wrap gcc for gcc-rs to work around rust-lang/cargo#4456. + export TARGET_CC="${T}/rustproof-cc" + cat <<- EOF > "${TARGET_CC}" && chmod 0755 "${TARGET_CC}" + #!/bin/sh + unset LD_LIBRARY_PATH + exec $(tc-getCC) "\$@" + EOF + + # Wrap g++ for gcc-rs to work around rust-lang/cargo#4456. + export TARGET_CXX="${T}/rustproof-cxx" + cat <<- EOF > "${TARGET_CXX}" && chmod 0755 "${TARGET_CXX}" + #!/bin/sh + unset LD_LIBRARY_PATH + exec $(tc-getCXX) "\$@" + EOF + + # Create a compiler wrapper that uses a sysroot for cross-compiling. + export RUSTC_WRAPPER="${T}/wrustc" + cat <<- 'EOF' > "${RUSTC_WRAPPER}" && chmod 0755 "${RUSTC_WRAPPER}" + #!/bin/bash -e + rustc=${1:?Missing rustc command} + shift + xflags=() + # rustlib is part of host rustc now, so no: [ "x$*" = "x${*#--target}" ] || xflags=( --sysroot="${ROOT:-/}usr" ) + exec "${rustc}" "${xflags[@]}" "$@" + EOF + + # Compile for the built-in target, using the SDK cross-tools. + export RUST_TARGET=$(rust_builtin_target "${CHOST}") + local -a config_lines + local build_amended=0 + local target_rust_target_amended=0 + local REPLY + readonly b_header='[build]' + readonly t_header="[target.${RUST_TARGET}]" + readonly target_line="target = \"${RUST_TARGET}\"" + readonly ar_line="ar = \"${TARGET_AR}\"" + readonly linker_line="linker = \"${TARGET_CC}\"" + while read -r; do + config_lines+=("${REPLY}") + case "${REPLY}" in + "${b_header}") + config_lines+=("${target_line}") + build_amended=1 + ;; + "${t_header}") + config_lines+=("${ar_line}") + config_lines+=("${linker_line}") + target_rust_target_amended=1 + ;; + esac + done <"${ECARGO_HOME}/config" + if [[ "${build_amended}" -eq 0 ]]; then + config_lines+=('' "${b_header}" "${target_line}") + fi + if [[ "${target_rust_target_amended}" -eq 0 ]]; then + config_lines+=('' "${t_header}" "${ar_line}" "${linker_line}") + fi + printf '%s\n' "${config_lines[@]}" >"${ECARGO_HOME}/config" +} + +fi diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-depend.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-depend.eclass new file mode 100644 index 0000000000..a81944891e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-depend.eclass @@ -0,0 +1,29 @@ +# Copyright 2016 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS: coreos-go-depend.eclass +# @BLURB: Minimal Go eclass for simply depending on Go. + +# @ECLASS-VARIABLE: COREOS_GO_VERSION +# @DESCRIPTION: +# This variable specifies the version of Go to use. If ommitted the +# default value below will be used. +# +# Example: +# @CODE +# COREOS_GO_VERSION=go1.19 +# @CODE +export COREOS_GO_VERSION="${COREOS_GO_VERSION:-go1.19}" + +case "${EAPI:-0}" in + 5|6) DEPEND="dev-lang/go:${COREOS_GO_VERSION#go}=" ;; + 7|8) BDEPEND="dev-lang/go:${COREOS_GO_VERSION#go}=" ;; + *) die "Unsupported EAPI=${EAPI} for ${ECLASS}" +esac + +inherit coreos-go-utils + +# Set a use flag to indicate what version of Go is being used ensure +# the package gets rebuilt when the version changes. +IUSE="+go_version_${COREOS_GO_VERSION//./_}" +REQUIRED_USE="go_version_${COREOS_GO_VERSION//./_}" diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-lang.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-lang.eclass new file mode 100644 index 0000000000..9ee7e88b9c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-lang.eclass @@ -0,0 +1,116 @@ +# Copyright 2016 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS: coreos-go-lang.eclass +# @BLURB: Common functionality for building Go itself +# @DESCRIPTION: +# Only dev-lang/go ebuilds should inherit this eclass. +# +# Native (${CHOST} == ${CTARGET}): +# + +case "${EAPI:-0}" in + 6|7|8) ;; + *) die "Unsupported EAPI=${EAPI} for ${ECLASS}" +esac + +inherit coreos-go-utils toolchain-funcs + +export CBUILD=${CBUILD:-${CHOST}} +export CTARGET=${CTARGET:-${CHOST}} + +# Determine the main SLOT we will be using, e.g.: PV=1.5.3 SLOT=1.5 +GOSLOT="$(ver_cut 1-2)" + +DESCRIPTION="A concurrent garbage collected and typesafe programming language" +HOMEPAGE="http://www.golang.org" +SRC_URI="https://storage.googleapis.com/golang/go${PV}.src.tar.gz" + +LICENSE="BSD" +SLOT="${GOSLOT}/${PV}" +IUSE="" + +RDEPEND="app-eselect/eselect-go" +DEPEND="${RDEPEND} + >=dev-lang/go-bootstrap-1.5.3" + +# These test data objects have writable/executable stacks. +QA_EXECSTACK="usr/lib/go${GOSLOT}/src/debug/elf/testdata/*.obj" + +# Similarly, test data is never executed so don't check link dependencies. +REQUIRES_EXCLUDE="/usr/lib/go/src/debug/elf/testdata/*" + +# The tools in /usr/lib/go should not cause the multilib-strict check to fail. +QA_MULTILIB_PATHS="usr/lib/go${GOSLOT}/pkg/tool/.*/.*" + +# The go language uses *.a files which are _NOT_ libraries and should not be +# stripped. The test data objects should also be left alone and unstripped. +STRIP_MASK="*.a /usr/lib/go${GOSLOT}/src/*" + +S="${WORKDIR}/go" + +coreos-go-lang_pkg_pretend() { + # make.bash does not understand cross-compiling a cross-compiler + if [[ $(go_tuple) != $(go_tuple ${CTARGET}) ]]; then + die "CHOST CTARGET pair unsupported: CHOST=${CHOST} CTARGET=${CTARGET}" + fi +} + +coreos-go-lang_src_compile() { + export GOROOT_BOOTSTRAP="${EPREFIX}/usr/lib/go-bootstrap" + export GOROOT_FINAL="${EPREFIX}/usr/lib/go${GOSLOT}" + export GOROOT="${S}" + export GOBIN="${GOROOT}/bin" + + # Go's build script does not use BUILD/HOST/TARGET consistently. :( + go_export + export GOHOSTARCH=$(go_arch ${CBUILD}) + export GOHOSTOS=$(go_os ${CBUILD}) + export CC_FOR_TARGET=$(tc-getCC) + export CXX_FOR_TARGET=$(tc-getCXX) + # Must be set *after* calling tc-getCC + export CC=$(tc-getBUILD_CC) + + cd src + ./make.bash || die "build failed" +} + +coreos-go-lang_src_test() { + go_cross_compile && return 0 + + cd src + PATH="${GOBIN}:${PATH}" \ + ./run.bash -no-rebuild || die "tests failed" +} + +coreos-go-lang_src_install() { + exeinto "/usr/lib/go${GOSLOT}/bin" + if go_cross_compile; then + doexe "${GOBIN}/$(go_tuple)/"{go,gofmt} + else + doexe "${GOBIN}/"{go,gofmt} + fi + dosym "../lib/go${GOSLOT}/bin/go" "/usr/bin/go${GOSLOT}" + dosym "../lib/go${GOSLOT}/bin/gofmt" "/usr/bin/gofmt${GOSLOT}" + + exeinto "/usr/lib/go${GOSLOT}/pkg/tool/$(go_tuple)" + doexe "pkg/tool/$(go_tuple)/"* + + insopts -m0644 -p # preserve timestamps + insinto "/usr/lib/go${GOSLOT}" + doins -r doc lib src + insinto "/usr/lib/go${GOSLOT}/pkg" + doins -r "pkg/include" "pkg/$(go_tuple)" + + dodoc CONTRIBUTING.md PATENTS README.md +} + +coreos-go-lang_pkg_postinst() { + eselect go update +} + +coreos-go-lang_pkg_postrm() { + eselect go update +} + +EXPORT_FUNCTIONS pkg_pretend src_compile src_test src_install pkg_postinst pkg_postrm diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-utils.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-utils.eclass new file mode 100644 index 0000000000..b5d07016de --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go-utils.eclass @@ -0,0 +1,125 @@ +# Copyright 2016 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS: coreos-go-utils.eclass +# @BLURB: Utility functions for Go +# @DESCRIPTION: +# A utility eclass for functions needed when building both Go itself +# and packages that depend on it. It does not set any metadata. + +case "${EAPI:-0}" in + 5|6|7|8) ;; + *) die "Unsupported EAPI=${EAPI} for ${ECLASS}" +esac + +inherit flag-o-matic toolchain-funcs + +# @FUNCTION: go_arch +# @USAGE: [chost] +# @DESCRIPTION: +# export GOARCH=$(go_arch $CHOST) +go_arch() { + # By chance most portage arch names match Go + local portage_arch=$(tc-arch "${1:-${CHOST}}") + local endian=$(tc-endian "${1:-${CHOST}}") + case "${portage_arch}" in + x86) echo 386;; + x64-*) echo amd64;; + ppc64) + [[ "${endian}" = big ]] && echo ppc64 || echo ppc64le ;; + *) echo "${portage_arch}";; + esac +} + +# @FUNCTION: go_arm +# @USAGE: [chost] +# @DESCRIPTION: +# export GOARM=$(go_arm $CHOST) +go_arm() { + case "${1:-${CHOST}}" in + armv5*) echo 5;; + armv6*) echo 6;; + armv7*) echo 7;; + *) + die "unknown GOARM for ${1:-${CHOST}}" + ;; + esac +} + +# @FUNCTION: go_os +# @USAGE: [chost] +# @DESCRIPTION: +# export GOOS=$(go_os $CHOST) +go_os() { + case "${1:-${CHOST}}" in + *-linux*) echo linux;; + *-darwin*) echo darwin;; + *-freebsd*) echo freebsd;; + *-netbsd*) echo netbsd;; + *-openbsd*) echo openbsd;; + *-solaris*) echo solaris;; + *-cygwin*|*-interix*|*-winnt*) + echo windows + ;; + *) + die "unknown GOOS for ${1:-${CHOST}}" + ;; + esac +} + +# @FUNCTION: go_export +# @USAGE: [chost] +# @DESCRIPTION: +# Export GOARCH, GOOS, GOARM, CC, CXX, and CGO_* environment variables. +go_export() { + export GOARCH=$(go_arch "$@") + export GOOS=$(go_os "$@") + if [[ "${GOARCH}" == "arm" ]]; then + export GOARM=$(go_arm "$@") + fi + + # Go's 6l linker does not support PIE, disable so cgo binaries + # which use 6l+gcc for linking can be built correctly. + if gcc-specs-pie; then + append-ldflags -nopie + fi + + export CC=$(tc-getCC) + export CXX=$(tc-getCXX) + export CGO_ENABLED=${CGO_ENABLED:-1} + export CGO_CFLAGS="${CFLAGS}" + export CGO_CPPFLAGS="${CPPFLAGS}" + export CGO_CXXFLAGS="${CXXFLAGS}" + export CGO_LDFLAGS="${LDFLAGS}" + + # Ensure the `go` wrapper calls the version we expect + export EGO="${COREOS_GO_VERSION}" + + # With Go >= 1.16, GO111MODULE=on is set by default. + # Few of our repos still don't support Go modules so we would need to set + # GO111MODULE=off for those packages. + if [[ "${COREOS_GO_GO111MODULE}" == "off" ]]; then + export GO111MODULE="${COREOS_GO_GO111MODULE}" + fi +} + +# @FUNCTION: go_tuple +# @USAGE: [chost] +# @DESCRIPTION: +# The uniqe string defining a Go target, as used in directory names. +# e.g. linux_amd64 for x86_64-pc-linux-gnu +go_tuple() +{ + echo "$(go_os $@)_$(go_arch $@)" +} + +# @FUNCTION: go_cross_compile +# @USAGE: [chost] +# @DESCRIPTION: +# Check if Go consideres compiling for $CHOST as cross-compilation. +# Since Go's target tuples are smaller than GCC's Go may not consider +# itself as a cross-compiler even if the GCC it is using for cgo is. +go_cross_compile() +{ + [[ $(go_tuple ${CBUILD:-${CHOST}}) != $(go_tuple $@) ]] +} diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go.eclass new file mode 100644 index 0000000000..0d89acc762 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-go.eclass @@ -0,0 +1,100 @@ +# Copyright 2014 CoreOS, Inc. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS: coreos-go.eclass +# @BLURB: utility functions for building Go binaries + +# @ECLASS-VARIABLE: COREOS_GO_MOD +# @DESCRIPTION: +# Specify the module download mode for Go modules to use. +# +# Example: +# @CODE +# COREOS_GO_MOD=vendor +# @CODE + +# @ECLASS-VARIABLE: COREOS_GO_PACKAGE +# @REQUIRED +# @DESCRIPTION: +# Name of the Go package unpacked to ${S}. +# +# Example: +# @CODE +# COREOS_GO_PACKAGE="github.com/coreos/mantle" +# @CODE + +# @ECLASS-VARIABLE: COREOS_GO_VERSION +# @DESCRIPTION: +# This variable specifies the version of Go to use. If ommitted the +# default value from coreos-go-depend.eclass will be used. +# +# Example: +# @CODE +# COREOS_GO_VERSION=go1.19 +# @CODE + +case "${EAPI:-0}" in + 5|6|7|8) ;; + *) die "Unsupported EAPI=${EAPI} for ${ECLASS}" +esac + +inherit coreos-go-depend multiprocessing + +RESTRICT="strip" + +# @FUNCTION: go_build +# @USAGE: [] +go_build() { + debug-print-function ${FUNCNAME} "$@" + + [[ $# -eq 0 || $# -gt 2 ]] && die "${ECLASS}: ${FUNCNAME}: incorrect # of arguments" + local package_name="$1" + local binary_name="${package_name##*/}" + + ebegin "${EGO} build ${package_name}" + debug-print EGO=${EGO} $(${EGO} env) + + ${EGO} build -v \ + -p "$(makeopts_jobs)" \ + -ldflags "${GO_LDFLAGS} -s -w -extldflags '${LDFLAGS}'" \ + ${COREOS_GO_MOD:+-mod "${COREOS_GO_MOD}"} \ + -o "${GOBIN}/${binary_name}" \ + "${package_name}" + + local e=${?} + local msg="${FUNCNAME}: ${package_name} failed (${e})." + eend ${e} "${msg}" || die "${msg}" +} + +coreos-go_src_prepare() { + debug-print-function ${FUNCNAME} "$@" + has ${EAPI:-0} 6 7 8 && default + + go_export + export GOPATH="${WORKDIR}/gopath" + export GOBIN="${GOPATH}/bin" + + mkdir -p "${GOBIN}" || die "${ECLASS}: bad path: ${GOBIN}" + + if [[ -z "${COREOS_GO_PACKAGE}" ]]; then + die "${ECLASS}: COREOS_GO_PACKAGE must be defined by the ebuild" + fi + + local package_path="${GOPATH}/src/${COREOS_GO_PACKAGE}" + mkdir -p "${package_path%/*}" || die "${ECLASS}: bad path: ${package_path%/*}" + ln -sT "${S}" "${package_path}" || die "${ECLASS}: bad path: ${S}" +} + +coreos-go_src_compile() { + debug-print-function ${FUNCNAME} "$@" + + go_build "${COREOS_GO_PACKAGE}" +} + +coreos-go_src_install() { + debug-print-function ${FUNCNAME} "$@" + + dobin "${GOBIN}"/* +} + +EXPORT_FUNCTIONS src_prepare src_compile src_install diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/coreos-kernel.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-kernel.eclass new file mode 100644 index 0000000000..449247c63e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/coreos-kernel.eclass @@ -0,0 +1,296 @@ +# Copyright 2013-2014 CoreOS, Inc. +# Copyright 2012 The Chromium OS Authors. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS-VARIABLE: COREOS_SOURCE_REVISION +# @DESCRIPTION: +# Revision of the source ebuild, e.g. -r1. default is "" +: ${COREOS_SOURCE_REVISION:=} + +COREOS_SOURCE_VERSION="${PV}${COREOS_SOURCE_REVISION}" + +# $COREOS_KERNEL_SOURCE_NAME is the kernel source name to be used for +# $KERNEL_DIR, e.g. linux-4.19.0-coreos. This comes from upstream, so +# Flatcar should not change it. +# +# On the other hand, $COREOS_SOURCE_NAME is the kernel name to be used for +# $KV_OUT_DIR in individual coreos-kernel*.ebuild files. That one needs to +# have a flatcar-specific name. We cannot define another variable like +# $FLATCAR_SOURCE_NAME, because it will then be rewritten by upstream changes +# that set $COREOS_SOURCE_NAME by default. In the Gentoo world, the ebuild +# for each new version has a totally new file name. So it's hard to replace +# a new $COREOS_SOURCE_NAME variable for every new ebuild. +# $COREOS_SOURCE_NAME should be a name without a revision suffix (e.g. "-r1"), +# because $KV_FULL would not include such a suffix. +COREOS_KERNEL_SOURCE_NAME="linux-${PV/_rc/-rc}-coreos${COREOS_SOURCE_REVISION}" +COREOS_SOURCE_NAME="linux-${PV/_rc/-rc}-flatcar" + +[[ ${EAPI} != [78] ]] && die "Only EAPI 7 and 8 are supported" + +inherit linux-info toolchain-funcs + +HOMEPAGE="http://www.kernel.org" +LICENSE="GPL-2 freedist" +SLOT="0/${PVR}" +SRC_URI="" +IUSE="" + +BDEPEND="dev-util/pahole" +DEPEND="=sys-kernel/coreos-sources-${COREOS_SOURCE_VERSION}" + +# Do not analyze or strip installed files +RESTRICT="binchecks strip" + +# The build tools are OK and shouldn't trip up multilib-strict. +QA_MULTILIB_PATHS="usr/lib/modules/.*/build/scripts/.*" + +# Use source installed by coreos-sources +# KERNEL_DIR must find the kernel source tree under /usr/src/linux-*-coreos, +# not /usr/src/linux-*-flatcar, which does not exist at all. +KERNEL_DIR="${SYSROOT}/usr/src/${COREOS_KERNEL_SOURCE_NAME}" + +# Search for an apropriate config in ${FILESDIR}. The config should reflect +# the kernel version but partial matching is allowed if the config is +# applicalbe to multiple ebuilds, such as different -r revisions or stable +# kernel releases. For an amd64 ebuild with version 3.12.4-r2 the order is: +# (uses the portage $ARCH instead of the kernel's for simplicity sake) +# - amd64_defconfig-3.12.4-r2 +# - amd64_defconfig-3.12.4 +# - amd64_defconfig-3.12 +# - amd64_defconfig +# and similarly for _rcN releases. +# The first matching config is used, die otherwise. +find_config() { + local base_path="${FILESDIR}/${1}" + local try_suffix try_path + for try_suffix in "-${PVR}" "-${PV}" "-${PV%[._]*}" ""; do + try_path="${base_path}${try_suffix}" + if [[ -f "${try_path}" ]]; then + echo "${try_path}" + return + fi + done + + die "No ${1} found for ${PVR} in ${FILESDIR}" +} + +find_archconfig () { + path=$(find_config "${ARCH}"_defconfig) + if [ -z ${path} ]; then + die "No arch config found for ${PVR} in ${FILESDIR}" + fi + echo "${path}" +} + +find_commonconfig () { + path=$(find_config commonconfig) + if [ -z ${path} ]; then + die "No common config found for ${PVR} in ${FILESDIR}" + fi + echo "${path}" +} + +config_update() { + key="${1%%=*}" + sed -i -e "/^${key}=/d" build/.config || die + echo "$1" >> build/.config || die +} + +# Get the path to the architecture's kernel image. +kernel_path() { + local kernel_arch=$(tc-arch-kernel) + case "${kernel_arch}" in + arm64) echo build/arch/arm64/boot/Image;; + x86) echo build/arch/x86/boot/bzImage;; + *) die "Unsupported kernel arch '${kernel_arch}'";; + esac +} + +# Get the make target to build the kernel image. +kernel_target() { + local path=$(kernel_path) + echo "${path##*/}" +} + +kmake() { + local kernel_arch=$(tc-arch-kernel) kernel_cflags= + if gcc-specs-pie; then + kernel_cflags="-nopie -fstack-check=no" + fi + emake "--directory=${S}/source" \ + ARCH="${kernel_arch}" \ + CROSS_COMPILE="${CHOST}-" \ + KBUILD_OUTPUT="../build" \ + KCFLAGS="${kernel_cflags}" \ + LDFLAGS="" \ + "V=1" \ + "$@" +} + +# Prints the value of a given kernel config option. +# Quotes around string values are removed. +getconfig() { + local value=$(getfilevar_noexec "CONFIG_$1" build/.config) + [[ -n "${value}" ]] || die "$1 is not in the kernel config" + [[ "${value}" == '"'*'"' ]] && value="${value:1:-1}" + echo "${value}" +} + +# Generate the module signing key for this build. +setup_keys() { + local sig_hash sig_key + sig_hash=$(getconfig MODULE_SIG_HASH) + sig_key="build/$(getconfig MODULE_SIG_KEY)" + + if [[ "${sig_key}" == "build/certs/signing_key.pem" ]]; then + die "MODULE_SIG_KEY is using the default value" + fi + + mkdir -p certs "${sig_key%/*}" || die + + # based on the default config the kernel auto-generates + cat >certs/modules.cnf <<-EOF + [ req ] + default_bits = 4096 + distinguished_name = req_distinguished_name + prompt = no + string_mask = utf8only + x509_extensions = myexts + + [ req_distinguished_name ] + O = Kinvolk GmbH + CN = Module signing key for ${KV_FULL} + + [ myexts ] + basicConstraints=critical,CA:FALSE + keyUsage=digitalSignature + subjectKeyIdentifier=hash + authorityKeyIdentifier=keyid + EOF + openssl req -new -nodes -utf8 -days 36500 -batch -x509 \ + "-${sig_hash}" -outform PEM \ + -config certs/modules.cnf \ + -out certs/modules.pub.pem \ + -keyout certs/modules.key.pem \ + || die "Generating module signing key failed" + cat certs/modules.pub.pem certs/modules.key.pem > "${sig_key}" +} + +# Discard the module signing key but keep public certificate. +shred_keys() { + local sig_key + sig_key="build/$(getconfig MODULE_SIG_KEY)" + shred -u certs/modules.key.pem "${sig_key}" || die + cp certs/modules.pub.pem "${sig_key}" || die +} + +# Populate /lib/modules/$(uname -r)/{build,source} +install_build_source() { + local kernel_arch=$(tc-arch-kernel) + + # NOTE: We have to get ${archabspaths} before removing symlinks under + # /usr/lib/modules. However, do not exclude "dt-bindings" for now, + # as it looks architecture-independent. + local archabspaths=($(ls -1d ${D}/usr/lib/modules/${KV_FULL}/source/scripts/dtc/include-prefixes/* \ + | grep -v dt-bindings )) + + # remove the broken symlinks referencing $ROOT + rm "${D}/usr/lib/modules/${KV_FULL}"/{build,source} || die + + # Compose list of architectures to be excluded from the kernel modules + # tree in the final image. It is an array to be used as a pattern for + # grep command below at the end of "find source/scripts" command for + # fetching kernel modules list, e.g.: + # find source/scripts -follow -print \ + # | grep -E -v -w "include-prefixes/arc|include-prefixes/xtensa" + declare -a excarchlist + local excarchstr + + for apath in "${archabspaths[@]}"; do + local arch + arch=$(basename "${apath}") + if [[ "${arch}" != "${kernel_arch}" ]]; then + excarchlist+=("include-prefixes/${arch}") + + # Do not append delimiter '|' in case of the last element. + if [[ "${apath}" != "${archabspaths[-1]}" ]]; then + excarchlist+=("|") + fi + fi + done + + # Remove every whitespace from the grep pattern string, to make pattern + # matching work well. + excarchstr=$(echo "${excarchlist[@]}" | sed -e 's/[[:space:]]*//g') + + # Install a stripped source for out-of-tree module builds (Debian-derived) + # + # NOTE: we need to exclude unsupported architectures from source/scripts, + # to prevent the final image from having unnecessary directories under + # /usr/lib/modules/${KV_FULL}/source/scripts/dtc/include-prefixes. + # The grep must run with "-w" to exclude exact patterns like either arm + # or arm64. + { + echo source/Makefile + find source/arch/${kernel_arch} -follow -maxdepth 1 -name 'Makefile*' -print + find source/arch/${kernel_arch} -follow \( -name 'module.lds' -o -name 'Kbuild.platforms' -o -name 'Platform' \) -print + find $(find source/arch/${kernel_arch} -follow \( -name include -o -name scripts \) -follow -type d -print) -print + find source/include -follow -print + find source/scripts -follow -print | grep -E -v -w "${excarchstr}" + find build/ -print + } | cpio -pd \ + --preserve-modification-time \ + --owner=root:root \ + --dereference \ + "${D}/usr/lib/modules/${KV_FULL}" || die +} + +coreos-kernel_pkg_pretend() { + [[ "${MERGE_TYPE}" == binary ]] && return + + if [[ -f "${KERNEL_DIR}/.config" || -d "${KERNEL_DIR}/include/config" ]] + then + die "Source is not clean! Run make mrproper in ${KERNEL_DIR}" + fi +} + +coreos-kernel_pkg_setup() { + [[ "${MERGE_TYPE}" == binary ]] && return + + # tc-arch-kernel requires a call to get_version from linux-info.eclass + get_version || die "Failed to detect kernel version in ${KERNEL_DIR}" +} + +coreos-kernel_src_unpack() { + # we more or less reproduce the layout in /lib/modules/$(uname -r)/ + mkdir -p "${S}/build" || die + mkdir -p "${S}/source" || die + ln -s "${KERNEL_DIR}"/* "${S}/source/" || die +} + +coreos-kernel_src_configure() { + # Use default for any options not explitly set in defconfig + kmake olddefconfig + + # Verify that olddefconfig has not converted any y or m options to n + # (implying a new, disabled dependency). Allow options to be converted + # from m to y. + # + # generate regexes from enabled boolean/tristate options | + # filter them out of the defconfig | + # filter for boolean/tristate options, and format | + # sort (why not) + local missing=$( \ + gawk -F = '/=[ym]$/ {print "^" $1 "="}' "${S}/build/.config" | \ + grep -vf - "${S}/build/.config.old" | \ + gawk -F = '/=[ym]$/ {print " " $1}' | \ + sort) + if [[ -n "${missing}" ]]; then + die "Requested options not enabled in build:\n${missing}" + fi + + # For convenience, generate a minimal defconfig of the build + kmake savedefconfig +} + +EXPORT_FUNCTIONS pkg_pretend pkg_setup src_unpack src_configure diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/cros-debug.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/cros-debug.eclass new file mode 100644 index 0000000000..04e48f1b9a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/cros-debug.eclass @@ -0,0 +1,15 @@ +# Copyright (c) 2010 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# +# Original Author: The Chromium OS Authors +# Purpose: Set -DNDEBUG if the cros-debug USE flag is not defined. +# + +inherit flag-o-matic + +IUSE="cros-debug" + +cros-debug-add-NDEBUG() { + use cros-debug || append-flags -DNDEBUG +} diff --git a/sdk_container/src/third_party/coreos-overlay/eclass/cros-workon.eclass b/sdk_container/src/third_party/coreos-overlay/eclass/cros-workon.eclass new file mode 100644 index 0000000000..46d2b17bbe --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/eclass/cros-workon.eclass @@ -0,0 +1,185 @@ +# Copyright (c) 2012 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# @ECLASS: cros-workon.eclass +# @BLURB: helper eclass for building CoreOS SDK provided source +# @DESCRIPTION: +# Instead of cloning git trees directly from github ebuilds can fetch +# from the local cache maintained by repo. Additionally live builds can +# build directly from the source checked out in the repo tree. + +# @ECLASS-VARIABLE: CROS_WORKON_REPO +# @DESCRIPTION: +# Git URL which is prefixed to CROS_WORKON_PROJECT +: "${CROS_WORKON_REPO:=https://chromium.googlesource.com}" + +# @ECLASS-VARIABLE: CROS_WORKON_PROJECT +# @DESCRIPTION: +# Git project name which is suffixed to CROS_WORKON_REPO +: "${CROS_WORKON_PROJECT:=${PN}}" + +# @ECLASS-VARIABLE: CROS_WORKON_LOCALDIR +# @DESCRIPTION: +# Repo checkout directory which is prefixed to CROS_WORKON_LOCALNAME +# Generally is either src/third_party or src/platform +: "${CROS_WORKON_LOCALDIR:=src/third_party}" + +# @ECLASS-VARIABLE: CROS_WORKON_LOCALNAME +# @DESCRIPTION: +# Directory name which is suffixed to CROS_WORKON_LOCALDIR +: "${CROS_WORKON_LOCALNAME:=${PN}}" + +# @ECLASS-VARIABLE: CROS_WORKON_COMMIT +# @DESCRIPTION: +# Git commit to checkout to +: "${CROS_WORKON_COMMIT:=}" + +# @ECLASS-VARIABLE: CROS_WORKON_TREE +# @DESCRIPTION: +# SHA1 of the contents of the repository. This is used for verifying the +# correctness of prebuilts. Unlike the commit hash, this SHA1 is unaffected +# by the history of the repository, or by commit messages. +: "${CROS_WORKON_TREE:=}" + +# @ECLASS-VARIABLE: CROS_WORKON_SRCROOT +# @DESCRIPTION: +# Directory where chrome third party and platform sources are located (formerly CHROMEOS_ROOT) +: "${CROS_WORKON_SRCROOT:=}" + +# TODO(marineam): Remove profiling and cros_workon_tree_* use flags. +# These have never been used in CoreOS. +IUSE="cros_workon_tree_$CROS_WORKON_TREE profiling" + +inherit git-r3 + +# Calculate path where code should be cloned from. +get_path() { + local pathbase + if [[ -n "${CROS_WORKON_SRCROOT}" ]]; then + pathbase="${CROS_WORKON_SRCROOT}" + elif [[ -n "${CHROMEOS_ROOT}" ]]; then + pathbase="${CHROMEOS_ROOT}" + else + # HACK: Figure out the missing legacy path for now + # this only happens in amd64 chroot with sudo emerge. + pathbase="/mnt/host/source" + fi + + echo "${pathbase}/${CROS_WORKON_LOCALDIR}/${CROS_WORKON_LOCALNAME}" +} + +local_copy() { + debug-print-function ${FUNCNAME} "$@" + + local path="$(get_path)" + + einfo "Cloning ${path}" + git clone -sn "${path}" "${S}" || die "Can't clone ${path}" + + einfo "Copying source from ${path}" + rsync -a --exclude=.git "${path}/" "${S}" || return 1 +} + +local_clone() { + debug-print-function ${FUNCNAME} "$@" + + local path="$(get_path)" + if [[ ! -d "${path}/.git" ]]; then + return 1 + fi + + einfo "Cloning ${path}" + einfo "Checking out ${CROS_WORKON_COMMIT}" + + # Looks like we already have a local copy of the repository. + # Let's use these and checkout ${CROS_WORKON_COMMIT}. + # -s: For speed, share objects between ${path} and ${S}. + # -n: Don't checkout any files from the repository yet. We'll + # checkout the source separately. + # + # We don't use git clone to checkout the source because the -b + # option for clone defaults to HEAD if it can't find the + # revision you requested. On the other hand, git checkout fails + # if it can't find the revision you requested, so we use that + # instead. + + git clone -sn "${path}" "${S}" || die "Can't clone ${path}" + if ! git -C "${S}" checkout -q "${CROS_WORKON_COMMIT}"; then + ewarn "Cannot run git checkout ${CROS_WORKON_COMMIT} in ${S}." + ewarn "Is ${path} up to date? Try running repo sync." + rm -rf "${S}" || die + return 1 + fi +} + +cros-workon_src_unpack() { + debug-print-function ${FUNCNAME} "$@" + + # Sanity check. We cannot have S set to WORKDIR because if/when we try + # to check out repos, git will die if it tries to check out into a dir + # that already exists. Some packages might try this when out-of-tree + # builds are enabled, and they'll work fine most of the time because + # they'll be using a full manifest and will just re-use the existing + # checkout in src/platform/*. But if the code detects that it has to + # make its own checkout, things fall apart. For out-of-tree builds, + # the initial $S doesn't even matter because it resets it below to the + # repo in src/platform/. + if [[ ${S} == "${WORKDIR}" ]]; then + die "Sorry, but \$S cannot be set to \$WORKDIR" + fi + + # Hack + # TODO(msb): remove once we've resolved the include path issue + # http://groups.google.com/a/chromium.org/group/chromium-os-dev/browse_thread/thread/5e85f28f551eeda/3ae57db97ae327ae + ln -s "${S}" "${WORKDIR}/${CROS_WORKON_LOCALNAME}" &> /dev/null + + if [[ "${PV}" == "9999" ]]; then + local_copy || die "Cannot create a local copy" + else + if [[ -z "${CROS_WORKON_COMMIT}" ]]; then + die "CROS_WORKON_COMMIT is unset" + fi + + # Try cloning from a local repo first + local_clone && return + + # There is no good way to ensure repo-maintained git trees + # always have exactly what ebuilds need so fall back gracefully + # to fetching remotely. Also, when ebuilds only specify a git + # hash there isn't a way to know which branch that is on. To be + # safe use git-r3's "mirror" mode to fetch all remote branches. + ewarn "Falling back to fetching from remote git repository..." + + EGIT_CLONE_TYPE=mirror + EGIT_REPO_URI="${CROS_WORKON_REPO}/${CROS_WORKON_PROJECT}.git" + EGIT_CHECKOUT_DIR="${S}" + EGIT_COMMIT="${CROS_WORKON_COMMIT}" + git-r3_src_unpack + fi +} + +# TODO(marineam): This is used by cros_workon to deal manage +# 'minilayout' manifests but we don't bother with that in CoreOS. +# Do a pass on the cros_workon tool to give it a freshening too... +cros-workon_pkg_info() { + echo "CROS_WORKON_SRCDIR=(\"$(get_path)\")" + echo "CROS_WORKON_PROJECT=(\"${CROS_WORKON_PROJECT}\")" +} + +# get the semver of the git repo that is being built +get_semver() { + # get git tag/sha + local v + v=$(git describe --long --dirty) || die + + # strip a leading v from the tag + v=${v#v} + + # replace first - with +, to attach git sha/dirty as semver metadata + v=${v/-/+} + + echo ${v} +} + +EXPORT_FUNCTIONS src_unpack pkg_info + diff --git a/sdk_container/src/third_party/coreos-overlay/licenses/Google-TOS b/sdk_container/src/third_party/coreos-overlay/licenses/Google-TOS new file mode 100644 index 0000000000..45f4409bd7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/licenses/Google-TOS @@ -0,0 +1,96 @@ +Google Terms of Service +Last modified: March 1, 2012 + +Welcome to Google! + +Thanks for using our products and services (“Services”). The Services are provided by Google Inc. (“Google”), located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. + +By using our Services, you are agreeing to these terms. Please read them carefully. + +Our Services are very diverse, so sometimes additional terms or product requirements (including age requirements) may apply. Additional terms will be available with the relevant Services, and those additional terms become part of your agreement with us if you use those Services. + +Using our Services + +You must follow any policies made available to you within the Services. + +Don’t misuse our Services. For example, don’t interfere with our Services or try to access them using a method other than the interface and the instructions that we provide. You may use our Services only as permitted by law, including applicable export and re-export control laws and regulations. We may suspend or stop providing our Services to you if you do not comply with our terms or policies or if we are investigating suspected misconduct. + +Using our Services does not give you ownership of any intellectual property rights in our Services or the content you access. You may not use content from our Services unless you obtain permission from its owner or are otherwise permitted by law. These terms do not grant you the right to use any branding or logos used in our Services. Don’t remove, obscure, or alter any legal notices displayed in or along with our Services. + +Our Services display some content that is not Google’s. This content is the sole responsibility of the entity that makes it available. We may review content to determine whether it is illegal or violates our policies, and we may remove or refuse to display content that we reasonably believe violates our policies or the law. But that does not necessarily mean that we review content, so please don’t assume that we do. + +In connection with your use of the Services, we may send you service announcements, administrative messages, and other information. You may opt out of some of those communications. + +Your Google Account + +You may need a Google Account in order to use some of our Services. You may create your own Google Account, or your Google Account may be assigned to you by an administrator, such as your employer or educational institution. If you are using a Google Account assigned to you by an administrator, different or additional terms may apply and your administrator may be able to access or disable your account. + +If you learn of any unauthorized use of your password or account, follow these instructions. + +Privacy and Copyright Protection + +Google’s privacy policies explain how we treat your personal data and protect your privacy when you use our Services. By using our Services, you agree that Google can use such data in accordance with our privacy policies. + +We respond to notices of alleged copyright infringement and terminate accounts of repeat infringers according to the process set out in the U.S. Digital Millennium Copyright Act. + +We provide information to help copyright holders manage their intellectual property online. If you think somebody is violating your copyrights and want to notify us, you can find information about submitting notices and Google’s policy about responding to notices in our Help Center. + +Your Content in our Services + +Some of our Services allow you to submit content. You retain ownership of any intellectual property rights that you hold in that content. In short, what belongs to you stays yours. + +When you upload or otherwise submit content to our Services, you give Google (and those we work with) a worldwide license to use, host, store, reproduce, modify, create derivative works (such as those resulting from translations, adaptations or other changes we make so that your content works better with our Services), communicate, publish, publicly perform, publicly display and distribute such content. The rights you grant in this license are for the limited purpose of operating, promoting, and improving our Services, and to develop new ones. This license continues even if you stop using our Services (for example, for a business listing you have added to Google Maps). Some Services may offer you ways to access and remove content that has been provided to that Service. Also, in some of our Services, there are terms or settings that narrow the scope of our use of the content submitted in those Services. Make sure you have the necessary rights to grant us this license for any content that you submit to our Services. + +You can find more information about how Google uses and stores content in the privacy policy or additional terms for particular Services. If you submit feedback or suggestions about our Services, we may use your feedback or suggestions without obligation to you. + +About Software in our Services + +When a Service requires or includes downloadable software, this software may update automatically on your device once a new version or feature is available. Some Services may let you adjust your automatic update settings. + +Google gives you a personal, worldwide, royalty-free, non-assignable and non-exclusive license to use the software provided to you by Google as part of the Services. This license is for the sole purpose of enabling you to use and enjoy the benefit of the Services as provided by Google, in the manner permitted by these terms. You may not copy, modify, distribute, sell, or lease any part of our Services or included software, nor may you reverse engineer or attempt to extract the source code of that software, unless laws prohibit those restrictions or you have our written permission. + +Open source software is important to us. Some software used in our Services may be offered under an open source license that we will make available to you. There may be provisions in the open source license that expressly override some of these terms. + +Modifying and Terminating our Services + +We are constantly changing and improving our Services. We may add or remove functionalities or features, and we may suspend or stop a Service altogether. + +You can stop using our Services at any time, although we’ll be sorry to see you go. Google may also stop providing Services to you, or add or create new limits to our Services at any time. + +We believe that you own your data and preserving your access to such data is important. If we discontinue a Service, where reasonably possible, we will give you reasonable advance notice and a chance to get information out of that Service. + +Our Warranties and Disclaimers + +We provide our Services using a commercially reasonable level of skill and care and we hope that you will enjoy using them. But there are certain things that we don’t promise about our Services. + +OTHER THAN AS EXPRESSLY SET OUT IN THESE TERMS OR ADDITIONAL TERMS, NEITHER GOOGLE NOR ITS SUPPLIERS OR DISTRIBUTORS MAKE ANY SPECIFIC PROMISES ABOUT THE SERVICES. FOR EXAMPLE, WE DON’T MAKE ANY COMMITMENTS ABOUT THE CONTENT WITHIN THE SERVICES, THE SPECIFIC FUNCTION OF THE SERVICES, OR THEIR RELIABILITY, AVAILABILITY, OR ABILITY TO MEET YOUR NEEDS. WE PROVIDE THE SERVICES “AS IS”. + +SOME JURISDICTIONS PROVIDE FOR CERTAIN WARRANTIES, LIKE THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. TO THE EXTENT PERMITTED BY LAW, WE EXCLUDE ALL WARRANTIES. + +Liability for our Services + +WHEN PERMITTED BY LAW, GOOGLE, AND GOOGLE’S SUPPLIERS AND DISTRIBUTORS, WILL NOT BE RESPONSIBLE FOR LOST PROFITS, REVENUES, OR DATA, FINANCIAL LOSSES OR INDIRECT, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES. + +TO THE EXTENT PERMITTED BY LAW, THE TOTAL LIABILITY OF GOOGLE, AND ITS SUPPLIERS AND DISTRIBUTORS, FOR ANY CLAIM UNDER THESE TERMS, INCLUDING FOR ANY IMPLIED WARRANTIES, IS LIMITED TO THE AMOUNT YOU PAID US TO USE THE SERVICES (OR, IF WE CHOOSE, TO SUPPLYING YOU THE SERVICES AGAIN). + +IN ALL CASES, GOOGLE, AND ITS SUPPLIERS AND DISTRIBUTORS, WILL NOT BE LIABLE FOR ANY LOSS OR DAMAGE THAT IS NOT REASONABLY FORESEEABLE. + +Business uses of our Services + +If you are using our Services on behalf of a business, that business accepts these terms. It will hold harmless and indemnify Google and its affiliates, officers, agents, and employees from any claim, suit or action arising from or related to the use of the Services or violation of these terms, including any liability or expense arising from claims, losses, damages, suits, judgments, litigation costs and attorneys’ fees. + +About these Terms + +We may modify these terms or any additional terms that apply to a Service to, for example, reflect changes to the law or changes to our Services. You should look at the terms regularly. We’ll post notice of modifications to these terms on this page. We’ll post notice of modified additional terms in the applicable Service. Changes will not apply retroactively and will become effective no sooner than fourteen days after they are posted. However, changes addressing new functions for a Service or changes made for legal reasons will be effective immediately. If you do not agree to the modified terms for a Service, you should discontinue your use of that Service. + +If there is a conflict between these terms and the additional terms, the additional terms will control for that conflict. + +These terms control the relationship between Google and you. They do not create any third party beneficiary rights. + +If you do not comply with these terms, and we don’t take action right away, this doesn’t mean that we are giving up any rights that we may have (such as taking action in the future). + +If it turns out that a particular term is not enforceable, this will not affect any other terms. + +The laws of California, U.S.A., excluding California’s conflict of laws rules, will apply to any disputes arising out of or relating to these terms or the Services. All claims arising out of or relating to these terms or the Services will be litigated exclusively in the federal or state courts of Santa Clara County, California, USA, and you and Google consent to personal jurisdiction in those courts. + +For information about how to contact Google, please visit our contact page. diff --git a/sdk_container/src/third_party/coreos-overlay/licenses/NVIDIA-codecs b/sdk_container/src/third_party/coreos-overlay/licenses/NVIDIA-codecs new file mode 100644 index 0000000000..e4e6daad98 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/licenses/NVIDIA-codecs @@ -0,0 +1,965 @@ +NVIDIA(r) Tegra(r) Software License Agreement - Tegra Linux Driver Package + +BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR USING THE SOFTWARE +(AS DEFINED BELOW) THE END USER OF THE LICENSED MATERIALS ("YOU" OR +"LICENSEE") AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU ARE ACCEPTING +THESE TERMS ON BEHALF OF ANOTHER PERSON OR A COMPANY OR OTHER LEGAL +ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE FULL AUTHORITY TO BIND +THAT PERSON, COMPANY, OR LEGAL ENTITY TO THESE TERMS. IF YOU DO NOT +AGREE TO THESE TERMS, + + * DO NOT (A) DOWNLOAD, INSTALL, COPY THE SOFTWARE; OR (B) ACCESS + OR USE THE LICENSED MATERIALS; AND + * PROMPTLY DESTROY THE LICENSED MATERIALS, OR RETURN THEM TO + THE PARTY FROM WHOM YOU ACQUIRED IT. + +NVIDIA Tegra Software License Agreement- Tegra Linux Driver Package +(the "Agreement") is entered into by and between NVIDIA Corporation, a +Delaware corporation, having its principal place of business at 2701 +San Tomas Expressway, Santa Clara, CA 95050 ("NVIDIA") and the +individual person or single legal entity ("Licensee" or "You") who +acknowledges and agrees to fully abide the terms and conditions of +this Agreement. + +1. DEFINITIONS. + + 1.1 "Affiliate" means any company or legal entity that at various +times controls, is controlled by, or is under common control with +Licensee. Only for the purposes of this definition, "Control" means +(a) direct or indirect ownership of at least fifty percent (50%) of +the voting power of the shares or other securities for election of +directors (or other managing authority) of the controlled or commonly +controlled entity; (b) holding, directly or indirectly, the power to +exercise more than fifty percent (50%) of the entity's voting rights; +or (c) holding, directly or indirectly, the power to appoint the +majority of the members of the entity's board of directors (or similar +governing body), or in each case, the maximum percentage permitted +where a lesser percentage is required in a jurisdiction. The parties +shall be fully responsible for the actions / inactions of their +Affiliates under this Agreement. + + 1.2 "Competitors" shall mean any company that develops, +manufactures, produces, sells, distributes or licenses application +processors, computers-on-chips, systems-on-chips, CPUs, DSPs or GPU +technology. + + 1.3 "Confidential Information" shall mean (a) the Licensed +Materials; (b) either parties' technology, ideas, know-how, +documentation, processes, algorithms and trade secrets embodied in the +Licensed Materials; (c) any other information disclosed by either +party to the other that is (i) identified as "confidential," +"proprietary" or with a similar legend at the time of disclosure, or +(ii) if unmarked or disclosed orally or visually, are identified as +confidential at the time of disclosure and confirmed by a written +memorandum sent to the receiving party within thirty (30) calendar +days of disclosure summarizing the confidential information +sufficiently for identification; and (d) the terms and conditions of +this Agreement. + + Confidential Information shall not include any information which +is (e) published or otherwise available to the public other than by +breach of this Agreement by the receiving party; (f) rightfully +received by the receiving party from a third party without +confidentiality limitations; (g) independently developed by the +receiving party or its Affiliates as evidenced by appropriate records; +(h) known to the receiving party prior to its first receipt of same +from the disclosing party as evidenced by appropriate records; (i) +hereinafter disclosed by the disclosing party to a third party without +restriction on disclosure; or (j) approved for public release by +written authorization of the disclosing party. + + 1.4 "Contractor" shall mean any third party company or +individuals, including but not limited to original device +manufacturers, who Licensee engages for the purpose of such third +party performing services for the benefit of Licensee in connection +with this Agreement. + + 1.5 "Derivative Work(s)" means derivatives or modifications of the +Licensed Materials created by Licensee or NVIDIA, or a third party on +behalf of Licensee or NVIDIA respectively, which term shall include: +(i) for copyrightable or copyrighted material, any translation, +abridgement, revision or other form in which an existing work may be +recast, transformed or adapted; (ii) for work protected by topography +or mask right, any translation, abridgement, revision or other form in +which an existing work may be recast, transformed or adapted; (iii) +for patentable or patented material, any improvement; and (iv) for +material protected by trade secret, any new material derived from or +employing such existing trade secret. + + 1.6 "Excluded License" means any license that requires as a +condition of use, modification and/or distribution of software subject +to the Excluded License, that such software or other software +distributed and/or combined with such software be (i) disclosed or +distributed in source code form, (ii) licensed for the purpose of +making derivative works, or (iii) redistributable at no charge. + + 1.7 "Intellectual Property Rights" shall mean all proprietary +rights, including all patents, trademarks, copyrights, know-how, trade +secrets, mask works, including all applications and registrations +thereto, and any other similar protected rights in any country. + + 1.8 "Licensed Materials" shall mean the Software, related +documentation, Tegra development hardware (if applicable), and other +materials as NVIDIA may deliver hereunder from time to time. + + 1.9 "Licensee Products" shall mean Licensee's devices that have or +will contain NVIDIA's family of graphics, or media and communication, +or applications processors and related Software (as defined below) +supplied directly or indirectly by NVIDIA. + + 1.10 "Software" shall mean the NVIDIA Tegra Linux Driver Package, +full or partial copies thereof, and any Derivative Work(s) thereto +owned by NVIDIA. + +2. LICENSE. + + 2.1 Grant. Subject to the terms and conditions of this Agreement, +including applicable Exhibits, NVIDIA grants to Licensee and its +Affiliates a personal, nonexclusive, worldwide, nonsublicensable, +nontransferable, nonassignable and royalty-free right and license: + + (a) to execute, compile, reproduce, display, perform, modify, + and to prepare and have prepared Derivative Work(s) of the + Software (in source code form as provided by NVIDIA) + solely to develop and customize Licensee Products for + Licensee's internal development purposes only; + + (b) to reproduce, transmit, transfer, distribute and + sublicense object code forms of the Software and/or + Derivative Work(s) and related documentation incorporated + into Licensee Products with a form of end user license + agreement that is as protective of NVIDIA's Intellectual + Property Rights as this Agreement; + + (c) for Contractors to exercise the foregoing rights of + Section 2.1 of this Agreement solely on behalf of + Licensee; and + + (d) NVIDIA may, in its sole discretion, require Licensee to + accept, distribute, and/or incorporate certain + modifications, updates, fixes, changes, or revisions to + the Licensed Materials used in Licensee Products in a + timely manner. + + 2.2 Reservation of Rights. NVIDIA reserves all rights not +expressly granted to Licensee in Section 2.1 herein. + + 2.3 License Grant Back. Licensee hereby grants to NVIDIA and its +Affiliates an exclusive, worldwide, irrevocable, perpetual, +sublicensable (through multiple tiers of sublicensees), royalty-free +right, fully paid-up right and license to the Derivative Work(s) (in +source and object code form) created by Licensee's employees, +Affiliates or Contractors so that NVIDIA may copy, modify, create +Derivative Works thereof, to use, have used, import, make, have made, +sell, offer to sell, sublicense (through multiple tiers of +sublicensees), distribute (through multiple tiers of distributors) +such Derivative Work(s) on a stand-alone basis or as incorporated into +the Software or other NVIDIA products. For the sake of clarity, +NVIDIA is not prohibited or otherwise restricted from independently +developing new features or functionality with respect to the Licensed +Materials. + + 2.4 Delivery Obligation of Derivative Work(s) Licensee shall +deliver, upon NVIDIA's request, the Derivative Work(s) created by +Licensee or on behalf of Licensee to NVIDIA pursuant to Section 2.3 of +this Agreement. + +3. LIMITATIONS; OBLIGATIONS. + + 3.1 Restrictions. Except as expressly permitted by this +Agreement, Licensee shall not: + + (a) use the Software and/or the Derivative Work(s) created by + Licensee or on behalf of Licensee on any non-NVIDIA + application processors ("External Systems"), except on + External Systems for the sole purpose of programming, + configuration or performing diagnostics on an NVIDIA + application processor; + + (b) reverse engineer, decompile, disassemble, modify or create + derivative works of any portion of the Licensed Materials + (in object code form) or allow any third party (including + Licensee's Affiliates or Contractors) to do any of the + foregoing; + + (c) sublicense, rent, lease, loan, timeshare, sell, + distribute, disclose, publish, assign or transfer any + rights, grant a security interest in, or transfer + possession of the Licensed Materials to any third party + without NVIDIA's express prior written consent; + + (d) distribute the Licensed Materials on a standalone basis; + or + + (e) under any circumstances allow the Software to be used, + pursuant to this Agreement, on NVIDIA's Competitors' + software operating and/or hardware platforms. + + 3.2 No Implied Licenses. Nothing in this Agreement shall be +construed as granting to Licensee by implication, estoppel or +otherwise, (a) a license to any NVIDIA technology other than the +Licensed Materials; or (b) any additional license rights for the +Licensed Materials other than the licenses expressly granted in this +Agreement. + + 3.3 Additional Licensing Obligations. Licensee acknowledges and +agrees that it is Licensee's sole responsibility to obtain any, +additional, third party licenses required to make, have made, use, +have used, sell, import, and offer for sale Licensee Products that +include or incorporate any third party technology such as operating +systems, audio and/or video encoders and decoders or any technology +from, including but not limited to, Microsoft, Thomson, Fraunhofer +IIS, Sisvel S.p.A., MPEG-LA, and Coding Technologies ("Third Party +Components"). Licensee acknowledges and agrees that NVIDIA has not +granted to Licensee under this Agreement any necessary patent rights +with respect to those Third Party Components identified in the +exhibits of this Agreement ("Third Party Licensing Terms and +Notices"). As such, Licensee's use of the Third Party Components may +be subject to further restrictions and terms and conditions described +in the Third Party Licensing Terms and Notices. Licensee acknowledges +and agrees that Licensee is solely and exclusively responsible for +obtaining any and all authorizations and licenses required for the +distribution and/or incorporation of the Third Party Components +specified in the Third Party Licensing Terms and Notices. + +For the avoidance of doubt, except as expressly authorized by a +separate written agreement by and between Licensee and Adobe Systems, +Inc. ("Adobe"), Licensee has no right to distribute, sublicense, or +otherwise commercialize Adobe's Third Party Components identified in +Exhibit A-2. + +Excluding Section 9.5 of this Agreement, Licensee acknowledges and +agrees that NVIDIA may at various times update the Third Party +Licensing Terms and Notices without any advance written notice to +Licensee. Licensee agrees to be bound by such Third Party Licensing +Terms and Notices as they may be updated. In the event that NVIDIA's +license rights to the Third Party Components are terminated and/or +expired, Licensee agrees NVIDIA shall no longer have the obligation to +deliver such Third Party Components to Licensee affected by such +termination and/or expiration. + + Licensee shall, at its own expense fully indemnify, hold harmless, +defend, and settle any claim, suit or proceeding that is instituted by +a third party against NVIDIA and its officers, employees or agents, to +the extent such claim, suit or proceeding is based on (a) a breach by +Licensee of any of the representations and warranties in Section 7 +("Warranties") of this Agreement; or (b) Licensee's failure to fully +satisfy and/or comply with the third party licensing obligations +expressly contained in the Third Party Licensing Terms and Notices (a +"Claim"). + + In the event of a Claim, NVIDIA agrees to: + + (a) promptly inform Licensee and furnish Licensee a copy of + the Claim; + + (b) make commercially reasonable efforts to give such evidence + in NVIDIA's possession, custody or control as is + reasonable to Licensee, at Licensee's request and expense, + specifically and reasonably applicable to the Claim; + + (c) provide Licensee commercially reasonable assistance in the + defense thereof, at Licensee's expense; and + + (d) give Licensee sole control of the defense thereof and all + negotiations for its settlement and compromise, which + shall not be finalized without the prior written consent + of NVIDIA. + + NVIDIA's failure to promptly notify Licensee shall not relieve +Licensee of any liability or obligations that it has to NVIDIA, except +to the extent Licensee demonstrates that the defense of such action is +prejudiced by the failure or delay in giving notice. If NVIDIA +retains counsel, it will be at NVIDIA's own expense. + + In the event of a Claim, Licensee agrees to: + + (a) pay all damages finally awarded against NVIDIA or agreed + upon in settlement by Licensee, which shall not be + finalized without the prior written consent of NVIDIA, + (including other reasonable costs incurred by NVIDIA, + including reasonable attorneys fees, in connection with + enforcing this paragraph); + + (b) reimburse NVIDIA for any licensing fees and/or penalties + incurred by NVIDIA in connection with a Claim; and + + (c) immediately procure/satisfy the third party licensing + obligations expressly contained in the Third Party + Licensing Terms and Notices. + + 3.4 Proprietary Rights Notices. Licensee shall not remove, alter +or obscure any copyright, trademark, patent notices or other +proprietary rights notices that appear on the Licensed Materials. +Licensee shall use commercially reasonable efforts to require its +channel entities to comply with the provisions of this Section 3.4. + + 3.5 No Excluded Licenses. The licenses granted in Section 2.1 do +not include the right to, and Licensee shall not: (a) create +Derivative Work(s) of the Licensed Materials in any manner that would +cause the Licensed Materials, in whole or in part, to become subject +to the terms of an Excluded License; or (b) distribute the Licensed +Materials (or Derivative Works thereof) in any manner that would cause +the Licensed Materials, or any component thereof, to become subject to +the terms of an Excluded License. + + 3.6 Source Code Protection. In addition to Licensee's +restrictions and obligations in connection with the Licensed Materials +set forth in this Agreement, Licensee agrees that source code to the +Licensed Materials constitutes highly Confidential Information and +proprietary trade secrets of NVIDIA and shall be protected by (a) the +confidentiality obligations set forth in Section 5.1; and (b) any +applicable non-disclosure agreement ("NDA"). In addition to the +confidentiality obligations set forth in Section 5.1 and the NDA, +Licensee agrees to the following: + + (a) Licensee shall only allow its employees, Contractors, and + its Affiliates' employees and Contractors who have a need + to know basis to use the source code to the Software in + order for Licensee or its Affiliates to exercise their + license rights under this Agreement, provided that any + breach of this Agreement by such parties is considered + Licensee's breach of this Agreement and Licensee shall be + liable for such breach to the same extent as if it + committed the breach itself. Upon NVIDIA's request, + Licensee shall provide NVIDIA a list of all employees + (including employees of Affiliates), and Contractors who + have been granted source code access to the Licensed + Materials and update and maintain the accuracy of this + list at all times; + + (b) Licensee shall protect the source code of the Licensed + Materials to the same degree as Licensee protects its own + Confidential Information; + + (c) Licensee shall not grant third parties, excluding + Affiliates or Contractors, access to the source code of + the Licensed Materials; + + (d) Licensee shall restrict disclosure and access to and use + of the Licensed Materials (in source code form) to those + employees (including those of its Affiliates and/or + Contractors) who have agreed to be bound by a written + confidentiality agreement which incorporates the + protections and restrictions no less protective than those + set forth in this Agreement with respect to the Licensed + Materials; + + (e) Licensee shall secure the source code to the Software and + Licensed Materials in a secure location at all times; + + (f) Licensee shall not use the Licensed Materials and/or + Derivative Work(s) created by Licensee to compete against + NVIDIA or shall not use the Licensed Materials and/or + Derivative Work(s) in litigation against NVIDIA; and + + (g) Licensee's employees, Affiliates, or Contractors who have + been exposed to source code of the Licensed Materials + shall not be permitted to use any ideas, techniques or + know-how obtained from their respective use of the + Licensed Materials for any engagement, including but not + limited to services or product development (hardware or + software) work for the benefit of NVIDIA's Competitors. + + 3.7 Defensive Suspension. If Licensee and/or its Affiliates +commence or participates in any legal proceeding against NVIDIA, then +NVIDIA may, in its sole discretion, suspend or terminate all license +grants and any other rights provided under this Agreement during the +pendency of such legal proceedings. + +4. OWNERSHIP; FEEDBACK. + + 4.1 By NVIDIA. Except as expressly licensed to Licensee under +this Agreement, NVIDIA reserves all right, title and interest, +including but not limited to all Intellectual Property Rights, in and +to the Licensed Materials and any Derivative Work(s) made thereto by +or on behalf of NVIDIA. + + 4.2 Feedback by Licensee. Licensee may, but is not obligated to, +provide to NVIDIA any suggestions, comments and feedback regarding the +Licensed Materials that are delivered by NVIDIA to Licensee under this +Agreement (collectively, "Licensee Feedback"). NVIDIA may use and +include any Licensee Feedback that Licensee voluntarily provides to +improve the Licensed Materials or other related NVIDIA technologies. +Accordingly, if Licensee provides Licensee Feedback, Licensee grants +NVIDIA and its licensees a perpetual, irrevocable, worldwide, +royalty-free, fully paid-up license grant to freely use, have used, +sell, modify, reproduce, transmit, license, sublicense (through +multiple tiers of sublicensees), distribute (through multiple tiers of +distributors), and otherwise commercialize the Licensee Feedback in +the Licensed Materials or other related technologies. + +5. CONFIDENTIAL INFORMATION; ACCESS TO SOFTWARE. + + 5.1 Protection of Confidential Information. The parties shall not +use or disclose any Confidential Information received from the other +party, except as expressly authorized by this Agreement, and shall +protect all such Confidential Information using the same degree of +care which the receiving party uses with respect to its own +proprietary information, but in no event with safeguards less than a +reasonably prudent business would exercise under similar +circumstances. The parties shall not use the Confidential Information +for purposes other than those necessary to directly further the +purposes of this Agreement. Except as expressly provided in this +Agreement, no ownership or license rights are granted in any +Confidential Information. The parties shall use commercially +reasonable efforts to prevent any actual or threatened unauthorized +copying, use or disclosure of Confidential Information, and shall +promptly notify the other party of any such actual or threatened +unauthorized disclosure or use. If any Confidential Information must +be disclosed to any third party by reason of legal, accounting or +regulatory requirements beyond the reasonable control of the +disclosing party, the disclosing party shall promptly notify the other +party of the order or request and permit the other party (at its own +expense) to seek an appropriate protective order. + + For the sake of clarity, the parties agree that, notwithstanding +the preceding paragraph, any and all information identified as +Confidential Information (as defined in the NDA) by the disclosing +party in connection with this Agreement shall also be protected under +the NDA; provided, however, that in the event of any conflict between +the confidentiality obligations pursuant to this Agreement and the +obligations pursuant to the NDA with regard to any Confidential +Information (as defined in the NDA) in connection with this Agreement, +including, without limitation, the source code to the Licensed +Materials, the terms of this Agreement shall prevail. + +6. TERM; TERMINATION + + 6.1 Term. This Agreement and the licenses granted hereunder shall +be effective as of the date Licensee first uses the Licensed Materials +("Effective Date") and continue for a period of one (1) year (the +"Initial Term"), unless terminated in accordance with Section 6.2. +Unless either party notifies the other party of its intent to +terminate this Agreement at least one (1) month prior to the end of +the Initial Term or the applicable renewal period ("Renewal +Period(s)"), this Agreement will be automatically renewed for one (1) +year Renewal Periods, provided however that this Agreement will +automatically expire at such time when Licensee no longer intends to +use the Licensed Materials for the authorized purposes described in +this Agreement, at this time Licensee will comply with the termination +provisions in Section 6.2 below. + + 6.2 Termination. Either party may terminate this Agreement +immediately upon written notice for the material breach of the other +party, which material breach is curable and has remained uncured for a +period of thirty (30) days from the date of delivery of written notice +thereof to the other party. Upon the termination or expiration of +this Agreement, + + (a) Licensee shall (i) immediately cease using the Licensed + Materials for any purpose whatsoever; (ii) immediately + destroy or return to NVIDIA all materials belonging to + NVIDIA, including without limitation all copies of the + Software and NVIDIA Confidential Information then in + Licensee's possession or control; and (iii) certify to + NVIDIA in writing that it has done so; and + + (b) NVIDIA shall (i) immediately destroy or return to Licensee + all materials belonging to Licensee that were provided to + NVIDIA pursuant to this Agreement, including without + limitation, Licensee's Confidential Information then in + NVIDIA's possession or control; and (ii) certify to + Licensee in writing that it has done so. These remedies + shall be cumulative and in addition to any other remedies + available to NVIDIA. + + 6.3 Survival. Those provisions in this Agreement, which by their +nature need to survive the termination or expiration of this +Agreement, The following Sections shall survive termination or +expiration of the Agreement, including but not limited to Sections 1, +2.2, 2.3, 2.4, 3, 4, 5, 6.2 , 6.3, 7, 8, 9 and Exhibit A. + +7. WARRANTIES + + THE LICENSED MATERIALS ARE LICENSED FOR LICENSEE'S USE "AS IS" AND +NVIDIA AND ITS LICENSORS DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED AND +STATUTORY INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT +OF THIRD PARTY RIGHTS. NVIDIA DOES NOT REPRESENT OR WARRANT THAT THE +LICENSED MATERIALS WILL MEET LICENSEE'S REQUIREMENTS OR THAT THE +OPERATION OF THE SOFTWARE CONTAINED THEREIN OR RESULTING THEREFROM +WILL BE UNINTERRUPTED OR ERROR-FREE. NO INFORMATION OR ADVICE GIVEN +BY NVIDIA, ITS REPRESENTATIVES, AGENTS OR EMPLOYEES SHALL IN ANY WAY +INCREASE THE SCOPE OF THIS WARRANTY. + + (A) Licensee represents and warrants that it has, or will have +prior to the commercial release of the Licensee Products, a valid and +current license to all the Third Party Components referenced in the +exhibits of this Agreement, for use in connection with Licensed +Materials provided pursuant to this Agreement and Licensee Products. + + +8. LIMITATION OF LIABILITY + + IN NO EVENT SHALL: + + (A) NVIDIA BE LIABLE FOR ANY CONSEQUENTIAL, INDIRECT, INCIDENTAL, +PUNITIVE OR SPECIAL DAMAGES, OF ANY KIND OR CHARACTER, INCLUDING LOST +PROFITS, LOST REVENUE, FAILURE TO REALIZE SAVINGS OR OTHER BENEFITS, +LOSS OF DATA OR USE, AND CLAIMS BY ANY THIRD PARTY, ARISING OUT OF OR +RELATED TO THE SUBJECT MATTER OF THIS AGREEMENT; AND + + (B) NVIDIA'S AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT +EXCEED THE AMOUNT PAID BY LICENSEE FOR USE OF THE LICENSED MATERIALS. +THE FOREGOING EXCLUSION AND LIABILITY LIMITATIONS APPLY EVEN IF SUCH +PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS +EXCLUSION AND LIABILITY LIMITATION SHALL APPLY EVEN IF ANY REMEDY +FAILS OF ITS ESSENTIAL PURPOSE. + +9. GENERAL + + 9.2 Governing Law. This Agreement shall be governed in all +respects by the laws of the United States and of the State of +Delaware, without regard to the conflicts of laws principles thereof. + + 9.3 Jurisdiction. The state and/or federal courts residing in +Santa Clara County, California shall have exclusive jurisdiction over +any dispute or claim arising out of this Agreement. + + 9.4 Severability. If for any reason a court of competent +jurisdiction finds any provision of this Agreement, or portion +thereof, to be unenforceable, that provision of the Agreement will be +enforced to the maximum extent permissible so as to affect the intent +of the parties, and the remainder of this Agreement will continue in +full force and effect. This Agreement has been negotiated by the +parties and their respective counsel and will be interpreted fairly in +accordance with its terms and without any strict construction in favor +of or against either party. + + 9.5 Amendments. The Agreement shall not be modified except by a +written agreement that names this Agreement and any provision to be +modified, is dated subsequent to the Effective Date, and is signed by +duly authorized representatives of both parties. + + 9.6 No Waiver. No failure or delay on the part of either party in +the exercise of any right, power or remedy under this Agreement or +under law, or to insist upon or enforce performance by the other party +of any of the provisions of this Agreement or under law, shall operate +as a waiver thereof, nor shall any single or partial exercise of any +right, power or remedy preclude other or further exercise thereof, or +the exercise of any other right, power or remedy; rather the +provision, right, or remedy shall be and remain in full force and +effect. + + 9.7 No Assignment. This Agreement, and each party's rights and +obligations herein, may not be assigned, subcontracted, delegated, or +otherwise transferred by either party without the other party's prior +written consent, and any attempted assignment, subcontract, +delegation, or transfer in violation of the foregoing will be null and +void. The terms of this Agreement shall be binding upon assignees. + + 9.8 Independent Contractors. NVIDIA's relationship to Licensee is +that of an independent Contractor, and neither party is an agent or +partner of the other. Neither party will have, and will not represent +to any third party that it has, any authority to act on behalf of the +other party. + + 9.9 Export Restrictions. The parties acknowledge that the +Licensed Materials are subject to U.S. export control laws and +regulations. The parties agree to comply with all applicable +international and national laws that apply to the Licensed Materials, +including the U.S. Export Administration Regulations, as well as +end-user, end-use and destination restrictions issued by U.S. and +other governments. + + 9.10 U.S. Government Legend. If Licensee is a branch or agency of +the United States Government, the following provision applies. Any +software provided under this Agreement, including any releases are +comprised of "commercial computer software" and "commercial computer +software documentation" as such terms are used in 48 C.F.R. 12.212 and +are provided to the Government (i) for acquisition by or on behalf of +civilian agencies, consistent with the policy set forth in 48 +C.F.R. 12.212; or (ii) for acquisition by or on behalf of units of the +Department of Defense, consistent with the policies set forth in 48 +C.F.R. 227.7202-1 and 227.7202-3. + + 9.11 Headings. The headings in this Agreement are for the sole +purpose of convenience of reference and shall not in any way limit or +affect the meaning or interpretation of any of the terms or provisions +of this Agreement. + + 9.12 Counterparts. This Agreement may be executed in +counterparts, each of which shall be deemed an original, and all of +which together shall constitute one instrument. + + 9.13 No Third Party Beneficiaries. This Agreement is solely +between NVIDIA and Licensee. There are no third party beneficiaries, +express or implied, to this Agreement. + + 9.14 Entire Agreement. This Agreement constitutes the entire +agreement between the parties with respect to the subject matter +contemplated herein, and merges all prior and contemporaneous +communications. + + + +Exhibit A + + +1. Coding Technologies/AAC+ + + Licensee shall be solely responsible for either obtaining a proper +patent license under the Essential Patents for end products or to +notify Licensee's respective customers of their obligations to obtain +a proper patent license under the Essential Patents for end products +in which the NVIDIA application processor(s) and/or the NVIDIA +software package may be used. For the purpose of this paragraph, +"Essential Patents" means patents which are infringed by the +manufacture, offer for sale, sale (or other form of +commercialization), use or import of products (hardware or software) +implementing, incorporating, containing or using AACPLUSV2 or by the +application of processes involving AACPLUSV2, including those which +are infringed by any source code provided as part of any specification +characterizing AACPLUSV2. + +2. Thomson Multimedia/MP3 + + Supply of the Licensed Materials does not convey a license under +the relevant intellectual property of Thomson Multimedia and/or +Fraunhofer Gesellschaft nor imply any right to use the Licensed +Materials in any finished end user or ready-to-use final product. An +independent license for such use is required. For details, please +visit http://www.mp3licensing.com + +3. MPEG L.A., L.L.C./MPEG-2 + + USE OF THE APPLICABLE NVIDIA SOFTWARE PACKAGE IN ANY MANNER THAT +COMPLIES WITH THE MPEG-2 STANDARD IS EXPRESSLY PROHIBITED WITHOUT A +LICENSE UNDER APPLICABLE PATENTS IN THE MPEG-2 PATENT PORTFOLIO, WHICH +LICENSE IS AVAILABLE FROM MPEG LA, L.L.C., 250 STREELE STREET, SUITE +300, DENVER, COLORADO 80206. NO LICENSE IS GRANTED HEREIN, BY +IMPLICATION OR OTHERWISE, TO LICENSEE TO USE MPEG 2 INTERMEDIATE +PRODUCTS MANUFACTURED OR SOLD BY LICENSEE. + +4. MPEG-2 AAC + + Licensee shall be solely responsible for either obtaining a valid +and current license from AT&T Corp., Dolby Laboratories Licensing +Corporation, Fraunhofer-Gesellscaft, and Sony Corporation for the +applicable version of MPEG-2 AAC. + +5. Fraunhofer-Gesellschaft MPEG-4 HE-AAC + + Licensee understands and accepts that (a) it may be necessary to +execute a patent license with the appropriate licensing entities in +order to obtain all rights necessary to create Licensee's products; +and (b) Licensee will contact the appropriate licensing entities, +e.g. Via Licensing, and negotiate in good faith the adequate +contracts, if any. In addition, it is hereby understood that in the +event that, besides the Fraunhofer-Gesellschaft patents licensed +through such appropriate licensing entities, any further +Fraunhofer-Gesellschaft patent shall be required in order to use the +Licensed Materials, Fraunhofer-Gesellschaft shall not request from +Licensee any additional payment in order to receive a license to such +further Fraunhofer-Gesellschaft patent, as long as Licensee remains a +valid licensee of such appropriate licensing entity. + +6. Microsoft Windows Media + + Licensee acknowledges that Microsoft Windows Media is provided in +object code form only, solely for the Licensee's own internal +evaluation and testing purposes. + + + Licensee further acknowledges the following notice: "This product +includes technology owned by Microsoft Corporation and cannot be used +or further distributed without a license from Microsoft or a Microsoft +affiliate." + +7. Microsoft PlayReady or WMDRM technology + + Licensee acknowledges that the Licensed Materials (i) contain a +certain version of Microsoft PlayReady or WMDRM technology ("PlayReady +Technology"); and (ii) are subject to certain intellectual property +rights of Microsoft and cannot be used or distributed further without +the appropriate license(s) from Microsoft. + + Licensee represents and warrants that (i) Licensee holds a current +and valid license under a PlayReady Device Agreement and Intermediated +Product Distribution License, a PlayReady Final Product Distribution +License, or a like agreement, with Microsoft or a Microsoft affiliate; +and (ii) Licensee will use the PlayReady Technology provided under +this Agreement in Licensees' software, hardware product, or service +offering that (a) is intended for distribution to and/or use by end +users; and (b) is in a final form with Licensee-owned brand and/or +logo most prominently displayed brand in a fully functional user +interface. + +8. Ogg Vorbis Legal Information + +Copyright (c) 2002, Xiph.org Foundation + + Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are +met: + + * Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + + * Redistributions in binary form must reproduce the above + copyright notice, this list of conditions and the following + disclaimer in the documentation and/or other materials provided + with the distribution. + + * Neither the name of the Xiph.org Foundation nor the names of its + contributors may be used to endorse or promote products derived + from this software without specific prior written permission. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND +CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, +INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS BE LIABLE +FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +EXHIBIT A-2 + +Adobe Flash Demonstration and Evaluation License ("Adobe License") +Terms and Conditions + + 1. Software License. NVIDIA hereby grants to Licensee a +non-exclusive, non-transferable, royalty free right to use, install, +evaluate, test, demonstrate, publicly perform and display object code +versions of the Adobe Software together with Licensee's product. For +the avoidance of doubt, Licensee has no right to distribute, +sublicense, or otherwise commercialize the Adobe Software, unless and +until Adobe confirms in writing that Licensee has entered into an +appropriate license agreement with Adobe. + + "Adobe Software" means the Adobe Flash Player software version 10 +as modified by NVIDIA, in object code form as delivered by NVIDIA +hereunder. NVIDIA may update the Adobe Software from time to time, in +its sole discretion. + + 2. Period. Licensee's limited license hereunder shall commence on +the Effective Date and remain in effect until terminated by NVIDIA +upon five (5) days written notice. + + 3. Rights. Licensee agrees that it shall take no action in +furtherance of seeking any patent rights or other intellectual +property rights to the Adobe Software. The Software shall be returned +to NVIDIA within fifteen (15) days of the end of the Evaluation +Period. Licensee shall have no rights to sublicense or distribute the +Software. + + 4. Fees. There shall be no fees owed by either party under this +Adobe License. + + 5. Delivery. NVIDIA shall deliver the Adobe Software to Licensee +shortly after execution of this Adobe License. + + 6. Restrictions. Licensee does not have any rights to make use of +the Adobe Software, or in any manner, copy, disseminate, or in any way +circulate the Adobe Software other than as permitted under Section 1 +above. Licensee shall limit access to the Adobe Software to its +employees who need to know such information and who have agreed, +either as a condition to employment or prior to obtaining the Adobe +Software, to be bound by terms and conditions of confidentiality. The +rights herein do not entitle Licensee to use the Adobe Software, or +any technology or intellectual property contained within it, as +reference or inspiration for developing or creating another product in +any way based upon the Adobe Software. Licensee agrees not to +decompile, reverse engineer, reverse assemble, disassemble, or +otherwise reverse engineer or reduce the Adobe Software provided in +object code form to a human-perceivable form. + + 7. Ownership. All right, title, and interest in the Adobe +Software, shall be owned by Adobe. Except as set forth in Section 1 +above, Licensee acquires no license to any NVIDIA or Adobe +intellectual property rights pursuant to this Adobe License. The Adobe +Software, and any partial or whole copies thereof, and all copyright, +patent, trade secret and other intellectual property rights therein, +are and remain the property of Adobe and NVIDIA. The provisions of +this paragraph shall survive expiration or earlier termination of this +Adobe License. NVIDIA does not directly or indirectly grant, or +purport to grant, to Licensee any rights or immunities under Adobe's +intellectual property rights that will subject such intellectual +property rights to an open source license or scheme in which there is +or could be interpreted to be a requirement that as a condition of +use, modification and/or distribution, the Adobe Software be: (i) +disclosed or distributed in source code form; (ii) licensed for the +purpose of making derivative works; or (iii) redistributable at no +charge. + + + 8. Effect of Termination. Upon termination, the rights granted +hereunder shall cease and all materials furnished to Licensee by +NVIDIA hereunder relating to the Adobe Software shall be returned to +it promptly, together with any copies thereof. + + 9. Disclaimer. NVIDIA PROVIDES THE ADOBE SOFTWARE "AS IS" AND +WITHOUT ANY WARRANTIES. THE ENTIRE RISK AS TO THE RESULTS AND +PERFORMANCE OF THE ADOBE SOFTWARE IS ASSUMED BY LICENSEE. NVIDIA +DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, WITH REGARD +TO THE ADOBE SOFTWARE OR ANY OTHER INFORMATION PROVIDED HEREUNDER, +INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT +OF THIRD PARTY RIGHTS. + + 10. Limitation on Liability. NOTWITHSTANDING ANY PROVISION IN THIS +AGREEMENT, NEITHER NVIDIA NOR ADOBE SHALL BE LIABLE TO LICENSEE OR ANY +THIRD PARTY FOR ANY SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL +DAMAGES, ARISING OUT OF OR RELATED TO THIS AGREEMENT, INCLUDING, +WITHOUT LIMITATION, DAMAGES RESULTING FROM LOSS OF PROFITS, DATA, +BUSINESS, OR GOODWILL, HOWEVER CAUSED AND ON WHATEVER THEORY, WHETHER +BASED ON BREACH OF CONTRACT OR WARRANTY, TORT (INCLUDING NEGLIGENCE), +THE FAILURE OR ASSERTED FAILURE OF NVIDIA TO PERFORM ITS OBLIGATIONS +HEREUNDER, OR OTHERWISE, AND WHETHER OR NOT NVIDIA HAS BEEN ADVISED OR +IS AWARE OF THE POSSIBILITY OF SUCH DAMAGES. NVIDIA's aggregate +liability to Licensee or any third party arising out of or in +connection with this Adobe License or any collateral agreement, +whether in contract, tort (including negligence), or otherwise, shall +be limited to fifty dollars (US$50). + + 11. Relief. As the unauthorized distribution of the Adobe Software +may diminish the value to NVIDIA or Adobe of the proprietary interests +that are the subject of this Adobe License, if Licensee breaches any +of its obligations under this Adobe License, NVIDIA or Adobe shall be +entitled to seek equitable relief to protect its interests therein, +including but not limited to injunctive relief, as well as money +damages. + + 12. Export Restrictions. The parties acknowledge that the Adobe +Software is subject to U.S. export control laws and regulations. The +parties agree to comply with all applicable international and national +laws that apply to the Adobe Software, including the U.S. Export +Administration Regulations and the United States Department of +Commerce, as well as end-user, end-use and destination restrictions +issued by U.S. and other governments. + + 13. Evaluation Feedback. + + 13.1 Feedback by Licensee. You must provide to NVIDIA any +suggestions, comments and feedback regarding the Adobe Software +("Licensee Feedback"). NVIDIA and Adobe may use and include any +Licensee Feedback that you provide to improve the Software or other +technologies and / or products. Accordingly, you grant to NVIDIA, its +subsidiaries, its affiliates and its licensees a perpetual, +irrevocable, worldwide, royalty-free, fully paid-up license to freely +use, have used, sell, modify, reproduce, transmit, license, sublicense +(through multiple tiers of sublicensees, including to Adobe), +distribute (through multiple tiers of distributors), and otherwise +commercialize the Licensee Feedback in the Adobe Software or other +NVIDIA or Adobe technologies and/or products. + + 13.2 Confidential Information. Licensee Feedback is considered +Adobe's confidential information ("Adobe Confidential Information"). +You shall not use or disclose any Adobe Confidential Information +except as expressly authorized herein, and you shall protect all such +Adobe Confidential Information using the same degree of care you use +with respect to your own proprietary information, but in no event with +safeguards less than a reasonably prudent business would exercise +under similar circumstances. You agree to take prompt and appropriate +action to prevent unauthorized use or disclosure of any Adobe +Confidential Information. + + + + +Exhibit E + +(Open Source Portions) + + Licensee agrees that the following terms and conditions shall +apply to its use of certain portions (as referenced below) of the +applicable software packages selected by the Licensee in connection +with this Agreement. For the sake of clarity, Licensee agrees that the +terms and conditions of the Agreement shall continue to govern +Licensee's use of the Software and Licensed Materials. The parties +agree that the capitalized terms used in this exhibit shall have the +same meaning ascribed to such term in the Agreement or any amendment +thereto. + + 1. NVIDIA agrees that the open source portions expressly licensed +under terms and conditions of Excluded Licenses (collectively the +"Open Source Portions"), shall not be subject to the restrictions set +forth in the following section ("No Excluded Licenses") of the +Agreement (or substantially similar provision in the Agreement signed +by Licensee): + + "3.5 No Excluded Licenses. The licenses granted in Section 2.1 do +not include the right to, and Licensee shall not: (a) create +Derivative Work(s) of the Licensed Materials in any manner that would +cause the Licensed Materials, in whole or in part, to become subject +to the terms of an Excluded License; or (b) distribute the Licensed +Materials (or Derivative Works thereof) in any manner that would cause +the Licensed Materials, or any component thereof, to become subject to +the terms of an Excluded License." + + 2. Licensee agrees that it shall not externally distribute, +license or otherwise disclose in any manner the Open Source Portions +until the later of (a) the Licensee Products (as defined in the +Agreement), that incorporates the Open Source Portions, in whole or in +part, is commercialized and made generally available for sale; or (b) +NVIDIA makes generally available to the public the Open Source +Portions in source code form. + + 3. Except as noted otherwise in this Exhibit E, the terms and +conditions of this Exhibit E will supercede any conflicting terms and +conditions between Exhibit E and the Agreement. + + + +EXHIBIT F + +Licensee acknowledges and agrees with this following third party +licensing obligations and/or notices in connection with its use of (a) +Tegra Linux Driver Package; and (b) Chromium: + + +1. GNU General Public License 2.0 + + (For notice purposes only) + + This product includes copyrighted third-party software licensed +under the terms of the GNU General Public License. All third-party +software packages are copyright by their respective authors. GNU +General Public License is hereby incorporated into the Agreement by +this reference. + + http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt + +2. Apache License v2.0 + + (For notice purposes only) + + This product includes copyrighted third-party software licensed +under the terms of the Apache License. All third-party software +packages are copyright by their respective authors. Apache License is +hereby incorporated into the Agreement by this reference. + + http://www.apache.org/licenses/LICENSE-2.0.html + +3. BSD License + + (For notice purposes only) + + This product includes copyrighted third-party software licensed +under the terms of the BSD License. All third-party software packages +are copyright by their respective authors. BSD License is incorporated +into the Agreement by this reference. + + http://www.opensource.org/licenses/bsd-license.php + +4. MIT License + + (For notice purposes only) + + This product includes copyrighted third-party software licensed +under the terms of the MIT License. All third-party software packages +are copyright by their respective authors. MIT License is hereby +incorporated into the Agreement by this reference + + http://www.opensource.org/licenses/mit-license.php + + +REV. 02.28.2012 + + diff --git a/sdk_container/src/third_party/coreos-overlay/licenses/ralink-firmware b/sdk_container/src/third_party/coreos-overlay/licenses/ralink-firmware new file mode 100644 index 0000000000..18dd038e4f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/licenses/ralink-firmware @@ -0,0 +1,39 @@ +Copyright (c) 2007, Ralink Technology Corporation +All rights reserved. + +Redistribution. Redistribution and use in binary form, without +modification, are permitted provided that the following conditions are +met: + +* Redistributions must reproduce the above copyright notice and the + following disclaimer in the documentation and/or other materials + provided with the distribution. +* Neither the name of Ralink Technology Corporation nor the names of its + suppliers may be used to endorse or promote products derived from this + software without specific prior written permission. +* No reverse engineering, decompilation, or disassembly of this software + is permitted. + +Limited patent license. Ralink Technology Corporation grants a world-wide, +royalty-free, non-exclusive license under patents it now or hereafter +owns or controls to make, have made, use, import, offer to sell and +sell ("Utilize") this software, but solely to the extent that any +such patent is necessary to Utilize the software alone, or in +combination with an operating system licensed under an approved Open +Source license as listed by the Open Source Initiative at +http://opensource.org/licenses. The patent license shall not apply to +any other combinations which include this software. No hardware per +se is licensed hereunder. + +DISCLAIMER. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND +CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, +BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND +FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND +ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR +TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE +USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH +DAMAGE. diff --git a/sdk_container/src/third_party/coreos-overlay/metadata/layout.conf b/sdk_container/src/third_party/coreos-overlay/metadata/layout.conf new file mode 100644 index 0000000000..a83f5b1222 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/metadata/layout.conf @@ -0,0 +1,5 @@ +masters = portage-stable +thin-manifests = true +use-manifests = strict +cache-format = md5-dict +profile-formats = portage-2 diff --git a/sdk_container/src/third_party/coreos-overlay/metadata/repoman/qa_data.yaml b/sdk_container/src/third_party/coreos-overlay/metadata/repoman/qa_data.yaml new file mode 100644 index 0000000000..17c0e0b477 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/metadata/repoman/qa_data.yaml @@ -0,0 +1,65 @@ +--- + +version: 1 +repoman_version: 2.3.3 + +missingvars: + - LICENSE + +qacats: + - EAPI.definition + - EAPI.deprecated + - EAPI.incompatible + - EAPI.unsupported + - LICENSE.invalid + - LICENSE.missing + - LICENSE.syntax + - dependency.syntax + - digest.assumed + - digest.missing + - ebuild.invalidname + - ebuild.majorsyn + - ebuild.syntax + - file.name + - inherit.missing + - manifest.bad + - repo.eapi.banned + - variable.invalidchar + +qawarnings: + - DESCRIPTION.missing + - DESCRIPTION.toolong + - HOMEPAGE.virtual + - IUSE.invalid + - IUSE.missing + - KEYWORDS.stupid + - LICENSE.deprecated + - LICENSE.virtual + - digest.unused + - ebuild.absdosym + - ebuild.invalidname + - ebuild.minorsyn + - ebuild.patches + - file.UTF8 + - file.executable + - file.size + - inherit.unused + - inherit.deprecated + - portage.internal + - repo.eapi.deprecated + - upstream.workaround + - uri.https + - variable.readonly + +valid_restrict: + - binchecks + - bindist + - fetch + - installsources + - mirror + - preserve-libs + - primaryuri + - splitdebug + - strip + - test + - userpriv diff --git a/sdk_container/src/third_party/coreos-overlay/metadata/repoman/repository.yaml b/sdk_container/src/third_party/coreos-overlay/metadata/repoman/repository.yaml new file mode 100644 index 0000000000..d38f71c6db --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/metadata/repoman/repository.yaml @@ -0,0 +1,78 @@ +--- + +version: 1 +repoman_version: 2.3.3 + +# The few modules disabled here generate unreasonable false positives for Container Linux: +# * The `keywords` module generates KEYWORDS.dropped and KEYWORDS.invalid errors. These are more or +# less irrelevant for Container Linux, as they tend to be for platforms with non-Linux kernels, +# which aren't a concern for us. These could likely be marked as warnings in qa_data.yaml, but +# they aren't really even worth fixing on their own, so there's no need to run them at all. +# * The `pkgmetadata` module checks metadata.xml. Most of this isn't relevant to Container Linux, +# users will not be interacting with the overlay themselves, and so any metadata specified in +# metadata.xml will only ever be seen by users of the SDK. As with `keywords`, proper metadata +# might be nice to have, but considering metadata issues as warnings or errors here adds more +# noise than signal. +# * The `profile` module, among other issues, generates a huge number (>10000) of dependency.bad +# errors. This is due to unmodified (or minimally modified) ebuilds from Gentoo upstream that +# depend on ebuilds not present in coreos-overlay or portage-stable. These dependencies are hidden +# behind USE flags or otherwise unused in Container Linux, so the missing ebuilds aren't a +# problem, but the amount of noise generated by this module makes it unusable. +# +# TODO(csssuf): The `profile` module also contains the LICENSE.invalid check which _is_ valuable +# for Container Linux, but repoman currently provides no way to disable checks individually; they +# can only be marked as warnings, or their containing modules disabled entirely. Unfortunately the +# `profile` module contains so much noise that leaving it enabled isn't an option, so we lose the +# ability to use the LICENSE.invalid check too. If/when repoman has a fix for this, use it. +scan_modules: + description + eapi + ebuild_metadata + fetches + files + -keywords + live + manifests + multicheck + -pkgmetadata + -profile + restrict + ruby + +linechecks_modules: + assignment + eapi3assignment + implicitdepend + hasq + useq + preservelib + bindnow + inherit + dosym + definition + srcprepare + eapi3deprecated + pkgpretend + eapi4incompatible + eapi4gonevars + paralleldisabled + autodefault + -gentooheader + nooffset + nesteddie + patches + emakeparallel + srccompileeconf + srcunpackpatches + portageinternal + portageinternalvariableassignment + quote + quoteda + httpsuri + builtwith + uselesscds + uselessdodoc + whitespace + blankline + addpredict + noasneeded diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/Manifest b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/Manifest new file mode 100644 index 0000000000..61a62a595d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/Manifest @@ -0,0 +1 @@ +DIST ebtables-2.0.11.tar.gz 428411 BLAKE2B 62af4c38ad21498e43f41ef96c8abb5704e8d8a48f1327c587b664f36fdfa9849a9a37e59958db56d38019465d8bf1775914f7387fde99a441615913702cf504 SHA512 43a04c6174c8028c501591ef260526297e0f018016f226e2a3bcf80766fddf53d4605c347554d6da7c4ab5e2131584a18da20916ffddcbf2d26ac93b00c5777f diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/ebtables-2.0.11-r3.ebuild b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/ebtables-2.0.11-r3.ebuild new file mode 100644 index 0000000000..bf33af5eb1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/ebtables-2.0.11-r3.ebuild @@ -0,0 +1,107 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +inherit autotools + +MY_PV="$(ver_rs 3 '-' )" +MY_P="${PN}-${MY_PV}" + +DESCRIPTION="Controls Ethernet frame filtering on a Linux bridge, MAC NAT and brouting" +HOMEPAGE="https://ebtables.netfilter.org/" +SRC_URI="http://ftp.netfilter.org/pub/${PN}/${MY_P}.tar.gz" +S="${WORKDIR}/${MY_P}" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 ~arm arm64 ppc ~ppc64 ~riscv x86" +IUSE="+perl static" + +BDEPEND=">=app-eselect/eselect-iptables-20200508" +# The ebtables-save script is written in perl. +RDEPEND="${BDEPEND} + perl? ( dev-lang/perl ) + net-misc/ethertypes" + +PATCHES=( + "${FILESDIR}/${PN}-2.0.11-makefile.patch" + + # Enhance ebtables-save to take table names as parameters bug #189315 + "${FILESDIR}/${PN}-2.0.11-ebt-save.patch" + + # from upstream git + "${FILESDIR}/ebtables-2.0.11-remove-stray-atsign.patch" +) + +pkg_setup() { + if use static; then + ewarn "You've chosen static build which is useful for embedded devices." + ewarn "It has no init script. Make sure that's really what you want." + fi +} + +src_prepare() { + default + + # Don't install perl scripts if USE=perl is disabled. + if ! use perl; then + sed -i -e '/^sbin_SCRIPTS/ d' Makefile.am || die + fi + + # The bundled autotools are borked, so force a rebuild. + eautoreconf +} + +src_configure() { + econf \ + --bindir="/bin" \ + --sbindir="/sbin" \ + --libdir="/$(get_libdir)/${PN}" \ + $(use_enable static) +} + +src_compile() { + emake $(usex static 'static ebtables-legacy.8' '') +} + +src_install() { + local -a DOCS=( ChangeLog THANKS ) + + if ! use static; then + emake DESTDIR="${D}" install + newinitd "${FILESDIR}"/ebtables.initd-r1 ebtables + newconfd "${FILESDIR}"/ebtables.confd-r1 ebtables + + find "${D}" -name '*.la' -type f -delete || die + + # The ethertypes package installs this for us. + rm "${ED}"/etc/ethertypes || die + else + into / + newsbin static ebtables + fi + + newman ebtables-legacy.8 ebtables.8 + einstalldocs +} + +pkg_postinst() { + # Flatcar: Use the xtables-nft-multi to use the nft_backend instead of the legacy + if ! eselect ebtables show &>/dev/null; then + elog "Current ebtables implementation is unset, setting to xtables-nft-multi" + eselect ebtables set xtables-nft-multi + fi + + eselect ebtables show +} + +pkg_prerm() { + if [[ -z ${REPLACED_BY_VERSION} ]] && has_version 'net-firewall/iptables[nftables]'; then + elog "Resetting ebtables symlinks to xtables-nft-multi before removal" + eselect ebtables set xtables-nft-multi + else + elog "Unsetting ebtables symlinks before removal" + eselect ebtables unset + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-ebt-save.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-ebt-save.patch new file mode 100644 index 0000000000..7cfe128bab --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-ebt-save.patch @@ -0,0 +1,26 @@ +diff --git a/ebtables-save.in b/ebtables-save.in +index 17924a2..c7a64c3 100644 +--- a/ebtables-save.in ++++ b/ebtables-save.in +@@ -12,6 +12,7 @@ my $ebtables = "@sbindir@/ebtables"; + my $cnt = ""; + my $version = "1.0"; + my $table_name; ++my @table_names; + + # ======================================================== + # Process filter table +@@ -49,6 +50,13 @@ sub process_table { + } + # ======================================================== + ++if ($#ARGV + 1 == 0) { ++ @table_names =split("\n", `grep -E '^ebtable_' /proc/modules | cut -f1 -d' ' | sed s/ebtable_//`); ++} ++else { ++ @table_names = @ARGV; ++} ++# ======================================================== + unless (-x $ebtables) { exit -1 }; + print "# Generated by ebtables-save v$version (legacy) on " . `date`; + if (defined($ENV{'EBTABLES_SAVE_COUNTER'}) && $ENV{'EBTABLES_SAVE_COUNTER'} eq "yes") { diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-makefile.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-makefile.patch new file mode 100644 index 0000000000..dc9be9e7d6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-makefile.patch @@ -0,0 +1,13 @@ +diff --git a/Makefile.am b/Makefile.am +index 6181003..de01139 100644 +--- a/Makefile.am ++++ b/Makefile.am +@@ -50,7 +50,7 @@ ebtables_legacy_LDADD = libebtc.la + ebtablesd_LDADD = libebtc.la + ebtables_legacy_restore_SOURCES = ebtables-restore.c + ebtables_legacy_restore_LDADD = libebtc.la +-static_SOURCES = ebtables.c ++static_SOURCES = ebtables.c ebtables-standalone.c + static_LDFLAGS = -static + static_LDADD = libebtc.la + examples_ulog_test_ulog_SOURCES = examples/ulog/test_ulog.c getethertype.c diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-remove-stray-atsign.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-remove-stray-atsign.patch new file mode 100644 index 0000000000..88f1d72965 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables-2.0.11-remove-stray-atsign.patch @@ -0,0 +1,32 @@ +From 7d00e58157bc61168a057cde91a6e5b54dca573b Mon Sep 17 00:00:00 2001 +From: Jan Engelhardt +Date: Mon, 2 Dec 2019 20:52:04 +0100 +Subject: build: remove stray @ sign in manpage + +Because the sed command was not matching the trailing @, it +was left in the manpage, leading to + +NAME + ebtables-legacy (2.0.11@) - Ethernet bridge frame table administration (legacy) + +Signed-off-by: Jan Engelhardt +Signed-off-by: Pablo Neira Ayuso +--- + Makefile.am | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/Makefile.am b/Makefile.am +index b879941..6181003 100644 +--- a/Makefile.am ++++ b/Makefile.am +@@ -64,6 +64,6 @@ ebtables-legacy-save: ebtables-save.in ${top_builddir}/config.status + ${AM_V_GEN}sed -e 's![@]sbindir@!${sbindir}!g' <$< >$@ + + ebtables-legacy.8: ebtables-legacy.8.in ${top_builddir}/config.status +- ${AM_V_GEN}sed -e 's![@]PACKAGE_VERSION!${PACKAGE_VERSION}!g' \ ++ ${AM_V_GEN}sed -e 's![@]PACKAGE_VERSION@!${PACKAGE_VERSION}!g' \ + -e 's![@]PACKAGE_DATE@!${PROGDATE}!g' \ + -e 's![@]LOCKFILE@!${LOCKFILE}!g' <$< >$@ +-- +cgit v1.2.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables.confd-r1 b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables.confd-r1 new file mode 100644 index 0000000000..8e83c81b9f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables.confd-r1 @@ -0,0 +1,19 @@ +# /etc/conf.d/ebtables + +# Location in which ebtables initscript will save set rules on +# service shutdown +EBTABLES_SAVE="/var/lib/ebtables/rules-save" + +# Options to pass to ebtables-save and ebtables-restore +SAVE_RESTORE_OPTIONS="" + +# Save state on stopping ebtables +SAVE_ON_STOP="yes" + +# If you need to log iptables messages as soon as iptables starts, +# AND your logger does NOT depend on the network, then you may wish +# to uncomment the next line. +# If your logger depends on the network, and you uncomment this line +# you will create an unresolvable circular dependency during startup. +# After commenting or uncommenting this line, you must run 'rc-update -u'. +#rc_use="logger" diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables.initd-r1 b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables.initd-r1 new file mode 100644 index 0000000000..bdc0987b1b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/files/ebtables.initd-r1 @@ -0,0 +1,101 @@ +#!/sbin/openrc-run +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +extra_commands="save panic" +extra_started_commands="reload" + +ebtables_bin="/sbin/ebtables" +ebtables_save=${EBTABLES_SAVE} + +depend() { + before net +} + +ebtables_tables() { + local table + for table in filter nat broute; do + if ${ebtables_bin} -t ${table} -L > /dev/null 2>&1; then + printf '%s' "${table} " + fi + done +} + +set_table_policy() { + local chains table=$1 policy=$2 + case ${table} in + nat) chains="PREROUTING POSTROUTING OUTPUT";; + broute) chains="BROUTING";; + filter) chains="INPUT FORWARD OUTPUT";; + *) chains="";; + esac + local chain + for chain in ${chains} ; do + ${ebtables_bin} -t ${table} -P ${chain} ${policy} + done +} + +checkconfig() { + if [ ! -f ${ebtables_save} ] ; then + eerror "Not starting ebtables. First create some rules then run:" + eerror "/etc/init.d/ebtables save" + return 1 + fi + return 0 +} + +start() { + checkconfig || return 1 + ebegin "Loading ebtables state and starting bridge firewall" + ${ebtables_bin}-restore ${SAVE_RESTORE_OPTIONS} < "${ebtables_save}" + eend $? +} + +stop() { + if [ "${SAVE_ON_STOP}" = "yes" ] ; then + save || return 1 + fi + ebegin "Stopping bridge firewall" + local a + for a in $(ebtables_tables); do + set_table_policy $a ACCEPT + + ${ebtables_bin} -t $a -F + ${ebtables_bin} -t $a -X + done + eend $? +} + +reload() { + ebegin "Flushing bridge firewall" + local a + for a in $(ebtables_tables); do + ${ebtables_bin} -t $a -F + ${ebtables_bin} -t $a -X + done + eend $? + + start +} + +save() { + ebegin "Saving ebtables state" + checkpath -d -m 0755 "${ebtables_save%/*}" + checkpath -f -m 0600 "${ebtables_save}" + ${ebtables_bin}-save $(ebtables_tables) ${SAVE_RESTORE_OPTIONS} > "${ebtables_save}" + eend $? +} + +panic() { + service_started ebtables && svc_stop + + local a + ebegin "Dropping all packets forwarded on bridges" + for a in $(ebtables_tables); do + ${ebtables_bin} -t $a -F + ${ebtables_bin} -t $a -X + + set_table_policy $a DROP + done + eend $? +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/metadata.xml new file mode 100644 index 0000000000..3386c21e01 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/ebtables/metadata.xml @@ -0,0 +1,15 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + Install the ebtables-save script which uses perl + + + ebtables + cpe:/a:netfilter:ebtables + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/Manifest b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/Manifest new file mode 100644 index 0000000000..44c1d5abb4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/Manifest @@ -0,0 +1 @@ +DIST iptables-1.8.8.tar.bz2 746985 BLAKE2B 0da021cc7313b86af331768904956dab3eee3de245a7b03965129f3d7f13097fc03fbb1390167dcd971eff216eabad9e59b261a9c0f54bfc48a77453aa40d164 SHA512 f21df23279a77531a23f3fcb1b8f0f8ec0c726bda236dd0e33af74b06753baff6ce3f26fb9fcceb6fada560656ba901e68fc6452eb840ac1b206bc4654950f59 diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/ip6tables-r1.confd b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/ip6tables-r1.confd new file mode 100644 index 0000000000..e608f41d1e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/ip6tables-r1.confd @@ -0,0 +1,27 @@ +# /etc/conf.d/ip6tables + +# Set wait option for xtables lock in seconds +# DEFAULT: 60 +#IPTABLES_LOCK_WAIT_TIME="60" + +# Set wait interval option for xtables lock in microseconds +# DEFAULT: 1000 +#IPTABLES_LOCK_WAIT_INTERVAL="1000" + +# Location in which ip6tables initscript will save set rules on +# service shutdown +IP6TABLES_SAVE="/var/lib/ip6tables/rules-save" + +# Options to pass to ip6tables-save and ip6tables-restore +SAVE_RESTORE_OPTIONS="-c" + +# Save state on stopping ip6tables +SAVE_ON_STOP="yes" + +# If you need to log ip6tables messages as soon as ip6tables starts, +# AND your logger does NOT depend on the network, then you may wish +# to uncomment the next line. +# If your logger depends on the network, and you uncomment this line +# you will create an unresolvable circular dependency during startup. +# After commenting or uncommenting this line, you must run 'rc-update -u'. +#rc_use="logger" diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.2-link.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.2-link.patch new file mode 100644 index 0000000000..c20f2e54b8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.2-link.patch @@ -0,0 +1,24 @@ +From ee4fc7c558d9eb9c37035250046d4eac9af3fa28 Mon Sep 17 00:00:00 2001 +From: Sebastian Pipping +Date: Thu, 27 Dec 2018 23:47:33 +0100 +Subject: [PATCH] Fix link errors for USE="conntrack static-libs" (bug #586106) + +--- + iptables/Makefile.am | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/iptables/Makefile.am b/iptables/Makefile.am +index 581dc32..2c3db86 100644 +--- a/iptables/Makefile.am ++++ b/iptables/Makefile.am +@@ -26,6 +26,7 @@ xtables_legacy_multi_LDADD += ../libiptc/libip6tc.la ../extensions/libext6.a + endif + xtables_legacy_multi_SOURCES += xshared.c + xtables_legacy_multi_LDADD += ../libxtables/libxtables.la -lm ++xtables_legacy_multi_LDADD += ${libnetfilter_conntrack_LIBS} + + # iptables using nf_tables api + if ENABLE_NFTABLES +-- +2.19.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.4-no-symlinks.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.4-no-symlinks.patch new file mode 100644 index 0000000000..349a01abd5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.4-no-symlinks.patch @@ -0,0 +1,19 @@ +diff --git a/iptables/Makefile.am b/iptables/Makefile.am +index 71b1b1d4..30c77f9a 100644 +--- a/iptables/Makefile.am ++++ b/iptables/Makefile.am +@@ -71,12 +71,10 @@ CLEANFILES = iptables.8 xtables-monitor.8 \ + + vx_bin_links = iptables-xml + if ENABLE_IPV4 +-v4_sbin_links = iptables-legacy iptables-legacy-restore iptables-legacy-save \ +- iptables iptables-restore iptables-save ++v4_sbin_links = iptables-legacy iptables-legacy-restore iptables-legacy-save + endif + if ENABLE_IPV6 +-v6_sbin_links = ip6tables-legacy ip6tables-legacy-restore ip6tables-legacy-save \ +- ip6tables ip6tables-restore ip6tables-save ++v6_sbin_links = ip6tables-legacy ip6tables-legacy-restore ip6tables-legacy-save + endif + if ENABLE_NFTABLES + x_sbin_links = iptables-nft iptables-nft-restore iptables-nft-save \ diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-format-security.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-format-security.patch new file mode 100644 index 0000000000..fafc435379 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-format-security.patch @@ -0,0 +1,21 @@ +https://git.netfilter.org/iptables/commit/?id=b72eb12ea5a61df0655ad99d5048994e916be83a + +From: Phil Sutter +Date: Fri, 13 May 2022 16:51:58 +0200 +Subject: xshared: Fix build for -Werror=format-security + +Gcc complains about the omitted format string. + +Signed-off-by: Phil Sutter +--- a/iptables/xshared.c ++++ b/iptables/xshared.c +@@ -1307,7 +1307,7 @@ static void check_empty_interface(struct xtables_args *args, const char *arg) + return; + + if (args->family != NFPROTO_ARP) +- xtables_error(PARAMETER_PROBLEM, msg); ++ xtables_error(PARAMETER_PROBLEM, "%s", msg); + + fprintf(stderr, "%s", msg); + } +cgit v1.2.3 diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-musl-headers.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-musl-headers.patch new file mode 100644 index 0000000000..52e2c70199 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-musl-headers.patch @@ -0,0 +1,59 @@ +https://git.netfilter.org/iptables/commit/?id=0e7cf0ad306cdf95dc3c28d15a254532206a888e +https://bugs.gentoo.org/846377 + +From: Phil Sutter +Date: Wed, 18 May 2022 16:04:09 +0200 +Subject: Revert "fix build for missing ETH_ALEN definition" +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +This reverts commit c5d9a723b5159a28f547b577711787295a14fd84 as it broke +compiling against musl libc. Might be a bug in the latter, but for the +time being try to please both by avoiding the include and instead +defining ETH_ALEN if unset. + +While being at it, move netinet/ether.h include up. + +Fixes: 1bdb5535f561a ("libxtables: Extend MAC address printing/parsing support") +Signed-off-by: Phil Sutter +Reviewed-by: Maciej Żenczykowski +--- a/libxtables/xtables.c ++++ b/libxtables/xtables.c +@@ -28,6 +28,7 @@ + #include + #include + #include ++#include + #include + #include + #include +@@ -45,7 +46,6 @@ + + #include + #include /* INT_MAX in ip_tables.h/ip6_tables.h */ +-#include /* ETH_ALEN */ + #include + #include + #include +@@ -72,6 +72,10 @@ + #define PROC_SYS_MODPROBE "/proc/sys/kernel/modprobe" + #endif + ++#ifndef ETH_ALEN ++#define ETH_ALEN 6 ++#endif ++ + /* we need this for ip6?tables-restore. ip6?tables-restore.c sets line to the + * current line of the input file, in order to give a more precise error + * message. ip6?tables itself doesn't need this, so it is initialized to the +@@ -2245,8 +2249,6 @@ void xtables_print_num(uint64_t number, unsigned int format) + printf(FMT("%4lluT ","%lluT "), (unsigned long long)number); + } + +-#include +- + static const unsigned char mac_type_unicast[ETH_ALEN] = {}; + static const unsigned char msk_type_unicast[ETH_ALEN] = {1}; + static const unsigned char mac_type_multicast[ETH_ALEN] = {1}; +cgit v1.2.3 diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-out-of-tree-build.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-out-of-tree-build.patch new file mode 100644 index 0000000000..ee9e218b5d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-out-of-tree-build.patch @@ -0,0 +1,26 @@ +https://git.netfilter.org/iptables/commit/?id=0ebf52fc951b2a4d98a166afb34af4f364bbeece + +From: Ben Brown +Date: Wed, 25 May 2022 16:26:13 +0100 +Subject: build: Fix error during out of tree build + +Fixes the following error: + + ../../libxtables/xtables.c:52:10: fatal error: libiptc/linux_list.h: No such file or directory + 52 | #include + +Fixes: f58b0d7406451 ("libxtables: Implement notargets hash table") +Signed-off-by: Ben Brown +Signed-off-by: Phil Sutter +--- a/libxtables/Makefile.am ++++ b/libxtables/Makefile.am +@@ -1,7 +1,7 @@ + # -*- Makefile -*- + + AM_CFLAGS = ${regular_CFLAGS} +-AM_CPPFLAGS = ${regular_CPPFLAGS} -I${top_builddir}/include -I${top_srcdir}/include -I${top_srcdir}/iptables ${kinclude_CPPFLAGS} ++AM_CPPFLAGS = ${regular_CPPFLAGS} -I${top_builddir}/include -I${top_srcdir}/include -I${top_srcdir}/iptables -I${top_srcdir} ${kinclude_CPPFLAGS} + + lib_LTLIBRARIES = libxtables.la + libxtables_la_SOURCES = xtables.c xtoptions.c getethertype.c +cgit v1.2.3 diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-uint-musl.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-uint-musl.patch new file mode 100644 index 0000000000..40302f624e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-1.8.8-uint-musl.patch @@ -0,0 +1,135 @@ +https://git.netfilter.org/iptables/commit/?id=f319389525b066b7dc6d389c88f16a0df3b8f189 + +From: Nick Hainke +Date: Mon, 16 May 2022 18:16:41 +0200 +Subject: treewide: use uint* instead of u_int* + +Gcc complains about missing types. Some commits introduced u_int* instead +of uint*. Use uint treewide. + +Fixes errors in the form of: +In file included from xtables-legacy-multi.c:5: +xshared.h:83:56: error: unknown type name 'u_int16_t'; did you mean 'uint16_t'? + 83 | set_option(unsigned int *options, unsigned int option, u_int16_t *invflg, + | ^~~~~~~~~ + | uint16_t +make[6]: *** [Makefile:712: xtables_legacy_multi-xtables-legacy-multi.o] Error 1 + +Avoid libipq API breakage by adjusting libipq.h include accordingly. For +arpt_mangle.h kernel uAPI header, apply same change as in kernel commit +e91ded8db5747 ("uapi: netfilter_arp: use __u8 instead of u_int8_t"). + +Signed-off-by: Nick Hainke +Signed-off-by: Phil Sutter +--- a/extensions/libxt_conntrack.c ++++ b/extensions/libxt_conntrack.c +@@ -778,7 +778,7 @@ matchinfo_print(const void *ip, const struct xt_entry_match *match, int numeric, + + static void + conntrack_dump_ports(const char *prefix, const char *opt, +- u_int16_t port_low, u_int16_t port_high) ++ uint16_t port_low, uint16_t port_high) + { + if (port_high == 0 || port_low == port_high) + printf(" %s%s %u", prefix, opt, port_low); +--- a/include/libipq/libipq.h ++++ b/include/libipq/libipq.h +@@ -24,7 +24,7 @@ + #include + #include + #include +-#include ++#include + #include + #include + #include +@@ -48,19 +48,19 @@ typedef unsigned long ipq_id_t; + struct ipq_handle + { + int fd; +- u_int8_t blocking; ++ uint8_t blocking; + struct sockaddr_nl local; + struct sockaddr_nl peer; + }; + +-struct ipq_handle *ipq_create_handle(u_int32_t flags, u_int32_t protocol); ++struct ipq_handle *ipq_create_handle(uint32_t flags, uint32_t protocol); + + int ipq_destroy_handle(struct ipq_handle *h); + + ssize_t ipq_read(const struct ipq_handle *h, + unsigned char *buf, size_t len, int timeout); + +-int ipq_set_mode(const struct ipq_handle *h, u_int8_t mode, size_t len); ++int ipq_set_mode(const struct ipq_handle *h, uint8_t mode, size_t len); + + ipq_packet_msg_t *ipq_get_packet(const unsigned char *buf); + +--- a/include/libiptc/libxtc.h ++++ b/include/libiptc/libxtc.h +@@ -10,7 +10,7 @@ extern "C" { + #endif + + #ifndef XT_MIN_ALIGN +-/* xt_entry has pointers and u_int64_t's in it, so if you align to ++/* xt_entry has pointers and uint64_t's in it, so if you align to + it, you'll also align to any crazy matches and targets someone + might write */ + #define XT_MIN_ALIGN (__alignof__(struct xt_entry)) +--- a/include/linux/netfilter_arp/arpt_mangle.h ++++ b/include/linux/netfilter_arp/arpt_mangle.h +@@ -13,7 +13,7 @@ struct arpt_mangle + union { + struct in_addr tgt_ip; + } u_t; +- u_int8_t flags; ++ __u8 flags; + int target; + }; + +--- a/iptables/xshared.c ++++ b/iptables/xshared.c +@@ -1025,7 +1025,7 @@ static const int inverse_for_options[NUMBER_OF_OPT] = + }; + + void +-set_option(unsigned int *options, unsigned int option, u_int16_t *invflg, ++set_option(unsigned int *options, unsigned int option, uint16_t *invflg, + bool invert) + { + if (*options & option) +--- a/iptables/xshared.h ++++ b/iptables/xshared.h +@@ -80,7 +80,7 @@ struct xtables_target; + #define IPT_INV_ARPHRD 0x0800 + + void +-set_option(unsigned int *options, unsigned int option, u_int16_t *invflg, ++set_option(unsigned int *options, unsigned int option, uint16_t *invflg, + bool invert); + + /** +--- a/libipq/ipq_create_handle.3 ++++ b/libipq/ipq_create_handle.3 +@@ -24,7 +24,7 @@ ipq_create_handle, ipq_destroy_handle \(em create and destroy libipq handles. + .br + .B #include + .sp +-.BI "struct ipq_handle *ipq_create_handle(u_int32_t " flags ", u_int32_t " protocol ");" ++.BI "struct ipq_handle *ipq_create_handle(uint32_t " flags ", uint32_t " protocol ");" + .br + .BI "int ipq_destroy_handle(struct ipq_handle *" h ); + .SH DESCRIPTION +--- a/libipq/ipq_set_mode.3 ++++ b/libipq/ipq_set_mode.3 +@@ -24,7 +24,7 @@ ipq_set_mode \(em set the ip_queue queuing mode + .br + .B #include + .sp +-.BI "int ipq_set_mode(const struct ipq_handle *" h ", u_int8_t " mode ", size_t " range ); ++.BI "int ipq_set_mode(const struct ipq_handle *" h ", uint8_t " mode ", size_t " range ); + .SH DESCRIPTION + The + .B ipq_set_mode +cgit v1.2.3 diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-r1.confd b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-r1.confd new file mode 100644 index 0000000000..d5055e0a5d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-r1.confd @@ -0,0 +1,27 @@ +# /etc/conf.d/iptables + +# Set wait option for xtables lock in seconds +# DEFAULT: 60 +#IPTABLES_LOCK_WAIT_TIME="60" + +# Set wait interval option for xtables lock in microseconds +# DEFAULT: 1000 +#IPTABLES_LOCK_WAIT_INTERVAL="1000" + +# Location in which iptables initscript will save set rules on +# service shutdown +IPTABLES_SAVE="/var/lib/iptables/rules-save" + +# Options to pass to iptables-save and iptables-restore +SAVE_RESTORE_OPTIONS="-c" + +# Save state on stopping iptables +SAVE_ON_STOP="yes" + +# If you need to log iptables messages as soon as iptables starts, +# AND your logger does NOT depend on the network, then you may wish +# to uncomment the next line. +# If your logger depends on the network, and you uncomment this line +# you will create an unresolvable circular dependency during startup. +# After commenting or uncommenting this line, you must run 'rc-update -u'. +#rc_use="logger" diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-r3.init b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-r3.init new file mode 100644 index 0000000000..53eb4246c5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/iptables-r3.init @@ -0,0 +1,165 @@ +#!/sbin/openrc-run +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +extra_commands="check save panic" +extra_started_commands="reload" + +iptables_lock_wait_time=${IPTABLES_LOCK_WAIT_TIME:-"60"} +iptables_lock_wait_interval=${IPTABLES_LOCK_WAIT_INTERVAL:-"1000"} + +iptables_name=${SVCNAME} +case ${iptables_name} in + iptables|ip6tables) ;; + *) iptables_name="iptables" ;; +esac + +iptables_bin="/sbin/${iptables_name}" +case ${iptables_name} in + iptables) iptables_proc="/proc/net/ip_tables_names" + iptables_save=${IPTABLES_SAVE};; + ip6tables) iptables_proc="/proc/net/ip6_tables_names" + iptables_save=${IP6TABLES_SAVE};; +esac + +depend() { + need localmount #434774 + before net +} + +set_table_policy() { + local has_errors=0 chains table=$1 policy=$2 + case ${table} in + nat) chains="PREROUTING POSTROUTING OUTPUT";; + mangle) chains="PREROUTING INPUT FORWARD OUTPUT POSTROUTING";; + filter) chains="INPUT FORWARD OUTPUT";; + *) chains="";; + esac + + local chain + for chain in ${chains} ; do + ${iptables_bin} --wait ${iptables_lock_wait_time} -t ${table} -P ${chain} ${policy} + [ $? -ne 0 ] && has_errors=1 + done + + return ${has_errors} +} + +checkkernel() { + if [ ! -e ${iptables_proc} ] ; then + eerror "Your kernel lacks ${iptables_name} support, please load" + eerror "appropriate modules and try again." + return 1 + fi + return 0 +} + +checkconfig() { + if [ -z "${iptables_save}" -o ! -f "${iptables_save}" ] ; then + eerror "Not starting ${iptables_name}. First create some rules then run:" + eerror "/etc/init.d/${iptables_name} save" + return 1 + fi + return 0 +} + +start_pre() { + checkconfig || return 1 +} + +start() { + ebegin "Loading ${iptables_name} state and starting firewall" + ${iptables_bin}-restore --wait ${iptables_lock_wait_time} ${SAVE_RESTORE_OPTIONS} < "${iptables_save}" + eend $? +} + +stop_pre() { + checkkernel || return 1 +} + +stop() { + if [ "${SAVE_ON_STOP}" = "yes" ] ; then + save || return 1 + fi + + ebegin "Stopping firewall" + local has_errors=0 a + for a in $(cat ${iptables_proc}) ; do + set_table_policy $a ACCEPT + [ $? -ne 0 ] && has_errors=1 + + ${iptables_bin} --wait ${iptables_lock_wait_time} -F -t $a + [ $? -ne 0 ] && has_errors=1 + + ${iptables_bin} --wait ${iptables_lock_wait_time} -X -t $a + [ $? -ne 0 ] && has_errors=1 + done + eend ${has_errors} +} + +reload() { + checkkernel || return 1 + checkrules || return 1 + ebegin "Flushing firewall" + local has_errors=0 a + for a in $(cat ${iptables_proc}) ; do + ${iptables_bin} --wait ${iptables_lock_wait_time} -F -t $a + [ $? -ne 0 ] && has_errors=1 + + ${iptables_bin} --wait ${iptables_lock_wait_time} -X -t $a + [ $? -ne 0 ] && has_errors=1 + done + eend ${has_errors} + + start +} + +checkrules() { + ebegin "Checking rules" + ${iptables_bin}-restore --test ${SAVE_RESTORE_OPTIONS} < "${iptables_save}" + eend $? +} + +check() { + # Short name for users of init.d script. + checkrules +} + +save() { + ebegin "Saving ${iptables_name} state" + checkpath -q -d "$(dirname "${iptables_save}")" + checkpath -q -m 0600 -f "${iptables_save}" + ${iptables_bin}-save ${SAVE_RESTORE_OPTIONS} > "${iptables_save}" + eend $? +} + +panic() { + # use iptables autoload capability to load at least all required + # modules and filter table + ${iptables_bin} --wait ${iptables_lock_wait_time} -S >/dev/null + if [ $? -ne 0 ] ; then + eerror "${iptables_bin} failed to load" + return 1 + fi + + if service_started ${iptables_name}; then + rc-service ${iptables_name} stop + fi + + local has_errors=0 a + ebegin "Dropping all packets" + for a in $(cat ${iptables_proc}) ; do + ${iptables_bin} --wait ${iptables_lock_wait_time} -F -t $a + [ $? -ne 0 ] && has_errors=1 + + ${iptables_bin} --wait ${iptables_lock_wait_time} -X -t $a + [ $? -ne 0 ] && has_errors=1 + + if [ "${a}" != "nat" ]; then + # The "nat" table is not intended for filtering, the use of DROP is therefore inhibited. + set_table_policy $a DROP + [ $? -ne 0 ] && has_errors=1 + fi + done + eend ${has_errors} +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables-restore.service b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables-restore.service new file mode 100644 index 0000000000..921b691296 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables-restore.service @@ -0,0 +1,14 @@ +[Unit] +Description=Restore ip6tables firewall rules +# if both are queued for some reason, don't store before restoring :) +Before=ip6tables-store.service +# sounds reasonable to have firewall up before any of the services go up +Before=network-pre.target +Wants=network-pre.target + +[Service] +Type=oneshot +ExecStart=/sbin/ip6tables-restore -w -- /var/lib/ip6tables/rules-save + +[Install] +WantedBy=basic.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables-store.service b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables-store.service new file mode 100644 index 0000000000..9975378353 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables-store.service @@ -0,0 +1,11 @@ +[Unit] +Description=Store ip6tables firewall rules +Before=shutdown.target +DefaultDependencies=No + +[Service] +Type=oneshot +ExecStart=/bin/sh -c "/sbin/ip6tables-save --counters > /var/lib/ip6tables/rules-save" + +[Install] +WantedBy=shutdown.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables.service b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables.service new file mode 100644 index 0000000000..0a6d7fa1c8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/ip6tables.service @@ -0,0 +1,6 @@ +[Unit] +Description=Store and restore ip6tables firewall rules + +[Install] +Also=ip6tables-store.service +Also=ip6tables-restore.service diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables-restore.service b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables-restore.service new file mode 100644 index 0000000000..a9e5679354 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables-restore.service @@ -0,0 +1,14 @@ +[Unit] +Description=Restore iptables firewall rules +# if both are queued for some reason, don't store before restoring :) +Before=iptables-store.service +# sounds reasonable to have firewall up before any of the services go up +Before=network-pre.target +Wants=network-pre.target + +[Service] +Type=oneshot +ExecStart=/sbin/iptables-restore -w -- /var/lib/iptables/rules-save + +[Install] +WantedBy=basic.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables-store.service b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables-store.service new file mode 100644 index 0000000000..aa16e75e9c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables-store.service @@ -0,0 +1,11 @@ +[Unit] +Description=Store iptables firewall rules +Before=shutdown.target +DefaultDependencies=No + +[Service] +Type=oneshot +ExecStart=/bin/sh -c "/sbin/iptables-save --counters > /var/lib/iptables/rules-save" + +[Install] +WantedBy=shutdown.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables.service b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables.service new file mode 100644 index 0000000000..3643a3e310 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/files/systemd/iptables.service @@ -0,0 +1,6 @@ +[Unit] +Description=Store and restore iptables firewall rules + +[Install] +Also=iptables-store.service +Also=iptables-restore.service diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/iptables-1.8.8-r5.ebuild b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/iptables-1.8.8-r5.ebuild new file mode 100644 index 0000000000..f5aff78b2e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/iptables-1.8.8-r5.ebuild @@ -0,0 +1,180 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit systemd toolchain-funcs autotools flag-o-matic usr-ldscript + +DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools" +HOMEPAGE="https://www.netfilter.org/projects/iptables/" +SRC_URI="https://www.netfilter.org/projects/iptables/files/${P}.tar.bz2" + +LICENSE="GPL-2" +# Subslot reflects PV when libxtables and/or libip*tc was changed +# the last time. +SLOT="0/1.8.3" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86" +IUSE="conntrack netlink nftables pcap static-libs" + +COMMON_DEPEND=" + conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 ) + netlink? ( net-libs/libnfnetlink ) + nftables? ( + >=net-libs/libmnl-1.0:= + >=net-libs/libnftnl-1.1.6:= + ) + pcap? ( net-libs/libpcap ) +" +DEPEND=" + ${COMMON_DEPEND} + virtual/os-headers + >=sys-kernel/linux-headers-4.4:0 +" +BDEPEND=" + virtual/pkgconfig + nftables? ( + sys-devel/flex + app-alternatives/yacc + ) +" +# Flatcar: Drop net-firewall/arptables as we don't ship arptables. +RDEPEND=" + ${COMMON_DEPEND} + nftables? ( net-misc/ethertypes ) + !/dev/null; then + elog "Current iptables implementation is unset, setting to ${default_iptables}" + eselect iptables set "${default_iptables}" + fi + # Flatcar: Drop the arptables, but retain the `for` structure in favor of lesser diff + # to upstream + if use nftables; then + local tables + for tables in ebtables; do + if ! eselect ${tables} show &>/dev/null; then + elog "Current ${tables} implementation is unset, setting to ${default_iptables}" + eselect ${tables} set "${default_iptables}" + fi + done + fi + + eselect iptables show +} + +pkg_prerm() { + if [[ -z ${REPLACED_BY_VERSION} ]]; then + elog "Unsetting iptables symlinks before removal" + eselect iptables unset + fi + + if ! has_version 'net-firewall/ebtables'; then + elog "Unsetting ebtables symlinks before removal" + eselect ebtables unset + fi + + # The eselect module failing should not be fatal + return 0 +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/metadata.xml new file mode 100644 index 0000000000..88c9e1780f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/iptables/metadata.xml @@ -0,0 +1,29 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + Build against net-libs/libnetfilter_conntrack when enables the connlabel matcher + Build against libnfnetlink which enables the nfnl_osf util + Support nftables kernel interface + Build against net-libs/libpcap which enables the nfbpf_compile util + + + iptables is the userspace command line program used to set up, maintain, and + inspect the tables of IPv4 packet filter rules in the Linux kernel. It's a + part of packet filtering framework which allows the stateless and stateful + packet filtering, all kinds of network address and port translation, and is a + flexible and extensible infrastructure with multiple layers of API's for 3rd + party extensions. The iptables package also includes ip6tables. ip6tables is + used for configuring the IPv6 packet filter. + + Note that some extensions (e.g. imq and l7filter) are not included into + official kernel sources so you have to patch the sources before installation. + + + cpe:/a:netfilter_core_team:iptables + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/Manifest b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/Manifest new file mode 100644 index 0000000000..b81c0121c4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/Manifest @@ -0,0 +1 @@ +DIST nftables-0.9.9.tar.bz2 922624 BLAKE2B 8de2709576a26ca84a8d694f7cb06cad2bb2fb4671ba21ffc32c0d5997e8124ae7cd794dafddf4db48d8a49c280b48b07d2a31b6c18f6647fdb67cfe7f065b61 SHA512 dfdd3ffc0ffc1742ca0494a3f8fac1c7b2fe942849e60d33fc3cb8a51e27bd39e1ccfeda2195191377a32bb5363ea244f4c3e71b4a6d930f33bf87e17a534fab diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/files/nftables-0.9.8-slibtool.patch b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/files/nftables-0.9.8-slibtool.patch new file mode 100644 index 0000000000..a92645f793 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/files/nftables-0.9.8-slibtool.patch @@ -0,0 +1,13 @@ +This fixes build with sys-devel/slibtool + +--- nftables-0.9.8/src/Makefile.am ++++ nftables-0.9.8/src/Makefile.am +@@ -90,7 +90,7 @@ + + libnftables_la_LIBADD = ${LIBMNL_LIBS} ${LIBNFTNL_LIBS} libparser.la + libnftables_la_LDFLAGS = -version-info ${libnftables_LIBVERSION} \ +- --version-script=$(srcdir)/libnftables.map ++ -Wl,--version-script=$(srcdir)/libnftables.map + + if BUILD_MINIGMP + noinst_LTLIBRARIES += libminigmp.la diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/metadata.xml new file mode 100644 index 0000000000..cdf267b12f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/metadata.xml @@ -0,0 +1,22 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + prometheanfire@gentoo.org + Matthew Thode + + + klondike@gentoo.org + Francisco Blas Izquierdo Riera + + + Create man pages for the package (requires app-text/asciidoc) + Enable JSON support via dev-libs/jansson + Install init scripts for 3.18 or higher kernels with atomic rule updates + Add libxtables support to try to automatically translate rules added by iptables-compat + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/nftables-0.9.9-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/nftables-0.9.9-r1.ebuild new file mode 100644 index 0000000000..528373f724 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-firewall/nftables/nftables-0.9.9-r1.ebuild @@ -0,0 +1,121 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +PYTHON_COMPAT=( python3_{6..10} ) + +inherit autotools linux-info python-r1 systemd + +DESCRIPTION="Linux kernel (3.13+) firewall, NAT and packet mangling tools" +HOMEPAGE="https://netfilter.org/projects/nftables/" + +if [[ ${PV} =~ ^[9]{4,}$ ]]; then + inherit git-r3 + EGIT_REPO_URI="https://git.netfilter.org/${PN}" + + BDEPEND=" + sys-devel/bison + sys-devel/flex + " +else + SRC_URI="https://netfilter.org/projects/nftables/files/${P}.tar.bz2" + KEYWORDS="amd64 arm arm64 ~ia64 ppc ~ppc64 ~riscv sparc x86" +fi + +LICENSE="GPL-2" +SLOT="0/1" +IUSE="debug doc +gmp json libedit +modern-kernel python +readline static-libs xtables" + +RDEPEND=" + >=net-libs/libmnl-1.0.4:0= + >=net-libs/libnftnl-1.2.0:0= + gmp? ( dev-libs/gmp:0= ) + json? ( dev-libs/jansson:= ) + python? ( ${PYTHON_DEPS} ) + readline? ( sys-libs/readline:0= ) + xtables? ( >=net-firewall/iptables-1.6.1 ) +" + +DEPEND="${RDEPEND}" + +BDEPEND+=" + doc? ( + app-text/asciidoc + >=app-text/docbook2X-0.8.8-r4 + ) + virtual/pkgconfig +" + +REQUIRED_USE=" + python? ( ${PYTHON_REQUIRED_USE} ) + libedit? ( !readline ) +" + +PATCHES=( + "${FILESDIR}/${PN}-0.9.8-slibtool.patch" +) + +python_make() { + emake \ + -C py \ + abs_builddir="${S}" \ + DESTDIR="${D}" \ + PYTHON_BIN="${PYTHON}" \ + "${@}" +} + +pkg_setup() { + if kernel_is ge 3 13; then + if use modern-kernel && kernel_is lt 3 18; then + eerror "The modern-kernel USE flag requires kernel version 3.18 or newer to work properly." + fi + CONFIG_CHECK="~NF_TABLES" + linux-info_pkg_setup + else + eerror "This package requires kernel version 3.13 or newer to work properly." + fi +} + +src_prepare() { + default + + # fix installation path for doc stuff + sed '/^pkgsysconfdir/s@${sysconfdir}.*$@${docdir}/skels@' \ + -i files/nftables/Makefile.am || die + sed '/^pkgsysconfdir/s@${sysconfdir}.*$@${docdir}/skels/osf@' \ + -i files/osf/Makefile.am || die + + eautoreconf +} + +src_configure() { + local myeconfargs=( + # We handle python separately + --disable-python + --sbindir="${EPREFIX}"/sbin + --sysconfdir="${EPREFIX}"/usr/share + $(use_enable debug) + $(use_enable doc man-doc) + $(use_with !gmp mini_gmp) + $(use_with json) + $(use_with libedit cli editline) + $(use_with readline cli readline) + $(use_enable static-libs static) + $(use_with xtables) + ) + econf "${myeconfargs[@]}" +} + +src_compile() { + default + + if use python; then + python_foreach_impl python_make + fi +} + +src_install() { + default + find "${ED}" -type f -name "*.la" -delete || die +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/Manifest b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/Manifest new file mode 100644 index 0000000000..c36c94e4db --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/Manifest @@ -0,0 +1 @@ +DIST nfs-utils-2.5.4.tar.bz2 943373 BLAKE2B 72ed871613701f5b035941a7aed957771fe3b6a19fefee203130442c292bbbefde35721f2287fef19046d2d837faeda43b06a93a5acdb8ac6240eef90e6dd12c SHA512 b1395c5b06a06246666c48174594b1e08b71cf40b8f94b533497bd92625401a669e2c40e48dbd665891ad2247bc94d7d604d0c5d0f0b66bfe957b03d42e5d305 diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils-2.5.2-no-werror.patch b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils-2.5.2-no-werror.patch new file mode 100644 index 0000000000..a7226db249 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils-2.5.2-no-werror.patch @@ -0,0 +1,68 @@ +From 6ab8c7c186bd4a547a0ca435ecabe10ee50039c5 Mon Sep 17 00:00:00 2001 +From: Mike Frysinger +Date: Thu, 22 Oct 2020 19:44:34 +0200 +Subject: [PATCH] Don't build with -Werror flags + +https://bugs.gentoo.org/656984 + +Signed-off-by: Lars Wendler +--- + configure.ac | 34 +--------------------------------- + 1 file changed, 1 insertion(+), 33 deletions(-) + +diff --git a/configure.ac b/configure.ac +index 50847d8a..6bc18e93 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -631,47 +631,15 @@ AC_SUBST(CPPFLAGS_FOR_BUILD) + AC_SUBST(LDFLAGS_FOR_BUILD) + + my_am_cflags="\ +- -pipe \ + -Wall \ + -Wextra \ + $rpcgen_cflags \ +- -Werror=missing-prototypes \ +- -Werror=missing-declarations \ +- -Werror=format=2 \ +- -Werror=undef \ +- -Werror=missing-include-dirs \ +- -Werror=strict-aliasing=2 \ +- -Werror=init-self \ +- -Werror=implicit-function-declaration \ +- -Werror=return-type \ +- -Werror=switch \ +- -Werror=overflow \ +- -Werror=parentheses \ +- -Werror=aggregate-return \ +- -Werror=unused-result \ + -fno-strict-aliasing \ + " + +-AC_DEFUN([CHECK_CCSUPPORT], [ +- my_save_cflags="$CFLAGS" +- CFLAGS="-Werror $1" +- AC_MSG_CHECKING([whether CC supports $1]) +- AC_COMPILE_IFELSE([AC_LANG_PROGRAM([])], +- [AC_MSG_RESULT([yes])] +- [$2+=$1], +- [AC_MSG_RESULT([no])] +- ) +- CFLAGS="$my_save_cflags" +-]) +- +-CHECK_CCSUPPORT([-Werror=format-overflow=2], [flg1]) +-CHECK_CCSUPPORT([-Werror=int-conversion], [flg2]) +-CHECK_CCSUPPORT([-Werror=incompatible-pointer-types], [flg3]) +-CHECK_CCSUPPORT([-Werror=misleading-indentation], [flg4]) +-CHECK_CCSUPPORT([-Wno-cast-function-type], [flg5]) + AX_GCC_FUNC_ATTRIBUTE([format]) + +-AC_SUBST([AM_CFLAGS], ["$my_am_cflags $flg1 $flg2 $flg3 $flg4 $flg5"]) ++AC_SUBST([AM_CFLAGS], ["$my_am_cflags"]) + + # Make sure that $ACLOCAL_FLAGS are used during a rebuild + AC_SUBST([ACLOCAL_AMFLAGS], ["-I $ac_macro_dir \$(ACLOCAL_FLAGS)"]) +-- +2.29.0 + diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils-2.5.4-kernel-5.3-nfsv4.patch b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils-2.5.4-kernel-5.3-nfsv4.patch new file mode 100644 index 0000000000..c9a543191b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils-2.5.4-kernel-5.3-nfsv4.patch @@ -0,0 +1,32 @@ +https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commitdiff;h=feb3dfc7127cf1337530ccb06ed90e818b026a07#patch1 +https://bugzilla.redhat.com/show_bug.cgi?id=1979816 +https://bugs.gentoo.org/808183 + +Slightly rebased by sam@ to account for version.h moving around. + +From feb3dfc7127cf1337530ccb06ed90e818b026a07 Mon Sep 17 00:00:00 2001 +From: Steve Dickson +Date: Wed, 22 Sep 2021 11:31:56 -0400 +Subject: [PATCH] mountd: only do NFSv4 logging on supported kernels. + +Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1979816 +Signed-off-by: Steve Dickson +--- a/support/export/v4clients.c ++++ b/support/export/v4clients.c +@@ -10,6 +10,7 @@ + #include + #include + #include "export.h" ++#include "../../utils/mount/version.h" + + /* search.h declares 'struct entry' and nfs_prot.h + * does too. Easiest fix is to trick search.h into +@@ -23,6 +24,8 @@ static int clients_fd = -1; + + void v4clients_init(void) + { ++ if (linux_version_code() < MAKE_VERSION(5, 3, 0)) ++ return; + if (clients_fd >= 0) + return; + clients_fd = inotify_init1(IN_NONBLOCK); diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils.conf b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils.conf new file mode 100644 index 0000000000..02737e2f51 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/files/nfs-utils.conf @@ -0,0 +1,9 @@ +d /var/lib/nfs/rpc_pipefs +d /var/lib/nfs/v4recovery +d /var/lib/nfs/v4root +C /var/lib/nfs/etab - - - - /usr/lib64/nfs/etab +C /var/lib/nfs/rmtab - - - - /usr/lib64/nfs/rmtab +C /var/lib/nfs/sm - - - - /usr/lib64/nfs/sm +C /var/lib/nfs/sm.bak - - - - /usr/lib64/nfs/sm.bak +C /var/lib/nfs/state - - - - /usr/lib64/nfs/state +C /var/lib/nfs/xtab - - - - /usr/lib64/nfs/xtab diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/metadata.xml new file mode 100644 index 0000000000..f60293313f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/metadata.xml @@ -0,0 +1,21 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + Enable NFS junction support in nfsref + Add ldap support + Link mount.nfs with libmount + Enable nfsdcld NFSv4 clientid tracking daemon + Enable support for newer nfsidmap helper + Enable support for NFSv4 + Enable support for NFSv4.1 + Support UUID lookups in rpc.mountd + + + nfs + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/nfs-utils-2.5.4-r3.ebuild b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/nfs-utils-2.5.4-r3.ebuild new file mode 100644 index 0000000000..45339e3660 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/nfs-utils/nfs-utils-2.5.4-r3.ebuild @@ -0,0 +1,170 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +TMPFILES_OPTIONAL=1 +inherit autotools linux-info systemd tmpfiles + +DESCRIPTION="NFS client and server daemons" +HOMEPAGE="http://linux-nfs.org/" + +if [[ "${PV}" = *_rc* ]] ; then + MY_PV="$(ver_rs 1- -)" + SRC_URI="http://git.linux-nfs.org/?p=steved/nfs-utils.git;a=snapshot;h=refs/tags/${PN}-${MY_PV};sf=tgz -> ${P}.tar.gz" + S="${WORKDIR}/${PN}-${PN}-${MY_PV}" +else + SRC_URI="mirror://sourceforge/nfs/${P}.tar.bz2" + KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~mips ppc ppc64 ~riscv ~s390 sparc x86" +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="caps ipv6 junction kerberos ldap +libmount nfsdcld +nfsidmap +nfsv4 nfsv41 sasl selinux tcpd +uuid" +REQUIRED_USE="kerberos? ( nfsv4 )" +RESTRICT="test" #315573 + +# kth-krb doesn't provide the right include +# files, and nfs-utils doesn't build against heimdal either, +# so don't depend on virtual/krb. +# (04 Feb 2005 agriffis) +COMMON_DEPEND=" + dev-db/sqlite:3 + dev-libs/libxml2 + net-libs/libtirpc:= + >=net-nds/rpcbind-0.2.4 + sys-fs/e2fsprogs + caps? ( sys-libs/libcap ) + ldap? ( + net-nds/openldap + sasl? ( + app-crypt/mit-krb5 + dev-libs/cyrus-sasl:2 + ) + ) + libmount? ( sys-apps/util-linux ) + nfsv4? ( + dev-libs/libevent:= + >=sys-apps/keyutils-1.5.9:= + kerberos? ( + >=net-libs/libtirpc-0.2.4-r1[kerberos] + app-crypt/mit-krb5 + ) + ) + nfsv41? ( + sys-fs/lvm2 + ) + tcpd? ( sys-apps/tcp-wrappers ) + uuid? ( sys-apps/util-linux )" +DEPEND="${COMMON_DEPEND} + elibc_musl? ( sys-libs/queue-standalone ) +" +RDEPEND="${COMMON_DEPEND} + !net-libs/libnfsidmap + !net-nds/portmap + ! id_resolver.conf + doins id_resolver.conf + fi + + dotmpfiles "${FILESDIR}"/nfs-utils.conf + + # Provide an empty xtab for compatibility with the old tmpfiles config. + touch "${ED}"/usr/$(get_libdir)/nfs/xtab + + # Maintain compatibility with the old gentoo systemd unit names, since nfs-utils has units upstream now. + dosym nfs-server.service "$(systemd_get_systemunitdir)"/nfsd.service + dosym nfs-idmapd.service "$(systemd_get_systemunitdir)"/rpc-idmapd.service + dosym nfs-mountd.service "$(systemd_get_systemunitdir)"/rpc-mountd.service +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/Manifest b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/Manifest new file mode 100644 index 0000000000..315c45a9db --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/Manifest @@ -0,0 +1 @@ +DIST samba-4.15.4.tar.gz 19280813 BLAKE2B 3106f2f265263e871fe3f82d3eecaac2e5f642925ff5dd2a9d163092fd13e9348a3910e40431d51cb94a1abeb3b9c32c487ce1f8caebe59a8d6d90641b4d9201 SHA512 e55473dd4971816a01880870309ca44f022625cd529511bcf386c865a2e7e79118577ee4866559f607952de47dc0d310d6426bd08dd4293db95ddbbe3982383d diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/samba4.confd b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/samba4.confd new file mode 100644 index 0000000000..629a605021 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/samba4.confd @@ -0,0 +1,45 @@ +# Add "winbind" to the daemon_list if you also want winbind to start. +# Replace "smbd nmbd" by "samba4" if you want the active directory domain controller part or the ntvfs +# file server part or the rpc proxy to start. +# Note that samba4 controls 'smbd' by itself, thus it can't be started manually. You can, however, +# tweak the behaviour of a samba4-controlled smbd by modifying your '/etc/samba/smb.conf' file +# accordingly. +daemon_list="smbd nmbd" + +piddir="/run/samba" + +#---------------------------------------------------------------------------- +# Daemons calls: _ +#---------------------------------------------------------------------------- +my_service_name="samba" +my_service_PRE="unset TMP TMPDIR" +my_service_POST="" + +#---------------------------------------------------------------------------- +# Daemons calls: _ +#---------------------------------------------------------------------------- +smbd_start_options="-D" +smbd_command="/usr/sbin/smbd" +smbd_start="start-stop-daemon --start --exec ${smbd_command} -- ${smbd_start_options}" +smbd_stop="start-stop-daemon --stop --exec ${smbd_command}" +smbd_reload="killall -HUP smbd" + +nmbd_start_options="-D" +nmbd_command="/usr/sbin/nmbd" +nmbd_start="start-stop-daemon --start --exec ${nmbd_command} -- ${nmbd_start_options}" +nmbd_stop="start-stop-daemon --stop --exec ${nmbd_command}" +nmbd_reload="killall -HUP nmbd" + +samba4_start_options="" +samba4_command="/usr/sbin/samba" +samba4_pidfile="${piddir}/samba.pid" +samba4_start="start-stop-daemon --start --exec ${samba4_command} --pidfile ${samba4_pidfile} -- ${samba4_start_options}" +samba4_stop="start-stop-daemon --stop --exec ${samba4_command} --pidfile ${samba4_pidfile}" +samba4_reload="killall -HUP samba" + +winbind_start_options="" +winbind_command="/usr/sbin/winbindd" +winbind_start="start-stop-daemon --start --exec ${winbind_command} -- ${winbind_start_options}" +winbind_stop="start-stop-daemon --stop --exec ${winbind_command}" +winbind_reload="killall -HUP winbindd" + diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/samba4.initd-r1 b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/samba4.initd-r1 new file mode 100644 index 0000000000..0a52898285 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/samba4.initd-r1 @@ -0,0 +1,54 @@ +#!/sbin/openrc-run +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License, v2 or later + +extra_started_commands="reload" +[ -z "${piddir}" ] && piddir="/run/samba" + +depend() { + after slapd + use cupsd +} + +DAEMONNAME="${SVCNAME##samba.}" +[ "${DAEMONNAME}" != "samba" ] && daemon_list=${DAEMONNAME} + +signal_do() { + local signal="$1" + [ -z "${signal}" ] && return 0 + + local result=0 last_result=0 daemon= cmd_exec= + for daemon in ${daemon_list} ; do + eval cmd_exec=\$${daemon}_${signal} + if [ -n "${cmd_exec}" ]; then + ebegin "${my_service_name} -> ${signal}: ${daemon}" + #echo ${cmd} '->' ${!cmd} + ${cmd_exec} > /dev/null + last_result=$? + eend ${last_result} + fi + result=$(( ${result} + ${last_result} )) + done + return ${result} +} + +start() { + ${my_service_PRE} + [ -d "${piddir}" ] || mkdir -p "${piddir}" + signal_do start && return 0 + + eerror "Error: starting services (see system logs)" + signal_do stop + return 1 +} +stop() { + ${my_service_PRE} + if signal_do stop ; then + ${my_service_POST} + return 0 + fi +} +reload() { + ${my_service_PRE} + signal_do reload +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/system-auth-winbind.pam b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/system-auth-winbind.pam new file mode 100644 index 0000000000..8d6746b7ae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/4.4/system-auth-winbind.pam @@ -0,0 +1,18 @@ +#%PAM-1.0 +# $Id$ + +auth required pam_env.so +auth sufficient pam_winbind.so +auth sufficient pam_unix.so likeauth nullok use_first_pass +auth required pam_deny.so + +account sufficient pam_winbind.so +account required pam_unix.so + +password required pam_cracklib.so retry=3 +password sufficient pam_unix.so nullok use_authtok md5 shadow +password required pam_deny.so + +session required pam_mkhomedir.so skel=/etc/skel/ umask=0022 +session required pam_limits.so +session required pam_unix.so diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/samba-4.4.0-pam.patch b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/samba-4.4.0-pam.patch new file mode 100644 index 0000000000..451601383d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/samba-4.4.0-pam.patch @@ -0,0 +1,29 @@ +--- samba-4.4.0rc2/source3/wscript ++++ samba-4.4.0rc2/source3/wscript +@@ -870,7 +870,7 @@ + if conf.env.with_iconv: + conf.DEFINE('HAVE_ICONV', 1) + +- if Options.options.with_pam: ++ if Options.options.with_pam != False: + use_pam=True + conf.CHECK_HEADERS('security/pam_appl.h pam/pam_appl.h') + if not conf.CONFIG_SET('HAVE_SECURITY_PAM_APPL_H') and not conf.CONFIG_SET('HAVE_PAM_PAM_APPL_H'): +@@ -943,6 +943,17 @@ + conf.DEFINE('WITH_PAM', 1) + conf.DEFINE('WITH_PAM_MODULES', 1) + ++ else: ++ Logs.warn("PAM disabled") ++ use_pam=False ++ conf.undefine('WITH_PAM') ++ conf.undefine('WITH_PAM_MODULES') ++ conf.undefine('HAVE_SECURITY_PAM_APPL_H') ++ conf.undefine('PAM_RHOST') ++ conf.undefine('PAM_TTY') ++ conf.undefine('HAVE_PAM_PAM_APPL_H') ++ ++ + seteuid = False + + # diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/samba.conf b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/samba.conf new file mode 100644 index 0000000000..a7f4946fb0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/files/samba.conf @@ -0,0 +1,3 @@ +D /run/samba 0755 root root +D /run/ctdb 0755 root root +D /run/lock/samba 0755 root root diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/metadata.xml new file mode 100644 index 0000000000..0430625e20 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/metadata.xml @@ -0,0 +1,37 @@ + + + + + samba@gentoo.org + Samba Team + + + Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients. Integration with various accounting and antivirus backends. License: GNU General Public License. + + + Enable Active Directory Domain Controller support + Enable AD DNS integration + Enable Active Directory support + Enable support for Ceph distributed filesystem via sys-cluster/ceph + Enables the client part + Enable support for clustering + Enable support for Glusterfs filesystem via sys-cluster/glusterfs + Use app-crypt/gpgme for AD DC + Enable json audit support through dev-libs/jansson + Enabling iPrint technology by Novell + Enable support for NTVFS fileserver + Enables support for collecting profiling data + Enables support for user quotas + Enable support for regedit command-line tool + Enable vfs_snapper module (requires sys-apps/dbus) + Enable support for spotlight backend + Use app-crypt/heimdal instead of + bundled heimdal. + Use app-crypt/mit-krb5 instead of + app-crypt/heimdal. + Enables support for the winbind auth daemon + + + cpe:/a:samba:samba + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-fs/samba/samba-4.15.4-r3.ebuild b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/samba-4.15.4-r3.ebuild new file mode 100644 index 0000000000..46c11daf01 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-fs/samba/samba-4.15.4-r3.ebuild @@ -0,0 +1,357 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +PYTHON_COMPAT=( python3_{8..10} ) +PYTHON_REQ_USE="threads(+),xml(+)" +TMPFILES_OPTIONAL=1 +inherit python-single-r1 waf-utils multilib-minimal linux-info systemd pam tmpfiles + +DESCRIPTION="Samba Suite Version 4" +HOMEPAGE="https://samba.org/" + +MY_PV="${PV/_rc/rc}" +MY_P="${PN}-${MY_PV}" +if [[ ${PV} = *_rc* ]]; then + SRC_URI="mirror://samba/rc/${MY_P}.tar.gz" +else + SRC_URI="mirror://samba/stable/${MY_P}.tar.gz" + KEYWORDS="~alpha amd64 arm arm64 ~hppa ~ia64 ppc ppc64 ~riscv sparc x86" +fi +S="${WORKDIR}/${MY_P}" + +LICENSE="GPL-3" +SLOT="0" +IUSE="acl addc ads ceph client cluster cpu_flags_x86_aes cups debug fam +glusterfs gpg iprint json ldap pam profiling-data python quota +regedit selinux +snapper spotlight syslog system-heimdal +system-mitkrb5 systemd test winbind +zeroconf" +IUSE+=" +minimal" # Flatcar: Only install libraries, not executables. + +REQUIRED_USE="${PYTHON_REQUIRED_USE} + addc? ( python json winbind ) + ads? ( acl ldap python winbind ) + cluster? ( ads ) + gpg? ( addc ) + spotlight? ( json ) + test? ( python ) + !ads? ( !addc ) + ?? ( system-heimdal system-mitkrb5 ) +" + +# the test suite is messed, it uses system-installed samba +# bits instead of what was built, tests things disabled via use +# flags, and generally just fails to work in a way ebuilds could +# rely on in its current state +RESTRICT="test" + +MULTILIB_WRAPPED_HEADERS=( + /usr/include/samba-4.0/policy.h + /usr/include/samba-4.0/dcerpc_server.h + /usr/include/samba-4.0/ctdb.h + /usr/include/samba-4.0/ctdb_client.h + /usr/include/samba-4.0/ctdb_protocol.h + /usr/include/samba-4.0/ctdb_private.h + /usr/include/samba-4.0/ctdb_typesafe_cb.h + /usr/include/samba-4.0/ctdb_version.h +) + +COMMON_DEPEND=" + >=app-arch/libarchive-3.1.2[${MULTILIB_USEDEP}] + spotlight? ( dev-libs/icu:=[${MULTILIB_USEDEP}] ) + dev-libs/libbsd[${MULTILIB_USEDEP}] + !minimal? ( dev-libs/libtasn1[${MULTILIB_USEDEP}] ) + dev-libs/popt[${MULTILIB_USEDEP}] + >=net-libs/gnutls-3.4.7[${MULTILIB_USEDEP}] + >=sys-fs/e2fsprogs-1.46.4-r51[${MULTILIB_USEDEP}] + >=sys-libs/ldb-2.4.1[ldap(+)?,${MULTILIB_USEDEP}] + =sys-libs/talloc-2.3.3[${MULTILIB_USEDEP}] + >=sys-libs/tdb-1.4.4[${MULTILIB_USEDEP}] + >=sys-libs/tevent-0.11.0[${MULTILIB_USEDEP}] + sys-libs/zlib[${MULTILIB_USEDEP}] + virtual/libcrypt:=[${MULTILIB_USEDEP}] + virtual/libiconv + $(python_gen_cond_dep " + addc? ( + dev-python/dnspython:=[\${PYTHON_USEDEP}] + dev-python/markdown[\${PYTHON_USEDEP}] + ) + ads? ( + dev-python/dnspython:=[\${PYTHON_USEDEP}] + net-dns/bind-tools[gssapi] + ) + ") + !alpha? ( !sparc? ( sys-libs/libunwind:= ) ) + acl? ( virtual/acl ) + ceph? ( sys-cluster/ceph ) + cluster? ( net-libs/rpcsvc-proto ) + cups? ( net-print/cups ) + debug? ( dev-util/lttng-ust ) + fam? ( virtual/fam ) + gpg? ( app-crypt/gpgme:= ) + json? ( dev-libs/jansson:= ) + ldap? ( net-nds/openldap:=[${MULTILIB_USEDEP}] ) + pam? ( sys-libs/pam ) + python? ( + sys-libs/ldb[python,${PYTHON_SINGLE_USEDEP}] + sys-libs/talloc[python,${PYTHON_SINGLE_USEDEP}] + sys-libs/tdb[python,${PYTHON_SINGLE_USEDEP}] + sys-libs/tevent[python,${PYTHON_SINGLE_USEDEP}] + ) + snapper? ( sys-apps/dbus ) + system-heimdal? ( >=app-crypt/heimdal-1.5[-ssl,${MULTILIB_USEDEP}] ) + system-mitkrb5? ( >=app-crypt/mit-krb5-1.19[${MULTILIB_USEDEP}] ) + systemd? ( sys-apps/systemd:0= ) + zeroconf? ( net-dns/avahi[dbus] ) +" +DEPEND="${COMMON_DEPEND} + >=dev-util/cmocka-1.1.3[${MULTILIB_USEDEP}] + net-libs/libtirpc[${MULTILIB_USEDEP}] + || ( + net-libs/rpcsvc-proto + =net-dns/resolv_wrapper-1.1.4 + >=net-libs/socket_wrapper-1.1.9 + >=sys-libs/nss_wrapper-1.1.3 + >=sys-libs/uid_wrapper-1.2.1 + ) + )" +RDEPEND="${COMMON_DEPEND} + client? ( net-fs/cifs-utils[ads?] ) + python? ( ${PYTHON_DEPS} ) + selinux? ( sec-policy/selinux-samba ) +" +BDEPEND="${PYTHON_DEPS} + dev-lang/perl:= + dev-perl/Parse-Yapp + app-text/docbook-xsl-stylesheets + dev-libs/libxslt + virtual/pkgconfig +" + +PATCHES=( + "${FILESDIR}/${PN}-4.4.0-pam.patch" +) + +#CONFDIR="${FILESDIR}/$(get_version_component_range 1-2)" +CONFDIR="${FILESDIR}/4.4" + +WAF_BINARY="${S}/buildtools/bin/waf" + +SHAREDMODS="" + +pkg_setup() { + # Package fails to build with distcc + export DISTCC_DISABLE=1 + + python-single-r1_pkg_setup + + SHAREDMODS="$(usex snapper '' '!')vfs_snapper" + if use cluster ; then + SHAREDMODS+=",idmap_rid,idmap_tdb2,idmap_ad" + elif use ads ; then + SHAREDMODS+=",idmap_ad" + fi +} + +src_prepare() { + default + + # un-bundle dnspython + sed -i -e '/"dns.resolver":/d' "${S}"/third_party/wscript || die + + # unbundle iso8601 unless tests are enabled + if ! use test ; then + sed -i -e '/"iso8601":/d' "${S}"/third_party/wscript || die + fi + + sed -e 's:::' \ + -i source4/dsdb/samdb/ldb_modules/password_hash.c \ + || die + + # Friggin' WAF shit + multilib_copy_sources +} + +multilib_src_configure() { + # when specifying libs for samba build you must append NONE to the end to + # stop it automatically including things + local bundled_libs="NONE" + if ! use system-heimdal && ! use system-mitkrb5 ; then + bundled_libs="heimbase,heimntlm,hdb,kdc,krb5,wind,gssapi,hcrypto,hx509,roken,asn1,com_err,NONE" + fi + + # Flatcar: we need only the mandatory bundled library, ldb by default. + # Without that, configure will fail because of a missing bundled library. + bundled_libs="ldb" + + local myconf=( + --enable-fhs + --sysconfdir="${EPREFIX}/etc" + --localstatedir="${EPREFIX}/var" + --with-modulesdir="${EPREFIX}/usr/$(get_libdir)/samba" + --with-piddir="${EPREFIX}/run/${PN}" + --bundled-libraries="${bundled_libs}" + --builtin-libraries=NONE + --disable-rpath + --disable-rpath-install + --nopyc + --nopyo + --without-winexe + --accel-aes=$(usex cpu_flags_x86_aes intelaesni none) + $(multilib_native_use_with acl acl-support) + $(multilib_native_usex addc '' '--without-ad-dc') + $(multilib_native_use_with ads) + $(multilib_native_use_enable ceph cephfs) + $(multilib_native_use_with cluster cluster-support) + $(multilib_native_use_enable cups) + --without-dmapi + $(multilib_native_use_with fam) + $(multilib_native_use_enable glusterfs) + $(multilib_native_use_with gpg gpgme) + $(multilib_native_use_with json) + $(multilib_native_use_enable iprint) + $(multilib_native_use_with pam) + $(multilib_native_usex pam "--with-pammodulesdir=${EPREFIX}/$(get_libdir)/security" '') + $(multilib_native_use_with quota quotas) + $(multilib_native_use_with regedit) + $(multilib_native_use_enable spotlight) + $(multilib_native_use_with syslog) + $(multilib_native_use_with systemd) + --systemd-install-services + --with-systemddir="$(systemd_get_systemunitdir)" + $(multilib_native_use_with winbind) + $(multilib_native_usex python '' '--disable-python') + $(multilib_native_use_enable zeroconf avahi) + $(multilib_native_usex test '--enable-selftest' '') + $(usex system-mitkrb5 "--with-system-mitkrb5 $(multilib_native_usex addc --with-experimental-mit-ad-dc '')" '') + $(use_with debug lttng) + $(use_with ldap) + $(use_with profiling-data) + # bug #683148 + --jobs 1 + ) + + if multilib_is_native_abi ; then + myconf+=( --with-shared-modules=${SHAREDMODS} ) + else + myconf+=( --with-shared-modules=DEFAULT,!vfs_snapper ) + fi + + CPPFLAGS="-I${SYSROOT}${EPREFIX}/usr/include/et ${CPPFLAGS}" \ + waf-utils_src_configure ${myconf[@]} +} + +multilib_src_compile() { + waf-utils_src_compile +} + +multilib_src_install() { + waf-utils_src_install + + # Make all .so files executable + find "${ED}" -type f -name "*.so" -exec chmod +x {} + || die + + if multilib_is_native_abi ; then + # install ldap schema for server (bug #491002) + if use ldap ; then + insinto /etc/openldap/schema + doins examples/LDAP/samba.schema + fi + + # create symlink for cups (bug #552310) + if use cups ; then + dosym ../../../bin/smbspool \ + /usr/libexec/cups/backend/smb + fi + + # install example config file + insinto /etc/samba + doins examples/smb.conf.default + + # Fix paths in example file (#603964) + sed \ + -e '/log file =/s@/usr/local/samba/var/@/var/log/samba/@' \ + -e '/include =/s@/usr/local/samba/lib/@/etc/samba/@' \ + -e '/path =/s@/usr/local/samba/lib/@/var/lib/samba/@' \ + -e '/path =/s@/usr/local/samba/@/var/lib/samba/@' \ + -e '/path =/s@/usr/spool/samba@/var/spool/samba@' \ + -i "${ED}"/etc/samba/smb.conf.default || die + + # Install init script and conf.d file + newinitd "${CONFDIR}/samba4.initd-r1" samba + newconfd "${CONFDIR}/samba4.confd" samba + + use minimal || dotmpfiles "${FILESDIR}"/samba.conf + if ! use addc ; then + rm "${D}/$(systemd_get_systemunitdir)/samba.service" \ + || die + fi + + # Preserve functionality for old gentoo-specific unit names + dosym nmb.service "$(systemd_get_systemunitdir)/nmbd.service" + dosym smb.service "$(systemd_get_systemunitdir)/smbd.service" + dosym winbind.service "$(systemd_get_systemunitdir)/winbindd.service" + fi + + if use pam && use winbind ; then + newpamd "${CONFDIR}/system-auth-winbind.pam" system-auth-winbind + # bugs #376853 and #590374 + insinto /etc/security + doins examples/pam_winbind/pam_winbind.conf + fi + + keepdir /var/cache/samba + keepdir /var/lib/ctdb + keepdir /var/lib/samba/{bind-dns,private} + keepdir /var/lock/samba + keepdir /var/log/samba + + + rm -f "${ED%/}"/etc/samba/* + rm -f "${ED%/}"/usr/lib*/samba/ldb/* + if use minimal ; then + mv "${ED%/}"/usr/bin/net "${T}"/ + rm -f "${ED%/}"/usr/bin/* "${ED%/}"/usr/sbin/* + mv "${T}"/net "${ED%/}"/usr/bin/net + rm -rf ${ED%/}/lib*/security + rm -rf ${ED%/}/usr/lib/systemd + rm -rf ${ED%/}/usr/lib*/perl* + rm -rf ${ED%/}/usr/lib*/python* + rm -rf ${ED%/}/var + fi +} + +multilib_src_test() { + if multilib_is_native_abi ; then + "${WAF_BINARY}" test || die "test failed" + fi +} + +pkg_postinst() { + use minimal || tmpfiles_process samba.conf + + if [[ -z ${REPLACING_VERSIONS} ]] ; then + elog "Be aware that this release contains the best of all of Samba's" + elog "technology parts, both a file server (that you can reasonably expect" + elog "to upgrade existing Samba 3.x releases to) and the AD domain" + elog "controller work previously known as 'samba4'." + elog + fi + if [[ "${PV}" != *_rc* ]] ; then + elog "For further information and migration steps make sure to read " + elog "https://samba.org/samba/history/${P}.html " + elog "https://wiki.samba.org/index.php/Samba4/HOWTO " + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/Manifest b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/Manifest new file mode 100644 index 0000000000..7f745c7d4b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/Manifest @@ -0,0 +1,2 @@ +DIST libtirpc-1.3.2.tar.bz2 513151 BLAKE2B 375b7bb046244f4666522c4f148428349fe1867b095dc5e268d037ba26982f88df70b0ad21fbe2b99150f644806a46651b524c3b9f7fe2499469806ea50b0331 SHA512 8664d5c4f842ee5acf83b9c1cadb7871f17b8157a7c4500e2236dcfb3a25768cab39f7c5123758dcd7381e30eb028ddfa26a28f458283f2dcea3426c9878c255 +DIST libtirpc-glibc-nfs.tar.xz 8948 BLAKE2B 7316623d9f2b6928e296137fe2bf6794b208d549c2ffba9e4a35b47f7b04bf023798a09f38c02d039debf6adc466d7689cf3c8274d71a22eaff08729642c0a28 SHA512 90255bf0a27af16164e0710dd940778609925d473f4343093ff19d98cc4f23023788bf4edf0178eae1961afc0ba8b69b273de95b7d7e2afdb706701d8ba6f7ba diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/README.md b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/README.md new file mode 100644 index 0000000000..fddc791399 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/README.md @@ -0,0 +1,7 @@ +This is a fork of gentoo package. We have it on overlay because: + +- We change the NETCONFIG macro value from `"/etc/netconfig"` to + `"/usr/share/tirpc/netconfig"`. + +- We update the installation of the netconfig accordingly to the + previous point. diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-dos.patch b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-dos.patch new file mode 100644 index 0000000000..88b6f5719f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-dos.patch @@ -0,0 +1,178 @@ +From 86529758570cef4c73fb9b9c4104fdc510f701ed Mon Sep 17 00:00:00 2001 +From: Dai Ngo +Date: Sat, 21 Aug 2021 13:16:23 -0400 +Subject: [PATCH] Fix DoS vulnerability in libtirpc + +Currently svc_run does not handle poll timeout and rendezvous_request +does not handle EMFILE error returned from accept(2 as it used to. +These two missing functionality were removed by commit b2c9430f46c4. + +The effect of not handling poll timeout allows idle TCP conections +to remain ESTABLISHED indefinitely. When the number of connections +reaches the limit of the open file descriptors (ulimit -n) then +accept(2) fails with EMFILE. Since there is no handling of EMFILE +error this causes svc_run() to get in a tight loop calling accept(2). +This resulting in the RPC service of svc_run is being down, it's +no longer able to service any requests. + +RPC service rpcbind, statd and mountd are effected by this +problem. + +Fix by enhancing rendezvous_request to keep the number of +SVCXPRT conections to 4/5 of the size of the file descriptor +table. When this thresold is reached, it destroys the idle +TCP connections or destroys the least active connection if +no idle connnction was found. + +Fixes: 44bf15b8 rpcbind: don't use obsolete svc_fdset interface of libtirpc +Signed-off-by: dai.ngo@oracle.com +Signed-off-by: Steve Dickson +--- + INSTALL | 371 +---------------------------------------------------------- + src/svc.c | 17 ++- + src/svc_vc.c | 62 +++++++++- + 3 files changed, 78 insertions(+), 372 deletions(-) + mode change 100644 => 120000 INSTALL + +diff --git a/src/svc.c b/src/svc.c +index 6db164b..3a8709f 100644 +--- a/src/svc.c ++++ b/src/svc.c +@@ -57,7 +57,7 @@ + + #define max(a, b) (a > b ? a : b) + +-static SVCXPRT **__svc_xports; ++SVCXPRT **__svc_xports; + int __svc_maxrec; + + /* +@@ -194,6 +194,21 @@ __xprt_do_unregister (xprt, dolock) + rwlock_unlock (&svc_fd_lock); + } + ++int ++svc_open_fds() ++{ ++ int ix; ++ int nfds = 0; ++ ++ rwlock_rdlock (&svc_fd_lock); ++ for (ix = 0; ix < svc_max_pollfd; ++ix) { ++ if (svc_pollfd[ix].fd != -1) ++ nfds++; ++ } ++ rwlock_unlock (&svc_fd_lock); ++ return (nfds); ++} ++ + /* + * Add a service program to the callout list. + * The dispatch routine will be called when a rpc request for this +diff --git a/src/svc_vc.c b/src/svc_vc.c +index f1d9f00..3dc8a75 100644 +--- a/src/svc_vc.c ++++ b/src/svc_vc.c +@@ -64,6 +64,8 @@ + + + extern rwlock_t svc_fd_lock; ++extern SVCXPRT **__svc_xports; ++extern int svc_open_fds(); + + static SVCXPRT *makefd_xprt(int, u_int, u_int); + static bool_t rendezvous_request(SVCXPRT *, struct rpc_msg *); +@@ -82,6 +84,7 @@ static void svc_vc_ops(SVCXPRT *); + static bool_t svc_vc_control(SVCXPRT *xprt, const u_int rq, void *in); + static bool_t svc_vc_rendezvous_control (SVCXPRT *xprt, const u_int rq, + void *in); ++static int __svc_destroy_idle(int timeout); + + struct cf_rendezvous { /* kept in xprt->xp_p1 for rendezvouser */ + u_int sendsize; +@@ -313,13 +316,14 @@ done: + return (xprt); + } + ++ + /*ARGSUSED*/ + static bool_t + rendezvous_request(xprt, msg) + SVCXPRT *xprt; + struct rpc_msg *msg; + { +- int sock, flags; ++ int sock, flags, nfds, cnt; + struct cf_rendezvous *r; + struct cf_conn *cd; + struct sockaddr_storage addr; +@@ -379,6 +383,16 @@ again: + + gettimeofday(&cd->last_recv_time, NULL); + ++ nfds = svc_open_fds(); ++ if (nfds >= (_rpc_dtablesize() / 5) * 4) { ++ /* destroy idle connections */ ++ cnt = __svc_destroy_idle(15); ++ if (cnt == 0) { ++ /* destroy least active */ ++ __svc_destroy_idle(0); ++ } ++ } ++ + return (FALSE); /* there is never an rpc msg to be processed */ + } + +@@ -820,3 +834,49 @@ __svc_clean_idle(fd_set *fds, int timeout, bool_t cleanblock) + { + return FALSE; + } ++ ++static int ++__svc_destroy_idle(int timeout) ++{ ++ int i, ncleaned = 0; ++ SVCXPRT *xprt, *least_active; ++ struct timeval tv, tdiff, tmax; ++ struct cf_conn *cd; ++ ++ gettimeofday(&tv, NULL); ++ tmax.tv_sec = tmax.tv_usec = 0; ++ least_active = NULL; ++ rwlock_wrlock(&svc_fd_lock); ++ ++ for (i = 0; i <= svc_max_pollfd; i++) { ++ if (svc_pollfd[i].fd == -1) ++ continue; ++ xprt = __svc_xports[i]; ++ if (xprt == NULL || xprt->xp_ops == NULL || ++ xprt->xp_ops->xp_recv != svc_vc_recv) ++ continue; ++ cd = (struct cf_conn *)xprt->xp_p1; ++ if (!cd->nonblock) ++ continue; ++ if (timeout == 0) { ++ timersub(&tv, &cd->last_recv_time, &tdiff); ++ if (timercmp(&tdiff, &tmax, >)) { ++ tmax = tdiff; ++ least_active = xprt; ++ } ++ continue; ++ } ++ if (tv.tv_sec - cd->last_recv_time.tv_sec > timeout) { ++ __xprt_unregister_unlocked(xprt); ++ __svc_vc_dodestroy(xprt); ++ ncleaned++; ++ } ++ } ++ if (timeout == 0 && least_active != NULL) { ++ __xprt_unregister_unlocked(least_active); ++ __svc_vc_dodestroy(least_active); ++ ncleaned++; ++ } ++ rwlock_unlock(&svc_fd_lock); ++ return (ncleaned); ++} +-- +1.8.3.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-memory-leak.patch b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-memory-leak.patch new file mode 100644 index 0000000000..8ce864a295 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-memory-leak.patch @@ -0,0 +1,52 @@ +From 63f3b9e883231ca08cf9c3cd8f5d582584412d94 Mon Sep 17 00:00:00 2001 +From: Ali Abdallah +Date: Thu, 14 Jul 2022 13:47:32 -0400 +Subject: [PATCH] Fix potential memory leak of parms.r_addr + +During some valgrind test, the following is observed + +==11391== 64 bytes in 4 blocks are definitely lost in loss record 11 of 16 +==11391== at 0x4C2A2AF: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) +==11391== by 0x50ECED9: strdup (in /lib64/libc-2.22.so) +==11391== by 0x4E4AFBF: getclnthandle (in /lib64/libtirpc.so.3.0.0) +==11391== by 0x4E4BD8A: __rpcb_findaddr_timed (in /lib64/libtirpc.so.3.0.0) +==11391== by 0x4E443AF: clnt_tp_create_timed (in /lib64/libtirpc.so.3.0.0) +==11391== by 0x4E44580: clnt_create_timed (in /lib64/libtirpc.so.3.0.0) +==11391== by 0x400755: main (in /local/02/xdtadti/tirpc-test/client) + +Signed-off-by: Steve Dickson +--- + INSTALL | 369 +------------------------------------------------------- + src/rpcb_clnt.c | 8 ++ + 2 files changed, 9 insertions(+), 368 deletions(-) + mode change 100644 => 120000 INSTALL + +diff --git a/src/rpcb_clnt.c b/src/rpcb_clnt.c +index 0c34cb7..1a23cb1 100644 +--- a/src/rpcb_clnt.c ++++ b/src/rpcb_clnt.c +@@ -798,6 +798,10 @@ __try_protocol_version_2(program, version, nconf, host, tp) + pmapaddress->len = pmapaddress->maxlen = remote.len; + + CLNT_DESTROY(client); ++ ++ if (parms.r_addr != NULL && parms.r_addr != nullstring) ++ free(parms.r_addr); ++ + return pmapaddress; + + error: +@@ -806,6 +810,10 @@ error: + client = NULL; + + } ++ ++ if (parms.r_addr != NULL && parms.r_addr != nullstring) ++ free(parms.r_addr); ++ + return (NULL); + + } +-- +1.8.3.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-use-after-free.patch b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-use-after-free.patch new file mode 100644 index 0000000000..8e85a564f2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/files/libtirpc-1.3.2-use-after-free.patch @@ -0,0 +1,31 @@ +From d0dc59e27263c6b53435d770010dcc6f397d58ee Mon Sep 17 00:00:00 2001 +From: Frank Sorenson +Date: Mon, 17 Jan 2022 13:33:13 -0500 +Subject: [PATCH] libtirpc: Fix use-after-free accessing the error number + +Free the cbuf after obtaining the error number. + +Signed-off-by: Frank Sorenson +Signed-off-by: Steve Dickson +--- + src/clnt_dg.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/clnt_dg.c b/src/clnt_dg.c +index e1255de..b3d82e7 100644 +--- a/src/clnt_dg.c ++++ b/src/clnt_dg.c +@@ -456,9 +456,9 @@ get_reply: + cmsg = CMSG_NXTHDR (&msg, cmsg)) + if (cmsg->cmsg_level == SOL_IP && cmsg->cmsg_type == IP_RECVERR) + { +- mem_free(cbuf, (outlen + 256)); + e = (struct sock_extended_err *) CMSG_DATA(cmsg); + cu->cu_error.re_errno = e->ee_errno; ++ mem_free(cbuf, (outlen + 256)); + release_fd_lock(cu->cu_fd_lock, mask); + return (cu->cu_error.re_status = RPC_CANTRECV); + } +-- +1.8.3.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/libtirpc-1.3.2-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/libtirpc-1.3.2-r1.ebuild new file mode 100644 index 0000000000..ea678b7ba1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/libtirpc-1.3.2-r1.ebuild @@ -0,0 +1,69 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit multilib-minimal usr-ldscript + +DESCRIPTION="Transport Independent RPC library (SunRPC replacement)" +HOMEPAGE="https://sourceforge.net/projects/libtirpc/" +SRC_URI="mirror://sourceforge/${PN}/${P}.tar.bz2 + mirror://gentoo/${PN}-glibc-nfs.tar.xz" + +LICENSE="BSD BSD-2 BSD-4 LGPL-2.1+" +SLOT="0/3" # subslot matches SONAME major +KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux" +IUSE="ipv6 kerberos static-libs" + +RDEPEND="kerberos? ( >=virtual/krb5-0-r1[${MULTILIB_USEDEP}] )" +DEPEND="${RDEPEND} + elibc_musl? ( sys-libs/queue-standalone )" +BDEPEND=" + app-arch/xz-utils + virtual/pkgconfig" + +src_prepare() { + local PATCHES=( + "${FILESDIR}"/libtirpc-1.3.2-dos.patch + "${FILESDIR}"/libtirpc-1.3.2-use-after-free.patch + "${FILESDIR}"/libtirpc-1.3.2-memory-leak.patch + ) + cp -r "${WORKDIR}"/tirpc "${S}"/ || die + default + + # Flatcar: Set netconfig path to /usr so NFS works in + # PXE/ISO-booted systems. + sed -i -e "s,/etc,/usr/share/tirpc," "${S}/tirpc/netconfig.h" || die +} + +multilib_src_configure() { + local myeconfargs=( + $(use_enable ipv6) + $(use_enable kerberos gssapi) + $(use_enable static-libs static) + ) + ECONF_SOURCE="${S}" econf "${myeconfargs[@]}" +} + +multilib_src_install() { + default + + # libtirpc replaces rpc support in glibc, so we need it in / + gen_usr_ldscript -a tirpc +} + +multilib_src_install_all() { + einstalldocs + + insinto /usr/share/tirpc + doins doc/netconfig + + insinto /usr/include/tirpc + doins -r "${WORKDIR}"/tirpc/* + + # makes sure that the linking order for nfs-utils is proper, as + # libtool would inject a libgssglue dependency in the list. + if ! use static-libs ; then + find "${ED}" -name "*.la" -delete || die + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/metadata.xml new file mode 100644 index 0000000000..2033e65a99 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/libtirpc/metadata.xml @@ -0,0 +1,12 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + + cpe:/a:libtirpc_project:libtirpc + libtirpc + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/Manifest b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/Manifest new file mode 100644 index 0000000000..e0324f8e64 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/Manifest @@ -0,0 +1 @@ +DIST rpcsvc-proto-1.4.2.tar.gz 61788 BLAKE2B e941fa86088d690e3e80a501beb5169a51ff77b60d618f54db9d9fd5fb96c2b2a4277ab8d847dcdb29dadd2f6947d155b15cd8b6af1f1420e023da8637d555c0 SHA512 6769f9439e3f187eebdeef4ee8d54f8a6fee6f410e3137d0c1b26e61b705873932890856faff55b68c39aa702e456b36fe9410b85baf1ef9b20ee97f2158971a diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/metadata.xml new file mode 100644 index 0000000000..2d4f8ac989 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/metadata.xml @@ -0,0 +1,12 @@ + + + + + toolchain@gentoo.org + Gentoo Toolchain Project + + + base-system@gentoo.org + Gentoo Base System Project + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/rpcsvc-proto-0.ebuild b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/rpcsvc-proto-0.ebuild new file mode 100644 index 0000000000..865a87574e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/rpcsvc-proto-0.ebuild @@ -0,0 +1,17 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +DESCRIPTION="rpcsvc protocol definitions from glibc" +HOMEPAGE="https://github.com/thkukuk/rpcsvc-proto" + +# Fake version to help portage upgrading. + +SLOT="0" +LICENSE="LGPL-2.1+ BSD" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~s390 sparc x86 ~amd64-linux ~x86-linux" +IUSE="" + +DEPEND="elibc_glibc? ( sys-libs/glibc[rpc(-)] )" +RDEPEND="${DEPEND}" diff --git a/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/rpcsvc-proto-1.4.2.ebuild b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/rpcsvc-proto-1.4.2.ebuild new file mode 100644 index 0000000000..0d012345ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-libs/rpcsvc-proto/rpcsvc-proto-1.4.2.ebuild @@ -0,0 +1,38 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit autotools + +DESCRIPTION="rpcsvc protocol definitions from glibc" +HOMEPAGE="https://github.com/thkukuk/rpcsvc-proto" +SRC_URI="https://github.com/thkukuk/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="LGPL-2.1+ BSD" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86" +IUSE="" + +# sys-devel/gettext is only for libintl detection macros. +DEPEND="sys-devel/gettext" +RDEPEND=" + !/dev/null | LC_COLLATE=C sort | sed -n '${s:/::;p;Q}') + if [[ -z ${VERSION} ]] ; then + VERSION=$(ls "${0%/*}"/../../ntp-*.ebuild | LC_COLLATE=C sort | sed -n '${s:.*/::;s:_::;s:[.]ebuild::;p;Q}') + if [[ -z ${VERSION} ]] ; then + echo "Usage: $0 " + exit 1 + fi + fi +fi +[[ ${VERSION} != ntp-* ]] && VERSION="ntp-${VERSION}" + +SRCDIR=${0%/*} +HTMLDIR=${SRCDIR}/${VERSION}/html +DISTFILE=/usr/portage/distfiles/${VERSION}.tar.gz +MANDIR=${SRCDIR}/man + +rm -rf ${SRCDIR}/${VERSION} +if [[ ! -d ${HTMLDIR} ]] ; then + if [[ -f ${DISTFILE} ]] ; then + tar zxf ${DISTFILE} -C ${SRCDIR} || exit 1 + else + echo "ERROR: $HTMLDIR / $DISTFILE does not exist" + exit 1 + fi +fi + +# Process a single HTML file +processfile() { + HTMLFILE=$1 + MANFILE=$2 + echo -n "Processing $HTMLFILE ..." + sed -e "s:/:" $HTMLDIR/$HTMLFILE > .$HTMLFILE + xsltproc --html --stringparam version $VERSION ${SRCDIR}/ntp.xsl .$HTMLFILE > $MANDIR/$MANFILE || exit 1 + rm -f .$HTMLFILE + echo "Done." +} + +# Print information +echo "Generates ntp man files from HTML documentation. Using:" +echo "VERSION: $VERSION" +echo "HTMLDIR: $HTMLDIR" +echo "MANDIR: $MANDIR" +echo "Press enter to continue, or Ctrl-C to cancel." +read + +# Process HTML files +rm -rf ${MANDIR} +mkdir ${MANDIR} +for f in ntp{date,dc,d,q,time,trace,dsim} keygen tickadj ; do + processfile ${f}.html ${f}.8 +done +echo + +cp -vi /usr/local/src/freebsd/src/usr.sbin/ntp/doc/*.5 ${MANDIR} +( +d=${PWD} +cd ${MANDIR} +shopt -s nullglob +for p in $d/*.5.patch ; do + patch -F0 -p0 < $p || exit 1 +done +) || exit 1 +cp -vi ${SRCDIR}/*.patch ${SRCDIR}/genmans.sh ${SRCDIR}/ntp.xsl ${MANDIR} + +tar -jcf ${VERSION}-manpages.tar.bz2 -C ${MANDIR}/.. man +du -b ${VERSION}-manpages.tar.bz2 + +rm -rf ${MANDIR} ${SRCDIR}/${VERSION} diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/man-pages/ntp.conf.5.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/man-pages/ntp.conf.5.patch new file mode 100644 index 0000000000..c3d8123022 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/man-pages/ntp.conf.5.patch @@ -0,0 +1,27 @@ +--- ntp.conf.5 ++++ ntp.conf.5 +@@ -24,16 +24,6 @@ + .Fl c + command line option). + .Pp +-The +-.Pa /etc/rc.d/ntpdate +-script reads this file to get a list of NTP servers to use if the +-variable +-.Dq Li ntpdate_hosts +-was not declared. +-Refer to the +-.Xr rc.conf 5 +-man page for further info about this. +-.Pp + The file format is similar to other + .Ux + configuration files. +@@ -2686,7 +2676,6 @@ + Diffie-Hellman agreement parameters + .El + .Sh SEE ALSO +-.Xr rc.conf 5 , + .Xr ntpd 8 , + .Xr ntpdc 8 , + .Xr ntpq 8 diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/man-pages/ntp.xsl b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/man-pages/ntp.xsl new file mode 100644 index 0000000000..ed9c1f8b8e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/man-pages/ntp.xsl @@ -0,0 +1,218 @@ + + + + + +]> + + + + + + + + + + + + + + + + .\" Automatically generated from HTML source. + DO NOT EDIT!&newline; + + + + + .TH + + 1 "" "ntp + + " + &newline; + .SH NAME + &newline; + + &newline; + + + + + + + + + + + + + + + + + &newline; + + .SH + + &newline; + + + + .SH AUTHOR + &newline; + + + + + + + + + &newline; + + .P + &newline; + + &newline; + + + + &newline; + &newline; + + + + + + + + &newline; + .ft CW + &newline; + .nf + &newline; + + + + &newline; + .ft R + &newline; + .fi + &newline; + + + + + + + + + + + + + + + + + .TP&newline; + .B + + &newline; + + + + + &newline; + + + + + + &newline; + &newline; + + + + + &newline; + \fB + + \fR + + + + &newline; + \fI + + \fR + + + + + + + + + + &newline; + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8-ipc-caps.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8-ipc-caps.patch new file mode 100644 index 0000000000..a1e558052d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8-ipc-caps.patch @@ -0,0 +1,16 @@ +http://bugs.ntp.org/show_bug.cgi?id=2646 +https://bugs.gentoo.org/533966 + +--- a/ntpd/ntpd.c ++++ a/ntpd/ntpd.c +@@ -971,8 +971,8 @@ getgroup: + char *captext; + + captext = (0 != interface_interval) +- ? "cap_sys_time,cap_net_bind_service=pe" +- : "cap_sys_time=pe"; ++ ? "cap_ipc_lock,cap_sys_time,cap_net_bind_service=pe" ++ : "cap_ipc_lock,cap_sys_time=pe"; + caps = cap_from_text(captext); + if (!caps) { + msyslog(LOG_ERR, diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8-sntp-test-pthreads.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8-sntp-test-pthreads.patch new file mode 100644 index 0000000000..4f8d15ff85 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8-sntp-test-pthreads.patch @@ -0,0 +1,13 @@ +https://bugs.gentoo.org/563922 +http://bugs.ntp.org/show_bug.cgi?id=2906 + +--- a/sntp/tests/Makefile.in ++++ b/sntp/tests/Makefile.in +@@ -783,6 +783,7 @@ base_LDADD = \ + $(LIBOPTS_LDADD) \ + $(LDADD_LIBEVENT) \ + $(top_builddir)/../libntp/libntp.a \ ++ $(PTHREAD_LIBS) \ + $(LDADD_LIBNTP) \ + $(LDADD_NTP) \ + $(NULL) diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p10-fix-build-wo-ssl-or-libressl.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p10-fix-build-wo-ssl-or-libressl.patch new file mode 100644 index 0000000000..1b532c6d89 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p10-fix-build-wo-ssl-or-libressl.patch @@ -0,0 +1,39 @@ +Fix building with libressl or without SSL. + +Origin: http://bugs.ntp.org/attachment.cgi?id=1481 + +LibreSSL fix from Joe Kappus (https://bugs.gentoo.org/show_bug.cgi?id=600668#c2) + +--- a/include/libssl_compat.h ++++ b/include/libssl_compat.h +@@ -37,7 +37,7 @@ + #endif + + /* ----------------------------------------------------------------- */ +-#if OPENSSL_VERSION_NUMBER < 0x10100000L ++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) + /* ----------------------------------------------------------------- */ + + # include +--- a/libntp/libssl_compat.c ++++ b/libntp/libssl_compat.c +@@ -26,7 +26,7 @@ + /* ----------------------------------------------------------------- */ + + /* ----------------------------------------------------------------- */ +-#if defined(OPENSSL) && OPENSSL_VERSION_NUMBER < 0x10100000L ++#if defined(OPENSSL) && (OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)) + /* ----------------------------------------------------------------- */ + + #include "libssl_compat.h" +--- a/libntp/ssl_init.c ++++ b/libntp/ssl_init.c +@@ -21,7 +21,7 @@ + + int ssl_init_done; + +-#if OPENSSL_VERSION_NUMBER < 0x10100000L ++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) + + static void + atexit_ssl_cleanup(void) diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p12-libressl-2.8.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p12-libressl-2.8.patch new file mode 100644 index 0000000000..182fcefe88 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p12-libressl-2.8.patch @@ -0,0 +1,16 @@ +--- ntp-4.2.8p12.orig/include/libssl_compat.h 2018-12-08 01:14:58.434733497 +0000 ++++ ntp-4.2.8p12/include/libssl_compat.h 2018-12-08 01:42:04.479474757 +0000 +@@ -107,10 +107,13 @@ + + #define OpenSSL_version_num SSLeay + #define OpenSSL_version SSLeay_version ++ ++# if !defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER < 0x20800000L + #define X509_get0_notBefore X509_get_notBefore + #define X509_getm_notBefore X509_get_notBefore + #define X509_get0_notAfter X509_get_notAfter + #define X509_getm_notAfter X509_get_notAfter ++#endif /* !defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER < 0x20800000L */ + + /* ----------------------------------------------------------------- */ + #endif /* OPENSSL_VERSION_NUMBER < v1.1.0 */ diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p14-add_cap_ipc_lock.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p14-add_cap_ipc_lock.patch new file mode 100644 index 0000000000..183b6d8d47 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp-4.2.8_p14-add_cap_ipc_lock.patch @@ -0,0 +1,13 @@ +https://bugs.gentoo.org/711530 + +--- ntp-4.2.8p14/ntpd/ntpd.c ++++ ntp-4.2.8p14/ntpd/ntpd.c +@@ -1189,7 +1189,7 @@ + * drop privileges in this case. + */ + cap_t caps; +- caps = cap_from_text("cap_sys_time,cap_setuid,cap_setgid,cap_sys_chroot,cap_net_bind_service=pe"); ++ caps = cap_from_text("cap_ipc_lock,cap_sys_time,cap_setuid,cap_setgid,cap_sys_chroot,cap_net_bind_service=pe"); + if ( ! caps) { + msyslog( LOG_ERR, "cap_from_text() failed: %m" ); + exit(-1); diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf new file mode 100644 index 0000000000..c0cd2271f9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.conf @@ -0,0 +1,19 @@ +# Common pool +server 0.flatcar.pool.ntp.org +server 1.flatcar.pool.ntp.org +server 2.flatcar.pool.ntp.org +server 3.flatcar.pool.ntp.org + +# Warning: Using default NTP settings will leave your NTP +# server accessible to all hosts on the Internet. + +# If you want to deny all machines (including your own) +# from accessing the NTP server, uncomment: +#restrict default ignore + +# Default configuration: +# - Allow only time queries, at a limited rate, sending KoD when in excess. +# - Allow all local queries (IPv4, IPv6) +restrict default nomodify nopeer noquery notrap limited kod +restrict 127.0.0.1 +restrict [::1] diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.tmpfiles b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.tmpfiles new file mode 100644 index 0000000000..ac582aaeab --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntp.tmpfiles @@ -0,0 +1,2 @@ +d /var/lib/ntp 0755 ntp ntp - - +L /etc/ntp.conf - - - - /usr/share/ntp/ntp.conf diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntpd.service b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntpd.service new file mode 100644 index 0000000000..65c109b243 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntpd.service @@ -0,0 +1,12 @@ +[Unit] +Description=Network Time Service +After=ntpdate.service sntp.service +Conflicts=systemd-timesyncd.service + +[Service] +ExecStart=/usr/sbin/ntpd -g -n -f /var/lib/ntp/ntp.drift +PrivateTmp=true +Restart=always + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntpdate.service b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntpdate.service new file mode 100644 index 0000000000..4ba6cf249c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/ntpdate.service @@ -0,0 +1,15 @@ +[Unit] +Description=Set time via NTP using ntpdate +After=network-online.target nss-lookup.target +Before=time-sync.target +Wants=time-sync.target +Conflicts=systemd-timesyncd.service + +[Service] +Type=oneshot +Environment="SERVER=0.flatcar.pool.ntp.org 1.flatcar.pool.ntp.org 2.flatcar.pool.ntp.org 3.flatcar.pool.ntp.org" +ExecStart=/usr/sbin/ntpdate -b -u $SERVER +RemainAfterExit=yes + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/sntp.service b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/sntp.service new file mode 100644 index 0000000000..60a5784d50 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/files/sntp.service @@ -0,0 +1,15 @@ +[Unit] +Description=Set time via SNTP +After=network.target NetworkManager-wait-online.service nss-lookup.target +Before=time-sync.target +Wants=time-sync.target +Conflicts=systemd-timesyncd.service + +[Service] +Type=oneshot +Environment="SERVER=0.flatcar.pool.ntp.org 1.flatcar.pool.ntp.org 2.flatcar.pool.ntp.org 3.flatcar.pool.ntp.org" +ExecStart=/usr/bin/sntp -s $SERVER +RemainAfterExit=yes + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/metadata.xml new file mode 100644 index 0000000000..88e81f1ab2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/metadata.xml @@ -0,0 +1,23 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + +NTP is a protocol designed to synchronize the clocks of computers over a network. NTP +version 3 is an internet draft standard, formalized in RFC 1305. NTP version 4 is a +significant revision of the NTP standard, and is the current development version, but +has not been formalized in an RFC. Simple NTP (SNTP) version 4 is described in RFC +2030. + + + Allow ntp to be installed alongside openntpd + Add support for PARSE clocks + Provide support for Samba's signing daemon (needed for Active Directory domain controllers) + + + cpe:/a:ntp:ntp + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p15.ebuild b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p15.ebuild new file mode 100644 index 0000000000..591c3f1cdf --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/ntp/ntp-4.2.8_p15.ebuild @@ -0,0 +1,125 @@ +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +TMPFILES_OPTIONAL=1 +inherit autotools toolchain-funcs flag-o-matic systemd tmpfiles + +MY_P=${P/_p/p} +DESCRIPTION="Network Time Protocol suite/programs" +HOMEPAGE="http://www.ntp.org/" +SRC_URI="http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-${PV:0:3}/${MY_P}.tar.gz + https://dev.gentoo.org/~polynomial-c/${MY_P}-manpages.tar.xz" + +LICENSE="HPND BSD ISC" +SLOT="0" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv s390 sparc x86 ~amd64-linux ~x86-linux ~m68k-mint" +IUSE="caps debug ipv6 libressl openntpd parse-clocks perl readline samba selinux snmp ssl threads vim-syntax zeroconf" + +COMMON_DEPEND="readline? ( >=sys-libs/readline-4.1:0= ) + >=dev-libs/libevent-2.0.9:=[threads?] + kernel_linux? ( caps? ( sys-libs/libcap ) ) + zeroconf? ( net-dns/avahi[mdnsresponder-compat] ) + snmp? ( net-analyzer/net-snmp ) + ssl? ( + !libressl? ( dev-libs/openssl:0= ) + libressl? ( dev-libs/libressl:0= ) + ) + parse-clocks? ( net-misc/pps-tools )" +BDEPEND="virtual/pkgconfig + acct-group/ntp + acct-user/ntp" +DEPEND="${COMMON_DEPEND}" +RDEPEND="${COMMON_DEPEND} + acct-group/ntp + acct-user/ntp + selinux? ( sec-policy/selinux-ntp ) + vim-syntax? ( app-vim/ntp-syntax ) + !net-misc/ntpsec + !openntpd? ( !net-misc/openntpd ) +" +PDEPEND="openntpd? ( net-misc/openntpd )" + +S="${WORKDIR}/${MY_P}" + +PATCHES=( + "${FILESDIR}"/${PN}-4.2.8-ipc-caps.patch #533966 + "${FILESDIR}"/${PN}-4.2.8-sntp-test-pthreads.patch #563922 + "${FILESDIR}"/${PN}-4.2.8_p10-fix-build-wo-ssl-or-libressl.patch + "${FILESDIR}"/${PN}-4.2.8_p12-libressl-2.8.patch + "${FILESDIR}"/${PN}-4.2.8_p14-add_cap_ipc_lock.patch #711530 +) + +src_prepare() { + default + use perl || sed -i -e '/^SUBDIRS *=/,/[^\\]$/{/scripts/d;}' Makefile.am || die + append-cppflags -D_GNU_SOURCE #264109 + # Make sure every build uses the same install layout. #539092 + find sntp/loc/ -type f '!' -name legacy -delete || die + eautoreconf #622754 + # Disable pointless checks. + touch .checkChangeLog .gcc-warning FRC.html html/.datecheck +} + +src_configure() { + # avoid libmd5/libelf + export ac_cv_search_MD5Init=no ac_cv_header_md5_h=no + export ac_cv_lib_elf_nlist=no + # blah, no real configure options #176333 + export ac_cv_header_dns_sd_h=$(usex zeroconf) + export ac_cv_lib_dns_sd_DNSServiceRegister=${ac_cv_header_dns_sd_h} + # Increase the default memlimit from 32MiB to 128MiB. #533232 + local myeconfargs=( + --with-lineeditlibs=readline,edit,editline + --with-yielding-select + --disable-local-libevent + --with-memlock=256 + $(use_enable caps linuxcaps) + $(use_enable parse-clocks) + $(use_enable ipv6) + $(use_enable debug debugging) + $(use_with readline lineeditlibs readline) + $(use_enable samba ntp-signd) + $(use_with snmp ntpsnmpd) + $(use_with ssl crypto) + $(use_enable threads thread-support) + ) + econf "${myeconfargs[@]}" +} + +src_install() { + default + # move ntpd/ntpdate to sbin #66671 + dodir /usr/sbin + mv "${ED}"/usr/bin/{ntpd,ntpdate} "${ED}"/usr/sbin/ || die "move to sbin" + + dodoc INSTALL WHERE-TO-START + doman "${WORKDIR}"/man/*.[58] + + insinto /usr/share/ntp + doins "${FILESDIR}"/ntp.conf + use ipv6 || sed -i '/^restrict .*::1/d' "${ED%/}"/usr/share/ntp/ntp.conf #524726 + newtmpfiles "${FILESDIR}"/ntp.tmpfiles ntp.conf + + keepdir /var/lib/ntp + use prefix || fowners ntp:ntp /var/lib/ntp + + if use openntpd ; then + cd "${ED}" || die + rm usr/sbin/ntpd || die + rm -r var/lib || die + rm usr/share/man/*/ntpd.8 || die + else + systemd_dounit "${FILESDIR}"/ntpd.service + if use caps ; then + sed -i '/ExecStart/ s|$| -u ntp:ntp|' \ + "${D}$(systemd_get_systemunitdir)"/ntpd.service \ + || die + fi + systemd_enable_ntpunit 60-ntpd ntpd.service + fi + + systemd_dounit "${FILESDIR}"/ntpdate.service + systemd_dounit "${FILESDIR}"/sntp.service +} diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/Manifest b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/Manifest new file mode 100644 index 0000000000..c86d6d05e1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/Manifest @@ -0,0 +1,10 @@ +DIST openssh-8_5_P1-hpn-AES-CTR-15.2.diff 30096 BLAKE2B f0c020dd2403806c79d4c37a019996d275655b04997301e247f5c4dd7fad35d12b3b7c25afb1b078d915ef2a4ae02f736f0aec9ba2a8c56a405d7ca303bcadf7 SHA512 4c2dbf99a9b5953fdb955f700272bbaeaa025f108a8860d2190197962b849f8385327af82c4d6a3a130a7fba35a74a8ec9437d642867601acb29817c49632a8f +DIST openssh-8_5_P1-hpn-DynWinNoneSwitch-15.2.diff 51428 BLAKE2B 370b88a7da7f148bf5a4d445f05cf593b486e9df53bba027e2e179726f534b68cf9d94edd6e53024e0b6ff5f20e568727bc9d26c94d0d415603602a80d3ad241 SHA512 2d8d887901164b33b2799ff3ec72e86a39ae4a1696e52bcee0872dbae7772fcc534351e6e7f87126ee71b164c74e9091350f14b782f4b242a09f09b4f50d047a +DIST openssh-8_5_P1-hpn-PeakTput-15.2.diff 2429 BLAKE2B 849bf3c313719ab7a25c75e82d5dc5ac98365a038b2a66fe58d01eae5b20c7777258b94b5830e799d6909e75c69753cda05a910f3bdab9606fb7d5efa68e05f1 SHA512 c4a56fab55fabd1d902d45f235b603708d43f969920e45c9a57e557dccfa9cade2ec61f26d1ace938f6f73e79f17b12f119b5aea9166cbda8e3435b910500914 +DIST openssh-9.2_p1-X509-glue-14.1.patch.xz 900 BLAKE2B 1cfde24cdd636390bcd9b546da182b0848d637c366ff387f045e8d9158e94ff9577c0dff9d87a552208a56aac4ae8319bb17fd772719a7aa2cbc8baf2bfe59fc SHA512 b3f87fb0c339ffe627b347b4cc56fc6a056e5e9a4f23481bb18fc55262e1de3f0394d2f7a85c4fa120f74616a5872cf6628118bcda6973dfa9baec8d7e0e65b1 +DIST openssh-9.2_p1-hpn-15.2-X509-14.1-glue.patch.xz 6040 BLAKE2B d032d1f03ab1bd310af055a452375e6b85ebe40f3d09effdfb07085981155b751c6fdc74a9ee10afe807c2cd10be3444baf712eb0b211bdaff4dc43dc4f65938 SHA512 696f5ee26eeef7a1d56c212eb8bf7c7a568ded2a576eddae92b98b9b3b6bd5bd66e0944b9328e93ec4d55d16f72215a13c25d27de81f75aaae8fdbe68e3df51e +DIST openssh-9.2_p1-hpn-15.2-glue.patch.xz 4172 BLAKE2B 7bec61008f02c07bf24112995066bcd434820354155eb022ffa550baa8f7be896d915423698427ec921473190eb8e83739d2ceff04f79967759fc82b74435dac SHA512 c669a70611479f4ee0f3ba8417afc052f0212cb2d338c524fb3bf6c52a1bf3ca78fe78ab04118de5aa472a10d30b95f084c3ed00a542a8b3d0f541f8ea3f26af +DIST openssh-9.2p1+x509-14.1.diff.gz 1210737 BLAKE2B 6b1cb2392c3fdbc7627b44a055da7662c686786cddaefcdf63f33fa92c1d97a5fb9ff54d03b7aef700715baa44f4485ad2dd73f59aac5b19617597832e135773 SHA512 88ba0dfd6e7eddf06e47d27299ee900dd1a9dc24df706bde51231b290f666848935204281577a9e47267939e7ee852f7232caaccdae6ac3eb503e53c075e630d +DIST openssh-9.2p1-sctp-1.2.patch.xz 6828 BLAKE2B 8a57b85ce5d18dca34ef71b486f2f24bbc82f6bf263a4f162a1222d96ef2adc469cce62f368c9192512efaa8e1e2496a7bd8f79a11698bf0118eee07a703e6ef SHA512 3713847ef7b280f8b74a1b493644152c948ce74e06c1d0bff52996647963ca156cbc845b4459bcdbd4745eb440e409af07af2f0b696c65950a8a6d7ddb46f6c8 +DIST openssh-9.2p1.tar.gz 1852380 BLAKE2B 8d0b5e43cb42cba105a1fe303c447a2b85151cb33ec7ed47747d75c5a61d0f07f0ee4b1020b79c13eb8de4b451c5a844a8afc7ebbbea7ffeceafc3bf59cb8d21 SHA512 c4b79ef3a05b96bfc477ffb31f734635bffd5be213ab58e043111c3232dbe999ff24665fa1069518237cffa5126ded0dda8984e1b8f098f4f09b8c1dae20e604 +DIST openssh-9.2p1.tar.gz.asc 833 BLAKE2B 36210757aaa4ee8e6bdf4cfbb5590e6c54a617817d1657ebb446e54530d01a9e9f5559408b3d424d5efdb4ba06f0c02755637f5480dc81f9b4e32963de91087a SHA512 2a56f8946ed00fcd5a92935e090523d40b5c3747e25661d575b799b1825bf5e47a95eed5e7ed968fe042349c2c7d94d6b0e6bf2d9145b5c6ff5df2ca538d56e5 diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-6.7_p1-openssl-ignore-status.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-6.7_p1-openssl-ignore-status.patch new file mode 100644 index 0000000000..fa33af39b6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-6.7_p1-openssl-ignore-status.patch @@ -0,0 +1,17 @@ +the last nibble of the openssl version represents the status. that is, +whether it is a beta or release. when it comes to version checks in +openssh, this component does not matter, so ignore it. + +https://bugzilla.mindrot.org/show_bug.cgi?id=2212 + +--- a/openbsd-compat/openssl-compat.c ++++ b/openbsd-compat/openssl-compat.c +@@ -58,7 +58,7 @@ ssh_compatible_openssl(long headerver, long libver) + * For versions >= 1.0.0, major,minor,status must match and library + * fix version must be equal to or newer than the header. + */ +- mask = 0xfff0000fL; /* major,minor,status */ ++ mask = 0xfff00000L; /* major,minor,status */ + hfix = (headerver & 0x000ff000) >> 12; + lfix = (libver & 0x000ff000) >> 12; + if ( (headerver & mask) == (libver & mask) && lfix >= hfix) diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-7.5_p1-disable-conch-interop-tests.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-7.5_p1-disable-conch-interop-tests.patch new file mode 100644 index 0000000000..a5647ce9d8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-7.5_p1-disable-conch-interop-tests.patch @@ -0,0 +1,20 @@ +Disable conch interop tests which are failing when called +via portage for yet unknown reason and because using conch +seems to be flaky (test is failing when using Python2 but +passing when using Python3). + +Bug: https://bugs.gentoo.org/605446 + +--- a/regress/conch-ciphers.sh ++++ b/regress/conch-ciphers.sh +@@ -3,6 +3,10 @@ + + tid="conch ciphers" + ++# https://bugs.gentoo.org/605446 ++echo "conch interop tests skipped due to Gentoo bug #605446" ++exit 0 ++ + if test "x$REGRESS_INTEROP_CONCH" != "xyes" ; then + echo "conch interop tests not enabled" + exit 0 diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-7.9_p1-include-stdlib.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-7.9_p1-include-stdlib.patch new file mode 100644 index 0000000000..c5697c2b8b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-7.9_p1-include-stdlib.patch @@ -0,0 +1,48 @@ +diff --git a/auth-options.c b/auth-options.c +index b05d6d6f..d1f42f04 100644 +--- a/auth-options.c ++++ b/auth-options.c +@@ -26,6 +26,7 @@ + #include + #include + #include ++#include + + #include "openbsd-compat/sys-queue.h" + +diff --git a/hmac.c b/hmac.c +index 1c879640..a29f32c5 100644 +--- a/hmac.c ++++ b/hmac.c +@@ -19,6 +19,7 @@ + + #include + #include ++#include + + #include "sshbuf.h" + #include "digest.h" +diff --git a/krl.c b/krl.c +index 8e2d5d5d..c32e147a 100644 +--- a/krl.c ++++ b/krl.c +@@ -28,6 +28,7 @@ + #include + #include + #include ++#include + + #include "sshbuf.h" + #include "ssherr.h" +diff --git a/mac.c b/mac.c +index 51dc11d7..3d11eba6 100644 +--- a/mac.c ++++ b/mac.c +@@ -29,6 +29,7 @@ + + #include + #include ++#include + + #include "digest.h" + #include "hmac.h" diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.0_p1-deny-shmget-shmat-shmdt-in-preauth-privsep-child.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.0_p1-deny-shmget-shmat-shmdt-in-preauth-privsep-child.patch new file mode 100644 index 0000000000..fe3be2409e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.0_p1-deny-shmget-shmat-shmdt-in-preauth-privsep-child.patch @@ -0,0 +1,31 @@ +From 3ef92a657444f172b61f92d5da66d94fa8265602 Mon Sep 17 00:00:00 2001 +From: Lonnie Abelbeck +Date: Tue, 1 Oct 2019 09:05:09 -0500 +Subject: [PATCH] Deny (non-fatal) shmget/shmat/shmdt in preauth privsep child. + +New wait_random_seeded() function on OpenSSL 1.1.1d uses shmget, shmat, and shmdt +in the preauth codepath, deny (non-fatal) in seccomp_filter sandbox. +--- + sandbox-seccomp-filter.c | 9 +++++++++ + 1 file changed, 9 insertions(+) + +diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c +index 840c5232b..39dc289e3 100644 +--- a/sandbox-seccomp-filter.c ++++ b/sandbox-seccomp-filter.c +@@ -168,6 +168,15 @@ static const struct sock_filter preauth_insns[] = { + #ifdef __NR_stat64 + SC_DENY(__NR_stat64, EACCES), + #endif ++#ifdef __NR_shmget ++ SC_DENY(__NR_shmget, EACCES), ++#endif ++#ifdef __NR_shmat ++ SC_DENY(__NR_shmat, EACCES), ++#endif ++#ifdef __NR_shmdt ++ SC_DENY(__NR_shmdt, EACCES), ++#endif + + /* Syscalls to permit */ + #ifdef __NR_brk diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.0_p1-fix-putty-tests.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.0_p1-fix-putty-tests.patch new file mode 100644 index 0000000000..4310aa123f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.0_p1-fix-putty-tests.patch @@ -0,0 +1,57 @@ +Make sure that host keys are already accepted before +running tests. + +https://bugs.gentoo.org/493866 + +--- a/regress/putty-ciphers.sh ++++ b/regress/putty-ciphers.sh +@@ -10,11 +10,17 @@ fi + + for c in aes 3des aes128-ctr aes192-ctr aes256-ctr ; do + verbose "$tid: cipher $c" ++ rm -f ${COPY} + cp ${OBJ}/.putty/sessions/localhost_proxy \ + ${OBJ}/.putty/sessions/cipher_$c + echo "Cipher=$c" >> ${OBJ}/.putty/sessions/cipher_$c + +- rm -f ${COPY} ++ env HOME=$PWD echo "y" | ${PLINK} -load cipher_$c \ ++ -i ${OBJ}/putty.rsa2 "exit" ++ if [ $? -ne 0 ]; then ++ fail "failed to pre-cache host key" ++ fi ++ + env HOME=$PWD ${PLINK} -load cipher_$c -batch -i ${OBJ}/putty.rsa2 \ + cat ${DATA} > ${COPY} + if [ $? -ne 0 ]; then +--- a/regress/putty-kex.sh ++++ b/regress/putty-kex.sh +@@ -14,6 +14,12 @@ for k in dh-gex-sha1 dh-group1-sha1 dh-group14-sha1 ; do + ${OBJ}/.putty/sessions/kex_$k + echo "KEX=$k" >> ${OBJ}/.putty/sessions/kex_$k + ++ env HOME=$PWD echo "y" | ${PLINK} -load kex_$k \ ++ -i ${OBJ}/putty.rsa2 "exit" ++ if [ $? -ne 0 ]; then ++ fail "failed to pre-cache host key" ++ fi ++ + env HOME=$PWD ${PLINK} -load kex_$k -batch -i ${OBJ}/putty.rsa2 true + if [ $? -ne 0 ]; then + fail "KEX $k failed" +--- a/regress/putty-transfer.sh ++++ b/regress/putty-transfer.sh +@@ -14,6 +14,13 @@ for c in 0 1 ; do + cp ${OBJ}/.putty/sessions/localhost_proxy \ + ${OBJ}/.putty/sessions/compression_$c + echo "Compression=$c" >> ${OBJ}/.putty/sessions/kex_$k ++ ++ env HOME=$PWD echo "y" | ${PLINK} -load compression_$c \ ++ -i ${OBJ}/putty.rsa2 "exit" ++ if [ $? -ne 0 ]; then ++ fail "failed to pre-cache host key" ++ fi ++ + env HOME=$PWD ${PLINK} -load compression_$c -batch \ + -i ${OBJ}/putty.rsa2 cat ${DATA} > ${COPY} + if [ $? -ne 0 ]; then diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.5_p1-hpn-15.2-sctp-glue.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.5_p1-hpn-15.2-sctp-glue.patch new file mode 100644 index 0000000000..7199227589 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.5_p1-hpn-15.2-sctp-glue.patch @@ -0,0 +1,18 @@ +diff -u a/openssh-8_5_P1-hpn-DynWinNoneSwitch-15.2.diff b/openssh-8_5_P1-hpn-DynWinNoneSwitch-15.2.diff +--- a/openssh-8_5_P1-hpn-DynWinNoneSwitch-15.2.diff 2021-03-16 10:06:45.020527770 -0700 ++++ b/openssh-8_5_P1-hpn-DynWinNoneSwitch-15.2.diff 2021-03-16 10:07:01.294423665 -0700 +@@ -1414,14 +1414,3 @@ + # Example of overriding settings on a per-user basis + #Match User anoncvs + # X11Forwarding no +-diff --git a/version.h b/version.h +-index 6b4fa372..332fb486 100644 +---- a/version.h +-+++ b/version.h +-@@ -3,4 +3,5 @@ +- #define SSH_VERSION "OpenSSH_8.5" +- +- #define SSH_PORTABLE "p1" +--#define SSH_RELEASE SSH_VERSION SSH_PORTABLE +-+#define SSH_HPN "-hpn15v2" +-+#define SSH_RELEASE SSH_VERSION SSH_PORTABLE SSH_HPN diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.6_p1-hpn-version.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.6_p1-hpn-version.patch new file mode 100644 index 0000000000..6dc290d673 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.6_p1-hpn-version.patch @@ -0,0 +1,13 @@ +diff --git a/kex.c b/kex.c +index 34808b5c..88d7ccac 100644 +--- a/kex.c ++++ b/kex.c +@@ -1205,7 +1205,7 @@ kex_exchange_identification(struct ssh *ssh, int timeout_ms, + if (version_addendum != NULL && *version_addendum == '\0') + version_addendum = NULL; + if ((r = sshbuf_putf(our_version, "SSH-%d.%d-%.100s%s%s\r\n", +- PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2, SSH_VERSION, ++ PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2, SSH_RELEASE, + version_addendum == NULL ? "" : " ", + version_addendum == NULL ? "" : version_addendum)) != 0) { + oerrno = errno; diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.7_p1-GSSAPI-dns.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.7_p1-GSSAPI-dns.patch new file mode 100644 index 0000000000..ffc40b70ae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.7_p1-GSSAPI-dns.patch @@ -0,0 +1,357 @@ +diff --git a/auth.c b/auth.c +index 00b168b4..8ee93581 100644 +--- a/auth.c ++++ b/auth.c +@@ -729,118 +729,6 @@ fakepw(void) + return (&fake); + } + +-/* +- * Returns the remote DNS hostname as a string. The returned string must not +- * be freed. NB. this will usually trigger a DNS query the first time it is +- * called. +- * This function does additional checks on the hostname to mitigate some +- * attacks on based on conflation of hostnames and IP addresses. +- */ +- +-static char * +-remote_hostname(struct ssh *ssh) +-{ +- struct sockaddr_storage from; +- socklen_t fromlen; +- struct addrinfo hints, *ai, *aitop; +- char name[NI_MAXHOST], ntop2[NI_MAXHOST]; +- const char *ntop = ssh_remote_ipaddr(ssh); +- +- /* Get IP address of client. */ +- fromlen = sizeof(from); +- memset(&from, 0, sizeof(from)); +- if (getpeername(ssh_packet_get_connection_in(ssh), +- (struct sockaddr *)&from, &fromlen) == -1) { +- debug("getpeername failed: %.100s", strerror(errno)); +- return xstrdup(ntop); +- } +- +- ipv64_normalise_mapped(&from, &fromlen); +- if (from.ss_family == AF_INET6) +- fromlen = sizeof(struct sockaddr_in6); +- +- debug3("Trying to reverse map address %.100s.", ntop); +- /* Map the IP address to a host name. */ +- if (getnameinfo((struct sockaddr *)&from, fromlen, name, sizeof(name), +- NULL, 0, NI_NAMEREQD) != 0) { +- /* Host name not found. Use ip address. */ +- return xstrdup(ntop); +- } +- +- /* +- * if reverse lookup result looks like a numeric hostname, +- * someone is trying to trick us by PTR record like following: +- * 1.1.1.10.in-addr.arpa. IN PTR 2.3.4.5 +- */ +- memset(&hints, 0, sizeof(hints)); +- hints.ai_socktype = SOCK_DGRAM; /*dummy*/ +- hints.ai_flags = AI_NUMERICHOST; +- if (getaddrinfo(name, NULL, &hints, &ai) == 0) { +- logit("Nasty PTR record \"%s\" is set up for %s, ignoring", +- name, ntop); +- freeaddrinfo(ai); +- return xstrdup(ntop); +- } +- +- /* Names are stored in lowercase. */ +- lowercase(name); +- +- /* +- * Map it back to an IP address and check that the given +- * address actually is an address of this host. This is +- * necessary because anyone with access to a name server can +- * define arbitrary names for an IP address. Mapping from +- * name to IP address can be trusted better (but can still be +- * fooled if the intruder has access to the name server of +- * the domain). +- */ +- memset(&hints, 0, sizeof(hints)); +- hints.ai_family = from.ss_family; +- hints.ai_socktype = SOCK_STREAM; +- if (getaddrinfo(name, NULL, &hints, &aitop) != 0) { +- logit("reverse mapping checking getaddrinfo for %.700s " +- "[%s] failed.", name, ntop); +- return xstrdup(ntop); +- } +- /* Look for the address from the list of addresses. */ +- for (ai = aitop; ai; ai = ai->ai_next) { +- if (getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop2, +- sizeof(ntop2), NULL, 0, NI_NUMERICHOST) == 0 && +- (strcmp(ntop, ntop2) == 0)) +- break; +- } +- freeaddrinfo(aitop); +- /* If we reached the end of the list, the address was not there. */ +- if (ai == NULL) { +- /* Address not found for the host name. */ +- logit("Address %.100s maps to %.600s, but this does not " +- "map back to the address.", ntop, name); +- return xstrdup(ntop); +- } +- return xstrdup(name); +-} +- +-/* +- * Return the canonical name of the host in the other side of the current +- * connection. The host name is cached, so it is efficient to call this +- * several times. +- */ +- +-const char * +-auth_get_canonical_hostname(struct ssh *ssh, int use_dns) +-{ +- static char *dnsname; +- +- if (!use_dns) +- return ssh_remote_ipaddr(ssh); +- else if (dnsname != NULL) +- return dnsname; +- else { +- dnsname = remote_hostname(ssh); +- return dnsname; +- } +-} +- + /* These functions link key/cert options to the auth framework */ + + /* Log sshauthopt options locally and (optionally) for remote transmission */ +diff --git a/canohost.c b/canohost.c +index a810da0e..18e9d8d4 100644 +--- a/canohost.c ++++ b/canohost.c +@@ -202,3 +202,117 @@ get_local_port(int sock) + { + return get_sock_port(sock, 1); + } ++ ++/* ++ * Returns the remote DNS hostname as a string. The returned string must not ++ * be freed. NB. this will usually trigger a DNS query the first time it is ++ * called. ++ * This function does additional checks on the hostname to mitigate some ++ * attacks on legacy rhosts-style authentication. ++ * XXX is RhostsRSAAuthentication vulnerable to these? ++ * XXX Can we remove these checks? (or if not, remove RhostsRSAAuthentication?) ++ */ ++ ++static char * ++remote_hostname(struct ssh *ssh) ++{ ++ struct sockaddr_storage from; ++ socklen_t fromlen; ++ struct addrinfo hints, *ai, *aitop; ++ char name[NI_MAXHOST], ntop2[NI_MAXHOST]; ++ const char *ntop = ssh_remote_ipaddr(ssh); ++ ++ /* Get IP address of client. */ ++ fromlen = sizeof(from); ++ memset(&from, 0, sizeof(from)); ++ if (getpeername(ssh_packet_get_connection_in(ssh), ++ (struct sockaddr *)&from, &fromlen) == -1) { ++ debug("getpeername failed: %.100s", strerror(errno)); ++ return xstrdup(ntop); ++ } ++ ++ ipv64_normalise_mapped(&from, &fromlen); ++ if (from.ss_family == AF_INET6) ++ fromlen = sizeof(struct sockaddr_in6); ++ ++ debug3("Trying to reverse map address %.100s.", ntop); ++ /* Map the IP address to a host name. */ ++ if (getnameinfo((struct sockaddr *)&from, fromlen, name, sizeof(name), ++ NULL, 0, NI_NAMEREQD) != 0) { ++ /* Host name not found. Use ip address. */ ++ return xstrdup(ntop); ++ } ++ ++ /* ++ * if reverse lookup result looks like a numeric hostname, ++ * someone is trying to trick us by PTR record like following: ++ * 1.1.1.10.in-addr.arpa. IN PTR 2.3.4.5 ++ */ ++ memset(&hints, 0, sizeof(hints)); ++ hints.ai_socktype = SOCK_DGRAM; /*dummy*/ ++ hints.ai_flags = AI_NUMERICHOST; ++ if (getaddrinfo(name, NULL, &hints, &ai) == 0) { ++ logit("Nasty PTR record \"%s\" is set up for %s, ignoring", ++ name, ntop); ++ freeaddrinfo(ai); ++ return xstrdup(ntop); ++ } ++ ++ /* Names are stored in lowercase. */ ++ lowercase(name); ++ ++ /* ++ * Map it back to an IP address and check that the given ++ * address actually is an address of this host. This is ++ * necessary because anyone with access to a name server can ++ * define arbitrary names for an IP address. Mapping from ++ * name to IP address can be trusted better (but can still be ++ * fooled if the intruder has access to the name server of ++ * the domain). ++ */ ++ memset(&hints, 0, sizeof(hints)); ++ hints.ai_family = from.ss_family; ++ hints.ai_socktype = SOCK_STREAM; ++ if (getaddrinfo(name, NULL, &hints, &aitop) != 0) { ++ logit("reverse mapping checking getaddrinfo for %.700s " ++ "[%s] failed.", name, ntop); ++ return xstrdup(ntop); ++ } ++ /* Look for the address from the list of addresses. */ ++ for (ai = aitop; ai; ai = ai->ai_next) { ++ if (getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop2, ++ sizeof(ntop2), NULL, 0, NI_NUMERICHOST) == 0 && ++ (strcmp(ntop, ntop2) == 0)) ++ break; ++ } ++ freeaddrinfo(aitop); ++ /* If we reached the end of the list, the address was not there. */ ++ if (ai == NULL) { ++ /* Address not found for the host name. */ ++ logit("Address %.100s maps to %.600s, but this does not " ++ "map back to the address.", ntop, name); ++ return xstrdup(ntop); ++ } ++ return xstrdup(name); ++} ++ ++/* ++ * Return the canonical name of the host in the other side of the current ++ * connection. The host name is cached, so it is efficient to call this ++ * several times. ++ */ ++ ++const char * ++auth_get_canonical_hostname(struct ssh *ssh, int use_dns) ++{ ++ static char *dnsname; ++ ++ if (!use_dns) ++ return ssh_remote_ipaddr(ssh); ++ else if (dnsname != NULL) ++ return dnsname; ++ else { ++ dnsname = remote_hostname(ssh); ++ return dnsname; ++ } ++} +diff --git a/readconf.c b/readconf.c +index 03369a08..b45898ce 100644 +--- a/readconf.c ++++ b/readconf.c +@@ -161,6 +161,7 @@ typedef enum { + oClearAllForwardings, oNoHostAuthenticationForLocalhost, + oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, + oAddressFamily, oGssAuthentication, oGssDelegateCreds, ++ oGssTrustDns, + oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, + oSendEnv, oSetEnv, oControlPath, oControlMaster, oControlPersist, + oHashKnownHosts, +@@ -207,9 +208,11 @@ static struct { + #if defined(GSSAPI) + { "gssapiauthentication", oGssAuthentication }, + { "gssapidelegatecredentials", oGssDelegateCreds }, ++ { "gssapitrustdns", oGssTrustDns }, + # else + { "gssapiauthentication", oUnsupported }, + { "gssapidelegatecredentials", oUnsupported }, ++ { "gssapitrustdns", oUnsupported }, + #endif + #ifdef ENABLE_PKCS11 + { "pkcs11provider", oPKCS11Provider }, +@@ -1117,6 +1120,10 @@ parse_time: + intptr = &options->gss_deleg_creds; + goto parse_flag; + ++ case oGssTrustDns: ++ intptr = &options->gss_trust_dns; ++ goto parse_flag; ++ + case oBatchMode: + intptr = &options->batch_mode; + goto parse_flag; +@@ -2307,6 +2314,7 @@ initialize_options(Options * options) + options->pubkey_authentication = -1; + options->gss_authentication = -1; + options->gss_deleg_creds = -1; ++ options->gss_trust_dns = -1; + options->password_authentication = -1; + options->kbd_interactive_authentication = -1; + options->kbd_interactive_devices = NULL; +@@ -2465,6 +2473,8 @@ fill_default_options(Options * options) + options->gss_authentication = 0; + if (options->gss_deleg_creds == -1) + options->gss_deleg_creds = 0; ++ if (options->gss_trust_dns == -1) ++ options->gss_trust_dns = 0; + if (options->password_authentication == -1) + options->password_authentication = 1; + if (options->kbd_interactive_authentication == -1) +diff --git a/readconf.h b/readconf.h +index f7d53b06..c3a91898 100644 +--- a/readconf.h ++++ b/readconf.h +@@ -40,6 +40,7 @@ typedef struct { + int hostbased_authentication; /* ssh2's rhosts_rsa */ + int gss_authentication; /* Try GSS authentication */ + int gss_deleg_creds; /* Delegate GSS credentials */ ++ int gss_trust_dns; /* Trust DNS for GSS canonicalization */ + int password_authentication; /* Try password + * authentication. */ + int kbd_interactive_authentication; /* Try keyboard-interactive auth. */ +diff --git a/ssh_config.5 b/ssh_config.5 +index cd0eea86..27101943 100644 +--- a/ssh_config.5 ++++ b/ssh_config.5 +@@ -832,6 +832,16 @@ The default is + Forward (delegate) credentials to the server. + The default is + .Cm no . ++Note that this option applies to protocol version 2 connections using GSSAPI. ++.It Cm GSSAPITrustDns ++Set to ++.Dq yes to indicate that the DNS is trusted to securely canonicalize ++the name of the host being connected to. If ++.Dq no, the hostname entered on the ++command line will be passed untouched to the GSSAPI library. ++The default is ++.Dq no . ++This option only applies to protocol version 2 connections using GSSAPI. + .It Cm HashKnownHosts + Indicates that + .Xr ssh 1 +diff --git a/sshconnect2.c b/sshconnect2.c +index fea50fab..aeff639b 100644 +--- a/sshconnect2.c ++++ b/sshconnect2.c +@@ -776,6 +776,13 @@ userauth_gssapi(struct ssh *ssh) + OM_uint32 min; + int r, ok = 0; + gss_OID mech = NULL; ++ const char *gss_host; ++ ++ if (options.gss_trust_dns) { ++ extern const char *auth_get_canonical_hostname(struct ssh *ssh, int use_dns); ++ gss_host = auth_get_canonical_hostname(ssh, 1); ++ } else ++ gss_host = authctxt->host; + + /* Try one GSSAPI method at a time, rather than sending them all at + * once. */ +@@ -790,7 +797,7 @@ userauth_gssapi(struct ssh *ssh) + elements[authctxt->mech_tried]; + /* My DER encoding requires length<128 */ + if (mech->length < 128 && ssh_gssapi_check_mechanism(&gssctxt, +- mech, authctxt->host)) { ++ mech, gss_host)) { + ok = 1; /* Mechanism works */ + } else { + authctxt->mech_tried++; diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.9_p1-allow-ppoll_time64.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.9_p1-allow-ppoll_time64.patch new file mode 100644 index 0000000000..8c46625aa2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.9_p1-allow-ppoll_time64.patch @@ -0,0 +1,14 @@ +diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c +index 2e065ba3..4ce80cb2 100644 +--- a/sandbox-seccomp-filter.c ++++ b/sandbox-seccomp-filter.c +@@ -276,6 +276,9 @@ static const struct sock_filter preauth_insns[] = { + #ifdef __NR_ppoll + SC_ALLOW(__NR_ppoll), + #endif ++#ifdef __NR_ppoll_time64 ++ SC_ALLOW(__NR_ppoll_time64), ++#endif + #ifdef __NR_poll + SC_ALLOW(__NR_poll), + #endif diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.9_p1-gss-use-HOST_NAME_MAX.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.9_p1-gss-use-HOST_NAME_MAX.patch new file mode 100644 index 0000000000..9e08b2a553 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-8.9_p1-gss-use-HOST_NAME_MAX.patch @@ -0,0 +1,13 @@ +diff --git a/gss-serv.c b/gss-serv.c +index b5d4bb2d..00e3d118 100644 +--- a/gss-serv.c ++++ b/gss-serv.c +@@ -105,7 +105,7 @@ ssh_gssapi_acquire_cred(Gssctxt *ctx) + gss_create_empty_oid_set(&status, &oidset); + gss_add_oid_set_member(&status, ctx->oid, &oidset); + +- if (gethostname(lname, MAXHOSTNAMELEN)) { ++ if (gethostname(lname, HOST_NAME_MAX)) { + gss_release_oid_set(&status, &oidset); + return (-1); + } diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-9.0_p1-X509-uninitialized-delay.patch b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-9.0_p1-X509-uninitialized-delay.patch new file mode 100644 index 0000000000..2a83ed37d1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/openssh-9.0_p1-X509-uninitialized-delay.patch @@ -0,0 +1,12 @@ +diff -ur a/auth2.c b/auth2.c +--- a/auth2.c 2022-05-19 15:59:32.875160028 -0700 ++++ b/auth2.c 2022-05-19 16:03:44.291594908 -0700 +@@ -226,7 +226,7 @@ + int digest_alg; + size_t len; + u_char *hash; +- double delay; ++ double delay = 0; + + digest_alg = ssh_digest_maxbytes(); + if (len = ssh_digest_bytes(digest_alg) > 0) { diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.pam_include.2 b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.pam_include.2 new file mode 100644 index 0000000000..b801aaafa0 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.pam_include.2 @@ -0,0 +1,4 @@ +auth include system-remote-login +account include system-remote-login +password include system-remote-login +session include system-remote-login diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.service.1 b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.service.1 new file mode 100644 index 0000000000..a541164cd7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.service.1 @@ -0,0 +1,15 @@ +[Unit] +Description=OpenSSH server daemon +After=network.target auditd.service + +[Service] +ExecStartPre=/usr/bin/ssh-keygen -A +ExecStart=/usr/sbin/sshd -D -e +ExecReload=/bin/kill -HUP $MAINPID +KillMode=process +OOMPolicy=continue +Restart=on-failure +RestartSec=42s + +[Install] +WantedBy=multi-user.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.socket b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.socket new file mode 100644 index 0000000000..d19f34be86 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd.socket @@ -0,0 +1,11 @@ +[Unit] +Description=OpenSSH Server Socket +Conflicts=sshd.service + +[Socket] +ListenStream=22 +Accept=yes +TriggerLimitBurst=0 + +[Install] +WantedBy=sockets.target diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd_at.service.1 b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd_at.service.1 new file mode 100644 index 0000000000..e43a457994 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/files/sshd_at.service.1 @@ -0,0 +1,8 @@ +[Unit] +Description=OpenSSH per-connection server daemon +After=auditd.service + +[Service] +ExecStart=-/usr/sbin/sshd -i -e +StandardInput=socket +StandardError=journal diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/metadata.xml b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/metadata.xml new file mode 100644 index 0000000000..9f064cdd11 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/metadata.xml @@ -0,0 +1,36 @@ + + + + + base-system@gentoo.org + Gentoo Base System + + +OpenSSH is a FREE version of the SSH protocol suite of network connectivity tools that +increasing numbers of people on the Internet are coming to rely on. Many users of telnet, +rlogin, ftp, and other such programs might not realize that their password is transmitted +across the Internet unencrypted, but it is. OpenSSH encrypts all traffic (including passwords) +to effectively eliminate eavesdropping, connection hijacking, and other network-level attacks. +Additionally, OpenSSH provides a myriad of secure tunneling capabilities, as well as a variety +of authentication methods. + +The OpenSSH suite includes the ssh program which replaces rlogin and telnet, scp which +replaces rcp, and sftp which replaces ftp. Also included is sshd which is the server side of +the package, and the other basic utilities like ssh-add, ssh-agent, ssh-keysign, ssh-keyscan, +ssh-keygen and sftp-server. OpenSSH supports SSH protocol versions 1.3, 1.5, and 2.0. + + + Enable high performance ssh + Use LDNS for DNSSEC/SSHFP validation. + Enable root password logins for live-cd environment. + Include builtin U2F/FIDO support + Enable additional crypto algorithms via OpenSSL + Adds support for X.509 certificate authentication + Enable XMSS post-quantum authentication algorithm + + + cpe:/a:openbsd:openssh + openssh/openssh-portable + hpnssh + + diff --git a/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/openssh-9.2_p1-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/openssh-9.2_p1-r2.ebuild new file mode 100644 index 0000000000..6b5f361ccc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/net-misc/openssh/openssh-9.2_p1-r2.ebuild @@ -0,0 +1,515 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit user-info flag-o-matic autotools pam systemd toolchain-funcs verify-sig + +# Make it more portable between straight releases +# and _p? releases. +PARCH=${P/_} + +# PV to USE for HPN patches +#HPN_PV="${PV^^}" +HPN_PV="8.5_P1" + +HPN_VER="15.2" +HPN_PATCHES=( + ${PN}-${HPN_PV/./_}-hpn-DynWinNoneSwitch-${HPN_VER}.diff + ${PN}-${HPN_PV/./_}-hpn-AES-CTR-${HPN_VER}.diff + ${PN}-${HPN_PV/./_}-hpn-PeakTput-${HPN_VER}.diff +) +HPN_GLUE_PATCH="${PN}-9.2_p1-hpn-${HPN_VER}-glue.patch" +HPN_PATCH_DIR="HPN-SSH%%20${HPN_VER/./v}%%20${HPN_PV/_P/p}" + +SCTP_VER="1.2" +SCTP_PATCH="${PARCH}-sctp-${SCTP_VER}.patch.xz" + +X509_VER="14.1" +X509_PATCH="${PARCH}+x509-${X509_VER}.diff.gz" +X509_GLUE_PATCH="${P}-X509-glue-${X509_VER}.patch" +X509_HPN_GLUE_PATCH="${PN}-9.2_p1-hpn-${HPN_VER}-X509-${X509_VER}-glue.patch" + +DESCRIPTION="Port of OpenBSD's free SSH release" +HOMEPAGE="https://www.openssh.com/" +SRC_URI="mirror://openbsd/OpenSSH/portable/${PARCH}.tar.gz + ${SCTP_PATCH:+sctp? ( https://dev.gentoo.org/~chutzpah/dist/openssh/${SCTP_PATCH} )} + ${HPN_VER:+hpn? ( + $(printf "mirror://sourceforge/project/hpnssh/Patches/${HPN_PATCH_DIR}/%s\n" "${HPN_PATCHES[@]}") + https://dev.gentoo.org/~chutzpah/dist/openssh/${HPN_GLUE_PATCH}.xz + )} + ${X509_PATCH:+X509? ( + https://roumenpetrov.info/openssh/x509-${X509_VER}/${X509_PATCH} + https://dev.gentoo.org/~chutzpah/dist/openssh/${X509_GLUE_PATCH}.xz + ${HPN_VER:+hpn? ( https://dev.gentoo.org/~chutzpah/dist/openssh/${X509_HPN_GLUE_PATCH}.xz )} + )} + verify-sig? ( mirror://openbsd/OpenSSH/portable/${PARCH}.tar.gz.asc ) +" +VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/openssh.org.asc +S="${WORKDIR}/${PARCH}" + +LICENSE="BSD GPL-2" +SLOT="0" +KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x64-cygwin ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" +# Probably want to drop ssl defaulting to on in a future version. +IUSE="abi_mips_n32 audit debug hpn kerberos ldns libedit livecd pam +pie sctp security-key selinux +ssl static test X X509 xmss" + +RESTRICT="!test? ( test )" + +REQUIRED_USE=" + hpn? ( ssl ) + ldns? ( ssl ) + pie? ( !static ) + static? ( !kerberos !pam ) + X509? ( !sctp ssl !xmss ) + xmss? ( ssl ) + test? ( ssl ) +" + +# tests currently fail with XMSS +REQUIRED_USE+="test? ( !xmss )" + +# Blocker on older gcc-config for bug #872416 +LIB_DEPEND=" + !=dev-libs/libfido2-1.5.0:=[static-libs(+)] ) + selinux? ( >=sys-libs/libselinux-1.28[static-libs(+)] ) + ssl? ( >=dev-libs/openssl-1.1.1l-r1:0=[static-libs(+)] ) + virtual/libcrypt:=[static-libs(+)] + >=sys-libs/zlib-1.2.3:=[static-libs(+)] +" +RDEPEND=" + acct-group/sshd + acct-user/sshd + !static? ( ${LIB_DEPEND//\[static-libs(+)]} ) + pam? ( sys-libs/pam ) + kerberos? ( virtual/krb5 ) +" +DEPEND="${RDEPEND} + virtual/os-headers + kernel_linux? ( !prefix-guest? ( >=sys-kernel/linux-headers-5.1 ) ) + static? ( ${LIB_DEPEND} ) +" +RDEPEND="${RDEPEND} + pam? ( >=sys-auth/pambase-20081028 ) + !prefix? ( sys-apps/shadow ) + X? ( x11-apps/xauth ) +" +# Weird dep construct for newer gcc-config for bug #872416 +BDEPEND=" + sys-devel/autoconf + virtual/pkgconfig + || ( + >=sys-devel/gcc-config-2.6 + >=sys-devel/clang-toolchain-symlinks-14-r1:14 + >=sys-devel/clang-toolchain-symlinks-15-r1:15 + >=sys-devel/clang-toolchain-symlinks-16-r1:* + ) + verify-sig? ( sec-keys/openpgp-keys-openssh ) +" + +PATCHES=( + "${FILESDIR}/${PN}-7.9_p1-include-stdlib.patch" + "${FILESDIR}/${PN}-8.7_p1-GSSAPI-dns.patch" #165444 integrated into gsskex + "${FILESDIR}/${PN}-6.7_p1-openssl-ignore-status.patch" + "${FILESDIR}/${PN}-7.5_p1-disable-conch-interop-tests.patch" + "${FILESDIR}/${PN}-8.0_p1-fix-putty-tests.patch" + "${FILESDIR}/${PN}-8.0_p1-deny-shmget-shmat-shmdt-in-preauth-privsep-child.patch" + "${FILESDIR}/${PN}-8.9_p1-allow-ppoll_time64.patch" #834019 + "${FILESDIR}/${PN}-8.9_p1-gss-use-HOST_NAME_MAX.patch" #834044 +) + +pkg_pretend() { + # this sucks, but i'd rather have people unable to `emerge -u openssh` + # than not be able to log in to their server any more + local missing=() + check_feature() { use "${1}" && [[ -z ${!2} ]] && missing+=( "${1}" ); } + check_feature hpn HPN_VER + check_feature sctp SCTP_PATCH + check_feature X509 X509_PATCH + if [[ ${#missing[@]} -ne 0 ]] ; then + eerror "Sorry, but this version does not yet support features" + eerror "that you requested: ${missing[*]}" + eerror "Please mask ${PF} for now and check back later:" + eerror " # echo '=${CATEGORY}/${PF}' >> /etc/portage/package.mask" + die "Missing requested third party patch." + fi + + # Make sure people who are using tcp wrappers are notified of its removal. #531156 + if grep -qs '^ *sshd *:' "${EROOT}"/etc/hosts.{allow,deny} ; then + ewarn "Sorry, but openssh no longer supports tcp-wrappers, and it seems like" + ewarn "you're trying to use it. Update your ${EROOT}/etc/hosts.{allow,deny} please." + fi +} + +src_unpack() { + default + + # We don't have signatures for HPN, X509, so we have to write this ourselves + use verify-sig && verify-sig_verify_detached "${DISTDIR}"/${PARCH}.tar.gz{,.asc} +} + +src_prepare() { + sed -i \ + -e "/_PATH_XAUTH/s:/usr/X11R6/bin/xauth:${EPREFIX}/usr/bin/xauth:" \ + pathnames.h || die + + # don't break .ssh/authorized_keys2 for fun + sed -i '/^AuthorizedKeysFile/s:^:#:' sshd_config || die + + eapply -- "${PATCHES[@]}" + + [[ -d ${WORKDIR}/patches ]] && eapply "${WORKDIR}"/patches + + local PATCHSET_VERSION_MACROS=() + + if use X509 ; then + pushd "${WORKDIR}" &>/dev/null || die + eapply "${WORKDIR}/${X509_GLUE_PATCH}" + popd &>/dev/null || die + + eapply "${WORKDIR}"/${X509_PATCH%.*} + eapply "${FILESDIR}/${PN}-9.0_p1-X509-uninitialized-delay.patch" + + # We need to patch package version or any X.509 sshd will reject our ssh client + # with "userauth_pubkey: could not parse key: string is too large [preauth]" + # error + einfo "Patching package version for X.509 patch set ..." + sed -i \ + -e "s/^AC_INIT(\[OpenSSH\], \[Portable\]/AC_INIT([OpenSSH], [${X509_VER}]/" \ + "${S}"/configure.ac || die "Failed to patch package version for X.509 patch" + + einfo "Patching version.h to expose X.509 patch set ..." + sed -i \ + -e "/^#define SSH_PORTABLE.*/a #define SSH_X509 \"-PKIXSSH-${X509_VER}\"" \ + "${S}"/version.h || die "Failed to sed-in X.509 patch version" + PATCHSET_VERSION_MACROS+=( 'SSH_X509' ) + fi + + if use sctp ; then + eapply "${WORKDIR}"/${SCTP_PATCH%.*} + + einfo "Patching version.h to expose SCTP patch set ..." + sed -i \ + -e "/^#define SSH_PORTABLE/a #define SSH_SCTP \"-sctp-${SCTP_VER}\"" \ + "${S}"/version.h || die "Failed to sed-in SCTP patch version" + PATCHSET_VERSION_MACROS+=( 'SSH_SCTP' ) + + einfo "Disabling known failing test (cfgparse) caused by SCTP patch ..." + sed -i \ + -e "/\t\tcfgparse \\\/d" \ + "${S}"/regress/Makefile || die "Failed to disable known failing test (cfgparse) caused by SCTP patch" + fi + + if use hpn ; then + local hpn_patchdir="${T}/${P}-hpn${HPN_VER}" + mkdir "${hpn_patchdir}" || die + cp $(printf -- "${DISTDIR}/%s\n" "${HPN_PATCHES[@]}") "${hpn_patchdir}" || die + pushd "${hpn_patchdir}" &>/dev/null || die + eapply "${WORKDIR}/${HPN_GLUE_PATCH}" + use X509 && eapply "${WORKDIR}/${X509_HPN_GLUE_PATCH}" + use sctp && eapply "${FILESDIR}"/${PN}-8.5_p1-hpn-${HPN_VER}-sctp-glue.patch + popd &>/dev/null || die + + eapply "${hpn_patchdir}" + + use X509 || eapply "${FILESDIR}/openssh-8.6_p1-hpn-version.patch" + + einfo "Patching Makefile.in for HPN patch set ..." + sed -i \ + -e "/^LIBS=/ s/\$/ -lpthread/" \ + "${S}"/Makefile.in || die "Failed to patch Makefile.in" + + einfo "Patching version.h to expose HPN patch set ..." + sed -i \ + -e "/^#define SSH_PORTABLE/a #define SSH_HPN \"-hpn${HPN_VER//./v}\"" \ + "${S}"/version.h || die "Failed to sed-in HPN patch version" + PATCHSET_VERSION_MACROS+=( 'SSH_HPN' ) + + if [[ -n "${HPN_DISABLE_MTAES}" ]] ; then + einfo "Disabling known non-working MT AES cipher per default ..." + + cat > "${T}"/disable_mtaes.conf <<- EOF + + # HPN's Multi-Threaded AES CTR cipher is currently known to be broken + # and therefore disabled per default. + DisableMTAES yes + EOF + sed -i \ + -e "/^#HPNDisabled.*/r ${T}/disable_mtaes.conf" \ + "${S}"/sshd_config || die "Failed to disabled MT AES ciphers in sshd_config" + + sed -i \ + -e "/AcceptEnv.*_XXX_TEST$/a \\\tDisableMTAES\t\tyes" \ + "${S}"/regress/test-exec.sh || die "Failed to disable MT AES ciphers in test config" + fi + fi + + if use X509 || use sctp || use hpn ; then + einfo "Patching sshconnect.c to use SSH_RELEASE in send_client_banner() ..." + sed -i \ + -e "s/PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2, SSH_VERSION/PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2, SSH_RELEASE/" \ + "${S}"/sshconnect.c || die "Failed to patch send_client_banner() to use SSH_RELEASE (sshconnect.c)" + + einfo "Patching sshd.c to use SSH_RELEASE in sshd_exchange_identification() ..." + sed -i \ + -e "s/PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2, SSH_VERSION/PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2, SSH_RELEASE/" \ + "${S}"/sshd.c || die "Failed to patch sshd_exchange_identification() to use SSH_RELEASE (sshd.c)" + + einfo "Patching version.h to add our patch sets to SSH_RELEASE ..." + sed -i \ + -e "s/^#define SSH_RELEASE.*/#define SSH_RELEASE SSH_VERSION SSH_PORTABLE ${PATCHSET_VERSION_MACROS[*]}/" \ + "${S}"/version.h || die "Failed to patch SSH_RELEASE (version.h)" + fi + + eapply_user #473004 + + # These tests are currently incompatible with PORTAGE_TMPDIR/sandbox + sed -e '/\t\tpercent \\/ d' \ + -i regress/Makefile || die + + tc-export PKG_CONFIG + local sed_args=( + -e "s:-lcrypto:$(${PKG_CONFIG} --libs openssl):" + # Disable fortify flags ... our gcc does this for us + -e 's:-D_FORTIFY_SOURCE=2::' + ) + + # The -ftrapv flag ICEs on hppa #505182 + use hppa && sed_args+=( + -e '/CFLAGS/s:-ftrapv:-fdisable-this-test:' + -e '/OSSH_CHECK_CFLAG_LINK.*-ftrapv/d' + ) + # _XOPEN_SOURCE causes header conflicts on Solaris + [[ ${CHOST} == *-solaris* ]] && sed_args+=( + -e 's/-D_XOPEN_SOURCE//' + ) + sed -i "${sed_args[@]}" configure{.ac,} || die + + eautoreconf +} + +src_configure() { + addwrite /dev/ptmx + + use debug && append-cppflags -DSANDBOX_SECCOMP_FILTER_DEBUG + use static && append-ldflags -static + use xmss && append-cflags -DWITH_XMSS + + if [[ ${CHOST} == *-solaris* ]] ; then + # Solaris' glob.h doesn't have things like GLOB_TILDE, configure + # doesn't check for this, so force the replacement to be put in + # place + append-cppflags -DBROKEN_GLOB + fi + + # use replacement, RPF_ECHO_ON doesn't exist here + [[ ${CHOST} == *-darwin* ]] && export ac_cv_func_readpassphrase=no + + local myconf=( + --with-ldflags="${LDFLAGS}" + --disable-strip + --with-pid-dir="${EPREFIX}"$(usex kernel_linux '' '/var')/run + --sysconfdir="${EPREFIX}"/etc/ssh + --libexecdir="${EPREFIX}"/usr/$(get_libdir)/misc + --datadir="${EPREFIX}"/usr/share/openssh + --with-privsep-path="${EPREFIX}"/var/empty + --with-privsep-user=sshd + $(use_with audit audit linux) + $(use_with kerberos kerberos5 "${EPREFIX}"/usr) + # We apply the sctp patch conditionally, so can't pass --without-sctp + # unconditionally else we get unknown flag warnings. + $(use sctp && use_with sctp) + $(use_with ldns) + $(use_with libedit) + $(use_with pam) + $(use_with pie) + $(use_with selinux) + $(usex X509 '' "$(use_with security-key security-key-builtin)") + $(use_with ssl openssl) + $(use_with ssl ssl-engine) + $(use_with !elibc_Cygwin hardening) #659210 + ) + + if use elibc_musl; then + # musl defines bogus values for UTMP_FILE and WTMP_FILE + # https://bugs.gentoo.org/753230 + myconf+=( --disable-utmp --disable-wtmp ) + fi + + # Workaround for Clang 15 miscompilation with -fzero-call-used-regs=all + # bug #869839 (https://github.com/llvm/llvm-project/issues/57692) + tc-is-clang && myconf+=( --without-hardening ) + + econf "${myconf[@]}" +} + +src_test() { + local tests=( compat-tests ) + local shell=$(egetshell "${UID}") + if [[ ${shell} == */nologin ]] || [[ ${shell} == */false ]] ; then + ewarn "Running the full OpenSSH testsuite requires a usable shell for the 'portage'" + ewarn "user, so we will run a subset only." + tests+=( interop-tests ) + else + tests+=( tests ) + fi + + local -x SUDO= SSH_SK_PROVIDER= TEST_SSH_UNSAFE_PERMISSIONS=1 + mkdir -p "${HOME}"/.ssh || die + emake -j1 "${tests[@]}" > "${ED}"/etc/ssh/sshd_config + + # Allow client to pass locale environment variables. #367017 + AcceptEnv ${locale_vars[*]} + + # Allow client to pass COLORTERM to match TERM. #658540 + AcceptEnv COLORTERM + EOF + + # Then the client config. + cat <<-EOF >> "${ED}"/etc/ssh/ssh_config + + # Send locale environment variables. #367017 + SendEnv ${locale_vars[*]} + + # Send COLORTERM to match TERM. #658540 + SendEnv COLORTERM + EOF + + if use pam ; then + sed -i \ + -e "/^#UsePAM /s:.*:UsePAM yes:" \ + -e "/^#PasswordAuthentication /s:.*:PasswordAuthentication no:" \ + -e "/^#PrintMotd /s:.*:PrintMotd no:" \ + -e "/^#PrintLastLog /s:.*:PrintLastLog no:" \ + "${ED}"/etc/ssh/sshd_config || die + fi + + if use livecd ; then + sed -i \ + -e '/^#PermitRootLogin/c# Allow root login with password on livecds.\nPermitRootLogin Yes' \ + "${ED}"/etc/ssh/sshd_config || die + fi +} + +src_install() { + emake install-nokeys DESTDIR="${D}" + fperms 600 /etc/ssh/sshd_config + dobin contrib/ssh-copy-id + + if use pam; then + newpamd "${FILESDIR}"/sshd.pam_include.2 sshd + fi + + tweak_ssh_configs + + doman contrib/ssh-copy-id.1 + dodoc CREDITS OVERVIEW README* TODO sshd_config + use hpn && dodoc HPN-README + use X509 || dodoc ChangeLog + + diropts -m 0700 + dodir /etc/skel/.ssh + rmdir "${ED}"/var/empty || die + + systemd_dounit "${FILESDIR}"/sshd.socket + systemd_newunit "${FILESDIR}"/sshd.service.1 sshd.service + systemd_newunit "${FILESDIR}"/sshd_at.service.1 'sshd@.service' +} + +pkg_preinst() { + if ! use ssl && has_version "${CATEGORY}/${PN}[ssl]"; then + show_ssl_warning=1 + fi +} + +pkg_postinst() { + local old_ver + for old_ver in ${REPLACING_VERSIONS}; do + if ver_test "${old_ver}" -lt "5.8_p1"; then + elog "Starting with openssh-5.8p1, the server will default to a newer key" + elog "algorithm (ECDSA). You are encouraged to manually update your stored" + elog "keys list as servers update theirs. See ssh-keyscan(1) for more info." + fi + if ver_test "${old_ver}" -lt "7.0_p1"; then + elog "Starting with openssh-6.7, support for USE=tcpd has been dropped by upstream." + elog "Make sure to update any configs that you might have. Note that xinetd might" + elog "be an alternative for you as it supports USE=tcpd." + fi + if ver_test "${old_ver}" -lt "7.1_p1"; then #557388 #555518 + elog "Starting with openssh-7.0, support for ssh-dss keys were disabled due to their" + elog "weak sizes. If you rely on these key types, you can re-enable the key types by" + elog "adding to your sshd_config or ~/.ssh/config files:" + elog " PubkeyAcceptedKeyTypes=+ssh-dss" + elog "You should however generate new keys using rsa or ed25519." + + elog "Starting with openssh-7.0, the default for PermitRootLogin changed from 'yes'" + elog "to 'prohibit-password'. That means password auth for root users no longer works" + elog "out of the box. If you need this, please update your sshd_config explicitly." + fi + if ver_test "${old_ver}" -lt "7.6_p1"; then + elog "Starting with openssh-7.6p1, openssh upstream has removed ssh1 support entirely." + elog "Furthermore, rsa keys with less than 1024 bits will be refused." + fi + if ver_test "${old_ver}" -lt "7.7_p1"; then + elog "Starting with openssh-7.7p1, we no longer patch openssh to provide LDAP functionality." + elog "Install sys-auth/ssh-ldap-pubkey and use OpenSSH's \"AuthorizedKeysCommand\" option" + elog "if you need to authenticate against LDAP." + elog "See https://wiki.gentoo.org/wiki/SSH/LDAP_migration for more details." + fi + if ver_test "${old_ver}" -lt "8.2_p1"; then + ewarn "After upgrading to openssh-8.2p1 please restart sshd, otherwise you" + ewarn "will not be able to establish new sessions. Restarting sshd over a ssh" + ewarn "connection is generally safe." + fi + if ver_test "${old_ver}" -lt "9.2_p1-r1" && systemd_is_booted; then + ewarn "From openssh-9.2_p1-r1 the supplied systemd unit file defaults to" + ewarn "'Restart=on-failure', which causes the service to automatically restart if it" + ewarn "terminates with an unclean exit code or signal. This feature is useful for most users," + ewarn "but it can increase the vulnerability of the system in the event of a future exploit." + ewarn "If you have a web-facing setup or are concerned about security, it is recommended to" + ewarn "set 'Restart=no' in your sshd unit file." + fi + done + + if [[ -n ${show_ssl_warning} ]]; then + elog "Be aware that by disabling openssl support in openssh, the server and clients" + elog "no longer support dss/rsa/ecdsa keys. You will need to generate ed25519 keys" + elog "and update all clients/servers that utilize them." + fi + + if use hpn && [[ -n "${HPN_DISABLE_MTAES}" ]] ; then + elog "" + elog "HPN's multi-threaded AES CTR cipher is currently known to be broken" + elog "and therefore disabled at runtime per default." + elog "Make sure your sshd_config is up to date and contains" + elog "" + elog " DisableMTAES yes" + elog "" + elog "Otherwise you maybe unable to connect to this sshd using any AES CTR cipher." + elog "" + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/categories b/sdk_container/src/third_party/coreos-overlay/profiles/categories new file mode 100644 index 0000000000..8afb9b905b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/categories @@ -0,0 +1,3 @@ +app-torcx +coreos-base +coreos-devel diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/README new file mode 100644 index 0000000000..e7155fd5dd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/README @@ -0,0 +1,4 @@ +This profile (and its sub-profiles) should *only* contain amd64 +architecture specific settings. Architecture independent settings should +go under coreos/base (applies to everything) or coreos/targets/* +(applies to the sdk, amd64-usr, etc.). diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/dev/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/dev/parent new file mode 100644 index 0000000000..35ac69992e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/dev/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic/dev diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/make.defaults new file mode 100644 index 0000000000..08b984e03f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/make.defaults @@ -0,0 +1,3 @@ +# Enable optimizations for common x86_64 CPUs +CFLAGS="-O2 -pipe -mtune=generic -g" +CXXFLAGS="${CFLAGS}" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/oem-aci/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/oem-aci/parent new file mode 100644 index 0000000000..cfacbaa8c8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/oem-aci/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic/oem-aci diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use new file mode 100644 index 0000000000..d71d119c57 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use @@ -0,0 +1,6 @@ +# Only ship microcode currently distributed by Intel +# See https://bugs.gentoo.org/654638#c11 by iucode-tool maintainer +sys-firmware/intel-microcode vanilla + +# Enable gssapi only for amd64, to avoid build errors in arm64. +net-dns/bind-tools gssapi diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/parent new file mode 100644 index 0000000000..767f085901 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/prod/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/prod/parent new file mode 100644 index 0000000000..89b629a19e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/prod/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic/prod diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/use.mask new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/make.defaults new file mode 100644 index 0000000000..fdf4402a09 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/make.defaults @@ -0,0 +1,8 @@ +# Disable PAX use flags, we don't use grsec kernels +# Don't favor /dev/urandom over /dev/random, not sure why this flag +# is enabled in hardened, the default profiles do not enable it. +BOOTSTRAP_USE="${BOOTSTRAP_USE} -pax_kernel -xtpax" +USE="-pax_kernel -urandom -xtpax" + +# Enable our assorted Grub targets +GRUB_PLATFORMS="efi-64 pc xen" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/packages b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/packages new file mode 100644 index 0000000000..511adccb20 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/packages @@ -0,0 +1,3 @@ +# Disable PAX utilities, we don't use grsec kernels +-*sys-apps/paxctl +-*sys-apps/elfix diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/parent new file mode 100644 index 0000000000..b15d5c1cf9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/parent @@ -0,0 +1,2 @@ +portage-stable:default/linux/amd64/17.1/no-multilib/hardened +:coreos/base diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/make.defaults new file mode 100644 index 0000000000..254f8753a5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/make.defaults @@ -0,0 +1,3 @@ +# Enable optimizations for common x86_64 CPUs +CFLAGS="-O2 -pipe -mtune=generic" +CXXFLAGS="${CFLAGS}" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/package.use new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/parent new file mode 100644 index 0000000000..f0c938676d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/sdk diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/sdk/use.mask new file mode 100644 index 0000000000..e69de29bb2 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/README new file mode 100644 index 0000000000..0e500caef1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/README @@ -0,0 +1,4 @@ +This profile (and its sub-profiles) should *only* contain +architecture specific settings. Architecture independent settings should +go under coreos/base (applies to everything) or coreos/targets/* +(applies to the sdk, amd64-usr, etc.). diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/dev/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/dev/parent new file mode 100644 index 0000000000..35ac69992e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/dev/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic/dev diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/make.defaults new file mode 100644 index 0000000000..a7f431d3ca --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/make.defaults @@ -0,0 +1,2 @@ +CFLAGS="-O2 -pipe -mtune=generic -g" +CXXFLAGS="${CFLAGS}" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/oem-aci/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/oem-aci/parent new file mode 100644 index 0000000000..cfacbaa8c8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/oem-aci/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic/oem-aci diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/parent new file mode 100644 index 0000000000..767f085901 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/prod/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/prod/parent new file mode 100644 index 0000000000..89b629a19e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/generic/prod/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/generic/prod diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/make.defaults new file mode 100644 index 0000000000..94b0ffe8f7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/make.defaults @@ -0,0 +1,2 @@ +# platform "pc" is not supported for target CPU "arm64" +GRUB_PLATFORMS="efi-64" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords new file mode 100644 index 0000000000..6b6ab4b81a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords @@ -0,0 +1,45 @@ +# arm64 keywords +# Keep these in alphabetical order. + +# needed by arm64-native SDK +=app-emulation/open-vmdk-1.0 * +=app-crypt/rhash-1.4.2 ~arm64 + +=dev-embedded/u-boot-tools-2021.04_rc2 ~arm64 + +# needed by arm64-native SDK +=dev-lang/nasm-2.15.05 ~arm64 + +=dev-lang/yasm-1.3.0-r1 ~arm64 + +# needed to force enable bpftool for arm64 +=dev-util/bpftool-5.19.12 ** + +=net-dns/c-ares-1.17.2 ~arm64 + +=net-firewall/conntrack-tools-1.4.6-r1 ~arm64 +=net-libs/libnetfilter_cthelper-1.0.0-r1 ~arm64 +=net-libs/libnetfilter_cttimeout-1.0.0-r1 ~arm64 + +=sec-policy/selinux-base-2.20200818-r2 ~arm64 +=sec-policy/selinux-base-policy-2.20200818-r2 ~arm64 +=sec-policy/selinux-unconfined-2.20200818-r2 ~arm64 +=sec-policy/selinux-virt-2.20200818-r2 ~arm64 +=sys-apps/checkpolicy-3.1 ~arm64 + +=sys-apps/policycoreutils-3.1-r3 ~arm64 +=sys-apps/kexec-tools-2.0.22 ~arm64 + +=sys-apps/semodule-utils-3.1 ~arm64 + +# needed to force enable ipvsadm for arm64 +=sys-cluster/ipvsadm-1.27-r1 ** + +=sys-firmware/edk2-aarch64-18.02 ** +=sys-libs/libselinux-3.1-r2 ~arm64 +=sys-libs/libsemanage-3.1-r1 ~arm64 +=sys-libs/libsepol-3.1 ~arm64 +=sys-process/tini-0.18.0 ~arm64 + +# Overwrite portage-stable mask - enable ding-libs for ARM64 +=dev-libs/ding-libs-0.6.1-r1 ~arm64 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.provided b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.provided new file mode 100644 index 0000000000..5ba4e598ed --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.provided @@ -0,0 +1 @@ +# arm64 provided diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use new file mode 100644 index 0000000000..d9c79b5d07 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use @@ -0,0 +1,4 @@ +# arm64 use + +# Disable gssapi for arm64 to avoid build errors +net-dns/bind-tools -gssapi diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/packages b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/packages new file mode 100644 index 0000000000..511adccb20 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/packages @@ -0,0 +1,3 @@ +# Disable PAX utilities, we don't use grsec kernels +-*sys-apps/paxctl +-*sys-apps/elfix diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/parent new file mode 100644 index 0000000000..ffc428f773 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/parent @@ -0,0 +1,2 @@ +portage-stable:default/linux/arm64/17.0/hardened +:coreos/base diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/sdk/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/sdk/make.defaults new file mode 100644 index 0000000000..01f715c2c2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/sdk/make.defaults @@ -0,0 +1,2 @@ +CFLAGS="-O2 -pipe -mtune=generic" +CXXFLAGS="${CFLAGS}" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/sdk/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/sdk/parent new file mode 100644 index 0000000000..f0c938676d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/sdk/parent @@ -0,0 +1,2 @@ +.. +:coreos/targets/sdk diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/use.mask new file mode 100644 index 0000000000..ff5beb9b41 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/use.mask @@ -0,0 +1 @@ +-ldap diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/README new file mode 100644 index 0000000000..596c3c6f65 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/README @@ -0,0 +1 @@ +Profile to apply to all coreos architectures and targets. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults new file mode 100644 index 0000000000..9a03b74c8b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults @@ -0,0 +1,122 @@ +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# ChromeOS-specific: CROS_WORKON_TREE for cros-workon +# TESTS USE_EXPAND for autotest +USE_EXPAND="${USE_EXPAND} CROS_WORKON_TREE TESTS" +USE_EXPAND_HIDDEN="${USE_EXPAND_HIDDEN} CROS_WORKON_TREE" + +# Use go_version_* flags to indicate which major version was used. +# For now this is only informational and set by coreos-go.eclass +USE_EXPAND="${USE_EXPAND} GO_VERSION" + +# Extra use flags for CoreOS SDK +USE="${USE} cros_host expat -cracklib -introspection -cups -tcpd -berkdb" + +# Use Python 3 as the default version +USE="${USE} -python_single_target_python2_7 python_single_target_python3_10" +USE="${USE} -python_targets_python2_7 python_targets_python3_10" + +# Use Python 3 as the default version +BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_single_target_python2_7 python_single_target_python3_10" +BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_targets_python2_7 python_targets_python3_10" + +# Never install cron or cron jobs +USE="${USE} -cron" + +# No need for zeroconf, that's a desktop world thing. +# Namely dhcpcd shoudln't make up random ipv4 addresses using ipv4ll +USE="${USE} -zeroconf" + +# No need for OpenMP support in GCC and other apps +USE="${USE} -openmp" + +# Let's enable FIPS support for supported software. +USE="${USE} fips" + +# The git-r3 eclass now depends on curl support, which is used in catalyst. +BOOTSTRAP_USE="${BOOTSTRAP_USE} curl" + +# Add `minimal` useflag to prevent texinfo to pull dev-lang/perl with not required set of dependencies. +BOOTSTRAP_USE="${BOOTSTRAP_USE} minimal" + +# Add `ssl` USE flag to make libcurl capable of fetching from https URLs. +BOOTSTRAP_USE="${BOOTSTRAP_USE} curl_ssl_openssl ssl" + +# Add `xml` USE flag to avoid build failures from sys-apps/portage 3.0.28 +BOOTSTRAP_USE="${BOOTSTRAP_USE} xml" + +# Set SELinux policy +POLICY_TYPES="targeted mcs mls" + +# Disable packages or optional features with distribution issues. +ACCEPT_RESTRICT="* -bindist" +USE="${USE} bindist" + +# Additional licenses accepted for Flatcar builds. +# +# netperf - license for net-analyzer/netperf +# no-source-code - license for sys-kernel/coreos-firmware +# freedist - license for sys-kernel/coreos-kernel +# BSD-2-Clause-Patent - license for sys-firmware/edk2-aarch64 +# intel-ucode - license for sys-firmware/intel-microcode +ACCEPT_LICENSE="${ACCEPT_LICENSE} netperf no-source-code freedist BSD-2-Clause-Patent intel-ucode" + +# Favor our own mirrors over Gentoo's +GENTOO_MIRRORS=" + https://mirror.release.flatcar-linux.net/portage-stable/ + https://mirror.release.flatcar-linux.net/coreos/ + http://distfiles.gentoo.org/ +" + +# The following files are modified by make_chroot, and we do not want to +# clobber them. All other config files should not be protected, so we +# remove all existing protection (via the -*). +CONFIG_PROTECT=" + -* + /etc/locale.gen + /etc/hosts + /etc/localtime + /etc/make.conf +" + +# Remove libtool .la files for non-plugin libraries. +# Remove Gentoo init files since we use systemd. +# Remove build-id, there is some issue with it causing collisions. +# Remove default files from sys-power/acpid. +# Do not install default repos.conf, we always put repository configuration in /etc. +INSTALL_MASK=" + /usr/lib*/*.la + /etc/init.d /etc/conf.d + /usr/lib/debug/.build-id + /etc/acpi + /usr/share/portage/config/repos.conf +" + +# Prevent binaries from being installed to rootfs from binary packages +PKG_INSTALL_MASK=" +" + +# Keep the default languages small. +# (not many things respect this though) +LINGUAS="en" + +# Use parallel bzip2 for binary packages +PORTAGE_BZIP2_COMMAND="lbzip2" +PORTAGE_BUNZIP2_COMMAND="lbunzip2" + +# Always build binary packages, remove old build logs, avoid running as root. +FEATURES="buildpkg clean-logs compressdebug parallel-install splitdebug + userfetch userpriv usersandbox ipc-sandbox network-sandbox + -ccache -merge-sync -binpkg-multi-instance" + +# No need to restrict access to build directories in dev environments. +PORTAGE_WORKDIR_MODE="0755" + +# Don't let GRUB whine about /boot +DONT_MOUNT_BOOT=1 + +# Keep using bzip2 as a compressor for binary packages. Some hacks +# inside the scripts repository that poke binary packages assume that +# bzip2 is used, not zstd. Eventually we will want to move to zstd. +BINPKG_COMPRESS=bzip2 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords new file mode 100644 index 0000000000..4e8a2af99f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -0,0 +1,53 @@ +# Copyright (c) 2009 The Chromium OS Authors. All rights reserved. +# Copyright (c) 2013 The CoreOS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# Necessary to fix CVE-2022-48303. +=app-arch/tar-1.34-r3 ~amd64 ~arm64 + +# Necessary to fix CVE-2023-0288, CVE-2023-0433, CVE-2023-1127, +# CVE-2023-1175 and CVE-2023-1170. +=app-editors/vim-9.0.1403 ~amd64 ~arm64 +=app-editors/vim-core-9.0.1403 ~amd64 ~arm64 + +# To keep the same version on both arches +=app-portage/portage-utils-0.95 ~arm64 + +=coreos-devel/fero-client-0.1.1 ** + +# Accept unstable host Rust compilers +=dev-lang/rust-1.68.2 ~amd64 ~arm64 +=virtual/rust-1.68.2 ~amd64 ~arm64 + +=dev-libs/libgcrypt-1.9.4 ~amd64 ~arm64 + +# upstream stabilizes arm64 for dev-lang/cython +# stabilize dev-python/cython for amd64 to keep the version same for both arch +=dev-python/cython-0.29.33 ~amd64 + +# Required for addressing CVE-2023-0361. +=net-libs/gnutls-3.8.0 ~amd64 ~arm64 + +# Required for addressing CVE-2023-23914, CVE-2023-23915 and CVE-2023-23916. +=net-misc/curl-7.88.1-r1 ~amd64 ~arm64 + +# Required for addressing CVE-2022-29154 +=net-misc/rsync-3.2.7-r2 ~amd64 ~arm64 + +=sys-fs/cryptsetup-2.4.1-r1 ~amd64 ~arm64 + +# Required for addressing CVE-2022-1304 +=sys-fs/e2fsprogs-1.46.6 ~amd64 ~arm64 + +# Keep iproute in sync with kernel version. +=sys-apps/iproute2-5.15.0 ~amd64 ~arm64 + +# FIPS support is still being tested +=sys-fs/cryptsetup-2.4.3-r1 ~amd64 ~arm64 + +=sys-power/acpid-2.0.33 ~amd64 ~arm64 + +# Overwrite portage-stable mask - use latest liburing -r2 for ARM64 and AMD64 +=sys-libs/liburing-2.1-r2 ~amd64 ~arm64 + +=app-crypt/adcli-0.9.2 ~amd64 ~arm64 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask new file mode 100644 index 0000000000..d1c5bff76f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask @@ -0,0 +1,23 @@ +# Copyright (c) 2009 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# The following are here because we override the ebuilds from the +# portage tree for a reason other than adding an ebuild from upstream +# that wasn't yet in our portage tree. We want to keep using our +# version of these packages even if a newer stable version becomes +# available in portage: + +# Require our ca-certificates package based directly on Mozilla's +# certificate store provided in NSS rather than the Gentoo/Debian package. +>=app-misc/ca-certificates-20000000 + +# Overwrite portage-stable mask. We are delaying the transition to +# libxcrypt, because we need to figure out how to solve the dep loop +# that results from the migration (python -> virtual/libcrypt -> +# libxcrypt -> glibc -> python), and also we need to update gcc to +# version 10 or later. +>=virtual/libcrypt-2 + +# Python 3.11 is stable in portage-stable, so avoid picking it +# up. Drop this when we switch to it. +>=dev-lang/python-3.11 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.provided b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.provided new file mode 100644 index 0000000000..66239364b5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.provided @@ -0,0 +1,5 @@ +# Skip MTA dependencies. +virtual/mta-1 + +# pulled in by dev-libs/cyrus-sasl +net-mail/mailbase-1.1 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.unmask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.unmask new file mode 100644 index 0000000000..0463755f1b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.unmask @@ -0,0 +1,10 @@ +# Overwrite portage-stable mask. We are delaying the transition to +# libxcrypt, because we need to figure out how to solve the dep loop +# that results from the migration (python -> virtual/libcrypt -> +# libxcrypt -> glibc -> python), and also we need to update gcc to +# version 10 or later. +=virtual/libcrypt-1-r1 + +# Overwrite portage-stable mask. OpenSSL-3* is building fine on Flatcar +# and Flatcar's dependencies are building fine against it. +=dev-libs/openssl-3.0* diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use new file mode 100644 index 0000000000..ffe1d3d0bb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use @@ -0,0 +1,160 @@ +# The USE flags specified in this file are applied to packages +# for all linux targets. In ChromeOS, that means they are applied +# to the host packages in the chroot, as well as packages built for a +# target board. + +app-arch/tar minimal +app-crypt/mit-krb5 -keyutils +dev-libs/dbus-glib tools +dev-libs/libxml2 -python +dev-libs/libxslt -python +dev-util/perf -doc +dev-vcs/git webdav curl +net-misc/curl kerberos telnet +net-misc/iputils arping tracepath +sys-devel/gettext -git + +sys-apps/gptfdisk -icu + +# for profile migration, needs to be enabled despite the fact it's +# enabled by default in the ebuild, because berkdb is disabled +# globally in make.defaults. +sys-libs/gdbm berkdb + +dev-vcs/git -perl -iconv + +# symlink: to add a link between ncat and nc +net-analyzer/nmap ncat -system-lua symlink + +# removes mta dependencies +app-admin/sudo -sendmail + +# disable hybrid cgroup as we use the unified mode now +# use lzma which is the default on non-gentoo systems, enable selinux, +sys-apps/systemd -cgroup-hybrid curl idn lzma selinux +net-libs/libmicrohttpd -ssl + +# disable kernel config detection and module building +net-firewall/ipset -modules + +# do not pull in x11-misc/shared-mime-info +dev-libs/glib -mime + +# keep grub build simple +sys-boot/grub -multislot -nls -themes + +# disable "high performance ssh" patch, turn on kerberos +net-misc/openssh -hpn kerberos + +# xz and lzo are required to run grub tests +sys-fs/squashfs-tools lzo xz + +# make the kernel version discoverable via the traditional gentoo symlink +sys-kernel/coreos-sources symlink + +# set build options for ssdp +net-nds/openldap minimal sasl +sys-libs/glibc nscd + +# disable database build because otherwise it tries to generate a database in /etc +dev-libs/cyrus-sasl kerberos -gdbm + +# don't build manpages for sssd +sys-auth/sssd -python samba kerberos gssapi ssh sudo selinux + +# enable logging command-line options in update_engine +dev-cpp/glog gflags + +# enable rpc for rpc.rquotad +sys-fs/quota rpc + +# Don't bother building portage w/xattr, we don't need XATTR_PAX +# Disable rsync-verify to avoid pulling in more deps. +sys-apps/portage -xattr -rsync-verify + +# Enable -M and -Z flags; -M is used by mayday +sys-process/lsof rpc selinux + +# can be removed with socat-2.0.0; this is the openssl/readline license +# incompatibility +net-misc/socat -ssl + +# Prevent pulling in a ton of perl dependencies +sys-apps/man-db -nls + +# Disable zstd to avoid adding it to prod images until something needs it +sys-fs/btrfs-progs -zstd + +# Enable SELinux for all targets +coreos-base/coreos selinux +sys-apps/dbus selinux + +# Enable SELinux for coreutils +sys-apps/coreutils selinux + +# Enable SELinux for tar +app-arch/tar selinux + +# Enable SELinux for docker-runc +app-emulation/docker-runc selinux + +# enable regular expression processing in jq +app-misc/jq oniguruma + +# Don't read the firmware config from /etc/portage/savedconfig/ +sys-kernel/coreos-firmware -savedconfig + +# Make kmod support kernel modules compressed via lzma(xz) +sys-apps/kmod lzma + +# net-libs/nghttp2 should be built with -cxx to avoid issues with boost 1.65. +# configure script is not able to check if Boost:ASIO library exists. +net-libs/nghttp2 -cxx + +# These (qmanifest and qtegrity) are new tools and they pull even more dependencies. +app-portage/portage-utils -qmanifest -qtegrity + +# Disable unnecessary regedit in samba to minimize the package size. +net-fs/samba -regedit + +# Drop extra dependencies +sys-libs/ldb -lmdb -python + +# Enable nftables backend for the iptables instead of legacy backend +net-firewall/iptables nftables + +# Install `perl` with a minimal set of dependencies +dev-lang/perl minimal + +# Remove support for GObject introspection +sys-auth/polkit -introspection + +# enables ELF support to e.g. allow tc to handle BPF filters. +sys-apps/iproute2 elf + +# Enable su for shadow, because shadow >= 4.11 does not have it by default. +# Ideally util-linux should have the su binary, but that is currently not +# possible, because of a bunch of additional dependencies in SDK like +# pam_sssd in baselayout. +# +# Disable su for util-linux to avoid conflict with sys-apps/shadow, which +# has its own su binary. +sys-apps/shadow su +sys-apps/util-linux -su + +# Enable kerberos support for NFS +net-fs/nfs-utils kerberos nfsv41 nfsv4 junction ldap libmount nfsdcld uuid +net-libs/libtirpc kerberos + +# Disable enabled-by-default support for 16-bit characters, we didn't +# need it before, so we don't need it now. Enable unicode support, as +# glib requires it now. +dev-libs/libpcre2 -pcre16 unicode + +# Disable extra stuff for tcpdump, there was no explanation why it was +# enabled by upstream. Samba was enabled to make some tests pass. But +# smi and ssl, no clue. +net-analyzer/tcpdump -ssl -smi -samba + +# selinux: to find files with a particular SElinux label +sys-apps/findutils selinux diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.force b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.force new file mode 100644 index 0000000000..d44b8dc8ff --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.force @@ -0,0 +1,21 @@ +# Copyright (c) 2014 The CoreOS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# Force enable those USE flags, so they are picked up also during +# bootstrap, where normally all USE flags are cleared. +app-alternatives/awk gawk +app-alternatives/bc gnu +app-alternatives/bzip2 reference +app-alternatives/cpio gnu +app-alternatives/gzip reference +app-alternatives/lex flex +app-alternatives/sh bash +app-alternatives/tar gnu +app-alternatives/yacc bison + +# Force libcrypt so it's included in stage-1 of the SDK build. +# +crypt was introduced in glibc-2.30 and above. +sys-libs/glibc crypt + +# Do not force this flag, we don't need XATTR_PAX +sys-apps/portage -xattr diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask new file mode 100644 index 0000000000..c02b3aba0d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask @@ -0,0 +1,32 @@ +# We don't ship GnuTLS by default, and smartcard has a dep loop +app-crypt/gnupg smartcard ssl + +# not needed, requires dev-lang/python-exec +sys-apps/util-linux python + +# not needed, requires lots of Perl +sys-boot/syslinux perl + +# not needed, problems building with GCC 7.3.0 +sys-libs/ncurses cxx + +# app-editors/nano with `USE=unicode` results in build failures in SDK +# stage1, because ncurses >= 6.2_p20210619 which does not have the USE +# flag at all. +# To fix that, exclude the unicode USE flag from packages.use.force list, +# which is defined in portage-stable. +app-editors/nano unicode + +# Overwrite portage-stable mask. We are delaying the transition to +# libxcrypt, because we need to figure out how to solve the dep loop +# that results from the migration (python -> virtual/libcrypt -> +# libxcrypt -> glibc -> python), and also we need to update gcc to +# version 10 or later. +sys-libs/glibc -crypt + +# We don't use pip. +dev-lang/python ensurepip +dev-lang/python-oem ensurepip + +# Pulls dev-python/sphinx, which in turn pulls a lot of other python stuff. +sys-fs/btrfs-progs man diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/packages b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/packages new file mode 100644 index 0000000000..4f3d036ee9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/packages @@ -0,0 +1,8 @@ +-*sys-apps/busybox +-*sys-apps/kbd +*app-arch/lbzip2 +*sys-libs/nss-usrfiles + +# temporary hack because catalyst is not passing --deep to an emerge @system +# command and therefore not resolving a block that can be easily fixed. +*app-shells/bash-completion diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/packages.build b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/packages.build new file mode 100644 index 0000000000..158c50349b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/packages.build @@ -0,0 +1,3 @@ +app-arch/lbzip2 +sys-apps/which +sys-libs/nss-usrfiles diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/parent b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/parent new file mode 100644 index 0000000000..e00b432785 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/parent @@ -0,0 +1,2 @@ +portage-stable:targets/systemd +:features/systemd diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/profile.bashrc b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/profile.bashrc new file mode 100644 index 0000000000..dcb504e3f5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/profile.bashrc @@ -0,0 +1,121 @@ +# Dumping ground for build-time helpers to utilize since SYSROOT/tmp/ +# can be nuked at any time. +CROS_BUILD_BOARD_TREE="${SYSROOT}/build" +CROS_BUILD_BOARD_BIN="${CROS_BUILD_BOARD_TREE}/bin" + +CROS_ADDONS_TREE="/mnt/host/source/src/third_party/coreos-overlay/coreos" + +# Are we merging for the board sysroot, or for the cros sdk, or for +# the target hardware? Returns a string: +# - cros_host (the sdk) +# - board_sysroot +# - target_image +# We can't rely on "use cros_host" as USE gets filtred based on IUSE, +# and not all packages have IUSE=cros_host. +cros_target() { + if [[ ${CROS_SDK_HOST} == "cros-sdk-host" ]] ; then + echo "cros_host" + elif [[ ${ROOT%/} == ${SYSROOT%/} ]] ; then + echo "board_sysroot" + else + echo "target_image" + fi +} + +# Load all additional bashrc files we have for this package. +cros_stack_bashrc() { + local cfg cfgd + + cfgd="${CROS_ADDONS_TREE}/config/env" + for cfg in ${PN} ${PN}-${PV} ${PN}-${PV}-${PR} ; do + cfg="${cfgd}/${CATEGORY}/${cfg}" + [[ -f ${cfg} ]] && . "${cfg}" + done +} +cros_stack_bashrc + +# The standard bashrc hooks do not stack. So take care of that ourselves. +# Now people can declare: +# cros_pre_pkg_preinst_foo() { ... } +# And we'll automatically execute that in the pre_pkg_preinst func. +# +# Note: profile.bashrc's should avoid hooking phases that differ across +# EAPI's (src_{prepare,configure,compile} for example). These are fine +# in the per-package bashrc tree (since the specific EAPI is known). +cros_lookup_funcs() { + declare -f | egrep "^$1 +\(\) +$" | awk '{print $1}' +} +cros_stack_hooks() { + local phase=$1 func + local header=true + + for func in $(cros_lookup_funcs "cros_${phase}_[-_[:alnum:]]+") ; do + if ${header} ; then + einfo "Running stacked hooks for ${phase}" + header=false + fi + ebegin " ${func#cros_${phase}_}" + ${func} + eend $? + done +} +cros_setup_hooks() { + # Avoid executing multiple times in a single build. + [[ ${cros_setup_hooks_run+set} == "set" ]] && return + + local phase + for phase in {pre,post}_{src_{unpack,prepare,configure,compile,test,install},pkg_{{pre,post}{inst,rm},setup}} ; do + eval "${phase}() { cros_stack_hooks ${phase} ; }" + done + export cros_setup_hooks_run="booya" +} +cros_setup_hooks + +# Packages that use python will run a small python script to find the +# pythondir. Unfortunately, they query the host python to find out the +# paths for things, which means they inevitably guess wrong. Export +# the cached values ourselves and since we know these are going through +# autoconf, we can leverage ${libdir} that econf sets up automatically. +cros_pre_src_unpack_python_multilib_setup() { + # Avoid executing multiple times in a single build. + [[ ${am_cv_python_version:+set} == "set" ]] && return + + local py=${PYTHON:-python} + local py_ver=$(${py} -c 'import sys;sys.stdout.write(sys.version[:3])') + + export am_cv_python_version=${py_ver} + export am_cv_python_pythondir="\${libdir}/python${py_ver}/site-packages" + export am_cv_python_pyexecdir=${am_cv_python_pythondir} +} + +# Since we're storing the wrappers in a board sysroot, make sure that +# is actually in our PATH. +cros_pre_pkg_setup_sysroot_build_bin_dir() { + PATH+=":${CROS_BUILD_BOARD_BIN}" +} + +# Avoid modifications of the preexisting users - these are provided by +# our baselayout and usermod can't change anything there anyway (it +# complains that the user is not in /etc/passwd). +cros_pre_pkg_postinst_no_modifications_of_users() { + if [[ "${CATEGORY}" != 'acct-user' ]]; then + return 0 + fi + export ACCT_USER_NO_MODIFY=x +} + +# Source hooks for SLSA build provenance report generation +source "${BASH_SOURCE[0]}.slsa-provenance" + +# Insert our sysroot wrappers into the path +SYSROOT_WRAPPERS_BIN="/usr/lib64/sysroot-wrappers/bin" +if [[ "$PATH" != *"$SYSROOT_WRAPPERS_BIN"* ]]; then + export PATH="$SYSROOT_WRAPPERS_BIN:$PATH" +fi + +# Improve the chance that ccache is valid across versions by making all +# paths under $S relative to $S, avoiding encoding the package version +# contained in the path into __FILE__ expansions and debug info. +if [[ -z "${CCACHE_BASEDIR}" ]] && [[ -d "${S}" ]]; then + export CCACHE_BASEDIR="${S}" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/profile.bashrc.slsa-provenance b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/profile.bashrc.slsa-provenance new file mode 100644 index 0000000000..76a3c02f7f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/profile.bashrc.slsa-provenance @@ -0,0 +1,194 @@ +# Build provenance hooks +# ====================== +# The functions below hook into every ebuild's execution and generate provenance files +# to meet the SLSA provenance requirements (https://slsa.dev/spec/v0.1/requirements#available). +# All input files (source tarball / git commit hash) plus added patches / files, +# and all resulting installation binaries and files are captured. +# The information is emitted in SLSA provenance 0.2 format (see https://slsa.dev/provenance/v0.2) + + +# We only record provenance when a package is actually being built. +# See profiles/coreos/base/profile.bashrc for cros_... +cros_post_src_configure_enable_slsa_provenance_report() { + if [ "${GENERATE_SLSA_PROVENANCE:-}" != "true" ] ; then + einfo "Provenance generation not requested by build; skipping." + return 0 + fi + export generate_slsa_provenance_report="yes" +} +# -- + +# Generate SLSA provenance 0.2 Subject information. +# The information will cover all installation files shipped with a package. +__slsa_provenance_subject() { + local parallel="$(nproc)" + local comma="" + + einfo " Provenance: recording subject (output)" + + echo ' "subject": [' + + ( + cd "$D" + find . -type f -print | sed 's:^./::' | xargs -P "$parallel" -L 1 sha512sum | sort -k2 + ) | while read checksum filepath; do + echo -en "${comma} {\"name\":\"/$filepath\", \"digest\":{\"sha512\":\"$checksum\"}}" + if [ -z "$comma" ] ; then + comma=',\n' + fi + done + echo -en "\n ]" +} +# -- + +__slsa_provenance_materials() { + local csum="" uri="" repo="" ebuild="" ebuildcsum="" + + local ebuild="${CATEGORY}/${PN}/${PF}.ebuild" + local repopath="$(portageq get_repo_path ${ROOT:-/} coreos)" + if [ -f "${repopath}/${ebuild}" ] ; then + repo="coreos-overlay" + ebuildcsum=$(sha1sum - < "${repopath}/${ebuild}") + else + repopath="$(portageq get_repo_path ${ROOT:-/} portage-stable)" + if [ -f "${repopath}/${ebuild}" ] ; then + repo="portage-stable" + ebuildcsum=$(sha1sum - < "${repopath}/${ebuild}") + fi + fi + if [ -z "${repo}" ]; then + die "SLSA provenance: Unable to detect ebuild repository for package '${ebuild}'" + fi + ebuildcsum=${ebuildcsum%% *} + + einfo " Provenance: recording ebuild material (input) '${repo}/${ebuild}'" + echo ' "materials": [' + + # The ebuild. Since "configSource" in "invocation" cannot have more than one (top/level) entry + # we add the ebuild and git repo checksum here, as a material. + csum="$(cat "/mnt/host/source/src/scripts/.git/modules/sdk_container/src/third_party/${repo}/HEAD")" + uri="git+https://github.com/flatcar/${repo}.git@${csum}#${ebuild}" + echo -e " { \"uri\": \"${uri}\"," + echo -n " \"digest\": {\"sha1\":\"${ebuildcsum}\"} }" + + # The main sources + if [ -n "${A}" ] ; then + # Package is built from downloaded source tarball(s) + # There can be multiple, and can be used conditionally based on use flags, + # and even replaced with different local names ("http://... -> othername.tgz"). So + # we go through what's actually used ($A), then find the corresponding source URI. + local src="" prev_uri="" rename="false" orig_name="" + for src in ${A}; do + local found="false" + for uri in ${SRC_URI}; do + if [ "${uri}" = "->" ] ; then + rename="true" + continue + fi + if [ "${src}" = "$(basename "${uri}")" ] ; then + orig_name="${src}" + if [ "${rename}" = "true" ] ; then + uri="${prev_uri}" + orig_name="$(basename "${uri}")" + fi + einfo " Provenance: recording tarball material (input) '${src}' ('${orig_name}')" + csum="$(sha512sum "${DISTDIR}/${src}" | cut -d' ' -f1)" + echo -e ",\n { \"uri\": \"${uri}\"," + echo -n " \"digest\": {\"sha512\":\"${csum}\"} }" + found="true" + fi + rename="false" + prev_uri="${uri}" + done + if [ "${found}" != "true" ] ; then + die "No SRC_URI found for source '${src}', unable to record provenance!" + fi + done + elif [ -n "${EGIT_REPO_URI:-}" ] ; then + # package is built from repo checkout (git) + einfo " Provenance: recording GIT material (input) '${EGIT_REPO_URI}'" + csum="${EGIT_COMMIT}" + uri="${EGIT_REPO_URI}" + echo -e ",\n { \"uri\": \"${uri}\"," + echo -n " \"digest\": {\"sha1\":\"$csum\"} }" + fi + + # Patches / files shipped with the ebuild (if any) + csum="$(cat "/mnt/host/source/src/scripts/.git/modules/sdk_container/src/third_party/${repo}/HEAD")" + uri="git+https://github.com/flatcar/${repo}.git@${csum}#${CATEGORY}/${PN}/files" + if [ -d "${FILESDIR}" ] ; then + for file in $(cd "$FILESDIR" && find . -type f | sed 's:^./::') ; do + csum="$(sha1sum - <"${FILESDIR}/${file}")" + csum="${csum%% *}" + einfo " Provenance: recording ebuild material (input) '${file}'" + echo -e ",\n { \"uri\": \"${uri}/${file}\"," + echo -n " \"digest\": {\"sha1\":\"$csum\"} }" + done + fi + + echo -ne '\n ]' +} +# -- + +__slsa_provenance_report() { + local scripts_hash="$(cat "/mnt/host/source/src/scripts/.git/HEAD")" + local buildcmd="emerge" + # extract board from e.g. '/build/amd64-usr/build'. Empty if no board is set (SDK build). + local board="$(echo "${CROS_BUILD_BOARD_TREE:-}" | sed -n 's:^/build/\([^/]\+\)/.*:\1:p')" + if [ -n "$board" ] ; then + buildcmd="emerge-${board}" + fi + if [[ "${scripts_hash}" == "ref:"* ]]; then + scripts_hash="$(cat /mnt/host/source/src/scripts/.git/${scripts_hash#ref: })" + fi + + # FIXME: Supply SDK image ID and sha256 digest along with the version tag + local sdk_version="$(source /mnt/host/source/.repo/manifests/version.txt; echo ${FLATCAR_SDK_VERSION})" + + # FIXME: add builder ID +cat < "${T}/${report_file}" + + mkdir -p "${dest_dir}" + mv "${T}/${report_file}" "${dest_dir}" +} diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/use.mask new file mode 100644 index 0000000000..56ea60f1a8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/use.mask @@ -0,0 +1,15 @@ +# Never enable experimental code +kdbus + +# We default to python 3.10 for now +python_targets_python2_7 +python_single_target_python2_7 +python_targets_python3_8 +python_single_target_python3_8 +python_targets_python3_9 +python_single_target_python3_9 +python_targets_python3_11 +python_single_target_python3_11 + +# Unmask selinux so it can be enabled selectively in package.use +-selinux diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/README new file mode 100644 index 0000000000..2753c6f9a7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/README @@ -0,0 +1,3 @@ +Profile to apply to all CoreOS "board" images. Other variants that are +not architecture specific should inherit this profile. +This excludes the SDK. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/dev/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/dev/README new file mode 100644 index 0000000000..40537d4fcd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/dev/README @@ -0,0 +1,7 @@ +Profile settings specific to "dev" images and containers. + +Settings here must *ONLY* influence installing binary packages and never +change build time settings like USE or CFLAGS because binary packages +are shared between dev and prod, dev just includes more stuff. + +For example, INSTALL_MASK and package.provided are ok. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/dev/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/dev/make.defaults new file mode 100644 index 0000000000..b1c02221ae --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/dev/make.defaults @@ -0,0 +1,7 @@ +# Copyright (c) 2014 The CoreOS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# full debug info is way to big to fit into our 1GB /usr partitions. +INSTALL_MASK="${INSTALL_MASK} + /usr/lib/debug +" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults new file mode 100644 index 0000000000..ba2236b709 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults @@ -0,0 +1,109 @@ +# Copyright (c) 2012 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +USE="cros-debug acpi usb symlink-usr cryptsetup policykit" +USE="${USE} -split-usr -cros_host -expat -cairo -X -man" +USE="${USE} -acl -gpm -python" +USE="${USE} -fortran -abiword -perl -cups -poppler-data -nls" + +# Exclude documentation +FEATURES="nodoc noinfo noman" + +# Exclude even more documentation +# Remove bash-completion files as we don't install bash-completion. +# Remove locale LC_MESSAGES files. +# Remove sqlite3 binary installation provided by dev-db/sqlite as we only need the libs. +INSTALL_MASK="${INSTALL_MASK} + /usr/sbin/locale-gen + /usr/share/bash-completion + /usr/share/gtk-doc + /usr/share/locale + /usr/share/zsh + /var/db/Makefile + /usr/bin/sqlite3 +" + +# Exclude assorted config files that we can do without +INSTALL_MASK="${INSTALL_MASK} + /etc/bash_completion.d + /etc/DIR_COLORS + /etc/dmtab + /etc/e2fsck.conf + /etc/libnl + /etc/logrotate.conf + /etc/logrotate.d + /etc/lvm/* + /etc/mdadm.conf + /etc/rsyncd.conf + /etc/sudoers + /etc/wgetrc + /etc/xinetd.d + /etc/vim/vimrc +" + +# Remove selinuxenabled because it triggers breakage in Ansible +INSTALL_MASK="${INSTALL_MASK} + /usr/sbin/selinuxenabled +" + +# Remove files which depends on interpreters not present in boards. +INSTALL_MASK="${INSTALL_MASK} + /usr/sbin/i2c-stub-from-dump + + /usr/lib/modules/*-coreos/source/scripts/*.pl + + /usr/share/git-core/templates/hooks/fsmonitor-watchman.sample + /usr/share/rsync/* + + /usr/bin/glib-mkenums + /usr/bin/afmtodit + /usr/bin/decode-edid + /usr/bin/gtkdoc-rebase + /usr/bin/ddcmon + /usr/bin/mtrace + /usr/bin/import-tars + /usr/bin/help2man + /usr/bin/gropdf + /usr/bin/mmroff + /usr/bin/decode-dimms + /usr/bin/pdfmom + /usr/bin/decode-vaio + /etc/ssl/misc/CA.pl + /etc/ssl/misc/tsget +" + +# Remove tools that don't need to be installed on every server. +INSTALL_MASK="${INSTALL_MASK} + /usr/bin/cvtsudoers +" + +# Do not install some of the tools from e2fsprogs. +INSTALL_MASK="${INSTALL_MASK} + /usr/bin/mk_cmds + /usr/bin/compile_et + /usr/share/et + /usr/share/ss +" + +# Override UIDs and GIDs where ours differ from Gentoo defaults. +ACCT_GROUP_DIALOUT_ID=249 +ACCT_GROUP_INPUT_ID=28 +ACCT_GROUP_MESSAGEBUS_ID=201 +ACCT_USER_MESSAGEBUS_ID=201 +ACCT_GROUP_NTP_ID=203 +ACCT_USER_NTP_ID=203 +ACCT_GROUP_POLKITD_ID=235 +ACCT_USER_POLKITD_ID=235 +ACCT_GROUP_RENDER_ID=30 +ACCT_GROUP_SSHD_ID=204 +ACCT_USER_SSHD_ID=204 +ACCT_GROUP_SYSTEMD_JOURNAL_ID=248 +ACCT_GROUP_SYSTEMD_JOURNAL_REMOTE_ID=242 +ACCT_USER_SYSTEMD_JOURNAL_REMOTE_ID=242 +ACCT_GROUP_SYSTEMD_NETWORK_ID=244 +ACCT_USER_SYSTEMD_NETWORK_ID=244 +ACCT_GROUP_SYSTEMD_RESOLVE_ID=245 +ACCT_USER_SYSTEMD_RESOLVE_ID=245 +# tss seems to be one of those users with a mismatching UID/GID +ACCT_GROUP_TSS_ID=252 +ACCT_USER_TSS_ID=236 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/README new file mode 100644 index 0000000000..74dbd3ea6a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/README @@ -0,0 +1,7 @@ +Profile settings specific to "oem-aci" images. + +Settings here must *ONLY* influence installing binary packages and never +change build time settings like USE or CFLAGS because binary packages +are shared between dev and prod, dev just includes more stuff. + +For example INSTALL_MASK, package.mask, and package.provided are ok. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/make.defaults new file mode 100644 index 0000000000..cc26153410 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/make.defaults @@ -0,0 +1,54 @@ +# Copyright (c) 2016 The CoreOS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# Restrictive mask for OEM ACIs. +INSTALL_MASK="${INSTALL_MASK} + *.a *.la *.hpp *.o + /etc/sandbox.d + /usr/include + /usr/lib*/*/include + /usr/lib/debug + /usr/lib*/pkgconfig + /usr/share/aclocal* + /usr/share/awk + /usr/share/gdb + /usr/share/gettext + /usr/share/gobject-introspection-1.0 + /usr/share/pkgconfig + /usr/share/readline + /usr/src +" + +# Exclude nmap from OEM ACI, we just want ncat/nping in there. +# Also remove ncat's second ca-bundle.crt, just use the system's. +INSTALL_MASK="${INSTALL_MASK} + /usr/bin/nmap + /usr/share/ncat + /usr/share/nmap +" + +# Remove files which depend on interpreters not present in boards. +INSTALL_MASK="${INSTALL_MASK} + /usr/share/git/contrib/* + /usr/bin/diff-highlight + /usr/bin/autoscan-2.13 + /usr/bin/autoupdate-2.69 + /usr/bin/autoreconf-2.69 + /usr/bin/automake-1.14 + /usr/bin/autom4te-2.69 + /usr/bin/autoheader-2.69 + /usr/bin/aclocal-1.14 + /usr/bin/aclocal-1.15 + /usr/bin/automake-1.15 + /usr/bin/ifnames-2.69 + /usr/bin/intltool-update + /usr/bin/intltool-merge + /usr/bin/intltool-prepare + /usr/bin/intltool-extract + /usr/bin/autoscan-2.69 +" + +# There is no need to have boot stuff in a container. +INSTALL_MASK="${INSTALL_MASK} + /boot +" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/package.provided b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/package.provided new file mode 100644 index 0000000000..92c93c6fea --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/oem-aci/package.provided @@ -0,0 +1,2 @@ +# Do not install SSSD in the container. +sys-auth/sssd-1.13.1 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.provided b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.provided new file mode 100644 index 0000000000..0d639114c7 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.provided @@ -0,0 +1,17 @@ +# Copyright (c) 2009 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# Packages that are pulled in via RDEPEND without a use flag to +# disable them and we have no need/use for them in prod images. + +# pulled in by app-crypt/pinentry +app-eselect/eselect-pinentry-0.7.2 + +# pulled in by app-editors/vim +app-eselect/eselect-vi-1.2 + +# pulled in by net-firewall/iptables +app-eselect/eselect-iptables-20200508 + +# pulled in by app-admin/sudo +app-misc/editor-wrapper-4 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use new file mode 100644 index 0000000000..62ab683076 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use @@ -0,0 +1,41 @@ +# Copyright (c) 2009 The Chromium OS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +app-admin/sudo ldap sssd +# -crypt: Disable crypt to avoid installing libsodlium. +app-editors/vim minimal -crypt +# minimal: Don't pull app-vim/gentoo-syntax +app-editors/vim-core minimal +dev-lang/python gdbm + +# Disable everything for python-oem except of build and xml +dev-lang/python-oem -bluetooth build -ensurepip -examples -gdbm -hardened -libedit -lto -ncurses -pgo -readline -sqlite -ssl -test -tk -valgrind xml + +dev-libs/dbus-glib tools +dev-libs/elfutils -utils +dev-libs/openssl pkcs11 +dev-util/perf -perl -python +net-misc/dhcp -server +net-misc/ntp caps +sys-apps/smartmontools -daemon -update-drivedb -systemd +sys-block/parted device-mapper +sys-fs/lvm2 -readline +sys-libs/ncurses minimal +sys-libs/pam audit + +# enable journal gateway, bootctl and container features +sys-apps/systemd audit elfutils gnuefi http importd iptables + +# epoll is needed for systemd-journal-remote to work. coreos/bugs#919 +net-libs/libmicrohttpd epoll + +sys-boot/syslinux -custom-cflags + +# minimize risk removing unneeded patches and networking support +app-shells/bash -net vanilla + +# needed by docker +sys-libs/libseccomp static-libs + +# Gentoo's new hardened profile disables PIC, but open-vm-tools needs it +app-emulation/open-vm-tools pic diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/README new file mode 100644 index 0000000000..0017236a1a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/README @@ -0,0 +1,7 @@ +Profile settings specific to "prod" images. + +Settings here must *ONLY* influence installing binary packages and never +change build time settings like USE or CFLAGS because binary packages +are shared between dev and prod, dev just includes more stuff. + +For example INSTALL_MASK, package.mask, and package.provided are ok. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults new file mode 100644 index 0000000000..c7961639cb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults @@ -0,0 +1,62 @@ +# Copyright (c) 2014 The CoreOS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# Restrictive mask for production images. +INSTALL_MASK="${INSTALL_MASK} + *.a *.la *.hpp *.o + /etc/sandbox.d + /lib*/pkgconfig + /usr/include + /usr/lib*/*/include + -/usr/lib*/modules/*/include + /usr/lib*/cmake + /usr/lib*/debug + /usr/lib*/pkgconfig + /usr/lib*/rpm + /usr/share/aclocal* + /usr/share/awk + /usr/share/gdb + /usr/share/gettext + /usr/share/gobject-introspection-1.0 + /usr/share/pkgconfig + /usr/share/readline + /usr/src +" + +# Exclude nmap from prod image, we just want ncat/nping in there +# Also remove ncat's second ca-bundle.crt, just use the system's +INSTALL_MASK="${INSTALL_MASK} + /usr/bin/nmap + /usr/share/ncat + /usr/share/nmap +" + +# Remove files which depend on interpreters not present in boards. +INSTALL_MASK="${INSTALL_MASK} + /usr/lib*/systemd/system/xfs_scrub_all* + /usr/share/git/contrib/* + /usr/bin/diff-highlight + /usr/bin/autoscan-2.13 + /usr/bin/autoupdate-2.69 + /usr/bin/autoreconf-2.69 + /usr/bin/automake-1.14 + /usr/bin/autom4te-2.69 + /usr/bin/autoheader-2.69 + /usr/bin/aclocal-1.14 + /usr/bin/aclocal-1.15 + /usr/bin/automake-1.15 + /usr/bin/ifnames-2.69 + /usr/bin/intltool-update + /usr/bin/intltool-merge + /usr/bin/intltool-prepare + /usr/bin/intltool-extract + /usr/bin/autoscan-2.69 + /usr/bin/code2color + /usr/bin/event_rpcgen.py + /usr/libexec/selinux/semanage_migrate_store + /usr/libexec/git-core/git-contacts + /usr/sbin/mountstats + /usr/sbin/nfsiostat + /sbin/ebtables-save + /sbin/xfs_scrub_all +" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask new file mode 100644 index 0000000000..7f198c44e9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask @@ -0,0 +1,12 @@ +# Packages that we do not want to ship in production images. Masking these +# is merely as a safe guard against pulling them in accidentally. + +# We don't want to support interpreted languages, changes/updates we make +# would have a high risk of breaking users. +dev-lang/perl +dev-lang/python +dev-lang/ruby + +# We do not configure/install grub like other distros so shipping the user +# space tools would have limited utility. +sys-boot/grub diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/profile.bashrc b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/profile.bashrc new file mode 100644 index 0000000000..99d382e571 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/profile.bashrc @@ -0,0 +1,35 @@ +# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +# Use of this source code is governed by a BSD-style license that can be +# found in the LICENSE file. + +# Locate all the old style config scripts this package installs. Do it here +# here so we can search the temp $D which has only this pkg rather than the +# full ROOT which has everyone's files. +cros_pre_pkg_preinst_wrap_old_config_scripts() { + # Only wrap when installing into a board sysroot. + [[ $(cros_target) != "board_sysroot" ]] && return 0 + + local wrappers=$( + find "${D}"/usr/bin -name '*-config' -printf '%P ' 2>/dev/null + ) + + local wdir="${CROS_BUILD_BOARD_TREE}/bin" + mkdir -p "${wdir}" + + local c w + for w in ${wrappers} ; do + # $CHOST-$CHOST-foo-config isn't helpful + if [[ ${w} == ${CHOST}-* ]]; then + continue + fi + # Skip anything that isn't a script, e.g. pkg-config + if ! head -n1 "${D}/usr/bin/${w}" | egrep -q '^#!\s*/bin/(ba)?sh'; then + continue + fi + w="${wdir}/${CHOST}-${w}" + c="${CROS_ADDONS_TREE}/scripts/config_wrapper" + if [[ ! -e ${w} ]] ; then + ln -s "${c}" "${w}" + fi + done +} diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/use.force b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/use.force new file mode 100644 index 0000000000..f29fb18c73 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/use.force @@ -0,0 +1,4 @@ +# We don't have a separate /{bin,lib} and /usr/{bin,lib}. But the base +# profile in portage-stable forces split-usr, so here we unforce it +# and in use.mask we mask it. +-split-usr diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/use.mask new file mode 100644 index 0000000000..9a467dab41 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/use.mask @@ -0,0 +1,4 @@ +# We don't have a separate /{bin,lib} and /usr/{bin,lib}. But the base +# profile in portage-stable forces split-usr, so in use.force we +# unforce it and here we mask it. +split-usr diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/README b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/README new file mode 100644 index 0000000000..88564a5655 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/README @@ -0,0 +1 @@ +Profile to apply to the SDK, buildbots, etc. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/make.defaults new file mode 100644 index 0000000000..218e9f090f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/make.defaults @@ -0,0 +1,18 @@ +USE="man -pam" + +# Used by some old goo in profiles/coreos/base/profile.bashrc +# TODO: clean up that old goo +CROS_SDK_HOST="cros-sdk-host" + +# Enable CPU architectures needed by Rust builds +LLVM_TARGETS="X86 AArch64" + +# Both x86_64 and i386 targets are required for grub testing +QEMU_SOFTMMU_TARGETS="x86_64 i386 aarch64" + +# For cross build support. +QEMU_USER_TARGETS="aarch64" + +# add cros_host to bootstrapping USE flags so SDK / toolchains bootstrapping +# will use vim's vimrc instead of baselayouts', +BOOTSTRAP_USE="$BOOTSTRAP_USE cros_host" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.accept_keywords new file mode 100644 index 0000000000..40aeb5865c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.accept_keywords @@ -0,0 +1 @@ +=app-crypt/efitools-1.9.2 ~arm64 diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use new file mode 100644 index 0000000000..82cd27b1a9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use @@ -0,0 +1,30 @@ +coreos-base/update_engine delta_generator + +dev-vcs/git pcre + +dev-lang/rust rustfmt + +# Allow smartcard support in the SDK for image signing +app-crypt/gnupg smartcard usb + +# for qemu +app-arch/bzip2 static-libs +app-emulation/qemu -doc -jpeg ncurses python static-user virtfs qemu_softmmu_targets_x86_64 qemu_softmmu_targets_aarch64 +dev-libs/glib static-libs +dev-libs/libaio static-libs +dev-libs/libpcre2 static-libs +dev-libs/openssl static-libs +media-libs/libjpeg-turbo static-libs +media-libs/libpng static-libs +net-misc/curl static-libs +sys-apps/attr static-libs +sys-apps/dtc static-libs +sys-libs/libcap-ng static-libs +sys-libs/libseccomp static-libs +sys-libs/ncurses static-libs +sys-libs/zlib static-libs +virtual/jpeg static-libs +x11-libs/pixman static-libs + +# Enable gssapi for SDK +net-dns/bind-tools gssapi diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use.mask new file mode 100644 index 0000000000..811692a9e5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use.mask @@ -0,0 +1,2 @@ +# Allow smartcard support in the SDK for image signing +app-crypt/gnupg -smartcard diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/make.defaults new file mode 100644 index 0000000000..ded4466d96 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/make.defaults @@ -0,0 +1,2 @@ +USE="systemd udev" +BOOTSTRAP_USE="$BOOTSTRAP_USE udev" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.mask new file mode 100644 index 0000000000..3123811515 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.mask @@ -0,0 +1,4 @@ +# Mask sysvinit+openrc and runit+openrc in favor of systemd +sys-apps/sysvinit +sys-apps/openrc +sys-process/runit diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.unmask b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.unmask new file mode 100644 index 0000000000..9b52e5deb1 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.unmask @@ -0,0 +1 @@ +sys-apps/systemd diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.use.force b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.use.force new file mode 100644 index 0000000000..0b373328b3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/package.use.force @@ -0,0 +1,8 @@ +# Copyright (c) 2014 The CoreOS Authors. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +# replace sysvinit and disable gentoo-only bits +sys-apps/systemd sysv-utils vanilla + +# dbus without systemd conflicts with systemd +sys-apps/dbus systemd diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/packages b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/packages new file mode 100644 index 0000000000..92783beb68 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/packages @@ -0,0 +1,4 @@ +# Add systemd to the 'system' set +*sys-apps/gentoo-functions +*sys-apps/systemd +-*sys-apps/openrc diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/packages.build b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/packages.build new file mode 100644 index 0000000000..a3d7e98b94 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/packages.build @@ -0,0 +1,3 @@ +sys-apps/dbus +sys-apps/gentoo-functions +-sys-apps/openrc diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/use.mask new file mode 100644 index 0000000000..6259b323fc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/features/systemd/use.mask @@ -0,0 +1,2 @@ +openrc +-systemd diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/profiles.desc b/sdk_container/src/third_party/coreos-overlay/profiles/profiles.desc new file mode 100644 index 0000000000..10c522161f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/profiles.desc @@ -0,0 +1,9 @@ +amd64 coreos/amd64/generic dev +amd64 coreos/amd64/generic/dev dev +amd64 coreos/amd64/generic/prod dev +amd64 coreos/amd64/sdk dev + +arm64 coreos/arm64/generic dev +arm64 coreos/arm64/generic/dev dev +arm64 coreos/arm64/generic/prod dev +arm64 coreos/arm64/sdk dev diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/repo_name b/sdk_container/src/third_party/coreos-overlay/profiles/repo_name new file mode 100644 index 0000000000..e76bc6a405 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/profiles/repo_name @@ -0,0 +1 @@ +coreos diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/Manifest b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/Manifest new file mode 100644 index 0000000000..531f9303e2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/Manifest @@ -0,0 +1,4 @@ +DIST patchbundle-selinux-base-policy-2.20200818-r2.tar.bz2 433623 BLAKE2B f0655c45c50347faf1217e5861298dce822e4b726c0b4489d4c70c4815842f7c17ac1b0a302ae5482a3ad25d1d5b6c4c3b6395194e79005f31560d103ad0fce6 SHA512 9fd22683ecd602a429b2d489f7b8c2936409fa060046255b72a4b95c9fdefa2455ba7655945278dc972c22f3ade6617898ed169e22001aaaaded4b47ca51b0c3 +DIST patchbundle-selinux-base-policy-2.20210203-r1.tar.bz2 298116 BLAKE2B 50c5523a8b758652af6aa59d548e9499b899898b58f52f74f1667a0c552f2b2d0ed5a44352e59245c7f0ebd199e2391400168d6ab27b4160d726fccded0c56f2 SHA512 ddb877ec3e2883f57e54e7380dd449d4d89a0769a1fb87141786e5de741ac21b2ead60362fd17c25888eb1334c68f71da561f4f29f406f0d4b5d13d378f6baff +DIST refpolicy-2.20200818.tar.bz2 570896 BLAKE2B 502c00fec39e1b81e42de3f7f942623f8b3fbdeac19f9f01126722a368b7d4f70427d6e4a574754c4f2fa551e4bc75c912dbc515c004f0dcd5eb28ab416498f6 SHA512 e4b527bb7a87b9359fc42eb111d5008103f57c37128998ea0e21ec7b0b8607ffe3f67697450e4c51a0db172ece69083335b279bacef4b1bd0b7748b58caa99a7 +DIST refpolicy-2.20210203.tar.bz2 564099 BLAKE2B a94a11ebb78890ba2c98714be2fe9054fdb8ccaf5154f47b881a9575a4a6865e8df475805550d7bba8039b4230c6a0c9f5c6130bf8c35a26bc7c473d550fb40d SHA512 a6ffe718626dd6121023b4cbc424c933d44ca8b662bd708baad307cf6284be0d80fef40cdc8b37f6f17ecb3636fd8d6c1d5d4072c17d835b7f500e17a3acd9fc diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/init.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/init.patch new file mode 100644 index 0000000000..e96500288e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/init.patch @@ -0,0 +1,11 @@ +diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te +index dbd39cf8f..563559ca7 100644 +--- refpolicy/policy/modules/system/init.te ++++ refpolicy/policy/modules/system/init.te +@@ -1503,3 +1503,6 @@ optional_policy(` + userdom_dontaudit_rw_all_users_stream_sockets(systemprocess) + userdom_dontaudit_write_user_tmp_files(systemprocess) + ') ++ ++require { type unconfined_t; } ++allow init_t unconfined_t:file exec_file_perms; diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/locallogin.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/locallogin.patch new file mode 100644 index 0000000000..2e9ae7ce53 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/locallogin.patch @@ -0,0 +1,13 @@ +diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te +index 109980e79..d5c4a5d95 100644 +--- refpolicy/policy/modules/system/locallogin.te ++++ refpolicy/policy/modules/system/locallogin.te +@@ -34,7 +34,7 @@ role system_r types sulogin_t; + + allow local_login_t self:capability { chown dac_read_search dac_override fowner fsetid kill setgid setuid sys_nice sys_resource sys_tty_config }; + dontaudit local_login_t self:capability net_admin; +-allow local_login_t self:process { getcap setcap setexec setrlimit setsched }; ++allow local_login_t self:process { setpgid getcap setcap setexec setrlimit setsched }; + allow local_login_t self:fd use; + allow local_login_t self:fifo_file rw_fifo_file_perms; + allow local_login_t self:sock_file read_sock_file_perms; diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/logging.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/logging.patch new file mode 100644 index 0000000000..caa778d8ef --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/logging.patch @@ -0,0 +1,18 @@ +diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te +index 7d713540d..d6cbc654d 100644 +--- refpolicy/policy/modules/system/logging.te ++++ refpolicy/policy/modules/system/logging.te +@@ -516,11 +516,13 @@ userdom_dontaudit_use_unpriv_user_fds(syslogd_t) + userdom_dontaudit_search_user_home_dirs(syslogd_t) + + ifdef(`init_systemd',` ++ require { type kernel_t; } + # for systemd-journal + allow syslogd_t self:netlink_audit_socket connected_socket_perms; + allow syslogd_t self:capability2 audit_read; + allow syslogd_t self:capability { chown setgid setuid sys_ptrace }; + allow syslogd_t self:netlink_audit_socket { getattr getopt read setopt write nlmsg_write }; ++ allow syslogd_t kernel_t:netlink_audit_socket getattr; + + # remove /run/log/journal when switching to permanent storage + allow syslogd_t var_log_t:dir rmdir; diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/ping.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/ping.patch new file mode 100644 index 0000000000..e6a31f6630 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/ping.patch @@ -0,0 +1,19 @@ +diff -u -r refpolicy/policy/modules/admin/netutils.te refpolicy/policy/modules/admin/netutils.te +--- refpolicy/policy/modules/admin/netutils.te 2022-01-12 14:28:26.850809330 -0000 ++++ refpolicy/policy/modules/admin/netutils.te 2022-01-12 14:29:50.323880882 -0000 +@@ -117,6 +117,7 @@ + corenet_raw_sendrecv_generic_node(ping_t) + corenet_tcp_sendrecv_generic_node(ping_t) + corenet_raw_bind_generic_node(ping_t) ++corenet_icmp_bind_generic_node(ping_t) + + dev_read_urand(ping_t) + +@@ -189,6 +190,7 @@ + corenet_tcp_connect_all_ports(traceroute_t) + corenet_sendrecv_all_client_packets(traceroute_t) + corenet_sendrecv_traceroute_server_packets(traceroute_t) ++corenet_icmp_bind_generic_node(traceroute_t) + + dev_read_rand(traceroute_t) + dev_read_urand(traceroute_t) diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/sshd.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/sshd.patch new file mode 100644 index 0000000000..420139c3be --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/sshd.patch @@ -0,0 +1,22 @@ +diff --git a/policy/modules/services/ssh.fc b/policy/modules/services/ssh.fc +index 60060c35c..8d9f5b7a6 100644 +--- refpolicy/policy/modules/services/ssh.fc ++++ refpolicy/policy/modules/services/ssh.fc +@@ -6,7 +6,7 @@ HOME_DIR/\.ssh(/.*)? gen_context(system_u:object_r:ssh_home_t,s0) + /usr/bin/ssh -- gen_context(system_u:object_r:ssh_exec_t,s0) + /usr/bin/ssh-agent -- gen_context(system_u:object_r:ssh_agent_exec_t,s0) + /usr/bin/ssh-keygen -- gen_context(system_u:object_r:ssh_keygen_exec_t,s0) +-/usr/bin/sshd -- gen_context(system_u:object_r:sshd_exec_t,s0) ++/usr/bin/sshd -- gen_context(system_u:object_r:unconfined_t,s0) + + /usr/lib/openssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0) + /usr/lib/ssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0) +@@ -17,7 +17,7 @@ HOME_DIR/\.ssh(/.*)? gen_context(system_u:object_r:ssh_home_t,s0) + + /usr/libexec/openssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0) + +-/usr/sbin/sshd -- gen_context(system_u:object_r:sshd_exec_t,s0) ++/usr/sbin/sshd -- gen_context(system_u:object_r:unconfined_t,s0) + + /run/sshd(/.*)? gen_context(system_u:object_r:sshd_runtime_t,s0) + /run/sshd\.init\.pid -- gen_context(system_u:object_r:sshd_runtime_t,s0) diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/unlabeled.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/unlabeled.patch new file mode 100644 index 0000000000..972b954b2b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/unlabeled.patch @@ -0,0 +1,11 @@ +index 7c60eda2c..736187b7a 100644 +--- refpolicy/policy/modules/kernel/kernel.te ++++ refpolicy/policy/modules/kernel/kernel.te +@@ -191,6 +191,7 @@ genfscon proc /sys/dev gen_context(system_u:object_r:sysctl_dev_t,s0) + type unlabeled_t; + kernel_rootfs_mountpoint(unlabeled_t) + fs_associate(unlabeled_t) ++fs_associate_tmpfs(unlabeled_t) + sid file gen_context(system_u:object_r:unlabeled_t,s0) + sid unlabeled gen_context(system_u:object_r:unlabeled_t,mls_systemhigh) + neverallow * unlabeled_t:file entrypoint; diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/metadata.xml new file mode 100644 index 0000000000..46dc07f542 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/metadata.xml @@ -0,0 +1,15 @@ + + + + + selinux@gentoo.org + SELinux Team + + + Gentoo SELinux base policy. This contains policy for a system at the end of system installation. + There is no extra policy in this package. + + + Enable support for the unconfined SELinux policy module + + diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/selinux-base-policy-2.20200818-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/selinux-base-policy-2.20200818-r2.ebuild new file mode 100644 index 0000000000..cd986fdb29 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/selinux-base-policy-2.20200818-r2.ebuild @@ -0,0 +1,145 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +if [[ ${PV} == 9999* ]]; then + EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}" + EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}" + EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy" + + inherit git-r3 +else + SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2 + https://dev.gentoo.org/~perfinion/patches/${PN}/patchbundle-${PN}-${PVR}.tar.bz2" + KEYWORDS="amd64 -arm ~arm64 ~mips x86" +fi + +HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux" +DESCRIPTION="SELinux policy for core modules" + +IUSE="systemd +unconfined" + +PDEPEND="unconfined? ( sec-policy/selinux-unconfined )" +DEPEND="=sec-policy/selinux-base-${PVR}[systemd?]" +RDEPEND="${DEPEND}" +BDEPEND=" + sys-apps/checkpolicy + sys-devel/m4" + +MODS="application authlogin bootloader clock consoletype cron dmesg fstools getty hostname hotplug init iptables libraries locallogin logging lvm miscfiles modutils mount mta netutils nscd portage raid rsync selinuxutil setrans ssh staff storage su sysadm sysnetwork systemd tmpfiles udev userdomain usermanage unprivuser xdg" +LICENSE="GPL-2" +SLOT="0" +S="${WORKDIR}/" + +# flatcar changes: apply a couple of +# patches on the current policies +PATCHES=( + "${FILESDIR}/sshd.patch" + "${FILESDIR}/init.patch" + "${FILESDIR}/locallogin.patch" + "${FILESDIR}/logging.patch" + # this patch is required to prevent `torcx-generator` + # to fail if SELinux is enforced in early boot. + # It can be removed once we drop torcx support. + "${FILESDIR}/unlabeled.patch" + # This is to allow pings from some IP address. + "${FILESDIR}/ping.patch" +) + +# Code entirely copied from selinux-eclass (cannot inherit due to dependency on +# itself), when reworked reinclude it. Only postinstall (where -b base.pp is +# added) needs to remain then. + +pkg_pretend() { + for i in ${POLICY_TYPES}; do + if [[ "${i}" == "targeted" ]] && ! use unconfined; then + die "If you use POLICY_TYPES=targeted, then USE=unconfined is mandatory." + fi + done +} + +src_prepare() { + local modfiles + + if [[ ${PV} != 9999* ]]; then + einfo "Applying SELinux policy updates ... " + eapply -p0 "${WORKDIR}/0001-full-patch-against-stable-release.patch" + fi + + eapply -p0 "${PATCHES[@]}" + eapply_user + + # Collect only those files needed for this particular module + for i in ${MODS}; do + modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.te) $modfiles" + modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.fc) $modfiles" + done + + for i in ${POLICY_TYPES}; do + mkdir "${S}"/${i} || die "Failed to create directory ${S}/${i}" + cp "${S}"/refpolicy/doc/Makefile.example "${S}"/${i}/Makefile \ + || die "Failed to copy Makefile.example to ${S}/${i}/Makefile" + + cp ${modfiles} "${S}"/${i} \ + || die "Failed to copy the module files to ${S}/${i}" + done +} + +src_compile() { + for i in ${POLICY_TYPES}; do + emake NAME=$i SHAREDIR="${ROOT}"/usr/share/selinux -C "${S}"/${i} + done +} + +src_install() { + local BASEDIR="/usr/share/selinux" + + for i in ${POLICY_TYPES}; do + for j in ${MODS}; do + einfo "Installing ${i} ${j} policy package" + insinto ${BASEDIR}/${i} + doins "${S}"/${i}/${j}.pp + done + done +} + +pkg_postinst() { + # Set root path and don't load policy into the kernel when cross compiling + local root_opts="" + if [[ "${ROOT}" != "" ]]; then + root_opts="-p ${ROOT} -n" + fi + + # Override the command from the eclass, we need to load in base as well here + local COMMAND="-i base.pp" + if has_version " +Date: Fri, 4 Jun 2021 13:17:44 +0200 +Subject: [PATCH] policy/modules/kernel: all more actions for kernel + +Signed-off-by: Mathieu Tortuyaux +--- + policy/modules/kernel/kernel.te | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git refpolicy/policy/modules/kernel/kernel.te refpolicy/policy/modules/kernel/kernel.te +--- refpolicy/policy/modules/kernel/kernel.te ++++ refpolicy/policy/modules/kernel/kernel.te +@@ -351,6 +351,10 @@ files_list_home(kernel_t) + files_read_usr_files(kernel_t) + + mcs_process_set_categories(kernel_t) ++mcs_killall(kernel_t) ++mcs_file_read_all(kernel_t) ++mcs_file_write_all(kernel_t) ++mcs_ptrace_all(kernel_t) + + mls_process_read_all_levels(kernel_t) + mls_process_write_all_levels(kernel_t) diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/0001-policy-ms-MCS-restricts-relabelfrom.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/0001-policy-ms-MCS-restricts-relabelfrom.patch new file mode 100644 index 0000000000..5cce12771a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/0001-policy-ms-MCS-restricts-relabelfrom.patch @@ -0,0 +1,27 @@ +--- refpolicy/policy/mcs ++++ refpolicy/policy/mcs +@@ -1,4 +1,6 @@ + ifdef(`enable_mcs',` ++ ++default_range dir_file_class_set target low-high; + # + # Define sensitivities + # +@@ -99,14 +101,14 @@ mlsconstrain { lnk_file chr_file blk_file sock_file } { write setattr } + # New filesystem object labels must be dominated by the relabeling subject + # clearance, also the objects are single-level. + mlsconstrain file { create relabelto } +- (( h1 dom h2 ) and ( l2 eq h2 )); ++ ((( h1 dom h2 ) and ( l2 eq h2 )) or (t1 == mcswriteall)); + + # new file labels must be dominated by the relabeling subject clearance + mlsconstrain { dir file lnk_file chr_file blk_file sock_file fifo_file } { relabelfrom } +- ( h1 dom h2 ); ++ (( h1 dom h2 ) or (t1 == mcswriteall)); + + mlsconstrain { dir file lnk_file chr_file blk_file sock_file fifo_file } { create relabelto } +- (( h1 dom h2 ) and ( l2 eq h2 )); ++ ((( h1 dom h2 ) and ( l2 eq h2 ) or (t1 == mcswriteall))); + + mlsconstrain process { transition dyntransition } + (( h1 dom h2 ) or ( t1 == mcssetcats )); diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/config b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/config new file mode 100644 index 0000000000..7b66367667 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/config @@ -0,0 +1,15 @@ +# This file controls the state of SELinux on the system on boot. + +# SELINUX can take one of these three values: +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=permissive + +# SELINUXTYPE can take one of these four values: +# targeted - Only targeted network daemons are protected. +# strict - Full SELinux protection. +# mls - Full SELinux protection with Multi-Level Security +# mcs - Full SELinux protection with Multi-Category Security +# (mls, but only one sensitivity level) +SELINUXTYPE=mcs diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/icmp-bind.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/icmp-bind.patch new file mode 100644 index 0000000000..a2d653caf2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/icmp-bind.patch @@ -0,0 +1,40 @@ +diff -u -r refpolicy/policy/modules/kernel/corenetwork.if.in refpolicy2/policy/modules/kernel/corenetwork.if.in +--- refpolicy/policy/modules/kernel/corenetwork.if.in 2022-01-12 16:59:47.572670384 -0000 ++++ refpolicy2/policy/modules/kernel/corenetwork.if.in 2022-01-12 17:01:54.974858982 -0000 +@@ -879,6 +879,24 @@ + + ######################################## + ## ++## Bind ICMP sockets to generic nodes. ++## ++## ++## ++## Domain allowed access. ++## ++## ++# ++interface(`corenet_icmp_bind_generic_node',` ++ gen_require(` ++ type node_t; ++ ') ++ ++ allow $1 node_t:icmp_socket node_bind; ++') ++ ++######################################## ++## + ## Bind TCP sockets to generic nodes. + ## + ## +diff -u -r refpolicy/policy/modules/kernel/corenetwork.te.in refpolicy2/policy/modules/kernel/corenetwork.te.in +--- refpolicy/policy/modules/kernel/corenetwork.te.in 2022-01-12 16:59:47.573670362 -0000 ++++ refpolicy2/policy/modules/kernel/corenetwork.te.in 2022-01-12 17:03:12.754142616 -0000 +@@ -373,7 +373,7 @@ + + # Bind to any network address. + allow corenet_unconfined_type port_type:{ tcp_socket udp_socket rawip_socket sctp_socket } name_bind; +-allow corenet_unconfined_type node_type:{ tcp_socket udp_socket rawip_socket sctp_socket } node_bind; ++allow corenet_unconfined_type node_type:{ icmp_socket tcp_socket udp_socket rawip_socket sctp_socket } node_bind; + + # Infiniband + corenet_ib_access_all_pkeys(corenet_unconfined_type) diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/lxc_contexts b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/lxc_contexts new file mode 100644 index 0000000000..b9ce512118 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/lxc_contexts @@ -0,0 +1,10 @@ +# This file is used to configure the per-instance contexts of rkt and other +# applications that use libvirt for lxc container support. +# +# See: +# https://coreos.com/rkt/docs/latest/selinux.html +# https://selinuxproject.org/page/PolicyConfigurationFiles#contexts.2Flxc_contexts_File + +process = "system_u:system_r:svirt_lxc_net_t:s0" +content = "system_u:object_r:virt_var_lib_t:s0" +file = "system_u:object_r:svirt_lxc_file_t:s0" diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/selinux.conf b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/selinux.conf new file mode 100644 index 0000000000..77d379e812 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/selinux.conf @@ -0,0 +1,4 @@ +# Rebuild all selinux policy modules +[selinux-rebuild] +class = portage.sets.dbapi.OwnerSet +files = /usr/share/selinux/ diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/tmpfiles.d/selinux-base.conf b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/tmpfiles.d/selinux-base.conf new file mode 100644 index 0000000000..a123a51d15 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/tmpfiles.d/selinux-base.conf @@ -0,0 +1,4 @@ +#Type Path Mode UID GID Age Argument +d /etc/selinux/ - - - - - +L /etc/selinux/config - - - - ../../usr/lib/selinux/config +L /etc/selinux/mcs - - - - ../../usr/lib/selinux/mcs diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/metadata.xml new file mode 100644 index 0000000000..e59a87405f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/metadata.xml @@ -0,0 +1,17 @@ + + + + + selinux@gentoo.org + SELinux Team + + + Gentoo SELinux base policy. This contains policy for a system at the end of system installation. + There is no extra policy in this package. + + + Enable User Based Access Control (UBAC) in the SELinux policy + Enable support for the unconfined SELinux module + Default allow unknown classes in kernels newer than the policy (SELinux policy capability). + + diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20200818-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20200818-r2.ebuild new file mode 100644 index 0000000000..f17de9ee5b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20200818-r2.ebuild @@ -0,0 +1,195 @@ +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +# flatcar changes +PYTHON_COMPAT=( python3_{8,9,10} ) +PYTHON_REQ_USE="xml" +TMPFILES_OPTIONAL=1 +inherit systemd tmpfiles python-any-r1 + +if [[ ${PV} == 9999* ]]; then + EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}" + EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}" + EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy" + + inherit git-r3 +else + SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2 + https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2" + + KEYWORDS="amd64 -arm ~arm64 ~mips x86" +fi + +IUSE="doc +unknown-perms systemd +ubac +unconfined" + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux" +LICENSE="GPL-2" +SLOT="0" + +# flatcar changes +RDEPEND=">=sys-apps/policycoreutils-2.8 + >=sys-apps/checkpolicy-2.8 +" +DEPEND="${RDEPEND}" +# flatcar: BDEPEND on python - normally pulled in through policycoreutils +# but we made that dep conditional on USE=python +BDEPEND="sys-devel/m4 + ${PYTHON_DEPS} +" + + +# flatcar changes +PATCHES=( + "${FILESDIR}"/0001-policy-modules-kernel-all-more-actions-for-kernel.patch + "${FILESDIR}"/0001-policy-ms-MCS-restricts-relabelfrom.patch + "${FILESDIR}"/icmp-bind.patch +) + +S=${WORKDIR}/ + +src_prepare() { + if [[ ${PV} != 9999* ]]; then + einfo "Applying SELinux policy updates ... " + eapply -p0 "${WORKDIR}/0001-full-patch-against-stable-release.patch" + fi + + # flatcar changes + eapply -p0 "${PATCHES[@]}" + eapply_user + + cd "${S}/refpolicy" || die + emake bare +} + +src_configure() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + # Update the SELinux refpolicy capabilities based on the users' USE flags. + if use unknown-perms; then + sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/build.conf" \ + || die "Failed to allow Unknown Permissions Handling" + sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/Makefile" \ + || die "Failed to allow Unknown Permissions Handling" + fi + + if ! use ubac; then + sed -i -e '/^UBAC/s/y/n/' "${S}/refpolicy/build.conf" \ + || die "Failed to disable User Based Access Control" + fi + + if use systemd; then + sed -i -e '/^SYSTEMD/s/n/y/' "${S}/refpolicy/build.conf" \ + || die "Failed to enable SystemD" + fi + + echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf" || die + + # Prepare initial configuration + cd "${S}/refpolicy" || die + emake conf + + # Setup the policies based on the types delivered by the end user. + # These types can be "targeted", "strict", "mcs" and "mls". + for i in ${POLICY_TYPES}; do + cp -a "${S}/refpolicy" "${S}/${i}" || die + cd "${S}/${i}" || die + + sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf" || die + + # flatcar changes: it's required to run polkit without segfault + # we need to pass this argument now before the compilation of the policy + sed -i "s/allow_execmem = false/allow_execmem = true/" "${S}/${i}/policy/booleans.conf" || die + + sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \ + "${S}/${i}/build.conf" || die "build.conf setup failed." + + if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]]; + then + # MCS/MLS require additional settings + sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \ + || die "failed to set type to mls" + fi + + if [ "${i}" == "targeted" ]; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-standard/seusers" \ + || die "targeted seusers setup failed." + fi + + if [ "${i}" != "targeted" ] && [ "${i}" != "strict" ] && use unconfined; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-${i}/seusers" \ + || die "policy seusers setup failed." + fi + done +} + +src_compile() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" || die + # flatcar changes + emake base BINDIR="${ROOT}/usr/bin" NAME=$i SHAREDIR="${ROOT%/}"/usr/share/selinux \ + LD_LIBRARY_PATH="${ROOT}/usr/lib64:${LD_LIBRARY_PATH}" -C "${S}"/${i} + if use doc; then + emake html + fi + done +} + +src_install() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" || die + + emake DESTDIR="${D}" install + emake DESTDIR="${D}" install-headers + + echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type" || die + + echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types" || die + + # libsemanage won't make this on its own + keepdir "/etc/selinux/${i}/policy" + + if use doc; then + docinto ${i}/html + dodoc -r doc/html/*; + fi + + insinto /usr/share/selinux/devel; + doins doc/policy.xml; + + done + + # flatcar changes + dotmpfiles "${FILESDIR}/tmpfiles.d/selinux-base.conf" + systemd-tmpfiles --root="${D}" --create selinux-base.conf + + docinto / + dodoc doc/Makefile.example doc/example.{te,fc,if} + + doman man/man8/*.8; + + # flatcar changes + insinto /usr/lib/selinux + doins "${FILESDIR}/config" + + insinto /etc/selinux/mcs/contexts + doins "${FILESDIR}/lxc_contexts" + + # flatcar changes + mkdir -p "${D}/usr/lib/selinux" + for i in ${POLICY_TYPES}; do + mv "${D}/etc/selinux/${i}" "${D}/usr/lib/selinux" + dosym "../../usr/lib/selinux/${i}" "/etc/selinux/${i}" + done + + insinto /usr/share/portage/config/sets + doins "${FILESDIR}/selinux.conf" +} diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild new file mode 100644 index 0000000000..3ea875afca --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild @@ -0,0 +1,153 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +if [[ ${PV} == 9999* ]]; then + EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}" + EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}" + EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy" + + inherit git-r3 +else + SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2 + https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2" + + KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86" +fi + +IUSE="doc +unknown-perms systemd +ubac +unconfined" + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux" +LICENSE="GPL-2" +SLOT="0" + +RDEPEND=">=sys-apps/policycoreutils-2.8" +DEPEND="${RDEPEND}" +BDEPEND=" + >=sys-apps/checkpolicy-2.8 + sys-devel/m4" + +S=${WORKDIR}/ + +src_prepare() { + if [[ ${PV} != 9999* ]]; then + einfo "Applying SELinux policy updates ... " + eapply -p0 "${WORKDIR}/0001-full-patch-against-stable-release.patch" + fi + + eapply_user + + cd "${S}/refpolicy" || die + emake bare +} + +src_configure() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + # Update the SELinux refpolicy capabilities based on the users' USE flags. + if use unknown-perms; then + sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/build.conf" \ + || die "Failed to allow Unknown Permissions Handling" + sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/Makefile" \ + || die "Failed to allow Unknown Permissions Handling" + fi + + if ! use ubac; then + sed -i -e '/^UBAC/s/y/n/' "${S}/refpolicy/build.conf" \ + || die "Failed to disable User Based Access Control" + fi + + if use systemd; then + sed -i -e '/^SYSTEMD/s/n/y/' "${S}/refpolicy/build.conf" \ + || die "Failed to enable SystemD" + fi + + echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf" || die + + # Prepare initial configuration + cd "${S}/refpolicy" || die + emake conf + + # Setup the policies based on the types delivered by the end user. + # These types can be "targeted", "strict", "mcs" and "mls". + for i in ${POLICY_TYPES}; do + cp -a "${S}/refpolicy" "${S}/${i}" || die + cd "${S}/${i}" || die + + sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf" || die + + sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \ + "${S}/${i}/build.conf" || die "build.conf setup failed." + + if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]]; + then + # MCS/MLS require additional settings + sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \ + || die "failed to set type to mls" + fi + + if [ "${i}" == "targeted" ]; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-standard/seusers" \ + || die "targeted seusers setup failed." + fi + + if [ "${i}" != "targeted" ] && [ "${i}" != "strict" ] && use unconfined; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-${i}/seusers" \ + || die "policy seusers setup failed." + fi + done +} + +src_compile() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" || die + emake base + if use doc; then + emake html + fi + done +} + +src_install() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" || die + + emake DESTDIR="${D}" install + emake DESTDIR="${D}" install-headers + + echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type" || die + + echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types" || die + + # libsemanage won't make this on its own + keepdir "/etc/selinux/${i}/policy" + + if use doc; then + docinto ${i}/html + dodoc -r doc/html/*; + fi + + insinto /usr/share/selinux/devel; + doins doc/policy.xml; + + done + + docinto / + dodoc doc/Makefile.example doc/example.{te,fc,if} + + doman man/man8/*.8; + + insinto /etc/selinux + doins "${FILESDIR}/config" + + insinto /usr/share/portage/config/sets + doins "${FILESDIR}/selinux.conf" +} diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-9999.ebuild new file mode 100644 index 0000000000..3be921e88d --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-9999.ebuild @@ -0,0 +1,153 @@ +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +if [[ ${PV} == 9999* ]]; then + EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}" + EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}" + EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy" + + inherit git-r3 +else + SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2 + https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2" + + KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86" +fi + +IUSE="doc +unknown-perms systemd +ubac +unconfined" + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux" +LICENSE="GPL-2" +SLOT="0" + +RDEPEND=">=sys-apps/policycoreutils-2.8" +DEPEND="${RDEPEND}" +BDEPEND=" + >=sys-apps/checkpolicy-2.8 + sys-devel/m4" + +S=${WORKDIR}/ + +src_prepare() { + if [[ ${PV} != 9999* ]]; then + einfo "Applying SELinux policy updates ... " + eapply -p0 "${WORKDIR}/0001-full-patch-against-stable-release.patch" + fi + + eapply_user + + cd "${S}/refpolicy" || die + emake bare +} + +src_configure() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + # Update the SELinux refpolicy capabilities based on the users' USE flags. + if use unknown-perms; then + sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/build.conf" \ + || die "Failed to allow Unknown Permissions Handling" + sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/Makefile" \ + || die "Failed to allow Unknown Permissions Handling" + fi + + if ! use ubac; then + sed -i -e '/^UBAC/s/y/n/' "${S}/refpolicy/build.conf" \ + || die "Failed to disable User Based Access Control" + fi + + if use systemd; then + sed -i -e '/^SYSTEMD/s/n/y/' "${S}/refpolicy/build.conf" \ + || die "Failed to enable SystemD" + fi + + echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf" || die + + # Prepare initial configuration + cd "${S}/refpolicy" || die + emake conf + + # Setup the policies based on the types delivered by the end user. + # These types can be "targeted", "strict", "mcs" and "mls". + for i in ${POLICY_TYPES}; do + cp -a "${S}/refpolicy" "${S}/${i}" || die + cd "${S}/${i}" || die + + sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf" || die + + sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \ + "${S}/${i}/build.conf" || die "build.conf setup failed." + + if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]]; + then + # MCS/MLS require additional settings + sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \ + || die "failed to set type to mls" + fi + + if [ "${i}" == "targeted" ]; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-standard/seusers" \ + || die "targeted seusers setup failed." + fi + + if [ "${i}" != "targeted" ] && [ "${i}" != "strict" ] && use unconfined; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-${i}/seusers" \ + || die "policy seusers setup failed." + fi + done +} + +src_compile() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" || die + emake base + if use doc; then + emake html + fi + done +} + +src_install() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" || die + + emake DESTDIR="${D}" install + emake DESTDIR="${D}" install-headers + + echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type" || die + + echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types" || die + + # libsemanage won't make this on its own + keepdir "/etc/selinux/${i}/policy" + + if use doc; then + docinto ${i}/html + dodoc -r doc/html/*; + fi + + insinto /usr/share/selinux/devel; + doins doc/policy.xml; + + done + + docinto / + dodoc doc/Makefile.example doc/example.{te,fc,if} + + doman man/man8/*.8; + + insinto /etc/selinux + doins "${FILESDIR}/config" + + insinto /usr/share/portage/config/sets + doins "${FILESDIR}/selinux.conf" +} diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/Manifest b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/Manifest new file mode 100644 index 0000000000..531f9303e2 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/Manifest @@ -0,0 +1,4 @@ +DIST patchbundle-selinux-base-policy-2.20200818-r2.tar.bz2 433623 BLAKE2B f0655c45c50347faf1217e5861298dce822e4b726c0b4489d4c70c4815842f7c17ac1b0a302ae5482a3ad25d1d5b6c4c3b6395194e79005f31560d103ad0fce6 SHA512 9fd22683ecd602a429b2d489f7b8c2936409fa060046255b72a4b95c9fdefa2455ba7655945278dc972c22f3ade6617898ed169e22001aaaaded4b47ca51b0c3 +DIST patchbundle-selinux-base-policy-2.20210203-r1.tar.bz2 298116 BLAKE2B 50c5523a8b758652af6aa59d548e9499b899898b58f52f74f1667a0c552f2b2d0ed5a44352e59245c7f0ebd199e2391400168d6ab27b4160d726fccded0c56f2 SHA512 ddb877ec3e2883f57e54e7380dd449d4d89a0769a1fb87141786e5de741ac21b2ead60362fd17c25888eb1334c68f71da561f4f29f406f0d4b5d13d378f6baff +DIST refpolicy-2.20200818.tar.bz2 570896 BLAKE2B 502c00fec39e1b81e42de3f7f942623f8b3fbdeac19f9f01126722a368b7d4f70427d6e4a574754c4f2fa551e4bc75c912dbc515c004f0dcd5eb28ab416498f6 SHA512 e4b527bb7a87b9359fc42eb111d5008103f57c37128998ea0e21ec7b0b8607ffe3f67697450e4c51a0db172ece69083335b279bacef4b1bd0b7748b58caa99a7 +DIST refpolicy-2.20210203.tar.bz2 564099 BLAKE2B a94a11ebb78890ba2c98714be2fe9054fdb8ccaf5154f47b881a9575a4a6865e8df475805550d7bba8039b4230c6a0c9f5c6130bf8c35a26bc7c473d550fb40d SHA512 a6ffe718626dd6121023b4cbc424c933d44ca8b662bd708baad307cf6284be0d80fef40cdc8b37f6f17ecb3636fd8d6c1d5d4072c17d835b7f500e17a3acd9fc diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/files/virt.patch b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/files/virt.patch new file mode 100644 index 0000000000..74b5062ef8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/files/virt.patch @@ -0,0 +1,45 @@ +index 4943ad79d..8b0ed779e 100644 +--- services/virt.te ++++ services/virt.te +@@ -1377,3 +1377,41 @@ sysnet_dns_name_resolve(virtlogd_t) + + virt_manage_log(virtlogd_t) + virt_read_config(virtlogd_t) ++ ++require { ++ type kernel_t; ++ type tmpfs_t; ++ type var_lib_t; ++} ++allow kernel_t svirt_lxc_net_t:process transition; ++allow initrc_t svirt_lxc_net_t:process transition; ++allow kernel_t svirt_lxc_net_t:process2 nnp_transition; ++fs_manage_tmpfs_chr_files(svirt_lxc_net_t) ++fs_manage_tmpfs_dirs(svirt_lxc_net_t) ++fs_manage_tmpfs_files(svirt_lxc_net_t) ++fs_manage_tmpfs_sockets(svirt_lxc_net_t) ++fs_manage_tmpfs_symlinks(svirt_lxc_net_t) ++fs_remount_tmpfs(svirt_lxc_net_t) ++kernel_read_messages(svirt_lxc_net_t) ++kernel_sigchld(svirt_lxc_net_t) ++kernel_use_fds(svirt_lxc_net_t) ++allow svirt_lxc_net_t self:process getcap; ++files_read_var_lib_files(svirt_lxc_net_t) ++files_read_var_lib_symlinks(svirt_lxc_net_t) ++term_use_generic_ptys(svirt_lxc_net_t) ++term_setattr_generic_ptys(svirt_lxc_net_t) ++allow svirt_lxc_net_t tmpfs_t:chr_file { read write open }; ++allow svirt_lxc_net_t svirt_lxc_file_t:chr_file { manage_file_perms }; ++allow svirt_lxc_net_t self:capability sys_chroot; ++allow svirt_lxc_net_t self:process getpgid; ++allow svirt_lxc_net_t svirt_lxc_file_t:file { entrypoint mounton }; ++allow svirt_lxc_net_t var_lib_t:file { entrypoint execute execute_no_trans }; ++allow svirt_lxc_net_t kernel_t:fifo_file { getattr ioctl read write open append }; ++allow svirt_lxc_net_t initrc_t:fifo_file { getattr ioctl read write open append }; ++filetrans_pattern(kernel_t, etc_t, svirt_lxc_file_t, dir, "cni"); ++ ++# this is required by flanneld ++allow svirt_lxc_net_t kernel_t:system { module_request }; ++ ++# required by flanneld to write into /run/flannel/subnet.env ++filetrans_pattern(kernel_t, var_run_t, svirt_lxc_file_t, dir, "flannel"); diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/metadata.xml new file mode 100644 index 0000000000..9173800ffc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/metadata.xml @@ -0,0 +1,8 @@ + + + + + selinux@gentoo.org + SELinux Team + + diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20200818-r2.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20200818-r2.ebuild new file mode 100644 index 0000000000..64e118aaf9 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20200818-r2.ebuild @@ -0,0 +1,18 @@ +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +IUSE="" +MODS="virt" + +inherit selinux-policy-2 + +DESCRIPTION="SELinux policy for virt" + +# flatcar changes +POLICY_PATCH="${FILESDIR}/virt.patch" + +if [[ ${PV} != 9999* ]] ; then + KEYWORDS="amd64 -arm ~arm64 ~mips x86" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20210203-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20210203-r1.ebuild new file mode 100644 index 0000000000..cfdb675f36 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20210203-r1.ebuild @@ -0,0 +1,15 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +IUSE="" +MODS="virt" + +inherit selinux-policy-2 + +DESCRIPTION="SELinux policy for virt" + +if [[ ${PV} != 9999* ]] ; then + KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-9999.ebuild new file mode 100644 index 0000000000..212b7c40b8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-9999.ebuild @@ -0,0 +1,15 @@ +# Copyright 1999-2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +IUSE="" +MODS="virt" + +inherit selinux-policy-2 + +DESCRIPTION="SELinux policy for virt" + +if [[ ${PV} != 9999* ]] ; then + KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86" +fi diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/README b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/README new file mode 100644 index 0000000000..b44f857759 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/README @@ -0,0 +1,2 @@ +If nsswitch.conf changes make sure to apply the change to sys-auth/google-oslogin +Those files must be kept in sync. diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.6.8-r10.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.6.8-r10.ebuild new file mode 120000 index 0000000000..512b17810f --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.6.8-r10.ebuild @@ -0,0 +1 @@ +baselayout-9999.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild new file mode 100644 index 0000000000..08dd5924b6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild @@ -0,0 +1,230 @@ +# Copyright 1999-2013 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 +CROS_WORKON_PROJECT="flatcar/baselayout" +CROS_WORKON_LOCALNAME="baselayout" +CROS_WORKON_REPO="https://github.com" + +if [[ "${PV}" == 9999 ]]; then + KEYWORDS="~amd64 ~arm ~arm64 ~x86" +else + CROS_WORKON_COMMIT="f55f20a58997b0cdf7d85e90d1a7050a5e19c7ae" # flatcar-master + KEYWORDS="amd64 arm arm64 x86" +fi + +TMPFILES_OPTIONAL=1 +inherit cros-workon multilib systemd tmpfiles + +DESCRIPTION="Filesystem baselayout for CoreOS" +HOMEPAGE="http://www.coreos.com/" +SRC_URI="" + +LICENSE="GPL-2" +SLOT="0" +IUSE="cros_host symlink-usr" + +# This version of baselayout replaces coreos-base +DEPEND="sys-apps/systemd + net-dns/libidn2:= + !coreos-base/coreos-base + !usr/foo symlinks +declare -a BASE_DIRS # list of absolute paths that should be directories + +# Check that a pre-existing symlink is correct +check_sym() { + local path="$1" value="$2" + local real_path=$(readlink -f "${ROOT}${path}") + local real_value=$(readlink -f "${ROOT}${path%/*}/${value}") + if [[ -e "${read_path}" && "${read_path}" != "${read_value}" ]]; then + die "${path} is not a symlink to ${value}" + fi +} + +pkg_setup() { + local libdirs=$(get_all_libdirs) + + if [[ -z "${libdirs}" ]]; then + die "your DEFAULT_ABI=$DEFAULT_ABI appears to be invalid" + fi + + # figure out which paths should be symlinks and which should be directories + local d + for d in bin sbin ${libdirs} ; do + if use symlink-usr; then + USR_SYMS["/$d"]="usr/$d" + BASE_DIRS+=( "/usr/$d" "/usr/local/$d" ) + else + BASE_DIRS+=( "/$d" "/usr/$d" "/usr/local/$d" ) + fi + done + + # make sure any pre-existing symlinks map to the expected locations. + local sym + if use symlink-usr; then + for sym in "${!USR_SYMS[@]}" ; do + check_sym "${sym}" "${USR_SYMS[$sym]}" + done + fi +} + +src_compile() { + default + + # generate a tmpfiles.d config to cover our /usr symlinks + if use symlink-usr; then + local tmpfiles="${T}/baselayout-usr.conf" + echo -n > ${tmpfiles} || die + for sym in "${!USR_SYMS[@]}" ; do + echo "L+ ${sym} - - - - ${USR_SYMS[$sym]}" >> ${tmpfiles} + done + fi +} + +src_install() { + dodir "${BASE_DIRS[@]}" + + if use cros_host; then + # Since later systemd-tmpfiles --root is used only users from + # /etc/passwd are considered but we don't want to add core there + # because it would make emerge overwrite the system's database on + # installation when the SDK user is already there. Instead, just + # create the folder manually and remove the tmpfile directive. + rm "${S}/tmpfiles.d/baselayout-home.conf" + mkdir -p "${D}"/home/core + chown 500:500 "${D}"/home/core + else + # Initialize /etc/passwd, group, and friends now, so + # systemd-tmpfiles can resolve user information in ${D} + # rootfs. + bash "scripts/flatcar-tmpfiles" "${D}" "${S}/baselayout" || die + fi + + if use symlink-usr; then + dotmpfiles "${T}/baselayout-usr.conf" + systemd-tmpfiles --root="${D}" --create + fi + + emake DESTDIR="${D}" install + + # Fill in all other paths defined in tmpfiles configs + systemd-tmpfiles --root="${D}" --create + + # The above created a few mount points but leave those out of the + # package since they may be mounted read-only. postinst can make them. + local mnt + for mnt in "${MOUNT_POINTS[@]}"; do + rmdir "${D}${mnt}" || die + done + + doenvd "env.d/99flatcar_ldpath" + + # handle multilib paths. do it here because we want this behavior + # regardless of the C library that you're using. we do explicitly + # list paths which the native ldconfig searches, but this isn't + # problematic as it doesn't change the resulting ld.so.cache or + # take longer to generate. similarly, listing both the native + # path and the symlinked path doesn't change the resulting cache. + local libdir ldpaths + for libdir in $(get_all_libdirs) ; do + ldpaths+=":/${libdir}:/usr/${libdir}:/usr/local/${libdir}" + done + echo "LDPATH='${ldpaths#:}'" >> "${D}"/etc/env.d/00basic || die + + # Add oem/lib64 to search path towards end of the system's list. + # This simplifies the configuration of OEMs with dynamic libs. + ldpaths= + for libdir in $(get_all_libdirs) ; do + ldpaths+=":/usr/share/oem/${libdir}" + done + echo "LDPATH='${ldpaths#:}'" >> "${D}"/etc/env.d/80oem || die + + if ! use symlink-usr ; then + # modprobe uses /lib instead of /usr/lib + mv "${D}"/usr/lib/modprobe.d "${D}"/lib/modprobe.d || die + fi + + if use arm64; then + sed -i 's/ sss//' "${D}"/usr/share/baselayout/nsswitch.conf || die + fi + + if use cros_host; then + # Provided by vim in the SDK + rm -r "${D}"/etc/vim || die + # Undesirable in the SDK + rm "${D}"/etc/profile.d/flatcar-profile.sh || die + else + # Don't install /etc/issue since it is handled by coreos-init right now + rm "${D}"/etc/issue || die + sed -i -e '/\/etc\/issue/d' \ + "${D}"/usr/lib/tmpfiles.d/baselayout-etc.conf || die + + # Initialize /etc/passwd, group, and friends on boot. + dosbin "scripts/flatcar-tmpfiles" + systemd_dounit "scripts/flatcar-tmpfiles.service" + systemd_enable_service sysinit.target flatcar-tmpfiles.service + fi + + # sssd not yet building on arm64 + if use arm64; then + sed -i -e '/pam_sss.so/d' "${D}"/usr/lib/pam.d/* || die + fi +} + +pkg_postinst() { + # best-effort creation of mount points + local mnt + for mnt in "${MOUNT_POINTS[@]}"; do + [[ -d "${ROOT}${mnt}" ]] || mkdir "${ROOT}${mnt}" + done + # Set up /usr/lib/debug to match the root filesystem layout + # FIXME: This is done in postinst right now and all errors are ignored + # as a transitional scheme, this isn't important enough to migrate + # existing SDK environments. + local dir + for dir in "${BASE_DIRS[@]}"; do + mkdir -p "${ROOT}/usr/lib/debug/${dir}" + done + if use symlink-usr; then + for sym in "${!USR_SYMS[@]}" ; do + ln -sfT "${USR_SYMS[$sym]}" "${ROOT}/usr/lib/debug/${sym}" + done + fi + # The default passwd/group files must exist in the SDK for some ebuilds + if use cros_host; then + touch "${ROOT}/etc/"{group,gshadow,passwd,shadow} + chmod 640 "${ROOT}/etc/"{gshadow,shadow} + fi + # compat symlink for packages that haven't migrated to gentoo-functions + local func=../../lib/gentoo/functions.sh + if [[ "$(readlink "${ROOT}/etc/init.d/functions.sh")" != "${func}" ]]; then + elog "Creating /etc/init.d/functions.sh symlink..." + mkdir -p "${ROOT}/etc/init.d" + ln -sf "${func}" "${ROOT}/etc/init.d/functions.sh" + fi + # install compat symlinks in production images, not in SDK + # os-release symlink is set up in scripts + if ! use cros_host; then + local compat libdir + for compat in systemd kernel modprobe.d pam pam.d sysctl.d udev ; do + for libdir in $(get_all_libdirs) ; do + if [[ "${libdir}" == 'lib' ]]; then continue; fi + ln -sfT "../lib/${compat}" "${ROOT}/usr/${libdir}/${compat}" + done + done + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/metadata.xml new file mode 100644 index 0000000000..96a2d58636 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/metadata.xml @@ -0,0 +1,5 @@ + + + +base-system + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/Manifest b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/Manifest new file mode 100644 index 0000000000..9e0b7673d5 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/Manifest @@ -0,0 +1,2 @@ +DIST checkpolicy-3.1.tar.gz 69072 BLAKE2B 31cb5ef52533b0a62f954e770278fc5766a961d87fb86260b04abe562bcd90d0025b33931c6ad54096c64ab54150c7562c112eac80eb2f60dbcdda57f4cacfe2 SHA512 2276a5a0919286049d2ceba386ef5f6de523745b588bb81cb4fed5eced5fd0b8070249b7a3ae5a85e2abb9369a86318f727d4073aad14ab75c43750a46069168 +DIST checkpolicy-3.2.tar.gz 69035 BLAKE2B 263c582c8ed3c38822513899f3591edfc5d0132977451503a8b45d2074b5a1c5ce03973353b3ceaad44da913b4e35546cfef1988b68bd517618efdb942f994ec SHA512 133639595c2acc66c02b5a637c5e0c60d80ce2bae04f4a709d9fafabd31f9497d1a6e3334904b985c2a1bd94a7a7e3df782c2af2ae41d1fd79b69156a835edeb diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-3.1.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-3.1.ebuild new file mode 100644 index 0000000000..31985d221c --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-3.1.ebuild @@ -0,0 +1,65 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +inherit toolchain-funcs + +MY_P="${P//_/-}" +MY_RELEASEDATE="20200710" + +SEPOL_VER="${PV}" +SEMNG_VER="${PV}" + +DESCRIPTION="SELinux policy compiler" +HOMEPAGE="http://userspace.selinuxproject.org" + +if [[ ${PV} == 9999 ]] ; then + inherit git-r3 + EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git" + S="${WORKDIR}/${MY_P}/${PN}" +else + SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_RELEASEDATE}/${MY_P}.tar.gz" + KEYWORDS="amd64 ~arm ~arm64 ~mips x86" + S="${WORKDIR}/${MY_P}" +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="debug" + +DEPEND=">=sys-libs/libsepol-${SEPOL_VER}" +BDEPEND="sys-devel/flex + sys-devel/bison" + +RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}" + +src_compile() { + # flatcar changes + emake \ + CC="$(tc-getCC)" \ + YACC="bison -y" \ + PREFIX="/usr" \ + LIBDIR="${ROOT:-/}\$(PREFIX)/$(get_libdir)" \ + INCLUDEDIR="${ROOT}\$(PREFIX)/include" +} + +src_install() { + # flatcar changes + # we remove the `default` behavior to override + # the LIBSEPOLA variable in order to fix cross compile + emake DESTDIR="${D}" \ + LIBSEPOLA="${ROOT:-/}/usr/$(get_libdir)/libsepol.a" \ + install + + if use debug; then + dobin "${S}/test/dismod" + dobin "${S}/test/dispol" + fi +} + +pkg_postinst() { + if ! tc-is-cross-compiler; then + einfo "This checkpolicy can compile version `checkpolicy -V | cut -f 1 -d ' '` policy." + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-3.2.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-3.2.ebuild new file mode 100644 index 0000000000..f2cee80753 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-3.2.ebuild @@ -0,0 +1,50 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +inherit toolchain-funcs + +DESCRIPTION="SELinux policy compiler" +HOMEPAGE="http://userspace.selinuxproject.org" + +if [[ ${PV} == 9999 ]] ; then + inherit git-r3 + EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git" + S="${WORKDIR}/${P}/${PN}" +else + SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${PV}/${P}.tar.gz" + KEYWORDS="~amd64 ~arm ~arm64 ~mips ~x86" +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="debug" + +DEPEND=">=sys-libs/libsepol-${PV}" +BDEPEND="sys-devel/flex + sys-devel/bison" + +RDEPEND=">=sys-libs/libsepol-${PV}" + +src_compile() { + emake \ + CC="$(tc-getCC)" \ + YACC="bison -y" \ + LIBDIR="\$(PREFIX)/$(get_libdir)" +} + +src_install() { + default + + if use debug; then + dobin "${S}/test/dismod" + dobin "${S}/test/dispol" + fi +} + +pkg_postinst() { + if ! tc-is-cross-compiler; then + einfo "This checkpolicy can compile version `checkpolicy -V | cut -f 1 -d ' '` policy." + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-9999.ebuild new file mode 100644 index 0000000000..f2cee80753 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/checkpolicy-9999.ebuild @@ -0,0 +1,50 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +inherit toolchain-funcs + +DESCRIPTION="SELinux policy compiler" +HOMEPAGE="http://userspace.selinuxproject.org" + +if [[ ${PV} == 9999 ]] ; then + inherit git-r3 + EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git" + S="${WORKDIR}/${P}/${PN}" +else + SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${PV}/${P}.tar.gz" + KEYWORDS="~amd64 ~arm ~arm64 ~mips ~x86" +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="debug" + +DEPEND=">=sys-libs/libsepol-${PV}" +BDEPEND="sys-devel/flex + sys-devel/bison" + +RDEPEND=">=sys-libs/libsepol-${PV}" + +src_compile() { + emake \ + CC="$(tc-getCC)" \ + YACC="bison -y" \ + LIBDIR="\$(PREFIX)/$(get_libdir)" +} + +src_install() { + default + + if use debug; then + dobin "${S}/test/dismod" + dobin "${S}/test/dispol" + fi +} + +pkg_postinst() { + if ! tc-is-cross-compiler; then + einfo "This checkpolicy can compile version `checkpolicy -V | cut -f 1 -d ' '` policy." + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/metadata.xml new file mode 100644 index 0000000000..9173800ffc --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/checkpolicy/metadata.xml @@ -0,0 +1,8 @@ + + + + + selinux@gentoo.org + SELinux Team + + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/Manifest b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/Manifest new file mode 100644 index 0000000000..b69b290210 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/Manifest @@ -0,0 +1 @@ +DIST dbus-1.14.4.tar.xz 1368196 BLAKE2B 7da5cd8f09eaef7a64f35f8ccbeb81c5687b3fad02d6ac05dd4c232e0f731dbcf4c76c36b615e6216815c8f8631bf9cb32543665440153a1199b1b35922cdda4 SHA512 7c8ce95b8a4c63cf51cc9f10bebbc19e66d6a96c4806befad48c3fe73b4468bb2b50f9570b73fe05ff12223e5e6815032139d316995eb670c28b23c028f293d6 diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/README.md b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/README.md new file mode 100644 index 0000000000..e8770d9ee3 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/README.md @@ -0,0 +1,15 @@ +Modifications done in this fork: + +- Disable user sessions. We don't need them in Flatcar. At some point + Gentoo dropped the dedicated USE flag for it and enables user + sessions with systemd USE flag. + +- Drop the dependency on sec-policy/selinux-dbus which is brought by + the selinux USE flag. We enable the flag because we still want DBus + to be selinux-aware, but for some reason we didn't want to pull in + the `sec-policy/selinux-dbus` package. We may want to revisit this + with our SELinux work. + +- Drop /etc/machine-id generation. We do it elsewhere (bootengine?). + +- Mark it as stable for amd64 and arm64. diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.14.4.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.14.4.ebuild new file mode 100644 index 0000000000..ac7ebdfa29 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.14.4.ebuild @@ -0,0 +1,299 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{8..10} ) +TMPFILES_OPTIONAL=1 + +# At least at the moment, while a CMake port exists, it's not recommended +# for distributions. +# https://gitlab.freedesktop.org/dbus/dbus/-/blob/master/CONTRIBUTING.md#L189 +inherit autotools flag-o-matic linux-info python-any-r1 readme.gentoo-r1 systemd tmpfiles virtualx multilib-minimal + +DESCRIPTION="A message bus system, a simple way for applications to talk to each other" +HOMEPAGE="https://www.freedesktop.org/wiki/Software/dbus/" +SRC_URI="https://dbus.freedesktop.org/releases/dbus/${P}.tar.xz" + +LICENSE="|| ( AFL-2.1 GPL-2 )" +SLOT="0" +# Flatcar: Mark it as stable for amd64 and arm64. +KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" +IUSE="debug doc elogind selinux static-libs systemd test X" +RESTRICT="!test? ( test )" + +REQUIRED_USE="?? ( elogind systemd )" + +BDEPEND=" + acct-user/messagebus + app-text/xmlto + app-text/docbook-xml-dtd:4.4 + sys-devel/autoconf-archive + virtual/pkgconfig + doc? ( app-doc/doxygen ) +" +COMMON_DEPEND=" + >=dev-libs/expat-2.1.0 + elogind? ( sys-auth/elogind ) + selinux? ( + sys-process/audit + sys-libs/libselinux + ) + systemd? ( sys-apps/systemd:0= ) + X? ( + x11-libs/libX11 + x11-libs/libXt + ) +" +DEPEND="${COMMON_DEPEND} + dev-libs/expat + test? ( + ${PYTHON_DEPS} + >=dev-libs/glib-2.40:2 + ) +" +# Flatcar: Drop the following dependency to avoid pulling in +# unnecessary ebuilds into rootfs: +# +# selinux? ( sec-policy/selinux-dbus ) +# +# We may want to revisit that, actually. +RDEPEND="${COMMON_DEPEND} + acct-user/messagebus + systemd? ( virtual/tmpfiles ) +" + +DOC_CONTENTS=" + Some applications require a session bus in addition to the system + bus. Please see \`man dbus-launch\` for more information. +" + +# out of sources build dir for make check +TBD="${WORKDIR}/${P}-tests-build" + +PATCHES=( + "${FILESDIR}/dbus-enable-elogind.patch" + "${FILESDIR}/dbus-daemon-optional.patch" # bug #653136 +) + +pkg_setup() { + use test && python-any-r1_pkg_setup + + if use kernel_linux; then + CONFIG_CHECK="~EPOLL" + linux-info_pkg_setup + fi +} + +src_prepare() { + default + + if [[ ${CHOST} == *-solaris* ]]; then + # fix standards conflict, due to gcc being c99 by default nowadays + sed -i \ + -e 's/_XOPEN_SOURCE=500/_XOPEN_SOURCE=600/' \ + configure.ac || die + fi + + # required for bug #263909, cross-compile so don't remove eautoreconf + eautoreconf +} + +src_configure() { + local rundir=$(usex kernel_linux /run /var/run) + + sed -e "s;@rundir@;${EPREFIX}${rundir};g" "${FILESDIR}"/dbus.initd.in \ + > "${T}"/dbus.initd || die + + multilib-minimal_src_configure +} + +multilib_src_configure() { + local docconf myconf testconf + + # so we can get backtraces from apps + case ${CHOST} in + *-mingw*) + # error: unrecognized command line option '-rdynamic', bug #488036 + ;; + *) + append-flags -rdynamic + ;; + esac + + # libaudit is *only* used in DBus wrt SELinux support, so disable it, if + # not on an SELinux profile. + myconf=( + --localstatedir="${EPREFIX}/var" + --runstatedir="${EPREFIX}${rundir}" + $(use_enable static-libs static) + $(use_enable debug verbose-mode) + --disable-asserts + --disable-checks + $(use_enable selinux) + $(use_enable selinux libaudit) + --disable-apparmor + $(use_enable kernel_linux inotify) + --disable-kqueue + $(use_enable elogind) + $(use_enable systemd) + # Flatcar: disable user sessions + # $(use_enable systemd user-session) + --disable-user-session + --disable-embedded-tests + --disable-modular-tests + $(use_enable debug stats) + --with-session-socket-dir="${EPREFIX}"/tmp + --with-system-pid-file="${EPREFIX}${rundir}"/dbus.pid + --with-system-socket="${EPREFIX}${rundir}"/dbus/system_bus_socket + --with-systemdsystemunitdir="$(systemd_get_systemunitdir)" + --with-systemduserunitdir="$(systemd_get_userunitdir)" + --with-dbus-user=messagebus + $(use_with X x) + ) + + if [[ ${CHOST} == *-darwin* ]]; then + myconf+=( + --enable-launchd + --with-launchd-agent-dir="${EPREFIX}"/Library/LaunchAgents + ) + fi + + if multilib_is_native_abi; then + docconf=( + --enable-xml-docs + $(use_enable doc doxygen-docs) + ) + else + docconf=( + --disable-xml-docs + --disable-doxygen-docs + ) + myconf+=( + --disable-daemon + --disable-selinux + --disable-libaudit + --disable-elogind + --disable-systemd + --without-x + ) + fi + + einfo "Running configure in ${BUILD_DIR}" + ECONF_SOURCE="${S}" econf "${myconf[@]}" "${docconf[@]}" + + if multilib_is_native_abi && use test; then + mkdir "${TBD}" || die + cd "${TBD}" || die + testconf=( + $(use_enable test asserts) + $(use_enable test checks) + $(use_enable test embedded-tests) + $(use_enable test stats) + $(has_version dev-libs/dbus-glib && echo --enable-modular-tests) + ) + einfo "Running configure in ${TBD}" + ECONF_SOURCE="${S}" econf "${myconf[@]}" "${testconf[@]}" + fi +} + +multilib_src_compile() { + if multilib_is_native_abi; then + # After the compile, it uses a selinuxfs interface to + # check if the SELinux policy has the right support + use selinux && addwrite /selinux/access + + einfo "Running make in ${BUILD_DIR}" + emake + + if use test; then + einfo "Running make in ${TBD}" + emake -C "${TBD}" + fi + else + emake -C dbus libdbus-1.la + fi +} + +src_test() { + # DBUS_TEST_MALLOC_FAILURES=0 to avoid huge test logs + # https://gitlab.freedesktop.org/dbus/dbus/-/blob/master/CONTRIBUTING.md#L231 + DBUS_TEST_MALLOC_FAILURES=0 DBUS_VERBOSE=1 virtx emake -j1 -C "${TBD}" check + +} + +multilib_src_install() { + if multilib_is_native_abi; then + emake DESTDIR="${D}" install + else + emake DESTDIR="${D}" install-pkgconfigDATA + emake DESTDIR="${D}" -C dbus \ + install-libLTLIBRARIES install-dbusincludeHEADERS \ + install-nodist_dbusarchincludeHEADERS + fi +} + +multilib_src_install_all() { + newinitd "${T}"/dbus.initd dbus + + if use X; then + # dbus X session script (bug #77504) + # turns out to only work for GDM (and startx). has been merged into + # other desktop (kdm and such scripts) + exeinto /etc/X11/xinit/xinitrc.d + newexe "${FILESDIR}"/80-dbus-r1 80-dbus + fi + + # Needs to exist for dbus sessions to launch + keepdir /usr/share/dbus-1/services + keepdir /etc/dbus-1/{session,system}.d + # machine-id symlink from pkg_postinst() + keepdir /var/lib/dbus + # Let the init script create the /var/run/dbus directory + rm -rf "${ED}"/var/run + + # bug #761763 + rm -rf "${ED}"/usr/lib/sysusers.d + + dodoc AUTHORS NEWS README doc/TODO + readme.gentoo_create_doc + + find "${ED}" -name '*.la' -delete || die +} + +pkg_postinst() { + readme.gentoo_print_elog + + # Flatcar: Drop machine-id generation. + # if use systemd; then + # tmpfiles_process dbus.conf + # fi + # + # # Ensure unique id is generated and put it in /etc bug wrt #370451 but symlink + # # for DBUS_MACHINE_UUID_FILE (see tools/dbus-launch.c) and reverse + # # dependencies with hardcoded paths (although the known ones got fixed already) + # # TODO: should be safe to remove at least the ln because of the above tmpfiles_process? + # dbus-uuidgen --ensure="${EROOT}"/etc/machine-id + # ln -sf "${EPREFIX}"/etc/machine-id "${EROOT}"/var/lib/dbus/machine-id + + if [[ ${CHOST} == *-darwin* ]]; then + local plist="org.freedesktop.dbus-session.plist" + elog + elog + elog "For MacOS/Darwin we now ship launchd support for dbus." + elog "This enables autolaunch of dbus at session login and makes" + elog "dbus usable under MacOS/Darwin." + elog + elog "The launchd plist file ${plist} has been" + elog "installed in ${EPREFIX}/Library/LaunchAgents." + elog "For it to be used, you will have to do all of the following:" + elog " + cd ~/Library/LaunchAgents" + elog " + ln -s ${EPREFIX}/Library/LaunchAgents/${plist}" + elog " + logout and log back in" + elog + elog "If your application needs a proper DBUS_SESSION_BUS_ADDRESS" + elog "specified and refused to start otherwise, then export the" + elog "the following to your environment:" + elog " DBUS_SESSION_BUS_ADDRESS=\"launchd:env=DBUS_LAUNCHD_SESSION_BUS_SOCKET\"" + fi +} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/80-dbus-r1 b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/80-dbus-r1 new file mode 100644 index 0000000000..3499a6a12e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/80-dbus-r1 @@ -0,0 +1,13 @@ +#!/bin/sh + +# launches a session dbus instance + +dbuslaunch=$(command -v dbus-launch 2>/dev/null) +if [ -n "$dbuslaunch" ] && [ -x "$dbuslaunch" ] && [ -z "$DBUS_SESSION_BUS_ADDRESS" ]; then + if [ -n "$command" ]; then + command="$dbuslaunch --exit-with-session $command" + else + eval "$($dbuslaunch --sh-syntax --exit-with-session)" + fi +fi + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus-daemon-optional.patch b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus-daemon-optional.patch new file mode 100644 index 0000000000..353dcb5761 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus-daemon-optional.patch @@ -0,0 +1,75 @@ +From 3c08d28fbae8b0ef3839ef26f8d2a713a9a684f9 Mon Sep 17 00:00:00 2001 +From: Andreas Sturmlechner +Date: Thu, 21 Feb 2019 23:53:19 +0100 +Subject: [PATCH] Make dbus daemon build optional + +--- + bus/Makefile.am | 2 ++ + configure.ac | 17 ++++++++++++++++- + 2 files changed, 18 insertions(+), 1 deletion(-) + +diff --git a/bus/Makefile.am b/bus/Makefile.am +index 9ae3071..26a770c 100644 +--- a/bus/Makefile.am ++++ b/bus/Makefile.am +@@ -70,6 +70,7 @@ agentdir=$(LAUNCHD_AGENT_DIR) + agent_DATA=org.freedesktop.dbus-session.plist + endif + ++if DBUS_DAEMON + if DBUS_BUS_ENABLE_KQUEUE + DIR_WATCH_SOURCE=dir-watch-kqueue.c + else +@@ -241,6 +242,7 @@ test_bus_LDADD = \ + $(top_builddir)/dbus/libdbus-internal.la \ + $(DBUS_BUS_LIBS) \ + $(NULL) ++endif DBUS_DAEMON + + install-data-hook: + $(mkinstalldirs) $(DESTDIR)$(dbusdatadir)/session.d +diff --git a/configure.ac b/configure.ac +index be6b065..854e846 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -202,6 +202,7 @@ AC_ARG_ENABLE([apparmor], + [enable_apparmor=$enableval], + [enable_apparmor=auto]) + AC_ARG_ENABLE(libaudit,AS_HELP_STRING([--enable-libaudit],[build audit daemon support for SELinux]),enable_libaudit=$enableval,enable_libaudit=auto) ++AC_ARG_ENABLE(daemon, AS_HELP_STRING([--enable-daemon],[build with the dbus daemon]),enable_daemon=$enableval,enable_daemon=yes) + AC_ARG_ENABLE(inotify, AS_HELP_STRING([--enable-inotify],[build with inotify support (linux only)]),enable_inotify=$enableval,enable_inotify=auto) + AC_ARG_ENABLE(kqueue, AS_HELP_STRING([--enable-kqueue],[build with kqueue support]),enable_kqueue=$enableval,enable_kqueue=auto) + AC_ARG_ENABLE(console-owner-file, AS_HELP_STRING([--enable-console-owner-file],[enable console owner file]),enable_console_owner_file=$enableval,enable_console_owner_file=auto) +@@ -830,7 +831,20 @@ AC_CHECK_FUNCS(getpeerucred getpeereid) + + AC_CHECK_FUNCS(pipe2 accept4) + +-PKG_CHECK_MODULES([EXPAT], [expat]) ++# dbusdaemon checks ++if test x$enable_daemon = xno ; then ++ have_daemon=no ++else ++ have_daemon=yes ++fi ++ ++dnl check if daemon shall be built ++if test x$have_daemon = xyes; then ++ AC_DEFINE(DBUS_DAEMON,1,[Use daemon]) ++ PKG_CHECK_MODULES([EXPAT], [expat]) ++fi ++ ++AM_CONDITIONAL(DBUS_DAEMON, test x$have_daemon = xyes) + + save_cflags="$CFLAGS" + save_libs="$LIBS" +@@ -1824,6 +1838,7 @@ echo " + Building bus stats API: ${enable_stats} + Building SELinux support: ${have_selinux} + Building AppArmor support: ${have_apparmor} ++ Building daemon: ${have_daemon} + Building inotify support: ${have_inotify} + Building kqueue support: ${have_kqueue} + Building systemd support: ${have_systemd} +-- +2.20.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus-enable-elogind.patch b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus-enable-elogind.patch new file mode 100644 index 0000000000..5cb5d649cd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus-enable-elogind.patch @@ -0,0 +1,73 @@ +--- a/dbus/dbus-userdb-util.c 2015-09-30 16:48:40.000000000 +0200 ++++ b/dbus/dbus-userdb-util.c 2016-11-03 11:09:42.550520587 +0100 +@@ -32,6 +32,9 @@ + #if HAVE_SYSTEMD + #include + #endif ++#if HAVE_ELOGIND ++#include ++#endif + + /** + * @addtogroup DBusInternalsUtils +@@ -54,7 +57,7 @@ + const DBusUserInfo *info; + dbus_bool_t result = FALSE; + +-#ifdef HAVE_SYSTEMD ++#if defined(HAVE_SYSTEMD) || defined(HAVE_ELOGIND) + /* check if we have logind */ + if (access ("/run/systemd/seats/", F_OK) >= 0) + { +--- a/configure.ac 2016-11-03 11:13:58.286528265 +0100 ++++ b/configure.ac 2016-11-03 11:22:11.210543063 +0100 +@@ -185,6 +185,7 @@ + AC_ARG_ENABLE(kqueue, AS_HELP_STRING([--enable-kqueue],[build with kqueue support]),enable_kqueue=$enableval,enable_kqueue=auto) + AC_ARG_ENABLE(console-owner-file, AS_HELP_STRING([--enable-console-owner-file],[enable console owner file]),enable_console_owner_file=$enableval,enable_console_owner_file=auto) + AC_ARG_ENABLE(launchd, AS_HELP_STRING([--enable-launchd],[build with launchd auto-launch support]),enable_launchd=$enableval,enable_launchd=auto) ++AC_ARG_ENABLE(elogind, AS_HELP_STRING([--enable-elogind],[build with elogind user seat support]),enable_elogind=$enableval,enable_elogind=auto) + AC_ARG_ENABLE(systemd, AS_HELP_STRING([--enable-systemd],[build with systemd at_console support]),enable_systemd=$enableval,enable_systemd=auto) + + AC_ARG_WITH(init-scripts, AS_HELP_STRING([--with-init-scripts=[redhat]],[Style of init scripts to install])) +@@ -1184,6 +1185,24 @@ + + AM_CONDITIONAL(HAVE_CONSOLE_OWNER_FILE, test x$have_console_owner_file = xyes) + ++dnl elogind detection ++if test x$enable_elogind = xno ; then ++ have_elogind=no; ++else ++ PKG_CHECK_MODULES([ELOGIND], ++ [libelogind >= 209], ++ [have_elogind=yes], ++ [have_elogind=no]) ++fi ++ ++if test x$have_elogind = xyes; then ++ AC_DEFINE(HAVE_ELOGIND,1,[Have elogind]) ++fi ++ ++if test x$enable_elogind = xyes -a x$have_elogind != xyes ; then ++ AC_MSG_ERROR([Explicitly requested elogind support, but libelogind not found]) ++fi ++ + dnl systemd detection + if test x$enable_systemd = xno ; then + have_systemd=no; +@@ -1290,7 +1309,7 @@ + fi + + #### Set up final flags +-LIBDBUS_LIBS="$THREAD_LIBS $NETWORK_libs $SYSTEMD_LIBS" ++LIBDBUS_LIBS="$THREAD_LIBS $NETWORK_libs $SYSTEMD_LIBS $ELOGIND_LIBS" + AC_SUBST([LIBDBUS_LIBS]) + + ### X11 detection +@@ -1949,6 +1968,7 @@ + Building AppArmor support: ${have_apparmor} + Building inotify support: ${have_inotify} + Building kqueue support: ${have_kqueue} ++ Building elogind support: ${have_elogind} + Building systemd support: ${have_systemd} + Building X11 code: ${have_x11} + Building Doxygen docs: ${enable_doxygen_docs} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus.initd.in b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus.initd.in new file mode 100644 index 0000000000..10c7201be4 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/files/dbus.initd.in @@ -0,0 +1,36 @@ +#!/sbin/openrc-run +# Copyright 1999-2019 Gentoo Authors +# Distributed under the terms of the GNU General Public License, v2 or later + +extra_started_commands="reload" + +description="An IPC message bus daemon" +pidfile="@rundir@/dbus.pid" +command="/usr/bin/dbus-daemon" +command_args="--system" + +dbus_socket="@rundir@/dbus/system_bus_socket" + +depend() { + need localmount + after bootmisc +} + +start_pre() { + /usr/bin/dbus-uuidgen --ensure=/etc/machine-id + + # We need to test if /var/run/dbus exists, since script will fail if it does not + checkpath -q -d "@rundir@/dbus" +} + +stop_post() { + [ ! -S "${dbus_socket}" ] || rm -f "${dbus_socket}" +} + +reload() { + ebegin "Reloading D-BUS messagebus config" + dbus-send --print-reply --system --type=method_call \ + --dest=org.freedesktop.DBus \ + / org.freedesktop.DBus.ReloadConfig > /dev/null + eend $? +} diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/metadata.xml new file mode 100644 index 0000000000..010eeadbdd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/metadata.xml @@ -0,0 +1,14 @@ + + + + + freedesktop-bugs@gentoo.org + + + Use sys-auth/elogind for session tracking. + Build with sys-apps/systemd at_console support + + + cpe:/a:freedesktop:dbus + + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0001-sed-s-coreos-flatcar.patch b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0001-sed-s-coreos-flatcar.patch new file mode 100644 index 0000000000..1c28a3e283 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0001-sed-s-coreos-flatcar.patch @@ -0,0 +1,6359 @@ +From c70e0d9e067a7428542aec57d12a50212abb7c00 Mon Sep 17 00:00:00 2001 +From: Mathieu Tortuyaux +Date: Fri, 24 Feb 2023 09:08:13 +0100 +Subject: [PATCH 01/18] *: sed `s/coreos/flatcar/` + +Signed-off-by: Mathieu Tortuyaux +--- + build | 4 +- + config/config.go | 4 +- + config/config_test.go | 14 +++--- + config/merge/merge.go | 6 +-- + config/merge/merge_test.go | 8 +-- + config/shared/validations/unit.go | 2 +- + config/translate/translate.go | 2 +- + config/translate/translate_test.go | 4 +- + config/util/config.go | 2 +- + config/util/parsingErrors.go | 2 +- + config/v3_0/config.go | 10 ++-- + config/v3_0/config_test.go | 4 +- + config/v3_0/types/config.go | 4 +- + config/v3_0/types/config_test.go | 4 +- + config/v3_0/types/disk.go | 4 +- + config/v3_0/types/file.go | 4 +- + config/v3_0/types/file_test.go | 4 +- + config/v3_0/types/filesystem.go | 4 +- + config/v3_0/types/filesystem_test.go | 4 +- + config/v3_0/types/ignition.go | 2 +- + config/v3_0/types/mode.go | 2 +- + config/v3_0/types/mode_test.go | 4 +- + config/v3_0/types/node.go | 4 +- + config/v3_0/types/node_test.go | 4 +- + config/v3_0/types/partition.go | 4 +- + config/v3_0/types/partition_test.go | 4 +- + config/v3_0/types/path.go | 4 +- + config/v3_0/types/path_test.go | 2 +- + config/v3_0/types/raid.go | 2 +- + config/v3_0/types/raid_test.go | 4 +- + config/v3_0/types/storage.go | 4 +- + config/v3_0/types/storage_test.go | 4 +- + config/v3_0/types/systemd.go | 6 +-- + config/v3_0/types/systemd_test.go | 4 +- + config/v3_0/types/unit.go | 8 +-- + config/v3_0/types/unit_test.go | 4 +- + config/v3_0/types/url.go | 4 +- + config/v3_0/types/url_test.go | 4 +- + config/v3_0/types/verification.go | 2 +- + config/v3_0/types/verification_test.go | 2 +- + config/v3_1/config.go | 14 +++--- + config/v3_1/config_test.go | 4 +- + config/v3_1/translate/translate.go | 8 +-- + config/v3_1/translate/translate_test.go | 4 +- + config/v3_1/types/config.go | 4 +- + config/v3_1/types/config_test.go | 4 +- + config/v3_1/types/disk.go | 4 +- + config/v3_1/types/file.go | 4 +- + config/v3_1/types/file_test.go | 4 +- + config/v3_1/types/filesystem.go | 4 +- + config/v3_1/types/filesystem_test.go | 4 +- + config/v3_1/types/headers.go | 2 +- + config/v3_1/types/headers_test.go | 2 +- + config/v3_1/types/ignition.go | 2 +- + config/v3_1/types/mode.go | 2 +- + config/v3_1/types/mode_test.go | 4 +- + config/v3_1/types/node.go | 4 +- + config/v3_1/types/node_test.go | 4 +- + config/v3_1/types/partition.go | 4 +- + config/v3_1/types/partition_test.go | 4 +- + config/v3_1/types/path.go | 4 +- + config/v3_1/types/path_test.go | 2 +- + config/v3_1/types/proxy.go | 2 +- + config/v3_1/types/proxy_test.go | 4 +- + config/v3_1/types/raid.go | 2 +- + config/v3_1/types/raid_test.go | 4 +- + config/v3_1/types/resource.go | 4 +- + config/v3_1/types/storage.go | 4 +- + config/v3_1/types/storage_test.go | 4 +- + config/v3_1/types/systemd.go | 6 +-- + config/v3_1/types/systemd_test.go | 4 +- + config/v3_1/types/unit.go | 8 +-- + config/v3_1/types/unit_test.go | 4 +- + config/v3_1/types/url.go | 4 +- + config/v3_1/types/url_test.go | 4 +- + config/v3_1/types/verification.go | 2 +- + config/v3_1/types/verification_test.go | 2 +- + config/v3_2/config.go | 14 +++--- + config/v3_2/config_test.go | 4 +- + config/v3_2/translate/translate.go | 6 +-- + config/v3_2/translate/translate_test.go | 4 +- + config/v3_2/types/config.go | 4 +- + config/v3_2/types/config_test.go | 4 +- + config/v3_2/types/custom.go | 2 +- + config/v3_2/types/disk.go | 4 +- + config/v3_2/types/file.go | 4 +- + config/v3_2/types/file_test.go | 4 +- + config/v3_2/types/filesystem.go | 4 +- + config/v3_2/types/filesystem_test.go | 4 +- + config/v3_2/types/headers.go | 2 +- + config/v3_2/types/headers_test.go | 2 +- + config/v3_2/types/ignition.go | 2 +- + config/v3_2/types/luks.go | 4 +- + config/v3_2/types/mode.go | 2 +- + config/v3_2/types/mode_test.go | 4 +- + config/v3_2/types/node.go | 4 +- + config/v3_2/types/node_test.go | 4 +- + config/v3_2/types/partition.go | 4 +- + config/v3_2/types/partition_test.go | 4 +- + config/v3_2/types/path.go | 4 +- + config/v3_2/types/path_test.go | 2 +- + config/v3_2/types/proxy.go | 2 +- + config/v3_2/types/proxy_test.go | 4 +- + config/v3_2/types/raid.go | 2 +- + config/v3_2/types/raid_test.go | 4 +- + config/v3_2/types/resource.go | 4 +- + config/v3_2/types/storage.go | 4 +- + config/v3_2/types/storage_test.go | 4 +- + config/v3_2/types/systemd.go | 6 +-- + config/v3_2/types/systemd_test.go | 4 +- + config/v3_2/types/tang.go | 4 +- + config/v3_2/types/unit.go | 8 +-- + config/v3_2/types/unit_test.go | 4 +- + config/v3_2/types/url.go | 4 +- + config/v3_2/types/url_test.go | 4 +- + config/v3_2/types/verification.go | 2 +- + config/v3_2/types/verification_test.go | 2 +- + config/v3_3/config.go | 14 +++--- + config/v3_3/config_test.go | 4 +- + config/v3_3/translate/translate.go | 8 +-- + config/v3_3/translate/translate_test.go | 4 +- + config/v3_3/types/clevis.go | 4 +- + config/v3_3/types/clevis_test.go | 4 +- + config/v3_3/types/config.go | 4 +- + config/v3_3/types/config_test.go | 4 +- + config/v3_3/types/disk.go | 4 +- + config/v3_3/types/file.go | 4 +- + config/v3_3/types/file_test.go | 4 +- + config/v3_3/types/filesystem.go | 4 +- + config/v3_3/types/filesystem_test.go | 4 +- + config/v3_3/types/headers.go | 2 +- + config/v3_3/types/headers_test.go | 2 +- + config/v3_3/types/ignition.go | 2 +- + config/v3_3/types/kargs_test.go | 2 +- + config/v3_3/types/luks.go | 4 +- + config/v3_3/types/mode.go | 2 +- + config/v3_3/types/mode_test.go | 4 +- + config/v3_3/types/node.go | 4 +- + config/v3_3/types/node_test.go | 4 +- + config/v3_3/types/partition.go | 4 +- + config/v3_3/types/partition_test.go | 4 +- + config/v3_3/types/path.go | 4 +- + config/v3_3/types/path_test.go | 2 +- + config/v3_3/types/proxy.go | 2 +- + config/v3_3/types/proxy_test.go | 4 +- + config/v3_3/types/raid.go | 4 +- + config/v3_3/types/raid_test.go | 4 +- + config/v3_3/types/resource.go | 4 +- + config/v3_3/types/storage.go | 4 +- + config/v3_3/types/storage_test.go | 4 +- + config/v3_3/types/systemd.go | 6 +-- + config/v3_3/types/systemd_test.go | 4 +- + config/v3_3/types/tang.go | 4 +- + config/v3_3/types/unit.go | 8 +-- + config/v3_3/types/unit_test.go | 4 +- + config/v3_3/types/url.go | 4 +- + config/v3_3/types/url_test.go | 4 +- + config/v3_3/types/verification.go | 2 +- + config/v3_3/types/verification_test.go | 2 +- + config/v3_4/config.go | 14 +++--- + config/v3_4/config_test.go | 4 +- + config/v3_4/translate/translate.go | 8 +-- + config/v3_4/translate/translate_test.go | 4 +- + config/v3_4/types/clevis.go | 4 +- + config/v3_4/types/clevis_test.go | 4 +- + config/v3_4/types/config.go | 4 +- + config/v3_4/types/config_test.go | 4 +- + config/v3_4/types/disk.go | 4 +- + config/v3_4/types/file.go | 4 +- + config/v3_4/types/file_test.go | 4 +- + config/v3_4/types/filesystem.go | 4 +- + config/v3_4/types/filesystem_test.go | 4 +- + config/v3_4/types/headers.go | 2 +- + config/v3_4/types/headers_test.go | 2 +- + config/v3_4/types/ignition.go | 2 +- + config/v3_4/types/kargs_test.go | 2 +- + config/v3_4/types/luks.go | 4 +- + config/v3_4/types/mode.go | 2 +- + config/v3_4/types/mode_test.go | 4 +- + config/v3_4/types/node.go | 4 +- + config/v3_4/types/node_test.go | 4 +- + config/v3_4/types/partition.go | 4 +- + config/v3_4/types/partition_test.go | 4 +- + config/v3_4/types/path.go | 4 +- + config/v3_4/types/path_test.go | 2 +- + config/v3_4/types/proxy.go | 2 +- + config/v3_4/types/proxy_test.go | 4 +- + config/v3_4/types/raid.go | 4 +- + config/v3_4/types/raid_test.go | 4 +- + config/v3_4/types/resource.go | 4 +- + config/v3_4/types/storage.go | 4 +- + config/v3_4/types/storage_test.go | 4 +- + config/v3_4/types/systemd.go | 6 +-- + config/v3_4/types/systemd_test.go | 4 +- + config/v3_4/types/tang.go | 4 +- + config/v3_4/types/tang_test.go | 4 +- + config/v3_4/types/unit.go | 8 +-- + config/v3_4/types/unit_test.go | 4 +- + config/v3_4/types/url.go | 4 +- + config/v3_4/types/url_test.go | 4 +- + config/v3_4/types/verification.go | 2 +- + config/v3_4/types/verification_test.go | 2 +- + config/v3_5_experimental/config.go | 14 +++--- + config/v3_5_experimental/config_test.go | 4 +- + .../v3_5_experimental/translate/translate.go | 6 +-- + .../translate/translate_test.go | 4 +- + config/v3_5_experimental/types/clevis.go | 4 +- + config/v3_5_experimental/types/clevis_test.go | 4 +- + config/v3_5_experimental/types/config.go | 4 +- + config/v3_5_experimental/types/config_test.go | 4 +- + config/v3_5_experimental/types/disk.go | 4 +- + config/v3_5_experimental/types/file.go | 4 +- + config/v3_5_experimental/types/file_test.go | 4 +- + config/v3_5_experimental/types/filesystem.go | 4 +- + .../types/filesystem_test.go | 4 +- + config/v3_5_experimental/types/headers.go | 2 +- + .../v3_5_experimental/types/headers_test.go | 2 +- + config/v3_5_experimental/types/ignition.go | 2 +- + config/v3_5_experimental/types/kargs_test.go | 2 +- + config/v3_5_experimental/types/luks.go | 4 +- + config/v3_5_experimental/types/mode.go | 2 +- + config/v3_5_experimental/types/mode_test.go | 4 +- + config/v3_5_experimental/types/node.go | 4 +- + config/v3_5_experimental/types/node_test.go | 4 +- + config/v3_5_experimental/types/partition.go | 4 +- + .../v3_5_experimental/types/partition_test.go | 4 +- + config/v3_5_experimental/types/path.go | 4 +- + config/v3_5_experimental/types/path_test.go | 2 +- + config/v3_5_experimental/types/proxy.go | 2 +- + config/v3_5_experimental/types/proxy_test.go | 4 +- + config/v3_5_experimental/types/raid.go | 4 +- + config/v3_5_experimental/types/raid_test.go | 4 +- + config/v3_5_experimental/types/resource.go | 4 +- + config/v3_5_experimental/types/storage.go | 4 +- + .../v3_5_experimental/types/storage_test.go | 4 +- + config/v3_5_experimental/types/systemd.go | 6 +-- + .../v3_5_experimental/types/systemd_test.go | 4 +- + config/v3_5_experimental/types/tang.go | 4 +- + config/v3_5_experimental/types/tang_test.go | 4 +- + config/v3_5_experimental/types/unit.go | 8 +-- + config/v3_5_experimental/types/unit_test.go | 4 +- + config/v3_5_experimental/types/url.go | 4 +- + config/v3_5_experimental/types/url_test.go | 4 +- + .../v3_5_experimental/types/verification.go | 2 +- + .../types/verification_test.go | 2 +- + config/validate/validate.go | 4 +- + config/validate/validate_test.go | 2 +- + go.mod | 2 +- + internal/apply/apply.go | 30 +++++------ + internal/distro/distro.go | 2 +- + internal/exec/config_fetcher.go | 18 +++---- + internal/exec/engine.go | 24 ++++----- + internal/exec/stages/disks/disks.go | 16 +++--- + internal/exec/stages/disks/filesystems.go | 8 +-- + internal/exec/stages/disks/luks.go | 12 ++--- + internal/exec/stages/disks/partitions.go | 8 +-- + internal/exec/stages/disks/raid.go | 6 +-- + internal/exec/stages/fetch/fetch.go | 12 ++--- + .../stages/fetch_offline/fetch-offline.go | 16 +++--- + .../fetch_offline/fetch_offline_test.go | 4 +- + internal/exec/stages/files/files.go | 14 +++--- + internal/exec/stages/files/files_test.go | 4 +- + .../exec/stages/files/filesystemEntries.go | 12 ++--- + internal/exec/stages/files/passwd.go | 4 +- + internal/exec/stages/files/units.go | 12 ++--- + internal/exec/stages/files/units_test.go | 4 +- + internal/exec/stages/kargs/kargs.go | 14 +++--- + internal/exec/stages/mount/mount.go | 16 +++--- + internal/exec/stages/stages.go | 10 ++-- + internal/exec/stages/umount/umount.go | 14 +++--- + internal/exec/util/blkid.go | 2 +- + internal/exec/util/file.go | 10 ++-- + internal/exec/util/passwd.go | 8 +-- + internal/exec/util/selinux.go | 2 +- + internal/exec/util/unit.go | 4 +- + internal/exec/util/user_group_lookup_test.go | 2 +- + internal/exec/util/util.go | 6 +-- + internal/main.go | 30 +++++------ + internal/platform/platform.go | 50 +++++++++---------- + internal/providers/aliyun/aliyun.go | 6 +-- + internal/providers/aws/aws.go | 10 ++-- + internal/providers/azure/azure.go | 12 ++--- + internal/providers/azurestack/azurestack.go | 6 +-- + internal/providers/cloudstack/cloudstack.go | 14 +++--- + internal/providers/cmdline/cmdline.go | 12 ++--- + .../providers/digitalocean/digitalocean.go | 6 +-- + internal/providers/exoscale/exoscale.go | 6 +-- + internal/providers/file/file.go | 6 +-- + internal/providers/gcp/gcp.go | 6 +-- + internal/providers/ibmcloud/ibmcloud.go | 12 ++--- + internal/providers/kubevirt/kubevirt.go | 12 ++--- + internal/providers/noop/noop.go | 6 +-- + internal/providers/nutanix/nutanix.go | 12 ++--- + internal/providers/openstack/openstack.go | 14 +++--- + internal/providers/packet/packet.go | 6 +-- + internal/providers/powervs/powervs.go | 12 ++--- + internal/providers/providers.go | 6 +-- + internal/providers/qemu/qemu_blockdev.go | 8 +-- + internal/providers/qemu/qemu_fwcfg.go | 6 +-- + internal/providers/system/system.go | 14 +++--- + internal/providers/util/config.go | 6 +-- + internal/providers/virtualbox/virtualbox.go | 8 +-- + internal/providers/vmware/vmware_amd64.go | 8 +-- + .../providers/vmware/vmware_unsupported.go | 4 +- + internal/providers/vultr/vultr.go | 6 +-- + internal/providers/zvm/zvm.go | 12 ++--- + internal/resource/http.go | 12 ++--- + internal/resource/url.go | 6 +-- + internal/resource/url_test.go | 6 +-- + internal/sgdisk/sgdisk.go | 8 +-- + internal/util/tools/docs/docs.go | 2 +- + internal/util/verification.go | 2 +- + internal/util/verification_test.go | 2 +- + tests/blackbox_test.go | 10 ++-- + tests/filesystem.go | 4 +- + tests/negative/files/invalid_hash.go | 4 +- + tests/negative/files/link.go | 4 +- + tests/negative/files/missing_file.go | 4 +- + tests/negative/files/preexisting_nodes.go | 4 +- + tests/negative/filesystems/creation.go | 4 +- + .../negative/filesystems/mount_filesystem.go | 4 +- + tests/negative/filesystems/no_device.go | 4 +- + tests/negative/filesystems/symlinks.go | 4 +- + tests/negative/general/config.go | 4 +- + tests/negative/partitions/simple.go | 4 +- + tests/negative/partitions/zeroes.go | 4 +- + tests/negative/proxy/http.go | 4 +- + tests/negative/regression/filesystem.go | 4 +- + tests/negative/security/tls.go | 6 +-- + tests/negative/timeouts/timeouts.go | 4 +- + tests/positive/files/directory.go | 4 +- + tests/positive/files/file.go | 4 +- + tests/positive/files/hash.go | 6 +-- + tests/positive/files/link.go | 6 +-- + tests/positive/files/remote.go | 6 +-- + tests/positive/files/units.go | 4 +- + tests/positive/filesystems/creation.go | 4 +- + .../positive/filesystems/mount_filesystem.go | 4 +- + .../filesystems/reformat_filesystem.go | 6 +-- + .../positive/filesystems/reuse_filesystem.go | 6 +-- + tests/positive/general/baseconfigsmerging.go | 4 +- + tests/positive/general/general.go | 6 +-- + tests/positive/general/preemption.go | 4 +- + tests/positive/partitions/complex-mb.go | 4 +- + tests/positive/partitions/creation-mb.go | 4 +- + tests/positive/partitions/deletion.go | 4 +- + tests/positive/partitions/mixed.go | 4 +- + tests/positive/partitions/no-op.go | 4 +- + tests/positive/partitions/verification.go | 4 +- + tests/positive/partitions/zeros.go | 4 +- + tests/positive/passwd/users.go | 4 +- + tests/positive/proxy/http.go | 4 +- + tests/positive/regression/filesystem.go | 4 +- + tests/positive/security/tls.go | 8 +-- + tests/positive/systemd/create_unit.go | 4 +- + tests/positive/systemd/modify_service.go | 4 +- + tests/positive/timeouts/timeouts.go | 4 +- + tests/register/register.go | 14 +++--- + tests/registry/registry.go | 36 ++++++------- + tests/servers/servers.go | 2 +- + tests/validator.go | 4 +- + validate/main.go | 4 +- + 362 files changed, 954 insertions(+), 954 deletions(-) + +diff --git a/build b/build +index dba50388..b8f0a049 100755 +--- a/build ++++ b/build +@@ -5,7 +5,7 @@ set -eu + export GO111MODULE=on + + NAME="ignition" +-ORG_PATH="github.com/coreos" ++ORG_PATH="github.com/flatcar" + REPO_PATH="${ORG_PATH}/${NAME}/v2" + GLDFLAGS=${GLDFLAGS:-} + export GOFLAGS=-mod=vendor +@@ -15,7 +15,7 @@ if [ -z ${VERSION+a} ]; then + echo "Using version from git: $VERSION" + fi + +-GLDFLAGS+="-X github.com/coreos/ignition/v2/internal/version.Raw=${VERSION}" ++GLDFLAGS+="-X github.com/flatcar/ignition/v2/internal/version.Raw=${VERSION}" + + eval $(go env) + +diff --git a/config/config.go b/config/config.go +index e4a2172d..d3e04176 100644 +--- a/config/config.go ++++ b/config/config.go +@@ -15,8 +15,8 @@ + package config + + import ( +- exp "github.com/coreos/ignition/v2/config/v3_5_experimental" +- types_exp "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ exp "github.com/flatcar/ignition/v2/config/v3_5_experimental" ++ types_exp "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + + "github.com/coreos/vcontext/report" + ) +diff --git a/config/config_test.go b/config/config_test.go +index 1e35aee9..d396112d 100644 +--- a/config/config_test.go ++++ b/config/config_test.go +@@ -19,13 +19,13 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- v3_0 "github.com/coreos/ignition/v2/config/v3_0/types" +- v3_1 "github.com/coreos/ignition/v2/config/v3_1/types" +- v3_2 "github.com/coreos/ignition/v2/config/v3_2/types" +- v3_3 "github.com/coreos/ignition/v2/config/v3_3/types" +- v3_4 "github.com/coreos/ignition/v2/config/v3_4/types" +- v3_5 "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ v3_0 "github.com/flatcar/ignition/v2/config/v3_0/types" ++ v3_1 "github.com/flatcar/ignition/v2/config/v3_1/types" ++ v3_2 "github.com/flatcar/ignition/v2/config/v3_2/types" ++ v3_3 "github.com/flatcar/ignition/v2/config/v3_3/types" ++ v3_4 "github.com/flatcar/ignition/v2/config/v3_4/types" ++ v3_5 "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + type typeSet map[reflect.Type]struct{} +diff --git a/config/merge/merge.go b/config/merge/merge.go +index 1ba91b3d..f2bcc274 100644 +--- a/config/merge/merge.go ++++ b/config/merge/merge.go +@@ -19,7 +19,7 @@ import ( + "reflect" + "strings" + +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + ) +@@ -236,7 +236,7 @@ func mergeStruct(parent reflect.Value, parentPath path.ContextPath, child reflec + case kind == reflect.Ptr && !parentField.IsNil() && !childField.IsNil() && parentField.Elem().Kind() == reflect.Struct: + // we're not supposed to have struct pointers, but some + // ended up in the Clevis and Luks structs in spec 3.2.0 +- // https://github.com/coreos/ignition/issues/1132 ++ // https://github.com/flatcar/ignition/issues/1132 + resultField.Set(mergeStruct(parentField.Elem(), parentFieldPath, childField.Elem(), childFieldPath, resultFieldPath, transcript).Addr()) + transcribeOne(parentFieldPath, resultFieldPath, transcript) + transcribeOne(childFieldPath, resultFieldPath, transcript) +@@ -378,7 +378,7 @@ func transcribe(fromPath path.ContextPath, toPath path.ContextPath, value reflec + if value.Elem().Kind() == reflect.Struct { + // we're not supposed to have struct pointers, but some + // ended up in the Clevis and Luks structs in spec 3.2.0 +- // https://github.com/coreos/ignition/issues/1132 ++ // https://github.com/flatcar/ignition/issues/1132 + return transcribe(fromPath, toPath, value.Elem(), fieldMeta, transcript) + } + transcribeOne(fromPath, toPath, transcript) +diff --git a/config/merge/merge_test.go b/config/merge/merge_test.go +index e1dbd936..f5d7dfa3 100644 +--- a/config/merge/merge_test.go ++++ b/config/merge/merge_test.go +@@ -17,9 +17,9 @@ package merge + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- v3_2 "github.com/coreos/ignition/v2/config/v3_2/types" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ v3_2 "github.com/flatcar/ignition/v2/config/v3_2/types" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + + "github.com/coreos/vcontext/path" + "github.com/stretchr/testify/assert" +@@ -1352,7 +1352,7 @@ func TestMerge(t *testing.T) { + // We are explicitly testing 3.2.0 because it mistakenly has struct + // pointers. These should not exist but ended up in the Clevis & Luks + // structs in spec 3.2.0. +-// https://github.com/coreos/ignition/issues/1132 ++// https://github.com/flatcar/ignition/issues/1132 + func TestMergeStructPointers(t *testing.T) { + type test struct { + in1 v3_2.Config +diff --git a/config/shared/validations/unit.go b/config/shared/validations/unit.go +index 57744c31..273ccbe0 100644 +--- a/config/shared/validations/unit.go ++++ b/config/shared/validations/unit.go +@@ -17,7 +17,7 @@ + package validations + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/go-systemd/v22/unit" + ) +diff --git a/config/translate/translate.go b/config/translate/translate.go +index 05d8ce2c..1195e50b 100644 +--- a/config/translate/translate.go ++++ b/config/translate/translate.go +@@ -18,7 +18,7 @@ import ( + "fmt" + "reflect" + +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + /* +diff --git a/config/translate/translate_test.go b/config/translate/translate_test.go +index 5d1adda9..dee790f1 100644 +--- a/config/translate/translate_test.go ++++ b/config/translate/translate_test.go +@@ -19,8 +19,8 @@ import ( + + "github.com/stretchr/testify/assert" + +- "github.com/coreos/ignition/v2/config/translate/tests/pkga" +- "github.com/coreos/ignition/v2/config/translate/tests/pkgb" ++ "github.com/flatcar/ignition/v2/config/translate/tests/pkga" ++ "github.com/flatcar/ignition/v2/config/translate/tests/pkgb" + ) + + // Note: we need different input and output types which unfortunately means a lot of tests +diff --git a/config/util/config.go b/config/util/config.go +index 0b676698..3b9bb22f 100644 +--- a/config/util/config.go ++++ b/config/util/config.go +@@ -15,7 +15,7 @@ + package util + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/util/parsingErrors.go b/config/util/parsingErrors.go +index 2af85e2b..865d75d2 100644 +--- a/config/util/parsingErrors.go ++++ b/config/util/parsingErrors.go +@@ -17,7 +17,7 @@ package util + import ( + "encoding/json" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/config.go b/config/v3_0/config.go +index ca32f7ad..a00e33f0 100644 +--- a/config/v3_0/config.go ++++ b/config/v3_0/config.go +@@ -15,11 +15,11 @@ + package v3_0 + + import ( +- "github.com/coreos/ignition/v2/config/merge" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_0/types" +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/merge" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_0/types" ++ "github.com/flatcar/ignition/v2/config/validate" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/config_test.go b/config/v3_0/config_test.go +index f26d98c4..a4e757c4 100644 +--- a/config/v3_0/config_test.go ++++ b/config/v3_0/config_test.go +@@ -17,8 +17,8 @@ package v3_0 + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_0/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_0/types" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_0/types/config.go b/config/v3_0/types/config.go +index 1ac29594..9152041e 100644 +--- a/config/v3_0/types/config.go ++++ b/config/v3_0/types/config.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/path" +diff --git a/config/v3_0/types/config_test.go b/config/v3_0/types/config_test.go +index da8cfa26..b7b18bdb 100644 +--- a/config/v3_0/types/config_test.go ++++ b/config/v3_0/types/config_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/disk.go b/config/v3_0/types/disk.go +index bbb073ab..dc201c31 100644 +--- a/config/v3_0/types/disk.go ++++ b/config/v3_0/types/disk.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/file.go b/config/v3_0/types/file.go +index 5fa9ca8b..43291675 100644 +--- a/config/v3_0/types/file.go ++++ b/config/v3_0/types/file.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/file_test.go b/config/v3_0/types/file_test.go +index ca0e3582..ad33e454 100644 +--- a/config/v3_0/types/file_test.go ++++ b/config/v3_0/types/file_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFileValidateOverwrite(t *testing.T) { +diff --git a/config/v3_0/types/filesystem.go b/config/v3_0/types/filesystem.go +index 08d1e8ef..ae9f719a 100644 +--- a/config/v3_0/types/filesystem.go ++++ b/config/v3_0/types/filesystem.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/filesystem_test.go b/config/v3_0/types/filesystem_test.go +index 93b1bcea..19d9d62a 100644 +--- a/config/v3_0/types/filesystem_test.go ++++ b/config/v3_0/types/filesystem_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFilesystemValidateFormat(t *testing.T) { +diff --git a/config/v3_0/types/ignition.go b/config/v3_0/types/ignition.go +index 7a4d3cdb..4d8482f4 100644 +--- a/config/v3_0/types/ignition.go ++++ b/config/v3_0/types/ignition.go +@@ -17,7 +17,7 @@ package types + import ( + "github.com/coreos/go-semver/semver" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/mode.go b/config/v3_0/types/mode.go +index 6021b915..8acc4e75 100644 +--- a/config/v3_0/types/mode.go ++++ b/config/v3_0/types/mode.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func validateMode(m *int) error { +diff --git a/config/v3_0/types/mode_test.go b/config/v3_0/types/mode_test.go +index addf4afa..e9a243ce 100644 +--- a/config/v3_0/types/mode_test.go ++++ b/config/v3_0/types/mode_test.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_0/types/node.go b/config/v3_0/types/node.go +index fb41f1f0..36e79157 100644 +--- a/config/v3_0/types/node.go ++++ b/config/v3_0/types/node.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/node_test.go b/config/v3_0/types/node_test.go +index 265db7f1..11087ecf 100644 +--- a/config/v3_0/types/node_test.go ++++ b/config/v3_0/types/node_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/partition.go b/config/v3_0/types/partition.go +index 84be0cd9..46e873d7 100644 +--- a/config/v3_0/types/partition.go ++++ b/config/v3_0/types/partition.go +@@ -19,8 +19,8 @@ import ( + "regexp" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/partition_test.go b/config/v3_0/types/partition_test.go +index 728aead6..dcd3b8de 100644 +--- a/config/v3_0/types/partition_test.go ++++ b/config/v3_0/types/partition_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestValidateLabel(t *testing.T) { +diff --git a/config/v3_0/types/path.go b/config/v3_0/types/path.go +index c06fccf1..4266034a 100644 +--- a/config/v3_0/types/path.go ++++ b/config/v3_0/types/path.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validatePath(p string) error { +diff --git a/config/v3_0/types/path_test.go b/config/v3_0/types/path_test.go +index 98960487..b7f7598b 100644 +--- a/config/v3_0/types/path_test.go ++++ b/config/v3_0/types/path_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func TestPathValidate(t *testing.T) { +diff --git a/config/v3_0/types/raid.go b/config/v3_0/types/raid.go +index 9c861fcb..3b746c1c 100644 +--- a/config/v3_0/types/raid.go ++++ b/config/v3_0/types/raid.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/raid_test.go b/config/v3_0/types/raid_test.go +index 34861605..639ecea5 100644 +--- a/config/v3_0/types/raid_test.go ++++ b/config/v3_0/types/raid_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/storage.go b/config/v3_0/types/storage.go +index 24668954..d93d4678 100644 +--- a/config/v3_0/types/storage.go ++++ b/config/v3_0/types/storage.go +@@ -18,8 +18,8 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/storage_test.go b/config/v3_0/types/storage_test.go +index f106deb8..6d42a772 100644 +--- a/config/v3_0/types/storage_test.go ++++ b/config/v3_0/types/storage_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/systemd.go b/config/v3_0/types/systemd.go +index ac521ba7..818959f4 100644 +--- a/config/v3_0/types/systemd.go ++++ b/config/v3_0/types/systemd.go +@@ -17,9 +17,9 @@ package types + import ( + "regexp" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/systemd_test.go b/config/v3_0/types/systemd_test.go +index 798eb10f..d4a4be01 100644 +--- a/config/v3_0/types/systemd_test.go ++++ b/config/v3_0/types/systemd_test.go +@@ -18,10 +18,10 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_0/types/unit.go b/config/v3_0/types/unit.go +index 786debae..3505d5f4 100644 +--- a/config/v3_0/types/unit.go ++++ b/config/v3_0/types/unit.go +@@ -17,10 +17,10 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/shared/validations" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/shared/validations" ++ "github.com/flatcar/ignition/v2/config/util" + + cpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/unit_test.go b/config/v3_0/types/unit_test.go +index b0b2e884..3a22e081 100644 +--- a/config/v3_0/types/unit_test.go ++++ b/config/v3_0/types/unit_test.go +@@ -19,8 +19,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/url.go b/config/v3_0/types/url.go +index 6a1f9397..2d8c44b1 100644 +--- a/config/v3_0/types/url.go ++++ b/config/v3_0/types/url.go +@@ -19,8 +19,8 @@ import ( + + "github.com/vincent-petithory/dataurl" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validateURL(s string) error { +diff --git a/config/v3_0/types/url_test.go b/config/v3_0/types/url_test.go +index 46674d7c..12dcdee0 100644 +--- a/config/v3_0/types/url_test.go ++++ b/config/v3_0/types/url_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestURLValidate(t *testing.T) { +diff --git a/config/v3_0/types/verification.go b/config/v3_0/types/verification.go +index 23b7d7ad..e37f0e3f 100644 +--- a/config/v3_0/types/verification.go ++++ b/config/v3_0/types/verification.go +@@ -19,7 +19,7 @@ import ( + "encoding/hex" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_0/types/verification_test.go b/config/v3_0/types/verification_test.go +index 1ec23b00..243a8884 100644 +--- a/config/v3_0/types/verification_test.go ++++ b/config/v3_0/types/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/config.go b/config/v3_1/config.go +index a40ae56c..e413ee25 100644 +--- a/config/v3_1/config.go ++++ b/config/v3_1/config.go +@@ -15,13 +15,13 @@ + package v3_1 + + import ( +- "github.com/coreos/ignition/v2/config/merge" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" +- prev "github.com/coreos/ignition/v2/config/v3_0" +- "github.com/coreos/ignition/v2/config/v3_1/translate" +- "github.com/coreos/ignition/v2/config/v3_1/types" +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/merge" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" ++ prev "github.com/flatcar/ignition/v2/config/v3_0" ++ "github.com/flatcar/ignition/v2/config/v3_1/translate" ++ "github.com/flatcar/ignition/v2/config/v3_1/types" ++ "github.com/flatcar/ignition/v2/config/validate" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/config_test.go b/config/v3_1/config_test.go +index 6c27691b..5b6a1d3f 100644 +--- a/config/v3_1/config_test.go ++++ b/config/v3_1/config_test.go +@@ -17,8 +17,8 @@ package v3_1 + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_1/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_1/types" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_1/translate/translate.go b/config/v3_1/translate/translate.go +index 5921c42c..9217cc0a 100644 +--- a/config/v3_1/translate/translate.go ++++ b/config/v3_1/translate/translate.go +@@ -15,10 +15,10 @@ + package translate + + import ( +- "github.com/coreos/ignition/v2/config/translate" +- "github.com/coreos/ignition/v2/config/util" +- old_types "github.com/coreos/ignition/v2/config/v3_0/types" +- "github.com/coreos/ignition/v2/config/v3_1/types" ++ "github.com/flatcar/ignition/v2/config/translate" ++ "github.com/flatcar/ignition/v2/config/util" ++ old_types "github.com/flatcar/ignition/v2/config/v3_0/types" ++ "github.com/flatcar/ignition/v2/config/v3_1/types" + ) + + func translateFilesystem(old old_types.Filesystem) (ret types.Filesystem) { +diff --git a/config/v3_1/translate/translate_test.go b/config/v3_1/translate/translate_test.go +index 84761a30..ed6f58eb 100644 +--- a/config/v3_1/translate/translate_test.go ++++ b/config/v3_1/translate/translate_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- old "github.com/coreos/ignition/v2/config/v3_0/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ old "github.com/flatcar/ignition/v2/config/v3_0/types" + ) + + // Check that we have valid translators for the complete config struct +diff --git a/config/v3_1/types/config.go b/config/v3_1/types/config.go +index 3cebde7f..20314a03 100644 +--- a/config/v3_1/types/config.go ++++ b/config/v3_1/types/config.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/path" +diff --git a/config/v3_1/types/config_test.go b/config/v3_1/types/config_test.go +index da8cfa26..b7b18bdb 100644 +--- a/config/v3_1/types/config_test.go ++++ b/config/v3_1/types/config_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/disk.go b/config/v3_1/types/disk.go +index bbb073ab..dc201c31 100644 +--- a/config/v3_1/types/disk.go ++++ b/config/v3_1/types/disk.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/file.go b/config/v3_1/types/file.go +index 97aa84a7..51e9bae8 100644 +--- a/config/v3_1/types/file.go ++++ b/config/v3_1/types/file.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/file_test.go b/config/v3_1/types/file_test.go +index f44bf890..bcd01746 100644 +--- a/config/v3_1/types/file_test.go ++++ b/config/v3_1/types/file_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFileValidateOverwrite(t *testing.T) { +diff --git a/config/v3_1/types/filesystem.go b/config/v3_1/types/filesystem.go +index 8b07e3b9..149dead1 100644 +--- a/config/v3_1/types/filesystem.go ++++ b/config/v3_1/types/filesystem.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/filesystem_test.go b/config/v3_1/types/filesystem_test.go +index 94f6b0a2..67bc42f6 100644 +--- a/config/v3_1/types/filesystem_test.go ++++ b/config/v3_1/types/filesystem_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFilesystemValidateFormat(t *testing.T) { +diff --git a/config/v3_1/types/headers.go b/config/v3_1/types/headers.go +index be1aadad..4ad13bf9 100644 +--- a/config/v3_1/types/headers.go ++++ b/config/v3_1/types/headers.go +@@ -17,9 +17,9 @@ package types + import ( + "net/http" + +- "github.com/coreos/ignition/v2/config/shared/errors" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + // Parse generates standard net/http headers from the data in HTTPHeaders +diff --git a/config/v3_1/types/headers_test.go b/config/v3_1/types/headers_test.go +index 40380b68..5e888830 100644 +--- a/config/v3_1/types/headers_test.go ++++ b/config/v3_1/types/headers_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func toPointer(val string) *string { +diff --git a/config/v3_1/types/ignition.go b/config/v3_1/types/ignition.go +index 689b6093..5e9cb356 100644 +--- a/config/v3_1/types/ignition.go ++++ b/config/v3_1/types/ignition.go +@@ -17,7 +17,7 @@ package types + import ( + "github.com/coreos/go-semver/semver" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/mode.go b/config/v3_1/types/mode.go +index 6021b915..8acc4e75 100644 +--- a/config/v3_1/types/mode.go ++++ b/config/v3_1/types/mode.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func validateMode(m *int) error { +diff --git a/config/v3_1/types/mode_test.go b/config/v3_1/types/mode_test.go +index addf4afa..e9a243ce 100644 +--- a/config/v3_1/types/mode_test.go ++++ b/config/v3_1/types/mode_test.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_1/types/node.go b/config/v3_1/types/node.go +index fb41f1f0..36e79157 100644 +--- a/config/v3_1/types/node.go ++++ b/config/v3_1/types/node.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/node_test.go b/config/v3_1/types/node_test.go +index 265db7f1..11087ecf 100644 +--- a/config/v3_1/types/node_test.go ++++ b/config/v3_1/types/node_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/partition.go b/config/v3_1/types/partition.go +index 84be0cd9..46e873d7 100644 +--- a/config/v3_1/types/partition.go ++++ b/config/v3_1/types/partition.go +@@ -19,8 +19,8 @@ import ( + "regexp" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/partition_test.go b/config/v3_1/types/partition_test.go +index 728aead6..dcd3b8de 100644 +--- a/config/v3_1/types/partition_test.go ++++ b/config/v3_1/types/partition_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestValidateLabel(t *testing.T) { +diff --git a/config/v3_1/types/path.go b/config/v3_1/types/path.go +index c06fccf1..4266034a 100644 +--- a/config/v3_1/types/path.go ++++ b/config/v3_1/types/path.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validatePath(p string) error { +diff --git a/config/v3_1/types/path_test.go b/config/v3_1/types/path_test.go +index 98960487..b7f7598b 100644 +--- a/config/v3_1/types/path_test.go ++++ b/config/v3_1/types/path_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func TestPathValidate(t *testing.T) { +diff --git a/config/v3_1/types/proxy.go b/config/v3_1/types/proxy.go +index 4a60087f..13b7501e 100644 +--- a/config/v3_1/types/proxy.go ++++ b/config/v3_1/types/proxy.go +@@ -17,7 +17,7 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/proxy_test.go b/config/v3_1/types/proxy_test.go +index e9429421..17a52956 100644 +--- a/config/v3_1/types/proxy_test.go ++++ b/config/v3_1/types/proxy_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/raid.go b/config/v3_1/types/raid.go +index 9c861fcb..3b746c1c 100644 +--- a/config/v3_1/types/raid.go ++++ b/config/v3_1/types/raid.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/raid_test.go b/config/v3_1/types/raid_test.go +index 34861605..639ecea5 100644 +--- a/config/v3_1/types/raid_test.go ++++ b/config/v3_1/types/raid_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/resource.go b/config/v3_1/types/resource.go +index 68da6c7b..6ea74d3d 100644 +--- a/config/v3_1/types/resource.go ++++ b/config/v3_1/types/resource.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/storage.go b/config/v3_1/types/storage.go +index 24668954..d93d4678 100644 +--- a/config/v3_1/types/storage.go ++++ b/config/v3_1/types/storage.go +@@ -18,8 +18,8 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/storage_test.go b/config/v3_1/types/storage_test.go +index f106deb8..6d42a772 100644 +--- a/config/v3_1/types/storage_test.go ++++ b/config/v3_1/types/storage_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/systemd.go b/config/v3_1/types/systemd.go +index ac521ba7..818959f4 100644 +--- a/config/v3_1/types/systemd.go ++++ b/config/v3_1/types/systemd.go +@@ -17,9 +17,9 @@ package types + import ( + "regexp" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/systemd_test.go b/config/v3_1/types/systemd_test.go +index 798eb10f..d4a4be01 100644 +--- a/config/v3_1/types/systemd_test.go ++++ b/config/v3_1/types/systemd_test.go +@@ -18,10 +18,10 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_1/types/unit.go b/config/v3_1/types/unit.go +index 786debae..3505d5f4 100644 +--- a/config/v3_1/types/unit.go ++++ b/config/v3_1/types/unit.go +@@ -17,10 +17,10 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/shared/validations" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/shared/validations" ++ "github.com/flatcar/ignition/v2/config/util" + + cpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/unit_test.go b/config/v3_1/types/unit_test.go +index b0b2e884..3a22e081 100644 +--- a/config/v3_1/types/unit_test.go ++++ b/config/v3_1/types/unit_test.go +@@ -19,8 +19,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/url.go b/config/v3_1/types/url.go +index 6a1f9397..2d8c44b1 100644 +--- a/config/v3_1/types/url.go ++++ b/config/v3_1/types/url.go +@@ -19,8 +19,8 @@ import ( + + "github.com/vincent-petithory/dataurl" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validateURL(s string) error { +diff --git a/config/v3_1/types/url_test.go b/config/v3_1/types/url_test.go +index 46674d7c..12dcdee0 100644 +--- a/config/v3_1/types/url_test.go ++++ b/config/v3_1/types/url_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestURLValidate(t *testing.T) { +diff --git a/config/v3_1/types/verification.go b/config/v3_1/types/verification.go +index e410f98a..2bd16354 100644 +--- a/config/v3_1/types/verification.go ++++ b/config/v3_1/types/verification.go +@@ -19,7 +19,7 @@ import ( + "encoding/hex" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_1/types/verification_test.go b/config/v3_1/types/verification_test.go +index 6c0b3b2b..88fa0323 100644 +--- a/config/v3_1/types/verification_test.go ++++ b/config/v3_1/types/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/config.go b/config/v3_2/config.go +index c6c7d94d..e324f848 100644 +--- a/config/v3_2/config.go ++++ b/config/v3_2/config.go +@@ -15,13 +15,13 @@ + package v3_2 + + import ( +- "github.com/coreos/ignition/v2/config/merge" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" +- prev "github.com/coreos/ignition/v2/config/v3_1" +- "github.com/coreos/ignition/v2/config/v3_2/translate" +- "github.com/coreos/ignition/v2/config/v3_2/types" +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/merge" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" ++ prev "github.com/flatcar/ignition/v2/config/v3_1" ++ "github.com/flatcar/ignition/v2/config/v3_2/translate" ++ "github.com/flatcar/ignition/v2/config/v3_2/types" ++ "github.com/flatcar/ignition/v2/config/validate" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/config_test.go b/config/v3_2/config_test.go +index 0fb1d221..80d95b51 100644 +--- a/config/v3_2/config_test.go ++++ b/config/v3_2/config_test.go +@@ -17,8 +17,8 @@ package v3_2 + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_2/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_2/types" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_2/translate/translate.go b/config/v3_2/translate/translate.go +index 0fd4f420..323d3bf8 100644 +--- a/config/v3_2/translate/translate.go ++++ b/config/v3_2/translate/translate.go +@@ -15,9 +15,9 @@ + package translate + + import ( +- "github.com/coreos/ignition/v2/config/translate" +- old_types "github.com/coreos/ignition/v2/config/v3_1/types" +- "github.com/coreos/ignition/v2/config/v3_2/types" ++ "github.com/flatcar/ignition/v2/config/translate" ++ old_types "github.com/flatcar/ignition/v2/config/v3_1/types" ++ "github.com/flatcar/ignition/v2/config/v3_2/types" + ) + + func translateIgnition(old old_types.Ignition) (ret types.Ignition) { +diff --git a/config/v3_2/translate/translate_test.go b/config/v3_2/translate/translate_test.go +index 72d0b359..fcea2c70 100644 +--- a/config/v3_2/translate/translate_test.go ++++ b/config/v3_2/translate/translate_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- old "github.com/coreos/ignition/v2/config/v3_1/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ old "github.com/flatcar/ignition/v2/config/v3_1/types" + ) + + // Check that we have valid translators for the complete config struct +diff --git a/config/v3_2/types/config.go b/config/v3_2/types/config.go +index 0e2fc370..53b042c3 100644 +--- a/config/v3_2/types/config.go ++++ b/config/v3_2/types/config.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/path" +diff --git a/config/v3_2/types/config_test.go b/config/v3_2/types/config_test.go +index da8cfa26..b7b18bdb 100644 +--- a/config/v3_2/types/config_test.go ++++ b/config/v3_2/types/config_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/custom.go b/config/v3_2/types/custom.go +index 2a1231cb..bcde76fb 100644 +--- a/config/v3_2/types/custom.go ++++ b/config/v3_2/types/custom.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/disk.go b/config/v3_2/types/disk.go +index 8caf8499..29fd3900 100644 +--- a/config/v3_2/types/disk.go ++++ b/config/v3_2/types/disk.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/file.go b/config/v3_2/types/file.go +index 4e7566bd..f86d520b 100644 +--- a/config/v3_2/types/file.go ++++ b/config/v3_2/types/file.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/file_test.go b/config/v3_2/types/file_test.go +index 449e0700..5aa2e87c 100644 +--- a/config/v3_2/types/file_test.go ++++ b/config/v3_2/types/file_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFileValidateOverwrite(t *testing.T) { +diff --git a/config/v3_2/types/filesystem.go b/config/v3_2/types/filesystem.go +index 3bf064f3..9e5c5f2b 100644 +--- a/config/v3_2/types/filesystem.go ++++ b/config/v3_2/types/filesystem.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/filesystem_test.go b/config/v3_2/types/filesystem_test.go +index 1f8db903..6e710426 100644 +--- a/config/v3_2/types/filesystem_test.go ++++ b/config/v3_2/types/filesystem_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFilesystemValidateFormat(t *testing.T) { +diff --git a/config/v3_2/types/headers.go b/config/v3_2/types/headers.go +index be1aadad..4ad13bf9 100644 +--- a/config/v3_2/types/headers.go ++++ b/config/v3_2/types/headers.go +@@ -17,9 +17,9 @@ package types + import ( + "net/http" + +- "github.com/coreos/ignition/v2/config/shared/errors" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + // Parse generates standard net/http headers from the data in HTTPHeaders +diff --git a/config/v3_2/types/headers_test.go b/config/v3_2/types/headers_test.go +index 40380b68..5e888830 100644 +--- a/config/v3_2/types/headers_test.go ++++ b/config/v3_2/types/headers_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func toPointer(val string) *string { +diff --git a/config/v3_2/types/ignition.go b/config/v3_2/types/ignition.go +index 190445bd..1fbcf8c4 100644 +--- a/config/v3_2/types/ignition.go ++++ b/config/v3_2/types/ignition.go +@@ -17,7 +17,7 @@ package types + import ( + "github.com/coreos/go-semver/semver" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/luks.go b/config/v3_2/types/luks.go +index 123392b2..c80fc8d2 100644 +--- a/config/v3_2/types/luks.go ++++ b/config/v3_2/types/luks.go +@@ -17,8 +17,8 @@ package types + import ( + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/mode.go b/config/v3_2/types/mode.go +index ad3e51c2..8f15a8cb 100644 +--- a/config/v3_2/types/mode.go ++++ b/config/v3_2/types/mode.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func validateMode(m *int) error { +diff --git a/config/v3_2/types/mode_test.go b/config/v3_2/types/mode_test.go +index 53e37a6b..a8fa7a81 100644 +--- a/config/v3_2/types/mode_test.go ++++ b/config/v3_2/types/mode_test.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_2/types/node.go b/config/v3_2/types/node.go +index 248276e7..f4e94f9e 100644 +--- a/config/v3_2/types/node.go ++++ b/config/v3_2/types/node.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/node_test.go b/config/v3_2/types/node_test.go +index 20ba4eb6..9176b4b7 100644 +--- a/config/v3_2/types/node_test.go ++++ b/config/v3_2/types/node_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/partition.go b/config/v3_2/types/partition.go +index 1b2d97ed..6603af3b 100644 +--- a/config/v3_2/types/partition.go ++++ b/config/v3_2/types/partition.go +@@ -19,8 +19,8 @@ import ( + "regexp" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/partition_test.go b/config/v3_2/types/partition_test.go +index a1e1623f..9f8e7997 100644 +--- a/config/v3_2/types/partition_test.go ++++ b/config/v3_2/types/partition_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestValidateLabel(t *testing.T) { +diff --git a/config/v3_2/types/path.go b/config/v3_2/types/path.go +index 131e300c..cb48e341 100644 +--- a/config/v3_2/types/path.go ++++ b/config/v3_2/types/path.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validatePath(p string) error { +diff --git a/config/v3_2/types/path_test.go b/config/v3_2/types/path_test.go +index 3d199cbd..33b2d0ba 100644 +--- a/config/v3_2/types/path_test.go ++++ b/config/v3_2/types/path_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func TestPathValidate(t *testing.T) { +diff --git a/config/v3_2/types/proxy.go b/config/v3_2/types/proxy.go +index d48d210a..de146a99 100644 +--- a/config/v3_2/types/proxy.go ++++ b/config/v3_2/types/proxy.go +@@ -17,7 +17,7 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/proxy_test.go b/config/v3_2/types/proxy_test.go +index 269f4fb2..3cc5e5cd 100644 +--- a/config/v3_2/types/proxy_test.go ++++ b/config/v3_2/types/proxy_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/raid.go b/config/v3_2/types/raid.go +index 5ae4f8c0..c3324bab 100644 +--- a/config/v3_2/types/raid.go ++++ b/config/v3_2/types/raid.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/raid_test.go b/config/v3_2/types/raid_test.go +index 34861605..639ecea5 100644 +--- a/config/v3_2/types/raid_test.go ++++ b/config/v3_2/types/raid_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/resource.go b/config/v3_2/types/resource.go +index 68da6c7b..6ea74d3d 100644 +--- a/config/v3_2/types/resource.go ++++ b/config/v3_2/types/resource.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/storage.go b/config/v3_2/types/storage.go +index 5cec008d..5017849f 100644 +--- a/config/v3_2/types/storage.go ++++ b/config/v3_2/types/storage.go +@@ -18,8 +18,8 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/storage_test.go b/config/v3_2/types/storage_test.go +index 4667b8d2..3aeb8d15 100644 +--- a/config/v3_2/types/storage_test.go ++++ b/config/v3_2/types/storage_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/systemd.go b/config/v3_2/types/systemd.go +index ac521ba7..818959f4 100644 +--- a/config/v3_2/types/systemd.go ++++ b/config/v3_2/types/systemd.go +@@ -17,9 +17,9 @@ package types + import ( + "regexp" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/systemd_test.go b/config/v3_2/types/systemd_test.go +index 798eb10f..d4a4be01 100644 +--- a/config/v3_2/types/systemd_test.go ++++ b/config/v3_2/types/systemd_test.go +@@ -18,10 +18,10 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_2/types/tang.go b/config/v3_2/types/tang.go +index 86ab79c9..a2fd8ee6 100644 +--- a/config/v3_2/types/tang.go ++++ b/config/v3_2/types/tang.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/unit.go b/config/v3_2/types/unit.go +index c5ee1e8e..5a9c3b22 100644 +--- a/config/v3_2/types/unit.go ++++ b/config/v3_2/types/unit.go +@@ -17,10 +17,10 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/shared/validations" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/shared/validations" ++ "github.com/flatcar/ignition/v2/config/util" + + cpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/unit_test.go b/config/v3_2/types/unit_test.go +index 3dc90540..8c96dfba 100644 +--- a/config/v3_2/types/unit_test.go ++++ b/config/v3_2/types/unit_test.go +@@ -19,8 +19,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/url.go b/config/v3_2/types/url.go +index 0d8771bf..bf1f3a5e 100644 +--- a/config/v3_2/types/url.go ++++ b/config/v3_2/types/url.go +@@ -19,8 +19,8 @@ import ( + + "github.com/vincent-petithory/dataurl" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validateURL(s string) error { +diff --git a/config/v3_2/types/url_test.go b/config/v3_2/types/url_test.go +index bfef261f..b10533d9 100644 +--- a/config/v3_2/types/url_test.go ++++ b/config/v3_2/types/url_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestURLValidate(t *testing.T) { +diff --git a/config/v3_2/types/verification.go b/config/v3_2/types/verification.go +index 5def6f04..1ef291c0 100644 +--- a/config/v3_2/types/verification.go ++++ b/config/v3_2/types/verification.go +@@ -19,7 +19,7 @@ import ( + "encoding/hex" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_2/types/verification_test.go b/config/v3_2/types/verification_test.go +index 9a0914d0..f121b503 100644 +--- a/config/v3_2/types/verification_test.go ++++ b/config/v3_2/types/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/config.go b/config/v3_3/config.go +index 446ea67d..a0a74723 100644 +--- a/config/v3_3/config.go ++++ b/config/v3_3/config.go +@@ -15,13 +15,13 @@ + package v3_3 + + import ( +- "github.com/coreos/ignition/v2/config/merge" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" +- prev "github.com/coreos/ignition/v2/config/v3_2" +- "github.com/coreos/ignition/v2/config/v3_3/translate" +- "github.com/coreos/ignition/v2/config/v3_3/types" +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/merge" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" ++ prev "github.com/flatcar/ignition/v2/config/v3_2" ++ "github.com/flatcar/ignition/v2/config/v3_3/translate" ++ "github.com/flatcar/ignition/v2/config/v3_3/types" ++ "github.com/flatcar/ignition/v2/config/validate" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/config_test.go b/config/v3_3/config_test.go +index deb1e3b7..983c5a44 100644 +--- a/config/v3_3/config_test.go ++++ b/config/v3_3/config_test.go +@@ -17,8 +17,8 @@ package v3_3 + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_3/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_3/types" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_3/translate/translate.go b/config/v3_3/translate/translate.go +index 656ad0a4..8d61318b 100644 +--- a/config/v3_3/translate/translate.go ++++ b/config/v3_3/translate/translate.go +@@ -15,10 +15,10 @@ + package translate + + import ( +- "github.com/coreos/ignition/v2/config/translate" +- "github.com/coreos/ignition/v2/config/util" +- old_types "github.com/coreos/ignition/v2/config/v3_2/types" +- "github.com/coreos/ignition/v2/config/v3_3/types" ++ "github.com/flatcar/ignition/v2/config/translate" ++ "github.com/flatcar/ignition/v2/config/util" ++ old_types "github.com/flatcar/ignition/v2/config/v3_2/types" ++ "github.com/flatcar/ignition/v2/config/v3_3/types" + ) + + func translateIgnition(old old_types.Ignition) (ret types.Ignition) { +diff --git a/config/v3_3/translate/translate_test.go b/config/v3_3/translate/translate_test.go +index 81f3029b..89c7c765 100644 +--- a/config/v3_3/translate/translate_test.go ++++ b/config/v3_3/translate/translate_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- old "github.com/coreos/ignition/v2/config/v3_2/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ old "github.com/flatcar/ignition/v2/config/v3_2/types" + ) + + // Check that we have valid translators for the complete config struct +diff --git a/config/v3_3/types/clevis.go b/config/v3_3/types/clevis.go +index 68887d43..564154f6 100644 +--- a/config/v3_3/types/clevis.go ++++ b/config/v3_3/types/clevis.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/clevis_test.go b/config/v3_3/types/clevis_test.go +index f616868c..c28509ee 100644 +--- a/config/v3_3/types/clevis_test.go ++++ b/config/v3_3/types/clevis_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/config.go b/config/v3_3/types/config.go +index 9158e7f0..c2f6a8b4 100644 +--- a/config/v3_3/types/config.go ++++ b/config/v3_3/types/config.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/path" +diff --git a/config/v3_3/types/config_test.go b/config/v3_3/types/config_test.go +index 3d82627b..511c5ecd 100644 +--- a/config/v3_3/types/config_test.go ++++ b/config/v3_3/types/config_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/disk.go b/config/v3_3/types/disk.go +index 8caf8499..29fd3900 100644 +--- a/config/v3_3/types/disk.go ++++ b/config/v3_3/types/disk.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/file.go b/config/v3_3/types/file.go +index 4e7566bd..f86d520b 100644 +--- a/config/v3_3/types/file.go ++++ b/config/v3_3/types/file.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/file_test.go b/config/v3_3/types/file_test.go +index 449e0700..5aa2e87c 100644 +--- a/config/v3_3/types/file_test.go ++++ b/config/v3_3/types/file_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFileValidateOverwrite(t *testing.T) { +diff --git a/config/v3_3/types/filesystem.go b/config/v3_3/types/filesystem.go +index c722b363..9f7f8bbc 100644 +--- a/config/v3_3/types/filesystem.go ++++ b/config/v3_3/types/filesystem.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/filesystem_test.go b/config/v3_3/types/filesystem_test.go +index 1f8db903..6e710426 100644 +--- a/config/v3_3/types/filesystem_test.go ++++ b/config/v3_3/types/filesystem_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFilesystemValidateFormat(t *testing.T) { +diff --git a/config/v3_3/types/headers.go b/config/v3_3/types/headers.go +index be1aadad..4ad13bf9 100644 +--- a/config/v3_3/types/headers.go ++++ b/config/v3_3/types/headers.go +@@ -17,9 +17,9 @@ package types + import ( + "net/http" + +- "github.com/coreos/ignition/v2/config/shared/errors" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + // Parse generates standard net/http headers from the data in HTTPHeaders +diff --git a/config/v3_3/types/headers_test.go b/config/v3_3/types/headers_test.go +index 40380b68..5e888830 100644 +--- a/config/v3_3/types/headers_test.go ++++ b/config/v3_3/types/headers_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func toPointer(val string) *string { +diff --git a/config/v3_3/types/ignition.go b/config/v3_3/types/ignition.go +index 190445bd..1fbcf8c4 100644 +--- a/config/v3_3/types/ignition.go ++++ b/config/v3_3/types/ignition.go +@@ -17,7 +17,7 @@ package types + import ( + "github.com/coreos/go-semver/semver" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/kargs_test.go b/config/v3_3/types/kargs_test.go +index 1a258727..a79c037a 100644 +--- a/config/v3_3/types/kargs_test.go ++++ b/config/v3_3/types/kargs_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/validate" + ) + + func TestKernelArgumentsValidate(t *testing.T) { +diff --git a/config/v3_3/types/luks.go b/config/v3_3/types/luks.go +index 90d72387..2862ebae 100644 +--- a/config/v3_3/types/luks.go ++++ b/config/v3_3/types/luks.go +@@ -17,8 +17,8 @@ package types + import ( + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/mode.go b/config/v3_3/types/mode.go +index ad3e51c2..8f15a8cb 100644 +--- a/config/v3_3/types/mode.go ++++ b/config/v3_3/types/mode.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func validateMode(m *int) error { +diff --git a/config/v3_3/types/mode_test.go b/config/v3_3/types/mode_test.go +index 53e37a6b..a8fa7a81 100644 +--- a/config/v3_3/types/mode_test.go ++++ b/config/v3_3/types/mode_test.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_3/types/node.go b/config/v3_3/types/node.go +index 248276e7..f4e94f9e 100644 +--- a/config/v3_3/types/node.go ++++ b/config/v3_3/types/node.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/node_test.go b/config/v3_3/types/node_test.go +index 20ba4eb6..9176b4b7 100644 +--- a/config/v3_3/types/node_test.go ++++ b/config/v3_3/types/node_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/partition.go b/config/v3_3/types/partition.go +index 1b2d97ed..6603af3b 100644 +--- a/config/v3_3/types/partition.go ++++ b/config/v3_3/types/partition.go +@@ -19,8 +19,8 @@ import ( + "regexp" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/partition_test.go b/config/v3_3/types/partition_test.go +index a1e1623f..9f8e7997 100644 +--- a/config/v3_3/types/partition_test.go ++++ b/config/v3_3/types/partition_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestValidateLabel(t *testing.T) { +diff --git a/config/v3_3/types/path.go b/config/v3_3/types/path.go +index 131e300c..cb48e341 100644 +--- a/config/v3_3/types/path.go ++++ b/config/v3_3/types/path.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validatePath(p string) error { +diff --git a/config/v3_3/types/path_test.go b/config/v3_3/types/path_test.go +index 3d199cbd..33b2d0ba 100644 +--- a/config/v3_3/types/path_test.go ++++ b/config/v3_3/types/path_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func TestPathValidate(t *testing.T) { +diff --git a/config/v3_3/types/proxy.go b/config/v3_3/types/proxy.go +index d48d210a..de146a99 100644 +--- a/config/v3_3/types/proxy.go ++++ b/config/v3_3/types/proxy.go +@@ -17,7 +17,7 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/proxy_test.go b/config/v3_3/types/proxy_test.go +index 269f4fb2..3cc5e5cd 100644 +--- a/config/v3_3/types/proxy_test.go ++++ b/config/v3_3/types/proxy_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/raid.go b/config/v3_3/types/raid.go +index 9d69aa36..fa1d3f4d 100644 +--- a/config/v3_3/types/raid.go ++++ b/config/v3_3/types/raid.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/raid_test.go b/config/v3_3/types/raid_test.go +index 7323b26f..313b4572 100644 +--- a/config/v3_3/types/raid_test.go ++++ b/config/v3_3/types/raid_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/resource.go b/config/v3_3/types/resource.go +index 68da6c7b..6ea74d3d 100644 +--- a/config/v3_3/types/resource.go ++++ b/config/v3_3/types/resource.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/storage.go b/config/v3_3/types/storage.go +index 20cb7304..552749e6 100644 +--- a/config/v3_3/types/storage.go ++++ b/config/v3_3/types/storage.go +@@ -18,8 +18,8 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/storage_test.go b/config/v3_3/types/storage_test.go +index 551688a2..6c35ed27 100644 +--- a/config/v3_3/types/storage_test.go ++++ b/config/v3_3/types/storage_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/systemd.go b/config/v3_3/types/systemd.go +index ac521ba7..818959f4 100644 +--- a/config/v3_3/types/systemd.go ++++ b/config/v3_3/types/systemd.go +@@ -17,9 +17,9 @@ package types + import ( + "regexp" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/systemd_test.go b/config/v3_3/types/systemd_test.go +index 798eb10f..d4a4be01 100644 +--- a/config/v3_3/types/systemd_test.go ++++ b/config/v3_3/types/systemd_test.go +@@ -18,10 +18,10 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_3/types/tang.go b/config/v3_3/types/tang.go +index 86ab79c9..a2fd8ee6 100644 +--- a/config/v3_3/types/tang.go ++++ b/config/v3_3/types/tang.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/unit.go b/config/v3_3/types/unit.go +index c5ee1e8e..5a9c3b22 100644 +--- a/config/v3_3/types/unit.go ++++ b/config/v3_3/types/unit.go +@@ -17,10 +17,10 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/shared/validations" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/shared/validations" ++ "github.com/flatcar/ignition/v2/config/util" + + cpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/unit_test.go b/config/v3_3/types/unit_test.go +index 3dc90540..8c96dfba 100644 +--- a/config/v3_3/types/unit_test.go ++++ b/config/v3_3/types/unit_test.go +@@ -19,8 +19,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/url.go b/config/v3_3/types/url.go +index 0d8771bf..bf1f3a5e 100644 +--- a/config/v3_3/types/url.go ++++ b/config/v3_3/types/url.go +@@ -19,8 +19,8 @@ import ( + + "github.com/vincent-petithory/dataurl" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validateURL(s string) error { +diff --git a/config/v3_3/types/url_test.go b/config/v3_3/types/url_test.go +index bfef261f..b10533d9 100644 +--- a/config/v3_3/types/url_test.go ++++ b/config/v3_3/types/url_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestURLValidate(t *testing.T) { +diff --git a/config/v3_3/types/verification.go b/config/v3_3/types/verification.go +index 5def6f04..1ef291c0 100644 +--- a/config/v3_3/types/verification.go ++++ b/config/v3_3/types/verification.go +@@ -19,7 +19,7 @@ import ( + "encoding/hex" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_3/types/verification_test.go b/config/v3_3/types/verification_test.go +index 9a0914d0..f121b503 100644 +--- a/config/v3_3/types/verification_test.go ++++ b/config/v3_3/types/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/config.go b/config/v3_4/config.go +index e83abb0b..0a01a560 100644 +--- a/config/v3_4/config.go ++++ b/config/v3_4/config.go +@@ -15,13 +15,13 @@ + package v3_4 + + import ( +- "github.com/coreos/ignition/v2/config/merge" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" +- prev "github.com/coreos/ignition/v2/config/v3_3" +- "github.com/coreos/ignition/v2/config/v3_4/translate" +- "github.com/coreos/ignition/v2/config/v3_4/types" +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/merge" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" ++ prev "github.com/flatcar/ignition/v2/config/v3_3" ++ "github.com/flatcar/ignition/v2/config/v3_4/translate" ++ "github.com/flatcar/ignition/v2/config/v3_4/types" ++ "github.com/flatcar/ignition/v2/config/validate" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/config_test.go b/config/v3_4/config_test.go +index 0ee908d7..6ecb4b44 100644 +--- a/config/v3_4/config_test.go ++++ b/config/v3_4/config_test.go +@@ -17,8 +17,8 @@ package v3_4 + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_4/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_4/types" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_4/translate/translate.go b/config/v3_4/translate/translate.go +index 5d748d82..38873ea8 100644 +--- a/config/v3_4/translate/translate.go ++++ b/config/v3_4/translate/translate.go +@@ -15,10 +15,10 @@ + package translate + + import ( +- "github.com/coreos/ignition/v2/config/translate" +- "github.com/coreos/ignition/v2/config/util" +- old_types "github.com/coreos/ignition/v2/config/v3_3/types" +- "github.com/coreos/ignition/v2/config/v3_4/types" ++ "github.com/flatcar/ignition/v2/config/translate" ++ "github.com/flatcar/ignition/v2/config/util" ++ old_types "github.com/flatcar/ignition/v2/config/v3_3/types" ++ "github.com/flatcar/ignition/v2/config/v3_4/types" + ) + + func translateIgnition(old old_types.Ignition) (ret types.Ignition) { +diff --git a/config/v3_4/translate/translate_test.go b/config/v3_4/translate/translate_test.go +index 8ff8c05c..8d0e5759 100644 +--- a/config/v3_4/translate/translate_test.go ++++ b/config/v3_4/translate/translate_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- old "github.com/coreos/ignition/v2/config/v3_3/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ old "github.com/flatcar/ignition/v2/config/v3_3/types" + ) + + // Check that we have valid translators for the complete config struct +diff --git a/config/v3_4/types/clevis.go b/config/v3_4/types/clevis.go +index 68887d43..564154f6 100644 +--- a/config/v3_4/types/clevis.go ++++ b/config/v3_4/types/clevis.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/clevis_test.go b/config/v3_4/types/clevis_test.go +index f616868c..c28509ee 100644 +--- a/config/v3_4/types/clevis_test.go ++++ b/config/v3_4/types/clevis_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/config.go b/config/v3_4/types/config.go +index 4f51f3c6..daffb4fe 100644 +--- a/config/v3_4/types/config.go ++++ b/config/v3_4/types/config.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/path" +diff --git a/config/v3_4/types/config_test.go b/config/v3_4/types/config_test.go +index 3d82627b..511c5ecd 100644 +--- a/config/v3_4/types/config_test.go ++++ b/config/v3_4/types/config_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/disk.go b/config/v3_4/types/disk.go +index 8caf8499..29fd3900 100644 +--- a/config/v3_4/types/disk.go ++++ b/config/v3_4/types/disk.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/file.go b/config/v3_4/types/file.go +index 9b71bb26..e3f7fbdf 100644 +--- a/config/v3_4/types/file.go ++++ b/config/v3_4/types/file.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/file_test.go b/config/v3_4/types/file_test.go +index 449e0700..5aa2e87c 100644 +--- a/config/v3_4/types/file_test.go ++++ b/config/v3_4/types/file_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFileValidateOverwrite(t *testing.T) { +diff --git a/config/v3_4/types/filesystem.go b/config/v3_4/types/filesystem.go +index c722b363..9f7f8bbc 100644 +--- a/config/v3_4/types/filesystem.go ++++ b/config/v3_4/types/filesystem.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/filesystem_test.go b/config/v3_4/types/filesystem_test.go +index 1f8db903..6e710426 100644 +--- a/config/v3_4/types/filesystem_test.go ++++ b/config/v3_4/types/filesystem_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFilesystemValidateFormat(t *testing.T) { +diff --git a/config/v3_4/types/headers.go b/config/v3_4/types/headers.go +index be1aadad..4ad13bf9 100644 +--- a/config/v3_4/types/headers.go ++++ b/config/v3_4/types/headers.go +@@ -17,9 +17,9 @@ package types + import ( + "net/http" + +- "github.com/coreos/ignition/v2/config/shared/errors" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + // Parse generates standard net/http headers from the data in HTTPHeaders +diff --git a/config/v3_4/types/headers_test.go b/config/v3_4/types/headers_test.go +index 40380b68..5e888830 100644 +--- a/config/v3_4/types/headers_test.go ++++ b/config/v3_4/types/headers_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func toPointer(val string) *string { +diff --git a/config/v3_4/types/ignition.go b/config/v3_4/types/ignition.go +index 190445bd..1fbcf8c4 100644 +--- a/config/v3_4/types/ignition.go ++++ b/config/v3_4/types/ignition.go +@@ -17,7 +17,7 @@ package types + import ( + "github.com/coreos/go-semver/semver" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/kargs_test.go b/config/v3_4/types/kargs_test.go +index 1a258727..a79c037a 100644 +--- a/config/v3_4/types/kargs_test.go ++++ b/config/v3_4/types/kargs_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/validate" + ) + + func TestKernelArgumentsValidate(t *testing.T) { +diff --git a/config/v3_4/types/luks.go b/config/v3_4/types/luks.go +index 90d72387..2862ebae 100644 +--- a/config/v3_4/types/luks.go ++++ b/config/v3_4/types/luks.go +@@ -17,8 +17,8 @@ package types + import ( + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/mode.go b/config/v3_4/types/mode.go +index 9eb7573d..67c7ebd3 100644 +--- a/config/v3_4/types/mode.go ++++ b/config/v3_4/types/mode.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func validateMode(m *int) error { +diff --git a/config/v3_4/types/mode_test.go b/config/v3_4/types/mode_test.go +index 8966e25d..5c973dbf 100644 +--- a/config/v3_4/types/mode_test.go ++++ b/config/v3_4/types/mode_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestModeValidate(t *testing.T) { +diff --git a/config/v3_4/types/node.go b/config/v3_4/types/node.go +index 248276e7..f4e94f9e 100644 +--- a/config/v3_4/types/node.go ++++ b/config/v3_4/types/node.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/node_test.go b/config/v3_4/types/node_test.go +index 20ba4eb6..9176b4b7 100644 +--- a/config/v3_4/types/node_test.go ++++ b/config/v3_4/types/node_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/partition.go b/config/v3_4/types/partition.go +index 1b2d97ed..6603af3b 100644 +--- a/config/v3_4/types/partition.go ++++ b/config/v3_4/types/partition.go +@@ -19,8 +19,8 @@ import ( + "regexp" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/partition_test.go b/config/v3_4/types/partition_test.go +index a1e1623f..9f8e7997 100644 +--- a/config/v3_4/types/partition_test.go ++++ b/config/v3_4/types/partition_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestValidateLabel(t *testing.T) { +diff --git a/config/v3_4/types/path.go b/config/v3_4/types/path.go +index 131e300c..cb48e341 100644 +--- a/config/v3_4/types/path.go ++++ b/config/v3_4/types/path.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validatePath(p string) error { +diff --git a/config/v3_4/types/path_test.go b/config/v3_4/types/path_test.go +index 3d199cbd..33b2d0ba 100644 +--- a/config/v3_4/types/path_test.go ++++ b/config/v3_4/types/path_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func TestPathValidate(t *testing.T) { +diff --git a/config/v3_4/types/proxy.go b/config/v3_4/types/proxy.go +index d48d210a..de146a99 100644 +--- a/config/v3_4/types/proxy.go ++++ b/config/v3_4/types/proxy.go +@@ -17,7 +17,7 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/proxy_test.go b/config/v3_4/types/proxy_test.go +index 269f4fb2..3cc5e5cd 100644 +--- a/config/v3_4/types/proxy_test.go ++++ b/config/v3_4/types/proxy_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/raid.go b/config/v3_4/types/raid.go +index 9d69aa36..fa1d3f4d 100644 +--- a/config/v3_4/types/raid.go ++++ b/config/v3_4/types/raid.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/raid_test.go b/config/v3_4/types/raid_test.go +index 7323b26f..313b4572 100644 +--- a/config/v3_4/types/raid_test.go ++++ b/config/v3_4/types/raid_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/resource.go b/config/v3_4/types/resource.go +index 68da6c7b..6ea74d3d 100644 +--- a/config/v3_4/types/resource.go ++++ b/config/v3_4/types/resource.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/storage.go b/config/v3_4/types/storage.go +index 20cb7304..552749e6 100644 +--- a/config/v3_4/types/storage.go ++++ b/config/v3_4/types/storage.go +@@ -18,8 +18,8 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/storage_test.go b/config/v3_4/types/storage_test.go +index 551688a2..6c35ed27 100644 +--- a/config/v3_4/types/storage_test.go ++++ b/config/v3_4/types/storage_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/systemd.go b/config/v3_4/types/systemd.go +index ac521ba7..818959f4 100644 +--- a/config/v3_4/types/systemd.go ++++ b/config/v3_4/types/systemd.go +@@ -17,9 +17,9 @@ package types + import ( + "regexp" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/systemd_test.go b/config/v3_4/types/systemd_test.go +index 798eb10f..d4a4be01 100644 +--- a/config/v3_4/types/systemd_test.go ++++ b/config/v3_4/types/systemd_test.go +@@ -18,10 +18,10 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_4/types/tang.go b/config/v3_4/types/tang.go +index 1839d6cc..26c155e5 100644 +--- a/config/v3_4/types/tang.go ++++ b/config/v3_4/types/tang.go +@@ -18,8 +18,8 @@ import ( + "encoding/json" + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/tang_test.go b/config/v3_4/types/tang_test.go +index fb57b1e4..6f31fd99 100644 +--- a/config/v3_4/types/tang_test.go ++++ b/config/v3_4/types/tang_test.go +@@ -18,10 +18,10 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestTangValidation(t *testing.T) { +diff --git a/config/v3_4/types/unit.go b/config/v3_4/types/unit.go +index c5ee1e8e..5a9c3b22 100644 +--- a/config/v3_4/types/unit.go ++++ b/config/v3_4/types/unit.go +@@ -17,10 +17,10 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/shared/validations" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/shared/validations" ++ "github.com/flatcar/ignition/v2/config/util" + + cpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/unit_test.go b/config/v3_4/types/unit_test.go +index 3dc90540..8c96dfba 100644 +--- a/config/v3_4/types/unit_test.go ++++ b/config/v3_4/types/unit_test.go +@@ -19,8 +19,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/url.go b/config/v3_4/types/url.go +index 3ca189da..9b2b4405 100644 +--- a/config/v3_4/types/url.go ++++ b/config/v3_4/types/url.go +@@ -21,8 +21,8 @@ import ( + "github.com/aws/aws-sdk-go/aws/arn" + "github.com/vincent-petithory/dataurl" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validateURL(s string) error { +diff --git a/config/v3_4/types/url_test.go b/config/v3_4/types/url_test.go +index 1901b7af..12a4cfbf 100644 +--- a/config/v3_4/types/url_test.go ++++ b/config/v3_4/types/url_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestURLValidate(t *testing.T) { +diff --git a/config/v3_4/types/verification.go b/config/v3_4/types/verification.go +index 5def6f04..1ef291c0 100644 +--- a/config/v3_4/types/verification.go ++++ b/config/v3_4/types/verification.go +@@ -19,7 +19,7 @@ import ( + "encoding/hex" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_4/types/verification_test.go b/config/v3_4/types/verification_test.go +index 9a0914d0..f121b503 100644 +--- a/config/v3_4/types/verification_test.go ++++ b/config/v3_4/types/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/config.go b/config/v3_5_experimental/config.go +index 9a92bf2a..f0d4bb84 100644 +--- a/config/v3_5_experimental/config.go ++++ b/config/v3_5_experimental/config.go +@@ -15,13 +15,13 @@ + package v3_5_experimental + + import ( +- "github.com/coreos/ignition/v2/config/merge" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" +- prev "github.com/coreos/ignition/v2/config/v3_4" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/translate" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/merge" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" ++ prev "github.com/flatcar/ignition/v2/config/v3_4" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/translate" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/validate" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/config_test.go b/config/v3_5_experimental/config_test.go +index a56b4b3a..7e10866e 100644 +--- a/config/v3_5_experimental/config_test.go ++++ b/config/v3_5_experimental/config_test.go +@@ -17,8 +17,8 @@ package v3_5_experimental + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_5_experimental/translate/translate.go b/config/v3_5_experimental/translate/translate.go +index 5647e629..fd801170 100644 +--- a/config/v3_5_experimental/translate/translate.go ++++ b/config/v3_5_experimental/translate/translate.go +@@ -15,9 +15,9 @@ + package translate + + import ( +- "github.com/coreos/ignition/v2/config/translate" +- old_types "github.com/coreos/ignition/v2/config/v3_4/types" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/translate" ++ old_types "github.com/flatcar/ignition/v2/config/v3_4/types" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + func translateIgnition(old old_types.Ignition) (ret types.Ignition) { +diff --git a/config/v3_5_experimental/translate/translate_test.go b/config/v3_5_experimental/translate/translate_test.go +index 7896facc..c6afaa31 100644 +--- a/config/v3_5_experimental/translate/translate_test.go ++++ b/config/v3_5_experimental/translate/translate_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- old "github.com/coreos/ignition/v2/config/v3_4/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ old "github.com/flatcar/ignition/v2/config/v3_4/types" + ) + + // Check that we have valid translators for the complete config struct +diff --git a/config/v3_5_experimental/types/clevis.go b/config/v3_5_experimental/types/clevis.go +index 68887d43..564154f6 100644 +--- a/config/v3_5_experimental/types/clevis.go ++++ b/config/v3_5_experimental/types/clevis.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/clevis_test.go b/config/v3_5_experimental/types/clevis_test.go +index f616868c..c28509ee 100644 +--- a/config/v3_5_experimental/types/clevis_test.go ++++ b/config/v3_5_experimental/types/clevis_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/config.go b/config/v3_5_experimental/types/config.go +index 40c27106..190095c9 100644 +--- a/config/v3_5_experimental/types/config.go ++++ b/config/v3_5_experimental/types/config.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/go-semver/semver" + "github.com/coreos/vcontext/path" +diff --git a/config/v3_5_experimental/types/config_test.go b/config/v3_5_experimental/types/config_test.go +index 3d82627b..511c5ecd 100644 +--- a/config/v3_5_experimental/types/config_test.go ++++ b/config/v3_5_experimental/types/config_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/disk.go b/config/v3_5_experimental/types/disk.go +index 8caf8499..29fd3900 100644 +--- a/config/v3_5_experimental/types/disk.go ++++ b/config/v3_5_experimental/types/disk.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/file.go b/config/v3_5_experimental/types/file.go +index 9b71bb26..e3f7fbdf 100644 +--- a/config/v3_5_experimental/types/file.go ++++ b/config/v3_5_experimental/types/file.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/file_test.go b/config/v3_5_experimental/types/file_test.go +index 449e0700..5aa2e87c 100644 +--- a/config/v3_5_experimental/types/file_test.go ++++ b/config/v3_5_experimental/types/file_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFileValidateOverwrite(t *testing.T) { +diff --git a/config/v3_5_experimental/types/filesystem.go b/config/v3_5_experimental/types/filesystem.go +index c722b363..9f7f8bbc 100644 +--- a/config/v3_5_experimental/types/filesystem.go ++++ b/config/v3_5_experimental/types/filesystem.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/filesystem_test.go b/config/v3_5_experimental/types/filesystem_test.go +index 1f8db903..6e710426 100644 +--- a/config/v3_5_experimental/types/filesystem_test.go ++++ b/config/v3_5_experimental/types/filesystem_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestFilesystemValidateFormat(t *testing.T) { +diff --git a/config/v3_5_experimental/types/headers.go b/config/v3_5_experimental/types/headers.go +index be1aadad..4ad13bf9 100644 +--- a/config/v3_5_experimental/types/headers.go ++++ b/config/v3_5_experimental/types/headers.go +@@ -17,9 +17,9 @@ package types + import ( + "net/http" + +- "github.com/coreos/ignition/v2/config/shared/errors" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + // Parse generates standard net/http headers from the data in HTTPHeaders +diff --git a/config/v3_5_experimental/types/headers_test.go b/config/v3_5_experimental/types/headers_test.go +index 40380b68..5e888830 100644 +--- a/config/v3_5_experimental/types/headers_test.go ++++ b/config/v3_5_experimental/types/headers_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func toPointer(val string) *string { +diff --git a/config/v3_5_experimental/types/ignition.go b/config/v3_5_experimental/types/ignition.go +index 190445bd..1fbcf8c4 100644 +--- a/config/v3_5_experimental/types/ignition.go ++++ b/config/v3_5_experimental/types/ignition.go +@@ -17,7 +17,7 @@ package types + import ( + "github.com/coreos/go-semver/semver" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/kargs_test.go b/config/v3_5_experimental/types/kargs_test.go +index 1a258727..a79c037a 100644 +--- a/config/v3_5_experimental/types/kargs_test.go ++++ b/config/v3_5_experimental/types/kargs_test.go +@@ -17,7 +17,7 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/validate" ++ "github.com/flatcar/ignition/v2/config/validate" + ) + + func TestKernelArgumentsValidate(t *testing.T) { +diff --git a/config/v3_5_experimental/types/luks.go b/config/v3_5_experimental/types/luks.go +index 90d72387..2862ebae 100644 +--- a/config/v3_5_experimental/types/luks.go ++++ b/config/v3_5_experimental/types/luks.go +@@ -17,8 +17,8 @@ package types + import ( + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/mode.go b/config/v3_5_experimental/types/mode.go +index 9eb7573d..67c7ebd3 100644 +--- a/config/v3_5_experimental/types/mode.go ++++ b/config/v3_5_experimental/types/mode.go +@@ -15,7 +15,7 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func validateMode(m *int) error { +diff --git a/config/v3_5_experimental/types/mode_test.go b/config/v3_5_experimental/types/mode_test.go +index 8966e25d..5c973dbf 100644 +--- a/config/v3_5_experimental/types/mode_test.go ++++ b/config/v3_5_experimental/types/mode_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestModeValidate(t *testing.T) { +diff --git a/config/v3_5_experimental/types/node.go b/config/v3_5_experimental/types/node.go +index 248276e7..f4e94f9e 100644 +--- a/config/v3_5_experimental/types/node.go ++++ b/config/v3_5_experimental/types/node.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/node_test.go b/config/v3_5_experimental/types/node_test.go +index 20ba4eb6..9176b4b7 100644 +--- a/config/v3_5_experimental/types/node_test.go ++++ b/config/v3_5_experimental/types/node_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/partition.go b/config/v3_5_experimental/types/partition.go +index 1b2d97ed..6603af3b 100644 +--- a/config/v3_5_experimental/types/partition.go ++++ b/config/v3_5_experimental/types/partition.go +@@ -19,8 +19,8 @@ import ( + "regexp" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/partition_test.go b/config/v3_5_experimental/types/partition_test.go +index a1e1623f..9f8e7997 100644 +--- a/config/v3_5_experimental/types/partition_test.go ++++ b/config/v3_5_experimental/types/partition_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestValidateLabel(t *testing.T) { +diff --git a/config/v3_5_experimental/types/path.go b/config/v3_5_experimental/types/path.go +index 131e300c..cb48e341 100644 +--- a/config/v3_5_experimental/types/path.go ++++ b/config/v3_5_experimental/types/path.go +@@ -17,8 +17,8 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validatePath(p string) error { +diff --git a/config/v3_5_experimental/types/path_test.go b/config/v3_5_experimental/types/path_test.go +index 3d199cbd..33b2d0ba 100644 +--- a/config/v3_5_experimental/types/path_test.go ++++ b/config/v3_5_experimental/types/path_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + ) + + func TestPathValidate(t *testing.T) { +diff --git a/config/v3_5_experimental/types/proxy.go b/config/v3_5_experimental/types/proxy.go +index d48d210a..de146a99 100644 +--- a/config/v3_5_experimental/types/proxy.go ++++ b/config/v3_5_experimental/types/proxy.go +@@ -17,7 +17,7 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/proxy_test.go b/config/v3_5_experimental/types/proxy_test.go +index 269f4fb2..3cc5e5cd 100644 +--- a/config/v3_5_experimental/types/proxy_test.go ++++ b/config/v3_5_experimental/types/proxy_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/raid.go b/config/v3_5_experimental/types/raid.go +index 9d69aa36..fa1d3f4d 100644 +--- a/config/v3_5_experimental/types/raid.go ++++ b/config/v3_5_experimental/types/raid.go +@@ -15,8 +15,8 @@ + package types + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/raid_test.go b/config/v3_5_experimental/types/raid_test.go +index 7323b26f..313b4572 100644 +--- a/config/v3_5_experimental/types/raid_test.go ++++ b/config/v3_5_experimental/types/raid_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/resource.go b/config/v3_5_experimental/types/resource.go +index 68da6c7b..6ea74d3d 100644 +--- a/config/v3_5_experimental/types/resource.go ++++ b/config/v3_5_experimental/types/resource.go +@@ -17,8 +17,8 @@ package types + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/storage.go b/config/v3_5_experimental/types/storage.go +index 20cb7304..552749e6 100644 +--- a/config/v3_5_experimental/types/storage.go ++++ b/config/v3_5_experimental/types/storage.go +@@ -18,8 +18,8 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/storage_test.go b/config/v3_5_experimental/types/storage_test.go +index 551688a2..6c35ed27 100644 +--- a/config/v3_5_experimental/types/storage_test.go ++++ b/config/v3_5_experimental/types/storage_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/systemd.go b/config/v3_5_experimental/types/systemd.go +index ac521ba7..818959f4 100644 +--- a/config/v3_5_experimental/types/systemd.go ++++ b/config/v3_5_experimental/types/systemd.go +@@ -17,9 +17,9 @@ package types + import ( + "regexp" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/util" + + vpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/systemd_test.go b/config/v3_5_experimental/types/systemd_test.go +index 798eb10f..d4a4be01 100644 +--- a/config/v3_5_experimental/types/systemd_test.go ++++ b/config/v3_5_experimental/types/systemd_test.go +@@ -18,10 +18,10 @@ import ( + "fmt" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + "github.com/stretchr/testify/assert" + ) + +diff --git a/config/v3_5_experimental/types/tang.go b/config/v3_5_experimental/types/tang.go +index 1839d6cc..26c155e5 100644 +--- a/config/v3_5_experimental/types/tang.go ++++ b/config/v3_5_experimental/types/tang.go +@@ -18,8 +18,8 @@ import ( + "encoding/json" + "net/url" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/tang_test.go b/config/v3_5_experimental/types/tang_test.go +index fb57b1e4..6f31fd99 100644 +--- a/config/v3_5_experimental/types/tang_test.go ++++ b/config/v3_5_experimental/types/tang_test.go +@@ -18,10 +18,10 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestTangValidation(t *testing.T) { +diff --git a/config/v3_5_experimental/types/unit.go b/config/v3_5_experimental/types/unit.go +index c5ee1e8e..5a9c3b22 100644 +--- a/config/v3_5_experimental/types/unit.go ++++ b/config/v3_5_experimental/types/unit.go +@@ -17,10 +17,10 @@ package types + import ( + "path" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/shared/parse" +- "github.com/coreos/ignition/v2/config/shared/validations" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/parse" ++ "github.com/flatcar/ignition/v2/config/shared/validations" ++ "github.com/flatcar/ignition/v2/config/util" + + cpath "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/unit_test.go b/config/v3_5_experimental/types/unit_test.go +index 3dc90540..8c96dfba 100644 +--- a/config/v3_5_experimental/types/unit_test.go ++++ b/config/v3_5_experimental/types/unit_test.go +@@ -19,8 +19,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/url.go b/config/v3_5_experimental/types/url.go +index 3ca189da..9b2b4405 100644 +--- a/config/v3_5_experimental/types/url.go ++++ b/config/v3_5_experimental/types/url.go +@@ -21,8 +21,8 @@ import ( + "github.com/aws/aws-sdk-go/aws/arn" + "github.com/vincent-petithory/dataurl" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func validateURL(s string) error { +diff --git a/config/v3_5_experimental/types/url_test.go b/config/v3_5_experimental/types/url_test.go +index 1901b7af..12a4cfbf 100644 +--- a/config/v3_5_experimental/types/url_test.go ++++ b/config/v3_5_experimental/types/url_test.go +@@ -17,8 +17,8 @@ package types + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + func TestURLValidate(t *testing.T) { +diff --git a/config/v3_5_experimental/types/verification.go b/config/v3_5_experimental/types/verification.go +index 5def6f04..1ef291c0 100644 +--- a/config/v3_5_experimental/types/verification.go ++++ b/config/v3_5_experimental/types/verification.go +@@ -19,7 +19,7 @@ import ( + "encoding/hex" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/v3_5_experimental/types/verification_test.go b/config/v3_5_experimental/types/verification_test.go +index 9a0914d0..f121b503 100644 +--- a/config/v3_5_experimental/types/verification_test.go ++++ b/config/v3_5_experimental/types/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/config/validate/validate.go b/config/validate/validate.go +index 613c21e4..a8f41517 100644 +--- a/config/validate/validate.go ++++ b/config/validate/validate.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "reflect" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/util" + + "github.com/coreos/vcontext/json" + "github.com/coreos/vcontext/path" +diff --git a/config/validate/validate_test.go b/config/validate/validate_test.go +index 18eea933..4f77f19c 100644 +--- a/config/validate/validate_test.go ++++ b/config/validate/validate_test.go +@@ -20,7 +20,7 @@ import ( + "reflect" + "testing" + +- ignerrors "github.com/coreos/ignition/v2/config/shared/errors" ++ ignerrors "github.com/flatcar/ignition/v2/config/shared/errors" + + "github.com/coreos/vcontext/path" + "github.com/coreos/vcontext/report" +diff --git a/go.mod b/go.mod +index 9f92b958..85b3e34e 100644 +--- a/go.mod ++++ b/go.mod +@@ -1,4 +1,4 @@ +-module github.com/coreos/ignition/v2 ++module github.com/flatcar/ignition/v2 + + go 1.18 + +diff --git a/internal/apply/apply.go b/internal/apply/apply.go +index 33113c5c..e8675889 100644 +--- a/internal/apply/apply.go ++++ b/internal/apply/apply.go +@@ -20,21 +20,21 @@ import ( + "os" + "path/filepath" + +- "github.com/coreos/ignition/v2/internal/exec" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/disks" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/fetch" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/fetch_offline" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/files" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/kargs" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/mount" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/umount" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" +- "github.com/coreos/ignition/v2/internal/util" +- +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/disks" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/fetch" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/fetch_offline" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/files" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/kargs" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/mount" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/umount" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/internal/util" ++ ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + type Flags struct { +diff --git a/internal/distro/distro.go b/internal/distro/distro.go +index 61ca87ae..703385ea 100644 +--- a/internal/distro/distro.go ++++ b/internal/distro/distro.go +@@ -20,7 +20,7 @@ import ( + ) + + // Distro-specific settings that can be overridden at link time with e.g. +-// -X github.com/coreos/ignition/v2/internal/distro.mdadmCmd=/opt/bin/mdadm ++// -X github.com/flatcar/ignition/v2/internal/distro.mdadmCmd=/opt/bin/mdadm + var ( + // Device node directories and paths + diskByLabelDir = "/dev/disk/by-label" +diff --git a/internal/exec/config_fetcher.go b/internal/exec/config_fetcher.go +index 388e1b2a..aecde2a4 100644 +--- a/internal/exec/config_fetcher.go ++++ b/internal/exec/config_fetcher.go +@@ -20,15 +20,15 @@ import ( + "net/http" + "net/url" + +- "github.com/coreos/ignition/v2/config" +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" +- "github.com/coreos/ignition/v2/internal/util" +- +- latest "github.com/coreos/ignition/v2/config/v3_5_experimental" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/internal/util" ++ ++ latest "github.com/flatcar/ignition/v2/config/v3_5_experimental" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + type ConfigFetcher struct { +diff --git a/internal/exec/engine.go b/internal/exec/engine.go +index 82b1460e..354de32d 100644 +--- a/internal/exec/engine.go ++++ b/internal/exec/engine.go +@@ -23,18 +23,18 @@ import ( + "time" + + "github.com/coreos/go-systemd/v22/journal" +- "github.com/coreos/ignition/v2/config/shared/errors" +- latest "github.com/coreos/ignition/v2/config/v3_5_experimental" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- executil "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/platform" +- "github.com/coreos/ignition/v2/internal/providers" +- "github.com/coreos/ignition/v2/internal/providers/cmdline" +- "github.com/coreos/ignition/v2/internal/providers/system" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ latest "github.com/flatcar/ignition/v2/config/v3_5_experimental" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ executil "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/platform" ++ "github.com/flatcar/ignition/v2/internal/providers" ++ "github.com/flatcar/ignition/v2/internal/providers/cmdline" ++ "github.com/flatcar/ignition/v2/internal/providers/system" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + + "github.com/coreos/vcontext/report" + "github.com/coreos/vcontext/validate" +diff --git a/internal/exec/stages/disks/disks.go b/internal/exec/stages/disks/disks.go +index a5307fc7..fcc60b88 100644 +--- a/internal/exec/stages/disks/disks.go ++++ b/internal/exec/stages/disks/disks.go +@@ -24,14 +24,14 @@ import ( + "fmt" + "os/exec" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" +- "github.com/coreos/ignition/v2/internal/systemd" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/internal/systemd" + ) + + const ( +diff --git a/internal/exec/stages/disks/filesystems.go b/internal/exec/stages/disks/filesystems.go +index 6ba872e9..18103f38 100644 +--- a/internal/exec/stages/disks/filesystems.go ++++ b/internal/exec/stages/disks/filesystems.go +@@ -25,10 +25,10 @@ import ( + "runtime" + "strings" + +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/util" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/util" + ) + + var ( +diff --git a/internal/exec/stages/disks/luks.go b/internal/exec/stages/disks/luks.go +index 42f93041..f87a2be6 100644 +--- a/internal/exec/stages/disks/luks.go ++++ b/internal/exec/stages/disks/luks.go +@@ -26,12 +26,12 @@ import ( + "path" + "strings" + +- "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- execUtil "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ execUtil "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/vincent-petithory/dataurl" + ) +diff --git a/internal/exec/stages/disks/partitions.go b/internal/exec/stages/disks/partitions.go +index 839536db..5578ffd7 100644 +--- a/internal/exec/stages/disks/partitions.go ++++ b/internal/exec/stages/disks/partitions.go +@@ -26,10 +26,10 @@ import ( + "strconv" + "strings" + +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/sgdisk" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/sgdisk" + ) + + var ( +diff --git a/internal/exec/stages/disks/raid.go b/internal/exec/stages/disks/raid.go +index fad26e88..41f98a41 100644 +--- a/internal/exec/stages/disks/raid.go ++++ b/internal/exec/stages/disks/raid.go +@@ -23,9 +23,9 @@ import ( + "fmt" + "os/exec" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/util" + ) + + func (s stage) createRaids(config types.Config) error { +diff --git a/internal/exec/stages/fetch/fetch.go b/internal/exec/stages/fetch/fetch.go +index 4511ebf0..d590163b 100644 +--- a/internal/exec/stages/fetch/fetch.go ++++ b/internal/exec/stages/fetch/fetch.go +@@ -19,12 +19,12 @@ + package fetch + + import ( +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + ) + + const ( +diff --git a/internal/exec/stages/fetch_offline/fetch-offline.go b/internal/exec/stages/fetch_offline/fetch-offline.go +index 281980d7..a2ed29ff 100644 +--- a/internal/exec/stages/fetch_offline/fetch-offline.go ++++ b/internal/exec/stages/fetch_offline/fetch-offline.go +@@ -22,14 +22,14 @@ import ( + "net/url" + "reflect" + +- cfgutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- executil "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" +- "github.com/coreos/ignition/v2/internal/util" ++ cfgutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ executil "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/internal/util" + ) + + const ( +diff --git a/internal/exec/stages/fetch_offline/fetch_offline_test.go b/internal/exec/stages/fetch_offline/fetch_offline_test.go +index fb45e966..ea369f0c 100644 +--- a/internal/exec/stages/fetch_offline/fetch_offline_test.go ++++ b/internal/exec/stages/fetch_offline/fetch_offline_test.go +@@ -17,8 +17,8 @@ package fetch_offline + import ( + "testing" + +- "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + + "github.com/stretchr/testify/assert" + ) +diff --git a/internal/exec/stages/files/files.go b/internal/exec/stages/files/files.go +index c2e0c83c..09e2530d 100644 +--- a/internal/exec/stages/files/files.go ++++ b/internal/exec/stages/files/files.go +@@ -19,13 +19,13 @@ import ( + "fmt" + "path/filepath" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + ) + + const ( +diff --git a/internal/exec/stages/files/files_test.go b/internal/exec/stages/files/files_test.go +index 31741541..5bd23e44 100644 +--- a/internal/exec/stages/files/files_test.go ++++ b/internal/exec/stages/files/files_test.go +@@ -19,8 +19,8 @@ import ( + "sort" + "testing" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/util" + ) + + func TestEntrySort(t *testing.T) { +diff --git a/internal/exec/stages/files/filesystemEntries.go b/internal/exec/stages/files/filesystemEntries.go +index 915fa563..daf5200a 100644 +--- a/internal/exec/stages/files/filesystemEntries.go ++++ b/internal/exec/stages/files/filesystemEntries.go +@@ -24,11 +24,11 @@ import ( + "strings" + "time" + +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" + + "github.com/vincent-petithory/dataurl" + ) +@@ -443,7 +443,7 @@ func (s stage) getOrderedCreationList(config types.Config) ([]filesystemEntry, e + + // Append all the hard links to the list after sorting. This allows + // Ignition to create hard links to files that are deeper than the hard +- // link. For reference: https://github.com/coreos/ignition/issues/800 ++ // link. For reference: https://github.com/flatcar/ignition/issues/800 + entries = append(entries, hardlinks...) + + return entries, nil +diff --git a/internal/exec/stages/files/passwd.go b/internal/exec/stages/files/passwd.go +index 3c6b571f..4259de64 100644 +--- a/internal/exec/stages/files/passwd.go ++++ b/internal/exec/stages/files/passwd.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "path/filepath" + +- "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + func (s *stage) expandGlobList(globs ...string) ([]string, error) { +diff --git a/internal/exec/stages/files/units.go b/internal/exec/stages/files/units.go +index 03f51790..e304d611 100644 +--- a/internal/exec/stages/files/units.go ++++ b/internal/exec/stages/files/units.go +@@ -21,11 +21,11 @@ import ( + "sort" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/systemd" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/systemd" + ) + + // Preset holds the information about +@@ -45,7 +45,7 @@ func (s *stage) warnOnOldSystemdVersion() error { + return err + } + if systemdVersion < 240 { +- s.Logger.Warning("The version of systemd (%q) is less than 240. Enabling/disabling instantiated units may not work. See https://github.com/coreos/ignition/issues/586 for more information.", systemdVersion) ++ s.Logger.Warning("The version of systemd (%q) is less than 240. Enabling/disabling instantiated units may not work. See https://github.com/flatcar/ignition/issues/586 for more information.", systemdVersion) + } + return nil + } +diff --git a/internal/exec/stages/files/units_test.go b/internal/exec/stages/files/units_test.go +index 3408b2bd..b11debee 100644 +--- a/internal/exec/stages/files/units_test.go ++++ b/internal/exec/stages/files/units_test.go +@@ -18,8 +18,8 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + func TestParseInstanceUnit(t *testing.T) { +diff --git a/internal/exec/stages/kargs/kargs.go b/internal/exec/stages/kargs/kargs.go +index f7980c89..bc4d0663 100644 +--- a/internal/exec/stages/kargs/kargs.go ++++ b/internal/exec/stages/kargs/kargs.go +@@ -19,13 +19,13 @@ import ( + "fmt" + "os/exec" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + ) + + const ( +diff --git a/internal/exec/stages/mount/mount.go b/internal/exec/stages/mount/mount.go +index fd59e80a..8074dbe6 100644 +--- a/internal/exec/stages/mount/mount.go ++++ b/internal/exec/stages/mount/mount.go +@@ -27,14 +27,14 @@ import ( + "sort" + "strings" + +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + ) + + const ( +diff --git a/internal/exec/stages/stages.go b/internal/exec/stages/stages.go +index 721b57c8..4b63797e 100644 +--- a/internal/exec/stages/stages.go ++++ b/internal/exec/stages/stages.go +@@ -15,11 +15,11 @@ + package stages + + import ( +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/registry" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/registry" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + ) + + // Stage is responsible for actually executing a stage of the configuration. +diff --git a/internal/exec/stages/umount/umount.go b/internal/exec/stages/umount/umount.go +index 610c64f2..fa216908 100644 +--- a/internal/exec/stages/umount/umount.go ++++ b/internal/exec/stages/umount/umount.go +@@ -22,13 +22,13 @@ import ( + "errors" + "sort" + +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + + "golang.org/x/sys/unix" + ) +diff --git a/internal/exec/util/blkid.go b/internal/exec/util/blkid.go +index 92db9026..724009f2 100644 +--- a/internal/exec/util/blkid.go ++++ b/internal/exec/util/blkid.go +@@ -33,7 +33,7 @@ import ( + "strings" + "unsafe" + +- "github.com/coreos/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/util" + ) + + const ( +diff --git a/internal/exec/util/file.go b/internal/exec/util/file.go +index 6668945e..93a5e0e7 100644 +--- a/internal/exec/util/file.go ++++ b/internal/exec/util/file.go +@@ -26,11 +26,11 @@ import ( + "strconv" + "syscall" + +- cutil "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/util" ++ cutil "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/util" + + "golang.org/x/sys/unix" + ) +diff --git a/internal/exec/util/passwd.go b/internal/exec/util/passwd.go +index 085cc3f2..a2592faa 100644 +--- a/internal/exec/util/passwd.go ++++ b/internal/exec/util/passwd.go +@@ -24,10 +24,10 @@ import ( + "strings" + + "github.com/coreos/go-systemd/v22/journal" +- "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/as_user" +- "github.com/coreos/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/as_user" ++ "github.com/flatcar/ignition/v2/internal/distro" + "golang.org/x/sys/unix" + ) + +diff --git a/internal/exec/util/selinux.go b/internal/exec/util/selinux.go +index a274eae6..0bd57f98 100644 +--- a/internal/exec/util/selinux.go ++++ b/internal/exec/util/selinux.go +@@ -21,7 +21,7 @@ import ( + "os/exec" + "strings" + +- "github.com/coreos/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/distro" + ) + + const ( +diff --git a/internal/exec/util/unit.go b/internal/exec/util/unit.go +index 8e653de0..f1086974 100644 +--- a/internal/exec/util/unit.go ++++ b/internal/exec/util/unit.go +@@ -22,8 +22,8 @@ import ( + "path/filepath" + "syscall" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" + + "github.com/vincent-petithory/dataurl" + ) +diff --git a/internal/exec/util/user_group_lookup_test.go b/internal/exec/util/user_group_lookup_test.go +index 2482d710..8893157a 100644 +--- a/internal/exec/util/user_group_lookup_test.go ++++ b/internal/exec/util/user_group_lookup_test.go +@@ -20,7 +20,7 @@ import ( + "path/filepath" + "testing" + +- "github.com/coreos/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/log" + ) + + // tempBase() slaps together a minimal /etc/{passwd,group} for the lookup test. +diff --git a/internal/exec/util/util.go b/internal/exec/util/util.go +index 4a81f776..bd73adf4 100644 +--- a/internal/exec/util/util.go ++++ b/internal/exec/util/util.go +@@ -18,9 +18,9 @@ import ( + "os" + "path/filepath" + +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" +- "github.com/coreos/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/state" + ) + + // Util encapsulates logging and destdir indirection for the util methods. +diff --git a/internal/main.go b/internal/main.go +index f3de48b6..ce0b03f5 100644 +--- a/internal/main.go ++++ b/internal/main.go +@@ -22,21 +22,21 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config" +- "github.com/coreos/ignition/v2/internal/apply" +- "github.com/coreos/ignition/v2/internal/exec" +- "github.com/coreos/ignition/v2/internal/exec/stages" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/disks" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/fetch" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/fetch_offline" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/files" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/kargs" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/mount" +- _ "github.com/coreos/ignition/v2/internal/exec/stages/umount" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/platform" +- "github.com/coreos/ignition/v2/internal/state" +- "github.com/coreos/ignition/v2/internal/version" ++ "github.com/flatcar/ignition/v2/config" ++ "github.com/flatcar/ignition/v2/internal/apply" ++ "github.com/flatcar/ignition/v2/internal/exec" ++ "github.com/flatcar/ignition/v2/internal/exec/stages" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/disks" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/fetch" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/fetch_offline" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/files" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/kargs" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/mount" ++ _ "github.com/flatcar/ignition/v2/internal/exec/stages/umount" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/platform" ++ "github.com/flatcar/ignition/v2/internal/state" ++ "github.com/flatcar/ignition/v2/internal/version" + "github.com/spf13/pflag" + ) + +diff --git a/internal/platform/platform.go b/internal/platform/platform.go +index 23339439..51bf5174 100644 +--- a/internal/platform/platform.go ++++ b/internal/platform/platform.go +@@ -18,31 +18,31 @@ import ( + "errors" + "fmt" + +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers" +- "github.com/coreos/ignition/v2/internal/providers/aliyun" +- "github.com/coreos/ignition/v2/internal/providers/aws" +- "github.com/coreos/ignition/v2/internal/providers/azure" +- "github.com/coreos/ignition/v2/internal/providers/azurestack" +- "github.com/coreos/ignition/v2/internal/providers/cloudstack" +- "github.com/coreos/ignition/v2/internal/providers/digitalocean" +- "github.com/coreos/ignition/v2/internal/providers/exoscale" +- "github.com/coreos/ignition/v2/internal/providers/file" +- "github.com/coreos/ignition/v2/internal/providers/gcp" +- "github.com/coreos/ignition/v2/internal/providers/ibmcloud" +- "github.com/coreos/ignition/v2/internal/providers/kubevirt" +- "github.com/coreos/ignition/v2/internal/providers/noop" +- "github.com/coreos/ignition/v2/internal/providers/nutanix" +- "github.com/coreos/ignition/v2/internal/providers/openstack" +- "github.com/coreos/ignition/v2/internal/providers/packet" +- "github.com/coreos/ignition/v2/internal/providers/powervs" +- "github.com/coreos/ignition/v2/internal/providers/qemu" +- "github.com/coreos/ignition/v2/internal/providers/virtualbox" +- "github.com/coreos/ignition/v2/internal/providers/vmware" +- "github.com/coreos/ignition/v2/internal/providers/vultr" +- "github.com/coreos/ignition/v2/internal/providers/zvm" +- "github.com/coreos/ignition/v2/internal/registry" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers" ++ "github.com/flatcar/ignition/v2/internal/providers/aliyun" ++ "github.com/flatcar/ignition/v2/internal/providers/aws" ++ "github.com/flatcar/ignition/v2/internal/providers/azure" ++ "github.com/flatcar/ignition/v2/internal/providers/azurestack" ++ "github.com/flatcar/ignition/v2/internal/providers/cloudstack" ++ "github.com/flatcar/ignition/v2/internal/providers/digitalocean" ++ "github.com/flatcar/ignition/v2/internal/providers/exoscale" ++ "github.com/flatcar/ignition/v2/internal/providers/file" ++ "github.com/flatcar/ignition/v2/internal/providers/gcp" ++ "github.com/flatcar/ignition/v2/internal/providers/ibmcloud" ++ "github.com/flatcar/ignition/v2/internal/providers/kubevirt" ++ "github.com/flatcar/ignition/v2/internal/providers/noop" ++ "github.com/flatcar/ignition/v2/internal/providers/nutanix" ++ "github.com/flatcar/ignition/v2/internal/providers/openstack" ++ "github.com/flatcar/ignition/v2/internal/providers/packet" ++ "github.com/flatcar/ignition/v2/internal/providers/powervs" ++ "github.com/flatcar/ignition/v2/internal/providers/qemu" ++ "github.com/flatcar/ignition/v2/internal/providers/virtualbox" ++ "github.com/flatcar/ignition/v2/internal/providers/vmware" ++ "github.com/flatcar/ignition/v2/internal/providers/vultr" ++ "github.com/flatcar/ignition/v2/internal/providers/zvm" ++ "github.com/flatcar/ignition/v2/internal/registry" ++ "github.com/flatcar/ignition/v2/internal/resource" + ) + + var ( +diff --git a/internal/providers/aliyun/aliyun.go b/internal/providers/aliyun/aliyun.go +index 8200576e..80d63dcd 100644 +--- a/internal/providers/aliyun/aliyun.go ++++ b/internal/providers/aliyun/aliyun.go +@@ -20,9 +20,9 @@ package aliyun + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/aws/aws.go b/internal/providers/aws/aws.go +index 21d58bb9..03476927 100644 +--- a/internal/providers/aws/aws.go ++++ b/internal/providers/aws/aws.go +@@ -22,10 +22,10 @@ import ( + "net/http" + "net/url" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/aws/aws-sdk-go/aws" + "github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds" +@@ -88,7 +88,7 @@ func Init(f *resource.Fetcher) error { + // every stage) but that would risk premature timeouts if the + // network takes a while to come up. + // +- // https://github.com/coreos/ignition/issues/1158 ++ // https://github.com/flatcar/ignition/issues/1158 + // + // TODO: investigate alternative solutions (adding a Retryer to the + // aws.Config, fetching the region from an HTTP URL, handle the +diff --git a/internal/providers/azure/azure.go b/internal/providers/azure/azure.go +index ec60a350..90815dee 100644 +--- a/internal/providers/azure/azure.go ++++ b/internal/providers/azure/azure.go +@@ -25,12 +25,12 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- execUtil "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ execUtil "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + "golang.org/x/sys/unix" +diff --git a/internal/providers/azurestack/azurestack.go b/internal/providers/azurestack/azurestack.go +index 65035aa0..dcd6fea3 100644 +--- a/internal/providers/azurestack/azurestack.go ++++ b/internal/providers/azurestack/azurestack.go +@@ -18,10 +18,10 @@ + package azurestack + + import ( +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/azure" +- "github.com/coreos/ignition/v2/internal/resource" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/azure" ++ "github.com/flatcar/ignition/v2/internal/resource" + ) + + // These constants are the types of CDROM filesystems that might +diff --git a/internal/providers/cloudstack/cloudstack.go b/internal/providers/cloudstack/cloudstack.go +index b3a2540d..6429f43e 100644 +--- a/internal/providers/cloudstack/cloudstack.go ++++ b/internal/providers/cloudstack/cloudstack.go +@@ -30,12 +30,12 @@ import ( + "strings" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" +- ut "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ ut "github.com/flatcar/ignition/v2/internal/util" + + "github.com/coreos/vcontext/report" + ) +@@ -48,7 +48,7 @@ const ( + func FetchConfig(f *resource.Fetcher) (types.Config, report.Report, error) { + // The fetch-offline approach doesn't work well here because of the "split + // personality" of this provider. See: +- // https://github.com/coreos/ignition/issues/1081 ++ // https://github.com/flatcar/ignition/issues/1081 + if f.Offline { + return types.Config{}, report.Report{}, resource.ErrNeedNet + } +diff --git a/internal/providers/cmdline/cmdline.go b/internal/providers/cmdline/cmdline.go +index 42f2fbfb..f09e6fcb 100644 +--- a/internal/providers/cmdline/cmdline.go ++++ b/internal/providers/cmdline/cmdline.go +@@ -22,12 +22,12 @@ import ( + "os" + "strings" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/digitalocean/digitalocean.go b/internal/providers/digitalocean/digitalocean.go +index 4a697db5..e3398a22 100644 +--- a/internal/providers/digitalocean/digitalocean.go ++++ b/internal/providers/digitalocean/digitalocean.go +@@ -20,9 +20,9 @@ package digitalocean + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/exoscale/exoscale.go b/internal/providers/exoscale/exoscale.go +index bb0153f8..4cacc979 100644 +--- a/internal/providers/exoscale/exoscale.go ++++ b/internal/providers/exoscale/exoscale.go +@@ -20,9 +20,9 @@ package exoscale + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/file/file.go b/internal/providers/file/file.go +index f77d212b..308d4b6c 100644 +--- a/internal/providers/file/file.go ++++ b/internal/providers/file/file.go +@@ -17,9 +17,9 @@ package file + import ( + "os" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/gcp/gcp.go b/internal/providers/gcp/gcp.go +index b81768a8..742686da 100644 +--- a/internal/providers/gcp/gcp.go ++++ b/internal/providers/gcp/gcp.go +@@ -21,9 +21,9 @@ import ( + "net/http" + "net/url" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/ibmcloud/ibmcloud.go b/internal/providers/ibmcloud/ibmcloud.go +index 82fac9c2..f1f40e4a 100644 +--- a/internal/providers/ibmcloud/ibmcloud.go ++++ b/internal/providers/ibmcloud/ibmcloud.go +@@ -27,12 +27,12 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" +- ut "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ ut "github.com/flatcar/ignition/v2/internal/util" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/kubevirt/kubevirt.go b/internal/providers/kubevirt/kubevirt.go +index c9ea3994..57beb1ae 100644 +--- a/internal/providers/kubevirt/kubevirt.go ++++ b/internal/providers/kubevirt/kubevirt.go +@@ -25,12 +25,12 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" +- ut "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ ut "github.com/flatcar/ignition/v2/internal/util" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/noop/noop.go b/internal/providers/noop/noop.go +index 74e5a202..4bd5ccdc 100644 +--- a/internal/providers/noop/noop.go ++++ b/internal/providers/noop/noop.go +@@ -17,9 +17,9 @@ + package noop + + import ( +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/nutanix/nutanix.go b/internal/providers/nutanix/nutanix.go +index 47c893aa..a1b901b0 100644 +--- a/internal/providers/nutanix/nutanix.go ++++ b/internal/providers/nutanix/nutanix.go +@@ -25,12 +25,12 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" +- ut "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ ut "github.com/flatcar/ignition/v2/internal/util" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/openstack/openstack.go b/internal/providers/openstack/openstack.go +index c950ea17..2f5bef84 100644 +--- a/internal/providers/openstack/openstack.go ++++ b/internal/providers/openstack/openstack.go +@@ -28,12 +28,12 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" +- ut "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ ut "github.com/flatcar/ignition/v2/internal/util" + + "github.com/coreos/vcontext/report" + ) +@@ -53,7 +53,7 @@ var ( + func FetchConfig(f *resource.Fetcher) (types.Config, report.Report, error) { + // The fetch-offline approach doesn't work well here because of the "split + // personality" of this provider. See: +- // https://github.com/coreos/ignition/issues/1081 ++ // https://github.com/flatcar/ignition/issues/1081 + if f.Offline { + return types.Config{}, report.Report{}, resource.ErrNeedNet + } +diff --git a/internal/providers/packet/packet.go b/internal/providers/packet/packet.go +index f924367e..8ae3c7d6 100644 +--- a/internal/providers/packet/packet.go ++++ b/internal/providers/packet/packet.go +@@ -25,9 +25,9 @@ import ( + "net/url" + "strings" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/powervs/powervs.go b/internal/providers/powervs/powervs.go +index c4c4534a..37c4142e 100644 +--- a/internal/providers/powervs/powervs.go ++++ b/internal/providers/powervs/powervs.go +@@ -24,12 +24,12 @@ import ( + "path/filepath" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" +- ut "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" ++ ut "github.com/flatcar/ignition/v2/internal/util" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/providers.go b/internal/providers/providers.go +index 4407cab6..0d8283dc 100644 +--- a/internal/providers/providers.go ++++ b/internal/providers/providers.go +@@ -17,9 +17,9 @@ package providers + import ( + "errors" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/qemu/qemu_blockdev.go b/internal/providers/qemu/qemu_blockdev.go +index be923440..659213d4 100644 +--- a/internal/providers/qemu/qemu_blockdev.go ++++ b/internal/providers/qemu/qemu_blockdev.go +@@ -27,10 +27,10 @@ import ( + "os/exec" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/qemu/qemu_fwcfg.go b/internal/providers/qemu/qemu_fwcfg.go +index 57dd39be..f8bf820e 100644 +--- a/internal/providers/qemu/qemu_fwcfg.go ++++ b/internal/providers/qemu/qemu_fwcfg.go +@@ -29,9 +29,9 @@ import ( + "strings" + "time" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/system/system.go b/internal/providers/system/system.go +index 9e69ab2b..2effacad 100644 +--- a/internal/providers/system/system.go ++++ b/internal/providers/system/system.go +@@ -18,13 +18,13 @@ import ( + "os" + "path/filepath" + +- latest "github.com/coreos/ignition/v2/config/v3_5_experimental" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ latest "github.com/flatcar/ignition/v2/config/v3_5_experimental" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/util/config.go b/internal/providers/util/config.go +index a2a56b7d..efafb416 100644 +--- a/internal/providers/util/config.go ++++ b/internal/providers/util/config.go +@@ -18,9 +18,9 @@ import ( + "crypto/sha512" + "encoding/hex" + +- "github.com/coreos/ignition/v2/config" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/config" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/log" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/virtualbox/virtualbox.go b/internal/providers/virtualbox/virtualbox.go +index 0bc2fa97..0b71d762 100644 +--- a/internal/providers/virtualbox/virtualbox.go ++++ b/internal/providers/virtualbox/virtualbox.go +@@ -31,10 +31,10 @@ import ( + "fmt" + "unsafe" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/vmware/vmware_amd64.go b/internal/providers/vmware/vmware_amd64.go +index f7aa3e29..b41b54bc 100644 +--- a/internal/providers/vmware/vmware_amd64.go ++++ b/internal/providers/vmware/vmware_amd64.go +@@ -20,10 +20,10 @@ package vmware + import ( + "fmt" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + "github.com/vmware/vmw-guestinfo/rpcvmx" +diff --git a/internal/providers/vmware/vmware_unsupported.go b/internal/providers/vmware/vmware_unsupported.go +index 0adb73ea..a08b56a2 100644 +--- a/internal/providers/vmware/vmware_unsupported.go ++++ b/internal/providers/vmware/vmware_unsupported.go +@@ -23,8 +23,8 @@ package vmware + import ( + "errors" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/vultr/vultr.go b/internal/providers/vultr/vultr.go +index ac33ea70..4389e49f 100644 +--- a/internal/providers/vultr/vultr.go ++++ b/internal/providers/vultr/vultr.go +@@ -21,9 +21,9 @@ package vultr + import ( + "net/url" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + + "github.com/coreos/vcontext/report" + ) +diff --git a/internal/providers/zvm/zvm.go b/internal/providers/zvm/zvm.go +index 9d7e5b91..2d86a041 100644 +--- a/internal/providers/zvm/zvm.go ++++ b/internal/providers/zvm/zvm.go +@@ -24,13 +24,13 @@ import ( + "os/exec" + "strings" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/providers/util" +- "github.com/coreos/ignition/v2/internal/resource" + "github.com/coreos/vcontext/report" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/providers/util" ++ "github.com/flatcar/ignition/v2/internal/resource" + ) + + const readerDevice string = "000c" +diff --git a/internal/resource/http.go b/internal/resource/http.go +index 0d8edace..b4b7c59f 100644 +--- a/internal/resource/http.go ++++ b/internal/resource/http.go +@@ -28,12 +28,12 @@ import ( + "strings" + "time" + +- ignerrors "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/earlyrand" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/util" +- "github.com/coreos/ignition/v2/internal/version" ++ ignerrors "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/earlyrand" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/internal/version" + + "github.com/vincent-petithory/dataurl" + +diff --git a/internal/resource/url.go b/internal/resource/url.go +index 58e0b9fc..44253568 100644 +--- a/internal/resource/url.go ++++ b/internal/resource/url.go +@@ -31,9 +31,9 @@ import ( + + "cloud.google.com/go/compute/metadata" + "cloud.google.com/go/storage" +- configErrors "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/util" ++ configErrors "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/util" + "golang.org/x/oauth2/google" + "google.golang.org/api/option" + +diff --git a/internal/resource/url_test.go b/internal/resource/url_test.go +index 77a39c93..415822fc 100644 +--- a/internal/resource/url_test.go ++++ b/internal/resource/url_test.go +@@ -23,9 +23,9 @@ import ( + + "github.com/stretchr/testify/assert" + +- "github.com/coreos/ignition/v2/config/shared/errors" +- "github.com/coreos/ignition/v2/internal/log" +- "github.com/coreos/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/config/shared/errors" ++ "github.com/flatcar/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/internal/util" + ) + + func TestDataUrl(t *testing.T) { +diff --git a/internal/sgdisk/sgdisk.go b/internal/sgdisk/sgdisk.go +index 29915809..136aca67 100644 +--- a/internal/sgdisk/sgdisk.go ++++ b/internal/sgdisk/sgdisk.go +@@ -19,10 +19,10 @@ import ( + "io" + "os/exec" + +- "github.com/coreos/ignition/v2/config/util" +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/internal/distro" +- "github.com/coreos/ignition/v2/internal/log" ++ "github.com/flatcar/ignition/v2/config/util" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/internal/distro" ++ "github.com/flatcar/ignition/v2/internal/log" + ) + + type Operation struct { +diff --git a/internal/util/tools/docs/docs.go b/internal/util/tools/docs/docs.go +index ca65069a..41ebf464 100644 +--- a/internal/util/tools/docs/docs.go ++++ b/internal/util/tools/docs/docs.go +@@ -24,7 +24,7 @@ import ( + "path/filepath" + "strings" + +- "github.com/coreos/ignition/v2/config" ++ "github.com/flatcar/ignition/v2/config" + ) + + // Specific section marker used in the docs to indicate that the Markdown code +diff --git a/internal/util/verification.go b/internal/util/verification.go +index 8f37f550..74ad7e98 100644 +--- a/internal/util/verification.go ++++ b/internal/util/verification.go +@@ -23,7 +23,7 @@ import ( + "hash" + "strings" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + var ( +diff --git a/internal/util/verification_test.go b/internal/util/verification_test.go +index abac5177..49396b99 100644 +--- a/internal/util/verification_test.go ++++ b/internal/util/verification_test.go +@@ -18,7 +18,7 @@ import ( + "reflect" + "testing" + +- "github.com/coreos/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" + ) + + func TestAssertValid(t *testing.T) { +diff --git a/tests/blackbox_test.go b/tests/blackbox_test.go +index 88de68fb..7914738b 100644 +--- a/tests/blackbox_test.go ++++ b/tests/blackbox_test.go +@@ -25,13 +25,13 @@ import ( + "testing" + "time" + +- "github.com/coreos/ignition/v2/config" +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/servers" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/config" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/servers" ++ "github.com/flatcar/ignition/v2/tests/types" + + // Register the tests +- _ "github.com/coreos/ignition/v2/tests/registry" ++ _ "github.com/flatcar/ignition/v2/tests/registry" + + // UUID generation tool + "github.com/google/uuid" +diff --git a/tests/filesystem.go b/tests/filesystem.go +index fa16c44b..9c7a742d 100644 +--- a/tests/filesystem.go ++++ b/tests/filesystem.go +@@ -29,8 +29,8 @@ import ( + "strings" + "testing" + +- ut "github.com/coreos/ignition/v2/internal/util" +- "github.com/coreos/ignition/v2/tests/types" ++ ut "github.com/flatcar/ignition/v2/internal/util" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func run(ctx context.Context, command string, args ...string) ([]byte, error) { +diff --git a/tests/negative/files/invalid_hash.go b/tests/negative/files/invalid_hash.go +index e4bab782..0c4dfead 100644 +--- a/tests/negative/files/invalid_hash.go ++++ b/tests/negative/files/invalid_hash.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/files/link.go b/tests/negative/files/link.go +index a4cf1d66..8d4128b2 100644 +--- a/tests/negative/files/link.go ++++ b/tests/negative/files/link.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/files/missing_file.go b/tests/negative/files/missing_file.go +index 3abfb574..251f5593 100644 +--- a/tests/negative/files/missing_file.go ++++ b/tests/negative/files/missing_file.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/files/preexisting_nodes.go b/tests/negative/files/preexisting_nodes.go +index 6a80fae6..0981e95e 100644 +--- a/tests/negative/files/preexisting_nodes.go ++++ b/tests/negative/files/preexisting_nodes.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/filesystems/creation.go b/tests/negative/filesystems/creation.go +index db132cac..1c538658 100644 +--- a/tests/negative/filesystems/creation.go ++++ b/tests/negative/filesystems/creation.go +@@ -15,8 +15,8 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/filesystems/mount_filesystem.go b/tests/negative/filesystems/mount_filesystem.go +index 7665a82b..13f4acdf 100644 +--- a/tests/negative/filesystems/mount_filesystem.go ++++ b/tests/negative/filesystems/mount_filesystem.go +@@ -15,8 +15,8 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/filesystems/no_device.go b/tests/negative/filesystems/no_device.go +index 2166e532..4387c396 100644 +--- a/tests/negative/filesystems/no_device.go ++++ b/tests/negative/filesystems/no_device.go +@@ -15,8 +15,8 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/filesystems/symlinks.go b/tests/negative/filesystems/symlinks.go +index e62ee681..b3aff932 100644 +--- a/tests/negative/filesystems/symlinks.go ++++ b/tests/negative/filesystems/symlinks.go +@@ -15,8 +15,8 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/general/config.go b/tests/negative/general/config.go +index 481cc2cd..6fcabe80 100644 +--- a/tests/negative/general/config.go ++++ b/tests/negative/general/config.go +@@ -17,8 +17,8 @@ package general + import ( + "fmt" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + + "github.com/vincent-petithory/dataurl" + ) +diff --git a/tests/negative/partitions/simple.go b/tests/negative/partitions/simple.go +index ae6f50f5..79911208 100644 +--- a/tests/negative/partitions/simple.go ++++ b/tests/negative/partitions/simple.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/partitions/zeroes.go b/tests/negative/partitions/zeroes.go +index f9d258c0..1c0603a1 100644 +--- a/tests/negative/partitions/zeroes.go ++++ b/tests/negative/partitions/zeroes.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/proxy/http.go b/tests/negative/proxy/http.go +index 7492f940..c219792d 100644 +--- a/tests/negative/proxy/http.go ++++ b/tests/negative/proxy/http.go +@@ -19,8 +19,8 @@ import ( + "net/http" + "net/http/httptest" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + var ( +diff --git a/tests/negative/regression/filesystem.go b/tests/negative/regression/filesystem.go +index 0627c635..37a13f8f 100644 +--- a/tests/negative/regression/filesystem.go ++++ b/tests/negative/regression/filesystem.go +@@ -15,8 +15,8 @@ + package regression + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/security/tls.go b/tests/negative/security/tls.go +index 83149e89..1c4d59ac 100644 +--- a/tests/negative/security/tls.go ++++ b/tests/negative/security/tls.go +@@ -22,9 +22,9 @@ import ( + "net/http" + "net/http/httptest" + +- "github.com/coreos/ignition/v2/tests/fixtures" +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/fixtures" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/negative/timeouts/timeouts.go b/tests/negative/timeouts/timeouts.go +index 5ac0967b..b3bfd02e 100644 +--- a/tests/negative/timeouts/timeouts.go ++++ b/tests/negative/timeouts/timeouts.go +@@ -20,8 +20,8 @@ import ( + "net/http/httptest" + "time" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/files/directory.go b/tests/positive/files/directory.go +index 5bda64c1..056aa259 100644 +--- a/tests/positive/files/directory.go ++++ b/tests/positive/files/directory.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/files/file.go b/tests/positive/files/file.go +index 0dd092e1..a83da3c1 100644 +--- a/tests/positive/files/file.go ++++ b/tests/positive/files/file.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/files/hash.go b/tests/positive/files/hash.go +index 8faecff7..829b15e7 100644 +--- a/tests/positive/files/hash.go ++++ b/tests/positive/files/hash.go +@@ -17,9 +17,9 @@ package files + import ( + "strings" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/servers" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/servers" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/files/link.go b/tests/positive/files/link.go +index 72dd1b1f..ea21f539 100644 +--- a/tests/positive/files/link.go ++++ b/tests/positive/files/link.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +@@ -364,7 +364,7 @@ func ForceHardLinkCreation() types.Test { + + // CreateDeepHardLinkToFile checks if Ignition can create a hard + // link to a file that's deeper than the hard link. For more +-// information: https://github.com/coreos/ignition/issues/800 ++// information: https://github.com/flatcar/ignition/issues/800 + func CreateDeepHardLinkToFile() types.Test { + name := "links.hard.deep.create.file" + in := types.GetBaseDisk() +diff --git a/tests/positive/files/remote.go b/tests/positive/files/remote.go +index d1a8244e..792bdae7 100644 +--- a/tests/positive/files/remote.go ++++ b/tests/positive/files/remote.go +@@ -17,9 +17,9 @@ package files + import ( + "strings" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/servers" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/servers" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/files/units.go b/tests/positive/files/units.go +index 03e24ea7..f17efc5a 100644 +--- a/tests/positive/files/units.go ++++ b/tests/positive/files/units.go +@@ -15,8 +15,8 @@ + package files + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/filesystems/creation.go b/tests/positive/filesystems/creation.go +index b0f058ee..e5d9dce1 100644 +--- a/tests/positive/filesystems/creation.go ++++ b/tests/positive/filesystems/creation.go +@@ -17,8 +17,8 @@ package filesystems + import ( + "fmt" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/filesystems/mount_filesystem.go b/tests/positive/filesystems/mount_filesystem.go +index daa72d7d..2cc76c38 100644 +--- a/tests/positive/filesystems/mount_filesystem.go ++++ b/tests/positive/filesystems/mount_filesystem.go +@@ -15,8 +15,8 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/filesystems/reformat_filesystem.go b/tests/positive/filesystems/reformat_filesystem.go +index 6e58db70..550c3ab3 100644 +--- a/tests/positive/filesystems/reformat_filesystem.go ++++ b/tests/positive/filesystems/reformat_filesystem.go +@@ -15,9 +15,9 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/fixtures" +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/fixtures" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/filesystems/reuse_filesystem.go b/tests/positive/filesystems/reuse_filesystem.go +index bb83da30..77c33a51 100644 +--- a/tests/positive/filesystems/reuse_filesystem.go ++++ b/tests/positive/filesystems/reuse_filesystem.go +@@ -15,9 +15,9 @@ + package filesystems + + import ( +- "github.com/coreos/ignition/v2/tests/fixtures" +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/fixtures" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/general/baseconfigsmerging.go b/tests/positive/general/baseconfigsmerging.go +index be667be2..5ed84b26 100644 +--- a/tests/positive/general/baseconfigsmerging.go ++++ b/tests/positive/general/baseconfigsmerging.go +@@ -15,8 +15,8 @@ + package general + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/general/general.go b/tests/positive/general/general.go +index ff7722f7..79a0453e 100644 +--- a/tests/positive/general/general.go ++++ b/tests/positive/general/general.go +@@ -17,9 +17,9 @@ package general + import ( + "strings" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/servers" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/servers" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/general/preemption.go b/tests/positive/general/preemption.go +index 5952097f..3c0d62dd 100644 +--- a/tests/positive/general/preemption.go ++++ b/tests/positive/general/preemption.go +@@ -18,8 +18,8 @@ import ( + "fmt" + "strings" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/complex-mb.go b/tests/positive/partitions/complex-mb.go +index 5c090e80..86e0ff2f 100644 +--- a/tests/positive/partitions/complex-mb.go ++++ b/tests/positive/partitions/complex-mb.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/creation-mb.go b/tests/positive/partitions/creation-mb.go +index 696108a1..dcba68a5 100644 +--- a/tests/positive/partitions/creation-mb.go ++++ b/tests/positive/partitions/creation-mb.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/deletion.go b/tests/positive/partitions/deletion.go +index 4e32d3cd..1dde4830 100644 +--- a/tests/positive/partitions/deletion.go ++++ b/tests/positive/partitions/deletion.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/mixed.go b/tests/positive/partitions/mixed.go +index 31402918..f7505dbe 100644 +--- a/tests/positive/partitions/mixed.go ++++ b/tests/positive/partitions/mixed.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/no-op.go b/tests/positive/partitions/no-op.go +index 58c6bbb0..40b11716 100644 +--- a/tests/positive/partitions/no-op.go ++++ b/tests/positive/partitions/no-op.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/verification.go b/tests/positive/partitions/verification.go +index 1488e499..efad6d68 100644 +--- a/tests/positive/partitions/verification.go ++++ b/tests/positive/partitions/verification.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/partitions/zeros.go b/tests/positive/partitions/zeros.go +index 10d32990..d53a7bd5 100644 +--- a/tests/positive/partitions/zeros.go ++++ b/tests/positive/partitions/zeros.go +@@ -15,8 +15,8 @@ + package partitions + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/passwd/users.go b/tests/positive/passwd/users.go +index b199cae6..0dd2d13e 100644 +--- a/tests/positive/passwd/users.go ++++ b/tests/positive/passwd/users.go +@@ -15,8 +15,8 @@ + package passwd + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/proxy/http.go b/tests/positive/proxy/http.go +index 1863c744..8b03ec9f 100644 +--- a/tests/positive/proxy/http.go ++++ b/tests/positive/proxy/http.go +@@ -19,8 +19,8 @@ import ( + "net/http" + "net/http/httptest" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + var ( +diff --git a/tests/positive/regression/filesystem.go b/tests/positive/regression/filesystem.go +index 329d14bd..58fd5217 100644 +--- a/tests/positive/regression/filesystem.go ++++ b/tests/positive/regression/filesystem.go +@@ -15,8 +15,8 @@ + package regression + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/security/tls.go b/tests/positive/security/tls.go +index 0b52d784..d43ae179 100644 +--- a/tests/positive/security/tls.go ++++ b/tests/positive/security/tls.go +@@ -20,10 +20,10 @@ import ( + "net/http" + "net/http/httptest" + +- "github.com/coreos/ignition/v2/tests/fixtures" +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/servers" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/fixtures" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/servers" ++ "github.com/flatcar/ignition/v2/tests/types" + + "github.com/vincent-petithory/dataurl" + ) +diff --git a/tests/positive/systemd/create_unit.go b/tests/positive/systemd/create_unit.go +index 1964a602..71fcae85 100644 +--- a/tests/positive/systemd/create_unit.go ++++ b/tests/positive/systemd/create_unit.go +@@ -15,8 +15,8 @@ + package systemd + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/systemd/modify_service.go b/tests/positive/systemd/modify_service.go +index a3faf958..ae625e76 100644 +--- a/tests/positive/systemd/modify_service.go ++++ b/tests/positive/systemd/modify_service.go +@@ -15,8 +15,8 @@ + package systemd + + import ( +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/positive/timeouts/timeouts.go b/tests/positive/timeouts/timeouts.go +index 34408293..24a0bc61 100644 +--- a/tests/positive/timeouts/timeouts.go ++++ b/tests/positive/timeouts/timeouts.go +@@ -21,8 +21,8 @@ import ( + "sync" + "time" + +- "github.com/coreos/ignition/v2/tests/register" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/tests/register" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + func init() { +diff --git a/tests/register/register.go b/tests/register/register.go +index 07e803b7..27735ffd 100644 +--- a/tests/register/register.go ++++ b/tests/register/register.go +@@ -16,13 +16,13 @@ package register + + import ( + "github.com/coreos/go-semver/semver" +- types30 "github.com/coreos/ignition/v2/config/v3_0/types" +- types31 "github.com/coreos/ignition/v2/config/v3_1/types" +- types32 "github.com/coreos/ignition/v2/config/v3_2/types" +- types33 "github.com/coreos/ignition/v2/config/v3_3/types" +- types34 "github.com/coreos/ignition/v2/config/v3_4/types" +- types_exp "github.com/coreos/ignition/v2/config/v3_5_experimental/types" +- "github.com/coreos/ignition/v2/tests/types" ++ types30 "github.com/flatcar/ignition/v2/config/v3_0/types" ++ types31 "github.com/flatcar/ignition/v2/config/v3_1/types" ++ types32 "github.com/flatcar/ignition/v2/config/v3_2/types" ++ types33 "github.com/flatcar/ignition/v2/config/v3_3/types" ++ types34 "github.com/flatcar/ignition/v2/config/v3_4/types" ++ types_exp "github.com/flatcar/ignition/v2/config/v3_5_experimental/types" ++ "github.com/flatcar/ignition/v2/tests/types" + ) + + type TestType int +diff --git a/tests/registry/registry.go b/tests/registry/registry.go +index 917106b1..d181f843 100644 +--- a/tests/registry/registry.go ++++ b/tests/registry/registry.go +@@ -16,22 +16,22 @@ package registry + + // Done to import the tests + import ( +- _ "github.com/coreos/ignition/v2/tests/negative/files" +- _ "github.com/coreos/ignition/v2/tests/negative/filesystems" +- _ "github.com/coreos/ignition/v2/tests/negative/general" +- _ "github.com/coreos/ignition/v2/tests/negative/partitions" +- _ "github.com/coreos/ignition/v2/tests/negative/proxy" +- _ "github.com/coreos/ignition/v2/tests/negative/regression" +- _ "github.com/coreos/ignition/v2/tests/negative/security" +- _ "github.com/coreos/ignition/v2/tests/negative/timeouts" +- _ "github.com/coreos/ignition/v2/tests/positive/files" +- _ "github.com/coreos/ignition/v2/tests/positive/filesystems" +- _ "github.com/coreos/ignition/v2/tests/positive/general" +- _ "github.com/coreos/ignition/v2/tests/positive/partitions" +- _ "github.com/coreos/ignition/v2/tests/positive/passwd" +- _ "github.com/coreos/ignition/v2/tests/positive/proxy" +- _ "github.com/coreos/ignition/v2/tests/positive/regression" +- _ "github.com/coreos/ignition/v2/tests/positive/security" +- _ "github.com/coreos/ignition/v2/tests/positive/systemd" +- _ "github.com/coreos/ignition/v2/tests/positive/timeouts" ++ _ "github.com/flatcar/ignition/v2/tests/negative/files" ++ _ "github.com/flatcar/ignition/v2/tests/negative/filesystems" ++ _ "github.com/flatcar/ignition/v2/tests/negative/general" ++ _ "github.com/flatcar/ignition/v2/tests/negative/partitions" ++ _ "github.com/flatcar/ignition/v2/tests/negative/proxy" ++ _ "github.com/flatcar/ignition/v2/tests/negative/regression" ++ _ "github.com/flatcar/ignition/v2/tests/negative/security" ++ _ "github.com/flatcar/ignition/v2/tests/negative/timeouts" ++ _ "github.com/flatcar/ignition/v2/tests/positive/files" ++ _ "github.com/flatcar/ignition/v2/tests/positive/filesystems" ++ _ "github.com/flatcar/ignition/v2/tests/positive/general" ++ _ "github.com/flatcar/ignition/v2/tests/positive/partitions" ++ _ "github.com/flatcar/ignition/v2/tests/positive/passwd" ++ _ "github.com/flatcar/ignition/v2/tests/positive/proxy" ++ _ "github.com/flatcar/ignition/v2/tests/positive/regression" ++ _ "github.com/flatcar/ignition/v2/tests/positive/security" ++ _ "github.com/flatcar/ignition/v2/tests/positive/systemd" ++ _ "github.com/flatcar/ignition/v2/tests/positive/timeouts" + ) +diff --git a/tests/servers/servers.go b/tests/servers/servers.go +index 6aa688b8..4ec8a348 100644 +--- a/tests/servers/servers.go ++++ b/tests/servers/servers.go +@@ -27,7 +27,7 @@ import ( + "strings" + "time" + +- "github.com/coreos/ignition/v2/tests/fixtures" ++ "github.com/flatcar/ignition/v2/tests/fixtures" + "github.com/pin/tftp" + ) + +diff --git a/tests/validator.go b/tests/validator.go +index d64957db..8e937208 100644 +--- a/tests/validator.go ++++ b/tests/validator.go +@@ -25,8 +25,8 @@ import ( + "strings" + "testing" + +- "github.com/coreos/ignition/v2/internal/exec/util" +- "github.com/coreos/ignition/v2/tests/types" ++ "github.com/flatcar/ignition/v2/internal/exec/util" ++ "github.com/flatcar/ignition/v2/tests/types" + + "golang.org/x/sys/unix" + ) +diff --git a/validate/main.go b/validate/main.go +index bec64866..ed027604 100644 +--- a/validate/main.go ++++ b/validate/main.go +@@ -21,8 +21,8 @@ import ( + "os" + "strings" + +- "github.com/coreos/ignition/v2/config" +- "github.com/coreos/ignition/v2/internal/version" ++ "github.com/flatcar/ignition/v2/config" ++ "github.com/flatcar/ignition/v2/internal/version" + ) + + var ( +-- +2.35.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0002-mod-add-flatcar-ignition-0.36.2.patch b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0002-mod-add-flatcar-ignition-0.36.2.patch new file mode 100644 index 0000000000..2196dcbb6a --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0002-mod-add-flatcar-ignition-0.36.2.patch @@ -0,0 +1,45 @@ +From 4e107fd4f2bad2b3926dadef7b1143a4b2b43e3f Mon Sep 17 00:00:00 2001 +From: Mathieu Tortuyaux +Date: Fri, 24 Feb 2023 09:13:33 +0100 +Subject: [PATCH 02/18] mod: add flatcar/ignition@0.36.2 + +it's required for Ignition conversion. + +Signed-off-by: Mathieu Tortuyaux +--- + go.mod | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/go.mod b/go.mod +index 85b3e34e..b109532e 100644 +--- a/go.mod ++++ b/go.mod +@@ -10,6 +10,7 @@ require ( + github.com/coreos/go-semver v0.3.1 + github.com/coreos/go-systemd/v22 v22.5.0 + github.com/coreos/vcontext v0.0.0-20230201181013-d72178a18687 ++ github.com/flatcar/ignition v0.36.2 + github.com/google/renameio/v2 v2.0.0 + github.com/google/uuid v1.3.0 + github.com/pin/tftp v2.1.0+incompatible +@@ -27,7 +28,9 @@ require ( + cloud.google.com/go v0.107.0 // indirect + cloud.google.com/go/compute v1.18.0 // indirect + cloud.google.com/go/iam v0.8.0 // indirect ++ github.com/ajeddeloh/go-json v0.0.0-20160803184958-73d058cf8437 // indirect + github.com/coreos/go-json v0.0.0-20230131223807-18775e0fb4fb // indirect ++ github.com/coreos/go-systemd v0.0.0-20181031085051-9002847aa142 // indirect + github.com/davecgh/go-spew v1.1.1 // indirect + github.com/godbus/dbus/v5 v5.0.4 // indirect + github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e // indirect +@@ -38,6 +41,7 @@ require ( + github.com/jmespath/go-jmespath v0.4.0 // indirect + github.com/pmezard/go-difflib v1.0.0 // indirect + go.opencensus.io v0.24.0 // indirect ++ go4.org v0.0.0-20160314031811-03efcb870d84 // indirect + golang.org/x/text v0.7.0 // indirect + golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect + google.golang.org/appengine v1.6.7 // indirect +-- +2.35.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0003-sum-go-mod-tidy.patch b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0003-sum-go-mod-tidy.patch new file mode 100644 index 0000000000..5a17a424be --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0003-sum-go-mod-tidy.patch @@ -0,0 +1,123 @@ +From b8c235d5945df6f726c86386437cd787a30046c4 Mon Sep 17 00:00:00 2001 +From: Mathieu Tortuyaux +Date: Fri, 24 Feb 2023 09:14:03 +0100 +Subject: [PATCH 03/18] sum: go mod tidy + +Signed-off-by: Mathieu Tortuyaux +--- + go.sum | 28 +++++++++++++++++++++++++++- + 1 file changed, 27 insertions(+), 1 deletion(-) + +diff --git a/go.sum b/go.sum +index 087ef0ad..bb95e1fe 100644 +--- a/go.sum ++++ b/go.sum +@@ -11,6 +11,9 @@ cloud.google.com/go/longrunning v0.3.0 h1:NjljC+FYPV3uh5/OwWT6pVU+doBqMg2x/rZlE+ + cloud.google.com/go/storage v1.29.0 h1:6weCgzRvMg7lzuUurI4697AqIRPU1SvzHhynwpW31jI= + cloud.google.com/go/storage v1.29.0/go.mod h1:4puEjyTKnku6gfKoTfNOU/W+a9JyuVNxjpS5GBrB8h4= + github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= ++github.com/ajeddeloh/go-json v0.0.0-20160803184958-73d058cf8437 h1:gZCtZ+Hh/e3CGEX8q/yAcp8wWu5ZS6NMk6VGzpQhI3s= ++github.com/ajeddeloh/go-json v0.0.0-20160803184958-73d058cf8437/go.mod h1:otnto4/Icqn88WCcM4bhIJNSgsh9VLBuspyyCfvof9c= ++github.com/aws/aws-sdk-go v1.8.39/go.mod h1:ZRmQr0FajVIyZ4ZzBYKG5P3ZqPz9IHG41ZoMu1ADI3k= + github.com/aws/aws-sdk-go v1.44.204 h1:7/tPUXfNOHB390A63t6fJIwmlwVQAkAwcbzKsU2/6OQ= + github.com/aws/aws-sdk-go v1.44.204/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= + github.com/beevik/etree v1.1.1-0.20200718192613-4a2f8b9d084c h1:uYq6BD31fkfeNKQmfLj7ODcEfkb5JLsKrXVSqgnfGg8= +@@ -20,8 +23,11 @@ github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDk + github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc= + github.com/coreos/go-json v0.0.0-20230131223807-18775e0fb4fb h1:rmqyI19j3Z/74bIRhuC59RB442rXUazKNueVpfJPxg4= + github.com/coreos/go-json v0.0.0-20230131223807-18775e0fb4fb/go.mod h1:rcFZM3uxVvdyNmsAV2jopgPD1cs5SPWJWU5dOz2LUnw= ++github.com/coreos/go-semver v0.1.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk= + github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= + github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= ++github.com/coreos/go-systemd v0.0.0-20181031085051-9002847aa142 h1:3jFq2xL4ZajGK4aZY8jz+DAF0FHjI51BXjjSwCzS1Dk= ++github.com/coreos/go-systemd v0.0.0-20181031085051-9002847aa142/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= + github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= + github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= + github.com/coreos/vcontext v0.0.0-20230201181013-d72178a18687 h1:uSmlDgJGbUB0bwQBcZomBTottKwEDF5fF8UjSwKSzWM= +@@ -33,6 +39,10 @@ github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymF + github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= + github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98= + github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c= ++github.com/flatcar/ignition v0.36.2 h1:xGHgScUe0P4Fkprjqv7L2CE58emiQgP833OCCn9z2v4= ++github.com/flatcar/ignition v0.36.2/go.mod h1:uk1tpzLFRXus4RrvzgMI+IqmmB8a/RGFSBlI+tMTbbA= ++github.com/go-ini/ini v1.25.4/go.mod h1:ByCAeIL28uOIIG0E3PJtZPDL8WnHpFKFOtgjp+3Ies8= ++github.com/godbus/dbus v0.0.0-20181025153459-66d97aec3384/go.mod h1:/YcGZj5zSblfDWMMoOzV4fas9FZnQYTkDnsGvmh2Grw= + github.com/godbus/dbus/v5 v5.0.4 h1:9349emZab16e7zQvpmsbtjc18ykshndd8y2PG3sgJbA= + github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= + github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= +@@ -71,32 +81,45 @@ github.com/googleapis/enterprise-certificate-proxy v0.2.3 h1:yk9/cqRKtT9wXZSsRH9 + github.com/googleapis/enterprise-certificate-proxy v0.2.3/go.mod h1:AwSRAtLfXpU5Nm3pW+v7rGDHp09LsPtGY9MduiEsR9k= + github.com/googleapis/gax-go/v2 v2.7.0 h1:IcsPKeInNvYi7eqSaDjiZqDDKu5rsmunY0Y1YupQSSQ= + github.com/googleapis/gax-go/v2 v2.7.0/go.mod h1:TEop28CZZQ2y+c0VxMUmu1lV+fQx57QpBWsYpwqHJx8= ++github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY= ++github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k= + github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= + github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo= + github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8= + github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= ++github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU= ++github.com/pborman/uuid v0.0.0-20170612153648-e790cca94e6c/go.mod h1:VyrYX9gd7irzKovcSS6BIIEwPRkP2Wm2m9ufcdFSJ34= + github.com/pin/tftp v2.1.0+incompatible h1:Yng4J7jv6lOc6IF4XoB5mnd3P7ZrF60XQq+my3FAMus= + github.com/pin/tftp v2.1.0+incompatible/go.mod h1:xVpZOMCXTy+A5QMjEVN0Glwa1sUvaJhFXbr/aAxuxGY= + github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= + github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= + github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= + github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= ++github.com/sigma/bdoor v0.0.0-20160202064022-babf2a4017b0/go.mod h1:WBu7REWbxC/s/J06jsk//d+9DOz9BbsmcIrimuGRFbs= ++github.com/sigma/vmw-guestinfo v0.0.0-20160204083807-95dd4126d6e8/go.mod h1:JrRFFC0veyh0cibh0DAhriSY7/gV3kDdNaVUOmfx01U= ++github.com/smartystreets/assertions v1.2.0/go.mod h1:tcbTF8ujkAEcZ8TElKY+i30BzYlVhC/LOxJk7iOWnoo= ++github.com/smartystreets/goconvey v1.7.2/go.mod h1:Vw0tHAZW6lzCRk3xgdin6fKYcG+G3Pg9vgXWeJpQFMM= + github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace h1:9PNP1jnUjRhfmGMlkXHjYPishpcw4jpSt/V/xYY3FMA= + github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= + github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= + github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= + github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= ++github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= + github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= + github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= + github.com/stretchr/testify v1.8.1 h1:w7B6lhMri9wdJUVmEZPGGhZzrYTPvgJArz7wNPgYKsk= + github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= + github.com/vincent-petithory/dataurl v1.0.0 h1:cXw+kPto8NLuJtlMsI152irrVw9fRDX8AbShPRpg2CI= + github.com/vincent-petithory/dataurl v1.0.0/go.mod h1:FHafX5vmDzyP+1CQATJn7WFKc9CvnvxyvZy6I1MrG/U= ++github.com/vmware/vmw-guestinfo v0.0.0-20170707015358-25eff159a728/go.mod h1:x9oS4Wk2s2u4tS29nEaDLdzvuHdB19CvSGJjPgkZJNk= + github.com/vmware/vmw-guestinfo v0.0.0-20220317130741-510905f0efa3 h1:v6jG/tdl4O07LNVp74Nt7/OyL+1JsIW1M2f/nSvQheY= + github.com/vmware/vmw-guestinfo v0.0.0-20220317130741-510905f0efa3/go.mod h1:CSBTxrhePCm0cmXNKDGeu+6bOQzpaEklfCqEpn89JWk= ++github.com/vmware/vmw-ovflib v0.0.0-20170608004843-1f217b9dc714/go.mod h1:jiPk45kn7klhByRvUq5i2vo1RtHKBHj+iWGFpxbXuuI= + github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= + go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0= + go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo= ++go4.org v0.0.0-20160314031811-03efcb870d84 h1:WZkGC1qzoax/QSt84wmvIxk+ZOmGIChsTzdrv9t4nvk= ++go4.org v0.0.0-20160314031811-03efcb870d84/go.mod h1:MkTOUMDaeVYJUOUsaDXIhWPZYa1yOyC1qaOBpL57BhE= + golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= + golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= + golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= +@@ -109,6 +132,7 @@ golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73r + golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= + golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= + golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= ++golang.org/x/net v0.0.0-20190320064053-1272bf9dcd53/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= + golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= + golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks= + golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +@@ -150,6 +174,7 @@ golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGm + golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= + golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY= + golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= ++golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= + golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= + golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= + golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= +@@ -190,8 +215,9 @@ google.golang.org/protobuf v1.28.1 h1:d0NfwRgPtno5B1Wa6L2DAG+KivqkdutMf1UhdNx175 + google.golang.org/protobuf v1.28.1/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= + gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM= + gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +-gopkg.in/yaml.v2 v2.2.8 h1:obN1ZagJSUGI0Ek/LBmuj4SNLPfIny3KsKFopxRdj10= + gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= ++gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= ++gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= + gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= + gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= + gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +-- +2.35.1 + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0004-vendor-go-mod-vendor.patch b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0004-vendor-go-mod-vendor.patch new file mode 100644 index 0000000000..14b94c9af6 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/files/0004-vendor-go-mod-vendor.patch @@ -0,0 +1,17095 @@ +From e80a5d4a028931ad82376896b87a1b3afe64422f Mon Sep 17 00:00:00 2001 +From: Mathieu Tortuyaux +Date: Fri, 24 Feb 2023 09:14:24 +0100 +Subject: [PATCH 04/18] vendor: go mod vendor + +Signed-off-by: Mathieu Tortuyaux +--- + vendor/github.com/ajeddeloh/go-json/README | 10 + + vendor/github.com/ajeddeloh/go-json/decode.go | 1226 +++++++++++++++++ + vendor/github.com/ajeddeloh/go-json/encode.go | 1194 ++++++++++++++++ + vendor/github.com/ajeddeloh/go-json/fold.go | 143 ++ + vendor/github.com/ajeddeloh/go-json/indent.go | 137 ++ + .../github.com/ajeddeloh/go-json/scanner.go | 630 +++++++++ + vendor/github.com/ajeddeloh/go-json/stream.go | 480 +++++++ + vendor/github.com/ajeddeloh/go-json/tags.go | 44 + + vendor/github.com/coreos/go-systemd/LICENSE | 191 +++ + vendor/github.com/coreos/go-systemd/NOTICE | 5 + + .../coreos/go-systemd/unit/deserialize.go | 278 ++++ + .../coreos/go-systemd/unit/escape.go | 116 ++ + .../coreos/go-systemd/unit/option.go | 59 + + .../coreos/go-systemd/unit/serialize.go | 75 + + vendor/github.com/flatcar/ignition/LICENSE | 202 +++ + vendor/github.com/flatcar/ignition/NOTICE | 5 + + .../ignition/config/shared/errors/errors.go | 109 ++ + .../config/shared/validations/unit.go | 54 + + .../flatcar/ignition/config/util/helpers.go | 34 + + .../ignition/config/util/parsingErrors.go | 74 + + .../flatcar/ignition/config/v1/cloudinit.go | 53 + + .../flatcar/ignition/config/v1/config.go | 59 + + .../ignition/config/v1/types/config.go | 35 + + .../flatcar/ignition/config/v1/types/disk.go | 123 ++ + .../flatcar/ignition/config/v1/types/file.go | 39 + + .../ignition/config/v1/types/filesystem.go | 45 + + .../flatcar/ignition/config/v1/types/group.go | 22 + + .../ignition/config/v1/types/networkd.go | 19 + + .../ignition/config/v1/types/partition.go | 60 + + .../ignition/config/v1/types/passwd.go | 20 + + .../flatcar/ignition/config/v1/types/path.go | 31 + + .../flatcar/ignition/config/v1/types/raid.go | 44 + + .../ignition/config/v1/types/storage.go | 21 + + .../ignition/config/v1/types/systemd.go | 19 + + .../flatcar/ignition/config/v1/types/unit.go | 73 + + .../flatcar/ignition/config/v1/types/user.go | 35 + + .../flatcar/ignition/config/v2_0/append.go | 76 + + .../flatcar/ignition/config/v2_0/cloudinit.go | 53 + + .../flatcar/ignition/config/v2_0/config.go | 70 + + .../flatcar/ignition/config/v2_0/translate.go | 173 +++ + .../ignition/config/v2_0/types/compression.go | 31 + + .../ignition/config/v2_0/types/config.go | 87 ++ + .../ignition/config/v2_0/types/disk.go | 126 ++ + .../ignition/config/v2_0/types/file.go | 61 + + .../ignition/config/v2_0/types/filesystem.go | 60 + + .../ignition/config/v2_0/types/group.go | 22 + + .../ignition/config/v2_0/types/hash.go | 72 + + .../ignition/config/v2_0/types/ignition.go | 64 + + .../ignition/config/v2_0/types/networkd.go | 19 + + .../ignition/config/v2_0/types/partition.go | 64 + + .../ignition/config/v2_0/types/passwd.go | 20 + + .../ignition/config/v2_0/types/path.go | 35 + + .../ignition/config/v2_0/types/raid.go | 44 + + .../ignition/config/v2_0/types/storage.go | 22 + + .../ignition/config/v2_0/types/systemd.go | 19 + + .../ignition/config/v2_0/types/unit.go | 115 ++ + .../flatcar/ignition/config/v2_0/types/url.go | 69 + + .../ignition/config/v2_0/types/user.go | 35 + + .../config/v2_0/types/verification.go | 19 + + .../flatcar/ignition/config/v2_1/append.go | 76 + + .../flatcar/ignition/config/v2_1/cloudinit.go | 53 + + .../flatcar/ignition/config/v2_1/config.go | 68 + + .../flatcar/ignition/config/v2_1/translate.go | 236 ++++ + .../ignition/config/v2_1/types/config.go | 91 ++ + .../ignition/config/v2_1/types/directory.go | 30 + + .../ignition/config/v2_1/types/disk.go | 128 ++ + .../ignition/config/v2_1/types/file.go | 56 + + .../ignition/config/v2_1/types/filesystem.go | 144 ++ + .../ignition/config/v2_1/types/ignition.go | 52 + + .../ignition/config/v2_1/types/mode.go | 26 + + .../ignition/config/v2_1/types/node.go | 73 + + .../ignition/config/v2_1/types/partition.go | 77 ++ + .../ignition/config/v2_1/types/passwd.go | 67 + + .../ignition/config/v2_1/types/path.go | 28 + + .../ignition/config/v2_1/types/raid.go | 57 + + .../ignition/config/v2_1/types/schema.go | 221 +++ + .../ignition/config/v2_1/types/unit.go | 109 ++ + .../flatcar/ignition/config/v2_1/types/url.go | 52 + + .../config/v2_1/types/verification.go | 77 ++ + .../flatcar/ignition/config/v2_2/append.go | 76 + + .../flatcar/ignition/config/v2_2/cloudinit.go | 53 + + .../flatcar/ignition/config/v2_2/config.go | 71 + + .../flatcar/ignition/config/v2_2/translate.go | 354 +++++ + .../flatcar/ignition/config/v2_2/types/ca.go | 27 + + .../ignition/config/v2_2/types/config.go | 91 ++ + .../ignition/config/v2_2/types/directory.go | 37 + + .../ignition/config/v2_2/types/disk.go | 128 ++ + .../ignition/config/v2_2/types/file.go | 69 + + .../ignition/config/v2_2/types/filesystem.go | 144 ++ + .../ignition/config/v2_2/types/ignition.go | 52 + + .../ignition/config/v2_2/types/mode.go | 26 + + .../ignition/config/v2_2/types/node.go | 73 + + .../ignition/config/v2_2/types/partition.go | 77 ++ + .../ignition/config/v2_2/types/passwd.go | 67 + + .../ignition/config/v2_2/types/path.go | 28 + + .../ignition/config/v2_2/types/raid.go | 57 + + .../ignition/config/v2_2/types/schema.go | 246 ++++ + .../ignition/config/v2_2/types/unit.go | 131 ++ + .../flatcar/ignition/config/v2_2/types/url.go | 53 + + .../config/v2_2/types/verification.go | 77 ++ + .../flatcar/ignition/config/v2_3/append.go | 76 + + .../flatcar/ignition/config/v2_3/cloudinit.go | 53 + + .../flatcar/ignition/config/v2_3/config.go | 70 + + .../flatcar/ignition/config/v2_3/translate.go | 380 +++++ + .../flatcar/ignition/config/v2_3/types/ca.go | 27 + + .../ignition/config/v2_3/types/config.go | 91 ++ + .../ignition/config/v2_3/types/directory.go | 37 + + .../ignition/config/v2_3/types/disk.go | 164 +++ + .../ignition/config/v2_3/types/file.go | 71 + + .../ignition/config/v2_3/types/filesystem.go | 146 ++ + .../ignition/config/v2_3/types/ignition.go | 52 + + .../ignition/config/v2_3/types/mode.go | 26 + + .../ignition/config/v2_3/types/node.go | 73 + + .../ignition/config/v2_3/types/partition.go | 112 ++ + .../ignition/config/v2_3/types/passwd.go | 67 + + .../ignition/config/v2_3/types/path.go | 28 + + .../ignition/config/v2_3/types/raid.go | 57 + + .../ignition/config/v2_3/types/schema.go | 250 ++++ + .../ignition/config/v2_3/types/unit.go | 131 ++ + .../flatcar/ignition/config/v2_3/types/url.go | 53 + + .../config/v2_3/types/verification.go | 77 ++ + .../flatcar/ignition/config/v2_4/append.go | 76 + + .../flatcar/ignition/config/v2_4/cloudinit.go | 53 + + .../flatcar/ignition/config/v2_4/config.go | 70 + + .../flatcar/ignition/config/v2_4/translate.go | 398 ++++++ + .../flatcar/ignition/config/v2_4/types/ca.go | 58 + + .../ignition/config/v2_4/types/config.go | 91 ++ + .../ignition/config/v2_4/types/directory.go | 37 + + .../ignition/config/v2_4/types/disk.go | 164 +++ + .../ignition/config/v2_4/types/file.go | 100 ++ + .../ignition/config/v2_4/types/filesystem.go | 146 ++ + .../ignition/config/v2_4/types/headers.go | 47 + + .../ignition/config/v2_4/types/ignition.go | 82 ++ + .../ignition/config/v2_4/types/mode.go | 26 + + .../ignition/config/v2_4/types/node.go | 73 + + .../ignition/config/v2_4/types/partition.go | 112 ++ + .../ignition/config/v2_4/types/passwd.go | 67 + + .../ignition/config/v2_4/types/path.go | 28 + + .../ignition/config/v2_4/types/raid.go | 57 + + .../ignition/config/v2_4/types/schema.go | 269 ++++ + .../ignition/config/v2_4/types/unit.go | 131 ++ + .../flatcar/ignition/config/v2_4/types/url.go | 53 + + .../config/v2_4/types/verification.go | 77 ++ + .../ignition/config/validate/astjson/node.go | 73 + + .../config/validate/astnode/astnode.go | 45 + + .../ignition/config/validate/report/report.go | 158 +++ + .../ignition/config/validate/validate.go | 242 ++++ + vendor/go4.org/AUTHORS | 8 + + vendor/go4.org/LICENSE | 202 +++ + vendor/go4.org/errorutil/highlight.go | 58 + + vendor/modules.txt | 30 + + 151 files changed, 15850 insertions(+) + create mode 100644 vendor/github.com/ajeddeloh/go-json/README + create mode 100644 vendor/github.com/ajeddeloh/go-json/decode.go + create mode 100644 vendor/github.com/ajeddeloh/go-json/encode.go + create mode 100644 vendor/github.com/ajeddeloh/go-json/fold.go + create mode 100644 vendor/github.com/ajeddeloh/go-json/indent.go + create mode 100644 vendor/github.com/ajeddeloh/go-json/scanner.go + create mode 100644 vendor/github.com/ajeddeloh/go-json/stream.go + create mode 100644 vendor/github.com/ajeddeloh/go-json/tags.go + create mode 100644 vendor/github.com/coreos/go-systemd/LICENSE + create mode 100644 vendor/github.com/coreos/go-systemd/NOTICE + create mode 100644 vendor/github.com/coreos/go-systemd/unit/deserialize.go + create mode 100644 vendor/github.com/coreos/go-systemd/unit/escape.go + create mode 100644 vendor/github.com/coreos/go-systemd/unit/option.go + create mode 100644 vendor/github.com/coreos/go-systemd/unit/serialize.go + create mode 100644 vendor/github.com/flatcar/ignition/LICENSE + create mode 100644 vendor/github.com/flatcar/ignition/NOTICE + create mode 100644 vendor/github.com/flatcar/ignition/config/shared/errors/errors.go + create mode 100644 vendor/github.com/flatcar/ignition/config/shared/validations/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/util/helpers.go + create mode 100644 vendor/github.com/flatcar/ignition/config/util/parsingErrors.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/cloudinit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/disk.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/file.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/filesystem.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/group.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/networkd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/partition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/passwd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/path.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/raid.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/storage.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/systemd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v1/types/user.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/append.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/cloudinit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/translate.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/compression.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/disk.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/file.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/filesystem.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/group.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/hash.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/ignition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/networkd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/partition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/passwd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/path.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/raid.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/storage.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/systemd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/url.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/user.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_0/types/verification.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/append.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/cloudinit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/translate.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/directory.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/disk.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/file.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/filesystem.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/ignition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/mode.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/node.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/partition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/passwd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/path.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/raid.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/schema.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/url.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_1/types/verification.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/append.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/cloudinit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/translate.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/ca.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/directory.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/disk.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/file.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/filesystem.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/ignition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/mode.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/node.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/partition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/passwd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/path.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/raid.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/schema.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/url.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_2/types/verification.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/append.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/cloudinit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/translate.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/ca.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/directory.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/disk.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/file.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/filesystem.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/ignition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/mode.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/node.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/partition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/passwd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/path.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/raid.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/schema.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/url.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_3/types/verification.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/append.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/cloudinit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/translate.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/ca.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/config.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/directory.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/disk.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/file.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/filesystem.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/headers.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/ignition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/mode.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/node.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/partition.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/passwd.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/path.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/raid.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/schema.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/unit.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/url.go + create mode 100644 vendor/github.com/flatcar/ignition/config/v2_4/types/verification.go + create mode 100644 vendor/github.com/flatcar/ignition/config/validate/astjson/node.go + create mode 100644 vendor/github.com/flatcar/ignition/config/validate/astnode/astnode.go + create mode 100644 vendor/github.com/flatcar/ignition/config/validate/report/report.go + create mode 100644 vendor/github.com/flatcar/ignition/config/validate/validate.go + create mode 100644 vendor/go4.org/AUTHORS + create mode 100644 vendor/go4.org/LICENSE + create mode 100644 vendor/go4.org/errorutil/highlight.go + +diff --git a/vendor/github.com/ajeddeloh/go-json/README b/vendor/github.com/ajeddeloh/go-json/README +new file mode 100644 +index 00000000..0f53d345 +--- /dev/null ++++ b/vendor/github.com/ajeddeloh/go-json/README +@@ -0,0 +1,10 @@ ++This is a fork of go's encoding/json library. It adds the a third target for unmarshalling, json.Node. ++Unmarshalling to a Node behaves similarilarly to unmarshalling to an interface{}, except it also records ++the offsets for the start and end of the value that was unmarshalled and, if the value was part of a json ++object, it also records the offsets of the start and end of the object's key. The Value field of the Node ++will be unmarshalled to the same types as if it were an interface{}, except in the case of arrays and ++objects. In those case it will be unmarshalled to a []Node or map[string]Node instead []interface{} or ++map[string]interface{} for arrays and objects, respectively. ++ ++There are two branchs, go15 and go16. go15 contains the modified go1.5 library and go16 contains the ++modified go1.6 library. +diff --git a/vendor/github.com/ajeddeloh/go-json/decode.go b/vendor/github.com/ajeddeloh/go-json/decode.go +new file mode 100644 +index 00000000..ed5398dd +--- /dev/null ++++ b/vendor/github.com/ajeddeloh/go-json/decode.go +@@ -0,0 +1,1226 @@ ++// Copyright 2010 The Go Authors. All rights reserved. ++// Use of this source code is governed by a BSD-style ++// license that can be found in the LICENSE file. ++ ++// Represents JSON data structure using native Go types: booleans, floats, ++// strings, arrays, and maps. ++ ++package json ++ ++import ( ++ "bytes" ++ "encoding" ++ "encoding/base64" ++ "errors" ++ "fmt" ++ "reflect" ++ "runtime" ++ "strconv" ++ "unicode" ++ "unicode/utf16" ++ "unicode/utf8" ++) ++ ++// Unmarshal parses the JSON-encoded data and stores the result ++// in the value pointed to by v. ++// ++// Unmarshal uses the inverse of the encodings that ++// Marshal uses, allocating maps, slices, and pointers as necessary, ++// with the following additional rules: ++// ++// To unmarshal JSON into a pointer, Unmarshal first handles the case of ++// the JSON being the JSON literal null. In that case, Unmarshal sets ++// the pointer to nil. Otherwise, Unmarshal unmarshals the JSON into ++// the value pointed at by the pointer. If the pointer is nil, Unmarshal ++// allocates a new value for it to point to. ++// ++// To unmarshal JSON into a struct, Unmarshal matches incoming object ++// keys to the keys used by Marshal (either the struct field name or its tag), ++// preferring an exact match but also accepting a case-insensitive match. ++// ++// To unmarshal JSON into an interface value, ++// Unmarshal stores one of these in the interface value: ++// ++// bool, for JSON booleans ++// float64, for JSON numbers ++// string, for JSON strings ++// []interface{}, for JSON arrays ++// map[string]interface{}, for JSON objects ++// nil for JSON null ++// ++// To unmarshal a JSON array into a slice, Unmarshal resets the slice to nil ++// and then appends each element to the slice. ++// ++// To unmarshal a JSON object into a map, Unmarshal replaces the map ++// with an empty map and then adds key-value pairs from the object to ++// the map. ++// ++// If a JSON value is not appropriate for a given target type, ++// or if a JSON number overflows the target type, Unmarshal ++// skips that field and completes the unmarshalling as best it can. ++// If no more serious errors are encountered, Unmarshal returns ++// an UnmarshalTypeError describing the earliest such error. ++// ++// The JSON null value unmarshals into an interface, map, pointer, or slice ++// by setting that Go value to nil. Because null is often used in JSON to mean ++// ``not present,'' unmarshaling a JSON null into any other Go type has no effect ++// on the value and produces no error. ++// ++// When unmarshaling quoted strings, invalid UTF-8 or ++// invalid UTF-16 surrogate pairs are not treated as an error. ++// Instead, they are replaced by the Unicode replacement ++// character U+FFFD. ++// ++func Unmarshal(data []byte, v interface{}) error { ++ // Check for well-formedness. ++ // Avoids filling out half a data structure ++ // before discovering a JSON syntax error. ++ var d decodeState ++ err := checkValid(data, &d.scan) ++ if err != nil { ++ return err ++ } ++ ++ d.init(data) ++ return d.unmarshal(v) ++} ++ ++// Unmarshaler is the interface implemented by objects ++// that can unmarshal a JSON description of themselves. ++// The input can be assumed to be a valid encoding of ++// a JSON value. UnmarshalJSON must copy the JSON data ++// if it wishes to retain the data after returning. ++type Unmarshaler interface { ++ UnmarshalJSON([]byte) error ++} ++ ++// An UnmarshalTypeError describes a JSON value that was ++// not appropriate for a value of a specific Go type. ++type UnmarshalTypeError struct { ++ Value string // description of JSON value - "bool", "array", "number -5" ++ Type reflect.Type // type of Go value it could not be assigned to ++ Offset int64 // error occurred after reading Offset bytes ++} ++ ++func (e *UnmarshalTypeError) Error() string { ++ return "json: cannot unmarshal " + e.Value + " into Go value of type " + e.Type.String() ++} ++ ++// An UnmarshalFieldError describes a JSON object key that ++// led to an unexported (and therefore unwritable) struct field. ++// (No longer used; kept for compatibility.) ++type UnmarshalFieldError struct { ++ Key string ++ Type reflect.Type ++ Field reflect.StructField ++} ++ ++func (e *UnmarshalFieldError) Error() string { ++ return "json: cannot unmarshal object key " + strconv.Quote(e.Key) + " into unexported field " + e.Field.Name + " of type " + e.Type.String() ++} ++ ++// An InvalidUnmarshalError describes an invalid argument passed to Unmarshal. ++// (The argument to Unmarshal must be a non-nil pointer.) ++type InvalidUnmarshalError struct { ++ Type reflect.Type ++} ++ ++type Node struct { ++ Start int ++ End int ++ KeyStart int // Only value if a member of a struct ++ KeyEnd int ++ Value interface{} ++} ++ ++func (e *InvalidUnmarshalError) Error() string { ++ if e.Type == nil { ++ return "json: Unmarshal(nil)" ++ } ++ ++ if e.Type.Kind() != reflect.Ptr { ++ return "json: Unmarshal(non-pointer " + e.Type.String() + ")" ++ } ++ return "json: Unmarshal(nil " + e.Type.String() + ")" ++} ++ ++func (d *decodeState) unmarshal(v interface{}) (err error) { ++ defer func() { ++ if r := recover(); r != nil { ++ if _, ok := r.(runtime.Error); ok { ++ panic(r) ++ } ++ err = r.(error) ++ } ++ }() ++ ++ rv := reflect.ValueOf(v) ++ if rv.Kind() != reflect.Ptr || rv.IsNil() { ++ return &InvalidUnmarshalError{reflect.TypeOf(v)} ++ } ++ ++ d.scan.reset() ++ // We decode rv not rv.Elem because the Unmarshaler interface ++ // test must be applied at the top level of the value. ++ d.value(rv) ++ return d.savedError ++} ++ ++// A Number represents a JSON number literal. ++type Number string ++ ++// String returns the literal text of the number. ++func (n Number) String() string { return string(n) } ++ ++// Float64 returns the number as a float64. ++func (n Number) Float64() (float64, error) { ++ return strconv.ParseFloat(string(n), 64) ++} ++ ++// Int64 returns the number as an int64. ++func (n Number) Int64() (int64, error) { ++ return strconv.ParseInt(string(n), 10, 64) ++} ++ ++// decodeState represents the state while decoding a JSON value. ++type decodeState struct { ++ data []byte ++ off int // read offset in data ++ scan scanner ++ nextscan scanner // for calls to nextValue ++ savedError error ++ useNumber bool ++} ++ ++// errPhase is used for errors that should not happen unless ++// there is a bug in the JSON decoder or something is editing ++// the data slice while the decoder executes. ++var errPhase = errors.New("JSON decoder out of sync - data changing underfoot?") ++ ++func (d *decodeState) init(data []byte) *decodeState { ++ d.data = data ++ d.off = 0 ++ d.savedError = nil ++ return d ++} ++ ++// error aborts the decoding by panicking with err. ++func (d *decodeState) error(err error) { ++ panic(err) ++} ++ ++// saveError saves the first err it is called with, ++// for reporting at the end of the unmarshal. ++func (d *decodeState) saveError(err error) { ++ if d.savedError == nil { ++ d.savedError = err ++ } ++} ++ ++// next cuts off and returns the next full JSON value in d.data[d.off:]. ++// The next value is known to be an object or array, not a literal. ++func (d *decodeState) next() []byte { ++ c := d.data[d.off] ++ item, rest, err := nextValue(d.data[d.off:], &d.nextscan) ++ if err != nil { ++ d.error(err) ++ } ++ d.off = len(d.data) - len(rest) ++ ++ // Our scanner has seen the opening brace/bracket ++ // and thinks we're still in the middle of the object. ++ // invent a closing brace/bracket to get it out. ++ if c == '{' { ++ d.scan.step(&d.scan, '}') ++ } else { ++ d.scan.step(&d.scan, ']') ++ } ++ ++ return item ++} ++ ++// scanWhile processes bytes in d.data[d.off:] until it ++// receives a scan code not equal to op. ++// It updates d.off and returns the new scan code. ++func (d *decodeState) scanWhile(op int) int { ++ var newOp int ++ for { ++ if d.off >= len(d.data) { ++ newOp = d.scan.eof() ++ d.off = len(d.data) + 1 // mark processed EOF with len+1 ++ } else { ++ c := int(d.data[d.off]) ++ d.off++ ++ newOp = d.scan.step(&d.scan, c) ++ } ++ if newOp != op { ++ break ++ } ++ } ++ return newOp ++} ++ ++// value decodes a JSON value from d.data[d.off:] into the value. ++// it updates d.off to point past the decoded value. ++func (d *decodeState) value(v reflect.Value) { ++ if !v.IsValid() { ++ _, rest, err := nextValue(d.data[d.off:], &d.nextscan) ++ if err != nil { ++ d.error(err) ++ } ++ d.off = len(d.data) - len(rest) ++ ++ // d.scan thinks we're still at the beginning of the item. ++ // Feed in an empty string - the shortest, simplest value - ++ // so that it knows we got to the end of the value. ++ if d.scan.redo { ++ // rewind. ++ d.scan.redo = false ++ d.scan.step = stateBeginValue ++ } ++ d.scan.step(&d.scan, '"') ++ d.scan.step(&d.scan, '"') ++ ++ n := len(d.scan.parseState) ++ if n > 0 && d.scan.parseState[n-1] == parseObjectKey { ++ // d.scan thinks we just read an object key; finish the object ++ d.scan.step(&d.scan, ':') ++ d.scan.step(&d.scan, '"') ++ d.scan.step(&d.scan, '"') ++ d.scan.step(&d.scan, '}') ++ } ++ ++ return ++ } ++ ++ switch op := d.scanWhile(scanSkipSpace); op { ++ default: ++ d.error(errPhase) ++ ++ case scanBeginArray: ++ d.array(v) ++ ++ case scanBeginObject: ++ d.object(v) ++ ++ case scanBeginLiteral: ++ d.literal(v) ++ } ++} ++ ++type unquotedValue struct{} ++ ++// valueQuoted is like value but decodes a ++// quoted string literal or literal null into an interface value. ++// If it finds anything other than a quoted string literal or null, ++// valueQuoted returns unquotedValue{}. ++func (d *decodeState) valueQuoted() interface{} { ++ switch op := d.scanWhile(scanSkipSpace); op { ++ default: ++ d.error(errPhase) ++ ++ case scanBeginArray: ++ d.array(reflect.Value{}) ++ ++ case scanBeginObject: ++ d.object(reflect.Value{}) ++ ++ case scanBeginLiteral: ++ switch v := d.literalInterface().(type) { ++ case nil, string: ++ return v ++ } ++ } ++ return unquotedValue{} ++} ++ ++// indirect walks down v allocating pointers as needed, ++// until it gets to a non-pointer. ++// if it encounters an Unmarshaler, indirect stops and returns that. ++// if decodingNull is true, indirect stops at the last pointer so it can be set to nil. ++func (d *decodeState) indirect(v reflect.Value, decodingNull bool) (Unmarshaler, encoding.TextUnmarshaler, reflect.Value) { ++ // If v is a named type and is addressable, ++ // start with its address, so that if the type has pointer methods, ++ // we find them. ++ if v.Kind() != reflect.Ptr && v.Type().Name() != "" && v.CanAddr() { ++ v = v.Addr() ++ } ++ for { ++ // Load value from interface, but only if the result will be ++ // usefully addressable. ++ if v.Kind() == reflect.Interface && !v.IsNil() { ++ e := v.Elem() ++ if e.Kind() == reflect.Ptr && !e.IsNil() && (!decodingNull || e.Elem().Kind() == reflect.Ptr) { ++ v = e ++ continue ++ } ++ } ++ ++ if v.Kind() != reflect.Ptr { ++ break ++ } ++ ++ if v.Elem().Kind() != reflect.Ptr && decodingNull && v.CanSet() { ++ break ++ } ++ if v.IsNil() { ++ v.Set(reflect.New(v.Type().Elem())) ++ } ++ if v.Type().NumMethod() > 0 { ++ if u, ok := v.Interface().(Unmarshaler); ok { ++ return u, nil, reflect.Value{} ++ } ++ if u, ok := v.Interface().(encoding.TextUnmarshaler); ok { ++ return nil, u, reflect.Value{} ++ } ++ } ++ v = v.Elem() ++ } ++ return nil, nil, v ++} ++ ++// array consumes an array from d.data[d.off-1:], decoding into the value v. ++// the first byte of the array ('[') has been read already. ++func (d *decodeState) array(v reflect.Value) { ++ // Check for unmarshaler. ++ u, ut, pv := d.indirect(v, false) ++ if u != nil { ++ d.off-- ++ err := u.UnmarshalJSON(d.next()) ++ if err != nil { ++ d.error(err) ++ } ++ return ++ } ++ if ut != nil { ++ d.saveError(&UnmarshalTypeError{"array", v.Type(), int64(d.off)}) ++ d.off-- ++ d.next() ++ return ++ } ++ ++ v = pv ++ ++ // Check type of target. ++ switch v.Kind() { ++ case reflect.Interface: ++ if v.NumMethod() == 0 { ++ // Decoding into nil interface? Switch to non-reflect code. ++ v.Set(reflect.ValueOf(d.arrayInterface())) ++ return ++ } ++ // Otherwise it's invalid. ++ fallthrough ++ default: ++ if v.Type() == reflect.TypeOf(Node{}) { ++ // Decoding to Node? Switch to that code ++ v.Set(reflect.ValueOf(d.arrayNode())) ++ return ++ } ++ d.saveError(&UnmarshalTypeError{"array", v.Type(), int64(d.off)}) ++ d.off-- ++ d.next() ++ return ++ case reflect.Array: ++ case reflect.Slice: ++ break ++ } ++ ++ i := 0 ++ for { ++ // Look ahead for ] - can only happen on first iteration. ++ op := d.scanWhile(scanSkipSpace) ++ if op == scanEndArray { ++ break ++ } ++ ++ // Back up so d.value can have the byte we just read. ++ d.off-- ++ d.scan.undo(op) ++ ++ // Get element of array, growing if necessary. ++ if v.Kind() == reflect.Slice { ++ // Grow slice if necessary ++ if i >= v.Cap() { ++ newcap := v.Cap() + v.Cap()/2 ++ if newcap < 4 { ++ newcap = 4 ++ } ++ newv := reflect.MakeSlice(v.Type(), v.Len(), newcap) ++ reflect.Copy(newv, v) ++ v.Set(newv) ++ } ++ if i >= v.Len() { ++ v.SetLen(i + 1) ++ } ++ } ++ ++ if i < v.Len() { ++ // Decode into element. ++ d.value(v.Index(i)) ++ } else { ++ // Ran out of fixed array: skip. ++ d.value(reflect.Value{}) ++ } ++ i++ ++ ++ // Next token must be , or ]. ++ op = d.scanWhile(scanSkipSpace) ++ if op == scanEndArray { ++ break ++ } ++ if op != scanArrayValue { ++ d.error(errPhase) ++ } ++ } ++ ++ if i < v.Len() { ++ if v.Kind() == reflect.Array { ++ // Array. Zero the rest. ++ z := reflect.Zero(v.Type().Elem()) ++ for ; i < v.Len(); i++ { ++ v.Index(i).Set(z) ++ } ++ } else { ++ v.SetLen(i) ++ } ++ } ++ if i == 0 && v.Kind() == reflect.Slice { ++ v.Set(reflect.MakeSlice(v.Type(), 0, 0)) ++ } ++} ++ ++var nullLiteral = []byte("null") ++ ++// object consumes an object from d.data[d.off-1:], decoding into the value v. ++// the first byte ('{') of the object has been read already. ++func (d *decodeState) object(v reflect.Value) { ++ // Check for unmarshaler. ++ u, ut, pv := d.indirect(v, false) ++ if u != nil { ++ d.off-- ++ err := u.UnmarshalJSON(d.next()) ++ if err != nil { ++ d.error(err) ++ } ++ return ++ } ++ if ut != nil { ++ d.saveError(&UnmarshalTypeError{"object", v.Type(), int64(d.off)}) ++ d.off-- ++ d.next() // skip over { } in input ++ return ++ } ++ v = pv ++ ++ // Decoding into nil interface? Switch to non-reflect code. ++ if v.Kind() == reflect.Interface && v.NumMethod() == 0 { ++ v.Set(reflect.ValueOf(d.objectInterface())) ++ return ++ } else if v.Type() == reflect.TypeOf(Node{}) { ++ // Decoding to Node? Switch to that code ++ v.Set(reflect.ValueOf(d.objectNode())) ++ return ++ } ++ ++ // Check type of target: struct or map[string]T ++ switch v.Kind() { ++ case reflect.Map: ++ // map must have string kind ++ t := v.Type() ++ if t.Key().Kind() != reflect.String { ++ d.saveError(&UnmarshalTypeError{"object", v.Type(), int64(d.off)}) ++ d.off-- ++ d.next() // skip over { } in input ++ return ++ } ++ if v.IsNil() { ++ v.Set(reflect.MakeMap(t)) ++ } ++ case reflect.Struct: ++ ++ default: ++ d.saveError(&UnmarshalTypeError{"object", v.Type(), int64(d.off)}) ++ d.off-- ++ d.next() // skip over { } in input ++ return ++ } ++ ++ var mapElem reflect.Value ++ ++ for { ++ // Read opening " of string key or closing }. ++ op := d.scanWhile(scanSkipSpace) ++ if op == scanEndObject { ++ // closing } - can only happen on first iteration. ++ break ++ } ++ if op != scanBeginLiteral { ++ d.error(errPhase) ++ } ++ ++ // Read key. ++ start := d.off - 1 ++ op = d.scanWhile(scanContinue) ++ item := d.data[start : d.off-1] ++ key, ok := unquoteBytes(item) ++ if !ok { ++ d.error(errPhase) ++ } ++ ++ // Figure out field corresponding to key. ++ var subv reflect.Value ++ destring := false // whether the value is wrapped in a string to be decoded first ++ ++ if v.Kind() == reflect.Map { ++ elemType := v.Type().Elem() ++ if !mapElem.IsValid() { ++ mapElem = reflect.New(elemType).Elem() ++ } else { ++ mapElem.Set(reflect.Zero(elemType)) ++ } ++ subv = mapElem ++ } else { ++ var f *field ++ fields := cachedTypeFields(v.Type()) ++ for i := range fields { ++ ff := &fields[i] ++ if bytes.Equal(ff.nameBytes, key) { ++ f = ff ++ break ++ } ++ if f == nil && ff.equalFold(ff.nameBytes, key) { ++ f = ff ++ } ++ } ++ if f != nil { ++ subv = v ++ destring = f.quoted ++ for _, i := range f.index { ++ if subv.Kind() == reflect.Ptr { ++ if subv.IsNil() { ++ subv.Set(reflect.New(subv.Type().Elem())) ++ } ++ subv = subv.Elem() ++ } ++ subv = subv.Field(i) ++ } ++ } ++ } ++ ++ // Read : before value. ++ if op == scanSkipSpace { ++ op = d.scanWhile(scanSkipSpace) ++ } ++ if op != scanObjectKey { ++ d.error(errPhase) ++ } ++ ++ // Read value. ++ if destring { ++ switch qv := d.valueQuoted().(type) { ++ case nil: ++ d.literalStore(nullLiteral, subv, false) ++ case string: ++ d.literalStore([]byte(qv), subv, true) ++ default: ++ d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal unquoted value into %v", subv.Type())) ++ } ++ } else { ++ d.value(subv) ++ } ++ ++ // Write value back to map; ++ // if using struct, subv points into struct already. ++ if v.Kind() == reflect.Map { ++ kv := reflect.ValueOf(key).Convert(v.Type().Key()) ++ v.SetMapIndex(kv, subv) ++ } ++ ++ // Next token must be , or }. ++ op = d.scanWhile(scanSkipSpace) ++ if op == scanEndObject { ++ break ++ } ++ if op != scanObjectValue { ++ d.error(errPhase) ++ } ++ } ++} ++ ++// literal consumes a literal from d.data[d.off-1:], decoding into the value v. ++// The first byte of the literal has been read already ++// (that's how the caller knows it's a literal). ++func (d *decodeState) literal(v reflect.Value) { ++ // All bytes inside literal return scanContinue op code. ++ start := d.off - 1 ++ op := d.scanWhile(scanContinue) ++ ++ // Scan read one byte too far; back up. ++ d.off-- ++ d.scan.undo(op) ++ ++ d.literalStore(d.data[start:d.off], v, false) ++} ++ ++// convertNumber converts the number literal s to a float64 or a Number ++// depending on the setting of d.useNumber. ++func (d *decodeState) convertNumber(s string) (interface{}, error) { ++ if d.useNumber { ++ return Number(s), nil ++ } ++ f, err := strconv.ParseFloat(s, 64) ++ if err != nil { ++ return nil, &UnmarshalTypeError{"number " + s, reflect.TypeOf(0.0), int64(d.off)} ++ } ++ return f, nil ++} ++ ++var numberType = reflect.TypeOf(Number("")) ++ ++// literalStore decodes a literal stored in item into v. ++// ++// fromQuoted indicates whether this literal came from unwrapping a ++// string from the ",string" struct tag option. this is used only to ++// produce more helpful error messages. ++func (d *decodeState) literalStore(item []byte, v reflect.Value, fromQuoted bool) { ++ // Check for unmarshaler. ++ if len(item) == 0 { ++ //Empty string given ++ d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ return ++ } ++ wantptr := item[0] == 'n' // null ++ u, ut, pv := d.indirect(v, wantptr) ++ if u != nil { ++ err := u.UnmarshalJSON(item) ++ if err != nil { ++ d.error(err) ++ } ++ return ++ } ++ if ut != nil { ++ if item[0] != '"' { ++ if fromQuoted { ++ d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ } else { ++ d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)}) ++ } ++ return ++ } ++ s, ok := unquoteBytes(item) ++ if !ok { ++ if fromQuoted { ++ d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ } else { ++ d.error(errPhase) ++ } ++ } ++ err := ut.UnmarshalText(s) ++ if err != nil { ++ d.error(err) ++ } ++ return ++ } ++ ++ v = pv ++ ++ switch c := item[0]; c { ++ case 'n': // null ++ switch v.Kind() { ++ case reflect.Interface, reflect.Ptr, reflect.Map, reflect.Slice: ++ v.Set(reflect.Zero(v.Type())) ++ // otherwise, ignore null for primitives/string ++ } ++ case 't', 'f': // true, false ++ value := c == 't' ++ switch v.Kind() { ++ default: ++ if fromQuoted { ++ d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ } else { ++ d.saveError(&UnmarshalTypeError{"bool", v.Type(), int64(d.off)}) ++ } ++ case reflect.Bool: ++ v.SetBool(value) ++ case reflect.Interface: ++ if v.NumMethod() == 0 { ++ v.Set(reflect.ValueOf(value)) ++ } else { ++ d.saveError(&UnmarshalTypeError{"bool", v.Type(), int64(d.off)}) ++ } ++ } ++ ++ case '"': // string ++ s, ok := unquoteBytes(item) ++ if !ok { ++ if fromQuoted { ++ d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ } else { ++ d.error(errPhase) ++ } ++ } ++ switch v.Kind() { ++ default: ++ d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)}) ++ case reflect.Slice: ++ if v.Type().Elem().Kind() != reflect.Uint8 { ++ d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)}) ++ break ++ } ++ b := make([]byte, base64.StdEncoding.DecodedLen(len(s))) ++ n, err := base64.StdEncoding.Decode(b, s) ++ if err != nil { ++ d.saveError(err) ++ break ++ } ++ v.Set(reflect.ValueOf(b[0:n])) ++ case reflect.String: ++ v.SetString(string(s)) ++ case reflect.Interface: ++ if v.NumMethod() == 0 { ++ v.Set(reflect.ValueOf(string(s))) ++ } else { ++ d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)}) ++ } ++ } ++ ++ default: // number ++ if c != '-' && (c < '0' || c > '9') { ++ if fromQuoted { ++ d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ } else { ++ d.error(errPhase) ++ } ++ } ++ s := string(item) ++ switch v.Kind() { ++ default: ++ if v.Kind() == reflect.String && v.Type() == numberType { ++ v.SetString(s) ++ break ++ } ++ if fromQuoted { ++ d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type())) ++ } else { ++ d.error(&UnmarshalTypeError{"number", v.Type(), int64(d.off)}) ++ } ++ case reflect.Interface: ++ n, err := d.convertNumber(s) ++ if err != nil { ++ d.saveError(err) ++ break ++ } ++ if v.NumMethod() != 0 { ++ d.saveError(&UnmarshalTypeError{"number", v.Type(), int64(d.off)}) ++ break ++ } ++ v.Set(reflect.ValueOf(n)) ++ ++ case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: ++ n, err := strconv.ParseInt(s, 10, 64) ++ if err != nil || v.OverflowInt(n) { ++ d.saveError(&UnmarshalTypeError{"number " + s, v.Type(), int64(d.off)}) ++ break ++ } ++ v.SetInt(n) ++ ++ case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr: ++ n, err := strconv.ParseUint(s, 10, 64) ++ if err != nil || v.OverflowUint(n) { ++ d.saveError(&UnmarshalTypeError{"number " + s, v.Type(), int64(d.off)}) ++ break ++ } ++ v.SetUint(n) ++ ++ case reflect.Float32, reflect.Float64: ++ n, err := strconv.ParseFloat(s, v.Type().Bits()) ++ if err != nil || v.OverflowFloat(n) { ++ d.saveError(&UnmarshalTypeError{"number " + s, v.Type(), int64(d.off)}) ++ break ++ } ++ v.SetFloat(n) ++ } ++ } ++} ++ ++// The xxxInterface routines build up a value to be stored ++// in an empty interface. They are not strictly necessary, ++// but they avoid the weight of reflection in this common case. ++ ++// valueInterface is like value but returns interface{} ++func (d *decodeState) valueInterface() interface{} { ++ switch d.scanWhile(scanSkipSpace) { ++ default: ++ d.error(errPhase) ++ panic("unreachable") ++ case scanBeginArray: ++ return d.arrayInterface() ++ case scanBeginObject: ++ return d.objectInterface() ++ case scanBeginLiteral: ++ return d.literalInterface() ++ } ++} ++ ++// valueNode is like valueInterface but returns a wrapped version that ++// contains metadata about where it decoded from ++func (d *decodeState) valueNode() Node { ++ switch d.scanWhile(scanSkipSpace) { ++ default: ++ d.error(errPhase) ++ panic("unreachable") ++ case scanBeginArray: ++ return d.arrayNode() ++ case scanBeginObject: ++ return d.objectNode() ++ case scanBeginLiteral: ++ return d.literalNode() ++ } ++} ++ ++// arrayInterface is like array but returns []interface{}. ++func (d *decodeState) arrayInterface() []interface{} { ++ var v = make([]interface{}, 0) ++ for { ++ // Look ahead for ] - can only happen on first iteration. ++ op := d.scanWhile(scanSkipSpace) ++ if op == scanEndArray { ++ break ++ } ++ ++ // Back up so d.value can have the byte we just read. ++ d.off-- ++ d.scan.undo(op) ++ ++ v = append(v, d.valueInterface()) ++ ++ // Next token must be , or ]. ++ op = d.scanWhile(scanSkipSpace) ++ if op == scanEndArray { ++ break ++ } ++ if op != scanArrayValue { ++ d.error(errPhase) ++ } ++ } ++ return v ++} ++ ++// arrayNode is like arrayInterface but returns Node. ++func (d *decodeState) arrayNode() Node { ++ var v = make([]Node, 0) ++ node := Node{ ++ Start: d.off, ++ Value: v, ++ } ++ for { ++ // Look ahead for ] - can only happen on first iteration. ++ op := d.scanWhile(scanSkipSpace) ++ if op == scanEndArray { ++ break ++ } ++ ++ // Back up so d.value can have the byte we just read. ++ d.off-- ++ d.scan.undo(op) ++ ++ v = append(v, d.valueNode()) ++ ++ // Next token must be , or ]. ++ op = d.scanWhile(scanSkipSpace) ++ if op == scanEndArray { ++ break ++ } ++ if op != scanArrayValue { ++ d.error(errPhase) ++ } ++ } ++ node.Value = v ++ node.End = d.off ++ return node ++} ++ ++// objectInterface is like object but returns map[string]interface{}. ++func (d *decodeState) objectInterface() map[string]interface{} { ++ m := make(map[string]interface{}) ++ for { ++ // Read opening " of string key or closing }. ++ op := d.scanWhile(scanSkipSpace) ++ if op == scanEndObject { ++ // closing } - can only happen on first iteration. ++ break ++ } ++ if op != scanBeginLiteral { ++ d.error(errPhase) ++ } ++ ++ // Read string key. ++ start := d.off - 1 ++ op = d.scanWhile(scanContinue) ++ item := d.data[start : d.off-1] ++ key, ok := unquote(item) ++ if !ok { ++ d.error(errPhase) ++ } ++ ++ // Read : before value. ++ if op == scanSkipSpace { ++ op = d.scanWhile(scanSkipSpace) ++ } ++ if op != scanObjectKey { ++ d.error(errPhase) ++ } ++ ++ // Read value. ++ m[key] = d.valueInterface() ++ ++ // Next token must be , or }. ++ op = d.scanWhile(scanSkipSpace) ++ if op == scanEndObject { ++ break ++ } ++ if op != scanObjectValue { ++ d.error(errPhase) ++ } ++ } ++ return m ++} ++ ++// objectNode is like object but returns Node. ++func (d *decodeState) objectNode() Node { ++ m := make(map[string]Node) ++ node := Node{ ++ Start: d.off, ++ } ++ for { ++ // Read opening " of string key or closing }. ++ op := d.scanWhile(scanSkipSpace) ++ if op == scanEndObject { ++ // closing } - can only happen on first iteration. ++ break ++ } ++ if op != scanBeginLiteral { ++ d.error(errPhase) ++ } ++ ++ // Read string key. ++ start := d.off - 1 ++ op = d.scanWhile(scanContinue) ++ item := d.data[start : d.off-1] ++ keyEnd := d.off - 1 ++ key, ok := unquote(item) ++ if !ok { ++ d.error(errPhase) ++ } ++ ++ // Read : before value. ++ if op == scanSkipSpace { ++ op = d.scanWhile(scanSkipSpace) ++ } ++ if op != scanObjectKey { ++ d.error(errPhase) ++ } ++ ++ // Read value. ++ val := d.valueNode() ++ val.KeyStart = start ++ val.KeyEnd = keyEnd ++ m[key] = val ++ ++ // Next token must be , or }. ++ op = d.scanWhile(scanSkipSpace) ++ if op == scanEndObject { ++ break ++ } ++ if op != scanObjectValue { ++ d.error(errPhase) ++ } ++ } ++ node.Value = m ++ node.End = d.off ++ return node ++} ++ ++// literalInterface is like literal but returns an interface value. ++func (d *decodeState) literalInterface() interface{} { ++ // All bytes inside literal return scanContinue op code. ++ start := d.off - 1 ++ op := d.scanWhile(scanContinue) ++ ++ // Scan read one byte too far; back up. ++ d.off-- ++ d.scan.undo(op) ++ item := d.data[start:d.off] ++ ++ switch c := item[0]; c { ++ case 'n': // null ++ return nil ++ ++ case 't', 'f': // true, false ++ return c == 't' ++ ++ case '"': // string ++ s, ok := unquote(item) ++ if !ok { ++ d.error(errPhase) ++ } ++ return s ++ ++ default: // number ++ if c != '-' && (c < '0' || c > '9') { ++ d.error(errPhase) ++ } ++ n, err := d.convertNumber(string(item)) ++ if err != nil { ++ d.saveError(err) ++ } ++ return n ++ } ++} ++ ++func (d *decodeState) literalNode() Node { ++ start := d.off - 1 ++ // Can just use the interface version since this has no children ++ node := Node{ ++ Start: start, ++ Value: d.literalInterface(), ++ } ++ node.End = d.off ++ return node ++} ++ ++// getu4 decodes \uXXXX from the beginning of s, returning the hex value, ++// or it returns -1. ++func getu4(s []byte) rune { ++ if len(s) < 6 || s[0] != '\\' || s[1] != 'u' { ++ return -1 ++ } ++ r, err := strconv.ParseUint(string(s[2:6]), 16, 64) ++ if err != nil { ++ return -1 ++ } ++ return rune(r) ++} ++ ++// unquote converts a quoted JSON string literal s into an actual string t. ++// The rules are different than for Go, so cannot use strconv.Unquote. ++func unquote(s []byte) (t string, ok bool) { ++ s, ok = unquoteBytes(s) ++ t = string(s) ++ return ++} ++ ++func unquoteBytes(s []byte) (t []byte, ok bool) { ++ if len(s) < 2 || s[0] != '"' || s[len(s)-1] != '"' { ++ return ++ } ++ s = s[1 : len(s)-1] ++ ++ // Check for unusual characters. If there are none, ++ // then no unquoting is needed, so return a slice of the ++ // original bytes. ++ r := 0 ++ for r < len(s) { ++ c := s[r] ++ if c == '\\' || c == '"' || c < ' ' { ++ break ++ } ++ if c < utf8.RuneSelf { ++ r++ ++ continue ++ } ++ rr, size := utf8.DecodeRune(s[r:]) ++ if rr == utf8.RuneError && size == 1 { ++ break ++ } ++ r += size ++ } ++ if r == len(s) { ++ return s, true ++ } ++ ++ b := make([]byte, len(s)+2*utf8.UTFMax) ++ w := copy(b, s[0:r]) ++ for r < len(s) { ++ // Out of room? Can only happen if s is full of ++ // malformed UTF-8 and we're replacing each ++ // byte with RuneError. ++ if w >= len(b)-2*utf8.UTFMax { ++ nb := make([]byte, (len(b)+utf8.UTFMax)*2) ++ copy(nb, b[0:w]) ++ b = nb ++ } ++ switch c := s[r]; { ++ case c == '\\': ++ r++ ++ if r >= len(s) { ++ return ++ } ++ switch s[r] { ++ default: ++ return ++ case '"', '\\', '/', '\'': ++ b[w] = s[r] ++ r++ ++ w++ ++ case 'b': ++ b[w] = '\b' ++ r++ ++ w++ ++ case 'f': ++ b[w] = '\f' ++ r++ ++ w++ ++ case 'n': ++ b[w] = '\n' ++ r++ ++ w++ ++ case 'r': ++ b[w] = '\r' ++ r++ ++ w++ ++ case 't': ++ b[w] = '\t' ++ r++ ++ w++ ++ case 'u': ++ r-- ++ rr := getu4(s[r:]) ++ if rr < 0 { ++ return ++ } ++ r += 6 ++ if utf16.IsSurrogate(rr) { ++ rr1 := getu4(s[r:]) ++ if dec := utf16.DecodeRune(rr, rr1); dec != unicode.ReplacementChar { ++ // A valid pair; consume. ++ r += 6 ++ w += utf8.EncodeRune(b[w:], dec) ++ break ++ } ++ // Invalid surrogate; fall back to replacement rune. ++ rr = unicode.ReplacementChar ++ } ++ w += utf8.EncodeRune(b[w:], rr) ++ } ++ ++ // Quote, control characters are invalid. ++ case c == '"', c < ' ': ++ return ++ ++ // ASCII ++ case c < utf8.RuneSelf: ++ b[w] = c ++ r++ ++ w++ ++ ++ // Coerce to well-formed UTF-8. ++ default: ++ rr, size := utf8.DecodeRune(s[r:]) ++ r += size ++ w += utf8.EncodeRune(b[w:], rr) ++ } ++ } ++ return b[0:w], true ++} +diff --git a/vendor/github.com/ajeddeloh/go-json/encode.go b/vendor/github.com/ajeddeloh/go-json/encode.go +new file mode 100644 +index 00000000..90782deb +--- /dev/null ++++ b/vendor/github.com/ajeddeloh/go-json/encode.go +@@ -0,0 +1,1194 @@ ++// Copyright 2010 The Go Authors. All rights reserved. ++// Use of this source code is governed by a BSD-style ++// license that can be found in the LICENSE file. ++ ++// Package json implements encoding and decoding of JSON objects as defined in ++// RFC 4627. The mapping between JSON objects and Go values is described ++// in the documentation for the Marshal and Unmarshal functions. ++// ++// See "JSON and Go" for an introduction to this package: ++// https://golang.org/doc/articles/json_and_go.html ++package json ++ ++import ( ++ "bytes" ++ "encoding" ++ "encoding/base64" ++ "math" ++ "reflect" ++ "runtime" ++ "sort" ++ "strconv" ++ "strings" ++ "sync" ++ "unicode" ++ "unicode/utf8" ++) ++ ++// Marshal returns the JSON encoding of v. ++// ++// Marshal traverses the value v recursively. ++// If an encountered value implements the Marshaler interface ++// and is not a nil pointer, Marshal calls its MarshalJSON method ++// to produce JSON. The nil pointer exception is not strictly necessary ++// but mimics a similar, necessary exception in the behavior of ++// UnmarshalJSON. ++// ++// Otherwise, Marshal uses the following type-dependent default encodings: ++// ++// Boolean values encode as JSON booleans. ++// ++// Floating point, integer, and Number values encode as JSON numbers. ++// ++// String values encode as JSON strings coerced to valid UTF-8, ++// replacing invalid bytes with the Unicode replacement rune. ++// The angle brackets "<" and ">" are escaped to "\u003c" and "\u003e" ++// to keep some browsers from misinterpreting JSON output as HTML. ++// Ampersand "&" is also escaped to "\u0026" for the same reason. ++// ++// Array and slice values encode as JSON arrays, except that ++// []byte encodes as a base64-encoded string, and a nil slice ++// encodes as the null JSON object. ++// ++// Struct values encode as JSON objects. Each exported struct field ++// becomes a member of the object unless ++// - the field's tag is "-", or ++// - the field is empty and its tag specifies the "omitempty" option. ++// The empty values are false, 0, any ++// nil pointer or interface value, and any array, slice, map, or string of ++// length zero. The object's default key string is the struct field name ++// but can be specified in the struct field's tag value. The "json" key in ++// the struct field's tag value is the key name, followed by an optional comma ++// and options. Examples: ++// ++// // Field is ignored by this package. ++// Field int `json:"-"` ++// ++// // Field appears in JSON as key "myName". ++// Field int `json:"myName"` ++// ++// // Field appears in JSON as key "myName" and ++// // the field is omitted from the object if its value is empty, ++// // as defined above. ++// Field int `json:"myName,omitempty"` ++// ++// // Field appears in JSON as key "Field" (the default), but ++// // the field is skipped if empty. ++// // Note the leading comma. ++// Field int `json:",omitempty"` ++// ++// The "string" option signals that a field is stored as JSON inside a ++// JSON-encoded string. It applies only to fields of string, floating point, ++// integer, or boolean types. This extra level of encoding is sometimes used ++// when communicating with JavaScript programs: ++// ++// Int64String int64 `json:",string"` ++// ++// The key name will be used if it's a non-empty string consisting of ++// only Unicode letters, digits, dollar signs, percent signs, hyphens, ++// underscores and slashes. ++// ++// Anonymous struct fields are usually marshaled as if their inner exported fields ++// were fields in the outer struct, subject to the usual Go visibility rules amended ++// as described in the next paragraph. ++// An anonymous struct field with a name given in its JSON tag is treated as ++// having that name, rather than being anonymous. ++// An anonymous struct field of interface type is treated the same as having ++// that type as its name, rather than being anonymous. ++// ++// The Go visibility rules for struct fields are amended for JSON when ++// deciding which field to marshal or unmarshal. If there are ++// multiple fields at the same level, and that level is the least ++// nested (and would therefore be the nesting level selected by the ++// usual Go rules), the following extra rules apply: ++// ++// 1) Of those fields, if any are JSON-tagged, only tagged fields are considered, ++// even if there are multiple untagged fields that would otherwise conflict. ++// 2) If there is exactly one field (tagged or not according to the first rule), that is selected. ++// 3) Otherwise there are multiple fields, and all are ignored; no error occurs. ++// ++// Handling of anonymous struct fields is new in Go 1.1. ++// Prior to Go 1.1, anonymous struct fields were ignored. To force ignoring of ++// an anonymous struct field in both current and earlier versions, give the field ++// a JSON tag of "-". ++// ++// Map values encode as JSON objects. ++// The map's key type must be string; the map keys are used as JSON object ++// keys, subject to the UTF-8 coercion described for string values above. ++// ++// Pointer values encode as the value pointed to. ++// A nil pointer encodes as the null JSON object. ++// ++// Interface values encode as the value contained in the interface. ++// A nil interface value encodes as the null JSON object. ++// ++// Channel, complex, and function values cannot be encoded in JSON. ++// Attempting to encode such a value causes Marshal to return ++// an UnsupportedTypeError. ++// ++// JSON cannot represent cyclic data structures and Marshal does not ++// handle them. Passing cyclic structures to Marshal will result in ++// an infinite recursion. ++// ++func Marshal(v interface{}) ([]byte, error) { ++ e := &encodeState{} ++ err := e.marshal(v) ++ if err != nil { ++ return nil, err ++ } ++ return e.Bytes(), nil ++} ++ ++// MarshalIndent is like Marshal but applies Indent to format the output. ++func MarshalIndent(v interface{}, prefix, indent string) ([]byte, error) { ++ b, err := Marshal(v) ++ if err != nil { ++ return nil, err ++ } ++ var buf bytes.Buffer ++ err = Indent(&buf, b, prefix, indent) ++ if err != nil { ++ return nil, err ++ } ++ return buf.Bytes(), nil ++} ++ ++// HTMLEscape appends to dst the JSON-encoded src with <, >, &, U+2028 and U+2029 ++// characters inside string literals changed to \u003c, \u003e, \u0026, \u2028, \u2029 ++// so that the JSON will be safe to embed inside HTML