mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-17 18:06:59 +02:00
profiles: delete unnecessary base accept_keywords
Clean up unnecessary ebuilds from base accept_keywords like below. Sort alphabetically. app-crypt/efitools: move to sdk app-misc/jq: move to arm64 cross-aarch64-cros-linux-gnu/gcc: move 9.3.0-r1 to arm64 dev-lang/spidermonkey is not needed any more. dev-libs/protobuf 3.5.2 is already stable. dev-libs/elfutils: specify explicit version 0.178 dev-python/boto: specify explicit keywords ~amd64, ~arm64. dev-util/dwarves: specify explicit version 1.19 dev-util/perf 5.8 is already stable. net-misc/curl: move 7.79.1 to arm64 net-nds/rpcbind: specify explicit keywords ~amd64, ~arm64. net-libs/libnftnl 1.2.0-r1 is already stable. net-libs/libmicrohttpd: move from arm64, specify explicit keywords. sec-policy/selinux-base: move to arm64. sec-policy/selinux-base-policy: move to arm64. sec-policy/selinux-unconfined: move to arm64. sec-policy/selinux-virt: move to arm64. sys-apps/checkpolicy: move to arm64. sys-apps/gptfdisk 1.0.7 is already stable. sys-apps/iproute2 5.8.0 is already stable. sys-apps/kexec-tools 2.0.17-r1 is already stable. sys-auth/google-oslogin 20200910.00 is already stable. sys-kernel/dracut 053-r1 is already stable. sys-boot/gnu-efi 3.0.3 is already stable. sys-firmware/edk2-ovmf: move to arm64 sys-fs/dosfstools: specify explicit keywords ~amd64, ~arm64. sys-process/tini: move to arm64 sys-libs/libselinux: already configured in arm64 sys-libs/libsepol: already configured in arm64
This commit is contained in:
Dongsu Park
Dongsu Park
parent
ae2cf75cc5
commit
543f8eb314
@ -2,120 +2,75 @@
|
||||
# Copyright (c) 2013 The CoreOS Authors. All rights reserved.
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
=dev-util/perf-4.9.13 ~amd64
|
||||
|
||||
# Everything needed for the boot engine
|
||||
>=sys-apps/kexec-tools-2.0.4-r1 ~amd64
|
||||
=sys-kernel/dracut-049 **
|
||||
|
||||
# Needed by coreos-oem-gce
|
||||
dev-python/boto
|
||||
|
||||
# efitools and dependency libraries for signing kernel images
|
||||
>=sys-boot/gnu-efi-3.0u ~amd64
|
||||
>=app-crypt/efitools-1.4.1-r2 ~amd64
|
||||
|
||||
# no version marked stable upstream
|
||||
dev-util/checkbashisms
|
||||
|
||||
# jq 1.5-r2 for heap overflow fix
|
||||
# https://bugs.gentoo.org/show_bug.cgi?id=580606
|
||||
# jq 1.6-r3 for CVE-2015-8863
|
||||
>=app-misc/jq-1.5-r2 ~amd64 ~arm64
|
||||
|
||||
# Must use the same version across all architectures
|
||||
=dev-libs/protobuf-2.6.1-r3
|
||||
|
||||
# All versions are ~amd64 and not enabled on arm64
|
||||
=sys-apps/nvme-cli-1.1 **
|
||||
|
||||
# CVE-2017-8779
|
||||
=net-nds/rpcbind-0.2.4-r1
|
||||
|
||||
# Pick up fixes for bugs introduced in 4.0
|
||||
=sys-fs/dosfstools-4.1 **
|
||||
|
||||
# iproute2 4.13 includes a patch to avoid leaking netns mounts in rkt
|
||||
# https://git.kernel.org/pub/scm/linux/kernel/git/shemminger/iproute2.git/commit/?id=d6a4076b6ba6547d7e52c377a7c58c56eb5ea16e
|
||||
=sys-apps/iproute2-4.13.0 ~amd64 ~arm64
|
||||
|
||||
# Upgrade to GCC 9.3.0 to support latest glibc builds
|
||||
=sys-devel/gcc-config-1.9.1 ~amd64 ~arm64
|
||||
=sys-devel/binutils-2.37_p1 ~amd64 ~arm64
|
||||
=sys-libs/binutils-libs-2.37_p1 ~amd64 ~arm64
|
||||
=sys-devel/gcc-8.3.0 ~amd64 ~arm64
|
||||
=sys-devel/gcc-9.3.0-r1 ~amd64 ~arm64
|
||||
=cross-aarch64-cros-linux-gnu/gcc-9.3.0-r1 ~arm64
|
||||
=cross-x86_64-cros-linux-gnu/gcc-9.3.0-r1 ~amd64
|
||||
|
||||
# Force upgrades to work around catalyst problems while upgrading ncurses.
|
||||
=sys-apps/gptfdisk-1.0.3 ~amd64 ~arm64
|
||||
|
||||
# Choose the newer spidermonkey revision to support GCC 8.3.0.
|
||||
# https://bugs.gentoo.org/686744
|
||||
=dev-lang/spidermonkey-1.8.5-r7
|
||||
|
||||
=sys-firmware/edk2-ovmf-201905 ~arm64
|
||||
|
||||
=sys-auth/google-oslogin-20180611 **
|
||||
|
||||
=sys-process/tini-0.18.0 ~arm64
|
||||
|
||||
=sys-libs/libsepol-2.4 **
|
||||
=sys-libs/libselinux-2.4 **
|
||||
=sys-apps/checkpolicy-3.1 **
|
||||
=sec-policy/selinux-base-2.20200818-r2 **
|
||||
=sec-policy/selinux-base-policy-2.20200818-r2 **
|
||||
=sec-policy/selinux-unconfined-2.20200818-r2 **
|
||||
=sec-policy/selinux-virt-2.20200818-r2 **
|
||||
|
||||
=net-misc/openssh-8.7_p1-r1 ~amd64 ~arm64
|
||||
|
||||
=sys-firmware/sgabios-0.1_pre8-r1 ~amd64 ~arm64
|
||||
|
||||
=coreos-devel/fero-client-0.1.1 **
|
||||
|
||||
# Accept unstable host Rust compilers
|
||||
=virtual/rust-1.56.1 ~amd64 ~arm64
|
||||
=dev-lang/rust-1.56.1 ~amd64 ~arm64
|
||||
|
||||
=sys-fs/cryptsetup-2.4.1-r1 ~amd64 ~arm64
|
||||
|
||||
=sys-libs/libseccomp-2.5.0 ~amd64 ~arm64
|
||||
|
||||
>=dev-util/dwarves-1.18 ~amd64
|
||||
>=dev-libs/elfutils-0.178 ~amd64
|
||||
|
||||
=sys-fs/multipath-tools-0.8.5 ~amd64 ~arm64
|
||||
|
||||
=app-arch/zstd-1.4.9 ~amd64 ~arm64
|
||||
|
||||
=net-libs/gnutls-3.7.1 ~amd64 ~arm64
|
||||
|
||||
=net-nds/openldap-2.4.58 ~amd64 ~arm64
|
||||
|
||||
=dev-libs/libxml2-2.9.12-r2 ~amd64 ~arm64
|
||||
|
||||
=dev-libs/libgcrypt-1.9.4 ~amd64 ~arm64
|
||||
|
||||
=net-libs/libnftnl-1.2.0 ~amd64 ~arm64
|
||||
|
||||
=net-misc/curl-7.79.1 ~arm64
|
||||
|
||||
# We need 2.3.2, but it still marked as unstable on arm64. Can't
|
||||
# update the package to a newer revision from gentoo (where it is
|
||||
# already stabilised for both amd64 and arm64) until we move off from
|
||||
# python3.6.
|
||||
=sys-libs/talloc-2.3.2 ~amd64 ~arm64
|
||||
|
||||
# To address security issues like CVE-2021-3770, we need to acccept
|
||||
# keywords for vim 8.2.3428.
|
||||
=app-editors/vim-8.2.3428 ~amd64 ~arm64
|
||||
=app-editors/vim-core-8.2.3428 ~amd64 ~arm64
|
||||
|
||||
=coreos-devel/fero-client-0.1.1 **
|
||||
|
||||
# Accept unstable host Rust compilers
|
||||
=dev-lang/rust-1.56.1 ~amd64 ~arm64
|
||||
=virtual/rust-1.56.1 ~amd64 ~arm64
|
||||
|
||||
# dev-libs/openssl-3.0.0 is still in testing phase at this point
|
||||
=dev-libs/openssl-3.0.0 ~amd64 ~arm64
|
||||
|
||||
# Needed by coreos-oem-gce
|
||||
dev-python/boto ~amd64 ~arm64
|
||||
|
||||
# no version marked stable upstream
|
||||
dev-util/checkbashisms
|
||||
|
||||
=dev-libs/elfutils-0.178 ~amd64
|
||||
|
||||
=dev-libs/libgcrypt-1.9.4 ~amd64 ~arm64
|
||||
|
||||
=dev-libs/libxml2-2.9.12-r2 ~amd64 ~arm64
|
||||
|
||||
=dev-util/dwarves-1.19 ~amd64
|
||||
|
||||
=net-libs/gnutls-3.7.1 ~amd64 ~arm64
|
||||
|
||||
=net-libs/libmicrohttpd-0.9.55 ~amd64 ~arm64
|
||||
|
||||
=net-misc/openssh-8.7_p1-r1 ~amd64 ~arm64
|
||||
|
||||
# To address security issues like CVE-2021-31879, we need to accept
|
||||
# keywords for wget 1.21.2.
|
||||
=net-misc/wget-1.21.2 ~amd64 ~arm64
|
||||
|
||||
=net-nds/openldap-2.4.58 ~amd64 ~arm64
|
||||
|
||||
# CVE-2017-8779
|
||||
=net-nds/rpcbind-0.2.4-r1 ~amd64 ~arm64
|
||||
|
||||
# All versions are ~amd64 and not enabled on arm64
|
||||
=sys-apps/nvme-cli-1.1 **
|
||||
|
||||
# Upgrade to GCC 9.3.0 to support latest glibc builds
|
||||
=sys-devel/binutils-2.37_p1 ~amd64 ~arm64
|
||||
=sys-devel/gcc-config-1.9.1 ~amd64 ~arm64
|
||||
=sys-devel/gcc-8.3.0 ~amd64 ~arm64
|
||||
=sys-devel/gcc-9.3.0-r1 ~amd64 ~arm64
|
||||
=sys-libs/binutils-libs-2.37_p1 ~amd64 ~arm64
|
||||
=cross-x86_64-cros-linux-gnu/gcc-9.3.0-r1 ~amd64
|
||||
|
||||
=sys-firmware/sgabios-0.1_pre8-r1 ~amd64 ~arm64
|
||||
|
||||
=sys-fs/cryptsetup-2.4.1-r1 ~amd64 ~arm64
|
||||
|
||||
# Pick up fixes for bugs introduced in 4.0
|
||||
=sys-fs/dosfstools-4.1 ~amd64 ~arm64
|
||||
|
||||
=sys-fs/multipath-tools-0.8.5 ~amd64 ~arm64
|
||||
|
||||
=sys-libs/libseccomp-2.5.0 ~amd64 ~arm64
|
||||
|
||||
# We need 2.3.2, but it still marked as unstable on arm64. Can't
|
||||
# update the package to a newer revision from gentoo (where it is
|
||||
# already stabilised for both amd64 and arm64) until we move off from
|
||||
# python3.6.
|
||||
=sys-libs/talloc-2.3.2 ~amd64 ~arm64
|
||||
|
||||
Loading…
Reference in New Issue
Block a user