14675 Commits

Author SHA1 Message Date
Dongsu Park
2b733fd76a sys-apps/shadow: update to 4.11.1
Sync with Gentoo to update sys-apps/shadow to 4.11.1, mainly to address
CVE-2013-4235.

Gentoo ref: defe2a377e43a756441b183b66e2c4aae2be27b5
2022-02-21 15:51:16 +01:00
Krzesimir Nowak
b30e3d52ee eclass/mono-env: Sync with gentoo
It's from gentoo commit 5f1f870f36da4f0739058b1f36c939e7ec53f3b3.
2022-02-21 12:13:32 +01:00
Krzesimir Nowak
46fdaf3fd7 eclass/alternatives: Sync with gentoo
It's from gentoo commit 1ade252f652cfba4068bb2275e0b24e1175ee924.
2022-02-21 12:13:32 +01:00
Kai Lueke
3d5309794a sys-apps/ignition: prevent races with udev
This pulls in
https://github.com/flatcar-linux/ignition/pull/35
to prevent boot failures such as fsck running while udev was still
processing the disk changes, and thus failing when the /dev/disk/
symlink is shortly gone.
2022-02-21 11:12:24 +01:00
Thilo Fromm
3219bd9035 Merge pull request #1661 from flatcar-linux/t-lo/bootengine-fix-container-build
sys-kernel/bootengine: fix containerised builds
2022-02-21 10:42:39 +01:00
Kai Lüke
a8c00f42d3 Merge pull request #1652 from flatcar-linux/kai/use-package-users
sys-apps/baselayout: remove duplicates of acct-user|group
2022-02-18 18:16:29 +01:00
Thilo Fromm
8adf98c2c8 sys-kernel/bootengine: fix containerised builds
Bump CROS_WORKON to include
https://github.com/flatcar-linux/bootengine/pull/36
to fix an issue with dracut in containerised builds.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2022-02-18 18:00:50 +01:00
Mathieu Tortuyaux
e7923114db Merge pull request #1659 from flatcar-linux/tormath1/sqlite
dev-db/sqlite: skip `sqlite3` installation
2022-02-18 17:51:09 +01:00
Mathieu Tortuyaux
121cc4e28f profiles/coreos/make: add sqlite3 to INSTALL_MASK
this prevents the installation of `/usr/bin/sqlite3` cli provided by
`dev-db/sqlite`.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-02-18 17:48:18 +01:00
Krzesimir Nowak
45bd9ff89e eclass: Drop unused eclasses 2022-02-18 13:26:37 +01:00
Dongsu Park
8dffb05eb7 Merge pull request #291 from flatcar-linux/dongsu/bpftool
dev-util/bpftool: import from Gentoo
2022-02-18 11:53:37 +01:00
Krzesimir Nowak
05ffa99fbe Merge pull request #290 from flatcar-linux/krnowak/pkg-updates-2011
Update/drop eclasses from 2011
2022-02-18 10:47:13 +01:00
Kai Lueke
14bf508412 sys-apps/baselayout: remove duplicates of acct-user|group
This pulls in
https://github.com/flatcar-linux/baselayout/pull/23
to remove user entries which get safely created through
https://github.com/flatcar-linux/scripts/pull/227
using the acct-user ID allocations for systemd-sysusers.
2022-02-18 10:21:11 +01:00
Dongsu Park
5531aed931 changelog: add changelog for bpftool 5.15.8 2022-02-18 07:36:32 +01:00
Dongsu Park
11a2a85b79 dev-util/bpftool: import from Gentoo
Import a new package dev-util/bpftool from Gentoo, to provide bpftool
in the production images.
2022-02-17 16:23:50 +01:00
Dongsu Park
a85e311aca coreos-base/hard-host-depends: add docutils, patchutils
Add dev-python/docutils, dev-util/patchutils to hard-host-depends.
Without adding those in the SDK, the new package dev-util/bpftool would
end up pulling in the new dependencies into the production images, which
should not happen.
2022-02-17 13:52:47 +01:00
Dongsu Park
0fc96039a9 profiles: force enable bpftool for arm64
As dev-util/bpftool does not have a keyword arm64, we need to force
enable arm64 keyword for bpftool.
2022-02-17 13:49:22 +01:00
Dongsu Park
9b9ac5ea39 coreos-base/coreos: add dev-util/bpftool
Get dev-util/bpftool included in the production images by default.
2022-02-17 13:48:42 +01:00
Dongsu Park
f9c6c3fc09 Merge pull request #289 from flatcar-linux/dongsu/glsa-20220216
metadata: update GLSA metadata 2022-02-16
2022-02-17 11:12:40 +01:00
Krzesimir Nowak
c5dbf4fc5b eclass/savedconfig: Sync with gentoo
It's from gentoo commit eb71dfec11e09ae40ae90f27305948097b6591a2.
2022-02-17 11:01:48 +01:00
Krzesimir Nowak
cccd682d0e eclass/vim-doc: Sync with gentoo
It's from gentoo commit d1d130bae55780d7a710dcaef4df63b8bf6192fa.
2022-02-17 11:01:48 +01:00
Krzesimir Nowak
60e27b7d97 eclass: Drop unused eclasses 2022-02-17 11:01:48 +01:00
Krzesimir Nowak
6d0d5625f1 Merge pull request #1657 from flatcar-linux/linux-5.15.24-main
Upgrade Linux Kernel in main from 5.15.23 to 5.15.24
2022-02-17 10:23:18 +01:00
Kai Lüke
81fd6a88a2 Merge pull request #1651 from flatcar-linux/kai/use-networkd-conf-drop-in
Replace systemd patch by a drop-in file
2022-02-17 10:09:32 +01:00
Kai Lueke
584693874b Replace systemd patch by a drop-in file
This pulls in
https://github.com/flatcar-linux/init/pull/61
and
https://github.com/flatcar-linux/baselayout/pull/22
to use a drop-in file instead of the systemd patch.
2022-02-17 10:08:43 +01:00
Dongsu Park
5b1acafa48 Merge pull request #1650 from flatcar-linux/containerd-1.6.0-main
Upgrade Containerd in main from 1.5.9 to 1.6.0
2022-02-17 09:12:03 +01:00
Flatcar Buildbot
52e8cfc8f2 sys-kernel: Upgrade Kernel 5.15.23 to 5.15.24 2022-02-17 07:22:23 +00:00
Dongsu Park
781ebfb45b changelog: add changelog for libarchive 3.5.3 2022-02-16 15:55:36 +01:00
Dongsu Park
91d9b4fb86 app-arch/libarchive: update to 3.5.3
Update app-arch/libarchive to 3.5.3 that fixes CVE-2021-36976,
as well as remaining issues w.r.t CVE-2021-31566.
2022-02-16 15:55:36 +01:00
Dongsu Park
d79bbf0c28 metadata: update GLSA metadata 20220216 2022-02-16 15:16:37 +01:00
Flatcar Buildbot
16e00441cb app-emulation: Upgrade Containerd 1.5.9 to 1.6.0 2022-02-16 11:20:20 +00:00
Dongsu Park
97a33ad7fa changelog: add changelog for cifs-utils 6.13 2022-02-16 09:44:29 +01:00
Dongsu Park
a0a787f0ba net-fs/cifs-utils: update to 6.13-r1
Update net-fs/cifs-utils to 6.13-r1, mainly to address CVE-2021-20208.
2022-02-16 09:44:29 +01:00
Jeremi Piotrowski
5228888a5c profiles/coreos: move gnuefi systemd USE flag to target
SDK bootstrap is failing with:

  Message: sbat-distro (from ID):

  ../systemd-stable-250.3/src/boot/efi/meson.build:189:24: ERROR: Problem encountered: Required sbat-distro option not set and autodetection failed

The gnuefi USE flag controls whether bootctl and systemd-boot are built, but we
only need those on the target. Currently the USE flag is set for SDK as well,
so move it to coreos/targets/generic.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-02-16 07:57:38 +01:00
Kai Lüke
330a7461fb Merge pull request #1636 from JAORMX/enable-auditd
Add auditd package and systemd unit
2022-02-15 20:38:49 +01:00
Kai Lüke
270806ad24 Update changelog/changes/2022-02-15-auditd.md 2022-02-15 20:33:33 +01:00
Krzesimir Nowak
b8505e5d89 profiles: Override UIDs and GIDs where we differ grom Gentoo
These mostly are UIDs and GIDs that we have allocated before we picked
up changes from Gentoo.
2022-02-15 17:35:28 +01:00
Krzesimir Nowak
f186c4720d sys-apps/baselayout: Bump
Add missing entries to passwd and group.

Updated netperf needs netperf user and group. Updated systemd needs
various systemd users and groups. Dnsmasq also seems to require its
own user/group.

All this is added to prevent systemd-sysusers adding these to
/etc/passwd. And systemd-sysusers adds these, because the updated
user/group eclass in portage-stable now drops configuration files into
/usr/lib/sysusers.d. Maybe at some point we will switch over to
(patched?) systemd-sysusers, so this catch-up game won't be necessary,
but we are not there yet.
2022-02-15 17:35:28 +01:00
Krzesimir Nowak
ffe433d726 acct-user/systemd-resolve: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
93d0781752 acct-user/systemd-network: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
9c1530253c acct-user/systemd-journal-remote: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
d42e47d064 acct-group/systemd-resolve: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
30c69343a3 acct-group/systemd-network: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
a1b82b904d acct-group/systemd-journal-remote: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
4861afd9da acct-group/systemd-journal: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
b99e12ebee acct-group/render: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
90dee36472 acct-group/input: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
5fba306ff0 acct-group/dialout: Add from gentoo
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
32053a1d5e eclass/acct-group: Sync with gentoo
It's from gentoo commit 84b3ffe79a9699b2246adfcfda74f39c1b577651.
2022-02-15 17:16:07 +01:00
Krzesimir Nowak
4897ff4093 eclass/acct-user: Sync with gentoo
It's from gentoo commit 84980841c249b53f55168c5ed1eb1812c42d875e.
2022-02-15 17:16:07 +01:00