Commit Graph

6575 Commits

Author SHA1 Message Date
Dongsu Park
018f7dc11e sys-apps/baselayout: fix auth issue with pam 1.4
Without the fix, no ssh login works, no console login works.
2020-12-09 18:08:41 +01:00
Dongsu Park
57e725117f sys-libs/pam: use PATCHES for third-party patches
We should use PATCHES for the list of third-party patches, especially
for EAPI=7.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
5515bbfefb sys-auth/polkit: Replace virtual/pam with sys-libs/pam
We are getting rid of the virtual/pam package. The package provided a
dependency on one of pam or openpam. It looks like Gentoo dropped
openpam, making virtual/pam unnecessary. Also, existence of
virtual/pam causes some circular dependencies to manifest during
emerging.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
f8db3e5f92 sys-auth/google-oslogin: Replace virtual/pam with sys-libs/pam
We are getting rid of the virtual/pam package. The package provided a
dependency on one of pam or openpam. It looks like Gentoo dropped
openpam, making virtual/pam unnecessary. Also, existence of
virtual/pam causes some circular dependencies to manifest during
emerging.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
dcb37a9320 app-emulation/open-vm-tools: Update a comment about pam
We are getting rid of the virtual/pam package. The package provided a
dependency on one of pam or openpam. It looks like Gentoo dropped
openpam, making virtual/pam unnecessary. Also, existence of
virtual/pam causes some circular dependencies to manifest during
emerging. This package does not depend on virtual/pam outright, but
let's avoid having an out-of-date comment.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
34d4663480 sys-auth/pambase: Add README.md 2020-12-09 14:51:36 +01:00
Krzesimir Nowak
be676d7d13 sys-auth/pambase: Bump dep versions 2020-12-09 14:51:36 +01:00
Krzesimir Nowak
aec4bfa44f sys-auth/pambase: Update stub version
The version now matches what is in Gentoo, despite being almost, but
not quite, entirely unlike upstream recipe. The rename is needed,
because some packages may depend on a newer pambase after they are
updated.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
035c9ad5ce sys-libs/pam: Add README.md 2020-12-09 14:51:33 +01:00
Krzesimir Nowak
a0156ce756 sys-libs/pam: Make /sbin/unix_chkpwd suid
This is to avoid importing fcaps eclass which adds a dependency on
sys-libs/libcap, which in turn depends on sys-libs/pam. To get out of
this conundrum, we could specify a "-filecaps" use flag for
sys-libs/pam. Problem with this solution would be no capability
override for the binary making it unable to read /etc/shadow. Thus we
make the binary suid. This is strictly less secure than overriding its
capabilities, but I have no idea how to solve it in a less hacky way.
2020-12-08 18:40:03 +01:00
Krzesimir Nowak
660d0f310b sys-libs/pam: Install configuration into /usr
Also provide a tmpfiles fragment to bring it back.
2020-12-08 18:40:03 +01:00
Krzesimir Nowak
77d03afebf sys-libs/pam: Locked accounts functionality 2020-12-08 18:40:03 +01:00
Krzesimir Nowak
e13fd9d00b sys-libs/pam: Add a comment about a base version of the recipe 2020-12-08 18:40:03 +01:00
Krzesimir Nowak
8a585bd57a sys-libs/pam: Import pam 1.5.1 from gentoo
Import sys-libs/pam 1.5.1 from upstream Gentoo, mainly to address
CVE-2020-27780, a flaw in the way it handles empty passwords for
non-existing users. When the user doesn't exist PAM try to authenticate
with root and in the case of an empty password it successfully
authenticate.

https://github.com/linux-pam/linux-pam/issues/284
https://github.com/linux-pam/linux-pam/pull/300
2020-12-08 18:39:58 +01:00
Dongsu Park
f940214eff Merge pull request #729 from kinvolk/dongsu/delete-jpeg
profiles: disable jpeg for qemu
2020-12-07 17:19:10 +01:00
Flatcar Buildbot
a0f2fe0981 dev-lang: Upgrade Go 1.15.5 to 1.15.6 2020-12-07 07:34:41 +00:00
Dongsu Park
b0de6ba96e profiles: disable jpeg for qemu
Qemu has enabled `jpeg` USE flag since the beginning, without any
reason specified. As a result, qemu pulls in unnecessary packages,
`virtual/jpeg` as well as `media-libs/libjpeg-turbo`. However,
Flatcar runs qemu always with `-display none` option. So the `jpeg`
flag is not needed at all.

Simply remove `jpeg` USE flag from qemu.
2020-12-04 16:39:54 +01:00
Dongsu Park
728b8e7495 app-editors/vim: do not create symlink vimdiff for minimal
A symlink `vimdiff` should not be created, if the USE flag `minimal` is
enabled. Otherwise running `vimdiff` results in failure like that:

```
$ vimdiff aaa bbb
This Vim was not compiled with the diff feature.
```
2020-12-04 11:15:40 +01:00
Flatcar Buildbot
6df883d44f app-emulation: Upgrade Containerd 1.4.1 to 1.4.3 2020-12-04 08:25:37 +00:00
Dongsu Park
8416681a02 Merge pull request #723 from kinvolk/linux-5.9.12-main
Upgrade Linux Kernel in main from 5.9.11 to 5.9.12
2020-12-03 17:42:27 +01:00
Kai Lüke
5c767b1d5b coreos-base/update_engine: Point to latest repo state
This pulls in
https://github.com/kinvolk/update_engine/pull/8
to support sending a machine alias to the update server.
2020-12-03 14:27:42 +01:00
Flatcar Buildbot
d148caec5c sys-kernel: Upgrade coreos-kernel 5.9.11 to 5.9.12 2020-12-03 07:24:51 +00:00
Flatcar Buildbot
49c76eee31 app-emulation: Upgrade Docker 19.03.13 to 19.03.14 2020-12-02 07:44:41 +00:00
Dongsu Park
ed8e99c33b .github: use create-pull-request@v3 to fix set-env issues
Github Actions for Rust started failing with following errors:

```
Error: Unable to process command '::set-env name=PULL_REQUEST_NUMBER::718' successfully.
Error: The `set-env` command is disabled. Please upgrade to using
Environment Files or opt into unsecure command execution by setting the
`ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For
more information see:
https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/
```

It happens because we have used peter-evans/create-pull-request@v2,
which did not have a bug fix for the set-env issue.
The bug was fixed in create-pull-request
[v3.4.1](https://github.com/peter-evans/create-pull-request/releases/tag/v3.4.1).
So we just need to update the version to `v3`, which already includes
v3.4.1.
2020-12-01 11:09:27 +01:00
Dongsu Park
6d7d458120 Merge pull request #640 from kinvolk/rust-1.47.0-main
dev-lang: Upgrade Rust 1.46.0 to 1.47.0
2020-11-30 16:18:54 +01:00
Vincent Palmer
7611b33366 Enable BCMGENET as a module on arm64_defconfig-5.9 2020-11-30 08:52:32 +01:00
Kai Lüke
a0b27d994e Merge pull request #716 from shift/shift-patch-1
Enable BCM7XXX_PHY as a module on arm64_defconfig-5.9
2020-11-27 19:05:05 +09:00
Vincent Palmer
1d063987c5 Enable BCM7XXX_PHY as a module on arm64_defconfig-5.9
# Enables Raspberry Pi 4 PHY

The following 1 line change enables the kernel module to be build enabling the Raspberry Pi 4 PHY enabling the on-board NIC.

# How to use

Build it and boot it :)

# Testing done

Validated the config change against known working 5.8.y kernels on the Pi4.
2020-11-27 10:41:26 +01:00
Kai Lüke
cd2e39891e coreos-base/coreos-init: Point to latest repo state
This pulls in
https://github.com/kinvolk/init/pull/32
to change the LTS motd information.
2020-11-27 12:44:14 +09:00
Sayan Chowdhury
6b7d73387a Merge pull request #711 from kinvolk/sayan/fix-dev-container-download-path-release
x11-drivers/nvidia-drivers: Fix the dev container download URL
2020-11-26 17:58:45 +05:30
Thilo Fromm
3f9db23702 Merge pull request #708 from kinvolk/linux-5.9.11-main
Upgrade Linux Kernel in main from 5.9.10 to 5.9.11
2020-11-26 09:21:28 +01:00
Thilo Fromm
eac3b8e818 Merge pull request #704 from kinvolk/t-lo/update-to-glibc-2.32
update to glibc 2.32
2020-11-26 09:20:29 +01:00
Sayan Chowdhury
fd260b2e90 x11-drivers/nvidia-drivers: Fix the dev container download URL
The kola tests fails to download during the release because the
artifacts of the release has not been pushed to the website yet.
This adds the logic to check if the URL is 200, then only download
or else fallback to the GCS bucket url.

This commit also changes a bug with the check to see if nvidia
is installed or required.

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-26 12:45:23 +05:30
Sayan Chowdhury
2c39bb10aa Merge pull request #710 from kinvolk/sayan/add-azure-gpu-support-on-main
Add the support for GPU on Azure
2020-11-25 19:39:02 +05:30
Sayan Chowdhury
9dd4df789e Add the support for GPU on Azure - Flatcar Pro
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-25 18:46:32 +05:30
Thilo Fromm
7e6cb983a8 net-fs/samba-4.11.13: add patch to fix build breakage with glibc-2.32
This commit adds amba-4.11-fix-glibc-2.32-function-collisions.patch
which fixes compile breakage in a test shipped with Samba-4.11.
The test defines functions which are now shipped with glibc-2.32.
2020-11-25 12:41:20 +01:00
Thilo Fromm
d937cff9a7 coreos-devel/fero-client: fix grpc-sys-0.2.3 + glibc-2.32 compile issue
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-25 12:41:20 +01:00
Thilo Fromm
84cca56fbd sys-libs/libselinux: un-break build with >=glibc-2.30
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-25 12:41:09 +01:00
Thilo Fromm
7f781099dd sys-libs/glibc-2.32,targets/sdk: backport to EAPI6, add Flatcar changes
Backport the glibc recipe to EAPI6 to work around BDEPEND emerge
issue, add flatcar specific changes to the build recipe.
Move PYTHON_DEPS to DEPEND so things can build.

Don't run sanity checks in pkg_pretend
(similar change as in glibc-2.29) to prevent
gcc checks when only the binary package is installed.

Also, force the "crypt" use flag for all builds so libcrypt is built.
(Upstream gentoo does the same)

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-25 12:35:53 +01:00
Flatcar Buildbot
8891a27a1e sys-kernel: Upgrade coreos-kernel 5.9.10 to 5.9.11 2020-11-25 07:22:56 +00:00
Haitao Li
af01922714 kernel: Enable HOTPLUG_PCI_ACPI for arm64 2020-11-25 12:33:17 +11:00
Thilo Fromm
ae57f04c83 sys-libs/glibc: import Gentoo upstream 2.32
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-24 20:07:03 +01:00
Thilo Fromm
5b89af81d8 Merge pull request #700 from kinvolk/linux-5.9.10-main
Upgrade Linux Kernel in main from 5.9.8 to 5.9.10
2020-11-24 14:21:07 +01:00
Kai Lüke
aab1e0773c sys-apps/baselayout: Point to latest repo state
This pulls in
https://github.com/kinvolk/baselayout/pull/8
to add tmpfile directives for for /opt and /opt/bin
2020-11-24 14:27:43 +09:00
Flatcar Buildbot
47d4197e87 sys-kernel: Upgrade coreos-kernel 5.9.8 to 5.9.10 2020-11-23 07:22:51 +00:00
Thilo Fromm
7b0bad618f sys-(devel|libs|kernel),profiles: make upstream gdb work, add gcc-9.3.0 changes
This PR includes the necessary changes to upgrade the SDK compiler to gcc-9.3.0.
It also changes the gdb-9.2 recipe to work with the Flatcar SDK.

The changes include:

sys-devel/gdb/gdb-9.2.ebuild: use EAPI6 to work around BDEPEND emerge bug
update sys-libs/nss-usrfiles to nss-usrfiles-2.30.ebuild to support glibc > 2.29
update sys-kernel/README.md to call out need for updating kernel-headers, perf
add sys-libs/glibc/README.md outlining our changes to the glibc recipe
update profiles/coreos/base/package.accept_keywords to include new toolchain

The change also adds a README to
sys-libs/glibc/README.md
and it improves on a README in
sys-kernel/README -> sys-kernel/README.md

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:51:35 +01:00
Thilo Fromm
abbb97f075 sys-devel: import upstream gdb-9.2, strace-5.9
Import upstream recipes to enable gcc-9.3.0 builds.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:35:35 +01:00
Kai Lüke
9f84992c21 Merge pull request #689 from kinvolk/kai/extend-filesystem-race
coreos-base/coreos-init: Update to latest repository state
2020-11-18 20:43:55 +09:00
Kai Lüke
f3d421f45d coreos-base/coreos-init: Update to latest repository state
This pulls in
https://github.com/kinvolk/init/pull/31
to make extend-filesystems more robust against a race.
2020-11-18 20:43:30 +09:00
Dongsu Park
233ba141b8 Merge pull request #690 from kinvolk/dongsu/sdk-dwarves
profiles: make SDK include dev-util/dwarves
2020-11-18 12:33:25 +01:00