23004 Commits

Author SHA1 Message Date
Sayan Chowdhury
eeb1964d2b Merge pull request #964 from kinvolk/sayan/update-to-qemu-5.2.0
app-emulation: update qemu to 5.2.0
2021-04-26 17:11:35 +05:30
Sayan Chowdhury
8f019deb57 dev-libs/libxml2: Sync with Gentoo upstream; updates to 2.9.10-r5
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-26 14:59:18 +05:30
Sayan Chowdhury
b99aa9cdda net-misc/curl: Sync with gentoo upstream; updates to 7.76.1
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-26 14:46:39 +05:30
Flatcar Buildbot
c1582b4c19 dev-lang: Upgrade Go 1.16.2 to 1.16.3 2021-04-26 07:29:05 +00:00
Sayan Chowdhury
dc9e44acf9 profiles: Add accept keywords for openldap
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-26 06:45:00 +00:00
Dongsu Park
32db49b027 Merge pull request #970 from kinvolk/linux-5.10.32-main
Upgrade Linux Kernel in main from 5.10.31 to 5.10.32
2021-04-23 19:01:49 +02:00
Thilo Fromm
95ae4c90b7
Merge pull request #124 from kinvolk/t-lo/fix-sdk-bootstrap-part-2
bootstrap_sdk: use local SDK ebuilds for stage1 (part 2)
alpha-2857.0.0
2021-04-23 16:24:21 +02:00
Thilo Fromm
11e862e2d5 jenkins/sdk.sh: add stage1 portage and overlay refs
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2021-04-23 16:23:10 +02:00
Thilo Fromm
8877d7adcd bootstrap_sdk: use local SDK ebuilds for stage1
This change uses portage-stable and coreos-overlay from the local SDK
chroot (from /var/lib/gentoo/repos) in the stage 1 SDK bootstrap build.
This is part 2 of the SDK bootstrap stage 1 fix (part 1 is covered in
64d8a73ac09853a4b9b813b53299d37569c35071), which ensures stage 1 does
not introduce any changes in its ebuilds over the seed SDK.

The change also introduces an option to consciously divert from the
above enforcement by use of command line parameters:

--stage1_overlay_ref <gitref> will check out coreos-overlay and use
                                <gitref> for stage 1 instead of the
                                local SDK's
                                /var/lib/gentoo/repos/coreos-overlay

--stage1_portage_ref <gitref> will check out portage-stable and use
                                <gitref> for stage 1 instead of the
                                local SDK's
                                /var/lib/gentoo/repos/gentoo

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2021-04-23 16:23:03 +02:00
Sayan Chowdhury
48cf59679c app-emulation/qemu: Apply Flatcar patches
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-23 11:33:08 +00:00
Sayan Chowdhury
45110250e9 app-emulation/qemu: Sync with Gentoo upstream
Link1: 3452fc9c05

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-23 11:33:06 +00:00
Kai Lüke
f39655a823 Merge pull request #965 from kinvolk/kai/drop-rkt
Drop app-emulation/rkt and app-admin/kubelet-wrapper
2021-04-23 12:40:04 +02:00
Kai Lüke
0a0889852d Merge pull request #958 from kinvolk/kai/gce-oem-nspawn
coreos-base/oem-gce: use systemd-nspawn to run the GCE daemon
2021-04-23 12:39:36 +02:00
Flatcar Buildbot
349473393c sys-kernel: Upgrade Kernel 5.10.31 to 5.10.32 2021-04-22 07:15:14 +00:00
Kai Lüke
407c665d51 Drop app-emulation/rkt and app-admin/kubelet-wrapper
The rkt container runtime is deprecated and not used anymore except
for the kubelet-wrapper script. This script can't be ported to Docker
because it is used by the user with rkt-specific arguments and it is
only a wrapper around the deprecated hyperkube images (and has been
broken for the last K8s releases). The recommended way is to run the
kubelet binary directly on the host.
2021-04-22 00:09:04 +02:00
Kai Lüke
bc5e02d65e coreos-base/oem-gce: use systemd-nspawn to run the GCE daemon
The GCE daemon container was run with rkt from an ACI tar ball.
To replace rkt with systemd-nspawn, extract the tar ball to an
image and run the daemon as systemd-nspawn container.
2021-04-21 17:44:01 +02:00
Marga Manterola
d20a30d6c8 Merge pull request #961 from kinvolk/marga-kinvolk/optional-hostname
sys-kernel/bootengine: make hostname units optional
2021-04-21 16:32:34 +02:00
Sayan Chowdhury
f7be705cdc net-nds/openldap: Sync with upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-21 16:15:11 +05:30
Dongsu Park
8a54f23394 Merge pull request #960 from kinvolk/dongsu/gnutls-3.7.1
profiles: accept keywords for net-libs/gnutls
2021-04-21 11:06:26 +02:00
Dongsu Park
9b2bb03438 Merge pull request #164 from kinvolk/dongsu/gnutls-3.7.1
net-libs/gnutls: update to 3.7.1
2021-04-21 11:06:06 +02:00
Dongsu Park
dd4910f801 Merge pull request #957 from kinvolk/linux-5.10.31-main
Upgrade Linux Kernel in main from 5.10.26 to 5.10.31
2021-04-20 18:27:27 +02:00
Margarita Manterola
2b7b075998 sys-kernel/bootengine: make hostname units optional
Having the hostname units as required by the initrd.target meant that if
the unit failed (for example because the network was or the metadata
service were down), the machine wouldn't start. By making it a "wants"
rather than a "requires" we allow this unit to fail without disrupting
the whole boot.
2021-04-20 18:25:41 +02:00
Flatcar Buildbot
1a279015ec sys-kernel: Upgrade Kernel 5.10.26 to 5.10.31 2021-04-20 14:01:57 +02:00
Dongsu Park
818e27951e Merge pull request #959 from kinvolk/dongsu/go-1.16-default
Set the default Go version to 1.16
2021-04-20 13:59:31 +02:00
Dongsu Park
39e9a99528 profiles: accept keywords for net-libs/gnutls
To be able to build gnutls 3.7.1, which is still not stable, we need to
accept keywords ~amd64 and ~arm64.
2021-04-20 10:26:19 +02:00
Dongsu Park
226a7191dc net-libs/gnutls: update to 3.7.1
Update gnutls to 3.7.1, mainly to address security vulnerabilities:
* CVE-2021-20231
* CVE-2021-20232
2021-04-20 10:02:23 +02:00
Dongsu Park
3fb5511b30 app-admin/updateservicectl: set COREOS_GO111MODULE to off
app-admin/updateservicectl also belongs to the cases where Go module is
not supported due to its old source code.
2021-04-19 17:45:08 +02:00
Dongsu Park
f9ff6599a9 app-emulation/acbuild: set COREOS_GO111MODULE to off
app-emulation/acbuild also belongs to the cases where Go module is not
supported due to its old source code.
2021-04-19 17:44:17 +02:00
Dongsu Park
9541ac9210 app-emulation/cri-tools: default to the default COREOS_GO_VERSION
We do not need to set COREOS_GO_VERSION to a specific version, unless
it is necessary to avoid build issues in certain cases like Docker.
Simply remove COREOS_GO_VERSION from the ebuild of cri-tools.
2021-04-19 17:43:08 +02:00
Dongsu Park
6b83baa45f eclass: update COREOS_GO_VERSION to 1.16
We need to update COREOS_GO_VERSION in eclass files to 1.16, to make
builds work with Go 1.16 by default.
2021-04-19 17:42:19 +02:00
Kai Lüke
2ef596ded0 Merge pull request #915 from kinvolk/sayan/update-to-openssl-1.1.1k
dev-libs/openssl: Sync with Gentoo upstream
2021-04-19 13:16:27 +02:00
Sayan Chowdhury
ad6568b1f8 dev-libs/openssl: Apply Flatcar changes
- Drop binddist from RESTRICT variable
- Drop pkg_postinst
- Create /etc/ssl with tmpfiles (and package it for the SDK).

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 12:54:34 +02:00
Sayan Chowdhury
a005bf1e34 dev-libs/openssl: Sync with Gentoo upstream
Sync ref: 1b9f956295

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 12:54:34 +02:00
Dongsu Park
c3d14adced Merge pull request #941 from kinvolk/sayan/update-go-1.16
dev-lang/go: Bump the default Go version to 1.16
2021-04-19 12:03:33 +02:00
Sayan Chowdhury
8ab974edb4 .github: Bump Golang version to 1.16 for Github Actions
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:24 +02:00
Sayan Chowdhury
44f43b4f7f app-emulation/amazon-ssm-agent: set env GO111MODULE to "off"
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:24 +02:00
Sayan Chowdhury
2a08005843 dev-lang/go: Update the manifest of golang
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:23 +02:00
Sayan Chowdhury
6d53f9d3bd Add the GO111MODULE
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:01 +02:00
Sayan Chowdhury
5d0a558423 dev-lang/go: Bump Go to 1.16.2
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:01 +02:00
Dongsu Park
301cfa8be7 Merge pull request #163 from kinvolk/sayan/update-dnsmasq
net-dns/dnsmasq: Sync with Gentoo upstream; updates to 2.83
2021-04-19 11:49:18 +02:00
Dongsu Park
08e8dd1fed Merge pull request #162 from kinvolk/sayan/update-git-2.26.3
dev-vcs/git: Sync with upstream; updates to 2.26.3
2021-04-19 11:45:20 +02:00
Mathieu Tortuyaux
09f5852e3e Merge pull request #947 from kinvolk/tormath1/update-cri-tools
app-emulation/cri-tools: update checksums
2021-04-12 18:12:40 +02:00
Mathieu Tortuyaux
9d61ce382e app-emulation/cri-tools: update checksums 2021-04-12 15:32:05 +02:00
Sayan Chowdhury
6cef7c175f eclass: Add the eclasses required for the LUA suite
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-09 16:36:37 +05:30
Sayan Chowdhury
ec5a1a7d7d net-dns/dnsmasq: Sync with Gentoo upstream
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2021-04-09 11:02:46 +00:00
Marga Manterola
19a6d97982 Merge pull request #935 from kinvolk/marga-kinvolk/bootengine-iscsi
sys-kernel/bootengine: Enable iSCSI netroot devices on Flatcar
2021-04-09 11:07:52 +02:00
Dongsu Park
c91afd01bf Merge pull request #160 from kinvolk/dongsu/sqlite-3.34.1
dev-db/sqlite: update to 3.34.1
2021-04-07 13:56:08 +02:00
Sayan Chowdhury
de9449483a net-dns/dnsmasq: Sync with Gentoo upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-07 11:47:29 +00:00
Sayan Chowdhury
ac44bd348c dev-vcs/git: Sync with upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-07 11:40:34 +00:00
Margarita Manterola
ca608aaf52 sys-kernel/bootengine: Enable iSCSI netroot devices on Flatcar
This change pulls in the latest bootengine version, that enables ISCSI
support in dracut and avoids tearing down the network when using netroot

See https://github.com/kinvolk/bootengine/pull/22 for more information.
2021-04-07 12:34:09 +02:00