23004 Commits

Author SHA1 Message Date
David Michael
8d314707a0 bump(metadata/glsa): sync with upstream 2017-04-11 11:54:59 -07:00
David Michael
59963eb0b6 Merge pull request #2512 from dm0-/glsa
Sync GLSAs
2017-04-10 17:53:10 -07:00
David Michael
6938a8f344 Merge pull request #535 from dm0-/glsa
Sync GLSAs
2017-04-10 17:52:57 -07:00
Euan Kemp
dcbc1784f3 app-emulation/docker: update broken link 2017-04-10 16:31:26 -07:00
Euan Kemp
a85d690353 app-emulation/containerd: update for docker 17.04
This corresponds to the versions specified by upstream docker: https://github.com/docker/docker/blob/v17.04.0-ce/hack/dockerfile/binaries-commits#L7
2017-04-10 16:31:26 -07:00
Euan Kemp
39a2594468 app-emulation/containerd: update to use go1.7
As far as I know there's no reason we were using 1.6, and upstream
recommends 1.7 nowadays.
2017-04-10 15:03:15 -07:00
Euan Kemp
d285b1129b app-emulation/docker: bump to 17.04.0-ce 2017-04-10 14:56:30 -07:00
Benjamin Gilbert
cd4e3746cc oem/ami: Drop in favor of plume 2017-04-07 19:44:20 -07:00
David Michael
6dce1e786f profiles: drop arm64 curl accept_keywords 2017-04-07 17:12:37 -07:00
Benjamin Gilbert
c45bd4fac8 coreos-base/coretest: Drop package
Subsumed by kola.
2017-04-07 16:01:19 -07:00
David Michael
e6fd5a7bef bump(dev-libs/libtasn1): sync with upstream 2017-04-07 15:01:36 -07:00
David Michael
5785a6ce97 bump(net-misc/curl): sync with upstream 2017-04-07 14:55:33 -07:00
David Michael
d4bd5db5a4 bump(metadata/glsa): sync with upstream 2017-04-07 14:53:34 -07:00
Geoff Levand
36d2613ba5 Merge pull request #2509 from glevand/for-merge-perl
profile: Enable arm64 perl
2017-04-06 12:32:58 -07:00
Benjamin Gilbert
45dffca9b6 Merge pull request #661 from bgilbert/package-lists
build_image_util: Don't query the $BUILD_DIR vdb
2017-04-06 12:27:45 -07:00
Benjamin Gilbert
f431e7c1ad Merge pull request #659 from bgilbert/unique-build-ids
common: Don't export COREOS_BUILD_ID
2017-04-06 12:25:34 -07:00
Benjamin Gilbert
3e27bdcc45 common: Don't export COREOS_BUILD_ID
5a76e4e5e9027443ef2014d8e1d06e9baa9e50aa started exporting COREOS_BUILD_ID
whenever it was found in version.txt, even if its value was blank. Because
COREOS_BUILD_ID is in ENVIRONMENT_WHITELIST, this caused generated build IDs
to be propagated into the SDK chroot environment and reused for every build
in a "cork enter" session. Stop exporting COREOS_BUILD_ID when we set it
ourselves.

See also 8e754f9c2bd4b4ec6561613ff57c095886877960.
2017-04-06 12:23:51 -07:00
Geoff Levand
91c84f95a7 profile: Enable arm64 perl
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-06 09:59:11 -07:00
Michael Marineau
8ef89c7b15 Merge pull request #2510 from marineam/gangue
mantle: bump to 0.4.0, include gangue
2017-04-05 15:00:50 -07:00
Michael Marineau
0cb85e22b4 mantle: bump to 0.4.0, include gangue 2017-04-05 14:22:39 -07:00
Luca Bruno
51650980eb app-admin/kubelet-wrapper: mark kubelet datadir volume as a recursive mount
So far `/var/lib/kubelet` was mounted as an implicit non-recursive mount.
This changes the wrapper to an explicit recursive mount.

As shown in https://github.com/kubernetes/kubernetes/issues/38498#issuecomment-282493681,
current non-recursive behavior seems to confuse the kubelet which
is incapable of cleaning up resources for orphaned pods, as the
extisting mountpoints for them are not available inside kubelet
chroot.
With `recursive=true`, those mounts are made available in the
chroot and can be unmounted on the host-side from kubelet chroot
via shared back-propagation.

Fixes https://github.com/coreos/bugs/issues/1831
2017-04-05 08:38:55 +00:00
David Michael
79b1f4cd47 Merge pull request #663 from dm0-/signed-tags
Require signed release tags
2017-04-03 14:43:49 -07:00
David Michael
1f2a44214c tag_release: always sign release tags 2017-04-03 14:22:01 -07:00
David Michael
b44460ca0d Merge pull request #662 from dm0-/bootstrap-sigs
Upload package signatures from the bootstrap process
2017-03-31 17:01:36 -07:00
David Michael
266829d7e1 build_toolchains: upload package signatures 2017-03-31 16:50:29 -07:00
David Michael
3a24149f66 bootstrap_sdk: upload package signatures 2017-03-31 16:50:12 -07:00
David Michael
f7a41994f4 Merge pull request #660 from dm0-/signed-binpkg
Sign uploaded binary packages
2017-03-30 17:10:33 -07:00
David Michael
17e4ee2dcd release_util: allow signing uploaded packages 2017-03-30 16:53:15 -07:00
David Michael
e80eddd0c8 release_util: support signing directories 2017-03-30 16:53:10 -07:00
David Michael
6b86520bf4 release_util: store file signatures in their own directory
This allows signing files under paths owned by other users.
2017-03-30 16:52:44 -07:00
Benjamin Gilbert
d0e89d1752 build_image_util: Don't query the $BUILD_DIR vdb
Jenkins uses separate chroots for package and image builds, so
$BUILD_DIR may not have the relevant packages installed.
2017-03-30 15:43:56 -07:00
Euan Kemp
8eb77d504c Merge pull request #2505 from euank/really-r1
sys-kernel/coreos-kernel: correct naming error
2017-03-30 15:39:22 -07:00
Euan Kemp
46ef0c9796 sys-kernel/coreos-kernel: correct naming error 2017-03-30 15:28:13 -07:00
Euan Kemp
a1956771b2 Merge pull request #2504 from euank/cve-2017-7184
sys-kernel/coreos-sources: apply patch for CVE-2017-7184
2017-03-30 14:32:34 -07:00
Euan Kemp
c654aeb054 sys-kernel/coreos-sources: apply patch for CVE-2017-7184 2017-03-30 13:26:13 -07:00
Benjamin Gilbert
d8fb403f69 build_image_util: Fix warnings when building OEM ACIs
INFO    build_oem_aci: Writing coreos_oem_gce_aci_stage_packages.txt
    awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
    INFO    build_oem_aci: Writing coreos_oem_gce_aci_stage_licenses.txt
    awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
2017-03-29 16:31:05 -07:00
Benjamin Gilbert
d579f6f8e1 Merge pull request #2500 from bgilbert/bootengine
sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race
2017-03-29 12:49:31 -07:00
Benjamin Gilbert
22c5664507 sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race 2017-03-29 12:01:18 -07:00
Benjamin Gilbert
1e63ab8ae6 Merge pull request #534 from bgilbert/checkbashisms
bump(dev-util/checkbashisms): sync with upstream
2017-03-28 13:33:14 -07:00
Benjamin Gilbert
3322facbdb bump(dev-util/checkbashisms): sync with upstream
Fixes warning during image_to_vm.sh:

    Unescaped left brace in regex is deprecated, passed through in regex
2017-03-28 13:22:47 -07:00
David Michael
581d483801 Merge pull request #2492 from dm0-/perl-glsa
Update Perl to fix the last GLSA
2017-03-23 19:58:44 -07:00
David Michael
66dca6ab85 Merge pull request #657 from dm0-/perl-glsa
Update Perl to fix the last GLSA
2017-03-23 19:58:35 -07:00
David Michael
9536781af1 Merge pull request #533 from dm0-/perl-glsa
Update Perl to fix the last GLSA
2017-03-23 19:58:25 -07:00
Benjamin Gilbert
50cec95cf4 Merge pull request #2495 from bgilbert/bootengine
sys-kernel/bootengine: bump for first_boot and emergency shell timeout
2017-03-23 19:29:22 -07:00
Benjamin Gilbert
02fc176a86 sys-kernel/bootengine: bump for first_boot and emergency shell timeout
Change first-boot detection to use a file in /boot, and time out starting
the emergency shell after 5 minutes.
2017-03-23 18:58:21 -07:00
Benjamin Gilbert
d234da9ffc Merge pull request #651 from bgilbert/firstboot-file
Set coreos.first_boot based on existence of file in ESP
2017-03-23 18:29:41 -07:00
David Michael
61cc84832e bump(dev-embedded/u-boot-tools): sync with upstream 2017-03-22 16:50:31 -07:00
David Michael
3e90630805 profiles: bump perf after dropping libperl 2017-03-22 12:59:53 -07:00
David Michael
5bc281006c bump(sys-kernel/linux-headers): sync with upstream 2017-03-22 12:55:51 -07:00
David Michael
f6bb291158 bump(dev-util/patchutils): sync with upstream 2017-03-22 12:55:12 -07:00