mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-11-03 17:51:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
24,194 Commits 620 Branches 437 Tags
Commit Graph

16092 Commits

Author SHA1 Message Date
Flatcar Buildbot
3103ed0d6e app-arch/xz-utils: Sync with Gentoo 
It's from Gentoo commit 3791ad536e966dab33f62614f16b224fd10bf6a2.
 2023-09-27 17:02:43 +02:00
Flatcar Buildbot
ac50591da5 app-arch/tar: Sync with Gentoo 
It's from Gentoo commit 3f0f44a25fd6be2b27bbb0eee982192c399cc360.
 2023-09-27 17:02:43 +02:00
Flatcar Buildbot
88da310180 app-arch/libarchive: Sync with Gentoo 
It's from Gentoo commit 45b40c67c120aadd5474063b1bd2d2cd1833b9d4.
 2023-09-27 17:02:43 +02:00
Flatcar Buildbot
947f98bc8c app-arch/gzip: Sync with Gentoo 
It's from Gentoo commit a2e3e4f5c3a569e9771e0fc150831a7c9182644d.
 2023-09-27 17:02:43 +02:00
Krzesimir Nowak
a5064c2831 net-fs/samba: Apply Flatcar modifications 
- Add a minimal USE flag for only installing libraries
  - Change the Perl run-time dep to build-time only
  - Disable building libraries requiring Python
  - Disable building Perl JSON libraries
  - Limit the size of bundled libraries

Co-authored-by: Dongsu Park <dpark@linux.microsoft.com>
 2023-09-27 10:56:50 +02:00
Dongsu Park
b2f8324050 overlay net-fs/samba: sync with Gentoo 
Update net-fs/samba to 4.18.4, mainly to address CVE-2021-44142,
CVE-2022-1615.

Gentoo ref: 2cecc32967dd95e8c66ded510b89c8aeaf267f90
 2023-09-27 10:56:50 +02:00
Flatcar Buildbot
688c150d69 Update mantle container image to latest HEAD 2023-09-27 08:54:12 +00:00
Dongsu Park
596720375f
Merge pull request #1190 from flatcar/rust-1.72.1-main 
Upgrade dev-lang/rust and virtual/rust in main from 1.72.0 to 1.72.1
 2023-09-27 09:41:31 +02:00
flatcar-ci
c29701af55 New version: main-3739.0.0-nightly-20230926-2100 2023-09-26 21:00:26 +00:00
Mathieu Tortuyaux
6c61372c0d
Merge pull request #1083 from flatcar/tormath1/oem 
sysext: port AWS OEM to systemd sysext image
 2023-09-26 17:03:21 +02:00
Mathieu Tortuyaux
bfaea38865
overlay coreos-base/common-oem-files: translate ami to ec2 
For this vendor, the OEM ID from the oem-release file is different from
the oem.id kernel commandline parameter.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 14:54:57 +02:00
Mathieu Tortuyaux
79b07511e3
overlay coreos-base/misc-files: add ami oem files 
found by booting stable on AWS: `find /usr/share/oem` + checking the
content of files created by base Ignition.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 13:34:09 +02:00
Mathieu Tortuyaux
9205ac98e0
overlay coreos-base/oem-ec2-compat: drop ec2 use 
while this ebuild will be dropped in the near future, we still need to
maintain openstack ebuild.

`flatcar-eks` was a runtime dependency of openstack/brightbox too. I
think it was a mistake ?

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 13:34:09 +02:00
Mathieu Tortuyaux
ce2c0e7475
overlay coreos-base/oem-ami: new sysext image 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 13:34:09 +02:00
Mathieu Tortuyaux
fbc1906e36
overlay coreos-base/common-oem-files: add grub EC2 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 13:34:09 +02:00
Mathieu Tortuyaux
735dfb4001
overlay coreos-base/flatcar-eks: remove oem spec 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 13:34:09 +02:00
Mathieu Tortuyaux
8ba940b931
overlay app-emulation/amazon-ssm-agent: remove oem spec 
- drop the OEM mention
- install things under /usr/share/amazon/ssm
- add systemd unit from the upstream

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-26 13:34:03 +02:00
Flatcar Buildbot
9929f5b294 dev-lang/rust: Update from 1.72.0 to 1.72.1 2023-09-26 09:34:57 +02:00
Dongsu Park
a7e5f1f903 overlay sys-kernel/coreos-modules: delete configs CONFIG_NET_CLS_RSVP* 
Build fails in >= 6.1.55 like below, because upstream stable Kernels
deleted the Kernel configs CONFIG_NET_CLS_RSVP*.

```
 * ERROR: sys-kernel/coreos-modules-6.1.55::coreos failed (configure
   phase):
 *   Requested options not enabled in build:
 *     CONFIG_NET_CLS_RSVP
 *     CONFIG_NET_CLS_RSVP6
```

Fix that by deleting the Kernel configs.
 2023-09-26 09:14:36 +02:00
Flatcar Buildbot
17c4efdbc7 sys-kernel/coreos-sources: Update from 6.1.54 to 6.1.55 2023-09-26 09:14:36 +02:00
Flatcar Buildbot
eddc306c94 Update mantle container image to latest HEAD 2023-09-25 21:00:46 +00:00
flatcar-ci
19a6ca049d New version: main-3738.0.0-nightly-20230925-2100 2023-09-25 21:00:25 +00:00
Krzesimir Nowak
c593d76e7a
Merge pull request #1146 from flatcar/krnowak/vmware-sysext 
Sysext image for VMware OEM
 2023-09-25 14:51:02 +02:00
Flatcar Buildbot
2167131336 Update mantle container image to latest HEAD 2023-09-25 10:48:10 +00:00
Krzesimir Nowak
d98a89536b coreos sys-libs/glibc: Update manifest for changed patch set 2023-09-25 09:49:06 +02:00
flatcar-ci
59f2ca5fc6 New version: main-3735.0.0-nightly-20230922-2100-INTERMEDIATE 2023-09-22 21:00:29 +00:00
Thilo Fromm
8e3144af19
Merge pull request #1171 from flatcar/t-lo/update-glibc-patchlevel 
sys-libs/glibc: update to patchlevel 2.37-rc5
 2023-09-22 17:06:13 +02:00
Flatcar Buildbot
89aca40503 Update mantle container image to latest HEAD 2023-09-22 14:06:28 +00:00
Mathieu Tortuyaux
0b705e9e04
Merge pull request #1168 from flatcar/tormath1/selinux-size 
overlay sys-libs/libsemanage: set compression on
 2023-09-22 16:06:08 +02:00
Thilo Fromm
b7e7da18c3 sys-libs/glibc: Apply Flatcar modifications 
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
  - un-mask amd64 and arm64

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
 2023-09-22 15:16:28 +02:00
Thilo Fromm
9ae20fd41f sys-libs/glibc: import upstream 2.37-r5 
Imported from commit 406ab36652e8f9cac3f6e61990fb00c861a86a28

Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
 2023-09-22 15:04:11 +02:00
Kai Lüke
4272a41039
Merge pull request #1160 from flatcar/kai/fallback-update-key 
sys-kernel/bootengine: Use update key for initrd sysext download
 2023-09-22 12:17:31 +02:00
Kai Lüke
0b14db27b6
Merge pull request #1161 from flatcar/kai/cloudinit-vm-userdata 
coreos-base/coreos-cloudinit: Workaround for user-configvirtfs.service
 2023-09-22 12:17:14 +02:00
Mathieu Tortuyaux
d0562c1e4a
overlay sys-libs/libsemanage: set compression on 
otherwise it blows from 3MB to 33MB on `/usr/lib/selinux/policy/mcs/`
for example.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-22 11:37:11 +02:00
Dongsu Park
13ddc2d85d
Merge pull request #1159 from flatcar/firmware-20230919-main 
Upgrade Linux Firmware in main from 20230804 to 20230919
 2023-09-22 09:36:06 +02:00
flatcar-ci
55f512dd7a New version: main-3734.0.0-nightly-20230921-2100 2023-09-21 21:00:29 +00:00
Kai Lueke
8777c54b0b sys-kernel/bootengine: Use update key for initrd sysext download 
This pulls in https://github.com/flatcar/bootengine/pull/71
to switch the extension download to use the update server and the update
key for verification of the payloads.
 2023-09-21 17:30:38 +02:00
Kai Lueke
8f45b6bb98 coreos-base/coreos-cloudinit: Workaround for user-configvirtfs.service 
This pulls in
https://github.com/flatcar/coreos-cloudinit/pull/24
as a workaround to use Upholds= which eventually starts
user-configvirtfs.service.
 2023-09-21 17:29:38 +02:00
Dongsu Park
8b0e46c1cc overlay sys-kernel/coreos-firmware: update cxgb4 version to 1.27.4.0 
Fix build issues of coreos-firmware, by bumping the cxgb4 firmware
version to 1.27.4.0.
 2023-09-21 16:27:09 +02:00
Flatcar Buildbot
30b42fa62b sys-kernel/coreos-firmware: Update from 20230804 to 20230919 2023-09-21 07:12:51 +00:00
flatcar-ci
4c4ec0226b New version: main-3733.0.0-nightly-20230920-2100 2023-09-20 21:00:37 +00:00
Mathieu Tortuyaux
0d3c1a5131
coreos-base/misc-files: add SELinux config 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
678dfd7f79
sys-apps/semodule-utils: sync with Gentoo 
Commit-Ref: a8d934769f

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
077dd2363e
sec-policys/selinux-dbus: add new package 
it's a dependency from ssh module:
```
Failed to resolve typeattributeset statement at /var/lib/selinux/mcs/tmp/modules/400/ssh/cil:127
Failed to resolve AST
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
af5400ce64
sec-policy/selinux-unconfined: sync with Gentoo 
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
eed7eb6d21
sec-policy/selinux-sssd: sync with Gentoo 
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
206b71a48f
coreos/user-patches: add selinux-container 
apply Flatcar patch (including the kernel_t transition that
should be removed once we have a system labelled)

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
1306dfefec
sec-policy/selinux-container: add new package 
it comes in replacement of selinux-virt

Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
1e2b1c999d
sec-policy/selinux-virt: drop ebuild 
it's now replaced by selinux-container

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
2af995d2dc
coreos/user-patches: add selinux-base-policy 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2023-09-20 12:33:39 +02:00