5132 Commits

Author SHA1 Message Date
Michael Marineau
c329b64082 sys-apps/baselayout: add basic PAM configuration and /etc/hosts
This replaces `pambase` which is awkward to maintain due to all the
different USE flags it supports. Also containers should now be happy
that /etc/hosts is always there and contains `localhost` now.
2016-06-13 13:28:25 -07:00
Geoff Levand
f28ea9c11f Merge pull request #2000 from glevand/for-merge-qemu
profiles/sdk: Build unstable qemu
2016-06-10 09:49:12 -07:00
Geoff Levand
eca18923a4 profiles/sdk: Build unstable qemu
qemu-2.6.0 includes a bug fix for arm64.  Without this the kernel
will hang early in its boot with qenu-system-aarch64.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-06-09 17:15:18 -07:00
Alex Crawford
b0a854c713 Merge pull request #1978 from crawford/gcloud
net-misc/google-cloud-sdk: add gcloud and gsutil
2016-06-08 15:52:00 -07:00
Alex Crawford
8d6d5ac026 Merge pull request #1998 from crawford/waagent
app-emulation/wa-linux-agent: bump to v2.1.3
2016-06-08 14:49:03 -07:00
Alex Crawford
cc782ef304 coreos-base/oem-azure: bump to pick up new waagent 2016-06-08 14:35:23 -07:00
Alex Crawford
4df30b7983 app-emulation/wa-linux-agent: bump to v2.1.3 2016-06-08 14:35:23 -07:00
Michael Marineau
b0dfb7a013 Merge pull request #1999 from marineam/mask
profile: begin explicitly masking packages for prod images
2016-06-08 12:54:38 -07:00
Michael Marineau
bc09907c8c profile: begin explicitly masking packages for prod images
This serves as a sanity check to avoid mistakes like pulling in python.
2016-06-08 12:23:04 -07:00
Michael Marineau
66014289de Merge pull request #1996 from marineam/ntp
NTP 4.2.8_p8
2016-06-03 14:31:16 -07:00
Michael Marineau
7f14e51dea net-misc/ntp: prune old 4.2.8_p7 ebuild 2016-06-03 14:12:55 -07:00
Michael Marineau
16e306eaaf net-misc/ntp: stabilize 4.2.8_p8 on amd64 and arm64 2016-06-03 14:12:00 -07:00
Michael Marineau
d0627d7d49 net-misc/ntp: apply CoreOS changes to 4.2.8_p8 2016-06-03 14:11:08 -07:00
Michael Marineau
5d45972617 net-misc/ntp: import 4.2.8_p8 from upstream 2016-06-03 13:45:45 -07:00
Matthew Garrett
e7a2a92b66 sec-policy/selinux-virt: Grant more permissions on chr_files
apt seems to use character device nodes for a couple of things, so give the full set
of permissions for them when operating in the container's own context.
2016-06-01 14:13:11 -07:00
Alex Crawford
ea43677d10 Merge pull request #1992 from ajeddeloh/andrew
sys-fs/e2fsprogs: Moving to overlay with patch
2016-06-01 10:23:33 -07:00
Nick Owens
79696c3611 Merge pull request #1993 from mischief/kernel-thunder
arm64 thunderx kernel updates
2016-05-31 12:40:25 -07:00
Nick Owens
5951a42dfd Merge pull request #1994 from mischief/rkt-1.7.0
app-emulation/rkt: v1.7.0
2016-05-31 09:21:32 -07:00
Nick Owens
7db26d65c7 app-emulation/rkt: v1.7.0 2016-05-31 08:13:34 -07:00
Nick Owens
3ec60a5790 sys-kernel/coreos-kernel: merge arm64 changes from cavium for thunderx 2016-05-27 14:35:53 -07:00
Nick Owens
fbbfd180b4 sys-kernel/coreos-kernel: enable EXPERT for arm64 2016-05-27 14:35:53 -07:00
Andrew Jeddeloh
e97fde03b8 sys-fs/e2fsprogs: protect existing filesystems
Add -p flag to prevent mke2fs from overwriting exisiting filesystems
when run from a script.
2016-05-27 08:56:47 -07:00
Andrew Jeddeloh
baecad72bc sys-fs/e2fsprogs: Trim unneeded files 2016-05-26 17:36:21 -07:00
Andrew Jeddeloh
eafd56358c sys-fs/e2fsprogs: Move from portage_stable 2016-05-26 17:32:36 -07:00
Nick Owens
a839a4370e app-emulation/docker: set journald build tag for read log support 2016-05-24 15:29:43 -07:00
Nick Owens
53d1cbd6fe sys-apps/systemd: re-enable compat libs for docker 1.10.3 journald support 2016-05-24 15:28:15 -07:00
Matthew Garrett
c3f091fd71 Merge pull request #1986 from mjg59/selinux_fixes
sec-policy/selinux-virt: Allow setattr on devpts ptys and grant pipef…
2016-05-23 16:49:12 -07:00
Matthew Garrett
6dc592af52 sec-policy/selinux-virt: Allow setattr on devpts ptys and grant pipefs access
Policy was blocking the modification of attributes on devpts ptys, making it
impossible to enter a rkt container interactively. Fix that. In addition,
pipefs access is being blocked which makes Docker unhappy. Fix that too.
2016-05-23 16:17:42 -07:00
Alex Crawford
70060e867d Merge pull request #1985 from crawford/tasklimit
Revert "app-emulation/docker: remove new TasksMax limit"
2016-05-23 14:23:05 -07:00
Alex Crawford
148dad4459 Revert "app-emulation/docker: remove new TasksMax limit"
This reverts commit 345ee26b28a12e8866fa64a5ef7fb80c55cf656b.
2016-05-23 14:15:29 -07:00
Michael Marineau
a783189a17 Merge pull request #1984 from marineam/update_engine_arm64
update_engine: enable build for arm64
2016-05-20 14:20:57 -07:00
Michael Marineau
c2b2e46f41 update_engine: enable build for arm64 2016-05-20 12:24:19 -07:00
Michael Marineau
8db2df9a69 Merge pull request #1979 from marineam/update-protobuf
profiles: update protobuf from 1.5 to 1.6
2016-05-20 12:21:24 -07:00
Alex Crawford
9438b0c097 Merge pull request #1983 from marineam/mantle
mantle: update to 0.1.5
2016-05-19 15:24:10 -07:00
Alex Crawford
7c188f6df5 net-misc/google-cloud-sdk: add gcloud 2016-05-19 13:38:31 -07:00
Michael Marineau
09e7641967 mantle: update to 0.1.5 2016-05-19 10:49:04 -07:00
Nick Owens
4c93a20f31 Merge pull request #1982 from mischief/e2fsprogs-botch
profiles: fix e2fsprogs category botch
2016-05-19 10:35:16 -07:00
Nick Owens
c23c9824fe profiles: fix e2fsprogs category botch 2016-05-19 10:33:58 -07:00
Nick Owens
23044cb31f Merge pull request #1981 from mischief/e2fsprogs
profiles: accept newer e2fsprogs to sync with e2fsprogs-libs
2016-05-19 10:25:32 -07:00
Nick Owens
131ae640de profiles: accept newer e2fsprogs to sync with e2fsprogs-libs 2016-05-19 10:11:02 -07:00
Alex Crawford
72ed4d6e59 Merge pull request #1980 from crawford/e2fsprogs
profiles: accept ~arm64 for e2fsprogs
2016-05-19 09:59:33 -07:00
Alex Crawford
81287a2716 profiles: accept ~arm64 for e2fsprogs 2016-05-19 09:53:33 -07:00
Alex Crawford
764c089690 Merge pull request #1977 from crawford/ignition
sys-apps/ignition: bump to v0.6.0
2016-05-18 17:19:54 -07:00
Alex Crawford
0519456d98 Merge pull request #1976 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v1.11.0
2016-05-18 17:19:49 -07:00
Alex Crawford
40b69e1113 sys-apps/ignition: bump to v0.6.0 2016-05-18 17:16:44 -07:00
Alex Crawford
aab6171fe7 Merge pull request #1955 from crawford/ignition
coreos-base/oem-gce: remove legacy scripts
2016-05-18 17:15:55 -07:00
Alex Crawford
569f038f1f coreos-base/coreos-cloudinit: bump to v1.11.0 2016-05-18 17:11:35 -07:00
Michael Marineau
627a2a0cba Merge pull request #1975 from marineam/sha512
profiles: stop disabling SHA512 password hashes in PAM
2016-05-18 16:11:28 -07:00
Michael Marineau
3660e2edce profiles: stop disabling SHA512 password hashes in PAM
Likely inherited from ChromeOS but even for them it is a completely
ridiculous flag to disable. We had SHA512 enabled pre-PAM since shadow
does not have this use flag so this restores previous behavior.
2016-05-18 16:07:07 -07:00
Michael Marineau
365f488275 Merge pull request #1974 from marineam/gpg
coreos-init: update gpg key in coreos-install
2016-05-18 15:36:15 -07:00