mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-18 10:27:00 +02:00
Code Issues Packages Projects Releases Wiki Activity
8,481 Commits 632 Branches 394 Tags 167 MiB
077279a0f9
Commit Graph

8481 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Sayan Chowdhury
077279a0f9 Merge pull request #852 from kinvolk/t-lo/sshd-safe-crypto-only 
coreos-base/coreos-init: SSHD: use secure crypto algos only
 2021-03-02 19:40:14 +05:30
Sayan Chowdhury
1eb46344a2 Merge pull request #871 from kinvolk/sayan/multipath-tools-0.8.5 
profiles: Add multipath-tools to ACCEPT_KEYWORDS
 2021-03-02 17:43:20 +05:30
Dongsu Park
ba8d038a68 Merge pull request #824 from kinvolk/runc-1.0.0_rc93-main 
Upgrade Runc in main from 1.0.0_rc92 to 1.0.0_rc93
 2021-03-02 13:06:40 +01:00
Sayan Chowdhury
77a59effe4 Merge pull request #870 from kinvolk/sayan/update-intelmicrcode-20210216 
sys-firmware/intel-microcode: Sync with Gentoo upstream, update to 20210216
 2021-03-02 17:33:19 +05:30
Sayan Chowdhury
2477513a35 Merge pull request #869 from kinvolk/sayan/update-systemd-247.3 
sys-apps/systemd: Bump to v247.3
 2021-03-02 17:29:28 +05:30
Sayan Chowdhury
fc90796de7 Merge pull request #868 from kinvolk/linux-5.10.19-main 
Upgrade Linux Kernel in main from 5.10.18 to 5.10.19
 2021-03-02 15:46:04 +05:30
Dongsu Park
8f866bbe0f Merge pull request #864 from kinvolk/dongsu/optimize-samba 
net-fs/samba: EAPI=7, new USE flags, remove deps on icu
 2021-03-01 17:55:24 +01:00
Dongsu Park
18630b7218 app-emulation/docker-runc: disable NoNewPrivileges options 
Temporarily disable Prctl and InitSeccomp for NoNewPrivileges, to be able
to make docker/runc work with "--security-opt=no-new-privileges".

So far it has worked without disabling NoNewPrivileges until runc
1.0.0-rc92,
which allowed the "selinux" build tag. Since runc 1.0.0-rc93, however,
the selinux build tag is now gone, so selinux is always enabled.
That's why `docker run --security-opt=no-new-privileges` failed.

Until we could figure out its real reason, let's temporarily disable
NoNewPrivilges to make the CI pass.
 2021-03-01 14:17:10 +01:00
Dongsu Park
3d6a652669 app-emulation/docker-runc: adjust Flatcar patch for 1.0.0-rc93 
A Flatcar patch for docker-runc cannot be applied to 1.0.0-rc93.
We need to adjust to build docker-runc 1.0.0-rc93.
 2021-03-01 14:09:35 +01:00
Flatcar Buildbot
b966faf70a app-emulation: Upgrade Runc 1.0.0_rc92 to 1.0.0_rc93 2021-03-01 14:09:35 +01:00
Flatcar Buildbot
91dce4eeea sys-kernel: Upgrade Kernel 5.10.18 to 5.10.19 2021-02-27 07:24:45 +00:00
Sayan Chowdhury
696cde77e2 profiles: Add multipath-tools to ACCEPT_KEYWORDS 
This commit also removes some redundant accept_keywords

Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
 2021-02-26 13:49:25 +00:00
Sayan Chowdhury
54b014bbf4 sys-apps/systemd: Bump to v247.3 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-02-26 12:50:33 +00:00
Sayan Chowdhury
6be3b53918 sys-firmware/intel-microcode: Apply Flatcar patches 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-02-26 11:10:31 +00:00
Sayan Chowdhury
529e6a625c sys-firmware/intel-microcode: Sync with Gentoo upstream 
Gentoo ref: c2804beb21d8dca394fa2b54cb387f4a55ffa491

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-02-26 11:09:36 +00:00
Dongsu Park
0f6b8f8760 profiles: disable regedit for Samba 
Disable unnecessary regedit in samba to minimize the package size.
 2021-02-26 11:14:49 +01:00
Dongsu Park
151de3edfa net-fs/samba: set bundled_libs=ldb 
To minimize the size of bundled libraries of Samba, we should install
only the "ldb" backend by default.
 2021-02-26 11:14:49 +01:00
Dongsu Park
fa1c85c224 net-fs/samba: pulls in icu only if spotlight 
dev-libs/icu is needed only if spotlight is enabled.
If not enabled, we should not pull in icu.
 2021-02-26 11:14:49 +01:00
Dongsu Park
eec42d4c3f net-fs/samba: new USE flags spotlight, regedit, glusterfs, ntvfs 
Introduce a USE flag spotlight, to be able to disable the spotlight
backend by default, as it is not needed by Linux.

Introduce a USE flag rededit, to be able to disable the rededit
tool if needed.

Introduce a USE flag glusterfs, to be able to disable the glusterfs
by default.

Introduce a USE flag ntvfs, to be able to disable the ntvfs-fileserver
by default.

Since the docbook-xsl-stylesheets and libxslt are needed only
at build time, we should move those deps to BDEPEND.
 2021-02-26 11:14:49 +01:00
Dongsu Park
61eb799b82 net-fs/samba: use EAPI=7 
Now that portage was updated to the latest version, we should update
EAPI to 7. It is mainly to allow ebuilds to make BDEPEND contain real
build-time dependencies, not runtime ones.
 2021-02-26 11:14:46 +01:00
Krzesimir Nowak
7dafcfc329 Merge pull request #862 from kinvolk/linux-5.10.18-main 
Upgrade Linux Kernel in main from 5.10.17 to 5.10.18
 2021-02-24 14:44:45 +01:00
Flatcar Buildbot
d27a540639 sys-kernel: Upgrade Kernel 5.10.17 to 5.10.18 2021-02-24 07:30:22 +00:00
Dongsu Park
2b9585a5b0 Merge pull request #858 from kinvolk/dongsu/delete-ctstress-dhcpcd 
delete dhcpcd, containerd-stress
 2021-02-22 16:53:25 +01:00
Dongsu Park
5ad450acf1 app-emulation/containerd: delete containerd-stress 
Each Flatcar production image includes a binary `containerd-stress`,
as a part of torcx tarballs.

However it does not seem to be used anywhere.
It looks like a stress testing tool for containerd, so I don't see a
good reason to keep it.
The binary was there since the beginning, via commit
[fdd926949a10](fdd926949a),
but there is no comment or messages why it was needed.
We can simply remove `containerd-stress`.
 2021-02-22 15:03:17 +01:00
Dongsu Park
6a307e5ae3 coreos-base: delete dhcpcd 
Now that dhcpcd was removed from portage-stable, we can simply delete
dependency on dhcpcd.
 2021-02-22 15:02:36 +01:00
Krzesimir Nowak
a03a06e059 Merge pull request #851 from kinvolk/krnowak/drop-kernel-mirror 
sys-kernel/dracut: Drop the use of mirror://kernel
 2021-02-19 18:12:59 +01:00
Krzesimir Nowak
ce69950563 Merge pull request #855 from kinvolk/linux-5.10.17-main 
Upgrade Linux Kernel in main from 5.10.16 to 5.10.17
 2021-02-19 18:12:25 +01:00
Krzesimir Nowak
04f8155756 Merge pull request #856 from kinvolk/krnowak/catalyst-python3 
dev-util/catalyst: Use python3 in scripts explicitly
 2021-02-19 18:08:40 +01:00
Krzesimir Nowak
e75fe0a01c dev-util/catalyst: Bump the version 2021-02-19 15:03:28 +01:00
Krzesimir Nowak
227ec22a01 dev-util/catalyst: Patch to use python3 explicitly 2021-02-19 15:03:28 +01:00
Flatcar Buildbot
65ee37b78b sys-kernel: Upgrade Kernel 5.10.16 to 5.10.17 2021-02-19 07:24:39 +00:00
Krzesimir Nowak
d904874d70 Merge pull request #853 from kinvolk/krnowak/workflow-fixes 
.github: Minor fixes in kernel update workflow
 2021-02-18 19:58:40 +01:00
Krzesimir Nowak
7d2428e83e .github: Use "Kernel" as a description for Linux kernel updates 2021-02-18 19:37:07 +01:00
Dongsu Park
f54ba66a5b Merge pull request #846 from kinvolk/mauricio/enable_config_bpf_lsm 
sys-kernel: enable kernel config CONFIG_BPF_LSM
 2021-02-18 18:19:13 +01:00
Krzesimir Nowak
e8e2a31ce5 .github: Fix invocation to generate_patches in kernel job 
generate_patches takes three parameters - a category, a package name
and a description. Invoking the function like `generate_patches
sys-kernel coreos-{sources,modules,kernel} Linux` makes "sys-kernel"
to be a category, "coreos-sources" to be a package name and
"coreos-modules" to become a description, while "coreos-kernel" and
"Linux" are simply ignored.

It has worked so far only because coreos-sources was first in the list
and that's where the actual changes in Manifest file happened. Had the
order of the packages been different, the workflow would be
broken. Since only coreos-sources was modified and all worked fine,
simplify the call to generate-patches.
 2021-02-18 16:57:14 +01:00
Krzesimir Nowak
7dd3c27d07 .github: Drop unnecessary semicolons and trailing backslashes 
Looks like it was copied straight from the Makefile.
 2021-02-18 16:34:19 +01:00
Thilo Fromm
6938c8511b coreos-base/coreos-init: SSHD: use secure crypto algos only 
This change updates coreos-init to a version which includes
a new SSHD config to limit crypto to "known secure" algorithms only.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
 2021-02-18 16:21:28 +01:00
Kai Lüke
fcd60ae890 Merge pull request #848 from kinvolk/kai/aws-hostname 
sys-kernel/bootengine: set hostname for EC2 and OpenStack from metadata
 2021-02-18 15:26:00 +01:00
Kai Lüke
b33dcec46f sys-kernel/bootengine: set hostname for OpenStack and EC2 from metadata 
This pulls in
https://github.com/kinvolk/bootengine/pull/21
 2021-02-18 15:25:26 +01:00
Krzesimir Nowak
77dac52cd5 sys-kernel/dracut: Drop the use of mirror://kernel 
The kernel mirror was dropped from the thirdpartymirrors file in
profiles, so it's use needs to be replaced with an address to
kernel.org.
 2021-02-18 10:44:58 +01:00
Dongsu Park
2912b1798c Merge pull request #847 from kinvolk/rust-1.50.0-main 
Upgrade dev-lang/rust in main from 1.49.0 to 1.50.0
 2021-02-17 17:43:56 +01:00
Mauricio Vasquez
c18694fb9d sys-kernel: enable kernel config CONFIG_BPF_LSM 
Enable this option to make it possible to use LSM hooks with BPF.

Signed-off-by: Mauricio Vasquez <mauricio@kinvolk.io>
 2021-02-17 13:35:19 +00:00
Dongsu Park
b649528d47 dev-lang/rust: fix build for Rust 1.50 
The patch for 1.46 causes build errors for 1.50.
That's not needed at all, so simply delete it to fix build issues.

Also sync with upstream Gentoo.
 2021-02-16 17:30:05 +01:00
Flatcar Buildbot
206473170d dev-lang: Upgrade dev-lang/rust 1.49.0 to 1.50.0 2021-02-16 07:41:12 +00:00
Krzesimir Nowak
a475ef9091 Merge pull request #845 from kinvolk/linux-5.10.16-main 
Upgrade Linux Kernel in main from 5.10.15 to 5.10.16
 2021-02-15 13:33:52 +01:00
Krzesimir Nowak
80ed87957e Merge pull request #840 from kinvolk/krnowak/portage-update 
portage update: update portage and related packages to newer versions
 2021-02-15 12:47:42 +01:00
Krzesimir Nowak
32812d8a91 coreos-base/gmerge: Pull in a python3 version of emerge-gitclone 2021-02-15 12:44:33 +01:00
Krzesimir Nowak
ba52f359ef profiles: Unmask dev-libs/ustr 
It is masked in portage-stable, unmask it here since we still
need it.
 2021-02-15 12:44:33 +01:00
Krzesimir Nowak
3ff25e6508 dev-util/catalyst: Apply Flatcar modifications 2021-02-15 12:44:33 +01:00
Krzesimir Nowak
86a5038964 dev-util/catalyst: Drop unnecessary file 2021-02-15 12:44:33 +01:00