14524 Commits

Author SHA1 Message Date
Sayan Chowdhury
11e3f9fa72 Merge pull request #2119 from flatcar-linux/sayan/update-shadow-4.12.2
sys-apps/shadow: Sync with Gentoo upstream; updates to 4.12.3
2022-08-29 21:07:36 +05:30
Mathieu Tortuyaux
9bc6270a14 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-29 11:11:27 +02:00
Mathieu Tortuyaux
0de477a949 coreos-base/coreos-init: bump commit ID
this pulls the wireguard exclusion from systemd-networkd management on
VMWare.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-29 11:08:58 +02:00
Sayan Chowdhury
25bf8d60c4 sys-apps/shadow: Add the CVE for shadow 4.12.3
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-26 20:17:29 +05:30
Sayan Chowdhury
a48628c1e3 sys-apps/shadow: Add the changelog for shadow 4.12.3
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-26 20:17:27 +05:30
Flatcar Buildbot
f05275612e sys-kernel: Upgrade Kernel 5.15.62 to 5.15.63 2022-08-26 07:28:33 +00:00
Dongsu Park
94b296e9a2 sys-apps/shadow: Apply Flatcar modifications
- Carry over our custom tmpfiles and securetty files
  - Remove /etc files and install them to /usr, use tmpfiles
  - Switch /etc/login.defs edits to /usr/share/shadow/login.defs
  - Drop moving passwd out of /usr since we don't have split-usr
  - Drop pkg_postinst
2022-08-26 02:38:56 +05:30
Sayan Chowdhury
ecf9249a70 sys-apps/shadow: Sync with Gentoo upstream; updates to 4.12.3
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-26 02:38:52 +05:30
flatcar-ci
e6f78f5117 New version: main-3342.0.0-nightly-20220825-2100 2022-08-25 21:00:33 +00:00
Dongsu Park
32d9c36a6f Merge pull request #353 from flatcar-linux/dongsu/gnutls-3.7.7
net-libs/gnutls: update to 3.7.7
2022-08-25 16:47:24 +02:00
Dongsu Park
e640b6c1a4 changelog: add security changelog for open-vm-tools 12.1.0 2022-08-25 08:42:11 +02:00
Flatcar Buildbot
defa66028c Update mantle container image to latest HEAD 2022-08-24 21:00:43 +00:00
flatcar-ci
ab4406f054 New version: main-3341.0.0-nightly-20220824-2100 2022-08-24 21:00:27 +00:00
Krzesimir Nowak
a218ea3d75 Merge pull request #349 from flatcar-linux/krnowak/glib-update
glib update
2022-08-24 15:51:15 +02:00
Krzesimir Nowak
23f7a7ac62 Merge pull request #348 from flatcar-linux/krnowak/boost-update
boost update
2022-08-24 15:48:52 +02:00
Dongsu Park
0cc5999ce8 changelog: add changelog for gnutls 3.7.7 2022-08-24 13:48:12 +02:00
Dongsu Park
c07d92e1b3 net-libs/gnutls: update to 3.7.7
Update net-libs/gnutls to 3.7.7 mainly to address CVE-2022-2509.
2022-08-24 13:45:37 +02:00
Flatcar Buildbot
c4f1d578b5 app-emulation: Upgrade open-vm-tools 12.0.5 to 12.1.0 2022-08-24 07:19:46 +00:00
flatcar-ci
2227d2a7f8 New version: main-3340.0.0-nightly-20220823-2100 2022-08-23 21:00:23 +00:00
Krzesimir Nowak
3e25e23ae4 sys-auth/sssd: Apply Flatcar modifications
- Make BDEPEND independent from DEPEND (The `BDEPEND` is a
    build-time requirement, so it should not be included in the whole
    `DEPEND` list. If it does, an installation of `sys-auth/sssd`
    causes other dependencies to be installed not only in the
    `/build`, but also under the SDK. That's not what we want, so we
    need to exclude `BDEPEND` from the list.)

  - Move runstatedir option from configure to make (Now that the
    upstream sssd 2.3.1 does not support `--runstatedir` option from
    its configure script, we need to remove the option, to unblock the
    configure issue like `unrecognized option --runstatedir`.  Instead
    we need to pass `runstatedir=` to emake commands.)

  - Disable realm check for nsupdate (At the moment bind-tools does
    not enable `gssapi`, so its `nsupdate` tool is also not able to
    run `realm` command. As a result, configure script of `sssd` fails
    when running `echo realm | nsupdate`, like `syntax error`.

    To avoid such issues, we need to disable the nsupdate check for
    now.  After we could enable `gssapi` for the SDK correctly, we can
    bring back the nsupdate check in the future.)

  - Add patch for CVE-2021-3621

  - Set the conf dir path explicitly (Without passing the
    --with-systemdconfdir flag, the configure script will query
    pkg-config for the directory itself. In the cross-compilation
    setup that we have, this will result in a path sysroot prepended
    to the path twice. systemd.eclass has a workaround for this issue,
    but it does not provide an elegant getter of the system
    configuration directory, thus we call `_systemd_get_dir`
    ourselves.)

  - Make it compatible with newer python versions.

  - Fix samba version detection by exporting the CPP variable. For
    some reason it was empty after the toolchain updates.
2022-08-23 16:01:46 +02:00
Krzesimir Nowak
a9747570bd sys-auth/sssd: Clean slate to reapply our changes 2022-08-23 16:01:46 +02:00
Krzesimir Nowak
c6683a158e sys-devel/make: Apply Flatcar modifications 2022-08-23 16:01:46 +02:00
Krzesimir Nowak
7dbd5615d1 sys-devel/make: Copy from portage-stable 2022-08-23 16:01:46 +02:00
Krzesimir Nowak
66b8c112f7 sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - don't run sanity checks in pkg_pretend to prevent gcc checks when
    only the binary package is installed.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2022-08-23 16:01:22 +02:00
Krzesimir Nowak
26475e5ebf sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit 77cec48da70c6d6424ed6dba4357dd8eacd262c2.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5b7f8b1525 profiles: Add accept keywords for sys-devel/crossdev 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
fd214759a9 app-torcx/docker: Bump dev-libs/libltdl dependency 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5089a6ee6e profiles: Drop accept_keywords for sys-libs/zlib
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
93e861952f coreos-config: Drop fixes for sys-devel/gettext
Let's see if they are still necessary.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
6fdfa61738 profiles: gcc sanitize should be working on arm64 too
Let's check if this is the case.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
60cfb42af6 coreos/config: Drop flex fixes
Let's see if there are still problems with bootstrapping.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
864ea5fd61 coreos/config: Drop libtool fixes
These seem to be quite old and most likely not needed any more. Let's
see if it's true, otherwise this commit will be reverted.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
d458f790fd coreos/config: Drop unnecessary fix for perl
We just updated dev-lang/perl to a version that contains the fix.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
4c8cd9ffe6 profiles: Drop sys-libs/binutils-libs from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
3e0a85a6f0 profiles: Drop sys-devel/binutils from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Mathieu Tortuyaux
87eaf07fb2 Merge pull request #2110 from EhsanLunar/patch-1
Flatcar support for EKS on versions above 1.21
2022-08-23 15:47:09 +02:00
Dongsu Park
94254df06c Merge pull request #2109 from flatcar-linux/cacerts-3.82-main
Upgrade ca-certificates in main from 3.81 to 3.82
2022-08-23 13:25:21 +02:00
Krzesimir Nowak
c70d1f2d6e changelog: Add entries 2022-08-23 12:24:54 +02:00
Ehsan Assgari
050c0cf8e5 Update changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md
Co-authored-by: Mathieu Tortuyaux <mathieu.tortuyaux@gmail.com>
2022-08-22 17:07:33 +02:00
Ehsan Assgari
d58ef937d9 Create 2022-08-22-eks-support-for-versions-above-1.21.md 2022-08-22 15:57:43 +02:00
Krzesimir Nowak
ed22213147 sys-devel/make: Move to overlay 2022-08-22 15:38:47 +02:00
Krzesimir Nowak
f9f9c47827 eclass/alternatives: Sync with Gentoo
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
2022-08-22 15:38:47 +02:00
Krzesimir Nowak
d9267f639c eclass/autotools: Sync with Gentoo
It's from Gentoo commit ba3706b867f7a64d4297a7a7835608ab0745b178.
2022-08-22 15:38:47 +02:00
Krzesimir Nowak
0b1fe2e7a3 eclass/git-r3: Sync with Gentoo
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
2022-08-22 15:38:47 +02:00
Krzesimir Nowak
55b9db4c04 eclass/java-utils-2: Sync with Gentoo
It's from Gentoo commit e07cc058266208181d4db5e7d0629984e43cac61.
2022-08-22 15:38:46 +02:00
Krzesimir Nowak
ee94424b9c eclass/java-pkg-opt-2: Sync with Gentoo
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
2022-08-22 15:38:46 +02:00
Krzesimir Nowak
739e3d0c17 eclass/prefix: Sync with Gentoo
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
2022-08-22 15:38:46 +02:00
Krzesimir Nowak
272aecc466 eclass/pax-utils: Sync with Gentoo
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
2022-08-22 15:38:46 +02:00
Krzesimir Nowak
efa811f476 eclass/toolchain: Sync with Gentoo
It's from Gentoo commit dc072cee06f52faf285a1b94e5db68eb78f07719.
2022-08-22 15:38:46 +02:00
Krzesimir Nowak
9828aaf6e7 eclass/multilib-build: Sync with Gentoo
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
2022-08-22 15:38:46 +02:00