Commit Graph

8128 Commits

Author SHA1 Message Date
Dongsu Park
14761dc4da changelog: add security changelog for runc 1.1.2 2022-05-12 17:35:53 +02:00
Flatcar Buildbot
54b6479bb0 app-emulation: Upgrade Runc 1.1.1 to 1.1.2 2022-05-12 17:34:36 +02:00
Krzesimir Nowak
c7c189e7ae profiles: Work around the build-id collisions 2022-05-12 16:14:31 +02:00
Jeremi Piotrowski
d675d2f74a Merge pull request #1876 from flatcar-linux/jepio/remove-xen-pci-patch
sys-kernel/coreos-sources: remove Xen-PCI-revert patch
2022-05-12 14:06:47 +02:00
Dongsu Park
961dd018a9 changelog: add changelog for Go 1.18.2 2022-05-11 14:34:02 +02:00
Dongsu Park
8a19d74c15 .github: remove unnecessary version Go 1.16
Go 1.16 was deprecated some time ago, so we do not need that in Github
Actions.
2022-05-11 14:34:02 +02:00
Dongsu Park
601cbca305 *: Use Go 1.18 instead of 1.17
Use Go 1.18 instead of 1.17 by default in all ebuilds.
Note, we still keep building app-emulation/docker{,-cli} with Go 1.17,
to be consistent with upstream Docker 20.10.x, which still builds with
Go 1.17. That should avoid potential unexpected regressions that
happened in the past.
2022-05-11 14:34:02 +02:00
Dongsu Park
2ef1472e32 dev-lang/go: add 1.18.2
Update the default version of dev-lang/go to 1.18.2.
Keep go1.17 as well to build docker{,-cli} with Go 1.17.
Use EAPI=7 for all versions.
See also https://go.dev/doc/go1.18.
2022-05-11 14:34:02 +02:00
Dongsu Park
7619b554b8 eclass: use ver_cut instead of get_version_component_range
We should update EAPI from 6 to 7, to deprecate old EAPIs in general.
To make it work with EAPI=7, replace get_version_component_range with
ver_cut, as get_version_component_range does not work any more with EAPI
7. As a result, the versionator eclass is not needed any more.
2022-05-11 14:34:02 +02:00
Dongsu Park
0bd7c888f2 Merge pull request #1877 from flatcar-linux/docker-20.10.15-main
Upgrade Docker in main from 20.10.14 to 20.10.15
2022-05-11 14:32:43 +02:00
Jeremi Piotrowski
a71094c33b sys-kernel/coreos-sources: remove Xen-PCI-revert patch
There was a kernel regression on Xen HVM with regard to MSI interrupts that
affected certain AWS instances (m4 and similar). We reverted the patch that
broke networking, but in the meantime upstream found the actual cause and
provided a proper fix which is part of 5.15.38. Remove the obsolete patch.

Link: https://lore.kernel.org/all/20220504153056.686401990@linuxfoundation.org/
2022-05-11 12:51:58 +02:00
Mathieu Tortuyaux
75f1725a0f Merge pull request #1874 from flatcar-linux/tormath1/bootengine
sys-kernel/bootengine: bump commit ID
2022-05-11 09:49:01 +02:00
Flatcar Buildbot
41c7dcd724 app-emulation: Upgrade Docker 20.10.14 to 20.10.15 2022-05-11 07:46:12 +00:00
Kai Lueke
96b90f616f coreos-base/coreos-init: Ensure /etc/flatcar/update.conf exists
This pulls in
https://github.com/flatcar-linux/init/pull/71
to create /etc/flatcar/update.conf if missing.
2022-05-11 15:23:05 +09:00
Krzesimir Nowak
0c52e4f3fd Merge pull request #1873 from flatcar-linux/linux-5.15.38-main
Upgrade Linux Kernel in main from 5.15.37 to 5.15.38
2022-05-10 15:52:10 +02:00
Mathieu Tortuyaux
0b3cbd519d changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-10 13:52:09 +02:00
Dongsu Park
4cc38f04c5 Merge pull request #1865 from flatcar-linux/dongsu/changelog-example
changelog: use a specific project name in the example
2022-05-10 11:25:18 +02:00
Jeremi Piotrowski
1c2e75e940 Merge pull request #1838 from flatcar-linux/jepio/cross-binutils-keywords
profiles: add keywords to cross-*/binutils as well
2022-05-10 09:55:09 +02:00
Mathieu Tortuyaux
2edfc016e9 sys-kernel/bootengine: bump commit ID
this pulls:
* https://github.com/flatcar-linux/bootengine/pull/45

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-10 09:32:37 +02:00
Flatcar Buildbot
d4f751a8b3 sys-kernel: Upgrade Kernel 5.15.37 to 5.15.38 2022-05-10 07:23:47 +00:00
Dongsu Park
eb0cf00c5e changelog: add changelog for torcx 2022-05-06 15:21:46 +02:00
Dongsu Park
431c87c98e app-arch/torcx: update golang.org/x/crypto
Update golang.org/x/crypto to v0.0.0-20220314234659-1baeb1ce4c0b mainly
to address CVE-2022-27191.

Pulls in https://github.com/flatcar-linux/torcx/pull/12 .
2022-05-06 15:21:46 +02:00
Dongsu Park
d18978d5e6 Merge pull request #1864 from flatcar-linux/containerd-1.6.4-main
Upgrade Containerd in main from 1.6.3 to 1.6.4
2022-05-06 15:19:29 +02:00
Dongsu Park
6bd35179ce changelog: use a specific project name in the example
To be able to distinguish changelog entries from each other, we should
write a specific project name, e.g. coreos-overlay, instead of `PR`.
Changelog entries with a simple `PR` usually cause so much additional
rework when doing actual releases.
2022-05-06 12:19:02 +02:00
Dongsu Park
89db3c0785 Merge pull request #1861 from flatcar-linux/dongsu/rsync-3.2.4
profiles: accept keywords for net-misc/rsync
2022-05-06 10:59:58 +02:00
Dongsu Park
4cff4fb85e Merge pull request #1860 from flatcar-linux/dongsu/git-2.35.3
profiles: accept keywords for git 2.35.3
2022-05-06 10:57:22 +02:00
Flatcar Buildbot
bed28648f6 app-emulation: Upgrade Containerd 1.6.3 to 1.6.4 2022-05-06 08:29:08 +00:00
Dongsu Park
6159fa199b profiles: accept keywords for git 2.35.3
We need to build 2.35.3 to address CVE-2022-24765.
2022-05-06 08:27:25 +02:00
Dongsu Park
164bdd524b profiles: accept keywords for net-misc/rsync
We need to allow net-misc/rsync 3.2.4-r1, to address security issues
in its bundled zlib.
2022-05-05 17:17:55 +02:00
Kai Lueke
26432fe63c .github: add cacerts/kernel actions for current LTS
The GitHub Actions were defined for the LTS stream directly but we can
now follow the approach used for the other channels. This means that
in the future we could decide to create new Actions for 2022 by copying
the current one and modifying it when 2023 gets the new current LTS -
anyway some manual work would be required to set up Actions for both
old and new at the same time (we have no "previous" symlink on Origin).
We could retire the old LTS Actions immediately because the releases
don't occur on a fixed schedule but I think the automation is nice to
keep.
2022-05-04 14:24:37 +09:00
Dongsu Park
48f7788853 Merge pull request #1857 from flatcar-linux/linux-5.15.37-main
Upgrade Linux Kernel in main from 5.15.35 to 5.15.37
2022-05-03 16:44:55 +02:00
Dongsu Park
24f5e0f1a4 Merge pull request #1858 from flatcar-linux/cacerts-3.78-main
Upgrade ca-certificates in main from 3.77 to 3.78
2022-05-02 19:19:20 +02:00
Flatcar Buildbot
2c01f8e685 app-misc: Upgrade ca-certificates 3.77 to 3.78 2022-05-02 07:24:12 +00:00
Flatcar Buildbot
fde16102ed sys-kernel: Upgrade Kernel 5.15.35 to 5.15.37 2022-05-02 07:24:00 +00:00
Flatcar Buildbot
59b3d4bacc app-emulation: Upgrade Containerd 1.6.2 to 1.6.3 2022-04-29 08:30:47 +00:00
Mathieu Tortuyaux
909f276006 Merge pull request #1842 from flatcar-linux/tormath1/ignition
sys-apps/ignition: use upstream
2022-04-27 10:08:54 +02:00
Mathieu Tortuyaux
208574039c sys-apps/ignition: use upstream
use upstream ignition (coreos/ignition) and apply our patches on top of
it.

It's currently done in the same way with coreos/afterburn.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-26 15:27:23 +02:00
Kai Lueke
8ee228d5ce Move mantle's dnsmasq dependency to the SDK dependencies
The removal of the mantle ebuild file also meant that dnsmasq isn't
installed into the SDK anymore, yet we actually need it to run kola
QEMU tests in the SDK on the original CI pipeline. As long as the
original CI pipeline is kept, we have to keep kola's dependencies
like QEMU and dnsmasq around.
2022-04-26 15:09:13 +09:00
Jeremi Piotrowski
c5e7ff8c9e Add missing pahole dependencies
pahole is a build-time dependency of our kernel build, due to us setting
CONFIG_BTF_DEBUG_INFO. If pahole is missing, a `make modules_prepare` with our
kernel config results in symbols in the config changing. This will affect
people building kernel modules against coreos-sources in the developer
container, but not the SDK because pahole is already in sdk-depends.

pahole is now an (explicit) BDEPEND of all the coreos-kernel/coreos-modules
packages, and we'll make it an RDEPEND of coreos-sources so that it is pulled
in whenever it might be necessary.  Also add it to the coreos-dev package so
that it is included in developer container by default, uncompressed size
increase is <1MB.
2022-04-25 14:28:02 +02:00
Kai Lüke
b9f2da8566 Merge pull request #1820 from flatcar-linux/kai/sysext-oem-partition
coreos-base/coreos-init: add systemd-sysext.service for OEM mount
2022-04-25 13:12:45 +09:00
Kai Lueke
a2c5b52dec coreos-base/coreos-init: add systemd-sysext.service for OEM mount
This pulls in https://github.com/flatcar-linux/init/pull/69
to restore the OEM partition mount point after the /usr overlay is
done.
2022-04-25 13:10:51 +09:00
Jeremi Piotrowski
f45b654daf Merge pull request #1837 from flatcar-linux/jepio/portage-fix-patches
sys-apps/portage: refresh patches and ensure they are applied
2022-04-22 09:15:14 +02:00
Jeremi Piotrowski
bd05d92a27 sys-apps/portage: bump revision to allow package to be automatically updated 2022-04-22 09:14:25 +02:00
Jeremi Piotrowski
b6a68c8ee7 Merge pull request #1836 from flatcar-linux/linux-5.15.35-main
Upgrade Linux Kernel in main from 5.15.34 to 5.15.35
2022-04-21 17:20:52 +02:00
Jeremi Piotrowski
cea47bb606 sys-kernel/coreos-sources: drop vmbus patch that is included in 5.15.35
Patch z0007 has been released in 5.15.35 as this commit:

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.15.y&id=92a3499933c17b25b7c59658183bc7d23a581f5b
2022-04-21 13:37:15 +02:00
Kai Lüke
425837d4f0 Merge pull request #1827 from flatcar-linux/kai/drop-kola-from-sdk
Drop mantle and kola-data from the SDK
2022-04-21 17:20:55 +09:00
Kai Lueke
87a18b79b3 Drop mantle and kola-data from the SDK
With the new mantle container image referenced by the scripts repo we
don't need the mantle copy in the SDK anymore.
Drop the mantle package and the unused kola-data package.
2022-04-21 17:14:38 +09:00
Jeremi Piotrowski
ab6ac4d0fd sys-apps/portage: refresh patches and ensure they are applied
Found this while checking why I was still seeing lots of

  !!! Section 'gentoo' in repos.conf is missing location attribute

messages while building. Turns out that after the last sync of portage we
stopped applying patches from files/. This was caused by a local variable
definition of PATCHES that was overriding the global one.

This might be a sign to drop them or we can refresh them, as they do fix bugs
that have been hit in CoreOS in the past. I opted to refresh them, and inject
them into the local variable.
2022-04-21 10:07:19 +02:00
Flatcar Buildbot
e840dc7367 sys-kernel: Upgrade Kernel 5.15.34 to 5.15.35 2022-04-21 07:22:37 +00:00
Jeremi Piotrowski
1a5796ea4f profiles: add keywords to cross-*/binutils as well
Crossdev currently uses binutils 2.36 (stable), while the SDK and sysroot both
build binutils 2.37 due to keywording. Kernel modules built within the
developer container fail to load due to relocation errors. Add the same
keywords to cross-*/binutils packages so that the versions match.
2022-04-21 09:03:25 +02:00