mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-21 14:31:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
22,162 Commits 619 Branches 394 Tags
Commit Graph

14356 Commits

Author SHA1 Message Date
flatcar-ci
4b607ce480 New version: main-3383.0.0-nightly-20221005-2100 2022-10-05 21:00:38 +00:00
Jeremi Piotrowski
4f01a18c37 profile/coreos/arm64: switch parent profile to 17.0/hardened 
This was left as a 'TODO', but finally showed up when building the arm64 SDK.
The generic parent profile caused arm64 SDK (but also production images) to
have several USE flags missing, most importantly acl. Without acl, `usermod -m`
fails to correctly copy skeleton files when creating a new user.

Switch to parent profile to one matching the amd64 parent profile, which brings
the two arches closer together.
 2022-10-05 16:40:11 +02:00
Flatcar Buildbot
fd4783ca0a sys-kernel: Upgrade Kernel 5.15.70 to 5.15.71 2022-10-05 14:54:26 +02:00
Krzesimir Nowak
13e9213d84 Merge pull request #2180 from flatcar/krnowak/dev-util-update 
Development utilities update
 2022-10-05 11:32:37 +02:00
flatcar-ci
6b0117ba24 New version: main-3382.0.0-nightly-20221004-2100 2022-10-04 21:00:36 +00:00
Krzesimir Nowak
aa403ffeea changelog: Add an entry 2022-10-04 16:37:41 +02:00
Krzesimir Nowak
2e726adb32 coreos-base/coreos-init: Bring in the port customization changes 2022-10-04 15:07:17 +02:00
Krzesimir Nowak
ff6227115d coreos-base/hard-host-depends: Drop dev-util/scons 
There isn't anything that uses scons, so drop it from SDK.
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
ade775850b coreos/config: Drop overrides for dev-util/dialog 
It's not packaged in neither in overlay nor in portage-stable.
 2022-10-04 14:52:10 +02:00
Dongsu Park
70e0da0687 dev-util/bsdiff: Apply Flatcar modifications 
Apply existing Flatcar changes on top of vanilla Gentoo ebuilds:
- add arm64 keyword
- apply the sais patch
- fix a heap overflow vulnerability in bspatch included in bsdiff.

Originally the security issue was published as [FreeBSD-SA-16:29](https://www.freebsd.org/security/advisories/FreeBSD-SA-16:29.bspatch.asc),
which pointed to a FreeBSD [patch](https://security.freebsd.org/patches/SA-16:29/bspatch.patch).
However, the patch was a set of huge changes including other unrelated
changes. That's why it was not simple at all to apply the patch to
bsdiff. Both Gentoo and Flatcar have not included the fix.

Fortunately X41 D-SEC [examined](https://www.x41-dsec.de/security/news/working/research/2020/07/15/bspatch/)
the issue again, and nailed down to a simple patch that can be easily
applied to other trees. We simply take the patch with minimal changes.

See also [CVE-2020-14315](https://nvd.nist.gov/vuln/detail/CVE-2020-14315).

It is based on the following commits:

[4ee6aa895a02](https://github.com/kinvolk/coreos-overlay/commit/4ee6aa895a02) ("Add arm64 keywords")
[60d47e7359d1](https://github.com/kinvolk/coreos-overlay/commit/60d47e7359d1) ("Change suffix sort to sais-lite")
[7d3ac2a049dd](https://github.com/kinvolk/coreos-overlay/commit/7d3ac2a049dd) ("fix heap overflow vulnerability CVE-2020-14315")
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
e358a89307 dev-util/bsdiff: Sync with Gentoo 
It's from Gentoo commit 98ef629ba44e42abf5dd75e2e2c44994d85bc409.
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
e64412782e profiles: Drop outdated or redundant USE flags for dev-util/perf 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
a8f0638d7f profiles: Drop accept_keywords for dev-util/perf 
Updated package is stable for both amd64 and arm64.
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
f8fac84130 profiles: Drop accept_keywords for dev-util/pahole 
Updated package is stable for both amd64 and arm64.
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
0d7e9d0971 profiles: Drop cmake from provided packages 
It should cross-compile just fine, but let's see if it ends up being
on the production image.
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
0a6a8aa7d4 profiles: Drop keywords for dev-util/checkbashisms 
The updated package is stable for both amd64 and arm64.
 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
aa36317220 profiles: Update keywords for dev-util/bpftool 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
b22334fd58 coreos/config: Drop fixes for cmake 2022-10-04 14:52:10 +02:00
Krzesimir Nowak
ea3051e7e6 changelog: Add an entry 2022-10-04 14:50:34 +02:00
Krzesimir Nowak
efef41e31d .github/workflows/packages-list: Add entries 2022-10-04 14:50:34 +02:00
Krzesimir Nowak
6621fcf787 eclass/linux-mod: Sync with Gentoo 
It's from Gentoo commit eee74b9fca1b5237299ee08fd041997e7271304a.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
7986606ee5 eclass/llvm: Sync with Gentoo 
It's from Gentoo commit ef5a901254202fbcc79a4dab658a231c1187d3e1.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
126d4c4017 eclass/gnome.org: Sync with Gentoo 
It's from Gentoo commit d7317785d04e7de172de3bff05852fca3cd15af2.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
fdc7cf15dd eclass/meson: Sync with Gentoo 
It's from Gentoo commit 5a465ec448ea48b9dd9471e4d15b7669a77e4536.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
9942f96787 eclass/cmake-utils.eclass: Remove obsolete eclass 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
97535477c8 eclass/cmake-multilib: Sync with Gentoo 
It's from Gentoo commit 88275b401b115efd63847d4ee979593e87915ec5.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
a99f896cd6 eclass/ninja-utils: Sync with Gentoo 
It's from Gentoo commit 5a34097c8957c40d5b09fe6d249449c22f7f1ea5.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
e855d3dfc7 eclass/virtualx: Sync with Gentoo 
It's from Gentoo commit aa7fdc965621b413d85624ea30e9452a4130aced.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
b58940ccf3 eclass/elisp-common: Sync with Gentoo 
It's from Gentoo commit 424bd8ae7cbb3ce55e0567e8c9057d8d23c6cb57.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
6b973e990a eclass/cmake: Sync with Gentoo 
It's from Gentoo commit 759cec852497f888d93cccfedbc83f16eb765fb4.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
7b4897eebf eclass/bash_completion-r1: Backport the fix for paths from systemd.eclass 
The paths returned by pkg-config seem to have sysroot prepended
twice. The systemd eclass has a workaround for that - use it for bash
completion files too, then.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
1059e54407 eclass/bash-completion-r1: Sync with Gentoo 
It's from Gentoo commit 424acdc15be08f7c2b13c0d1bb8c31f55d26655d.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
cc61cd455d eclass/optfeature: Sync with Gentoo 
It's from Gentoo commit 23ad91eda1e35bbe3eb8ce63822ecd8755fb049c.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
5a9282cce5 eclass/linux-info: Sync with Gentoo 
It's from Gentoo commit bd03dc08515969a9ce74ca1304c8374cb7a88416.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
af44411e90 dev-util/strace: Sync with Gentoo 
It's from Gentoo commit b95e21368252ad592083b193849d4e950f9f04f0.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
be4949f48b dev-util/scons: Drop unnecessary package 
There isn't anything that is using scons, so just drop it.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
d620d52425 dev-util/re2c: Sync with Gentoo 
It's from Gentoo commit 21b2890ca1fcb0f8b7230420194f87706740d29e.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
9085fcdb64 dev-util/perf: Sync with Gentoo 
It's from Gentoo commit 6da4a28b50ab2c8ba6d3937d7de191190a188440.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
090d25b463 dev-util/patchutils: Sync with Gentoo 
It's from Gentoo commit 8eefb065d75c88868a8f73020595746eb34c8a98.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
b274ed6eab dev-util/patchelf: Sync with Gentoo 
It's from Gentoo commit b0dfc9160b045a6c9f17e40cf26989209c3bf02d.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
a764045f5b dev-util/pahole: Sync with Gentoo 
It's from Gentoo commit 3ac329dff93414ea355abc86e157b489a6f029dc.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
5a1e156e82 dev-util/ninja: Sync with Gentoo 
It's from Gentoo commit ff37eeaa0f2e43d1f5b3f681ad0dc8b2556b4877.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
69a628f291 dev-util/meson-format-array: Sync with Gentoo 
It's from Gentoo commit 91dc6350e05582abba13f76c9734d1faef2183cd.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
9a05de0c81 dev-util/meson: Sync with Gentoo 
It's from Gentoo commit 536391904a220878a2eb1b082b2229f6fd70ca84.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
ecf99c5606 dev-util/gtk-doc-am: Sync with Gentoo 
It's from Gentoo commit d5e0e285e6174e80e663d307364b14d50a927303.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
5a5d253f7c dev-util/gperf: Sync with Gentoo 
It's from Gentoo commit ef010d11cc42876bedb1ac51427e1700ab5492e0.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
e7ceb9d097 dev-util/desktop-file-utils: Sync with Gentoo 
It's from Gentoo commit a4fc9d0dfd88d22bc8e727d79d701ae22d2e1d38.
 2022-10-04 14:48:17 +02:00
Krzesimir Nowak
7bc105aee1 dev-util/cmocka: Sync with Gentoo 
It's from Gentoo commit 3695e0a4f79c1022a2d2421860b645afc0ead16f.
 2022-10-04 14:48:16 +02:00
Krzesimir Nowak
62141c3d78 dev-util/cmake: Sync with Gentoo 
It's from Gentoo commit cace9da3e438db8d92102b7c3c963c874115a9ba.
 2022-10-04 14:48:16 +02:00
Krzesimir Nowak
fb9c6ba667 dev-util/checkbashisms: Sync with Gentoo 
It's from Gentoo commit e09c85b030751cd96677344118f25c2be97457c5.
 2022-10-04 14:48:16 +02:00