Commit Graph

8900 Commits

Author SHA1 Message Date
Krzesimir Nowak
1ad0ce9964 coreos/stage1_hooks: Add a hook for updating a profile in stage1
This is to make sure that the directory layout wrt. lib directories in
stage1 is correctly set up from the beginning, because it gets
propagated all the way to the final SDK image. It's easier to do it
that way, rather than following the steps described in the deprecation
notice of the 17.0 profile.
2023-03-09 13:28:32 +01:00
Krzesimir Nowak
98668d0281 coreos/stage1_hooks: Add a hook for pulling a newer version of baselayout
Pull in a new version of baselayout to have a proper setup of lib
directories in stage1. The proper setup means that the `lib` entry is
now a directory instead of a symlink to `lib64`.

Honestly, when rewording this commit, I realized that this hook is not
really needed, as the updated baselayout ebuild just drops code that
became dead after the profile update that the other hook does. But I
decided to keep it as is, because the CI build with this hook has
passed, and this hook will be needed anyway by the weekly updates.
2023-03-09 13:21:25 +01:00
Krzesimir Nowak
2aaa89c91b coreos/stage1_hooks: Add a place for stage1 hooks 2023-03-09 13:20:26 +01:00
Krzesimir Nowak
f51ac5097f profiles: Clean up categories file
Keep only categories unique to our overlay.
2023-03-09 13:20:25 +01:00
Krzesimir Nowak
951284119a profiles: Drop license_groups
We do not carry anything with these licenses any more.
2023-03-09 13:20:25 +01:00
Krzesimir Nowak
0297db02a5 profiles: Drop old updates files
They refer to the changes made 8 or more years ago. They are
irrelevant now. Gentoo's oldest updates file is from 2018, so 5 years
old.
2023-03-09 13:20:25 +01:00
Krzesimir Nowak
a2f29fd9a8 sys-apps/seismograph: Drop blocker RDEPENDS
These packages are old and don't exist for a long time already.

Found it when looking through the files in the profiles/updates
directory.
2023-03-09 13:20:25 +01:00
Krzesimir Nowak
7c3f57c203 profiles: Drop unused profiles 2023-03-09 13:20:25 +01:00
Krzesimir Nowak
6592be18db sys-apps/baselayout: Drop dead code installing lib to lib64 symlinks
We have moved away from it already in production images already. With
the change of profile from 17.0 to 17.1, SYMLINK_LIB is always "no",
so some code will never be executed. Drop it.
2023-03-09 13:20:25 +01:00
Krzesimir Nowak
1d1a7f9f40 profiles: Switch to 17.1 profile for amd64 2023-03-09 13:20:25 +01:00
Dongsu Park
5730e7a585 Merge pull request #2501 from flatcar/vmware-12.2.0-main
Upgrade open-vm-tools in main from 12.1.5 to 12.2.0
2023-03-09 12:38:23 +01:00
Kai Lueke
b26a77d5a0 coreos-base/coreos-init: Distribute new sub key
This pulls in
https://github.com/flatcar/init/pull/92 to distribute the new sub key
before we start signing with it from July.
2023-03-09 17:57:18 +09:00
Jeremi Piotrowski
c6d708885e Merge pull request #2489 from flatcar/jepio/elfutils-systemd-coredump
profiles: Enable systemd[elfutils] USE flag for board
2023-03-08 10:11:51 +01:00
Jeremi Piotrowski
38070f34ed profiles: Enable systemd[elfutils] USE flag for board
Elfutils is already part of the usr partition, but currently not enabled in
systemd-coredump. Systemd-coredump therefore fails with:

  elfutils disabled, parsing ELF objects not supported.

Enable the elfutils flag for systemd to make this work.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2023-03-08 10:10:55 +01:00
Flatcar Buildbot
23202bf119 app-emulation: Upgrade open-vm-tools 12.1.5 to 12.2.0 2023-03-08 07:18:11 +00:00
Sayan Chowdhury
0583c87257 Merge pull request #2495 from flatcar/linux-5.15.98-main
Upgrade Linux Kernel for main from 5.15.96 to 5.15.98
2023-03-06 20:35:28 +05:30
Kai Lueke
86e96adb5a sys-apps/baselayout: Only relabel a minimal set of /etc files
This pulls in
https://github.com/flatcar/baselayout/pull/28 to fix a regression in
https://github.com/flatcar/baselayout/pull/24 due to how
systemd-tmpfiles' Z rule seems to cause unnecessary changes in files.
2023-03-06 21:54:48 +09:00
Flatcar Buildbot
7ed640017c sys-kernel: Upgrade Kernel 5.15.96 to 5.15.98 2023-03-04 07:17:00 +00:00
Flatcar Buildbot
8ea34ecbe2 app-emulation: Upgrade Containerd 1.6.18 to 1.6.19 2023-03-03 08:23:06 +00:00
Mathieu Tortuyaux
22274126a6 Merge pull request #2492 from flatcar/tormath1/baselayout-label
selinux: label `/etc` and enable `selinux` for find
2023-03-03 09:04:57 +01:00
Kai Lüke
c493b0ba8e Merge pull request #2491 from flatcar/kai/initrd-setup-debug
sys-kernel/bootengine: Make initrd-setup-root more resilient
2023-03-03 05:12:10 +01:00
Kai Lueke
83ea95a4fa sys-kernel/bootengine: Make initrd-setup-root more resilient
This pulls in
https://github.com/flatcar/bootengine/pull/56
to ensure that even with a rerun from the initrd or with a deletion of
/etc/passwd we are able to boot.
2023-03-03 13:11:49 +09:00
Mathieu Tortuyaux
f076cf036e profiles: build find with selinux support
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-03-02 11:33:16 +01:00
Mathieu Tortuyaux
94bcd37c3b sys-apps/baselayout: bump commit ID
it pulls relabelling of some files

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-03-02 11:33:16 +01:00
Mathieu Tortuyaux
759cbca91f Merge pull request #2481 from flatcar/tormath1/ignition
sys-apps/ignition: bump to 2.15.0
2023-03-01 07:21:50 +01:00
Sayan Chowdhury
c41f5573cd Merge pull request #2487 from flatcar/linux-5.15.96-main
Upgrade Linux Kernel for main from 5.15.92 to 5.15.96
2023-03-01 00:44:33 +05:30
Mathieu Tortuyaux
acc6fa251a changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-02-28 18:00:59 +01:00
Mathieu Tortuyaux
cce26d49a1 sys-apps/ignition: bump to 2.15.0
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-02-28 18:00:58 +01:00
Kai Lueke
ef08c06cb6 Support selective OS resets
This pulls in
https://github.com/flatcar/bootengine/pull/55 and
https://github.com/flatcar/init/pull/91 for a `flatcar-reset` tool and
boot logic for selective OS resets, cleaning the rootfs of old state
while keeping wanted paths, e.g., when reconfiguring the system with
Ignition.
2023-02-28 23:41:54 +09:00
Kai Lueke
6d4ccd8945 sys-kernel/bootengine: Clean duplicate overlayfs entries
This pulls in
https://github.com/flatcar/bootengine/pull/54
to provide a migration path and also ensure that no unwanted /etc/
upperdir files prevent using updated lowerdir files from
/usr/share/flatcar/etc.
2023-02-28 23:37:41 +09:00
Flatcar Buildbot
c1c1744b7d sys-kernel: Upgrade Kernel 5.15.92 to 5.15.96 2023-02-26 07:17:40 +00:00
Kai Lüke
abff6bd4aa Merge pull request #2467 from flatcar/kai/etc-overlay
sys-kernel/bootengine: Set up /etc as overlay mount
2023-02-24 11:12:42 +01:00
Kai Lueke
45236d8ff6 sys-kernel/bootengine: Set up /etc as overlay mount
This pulls in
https://github.com/flatcar/bootengine/pull/53
to provide files in /etc through an overlay mount from
/usr/share/flatcar/etc - essentially giving us a 3-way merge of config
files that allows us to update /etc while keeping user changes.
2023-02-24 19:12:22 +09:00
Sayan Chowdhury
8b1f5cf0a7 profiles: Add KEYWORDS to update intel-microcode to 20230214_p20230212
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-23 19:47:05 +05:30
Sayan Chowdhury
0821c5a4df Merge pull request #2472 from flatcar/buildbot/weekly-package-updates-2023-02-08
Weekly package updates 2023-02-08
2023-02-23 14:13:18 +05:30
Dongsu Park
4781811b29 changelog: add changelog for torcx with golang.org/x/text 0.3.8 2023-02-22 16:08:02 +01:00
Dongsu Park
ea5b382bb3 app-arch/torcx: update golang.org/x/text to 0.3.8
Update golang.org/x/text to 0.3.8, mainly to address CVE-2022-32149.

Pulls in https://github.com/flatcar/torcx/pull/15.
2023-02-22 16:07:58 +01:00
Dongsu Park
822972911e Merge pull request #2471 from flatcar/dongsu/dnsmasq-2.89
profiles: accept keyword ~arm64 for net-dns/dnsmasq 2.89
2023-02-22 11:01:08 +01:00
Dongsu Park
b7434bd176 Merge pull request #2470 from flatcar/dongsu/e2fsprogs-1.46.6
profiles: accept keywords for e2fsprogs 1.46.6
2023-02-22 10:57:30 +01:00
Dongsu Park
ef621681ce profiles: accept keyword ~arm64 for net-dns/dnsmasq 2.89
Accept keyword ~arm64 for net-dns/dnsmasq 2.89, to keep the same
version 2.89 for both arches, addressing CVE-2022-0934.
2023-02-22 10:50:51 +01:00
Sayan Chowdhury
42b3833b35 profiles: remove accept_keywords for gdbus-codegen arm64
gdbus-codegen has been stabilized for arm64 for 2.74.4 so we can drop
our profile change for the same.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-21 22:31:19 +05:30
Sayan Chowdhury
abcff65183 profiles: remove accept_keywords for gcc arm64
gcc has been stabilized for arm64 for 11.3.1_p20230120-r1 so we can drop
our profile change for the same.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-21 22:31:19 +05:30
Sayan Chowdhury
06d4d60fbf profiles: remove accept_keywords for curl arm64
curl has been stabilized for arm64 for 7.87.0-r2 so we can drop
our profile change for the same.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-21 22:31:19 +05:30
Sayan Chowdhury
aae3c0977a profiles: remove accept_keywords for glib arm64
glib has been stabilized for arm64 for 2.74.4 so we can drop
our profile change for the same.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-21 22:31:19 +05:30
Sayan Chowdhury
39e9a2cb2e profiles: remove accept_keywords for qemu arm64
qemu has been stabilized for arm64 for 7.2.0 so we can drop
our profile change for the same.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-21 22:31:19 +05:30
Kai Lueke
2965968b40 coreos-base/coreos-init: Fix dummy dev default networkd unit exclusion
This pulls in
https://github.com/flatcar/init/pull/90
to fix the dummy interface exclusion rule in the default networkd unit.
It was supposed to work before but didn't. With it we wouldn't have
needed the special exclusions for Kubernetes interfaces.
2023-02-21 21:55:54 +09:00
Dongsu Park
493e755f8b Merge pull request #2468 from flatcar/dongsu/containerd-go-1.19
app-emulation/containerd: default to Go 1.19
2023-02-21 13:42:48 +01:00
Kai Lüke
5947444b38 Merge pull request #2466 from flatcar/kai/init-kube-network
coreos-base/coreos-init: Exclude K8s' special interfaces
2023-02-21 13:17:58 +01:00
Dongsu Park
1e947c7ef9 app-emulation/containerd: default to Go 1.19
Since containerd 1.6.18, containerd is built with
Go 1.19 by default. Following that, update the default
Go version to 1.19.
See also
https://github.com/containerd/containerd/commit/54ead5b7b71a .
2023-02-21 11:24:25 +01:00
Dongsu Park
17772fee94 profiles: accept keywords for e2fsprogs 1.46.6
Accept keywords ~amd64 and ~arm64 for sys-fs/e2fsprogs, mainly to
address CVE-2022-1304.
2023-02-20 17:35:23 +01:00