David Michael
d4bd5db5a4
bump(metadata/glsa): sync with upstream
2017-04-07 14:53:34 -07:00
Geoff Levand
36d2613ba5
Merge pull request #2509 from glevand/for-merge-perl
...
profile: Enable arm64 perl
2017-04-06 12:32:58 -07:00
Benjamin Gilbert
45dffca9b6
Merge pull request #661 from bgilbert/package-lists
...
build_image_util: Don't query the $BUILD_DIR vdb
2017-04-06 12:27:45 -07:00
Benjamin Gilbert
f431e7c1ad
Merge pull request #659 from bgilbert/unique-build-ids
...
common: Don't export COREOS_BUILD_ID
2017-04-06 12:25:34 -07:00
Benjamin Gilbert
3e27bdcc45
common: Don't export COREOS_BUILD_ID
...
5a76e4e5e9027443ef2014d8e1d06e9baa9e50aa started exporting COREOS_BUILD_ID
whenever it was found in version.txt, even if its value was blank. Because
COREOS_BUILD_ID is in ENVIRONMENT_WHITELIST, this caused generated build IDs
to be propagated into the SDK chroot environment and reused for every build
in a "cork enter" session. Stop exporting COREOS_BUILD_ID when we set it
ourselves.
See also 8e754f9c2bd4b4ec6561613ff57c095886877960.
2017-04-06 12:23:51 -07:00
Geoff Levand
91c84f95a7
profile: Enable arm64 perl
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-06 09:59:11 -07:00
Michael Marineau
8ef89c7b15
Merge pull request #2510 from marineam/gangue
...
mantle: bump to 0.4.0, include gangue
2017-04-05 15:00:50 -07:00
Michael Marineau
0cb85e22b4
mantle: bump to 0.4.0, include gangue
2017-04-05 14:22:39 -07:00
Luca Bruno
51650980eb
app-admin/kubelet-wrapper: mark kubelet datadir volume as a recursive mount
...
So far `/var/lib/kubelet` was mounted as an implicit non-recursive mount.
This changes the wrapper to an explicit recursive mount.
As shown in https://github.com/kubernetes/kubernetes/issues/38498#issuecomment-282493681 ,
current non-recursive behavior seems to confuse the kubelet which
is incapable of cleaning up resources for orphaned pods, as the
extisting mountpoints for them are not available inside kubelet
chroot.
With `recursive=true`, those mounts are made available in the
chroot and can be unmounted on the host-side from kubelet chroot
via shared back-propagation.
Fixes https://github.com/coreos/bugs/issues/1831
2017-04-05 08:38:55 +00:00
David Michael
79b1f4cd47
Merge pull request #663 from dm0-/signed-tags
...
Require signed release tags
2017-04-03 14:43:49 -07:00
David Michael
1f2a44214c
tag_release: always sign release tags
2017-04-03 14:22:01 -07:00
David Michael
b44460ca0d
Merge pull request #662 from dm0-/bootstrap-sigs
...
Upload package signatures from the bootstrap process
2017-03-31 17:01:36 -07:00
David Michael
266829d7e1
build_toolchains: upload package signatures
2017-03-31 16:50:29 -07:00
David Michael
3a24149f66
bootstrap_sdk: upload package signatures
2017-03-31 16:50:12 -07:00
David Michael
f7a41994f4
Merge pull request #660 from dm0-/signed-binpkg
...
Sign uploaded binary packages
2017-03-30 17:10:33 -07:00
David Michael
17e4ee2dcd
release_util: allow signing uploaded packages
2017-03-30 16:53:15 -07:00
David Michael
e80eddd0c8
release_util: support signing directories
2017-03-30 16:53:10 -07:00
David Michael
6b86520bf4
release_util: store file signatures in their own directory
...
This allows signing files under paths owned by other users.
2017-03-30 16:52:44 -07:00
Benjamin Gilbert
d0e89d1752
build_image_util: Don't query the $BUILD_DIR vdb
...
Jenkins uses separate chroots for package and image builds, so
$BUILD_DIR may not have the relevant packages installed.
2017-03-30 15:43:56 -07:00
Euan Kemp
8eb77d504c
Merge pull request #2505 from euank/really-r1
...
sys-kernel/coreos-kernel: correct naming error
2017-03-30 15:39:22 -07:00
Euan Kemp
46ef0c9796
sys-kernel/coreos-kernel: correct naming error
2017-03-30 15:28:13 -07:00
Euan Kemp
a1956771b2
Merge pull request #2504 from euank/cve-2017-7184
...
sys-kernel/coreos-sources: apply patch for CVE-2017-7184
2017-03-30 14:32:34 -07:00
Euan Kemp
c654aeb054
sys-kernel/coreos-sources: apply patch for CVE-2017-7184
2017-03-30 13:26:13 -07:00
Benjamin Gilbert
d8fb403f69
build_image_util: Fix warnings when building OEM ACIs
...
INFO build_oem_aci: Writing coreos_oem_gce_aci_stage_packages.txt
awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
INFO build_oem_aci: Writing coreos_oem_gce_aci_stage_licenses.txt
awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
2017-03-29 16:31:05 -07:00
Benjamin Gilbert
d579f6f8e1
Merge pull request #2500 from bgilbert/bootengine
...
sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race
2017-03-29 12:49:31 -07:00
Benjamin Gilbert
22c5664507
sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race
2017-03-29 12:01:18 -07:00
Benjamin Gilbert
1e63ab8ae6
Merge pull request #534 from bgilbert/checkbashisms
...
bump(dev-util/checkbashisms): sync with upstream
2017-03-28 13:33:14 -07:00
Benjamin Gilbert
3322facbdb
bump(dev-util/checkbashisms): sync with upstream
...
Fixes warning during image_to_vm.sh:
Unescaped left brace in regex is deprecated, passed through in regex
2017-03-28 13:22:47 -07:00
David Michael
581d483801
Merge pull request #2492 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:44 -07:00
David Michael
66dca6ab85
Merge pull request #657 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:35 -07:00
David Michael
9536781af1
Merge pull request #533 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:25 -07:00
Benjamin Gilbert
50cec95cf4
Merge pull request #2495 from bgilbert/bootengine
...
sys-kernel/bootengine: bump for first_boot and emergency shell timeout
2017-03-23 19:29:22 -07:00
Benjamin Gilbert
02fc176a86
sys-kernel/bootengine: bump for first_boot and emergency shell timeout
...
Change first-boot detection to use a file in /boot, and time out starting
the emergency shell after 5 minutes.
2017-03-23 18:58:21 -07:00
Benjamin Gilbert
d234da9ffc
Merge pull request #651 from bgilbert/firstboot-file
...
Set coreos.first_boot based on existence of file in ESP
2017-03-23 18:29:41 -07:00
David Michael
61cc84832e
bump(dev-embedded/u-boot-tools): sync with upstream
2017-03-22 16:50:31 -07:00
David Michael
3e90630805
profiles: bump perf after dropping libperl
2017-03-22 12:59:53 -07:00
David Michael
5bc281006c
bump(sys-kernel/linux-headers): sync with upstream
2017-03-22 12:55:51 -07:00
David Michael
f6bb291158
bump(dev-util/patchutils): sync with upstream
2017-03-22 12:55:12 -07:00
Benjamin Gilbert
219eb830fb
Merge pull request #2493 from bgilbert/open-vm-tools
...
app-emulation/open-vm-tools: Update to 10.1.5
2017-03-22 10:54:58 -07:00
David Michael
43807d6763
catalyst: temporarily disable update_seed
...
This can be reverted once there is a version of the SDK containing
the updated Perl 5.22 packages.
2017-03-21 21:12:40 -07:00
David Michael
359ac29f5b
bump(virtual/perl-Test-Harness): sync with upstream
2017-03-21 18:54:11 -07:00
David Michael
09efc42e8f
update_chroot: fix SDK updates during the Perl 5.22 upgrade
2017-03-21 18:52:05 -07:00
David Michael
28f5d7f276
update_chroot: store emerge flags in arrays
2017-03-21 18:36:43 -07:00
Alex Crawford
53a2df7d5b
Merge pull request #2494 from crawford/init
...
coreos-base/coreos-init: fix motdgen ordering
2017-03-21 18:24:30 -07:00
Alex Crawford
3f4d3a9294
coreos-base/coreos-init: fix motdgen ordering
2017-03-21 18:16:27 -07:00
David Michael
76d08d72b6
bump(virtual/perl-File-Temp): sync with upstream
2017-03-21 18:15:18 -07:00
David Michael
9d5737b079
bump(virtual/perl-Data-Dumper): sync with upstream
2017-03-21 18:15:18 -07:00
David Michael
26f58648c7
bump(perl-core/File-Temp): sync with upstream
2017-03-21 18:15:18 -07:00
David Michael
fcb1714101
bump(perl-core/Digest): sync with upstream
2017-03-21 18:15:18 -07:00
David Michael
081b551998
bump(dev-perl/Module-Build): sync with upstream
2017-03-21 18:15:18 -07:00
