Benjamin Gilbert
7bab03e772
Merge pull request #638 from bgilbert/reinject
...
Add script to inject kernel/GRUB/shim
2017-02-02 17:39:08 -08:00
Benjamin Gilbert
5541e1521e
Merge pull request #639 from bgilbert/other-boards
...
build_image: Correctly disable verity on unsupported boards
2017-02-02 17:18:22 -08:00
Benjamin Gilbert
d8d7b1ee86
Merge pull request #636 from bgilbert/secure-boot
...
build_image: Extract and upload GRUB/shim EFI images for signing
2017-02-02 17:17:53 -08:00
Benjamin Gilbert
b11d3a7c1d
build_image: Correctly disable verity on unsupported boards
...
Fixes up missing bit from e630a36e50799ec72305b03a6d6fe354d2b8b059.
2017-02-02 17:08:01 -08:00
Benjamin Gilbert
e65d5101cf
build_image: Extract and upload GRUB/shim EFI images for signing
...
On arm64, extract only GRUB, since there is no shim. On dev builds,
extract neither.
2017-02-02 17:00:15 -08:00
Benjamin Gilbert
f16226acb5
grub_install: Install shim in official amd64 builds
2017-02-02 16:58:52 -08:00
Benjamin Gilbert
dd3fbb8ece
image_inject_bootchain: New script to inject kernel/GRUB/shim
...
Add script to replace the unsigned kernel, EFI GRUB, and shim in an
image's EFI System Partition with (externally-produced) signed ones.
2017-02-02 16:53:16 -08:00
Benjamin Gilbert
5443a101f7
build_image: Move one message to logging framework
2017-02-02 16:51:58 -08:00
David Michael
7419751493
Merge pull request #637 from dm0-/fix-verity
...
Fix verity in our automated builds
2017-02-02 16:48:11 -08:00
David Michael
e630a36e50
Revert "build_image: Remove disable_read_write variable"
...
This reverts commit a7ffba9a9f5c18bdc8ab5495b81855bc5ba76c19.
The build_image script can build multiple formats. When our
releases and automated builds are creating developer containers and
production images from the same command, the verity flag would be
disabled while building the container and remain disabled when building
the production image. This resulted in no verity in all our builds.
2017-02-02 15:08:43 -08:00
Benjamin Gilbert
8751c85494
image_set_group: Move generic setup/teardown code into a library
2017-02-02 12:51:35 -08:00
Alex Crawford
0ef1b76779
Merge pull request #2410 from crawford/cpus
...
sys-kernel/coreos-kernel: increase CONFIG_NR_CPUS
2017-02-01 18:06:32 -08:00
jakub-d
e423581c75
sys-kernel/coreos-kernel: increase CONFIG_NR_CPUS
2017-02-01 15:47:38 -08:00
Benjamin Gilbert
dcc3367164
Merge pull request #635 from bgilbert/vmware-bin
...
image_to_vm: Add vmware_raw image type
2017-02-01 15:46:36 -08:00
Alex Crawford
fd402748be
Merge pull request #634 from jeanfabrice/jeanfabrice/guestinfo
...
Set ovf transport mode so guestinfo gets available to coreos-cloudinit
2017-02-01 15:46:23 -08:00
David Michael
e0a8e7a82e
Merge pull request #2408 from dm0-/glsa
...
GLSA syncs
2017-02-01 14:11:29 -08:00
David Michael
8f190facd2
profiles: sync squashfs and libpng versions on arm64
2017-02-01 12:00:57 -08:00
Euan Kemp
686cb1384e
Merge pull request #2407 from euank/revert-double-extra-rc3
...
Revert "Merge pull request #2403 from euank/1298-runc-userns"
2017-01-31 22:45:30 -08:00
Euan Kemp
f324f1c7c5
Revert "Merge pull request #2403 from euank/1298-runc-userns"
...
This reverts commit 7f3b121e061d4592729161026f18abe5444f22f0, reversing
changes made to aaaef8fa392528e6b57135a960428e9ef8b0dfbc.
I messed up and cherry-picked into master instead of the build-1298
branch and it worked because the file in question had since been renamed
to rc4.
This reverts that extraneous file.
2017-01-31 22:44:04 -08:00
David Michael
08200dc94a
Merge pull request #2404 from dm0-/bugs-1773
...
Upgrade to OpenSSH 7.4_p1
2017-01-31 20:17:24 -08:00
Euan Kemp
85cd5d0426
Merge pull request #2403 from euank/1298-runc-userns
...
app-emulation/runc: workaround userns issue
2017-01-31 19:38:24 -08:00
David Michael
681c94dc41
net-misc/openssh: apply our changes to the new version
...
Specifically, this drops the bindist USE flag, skips installing
some init.d files, and updates KEYWORDS for our architectures.
The build fix carried previously has been dropped since it is now
included in the upstream source archive.
2017-01-31 18:15:09 -08:00
David Michael
1d4139c1f0
net-misc/openssh: sync with the latest Gentoo ebuild
2017-01-31 18:15:09 -08:00
Euan Kemp
af7423451f
app-emulation/runc: workaround userns issue
...
This fixes a bug in usernamespace support under selinux.
This patch matches the one applied to fedora.
2017-01-31 17:22:40 -08:00
David Michael
7b2856c765
Merge pull request #2401 from dm0-/docker
...
Sync commits with Docker 1.13
2017-01-31 14:18:25 -08:00
David Michael
1275e42126
app-emulation/containerd: sync with Docker 1.13 commits
2017-01-31 13:56:04 -08:00
David Michael
b1db1b1b9f
app-emulation/docker-proxy: sync with Docker 1.13 commits
2017-01-31 13:56:04 -08:00
David Michael
c13e3b9294
app-emulation/runc: sync with Docker 1.13 commits
2017-01-31 13:56:04 -08:00
Euan Kemp
57351ee715
Merge pull request #2399 from euank/selinux-userns-backport
...
sys-kernel/coreos-sources: backport selinux+userns patch
2017-01-30 18:15:40 -08:00
Euan Kemp
3ed207fb7c
Merge pull request #2398 from euank/runc-userns-selinux
...
app-emulation/runc: workaround userns issue
2017-01-30 17:41:07 -08:00
Euan Kemp
07f1c9d7f6
app-emulation/runc: workaround userns issue
...
This fixes a bug in usernamespace support under selinux.
This patch matches the one applied to fedora.
2017-01-30 17:39:45 -08:00
Euan Kemp
3fa9ab3724
sys-kernel/coreos-sources: backport selinux+userns patch
...
Upstream as https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=01593d3299a1cfdb5e08acf95f63ec59dd674906
See also https://github.com/opencontainers/runc/issues/1215
2017-01-30 17:26:18 -08:00
Benjamin Gilbert
cc53d1442f
Merge pull request #2397 from bgilbert/grub-amd64
...
sys-boot/grub: Update to fix amd64 build
2017-01-30 13:43:07 -08:00
Benjamin Gilbert
bc485b7f5a
sys-boot/grub: Update to fix amd64 build
2017-01-30 13:40:19 -08:00
David Michael
2b1adc04cf
Merge pull request #2381 from dm0-/docker
...
Upgrade to Docker 1.13
2017-01-30 12:41:14 -08:00
David Michael
fac37442a5
app-emulation/docker: upgrade to unpatched 1.13.0
2017-01-30 12:40:19 -08:00
David Michael
75cd0c87c8
app-emulation/docker-proxy: use the CoreOS Go functions
2017-01-30 12:40:17 -08:00
Michael Marineau
74edf63449
Merge pull request #611 from glevand/for-merge-arm64-verity
...
scripts: Add arm64 verity support
2017-01-30 11:07:21 -08:00
Geoff Levand
5b3cdc4421
Merge pull request #2396 from glevand/for-merge-grub
...
sys-boot/grub: update to get arm64 verity
2017-01-30 11:03:06 -08:00
Geoff Levand
9bc37233f6
sys-boot/grub: update to get arm64 verity
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-01-30 10:54:36 -08:00
Geoff Levand
1377cc403c
Merge pull request #2277 from glevand/for-merge-arm64-verity
...
coreos-sources: Add arm64 verity hash
2017-01-27 15:28:32 -08:00
Geoff Levand
04bba1b1c9
coreos-sources: Add arm64 verity hash
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-01-27 15:27:08 -08:00
Benjamin Gilbert
1cd11cfb65
Merge pull request #2389 from bgilbert/kernel-readme
...
sys-kernel: Update README for current implementation
2017-01-25 15:25:59 -08:00
Benjamin Gilbert
4bf33f4bcf
sys-kernel/README: Document use of slot operators in coreos-kernel
2017-01-25 15:19:03 -08:00
Benjamin Gilbert
413c889b59
sys-kernel: Fix minor inaccuracy in README
2017-01-25 15:18:29 -08:00
David Michael
d519801519
Merge pull request #521 from dm0-/drop
...
Drop some unused packages
2017-01-24 16:30:20 -08:00
David Michael
76eaed7ac9
Merge pull request #2392 from dm0-/glsa
...
profiles: sync nss and nspr versions on arm64
2017-01-24 16:23:53 -08:00
David Michael
fc7be6495c
Merge pull request #520 from dm0-/glsa
...
NSS GLSA
2017-01-24 16:23:39 -08:00
David Michael
f49bc1521a
Merge pull request #2391 from dm0-/grub-sync
...
sys-boot/grub: bump to sync with upstream master
2017-01-24 16:22:04 -08:00
David Michael
6ca04d0f71
sys-fs/mtd-utils: drop dead package
2017-01-24 16:16:12 -08:00
