Commit Graph

22792 Commits

Author SHA1 Message Date
Krzesimir Nowak
50183b48b8 ci-automation: Get two files to build vms instead of a whole directory
Getting the contents of the directory in the buildcache involves using
rsync with some ssh invocation to log in as a bincache user. It's not
a thing that will work locally unless the user gets ahold of the SSH
key allowing the user to log in to buildcache as a bincache user.

Replace it by downloading two files that are actually needed for
building vms: an image file and the version file. This just uses curl
and is accessible for everyone.
2023-02-08 14:50:36 +01:00
Krzesimir Nowak
2644094e6c coreos-base/coreos-init, sys-apps/baselayout: Move installing symlinks
Install some of the symlinks in the baselayout package, instead of
coreos-init. Systemd started installing its private libraries in
/usr/lib64/systemd instead of /usr/lib/systemd which led to the
situation where /usr/lib64/systemd stopped being a symlink to
/usr/lib/systemd and became a separate directory. This could break
compatibility with software that expected things to be in
/usr/lib64/systemd.

Some symlink installation stays in init, though. This is to avoid
having them installed for some oem images where they become dangling.
2023-02-08 13:04:28 +01:00
Sayan Chowdhury
86b23cc1be sys-apps/systemd: Apply Flatcar modifications
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-08 13:01:32 +01:00
Sayan Chowdhury
3eca5ac51d sys-apps/systemd: Sync with Gentoo; update to 252.5
It's from Gentoo commit 5ee2ced8801f349aeaad982f72736d0b162ba1c1.
2023-02-08 13:01:32 +01:00
Dongsu Park
bd4c0572d1 dev-libs/openssl: update to 3.0.8
Sync with Gentoo, update dev-libs/openssl to 3.0.8, mainly to address
CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215,
CVE-2023-0216, CVE-2023-0217, CVE-2023-0286, CVE-2023-0401.
2023-02-08 09:00:50 +01:00
flatcar-ci
67699c9121 New version: main-3508.0.0-nightly-20230207-2100 2023-02-07 21:00:26 +00:00
Krzesimir Nowak
ca2eb65674 Merge pull request #2404 from flatcar/krnowak/weekly
Profile changes and cleanups for weekly updates
2023-02-07 17:38:42 +01:00
Krzesimir Nowak
da93011ea9 Merge pull request #409 from flatcar/buildbot/weekly-package-updates-2023-01-23
Weekly package updates 2023-01-23
2023-02-07 17:38:40 +01:00
Dongsu Park
dc180e9dc1 Merge pull request #2426 from flatcar/dongsu/sudo-1.19.2_p2
app-admin/sudo: update to 1.9.12_p2
2023-02-07 17:05:14 +01:00
Krzesimir Nowak
e99a025508
Merge pull request #636 from flatcar/krnowak/matching-cross-toolchain-versions
build_library/toolchain_util.sh: Install matching versions of toolchain packages
2023-02-07 15:12:18 +01:00
Krzesimir Nowak
a6e7097ac8 coreos/user-patches: Add a user patch sys-devel/gcc 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
c694ab958f profiles: Mask sys-devel/gcc versions that are stable only on one arch 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
d51554d27d coreos-base/update_engine: Stop using deprecated stuff 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
14fb10149a profiles: Bump version of net-misc/rsync in accept keywords 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
d2c835e6bb profiles: Add accept keywords for net-misc/curl 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
d51b66201f profiles: Add accept keywords for net-dns/bind-tools 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
452a1201a9 profiles: Drop obsolete use flag for dev-vcs/git 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
b54879d9cc profiles: Drop accept keywords for dev-vcs/git
We update to 2.39.1, which is stable for both amd64 and arm64.
2023-02-07 15:08:07 +01:00
Krzesimir Nowak
0c15ec2569 profiles: Bump version of dev-util/bpftool in accept keywords 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
bdacc717e2 profiles: Add accept keywords for app-emulation/qemu 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
3a41c4b1b5 profiles: Add accept keywords for app-editors/vim-core 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
3c493aa788 profiles: Add accept keywords for app-editors/vim 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
e3bed9f973 profiles: Add accept keywords for app-arch/ncompress
This pulls in a fix for uncompress symlink.
2023-02-07 15:08:07 +01:00
Krzesimir Nowak
9f00424e1c coreos: Drop user patch for app-arch/ncompress
We are about to update to 5.0-r1 that fixes the same issue.
2023-02-07 15:08:07 +01:00
Krzesimir Nowak
8f6fde1c5f changelog: Add entries 2023-02-07 14:59:13 +01:00
Dongsu Park
5b21f36eca Merge pull request #2433 from flatcar/dongsu/iptables-1.8.8
net-firewall/iptables: update to 1.8.8-r5
2023-02-07 09:34:11 +01:00
Krzesimir Nowak
ac9adacf90
Merge pull request #642 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-02-07 08:47:54 +01:00
Flatcar Buildbot
8784d6dc6d Update mantle container image to latest HEAD 2023-02-07 07:12:28 +00:00
flatcar-ci
c066dc7117 New version: main-3507.0.0-nightly-20230206-2100 2023-02-06 21:00:29 +00:00
Kai Lüke
10886b0bc5
Merge pull request #638 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-02-06 14:42:12 +01:00
Krzesimir Nowak
2161efba6f build_library/toolchain_util.sh: Install matching versions of toolchain packages
When adding a mask or accept keywords entry for some version of a
toolchain package (gcc, libc, gdb, binutils or kernel headers), it
can't be done by just doing it, for example, for sys-devel/gcc. Both
cross-{x86_64,aarch64}-cros-linux-gnu/gcc needs to be
masked/keyworded, otherwise crossdev will pick up the latest stable
version for cross-{x86_64,aarch64}-cros-linux-gnu/gcc and this choice
is not affected by masks or accept keywords of sys-devel/gcc.

This situation does not happen all that often, but when it happens,
it's usually hard to remember to handle also the cross toolchain
packages. Forgetting to do so leads to weird issues. So instead of
telling crossdev to use the latest stable versions of cross toolchain
packages, we will tell it to use specific versions that match the
version of plain packages.
2023-02-06 11:57:40 +01:00
Dongsu Park
353a9ba2a5 changelog: add changelog for iptables 1.8.8 2023-02-06 09:47:32 +01:00
Flatcar Buildbot
016bb9f738 Update mantle container image to latest HEAD 2023-02-06 07:09:41 +00:00
Sayan Chowdhury
6a48109132 net-firewall/iptables: Apply the Flatcar patches
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2023-02-03 17:01:08 +01:00
Dongsu Park
0f2d35cc29 net-firewall/iptables: update to 1.8.8-r5
Update iptables to 1.8.8-r5.

Gentoo ref: 02b17c9bb64e147affc4acecaa0ff4151b2329bf
2023-02-03 17:01:07 +01:00
Dongsu Park
0f4f240fb6 Merge pull request #2427 from flatcar/containerd-1.6.16-main
Upgrade Containerd in main from 1.6.15 to 1.6.16
2023-02-03 14:51:52 +01:00
Flatcar Buildbot
69c78fbd82 app-emulation: Upgrade Containerd 1.6.15 to 1.6.16 2023-02-03 08:22:54 +00:00
flatcar-ci
d933e45647 New version: main-3503.0.0-nightly-20230202-2100 2023-02-02 21:00:23 +00:00
Dongsu Park
382efa98fd changelog: add changelog for sudo 1.9.12_p2 2023-02-02 17:45:30 +01:00
Sayan Chowdhury
1ae0c61528 app-admin/sudo: Apply Flatcar patches
- Remove Perl Runtime Dependency
- Remove OpenLDAP schema files for sudo
- Remove sudo.conf file as it is shipped via baselayout

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-02 17:45:30 +01:00
Dongsu Park
1ec00fcfcd app-admin/sudo: update to 1.9.12_p2
Update app-admin/sudo to 1.9.12_p2 mainly to address CVE-2023-22809.

Gentoo ref: ad2ac1d9c75f49275d32b857fefd43a5358192eb
2023-02-02 17:45:26 +01:00
Krzesimir Nowak
b0e889b36b
Merge pull request #635 from flatcar/krnowak/size-reporting
Report file and file size changes in production image and initrd
2023-02-02 17:34:30 +01:00
Flatcar Buildbot
650f6b2bd1 x11-libs/pixman: Sync with Gentoo
It's from Gentoo commit 5b86df4fdf4c864e1023f60e838f194c42fadfa2.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
e4272f3759 sys-libs/zlib: Sync with Gentoo
It's from Gentoo commit 5fe0054b3e6a55983086d25284fd7e7a25506f13.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
f33cd03761 sys-libs/libseccomp: Sync with Gentoo
It's from Gentoo commit ed468028e725c9580a7b2ee02d6b7b9375f7a0b2.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
d96a7d92e6 sys-libs/binutils-libs: Sync with Gentoo
It's from Gentoo commit e9fdffcef805793ff04d141f1b2f83dfc067af88.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
45831ef3e2 sys-fs/multipath-tools: Sync with Gentoo
It's from Gentoo commit 816055e2387bc79b730315f51a067b54965919f0.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
f7a35aad67 sys-devel/m4: Sync with Gentoo
It's from Gentoo commit 231e4e05dfbf967ae40fe2c2e4c0eebac9ac496f.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
fcdec9bd96 sys-devel/gcc-config: Sync with Gentoo
It's from Gentoo commit e958d4fadbead2caac9181c80d89ae58b4252890.
2023-02-02 16:43:42 +01:00
Flatcar Buildbot
c828bb6f17 sys-devel/gcc: Sync with Gentoo
It's from Gentoo commit 9365f1e0f71f7b4568795239d257626d218bd077.
2023-02-02 16:43:42 +01:00