Krzesimir Nowak
1c48d2cdf4
sec-policy/selinux-podman: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
9b48d6eebe
sec-policy/selinux-pcscd: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
a388698251
sec-policy/selinux-ntp: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
311145aa13
sec-policy/selinux-mandb: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
04893842cf
sec-policy/selinux-makewhatis: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
969fda1a50
sec-policy/selinux-logrotate: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
f32cdfa3dd
sec-policy/selinux-loadkeys: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
dbd27ab586
sec-policy/selinux-ldap: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
72eaaff53a
sec-policy/selinux-kerberos: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
44c28de58b
sec-policy/selinux-kdump: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
ba72335ddd
sec-policy/selinux-gpg: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
48de7b5bcb
sec-policy/selinux-git: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
18e8db15b6
sec-policy/selinux-dracut: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
b5b8724bd2
sec-policy/selinux-docker: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
3e641f81b3
sec-policy/selinux-dnsmasq: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
dc37a2f6d1
sec-policy/selinux-dirmngr: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
d558de4b80
sec-policy/selinux-chronyd: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
d3cb4e8858
sec-policy/selinux-cdrecord: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
7baa46de59
sec-policy/selinux-brctl: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
e92322adbe
sec-policy/selinux-bind: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
cdeaa93f6a
sec-policy/selinux-apm: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
39ae787572
sec-policy/selinux-apache: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
414f69d3b9
overlay profiles: Switch to hardened/selinux/systemd profiles
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
298fc4e974
overlay coreos/config, profiles: Drop PKG_INSTALL_MASK
...
PKG_INSTALL_MASK is for binary packages like INSTALL_MASK is for
${ROOT} - whatever is added to PKG_INSTALL_MASK will be absent from
binary packages. But we may want to install different content to
different kind of images using the same binary packages. For example,
we may want to install some python selinux scripts to developer
container, but not to production image.
I started adding PKG_INSTALL_MASK before, because of a
misunderstanding - I thought that PKG_INSTALL_MASK is about filtering
files that are installed to ${ROOT} from binary packages. So in
reality, PKG_INSTALL_MASK is really unnecessary.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
c651c5f39a
save logs
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
flatcar-ci
8d5225a469
New version: main-4620.0.0-nightly-20260223-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4620.0.0-nightly-20260223-2100
2026-02-23 21:00:26 +00:00
flatcar-ci
bcd829101b
New version: main-4617.0.0-nightly-20260220-2100
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-02-21 02:44:35 +00:00
flatcar-ci
89481c7478
New version: main-4617.0.0-nightly-20260220-2100-INTERMEDIATE
...
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-02-20 21:00:26 +00:00
Krzesimir Nowak
420c84fe2e
Merge pull request #3641 from flatcar/buildbot/weekly-portage-stable-package-updates-2026-01-12
...
Weekly portage-stable package updates 2026-01-12
2026-02-20 16:41:26 +01:00
Krzesimir Nowak
107ab588e7
changelog: Add entries
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 15:25:00 +01:00
Krzesimir Nowak
634685563d
overlay coreos/user-patches: Add a patch for app-containers/containerd
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
0e130f4ac8
overlay sys-fs/overlaybd: Another patch fixing build with gcc 15
...
This time in overlaybd itself. Also regenerate the offline build
patch, so it can be easily applied using `git am`.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
4cb33d02c7
overlay sys-fs/overlaybd: Append a build fix to photon cross patch
...
It is not exactly a cross fix, but it may serve as a single place for
photon fixes. This time overlaybd stopped compiling with gcc15 due to
missing inclusion of cstdint to get a definition of uint64_t. Most
likely some other header used to pull it in, but now it does not.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
9774ded683
build_packages: Break a new circular dependency
...
Looks like enabling sssd in sys-auth/pambase created a new cycle:
sys-auth/pambase[sssd] -> sys-auth/sssd -> sys-apps/shadow[pam] -> sys-auth/pambase
Let's break it up at pambase. Also fix a mistake in a comment and sort
the USE flags alphabetically.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
20596288ae
build_library/catalyst_toolchains: Copy binaries from sysroot too
...
Any meson package now uses sysroot.eclass as a part of the cross-file
creation and the eclass requires ld.so and ldd to be available in
${ROOT}/usr/bin, so copy over the bin and sbin directories too, just
in case.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
2cccf3877a
overlay profiles: Add accept keywords for sys-libs/libselinux
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
f66ed629c3
sys-libs/libselinux: Add our ebuild fixing some python issues
...
Hopefully this will be taken by upstream too, so it won't be
clobberred on next update.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
3b393324da
overlay coreos/config: Fix agent binaries locations
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
316c244709
overlay coreos/config: Add a gcc15 workaround for net-analyzer/netperf
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
59ef07e24f
build_library: Fix setting gcc profile with latest gcc-config
...
In order to fix some bash-completion issues, the output of "gcc-config
-l" has changed slightly - it received one more leading space in the
output.
Old output:
[1] aarch64-cros-linux-gnu-15 *
New output:
[1] aarch64-cros-linux-gnu-15 *
This has added another field from cut's point of view, as it was
splitting the line into fields by single spaces, which means that
instead of getting "aarch64-cros-linux-gnu-15" we were getting
"[1]". This has caused grep to match nothing, setting the error status
in PIPESTATUS and finally a function failure.
Instead of fiddling with leading empty fields, just strip the leading
spaces, dammit.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
7d1c684a0f
.github: Update package list
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
3753b0948a
dev-perl/PerlIO-utf8_strict, virtual/perl-XSLoader: Drop unused packages
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
81bdd8e2b4
overlay coreos/user-patches: Regenerate patches for sys-block/thin-provisioning-tools
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
e7075f68be
overlay coreos/user-patches: Regenerate patches for sys-auth/pambase
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
0656bf04b7
overlay coreos/user-patches: Regenerate patches for sys-apps/systemd
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
86df9b89bc
overlay coreos/user-patches: Update a patch for sec-policy packages
...
Dropped a modification in system/logging module - it was redundant.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
ffde32992a
overlay profiles: Move accept keywords for dev-libs/xxhash to base profile
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
1a0c41b4de
overlay profiles: Move accept keywords for sys-fs/erofs-utils to base profile
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
f805e9346c
overlay profiles: Drop accept keywords for sys-block/thin-provisioning-tools
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
1b626d4f8e
overlay profiles: Prepare for policy packages using EAPI 8
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00