34373 Commits

Author SHA1 Message Date
Krzesimir Nowak
1c48d2cdf4 sec-policy/selinux-podman: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
9b48d6eebe sec-policy/selinux-pcscd: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
a388698251 sec-policy/selinux-ntp: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
311145aa13 sec-policy/selinux-mandb: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
04893842cf sec-policy/selinux-makewhatis: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
969fda1a50 sec-policy/selinux-logrotate: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
f32cdfa3dd sec-policy/selinux-loadkeys: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
dbd27ab586 sec-policy/selinux-ldap: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
72eaaff53a sec-policy/selinux-kerberos: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
44c28de58b sec-policy/selinux-kdump: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
ba72335ddd sec-policy/selinux-gpg: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
48de7b5bcb sec-policy/selinux-git: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
18e8db15b6 sec-policy/selinux-dracut: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
b5b8724bd2 sec-policy/selinux-docker: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
3e641f81b3 sec-policy/selinux-dnsmasq: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
dc37a2f6d1 sec-policy/selinux-dirmngr: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
d558de4b80 sec-policy/selinux-chronyd: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
d3cb4e8858 sec-policy/selinux-cdrecord: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
7baa46de59 sec-policy/selinux-brctl: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
e92322adbe sec-policy/selinux-bind: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
cdeaa93f6a sec-policy/selinux-apm: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
39ae787572 sec-policy/selinux-apache: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
414f69d3b9 overlay profiles: Switch to hardened/selinux/systemd profiles
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
298fc4e974 overlay coreos/config, profiles: Drop PKG_INSTALL_MASK
PKG_INSTALL_MASK is for binary packages like INSTALL_MASK is for
${ROOT} - whatever is added to PKG_INSTALL_MASK will be absent from
binary packages. But we may want to install different content to
different kind of images using the same binary packages. For example,
we may want to install some python selinux scripts to developer
container, but not to production image.

I started adding PKG_INSTALL_MASK before, because of a
misunderstanding - I thought that PKG_INSTALL_MASK is about filtering
files that are installed to ${ROOT} from binary packages. So in
reality, PKG_INSTALL_MASK is really unnecessary.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
c651c5f39a save logs
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
flatcar-ci
8d5225a469 New version: main-4620.0.0-nightly-20260223-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
main-4620.0.0-nightly-20260223-2100
2026-02-23 21:00:26 +00:00
flatcar-ci
bcd829101b New version: main-4617.0.0-nightly-20260220-2100
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-02-21 02:44:35 +00:00
flatcar-ci
89481c7478 New version: main-4617.0.0-nightly-20260220-2100-INTERMEDIATE
Signed-off-by: flatcar-ci <infra+ci@flatcar-linux.org>
2026-02-20 21:00:26 +00:00
Krzesimir Nowak
420c84fe2e
Merge pull request #3641 from flatcar/buildbot/weekly-portage-stable-package-updates-2026-01-12
Weekly portage-stable package updates 2026-01-12
2026-02-20 16:41:26 +01:00
Krzesimir Nowak
107ab588e7 changelog: Add entries
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 15:25:00 +01:00
Krzesimir Nowak
634685563d overlay coreos/user-patches: Add a patch for app-containers/containerd
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
0e130f4ac8 overlay sys-fs/overlaybd: Another patch fixing build with gcc 15
This time in overlaybd itself. Also regenerate the offline build
patch, so it can be easily applied using `git am`.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
4cb33d02c7 overlay sys-fs/overlaybd: Append a build fix to photon cross patch
It is not exactly a cross fix, but it may serve as a single place for
photon fixes. This time overlaybd stopped compiling with gcc15 due to
missing inclusion of cstdint to get a definition of uint64_t. Most
likely some other header used to pull it in, but now it does not.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
9774ded683 build_packages: Break a new circular dependency
Looks like enabling sssd in sys-auth/pambase created a new cycle:

sys-auth/pambase[sssd] -> sys-auth/sssd -> sys-apps/shadow[pam] -> sys-auth/pambase

Let's break it up at pambase. Also fix a mistake in a comment and sort
the USE flags alphabetically.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
20596288ae build_library/catalyst_toolchains: Copy binaries from sysroot too
Any meson package now uses sysroot.eclass as a part of the cross-file
creation and the eclass requires ld.so and ldd to be available in
${ROOT}/usr/bin, so copy over the bin and sbin directories too, just
in case.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
2cccf3877a overlay profiles: Add accept keywords for sys-libs/libselinux
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
f66ed629c3 sys-libs/libselinux: Add our ebuild fixing some python issues
Hopefully this will be taken by upstream too, so it won't be
clobberred on next update.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
3b393324da overlay coreos/config: Fix agent binaries locations
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
316c244709 overlay coreos/config: Add a gcc15 workaround for net-analyzer/netperf
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
59ef07e24f build_library: Fix setting gcc profile with latest gcc-config
In order to fix some bash-completion issues, the output of "gcc-config
-l" has changed slightly - it received one more leading space in the
output.

Old output:

 [1] aarch64-cros-linux-gnu-15 *

New output:

  [1] aarch64-cros-linux-gnu-15 *

This has added another field from cut's point of view, as it was
splitting the line into fields by single spaces, which means that
instead of getting "aarch64-cros-linux-gnu-15" we were getting
"[1]". This has caused grep to match nothing, setting the error status
in PIPESTATUS and finally a function failure.

Instead of fiddling with leading empty fields, just strip the leading
spaces, dammit.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
7d1c684a0f .github: Update package list
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
3753b0948a dev-perl/PerlIO-utf8_strict, virtual/perl-XSLoader: Drop unused packages
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
81bdd8e2b4 overlay coreos/user-patches: Regenerate patches for sys-block/thin-provisioning-tools
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
e7075f68be overlay coreos/user-patches: Regenerate patches for sys-auth/pambase
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
0656bf04b7 overlay coreos/user-patches: Regenerate patches for sys-apps/systemd
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
86df9b89bc overlay coreos/user-patches: Update a patch for sec-policy packages
Dropped a modification in system/logging module - it was redundant.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
ffde32992a overlay profiles: Move accept keywords for dev-libs/xxhash to base profile
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
1a0c41b4de overlay profiles: Move accept keywords for sys-fs/erofs-utils to base profile
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
f805e9346c overlay profiles: Drop accept keywords for sys-block/thin-provisioning-tools
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00
Krzesimir Nowak
1b626d4f8e overlay profiles: Prepare for policy packages using EAPI 8
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-20 12:13:38 +01:00