Commit Graph

20213 Commits

Author SHA1 Message Date
Flatcar Buildbot
22cd69d6eb dev-build/cmake: Sync with Gentoo
It's from Gentoo commit 80966f2460eeeb7891d9c98264d885ae2f57edf3.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
607792412e dev-build/autoconf: Sync with Gentoo
It's from Gentoo commit a8f1d72e0208c83f031c0c3af64d99c87e587caf.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
c2de39e84f app-shells/bash: Sync with Gentoo
It's from Gentoo commit 7d2c78b92135f294d54f12923cca03f0f2e859e8.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
ee5654b1dd app-portage/getuto: Sync with Gentoo
It's from Gentoo commit 29d8d34672ff640b6abb3fa6efb25ee81b558508.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
e81d9e4e02 app-portage/gentoolkit: Sync with Gentoo
It's from Gentoo commit a589fc1d1866c9f3256d16bb11ae5d8307adac60.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
b4ca79b618 app-eselect/eselect-rust: Sync with Gentoo
It's from Gentoo commit 11f39867af8136579612f901a2b61bbbf7ffc7b0.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
094828682d app-emulation/qemu: Sync with Gentoo
It's from Gentoo commit 7714fb9cba514316ef1a088f94f71c57241f4425.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
ef4c91834b app-editors/nano: Sync with Gentoo
It's from Gentoo commit 173435dd12e9644f800a0e1417b8ba62f8d35f71.
2024-11-18 17:05:07 +01:00
Flatcar Buildbot
c0c7deb5cf app-doc/eclass-manpages: Sync with Gentoo
It's from Gentoo commit eb3569042485d0210f05c90ec4ddfcbfa3865826.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
04b984c2ab app-crypt/pinentry: Sync with Gentoo
It's from Gentoo commit 8d0c32bb4c7c67540956c7a2ce4d9751105a858e.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
85d76d4480 app-crypt/gpgme: Sync with Gentoo
It's from Gentoo commit 3dc06f563bff6d3e3fa81a66914362da1b15b45c.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
23712bc3e4 app-crypt/gnupg: Sync with Gentoo
It's from Gentoo commit 46573bad4a55a674fb24b26ec74565e988c44811.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
0d2da09a2b app-containers/runc: Sync with Gentoo
It's from Gentoo commit 76279d909346945aabe1fd8a54ca85f69f8cc6d1.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
53970e3162 app-containers/podman: Sync with Gentoo
It's from Gentoo commit 0fe064610dd3ae7e01ac4715904b0ef51f95d218.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
5966be24fb app-containers/netavark: Sync with Gentoo
It's from Gentoo commit 01ba4dc61965ef7658a24728841c04c9a1ce4871.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
2c7b663582 app-containers/docker-cli: Sync with Gentoo
It's from Gentoo commit 3f2c4112f9c886a3101b67a0808be6ce5470122c.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
c976d3f9bd app-containers/docker: Sync with Gentoo
It's from Gentoo commit 451103c2b42be976a005295aff6e1ca27674fa59.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
2e4df3f5b3 app-containers/containers-storage: Sync with Gentoo
It's from Gentoo commit 48e607e81b2b9310a950649c1884e4c02dc55184.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
ddcf73a95f app-containers/aardvark-dns: Sync with Gentoo
It's from Gentoo commit 01ba4dc61965ef7658a24728841c04c9a1ce4871.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
8a6678680e app-arch/xz-utils: Sync with Gentoo
It's from Gentoo commit 24432545a95393f99c34edbc780fc3b9892161d7.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
27ef54ec83 app-arch/libarchive: Sync with Gentoo
It's from Gentoo commit bd301c58e9c48c802f6889448d308131d24f431a.
2024-11-18 17:05:06 +01:00
Flatcar Buildbot
069ca8163f app-arch/cpio: Sync with Gentoo
It's from Gentoo commit 5f3aae3b1196484405b16d3954149c2eacbf0192.
2024-11-18 17:05:06 +01:00
James Le Cuirot
d35954ca15
app-crypt/azure-keyvault-pkcs11: Bump to new pre-release for HSM support
This one includes all the renaming for Azure Key Vault.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-18 13:33:12 +00:00
Flatcar Buildbot
90a0165d79 sys-kernel/coreos-sources: Update from 6.6.60 to 6.6.62 2024-11-18 07:08:07 +00:00
flatcar-ci
d3483178a0 New version: main-4154.0.0-nightly-20241114-2100 2024-11-14 21:00:24 +00:00
Mathieu Tortuyaux
13c2791c70
Merge pull request #2443 from flatcar/firmware-20241110-main
Upgrade Linux Firmware in main from 20241017 to 20241110
2024-11-14 21:12:08 +01:00
James Le Cuirot
8599de506f
Merge pull request #2441 from flatcar/chewi/akv-signing
Add (temporary) signed shim and sign official builds with Azure Key Vault
2024-11-14 10:58:19 +00:00
Flatcar Buildbot
f9ba1fbaf3 sys-kernel/coreos-firmware: Update from 20241017 to 20241110 2024-11-14 07:05:27 +00:00
flatcar-ci
7166dbd551 New version: main-4153.0.0-nightly-20241113-2100 2024-11-13 21:00:25 +00:00
Sayan Chowdhury
58b7eac621
sys-boot/shim: Add the README for the shim repo
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 23:55:34 +05:30
James Le Cuirot
e3c524c91d
app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-13 12:19:20 +00:00
James Le Cuirot
13516911f1
app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable
The cross issues that were previously addressed by our fork are no
longer an issue since p11-kit migrated to Meson.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-13 12:19:19 +00:00
James Le Cuirot
7b0a1ae4f9
coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit
p11-kit is a dependency of azure-keyvault-pkcs11, but we will also use
it directly to fetch the certificate from Azure Key Vault.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-13 12:19:18 +00:00
Sayan Chowdhury
2d73ea8fa1
profiles: Add the azure-keyvault-pkcs11 to accept_keywords
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 12:19:17 +00:00
Sayan Chowdhury
987a3e675f
app-crypt/azure-keyvault-pkcs11: Add new package
It hasn't been added to Gentoo yet.
2024-11-13 12:19:16 +00:00
Sayan Chowdhury
8ebf73f6aa
dev-cpp/azure-identity: Add from Gentoo
It's from Gentoo commit 82ec02943f7f0ddaa87f623cee138608571a3978.
2024-11-13 12:19:14 +00:00
Sayan Chowdhury
ecb2ee89a1
dev-cpp/azure-security-keyvault-keys: Add from Gentoo
It's from Gentoo commit 768b3c1959debce15854362ff7db176cda76c055.
2024-11-13 12:19:13 +00:00
Sayan Chowdhury
b8609dc2a0
dev-cpp/azure-security-keyvault-certificates: Add from Gentoo
It's from Gentoo commit 69e4044b72d971f5603df77793db86c40e582e2e.
2024-11-13 12:19:12 +00:00
Sayan Chowdhury
8dc736d755
dev-cpp/azure-core: Add from Gentoo
It's from Gentoo commit d286faf494dcb60f81f0de921fa623d952962fc1.
2024-11-13 12:19:11 +00:00
Sayan Chowdhury
a15ff23bdb
shim, shim-signed: Move the packages from SDK to BOARD packages
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 12:19:10 +00:00
James Le Cuirot
b401cee2a9
sys-boot/shim-signed: Add shim-signed package to place signed binaries
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-13 12:19:09 +00:00
Sayan Chowdhury
761bc04a19
sys-boot/shim: Append the suffix to the shim binary
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 12:19:08 +00:00
Sayan Chowdhury
02c0bdaa28
sys-boot/shim: Include @@VERSION@@ in SBAT for version
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 12:19:07 +00:00
Sayan Chowdhury
eef935e596
sys-boot/shim: Add the SBAT data to shim binary
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 12:19:06 +00:00
Sayan Chowdhury
b8f290bae4
sys-boot/shim: Add a use flag to use a DER files for shim builds
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2024-11-13 12:18:44 +00:00
James Le Cuirot
d18a373cb7
Merge pull request #2442 from flatcar/chewi/root-deps
Drop --root-deps and --root-deps=rdeps emerge options
2024-11-13 09:19:23 +00:00
Flatcar Buildbot
6cb21a37e1
sys-apps/portage: Sync with Gentoo
It's from Gentoo commit ba2693dfc0f0f5535e6371c4e4d19806109537c9.
2024-11-12 22:08:27 +00:00
flatcar-ci
9085e02c75 New version: main-4152.0.0-nightly-20241112-2100 2024-11-12 21:00:29 +00:00
James Le Cuirot
010afcd35d
sys-boot/mokutil: Install on arm64 now that it supports Secure Boot
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-12 12:02:01 +00:00
James Le Cuirot
5125317506
coreos-base/coreos-sb-keys: Drop unnecessary PK and KEK certificates
These are only needed when you are going to ship DB updates to existing
systems, which we are not going to do. Our EFI variables are only for
testing. End users are expected to use EFI variables provided by their
hosts or hardware vendors. We presumably provided these before because
some PK and KEK does need to be provided, but we can now use the
Microsoft and Red Hat ones provided via Gentoo's edk2 package.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
2024-11-12 12:02:00 +00:00