8784 Commits

Author SHA1 Message Date
Kai Lueke
261ec85cfd sys-apps/baselayout: fix sssd LDAP auth with sudo
This pulls in
https://github.com/kinvolk/baselayout/pull/18
2021-08-09 17:38:22 +02:00
Dongsu Park
e63f7ab8dc Merge pull request #1168 from kinvolk/dongsu/glibc-2.33-r5
sys-libs/glibc: update to 2.33-r5
2021-08-05 10:08:43 +02:00
Thilo Fromm
5210371270 sys-apps/glibc: add Flatcar changes for 2.33-r5
- unmask amd64 and arm64
- remove tmpfiles from ebuild inherit so we don't run into a circular
  dep with systemd, use systemd_tmpfilesd instead
- take care of nscd.conf via systemd_tmpfilesd,
  add files/nscd-conf.tmpfiles.
- Don't run sanity checks in pkg_pretend to prevent gcc checks when
  only the binary package is installed.
- comment out 'dostrip -x' to force the OS image binaries to be stripped
- remove everything glibc wants to put under /etc since we use
  baselayout to provide that

Add flatcar specific changes to the build recipe.
Move PYTHON_DEPS to DEPEND so things can build.

Don't run sanity checks in pkg_pretend
(similar change as in glibc-2.29) to prevent
gcc checks when only the binary package is installed.

Based on commit 8d040f93c289.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
Signed-off-by: Dongsu Park <dongsupark@microsoft.com>
2021-08-05 09:53:52 +02:00
Dongsu Park
ce63084f8e sys-libs/glibc: sync with Gentoo for 2.33-r5
Update glibc to 2.33-r5, mainly to address CVE-2021-35942 .

Gentoo ref: 5cde29d04e2da37ded900130f0f3dea13fcc350f
2021-08-05 09:38:10 +02:00
Jeremi Piotrowski
7cf88348f3 Merge pull request #1162 from kinvolk/jepio/amazon-ssm-agent-xcompile
amazon-ssm-agent: re-add dependency to oem-ec2-compat
2021-08-04 10:20:15 +02:00
Sayan Chowdhury
4052dc2ce5 Merge pull request #1151 from kinvolk/sayan/update-libarchive-3.5.1
profiles: Remove libarchive-3.3.1 from ACCEPT_KEYWORDS
2021-08-03 20:15:07 +05:30
Sayan Chowdhury
7d0075e163 Merge pull request #1150 from kinvolk/sayan/update-expat-2.4.1
dev-libs/expat: Sync with Gentoo upstream; updates to 2.4.1
2021-08-03 20:14:36 +05:30
Sayan Chowdhury
2726b348d6 profiles: Remove libarchive-3.3.1 from ACCEPT_KEYWORDS
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-03 19:50:09 +05:30
Sayan Chowdhury
ae033984a8 Merge pull request #1157 from kinvolk/linux-5.10.55-main
Upgrade Linux Kernel in main from 5.10.52 to 5.10.55
2021-08-03 19:33:20 +05:30
Jeremi Piotrowski
cbc6a8fb90 coreos-base/oem-ec2-compat: make ssm agent conditional on ec2
and properly include all deps in RDEPEND.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-03 13:32:26 +00:00
Jeremi Piotrowski
26767b01aa Revert "Revert "Build app-emulation/amazon-ssm-agent with EC2 AMI images""
Now that the OEM partition is a btrfs partition with compression, we have
enough space to install ssm agent.

This reverts commit b6abb59c544be13e923a3e7240b5c9395c281fca.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-03 12:55:42 +00:00
Jeremi Piotrowski
0875344378 app-emulation/amazon-ssm-agent: cross-compile and use correct go version
The ebuild was missing a call to go_export() which exports GOARCH, and so was
always built for host architecture. While COREOS_GO_VERSION was specified as
go1.12, src_compile() has to use '${EGO}' to make use of it, so we were
building with go1.16 (latest).  Upstream builds with 1.12 for this version, so
we will do the same.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-03 12:33:48 +00:00
Jeremi Piotrowski
ba7b460518 Merge pull request #1130 from kinvolk/jepio/arm64-sdk-support
enable arm64 SDK bootstrap
2021-08-03 14:28:15 +02:00
Kai Lüke
393a8aa440 Merge pull request #1159 from kinvolk/kai/network-cleanup-wait
sys-kernel/bootengine: finish network-cleanup.service before rootfs switch
2021-08-03 10:45:41 +02:00
Kai Lüke
1b2ab70890 sys-kernel/bootengine: finish network-cleanup.service before rootfs switch
This pulls in
https://github.com/kinvolk/bootengine/pull/27
2021-08-03 10:45:23 +02:00
Kai Lüke
2148ced2f2 Merge pull request #1153 from kinvolk/kai/ignition-oem-auto
sys-apps/ignition: Ignore filesystem format mismatches for the OEM partition
2021-08-03 10:39:59 +02:00
Kai Lüke
9139387127 sys-apps/ignition: Ignore filesystem format mismatches for the OEM partition
This pulls in
https://github.com/kinvolk/ignition/pull/22
2021-08-03 10:39:40 +02:00
Dongsu Park
c449236fb1 Merge pull request #934 from kinvolk/dongsu/delete-boost-build-1.67
dev-util/boost-build: delete boost-build 1.67
2021-08-03 10:26:59 +02:00
Sayan Chowdhury
39db514ce3 dev-libs/expat: Apply Flatcar changes
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-02 22:22:14 +05:30
Sayan Chowdhury
564f8f7b1d dev-libs/expat: Sync with Gentoo upstream; updates to 2.4.1
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-02 22:22:14 +05:30
Dongsu Park
349a9ba532 Merge pull request #1129 from kinvolk/dongsu/github-actions-exclude-rcbeta
.github: list only ebuilds with a unique VERSION_OLD for runc
2021-08-02 14:12:17 +02:00
Kai Lüke
3088fd3cac Merge pull request #1138 from kinvolk/kai/dm-verity-corruption-panic
sys-kernel/bootengine: issue a kernel panic on dm-verity corruption
2021-08-02 13:34:24 +02:00
Kai Lüke
ee14557288 sys-kernel/bootengine: issue a kernel panic on dm-verity corruption
This pulls in
https://github.com/kinvolk/bootengine/pull/26
2021-08-02 13:34:08 +02:00
Dongsu Park
40f5f348af Merge pull request #1127 from kinvolk/firmware-20210716-main
Upgrade Linux Firmware in main from 20210511 to 20210716
2021-08-02 12:26:29 +02:00
Flatcar Buildbot
736682d437 sys-kernel: Upgrade Kernel 5.10.52 to 5.10.55 2021-07-31 07:10:22 +00:00
Kai Lüke
eb06982881 Merge pull request #1146 from kinvolk/kai/gce-oem-net-admin
coreos-base/oem-gce: grant CAP_NET_ADMIN to set routes for LB
2021-07-30 18:31:08 +02:00
Mathieu Tortuyaux
22c2e57360 Merge pull request #1149 from kinvolk/tormath1/fix-457
docker/torcx: disable SELinux by default on `dockerd` wrapper script
2021-07-30 15:00:12 +02:00
Kai Lüke
9a70c06140 Merge pull request #1145 from kinvolk/kai/cilium_vxlan
coreos-base/coreos-init: prevent networkd interference with cilium_vxlan
2021-07-30 14:10:49 +02:00
Dongsu Park
b37bce7dff sys-kernel/coreos-firmware: fix builds by updating CXGB version
Fix build failures by updating CXGB firmware version to 1.26.0.0.
2021-07-30 11:03:41 +02:00
Mathieu Tortuyaux
be50e579c8 app-emulation/docker: update wrapper to disable selinux
this is now the default behavior - since this script is deprecated
we do a minimum update on it

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-30 10:34:03 +02:00
Mathieu Tortuyaux
501d937d7e app-arch/torcx: update wrapper to disable selinux
it's the default behavior now. Since this script is deprecated, we
do a minimum change on it.

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-30 10:33:36 +02:00
Jeremi Piotrowski
b42cfedcf5 profiles: use correct lib64 path to sysroot-wrappers
Sysroot-wrappers contains binaries installed to /usr/lib64/sysroot-wrappers,
but the profile referenced them through the 'lib -> lib64' symlink. Stop
relying on that symlink, which is not present in arm64 profiles, and is
not part of 17.1 amd64 profiles.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-30 07:43:15 +00:00
Kai Lüke
764d5c6baf coreos-base/coreos-init: prevent networkd interference with cilium_vxlan
This pulls in
https://github.com/kinvolk/init/pull/43
2021-07-29 20:01:50 +02:00
Kai Lüke
daf0a01b55 coreos-base/oem-gce: grant CAP_NET_ADMIN to set routes for LB
With the switch from rkt to systemd-nspawn the ability for the service
to set the routing entries for the TCP load balancer got lost,
resulting in an unreachable LB as reported in
https://github.com/kinvolk/Flatcar/issues/459

The fix also reported there is to retain CAP_NET_ADMIN when starting
the service.
2021-07-29 15:30:39 +02:00
Flatcar Buildbot
990e4f82b8 sys-kernel: Upgrade Linux Firmware 20210511 to 20210716 2021-07-29 07:07:37 +00:00
Kai Lüke
beabd977e1 Merge pull request #1106 from kinvolk/kai/bootengine-verity-hashoffset
Support BTRFS in OEM and /usr partitions
2021-07-28 13:34:37 +02:00
Kai Lüke
622a99058c coreos-base/update_engine: support btrfs as /usr filesystem
This pulls in
https://github.com/kinvolk/update_engine/pull/11
2021-07-28 13:29:02 +02:00
Kai Lüke
ab2467e547 sys-apps/seismograph: support btrfs in rootdev
This pulls in
https://github.com/kinvolk/seismograph/pull/6
2021-07-28 13:28:55 +02:00
Kai Lüke
e45a6140d0 sys-apps/ignition: support btrfs on the OEM partition
This pulls in
https://github.com/kinvolk/ignition/pull/21
2021-07-28 13:28:45 +02:00
Kai Lüke
bdc7f36d4f sys-kernel/coreos-modules: use 4k pages for arm64
Btrfs filesystems do not support a non-standard 64k page size on arm64
when the filesystem was created by a 4k page size system.

Use the default page size for arm64 to ensure compatibility with
btrfs filesystems created by amd64 systems.
2021-07-28 13:28:45 +02:00
Kai Lüke
c01560ba63 coreos-base/coreos-init: support btrfs on the OEM partition
This pulls in
https://github.com/kinvolk/init/pull/42
2021-07-28 13:28:28 +02:00
Kai Lüke
42b4f612ca sys-kernel/bootengine: support btrfs /usr filesystems
Pulls in https://github.com/kinvolk/bootengine/pull/25
2021-07-28 13:28:10 +02:00
Kai Lüke
1240faa3ea Merge pull request #1136 from kinvolk/kai/vmlinuz-compression
sys-kernel/coreos-modules: switch to gzip/zstd compression
2021-07-28 11:29:43 +02:00
Kai Lüke
29f2903c87 sys-kernel/coreos-modules: switch to gzip/zstd compression
With the default gzip compression the 60 MB limit for the vmlinuz
bundle of kernel+initramfs was reached. The limit comes from the size
of the /boot partition which is 128 MB large and the kernel needs to
fit twice, in addition to GRUB.

Use zstd for the initramfs as it provides a similar speed but better
compression. For the kernel we can't switch yet to zstd for arm64
but for amd64 it works.
2021-07-27 14:48:26 +02:00
Dongsu Park
08ea76673f .github: list only ebuilds with a unique VERSION_OLD
Due to unnecessary wildcard listings, ebuild files including all rc or
beta are being listed. Since `VERSION_OLD` is already generated as a
unique version, we do not need to list multiple files to filter by
running `head -n1` etc. We just need to use only the specific ebuild.
Simply list only the unique ebuild file.
2021-07-22 15:31:20 +02:00
Dongsu Park
e2cd417df5 .github: make correct input for runc versions
Before passing runc versions to `sed '/-/!{s/$/_/}'`, we need to replace
`_` with `-`, because runc tarball files already have names like
`1.0.0_rc2`. Without the fix, version sort would `1.0.0` come before
`1.0.0_rc2`, which is not expected in the later steps.
2021-07-22 12:41:45 +02:00
Sayan Chowdhury
1b068b5186 Merge pull request #1126 from kinvolk/sayan/update-systemd-247.7
sys-apps/systemd: Bump to v247.7
2021-07-21 16:50:28 +05:30
Sayan Chowdhury
a3715fe1d9 Merge pull request #1124 from kinvolk/linux-5.10.52-main
Upgrade Linux Kernel in main from 5.10.49 to 5.10.52
2021-07-21 13:35:35 +05:30
Flatcar Buildbot
e1e7bd2c2c sys-kernel: Upgrade Kernel 5.10.49 to 5.10.52 2021-07-21 07:10:12 +00:00
Sayan Chowdhury
cf97d4ad91 sys-apps/systemd: Bump to v247.7
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-20 23:29:14 +05:30