Krzesimir Nowak
2d5ef69eed
sec-policy/selinux-base-policy: Add a patch for ping
...
This is to allow users to run ping -I with some IP address or network
interface.
Patch based on:
https://github.com/fedora-selinux/selinux-policy/pull/403
2022-01-12 18:09:50 +01:00
Krzesimir Nowak
6f3975b9b1
sec-policy/selinux-base: Add patch for ping
...
The patch adds stuff that another patch in
sec-policy/selinux-base-policy will use to allow user to call "ping -I
<IPADDRESS>".
Patch based on:
https://github.com/fedora-selinux/selinux-policy/pull/403
2022-01-12 18:08:58 +01:00
Kai Lüke
df2c3ace99
Merge pull request #1562 from flatcar-linux/kai/changelog-security-format
...
changelog/README.md: specify current security fix section format
2022-01-12 17:28:15 +01:00
Mathieu Tortuyaux
96bac22bc0
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-12 17:14:33 +01:00
Mathieu Tortuyaux
e155b78955
coreos-devel/mantle: sync with upstream release
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-12 17:11:30 +01:00
Kai Lueke
59ad0cd262
changelog/security: use right format for release notes
2022-01-12 17:00:26 +01:00
Kai Lueke
a7da13d660
changelog/README.md: specify current security fix section format
...
The entries added in changelog/security/ do not follow our existing
security section in the release notes:
https://www.flatcar.org/releases/#release-3033.2.0
Document the structure and an example to use the right format that we
need for release note generation.
2022-01-12 16:53:59 +01:00
Kai Lüke
35f91267f8
Merge pull request #1561 from flatcar-linux/kai/bootengine-cat-no-argument
...
sys-kernel/bootengine: Fixed dracut emergency log printing script error
2022-01-12 16:18:59 +01:00
Kai Lueke
fe514f5b25
sys-kernel/bootengine: Fixed dracut emergency log printing script error
...
This pulls in
https://github.com/flatcar-linux/bootengine/pull/33
to fix the cat command invocation.
2022-01-12 16:07:58 +01:00
Krzesimir Nowak
42451654bf
profiles: Update use flags for net-misc/iputils
...
The net-misc/iputils package never provided the traceroute binary,
only traceroute6, which is probably why the use flag got renamed to
traceroute6 too.
2022-01-12 15:45:26 +01:00
Flatcar Buildbot
3d01e98cdb
sys-kernel: Upgrade Kernel 5.15.13 to 5.15.14
2022-01-12 07:24:30 +00:00
Krzesimir Nowak
db5f1c7e72
*: Drop mentions of elibc_FreeBSD
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
09465e5a67
sys-apps/systemd: Sync hwdb bits with Gentoo
...
Gentoo deprecated sys-apps/hwids and is going to drop it soon.
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
1a35d9b996
profiles: Drop sys-apps/hwids from accept_keywords
...
We are replacing this package with sys-apps/hwdata. Also, no point in
using unstable versions - they are stabilized quickly enough.
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
752f695663
sys-apps/portage: Drop support for uclibc
...
It was removed from Gentoo and with updated profiles, the build
started to fail with:
USE flag 'elibc_uclibc' referenced in conditional 'elibc_uclibc?' is
not in IUSE
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
158eb34f72
profiles: Keep using crypt functionality from glibc
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
caf56d5b8b
Merge pull request #1519 from flatcar-linux/krnowak/eclass-update
...
eclass: Some updates for newer EAPI versions
2022-01-11 13:25:42 +01:00
Krzesimir Nowak
d3247a54a2
Merge pull request #1554 from flatcar-linux/cacerts-3.74-main
...
Upgrade ca-certificates in main from 3.73 to 3.74
2022-01-10 19:19:59 +01:00
Krzesimir Nowak
b8b5c72796
Merge pull request #1555 from flatcar-linux/go-1.17.6-main
...
Upgrade Go in main from 1.17.5 to 1.17.6
2022-01-10 18:53:32 +01:00
Flatcar Buildbot
24276fa7d2
dev-lang: Upgrade Go 1.17.5 to 1.17.6
2022-01-10 07:32:58 +00:00
Flatcar Buildbot
49d87d54af
app-misc: Upgrade ca-certificates 3.73 to 3.74
2022-01-10 07:25:19 +00:00
Krzesimir Nowak
83fe5bffd4
sys-boot/grub: Try to force using a newer gettext infra
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
1a1efdfe3b
sys-boot/grub: Fix build with new eclasses
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
b7e15db73c
profiles: Drop sys-block/parted from accept_keywords
...
The updated package is declared as stable on arm64.
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
3e92c82483
eclass/git: Drop unused eclass
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
78e097ecaf
eclass: Update to support newer EAPI versions
2022-01-07 16:11:46 +01:00
Jeremi Piotrowski
4135a11e67
Merge pull request #1549 from flatcar-linux/containerd-1.5.9-main
...
Upgrade Containerd in main from 1.5.8 to 1.5.9
2022-01-07 15:52:22 +01:00
Jeremi Piotrowski
893b59234c
changelog/security: add entry for CVE-2021-43816
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-01-07 15:42:06 +01:00
Flatcar Buildbot
7cb3795b44
app-emulation: Upgrade Containerd 1.5.8 to 1.5.9
2022-01-07 08:24:14 +00:00
Krzesimir Nowak
f267889748
Merge pull request #1413 from flatcar-linux/krnowak/eapi-update-2
...
profiles: Changes related to package updates in portage-stable (getting rid of EAPI 4)
2022-01-06 14:13:18 +01:00
Krzesimir Nowak
c196ea27cd
Merge pull request #1547 from flatcar-linux/linux-5.15.13-main
...
Upgrade Linux Kernel in main from 5.15.12 to 5.15.13
2022-01-06 13:07:24 +01:00
Flatcar Buildbot
6a0bc7b1d0
sys-kernel: Upgrade Kernel 5.15.12 to 5.15.13
2022-01-06 07:23:45 +00:00
Jeremi Piotrowski
18f907bbdd
Merge pull request #1542 from flatcar-linux/jepio/arm64-ipxe-efi-initramfs-bugfix
...
sys-kernel/coreos-modules: explicitly enable EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER
2022-01-04 17:11:15 +01:00
Jeremi Piotrowski
c5fdedab1f
sys-kernel/coreos-modules: explicitly enable EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER
...
We rely on this setting to make iPXE booting work on EFI platforms. In iPXE we
use 2 initramfs': the kernel builtin one and a pxe specific one that contains
the contents of the usr partition. This appears to rely on the EFI stub, which
unpacks the second one based on the passed commandline parameter (initrd=).
This affects arm64 kernels after v5.11 because of this commit:
6edcf9dc2e
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-01-04 13:50:36 +01:00
Krzesimir Nowak
27dbbf6219
Merge pull request #1540 from flatcar-linux/linux-5.15.12-main
...
Upgrade Linux Kernel in main from 5.15.10 to 5.15.12
2022-01-03 20:04:34 +01:00
Flatcar Buildbot
a22d28e821
sys-kernel: Upgrade Kernel 5.15.10 to 5.15.12
2022-01-03 18:56:49 +00:00
Kai Lüke
5ecd16634c
Merge pull request #1536 from flatcar-linux/kai/gh-a-kernel-changelog
...
.github: Use different kernel changelog file name per version
2022-01-03 16:05:46 +01:00
Kai Lüke
86d4eab14a
Merge pull request #1537 from flatcar-linux/kai/rewrite-bugfix-changelog
...
changelog: rewrite entry for PR 1502
2022-01-03 16:04:52 +01:00
Kai Lueke
6e97559667
changelog/README.md: describe purpose of the changelog entries
...
The changelog entries should be directly used for the release notes,
thus they need to be short and hold only information relevant to the
end user, and should be in the markdown bullet point format.
2022-01-03 15:46:22 +01:00
Kai Lueke
75100727e7
changelog: rewrite entry for PR 1502
...
The used changelog entry format in
https://github.com/flatcar-linux/coreos-overlay/pull/1502 is not really
useful for the release notes. This paragraph is good for the PR
description or a commit message, but here should be a bullet point for
the release notes.
Replace the paragraph by a release notes bullet point.
2022-01-03 14:56:21 +01:00
Kai Lueke
bfca4c3092
.github: Use different kernel changelog file name per version
...
All runs of the GitHub Action to update the kernel used the same
changelog name, which is a bit confusing when comparing the releases.
Append the version to the filename to avoid using the same name for the
maintenance updates of a channel releases and for the introduction of a
kernel update in main.
2022-01-03 13:58:22 +01:00
Dongsu Park
5273644d27
Merge pull request #1527 from flatcar-linux/firmware-20211216-main
...
Upgrade Linux Firmware in main from 20211027 to 20211216
2021-12-23 12:30:31 +01:00
Dongsu Park
7bda938f35
Merge pull request #1517 from flatcar-linux/dongsu/add-loop-driver
...
sys-kernel/bootengine: make dracut install loop driver
2021-12-23 12:26:14 +01:00
Dongsu Park
5cf32ef0a8
sys-kernel/bootengine: make dracut install loop driver
...
Unlike with Kernel 5.10, dracut does not automatically install `loop.ko`
with Kernel 5.15.
Explicitly install the loop module from the dracut command line.
Pulls in https://github.com/flatcar-linux/bootengine/pull/32
2021-12-23 12:20:13 +01:00
Dongsu Park
30aa7f9ca9
sys-kernel/coreos-firmware: fix cxgb4 version to 1.26.4.0
...
Fix firmware version of cxgb4 to 1.26.4.0 for linux-firmware 20211216.
2021-12-23 08:45:48 +01:00
Flatcar Buildbot
4f4751ed33
sys-kernel: Upgrade Linux Firmware 20211027 to 20211216
2021-12-23 07:11:59 +00:00
Krzesimir Nowak
129b0b062c
Merge pull request #1524 from flatcar-linux/krnowak/kernel-config
...
sys-kernel/kernel-modules: Add some configs
2021-12-22 17:34:38 +01:00
Krzesimir Nowak
8e14045ef6
changelog: Add changes entry
2021-12-22 17:31:40 +01:00
Krzesimir Nowak
de51ac927d
sys-kernel/kernel-modules: Add some configs
...
`net-libs/libnetfilter_cthelper` needs CONFIG_NF_CT_NETLINK_HELPER.
CONFIG_NET_VRF was requested by a user. CONFIG_KEY_DH_OPERATIONS is
useful for `sys-apps/keyutils`. Rest of the added configs are
dependencies.
2021-12-22 17:31:40 +01:00
Mathieu Tortuyaux
5eff92bbac
Merge pull request #1526 from flatcar-linux/tormath1/elf
...
profiles/coreos/base: backport `iproute2` ELF support
2021-12-22 09:56:44 +01:00