Benjamin Gilbert
007c5b1430
sys-kernel/coreos-*: bump to v4.10.9
2017-04-11 19:26:25 -07:00
David Michael
c92f0362c9
Merge pull request #537 from dm0-/git
...
Upgrade Git
2017-04-11 16:34:34 -07:00
David Michael
895f814a7a
bump(dev-vcs/git): sync with upstream
2017-04-11 13:54:18 -07:00
David Michael
250ff3f048
bump(sys-apps/less): sync with upstream
2017-04-11 13:54:07 -07:00
David Michael
ef54fba00d
app-emulation/qemu: sync with upstream
...
The Gentoo ebuild has modified the dependencies to require static
libraries for the system programs instead of just the user ones.
The only CoreOS changes to the ebuild are to add the vpc patch, and
to mark arm64 stable (even though it isn't used).
2017-04-11 13:20:50 -07:00
Euan Kemp
430d25cda8
Merge pull request #2508 from lucab/ups/kubelet-recursive-datadir
...
app-admin/kubelet-wrapper: mark kubelet datadir volume as a recursive mount
2017-04-11 12:04:24 -07:00
David Michael
8d314707a0
bump(metadata/glsa): sync with upstream
2017-04-11 11:54:59 -07:00
David Michael
59963eb0b6
Merge pull request #2512 from dm0-/glsa
...
Sync GLSAs
2017-04-10 17:53:10 -07:00
David Michael
6938a8f344
Merge pull request #535 from dm0-/glsa
...
Sync GLSAs
2017-04-10 17:52:57 -07:00
Euan Kemp
dcbc1784f3
app-emulation/docker: update broken link
2017-04-10 16:31:26 -07:00
Euan Kemp
a85d690353
app-emulation/containerd: update for docker 17.04
...
This corresponds to the versions specified by upstream docker: https://github.com/docker/docker/blob/v17.04.0-ce/hack/dockerfile/binaries-commits#L7
2017-04-10 16:31:26 -07:00
Euan Kemp
39a2594468
app-emulation/containerd: update to use go1.7
...
As far as I know there's no reason we were using 1.6, and upstream
recommends 1.7 nowadays.
2017-04-10 15:03:15 -07:00
Euan Kemp
d285b1129b
app-emulation/docker: bump to 17.04.0-ce
2017-04-10 14:56:30 -07:00
Benjamin Gilbert
cd4e3746cc
oem/ami: Drop in favor of plume
2017-04-07 19:44:20 -07:00
David Michael
6dce1e786f
profiles: drop arm64 curl accept_keywords
2017-04-07 17:12:37 -07:00
Benjamin Gilbert
c45bd4fac8
coreos-base/coretest: Drop package
...
Subsumed by kola.
2017-04-07 16:01:19 -07:00
David Michael
e6fd5a7bef
bump(dev-libs/libtasn1): sync with upstream
2017-04-07 15:01:36 -07:00
David Michael
5785a6ce97
bump(net-misc/curl): sync with upstream
2017-04-07 14:55:33 -07:00
David Michael
d4bd5db5a4
bump(metadata/glsa): sync with upstream
2017-04-07 14:53:34 -07:00
Geoff Levand
36d2613ba5
Merge pull request #2509 from glevand/for-merge-perl
...
profile: Enable arm64 perl
2017-04-06 12:32:58 -07:00
Benjamin Gilbert
45dffca9b6
Merge pull request #661 from bgilbert/package-lists
...
build_image_util: Don't query the $BUILD_DIR vdb
2017-04-06 12:27:45 -07:00
Benjamin Gilbert
f431e7c1ad
Merge pull request #659 from bgilbert/unique-build-ids
...
common: Don't export COREOS_BUILD_ID
2017-04-06 12:25:34 -07:00
Benjamin Gilbert
3e27bdcc45
common: Don't export COREOS_BUILD_ID
...
5a76e4e5e9027443ef2014d8e1d06e9baa9e50aa started exporting COREOS_BUILD_ID
whenever it was found in version.txt, even if its value was blank. Because
COREOS_BUILD_ID is in ENVIRONMENT_WHITELIST, this caused generated build IDs
to be propagated into the SDK chroot environment and reused for every build
in a "cork enter" session. Stop exporting COREOS_BUILD_ID when we set it
ourselves.
See also 8e754f9c2bd4b4ec6561613ff57c095886877960.
2017-04-06 12:23:51 -07:00
Geoff Levand
91c84f95a7
profile: Enable arm64 perl
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-06 09:59:11 -07:00
Michael Marineau
8ef89c7b15
Merge pull request #2510 from marineam/gangue
...
mantle: bump to 0.4.0, include gangue
2017-04-05 15:00:50 -07:00
Michael Marineau
0cb85e22b4
mantle: bump to 0.4.0, include gangue
2017-04-05 14:22:39 -07:00
Luca Bruno
51650980eb
app-admin/kubelet-wrapper: mark kubelet datadir volume as a recursive mount
...
So far `/var/lib/kubelet` was mounted as an implicit non-recursive mount.
This changes the wrapper to an explicit recursive mount.
As shown in https://github.com/kubernetes/kubernetes/issues/38498#issuecomment-282493681 ,
current non-recursive behavior seems to confuse the kubelet which
is incapable of cleaning up resources for orphaned pods, as the
extisting mountpoints for them are not available inside kubelet
chroot.
With `recursive=true`, those mounts are made available in the
chroot and can be unmounted on the host-side from kubelet chroot
via shared back-propagation.
Fixes https://github.com/coreos/bugs/issues/1831
2017-04-05 08:38:55 +00:00
David Michael
79b1f4cd47
Merge pull request #663 from dm0-/signed-tags
...
Require signed release tags
2017-04-03 14:43:49 -07:00
David Michael
1f2a44214c
tag_release: always sign release tags
2017-04-03 14:22:01 -07:00
David Michael
b44460ca0d
Merge pull request #662 from dm0-/bootstrap-sigs
...
Upload package signatures from the bootstrap process
2017-03-31 17:01:36 -07:00
David Michael
266829d7e1
build_toolchains: upload package signatures
2017-03-31 16:50:29 -07:00
David Michael
3a24149f66
bootstrap_sdk: upload package signatures
2017-03-31 16:50:12 -07:00
David Michael
f7a41994f4
Merge pull request #660 from dm0-/signed-binpkg
...
Sign uploaded binary packages
2017-03-30 17:10:33 -07:00
David Michael
17e4ee2dcd
release_util: allow signing uploaded packages
2017-03-30 16:53:15 -07:00
David Michael
e80eddd0c8
release_util: support signing directories
2017-03-30 16:53:10 -07:00
David Michael
6b86520bf4
release_util: store file signatures in their own directory
...
This allows signing files under paths owned by other users.
2017-03-30 16:52:44 -07:00
Benjamin Gilbert
d0e89d1752
build_image_util: Don't query the $BUILD_DIR vdb
...
Jenkins uses separate chroots for package and image builds, so
$BUILD_DIR may not have the relevant packages installed.
2017-03-30 15:43:56 -07:00
Euan Kemp
8eb77d504c
Merge pull request #2505 from euank/really-r1
...
sys-kernel/coreos-kernel: correct naming error
2017-03-30 15:39:22 -07:00
Euan Kemp
46ef0c9796
sys-kernel/coreos-kernel: correct naming error
2017-03-30 15:28:13 -07:00
Euan Kemp
a1956771b2
Merge pull request #2504 from euank/cve-2017-7184
...
sys-kernel/coreos-sources: apply patch for CVE-2017-7184
2017-03-30 14:32:34 -07:00
Euan Kemp
c654aeb054
sys-kernel/coreos-sources: apply patch for CVE-2017-7184
2017-03-30 13:26:13 -07:00
Benjamin Gilbert
d8fb403f69
build_image_util: Fix warnings when building OEM ACIs
...
INFO build_oem_aci: Writing coreos_oem_gce_aci_stage_packages.txt
awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
INFO build_oem_aci: Writing coreos_oem_gce_aci_stage_licenses.txt
awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
2017-03-29 16:31:05 -07:00
Benjamin Gilbert
d579f6f8e1
Merge pull request #2500 from bgilbert/bootengine
...
sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race
2017-03-29 12:49:31 -07:00
Benjamin Gilbert
22c5664507
sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race
2017-03-29 12:01:18 -07:00
Benjamin Gilbert
1e63ab8ae6
Merge pull request #534 from bgilbert/checkbashisms
...
bump(dev-util/checkbashisms): sync with upstream
2017-03-28 13:33:14 -07:00
Benjamin Gilbert
3322facbdb
bump(dev-util/checkbashisms): sync with upstream
...
Fixes warning during image_to_vm.sh:
Unescaped left brace in regex is deprecated, passed through in regex
2017-03-28 13:22:47 -07:00
David Michael
581d483801
Merge pull request #2492 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:44 -07:00
David Michael
66dca6ab85
Merge pull request #657 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:35 -07:00
David Michael
9536781af1
Merge pull request #533 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:25 -07:00
Benjamin Gilbert
50cec95cf4
Merge pull request #2495 from bgilbert/bootengine
...
sys-kernel/bootengine: bump for first_boot and emergency shell timeout
2017-03-23 19:29:22 -07:00