4635 Commits

Author SHA1 Message Date
David Michael
3ab7b5ebde coreos-devel/sdk-depends: Install patchelf for torcx
The torcx script requires this for setting the RPATH that allows
linking with libraries in its unpack directory.
2017-08-23 14:01:28 -07:00
Benjamin Gilbert
0878ef82c9 sys-kernel/bootengine: bump for terminfo 2017-08-22 18:31:45 -07:00
David Michael
0b73434420 profiles: sync bzip2 on arm64 for GLSAs 2017-08-21 13:12:44 -07:00
David Michael
099767db78 Merge pull request #2713 from ajeddeloh/add-multipath-tools
sys-fs/multipath-tools: add to sdk dependencies
2017-08-16 20:40:47 -07:00
Jenkins OS
d7bf9f1a1f sys-kernel/coreos-sources: bump to 4.12.8 2017-08-17 01:12:04 +00:00
Andrew Jeddeloh
295b171ddf coreos-devel/sdk-depends: add multipath-tools
Add sys-fs/multipath-tool. kola mkimage requires kpartx which is in
sys-fs/multipath-tools.
2017-08-15 13:13:12 -07:00
Benjamin Gilbert
33da0a5d36 Merge pull request #2703 from ajeddeloh/containerd-restart
app-emulation/containerd: add restart directive to unit
2017-08-15 01:48:18 -07:00
Andrew Jeddeloh
0b87be2486 app-emulation/containerd: add restart directive to unit
Containerd can crash and should be restarted if it does.
2017-08-14 16:47:45 -07:00
Benjamin Gilbert
c2dadca24c sys-kernel/coreos-sources: bump to 4.12.7 2017-08-14 13:57:33 -07:00
Jenkins OS
f13fccd1b2 sys-kernel/coreos-sources: bump to 4.12.6 2017-08-11 21:31:43 +00:00
David Michael
1cc91f3c70 profiles: disable Git's pcre-jit option
This requires additional dependencies.
2017-08-11 12:55:27 -07:00
David Michael
051b442b71 profiles: use the newest Git on master 2017-08-11 12:21:19 -07:00
Euan Kemp
b0b740c03e profiles: bump git
To allow a version patched for CVE-2017-1000117
2017-08-11 11:47:05 -07:00
Benjamin Gilbert
28a3f3480e sys-kernel/coreos-*: apply CVE patches
for CVE-2017-1000111 and CVE-2017-1000112.
2017-08-10 16:26:29 -07:00
David Michael
1d005d1644 sys-apps/systemd: bump for ordering presets after generators 2017-08-08 16:57:07 -07:00
Jenkins OS
6b034e3aa4 sys-kernel/coreos-sources: bump to 4.12.5 2017-08-07 20:39:43 +00:00
David Michael
2f9172141f profiles: disable Python 3 for repoman
Otherwise, it tries to force portage to build Python 3 support, and
that breaks bootstrapping.
2017-08-04 12:20:17 -07:00
David Michael
972ff2bc1f profiles: drop obsolete lxml reference 2017-08-04 12:19:02 -07:00
David Michael
a079b4fd7e Merge pull request #2688 from dm0-/manifest
Profile cleanup
2017-08-03 17:55:47 -07:00
Euan Kemp
61dec3888b chore(metadata): Regenerate cache 2017-08-03 14:19:22 -07:00
Euan Kemp
cdea345ab5 net-p2p/transmission: remove unused ebuild 2017-08-03 14:17:39 -07:00
David Michael
3baef84cd7 profiles: drop outdated nmap references 2017-08-03 12:05:13 -07:00
David Michael
c31e769ed9 profiles: drop outdated nasm references 2017-08-03 11:54:54 -07:00
David Michael
cdc4086356 profiles: drop outdated pylint references 2017-08-03 11:54:31 -07:00
David Michael
eebd48d7c5 coreos-base/coreos-dev: inherit tcpdump from coreos 2017-08-02 17:24:19 -07:00
David Michael
3ef78ff9ef coreos-base/coreos: include tcpdump 2017-08-02 17:23:22 -07:00
David Michael
4f0a961299 Merge pull request #2683 from dm0-/gmerge
Fix emerge-gitclone with Python 3 dev images
2017-08-02 14:11:04 -07:00
David Michael
6ea70422b4 app-emulation/rkt: bump to v1.28.1 2017-08-02 13:39:16 -07:00
David Michael
528c6f64f9 coreos-base/gmerge: bump for branching and python3 syntax 2017-08-02 13:36:57 -07:00
David Michael
35d5644e80 coreos-base/gmerge: acknowledge the existence of python-exec 2017-08-02 13:32:17 -07:00
David Michael
8d5f3db9cf app-arch/torcx: bump to v0.1.0 2017-08-01 11:39:08 -07:00
Euan Kemp
cc5c444da2 coreos-base/update_engine: update to 0.4.4
Notably to include the vmware CVE postinst patch
2017-07-31 16:59:19 -07:00
Euan Kemp
cb3212b2e3 sys-kernel/coreos-*: fix virtio net truesize
See https://github.com/coreos/bugs/issues/2076
2017-07-31 12:26:00 -07:00
Benjamin Gilbert
cb0fea4945 Merge pull request #2674 from bgilbert/open-vm-tools
app-emulation/open-vm-tools: update to 10.1.10
2017-07-29 23:40:19 -07:00
Benjamin Gilbert
4a01b6d029 app-emulation/open-vm-tools: update to 10.1.10
Fixes CVE-2015-5191.
2017-07-28 22:42:53 -07:00
Benjamin Gilbert
40cedc85f6 coreos-base/oem-vmware: enable PrivateTmp for vmtoolsd
It would have mitigated CVE-2015-5191 and might again be useful in the
future.
2017-07-28 22:41:53 -07:00
Benjamin Gilbert
185daf4027 sys-fs/e2fsprogs: drop from overlay
Ignition 0.17.2 no longer uses the custom -p flag to mkfs.ext4.
2017-07-28 22:38:38 -07:00
Benjamin Gilbert
39a9328c9a sys-kernel/bootengine: fail verity-setup.service if verity fails 2017-07-28 17:54:44 -07:00
Derek Gonyeo
7f45b34f63 ignition: v0.17.1 -> v0.17.2 2017-07-28 17:12:19 -07:00
David Michael
65ddabd4ba Merge pull request #2667 from dm0-/rkt
app-emulation/rkt: bump to v1.28.0
2017-07-28 15:31:55 -07:00
Jenkins OS
76ba6f5719 sys-kernel/coreos-sources: bump to 4.12.4 2017-07-28 19:34:25 +00:00
David Michael
57a851bb6e app-emulation/rkt: bump to v1.28.0 2017-07-28 12:22:15 -07:00
Geoff Levand
59086e19dc edk2-ovmf: Remove unused package
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-07-27 15:42:28 -07:00
Geoff Levand
b3f437683a edk2-armvirt: Remove unused package
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-07-27 15:42:28 -07:00
Geoff Levand
087e9fa2e5 edk2: Enable ebuild
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-07-27 15:42:28 -07:00
Geoff Levand
884e75efef sys-firmware/edk2: New package
Create a new EDK2/UEFI ebuild sys-firmware/edk2 to replace the current
per-arch edk2-armvirt and edk2-ovmf ebuilds.  Updates to use the latest
EDK2 UDK2017 and openssl-1.1.0f releases.

For amd64 builds UDK2017 requires an update to nasm-2.10 or greater.

Fixes UEFI startup problems like these when running Container Linux in
a KVM guest on arm64 machines:

  Synchronous Exception at 0x00000000BF033004

Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-07-27 15:42:28 -07:00
Benjamin Gilbert
8a0245e4d9 sys-kernel/bootengine: fix dev-mapper-usr.device timeout; don't fsck /usr 2017-07-26 14:41:51 -07:00
Benjamin Gilbert
2cfb852b99 sys-kernel/coreos-modules: enable MEM_SOFT_DIRTY
criu uses it. ARM64 doesn't HAVE_ARCH_SOFT_DIRTY so make this AMD64-only.
2017-07-25 23:45:48 -07:00
Benjamin Gilbert
c882a4a4ef Merge pull request #2662 from bgilbert/kernel-opts
Enable TCP Hybla and nftables
2017-07-25 20:41:55 -07:00
Benjamin Gilbert
d3d76b8bbe coreos-base/coreos: add nftables 2017-07-25 15:48:44 -07:00