Commit Graph

8217 Commits

Author SHA1 Message Date
Mathieu Tortuyaux
8afe6bc7a9 sys-apps/ignition: upgrade ign-converter dependency
this pulls networkd conversion support.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-20 15:25:41 +02:00
Dongsu Park
6be5de6b4a Merge pull request #1908 from flatcar-linux/dongsu/nvidia-drivers-510.73.05
x11-drivers/nvidia-{drivers,metadata}: update to 510.73.05
2022-05-20 09:42:40 +02:00
Krzesimir Nowak
31797e602b Merge pull request #1906 from flatcar-linux/linux-5.15.41-main
Upgrade Linux Kernel in main from 5.15.40 to 5.15.41
2022-05-19 19:22:00 +02:00
Krzesimir Nowak
6b1d443f58 coreos-base/hard-host-depends: Drop dev-python/pylint
It does not seem to be a build dependency of python.
2022-05-19 18:08:13 +02:00
Dongsu Park
42e40811b5 changelog: add changelog for nvidia-drivers 2022-05-19 11:31:06 +02:00
Dongsu Park
61129fb1a5 x11-drivers/nvidia-{drivers,metadata}: update to 510.73.05
Update x11-drivers/nvidia-drivers to 510.73.05, mainly to address
CVE-2022-28181, CVE-2022-28183, CVE-2022-28184, CVE-2022-28185.
2022-05-19 11:31:06 +02:00
Flatcar Buildbot
64e54be113 sys-kernel: Upgrade Kernel 5.15.40 to 5.15.41 2022-05-19 07:23:49 +00:00
Dongsu Park
97195f9fec profiles: accept keywords ~arm64 for curl 7.83.1
To be able to build curl 7.83.1 for arm64, we need to accept keywords
for ~arm64.
2022-05-18 17:29:35 +02:00
Dongsu Park
72b8fe9c89 Merge pull request #1899 from flatcar-linux/dongsu/ncurses-6.3_p20220423
sys-libs/ncurses: update to 6.3_p20220423
2022-05-18 17:07:51 +02:00
Dongsu Park
fb60e123c7 Merge pull request #1898 from flatcar-linux/dongsu/openssl-3.0.3
dev-libs/openssl: update to 3.0.3
2022-05-18 15:28:46 +02:00
Dongsu Park
0ceca8b3be changelog: add security changelog for Docker 20.10.16 2022-05-18 14:59:58 +02:00
Dongsu Park
f02226d4dd changelog: add changelog for ncurses 2022-05-18 11:35:38 +02:00
Dongsu Park
53ff903403 sys-libs/ncurses: Apply Flatcar patches
Add a symlink-usr USE flag for keeping a minimal set of terminfo
files in /usr/share/terminfo.

Also allow writes to /dev/ptmx, which sometimes causes the sandbox
to fail Jenkins builds.

Based on 09951dc3db0f79294eb223a9154f372e24c1d99d.
2022-05-18 11:35:38 +02:00
Dongsu Park
7be073fa5c sys-libs/ncurses: update to 6.3_p20220423
Update sys-libs/ncurses to 6.3_p20220423, mainly to address
CVE-2022-29458.

Commit-Ref: https://github.com/gentoo/gentoo/commit/a59133147f7a
2022-05-18 11:35:30 +02:00
Dongsu Park
37f1ea2b37 changelog: add changelog for openssl 3.0.3 2022-05-18 11:10:42 +02:00
Flatcar Buildbot
46ee7963d2 app-emulation: Upgrade Docker 20.10.15 to 20.10.16 2022-05-18 07:45:34 +00:00
Krzesimir Nowak
df1f0b3e28 Merge pull request #1895 from flatcar-linux/linux-5.15.40-main
Upgrade Linux Kernel in main from 5.15.38 to 5.15.40
2022-05-17 17:41:00 +02:00
Mathieu Tortuyaux
4cad012bba dev-libs/openssl: Apply Flatcar modifications
- remove unecessary files
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- mark openssl as stable for arm64 and amd64

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-17 11:36:27 +02:00
Dongsu Park
b8a65b0959 dev-libs/openssl: update to 3.0.3
Update dev-libs/openssl to 3.0.3, mainly to address CVE-2022-1292,
CVE-2022-1473.

Commit-Ref: https://github.com/gentoo/gentoo/commit/296c0f547c51
2022-05-17 11:35:14 +02:00
Flatcar Buildbot
d2dcb42d13 dev-lang: Upgrade Go 1.17.9 to 1.17.10 2022-05-16 07:37:22 +00:00
Flatcar Buildbot
b6177ccbcf sys-kernel: Upgrade Kernel 5.15.38 to 5.15.40 2022-05-16 07:30:00 +00:00
Dongsu Park
b30eb994e1 Merge pull request #1879 from flatcar-linux/firmware-20220509-main
Upgrade Linux Firmware in main from 20220411 to 20220509
2022-05-13 15:53:23 +02:00
Krzesimir Nowak
c5d6280026 changelog: Add an entry 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
5efb559382 profiles: Do not install the e2fsprogs devel tools 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
35ac1a04a4 profiles: Drop accept_keywords for sys-libs/talloc
We updated to 2.3.3, which is stable for both amd64 and arm64. Also,
we have the new enough python version now.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
86c1c65b84 coreos/config: Drop env overrides for dead package 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
4a13a5f869 sys-libs/ldb: Move to portage-stable
We have updated pythong and the related eclasses some time ago, so I
think this ebuild should be working fine now. Also, it needs updating,
because net-fs/samba started to require a newer version of it.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
6133cc6d8a profiles: Drop accept_keywords for net-nds/openldap
The updated package became stable for both amd64 and arm64.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
5de6530bbe coreos/config: Drop some env var overrides for net-nds/openldap 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
92e5b6774c profiles: Drop outdated unmasks 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
1e9c554554 profiles: Cleanup use flags for dev-vcs/git 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
56c7e98967 profiles: Cleanup use flags for app-emulation/qemu
Move them to targets/sdk as qemu is only built for SDK. Drop all the
enabled-by-default USE flags.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
7295c3113d net-fs/samba: Apply Flatcar modifications
- Add a minimal USE flag for only installing libraries
  - Change the Perl run-time dep to build-time only
  - Disable building libraries requiring Python
  - Limit the size of bundled libraries
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
6a2d7bc673 net-fs/samba: Sync with Gentoo
It's from Gentoo commit d33672fa71f0223f90aca9d85d52d916f05de354.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
3c92acec07 profiles: Update app-emulation/qemu accept_keywords 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
ab6119aa8b sys-apps/dbus: Apply Flatcar modifications 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
971bfb47ae sys-apps/dbus: Sync with Gentoo
It's from Gentoo commit 036bc045b998a68b4da32a023cc544e33e7080e1.
2022-05-13 14:08:43 +02:00
Dongsu Park
d8f726d0d7 sys-kernel/coreos-firmware: fix build issue with intel/ice/ddp/ice.pkg
Since linux-firmware 20220509, intel/ice/ddp/ice-1.3.26.0.pkg was
updated to ice-1.3.28.0.pkg. As a result the symlink ice.pkg needs to be
also updated so it points to the correct version of the file.
Create a variable for the ICE DDP version for better maintenance.
2022-05-13 11:30:51 +02:00
Dongsu Park
14761dc4da changelog: add security changelog for runc 1.1.2 2022-05-12 17:35:53 +02:00
Flatcar Buildbot
54b6479bb0 app-emulation: Upgrade Runc 1.1.1 to 1.1.2 2022-05-12 17:34:36 +02:00
Krzesimir Nowak
c7c189e7ae profiles: Work around the build-id collisions 2022-05-12 16:14:31 +02:00
Jeremi Piotrowski
d675d2f74a Merge pull request #1876 from flatcar-linux/jepio/remove-xen-pci-patch
sys-kernel/coreos-sources: remove Xen-PCI-revert patch
2022-05-12 14:06:47 +02:00
Flatcar Buildbot
d7d50d5444 sys-kernel: Upgrade Linux Firmware 20220411 to 20220509 2022-05-12 07:11:57 +00:00
Dongsu Park
961dd018a9 changelog: add changelog for Go 1.18.2 2022-05-11 14:34:02 +02:00
Dongsu Park
8a19d74c15 .github: remove unnecessary version Go 1.16
Go 1.16 was deprecated some time ago, so we do not need that in Github
Actions.
2022-05-11 14:34:02 +02:00
Dongsu Park
601cbca305 *: Use Go 1.18 instead of 1.17
Use Go 1.18 instead of 1.17 by default in all ebuilds.
Note, we still keep building app-emulation/docker{,-cli} with Go 1.17,
to be consistent with upstream Docker 20.10.x, which still builds with
Go 1.17. That should avoid potential unexpected regressions that
happened in the past.
2022-05-11 14:34:02 +02:00
Dongsu Park
2ef1472e32 dev-lang/go: add 1.18.2
Update the default version of dev-lang/go to 1.18.2.
Keep go1.17 as well to build docker{,-cli} with Go 1.17.
Use EAPI=7 for all versions.
See also https://go.dev/doc/go1.18.
2022-05-11 14:34:02 +02:00
Dongsu Park
7619b554b8 eclass: use ver_cut instead of get_version_component_range
We should update EAPI from 6 to 7, to deprecate old EAPIs in general.
To make it work with EAPI=7, replace get_version_component_range with
ver_cut, as get_version_component_range does not work any more with EAPI
7. As a result, the versionator eclass is not needed any more.
2022-05-11 14:34:02 +02:00
Dongsu Park
0bd7c888f2 Merge pull request #1877 from flatcar-linux/docker-20.10.15-main
Upgrade Docker in main from 20.10.14 to 20.10.15
2022-05-11 14:32:43 +02:00
Jeremi Piotrowski
a71094c33b sys-kernel/coreos-sources: remove Xen-PCI-revert patch
There was a kernel regression on Xen HVM with regard to MSI interrupts that
affected certain AWS instances (m4 and similar). We reverted the patch that
broke networking, but in the meantime upstream found the actual cause and
provided a proper fix which is part of 5.15.38. Remove the obsolete patch.

Link: https://lore.kernel.org/all/20220504153056.686401990@linuxfoundation.org/
2022-05-11 12:51:58 +02:00
Mathieu Tortuyaux
75f1725a0f Merge pull request #1874 from flatcar-linux/tormath1/bootengine
sys-kernel/bootengine: bump commit ID
2022-05-11 09:49:01 +02:00
Flatcar Buildbot
41c7dcd724 app-emulation: Upgrade Docker 20.10.14 to 20.10.15 2022-05-11 07:46:12 +00:00
Kai Lueke
96b90f616f coreos-base/coreos-init: Ensure /etc/flatcar/update.conf exists
This pulls in
https://github.com/flatcar-linux/init/pull/71
to create /etc/flatcar/update.conf if missing.
2022-05-11 15:23:05 +09:00
Krzesimir Nowak
0c52e4f3fd Merge pull request #1873 from flatcar-linux/linux-5.15.38-main
Upgrade Linux Kernel in main from 5.15.37 to 5.15.38
2022-05-10 15:52:10 +02:00
Mathieu Tortuyaux
0b3cbd519d changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-10 13:52:09 +02:00
Dongsu Park
4cc38f04c5 Merge pull request #1865 from flatcar-linux/dongsu/changelog-example
changelog: use a specific project name in the example
2022-05-10 11:25:18 +02:00
Jeremi Piotrowski
1c2e75e940 Merge pull request #1838 from flatcar-linux/jepio/cross-binutils-keywords
profiles: add keywords to cross-*/binutils as well
2022-05-10 09:55:09 +02:00
Mathieu Tortuyaux
2edfc016e9 sys-kernel/bootengine: bump commit ID
this pulls:
* https://github.com/flatcar-linux/bootengine/pull/45

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-10 09:32:37 +02:00
Flatcar Buildbot
d4f751a8b3 sys-kernel: Upgrade Kernel 5.15.37 to 5.15.38 2022-05-10 07:23:47 +00:00
Dongsu Park
eb0cf00c5e changelog: add changelog for torcx 2022-05-06 15:21:46 +02:00
Dongsu Park
431c87c98e app-arch/torcx: update golang.org/x/crypto
Update golang.org/x/crypto to v0.0.0-20220314234659-1baeb1ce4c0b mainly
to address CVE-2022-27191.

Pulls in https://github.com/flatcar-linux/torcx/pull/12 .
2022-05-06 15:21:46 +02:00
Dongsu Park
d18978d5e6 Merge pull request #1864 from flatcar-linux/containerd-1.6.4-main
Upgrade Containerd in main from 1.6.3 to 1.6.4
2022-05-06 15:19:29 +02:00
Dongsu Park
6bd35179ce changelog: use a specific project name in the example
To be able to distinguish changelog entries from each other, we should
write a specific project name, e.g. coreos-overlay, instead of `PR`.
Changelog entries with a simple `PR` usually cause so much additional
rework when doing actual releases.
2022-05-06 12:19:02 +02:00
Dongsu Park
89db3c0785 Merge pull request #1861 from flatcar-linux/dongsu/rsync-3.2.4
profiles: accept keywords for net-misc/rsync
2022-05-06 10:59:58 +02:00
Dongsu Park
4cff4fb85e Merge pull request #1860 from flatcar-linux/dongsu/git-2.35.3
profiles: accept keywords for git 2.35.3
2022-05-06 10:57:22 +02:00
Flatcar Buildbot
bed28648f6 app-emulation: Upgrade Containerd 1.6.3 to 1.6.4 2022-05-06 08:29:08 +00:00
Dongsu Park
6159fa199b profiles: accept keywords for git 2.35.3
We need to build 2.35.3 to address CVE-2022-24765.
2022-05-06 08:27:25 +02:00
Dongsu Park
164bdd524b profiles: accept keywords for net-misc/rsync
We need to allow net-misc/rsync 3.2.4-r1, to address security issues
in its bundled zlib.
2022-05-05 17:17:55 +02:00
Kai Lueke
26432fe63c .github: add cacerts/kernel actions for current LTS
The GitHub Actions were defined for the LTS stream directly but we can
now follow the approach used for the other channels. This means that
in the future we could decide to create new Actions for 2022 by copying
the current one and modifying it when 2023 gets the new current LTS -
anyway some manual work would be required to set up Actions for both
old and new at the same time (we have no "previous" symlink on Origin).
We could retire the old LTS Actions immediately because the releases
don't occur on a fixed schedule but I think the automation is nice to
keep.
2022-05-04 14:24:37 +09:00
Dongsu Park
48f7788853 Merge pull request #1857 from flatcar-linux/linux-5.15.37-main
Upgrade Linux Kernel in main from 5.15.35 to 5.15.37
2022-05-03 16:44:55 +02:00
Dongsu Park
24f5e0f1a4 Merge pull request #1858 from flatcar-linux/cacerts-3.78-main
Upgrade ca-certificates in main from 3.77 to 3.78
2022-05-02 19:19:20 +02:00
Flatcar Buildbot
2c01f8e685 app-misc: Upgrade ca-certificates 3.77 to 3.78 2022-05-02 07:24:12 +00:00
Flatcar Buildbot
fde16102ed sys-kernel: Upgrade Kernel 5.15.35 to 5.15.37 2022-05-02 07:24:00 +00:00
Flatcar Buildbot
59b3d4bacc app-emulation: Upgrade Containerd 1.6.2 to 1.6.3 2022-04-29 08:30:47 +00:00
Mathieu Tortuyaux
909f276006 Merge pull request #1842 from flatcar-linux/tormath1/ignition
sys-apps/ignition: use upstream
2022-04-27 10:08:54 +02:00
Mathieu Tortuyaux
208574039c sys-apps/ignition: use upstream
use upstream ignition (coreos/ignition) and apply our patches on top of
it.

It's currently done in the same way with coreos/afterburn.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-04-26 15:27:23 +02:00
Kai Lueke
8ee228d5ce Move mantle's dnsmasq dependency to the SDK dependencies
The removal of the mantle ebuild file also meant that dnsmasq isn't
installed into the SDK anymore, yet we actually need it to run kola
QEMU tests in the SDK on the original CI pipeline. As long as the
original CI pipeline is kept, we have to keep kola's dependencies
like QEMU and dnsmasq around.
2022-04-26 15:09:13 +09:00
Jeremi Piotrowski
c5e7ff8c9e Add missing pahole dependencies
pahole is a build-time dependency of our kernel build, due to us setting
CONFIG_BTF_DEBUG_INFO. If pahole is missing, a `make modules_prepare` with our
kernel config results in symbols in the config changing. This will affect
people building kernel modules against coreos-sources in the developer
container, but not the SDK because pahole is already in sdk-depends.

pahole is now an (explicit) BDEPEND of all the coreos-kernel/coreos-modules
packages, and we'll make it an RDEPEND of coreos-sources so that it is pulled
in whenever it might be necessary.  Also add it to the coreos-dev package so
that it is included in developer container by default, uncompressed size
increase is <1MB.
2022-04-25 14:28:02 +02:00
Kai Lüke
b9f2da8566 Merge pull request #1820 from flatcar-linux/kai/sysext-oem-partition
coreos-base/coreos-init: add systemd-sysext.service for OEM mount
2022-04-25 13:12:45 +09:00
Kai Lueke
a2c5b52dec coreos-base/coreos-init: add systemd-sysext.service for OEM mount
This pulls in https://github.com/flatcar-linux/init/pull/69
to restore the OEM partition mount point after the /usr overlay is
done.
2022-04-25 13:10:51 +09:00
Jeremi Piotrowski
f45b654daf Merge pull request #1837 from flatcar-linux/jepio/portage-fix-patches
sys-apps/portage: refresh patches and ensure they are applied
2022-04-22 09:15:14 +02:00
Jeremi Piotrowski
bd05d92a27 sys-apps/portage: bump revision to allow package to be automatically updated 2022-04-22 09:14:25 +02:00
Jeremi Piotrowski
b6a68c8ee7 Merge pull request #1836 from flatcar-linux/linux-5.15.35-main
Upgrade Linux Kernel in main from 5.15.34 to 5.15.35
2022-04-21 17:20:52 +02:00
Jeremi Piotrowski
cea47bb606 sys-kernel/coreos-sources: drop vmbus patch that is included in 5.15.35
Patch z0007 has been released in 5.15.35 as this commit:

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.15.y&id=92a3499933c17b25b7c59658183bc7d23a581f5b
2022-04-21 13:37:15 +02:00
Kai Lüke
425837d4f0 Merge pull request #1827 from flatcar-linux/kai/drop-kola-from-sdk
Drop mantle and kola-data from the SDK
2022-04-21 17:20:55 +09:00
Kai Lueke
87a18b79b3 Drop mantle and kola-data from the SDK
With the new mantle container image referenced by the scripts repo we
don't need the mantle copy in the SDK anymore.
Drop the mantle package and the unused kola-data package.
2022-04-21 17:14:38 +09:00
Jeremi Piotrowski
ab6ac4d0fd sys-apps/portage: refresh patches and ensure they are applied
Found this while checking why I was still seeing lots of

  !!! Section 'gentoo' in repos.conf is missing location attribute

messages while building. Turns out that after the last sync of portage we
stopped applying patches from files/. This was caused by a local variable
definition of PATCHES that was overriding the global one.

This might be a sign to drop them or we can refresh them, as they do fix bugs
that have been hit in CoreOS in the past. I opted to refresh them, and inject
them into the local variable.
2022-04-21 10:07:19 +02:00
Flatcar Buildbot
e840dc7367 sys-kernel: Upgrade Kernel 5.15.34 to 5.15.35 2022-04-21 07:22:37 +00:00
Jeremi Piotrowski
1a5796ea4f profiles: add keywords to cross-*/binutils as well
Crossdev currently uses binutils 2.36 (stable), while the SDK and sysroot both
build binutils 2.37 due to keywording. Kernel modules built within the
developer container fail to load due to relocation errors. Add the same
keywords to cross-*/binutils packages so that the versions match.
2022-04-21 09:03:25 +02:00
Jeremi Piotrowski
b60542c997 coreos-base/coreos-init: add gve driver to existing gcp network link rules
Pulls in https://github.com/flatcar-linux/init/pull/67
2022-04-20 13:13:00 +02:00
Jeremi Piotrowski
c2ff0100ad sys-kernel/coreos-modules: enable GVE NIC support for GCP
If a GCP image is tagged with GVNIC support, GCP will replace the default
virtio nic with the more optimized GVE NIC. Enable building the kernel module
for that.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-04-20 13:13:00 +02:00
Jeremi Piotrowski
9951fc5781 Merge pull request #1813 from flatcar-linux/jepio/fix-gcp-oem
Fix GCP OEM functionality
2022-04-20 12:16:00 +02:00
Jeremi Piotrowski
5b34732d2c changelog: add entry for GCP OEM bugfix/upate 2022-04-20 12:14:38 +02:00
Dongsu Park
738af036e5 changelog: add changelog for Go 1.17.9 2022-04-14 17:08:58 +02:00
Dongsu Park
24b1c088c9 Merge pull request #1818 from flatcar-linux/go-1.16.15-and-1.17.9-and-1.18.1-main
Upgrade Go from 1.17.8 to 1.17.9
2022-04-14 17:06:26 +02:00
Dongsu Park
651164c839 Merge pull request #1816 from flatcar-linux/dongsu/libarchive-3.6.1
profiles: accept keywords ~arm64 for app-arch/libarchive 3.6.1
2022-04-14 17:01:10 +02:00
Krzesimir Nowak
4c115bcd25 Merge pull request #1821 from flatcar-linux/firmware-20220411-main
Upgrade Linux Firmware in main from 20220310 to 20220411
2022-04-14 12:56:14 +02:00
Krzesimir Nowak
5493bd6b23 Merge pull request #1825 from flatcar-linux/linux-5.15.34-main
Upgrade Linux Kernel in main from 5.15.33 to 5.15.34
2022-04-14 12:55:45 +02:00
Kai Lüke
6d623e5f14 Merge pull request #1817 from flatcar-linux/kai/afterburn-hostname
sys-kernel/bootengine: rework afterburn hostname setup
2022-04-14 17:50:44 +09:00
Kai Lueke
487d57c175 sys-kernel/bootengine: rework afterburn hostname setup
This pulls in https://github.com/flatcar-linux/bootengine/pull/43
to remove the afterburn /etc/hostname setup for EC2 and align the
afterburn /etc/hostname setup with upstream.
2022-04-14 17:30:44 +09:00