Matthew Garrett
40fca7ddf1
Fix selinux configuration file location
...
We were installing selinux configuration files in /etc which caused problems
on upgrades. Move them into /usr and ensure that systemd sets up appropriate
temporary files. Fixes https://github.com/coreos/bugs/issues/447
2015-08-24 16:43:36 -07:00
Michael Marineau
a467ab6b1a
Merge pull request #1475 from marineam/go-1.5
...
Go 1.5
2015-08-21 18:00:10 -07:00
Michael Marineau
c6abd3396e
dev-lang/go: add 1.5 release and arm64 kewword
...
For now 1.5 is only stable on arm64, needs testing before we upgrade.
2015-08-21 13:03:14 -07:00
Michael Marineau
ccc2baf889
dev-lang/go: only require go-bootstrap in the SDK itself
2015-08-21 13:03:14 -07:00
William Hubbs
a35f9bda13
dev-lang/go: fix go dist line options in test phase
...
Change --no-rebuild to -no-rebuild and drop --banner in the test phase
to match the documentation of go dist.
Gentoo-Commit: fb870ae6f45993ea375d8d5381edb72ade271b06
2015-08-21 13:03:00 -07:00
Michael Marineau
e83621034c
dev-lang/go: implement more complete cross compilation support
...
There are a few quirks with Go to deal with when cross-compiling:
- Since DEPEND cannot distinguish cross-architecture dependencies the
current ebuild cannot keyword all architectures it supports. This
could be resolved in the future with a special use flag or other
clever trick to drop go-bootstrap from DEPEND for cross builds.
- GOHOST* and CC variables are CBUILD values.
- GO* and *_FOR_TARGET variables are CHOST values.
- Go can always be used as a cross-compiler so handling the
CHOST!=CTARGET case isn't strictly required. We could provide a
pre-built copy of the std library for CTARGET's architecture but I'm
not sure if that would be useful or not. For now the ebuild just
doesn't allow that case.
Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=558216
Gentoo-Commit: 0f4f3b8d200e15982e5e75f52f3c472d152cc4c9
2015-08-21 12:52:41 -07:00
Nick Owens
d6ff8eff9b
Merge pull request #1477 from mischief/fleet
...
app-admin/fleet: bump to v0.11.5
2015-08-20 17:23:45 -07:00
Nick Owens
262711a8b5
app-admin/fleet: bump to v0.11.5
2015-08-20 10:04:52 -07:00
Vito Caputo
48f994468c
Merge pull request #1476 from vcaputo/order_network
...
sys-apps/ignition: move network depdencies to ignition-disks.service
2015-08-19 18:27:32 -07:00
Vito Caputo
f5c4dde1d3
sys-apps/ignition: move network depdencies to ignition services
...
Explicitly order ignition-{disks,files} after the network units, and
switch from Requires to Wants in so ignition can still function without
them.
2015-08-19 18:24:59 -07:00
Michael Marineau
e8cf09be54
dev-lang/go: import latest upstream live ebuild
2015-08-19 17:49:25 -07:00
Alex Crawford
62e67d0faf
Merge pull request #1472 from crawford/ignition-generator
...
sys-kernel/bootengine: set ignition-generator exec
2015-08-18 12:20:41 -07:00
Alex Crawford
cb7dda6c08
sys-kernel/bootengine: set ignition-generator exec
2015-08-18 12:20:04 -07:00
Michael Marineau
fb9b323483
Merge pull request #1470 from marineam/selinux
...
Another round of SELinux fixes
2015-08-14 18:23:04 -07:00
Michael Marineau
9ea1691350
profiles: only enable selinux on amd64
...
The base selinux packages only have amd64 and x86 keywords. No need to
get them working on arm64 right now so make this amd64-only.
2015-08-14 17:59:14 -07:00
Michael Marineau
cab0f533fb
policycoreutils: override DESTDIR instead of PREFIX
...
PREFIX should always point to $(DESTDIR)/usr in order to work in the SDK
where /lib64 isn't a symlink to /usr/lib64 like it is in our images.
2015-08-14 17:48:41 -07:00
Michael Marineau
eb258f2da7
selinux-policy: do not execute binaries under $ROOT
...
Run-time binaries must be provided by the SDK, dynamic libraries or the
entire architecture may be different under the target $ROOT.
I have no idea if selinux can be built cross-architecture though, if not
this may need to be revisited with qemu.
2015-08-14 17:25:43 -07:00
Michael Marineau
1076ef2b7a
Merge pull request #1469 from marineam/selinux
...
checkpolicy: fix typo :(
2015-08-14 16:36:28 -07:00
Michael Marineau
8fed02d826
checkpolicy: fix typo :(
2015-08-14 16:28:53 -07:00
Michael Marineau
5ba8147abb
Merge pull request #1468 from marineam/selinux
...
Selinux cleanup and build fixes
2015-08-14 16:10:15 -07:00
Michael Marineau
c3e0c54d9e
checkpolicy: use includes and libsepol.a from $ROOT
...
Not sure why this is static instead of dynamic in the first place, but
at least this fixes the build error caused by using the SDK root.
2015-08-14 16:02:56 -07:00
Michael Marineau
f932e4d950
checkpolicy: import from portage-stable
2015-08-14 15:44:31 -07:00
Michael Marineau
efde8e22e3
profiles: exclude a pile of ustr source code from prod images
2015-08-14 15:41:18 -07:00
Michael Marineau
691ce0c988
policycoreutils: prune installed tools/files
...
- Exclude all python scripts when the python flag is off.
- Add nls use flag to disable gettext
- Add extra use flag to disable Gentoo provided tools and OpenRC goo.
- Drop live ebuild, we don't really need it.
2015-08-14 15:40:44 -07:00
Alex Crawford
0908ab0bf7
Merge pull request #1464 from crawford/waagent
...
app-emulation/wa-linux-agent: bump to 2.0.14
2015-08-14 14:07:21 -07:00
Geoff Levand
7c9524a479
Merge pull request #1445 from glevand/for-merge-firmware
...
sys-kernel/coreos-firmware: Fix empty list error
2015-08-14 13:50:43 -07:00
Michael Marineau
8436371d7c
Merge pull request #1461 from marineam/grub
...
Update GRUB and OVMF
2015-08-14 13:24:51 -07:00
mjg59
ecd364d4c4
Merge pull request #1467 from mjg59/master
...
Support ARM images in sbsigntool
2015-08-14 13:21:33 -07:00
Matthew Garrett
981e4c1a50
Support ARM images in sbsigntool
...
Import the Ubuntu patchset for sbsigntool so we pick up support for
signing ARM binaries.
2015-08-14 13:01:21 -07:00
mjg59
dde34d405f
Merge pull request #1466 from mjg59/selinux
...
Build an selinux-capable image
2015-08-14 12:23:13 -07:00
Nick Owens
c24cb8dfaf
Merge pull request #1465 from mischief/fleet
...
bump fleet, fix the socket unit
2015-08-14 11:40:40 -07:00
Matthew Garrett
3620b7b02e
Enable selinux
...
One more attempt at this.
2015-08-14 11:38:55 -07:00
Matthew Garrett
d6a89a6fa7
Turn on selinux in the kernel
...
Enable selinux by default. It won't do anything unless a policy gets loaded.
2015-08-14 11:38:55 -07:00
Matthew Garrett
6677b5a15d
Don't have dbus depend on selinux policy
...
We don't need or want selinux policy for dbus at the moment, so remove the
dependency.
2015-08-14 11:38:55 -07:00
Geoff Levand
47cde09eef
sys-kernel/coreos-kernel: Update arm64_defconfig
...
o Enable more ARM64 board support:
EXYNOS7
QCOM
SEATTLE
TEGRA
SPRD
ZYNQMP
o Enable USB wireless and the RTL8192CE driver (with firmware).
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-14 11:27:48 -07:00
Geoff Levand
982fdf26aa
sys-kernel/coreos-firmware: Add empty error message
...
Print an error message and abort if the list of firmware files to install
is empty.
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-14 11:27:48 -07:00
Nick Owens
af167387d7
app-admin/fleet: use PartOf in socket unit to workaround go bug
...
see a related change to docker in commit
4c556494cf82598e2cfd153df93a30a249a43362
2015-08-14 10:48:48 -07:00
Nick Owens
e3557a5ce8
app-admin/fleet: bump to v0.11.4
2015-08-14 10:48:17 -07:00
Alex Crawford
afb6c85169
app-emulation/wa-linux-agent: bump to 2.0.14
2015-08-14 10:24:43 -07:00
Michael Marineau
9d33fdafd0
Merge pull request #1463 from Heather/patch-1
...
Gentoo is moved on git
2015-08-14 09:04:29 -07:00
Heather
1dc29c31ad
Gentoo is moved on git
2015-08-14 18:19:36 +04:00
Michael Marineau
433d939a3d
Merge pull request #1462 from marineam/kublet
...
kublet: fix expansion of KUBELET_OPTS
2015-08-13 16:15:04 -07:00
Geoff Levand
d7d62773eb
Merge pull request #1444 from glevand/for-merge-cmake
...
coreos-overlay: Remove dev-libs/libdivsufsort
2015-08-13 16:05:16 -07:00
Geoff Levand
c467480157
dev-libs/libdivsufsort: Remove unused package
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-13 16:03:59 -07:00
Michael Marineau
e3a903e243
kublet: fix expansion of KUBELET_OPTS
...
In exec commands `${VAR}` always expands to a single word, making it
equivalent to `"${VAR}"` in shell.
2015-08-13 16:02:10 -07:00
Michael Marineau
b961565717
edk2-ovmf: bump to latest snapshot
2015-08-13 14:59:20 -07:00
Michael Marineau
5025e3e62d
grub: sync with upstream as of 2015-07-27
2015-08-13 13:39:47 -07:00
Michael Marineau
8f146f282c
grub: drop old ebuild
2015-08-13 13:37:31 -07:00
Alex Crawford
73d0d6e455
Merge pull request #1459 from crawford/fleet
...
Revert "app-admin/fleet: bump to v0.11.3"
2015-08-13 00:54:11 -07:00
Alex Crawford
cda6828452
Revert "app-admin/fleet: bump to v0.11.3"
...
This reverts commit 3b9e8ca89e4be95d0486b777073fe5a921b7c8ea.
2015-08-13 00:45:11 -07:00