3517 Commits

Author SHA1 Message Date
Matthew Garrett
40fca7ddf1 Fix selinux configuration file location
We were installing selinux configuration files in /etc which caused problems
on upgrades. Move them into /usr and ensure that systemd sets up appropriate
temporary files. Fixes https://github.com/coreos/bugs/issues/447
2015-08-24 16:43:36 -07:00
Michael Marineau
a467ab6b1a Merge pull request #1475 from marineam/go-1.5
Go 1.5
2015-08-21 18:00:10 -07:00
Michael Marineau
c6abd3396e dev-lang/go: add 1.5 release and arm64 kewword
For now 1.5 is only stable on arm64, needs testing before we upgrade.
2015-08-21 13:03:14 -07:00
Michael Marineau
ccc2baf889 dev-lang/go: only require go-bootstrap in the SDK itself 2015-08-21 13:03:14 -07:00
William Hubbs
a35f9bda13 dev-lang/go: fix go dist line options in test phase
Change --no-rebuild to -no-rebuild and drop --banner in the test phase
to match the documentation of go dist.

Gentoo-Commit: fb870ae6f45993ea375d8d5381edb72ade271b06
2015-08-21 13:03:00 -07:00
Michael Marineau
e83621034c dev-lang/go: implement more complete cross compilation support
There are a few quirks with Go to deal with when cross-compiling:

 - Since DEPEND cannot distinguish cross-architecture dependencies the
   current ebuild cannot keyword all architectures it supports. This
   could be resolved in the future with a special use flag or other
   clever trick to drop go-bootstrap from DEPEND for cross builds.

 - GOHOST* and CC variables are CBUILD values.

 - GO* and *_FOR_TARGET variables are CHOST values.

 - Go can always be used as a cross-compiler so handling the
   CHOST!=CTARGET case isn't strictly required. We could provide a
   pre-built copy of the std library for CTARGET's architecture but I'm
   not sure if that would be useful or not. For now the ebuild just
   doesn't allow that case.

Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=558216
Gentoo-Commit: 0f4f3b8d200e15982e5e75f52f3c472d152cc4c9
2015-08-21 12:52:41 -07:00
Nick Owens
d6ff8eff9b Merge pull request #1477 from mischief/fleet
app-admin/fleet: bump to v0.11.5
2015-08-20 17:23:45 -07:00
Nick Owens
262711a8b5 app-admin/fleet: bump to v0.11.5 2015-08-20 10:04:52 -07:00
Vito Caputo
48f994468c Merge pull request #1476 from vcaputo/order_network
sys-apps/ignition: move network depdencies to ignition-disks.service
2015-08-19 18:27:32 -07:00
Vito Caputo
f5c4dde1d3 sys-apps/ignition: move network depdencies to ignition services
Explicitly order ignition-{disks,files} after the network units, and
switch from Requires to Wants in so ignition can still function without
them.
2015-08-19 18:24:59 -07:00
Michael Marineau
e8cf09be54 dev-lang/go: import latest upstream live ebuild 2015-08-19 17:49:25 -07:00
Alex Crawford
62e67d0faf Merge pull request #1472 from crawford/ignition-generator
sys-kernel/bootengine: set ignition-generator exec
2015-08-18 12:20:41 -07:00
Alex Crawford
cb7dda6c08 sys-kernel/bootengine: set ignition-generator exec 2015-08-18 12:20:04 -07:00
Michael Marineau
fb9b323483 Merge pull request #1470 from marineam/selinux
Another round of SELinux fixes
2015-08-14 18:23:04 -07:00
Michael Marineau
9ea1691350 profiles: only enable selinux on amd64
The base selinux packages only have amd64 and x86 keywords. No need to
get them working on arm64 right now so make this amd64-only.
2015-08-14 17:59:14 -07:00
Michael Marineau
cab0f533fb policycoreutils: override DESTDIR instead of PREFIX
PREFIX should always point to $(DESTDIR)/usr in order to work in the SDK
where /lib64 isn't a symlink to /usr/lib64 like it is in our images.
2015-08-14 17:48:41 -07:00
Michael Marineau
eb258f2da7 selinux-policy: do not execute binaries under $ROOT
Run-time binaries must be provided by the SDK, dynamic libraries or the
entire architecture may be different under the target $ROOT.

I have no idea if selinux can be built cross-architecture though, if not
this may need to be revisited with qemu.
2015-08-14 17:25:43 -07:00
Michael Marineau
1076ef2b7a Merge pull request #1469 from marineam/selinux
checkpolicy: fix typo :(
2015-08-14 16:36:28 -07:00
Michael Marineau
8fed02d826 checkpolicy: fix typo :( 2015-08-14 16:28:53 -07:00
Michael Marineau
5ba8147abb Merge pull request #1468 from marineam/selinux
Selinux cleanup and build fixes
2015-08-14 16:10:15 -07:00
Michael Marineau
c3e0c54d9e checkpolicy: use includes and libsepol.a from $ROOT
Not sure why this is static instead of dynamic in the first place, but
at least this fixes the build error caused by using the SDK root.
2015-08-14 16:02:56 -07:00
Michael Marineau
f932e4d950 checkpolicy: import from portage-stable 2015-08-14 15:44:31 -07:00
Michael Marineau
efde8e22e3 profiles: exclude a pile of ustr source code from prod images 2015-08-14 15:41:18 -07:00
Michael Marineau
691ce0c988 policycoreutils: prune installed tools/files
- Exclude all python scripts when the python flag is off.
 - Add nls use flag to disable gettext
 - Add extra use flag to disable Gentoo provided tools and OpenRC goo.
 - Drop live ebuild, we don't really need it.
2015-08-14 15:40:44 -07:00
Alex Crawford
0908ab0bf7 Merge pull request #1464 from crawford/waagent
app-emulation/wa-linux-agent: bump to 2.0.14
2015-08-14 14:07:21 -07:00
Geoff Levand
7c9524a479 Merge pull request #1445 from glevand/for-merge-firmware
sys-kernel/coreos-firmware: Fix empty list error
2015-08-14 13:50:43 -07:00
Michael Marineau
8436371d7c Merge pull request #1461 from marineam/grub
Update GRUB and OVMF
2015-08-14 13:24:51 -07:00
mjg59
ecd364d4c4 Merge pull request #1467 from mjg59/master
Support ARM images in sbsigntool
2015-08-14 13:21:33 -07:00
Matthew Garrett
981e4c1a50 Support ARM images in sbsigntool
Import the Ubuntu patchset for sbsigntool so we pick up support for
signing ARM binaries.
2015-08-14 13:01:21 -07:00
mjg59
dde34d405f Merge pull request #1466 from mjg59/selinux
Build an selinux-capable image
2015-08-14 12:23:13 -07:00
Nick Owens
c24cb8dfaf Merge pull request #1465 from mischief/fleet
bump fleet, fix the socket unit
2015-08-14 11:40:40 -07:00
Matthew Garrett
3620b7b02e Enable selinux
One more attempt at this.
2015-08-14 11:38:55 -07:00
Matthew Garrett
d6a89a6fa7 Turn on selinux in the kernel
Enable selinux by default. It won't do anything unless a policy gets loaded.
2015-08-14 11:38:55 -07:00
Matthew Garrett
6677b5a15d Don't have dbus depend on selinux policy
We don't need or want selinux policy for dbus at the moment, so remove the
dependency.
2015-08-14 11:38:55 -07:00
Geoff Levand
47cde09eef sys-kernel/coreos-kernel: Update arm64_defconfig
o Enable more ARM64 board support:
    EXYNOS7
    QCOM
    SEATTLE
    TEGRA
    SPRD
    ZYNQMP
o Enable USB wireless and the RTL8192CE driver (with firmware).

Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-14 11:27:48 -07:00
Geoff Levand
982fdf26aa sys-kernel/coreos-firmware: Add empty error message
Print an error message and abort if the list of firmware files to install
is empty.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-14 11:27:48 -07:00
Nick Owens
af167387d7 app-admin/fleet: use PartOf in socket unit to workaround go bug
see a related change to docker in commit
4c556494cf82598e2cfd153df93a30a249a43362
2015-08-14 10:48:48 -07:00
Nick Owens
e3557a5ce8 app-admin/fleet: bump to v0.11.4 2015-08-14 10:48:17 -07:00
Alex Crawford
afb6c85169 app-emulation/wa-linux-agent: bump to 2.0.14 2015-08-14 10:24:43 -07:00
Michael Marineau
9d33fdafd0 Merge pull request #1463 from Heather/patch-1
Gentoo is moved on git
2015-08-14 09:04:29 -07:00
Heather
1dc29c31ad Gentoo is moved on git 2015-08-14 18:19:36 +04:00
Michael Marineau
433d939a3d Merge pull request #1462 from marineam/kublet
kublet: fix expansion of KUBELET_OPTS
2015-08-13 16:15:04 -07:00
Geoff Levand
d7d62773eb Merge pull request #1444 from glevand/for-merge-cmake
coreos-overlay: Remove dev-libs/libdivsufsort
2015-08-13 16:05:16 -07:00
Geoff Levand
c467480157 dev-libs/libdivsufsort: Remove unused package
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-13 16:03:59 -07:00
Michael Marineau
e3a903e243 kublet: fix expansion of KUBELET_OPTS
In exec commands `${VAR}` always expands to a single word, making it
equivalent to `"${VAR}"` in shell.
2015-08-13 16:02:10 -07:00
Michael Marineau
b961565717 edk2-ovmf: bump to latest snapshot 2015-08-13 14:59:20 -07:00
Michael Marineau
5025e3e62d grub: sync with upstream as of 2015-07-27 2015-08-13 13:39:47 -07:00
Michael Marineau
8f146f282c grub: drop old ebuild 2015-08-13 13:37:31 -07:00
Alex Crawford
73d0d6e455 Merge pull request #1459 from crawford/fleet
Revert "app-admin/fleet: bump to v0.11.3"
2015-08-13 00:54:11 -07:00
Alex Crawford
cda6828452 Revert "app-admin/fleet: bump to v0.11.3"
This reverts commit 3b9e8ca89e4be95d0486b777073fe5a921b7c8ea.
2015-08-13 00:45:11 -07:00