Benjamin Gilbert
cd4e3746cc
oem/ami: Drop in favor of plume
2017-04-07 19:44:20 -07:00
Benjamin Gilbert
45dffca9b6
Merge pull request #661 from bgilbert/package-lists
...
build_image_util: Don't query the $BUILD_DIR vdb
2017-04-06 12:27:45 -07:00
Benjamin Gilbert
f431e7c1ad
Merge pull request #659 from bgilbert/unique-build-ids
...
common: Don't export COREOS_BUILD_ID
2017-04-06 12:25:34 -07:00
Benjamin Gilbert
3e27bdcc45
common: Don't export COREOS_BUILD_ID
...
5a76e4e5e9
started exporting COREOS_BUILD_ID
whenever it was found in version.txt, even if its value was blank. Because
COREOS_BUILD_ID is in ENVIRONMENT_WHITELIST, this caused generated build IDs
to be propagated into the SDK chroot environment and reused for every build
in a "cork enter" session. Stop exporting COREOS_BUILD_ID when we set it
ourselves.
See also 8e754f9c2b
.
2017-04-06 12:23:51 -07:00
David Michael
79b1f4cd47
Merge pull request #663 from dm0-/signed-tags
...
Require signed release tags
2017-04-03 14:43:49 -07:00
David Michael
1f2a44214c
tag_release: always sign release tags
2017-04-03 14:22:01 -07:00
David Michael
b44460ca0d
Merge pull request #662 from dm0-/bootstrap-sigs
...
Upload package signatures from the bootstrap process
2017-03-31 17:01:36 -07:00
David Michael
266829d7e1
build_toolchains: upload package signatures
2017-03-31 16:50:29 -07:00
David Michael
3a24149f66
bootstrap_sdk: upload package signatures
2017-03-31 16:50:12 -07:00
David Michael
f7a41994f4
Merge pull request #660 from dm0-/signed-binpkg
...
Sign uploaded binary packages
2017-03-30 17:10:33 -07:00
David Michael
17e4ee2dcd
release_util: allow signing uploaded packages
2017-03-30 16:53:15 -07:00
David Michael
e80eddd0c8
release_util: support signing directories
2017-03-30 16:53:10 -07:00
David Michael
6b86520bf4
release_util: store file signatures in their own directory
...
This allows signing files under paths owned by other users.
2017-03-30 16:52:44 -07:00
Benjamin Gilbert
d0e89d1752
build_image_util: Don't query the $BUILD_DIR vdb
...
Jenkins uses separate chroots for package and image builds, so
$BUILD_DIR may not have the relevant packages installed.
2017-03-30 15:43:56 -07:00
Benjamin Gilbert
d8fb403f69
build_image_util: Fix warnings when building OEM ACIs
...
INFO build_oem_aci: Writing coreos_oem_gce_aci_stage_packages.txt
awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
INFO build_oem_aci: Writing coreos_oem_gce_aci_stage_licenses.txt
awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
2017-03-29 16:31:05 -07:00
David Michael
66dca6ab85
Merge pull request #657 from dm0-/perl-glsa
...
Update Perl to fix the last GLSA
2017-03-23 19:58:35 -07:00
Benjamin Gilbert
d234da9ffc
Merge pull request #651 from bgilbert/firstboot-file
...
Set coreos.first_boot based on existence of file in ESP
2017-03-23 18:29:41 -07:00
David Michael
43807d6763
catalyst: temporarily disable update_seed
...
This can be reverted once there is a version of the SDK containing
the updated Perl 5.22 packages.
2017-03-21 21:12:40 -07:00
David Michael
09efc42e8f
update_chroot: fix SDK updates during the Perl 5.22 upgrade
2017-03-21 18:52:05 -07:00
David Michael
28f5d7f276
update_chroot: store emerge flags in arrays
2017-03-21 18:36:43 -07:00
Michael Marineau
6a4e78937d
Merge pull request #647 from glevand/for-merge-jenkins
...
Fixups for jenkins
2017-03-20 16:02:25 -07:00
Geoff Levand
5a76e4e5e9
load_environment_var: Pickup COREOS_BUILD_ID
...
Change the setting of COREOS_BUILD_ID so that its value, in order of
preference, is set to
A value set in the environment.
A value provided in manifest's version.txt.
A fall back value of the current time-date.
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-03-20 15:36:03 -07:00
Geoff Levand
aa259bf685
load_environment_var: Strip double quotes
...
To allow double quoted values to be processed correctly.
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-03-20 15:36:03 -07:00
Geoff Levand
1c16018906
Remove old Jenkins jobs
...
The new Jenkins jobs are hosed at:
https://github.com/coreos/jenkins-os
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-03-20 15:36:03 -07:00
Alex Crawford
09fd7a37c1
Merge pull request #653 from crawford/bash
...
*: don't hardcode path to bash
2017-03-20 15:26:31 -07:00
Alex Crawford
e304fb9557
Merge pull request #655 from glevand/for-merge-os-release
...
os-release: Add COREOS_BOARD variable
2017-03-15 17:30:24 -07:00
Alex Crawford
9b2bcb3622
Merge pull request #656 from crawford/licenses
...
build_library: upload image licenses
2017-03-15 17:29:21 -07:00
Alex Crawford
b924c5ce6c
build_library: upload image licenses
...
We've always generated these license manifests (detailing which ebuilds
are covered by which license), but never published them. This adds these
manifests to the list of published files so that they are publicly
available.
2017-03-15 14:11:01 -07:00
Geoff Levand
3b8c558367
os-release: Add COREOS_BOARD variable
...
os-release is requested in bug reports, and knowing which board
the problem occurred on is often helpful.
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-03-14 09:45:24 -07:00
Euan Kemp
8240215fe2
Merge pull request #650 from euank/docker-aci
...
Initial docker-aci build thing
2017-03-08 13:30:54 -08:00
Euan Kemp
b8589683b8
build_docker_aci: include 'extra' version number
...
This allows for multiple iterations with the same package version if
needed.
2017-03-06 16:07:26 -08:00
Euan Kemp
ada33ad411
build_docker_aci: update version / file logic
2017-03-06 16:07:26 -08:00
Alex Crawford
d8ea06c5c5
*: don't hardcode path to bash
...
Bash isn't always at this location. These scripts in particular are
being updated because they are called from outside of the SDK.
2017-03-02 14:00:11 -08:00
David Michael
89fb15ae08
Merge pull request #652 from dm0-/revert-sb
...
Revert Secure Boot signing changes
2017-03-01 18:11:52 -08:00
David Michael
aa772ea048
Revert "offline_signing: sign UEFI binaries for Secure Boot"
...
This reverts commit 40b60875d0
.
2017-03-01 18:09:53 -08:00
David Michael
828ae7b561
Revert "offline_signing: download all UEFI binaries"
...
This reverts commit d91c0c398f
.
2017-03-01 18:09:53 -08:00
Benjamin Gilbert
9e1c23f3f4
grub: Set coreos.first_boot based on existence of file in ESP
...
Detect first boot based on the existence of a coreos/first_boot file
in the EFI partition, and set "coreos.first_boot=detected" command line
argument when found. We use "detected" rather than "1" so the initramfs
knows that it should mount the ESP and delete the file. This lets us
defer clearing the first-boot flag until Ignition has run successfully,
without having to change the disk GUID after filesystems are mounted.
Continue detecting the first-boot disk GUID and adding the command-line
argument to randomize it, since we still want unique disk GUIDs
regardless of Ignition.
2017-03-01 16:10:21 -08:00
Benjamin Gilbert
0b010279e0
build_image: Create /boot/coreos/first_boot
2017-03-01 15:54:05 -08:00
Euan Kemp
1186d2875a
Initial checkin of docker-aci build script
2017-03-01 14:59:43 -08:00
Euan Kemp
20325a547f
build_image_util: allow unchecked emerges too
...
This is useful for emerges that are meant for incomplete rootfs's, such
as ACI building emerges. There are cases where the #! check is expected
to fail while doing those.
2017-03-01 10:52:17 -08:00
Benjamin Gilbert
37d22d0ff3
Merge pull request #648 from bgilbert/sdk-version-keep
...
tag_release: Semi-document "keep" argument to --sdk_version
2017-02-27 14:19:07 -08:00
Benjamin Gilbert
7965d657c7
tag_release: Semi-document "keep" argument to --sdk_version
2017-02-27 13:48:44 -08:00
Euan Kemp
18076b8bdb
Merge pull request #642 from euank/symlink-checker
...
check_root: add check for broken symlinks
2017-02-17 16:18:45 -08:00
Euan Kemp
3eea9d2701
check_root: fix lint warnings
...
Per `flake8-3`'s recommendations
2017-02-17 16:00:33 -08:00
Euan Kemp
2596099207
check_root: add check for broken symlinks
2017-02-17 15:51:31 -08:00
David Michael
1538d40fe9
Merge pull request #641 from dm0-/toolchain
...
toolchain: always run gcc-config
2017-02-17 11:38:16 -08:00
David Michael
3d68362d02
toolchain: always run gcc-config
2017-02-16 17:54:06 -08:00
David Michael
06c80eb38a
Merge pull request #640 from dm0-/secure-boot
...
Add Secure Boot to the offline signing process
2017-02-06 13:32:27 -08:00
David Michael
40b60875d0
offline_signing: sign UEFI binaries for Secure Boot
2017-02-06 13:29:15 -08:00
David Michael
d91c0c398f
offline_signing: download all UEFI binaries
2017-02-06 13:29:14 -08:00