6140 Commits

Author SHA1 Message Date
Kai Lüke
44dbd37ff6 app-admin/locksmith: Migrate to Go modules
Pulls in
https://github.com/flatcar-linux/locksmith/pull/4
2020-06-29 16:17:22 +02:00
Dongsu Park
67c51a96e8 Revert "profiles: force to use ssl USE flag for wget"
This reverts commit 517e23ebfe96137f1482ae42f8b29fc2f1b31317.

The new USE flag `ssl` for wget resulted in a strange issue.
`wget` started to pull in `dev-libs/openssl`, which has `bindist` in its
USE flag. The catalyst stages, however, need to install wget without
`bindist`. Such mismatches resulted in errors like:

```
!!! All ebuilds that could satisfy "dev-libs/openssl:0=" for /tmp/stage1root/ have been masked.
!!! One of the following masked packages is required to complete your request:
- dev-libs/openssl-1.0.2u::coreos (masked by: bindist in RESTRICT)
```

So to fix the issue, what needs to be done is basically:

```
ACCEPT_RESTRICT=bindist USE=-bindist emerge -pv openssl openssh
```

Unfortunately it is not possible to set `accept_restrict` configs
under the coreos-overlay repo. We need to have some time to investigate
why it is so.

As a hotfix, we need to revert the `ssl` USE flag for wget.
2020-06-26 16:11:57 +02:00
Vincent Batts
4435726c00 etcd: update URL to it's own org on github now
even though they're still building from quay.io/coreos/etcd? maybe
that'll change soon too?

Signed-off-by: Vincent Batts <vbatts@kinvolk.io>
2020-06-26 16:07:05 +02:00
Flatcar Buildbot
cd47202838 chore(metadata): Regenerate cache 2020-06-26 09:18:03 +02:00
Flatcar Buildbot
86998589ed app-emulation: Upgrade Runc 1.0.0_rc10 to 1.0.0_rc90 2020-06-26 09:17:14 +02:00
Dongsu Park
3191861b0e Merge pull request #394 from flatcar-linux/docker-19.03.11-alpha
Upgrade Docker in Alpha from 19.03.8 to 19.03.11
2020-06-26 09:14:20 +02:00
Dongsu Park
cc2fcb56a1 Merge pull request #396 from flatcar-linux/dongsu/docker-go1.13-alpha
app-emulation/docker: set go1.13 in DOCKER_BUILDTAGS for alpha
2020-06-26 09:12:17 +02:00
Dongsu Park
037b53190e profiles: force to use ssl USE flag for wget
When catalyst tries to fetch a file via https, wget sometimes fails
to do so, with the following messages:

```
https://www.kernel.org/pub/software/scm/git/git-2.24.1.tar.xz: HTTPS
support not compiled in.
!!! Couldn't download 'git-2.24.1.tar.xz'. Aborting.
```

That probably happens because wget in some catalyst stages are compiled
without `ssl` USE flag. If a catalyst stage is lucky enough to rebuild
wget with `ssl` before actually fetching a file, it would work well.
Though if not, it would fail. It is not deterministic, and hard to
reproduce.

So backport the fix from upstream Gentoo,
https://github.com/gentoo/gentoo/commit/d141380b915d , for both amd64
and arm64. By setting `ssl` for wget in `package.use.force`, it is now
not possible to disable `ssl` for wget.

More details: https://bugs.gentoo.org/611072
2020-06-25 16:34:30 +02:00
Dongsu Park
4b37cf1e73 Merge pull request #430 from flatcar-linux/linux-5.4.47-alpha
Upgrade Linux Kernel in Alpha from 5.4.46 to 5.4.47
2020-06-19 10:23:38 +02:00
Sayan Chowdhury
dc39ed2025 Merge pull request #421 from flatcar-linux/sayan/update-to-intel-microcode-20200609_p20200601-alpha
sys-firmware/intel-microcode: update to 20200609
2020-06-18 19:09:27 +05:30
Flatcar Buildbot
5aadf68896 chore(metadata): Regenerate cache 2020-06-18 07:09:39 +00:00
Flatcar Buildbot
1a2717f498 sys-kernel: Upgrade coreos-kernel 5.4.46 to 5.4.47 2020-06-18 07:09:39 +00:00
Flatcar Buildbot
2514c02574 chore(metadata): Regenerate cache 2020-06-17 16:46:22 +02:00
Flatcar Buildbot
c155b5d9f6 app-emulation: Upgrade Docker 19.03.8 to 19.03.11 2020-06-17 16:45:53 +02:00
Kai Lüke
15eae915b4 app-admin/*-wrapper: Only set arguments that weren't set
When 788f328dc752a75da08d4c6fc27d094ecb4807d5 introduced pulling from
docker by default, "--insecure-options=image" was added for all
docker registries. However, when the user also needs to set "http" as
in "--insecure-options=image,http" it will not be used because the
other argument is added as last disregarding the option was already
set by the user.
Check if the option was set by the user and only add it if it is not
provided. If the user forgets to add "image" then rkt will simply
fail and tell that this option is needed; thus no complex logic of
appending and detecting only "image" is needed. Do the same for the
"--trust-keys-from-https" option to be consistent in allowing to
overwrite it with "--trust-keys-from-https=false".
2020-06-17 14:48:24 +02:00
Sayan Chowdhury
4fad288ad6 Merge pull request #400 from flatcar-linux/sayan/enable-getty-systemd
sys-apps/systemd: Manually enable the getty service
2020-06-17 15:11:21 +05:30
Sayan Chowdhury
5ae07c842e sys-firmware/intel-microcode: rev bump; sync with upstream
- Mask sig 0x000406e3, pf_mask 0xc0, revision=0xd6 [Link 1]
- Mask sig 0x000406e3, pf_mask 0xc0, revision=0xda [Bug 722768]
This will basically downgrade microcode for 0x000406e3 back to rev 0x00d6 from 2019-10-03.

Link1: c1d8ba62ab

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-06-15 20:33:32 +05:30
Sayan Chowdhury
cbbed18c20 sys-firmware/intel-microcode: update to 20200609
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-06-11 15:28:01 +05:30
Flatcar Buildbot
494389b705 chore(metadata): Regenerate cache 2020-06-11 07:07:10 +00:00
Flatcar Buildbot
0705546e21 sys-kernel: Upgrade coreos-kernel 5.4.44 to 5.4.46 2020-06-11 07:07:10 +00:00
Kai Lüke
5c202dc3ec coreos-devel/mantle: Use correct Apache license identifier
There is no portage-stable/licenses/Apache-2 file because the
correct name for the license is Apache-2.0, and the missing
license file causes the build to fail.
2020-06-10 19:11:24 +02:00
Sayan Chowdhury
b6b6f60a69 sys-apps/systemd: Manually enable the getty service
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-06-10 20:07:46 +05:30
Dongsu Park
b7d56c85eb sys-auth/sssd: do not depend on gssapi
Now that bind-tools are built with gssapi only for AMD, without gssapi
for ARM, we need to get the USE flag requirement relaxed. Profile for
each architecture will instead choose whether to use gssapi.
2020-06-09 12:40:46 +02:00
Dongsu Park
13876614a7 profiles: enable bind-tools again for ARM
bind-tools has been disabled since a long time, probably because of
build errors around cross-compilation for ARM. However, bind-tools
binaries should be at least included in ARM images. So enable bind-tools
again for ARM without gssapi included.

To do that, disable gssapi for bind-tools only in the ARM profile, and
enable gssapi only in the AMD profile.
2020-06-09 12:40:43 +02:00
Flatcar Buildbot
68df572bbe chore(metadata): Regenerate cache 2020-06-08 07:22:21 +00:00
Flatcar Buildbot
03f94673f4 dev-lang: Upgrade Go 1.13.11 to 1.13.12 2020-06-08 07:22:21 +00:00
Dongsu Park
61aa059a13 app-emulation/docker: set go1.13 in DOCKER_BUILDTAGS
Since Docker >= 19.03.9 started to depend on github.com/pkg/errors
v0.9.1 or newer, it is now necessary to set `go1.13` in
`DOCKER_BUILDTAGS`. Otherwise, it cannot find `Is` function.

See also https://github.com/pkg/errors/blob/v0.9.1/go113.go#L16 .
2020-06-03 11:59:05 +02:00
Flatcar Buildbot
0cb5289164 chore(metadata): Regenerate cache 2020-06-03 07:07:45 +00:00
Flatcar Buildbot
6f08bef5ce sys-kernel: Upgrade coreos-kernel 5.4.43 to 5.4.44 2020-06-03 07:07:45 +00:00
Dongsu Park
0ffea1943b Merge pull request #387 from flatcar-linux/linux-5.4.43-alpha
Upgrade Linux Kernel in Alpha from 5.4.42 to 5.4.43
2020-05-29 17:28:13 +02:00
Kai Lüke
97331a4cf0 Remove rpcgen-from-host patch as qemu-static works on Jenkins 2020-05-29 14:26:51 +02:00
Kai Lüke
c2681c7ed5 Revert "sys-libs/tdb: support cross-builds for WAF"
This reverts commit 53a468b1604076fd3ce5f305d4a87e38a57ccfb4.
2020-05-29 14:26:51 +02:00
Kai Lüke
d4ea67145e Revert "sys-libs/tevent: support cross-builds for WAF"
This reverts commit 5fc31cdfc60522865d5b4c942da9a3410fb4b05f.
2020-05-29 14:26:51 +02:00
Kai Lüke
738c7a24dd Remove WAF cross-compilation patches for arm64
They were needed when Jenkins did not have qemu-static to run compiled
binaries of the target architecture.
Remove the patches as Jenkins is ready now and qemu-static is there to
stay because we need it for SELinux and other things.
2020-05-29 14:26:51 +02:00
Kai Lüke
05eb39365c Revert "net-libs/rpcsvc-proto: make rpcgen work for both architectures"
This reverts commit e04e8177f154b125b5fdd92e7e22805696290a81.
2020-05-29 14:26:50 +02:00
Dongsu Park
3fdcd03489 chore(metadata): Regenerate cache 2020-05-29 09:44:27 +02:00
Dongsu Park
9eb49638d3 dev-lang/rust: update patches and fix build issues 2020-05-29 09:44:27 +02:00
Flatcar Buildbot
ad8de96dcc chore(metadata): Regenerate cache 2020-05-29 09:43:57 +02:00
Flatcar Buildbot
96bb021dfa dev-lang: Upgrade Rust 1.36.0 to 1.43.1 2020-05-29 09:43:57 +02:00
Dongsu Park
b8d772d5a2 Merge pull request #383 from flatcar-linux/dongsu/docker-fix-github-url-alpha
app-emulation/docker: Fix URLs for docker-ce tarballs for alpha
2020-05-28 18:07:03 +02:00
Dongsu Park
14e1f33a03 Merge pull request #327 from flatcar-linux/dongsu/strace-5.6-alpha
dev-util/strace: bump to 5.6 for alpha
2020-05-28 17:12:58 +02:00
Flatcar Buildbot
345e791c50 chore(metadata): Regenerate cache 2020-05-28 07:08:00 +00:00
Flatcar Buildbot
12202cfd4b sys-kernel: Upgrade coreos-kernel 5.4.42 to 5.4.43 2020-05-28 07:08:00 +00:00
Dongsu Park
757779c56d app-emulation/docker: Fix URLs for docker-ce tarballs
Since docker-ce v18.09, the upstream repo github.com/docker/docker-ce
has changed its way of version tagging, from `$VERSION-ce` to `$VERSION`.
As a result, e.g. for v19.03.8,
https://github.com/docker/docker-ce/archive/v19.03.8-ce.tar.gz is not
valid any more. It must be actually
https://github.com/docker/docker-ce/archive/v19.03.8.tar.gz.

So we need to remove the suffix `-ce` from every version since v18.09.
2020-05-27 10:37:26 +02:00
Flatcar Buildbot
7159e84768 chore(metadata): Regenerate cache 2020-05-25 12:24:37 +02:00
Flatcar Buildbot
3e4ae9d90b dev-lang: Upgrade Go 1.13.10 to 1.13.11 2020-05-25 12:24:08 +02:00
Dongsu Park
e2192fda69 Merge pull request #375 from flatcar-linux/linux-5.4.42-alpha
Upgrade Linux Kernel in Alpha from 5.4.41 to 5.4.42
2020-05-25 12:21:02 +02:00
Sayan Chowdhury
728d22f652 Merge pull request #376 from flatcar-linux/sayan/revert-runc-patch
Revert "Merge pull request #289 from flatcar-linux/dongsu/docker-runc-selinux-alpha"
2020-05-22 21:29:52 +05:30
Kai Lüke
762d62e40a sys-kernel/bootengine: Point to latest flatcar-master
Pulls in https://github.com/flatcar-linux/bootengine/pull/13
2020-05-22 15:34:33 +02:00
Kai Lüke
37d7c5b750 coreos-base/update_engine: Point to latest flatcar-master
Pulls in https://github.com/flatcar-linux/update_engine/pull/5
2020-05-22 15:34:33 +02:00