30045 Commits

Author SHA1 Message Date
Nick Owens
3a95c8f18d sys-kernel/coreos-firmware: update to 20160331 2016-05-16 14:55:02 -07:00
Nick Owens
276a7f6d67 sys-kernel/coreos-{sources,kernel}: update to 4.6 2016-05-16 14:55:01 -07:00
Alex Crawford
80d7aed53d app-emulation/google-startup-script: bump to 1.3.2 2016-05-16 14:50:17 -07:00
Alex Crawford
12509babed app-emulation/google-compute-daemon: bump to 1.3.2 2016-05-16 14:50:17 -07:00
Matthew Garrett
0375b81086 Merge pull request #1966 from mjg59/updates
Update mantle and baselayout to reduce the probability of future disastrous events
2016-05-16 13:39:57 -07:00
Matthew Garrett
a25497dce5 coreos-devel/mantle: Verify that unauthenticated users can't access CoreOS
Include a test to ensure that users without valid authentication tokens are
unable to log into CoreOS
2016-05-16 13:36:03 -07:00
Matthew Garrett
3ba6985d62 sys-apps/baselayout: Remove login shell for operator user 2016-05-16 13:36:03 -07:00
Matthew Garrett
3865f77ecd sys-auth/pambase: Fall back to pam_deny in auth
Setting pam_unix and pam_sss to sufficient means that if both fail,
control will be passed to the following pam module. If this is
pam_permit then permission will be granted even if the previous modules
failed. Switch to pam_deny and require it rather than permitting it to
be optional - if sss or unix succeed, we'll jump out before we get to
this point.
2016-05-15 21:12:57 -07:00
Nick Owens
a593ed52ff bump(sys-libs/libseccomp): sync with upstream 2016-05-15 18:13:14 -07:00
Michael Marineau
31a479553b tag_release: support branches, add a branch tracking manifest
To make branches easier to use this splits the branch manifest into two:
build-????.xml is now only pins revisions of projects that do not have a
corresponding branch (yet) while release.xml pins all revisions. Unlike
before the script can now be used to tag branched releases.

The step to switch any particular project to a branch is still manual
but that will be a simple future expansion. First this will be migrated
to Go though, this script has hit the limit of sophistication that
should be attempted with mixing XML and bash. ;-)
2016-05-15 17:49:43 -07:00
Michael Marineau
f60d2762c2 tag_release: remove old BUILD/BRANCH/PATCH values
These old names are left over from ChromeOS and never really made sense
for us. The last things using them were fixed up a while ago.
2016-05-15 16:28:34 -07:00
Nick Owens
4a94f04736 Merge pull request #1961 from mischief/linux-4.5.4
sys-kernel/coreos-{sources,kernel}: update to 4.5.4
2016-05-14 13:32:33 -07:00
Nick Owens
948af5c88b sys-kernel/coreos-{sources,kernel}: update to 4.5.4 2016-05-13 15:46:54 -07:00
Nick Owens
1e63583c3c Merge pull request #1962 from mischief/systemd-tasksmax
sys-apps/systemd: bump to include DefaultTasksMax fix
2016-05-13 15:29:02 -07:00
Nick Owens
6b014521c4 sys-apps/systemd: bump to include DefaultTasksMax fix 2016-05-13 15:21:13 -07:00
Michael Marineau
e11ac9886f Merge pull request #422 from marineam/metadata
chore(metadata): Regenerate cache
2016-05-13 11:16:55 -07:00
Nick Owens
ee3d88085f Merge pull request #1958 from mischief/fix-rkt-stage1
app-emulation/rkt: use CoreOS alpha 1010.1.0 without PAM
2016-05-13 10:41:58 -07:00
Nick Owens
8d6ccc81f2 Merge pull request #1959 from mischief/kubelet-stage1
app-admin/kubelet-wrapper: fix stage1 reference
2016-05-13 10:27:40 -07:00
Nick Owens
acf641ca67 app-admin/kubelet-wrapper: fix stage1 reference
since rkt 1.3.0, rkt has began checking stage1 hashes, and will do so if
the stage1 is not in the default stage1 directory. for compatibility,
df131e85d5240a75fb9cd4e1fb85e86e6f5290c1 symlinked the old stage1
directory to the new one, however, if a stage1 is referred to by the old
stage1 path under rkt >1.3.0, image verification will fail because no
signature exists.

instead of using a path, use stage1-fly.aci by name and let rkt handle
finding it in the default directory.
2016-05-12 21:39:13 -07:00
Nick Owens
05856d1789 app-emulation/rkt: use CoreOS alpha 1010.1.0 without PAM
CoreOS 1029.0.0 introduced PAM which was linked into systemd. rkt copies
files and libraries out of CoreOS images with a static manifest to
construct the CoreOS stage1. since this manifest lacks PAM libraries in
rkt 1.5.1, we can't use CoreOS 1032.0.0, so fall back to a CoreOS
version without PAM linked into systemd.
2016-05-12 21:31:25 -07:00
Nick Owens
9b8a4ca434 Merge pull request #544 from mischief/jenkins
initial import of public jenkins jobs
2016-05-12 15:36:09 -07:00
Nick Owens
aa3fed014e Merge pull request #543 from mischief/arm64-grub-name
build_library: make arm64 grub file name match x86_64
2016-05-12 14:55:30 -07:00
Nick Owens
281f85941f initial import of public jenkins jobs 2016-05-12 14:34:55 -07:00
Nick Owens
d935a8aca0 build_library: make arm64 grub file name match x86_64 2016-05-12 13:09:46 -07:00
Nick Owens
bb800cff86 Merge pull request #542 from mischief/arm-grub-fix
build_library: fix grub loader copy for arm64
2016-05-12 12:14:41 -07:00
Nick Owens
1fd668ef0d build_library: fix grub loader copy for arm64 2016-05-12 12:05:11 -07:00
Michael Marineau
1616098d8f Merge pull request #1957 from marineam/metadata
chore(metadata): Regenerate cache
2016-05-11 15:58:42 -07:00
Michael Marineau
787c7beaf0 chore(metadata): Regenerate cache 2016-05-11 15:50:57 -07:00
Michael Marineau
a0fa8f17fd chore(metadata): Regenerate cache 2016-05-11 15:50:56 -07:00
Michael Marineau
916ed23174 Merge pull request #1956 from marineam/mantle
mantle: small fix for plume release
2016-05-11 11:24:35 -07:00
Michael Marineau
ccafb1b3a5 Merge pull request #541 from marineam/drop-dev-channel
tag_release: drop pushing to old dev-channel branch
2016-05-11 11:24:29 -07:00
Michael Marineau
aa0b0b9843 mantle: small fix for plume release 2016-05-11 11:12:55 -07:00
Michael Marineau
15988a936a tag_release: drop pushing to old dev-channel branch 2016-05-11 11:09:39 -07:00
Michael Marineau
b96c191cf8 Merge pull request #1951 from marineam/go-arch
eclass/coreos-go: add ppc64 and x86 arch to go_get_arch
2016-05-10 19:22:53 -07:00
Nick Owens
be06aefc19 Merge pull request #1952 from mischief/mantle-0.1.2
coreos-devel/mantle: bump to v0.1.2
2016-05-10 13:39:15 -07:00
Nick Owens
a606b3942f coreos-devel/mantle: bump to v0.1.2 2016-05-10 13:33:23 -07:00
Nick Owens
d36cdc0c67 Merge pull request #1949 from mischief/linux-4.5.3
sys-kernel/coreos-{sources,kernel}: update to 4.5.3
2016-05-10 12:32:58 -07:00
Michael Marineau
ebbc2c3b04 Merge pull request #537 from aogier/debian-genisoimage
add support for genisoimage
2016-05-10 12:23:20 -07:00
Michael Marineau
8bfd994f3f Merge pull request #534 from glevand/for-merge-build
build_image: Fix image type conditional
2016-05-10 12:20:07 -07:00
Michael Marineau
2e6c2212c7 Merge pull request #539 from marineam/grub
Fix arm64 image builds with an empty board root
2016-05-10 12:19:03 -07:00
Michael Marineau
9a468bf37d vm_image_util: ensure UEFI firmware is installed before reading it 2016-05-10 12:02:56 -07:00
Michael Marineau
44e86ecdaa update_chroot: do not reconfigure/rebuild the SDK's GRUB for arm64
Now built/installed under the board root instead.
See https://github.com/coreos/coreos-overlay/pull/1950
2016-05-10 12:02:56 -07:00
Michael Marineau
4d97d2752d grub_install: use GRUB installed to the board root instead of SDK
Follow up to https://github.com/coreos/coreos-overlay/pull/1950
2016-05-10 12:02:56 -07:00
Michael Marineau
d5cb907947 grub_install: drop old/unused esp_dir flag 2016-05-10 10:56:21 -07:00
Michael Marineau
4346d60a1e Merge pull request #1950 from marineam/grub
grub: enable building as a cross-compiled package for arm64
2016-05-10 10:48:02 -07:00
Michael Marineau
2b376a0f6b grub: enable building as a cross-compiled package for arm64
This will drop the need to reconfigure/rebuild GRUB with the special
`arm64` target in `setup_board`. The amd64 targets could receive the
same treatment eventually but the xen dependency needs fixing first.
After that the SDK's grub can be built with the special `none` target so
it only builds user-space tools.
2016-05-09 15:10:31 -07:00
Michael Marineau
866c11ac33 Merge pull request #538 from marineam/gentoo
*: drop obsolete gentoo repo reference
2016-05-08 19:42:10 -07:00
Michael Marineau
632d578b56 *: drop obsolete gentoo repo reference
Instead of patching portage to support the `disabled` flag now we just
patch it to leave the `[gentoo]` section out of the default repos.conf.

Follow up to 585275b268
2016-05-08 19:31:02 -07:00
Nick Owens
d472dc9933 sys-kernel/coreos-{sources,kernel}: update to 4.5.3 2016-05-06 13:34:49 -07:00
Alessandro -oggei- Ogier
fbe60fa3fb adding support for debian genisoimage 2016-05-06 19:32:37 +02:00