30045 Commits

Author SHA1 Message Date
Vito Caputo
a9c169d5a8 sys-kernel/coreos-kernel: ebuild bump sync with coreos-sources-4.2.2-r2 2015-11-17 04:16:35 -08:00
Vito Caputo
4eb125bf38 sys-kernel/coreos-sources: fix return value of switchdev_port_fdb_dump()
Fixes https://github.com/coreos/bugs/issues/980
2015-11-17 04:09:48 -08:00
Vito Caputo
802de9e496 app-emulation/docker: disable SELinux when using btrfs 2015-11-16 22:48:14 -08:00
Nick Owens
6200ca505f Merge pull request #1637 from mischief/hiddev
sys-kernel/coreos-kernel: enable USB_HIDDEV for amd64
2015-11-16 17:23:31 -08:00
Nick Owens
be583e2b72 sys-kernel/coreos-kernel: enable USB_HIDDEV for amd64 2015-11-16 16:03:14 -08:00
Vito Caputo
bb7926f9e0 Merge pull request #1636 from vcaputo/motdgen
motdgen: cease timer use
2015-11-13 13:53:51 -08:00
Vito Caputo
3369796527 sys-apps/baselayout: bump ebuild to restore motdgen content
This restores the output previously maintained in /etc/motd by motdgen
timer in the form of an /etc/profile.d/ hook.
2015-11-13 13:39:47 -08:00
Vito Caputo
08dc7548c5 coreos-base/coreos-init: bump ebuild to remove motdgen timer
Fixes https://github.com/coreos/bugs/issues/47
2015-11-13 13:30:55 -08:00
Alex Crawford
11451f1320 Merge pull request #1635 from crawford/ssh
coreos-base/coreos-init: include update-ssh-key fixes
2015-11-12 16:53:29 -08:00
Nick Owens
9990653061 Merge pull request #1634 from mischief/go-1.4.3
dev-lang/go: bump to 1.4.3
2015-11-12 16:48:47 -08:00
Alex Crawford
70fe0c305f coreos-base/coreos-init: include update-ssh-key fixes 2015-11-12 16:39:51 -08:00
Nick Owens
93b0c3516f dev-lang/go: bump to 1.4.3 2015-11-12 15:37:41 -08:00
Nick Owens
66f783a588 Merge pull request #365 from mischief/libxml2
bump(dev-libs/libxml2): sync with upstream
2015-11-12 15:22:13 -08:00
Nick Owens
68432fb90c bump(dev-libs/libxml2): sync with upstream 2015-11-12 15:14:15 -08:00
Michael Marineau
695e46734b Merge pull request #1633 from marineam/go14
dev-lang/go: downgrade to go 1.4.2
2015-11-12 14:54:21 -08:00
mischief
6f8cc8ae5e dev-lang/go: downgrade to go 1.4.2 2015-11-12 14:52:40 -08:00
Alex Crawford
b77800956f Merge pull request #1621 from endocode/kayrus/enable_dm_cache
coreos-kernel: Enabled dm-cache kernel module
2015-11-12 13:07:16 -08:00
Alex Crawford
f0be34f4dd Merge pull request #476 from crawford/gpg
oem/azure: verify GPG signature of image
2015-11-12 11:52:33 -08:00
Alex Crawford
eb5a53cc7a oem/azure: verify GPG signature of image 2015-11-12 11:44:48 -08:00
Alex Crawford
d9ee591159 Merge pull request #1617 from endocode/kayrus/sysusers.d
Automatically create /etc/sysusers.d directory
2015-11-12 11:11:03 -08:00
mjg59
1ce40e4ca1 Merge pull request #1632 from mjg59/master
Enable SELinux for Docker
2015-11-11 17:12:13 -08:00
Vito Caputo
1d02acec7c Merge pull request #475 from vcaputo/always_disable_console_blanking
grub: disable console blanking
2015-11-11 15:53:02 -08:00
Vito Caputo
0b9c8e5855 grub: disable console blanking
The console often contains very useful information in the event of a
hard crash, in such situations there's no ability to unblank the console
via keypress because the kernel won't handle the interrupt.

Since CoreOS is a server/cluster operating system, there won't generally
be monitors connected benefitting from a blanked console.  Disabling the
blanking altogether allows the frame buffer contents to always be
visible, even when the kernel can't handle keypresses.
2015-11-11 15:22:12 -08:00
Matthew Garrett
1911ea81e7 Enable SELinux for Docker
We ship appropriate SELinux policy for Docker, but the daemon isn't using
it. Make sure Docker is built with SELinux support and turn it on at daemon
startup time.
2015-11-11 14:54:08 -08:00
Michael Marineau
cff534fd0e Merge pull request #1631 from marineam/kernel
coreos-kernel: update fs and security options
2015-11-11 10:38:49 -08:00
Michael Marineau
58ea72b512 coreos-kernel: more security option updates
- Enable RANDOMIZE_BASE, hopefully Xen is ok with this now.
 - Disable HIBERNATE/KEXEC_JUMP, we don't need these features.
 - Fix RO/NX settings in the arm64 kernel.
2015-11-11 10:35:18 -08:00
Michael Marineau
9f0fb176fd Merge pull request #474 from marineam/kernel
kernel_menuconfig: new script to simplify kernel config changes
2015-11-11 10:20:01 -08:00
Michael Marineau
b0c14f99b1 kernel_menuconfig: new script to simplify kernel config changes 2015-11-10 18:06:49 -08:00
Michael Marineau
71fd1532e9 coreos-kernel: update fs and security options
- Switched overlay from built-in to a module.
 - Squashfs was missing xattr support, required for filesystem
   capabilities to work. ping should now work in PXE and ISO images.
 - We never switched to stackprotector string when we updated to GCC 4.9
 - Enable extra credential and selinux checks (DEBUG_CREDENTIALS)
 - Enable RODATA and syn cookies on arm64.
2015-11-10 17:58:24 -08:00
Brian Waldon
ec46ea71cb Merge pull request #1618 from coreos/bump-kubelet
app-admin/kubelet: bump to v1.0.7
2015-11-09 15:14:50 -08:00
Vito Caputo
4029cd6291 Merge pull request #1628 from vcaputo/bump-bootengine-disk-guid-param
sys-kernel/bootengine: bump for coreos.randomize_disk_guid guid as param
2015-11-06 15:05:34 -08:00
Vito Caputo
bd83d4f7f8 sys-kernel/bootengine: bump for coreos.randomize_disk_guid guid as param
Cleanup
2015-11-06 15:02:31 -08:00
Vito Caputo
a9c2ef6c61 Merge pull request #471 from vcaputo/grub_supply_guid_to_randomize
grub: supply disk guid to randomize in coreos.randomize_disk_guid
2015-11-06 14:59:10 -08:00
Vito Caputo
f67fa9ce6c grub: supply disk guid to randomize in coreos.randomize_disk_guid 2015-11-06 14:58:00 -08:00
Vito Caputo
b1d4cb7d23 Merge pull request #1626 from vcaputo/bump-bootengine-randomize-disk-guid
sys-kernel/bootengine: bump for coreos.randomize_disk_guid support
2015-11-05 23:48:53 -08:00
Vito Caputo
f0a9acafff sys-kernel/bootengine: bump for coreos.randomize_disk_guid support
Fixes https://github.com/coreos/bugs/issues/955
2015-11-05 23:17:59 -08:00
Vito Caputo
822edbd080 Merge pull request #469 from vcaputo/explicitly_randomize_disk_guid
grub: add and set coreos.randomize_disk_guid kernel param
2015-11-05 23:14:56 -08:00
Vito Caputo
68f1b407c6 grub: add and set coreos.randomize_disk_guid kernel param
coreos.first_boot=1 will no longer trigger disk-guid randomization, so
manual ignition triggers in diskless/pxe scenarios may succeed.  Instead
we explicitly request the randomization when first_boot=1 was added by
grub finding the 00000000-0000-0000-0000-000000000001 disk-guid.
2015-11-05 21:04:31 -08:00
Nick Owens
09cb97d0be Merge pull request #1624 from mischief/locksmith
app-admin/locksmith: bump to v0.3.4
2015-11-05 18:09:47 -08:00
mischief
633462a157 app-admin/locksmith: bump to v0.3.4 2015-11-05 17:37:21 -08:00
Nick Owens
3b820dec7f Merge pull request #364 from mischief/nspr
bump(dev-libs/nspr): sync with upstream
2015-11-05 13:12:06 -08:00
Nick Owens
ab558e9dc1 bump(dev-libs/nspr): sync with upstream
no glsa yet, but the upstream bug is
https://bugs.gentoo.org/show_bug.cgi?id=564834
2015-11-05 09:32:08 -08:00
kayrus
756d3f9159 coreos-kernel: Enabled dm-cache kernel module 2015-11-04 14:16:09 +01:00
Nick Owens
c1ccb976a2 Merge pull request #363 from mischief/automake-wrapper
bump(sys-devel/automake-wrapper): sync with upstream
2015-11-03 18:21:45 -08:00
Nick Owens
2fc83a4fa6 bump(sys-devel/automake-wrapper): sync with upstream 2015-11-03 17:35:48 -08:00
Nick Owens
a891c401c3 Merge pull request #362 from mischief/pixman
bump(x11-libs/pixman): sync with upstream
2015-11-03 17:31:15 -08:00
Nick Owens
8219bff2c3 Merge pull request #361 from mischief/automake
bump(sys-devel/automake): sync with upstream
2015-11-03 17:31:09 -08:00
Nick Owens
542bcf5e4a Merge pull request #360 from mischief/libpng
bump(media-libs/libpng): sync with upstream
2015-11-03 17:30:56 -08:00
Nick Owens
ac8222ac32 Merge pull request #359 from mischief/libyaml
bump(dev-libs/libyaml): sync with upstream
2015-11-03 17:30:49 -08:00
Nick Owens
b3419e7528 Merge pull request #309 from mischief/net-firewall-iptables
bump(net-firewall/iptables): sync with upstream
2015-11-03 17:30:43 -08:00