mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-21 14:31:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,158 Commits 619 Branches 394 Tags
Commit Graph

4881 Commits

Author SHA1 Message Date
David Michael
499a0448d7 Merge pull request #2920 from dm0-/openssl 
Bump OpenSSL to 1.0.2m for CVE-2017-373[56]
 2017-11-27 21:24:11 -05:00
David Michael
4a272898bd Merge pull request #2918 from coreosbot/master-4.14.2 
Upgrade Linux in master to 4.14.2
 2017-11-27 16:17:44 -05:00
David Michael
464694e5d0 dev-libs/openssl: Apply CoreOS changes 
- Stabilize the arm64 version.
  - Drop pkg_postinst.
  - Remove the bindist USE flag.
  - Create /etc/ssl with tmpfiles (and package it for the SDK).
 2017-11-27 14:25:39 -05:00
David Michael
def8d42540 dev-libs/openssl: Sync with the latest Gentoo 1.0.2 ebuild 2017-11-27 14:25:33 -05:00
Andrew Jeddeloh
931390bb43 sys-apps/seismograph: bump for invalid free fix 
Bump seismograph version for a invalid free fix.
 2017-11-27 11:07:59 -08:00
Jenkins OS
4e75d5b053 sys-kernel/coreos-sources: bump to 4.14.2 2017-11-27 18:41:30 +00:00
Jenkins OS
8b4321eabf sys-kernel/coreos-sources: bump to 4.14.1 2017-11-22 17:06:56 +00:00
Andrew Jeddeloh
a0c71684ae Merge pull request #2906 from ajeddeloh/fix-nfs 
net-fs/nfs-utils: fix rpcbind race
 2017-11-18 08:37:56 -08:00
Benjamin Gilbert
864b5fae0f sys-kernel/coreos-modules: enable CGROUP_BPF 
systemd requires it for IPAddress{Allow,Deny}.
 2017-11-18 08:40:16 -05:00
Andrew Jeddeloh
469e528474 net-fs/nfs-utils: fix rpcbind race 
Make rpcbind an After= for nfs-mountd. This is fixed upstream but
hasn't been marked as stable on amd64/arm64 by gentoo. Should fix the
nfs races in kola tests.
 2017-11-17 17:18:51 -08:00
David Michael
530374f514 net-misc/openssh: Apply CoreOS changes 
These changes were applied to the ebuild and files:

  - Stabilize amd64 and arm64.
  - Drop the bindist USE flag.
  - Drop the init.d files.
  - Remove the socket unit's rate limiting.
 2017-11-17 16:01:51 -05:00
David Michael
f9a93cbcc6 net-misc/openssh: Sync with Gentoo's latest ebuild 
In particular, this fixes CVE-2017-15906.
 2017-11-17 15:56:48 -05:00
Geoff Levand
049d5ee8b0 sys-kernel: Bump modules, kernel revisions 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-11-15 11:21:56 -08:00
Geoff Levand
298457eb13 sys-kernel/arm64_defconfig: Remove CONFIG_LOGO 
Cleanup of arm64_defconfig.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-11-15 11:21:56 -08:00
Geoff Levand
7f8f632ffa sys-kernel: Move arm64 to common config options 
Cleanup arm64_defconfig by changing to config options that can be
common with amd64.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-11-15 11:21:56 -08:00
Geoff Levand
2d66f5297e Merge pull request #2895 from glevand/for-merge-cma 
sys-kernel/arm64_defconfig: Remove CONFIG_CMA
 2017-11-14 17:27:12 -08:00
Andrew Jeddeloh
a1497514b6 Merge pull request #2896 from ajeddeloh/bump-seismograph 
sys-apps/seismograph: bump version
 2017-11-14 16:45:43 -08:00
Andrew Jeddeloh
3cee3712b6 sys-apps/seismograph: bump version 
Bump ebuild version to include glibc changes.
 2017-11-14 16:33:10 -08:00
Andrew Jeddeloh
5bfc537ef7 Merge pull request #2875 from ajeddeloh/remove-udev-init-scripts-ref 
profiles/arm64: remove ref to udev-init-scripts
 2017-11-14 11:18:50 -08:00
Geoff Levand
37b2431ef6 sys-kernel/arm64_defconfig: Remove CONFIG_CMA 
CONFIG_CMA is really unneeded, and was causing network problems
on Cavuim machines due to the default CONFIG_DMA_CMA of 16MiB
being too small.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-11-14 11:15:10 -08:00
Benjamin Gilbert
50b12b4606 Merge pull request #2893 from bgilbert/init 
coreos-base/coreos-init: bump for mount unit changes
 2017-11-12 17:16:39 -08:00
Benjamin Gilbert
1d3f3b5e51 coreos-base/coreos-init: bump for mount unit changes 2017-11-12 17:14:03 -08:00
Benjamin Gilbert
8203052dd3 sys-kernel/coreos-modules: enable IP{,6}_NF_SECURITY 
The Azure agent complains without it.
 2017-11-12 16:07:48 -08:00
Benjamin Gilbert
7116de5af6 sys-kernel/coreos-*: bump to 4.14.0 
Drop K_FROM_GIT, as it triggers a kernel-2.eclass bug preventing our
patches from being applied.
 2017-11-12 14:47:57 -08:00
Andrew Jeddeloh
998488dcea Merge pull request #2876 from ajeddeloh/cleanup-base 
profiles/base: cleanup config for removed packages
 2017-11-10 16:23:22 -08:00
David Michael
32db7c2345 Merge pull request #2890 from dm0-/glsa 
profiles: Bump libxml2 on arm64 for a GLSA
 2017-11-10 17:18:34 -05:00
David Michael
6d1665aeb0 profiles: Bump libxml2 on arm64 for a GLSA 2017-11-10 10:26:35 -05:00
Andrew Jeddeloh
04bdadff81 profiles: add -nls for man-db 
This will enable us to emerge man-db without pulling in a ton of perl
dependencies. This means we can also switch to only having one man
provider.
 2017-11-08 17:45:39 -08:00
Andrew Jeddeloh
88d82e90a8 Merge pull request #2877 from ajeddeloh/update-portage 
Update portage to 2.3.8
 2017-11-08 16:55:56 -08:00
Andrew Jeddeloh
46dc68ae5b Merge pull request #2885 from ajeddeloh/rm-gawk 
Remove sys-apps/gawk
 2017-11-08 16:51:25 -08:00
Andrew Jeddeloh
29548252d6 chore(metadata): Regenerate cache 2017-11-08 14:52:47 -08:00
Andrew Jeddeloh
74e94be6a0 sys-apps/gawk: remove package 
We've been using the version in portage-stable since 2015. This should
be dead.
 2017-11-08 14:44:03 -08:00
Benjamin Gilbert
3076e7ebbb Merge pull request #2883 from sdemos/coreos-metadata-patch 
coreos-base/coreos-metadata: bump to v1.0.2
 2017-11-07 19:59:36 -08:00
Stephen Demos
66a1d6f985 coreos-base/coreos-metadata: bump to v1.0.2 
this does two things; reduces the logging output and updates the
dependencies to the latest to fix an issue with openssh-keys where it
didn't parse authorized_keys files correctly
 2017-11-07 18:26:02 -08:00
Stephen Demos
62f0901988 coreos-base/update-ssh-keys: bump to v0.1.1 
this fixes a problem with a dependency of update-ssh-keys where it
didn't correctly parse authorized_keys files.
 2017-11-07 16:55:44 -08:00
Andrew Jeddeloh
c16e853471 sys-apps/portage: backport compression fixes 
Portage did not strip the xpak trailer off .tbz2 files, which caused it
to fail when using compression methods other than bzip. Backport the
fixes for this.
 2017-11-07 11:23:39 -08:00
David Michael
050e828c13 Merge pull request #2878 from dm0-/glibc 
sys-apps/systemd: "Fix" telinit in the SDK
 2017-11-06 17:24:25 -05:00
David Michael
beeec7c375 sys-apps/systemd: "Fix" telinit in the SDK 
When telinit is run and doesn't detect the host systemd, it falls
back to executing a default fallback program that is detected by
meson.  In this case, it detects itself at /sbin/telinit, so it
enters an infinite exec loop.  Change the default fallback program
to a non-existent path so that telinit just fails in the SDK.
 2017-11-06 15:31:13 -05:00
Benjamin Gilbert
2c7e5933e6 sys-kernel/coreos-*: bump to 4.14-rc8 2017-11-06 10:40:34 -08:00
David Michael
3561c7d780 sys-apps/portage: apply CoreOS changes to 2.3.8 
Update patch for portage 2.3.8
 2017-11-06 10:02:11 -08:00
Andrew Jeddeloh
fb7c682180 sys-apps/portage: import upstream ebuild 2.3.8 
This is the newest stable ebuild. It has support for changing binpkg
compression methods.
 2017-11-06 10:02:11 -08:00
Benjamin Gilbert
965621db0f Merge pull request #2874 from bgilbert/4.14 
sys-kernel/coreos-*: bump to 4.14-rc7
 2017-11-03 15:52:29 -07:00
Andrew Jeddeloh
1b90816e9d profiles/base: cleanup config for removed packages 
Remove configuration for removed packages.
 2017-11-03 14:13:05 -07:00
Andrew Jeddeloh
182ab18e20 profiles/arm64: remove ref to udev-init-scripts 
We do not use udev-init-scripts. Remove configuration for it.
 2017-11-03 13:40:48 -07:00
Andrew Jeddeloh
9d5b39778d Merge pull request #2868 from ajeddeloh/rm-old-pkgs 
*: remove unused packages
 2017-11-03 12:07:52 -07:00
Benjamin Gilbert
f5d7443faa sys-kernel/coreos-*: bump to 4.14-rc7 
Drop EFI lockdown patches and options to reduce maintenance overhead.
They can be re-added from Fedora's efi-lockdown.patch when we pick up
the Secure Boot work again.

BLK_CPQ_CISS_DA was removed in 253d2464df446456c0bba5ed4137a7be0b278aa8
in favor of SCSI_HPSA. /dev/cciss/* devices will be remapped to /dev/sd*.

NFT_FIB_NETDEV is a new nftables lookup type.

SLAB_FREELIST_HARDENED obfuscates pointers in the slab cache freelists.

RC_CORE enables support for IR and RF transceivers, and is enabled by
defconfig.
 2017-11-02 14:13:27 -07:00
Andrew Jeddeloh
29c61f91bb *: remove unused packages 
Packages removed:
 - cros-testutils
 - protofiles
 - hard-host-depends-bsp
 - opengles
 - modemanager
 2017-11-02 13:41:18 -07:00
David Michael
0017ec553f chore(metadata): Regenerate cache 2017-11-02 13:27:59 -04:00
David Michael
0d91aab8b5 sys-apps/baselayout: Bump to drop redundant modprobe file 2017-11-02 13:26:51 -04:00
David Michael
cf21557dfe sys-apps/systemd: Sync and upgrade to 235 2017-11-02 13:26:51 -04:00