mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-22 15:01:00 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,374 Commits 616 Branches 394 Tags
Commit Graph

3374 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Marineau
b1823db145 ca-certificates: update to NSS 3.19.1 
The following have been removed:

 - America_Online_Root_Certification_Authority_1.pem
 - America_Online_Root_Certification_Authority_2.pem
 - E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
 - Entrust.net_Secure_Server_CA.pem
 - GTE_CyberTrust_Global_Root.pem
 - RSA_Root_Certificate_1.pem
 - TDC_Internet_Root_CA.pem
 - Thawte_Premium_Server_CA.pem
 - Thawte_Server_CA.pem
 - ValiCert_Class_1_VA.pem
 - ValiCert_Class_2_VA.pem

The following have been added:

 - CFCA_EV_ROOT.pem
 - COMODO_RSA_Certification_Authority.pem
 - DigiCert_Assured_ID_Root_G2.pem
 - DigiCert_Assured_ID_Root_G3.pem
 - DigiCert_Global_Root_G2.pem
 - DigiCert_Global_Root_G3.pem
 - DigiCert_Trusted_Root_G4.pem
 - Entrust_Root_Certification_Authority_-_EC1.pem
 - Entrust_Root_Certification_Authority_-_G2.pem
 - GlobalSign_ECC_Root_CA_-_R4.pem
 - GlobalSign_ECC_Root_CA_-_R5.pem
 - IdenTrust_Commercial_Root_CA_1.pem
 - IdenTrust_Public_Sector_Root_CA_1.pem
 - QuoVadis_Root_CA_1_G3.pem
 - QuoVadis_Root_CA_2_G3.pem
 - QuoVadis_Root_CA_3_G3.pem
 - Staat_der_Nederlanden_EV_Root_CA.pem
 - Staat_der_Nederlanden_Root_CA_-_G3.pem
 - S-TRUST_Universal_Root_CA.pem
 - USERTrust_ECC_Certification_Authority.pem
 - USERTrust_RSA_Certification_Authority.pem
 - WoSign_China.pem
 - WoSign.pem

For the upstream change log since the previous version (3.16) see:
http://hg.mozilla.org/projects/nss/log/NSS_3_19_1_RTM/lib/ckfw/builtins/certdata.txt?revcount=9
 2015-06-12 19:54:51 -07:00
Michael Marineau
6751326e80 ca-certificates: match /usr/share/ca-certificates to /etc/ssl/certs 
It is a common pattern to bind mount /etc/ssl/certs from the host system
into a container. This doesn't work on CoreOS because /etc/ssl/certs is
just a pile of symlinks to /usr. If the applications in the container
use Go then binding /usr/share/ca-certificates to /etc/ssl/certs does
happen to work because Go only needs ca-certificates.crt which is in
that top level directory. This however does not work for OpenSSL
applications because it needs a whole directory of hashed certificates.

To fix this change two things:
 - Remove the `mozilla` directory left over from when certs came from
   multiple sources. Install certs in ca-certificates directory instead.
 - Include the OpenSSL hash symlinks in ca-certificates.
 2015-06-12 19:23:02 -07:00
Nick Owens
68dbba9661 Merge pull request #1284 from mischief/openssl-1.0.1o 
profiles: update to openssl-1.0.1o
 2015-06-12 15:40:37 -07:00
mischief
353732cb9d profiles: update to openssl-1.0.1o 2015-06-12 14:54:44 -07:00
Nick Owens
7208f7d59d Merge pull request #1281 from mischief/openssl 
profiles: update to openssl-1.0.1n
 2015-06-11 17:01:22 -07:00
Alex Crawford
4698560bf3 Merge pull request #1280 from crawford/vagrant 
coreos-base/oem-vagrant: various fixes
 2015-06-11 16:57:27 -07:00
mischief
e3c67f370d profiles: update to openssl-1.0.1n 
https://bugs.gentoo.org/show_bug.cgi?id=551832
 2015-06-11 16:53:04 -07:00
Alex Crawford
14dc5163ee coreos-base/oem-vagrant: bump ebuild 2015-06-11 16:30:05 -07:00
Alex Crawford
ed61fa75bb coreos-base/oem-vagrant: strip leading '-' from path 2015-06-11 16:30:05 -07:00
Alex Crawford
17b8e08044 coreos-base/oem-vagrant: use insecure key 2015-06-11 12:47:35 -07:00
Alex Crawford
d56992f819 Merge pull request #1278 from crawford/kernel 
sys-kernel/coreos-{kernel-sources}: bump to v4.0.5
 2015-06-10 14:35:56 -07:00
Alex Crawford
384afd4312 sys-kernel/coreos-{kernel-sources}: bump to v4.0.5 2015-06-10 14:34:38 -07:00
Alex Crawford
c1ae15c785 Merge pull request #1276 from crawford/systemd 
sys-apps/systemd: add Xen and CCISS fixes
 2015-06-10 13:52:21 -07:00
Alex Crawford
02c4f3e15a sys-apps/systemd: add Xen and CCISS fixes 2015-06-10 13:34:08 -07:00
Alex Crawford
b0704edc6e Merge pull request #1277 from crawford/waagent 
app-emulation/wa-linux-agent: bump to v2.0.13
 2015-06-10 13:32:42 -07:00
Alex Crawford
4625fcb488 app-emulation/wa-linux-agent: bump to v2.0.13 2015-06-10 12:21:55 -07:00
Alex Crawford
6fe9b09cf4 Merge pull request #1272 from crawford/systemd 
sys-apps/systemd: bump to v220-coreos
 2015-06-02 19:27:36 -07:00
Alex Crawford
63675cbd46 sys-apps/systemd: apply ebuild changes from gentoo 2015-06-02 18:28:48 -07:00
Alex Crawford
4d78cb33b5 sys-apps/systemd: bump to v220-coreos 2015-06-02 18:28:48 -07:00
Alex Crawford
1c3099c398 Merge pull request #1271 from crawford/ignition 
sys-apps/ignition: remove stages
 2015-06-02 13:13:26 -07:00
Alex Crawford
3d43b4f8e1 sys-apps/ignition: remove stages 2015-06-02 12:21:48 -07:00
Michael Marineau
21611faaed Merge pull request #1270 from glevand/for-merge-1 
app-emulation/xenstore: Fix misspelled DEPEND
 2015-06-01 13:37:08 -07:00
Geoff Levand
a2430ae1ed app-emulation/xenstore: Fix misspelled DEPEND 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-06-01 13:30:38 -07:00
Alex Crawford
13d4294c79 Merge pull request #1269 from crawford/rkt 
app-emulation/rkt: bump to v0.5.5 and add gc timer
 2015-05-28 13:45:12 -07:00
Alex Crawford
c238f5a5ac app-emulation/rkt: bump to v0.5.5 2015-05-28 13:38:02 -07:00
Alex Crawford
d2b8f39c76 app-emulation/rkt: add gc timer 2015-05-28 13:38:02 -07:00
Alex Crawford
b65b19b41b Merge pull request #791 from crawford/rng-tools 
sys-apps/rng-tools: Add rng-tools
 2015-05-27 22:24:15 -07:00
Alex Crawford
f372e2da2d sys-apps/rng-tools: Add rng-tools 2015-05-27 17:43:24 -07:00
Nick Owens
37acee636d Merge pull request #1268 from mischief/kernel-4.0.4 
sys-kernel/coreos-{sources,kernel}: bump to 4.0.4
 2015-05-27 17:18:39 -07:00
mischief
0dc5b1ae3f sys-kernel/coreos-{sources,kernel}: bump to 4.0.4 2015-05-27 15:26:36 -07:00
Nick Owens
6f84dce80e Merge pull request #1267 from mischief/update-tzdata 
sys-libs/timezone-data: sync with upstream stable ebuild
 2015-05-27 13:14:00 -07:00
mischief
d593bb9537 sys-libs/timezone-data: remove code that sets /etc/localtime 
we set leave /etc/localtime unset so that the default timezone is UTC.

fixes #1265
 2015-05-27 12:58:43 -07:00
mischief
9dddb457fd sys-libs/timezone-data: sync with upstream stable ebuild 2015-05-27 12:45:06 -07:00
Michael Marineau
f4d49c2003 Merge pull request #1266 from marineam/revert 
Revert "update_engine: lots of updates"
 2015-05-27 12:38:29 -07:00
Michael Marineau
3127081504 Revert "update_engine: lots of updates" 
This reverts commit 4dbfe48bd20b036a11c30538e3ce5cdfb5bb1715:

     - remove call to crossystem
     - support for payloads that include kernels
     - lots of refactoring/cleanups

The support for kernel payloads broke updates on systems that did not
already have the newer /boot/coreos/vmlinuz-{a,b} kernels.

Rolling back does restore the call to /usr/bin/crossystem but that call
failing shouldn't have any adverse behavior, just it will just add yet
another useless error message to our logs.
 2015-05-27 12:10:55 -07:00
Alex Crawford
f54989319f Merge pull request #1263 from crawford/coretest 
coreos-base/coretest: bump to latest version
 2015-05-26 15:58:30 -07:00
Alex Crawford
e4ac4caf1c coreos-base/coretest: bump to latest version 
Verify that networking in Docker works
Check for systemd-timesyncd instead of ntp
 2015-05-20 20:12:04 -07:00
Michael Marineau
40d1c97b76 Merge pull request #1261 from glevand/for-merge-1 
Update go program ebuilds for arm64
 2015-05-20 14:57:36 -07:00
Geoff Levand
f36654e1c9 coreos-devel/mantle: Update for arm64 
Cleanup ebuild and add arm64 keywords.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:42 -07:00
Geoff Levand
641316b695 sys-apps/ignition: Update for arm64 
Cleanup coreos-go eclass and add arm64 keywords.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:42 -07:00
Geoff Levand
33ba81838e app-admin/updateservicectl: Update for arm64 
Convert to coreos-go eclass and add arm64 keywords.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:42 -07:00
Geoff Levand
fe996a59d8 app-admin/mayday: Update for arm64 
Cleanup coreos-go eclass and add arm64 keywords.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:42 -07:00
Geoff Levand
339a91cdab app-admin/locksmith: Update for arm64 
Convert to coreos-go eclass and add arm64 keywords.
Also remove the setting of -fno-PIC.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:42 -07:00
Geoff Levand
59d2d9fddd app-admin/fleet: Update for arm64 
Convert to coreos-go eclass and add arm64 keywords.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00
Geoff Levand
cca31382df coreos-base/nova-agent-watcher: Update for arm64 
Add arm64 keywords and convert to coreos-go eclass.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00
Geoff Levand
71f9fe1779 coreos/coreos-cloudinit: Update for arm64 
Convert to coreos-go eclass and add arm64 keywords.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00
Geoff Levand
1d9b0523c7 coreos-base/coretest: Update for arm64 
Add arm64 keywords and convert to coreos-go eclass.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00
Geoff Levand
529ef1aae0 dev-util/go-bindata: Update for arm64 
Add arm64 keywords and remove redundant DEPENDS.

Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00
Geoff Levand
ef60214b29 dev-db/etcd: Update for arm64 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00
Geoff Levand
c3f77cb2a9 app-emulation/actool: Update for arm64 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2015-05-20 10:45:41 -07:00