34415 Commits

Author SHA1 Message Date
Krzesimir Nowak
4e03c44cde build_toolchains: Break dep loop and handle more dependencies
Switching to a selinux profile caused more USE flags to be enabled
(selinux, audit, caps), thus more dependencies to be pulled. More
dependencies caused two things:

- cyclic dependencies appeared
- sys-apps/baselayout is being pulled in

Cyclic dependencies need to be handled in a similar way it was done in
build_packages, thus factor out the code doing it into a separate and
reusable part.

The dependency on baselayout needs to be handled by installing the
package as a first thing in $ROOT, followed by a more careful way of
copying things from $SYSROOT to $ROOT (due to split-usr differences),
followed by installing the rest of the packages.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:22:20 +01:00
Krzesimir Nowak
2a225b47d9 build_toolchain: Do not leak variables
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
9431aadcce overlay profiles: Force static-libs on sys-libs/libsepol to fix bootstrap
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
5ea006d88e overlay coreos/config: Add further Flatcar modifications for sys-apps/policycoreutils
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
89ebdff85f overlay profiles: Allow python for sys-process/audit
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
f54b043a22 overlay coreos/config: Add further modifications to sys-process/audit
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
6f223d1d92 .github: Add dev-python/networkx to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
9a6556238d dev-python/networkx: Add from Gentoo
It's from Gentoo commit e5712a8fc3d0d429407ee9db8450b5c573041019.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
4b98c2521a .github: Add sys-apps/selinux-python to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
2c38484a1a sys-apps/selinux-python: Add from Gentoo
It's from Gentoo commit 1a36dbcbfd45b1906c67e57a2640dca52f3370cb.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
6f91a94f19 overlay profiles: Do not pull app-admin/setools into prod images
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
a823ae81f3 .github: Add app-admin/setools to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
da984da31c app-admin/setools: Add from Gentoo
It's from Gentoo commit dd8f1e13525265315752f252be7515f18e80334a.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
5b9d0acbdc overlay coreos/user-patches: Drop a patch for sys-libs/libsemanage
We apply the fix in a different way.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
e369aa7765 overlay coreos/config: Add python stuff to install mask for prod images
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
08783393d8 .github: Add sys-apps/policycoreutils to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
d27e2952e0 sys-apps/policycoreutils: Sync with Gentoo
It's from Gentoo commit ef1013be87a2c4ede3d16c2557881505b93c3996.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
2daab32233 overlay sys-apps/policycoreutils: Move to portage-stable
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
7b9fd99f6c .github: Add sys-libs/libsemanage to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
bb70882fda sys-libs/libsemanage: Sync with Gentoo
It's from Gentoo commit 2a36cce420348509e5c8a75d75647c200f39b2bc.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
f058e32bb2 overlay sys-libs/libsemanage: Move to portage-stable
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
8128c9a072 overlay coreos/config: Add Flatcar modifications for sys-libs/libsemanage
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
0fe3480314 overlay profiles: Allow python for sys-libs/libselinux
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
a6598d470e overlay profiles: Disable caps for smartmontools
The USE=caps is only relevant for smartd, which we are not building
anyway.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
8a33f8b99f overlay profiles: Drop enabling caps and audit USE flags for specific packages
selinux profile enables the USE flags for all of them.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
6e9797dfc5 overlay profiles: Mask python and perl USE flags for generic images
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
7ceb145fd9 overlay profiles: Clean up selinux enabling
Not needed given that we have switched to selinux profile, which
enables selinux USE.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:27 +01:00
Krzesimir Nowak
086f5b066c .github: Add newly added policy packages to automation
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
e122ead299 overlay coreos/user-patches: Add symlinks for newly added policy packages
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
cb1ca71ab5 sec-policy/selinux-zfs: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
72dddf8b9b sec-policy/selinux-xfs: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
970eb635f4 sec-policy/selinux-wireguard: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
149cffa53a sec-policy/selinux-virt: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
2fd2afed44 sec-policy/selinux-tcsd: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
b67a36f300 sec-policy/selinux-sudo: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
5636b9ef72 sec-policy/selinux-smartmon: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
db19635e0b sec-policy/selinux-sasl: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
076df9f95f sec-policy/selinux-samba: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
33fbdd6b22 sec-policy/selinux-rpcbind: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
e530d951bc sec-policy/selinux-rpc: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
3e4586c1aa sec-policy/selinux-quota: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
e51dcd8130 sec-policy/selinux-qemu: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
1c48d2cdf4 sec-policy/selinux-podman: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
9b48d6eebe sec-policy/selinux-pcscd: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
a388698251 sec-policy/selinux-ntp: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
311145aa13 sec-policy/selinux-mandb: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
04893842cf sec-policy/selinux-makewhatis: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
969fda1a50 sec-policy/selinux-logrotate: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
f32cdfa3dd sec-policy/selinux-loadkeys: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
dbd27ab586 sec-policy/selinux-ldap: Add from Gentoo
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00