Krzesimir Nowak
4e03c44cde
build_toolchains: Break dep loop and handle more dependencies
...
Switching to a selinux profile caused more USE flags to be enabled
(selinux, audit, caps), thus more dependencies to be pulled. More
dependencies caused two things:
- cyclic dependencies appeared
- sys-apps/baselayout is being pulled in
Cyclic dependencies need to be handled in a similar way it was done in
build_packages, thus factor out the code doing it into a separate and
reusable part.
The dependency on baselayout needs to be handled by installing the
package as a first thing in $ROOT, followed by a more careful way of
copying things from $SYSROOT to $ROOT (due to split-usr differences),
followed by installing the rest of the packages.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:22:20 +01:00
Krzesimir Nowak
2a225b47d9
build_toolchain: Do not leak variables
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
9431aadcce
overlay profiles: Force static-libs on sys-libs/libsepol to fix bootstrap
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
5ea006d88e
overlay coreos/config: Add further Flatcar modifications for sys-apps/policycoreutils
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
89ebdff85f
overlay profiles: Allow python for sys-process/audit
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
f54b043a22
overlay coreos/config: Add further modifications to sys-process/audit
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
6f223d1d92
.github: Add dev-python/networkx to automation
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
9a6556238d
dev-python/networkx: Add from Gentoo
...
It's from Gentoo commit e5712a8fc3d0d429407ee9db8450b5c573041019.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
4b98c2521a
.github: Add sys-apps/selinux-python to automation
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
2c38484a1a
sys-apps/selinux-python: Add from Gentoo
...
It's from Gentoo commit 1a36dbcbfd45b1906c67e57a2640dca52f3370cb.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
6f91a94f19
overlay profiles: Do not pull app-admin/setools into prod images
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
a823ae81f3
.github: Add app-admin/setools to automation
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
da984da31c
app-admin/setools: Add from Gentoo
...
It's from Gentoo commit dd8f1e13525265315752f252be7515f18e80334a.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
5b9d0acbdc
overlay coreos/user-patches: Drop a patch for sys-libs/libsemanage
...
We apply the fix in a different way.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:30 +01:00
Krzesimir Nowak
e369aa7765
overlay coreos/config: Add python stuff to install mask for prod images
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
08783393d8
.github: Add sys-apps/policycoreutils to automation
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
d27e2952e0
sys-apps/policycoreutils: Sync with Gentoo
...
It's from Gentoo commit ef1013be87a2c4ede3d16c2557881505b93c3996.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
2daab32233
overlay sys-apps/policycoreutils: Move to portage-stable
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
7b9fd99f6c
.github: Add sys-libs/libsemanage to automation
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
bb70882fda
sys-libs/libsemanage: Sync with Gentoo
...
It's from Gentoo commit 2a36cce420348509e5c8a75d75647c200f39b2bc.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
f058e32bb2
overlay sys-libs/libsemanage: Move to portage-stable
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
8128c9a072
overlay coreos/config: Add Flatcar modifications for sys-libs/libsemanage
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
0fe3480314
overlay profiles: Allow python for sys-libs/libselinux
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
a6598d470e
overlay profiles: Disable caps for smartmontools
...
The USE=caps is only relevant for smartd, which we are not building
anyway.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
8a33f8b99f
overlay profiles: Drop enabling caps and audit USE flags for specific packages
...
selinux profile enables the USE flags for all of them.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
6e9797dfc5
overlay profiles: Mask python and perl USE flags for generic images
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:29 +01:00
Krzesimir Nowak
7ceb145fd9
overlay profiles: Clean up selinux enabling
...
Not needed given that we have switched to selinux profile, which
enables selinux USE.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:17:27 +01:00
Krzesimir Nowak
086f5b066c
.github: Add newly added policy packages to automation
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
e122ead299
overlay coreos/user-patches: Add symlinks for newly added policy packages
...
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
cb1ca71ab5
sec-policy/selinux-zfs: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
72dddf8b9b
sec-policy/selinux-xfs: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
970eb635f4
sec-policy/selinux-wireguard: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
149cffa53a
sec-policy/selinux-virt: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
2fd2afed44
sec-policy/selinux-tcsd: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
b67a36f300
sec-policy/selinux-sudo: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
5636b9ef72
sec-policy/selinux-smartmon: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
db19635e0b
sec-policy/selinux-sasl: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
076df9f95f
sec-policy/selinux-samba: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
33fbdd6b22
sec-policy/selinux-rpcbind: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
e530d951bc
sec-policy/selinux-rpc: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
3e4586c1aa
sec-policy/selinux-quota: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
e51dcd8130
sec-policy/selinux-qemu: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
1c48d2cdf4
sec-policy/selinux-podman: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
9b48d6eebe
sec-policy/selinux-pcscd: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
a388698251
sec-policy/selinux-ntp: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:04 +01:00
Krzesimir Nowak
311145aa13
sec-policy/selinux-mandb: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
04893842cf
sec-policy/selinux-makewhatis: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
969fda1a50
sec-policy/selinux-logrotate: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
f32cdfa3dd
sec-policy/selinux-loadkeys: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00
Krzesimir Nowak
dbd27ab586
sec-policy/selinux-ldap: Add from Gentoo
...
It's from Gentoo commit 4d7080a9766d886cd15cdf4fa75890677c6266b1.
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
2026-02-27 13:14:03 +01:00