Commit Graph

9654 Commits

Author SHA1 Message Date
Krzesimir Nowak
3fe352040a sec-policy/selinux-base: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
076251ff56 net-misc/ntp: Apply Flatcar modifications
- Check out our previous ntp.conf and service units
  - Disable USE=threads
  - Add USE=perl, disabled to skip the scripts subdir
  - Do the /etc -> /usr/share + tmpfiles dance for ntp.conf
  - Drop unused init scripts and pkg_postinst
2021-12-16 19:51:46 +01:00
Krzesimir Nowak
e5a4653591 net-misc/ntp: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
6c8076e272 net-fs/samba: Apply Flatcar modifications
- Add a minimal USE flag for only installing libraries
  - Change the Perl and Python run-time deps to build-time only
  - Drop a bunch of dependencies with broken cross-compilation
  - Enable using bundled libraries in their place
  - Disable building libraries requiring Python
  - Use EAPI7
  - Move libsxlt and stylesheets to BDEPEND
  - Introduce some USE flags, so we don't install some tools we don't
    need
  - Limit the size of bundled libraries
  - Make it compatible with newer python versions
  - Bump to r2 because of updating EAPI to 7
2021-12-16 19:51:46 +01:00
Krzesimir Nowak
c5eb243890 net-fs/samba: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
e2c80f8dea net-fs/nfs-utils: Apply Flatcar modifications
- Add the tmpfiles configuration for populating /var
  - Add service compatibility symlinks (maybe time to drop them)
  - Drop moving a binary from /usr/sbin to /sbin
  - Drop populating /etc and /var
  - Drop pkg_postinst
2021-12-16 19:51:46 +01:00
Krzesimir Nowak
63490fac0c net-fs/nfs-utils: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
cc795e270a dev-libs/openssl: Apply Flatcar modifications
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
2021-12-16 19:51:46 +01:00
Krzesimir Nowak
f6983eb7b2 dev-libs/openssl: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
e8c04ce6c4 dev-libs/cyrus-sasl: Apply Flatcar modifications 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
0366286350 dev-libs/cyrus-sasl: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
13bb7c3bf3 coreos-base/update_engine: Port to tmpfiles eclass 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
1e5df051b4 app-misc/ca-certificates: Port to tmpfiles eclass 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
d126cac468 app-crypt/trousers: Apply Flatcar modifications 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
b0603768b4 app-crypt/trousers: Clean slate to reapply our changes 2021-12-16 19:51:46 +01:00
Krzesimir Nowak
36f9f88e72 app-admin/etcd-wrapper: Port to tmpfiles eclass 2021-12-16 19:51:46 +01:00
Thilo Fromm
cfc5fe67cc Merge pull request #1502 from flatcar-linux/t-lo/fix-semodule-in-policycoreutils-postinst
sys-apps/policycoreutils: update correct SELinux store
2021-12-16 18:51:40 +01:00
Thilo Fromm
6038166dc1 policycoreutils semodule fix: add bugfix changelog
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2021-12-16 18:48:06 +01:00
Krzesimir Nowak
e90c32752e profiles: Drop keywords for sys-boot/gnu-efi
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
de8b243fa6 profiles: Update use flags for sys-apps/smartmontools
There is no minimal use flag any more, but it was more or less the
same as no daemon and no update drive database. We also disable
systemd integration, because it's only related to the daemon
functionality that we disabled.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
9121acd2d5 profiles: Drop keywords for sys-apps/smartmontools
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
d7cb798efe profiles: Drop keywords for sys-apps/pv
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
0629654e35 profiles: Drop keywords for sys-apps/lshw
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
05f4917972 profiles: Drop keywords for sys-apps/dtc
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
47d0b22c6c profiles: Drop keywords for sys-apps/debianutils
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
ae01f6c8cb profiles: Drop keywords for net-firewall/ipset
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
6f66a9ecd9 profiles: Drop keywords for net-dialup/minicom
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
6739933bcf profiles: Drop keywords for dev-cpp/glog
The updated package is stable for arm64 too now.
2021-12-16 14:03:08 +01:00
Krzesimir Nowak
94d80b99ae profiles: Drop app-misc/editor-wrapper keywords
The old version of the package didn't have a keyword for arm64. We
just updated it and it's stable for arm64 too, rendering the entry in
accept_keyword unnecessary.
2021-12-16 14:03:08 +01:00
Thilo Fromm
99ab4bc73c sys-apps/policycoreutils: guard against empty ${ROOT}
Co-authored-by: Krzesimir Nowak <knowak@microsoft.com>
2021-12-16 13:56:51 +01:00
Thilo Fromm
58294f287f sys-apps/policycoreutils: update correct SELinux store
The policycoreutils ebuild calls `semodule` in postinst to update SELinux stores.
It does not, however, tells `semodule` the correct ROOT to use, so builds that go into `/build/[arch]-usr` end up updating the SDK's store.
Fixes 
   libsemanage.semanage_commit_sandbox: Error while renaming /var/lib/selinux/targeted/active to /var/lib/selinux/targeted/previous. (Invalid cross-device link)
observed when using the SDK Container to build the OS image.
It now also updates the correct store, which it previously did not.
2021-12-16 13:56:51 +01:00
Dongsu Park
c9017c62b8 sys-apps/portage: update to 3.0.28-r1 for EAPI 8
To be able to support EAPI 8 used by a few ebuilds nowadays, we need to
update sys-apps/portage to 3.0.28-r1. Simply sync with Gentoo.
2021-12-16 13:52:59 +01:00
Mathieu Tortuyaux
46f9a0bdda Merge pull request #1484 from flatcar-linux/tormath1/mirror
.github/wf: add mirror-calico action
2021-12-16 13:44:07 +01:00
Mathieu Tortuyaux
09ec053597 Merge pull request #1503 from flatcar-linux/tormath1/containerd
app-emulation/containerd: update manifest
2021-12-16 13:18:51 +01:00
Mathieu Tortuyaux
748baac625 app-emulation/containerd: update manifest
The length of the shorthand commit hash is not constant.
It varies depending on the number of commits in the repo and
it lengthens as necessary to avoid hash conflicts.

When you download GitHub achives, these values are filled.

See also:
* https://github.com/containerd/containerd/discussions/6382
* https://github.com/google/ko/issues/315#issuecomment-783718564

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-12-16 11:08:14 +01:00
Dongsu Park
4240f03432 Merge pull request #1495 from flatcar-linux/dongsu/gce-oslogin-sshd-config
sys-auth/google-oslogin: accept ssh-rsa in sshd_config for openssh 8.8
2021-12-13 19:09:25 +01:00
Dongsu Park
ac7e8b2232 sys-auth/google-oslogin: accept ssh-rsa in sshd_config for openssh 8.8
Temporarily accept ssh-rsa algorithm in sshd_config for openssh >= 8.8,
until most ssh clients could deprecate ssh-rsa.

It is the same fix as https://github.com/flatcar-linux/init/pull/54.
However, we should do that again for GCE, because the google-oslogin
ebuild overwrites the existing sshd_config.
2021-12-13 15:10:24 +01:00
Krzesimir Nowak
51c47c610c Merge pull request #1277 from flatcar-linux/krnowak/python-transition2
Python transition: clean up stale keywords
2021-12-13 14:49:46 +01:00
Krzesimir Nowak
d61e4c0da5 changelog: Add entry for update of python 2021-12-10 17:31:12 +01:00
Krzesimir Nowak
659054b567 app-emulation/qemu: Move to portage-stable
The ebuild has no Flatcar modifications now.
2021-12-10 17:26:19 +01:00
Krzesimir Nowak
766b1a9d6b dev-python/boto: Apply Flatcar modifications 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
3598bbbe98 dev-python/boto: Import from portage-stable 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
03048d2445 dev-python/distro-oem: Depend on new version of python-oem 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
2bc34d1da7 app-emulation/wa-linux-agent: Depend on new version of python-oem 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
d19d339f88 coreos-devel/sdk-depends: Add app-eselect/eselect-python to deps
It used to be pulled in by dev-lang/python, but not any more. It is
needed for running fsscript during stage4 of SDK build to set up the
default python interpreter.
2021-12-10 17:26:19 +01:00
Krzesimir Nowak
4c4b6192f9 net-misc/google-cloud-sdk: Properly use the python single eclass
If python-single-r1.eclass is inherited, then PYTHON_USEDEP can't be
used directly inside dependency variable - either PYTHON_SINGLE_USEDEP
(for single-python-impl packages) should be used or the dependency
should be wrapped into python_gen_cond_dep function (for
multi-python-impl packages). crcmod is a multi-python-impl package, so
use the latter.

Also follow the practice of specifying the BDEPEND in terms of
RDEPEND. For this, we need to bump the EAPI to 7.
2021-12-10 17:26:19 +01:00
Krzesimir Nowak
54dbfd2cf4 sys-auth/sssd: Make PYTHON_COMPAT a bit more future-proof 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
08b4623745 sys-apps/systemd: Make PYTHON_COMPAT a bit more future-proof 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
9b5573feba net-firewall/nftables: Make PYTHON_COMPAT a bit more future-proof 2021-12-10 17:26:19 +01:00
Krzesimir Nowak
7888ad939b sys-apps/dbus: Make PYTHON_COMPAT a bit more future-proof 2021-12-10 17:26:19 +01:00