Commit Graph

8600 Commits

Author SHA1 Message Date
Kai Lüke
5916bfbfa9 coreos-base/coreos-init: systemd/network, don't manage the loopback interface
This pulls in a change in the systemd network unit to ignore the
loopback interface instead of managing its state which sometimes causes
the address to be lost.
https://github.com/kinvolk/init/pull/40
2021-05-17 15:30:47 +02:00
Kai Lüke
81926e26ae Merge pull request #1007 from kinvolk/kai/detect-device-mapper
coreos-base/coreos-init: flatcar-install, detect device mapper usage
2021-05-17 14:29:07 +02:00
Dongsu Park
7c9ce6658a Merge pull request #1014 from kinvolk/sayan/update-nvidia-460.73.01
x11-drivers/nvidia-{drivers,metadata}: Update the version to 460.73.01
2021-05-17 13:34:48 +02:00
Kai Lüke
18be162b54 coreos-base/coreos-init: flatcar-install, detect device mapper usage
This pulls in a behavior change in the flatcar-install script to
detect if a disk is used through a device mapper entry when searching
for free disks with -s.
https://github.com/kinvolk/init/pull/39

Fixes https://github.com/kinvolk/Flatcar/issues/332
2021-05-17 12:39:22 +02:00
Sayan Chowdhury
d1c2b78f42 x11-drivers/nvidia-{drivers,metadata}: Update the version to 460.73.01
Update nvidia-drivers and nvidia-metadata to address security issues:
* CVE-2021-1052
* CVE-2021-1053
* CVE-2021-1056
* CVE-2021-1076
* CVE-2021-1077

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-05-17 12:11:58 +02:00
Dongsu Park
03c24f942d Merge pull request #998 from kinvolk/dongsu/dbus-1.10.32
sys-apps/dbus: update to 1.10.32
2021-05-11 13:11:20 +02:00
Dongsu Park
feec17561b sys-apps/dbus: apply Flatcar patches
* Drop the dependency on `sec-policy/selinux-dbus`
* Drop machine-id generation
* Stabilize both keywords `amd64` and `arm64` to build it.
* Do not add a third-party patch for CVE-2019-12749 again, as the fix is
  already included in dbus >= 1.10.29.

Loosely based on a409238795c44dabfd16e466c8433a89f5f0844f and
e458211c8418462f4bd4d4536dc96f62380a22cf .
2021-05-11 10:07:02 +02:00
Dongsu Park
5eb623c758 sys-apps/dbus: update to 1.10.32
Update dbus to 1.10.32, mainly to address CVE-2020-35512.
It is based on commit 71a58ff8b6cebe8b9e8aeddaf93185ecb52bdb8c of
Gentoo.
2021-05-10 14:31:27 +02:00
Dongsu Park
7355cfb429 Merge pull request #996 from kinvolk/go-1.16.4-main
Upgrade Go in main from 1.16.3 to 1.16.4
2021-05-10 11:05:59 +02:00
Flatcar Buildbot
230d65d7e5 dev-lang: Upgrade Go 1.16.3 to 1.16.4 2021-05-10 07:29:36 +00:00
Sayan Chowdhury
bbebcb70a5 Merge pull request #988 from kinvolk/linux-5.10.34-main
Upgrade Linux Kernel in main from 5.10.32 to 5.10.34
2021-05-04 12:15:00 +05:30
Flatcar Buildbot
04e4324f55 sys-kernel: Upgrade Kernel 5.10.32 to 5.10.34 2021-05-03 07:13:41 +00:00
Dongsu Park
c3e3a9c785 Merge pull request #972 from kinvolk/go-1.16.3-main
Upgrade Go in main from 1.16.2 to 1.16.3
2021-04-30 09:17:46 +02:00
Sayan Chowdhury
a61c06f47c Merge pull request #978 from kinvolk/sayan/update-systemd-247.6
sys-app/systemd: Update systemd 247.6
2021-04-27 20:59:49 +05:30
Sayan Chowdhury
1878be0226 sys-app/systemd: Update systemd 247.6
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-27 20:34:28 +05:30
Sayan Chowdhury
e190258fe4 Merge pull request #974 from kinvolk/sayan/update-curl-7.76.1
profiles: Update the accept keywords for curl 7.76.1
2021-04-27 20:24:26 +05:30
Sayan Chowdhury
c7cebb556b profiles: Update the accept keywords for curl 7.76.1
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-27 19:57:11 +05:30
Sayan Chowdhury
b47b8b18b2 Merge pull request #973 from kinvolk/sayan/update-openldap-2.4.58
profiles: Add accept keywords for openldap
2021-04-26 22:41:59 +05:30
Sayan Chowdhury
1d6e8353fd Merge pull request #971 from kinvolk/sayan/fix-systemd-tasksmax-patch
sys-apps/systemd: Fix the patch to update DefaultTasksMax
2021-04-26 20:01:31 +05:30
Sayan Chowdhury
5b20d5400e sys-apps/systemd: Fix the patch to update DefaultTasksMax
The upstream changed the way the default percentage value, and
make the property partially dynamic.

Upstream ref: https://github.com/systemd/systemd/pull/14007

Fixes #382

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-26 19:33:15 +05:30
Sayan Chowdhury
eeb1964d2b Merge pull request #964 from kinvolk/sayan/update-to-qemu-5.2.0
app-emulation: update qemu to 5.2.0
2021-04-26 17:11:35 +05:30
Flatcar Buildbot
c1582b4c19 dev-lang: Upgrade Go 1.16.2 to 1.16.3 2021-04-26 07:29:05 +00:00
Sayan Chowdhury
dc9e44acf9 profiles: Add accept keywords for openldap
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-26 06:45:00 +00:00
Dongsu Park
32db49b027 Merge pull request #970 from kinvolk/linux-5.10.32-main
Upgrade Linux Kernel in main from 5.10.31 to 5.10.32
2021-04-23 19:01:49 +02:00
Sayan Chowdhury
48cf59679c app-emulation/qemu: Apply Flatcar patches
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-23 11:33:08 +00:00
Sayan Chowdhury
45110250e9 app-emulation/qemu: Sync with Gentoo upstream
Link1: 3452fc9c05

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-23 11:33:06 +00:00
Kai Lüke
f39655a823 Merge pull request #965 from kinvolk/kai/drop-rkt
Drop app-emulation/rkt and app-admin/kubelet-wrapper
2021-04-23 12:40:04 +02:00
Kai Lüke
0a0889852d Merge pull request #958 from kinvolk/kai/gce-oem-nspawn
coreos-base/oem-gce: use systemd-nspawn to run the GCE daemon
2021-04-23 12:39:36 +02:00
Flatcar Buildbot
349473393c sys-kernel: Upgrade Kernel 5.10.31 to 5.10.32 2021-04-22 07:15:14 +00:00
Kai Lüke
407c665d51 Drop app-emulation/rkt and app-admin/kubelet-wrapper
The rkt container runtime is deprecated and not used anymore except
for the kubelet-wrapper script. This script can't be ported to Docker
because it is used by the user with rkt-specific arguments and it is
only a wrapper around the deprecated hyperkube images (and has been
broken for the last K8s releases). The recommended way is to run the
kubelet binary directly on the host.
2021-04-22 00:09:04 +02:00
Kai Lüke
bc5e02d65e coreos-base/oem-gce: use systemd-nspawn to run the GCE daemon
The GCE daemon container was run with rkt from an ACI tar ball.
To replace rkt with systemd-nspawn, extract the tar ball to an
image and run the daemon as systemd-nspawn container.
2021-04-21 17:44:01 +02:00
Marga Manterola
d20a30d6c8 Merge pull request #961 from kinvolk/marga-kinvolk/optional-hostname
sys-kernel/bootengine: make hostname units optional
2021-04-21 16:32:34 +02:00
Dongsu Park
8a54f23394 Merge pull request #960 from kinvolk/dongsu/gnutls-3.7.1
profiles: accept keywords for net-libs/gnutls
2021-04-21 11:06:26 +02:00
Dongsu Park
dd4910f801 Merge pull request #957 from kinvolk/linux-5.10.31-main
Upgrade Linux Kernel in main from 5.10.26 to 5.10.31
2021-04-20 18:27:27 +02:00
Margarita Manterola
2b7b075998 sys-kernel/bootengine: make hostname units optional
Having the hostname units as required by the initrd.target meant that if
the unit failed (for example because the network was or the metadata
service were down), the machine wouldn't start. By making it a "wants"
rather than a "requires" we allow this unit to fail without disrupting
the whole boot.
2021-04-20 18:25:41 +02:00
Flatcar Buildbot
1a279015ec sys-kernel: Upgrade Kernel 5.10.26 to 5.10.31 2021-04-20 14:01:57 +02:00
Dongsu Park
818e27951e Merge pull request #959 from kinvolk/dongsu/go-1.16-default
Set the default Go version to 1.16
2021-04-20 13:59:31 +02:00
Dongsu Park
39e9a99528 profiles: accept keywords for net-libs/gnutls
To be able to build gnutls 3.7.1, which is still not stable, we need to
accept keywords ~amd64 and ~arm64.
2021-04-20 10:26:19 +02:00
Dongsu Park
3fb5511b30 app-admin/updateservicectl: set COREOS_GO111MODULE to off
app-admin/updateservicectl also belongs to the cases where Go module is
not supported due to its old source code.
2021-04-19 17:45:08 +02:00
Dongsu Park
f9ff6599a9 app-emulation/acbuild: set COREOS_GO111MODULE to off
app-emulation/acbuild also belongs to the cases where Go module is not
supported due to its old source code.
2021-04-19 17:44:17 +02:00
Dongsu Park
9541ac9210 app-emulation/cri-tools: default to the default COREOS_GO_VERSION
We do not need to set COREOS_GO_VERSION to a specific version, unless
it is necessary to avoid build issues in certain cases like Docker.
Simply remove COREOS_GO_VERSION from the ebuild of cri-tools.
2021-04-19 17:43:08 +02:00
Dongsu Park
6b83baa45f eclass: update COREOS_GO_VERSION to 1.16
We need to update COREOS_GO_VERSION in eclass files to 1.16, to make
builds work with Go 1.16 by default.
2021-04-19 17:42:19 +02:00
Kai Lüke
2ef596ded0 Merge pull request #915 from kinvolk/sayan/update-to-openssl-1.1.1k
dev-libs/openssl: Sync with Gentoo upstream
2021-04-19 13:16:27 +02:00
Sayan Chowdhury
ad6568b1f8 dev-libs/openssl: Apply Flatcar changes
- Drop binddist from RESTRICT variable
- Drop pkg_postinst
- Create /etc/ssl with tmpfiles (and package it for the SDK).

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 12:54:34 +02:00
Sayan Chowdhury
a005bf1e34 dev-libs/openssl: Sync with Gentoo upstream
Sync ref: 1b9f956295

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 12:54:34 +02:00
Dongsu Park
c3d14adced Merge pull request #941 from kinvolk/sayan/update-go-1.16
dev-lang/go: Bump the default Go version to 1.16
2021-04-19 12:03:33 +02:00
Sayan Chowdhury
8ab974edb4 .github: Bump Golang version to 1.16 for Github Actions
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:24 +02:00
Sayan Chowdhury
44f43b4f7f app-emulation/amazon-ssm-agent: set env GO111MODULE to "off"
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:24 +02:00
Sayan Chowdhury
2a08005843 dev-lang/go: Update the manifest of golang
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:23 +02:00
Sayan Chowdhury
6d53f9d3bd Add the GO111MODULE
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:01 +02:00