8600 Commits

Author SHA1 Message Date
Michael Marineau
10e950f763 profiles: OpenSSL 1.0.1j 2014-10-15 10:49:39 -07:00
Vito Caputo
e675b311a4 Merge pull request #918 from vcaputo/revert_018git
Revert to 0.1.8 pre sync with upstream godbus/go-systemd
2014-10-14 16:21:21 -07:00
Vito Caputo
d65f2d6d70 Revert to 0.1.8 pre sync with upstream godbus/go-systemd
Leak returned with upstream changes.
2014-10-14 18:50:20 -04:00
Vito Caputo
33c1f1bbe3 Merge pull request #917 from vcaputo/locksmith_hardened_gcc_workaround
Supply "-extldflags -fno-PIC" to locksmith GOLDFLAGS on hardened gcc
2014-10-13 16:13:20 -07:00
Vito Caputo
5f6d5922af Supply "-extldflags -fno-PIC" to locksmith GOLDFLAGS on hardened gcc
A similar workaround is utilized in the docker ebuild, see:
https://bugs.gentoo.org/show_bug.cgi?id=493328
2014-10-13 19:11:51 -04:00
Michael Marineau
6cd01aa6f0 Merge pull request #906 from carmstrong/enable_cephfs
coreos-kernel: enable Ceph FS
2014-10-13 16:03:23 -07:00
Michael Marineau
1ca106674c Merge pull request #916 from marineam/nokexec
update_engine: support disabling kexec on any platform
2014-10-13 11:08:14 -07:00
Michael Marineau
75d48882cc update_engine: support disabling kexec on any platform 2014-10-12 22:44:15 -07:00
Alex Crawford
49cdf03f1c Merge pull request #911 from crawford/waagent
azure: update wa-linux-agent
2014-10-12 22:19:39 -07:00
Alex Crawford
41a17b96ca Merge pull request #915 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v0.10.6
2014-10-12 22:18:58 -07:00
Alex Crawford
bc23d8fcc5 coreos-base/coreos-cloudinit: bump to v0.10.6 2014-10-12 22:01:53 -07:00
Alex Crawford
5482bcac59 coreos-base/oem-azure: use cloud-init --oem flag 2014-10-11 09:21:31 -07:00
Alex Crawford
47fdbb3507 app-emulation/wa-linux-agent: bump agent and allow config of 'core'
Patches have been merged upstream. Add a special case for 'core' user, allowing
the agent to configure it.
2014-10-10 18:28:19 -07:00
Vito Caputo
6b4a52aecb Merge pull request #913 from vcaputo/locksmith_019
locksmith: Stop leaking dbus.Conn in etcdActive
2014-10-10 14:12:56 -07:00
Vito Caputo
7ce8b2a90c locksmith: Stop leaking dbus.Conn in etcdActive
Fixes ooms in locksmithd.
2014-10-10 15:59:37 -04:00
Chris Armstrong
facc50b43e coreos-kernel: enable Ceph FS 2014-10-10 10:36:18 -06:00
Michael Marineau
d152564ef6 Merge pull request #908 from brianredbeard/mmc-sd-driver
coreos-kernel: Adding MMC/SDHCI drivers
2014-10-09 12:22:39 -07:00
Brian 'Redbeard' Harrington
55dc54d040 coreos-kernel: Adding MMC/SDHCI drivers
Adding the generic MMC driver as well as the corresponding SDCHI
components.  This will allow access for hardware which utilizes
MMC, SD, & SDHCI devices often used in embedded systems and for
emergency recovery partitions.
2014-10-09 11:54:59 -07:00
Michael Marineau
4562fa778b Merge pull request #909 from marineam/open-vm-tools
open-vm-tools: fix build-time dependencies
2014-10-08 21:07:06 -07:00
Michael Marineau
392869e36d open-vm-tools: fix build-time dependencies
Although we don't want glib and procps to be in the runtime dependencies
due to the way OEM packages are handled we still want them included as
build-time dependencies so compilation is actually successful. :)
2014-10-08 21:01:15 -07:00
Michael Marineau
bdb2556467 Merge pull request #907 from marineam/open-vm-tools
VMware OEM and open-vm-tools
2014-10-08 18:27:48 -07:00
Michael Marineau
a1e3d135d3 oem-vmware: Add VMware OEM package, uses open-vm-tools
Originally contributed by Camilo Aguilar <camilo.aguilar@gmail.com>
2014-10-08 16:55:45 -07:00
Camilo Aguilar
54b9e0d1fc board-packages: build open-vm-tools binary packages. 2014-10-08 16:55:45 -07:00
Michael Marineau
bc607bf760 app-emulation/open-vm-tools: Add open-vm-tools
Stripped down open-vm-tools ebuild for installing to /usr/share/oem

Based on efforts by:
    Camilo Aguilar <camilo.aguilar@gmail.com>
    Alex Crawford <alex.crawford@coreos.com>
2014-10-08 16:55:45 -07:00
Michael Marineau
7d12a92f1b dev-libs/libdnet: simplify further, remove python support 2014-10-08 11:19:26 -07:00
Camilo Aguilar
4bf552bfd5 dev-libs/libdnet: customize libdnet ebuild for OEM
Dependency required by open-vm-tools.
2014-10-08 11:13:14 -07:00
Alex Crawford
0fcf7604a7 Merge pull request #899 from crawford/azure
azure: Add support for Azure
2014-10-06 15:44:55 -07:00
Alex Crawford
c622ae2bf7 coreos-base/oem-azure: add wa-linux-agent to oem 2014-10-06 14:20:55 -07:00
Alex Crawford
928c7158a7 app-emulation/wa-linux-agent: add initial WALinuxAgent 2014-10-05 16:23:53 -07:00
Michael Marineau
95a52eb4ed Merge pull request #904 from marineam/vmware-dhcp
coreos-init: enable DHCP broadcast flag on VMware
2014-10-03 15:17:13 -07:00
Alex Crawford
122dd11e64 Merge pull request #903 from crawford/python
dev-lang/python-oem: add support for /etc/os-release
2014-10-03 14:31:53 -07:00
Alex Crawford
a05582634d dev-lang/python-oem: add support for /etc/os-release
Pulled upstream patch from http://bugs.python.org/issue17762.
2014-10-03 14:22:23 -07:00
Michael Marineau
ec72d7fc7c coreos-init: enable DHCP broadcast flag on VMware
Fixes https://github.com/coreos/bugs/issues/12 for good this time.
2014-10-03 12:20:41 -07:00
Michael Marineau
5ab02e5b4c Merge pull request #900 from abuchanan920/network-config-fix
Fixes issue of vagrant not assigned requested IP address.
2014-10-02 22:02:24 -07:00
Brian Waldon
af523e5a5a Merge pull request #902 from bcwaldon/bump-fleet
fleet v0.8.3
2014-10-02 16:23:45 -07:00
Brian Waldon
1c7a9b246c fleet: bump to v0.8.3 2014-10-02 14:17:59 -07:00
Andrew W. Buchanan
110fcd0eda Fixes issue of vagrant not assigned requested IP address. This was due to the switchover of the network interfaces to ethX format. 2014-10-02 15:35:23 -04:00
Michael Marineau
66e07f935a Merge pull request #895 from marineam/verity
verity: prune old broken package from ChromeOS
2014-10-01 13:40:46 -07:00
Michael Marineau
38324a9191 verity: prune old broken package from ChromeOS
When we add verity support we will be relying on generic packages such
as cryptsetup instead of whatever unknown bits are in this code base. It
has stopped building and I thought I removed it ages ago. Oops.
2014-10-01 12:28:57 -07:00
Alex Crawford
0b026a8b2a Merge pull request #888 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v0.10.5
2014-10-01 11:23:32 -07:00
Michael Marineau
ef40f66532 Merge pull request #894 from marineam/fleet
fleet: prune old version
2014-10-01 11:12:06 -07:00
Michael Marineau
248be1c964 Merge pull request #893 from marineam/bash50
bash: fix CVE-2014-7186 and CVE-2014-7187
2014-10-01 11:11:51 -07:00
Brian Waldon
28ac16e380 Merge pull request #892 from bcwaldon/bump-fleet
fleet v0.8.2
2014-10-01 11:10:05 -07:00
Michael Marineau
d6a114ac27 fleet: prune old version 2014-10-01 11:08:43 -07:00
Michael Marineau
a87f75aa8d bash: fix CVE-2014-7186 and CVE-2014-7187
Sync up with upstream gentoo, pulling in the final version of the patch
for these issues. This is functionally equivalent to 4.2_p51 but
upstream hasn't officially announced that version yet it seems.
2014-10-01 10:43:45 -07:00
Brian Waldon
7070a34371 fleet: bump to v0.8.2 2014-09-30 14:33:39 -07:00
Michael Marineau
b8132ad96f Merge pull request #889 from marineam/bash50
bash: function export hardening patch
2014-09-28 20:37:34 -07:00
Michael Marineau
9eaacc58c6 bash: function export hardening patch
Another day another bash version bump. This is the final version of the
patch to add a special prefix and suffix to exported functions in the
environment, preventing bugs similar to the previous two from becoming
remotely exploitable.

http://lists.gnu.org/archive/html/bug-bash/2014-09/msg00279.html

There still remain two less significant memory-access issues, dubbed
CVE-2014-7186 and CVE-2014-7187. So expect another bump soon.
http://www.openwall.com/lists/oss-security/2014/09/25/32
2014-09-28 20:10:36 -07:00
Alex Crawford
2ccea0734c coreos-base/coreos-cloudinit: bump to v0.10.5 2014-09-28 09:37:53 -07:00
Vito Caputo
2a1aa70606 Merge pull request #887 from vcaputo/nohpnssh
Disable "high performance ssh" openssh patch Gentoo includes
2014-09-26 14:59:34 -07:00