Commit Graph

8740 Commits

Author SHA1 Message Date
Krzesimir Nowak
43ccab8e9d sys-libs/glibc: Reset to vanilla ebuild 2022-12-06 14:36:54 +01:00
Krzesimir Nowak
a4326957df dev-lang/python-oem: Apply Flatcar modifications 2022-12-06 14:34:48 +01:00
Krzesimir Nowak
4dc2f9a83d dev-lang/python-oem: Reset to vanilla ebuild 2022-12-06 14:32:39 +01:00
Krzesimir Nowak
f76441eaeb dev-lang/python-oem: Update dependency
The `virtual/awk` package is replaced with `app-alternatives/awk`, so
reflect that in the ebuild.
2022-12-06 14:32:39 +01:00
Krzesimir Nowak
33d5bace3f profiles: Do not pull in pip stuff from dev-lang/python 2022-12-06 14:32:39 +01:00
Krzesimir Nowak
990b2749a3 coreos/config: Update description for app-crypt/mit-krb5 overrides 2022-12-06 14:32:39 +01:00
Jeremi Piotrowski
1db12d110d Merge pull request #2315 from flatcar/bug-847-kernel-fix-backport
sys-kernel/coreos-sources: Add backport of bugfix for #847
2022-12-06 13:35:15 +01:00
Jeremi Piotrowski
b7eec9eed7 changelog: add entry for Flatcar#847 bugfix 2022-12-06 11:42:15 +01:00
Sayan Chowdhury
9700f36c3f Merge pull request #2309 from flatcar/sayan/update-sudo-1.9.12_p1
add-admin/sudo: Sync with Gentoo upstream; updates to 1.9.12_p1
2022-12-05 19:17:44 +05:30
Jeremi Piotrowski
61592da5ec sys-kernel/coreos-sources: Add backport of bugfix for #847
Users reported a deadlock in ext4 that occurs under loads after kernel 5.15.72.
We debugged and found that this issue is also present upstream (6.x) and found
a fix. The fix has been validated to fix the issue, but we're still waiting for
a reponse from the ext4 maintainer.

In the meantime, apply the backport to our kernel sources, so that users can be
unblocked from updating. This will be released to alpha/beta first, and
hopefully by the time it is promoted to stable, the fix will be merged to the
kernel tree and backported to 5.15.
2022-12-05 13:31:20 +01:00
Sayan Chowdhury
f2ea162fae changelog: Update the changelog for the sudo-1.9.12_p1
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-12-02 17:22:04 +05:30
Krzesimir Nowak
7542bbf3f5 Merge pull request #2307 from flatcar/krnowak/weekly
Changes for weekly updates
2022-12-01 19:39:23 +01:00
Flatcar Buildbot
7b019787ee app-emulation: Upgrade open-vm-tools 12.1.0 to 12.1.5 2022-11-30 07:19:01 +00:00
Krzesimir Nowak
642a90d29b profiles: Drop accept keywords for sys-libs/zlib
It became stable for amd64 and arm64.
2022-11-29 15:13:45 +01:00
Krzesimir Nowak
cf28added0 profiles: Drop accept keywords for sys-fs/multipath-tools
The updated package is now stable for both amd64 and arm64.
2022-11-29 15:08:35 +01:00
Krzesimir Nowak
8064d1c3d5 profiles: Updated accept keywords for net-misc/curl 2022-11-29 14:13:49 +01:00
Krzesimir Nowak
33b0d3e235 coreos-devel/sdk-depends: Replace dev-util/boost-build with dev-util/b2
dev-libs/boost now needs the latter to build.
2022-11-29 10:58:18 +01:00
Dongsu Park
78c4fb88d1 Merge pull request #2299 from flatcar/dongsu/cpio-2.13
profiles: accept keywords for app-arch/cpio 2.13-r3
2022-11-23 17:32:37 +01:00
Krzesimir Nowak
bfbf8b3135 Merge pull request #2298 from flatcar/krnowak/weekly
profiles: Updates for weekly package updates
2022-11-23 14:32:46 +01:00
Dongsu Park
f8d0d4bd13 Merge pull request #2292 from flatcar/linux-5.15.79-main
Upgrade Linux Kernel for main from 5.15.77 to 5.15.79
2022-11-23 14:20:35 +01:00
Krzesimir Nowak
5b6cd2ab0a profiles: Update accept keywords for net-misc/curl
Revision was bumped to r2, but it kept the keywords intact.
2022-11-22 13:39:22 +01:00
Krzesimir Nowak
4c7180dca0 profiles: Update accept keywords for sys-libs/zlib
It became stable for arm64, still unstable for amd64. Probably will be
stabilized for the latter during the week.
2022-11-22 13:35:13 +01:00
Dongsu Park
384ce45da9 profiles: accept keywords for app-arch/cpio 2.13-r3
Accept keywords for app-arch/cpio 2.13-r3, mainly to address
CVE-2021-38185.
2022-11-22 11:00:41 +01:00
Dongsu Park
69e9bcc0f7 Merge pull request #2296 from flatcar/containerd-1.6.10-main
Upgrade Containerd in main from 1.6.9 to 1.6.10
2022-11-18 13:08:02 +01:00
Krzesimir Nowak
02b93bd55a Merge pull request #2288 from flatcar/krnowak/weekly
profiles: Cleanups for weekly package updates
2022-11-18 10:14:47 +01:00
Flatcar Buildbot
88af01b531 app-emulation: Upgrade Containerd 1.6.9 to 1.6.10 2022-11-18 08:24:29 +00:00
Krzesimir Nowak
052c0553ae Merge pull request #2268 from flatcar/krnowak/openssh-update
net-misc/openssh: Bump to 9.1
2022-11-17 11:19:32 +01:00
Krzesimir Nowak
e596583d76 profiles: Build static libraries for dev-libs/libpcre2
app-emulation/qemu depends on dev-libs/glib preferentially built with
static libraries. The GLib library started to depend on
dev-libs/libpcre2 after the update. Since dev-libs/glib is built with
static-libs USE flag, it propagates the requirement to
dev-libs/libpcre2 too. Thus update the line with old dev-libs/libpcre
in package.use to new dev-libs/libpcre2 now. Hopefully nothing needs
static libs of old dev-libs/libpcre.
2022-11-17 11:15:54 +01:00
Krzesimir Nowak
11d976f352 profiles: Drop arm64 from accept keywords for net-misc/curl 2022-11-17 11:15:54 +01:00
Krzesimir Nowak
8eff949fff profiles: drop dev-util/glib-utils from packages.provided
Should not be necessary - dev-libs/glib is not pulling it anymore, and
other ebuilds needing the package pull it with BDEPEND, which means
that the package on SDK is being used.
2022-11-17 11:15:54 +01:00
Krzesimir Nowak
1a045b9ccc profiles: Update accept keywords for app-editors/vim-core 2022-11-17 11:15:54 +01:00
Krzesimir Nowak
8957817186 profiles: Update accept keywords for app-editors/vim 2022-11-17 11:15:54 +01:00
Flatcar Buildbot
5c6e3b3fe0 sys-kernel: Upgrade Kernel 5.15.77 to 5.15.79 2022-11-17 07:19:16 +00:00
Dongsu Park
4a4289ebc8 Merge pull request #2283 from flatcar/cacerts-3.85-main
Upgrade ca-certificates in main from 3.84 to 3.85
2022-11-16 15:09:07 +01:00
Kai Lueke
ee0c1e654c Support Hardware Security Keys in update-ssh-keys
This pulls in
https://github.com/flatcar/update-ssh-keys/pull/7
to support Hardware Security Keys in update-ssh-keys.
Until we have a new crates.io release of openssh-keys with
https://github.com/coreos/openssh-keys/pull/68 we need to host it on
Origin or find a way to make the eclass more flexible. Here it was
hosted on Origin (from "cargo package") and the Cargo.toml/lock patched
on build to think it would come from crates.io because the Gentoo
eclass only supports that location.
2022-11-16 11:52:16 +01:00
Sayan Chowdhury
d340dda71a app-admin/sudo: Apply Flatcar patches
- Remove Perl Runtime Dependency
- Remove OpenLDAP schema files for sudo
- Remove sudo.conf file as it is shipped via baselayout

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-11-15 05:24:42 +00:00
Sayan Chowdhury
32089482da add-admin/sudo: Sync with Gentoo upstream; updates to 1.9.12_p1
gentoo syncref: 82f5b130cc
2022-11-15 05:18:23 +00:00
Flatcar Buildbot
0986cc7377 app-misc: Upgrade ca-certificates 3.84 to 3.85 2022-11-14 07:17:45 +00:00
Krzesimir Nowak
db546fb6d4 changelog: Add an entry 2022-11-11 09:17:27 +01:00
Dongsu Park
340f597eae Merge pull request #2276 from flatcar/firmware-20221109-main
Upgrade Linux Firmware in main from 20221012 to 20221109
2022-11-11 09:13:13 +01:00
Mathieu Tortuyaux
3d882f6f73 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-11-10 17:02:28 +01:00
Mathieu Tortuyaux
3a9541cd7e sys-apps/ignition: fix OEM detection
In case the OEM partition was specified with the name "OEM",
the btrfs format was not forced because it only considered the name "oem".

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-11-10 16:58:37 +01:00
Krzesimir Nowak
bbc47ca7ab profiles: Cleanup net-misc/openssh stuff
We mark the package as stable in ebuild, so drop the accept
keywords. Also, bindist is not a thing any more.
2022-11-10 16:11:42 +01:00
Sayan Chowdhury
9393631719 net-misc/openssh: Apply Flatcar patches
- Drop the init.d files.
- Remove the socket unit's rate limiting.
- Mark the package as stable.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
Signed-off-by: Dongsu Park <dpark@linux.microsoft.com>
2022-11-10 16:11:42 +01:00
Krzesimir Nowak
8d0734b440 net-misc/openssh: Sync with Gentoo
It's from Gentoo commit 591c528cc536c3e28daaf6356084d356c5e82eec.
2022-11-10 16:11:42 +01:00
Flatcar Buildbot
909e4e5a85 sys-kernel: Upgrade Linux Firmware 20221012 to 20221109 2022-11-10 15:23:58 +01:00
Krzesimir Nowak
a8467c41ec Merge pull request #2266 from flatcar/krnowak/weekly
Profile cleanups for weekly package updates
2022-11-10 09:46:51 +01:00
Krzesimir Nowak
e6c3da9063 Merge pull request #2249 from flatcar/sync-maintainers
Sync MAINTAINERS.md
2022-11-09 13:26:17 +01:00
Krzesimir Nowak
1c76e1b569 profiles: Update accept keywords for net-misc/curl 2022-11-09 13:23:54 +01:00
Krzesimir Nowak
c2709f7f01 sys-devel/sysroot-wrappers: Bump to 0.2
Pull things from flatcar org, updates the build system, so we can
depend on autoconf 2.71, install symlink for cc too.
2022-11-08 17:42:05 +01:00
Krzesimir Nowak
4ce207765b profiles: Drop accept keywords for dev-libs/libxml2
It became stable in portage-stable.
2022-11-08 17:42:05 +01:00
Krzesimir Nowak
e4fbf8c8b7 profiles: Drop accept keyword for dev-util/patchelf 2022-11-08 17:42:05 +01:00
Krzesimir Nowak
78df8c3cc8 profiles: Drop accept keyword for dev-util/meson 2022-11-08 17:42:05 +01:00
Krzesimir Nowak
a4c2fc83b5 profiles: Add accept keywords for app-portage/portage-utils
Still unstable for amd64, will likely be marked as stable by next week.
2022-11-08 17:42:05 +01:00
Dongsu Park
9ac87490bd dev-lang/rust: Apply Flatcar modifications
- Apply crossdev patch.
- Enable keywords again
- Remove dependency on sys-apps/lsb-release, which conflicts with
  sys-apps/baselayout of Flatcar.

Based on commit 036e8f53c2280eadb070bab9f6bd434368e56643
2022-11-08 13:17:14 +01:00
Dongsu Park
3312437919 dev-lang/rust: update to 1.65.0, sync with Gentoo
Sync with Gentoo to update dev-lang/rust to 1.65.0

Gentoo ref: ec128832c39662fec523d84fb344b0f4a1fbf7be
2022-11-08 13:16:51 +01:00
Flatcar Buildbot
e3d9709ca6 dev-lang: Upgrade dev-lang/rust 1.64.0 to 1.65.0 2022-11-08 07:57:41 +00:00
Sayan Chowdhury
71174cb35e Merge pull request #2274 from flatcar/linux-5.15.77-main
Upgrade Linux Kernel for main from 5.15.74 to 5.15.77
2022-11-07 16:56:24 +05:30
Dongsu Park
969f346b2f Merge pull request #2269 from flatcar/dongsu/go-1.19.3-1.18.8
dev-lang/go: add 1.19.3, update 1.18.8, remove 1.17
2022-11-04 12:23:49 +01:00
Dongsu Park
638873e3d9 .github: add Go 1.19, remove 1.17
Add Go 1.19 and remove 1.17 from go-releases-main.yml.
Fix a broken URL in go-apply-patch.sh, from
https://go.dev/doc/devel/release#${VERSION} to
https://go.dev/doc/devel/release#go${VERSION}.
2022-11-04 09:10:43 +01:00
Dongsu Park
d837ff3a0c changelog: add changelog for Go 1.19.3
Add changelog for Go 1.19.3.
Update its URL to https://go.dev/doc/devel/release#go1.19.3.
2022-11-04 09:09:27 +01:00
Flatcar Buildbot
32d4322019 sys-kernel: Upgrade Kernel 5.15.74 to 5.15.77 2022-11-04 07:20:37 +00:00
Jeremi Piotrowski
c70a98d6d1 Sync maintainers file from flatcar/flatcar repository 2022-11-03 15:37:27 +01:00
Krzesimir Nowak
ed5a239a9a Merge pull request #2267 from flatcar/krnowak/openssl-update
dev-libs/openssl: Bump to 3.0.7
2022-11-03 12:24:58 +01:00
Dongsu Park
c9b1606109 coreos-base/hard-host-depends: remove Go 1.17, add Go 1.19
Make hard-host-depends pull in dev-lang/go:1.19 instead of 1.17,
to avoid build failures.
2022-11-03 09:38:35 +01:00
Dongsu Park
0c267f156e eclass: update list of required docs of dev-lang/go
Now that the source tree of Go 1.19 or newer does not have files like
AUTHORS or CONTRIBUTORS, we need to remove the files from the list of
required docs of dev-lang/go.
Also add CONTRIBUTING.md to the list of docs, as all Go versions have
the file.
2022-11-03 09:36:45 +01:00
Dongsu Park
3d8b7b67ce dev-lang/go: Add Go 1.19.3
Add Go 1.19.3. https://go.dev/doc/devel/release#go1.19.3
Update the default Go version to 1.19.

Note, we still keep COREOS_GO_VERSION=go1.18 in containerd, docker,
docker-cli, docker-proxy, docker-runc following the default version
of the upstream repos.
2022-11-03 09:36:45 +01:00
Dongsu Park
a17469f602 dev-lang/go: update Go to 1.18.8
Update dev-lang/go to 1.18.8.
https://go.dev/doc/devel/release#go1.18.8

Note, the security issue of the release does not affect Flatcar,
as that affects only Windows.
2022-11-03 09:36:45 +01:00
Dongsu Park
bb67d7f126 dev-lang/go: clean up Go 1.17.13
Go 1.17 is no longer used anywhere. Clean up.
2022-11-03 09:36:45 +01:00
Krzesimir Nowak
38b47df9ac changelog: Add an entry 2022-11-03 08:59:44 +01:00
Krzesimir Nowak
52addedfda changelog: Add an entry 2022-11-02 16:04:19 +01:00
Krzesimir Nowak
8df2647e0e sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2022-11-02 16:04:19 +01:00
Krzesimir Nowak
2608c4e79c sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit a3d93f81ed9442703de09b684f309d8e1d596571.
2022-11-02 16:04:19 +01:00
Krzesimir Nowak
4dfba02e59 Merge pull request #2238 from flatcar/krnowak/actions-update
github: Modernize the actions a bit
2022-11-02 15:59:45 +01:00
Mathieu Tortuyaux
c49c230f1b dev-libs/openssl: Apply Flatcar modifications
- remove unecessary files
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- mark openssl as stable for arm64 and amd64

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-11-02 14:36:25 +01:00
Krzesimir Nowak
704380a2e0 dev-libs/openssl: Sync with Gentoo
It's from Gentoo commit 9ffdcaba89a94dc933e722339fe9471ad16af62a.
2022-11-02 14:30:31 +01:00
Dongsu Park
69e68c98c2 Merge pull request #2265 from flatcar/dongsu/multipath-tools-0.9.3
profiles: accept keywords for multipath-tools 0.9.3
2022-11-02 12:58:31 +01:00
Kai Lueke
8cc6058a64 dev-libs/openssl: Fix security issue
This applies a patch to fix a security issue. There will be an upstream
release available soon and we can drop the patch after updating to it.
2022-11-01 17:25:27 +01:00
Dongsu Park
c207188a81 profiles: accept keywords for multipath-tools 0.9.3
Accept keywords ~amd64, ~arm64 for sys-fs/multipath-tools 0.9.3
to address CVE-2022-41973, CVE-2022-41974.
2022-11-01 12:21:09 +01:00
Flatcar Buildbot
2c2af1fa7a app-emulation: Upgrade Containerd 1.6.8 to 1.6.9 2022-10-28 08:58:19 +00:00
Dongsu Park
9225503a6c Merge pull request #2250 from flatcar/docker-20.10.21-main
Upgrade Docker in main from 20.10.20 to 20.10.21
2022-10-28 10:53:55 +02:00
Kai Lueke
b5f2777a6e app-admin/toolbox: Use containerd
This pulls in
https://github.com/flatcar/toolbox/pull/7
to download and mount the image with containerd instead of requiring
Docker.
2022-10-27 16:13:51 +02:00
Krzesimir Nowak
47bf270880 Merge pull request #2248 from flatcar/krnowak/weekly
Profile additions and cleanups for weekly update
2022-10-27 12:19:29 +02:00
Krzesimir Nowak
f8a6a2be8d Merge pull request #2245 from flatcar/krnowak/net-misc-update
Profile cleanups for net-misc packages update
2022-10-27 12:17:29 +02:00
Flatcar Buildbot
139db5ad3f app-emulation: Upgrade Docker 20.10.20 to 20.10.21 2022-10-26 07:50:01 +00:00
Krzesimir Nowak
1bb650c94e profiles: Update accept keywords for sys-libs/zlib
The package is still unstable and 1.2.13 is gone in favor of 1.2.13-r1.
2022-10-24 19:16:54 +02:00
Krzesimir Nowak
8172ba5da7 profiles: Drop unnecessary unmask for dev-vcs/git
We have updated the package to a different version now. Also, it's not
masked any more.
2022-10-24 18:51:02 +02:00
Krzesimir Nowak
112001a419 profiles: Add accept keywords for dev-util/patchelf 2022-10-24 18:50:46 +02:00
Krzesimir Nowak
9511ff75bf profiles: Drop accept keywords for dev-util/cmake
It became stable for amd64 too.
2022-10-24 18:40:41 +02:00
Krzesimir Nowak
a1d4afd659 profiles: Add accept keywords for dev-util/meson 2022-10-24 18:40:12 +02:00
Krzesimir Nowak
c7d70dd1a2 profiles: Update accept keywords for dev-util/bpftool 2022-10-24 18:38:12 +02:00
Jeremi Piotrowski
369a2fd99c Merge pull request #2240 from flatcar/jepio/qemu-guest-agent
coreos: add qemu-guest-agent to images
2022-10-24 11:06:23 +02:00
Jeremi Piotrowski
e535a18d7c Merge pull request #2239 from flatcar/jepio/arm64-kernel-shrink
arm64 kernel shrink by changing kernel options to module and disabling unsupported options.
2022-10-24 09:34:43 +02:00
Jeremi Piotrowski
8f23ec18c2 Merge pull request #2197 from flatcar/jepio/arm64-parent-profile
profile/coreos/arm64: switch parent profile to 17.0/hardened
2022-10-24 09:32:51 +02:00
Jeremi Piotrowski
f261312db5 changelog: add entry for changes needed to bring down arm64 kernel size 2022-10-24 09:30:39 +02:00
Jeremi Piotrowski
83610f44d1 Merge pull request #2235 from Snaipe/fix-arm64-boot
sys-kernel: enable IOMMU on arm64
2022-10-21 14:33:22 +02:00
Mathieu Tortuyaux
16b9cbb3d3 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-10-21 14:20:48 +02:00
Mathieu Tortuyaux
503114256f coreos-base/oem-ec2-compat: pull ssh keys from metadata server
Without this Ignition configuration, the SSH keys are
not installed from the Openstack metadata server.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-10-21 14:20:48 +02:00
Krzesimir Nowak
fd81c9ade2 Merge pull request #2210 from flatcar/krnowak/vim-update
app-editors/vim: Move back to portage-stable
2022-10-20 16:22:18 +02:00
Krzesimir Nowak
5c783ce9c1 profiles: Remove unnecessary package.provided for app-arch/xz-utils
The circular dep used to be:

app-arch/xz-utils
libtool.eclass
app-portage/elt-patches
app-arch/xz-utils

The circular dep should be gone now, because app-arch/xz-utils is a
BDEPEND, so for building production images the package from SDK will
be used. For building SDK the package from seed SDK should be used.
2022-10-20 15:20:36 +02:00
Krzesimir Nowak
830d3e424a profiles: Drop redundant package.use.force for net-misc/wget
It already is a part of the base profile in portage-stable.
2022-10-20 15:20:36 +02:00
Krzesimir Nowak
eea6bf76b1 profiles: Drop accept_keywords for net-misc/wget
The updated package is stable for both amd64 and arm64.
2022-10-20 15:20:36 +02:00
Krzesimir Nowak
1d9b15ea3e profiles: Drop obsolete USE flag for net-misc/iputils
The net-misc/iputils package stopped providing traceroute. We are
pulling in a different package instead.
2022-10-20 15:20:36 +02:00
Krzesimir Nowak
d87266cbf0 coreos-base/coreos{,-dev}: Add net-analyzer/traceroute
These packages are pulling in iputils, that used to provide the
traceroute utility. The updated iputils package stopped doing that
altogether, recommending to install net-analyzer/traceroute or
net-analyzer/mtr instead. We are going with the former here.
2022-10-20 15:19:20 +02:00
Krzesimir Nowak
9d5fc0ff03 Merge pull request #2243 from flatcar/krnowak/curl-update
profiles: Accept keywords for curl 7.85
2022-10-20 15:00:53 +02:00
Krzesimir Nowak
7499c24a52 changelog: Add entries 2022-10-20 14:34:18 +02:00
Sayan Chowdhury
1296ae7ef6 Merge pull request #2244 from flatcar/sayan/update-wireguard-tools-1.0.20210914
net-vpn/wireguard-tools: Move to portage-stable
2022-10-20 15:32:36 +05:30
Krzesimir Nowak
e4bda5bbf3 Merge pull request #2242 from flatcar/docker-20.10.20-main
Upgrade Docker in main from 20.10.18 to 20.10.20
2022-10-19 18:53:00 +02:00
Krzesimir Nowak
0f99e5dcf6 Merge pull request #2241 from flatcar/krnowak/weekly
Profile changes for the weekly updates
2022-10-19 18:12:03 +02:00
Krzesimir Nowak
092ae3d567 github: Use recommended way of setting output 2022-10-19 18:06:31 +02:00
Krzesimir Nowak
76cdd99843 github: Bump action versions
This updates checkout and create-pull-request action versions to v3
and v4, respectively, to avoid warnings about deprecated node 12.
2022-10-19 18:04:32 +02:00
Krzesimir Nowak
6f1a2a0cab Merge pull request #2221 from flatcar/krnowak/deduplicate-workflows
github: Deduplicate kernel and ca-certificates workflows
2022-10-19 18:02:32 +02:00
Krzesimir Nowak
3ce9099727 profiles: Remove obsolete USE flag of net-misc/curl
Also drop the comment, it was related to the media-libs/mesa package
that was dropped over 9 years ago in commit
de91081f00a4ab07332759b1bbfc3072d530c9fd.
2022-10-19 10:08:25 +02:00
Krzesimir Nowak
eb2d5da242 profiles: Add accept keywords for net-misc/curl 2022-10-19 10:08:07 +02:00
Flatcar Buildbot
7d7ff9c223 app-emulation: Upgrade Docker 20.10.18 to 20.10.20 2022-10-19 08:07:25 +00:00
Krzesimir Nowak
40e0917023 profiles: Add accept keywords for sys-libs/zlib 2022-10-19 08:51:13 +02:00
jenkins
cee408b4a6 coreos: add qemu-guest-agent to images
Qemu-guest-agent gets activated using a udev rule, and so will only run
when the correct virtio-port name is detected. Qemu-guest-agent is used
across several oems so we include it in the usr partition.
2022-10-18 17:01:44 +00:00
Krzesimir Nowak
9ea66f917a profiles: Drop accept keywords for dev-vcs/git
The updated package became stable on both amd64 and arm64.
2022-10-18 18:18:33 +02:00
Krzesimir Nowak
e7863f5ab1 profiles: Add accept keywords for dev-util/cmake 2022-10-18 18:13:43 +02:00
Krzesimir Nowak
d8f81f4442 profiles: Add accept keywords for dev-libs/libxml2 2022-10-18 18:07:24 +02:00
Krzesimir Nowak
9f7bb31f84 Merge pull request #2228 from flatcar/linux-5.15.74-main
Upgrade Linux Kernel in main from 5.15.73 to 5.15.74
2022-10-18 16:16:58 +02:00
Jeremi Piotrowski
99ff470847 sys-kernel/coreos-modules: make wireguard a module
The wireguard module has some crypto dependencies, we benefit from making them
all modules so that they don't increase the arm64 kernel size.
2022-10-18 13:12:56 +02:00
Jeremi Piotrowski
d3d07fc959 sys-kernel/coreos-modules: disable arm64 board specific kconfig settings
Disable ARCH_QCOM, ARCH_ZYNQMP, ARCH_MEDIATEK which enable other options that
are only relevant on the respective boards, none of which are supported targets
for Flatcar. Since the arm64 kernel does not support compression, these
settings have a significant impact on kernel size. The boot partition size is
only 128MB and needs to fit 2 kernels, so we have set ourselves a target of
60MB per kernel. This commit brings down the arm64 kernel size by 3MB.

At the same time, enable the settings that are actually relevant: ARCH_BCM,
because that one is relevant for Raspberry Pi 4 that runs Linux.
2022-10-18 13:12:01 +02:00
Krzesimir Nowak
053fe006d3 .github: Simplify kernel patch script
No point in setting UPDATE_NEEDED to zero if we exit the script
without doing anything with the just set variable.

Also to avoid mismatches in branch names, export the branch name as a
github workflow step output, so the follow-up steps can pick it up and
use.
2022-10-18 11:37:01 +02:00
Krzesimir Nowak
b15055684e .github: Deduplicate kernel workflows
Also use a newer version of the create pull request action, and apply
correct labels ("alpha" or "stable" instead of "flatcar-XXXX").
2022-10-18 11:37:01 +02:00
Krzesimir Nowak
8d00adc16c .github: Simplify ca-certificates patch script
No point in setting UPDATE_NEEDED to zero if we exit the script
without doing anything with the just set variable.

Also fix the mismatch in branch names - we normally create a branch
like "cacerts-${NSS_VERSION}-${BRANCH}" in the last workflow step
whereas we were checking if a branch like "${NSS_VERSION}-${BRANCH}"
existed in the script. To avoid repetition, export the branch name as
a github workflow step output, so the follow-up steps can pick it up
and use.
2022-10-18 11:37:01 +02:00
Krzesimir Nowak
c1a9aa5a97 .github: Deduplicate ca-certificates workflows
Also use a newer version of the create pull request action, and apply
correct labels ("alpha" or "stable" instead of "flatcar-XXXX").
2022-10-18 11:37:01 +02:00
Krzesimir Nowak
522749197c .github: Add a script for figuring out a branch from channel name
It will be used for deduplicating the github workflows.
2022-10-18 11:32:10 +02:00
Krzesimir Nowak
7c4b588a5c github: Make workflows fork-friendly
This sets up the coreos-overlay submodule inside the SDK container to
use the remote of the fork and the base branch from that fork. That
way, we can test the workflows in the forks too.
2022-10-18 11:32:10 +02:00
Franklin "Snaipe" Mathieu
81a35f0027 sys-kernel: enable IOMMU on arm64
On Gigabyte R152-P31 arm64 servers, the Flatcar PXE images hang during the boot
process, making them unusable, while Fedora CoreOS images work.

The kernel seems to start correctly, however it invariably ends up printing
this message and hanging:

    ata1.00: qc timeout (cmd 0xec)
    ahci 000c:01:00.0: AHCI controller unavailable!
    pcieport 000c:00:01.0: AER: Uncorrected (Non-Fatal) error received: 000c:00:00.0
    ata1.00: failed to IDENTIFY (I/O error, err_mask=0x4)
    pcieport 000c:00:01.0: PCIe Bus Error: severity=Uncorrected (Non-Fatal), type=Transaction Layer, (Requester ID)
    pcieport 000c:00:01.0:   device [1def:e101] error status/mask=00004000/00400000
    pcieport 000c:00:01.0:    [14] CmpltTO                (First)
    ahci 000c:01:00.0: AHCI controller unavailable!
    ahci 000c:01:00.0: AER: can't recover (no error_detected callback)
    pcieport 000c:00:01.0: AER: device recovery failed
    pcieport 000c:00:01.0: AER: Multiple Uncorrected (Non-Fatal) error received: 000c:00:00.0

Enabling IOMMU seems to make the problem disappear.
2022-10-17 16:50:07 +02:00
Flatcar Buildbot
1166d236f9 app-misc: Upgrade ca-certificates 3.83 to 3.84 2022-10-17 07:53:26 +00:00
Flatcar Buildbot
c3d3fe075f sys-kernel: Upgrade Kernel 5.15.73 to 5.15.74 2022-10-15 07:31:35 +00:00
Krzesimir Nowak
78429927ca Merge pull request #2209 from flatcar/krnowak/weekly-package-updates
Profile changes for weekly package updates
2022-10-14 13:06:12 +02:00
Sayan Chowdhury
937fac6d07 net-vpn/wireguard-tools: Move to portage-stable 2022-10-14 10:38:46 +00:00
Dongsu Park
4388c058bb Merge pull request #2216 from flatcar/firmware-20221012-main
Upgrade Linux Firmware in main from 20220913 to 20221012
2022-10-13 16:55:12 +02:00
Krzesimir Nowak
977e0affcc changelog: Fix a link 2022-10-13 10:47:34 +02:00
Dongsu Park
75b7a21d40 sys-kernel/coreos-firmware: update cxgb4 version to 1.27.0.0
Fix build issues of coreos-firmware, by bumping the cxgb4 firmware
version to 1.27.0.0.
2022-10-13 09:46:52 +02:00
Flatcar Buildbot
c1c8edd5a0 sys-kernel: Upgrade Kernel 5.15.72 to 5.15.73 2022-10-13 07:40:15 +00:00
Flatcar Buildbot
de054baecd sys-kernel: Upgrade Linux Firmware 20220913 to 20221012 2022-10-13 07:29:55 +00:00
Krzesimir Nowak
13e5c2598f changelog: Add entries 2022-10-12 12:41:49 +02:00
Aniruddha Basak
a1a96c009d app-admin/logrotate: Apply Flatcar modifications 2022-10-12 12:41:49 +02:00
Krzesimir Nowak
40e891505e app-admin/logrotate: Sync with Gentoo
It's from Gentoo commit fef4d6517bb66698022978cd835a56d5701e318a.
2022-10-12 12:24:45 +02:00
Krzesimir Nowak
8a6b90ffc1 Merge pull request #2211 from flatcar/krnowak/dbus-update
sys-apps/dbus: Update to 1.14.4
2022-10-12 12:09:02 +02:00
Dongsu Park
8394036bc7 Merge pull request #2188 from flatcar/rust-1.64.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.63.0 to 1.64.0
2022-10-12 10:31:17 +02:00
Dongsu Park
835970dc2c coreos-base/update_engine: check ld-linux-*.so.2 for glibc 2.34
While glibc 2.33 has /lib64/ld-2.33.so, glibc 2.34 does not have that,
but only /lib64/ld-linux-x86-64.so.2. So we should also check ld-linux-*
as well.

Pulls in https://github.com/flatcar-linux/update_engine/pull/17.
2022-10-11 17:06:44 +02:00
Dongsu Park
448e9aca9b changelog: add changelog for glibc 2.34 2022-10-11 16:11:53 +02:00
Krzesimir Nowak
176b1cc152 sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - don't run sanity checks in pkg_pretend to prevent gcc checks when
    only the binary package is installed.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2022-10-11 16:11:53 +02:00
Krzesimir Nowak
f2f8da03f9 sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit a3d93f81ed9442703de09b684f309d8e1d596571.
2022-10-11 16:11:52 +02:00
Krzesimir Nowak
0a266b2209 changelog: Add entries 2022-10-11 14:04:55 +02:00
Dongsu Park
8e82ad0b20 changelog: add changelog for Rust 1.64.0 2022-10-11 13:41:32 +02:00