mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-17 18:06:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,391 Commits 629 Branches 394 Tags 166 MiB
6dd1e7433d
Commit Graph

9391 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Sayan Chowdhury
33107d2047 Merge pull request #1364 from flatcar-linux/sayan/skip-tcsd-for-tpm2 
app-crypt/trousers: Skip tscd.service for TPM2 devices
 2021-10-22 16:21:14 +05:30
Sayan Chowdhury
0f2fde9beb app-crypt/trousers: Skip tscd.service for TPM2 devices 
trousers supports TPM 1.2, and fails for TPM 2. This commits
skips the tcsd service if TPM 2 is detected.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2021-10-22 12:28:24 +05:30
Mathieu Tortuyaux
34a256a96f Merge pull request #1305 from flatcar-linux/tormath1/openssl-3 
`dev-libs/openssl`: upgrade to v3
 2021-10-22 07:52:47 +02:00
Mathieu Tortuyaux
6adcc5ab44 coreos-base/update_engine: remove -Werror flag 
with the OpenSSLv3 upgrade, `update_engine` is not fully compatible yet.
See the associated issue for more details.

Let's keep the deprecated SHA functions in the meantime to run the
build.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
1d608a8560 app-crypt/sbsigntools: add patch to support opensslv3 
See also: https://groups.io/g/sbsigntools/topic/patch_fix_openssl_3_0_issue/85903418?p=,,,20,0,0,0::recentpostdate/sticky,,,20,2,0,85903418,previd=1632756467394580924,nextid=1591489833755102589&previd=1632756467394580924&nextid=1591489833755102589

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
a6ad4cfba8 profiles/base: disable bindist useflag for openssh 
there is an ongoing conversation about bindist patches for openssl:
https://marc.info/?l=gentoo-dev&m=163216172229772&w=2

Let's keep an eye on it.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
33d129daf9 profiles/coreos/base: add dev-libs/openssl-3.0.0 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
c83934f12e dev-libs/openssl: apply flatcar changes 
- drop `pkg_postint`
- create `/etc/ssl` with systemd-tmpfiles

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
9e2cb8ebaa dev-libs/openssl: sync with ::gentoo 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-22 07:51:26 +02:00
Sayan Chowdhury
b857e562b5 app-crypt/trousers: Skip tscd.service for TPM2 devices 
trousers supports TPM 1.2, and fails for TPM 2. This commits
skips the tcsd service if TPM 2 is detected.

Uses ConditionSecurity introduced in systemd v248

Fixes flatcar-linux/Flatcar#208

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2021-10-22 00:03:37 +05:30
Kai Lüke
f072be4764 Merge pull request #1358 from guillomep/update_ca_certificate_nss_3_70 
ca-certificates: update to NSS 3.70
 2021-10-21 14:10:18 +02:00
Flatcar Buildbot
6da9c72dd8 sys-kernel: Upgrade Kernel 5.10.74 to 5.10.75 2021-10-21 07:23:01 +00:00
Guillaume Perrin
6bb6fc209e ca-certificates: update to NSS 3.70 
For HTTPS to work and also for it to deliver the security promises we
need to ship the latest certificate database.
Update the package version symlink in oder to fetch the database from
the newest NSS release under
https://ftp.mozilla.org/pub/security/nss/releases/
and do a "ebuild ca-certificates-3.70.ebuild manifest" run.

Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
 2021-10-20 15:48:20 +02:00
Krzesimir Nowak
47215146d1 Merge pull request #1354 from flatcar-linux/linux-5.10.74-main 
Upgrade Linux Kernel in main from 5.10.71 to 5.10.74
 2021-10-19 18:20:12 +02:00
Krzesimir Nowak
73794fb439 Merge pull request #1356 from flatcar-linux/krnowak/eapi-update2 
profiles: Drop keywords for sys-fs/mtools
 2021-10-19 15:40:17 +02:00
william light
76a5f89ca5 Merge pull request #1263 from flatcar-linux/wrl/polkit-0.119 
sys-auth/polkit: bump to 0.119 and apply duktape patchset
 2021-10-19 13:20:50 +02:00
Kai Lüke
e414c011ca Merge pull request #1355 from flatcar-linux/kai/update-ca-certs 
ca-certificates: update to NSS 3.69.1
 2021-10-19 13:03:00 +02:00
Mathieu Tortuyaux
1672cee3f3 profiles: remove introspection for both boards 
it was already the case for ARM64, we just extend it to AMD64.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-19 12:51:48 +02:00
Mathieu Tortuyaux
7a2057149d sys-auth/realmd: remove polkit introspection use 
we don't need to build realmd with introspection support for polkit.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2021-10-19 12:51:48 +02:00
William Light
94cda6bf05 sys-auth/polkit 0.119: re-apply downstream patches 
commit 5c4d184e22fd93ab926878a131150047b54d0b6c
Author: Michael Marineau <michael.marineau@coreos.com>
Date:   Fri Aug 1 14:48:59 2014 -0700

    polkit: fix config install paths, use systemd-tmpfiles

    All configs should be installed to /usr and tmpfiles should be used to
    create and fix directory permissions instead of the ebuild's postinst.
 2021-10-19 12:51:48 +02:00
William Light
03a4f3ce8a sys-auth/polkit 0.119: apply duktape patchset 
https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/35

this should be re-fetched from the above MR when forward-porting to
updated polkit versions.
 2021-10-19 12:46:58 +02:00
Kai Lueke
47acd798fd ca-certificates: update to NSS 3.69.1 
For HTTPS to work and also for it to deliver the security promises we
need to ship the latest certificate database.
Update the package version symlink in oder to fetch the database from
the newest NSS release under
https://ftp.mozilla.org/pub/security/nss/releases/
and do a "ebuild ca-certificates-3.69.1.ebuild manifest" run.
 2021-10-19 12:26:31 +02:00
Sayan Chowdhury
52a3eb0927 Merge pull request #1343 from flatcar-linux/sayan/update-systemd-249.4 
sys-apps: Update systemd to 249.4
 2021-10-19 12:01:15 +05:30
Krzesimir Nowak
0cdd439576 profiles: Drop keywords for sys-fs/mtools 
We just updated this package to 4.0.35, which is declared stable for
both amd64 and arm64.
 2021-10-18 18:33:14 +02:00
William Light
db987cbb1d sys-auth/polkit: bump to 0.119 2021-10-18 14:28:19 +02:00
Flatcar Buildbot
1b0b6b8dea sys-kernel: Upgrade Kernel 5.10.71 to 5.10.74 2021-10-18 07:23:32 +00:00
Dongsu Park
73f121d44b Merge pull request #1330 from oliwer/oliwer/toolbox-bump 
app-admin/toolbox: bump to latest commit
 2021-10-15 16:33:57 +02:00
Dongsu Park
0c78872830 Merge pull request #1337 from flatcar-linux/go-1.17.2-main 
Upgrade Go in main from 1.17.1 to 1.17.2
 2021-10-15 09:10:05 +02:00
Flatcar Buildbot
82b272f32b dev-lang: Upgrade Go 1.17.1 to 1.17.2 2021-10-14 08:40:59 +02:00
Dongsu Park
8e8dd33e3f Merge pull request #1317 from ArkaprabhaChakraborty/arkaprabha/upgrade-curl 
Add Upgrade curl 7.79.1 to package.accept_keywords
 2021-10-14 08:20:02 +02:00
Dongsu Park
c45ad76479 Merge pull request #1329 from flatcar-linux/containerd-1.5.7-main 
Upgrade Containerd in main from 1.5.5 to 1.5.7
 2021-10-13 17:55:18 +02:00
Flatcar Buildbot
06126e5db3 app-emulation: Upgrade Containerd 1.5.5 to 1.5.7 2021-10-13 17:54:20 +02:00
Dongsu Park
d58c5b7e46 Merge pull request #1328 from flatcar-linux/docker-20.10.9-main 
Upgrade Docker in main from 20.10.8 to 20.10.9
 2021-10-13 17:46:19 +02:00
Dongsu Park
189714ccb7 Merge pull request #1320 from aniruddha2000/aniruddha/remove-util-linux-accept-keywords 
Remove util-linux entry from package.accept_keywords
 2021-10-13 08:15:31 +02:00
Dongsu Park
b00e903f4a Merge pull request #1331 from flatcar-linux/vmware-11.3.5-main 
Upgrade open-vm-tools in main from 11.3.0 to 11.3.5
 2021-10-12 10:18:43 +02:00
Sayan Chowdhury
e4fca5dcc4 sys-apps: Update systemd to 249.4 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2021-10-12 10:42:32 +05:30
Jeremi Piotrowski
52e44b5c54 app-emulation/open-vm-tools: refresh patch after upgrade to 11.3.5 
Hgfs-mounter has been dropped from the repository and it let's make the
patch name independent of the package version so that the patch doesn't
have to be touched on every upgrade.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-10-08 14:46:48 +00:00
Krzesimir Nowak
aa25b49b7a Merge pull request #1336 from flatcar-linux/linux-5.10.71-main 
Upgrade Linux Kernel in main from 5.10.70 to 5.10.71
 2021-10-07 11:44:09 +02:00
Sayan Chowdhury
0365faaa3d Merge pull request #1268 from flatcar-linux/sayan/systemd-v249 
sys-apps/systemd: Update to v249
 2021-10-07 14:54:52 +05:30
Flatcar Buildbot
1c2eef84eb sys-kernel: Upgrade Kernel 5.10.70 to 5.10.71 2021-10-07 07:24:20 +00:00
Sayan Chowdhury
773908d59c sys-apps/baselayout: Fix the legend for failed systemd units 
systemd v249 changes the usual failed units "●" to show "×".
This commit adapts accordingly to display the correct failed units

For compatibility with the longer-cadence channels, we continue to
support "●"

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2021-10-07 07:24:03 +00:00
Sayan Chowdhury
59a9ef8d0e profiles: Disable the cgroup-hybrid use for systemd 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2021-10-07 07:24:03 +00:00
Sayan Chowdhury
043ef47f5b sys-apps/systemd: Apply Flatcar patches 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2021-10-07 07:24:03 +00:00
Sayan Chowdhury
ff243aa613 sys-apps/systemd: Sync with Gentoo upstream; updates to v249.2 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-10-06 12:31:31 +05:30
Flatcar Buildbot
88f4aa75e0 coreos-base: Upgrade oem-vmware 11.3.0 to 11.3.5 2021-10-05 16:43:59 +00:00
Flatcar Buildbot
acc8387bfb app-emulation: Upgrade open-vm-tools 11.3.0 to 11.3.5 2021-10-05 16:43:59 +00:00
Olivier Duclos
9bfe9d0997 app-admin/toolbox: bump to latest commit 2021-10-05 16:40:59 +02:00
Flatcar Buildbot
fcdaa45fb4 app-emulation: Upgrade Docker 20.10.8 to 20.10.9 2021-10-05 14:08:42 +00:00
Dongsu Park
eaeea59b17 Merge pull request #1327 from flatcar-linux/dongsu/vim-8.2.3428 
profiles: accept keywords for vim 8.2.3428
 2021-10-05 15:13:11 +02:00
Dongsu Park
223f17c66c profiles: accept keywords for vim/vim-core 8.2.3428 
Now that we update vim to 8.2.3428, we need to accept keywords
`~amd64` and `~arm64` for both vim and vim-core.
 2021-10-05 11:26:44 +02:00