22914 Commits

Author SHA1 Message Date
Kai Lüke
aab1e0773c sys-apps/baselayout: Point to latest repo state
This pulls in
https://github.com/kinvolk/baselayout/pull/8
to add tmpfile directives for for /opt and /opt/bin
2020-11-24 14:27:43 +09:00
Flatcar Buildbot
47d4197e87 sys-kernel: Upgrade coreos-kernel 5.9.8 to 5.9.10 2020-11-23 07:22:51 +00:00
Thilo Fromm
2bebee3291 Merge pull request #127 from kinvolk/t-lo/update-to-gcc-9.3.0
dev-util,sys-devel,sys-libs,sys-kernel: update to gcc-9.3.0
2020-11-18 14:52:55 +01:00
Thilo Fromm
bb152ce134 Merge pull request #693 from kinvolk/t-lo/update-to-gcc-9.3.0
dev-util/profiles/sys-devel/sys-libs: update to gcc-9.3.0
2020-11-18 14:52:48 +01:00
Thilo Fromm
7b0bad618f sys-(devel|libs|kernel),profiles: make upstream gdb work, add gcc-9.3.0 changes
This PR includes the necessary changes to upgrade the SDK compiler to gcc-9.3.0.
It also changes the gdb-9.2 recipe to work with the Flatcar SDK.

The changes include:

sys-devel/gdb/gdb-9.2.ebuild: use EAPI6 to work around BDEPEND emerge bug
update sys-libs/nss-usrfiles to nss-usrfiles-2.30.ebuild to support glibc > 2.29
update sys-kernel/README.md to call out need for updating kernel-headers, perf
add sys-libs/glibc/README.md outlining our changes to the glibc recipe
update profiles/coreos/base/package.accept_keywords to include new toolchain

The change also adds a README to
sys-libs/glibc/README.md
and it improves on a README in
sys-kernel/README -> sys-kernel/README.md

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:51:35 +01:00
Thilo Fromm
361ad25ee4 dev-util,sys-(devel|libs|kernel): modify gcc-9.3.0 updates, clean up
This commit introduces Flatcar specific modification
to the Gentoo recipes for updating to gcc-9.3.0 introduced
in the previous commit. The changes are required
in order to make things build with the Flatcar SDK.

The commit also removes old, stale, unused recipes.

The changes include:

dev-util/perf/perf-4.9.13.ebuild: fix binutils ebuild RDEPEND
dev-util/perf/perf-5.8.ebuild: remove python3_{8} compat; unmask arm64, amd64
sys-devel/binutils: remove old, stale versions
sys-devel/binutils/binutils-2.35.ebuild: backport to EAPI6 because our
                 outdated emerge does not handle BDEPEND dependencies correctly,
                 resulting in BDEPEND being pulled in as runtime deps.
                 Unmask for amd64 and arm64.
sys-devel/binutils/binutils-9999.ebuild: backport to EAPI6
net-dns/dnsmasq: remove old, stale versions
sys-devel/crossdev: remove old versions
sys-devel/gcc: remove old versions
sys-devel/gcc/gcc-9.3.0-r1.ebuild: use EAPI6 because of emerge
                 BDEPEND issue (see above)
sys-devel/libtool/libtool-2.4.6-r6.ebuild: use EAPI6 because of emerge
                 BDEPEND issue (see above)
sys-kernel/linux-headers: remove old versions
ys-kernel/linux-headers/linux-headers-5.8.ebuild: unmask for amd64, arm64

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:44:40 +01:00
Thilo Fromm
81d4ed8940
Merge pull request #102 from kinvolk/t-lo/build_packages-fix-symlink-run-gcc-config
build_packages, build_image_util.sh: fix up liblto symlink
alpha-2697.0.0
2020-11-18 14:42:21 +01:00
Thilo Fromm
abbb97f075 sys-devel: import upstream gdb-9.2, strace-5.9
Import upstream recipes to enable gcc-9.3.0 builds.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:35:35 +01:00
Thilo Fromm
7e0f49e2fc dev-util,sys-(devel|libs|kernel): import recipes for update to gcc-9.3.0
This commit includes the necessary changes to upgrade the SDK
compiler to gcc-9.3.0. The changes include:

eclass: update toolchain.eclass to EAPI7
acct-(user|group): add dnsmasq user / group
net-dns/dnsmasq: update to dnsmasq-2.82
dev-util/perf: update to perf-5.8.ebuild
sys-devel/binutils: update to binutils-2.35.ebuild
sys-libs/binutils-libs: update to binutils-libs-2.35.ebuild
sys-devel/crossdev: update to crossdev-20200801.ebuild
sys-devel/gcc: update to gcc-9.3.0-r1.ebuild
sys-devel/libtool: update to libtool-2.4.6-r6.ebuild
sys-kernel/linux-headers: update to linux-headers-5.9.ebuild

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:03:42 +01:00
Kai Lüke
9f84992c21 Merge pull request #689 from kinvolk/kai/extend-filesystem-race
coreos-base/coreos-init: Update to latest repository state
2020-11-18 20:43:55 +09:00
Kai Lüke
f3d421f45d coreos-base/coreos-init: Update to latest repository state
This pulls in
https://github.com/kinvolk/init/pull/31
to make extend-filesystems more robust against a race.
2020-11-18 20:43:30 +09:00
Dongsu Park
233ba141b8 Merge pull request #690 from kinvolk/dongsu/sdk-dwarves
profiles: make SDK include dev-util/dwarves
2020-11-18 12:33:25 +01:00
Dongsu Park
2ee2a3bfc0 Merge pull request #126 from kinvolk/dongsu/sdk-dwarves
dev-util/dwarves: introduce new dev tool dwarves
2020-11-18 12:33:15 +01:00
Dongsu Park
44ac3dbd92 Merge pull request #691 from kinvolk/dongsu/kernel-configs-20201117
sys-kernel: enable BPF_JIT, POWER_SUPPLY, overlayfs options
2020-11-18 11:23:51 +01:00
Dongsu Park
8243944c99 sys-kernel: enable metacopy and redirect_dir for overlayfs
Enable CONFIG_OVERLAY_FS_METACOPY, metadata only copy up feature
in overlayfs. When turned on, overlayfs will only copy up metadata
when a metadata specific operation like chown/chmod is performed.
Full file will be copied up later when file is opened for WRITE
operation. More or less like delayed data copy up operation.

Enable CONFIG_OVERLAY_FS_REDIRECT_DIR, which is equivalent to
"redirect_dir=on" in the kernel command-line. When turned on, overlayfs
will copy up directory first, before the actual contents.

See also https://github.com/kinvolk/Flatcar/issues/170
2020-11-17 16:25:16 +01:00
Dongsu Park
935f8c0c10 profiles: make SDK include dev-util/dwarves
To build Kernel with `CONFIG_DEBUG_INFO_BTF`, we need to make `pahole`
in dwarves included in the Flatcar SDK.

To do that, we need to make it accept `~amd64` keywords for dwarves
and binutils.
Also enable USE flag `python_single_target_python3_6` for dwarves.
2020-11-17 15:47:23 +01:00
Dongsu Park
a901ea801d dev-util/dwarves: introduce new dev tool dwarves
To build Kernel with `CONFIG_DEBUG_INFO_BTF`, we need to get pahole, a
part of dwarves included in the Flatcar SDK.
So simply import `dev-util/dwarves` from upstream Gentoo.
2020-11-17 15:37:14 +01:00
Dongsu Park
92a5bb56e8 sys-kernel: enable CONFIG_POWER_SUPPLY
CONFIG_POWER_SUPPLY enables power supply class used to represent
battery, UPS, AC or DC power supply properties to user-space.
It defines core set of attributes, which should be applicable to
most power supplies out there.

See also https://github.com/kinvolk/Flatcar/issues/215.
2020-11-17 15:02:28 +01:00
Dongsu Park
50fdab4387 sys-kernel: enable CONFIG_BPF_JIT_ALWAYS_ON
CONFIG_BPF_JIT_ALWAYS_ON enables BPF JIT and removes BPF interpreter
to avoid speculative execution of BPF instructions by the interpreter.

See also https://github.com/kinvolk/Flatcar/issues/185.
2020-11-17 15:01:27 +01:00
Thilo Fromm
ac93ed4f5d Merge pull request #683 from kinvolk/t-lo/update-bzip2-tp-1.0.8-r1
bzip2: update to 1.0.8-r1
2020-11-17 14:23:24 +01:00
Thilo Fromm
02cca6360a app-arch/bzip2: update to 1.0.8-r1
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-17 13:58:09 +01:00
Dongsu Park
d4be1e865e
Merge pull request #101 from kinvolk/dongsu/fix-kernel-symlink-memcpy
build_library: Ignore broken symlink in Kernel source tree
2020-11-17 13:28:08 +01:00
Kai Lüke
20712d803b sys-apps/seismograph: Update to latest repo state
This pulls in
https://github.com/kinvolk/seismograph/pull/5
to fix a typo in the usage output.
2020-11-17 20:24:34 +09:00
Thilo Fromm
22b08b0ae4 build_packages, build_image_util.sh: fix up liblto symlink
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-16 19:06:59 +01:00
Thilo Fromm
f620c9fc23 Merge pull request #687 from kinvolk/t-lo/update-to-ntp-4.2.8_p15
update to ntp-4.2.8_p15
2020-11-16 15:46:33 +01:00
Thilo Fromm
08c55b65ec Merge pull request #125 from kinvolk/t-lo/add-ntp-group-and-user
acct-(group|user)/ntp: add NTP group and user
2020-11-16 14:51:08 +01:00
Thilo Fromm
f0fda0860a net-misc/ntp/Manifest: remove spurious _p13 hashes 2020-11-16 14:47:44 +01:00
Dongsu Park
f4c2f95dc0 Merge pull request #686 from kinvolk/dongsu/go-filter-ldflags-all
eclass: remove also other optimization flags with -Wl,-O*
2020-11-16 14:05:56 +01:00
Thilo Fromm
0a9034480a net-misc/ntp-4.2.8_p15: Apply CoreOS changes
- Check out our previous ntp.conf and service units
  - Disable USE=threads
  - Add USE=perl, disabled to skip the scripts subdir
  - Do the /etc -> /usr/share + tmpfiles dance for ntp.conf
  - Drop unused init scripts and pkg_postinst-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-16 13:50:41 +01:00
Thilo Fromm
a2036f5771 net-misc/ntp: ingest gentoo upstream 4.2.8_p15
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-16 13:46:10 +01:00
Thilo Fromm
f7314c720b acct(group|user)/ntp: add NTP group and user
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-16 13:35:47 +01:00
Dongsu Park
dd15b2ee4d eclass: remove also other optimization flags with -Wl,-O*
We need to filter not only `-Wl,-O1`, but also other flags like
`-Wl,-O2`, `-Wl,-Og`, `-Wl,-Os`, etc. Otherwise, SDK build would fail,
for example, as its default `$LDFLAGS` includes `-Wl,-O2`.

We need to manually strip only the optimization element of
comma-separated flags, e.g. from `-Wl,-O1,-s` to `-Wl,-s`.
To support multiple characters that can follow `-O`, e.g. `-Ofast`,
we should use regexp like `[[:alnum:]]*`.
2020-11-16 13:07:04 +01:00
Thilo Fromm
30b641b642 Merge pull request #124 from kinvolk/t-lo/update-to-cifs-utils-6.11
net-fs/cifs-utils: update to 6.11
2020-11-16 09:18:44 +01:00
Thilo Fromm
dc242f0fc9 Merge pull request #684 from kinvolk/t-lo/patch-trousers
trousers: add patch to fix CVE issues
2020-11-16 09:18:16 +01:00
Dongsu Park
1310b3b004 Merge pull request #680 from kinvolk/linux-5.9.8-main
Upgrade Linux Kernel in main from 5.9.1 to 5.9.8
2020-11-13 17:43:42 +01:00
Dongsu Park
6eae505f16 build_library: Ignore broken symlink in Kernel source tree
Kernel source tree started to have a broken link
`tools/testing/selftests/powerpc/copyloops/memcpy_mcsafe_64.S`.
Especially in case of Kernel 5.8.18, like:

```
broken link: /usr/src/linux-5.8.18-coreos/tools/testing/selftests/powerpc/copyloops/memcpy_mcsafe_64.S
ERROR   build_packages: test_image_content: Failed symlink check
```

Ignore the symlink when checking broken symlinks.
2020-11-13 17:27:49 +01:00
Vincent Batts
620c7ff4ee Merge pull request #685 from kinvolk/dongsu/fix-mantle-url
.github: fix mantle URL for downloading cork
2020-11-13 11:12:53 -05:00
Thilo Fromm
a6fb769199 net-fs/cifs-utils: update to 6.11
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-13 16:58:05 +01:00
Dongsu Park
b561d71285 .github: fix mantle URL for downloading cork
The repo `github.com/flatcar-linux/mantle` has been moved to
`github.com/kinvolk/mantle`. However, Github Actions still fetch cork
binaries from the original URL, by running `curl` without `-L`. So the
request does not get redirected to the new URL. As a result,
`CORK_VERSION` becomes null.

Fix it by replacing `flatcar-linux` with `kinvolk`, as well as adding
`-L` to the curl command, just in case.
2020-11-13 16:52:22 +01:00
Thilo Fromm
0e753a02f8 app-crypt/trousers: add patch for CVEs
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-13 16:44:29 +01:00
Dongsu Park
da29970ce8 Merge pull request #681 from kinvolk/dongsu/open-vm-tools-11.2.0
app-emulation/open-vm-tools: update to 11.2.0
2020-11-13 16:29:19 +01:00
Dongsu Park
758512c7a0 Merge pull request #677 from kinvolk/go-1.15.4-main
Upgrade Go in main from 1.15.3 to 1.15.5
2020-11-13 15:34:19 +01:00
Dongsu Park
5f7126329e eclass: remove -Wl,-O1 from LDFLAGS passed to go_export
Go 1.15.5 fixed a security issue CVE-2020-28366, by rejecting certain
LDFLAGS for CGO. See https://github.com/golang/go/issues/42559.

However, that change breaks builds based on the Flatcar build chain,
because `go_export` sets `$LDFLAGS` to `-Wl,-O1 -Wl,--as-needed`.
As a result, Go build fails like:

```
go build runtime/cgo: invalid flag in go:cgo_ldflag: -Wl,-O1
```

We need to remove the flag `-Wl,-O1` from $LDFLAGS before building the
Go runtime, to fix the failure.
2020-11-13 15:25:57 +01:00
Dongsu Park
0c75022065 Merge pull request #676 from kinvolk/dongsu/samba-sssd
net-fs,sys-auth: Update samba 4.11.13, sssd 2.3.1
2020-11-13 15:10:23 +01:00
Dongsu Park
b8ba9979e4 Merge pull request #122 from kinvolk/dongsu/samba-sssd
dev-libs, sys-libs: Updated libs needed by samba, sssd
2020-11-13 15:10:12 +01:00
Dongsu Park
db5635cca2 Merge pull request #59 from kinvolk/dongsu/pkgconfig-0.29.2-alpha
dev-util/pkgconfig: bump to 0.29.2 for PKG_CHECK_MODULES_STATIC for alpha
2020-11-13 15:08:07 +01:00
Dongsu Park
e27a7f1bfe Merge pull request #675 from kinvolk/dongsu/bind-tools-gssapi
profiles: enable gssapi for bind-tools in SDK
2020-11-13 15:04:35 +01:00
Dongsu Park
d1952f9a5e Merge pull request #671 from kinvolk/dongsu/shadow-4.8
sys-apps/shadow: update to 4.8-r5, apply Flatcar changes
2020-11-13 15:00:33 +01:00
Dongsu Park
b04b8588a0 Merge pull request #678 from kinvolk/kai/keep-network-configuration
coreos-base/coreos-(cloud)init: Point to flatcar-master
2020-11-13 14:25:25 +01:00
Dongsu Park
0985aa7629 Merge pull request #682 from kinvolk/sayan/update-open-iscsi
sys-block/open-iscsi: Add the version 2.1.2
2020-11-13 13:19:00 +01:00