3268 Commits

Author SHA1 Message Date
Alex Crawford
855f1d8f10 Revert "docker: change cgroup default back to systemd" 2016-02-25 12:35:40 -08:00
Alex Crawford
4b884e263c Merge pull request #1791 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v1.9.1
2016-02-24 13:07:54 -08:00
Alex Crawford
6617cef8ff sys-apps/ignition: bump to v0.3.0 2016-02-24 11:47:27 -08:00
Alex Crawford
1d61fc39aa coreos-base/coreos-cloudinit: bump to v1.9.1 2016-02-24 09:49:38 -08:00
Nick Owens
913021a14a sys-apps/systemd: backport networkd links unlinking fix 2016-02-23 18:22:41 -08:00
Michael Marineau
2d2382bd2f Merge pull request #1782 from mjg59/master
Ignore unknown classes in SELinux base policy
2016-02-23 17:28:20 -08:00
Michael Marineau
d6b137d213 Merge pull request #1787 from marineam/docker
docker: change cgroup default back to systemd
2016-02-23 17:05:50 -08:00
Michael Marineau
e727f38eda docker: change cgroup default back to systemd 2016-02-23 16:56:17 -08:00
Michael Marineau
f66dc3f494 oem-rackspace: fix build 2016-02-23 16:17:28 -08:00
Michael Marineau
dbea374c18 board-packages: build everything that oem packages depend on
The oem packages themselves conflict which makes life tricky but we
should at least create binary packages for the rest.
2016-02-23 12:24:33 -08:00
Michael Marineau
86d03cd78f google-*: remove unused eclasses
Drops pointless dep on pkg-config
2016-02-23 12:24:33 -08:00
Michael Marineau
f18b5c4232 wa-linux-agent: use tarballs instead of git
Simplifies dependencies
2016-02-23 12:24:33 -08:00
Michael Marineau
f87d2c4e3e oem-rackspace: split nova agent container into new package
Makes the oem ebuild as small as possible. Also the new ebuild uses a
tarball which simplifies dependencies and improves caching.
2016-02-23 12:24:33 -08:00
Michael Marineau
d618eeea26 Merge pull request #1784 from marineam/openssl-ec
openssl: remove bindist restriction and enable ec algorithms
2016-02-22 21:37:36 -08:00
Michael Marineau
3aff3aeae2 openssl: remove bindist restriction and enable ec algorithms
The bindist use flag can also be dropped from openssh, now it always
requires an openssl build with 'bindist' missing or unset.
2016-02-22 20:25:23 -08:00
Michael Marineau
39cd9a9b1f openssl: drop 0.9.8 migration
I am dubious of the call to c_rehash in there but we don't need any of
the 0.9.8 migration stuff anyway so just drop it all.
2016-02-22 20:13:10 -08:00
Michael Marineau
1f0ce56f2a openssl: sync up with upstream
Just minor stuff like keywords.
2016-02-22 19:40:40 -08:00
Matthew Garrett
6a671af06e Ignore unknown classes in SELinux base policy
We build a very minimal SELinux policy, so there are cases where code ends up
using classes that don't exist. We attempted to compensate for this case in
3da4994cd332c1f166c9a86ece0c62f9bc02c6f7 but it turns out that this isn't
used for initial policy build. Pass an explicit argument during base policy
build to handle that.

Fixes https://github.com/coreos/bugs/issues/1127
2016-02-20 13:26:17 -08:00
Patrick Baxter
ef381d00a9 app-admin/kubelet-wrapper: add comment pointing to available tags 2016-02-18 11:28:06 -05:00
Patrick Baxter
1ac340aa1d Merge pull request #1779 from pbx0/mantle
coreos-devel/mantle: bump to 0.0.10
2016-02-17 17:41:09 -08:00
Patrick Baxter
cf9706c567 coreos-devel/mantle: bump to 0.0.10 2016-02-17 19:14:02 -05:00
Nick Owens
7fe910e5df app-admin/kubelet-wrapper: work around ${WORKDIR}/${P} not existing 2016-02-17 16:00:28 -08:00
Nick Owens
ffd2f90aa3 app-admin/kubelet-wrapper: fix missing closing quote 2016-02-17 15:40:40 -08:00
Nick Owens
802ccc8d57 Merge pull request #1775 from mischief/docker-point
app-emulation/docker: bump to v1.10.1 + patches
2016-02-17 15:12:49 -08:00
Nick Owens
df8dee2fd9 app-emulation/docker: bump to v1.10.1 + patches 2016-02-17 15:09:23 -08:00
Michael Marineau
06a3e3409b Merge pull request #1770 from marineam/cleanup
coreos/config: remove obsolete files
2016-02-17 15:07:18 -08:00
Matthew Garrett
5409c5c5bf Update go-tspi to master
This is needed in order to obtain full log information for pre-OS events
2016-02-17 12:47:36 -08:00
Michael Marineau
463f9373e9 coreos-base/coreos: add new kublet wrapper script to amd64 images 2016-02-17 11:42:37 -08:00
Michael Marineau
ab9daa3e32 coreos-base/coreos: move a few packages to amd64-only
go-tspi is for TPM support in rkt, rkt is currently amd64 and does arm64
even have TPMs? xenstore is related to the xenserver hack which is
amd64-only. The kublet package is deprecated so don't bother with it
outside amd64.
2016-02-17 11:38:37 -08:00
Michael Marineau
c3c0d34695 coreos-base/coreos: clean up dep list
Make alphabetical and group amd64-only stuff together.
2016-02-17 11:37:13 -08:00
Geoff Levand
86a9958f6c Merge pull request #1771 from glevand/for-merge-kernel
coreos-kernel: Add verbose build
2016-02-16 14:25:09 -08:00
Geoff Levand
ddb4e4d068 coreos-kernel: Make build verbose
To aid in debugging kernel builds set the kernel make variable
V=1 to get verbose build output.

Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-02-16 14:21:01 -08:00
Michael Marineau
ac884617a3 Merge pull request #1772 from marineam/glibc
glibc: update patchs from upstream
2016-02-16 12:38:24 -08:00
Michael Marineau
db8be01fc1 glibc: update patchs from upstream
CVE-2014-8121:
 - https://sourceware.org/ml/libc-alpha/2015-02/msg00617.html
 - https://bugs.gentoo.org/show_bug.cgi?id=552692

CVE-2015-8776:
 - https://sourceware.org/bugzilla/show_bug.cgi?id=18985
 - https://bugs.gentoo.org/show_bug.cgi?id=572416

CVE-2015-8778:
 - https://sourceware.org/bugzilla/show_bug.cgi?id=18240
 - https://bugs.gentoo.org/show_bug.cgi?id=572416

CVE-2015-8779:
 - https://sourceware.org/bugzilla/show_bug.cgi?id=17905
 - https://bugs.gentoo.org/show_bug.cgi?id=572416

CVE-2015-7547:
 - https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html
 - https://bugs.gentoo.org/show_bug.cgi?id=574880
2016-02-16 12:08:17 -08:00
Aaron Levy
a1fddee4a6 Merge pull request #1750 from aaronlevy/kubelet-fly
app-admin/kubelet-wrapper: add script to execute via rkt-fly
2016-02-16 10:52:20 -08:00
Michael Marineau
c0bdb15cc1 coreos/config: remove obsolete files
The version script has been unused since coreos/scripts@2482291e.
The make.conf files have been unused since commit coreos/scripts@99ed29d2.
The others have been obsolete since before coreos even started.
2016-02-15 14:43:37 -08:00
Michael Marineau
57bb543041 Merge pull request #1769 from marineam/polkit
polkit: remove old polkit and spidermonkey
2016-02-10 15:15:52 -08:00
Michael Marineau
2c314a6faf polkit: remove old polkit and spidermonkey
Both of these have a number of bugs and were replaced a while ago.
Recently we started re-using them by accident by updating portage but
not pulling in this fix: https://bugs.gentoo.org/show_bug.cgi?id=560484

Remove them to prevent them from showing up again. :)
2016-02-10 15:09:43 -08:00
Nick Owens
004294973f Merge pull request #1764 from mischief/rkt-libdir
fix up rkt libdir for stage1's
2016-02-10 13:55:22 -08:00
Alex Crawford
d5625337b8 Merge pull request #1768 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v1.9.0
2016-02-10 12:48:21 -08:00
Alex Crawford
7240b7259d Merge pull request #1766 from crawford/kernel
sys-kernel/coreos-*: bump to 4.4.1
2016-02-10 12:48:05 -08:00
Aaron Levy
6c167ce584 app-admin/kubelet-wrapper: trust keys from https 2016-02-10 10:35:52 -08:00
Aaron Levy
22f19374a0 app-admin/kubelet-wrapper: add script to execute via rkt-fly 2016-02-10 10:35:46 -08:00
Alex Crawford
8888e028f0 coreos-base/coreos-cloudinit: bump to v1.9.0 2016-02-09 18:03:43 -08:00
Alex Crawford
9e9c5e241b sys-kernel/coreos-kernel: bump to 4.4.1 2016-02-09 16:51:48 -08:00
Alex Crawford
f11fdc61bb sys-kernel/coreos-sources: bump to 4.4.1 2016-02-09 16:51:48 -08:00
Alex Crawford
1f80337458 sys-kernel/coreos-firmware: bump to latest firmware 2016-02-09 16:51:48 -08:00
Geoff Levand
ed976d3f13 Revert "dev-db/etcd: Set CROS_WORKON_COMMIT for arm64"
This reverts commit 7a8824fc66231ff055b3da41b4edc3e8725ddff5.

etcd-2.2.5 builds for arm64, so a special conditional for it is no longer needed.
2016-02-09 15:24:12 -08:00
Nick Owens
c2c57e995c app-emulation/rkt: bump rev 2016-02-09 13:39:56 -08:00
Nick Owens
cbc7edaa50 app-emulation/rkt: symlink old stage1 aci location to new one 2016-02-09 13:39:47 -08:00