30065 Commits

Author SHA1 Message Date
Euan Kemp
cb1561e953 app-emulation/docker-proxy: update for 17.04 2017-04-11 19:52:43 -07:00
Euan Kemp
2f8bbba8ea app-emulation/runc: update for docker 17.04
Corresponds to the commit referenced here: https://github.com/docker/docker/blob/v17.04.0-ce/hack/dockerfile/binaries-commits#L6
2017-04-11 19:52:43 -07:00
Euan Kemp
d759b3b179 Merge pull request #2517 from euank/tini
sys-process/tini: add tini ebuild
2017-04-11 19:47:12 -07:00
Euan Kemp
c331540d2a sys-process/tini: add tini ebuild
Even though there's an upstream gentoo ebuild, it depends on cmake
(which had trouble cross-compiling for arm64).

tini is a simple enough program that writing our own makefile for it is
pretty easy, and it'll pay off in reduced buildtime and dependencies for
now since we can avoid dragging in cmake.

Note that we don't bother providing the static useflag and just make it
always static since we're packaging this for docker regardless.
2017-04-11 19:45:57 -07:00
Benjamin Gilbert
04c48fe7ee sys-kernel/coreos-modules: Enable NVMe over RDMA 2017-04-11 19:28:40 -07:00
Benjamin Gilbert
007c5b1430 sys-kernel/coreos-*: bump to v4.10.9 2017-04-11 19:26:25 -07:00
David Michael
c92f0362c9 Merge pull request #537 from dm0-/git
Upgrade Git
2017-04-11 16:34:34 -07:00
David Michael
895f814a7a bump(dev-vcs/git): sync with upstream 2017-04-11 13:54:18 -07:00
David Michael
250ff3f048 bump(sys-apps/less): sync with upstream 2017-04-11 13:54:07 -07:00
David Michael
ef54fba00d app-emulation/qemu: sync with upstream
The Gentoo ebuild has modified the dependencies to require static
libraries for the system programs instead of just the user ones.

The only CoreOS changes to the ebuild are to add the vpc patch, and
to mark arm64 stable (even though it isn't used).
2017-04-11 13:20:50 -07:00
Euan Kemp
430d25cda8 Merge pull request #2508 from lucab/ups/kubelet-recursive-datadir
app-admin/kubelet-wrapper: mark kubelet datadir volume as a recursive mount
2017-04-11 12:04:24 -07:00
David Michael
8d314707a0 bump(metadata/glsa): sync with upstream 2017-04-11 11:54:59 -07:00
David Michael
59963eb0b6 Merge pull request #2512 from dm0-/glsa
Sync GLSAs
2017-04-10 17:53:10 -07:00
David Michael
6938a8f344 Merge pull request #535 from dm0-/glsa
Sync GLSAs
2017-04-10 17:52:57 -07:00
Euan Kemp
dcbc1784f3 app-emulation/docker: update broken link 2017-04-10 16:31:26 -07:00
Euan Kemp
a85d690353 app-emulation/containerd: update for docker 17.04
This corresponds to the versions specified by upstream docker: https://github.com/docker/docker/blob/v17.04.0-ce/hack/dockerfile/binaries-commits#L7
2017-04-10 16:31:26 -07:00
Euan Kemp
39a2594468 app-emulation/containerd: update to use go1.7
As far as I know there's no reason we were using 1.6, and upstream
recommends 1.7 nowadays.
2017-04-10 15:03:15 -07:00
Euan Kemp
d285b1129b app-emulation/docker: bump to 17.04.0-ce 2017-04-10 14:56:30 -07:00
Benjamin Gilbert
cd4e3746cc oem/ami: Drop in favor of plume 2017-04-07 19:44:20 -07:00
David Michael
6dce1e786f profiles: drop arm64 curl accept_keywords 2017-04-07 17:12:37 -07:00
Benjamin Gilbert
c45bd4fac8 coreos-base/coretest: Drop package
Subsumed by kola.
2017-04-07 16:01:19 -07:00
David Michael
e6fd5a7bef bump(dev-libs/libtasn1): sync with upstream 2017-04-07 15:01:36 -07:00
David Michael
5785a6ce97 bump(net-misc/curl): sync with upstream 2017-04-07 14:55:33 -07:00
David Michael
d4bd5db5a4 bump(metadata/glsa): sync with upstream 2017-04-07 14:53:34 -07:00
Geoff Levand
36d2613ba5 Merge pull request #2509 from glevand/for-merge-perl
profile: Enable arm64 perl
2017-04-06 12:32:58 -07:00
Benjamin Gilbert
45dffca9b6 Merge pull request #661 from bgilbert/package-lists
build_image_util: Don't query the $BUILD_DIR vdb
2017-04-06 12:27:45 -07:00
Benjamin Gilbert
f431e7c1ad Merge pull request #659 from bgilbert/unique-build-ids
common: Don't export COREOS_BUILD_ID
2017-04-06 12:25:34 -07:00
Benjamin Gilbert
3e27bdcc45 common: Don't export COREOS_BUILD_ID
5a76e4e5e9027443ef2014d8e1d06e9baa9e50aa started exporting COREOS_BUILD_ID
whenever it was found in version.txt, even if its value was blank. Because
COREOS_BUILD_ID is in ENVIRONMENT_WHITELIST, this caused generated build IDs
to be propagated into the SDK chroot environment and reused for every build
in a "cork enter" session. Stop exporting COREOS_BUILD_ID when we set it
ourselves.

See also 8e754f9c2bd4b4ec6561613ff57c095886877960.
2017-04-06 12:23:51 -07:00
Geoff Levand
91c84f95a7 profile: Enable arm64 perl
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-06 09:59:11 -07:00
Michael Marineau
8ef89c7b15 Merge pull request #2510 from marineam/gangue
mantle: bump to 0.4.0, include gangue
2017-04-05 15:00:50 -07:00
Michael Marineau
0cb85e22b4 mantle: bump to 0.4.0, include gangue 2017-04-05 14:22:39 -07:00
Luca Bruno
51650980eb app-admin/kubelet-wrapper: mark kubelet datadir volume as a recursive mount
So far `/var/lib/kubelet` was mounted as an implicit non-recursive mount.
This changes the wrapper to an explicit recursive mount.

As shown in https://github.com/kubernetes/kubernetes/issues/38498#issuecomment-282493681,
current non-recursive behavior seems to confuse the kubelet which
is incapable of cleaning up resources for orphaned pods, as the
extisting mountpoints for them are not available inside kubelet
chroot.
With `recursive=true`, those mounts are made available in the
chroot and can be unmounted on the host-side from kubelet chroot
via shared back-propagation.

Fixes https://github.com/coreos/bugs/issues/1831
2017-04-05 08:38:55 +00:00
David Michael
79b1f4cd47 Merge pull request #663 from dm0-/signed-tags
Require signed release tags
2017-04-03 14:43:49 -07:00
David Michael
1f2a44214c tag_release: always sign release tags 2017-04-03 14:22:01 -07:00
David Michael
b44460ca0d Merge pull request #662 from dm0-/bootstrap-sigs
Upload package signatures from the bootstrap process
2017-03-31 17:01:36 -07:00
David Michael
266829d7e1 build_toolchains: upload package signatures 2017-03-31 16:50:29 -07:00
David Michael
3a24149f66 bootstrap_sdk: upload package signatures 2017-03-31 16:50:12 -07:00
David Michael
f7a41994f4 Merge pull request #660 from dm0-/signed-binpkg
Sign uploaded binary packages
2017-03-30 17:10:33 -07:00
David Michael
17e4ee2dcd release_util: allow signing uploaded packages 2017-03-30 16:53:15 -07:00
David Michael
e80eddd0c8 release_util: support signing directories 2017-03-30 16:53:10 -07:00
David Michael
6b86520bf4 release_util: store file signatures in their own directory
This allows signing files under paths owned by other users.
2017-03-30 16:52:44 -07:00
Benjamin Gilbert
d0e89d1752 build_image_util: Don't query the $BUILD_DIR vdb
Jenkins uses separate chroots for package and image builds, so
$BUILD_DIR may not have the relevant packages installed.
2017-03-30 15:43:56 -07:00
Euan Kemp
8eb77d504c Merge pull request #2505 from euank/really-r1
sys-kernel/coreos-kernel: correct naming error
2017-03-30 15:39:22 -07:00
Euan Kemp
46ef0c9796 sys-kernel/coreos-kernel: correct naming error 2017-03-30 15:28:13 -07:00
Euan Kemp
a1956771b2 Merge pull request #2504 from euank/cve-2017-7184
sys-kernel/coreos-sources: apply patch for CVE-2017-7184
2017-03-30 14:32:34 -07:00
Euan Kemp
c654aeb054 sys-kernel/coreos-sources: apply patch for CVE-2017-7184 2017-03-30 13:26:13 -07:00
Benjamin Gilbert
d8fb403f69 build_image_util: Fix warnings when building OEM ACIs
INFO    build_oem_aci: Writing coreos_oem_gce_aci_stage_packages.txt
    awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
    INFO    build_oem_aci: Writing coreos_oem_gce_aci_stage_licenses.txt
    awk: cmd. line:1: fatal: cannot open file `/build/amd64-usr/var/db/pkg//DEPEND' for reading (No such file or directory)
2017-03-29 16:31:05 -07:00
Benjamin Gilbert
d579f6f8e1 Merge pull request #2500 from bgilbert/bootengine
sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race
2017-03-29 12:49:31 -07:00
Benjamin Gilbert
22c5664507 sys-kernel/bootengine: Fix dracut breakpoints and /sysroot/boot race 2017-03-29 12:01:18 -07:00
Benjamin Gilbert
1e63ab8ae6 Merge pull request #534 from bgilbert/checkbashisms
bump(dev-util/checkbashisms): sync with upstream
2017-03-28 13:33:14 -07:00