30065 Commits

Author SHA1 Message Date
Eugene Yakubovich
8c8d4f4d38 Merge pull request #963 from eyakubovich/master
app-emulation/docker,app-admin/flannel: fix flags
2014-11-18 10:02:16 -08:00
Eugene Yakubovich
3e9f8cfcda app-emulation/docker,app-admin/flannel: fix flags
docker now requires --ip-masq=false if --iptables=false.
fix missing space in flanneld.service
2014-11-17 17:22:38 -08:00
Alex Crawford
5efe824a70 Merge pull request #355 from crawford/ami
scripts/oem/ami: fix bad array subscript
2014-11-17 15:40:16 -08:00
Michael Marineau
4c7b01ecec Merge pull request #354 from marineam/verity
Compute verity hashes of /usr filesystem
2014-11-17 17:35:37 -06:00
Michael Marineau
60867d011f Merge pull request #961 from marineam/verity
sdk-depends: Add cryptsetup/veritysetup to SDK
2014-11-17 17:31:19 -06:00
Michael Marineau
b5d041a25a Merge pull request #149 from marineam/verity
bump(sys-fs/cryptsetup): sync with upstream
2014-11-17 17:30:58 -06:00
Michael Marineau
204f0024fb Merge pull request #353 from marineam/gptprio
disk_util: Set priority and successful attributes in new images
2014-11-17 17:25:50 -06:00
Alex Crawford
febf7a064e scripts/oem/ami: fix bad array subscript
Broken in 8abceaa20e10ff5f3543a54e69b5accddfd5f7b9.
2014-11-17 11:57:46 -08:00
Michael Marineau
3587784bc4 disk_util: Add support for computing verity hashes 2014-11-15 18:58:10 -08:00
Michael Marineau
766f4273cb bump(sys-fs/cryptsetup): sync with upstream 2014-11-15 17:35:38 -08:00
Michael Marineau
776d17b6aa sdk-depends: Add cryptsetup/veritysetup to SDK 2014-11-15 17:10:01 -08:00
Michael Marineau
931610d5bb disk_util: Set priority and successful attributes in new images
Mark the initial copy of CoreOS as 'successful' and with a non-zero
priority. Required to boot with a stricter interpretation of the
partition selection scheme which ignores partitions that have a priority
of zero. The new grub implementation follows this rule and is what the
original ChromeOS spec used too.

For the sake of completeness if multiple partitions are configured in
the json file with this feature they will be prioritized in disk-order.
2014-11-15 16:01:25 -08:00
Alex Crawford
34bc70b10e app-emulation/open-vm-tools: update network script
The current network script gives errors when suspending/resuming a vm running CoreOS with open-vm-tools. this adds a patch to fix it.

Originally written by Oliver Kurth <okurth@vmware.com>.
2014-11-14 18:03:10 -08:00
Alex Crawford
0e066cb078 app-emulation/open-vm-tools: track stable-9.4.6-deploypkg and use mspack 2014-11-14 18:02:59 -08:00
Eugene Yakubovich
114a24592a Merge pull request #901 from eyakubovich/master
flannel: adding flannel, early-docker, sdnotify-proxy
2014-11-14 17:11:00 -08:00
Eugene Yakubovich
167105765d flannel: adding flannel and supporting items: early-docker, sdnotify-proxy 2014-11-14 17:09:32 -08:00
Alex Crawford
4d816af454 dev-libs/libmspack: add libmspack-0.4_alpha 2014-11-14 14:32:20 -08:00
Alex Crawford
b96ee1db0c Merge pull request #959 from crawford/coretest
coretest: recognize InteractiveAuthorizationRequired error
2014-11-11 17:56:59 -08:00
Alex Crawford
a20de3e161 coretest: recognize InteractiveAuthorizationRequired error 2014-11-11 16:39:15 -08:00
Alex Crawford
adbacedc01 Merge pull request #953 from crawford/dns
coreos-base/coreos-init: disable reverse DNS lookups in sshd
2014-11-10 11:15:30 -08:00
Michael Marineau
9eaa52fead Merge pull request #958 from marineam/oem
baselayout: Add OEM lib directories to default search path
2014-11-08 14:15:23 -08:00
Michael Marineau
a3c37d017b baselayout: Add OEM lib directories to default search path
Although this shouldn't strictly be required, OEM binaries can use RPATH
or RUNPATH, there are plenty of corner cases that waste time. For
example if a library in OEM links to another OEM the linker verification
performed by build_packages won't catch it since RPATH would be provided
by the binary that happens to use those libraries, not the library files
themselves. Such tediousness isn't worth wasting more time over and as
long as OEM is after the normal system libraries this should be safe.
2014-11-08 10:43:30 -08:00
Michael Marineau
96d11eb03b Merge pull request #351 from marineam/secure
A pile of goo to support a minimal secure boot demo
2014-11-07 17:43:06 -08:00
Michael Marineau
6a2f6197ce Merge pull request #955 from marineam/secure
sdk-depends: install UEFI firmware for QEMU by default
2014-11-07 17:42:57 -08:00
Michael Marineau
19c4aa596f Merge pull request #957 from marineam/grub
grub: mark new version as stable
2014-11-07 17:32:32 -08:00
Michael Marineau
90e753d913 grub: mark new version as stable
This is the first stable ebuild using our own grub git repo which
includes support for the `linuxefi` command, required for using grub
with Fedora's shim and UEFI secure boot. Includes other minor updates
since the snapshot cut used by the previous stable ebuild:

Andrei Borzenkov (1):
      Use full initializer for initrd_ctx to avoid fatal warnings with older GCC

Andrey Borzenkov (1):
      cleanup: grub_cpu_to_XXX_compile_time for constants

Colin Watson (5):
      * configure.ac: Remove several unnecessary semicolons.
      Support grub-emu on x32 (ILP32 but with x86-64 instruction set)
      Tidy up ChangeLog formatting.
      Add a new "none" platform that only builds utilities
      Fix in-tree --platform=none

Khem Raj (1):
      Fix build with glibc 2.20

Matthew Garrett (1):
      Add support for linuxefi

Michael Chang (2):
      Fix incorrect address reference in btrfs
      * grub-core/osdep/unix/config.c: Remove extraneous comma.

Michael Marineau (12):
      linguas: use en_US as UTF-8 locale, C.UTF-8 is not a standard locale.
      gpt: start new GPT module
      tests: fix path to words file on Gentoo/CoreOS
      gpt: rename misnamed header location fields
      gpt: record size of of the entries table
      gpt: consolidate crc32 computation code
      gpt: add new repair function to sync up primary and backup tables.
      gpt: add write function and gptrepair command

Peter Jones (1):
      Initialized initrd_ctx so we don't free a random pointer from the stack.

Valentin Dornauer (1):
      ACPIhalt: Add more ACPI opcodes.

Vladimir Serbinenko (5):
      Fix wrong commit
      * grub-core/gmodule.pl.in: Accept newer binutils which output
        empty column rather than 0x0.
      * grub-core/commands/keylayouts.c: Ignore unknown keys.
      * grub-core/normal/main.c: Don't drop to rescue console in
        case of password-protected prompt and no menu entries.
      Revert "Use -Wl,--no-relax rather than -mno-relax for uniformity."
2014-11-07 17:26:06 -08:00
Michael Marineau
be01d92415 Merge pull request #352 from mboersma/use-vagrant-virtio
virtualbox_ovf.sh: use virtio network interfaces
2014-11-07 16:54:13 -08:00
Matt Boersma
1d34b98dff virtualbox_ovf.sh: use virtio network interfaces 2014-11-07 16:16:03 -07:00
Michael Marineau
b5916947c3 sdk-depends: install UEFI firmware for QEMU by default
For use with the `qemu_uefi` vm type.
2014-11-07 14:56:35 -08:00
Alex Crawford
33a7bf6d50 Merge pull request #954 from crawford/docker
Revert "app-emulation/docker: bump to v1.3.1"
2014-11-07 14:53:45 -08:00
Alex Crawford
bb1fe1fd15 Revert "app-emulation/docker: bump to v1.3.1"
This reverts commit 87efde004420ce93bca42d531d140d05150e44ba.
Bumps docker-1.3.1.ebuild -> docker-1.3.0-r1.ebuild.
2014-11-07 14:48:27 -08:00
Michael Marineau
0c6adece3d A pile of goo to support a minimal secure boot demo 2014-11-07 13:53:46 -08:00
Greg Kroah-Hartman
057f2ace49 Merge pull request #952 from marineam/secure
Enable kernel module signing
2014-11-07 08:28:08 -08:00
Alex Crawford
ef04c59e23 coreos-base/coreos-init: disable reverse DNS lookups in sshd 2014-11-06 22:03:34 -08:00
Alex Crawford
b92afcccb3 Merge pull request #350 from crawford/ami_json
scripts/oem/ami: output AMI list in JSON format
2014-11-06 20:51:40 -08:00
Alex Crawford
0b1dc3c712 scripts/oem/ami: output AMI list in JSON format 2014-11-06 20:45:18 -08:00
Michael Marineau
9621f09547 coreos-kernel: enable module and kexec signature verification
The module verification is in permissive mode by default, loading
unsigned modules will simply taint the kernel. The kexec verification
doesn't directly impact us right now since we are not using the newer
file based syscall right now.
2014-11-06 16:29:29 -08:00
Michael Marineau
6ac92e93a0 coreos-kernel: prune old kernel versions 2014-11-06 16:16:58 -08:00
Alex Crawford
4b0875fe1b Merge pull request #946 from crawford/open-vm-tools
app-emulation/open-vm-tools: read passwords from shadow database
2014-11-06 15:47:50 -08:00
Alex Crawford
9745288600 app-emulation/open-vm-tools: read passwords from shadow database 2014-11-06 15:47:32 -08:00
Alex Crawford
4b207b31a3 Merge pull request #950 from crawford/cgpt
coreos-base/vboot_reference: cgpt repair command
2014-11-06 13:54:48 -08:00
Alex Crawford
d707a23863 coreos-base/vboot_reference: cgpt repair command
Allow repair command to accept a whole disk or partition.
2014-11-06 12:56:07 -08:00
Michael Marineau
28d21bcb05 Merge pull request #348 from marineam/edk2
vm_image_util: add qemu_uefi image type for easier testing
2014-11-06 12:29:00 -08:00
Michael Marineau
22e4cf6bd9 Merge pull request #949 from marineam/edk2
edk2: fix up UEFI firmware build for QEMU and add secure boot flag
2014-11-06 12:28:44 -08:00
Michael Marineau
810ba021b7 vm_image_util: add qemu_uefi image type for easier testing 2014-11-05 15:53:17 -08:00
Michael Marineau
7bafeb9b93 edk2: install split OVMF_CODE and OVMF_VARS images
Both OVMF and QEMU have gained support for splitting the combined OVMF
image into two, now variable storage is its own file.
2014-11-05 15:47:54 -08:00
Michael Marineau
2bd4c6a7be edk2: fix up UEFI firmware build for QEMU and add secure boot flag 2014-11-05 14:02:53 -08:00
Alex Crawford
73a1e46a97 Merge pull request #947 from crawford/waagent
app-emulation/wa-linux-agent: bump agent, removing local patches
2014-11-05 13:26:59 -08:00
Michael Marineau
f34264429e Merge pull request #948 from carmstrong/docker-v1.3.1
app-emulation/docker: bump to v1.3.1
2014-11-05 13:16:46 -08:00
Chris Armstrong
1f7d3fd2e8 app-emulation/docker: bump to v1.3.1 2014-11-05 12:06:52 -08:00