14983 Commits

Author SHA1 Message Date
Dongsu Park
226a7191dc net-libs/gnutls: update to 3.7.1
Update gnutls to 3.7.1, mainly to address security vulnerabilities:
* CVE-2021-20231
* CVE-2021-20232
2021-04-20 10:02:23 +02:00
Dongsu Park
3fb5511b30 app-admin/updateservicectl: set COREOS_GO111MODULE to off
app-admin/updateservicectl also belongs to the cases where Go module is
not supported due to its old source code.
2021-04-19 17:45:08 +02:00
Dongsu Park
f9ff6599a9 app-emulation/acbuild: set COREOS_GO111MODULE to off
app-emulation/acbuild also belongs to the cases where Go module is not
supported due to its old source code.
2021-04-19 17:44:17 +02:00
Dongsu Park
9541ac9210 app-emulation/cri-tools: default to the default COREOS_GO_VERSION
We do not need to set COREOS_GO_VERSION to a specific version, unless
it is necessary to avoid build issues in certain cases like Docker.
Simply remove COREOS_GO_VERSION from the ebuild of cri-tools.
2021-04-19 17:43:08 +02:00
Dongsu Park
6b83baa45f eclass: update COREOS_GO_VERSION to 1.16
We need to update COREOS_GO_VERSION in eclass files to 1.16, to make
builds work with Go 1.16 by default.
2021-04-19 17:42:19 +02:00
Sayan Chowdhury
ad6568b1f8 dev-libs/openssl: Apply Flatcar changes
- Drop binddist from RESTRICT variable
- Drop pkg_postinst
- Create /etc/ssl with tmpfiles (and package it for the SDK).

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 12:54:34 +02:00
Sayan Chowdhury
a005bf1e34 dev-libs/openssl: Sync with Gentoo upstream
Sync ref: 1b9f956295

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 12:54:34 +02:00
Sayan Chowdhury
8ab974edb4 .github: Bump Golang version to 1.16 for Github Actions
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:24 +02:00
Sayan Chowdhury
44f43b4f7f app-emulation/amazon-ssm-agent: set env GO111MODULE to "off"
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:24 +02:00
Sayan Chowdhury
2a08005843 dev-lang/go: Update the manifest of golang
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:23 +02:00
Sayan Chowdhury
6d53f9d3bd Add the GO111MODULE
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:01 +02:00
Sayan Chowdhury
5d0a558423 dev-lang/go: Bump Go to 1.16.2
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-19 11:59:01 +02:00
Dongsu Park
301cfa8be7 Merge pull request #163 from kinvolk/sayan/update-dnsmasq
net-dns/dnsmasq: Sync with Gentoo upstream; updates to 2.83
2021-04-19 11:49:18 +02:00
Dongsu Park
08e8dd1fed Merge pull request #162 from kinvolk/sayan/update-git-2.26.3
dev-vcs/git: Sync with upstream; updates to 2.26.3
2021-04-19 11:45:20 +02:00
Mathieu Tortuyaux
9d61ce382e app-emulation/cri-tools: update checksums 2021-04-12 15:32:05 +02:00
Sayan Chowdhury
6cef7c175f eclass: Add the eclasses required for the LUA suite
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-09 16:36:37 +05:30
Sayan Chowdhury
ec5a1a7d7d net-dns/dnsmasq: Sync with Gentoo upstream
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2021-04-09 11:02:46 +00:00
Dongsu Park
c91afd01bf Merge pull request #160 from kinvolk/dongsu/sqlite-3.34.1
dev-db/sqlite: update to 3.34.1
2021-04-07 13:56:08 +02:00
Sayan Chowdhury
de9449483a net-dns/dnsmasq: Sync with Gentoo upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-07 11:47:29 +00:00
Sayan Chowdhury
ac44bd348c dev-vcs/git: Sync with upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-04-07 11:40:34 +00:00
Margarita Manterola
ca608aaf52 sys-kernel/bootengine: Enable iSCSI netroot devices on Flatcar
This change pulls in the latest bootengine version, that enables ISCSI
support in dracut and avoids tearing down the network when using netroot

See https://github.com/kinvolk/bootengine/pull/22 for more information.
2021-04-07 12:34:09 +02:00
Marga Manterola
71c60a414d Merge pull request #159 from kinvolk/marga-kinvolk/move-dracut
sys-kernel/dracut: move to coreos-overlay
2021-04-07 12:30:51 +02:00
Marga Manterola
2d05b3499a Merge pull request #923 from kinvolk/marga-kinvolk/dracut-iscsi
Move dracut to coreos-overlay, add Flatcar patch
2021-04-07 12:30:33 +02:00
Dongsu Park
39cc70b635 dev-util/ccache: delete ccache completely
As we do not use ccache at all, we should simply clean up ccache
from all of the code, to shrink size of the SDK.
2021-04-06 09:22:00 +02:00
Dongsu Park
96a868fb46 profiles: force to use ssl USE flag for wget
This reverts commit f8dda51d546b466d9faf0c936b2ad5592ab1639e.

Recently we dropped `bindist` from `RESTRICT` in openssl, so it is
now possible to turn on `ssl` for wget again. The issue of openssl being
blocked by `masked by: bindist in RESTRICT` etc. has now disappeared.

Fixes https://github.com/kinvolk/Flatcar/issues/149
2021-04-06 09:09:31 +02:00
Flatcar Buildbot
d8026a987a dev-lang: Upgrade Go 1.15.10 to 1.15.11 2021-04-05 07:28:56 +00:00
Werner Buck
5dbe0c8922 Enable MDIO_BCM_UNIMAC to fix link when network link already used in earlier stages like PXE/UEFI boot 2021-04-02 10:56:09 +02:00
Dongsu Park
611177cd53 dev-util/boost-build: delete boost-build 1.67
For some reason, the old version of boost-build 1.67 is still here.
As we already have boost-build 1.75 in portage-stable, we should
completely delete boost 1.67.
2021-04-01 16:42:36 +02:00
Dongsu Park
5ba7da3d52 dev-db/sqlite: update to 3.34.1
Update dev-db/sqlite to 3.34.1, mainly to address CVE-2021-20227.

The new ebuild fixes also issues in cross toolchains, where the
configure script of sqlite could not find out a correct location
of `dev-lang/tcl`.
See also https://github.com/gentoo/gentoo/commit/b2b164ba52c0 .

Fixes https://github.com/kinvolk/Flatcar/issues/367 .
2021-03-31 17:06:58 +02:00
Dongsu Park
aa8d3b914c dev-lang/rust: fix builds for Rust 1.51.0
The LLVM tensorflow fix was already included in the upstream,
edc57e7e7c
.
Completely remove the patch file.
2021-03-31 12:16:50 +02:00
Flatcar Buildbot
52d3df7deb dev-lang: Upgrade dev-lang/rust 1.50.0 to 1.51.0 2021-03-31 11:17:29 +02:00
Margarita Manterola
396fa787bb sys-kernel/dracut: move to coreos-overlay
This commit removes the dracut directory from portage-stable, as the
coreos-overlay one should be used instead.

See https://github.com/kinvolk/coreos-overlay/pull/923
2021-03-30 13:10:42 +02:00
Margarita Manterola
1bbb853ac9 Add Flatcar specific patch to enable the iscsi module
Flatcar uses its own network module instead of the Dracut one, but the
iscsi module depends on the network. So, in order to enable the iscsi
module, we need to patch the dependency
2021-03-30 11:03:21 +00:00
Margarita Manterola
5af3423377 Update dracut to the portage-stable version
We need to customize dracut. Currently the version in portage-stable is
picked because it's newer than the one in coreos-overlay. This commit
updates coreos-overlay to the same versions available in portage-stable.
2021-03-30 11:03:21 +00:00
Flatcar Buildbot
4d6d4006dd Upgrade virtual Rust in main from 1.50.0 to 1.51.0 2021-03-30 07:40:14 +00:00
Flatcar Buildbot
d633a16a97 sys-kernel: Upgrade Kernel 5.10.25 to 5.10.26 2021-03-26 07:13:39 +00:00
Sayan Chowdhury
b3400fde20 Merge pull request #916 from kinvolk/sayan/update-openssl-1.1.1k
dev-libs/openssl: Add the patch for openssl-1.1.1k release
2021-03-26 00:00:49 +05:30
Sayan Chowdhury
6e794ee59f dev-libs/openssl: Add the patch for openssl-1.1.1k release
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-03-25 23:14:43 +05:30
Sayan Chowdhury
9cf877c994 Merge pull request #912 from kinvolk/sayan/update-iscsi-2.1.4
sys-block/open-iscsi: Update to 2.1.4
2021-03-24 15:32:29 +05:30
Sayan Chowdhury
8d1a8e2397 Merge pull request #157 from kinvolk/sayan/update-zstd
app-arch/zstd: Sync with Gentoo upstream
2021-03-24 15:31:45 +05:30
Sayan Chowdhury
2a5cba256f Merge pull request #913 from kinvolk/sayan/update-zstd
app-arch/zstd: Add app-arch/zstd to ACCEPT_KEYWORDS
2021-03-24 15:31:30 +05:30
Sayan Chowdhury
6ac592d0cd Merge pull request #906 from blanquicet/364_updating_sys-libs_ncurses
Update sys-libs/ncurses to 6.2-r1
2021-03-24 15:31:01 +05:30
Sayan Chowdhury
94d1070c61 Merge pull request #153 from bonkko/boost-1.75.0-port
Boost 1.75.0 port
2021-03-24 15:30:22 +05:30
Kai Lüke
4ab6b08a51 sys-apps/baselayout: enable pam_faillock with relaxed defaults
This pulls in
https://github.com/kinvolk/baselayout/pull/17
to enable the pam_faillock module as replacement for pam_tally2.
The "faillock" binary can be used to see the login attempts and
account lock status which before was available with the pam_tally
command. While the tally defaults did not temporarily lock the
account on wrong password login attempts, this is done by default
with faillock. However, the default behavior was relaxed to allow
more wrong attempts and have a shorter lock time span.
2021-03-23 11:13:52 +01:00
Sayan Chowdhury
d437d43989 sys-block/open-iscsi: Apply Flatcar patches
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-03-23 15:36:13 +05:30
Sayan Chowdhury
d9ff0c33ee sys-block/open-iscsi: Sync with Gentoo upstream
Gentoo ref: 34d68f5bbe

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-03-23 15:36:10 +05:30
Kai Lüke
4fe9f58926 Merge pull request #857 from kinvolk/kai/remove-rkt
app-admin/etcd-wrapper: use docker for the etcd service and drop etcd-wrapper
2021-03-22 19:40:59 +01:00
Dongsu Park
ac0381dd2d dev-util/glib-utils: update to 2.66.8
Bump `dev-util/glib-utils` to get it in sync with `dev-libs/glib`.
2021-03-22 15:52:29 +01:00
Dongsu Park
b3c33667e2 dev-util/gdbus-codegen: update to 2.66.8
Bump `dev-util/gdbus-codegen` to 2.66.8 as well, to get it in sync with
`dev-libs/glib`.
2021-03-22 15:52:15 +01:00
Dongsu Park
31dab2ea06 dev-libs/glib: update to 2.66.8
Update `dev-libs/glib` to 2.66.8, mainly to address a security issue,
CVE-2021-28153.
2021-03-22 15:52:05 +01:00