14983 Commits

Author SHA1 Message Date
flatcar-ci
c1bcd1f07c New version: main-3349.0.0-nightly-20220901-2100 2022-09-01 21:00:26 +00:00
Flatcar Buildbot
79565dbea2 Update mantle container image to latest HEAD 2022-08-31 21:00:38 +00:00
flatcar-ci
aa714d8394 New version: main-3348.0.0-nightly-20220831-2100 2022-08-31 21:00:25 +00:00
Flatcar Buildbot
e77d8590c1 Update mantle container image to latest HEAD 2022-08-31 10:08:58 +00:00
flatcar-ci
27ba532c14 New version: main-3347.0.0-nightly-20220830-2100 2022-08-30 21:00:27 +00:00
Kai Lueke
65dd84b4d1 coreos-base/oem-packet: Use i386 serial settings for x86_64 to fix m3
The m3.small.x86 instance type had no serial console output because
ttyS0 was used because the GRUB CPU check didn't trigger. It seems that
most instances had i386 reported but this new one not (maybe EFI is
used here?).
Extend the GRUB check to cover both i386 and x86_64 when setting up the
serial console. For arm64 this still shouldn't be needed and the
defaults worked so far.
2022-08-30 17:10:36 +02:00
Flatcar Buildbot
4a4c44b296 Update mantle container image to latest HEAD 2022-08-30 09:26:33 +00:00
Flatcar Buildbot
4795cb5c8a Update mantle container image to latest HEAD 2022-08-29 21:00:52 +00:00
flatcar-ci
4ec376b99d New version: main-3346.0.0-nightly-20220829-2100 2022-08-29 21:00:31 +00:00
Sayan Chowdhury
11e3f9fa72 Merge pull request #2119 from flatcar-linux/sayan/update-shadow-4.12.2
sys-apps/shadow: Sync with Gentoo upstream; updates to 4.12.3
2022-08-29 21:07:36 +05:30
Mathieu Tortuyaux
9bc6270a14 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-29 11:11:27 +02:00
Mathieu Tortuyaux
0de477a949 coreos-base/coreos-init: bump commit ID
this pulls the wireguard exclusion from systemd-networkd management on
VMWare.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-29 11:08:58 +02:00
Sayan Chowdhury
25bf8d60c4 sys-apps/shadow: Add the CVE for shadow 4.12.3
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-26 20:17:29 +05:30
Sayan Chowdhury
a48628c1e3 sys-apps/shadow: Add the changelog for shadow 4.12.3
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-26 20:17:27 +05:30
Flatcar Buildbot
f05275612e sys-kernel: Upgrade Kernel 5.15.62 to 5.15.63 2022-08-26 07:28:33 +00:00
Dongsu Park
94b296e9a2 sys-apps/shadow: Apply Flatcar modifications
- Carry over our custom tmpfiles and securetty files
  - Remove /etc files and install them to /usr, use tmpfiles
  - Switch /etc/login.defs edits to /usr/share/shadow/login.defs
  - Drop moving passwd out of /usr since we don't have split-usr
  - Drop pkg_postinst
2022-08-26 02:38:56 +05:30
Sayan Chowdhury
ecf9249a70 sys-apps/shadow: Sync with Gentoo upstream; updates to 4.12.3
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-26 02:38:52 +05:30
flatcar-ci
e6f78f5117 New version: main-3342.0.0-nightly-20220825-2100 2022-08-25 21:00:33 +00:00
Dongsu Park
32d9c36a6f Merge pull request #353 from flatcar-linux/dongsu/gnutls-3.7.7
net-libs/gnutls: update to 3.7.7
2022-08-25 16:47:24 +02:00
Dongsu Park
e640b6c1a4 changelog: add security changelog for open-vm-tools 12.1.0 2022-08-25 08:42:11 +02:00
Flatcar Buildbot
defa66028c Update mantle container image to latest HEAD 2022-08-24 21:00:43 +00:00
flatcar-ci
ab4406f054 New version: main-3341.0.0-nightly-20220824-2100 2022-08-24 21:00:27 +00:00
Krzesimir Nowak
a218ea3d75 Merge pull request #349 from flatcar-linux/krnowak/glib-update
glib update
2022-08-24 15:51:15 +02:00
Krzesimir Nowak
23f7a7ac62 Merge pull request #348 from flatcar-linux/krnowak/boost-update
boost update
2022-08-24 15:48:52 +02:00
Dongsu Park
0cc5999ce8 changelog: add changelog for gnutls 3.7.7 2022-08-24 13:48:12 +02:00
Dongsu Park
c07d92e1b3 net-libs/gnutls: update to 3.7.7
Update net-libs/gnutls to 3.7.7 mainly to address CVE-2022-2509.
2022-08-24 13:45:37 +02:00
Flatcar Buildbot
c4f1d578b5 app-emulation: Upgrade open-vm-tools 12.0.5 to 12.1.0 2022-08-24 07:19:46 +00:00
flatcar-ci
2227d2a7f8 New version: main-3340.0.0-nightly-20220823-2100 2022-08-23 21:00:23 +00:00
Krzesimir Nowak
3e25e23ae4 sys-auth/sssd: Apply Flatcar modifications
- Make BDEPEND independent from DEPEND (The `BDEPEND` is a
    build-time requirement, so it should not be included in the whole
    `DEPEND` list. If it does, an installation of `sys-auth/sssd`
    causes other dependencies to be installed not only in the
    `/build`, but also under the SDK. That's not what we want, so we
    need to exclude `BDEPEND` from the list.)

  - Move runstatedir option from configure to make (Now that the
    upstream sssd 2.3.1 does not support `--runstatedir` option from
    its configure script, we need to remove the option, to unblock the
    configure issue like `unrecognized option --runstatedir`.  Instead
    we need to pass `runstatedir=` to emake commands.)

  - Disable realm check for nsupdate (At the moment bind-tools does
    not enable `gssapi`, so its `nsupdate` tool is also not able to
    run `realm` command. As a result, configure script of `sssd` fails
    when running `echo realm | nsupdate`, like `syntax error`.

    To avoid such issues, we need to disable the nsupdate check for
    now.  After we could enable `gssapi` for the SDK correctly, we can
    bring back the nsupdate check in the future.)

  - Add patch for CVE-2021-3621

  - Set the conf dir path explicitly (Without passing the
    --with-systemdconfdir flag, the configure script will query
    pkg-config for the directory itself. In the cross-compilation
    setup that we have, this will result in a path sysroot prepended
    to the path twice. systemd.eclass has a workaround for this issue,
    but it does not provide an elegant getter of the system
    configuration directory, thus we call `_systemd_get_dir`
    ourselves.)

  - Make it compatible with newer python versions.

  - Fix samba version detection by exporting the CPP variable. For
    some reason it was empty after the toolchain updates.
2022-08-23 16:01:46 +02:00
Krzesimir Nowak
a9747570bd sys-auth/sssd: Clean slate to reapply our changes 2022-08-23 16:01:46 +02:00
Krzesimir Nowak
c6683a158e sys-devel/make: Apply Flatcar modifications 2022-08-23 16:01:46 +02:00
Krzesimir Nowak
7dbd5615d1 sys-devel/make: Copy from portage-stable 2022-08-23 16:01:46 +02:00
Krzesimir Nowak
66b8c112f7 sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - don't run sanity checks in pkg_pretend to prevent gcc checks when
    only the binary package is installed.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2022-08-23 16:01:22 +02:00
Krzesimir Nowak
26475e5ebf sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit 77cec48da70c6d6424ed6dba4357dd8eacd262c2.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5b7f8b1525 profiles: Add accept keywords for sys-devel/crossdev 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
fd214759a9 app-torcx/docker: Bump dev-libs/libltdl dependency 2022-08-23 15:59:08 +02:00
Krzesimir Nowak
5089a6ee6e profiles: Drop accept_keywords for sys-libs/zlib
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
93e861952f coreos-config: Drop fixes for sys-devel/gettext
Let's see if they are still necessary.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
6fdfa61738 profiles: gcc sanitize should be working on arm64 too
Let's check if this is the case.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
60cfb42af6 coreos/config: Drop flex fixes
Let's see if there are still problems with bootstrapping.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
864ea5fd61 coreos/config: Drop libtool fixes
These seem to be quite old and most likely not needed any more. Let's
see if it's true, otherwise this commit will be reverted.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
d458f790fd coreos/config: Drop unnecessary fix for perl
We just updated dev-lang/perl to a version that contains the fix.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
4c8cd9ffe6 profiles: Drop sys-libs/binutils-libs from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Krzesimir Nowak
3e0a85a6f0 profiles: Drop sys-devel/binutils from accept_keywords
The updated package is stable for both amd64 and arm64.
2022-08-23 15:59:08 +02:00
Mathieu Tortuyaux
87eaf07fb2 Merge pull request #2110 from EhsanLunar/patch-1
Flatcar support for EKS on versions above 1.21
2022-08-23 15:47:09 +02:00
Dongsu Park
94254df06c Merge pull request #2109 from flatcar-linux/cacerts-3.82-main
Upgrade ca-certificates in main from 3.81 to 3.82
2022-08-23 13:25:21 +02:00
Krzesimir Nowak
c70d1f2d6e changelog: Add entries 2022-08-23 12:24:54 +02:00
Ehsan Assgari
050c0cf8e5 Update changelog/bugfixes/2022-08-22-eks-support-for-versions-above-1.21.md
Co-authored-by: Mathieu Tortuyaux <mathieu.tortuyaux@gmail.com>
2022-08-22 17:07:33 +02:00
Ehsan Assgari
d58ef937d9 Create 2022-08-22-eks-support-for-versions-above-1.21.md 2022-08-22 15:57:43 +02:00
Krzesimir Nowak
ed22213147 sys-devel/make: Move to overlay 2022-08-22 15:38:47 +02:00