mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-23 07:21:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
22,893 Commits 616 Branches 394 Tags
Commit Graph

14983 Commits

Author SHA1 Message Date
Krzesimir Nowak
5213f4827b virtual/pager: Sync with gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-22 12:09:18 +01:00
Dongsu Park
fe7a6c904b profiles: enable su USE flag for shadow 
Enable su USE flag for shadow, because shadow >= 4.11 does not have it
by default.
Ideally util-linux should have the su binary, but that is currently not
possible, because of a bunch of additional dependencies in SDK like
pam_sssd in baselayout.
 2022-02-22 11:54:21 +01:00
Dongsu Park
91c7be888f changelog: add changelog for expat 2.4.6 2022-02-22 09:54:32 +01:00
Dongsu Park
3bd3353793 dev-libs/expat: update to 2.4.6 
Update dev-libs/expat to 2.4.6 to mainly address the CVEs:
CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314,
CVE-2022-25315
 2022-02-22 09:48:27 +01:00
Dongsu Park
b25f70e646 changelog: add changelog for man-pages 5.12 2022-02-21 15:51:41 +01:00
Dongsu Park
07cf13481c sys-apps/man-pages: update to 5.12-r2 
Update sys-apps/man-pages to 5.12-r2, which is needed by sys-apps/shadow
4.11.1.
 2022-02-21 15:51:41 +01:00
Dongsu Park
2037f0a173 changelog: add changelog for shadow 4.11.1 2022-02-21 15:51:16 +01:00
Dongsu Park
a44f3b8fbd sys-apps/shadow: Apply Flatcar modifications 
- Carry over our custom tmpfiles and securetty files
  - Remove /etc files and install them to /usr, use tmpfiles
  - Switch /etc/login.defs edits to /usr/share/shadow/login.defs
  - Drop moving passwd out of /usr since we don't have split-usr
  - Drop pkg_postinst
 2022-02-21 15:51:16 +01:00
Dongsu Park
2b733fd76a sys-apps/shadow: update to 4.11.1 
Sync with Gentoo to update sys-apps/shadow to 4.11.1, mainly to address
CVE-2013-4235.

Gentoo ref: defe2a377e43a756441b183b66e2c4aae2be27b5
 2022-02-21 15:51:16 +01:00
Krzesimir Nowak
b30e3d52ee eclass/mono-env: Sync with gentoo 
It's from gentoo commit 5f1f870f36da4f0739058b1f36c939e7ec53f3b3.
 2022-02-21 12:13:32 +01:00
Krzesimir Nowak
46fdaf3fd7 eclass/alternatives: Sync with gentoo 
It's from gentoo commit 1ade252f652cfba4068bb2275e0b24e1175ee924.
 2022-02-21 12:13:32 +01:00
Kai Lueke
3d5309794a sys-apps/ignition: prevent races with udev 
This pulls in
https://github.com/flatcar-linux/ignition/pull/35
to prevent boot failures such as fsck running while udev was still
processing the disk changes, and thus failing when the /dev/disk/
symlink is shortly gone.
 2022-02-21 11:12:24 +01:00
Thilo Fromm
3219bd9035 Merge pull request #1661 from flatcar-linux/t-lo/bootengine-fix-container-build 
sys-kernel/bootengine: fix containerised builds
 2022-02-21 10:42:39 +01:00
Kai Lüke
a8c00f42d3 Merge pull request #1652 from flatcar-linux/kai/use-package-users 
sys-apps/baselayout: remove duplicates of acct-user|group
 2022-02-18 18:16:29 +01:00
Thilo Fromm
8adf98c2c8 sys-kernel/bootengine: fix containerised builds 
Bump CROS_WORKON to include
https://github.com/flatcar-linux/bootengine/pull/36
to fix an issue with dracut in containerised builds.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
 2022-02-18 18:00:50 +01:00
Mathieu Tortuyaux
e7923114db Merge pull request #1659 from flatcar-linux/tormath1/sqlite 
dev-db/sqlite: skip `sqlite3` installation
 2022-02-18 17:51:09 +01:00
Mathieu Tortuyaux
121cc4e28f profiles/coreos/make: add sqlite3 to INSTALL_MASK 
this prevents the installation of `/usr/bin/sqlite3` cli provided by
`dev-db/sqlite`.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-02-18 17:48:18 +01:00
Krzesimir Nowak
45bd9ff89e eclass: Drop unused eclasses 2022-02-18 13:26:37 +01:00
Dongsu Park
8dffb05eb7 Merge pull request #291 from flatcar-linux/dongsu/bpftool 
dev-util/bpftool: import from Gentoo
 2022-02-18 11:53:37 +01:00
Krzesimir Nowak
05ffa99fbe Merge pull request #290 from flatcar-linux/krnowak/pkg-updates-2011 
Update/drop eclasses from 2011
 2022-02-18 10:47:13 +01:00
Kai Lueke
14bf508412 sys-apps/baselayout: remove duplicates of acct-user|group 
This pulls in
https://github.com/flatcar-linux/baselayout/pull/23
to remove user entries which get safely created through
https://github.com/flatcar-linux/scripts/pull/227
using the acct-user ID allocations for systemd-sysusers.
 2022-02-18 10:21:11 +01:00
Dongsu Park
5531aed931 changelog: add changelog for bpftool 5.15.8 2022-02-18 07:36:32 +01:00
Dongsu Park
11a2a85b79 dev-util/bpftool: import from Gentoo 
Import a new package dev-util/bpftool from Gentoo, to provide bpftool
in the production images.
 2022-02-17 16:23:50 +01:00
Dongsu Park
a85e311aca coreos-base/hard-host-depends: add docutils, patchutils 
Add dev-python/docutils, dev-util/patchutils to hard-host-depends.
Without adding those in the SDK, the new package dev-util/bpftool would
end up pulling in the new dependencies into the production images, which
should not happen.
 2022-02-17 13:52:47 +01:00
Dongsu Park
0fc96039a9 profiles: force enable bpftool for arm64 
As dev-util/bpftool does not have a keyword arm64, we need to force
enable arm64 keyword for bpftool.
 2022-02-17 13:49:22 +01:00
Dongsu Park
9b9ac5ea39 coreos-base/coreos: add dev-util/bpftool 
Get dev-util/bpftool included in the production images by default.
 2022-02-17 13:48:42 +01:00
Dongsu Park
f9c6c3fc09 Merge pull request #289 from flatcar-linux/dongsu/glsa-20220216 
metadata: update GLSA metadata 2022-02-16
 2022-02-17 11:12:40 +01:00
Krzesimir Nowak
c5dbf4fc5b eclass/savedconfig: Sync with gentoo 
It's from gentoo commit eb71dfec11e09ae40ae90f27305948097b6591a2.
 2022-02-17 11:01:48 +01:00
Krzesimir Nowak
cccd682d0e eclass/vim-doc: Sync with gentoo 
It's from gentoo commit d1d130bae55780d7a710dcaef4df63b8bf6192fa.
 2022-02-17 11:01:48 +01:00
Krzesimir Nowak
60e27b7d97 eclass: Drop unused eclasses 2022-02-17 11:01:48 +01:00
Krzesimir Nowak
6d0d5625f1 Merge pull request #1657 from flatcar-linux/linux-5.15.24-main 
Upgrade Linux Kernel in main from 5.15.23 to 5.15.24
 2022-02-17 10:23:18 +01:00
Kai Lüke
81fd6a88a2 Merge pull request #1651 from flatcar-linux/kai/use-networkd-conf-drop-in 
Replace systemd patch by a drop-in file
 2022-02-17 10:09:32 +01:00
Kai Lueke
584693874b Replace systemd patch by a drop-in file 
This pulls in
https://github.com/flatcar-linux/init/pull/61
and
https://github.com/flatcar-linux/baselayout/pull/22
to use a drop-in file instead of the systemd patch.
 2022-02-17 10:08:43 +01:00
Dongsu Park
5b1acafa48 Merge pull request #1650 from flatcar-linux/containerd-1.6.0-main 
Upgrade Containerd in main from 1.5.9 to 1.6.0
 2022-02-17 09:12:03 +01:00
Flatcar Buildbot
52e8cfc8f2 sys-kernel: Upgrade Kernel 5.15.23 to 5.15.24 2022-02-17 07:22:23 +00:00
Dongsu Park
781ebfb45b changelog: add changelog for libarchive 3.5.3 2022-02-16 15:55:36 +01:00
Dongsu Park
91d9b4fb86 app-arch/libarchive: update to 3.5.3 
Update app-arch/libarchive to 3.5.3 that fixes CVE-2021-36976,
as well as remaining issues w.r.t CVE-2021-31566.
 2022-02-16 15:55:36 +01:00
Dongsu Park
d79bbf0c28 metadata: update GLSA metadata 20220216 2022-02-16 15:16:37 +01:00
Flatcar Buildbot
16e00441cb app-emulation: Upgrade Containerd 1.5.9 to 1.6.0 2022-02-16 11:20:20 +00:00
Dongsu Park
97a33ad7fa changelog: add changelog for cifs-utils 6.13 2022-02-16 09:44:29 +01:00
Dongsu Park
a0a787f0ba net-fs/cifs-utils: update to 6.13-r1 
Update net-fs/cifs-utils to 6.13-r1, mainly to address CVE-2021-20208.
 2022-02-16 09:44:29 +01:00
Jeremi Piotrowski
5228888a5c profiles/coreos: move gnuefi systemd USE flag to target 
SDK bootstrap is failing with:

  Message: sbat-distro (from ID):

  ../systemd-stable-250.3/src/boot/efi/meson.build:189:24: ERROR: Problem encountered: Required sbat-distro option not set and autodetection failed

The gnuefi USE flag controls whether bootctl and systemd-boot are built, but we
only need those on the target. Currently the USE flag is set for SDK as well,
so move it to coreos/targets/generic.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2022-02-16 07:57:38 +01:00
Kai Lüke
330a7461fb Merge pull request #1636 from JAORMX/enable-auditd 
Add auditd package and systemd unit
 2022-02-15 20:38:49 +01:00
Kai Lüke
270806ad24 Update changelog/changes/2022-02-15-auditd.md 2022-02-15 20:33:33 +01:00
Krzesimir Nowak
b8505e5d89 profiles: Override UIDs and GIDs where we differ grom Gentoo 
These mostly are UIDs and GIDs that we have allocated before we picked
up changes from Gentoo.
 2022-02-15 17:35:28 +01:00
Krzesimir Nowak
f186c4720d sys-apps/baselayout: Bump 
Add missing entries to passwd and group.

Updated netperf needs netperf user and group. Updated systemd needs
various systemd users and groups. Dnsmasq also seems to require its
own user/group.

All this is added to prevent systemd-sysusers adding these to
/etc/passwd. And systemd-sysusers adds these, because the updated
user/group eclass in portage-stable now drops configuration files into
/usr/lib/sysusers.d. Maybe at some point we will switch over to
(patched?) systemd-sysusers, so this catch-up game won't be necessary,
but we are not there yet.
 2022-02-15 17:35:28 +01:00
Krzesimir Nowak
ffe433d726 acct-user/systemd-resolve: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
93d0781752 acct-user/systemd-network: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
9c1530253c acct-user/systemd-journal-remote: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
d42e47d064 acct-group/systemd-resolve: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00