14983 Commits

Author SHA1 Message Date
Jeremi Piotrowski
bdb48fd89a Merge pull request #1564 from flatcar-linux/jepio/fix-mirror-calico
.github: find latest calico tag when mirroring
2022-01-14 11:05:47 +01:00
Mathieu Tortuyaux
23df672492 Merge pull request #1565 from flatcar-linux/tormath1/selinux
sys-apps/policycoreutils: fix policy root path
2022-01-14 10:18:24 +01:00
Mathieu Tortuyaux
0659f6295f Merge pull request #1563 from flatcar-linux/tormath1/mantle
coreos-devel/mantle: bump with 0.18.0
2022-01-14 10:17:22 +01:00
Mathieu Tortuyaux
832bdb51fc sys-apps/policycoreutils: fix policy root path
root needs to be specified with -p instead of -S.
The policy dir (-S) defaults to (-p) + /var/lib/selinux/ + (-s).

Picked from upstream: 54a8322d18

Closes: https://github.com/flatcar-linux/Flatcar/issues/596
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-14 09:57:39 +01:00
Sayan Chowdhury
72c0e99e4b Merge pull request #271 from flatcar-linux/sayan/adapt-to-new-cve-format
changelog: Adapt the securities in accordance to new policies
2022-01-13 20:01:25 +05:30
Sayan Chowdhury
6315df39f1 Fix edk2-ovmf to include missing space
Co-authored-by: Dongsu Park <dpark@linux.microsoft.com>
2022-01-13 20:01:05 +05:30
flatcar-ci
6deacd7839
New major release: 3115.0.0 2022-01-13 19:50:37 +05:30
Jeremi Piotrowski
886b11bf1d .github: find latest calico tag from tigera operator
The mirror-calico workflow has been failing because it currently determines
version=v3.22.0-0.dev-typha, which is not the tag used by the individual
container images. Rewrite the version logic to determine the version based on
what is in the tigera operator manifest. This is the same manifest that we use
to deploy calico in mantle.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-01-13 14:44:04 +01:00
Krzesimir Nowak
65a7684f1a Merge pull request #270 from flatcar-linux/krnowak/iputils-update
net-misc/iputils: Update the package
2022-01-13 11:46:54 +01:00
Krzesimir Nowak
1cca5f4eeb Merge pull request #1556 from flatcar-linux/krnowak/iputils-update
Changes for net-misc/iputils update
2022-01-13 11:46:47 +01:00
Krzesimir Nowak
a2ff448eb2 Merge pull request #1560 from flatcar-linux/linux-5.15.14-main
Upgrade Linux Kernel in main from 5.15.13 to 5.15.14
2022-01-13 11:40:44 +01:00
Krzesimir Nowak
ded5f31c4c Merge pull request #269 from flatcar-linux/krnowak/drop-unused-eclasses
eclass: Drop unused eclasses
2022-01-13 10:57:40 +01:00
Sayan Chowdhury
b0a68a46d7 changelog: Adapt the securities in accordance to new policies
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-01-13 13:31:21 +05:30
Krzesimir Nowak
2d5ef69eed sec-policy/selinux-base-policy: Add a patch for ping
This is to allow users to run ping -I with some IP address or network
interface.

Patch based on:

https://github.com/fedora-selinux/selinux-policy/pull/403
2022-01-12 18:09:50 +01:00
Krzesimir Nowak
6f3975b9b1 sec-policy/selinux-base: Add patch for ping
The patch adds stuff that another patch in
sec-policy/selinux-base-policy will use to allow user to call "ping -I
<IPADDRESS>".

Patch based on:

https://github.com/fedora-selinux/selinux-policy/pull/403
2022-01-12 18:08:58 +01:00
Kai Lueke
27541f3a92 changelog/README.md: specify current security fix section format
The entries added in changelog/security/ do not follow our existing
security section in the release notes:
  https://www.flatcar.org/releases/#release-3033.2.0

Document the structure and an example to use the right format that we
need for release note generation.
2022-01-12 17:30:38 +01:00
Mathieu Tortuyaux
96bac22bc0 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-12 17:14:33 +01:00
Mathieu Tortuyaux
e155b78955 coreos-devel/mantle: sync with upstream release
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-12 17:11:30 +01:00
Kai Lueke
59ad0cd262 changelog/security: use right format for release notes 2022-01-12 17:00:26 +01:00
Kai Lueke
a7da13d660 changelog/README.md: specify current security fix section format
The entries added in changelog/security/ do not follow our existing
security section in the release notes:
  https://www.flatcar.org/releases/#release-3033.2.0

Document the structure and an example to use the right format that we
need for release note generation.
2022-01-12 16:53:59 +01:00
Kai Lueke
fe514f5b25 sys-kernel/bootengine: Fixed dracut emergency log printing script error
This pulls in
https://github.com/flatcar-linux/bootengine/pull/33
to fix the cat command invocation.
2022-01-12 16:07:58 +01:00
Krzesimir Nowak
42451654bf profiles: Update use flags for net-misc/iputils
The net-misc/iputils package never provided the traceroute binary,
only traceroute6, which is probably why the use flag got renamed to
traceroute6 too.
2022-01-12 15:45:26 +01:00
Flatcar Buildbot
3d01e98cdb sys-kernel: Upgrade Kernel 5.15.13 to 5.15.14 2022-01-12 07:24:30 +00:00
Krzesimir Nowak
d9f1012c1e eclass: Drop unused eclasses 2022-01-11 18:15:34 +01:00
Krzesimir Nowak
925909486e changelog: Add an entry 2022-01-11 17:21:27 +01:00
Krzesimir Nowak
0236ee3efc net-misc/iputils: Sync with gentoo
It's from gentoo commit 80d3fbb3ef48a969bac05c1f0469e8b9efa32a8d.
2022-01-11 16:37:22 +01:00
Krzesimir Nowak
499516cd48 changelog: Add an entry 2022-01-11 14:38:56 +01:00
Krzesimir Nowak
4b0cd68a4e *: Drop mentions of elibc_mintlib 2022-01-11 14:17:04 +01:00
Krzesimir Nowak
cef4a33476 *: Drop mentions of elibc_FreeBSD 2022-01-11 14:17:04 +01:00
Krzesimir Nowak
fc62c00e97 sys-apps/hwids: Drop deprecated and unused package 2022-01-11 14:17:04 +01:00
Krzesimir Nowak
129f4a4d92 sys-apps/usbutils: Sync with gentoo
This is to stop depending on sys-apps/hwids.

It's from gentoo commit d0a4effb1cb70ab4d44ee6deec12348bcf53e5ec.
2022-01-11 14:17:04 +01:00
Krzesimir Nowak
ef716c7fc3 sys-apps/pciutils: Sync with gentoo
This is to stop depending on sys-apps/hwids.

It's from gentoo commit bb4fcefc0f4830a3349a46a3a4601f3e57572ec7.
2022-01-11 14:17:04 +01:00
Krzesimir Nowak
0a01dc4308 sys-apps/lshw: Sync with gentoo
This is to stop depending on sys-apps/hwids.

It's from gentoo commit c6cb7ef2cc023ca42b642c97a8a9aae3585ce3b0.
2022-01-11 14:17:04 +01:00
Krzesimir Nowak
65626f8155 sys-apps/hwdata: Add from gentoo
It's from gentoo commit 7bc1125e5aaf936b572752dd43cef7d489f81bef.
2022-01-11 14:17:04 +01:00
Krzesimir Nowak
1a5ddb2ca4 *: Drop mentions of elibc_uclibc 2022-01-11 14:17:03 +01:00
Krzesimir Nowak
2290c6922b virtual/libcrypt: Sync with gentoo
It's from gentoo commit 2072f28ad572b68556decb7e8a4ffc0a48a8a274.
2022-01-11 14:16:03 +01:00
Krzesimir Nowak
e7cc54cfff profiles: Sync with gentoo
It's from gentoo commit 8adc2a498fec7ddcdcbbacb7a8172d4ed6d82b94.
2022-01-11 14:16:03 +01:00
Krzesimir Nowak
db5f1c7e72 *: Drop mentions of elibc_FreeBSD 2022-01-11 14:15:15 +01:00
Krzesimir Nowak
09465e5a67 sys-apps/systemd: Sync hwdb bits with Gentoo
Gentoo deprecated sys-apps/hwids and is going to drop it soon.
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
1a35d9b996 profiles: Drop sys-apps/hwids from accept_keywords
We are replacing this package with sys-apps/hwdata. Also, no point in
using unstable versions - they are stabilized quickly enough.
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
752f695663 sys-apps/portage: Drop support for uclibc
It was removed from Gentoo and with updated profiles, the build
started to fail with:

USE flag 'elibc_uclibc' referenced in conditional 'elibc_uclibc?' is
not in IUSE
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
158eb34f72 profiles: Keep using crypt functionality from glibc 2022-01-11 14:15:15 +01:00
Krzesimir Nowak
caf56d5b8b Merge pull request #1519 from flatcar-linux/krnowak/eclass-update
eclass: Some updates for newer EAPI versions
2022-01-11 13:25:42 +01:00
Krzesimir Nowak
d3247a54a2 Merge pull request #1554 from flatcar-linux/cacerts-3.74-main
Upgrade ca-certificates in main from 3.73 to 3.74
2022-01-10 19:19:59 +01:00
Flatcar Buildbot
24276fa7d2 dev-lang: Upgrade Go 1.17.5 to 1.17.6 2022-01-10 07:32:58 +00:00
Flatcar Buildbot
49d87d54af app-misc: Upgrade ca-certificates 3.73 to 3.74 2022-01-10 07:25:19 +00:00
Krzesimir Nowak
83fe5bffd4 sys-boot/grub: Try to force using a newer gettext infra 2022-01-07 16:11:46 +01:00
Krzesimir Nowak
1a1efdfe3b sys-boot/grub: Fix build with new eclasses 2022-01-07 16:11:46 +01:00
Krzesimir Nowak
b7e15db73c profiles: Drop sys-block/parted from accept_keywords
The updated package is declared as stable on arm64.
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
3e92c82483 eclass/git: Drop unused eclass 2022-01-07 16:11:46 +01:00