22893 Commits

Author SHA1 Message Date
Jeremi Piotrowski
e31ef0ca87 Merge pull request #230 from flatcar-linux/jepio/update-gcc-deps-to-eapi-7
update gcc deps to EAPI=7.
2021-10-26 13:53:17 +02:00
Dongsu Park
62e41a9571 Merge pull request #1369 from flatcar-linux/dongsu/github-actions-rust-keywords
.github: update accept_keywords also for virtual/rust
2021-10-26 13:43:21 +02:00
Dongsu Park
4aa1a282d9 .github: update accept_keywords also for virtual/rust
PR https://github.com/flatcar-linux/coreos-overlay/pull/432 started
to replace `dev-lang/rust` in accept_keywords with its new version.
However, its corresponding `virtual/rust` has never been updated.
That issue had been hidden until
4463efcfd4
started adding `virtual/rust` to accept_keywords.
Unlike `dev-lang/rust`, keywords for `virtual/rust` stayed with old
versions. As a result, subsequent Github Actions PRs for rust become
all invalid, so build failures.

Fix the issue by replacing versions of `virtual/rust` with new versions.
Also try to match with version specifiers, not only `=` but also `>=`,
'<=', '~'.
2021-10-26 11:53:08 +02:00
Dongsu Park
739e98dc59 Merge pull request #1366 from aniruddha2000/aniruddha/remove-nmap-accept-keywords
Remove nmap keyword from arm64/package.accept_keywords
2021-10-25 17:27:00 +02:00
Dongsu Park
796ba1eeb5 Merge pull request #229 from aniruddha2000/aniruddha/update-nmap-7.92
Update net-analyzer/nmap to v7.92
2021-10-25 17:26:52 +02:00
Dongsu Park
666787c9ee Merge pull request #1367 from aniruddha2000/aniruddha/update-cryptsetup-accept-keywords
Update accept keyword for cryptsetup 2.4.1
2021-10-25 17:26:44 +02:00
Dongsu Park
781a72a2a2 Merge pull request #228 from aniruddha2000/aniruddha/update-sys-fs-cryptsetup-2.4.1
Update sys-fs/cryptsetup to v2.4.1
2021-10-25 17:26:37 +02:00
Jeremi Piotrowski
385f5779b7
Merge pull request #177 from flatcar-linux/jepio/github-status
jenkins: publish github status 'pending' at beginning of manifest job
2021-10-25 16:46:55 +02:00
Jeremi Piotrowski
2213e9beea update_chroot: introduce '--setuponly' flag
Currently the os/sdk and os/toolchains job perform a chroot update whose
results are immediately discarded because the rest of the build uses a fresh
chroot and catalyst. Towards the end of a release period this can extend the
build time by about an hour (longer if rust is involved).

Introduce a `--setuponly` flag that bails after the chroot configuration, and
the skips chroot update.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-10-25 14:14:26 +02:00
Jeremi Piotrowski
abf849ce57 jenkins: publish github status 'pending' at beginning of manifest job
and add script used for that purpose. This requires access to a github PAT
with 'repo.status' permissions.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-10-25 13:44:15 +02:00
Aniruddha Basak
ec9c9714c0 Update accept keyword for cryptsetup 2.4.1 2021-10-25 07:06:19 +00:00
Sayan Chowdhury
5d0669763a Merge pull request #1363 from flatcar-linux/linux-5.10.75-main
Upgrade Linux Kernel in main from 5.10.74 to 5.10.75
2021-10-23 09:55:10 +05:30
Sayan Chowdhury
9b5918f70f
Merge pull request #176 from flatcar-linux/sayan/remove-c3-small-packet
jenkins/kola/packet: Remove c3.small.x86 to try running cl.internet
2021-10-22 21:25:08 +05:30
Sayan Chowdhury
2fe1e979c0
jenkins/kola/packet: Remove c3.small.x86 to try running cl.internet
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2021-10-22 21:21:39 +05:30
Aniruddha Basak
da44b7c24d Remove nmap keyword from arm64/package.accept_keywords 2021-10-22 14:44:44 +00:00
Sayan Chowdhury
59a8112b65 Merge pull request #1365 from flatcar-linux/sayan/skip-tcsd-for-tpm2-v249
app-crypt/trousers: Skip tscd.service for TPM2 devices (using ConditionSecurity)
2021-10-22 16:26:24 +05:30
Sayan Chowdhury
33107d2047 Merge pull request #1364 from flatcar-linux/sayan/skip-tcsd-for-tpm2
app-crypt/trousers: Skip tscd.service for TPM2 devices
2021-10-22 16:21:14 +05:30
Aniruddha Basak
261b2337df Update net-analyzer/nmap to v7.92 2021-10-22 10:39:57 +00:00
Aniruddha Basak
e24c9bbff2 Update sys-fs/cryptsetup to v2.4.1 2021-10-22 09:32:48 +00:00
Sayan Chowdhury
0f2fde9beb app-crypt/trousers: Skip tscd.service for TPM2 devices
trousers supports TPM 1.2, and fails for TPM 2. This commits
skips the tcsd service if TPM 2 is detected.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2021-10-22 12:28:24 +05:30
Mathieu Tortuyaux
34a256a96f Merge pull request #1305 from flatcar-linux/tormath1/openssl-3
`dev-libs/openssl`: upgrade to v3
2021-10-22 07:52:47 +02:00
Mathieu Tortuyaux
6adcc5ab44 coreos-base/update_engine: remove -Werror flag
with the OpenSSLv3 upgrade, `update_engine` is not fully compatible yet.
See the associated issue for more details.

Let's keep the deprecated SHA functions in the meantime to run the
build.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
1d608a8560 app-crypt/sbsigntools: add patch to support opensslv3
See also: https://groups.io/g/sbsigntools/topic/patch_fix_openssl_3_0_issue/85903418?p=,,,20,0,0,0::recentpostdate/sticky,,,20,2,0,85903418,previd=1632756467394580924,nextid=1591489833755102589&previd=1632756467394580924&nextid=1591489833755102589

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
a6ad4cfba8 profiles/base: disable bindist useflag for openssh
there is an ongoing conversation about bindist patches for openssl:
https://marc.info/?l=gentoo-dev&m=163216172229772&w=2

Let's keep an eye on it.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
33d129daf9 profiles/coreos/base: add dev-libs/openssl-3.0.0
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
c83934f12e dev-libs/openssl: apply flatcar changes
- drop `pkg_postint`
- create `/etc/ssl` with systemd-tmpfiles

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-22 07:51:26 +02:00
Mathieu Tortuyaux
9e2cb8ebaa dev-libs/openssl: sync with ::gentoo
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-22 07:51:26 +02:00
Sayan Chowdhury
b857e562b5 app-crypt/trousers: Skip tscd.service for TPM2 devices
trousers supports TPM 1.2, and fails for TPM 2. This commits
skips the tcsd service if TPM 2 is detected.

Uses ConditionSecurity introduced in systemd v248

Fixes flatcar-linux/Flatcar#208

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2021-10-22 00:03:37 +05:30
Kai Lüke
bf4e013ac7
Merge pull request #175 from flatcar-linux/kai/aws-arm
jenkins/kola/aws.sh: use larger arm64 instance type for kubeadm
2021-10-21 14:11:19 +02:00
Kai Lüke
f072be4764 Merge pull request #1358 from guillomep/update_ca_certificate_nss_3_70
ca-certificates: update to NSS 3.70
2021-10-21 14:10:18 +02:00
Kai Lueke
0bd6d1aae5 jenkins/kola/aws.sh: use larger arm64 instance type for kubeadm
Currently the kubeadm tests fail on arm64 because the instance type
only offers 1 vCPU:
cluster.go:117: error execution phase preflight: [preflight] Some fatal errors occurred:
cluster.go:117: [ERROR NumCPU]: the number of available CPUs 1 is less than the required 2

Switch to the next larger instance type which has 2 vCPUS.
2021-10-21 14:03:39 +02:00
Sayan Chowdhury
f426fe1996
Merge pull request #174 from flatcar-linux/sayan/update-packet-base-url
packet: Update the base URL to point to bucket.release.f-ln
2021-10-21 17:25:59 +05:30
Sayan Chowdhury
0028f95a26
packet: Update the base URL to point to bucket.release.f-ln
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2021-10-21 14:01:09 +05:30
Flatcar Buildbot
6da9c72dd8 sys-kernel: Upgrade Kernel 5.10.74 to 5.10.75 2021-10-21 07:23:01 +00:00
Sayan Chowdhury
d8762c831f
Merge pull request #173 from flatcar-linux/sayan/update-do-base-url
do: Update the base URL to point to bucket.release.f-ln
2021-10-21 12:15:43 +05:30
Sayan Chowdhury
e04af554fa
do: Update the base URL to point to bucket.release.f-ln
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2021-10-21 12:03:54 +05:30
Guillaume Perrin
6bb6fc209e ca-certificates: update to NSS 3.70
For HTTPS to work and also for it to deliver the security promises we
need to ship the latest certificate database.
Update the package version symlink in oder to fetch the database from
the newest NSS release under
https://ftp.mozilla.org/pub/security/nss/releases/
and do a "ebuild ca-certificates-3.70.ebuild manifest" run.

Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2021-10-20 15:48:20 +02:00
Jeremi Piotrowski
b61a41306a dev-libs/mpfr: Sync with Gentoo upstream
Sync ebuild to upstream version to switch to EAPI=7, as previous
EAPIs cause issues with multilib deps when running ./build_toolchains
in the context of arm64 SDK.

Upstream commit e4adffda16496e86a61020e8569c6974f8018983
2021-10-20 12:25:26 +00:00
Jeremi Piotrowski
e51102ad70 dev-libs/mpc: Sync with Gentoo upstream
Sync ebuild to upstream version to switch to EAPI=7, as previous
EAPIs cause issues with multilib deps when running ./build_toolchains
in the context of arm64 SDK.

Upstream commit e4adffda16496e86a61020e8569c6974f8018983
2021-10-20 12:25:26 +00:00
Jeremi Piotrowski
4db1c1b8c3 net-dns/libidn2: Sync with Gentoo upstream
Sync ebuild to upstream version to switch to EAPI=7, as previous
EAPIs cause issues with multilib deps when running ./build_toolchains
in the context of arm64 SDK.

Upstream commit e4adffda16496e86a61020e8569c6974f8018983
2021-10-20 12:25:26 +00:00
Krzesimir Nowak
47215146d1 Merge pull request #1354 from flatcar-linux/linux-5.10.74-main
Upgrade Linux Kernel in main from 5.10.71 to 5.10.74
2021-10-19 18:20:12 +02:00
Krzesimir Nowak
73794fb439 Merge pull request #1356 from flatcar-linux/krnowak/eapi-update2
profiles: Drop keywords for sys-fs/mtools
2021-10-19 15:40:17 +02:00
Krzesimir Nowak
de74177fc6 Merge pull request #226 from flatcar-linux/krnowak/eapi-update2
*: Sync with gentoo
2021-10-19 15:40:15 +02:00
william light
76a5f89ca5 Merge pull request #1263 from flatcar-linux/wrl/polkit-0.119
sys-auth/polkit: bump to 0.119 and apply duktape patchset
2021-10-19 13:20:50 +02:00
Kai Lüke
e414c011ca Merge pull request #1355 from flatcar-linux/kai/update-ca-certs
ca-certificates: update to NSS 3.69.1
2021-10-19 13:03:00 +02:00
Mathieu Tortuyaux
1672cee3f3 profiles: remove introspection for both boards
it was already the case for ARM64, we just extend it to AMD64.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-19 12:51:48 +02:00
Mathieu Tortuyaux
7a2057149d sys-auth/realmd: remove polkit introspection use
we don't need to build realmd with introspection support for polkit.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2021-10-19 12:51:48 +02:00
William Light
94cda6bf05 sys-auth/polkit 0.119: re-apply downstream patches
commit 5c4d184e22fd93ab926878a131150047b54d0b6c
Author: Michael Marineau <michael.marineau@coreos.com>
Date:   Fri Aug 1 14:48:59 2014 -0700

    polkit: fix config install paths, use systemd-tmpfiles

    All configs should be installed to /usr and tmpfiles should be used to
    create and fix directory permissions instead of the ebuild's postinst.
2021-10-19 12:51:48 +02:00
William Light
03a4f3ce8a sys-auth/polkit 0.119: apply duktape patchset
https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/35

this should be re-fetched from the above MR when forward-porting to
updated polkit versions.
2021-10-19 12:46:58 +02:00
Kai Lueke
47acd798fd ca-certificates: update to NSS 3.69.1
For HTTPS to work and also for it to deliver the security promises we
need to ship the latest certificate database.
Update the package version symlink in oder to fetch the database from
the newest NSS release under
https://ftp.mozilla.org/pub/security/nss/releases/
and do a "ebuild ca-certificates-3.69.1.ebuild manifest" run.
2021-10-19 12:26:31 +02:00