22893 Commits

Author SHA1 Message Date
Jeremi Piotrowski
31c8a6afe8 app-torcx/docker: Add a Docker 20.10 torcx image
Compared to previous torcx images the docker-cli package is a separate
package, following upstream Docker repo layout changes.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
742c507270 app-emulation/docker: Apply Flatcar patches
The patches do the following:

* install flatcar specific wrappers and systemd config
* force some USE flags to default on
* allow injecting CFLAGS/LDFLAGS so that torcx can work
* force building with go1.13 (like upstream does) - this won't be
  necessary next time because docker master already uses go1.16
2021-08-12 09:58:56 +00:00
Jeremi Piotrowski
ee672bcdb9 app-emulation/docker: Sync from Gentoo
For update to docker-20.10.7.

gentoo/portage commit 0ed05ce0a8f0d1c3dfa6151e7ebb25b67c4aae16

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:58:53 +00:00
Jeremi Piotrowski
eb6661756d app-emulation/docker-proxy: Update to 0.8.0_p20210525
This is the version needed by docker 20.10.7. ROADMAP.md doesn't exist so it
has been removed from src_install.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
30a116d2e7 app-emulation/docker-proxy: Freeze version 0.8.0_p20180709
This is the version used by docker-19.03. We will be updating the live
ebuild to build docker 20.10 dependencies.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
817ad4c0db app-emulation/docker-cli: Apply Flatcar patches
We use coreos-go* eclass so that we can override several environment
variables and build with the same go version as docker upstream. These
changes are modeled after what was previously done in app-emulation/docker,
the cli ebuild has only been split out since v20.10.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
b93160fedf app-emulation/docker-cli: Import from Gentoo
Docker upstream split the cli component into a separate repo, so there is
a separate ebuild that builds the docker utility. This is a prerequisite
of the update of docker to 20.10.

This is an import from portage commit 69d01a4273a556b1205a7a575cb3811ab7e2443d.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 09:57:03 +00:00
Flatcar Buildbot
906e4c99d3 sys-process/tini: Apply Flatcar patches
We use a custom build system to remove the cmake dependency and hardcode
relevant configuration.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
5b4f80d2b2 sys-process/tini: Sync with Gentoo upstream
For tini-0.19. Upstream commit 2e10a957da8a8a93c1f5d82011e3f6692f7b765c.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:57:03 +00:00
peanutduck
a346d125e8 net-dns/dnsmasq: Bump to v2.85 2021-08-12 09:34:54 +00:00
Kai Lüke
1da2d646da Merge pull request #1180 from kinvolk/kai/new-subkey
coreos-base/coreos-init: embed new subkey in flatcar-install
2021-08-12 11:30:16 +02:00
Dongsu Park
e724ec668b Merge pull request #1169 from kinvolk/runc-1.0.1-main
Upgrade Runc in main from 1.0.0 to 1.0.1
2021-08-12 10:51:15 +02:00
Dongsu Park
bdd9f29187 app-emulation/docker-runc: remove obsolete comments
Now that runc version follows simple semver semantics, we do not have to
care about number of patches up to an rc version. Remove the obsolete
comments.
2021-08-12 10:04:07 +02:00
Sayan Chowdhury
75f9c43ee0 Merge pull request #1171 from kinvolk/sayan/move-expat-to-portage
dev-libs/expat: Remove patches and move to portage-stable
2021-08-12 09:47:10 +05:30
Sayan Chowdhury
1b9d7e84ba Merge pull request #195 from kinvolk/sayan/move-expat-to-portage
dev-libs/expat: Move from coreos-overlay to portage-stable
2021-08-12 09:47:03 +05:30
Aniruddha Basak
0654c1ef51 Update libuv to 1.41.1 2021-08-11 17:45:55 +00:00
Kai Lueke
c9e7e6d245 coreos-base/coreos-init: embed new subkey in flatcar-install
This pulls in
https://github.com/kinvolk/init/pull/45
but from a backport branch "flatcar-2905-backport".
2021-08-11 18:15:55 +02:00
Mathieu Tortuyaux
8e0014e814 sec-policy/selinux-virt: allow flannel to write into /run
flannel will write into /run/flannel/... so we need to provide
correct labelling for dir created by docker daemon

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-08-11 17:53:58 +02:00
Mathieu Tortuyaux
0cde021595 sec-policy/selinux-virt: allow flanneld to load module
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-08-11 17:50:29 +02:00
Kai Lueke
abfbf0c70b eclass: import go-module from Gentoo 2021-08-11 17:46:38 +02:00
Dongsu Park
dd37836fdc Merge pull request #193 from kinvolk/rust-1.54.0-main
Upgrade virtual Rust in main from 1.53.0 to 1.54.0
2021-08-11 17:06:20 +02:00
Dongsu Park
abf87f84dd Merge pull request #1160 from kinvolk/rust-1.54.0-main
Upgrade dev-lang/rust in main from 1.53.0 to 1.54.0
2021-08-11 17:06:12 +02:00
Aniruddha Basak
7576483196 Update tar to 1.34 2021-08-11 14:32:14 +00:00
Mathieu Tortuyaux
5c5b78cb8d sec-policy/selinux-virt: fix flannel CNI creation
flannel uses an init container to pull CNI from container to the host
system in `/etc/cni`.
With SELinux, the permission is denied because `/etc/cni` is labelled
with `etc_t` so it can't be access by Docker since it expects `svirt_lxc_file_t`.

Using `filetrans_pattern` we can define a mechanism to create `/etc/cni`
with the correct labels even if it's not yet created - which avoid to
run `restorecon` on `/etc/cni`.

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-08-11 16:24:54 +02:00
Dongsu Park
30f4bde417
Merge pull request #140 from kinvolk/dongsu/skip-upload-rust-sdk
bootstrap_sdk: skip uploading non-existent directory to fix Rust builds
2021-08-11 09:59:19 +02:00
Flatcar Buildbot
06b6e84d5c app-emulation: Upgrade Runc 1.0.0 to 1.0.1 2021-08-10 14:23:03 +02:00
Dongsu Park
4d59b8715b bootstrap_sdk: skip uploading non-existent directory to fix Rust builds
Previously before https://github.com/kinvolk/flatcar-scripts/pull/134,
`bootstrap_sdk` was looking at the wrong path
(/usr/lib/rust-*/rustlib/aarch64-unknown-linux-gnu instead of
/usr/lib/rustlib/aarch64-unknown-linux-gnu). As a result, Rust got always
removed and rebuilt in `install_cross_rust`, which resulted in
`flatcar-sdk/crossdev/dev-lang/rust/rust-1.54.0-1.xpak` being created.

Now legitimate changes of https://github.com/kinvolk/flatcar-scripts/pull/134
prevent the rebuild from happening. The path already exists in a stage4
SDK build, because the seed stage already has cross-compilers so the
Rust upgrade has all the right cross-paths.

That's why SDK builds with only stage4 failed when it tries uploading Rust
packages like the following. On the other hand, full SDK builds with stage1
to 4 worked well, because in that case Rust is rebuilt anyway.

```
INFO    bootstrap_sdk: Uploading cross toolchain packages to
gs://flatcar-jenkins/developer/sdk/amd64/2021.08.04+dev-flatcar-master-3209
CommandException: No URLs matched:
/mnt/host/source/src/build/catalyst/packages/flatcar-sdk/crossdev/*
CommandException: No URLs matched:
/tmp/tmp.xyjXbCFhUc//mnt/host/source/src/build/catalyst/packages/flatcar-sdk/crossdev/*.sig
CommandException: 2 files/objects could not be transferred.
```

To fix that, we have to skip uploading packages when the crossdev
directory does not exist.

Debugged and suggested by @jepio
2021-08-10 12:18:58 +02:00
Kai Lüke
37e0e8d92c Merge pull request #1170 from kinvolk/kai/sssd-faillock
sys-apps/baselayout: fix sssd LDAP auth with sudo
2021-08-09 17:40:11 +02:00
Kai Lueke
261ec85cfd sys-apps/baselayout: fix sssd LDAP auth with sudo
This pulls in
https://github.com/kinvolk/baselayout/pull/18
2021-08-09 17:38:22 +02:00
Dongsu Park
1e88f9ed1e Merge pull request #1177 from kinvolk/go-1.16.7-main
Upgrade Go in main from 1.16.6 to 1.16.7
2021-08-09 16:39:19 +02:00
Flatcar Buildbot
6f654df672 dev-lang: Upgrade Go 1.16.6 to 1.16.7 2021-08-09 07:25:39 +00:00
Flatcar Buildbot
7ec275e5f6 sys-kernel: Upgrade Kernel 5.10.56 to 5.10.57 2021-08-09 07:12:28 +00:00
Jeremi Piotrowski
d6c75eb0d9 torcx: Bump the default Docker to 20.10 and drop older
We are enabling CgroupV2 support globally, which requires Docker 20.10.
It is possible to return to CgroupV1 locally via kernel commandline, but
that will still work with Docker 20. If someone really needs older
Docker versions we will recommend to also fetch torcx packages from
older releases or rely on upstream binaries.
2021-08-06 16:30:23 +00:00
Dongsu Park
021121a489 Merge pull request #161 from kinvolk/dongsu/delete-ccache
dev-util/ccache: delete ccache completely
2021-08-06 11:36:28 +02:00
Dongsu Park
82b0bb1bf0 Merge pull request #933 from kinvolk/dongsu/delete-ccache
profiles: delete ccache completely
2021-08-06 11:36:19 +02:00
Dongsu Park
942d66e678 profiles: delete ccache completely
As we do not use ccache at all, we should simply clean up ccache from
all of the code, to shrink size of the SDK.
2021-08-06 11:35:06 +02:00
Sayan Chowdhury
7869f54c9c Merge pull request #1152 from kinvolk/sayan/update-nvidia-470.57.02
nvidia-{drivers, metadata}: Update NVIDIA to 470.57.02
2021-08-06 14:37:10 +05:30
Dongsu Park
e75b9f3a78 Merge pull request #194 from kinvolk/dongsu/portage-utils-0.90
app-portage/portage-utils: update to 0.90
2021-08-06 09:39:21 +02:00
Sayan Chowdhury
86e391de6d Merge pull request #1166 from kinvolk/linux-5.10.56-main
Upgrade Linux Kernel in main from 5.10.55 to 5.10.56
2021-08-06 11:22:16 +05:30
Sayan Chowdhury
6c24e9d8cf dev-libs/expat: Remove patches and move to portage-stable
The patches applies does not make sense to be removed, hence it would
be better to move `expat` back to portage-stable

Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2021-08-06 05:40:34 +00:00
Sayan Chowdhury
e0f9f876e8 dev-libs/expat: Move from coreos-overlay to portage-stable
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2021-08-06 05:23:48 +00:00
Dongsu Park
6a8b5c4cea app-portage/portage-utils: update to 0.90
Now that Gentoo distfiles and its mirror deleted a source tarball
`portage-utils-0.87.tar.xz`, Flatcar build also started failing like the
following. For now we fixed the issue by manually uploading the missing
tarball to the Flatcar mirror. However, we should update portage-utils
to 0.90 to avoid potential issues.

```
http://distfiles.gentoo.org/distfiles/96/portage-utils-0.87.tar.xz
HTTP request sent, awaiting response... 404 Not Found
2021-08-04 16:09:28 ERROR 404: Not Found.

https://dev.gentoo.org/~grobian/distfiles/portage-utils-0.87.tar.xz
HTTP request sent, awaiting response... 404 Not Found
2021-08-04 16:09:28 ERROR 404: Not Found.
```
2021-08-05 10:32:09 +02:00
Dongsu Park
e63f7ab8dc Merge pull request #1168 from kinvolk/dongsu/glibc-2.33-r5
sys-libs/glibc: update to 2.33-r5
2021-08-05 10:08:43 +02:00
Thilo Fromm
5210371270 sys-apps/glibc: add Flatcar changes for 2.33-r5
- unmask amd64 and arm64
- remove tmpfiles from ebuild inherit so we don't run into a circular
  dep with systemd, use systemd_tmpfilesd instead
- take care of nscd.conf via systemd_tmpfilesd,
  add files/nscd-conf.tmpfiles.
- Don't run sanity checks in pkg_pretend to prevent gcc checks when
  only the binary package is installed.
- comment out 'dostrip -x' to force the OS image binaries to be stripped
- remove everything glibc wants to put under /etc since we use
  baselayout to provide that

Add flatcar specific changes to the build recipe.
Move PYTHON_DEPS to DEPEND so things can build.

Don't run sanity checks in pkg_pretend
(similar change as in glibc-2.29) to prevent
gcc checks when only the binary package is installed.

Based on commit 8d040f93c289.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
Signed-off-by: Dongsu Park <dongsupark@microsoft.com>
2021-08-05 09:53:52 +02:00
Dongsu Park
ce63084f8e sys-libs/glibc: sync with Gentoo for 2.33-r5
Update glibc to 2.33-r5, mainly to address CVE-2021-35942 .

Gentoo ref: 5cde29d04e2da37ded900130f0f3dea13fcc350f
2021-08-05 09:38:10 +02:00
Flatcar Buildbot
c72b4d1450 sys-kernel: Upgrade Kernel 5.10.55 to 5.10.56 2021-08-05 07:10:12 +00:00
Flatcar Buildbot
ecf86929b7 Upgrade virtual Rust in main from 1.53.0 to 1.54.0 2021-08-04 10:20:24 +02:00
Jeremi Piotrowski
7cf88348f3 Merge pull request #1162 from kinvolk/jepio/amazon-ssm-agent-xcompile
amazon-ssm-agent: re-add dependency to oem-ec2-compat
2021-08-04 10:20:15 +02:00
Dongsu Park
ae2e9e0376 dev-lang/rust: adjust libressl patch for Rust 1.54
We need to adjust 1.47.0-libressl.patch to Rust 1.54, to fix the build
error caused by the invalid patch.
2021-08-04 10:19:14 +02:00
Flatcar Buildbot
89e18d585e dev-lang: Upgrade dev-lang/rust 1.53.0 to 1.54.0 2021-08-04 10:19:07 +02:00