22893 Commits

Author SHA1 Message Date
Dongsu Park
dd27327b93 app-crypt/p11-kit: import p11-kit from Gentoo
To be able to build sssd 2.3.1, we need to import `app-crypt/p11-kit`
from upstream Gentoo.
2020-11-06 13:50:51 +01:00
Dongsu Park
50c3589497 dev-libs/libtasn1: import libtasn1 from Gentoo
To build `net-libs/gnutls` 3.6, we need to import `dev-libs/libtasn1`.
2020-11-06 13:50:48 +01:00
Dongsu Park
22155497c6 dev-libs/nettle: update to 3.6
To build `net-libs/gnutls` 3.6.15, we need to also update
`dev-libs/nettle` to 3.6.
2020-11-06 13:50:46 +01:00
Dongsu Park
7a818340fa net-libs/gnutls: import from upstream Gentoo
To be able to build `net-fs/samba` 4.11, we need to import
`net-libs/gnutls` from upstream Gentoo. Since gnutls is one of the
hard requirements of upstream Samba, we are not able to disable the
dependency on gnutls.
2020-11-06 13:50:43 +01:00
Dongsu Park
c4322159bd Merge pull request #638 from flatcar-linux/dongsu/kernel-config-psi
sys-kernel/coreos-modules: enable PSI (Pressure Stall Information)
2020-11-06 09:41:39 +01:00
Sayan Chowdhury
ae0cfca4ae sys-block/open-iscsi: Add the version 2.1.2
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-06 11:38:33 +05:30
Sayan Chowdhury
72be7c4946 sys-block/open-isns: Add the new package
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-06 11:13:28 +05:30
Kai Lüke
3a23886d48 Merge pull request #672 from flatcar-linux/kai/github-actions-no-gpg-server
.github: Remove fetching unused key from gpg server
2020-11-05 19:05:37 +09:00
Kai Lüke
eea2288fbb .github: Remove fetching unused key from gpg server
The key server currently doesn't work. Since the key is not used
currently but the key we have hosted on our web server, we can remove
this failing step to restore GitHub Actions.
2020-11-05 17:10:06 +09:00
Dongsu Park
e74f2e325d Merge pull request #669 from flatcar-linux/dongsu/dbus-glib-0.110
dev-libs/dbus-glib: update to 0.110, fix cross compile build error
2020-11-04 16:16:09 +01:00
Dongsu Park
cc4389f27d Merge pull request #115 from flatcar-linux/sayan/update-glib
Update the glib package and the related dependencies
2020-11-04 16:15:58 +01:00
Dongsu Park
ea970f094f sys-apps/shadow: Apply Flatcar changes
Apply Flatcar-specific changes, like below:

  - Carry over our custom tmpfiles and securetty files
  - Remove /etc files and install them to /usr, use tmpfiles
  - Switch /etc/login.defs edits to /usr/share/shadow/login.defs
  - Drop moving passwd out of /usr since we don't have split-usr
  - Drop pkg_postinst

Original-by: David Michael <dm0@redhat.com>
  6fd490ebfefd ("sys-apps/shadow: Apply CoreOS changes")
2020-11-04 16:03:39 +01:00
Dongsu Park
2d8dec749f sys-apps/shadow: update to 4.8-r5, sync with Gentoo
Update sys-apps/shadow to 4.8-r5, simply syncing with Gentoo.

It is mainly to resolve
[CVE-2019-19882](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19882).
See also https://security.gentoo.org/glsa/202008-09.
2020-11-04 16:03:35 +01:00
Dongsu Park
8881733152 sys-kernel/coreos-modules: enable PSI (Pressure Stall Information)
Enable Kernel config for PSI (Pressure Stall Information), which might
help system administrators to detect bottleneck in cpu, memory and io
in an easy way.

```
$ zgrep -i _psi /proc/config.gz
CONFIG_PSI=y

$ ls -l /proc/pressure/
-r--r--r--. 1 root root 0 Oct  7 11:56 cpu
-r--r--r--. 1 root root 0 Oct  7 11:56 io
-r--r--r--. 1 root root 0 Oct  7 11:56 memory
$ cat /proc/pressure/cpu
some avg10=0.13 avg60=0.68 avg300=0.28 total=1195993
$ cat /proc/pressure/io
some avg10=0.00 avg60=1.11 avg300=0.68 total=2828208
full avg10=0.00 avg60=0.91 avg300=0.56 total=2334731
$ cat /proc/pressure/memory
some avg10=0.00 avg60=0.00 avg300=0.00 total=0
full avg10=0.00 avg60=0.00 avg300=0.00 total=0
```

See also https://www.kernel.org/doc/html/latest/accounting/psi.html ,
https://facebookmicrosites.github.io/psi/docs/overview

Fixes https://github.com/flatcar-linux/Flatcar/issues/162
2020-11-04 09:37:45 +01:00
Krzesimir Nowak
aee9d1bc02 Merge pull request #659 from flatcar-linux/krnowak/systemd-gentoo
Update systemd (sync, use gentoo workflow, add missing patches)
2020-11-03 20:14:24 +01:00
Krzesimir Nowak
b937ad2e43 Merge pull request #656 from flatcar-linux/krnowak/kernel-5.9
Update main to kernel 5.9 and firmware to 20200918
2020-11-03 20:12:57 +01:00
Krzesimir Nowak
92a3de35e0 .github: Update KV_MAIN to 5.9 2020-11-03 12:16:56 +01:00
Krzesimir Nowak
38798dac1f sys-kernel/coreos-firmware: Update to 20200918 2020-11-03 12:16:56 +01:00
Krzesimir Nowak
86a2e229cf sys-kernel/*: Bump to 5.9.1 2020-11-03 12:16:53 +01:00
Krzesimir Nowak
8f5411b63f sys-kernel/coreos-sources: Regenerate patches against 5.9.1 2020-11-03 12:13:44 +01:00
Dongsu Park
57d56fa2c0 dev-libs/dbus-glib: Fix cross compile build error
Use host tool when building cross.
Bump revision to -r1.
Adjust the patch on top of dbus-glib 0.110.

Original-by: Geoff Levand <geoff@infradead.org>
  6d7756b77b10 ("dev-libs/dbus-glib: Fix cross compile build error")
2020-11-02 11:58:11 +01:00
Dongsu Park
e4cb197be5 dev-libs/dbus-glib: update to 0.110, sync with Gentoo
To fix build issues from glib 2.64.5, we need to update dbus-glib
to 0.110.
2020-11-02 11:57:28 +01:00
Dongsu Park
e3db28c9c5 dev-util/glib-utils: update to 2.64.5 2020-10-30 16:52:20 +01:00
Dongsu Park
bd00506a48 dev-db/sqlite: move to portage-stable
Now that `dev-lang/tcl` is included in SDK, we do not need to keep
third-party patches in coreos-overlay. So move sqlite to portage-stable.
2020-10-30 16:06:05 +01:00
Dongsu Park
8494602fb1 dev-db/sqlite: update to 3.33.0
Now that `dev-lang/tcl` is included in SDK, we can now build
dev-db/sqlite without having to rely on third-party patches
in coreos-overlay.

So simply sync sqlite with Gentoo upstream, and update to the latest
version 3.33.0.
2020-10-30 16:04:31 +01:00
Sayan Chowdhury
e7b5405278 dev-libs/glib: Sync the package with upstream
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-10-30 14:17:24 +01:00
Dongsu Park
5201aee4a3
Merge pull request #100 from flatcar-linux/dongsu/cleanup-ccache
jenkins: do not configure ccache variables
2020-10-26 23:30:44 +01:00
Krzesimir Nowak
3171a5d96b Merge pull request #120 from flatcar-linux/krnowak/zstd
app-arch/zstd: Import from Gentoo
2020-10-26 22:25:56 +01:00
Dongsu Park
829cec45e8 jenkins: do not configure ccache variables
Setting the invalid CCACHE_ variables resulted in strange failure
in projects depending on meson, newer version like 0.55.3. For example
systemd build fails like the following errors:

```
 * ACCESS DENIED:  utimes:       /mnt/host/source/ccache
 * ACCESS DENIED:  utimes:       /mnt/host/source/ccache

F: utimes
S: deny
P: /mnt/host/source/ccache
A: /mnt/host/source/ccache
R: /mnt/host/source/ccache
C: ccache cc /build/amd64-usr/var/tmp/portage/sys-apps/systemd-246/work/systemd-246-abi_x86_64.amd64/meson-private/sanitycheckc.c -o /build/amd64-usr/var/tmp/portage/sys-apps/systemd-246/work/systemd-246-abi_x86_64.amd64/meson-private/sanitycheckc.exe -O1 -pipe -pipe -D_FILE_OFFSET_BITS=64
```

We should not set up ccache at all, as it has been already disabled in
coreos-overlay repo.
2020-10-26 15:38:57 +01:00
Krzesimir Nowak
1d7053e8a1 sys-apps/systemd: Add Manifest
Otherwise the build fails at the verification stage.
2020-10-26 15:03:48 +01:00
Krzesimir Nowak
e9b2cee708 sys-apps/systemd: Rename the ebuild to pick the patch release
With this change `PV` variable will become 246.6, thus it will try to
download the archive from the systemd-stable repo.
2020-10-26 14:43:28 +01:00
Krzesimir Nowak
cfd6c15d51 sys-apps/systemd: Bring the rest of missing patches
We have these patches in v245 too. I have missed them when doing the
update to v246, because apparently I have assumed that our flatcar
branches are more or less some upstream branch/tag + our patches on
top. That assumption was wrong and it surfaced when I rebased the
v245-flatcar branch to the v245.8 tag.
2020-10-26 14:40:04 +01:00
Krzesimir Nowak
37c8517551 sys-apps/systemd: Move away from cros-workon
Our current cros-workon setup was awkward to use when a new patch
release happened on upstream. In this case we would go to our
`v<VERSION>-flatcar` branch and merge/cherry-pick the commits from
upstream that appeared between the release we have been using so far
and the new release. In such case, our non-upstreamed patches were
hidden somewhere in history. To fix that, I proposed having a branch
for each patch release, so the branch would always be based on an
upstream tag and have our patches on top of that. An alternative
proposition was to just use the Gentoo workflow for patches, and this
is what we are doing here.

This also slightly minimizes the difference between the Gentoo recipe
and ours.
2020-10-26 14:33:54 +01:00
Krzesimir Nowak
c4f0e7e437 sys-apps/systemd: Sync with Gentoo
This brings in a dependency on app-arch/zstd, which will be pulled
into portage-stable.
2020-10-26 14:17:20 +01:00
Krzesimir Nowak
407e682a37 app-arch: Import from Gentoo
An updated systemd will need it.
2020-10-26 14:15:15 +01:00
Dongsu Park
0be496912c Merge pull request #119 from flatcar-linux/dongsu/sdk-pkgs-re2c-file
dev-util,sys-apps: update re2c, file
2020-10-23 15:06:58 +02:00
Dongsu Park
17eb4d5b5e Merge pull request #658 from flatcar-linux/dongsu/gdbus-codegen
profiles: gdbus-codegen only for python 3.6
2020-10-23 15:06:31 +02:00
Dongsu Park
2c820da16e Merge pull request #118 from flatcar-linux/dongsu/meson-gdbus
dev-util: update meson, gdbus-codegen
2020-10-23 15:06:11 +02:00
Dongsu Park
b766768842 Merge pull request #117 from flatcar-linux/dongsu/update-pkgs-20201021
Update json-c, libuv, libxml2, c-ares
2020-10-23 15:05:55 +02:00
Dongsu Park
aa4d60f031 Merge pull request #652 from flatcar-linux/linux-5.8.16-main
Upgrade Linux Kernel in main from 5.8.14 to 5.8.16
2020-10-23 14:08:05 +02:00
Dongsu Park
f8a27a086e sys-apps/file: update to 5.39
Update sys-apps/file to 5.39 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18218 .
2020-10-22 15:20:38 +02:00
Dongsu Park
5b8dbb7fb2 dev-util/re2c: update to 2.0.3
Update dev-util/re2c to 2.0.3 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11958 .
2020-10-22 15:19:06 +02:00
Dongsu Park
bfc6c92db0 Merge pull request #655 from flatcar-linux/dongsu/go-1.12.17
dev-lang/go: update Go to 1.12.17, remove Go 1.10
2020-10-22 15:14:31 +02:00
Dongsu Park
ed12f4b269 profiles: gdbus-codegen only for python 3.6
To be able to update `dev-util/gdbus-codegen` to 2.64.5, we need to
specify a single target python3.6 for gdbus-codegen.
Without it, it is not possible to emerge gdbus-codegen, because
it thinks there are multiple python single targets for the package.
2020-10-22 14:59:45 +02:00
Dongsu Park
c320d06f06 dev-util/gdbus-codegen: update to 2.64.5
Now that dev-libs/glib was updated to 2.64.5, we need to also update
dev-util/gdbus-codegen to 2.64.5.

Otherwise we would see strange slot conflicts like:

```
 * Error: The above package list contains packages which cannot be
 * installed at the same time on the same system.

 (dev-libs/glib-2.64.5:2/2::portage-stable, ebuild scheduled for merge) pulled in by
   >=dev-libs/glib-2.58.3:2 required by (dev-util/gdbus-codegen-2.58.3:0/0::portage-stable, binary scheduled for merge)

 (dev-util/gdbus-codegen-2.58.3:0/0::portage-stable, binary scheduled for merge) pulled in by
   dev-util/gdbus-codegen required by (coreos-base/hard-host-depends-0.0.1-r194:0/0::coreos, binary scheduled for merge)
```
2020-10-22 14:30:38 +02:00
Sayan Chowdhury
c6a6d5a685 dev-util/meson: Sync package with the upstream
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-10-22 14:30:38 +02:00
Dongsu Park
698a6c104d dev-libs/libxml2: update to 2.9.10-r3
Update libxml2 to 2.9.10-r3, to multiple security issues in libxml2:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20388
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595

See also https://security.gentoo.org/glsa/202010-04 .
2020-10-21 16:34:26 +02:00
Dongsu Park
6c98682dd6 sys-fs/cryptsetup: update to 2.3.2
Since cryptsetup 1.7.5 cannot be built with json-c 0.15,
we need to also update cryptsetup to 2.3.2.
2020-10-21 16:34:17 +02:00
Dongsu Park
1bc50f2cd2 eclass: sync cmake-multilib.eclass with Gentoo
Now that json-c 0.15 requires new definitions in cmake-multilib.eclass,
we need to sync cmake-multilib.eclass with upstream Gentoo.
2020-10-21 16:32:18 +02:00
Dongsu Park
2fbc9fb0b8 dev-libs/json-c: update 0.15
Update json-c to 0.15, to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762 .
2020-10-21 16:32:18 +02:00