Krzesimir Nowak
515580320d
dev-libs/openssl: Sync with Gentoo
...
It's from Gentoo commit 5ff6c1b3f21acc2ee6a95eda6ccda6baceedaf7d.
2023-08-01 14:50:57 +02:00
Flatcar Buildbot
9c1f77919a
portage-stable/metadata: Monthly GLSA metadata updates
2023-08-01 07:14:48 +00:00
flatcar-ci
9822dfe3a4
New version: main-3682.0.0-nightly-20230731-2100
2023-07-31 21:00:27 +00:00
Dongsu Park
09b5b108d5
Merge pull request #1027 from flatcar/cacerts-3.92-main
...
Update ca-certificates in main from 3.91 to 3.92
2023-07-31 16:33:19 +02:00
Flatcar Buildbot
4bde45b95b
app-misc/ca-certificates: Update from 3.91 to 3.92
2023-07-31 07:19:06 +00:00
flatcar-ci
a04dd35c0e
New version: main-3679.0.0-nightly-20230728-2100-INTERMEDIATE
2023-07-28 21:00:29 +00:00
Dongsu Park
4c05ada076
Merge pull request #1024 from flatcar/containerd-1.7.3-main
...
Upgrade Containerd in main from 1.7.2 to 1.7.3
2023-07-28 14:47:52 +02:00
Dongsu Park
a09442e341
Merge pull request #1011 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2023-07-28 14:44:01 +02:00
Flatcar Buildbot
8dcd289e94
Update mantle container image to latest HEAD
2023-07-28 12:37:13 +00:00
Dongsu Park
b295181ca8
Merge pull request #1022 from flatcar/dongsu/openssh-9.3_p2
...
net-misc/openssh: update to 9.3_p2
2023-07-28 14:36:55 +02:00
Flatcar Buildbot
40763c6d7b
app-containers/containerd: Update from 1.7.2 to 1.7.3
2023-07-28 08:16:24 +00:00
flatcar-ci
a14af24bc6
New version: main-3678.0.0-nightly-20230727-2100
2023-07-27 21:00:28 +00:00
Dongsu Park
6a2f155526
changelog: add security changelog for openssh 9.3_p2
2023-07-27 16:16:06 +02:00
Krzesimir Nowak
67275491ee
net-misc/openssh: Apply Flatcar modifications
...
- Mark the package as stable.
- Remove the socket unit's rate limiting.
- Fixes to configuration handling. We are trying to upstream these
changes, so this package will be eventually moved to
portage-stable. But updating it in coreos-overlay for now to drop
the use of the obsolete cygwin USE flags.
Upstream PR: https://github.com/gentoo/gentoo/pull/31615
2023-07-27 16:11:02 +02:00
Dongsu Park
4be18df704
overlay net-misc/openssh: update to 9.3_p2
...
Update net-misc/openssh to 9.3_p2, mainly address CVE-2023-38408.
Gentoo ref: ee25b7d5358f42edd851c00492a885faaf2e349c
2023-07-27 16:10:59 +02:00
flatcar-ci
d9c6b37c56
New version: main-3677.0.0-nightly-20230726-2100
2023-07-26 21:00:32 +00:00
flatcar-ci
254e4c7a41
New version: main-3676.0.0-nightly-20230725-2100
2023-07-25 21:00:32 +00:00
Thilo Fromm
02cb8e7fd6
Merge pull request #1005 from flatcar/t-lo/update-to-cncf-code-of-conduct
...
Update code-of-conduct.md
2023-07-25 09:42:37 +02:00
flatcar-ci
a85e4ffb91
New version: main-3675.0.0-nightly-20230724-2100
2023-07-24 21:00:31 +00:00
Thilo Fromm
3aac5e6f28
Update code-of-conduct.md
2023-07-24 18:20:39 +02:00
Dongsu Park
679f0f1236
Merge pull request #999 from flatcar/dongsu/openldap-2.5.14
...
net-nds/openldap: update to 2.5.14
2023-07-24 17:42:37 +02:00
Dongsu Park
4cec3b6b0c
.github: add net-nds/openldap to portage packages list
...
Add net-nds/openldap to portage packages list for weekly updates.
2023-07-24 17:41:15 +02:00
Dongsu Park
0f5cf3eeba
changelog: add changelog for openldap 2.5.14
2023-07-24 17:41:15 +02:00
Dongsu Park
ed7a926902
overlay profiles: mask openldap 2.6.3
...
Do not update to openldap 2.6.3+, to take different steps of updating
openldap.
1) from 2.4 to 2.5,
2) do an Alpha release around 2023-08, and
3) finally update from 2.5 to 2.6.
2023-07-24 17:41:11 +02:00
Dongsu Park
027e1ca222
Merge pull request #988 from flatcar/go-1.19.11-and-1.20.6-main
...
Upgrade Go from 1.19.10 and 1.20.5 to 1.19.11 and 1.20.6
2023-07-24 17:07:54 +02:00
flatcar-ci
ca9115ea46
New version: main-3672.0.0-nightly-20230721-2100-INTERMEDIATE
2023-07-21 21:00:25 +00:00
flatcar-ci
0a48501c0d
New version: main-3671.0.0-nightly-20230720-2100
2023-07-20 21:00:30 +00:00
Dongsu Park
648853c768
Merge pull request #998 from flatcar/runc-1.1.8-main
...
Upgrade Runc in main from 1.1.7 to 1.1.8
2023-07-20 16:02:31 +02:00
Dongsu Park
031a66fbd6
portage net-nds/openldap: update to 2.5.14
...
Update net-nds/openldap to 2.5.14 mainly to address CVE-2023-2953.
Gentoo ref: 5b1520ea69d410ab743eb7998b5d886bbf597375
2023-07-20 12:09:35 +02:00
Dongsu Park
f36ae06dd7
overlay app-containers/docker-cli: vendor docker client for fixing invalid header
...
To fix invalid header issue that started to happen when being built with
Go 1.19.11+, it is necessary for the docker cli repo to vendor the new docker
client part of github.com/docker/docker.
Based on https://github.com/docker/cli/commit/5d4e44df90bb .
2023-07-20 10:23:28 +02:00
Dongsu Park
3d1c3a66c0
overlay app-containers/docker-cli: Apply Flatcar modifications
...
Apply Flatcar patches, based on commit
817ad4c0db
.
2023-07-20 10:20:48 +02:00
Dongsu Park
82045f0fd4
overlay app-containers/docker-cli: reset to Gentoo
...
Reset to the state according to the state of Gentoo upstream,
to commit b93160fedf
.
to create Flatcar patches on top of that.
2023-07-20 10:18:40 +02:00
Dongsu Park
908df5f157
overlay app-containers/docker: fix invalid headers issue with Go 1.19.11
...
Docker client and daemon started to fail at sending or handling most
local connections when being compiled with Go 1.19.11, which addresses
CVE-2023-29406 by blocking invalid host headers of HTTP/1. As a
workaround, Docker started to define a dummy host header, and to use
it for local connections.
Backport the fixes to Flatcar to fix the runtime failures.
See also https://github.com/moby/moby/issues/45935 ,
https://github.com/moby/moby/pull/45942 .
2023-07-20 10:11:47 +02:00
Dongsu Park
3d001c577d
overlay app-containers/docker: Apply Flatcar modifications
...
Apply Flatcar patches, based on commit
9d6af12f1c
.
2023-07-20 10:11:47 +02:00
Dongsu Park
c7209aaf50
overlay app-containers/docker: reset to Gentoo
...
Reset to the state according to the state of Gentoo upstream,
to commit 964117a9a2
,
to create Flatcar patches on top of that.
2023-07-20 10:11:47 +02:00
Flatcar Buildbot
e4764ac549
app-containers/runc: Update from 1.1.7 to 1.1.8
2023-07-20 07:55:08 +00:00
Jeremi Piotrowski
75904af319
Merge pull request #979 from krishjainx/remove-sdk-errors
...
Check the url in get_sdk_binhost before echoing
2023-07-20 09:27:14 +02:00
flatcar-ci
b3154069a0
New version: main-3670.0.0-nightly-20230719-2100
2023-07-19 21:00:25 +00:00
Dongsu Park
5b271c4e49
Merge pull request #993 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2023-07-19 10:23:09 +02:00
Flatcar Buildbot
0ebbce8018
Update mantle container image to latest HEAD
2023-07-19 07:17:17 +00:00
Dongsu Park
ac21e361a5
Merge pull request #990 from flatcar/rust-1.71.0-main
...
Upgrade dev-lang/rust and virtual/rust in main from 1.70.0 to 1.71.0
2023-07-19 09:17:01 +02:00
flatcar-ci
9b68e195d0
New version: main-3669.0.0-nightly-20230718-2100
2023-07-18 21:00:28 +00:00
Dongsu Park
80f124a620
dev-lang/rust: fix path to bash completion of cargo
...
Since Rust 1.71.0, /etc/bash_completion.d/cargo is installed under
src, so it is necessary to adjust the file path to remove.
2023-07-18 15:20:01 +02:00
Flatcar Buildbot
eba8917982
dev-lang/rust: Update from 1.70.0 to 1.71.0
2023-07-18 09:51:06 +02:00
flatcar-ci
fdeb0a9ad0
New version: main-3668.0.0-nightly-20230717-2100
2023-07-17 21:00:29 +00:00
Kai Lüke
12de6d9b51
Merge pull request #989 from flatcar/kai/fix-build-sysext
...
ci-automation/vms: Export official release variable
2023-07-17 18:11:10 +02:00
Kai Lueke
095ab2392e
ci-automation/vms: Export official release variable
...
The official release variable is used to decide whether a build ID gets
appended to the FLATCAR_VERSION (or VERSION in os-release) or not. It
was set for the image job but not for the vms job, causing the
build_sysext script to get the build ID appended to the FLATCAR_VERSION
which causes a mismatch with the one from the image job.
Set the official release variable in the vms job as well.
2023-07-17 17:27:59 +02:00
Kai Lueke
593b62d326
.gitignore: Ignore ci-cleanup.sh
...
The ci-cleanup file gets created in ci-automation/ to remove any
leftovers when a build gets stopped. Since it is in the git tree, git
status sees untracked files which is a bit confusing.
Ignore the ci-cleanup file.
2023-07-17 17:08:26 +02:00
Krish Jain
fadf4c2ebc
Check the url in get_sdk_binhost before echoing
...
When running the build_packages script, one can encounter an error such as
'Error fetching binhost package info from.' This pertains to SDK packages (not
board packages). Since we have transitioned to the SDK container, the SDK
packages are no longer published independently from the container image.
2023-07-17 15:03:18 +05:30
Dongsu Park
7ae05d571a
changelog: add security changelog for Go 1.19.11, 1.20.6
2023-07-17 10:31:40 +02:00