Commit Graph

22893 Commits

Author SHA1 Message Date
Krzesimir Nowak
515580320d dev-libs/openssl: Sync with Gentoo
It's from Gentoo commit 5ff6c1b3f21acc2ee6a95eda6ccda6baceedaf7d.
2023-08-01 14:50:57 +02:00
Flatcar Buildbot
9c1f77919a portage-stable/metadata: Monthly GLSA metadata updates 2023-08-01 07:14:48 +00:00
flatcar-ci
9822dfe3a4 New version: main-3682.0.0-nightly-20230731-2100 2023-07-31 21:00:27 +00:00
Dongsu Park
09b5b108d5
Merge pull request #1027 from flatcar/cacerts-3.92-main
Update ca-certificates in main from 3.91 to 3.92
2023-07-31 16:33:19 +02:00
Flatcar Buildbot
4bde45b95b app-misc/ca-certificates: Update from 3.91 to 3.92 2023-07-31 07:19:06 +00:00
flatcar-ci
a04dd35c0e New version: main-3679.0.0-nightly-20230728-2100-INTERMEDIATE 2023-07-28 21:00:29 +00:00
Dongsu Park
4c05ada076
Merge pull request #1024 from flatcar/containerd-1.7.3-main
Upgrade Containerd in main from 1.7.2 to 1.7.3
2023-07-28 14:47:52 +02:00
Dongsu Park
a09442e341
Merge pull request #1011 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-07-28 14:44:01 +02:00
Flatcar Buildbot
8dcd289e94 Update mantle container image to latest HEAD 2023-07-28 12:37:13 +00:00
Dongsu Park
b295181ca8
Merge pull request #1022 from flatcar/dongsu/openssh-9.3_p2
net-misc/openssh: update to 9.3_p2
2023-07-28 14:36:55 +02:00
Flatcar Buildbot
40763c6d7b app-containers/containerd: Update from 1.7.2 to 1.7.3 2023-07-28 08:16:24 +00:00
flatcar-ci
a14af24bc6 New version: main-3678.0.0-nightly-20230727-2100 2023-07-27 21:00:28 +00:00
Dongsu Park
6a2f155526 changelog: add security changelog for openssh 9.3_p2 2023-07-27 16:16:06 +02:00
Krzesimir Nowak
67275491ee net-misc/openssh: Apply Flatcar modifications
- Mark the package as stable.
- Remove the socket unit's rate limiting.
- Fixes to configuration handling. We are trying to upstream these
  changes, so this package will be eventually moved to
  portage-stable. But updating it in coreos-overlay for now to drop
  the use of the obsolete cygwin USE flags.

Upstream PR: https://github.com/gentoo/gentoo/pull/31615
2023-07-27 16:11:02 +02:00
Dongsu Park
4be18df704 overlay net-misc/openssh: update to 9.3_p2
Update net-misc/openssh to 9.3_p2, mainly address CVE-2023-38408.

Gentoo ref: ee25b7d5358f42edd851c00492a885faaf2e349c
2023-07-27 16:10:59 +02:00
flatcar-ci
d9c6b37c56 New version: main-3677.0.0-nightly-20230726-2100 2023-07-26 21:00:32 +00:00
flatcar-ci
254e4c7a41 New version: main-3676.0.0-nightly-20230725-2100 2023-07-25 21:00:32 +00:00
Thilo Fromm
02cb8e7fd6
Merge pull request #1005 from flatcar/t-lo/update-to-cncf-code-of-conduct
Update code-of-conduct.md
2023-07-25 09:42:37 +02:00
flatcar-ci
a85e4ffb91 New version: main-3675.0.0-nightly-20230724-2100 2023-07-24 21:00:31 +00:00
Thilo Fromm
3aac5e6f28
Update code-of-conduct.md 2023-07-24 18:20:39 +02:00
Dongsu Park
679f0f1236
Merge pull request #999 from flatcar/dongsu/openldap-2.5.14
net-nds/openldap: update to 2.5.14
2023-07-24 17:42:37 +02:00
Dongsu Park
4cec3b6b0c .github: add net-nds/openldap to portage packages list
Add net-nds/openldap to portage packages list for weekly updates.
2023-07-24 17:41:15 +02:00
Dongsu Park
0f5cf3eeba changelog: add changelog for openldap 2.5.14 2023-07-24 17:41:15 +02:00
Dongsu Park
ed7a926902 overlay profiles: mask openldap 2.6.3
Do not update to openldap 2.6.3+, to take different steps of updating
openldap.

1) from 2.4 to 2.5,
2) do an Alpha release around 2023-08, and
3) finally update from 2.5 to 2.6.
2023-07-24 17:41:11 +02:00
Dongsu Park
027e1ca222
Merge pull request #988 from flatcar/go-1.19.11-and-1.20.6-main
Upgrade Go from 1.19.10 and 1.20.5 to 1.19.11 and 1.20.6
2023-07-24 17:07:54 +02:00
flatcar-ci
ca9115ea46 New version: main-3672.0.0-nightly-20230721-2100-INTERMEDIATE 2023-07-21 21:00:25 +00:00
flatcar-ci
0a48501c0d New version: main-3671.0.0-nightly-20230720-2100 2023-07-20 21:00:30 +00:00
Dongsu Park
648853c768
Merge pull request #998 from flatcar/runc-1.1.8-main
Upgrade Runc in main from 1.1.7 to 1.1.8
2023-07-20 16:02:31 +02:00
Dongsu Park
031a66fbd6 portage net-nds/openldap: update to 2.5.14
Update net-nds/openldap to 2.5.14 mainly to address CVE-2023-2953.

Gentoo ref: 5b1520ea69d410ab743eb7998b5d886bbf597375
2023-07-20 12:09:35 +02:00
Dongsu Park
f36ae06dd7 overlay app-containers/docker-cli: vendor docker client for fixing invalid header
To fix invalid header issue that started to happen when being built with
Go 1.19.11+, it is necessary for the docker cli repo to vendor the new docker
client part of github.com/docker/docker.

Based on https://github.com/docker/cli/commit/5d4e44df90bb.
2023-07-20 10:23:28 +02:00
Dongsu Park
3d1c3a66c0 overlay app-containers/docker-cli: Apply Flatcar modifications
Apply Flatcar patches, based on commit
817ad4c0db.
2023-07-20 10:20:48 +02:00
Dongsu Park
82045f0fd4 overlay app-containers/docker-cli: reset to Gentoo
Reset to the state according to the state of Gentoo upstream,
to commit b93160fedf.
to create Flatcar patches on top of that.
2023-07-20 10:18:40 +02:00
Dongsu Park
908df5f157 overlay app-containers/docker: fix invalid headers issue with Go 1.19.11
Docker client and daemon started to fail at sending or handling most
local connections when being compiled with Go 1.19.11, which addresses
CVE-2023-29406 by blocking invalid host headers of HTTP/1. As a
workaround, Docker started to define a dummy host header, and to use
it for local connections.

Backport the fixes to Flatcar to fix the runtime failures.

See also https://github.com/moby/moby/issues/45935,
https://github.com/moby/moby/pull/45942.
2023-07-20 10:11:47 +02:00
Dongsu Park
3d001c577d overlay app-containers/docker: Apply Flatcar modifications
Apply Flatcar patches, based on commit
9d6af12f1c.
2023-07-20 10:11:47 +02:00
Dongsu Park
c7209aaf50 overlay app-containers/docker: reset to Gentoo
Reset to the state according to the state of Gentoo upstream,
to commit 964117a9a2,
to create Flatcar patches on top of that.
2023-07-20 10:11:47 +02:00
Flatcar Buildbot
e4764ac549 app-containers/runc: Update from 1.1.7 to 1.1.8 2023-07-20 07:55:08 +00:00
Jeremi Piotrowski
75904af319
Merge pull request #979 from krishjainx/remove-sdk-errors
Check the url in get_sdk_binhost before echoing
2023-07-20 09:27:14 +02:00
flatcar-ci
b3154069a0 New version: main-3670.0.0-nightly-20230719-2100 2023-07-19 21:00:25 +00:00
Dongsu Park
5b271c4e49
Merge pull request #993 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-07-19 10:23:09 +02:00
Flatcar Buildbot
0ebbce8018 Update mantle container image to latest HEAD 2023-07-19 07:17:17 +00:00
Dongsu Park
ac21e361a5
Merge pull request #990 from flatcar/rust-1.71.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.70.0 to 1.71.0
2023-07-19 09:17:01 +02:00
flatcar-ci
9b68e195d0 New version: main-3669.0.0-nightly-20230718-2100 2023-07-18 21:00:28 +00:00
Dongsu Park
80f124a620 dev-lang/rust: fix path to bash completion of cargo
Since Rust 1.71.0, /etc/bash_completion.d/cargo is installed under
src, so it is necessary to adjust the file path to remove.
2023-07-18 15:20:01 +02:00
Flatcar Buildbot
eba8917982 dev-lang/rust: Update from 1.70.0 to 1.71.0 2023-07-18 09:51:06 +02:00
flatcar-ci
fdeb0a9ad0 New version: main-3668.0.0-nightly-20230717-2100 2023-07-17 21:00:29 +00:00
Kai Lüke
12de6d9b51
Merge pull request #989 from flatcar/kai/fix-build-sysext
ci-automation/vms: Export official release variable
2023-07-17 18:11:10 +02:00
Kai Lueke
095ab2392e ci-automation/vms: Export official release variable
The official release variable is used to decide whether a build ID gets
appended to the FLATCAR_VERSION (or VERSION in os-release) or not. It
was set for the image job but not for the vms job, causing the
build_sysext script to get the build ID appended to the FLATCAR_VERSION
which causes a mismatch with the one from the image job.
Set the official release variable in the vms job as well.
2023-07-17 17:27:59 +02:00
Kai Lueke
593b62d326 .gitignore: Ignore ci-cleanup.sh
The ci-cleanup file gets created in ci-automation/ to remove any
leftovers when a build gets stopped. Since it is in the git tree, git
status sees untracked files which is a bit confusing.
Ignore the ci-cleanup file.
2023-07-17 17:08:26 +02:00
Krish Jain
fadf4c2ebc Check the url in get_sdk_binhost before echoing
When running the build_packages script, one can encounter an error such as
'Error fetching binhost package info from.' This pertains to SDK packages (not
board packages). Since we have transitioned to the SDK container, the SDK
packages are no longer published independently from the container image.
2023-07-17 15:03:18 +05:30
Dongsu Park
7ae05d571a changelog: add security changelog for Go 1.19.11, 1.20.6 2023-07-17 10:31:40 +02:00