mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-23 15:31:05 +02:00
Code Issues Packages Projects Releases Wiki Activity
22,893 Commits 616 Branches 394 Tags
Commit Graph

22893 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dongsu Park
8dffb05eb7 Merge pull request #291 from flatcar-linux/dongsu/bpftool 
dev-util/bpftool: import from Gentoo
 2022-02-18 11:53:37 +01:00
Krzesimir Nowak
05ffa99fbe Merge pull request #290 from flatcar-linux/krnowak/pkg-updates-2011 
Update/drop eclasses from 2011
 2022-02-18 10:47:13 +01:00
Kai Lueke
14bf508412 sys-apps/baselayout: remove duplicates of acct-user|group 
This pulls in
https://github.com/flatcar-linux/baselayout/pull/23
to remove user entries which get safely created through
https://github.com/flatcar-linux/scripts/pull/227
using the acct-user ID allocations for systemd-sysusers.
 2022-02-18 10:21:11 +01:00
Dongsu Park
5531aed931 changelog: add changelog for bpftool 5.15.8 2022-02-18 07:36:32 +01:00
Dongsu Park
11a2a85b79 dev-util/bpftool: import from Gentoo 
Import a new package dev-util/bpftool from Gentoo, to provide bpftool
in the production images.
 2022-02-17 16:23:50 +01:00
Sayan Chowdhury
560122f49d
build_library/vm_image_util.sh: Pro image to use non-pro package & use flag 2022-02-17 19:42:05 +05:30
Dongsu Park
a85e311aca coreos-base/hard-host-depends: add docutils, patchutils 
Add dev-python/docutils, dev-util/patchutils to hard-host-depends.
Without adding those in the SDK, the new package dev-util/bpftool would
end up pulling in the new dependencies into the production images, which
should not happen.
 2022-02-17 13:52:47 +01:00
Dongsu Park
0fc96039a9 profiles: force enable bpftool for arm64 
As dev-util/bpftool does not have a keyword arm64, we need to force
enable arm64 keyword for bpftool.
 2022-02-17 13:49:22 +01:00
Dongsu Park
9b9ac5ea39 coreos-base/coreos: add dev-util/bpftool 
Get dev-util/bpftool included in the production images by default.
 2022-02-17 13:48:42 +01:00
Thilo Fromm
95ef0b7322 ci-automation: git author and curl verboseness 
- Git author configuration moves to tagging function and put under a
  condition so as to not pollute peoples' workspaces.
- curl now less verbose since it was spamming logs with TLS debug
  information.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
 2022-02-17 12:31:07 +01:00
Thilo Fromm
3a416fbf32 ci-automation testing: address PR review comments 
- add cleanup script to test.sh
- remove wrapper function from qemu test

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
 2022-02-17 12:30:36 +01:00
Dongsu Park
f9c6c3fc09 Merge pull request #289 from flatcar-linux/dongsu/glsa-20220216 
metadata: update GLSA metadata 2022-02-16
 2022-02-17 11:12:40 +01:00
Dongsu Park
173554db7a
Merge pull request #229 from flatcar-linux/dongsu/glsa-20220216 
build_library: update allow list for GLSA checks 2022-02-16
 2022-02-17 11:12:26 +01:00
Krzesimir Nowak
c5dbf4fc5b eclass/savedconfig: Sync with gentoo 
It's from gentoo commit eb71dfec11e09ae40ae90f27305948097b6591a2.
 2022-02-17 11:01:48 +01:00
Krzesimir Nowak
cccd682d0e eclass/vim-doc: Sync with gentoo 
It's from gentoo commit d1d130bae55780d7a710dcaef4df63b8bf6192fa.
 2022-02-17 11:01:48 +01:00
Krzesimir Nowak
60e27b7d97 eclass: Drop unused eclasses 2022-02-17 11:01:48 +01:00
Thilo Fromm
6c76bfa1cd
ci-automation/tapfile_helper_lib.sh: add @pothos' retcode fix 
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
 2022-02-17 10:45:10 +01:00
Dongsu Park
580a5c6852 build_library: update GLSA allowlist 
201908-24: polkit 0.120-r2, so not affected
201909-01: perl 5.34.0, so not affected
202003-26: python 3.9.8, so not affected
202005-09: python 3.9.8, so not affected
202006-03: perl 5.34.0, so not affected
202008-01: python 3.9.8, so not affected
202101-18: python 3.9.8, so not affected
202104-04: python 3.9.8, so not affected
202105-34: bash 5.1_p8, so not affected
202107-31: polkit 0.120-r2, so not affected
202107-48: systemd 250.3, so not affected
 2022-02-17 10:44:28 +01:00
Dongsu Park
a900d579c4 *: blacklist/whitelist to denylist/allowlist 
Replace blacklist with denylist, and whitelist with allowlist.
Use proper vocabulary in all over the code.
 2022-02-17 10:44:25 +01:00
Thilo Fromm
5bfe2f395c
Apply @pothos' suggestions from code review 
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
 2022-02-17 10:29:05 +01:00
Krzesimir Nowak
6d0d5625f1 Merge pull request #1657 from flatcar-linux/linux-5.15.24-main 
Upgrade Linux Kernel in main from 5.15.23 to 5.15.24
 2022-02-17 10:23:18 +01:00
Kai Lüke
81fd6a88a2 Merge pull request #1651 from flatcar-linux/kai/use-networkd-conf-drop-in 
Replace systemd patch by a drop-in file
 2022-02-17 10:09:32 +01:00
Kai Lueke
584693874b Replace systemd patch by a drop-in file 
This pulls in
https://github.com/flatcar-linux/init/pull/61
and
https://github.com/flatcar-linux/baselayout/pull/22
to use a drop-in file instead of the systemd patch.
 2022-02-17 10:08:43 +01:00
Dongsu Park
5b1acafa48 Merge pull request #1650 from flatcar-linux/containerd-1.6.0-main 
Upgrade Containerd in main from 1.5.9 to 1.6.0
 2022-02-17 09:12:03 +01:00
Flatcar Buildbot
52e8cfc8f2 sys-kernel: Upgrade Kernel 5.15.23 to 5.15.24 2022-02-17 07:22:23 +00:00
Thilo Fromm
f6f44e2ca8 ci-automation: first stab at adding testing 
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
 2022-02-16 19:59:45 +01:00
Dongsu Park
1fb18aab6f Merge pull request #288 from flatcar-linux/dongsu/libarchive-3.5.3 
app-arch/libarchive: update to 3.5.3
 2022-02-16 17:58:03 +01:00
Dongsu Park
781ebfb45b changelog: add changelog for libarchive 3.5.3 2022-02-16 15:55:36 +01:00
Dongsu Park
91d9b4fb86 app-arch/libarchive: update to 3.5.3 
Update app-arch/libarchive to 3.5.3 that fixes CVE-2021-36976,
as well as remaining issues w.r.t CVE-2021-31566.
 2022-02-16 15:55:36 +01:00
Dongsu Park
d79bbf0c28 metadata: update GLSA metadata 20220216 2022-02-16 15:16:37 +01:00
Dongsu Park
e71406c68b Merge pull request #286 from flatcar-linux/dongsu/cifs-utils-6.13 
net-fs/cifs-utils: update to 6.13-r1
 2022-02-16 14:38:18 +01:00
Jeremi Piotrowski
fbe4fbe3b6 Merge pull request #1649 from flatcar-linux/jepio/systemd-gnuefi-target-only 
profiles/coreos: move gnuefi systemd USE flag to target
 2022-02-16 12:58:06 +01:00
Flatcar Buildbot
16e00441cb app-emulation: Upgrade Containerd 1.5.9 to 1.6.0 2022-02-16 11:20:20 +00:00
Kai Lüke
221351927e
Merge pull request #226 from flatcar-linux/kai/package-diff 
jenkins/images: print out image diff report
 2022-02-16 12:10:30 +01:00
Kai Lueke
b949428185 jenkins/images: print out image diff report 
Often a change results in unexpected effects on the image, e.g., when
a wrong package version gets chosen or the package installs files under
/etc, or binaries of library dependencies get pulled in. Besides
inspecting the image manually, the package-diff tool also gives
valuable insights.
Run the package-diff tool in a comparison to the last release and print
the image URL alongside for convenience.
 2022-02-16 10:12:48 +01:00
Dongsu Park
97a33ad7fa changelog: add changelog for cifs-utils 6.13 2022-02-16 09:44:29 +01:00
Dongsu Park
a0a787f0ba net-fs/cifs-utils: update to 6.13-r1 
Update net-fs/cifs-utils to 6.13-r1, mainly to address CVE-2021-20208.
 2022-02-16 09:44:29 +01:00
Jeremi Piotrowski
5228888a5c profiles/coreos: move gnuefi systemd USE flag to target 
SDK bootstrap is failing with:

  Message: sbat-distro (from ID):

  ../systemd-stable-250.3/src/boot/efi/meson.build:189:24: ERROR: Problem encountered: Required sbat-distro option not set and autodetection failed

The gnuefi USE flag controls whether bootctl and systemd-boot are built, but we
only need those on the target. Currently the USE flag is set for SDK as well,
so move it to coreos/targets/generic.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2022-02-16 07:57:38 +01:00
Kai Lüke
330a7461fb Merge pull request #1636 from JAORMX/enable-auditd 
Add auditd package and systemd unit
 2022-02-15 20:38:49 +01:00
Kai Lüke
270806ad24 Update changelog/changes/2022-02-15-auditd.md 2022-02-15 20:33:33 +01:00
Krzesimir Nowak
6d88b5ecf7 Merge pull request #276 from flatcar-linux/krnowak/systemd-250 
Add missing users and groups for systemd update, update them and their eclasses
 2022-02-15 17:46:04 +01:00
Krzesimir Nowak
26f624cb8d Merge pull request #1579 from flatcar-linux/krnowak/systemd-250 
sys-apps/systemd: Update to 250.3
 2022-02-15 17:46:03 +01:00
Krzesimir Nowak
b8505e5d89 profiles: Override UIDs and GIDs where we differ grom Gentoo 
These mostly are UIDs and GIDs that we have allocated before we picked
up changes from Gentoo.
 2022-02-15 17:35:28 +01:00
Krzesimir Nowak
f186c4720d sys-apps/baselayout: Bump 
Add missing entries to passwd and group.

Updated netperf needs netperf user and group. Updated systemd needs
various systemd users and groups. Dnsmasq also seems to require its
own user/group.

All this is added to prevent systemd-sysusers adding these to
/etc/passwd. And systemd-sysusers adds these, because the updated
user/group eclass in portage-stable now drops configuration files into
/usr/lib/sysusers.d. Maybe at some point we will switch over to
(patched?) systemd-sysusers, so this catch-up game won't be necessary,
but we are not there yet.
 2022-02-15 17:35:28 +01:00
Krzesimir Nowak
ffe433d726 acct-user/systemd-resolve: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
93d0781752 acct-user/systemd-network: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
9c1530253c acct-user/systemd-journal-remote: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
d42e47d064 acct-group/systemd-resolve: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
30c69343a3 acct-group/systemd-network: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00
Krzesimir Nowak
a1b82b904d acct-group/systemd-journal-remote: Add from gentoo 
It's from gentoo commit 38b155fa1bf907617067c98eb4ba3a5d0790eb1a.
 2022-02-15 17:16:07 +01:00