Commit Graph

18540 Commits

Author SHA1 Message Date
Flatcar Buildbot
98ef92bbed app-containers/runc: Sync with Gentoo
It's from Gentoo commit 6627fbc8ddb4d249139d7f17722090d9e2c32341.
2024-08-01 12:57:18 +02:00
Flatcar Buildbot
509af23ae8 app-arch/xz-utils: Sync with Gentoo
It's from Gentoo commit b4a71a6481729d59ff6c1928ec1c62a0148fc95b.
2024-08-01 12:57:18 +02:00
Flatcar Buildbot
63f9c2f7e3 app-arch/unzip: Sync with Gentoo
It's from Gentoo commit df3f2bc6cce357fa91ae0897cecd2a9bc9f0073a.
2024-08-01 12:57:18 +02:00
Flatcar Buildbot
a2ecde3381 app-arch/lz4: Sync with Gentoo
It's from Gentoo commit 461b33118c1d8b038088b5d8552f2fa8658bc5af.
2024-08-01 12:57:18 +02:00
Mathieu Tortuyaux
05b0feec73
Merge pull request #2152 from flatcar/tormath1/docker
docker: upgrade to 26.1.0
2024-08-01 11:48:14 +02:00
Mathieu Tortuyaux
3f8b4a0fbf
overlay profiles: remove useless device-mapper use flag for Docker
This is not supported anymore

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-08-01 11:46:59 +02:00
flatcar-ci
b2ddb80485 New version: main-4048.0.0-nightly-20240731-2100 2024-07-31 21:00:27 +00:00
Flatcar Buildbot
86ea6ecf95 Update mantle container image to latest HEAD 2024-07-31 17:01:34 +00:00
Mathieu Tortuyaux
3f33f6b417
profiles: accept unstable aardvark-dns
this solves a compiling issue with Rust 1.80 (because of the 'time'
dependency).

```
error[E0282]: type annotations needed for `Box<_>`
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-31 19:00:45 +02:00
Mathieu Tortuyaux
5b236ed286
dev-lang/rust: remove non-used patch
it has been dropped by Gentoo upstream

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-31 19:00:45 +02:00
Flatcar Buildbot
a4ff16bee1
dev-lang/rust: Update from 1.79.0 to 1.80.0 2024-07-31 19:00:45 +02:00
flatcar-ci
31f8568668 New version: main-4047.0.0-nightly-20240730-2100 2024-07-30 21:00:32 +00:00
Mathieu Tortuyaux
fd2c1a809d
Merge pull request #2141 from flatcar/tormath1/hetzner
coreos-base/afterburn: pull Hetzner patches
2024-07-30 16:09:33 +02:00
Mathieu Tortuyaux
1b4d5c168e
Merge pull request #2160 from flatcar/linux-6.6.43-main
Upgrade Linux Kernel for main from 6.6.41 to 6.6.43
2024-07-30 11:24:59 +02:00
Jeremi Piotrowski
b67648f7da
Merge pull request #2158 from l0kod/landlock
Enable Landlock LSM in the kernel.
2024-07-30 10:14:48 +02:00
flatcar-ci
db300a9ac7 New version: main-4046.0.0-nightly-20240729-2100 2024-07-29 21:00:26 +00:00
Flatcar Buildbot
e917c4066f
sys-kernel/coreos-sources: Update from 6.6.41 to 6.6.43 2024-07-29 17:59:00 +02:00
Mathieu Tortuyaux
9bfbdcb162
app-containers/docker-cli: sync with Gentoo
Commit-Ref: 74214006c9

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-29 17:50:10 +02:00
Mathieu Tortuyaux
6bd9d82d32
app-containers/docker: sync with Gentoo
Commit-Ref: 74214006c9

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-29 17:50:10 +02:00
Mathieu Tortuyaux
ca129b1d96
eclass/coreos-go-depend: use go 1.21
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-29 17:50:10 +02:00
Mathieu Tortuyaux
57f2b0c8e2
coreos-base/hard-host-depends: use go 1.21
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-29 17:50:10 +02:00
Mathieu Tortuyaux
3368d962ae
dev-lang/go: bump to 1.21.12
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-29 17:50:10 +02:00
Mathieu Tortuyaux
9ec5ddc9b3
app-emulation/amazon-ssm-agent: drop COREOS_GO_VERSION
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-29 17:50:09 +02:00
Flatcar Buildbot
c0839dd919 Update mantle container image to latest HEAD 2024-07-29 15:26:44 +00:00
Mickaël Salaün
b2be807349
sys-kernel/coreos-modules: Enable Landlock
Landlock is a feature to create security sandboxes thanks to 3 dedicated
system calls.  They are designed to be safe to used by any processes,
which can only drop their privileges, similarly to seccomp.

The new Landlock LSM is build in the kernel (CONFIG_SECURITY_LANDLOCK=y)
but it is not enough to make it usable by default.  As a stackable LSM,
it is required to enable it at boot time with the CONFIG_LSM list.  See
https://docs.kernel.org/userspace-api/landlock.html#kernel-support

As for other stackable LSMs, prepending Landlock to the default LSM list
enables users to potentially get more protection by default by letting
programs sandbox themselves.

As a dependency, CONFIG_SECURITY_PATH=y will be automatically set.

Signed-off-by: Mickaël Salaün <mic@digikod.net>
2024-07-29 15:10:55 +02:00
Jeremi Piotrowski
417790ff0d app-misc/ca-certificates: Switch to https protocol in SRC_URI
Ftp access appears to have been decommissioned (access times out) so switch to
the https mirror that Mozilla provides.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2024-07-29 10:37:36 +02:00
Flatcar Buildbot
87c73ec262 app-misc/ca-certificates: Update from 3.102 to 3.102.1 2024-07-29 07:21:21 +00:00
flatcar-ci
a94f908998 New version: main-4041.0.0-nightly-20240724-2100 2024-07-24 21:00:27 +00:00
Flatcar Buildbot
c5b7a56352 Update mantle container image to latest HEAD 2024-07-23 21:00:58 +00:00
flatcar-ci
55cd93be03 New version: main-4040.0.0-nightly-20240723-2100 2024-07-23 21:00:40 +00:00
Mathieu Tortuyaux
911386c504
coreos-base/afterburn: pull Hetzner patch
* allows Afterburn to get private IPs from Hetzner metadata
service
* fix duplicate attribute prefix

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-23 12:01:30 +02:00
flatcar-ci
15386d5459 New version: main-4039.0.0-nightly-20240722-2100 2024-07-22 21:00:26 +00:00
Mathieu Tortuyaux
dd9035644f
Merge pull request #2126 from flatcar/buildbot/weekly-portage-stable-package-updates-2024-07-16
Weekly portage-stable package updates 2024-07-16
2024-07-22 17:13:02 +02:00
Dongsu Park
29f7c259bd
Merge pull request #2069 from flatcar/buildbot/monthly-glsa-metadata-updates-2024-07-01
Monthly GLSA metadata 2024-07-01
2024-07-22 10:13:49 +02:00
flatcar-ci
dab06c59d6 New version: main-4036.0.0-nightly-20240719-2100 2024-07-20 03:00:28 +00:00
flatcar-ci
868c931c12 New version: main-4036.0.0-nightly-20240719-2100-INTERMEDIATE 2024-07-19 21:00:27 +00:00
Mathieu Tortuyaux
98500cd0be
Merge pull request #2139 from flatcar/containerd-1.7.20-main
Upgrade Containerd in main from 1.7.19 to 1.7.20
2024-07-19 17:03:45 +02:00
Mathieu Tortuyaux
b9cb2aba53
overlay profiles: Drop accept keywords for sys-libs/libnvme
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-19 10:55:52 +02:00
Mathieu Tortuyaux
03e38f76f4
overlay profiles: Drop accept keywords for sys-apps/nvme-cli
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-19 10:35:36 +02:00
Mathieu Tortuyaux
8caa3537c0
overlay profiles: Drop accept keywords for sys-apps/coreutils
This reverts ac79ba8702

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-19 10:32:53 +02:00
Flatcar Buildbot
cfb72f2e85 app-containers/containerd: Update from 1.7.19 to 1.7.20 2024-07-19 08:17:51 +00:00
Flatcar Buildbot
361d7d99e1 sys-kernel/coreos-sources: Update from 6.6.40 to 6.6.41 2024-07-19 07:14:34 +00:00
Mathieu Tortuyaux
9c6cacacad
Revert "dev-python/tomli: Drop unused package"
This reverts commit aaed2bdabb.
2024-07-17 09:55:10 +02:00
Flatcar Buildbot
8b7394459a portage-stable/metadata: Monthly GLSA metadata updates 2024-07-17 09:41:24 +02:00
Flatcar Buildbot
1524f70113 Update mantle container image to latest HEAD 2024-07-17 07:24:28 +00:00
Mathieu Tortuyaux
ca6660d6b0
Merge pull request #2123 from flatcar/linux-6.6.40-main
Upgrade Linux Kernel for main from 6.6.39 to 6.6.40
2024-07-17 09:24:14 +02:00
flatcar-ci
de9d0d98d7 New version: main-4033.0.0-nightly-20240716-2100 2024-07-16 21:00:29 +00:00
Mathieu Tortuyaux
c9e11c054c
Revert "dev-python/tomli: Drop unused package"
This reverts commit aaed2bdabb.
2024-07-16 18:13:18 +02:00
Mathieu Tortuyaux
66508a5920
profiles/repo_name: revert to portage-stable
This has to stay this way.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2024-07-16 15:40:43 +02:00
Flatcar Buildbot
2e4bea9ff4
x11-base/xorg-proto: Sync with Gentoo
It's from Gentoo commit 0cc26b9606909947c2f7b20374dcff4c368167c4.
2024-07-16 13:32:36 +02:00