mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-22 23:11:07 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,569 Commits 616 Branches 398 Tags
Commit Graph

5569 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
David Michael
9cdebd941c profiles: avoid more silly paths in prod images 2017-05-09 11:41:12 -07:00
David Michael
68f9fc1561 profiles: drop sloppy pkgconfig paths 
Currently, the only affected package is ipset.
 2017-05-09 11:41:12 -07:00
David Michael
f00c402c73 profiles: drop USE=python for libxml2 
The gtk-doc package was removed after the gtk-doc-am split.
 2017-05-09 11:41:12 -07:00
David Michael
e3844d02e8 sys-apps/systemd: make man pages available in the SDK 2017-05-09 11:41:12 -07:00
David Michael
1d3e52fc78 Merge pull request #2563 from dm0-/rpc 
Fix CVE-2017-8779
 2017-05-09 11:27:55 -07:00
David Michael
45155195d8 profiles: accept the latest rpcbind 2017-05-08 18:16:58 -07:00
David Michael
f93fa06e66 net-libs/libtirpc: apply CoreOS changes 2017-05-08 18:16:09 -07:00
David Michael
f68da24d2a net-libs/libtirpc: sync with the latest Gentoo version 2017-05-08 18:16:07 -07:00
David Michael
58cbd3d90b Merge pull request #2561 from dm0-/glsa 
profiles: bump arm64 versions for GLSAs
 2017-05-08 14:09:39 -07:00
David Michael
cbcf6b3e45 profiles: bump arm64 versions for GLSAs 2017-05-08 11:50:02 -07:00
Benjamin Gilbert
14c9b80e95 Merge pull request #2560 from bgilbert/kernel-hardening 
sys-kernel/coreos-modules: Enable some kernel hardening features
 2017-05-05 15:05:41 -07:00
Benjamin Gilbert
ee1709b256 sys-kernel/coreos-modules: Enable some kernel hardening features 
SLAB_FREELIST_RANDOM: Randomize slab allocator freelist order,
c7ce4f60ac199fb3521c5fcd64da21cee801ec2b

IO_STRICT_DEVMEM: Disallow access to /dev/mem regions that are bound
to a kernel driver, 90a545e981267e917b9d698ce07affd69787db87

HARDENED_USERCOPY: Add more address range checks to copy_{from,to}_user(),
f5509cc18daa7f82bcc553be70df2117c8eedc16
 2017-05-04 14:18:11 -07:00
Alex Crawford
e0b7a7a5f1 Merge pull request #2557 from crawford/etcd 
dev-db/etcd: remove etcd 0.4.9
 2017-05-04 02:30:26 -07:00
Alex Crawford
8f75b76ba6 chore(metadata): Regenerate cache 2017-05-04 09:21:17 +02:00
Alex Crawford
187a379d6e dev-db/etcd: remove etcd 0.4.9 2017-05-04 09:20:06 +02:00
Alex Crawford
c7c9880fca app-admin/etcd-wrapper: add the tmpfiles conf 
By default, the wrapper uses /var/lib/etcd which was created by the etcd
ebuild. Now that it's being removed, this ebuild needs to explicitly
create it.
 2017-05-03 18:19:05 +02:00
Benjamin Gilbert
11ef638f23 Merge pull request #2556 from bgilbert/kernel-4.11 
sys-kernel/coreos-*: bump to v4.11
 2017-05-02 17:16:28 -07:00
Benjamin Gilbert
3c12f4762b sys-kernel/coreos-*: bump to v4.11 
Config changes:

- The refreshed Secure Boot patches now use LOCK_DOWN_KERNEL and
EFI_SECURE_BOOT_LOCK_DOWN instead of EFI_SECURE_BOOT_SIG_ENFORCE.

- KPROBE_EVENT and UPROBE_EVENT were pluralized in
6b0b7551428e4caae1e2c023a529465a9a9ae2d4.

- DEBUG_SET_MODULE_RONX was renamed in
0f5bf6d0afe4be6e1391908ff2d6dc9730e91550, but as of
ad21fc4faa2a1f919bac1073b885df9310dbc581 it's mandatory on both supported
arches. Dropped.

- VMXNET3 conflicts with ARM64_64K_PAGES as of
fbdf0e28d061708cf18ba0f8e0db5360dc9a15b9, and likely doesn't make sense on
ARM. Moved to amd64.

- TIMER_STATS was dropped in dfb4357da6ddbdf57d583ba64361c9d792b0e0b1.

- CPU_FREQ_STAT_DETAILS was dropped in
801e0f378fe7d53f87246037bf40567277275418.
 2017-05-02 14:44:10 -07:00
Benjamin Gilbert
bc828bb67c Merge pull request #2555 from bgilbert/revbump-usage 
sys-kernel/coreos-sources: Fix revbump.sh error if run without args
 2017-05-01 17:53:03 -07:00
Benjamin Gilbert
d034ddc21f sys-kernel/coreos-sources: Fix revbump.sh error if run without args 2017-05-01 17:51:27 -07:00
Geoff Levand
61896d1e5a Merge pull request #2520 from glevand/for-merge-etcd 
Enable etcd-wrapper on arm64.
 2017-05-01 10:33:56 -07:00
David Michael
f12886d5af Merge pull request #2554 from dm0-/grub 
sys-boot/grub: bump to 2.02
 2017-04-28 16:56:38 -07:00
David Michael
eab22c4326 sys-boot/grub: bump to 2.02 2017-04-28 14:20:43 -07:00
Euan Kemp
472522846a Merge pull request #2553 from euank/flanneld-timeout 
app-admin/flannel-wrapper: update timeouts & update version
 2017-04-27 15:49:26 -07:00
Euan Kemp
0894229a46 app-admin/flannel-wrapper: update to 0.7.1 
Rote version bump
 2017-04-27 14:59:41 -07:00
Euan Kemp
d3fdc91bf2 app-admin/flannel-wrapper: update timeouts 
See https://github.com/coreos/bugs/issues/1833 where this was requested.

This has become more important with the more recent flannel releases
including kubernetes and becoming larger as well.

The value of 5 minutes is arbitrarily chosen as a reasonable increase
over the default 90s.
 2017-04-27 14:58:35 -07:00
Geoff Levand
e796a9033e coreos: Enable etcd-wrapper on arm64 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-04-27 09:33:44 -07:00
Geoff Levand
52105e099d etcd-wrapper: Enable on arm64 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-04-27 09:33:44 -07:00
Geoff Levand
1e226ef625 etcd-wrapper: Add missing metadata.xml 
Signed-off-by: Geoff Levand <geoff@infradead.org>
 2017-04-27 09:33:44 -07:00
David Michael
cbedfb4668 Merge pull request #2550 from dm0-/bugs-1936 
app-emulation/docker: mask bridges from "docker network create"
 2017-04-26 12:28:36 -07:00
David Michael
915c03f3a0 app-emulation/docker: mask bridges from "docker network create" 
There will be more race conditions from networkd attempting to
claim every network interface for users of "docker network" without
this Match pattern.  Bridges are named "br-" followed by hex.
 2017-04-26 12:26:17 -07:00
David Michael
d766214b2e Merge pull request #2549 from dm0-/etcd 
app-admin/etcd-wrapper: bump to etcd 3.1.6
 2017-04-26 12:02:14 -07:00
David Michael
0bf60e24fe app-admin/etcd-wrapper: bump to etcd 3.1.6 2017-04-26 11:45:38 -07:00
David Michael
b9e67eea2a Merge pull request #2548 from dm0-/curl 
profiles: bump curl
 2017-04-25 14:04:49 -07:00
David Michael
bbf8bdc484 profiles: bump curl 2017-04-25 14:00:21 -07:00
Benjamin Gilbert
7bca3363bd Merge pull request #2545 from bgilbert/revbump-sigs 
sys-kernel/coreos-sources: Have revbump.sh check sigs and update manifest
 2017-04-25 12:11:03 -07:00
Benjamin Gilbert
5e4a199c5a Merge pull request #2547 from bgilbert/kernel-4.10.12 
sys-kernel/coreos-*: bump to v4.10.12
 2017-04-24 19:18:12 -07:00
Benjamin Gilbert
7728ebf35c sys-kernel/coreos-*: bump to v4.10.12 2017-04-24 19:10:33 -07:00
Benjamin Gilbert
c4a870d0ca sys-kernel/coreos-sources: Have revbump.sh check sigs and update manifest 
We now need /usr/bin/ebuild (as well as several others), so it's less
practical to run revbump.sh outside the SDK chroot.
 2017-04-24 18:15:48 -07:00
Benjamin Gilbert
be80585e22 sys-kernel/coreos-sources: Add kernel signing keys to revbump.sh 
Linus Torvalds for releases and Greg KH for stable patches.
 2017-04-24 18:08:53 -07:00
Benjamin Gilbert
dfc93578bc sys-kernel/coreos-sources: Allow revbump.sh srcdir to be relative path 2017-04-24 18:07:38 -07:00
David Michael
25e66047a5 Merge pull request #2544 from dm0-/containerd 
Build containerd with Go 1.7.5
 2017-04-24 17:51:07 -07:00
David Michael
215033f7d9 app-emulation/containerd: build the Docker 1.12 branch with go1.7 
This will only matter for future beta/stable releases that continue
to hold back Docker >= 1.13.
 2017-04-24 17:33:30 -07:00
David Michael
4942a3c256 dev-lang/go: bump to 1.7.5 2017-04-24 17:32:36 -07:00
David Michael
f48cf6e858 Merge pull request #2534 from dm0-/eclass 
eclass: quote cros-workon assignments
 2017-04-21 16:33:19 -07:00
David Michael
d85c33bcd1 eclass: quote cros-workon assignments 
With portage-2.3.3, failglob errors are printed when any of these
lines expand to ": *", so quote the variables to not use patterns.
 2017-04-21 16:26:13 -07:00
David Michael
b0ccc96a4f Merge pull request #2527 from dm0-/gce 
GCE Fixes
 2017-04-21 15:29:49 -07:00
David Michael
3a47c532ac Merge pull request #2523 from dm0-/portage 
Upgrade portage
 2017-04-21 15:19:01 -07:00
David Michael
294a5606c6 Merge pull request #2533 from dm0-/toolbox 
app-admin/toolbox: bump for the SSH login shell fix
 2017-04-21 14:50:19 -07:00
David Michael
3dbb207739 Merge pull request #2531 from dm0-/dnsmasq 
Fix dnsmasq cross-compilation
 2017-04-21 14:44:00 -07:00