5663 Commits

Author SHA1 Message Date
Benjamin Gilbert
a5e81ed9b8 profiles: Enable lsof +-M and -Z flags
-Z reports SELinux contexts. +M reports portmapper registrations; -M is
the default. +-M is not very useful, but mayday passes -M, and fails to
record lsof output when that option is not supported.
2017-06-13 14:40:26 -07:00
Benjamin Gilbert
f56031ac76 profiles: Enable asynchronous DNS via pthreads
Synchronous DNS uses SIGALARM-based timeouts, which can cause crashes in
some applications. This change is specifically prompted by
<https://issues.apache.org/jira/browse/MESOS-7603> by way of
<https://groups.google.com/d/msg/coreos-dev/KILPPDRSPcg/PBaNF6VGAgAJ> but
probably a good thing to do anyway.
2017-06-13 14:29:42 -07:00
Euan Kemp
7f21bfc4cc Merge pull request #2597 from dgonyeo/dosfstools
coreos-base/coreos: add sys-fs/dosfstools
2017-06-08 19:56:58 -07:00
Benjamin Gilbert
9ec1e38c19 Merge pull request #2599 from bgilbert/oem-xendom0
coreos-base/oem-xendom0: drop package
2017-06-08 15:50:14 -07:00
Benjamin Gilbert
d57e277690 coreos-base/oem-xendom0: drop package 2017-06-08 15:49:25 -07:00
Euan Kemp
4b458ef5d3 Merge pull request #2566 from databus23/patch-1
Allow kubelet to load missing kernel modules
2017-06-08 14:59:04 -07:00
David Michael
d30032b7cc Merge pull request #2598 from dm0-/curl-gssapi
profiles: enable Negotiate authentication in curl
2017-06-08 14:21:57 -07:00
David Michael
34260a0484 profiles: enable Negotiate authentication in curl 2017-06-08 14:05:27 -07:00
Derek Gonyeo
4b8c01ff4b coreos-base/coreos: add sys-fs/dosfstools
This commit adds dosfstools to the image. This is due to Ignition
gaining vfat support, to allow it to manipulate boot partitions.
2017-06-07 10:59:49 -07:00
Benjamin Gilbert
cb2aec8664 Merge pull request #2596 from bgilbert/v4.11.3
sys-kernel/coreos-*: bump to v4.11.3
2017-06-06 19:04:34 -07:00
Benjamin Gilbert
833f649d20 sys-kernel/coreos-*: bump to v4.11.3 2017-06-06 13:17:59 -07:00
Geoff Levand
5617ab2074 Merge pull request #2511 from glevand/for-merge-flannel
Reenable flannel on arm64
2017-06-06 10:43:28 -07:00
Geoff Levand
6cddc1cb15 flannel-wrapper: Enable on arm64
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-06-05 10:05:36 -07:00
Geoff Levand
46fea78177 flannel-wrapper: Add missing metadata
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-06-05 10:05:36 -07:00
David Michael
e12e8c9dcc Merge pull request #2594 from dm0-/etcd
app-admin/etcd-wrapper: bump to 3.1.8
2017-06-02 18:30:29 -07:00
David Michael
dd98afc051 Merge pull request #2499 from glevand/for-merge-kublet
kubelet-wrapper: Enable on arm64
2017-06-02 17:29:24 -07:00
David Michael
0d6d6555ee app-admin/etcd-wrapper: bump to 3.1.8 2017-06-02 17:19:54 -07:00
David Michael
897c3f42a6 Merge pull request #2593 from dm0-/lz4
profiles: build lz4 support into journald
2017-06-02 17:19:24 -07:00
David Michael
84c14827a5 profiles: build lz4 support into journald
This fixes reading nspawn journals from the host when the container
runs systemd built with lz4 support.
2017-06-02 17:12:03 -07:00
David Michael
09793ebef9 Merge pull request #2592 from dm0-/initramfs-luks
sys-kernel/coreos-kernel: ensure the final systemd is installed
2017-06-01 15:06:58 -07:00
David Michael
7a3191926f Merge pull request #2591 from dm0-/glsa
Sync with GLSA changes
2017-05-31 19:05:54 -07:00
David Michael
f2789a8d3c sys-kernel/coreos-kernel: ensure the final systemd is installed
The systemd package from setup_board does not have USE=cryptsetup,
but it gets installed before build_packages, which satisfies the
build-time dependency from the kernel.  The initramfs should have
the cryptsetup files, so explicitly depend on it to order building
the kernel after the final systemd package.
2017-05-31 17:45:28 -07:00
David Michael
558f8d8b49 chore(metadata): Regenerate cache 2017-05-31 13:55:11 -07:00
David Michael
da45f54084 profiles: sync sudo version on arm64 2017-05-31 13:54:20 -07:00
David Michael
2515513330 coreos-base/coreos-dev: drop optional Xen dependencies 2017-05-31 13:54:03 -07:00
Benjamin Gilbert
56a97775be Merge pull request #2589 from crawford/metadata
Revert "coreos-base/coreos-metadata: bump to v0.10.0"
2017-05-31 10:25:56 -07:00
Alex Crawford
dbb5920071 Revert "coreos-base/coreos-metadata: bump to v0.10.0"
This reverts commit 6adf0ea778cdd90fbbdd29350511bf4291702105.
2017-05-31 08:43:44 -07:00
Fabian Ruff
fc2a26c11d Allow kubelet to load missing kernel modules
The `kubenet` network plugin uses `ebtables` to set up some [dedup rules](0480917b55/pkg/kubelet/network/kubenet/kubenet_linux.go (L808)). `ebtables` tries to automatically load missing `ebt_*` kernel modules when first used. Without access to `/lib/modules` this fails and `kubenet` subsequently fails to ensure the ebtables rules.
2017-05-31 09:15:13 +02:00
David Michael
1659319fb6 Merge pull request #2587 from dm0-/subkey
coreos-base/coreos-init: ship the new subkey in coreos-install
2017-05-30 13:02:31 -07:00
David Michael
a448855d9a coreos-base/coreos-init: ship the new subkey in coreos-install 2017-05-30 12:20:01 -07:00
Geoff Levand
fc65fc68a6 kubelet-wrapper: Enable on arm64
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-05-26 14:38:13 -07:00
David Michael
3feb415c5e Merge pull request #2567 from dm0-/torcx
Add the torcx generator
2017-05-24 13:48:20 -07:00
David Michael
df5b6cc5a9 coreos-base/coreos: include torcx 2017-05-24 13:33:36 -07:00
David Michael
f0e909840f app-arch/torcx: new package
The command is not installed into /usr/bin until the UI is done.
Install commands are included as comments for when that is ready.
2017-05-24 13:33:35 -07:00
David Michael
44b838462f Merge pull request #2584 from dm0-/revert-ignition
Revert "sys-apps/ignition: update to v0.15.0"
2017-05-24 11:57:09 -07:00
David Michael
4e7ef7308c Revert "sys-apps/ignition: update to v0.15.0"
This reverts commit 68c9d58c68609abd6a10440695aa40ab66745762.
2017-05-24 11:50:37 -07:00
Benjamin Gilbert
f37d5daa3d Merge pull request #2571 from zunkree/fix-flannel-wrapper-etc-ssl-certs-path
Fix flannel-wrapper etc-ssl-certs volume path
2017-05-24 11:46:22 -07:00
Benjamin Gilbert
f2de09bed2 Merge pull request #2583 from bgilbert/revert-sysusers
Revert "sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change"
2017-05-24 11:40:03 -07:00
David Michael
c77ad9f871 Merge pull request #2582 from dm0-/go
dev-lang/go: bump for CVE-2017-8932
2017-05-23 20:26:54 -07:00
Benjamin Gilbert
8e8ba5e9df Merge pull request #2581 from bgilbert/fsprogs
profiles: Update btrfs-progs and dosfstools
2017-05-23 19:21:13 -07:00
Benjamin Gilbert
9826cd8dd7 Revert "sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change"
This reverts commit 7ecd7706493ae4b40400a647863f1a0aa65dbd2c and bumps
the package versions again.
2017-05-23 19:19:49 -07:00
David Michael
d57c1c6584 dev-lang/go: bump for CVE-2017-8932 2017-05-23 18:38:12 -07:00
Benjamin Gilbert
6b9e02e7fe profiles: accept dosfstools 4.1 2017-05-23 15:52:28 -07:00
Benjamin Gilbert
3d8fd31eb9 profiles: update btrfs-progs; sync on arm64 2017-05-23 15:52:28 -07:00
Derek Gonyeo
6b2d0d1c30 Merge pull request #2580 from dgonyeo/coreos-metadata
coreos-base/coreos-metadata: bump to v0.10.0
2017-05-23 15:48:59 -07:00
Derek Gonyeo
8ff54c853b coreos-base/coreos-metadata: bump to v0.10.0 2017-05-23 15:38:49 -07:00
Derek Gonyeo
2e0189f112 Merge pull request #2579 from dgonyeo/ignition
sys-apps/ignition: update to v0.15.0
2017-05-23 14:15:35 -07:00
Derek Gonyeo
3d1fe433f5 Merge pull request #2578 from dgonyeo/master
sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change
2017-05-23 14:15:19 -07:00
Derek Gonyeo
43d36666ea sys-apps/ignition: update to v0.15.0 2017-05-23 14:12:38 -07:00
Derek Gonyeo
eb86f67cb2 sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change 2017-05-23 14:10:54 -07:00