Alex Crawford
33a7bf6d50
Merge pull request #954 from crawford/docker
...
Revert "app-emulation/docker: bump to v1.3.1"
2014-11-07 14:53:45 -08:00
Alex Crawford
bb1fe1fd15
Revert "app-emulation/docker: bump to v1.3.1"
...
This reverts commit 87efde004420ce93bca42d531d140d05150e44ba.
Bumps docker-1.3.1.ebuild -> docker-1.3.0-r1.ebuild.
2014-11-07 14:48:27 -08:00
Greg Kroah-Hartman
057f2ace49
Merge pull request #952 from marineam/secure
...
Enable kernel module signing
2014-11-07 08:28:08 -08:00
Alex Crawford
ef04c59e23
coreos-base/coreos-init: disable reverse DNS lookups in sshd
2014-11-06 22:03:34 -08:00
Michael Marineau
9621f09547
coreos-kernel: enable module and kexec signature verification
...
The module verification is in permissive mode by default, loading
unsigned modules will simply taint the kernel. The kexec verification
doesn't directly impact us right now since we are not using the newer
file based syscall right now.
2014-11-06 16:29:29 -08:00
Michael Marineau
6ac92e93a0
coreos-kernel: prune old kernel versions
2014-11-06 16:16:58 -08:00
Alex Crawford
9745288600
app-emulation/open-vm-tools: read passwords from shadow database
2014-11-06 15:47:32 -08:00
Alex Crawford
d707a23863
coreos-base/vboot_reference: cgpt repair command
...
Allow repair command to accept a whole disk or partition.
2014-11-06 12:56:07 -08:00
Michael Marineau
7bafeb9b93
edk2: install split OVMF_CODE and OVMF_VARS images
...
Both OVMF and QEMU have gained support for splitting the combined OVMF
image into two, now variable storage is its own file.
2014-11-05 15:47:54 -08:00
Michael Marineau
2bd4c6a7be
edk2: fix up UEFI firmware build for QEMU and add secure boot flag
2014-11-05 14:02:53 -08:00
Alex Crawford
73a1e46a97
Merge pull request #947 from crawford/waagent
...
app-emulation/wa-linux-agent: bump agent, removing local patches
2014-11-05 13:26:59 -08:00
Chris Armstrong
1f7d3fd2e8
app-emulation/docker: bump to v1.3.1
2014-11-05 12:06:52 -08:00
Alex Crawford
d2056226b1
app-emulation/wa-linux-agent: bump agent, removing local patches
2014-11-05 11:55:35 -08:00
Michael Marineau
9d59b015e2
Merge pull request #931 from crawford/ncurses
...
sys-libs/ncurses: add screen-16color
2014-11-03 15:43:40 -08:00
Alex Crawford
d0dec6c4fc
Merge pull request #945 from crawford/cloudinit
...
coreos-base/coreos-cloudinit: bump to v0.10.7
2014-11-03 14:51:16 -08:00
Alex Crawford
7877416bcf
coreos-base/coreos-cloudinit: bump to v0.10.7
2014-11-03 14:46:55 -08:00
Michael Marineau
1d7e500e15
Merge pull request #944 from marineam/fix
...
vboot_reference: fix hybrid MBR creation in cgpt
2014-11-03 11:16:03 -08:00
Michael Marineau
486e12b436
vboot_reference: fix hybrid MBR creation in cgpt
2014-11-03 10:44:49 -08:00
Michael Marineau
88fade37ea
coreos-kernel: re-add iptables NAT modules
...
NAT support was mistakenly dropped in commit a5deb9a7 due to changes in
config option naming between 3.16 and 3.17.
2014-11-02 17:17:50 -08:00
Michael Marineau
d31c09b86f
vboot_reference: update cgpt w/ new hybrid MBR logic
...
https://github.com/coreos/vboot_reference/pull/22
2014-10-31 20:29:44 -07:00
Jonathan Boulle
de49fe6a0d
Merge pull request #940 from jonboulle/master
...
locksmith: bump to 0.2.2
2014-10-30 16:31:25 -07:00
Jonathan Boulle
b389e81dad
locksmith: bump to 0.2.2
2014-10-30 16:07:12 -07:00
Alex Crawford
1d45c2499e
sys-kernel/coreos-kernel: bump to v3.17.2
2014-10-30 13:56:56 -07:00
Alex Crawford
4ae6c2ed04
Merge pull request #936 from crawford/jq
...
coreos-devel/sdk-depends: add jq
2014-10-22 15:27:47 -07:00
Alex Crawford
bcc1e6c64d
coreos-devel/sdk-depends: add jq
2014-10-22 15:22:43 -07:00
Vito Caputo
ff8079fb14
update_engine: string::assign unset alephversion from appversion
2014-10-22 14:05:17 -04:00
Vito Caputo
358ff85697
libchrome: Fix append bug in file_util::ReadFileToString()
...
This commit reproduces in the form of an epatch an upstream libchrome
fix to prevent ReadFileToString() from appending to the provided output
string.
Bug was observed in update_engine alephversion pref maintenance
2014-10-21 20:53:53 -04:00
Alex Crawford
f7b8130ce9
sys-libs/ncurses: add screen-16color
2014-10-20 23:06:22 -05:00
Michael Marineau
a03f650a0d
grub: add cros-workon based live ebuild, adjust use flags for testing
...
After this grub unit tests almost work, for 'pc' at least. The only one
in that set that doesn't work are some tests that rely on video
checksums to validate the output. Tests for other targets like 'efi-64'
are a whole new adventure to figure out.
2014-10-19 22:24:59 -07:00
Michael Marineau
8ad4f1860c
grub: sync with current upstream live ebuild
...
Minor tweaks, doing this to simplify future changes/maintenance.
2014-10-19 22:24:59 -07:00
Michael Marineau
80c7f31af6
profiles: do not install live dtc ebuild
...
Not a significant feature here, it is an OpenFirmware compiler and
optional dependency of QEMU. Old ChromeOS stuff was allowing the live
ebuild and the project's upstream host seems to now be gone, breaking
our builds. Remove keyword, remove from hard-host-depends. It can be
pulled in as a dependency of QEMU if needed.
2014-10-19 11:59:09 -07:00
Alex Crawford
27974f8391
coreos-base/update_engine: call cgpt repair in postinst
2014-10-18 22:28:30 -07:00
Alex Crawford
1f71a90ea7
coreos-base/oem-azure: add etcd election timeout
2014-10-17 22:31:51 -07:00
Michael Marineau
8e8f37914a
Merge pull request #926 from marineam/ssl
...
update_engine: disable SSLv3
2014-10-16 14:20:07 -07:00
Michael Marineau
fb37d669bb
update_engine: disable SSLv3
2014-10-16 14:17:18 -07:00
Alex Crawford
be346907bd
app-emulation/docker: bump to v1.3.0
2014-10-16 12:31:53 -07:00
Alex Crawford
bfad4976a1
Merge pull request #923 from crawford/lpfc
...
sys-kernel/coreos-kernel: enable SCSI LPFC support
2014-10-15 15:46:53 -07:00
Alex Crawford
e10cbc2300
sys-kernel/coreos-kernel: enable LPFC support
2014-10-15 13:52:27 -07:00
Vito Caputo
0cd3ddffff
Merge pull request #921 from vcaputo/bootengine_acpi_rsdp
...
bootengine: supply acpi_rsdp to kexec on efi systems
2014-10-15 13:29:57 -07:00
Vito Caputo
45cefdf96a
bootengine: supply acpi_rsdp to kexec on efi systems
2014-10-15 15:41:07 -04:00
Michael Marineau
10e950f763
profiles: OpenSSL 1.0.1j
2014-10-15 10:49:39 -07:00
Vito Caputo
d65f2d6d70
Revert to 0.1.8 pre sync with upstream godbus/go-systemd
...
Leak returned with upstream changes.
2014-10-14 18:50:20 -04:00
Vito Caputo
33c1f1bbe3
Merge pull request #917 from vcaputo/locksmith_hardened_gcc_workaround
...
Supply "-extldflags -fno-PIC" to locksmith GOLDFLAGS on hardened gcc
2014-10-13 16:13:20 -07:00
Vito Caputo
5f6d5922af
Supply "-extldflags -fno-PIC" to locksmith GOLDFLAGS on hardened gcc
...
A similar workaround is utilized in the docker ebuild, see:
https://bugs.gentoo.org/show_bug.cgi?id=493328
2014-10-13 19:11:51 -04:00
Michael Marineau
6cd01aa6f0
Merge pull request #906 from carmstrong/enable_cephfs
...
coreos-kernel: enable Ceph FS
2014-10-13 16:03:23 -07:00
Michael Marineau
1ca106674c
Merge pull request #916 from marineam/nokexec
...
update_engine: support disabling kexec on any platform
2014-10-13 11:08:14 -07:00
Michael Marineau
75d48882cc
update_engine: support disabling kexec on any platform
2014-10-12 22:44:15 -07:00
Alex Crawford
49cdf03f1c
Merge pull request #911 from crawford/waagent
...
azure: update wa-linux-agent
2014-10-12 22:19:39 -07:00
Alex Crawford
bc23d8fcc5
coreos-base/coreos-cloudinit: bump to v0.10.6
2014-10-12 22:01:53 -07:00
Alex Crawford
5482bcac59
coreos-base/oem-azure: use cloud-init --oem flag
2014-10-11 09:21:31 -07:00
