mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-24 16:01:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,485 Commits 616 Branches 394 Tags
Commit Graph

4485 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Crawford
aab6171fe7 Merge pull request #1955 from crawford/ignition 
coreos-base/oem-gce: remove legacy scripts
 2016-05-18 17:15:55 -07:00
Michael Marineau
627a2a0cba Merge pull request #1975 from marineam/sha512 
profiles: stop disabling SHA512 password hashes in PAM
 2016-05-18 16:11:28 -07:00
Michael Marineau
3660e2edce profiles: stop disabling SHA512 password hashes in PAM 
Likely inherited from ChromeOS but even for them it is a completely
ridiculous flag to disable. We had SHA512 enabled pre-PAM since shadow
does not have this use flag so this restores previous behavior.
 2016-05-18 16:07:07 -07:00
Michael Marineau
365f488275 Merge pull request #1974 from marineam/gpg 
coreos-init: update gpg key in coreos-install
 2016-05-18 15:36:15 -07:00
Alex Crawford
b966515b82 coreos-base/oem-gce: remove legacy scripts 
Provisioning will be handled by Ignition and coreos-metadata instead.
 2016-05-18 14:59:39 -07:00
Michael Marineau
82f983f394 coreos-init: update gpg key in coreos-install 2016-05-18 14:52:11 -07:00
Alex Crawford
1ee0a6097c Merge pull request #1953 from crawford/google-compute-daemon 
app-emulation/google-compute-daemon: bump to 1.3.2
 2016-05-18 14:37:08 -07:00
Nick Owens
6ca8d8f064 Merge pull request #1967 from mischief/linux-4.6 
Linux 4.6
 2016-05-18 13:40:37 -07:00
Matthew Garrett
38b0befb11 Merge pull request #1965 from mjg59/pam_fix 
sys-auth/pambase: Fall back to pam_deny in auth
 2016-05-18 13:37:04 -07:00
Michael Marineau
c3b32ec05a Merge pull request #1972 from marineam/drop-protobuf-c 
hard-host-depends: remove protobuf-c, nothing uses it
 2016-05-18 11:14:51 -07:00
Michael Marineau
06b424a5a2 Merge pull request #1971 from marineam/update_engine 
update_engine: update live ebuild for current master
 2016-05-18 11:14:11 -07:00
Michael Marineau
597264ce86 Merge pull request #1973 from marineam/rkt-admin 
rkt: add rkt-admin group, has access to /etc/rkt
 2016-05-18 10:46:20 -07:00
Michael Marineau
8fbd548a87 rkt: add rkt-admin group, has access to /etc/rkt 2016-05-18 06:38:10 -07:00
Michael Marineau
f53b3ffc81 update_engine: add slot dependency for protobuf 
Ensures that update_engine will get rebuilt when protobuf is upgraded.
 2016-05-17 23:21:41 -07:00
Michael Marineau
5db17fb04d hard-host-depends: remove protobuf-c, nothing uses it 2016-05-17 23:01:56 -07:00
Michael Marineau
4292c9852f update_engine: update live ebuild, adding glog and removing libchrome 2016-05-17 22:04:48 -07:00
Michael Marineau
1f96cbc36d update_engine: split live and current stable ebuilds 
Live ebuild needs different dependencies.

Drop invalid arm64 stable keyword, the old revision of update_engine
doesn't build on arm64. It is in package.provided instead.
 2016-05-17 22:04:43 -07:00
Matthew Garrett
53756cb093 Merge pull request #1970 from mjg59/remove_dhcp 
coreos-base/coreos-dev: remove dhcp
 2016-05-17 16:49:22 -07:00
Matthew Garrett
39745a7076 coreos-base/coreos-dev: remove dhcp 
New versions of dhcp are difficult to cross build and we don't need it
anyway
 2016-05-17 16:41:58 -07:00
Nick Owens
c6199c7c31 Merge pull request #1968 from mischief/rkt-1.6.0 
app-emulation/rkt: v1.6.0
 2016-05-17 11:35:28 -07:00
Nick Owens
5ed74b61d7 app-emulation/rkt: v1.6.0 2016-05-16 15:26:23 -07:00
Nick Owens
3a95c8f18d sys-kernel/coreos-firmware: update to 20160331 2016-05-16 14:55:02 -07:00
Nick Owens
276a7f6d67 sys-kernel/coreos-{sources,kernel}: update to 4.6 2016-05-16 14:55:01 -07:00
Alex Crawford
80d7aed53d app-emulation/google-startup-script: bump to 1.3.2 2016-05-16 14:50:17 -07:00
Alex Crawford
12509babed app-emulation/google-compute-daemon: bump to 1.3.2 2016-05-16 14:50:17 -07:00
Matthew Garrett
0375b81086 Merge pull request #1966 from mjg59/updates 
Update mantle and baselayout to reduce the probability of future disastrous events
 2016-05-16 13:39:57 -07:00
Matthew Garrett
a25497dce5 coreos-devel/mantle: Verify that unauthenticated users can't access CoreOS 
Include a test to ensure that users without valid authentication tokens are
unable to log into CoreOS
 2016-05-16 13:36:03 -07:00
Matthew Garrett
3ba6985d62 sys-apps/baselayout: Remove login shell for operator user 2016-05-16 13:36:03 -07:00
Matthew Garrett
3865f77ecd sys-auth/pambase: Fall back to pam_deny in auth 
Setting pam_unix and pam_sss to sufficient means that if both fail,
control will be passed to the following pam module. If this is
pam_permit then permission will be granted even if the previous modules
failed. Switch to pam_deny and require it rather than permitting it to
be optional - if sss or unix succeed, we'll jump out before we get to
this point.
 2016-05-15 21:12:57 -07:00
Nick Owens
4a94f04736 Merge pull request #1961 from mischief/linux-4.5.4 
sys-kernel/coreos-{sources,kernel}: update to 4.5.4
 2016-05-14 13:32:33 -07:00
Nick Owens
948af5c88b sys-kernel/coreos-{sources,kernel}: update to 4.5.4 2016-05-13 15:46:54 -07:00
Nick Owens
1e63583c3c Merge pull request #1962 from mischief/systemd-tasksmax 
sys-apps/systemd: bump to include DefaultTasksMax fix
 2016-05-13 15:29:02 -07:00
Nick Owens
6b014521c4 sys-apps/systemd: bump to include DefaultTasksMax fix 2016-05-13 15:21:13 -07:00
Nick Owens
ee3d88085f Merge pull request #1958 from mischief/fix-rkt-stage1 
app-emulation/rkt: use CoreOS alpha 1010.1.0 without PAM
 2016-05-13 10:41:58 -07:00
Nick Owens
8d6ccc81f2 Merge pull request #1959 from mischief/kubelet-stage1 
app-admin/kubelet-wrapper: fix stage1 reference
 2016-05-13 10:27:40 -07:00
Nick Owens
acf641ca67 app-admin/kubelet-wrapper: fix stage1 reference 
since rkt 1.3.0, rkt has began checking stage1 hashes, and will do so if
the stage1 is not in the default stage1 directory. for compatibility,
df131e85d5240a75fb9cd4e1fb85e86e6f5290c1 symlinked the old stage1
directory to the new one, however, if a stage1 is referred to by the old
stage1 path under rkt >1.3.0, image verification will fail because no
signature exists.

instead of using a path, use stage1-fly.aci by name and let rkt handle
finding it in the default directory.
 2016-05-12 21:39:13 -07:00
Nick Owens
05856d1789 app-emulation/rkt: use CoreOS alpha 1010.1.0 without PAM 
CoreOS 1029.0.0 introduced PAM which was linked into systemd. rkt copies
files and libraries out of CoreOS images with a static manifest to
construct the CoreOS stage1. since this manifest lacks PAM libraries in
rkt 1.5.1, we can't use CoreOS 1032.0.0, so fall back to a CoreOS
version without PAM linked into systemd.
 2016-05-12 21:31:25 -07:00
Michael Marineau
1616098d8f Merge pull request #1957 from marineam/metadata 
chore(metadata): Regenerate cache
 2016-05-11 15:58:42 -07:00
Michael Marineau
787c7beaf0 chore(metadata): Regenerate cache 2016-05-11 15:50:57 -07:00
Michael Marineau
916ed23174 Merge pull request #1956 from marineam/mantle 
mantle: small fix for plume release
 2016-05-11 11:24:35 -07:00
Michael Marineau
aa0b0b9843 mantle: small fix for plume release 2016-05-11 11:12:55 -07:00
Michael Marineau
b96c191cf8 Merge pull request #1951 from marineam/go-arch 
eclass/coreos-go: add ppc64 and x86 arch to go_get_arch
 2016-05-10 19:22:53 -07:00
Nick Owens
be06aefc19 Merge pull request #1952 from mischief/mantle-0.1.2 
coreos-devel/mantle: bump to v0.1.2
 2016-05-10 13:39:15 -07:00
Nick Owens
a606b3942f coreos-devel/mantle: bump to v0.1.2 2016-05-10 13:33:23 -07:00
Nick Owens
d36cdc0c67 Merge pull request #1949 from mischief/linux-4.5.3 
sys-kernel/coreos-{sources,kernel}: update to 4.5.3
 2016-05-10 12:32:58 -07:00
Michael Marineau
4346d60a1e Merge pull request #1950 from marineam/grub 
grub: enable building as a cross-compiled package for arm64
 2016-05-10 10:48:02 -07:00
Michael Marineau
2b376a0f6b grub: enable building as a cross-compiled package for arm64 
This will drop the need to reconfigure/rebuild GRUB with the special
`arm64` target in `setup_board`. The amd64 targets could receive the
same treatment eventually but the xen dependency needs fixing first.
After that the SDK's grub can be built with the special `none` target so
it only builds user-space tools.
 2016-05-09 15:10:31 -07:00
Nick Owens
d472dc9933 sys-kernel/coreos-{sources,kernel}: update to 4.5.3 2016-05-06 13:34:49 -07:00
Matthew Garrett
c60a99dce7 Merge pull request #1947 from mjg59/selinux_enforce 
sec-policy: Permit execmem in selinux policy
 2016-05-05 23:05:11 +01:00
Michael Marineau
92059efbe1 Merge pull request #1948 from marineam/ccache 
profiles: tell ccache to rewrite paths relative to $S
 2016-05-05 12:30:35 -07:00