5071 Commits

Author SHA1 Message Date
Euan Kemp
074857a6e9 app-emulation/runc: update to rc2 + 1.12.6 fixes
This matches the commit used by docker for 1.12.6 and contains the
relevant changes from the deleted patch file
2017-01-11 16:20:09 -08:00
Alex Crawford
5c86e91e29 app-emulation/runc: add security patches for runc 2017-01-11 15:53:40 -08:00
Alex Crawford
53a4a14a40 coreos-base/update_engine: bump to v0.4.3
This includes the python fix for Azure.
2017-01-09 14:04:58 -08:00
Alex Crawford
4e55cd3d06 Merge pull request #2357 from crawford/python
dev-lang/python-oem: hardcode distname to coreos
2017-01-06 15:28:29 -08:00
David Michael
bea93c2808 app-admin/toolbox: bump to swap docker for rkt 2017-01-06 14:19:49 -08:00
Alex Crawford
1d128368fd dev-lang/python-oem: hardcode distname to coreos
This is needed because the Azure agent uses the distro's name instead of
the ID for determining how it should behave. Once their code is updated,
they will correctly read the ID, making this patch no longer necessary.
2017-01-06 11:31:55 -08:00
Michael Marineau
8d2c5e3c32 update_engine: bump to 0.4.2
Various fixes for update status messages from dbus.
2017-01-05 17:26:58 -08:00
Alex Crawford
3b76517e3e Revert "Active directory" 2017-01-04 22:16:04 -08:00
Alex Crawford
18a0b06d34 profiles: unmask samba 2017-01-04 21:42:08 -08:00
Alex Crawford
a80954a87b Merge pull request #2350 from crawford/docker
app-emulation/docker: remove early docker
2017-01-04 21:27:01 -08:00
Alex Crawford
c11eafb165 Merge pull request #2353 from crawford/kernel
sys-kernel/coreos-*: bump to 4.8.15
2017-01-04 21:24:59 -08:00
Alex Crawford
977db897bf Merge pull request #2325 from mjg59/active_directory
add support for active directory auth
2017-01-04 21:24:09 -08:00
Alex Crawford
ef61929662 sys-kernel/coreos-kernel: include new modules 2017-01-04 21:20:54 -08:00
Alex Crawford
5418458ca8 sys-kernel/coreos-modules: enable qlogic cards 2017-01-04 21:20:54 -08:00
Alex Crawford
8551d97e68 sys-kernel/coreos-modules: enable mpls tunnels 2017-01-04 21:20:53 -08:00
Alex Crawford
64e67efa3e sys-kernel/coreos-kernel: bump to 4.8.15 2017-01-04 21:20:53 -08:00
Alex Crawford
8f0c995a17 sys-kernel/coreos-modules: bump to 4.8.15 2017-01-04 21:20:53 -08:00
Alex Crawford
3e384c0e8d sys-kernel/coreos-sources: bump to 4.8.15 2017-01-04 21:04:42 -08:00
David Michael
ed9c94ab6e profiles: drop some Python and Perl scripts from prod images 2017-01-04 19:18:45 -08:00
David Michael
14c1461247 sys-libs/glibc: avoid use-after-free in pthread
This takes a patch from upstream Bugzilla by Alexey Makhalov.
2017-01-04 18:31:05 -08:00
Alex Crawford
ca8e3101b4 app-emulation/docker: remove early docker 2017-01-04 18:22:25 -08:00
David Michael
c2e3259b65 Merge pull request #2349 from dm0-/bump-toolbox
app-admin/toolbox: bump to stick with Fedora 24 by default
2017-01-04 18:08:23 -08:00
Matthew Garrett
750dc68222 net-fs/samba: support shipping libraries without executables
We don't want most of the Samba executables, just the libraries. Add a use
flag that gets rid of them.
2017-01-04 17:39:21 -08:00
David Michael
71b02508b3 app-admin/toolbox: bump to stick with Fedora 24 by default 2017-01-04 16:52:52 -08:00
David Michael
38a53b9be6 sys-apps/baselayout: bump, add /sbin:/bin back into SDK PATH 2017-01-04 15:10:43 -08:00
David Michael
8d594df81e Merge pull request #2343 from dm0-/fix-iproute2
A few iproute2 fixes
2017-01-03 15:35:15 -08:00
David Michael
d5c81270f3 sys-apps/iproute2: fix parallel build race 2017-01-03 15:06:56 -08:00
Alex Crawford
c5140bc57b app-shells/bash: bump to 4.3-p48-r1 2017-01-03 15:03:26 -08:00
David Michael
144b334078 sys-apps/iproute2: enable arm64 build 2017-01-03 11:54:51 -08:00
Euan Kemp
11d8cd20d4 app-emulation/docker: depend on shadow
If `--userns-remap=default` is used, docker invokes utilities from
shadow using flags introduced in 4.4
2016-12-30 12:07:04 -08:00
Michael Marineau
6a776e66a7 Merge pull request #2336 from marineam/update
Profile updates/cleanups in preparation for a portage-stable update
2016-12-28 19:46:52 -08:00
Michael Marineau
adf6418fac profiles: disable systemd+gnutls globally instead of for targets only
The flag is harmless in the SDK but unneeded. Keeping it disabled
reduces the amount of diff noise when updating portage-stable/profiles.
2016-12-28 17:20:43 -08:00
Michael Marineau
7026c00e0b profiles: enable xattr globally
Already enabled on amd64 by default but not on arm64.
2016-12-28 17:20:43 -08:00
Michael Marineau
4f266084bd profiles: disable portage xattr on all architectures
Upstream has enabled the xattr flag globally which should be fine except
we don't need it for portage.
2016-12-28 17:20:43 -08:00
Michael Marineau
39940dad6f profiles: hard mask python3 use flags, add 3.5 to the list
This seems less clunky than editing $BOOTSTRAP_USE.

3.2 is no longer in portage while 3.5 is coming so update the versions.
2016-12-28 17:13:01 -08:00
Michael Marineau
e541606998 profiles: remove coreos/amd64/usr profile
This was only in use during the root->usr migration, since then it is
merely an alias for coreos/amd64/generic which is what we actually use.

The arm64 copy has never been used.
2016-12-28 17:13:01 -08:00
Michael Marineau
b9d040727d profiles: unmask selinux only in amd64 target profile 2016-12-28 17:13:00 -08:00
Michael Marineau
98385913fe profiles: enable seccomp globally
Upstream has enabled this flag, should be fine for us too but do so
prior to syncing with upstream to test for sure.

Keeping seccomp disabled for bind-tools since it breaks
cross-compilation and fixing it isn't very important.
2016-12-28 17:13:00 -08:00
Euan Kemp
e842270502 Merge pull request #2334 from euank/update-shadow
sys-apps/shadow: update to 4.4
2016-12-28 17:10:16 -08:00
Alex Crawford
e8f4907605 Merge pull request #2335 from crawford/init
coreos-base/coreos-init: update to use new motd
2016-12-28 16:05:56 -08:00
Alex Crawford
3500610004 coreos-base/coreos-init: update to use new motd 2016-12-28 16:03:37 -08:00
Euan Kemp
557bd2ab05 sys-apps/shadow: update to 4.4
This pulls in various changes from upstream and somewhat reduces our
diff from theirs.

It also is a rote version bump, necessary for docker
2016-12-28 15:01:58 -08:00
Euan Kemp
2113fa956f sys-auth/pambase: update stub version 2016-12-28 14:39:42 -08:00
Michael Marineau
f877fcef83 Merge pull request #2330 from marineam/gcloud
google-cloud-sdk: update to current release, replace gsutil
2016-12-28 13:17:34 -08:00
Matthew Garrett
0bcc4fdbd4 net-fs/samba: Remove legacy init scripts and example config
These aren't needed
2016-12-28 11:54:28 -06:00
Matthew Garrett
c7c2d6935d profiles/coreos: Turn on Active Directory in SSSD
Set the appropriate USE flags for SSSD to be built with Active Directory
support
2016-12-28 11:45:14 -06:00
Matthew Garrett
048df97663 sys-auth/sssd: Fix tmpfiles
The tmpfiles.d fragment was missing some directories that are required for
sssd to start.
2016-12-28 11:45:14 -06:00
Matthew Garrett
466ee91b0a net-fs/samba: Use bundled libraries, disable Python
Various samba dependencies are almost impossible to cross build, so just use
the bundled ones instead. In addition, disable python.
2016-12-28 11:45:10 -06:00
Matthew Garrett
5276843f78 net-fs/samba: Add samba
Active Directory support in SSSD requires Samba, so add it.
2016-12-28 11:40:57 -06:00
Euan Kemp
e5c2e84e9c sys-kernel/coreos-modules: enable TCP_CONG_BBR 2016-12-27 17:53:53 -08:00