5071 Commits

Author SHA1 Message Date
Michael Marineau
f8e7c73802 Merge pull request #2221 from marineam/usrfiles
sys-libs/nss-usrfiles: sync w/ glibc 2.23
2016-10-07 14:25:22 -07:00
Michael Marineau
1d29705132 sys-libs/nss-usrfiles: sync w/ glibc 2.23
Fixes a few issues that have been resolved in glibc since 2.18:

 * The NSS backends shared internal state between thegetXXent and
   getXXbyYY NSS calls for the same database, causing a
   denial-of-service condition in some applications. (CVE-2014-8121)

 * Don't ignore too long lines in nss_files (CVE-2015-5277)
2016-10-07 14:16:18 -07:00
Joe Bowers
cb3e94e14b Merge pull request #2218 from joeatwork/roll-back-docker
Merge pull request #2215 from crawford/docker
2016-10-06 11:30:57 -07:00
Alex Crawford
853caa3da1 sys-apps/systemd: bump to include various fixes 2016-10-05 14:37:41 -07:00
Alex Crawford
0982013ff0 app-emulation/runc: revert to 0.1.0 2016-10-05 14:01:42 -07:00
Alex Crawford
fe554c3f26 app-emulation/containerd: revert to 0.2.2 2016-10-05 14:01:33 -07:00
Alex Crawford
b8dc3c5213 app-emulation/docker: revert to 1.11.2 2016-10-05 14:01:21 -07:00
Geoff Levand
6ba9759e19 coreos-base/oem-ec2-compat: Add arm64 keyword
Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-09-30 16:04:25 -07:00
Michael Marineau
15f135b003 profiles: include libc locale data
This data can be later removed by build_image once it has run localedef
to generate the C.UTF-8 locale. When cross-compiling the glibc ebuild
won't run localedef so it is up to build image to handle.
2016-09-30 15:36:29 -07:00
Alex Crawford
d358d69032 Revert "app-crypt/gnupg: move from portage-stable and fix arm64 cross build." 2016-09-30 16:17:23 -04:00
Michael Marineau
32e99a8985 Merge pull request #2208 from marineam/seismograph
sys-apps/seismograph: update to 2.2, now includes rootdev
2016-09-30 11:12:30 -07:00
Michael Marineau
6a5552d0f0 sys-apps/seismograph: update to 2.2, now includes rootdev 2016-09-29 15:47:43 -07:00
Michael Marineau
6834ff2ea9 Merge pull request #2207 from marineam/verity
update_engine and mantle update
2016-09-29 14:26:22 -07:00
Michael Marineau
8361c45e6a mantle: bump to 0.2.1 2016-09-29 14:22:13 -07:00
Michael Marineau
5b5e0c2332 update_engine: bump to 0.4.0, PCR data support and bug fixes 2016-09-29 14:19:54 -07:00
Alex Crawford
3a6b1b0137 sys-kernel/coreos-modules: enable more mellanox 2016-09-29 14:04:12 -07:00
Alex Crawford
860a1001cc sys-kernel/bootengine: include qemu detection 2016-09-29 11:44:01 -07:00
Alex Crawford
15fe758ce1 Merge pull request #2153 from garygrebus/gnupg-for-arm
app-crypt/gnupg: move from portage-stable and fix arm64 cross build.
2016-09-28 14:03:41 -04:00
Alex Crawford
1888629087 app-admin/locksmith: bump to v0.4.1 2016-09-27 16:28:42 -07:00
Nick Owens
c8b1f0096f Merge pull request #2198 from mischief/flannel-hosts
app-admin/flannel: mount /etc/hosts ro into flannel container
2016-09-23 13:33:36 -07:00
Michael Marineau
a3ecc9e964 grub: fix updating gpt on odd disk configurations 2016-09-23 12:36:24 -07:00
Nick Owens
e259eb25cb Merge pull request #2201 from mischief/flannel-0.6.2
app-admin/flannel: bump to v0.6.2
2016-09-22 17:03:04 -07:00
Nick Owens
3c30427f70 app-admin/flannel: bump to v0.6.2 2016-09-22 15:50:35 -07:00
David Michael
04e18ec233 sys-kernel/bootengine: bump to configure networkd via cmdline 2016-09-22 15:40:40 -07:00
David Michael
8e112e72d1 sys-kernel/coreos-modules: disable IP_PNP options
Turn off the in-kernel IP configuration, so it can be delegated to
the initramfs.
2016-09-22 15:08:33 -07:00
Michael Marineau
ca4f403409 Merge pull request #2199 from marineam/verity
sys-kernel/bootengine: fix first boot on verity systems
2016-09-21 13:40:55 -07:00
Michael Marineau
706fc3c85f sys-kernel/bootengine: fix first boot on verity systems 2016-09-21 13:38:03 -07:00
Nick Owens
2f66ba202e app-admin/flannel: mount /etc/hosts ro into flannel container 2016-09-21 13:28:18 -07:00
David Michael
bae08a68da app-emulation/docker: bump to work around bridge failures 2016-09-20 19:40:46 -07:00
Alex Crawford
95597e17f8 Merge pull request #2196 from crawford/ignition
sys-apps/ignition: bump to v0.11.1
2016-09-20 16:22:10 -07:00
Alex Crawford
4fda5e9be2 sys-apps/ignition: bump to v0.11.1 2016-09-20 15:17:02 -07:00
Nick Owens
9c8c032b68 app-admin/flannel: drop flannel-in-docker systemd unit 2016-09-19 16:48:31 -07:00
Nick Owens
422faba2a6 app-admin/flannel: mark stable for arm64 2016-09-19 16:46:31 -07:00
Nick Owens
d75a79ea35 app-admin/flannel: teach flannel about other arches 2016-09-19 16:45:59 -07:00
Nick Owens
9ba1b4d845 app-admin/flannel: bump to v0.6.1 2016-09-19 16:37:37 -07:00
Nick Owens
e9495dbcf4 app-admin/flannel: drop 0.5.5-r2 2016-09-19 16:23:46 -07:00
Michael Marineau
86847e5185 update_engine: bump to 0.3.1 (fixes support for verity) 2016-09-19 12:43:18 -07:00
Michael Marineau
73e98f996a Merge pull request #2193 from marineam/mantle
mantle: bump to 0.2.0 (huge upgrade)
2016-09-19 10:44:55 -07:00
Michael Marineau
988508082d Merge pull request #2192 from marineam/update_engine
update_engine 0.3.0 (kernel support)
2016-09-19 10:44:48 -07:00
Michael Marineau
78c2b96df2 mantle: bump to 0.2.0 (huge upgrade) 2016-09-16 16:22:36 -07:00
Michael Marineau
dd95c7c5d6 update_engine: bump to 0.3.0, adds kernel update support 2016-09-16 16:03:09 -07:00
Michael Marineau
33f3a9b2ed update_engine: prune old version 2016-09-16 16:03:09 -07:00
Michael Marineau
ebde08920d sys-libs/glibc: import the C.UTF-8 locale from Fedora
The 2.23 version of the patch is used by Fedora for glibc versions
2.21 through 2.23. Although currently unused by the ebuild the 2.24
version of the patch is included for future reference.

The latest revision can be found here:
http://pkgs.fedoraproject.org/cgit/rpms/glibc.git/tree/glibc-c-utf8-locale.patch
2016-09-16 15:53:16 -07:00
Alex Crawford
9c47730ba9 coreos-base/coreos-cloudinit: bump to v1.12.0
This removes support for DigitalOcean networking (taken care of by
coreos-metadata in the initramfs) and adds timeouts to all systemd
services.
2016-09-15 10:35:34 -07:00
David Michael
7d5a931560 sys-apps/baselayout: update PAM for SSH lastlog and systemd-user 2016-09-14 17:44:41 -07:00
David Michael
dd70961bca coreos-base/coreos-init: bump to sync with PAM settings 2016-09-14 17:41:20 -07:00
Alex Crawford
6895593ead coreos-base/oem-ec2-compat: use ttyS0 for console
On HVM instances, tty0 is actually a graphical interface. Since the
interface exposed is non-interactive, it's not possible to scroll
through the logs, which results in lots of missing information. Setting
the console to ttyS0, on the other hand, sends the output to the system
log.

PV instances don't have this issue since they are xen-based and use
hvc0.
2016-09-14 16:12:51 -07:00
Michael Marineau
e06c4ce646 sys-libs/ncurses: fix some compiler warnings
From http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=73ab536b636227eed291dad213ca88c93d422fb8

The important part is the tiny change to use the attr_get function
instead of the macro fixing:

    test/ncurses.c:1681:29: warning: the comparison will always evaluate
    as ‘true’ for the address of ‘old_attr’ will never be NULL [-Waddress]

which causes portage to abort with FEATURES=stricter
2016-09-09 19:44:48 -07:00
Michael Marineau
be95f25ca1 app-emulation/open-vm-tools: fix rpath issues with sysroot
Adding "-Ldir" to the link flags causes libtool to also add "-rpath
dir". So if dir includes the expanded sysroot the resulting binary is
going to wind up referring a path that doesn't exist. To avoid this use
the special "=" path prefix that causes the linker to expand sysroot.
2016-09-09 16:19:54 -07:00
Michael Marineau
da6798a373 sys-auth/realmd: fix error with multilib-strict 2016-09-09 16:19:54 -07:00