mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-15 17:06:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
29,556 Commits 624 Branches 395 Tags 164 MiB
b51a1df470
Commit Graph

29556 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Flatcar Buildbot
b4ca79b618 app-eselect/eselect-rust: Sync with Gentoo 
It's from Gentoo commit 11f39867af8136579612f901a2b61bbbf7ffc7b0.
 2024-11-18 17:05:07 +01:00
Flatcar Buildbot
094828682d app-emulation/qemu: Sync with Gentoo 
It's from Gentoo commit 7714fb9cba514316ef1a088f94f71c57241f4425.
 2024-11-18 17:05:07 +01:00
Flatcar Buildbot
ef4c91834b app-editors/nano: Sync with Gentoo 
It's from Gentoo commit 173435dd12e9644f800a0e1417b8ba62f8d35f71.
 2024-11-18 17:05:07 +01:00
Flatcar Buildbot
c0c7deb5cf app-doc/eclass-manpages: Sync with Gentoo 
It's from Gentoo commit eb3569042485d0210f05c90ec4ddfcbfa3865826.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
04b984c2ab app-crypt/pinentry: Sync with Gentoo 
It's from Gentoo commit 8d0c32bb4c7c67540956c7a2ce4d9751105a858e.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
85d76d4480 app-crypt/gpgme: Sync with Gentoo 
It's from Gentoo commit 3dc06f563bff6d3e3fa81a66914362da1b15b45c.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
23712bc3e4 app-crypt/gnupg: Sync with Gentoo 
It's from Gentoo commit 46573bad4a55a674fb24b26ec74565e988c44811.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
0d2da09a2b app-containers/runc: Sync with Gentoo 
It's from Gentoo commit 76279d909346945aabe1fd8a54ca85f69f8cc6d1.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
53970e3162 app-containers/podman: Sync with Gentoo 
It's from Gentoo commit 0fe064610dd3ae7e01ac4715904b0ef51f95d218.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
5966be24fb app-containers/netavark: Sync with Gentoo 
It's from Gentoo commit 01ba4dc61965ef7658a24728841c04c9a1ce4871.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
2c7b663582 app-containers/docker-cli: Sync with Gentoo 
It's from Gentoo commit 3f2c4112f9c886a3101b67a0808be6ce5470122c.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
c976d3f9bd app-containers/docker: Sync with Gentoo 
It's from Gentoo commit 451103c2b42be976a005295aff6e1ca27674fa59.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
2e4df3f5b3 app-containers/containers-storage: Sync with Gentoo 
It's from Gentoo commit 48e607e81b2b9310a950649c1884e4c02dc55184.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
ddcf73a95f app-containers/aardvark-dns: Sync with Gentoo 
It's from Gentoo commit 01ba4dc61965ef7658a24728841c04c9a1ce4871.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
8a6678680e app-arch/xz-utils: Sync with Gentoo 
It's from Gentoo commit 24432545a95393f99c34edbc780fc3b9892161d7.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
27ef54ec83 app-arch/libarchive: Sync with Gentoo 
It's from Gentoo commit bd301c58e9c48c802f6889448d308131d24f431a.
 2024-11-18 17:05:06 +01:00
Flatcar Buildbot
069ca8163f app-arch/cpio: Sync with Gentoo 
It's from Gentoo commit 5f3aae3b1196484405b16d3954149c2eacbf0192.
 2024-11-18 17:05:06 +01:00
James Le Cuirot
ed59dd9fc7
sys-boot/grub: Prevent developer test modules from being built 
These are normally always installed, even by grub-install, but they have
no use outside of testing and take up valuable space in /boot.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-18 14:56:24 +00:00
James Le Cuirot
945014691b
grub_install.sh: Compress modules with xz instead of gzip to save space 
Giving the --best or -9 option results in a heavier decompression cost
with no gain on such small files.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-18 14:56:20 +00:00
James Le Cuirot
93cbba765d
grub_install.sh: Only install additional GRUB modules for non-SB targets 
Secure Boot prevents you from loading additional modules so remove them
to save space. These modules could be useful for debugging with Secure
Boot disabled, but manually copying the modules with debug symbols is
even more useful and not that difficult.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-18 14:55:50 +00:00
James Le Cuirot
d35954ca15
app-crypt/azure-keyvault-pkcs11: Bump to new pre-release for HSM support 
This one includes all the renaming for Azure Key Vault.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-18 13:33:12 +00:00
Mathieu Tortuyaux
06cc001648
Merge pull request #2449 from flatcar/linux-6.6.62-main 
Upgrade Linux Kernel for main from 6.6.60 to 6.6.62
 2024-11-18 14:32:08 +01:00
Flatcar Buildbot
90a0165d79 sys-kernel/coreos-sources: Update from 6.6.60 to 6.6.62 2024-11-18 07:08:07 +00:00
flatcar-ci
d3483178a0 New version: main-4154.0.0-nightly-20241114-2100 2024-11-14 21:00:24 +00:00
Mathieu Tortuyaux
13c2791c70
Merge pull request #2443 from flatcar/firmware-20241110-main 
Upgrade Linux Firmware in main from 20241017 to 20241110
 2024-11-14 21:12:08 +01:00
James Le Cuirot
8599de506f
Merge pull request #2441 from flatcar/chewi/akv-signing 
Add (temporary) signed shim and sign official builds with Azure Key Vault
 2024-11-14 10:58:19 +00:00
Flatcar Buildbot
f9ba1fbaf3 sys-kernel/coreos-firmware: Update from 20241017 to 20241110 2024-11-14 07:05:27 +00:00
flatcar-ci
7166dbd551 New version: main-4153.0.0-nightly-20241113-2100 2024-11-13 21:00:25 +00:00
Sayan Chowdhury
58b7eac621
sys-boot/shim: Add the README for the shim repo 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 23:55:34 +05:30
James Le Cuirot
101efbff39
Temporarily undo AKV signing while we complete the shim review 
We don't want to be blocked from doing releases in the meantime. Revert
this commit when ready.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:24 +00:00
James Le Cuirot
2853c77c66
ci-automation: Allow the arm64 tests to run on qemu_uefi_secure 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:23 +00:00
James Le Cuirot
d8a8704f92
Refactor SB signing code and sign official builds with Azure Key Vault 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:22 +00:00
James Le Cuirot
0eb1d4a287
grub_install.sh: Remove redundant BOARD_GRUB logic 
We always use the board's GRUB now.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:21 +00:00
James Le Cuirot
e3c524c91d
app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:20 +00:00
James Le Cuirot
13516911f1
app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable 
The cross issues that were previously addressed by our fork are no
longer an issue since p11-kit migrated to Meson.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:19 +00:00
James Le Cuirot
7b0a1ae4f9
coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit 
p11-kit is a dependency of azure-keyvault-pkcs11, but we will also use
it directly to fetch the certificate from Azure Key Vault.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:18 +00:00
Sayan Chowdhury
2d73ea8fa1
profiles: Add the azure-keyvault-pkcs11 to accept_keywords 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:17 +00:00
Sayan Chowdhury
987a3e675f
app-crypt/azure-keyvault-pkcs11: Add new package 
It hasn't been added to Gentoo yet.
 2024-11-13 12:19:16 +00:00
Sayan Chowdhury
8ebf73f6aa
dev-cpp/azure-identity: Add from Gentoo 
It's from Gentoo commit 82ec02943f7f0ddaa87f623cee138608571a3978.
 2024-11-13 12:19:14 +00:00
Sayan Chowdhury
ecb2ee89a1
dev-cpp/azure-security-keyvault-keys: Add from Gentoo 
It's from Gentoo commit 768b3c1959debce15854362ff7db176cda76c055.
 2024-11-13 12:19:13 +00:00
Sayan Chowdhury
b8609dc2a0
dev-cpp/azure-security-keyvault-certificates: Add from Gentoo 
It's from Gentoo commit 69e4044b72d971f5603df77793db86c40e582e2e.
 2024-11-13 12:19:12 +00:00
Sayan Chowdhury
8dc736d755
dev-cpp/azure-core: Add from Gentoo 
It's from Gentoo commit d286faf494dcb60f81f0de921fa623d952962fc1.
 2024-11-13 12:19:11 +00:00
Sayan Chowdhury
a15ff23bdb
shim, shim-signed: Move the packages from SDK to BOARD packages 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:10 +00:00
James Le Cuirot
b401cee2a9
sys-boot/shim-signed: Add shim-signed package to place signed binaries 
Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
 2024-11-13 12:19:09 +00:00
Sayan Chowdhury
761bc04a19
sys-boot/shim: Append the suffix to the shim binary 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:08 +00:00
Sayan Chowdhury
02c0bdaa28
sys-boot/shim: Include @@VERSION@@ in SBAT for version 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:07 +00:00
Sayan Chowdhury
eef935e596
sys-boot/shim: Add the SBAT data to shim binary 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:19:06 +00:00
Sayan Chowdhury
b8f290bae4
sys-boot/shim: Add a use flag to use a DER files for shim builds 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2024-11-13 12:18:44 +00:00
James Le Cuirot
d18a373cb7
Merge pull request #2442 from flatcar/chewi/root-deps 
Drop --root-deps and --root-deps=rdeps emerge options
 2024-11-13 09:19:23 +00:00
Flatcar Buildbot
6cb21a37e1
sys-apps/portage: Sync with Gentoo 
It's from Gentoo commit ba2693dfc0f0f5535e6371c4e4d19806109537c9.
 2024-11-12 22:08:27 +00:00