David Michael
8d9d15aafd
Merge pull request #2415 from dm0-/ccache
...
Move ccache back to portage-stable
2017-02-06 14:41:02 -08:00
David Michael
f9e280e12e
Merge pull request #522 from dm0-/ccache
...
bump(dev-util/ccache): sync with upstream
2017-02-06 14:40:54 -08:00
David Michael
06c80eb38a
Merge pull request #640 from dm0-/secure-boot
...
Add Secure Boot to the offline signing process
2017-02-06 13:32:27 -08:00
David Michael
40b60875d0
offline_signing: sign UEFI binaries for Secure Boot
2017-02-06 13:29:15 -08:00
David Michael
d91c0c398f
offline_signing: download all UEFI binaries
2017-02-06 13:29:14 -08:00
David Michael
68064fdbf8
chore(metadata): Regenerate cache
2017-02-06 10:52:27 -08:00
David Michael
aeb2c71a3b
dev-util/ccache: move back to portage-stable
2017-02-06 10:52:20 -08:00
David Michael
f721018488
bump(dev-util/ccache): sync with upstream
2017-02-06 10:42:50 -08:00
Alex Crawford
cfc56e89a3
Merge pull request #2413 from crawford/waagent
...
app-emulation/wa-linux-agent: bump to v2.2.4
2017-02-03 13:20:01 -08:00
Alex Crawford
6c714105c5
coreos-base/oem-azure: bump to v2.2.4
2017-02-03 13:16:38 -08:00
Alex Crawford
43cff3c3f4
app-emulation/wa-linux-agent: bump to v2.2.4
2017-02-03 12:57:19 -08:00
Euan Kemp
2702a30450
Merge pull request #2411 from euank/docker-1.13.0-ipv6
...
app-emulation/docker: upgrade to coreos-1.13.0
2017-02-02 23:43:26 -08:00
Scott Burns
27000b8fa5
coreos-overlay/oem-packet: Remove bond workaround
...
Now that Packet uses Ignition to configure systemd-networkd units
before systemd-networkd starts, the workaround described in the
below issue is no longer necessary:
https://github.com/coreos/bugs/issues/36
2017-02-02 23:16:05 -08:00
Euan Kemp
ca08f9797b
app-emulation/docker: upgrade to coreos-1.13.0
2017-02-02 23:04:34 -08:00
Benjamin Gilbert
7bab03e772
Merge pull request #638 from bgilbert/reinject
...
Add script to inject kernel/GRUB/shim
2017-02-02 17:39:08 -08:00
Benjamin Gilbert
5541e1521e
Merge pull request #639 from bgilbert/other-boards
...
build_image: Correctly disable verity on unsupported boards
2017-02-02 17:18:22 -08:00
Benjamin Gilbert
d8d7b1ee86
Merge pull request #636 from bgilbert/secure-boot
...
build_image: Extract and upload GRUB/shim EFI images for signing
2017-02-02 17:17:53 -08:00
Benjamin Gilbert
b11d3a7c1d
build_image: Correctly disable verity on unsupported boards
...
Fixes up missing bit from e630a36e50799ec72305b03a6d6fe354d2b8b059.
2017-02-02 17:08:01 -08:00
Benjamin Gilbert
e65d5101cf
build_image: Extract and upload GRUB/shim EFI images for signing
...
On arm64, extract only GRUB, since there is no shim. On dev builds,
extract neither.
2017-02-02 17:00:15 -08:00
Benjamin Gilbert
f16226acb5
grub_install: Install shim in official amd64 builds
2017-02-02 16:58:52 -08:00
Benjamin Gilbert
dd3fbb8ece
image_inject_bootchain: New script to inject kernel/GRUB/shim
...
Add script to replace the unsigned kernel, EFI GRUB, and shim in an
image's EFI System Partition with (externally-produced) signed ones.
2017-02-02 16:53:16 -08:00
Benjamin Gilbert
5443a101f7
build_image: Move one message to logging framework
2017-02-02 16:51:58 -08:00
David Michael
7419751493
Merge pull request #637 from dm0-/fix-verity
...
Fix verity in our automated builds
2017-02-02 16:48:11 -08:00
David Michael
e630a36e50
Revert "build_image: Remove disable_read_write variable"
...
This reverts commit a7ffba9a9f5c18bdc8ab5495b81855bc5ba76c19.
The build_image script can build multiple formats. When our
releases and automated builds are creating developer containers and
production images from the same command, the verity flag would be
disabled while building the container and remain disabled when building
the production image. This resulted in no verity in all our builds.
2017-02-02 15:08:43 -08:00
Benjamin Gilbert
8751c85494
image_set_group: Move generic setup/teardown code into a library
2017-02-02 12:51:35 -08:00
Alex Crawford
0ef1b76779
Merge pull request #2410 from crawford/cpus
...
sys-kernel/coreos-kernel: increase CONFIG_NR_CPUS
2017-02-01 18:06:32 -08:00
jakub-d
e423581c75
sys-kernel/coreos-kernel: increase CONFIG_NR_CPUS
2017-02-01 15:47:38 -08:00
Benjamin Gilbert
dcc3367164
Merge pull request #635 from bgilbert/vmware-bin
...
image_to_vm: Add vmware_raw image type
2017-02-01 15:46:36 -08:00
Alex Crawford
fd402748be
Merge pull request #634 from jeanfabrice/jeanfabrice/guestinfo
...
Set ovf transport mode so guestinfo gets available to coreos-cloudinit
2017-02-01 15:46:23 -08:00
David Michael
e0a8e7a82e
Merge pull request #2408 from dm0-/glsa
...
GLSA syncs
2017-02-01 14:11:29 -08:00
David Michael
8f190facd2
profiles: sync squashfs and libpng versions on arm64
2017-02-01 12:00:57 -08:00
Euan Kemp
686cb1384e
Merge pull request #2407 from euank/revert-double-extra-rc3
...
Revert "Merge pull request #2403 from euank/1298-runc-userns"
2017-01-31 22:45:30 -08:00
Euan Kemp
f324f1c7c5
Revert "Merge pull request #2403 from euank/1298-runc-userns"
...
This reverts commit 7f3b121e061d4592729161026f18abe5444f22f0, reversing
changes made to aaaef8fa392528e6b57135a960428e9ef8b0dfbc.
I messed up and cherry-picked into master instead of the build-1298
branch and it worked because the file in question had since been renamed
to rc4.
This reverts that extraneous file.
2017-01-31 22:44:04 -08:00
David Michael
08200dc94a
Merge pull request #2404 from dm0-/bugs-1773
...
Upgrade to OpenSSH 7.4_p1
2017-01-31 20:17:24 -08:00
Euan Kemp
85cd5d0426
Merge pull request #2403 from euank/1298-runc-userns
...
app-emulation/runc: workaround userns issue
2017-01-31 19:38:24 -08:00
David Michael
681c94dc41
net-misc/openssh: apply our changes to the new version
...
Specifically, this drops the bindist USE flag, skips installing
some init.d files, and updates KEYWORDS for our architectures.
The build fix carried previously has been dropped since it is now
included in the upstream source archive.
2017-01-31 18:15:09 -08:00
David Michael
1d4139c1f0
net-misc/openssh: sync with the latest Gentoo ebuild
2017-01-31 18:15:09 -08:00
Euan Kemp
af7423451f
app-emulation/runc: workaround userns issue
...
This fixes a bug in usernamespace support under selinux.
This patch matches the one applied to fedora.
2017-01-31 17:22:40 -08:00
David Michael
7b2856c765
Merge pull request #2401 from dm0-/docker
...
Sync commits with Docker 1.13
2017-01-31 14:18:25 -08:00
David Michael
1275e42126
app-emulation/containerd: sync with Docker 1.13 commits
2017-01-31 13:56:04 -08:00
David Michael
b1db1b1b9f
app-emulation/docker-proxy: sync with Docker 1.13 commits
2017-01-31 13:56:04 -08:00
David Michael
c13e3b9294
app-emulation/runc: sync with Docker 1.13 commits
2017-01-31 13:56:04 -08:00
Euan Kemp
57351ee715
Merge pull request #2399 from euank/selinux-userns-backport
...
sys-kernel/coreos-sources: backport selinux+userns patch
2017-01-30 18:15:40 -08:00
Euan Kemp
3ed207fb7c
Merge pull request #2398 from euank/runc-userns-selinux
...
app-emulation/runc: workaround userns issue
2017-01-30 17:41:07 -08:00
Euan Kemp
07f1c9d7f6
app-emulation/runc: workaround userns issue
...
This fixes a bug in usernamespace support under selinux.
This patch matches the one applied to fedora.
2017-01-30 17:39:45 -08:00
Euan Kemp
3fa9ab3724
sys-kernel/coreos-sources: backport selinux+userns patch
...
Upstream as https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=01593d3299a1cfdb5e08acf95f63ec59dd674906
See also https://github.com/opencontainers/runc/issues/1215
2017-01-30 17:26:18 -08:00
Benjamin Gilbert
cc53d1442f
Merge pull request #2397 from bgilbert/grub-amd64
...
sys-boot/grub: Update to fix amd64 build
2017-01-30 13:43:07 -08:00
Benjamin Gilbert
bc485b7f5a
sys-boot/grub: Update to fix amd64 build
2017-01-30 13:40:19 -08:00
David Michael
2b1adc04cf
Merge pull request #2381 from dm0-/docker
...
Upgrade to Docker 1.13
2017-01-30 12:41:14 -08:00
David Michael
fac37442a5
app-emulation/docker: upgrade to unpatched 1.13.0
2017-01-30 12:40:19 -08:00
