Nick Owens
17948062a0
bump(metadata/glsa): sync with upstream
2016-10-10 08:18:00 -07:00
Michael Marineau
7560aeb81c
sys-libs/timezone-data: remove management of /etc timezone
...
We omit /etc/localtime to use UTC by default.
Re-add the old posix symlink in the unlikely case someone is referring
to timezones using that prefix.
2016-10-07 16:05:28 -07:00
Michael Marineau
56adefa9db
sys-libs/timezone-data: import latest stable ebuild from upstream
2016-10-07 15:46:47 -07:00
Michael Marineau
1c2346b1d2
app-misc/ca-certificates: update to latest mozilla cert db
2016-10-07 15:30:50 -07:00
Michael Marineau
f8e7c73802
Merge pull request #2221 from marineam/usrfiles
...
sys-libs/nss-usrfiles: sync w/ glibc 2.23
2016-10-07 14:25:22 -07:00
Michael Marineau
1d29705132
sys-libs/nss-usrfiles: sync w/ glibc 2.23
...
Fixes a few issues that have been resolved in glibc since 2.18:
* The NSS backends shared internal state between thegetXXent and
getXXbyYY NSS calls for the same database, causing a
denial-of-service condition in some applications. (CVE-2014-8121)
* Don't ignore too long lines in nss_files (CVE-2015-5277)
2016-10-07 14:16:18 -07:00
Joe Bowers
cb3e94e14b
Merge pull request #2218 from joeatwork/roll-back-docker
...
Merge pull request #2215 from crawford/docker
2016-10-06 11:30:57 -07:00
Alex Crawford
3239c17a80
Merge pull request #2219 from crawford/systemd
...
sys-apps/systemd: bump to include various fixes
2016-10-05 15:22:34 -07:00
Alex Crawford
853caa3da1
sys-apps/systemd: bump to include various fixes
2016-10-05 14:37:41 -07:00
Alex Crawford
0982013ff0
app-emulation/runc: revert to 0.1.0
2016-10-05 14:01:42 -07:00
Alex Crawford
fe554c3f26
app-emulation/containerd: revert to 0.2.2
2016-10-05 14:01:33 -07:00
Alex Crawford
b8dc3c5213
app-emulation/docker: revert to 1.11.2
2016-10-05 14:01:21 -07:00
Michael Marineau
80b6905e1a
Merge pull request #590 from marineam/verity
...
build_image: always enable verity when /usr is read-only
2016-10-03 11:22:34 -07:00
Geoff Levand
d71ba2963c
Merge pull request #2214 from glevand/for-merge-oem-ec2-compat
...
coreos-base/oem-ec2-compat: Add arm64 keyword
2016-10-03 09:55:30 -07:00
Geoff Levand
6ba9759e19
coreos-base/oem-ec2-compat: Add arm64 keyword
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2016-09-30 16:04:25 -07:00
Michael Marineau
15f135b003
profiles: include libc locale data
...
This data can be later removed by build_image once it has run localedef
to generate the C.UTF-8 locale. When cross-compiling the glibc ebuild
won't run localedef so it is up to build image to handle.
2016-09-30 15:36:29 -07:00
Michael Marineau
533b1b9b02
build_image: always enable verity when /usr is read-only
...
Consolidates two very similar flags into one and fix an issue where
verity could get enabled in the GRUB config when rootfs verification was
turned off (e.g. on arm64 which cannot use verity yet).
2016-09-30 15:35:10 -07:00
Michael Marineau
9ed9ff7b45
build_image: generate C.UTF-8 locale
2016-09-30 15:24:32 -07:00
Alex Crawford
a269f1d2ab
Merge pull request #2210 from coreos/revert-2153-gnupg-for-arm
...
Revert "app-crypt/gnupg: move from portage-stable and fix arm64 cross build."
2016-09-30 13:21:49 -07:00
Alex Crawford
d358d69032
Revert "app-crypt/gnupg: move from portage-stable and fix arm64 cross build."
2016-09-30 16:17:23 -04:00
Michael Marineau
32e99a8985
Merge pull request #2208 from marineam/seismograph
...
sys-apps/seismograph: update to 2.2, now includes rootdev
2016-09-30 11:12:30 -07:00
Michael Marineau
6a5552d0f0
sys-apps/seismograph: update to 2.2, now includes rootdev
2016-09-29 15:47:43 -07:00
Michael Marineau
386341878f
Merge pull request #589 from marineam/verity
...
build_image: enable verity by default
2016-09-29 14:27:00 -07:00
Michael Marineau
6834ff2ea9
Merge pull request #2207 from marineam/verity
...
update_engine and mantle update
2016-09-29 14:26:22 -07:00
Michael Marineau
8361c45e6a
mantle: bump to 0.2.1
2016-09-29 14:22:13 -07:00
Michael Marineau
5b5e0c2332
update_engine: bump to 0.4.0, PCR data support and bug fixes
2016-09-29 14:19:54 -07:00
Alex Crawford
3a6b1b0137
sys-kernel/coreos-modules: enable more mellanox
2016-09-29 14:04:12 -07:00
Alex Crawford
8375b0474b
Merge pull request #2206 from crawford/bootengine
...
sys-kernel/bootengine: include qemu detection
2016-09-29 12:18:38 -07:00
Alex Crawford
860a1001cc
sys-kernel/bootengine: include qemu detection
2016-09-29 11:44:01 -07:00
Michael Marineau
2016567d6f
build_image: enable verity by default
2016-09-28 17:06:30 -07:00
Alex Crawford
15fe758ce1
Merge pull request #2153 from garygrebus/gnupg-for-arm
...
app-crypt/gnupg: move from portage-stable and fix arm64 cross build.
2016-09-28 14:03:41 -04:00
Alex Crawford
b5f2b0711c
Merge pull request #2204 from crawford/locksmith
...
app-admin/locksmith: bump to v0.4.1
2016-09-27 19:34:35 -04:00
Alex Crawford
1888629087
app-admin/locksmith: bump to v0.4.1
2016-09-27 16:28:42 -07:00
Michael Marineau
29e35fe28a
Merge pull request #588 from marineam/nobz2
...
offline_signing: vmlinuz is not bz2 compressed
2016-09-26 13:50:24 -07:00
Michael Marineau
d6b951c416
offline_signing: vmlinuz is not bz2 compressed
2016-09-26 13:44:45 -07:00
Nick Owens
c8b1f0096f
Merge pull request #2198 from mischief/flannel-hosts
...
app-admin/flannel: mount /etc/hosts ro into flannel container
2016-09-23 13:33:36 -07:00
Michael Marineau
8469879619
Merge pull request #2202 from marineam/grub
...
grub: fix updating gpt on odd disk configurations
2016-09-23 12:42:54 -07:00
Michael Marineau
a3ecc9e964
grub: fix updating gpt on odd disk configurations
2016-09-23 12:36:24 -07:00
Nick Owens
e259eb25cb
Merge pull request #2201 from mischief/flannel-0.6.2
...
app-admin/flannel: bump to v0.6.2
2016-09-22 17:03:04 -07:00
David Michael
e057f88598
Merge pull request #2200 from dm0-/bugs-981
...
Move early network configuration from kernel to initramfs
2016-09-22 15:57:58 -07:00
Nick Owens
3c30427f70
app-admin/flannel: bump to v0.6.2
2016-09-22 15:50:35 -07:00
David Michael
04e18ec233
sys-kernel/bootengine: bump to configure networkd via cmdline
2016-09-22 15:40:40 -07:00
David Michael
8e112e72d1
sys-kernel/coreos-modules: disable IP_PNP options
...
Turn off the in-kernel IP configuration, so it can be delegated to
the initramfs.
2016-09-22 15:08:33 -07:00
Michael Marineau
b89585a573
Merge pull request #587 from marineam/pcr
...
build_image: dev images/containers no longer have pcr data
2016-09-21 22:26:05 -07:00
Michael Marineau
ed3c8637f6
build_image: dev images/containers no longer have pcr data
...
Broken by 1092afd which missed that dev images and containers were also
uploading pcr data despite it not really being applicable to those.
2016-09-21 21:18:15 -07:00
Michael Marineau
ca4f403409
Merge pull request #2199 from marineam/verity
...
sys-kernel/bootengine: fix first boot on verity systems
2016-09-21 13:40:55 -07:00
Michael Marineau
706fc3c85f
sys-kernel/bootengine: fix first boot on verity systems
2016-09-21 13:38:03 -07:00
Nick Owens
2f66ba202e
app-admin/flannel: mount /etc/hosts ro into flannel container
2016-09-21 13:28:18 -07:00
David Michael
d985e88bac
Merge pull request #2197 from dm0-/coreos-1554
...
app-emulation/docker: bump to work around bridge failures
2016-09-20 21:46:11 -07:00
David Michael
bae08a68da
app-emulation/docker: bump to work around bridge failures
2016-09-20 19:40:46 -07:00