29556 Commits

Author SHA1 Message Date
Michael Marineau
0f19f5ae13 go: disable arm64-extras flag, currently broken
For some reason the arm64 build (intended only for generating a
pre-built std library) is leaking into the amd64 build, leaving the
installed `go` binary with the arm64 defaults compiled in.

Until this is resolved disable building the arm64 std library.
2015-11-18 13:48:38 -08:00
Alex Crawford
4216338052 Merge pull request #1645 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v1.8.0
2015-11-18 12:00:46 -08:00
Alex Crawford
7eee3bf031 coreos-base/coreos-cloudinit: bump to v1.8.0 2015-11-18 10:40:36 -08:00
Nick Owens
997cd18b42 Merge pull request #1644 from mischief/systemd-corepid
sys-apps/systemd: include fix for core dump pid
2015-11-17 15:35:26 -08:00
Nick Owens
e4abd33098 sys-apps/systemd: include fix for core dump pid 2015-11-17 15:33:50 -08:00
Alex Crawford
184a140f98 Merge pull request #1642 from crawford/ignition
sys-apps/ignition: bump to v0.2.3
2015-11-17 15:31:47 -08:00
Alex Crawford
163c4f14f6 sys-apps/ignition: bump to v0.2.3 2015-11-17 15:27:54 -08:00
Vito Caputo
925ed0adf9 Merge pull request #1639 from vcaputo/docker-disable-selinux-on-btrfs
app-emulation/docker: disable SELinux when using btrfs
2015-11-17 14:55:18 -08:00
Nick Owens
8bf788a996 Merge pull request #1641 from mischief/hidraw
sys-kernel/coreos-kernel: enable USB_HIDRAW for amd64
2015-11-17 10:28:50 -08:00
Nick Owens
dd6d8d67b6 sys-kernel/coreos-kernel: enable USB_HIDRAW for amd64 2015-11-17 10:11:29 -08:00
Nick Owens
718a18ce4e Merge pull request #1640 from vcaputo/coreos-sources-switchdev-patches
sys-kernel/coreos-sources: fix return value of switchdev_port_fdb_dump()
2015-11-17 10:09:35 -08:00
Vito Caputo
a9c169d5a8 sys-kernel/coreos-kernel: ebuild bump sync with coreos-sources-4.2.2-r2 2015-11-17 04:16:35 -08:00
Vito Caputo
4eb125bf38 sys-kernel/coreos-sources: fix return value of switchdev_port_fdb_dump()
Fixes https://github.com/coreos/bugs/issues/980
2015-11-17 04:09:48 -08:00
Vito Caputo
802de9e496 app-emulation/docker: disable SELinux when using btrfs 2015-11-16 22:48:14 -08:00
Nick Owens
6200ca505f Merge pull request #1637 from mischief/hiddev
sys-kernel/coreos-kernel: enable USB_HIDDEV for amd64
2015-11-16 17:23:31 -08:00
Nick Owens
be583e2b72 sys-kernel/coreos-kernel: enable USB_HIDDEV for amd64 2015-11-16 16:03:14 -08:00
Vito Caputo
bb7926f9e0 Merge pull request #1636 from vcaputo/motdgen
motdgen: cease timer use
2015-11-13 13:53:51 -08:00
Vito Caputo
3369796527 sys-apps/baselayout: bump ebuild to restore motdgen content
This restores the output previously maintained in /etc/motd by motdgen
timer in the form of an /etc/profile.d/ hook.
2015-11-13 13:39:47 -08:00
Vito Caputo
08dc7548c5 coreos-base/coreos-init: bump ebuild to remove motdgen timer
Fixes https://github.com/coreos/bugs/issues/47
2015-11-13 13:30:55 -08:00
Alex Crawford
11451f1320 Merge pull request #1635 from crawford/ssh
coreos-base/coreos-init: include update-ssh-key fixes
2015-11-12 16:53:29 -08:00
Nick Owens
9990653061 Merge pull request #1634 from mischief/go-1.4.3
dev-lang/go: bump to 1.4.3
2015-11-12 16:48:47 -08:00
Alex Crawford
70fe0c305f coreos-base/coreos-init: include update-ssh-key fixes 2015-11-12 16:39:51 -08:00
Nick Owens
93b0c3516f dev-lang/go: bump to 1.4.3 2015-11-12 15:37:41 -08:00
Nick Owens
66f783a588 Merge pull request #365 from mischief/libxml2
bump(dev-libs/libxml2): sync with upstream
2015-11-12 15:22:13 -08:00
Nick Owens
68432fb90c bump(dev-libs/libxml2): sync with upstream 2015-11-12 15:14:15 -08:00
Michael Marineau
695e46734b Merge pull request #1633 from marineam/go14
dev-lang/go: downgrade to go 1.4.2
2015-11-12 14:54:21 -08:00
mischief
6f8cc8ae5e dev-lang/go: downgrade to go 1.4.2 2015-11-12 14:52:40 -08:00
Alex Crawford
b77800956f Merge pull request #1621 from endocode/kayrus/enable_dm_cache
coreos-kernel: Enabled dm-cache kernel module
2015-11-12 13:07:16 -08:00
Alex Crawford
f0be34f4dd Merge pull request #476 from crawford/gpg
oem/azure: verify GPG signature of image
2015-11-12 11:52:33 -08:00
Alex Crawford
eb5a53cc7a oem/azure: verify GPG signature of image 2015-11-12 11:44:48 -08:00
Alex Crawford
d9ee591159 Merge pull request #1617 from endocode/kayrus/sysusers.d
Automatically create /etc/sysusers.d directory
2015-11-12 11:11:03 -08:00
mjg59
1ce40e4ca1 Merge pull request #1632 from mjg59/master
Enable SELinux for Docker
2015-11-11 17:12:13 -08:00
Vito Caputo
1d02acec7c Merge pull request #475 from vcaputo/always_disable_console_blanking
grub: disable console blanking
2015-11-11 15:53:02 -08:00
Vito Caputo
0b9c8e5855 grub: disable console blanking
The console often contains very useful information in the event of a
hard crash, in such situations there's no ability to unblank the console
via keypress because the kernel won't handle the interrupt.

Since CoreOS is a server/cluster operating system, there won't generally
be monitors connected benefitting from a blanked console.  Disabling the
blanking altogether allows the frame buffer contents to always be
visible, even when the kernel can't handle keypresses.
2015-11-11 15:22:12 -08:00
Matthew Garrett
1911ea81e7 Enable SELinux for Docker
We ship appropriate SELinux policy for Docker, but the daemon isn't using
it. Make sure Docker is built with SELinux support and turn it on at daemon
startup time.
2015-11-11 14:54:08 -08:00
Michael Marineau
cff534fd0e Merge pull request #1631 from marineam/kernel
coreos-kernel: update fs and security options
2015-11-11 10:38:49 -08:00
Michael Marineau
58ea72b512 coreos-kernel: more security option updates
- Enable RANDOMIZE_BASE, hopefully Xen is ok with this now.
 - Disable HIBERNATE/KEXEC_JUMP, we don't need these features.
 - Fix RO/NX settings in the arm64 kernel.
2015-11-11 10:35:18 -08:00
Michael Marineau
9f0fb176fd Merge pull request #474 from marineam/kernel
kernel_menuconfig: new script to simplify kernel config changes
2015-11-11 10:20:01 -08:00
Michael Marineau
b0c14f99b1 kernel_menuconfig: new script to simplify kernel config changes 2015-11-10 18:06:49 -08:00
Michael Marineau
71fd1532e9 coreos-kernel: update fs and security options
- Switched overlay from built-in to a module.
 - Squashfs was missing xattr support, required for filesystem
   capabilities to work. ping should now work in PXE and ISO images.
 - We never switched to stackprotector string when we updated to GCC 4.9
 - Enable extra credential and selinux checks (DEBUG_CREDENTIALS)
 - Enable RODATA and syn cookies on arm64.
2015-11-10 17:58:24 -08:00
Brian Waldon
ec46ea71cb Merge pull request #1618 from coreos/bump-kubelet
app-admin/kubelet: bump to v1.0.7
2015-11-09 15:14:50 -08:00
Vito Caputo
4029cd6291 Merge pull request #1628 from vcaputo/bump-bootengine-disk-guid-param
sys-kernel/bootengine: bump for coreos.randomize_disk_guid guid as param
2015-11-06 15:05:34 -08:00
Vito Caputo
bd83d4f7f8 sys-kernel/bootengine: bump for coreos.randomize_disk_guid guid as param
Cleanup
2015-11-06 15:02:31 -08:00
Vito Caputo
a9c2ef6c61 Merge pull request #471 from vcaputo/grub_supply_guid_to_randomize
grub: supply disk guid to randomize in coreos.randomize_disk_guid
2015-11-06 14:59:10 -08:00
Vito Caputo
f67fa9ce6c grub: supply disk guid to randomize in coreos.randomize_disk_guid 2015-11-06 14:58:00 -08:00
Vito Caputo
b1d4cb7d23 Merge pull request #1626 from vcaputo/bump-bootengine-randomize-disk-guid
sys-kernel/bootengine: bump for coreos.randomize_disk_guid support
2015-11-05 23:48:53 -08:00
Vito Caputo
f0a9acafff sys-kernel/bootengine: bump for coreos.randomize_disk_guid support
Fixes https://github.com/coreos/bugs/issues/955
2015-11-05 23:17:59 -08:00
Vito Caputo
822edbd080 Merge pull request #469 from vcaputo/explicitly_randomize_disk_guid
grub: add and set coreos.randomize_disk_guid kernel param
2015-11-05 23:14:56 -08:00
Vito Caputo
68f1b407c6 grub: add and set coreos.randomize_disk_guid kernel param
coreos.first_boot=1 will no longer trigger disk-guid randomization, so
manual ignition triggers in diskless/pxe scenarios may succeed.  Instead
we explicitly request the randomization when first_boot=1 was added by
grub finding the 00000000-0000-0000-0000-000000000001 disk-guid.
2015-11-05 21:04:31 -08:00
Nick Owens
09cb97d0be Merge pull request #1624 from mischief/locksmith
app-admin/locksmith: bump to v0.3.4
2015-11-05 18:09:47 -08:00