17119 Commits

Author SHA1 Message Date
Eugene Yakubovich
3e9f8cfcda app-emulation/docker,app-admin/flannel: fix flags
docker now requires --ip-masq=false if --iptables=false.
fix missing space in flanneld.service
2014-11-17 17:22:38 -08:00
Michael Marineau
60867d011f Merge pull request #961 from marineam/verity
sdk-depends: Add cryptsetup/veritysetup to SDK
2014-11-17 17:31:19 -06:00
Michael Marineau
766f4273cb bump(sys-fs/cryptsetup): sync with upstream 2014-11-15 17:35:38 -08:00
Michael Marineau
776d17b6aa sdk-depends: Add cryptsetup/veritysetup to SDK 2014-11-15 17:10:01 -08:00
Alex Crawford
34bc70b10e app-emulation/open-vm-tools: update network script
The current network script gives errors when suspending/resuming a vm running CoreOS with open-vm-tools. this adds a patch to fix it.

Originally written by Oliver Kurth <okurth@vmware.com>.
2014-11-14 18:03:10 -08:00
Alex Crawford
0e066cb078 app-emulation/open-vm-tools: track stable-9.4.6-deploypkg and use mspack 2014-11-14 18:02:59 -08:00
Eugene Yakubovich
167105765d flannel: adding flannel and supporting items: early-docker, sdnotify-proxy 2014-11-14 17:09:32 -08:00
Alex Crawford
4d816af454 dev-libs/libmspack: add libmspack-0.4_alpha 2014-11-14 14:32:20 -08:00
Alex Crawford
a20de3e161 coretest: recognize InteractiveAuthorizationRequired error 2014-11-11 16:39:15 -08:00
Alex Crawford
adbacedc01 Merge pull request #953 from crawford/dns
coreos-base/coreos-init: disable reverse DNS lookups in sshd
2014-11-10 11:15:30 -08:00
Michael Marineau
a3c37d017b baselayout: Add OEM lib directories to default search path
Although this shouldn't strictly be required, OEM binaries can use RPATH
or RUNPATH, there are plenty of corner cases that waste time. For
example if a library in OEM links to another OEM the linker verification
performed by build_packages won't catch it since RPATH would be provided
by the binary that happens to use those libraries, not the library files
themselves. Such tediousness isn't worth wasting more time over and as
long as OEM is after the normal system libraries this should be safe.
2014-11-08 10:43:30 -08:00
Michael Marineau
6a2f6197ce Merge pull request #955 from marineam/secure
sdk-depends: install UEFI firmware for QEMU by default
2014-11-07 17:42:57 -08:00
Michael Marineau
90e753d913 grub: mark new version as stable
This is the first stable ebuild using our own grub git repo which
includes support for the `linuxefi` command, required for using grub
with Fedora's shim and UEFI secure boot. Includes other minor updates
since the snapshot cut used by the previous stable ebuild:

Andrei Borzenkov (1):
      Use full initializer for initrd_ctx to avoid fatal warnings with older GCC

Andrey Borzenkov (1):
      cleanup: grub_cpu_to_XXX_compile_time for constants

Colin Watson (5):
      * configure.ac: Remove several unnecessary semicolons.
      Support grub-emu on x32 (ILP32 but with x86-64 instruction set)
      Tidy up ChangeLog formatting.
      Add a new "none" platform that only builds utilities
      Fix in-tree --platform=none

Khem Raj (1):
      Fix build with glibc 2.20

Matthew Garrett (1):
      Add support for linuxefi

Michael Chang (2):
      Fix incorrect address reference in btrfs
      * grub-core/osdep/unix/config.c: Remove extraneous comma.

Michael Marineau (12):
      linguas: use en_US as UTF-8 locale, C.UTF-8 is not a standard locale.
      gpt: start new GPT module
      tests: fix path to words file on Gentoo/CoreOS
      gpt: rename misnamed header location fields
      gpt: record size of of the entries table
      gpt: consolidate crc32 computation code
      gpt: add new repair function to sync up primary and backup tables.
      gpt: add write function and gptrepair command

Peter Jones (1):
      Initialized initrd_ctx so we don't free a random pointer from the stack.

Valentin Dornauer (1):
      ACPIhalt: Add more ACPI opcodes.

Vladimir Serbinenko (5):
      Fix wrong commit
      * grub-core/gmodule.pl.in: Accept newer binutils which output
        empty column rather than 0x0.
      * grub-core/commands/keylayouts.c: Ignore unknown keys.
      * grub-core/normal/main.c: Don't drop to rescue console in
        case of password-protected prompt and no menu entries.
      Revert "Use -Wl,--no-relax rather than -mno-relax for uniformity."
2014-11-07 17:26:06 -08:00
Michael Marineau
b5916947c3 sdk-depends: install UEFI firmware for QEMU by default
For use with the `qemu_uefi` vm type.
2014-11-07 14:56:35 -08:00
Alex Crawford
33a7bf6d50 Merge pull request #954 from crawford/docker
Revert "app-emulation/docker: bump to v1.3.1"
2014-11-07 14:53:45 -08:00
Alex Crawford
bb1fe1fd15 Revert "app-emulation/docker: bump to v1.3.1"
This reverts commit 87efde004420ce93bca42d531d140d05150e44ba.
Bumps docker-1.3.1.ebuild -> docker-1.3.0-r1.ebuild.
2014-11-07 14:48:27 -08:00
Greg Kroah-Hartman
057f2ace49 Merge pull request #952 from marineam/secure
Enable kernel module signing
2014-11-07 08:28:08 -08:00
Alex Crawford
ef04c59e23 coreos-base/coreos-init: disable reverse DNS lookups in sshd 2014-11-06 22:03:34 -08:00
Michael Marineau
9621f09547 coreos-kernel: enable module and kexec signature verification
The module verification is in permissive mode by default, loading
unsigned modules will simply taint the kernel. The kexec verification
doesn't directly impact us right now since we are not using the newer
file based syscall right now.
2014-11-06 16:29:29 -08:00
Michael Marineau
6ac92e93a0 coreos-kernel: prune old kernel versions 2014-11-06 16:16:58 -08:00
Alex Crawford
9745288600 app-emulation/open-vm-tools: read passwords from shadow database 2014-11-06 15:47:32 -08:00
Alex Crawford
d707a23863 coreos-base/vboot_reference: cgpt repair command
Allow repair command to accept a whole disk or partition.
2014-11-06 12:56:07 -08:00
Michael Marineau
7bafeb9b93 edk2: install split OVMF_CODE and OVMF_VARS images
Both OVMF and QEMU have gained support for splitting the combined OVMF
image into two, now variable storage is its own file.
2014-11-05 15:47:54 -08:00
Michael Marineau
2bd4c6a7be edk2: fix up UEFI firmware build for QEMU and add secure boot flag 2014-11-05 14:02:53 -08:00
Alex Crawford
73a1e46a97 Merge pull request #947 from crawford/waagent
app-emulation/wa-linux-agent: bump agent, removing local patches
2014-11-05 13:26:59 -08:00
Chris Armstrong
1f7d3fd2e8 app-emulation/docker: bump to v1.3.1 2014-11-05 12:06:52 -08:00
Alex Crawford
d2056226b1 app-emulation/wa-linux-agent: bump agent, removing local patches 2014-11-05 11:55:35 -08:00
Michael Marineau
9d59b015e2 Merge pull request #931 from crawford/ncurses
sys-libs/ncurses: add screen-16color
2014-11-03 15:43:40 -08:00
Alex Crawford
d0dec6c4fc Merge pull request #945 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v0.10.7
2014-11-03 14:51:16 -08:00
Alex Crawford
7877416bcf coreos-base/coreos-cloudinit: bump to v0.10.7 2014-11-03 14:46:55 -08:00
Michael Marineau
1d7e500e15 Merge pull request #944 from marineam/fix
vboot_reference: fix hybrid MBR creation in cgpt
2014-11-03 11:16:03 -08:00
Michael Marineau
486e12b436 vboot_reference: fix hybrid MBR creation in cgpt 2014-11-03 10:44:49 -08:00
Michael Marineau
88fade37ea coreos-kernel: re-add iptables NAT modules
NAT support was mistakenly dropped in commit a5deb9a7 due to changes in
config option naming between 3.16 and 3.17.
2014-11-02 17:17:50 -08:00
Michael Marineau
d31c09b86f vboot_reference: update cgpt w/ new hybrid MBR logic
https://github.com/coreos/vboot_reference/pull/22
2014-10-31 20:29:44 -07:00
Michael Marineau
d11c5aa3b4 bump(net-misc/wget): sync with upstream 2014-10-31 19:10:02 -07:00
Jonathan Boulle
de49fe6a0d Merge pull request #940 from jonboulle/master
locksmith: bump to 0.2.2
2014-10-30 16:31:25 -07:00
Jonathan Boulle
b389e81dad locksmith: bump to 0.2.2 2014-10-30 16:07:12 -07:00
Alex Crawford
1d45c2499e sys-kernel/coreos-kernel: bump to v3.17.2 2014-10-30 13:56:56 -07:00
Alex Crawford
4ae6c2ed04 Merge pull request #936 from crawford/jq
coreos-devel/sdk-depends: add jq
2014-10-22 15:27:47 -07:00
Alex Crawford
bcc1e6c64d coreos-devel/sdk-depends: add jq 2014-10-22 15:22:43 -07:00
Alex Crawford
06fd7d3d6a app-misc/jq: sync with upstream 2014-10-22 14:48:58 -07:00
Vito Caputo
ff8079fb14 update_engine: string::assign unset alephversion from appversion 2014-10-22 14:05:17 -04:00
Vito Caputo
358ff85697 libchrome: Fix append bug in file_util::ReadFileToString()
This commit reproduces in the form of an epatch an upstream libchrome
fix to prevent ReadFileToString() from appending to the provided output
string.

Bug was observed in update_engine alephversion pref maintenance
2014-10-21 20:53:53 -04:00
Alex Crawford
f7b8130ce9 sys-libs/ncurses: add screen-16color 2014-10-20 23:06:22 -05:00
Michael Marineau
a03f650a0d grub: add cros-workon based live ebuild, adjust use flags for testing
After this grub unit tests almost work, for 'pc' at least. The only one
in that set that doesn't work are some tests that rely on video
checksums to validate the output. Tests for other targets like 'efi-64'
are a whole new adventure to figure out.
2014-10-19 22:24:59 -07:00
Michael Marineau
8ad4f1860c grub: sync with current upstream live ebuild
Minor tweaks, doing this to simplify future changes/maintenance.
2014-10-19 22:24:59 -07:00
Michael Marineau
1170596d55 bump(dev-libs/libisoburn): sync with upstream
Packages updated:
  dev-libs/libburn
  dev-libs/libisoburn
  dev-libs/libisofs
2014-10-19 22:18:44 -07:00
Michael Marineau
c11611fb65 grub: remove old grub versions, now maintained in coreos-overlay 2014-10-19 19:30:35 -07:00
Michael Marineau
80c7f31af6 profiles: do not install live dtc ebuild
Not a significant feature here, it is an OpenFirmware compiler and
optional dependency of QEMU. Old ChromeOS stuff was allowing the live
ebuild and the project's upstream host seems to now be gone, breaking
our builds. Remove keyword, remove from hard-host-depends. It can be
pulled in as a dependency of QEMU if needed.
2014-10-19 11:59:09 -07:00
Michael Marineau
01fbbf9a99 bump(sys-apps/dtc): sync with upstream 2014-10-19 11:54:09 -07:00