Thilo Fromm
b7e7da18c3
sys-libs/glibc: Apply Flatcar modifications
...
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
- comment out 'dostrip -x' to force the OS image binaries to be stripped
- remove everything glibc wants to put under /etc since we use
baselayout to provide that
- un-mask amd64 and arm64
Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2023-09-22 15:16:28 +02:00
Thilo Fromm
9ae20fd41f
sys-libs/glibc: import upstream 2.37-r5
...
Imported from commit 406ab36652e8f9cac3f6e61990fb00c861a86a28
Signed-off-by: Thilo Fromm <thilofromm@microsoft.com>
2023-09-22 15:04:11 +02:00
Kai Lüke
4272a41039
Merge pull request #1160 from flatcar/kai/fallback-update-key
...
sys-kernel/bootengine: Use update key for initrd sysext download
2023-09-22 12:17:31 +02:00
Kai Lüke
0b14db27b6
Merge pull request #1161 from flatcar/kai/cloudinit-vm-userdata
...
coreos-base/coreos-cloudinit: Workaround for user-configvirtfs.service
2023-09-22 12:17:14 +02:00
Dongsu Park
13ddc2d85d
Merge pull request #1159 from flatcar/firmware-20230919-main
...
Upgrade Linux Firmware in main from 20230804 to 20230919
2023-09-22 09:36:06 +02:00
flatcar-ci
55f512dd7a
New version: main-3734.0.0-nightly-20230921-2100
2023-09-21 21:00:29 +00:00
Kai Lueke
8777c54b0b
sys-kernel/bootengine: Use update key for initrd sysext download
...
This pulls in https://github.com/flatcar/bootengine/pull/71
to switch the extension download to use the update server and the update
key for verification of the payloads.
2023-09-21 17:30:38 +02:00
Kai Lueke
8f45b6bb98
coreos-base/coreos-cloudinit: Workaround for user-configvirtfs.service
...
This pulls in
https://github.com/flatcar/coreos-cloudinit/pull/24
as a workaround to use Upholds= which eventually starts
user-configvirtfs.service.
2023-09-21 17:29:38 +02:00
Dongsu Park
8b0e46c1cc
overlay sys-kernel/coreos-firmware: update cxgb4 version to 1.27.4.0
...
Fix build issues of coreos-firmware, by bumping the cxgb4 firmware
version to 1.27.4.0.
2023-09-21 16:27:09 +02:00
Flatcar Buildbot
30b42fa62b
sys-kernel/coreos-firmware: Update from 20230804 to 20230919
2023-09-21 07:12:51 +00:00
flatcar-ci
4c4ec0226b
New version: main-3733.0.0-nightly-20230920-2100
2023-09-20 21:00:37 +00:00
Mathieu Tortuyaux
0d3c1a5131
coreos-base/misc-files: add SELinux config
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
678dfd7f79
sys-apps/semodule-utils: sync with Gentoo
...
Commit-Ref: a8d934769f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
077dd2363e
sec-policys/selinux-dbus: add new package
...
it's a dependency from ssh module:
```
Failed to resolve typeattributeset statement at /var/lib/selinux/mcs/tmp/modules/400/ssh/cil:127
Failed to resolve AST
```
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
af5400ce64
sec-policy/selinux-unconfined: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
eed7eb6d21
sec-policy/selinux-sssd: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
206b71a48f
coreos/user-patches: add selinux-container
...
apply Flatcar patch (including the kernel_t transition that
should be removed once we have a system labelled)
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
1306dfefec
sec-policy/selinux-container: add new package
...
it comes in replacement of selinux-virt
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
1e2b1c999d
sec-policy/selinux-virt: drop ebuild
...
it's now replaced by selinux-container
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
2af995d2dc
coreos/user-patches: add selinux-base-policy
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
6b7c24719b
sec-policy/selinux-base-policy: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
ac520d6588
coreos/user-patches: add selinux-base
...
* add selinux patches (icmp-bind, relabel and kernel permissions)
* ship our own config file
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
3de5229a3c
sec-policy/selinux-base: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
cd2d678f43
sys-apps/checkpolicy: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
90bd28e13f
sys-libs/libsemanage: apply flatcar patches
...
* remove python dependencies
* added back multilib_src_install function (qa_check does fail otherwise)
* setting SHLIBDIR for installation
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
e1ff97556f
sys-libs/libsemanage: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
a38d44bd1c
sys-apps/policycoreutils: apply flatcar changes
...
* remove python dependencies
* move selinux policy directory from /etc/selinux/policy to /usr/lib/selinux/policy
* add tmpfiles to recreate /var/lib/selinux on rootfs
* remove setools dependency
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
d78e4b3b20
sys-apps/policycoreutils: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
c4a353d0f8
sys-libs/libsepol: sync with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:37 +02:00
Mathieu Tortuyaux
7132f52f46
sys-libs/libselinux: sync with Gentoo
...
Commit-Ref: a67229c8d6
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:37 +02:00
Mathieu Tortuyaux
b0810f46dd
eclass: sync selinux-policy-2 with Gentoo
...
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:37 +02:00
Jeremi Piotrowski
bc8261f9c6
Merge pull request #1148 from flatcar/add-ue-rs
...
Add ue-rs to image
2023-09-20 10:53:36 +02:00
flatcar-ci
3099b8f996
New version: main-3732.0.0-nightly-20230919-2100
2023-09-19 21:00:29 +00:00
Flatcar Buildbot
4855fc503c
sys-kernel/coreos-sources: Update from 6.1.53 to 6.1.54
2023-09-19 14:15:36 +00:00
Flatcar Buildbot
64dbc8c123
Update mantle container image to latest HEAD
2023-09-19 11:48:09 +00:00
Dongsu Park
33c94b390e
Merge pull request #1127 from flatcar/buildbot/weekly-portage-stable-package-updates-2023-09-11
...
Weekly portage-stable package updates 2023-09-11
2023-09-19 13:47:52 +02:00
Dongsu Park
121798c7fa
Merge pull request #1121 from flatcar/sayan/update-to-nvidia-535.104.05
...
x11-drivers/nvidia-drivers: updates to 535.104.05
2023-09-19 12:43:01 +02:00
Jeremi Piotrowski
e2599703b3
coreos: Add ue-rs to production image
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2023-09-19 12:27:02 +02:00
Jeremi Piotrowski
3030926df7
coreos-base/ue-rs: Initial ebuild
...
Based on the afterburn ebuild with some tweaks. The dependency list was
generated using cargo-ebuild.
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2023-09-19 12:27:02 +02:00
flatcar-ci
ae33c46aa1
New version: main-3731.0.0-nightly-20230918-2100
2023-09-18 21:00:28 +00:00
flatcar-ci
0a0724d76c
New version: main-3728.0.0-nightly-20230915-2100
2023-09-16 02:41:30 +00:00
flatcar-ci
336fd2428d
New version: main-3728.0.0-nightly-20230915-2100-INTERMEDIATE
2023-09-15 21:00:38 +00:00
Jeremi Piotrowski
bf21753ca5
Merge pull request #1131 from flatcar/azure-mana-vf
...
Pull in flatcar/init and bootengine changes to ignore mana VF in networkd
2023-09-15 16:29:03 +02:00
Krzesimir Nowak
1ac17be8d5
overlay coreos-base/coreos-oem-gce: Pull in sys-apps/gentoo-functions too
...
Previously the sys-apps/gentoo-functions package was pulled in into
the GCE image by the sys-libs/glibc package. After the sys-libs/glibc
package update, the dependency disappeared. This resulted in
gentoo-functions not being installed and the build to fail a check for
dangling symlinks:
broken link: b'/etc/init.d/functions.sh' -> b'../../lib/gentoo/functions.sh'
ERROR build_oem_aci: test_image_content: Failed symlink check
The `/etc/init.d/functions.sh` symlink is installed by
sys-apps/baselayout in postinst phase. The package also has a
dependency on sys-apps/gentoo-functions, but it is not pulled in into
the image, because baselayout is installed specially - without
dependencies.
It would probably be better to just drop the symlink, but it's here
for compatibility purposes. We also can't remove the symlink in the
manglefs script, as it gets executed after the filesystem checks.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
98e420f346
overlay profiles: Enable asm USE flag too
...
It is required by dev-libs/gmp's cpudetection USE flag, so it needs to
be enabled explicitly, otherwise it will be disabled during bootstrap.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
f06093854a
overlay profiles: Enable cpudetection USE flag in dev-libs/gmp during bootstrap
...
It normally is enabled by default, but during bootstrap USE flags that
are not force-enabled are disabled. And we need to it avoid bindist
issues that pop up during stage 1 of the SDK build.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
b233ca2e15
sys-apps/locale-gen: Add from Gentoo
...
It's from Gentoo commit 9b2ee03ef894782d6d8d426a8eb8eeb8084ef4fc.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
1dc42011a5
sys-libs/glibc: Apply Flatcar modifications
...
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
- comment out 'dostrip -x' to force the OS image binaries to be stripped
- remove everything glibc wants to put under /etc since we use
baselayout to provide that
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
164934cc94
sys-libs/glibc: Sync with Gentoo
...
It's from Gentoo commit e0bfeb250d886e096fd861a5d280e798c1e16e9c.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
88d8874a87
sys-devel/gnuconfig: Sync with Gentoo
...
It's from Gentoo commit 6f7265991916ed9764eadca4ec23b77fa19ae296.
2023-09-15 16:14:29 +02:00