Commit Graph

8188 Commits

Author SHA1 Message Date
Krzesimir Nowak
c070fd41c4 changelog: Add an entry 2022-05-25 15:47:12 +02:00
Krzesimir Nowak
f67e139a2b profiles: Clean up berkdb USE flags
Disabling it per-package is a no-op since we disable berkdb globally
through the make.defaults file.

Also drop redundant enabling of berkdb in sys-libs/gdbm in target
profile, because we already do it in the base profile.
2022-05-25 15:47:00 +02:00
Krzesimir Nowak
d5c18a906f profiles: Clean up python USE flags
The berkdb flag is gone, sqlite flag is already enabled by default.
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
ce54fe641d dev-python/boto: Apply Flatcar modifications 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
650892196a dev-python/boto: Sync with Gentoo
It's from gentoo commit 99e8a93d029cb2370fb08397cdb6cd7b459b2353.
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
a7339931a4 dev-python/distro-oem: Bump to 1.7.0 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
23041be4c2 profiles: Mask python 3.10
It seems to be picked up for some reason during SDK build, instead of
using python 3.9.9:

emerge: there are no ebuilds to satisfy "dev-lang/python-exec[python_targets_python3_10(-)]".
(dependency required by "dev-lang/python-3.10.2_p1::portage-stable" [ebuild])
(dependency required by "sec-policy/selinux-base-2.20200818-r2::coreos" [ebuild])
(dependency required by "sec-policy/selinux-base-policy-2.20200818-r2::coreos" [ebuild])
(dependency required by "sec-policy/selinux-unconfined-2.20200818-r2::portage-stable" [ebuild])
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
4bc01c9201 dev-lang/python-oem: Apply Flatcar modifications 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
d793efce8b dev-lang/python-oem: Copy from Gentoo 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
4e38d17efa sec-policy/selinux-base: Depend on python properly
Otherwise it was trying to pull in the latest stable python version,
which currently is 3.10, while we still are using 3.9.
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
cc5f4ce2e5 coreos-base/hard-host-depends: Add packages pulled in by distutils eclass 2022-05-25 15:43:17 +02:00
Mathieu Tortuyaux
72c01651a5 profiles: exclude acpi files from install step
they are not really suited for Flatcar usage.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-24 11:46:04 +02:00
Mathieu Tortuyaux
1465916f5a coreos-base/coreos: add explicit sys-power/acpid dependency
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-24 11:46:04 +02:00
Mathieu Tortuyaux
724002d665 profiles: accept acpid 2.0.33
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-24 11:46:04 +02:00
Mathieu Tortuyaux
7b7b935f80 Merge pull request #1912 from flatcar-linux/tormath1/gcp
coreos-base/oem-gce: bring back shutdown scripts
2022-05-24 09:27:36 +02:00
Krzesimir Nowak
8d9662a9a0 Merge pull request #1909 from flatcar-linux/krnowak/drop-pylint
coreos-base/hard-host-depends: Drop dev-python/pylint
2022-05-23 18:38:13 +02:00
Mathieu Tortuyaux
20cf9804d7 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-23 18:07:42 +02:00
Mathieu Tortuyaux
ebb6f281e7 coreos-base/oem-gce: bring back shutdown scripts
In the `init.sh` of the OEM GCE container, we have the following
section:

```bash
wait -n "${daemon_pids[@]}" || :
kill "${daemon_pids[@]}" || :

test -n "$stopping" || exit 1

exec /usr/bin/google_metadata_script_runner --script-type shutdown
```

`shutdown` script was not executed because container was receiving a
`SIGKILL`, the started processes was not properly terminated.

According to the `systemd-nspawn` manual:
```bash
If --boot is not used and this option is not specified
the container's processes are terminated abruptly via SIGKILL
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-23 17:54:48 +02:00
Mathieu Tortuyaux
bae75b9665 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-20 16:19:18 +02:00
Mathieu Tortuyaux
63da5d5de0 sys-kernel/bootengine: pull network kargs
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-20 16:19:18 +02:00
Mathieu Tortuyaux
ce17153093 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-20 15:28:42 +02:00
Mathieu Tortuyaux
8afe6bc7a9 sys-apps/ignition: upgrade ign-converter dependency
this pulls networkd conversion support.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-20 15:25:41 +02:00
Dongsu Park
6be5de6b4a Merge pull request #1908 from flatcar-linux/dongsu/nvidia-drivers-510.73.05
x11-drivers/nvidia-{drivers,metadata}: update to 510.73.05
2022-05-20 09:42:40 +02:00
Krzesimir Nowak
31797e602b Merge pull request #1906 from flatcar-linux/linux-5.15.41-main
Upgrade Linux Kernel in main from 5.15.40 to 5.15.41
2022-05-19 19:22:00 +02:00
Krzesimir Nowak
6b1d443f58 coreos-base/hard-host-depends: Drop dev-python/pylint
It does not seem to be a build dependency of python.
2022-05-19 18:08:13 +02:00
Dongsu Park
42e40811b5 changelog: add changelog for nvidia-drivers 2022-05-19 11:31:06 +02:00
Dongsu Park
61129fb1a5 x11-drivers/nvidia-{drivers,metadata}: update to 510.73.05
Update x11-drivers/nvidia-drivers to 510.73.05, mainly to address
CVE-2022-28181, CVE-2022-28183, CVE-2022-28184, CVE-2022-28185.
2022-05-19 11:31:06 +02:00
Flatcar Buildbot
64e54be113 sys-kernel: Upgrade Kernel 5.15.40 to 5.15.41 2022-05-19 07:23:49 +00:00
Dongsu Park
97195f9fec profiles: accept keywords ~arm64 for curl 7.83.1
To be able to build curl 7.83.1 for arm64, we need to accept keywords
for ~arm64.
2022-05-18 17:29:35 +02:00
Dongsu Park
72b8fe9c89 Merge pull request #1899 from flatcar-linux/dongsu/ncurses-6.3_p20220423
sys-libs/ncurses: update to 6.3_p20220423
2022-05-18 17:07:51 +02:00
Dongsu Park
fb60e123c7 Merge pull request #1898 from flatcar-linux/dongsu/openssl-3.0.3
dev-libs/openssl: update to 3.0.3
2022-05-18 15:28:46 +02:00
Dongsu Park
0ceca8b3be changelog: add security changelog for Docker 20.10.16 2022-05-18 14:59:58 +02:00
Dongsu Park
f02226d4dd changelog: add changelog for ncurses 2022-05-18 11:35:38 +02:00
Dongsu Park
53ff903403 sys-libs/ncurses: Apply Flatcar patches
Add a symlink-usr USE flag for keeping a minimal set of terminfo
files in /usr/share/terminfo.

Also allow writes to /dev/ptmx, which sometimes causes the sandbox
to fail Jenkins builds.

Based on 09951dc3db0f79294eb223a9154f372e24c1d99d.
2022-05-18 11:35:38 +02:00
Dongsu Park
7be073fa5c sys-libs/ncurses: update to 6.3_p20220423
Update sys-libs/ncurses to 6.3_p20220423, mainly to address
CVE-2022-29458.

Commit-Ref: https://github.com/gentoo/gentoo/commit/a59133147f7a
2022-05-18 11:35:30 +02:00
Dongsu Park
37f1ea2b37 changelog: add changelog for openssl 3.0.3 2022-05-18 11:10:42 +02:00
Flatcar Buildbot
46ee7963d2 app-emulation: Upgrade Docker 20.10.15 to 20.10.16 2022-05-18 07:45:34 +00:00
Krzesimir Nowak
df1f0b3e28 Merge pull request #1895 from flatcar-linux/linux-5.15.40-main
Upgrade Linux Kernel in main from 5.15.38 to 5.15.40
2022-05-17 17:41:00 +02:00
Mathieu Tortuyaux
4cad012bba dev-libs/openssl: Apply Flatcar modifications
- remove unecessary files
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- mark openssl as stable for arm64 and amd64

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-05-17 11:36:27 +02:00
Dongsu Park
b8a65b0959 dev-libs/openssl: update to 3.0.3
Update dev-libs/openssl to 3.0.3, mainly to address CVE-2022-1292,
CVE-2022-1473.

Commit-Ref: https://github.com/gentoo/gentoo/commit/296c0f547c51
2022-05-17 11:35:14 +02:00
Flatcar Buildbot
d2dcb42d13 dev-lang: Upgrade Go 1.17.9 to 1.17.10 2022-05-16 07:37:22 +00:00
Flatcar Buildbot
b6177ccbcf sys-kernel: Upgrade Kernel 5.15.38 to 5.15.40 2022-05-16 07:30:00 +00:00
Dongsu Park
b30eb994e1 Merge pull request #1879 from flatcar-linux/firmware-20220509-main
Upgrade Linux Firmware in main from 20220411 to 20220509
2022-05-13 15:53:23 +02:00
Krzesimir Nowak
c5d6280026 changelog: Add an entry 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
5efb559382 profiles: Do not install the e2fsprogs devel tools 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
35ac1a04a4 profiles: Drop accept_keywords for sys-libs/talloc
We updated to 2.3.3, which is stable for both amd64 and arm64. Also,
we have the new enough python version now.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
86c1c65b84 coreos/config: Drop env overrides for dead package 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
4a13a5f869 sys-libs/ldb: Move to portage-stable
We have updated pythong and the related eclasses some time ago, so I
think this ebuild should be working fine now. Also, it needs updating,
because net-fs/samba started to require a newer version of it.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
6133cc6d8a profiles: Drop accept_keywords for net-nds/openldap
The updated package became stable for both amd64 and arm64.
2022-05-13 14:08:43 +02:00
Krzesimir Nowak
5de6530bbe coreos/config: Drop some env var overrides for net-nds/openldap 2022-05-13 14:08:43 +02:00