David Michael
8e214f5779
build_torcx_store: add a command for building torcx images
...
This creates new torcx stores under src/build/torcx, similar to the
layout of src/build/images. The script contains a list of packages
to build so there is a deterministic set that gets branched with
this repository. For development, a different list can also be
given on the command line.
Images are created by building only the direct dependencies of
meta-packages under the app-torcx category. They use the board
root as the sysroot for cross-compiling. The base layout of the
installation root is structured so everything is under either /bin
or /lib for simplicity. Any systemd units are rewritten so they
depend on a successful torcx apply, and they inject the appropriate
torcx runtime directory into the PATH.
When ELF binaries are compiled, they are given an RPATH value of
/ORIGIN/../lib which gets rewritten to $ORIGIN/../lib. The final
value enables automatic dynamic linking with packaged libraries.
The intermediate value is to avoid having to escape the $ through
the various build system layers (which are different for each
package) and it pretends to be an absolute path to silence security
warnings.
2017-06-02 14:15:03 -07:00
David Michael
09793ebef9
Merge pull request #2592 from dm0-/initramfs-luks
...
sys-kernel/coreos-kernel: ensure the final systemd is installed
2017-06-01 15:06:58 -07:00
David Michael
7a3191926f
Merge pull request #2591 from dm0-/glsa
...
Sync with GLSA changes
2017-05-31 19:05:54 -07:00
David Michael
e3a0a8c403
Merge pull request #554 from dm0-/glsa
...
Update and fix GLSAs
2017-05-31 19:05:45 -07:00
David Michael
f2789a8d3c
sys-kernel/coreos-kernel: ensure the final systemd is installed
...
The systemd package from setup_board does not have USE=cryptsetup,
but it gets installed before build_packages, which satisfies the
build-time dependency from the kernel. The initramfs should have
the cryptsetup files, so explicitly depend on it to order building
the kernel after the final systemd package.
2017-05-31 17:45:28 -07:00
Benjamin Gilbert
dacdc004fd
Merge pull request #688 from bgilbert/yubikey
...
enter_chroot: Fix ownership of /run/user/UID
2017-05-31 14:31:57 -07:00
David Michael
558f8d8b49
chore(metadata): Regenerate cache
2017-05-31 13:55:11 -07:00
David Michael
96eca17bef
bump(metadata/glsa): sync with upstream
2017-05-31 13:55:03 -07:00
David Michael
d32ad251ad
bump(app-admin/sudo): sync with upstream
2017-05-31 13:54:36 -07:00
David Michael
da45f54084
profiles: sync sudo version on arm64
2017-05-31 13:54:20 -07:00
David Michael
2515513330
coreos-base/coreos-dev: drop optional Xen dependencies
2017-05-31 13:54:03 -07:00
Benjamin Gilbert
b5f19e5d75
enter_chroot: Fix ownership of /run/user/UID
...
We were chowning the host directory, not the one in the chroot.
Host gpg >= 2.1.13 puts the gpg-agent socket in /run/user/UID/gnupg,
which is bind-mounted into the chroot, but the SDK gpg was ignoring it
because /run/user/UID was not owned by UID. This broke tag signing with
YubiKeys.
2017-05-31 13:52:16 -07:00
David Michael
3d948609bc
app-emulation/xen{,-tools,-pvgrub}: drop packages
2017-05-31 13:23:25 -07:00
Benjamin Gilbert
56a97775be
Merge pull request #2589 from crawford/metadata
...
Revert "coreos-base/coreos-metadata: bump to v0.10.0"
2017-05-31 10:25:56 -07:00
Alex Crawford
dbb5920071
Revert "coreos-base/coreos-metadata: bump to v0.10.0"
...
This reverts commit 6adf0ea778cdd90fbbdd29350511bf4291702105.
2017-05-31 08:43:44 -07:00
Fabian Ruff
fc2a26c11d
Allow kubelet to load missing kernel modules
...
The `kubenet` network plugin uses `ebtables` to set up some [dedup rules](0480917b55/pkg/kubelet/network/kubenet/kubenet_linux.go (L808)
2017-05-31 09:15:13 +02:00
David Michael
1659319fb6
Merge pull request #2587 from dm0-/subkey
...
coreos-base/coreos-init: ship the new subkey in coreos-install
2017-05-30 13:02:31 -07:00
David Michael
a448855d9a
coreos-base/coreos-init: ship the new subkey in coreos-install
2017-05-30 12:20:01 -07:00
David Michael
cbe102142b
enter_chroot: initialize with mantle in cros_workon
2017-05-26 14:43:42 -07:00
Geoff Levand
fc65fc68a6
kubelet-wrapper: Enable on arm64
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-05-26 14:38:13 -07:00
Benjamin Gilbert
5741cedfcc
Merge pull request #686 from bgilbert/issues
...
grub: Update bug report URL
2017-05-25 12:53:49 -07:00
Benjamin Gilbert
6cfb286748
grub: Update bug report URL
2017-05-25 11:38:14 -07:00
David Michael
3feb415c5e
Merge pull request #2567 from dm0-/torcx
...
Add the torcx generator
2017-05-24 13:48:20 -07:00
David Michael
df5b6cc5a9
coreos-base/coreos: include torcx
2017-05-24 13:33:36 -07:00
David Michael
f0e909840f
app-arch/torcx: new package
...
The command is not installed into /usr/bin until the UI is done.
Install commands are included as comments for when that is ready.
2017-05-24 13:33:35 -07:00
David Michael
44b838462f
Merge pull request #2584 from dm0-/revert-ignition
...
Revert "sys-apps/ignition: update to v0.15.0"
2017-05-24 11:57:09 -07:00
David Michael
4e7ef7308c
Revert "sys-apps/ignition: update to v0.15.0"
...
This reverts commit 68c9d58c68609abd6a10440695aa40ab66745762.
2017-05-24 11:50:37 -07:00
Benjamin Gilbert
f37d5daa3d
Merge pull request #2571 from zunkree/fix-flannel-wrapper-etc-ssl-certs-path
...
Fix flannel-wrapper etc-ssl-certs volume path
2017-05-24 11:46:22 -07:00
Benjamin Gilbert
f2de09bed2
Merge pull request #2583 from bgilbert/revert-sysusers
...
Revert "sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change"
2017-05-24 11:40:03 -07:00
David Michael
c77ad9f871
Merge pull request #2582 from dm0-/go
...
dev-lang/go: bump for CVE-2017-8932
2017-05-23 20:26:54 -07:00
Benjamin Gilbert
8e8ba5e9df
Merge pull request #2581 from bgilbert/fsprogs
...
profiles: Update btrfs-progs and dosfstools
2017-05-23 19:21:13 -07:00
Benjamin Gilbert
41ff318aaf
Merge pull request #553 from bgilbert/fsprogs
...
Update btrfs-progs and dosfstools; drop exfat-utils
2017-05-23 19:21:02 -07:00
Benjamin Gilbert
9826cd8dd7
Revert "sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change"
...
This reverts commit 7ecd7706493ae4b40400a647863f1a0aa65dbd2c and bumps
the package versions again.
2017-05-23 19:19:49 -07:00
David Michael
d57c1c6584
dev-lang/go: bump for CVE-2017-8932
2017-05-23 18:38:12 -07:00
Benjamin Gilbert
384a1ad02f
bump(sys-fs/dosfstools): sync with upstream
2017-05-23 15:53:51 -07:00
Benjamin Gilbert
ca5fc648f8
sys-fs/exfat-utils: drop package
2017-05-23 15:53:51 -07:00
Benjamin Gilbert
3ce1184723
bump(sys-fs/btrfs-progs): sync with upstream
2017-05-23 15:53:51 -07:00
Benjamin Gilbert
6b9e02e7fe
profiles: accept dosfstools 4.1
2017-05-23 15:52:28 -07:00
Benjamin Gilbert
3d8fd31eb9
profiles: update btrfs-progs; sync on arm64
2017-05-23 15:52:28 -07:00
Derek Gonyeo
6b2d0d1c30
Merge pull request #2580 from dgonyeo/coreos-metadata
...
coreos-base/coreos-metadata: bump to v0.10.0
2017-05-23 15:48:59 -07:00
Derek Gonyeo
8ff54c853b
coreos-base/coreos-metadata: bump to v0.10.0
2017-05-23 15:38:49 -07:00
Derek Gonyeo
2e0189f112
Merge pull request #2579 from dgonyeo/ignition
...
sys-apps/ignition: update to v0.15.0
2017-05-23 14:15:35 -07:00
Derek Gonyeo
3d1fe433f5
Merge pull request #2578 from dgonyeo/master
...
sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change
2017-05-23 14:15:19 -07:00
Derek Gonyeo
43d36666ea
sys-apps/ignition: update to v0.15.0
2017-05-23 14:12:38 -07:00
Derek Gonyeo
eb86f67cb2
sys-apps/baselayout, sys-kernel/bootengine: update for sysusers change
2017-05-23 14:10:54 -07:00
Benjamin Gilbert
b1490b8ab0
Merge pull request #2576 from bgilbert/4.11.2
...
sys-kernel/coreos-*: bump to v4.11.2
2017-05-22 13:24:51 -07:00
Benjamin Gilbert
e92d1d8d26
sys-kernel/coreos-*: bump to v4.11.2
2017-05-22 11:06:06 -07:00
Benjamin Gilbert
98a8acffbd
Merge pull request #684 from bgilbert/prune-azure
...
oem/azure: Drop scripts obsoleted by plume
2017-05-19 18:08:25 -07:00
Oleksandr Milushev
59483d3b56
Fix flannel-wrapper etc-ssl-certs volume path
2017-05-19 11:59:26 +03:00
Benjamin Gilbert
a50a29c960
Merge pull request #2573 from bgilbert/coreos-install
...
coreos-base/coreos-init: bump to fix coreos-install -C
2017-05-18 17:51:37 -07:00
