Commit Graph

8712 Commits

Author SHA1 Message Date
Krzesimir Nowak
ca26be6b85 Merge pull request #2379 from flatcar/krnowak/acct-hack
profiles: Do not modify preexisting users
2023-01-16 12:26:52 +01:00
Kai Lüke
8527a36cc2 Merge pull request #2373 from flatcar/kai/sysext-oem-bootengine
sys-kernel/bootengine: Manage systemd-sysext images for A/B booting
2023-01-13 18:21:12 +01:00
Kai Lueke
5ef7826ff2 sys-kernel/bootengine: Manage systemd-sysext images for A/B booting
This pulls in
https://github.com/flatcar/bootengine/pull/50
to select the active sysext images for OEMs or Flatcar extensions
that are coupled to the OS version. Systemd 252 is needed for the
sysext images to load without error because earlier systemd versions
were too strict about the final filename target name of a symlink.
2023-01-13 18:18:37 +01:00
Dongsu Park
a50db210a2 changelog: add changelog for python-oem 3.9.16 2023-01-13 15:03:03 +01:00
Krzesimir Nowak
ce6bdc5915 dev-lang/python-oem: Apply Flatcar modifications
Apply Flatcar modifications.

Unlike python <= 3.9.12, it is now unnecessary to replace virtual/awk
with app-alternatives/awk, because the upstream python ebuild already
has app-alternatives/awk.

Based on 32b448f8ccbf5f814739f834151803532272b1f9.
2023-01-13 15:03:00 +01:00
Dongsu Park
ba76a751c5 dev-lang/python-oem: update to 3.9.16
Update dev-lang/python-oem to 3.9.16, the same version as
dev-lang/python in portage-stable.

Gentoo commit 8c8c938e158a9e10f1c5a4280c16e435e354122e.
2023-01-13 10:22:56 +01:00
Krzesimir Nowak
3db813eb32 profiles: Do not modify preexisting users
Add an ebuild phase hook that runs when pkg_postinst is about to be
executed. The hook sets up the environment for acct-user packages to
avoid modifications of the preexisting users - these are provided by
our baselayout and usermod can't change anything there anyway (it
complains that the user is not in /etc/passwd).
2023-01-12 16:24:10 +01:00
Krzesimir Nowak
4370512afd profiles: Drop accept keywords for sys-libs/libseccomp
The entry was out of date as we haven't even used this version for
some time. Currently used version is already stable for amd64 and
arm64.
2023-01-11 10:47:14 +01:00
Krzesimir Nowak
524b712a5a profiles: Keep using bzip2 for compressing binary packages
This was a default so far, but updating portage resulted in a change
of the default binary packages compressor from bzip2 to zstd. We
eventually will want to follow this change too, but first some scripts
that assume bzip2 will need to be updated. So for now keep using bzip2
to limit the scope of updating portage.
2023-01-11 10:47:14 +01:00
Krzesimir Nowak
5bf90df9a4 profiles: Disable binpkg-multi-instance feature
The binpkg-multi-instance feature seems to be about having multiple
binary packages of a single source package, in case those packages
were built with different USE flags and stuff.

So far we have not used this feature, and it looks like that the
update of portage has made this feature to be enabled by default. The
enabling broke the image build, because this feature makes portage to
use a bit different directory structure to store binary packages. So
instead of storing sys-devel/gcc binary package in
${PKGDIR}/sys-devel/gcc-${VERSION}.tbz2, the binary package is stored
in ${PKGDIR}/sys-devel/gcc/gcc-${VERSION}-${BUILD_ID}.xpak.

Maybe we could consider using this feature at some point in future,
but for now disable it to keep building things working.
2023-01-11 10:47:14 +01:00
Krzesimir Nowak
1106e240a1 sys-apps/portage: Move to portage-stable 2023-01-11 10:47:14 +01:00
Krzesimir Nowak
37defc380c profiles: Disable rsync-verify USE flag for sys-apps/portage
So far we have been modifying the ebuild file to make rsync-verify to
be disabled by default instead of enabled by default as it's done by
upstream ebuild.

This will allow us to remove another modification from portage ebuild
and eventually move sys-apps/portage to portage-stable.
2023-01-11 10:47:14 +01:00
Krzesimir Nowak
db14a01fc7 profiles: Do not install repos.conf from sys-apps/portage
The package installs a default repos.conf in
/usr/share/portage/config/repos.conf. Normally it contained a default
configuration for gentoo repository, but we have a modification in the
ebuild that clobbers the contents of the file with a comment
line. Which means that this configuration file is empty. We do so,
because we are putting our own configuration in /etc anyway.

To minimize the amount of modifications put into the ebuild, we can
add /usr/share/portage/config/repos.conf into INSTALL_MASK. This is
one modification less and it's putting us closer to moving
sys-apps/portage to portage-stable.
2023-01-11 10:47:14 +01:00
Krzesimir Nowak
c850639660 Merge pull request #2372 from flatcar/krnowak/sshd-config
coreos-base/coreos-init: Pull in fixed sshd_config
2023-01-11 10:22:13 +01:00
Krzesimir Nowak
0103249bcb coreos-base/coreos-init: Pull in fixed sshd_config
According to sshd_config manual, only lines starting with a hash and
empty lines are treated as comments. Which means that comments coming
after the key value pairs are not really comments and sshd complains
about them like:

/etc/ssh/sshd_config line 6: keyword PrintLastLog extra arguments at end of line
/etc/ssh/sshd_config line 7: keyword PrintMotd extra arguments at end of line
/etc/ssh/sshd_config: terminating, 2 bad configuration options
2023-01-11 08:52:38 +01:00
Sayan Chowdhury
487ba9efcf Merge pull request #2360 from flatcar/linux-5.15.86-main
Upgrade Linux Kernel for main from 5.15.81 to 5.15.86
2023-01-10 21:40:04 +05:30
Kai Lüke
32d8a64206 Merge pull request #2371 from flatcar/kai/backport-initrd-setup-root
sys-kernel/bootengine: Always run initrd-setup-root
2023-01-10 11:12:52 +01:00
Kai Lueke
abfaba8374 sys-kernel/bootengine: Always run initrd-setup-root
This pulls in
c8399e42bb9651c3c108f916f6645557ab41884b which is a backport of the
relevant parts of https://github.com/flatcar/bootengine/pull/50 to fix
https://github.com/flatcar/Flatcar/issues/944
2023-01-10 11:12:19 +01:00
Dongsu Park
285051316b Merge pull request #2370 from flatcar/cacerts-3.87-main
Upgrade ca-certificates in main from 3.86 to 3.87
2023-01-09 16:12:54 +01:00
Krzesimir Nowak
ba0743743d changelog: Add entries 2023-01-09 10:51:03 +01:00
Krzesimir Nowak
3b29f965e2 profiles: Cleanups for systemd
Sort the use flags, drop obsolete ones and nonexistent packages, drop
unnecessary accept keywords file (as it would potentially introduce a
version mismatch between amd64 and arm64).
2023-01-09 08:31:16 +01:00
Krzesimir Nowak
490ec0dc59 sys-apps/systemd: Apply Flatcar modifications 2023-01-09 08:31:16 +01:00
Krzesimir Nowak
45cc76db62 sys-apps/systemd: Sync with Gentoo
It's from Gentoo commit ef3b51926ede813b240e807911eef302ac0c4fdb.
2023-01-09 08:31:16 +01:00
Flatcar Buildbot
f2abbf09fe app-misc: Upgrade ca-certificates 3.86 to 3.87 2023-01-09 07:15:31 +00:00
Mathieu Tortuyaux
e9ec604f42 Merge pull request #2351 from flatcar/tormath1/ignition-vagrant
sys-apps/ignition: bring back noop OEM
2023-01-09 07:09:00 +01:00
Flatcar Buildbot
9ccfcc3c55 app-emulation: Upgrade Containerd 1.6.14 to 1.6.15 2023-01-06 08:22:37 +00:00
Mathieu Tortuyaux
43479cf6ae changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-01-03 09:12:58 +01:00
Flatcar Buildbot
595603a0e6 sys-kernel: Upgrade Kernel 5.15.81 to 5.15.86 2023-01-01 07:16:32 +00:00
Flatcar Buildbot
2d2c3e61cc app-emulation: Upgrade Containerd 1.6.13 to 1.6.14 2022-12-23 08:21:45 +00:00
Mathieu Tortuyaux
8a6cbb8880 sys-apps/ignition: bring back noop OEM
it mainly brings back Vagrant which was failing with Ignition 2.14.0
even if no Ignition is provided.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-12-21 17:28:38 +01:00
Dongsu Park
0b3beed6fe Merge pull request #2350 from flatcar/docker-20.10.22-main
Upgrade Docker in main from 20.10.21 to 20.10.22
2022-12-21 16:56:14 +01:00
Flatcar Buildbot
7f1d5313e7 app-emulation: Upgrade Docker 20.10.21 to 20.10.22 2022-12-21 07:45:33 +00:00
Dongsu Park
5c8d650a98 dev-lang/rust: bump version from 1.65 to 1.66 to fix build
As the Gentoo ebuild of dev-lang/rust >= 1.65 keeps workaround that
explicitly checks for a version like 1.65, that ebuild would obviously
make the build fail with 1.66.
Update the version from 1.65 to 1.66 to fix the build.
2022-12-20 12:10:33 +01:00
Flatcar Buildbot
f87210ba5c dev-lang: Upgrade dev-lang/rust 1.65.0 to 1.66.0 2022-12-20 07:33:57 +00:00
Krzesimir Nowak
1e5bd7893f changelog: Add an entry 2022-12-19 10:22:48 +01:00
Krzesimir Nowak
5c4757654f profiles: Update USE name for sys-apps/systemd 2022-12-19 10:22:48 +01:00
Krzesimir Nowak
d313a77d29 sys-apps/systemd: Apply Flatcar modifications 2022-12-19 10:22:48 +01:00
Krzesimir Nowak
c0b3c67e51 sys-apps/systemd: Sync with Gentoo
It's from Gentoo commit 5ee96ebd12ec053d626f2e717bb4ba9f38991b4f.
2022-12-19 10:22:48 +01:00
Flatcar Buildbot
0a55fafbb7 app-emulation: Upgrade Containerd 1.6.12 to 1.6.13 2022-12-16 08:21:10 +00:00
Dongsu Park
27311821b3 Merge pull request #2336 from flatcar/firmware-20221214-main
Upgrade Linux Firmware in main from 20221109 to 20221214
2022-12-15 15:28:24 +01:00
Mathieu Tortuyaux
fa4fac2e51 Merge pull request #2318 from flatcar/tormath1/update-engine
coreos-base/update_engine: pull new update-engine
2022-12-15 12:32:35 +01:00
Krzesimir Nowak
17dfbf3365 Merge pull request #2335 from flatcar/krnowak/user-patches
coreos/user-patches: New directory for user-patches
2022-12-15 11:06:22 +01:00
Krzesimir Nowak
68c56b0c11 coreos/user-patches: New directory for user-patches 2022-12-15 11:05:56 +01:00
Flatcar Buildbot
252d052d22 sys-kernel: Upgrade Linux Firmware 20221109 to 20221214 2022-12-15 07:11:08 +00:00
Krzesimir Nowak
bc70d8bb4e Merge pull request #2333 from flatcar/krnowak/weekly
Changes for weekly updates (update glibc to 2.36)
2022-12-14 14:50:21 +01:00
Dongsu Park
f7564880d7 .github: run apt-get update before installing native Ubuntu packages
We should run apt-get update before installing native Ubuntu packages
like qemu-user-static. Otherwise apt-get install could fail like:

```
Err:1 http://azure.archive.ubuntu.com/ubuntu jammy-updates/universe
amd64 qemu-user-static amd64 1:6.2+dfsg-2ubuntu6.5
  404  Not Found [IP: 52.252.75.106 80]
```

That happens because meanwhile the qemu-user-static deb package in the
Azure mirror was updated from 6.5 to 6.6, without keeping the old
version. Its index of the Azure mirror was updated, but
setup-flatcra-sdk.sh did not sync that, as apt-get update did not run.
2022-12-14 09:50:07 +01:00
Dongsu Park
d147ba2b79 Merge pull request #2332 from flatcar/go-1.18.9-and-1.19.4-main
Upgrade Go from 1.19.3 and 1.18.8 to 1.19.4 and 1.18.9
2022-12-13 10:02:04 +01:00
Krzesimir Nowak
d5244cd84b changelog: Add an entry 2022-12-12 14:52:54 +01:00
Krzesimir Nowak
1c7d3ad34d sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2022-12-12 14:25:09 +01:00
Dongsu Park
ec387e32fa changelog: add security changelog for Go 1.19.4, 1.18.9 2022-12-12 10:00:14 +01:00