Now that Gentoo distfiles and its mirror deleted a source tarball
`portage-utils-0.87.tar.xz`, Flatcar build also started failing like the
following. For now we fixed the issue by manually uploading the missing
tarball to the Flatcar mirror. However, we should update portage-utils
to 0.90 to avoid potential issues.
```
http://distfiles.gentoo.org/distfiles/96/portage-utils-0.87.tar.xz
HTTP request sent, awaiting response... 404 Not Found
2021-08-04 16:09:28 ERROR 404: Not Found.
https://dev.gentoo.org/~grobian/distfiles/portage-utils-0.87.tar.xz
HTTP request sent, awaiting response... 404 Not Found
2021-08-04 16:09:28 ERROR 404: Not Found.
```
This releases includes fixes for the following CVEs:
- CVE-2021-22924
- CVE-2021-22926
- CVE-2021-22925
The changes are not sync with Gentoo upstream, rather modified in the
overlay. The changes are:
- 7.78.0 removes metalink support
- 7.78.0 remmoves references to darwinssl package
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
slirp is needed to by qemu netdev user backend, which was removed in the
process of upgrading qemu to 5.2.0. Bring it back so that it is possible
to run flatcar_production_qemu.sh directly from the chroot.
See also kinvolk/Flatcar#420
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
Update dev-libs/libverto to 0.3.1-r1, to avoid failures like below:
```
!!! All ebuilds that could satisfy "=dev-libs/libverto-0.3.1-r1" for
/usr/aarch64-cros-linux-gnu/ have been masked.
!!! One of the following masked packages is required to complete your
request:
- dev-libs/libverto-0.3.1-r1::portage-stable (masked by: ~arm64 keyword)
```
This change syncs pax-utils to 1.3.1, bringin it on par with Gentoo
upstream. A minor change is incuded in the ebuild (commented on in the
file) to work around a build issue with our (outdated)
python-single-r1.eclass.
The workaround may be removed after we updated to a python version
supported by upstream, and updated our eclasses respectively.
The update fixes an issue with scanelf and glibc-2.33:
/usr/lib/portage/python3.6/estrip: line 393: 1628751 Bad system call (core dumped) scanelf -yqRBF '#k%F' -k '.symtab' "$@"
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
To un-break the toolchain build for arm64 for the glibc-2.33 update, a
few packages require un-masking for arm64.
This change unmasks arm64 for
* app-misc/pax-utils
* dev-libs/libev, libverto
* virtual/acl
Unmasking this here instead of overriding the masks in
package.accept_keywords because our ebuild versions are outdated, newer
upstream versions are unmasked for arm64 already. I.e. when we update to
current upstream these packages will remain available on ARM64, no need
to use custom overrides via package.accept_keywords.
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
