David Michael
ce92189b5c
profiles: drop some dev-python/ws4py flags
...
Since there are no USE flag dependencies on ws4py (and it's unclear
if anything uses it at all), disable client and server to limit its
already numerous dependencies.
2017-05-09 11:41:12 -07:00
David Michael
163835407c
sys-process/ktop: inherit epatch
2017-05-09 11:41:12 -07:00
David Michael
459747cc1f
dev-util/boost-build: fix cross-compilation
2017-05-09 11:41:12 -07:00
David Michael
ccf87998ec
dev-util/boost-build: import from portage-stable
2017-05-09 11:41:12 -07:00
David Michael
970ee13014
profiles: work around a new dependency cycle
2017-05-09 11:41:12 -07:00
David Michael
9d1cd99ab8
profiles: bootstrap around version blocks
2017-05-09 11:41:12 -07:00
David Michael
b4272247fb
profiles: clean up some redundant versions
2017-05-09 11:41:12 -07:00
David Michael
a1f9afec2a
dev-util/crosutils: update inherited eclass name
2017-05-09 11:41:12 -07:00
David Michael
b123434eea
coreos-base/cros-devutils: update inherited eclass name
2017-05-09 11:41:12 -07:00
David Michael
b77d9d93fa
dev-python/gdata: apply CoreOS changes
2017-05-09 11:41:12 -07:00
David Michael
08fc5885b1
dev-python/gdata: sync with Gentoo
2017-05-09 11:41:12 -07:00
David Michael
8251699410
profiles: drop redundant xattr and seccomp flags
...
They are set in portage-stable's default/linux/make.defaults and
base/make.defaults, which are inherited by linux arch profiles.
2017-05-09 11:41:12 -07:00
David Michael
9cdebd941c
profiles: avoid more silly paths in prod images
2017-05-09 11:41:12 -07:00
David Michael
68f9fc1561
profiles: drop sloppy pkgconfig paths
...
Currently, the only affected package is ipset.
2017-05-09 11:41:12 -07:00
David Michael
f00c402c73
profiles: drop USE=python for libxml2
...
The gtk-doc package was removed after the gtk-doc-am split.
2017-05-09 11:41:12 -07:00
David Michael
e3844d02e8
sys-apps/systemd: make man pages available in the SDK
2017-05-09 11:41:12 -07:00
David Michael
45155195d8
profiles: accept the latest rpcbind
2017-05-08 18:16:58 -07:00
David Michael
f93fa06e66
net-libs/libtirpc: apply CoreOS changes
2017-05-08 18:16:09 -07:00
David Michael
f68da24d2a
net-libs/libtirpc: sync with the latest Gentoo version
2017-05-08 18:16:07 -07:00
David Michael
cbcf6b3e45
profiles: bump arm64 versions for GLSAs
2017-05-08 11:50:02 -07:00
Benjamin Gilbert
ee1709b256
sys-kernel/coreos-modules: Enable some kernel hardening features
...
SLAB_FREELIST_RANDOM: Randomize slab allocator freelist order,
c7ce4f60ac199fb3521c5fcd64da21cee801ec2b
IO_STRICT_DEVMEM: Disallow access to /dev/mem regions that are bound
to a kernel driver, 90a545e981267e917b9d698ce07affd69787db87
HARDENED_USERCOPY: Add more address range checks to copy_{from,to}_user(),
f5509cc18daa7f82bcc553be70df2117c8eedc16
2017-05-04 14:18:11 -07:00
Alex Crawford
8f75b76ba6
chore(metadata): Regenerate cache
2017-05-04 09:21:17 +02:00
Alex Crawford
187a379d6e
dev-db/etcd: remove etcd 0.4.9
2017-05-04 09:20:06 +02:00
Alex Crawford
c7c9880fca
app-admin/etcd-wrapper: add the tmpfiles conf
...
By default, the wrapper uses /var/lib/etcd which was created by the etcd
ebuild. Now that it's being removed, this ebuild needs to explicitly
create it.
2017-05-03 18:19:05 +02:00
Benjamin Gilbert
11ef638f23
Merge pull request #2556 from bgilbert/kernel-4.11
...
sys-kernel/coreos-*: bump to v4.11
2017-05-02 17:16:28 -07:00
Benjamin Gilbert
3c12f4762b
sys-kernel/coreos-*: bump to v4.11
...
Config changes:
- The refreshed Secure Boot patches now use LOCK_DOWN_KERNEL and
EFI_SECURE_BOOT_LOCK_DOWN instead of EFI_SECURE_BOOT_SIG_ENFORCE.
- KPROBE_EVENT and UPROBE_EVENT were pluralized in
6b0b7551428e4caae1e2c023a529465a9a9ae2d4.
- DEBUG_SET_MODULE_RONX was renamed in
0f5bf6d0afe4be6e1391908ff2d6dc9730e91550, but as of
ad21fc4faa2a1f919bac1073b885df9310dbc581 it's mandatory on both supported
arches. Dropped.
- VMXNET3 conflicts with ARM64_64K_PAGES as of
fbdf0e28d061708cf18ba0f8e0db5360dc9a15b9, and likely doesn't make sense on
ARM. Moved to amd64.
- TIMER_STATS was dropped in dfb4357da6ddbdf57d583ba64361c9d792b0e0b1.
- CPU_FREQ_STAT_DETAILS was dropped in
801e0f378fe7d53f87246037bf40567277275418.
2017-05-02 14:44:10 -07:00
Benjamin Gilbert
bc828bb67c
Merge pull request #2555 from bgilbert/revbump-usage
...
sys-kernel/coreos-sources: Fix revbump.sh error if run without args
2017-05-01 17:53:03 -07:00
Benjamin Gilbert
d034ddc21f
sys-kernel/coreos-sources: Fix revbump.sh error if run without args
2017-05-01 17:51:27 -07:00
Geoff Levand
61896d1e5a
Merge pull request #2520 from glevand/for-merge-etcd
...
Enable etcd-wrapper on arm64.
2017-05-01 10:33:56 -07:00
David Michael
eab22c4326
sys-boot/grub: bump to 2.02
2017-04-28 14:20:43 -07:00
Euan Kemp
0894229a46
app-admin/flannel-wrapper: update to 0.7.1
...
Rote version bump
2017-04-27 14:59:41 -07:00
Euan Kemp
d3fdc91bf2
app-admin/flannel-wrapper: update timeouts
...
See https://github.com/coreos/bugs/issues/1833 where this was requested.
This has become more important with the more recent flannel releases
including kubernetes and becoming larger as well.
The value of 5 minutes is arbitrarily chosen as a reasonable increase
over the default 90s.
2017-04-27 14:58:35 -07:00
Geoff Levand
e796a9033e
coreos: Enable etcd-wrapper on arm64
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-27 09:33:44 -07:00
Geoff Levand
52105e099d
etcd-wrapper: Enable on arm64
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-27 09:33:44 -07:00
Geoff Levand
1e226ef625
etcd-wrapper: Add missing metadata.xml
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2017-04-27 09:33:44 -07:00
David Michael
915c03f3a0
app-emulation/docker: mask bridges from "docker network create"
...
There will be more race conditions from networkd attempting to
claim every network interface for users of "docker network" without
this Match pattern. Bridges are named "br-" followed by hex.
2017-04-26 12:26:17 -07:00
David Michael
0bf60e24fe
app-admin/etcd-wrapper: bump to etcd 3.1.6
2017-04-26 11:45:38 -07:00
David Michael
bbf8bdc484
profiles: bump curl
2017-04-25 14:00:21 -07:00
Benjamin Gilbert
7bca3363bd
Merge pull request #2545 from bgilbert/revbump-sigs
...
sys-kernel/coreos-sources: Have revbump.sh check sigs and update manifest
2017-04-25 12:11:03 -07:00
Benjamin Gilbert
7728ebf35c
sys-kernel/coreos-*: bump to v4.10.12
2017-04-24 19:10:33 -07:00
Benjamin Gilbert
c4a870d0ca
sys-kernel/coreos-sources: Have revbump.sh check sigs and update manifest
...
We now need /usr/bin/ebuild (as well as several others), so it's less
practical to run revbump.sh outside the SDK chroot.
2017-04-24 18:15:48 -07:00
Benjamin Gilbert
be80585e22
sys-kernel/coreos-sources: Add kernel signing keys to revbump.sh
...
Linus Torvalds for releases and Greg KH for stable patches.
2017-04-24 18:08:53 -07:00
Benjamin Gilbert
dfc93578bc
sys-kernel/coreos-sources: Allow revbump.sh srcdir to be relative path
2017-04-24 18:07:38 -07:00
David Michael
215033f7d9
app-emulation/containerd: build the Docker 1.12 branch with go1.7
...
This will only matter for future beta/stable releases that continue
to hold back Docker >= 1.13.
2017-04-24 17:33:30 -07:00
David Michael
4942a3c256
dev-lang/go: bump to 1.7.5
2017-04-24 17:32:36 -07:00
David Michael
d85c33bcd1
eclass: quote cros-workon assignments
...
With portage-2.3.3, failglob errors are printed when any of these
lines expand to ": *", so quote the variables to not use patterns.
2017-04-21 16:26:13 -07:00
David Michael
b0ccc96a4f
Merge pull request #2527 from dm0-/gce
...
GCE Fixes
2017-04-21 15:29:49 -07:00
David Michael
3a47c532ac
Merge pull request #2523 from dm0-/portage
...
Upgrade portage
2017-04-21 15:19:01 -07:00
David Michael
294a5606c6
Merge pull request #2533 from dm0-/toolbox
...
app-admin/toolbox: bump for the SSH login shell fix
2017-04-21 14:50:19 -07:00
David Michael
3dbb207739
Merge pull request #2531 from dm0-/dnsmasq
...
Fix dnsmasq cross-compilation
2017-04-21 14:44:00 -07:00