3009 Commits

Author SHA1 Message Date
Michael Marineau
cff534fd0e Merge pull request #1631 from marineam/kernel
coreos-kernel: update fs and security options
2015-11-11 10:38:49 -08:00
Michael Marineau
58ea72b512 coreos-kernel: more security option updates
- Enable RANDOMIZE_BASE, hopefully Xen is ok with this now.
 - Disable HIBERNATE/KEXEC_JUMP, we don't need these features.
 - Fix RO/NX settings in the arm64 kernel.
2015-11-11 10:35:18 -08:00
Michael Marineau
71fd1532e9 coreos-kernel: update fs and security options
- Switched overlay from built-in to a module.
 - Squashfs was missing xattr support, required for filesystem
   capabilities to work. ping should now work in PXE and ISO images.
 - We never switched to stackprotector string when we updated to GCC 4.9
 - Enable extra credential and selinux checks (DEBUG_CREDENTIALS)
 - Enable RODATA and syn cookies on arm64.
2015-11-10 17:58:24 -08:00
Brian Waldon
ec46ea71cb Merge pull request #1618 from coreos/bump-kubelet
app-admin/kubelet: bump to v1.0.7
2015-11-09 15:14:50 -08:00
Vito Caputo
bd83d4f7f8 sys-kernel/bootengine: bump for coreos.randomize_disk_guid guid as param
Cleanup
2015-11-06 15:02:31 -08:00
Vito Caputo
f0a9acafff sys-kernel/bootengine: bump for coreos.randomize_disk_guid support
Fixes https://github.com/coreos/bugs/issues/955
2015-11-05 23:17:59 -08:00
mischief
633462a157 app-admin/locksmith: bump to v0.3.4 2015-11-05 17:37:21 -08:00
Brian Waldon
adf1da35f7 app-admin/kubelet: bump to v1.0.7 2015-11-03 09:31:28 -08:00
Michael Marineau
6389c19a10 Merge pull request #1616 from marineam/gsutil
gsutil and gcutil update
2015-10-29 11:08:55 -07:00
Michael Marineau
8e22a55fe2 chore(metadata): Regenerate cache 2015-10-28 14:32:24 -07:00
Michael Marineau
f910633c63 net-misc/gcutil: add gcutil ebuild 2015-10-28 14:31:59 -07:00
Michael Marineau
f4aa39f06d profiles: update keywords for gsutil and dependencies 2015-10-28 14:08:29 -07:00
Alex Crawford
2e032b987d Merge pull request #1615 from crawford/coreos-cloudinit
coreos-base/coreos-cloudinit: bump to v1.7.1
2015-10-28 12:53:36 -07:00
Alex Crawford
9e80b67bb6 coreos-base/coreos-cloudinit: bump to v1.7.1 2015-10-27 22:29:14 -07:00
Nick Owens
1a734aa124 Revert "coreos-base/coreos: pull sys-block/open-iscsi into coreos" 2015-10-27 16:55:02 -07:00
Nick Owens
da2906b8d6 coreos-base/coreos: pull sys-block/open-iscsi into coreos 2015-10-27 15:57:49 -07:00
Nick Owens
2183607feb sys-kernel/coreos-kernel: run ppp config through savedefconfig 2015-10-26 15:14:54 -07:00
Philip Walls
8e534eea78 Include other PPP related modules, such as MPPE. 2015-10-26 15:14:54 -07:00
Philip Walls
846abd2455 Enable modularized PPP support in CoreOS kernel. 2015-10-26 15:14:54 -07:00
Nick Owens
71ffa8b2df sys-kernel/coreos-kernel: enable drbd, nbd, aoe drivers 2015-10-26 15:09:10 -07:00
Nick Owens
3cebdbb186 sys-kernel/coreos-kernel: run configs through savedefconfig 2015-10-24 16:30:38 -07:00
Vito Caputo
b2ff6c0128 sys-apps/systemd: bump systemd to include journald compress bugfix 2015-10-24 10:14:37 -07:00
Alex Crawford
fcc0e5bcc5 app-admin/locksmith: bump to v0.3.3 2015-10-23 15:44:49 -07:00
Vito Caputo
3450d1eb05 sys-kernel/bootengine: update disks-uuid & ignition-generator 2015-10-23 14:57:03 -07:00
Alex Crawford
f0c27c6beb sys-kernel/bootengine: update ignition-generator 2015-10-23 00:35:58 -07:00
Alex Crawford
eb8320c88f sys-apps/ignition: remove stray ebuild 2015-10-23 00:35:03 -07:00
Vito Caputo
3aa6c30218 sys-kernel/coreos-kernel: fix COREOS_SOURCE_REVISION: s/r1/-r1/ 2015-10-22 13:40:34 -07:00
Alex Crawford
38c6b556b6 Merge pull request #1597 from crawford/coreos-metadata
coreos-base/coreos-metadata: bump to v0.2.2
2015-10-21 17:15:58 -07:00
Alex Crawford
9252eca727 Merge pull request #1594 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v1.7.0
2015-10-21 17:07:30 -07:00
Alex Crawford
4574d6c9f0 coreos-base/coreos-metadata: bump to v0.2.2
Use the kernel command line instead of sourcing
/usr/share/oem/oem-release. This file is going away.
2015-10-21 17:06:55 -07:00
Alex Crawford
6f88cd24c3 Merge pull request #1592 from crawford/pxe
sys-apps/ignition: remove dependency on OEM part.
2015-10-21 17:02:44 -07:00
Vito Caputo
99369bd587 sys-apps/ignition: bump to v0.2.2 2015-10-21 15:20:50 -07:00
Nick Owens
d2b048aad8 dev-db/etcd: bump to v2.2.1 2015-10-21 15:17:08 -07:00
Vito Caputo
a2528d1a26 Merge pull request #1593 from vcaputo/overlayfs-xattr-minalloc
coreos-sources: add patch minimizing allocation in ovl_copy_xattr
2015-10-21 15:09:44 -07:00
Vito Caputo
27c0fe7730 coreos-kernel: bump for coreos-sources-4.2.2-r1 2015-10-21 15:03:56 -07:00
Vito Caputo
417ef14f20 coreos-sources: bump ebuild to 4.2.2-r1 2015-10-21 15:00:36 -07:00
Vito Caputo
d35619266f coreos-sources: add patch minimizing allocation in ovl_copy_xattr
Fixes https://github.com/coreos/bugs/issues/489
2015-10-21 15:00:32 -07:00
Alex Crawford
b217168631 coreos-base/coreos-cloudinit: bump to v1.7.0 2015-10-21 14:59:33 -07:00
Alex Crawford
ba1ed88eea oem-*: use kernel parameter instead of oem-release 2015-10-20 15:18:23 -07:00
Alex Crawford
9122aea73b sys-apps/ignition: remove dependency on OEM part.
Not all images have a seperate OEM partition. This was causing boot
failures while the service waited on the device to appear. Instead,
a generator in the initramfs will populate an arg file with the OEM_ID
and the Ignition stages will source that into the environment.
2015-10-20 14:09:40 -07:00
Nick Owens
fd53881482 sys-apps/systemd: include fix for journal-remote install steps 2015-10-19 12:58:19 -07:00
Nick Owens
520662bce5 Merge pull request #1587 from endocode/kayrus/microhttpd_epoll
Enabled epoll for libmicrohttpd and systemd-journal-remote
2015-10-15 18:02:07 -07:00
Alex Crawford
efefde799e sys-apps/ignition: bump to v0.2.1 2015-10-15 16:08:51 -07:00
kayrus
b42e400010 Enabled epoll for libmicrohttpd and systemd-journal-remote 2015-10-15 17:37:23 +02:00
Michael Marineau
f44b532d78 coreos-init: use /run as tmp in the autologin generator 2015-10-14 12:22:29 -07:00
Michael Marineau
5807c5e5b0 bootengine: fix selinux tmpfiles in initrd again 2015-10-14 12:14:25 -07:00
Nick Owens
ace8978ec2 profiles/coreos/arm64: mark net-libs/libmicrohttpd-0.9.42 as stable for arm64 2015-10-14 10:44:05 -07:00
Geoff Levand
a9320bee83 sys-auth/polkit: Add arm64 keyword 2015-10-13 12:09:02 -07:00
Michael Marineau
00b703c1bf polkit: fix config install paths, use systemd-tmpfiles
All configs should be installed to /usr and tmpfiles should be used to
create and fix directory permissions instead of the ebuild's postinst.
2015-10-13 12:06:58 -07:00
Michael Marineau
ffe8162478 polkit: import 0.113 ebuild 2015-10-13 12:00:37 -07:00