Commit Graph

15537 Commits

Author SHA1 Message Date
Mathieu Tortuyaux
d0562c1e4a
overlay sys-libs/libsemanage: set compression on
otherwise it blows from 3MB to 33MB on `/usr/lib/selinux/policy/mcs/`
for example.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-22 11:37:11 +02:00
Dongsu Park
13ddc2d85d
Merge pull request #1159 from flatcar/firmware-20230919-main
Upgrade Linux Firmware in main from 20230804 to 20230919
2023-09-22 09:36:06 +02:00
flatcar-ci
55f512dd7a New version: main-3734.0.0-nightly-20230921-2100 2023-09-21 21:00:29 +00:00
Dongsu Park
8b0e46c1cc overlay sys-kernel/coreos-firmware: update cxgb4 version to 1.27.4.0
Fix build issues of coreos-firmware, by bumping the cxgb4 firmware
version to 1.27.4.0.
2023-09-21 16:27:09 +02:00
Flatcar Buildbot
30b42fa62b sys-kernel/coreos-firmware: Update from 20230804 to 20230919 2023-09-21 07:12:51 +00:00
flatcar-ci
4c4ec0226b New version: main-3733.0.0-nightly-20230920-2100 2023-09-20 21:00:37 +00:00
Mathieu Tortuyaux
0d3c1a5131
coreos-base/misc-files: add SELinux config
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
678dfd7f79
sys-apps/semodule-utils: sync with Gentoo
Commit-Ref: a8d934769f

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
077dd2363e
sec-policys/selinux-dbus: add new package
it's a dependency from ssh module:
```
Failed to resolve typeattributeset statement at /var/lib/selinux/mcs/tmp/modules/400/ssh/cil:127
Failed to resolve AST
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
af5400ce64
sec-policy/selinux-unconfined: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:40 +02:00
Mathieu Tortuyaux
eed7eb6d21
sec-policy/selinux-sssd: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
206b71a48f
coreos/user-patches: add selinux-container
apply Flatcar patch (including the kernel_t transition that
should be removed once we have a system labelled)

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
1306dfefec
sec-policy/selinux-container: add new package
it comes in replacement of selinux-virt

Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
1e2b1c999d
sec-policy/selinux-virt: drop ebuild
it's now replaced by selinux-container

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
2af995d2dc
coreos/user-patches: add selinux-base-policy
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
6b7c24719b
sec-policy/selinux-base-policy: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:39 +02:00
Mathieu Tortuyaux
ac520d6588
coreos/user-patches: add selinux-base
* add selinux patches (icmp-bind, relabel and kernel permissions)
* ship our own config file

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
3de5229a3c
sec-policy/selinux-base: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
cd2d678f43
sys-apps/checkpolicy: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
90bd28e13f
sys-libs/libsemanage: apply flatcar patches
* remove python dependencies
* added back multilib_src_install function (qa_check does fail otherwise)
* setting SHLIBDIR for installation

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
e1ff97556f
sys-libs/libsemanage: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
a38d44bd1c
sys-apps/policycoreutils: apply flatcar changes
* remove python dependencies
* move selinux policy directory from /etc/selinux/policy to /usr/lib/selinux/policy
* add tmpfiles to recreate /var/lib/selinux on rootfs
* remove setools dependency

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
d78e4b3b20
sys-apps/policycoreutils: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:38 +02:00
Mathieu Tortuyaux
c4a353d0f8
sys-libs/libsepol: sync with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:37 +02:00
Mathieu Tortuyaux
7132f52f46
sys-libs/libselinux: sync with Gentoo
Commit-Ref: a67229c8d6

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:37 +02:00
Mathieu Tortuyaux
b0810f46dd
eclass: sync selinux-policy-2 with Gentoo
Commit-Ref: ea4cd1f216
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-09-20 12:33:37 +02:00
Jeremi Piotrowski
bc8261f9c6
Merge pull request #1148 from flatcar/add-ue-rs
Add ue-rs to image
2023-09-20 10:53:36 +02:00
flatcar-ci
3099b8f996 New version: main-3732.0.0-nightly-20230919-2100 2023-09-19 21:00:29 +00:00
Flatcar Buildbot
4855fc503c sys-kernel/coreos-sources: Update from 6.1.53 to 6.1.54 2023-09-19 14:15:36 +00:00
Flatcar Buildbot
64dbc8c123 Update mantle container image to latest HEAD 2023-09-19 11:48:09 +00:00
Dongsu Park
33c94b390e
Merge pull request #1127 from flatcar/buildbot/weekly-portage-stable-package-updates-2023-09-11
Weekly portage-stable package updates 2023-09-11
2023-09-19 13:47:52 +02:00
Dongsu Park
121798c7fa
Merge pull request #1121 from flatcar/sayan/update-to-nvidia-535.104.05
x11-drivers/nvidia-drivers: updates to 535.104.05
2023-09-19 12:43:01 +02:00
Jeremi Piotrowski
e2599703b3 coreos: Add ue-rs to production image
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2023-09-19 12:27:02 +02:00
Jeremi Piotrowski
3030926df7 coreos-base/ue-rs: Initial ebuild
Based on the afterburn ebuild with some tweaks. The dependency list was
generated using cargo-ebuild.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2023-09-19 12:27:02 +02:00
flatcar-ci
ae33c46aa1 New version: main-3731.0.0-nightly-20230918-2100 2023-09-18 21:00:28 +00:00
flatcar-ci
0a0724d76c New version: main-3728.0.0-nightly-20230915-2100 2023-09-16 02:41:30 +00:00
flatcar-ci
336fd2428d New version: main-3728.0.0-nightly-20230915-2100-INTERMEDIATE 2023-09-15 21:00:38 +00:00
Jeremi Piotrowski
bf21753ca5
Merge pull request #1131 from flatcar/azure-mana-vf
Pull in flatcar/init and bootengine changes  to ignore mana VF in networkd
2023-09-15 16:29:03 +02:00
Krzesimir Nowak
1ac17be8d5 overlay coreos-base/coreos-oem-gce: Pull in sys-apps/gentoo-functions too
Previously the sys-apps/gentoo-functions package was pulled in into
the GCE image by the sys-libs/glibc package. After the sys-libs/glibc
package update, the dependency disappeared. This resulted in
gentoo-functions not being installed and the build to fail a check for
dangling symlinks:

broken link: b'/etc/init.d/functions.sh' -> b'../../lib/gentoo/functions.sh'
ERROR   build_oem_aci: test_image_content: Failed symlink check

The `/etc/init.d/functions.sh` symlink is installed by
sys-apps/baselayout in postinst phase. The package also has a
dependency on sys-apps/gentoo-functions, but it is not pulled in into
the image, because baselayout is installed specially - without
dependencies.

It would probably be better to just drop the symlink, but it's here
for compatibility purposes. We also can't remove the symlink in the
manglefs script, as it gets executed after the filesystem checks.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
98e420f346 overlay profiles: Enable asm USE flag too
It is required by dev-libs/gmp's cpudetection USE flag, so it needs to
be enabled explicitly, otherwise it will be disabled during bootstrap.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
f06093854a overlay profiles: Enable cpudetection USE flag in dev-libs/gmp during bootstrap
It normally is enabled by default, but during bootstrap USE flags that
are not force-enabled are disabled. And we need to it avoid bindist
issues that pop up during stage 1 of the SDK build.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
b233ca2e15 sys-apps/locale-gen: Add from Gentoo
It's from Gentoo commit 9b2ee03ef894782d6d8d426a8eb8eeb8084ef4fc.
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
1dc42011a5 sys-libs/glibc: Apply Flatcar modifications
- take care of nscd.conf via tmpfiles, add files/nscd-conf.tmpfiles.
  - comment out 'dostrip -x' to force the OS image binaries to be stripped
  - remove everything glibc wants to put under /etc since we use
    baselayout to provide that
2023-09-15 16:14:29 +02:00
Krzesimir Nowak
164934cc94 sys-libs/glibc: Sync with Gentoo
It's from Gentoo commit e0bfeb250d886e096fd861a5d280e798c1e16e9c.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
88d8874a87 sys-devel/gnuconfig: Sync with Gentoo
It's from Gentoo commit 6f7265991916ed9764eadca4ec23b77fa19ae296.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
a21f6b4aa6 sys-devel/gcc: Sync with Gentoo
It's from Gentoo commit fd5e866a711e198fd75481450040358d9e4adfb4.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
1a766eedf5 sys-devel/crossdev: Sync with Gentoo
It's from Gentoo commit 0f842a75da2c62bcad13ea63ec581767497af41f.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
0d805c854e sys-block/thin-provisioning-tools: Sync with Gentoo
It's from Gentoo commit f52ed5ee1893c8520dfd352fadd6c9e0f6d2aed6.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
c8cd5d7dbc sys-apps/portage: Sync with Gentoo
It's from Gentoo commit 7844750a4f0076dc1db0d4409a88d09246c73703.
2023-09-15 16:14:29 +02:00
Flatcar Buildbot
46fe0e3063 sys-apps/man-pages: Sync with Gentoo
It's from Gentoo commit f61e025edd6d7a0204aecba9c73ab5bb7c292302.
2023-09-15 16:14:29 +02:00