6553 Commits

Author SHA1 Message Date
Flatcar Buildbot
d148caec5c sys-kernel: Upgrade coreos-kernel 5.9.11 to 5.9.12 2020-12-03 07:24:51 +00:00
Dongsu Park
ed8e99c33b .github: use create-pull-request@v3 to fix set-env issues
Github Actions for Rust started failing with following errors:

```
Error: Unable to process command '::set-env name=PULL_REQUEST_NUMBER::718' successfully.
Error: The `set-env` command is disabled. Please upgrade to using
Environment Files or opt into unsecure command execution by setting the
`ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For
more information see:
https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/
```

It happens because we have used peter-evans/create-pull-request@v2,
which did not have a bug fix for the set-env issue.
The bug was fixed in create-pull-request
[v3.4.1](https://github.com/peter-evans/create-pull-request/releases/tag/v3.4.1).
So we just need to update the version to `v3`, which already includes
v3.4.1.
2020-12-01 11:09:27 +01:00
Dongsu Park
6d7d458120 Merge pull request #640 from kinvolk/rust-1.47.0-main
dev-lang: Upgrade Rust 1.46.0 to 1.47.0
2020-11-30 16:18:54 +01:00
Vincent Palmer
7611b33366 Enable BCMGENET as a module on arm64_defconfig-5.9 2020-11-30 08:52:32 +01:00
Kai Lüke
a0b27d994e Merge pull request #716 from shift/shift-patch-1
Enable BCM7XXX_PHY as a module on arm64_defconfig-5.9
2020-11-27 19:05:05 +09:00
Vincent Palmer
1d063987c5 Enable BCM7XXX_PHY as a module on arm64_defconfig-5.9
# Enables Raspberry Pi 4 PHY

The following 1 line change enables the kernel module to be build enabling the Raspberry Pi 4 PHY enabling the on-board NIC.

# How to use

Build it and boot it :)

# Testing done

Validated the config change against known working 5.8.y kernels on the Pi4.
2020-11-27 10:41:26 +01:00
Kai Lüke
cd2e39891e coreos-base/coreos-init: Point to latest repo state
This pulls in
https://github.com/kinvolk/init/pull/32
to change the LTS motd information.
2020-11-27 12:44:14 +09:00
Sayan Chowdhury
6b7d73387a Merge pull request #711 from kinvolk/sayan/fix-dev-container-download-path-release
x11-drivers/nvidia-drivers: Fix the dev container download URL
2020-11-26 17:58:45 +05:30
Thilo Fromm
3f9db23702 Merge pull request #708 from kinvolk/linux-5.9.11-main
Upgrade Linux Kernel in main from 5.9.10 to 5.9.11
2020-11-26 09:21:28 +01:00
Thilo Fromm
eac3b8e818 Merge pull request #704 from kinvolk/t-lo/update-to-glibc-2.32
update to glibc 2.32
2020-11-26 09:20:29 +01:00
Sayan Chowdhury
fd260b2e90 x11-drivers/nvidia-drivers: Fix the dev container download URL
The kola tests fails to download during the release because the
artifacts of the release has not been pushed to the website yet.
This adds the logic to check if the URL is 200, then only download
or else fallback to the GCS bucket url.

This commit also changes a bug with the check to see if nvidia
is installed or required.

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-26 12:45:23 +05:30
Sayan Chowdhury
2c39bb10aa Merge pull request #710 from kinvolk/sayan/add-azure-gpu-support-on-main
Add the support for GPU on Azure
2020-11-25 19:39:02 +05:30
Sayan Chowdhury
9dd4df789e Add the support for GPU on Azure - Flatcar Pro
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-25 18:46:32 +05:30
Thilo Fromm
7e6cb983a8 net-fs/samba-4.11.13: add patch to fix build breakage with glibc-2.32
This commit adds amba-4.11-fix-glibc-2.32-function-collisions.patch
which fixes compile breakage in a test shipped with Samba-4.11.
The test defines functions which are now shipped with glibc-2.32.
2020-11-25 12:41:20 +01:00
Thilo Fromm
d937cff9a7 coreos-devel/fero-client: fix grpc-sys-0.2.3 + glibc-2.32 compile issue
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-25 12:41:20 +01:00
Thilo Fromm
84cca56fbd sys-libs/libselinux: un-break build with >=glibc-2.30
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-25 12:41:09 +01:00
Thilo Fromm
7f781099dd sys-libs/glibc-2.32,targets/sdk: backport to EAPI6, add Flatcar changes
Backport the glibc recipe to EAPI6 to work around BDEPEND emerge
issue, add flatcar specific changes to the build recipe.
Move PYTHON_DEPS to DEPEND so things can build.

Don't run sanity checks in pkg_pretend
(similar change as in glibc-2.29) to prevent
gcc checks when only the binary package is installed.

Also, force the "crypt" use flag for all builds so libcrypt is built.
(Upstream gentoo does the same)

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-25 12:35:53 +01:00
Flatcar Buildbot
8891a27a1e sys-kernel: Upgrade coreos-kernel 5.9.10 to 5.9.11 2020-11-25 07:22:56 +00:00
Haitao Li
af01922714 kernel: Enable HOTPLUG_PCI_ACPI for arm64 2020-11-25 12:33:17 +11:00
Thilo Fromm
ae57f04c83 sys-libs/glibc: import Gentoo upstream 2.32
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-24 20:07:03 +01:00
Thilo Fromm
5b89af81d8 Merge pull request #700 from kinvolk/linux-5.9.10-main
Upgrade Linux Kernel in main from 5.9.8 to 5.9.10
2020-11-24 14:21:07 +01:00
Kai Lüke
aab1e0773c sys-apps/baselayout: Point to latest repo state
This pulls in
https://github.com/kinvolk/baselayout/pull/8
to add tmpfile directives for for /opt and /opt/bin
2020-11-24 14:27:43 +09:00
Flatcar Buildbot
47d4197e87 sys-kernel: Upgrade coreos-kernel 5.9.8 to 5.9.10 2020-11-23 07:22:51 +00:00
Thilo Fromm
7b0bad618f sys-(devel|libs|kernel),profiles: make upstream gdb work, add gcc-9.3.0 changes
This PR includes the necessary changes to upgrade the SDK compiler to gcc-9.3.0.
It also changes the gdb-9.2 recipe to work with the Flatcar SDK.

The changes include:

sys-devel/gdb/gdb-9.2.ebuild: use EAPI6 to work around BDEPEND emerge bug
update sys-libs/nss-usrfiles to nss-usrfiles-2.30.ebuild to support glibc > 2.29
update sys-kernel/README.md to call out need for updating kernel-headers, perf
add sys-libs/glibc/README.md outlining our changes to the glibc recipe
update profiles/coreos/base/package.accept_keywords to include new toolchain

The change also adds a README to
sys-libs/glibc/README.md
and it improves on a README in
sys-kernel/README -> sys-kernel/README.md

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:51:35 +01:00
Thilo Fromm
abbb97f075 sys-devel: import upstream gdb-9.2, strace-5.9
Import upstream recipes to enable gcc-9.3.0 builds.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-18 14:35:35 +01:00
Kai Lüke
9f84992c21 Merge pull request #689 from kinvolk/kai/extend-filesystem-race
coreos-base/coreos-init: Update to latest repository state
2020-11-18 20:43:55 +09:00
Kai Lüke
f3d421f45d coreos-base/coreos-init: Update to latest repository state
This pulls in
https://github.com/kinvolk/init/pull/31
to make extend-filesystems more robust against a race.
2020-11-18 20:43:30 +09:00
Dongsu Park
233ba141b8 Merge pull request #690 from kinvolk/dongsu/sdk-dwarves
profiles: make SDK include dev-util/dwarves
2020-11-18 12:33:25 +01:00
Dongsu Park
44ac3dbd92 Merge pull request #691 from kinvolk/dongsu/kernel-configs-20201117
sys-kernel: enable BPF_JIT, POWER_SUPPLY, overlayfs options
2020-11-18 11:23:51 +01:00
Dongsu Park
8243944c99 sys-kernel: enable metacopy and redirect_dir for overlayfs
Enable CONFIG_OVERLAY_FS_METACOPY, metadata only copy up feature
in overlayfs. When turned on, overlayfs will only copy up metadata
when a metadata specific operation like chown/chmod is performed.
Full file will be copied up later when file is opened for WRITE
operation. More or less like delayed data copy up operation.

Enable CONFIG_OVERLAY_FS_REDIRECT_DIR, which is equivalent to
"redirect_dir=on" in the kernel command-line. When turned on, overlayfs
will copy up directory first, before the actual contents.

See also https://github.com/kinvolk/Flatcar/issues/170
2020-11-17 16:25:16 +01:00
Dongsu Park
935f8c0c10 profiles: make SDK include dev-util/dwarves
To build Kernel with `CONFIG_DEBUG_INFO_BTF`, we need to make `pahole`
in dwarves included in the Flatcar SDK.

To do that, we need to make it accept `~amd64` keywords for dwarves
and binutils.
Also enable USE flag `python_single_target_python3_6` for dwarves.
2020-11-17 15:47:23 +01:00
Dongsu Park
92a5bb56e8 sys-kernel: enable CONFIG_POWER_SUPPLY
CONFIG_POWER_SUPPLY enables power supply class used to represent
battery, UPS, AC or DC power supply properties to user-space.
It defines core set of attributes, which should be applicable to
most power supplies out there.

See also https://github.com/kinvolk/Flatcar/issues/215.
2020-11-17 15:02:28 +01:00
Dongsu Park
50fdab4387 sys-kernel: enable CONFIG_BPF_JIT_ALWAYS_ON
CONFIG_BPF_JIT_ALWAYS_ON enables BPF JIT and removes BPF interpreter
to avoid speculative execution of BPF instructions by the interpreter.

See also https://github.com/kinvolk/Flatcar/issues/185.
2020-11-17 15:01:27 +01:00
Thilo Fromm
ac93ed4f5d Merge pull request #683 from kinvolk/t-lo/update-bzip2-tp-1.0.8-r1
bzip2: update to 1.0.8-r1
2020-11-17 14:23:24 +01:00
Thilo Fromm
02cca6360a app-arch/bzip2: update to 1.0.8-r1
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-17 13:58:09 +01:00
Kai Lüke
20712d803b sys-apps/seismograph: Update to latest repo state
This pulls in
https://github.com/kinvolk/seismograph/pull/5
to fix a typo in the usage output.
2020-11-17 20:24:34 +09:00
Thilo Fromm
f620c9fc23 Merge pull request #687 from kinvolk/t-lo/update-to-ntp-4.2.8_p15
update to ntp-4.2.8_p15
2020-11-16 15:46:33 +01:00
Thilo Fromm
f0fda0860a net-misc/ntp/Manifest: remove spurious _p13 hashes 2020-11-16 14:47:44 +01:00
Thilo Fromm
0a9034480a net-misc/ntp-4.2.8_p15: Apply CoreOS changes
- Check out our previous ntp.conf and service units
  - Disable USE=threads
  - Add USE=perl, disabled to skip the scripts subdir
  - Do the /etc -> /usr/share + tmpfiles dance for ntp.conf
  - Drop unused init scripts and pkg_postinst-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-16 13:50:41 +01:00
Thilo Fromm
a2036f5771 net-misc/ntp: ingest gentoo upstream 4.2.8_p15
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-16 13:46:10 +01:00
Dongsu Park
dd15b2ee4d eclass: remove also other optimization flags with -Wl,-O*
We need to filter not only `-Wl,-O1`, but also other flags like
`-Wl,-O2`, `-Wl,-Og`, `-Wl,-Os`, etc. Otherwise, SDK build would fail,
for example, as its default `$LDFLAGS` includes `-Wl,-O2`.

We need to manually strip only the optimization element of
comma-separated flags, e.g. from `-Wl,-O1,-s` to `-Wl,-s`.
To support multiple characters that can follow `-O`, e.g. `-Ofast`,
we should use regexp like `[[:alnum:]]*`.
2020-11-16 13:07:04 +01:00
Thilo Fromm
dc242f0fc9 Merge pull request #684 from kinvolk/t-lo/patch-trousers
trousers: add patch to fix CVE issues
2020-11-16 09:18:16 +01:00
Dongsu Park
1310b3b004 Merge pull request #680 from kinvolk/linux-5.9.8-main
Upgrade Linux Kernel in main from 5.9.1 to 5.9.8
2020-11-13 17:43:42 +01:00
Dongsu Park
b561d71285 .github: fix mantle URL for downloading cork
The repo `github.com/flatcar-linux/mantle` has been moved to
`github.com/kinvolk/mantle`. However, Github Actions still fetch cork
binaries from the original URL, by running `curl` without `-L`. So the
request does not get redirected to the new URL. As a result,
`CORK_VERSION` becomes null.

Fix it by replacing `flatcar-linux` with `kinvolk`, as well as adding
`-L` to the curl command, just in case.
2020-11-13 16:52:22 +01:00
Thilo Fromm
0e753a02f8 app-crypt/trousers: add patch for CVEs
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-11-13 16:44:29 +01:00
Dongsu Park
da29970ce8 Merge pull request #681 from kinvolk/dongsu/open-vm-tools-11.2.0
app-emulation/open-vm-tools: update to 11.2.0
2020-11-13 16:29:19 +01:00
Dongsu Park
758512c7a0 Merge pull request #677 from kinvolk/go-1.15.4-main
Upgrade Go in main from 1.15.3 to 1.15.5
2020-11-13 15:34:19 +01:00
Dongsu Park
5f7126329e eclass: remove -Wl,-O1 from LDFLAGS passed to go_export
Go 1.15.5 fixed a security issue CVE-2020-28366, by rejecting certain
LDFLAGS for CGO. See https://github.com/golang/go/issues/42559.

However, that change breaks builds based on the Flatcar build chain,
because `go_export` sets `$LDFLAGS` to `-Wl,-O1 -Wl,--as-needed`.
As a result, Go build fails like:

```
go build runtime/cgo: invalid flag in go:cgo_ldflag: -Wl,-O1
```

We need to remove the flag `-Wl,-O1` from $LDFLAGS before building the
Go runtime, to fix the failure.
2020-11-13 15:25:57 +01:00
Dongsu Park
0c75022065 Merge pull request #676 from kinvolk/dongsu/samba-sssd
net-fs,sys-auth: Update samba 4.11.13, sssd 2.3.1
2020-11-13 15:10:23 +01:00
Dongsu Park
e27a7f1bfe Merge pull request #675 from kinvolk/dongsu/bind-tools-gssapi
profiles: enable gssapi for bind-tools in SDK
2020-11-13 15:04:35 +01:00