Jeremi Piotrowski
d29ae37389
Merge pull request #1576 from flatcar-linux/runc-1.1.0-main
...
Upgrade Runc in main from 1.0.3 to 1.1.0
2022-01-20 11:45:59 +01:00
Krzesimir Nowak
7ae17b938f
Merge pull request #1525 from flatcar-linux/krnowak/no-eapi-update
...
Get rid of EAPI 0
2022-01-20 08:17:35 +01:00
Flatcar Buildbot
cf042a7e72
app-emulation: Upgrade Runc 1.0.3 to 1.1.0
2022-01-19 11:14:29 +00:00
Mathieu Tortuyaux
746b47fc24
Merge pull request #1572 from flatcar-linux/tormath1/openssl
...
dev-libs/openssl: sync with the upstream
2022-01-18 18:05:49 +01:00
Mathieu Tortuyaux
9bb21c4ce1
profiles/keywords: remove openssl
...
openssl is marked as stable directly into the Flatcar modifications
commit.
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-18 17:03:58 +01:00
Mathieu Tortuyaux
6b16187adc
profiles/coreos: unmask openssl-3
...
upstream has masked openssl-3 for tracking build failures. Since we are
not impacted by this failures, we can safely unmask openssl-3.
See: https://github.com/flatcar-linux/Flatcar/issues/418 for Flatcar's
dependencies.
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-18 16:59:40 +01:00
Mathieu Tortuyaux
b172cf5e6a
changelog: add entries
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-18 16:59:40 +01:00
Mathieu Tortuyaux
1a76d69d8d
dev-libs/openssl: Apply Flatcar modifications
...
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- remove unecessary files
- mark openssl as stable for arm64 and amd64
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-18 16:59:40 +01:00
Krzesimir Nowak
b1018c0c3d
Merge pull request #1573 from flatcar-linux/krnowak/eapi-update
...
Changes related to app-arch updates
2022-01-18 16:02:16 +01:00
Flatcar Buildbot
5a4e61fcd0
sys-kernel: Upgrade Kernel 5.15.14 to 5.15.15
2022-01-17 19:15:49 +01:00
Krzesimir Nowak
d4af97831d
profiles: Drop keywords for app-arch/pigz
...
The updated version is stable for both amd64 and arm64.
2022-01-17 18:41:32 +01:00
Krzesimir Nowak
65d14d65d4
profiles: Drop keywords for app-arch/pbzip2
...
The updated version is stable for both amd64 and arm64.
2022-01-17 18:40:12 +01:00
Mathieu Tortuyaux
42aec3a36b
dev-libs/openssl: sync with the upstream
...
Commit-Ref: b258e2593e406538c8ca5029d027f315edc44843
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-17 17:00:31 +01:00
Krzesimir Nowak
275990beb0
app-arch/bzip2: Move back to portage-stable
...
We used to keep the package in overlay, because we dropped one Gentoo
patch to avoid some failures when applying updates when updating
payloads. This issue was fixed in bzip2 in a smarter way - we know
this, because we used 1.0.8 version with the fix and we didn't have
any problems so far. No point in keeping the package in overlay then.
2022-01-14 20:09:41 +01:00
Krzesimir Nowak
da18e43918
sys-libs/berkdb: Drop unused package
2022-01-14 15:08:46 +01:00
Krzesimir Nowak
9fb7e90be0
profiles: Drop virtual/cdrtools keywords
...
The virtual/cdrtools package is being dropped in portage-stable.
2022-01-14 15:08:46 +01:00
Krzesimir Nowak
fd3e1e3f27
coreos-base/hard-host-depends: Replace virtual/cdrtools with app-cdr/cdrtools
...
The virtual/cdrtools package is being dropped in portage-stable.
2022-01-14 15:08:46 +01:00
Krzesimir Nowak
d98a0ac0ca
Merge pull request #1548 from flatcar-linux/krnowak/update-profiles
...
Drop obsolete stuff after updating profiles
2022-01-14 14:38:23 +01:00
Jeremi Piotrowski
bdb48fd89a
Merge pull request #1564 from flatcar-linux/jepio/fix-mirror-calico
...
.github: find latest calico tag when mirroring
2022-01-14 11:05:47 +01:00
Mathieu Tortuyaux
23df672492
Merge pull request #1565 from flatcar-linux/tormath1/selinux
...
sys-apps/policycoreutils: fix policy root path
2022-01-14 10:18:24 +01:00
Mathieu Tortuyaux
0659f6295f
Merge pull request #1563 from flatcar-linux/tormath1/mantle
...
coreos-devel/mantle: bump with 0.18.0
2022-01-14 10:17:22 +01:00
Mathieu Tortuyaux
832bdb51fc
sys-apps/policycoreutils: fix policy root path
...
root needs to be specified with -p instead of -S.
The policy dir (-S) defaults to (-p) + /var/lib/selinux/ + (-s).
Picked from upstream: 54a8322d18
Closes: https://github.com/flatcar-linux/Flatcar/issues/596
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-14 09:57:39 +01:00
Jeremi Piotrowski
886b11bf1d
.github: find latest calico tag from tigera operator
...
The mirror-calico workflow has been failing because it currently determines
version=v3.22.0-0.dev-typha, which is not the tag used by the individual
container images. Rewrite the version logic to determine the version based on
what is in the tigera operator manifest. This is the same manifest that we use
to deploy calico in mantle.
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-01-13 14:44:04 +01:00
Krzesimir Nowak
1cca5f4eeb
Merge pull request #1556 from flatcar-linux/krnowak/iputils-update
...
Changes for net-misc/iputils update
2022-01-13 11:46:47 +01:00
Krzesimir Nowak
a2ff448eb2
Merge pull request #1560 from flatcar-linux/linux-5.15.14-main
...
Upgrade Linux Kernel in main from 5.15.13 to 5.15.14
2022-01-13 11:40:44 +01:00
Krzesimir Nowak
2d5ef69eed
sec-policy/selinux-base-policy: Add a patch for ping
...
This is to allow users to run ping -I with some IP address or network
interface.
Patch based on:
https://github.com/fedora-selinux/selinux-policy/pull/403
2022-01-12 18:09:50 +01:00
Krzesimir Nowak
6f3975b9b1
sec-policy/selinux-base: Add patch for ping
...
The patch adds stuff that another patch in
sec-policy/selinux-base-policy will use to allow user to call "ping -I
<IPADDRESS>".
Patch based on:
https://github.com/fedora-selinux/selinux-policy/pull/403
2022-01-12 18:08:58 +01:00
Mathieu Tortuyaux
96bac22bc0
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-12 17:14:33 +01:00
Mathieu Tortuyaux
e155b78955
coreos-devel/mantle: sync with upstream release
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-01-12 17:11:30 +01:00
Kai Lueke
59ad0cd262
changelog/security: use right format for release notes
2022-01-12 17:00:26 +01:00
Kai Lueke
a7da13d660
changelog/README.md: specify current security fix section format
...
The entries added in changelog/security/ do not follow our existing
security section in the release notes:
https://www.flatcar.org/releases/#release-3033.2.0
Document the structure and an example to use the right format that we
need for release note generation.
2022-01-12 16:53:59 +01:00
Kai Lueke
fe514f5b25
sys-kernel/bootengine: Fixed dracut emergency log printing script error
...
This pulls in
https://github.com/flatcar-linux/bootengine/pull/33
to fix the cat command invocation.
2022-01-12 16:07:58 +01:00
Krzesimir Nowak
42451654bf
profiles: Update use flags for net-misc/iputils
...
The net-misc/iputils package never provided the traceroute binary,
only traceroute6, which is probably why the use flag got renamed to
traceroute6 too.
2022-01-12 15:45:26 +01:00
Flatcar Buildbot
3d01e98cdb
sys-kernel: Upgrade Kernel 5.15.13 to 5.15.14
2022-01-12 07:24:30 +00:00
Krzesimir Nowak
db5f1c7e72
*: Drop mentions of elibc_FreeBSD
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
09465e5a67
sys-apps/systemd: Sync hwdb bits with Gentoo
...
Gentoo deprecated sys-apps/hwids and is going to drop it soon.
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
1a35d9b996
profiles: Drop sys-apps/hwids from accept_keywords
...
We are replacing this package with sys-apps/hwdata. Also, no point in
using unstable versions - they are stabilized quickly enough.
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
752f695663
sys-apps/portage: Drop support for uclibc
...
It was removed from Gentoo and with updated profiles, the build
started to fail with:
USE flag 'elibc_uclibc' referenced in conditional 'elibc_uclibc?' is
not in IUSE
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
158eb34f72
profiles: Keep using crypt functionality from glibc
2022-01-11 14:15:15 +01:00
Krzesimir Nowak
caf56d5b8b
Merge pull request #1519 from flatcar-linux/krnowak/eclass-update
...
eclass: Some updates for newer EAPI versions
2022-01-11 13:25:42 +01:00
Krzesimir Nowak
d3247a54a2
Merge pull request #1554 from flatcar-linux/cacerts-3.74-main
...
Upgrade ca-certificates in main from 3.73 to 3.74
2022-01-10 19:19:59 +01:00
Flatcar Buildbot
24276fa7d2
dev-lang: Upgrade Go 1.17.5 to 1.17.6
2022-01-10 07:32:58 +00:00
Flatcar Buildbot
49d87d54af
app-misc: Upgrade ca-certificates 3.73 to 3.74
2022-01-10 07:25:19 +00:00
Krzesimir Nowak
83fe5bffd4
sys-boot/grub: Try to force using a newer gettext infra
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
1a1efdfe3b
sys-boot/grub: Fix build with new eclasses
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
b7e15db73c
profiles: Drop sys-block/parted from accept_keywords
...
The updated package is declared as stable on arm64.
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
3e92c82483
eclass/git: Drop unused eclass
2022-01-07 16:11:46 +01:00
Krzesimir Nowak
78e097ecaf
eclass: Update to support newer EAPI versions
2022-01-07 16:11:46 +01:00
Jeremi Piotrowski
893b59234c
changelog/security: add entry for CVE-2021-43816
...
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2022-01-07 15:42:06 +01:00
Flatcar Buildbot
7cb3795b44
app-emulation: Upgrade Containerd 1.5.8 to 1.5.9
2022-01-07 08:24:14 +00:00