6404 Commits

Author SHA1 Message Date
Krzesimir Nowak
d2e2187bde Merge pull request #612 from flatcar-linux/krnowak/fix-remote-fs
Enable remote-fs
2020-09-26 16:06:06 +02:00
Krzesimir Nowak
498ad0ba08 sys-apps/systemd: Enable more services
These normally would be pulled by systemdctl enable when enabling
systemd-networkd.service, because they are used in Also= options. In
such case, we need to pull them ourselves, so they can be enabled in
/usr, not in /etc.
2020-09-26 14:21:47 +02:00
Marga Manterola
40e58334af Merge pull request #614 from flatcar-linux/sayan/fix-the-srctree-patch
Update srctree path to correctly populate Makefile
2020-09-25 21:08:18 +02:00
Krzesimir Nowak
9512007c74 sys-apps/systemd: Make a comment more clear 2020-09-25 20:39:19 +02:00
Krzesimir Nowak
a65e2ade5b sys-apps/systemd: Drop the handling of ENABLED_UNITS
We are installing systemd from scratch in the image, so there are no
previously enabled units to enable or reenable after
installation. Also, this code would enable the services in /etc, which
we don't want, because /etc is not autoupdated, so the enabled
services could end up still being disabled after the update.
2020-09-25 20:39:19 +02:00
Krzesimir Nowak
393a645c38 sys-apps/systemd: Enable more services from upstream's preset
This more or less mimics systemctl preset-all, but with enabling the
services in /usr, not in /etc, as /etc is not autoupdated.
2020-09-25 20:39:19 +02:00
Krzesimir Nowak
8a64463b04 sys-apps/systemd: Try harder at not enabling services through /etc
At installation time, we usually want to enable services through
/lib. This change will stop making the installation to put symlinks
for getty in /etc, since we already do it in /lib.
2020-09-25 20:39:19 +02:00
Krzesimir Nowak
5e98f2cb98 sys-apps/systemd: Enable remote-fs.target too.
Since v242, this unit is not enabled by default. Currently the
recommended way of initial enablement of the important units is
through `systemctl preset-all` with the preset file from systemd. We
don't want to do it, because this action creates symlinks in /etc, so
we enable those services ourselves by putting the symlinks in /lib.
2020-09-25 20:39:19 +02:00
Marga Manterola
2ac602d5ea Merge pull request #597 from flatcar-linux/containerd-1.4.1-main
Upgrade Containerd in main from 1.3.7 to 1.4.1
2020-09-25 18:40:44 +02:00
Sayan Chowdhury
022a63a9d1 Update srctree path to correctly populate Makefile
Update srctree path to correctly populate the Makefile for sandbox
environments. The patch is to adjusted for 5.x kernels

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-09-25 20:47:28 +05:30
Dongsu Park
76f9afce09 Merge pull request #598 from flatcar-linux/dongsu/cleanup-packages-202009
profiles: adjust to clean up serf, apr-util
2020-09-25 15:14:02 +02:00
Marga Manterola
4ff7200b93 Merge branch 'main' into containerd-1.4.1-main 2020-09-25 14:53:41 +02:00
Marga Manterola
9c27350a99 Merge pull request #602 from flatcar-linux/docker-19.03.13-main
Upgrade Docker in main from 19.03.12 to 19.03.13
2020-09-25 14:48:21 +02:00
Marga Manterola
746961a611 Merge pull request #607 from flatcar-linux/linux-5.8.11-main
Upgrade Linux Kernel in main from 5.8.10 to 5.8.11
2020-09-25 14:48:12 +02:00
Dongsu Park
7363a3935b profiles: remove dev-libs/apr-util
Now that net-libs/apr-util is gone, we should remove it from profiles.
2020-09-25 10:37:22 +02:00
Dongsu Park
850055eab2 profiles: remove net-libs/serf
Now that net-libs/serf is gone, we should remove it from profiles.
2020-09-25 10:37:22 +02:00
Kai Lüke
d589594c83 app-arch/torcx: Point to latest flatcar-master
This pulls in
https://github.com/flatcar-linux/torcx/pull/4
to set a fixed tmpfs size.
2020-09-24 17:01:13 +02:00
Kai Lüke
604a06746b coreos-base/coreos: Build and install oslogin for amd64 only
The build for arm64 currently fails because it tries to build the
oslogin package but the package is marked as amd64-only.
Exclude the oslogin package from arm64 images.
2020-09-24 12:02:57 +02:00
Flatcar Buildbot
58ef9fa84f sys-kernel: Upgrade coreos-kernel 5.8.10 to 5.8.11 2020-09-24 07:23:35 +00:00
Thilo Fromm
589299edd4 app-admin/adcli: update to 0.9.0
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-09-23 16:10:25 +02:00
Marga Manterola
76812e292f Merge pull request #603 from flatcar-linux/marga-kinvolk/change-mirrors
Switch to our new mirrors
2020-09-23 15:24:29 +02:00
Margarita Manterola
7f151f73a1 Switch to our new mirrors 2020-09-23 15:22:09 +02:00
Dongsu Park
4cf90db4bf Merge pull request #600 from flatcar-linux/dongsu/sqlite-3.32.3
dev-db/sqlite: update to 3.32.3 to keep non-full archive
2020-09-23 14:39:56 +02:00
Flatcar Buildbot
c197a0fdab app-emulation: Upgrade Docker 19.03.12 to 19.03.13 2020-09-23 07:44:01 +00:00
Kai Lüke
9c118932e0 Merge pull request #601 from flatcar-linux/kai/bump-init
coreos-base/coreos-init: Point to latest flatcar-master
2020-09-22 14:49:27 +02:00
Marga Manterola
084608643c Merge pull request #592 from flatcar-linux/marga-kinvolk/gce-image
Improve Flatcar behavior on GCE when using oslogin
2020-09-22 14:41:51 +02:00
Kai Lüke
da030f0543 coreos-base/coreos-init: Point to latest flatcar-master
This pulls in
https://github.com/flatcar-linux/init/pull/27
2020-09-22 14:28:30 +02:00
Dongsu Park
aa72d9e918 dev-db/sqlite: add README.md
Try to elaborate reasons why we need this fork of Gentoo ebuilds.
2020-09-22 09:54:25 +02:00
Dongsu Park
902d322ed8 dev-db/sqlite: Bring back builds for non-full archive
Since sqlite 3.32.0, Gentoo ebuild does not deal with non-full archive,
but fetches only full archive. On top of that, the upstream sqlite's
full archive requires `tclsh` to be installed on the host system. Since
Flatcar SDK does not include `dev-lang/tcl`, it is not possible to build
sqlite from the full-archive. It means that we need to either make the
Flatcar SDK include `dev-lang/tcl`, (which takes time) or bring back the
non-full archive mechanism just like ebuilds from sqlite 3.31.x.

So adapt the full-archive patches on top of the non-full archive.
Make the ebuild fetch the non-full archive.
2020-09-21 14:02:34 +02:00
Margarita Manterola
38935a5e75 coreos-base/oem-gce: add Python aliases
GCE recommends images to ship Python in them.  Instead of shipping the
binaries inside our vendor partition, install an alias that will
download the latest official container, for both python2 and python3.
2020-09-18 18:29:17 +02:00
Dongsu Park
2f87fbff5d dev-db/sqlite: sync with Gentoo upstream
Simply sync dev-db/sqlite with Gentoo upstream.

Mainly to update to 3.32.3-r1, to address CVE-2020-11656.
2020-09-18 17:49:43 +02:00
Margarita Manterola
11d56330bd sys-kernel/coreos-modules: remove deprecated config
We were setting `CONFIG_VGACON_SOFT_SCROLLBACK=y`, but this config
option was deleted with 20782abbbdfe922496a28f9cc0c3c0030f7dfb8f, due to
security issues.

Remove the config to let the kernel image build again.
2020-09-18 14:07:19 +02:00
Margarita Manterola
db3bd0f9f8 coreos-base/google-oslogin: Update to 20200910
This change updates to the latest oslogin version provided by Google.
Since our last update, this was split into a different repo and the
directory structure changed significantly.

It also added group support, which needed to be added to the
nsswitch.conf file that we ship.

Flatcar users require docker group permissions, so ensure oslogin gives
that permission by shipping a separate group.conf file that gets
installed when oslogin is enabled.
2020-09-18 13:41:12 +02:00
Thilo Fromm
ecc026209b Merge pull request #596 from flatcar-linux/linux-5.8.10-main
Upgrade Linux Kernel in main from 5.8.9 to 5.8.10
2020-09-18 11:35:25 +02:00
Dongsu Park
c58f7dbfbc Merge pull request #590 from flatcar-linux/dongsu/update-pkgs-20200917
profile: adjust profiles for jq, rsync
2020-09-18 10:29:24 +02:00
Flatcar Buildbot
4498afdfd1 app-emulation: Upgrade Containerd 1.3.7 to 1.4.1 2020-09-18 08:20:50 +00:00
Flatcar Buildbot
2b3e80a5dd sys-kernel: Upgrade coreos-kernel 5.8.9 to 5.8.10 2020-09-18 08:13:46 +00:00
Margarita Manterola
39c2c411c1 app-emulation/qemu: Fix building errors
The qemu update caused several errors:

* We currently don't have Python 3.8 available in the SDK, so adding it in
  the PYTHON_COMPAT field causes a build failure.
* The manifest needed to be updated
* A patch file was missing

This commit fixes these errors and makes the package build.
2020-09-17 16:42:19 +02:00
Dongsu Park
8956a52b6a profiles: disable sse2 from CPU_FLAGS_X86 for rsync
Since rsync 3.2.0, the ebuild sets `--enable-simd` option in case of
amd64. However, the cross toolchain in Flatcar SDK is not able to deal
with the SIMD feature, so configure in rsync fails like:

```
gcc version 8.3.0 (Gentoo Hardened 8.3.0-r1 p1.1)
configure.sh:3774: $? = 0
configure.sh:3763: x86_64-cros-linux-gnu-g++ -V >&5
x86_64-cros-linux-gnu-g++: error: unrecognized command line option '-V'
x86_64-cros-linux-gnu-g++: fatal error: no input files
compilation terminated.
```

Until we could resolve the toolchain issue, we should disable
`cpu_flags_x86_sse2`, to disable simd for rsync.
2020-09-17 15:54:38 +02:00
Dongsu Park
700f7a9024 profiles: update keywords for app-misc/jq
Update version of app-misc/jq to 1.6-r3 as well in accept_keywords,
since app-misc/jq in portage-stable was updated to 1.6-r3.
2020-09-17 15:54:35 +02:00
Sayan Chowdhury
d953761aea app-emulation/qemu: Drop old; qemu-4.2.0-r2
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-09-17 12:07:35 +05:30
Sayan Chowdhury
fc9417e810 app-emulation/qemu: Upgrade qemu to 5.0.0
Upgrade QEMU to 5.0.0 to fix the following security issues:

- [CVE-2020-11102](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11102)
- [CVE-2020-1711](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1711)
- [CVE-2020-7039](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7039)

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-09-17 12:07:32 +05:30
Dongsu Park
2cd4943889 Merge pull request #525 from flatcar-linux/runc-1.0.0_rc92-main
Upgrade Runc in main from 1.0.0_rc90 to 1.0.0_rc92
2020-09-16 15:06:44 +02:00
Kai Lüke
7aa31a28b8 coreos-base/update_engine: Point to latest flatcar-master
This pulls in
https://github.com/flatcar-linux/update_engine/pull/7
2020-09-14 16:06:08 +02:00
Dongsu Park
e6b8d5175a app-emulation/docker-runc: adapt patches for runc 1.0.0-rc91
To fix builds, adapt patches for runc 1.0.0-rc91.
2020-09-14 15:57:17 +02:00
Flatcar Buildbot
63adddc590 app-emulation: Upgrade Runc 1.0.0_rc90 to 1.0.0_rc92 2020-09-14 15:57:17 +02:00
Krzesimir Nowak
441b3d2d7b sys-kernel/coreos-sources: Regenerate the patches against 5.8.9
These used to apply just fine with the patch utility, but git am was
complaining.
2020-09-14 14:58:39 +02:00
Flatcar Buildbot
cb9f047507 sys-kernel: Upgrade coreos-kernel 5.8.8 to 5.8.9 2020-09-13 07:22:25 +00:00
Kai Lüke
6212d698d2 coreos-base/coreos-init: Update to include Calico tunl0 networkd units
This pulls in
https://github.com/flatcar-linux/init/pull/26
2020-09-11 15:20:56 +02:00
Vincent Batts
cc40759565 Merge pull request #553 from flatcar-linux/vbatts/lockdown
sys-kernel: make lockdown available
2020-09-11 07:01:46 -04:00