Commit Graph

8439 Commits

Author SHA1 Message Date
Flatcar Buildbot
e44aacf2d5 sys-kernel: Upgrade Kernel 5.15.59 to 5.15.60 2022-08-16 21:16:34 +02:00
Jeremi Piotrowski
39a5eddec4 Merge pull request #2027 from flatcar-linux/t-lo/slsa-record-provenance-main
Record SLSA provenance data by extending profile bashrc with phase hooks.
2022-08-15 13:38:21 +02:00
Flatcar Buildbot
f87b7996f0 app-emulation: Upgrade Containerd 1.6.7 to 1.6.8 2022-08-12 13:04:27 +02:00
Sayan Chowdhury
046403e71d app-editors/vim,vim-core: Add accept_keywords for vim & vim-core
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-08-12 14:53:32 +05:30
Kai Lueke
a3e20e8bc5 coreos-base/coreos-init: Add new image signing key to flatcar-install
This pulls in
https://github.com/flatcar-linux/init/pull/79
to updated the embedded pub key in flatcar-install to include the new
subkey that is used for signing new releases.
2022-08-11 15:27:24 +02:00
Dongsu Park
e5dc9fac33 profiles: enable dev-vcs/git 2.37.1
To be able to address CVE-2022-29187, we need to accept keywords
and unmask dev-vcs/git 2.37.1.
2022-08-09 16:25:19 +02:00
Dongsu Park
9d1c45fc11 changelog: add changelog for Go 1.18.5 2022-08-08 14:39:51 +02:00
Flatcar Buildbot
110a8c0b0c dev-lang: Upgrade Go 1.18.4 to 1.18.5 2022-08-08 07:31:17 +00:00
Flatcar Buildbot
cac72c0f5a dev-lang: Upgrade Go 1.17.12 to 1.17.13 2022-08-08 07:31:17 +00:00
Krzesimir Nowak
1315e7e8bd Merge pull request #2076 from flatcar-linux/linux-5.15.59-main
Upgrade Linux Kernel in main from 5.15.58 to 5.15.59
2022-08-05 19:09:26 +02:00
Dongsu Park
3e41b06e26 Merge pull request #2079 from flatcar-linux/containerd-1.6.7-main
Upgrade Containerd in main from 1.6.6 to 1.6.7
2022-08-05 14:40:08 +02:00
Flatcar Buildbot
f8020786b7 app-emulation: Upgrade Containerd 1.6.6 to 1.6.7 2022-08-05 08:25:17 +00:00
Dongsu Park
e739f9bfa4 changelog: add changelog for libtirpc 1.3.2-r1 2022-08-04 18:04:07 +02:00
Dongsu Park
a729ef7c9a net-libs/libtirpc: Apply Flatcar modifications
Update keywords to stable amd64 and arm64.

Note, fix-dos patch is not necessary any more, because 1.3.2-r1 from
upstream Gentoo already has the patch.

Based on commit f3150e4b458e8d8979a37a91e44a7e1d2334d2aa.
2022-08-04 18:04:07 +02:00
Dongsu Park
382a18c125 net-libs/libtirpc: update to 1.3.2-r1
Update net-libs/libtirpc to 1.3.2-r1 mainly to address CVE-2021-46828.
2022-08-04 18:04:07 +02:00
Jeremi Piotrowski
1da35c897e Merge pull request #2070 from flatcar-linux/jepio/coreos-cloudinit-update
coreos-base/coreos-cloudinit: bump commit for imdsv2 and go.mod support
2022-08-04 15:43:40 +02:00
Jeremi Piotrowski
cd37e46bb8 changelog: add entry for coreos-cloudinit update 2022-08-04 14:47:13 +02:00
Jeremi Piotrowski
f2c0730ab7 coreos-base/coreos-cloudinit: pull in AWS IMDSv2 and go-module support
This pulls in these PRs:
- https://github.com/flatcar-linux/coreos-cloudinit/pull/13 (imdsv2)
- https://github.com/flatcar-linux/coreos-cloudinit/pull/14 (go.mod)

Since go.mod is now present, rework the ebuild to remove unused bits and
enable go module support.
2022-08-04 10:30:09 +02:00
Flatcar Buildbot
43279010b9 sys-kernel: Upgrade Kernel 5.15.58 to 5.15.59 2022-08-04 07:23:00 +00:00
Mathieu Tortuyaux
988523a4b2 changelog: add entries
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-03 18:35:29 +02:00
Mathieu Tortuyaux
0924a6d486 coreos-base/coreos-init: bump commit ID
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-03 18:27:13 +02:00
Jeremi Piotrowski
4c6debc989 sys-kernel/coreos-sources: backport 2 more patches
and refresh other patches. The changes in PCI irq masking on hyperv resulted in
the previous set of patches not building on arm64. Resolve this by taking
another 2 patches. Patch z0006 makes the non-compiling code x86 specific
(fixing the build failure on arm64) and patch z0007 fixes a subsequent "not
used function" error.
2022-08-03 12:15:50 +02:00
Krzesimir Nowak
45268f7e02 sys-kernel/coreos-sources: Regenerate patches
The changes made to drivers/pci/controller/pci-hyperv.c by upstream
resulted in the first hyperv patch failing to apply.
2022-08-02 17:51:47 +02:00
Jeremi Piotrowski
10cde6a11a profiles/coreos/base: slsa: format report before compression 2022-08-02 17:04:23 +02:00
Krzesimir Nowak
9fc609c834 Merge pull request #2068 from flatcar-linux/linux-5.15.58-main
Upgrade Linux Kernel in main from 5.15.56 to 5.15.58
2022-08-02 09:55:03 +02:00
Mathieu Tortuyaux
f6628428ea changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-01 10:40:05 +02:00
Mathieu Tortuyaux
85fe7d9c1d coreos-base/init: keep static network configuration
this pulls: https://github.com/flatcar-linux/init/pull/77

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-08-01 10:40:05 +02:00
Flatcar Buildbot
4d6fefdcee sys-kernel: Upgrade Kernel 5.15.56 to 5.15.58 2022-07-30 07:21:57 +00:00
Mathieu Tortuyaux
78f76d45fd coreos-base/hard-host-depends: add syft
Otherwise it's not pulled in the SDK

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-07-28 12:36:20 +02:00
Mathieu Tortuyaux
372a75bdf9 Merge pull request #2060 from flatcar-linux/tormath1/ignition
sys-apps/ignition: add networkd translate fix
2022-07-28 10:05:02 +02:00
Mathieu Tortuyaux
8f0354c2f3 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-07-28 10:03:57 +02:00
Mathieu Tortuyaux
669a944e8d sys-apps/ignition: add networkd translate fix
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-07-28 10:03:57 +02:00
Jeremi Piotrowski
ef48877b47 Merge pull request #2030 from flatcar-linux/jepio/spdx-sbom
app-containers/syft: add v0.51.0 to sdk
2022-07-27 13:51:24 +02:00
jenkins
d6077e9286 profiles/coreos/base: slsa: use .git/HEAD file to fetch scripts hash
ORIG_HEAD is the previous HEAD, so it is not what we are after. HEAD
only contains the hash if we are in a detached head situation, otherwise
it will contain a ref and we need to resolve it. `git rev-parse HEAD`
should work as well but hits an issue with git's new `safe.directory`
setting, I have not found a way to set this parameter for a signle call.

For toolchain packages are built with catalyst, and the HEAD value needs
to pre-resolved because we do not have access to the whole git
repository. So build_toolchains will need to inject the correct HEAD
file contents.
2022-07-27 13:02:22 +02:00
jenkins
113de2ac75 profiles/coreos/base: slsa: compute ebuild file checksum for materials entry 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
fbdbd1ac19 profiles/coreos/base: slsa: revise material uri to match SPDXDownloadLocation spec
If the uri points to a path within the repo then the format is
git+https://repo@ref#path. ORIG_HEAD is actually the previous HEAD, so read
use that to extract the correct ref.
2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
b1ce3800a5 profiles/coreos/base: slsa: sort file checksums by name 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
1a0f396be4 profile/coreos/base: slsa: switch to bz2 compression for consistency
...and remove redundant mkdir. Mkdir is already called with the same argument a
couple of lines lower.
2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
d211a2b168 profile/core/base: slsa: use nproc instead of parsing /proc/cpuinfo 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
91b64a5587 profile/coreos/base: slsa: remove name collision between variable and function
__slsa_provenance_report is both a variable and a function, which is confusing.
Rename the variable.
2022-07-27 13:02:22 +02:00
jenkins
39f1d45dff profiles/coreos/base: slsa: return when disabled and use die() 2022-07-27 13:02:22 +02:00
jenkins
7bd2f19fac profiles/coreos/base: slsa: use portageq to find repository path
This makes the lookup work within the catalyst chroot, as well as in the
SDK.
2022-07-27 13:02:22 +02:00
Thilo Fromm
d86d5ebe3f slsa-provenance: make generation optional 2022-07-27 13:02:22 +02:00
Thilo Fromm
be46ed7bb0 profiles/coreos/base/profile.bashrc: SLSA provenance reports
This change adds initial support for SLSA provenance report generation.
Reports are generated in package build post-install hooks after
compilation.

See https://slsa.dev/ for SLSA and https://slsa.dev/provenance/v0.2 for
the provenance report syntax.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2022-07-27 13:02:22 +02:00
Dongsu Park
0d2a3f29fb Merge pull request #2059 from flatcar-linux/rust-1.62.1-main
Upgrade dev-lang/rust and virtual/rust in main from 1.62.0 to 1.62.1
2022-07-26 16:58:05 +02:00
Jeremi Piotrowski
c2c7f0d504 Merge pull request #2057 from flatcar-linux/jepio/systemd-resolve.conf
sys-apps/systemd: fix tmpfile entry for resolv.conf link
2022-07-26 11:07:09 +02:00
Jeremi Piotrowski
36ecad566a changelog: add entry for resolv.conf bugfix 2022-07-26 11:06:27 +02:00
Jeremi Piotrowski
d9972d4ad1 sys-apps/systemd: fix tmpfile entry for resolv.conf link
Our ebuild modifies the systemd owned tmpfiles.d entry that creates the
/etc/resolv.conf symlink to point to resolv.conf instead of stub-resolv.conf.
The file that contains that entry changed from etc.conf.in to
systemd-resolve.conf, so update the ebuild to touch that file.
2022-07-26 10:03:13 +02:00
Flatcar Buildbot
5acb31cbab dev-lang: Upgrade dev-lang/rust 1.62.0 to 1.62.1 2022-07-26 07:37:28 +00:00
Flatcar Buildbot
6058ad50fc app-misc: Upgrade ca-certificates 3.80 to 3.81 2022-07-25 07:24:01 +00:00
Dongsu Park
cd80387051 Merge pull request #2040 from flatcar-linux/dongsu/add-Go-CVE-2022-32148
changelog: add missing CVE for Go 1.18.4, 1.17.12
2022-07-22 15:04:15 +02:00
Flatcar Buildbot
2568802c6e sys-kernel: Upgrade Kernel 5.15.55 to 5.15.56 2022-07-22 07:24:26 +00:00
Dongsu Park
1e1c30264e changelog: add missing CVE for Go 1.18.4, 1.17.12
Add missing CVE-2022-32148 for Go 1.18.4, 1.17.12.
2022-07-21 13:39:12 +02:00
Mathieu Tortuyaux
ace84f7d4f Merge pull request #2038 from flatcar-linux/tormath1/nmap
profiles: enable symlink for nmap
2022-07-19 14:11:09 +02:00
Mathieu Tortuyaux
f334da4fb5 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-07-19 08:45:57 +02:00
Mathieu Tortuyaux
606ba61447 profiles: enable symlink for nmap
For compatiblity, it's good to have `nc` in the PATH too.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-07-18 11:23:09 +02:00
jenkins
a938fb9b5c app-containers/syft: apply downstream changes
* pass additional ldflags so that `syft version` prints the package
  version.
* keyword stable for amd64 and arm64 (to reduce differences between the
  two).
2022-07-18 07:49:27 +00:00
jenkins
e995d9a4b1 app-containers/syft: Import from Gentoo
Upstream commit c691680319ac2f00f203533c3dca0b21ecf77f80
2022-07-18 07:49:22 +00:00
Flatcar Buildbot
d68ffc61cc sys-kernel: Upgrade Kernel 5.15.54 to 5.15.55 2022-07-16 07:22:06 +00:00
Krzesimir Nowak
6dea2f8ae7 Merge pull request #2024 from flatcar-linux/linux-5.15.54-main
Upgrade Linux Kernel in main from 5.15.52 to 5.15.54
2022-07-15 16:03:41 +02:00
Sayan Chowdhury
2959870601 Merge pull request #2018 from flatcar-linux/sayan/update-sudo-1.9.10-r1
app-admin/sudo: Sync with Gentoo upstream; updates to 1.9.10-r1
2022-07-15 16:11:46 +05:30
Sayan Chowdhury
c605e33d23 app-admin/sudo: Add the changelog for sudo-1.9.10-r1 release
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-07-15 15:33:39 +05:30
Sayan Chowdhury
c0afb3e982 app-admin/sudo: Apply Flatcar patches
- Remove Perl Runtime Dependency
- Remove OpenLDAP schema files for sudo
- Remove sudo.conf file as it is shipped via baselayout

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-07-15 15:33:39 +05:30
Sayan Chowdhury
46ef576243 Merge pull request #2029 from flatcar-linux/sayan/update-curl-7.84.0
profiles: remove outdated arm64 accept_keywords for curl
2022-07-15 15:28:28 +05:30
Dongsu Park
2ad4c0c632 Merge pull request #2028 from flatcar-linux/firmware-20220708-main
Upgrade Linux Firmware in main from 20220610 to 20220708
2022-07-14 13:42:34 +02:00
Kai Lüke
9d8e918968 Merge pull request #2026 from flatcar-linux/kai/kargs-nonexisting-grubcfg
sys-kernel/bootengine: Fix ignition kargs support by creating grub.cfg
2022-07-14 10:30:48 +02:00
Kai Lueke
b9ee2d9c4f sys-kernel/bootengine: Fix ignition kargs support by creating grub.cfg
This pulls in
https://github.com/flatcar-linux/bootengine/pull/47
which creates the grub.cfg file if it does not exist when the Ignition
kargs directive is used, preventing an error when it tried to read the
current settings from it.
2022-07-14 10:30:25 +02:00
Flatcar Buildbot
74073529a9 sys-kernel: Upgrade Linux Firmware 20220610 to 20220708 2022-07-14 07:11:33 +00:00
Dongsu Park
62a5dcf69b Merge pull request #2025 from flatcar-linux/go-1.17.12-and-1.18.4-main
Upgrade Go from 1.17.11 and 1.18.3 to 1.17.12 and 1.18.4
2022-07-13 16:37:04 +02:00
Dongsu Park
e9cf245cff changelog: add changelog for Go 1.18.4 2022-07-13 11:39:49 +02:00
Sayan Chowdhury
520b9975d9 Merge pull request #2017 from flatcar-linux/sayan/update-cifs-utils-6.15
net-fs/cifs-utils: Add the package.accept_keywords for cifs-utils
2022-07-13 14:30:59 +05:30
Flatcar Buildbot
224d98c21d dev-lang: Upgrade Go 1.18.3 to 1.18.4 2022-07-13 08:47:35 +00:00
Flatcar Buildbot
acf8ee4e2a dev-lang: Upgrade Go 1.17.11 to 1.17.12 2022-07-13 08:47:35 +00:00
Jeremi Piotrowski
759df3dee2 Merge pull request #1840 from flatcar-linux/jepio/nvidia-service-improvement
nvidia driver build improvements
2022-07-13 10:40:50 +02:00
Flatcar Buildbot
f19e737de9 sys-kernel: Upgrade Kernel 5.15.52 to 5.15.54 2022-07-13 07:22:41 +00:00
Sayan Chowdhury
18299dc636 profiles: remove outdated arm64 accept_keywords for curl
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-07-12 20:34:02 +05:30
Sayan Chowdhury
c0204785ec app-admin/sudo: Sync with Gentoo upstream; updates to 1.9.10-r1
gentoo sync ref: 6e69c00ebc

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-07-12 19:38:59 +05:30
Dongsu Park
a023d537fe changelog: add changelog for gnupg 2.2.35 2022-07-12 11:20:56 +02:00
Dongsu Park
5725e318b5 app-crypt/gnupg: add patches for accepting without UIDs
When the GnuPG keyserver is set to `keys.openpgp.org`, `gpg --recv-keys`
occasionally fails with the following error:

```
gpg: key E52F0DB391453C45: no user ID
```

We need to make GnuPG accept keys even without UIDs.
Original patches come from
f292beac11/debian/patches/import-merge-without-userid .
See also https://dev.gnupg.org/T4393 .

Based on commit ff9200d8d3fce1feaa1eaa751a0dd2a50acbaae0 .
2022-07-12 11:20:53 +02:00
Sayan Chowdhury
926e4501d4 net-fs/cifs-utils: Add the package.accept_keywords for cifs-utils
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-07-12 14:14:44 +05:30
Dongsu Park
eb108906b6 app-crypt/gnupg: update to 2.2.35-r1
Update to gnupg 2.2.35-r1, mainly to address CVE-2022-34903.

Gentoo commit: 2b8f76c36b848ee02b57c00b29fa293d0c0dfc02
2022-07-11 13:22:20 +02:00
Krzesimir Nowak
f50d2cbb4e Merge pull request #2007 from flatcar-linux/linux-5.15.52-main
Upgrade Linux Kernel in main from 5.15.51 to 5.15.52
2022-07-06 15:19:28 +02:00
Flatcar Buildbot
40beab1df7 dev-lang: Upgrade dev-lang/rust 1.61.0 to 1.62.0 2022-07-05 07:39:35 +00:00
Flatcar Buildbot
5e445140e7 sys-kernel: Upgrade Kernel 5.15.51 to 5.15.52 2022-07-03 07:21:56 +00:00
Dongsu Park
edb6d2e7d0 Merge pull request #2001 from flatcar-linux/dongsu/glibc-2.34-p1
preparation for glibc 2.34
2022-07-01 15:05:25 +02:00
Dongsu Park
0d64fd726d changelog: add changelog for gdb 11.2 2022-07-01 15:02:31 +02:00
Dongsu Park
47e5c0d929 sys-devel/gdb: fix cross build issues with configuring gmp libs
As gdb 11 or newer requires gmp libs as dependency, a cross build of
gdb 11.2 started to fail when its configure scripts try to detect if
gmp exists.  The failure occurs mainly because the build still passes
'-L/usr/lib64` to LDFLAGS. Let's say, for example, host toolchains
outside of sysroot have amd64 libs, while the target inside of
sysroot should have arm64 libs. However, configure scripts of gdb 11.2
still try to find its libs outside of sysroot, /usr/lib64, although it
should find its libs inside of sysroot, e.g. /build/arm64/usr/lib64.

To fix the cross build issues, pass --with-sysroot as well as --libdir,
correctly with ${ESYSROOT}.

As a side note, for some reason, upstream gdb configure scripts are not
able to correctly make use of its gmp-specific options like --with-gmp
or --with-gmp-lib. Passing those options does not bring anything.
Also configure must have both --with-sysroot and --libdir, to make the
build work.
2022-06-30 17:46:19 +02:00
Dongsu Park
416e41b2c3 sys-devel/gdb: sync with Gentoo for gdb 11.2
Update sys-devel/gdb to 11.2, as gdb 9 is not compatible with glibc 2.34
any more.
2022-06-30 17:46:19 +02:00
Dongsu Park
c4316b1bbc profiles: accept keywords for app-crypt/adcli 0.9.1-r2
To install app-crypt/adcli 0.9.1-r2, accept keywords for ~amd64 and
~arm64.
2022-06-30 17:46:19 +02:00
Dongsu Park
014ef063bf app-admin/adcli: move adcli to portage-stable
To fix build issues that happen in adcli 0.9 with glibc 2.34, we should
sync adcli with upstream Gentoo, where the build issue is already fixed.
As Gentoo has the ebuild under the category `app-crypt`, we simply move
from adcli from coreos-overlay to portage-stable, move adcli to the
app-crypt category, and update the version to 0.9.1-r2.
2022-06-30 17:46:19 +02:00
Dongsu Park
994ae65e71 coreos-base/coreos: rename app-admin/adcli to app-crypt/adcli
Since app-admin/adcli was moved to app-crypt/adcli, being consistent
with upstream Gentoo, update it also in coreos-base/coreos ebuild.
2022-06-30 17:46:19 +02:00
Kai Lueke
86dec4e1df coreos-base/coreos-init: Remove outdated LTS motd information
This pulls in
https://github.com/flatcar-linux/init/pull/75
to update the LTS info that is printed on login.
2022-06-30 12:05:48 +02:00
Krzesimir Nowak
375f634187 changelog: Fix link 2022-06-29 17:23:46 +02:00
Flatcar Buildbot
ed5a5c6b2d sys-kernel: Upgrade Kernel 5.15.50 to 5.15.51 2022-06-29 07:23:13 +00:00
Krzesimir Nowak
7550545520 Merge pull request #1990 from flatcar-linux/cacerts-3.80-main
Upgrade ca-certificates in main from 3.79 to 3.80
2022-06-28 08:27:56 +02:00
Krzesimir Nowak
911586b472 changelog: Fix link 2022-06-27 17:27:33 +02:00
Flatcar Buildbot
fd64754ec2 app-misc: Upgrade ca-certificates 3.79 to 3.80 2022-06-27 07:22:39 +00:00
Flatcar Buildbot
e639b65a2c sys-kernel: Upgrade Kernel 5.15.48 to 5.15.50 2022-06-26 07:21:29 +00:00
Sayan Chowdhury
72e2e368c4 Merge pull request #1972 from flatcar-linux/linux-5.15.48-main
Upgrade Linux Kernel in main from 5.15.47 to 5.15.48
2022-06-21 02:45:55 +05:30
Sayan Chowdhury
c72393a02b changelog: Add updates, security for the intel-microcode
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-06-17 16:16:50 +05:30
Sayan Chowdhury
e2159d417e sys-firmware/intel-microcode: Apply Flatcar patches
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-06-17 16:08:04 +05:30
Sayan Chowdhury
26ef0721a8 sys-firmware/intel-microcode: Sync with Gentoo upstream; updates to 20220510
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2022-06-17 16:08:04 +05:30
Flatcar Buildbot
230cf32499 sys-kernel: Upgrade Kernel 5.15.47 to 5.15.48 2022-06-17 07:22:23 +00:00
Mathieu Tortuyaux
9d2c123978 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-16 17:51:43 +02:00
Mathieu Tortuyaux
506403adf4 app-emulation/containerd: remove overlay module loading
This is now handled in `flatcar-linux/init` repo in the `modules-load.d`
config directory.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-16 17:51:42 +02:00
Mathieu Tortuyaux
250760a51b app-emulation/containerd: enable containerd
`docker.service` has a dependency to `containerd.service`:
```
$ systemctl list-dependencies docker.service
docker.service
  containerd.service
  ...
```

If `docker.service` is not started (explicitly or via socket activation)
`containerd.service` won't start.

To ensure a seamless transition to kubernetes-1.24 let's enable by
default `containerd.service`.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-16 17:51:42 +02:00
Mathieu Tortuyaux
6ff3675810 coreos-base/coreos-init: bump commit ID
this pulls kubernetes module configuration.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-16 17:51:41 +02:00
Flatcar Buildbot
6d1e7a498c sys-kernel: Upgrade Linux Firmware 20220509 to 20220610 2022-06-16 07:12:04 +00:00
Flatcar Buildbot
06ce732702 sys-kernel: Upgrade Kernel 5.15.44 to 5.15.47 2022-06-15 07:23:33 +00:00
Mathieu Tortuyaux
23fc9679b2 coreos-base/coreos-init: pull "delete-config" service
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-14 13:54:31 +02:00
Mathieu Tortuyaux
66733328c6 base/coreos: add ignition as a Flatcar dependency
We add `sys-apps/ignition` as a `coreos-base/coreos` dependency to get
`/usr/libexec/ignition-rmcfg` available on the _real_ root.
Now we want `/usr/bin/ignition` to be in the chroot until it's being copied
to the initramfs but we don't want it on the actual root.

With `PKG_INSTALL_MASK`, we'll prevent `/usr/bin/ignition` to be added
to the image in the `./build_image` - at this time, initramfs is already
created and `sys-apps/ignition` is a binary package.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-14 13:54:31 +02:00
Mathieu Tortuyaux
134c67aea8 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-14 13:54:31 +02:00
Mathieu Tortuyaux
607f9b434f sys-apps/ignition: add "ignition-rmcfg" binary
this helper removes config from VMWare and Virtualbox and should not be
directly used by the user.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-14 13:39:53 +02:00
Mathieu Tortuyaux
c1c6fa7df5 sys-apps/ignition: bump ebuild release
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-14 13:39:53 +02:00
Kai Lüke
3d642b9cb7 Merge pull request #1956 from jbguerraz/init-bump
Init bump
2022-06-14 12:52:46 +02:00
Jean-Baptiste Guerraz
b228dbcc31 flatcar-install: added option to create uefi boot entry 2022-06-14 10:44:23 +00:00
Jean-Baptiste Guerraz
53b5aad92b Add sys-boot/efibootmgr 2022-06-13 23:55:21 +00:00
Thilo Fromm
8202ed8bc9 Merge pull request #1954 from flatcar-linux/t-lo/arm64-cifs-realmd-sssd-adcli-go-tspi
Add ARM64 support for cifs-utils, realmd, sssd, adcli, go-tspi
2022-06-13 14:22:27 +02:00
Thilo Fromm
8d01613b1f cifs-utils, realmd, sssd, adcli, go-tspi: add ARM64
This change adds multiple tools to ARM64 which were formerly only
present in the X86-64 image.

Added for ARM64:

        net-fs/cifs-utils
        sys-auth/realmd
        app-admin/adcli
        app-crypt/go-tspi

This leaves only the xenserver-pv-version and xenstore packages
exclusively on X86-64.

The change un-masks keywords amd64 and arm64 for sys-libs/liburing-2.1-r2
and keyword arm64 for dev-libs/ding-libs-0.6.1-r1, overwriting Gentoo
upstream defaults in portage-stable.

Partially fixes https://github.com/flatcar-linux/Flatcar/issues/689.
Fixes https://github.com/flatcar-linux/Flatcar/issues/690.
2022-06-13 14:15:52 +02:00
Mike Tougeron
ee276c701f Enable arm64 version of sssd 2022-06-13 14:13:16 +02:00
Dongsu Park
177396dc3c Merge pull request #1947 from flatcar-linux/containerd-1.6.6-main
Upgrade Containerd in main from 1.6.4 to 1.6.6
2022-06-10 15:04:37 +02:00
Dongsu Park
3772750263 Merge pull request #1946 from flatcar-linux/runc-1.1.3-main
Upgrade Runc in main from 1.1.2 to 1.1.3
2022-06-10 14:16:49 +02:00
Dongsu Park
278ee0e58d changelog: add changelog for containerd 1.6.6 2022-06-10 11:42:28 +02:00
Flatcar Buildbot
d29b01fe18 app-emulation: Upgrade Containerd 1.6.4 to 1.6.6 2022-06-10 11:32:03 +02:00
Dongsu Park
7b4448ba00 Merge pull request #1943 from flatcar-linux/docker-20.10.17-main
Upgrade Docker in main from 20.10.16 to 20.10.17
2022-06-09 16:12:25 +02:00
Dongsu Park
7a027e532c Merge pull request #1945 from flatcar-linux/dongsu/libxml2-2.9.14
profiles: delete libxml2 keywords
2022-06-09 12:40:34 +02:00
Flatcar Buildbot
f80bf9be86 app-emulation: Upgrade Runc 1.1.2 to 1.1.3 2022-06-09 07:54:27 +00:00
Dongsu Park
928b1a0ba5 profiles: delete libxml2 keywords
Now that dev-libs/libxml2 2.9.14 is stable, we do not need to accept
keywords for that.
2022-06-08 11:58:34 +02:00
Flatcar Buildbot
d72d1f0e66 app-emulation: Upgrade Docker 20.10.16 to 20.10.17 2022-06-08 07:46:01 +00:00
Flatcar Buildbot
6772cfeba8 dev-lang: Upgrade Go 1.18.2 to 1.18.3 2022-06-06 07:29:12 +00:00
Flatcar Buildbot
16d461c7e0 dev-lang: Upgrade Go 1.17.10 to 1.17.11 2022-06-06 07:29:12 +00:00
Dongsu Park
80f9ea5246 Merge pull request #1933 from flatcar-linux/cacerts-3.79-main
Upgrade ca-certificates in main from 3.78 to 3.79
2022-06-03 09:04:14 +02:00
Krzesimir Nowak
56f34184df Merge pull request #1927 from flatcar-linux/linux-5.15.44-main
Upgrade Linux Kernel in main from 5.15.43 to 5.15.44
2022-06-02 18:48:26 +02:00
Flatcar Buildbot
8c1d28ec92 app-misc: Upgrade ca-certificates 3.78 to 3.79 2022-06-02 08:55:09 +00:00
Mathieu Tortuyaux
1f2f92dbe4 changelog: add entry
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-02 09:41:56 +02:00
Mathieu Tortuyaux
af5c44da11 sys-apps/ignition: bump commit ID
this pulls release 2.14.0

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-06-02 09:41:51 +02:00
Flatcar Buildbot
f407b7fc05 sys-kernel: Upgrade Kernel 5.15.43 to 5.15.44 2022-05-31 07:24:47 +00:00
Flatcar Buildbot
2a605a23e8 sys-kernel: Upgrade Kernel 5.15.41 to 5.15.43 2022-05-26 07:24:02 +00:00
Dongsu Park
8356f598b1 Merge pull request #1913 from flatcar-linux/rust-1.61.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.60.0 to 1.61.0
2022-05-25 16:31:31 +02:00
Krzesimir Nowak
d30c97f462 Merge pull request #1900 from flatcar-linux/krnowak/pkg-updates-2021-part-2-python
Package updates, 2021 edition, part 2 - python update
2022-05-25 15:49:02 +02:00
Krzesimir Nowak
c070fd41c4 changelog: Add an entry 2022-05-25 15:47:12 +02:00
Krzesimir Nowak
f67e139a2b profiles: Clean up berkdb USE flags
Disabling it per-package is a no-op since we disable berkdb globally
through the make.defaults file.

Also drop redundant enabling of berkdb in sys-libs/gdbm in target
profile, because we already do it in the base profile.
2022-05-25 15:47:00 +02:00
Krzesimir Nowak
d5c18a906f profiles: Clean up python USE flags
The berkdb flag is gone, sqlite flag is already enabled by default.
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
ce54fe641d dev-python/boto: Apply Flatcar modifications 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
650892196a dev-python/boto: Sync with Gentoo
It's from gentoo commit 99e8a93d029cb2370fb08397cdb6cd7b459b2353.
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
a7339931a4 dev-python/distro-oem: Bump to 1.7.0 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
23041be4c2 profiles: Mask python 3.10
It seems to be picked up for some reason during SDK build, instead of
using python 3.9.9:

emerge: there are no ebuilds to satisfy "dev-lang/python-exec[python_targets_python3_10(-)]".
(dependency required by "dev-lang/python-3.10.2_p1::portage-stable" [ebuild])
(dependency required by "sec-policy/selinux-base-2.20200818-r2::coreos" [ebuild])
(dependency required by "sec-policy/selinux-base-policy-2.20200818-r2::coreos" [ebuild])
(dependency required by "sec-policy/selinux-unconfined-2.20200818-r2::portage-stable" [ebuild])
2022-05-25 15:43:17 +02:00
Krzesimir Nowak
4bc01c9201 dev-lang/python-oem: Apply Flatcar modifications 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
d793efce8b dev-lang/python-oem: Copy from Gentoo 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
4e38d17efa sec-policy/selinux-base: Depend on python properly
Otherwise it was trying to pull in the latest stable python version,
which currently is 3.10, while we still are using 3.9.
2022-05-25 15:43:17 +02:00