2817 Commits

Author SHA1 Message Date
Eugene Yakubovich
dadcf9cb3e Merge pull request #1481 from eyakubovich/flannel-0.5.3 2015-08-27 12:21:35 -07:00
Geoff Levand
21154813b6 coreos-base/coreos-metadata: Add arm64 keywords
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-08-27 12:10:33 -07:00
Michael Marineau
5480cf5a2a Merge pull request #1484 from marineam/kernel
coreos-kernel: bump to 4.1.6
2015-08-27 10:07:45 -07:00
Michael Marineau
3dea35ecdd coreos-kernel: backport "udp: fix dst races with multicast early demux"
This patch hasn't hit stable yet but may be a factor in
https://github.com/coreos/bugs/issues/435, recommended on LKML.
2015-08-27 09:25:48 -07:00
Alex Crawford
43dc40a23c coreos-base/coreos-metadata: fix ebuild 2015-08-26 19:43:44 -07:00
Alex Crawford
2003d4e5d3 Merge pull request #1488 from crawford/coreos-metadata
coreos-base/coreos-metadata: bump to v0.1.0
2015-08-26 19:24:12 -07:00
Alex Crawford
068b1684c7 Merge pull request #1489 from crawford/rust
*: remove rust
2015-08-26 19:24:06 -07:00
Alex Crawford
c115ed76f0 Revert "profiles: enable rust"
This reverts commit 1d02a7c635d727169c57079ea4348f1a870d0a67.
2015-08-26 19:10:42 -07:00
Alex Crawford
b55764a55d coreos-devel/sdk-depends: remove rust-bin 2015-08-26 19:08:56 -07:00
Alex Crawford
07faee35c7 Revert "dev-lang/rust-bin: move from portage-stable"
This reverts commit 5bef7d21cf7b313792356c6ca350665d63cda2bb.
2015-08-26 18:46:17 -07:00
Alex Crawford
3dcc2e060a Revert "dev-lang/rust-bin: suppress SONAME-related errors"
This reverts commit 1eedaaabaa2b39a5d53232690c71370a3f797544.
2015-08-26 18:46:08 -07:00
Alex Crawford
ac12e9c633 Revert "bump(dev-rust/cargo): sync with upstream overlay"
This reverts commit 172db3f4b0824fcca63e5be068a039cd3f29a7a3.
2015-08-26 18:45:25 -07:00
Vito Caputo
4e87ea94e4 Merge pull request #1487 from vcaputo/order_ignition-disks_after_disk-uuid
sys-apps/ignition: ensure ignition-disks runs after disk-uuid
2015-08-26 18:45:02 -07:00
Alex Crawford
0c920ae353 coreos-base/coreos: add coreos-metadata 2015-08-26 18:37:51 -07:00
Alex Crawford
9e6efbf3fd coreos-base/coreos-metadata: bump to v0.1.0 2015-08-26 18:37:51 -07:00
Vito Caputo
d3a802e571 sys-apps/ignition: ensure ignition-disks runs after disk-uuid
There's potential for racing with sgdisk or its generated udev events
which may also open the device if we get scheduled simultaneously.  This
is problematic since ignition-disks may also do partitioning and
formatting of the same devices.
2015-08-26 16:58:23 -07:00
Matthew Garrett
4b664e867b Don't install /sbin/selinuxenabled
We don't use this for anything, but Ansible won't run if it's present and
the selinux python bindings aren't.

Fixes https://github.com/coreos/bugs/issues/449
2015-08-26 16:52:54 -07:00
Michael Marineau
964ff5b6d0 coreos-kernel: bump to 4.1.6 2015-08-26 12:28:33 -07:00
Alex Crawford
d2f68d78fb coreos-base/coreos-metadata: update ebuild for go 2015-08-25 22:26:03 -07:00
Vito Caputo
c3674e3d1d sys-apps/ignition: ignition-files requires initrd-setup-root.service
ignition-files can do things like add users and ssh keys, we use
shadowutils to do this which requires a minimally setup root filesystem.

Since ignition-disks might completely wipe the root filesystem,
initrd-setup-root must run to get us boot-strapped.
2015-08-25 19:22:18 -07:00
Vito Caputo
52902cafc0 sys-kernel/bootengine: bump bootengine for initrd-setup-root
Also sets initrd-setup-root as executable.
2015-08-25 17:33:04 -07:00
Michael Marineau
58203d679b Merge pull request #1482 from marineam/firmware
coreos-firmware: do not exclude directories and symlinks
2015-08-25 15:55:47 -07:00
Michael Marineau
c05c38a9b7 coreos-firmware: do not exclude directories and symlinks
Commit ed4660a2d9abe4583b9b327d2801703ec9f4ca18 added an explicit error
message to catch when something goes wrong and cannot find any firmware
required by the kernel. This additionally changed the call to doins to
an explicit list of files, flattening out the directory tree and
excluding symlinks. The tree *must* be preserved exactly in order for
the kernel to find the files it needs.
2015-08-25 15:40:25 -07:00
Eugene Yakubovich
860b0bfe53 flannel: bump to 0.5.3 2015-08-25 12:06:36 -07:00
Matthew Garrett
40fca7ddf1 Fix selinux configuration file location
We were installing selinux configuration files in /etc which caused problems
on upgrades. Move them into /usr and ensure that systemd sets up appropriate
temporary files. Fixes https://github.com/coreos/bugs/issues/447
2015-08-24 16:43:36 -07:00
Michael Marineau
a467ab6b1a Merge pull request #1475 from marineam/go-1.5
Go 1.5
2015-08-21 18:00:10 -07:00
Michael Marineau
c6abd3396e dev-lang/go: add 1.5 release and arm64 kewword
For now 1.5 is only stable on arm64, needs testing before we upgrade.
2015-08-21 13:03:14 -07:00
Michael Marineau
ccc2baf889 dev-lang/go: only require go-bootstrap in the SDK itself 2015-08-21 13:03:14 -07:00
William Hubbs
a35f9bda13 dev-lang/go: fix go dist line options in test phase
Change --no-rebuild to -no-rebuild and drop --banner in the test phase
to match the documentation of go dist.

Gentoo-Commit: fb870ae6f45993ea375d8d5381edb72ade271b06
2015-08-21 13:03:00 -07:00
Michael Marineau
e83621034c dev-lang/go: implement more complete cross compilation support
There are a few quirks with Go to deal with when cross-compiling:

 - Since DEPEND cannot distinguish cross-architecture dependencies the
   current ebuild cannot keyword all architectures it supports. This
   could be resolved in the future with a special use flag or other
   clever trick to drop go-bootstrap from DEPEND for cross builds.

 - GOHOST* and CC variables are CBUILD values.

 - GO* and *_FOR_TARGET variables are CHOST values.

 - Go can always be used as a cross-compiler so handling the
   CHOST!=CTARGET case isn't strictly required. We could provide a
   pre-built copy of the std library for CTARGET's architecture but I'm
   not sure if that would be useful or not. For now the ebuild just
   doesn't allow that case.

Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=558216
Gentoo-Commit: 0f4f3b8d200e15982e5e75f52f3c472d152cc4c9
2015-08-21 12:52:41 -07:00
Nick Owens
262711a8b5 app-admin/fleet: bump to v0.11.5 2015-08-20 10:04:52 -07:00
Vito Caputo
f5c4dde1d3 sys-apps/ignition: move network depdencies to ignition services
Explicitly order ignition-{disks,files} after the network units, and
switch from Requires to Wants in so ignition can still function without
them.
2015-08-19 18:24:59 -07:00
Michael Marineau
e8cf09be54 dev-lang/go: import latest upstream live ebuild 2015-08-19 17:49:25 -07:00
Alex Crawford
cb7dda6c08 sys-kernel/bootengine: set ignition-generator exec 2015-08-18 12:20:04 -07:00
Michael Marineau
fb9b323483 Merge pull request #1470 from marineam/selinux
Another round of SELinux fixes
2015-08-14 18:23:04 -07:00
Michael Marineau
9ea1691350 profiles: only enable selinux on amd64
The base selinux packages only have amd64 and x86 keywords. No need to
get them working on arm64 right now so make this amd64-only.
2015-08-14 17:59:14 -07:00
Michael Marineau
cab0f533fb policycoreutils: override DESTDIR instead of PREFIX
PREFIX should always point to $(DESTDIR)/usr in order to work in the SDK
where /lib64 isn't a symlink to /usr/lib64 like it is in our images.
2015-08-14 17:48:41 -07:00
Michael Marineau
eb258f2da7 selinux-policy: do not execute binaries under $ROOT
Run-time binaries must be provided by the SDK, dynamic libraries or the
entire architecture may be different under the target $ROOT.

I have no idea if selinux can be built cross-architecture though, if not
this may need to be revisited with qemu.
2015-08-14 17:25:43 -07:00
Michael Marineau
1076ef2b7a Merge pull request #1469 from marineam/selinux
checkpolicy: fix typo :(
2015-08-14 16:36:28 -07:00
Michael Marineau
8fed02d826 checkpolicy: fix typo :( 2015-08-14 16:28:53 -07:00
Michael Marineau
5ba8147abb Merge pull request #1468 from marineam/selinux
Selinux cleanup and build fixes
2015-08-14 16:10:15 -07:00
Michael Marineau
c3e0c54d9e checkpolicy: use includes and libsepol.a from $ROOT
Not sure why this is static instead of dynamic in the first place, but
at least this fixes the build error caused by using the SDK root.
2015-08-14 16:02:56 -07:00
Michael Marineau
f932e4d950 checkpolicy: import from portage-stable 2015-08-14 15:44:31 -07:00
Michael Marineau
efde8e22e3 profiles: exclude a pile of ustr source code from prod images 2015-08-14 15:41:18 -07:00
Michael Marineau
691ce0c988 policycoreutils: prune installed tools/files
- Exclude all python scripts when the python flag is off.
 - Add nls use flag to disable gettext
 - Add extra use flag to disable Gentoo provided tools and OpenRC goo.
 - Drop live ebuild, we don't really need it.
2015-08-14 15:40:44 -07:00
Alex Crawford
0908ab0bf7 Merge pull request #1464 from crawford/waagent
app-emulation/wa-linux-agent: bump to 2.0.14
2015-08-14 14:07:21 -07:00
Geoff Levand
7c9524a479 Merge pull request #1445 from glevand/for-merge-firmware
sys-kernel/coreos-firmware: Fix empty list error
2015-08-14 13:50:43 -07:00
Michael Marineau
8436371d7c Merge pull request #1461 from marineam/grub
Update GRUB and OVMF
2015-08-14 13:24:51 -07:00
Matthew Garrett
981e4c1a50 Support ARM images in sbsigntool
Import the Ubuntu patchset for sbsigntool so we pick up support for
signing ARM binaries.
2015-08-14 13:01:21 -07:00
mjg59
dde34d405f Merge pull request #1466 from mjg59/selinux
Build an selinux-capable image
2015-08-14 12:23:13 -07:00