14297 Commits

Author SHA1 Message Date
Dongsu Park
40ac654c20 profiles: set python_single_target_python3.6 for net-fs/samba 2020-11-06 13:51:57 +01:00
Dongsu Park
a5e2bf4282 net-fs/samba: Apply Flatcar changes
- Add a minimal USE flag for only installing libraries
  - Change the Perl and Python run-time deps to build-time only
  - Drop a bunch of dependencies with broken cross-compilation
  - Enable using bundled libraries in their place
  - Disable building libraries requiring Python

Original-by: David Michael <dm0@redhat.com>
https://github.com/flatcar-linux/coreos-overlay/commit/8445f8b4386a
2020-11-06 13:51:55 +01:00
Dongsu Park
28783b1e69 net-fs/samba: update to 4.11.13, sync with Gentoo
Update net-fs/samba to 4.11.13-r1, by syncing with upstream Gentoo.

It is mainly to resolve CVE-2019-10197, CVE-2020-10704, CVE-2020-10745,
and CVE-2019-10218.
See also https://security.gentoo.org/glsa/202003-52 and
https://security.gentoo.org/glsa/202007-15 .
2020-11-06 13:51:53 +01:00
Dongsu Park
b3061d608d sys-libs/tevent: update to 0.10.2
To be able to build `net-fs/samba` 4.11, we need to update
`sys-libs/tevent` to 0.10.2.
2020-11-06 13:50:57 +01:00
Dongsu Park
7cacf2c668 sys-libs/talloc: update to 2.3.1
To be able to `net-fs/samba` 4.11, we need to import `sys-libs/talloc`
to 2.3.1.
2020-11-06 13:50:55 +01:00
Dongsu Park
9cd5e87a35 sys-libs/tdb: update to 1.4.3
To be able to build samba 4.11, we need to update `sys-libs/tdb` to
1.4.3.
2020-11-06 13:50:53 +01:00
Dongsu Park
dd27327b93 app-crypt/p11-kit: import p11-kit from Gentoo
To be able to build sssd 2.3.1, we need to import `app-crypt/p11-kit`
from upstream Gentoo.
2020-11-06 13:50:51 +01:00
Dongsu Park
50c3589497 dev-libs/libtasn1: import libtasn1 from Gentoo
To build `net-libs/gnutls` 3.6, we need to import `dev-libs/libtasn1`.
2020-11-06 13:50:48 +01:00
Dongsu Park
22155497c6 dev-libs/nettle: update to 3.6
To build `net-libs/gnutls` 3.6.15, we need to also update
`dev-libs/nettle` to 3.6.
2020-11-06 13:50:46 +01:00
Dongsu Park
7a818340fa net-libs/gnutls: import from upstream Gentoo
To be able to build `net-fs/samba` 4.11, we need to import
`net-libs/gnutls` from upstream Gentoo. Since gnutls is one of the
hard requirements of upstream Samba, we are not able to disable the
dependency on gnutls.
2020-11-06 13:50:43 +01:00
Dongsu Park
c4322159bd Merge pull request #638 from flatcar-linux/dongsu/kernel-config-psi
sys-kernel/coreos-modules: enable PSI (Pressure Stall Information)
2020-11-06 09:41:39 +01:00
Sayan Chowdhury
ae0cfca4ae sys-block/open-iscsi: Add the version 2.1.2
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-06 11:38:33 +05:30
Sayan Chowdhury
72be7c4946 sys-block/open-isns: Add the new package
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-11-06 11:13:28 +05:30
Kai Lüke
eea2288fbb .github: Remove fetching unused key from gpg server
The key server currently doesn't work. Since the key is not used
currently but the key we have hosted on our web server, we can remove
this failing step to restore GitHub Actions.
2020-11-05 17:10:06 +09:00
Dongsu Park
e74f2e325d Merge pull request #669 from flatcar-linux/dongsu/dbus-glib-0.110
dev-libs/dbus-glib: update to 0.110, fix cross compile build error
2020-11-04 16:16:09 +01:00
Dongsu Park
ea970f094f sys-apps/shadow: Apply Flatcar changes
Apply Flatcar-specific changes, like below:

  - Carry over our custom tmpfiles and securetty files
  - Remove /etc files and install them to /usr, use tmpfiles
  - Switch /etc/login.defs edits to /usr/share/shadow/login.defs
  - Drop moving passwd out of /usr since we don't have split-usr
  - Drop pkg_postinst

Original-by: David Michael <dm0@redhat.com>
  6fd490ebfefd ("sys-apps/shadow: Apply CoreOS changes")
2020-11-04 16:03:39 +01:00
Dongsu Park
2d8dec749f sys-apps/shadow: update to 4.8-r5, sync with Gentoo
Update sys-apps/shadow to 4.8-r5, simply syncing with Gentoo.

It is mainly to resolve
[CVE-2019-19882](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19882).
See also https://security.gentoo.org/glsa/202008-09.
2020-11-04 16:03:35 +01:00
Dongsu Park
8881733152 sys-kernel/coreos-modules: enable PSI (Pressure Stall Information)
Enable Kernel config for PSI (Pressure Stall Information), which might
help system administrators to detect bottleneck in cpu, memory and io
in an easy way.

```
$ zgrep -i _psi /proc/config.gz
CONFIG_PSI=y

$ ls -l /proc/pressure/
-r--r--r--. 1 root root 0 Oct  7 11:56 cpu
-r--r--r--. 1 root root 0 Oct  7 11:56 io
-r--r--r--. 1 root root 0 Oct  7 11:56 memory
$ cat /proc/pressure/cpu
some avg10=0.13 avg60=0.68 avg300=0.28 total=1195993
$ cat /proc/pressure/io
some avg10=0.00 avg60=1.11 avg300=0.68 total=2828208
full avg10=0.00 avg60=0.91 avg300=0.56 total=2334731
$ cat /proc/pressure/memory
some avg10=0.00 avg60=0.00 avg300=0.00 total=0
full avg10=0.00 avg60=0.00 avg300=0.00 total=0
```

See also https://www.kernel.org/doc/html/latest/accounting/psi.html ,
https://facebookmicrosites.github.io/psi/docs/overview

Fixes https://github.com/flatcar-linux/Flatcar/issues/162
2020-11-04 09:37:45 +01:00
Krzesimir Nowak
aee9d1bc02 Merge pull request #659 from flatcar-linux/krnowak/systemd-gentoo
Update systemd (sync, use gentoo workflow, add missing patches)
2020-11-03 20:14:24 +01:00
Krzesimir Nowak
92a3de35e0 .github: Update KV_MAIN to 5.9 2020-11-03 12:16:56 +01:00
Krzesimir Nowak
38798dac1f sys-kernel/coreos-firmware: Update to 20200918 2020-11-03 12:16:56 +01:00
Krzesimir Nowak
86a2e229cf sys-kernel/*: Bump to 5.9.1 2020-11-03 12:16:53 +01:00
Krzesimir Nowak
8f5411b63f sys-kernel/coreos-sources: Regenerate patches against 5.9.1 2020-11-03 12:13:44 +01:00
Dongsu Park
57d56fa2c0 dev-libs/dbus-glib: Fix cross compile build error
Use host tool when building cross.
Bump revision to -r1.
Adjust the patch on top of dbus-glib 0.110.

Original-by: Geoff Levand <geoff@infradead.org>
  6d7756b77b10 ("dev-libs/dbus-glib: Fix cross compile build error")
2020-11-02 11:58:11 +01:00
Dongsu Park
e4cb197be5 dev-libs/dbus-glib: update to 0.110, sync with Gentoo
To fix build issues from glib 2.64.5, we need to update dbus-glib
to 0.110.
2020-11-02 11:57:28 +01:00
Dongsu Park
e3db28c9c5 dev-util/glib-utils: update to 2.64.5 2020-10-30 16:52:20 +01:00
Dongsu Park
bd00506a48 dev-db/sqlite: move to portage-stable
Now that `dev-lang/tcl` is included in SDK, we do not need to keep
third-party patches in coreos-overlay. So move sqlite to portage-stable.
2020-10-30 16:06:05 +01:00
Dongsu Park
8494602fb1 dev-db/sqlite: update to 3.33.0
Now that `dev-lang/tcl` is included in SDK, we can now build
dev-db/sqlite without having to rely on third-party patches
in coreos-overlay.

So simply sync sqlite with Gentoo upstream, and update to the latest
version 3.33.0.
2020-10-30 16:04:31 +01:00
Sayan Chowdhury
e7b5405278 dev-libs/glib: Sync the package with upstream
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-10-30 14:17:24 +01:00
Krzesimir Nowak
1d7053e8a1 sys-apps/systemd: Add Manifest
Otherwise the build fails at the verification stage.
2020-10-26 15:03:48 +01:00
Krzesimir Nowak
e9b2cee708 sys-apps/systemd: Rename the ebuild to pick the patch release
With this change `PV` variable will become 246.6, thus it will try to
download the archive from the systemd-stable repo.
2020-10-26 14:43:28 +01:00
Krzesimir Nowak
cfd6c15d51 sys-apps/systemd: Bring the rest of missing patches
We have these patches in v245 too. I have missed them when doing the
update to v246, because apparently I have assumed that our flatcar
branches are more or less some upstream branch/tag + our patches on
top. That assumption was wrong and it surfaced when I rebased the
v245-flatcar branch to the v245.8 tag.
2020-10-26 14:40:04 +01:00
Krzesimir Nowak
37c8517551 sys-apps/systemd: Move away from cros-workon
Our current cros-workon setup was awkward to use when a new patch
release happened on upstream. In this case we would go to our
`v<VERSION>-flatcar` branch and merge/cherry-pick the commits from
upstream that appeared between the release we have been using so far
and the new release. In such case, our non-upstreamed patches were
hidden somewhere in history. To fix that, I proposed having a branch
for each patch release, so the branch would always be based on an
upstream tag and have our patches on top of that. An alternative
proposition was to just use the Gentoo workflow for patches, and this
is what we are doing here.

This also slightly minimizes the difference between the Gentoo recipe
and ours.
2020-10-26 14:33:54 +01:00
Krzesimir Nowak
c4f0e7e437 sys-apps/systemd: Sync with Gentoo
This brings in a dependency on app-arch/zstd, which will be pulled
into portage-stable.
2020-10-26 14:17:20 +01:00
Krzesimir Nowak
407e682a37 app-arch: Import from Gentoo
An updated systemd will need it.
2020-10-26 14:15:15 +01:00
Dongsu Park
0be496912c Merge pull request #119 from flatcar-linux/dongsu/sdk-pkgs-re2c-file
dev-util,sys-apps: update re2c, file
2020-10-23 15:06:58 +02:00
Dongsu Park
17eb4d5b5e Merge pull request #658 from flatcar-linux/dongsu/gdbus-codegen
profiles: gdbus-codegen only for python 3.6
2020-10-23 15:06:31 +02:00
Dongsu Park
2c820da16e Merge pull request #118 from flatcar-linux/dongsu/meson-gdbus
dev-util: update meson, gdbus-codegen
2020-10-23 15:06:11 +02:00
Dongsu Park
aa4d60f031 Merge pull request #652 from flatcar-linux/linux-5.8.16-main
Upgrade Linux Kernel in main from 5.8.14 to 5.8.16
2020-10-23 14:08:05 +02:00
Dongsu Park
f8a27a086e sys-apps/file: update to 5.39
Update sys-apps/file to 5.39 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18218 .
2020-10-22 15:20:38 +02:00
Dongsu Park
5b8dbb7fb2 dev-util/re2c: update to 2.0.3
Update dev-util/re2c to 2.0.3 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11958 .
2020-10-22 15:19:06 +02:00
Dongsu Park
ed12f4b269 profiles: gdbus-codegen only for python 3.6
To be able to update `dev-util/gdbus-codegen` to 2.64.5, we need to
specify a single target python3.6 for gdbus-codegen.
Without it, it is not possible to emerge gdbus-codegen, because
it thinks there are multiple python single targets for the package.
2020-10-22 14:59:45 +02:00
Dongsu Park
c320d06f06 dev-util/gdbus-codegen: update to 2.64.5
Now that dev-libs/glib was updated to 2.64.5, we need to also update
dev-util/gdbus-codegen to 2.64.5.

Otherwise we would see strange slot conflicts like:

```
 * Error: The above package list contains packages which cannot be
 * installed at the same time on the same system.

 (dev-libs/glib-2.64.5:2/2::portage-stable, ebuild scheduled for merge) pulled in by
   >=dev-libs/glib-2.58.3:2 required by (dev-util/gdbus-codegen-2.58.3:0/0::portage-stable, binary scheduled for merge)

 (dev-util/gdbus-codegen-2.58.3:0/0::portage-stable, binary scheduled for merge) pulled in by
   dev-util/gdbus-codegen required by (coreos-base/hard-host-depends-0.0.1-r194:0/0::coreos, binary scheduled for merge)
```
2020-10-22 14:30:38 +02:00
Sayan Chowdhury
c6a6d5a685 dev-util/meson: Sync package with the upstream
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-10-22 14:30:38 +02:00
Dongsu Park
698a6c104d dev-libs/libxml2: update to 2.9.10-r3
Update libxml2 to 2.9.10-r3, to multiple security issues in libxml2:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20388
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595

See also https://security.gentoo.org/glsa/202010-04 .
2020-10-21 16:34:26 +02:00
Dongsu Park
6c98682dd6 sys-fs/cryptsetup: update to 2.3.2
Since cryptsetup 1.7.5 cannot be built with json-c 0.15,
we need to also update cryptsetup to 2.3.2.
2020-10-21 16:34:17 +02:00
Dongsu Park
1bc50f2cd2 eclass: sync cmake-multilib.eclass with Gentoo
Now that json-c 0.15 requires new definitions in cmake-multilib.eclass,
we need to sync cmake-multilib.eclass with upstream Gentoo.
2020-10-21 16:32:18 +02:00
Dongsu Park
2fbc9fb0b8 dev-libs/json-c: update 0.15
Update json-c to 0.15, to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762 .
2020-10-21 16:32:18 +02:00
Dongsu Park
69e05d7dbc dev-libs/libuv: update to 1.39.0
Update libuv to 1.39.0 to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8252 .
2020-10-21 16:32:10 +02:00
Dongsu Park
4d28d167f5 net-dns/c-ares: update to 1.61.1
Update net-dns/c-ares to 1.61.1, to address
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381 .
2020-10-21 16:25:20 +02:00