mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-20 05:51:18 +02:00
Code Issues Packages Projects Releases Wiki Activity
22,070 Commits 626 Branches 394 Tags
Commit Graph

14297 Commits

Author SHA1 Message Date
Jeremi Piotrowski
ef48877b47 Merge pull request #2030 from flatcar-linux/jepio/spdx-sbom 
app-containers/syft: add v0.51.0 to sdk
 2022-07-27 13:51:24 +02:00
jenkins
d6077e9286 profiles/coreos/base: slsa: use .git/HEAD file to fetch scripts hash 
ORIG_HEAD is the previous HEAD, so it is not what we are after. HEAD
only contains the hash if we are in a detached head situation, otherwise
it will contain a ref and we need to resolve it. `git rev-parse HEAD`
should work as well but hits an issue with git's new `safe.directory`
setting, I have not found a way to set this parameter for a signle call.

For toolchain packages are built with catalyst, and the HEAD value needs
to pre-resolved because we do not have access to the whole git
repository. So build_toolchains will need to inject the correct HEAD
file contents.
 2022-07-27 13:02:22 +02:00
jenkins
113de2ac75 profiles/coreos/base: slsa: compute ebuild file checksum for materials entry 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
fbdbd1ac19 profiles/coreos/base: slsa: revise material uri to match SPDXDownloadLocation spec 
If the uri points to a path within the repo then the format is
git+https://repo@ref#path. ORIG_HEAD is actually the previous HEAD, so read
use that to extract the correct ref.
 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
b1ce3800a5 profiles/coreos/base: slsa: sort file checksums by name 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
1a0f396be4 profile/coreos/base: slsa: switch to bz2 compression for consistency 
...and remove redundant mkdir. Mkdir is already called with the same argument a
couple of lines lower.
 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
d211a2b168 profile/core/base: slsa: use nproc instead of parsing /proc/cpuinfo 2022-07-27 13:02:22 +02:00
Jeremi Piotrowski
91b64a5587 profile/coreos/base: slsa: remove name collision between variable and function 
__slsa_provenance_report is both a variable and a function, which is confusing.
Rename the variable.
 2022-07-27 13:02:22 +02:00
jenkins
39f1d45dff profiles/coreos/base: slsa: return when disabled and use die() 2022-07-27 13:02:22 +02:00
jenkins
7bd2f19fac profiles/coreos/base: slsa: use portageq to find repository path 
This makes the lookup work within the catalyst chroot, as well as in the
SDK.
 2022-07-27 13:02:22 +02:00
Thilo Fromm
d86d5ebe3f slsa-provenance: make generation optional 2022-07-27 13:02:22 +02:00
Thilo Fromm
be46ed7bb0 profiles/coreos/base/profile.bashrc: SLSA provenance reports 
This change adds initial support for SLSA provenance report generation.
Reports are generated in package build post-install hooks after
compilation.

See https://slsa.dev/ for SLSA and https://slsa.dev/provenance/v0.2 for
the provenance report syntax.

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
 2022-07-27 13:02:22 +02:00
flatcar-ci
99bb586c3a New version: main-3312.0.0-nightly-20220726-2100 2022-07-26 21:00:24 +00:00
Dongsu Park
0d2a3f29fb Merge pull request #2059 from flatcar-linux/rust-1.62.1-main 
Upgrade dev-lang/rust and virtual/rust in main from 1.62.0 to 1.62.1
 2022-07-26 16:58:05 +02:00
Jeremi Piotrowski
c2c7f0d504 Merge pull request #2057 from flatcar-linux/jepio/systemd-resolve.conf 
sys-apps/systemd: fix tmpfile entry for resolv.conf link
 2022-07-26 11:07:09 +02:00
Jeremi Piotrowski
36ecad566a changelog: add entry for resolv.conf bugfix 2022-07-26 11:06:27 +02:00
Jeremi Piotrowski
d9972d4ad1 sys-apps/systemd: fix tmpfile entry for resolv.conf link 
Our ebuild modifies the systemd owned tmpfiles.d entry that creates the
/etc/resolv.conf symlink to point to resolv.conf instead of stub-resolv.conf.
The file that contains that entry changed from etc.conf.in to
systemd-resolve.conf, so update the ebuild to touch that file.
 2022-07-26 10:03:13 +02:00
Flatcar Buildbot
5acb31cbab dev-lang: Upgrade dev-lang/rust 1.62.0 to 1.62.1 2022-07-26 07:37:28 +00:00
flatcar-ci
a64011137b New version: main-3311.0.0-nightly-20220725-2100 2022-07-25 21:00:35 +00:00
Flatcar Buildbot
6058ad50fc app-misc: Upgrade ca-certificates 3.80 to 3.81 2022-07-25 07:24:01 +00:00
Dongsu Park
cd80387051 Merge pull request #2040 from flatcar-linux/dongsu/add-Go-CVE-2022-32148 
changelog: add missing CVE for Go 1.18.4, 1.17.12
 2022-07-22 15:04:15 +02:00
Flatcar Buildbot
2568802c6e sys-kernel: Upgrade Kernel 5.15.55 to 5.15.56 2022-07-22 07:24:26 +00:00
Dongsu Park
1e1c30264e changelog: add missing CVE for Go 1.18.4, 1.17.12 
Add missing CVE-2022-32148 for Go 1.18.4, 1.17.12.
 2022-07-21 13:39:12 +02:00
flatcar-ci
1d47a32cc3 New version: main-3306.0.0-nightly-20220720-2100 2022-07-20 21:00:27 +00:00
flatcar-ci
cc4a96ed6d New version: main-3305.0.0-nightly-20220719-2100 2022-07-19 21:00:25 +00:00
Mathieu Tortuyaux
ace84f7d4f Merge pull request #2038 from flatcar-linux/tormath1/nmap 
profiles: enable symlink for nmap
 2022-07-19 14:11:09 +02:00
Mathieu Tortuyaux
f334da4fb5 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-07-19 08:45:57 +02:00
flatcar-ci
7e796bf561 New version: main-3304.0.0-nightly-20220718-2100 2022-07-18 21:00:27 +00:00
Mathieu Tortuyaux
606ba61447 profiles: enable symlink for nmap 
For compatiblity, it's good to have `nc` in the PATH too.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-07-18 11:23:09 +02:00
Mathieu Tortuyaux
5b172ffb99 net-analyzer/nmap: sync ebuild revision 
it basically pulls this: f1367051f3

Commit-Ref: 0bcf4941145004296ef49e39d2e69fac3d2dbbc6

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-07-18 11:19:50 +02:00
jenkins
a938fb9b5c app-containers/syft: apply downstream changes 
* pass additional ldflags so that `syft version` prints the package
  version.
* keyword stable for amd64 and arm64 (to reduce differences between the
  two).
 2022-07-18 07:49:27 +00:00
jenkins
e995d9a4b1 app-containers/syft: Import from Gentoo 
Upstream commit c691680319ac2f00f203533c3dca0b21ecf77f80
 2022-07-18 07:49:22 +00:00
Flatcar Buildbot
d68ffc61cc sys-kernel: Upgrade Kernel 5.15.54 to 5.15.55 2022-07-16 07:22:06 +00:00
flatcar-ci
51f740a2a8 New version: main-3301.0.0-nightly-20220715-2100 2022-07-15 21:00:30 +00:00
Krzesimir Nowak
6dea2f8ae7 Merge pull request #2024 from flatcar-linux/linux-5.15.54-main 
Upgrade Linux Kernel in main from 5.15.52 to 5.15.54
 2022-07-15 16:03:41 +02:00
Sayan Chowdhury
2959870601 Merge pull request #2018 from flatcar-linux/sayan/update-sudo-1.9.10-r1 
app-admin/sudo: Sync with Gentoo upstream; updates to 1.9.10-r1
 2022-07-15 16:11:46 +05:30
Sayan Chowdhury
c605e33d23 app-admin/sudo: Add the changelog for sudo-1.9.10-r1 release 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2022-07-15 15:33:39 +05:30
Sayan Chowdhury
c0afb3e982 app-admin/sudo: Apply Flatcar patches 
- Remove Perl Runtime Dependency
- Remove OpenLDAP schema files for sudo
- Remove sudo.conf file as it is shipped via baselayout

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2022-07-15 15:33:39 +05:30
Sayan Chowdhury
63e462da73 Merge pull request #343 from flatcar-linux/sayan/update-curl-7.84.0 
net-misc/curl: Sync with Gentoo upstream; updates to 7.84.0
 2022-07-15 15:30:38 +05:30
Sayan Chowdhury
8f676895bc changelog: Add the changelog entry for the curl 7.84.0 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2022-07-15 15:29:56 +05:30
Sayan Chowdhury
46ef576243 Merge pull request #2029 from flatcar-linux/sayan/update-curl-7.84.0 
profiles: remove outdated arm64 accept_keywords for curl
 2022-07-15 15:28:28 +05:30
flatcar-ci
60dc5f5065 New version: main-3300.0.0-nightly-20220714-2100 2022-07-14 21:00:27 +00:00
Dongsu Park
2ad4c0c632 Merge pull request #2028 from flatcar-linux/firmware-20220708-main 
Upgrade Linux Firmware in main from 20220610 to 20220708
 2022-07-14 13:42:34 +02:00
Kai Lüke
9d8e918968 Merge pull request #2026 from flatcar-linux/kai/kargs-nonexisting-grubcfg 
sys-kernel/bootengine: Fix ignition kargs support by creating grub.cfg
 2022-07-14 10:30:48 +02:00
Kai Lueke
b9ee2d9c4f sys-kernel/bootengine: Fix ignition kargs support by creating grub.cfg 
This pulls in
https://github.com/flatcar-linux/bootengine/pull/47
which creates the grub.cfg file if it does not exist when the Ignition
kargs directive is used, preventing an error when it tried to read the
current settings from it.
 2022-07-14 10:30:25 +02:00
Flatcar Buildbot
74073529a9 sys-kernel: Upgrade Linux Firmware 20220610 to 20220708 2022-07-14 07:11:33 +00:00
flatcar-ci
873eac6f5d New version: main-3299.0.0-nightly-20220713-2100 2022-07-13 21:00:29 +00:00
Flatcar Buildbot
8cf32dfc56 Update mantle container image to latest HEAD 2022-07-13 16:10:03 +00:00
Dongsu Park
62a5dcf69b Merge pull request #2025 from flatcar-linux/go-1.17.12-and-1.18.4-main 
Upgrade Go from 1.17.11 and 1.18.3 to 1.17.12 and 1.18.4
 2022-07-13 16:37:04 +02:00
Dongsu Park
e9cf245cff changelog: add changelog for Go 1.18.4 2022-07-13 11:39:49 +02:00