22070 Commits

Author SHA1 Message Date
Sayan Chowdhury
6f9eb8dd31 Merge pull request #187 from kinvolk/sayan/update-readline-8.0
sys-libs/readline: Sync with Gentoo upstream; updates to 8.1
2021-07-20 16:58:30 +05:30
Dongsu Park
2df538b480 Merge pull request #1115 from kinvolk/go-1.16.6-main
Upgrade Go in main from 1.16.5 to 1.16.6
2021-07-19 18:28:20 +02:00
Mathieu Tortuyaux
37bc8884e5
Merge pull request #132 from kinvolk/tormath1/qemu-option
build_lib/qemu_tmpl: fix short-form warning
alpha-2942.0.0
2021-07-19 17:50:06 +02:00
Jeremi Piotrowski
4ba3218d6a boostrap_sdk: only build aarch64 cross-rust on x86 hosts
The rust ebuild has some magic to detect cross-toolchains present on the
system and enable building additional cross targets. The code to trigger
the rebuild of rust is part of install_cross_rust, and checks whether
the cross directories exist in the rust installation. If they don't,
then rust is removed and rebuilt to allow for the auto-detection to
happen.

Right now there are two issues with the code. Firstly, the path that is
checked is wrong, which leads to rust always being removed and rebuilt.
The path checked is /usr/lib/rust-*/rustlib but /usr/lib/rustlib is
where the files are installed.

The second issue is that it checks for aarch64 dirs when CHOST is
aarch64-cros-linux-gnu. However, on an aarch64 host the aarch64 dirs
will already exist from building the sdk itself. The rust ebuild is not
ready to handle aarch64 hosts yet and blows up. The correct behavior is
to combine the check for CHOST with a check for the right CBUILD.

On an aarch64 host we should presumably check for the x86 CHOST and rust
dirs, but that can be added later, because it needs more work.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:11:12 +00:00
Jeremi Piotrowski
e4f57bea82 bootstrap_sdk: fix issues around lib->lib64 symlink
The arm64 profiles don't specify SYMLINK_LIB=yes, which makes sense
since arm64 systems don't support multilib in the way that we are used
to from x86. What this means is that build artifacts are installed into
separate lib and lib64 directories. The root overlay installed in stage4
needs to check for SYMLINK_LIB before trying to create a symlink,
otherwise it fails to be applied because it collides with the directory
in the rootfs.

This uncovered a second minor issues - the rust toolchain bootstrap
scripts checked for /usr/lib64/rust*, but the ebuild installs to
/usr/lib/rust.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:11:09 +00:00
Jeremi Piotrowski
0a1b0be7f3 dev-lang/rust: don't enable aarch64 cross target when host is aarch64
This does not work because the host and cross rust targets share the
same name. This needs to be reworked to (potentially) enable x86 cross
targets for aarch64 targets.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:09:01 +00:00
Jeremi Piotrowski
0064e6b3ec profiles: remove "pc xen" from arm64 GRUB_PLATFORMS
grub refuses to build these targets when host is arm64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:08:59 +00:00
Jeremi Piotrowski
a90c4265bf profiles: move BOOSTRAP_USE=cros_host to arch indepenent part of sdk profile
So that it can apply to both arm64 and amd64 sdk profiles.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:08:56 +00:00
Jeremi Piotrowski
d460bf3a8d coreos-base/update_engine: add glib-utils to (B)DEPEND
glib-utils are used during the build so they need to be part of host
dependencies for update_engine. This only really pops up during a repeat
bootstrap, when update_engine is being built from source but glib has
been installed from a binary. BDEPEND would be the correct variable but
that requires EAPI=7, so additionally added it to DEPEND for now.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:08:54 +00:00
Jeremi Piotrowski
44fcb0513a mark platform specific host/sdk dependencies as amd64/!arm64
kola-data and google-cloud-sdk install pre-built amd64 binaries, so
there's no point installing them right now. Both could be made to work
at a later time. iucode and syslinux and are x86 specific and won't
build. selinux related packages *currently* don't work/build on arm64
but could be made to work.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:08:51 +00:00
Jeremi Piotrowski
0aaa9766c7 keyword sdk dependencies for arm64
Where the packages are part of coreos-overlay, I keyworded the ebuilds
directly to the same level of stability as amd64. Other packages have
been keyworded through the profile, as close to the amd64 level as I
could manage.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-19 15:08:48 +00:00
Dongsu Park
065661a751 Merge pull request #1113 from kinvolk/dongsu/open-vm-tools-11.3.0
app-emulation/open-vm-tools: update to 11.3.0
2021-07-19 12:01:03 +02:00
Sayan Chowdhury
2300ad3287 sys-libs/readline: Sync with Gentoo upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-19 14:43:33 +05:30
Flatcar Buildbot
e03a28561c dev-lang: Upgrade Go 1.16.5 to 1.16.6 2021-07-19 07:26:12 +00:00
Jeremi Piotrowski
911da26072 disk_layout: devcontainer: use architecture agnostic part uuid
The previously used uuid 4f68bce3-e8cd-4db1-96e7-fbcaf984b709 is valid
for x86_64 root partitions, which resulted in the dev container not
working with systemd-nspawn on aarch64. systemd-nspawn fails with:

  No suitable root partition found in image

Change the partition uuid to the architecture agnostic one documented
in the man page:

  A GUID partition table (GPT) with a single partition of type 0fc63daf-8483-4772-8e79-3d69d8477de4.

This makes systemd-nspawn happy on aarch64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-16 15:35:18 +00:00
Mathieu Tortuyaux
35387cfdff
build_lib/qemu_tmpl: fix short-form warning
starting from qemu-6.0.0, options with short-form are deprecated.

```
$ ./flatcar_production_qemu.sh
qemu-system-x86_64: -fsdev local,id=conf,security_model=none,readonly,path=/tmp/flatcar-configdrive.gyqmdrQqfA: warning: short-form boolean option 'readonly' deprecated
Please use readonly=on instead
```

See this commit: ccd3b3b811

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 16:04:50 +02:00
Mathieu Tortuyaux
abd1e615c0 Merge pull request #1112 from kinvolk/containerd-1.5.3-main
Upgrade Containerd in main from 1.5.2 to 1.5.3
2021-07-16 15:52:27 +02:00
Jeremi Piotrowski
23d3861740 Merge pull request #1105 from kinvolk/sayan+jepio/update-dracut
Sayan+jepio/update dracut

Closes kinvolk/Flatcar#375
2021-07-16 15:47:17 +02:00
Dongsu Park
688eed80f3 coreos-base/oem-vmware: update to 11.3.0
Update oem-vmware to 11.3.0, corresponding to the update of
open-vm-tools to 11.3.0.
2021-07-16 13:54:28 +02:00
Dongsu Park
53983eb353 app-emulation/open-vm-tools: update to 11.3.0
Update open-vm-tools 11.3.0,
https://github.com/vmware/open-vm-tools/releases/tag/stable-11.3.0 .
Update also the build number to 18090558.
2021-07-16 13:53:51 +02:00
Mathieu Tortuyaux
b827c6557c Merge pull request #172 from kinvolk/tormath1/selinux
selinux: update eclass, libsepol to 3.1 and semodule-utils
2021-07-16 11:25:19 +02:00
Mathieu Tortuyaux
aa3ad05497 Merge pull request #1048 from kinvolk/tormath1/selinux
selinux: upgrade selinux libs
2021-07-16 11:25:10 +02:00
Flatcar Buildbot
4309eaab99 app-emulation: Upgrade Containerd 1.5.2 to 1.5.3 2021-07-16 08:10:14 +00:00
Mathieu Tortuyaux
6841de885a Revert "app-emulation/docker: disable SELinux"
This reverts commit 956f9757d45b7df260ed0e78213e1ad96c7409eb.
2021-07-16 10:04:03 +02:00
Sayan Chowdhury
2a3a1c8bc8 sys-apps/dbus: Apply Flatcar patches
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-16 10:04:02 +02:00
Sayan Chowdhury
d3d56cda69 sys-apps/dbus: Sync with Gentoo upstream
Updates to dbus-1.12.20-r1

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-16 10:04:02 +02:00
Mathieu Tortuyaux
8bd2eefc3f app-admin/setools: remove package
from 4.x setools is a pure python script, we won't include it
in Flatcar anymore

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:02 +02:00
Mathieu Tortuyaux
d86d08d640 profiles/coreos/amd64: enable selinux for runc
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:02 +02:00
Mathieu Tortuyaux
c56eec4bb4 eclass: move selinux-policy-2 to ::portage-stable
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:02 +02:00
Mathieu Tortuyaux
0ead201568 sec-policy/selinux-unconfined: sync with upstream
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:02 +02:00
Mathieu Tortuyaux
e2afa149cb sec-policy/selinux-virt: apply flatcar changes
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:02 +02:00
Mathieu Tortuyaux
e02947a905 sec-policy/selinux-virt: sync with upstream
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:01 +02:00
Mathieu Tortuyaux
4d6ff7cfca sec-policy/selinux-base-policy: flatcar changes
- run sshd (and child) as unconfined_t
- add init.patch to allow execute_no_trans,map and
exec from init to unconfined
- add AVC patch for local login and journald

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:04:01 +02:00
Mathieu Tortuyaux
d819e2afa4 sec-policy/selinux-base-policy: sync with upstream
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:03:10 +02:00
Mathieu Tortuyaux
e472af562e sec-policy/selinux-base: apply flatcar changes
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
2021-07-16 10:03:10 +02:00
Jeremi Piotrowski
743f86d4da sys-kernel/coreos-kernel: strip ROOT from TMPDIR before running dracut
Update-bootengine chroots into the sysroot and runs dracut from there.
Dracut 053 has revised TMPDIR handling and the portage TMPDIR prefixed
with ROOT leaks into the chroot. This causes dracut to abort during
setup with the error message "invalid tmpdir".

Override TMPDIR before running update-bootengine to allow dracut to
function.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-15 13:40:50 +00:00
Jeremi Piotrowski
68f2867457 sys-kernel/dracut: Apply Flatcar patches to 053
Flatcar uses custom networking scripts in initramfs, so the dracut iscsi
module needs to be patched to account for that.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-07-15 13:40:50 +00:00
Sayan Chowdhury
033048444f sys-kernel/dracut: Apply Flatcar patches
Add Flatcar specific patch to enable the iscsi module

Flatcar uses its own network module instead of the Dracut one, but the
iscsi module depends on the network. So, in order to enable the iscsi
module, we need to patch the dependency

Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-15 13:40:50 +00:00
Sayan Chowdhury
2a19f3cd76 sys-kernel/dracut: Sync with Gentoo upstream
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-07-15 13:40:50 +00:00
Sayan Chowdhury
3f857f9f2a Merge pull request #1099 from peanutduck/ticket_361
net-misc/curl: enable telnet protocol support
2021-07-15 13:11:59 +05:30
Dongsu Park
6c0742bf07 Merge pull request #932 from kinvolk/dongsu/wget-ssl
profiles: force to use ssl USE flag for wget
2021-07-15 09:39:41 +02:00
Sayan Chowdhury
31ce217f6a Merge pull request #1104 from kinvolk/linux-5.10.49-main
Upgrade Linux Kernel in main from 5.10.46 to 5.10.49
2021-07-15 10:55:24 +05:30
Kai Lüke
b55bfa3341
Merge pull request #130 from kinvolk/kai/gen-test-update
Generate test update payload and run the kola update test
2021-07-14 20:50:15 +02:00
Jeremi Piotrowski
77a0115be2 Merge pull request #186 from kinvolk/jepio/qemu-add-slirp
net-libs/libslirp: Import from Gentoo
2021-07-14 14:39:10 +02:00
Jeremi Piotrowski
40328de04b Merge pull request #929 from wernerb/add-mdio-bcm
Enable MDIO_BCM_UNIMAC for arm64
2021-07-13 09:58:28 +02:00
Kai Lüke
177bea4a74 Generate test update payload and run the kola update test
The kola update tests need a dev-key-signed update payload. This was
lacking and caused the update tests to be skipped.
Generate the test update payload for both dev builds and release builds
and run the kola tests for both. The test update payload has a special
name to not confuse it with the real update payload for releases, and
we keep the previous behavior to sign releases. Therefore, the
generate_update function wasn't used but the extract_update function
extended with generating the additional test payload.
2021-07-12 18:49:54 +02:00
Flatcar Buildbot
70cb0ed335 sys-kernel: Upgrade Kernel 5.10.46 to 5.10.49 2021-07-12 07:15:21 +00:00
Kai Lüke
dbbdb32250
Merge pull request #128 from kinvolk/kai/systemd-run-unit-name
jenkins/systemd-run-wrap.sh: randomize unit name suffix
2021-07-09 11:07:33 +02:00
Kai Lüke
d1b97aff42 jenkins/systemd-run-wrap.sh: randomize unit name suffix
The timestamp alone was not enough to prevent unit name clashes.
Add a random suffix to greater reduce the chance of hitting a clash.
2021-07-08 21:31:04 +02:00
peanutduck
b1fa2b24ee net-misc/curl: enable telnet protocol support
Add telnet useflag directly in the package.use file
2021-07-08 23:10:12 +08:00