Overlayfs currently has no good support for selinux. Backport some
patches being worked on upstream in order to make things work in a more
reasonable way.
Permit contexts with mcswriteall permissions to create files and
directories in confined domains (mcs_create.diff) and default to
creating files with the categories provided by the target directory
(mcs_range_target.diff)
the rkt group is missing in recent alpha builds even though it was added
to coreos/baselayout a while ago.
this also pulls in other recent changes to baselayout.
fixescoreos/bugs#459
The HTTP client timeout has been lowered to 10 seconds, while the
service timeout has been increased to 2 minutes. This will give Ignition
more opportunities to retry the fetch.
crossdev creates configs under `/etc/portage/package.keywords` like the following:
cross-aarch64-cros-linux-gnu/binutils arm64 -amd64 -~amd64
cross-aarch64-cros-linux-gnu/gcc arm64 -amd64 -~amd64
cross-aarch64-cros-linux-gnu/linux-headers arm64 -amd64 -~amd64
cross-aarch64-cros-linux-gnu/glibc arm64 -amd64 -~amd64
cross-aarch64-cros-linux-gnu/gdb arm64 -amd64 -~amd64
This ensures cross compilers follow the keywords of the target arch
rather than the host arch. Meanwhile in the profile when we omit the
keyword `package.accept_keywords` only ~arch for the host is implied. So
either we would need to configure crossdev to allow ~arch or we just
need to be explicit in the profile. The later is a bit easer.
We need this version for improved arm64 support and it has worth-while
improvements. None of the 4.9 related bugs in upstream should impact us:
https://bugs.gentoo.org/show_bug.cgi?id=495124
Upstream has shuffled ncurses around slots. Previously there was only:
ncurses-5.9:5
Now there are:
ncurses-5.9:0/5
ncurses-5.9:5/5
ncurses-6.0:0/6
So the new :0 slot is the package that installs everything while the :5
slot is a minimal library-only package meant to be installed along side
the new 6.0 version. All this isn't really meaningful or helpful to us
but we have to follow suit because now oodles of upstream packages
explicitly depend on the new :0 slot.
While migrating I've synced up with upstream as of commit
9c928e3de99c4b2f01f8dfd1b4cc97ae8cd181e5.
Note: Gentoo made this transition between 5.9-r4 and 5.9-r5, we are one
revision higher so -r6 is our first ebuild in the new scheme.
