23028 Commits

Author SHA1 Message Date
Krzesimir Nowak
bd5c0c6a0e check_out_of_date.py: Drop unused script
The script is potentially useful, but it seems to be unused anyway. We
can bring it back later if there's a need. Note that this will need
updating it to python3 first. Which is why I'm dropping it currently -
it's one python2 script less to port.
2021-08-18 18:52:46 +02:00
Jeremi Piotrowski
ff2481c2ed app-emulation/docker{,-cli}: switch to go1.16
Upstream has switched to go 1.16, but still doesn't use go modules. The ebuilds
needed fixing up after the automated PR was created.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-18 11:49:49 +02:00
Flatcar Buildbot
a6aa1a604d app-emulation: Upgrade Docker 20.10.7 to 20.10.8 2021-08-18 07:44:50 +00:00
Kai Lüke
4e800b6ad0 Merge pull request #1196 from kinvolk/kai/azure-oem
Compile Azure OEM contents for all boards
2021-08-16 19:43:43 +02:00
Kai Lueke
a8352fc7a9 Compile Azure OEM contents for all boards
While not used at the moment we still can lift the restriction to only
compile for the amd64 board.
2021-08-16 18:52:37 +02:00
Dongsu Park
7eb03725e1 Merge pull request #199 from peanutduck/update-dnsmasq-2.85
net-dns/dnsmasq: Bump to v2.85
2021-08-16 17:40:05 +02:00
Dongsu Park
a091274a76
Merge pull request #141 from kinvolk/dongsu/generate-au-multi-arch
build_library: support multi-arch in generate_au_zip
alpha-2969.0.0
2021-08-16 16:16:00 +02:00
Sayan Chowdhury
cc561269f9 Merge pull request #1194 from kinvolk/linux-5.10.59-main
Upgrade Linux Kernel in main from 5.10.58 to 5.10.59
2021-08-16 16:08:05 +05:30
Dongsu Park
04d9fea0c1 build_library: fix docstring issues
Fix several docstring issues, so that the docstrings could match with
the actual code.
2021-08-16 10:39:26 +02:00
Flatcar Buildbot
97a3d1282a sys-kernel: Upgrade Kernel 5.10.58 to 5.10.59 2021-08-16 07:11:04 +00:00
Sayan Chowdhury
df7015f381 Merge pull request #1189 from kinvolk/sayan/update-systemd-247.9
sys-apps/systemd: Updates to v247.9
2021-08-13 17:40:01 +05:30
Dongsu Park
ae77d17c80 Merge pull request #1183 from kinvolk/dongsu/mit-krb5-1.19.2
app-crypt/mit-krb5: update to 1.19.2
2021-08-13 11:23:42 +02:00
Sayan Chowdhury
b9d5973279 Merge pull request #1188 from kinvolk/linux-5.10.58-main
Upgrade Linux Kernel in main from 5.10.57 to 5.10.58
2021-08-13 14:48:05 +05:30
Sayan Chowdhury
fd1f496bad Merge pull request #198 from aniruddha2000/aniruddha2000/update-libuv-1.41.1
Update libuv to 1.41.1
2021-08-13 14:35:37 +05:30
Sayan Chowdhury
1bfc04fbe1 Merge pull request #196 from aniruddha2000/aniruddha2000/update-tar-1.34
Update tar to 1.34
2021-08-13 14:34:26 +05:30
Dongsu Park
34cb6d305a build_library: support multi-arch in generate_au_zip
To be able to support arm64 native SDK without cross builds, we should
make generate_au_zip support both architectures, amd64 and arm64.
Without doing that, `build_image` fails with `ERROR : Required
WHITE_LIST items ld-linux-x86-64.so.2 not found!!!`, because the
script recognizes only amd64 libs in WHITE_LIST.

We should first determine the architecture in build_image, before
running generate_au_zip, and pass the architecture, either amd64 or
arm64. Also add allow_list and ld_linux parameters to necessary
functions.
2021-08-13 10:03:33 +02:00
Dongsu Park
a7f251da44 build_library: use proper vocabulary in generate_au_zip
Replace black list with deny list, white list with allow list.
2021-08-13 09:30:53 +02:00
Flatcar Buildbot
f877517682 sys-kernel: Upgrade Kernel 5.10.57 to 5.10.58 2021-08-13 07:10:35 +00:00
Dongsu Park
7685839a2e app-crypt/mit-krb5: add warn-crossbuild.patch
Set PYTHON_COMPAT to python 3.6 and 3.7 to be suitable for the current
code base.

Add a custom patch to replace error with warning when running autoconf
for cross builds, because libkrb5 is not able to detect
cross-compilation.

Based on 64e33c9f826d8fd951fd58ba1ed70debaf65be8d .
2021-08-13 08:54:02 +02:00
Dongsu Park
78fd33033f app-crypt/mit-krb5: update to 1.19.2
Update app-crypt/mit-krb5 to 1.19.2 mainly to address CVE-2021-36222.

Gentoo ref: cce302e49bbc62cbce863f756ea8252e57259a99
2021-08-13 08:54:02 +02:00
Dongsu Park
075ef5dbe6 Merge pull request #1148 from kinvolk/containerd-1.5.5-main
Upgrade Containerd in main from 1.5.4 to 1.5.5
2021-08-13 08:49:34 +02:00
Sayan Chowdhury
977e6d9845 Merge pull request #1176 from kinvolk/linux-5.10.57-main
Upgrade Linux Kernel in main from 5.10.56 to 5.10.57
2021-08-13 00:06:30 +05:30
Sayan Chowdhury
f977110d3d sys-apps/systemd: Updates to v247.9
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2021-08-13 00:01:24 +05:30
Flatcar Buildbot
bb01f17d4a app-emulation: Upgrade Containerd 1.5.4 to 1.5.5 2021-08-12 17:46:22 +02:00
Jeremi Piotrowski
baa09b07dc
Merge pull request #129 from kinvolk/jepio/docker-20
Switch default torcx build to Docker 20.10.
2021-08-12 17:33:34 +02:00
Jeremi Piotrowski
faf23d9488 Merge pull request #931 from jepio/for-main/cgroupv2+docker-20.10
Move to unified cgroupv2 hierarchy and upgrade Docker to 20.10.
2021-08-12 17:33:08 +02:00
Jeremi Piotrowski
56e10bb557 app-emulation/containerd: add config file for use during migration
The SystemdCgroup=true setting is incompatible with kubelet
cgroupDriver: cgroupfs. So to prevent kube clusters from failing, we
will be freezing a nodes config.toml during an update. For that purpose,
we install a second configuration file that can then be selected using a
systemd drop-in unit.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 15:29:34 +00:00
Kai Lüke
3d5c05e488 Merge pull request #197 from kinvolk/kai/go-modules
eclass: import go-module from Gentoo
2021-08-12 16:42:48 +02:00
Mathieu Tortuyaux
fbeae5cc8e Merge pull request #1181 from kinvolk/tormath1/fix-flannel-selinux
sec-policy/selinux-virt: add rules to run `flannel` with SELinux enforced mode
2021-08-12 15:37:32 +02:00
Jeremi Piotrowski
ea7cfa336e coreos-base/coreos-init: add motd warning when cgroupv1 is found
This pulls in https://github.com/kinvolk/init/pull/44

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
db724e4706 coreos-base/update_engine: add postinstall hook to stay on cgroupv1
This pulls in https://github.com/kinvolk/update_engine/pull/13

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
330595c9d0 sys-apps/systemd: Switch to unified cgroup hierarchy
Now that Docker has been updated to 20.10, we can use cgroupv2 so have
systemd mount the unified cgroup hierarchy by default. Other ways of
achieving the same would have been to pass 'systemd.unified_cgroup_hierarchy=1'
on the kernel cmdline, but this way the change propagates nicely to all
OEM consumers.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
61cac349d9 app-torcx/docker: Remove torcx packages for older docker versions
Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
eff02fb3f0 .github: Adapt docker-release-main action to Docker 20
The upstream docker repository location has changed to docker/docker.
Additionally, the cli component has been split out which which requires
fetching two hashes and updating two ebuilds. We also took the chance to
align the ebuild with gentoo's, which means there are is no more live ebuild
and no symlink.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
6e085a168e coreos-base/flatcar-eks: update supported kubernetes versions for cgroupv2
We are switching flatcar to cgroupv2 which is support by docker 20.10 and
kubernetes 1.19. This requires setting the systemd cgroup driver in the kubelet
config.

Due to the unified cgroup hierarchy, kubernetes <1.19 will not work so
remove all older versions.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
31c8a6afe8 app-torcx/docker: Add a Docker 20.10 torcx image
Compared to previous torcx images the docker-cli package is a separate
package, following upstream Docker repo layout changes.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 12:00:39 +00:00
Jeremi Piotrowski
742c507270 app-emulation/docker: Apply Flatcar patches
The patches do the following:

* install flatcar specific wrappers and systemd config
* force some USE flags to default on
* allow injecting CFLAGS/LDFLAGS so that torcx can work
* force building with go1.13 (like upstream does) - this won't be
  necessary next time because docker master already uses go1.16
2021-08-12 09:58:56 +00:00
Jeremi Piotrowski
ee672bcdb9 app-emulation/docker: Sync from Gentoo
For update to docker-20.10.7.

gentoo/portage commit 0ed05ce0a8f0d1c3dfa6151e7ebb25b67c4aae16

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:58:53 +00:00
Jeremi Piotrowski
eb6661756d app-emulation/docker-proxy: Update to 0.8.0_p20210525
This is the version needed by docker 20.10.7. ROADMAP.md doesn't exist so it
has been removed from src_install.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
30a116d2e7 app-emulation/docker-proxy: Freeze version 0.8.0_p20180709
This is the version used by docker-19.03. We will be updating the live
ebuild to build docker 20.10 dependencies.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
817ad4c0db app-emulation/docker-cli: Apply Flatcar patches
We use coreos-go* eclass so that we can override several environment
variables and build with the same go version as docker upstream. These
changes are modeled after what was previously done in app-emulation/docker,
the cli ebuild has only been split out since v20.10.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
b93160fedf app-emulation/docker-cli: Import from Gentoo
Docker upstream split the cli component into a separate repo, so there is
a separate ebuild that builds the docker utility. This is a prerequisite
of the update of docker to 20.10.

This is an import from portage commit 69d01a4273a556b1205a7a575cb3811ab7e2443d.

Signed-off-by: Jeremi Piotrowski <jeremi.piotrowski@gmail.com>
2021-08-12 09:57:03 +00:00
Flatcar Buildbot
906e4c99d3 sys-process/tini: Apply Flatcar patches
We use a custom build system to remove the cmake dependency and hardcode
relevant configuration.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:57:03 +00:00
Jeremi Piotrowski
5b4f80d2b2 sys-process/tini: Sync with Gentoo upstream
For tini-0.19. Upstream commit 2e10a957da8a8a93c1f5d82011e3f6692f7b765c.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
2021-08-12 09:57:03 +00:00
peanutduck
a346d125e8 net-dns/dnsmasq: Bump to v2.85 2021-08-12 09:34:54 +00:00
Kai Lüke
1da2d646da Merge pull request #1180 from kinvolk/kai/new-subkey
coreos-base/coreos-init: embed new subkey in flatcar-install
2021-08-12 11:30:16 +02:00
Dongsu Park
e724ec668b Merge pull request #1169 from kinvolk/runc-1.0.1-main
Upgrade Runc in main from 1.0.0 to 1.0.1
2021-08-12 10:51:15 +02:00
Dongsu Park
bdd9f29187 app-emulation/docker-runc: remove obsolete comments
Now that runc version follows simple semver semantics, we do not have to
care about number of patches up to an rc version. Remove the obsolete
comments.
2021-08-12 10:04:07 +02:00
Sayan Chowdhury
75f9c43ee0 Merge pull request #1171 from kinvolk/sayan/move-expat-to-portage
dev-libs/expat: Remove patches and move to portage-stable
2021-08-12 09:47:10 +05:30
Sayan Chowdhury
1b9d7e84ba Merge pull request #195 from kinvolk/sayan/move-expat-to-portage
dev-libs/expat: Move from coreos-overlay to portage-stable
2021-08-12 09:47:03 +05:30