23028 Commits

Author SHA1 Message Date
Kai Lüke
ebba6e5e1a app-emulation/containerd: Disable shim debug logs
Debug output clutters the logs which with K8s liveness/readiness probes
quickly becomes a problem.

Fixes https://github.com/kinvolk/Flatcar/issues/313
2021-01-06 12:49:20 +01:00
Flatcar Buildbot
28c90ee8b9 dev-lang: Upgrade dev-lang/rust 1.48.0 to 1.49.0 2021-01-05 08:02:08 +00:00
Flatcar Buildbot
d961e5519e Upgrade virtual Rust in main from 1.48.0 to 1.49.0 2021-01-05 08:00:51 +00:00
Kai Lüke
e194b4b183 Merge pull request #764 from kinvolk/kai/bump-baselayout-for-resolved
sys-apps/baselayout: Point to latest repo state
2021-01-04 19:16:35 +01:00
Kai Lüke
e4cfa10306 sys-apps/baselayout: Point to latest repo state
This pulls in
https://github.com/kinvolk/baselayout/pull/10
https://github.com/kinvolk/baselayout/pull/14
https://github.com/kinvolk/baselayout/pull/11
to configure systemd-resolved.
2021-01-04 19:14:22 +01:00
Kai Lüke
29ba53843b Merge pull request #730 from f0o/issue-285-full
Update systemd-9999.ebuild to use systemd-resolved's stub resolver
2021-01-04 19:10:39 +01:00
Marga Manterola
0f7d620c01 Merge pull request #759 from kinvolk/firmware-20201218-main
Upgrade Linux Firmware in main from 20201118 to 20201218
2021-01-04 18:53:00 +01:00
Marga Manterola
63d3279946 Merge pull request #760 from kinvolk/marga-kinvolk/linux-5.10.4
Move main to kernel 5.10.4
2021-01-04 18:50:14 +01:00
Margarita Manterola
015d4701ef Move to kernel 5.10
With this change, we start tracking linux 5.10. Only a couple of config
changes were necessary:

1. Explicitly include `CONFIG_IP6_NF_IPTABLES`, as it's no longer
   implicitly included.
   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=144b0a0e608690d46e9a77819249bdd8d23bdcb6

2. Move `CONFIG_EFI_VARS` to amd64 only, as it's no longer available on
   non Intel platforms. It's been replaced by `CONFIG_EFIVARS_FS` which
   is already enabled on the common config.
   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=963fabf37f6a94214a823df0a785e653cb8ad6ea
2021-01-04 18:49:28 +01:00
Marga Manterola
75c8758fb2 Merge pull request #763 from kinvolk/marga-kinvolk/init
Track latest init commit
2021-01-04 18:15:11 +01:00
Margarita Manterola
181c13bddc Track latest init commit
Needed for kinvolk/Flatcar#278
2021-01-04 17:44:22 +01:00
Marga Manterola
df660df80e
Merge pull request #108 from kinvolk/marga-kinvolk/gce-pro
Add GCE Pro OEM type
alpha-2748.0.0
2021-01-04 11:59:44 +01:00
Flatcar Buildbot
d11f86c31c sys-kernel: Upgrade Linux Firmware 20201118 to 20201218 2020-12-24 07:22:34 +00:00
Margarita Manterola
cf7f4bd4a4 Add GCE Pro OEM type 2020-12-22 13:52:52 +01:00
Dongsu Park
17befbdad6 Merge pull request #753 from kinvolk/dongsu/kernel-config-btf
sys-kernel: enable CONFIG_DEBUG_INFO_BTF
2020-12-18 17:28:53 +01:00
Dongsu Park
6c2015484a sys-kernel: enable CONFIG_DEBUG_INFO_BTF
CONFIG_DEBUG_INFO_BTF enables debug info for BTF (BPF Type Format) and
CO-RE (BPF compile once, run everywhere).

See also https://github.com/kinvolk/Flatcar/issues/225.
2020-12-18 10:44:25 +01:00
Dongsu Park
842daeb3d2 Merge pull request #747 from kinvolk/rust-1.48.0-main
Upgrade dev-lang/rust in main from 1.47.0 to 1.48.0
2020-12-17 12:40:51 +01:00
Dongsu Park
c0065d5e68 Merge pull request #135 from kinvolk/rust-1.48.0-main
Upgrade virtual Rust in main from 1.47.0 to 1.48.0
2020-12-17 12:40:37 +01:00
Dongsu Park
84b0d50108 Merge pull request #743 from kinvolk/linux-5.9.14-main
Upgrade Linux Kernel in main from 5.9.12 to 5.9.14
2020-12-16 08:02:51 +01:00
Vincent Batts
d46b95ba29
Merge pull request #91 from kinvolk/vbatts/arm
qemu_template: use more cpus for ARM if available
alpha-2723.0.0
2020-12-15 08:29:10 -05:00
Dongsu Park
8fa4a13cb5 Merge pull request #664 from kinvolk/dongsu/sqlite-gentoo
dev-db/sqlite: move to portage-stable
2020-12-15 14:26:03 +01:00
Dongsu Park
8b5f29caa1 Merge pull request #121 from kinvolk/dongsu/sqlite-gentoo
dev-db/sqlite: update to 3.33.0
2020-12-15 14:25:51 +01:00
Kai Lüke
fe479fe71c Merge pull request #748 from kinvolk/kai/set-sysctl-rp_filter
sys-apps/baselayout: Point to latest repo state
2020-12-15 11:57:09 +01:00
Kai Lüke
eb0bb3ba0c sys-apps/baselayout: Point to latest repo state
This pulls in
https://github.com/kinvolk/baselayout/pull/13
to set sysctl rp_filter=0 and reorder how the configs are applied.
2020-12-15 11:48:38 +01:00
Kai Lüke
fc82b5c839 Merge pull request #746 from kinvolk/kai/systemd-drop-sysctl-patches
sys-apps/systemd: Drop sysctl rp_filter patches
2020-12-15 11:16:20 +01:00
Kai Lüke
ef631cd7af
Merge pull request #106 from kinvolk/kai/aws-pro
Add AWS Pro OEM type
2020-12-15 11:14:25 +01:00
Dongsu Park
dc53e59e55 dev-lang/rust: adjust patches for 1.48.0
Adjust third-party patches to fix build issues.
2020-12-15 08:51:39 +01:00
Flatcar Buildbot
f20064e51a dev-lang: Upgrade dev-lang/rust 1.47.0 to 1.48.0 2020-12-15 07:43:37 +00:00
Flatcar Buildbot
e281533d23 Upgrade virtual Rust in main from 1.47.0 to 1.48.0 2020-12-15 07:43:14 +00:00
Dongsu Park
3455ae56ec Merge pull request #735 from kinvolk/firmware-20201118-main
Upgrade Linux Firmware in main from 20200918 to 20201118
2020-12-15 07:39:45 +01:00
Kai Lüke
86afa84167 sys-apps/systemd: Drop sysctl rp_filter patches
The patches were not taking effect because they did not set
net.ipv4.conf.default.rp_filter for new interfaces. Also, they got
overwritten by the baselayout configuration which takes precedence
and is the place for Flatcar-specific sysctl settings.
The desired configuration was enfored there:
https://github.com/kinvolk/baselayout/pull/13
2020-12-14 20:50:37 +01:00
Dongsu Park
5d698a1083 Merge pull request #740 from kinvolk/dongsu/repo-2.8
dev-vcs/repo: update to 2.8 for python3
2020-12-14 16:42:14 +01:00
Sayan Chowdhury
3ac8f6a5da
Merge pull request #107 from kinvolk/sayan/fix-dev-container-path
dev_container_util.sh: Use the shflags group instead of the default flag
2020-12-14 21:10:16 +05:30
Sayan Chowdhury
95f05a9ad6
dev_container_util.sh: Use the shflags group instead of the default flag
The build_image script invokes the create_dev_container function, and
passes the `FLAGS_group` as param. Use the param, to generate the
binhost URL instead of using the DEFAULT_GROUP which stays as developer
always.

Fixes: kinvolk/Flatcar#298
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-12-14 19:30:08 +05:30
Flatcar Buildbot
d5d99ca731 sys-kernel: Upgrade coreos-kernel 5.9.12 to 5.9.14 2020-12-12 07:24:43 +00:00
Dongsu Park
7ec2d64d25 dev-vcs/repo: enable keywords for Flatcar
Enable keywords `amd64` and `arm64` for Flatcar.

It is based on the previous commit:
[ea5698d5879f](https://github.com/kinvolk/coreos-overlay/commit/ea5698d5879f)
("Add arm64 keywords")
2020-12-11 15:26:59 +01:00
Dongsu Park
d229df3c79 dev-vcs/repo: sync with Gentoo for repo 2.8
The [repo v2.10](https://groups.google.com/g/repo-discuss/c/rpSfMCl83Sk)
was released dropping python2 support. As a result, every `repo init`
failed to run. To unblock CI builds, we released mantle
[v0.15.2](https://github.com/kinvolk/mantle/releases/tag/v0.15.2),
including a workaround to set the target branch to
[`maint`](https://gerrit.googlesource.com/git-repo/+/refs/heads/maint),
which still supports python2. Now with cork v0.15.2, `cork create` or
`cork update` will work well for now.

However, the current state is quite fragile. It will get broken again
when the upstream `maint` branch changes. We should update
`dev-vcs/repo` in coreos-overlay to 2.x with python3, and get it
included in Flatcar SDK, so we could later set the target branch in
mantle back to `stable`.

At the moment, none of the source repos has the tarball for repo 2.10,
neither GCS nor Gentoo distfiles. So for now we update it to 2.8.
It will be linked to python 3.6 in Flatcar SDK.

Also note that we do not have to keep `files/repo-1.25` script in the
coreos-overlay repo, because the script is simply identical to the
upstream `repo` script. I am not sure why the third-party script was
there in the first place. So simply remove the script.
2020-12-11 15:26:57 +01:00
Kai Lüke
5e0fafa48a Merge pull request #739 from kinvolk/kai/containerd-cri-plugin
app-emulation/containerd: Enable the CRI plugin
2020-12-11 14:30:27 +01:00
Kai Lüke
ca5095f497 app-emulation/containerd: Enable the CRI plugin
Kubernetes uses containerd through the cri plugin which currently is
disabled due to it listening on a TCP port. Now the plugin is not
listening on a TCP port anymore but uses the same socket as gRPC.
We have documented how to enable it in
https://kinvolk.io/docs/flatcar-container-linux/latest/container-runtimes/switching-from-docker-to-containerd-for-kubernetes/
but it should work by default.

Fixes https://github.com/kinvolk/Flatcar/issues/283
2020-12-11 13:03:27 +01:00
Flatcar Buildbot
aa0b1e443d sys-kernel: Upgrade Linux Firmware 20200918 to 20201118 2020-12-10 07:09:38 +00:00
Dongsu Park
33bd8598d5 Merge pull request #732 from kinvolk/dongsu/pam-1.5.1
sys-libs/pam: update to 1.5.1, fix auth issues
2020-12-09 18:09:12 +01:00
Dongsu Park
018f7dc11e sys-apps/baselayout: fix auth issue with pam 1.4
Without the fix, no ssh login works, no console login works.
2020-12-09 18:08:41 +01:00
Dongsu Park
b6784e0c3e Merge pull request #733 from kinvolk/dongsu/github-actions-firmware
.github: add Github Actions for auto-updating linux-firmware
2020-12-09 18:05:49 +01:00
Dongsu Park
7b6879079e Merge pull request #728 from kinvolk/dongsu/bsdiff-CVE-2014-9862
dev-util/bsdiff: sync with Gentoo for integer signedness error
2020-12-09 18:04:18 +01:00
Kai Lüke
f84ca169e5 Add AWS Pro OEM type
This is the initial creation of an AWS Pro image coming with support,
and features added on top of it.
2020-12-09 16:38:28 +01:00
Dongsu Park
57e725117f sys-libs/pam: use PATCHES for third-party patches
We should use PATCHES for the list of third-party patches, especially
for EAPI=7.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
5515bbfefb sys-auth/polkit: Replace virtual/pam with sys-libs/pam
We are getting rid of the virtual/pam package. The package provided a
dependency on one of pam or openpam. It looks like Gentoo dropped
openpam, making virtual/pam unnecessary. Also, existence of
virtual/pam causes some circular dependencies to manifest during
emerging.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
f8db3e5f92 sys-auth/google-oslogin: Replace virtual/pam with sys-libs/pam
We are getting rid of the virtual/pam package. The package provided a
dependency on one of pam or openpam. It looks like Gentoo dropped
openpam, making virtual/pam unnecessary. Also, existence of
virtual/pam causes some circular dependencies to manifest during
emerging.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
dcb37a9320 app-emulation/open-vm-tools: Update a comment about pam
We are getting rid of the virtual/pam package. The package provided a
dependency on one of pam or openpam. It looks like Gentoo dropped
openpam, making virtual/pam unnecessary. Also, existence of
virtual/pam causes some circular dependencies to manifest during
emerging. This package does not depend on virtual/pam outright, but
let's avoid having an out-of-date comment.
2020-12-09 14:51:36 +01:00
Krzesimir Nowak
34d4663480 sys-auth/pambase: Add README.md 2020-12-09 14:51:36 +01:00