mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-16 09:26:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,200 Commits 629 Branches 394 Tags 164 MiB
ef48877b47
Commit Graph

8296 Commits

Author SHA1 Message Date
Flatcar Buildbot
ed5a5c6b2d sys-kernel: Upgrade Kernel 5.15.50 to 5.15.51 2022-06-29 07:23:13 +00:00
Krzesimir Nowak
7550545520 Merge pull request #1990 from flatcar-linux/cacerts-3.80-main 
Upgrade ca-certificates in main from 3.79 to 3.80
 2022-06-28 08:27:56 +02:00
Krzesimir Nowak
911586b472 changelog: Fix link 2022-06-27 17:27:33 +02:00
Flatcar Buildbot
fd64754ec2 app-misc: Upgrade ca-certificates 3.79 to 3.80 2022-06-27 07:22:39 +00:00
Flatcar Buildbot
e639b65a2c sys-kernel: Upgrade Kernel 5.15.48 to 5.15.50 2022-06-26 07:21:29 +00:00
Sayan Chowdhury
72e2e368c4 Merge pull request #1972 from flatcar-linux/linux-5.15.48-main 
Upgrade Linux Kernel in main from 5.15.47 to 5.15.48
 2022-06-21 02:45:55 +05:30
Sayan Chowdhury
c72393a02b changelog: Add updates, security for the intel-microcode 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2022-06-17 16:16:50 +05:30
Sayan Chowdhury
e2159d417e sys-firmware/intel-microcode: Apply Flatcar patches 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2022-06-17 16:08:04 +05:30
Sayan Chowdhury
26ef0721a8 sys-firmware/intel-microcode: Sync with Gentoo upstream; updates to 20220510 
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
 2022-06-17 16:08:04 +05:30
Flatcar Buildbot
230cf32499 sys-kernel: Upgrade Kernel 5.15.47 to 5.15.48 2022-06-17 07:22:23 +00:00
Mathieu Tortuyaux
9d2c123978 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-16 17:51:43 +02:00
Mathieu Tortuyaux
506403adf4 app-emulation/containerd: remove overlay module loading 
This is now handled in `flatcar-linux/init` repo in the `modules-load.d`
config directory.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-16 17:51:42 +02:00
Mathieu Tortuyaux
250760a51b app-emulation/containerd: enable containerd 
`docker.service` has a dependency to `containerd.service`:
```
$ systemctl list-dependencies docker.service
docker.service
  containerd.service
  ...
```

If `docker.service` is not started (explicitly or via socket activation)
`containerd.service` won't start.

To ensure a seamless transition to kubernetes-1.24 let's enable by
default `containerd.service`.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-16 17:51:42 +02:00
Mathieu Tortuyaux
6ff3675810 coreos-base/coreos-init: bump commit ID 
this pulls kubernetes module configuration.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-16 17:51:41 +02:00
Flatcar Buildbot
6d1e7a498c sys-kernel: Upgrade Linux Firmware 20220509 to 20220610 2022-06-16 07:12:04 +00:00
Flatcar Buildbot
06ce732702 sys-kernel: Upgrade Kernel 5.15.44 to 5.15.47 2022-06-15 07:23:33 +00:00
Mathieu Tortuyaux
23fc9679b2 coreos-base/coreos-init: pull "delete-config" service 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-14 13:54:31 +02:00
Mathieu Tortuyaux
66733328c6 base/coreos: add ignition as a Flatcar dependency 
We add `sys-apps/ignition` as a `coreos-base/coreos` dependency to get
`/usr/libexec/ignition-rmcfg` available on the _real_ root.
Now we want `/usr/bin/ignition` to be in the chroot until it's being copied
to the initramfs but we don't want it on the actual root.

With `PKG_INSTALL_MASK`, we'll prevent `/usr/bin/ignition` to be added
to the image in the `./build_image` - at this time, initramfs is already
created and `sys-apps/ignition` is a binary package.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-14 13:54:31 +02:00
Mathieu Tortuyaux
134c67aea8 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-14 13:54:31 +02:00
Mathieu Tortuyaux
607f9b434f sys-apps/ignition: add "ignition-rmcfg" binary 
this helper removes config from VMWare and Virtualbox and should not be
directly used by the user.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-14 13:39:53 +02:00
Mathieu Tortuyaux
c1c6fa7df5 sys-apps/ignition: bump ebuild release 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-14 13:39:53 +02:00
Kai Lüke
3d642b9cb7 Merge pull request #1956 from jbguerraz/init-bump 
Init bump
 2022-06-14 12:52:46 +02:00
Jean-Baptiste Guerraz
b228dbcc31 flatcar-install: added option to create uefi boot entry 2022-06-14 10:44:23 +00:00
Jean-Baptiste Guerraz
53b5aad92b Add sys-boot/efibootmgr 2022-06-13 23:55:21 +00:00
Thilo Fromm
8202ed8bc9 Merge pull request #1954 from flatcar-linux/t-lo/arm64-cifs-realmd-sssd-adcli-go-tspi 
Add ARM64 support for cifs-utils, realmd, sssd, adcli, go-tspi
 2022-06-13 14:22:27 +02:00
Thilo Fromm
8d01613b1f cifs-utils, realmd, sssd, adcli, go-tspi: add ARM64 
This change adds multiple tools to ARM64 which were formerly only
present in the X86-64 image.

Added for ARM64:

        net-fs/cifs-utils
        sys-auth/realmd
        app-admin/adcli
        app-crypt/go-tspi

This leaves only the xenserver-pv-version and xenstore packages
exclusively on X86-64.

The change un-masks keywords amd64 and arm64 for sys-libs/liburing-2.1-r2
and keyword arm64 for dev-libs/ding-libs-0.6.1-r1, overwriting Gentoo
upstream defaults in portage-stable.

Partially fixes https://github.com/flatcar-linux/Flatcar/issues/689.
Fixes https://github.com/flatcar-linux/Flatcar/issues/690.
 2022-06-13 14:15:52 +02:00
Mike Tougeron
ee276c701f Enable arm64 version of sssd 2022-06-13 14:13:16 +02:00
Dongsu Park
177396dc3c Merge pull request #1947 from flatcar-linux/containerd-1.6.6-main 
Upgrade Containerd in main from 1.6.4 to 1.6.6
 2022-06-10 15:04:37 +02:00
Dongsu Park
3772750263 Merge pull request #1946 from flatcar-linux/runc-1.1.3-main 
Upgrade Runc in main from 1.1.2 to 1.1.3
 2022-06-10 14:16:49 +02:00
Dongsu Park
278ee0e58d changelog: add changelog for containerd 1.6.6 2022-06-10 11:42:28 +02:00
Flatcar Buildbot
d29b01fe18 app-emulation: Upgrade Containerd 1.6.4 to 1.6.6 2022-06-10 11:32:03 +02:00
Dongsu Park
7b4448ba00 Merge pull request #1943 from flatcar-linux/docker-20.10.17-main 
Upgrade Docker in main from 20.10.16 to 20.10.17
 2022-06-09 16:12:25 +02:00
Dongsu Park
7a027e532c Merge pull request #1945 from flatcar-linux/dongsu/libxml2-2.9.14 
profiles: delete libxml2 keywords
 2022-06-09 12:40:34 +02:00
Flatcar Buildbot
f80bf9be86 app-emulation: Upgrade Runc 1.1.2 to 1.1.3 2022-06-09 07:54:27 +00:00
Dongsu Park
928b1a0ba5 profiles: delete libxml2 keywords 
Now that dev-libs/libxml2 2.9.14 is stable, we do not need to accept
keywords for that.
 2022-06-08 11:58:34 +02:00
Flatcar Buildbot
d72d1f0e66 app-emulation: Upgrade Docker 20.10.16 to 20.10.17 2022-06-08 07:46:01 +00:00
Flatcar Buildbot
6772cfeba8 dev-lang: Upgrade Go 1.18.2 to 1.18.3 2022-06-06 07:29:12 +00:00
Flatcar Buildbot
16d461c7e0 dev-lang: Upgrade Go 1.17.10 to 1.17.11 2022-06-06 07:29:12 +00:00
Dongsu Park
80f9ea5246 Merge pull request #1933 from flatcar-linux/cacerts-3.79-main 
Upgrade ca-certificates in main from 3.78 to 3.79
 2022-06-03 09:04:14 +02:00
Krzesimir Nowak
56f34184df Merge pull request #1927 from flatcar-linux/linux-5.15.44-main 
Upgrade Linux Kernel in main from 5.15.43 to 5.15.44
 2022-06-02 18:48:26 +02:00
Flatcar Buildbot
8c1d28ec92 app-misc: Upgrade ca-certificates 3.78 to 3.79 2022-06-02 08:55:09 +00:00
Mathieu Tortuyaux
1f2f92dbe4 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-02 09:41:56 +02:00
Mathieu Tortuyaux
af5c44da11 sys-apps/ignition: bump commit ID 
this pulls release 2.14.0

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-06-02 09:41:51 +02:00
Flatcar Buildbot
f407b7fc05 sys-kernel: Upgrade Kernel 5.15.43 to 5.15.44 2022-05-31 07:24:47 +00:00
Flatcar Buildbot
2a605a23e8 sys-kernel: Upgrade Kernel 5.15.41 to 5.15.43 2022-05-26 07:24:02 +00:00
Dongsu Park
8356f598b1 Merge pull request #1913 from flatcar-linux/rust-1.61.0-main 
Upgrade dev-lang/rust and virtual/rust in main from 1.60.0 to 1.61.0
 2022-05-25 16:31:31 +02:00
Krzesimir Nowak
d30c97f462 Merge pull request #1900 from flatcar-linux/krnowak/pkg-updates-2021-part-2-python 
Package updates, 2021 edition, part 2 - python update
 2022-05-25 15:49:02 +02:00
Krzesimir Nowak
c070fd41c4 changelog: Add an entry 2022-05-25 15:47:12 +02:00
Krzesimir Nowak
f67e139a2b profiles: Clean up berkdb USE flags 
Disabling it per-package is a no-op since we disable berkdb globally
through the make.defaults file.

Also drop redundant enabling of berkdb in sys-libs/gdbm in target
profile, because we already do it in the base profile.
 2022-05-25 15:47:00 +02:00
Krzesimir Nowak
d5c18a906f profiles: Clean up python USE flags 
The berkdb flag is gone, sqlite flag is already enabled by default.
 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
ce54fe641d dev-python/boto: Apply Flatcar modifications 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
650892196a dev-python/boto: Sync with Gentoo 
It's from gentoo commit 99e8a93d029cb2370fb08397cdb6cd7b459b2353.
 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
a7339931a4 dev-python/distro-oem: Bump to 1.7.0 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
23041be4c2 profiles: Mask python 3.10 
It seems to be picked up for some reason during SDK build, instead of
using python 3.9.9:

emerge: there are no ebuilds to satisfy "dev-lang/python-exec[python_targets_python3_10(-)]".
(dependency required by "dev-lang/python-3.10.2_p1::portage-stable" [ebuild])
(dependency required by "sec-policy/selinux-base-2.20200818-r2::coreos" [ebuild])
(dependency required by "sec-policy/selinux-base-policy-2.20200818-r2::coreos" [ebuild])
(dependency required by "sec-policy/selinux-unconfined-2.20200818-r2::portage-stable" [ebuild])
 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
4bc01c9201 dev-lang/python-oem: Apply Flatcar modifications 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
d793efce8b dev-lang/python-oem: Copy from Gentoo 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
4e38d17efa sec-policy/selinux-base: Depend on python properly 
Otherwise it was trying to pull in the latest stable python version,
which currently is 3.10, while we still are using 3.9.
 2022-05-25 15:43:17 +02:00
Krzesimir Nowak
cc5f4ce2e5 coreos-base/hard-host-depends: Add packages pulled in by distutils eclass 2022-05-25 15:43:17 +02:00
Dongsu Park
6314760a57 dev-lang/rust: fix build issue with Rust 1.61.0 
Fix build issues with Rust 1.61.0 when applying
gentoo-musl-target-specs.patch.

```
error[E0308]: mismatched types
 -->
 compiler/rustc_target/src/spec/aarch64_gentoo_linux_musl.rs:6:24
  |
6 |     base.llvm_target =
   "aarch64-gentoo-linux-musl".to_string();
  |     ---------------- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  expected enum `Cow`, found struct `std::string::String`
  |     |
  |     expected due to the type of this binding
  |
  = note: expected enum `Cow<'static, str>`
           found struct `std::string::String`
```

Replace `to_string` with `into`.

Based on Gentoo commit 445f23597c942b087145b869ac588fc1c1eac759.
 2022-05-25 09:40:19 +02:00
Flatcar Buildbot
6dac22bbfd app-emulation: Upgrade open-vm-tools 12.0.0 to 12.0.5 2022-05-25 07:20:32 +00:00
Mathieu Tortuyaux
72c01651a5 profiles: exclude acpi files from install step 
they are not really suited for Flatcar usage.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-24 11:46:04 +02:00
Mathieu Tortuyaux
1465916f5a coreos-base/coreos: add explicit sys-power/acpid dependency 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-24 11:46:04 +02:00
Mathieu Tortuyaux
724002d665 profiles: accept acpid 2.0.33 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-24 11:46:04 +02:00
Flatcar Buildbot
4de751cb1a dev-lang: Upgrade dev-lang/rust 1.60.0 to 1.61.0 2022-05-24 07:47:23 +00:00
Mathieu Tortuyaux
7b7b935f80 Merge pull request #1912 from flatcar-linux/tormath1/gcp 
coreos-base/oem-gce: bring back shutdown scripts
 2022-05-24 09:27:36 +02:00
Krzesimir Nowak
8d9662a9a0 Merge pull request #1909 from flatcar-linux/krnowak/drop-pylint 
coreos-base/hard-host-depends: Drop dev-python/pylint
 2022-05-23 18:38:13 +02:00
Mathieu Tortuyaux
20cf9804d7 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-23 18:07:42 +02:00
Mathieu Tortuyaux
ebb6f281e7 coreos-base/oem-gce: bring back shutdown scripts 
In the `init.sh` of the OEM GCE container, we have the following
section:

```bash
wait -n "${daemon_pids[@]}" || :
kill "${daemon_pids[@]}" || :

test -n "$stopping" || exit 1

exec /usr/bin/google_metadata_script_runner --script-type shutdown
```

`shutdown` script was not executed because container was receiving a
`SIGKILL`, the started processes was not properly terminated.

According to the `systemd-nspawn` manual:
```bash
If --boot is not used and this option is not specified
the container's processes are terminated abruptly via SIGKILL
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-23 17:54:48 +02:00
Mathieu Tortuyaux
bae75b9665 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-20 16:19:18 +02:00
Mathieu Tortuyaux
63da5d5de0 sys-kernel/bootengine: pull network kargs 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-20 16:19:18 +02:00
Mathieu Tortuyaux
ce17153093 changelog: add entry 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-20 15:28:42 +02:00
Mathieu Tortuyaux
8afe6bc7a9 sys-apps/ignition: upgrade ign-converter dependency 
this pulls networkd conversion support.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-20 15:25:41 +02:00
Dongsu Park
6be5de6b4a Merge pull request #1908 from flatcar-linux/dongsu/nvidia-drivers-510.73.05 
x11-drivers/nvidia-{drivers,metadata}: update to 510.73.05
 2022-05-20 09:42:40 +02:00
Krzesimir Nowak
31797e602b Merge pull request #1906 from flatcar-linux/linux-5.15.41-main 
Upgrade Linux Kernel in main from 5.15.40 to 5.15.41
 2022-05-19 19:22:00 +02:00
Krzesimir Nowak
6b1d443f58 coreos-base/hard-host-depends: Drop dev-python/pylint 
It does not seem to be a build dependency of python.
 2022-05-19 18:08:13 +02:00
Dongsu Park
42e40811b5 changelog: add changelog for nvidia-drivers 2022-05-19 11:31:06 +02:00
Dongsu Park
61129fb1a5 x11-drivers/nvidia-{drivers,metadata}: update to 510.73.05 
Update x11-drivers/nvidia-drivers to 510.73.05, mainly to address
CVE-2022-28181, CVE-2022-28183, CVE-2022-28184, CVE-2022-28185.
 2022-05-19 11:31:06 +02:00
Flatcar Buildbot
64e54be113 sys-kernel: Upgrade Kernel 5.15.40 to 5.15.41 2022-05-19 07:23:49 +00:00
Dongsu Park
97195f9fec profiles: accept keywords ~arm64 for curl 7.83.1 
To be able to build curl 7.83.1 for arm64, we need to accept keywords
for ~arm64.
 2022-05-18 17:29:35 +02:00
Dongsu Park
72b8fe9c89 Merge pull request #1899 from flatcar-linux/dongsu/ncurses-6.3_p20220423 
sys-libs/ncurses: update to 6.3_p20220423
 2022-05-18 17:07:51 +02:00
Dongsu Park
fb60e123c7 Merge pull request #1898 from flatcar-linux/dongsu/openssl-3.0.3 
dev-libs/openssl: update to 3.0.3
 2022-05-18 15:28:46 +02:00
Dongsu Park
0ceca8b3be changelog: add security changelog for Docker 20.10.16 2022-05-18 14:59:58 +02:00
Dongsu Park
f02226d4dd changelog: add changelog for ncurses 2022-05-18 11:35:38 +02:00
Dongsu Park
53ff903403 sys-libs/ncurses: Apply Flatcar patches 
Add a symlink-usr USE flag for keeping a minimal set of terminfo
files in /usr/share/terminfo.

Also allow writes to /dev/ptmx, which sometimes causes the sandbox
to fail Jenkins builds.

Based on 09951dc3db0f79294eb223a9154f372e24c1d99d.
 2022-05-18 11:35:38 +02:00
Dongsu Park
7be073fa5c sys-libs/ncurses: update to 6.3_p20220423 
Update sys-libs/ncurses to 6.3_p20220423, mainly to address
CVE-2022-29458.

Commit-Ref: https://github.com/gentoo/gentoo/commit/a59133147f7a
 2022-05-18 11:35:30 +02:00
Dongsu Park
37f1ea2b37 changelog: add changelog for openssl 3.0.3 2022-05-18 11:10:42 +02:00
Flatcar Buildbot
46ee7963d2 app-emulation: Upgrade Docker 20.10.15 to 20.10.16 2022-05-18 07:45:34 +00:00
Krzesimir Nowak
df1f0b3e28 Merge pull request #1895 from flatcar-linux/linux-5.15.40-main 
Upgrade Linux Kernel in main from 5.15.38 to 5.15.40
 2022-05-17 17:41:00 +02:00
Mathieu Tortuyaux
4cad012bba dev-libs/openssl: Apply Flatcar modifications 
- remove unecessary files
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- mark openssl as stable for arm64 and amd64

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
 2022-05-17 11:36:27 +02:00
Dongsu Park
b8a65b0959 dev-libs/openssl: update to 3.0.3 
Update dev-libs/openssl to 3.0.3, mainly to address CVE-2022-1292,
CVE-2022-1473.

Commit-Ref: https://github.com/gentoo/gentoo/commit/296c0f547c51
 2022-05-17 11:35:14 +02:00
Flatcar Buildbot
d2dcb42d13 dev-lang: Upgrade Go 1.17.9 to 1.17.10 2022-05-16 07:37:22 +00:00
Flatcar Buildbot
b6177ccbcf sys-kernel: Upgrade Kernel 5.15.38 to 5.15.40 2022-05-16 07:30:00 +00:00
Dongsu Park
b30eb994e1 Merge pull request #1879 from flatcar-linux/firmware-20220509-main 
Upgrade Linux Firmware in main from 20220411 to 20220509
 2022-05-13 15:53:23 +02:00
Krzesimir Nowak
c5d6280026 changelog: Add an entry 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
5efb559382 profiles: Do not install the e2fsprogs devel tools 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
35ac1a04a4 profiles: Drop accept_keywords for sys-libs/talloc 
We updated to 2.3.3, which is stable for both amd64 and arm64. Also,
we have the new enough python version now.
 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
86c1c65b84 coreos/config: Drop env overrides for dead package 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
4a13a5f869 sys-libs/ldb: Move to portage-stable 
We have updated pythong and the related eclasses some time ago, so I
think this ebuild should be working fine now. Also, it needs updating,
because net-fs/samba started to require a newer version of it.
 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
6133cc6d8a profiles: Drop accept_keywords for net-nds/openldap 
The updated package became stable for both amd64 and arm64.
 2022-05-13 14:08:43 +02:00
Krzesimir Nowak
5de6530bbe coreos/config: Drop some env var overrides for net-nds/openldap 2022-05-13 14:08:43 +02:00