Krzesimir Nowak
f2f8da03f9
sys-libs/glibc: Sync with Gentoo
...
It's from Gentoo commit a3d93f81ed9442703de09b684f309d8e1d596571.
2022-10-11 16:11:52 +02:00
Krzesimir Nowak
9d3024be79
changelog: Add an entry
2022-10-11 13:03:03 +02:00
Krzesimir Nowak
6128c49a80
Merge pull request #2208 from flatcar/go-1.17.13-and-1.18.7-main
...
Upgrade Go from 1.18.6 to 1.18.7
2022-10-11 12:55:33 +02:00
Kai Lüke
ff185a491c
Merge pull request #2207 from genesiscloud/nftables-bridge-conntrack-meta
...
Enable nf_conntrack_bridge and nft_meta_bridge kernel modules
2022-10-11 11:28:37 +02:00
Lukas Stockner
46ff05ed65
Update changelog
...
Co-authored-by: Kai Lüke <pothos@users.noreply.github.com>
2022-10-11 11:23:32 +02:00
Flatcar Buildbot
d4ead663b9
dev-lang: Upgrade Go 1.18.6 to 1.18.7
2022-10-10 07:54:23 +00:00
Lukas Stockner
74ee472821
Enable nf_conntrack_bridge and nft_meta_bridge kernel modules
...
This allows to use conntrack rules for bridges in nftables
and to match on bridge interface names.
2022-10-07 15:56:07 +02:00
Flatcar Buildbot
7294ee7abe
sys-kernel: Upgrade Kernel 5.15.71 to 5.15.72
2022-10-06 07:32:31 +00:00
Flatcar Buildbot
fd4783ca0a
sys-kernel: Upgrade Kernel 5.15.70 to 5.15.71
2022-10-05 14:54:26 +02:00
Krzesimir Nowak
13e9213d84
Merge pull request #2180 from flatcar/krnowak/dev-util-update
...
Development utilities update
2022-10-05 11:32:37 +02:00
Krzesimir Nowak
aa403ffeea
changelog: Add an entry
2022-10-04 16:37:41 +02:00
Krzesimir Nowak
2e726adb32
coreos-base/coreos-init: Bring in the port customization changes
2022-10-04 15:07:17 +02:00
Krzesimir Nowak
ff6227115d
coreos-base/hard-host-depends: Drop dev-util/scons
...
There isn't anything that uses scons, so drop it from SDK.
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
ade775850b
coreos/config: Drop overrides for dev-util/dialog
...
It's not packaged in neither in overlay nor in portage-stable.
2022-10-04 14:52:10 +02:00
Dongsu Park
70e0da0687
dev-util/bsdiff: Apply Flatcar modifications
...
Apply existing Flatcar changes on top of vanilla Gentoo ebuilds:
- add arm64 keyword
- apply the sais patch
- fix a heap overflow vulnerability in bspatch included in bsdiff.
Originally the security issue was published as [FreeBSD-SA-16:29](https://www.freebsd.org/security/advisories/FreeBSD-SA-16:29.bspatch.asc ),
which pointed to a FreeBSD [patch](https://security.freebsd.org/patches/SA-16:29/bspatch.patch ).
However, the patch was a set of huge changes including other unrelated
changes. That's why it was not simple at all to apply the patch to
bsdiff. Both Gentoo and Flatcar have not included the fix.
Fortunately X41 D-SEC [examined](https://www.x41-dsec.de/security/news/working/research/2020/07/15/bspatch/ )
the issue again, and nailed down to a simple patch that can be easily
applied to other trees. We simply take the patch with minimal changes.
See also [CVE-2020-14315](https://nvd.nist.gov/vuln/detail/CVE-2020-14315 ).
It is based on the following commits:
[4ee6aa895a02](https://github.com/kinvolk/coreos-overlay/commit/4ee6aa895a02 ) ("Add arm64 keywords")
[60d47e7359d1](https://github.com/kinvolk/coreos-overlay/commit/60d47e7359d1 ) ("Change suffix sort to sais-lite")
[7d3ac2a049dd](https://github.com/kinvolk/coreos-overlay/commit/7d3ac2a049dd ) ("fix heap overflow vulnerability CVE-2020-14315")
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
e358a89307
dev-util/bsdiff: Sync with Gentoo
...
It's from Gentoo commit 98ef629ba44e42abf5dd75e2e2c44994d85bc409.
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
e64412782e
profiles: Drop outdated or redundant USE flags for dev-util/perf
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
a8f0638d7f
profiles: Drop accept_keywords for dev-util/perf
...
Updated package is stable for both amd64 and arm64.
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
f8fac84130
profiles: Drop accept_keywords for dev-util/pahole
...
Updated package is stable for both amd64 and arm64.
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
0d7e9d0971
profiles: Drop cmake from provided packages
...
It should cross-compile just fine, but let's see if it ends up being
on the production image.
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
0a6a8aa7d4
profiles: Drop keywords for dev-util/checkbashisms
...
The updated package is stable for both amd64 and arm64.
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
aa36317220
profiles: Update keywords for dev-util/bpftool
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
b22334fd58
coreos/config: Drop fixes for cmake
2022-10-04 14:52:10 +02:00
Krzesimir Nowak
678d0788ef
Merge pull request #2189 from flatcar/krnowak/update-and-fill
...
Profiles and environment overrides for packages refresh
2022-10-04 10:19:42 +02:00
Jeremi Piotrowski
1b3ddd7133
changelog: add entry for coreos-modules strip change
2022-09-30 13:10:04 +02:00
Jeremi Piotrowski
aa7aa7f13c
sys-kernel/coreos-module: use strip-debug instead of strip-unneeded
...
With `--strip-unneeded` some static symbols are also stripped from modules, making stacktraces
incomplete, and making it harder to debug kernel issues. Switch to the default setting of
`--strip-debug`, which keeps symbols intact and does not appear to lead to a measurable
size increase of the /usr partition.
2022-09-29 15:34:40 +02:00
Krzesimir Nowak
d39991c538
coreos/config: Drop linking workarounds for net-misc/curl
...
Let's see if those are fixed by now.
2022-09-29 11:58:11 +02:00
Krzesimir Nowak
8a0db2516b
profiles: Drop accept keywords for net-fs/cifs-utils
...
The updated package is stable for both amd64 and arm64.
2022-09-29 11:58:11 +02:00
Krzesimir Nowak
5d556e801f
profiles: Update keywords and unmask for new version of dev-vcs/git
2022-09-29 11:58:11 +02:00
Krzesimir Nowak
8400b95681
profiles: Drop accept keywords for sys-devel/crossdev
...
The updated package is stable for both amd64 and arm64.
2022-09-29 11:58:11 +02:00
Krzesimir Nowak
e84867785e
Merge pull request #2140 from flatcar/krnowak/vim-update
...
Update vim to v9.0.0469
2022-09-29 11:18:54 +02:00
Mathieu Tortuyaux
a8a793fa94
changelog: add entry
...
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-09-27 11:48:00 +02:00
Mathieu Tortuyaux
3e50a7fd12
sys-apps/ignition: rework ignition patches
...
`ign-converter` is now part of the Ignition codebase, it should ease the
maintaining of these patches.
Only the v24tov31 translation (and its tests) has been ported to the codebase.
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2022-09-27 11:48:00 +02:00
Dongsu Park
5e7729a745
Merge pull request #2185 from flatcar/linux-5.15.70-main
...
Upgrade Linux Kernel in main from 5.15.67 to 5.15.70
2022-09-27 09:09:07 +02:00
Krzesimir Nowak
610c41bcc5
.github: Partially revert some changes
...
It partially reverts commits 9ecbd31df40e8cf4361db7f638c089e4df3dc503
and 1b08c65f7b5797dd153898f148b98429feeacd2c. The reverted parts were
workarounds for old LTS, which used to have no run_sdk_container
stuff.
2022-09-26 14:43:36 +02:00
Krzesimir Nowak
4e4d0891e9
Revert ".github: make each apply script take parameters CHECKOUT_SCRIPTS"
...
This reverts commit f008fb5883afee1d83d636a06cc9c9b192705793.
This was introduced for old LTS that didn't use submodules in
scripts. Now it's backported, so this workaround is not needed.
2022-09-26 14:38:23 +02:00
Flatcar Buildbot
bc5705c6e0
sys-kernel: Upgrade Kernel 5.15.67 to 5.15.70
2022-09-24 07:26:04 +00:00
Krzesimir Nowak
4337abdd9a
Merge pull request #2166 from flatcar/krnowak/fix-emerge-gitclone-developer-channel
...
coreos-base/emerge-gitclone: Bring in a fix for developer channel
2022-09-21 12:26:01 +02:00
Krzesimir Nowak
48b79af088
coreos-base/emerge-gitclone: Bring in a fix for developer channel and builds
...
For the main branch (so for nightly builds) the group in
`/usr/share/flatcar/update.conf` is not "main", but "developer". This
needs a small translation when turning it into a channel
information. Without that, we are trying to checkout a nonexistent tag
named `developer-3363.0.0-…` instead of `main-3363.0.0-…`, which
fails.
In developer builds version string contains version numbers and a
build ID with plus symbol sitting between them. Git tags are formatted
in similar way, but with a dash, instead of plus. Thus the plus needs
to be replaced to obtain a proper git tag.
2022-09-20 16:34:33 +02:00
Krzesimir Nowak
13b9fa8c06
Merge pull request #2173 from flatcar/krnowak/bump-cloudinit
...
coreos-base/coreos-cloudinit: Bump to latest commit
2022-09-20 16:27:12 +02:00
Krzesimir Nowak
85fcc77801
changelog: Add entries
2022-09-20 08:40:36 +02:00
Krzesimir Nowak
35b2cbbbba
coreos-base/coreos-cloudinit: Bump to latest commit
...
This brings in a rename of the project.
2022-09-19 15:15:32 +02:00
Flatcar Buildbot
af532ac1c5
app-misc: Upgrade ca-certificates 3.82 to 3.83
2022-09-19 07:46:17 +00:00
Krzesimir Nowak
d6d7f3a190
profiles: Cleanup use flags for vim
...
Put them into targets/generic profile instead of duplicating them in
amd64/generic and arm64/generic profiles. There's isn't anything
arch-specific in those USE flags.
2022-09-16 11:10:20 +02:00
Krzesimir Nowak
b1dd9916dd
profiles: Drop accept keywords for app-editors/vim{,-core}
...
We will put our version into overlay.
2022-09-16 11:10:20 +02:00
Krzesimir Nowak
ca32170302
app-editors/vim: Apply Flatcar modifications
...
These are not Flatcar specific modifications per se. We just bump the
version from 9.0.0099 to 9.0.0469 and drop a patch that was already
applied upstream.
2022-09-16 11:09:58 +02:00
Krzesimir Nowak
2cbd77d836
app-editors/vim: Sync with Gentoo
...
It's from Gentoo commit 9711e66907f463dbafc06d8c3c0605fe44d0dc2e.
2022-09-16 11:09:29 +02:00
Krzesimir Nowak
44a3f1c84d
app-editors/vim-core: Apply Flatcar modifications
...
These are not Flatcar specific modifications per se. We just bump the
version from 9.0.0099 to 9.0.0469 and drop a patch that was already
applied upstream.
2022-09-16 11:08:16 +02:00
Krzesimir Nowak
269f9a1a86
app-editors/vim-core: Sync with Gentoo
...
It's from Gentoo commit 9a77abf00e3d75523e999e9dae30aed6e30409aa.
2022-09-16 10:57:37 +02:00
Dongsu Park
218157b62d
Merge pull request #2157 from flatcar/firmware-20220913-main
...
Upgrade Linux Firmware in main from 20220815 to 20220913
2022-09-15 16:11:57 +02:00