Commit Graph

8897 Commits

Author SHA1 Message Date
Flatcar Buildbot
cf9216166c dev-lang: Upgrade Go 1.19.5 to 1.19.6 2023-02-20 07:27:15 +00:00
Dongsu Park
818bab8f60 Merge pull request #2454 from flatcar/dongsu/gcc-glibc-cet
profiles: update sys-devel/gcc to 11.3.1_p20230120-r1
2023-02-17 16:00:04 +01:00
Dongsu Park
91393a0bea Merge pull request #2460 from flatcar/dongsu/openssh-9.2
net-misc/openssh: update to 9.2_p1-r2
2023-02-17 15:49:02 +01:00
Krzesimir Nowak
b45bed244e changelog: Add an entry 2023-02-17 12:22:38 +01:00
Krzesimir Nowak
7241464358 dev-python/distro-oem: Bump python dep to 3.10 2023-02-17 12:20:12 +01:00
Krzesimir Nowak
ac0f9ba2d8 app-emulation/wa-linux-agent: Bump python dep to 3.10 2023-02-17 12:20:12 +01:00
Krzesimir Nowak
a9cd46e40b profiles: Drop outdated accept keywords for sys-fs/btrfs-progs 2023-02-17 12:20:12 +01:00
Krzesimir Nowak
c0b5d9a78a profiles: Update USE flags for sys-fs/btrfs-progs 2023-02-17 12:20:12 +01:00
Krzesimir Nowak
f5134084d4 sys-boot/grub: Bump EAPI to 7
The ebuild uses python eclasses, which dropped support for EAPI 6
after the update. Updating EAPI required replacing the use of the
versionator eclass as it's banned in EAPI 7 or later. Fortunately,
nothing in the ebuild seemed to use anything from the eclass.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
dc7a889296 coreos-devel/sdk-depends: Add dev-python/six
The dev-python/six became a build dependency for dev-python/boto.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
842bc69144 sys-fs/btrfs-progs: Apply Flatcar modifications 2023-02-17 12:20:12 +01:00
Krzesimir Nowak
27b73a5c4a sys-fs/btrfs-progs: Sync with Gentoo
It's from Gentoo commit ed468028e725c9580a7b2ee02d6b7b9375f7a0b2.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
f7935aa5e1 dev-lang/python-oem: Apply Flatcar modifications
I changed the way we modify the ebuild by keeping the modifications as
minimal as possible, leaving disabling whatever that can be disabled
to the USE flags.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
8e045df98d profiles: Set use flags for dev-lang/python-oem
This is a thing that needs to be done just this once. The necessary
modifications to the python-oem ebuild will be done in follow-up
commit, that can be later cherry-picked if we update the package
again.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
c34577a86a coreos: Add some overrides for python-oem
This is a thing that needs to be done just this once. The necessary
modifications to the python-oem ebuild will be done in follow-up
commit, that can be later cherry-picked if we update the package
again.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
b2cc62502c dev-lang/python-oem: Update to 3.10.9
So we have a matching versions of python in OEM and SDK.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
48e842f66b profiles: Switch to python 3.10 2023-02-17 12:20:12 +01:00
Krzesimir Nowak
0ea44b439b dev-python/boto: Move to portage-stable
We did one change in setup.py. We can do it with a user patch.
2023-02-17 12:20:12 +01:00
Krzesimir Nowak
18ac5a7970 coreos-base/hard-host-depends: Drop dev-python/mako
Nothing needs it.
2023-02-17 12:20:12 +01:00
Dongsu Park
cab3e7abf9 changelog: add changelog for containerd 1.6.18 2023-02-17 10:52:35 +01:00
Flatcar Buildbot
e31bc2214b app-emulation: Upgrade Containerd 1.6.16 to 1.6.18 2023-02-17 08:23:03 +00:00
Dongsu Park
b56b3050ab changelog: add changelog for openssh 9.2 2023-02-16 11:24:38 +01:00
Sayan Chowdhury
d6ec6e5281 net-misc/openssh: Apply Flatcar patches
- Drop the init.d files.
- Remove the socket unit's rate limiting.
- Mark the package as stable.

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
Signed-off-by: Dongsu Park <dpark@linux.microsoft.com>
2023-02-16 11:24:38 +01:00
Dongsu Park
52919f1e29 net-misc/openssh: update to 9.2_p1-r2
Update net-misc/openssh to 9.2_p1-r2, mainly to address CVE-2023-25136.

Gentoo commit: a773d7e0cdb9579343c1a4437ed4ce97f9d91d1f
2023-02-16 11:24:23 +01:00
Flatcar Buildbot
035b6ee65f sys-kernel: Upgrade Linux Firmware 20230117 to 20230210 2023-02-16 07:11:01 +00:00
Dongsu Park
49a6781cf6 Merge pull request #2449 from flatcar/rust-1.67.1-main
Upgrade dev-lang/rust and virtual/rust in main from 1.67.0 to 1.67.1
2023-02-15 17:13:01 +01:00
Dongsu Park
1076894c62 profiles: update sys-devel/gcc to 11.3.1_p20230120-r1
Since the new USE flag `cet` became the default in profiles of
portage-stable, SDK bootstrap using gcc 11.3.1_p20221209 started
to fail at `sys-libs/glibc`.

```
in function `dl_open_worker_begin':
 dl-open.c:(.text+0xab4c): undefined reference to `_dl_cet_open_check'
```

That is because gcc is not correctly configured for CET.

That issue was fixed in recent upstream GCC versions,
e.g. 11.3.1_p20221209-r1 or 11.3.1_p20230120-r1.
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=016184c289f2cc6c6ade496a700a12f135fbae07
https://gitweb.gentoo.org/proj/gcc-patches.git/commit/?id=15daf0510a5fab17cd556261d688a6618391a0c1
However, gcc of Flatcar, 11.3.1_p20221209, does not have the fix.

Update sys-devel/gcc to 11.3.1_p20230120-r1 to fix that issue.

Also accept ~arm64 to keep the same version for both arches.
2023-02-15 17:04:19 +01:00
Dongsu Park
51ed887e3a dev-lang/rust: adjust ebuilds for Rust 1.67.1
Adjust ebuilds to be able to build with Rust 1.67.1.
Sync minor changes with upstream Gentoo as well.
2023-02-14 13:36:11 +01:00
Kai Lüke
30414417a7 Merge pull request #2436 from flatcar/kai/combined-status
Apply new Flatcar change of using the combined systemd log format
2023-02-14 12:00:37 +01:00
Flatcar Buildbot
84b695a0a2 dev-lang: Upgrade dev-lang/rust 1.67.0 to 1.67.1 2023-02-14 07:32:37 +00:00
Dongsu Park
00f252c52b Merge pull request #2435 from flatcar/dongsu/openssl-3.0.8
dev-libs/openssl: update to 3.0.8
2023-02-13 14:30:08 +01:00
Dongsu Park
c39cb6df2f changelog: add changelog for openssl 3.0.8 2023-02-13 14:26:53 +01:00
Mathieu Tortuyaux
9cd2474a49 dev-libs/openssl: Apply Flatcar modifications
- remove unecessary files
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- mark openssl as stable for arm64 and amd64
- continue shipping app-misc/c_rehash

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Signed-off-by: Dongsu Park <dpark@linux.microsoft.com>
2023-02-13 14:26:46 +01:00
Dongsu Park
f07f5c6b8d Merge pull request #2441 from flatcar/dongsu/github-actions-docker-url
.github: fix URL of docker release notes
2023-02-13 12:52:37 +01:00
Flatcar Buildbot
99227c00b2 app-misc: Upgrade ca-certificates 3.87 to 3.88.1 2023-02-13 07:15:56 +00:00
Dongsu Park
6dbcbc54ee .github: fix URL of docker release notes
Now that the upstream Docker release notes website has changed its
structure, the URL for Docker release notes started to have a specific
format of
https://docs.docker.com/engine/release-notes/MAJOR.MINOR/#COMBINEDFULLVERSION.

Fix the URL to make it work correctly.
2023-02-10 11:57:21 +01:00
Flatcar Buildbot
cbef9d58d9 sys-kernel: Upgrade Kernel 5.15.89 to 5.15.92 2023-02-09 14:21:23 +01:00
Kai Lueke
8d46d31234 Apply new Flatcar change of using the combined systemd log format
The boot log only showed the unit descriptions which made it hard to
know what unit was meant.
Switch to the combined unit status reporting that includes the unit
name.
2023-02-09 13:53:28 +01:00
Krzesimir Nowak
09a319bae6 changelog: Add an entry 2023-02-09 10:34:15 +01:00
Krzesimir Nowak
2644094e6c coreos-base/coreos-init, sys-apps/baselayout: Move installing symlinks
Install some of the symlinks in the baselayout package, instead of
coreos-init. Systemd started installing its private libraries in
/usr/lib64/systemd instead of /usr/lib/systemd which led to the
situation where /usr/lib64/systemd stopped being a symlink to
/usr/lib/systemd and became a separate directory. This could break
compatibility with software that expected things to be in
/usr/lib64/systemd.

Some symlink installation stays in init, though. This is to avoid
having them installed for some oem images where they become dangling.
2023-02-08 13:04:28 +01:00
Sayan Chowdhury
86b23cc1be sys-apps/systemd: Apply Flatcar modifications
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-08 13:01:32 +01:00
Sayan Chowdhury
3eca5ac51d sys-apps/systemd: Sync with Gentoo; update to 252.5
It's from Gentoo commit 5ee2ced8801f349aeaad982f72736d0b162ba1c1.
2023-02-08 13:01:32 +01:00
Dongsu Park
bd4c0572d1 dev-libs/openssl: update to 3.0.8
Sync with Gentoo, update dev-libs/openssl to 3.0.8, mainly to address
CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215,
CVE-2023-0216, CVE-2023-0217, CVE-2023-0286, CVE-2023-0401.
2023-02-08 09:00:50 +01:00
Krzesimir Nowak
ca2eb65674 Merge pull request #2404 from flatcar/krnowak/weekly
Profile changes and cleanups for weekly updates
2023-02-07 17:38:42 +01:00
Dongsu Park
dc180e9dc1 Merge pull request #2426 from flatcar/dongsu/sudo-1.19.2_p2
app-admin/sudo: update to 1.9.12_p2
2023-02-07 17:05:14 +01:00
Krzesimir Nowak
a6e7097ac8 coreos/user-patches: Add a user patch sys-devel/gcc 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
c694ab958f profiles: Mask sys-devel/gcc versions that are stable only on one arch 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
d51554d27d coreos-base/update_engine: Stop using deprecated stuff 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
14fb10149a profiles: Bump version of net-misc/rsync in accept keywords 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
d2c835e6bb profiles: Add accept keywords for net-misc/curl 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
d51b66201f profiles: Add accept keywords for net-dns/bind-tools 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
452a1201a9 profiles: Drop obsolete use flag for dev-vcs/git 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
b54879d9cc profiles: Drop accept keywords for dev-vcs/git
We update to 2.39.1, which is stable for both amd64 and arm64.
2023-02-07 15:08:07 +01:00
Krzesimir Nowak
0c15ec2569 profiles: Bump version of dev-util/bpftool in accept keywords 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
bdacc717e2 profiles: Add accept keywords for app-emulation/qemu 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
3a41c4b1b5 profiles: Add accept keywords for app-editors/vim-core 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
3c493aa788 profiles: Add accept keywords for app-editors/vim 2023-02-07 15:08:07 +01:00
Krzesimir Nowak
e3bed9f973 profiles: Add accept keywords for app-arch/ncompress
This pulls in a fix for uncompress symlink.
2023-02-07 15:08:07 +01:00
Krzesimir Nowak
9f00424e1c coreos: Drop user patch for app-arch/ncompress
We are about to update to 5.0-r1 that fixes the same issue.
2023-02-07 15:08:07 +01:00
Dongsu Park
353a9ba2a5 changelog: add changelog for iptables 1.8.8 2023-02-06 09:47:32 +01:00
Sayan Chowdhury
6a48109132 net-firewall/iptables: Apply the Flatcar patches
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2023-02-03 17:01:08 +01:00
Dongsu Park
0f2d35cc29 net-firewall/iptables: update to 1.8.8-r5
Update iptables to 1.8.8-r5.

Gentoo ref: 02b17c9bb64e147affc4acecaa0ff4151b2329bf
2023-02-03 17:01:07 +01:00
Flatcar Buildbot
69c78fbd82 app-emulation: Upgrade Containerd 1.6.15 to 1.6.16 2023-02-03 08:22:54 +00:00
Dongsu Park
382efa98fd changelog: add changelog for sudo 1.9.12_p2 2023-02-02 17:45:30 +01:00
Sayan Chowdhury
1ae0c61528 app-admin/sudo: Apply Flatcar patches
- Remove Perl Runtime Dependency
- Remove OpenLDAP schema files for sudo
- Remove sudo.conf file as it is shipped via baselayout

Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-02-02 17:45:30 +01:00
Dongsu Park
1ec00fcfcd app-admin/sudo: update to 1.9.12_p2
Update app-admin/sudo to 1.9.12_p2 mainly to address CVE-2023-22809.

Gentoo ref: ad2ac1d9c75f49275d32b857fefd43a5358192eb
2023-02-02 17:45:26 +01:00
Dongsu Park
ee58089048 Merge pull request #2416 from flatcar/rust-1.67.0-main
Upgrade dev-lang/rust and virtual/rust in main from 1.66.1 to 1.67.0
2023-02-02 14:03:08 +01:00
Kai Lueke
e31762ceec coreos-base/coreos-init: Don't create a nested symlink when it exists
This pulls in the motdgen change
https://github.com/flatcar/init/pull/88
to not create a broken symlink in the symlinked /run/flatcar/ directory
if the directory symlink /run/coreos already exists.
2023-02-01 14:06:47 +01:00
Dongsu Park
d953100387 Revert ".github: update PV in ebuilds of dev-lang/rust"
This reverts commit 285f0646e6dfb3381d2ac5555e991cc482a4d91c.

Now that the ebuild dev-lang/rust does not have a manual check for
versions, it is possible to clean up the sed commands in Github
Actions.
2023-01-31 15:45:54 +01:00
Dongsu Park
26510029ea dev-lang/rust: fix build issues with rust 1.67.0
Configure with --without=rust-docs-json-preview to avoid failures.
Remove unnecessary checks for package versions like upstream.
Clean up unnecessary patch, add new patch for 1.67.0.
2023-01-31 15:45:54 +01:00
Flatcar Buildbot
012215aeae dev-lang: Upgrade dev-lang/rust 1.66.1 to 1.67.0 2023-01-31 15:45:54 +01:00
Kai Lueke
6596b68177 coreos-base/coreos-init: Skip first boot helper if Ignition did not run
This pulls in
https://github.com/flatcar/init/pull/87
to give a nicer skip message in the log and also make clear that this
is not a bug.
2023-01-31 13:05:19 +01:00
Krzesimir Nowak
b9305f6622 Merge pull request #2413 from flatcar/krnowak/fix-bootstrap
profiles: Pick defaults for app-alternatives during bootstrap
2023-01-27 17:13:54 +01:00
Dongsu Park
975a947ba6 Merge pull request #2415 from flatcar/dongsu/cri-tools-1.24
app-emulation/cri-tools: update to 1.24.2
2023-01-27 13:13:26 +01:00
Krzesimir Nowak
c12850f476 profiles: Pick defaults for app-alternatives during bootstrap. 2023-01-27 09:07:03 +01:00
Dongsu Park
464bc43cc5 Merge pull request #2412 from flatcar/docker-20.10.23-main
Upgrade Docker in main from 20.10.22 to 20.10.23
2023-01-27 08:51:29 +01:00
Dongsu Park
ff9143a7f6 changelog: add changelog for cri-tools 1.24.2 2023-01-26 18:16:01 +01:00
Dongsu Park
40532081c3 app-emulation/cri-tools: apply Flatcar patches
Make use of the existing helpers provided by `coreos-go.eclass`.
To optimize the binary size of crictl, add "-X" to GO_LDFLAGS,
like "-X $(PROJECT)/pkg/version.Version=$(VERSION)" in the original
Makefile of cri-tools. We cannot follow way of Gentoo ebuilds like
`emake`, because Makefile of cri-tools does not allow users to pass in
${GOARCH}.

Add `arm64` to ACCEPTED_KEYWORDS.

Remove unnecessary files from installation, as well as the shell
completion eclass.
2023-01-26 18:13:41 +01:00
Kai Lüke
8fd199414a Merge pull request #2403 from flatcar/kai/initrd-rework
Rework initrd usr mount to start Ignition/Afterburn from there
2023-01-25 17:02:55 +01:00
Kai Lueke
5eedc5fa29 Rework initrd usr mount to start Ignition/Afterburn from there
This pulls in
https://github.com/flatcar/bootengine/pull/52
to reduce the size of the unified kernel image by starting Ignition/
Afterburn from the /usr partition.
This also requires to install the Ignition binary to /usr.
2023-01-25 17:02:27 +01:00
Dongsu Park
c4cea36448 app-emulation/cri-tools: sync with Gentoo
Update to 1.24.2.

Gentoo ref: 77516cb738fbcde38de8c8ebb20318a8a65df3f3
2023-01-25 16:41:18 +01:00
Dongsu Park
1c9bb64e35 app-emulation/docker: update ppc64 buildmode patch for docker 20.10.23
Docker 20.10.23 has changes around hack/make/.binary, so it is necessary
to adapt the ppc64 buildmode patch to make the build pass again.
2023-01-25 12:52:41 +01:00
Flatcar Buildbot
f675fe298d app-emulation: Upgrade Docker 20.10.22 to 20.10.23 2023-01-25 07:48:14 +00:00
Dongsu Park
98f0a8d6e1 Merge pull request #2389 from flatcar/dongsu/github-actions-fix-rust
.github: update PV in ebuilds of dev-lang/rust
2023-01-20 13:00:49 +01:00
Dongsu Park
3a8030047b Merge pull request #2400 from flatcar/linux-5.15.89-main
Upgrade Linux Kernel for main from 5.15.88 to 5.15.89
2023-01-20 12:56:09 +01:00
Krzesimir Nowak
7792f22b08 Merge pull request #2362 from flatcar/krnowak/weekly
Profile and app/shells/bash updates for the weekly update
2023-01-20 12:52:40 +01:00
Kai Lüke
829965f384 Merge pull request #2390 from flatcar/kai/populate-always
sys-apps/baselayout: Always copy missing entries over to the database
2023-01-20 11:56:49 +01:00
Kai Lueke
363ac15ddb sys-apps/baselayout: Always copy missing entries over to the database
This pulls in
https://github.com/flatcar/baselayout/pull/26
to fix the regression in Alpha/Beta (itself a fix for another
regression) where systemd-tmpfiles bailed if /etc/passwd|group didn't
have the core user, now solved by always copying missing entries over
to the databases, not only if the files didn't exist.
2023-01-20 11:23:25 +01:00
Dongsu Park
c4df65e497 Merge pull request #2394 from flatcar/firmware-20230117-main
Upgrade Linux Firmware in main from 20221214 to 20230117
2023-01-20 09:52:31 +01:00
Krzesimir Nowak
6cd03f5370 coreos: Add user-patch for app-arch/ncompress
This should fix having a dangling symlink at /usr/bin/uncompress.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
5ae5149cbe sys-apps/policycoreutils: Drop unnecessary modification
The split-usr flag is disabled for all packages in generic images, so
commenting out the symlink creation for split-usr images is not needed
any more.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
e48a011b84 profiles: Disable split-usr for generic images completely
We do specify -split-usr in make.defaults for the USE variable but
it's not enough - the base profile in portage-stable forces this flag
and this overrides our defaults. As a workaround, we were using
package.use.force to force-disable split-usr for selected
packages. Now, with addition of more split-usr-using packages in
app-alternatives the list in package.use.force would grow. Instead of
listing all the packages having split-usr in their IUSE, use the
use.force and use.mask file to unforce and mask split-usr for all
packages in generic images.

As a bonus, this also allows us to drop a customization we did in
sys-apps/policycoreutils package.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
9da62c4776 profiles: Drop accept keywords for perl-core/File-Path
It's an obsolete entry - we don't have such a package.
2023-01-20 07:29:59 +01:00
Sayan Chowdhury
55a14648c5 app-shells/bash: Apply Flatcar modifications
Signed-off-by: Sayan Chowdhury <schowdhury@microsoft.com>
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
fa616acb18 app-shells/bash: Sync with Gentoo
It's from Gentoo commit 1323a3d70d1ead5379b997bd2ef048c898dd6712.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
7ed1bf4c14 coreos-base/coreos: Pull in app-arch/ncompress
app-arch/gzip does not install uncompress any more, so pulling in
app-arch/ncompress instead to fill in the gap.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
a43f393643 profiles: Add bison to bootstrap use flags
This is to fix the following error during stage2 SDK build:

  [[ (3/3) Emerging packages ]]

!!! The ebuild selected to satisfy "app-alternatives/yacc" has unmet requirements.
- app-alternatives/yacc-1-r2::portage-stable USE="-bison -byacc -reference"

  The following REQUIRED_USE flag constraints are unsatisfied:
    exactly-one-of ( bison byacc reference )

(dependency required by "sys-devel/binutils-2.39-r4::portage-stable" [ebuild])
(dependency required by "sys-devel/gcc-11.3.1_p20221209::portage-stable" [ebuild])
(dependency required by "sys-libs/glibc-2.36-r5::coreos" [ebuild])
(dependency required by "sys-libs/glibc:2.2" [argument])
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
aa53bc2044 profiles: Bump net-misc/rsync version in accept keywords
The version we used so far was dropped, so pull something that's
newer.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
3be777a9c5 profiles: Drop accept keywords for net-misc/curl
The package became stable for arm64.
2023-01-20 07:29:59 +01:00
Krzesimir Nowak
60d186c4bc profiles: Add accept keywords for GLib packages
They are stable for amd64, but not for arm64. Add to avoid version
discrepancies.
2023-01-20 07:29:37 +01:00