28179 Commits

Author SHA1 Message Date
Alex Crawford
5482bcac59 coreos-base/oem-azure: use cloud-init --oem flag 2014-10-11 09:21:31 -07:00
Alex Crawford
47fdbb3507 app-emulation/wa-linux-agent: bump agent and allow config of 'core'
Patches have been merged upstream. Add a special case for 'core' user, allowing
the agent to configure it.
2014-10-10 18:28:19 -07:00
Vito Caputo
6b4a52aecb Merge pull request #913 from vcaputo/locksmith_019
locksmith: Stop leaking dbus.Conn in etcdActive
2014-10-10 14:12:56 -07:00
Vito Caputo
7ce8b2a90c locksmith: Stop leaking dbus.Conn in etcdActive
Fixes ooms in locksmithd.
2014-10-10 15:59:37 -04:00
Chris Armstrong
facc50b43e coreos-kernel: enable Ceph FS 2014-10-10 10:36:18 -06:00
Michael Marineau
d152564ef6 Merge pull request #908 from brianredbeard/mmc-sd-driver
coreos-kernel: Adding MMC/SDHCI drivers
2014-10-09 12:22:39 -07:00
Brian 'Redbeard' Harrington
55dc54d040 coreos-kernel: Adding MMC/SDHCI drivers
Adding the generic MMC driver as well as the corresponding SDCHI
components.  This will allow access for hardware which utilizes
MMC, SD, & SDHCI devices often used in embedded systems and for
emergency recovery partitions.
2014-10-09 11:54:59 -07:00
Alex Crawford
44520881c7 build_image, image_to_vm: add disk-size assertions
Assert that the image is a multiple of 1 MiB
2014-10-08 21:09:54 -07:00
Michael Marineau
4562fa778b Merge pull request #909 from marineam/open-vm-tools
open-vm-tools: fix build-time dependencies
2014-10-08 21:07:06 -07:00
Michael Marineau
392869e36d open-vm-tools: fix build-time dependencies
Although we don't want glib and procps to be in the runtime dependencies
due to the way OEM packages are handled we still want them included as
build-time dependencies so compilation is actually successful. :)
2014-10-08 21:01:15 -07:00
Michael Marineau
c4fb64a948 Merge pull request #339 from marineam/hackery
Misc hackery
2014-10-08 20:53:43 -07:00
Michael Marineau
0d3a849e2b disk_layout: adjust ROOT partition sizes to fill new alignment
The new disk size alignment left too much extra space at the end of the
disk which would lead to pointless resizing on first boot. Fill in the
extra space so that no more than 1MB is left unused.
2014-10-08 20:40:54 -07:00
Michael Marineau
e77e4e5499 disk_layout: Align disk sizes to both 1MB and cylinder boundaries.
The VHD disk format internally includes CHS addressing and qemu-img
respectfully aligns disk images to the common 16 heads 63 sectors
geometry when possible. This is unfortunate since images uploaded to
Azure must also be aligned to 1MB we normally do.

Since qemu-img doesn't have a way to handle this well right now adjust
our existing alignment logic to create disk images aligned to both.
2014-10-08 20:40:45 -07:00
Michael Marineau
e361e9170e vm_image_util: Enable new VMware OEM package. 2014-10-08 20:40:45 -07:00
Michael Marineau
bdb2556467 Merge pull request #907 from marineam/open-vm-tools
VMware OEM and open-vm-tools
2014-10-08 18:27:48 -07:00
Michael Marineau
a1e3d135d3 oem-vmware: Add VMware OEM package, uses open-vm-tools
Originally contributed by Camilo Aguilar <camilo.aguilar@gmail.com>
2014-10-08 16:55:45 -07:00
Camilo Aguilar
54b9e0d1fc board-packages: build open-vm-tools binary packages. 2014-10-08 16:55:45 -07:00
Michael Marineau
bc607bf760 app-emulation/open-vm-tools: Add open-vm-tools
Stripped down open-vm-tools ebuild for installing to /usr/share/oem

Based on efforts by:
    Camilo Aguilar <camilo.aguilar@gmail.com>
    Alex Crawford <alex.crawford@coreos.com>
2014-10-08 16:55:45 -07:00
Michael Marineau
bb1c2559fb grub_install: work around intermittent missing loopback partitions
I am unsure exactly what situation is causing the loopback partition
device node to not exist when it is being mounted but this should help
work around the situation and log loudly about it so we can hopefully
figure out where to dig further.
2014-10-08 12:24:01 -07:00
Michael Marineau
7d12a92f1b dev-libs/libdnet: simplify further, remove python support 2014-10-08 11:19:26 -07:00
Camilo Aguilar
4bf552bfd5 dev-libs/libdnet: customize libdnet ebuild for OEM
Dependency required by open-vm-tools.
2014-10-08 11:13:14 -07:00
Michael Marineau
cf3e001a11 Merge pull request #338 from c4milo/vmware-vhardware-version-upgrade
Upgrades virtual hardware version to a more reasonable minimum default
2014-10-08 11:08:11 -07:00
Michael Marineau
1504fed256 Merge pull request #140 from marineam/qemu
bump(app-emulation/qemu): sync with upstream
2014-10-07 14:57:03 -07:00
Michael Marineau
560f0c1445 bump(app-emulation/qemu): sync with upstream
Packages updated:
  app-emulation/qemu
  sys-firmware/ipxe
  sys-firmware/seabios
  sys-firmware/sgabios
  sys-firmware/vgabios
2014-10-07 14:33:58 -07:00
Alex Crawford
0fcf7604a7 Merge pull request #899 from crawford/azure
azure: Add support for Azure
2014-10-06 15:44:55 -07:00
Alex Crawford
c622ae2bf7 coreos-base/oem-azure: add wa-linux-agent to oem 2014-10-06 14:20:55 -07:00
Alex Crawford
928c7158a7 app-emulation/wa-linux-agent: add initial WALinuxAgent 2014-10-05 16:23:53 -07:00
Michael Marineau
95a52eb4ed Merge pull request #904 from marineam/vmware-dhcp
coreos-init: enable DHCP broadcast flag on VMware
2014-10-03 15:17:13 -07:00
Alex Crawford
122dd11e64 Merge pull request #903 from crawford/python
dev-lang/python-oem: add support for /etc/os-release
2014-10-03 14:31:53 -07:00
Alex Crawford
a05582634d dev-lang/python-oem: add support for /etc/os-release
Pulled upstream patch from http://bugs.python.org/issue17762.
2014-10-03 14:22:23 -07:00
Michael Marineau
ec72d7fc7c coreos-init: enable DHCP broadcast flag on VMware
Fixes https://github.com/coreos/bugs/issues/12 for good this time.
2014-10-03 12:20:41 -07:00
Michael Marineau
5ab02e5b4c Merge pull request #900 from abuchanan920/network-config-fix
Fixes issue of vagrant not assigned requested IP address.
2014-10-02 22:02:24 -07:00
Brian Waldon
af523e5a5a Merge pull request #902 from bcwaldon/bump-fleet
fleet v0.8.3
2014-10-02 16:23:45 -07:00
Brian Waldon
1c7a9b246c fleet: bump to v0.8.3 2014-10-02 14:17:59 -07:00
Andrew W. Buchanan
110fcd0eda Fixes issue of vagrant not assigned requested IP address. This was due to the switchover of the network interfaces to ethX format. 2014-10-02 15:35:23 -04:00
Michael Marineau
66e07f935a Merge pull request #895 from marineam/verity
verity: prune old broken package from ChromeOS
2014-10-01 13:40:46 -07:00
Michael Marineau
38324a9191 verity: prune old broken package from ChromeOS
When we add verity support we will be relying on generic packages such
as cryptsetup instead of whatever unknown bits are in this code base. It
has stopped building and I thought I removed it ages ago. Oops.
2014-10-01 12:28:57 -07:00
Alex Crawford
0b026a8b2a Merge pull request #888 from crawford/cloudinit
coreos-base/coreos-cloudinit: bump to v0.10.5
2014-10-01 11:23:32 -07:00
Michael Marineau
ef40f66532 Merge pull request #894 from marineam/fleet
fleet: prune old version
2014-10-01 11:12:06 -07:00
Michael Marineau
248be1c964 Merge pull request #893 from marineam/bash50
bash: fix CVE-2014-7186 and CVE-2014-7187
2014-10-01 11:11:51 -07:00
Brian Waldon
28ac16e380 Merge pull request #892 from bcwaldon/bump-fleet
fleet v0.8.2
2014-10-01 11:10:05 -07:00
Michael Marineau
d6a114ac27 fleet: prune old version 2014-10-01 11:08:43 -07:00
Michael Marineau
a87f75aa8d bash: fix CVE-2014-7186 and CVE-2014-7187
Sync up with upstream gentoo, pulling in the final version of the patch
for these issues. This is functionally equivalent to 4.2_p51 but
upstream hasn't officially announced that version yet it seems.
2014-10-01 10:43:45 -07:00
Brian Waldon
7070a34371 fleet: bump to v0.8.2 2014-09-30 14:33:39 -07:00
Camilo Aguilar
7729258fda Upgrades virtual hardware version
Version 4 is too low. Some VMware products even crash trying to
upgrade it to a greater version (VMware Fusion 6 Pro). Having at
least 7 will allow us to use some modern features in most VMware
products, such as enabling vmxnet3 virtual network adapters or adding
much more memory and cpu cores to virtual machines.
2014-09-29 16:00:03 -05:00
Michael Marineau
b8132ad96f Merge pull request #889 from marineam/bash50
bash: function export hardening patch
2014-09-28 20:37:34 -07:00
Michael Marineau
9eaacc58c6 bash: function export hardening patch
Another day another bash version bump. This is the final version of the
patch to add a special prefix and suffix to exported functions in the
environment, preventing bugs similar to the previous two from becoming
remotely exploitable.

http://lists.gnu.org/archive/html/bug-bash/2014-09/msg00279.html

There still remain two less significant memory-access issues, dubbed
CVE-2014-7186 and CVE-2014-7187. So expect another bump soon.
http://www.openwall.com/lists/oss-security/2014/09/25/32
2014-09-28 20:10:36 -07:00
Alex Crawford
2ccea0734c coreos-base/coreos-cloudinit: bump to v0.10.5 2014-09-28 09:37:53 -07:00
Vito Caputo
2a1aa70606 Merge pull request #887 from vcaputo/nohpnssh
Disable "high performance ssh" openssh patch Gentoo includes
2014-09-26 14:59:34 -07:00
Vito Caputo
21cd882a03 Disable "high performance ssh" openssh patch Gentoo includes
Prioritizing security and stability over performance in SSH, omitting
this kind of patch is generally more consistent with our objectives.

Visibly this removes "-hpn14v4" from the OpenSSH protocol banner:
SSH-2.0-OpenSSH_6.6p1-hpn14v4

Discussion: https://github.com/coreos/bugs/issues/149
2014-09-26 15:18:20 -04:00