28179 Commits

Author SHA1 Message Date
Michael Marineau
85a218d3a1 Merge pull request #886 from marineam/gsutil
gsutil: upgrade to 4.6, switch to using upstream ebuilds
2014-09-26 12:12:36 -07:00
Michael Marineau
d9a348413e Merge pull request #138 from marineam/gsutil
bump(net-misc/gsutil): sync with upstream
2014-09-26 12:12:32 -07:00
Michael Marineau
67acc2e0bc Merge pull request #885 from marineam/go
go: update to go 1.3.2
2014-09-26 12:12:28 -07:00
Michael Marineau
b72b7dc94d gsutil: upgrade to 4.6, switch to using upstream ebuilds 2014-09-25 22:17:10 -07:00
Michael Marineau
695bba410f bump(net-misc/gsutil): sync with upstream
Packages updated:
  dev-python/boto
  dev-python/gcs-oauth2-boto-plugin
  dev-python/google-api-python-client
  dev-python/httplib2
  dev-python/python-gflags
  dev-python/retry-decorator
  dev-python/socksipy
  net-misc/gsutil
2014-09-25 22:13:22 -07:00
Michael Marineau
5cf6b403b3 go: update to go 1.3.2 2014-09-25 20:05:57 -07:00
Michael Marineau
6ad724e336 Merge pull request #882 from marineam/bash-fix
bash: fix CVE-2014-7169
2014-09-25 19:11:25 -07:00
Michael Marineau
fe831fce74 bash: fix CVE-2014-7169
http://www.openwall.com/lists/oss-security/2014/09/26/1
2014-09-25 18:58:28 -07:00
Michael Marineau
d7389284cd Merge pull request #881 from marineam/bump
coreos-init: re-enable motdgen
2014-09-25 17:17:10 -07:00
Michael Marineau
cc17c350cd coreos-init: re-enable motdgen
Pull in https://github.com/coreos/init/pull/133
Fixes https://github.com/coreos/bugs/issues/145
2014-09-25 17:02:26 -07:00
Michael Marineau
11af495da8 Merge pull request #335 from marineam/etc
prod_image_util: clean up /etc cleanup code
2014-09-25 16:55:41 -07:00
Michael Marineau
d7f17be6cd Merge pull request #879 from marineam/etc
profiles: trim more config files from /etc
2014-09-25 16:55:37 -07:00
Michael Marineau
da86c34d75 prod_image_util: clean up /etc cleanup code
Pruning files via INSTALL_MASK in the profile is a bit more apropriate
since it allows us to keep most of that info in one place. The only
parts that need to be deleted or adjusted here are inputs and outputs of
`env-update` which has to be run after everything is installed.

Previously we didn't actually clean up `env.d` at all which lead at
least one user to think they should edit those files and run
`env-update` themselves but we don't ship that tool on prod images.
2014-09-25 16:13:29 -07:00
Michael Marineau
afe2048e20 profiles: trim more config files from /etc
Some of these were deleted by build_image, others were still being
shipped but aren't really needed.

The big question mark is LVM, it isn't clear if LVM's default behavior
is actually sane or if the configs are needed to make it sane. Either
way we were already removing this, but something to note in case issues
crop up eventually.
2014-09-25 16:11:57 -07:00
Michael Marineau
96a4cafe23 Merge pull request #878 from marineam/bash
bash: disable extra performance patches and networking support
2014-09-25 15:31:13 -07:00
Michael Marineau
7a2cfade6f bash: disable extra performance patches and networking support
Killing the performance patch was suggested by @vcaputo and I think we
can go without networking support as well.
2014-09-25 15:05:40 -07:00
Michael Marineau
7d654662b9 Merge pull request #877 from marineam/bash
bash: sync up with latest version in Gentoo
2014-09-25 14:02:19 -07:00
Michael Marineau
028dadfb13 bash: sync up with latest version in Gentoo
This fixes another piece of the mess but the story isn't over yet.

http://www.openwall.com/lists/oss-security/2014/09/25/10
https://bugs.gentoo.org/show_bug.cgi?id=523592
2014-09-25 13:35:16 -07:00
Alex Crawford
9fb5e1779d Merge pull request #850 from crawford/flags
oems: use --oem flag when running cloudinit
2014-09-24 19:17:18 -07:00
Michael Marineau
d16c274944 Merge pull request #875 from marineam/ipv4
coreos-init: disable downloading images over ipv6 in coreos-install
2014-09-24 16:10:05 -07:00
Michael Marineau
179619b008 coreos-init: disable downloading images over ipv6 in coreos-install
Some users are unable to fetch images over IPv6, use IPv4 only until we
sort out what is wrong with Google storage.
2014-09-24 15:58:00 -07:00
Vito Caputo
2b72b5113b Merge pull request #873 from vcaputo/ue_workon_bump
Update update_engine ebuild for oemversion support
2014-09-24 13:58:08 -07:00
Alex Crawford
0a00950f62 coreos-base/oem-rackspace-onmetal: use --oem flag 2014-09-24 13:39:19 -07:00
Alex Crawford
cc7bd7a792 coreos-base/oem-ec2-compat: use --oem flag 2014-09-24 13:38:53 -07:00
Alex Crawford
6448bf8198 coreos-base/oem-digitalocean: use --oem flag 2014-09-24 13:37:58 -07:00
Vito Caputo
ab5cd0b1bc Update update_engine ebuild for oemversion support 2014-09-24 15:29:21 -04:00
Alex Crawford
2d27d88d32 Merge pull request #872 from crawford/bash
app-shells/bash: sync ebuild and patches
2014-09-24 12:21:36 -07:00
Michael Marineau
58b0fe08e2 Merge pull request #871 from marineam/cgpt
vboot_reference: fix cgpt with cciss block devices
2014-09-24 12:17:07 -07:00
Vito Caputo
f835dd8b9e Merge pull request #334 from vcaputo/i2v_def_oem_arg
Added --oem_pkg option to image_to_vm.sh
2014-09-24 12:14:37 -07:00
Vito Caputo
e67ee7e0e0 Merge pull request #867 from vcaputo/oem_version
Propagate $PVR to the oem-*/files/cloud-config.yml files as version-id
2014-09-24 12:00:37 -07:00
Alex Crawford
46a3c6c009 app-shells/bash: sync ebuild and patches 2014-09-24 11:43:23 -07:00
Michael Marineau
cf329bbc18 vboot_reference: fix cgpt with cciss block devices 2014-09-24 11:41:07 -07:00
Vito Caputo
454e4c1ad4 Added --oem_pkg oem override option to image_to_vm.sh
This sets the IMG_FORCE_OEM_PACKAGE variable to the supplied string.  If a
':' is present, what follows it gets put in the IMG_FORCE_OEM_USE variable
and what precedes in the former.

_get_vm_opt() has been modified to generally support forced overrides such
as this one, simply set variables named IMG_FORCE_$opt.

Now you can do things like:

for fmt in cloudstack \
		digitalocean \
		ec2-compat:ec2 \
		ec2-compat:openstack \
		ec2-compat:brightbox \
		exoscale \
		gce \
		hyperv \
		rackspace \
		rackspace-onmetal; do
	./image_to_vm.sh --format=qemu --oem_pkg=$fmt
	../build/images/amd64-usr/latest/coreos_developer_qemu.sh -curses
done

rather than having to modify build_library/vm_image_util.sh to test oem
builds in qemu.
2014-09-24 14:28:56 -04:00
Michael Marineau
00e659c1ff Merge pull request #870 from marineam/scsi
coreos-kernel: enable AACRAID and AIC94XX SCSI drivers
2014-09-24 11:16:23 -07:00
Michael Marineau
f23cfcf1a8 coreos-kernel: enable AACRAID and AIC94XX SCSI drivers 2014-09-24 11:05:50 -07:00
Vito Caputo
fd08f00578 Propagate $PVR to the oem-*/files/cloud-config.yml files as version-id 2014-09-24 13:55:39 -04:00
Michael Marineau
81f49d1d5c Merge pull request #869 from marineam/ipset
coreos-kernel: enable support for using ipset with iptables
2014-09-24 10:53:46 -07:00
Michael Marineau
002c31ed53 coreos-kernel: enable support for using ipset with iptables
We enabled ipset support a while back but missed NETFILTER_XT_SET which
is needed for using ipsets in iptables rules. Enable a few other
iptables options we were missing just in case someone wants them.
2014-09-24 10:42:22 -07:00
Michael Marineau
59d368e229 Merge pull request #866 from eyakubovich/master
docker: wait for docker.socket to fix race in docker.service
2014-09-24 10:25:07 -07:00
Alex Crawford
96f1fc9b75 Merge pull request #868 from crawford/bash
app-shells/bash: bump to 4.2_p48
2014-09-24 10:10:18 -07:00
Alex Crawford
9b14607d69 app-shells/bash: bump to 4.2_p48
Fixes a remote code execution exploit.
http://seclists.org/oss-sec/2014/q3/649
2014-09-24 10:05:50 -07:00
Eugene Yakubovich
86414187aa docker: wait for docker.socket to fix race in docker.service 2014-09-23 12:36:26 -07:00
Michael Marineau
782a7fd9ca Merge pull request #333 from marineam/oem
vm_image_util: use new azure and hyperv oem packages
2014-09-22 17:42:57 -07:00
Michael Marineau
a1a86ac731 vm_image_util: use new azure and hyperv oem packages 2014-09-22 15:21:20 -07:00
Michael Marineau
8d7976808d Merge pull request #863 from marineam/oem
Add minimal OEM packages for Azure and Hyper-V
2014-09-22 13:25:44 -07:00
Michael Marineau
1b8b8e8b65 Add minimal OEM packages for Azure and Hyper-V
We can now can generate images for Azure/Hyper-V, add basic cloud config
to generate /etc/oem-release to identify these images. The Azure images
still lack support for the agent required in that environment.
2014-09-22 11:37:35 -07:00
Michael Marineau
f32ff20de5 Merge pull request #862 from marineam/updates
Misc system updates
2014-09-19 12:08:27 -07:00
Michael Marineau
52c2795cd1 update_engine: big dead code cleanup remove dependency on udev 2014-09-19 10:53:53 -07:00
Michael Marineau
aaf6ffbfb3 coreos-init: update to latest revision, small coreos-install update 2014-09-19 10:50:36 -07:00
Michael Marineau
218c696ccc Merge pull request #332 from szarkos/hv_azure-build
Initial Hyper-V & Azure build support
2014-09-18 15:46:39 -07:00