mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-20 22:11:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
8,841 Commits 615 Branches 394 Tags
Commit Graph

7079 Commits

Author SHA1 Message Date
Dongsu Park
ce63084f8e sys-libs/glibc: sync with Gentoo for 2.33-r5 
Update glibc to 2.33-r5, mainly to address CVE-2021-35942 .

Gentoo ref: 5cde29d04e2da37ded900130f0f3dea13fcc350f
 2021-08-05 09:38:10 +02:00
Flatcar Buildbot
c72b4d1450 sys-kernel: Upgrade Kernel 5.10.55 to 5.10.56 2021-08-05 07:10:12 +00:00
Jeremi Piotrowski
7cf88348f3 Merge pull request #1162 from kinvolk/jepio/amazon-ssm-agent-xcompile 
amazon-ssm-agent: re-add dependency to oem-ec2-compat
 2021-08-04 10:20:15 +02:00
Dongsu Park
ae2e9e0376 dev-lang/rust: adjust libressl patch for Rust 1.54 
We need to adjust 1.47.0-libressl.patch to Rust 1.54, to fix the build
error caused by the invalid patch.
 2021-08-04 10:19:14 +02:00
Flatcar Buildbot
89e18d585e dev-lang: Upgrade dev-lang/rust 1.53.0 to 1.54.0 2021-08-04 10:19:07 +02:00
Sayan Chowdhury
4052dc2ce5 Merge pull request #1151 from kinvolk/sayan/update-libarchive-3.5.1 
profiles: Remove libarchive-3.3.1 from ACCEPT_KEYWORDS
 2021-08-03 20:15:07 +05:30
Sayan Chowdhury
7d0075e163 Merge pull request #1150 from kinvolk/sayan/update-expat-2.4.1 
dev-libs/expat: Sync with Gentoo upstream; updates to 2.4.1
 2021-08-03 20:14:36 +05:30
Sayan Chowdhury
2726b348d6 profiles: Remove libarchive-3.3.1 from ACCEPT_KEYWORDS 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-08-03 19:50:09 +05:30
Sayan Chowdhury
ae033984a8 Merge pull request #1157 from kinvolk/linux-5.10.55-main 
Upgrade Linux Kernel in main from 5.10.52 to 5.10.55
 2021-08-03 19:33:20 +05:30
Jeremi Piotrowski
cbc6a8fb90 coreos-base/oem-ec2-compat: make ssm agent conditional on ec2 
and properly include all deps in RDEPEND.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-08-03 13:32:26 +00:00
Jeremi Piotrowski
26767b01aa Revert "Revert "Build app-emulation/amazon-ssm-agent with EC2 AMI images"" 
Now that the OEM partition is a btrfs partition with compression, we have
enough space to install ssm agent.

This reverts commit b6abb59c544be13e923a3e7240b5c9395c281fca.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-08-03 12:55:42 +00:00
Jeremi Piotrowski
0875344378 app-emulation/amazon-ssm-agent: cross-compile and use correct go version 
The ebuild was missing a call to go_export() which exports GOARCH, and so was
always built for host architecture. While COREOS_GO_VERSION was specified as
go1.12, src_compile() has to use '${EGO}' to make use of it, so we were
building with go1.16 (latest).  Upstream builds with 1.12 for this version, so
we will do the same.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-08-03 12:33:48 +00:00
Jeremi Piotrowski
ba7b460518 Merge pull request #1130 from kinvolk/jepio/arm64-sdk-support 
enable arm64 SDK bootstrap
 2021-08-03 14:28:15 +02:00
Kai Lüke
1b2ab70890 sys-kernel/bootengine: finish network-cleanup.service before rootfs switch 
This pulls in
https://github.com/kinvolk/bootengine/pull/27
 2021-08-03 10:45:23 +02:00
Kai Lüke
2148ced2f2 Merge pull request #1153 from kinvolk/kai/ignition-oem-auto 
sys-apps/ignition: Ignore filesystem format mismatches for the OEM partition
 2021-08-03 10:39:59 +02:00
Kai Lüke
9139387127 sys-apps/ignition: Ignore filesystem format mismatches for the OEM partition 
This pulls in
https://github.com/kinvolk/ignition/pull/22
 2021-08-03 10:39:40 +02:00
Dongsu Park
c449236fb1 Merge pull request #934 from kinvolk/dongsu/delete-boost-build-1.67 
dev-util/boost-build: delete boost-build 1.67
 2021-08-03 10:26:59 +02:00
Sayan Chowdhury
39db514ce3 dev-libs/expat: Apply Flatcar changes 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-08-02 22:22:14 +05:30
Sayan Chowdhury
564f8f7b1d dev-libs/expat: Sync with Gentoo upstream; updates to 2.4.1 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-08-02 22:22:14 +05:30
Sayan Chowdhury
af9d9bc3ca nvidia-{drivers, metadata}: Update NVIDIA to 470.57.02 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-08-02 22:21:24 +05:30
Dongsu Park
349a9ba532 Merge pull request #1129 from kinvolk/dongsu/github-actions-exclude-rcbeta 
.github: list only ebuilds with a unique VERSION_OLD for runc
 2021-08-02 14:12:17 +02:00
Kai Lüke
3088fd3cac Merge pull request #1138 from kinvolk/kai/dm-verity-corruption-panic 
sys-kernel/bootengine: issue a kernel panic on dm-verity corruption
 2021-08-02 13:34:24 +02:00
Kai Lüke
ee14557288 sys-kernel/bootengine: issue a kernel panic on dm-verity corruption 
This pulls in
https://github.com/kinvolk/bootengine/pull/26
 2021-08-02 13:34:08 +02:00
Dongsu Park
40f5f348af Merge pull request #1127 from kinvolk/firmware-20210716-main 
Upgrade Linux Firmware in main from 20210511 to 20210716
 2021-08-02 12:26:29 +02:00
Flatcar Buildbot
736682d437 sys-kernel: Upgrade Kernel 5.10.52 to 5.10.55 2021-07-31 07:10:22 +00:00
Kai Lüke
eb06982881 Merge pull request #1146 from kinvolk/kai/gce-oem-net-admin 
coreos-base/oem-gce: grant CAP_NET_ADMIN to set routes for LB
 2021-07-30 18:31:08 +02:00
Mathieu Tortuyaux
22c2e57360 Merge pull request #1149 from kinvolk/tormath1/fix-457 
docker/torcx: disable SELinux by default on `dockerd` wrapper script
 2021-07-30 15:00:12 +02:00
Dongsu Park
b37bce7dff sys-kernel/coreos-firmware: fix builds by updating CXGB version 
Fix build failures by updating CXGB firmware version to 1.26.0.0.
 2021-07-30 11:03:41 +02:00
Mathieu Tortuyaux
be50e579c8 app-emulation/docker: update wrapper to disable selinux 
this is now the default behavior - since this script is deprecated
we do a minimum update on it

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
 2021-07-30 10:34:03 +02:00
Mathieu Tortuyaux
501d937d7e app-arch/torcx: update wrapper to disable selinux 
it's the default behavior now. Since this script is deprecated, we
do a minimum change on it.

Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
 2021-07-30 10:33:36 +02:00
Jeremi Piotrowski
b42cfedcf5 profiles: use correct lib64 path to sysroot-wrappers 
Sysroot-wrappers contains binaries installed to /usr/lib64/sysroot-wrappers,
but the profile referenced them through the 'lib -> lib64' symlink. Stop
relying on that symlink, which is not present in arm64 profiles, and is
not part of 17.1 amd64 profiles.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-07-30 07:43:15 +00:00
Kai Lüke
764d5c6baf coreos-base/coreos-init: prevent networkd interference with cilium_vxlan 
This pulls in
https://github.com/kinvolk/init/pull/43
 2021-07-29 20:01:50 +02:00
Kai Lüke
daf0a01b55 coreos-base/oem-gce: grant CAP_NET_ADMIN to set routes for LB 
With the switch from rkt to systemd-nspawn the ability for the service
to set the routing entries for the TCP load balancer got lost,
resulting in an unreachable LB as reported in
https://github.com/kinvolk/Flatcar/issues/459

The fix also reported there is to retain CAP_NET_ADMIN when starting
the service.
 2021-07-29 15:30:39 +02:00
Flatcar Buildbot
990e4f82b8 sys-kernel: Upgrade Linux Firmware 20210511 to 20210716 2021-07-29 07:07:37 +00:00
Kai Lüke
622a99058c coreos-base/update_engine: support btrfs as /usr filesystem 
This pulls in
https://github.com/kinvolk/update_engine/pull/11
 2021-07-28 13:29:02 +02:00
Kai Lüke
ab2467e547 sys-apps/seismograph: support btrfs in rootdev 
This pulls in
https://github.com/kinvolk/seismograph/pull/6
 2021-07-28 13:28:55 +02:00
Kai Lüke
e45a6140d0 sys-apps/ignition: support btrfs on the OEM partition 
This pulls in
https://github.com/kinvolk/ignition/pull/21
 2021-07-28 13:28:45 +02:00
Kai Lüke
bdc7f36d4f sys-kernel/coreos-modules: use 4k pages for arm64 
Btrfs filesystems do not support a non-standard 64k page size on arm64
when the filesystem was created by a 4k page size system.

Use the default page size for arm64 to ensure compatibility with
btrfs filesystems created by amd64 systems.
 2021-07-28 13:28:45 +02:00
Kai Lüke
c01560ba63 coreos-base/coreos-init: support btrfs on the OEM partition 
This pulls in
https://github.com/kinvolk/init/pull/42
 2021-07-28 13:28:28 +02:00
Kai Lüke
42b4f612ca sys-kernel/bootengine: support btrfs /usr filesystems 
Pulls in https://github.com/kinvolk/bootengine/pull/25
 2021-07-28 13:28:10 +02:00
Kai Lüke
29f2903c87 sys-kernel/coreos-modules: switch to gzip/zstd compression 
With the default gzip compression the 60 MB limit for the vmlinuz
bundle of kernel+initramfs was reached. The limit comes from the size
of the /boot partition which is 128 MB large and the kernel needs to
fit twice, in addition to GRUB.

Use zstd for the initramfs as it provides a similar speed but better
compression. For the kernel we can't switch yet to zstd for arm64
but for amd64 it works.
 2021-07-27 14:48:26 +02:00
Dongsu Park
08ea76673f .github: list only ebuilds with a unique VERSION_OLD 
Due to unnecessary wildcard listings, ebuild files including all rc or
beta are being listed. Since `VERSION_OLD` is already generated as a
unique version, we do not need to list multiple files to filter by
running `head -n1` etc. We just need to use only the specific ebuild.
Simply list only the unique ebuild file.
 2021-07-22 15:31:20 +02:00
Dongsu Park
e2cd417df5 .github: make correct input for runc versions 
Before passing runc versions to `sed '/-/!{s/$/_/}'`, we need to replace
`_` with `-`, because runc tarball files already have names like
`1.0.0_rc2`. Without the fix, version sort would `1.0.0` come before
`1.0.0_rc2`, which is not expected in the later steps.
 2021-07-22 12:41:45 +02:00
Sayan Chowdhury
1b068b5186 Merge pull request #1126 from kinvolk/sayan/update-systemd-247.7 
sys-apps/systemd: Bump to v247.7
 2021-07-21 16:50:28 +05:30
Flatcar Buildbot
e1e7bd2c2c sys-kernel: Upgrade Kernel 5.10.49 to 5.10.52 2021-07-21 07:10:12 +00:00
Sayan Chowdhury
cf97d4ad91 sys-apps/systemd: Bump to v247.7 
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
 2021-07-20 23:29:14 +05:30
Dongsu Park
70bfaff439 app-emulation/containerd: update to 1.5.4 
Update app-emulation/containerd to 1.5.4, mainly to address
CVE-2021-32760.
 2021-07-20 16:36:48 +02:00
Dongsu Park
2df538b480 Merge pull request #1115 from kinvolk/go-1.16.6-main 
Upgrade Go in main from 1.16.5 to 1.16.6
 2021-07-19 18:28:20 +02:00
Jeremi Piotrowski
0a1b0be7f3 dev-lang/rust: don't enable aarch64 cross target when host is aarch64 
This does not work because the host and cross rust targets share the
same name. This needs to be reworked to (potentially) enable x86 cross
targets for aarch64 targets.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-07-19 15:09:01 +00:00
Jeremi Piotrowski
0064e6b3ec profiles: remove "pc xen" from arm64 GRUB_PLATFORMS 
grub refuses to build these targets when host is arm64.

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
 2021-07-19 15:08:59 +00:00