Weekly portage-stable package updates 2023-10-09 #1223

github-actions · 2023-10-09T07:15:44Z

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1103/cldsv

--

app-arch/pigz: [PROD] [DEV]
- from 2.7-r1 to 2.8
- added signature verification
- still unstable on amd64, so added accept keywords to overlay
- release notes: https://zlib.net/pipermail/pigz-announce_zlib.net/2023-August/000018.html
app-portage/portage-utils: [DEV]
- still at 0.96.1
- updated metadata
dev-libs/libxml2: [DEV]
- still at 2.11.5
- updated keywords for other arches
dev-python/lxml: [DEV]
- still at 4.9.3-r1
- became stable for arm64 so dropped accept keywords from overlay
eclass/flag-o-matic.eclass:
- allow some more compiler flags
net-dns/c-ares: [DEV]
- still at 1.19.1
- updated license from MIT to MIT ISC
net-misc/whois: [PROD] [DEV]
- from 5.5.17-r1 to 5.5.18-r1
- still unstable on amd64, so added accept keywords overlay
- release notes: https://github.com/rfc1036/whois/blob/v5.5.18/debian/changelog
profiles:
- masked dev-python/cython-3.0.3
sys-apps/portage: [DEV]
- still at 3.0.51
- bumped dep on dev-util/meson to 1.2.1-r1 (exactly the version we have)
sys-devel/gcc: [DEV]
- still at 13.2.1_p20230826
- it's already stable, so dropped accept keywords from overlay
sys-devel/gdb: [DEV]
- still at 13.2-r1
- updated keywords for other arches

--

changelog
image diff

tormath1 · 2023-10-09T10:58:51Z

...ird_party/portage-stable/sec-policy/selinux-container/selinux-container-2.20231002-r1.ebuild

As a side note, in the selinux-container downstream patch, we can drop the following lines:

scripts/sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sec-policy/selinux-container/container.patch

Lines 69 to 74 in 4a9ae3d

+# required for cilium, can be upstreamed

+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { open } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1

+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { kernel } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1

+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { cpu } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1

+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { read } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1

+allow spc_t self:perf_event { open cpu kernel read };

I upstreamed those: SELinuxProject/refpolicy@feaf607.

Cool, thanks for letting me know.

Er, I mean, this needs to wait until we pick up the update of sec-policy/selinux-container from Gentoo, right?

I think it's already there: we're upgrading to selinux-container-2.20231002 and the commit is part of the release: RELEASE_2_20231002 (SELinuxProject/refpolicy@feaf607)

The ebuild is still unstable, so we didn't pick it up. Should we add accept keywords for it?

Ah yes indeed - then I guess we can follow Gentoo for this as we just upgraded the SELinux policies, no need to rush.

It's from Gentoo commit 33b88a8e44606ea675432dfb7b1cebb2037959d4.

It's from Gentoo commit c3eab6fa1db6e84500528a139a951c3a59874df8.

It's from Gentoo commit efb8fd83db0cdd062b100b763fa9e02609179081.

It's from Gentoo commit 8b1e46f54820a06a69e0573015ee33f67e04c1c3.

It's from Gentoo commit b5eb3cf25f865a8d75f149e5225db9febc832a7d.

It's from Gentoo commit 978d0361e4ce0e8e5c3b0a0c12a36611f03d0d2f.

It's from Gentoo commit abe5a47cda2a63c48c8dbf71a0fb642db6bb3032.

It's from Gentoo commit d5288953bcc343f811fd59179097dad1db206320.

It's from Gentoo commit 3f6342b1db6e23197fd2c7bbae588c8a9b0d3737.

It's from Gentoo commit b28fd4b74718fb4047db1baad10f0002d840f637.

It's from Gentoo commit d7204da98ae172d46089b350e1f7465eb617b743.

It's from Gentoo commit 4985f0705b618da6cf7ca5bf9c47af3cf94dab49.

It's from Gentoo commit a2fa1d1a29320ec6602d6cde2af8decbfe52069f.

It's from Gentoo commit 14d76e24d2cdcdfa69c280e68d96a0244c1ccc20.

It's from Gentoo commit c0ad7b00c772c71a74ec42be0bf594ee9198b71c.

It's from Gentoo commit cc7061ee5e3bfd1a7a1bcbdc44f1bd1d69fda495.

It's from Gentoo commit 1c74c5617c8c8094188eb2c99e3aae4867b5e22f.

It's from Gentoo commit 79853c374d5f3e0cf1a73a17fec44912739b7012.

It's from Gentoo commit d873e6b6f87b8a71f0376a04f1487b394add718b.

It's from Gentoo commit 948d91c1679ef28057c2ccc28e00a7bb6c027b77.

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

It's from Gentoo commit 6cded3b440a889fbea35205c5c42ab70373b4ff6.

It's from Gentoo commit 68508019cec4a5622ffab2825ea9e8f6cdd42a84.

It's from Gentoo commit f5f361e355257f8098df5f56f7c43aed4b452831.

It's from Gentoo commit 444f42f73266981576e51d509ae26564ac1641cc.

It's from Gentoo commit 11e20405a1a8ffa9d7efe197ded0759846fa4256.

It's from Gentoo commit 0605ed4d84c009e2bf6236bf4d0181c35080f013.

It's from Gentoo commit 2692dfa901b96fca8a47b78967f6cf5a3d483dab.

krnowak · 2023-10-12T10:17:12Z

CI passed.

github-actions · 2023-10-12T10:17:24Z

Build action triggered: https://github.com/flatcar/scripts/actions/runs/6494336660

github-actions bot added the main label Oct 9, 2023

tormath1 reviewed Oct 9, 2023

View reviewed changes

Flatcar Buildbot added 28 commits October 9, 2023 16:18

app-alternatives/gzip: Sync with Gentoo

ffd6988

It's from Gentoo commit 33b88a8e44606ea675432dfb7b1cebb2037959d4.

app-arch/pigz: Sync with Gentoo

4584e8a

It's from Gentoo commit c3eab6fa1db6e84500528a139a951c3a59874df8.

app-portage/portage-utils: Sync with Gentoo

8af8661

It's from Gentoo commit efb8fd83db0cdd062b100b763fa9e02609179081.

app-portage/gentoolkit: Sync with Gentoo

8b7ce7f

It's from Gentoo commit 8b1e46f54820a06a69e0573015ee33f67e04c1c3.

dev-lang/python: Sync with Gentoo

185384e

It's from Gentoo commit b5eb3cf25f865a8d75f149e5225db9febc832a7d.

dev-libs/boost: Sync with Gentoo

1d8553d

It's from Gentoo commit 978d0361e4ce0e8e5c3b0a0c12a36611f03d0d2f.

dev-libs/cJSON: Sync with Gentoo

88a0385

It's from Gentoo commit abe5a47cda2a63c48c8dbf71a0fb642db6bb3032.

dev-libs/libbsd: Sync with Gentoo

e583841

It's from Gentoo commit d5288953bcc343f811fd59179097dad1db206320.

dev-libs/libxml2: Sync with Gentoo

fad0972

It's from Gentoo commit 3f6342b1db6e23197fd2c7bbae588c8a9b0d3737.

dev-python/cython: Sync with Gentoo

6d060ff

It's from Gentoo commit b28fd4b74718fb4047db1baad10f0002d840f637.

dev-python/lxml: Sync with Gentoo

7e4b60a

It's from Gentoo commit d7204da98ae172d46089b350e1f7465eb617b743.

dev-python/platformdirs: Sync with Gentoo

b594c98

It's from Gentoo commit 4985f0705b618da6cf7ca5bf9c47af3cf94dab49.

dev-python/setuptools-scm: Sync with Gentoo

c83c572

It's from Gentoo commit a2fa1d1a29320ec6602d6cde2af8decbfe52069f.

dev-util/cmake: Sync with Gentoo

abb4dc6

It's from Gentoo commit 14d76e24d2cdcdfa69c280e68d96a0244c1ccc20.

dev-util/meson: Sync with Gentoo

7b90277

It's from Gentoo commit c0ad7b00c772c71a74ec42be0bf594ee9198b71c.

eclass/flag-o-matic: Sync with Gentoo

1839d45

It's from Gentoo commit cc7061ee5e3bfd1a7a1bcbdc44f1bd1d69fda495.

net-dns/c-ares: Sync with Gentoo

3dd0414

It's from Gentoo commit 1c74c5617c8c8094188eb2c99e3aae4867b5e22f.

net-fs/cifs-utils: Sync with Gentoo

6fc672c

It's from Gentoo commit 79853c374d5f3e0cf1a73a17fec44912739b7012.

net-misc/whois: Sync with Gentoo

99475eb

It's from Gentoo commit d873e6b6f87b8a71f0376a04f1487b394add718b.

profiles: Sync with Gentoo

6f604d4

It's from Gentoo commit 948d91c1679ef28057c2ccc28e00a7bb6c027b77.

sec-policy/selinux-base: Sync with Gentoo

3c51990

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

sec-policy/selinux-base-policy: Sync with Gentoo

7a2ca35

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

sec-policy/selinux-container: Sync with Gentoo

5f1df6b

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

sec-policy/selinux-dbus: Sync with Gentoo

895e5a3

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

sec-policy/selinux-sssd: Sync with Gentoo

9a9adc1

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

sec-policy/selinux-unconfined: Sync with Gentoo

674b47e

It's from Gentoo commit 699016c9b86c4154bb66e0657d3f3c264208141d.

sys-apps/hwdata: Sync with Gentoo

424a3b5

It's from Gentoo commit 6cded3b440a889fbea35205c5c42ab70373b4ff6.

sys-apps/kbd: Sync with Gentoo

695d13c

It's from Gentoo commit 68508019cec4a5622ffab2825ea9e8f6cdd42a84.

Flatcar Buildbot and others added 7 commits October 9, 2023 16:18

sys-apps/portage: Sync with Gentoo

1a6b7a0

It's from Gentoo commit f5f361e355257f8098df5f56f7c43aed4b452831.

sys-devel/gcc: Sync with Gentoo

3d0ac77

It's from Gentoo commit 444f42f73266981576e51d509ae26564ac1641cc.

sys-devel/gdb: Sync with Gentoo

a77081a

It's from Gentoo commit 11e20405a1a8ffa9d7efe197ded0759846fa4256.

sys-devel/gettext: Sync with Gentoo

a8a59fc

It's from Gentoo commit 0605ed4d84c009e2bf6236bf4d0181c35080f013.

sys-kernel/linux-headers: Sync with Gentoo

b350400

It's from Gentoo commit 2692dfa901b96fca8a47b78967f6cf5a3d483dab.

overlay profiles: Add accept keywords for app-arch/pigz

377c7e6

overlay profiles: Add accept keywords for net-misc/whois

b5c45ad

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2023-10-09 branch from 08fe462 to b5c45ad Compare October 9, 2023 14:19

krnowak had a problem deploying to development October 9, 2023 14:19 — with GitHub Actions Error

krnowak added 2 commits October 9, 2023 16:47

coreos overlay: Dropped accept keywords for dev-python/lxml

1d4572c

coreos overlay: Dropped accept keywords for sys-devel/gcc

b091a11

krnowak had a problem deploying to development October 9, 2023 14:48 — with GitHub Actions Error

coreos overlay: Dropped accept keywords for sys-fs/fuse

d641235

krnowak had a problem deploying to development October 9, 2023 15:11 — with GitHub Actions Error

changelog: Add an entry

5c1b2ec

krnowak had a problem deploying to development October 12, 2023 10:16 — with GitHub Actions Failure

krnowak marked this pull request as ready for review October 12, 2023 10:16

krnowak requested a review from a team October 12, 2023 10:16

dongsupark approved these changes Oct 12, 2023

View reviewed changes

krnowak merged commit e328b7e into main Oct 12, 2023
1 check failed

krnowak deleted the buildbot/weekly-portage-stable-package-updates-2023-10-09 branch October 12, 2023 16:36

github-actions bot mentioned this pull request Nov 9, 2023

Monthly contributions report 2023-09-22 - 2023-10-21 flatcar/Flatcar#1244

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Weekly portage-stable package updates 2023-10-09 #1223

Weekly portage-stable package updates 2023-10-09 #1223

github-actions bot commented Oct 9, 2023 •

edited by krnowak

Loading

tormath1 Oct 9, 2023

krnowak Oct 9, 2023

krnowak Oct 9, 2023

tormath1 Oct 9, 2023

krnowak Oct 9, 2023

tormath1 Oct 9, 2023

krnowak commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

	+# required for cilium, can be upstreamed
	+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { open } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1
	+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { kernel } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1
	+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { cpu } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1
	+# Jun 20 08:01:43 localhost audit[3480]: AVC avc: denied { read } for pid=3480 comm="cilium-agent" scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=perf_event permissive=1
	+allow spc_t self:perf_event { open cpu kernel read };

Weekly portage-stable package updates 2023-10-09 #1223

Weekly portage-stable package updates 2023-10-09 #1223

Conversation

github-actions bot commented Oct 9, 2023 • edited by krnowak Loading

tormath1 Oct 9, 2023

Choose a reason for hiding this comment

krnowak Oct 9, 2023

Choose a reason for hiding this comment

krnowak Oct 9, 2023

Choose a reason for hiding this comment

tormath1 Oct 9, 2023

Choose a reason for hiding this comment

krnowak Oct 9, 2023

Choose a reason for hiding this comment

tormath1 Oct 9, 2023

Choose a reason for hiding this comment

krnowak commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 9, 2023 •

edited by krnowak

Loading