Commit Graph

5345 Commits

Author SHA1 Message Date
jslobodzian f44d3c6a45
Merge pull request #68 from schmittjoseph/joschmit/set-gui-installer-name
Update Calamares branding to CBL-Mariner
2020-08-24 16:38:17 -07:00
jslobodzian a24b6556b5
Merge pull request #69 from lpereira/use-time-windows-com-timesyncd
Use time.windows.com for systemd-timesyncd by default
2020-08-24 16:37:41 -07:00
jslobodzian d40773cd31
Merge pull request #70 from microsoft/jslobodzian/fix-build-instructions
Fixed build instructions
2020-08-24 15:44:52 -07:00
jslobodzian e4753f2f4c
Fixed build instructions 2020-08-24 15:44:12 -07:00
Leandro Pereira 41807e7118 Use time.windows.com for systemd-timesyncd by default 2020-08-24 15:14:32 -07:00
Joe Schmitt f122d7471e Update calamares configuration 2020-08-24 15:00:05 -07:00
Henry Beberman 82b998aa9f Remove bzr package
Nothing depends on bzr and there's a CVSS 10.0 CVE-2007-4050 against it.
If bzr is required by anything in the future we can pull in the community fork breezy.
2020-08-24 12:11:51 -07:00
Pawel 442bdbb790 Updating changelog message for 'bash-completion'. 2020-08-24 10:38:59 -07:00
jslobodzian b6921eaec5
Merge pull request #53 from christopherco/christopherco-patch-1
Add Github Action to perform some Go CI checks
2020-08-21 15:20:22 -07:00
Daniel McIlvaney ec3d7ac971 Reduce log level of harmless error 2020-08-21 14:51:37 -07:00
Jon Slobodzian 3e7645302d Merge branch 'main' into 1.0 2020-08-20 14:10:02 -07:00
jslobodzian 0020cb8500
Merge pull request #55 from hbeberman/fix_toolchain_manifest
Update python*-gpg revisions in toolchain manifests
2020-08-20 14:07:50 -07:00
Henry Beberman 6d30520ebc Update python*-gpg revision in toolchain manifests
Fix a revision mismatch between the gpgme spec and the toolchain manifest.
2020-08-20 13:49:23 -07:00
Christopher Co 6ffe2d1c9f Add github action to perform simple Go CI checks 2020-08-20 18:54:48 +00:00
Mateusz Malisz 089c065b05
Fix gpgme main and -devel shared object conflicts (#50) (#51)
* Fix gpgme main and -devel shared object conflicts

* Bump version of gpgme.spec
2020-08-20 07:22:19 -07:00
Mateusz Malisz b1fdfb72a1
Fix gpgme main and -devel shared object conflicts (#50)
* Fix gpgme main and -devel shared object conflicts

* Bump version of gpgme.spec
2020-08-20 06:50:38 -07:00
jslobodzian 2e9f5764fd
Merge pull request #49 from hbeberman/fix_libxslt
Add libgcrypt dependency to libxslt
2020-08-19 15:25:38 -07:00
Henry Beberman a9accfc273 Add libgcrypt dependency to libxslt
The worker chroot now contains libgcrypt by default to support gpg.
libxslt recognizes that it's there and attempts to take a dependency on it.
Take that implicit dependency and make it explicit so the devel package is included.
2020-08-19 14:58:09 -07:00
jslobodzian e1881b16f0
Merge pull request #48 from christopherco/chrco/remove-devel-or
Remove kernel-signed packages from kernel subpackage requires
2020-08-19 13:19:49 -07:00
Chris Co d0e924ae02 kernel: Update Requires for kernel subpackages 2020-08-19 19:55:22 +00:00
jslobodzian 6fe26cf461
Merge pull request #46 from microsoft/mrgirgin/add-libgcrypt-to-chroot
Add libgcrypt to chroot to enable gpg to run inside the chroot
2020-08-19 12:46:53 -07:00
Emre Girgin b781b2a0c4 Change the update_manifests.sh script to exclude libgcrypt subpackages from chroot 2020-08-19 12:38:59 -07:00
jslobodzian 3b98ff7861
Merge pull request #45 from microsoft/joschmit/add-search-and-clone
Use SearchAndClone to resolve files to packages
2020-08-19 12:37:38 -07:00
Emre Girgin 74c7a14de1 Merge remote-tracking branch 'origin/main' into mrgirgin/add-libgcrypt-to-chroot 2020-08-19 12:37:29 -07:00
jslobodzian fd1eab3dc2
Merge pull request #47 from microsoft/anphel/modify-update-manifest-extrapkgs
Remove unneeded packages in update_manifests.sh
2020-08-19 12:36:10 -07:00
Andrew Phelps c1e0ccbd87 remove unneeded packages 2020-08-19 12:27:53 -07:00
Joe Schmitt 685f3f86c0 Set home dir to root during chroot creation 2020-08-19 12:12:25 -07:00
Emre Girgin 1d97e9fcb6 Add libgcrypt to the chroot 2020-08-19 12:10:50 -07:00
Joe Schmitt 3888af05ea Add SearchAndClone to repocloner 2020-08-19 11:32:57 -07:00
jslobodzian 9409d8ee9b
Merge pull request #40 from christopherco/chrco/signing
Introduce grub-efi-binary-signed-<arch> and kernel-signed-<arch> packages
2020-08-18 20:06:54 -07:00
jslobodzian 7da0bf1e3d
Merge pull request #41 from microsoft/joslobo/restore-mariner-release-info
Restore unintentionally modified DISTRIB_ID,CODENAME, NAME and ID
2020-08-18 19:59:12 -07:00
jslobodzian a6ce30a750
Merge pull request #42 from microsoft/mrgirgin/add-tdnf-repogpgcheck-to-chroot
Ensure gpg commands inside mariner-repos.spec are run during image creation
2020-08-18 19:58:49 -07:00
Chris Co d584e21c70 Update licenses for the new specs 2020-08-19 01:48:59 +00:00
Chris Co cb944fb8e6 Introduce kernel-signed-<arch> package
As part of enabling the UEFI Secure Boot chain, the kernel binary must
be signed with our distro key.

At the moment, the signing infrastructure isn't quite ready to perform
inline signing during package build. So to work around this, we
introduced the kernel-signed-<arch> packages. The purpose of these
packages is to supply a way for signed versions of the kernel binary
and the associated kernel modules to land on the end-user's
filesystem.
2020-08-19 01:48:59 +00:00
Chris Co 89382c8efc Introduce grub2-efi-binary-signed-<arch> package
As part of enabling UEFI Secure Boot, the grub2 EFI binary must be
signed with our distro key.

At the moment, the signing infrastructure isn't quite ready to perform
inline signing during package build. So to work around this, we
introduced the grub2-efi-binary-signed-<arch> packages. The purpose
of these packages is to supply a way for signed versions of the
grub efi binary to land on the end-user's filesystem.
2020-08-19 01:48:50 +00:00
jslobodzian 14f46016ad
Fixed documentation formatting
Several links were misaligned due to improper spacing.  One link was broken.  This change only involves formatting and does not change content
2020-08-18 18:38:04 -07:00
Emre Girgin d8f839dfe0 Merge remote-tracking branch 'origin/main' into mrgirgin/add-tdnf-repogpgcheck-to-chroot 2020-08-18 17:20:35 -07:00
Joe Schmitt 41717c9778 Merge branch 'mrgirgin/add-tdnf-repogpgcheck-to-chroot' of github.com:microsoft/CBL-Mariner into mrgirgin/add-tdnf-repogpgcheck-to-chroot 2020-08-18 16:55:14 -07:00
Joe Schmitt 2b12fb8d3d Stop gpg-agent at 2020-08-18 16:54:44 -07:00
Jon Slobodzian 558d0aed32 Restore unintentionally modified DISTRIB_ID,CODENAME, NAME and ID 2020-08-18 15:32:57 -07:00
jslobodzian 970c5320bc
Fixing typo for CBL-Mariner in build directions. 2020-08-18 15:01:17 -07:00
jslobodzian c59f18f57b
Updated acknowledgements per internal review. 2020-08-18 14:49:56 -07:00
jslobodzian d0dabfa1c1
Merge pull request #36 from microsoft/anphel/update-manifest
Update toolchain manifest script
2020-08-18 14:32:42 -07:00
jslobodzian e298a5980e
Merge pull request #39 from PawelWMS/pawelwi/CVE-2020-11984_fix
Fixing CVE-2020-11984 in 'httpd'
2020-08-18 14:00:13 -07:00
jslobodzian f1cd7884fa
Merge pull request #38 from microsoft/mrgirgin/libdnf-build-break
Change libdnf version to 0.43.1
2020-08-18 13:57:30 -07:00
jslobodzian ab8eb7d8c2
Merge pull request #37 from microsoft/danmihai1/SecurityFeatures
Add doc for security-related OS features
2020-08-18 13:57:17 -07:00
Emre Girgin 898a5c7948
Update the changelog 2020-08-18 13:47:53 -07:00
Emre Girgin b2eaae26a6 Change libdnf version to 0.43.1 2020-08-18 13:30:58 -07:00
Dan Mihai eadf555902 Add doc for security-related OS features 2020-08-18 12:26:42 -07:00
Pawel 384f5280dc Updating signatures. 2020-08-18 05:08:35 -07:00