1
0
Fork 0
mirror of https://github.com/pygos/build.git synced 2024-06-29 06:20:12 +02:00
Commit graph

391 commits

Author SHA1 Message Date
David Oberhollenzer f17e6f75b2 Add extra config flags for binutils
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-13 02:39:05 +01:00
David Oberhollenzer 8650c174f7 Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:29:22 +01:00
David Oberhollenzer 92a84d6f79 Bump tzdb version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:29:22 +01:00
David Oberhollenzer ed4e7347bd Bump unbound version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:29:22 +01:00
David Oberhollenzer bd533c9b93 Bump tar version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 447825b599 Bump sed version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 06c7532600 Bump readline version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 79d3c93219 Bump nginx version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 69a3dc4ed5 Bump iproute2 version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 8be2e06777 Bump hostapd version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 2c28a1466f Bump gzip version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 234c9f12b3 Bump grep version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer e53204ad1c Bump diffutils version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 4236040ede Bump btrfs-progs version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-11 00:27:02 +01:00
David Oberhollenzer 488c7a56c7 Bump busybox version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-09 15:33:18 +01:00
David Oberhollenzer 3ff8310a0e Bump bash version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-09 15:29:22 +01:00
David Oberhollenzer 7d88ca700a Add PIC/PIE flags to bzip2 package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2019-01-08 15:37:20 +01:00
David Oberhollenzer 1d8a794e1f Bump sqlite3 version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-27 14:15:51 +01:00
David Oberhollenzer 03a1208f45 Bump Raspberry Pi 3 firmware version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-27 14:09:41 +01:00
David Oberhollenzer 5dd74ace1b Bump Raspberry Pi 3 vendor kernel version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-27 14:07:33 +01:00
David Oberhollenzer 56d947513a Bump util-linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 20:52:51 +01:00
David Oberhollenzer 0f24aadc2a Bump OpenSSL version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 20:46:39 +01:00
David Oberhollenzer ad20a54ba1 Bump nginx version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 18:51:23 +01:00
David Oberhollenzer 80b7434352 Bump nano version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 18:47:34 +01:00
David Oberhollenzer 9802a80a8b Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 18:45:33 +01:00
David Oberhollenzer c2ed2e4e45 Bump libnftnl version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 16:23:25 +01:00
David Oberhollenzer e7d13f8f55 Bump btrfs-progs version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-26 16:21:24 +01:00
David Oberhollenzer 14a74edcd1 Bump init version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-25 20:19:58 +01:00
David Oberhollenzer 3dc8e567c0 Bump init scripts version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-25 20:19:58 +01:00
David Oberhollenzer 52427236e7 Add gcron package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-25 01:34:32 +01:00
David Oberhollenzer c5206e403b Clenaup some less usefull or test programs from kbd
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-14 19:59:49 +01:00
David Oberhollenzer 118df82d67 Cleanup installed bash completions for util-linux
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-14 19:38:31 +01:00
David Oberhollenzer 6e3b2ab4f9 Cleanup shadow-utils installed programs
- Remove programs for converting shadow/regular files into each other
 - Remove programs for working with group passwords
 - Remove batch processing programs
 - Remove namespace related programs
 - Remove other convoluted group management programs
 - Remove password expiry and finger information utilites

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-14 16:23:25 +01:00
David Oberhollenzer 2c394f4246 Bump init version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-05 21:55:15 +01:00
David Oberhollenzer 5e11afa1f6 Bump tzdb version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 3432245e78 Bump OpenSSH version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 6c0ec9a4ab Bump iproute2 version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 41aa911d92 Bump ethtool version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 0645f44a1f Fix /lib64 substitution pattern in tc-gcc1
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 45cc27ca40 Bump binutils version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 6ad8ed37f7 Cleanup binutils confgiure flags, add relro, PIC, deterministic ar
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 1aa829699c Explicitly disable libquadmath in second stage gcc
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 544ac03d1f Allways build libssp_noshared, even for non hardened toolchains
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer e87a8ec43c Explicitly turn on size optimizations
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer cf2e438a45 Bump Raspberry Pi 3 vendor kernel version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 35e72a4ae7 Bump Raspberry Pi 3 firmware version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 82a00e5a1b Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 60f9a68807 Bump file version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 81f4f36044 Bump tzdata version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer e91029b64e Bump unbound version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 0b5e2ccc38 Bump dnsmasq version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer 1786c65c4c Bump init version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer d6030cd898 Replace gcc libssp with built musl builtins
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-20 12:52:06 +02:00
David Oberhollenzer d06083c96d Propperly process Linux package targets in deploy function
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer 7dd6306b30 cleanup: derive LINUX_CPU from TARGET, merge linux packages
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer b5d4ece03d cleanup: derive MUSL_CPU from TARGET in Musl package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer 569f7d5e0c cleanup: derive OPENSSL_TARGET from TARGET in OpenSSL package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer 8e5c6d3a2e Make toolchain and user space hardening configurable
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer 69aa1d33e9 Set hardening options for packages with custom build system
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 00:18:51 +02:00
David Oberhollenzer 8063550d4e Add libc agnostic fortify-headers package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 01:11:02 +02:00
David Oberhollenzer 52933c58c9 Enable hardening flags for stage-1 gcc
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 00:52:10 +02:00
David Oberhollenzer 0958272eb3 Export CROSS_COMPILE environment variable for Musl build script
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 00:52:10 +02:00
David Oberhollenzer c16ff53c14 Remove overlay partition setup from release shell scripts
The initial ram disk does that for us (with the propper permissions
in the case of Qemu).

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-11 19:02:11 +02:00
David Oberhollenzer 2a1add41e7 Enable stack protection flags in GCC cross compiler
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-11 19:02:11 +02:00
David Oberhollenzer f1be060f7c Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 16:35:25 +02:00
David Oberhollenzer 62345ef7bb Cleanup nginx user and directory setup
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 16:35:25 +02:00
David Oberhollenzer dcadff7637 Init version rebase
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 02:16:28 +02:00
David Oberhollenzer 8d75cb83fd Add nginx package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 20:32:44 +02:00
David Oberhollenzer f3861b9df1 Add PCRE package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 17:25:52 +02:00
David Oberhollenzer a71c45aec0 Fix final image copy in Linux LTS build script
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 17:25:52 +02:00
David Oberhollenzer e7101d5400 Unfuck libtool archives for libnl3
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 17:25:52 +02:00
David Oberhollenzer 86dcb7d8c1 Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-01 20:49:03 +02:00
David Oberhollenzer e61ca9decf Another overlay mount overhaul
- Directly pass the device type to the mount command
 - Use the special default type "hwdevice" to wait for a device node
   before mounting it
 - Initialize the overlay partition from the initrd script
 - Do the bind mount setup as document

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-01 19:11:12 +02:00
David Oberhollenzer 121fee7e97 Add configuration for testing with qemu
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-30 01:28:33 +02:00
David Oberhollenzer 59d01432b1 More sophisticated filesystem setup from initrd
- Let us specify the "type" of the root and overlay filesystem.
   At the moment we have raw device that we wait for (default) and
   qemu virtio 9pfs.
 - If no squasfs image is specified, mount the root partition as
   root filesystem.
 - If no overlay device is specified, don't touch the new root
   filesystem.

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-29 21:32:58 +02:00
David Oberhollenzer 2d74caf06b Remove perl scripts from ntp package installed files
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-29 17:10:07 +02:00
David Oberhollenzer 90fc4f4e9e Patch gcc to install 64 bit libraries to /lib instead of /lib64
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-29 17:10:07 +02:00
David Oberhollenzer 6ced6fc948 Minor fixes for main line Linux LTS build
- Patch the config first, don't touch it after running make oldconfig
 - Add modules target to toolchain config, don't directly call it
 - Only try to install modules if we actually have support for loadable
   modules

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-29 17:10:07 +02:00
David Oberhollenzer 8faae986b6 Bump psmisc version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-27 23:58:12 +02:00
David Oberhollenzer b0da273179 Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-27 23:56:34 +02:00
David Oberhollenzer de14b86043 Build coreutils as single call binary
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-22 21:29:29 +02:00
David Oberhollenzer de90e7bcbb Bump nano version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-21 22:27:18 +02:00
David Oberhollenzer 0b8ffdbb7f Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-21 22:25:49 +02:00
David Oberhollenzer e865ae2d1c Bump Raspberry Pi 3 vendor kernel version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-21 22:23:08 +02:00
David Oberhollenzer ad3b6d19a2 Bump Raspberry Pi 3 firmware version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-21 22:22:50 +02:00
David Oberhollenzer bbac1391dc Bump init version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-21 22:11:58 +02:00
David Oberhollenzer 51a2c5ea17 Fix permissions for root user home directory
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:25:27 +02:00
David Oberhollenzer 700395b508 Bump OpenSSL version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:18:19 +02:00
David Oberhollenzer 0f3d04a3b8 Bump unbound version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:18:19 +02:00
David Oberhollenzer 76fba828f3 Bump mainline LTS linux version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:18:19 +02:00
David Oberhollenzer 48e6358906 Bump busybox version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:18:19 +02:00
David Oberhollenzer fc6d7292c5 Bump nano version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:18:19 +02:00
David Oberhollenzer 6aff04a1fd Shadow: provide configuration files directly
Instead of patching around in the build/deploy directories, simply
provide a set of default configuration files directly from the package
directory.

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 20:18:19 +02:00
David Oberhollenzer d515f0dde2 Minor default settings cleanup
- Add 'rm -I' and 'cp -i' aliases to bashrc
 - Make sure tmpfsvar creates the log files that the login program expects
 - Restore 'tty' group; some scripts actually rely on that

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-15 16:01:06 +02:00
David Oberhollenzer 7eb727e26f Remove programs depending on non-existant utmp data
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-10 09:26:47 +02:00
David Oberhollenzer b4502eaf80 Add time zone data
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-08 15:05:49 +02:00
David Oberhollenzer 3e75dc1e37 Add ntp package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-08 15:05:49 +02:00
David Oberhollenzer 03a11e26ef Bump Raspberry Pi 3 firmware version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-08 15:05:49 +02:00
David Oberhollenzer 8b1e3e0b6b Bump Raspberry Pi 3 vendor kernel version
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-08 15:05:49 +02:00
David Oberhollenzer 79ac5f1293 Propperly handle symlinks to directories in rootfs package
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-09-08 14:51:52 +02:00