pygos/build
1
0
Fork 0
mirror of https://github.com/pygos/build.git synced 2024-11-10 13:47:11 +01:00
Code Issues Releases Wiki Activity
330 commits 1 branch 0 tags 4.1 MiB
Commit graph

286 commits

Author SHA1 Message Date
David Oberhollenzer
b5d4ece03d cleanup: derive MUSL_CPU from TARGET in Musl package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
569f7d5e0c cleanup: derive OPENSSL_TARGET from TARGET in OpenSSL package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
8e5c6d3a2e Make toolchain and user space hardening configurable 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
69aa1d33e9 Set hardening options for packages with custom build system 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 00:18:51 +02:00
David Oberhollenzer
8063550d4e Add libc agnostic fortify-headers package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 01:11:02 +02:00
David Oberhollenzer
52933c58c9 Enable hardening flags for stage-1 gcc 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 00:52:10 +02:00
David Oberhollenzer
0958272eb3 Export CROSS_COMPILE environment variable for Musl build script 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 00:52:10 +02:00
David Oberhollenzer
c16ff53c14 Remove overlay partition setup from release shell scripts 
The initial ram disk does that for us (with the propper permissions
in the case of Qemu).

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-11 19:02:11 +02:00
David Oberhollenzer
2a1add41e7 Enable stack protection flags in GCC cross compiler 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-11 19:02:11 +02:00
David Oberhollenzer
f1be060f7c Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 16:35:25 +02:00
David Oberhollenzer
62345ef7bb Cleanup nginx user and directory setup 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 16:35:25 +02:00
David Oberhollenzer
dcadff7637 Init version rebase 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 02:16:28 +02:00
David Oberhollenzer
8d75cb83fd Add nginx package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 20:32:44 +02:00
David Oberhollenzer
f3861b9df1 Add PCRE package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 17:25:52 +02:00
David Oberhollenzer
a71c45aec0 Fix final image copy in Linux LTS build script 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 17:25:52 +02:00
David Oberhollenzer
e7101d5400 Unfuck libtool archives for libnl3 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 17:25:52 +02:00
David Oberhollenzer
86dcb7d8c1 Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-01 20:49:03 +02:00
David Oberhollenzer
e61ca9decf Another overlay mount overhaul 
- Directly pass the device type to the mount command
 - Use the special default type "hwdevice" to wait for a device node
   before mounting it
 - Initialize the overlay partition from the initrd script
 - Do the bind mount setup as document

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-01 19:11:12 +02:00
David Oberhollenzer
121fee7e97 Add configuration for testing with qemu 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-30 01:28:33 +02:00
David Oberhollenzer
59d01432b1 More sophisticated filesystem setup from initrd 
- Let us specify the "type" of the root and overlay filesystem.
   At the moment we have raw device that we wait for (default) and
   qemu virtio 9pfs.
 - If no squasfs image is specified, mount the root partition as
   root filesystem.
 - If no overlay device is specified, don't touch the new root
   filesystem.

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 21:32:58 +02:00
David Oberhollenzer
2d74caf06b Remove perl scripts from ntp package installed files 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 17:10:07 +02:00
David Oberhollenzer
90fc4f4e9e Patch gcc to install 64 bit libraries to /lib instead of /lib64 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 17:10:07 +02:00
David Oberhollenzer
6ced6fc948 Minor fixes for main line Linux LTS build 
- Patch the config first, don't touch it after running make oldconfig
 - Add modules target to toolchain config, don't directly call it
 - Only try to install modules if we actually have support for loadable
   modules

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 17:10:07 +02:00
David Oberhollenzer
8faae986b6 Bump psmisc version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-27 23:58:12 +02:00
David Oberhollenzer
b0da273179 Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-27 23:56:34 +02:00
David Oberhollenzer
de14b86043 Build coreutils as single call binary 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-22 21:29:29 +02:00
David Oberhollenzer
de90e7bcbb Bump nano version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-21 22:27:18 +02:00
David Oberhollenzer
0b8ffdbb7f Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-21 22:25:49 +02:00
David Oberhollenzer
e865ae2d1c Bump Raspberry Pi 3 vendor kernel version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-21 22:23:08 +02:00
David Oberhollenzer
ad3b6d19a2 Bump Raspberry Pi 3 firmware version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-21 22:22:50 +02:00
David Oberhollenzer
bbac1391dc Bump init version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-21 22:11:58 +02:00
David Oberhollenzer
51a2c5ea17 Fix permissions for root user home directory 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:25:27 +02:00
David Oberhollenzer
700395b508 Bump OpenSSL version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:18:19 +02:00
David Oberhollenzer
0f3d04a3b8 Bump unbound version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:18:19 +02:00
David Oberhollenzer
76fba828f3 Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:18:19 +02:00
David Oberhollenzer
48e6358906 Bump busybox version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:18:19 +02:00
David Oberhollenzer
fc6d7292c5 Bump nano version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:18:19 +02:00
David Oberhollenzer
6aff04a1fd Shadow: provide configuration files directly 
Instead of patching around in the build/deploy directories, simply
provide a set of default configuration files directly from the package
directory.

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 20:18:19 +02:00
David Oberhollenzer
d515f0dde2 Minor default settings cleanup 
- Add 'rm -I' and 'cp -i' aliases to bashrc
 - Make sure tmpfsvar creates the log files that the login program expects
 - Restore 'tty' group; some scripts actually rely on that

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-15 16:01:06 +02:00
David Oberhollenzer
7eb727e26f Remove programs depending on non-existant utmp data 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-10 09:26:47 +02:00
David Oberhollenzer
b4502eaf80 Add time zone data 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 15:05:49 +02:00
David Oberhollenzer
3e75dc1e37 Add ntp package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 15:05:49 +02:00
David Oberhollenzer
03a11e26ef Bump Raspberry Pi 3 firmware version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 15:05:49 +02:00
David Oberhollenzer
8b1e3e0b6b Bump Raspberry Pi 3 vendor kernel version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 15:05:49 +02:00
David Oberhollenzer
79ac5f1293 Propperly handle symlinks to directories in rootfs package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 14:51:52 +02:00
David Oberhollenzer
4498b0ccb0 Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 14:51:52 +02:00
David Oberhollenzer
136ff32374 Bump musl version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-08 14:51:52 +02:00
David Oberhollenzer
50dce293c1 Add helper macro for running configure with standard arguments 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-03 13:58:35 +02:00
David Oberhollenzer
7f020c855b Remove defunct nettle and support libraries 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-02 14:25:56 +02:00
David Oberhollenzer
c29955adf5 Add default configuration for OpenSSH server 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-01 17:49:18 +02:00