mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-09-24 04:59:14 -07:00
app-emulation/firecracker-bin: drop 1.14.2, 1.15.0
These versions are vulnerable to CVE-2026-5747. Bug: https://bugs.gentoo.org/972469 Signed-off-by: Sebastian Hamann <code@ares-macrotechnology.com> Part-of: https://codeberg.org/gentoo/gentoo/pulls/558 Merges: https://codeberg.org/gentoo/gentoo/pulls/558 Signed-off-by: Sam James <sam@gentoo.org>
This commit is contained in:
Sebastian Hamann
committed by
Sam James
Sam James
parent
31df8f15fd
commit
c3a2a4b8bb
@@ -1,8 +1,4 @@
|
||||
DIST firecracker-v1.14.2-aarch64.tgz 7383364 BLAKE2B 2c16492f0b7e411c64fea124fb501f11e93939b250585baf8e58f7cba62eec549e175582057a60ccaf0dabd33bbb31a5a917a74a6325f00f9d2475d935d76300 SHA512 9fc9cceb873b036c944a31aab39d3d7b710d1a56469e20ce5223dc8b0bc58fcd102fd5419623ca0d77ab46786da8adf9c15d5948e1981ccb6a129c81d2819c5c
|
||||
DIST firecracker-v1.14.2-x86_64.tgz 7667376 BLAKE2B 2b8daba7517219e51ed3779f5df4128cddced030b03f5f7bd1e049547c440fa5e0231c87df52fa57bce81c2dd556ec456a0beb9c3dee39108d5a9fd3ad030344 SHA512 07faa7b905d25949a0134efb155549d6a94bd0e150f6a62b3ed62bc7dc45e240ae5796ca27dbb6d5d9521c62c36c148211d97d4e30c8d53750e15b6672e0d2ee
|
||||
DIST firecracker-v1.14.4-aarch64.tgz 7390160 BLAKE2B 3473aeb684edeeec97584f4f9e0737335d48f8f4dfa505c58ae7a66161a1bb04bc4087d363deb9324d99f9febc23bc8ac3e332e104e0739f676f0289e917010a SHA512 0a4862e2c96f2ed807dd113ef4eab52ac88b9fb38cb5f07aac7b96aa5e7846cc810928c0ee064a2f3393dda85a795d75f1b9bb3562e50702d5521cd2b6a6646a
|
||||
DIST firecracker-v1.14.4-x86_64.tgz 7668273 BLAKE2B 6132167e3e34864b6804c7fb5025fb183f849a800621045566b107f4492ba04743a176cb64c9848f5a82323a29f5fb326c44aa1d30301a0c717b5e05450b5e5c SHA512 d8bd3e0eba5b20654ec75b1b915ae2e18eee452e64e980190364067103f5e2df350a35a4fbb631c71ee25388ca81b8b47e12a16ee521b34f612c391f363b6465
|
||||
DIST firecracker-v1.15.0-aarch64.tgz 7408942 BLAKE2B 7e4bfb071e0631ae4d6f807eb537bd0dad0c4db7bc7aa70deef9b116b2a5fe5d1352122ec924668a485350fdff41f1aef7312af2fb8f5f214f241d48a7da5ebd SHA512 0565fb87ebf751aa22650dad0c25efaf0fb2d6b9aaa42fff989558a6ad1c29704e19c62ee6642fb32a534a60cd703cef1d27ee9f9f6c02af484550dc7aa38447
|
||||
DIST firecracker-v1.15.0-x86_64.tgz 7619992 BLAKE2B 5241a00b8d2888f01e5e93edcae00bfc0b74143de9cca206d395e8b148b4945dd53918a0f901516f21c8c43f64a0b04a228aad590b754d8ffe6a4e03b34cb5c8 SHA512 6f3cde09b4faddd8e91d3e278ce860f4456a17112f73052eae29af80610f5224981ccd5185d63f89a73ef5bf7d41d23f50520ae91491492784599929e917710f
|
||||
DIST firecracker-v1.15.1-aarch64.tgz 7422699 BLAKE2B 253ec53eb13f825db7ee1c5cff4ea57c27bb1549e55eace7cc2147d3d9b32244ddc023eebeba565d27a611a72aaab8695d0e3752414e53c85a9a20a5ba986ecf SHA512 685e2d87e37ffab3b2d6df99a429f8a22c9381c45788d3b8f98b6f6e94dd8af01a89e3a04e48e5bc98986f4a880b0e8867785b2409760fd934710e86de016b1a
|
||||
DIST firecracker-v1.15.1-x86_64.tgz 7622285 BLAKE2B fa14cadb53998ac95997ddc5951464842de0b59f96bf2e71ab7777becc5248a27ad2722a348b3733d09b5ecf5afbbcaa08c099c5071c4a05d3bb985619784bb7 SHA512 2dea44f530af116b442daf339a6da9af7ba4ee924313aaa8c781051b8141fb9a5d6606da0f1c2cf5498da36b8cfd3ee86b9cac573e66afacbd4bb7a66b2dd559
|
||||
|
||||
@@ -1,87 +0,0 @@
|
||||
# Copyright 2021-2026 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=8
|
||||
|
||||
inherit linux-info
|
||||
|
||||
DESCRIPTION="Secure and fast microVMs for serverless computing (static build)"
|
||||
HOMEPAGE="https://firecracker-microvm.github.io https://github.com/firecracker-microvm/firecracker"
|
||||
SRC_URI="
|
||||
amd64? (
|
||||
https://github.com/firecracker-microvm/firecracker/releases/download/v${PV}/firecracker-v${PV}-x86_64.tgz
|
||||
)
|
||||
arm64? (
|
||||
https://github.com/firecracker-microvm/firecracker/releases/download/v${PV}/firecracker-v${PV}-aarch64.tgz
|
||||
)"
|
||||
|
||||
S="${WORKDIR}"
|
||||
|
||||
LICENSE="|| ( Apache-2.0 MIT Apache-2.0-with-LLVM-exceptions ) MPL-2.0"
|
||||
SLOT="0"
|
||||
KEYWORDS="~amd64 ~arm64"
|
||||
|
||||
RESTRICT="test strip"
|
||||
|
||||
RDEPEND="acct-group/kvm"
|
||||
|
||||
QA_PREBUILT="usr/bin/cpu-template-helper
|
||||
usr/bin/firecracker
|
||||
usr/bin/jailer
|
||||
usr/bin/rebase-snap
|
||||
usr/bin/seccompiler-bin
|
||||
usr/bin/snapshot-editor"
|
||||
|
||||
pkg_pretend() {
|
||||
if use kernel_linux && kernel_is lt 4 14; then
|
||||
eerror "Firecracker requires a host kernel of 4.14 or higher."
|
||||
elif use kernel_linux; then
|
||||
if ! linux_config_exists; then
|
||||
eerror "Unable to check your kernel for KVM support"
|
||||
else
|
||||
CONFIG_CHECK="~KVM ~TUN ~BRIDGE"
|
||||
ERROR_KVM="You must enable KVM in your kernel to continue"
|
||||
ERROR_KVM_AMD="If you have an AMD CPU, you must enable KVM_AMD in"
|
||||
ERROR_KVM_AMD+=" your kernel configuration."
|
||||
ERROR_KVM_INTEL="If you have an Intel CPU, you must enable"
|
||||
ERROR_KVM_INTEL+=" KVM_INTEL in your kernel configuration."
|
||||
ERROR_TUN="You will need the Universal TUN/TAP driver compiled"
|
||||
ERROR_TUN+=" into your kernel or loaded as a module to use"
|
||||
ERROR_TUN+=" virtual network devices."
|
||||
ERROR_BRIDGE="You will also need support for 802.1d"
|
||||
ERROR_BRIDGE+=" Ethernet Bridging for some network configurations."
|
||||
|
||||
if use amd64; then
|
||||
if grep -q AuthenticAMD /proc/cpuinfo; then
|
||||
CONFIG_CHECK+=" ~KVM_AMD"
|
||||
elif grep -q GenuineIntel /proc/cpuinfo; then
|
||||
CONFIG_CHECK+=" ~KVM_INTEL"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Now do the actual checks setup above
|
||||
check_extra_config
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
src_compile() { :; }
|
||||
|
||||
src_install() {
|
||||
local my_arch
|
||||
if use amd64; then
|
||||
my_arch=x86_64
|
||||
elif use arm64; then
|
||||
my_arch=aarch64
|
||||
fi
|
||||
|
||||
dodoc "release-v${PV}-${my_arch}/firecracker_spec-v${PV}.yaml"
|
||||
dodoc "release-v${PV}-${my_arch}/seccomp-filter-v${PV}-${my_arch}.json"
|
||||
|
||||
newbin "release-v${PV}-${my_arch}/cpu-template-helper-v${PV}-${my_arch}" cpu-template-helper
|
||||
newbin "release-v${PV}-${my_arch}/firecracker-v${PV}-${my_arch}" firecracker
|
||||
newbin "release-v${PV}-${my_arch}/jailer-v${PV}-${my_arch}" jailer
|
||||
newbin "release-v${PV}-${my_arch}/rebase-snap-v${PV}-${my_arch}" rebase-snap
|
||||
newbin "release-v${PV}-${my_arch}/seccompiler-bin-v${PV}-${my_arch}" seccompiler-bin
|
||||
newbin "release-v${PV}-${my_arch}/snapshot-editor-v${PV}-${my_arch}" snapshot-editor
|
||||
}
|
||||
@@ -1,87 +0,0 @@
|
||||
# Copyright 2021-2026 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=8
|
||||
|
||||
inherit linux-info
|
||||
|
||||
DESCRIPTION="Secure and fast microVMs for serverless computing (static build)"
|
||||
HOMEPAGE="https://firecracker-microvm.github.io https://github.com/firecracker-microvm/firecracker"
|
||||
SRC_URI="
|
||||
amd64? (
|
||||
https://github.com/firecracker-microvm/firecracker/releases/download/v${PV}/firecracker-v${PV}-x86_64.tgz
|
||||
)
|
||||
arm64? (
|
||||
https://github.com/firecracker-microvm/firecracker/releases/download/v${PV}/firecracker-v${PV}-aarch64.tgz
|
||||
)"
|
||||
|
||||
S="${WORKDIR}"
|
||||
|
||||
LICENSE="|| ( Apache-2.0 MIT Apache-2.0-with-LLVM-exceptions ) MPL-2.0"
|
||||
SLOT="0"
|
||||
KEYWORDS="~amd64 ~arm64"
|
||||
|
||||
RESTRICT="test strip"
|
||||
|
||||
RDEPEND="acct-group/kvm"
|
||||
|
||||
QA_PREBUILT="usr/bin/cpu-template-helper
|
||||
usr/bin/firecracker
|
||||
usr/bin/jailer
|
||||
usr/bin/rebase-snap
|
||||
usr/bin/seccompiler-bin
|
||||
usr/bin/snapshot-editor"
|
||||
|
||||
pkg_pretend() {
|
||||
if use kernel_linux && kernel_is lt 4 14; then
|
||||
eerror "Firecracker requires a host kernel of 4.14 or higher."
|
||||
elif use kernel_linux; then
|
||||
if ! linux_config_exists; then
|
||||
eerror "Unable to check your kernel for KVM support"
|
||||
else
|
||||
CONFIG_CHECK="~KVM ~TUN ~BRIDGE"
|
||||
ERROR_KVM="You must enable KVM in your kernel to continue"
|
||||
ERROR_KVM_AMD="If you have an AMD CPU, you must enable KVM_AMD in"
|
||||
ERROR_KVM_AMD+=" your kernel configuration."
|
||||
ERROR_KVM_INTEL="If you have an Intel CPU, you must enable"
|
||||
ERROR_KVM_INTEL+=" KVM_INTEL in your kernel configuration."
|
||||
ERROR_TUN="You will need the Universal TUN/TAP driver compiled"
|
||||
ERROR_TUN+=" into your kernel or loaded as a module to use"
|
||||
ERROR_TUN+=" virtual network devices."
|
||||
ERROR_BRIDGE="You will also need support for 802.1d"
|
||||
ERROR_BRIDGE+=" Ethernet Bridging for some network configurations."
|
||||
|
||||
if use amd64; then
|
||||
if grep -q AuthenticAMD /proc/cpuinfo; then
|
||||
CONFIG_CHECK+=" ~KVM_AMD"
|
||||
elif grep -q GenuineIntel /proc/cpuinfo; then
|
||||
CONFIG_CHECK+=" ~KVM_INTEL"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Now do the actual checks setup above
|
||||
check_extra_config
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
src_compile() { :; }
|
||||
|
||||
src_install() {
|
||||
local my_arch
|
||||
if use amd64; then
|
||||
my_arch=x86_64
|
||||
elif use arm64; then
|
||||
my_arch=aarch64
|
||||
fi
|
||||
|
||||
dodoc "release-v${PV}-${my_arch}/firecracker_spec-v${PV}.yaml"
|
||||
dodoc "release-v${PV}-${my_arch}/seccomp-filter-v${PV}-${my_arch}.json"
|
||||
|
||||
newbin "release-v${PV}-${my_arch}/cpu-template-helper-v${PV}-${my_arch}" cpu-template-helper
|
||||
newbin "release-v${PV}-${my_arch}/firecracker-v${PV}-${my_arch}" firecracker
|
||||
newbin "release-v${PV}-${my_arch}/jailer-v${PV}-${my_arch}" jailer
|
||||
newbin "release-v${PV}-${my_arch}/rebase-snap-v${PV}-${my_arch}" rebase-snap
|
||||
newbin "release-v${PV}-${my_arch}/seccompiler-bin-v${PV}-${my_arch}" seccompiler-bin
|
||||
newbin "release-v${PV}-${my_arch}/snapshot-editor-v${PV}-${my_arch}" snapshot-editor
|
||||
}
|
||||
Reference in New Issue
Block a user