summaryrefslogtreecommitdiff
path: root/omnibus
Commit message (Collapse)AuthorAgeFilesLines
* Force the creation of a relative link for cacertstm/ca_me_harderThom May2018-01-261-3/+3
| | | | Signed-off-by: Thom May <thom@chef.io>
* use a relative link so that docker does not drop our ca bundle linktm/fix_ca_certsThom May2018-01-261-13/+15
| | | | Signed-off-by: Thom May <thom@chef.io>
* Update to Ruby 2.4.3ruby243Tim Smith2018-01-051-15/+13
| | | | | | | | | This resolves this CVE https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/ It also backports a few bugfixes from 2.5.0: https://github.com/ruby/ruby/compare/v2_4_2...v2_4_3 Signed-off-by: Tim Smith <tsmith@chef.io>
* Update for openssl 1.0.2n and inspec 1.48Tim Smith2017-12-071-17/+17
| | | | | | | | | Resolves: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737 Signed-off-by: Tim Smith <tsmith@chef.io>
* Bump openssl and rubygems to latestTim Smith2017-11-061-12/+12
| | | | | | | | | | | | | | | | openssl: CVE-2017-3736 (OpenSSL advisory) [Moderate severity] 2nd November 2017: There is a carry propagating bug in the x86_64 Montgomery squaring procedure. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen. Reported by Google OSS-Fuzz. CVE-2017-3735 (OpenSSL advisory) [Low severity] 28th August 2017: While parsing an IPAdressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Reported by Google OSS-Fuzz. rubygems: Whitelist classes and symbols that are in loaded YAML. See CVE-2017-0903 for full details. Fix by Aaron Patterson. Signed-off-by: Tim Smith <tsmith@chef.io>
* Use latest omnibus-softwareupdate_depsTim Smith2017-10-251-18/+22
| | | | Signed-off-by: Tim Smith <tsmith@chef.io>
* Don't spin in powershell module that launches chef processesksubrama/SUSTAIN-731Kartik Null Cating-Subramanian2017-10-061-8/+15
| | | | Signed-off-by: Kartik Null Cating-Subramanian <ksubramanian@chef.io>
* update to latest omnibus software for libxml fixesThom May2017-09-281-16/+14
| | | | Signed-off-by: Thom May <thom@chef.io>
* update ruby versiontm/2_4_2Thom May2017-09-141-24/+27
| | | | Signed-off-by: Thom May <thom@chef.io>
* Bump omnibus-software versiontm/fix_6060Thom May2017-08-081-12/+12
| | | | Signed-off-by: Thom May <thom@chef.io>
* Updating / fixing deps to fix acceptance (#6292)Bryan McLellan2017-07-241-7/+7
| | | | | | | | | | * Remove call to update_omnibus_overrides The rake tasks `update_omnibus_overrides` was removed in dafd5139338aed684410e311b9be906b346db678. * Update acceptance/Gemfile.lock to match Gemfile.lock for mixlib-shellout This should fix acceptance where we're seeing both mixlib-shellout 2.3.1 and 2.3.2.
* Update omnibusjsinha/BEN-180Jaymala Sinha2017-07-201-9/+9
| | | | Signed-off-by: Jaymala Sinha <jsinha@chef.io>
* Rename IPS symlinks resource to projectnameJaymala Sinha2017-07-201-0/+0
| | | | | | | | | | | | Since the symlinks created inside /usr/bin conflict between our "Angry" and mainstream projects on our testers, we are updating IPS the packaging to override "projectname-symlinks.erb" if it exists. We are leaving symlinks.erb for backward compatibilty. PRs with resource filename updates in chef and omnibus-toolchain will follow this PR. Related omnibus PR: https://github.com/chef/omnibus/pull/793 Signed-off-by: Jaymala Sinha <jsinha@chef.io>
* Fix solaris/x86 buildstm/fix_solaris_libtoolThom May2017-07-141-8/+8
| | | | | | The actual fix is chef/omnibus-software#864 Signed-off-by: Thom May <thom@chef.io>
* Update SHA1 fingerprint for MSI signing certschisamo/update-msi-signing-certSeth Chisamore2017-07-131-2/+2
| | | | | | The cert has been updated as the old one expires on 2017-07-25. Signed-off-by: Seth Chisamore <schisamo@chef.io>
* Update omnibus pinning to enable automated s3 omnibus cache populationshain/update_omnibusScott Hain2017-07-121-14/+14
| | | | Signed-off-by: Scott Hain <shain@chef.io>
* update comment about nokogiriLamont Granquist2017-07-101-2/+4
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* move nokogiri config to omnibusLamont Granquist2017-07-101-0/+3
| | | | | | | | | this hand-builds it with the software dep, and its not a direct dep of chef itself and shouldn't be in the Gemfile.lock anyway, plus we need to pin via omnibus_overrides.rb and double-pinning in the Gemfile.lock is just added fussiness Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bump zlib to 1.2.11tm/zlibThom May2017-06-161-10/+10
| | | | Signed-off-by: Thom May <thom@chef.io>
* Copy chef gems in placetm/copy_gemsThom May2017-05-311-18/+20
| | | | | | Provided by chef/omnibus-software#836 Signed-off-by: Thom May <thom@chef.io>
* simplify omnibus config and greenify builds againLamont Granquist2017-05-0926-843/+26
| | | | | | | | | | | | | | this is also necessary for bundler-1.14.x i'm still not entirely clear why we ever needed all the fussy software gem configs or what the build-chef / build-chef-gem infrastructure ever did for us. it seems to have been mostly micro-optimization around building the software gems before bundle installing the project in order to take advantage of git caching. i aggressively don't care about that, this is quite fast enough. we can install nokogiri and libgecode early and that should take care of 98% of the build optimization issue. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Use updated omnibus softwaretm/chase_gemsThom May2017-04-122-3/+2
| | | | | | Fixes: #6049 Signed-off-by: Thom May <thom@chef.io>
* install gem command manuallyThom May2017-04-122-13/+14
| | | | Signed-off-by: Thom May <thom@chef.io>
* Update omnibus Gemfile.lockAdam Leff2017-04-051-8/+8
| | | | | | | | Picking up chef/omnibus#771 to correct an issue with the BFF packager, currently causing issues on the chef-test job for AIX testers. Thanks for nothing, braces-in-filenames! Signed-off-by: Adam Leff <adam@leff.co>
* Add InSpec to chef omnibus buildsadamleff/add-inspecAdam Leff2017-04-052-0/+11
| | | | | | | | | | | | | This change adds InSpec to the Chef Gemfile, making it easier for our community to use InSpec for testing without requiring them to `chef_gem` install it prior to use. This also helps our users who wish to use InSpec but are in an air-gapped environment. Including our preferred testing library in our Omnibus builds will make it much easier for those users to use InSpec. Signed-off-by: Adam Leff <adam@leff.co>
* Chef-13: remove iconv from the chef buildLamont Granquist2017-04-023-8/+7
| | | | | | | | | | | | | | | | pulls in chef/omnibus-software#806 and removes iconv from both nokogiri and ruby. ruby hasn't needed iconv since 1.9.x and everyone should be using the Encoding library by now. nokogiri will lose support for things like Shift-JIS inside of XML but UTF-8, UTF-16LE/BE, ISO-8851-1(Latin-1), ASCII and "HTML" encoding are all supported by nokogiri natively. if users need more they need to be maintaining their own nokogiri installs and accept the maintenance costs themselves. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* pull omnibus-software fix for windows buildsLamont Granquist2017-03-291-1/+1
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bumping omnibus lockfileLamont Granquist2017-03-291-3/+3
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* disable shipping nokogiri on windows for nowLamont Granquist2017-03-291-1/+1
| | | | | | | | | | | | nokogiri does not have a ruby-2.4 release for windows this is slightly complicated because we still need nokogiri in the Gemfile.lock for travis. i'm starting to think we should have a Gemfile.travis and Gemfile.travis.lock or something and stop using groups for that. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bump _XOPEN_SOURCE to 600 for ruby 2.4 on SolarisLamont Granquist2017-03-282-6/+11
| | | | | | unbreaks builds. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bumping again mostly to get chef-zeroLamont Granquist2017-03-281-5/+5
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bumping everythingLamont Granquist2017-03-281-6/+6
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bump ruby to 2.4.1Lamont Granquist2017-03-281-8/+8
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Bump to current master of omnibustm/fix_omnibus_windowsThom May2017-03-201-7/+8
| | | | Signed-off-by: Thom May <thom@chef.io>
* simplify dependency bumping rake tasks and bump all depsLamont Granquist2017-03-101-8/+8
| | | | | | | this eliminates all the "run gem pristine" warning spam and i believe uses "bundle lock" correctly. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Revert "simplify dependency bumping rake tasks and bump all deps"Lamont Granquist2017-03-101-8/+8
| | | | | | This reverts commit 6628f708acdefe2fc6bff85a1edade89f0b4d8ee. oops.
* simplify dependency bumping rake tasks and bump all depsLamont Granquist2017-03-101-8/+8
| | | | | | | this eliminates all the "run gem pristine" warning spam and i believe uses "bundle lock" correctly. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Compress debs and rpms with xztm/xc_compressThom May2017-03-091-0/+10
| | | | Signed-off-by: Thom May <thom@chef.io>
* Use omnibus-toolchain on Windows platforms.windows_toolchainRyan Hass2017-03-082-16/+15
| | | | | | | This updates the branch pinnings to use the omnibus-toolchain enabled version of omnibus and omnibus-software. Signed-off-by: Ryan Hass <rhass@users.noreply.github.com>
* build ohai from gitlcg/ohai-from-gitLamont Granquist2017-03-063-1/+49
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* forgot to run the rake task to update depsLamont Granquist2017-03-031-10/+10
| | | | | | now the build should be fixed. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* bump omnibus gems and change protocol to httpsLamont Granquist2017-03-032-32/+31
| | | | | | | | | | | | the `github:` argument gets translated to git:// urls, which are insecure and i have a .gitconfig which translates those to https:// urls, and the effect of that is that when _I_ bump the Gemfile.lock the urls don't match and `bundle install` with the `--deployment` flag gets all pissy and I break the build, and since i don't habitually `bundle install --deployment` locally I never see the failures. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Bump chef version to 13.0.0Lamont Granquist2017-02-281-14/+14
| | | | | | | | | | | This requires pulling in master of several gems, bumps all the other gems, plus pulls in new kitchen-appbundle-updater which supports pulling master of ohai. Note that kitchen-windows is disabled because it turns out it was broken and red on 12.19 all along. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Revert "updating dependencies"Lamont Granquist2017-02-161-11/+11
| | | | | | This reverts commit bd45e8360cf233cbadba17c4ee9870d450a610f8. Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* updating dependenciesLamont Granquist2017-02-151-11/+11
| | | | Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* fix specs: RedundantReturn, RedundantSelf, RedundantBeginLamont Granquist2017-02-131-1/+1
| | | | | | department of redundancy department Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
* Remove a lot of old restraintsTom Duffield2017-02-091-8/+8
| | | | Signed-off-by: Tom Duffield <tom@chef.io>
* Bump deps to avoid corrupt Gemfile.lock warningTim Smith2017-02-071-12/+12
| | | | Signed-off-by: Tim Smith <tsmith@chef.io>
* Update depstduffield/fix-syntaxTom Duffield2017-01-241-3/+3
| | | | Signed-off-by: Tom Duffield <tom@chef.io>
* Bump depsTom Duffield2017-01-231-6/+6
| | | | Signed-off-by: Tom Duffield <tom@chef.io>
View Lorry Controller Status