Weekly portage-stable package updates 2024-11-11

.github/workflows/portage-stable-packages-list

@@ -14,6 +14,7 @@ acct-group/kvm
 acct-group/lp
 acct-group/man
 acct-group/messagebus
+acct-group/named
 acct-group/netperf
 acct-group/nobody
 acct-group/ntp
@@ -46,6 +47,7 @@ acct-group/wheel
 acct-user/dnsmasq
 acct-user/man
 acct-user/messagebus
+acct-user/named
 acct-user/netperf
 acct-user/nobody
 acct-user/ntp
@@ -214,6 +216,7 @@ dev-lang/python
 dev-lang/python-exec
 dev-lang/python-exec-conf
 dev-lang/rust
+dev-lang/rust-common
 dev-lang/swig
 dev-lang/tcl
 dev-lang/yasm
@@ -315,7 +318,7 @@ dev-python/installer
 dev-python/jaraco-context
 dev-python/jaraco-functools
 dev-python/jaraco-text
-dev-python/jinja
+dev-python/jinja2
 dev-python/lark
 dev-python/lazy-object-proxy
 dev-python/linkify-it-py
@@ -391,12 +394,10 @@ eclass/db-use.eclass
 eclass/desktop.eclass
 eclass/dist-kernel-utils.eclass
 eclass/distutils-r1.eclass
-eclass/eapi7-ver.eclass
 eclass/eapi8-dosym.eclass
 eclass/edo.eclass
 eclass/edos2unix.eclass
 eclass/elisp-common.eclass
-eclass/eqawarn.eclass
 eclass/estack.eclass
 eclass/fcaps.eclass
 eclass/flag-o-matic.eclass
@@ -457,6 +458,7 @@ eclass/rpm.eclass
 eclass/ruby-single.eclass
 eclass/ruby-utils.eclass
 eclass/rust-toolchain.eclass
+eclass/rust.eclass
 eclass/savedconfig.eclass
 eclass/secureboot.eclass
 eclass/selinux-policy-2.eclass
@@ -478,7 +480,6 @@ eclass/usr-ldscript.eclass
 eclass/vcs-clean.eclass
 eclass/vcs-snapshot.eclass
 eclass/verify-sig.eclass
-eclass/versionator.eclass
 eclass/vim-doc.eclass
 eclass/vim-plugin.eclass
 eclass/virtualx.eclass
@@ -500,7 +501,7 @@ net-analyzer/traceroute
 net-dialup/lrzsz
 net-dialup/minicom
 
-net-dns/bind-tools
+net-dns/bind
 net-dns/c-ares
 net-dns/dnsmasq
 net-dns/libidn2

changelog/updates/2024-11-19-weekly-updates.md

@@ -0,0 +1,23 @@
+- SDK: autoconf ([2.72](https://lists.gnu.org/archive/html/autotools-announce/2023-12/msg00003.html))
+- SDK: cmake ([3.30.5](https://cmake.org/cmake/help/v3.30/release/3.30.html#id5))
+- base, dev: azure-vm-utils ([0.4.0](https://github.com/Azure/azure-vm-utils/commits/v0.4.0/))
+- base, dev: bind ([9.18.29](https://bind9.readthedocs.io/en/v9.18.29/notes.html#notes-for-bind-9-18-29))
+- base, dev: bpftool ([7.4.0](https://github.com/libbpf/bpftool/releases/tag/v7.4.0))
+- base, dev: checkpolicy ([3.7](https://github.com/SELinuxProject/selinux/releases/tag/3.7))
+- base, dev: gawk ([5.3.1](https://lists.gnu.org/archive/html/info-gnu/2024-09/msg00008.html))
+- base, dev: libarchive ([3.7.7](https://github.com/libarchive/libarchive/releases/tag/v3.7.7))
+- base, dev: libselinux ([3.7](https://github.com/SELinuxProject/selinux/releases/tag/3.7))
+- base, dev: libsepol ([3.7](https://github.com/SELinuxProject/selinux/releases/tag/3.7))
+- base, dev: libxml2 ([2.12.8](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.8))
+- base, dev: mokutil ([0.7.2](https://github.com/lcp/mokutil/commits/0.7.2/))
+- dev: gentoolkit ([0.6.8](https://gitweb.gentoo.org/proj/gentoolkit.git/log/?h=gentoolkit-0.6.8))
+- docker: docker ([27.3.1](https://github.com/moby/moby/releases/tag/v27.3.1))
+- docker: docker-cli ([27.3.1](https://github.com/moby/moby/releases/tag/v27.3.1))
+- sysext-python: charset-normalizer ([3.4.0](https://github.com/jawah/charset_normalizer/releases/tag/3.4.0))
+- sysext-python: distlib ([0.3.9](https://github.com/pypa/distlib/blob/0.3.9/CHANGES.rst))
+- sysext-python: jaraco-functools ([4.1.0](https://github.com/jaraco/jaraco.functools/blob/v4.1.0/NEWS.rsto))
+- sysext-python: pyproject-hooks ([1.2.0](https://github.com/pypa/pyproject-hooks/blob/v1.2.0/docs/changelog.rst))
+- sysext-python: rich ([13.9.3](https://github.com/Textualize/rich/releases/tag/v13.9.3))
+- sysext-python: trove-classifiers ([2024.10.21.16](https://github.com/pypa/trove-classifiers/commits/2024.10.21.16/))
+- sysext-python: truststore ([0.10.0](https://github.com/sethmlarson/truststore/blob/v0.10.0/CHANGELOG.md))
+- vmware: libmspack ([1.11](https://github.com/kyz/libmspack/commits/v1.11/libmspack))

sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild

@@ -127,7 +127,7 @@ RDEPEND="${RDEPEND}
 	net-analyzer/openbsd-netcat
 	net-analyzer/tcpdump
 	net-analyzer/traceroute
-	net-dns/bind-tools
+	net-dns/bind
 	net-firewall/conntrack-tools
 	net-firewall/ebtables
 	net-firewall/ipset

sdk_container/src/third_party/coreos-overlay/coreos-devel/sdk-depends/sdk-depends-0.0.1.ebuild

@@ -35,7 +35,7 @@ DEPEND="
 	dev-util/checkbashisms
 	dev-util/pahole
 	dev-util/patchelf
-	net-dns/bind-tools
+	net-dns/bind
 	>=net-dns/dnsmasq-2.72[dhcp,ipv6]
 	net-libs/rpcsvc-proto
 	net-misc/curl

sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-dns/bind

@@ -0,0 +1,62 @@
+# Keep only tool binaries and libraries those binaries need.
+ndb_install_mask="
+        /etc
+        /var
+        /usr/bin/arpaname
+        /usr/bin/named-*
+        /usr/bin/nsec3hash
+        /usr/lib/systemd
+        /usr/lib/tmpfiles.d
+        /usr/lib64/bind
+        /usr/lib64/libisccc*
+        /usr/libexec
+        /usr/sbin
+"
+
+INSTALL_MASK+="${ndb_install_mask}"
+PKG_INSTALL_MASK+="${ndb_install_mask}"
+
+unset ndb_install_mask
+
+# Override fowners to ignore changing owner or group to named. The
+# only files that this happens for are files that we have put into
+# {PKG_,}INSTALL_MASK. This will help us avoid installing
+# acct-user/named and acct-user/group.
+fowners_script=$(command -v fowners)
+fowners() {
+    if [[ ${#} -gt 0 && ( ${1} = named:* || ${1} = *:named ) ]]; then
+        return 0
+    fi
+    "${fowners_script}" "${@}"
+}
+
+# The pkg_postinst phase function wants to generate an rndc.key file
+# with /usr/sbin/rndc-confgen script if the key file is missing, then
+# change the ownership to the named group. We don't need the key file
+# at all as it's presumably for named. Also, we masked the installtion
+# of the script. Thus we fool the phase function by putting an empty
+# key file there, so the function won't trigger the generation. We
+# drop the key file later too.
+#
+# TODO: The paths ought to be prefixed with ${EROOT}, but the
+# 9.18.29-r2 ebuild is botched in this regard. This was fixed in
+# 9.18.31-r1, so when we update to that version, the ${EROOT} prefix
+# will need to be added.
+cros_pre_pkg_postinst_add_fake_rndc_key() {
+    local dir='/etc/bind'
+    if [[ ! -d "${dir}" ]]; then
+        mkdir "${dir}" || die
+    fi
+    touch "${dir}/rndc.key" || die
+}
+# TODO: This function should just do:
+#
+# rm -rf "${EROOT}/etc/bind" || die
+cros_post_pkg_postinst_drop_fake_rndc_key() {
+    # Remove the file only if it exists and is empty.
+    local dir='/etc/bind' file="${dir}/rndc.key"
+    if [[ -f "${file}" && ! -s "${file}" ]]; then
+       rm -f "${file}" || die
+    fi
+    rmdir "${dir}" # it's fine if it fails
+}