coreos-kernel: prune old kernel versions
coreos-kernel: enable module and kexec signature verification

The module verification is in permissive mode by default, loading
unsigned modules will simply taint the kernel. The kexec verification
doesn't directly impact us right now since we are not using the newer
file based syscall right now.
Merge pull request #952 from marineam/secure

Enable kernel module signing
Revert "app-emulation/docker: bump to v1.3.1"

This reverts commit 87efde004420ce93bca42d531d140d05150e44ba.
Bumps docker-1.3.1.ebuild -> docker-1.3.0-r1.ebuild.
Merge pull request #954 from crawford/docker

Revert "app-emulation/docker: bump to v1.3.1"
sdk-depends: install UEFI firmware for QEMU by default

For use with the `qemu_uefi` vm type.
grub: mark new version as stable

This is the first stable ebuild using our own grub git repo which
includes support for the `linuxefi` command, required for using grub
with Fedora's shim and UEFI secure boot. Includes other minor updates
since the snapshot cut used by the previous stable ebuild:

Andrei Borzenkov (1):
      Use full initializer for initrd_ctx to avoid fatal warnings with older GCC

Andrey Borzenkov (1):
      cleanup: grub_cpu_to_XXX_compile_time for constants

Colin Watson (5):
      * configure.ac: Remove several unnecessary semicolons.
      Support grub-emu on x32 (ILP32 but with x86-64 instruction set)
      Tidy up ChangeLog formatting.
      Add a new "none" platform that only builds utilities
      Fix in-tree --platform=none

Khem Raj (1):
      Fix build with glibc 2.20

Matthew Garrett (1):
      Add support for linuxefi

Michael Chang (2):
      Fix incorrect address reference in btrfs
      * grub-core/osdep/unix/config.c: Remove extraneous comma.

Michael Marineau (12):
      linguas: use en_US as UTF-8 locale, C.UTF-8 is not a standard locale.
      gpt: start new GPT module
      tests: fix path to words file on Gentoo/CoreOS
      gpt: rename misnamed header location fields
      gpt: record size of of the entries table
      gpt: consolidate crc32 computation code
      gpt: add new repair function to sync up primary and backup tables.
      gpt: add write function and gptrepair command

Peter Jones (1):
      Initialized initrd_ctx so we don't free a random pointer from the stack.

Valentin Dornauer (1):
      ACPIhalt: Add more ACPI opcodes.

Vladimir Serbinenko (5):
      Fix wrong commit
      * grub-core/gmodule.pl.in: Accept newer binutils which output
        empty column rather than 0x0.
      * grub-core/commands/keylayouts.c: Ignore unknown keys.
      * grub-core/normal/main.c: Don't drop to rescue console in
        case of password-protected prompt and no menu entries.
      Revert "Use -Wl,--no-relax rather than -mno-relax for uniformity."
Merge pull request #957 from marineam/grub

grub: mark new version as stable
Merge pull request #955 from marineam/secure

sdk-depends: install UEFI firmware for QEMU by default
baselayout: Add OEM lib directories to default search path

Although this shouldn't strictly be required, OEM binaries can use RPATH
or RUNPATH, there are plenty of corner cases that waste time. For
example if a library in OEM links to another OEM the linker verification
performed by build_packages won't catch it since RPATH would be provided
by the binary that happens to use those libraries, not the library files
themselves. Such tediousness isn't worth wasting more time over and as
long as OEM is after the normal system libraries this should be safe.
Merge pull request #958 from marineam/oem

baselayout: Add OEM lib directories to default search path
Add oem-niftycloud