summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* skopeo: update to v1.8.0Bruce Ashfield2022-08-092-38/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop our gpme patch, since it is no longer needed. Bumping skopeo to version v1.8.0-75-gb95e0811, which comprises the following commits: 61593fcc Revert "Change a repo used for sync tests" 62158a58 Vendor unreleased c/image with OCI artifact support 7900440a Use errors.As() instead of direct type checks c654871b Remove uses of pkg/errors 7abcca93 Modify error messages on failures to close f7df4a08 Introduce noteCloseFailure, use it for reporting of cleanup errors 33116235 Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 89089f3a Update IRC information ba6af16e Use bytes.ReplaceAll instead of bytes.Replace(..., -1) 2024e2e2 Update & fix skopeo multiarch image Containerfiles 774ff9d1 Cirrus: Migrate multiarch build off github actions 899d3686 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 2f77d213 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 2009d1c6 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 fe022809 [CI:DOCS] skopeo.spec.rpkg: Fix syntax highlighting 71d450cb [CI:DOCS] Makefile: include cautionary note for rpm target 37388544 CoPR: Autobuild rpm on rhcontainerbot/podman-next 38f4b9d0 Enable schema1 support on the test registries 1b5fb465 Update for docker/distribution CLI change e9ed5e04 Use an updated CI image bbdabebd Change a repo used for sync tests 92c0d0c0 Use testing.T.Setenv instead of os.Setenv in tests a3a72342 Update go.mod to Go 1.17 e9379d15 Bump github.com/docker/docker 69840fd0 Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 63622bc7 Bump github.com/containers/ocicrypt from 1.1.4 to 1.1.5 6b584598 Cirrus: use Ubuntu 22.04 LTS 00a58e48 Update to github.com/opencontainers/runc >= 1.1.2 263a5f01 fix make completions for all POSIX shells 0a3be734 Update to gopkg.in/yaml.v3 v3.0.0 0ad7ec24 Updated skopeo logo with new artwork 014d47f3 [CI:DOCS] Pin actions to a full length commit SHA d78bc827 shell completion: add completion for transports names 6c2a415f shell completion: add install instructions docs 9bed0a9e shell completion: add Makefile target ebc5573e Stop calling gpgme-config 1ebb2520 Update c/image 9b4c1f15 Remove cgo_pthread_ordering_workaround.go 6863fe2d add completion command to generate shell completion scripts 3eca480c Bump github.com/docker/docker 149dea8d Bump github.com/containers/storage from 1.40.2 to 1.41.0 804f7c24 Avoid hard-coding the location of bash e47765ed Config files live in /usr/local/etc on FreeBSD 13ceb93b Bump github.com/docker/docker cd4607f9 Move to v1.8.1-dev 37727a45 Bump to v1.8.0 75d94e79 Bump ocicrypt to v1.1.4 737ed9c2 Vendor in containers/storage v1.40.2 3c286dd1 Vendor in containers/(common, storage, image) b8b0e993 [CI:DOCS] install.md: include distro package info links d9035db6 [CI:DOCS] install.md: remove Kubic package info for Ubuntu 916a395d Cirrus: Update to F36 w/ netavark+aardvark-dns 8960ab3c Update vendor of containers/(common,storage,image) d9d3ceca Use filepath.WalkDir instead of filepath.Walk 23a46057 Extract four copies of the same loop into a function 4811c07d Update users of deprecated io/ioutil 4ef35a38 Add option to specify the identity for signing 38ae81fa Bump containers/image to include sign identity option 9b09b6eb delete non-existent option in the cmdline example c233a6dc Add dry-run mode to skopeo-sync e6802c4d Update skopeoimage/README.md that tags are v-prefixed 80871786 Bump to v1.7.1-dev f45ae950 Release 1.7.0 3bc06242 Bump github.com/prometheus/client_golang to v1.11.1 89cd1951 Bump github.com/containers/common from 0.47.4 to 0.47.5 7f6b0e39 Bump github.com/containers/storage from 1.38.2 to 1.39.0 f6bf5746 Bump github.com/docker/docker a9cc9b91 Improve the (skopeo delete) man page ac7edc7d Bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3 c819bc17 Update the command to install golint 6a2f38d6 Formally record that we require Go 1.15 2019b79c Use check.C.MkDir() instead of manual ioutil.TempDir() calls f79cc8ae Update to Go 1.14 and revendor ac4c291f Use assert.ErrorContains 5aaf3a9e Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 bd524670 Simplify the proxy server a bit 693de29e Add various missing error handling f44ee2f8 Remove assignments to an unused variable a7190099 Rename "self" receiver 7ba56f3f Add support for docker-archive: to skopeo list-tags ad3e8f40 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 0703ec6c Bump github.com/docker/docker 52002728 Update github.com/containerd/containerd Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: update to 2.8.1 -latestBruce Ashfield2022-08-091-1/+1
| | | | | | | | | | Bumping docker-distribution to version v2.8.1-2-gdc5b207f, which comprises the following commits: 38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16 96cc1fdb FIx typo e744906f Update 2.8.1. release notes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.17Bruce Ashfield2022-08-091-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: update to 20.10.17Bruce Ashfield2022-08-092-13/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.25Bruce Ashfield2022-08-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.0-189-g78992d160, which comprises the following commits: 3e085ffc3 build(deps): bump github.com/containers/buildah from 1.26.1 to 1.26.2 4ca27d0b0 Remove enable_custom_shm_size 4149fa03e Add annotations to allow power management configuration 0f4d79209 Fix release notes pull behavior 44d42542f oci: unconditionally set as not stopping after a stop stops stopping 56b807510 container_server: drop StopContainerAndWait b4ddab0e7 server: take container server Stop method 7cda39bb4 container server: drop duplicated Remove function f03e563ec config: set version-file-persist to empty by default 935652c90 version: don't wipe if filename is empty 2e3b19475 bundle: always install runc c57d3b05c scripts: install runc if not found in get script 6d729cd4d remove Vagrantfile 87a4e8eb7 Fix a link in install.md building section about dependencies e8e523dda Retry release notes push if failed ee80a2b9e Bump version to 1.25.0 c00962a51 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 a2d1ca204 server: userns support 41f67c326 vendor, kubernetes: update to kubernetes-1.25.0-alpha.2 df5e39094 Fix release-notes tag determination b068d17cf Upload release notes for each tag 66d33db6b Fix unit test coverage f61332ed9 hostport: don't use unexported symbol 01a7c0276 server: use k8s.io/utils/clock 20ef6c73e update ubuntu releases 8a981fef4 Pin upstream node e2e test to latest `main` 7f0604ceb Verify SBOM for static binary bundle 489caa132 Use default token for stale bot 0a3bfc078 Switch to golang native error wrapping b86d8c343 build(deps): bump github.com/stretchr/testify from 1.7.4 to 1.7.5 80d1d7908 Run more stale operations da2dce1e1 chore: Set permissions for GitHub actions c800d043b build(deps): bump github.com/urfave/cli/v2 from 2.10.2 to 2.10.3 e30ae00a1 Add stale bot workflow 863d1a334 cgmgr/systemd: don't recalculate cgroup path d94e48924 build(deps): bump sigs.k8s.io/bom from 0.3.0-rc1 to 0.3.0-rc.2 8c7cc72e4 Generate SBOM for static binary bundle 26138ec52 build(deps): bump k8s.io/klog/v2 from 2.60.1 to 2.70.0 0cdf37c86 Verify signed artifacts via `get` script fdb6c3b30 server: unify logging in resourcecleaner 896456bc8 server: move cleanup funcs closer to function that provisioned resource 49ad4b0ad build(deps): bump github.com/urfave/cli/v2 from 2.10.1 to 2.10.2 7b2475303 build(deps): bump github.com/stretchr/testify from 1.7.3 to 1.7.4 0f46b58cb Fix container status for HostToContainer propagation 99d86536e Fix docs validation 9f105d8f0 build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.3 748fd5d2e build(deps): bump github.com/urfave/cli/v2 from 2.8.1 to 2.10.1 93fc6b72e build(deps): bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1 491b03a30 Update cgroupfs cgroup manager de8672f7e contrib/test/int/build/runc: rm build tags 0b3153d7d Bump runc to v1.1.3 a3171b395 Sign static binary bundle via cosign 704f9aeb6 dependencies: update conmon 333cc8988 contrib/test/integration: skip installing conmon via ansible 4b120cbef Fix lint CI 40df9c9ae Bump `go.opentelemetry.io/*` dependencies 06b6e86b2 Bump `containers/*` dependencies 67c18103e Cleanup: remove BuildContainerdBinaryName as it is not called anymore. b480e8a3b Bump golang dependency on containerd 864733f77 build(deps): bump actions/checkout from 2 to 3 e2a32f36c bump ocicni to v0.4.0 63399460e build(deps): bump github.com/containers/ocicrypt from 1.1.3 to 1.1.5 e67e36753 build(deps): bump google.golang.org/grpc from 1.46.2 to 1.47.0 24d401919 Bump golang dependencies f72969022 Fix unit tests 37c1a01fe drop use of deprecated package io/ioutil 8bdadc77c security: add 2022 audit report 79e404fa5 conmonmgr: query help text to see if it supports log-global-size-max a4080bb34 add support for conmon log-global-size-max b7f15ac3d oci: cap exec sync length 1e277b836 utils/RunUnderSystemdScope: fix wrt channel deadlock 03e4aa482 Bump cri-tools to v1.24.2 2fbf71963 test: set cri stats more idiomatically efff3878c server: reduce object creation in List{Containers,PodSandboxes} 0cde0a6de update kubeadm init instructions e5bb0c600 docs: update for CNI package change 62a14cf91 oci: reuse helper function to reduce duplication 9fea6e219 oci: kill children of container if it is in the host pid namespace f6d963871 Add pause/unpause description to readme 35ca21623 Fix review issues fa435f79c Use a default umask of `0o022` 6293c07b9 Fix it case failed 5d75cc24a Fix review issues 26432e631 changesinREADME 908111147 move 1.23 to 1.24 in README 85bcbe8d1 OWNERS: remove fgiudici eb41d30e0 build(deps): bump actions/download-artifact from 2 to 3 c14faa62e build(deps): bump golangci/golangci-lint-action from 2 to 3 7fe39c7bc Add integration test for remove paused ctr 33997ae93 vendor: bump crypto package 8a090364d 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one 1e61f1318 build(deps): bump actions/setup-go from 2 to 3 c40fa5350 fix review issues 985c182a4 build(deps): bump google.golang.org/grpc from 1.43.0 to 1.46.2 cef56110d build(deps): bump actions/upload-artifact from 2 to 3 e932964fc build(deps): bump cachix/install-nix-action from 12 to 17 bf67bfd4f build(deps): bump actions/cache from 2 to 3 7db2b3b39 Try to force delete ctr when in paused state 0c1bf03fa chore: Included githubactions in the dependabot config c657f4623 Fix some uses of Atoi 54d7da638 typo fix 2b8a7055c Typo fix d4ec76bd4 Add CodeQL Github actions ed53fa23b Use go 1.18 buildinfo for version output 21c8f6bde Bump third party dependencies d68931ddb Run critest with conmonrs Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.24.1 -latestBruce Ashfield2022-08-091-1/+1
| | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.1-18-gb0d2ef327, which comprises the following commits: 81ef20b38 Fix unit test coverage 7b4941478 Fix release-notes tag determination 0dde66a3c Upload release notes for each tag 29762438c Fix container status for HostToContainer propagation 2cf9cf9df bump ocicni to 0.4.0 5481d35e9 Fix unit tests b0040ddd9 test: set cri stats more idiomatically cf0037d1a utils/RunUnderSystemdScope: fix wrt channel deadlock 5b75a4763 oci: kill children of container if it is in the host pid namespace 489819e33 bump to v1.24.1 8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max fc852b402 add support for conmon log-global-size-max 77f0429d9 oci: cap exec sync length Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.3Bruce Ashfield2022-08-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits: eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md 7219387e cgroups: systemd: skip adding device paths that don't exist 93d1807b libcontainer: relax getenv_int sanity check 8242c05d script/seccomp.sh: check tarball sha256 017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4 51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid 3a09da6b ci: drop docker layer caching from release job 8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x) fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError d105e052 libct/seccomp/config: add missing KillThread, KillProcess e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d dc083b2b fix deprecated ActKill bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.1.3Bruce Ashfield2022-08-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits: eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md 7219387e cgroups: systemd: skip adding device paths that don't exist 93d1807b libcontainer: relax getenv_int sanity check 8242c05d script/seccomp.sh: check tarball sha256 017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4 51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid 3a09da6b ci: drop docker layer caching from release job 8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x) fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError d105e052 libct/seccomp/config: add missing KillThread, KillProcess e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d dc083b2b fix deprecated ActKill bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: add 5.19 inc fileBruce Ashfield2022-08-091-0/+4
| | | | | | | The major stacks have been tested against 5.19, so we add the tracking .inc to indicate support. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: drop 5.10 .incBruce Ashfield2022-08-091-4/+0
| | | | | | oe-core has removed 5.10 from master, so we drop our tracking .inc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: Use gcc-based toolchainAndrei Gherzan2022-08-031-0/+3
| | | | | | | | clang-based builds are still broken due to: https://github.com/llvm/llvm-project/issues/53999 Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Use gcc-based toolchainAndrei Gherzan2022-08-031-0/+3
| | | | | | | | clang-based builds are still broken due to: https://github.com/llvm/llvm-project/issues/53999 Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Backport patch to fix duplicate switch statementsAndrei Gherzan2022-08-032-0/+91
| | | | | | | This will fix clang-based builds. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.6.6Bruce Ashfield2022-08-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.6-10-g4e92d8e7e, which comprises the following commits: 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0 99c56d217 ctr: fix label args used in NewContainer 51de785f8 [release/1.6] Make building static binaries simpler 2ea4e6348 update runc binary to v1.1.3 61213742a Prepare release notes for v1.6.6 f92068350 Implicitly discard the input to drain the reader 2eb67213b [release/1.6] Limit the response size of ExecSync 185e87275 Prepare release notes for v1.6.5 5c9c83d3e [release/1.6] update golang to 1.17.11 fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version e33b9e709 archive: add human-readable hint to Lchown error 3bb5a9d19 config: improve config v1 deprecation message 6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3 f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 9f99be51b [release/1.6] update golang to 1.17.10 246a1b42e vendor: github.com/opencontainers/runc v1.1.2 43717e03a update runc binary to v1.1.2 82a77be2d reverts removal of parallel run from critest 06bdfeb67 Allow git commands in Vagrantfile 70839a344 Bug fix for mount path handling 1520bae0f update critools to v1.24 0d1d2953b Prepare release notes for 1.6.4 42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1 e9f22e008 Update go-cni to v1.1.5 be4909e95 cri: close fifos when container is deleted baa386dc0 Prepare release notes for v1.6.3 e8da82adc tracing: fix panic on startup when configured 1764ea9a2 CRI: improve image pulling performance 9cd76d465 [release/1.6] update golang to 1.17.9 c09cc1242 check for duplicate nspath possibilities fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect 8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main f2ba2041b update runc binary to v1.1.1 b736b4dab go.mod: github.com/opencontainers/runc v1.1.1 72f1e58c7 CI: add Rocky Linux 8 7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4 5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events da35c19da Test turning off golang CI lint cache a0213573b Add nolint:staticcheck to platform-specific calls ad0036ed6 Update prometheus client vendor c7bbf316f Mount devmapper xfs file system with "nouuid" option. a1de89c3e Make the temp mount as ready only in container WithVolumes 82a12edf2 moving up to go-cni v1.1.4 28b44826b native: fix deadlock from leaving transactions open 8461dd6e5 Prepare release notes for v1.6.2 91800c4e9 Add static checks to shim for Windows ca51d7f85 Update go.mod go version 765df6609 [release/1.6] remove empty go mod to allow building for go 1.18 e9af80859 Fix the Inheritable capability defaults. 7c929318a Update TestNormalize to only test Windows 06985e7d0 Upgrade golangci-lint and its GitHub Action b13d3e05c cri: relax test for system without hugetlb Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python: synchronize colorama with meta-pythonBruce Ashfield2022-07-281-1/+2
| | | | | | | | | | | | | Our "canary" recipe for colorama picks up potentially destabilizing changes in meta-python, but is kept in sync to avoid autombuilder issues. If we can't stay in sync, we'll fork the recipe and change our dependencies to match. There has been a change in the meta-oe version, around checksums and native integration. Both those changes are fine, so we update to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-image-minimal: reduce the x86 wic build dependenciesChristopher Clark2022-07-201-0/+2
| | | | | | | | | | | | | | | | | The Xen image recipe provides a default WKS_FILE for x86 builds to enable booting the image either in qemu or directly on hardware. Add settings for WKS_FILE_DEFAULT_DEPENDS that specify the wic image build dependencies, which are lower than the defaults used without it. This change reduces the amount of build resources required for CI of this image and images that are derived from it. Since WKS_FILE is specified separately for x86-64 and qemux86-64 overrides, do the same for WKS_FILE_DEFAULT_DEPENDS, even though the dependencies for the two separate WKS_FILEs are currently the same. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman; fix patch fuzz/failureBruce Ashfield2022-07-171-19/+17
| | | | | | | | | | patch a33188f [podman: Fix host contamination] appears to have introduced fuzz/failures. Which strangely wasn't picked up on merge testing. We refresh the patch to fix the issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-umoci: add parameter for stop signalVasileios Anagnostopoulos2022-07-152-0/+5
| | | | | | | | Add an optional parameter that allows to override the stop signal that is used. Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-umoci: properly handle tags other than latestPascal Bach2022-07-151-17/+17
| | | | | Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: Update to v1.9Andrei Gherzan2022-07-153-34/+38
| | | | | Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: Fix buffer overflow bug on workdir pathAndrei Gherzan2022-07-152-1/+36
| | | | | Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Add support for rootless modeAndrei Gherzan2022-07-155-1/+36
| | | | | | | This support is disabled by default and exposed via PACKAGECONFIG. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Silence docker emulation warningsAndrei Gherzan2022-07-151-0/+4
| | | | | | | | | Podman can run in via a docker symlink emulating docker commands. By default this generates a runtime warning. This change silences it via the provided interface. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* slirp4netns: Runtime recommend the tun kernel moduleAndrei Gherzan2022-07-151-0/+2
| | | | | | | | | slirp4netns uses a TAP device to connect to the internet in an unprivileged way. Without the required kernel support (TAP/TUN), slirp4netns will fail at runtime. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lopper: update to -latestBruce Ashfield2022-07-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping lopper to latest, which comprises the following commits: 9159040 lopper: assists: baremetallinker_xlnx: Fix race condition in memory domain handling 38d18ca lopper/fdt: add /memreserve/ to preprocessing routines 33ee8e6 sanity: add /memreserve/ test c6431bf fdt: fix dtb handling of common prefix nodes 211c902 lopper: add support for /memreserve/ 4545eed base: add powerdomains to default phandle meta data bc95bc2 tree: handle variable sized phandle properties 69d8849 openamp: Update YAML handling to match spec 578de1d lopper: assists: bmcmake_metadata_xlnx: Fix race condition in the assist file 14d2aa3 tree: ensure that phandle is initialized before export a6b38e8 tree: make label generation more robust 9faf923 extract-xen: add [extract-xen] prefix, and write xen,passthrough 00c14d5 assists: add imagebuilder wrapper assist d879eaf extract: use lopper.write for export of trees ca80fbb extract: improve xen passthrough configuration 791f0f5 lopper.py: allow execution from any directory 0c62984 lops: fix comment style 3598d54 lopper/tree: handle invalid last phandle 697aa62 assists: create generic tree extraction and xen-processing assists 5ae6650 lopper/tree: improve phandle and node operations 5a230a5 lopper/assists: allow chained command line assists bbb92ee lopper/tree: make import/export more robust b8aeb54 lopper/tree: improve node iteration and resolution 692cbc9 lopper: lops: lop-domain-linux-a53-prune: Remove unneeded nodes for Linux boot cd25873 lopper: assists: baremetalconfig_xlnx: Fix KeyError exception 58dd00c lopper: assists: baremetal_xparameters_xlnx: Fix KeyError exception 01ae242 openamp: xlnx: Update RPMsg-kernel mailbox information fbc4329 lopper: assists: petalinuxconfig_xlnx: Fix indentation and width params 5c3074b lopper: assists: petalinuxconfig_xlnx: Add support for additional meta-data cc3de25 lopper: assists: breametallinker: fix race condition in memory node handling 7723fed lopper: lops: a72 linux: remove axi intc node 743432e openamp: xlnx: remove TCM compat strings 53746be lopper: lops: lop-domain-linux-a53-prune: remove amba_pl pruning 0d56f35 lopper: lops: lop-domain-linux-a72: move prune operations to separate lop fdbbe7b openamp: xlnx: add support for Versal platform 1839bdb openamp: xlnx: add 'power-domain' prop for Xilinx R5 remoteproc driver SRAMs 14d1caf lopper: lops: lop-domain-linux-a53: move prune operations to separate lop 7169df0 openamp: xlnx: remove dead code ec9fdce openamp: xlnx: remove definitions node 07f48d0 openamp: xlnx: Add text file for OpenAMP Channel information 637863f openamp: xlnx: update IPI for mappings for ZU+ platform 1b41e52 openamp: xlnx: rpmsg: generate rpmsg device tree nodes a643273 openamp: xlnx: remoteproc: generate remoteproc device tree nodes a833729 openamp: fix bug for domain-to-domain subnodes for openamp relations. ea6d8e1 lops: openamp: describe OpenAMP relation properties as phandles 40c2070 openamp: translate YAML Remoteproc carveouts to DTS fda40d8 openamp: translate YAML RPMsg carveouts to DTS 9d938f7 openamp: xlnx: parse pre-existing nodes in YAML eafb17a lopper: process .dtsi input files the same as .dts ce4638a lopper: assists: petalinuxconfig_xlnx: Add assist file for generating petalinux tool required configuration cfa0593 fdt: make node prefix lookups more robust 2f3f2d2 lopper/format: allow tabs to be used when writing dts c7b22ce lopper/subsystem: update access to latest specification Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: remove obsolete sdl PACKAGECONFIGRoss Burton2022-07-131-2/+0
| | | | | | | | | | | | | | Nothing in Xen respects --enable-sdl, and nothing in Xen links to libSDL, so this PACKAGECONFIG is obsolete. It looks like the last user of SDL in Xen was removed in "Remove internal tools/ioemu tree"[1] back in 2008. [1] xen 19dc3860dcfde9bc4ec4ef35bb1337e13276f630 Signed-off-by: Ross Burton <ross.burton@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: pass prefix maps to fix buildpaths reproducible build issuesChristopher Clark2022-07-101-11/+10
| | | | | | | | | | | | | To fix warnings when the buildpaths QA test is enabled, pass the file and debug prefix map options that were previously supplied only for reproducible builds, adding them to the DEBUG_PREFIX_MAP variable and supplying that to CC. Testing indicates that passing the prefix maps needs to be via CC rather than the EXTRA_CFLAGS_XEN_CORE/TOOLS variables. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen/sysvinit: add hvc0 console only if not there alreadyBertrand Marquis2022-07-071-2/+8
| | | | | | | | | | | | | | The base inittab recipe is creating inittab entries for consoles listed in SERIAL_CONSOLES. For qemu, this contains "115200,hvc0" so an entry is created in inittab for it. Prevent to create a second entry if hvc0 is present in SERIAL_CONSOLES. On qemuarm, this solves issues with the console when starting on top of Xen as dom0. Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* colorama: update to 0.4.5Bruce Ashfield2022-07-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Keeping in sync with meta-python. We mainatain our own version of the recipe, as docker-compose and others have been sensitive to version bumps in the past. We pick up the following commits: f8ab4fd version bump 0.4.5 f411cb9 Release checklist: no need to rebuild 372c486 Omit demo06 from demos.sh 0f5c36f Further tweaks made to support the release c29f133 tweaks for build process 6105ab3 Mention fixed ValueError at exit in CHANGELOG e866230 Release checklist includes '.candidate' releases 35e9a91 Add methods to ``StreamWrapper`` to allow better pickling 8ba396b Replace deprecated pypyX with pypy-X.Y 8a364bd Added test 788106f Detached stream fix 7899683 Add light colors in README 912fe9b Add support for Python 3.10 53e0db3 Update README-hacking.md e8e311b Update README-hacking.md 69f4644 Replace Travis CI with GitHub Actions 5ed1070 README suggests not using Colorama to print colors 536e966 fixup! Fix typo discovered by codespell 1d92c3a . 16847d7 Make bandit, codespell, and pytest mandatory tests f307a6d GitHub Action to lint Python code 402d236 Note that escapes are stripped out for redirected outputs. eea3a58 Added new demo f690a2b Use ASCII decoding explicitly in setup.py 0275556 Add support and testing for PyPy3 293d782 Remove discussion of unmaintained nose for running tests 8f0587b Remove unused test imports and utils d8a0836 Add support for Python 3.9 9946cfb Reference my blog p[ost about annotated tags 9b770a0 README-hacking on tagging 86bfecd Add --extra-index-url to test-release scripts 938f5c5 Add Makefile docstring to test-release e0a314e Release scripts now include sdist. 14a21e9 README mentions Pypy compatibility. d8a7ff0 fix README-hacking typo 99765af Fix README link markup d080175 Fix README link markup 5a393b2 Move contributing info to README-hacking.md f7efb11 Fix Makefile PHONY declaration 759d5c7 Bump to version 0.4.5-pre b7596ad Fix Changelog markup 24721c0 Belated CHANGELOG entries for 0.4.4 release 688f6cc Unicode README chars that don't render on PyPI dc8460c Make tests pass on all OS. faafef8 Add light colors in README Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Fix host contaminationAndrei Gherzan2022-07-052-0/+126
| | | | | | | | | | | | | | | | The project's internal Makefile uses BUILDFLAGS variable to pass arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a patch to align this and avoid using host headers in which case, a musl build will fail similarly to: | [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk' | [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:100: undefined reference to `__fprintf_chk' | collect2: error: ld returned 1 exit status Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: install sysvinit initscriptsJeremy Puhlman2022-06-271-0/+5
| | | | | | | The redhat versions work with out modification. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: add rdpends for netifaces and charset-normalizerJeremy Puhlman2022-06-271-0/+2
| | | | | Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: add depend on udev in sysvinit case.Jeremy Puhlman2022-06-271-1/+2
| | | | | | | | Just as with systemd, the build needs the dev manager installed as a dependancy Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: add recipe for buildah v1.26sakib.sajal@windriver.com2022-06-201-0/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | buildah is a command line tool, to be installed and run on target, that can be used to: - create a working container, either from scratch or using an image as a starting point - create an image, either from a working container or via the instructions in a Dockerfile - images can be built in either the OCI image format or the traditional upstream docker image format - mount a working container's root filesystem for manipulation - unmount a working container's root filesystem - use the updated contents of a container's root filesystem as a filesystem layer to create a new image - delete a working container or an image - rename a local container Testing: Setup the build directory: $ . oe-init-build-env <build_dir> Add to local.conf: IMAGE_INSTALL:append = " buildah kernel-modules" KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \ features/netfilter/netfilter.scc \ features/lxc/lxc-enable.scc" IMAGE_ROOTFS_EXTRA_SPACE = "5242880" Build image: $ bitbake core-image-minimal Run the image: $ runqemu nographic kvm qemuparams="-m 4096" On target: Pull an image: > cnt=$(buildah from fedora) Or build from Dockerfile > buildah bud -t <image_name>:<tag> . Mount the image: > mnt=$(buildah mount ${cnt}) Install packages on the container rootfs: > dnf install --installroot $mnt <packages_to_install> -y Copy local files to the container: > buildah copy $cnt <local_file> <dest_on_container> Save the changes to an image > buildah commit --format docker $cnt <name>:<tag> Run the image using buildah: > buildah run $cnt /bin/sh Or using docker: > docker run -it <name>:<tag> Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-logrus: sync SRC_URI with nerdctl and k3sChen Qi2022-06-201-2/+2
| | | | | | | | Use the lower case and remove the '.git' suffix to sync with other go-logurs SRC_URIs in nerdctl and k3s recipes. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netns: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: adjust CGO_CFLAGS and CGO_LDFLAGS settingsChen Qi2022-06-201-2/+2
| | | | | | | | The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: clean up depends and fix CGO settingsChen Qi2022-06-201-3/+2
| | | | | | | | | | | According to https://github.com/containers/skopeo/blob/main/install.md#building-from-source, the ostree dependency is not needed. Also, adjust the CGO_CFLAGS and CGO_LDFALGS to use target flags instead of the SDK ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: upgrade to 2.8.1Chen Qi2022-06-201-3/+3
| | | | | | | v2.8.1 is the latest stable version. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix build error on new hostsChen Qi2022-06-201-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Fix settings for GOROOT, CGO_CFLAGS and CGO_LDFLAGS. The previous setting for GOROOT is no longer valid as the directory does not exist for now. So adjust the GOROOT setting. Currently CGO_CFLAGS is set to use BUILDSDK_CFLAGS, and this is incorrect. We need target flags instead of SDK related flags. Such setting happens to work for some hosts. However, when building on newer hosts, we get QA error like below: ERROR: docker-distribution-v2.7.1-r0 do_package_qa: QA Issue: /usr/sbin/registry contained in package docker-registry requires libc.so.6(GLIBC_2.34)(64bit), but no providers found in RDEPENDS_docker-registry? [file-rdeps] The above error was found on hardknott on host Fedora 35. Tracking down the error and I found it's using host stuff which is likely to be caused by using incorrect CGO_CFLAGS. As the master branch is using the same settings, it has the same issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix the inehrit and systemd settingsChen Qi2022-06-201-2/+2
| | | | | | | | | | | | In order for systemd variables such as SYSTEMD_AUTO_ENABLE to have effect, we need to inherit the systemd class. We also need to specify the package which contains the service. As go.bbclass already inherits goarch.bbclass, we only need to inehrit go.bbclass. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Disable highmem on qemuarmMichal Orzel2022-06-201-2/+4
| | | | | | | | | | | | | | | | | | By default, highmem option is enabled for machine types later than virt-2.12. This allows qemu to place devices and RAM in physical address space above 32-bits. This can cause issues as according to the documentation Xen supports up to 12GiB of physical address space. Recently the issue was observed using runqemu, that was causing Linux running on top of Xen to stall when trying to access ECAM space placed by qemu at 256GiB mark. Even though this issue is most probably related to QEMU and not Xen (the investigation showed that it can map ECAM space correctly), it is best to avoid such issues by disabling highmem on qemuarm. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "xen: Disable PCI on qemuarm with Xen"Michal Orzel2022-06-201-22/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit fb0a7b97db4f419b82309f98a4944ae3330d1e2e. Justification: Commit fb0a7b97db4f removed the PCI node from the qemu device tree due to the issue when trying to access PCI configuration space that was causing Linux running on top of Xen to end up in an infinite loop. The investigation showed that the problem occurs due to qemu placing ECAM space at 256GiB mark. Even though Xen officially supports on arm32 up to 12GiB of physical address space, it is able to map it correctly for dom0. However, when Linux tries to access the ECAM space and the stage2 translation fault occurs, HPFAR register contains incorrect IPA. We can say it is incorrect because using hardware AT instruction or software lookup, we can obtain the correct IPA from the same VA. This can suggest that the problem is related to QEMU fault handling. Instead of removing the PCI node the follow-up commit will disable highmem option in qemu which will cause placing ECAM space in the 32-bit space. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update recipe formatting and map googlesource to githubBruce Ashfield2022-06-202-2585/+3084
| | | | | | | | | | Reformat the k3s depedencies and src_uri into a more readible and maintainable format. We also map googlesoruce to github for better fetching, as suggested by Diego Sueiro <diego.sueiro@arm.com>. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.24.1Bruce Ashfield2022-06-073-55/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.1 We refresh one patch, add add textrel to our QA check skip list. Which imports the following commits: 489819e33 bump to v1.24.1 8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max fc852b402 add support for conmon log-global-size-max 77f0429d9 oci: cap exec sync length 9441b6700 Fix review issues ee1a8519f Fix it case failed 027ab3f50 Fix review issues db4a4aa51 Add integration test for remove paused ctr 76d1a929e 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one 3b25e48e4 fix review issues eff3af248 Try to force delete ctr when in paused state 62d81d722 vendor: bump crypto package 3d516c53b oci: Move exec probe process to container cgroup, if enabled 8294126fa config: Add monitor_exec_cgroup config option 9a2723cb4 Reenable pod runtime in package spec ae024bd0a dependencies: Upversion conmon dependency to v2.0.27 1737a4702 Sanitize conmonrs log level and print used version 5658fd35a Wrap runtime pod errors b4bbd4d94 openshift test: use go 1.18 aa13dfb7b openshift test: add skip_pod_runtime to cri-o spec d6aff5b63 Bump nixpkgs and use go1.18 4864ffc60 Fix golangci-lint errors d0664581d add runtime pod c33e14fc1 vendor conmon-rs 3b80d009b oci: add IsInfra method 0f601939e oci: lock for runtime creation 1376307fb test: use go 1.18 for lint b98f15851 Move WillRunSystemd call after iterating the mounts 2a75c8307 Add sha256sum bundle files to uploaded artifacts 9f6a6724d crio:fix a bug about log container 901310bdd oci: use runtime handler level monitor fields 12758b2b3 config: assume default conmon cgroup if it's not specified 240de5f3f template: add comment to runtimes table 5a8223c75 config: replace Conmon specific fields with runtime handler versions de2105a17 main(): don't treat reexec.Init() == true as an error 1de3e5ed2 crio:try fix integration test failed, because unpause not on time 6dfc68de4 config: increase pids limit to unlimited and deprecate it and logSizeMax 9ff165b4e bump ocicni to 0.3.1 b447dff77 bump containernetworking cni to 1.1.0 3fa33fe48 crio: unpause ctr after test 8e9ddee87 crio:fix golint check warning 019c578fa fix(stats): incorrect id on zfs driver 153bb668c crio:fix crun it failed 87f7f00f3 crio:update status after pause/unpause container 54912d7c8 oci: cleanup log path if the container failed to create 7a65dc340 utils: remove unused io related packages 9b111b532 runtime_vm: use containerd deps for container io directly 2da7482db remove the external dependency on the conntrack binary 1955cc167 go.{mod,sum}: update CDI deps to v0.3.2. a8687861c server: no longer use hardcoded timeouts 64270ef91 fix builds by passing -buildvcs=false on 386 48230e006 test: bump to go 1.18.1 d41e3cbe6 Disable systemd-mode cgroup detection conditionally e10376810 crio: Fix review issues and make format shell file 78308acd4 Add bats test to ensure namespaces are cleaned up on pod stop ec1414424 pinns: Check calloc return value adfe57b5d bump to 4.11 image 5e72b4133 crio: Fix code style 270d195ec crio: implement extended interface for pause/unpause container 31c278301 seccomp: drop unshare syscall from default profile 1098cc9b9 Retry to set CPU load balancing before return the error 7ccafd559 build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.1.0 9b735153b Fix integration tests 862b27b8c Switch to registry.k8s.io for the sandbox Image: 9ebdeef1e Change the mcs order in selinux.bats to test the canonization of selinux label 1a9a3fdae Canonize selinux label for comparison with filesystem label b106fcd71 oci: fix segfault in pod stop code 3e9d77257 capabilities: drop inheritable afe738b18 Bump ocicni to v0.3.0 7b5a67f51 Switch to ginkgo/v2 1999baa2f Add bats test for infra_ctr_cpuset taskset 9fada28f7 Add bats test for zombie conmon cleanup 15afd20ee Update golangci-lint and config 13d7b9738 Bump golang to 1.18.x 1af1f8af2 pinns: Pass sysctls as repeated '-s' arguments eb8715d30 Fix shell format c3095bf20 README: Update EOL & Version Skew links 05c443b06 config/sysctl: fail if there is a + in the value ea39e74f2 Fix critest 739379b0c Enable `--seccomp-use-default-when-empty` by default 98c18d1cb test: update to new runc behavior 4cb2407a2 Automatically chcon and restorecon on get script bef94e1f8 Pin `github.com/u-root/u-root` 3be4dba79 Switch to `main` for `get` script 09399e41f Bump nixpkgs 51a800af0 Pin nixos/nix version 97df87f71 test: allow state of failing tests to be kept intact. 32d682800 factory: take capabilities setup a643dad27 Add dedicated security information d65414758 test/crio-wipe.bats: don't nuke $TESTDIR too early. ff36ee6e0 test/cgroups.bats: fix incorrect setup order. 128165130 test/cdi.bat: add CDI integration tests. a0d3fd8aa config,cli: add configuration for CDI. f35fba448 pkg/container: implement CDI device injection. 572616137 go.{mod,sum}: update deps, vendor. 683baa221 contrib/test: force BATS symlink in place. 0be4d0611 contrib/test: always install BATS for integration. 2426bdb4c openshift e2e: bump cri-o version e337fa364 bump to 1.24.0 5cad5f287 test: avoid concurrent crictl config writes. bc240fd4c server: stop deleting pod from idIndex if already gone a4b5f0c15 CI: use kubernetes from git tip 03064f4ca test/e2e: update skipped test list 65f93912d contrib/test/int/build/kubernetes: rm deprecated RunAsGroup 2e7a4d375 server: use syncfs instead of fsync d9102e748 config/sysctls: validate against invalid spaces 230409570 [gitpod] use latest workspace full 6c3144af2 hack/build-rpms.sh: fix yum-builddep failures 52adfe025 ci: bump shellcheck to 0.8.0 92edea6dd test/apparmor: suppress bogus SC2031/2031 ca10da055 test/cni_plugin_helper: suppress shellcheck warning 0655dd213 test/test_runner: rm eval, fix comment 1acde4379 OWNERS: move rhatdan to emeritus approvers d280c71ce OWNERS: move runcom to emeritus approvers 4041adc55 utils: Sync: use f.Sync 14d742672 Deny empty `localhost/` AppArmor profiles bd02dac92 OWNERS: add first round of reviewers 626446e5c OWNERS: Move @sboeuf to emeritus approver 8aab1e8f2 int/storage: getReferences: fix gocritic warning f1ca25bc5 server: fix (rather than ignore) gocritic warning bc839156e server/streaming: specify the linter fa2fd247f ci: bump golangci-lint to 1.44.0 cc6ed292b scripts/release-notes: fix printf args f0e70901e scripts: fix a typo b1705dc28 int/version: fix forcetypeassert linter warning 851916f0d server/container_create_linux: fix forcetypeassert warning a2760072b utils: fix forcetypeassert linter warnings d295f8b24 server/streaming: fix nolintlint warning dd70c87ab int/storage: fix gosimple warning f26fafdc5 int/config/cgmgr: fix stylecheck warnings bc91cdb57 Format code using gofumpt 0.2.1 98d945cc9 Makefile: fix a comment bb96cd907 test/crio-wipe: fixups 107fe3853 ISSUE_TEMPLATE: fix grammatical error 1affa13d9 OWNERS: move @sameo to emeritus_approvers 4dc761f9f ISSUE_TEMPLATES: update membership form to be reviewer form 592aa5159 ISSUE_TEMPLATES: add a couple of more 238e4d009 image: use imageCache value for ImageStatus() 411e15058 contrib/bundle: remove deprecated kubelet option. 15048929c minor edit: removed dead link from TOC 0dd5d2d00 oci: drop WaitContainerStateStopped 6449ff0d3 oci: fix a leaked goroutine 40165cb5b internal/factory/container: initialize from pkg/container 0dabb91b3 internal/factory/sandbox: initialize from pkg/sandbox 6e2472c92 README: update branches a0f88d3a5 Updated format a53f1d221 Generate checksum files for artifacts 728731808 test: add test for skipped sysctls 1667b5a66 server: skip sysctls that would affect the host a7ac4683c deep copy List{PodSandbox,Container} structs 183ac018f GOVERNANCE: fix links 18dfcd273 oci: always have conmon log to syslog c424e85e7 README: add reference to governance 008b3541a add GOVERNANCE.md 33063001c issue templates: add membership request form aa8130f62 Add Debian_11 OS variable on installation instructions of Debian Signed-off-by: Wang Kai <persistence201306@gmail.com> e5dad09ee criocli: produce diff-friendlier zsh completions. b299c80c5 ci: use main branch for conmon bcf069b12 server: fix race with kubelet 0769411bb Fix runtime panic on pod sandbox stats retrieval ef1746095 update go to 1.17 in go.mod acde72556 Reuse createContainerIO in CreateContainer 0731a9b57 Fix vm containers couldn't restore after CRI-O restart 386d4a447 ci: use main version of runc 28585442e openshift e2e: bump ci image 35c02b56e server: fix a potential NULL-pointer dereference. 20370fa95 Documentation: expand on CNI CIDRs in the kubeadm tutorial 143a623ad test: update tests for allowed_devices 56929cdb9 config: add AllowedDevices option 2aceed0f0 pass the main mount point to fix crypto profiles binding 6b887e9c3 Add Nestybox to the CRI-O adopters list. 33e25b47b server: drop duplicate log message 25a2eec40 pkg/container: fix container device GID fallback. a68b239af bump crio commit for upstream k8s CI d7da8b2b0 adds config template linting 86e43fc28 adds comments to default values ff2a04e8b server: don't set memory swap when it's not enabled 5ebc4a407 Inherits storage configurations from storage.conf if crio config does not set d0d8fb3a7 use cmdrunner singleton 2237f2658 conmonmgr: refactor for new CommandRunner 878040d10 cmdrunner: update mocks and add target to makefile b3bb86659 config: prepend commands with taskset if InfraCtrCPUSet is configured e9f0bb6c8 cmdrunner: add tests for prepended commands 04e9c61e3 cmdrunner: create singleton fd2e2aeec Use timeout for conmon cgroup move 9af5e3363 build(deps): bump google.golang.org/grpc from 1.42.0 to 1.43.0 9a051dede Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels 347f04161 test: add test ensuring a stopped pod is restored 86fd03b81 sandbox stop: remove namespaces e02d5bf15 restore: handle removed namespaces 334e925ac Partially revert "restore: restore stop before managing namespace" 948b92bd7 restore: ensure containers are wiped on reboot c3f75859b build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 78e1c80af build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 d8ea9f6ca vendor: bump c/image to 5.17.0 11c127f3d pinns: Add LDFLAGS to Makefile Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix patch fuzz and remove unused patchChangqing Li2022-06-075-66/+27
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix QA issue about shebang too longChen Qi2022-06-071-1/+1
| | | | | | | | | There's a QA issue about criu complaining the shebang of crit script is too long. We should replace it with '#!/usr/bin/env python3'. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-07 00:22:44 +0000