summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* virt-manager: update RDEPENDSscarthgapChua, Zachary Zet Li2025-07-311-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update RDEPENDS to fix following errors when run virt-manager: | File "/usr/share/virt-manager/virtManager/virtmanager.py", line 13, in <module> | import gi | ModuleNotFoundError: No module named 'gi' | File "/usr/lib/python3.12/site-packages/gi/__init__.py", line 122, in require_version | raise ValueError('Namespace %s not available' % namespace) | ValueError: Namespace LibvirtGLib not available | File "/usr/share/virt-manager/virtinst/xmlapi.py", line 7, in <module> | import libxml2 | ModuleNotFoundError: No module named 'libxml2' | File "/usr/share/virt-manager/virtinst/install/urlfetcher.py", line 16, in <module> | import requests | ModuleNotFoundError: No module named 'requests' Update RDEPENDS for package virt-manager-install which are required by command virt-install. For example, the error is as follows when missing virsh: Error launching ['virsh', '--connect', 'qemu:///system', 'console', 'myvm']: [Errno 2] No such file or directory Commits are taken from 'master' branch: - 032415ef6b7d48ca34bb1d23cb8c194a38e0c369 - 238020e42060764e7d2aadbb43a12792ed8b7e27 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Chua, Zachary Zet Li <zachary.zet.li.chua@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: upgrade from 2.0.0-beta to 2.0.5Chen Qi2025-07-082-34/+6
| | | | | | | | 0001-Makefile-update-default-PACKAGE-to-v2.patch is dropped as it has been merged in new version. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2025-6032Praveen Kumar2025-07-082-0/+62
| | | | | | | | | | | | | | | A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6032 Upstream-patch: https://github.com/containers/podman/commit/1569c209829530b1f42e8c2fce851de8003ab3fe Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: Fix CVE-2024-9675Praveen Kumar2025-04-192-0/+114
| | | | | | | | | | | | | | | | | | A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah. References: https://nvd.nist.gov/vuln/detail/CVE-2024-9675 https://security-tracker.debian.org/tracker/CVE-2024-9675 Upstream-patch: https://github.com/containers/buildah/commit/cffa820dc8be07efdb7fc4e8e8b9ff44c70aaf93 Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: fix Upstream-Status formatMartin Jansa2025-04-092-4/+2
| | | | | | | | | | | | | | | | | * fixes: DEBUG: Executing python function do_qa_patch ERROR: QA Issue: Malformed Upstream-Status in patch TOPDIR/meta-virtualization/recipes-containers/docker/files/CVE-2024-36620.patch Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : Upstream-Status: [patch-status] ERROR: QA Issue: Malformed Upstream-Status in patch TOPDIR/meta-virtualization/recipes-containers/docker/files/CVE-2024-36621.patch Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : Upstream-Status: [patch-status] ERROR: Fatal QA errors were found, failing task. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: fix ptest contains reference to TMPDIR [buildpaths]Bin Lan2025-04-021-1/+10
| | | | | | | | | | | | | The EGREP in ptest/tests/atlocal contains the build paths. The CFLAGS in ptest/tests/atlocal contains the build paths. This change set fixs: - set EGREP to "grep -E" in ptest/tests/atlocal - set CFLAGS to " " in ptest/tests/atlocal by updating the patch openvswitch-add-ptest-71d553b995d0bd527d3ab1e9fbaf5a2ae34de2f3.patch. Signed-off-by: Bin Lan <bin.lan.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: Fix CVE-2024-36621Praveen Kumar2025-04-022-0/+84
| | | | | | | | | | | | | | | | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-36621 Upstream-patch: https://github.com/moby/moby/commit/37545cc644344dcb576cba67eb7b6f51a463d31e Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: Fix CVE-2024-36620Praveen Kumar2025-04-022-0/+41
| | | | | | | | | | | | | | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-36620 Upstream-patch: https://github.com/moby/moby/commit/ab570ab3d62038b3d26f96a9bb585d0b6095b9b4 Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: Adjust to glibc __rseq_size semantic changeGuocai He2025-04-022-1/+96
| | | | | | | | | | | On criu version 3.19.0: When use "criu restore -d -D checkpoint" to restore, the error is: 1272: Error (criu/cr-restore.c:1498): 1295 killed by signal 11: Segmentation fault The root casue is that the glibc updated and criu should adjust to glibc __rseq_size semantic change. Signed-off-by: Guocai He <guocai.he.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* tini: Support posix basename from musl libcKyungjik Min2025-03-242-0/+77
| | | | | | | This fixes building with musl libc. Signed-off-by: Kyungjik Min <dpmin7@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix CVE-2025-24976Chen Qi2025-03-062-0/+50
| | | | | | | Backport patch to fix CVE-2025-24976. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: patch CVE-2025-24965Peter Marko2025-03-062-0/+46
| | | | | | | Pick commit https://github.com/containers/crun/commit/0aec82c2b686f0b1793deed43b46524fe2e8b5a7 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2024-9676Chen Qi2025-01-302-0/+188
| | | | | | | Backport patch to fix CVE-2024-9676. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix CVE-2024-9676Chen Qi2025-01-302-0/+188
| | | | | | | Backport patch to fix CVE-2024-9676. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.30.8Chen Qi2025-01-301-2/+2
| | | | | | | | | The following two patches are dropped as they are in 1.30.8: - CVE-2024-5154-0001.patch - CVE-2024-5154-0002.patch Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: upgrade 1.1.12 -> 1.1.14Hugo SIMELIERE2025-01-071-2/+2
| | | | | | | | | | | | | Alignment with runc-docker version Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Add runtime dependenciesLeonard Anderweit2025-01-071-1/+4
| | | | | | | | | Add missing runtime dependencies on python modules asyncio, json and getpass provided by unixadmin. Sort the dependencies alphabetically while at it. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen.inc: python 3.12: fix datetime deprecation warningStanley Stanton2024-11-271-1/+1
| | | | | | | | | | | | | | | | | | | Parsing xen.inc with a host distro that provides python 3.12 (such as Ubuntu 24.04) generates the following deprecation warning: DeprecationWarning: datetime.datetime.utcfromtimestamp() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.fromtimestamp(timestamp, datetime.UTC) This warning comes from the use of datetime.datetime.utcfromtimestamp() in get_build_time_vars. datetime.UTC seems to be a getter wrapper for datetime.timezone.utc, which is already available on older host distro python versions (I have tested only with python 3.10 provided by Ubuntu 22.04) so, opt to use that instead to prevent a breaking change. Signed-off-by: Stanley Stanton <stanley.stanton@taitcommunications.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: set USERADD_DEPENDS to avoid package_write_rpm failureChen Qi2024-11-121-0/+2
| | | | | | | | | | | | | | | | | | | | When do_package uses state cache and is not re-run but do_package_write_rpm is re-run, then we get the following error: Exception: KeyError: 'getpwuid(): uid not found: 996' This is because libvirt does chown to polkitd in do_install and polkitd is from polkit. Here's an easy way to reproduce this issue: bitbake libvirt -c cleansstate && bitbake libvirt -c package && \ bitbake libvirt -c clean && bitbake libvirt -c package_write_rpm So make use of USERADD_DEPENDS to ensure polkitd exists to fix this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-cli: use main branchMartin Jansa2024-11-121-1/+1
| | | | | | | * master was renamed to main long time ago Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: upgrade 1.1.12 -> 1.1.14yocto-5.0.5scarthgap-5.0.5Divya Chellam2024-11-021-2/+2
| | | | | | | | | | | Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-host-config: Remove centos registryLukasz Czechowski2024-11-021-1/+1
| | | | | | | | | | Update registry list by removing 'registry.centos.org' entry. This registry is no longer available. Decommissioning of the registry was announced in the thread: https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/EHGCQUHLDQ6LI474ZAB7MPRZFJD77P3S/ Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* linux-yocto_virtualization.inc: If using externalsrc adjust dependencyMark Hatle2024-10-101-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using externalsrc, the system will disable a number of tasks such as do_validate_branches, do_unpack and do_patch. The do_kernel_metadata task is configured to run after do_validate_branches do_unpack and before do_patch. Since all of these have been removed, the task will never run. The do_kernel_metadata task is responsible for populating the recipe-sysroot-native/kcfg directory via it's own dependency to yocto-cfg-fragments-native:do_populate_sysroot. Without do_kernel_metadata running, do_kernel_configme will fail to run with errors like: ERROR: linux-xlnx-6.6.40+git-r0 do_kernel_configme: Feature '../recipe-sysroot-native/kcfg/cfg/virtio.scc' not found, this will cause configuration failures. ERROR: linux-xlnx-6.6.40+git-r0 do_kernel_configme: Check the SRC_URI for meta-data repositories or directories that may be missing ERROR: linux-xlnx-6.6.40+git-r0 do_kernel_configme: Set KERNEL_DANGLING_FEATURES_WARN_ONLY to ignore this issue Fix this issue by detecting if we're running with externalsrc, and then adding the task do_kernel_metadata (from the current recipe) as a dependency of do_kernel_configme. To reproduce th original issue: $ . ./oe-initbuild-env $ bitbake linux-yocto -c patch $ cp -r tmp/work-shared/<machine>/kernel-source linux-yocto edit the conf/local.conf adding: DISTRO_FEATURES:append = " virtualization" INHERIT += "externalsrc" EXTERNALSRC:pn-linux-yocto = "${TOPDIR}/linux-yocto" $ rm -rf tmp $ bitbake linux-yocto -c menuconfig Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* device-tree: Rename EXTRA_OVERLAYS to EXTRA_DT_INCLUDE_FILESSandeep Gundlupet Raju2024-10-101-10/+10
| | | | | | | | | Rename EXTRA_OVERLAYS to EXTRA_DT_INCLUDE_FILES as these variables are renamed in https://github.com/Xilinx/meta-xilinx/blob/master/meta-xilinx-core/recipes-bsp/device-tree/device-tree.bb recipe. Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: port xen-tools.inc from masterBruce Ashfield2024-09-271-0/+7
| | | | | | | | | | The cherry-pick of xen-4.19 from master missed the xen-tools.inc file. This results in 9p not being packaged and a QA error during the build. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-colorama: drop recipeBruce Ashfield2024-09-261-14/+0
| | | | | | | We no longer need our own pinned version of this recipe, and it causes us issues with meta-python. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: cherry pick xen 4.19 from masterBruce Ashfield2024-09-254-0/+151
| | | | | | | | | | | Introducing the xen-4.19 release to scarthgap -stable release. Interested users can set their preferred version in their configuration as this is NOT the default in scarthgap. Any fixes must go to master before being considered here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* u-boot-xlnx-scr.bbappend: Fix xen boot script comparisonMark Hatle2024-09-251-1/+1
| | | | | | | | | | | | Some versions of python/bitbake appear to allow 'true' and 'false', but this is incorrect, True and False are the correct boolean variables. Fixes: ERROR: ExpansionError during parsing .../meta-xilinx/meta-xilinx-core/recipes-bsp/u-boot/u-boot-xlnx-scr.bb Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* u-boot-xlnx-scr.bbappend: Enable xen boot script using variableJohn Vicky Vykuntapu2024-09-111-2/+4
| | | | | | | | | | | | | | | Xen related boot script offset was override from meta-virtualization for non xen builds. ERROR: RD image overlaps OS image (OS=0xe00000..0x2610000) Add to include xen boot script only if ENABLE_XEN_UBOOT_SCR variable set from the configuration file and xen enabled in DISTRO_FEATURES to avoid override. Signed-off-by: John Vicky Vykuntapu <johnvicky.vykuntapu@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-image-minimal: Add missing dependency causing intermittent failuresRichard Purdie2024-08-011-0/+1
| | | | | | | | | | | | | | | "bitbake xen-image-minimal -c do_image_wic" fails with: | ERROR: _exec_cmd: install -m 0644 tmp/deploy/images/qemux86-64/xen-qemux86-64.gz tmp/work/qemux86_64-poky-linux/xen-image-minimal/1.0/tmp-wic/hdd/boot/xen.gz returned '1' instead of 0 | output: install: cannot stat 'tmp/deploy/images/qemux86-64/xen-qemux86-64.gz': No such file or directory | | WARNING: exit code 1 from a shell command. ERROR: Task (/media/build/poky/meta-virtualization/recipes-extended/images/xen-image-minimal.bb:do_image_wic) failed with exit code '1' Add the missing dependency to avoid this. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Use dup3 for riscv64Mingli Yu2024-07-222-0/+43
| | | | | | | | | Use dup3 instead for riscv64 as there is no dup2 on riscv64 linux to fix the below build failure: vendor/github.com/bugsnag/panicwrap/dup2.go:10:9: undefined: syscall.Dup2 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Enable support for riscv64Mingli Yu2024-07-221-2/+0
| | | | | | | | | Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix meson build issuePawan Badganchi2024-07-221-2/+1
| | | | | | | | | | | | | Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Switch branch to mainDaniel Schultz2024-07-101-1/+1
| | | | | | | | The podman-compose repository has no stable branch anymore and release 1.0.6 is located on main now. Signed-off-by: Daniel Schultz <d.schultz@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix multiple CVEsHitendra Prajapati2024-07-104-0/+379
| | | | | | | | | | | Backport fixes for: * CVE-2024-1441 - Upstream-Status: Backport from https://gitlab.com/libvirt/libvirt/-/commit/c664015fe3a7bf59db26686e9ed69af011c6ebb8 * CVE-2024-2494 - Upstream-Status: Backport from https://gitlab.com/libvirt/libvirt/-/commit/8a3f8d957507c1f8223fdcf25a3ff885b15557f2 * CVE-2024-4418 - Upstream-Status: Backport from https://gitlab.com/libvirt/libvirt/-/commit/8074d64dc2eca846d6a61efe1a9b7428a0ce1dd1 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: upgrade to 1.34.3Yogita Urade2024-05-291-2/+2
| | | | | | | | | | | | | | | | | | | | Includes fix for: CVE-2024-1753 Changelog: ========= 2db756331 (tag: v1.34.3) [release-1.34] Bump Buildah to v1.34.3 699d1ed51 [release-1.34] CVE-2024-24786 protobuf to 1.33 4ffe07267 Merge pull request #5419 from TomSweeneyRedHat/dev/tsweeney/cve-1.34 968e8ab62 [release-1.34] Bump to Buildah v1.34.3-dev 776a1463d (tag: v1.34.2) [release-1.34] Bump to Buildah v1.34.2 afc086b65 conformance tests: don't break on trailing zeroes in layer blobs 3deda1913 [release-1.34] CVE-2024-1753 container escape fix 14d60c988 Merge pull request #5365 from edsantiago/skip_unshare_on_rhel--1.34 4f775b4a1 tests: skip_if_no_unshare(): check for --setuid dbeb097c6 Merge pull request #5352 from TomSweeneyRedHat/dev/tsweeney/buildah_1_34_1 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Pass -trimpath to buildChangqing Li2024-05-021-0/+1
| | | | | | | | | | | | Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: fix wrong version displayChangqing Li2024-05-022-4/+31
| | | | | | | | | | | | | | * Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: pass BuildVersion info to avoid runtime warningChangqing Li2024-05-021-1/+2
| | | | | | | | | | The default value of BuildVersion is 'unknown' and it requires an override at link time to embed such version info into binary. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: skip textrel QA warningChangqing Li2024-05-021-1/+1
| | | | | | | | | | | | | | | -buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Fix missing brace in FILESTheodore A. Roth2024-05-021-1/+1
| | | | | | | | | When converting to use {systemd_user_unitdir}, the closing brace was omitted Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com> Signed-off-by: Theodore A. Roth <troth@openavr.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: Add the missing Upstream-Status FieldMingli Yu2024-05-021-0/+2
| | | | | | | | | | | | Fixes: INFO: Traceback (most recent call last): File "/build/layers/oe-core/scripts/lib/checklayer/cases/common.py", line 87, in test_patches_upstream_status self.assertEqual(len(patches), 0 , \ AssertionError: 1 != 0 : Found following patches with malformed or missing upstream status: /build/layers/meta-virtualization/recipes-extended/ceph/ceph/0001-delete-install-layout-deb.patch Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* diod: Build in 32bit systems with 64bit time_tOla x Nilsson2024-04-252-0/+101
| | | | | Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix location of user systemd service unitsLukasz Czechowski2024-04-221-2/+2
| | | | | | | | | | | The value of USERSYSTEMDDIR is currently set to ${systemd_unitdir}/user, which might not be present in user unit search path. Use dedicated bitbake variable ${systemd_user_unitdir} instead. Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel/cfg: update SRCREV to sync lxc optionsBruce Ashfield2024-04-101-1/+1
| | | | | | | Bumping the SRCREV to pickup the latest lxc configuration tweaks and consoliation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix broken test casesXiangyu Chen2024-04-093-0/+166
| | | | | | | | Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: add libvirt-dbusMathieu Dupré2024-04-091-0/+23
| | | | | | | | | | | libvirt-dbus provides a dBus interface for libvirt. It can be needed as dependency for some virtualization packages, such as `cockpit-machines`. Compilation tested on x86-64 and aarch64 machines. Signed-off-by: Mathieu Dupré <mathieu.dupre@savoirfairelinux.com> Signed-off-by: Paul Le Guen de Kerneizon <paul.leguendekerneizon@savoirfairelinux.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.12Bruce Ashfield2024-04-091-2/+2
| | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: adjust recommendations for qemu package splittingBruce Ashfield2024-04-041-0/+1
| | | | | | | | When vmsep is enabled the qemu packages are split based on meta-virt policy. Detect this distro feature and update our dependencies accordingly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docs/README: drop meta-oe priority recommendationBruce Ashfield2024-04-041-2/+0
| | | | | | | This hasn't been needed for over 10 years (and is in the wrong format for overrides). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-16 04:37:00 +0000