summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* podman-tui: update to v1.1.0Bruce Ashfield2024-07-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits: 6bcf5993 Bump to v1.1.0 d4bee0e9 Bump github.com/containers/podman to v5.1.0 4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0 b404db37 Bump to v1.1.0-dev 35fb1650 Bump to v1.0.1 834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3 372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0 f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0 4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2 a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2 2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0 9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0 46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1 775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1 ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2 c3440609 Bump to v1.1.0-dev 47c47d46 Bump to v1.0.0 45253e1e Bump github.com/docker/docker f39102a5 podman v5 b5297884 Bump to v0.19.0-dev 64ea1b82 Bump to v0.18.0 bee2b067 README.md update 445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 ff1f99ca install.md update - ArchLinux (AUR) 52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux 34bd6420 golangci-lint update 1.56.2 2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4 aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0 7c81b05b Vagrantfile update (fedora 39) feafd1a9 ghaction update 26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 b793ec2c Bump codecov/codecov-action from 3 to 4 61b81c38 unit test 31fa7523 unit tests 0ec32f51 resolves #438 Substitute env variables in config file 8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1 b3cfedb2 README update 341f1b2c unit test coverage 75c926a5 podman-tui installation via homebrew for Mac 6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3 6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0 b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1 1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0 20985d53 Bump to v0.18.0-dev b4350927 Bump to v0.17.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 5.1.1Bruce Ashfield2024-07-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits: 7a1f39dc4d Bump to v5.1.2-dev bda6eb03dc Bump to v5.1.1 cd0a0d7d6d Update release notes for v5.1.1 aa031ad1ba libpod: do not leak systemd hc startup unit timer d79b94c82b Check AppleHypervisor before accessing it a9377a8ec3 [v5.1] Bump c/common to v0.59.1 4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly d5cc37f78a test/e2e: use local skopeo not image 2906582149 [v5.1] Mac PM test: Require pre-installed rosetta 7ad138c3db Fix typo in release notes 515e44be74 Bump to v5.1.1-dev 4e9486dbc6 Bump to v5.1.0 2f343ce778 Release notes for v5.1 8ba3626c94 Add configuration for podmansh 8eff425410 [v5.1] Bump c/* for vendor dance 178600e531 test/e2e: fix new error message 7df3715430 Add Hyper-V option in windows installer 6ad6132987 Only stop chowning volumes once they're not empty 65d26b0cde remote API: restore v4 payload in container inspect 3949bf8af1 Fix windows action trigger acf137b342 Update podman network docs 7207461196 Add Rosetta support for Apple Silicon mac d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode c837ebc44e vendor latest c/common main 97251d0ee6 Bump to v5.1.0-dev 6a8f2e7f29 Bump to v5.1.0-rc1 bd4e4a1d8f Add release notes for v5.1.0 (preliminary) c46884aa93 `podman events`: check for an error after we finish reading events 277312d282 Fix updating connection when SSH port conflict happens 2a609b0f74 rootless: fix reexec to use /proc/self/exe d4e40fedaf ExitWithError() - enforce required exit status & stderr 82f9811a8d ExitWithError() - a few that I missed 44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds 92338642d1 Revert "Temporarily disable rootless debian e2e testing" 5901bf52b9 CI tests: enforce TMPDIR on tmpfs 6e655c7fd2 use new CI images with tmpfs /tmp e771618531 run e2e test on tmpfs 3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0 6830d0e3c8 Address CVE-2024-3727 07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions 755fc021f9 ExitWithError() - rmi_test 5e240ab1f5 ExitWithError() - more r files 0c22de7811 ExitWithError() - s files 03f036b515 ExitWithError() - more run_xxx tests 3b1c735b67 Fix podman-remote support for `podman farm build` 71473976ac [CI:DOCS] Trigger windows installer action properly 8433a01aa2 Revert "container stop: kill conmon" 3fa8e98a31 Ensure that containers do not get stuck in stopping 279e2d0cb2 [CI:DOCS] Improvements to make validatepr 9e43e586c9 ExitWithError() - rest of the p files dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1 a2cf948f90 Graceful shutdown during podman kube down 521bbab864 test/system: fix broken "podman volume globs" test 6d1098f823 Quadlet/Container: Add GroupAdd option 7bfac4f349 Don't panic if a runtime was configured without paths d4c7ca39fd update c/{buildah,common,image,storage} to latest main 6bdebea8ae update golangci-lint to 1.58 ee5153c545 machine: Add LibKrun provider detection 641cd7c5a2 ExitWithError() - continue tightening b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1 303d0b398e test: improve test for powercap presence 9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10 be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0 36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora 42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842 e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml` 7d12ae0973 ExitWithError() - play_kube_test.go 02b8fd7156 Temporarily disable rootless debian e2e testing 7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0 b520e909e0 CI Docs: Clarify passthrough_envars() comments 87747ca820 Skip machine tests if they don't need to be run e8ef36e26e Update CI VMs to F40, F39, D13 83ee16b9ba ExitWithError() - v files 22eff26916 Update module golang.org/x/term to v0.20.0 431cbffab6 machine: Add provider detection API 419efb9eb5 util: specify a not empty pause dir for root too 1d1dba3843 Add missing option 'healthy' to output of `podman run --help` b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md 4fd84190b8 Add a random suffix to healthcheck unit names 7a43c2ed1b test/e2e: remove toolbox image 46f247d880 Also substitute $HOME in runlabel with user's homedir 7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5 275c068df7 ExitWithError() - pod_xxx tests c378f2d03a ExitWithError() -- run_test.go f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4 61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible 8942e2dbda GHA: Attempt fix exceeded a secondary rate limit 1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools a140c74ba4 Fix machine volumes with long path and paths with dashes d1f8933a93 Update module google.golang.org/protobuf to v1.34.0 d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0 c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1 88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak 0faded53b8 test/e2e: do not leak /tmp/private_file 88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs 60b5488308 Update dependency pytest to v8.1.2 cd6ff71cc3 Remove unncessary lines at the end of specfile summary e412eff33f Clean machine pull cache d2c1de5993 Add krun support to podman machine ca23774b5b Use custom image for make validatepr 9a0ed6929a test/e2e: force systemd cgroup manager d1bfdc7900 e2e and bindings tests: fix $PATH setup 5040c6e390 Makefile: remove useless HACK variable in e2e test 537c21a49a test/e2e: fix volumes and suid/dev/exec options 31034a1b6f test/e2e: volumes and suid/dev/exec options works remote cc6e999f2a test/e2e: fix limits test c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0 3c1c6a44ef Correct option name `ip` -> `ip6` 30e2c923d6 Add the ability to automount images as volumes via play 693ae0ebc6 Add support for image volume subpaths 5f57571d65 Bump Buildah to latest main e8a9c58125 Update Makefile to Go 1.22 for in-container e4c9910aec ExitWithError() - yet more low-hanging fruit 80c3a22440 ExitWithError() - more low-hanging fruit 4da5c5d3aa ExitWithError() - low-hanging fruit c681df35c0 chore: fix function names in comment 3f78c39c50 Remove redundant Prerequisite before build section fa1fd1646e Remove PKG_CONFIG_PATH 3b28cdfb20 Add installation instructions for openSUSE 83dbbc3a51 Replace golang.org/x/exp/slices with slices from std c04d03ef8c Update to go 1.21 c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible c22eefb939 [CI:DOCS] Fix artifact action 333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals ac04cb4ac5 e2e tests: stop littering 27174ff3fb [CI:DOCS] format podman-pull example as code e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions 2681ab23d1 libpod: getHealthCheckLog() remove unessesary check 2ae6d0d4dd add containers.conf healthcheck_events support 33def2eea7 vendor latest c/common b026e1d635 libpod: make healthcheck events more efficient ce9054ff45 libpod: wrap store setup error message e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs e58972cd1d pkg/systemd: use fileutils.(Le|E)xists acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists 94c699192f pkg/util: use fileutils.(Le|E)xists 0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists 1991990d5a pkg/specgen: use fileutils.(Le|E)xists aab06ac445 pkg/rootless: use fileutils.(Le|E)xists af24326133 pkg/machine: use fileutils.(Le|E)xists cbffddc72e pkg/domain: use fileutils.(Le|E)xists bd00c6fef9 pkg/api: use fileutils.(Le|E)xists 5656ad40b1 libpod: use fileutils.(Le|E)xists 90304dd507 cmd: use fileutils.(Le|E)xists 598fc516a6 vendor: update containers/{buildah,common,image,storage} a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security] dc68a47d7a fix podman-pod-restart.1.md typo eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0 422eb0e58a Add more annnotation information to podman kupe play man page b1736c472a test/compose: remove compose v1 code 2c61ee9a31 CI: remove compose v1 tests 713c026b4d [CI:DOCS] Fix windows installer action d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2 7b3456b5d9 add `list` as an alias to list networks 482ef7bfcf Add support for updating restart policy ddea30e40e Add Compat API for Update be3f075402 Make `podman update` changes persistent 7ef0290a1d Emergency fix (well, skip) for failing bud tests 7c4f2c79ea fix swagger doc for manifest create d4ecae59bd [CI:DOCS] options/network: fix markdown lists 714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target 3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security] 0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0 1600cfffa5 Fix some comments e8055904e1 swagger fix infinitive recursion on some types 5e9725983d install swagger from source f95b9d4e37 Revert "Swap out javascript engine" 5e68fbd132 podman exec CID without command should exit 125 df69b36ee5 (minor) prefetch systemd image before use 49729c82a9 Update go-swagger version 1b6e8d73aa Swap out javascript engine 3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible 08a49389c8 Add os, arch, and ismanifest to libpod image list e773ed42b3 [CI:DOCS]Initial PR validation 4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71 67c6d7ec80 vendor ginkgo 2.17.1 into test/tools 999d6c0750 fix "concurrent map writes" in network ls compat endpoint 26f866b5df chore(deps): update dependency pytest to v8 2d9159821a e2e: redefine ExitWithError() to require exit code 8de92ec912 docs: fix missleading run/create --expose description 0bedf7f1d2 podman ps: show exposed ports under PORTS as well aee1e1408d rootless: drop function ReadMappingsProc 9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3 0313693d48 New CI VMs, to give us pasta 2024-04-05 394820c4f0 Add big warning to GHA workflow 7f0268a2e7 GHA: Fix intermittent workflow error 266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0 847ca1f9ea e2e tests: remove requirement for fuse-overlayfs 36e4d512b3 docs: update Quadlet volume Options desc b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0 0b36126e92 Fix relabeling failures with Z/z volumes on Mac f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0 b9a8a2c61c Makefile: fix annoying errors in docs generation 59ee130048 chore: fix function names in comment a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1 3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0 3560ccd5df Detect unhandled reboots and require user intervention fcf9327773 podman --runroot: remove 50 char length restriction 10995192f8 update github.com/rootless-containers/rootlesskit to v2 156ae500f2 Update module github.com/gorilla/schema to v1.3.0 beb4fd1b4a Update dependency requests-mock to ~=1.12.1 e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1 f2c365c6f6 rm --force work for more than one arg 71f6f50ee1 [CI:DOCS] Update kube docs 81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3 0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2 ff133a544d Windows: clean up temporary perl install 498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors 549dbf8327 [CI:DOCS] build deps: make-validate needs docs a61ae8c0a9 test/system: add rootless-netns test for setup errors ce04fbc16a vendor latest c/common main 519a66c6a9 container: do not chown to dest target with U fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags d27313ad10 systests: conditionalize slirp4netns tests e697631af9 CI: systests: instrument flaky tests d2143fac59 s3fs docs 7d68362cf5 test: do not skip tests under rootless d3927f9076 Add note about host networking to Kube PublishPort option 1a99d87746 Inject additional build tags from the environment d81319eb71 libpod: use original IDs if idmap is provided f3434298df Switch back to checking out the same branch the action script runs in f7b9168649 docs/podman-login: Give an example of writing the persistent path aab4674feb CI: Bump VMs to 2024-03-28 4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0 fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7 ffb8b2dc36 Fix reference to deprecated types.Info c0e32e93c0 Use logformatter for podman_machine_windows_task d305e70af8 applehv: Print vfkit logs in --log-level debug 23bf357fc3 [CI:DOCS]Add Mario to reviewers list c8e1e0034a [CI:DOCS] Document CI-maintenance job addition 48b8d7f8be Add golang 1.21 update warning b56331cd2f Add rootless network command to `podman info` 80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD c62c74970f hyperv: error if not admin 83671f95d8 Properly parse stderr when updating container status 492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream 11415b3e74 Use built-in ssh impl for all non-pty operations 83fe867c14 Add support for annotations a6ffb5656f hyperv: fix machine rm -r f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job 3c611c47e4 5.0 release note fix typo in cgroupv1 env var 3a9968ef81 fix remote build isolation on client side 17aa152459 chore: remove repetitive words b2d0b92db2 Dont save remote context in temp file but stream and extract 493179be45 fix remote build isolation when server runs as root 4740367330 util: use private propagation with bind 9a13b8f17d util: add some tests for ProcessOptions 50d764b0e6 util: refactor ProcessOptions into an internal function 49ab250cf9 util: rename files to snake case c03256e23c Add LoongArch support for libpod f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c 5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1 5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] 77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0 c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0 a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4 b1fd03f9f5 Fix type-o 3f2b8bb314 Use correct extension in suite aa5c4879b4 minikube: instrument tests, to allow debugging failures 15b8bb72a8 libpod: restart always reconfigure the netns dc1795b4b2 use new c/common pasta2 setup logic to fix dns 2566ee2f38 utils: drop conversion float->string->float 816c7279e1 utils: do not generate duplicate range f16ab115ed logformatter: handle Windows logs 0e38815387 utils: add test for the new function cda3dc83d8 utils: move rootless code to a new function 079bfb085a CVE-2024-1753 fix for main 1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst 23433ec7bd test/system: Add support for multipath routes in pasta networking tests 73a12b0c07 [skip-ci] rpm: use macro supported vendoring 7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images 7711833827 Makefile: add target `podman-remote-static` fdad9ab1ff Switch to 5.x WSL machine os stream using new automation 3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context ee4b1efb24 bump main to 5.1.0-dev 3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote e82d196269 pkg/machine: make checkExclusiveActiveVM race free b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM() c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting 1dfd3d3d12 pkg/machine: refresh config after we hold lock d5e0ecc619 Update dependency setuptools to ~=69.2.0 60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+ 2ff5716b7e fix invalid HTTP header values when hijacking a connection c6ae7fd145 Add doc to build podman on windows without MSYS 1901403eda Removing CRI-O related annotations 83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 d7fa0aa351 Pass the restart policy to the individual containers cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 2.0.0-rc.3Bruce Ashfield2024-07-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits: 531da9960 Reduce scope of permissions in stale workflow ed64e6503 core/mount: remove logrus import ea8265fb1 core/transfer/local: remove logrus import 75fd7a5a7 pkg/shim: remove logrus imports 38e2f0038 Adds a mutex to protect fallback host 587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus 4203e2de8 pkg/tracing/plugin: rename var that collided with import e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates 5b8dfbd11 Allow proxy plugins to have capabilities cc2cedae0 Revert "install-runc: pin Go to 1.21" 3c097352a update runc binary to v1.1.13 8c13ed1b8 Prepare v2.0.0-rc.3 release 86b8a8824 Remove pkg/seed 09d3e20d3 Allow running test in usernamespace 8bcffa944 KEP-3619: Fine grained SupplementalGroups control 87dd4309d vendor: github.com/containerd/platforms v0.2.1 939135ae3 CI: golangci-lint v1.59.1 df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service 686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl 156458e54 build(deps): bump the golang-x group with 2 updates 08c1e12e9 CI: add back EL 8 149ca6880 Update hcsshim tag to 0.12.4 b1a23c495 Fail integration test early when a plugin load fails d23c4b8b5 Use unix and windows specific connection error checks 02b6c6939 Allow fallback across default ports 80ce8bd61 build(deps): bump github.com/containerd/containerd/api cde2527fc ctr: pull: Do not ignore labels when transfer service is used 1c123efb4 Update Go version to 1.22.4 e1e793e4a Update rockylinux vagrant build 5611fdd4a Transfer: Push: Enable to specify platforms 0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs 4123170a3 *: export RemoveVolatileOption for CRI image volumes 3e71ccafc Add type alias for event Envelope da1d9672f Enable imgcrypt in cri pull 9857afda4 Add vendor for github.com/containerd/imgcrypt 359d84351 Update api minimum go version to 1.21 2d73340c2 Explicitly set release latest to false ca59fb0b4 Cleanup shim manager configuration 9831a62d7 auth: add span to FetchToken helpers 58be88189 sandbox: do retry for wait to remote sandbox controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: switch to main branchBruce Ashfield2024-07-101-1/+1
| | | | | | | | | | | | | The upstream project has made the "interesting" decision to delete the stable branch and move to "main" for recent releases. So rather than being able to simply switch for our updates, we have to switch to main on all releases that had podman-compose recipes using the stable branch. Luckily, the commit hashes haven't changed, so we only have to modify the branch in the SRC_URI. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* rootlesskit: introduce linux-native fakeroo using user namespacesBruce Ashfield2024-06-044-0/+267
| | | | | | | | | | | | | | | | | | see: https://github.com/rootless-containers/rootlesskit --------- RootlessKit: Linux-native fakeroot using user namespaces RootlessKit is a Linux-native implementation of 'fake root' using user_namespaces(7). The purpose of RootlessKit is to run Docker and Kubernetes as an unprivileged user (known as 'Rootless mode'), so as to protect the real root on the host from potential container-breakout attacks. --------- This is a building block for cross installation of containers and rootless on-target execution. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* scripts: adjust to syhead go source locationBruce Ashfield2024-06-041-1/+4
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* networking: introduce passt / pastaBruce Ashfield2024-06-041-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | Introducing the pasta package as an alternative for non-priviledged container networking: https://passt.top/passt/about/ passt: Plug A Simple Socket Transport passt implements a translation layer between a Layer-2 network interface and native Layer-4 sockets (TCP, UDP, ICMP/ICMPv6 echo) on a host. It doesn't require any capabilities or privileges, and it can be used as a simple replacement for Slirp. pasta: Pack A Subtle Tap Abstraction pasta (same binary as passt, different command) offers equivalent functionality, for network namespaces: traffic is forwarded using a tap interface inside the namespace, without the need to create further interfaces on the host, hence not requiring any capabilities or privileges. It also implements a tap bypass path for local connections: packets with a local destination address are moved directly between Layer-4 sockets, avoiding Layer-2 translations, using the splice(2) and recvmmsg(2)/sendmmsg(2) system calls for TCP and UDP, respectively. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Use slirp4netns instead of pastaMarcus Flyckt2024-05-311-0/+5
| | | | | | | | | | | podman uses pasta as the default rootless network command since 5.0.0, but only slirp4netns is available when building for Yocto. This commit adds a containers.conf file setting slirp4netns as default rootless command if 'rootless' is set in PACKAGECONFIG Signed-off-by: Marcus Flyckt <mafl@kvaser.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: convert more WORKDIR references to UNPACKDIRHieu Van Nguyen2024-05-312-14/+15
| | | | | | | | | | | | | | | | | | | | unpacked source files are now in UNPACKDIR, so we adjust our operations to match. Some references were missed in previous commit as they are behind conditional. Use BP subdir for python, to build it inside ${S}. Need cd - to go back to $${B} so that gnutls-helper.py is executed there instead of python subdirectory. Use mix of tabs and spaces for indentation like other lines around :). Signed-off-by: Hieu Van Nguyen <hieu2.nguyen@lge.com> Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: fix arm64 build with gcc14Bruce Ashfield2024-05-312-0/+69
| | | | | | | | | | | | | | | | gcc14 isn't properly tracking if the irq array index is greater than zero, and hence generates a warning that chains to a build error. This is a temporary patch to ensure that the variable is greater than zero and hence keeps the warning from happening. If it was less than zero, a different way of dealing with it "officially" would be better, but we lack the insight to know what to do in this case (plus, it really isn't less than zero as it has never caused an issue before) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: update xen preferred versionBruce Ashfield2024-05-311-2/+2
| | | | | | | | The xen preferred version fails to match when we add -stable dot releases. We move the wildcard back in the preferred version to pick them up. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to 4.18-tipBruce Ashfield2024-05-312-2/+86
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version RELEASE-4.18.2-19-g01f7a3c792, which comprises the following commits: 01f7a3c792 update Xen version to 4.18.3-pre 7cdb1fa2ab x86/mtrr: avoid system wide rendezvous when setting AP MTRRs f3d20dd317 tools/xentop: Fix cpu% sort order dfabab2cd9 x86: respect mapcache_domain_init() failing 3999b675ca xen/sched: set all sched_resource data inside locked region for new cpu 8271f0e8f2 libxl: Fix handling XenStore errors in device creation 9966e54131 libxl: fix population of the online vCPU bitmap for PVH a42c83b202 x86/ucode: Distinguish "ucode already up to date" 0673eae8e5 x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake 2bc52041ca tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC a4c5bbb9db VT-d: correct ATS checking for root complex integrated devices 47cf06c09a xen/x86: Fix Syntax warning in gen-cpuid.py 026542c857 xen/xsm: Wire up get_dom0_console f0ff1d9cb9 x86/spec: adjust logic that elides lfence 0b0c7dca70 x86/spec: fix reporting of BHB clearing usage from guest entry points eb7059767c x86/MTRR: correct inadvertently inverted WC check af0e9ba44a x86/rtc: Avoid UIP flag being set for longer than expected 8bdcb0b98b altcall: fix __alt_call_maybe_initdata so it's safe for livepatch 2d38302c33 x86/entry: Fix build with older toolchains d152a04246 Update CHANGELOG.md with 4.18.2 line b2863e468e Update Xen version to 4.18.2 40f2c69ad8 x86/spec-ctrl: Support the "long" BHB loop sequence 9be85b14aa x86/spec-ctrl: Wire up the Native-BHI software sequences 72a357f4fa x86/spec-ctrl: Software BHB-clearing sequences 73a4229807 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI 2be76f2018 x86/tsx: Expose RTM_ALWAYS_ABORT to guests 62844c4415 x86: Drop INDIRECT_JMP 9fd732d18d x86: Use indirect calls in reset-stack infrastructure 40a6795480 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields fb12e8d8f7 x86/vmx: Add support for virtualize SPEC_CTRL a6cefb2686 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_* ccc6603b79 x86/spec-ctrl: Simplify DO_COND_IBPB 5b28a4af1f x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR} 9bc337497c x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV e382cddcc2 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_* 57e5cab3de x86/spec-ctrl: Rename spec_ctrl_flags to scf 32cdecf1c3 x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests a482be9211 x86/alternatives: fix .init section reference in _apply_alternatives() 855e261337 x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch 125b1a7808 x86/spec-ctrl: Move __read_mostly data into __ro_after_init 594dd0920f VMX: tertiary execution control infrastructure 4c2208d06c x86/CPU: convert vendor hook invocations to altcall 8a8c626281 x86/guest: finish conversion to altcall b6fad02a54 x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking() 0f6696a780 x86/spec-ctrl: Expose BHI_CTRL to guests a546399829 x86/spec-ctrl: Expose RRSBA_CTRL to guests fa7f2f9a86 x86/spec-ctrl: Expose IPRED_CTRL to guests 1fe30f552a IRQ: generalize [gs]et_irq_regs() f7bd03b608 x86/MCE: switch some callback invocations to altcall 9fdbcd84d3 x86/MCE: separate BSP-only initialization b06cf0701a x86/PV: avoid indirect call for I/O emulation quirk hook a2922d8097 x86/MTRR: avoid several indirect calls 5c5d4eeee4 core-parking: use alternative_call() ba951c5f29 x86/HPET: avoid an indirect call a44c2c9f89 cpufreq: finish conversion to altcall 6b8ee35088 x86/APIC: finish genapic conversion to altcall 6d4055b9a5 x86/spec-ctrl: Fix BTC/SRSO mitigations 1166467ed3 hypercall_xlat_continuation: Replace BUG_ON with domain_crash 429a125dba x86/HVM: clear upper halves of GPRs upon entry from 32-bit code 17cf285d87 tests/resource: Fix HVM guest in !SHADOW builds 5c4aacab17 x86/boot: Support the watchdog on newer AMD systems a790c670bb x86/boot: Improve the boot watchdog determination of stuck cpus d0173bbed1 x86/livepatch: Relax permissions on rodata too 4fc27254de xen/virtual-region: Include rodata pointers 8c13f6c565 xen/virtual-region: Rename the start/end fields b576e09b66 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies 03cc579ae3 x86/cpu-policy: Hide x2APIC from PV guests 0a8b92d0a4 tools/oxenstored: Make Quota.t pure 3f3158fc32 tools/oxenstored: Use Map instead of Hashtbl for quotas c9ea3b49a5 x86/PoD: tie together P2M update and increment of entry count cb7b84d3d5 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly 62d9ca19f9 x86/mm: use block_lock_speculation() in _mm_write_lock() 3d67ba0371 update Xen version to 4.18.2-pre ea82c8cdbf update Xen version to 4.18.1 4da8ca9cb9 x86: protect conditional lock taking from speculative execution Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* hyperstart: remove recipeBruce Ashfield2024-05-292-256/+0
| | | | | | | | hyperstart is in read-only mode, so we drop it from the layer. A replacement will be provided in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runv: drop recipeBruce Ashfield2024-05-291-87/+0
| | | | | | | runv is no longer used, kata containers is the suggested VM backed container interface. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runv: use destsuffix for cloneBruce Ashfield2024-05-291-1/+1
| | | | | | | | | | To ensure that the go code can be unpacked and the license file found, we add destsuffix to the SRC_URI. We still have a gcc14 build issue, but this at least gets us to that issue. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to v6.0.0Bruce Ashfield2024-05-294-183/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping lxc to version v6.0.0, which comprises the following commits: 3dee5fb88 Release LXC 6.0.0 17ac6f691 lxc.spec: Align SPDX license id 5fe2de84c Makefile: Align SPDX license id 97f93be72 meson: Align SPDX license id d4cd3741d COPYING: Clarify licensing of files without SPDX 8e67eb07c doc: Add SPDX headers and remove Author field cb94edf53 src/include: Add SPDX headers 7bc33ef6e src/tests: Add SPDX headers 007642c89 hooks: Add SPDX headers 1e9e66be3 lxc.spec: Clear default changelog 202d649d1 lxc.spec: Use SPDX 85abd4026 template: Use SPDX a074b3d27 config/yum: Use SPDX header 7ed43e5e9 COPYING: Remove whitespace 522721216 MAINTAINERS: Remove Dwight from the maintainer list 08bf8b9e2 lxc-checkconfig: Fix shellcheck 0f18db543 lxc-checkconfig: Show namespace limits f71b8e3f8 lxc-ls: list names with whitespaces in `--active`. 816b8973d lxc/tools: set default log_priority to ERROR 989ea3969 tools/lxc_autostart: don't fail when there are no containers dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep 630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot 796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.* dcc4fb929 tests/parse_config_file: fix some typos 6fea67429 tests/parse_config_file: add tests for lxc.time.offset.* ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow 4464cee19 lxccontainer: rework copy_file() 9d1aa932d lxccontainer: improve mod_rdep() 81c1bbf45 Revert "lxccontainer: fixes" 82fe01821 src/lxc/syscall_numbers.h: drop define -1 590a95d83 rexec: Avoid invalid free in rexec failure path f9978b179 README: Correct 'armvl7' to 'armv7l' 046b63cd2 unshare: simplify lookup_name 7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare e88883445 lxc-net: Enable IPv6 by default d78ca00bc tests/meson: attempt to fix ossfuzz builds d18f993b3 github: master -> main 86799f554 meson: link with liblxc dynamically everywhere if possible b90fecfda network: use IN_LIBLXC 9eee450d2 storage_utils: move get_fssize to utils 6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type 42eeffcb0 confile: unhide lxc_config_parse_arch() helper 9bb318881 conf: reorganize/split code to utils.c 863c59dc3 conf: reorganize/split code to idmap_utils.c b7591ad49 confile: unhide lxc_config_define*() helpers f14656ebf meson: introduce IN_LIBLXC preprocessor macro 672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach 8f9733d75 tests: remove old and broken cgroup handling code from tests d51ea224e config: apparmor: add AppArmor profile for lxc-copy 627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl df0665b6d oci: resolve cross-filesystem blob caching failure ec85e5ca4 lxc-test-usernic: drop cgroup handling 27ec0b0f6 test-usernic: don't use ifconfig 44e845b3c Add x32 to the list of recognized architectures 07e3a516e lxc-download, lxc-local: preserve xattrs on unpack 9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases 64341ce7b tree-wide: use container_uses_namespace() helper 6b40e66c1 Fix error message. c8189ee2a Add verbose output in download template. 84cc3155a Align columns in lxc-download.in template 872db5424 build: add more options for customizing install df17ac417 Add loongarch64 support 112d5615e build(deps): bump actions/upload-artifact from 3 to 4 789457f1a config: try to create workdir if not exist 86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree f885a3c56 lxc-local: Re-organize code to use more functions 7c025072e lxc-local: Improve usage info faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear d65fe1b27 Disable IPv6 link-local addresses for bridged veth 8cff8fa1a don't try to delete vlan 0 from veth 0e932812a conf: fix ephemeral copies abffab441 config/init: Drop upstart files 79a4a3cf8 doc: remove the warning mentionning upstart 7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling fb73c18d2 meson: Remove support for upstart cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared a87d6fcc9 lxc/checkconfig: use multiline `echo` f3e01fa80 lxc/checkconfig: replace `echo -n` by printf ba4f810bc lxc/checkconfig: minor cosmetic change d52c345c8 lxc/checkconfig: avoid subshell (SC2235) f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234) 74b9faa64 lxc/checkconfig: check exit code directly (SC2181) 5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236) a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck 8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n` cb2574319 lxc/checkconfig: replace `type` by `command` 003efe6db lxc/checkconfig: replace `cat | grep` with `grep` adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval c02367e59 containers in the FREEZING state also need to be unfreeze aca53bcf7 build(deps): bump actions/checkout from 3 to 4 84169158f lxccontainer.h: Move new fields to the end e2696df93 Remove references to LXD 7cec54455 Update console perms to 0600 3f45443fd Fix start api call to split quoted strings in execute or init command. fbc31691e github: Update for main branch 69e51b919 CONTRIBUTING: add a note on AI generated code 84cfe9772 get_hierarchy: dont WARN about no usable controller 64167f906 Add libarchive tar support for lxc download 213e2f68d github: Add DCO/target tests cf2b20209 explicitly convert *mainloop_handler to __u64 8575ffeb7 tests: fix parse_config_file seccomp test ca25f3bf6 src/tests: Fix container creation errors 539c39772 rename functions which clash with libsystemd's b670f0e75 commands: support timeout in LXC_CMD_GET_STATE 0fed82b26 lxccontainer: extend lxccontainer API with set_timeout 7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI 715fb4eff terminal: make a terminal FDs non-blocking 7eff16cc4 file_utils: add fd_make_nonblocking helper 747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr() f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe 890de0759 lsm: apparmor: allow to change mount propagation 5894cf310 console-log test: make sure container is stopped before restarting 820d2a2b3 switch from libsystemd's dbus to dbus-1 3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC 4ea0b361f Allow fuse mounts in apparmor start-container. 1a2da75b6 Add support for squashfs images in oci via atomfs db3cbfa75 apparmor: don't try to mmap empty files 304bf58fa initutils: use PRIu64 for uint64_t in setproctitle 4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT 311bb8c53 Fix strlcat's return value checks 588b53b19 Fix typo: bev_type -> bdev_type 7914c259f drop broken lxc-test-fuzzers 849d80877 Fix build error on sparc64 caused by using the gold linker 43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts 4fa83282b lxc_user_nic: fix get_mtu() error handling 1b0469530 Patching an incoming CVE (CVE-2022-47952) a8e1070c6 build: force linking against liblxc c27ea96f7 checkconfig: Fix filesystem capability check 3f361da61 checkconfig: Tweak cgroup handling 3ab04999d checkconfig: Tweak layout e027ca711 checkconfig: Hide version if no lxc-start 914fec51b checkconfig: Fix mixed tabs/spaces 70b176b0d src/lxc/meson.build: fix build without apparmor 42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups 0072919dd state: additional check in lxc_wait to prevent OOB 62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope 93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation f8aa61f97 network: always initialize struct nl_handler 6ea4a6c06 apparmor: properly check lxc_strmmap ret value b37cce95b github: fix coverity (add libpam-dev) a8dcf88d0 github: fix coverity build 7e7393413 conf: ensure mount tunnel is a dependent mount 01ae6d471 apparmor: allow shared mounts in start-container.in 81d94a4ee conf: create separate peer group for container's root 68020412c cgroups: only allocate user namespace if we have to 27f69d45b cgroups: use userns_exec_full() during cgroup removal 1029c2a06 README: remove lgtm dcf85308c meson.build: strip newline for variable assignments 8aac58866 meson.build: strip newlines from git output 16c6ff226 tests: lxc-test-reboot: Fix build on ia64 64eb31d02 src/lxc/meson.build: fix the static library path c6c705bfa build: drop build-time systemd dependency f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols 5aff4ea37 build: only build init.lxc.static if libcap is statically linkable c1f87c811 build: fix handling of dependancies to fix build on openSUSE bc318926d cgroups: fix -Waddress warning 4deaa28c0 Unroll IN_SET since the max usage is 2 elements check 73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup 8480c56a4 tools: lxc-destroy: update help message for --force 3cac3fce4 build: add libsystemd to oss fuzz dependencies f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status 4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed 09233897b Update README.md 4a66dabf8 conf: allow cross-device links dc4f1220f build(deps): bump actions/checkout from 2 to 3 2b802090f Update cifuzz.yml 20cc78456 fix error message when use tools with -? option b0abedf60 use sd_bus_call_method_async to replace the asyncv one 589a930f1 tree-wide: split open helpers into open_utils.h 7b1836bce build: prevent the inclusion of linux/mount.h with a hack da8c29853 mount_utils: remove conf.h include 74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h 68cf56489 tree-wide: minimize liburing.h inclusion 06f99c259 meson: fix docbook2x detection 133aa416c tree-wide: use struct open_how directly 63468abd3 tree-wide: use struct clone_args directly 4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion 16ebb29dc meson.build: allow explicit distrosysconfdir cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h ef1e0607b build: detect sys/pidfd.h availability c1115e150 build: detect where struct mount_attr is declared e452c8945 gitignore: Simplify 32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to 7f6643071 README: update security mails 5e704fe38 meson.build: fix build without stack-protector 7d7235489 meson.build: fix build with -Dcapabilities=false 8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P 353f0f992 meson: add remaining still-in-use config checks 3d360cf9d Store mount options in correct variable df3301046 Fix off-by-one error constructing mount options 8ee615c27 add check for statvfs 07a00b78f start: fix namespace sharing eae44ce19 conf: fix append_ttyname() 6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup 7317d2a8a start: don't overwrite file descriptors during namespace preservation fc133a9f3 conf: log file descriptors on error during idmapped mount setup 26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32 c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2 b203e1a14 Fix uninitialized read in parse_cap when libcap is not used e73520adf meson: Set DEVEL flag post release f4d02217e tools: Provide multicall lxc binary 289d6413e meson: Generate compile commands by iterating over an array 132ff8e28 lxccontainer: rework copy_file() f357cb290 lxccontainer: improve mod_rdep() b576a47d5 Read list until process exits We also: - drop two patches that were backported - refresh the context of one Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.0-rc.2Bruce Ashfield2024-05-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits: 446e63579 remove uses of platforms.Platform alias 22f2af40c update pause image to 3.10 65024e6fd core/image: fix usage of "unknown" platform 8b3060717 Provide runtime options in plugin info 332caf1a1 Provide ability to set lo up without CNI 288f0592e Prepare release notes for v2.0.0-rc.2 f24a95185 build(deps): bump github.com/prometheus/client_golang 8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6 96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 1cae3dc9b update ttrpc to 1.2.4 e2251f948 Update instrumentation fuzzer with new flag ef76a90e9 Update platforms package to v0.2.0 0b113d78d doc: add the description of sandboxer and io_type 7cead8800 cri: restart created container with correct io type 42f778fc1 modify streaming io url form 25c2f690a Update toolchain to Go 1.22.3 681a083fa Update unpacker to always fetch all 2788604e4 Update ctr image pull all platforms 58be88189 sandbox: do retry for wait to remote sandbox controller 059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts 9a9a8c46a Don't require vagrant tests in merge queues d9dc2811a fix: delete sockets on shim exit 41dc94ee1 CI: bump up golangci-lint to v1.58.0 9ecfac7f6 Integration: Change to grpc.NewClient 8c6183d74 Add lease test for metadata snapshotter c7fb8a925 Update metadata snapshotter to lease on exists b8dfb4d8f cri: support io by streaming api 3b065cddd CI: skip test in arm64 CI 6c3c5376f critools-version: v1.30.0 b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10 4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group 88b52119c Update api version to v1.8.0-rc.0 1c9c64f31 Update release procedure to mention api replace e69efd56d Add go mod replace when proto changes happen 678137199 sandbox: remove PID() in sandbox client 13f2fa1de remove go1.21.9 from CI matrix f0363a7f6 Chore: Simplify some syscall error checks 99ad11a00 core/metadata: failfast on content.Commit 3fb84403b CI: bump up crun to 1.15 55fcebffc Prepare release notes for api/v1.8.0 b811a8879 Add API release action b8060d641 Update ctr shim subcommand to task v3 f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support 05a3171bb Update transfer proxy to support ttrpc ec04e4f63 Add streaming proxy fe01cad20 Cleanup local transfer interface 171fc1434 Update release doc to mention API versioning 2ac2b9c90 Make api a Go sub-module e1b94c0e7 Move protobuf package under pkg 3e9cace72 Move runtimeoptions to api directory 4a4550777 Move runc options to api directory 25a288662 Fix v2 migrate for testutil package fb1f15d30 docs: correct the typo in the documentation 2df04b403 build(deps): bump the otel group with 8 updates 950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates 93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus 4c753d124 go.mod: k8s.io/cri-api v0.30.0 de38490ed sandbox: merge address and protocol to one url c3b306240 add task api endpoint in task create options 72fe47b2a add task api endpoint in oci proto b1fefccc7 sandbox: store endpoint in cri sandboxStore f6e0cf189 sandbox: add address info in Start and Status response 15782881e go.mod: go 1.22 2d5689434 CI: use Go 1.22 by default fef78c102 install-runc: pin Go to 1.21 11d8beff8 optimize error logs by providing absolute file paths 81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2 c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5 b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName 8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup e07b63d84 document usage and design of blockfile snapshotter b6bd12f13 Add Syself Autopilot to adopters 7bc476001 ADOPTERS.md: Fix Actuated italics 416741675 Perform file sync outside of lock on Commit c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic dfdfa206f Update for latest updates to release tool 53c9e6f86 Update release process after 1.7 a12acedfa sandbox: make a independent shim plugin 9ee3bfaba images: tests: Fix typos in the tests c51463010 docs: update registry config guide 7bd4d348e add info of exited event 218e2cf7c Return correct error if CRIU binary is missing bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.36Bruce Ashfield2024-05-291-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.36.0, which comprises the following commits: 6ceba8838 Bump to v1.36.0 c09e08b53 build: be more selective about specifying the default OS 3fa5531ca Bump to c/common v0.59.0 4d1690bc3 Fix buildah prune --help showing the same example twice 208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0 183582f03 bud tests: fix breakage when vendoring into podman de8510c9d Integration tests: fake up a replacement for nixery.dev/shell d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe 97382f928 Don't expand RUN heredocs ourselves, let the shell do it 864a40cbd Don't leak temp files on failures 97d44ab9c Add release note template to split dependency chores 4a524737f fix CentOS/RHEL build - no BATS there 420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee bbab575ff Address CVE-2024-3727 6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0 d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs da4e2d7ad Setting --arch should set the TARGETARCH build arg 6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f cd1960725 [CI:DOCS] Add link to Buildah image page to README.md f6d49125a Don't set GOTOOLCHAIN=local a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 53f2dc231 Makefile: set GOTOOLCHAIN=local e0077e8c6 Integration tests: switch some base images fdfd2237d containerImageRef.NewImageSource: merge the tar filters f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2 2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947 7688d880d Disable packit builds for centos-stream+epel-next-8 7425f6f8f Makefile: add missing files to $(SOURCES) fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp 89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security] c01061e47 integration test: handle new labels in "bud and test --unsetlabel" f86c2748e Switch packit configuration to use epel-9-$arch ... 14d964d92 Give unit tests a bit more time 8bb87aefa Integration tests: remove a couple of duplicated tests 3e756d507 Integration tests: whitespace tweaks 8ee7bebd7 Integration tests: don't remove images at start or end of test c7f088142 Integration tests: use cached images more b213c5e7a Integration tests _prefetch: use registry configs 8bdd6a66d internal: use fileutils.(Le|E)xists 441bdc927 pkg/parse: use fileutils.(Le|E)xists 705338379 buildah: use fileutils.(Le|E)xists 9dcd1cc9a chroot: use fileutils.(Le|E)xists 358814f69 vendor: update containers/(common|storage) be74b733f Fix issue/pr lock workflow a99fe1513 [CI:DOCS] Add golang 1.21 update warning 77400c4fc heredoc: honor inline COPY irrespective of ignorefiles ff13a08c9 Update install.md 5b414ad08 source-push: add support for --digestfile d9129b463 Fix caching when mounting a cached stage with COPY/ADD 58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e 2cd31a069 Makefile: softcode `strip`, use it from env var f812c8949 Man page updates 5198af7d7 Add support for passing CDI specs to --device 14bf3db27 Update comments on some API objects 2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks c1b43b57b Makefile - instead of calling `as` directly, use it from env var 23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 c1119f886 CI: bump VMs 2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0 9cf83d8f8 Change RUN to comment in bud.bats 5808b9603 Stop rebasing renovate PRs automatically 37994356f Update renovate validation image 4304d618f CVE-2024-1753 container escape fix 516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network 9db5a16f7 buildah: refactor resolv/hosts setup. 8c1fee7e7 rename the hostFile var to reflect the value better f8a7841cc vendor latest c/common 26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring 547d9bf0e Update docs/buildah-add.1.md 80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0 5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] bf3263ec1 Bump google.golang.org/protobuf to v1.33.0 e635558d2 fix links to containerignore doc e53e50f7a [skip-ci] Makefile: update rpm target 87ef84d3a pr-should-include-tests: use GitHub label, not commit text d50122aeb tests: enable pasta tests 1bc5dd692 [CI:DOCS] Migrate buildah container image 7c88bb372 Update .gitignore da81d2e2b Bump to v1.36.0-dev fedbd7967 Bump v1.35.0 3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 b2504c263 conformance tests: don't break on trailing zeroes in layer blobs a2f0ebef6 Add a conformance test for copying to a mounted prior stage e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0 951dccd3f cgroups: reuse version check from c/common bbea3eb54 Update vendor of containers/(common,image) 6474279ed fix(deps): update github.com/containers/storage digest to eadc620 f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4 53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802 8a1bcd51c manifest add: complain if we get artifact flags without --artifact d0ffb9d37 Use retry logic from containers/common e9c3c1666 Vendor in containers/(storage,image,common) 5047a3566 Update module golang.org/x/crypto to v0.20.0 26d5b84b1 Add comment re: Total Success task name 4853c0042 tests: skip_if_no_unshare(): check for --setuid 63975b541 Properly handle build --pull=false 836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 5748595ae Update module go.etcd.io/bbolt to v1.3.9 fee705081 Revert "Reduce official image size" aee02318a Update module github.com/opencontainers/image-spec to v1.1.0 cdb1a4ff8 Reduce official image size eb6269d8c Build with CNI support on FreeBSD 98f870753 build --all-platforms: skip some base "image" platforms d73e21120 Bump main to v1.35.0-dev 90c0d9794 Vendor in latest containers/(storage,image,common) 1def7d6de Split up error messages for missing --sbom related flags aca884a89 `buildah manifest`: add artifact-related options 07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases 4f0b619dd Use golang.org/x/exp/slices.Contains e202d62cc Disable loong64 again e99960085 Fix a couple of typos in one-line comments 302a798ad egrep is obsolescent; use grep -E e6d179476 Try Cirrus with a newer VM version 04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test 56e6ef854 Update to match dependency API update 5d58b88c7 Update github.com/openshift/imagebuilder and containers/common a20d5b2a5 docs: correct default authfile path 9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13 533aac2d4 tests: retrofit test for heredoc summary 1bfd3336f build, heredoc: show heredoc summary in build output 811ee6797 manifest, push: add support for --retry and --retry-delay 1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3 9d516e22e imagebuildah: fix crash with empty RUN e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551 a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security] 79fb3c213 Make buildah match podman for handling of ulimits 13fd5bd2c docs: move footnotes to where they're applicable 011736e12 Allow users to specify no-dereference 34dff20da Run codespell on code 86afc1ffd Fix FreeBSD version parsing 32b8ceeb6 Fix a build break on FreeBSD e3d043ebf Remove a bad FROM line f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1 4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 f157be843 docs: use reversed logo for dark theme in README cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing b3af07dab commit: force omitHistory if the parent has layers but no history de7c1e1f7 docs: fix a couple of typos 89f50af21 internal/mkcw.Archive(): handle extra image content 4cc811f4f stage_executor,heredoc: honor interpreter in heredoc 339839d4b stage_executor,layers: burst cache if heredoc content is changed dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0 a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense 905551f51 fix(deps): update module golang.org/x/sync to v0.6.0 efe76552b fix(deps): update module golang.org/x/term to v0.16.0 d371fc7b9 Bump CI VMs 53c65dd36 Replace strings.SplitN with strings.Cut b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b 114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4 fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1 59ea8af1b Document use of containers-transports values in buildah b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security] b283c48db chore(deps): update dependency containers/automation_images to v20231208 4a9dba647 manifest: addCompression use default from containers.conf 041388f87 commit: add a --add-file flag 81435aadc mkcw: populate the rootfs using an overlay 5b9141887 chore(deps): update dependency containers/automation_images to v20230517 de0c3cdaf [skip-ci] Update actions/stale action to v9 2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee 4276a735b Bump to v1.34.1-dev 471460018 Ignore errors if label.Relabel returns ENOSUP Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.15Bruce Ashfield2024-05-291-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits: c6c1c7f crun run --help: say --no-subreaper is ignored 8801bc4 github: disable CentOS 10 tests 5f0643c github: fix running tests on CentOS 10 d795081 tests: build on CentOS 10 without yajl f00fa22 libocispec: sync from upstream dd9428b blake3: initialize chunks_array 8c80ab9 utils: initialize fd 81b8f45 linux: fix mount of special files with rro e6eacaf NEWS: tag 1.15 08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests 4618d50 status: rmdirfd: try harder to remove mount points c72bf7f linux: cgroups: cleanup unused mount if move failed ff321e1 tests: install slirp4netns a946f04 utils: fix a compiler warning aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests f39bc4a tests, oci-validation: use perl tap driver f5548f2 tests, oci-validation: use tap-18 18e84a1 tests, oci-validation: use git clone 49090f2 Build s390x binaries using musl libc 307d35e Fix clang format test 4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2 e6a8d51 libocispec: update 1809973 tests: use npm-18 475a3fd features: add support for potentiallyUnsafeConfigAnnotations 4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge 631e767 release: use zstd instead of xz 0722689 release.sh: generate .zst release instead of .xz 3ad68ed linux: fixup libcrun_safe_chdir 699564b rpm: remove eln macro f50da23 Packit: reuse non-RHEL failure message notification on RHEL 0b7fc08 packit: podman reverse dependency tests 820471a libocispec: use runtime-spec v1.2.0 9eea9ff cgroup: make error clearer 59ad70a container: validate option flags 7918dca container: split create and run options 8894495 crun: add option --keep to run 35dccc3 libcrun, run: add option to not delete containers a220ca6 NEWS: tag 1.14.4 6cd74cb Add support for s390x 5884fd4 linux: fix mount of file with recursive flags b9e87e7 tests: test bind mounts of files crun/ocispec: update to latest 2236d50 github: test with the embedded yajl library bed19ad configure.ac: --enable-embedded-yajl skips check for yajl b633f89 Makefile.am: distribute the src/yajl symlink 86650dc fix compilation error with clang++17 20d3936 helpers.py: remove __str__() afed951 generate.py: fix some typos daeb197 runtime-spec: use version v1.2.0 66f6f71 optimize writefile e9a99a8 Optimize headers writefile 7a5f2b6 Refresh strings format sources 210f4d3 Refresh strings format headers b085839 runtime-spec: update crun/ispec: update to v1.1.0 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field crun/rspec: update to v1.2.0 b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: Make ptest runMingli Yu2024-05-291-1/+7
| | | | | | | | | | | | | Fixes: # ./run-ptest /tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found 1..1 not ok 1 bats-gather-tests # (in test file test/README.md, line 5) # `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ovs: convert WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-4/+4
| | | | | | | fetched files should be referenced via UNPACKDIR instead of WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* uxen: convert WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-1/+1
| | | | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Note: gcc-14 issues remain even with this fix. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: convert WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-4/+4
| | | | | | | | | Converting WORDIR references to UNPACKDIR. Our generated keys and other references to WORKDIR continue to be fine. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* diod: convert WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-2/+2
| | | | | | Converting WORDIR references to UNPACKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: ignore various issues fatal with gcc-14Martin Jansa2024-05-291-0/+17
| | | | | | | | | | work arounds for: meta-virtualization/recipes-extended/dev86/dev86_git.bb:do_install http://errors.yoctoproject.org/Errors/Build/183127/ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* helloworkd-flask: convert WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-9/+9
| | | | | | | unpacked source files are now in UNPACKDIR, so we adjust our operations to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-1/+1
| | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-2/+2
| | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-3/+3
| | | | | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. The remaining WORDIR references are to a secondary git repository with artifacts and should be safe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-1/+1
| | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-host-config: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-3/+5
| | | | | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. We also explicitly set S to point to the UNPACKDIR to avoid a build warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cgroup-lite: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-1/+1
| | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: convert remaining WORKDIR references to UNPACKDIRBruce Ashfield2024-05-291-6/+6
| | | | | | | | While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* yq: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-5/+8
| | | | | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also symlink our unpacked vendor clones into the build directory since they are no longer directly placed in WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-build: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-292-432/+432
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crio-o: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-2/+2
| | | | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to use UNPACKDIR instead Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-292-188/+188
| | | | | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to UNPACKDIR, and the destination for vendor'd source. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netns: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-292-138/+138
| | | | | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our S directory, and references to WORKDIR to fix the build for the new source layout. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-292-6/+6
| | | | | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: fix fragment pathBruce Ashfield2024-05-291-2/+2
| | | | | | | Now that UNPACKDIR is used to unpack sources we have an extra level of indirection to locate our cloned fragments. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-292-19/+29
| | | | | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also must adjust to UNPACKDIR changes which requires rework of the directories for the clones and source layout. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* layer: set compatibility to styheadBruce Ashfield2024-05-291-1/+1
| | | | | | | With the recent UNPACKDIR and golang changes, master is only compatible with styhead. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-md2man: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield2024-05-291-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-08 01:24:37 +0000