summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* libvirt: fix soruce code comments contain build folder path cause QA Issue ↵Xiangyu Chen2023-01-192-0/+55
| | | | | | | | | | | | | | | | | | | warning gendispatch.pl add build dir in code comments which was generated by itself. those build dir information would cause yocto qa report warnings like: WARNING: libvirt-8.1.0-r0 do_package_qa: QA Issue: File /usr/src/debug/libvirt/8.1.0-r0/src/access/viraccessapicheckqemu.h in package libvirt-src contains reference to TMPDIR File /usr/src/debug/libvirt/8.1.0-r0/src/access/viraccessapichecklxc.h in package libvirt-src contains reference to TMPDIR File /usr/src/debug/libvirt/8.1.0-r0/src/access/viraccessapicheckqemu.c in package libvirt-src contains reference to TMPDIR File /usr/src/debug/libvirt/8.1.0-r0/src/access/viraccessapichecklxc.c in package libvirt-src contains reference to TMPDIR File /usr/src/debug/libvirt/8.1.0-r0/src/access/viraccessapicheck.h in package libvirt-src contains reference to TMPDIR File /usr/src/debug/libvirt/8.1.0-r0/src/access/viraccessapicheck.c in package libvirt-src contains reference to TMPDIR [buildpaths] Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to v5.0.2Bruce Ashfield2023-01-192-53/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop a patch that has been merged upsream, and also bump the version to lxc-5.0.2, which comprises the following commits: d57173681 Release LXC 5.0.2 17c85aac6 Fix build error on sparc64 caused by using the gold linker b7dfb1312 lxc-default-cgns apparmor profile: allow overlay mounts 5cde898f4 lxc_user_nic: fix get_mtu() error handling 80553b5b4 Patching an incoming CVE (CVE-2022-47952) 1089f49c5 build: force linking against liblxc 0d2a03118 checkconfig: Fix filesystem capability check e17429580 checkconfig: Tweak cgroup handling 4ab76611d checkconfig: Tweak layout 0bca9bb18 checkconfig: Hide version if no lxc-start 957e0a5d9 checkconfig: Fix mixed tabs/spaces 4916a16bd src/lxc/meson.build: fix build without apparmor a330126b4 build: use cc.get_define to detect FS_CONFIG_* symbols c89be8325 cgroups: fix cgroup layout detection in __initialize_cgroups 7802f3647 state: additional check in lxc_wait to prevent OOB 4b434bf52 cgroups: check snprintf retval in unpriv_systemd_create_scope 0eca8d2ea cgroups: fix buffer out-of-bounds access in enable_controllers_delegation 4ce8345d6 network: always initialize struct nl_handler 28a1591cd apparmor: properly check lxc_strmmap ret value bd56c89ea github: fix coverity (add libpam-dev) a1ead0dcc github: fix coverity build 9e35b3ecd conf: ensure mount tunnel is a dependent mount 2ff447445 apparmor: allow shared mounts in start-container.in 58e878209 conf: create separate peer group for container's root 06b4612ee cgroups: only allocate user namespace if we have to 2662959b8 cgroups: use userns_exec_full() during cgroup removal 4dcc84c6b README: remove lgtm 748720ceb tests: lxc-test-reboot: Fix build on ia64 5749e2e20 Unroll IN_SET since the max usage is 2 elements check 495b1bbf4 tests: lxc-test-checkpoint-restore: use trap to do cleanup 77e08b887 tools: lxc-destroy: update help message for --force 9165ff1ed lxc/attach: Detect EACCES from execvp and convert to 126 exit status 011faff36 lxc-attach: Fix lost return codes of spawned processes that are killed 931693945 Update README.md a6287882e conf: allow cross-device links 8fa6d765a build(deps): bump actions/checkout from 2 to 3 e08c1b740 Update cifuzz.yml 0e9e64db8 fix error message when use tools with -? option f1a61a5f0 use sd_bus_call_method_async to replace the asyncv one ca863bd72 tree-wide: split open helpers into open_utils.h 02900160c build: prevent the inclusion of linux/mount.h with a hack 51b8763b0 mount_utils: remove conf.h include 460243f40 mount: move mount utilities from syscall_wrappers.h into mount_utils.h d5d7e2036 tree-wide: minimize liburing.h inclusion e2b8776bb meson: fix docbook2x detection d1dfce9c5 tree-wide: use struct open_how directly c9bca3326 tree-wide: use struct clone_args directly 497479ea3 tree-wide: wipe direct or indirect linux/mount.h inclusion 02f4bd00f build: check for FS_CONFIG_* header symbol in sys/mount.h c222fb567 gitignore: Simplify 22e8a7941 meson.build: strip newline for variable assignments d5600cf76 meson.build: strip newlines from git output 7d6b53438 src/lxc/meson.build: fix the static library path 1d5c7e771 build: drop build-time systemd dependency 59f69162c build: only build init.lxc.static if libcap is statically linkable 062c2d980 build: fix handling of dependancies to fix build on openSUSE 2a9743bba cgroups: fix -Waddress warning e510d6bd8 build: detect sys/pidfd.h availability b7b269680 build: detect where struct mount_attr is declared 5313e5048 meson.build: allow explicit distrosysconfdir 0539095ac Release LXC 5.0.1 a1329fefe README: update security mails 315d4cec6 meson.build: fix build without stack-protector aba631cd4 meson.build: fix build with -Dcapabilities=false c2ee9b440 src/lxc/log.h: fix STRERROR_R_CHAR_P d441ee585 meson: add remaining still-in-use config checks 00a79876b Store mount options in correct variable da0f35646 Fix off-by-one error constructing mount options 31bff905a add check for statvfs 242289b6b start: fix namespace sharing 41f602361 conf: fix append_ttyname() ea4fd7f85 start: record inherited namespaces earlier to make it available for idmapped rootfs setup e74fd55bc start: don't overwrite file descriptors during namespace preservation dcfd75bb4 conf: log file descriptors on error during idmapped mount setup c3e648700 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32 cfcbdb75f use systemd dbus StartTransientUnit for unpriv cgroup2 28726f215 Fix uninitialized read in parse_cap when libcap is not used d663495ee meson: Generate compile commands by iterating over an array Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ovs: update CVE_VERSION to 3.0.3Xiangyu Chen2023-01-191-1/+1
| | | | | Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libslirp: create virt variantBruce Ashfield2023-01-101-0/+0
| | | | | | | | | | | libslirp has been added to oe-core, so the recipe here is breaking yocto compliance. Until the full runtime can be validated, we create a virt specific libslrip (but don't use it), that will be used as a compatibility fallback. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Add recipes for stable Xen 4.17 release and update masterMichal Orzel2023-01-105-8/+49
| | | | | | | | | | | | | | | | Add recipes for xen and tools for the newly released 4.17 version and take the opportunity to update master recipes. Reflect 4.17 tools changes in xen-tools.inc: - add test-paging-mempool to test package, - add init-dom0less script to xl package, - add localstatedir to xencommons package (this is needed as from 4.17 onwards, there is no /var/lib/xenstored resulting in /var being installed but not shipped in any package). Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Michal Orzel <michal.orzel@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Bump default version to 4.17 stableMichal Orzel2023-01-101-2/+2
| | | | | | Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Michal Orzel <michal.orzel@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Bump SRCREV of 4.16 recipes to 4.16.3Michal Orzel2023-01-103-439/+4
| | | | | | | | | Update 4.16 recipes to use the latest 4.16.3 release. Also, remove the GCC 12 fix patch as it seems to be no longer needed. Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Michal Orzel <michal.orzel@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: fix build with btrfs-tools 6.1Bruce Ashfield2023-01-102-2/+47
| | | | | | | | | | | | | We'd really prefer to bump the vendor SRCREV and allow the fetcher to bring in the pending change without needing a patch, but there are other API changes that trickle through the code. So we extract just the patch we need, and leave the SRCREV info in the recipe, to document the source. When the upstream updates its vendor/ directory, we can drop this (as the patch will no longer apply) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix build with btrfs-tools 6.1Bruce Ashfield2023-01-102-1/+47
| | | | | | | | | | | | | We'd really prefer to bump the vendor SRCREV and allow the fetcher to bring in the pending change without needing a patch, but there are other API changes that trickle through the code. So we extract just the patch we need, and leave the SRCREV info in the recipe, to document the source. When the upstream updates its vendor/ directory, we can drop this (as the patch will no longer apply) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: fix build with btrfs-progs 6.1Jose Quaresma2023-01-102-0/+39
| | | | | | | | | | # github.com/containers/storage/drivers/btrfs | vendor/github.com/containers/storage/drivers/btrfs/btrfs.go:387:11: args.lim.max_referenced undefined (type _Ctype_struct_btrfs_qgroup_limit has no field or method max_referenced) | recipe skopeo-v1.8.0+gitAUTOINC+b95e081162-r0: task do_compile: Failed Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.28.xBruce Ashfield2023-01-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.25.0-547-gcfefbb64, which comprises the following commits: ea9b705a [release-1.28] Bump to c/storage v1.43.1 for s390x sigsegv fix 6eb52c6b [release-1.28] Bump c/image to v5.23.1 5fb010fe version: bump to 1.28.2 69d3fcd8 Stop using ubi8 9fa3c167 Define and use a safe, reliable test image 9136e86e version: bump to v1.28.1 ff08605b copier.Put(): clear up os/syscall mode bit confusion 6bc044dc retrofit, test: ubi8 changed architecture string 79f41e32 Bump to v1.28.0 1deec7ce No longer modify buildah.spec a53f342f Update for https://github.com/klauspost/pgzip/pull/50 3c5f9886 Update vendor containers/(common,image) 88615e98 [CI:DOCS] Add quay-description update reminder 95bb0250 vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423 aaba84ff build(deps): bump github.com/opencontainers/selinux 675a7332 Vendor in latest containers/storage 28195ac9 Changing shell list operators from `;` to `&&` fc458032 Fix buildahimage container.conf permissions regression 9ae09bf7 Set sysctls from containers.conf e67bb090 refactor: stop using Normalize directly from containerd package 3cd0fa2b config,builder: process variant while populating image spec 899ecaaf Proof of concept: nightly dependency treadmill 31dc089c Run codespell on code 07ab5a5c Check for unset build args after TARGET args ea81614a pkg/cli: improve completion test bb285e53 vendor in latest containers/(common,storage,image) f3a73b70 copier: work around freebsd bug for "mkdir /" 16a4eee2 vendor: update c/image 02d4a6b5 test: run in the host cgroup namespace 5cde04cd vendor: update c/storage e3d48600 vendor: update c/common 94ab98d6 cmd: check for user UID instead of privileges 4c9fc47f run,build: conflict --isolation=chroot and --network de9c3841 Fix broken dns test (from merge collision) 8d5d7632 Fix stutters b4135818 Fix broken command completion fc3ae53b buildah bud --network=none should have no network 3c092e5e build: support --skip-unused-stages for multi-stage builds 87d4ae88 Prevent use of --dns* options with --net=none fd14bfe5 buildah: make --cache-ttl=0s equivalent to --no-cache ac30ed23 parse: make processing flags in --mount order agnostic deb2d903 Minor test fix for podman-remote a30b71db build: honor <Containerfile>.containerignore as ignore file 46db0211 Update install.md: Debian 11 (Bullseye) is stable 4e5be719 build(deps): bump github.com/docker/docker 4407875a Use constants from containers/common for finding seccomp.json 4808f3b7 Don't call os.Exit(1) from manifest exist 9f435de8 manifest: add support for buildah manifest exists 0bdbd1a8 Buildah should ignore /etc/crio/seccomp.json 9c147ab8 chroot: Fix cross build break 309f714b chroot: Move isDevNull to run_common.go 363bf9c5 chroot: Fix setRlimit build on FreeBSD dc49c3cb chroot: Move parseRLimits and setRlimits to run_common.go b64d8143 chroot: Fix runUsingChrootExecMain on FreeBSD 4d963eb5 chroot: Move runUsingChrootExecMain to run_common.go 0a61e4b2 chroot: Factor out Linux-specific unshare options from runUsingChroot 3b42b515 chroot: Move runUsingChroot to run_common.go 350c509e chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go 188dcc36 chroot: Factor out /dev/ptmx pty implementation f9814601 chroot: Add FreeBSD support for run with chroot isolation b9db9574 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 64534a88 Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause 168a39dd build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1 514ff3dc Cirrus: use image with fewer downloaded dependencies a96eb0b0 build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 9934b173 run: add container gid to additional groups f46ef3b2 buildah: support for --retry and --retry-delay for push/pull failures 811741fe Makefile: always call $(GO) instead of `go` 010ac5e0 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3 0c4b19ba test: use `T.TempDir` to create temporary test directory 90cf4fc0 mount,cache: enable SElinux shared content label option by default 354f96f6 commit: use race-free RemoveNames instead of SetNames 491ad027 Drop util/util.Cause() 9637a244 cmd/buildah: add "manifest create --amend" 7533aa56 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2 17e6fe01 docs: specify git protocol is not supported for github hosted repo da4647bd Scrub user and group names from layer diffs 2eb519fb build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8 3a6919b5 version: bump to 1.28.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.10.0Bruce Ashfield2023-01-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping skopeo to version v1.10.0-77-g4517ea0b, which comprises the following commits: 58bccf38 fix(deps): update module golang.org/x/term to v0.4.0 f0c08985 [skip-ci] Update actions/stale action to v7 92e3146a proxy: Fix leak of blobs from containers-storage 960713da vendor: Bump golang.org/x/net to 4.0 b51f8ea2 proxy: Ensure images are closed when proxy is shutting down 9c6cbc94 Add an example for creating a docker-archive file 3eb9d71d proxy: Add GetLayerInfo API 46d48295 fix(deps): update module golang.org/x/term to v0.3.0 3212bbed [skip-ci] GHA/Cirrus-cron: Fix execution order 40ba7a27 Update skopeo-inspect man page example 278be5a5 README: Update example to show newly exposed LayerData b5ac5349 [CI:BUILD] Cirrus: Migrate OSX task to M1 35532b24 Adds sync with tag suffix example 1af1d9c2 GHA: Add cirrus-cron auto-rerun job bdf19302 Adds `--append-suffix` flag to sync 563c91a2 fix(deps): update module github.com/containers/storage to v1.44.0 e1fdb4da Cirrus: Add reverse-deps. test to verify proxy ext d06bf27e [skip-ci] Update actions/stale action to v6 8410bfdd fix(deps): update module golang.org/x/term to v0.2.0 16d4a81b Renovate: Override global no-rebase option 2b55a723 chore(deps): update actions/stale to v3 f968b2a8 fix(deps): update module github.com/spf13/cobra to v1.6.1 fe5c4091 Close a HTTP response body d5327bce fix(deps): update module golang.org/x/term to v0.1.0 6d3d9a3b fix(deps): update module github.com/stretchr/testify to v1.8.1 5c69302d Update to c/image main branch 6d564d4d bump to v1.11.0-dev 4c0e5650 chore(deps): add renovate.json 757ec5db proxy: Bump semver for OpenImageOptional 08b27fc5 proxy: Add `OpenImageOptional` 9b6f5b6e Add a workaround for public.ecr.aws not implementing tag list at all 632cebd7 Update AWS workaround to use Golang types ea9aa68b Reorganize the "list tags failed" logic in inspect.go a bit c476d626 Remove a (skopeo inspect) workaround for IBM Bluemix fce2cf9c Fix an error message to refer to repo, not a single image 9724da1f Remove a special case for failing to list tags in (skopeo sync) 955a59c8 Update tests for changed error texts ae50898b Include c/image after https://github.com/containers/image/pull/1299 f3aee25c Fold a long line. 1983173b Remove single-use "wanted" variables 4ccfb033 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 a4951550 Bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6 e021b675 Bump github.com/opencontainers/image-spec from 1.1.0-rc1 to 1.1.0-rc2 5eace407 Bump to v1.10.1-dev ee60474d Release v1.10.0 7ebff0f5 Update for https://github.com/klauspost/pgzip/pull/50 787e1087 Revert addition of -compat=1.17 to (go mod tidy) ee84302b Update vendor containers/(common,image) 89ae387d [CI:DOCS] Add quay-description update reminder feabfac2 Bump github.com/containers/storage from 1.42.0 to 1.43.0 18a95f94 Fix documentation in the default registries.d content. 9b40f0be default.yaml should have all options commented 166b587a warn about ineffective destination opts in sync cmd 0a42c33a document imageDestOptions.warnAboutIneffectiveOptions() 90c50338 warn users about --dest-compress and --dest-decompress misuse d3ff6e26 warn users about --dest-compress and --dest-decompress misuse 3a05dca9 Don't abort sync if the registry returns invalid tags d9dfc448 add inspect layersData ba23a916 Stop using docker/docker/pkg/homedir in tests 4b9ffac0 Update for c/image's update of github.com/gobuffalo/pop f36752a2 Don't include git commit from a parent directory in the --version output 4e2dee43 Remove unused GIT_BRANCH definition 3450c11a Point at --all in the --preserve-digests option documentation 3a808c2e Talk about "registry repositories" in (skopeo sync) documentation 04169cac Fix looking for commands with GNU make 4.2.1 a99bd0c9 Fix a comment fa2b15ff Reformat with Go 1.19's gofmt 9e79da5e Fix running tests on macOS a863a0dc Optimize upstream skopeo container image build 67a4e044 GHA: Re-use identical workflow from buildah repo e95123a2 Bump to v1.9.3-dev ca1b0f34 Release v1.9.2 73a668e9 Bump github.com/containers/common from 0.49.0 to 0.49.1 eafd7e55 Cirrus: Update CI VM images to match podman CI b9cf626e [CI:DOCS] Cirrus: Use the latest imgts container 63dabfcf Bump to v1.9.2-dev 2eac0f46 Release v1.9.1 b7e7374e Stop using deprecated names from c/common/pkg/retry 08846d18 Update to github.com/containers/common v0.49.0 049163fc Update to github.com/containers/image/v5 v5.22.0 b42e6648 Bump github.com/containers/storage from 1.41.0 to 1.42.0 ee477d88 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 f1485781 Bump to v1.9.1-dev a03cba7c Release v1.9.0 b000ada3 Update for the renames of sigstore to lookaside f2b4071b Add --sign-by-sigstore-private-key to (skopeo copy) and (skopeo sync) 06be7a15 Vendor in c/image with sigstore support 61593fcc Revert "Change a repo used for sync tests" 62158a58 Vendor unreleased c/image with OCI artifact support Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v0.7.0Bruce Ashfield2023-01-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.7.0-54-gab303cb, which comprises the following commits: d048d49 Bump actions/stale from 6 to 7 6941d4b Bump github.com/navidys/tvxwidgets from 0.2.0 to 0.3.0 4dc84ff displaying progressbar before container logs command 2d6301a adding published port feature to pod create dialog 2542fc6 removing empty first row in container and network UI create dialogs efab06c removing command dialog button to imporve usability 2bf1d94 Bump github.com/docker/docker 5c2e001 Bump github.com/onsi/ginkgo/v2 from 2.5.1 to 2.6.0 38971ec UI style update 48a69ec Bump golang.org/x/crypto from 0.3.0 to 0.4.0 a625ea1 Bump actions/checkout from 2 to 3 a86fec2 Bump github.com/containers/buildah from 1.28.1 to 1.28.2 9ca60c7 podman-tui container image build/push to quay.io d761fbb Bump github.com/containers/buildah from 1.28.0 to 1.28.1 ae29593 Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 2e38146 Bump actions/setup-python from 3 to 4 e9f743f workflow update - fix unit test failure a0559a6 github workflow update 06aa9f7 fix build issue (vendor) d8f9836 Vagrant box update to fc37 f25d471 Bump golang.org/x/crypto from 0.1.0 to 0.3.0 32c3fdc Bump github.com/containers/podman/v4 from 4.3.0 to 4.3.1 310413d Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 cbeb46a Bump github.com/containers/storage from 1.43.0 to 1.44.0 34908fa Bump github.com/onsi/ginkgo/v2 from 2.4.0 to 2.5.0 bad66a1 Bump github.com/navidys/tvxwidgets from 0.1.1 to 0.2.0 5604863 Bump to v0.8.0-dev 864efdb Bump to v0.7.0 8cb0529 cirrus + golangci update b7b6461 fix vendoring failure 770524b cirrus config update d7aecf7 config and pdcs update for podman v4.3.0 e03f327 Bump actions/checkout from 2 to 3 825e7ad Bump actions/stale from 1 to 6 4a01ff4 Bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 edd09ae Check for gha updates daily with dependabot 1a78fbf Bump github.com/docker/docker 7cae6c1 Bump github.com/onsi/gomega from 1.22.1 to 1.24.0 a29f3d6 Bump github.com/containers/podman/v4 from 4.2.1 to 4.3.0 95a0b04 static build support 7ef4a18 new feature - container restore 5726afc fix test failure for utils and network disconnect dialog 01a47e6 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 1a5d851 Bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1 524425e Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0 eefa975 Bump github.com/docker/docker fe94ca4 new feature - container checkpoint 7f48cad Bump github.com/docker/docker 323170f Bump github.com/onsi/ginkgo/v2 from 2.3.0 to 2.3.1 7132fa3 Bump github.com/onsi/gomega from 1.22.0 to 1.22.1 8d62658 Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.0 804d67c Bump github.com/onsi/gomega from 1.21.1 to 1.22.0 f716b4e Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 999474b Bump github.com/onsi/gomega from 1.20.2 to 1.21.1 7d9e702 Bump github.com/containers/buildah from 1.27.2 to 1.28.0 a2101f5 Bump github.com/containers/common from 0.49.1 to 0.50.1 a763ca1 Bump github.com/containers/buildah from 1.27.1 to 1.27.2 afb6a84 Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0 134fb0d Bump github.com/docker/docker b304117 Bump github.com/containers/buildah from 1.27.0 to 1.27.1 8bf10e8 Bump to v0.7.0-dev a823c9e Bump to v0.6.0 0e5f649 Bump github.com/containers/podman/v4 from 4.2.0 to 4.2.1 58c41ff Bump github.com/docker/go-units from 0.4.0 to 0.5.0 05165bf Bump github.com/onsi/gomega from 1.20.1 to 1.20.2 129c846 Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.6 da069d1 Bump github.com/rs/zerolog from 1.27.0 to 1.28.0 fffd28a new feature - network disconnect 50e88b2 adding approvers to OWNERS file + running codespell 0db8f99 new feature - network connect 95abf3a Bump github.com/containers/podman/v4 from 4.1.1 to 4.2.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ovs: update to 3.0.3Bruce Ashfield2023-01-104-43/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The linux datapath has been removed, so we drop our kernel_module patch, as well as the install rules around modules_install. We refresh one patch, but otherwise, the build is unchanged. We also pick up the following commits: 7b5c4240c python: Fix datapath flow decoders. 57049862f Prepare for 3.0.4. 726c7b797 Set release date for 3.0.3. 953fa9c40 lldp: Fix bugs when parsing malformed AutoAttach. 982158827 dpif-netdev: Use unmasked key when adding datapath flows. 7aeb7f1ce odp-execute: Add check for L4 header size. 2410b9559 ovsdb-cs: Consider default conditions implicitly acked. a984a22e5 odp-execute: Fix ipv4 missing clearing of connection tracking fields. c272928c8 faq: Update some wording since kernel module is already removed. 52b85e54a rculist: Use rculist_back_protected to access prev. 192db0d03 Prepare for 3.0.3. ea6c986ff Set release date for 3.0.2. 5898bba3d odp-util: Fix reporting unknown keys as keys with bad length. c47b8fd5a ovs-dpctl-top: Fix ovs-dpctl-top via pipe. ebf52fd37 rculist: Fix iteration macros. 998fc998f vswitchd: Publish per iface received multicast packets. 0d31e8573 learn: Fix parsing immediate value for a field match. eccfce96b datapath-windows: Check the condition to reset pseudo header checksum on Rx side c9c602b6f netdev-offload-dpdk: Enhance the support of tunnel pop action e3963987a ci: Update meson requirement for DPDK. 4b6c748f8 ovsdb: transaction: Fix weak reference leak. d78eef089 ovsdb: transaction: Refactor assess_weak_refs. e17707fcd ovs-tcpdump: Cleanup mirror port on SIGHUP/SIGTERM. 6690ed80c netdev-linux: Fix inability to apply QoS on ports with custom qdiscs. bfc572f58 tc: Fix misaligned writes while parsing pedit. 89f3dd0c2 odp-util: Add missing separator in format_odp_conntrack_action(). 4cdf15787 vswitch.xml: Fix the name of rstp-path-cost option. 02ab8d169 mac-learning: Fix learned fdb entries not age out issue. ef6da6a8f ofproto-dpif-xlate: Update tunnel neighbor when receive gratuitous ARP. 48f19bdfb bond: Fix crash while logging not yet enabled member. b41427513 netdev-dpdk: Fix tx_dropped counters value. c7d9ee706 tc: On last action use drop action attribute instead of pipe 4a2fe9f1e netdev-linux: Allow meter to work in tc software datapath when tc-policy is specified d2ebceaff Revert "tc: Fix stats dump when using same meter table" 24c5414ec unaligned: Correct the stats of packet_count and byte_count on Windows. 892346cd2 tests: Fix filtering of whole-second durations. 958664218 netdev-offload: Set 'miss_api_supported' to be under netdev. 64b79581b cmap: Add thread fence for slot update. ae188cf7b ofproto-dpif-xlate: Do not use zero-weight buckets in select groups. 7cbcf3e42 github: Update versions of action dependencies. c0eb7f652 ovsdb: Fix race for datum JSON string reference counter. 3e2596f19 ovs-tcpdump: Fix bond port unable to capture jumbo frames. a8e316aee json: Fix deep copy of objects and arrays. c4bb0d8db Prepare for 3.0.2. 228600969 Set release date for 3.0.1. 50feac16f Add support for OpenSSL 3.0 functions. 61df71366 dhparams: Fix .c file generation with OpenSSL >= 3.0. 446018dfd daemon-unix: Fix file descriptor leak when monitor restarts child. 4cc16e7f9 vconn: Allow ECONNREFUSED in refuse connection test. 92d587a99 dpdk: Use DPDK 21.11.2 release. d7e3bf2d8 m4: Test avx512 for x86 only. e379e42d4 ovsdb-idl: Preserve references for rows deleted in same IDL run as their insertion. a841d55e6 datapath-windows: Correct Geneve IPV6 header checksum parameter 6636fc9ff python: idl: Fix idl.Row.__str__ method. 3bcb21a88 bond: Avoid deadlock while updating post recirculation rules. 97cc13084 ofproto-dpif-upcall: Add debug commands to pause/resume revalidators. f555cec36 test-list: Fix false-positive build failure with GCC 12. fc5a49045 tests: Fix tests with GNU grep 3.8. 787648996 tc: Fix stats dump when using same meter table dcbdadaa5 cirrus: Upgrade to FreeBSD 13.1 image. 02bfa84df netdev-linux: Skip some internal kernel stats gathering. 5737cdcc8 tests: Use _DAEMONIZE macro's to start tcpdump. bb949d595 ofproto-dpif-xlate: Fix error messages for nonexistent ports/recirc_ids. ee2254be2 ofproto-dpif-xlate: Optimize datapath action set by removing last clone action. d5932c8d7 ofproto-dpif-xlate: Clear tunnel wc bits if original packet is non-tunnel. 887b12251 raft: Fix unnecessary periodic compactions. dbbe4c55e netdev-offload-tc: Parse tunnel options only for geneve ports. 6e8da6fbb netdev-offload-tc: Add missing handling of the tunnel source port. 737d2cb5a netdev-offload-tc: Fix ignoring unknown tunnel keys. b32bee91d netdev-offload-tc: Use masks instead of keys while parsing tunnel attributes. 417600e68 netdev-offload-tc: Explicitly handle mask for the tunnel destination port. fafb386a3 netdev-offload-tc: Fix the mask for tunnel metadata length. 1123e5485 Prepare for 3.0.1. 99e0cad9e Set release date for 3.0.0. 2810ab2bf releases: Mark 2.17 as a new LTS release. de9e4f649 docs: Remove remaining references to OVS kmod and XenServer. 746e11520 handlers: Fix handlers mapping. a489eb3d2 handlers: Create additional handler threads when using CPU isolation. aaaebdf2e xenserver: Remove xenserver. 686bdae1e acinclude: Improve vpopcntdq build check. 14d59d8ec packets: Fix misaligned access to ip6_hdr. ddff8a7e3 python: Do not send non-zero flag for a SSL socket. 112e1c68e ovsdb: Fix copying weak references into transaction history. 2972c18d0 dpif-netdev: Simplify AVX512 build time checks to enhance readability. 16d0fcfa7 github: Move CI to ubuntu 20.04 base image. 50d13fb2b netdev-offload-tc: Disable offload of IPv6 fragments. bd4a72d28 ovs-save: Use right OpenFlow version for add-tlv-map. f77c14b63 system-traffic: Fix IPv4 fragmentation test sequence for check-kernel. ae74f3ffe system-traffic: Fix incorrect neigh entry in ipv6 header modification test. 0c10b785a system-traffic: Don't run IPv6 header modification test on kernels < 5.19. 941c6bda0 python: Fix E275 missing whitespace after keyword. 9fbc79d51 tc: Use sparse hex dump while printing inconsistencies. bb5a5bacb netdev-offload-tc: Print unused mask bits on failure. 2b53191e1 dynamic-string: Add function for a sparse hex dump. a78680634 system-offloads-traffic: Fix waiting for netcat indefinitely. 9554bd068 dpif-netlink: Fix incorrect bit shift in compat mode. 33ac6983b python: Use setuptools instead of distutils. e94b71578 packets: Re-calculate IPv6 checksum only for first frag upon modify. 5ce25c4b7 netdev-linux: set correct action for packets that passed policer bfb07d6b1 test-ovsdb: Fix false-positive leaks from LeakSanitizer. 7e2a5f8ad m4: Update ax_func_posix_memalign to the latest version. 95ab03020 m4: Replace obsolete AC_HELP_STRING with AS_HELP_STRING. 9c8ea6aca debian: Fix incorrect linkage of the python C extension. e0b417a03 python: Add ability to pass extra libs and cflags for C extension. de1decb45 libopenvswitch.pc: Add missing libs for a static build. 13b9fcf7e rhel: Stop installing internal headers. b4df85397 python-c-ext: Handle initialization failures. 55896a146 netdev-linux: Do not touch LAG members if master is not attached to OVS. 6d0fdae1f netdev: Clear auto_classified if netdev reopened with the type specified. f8f2c1178 system-offloads-traffic: Avoid check_pkt_len action test random failures. f62591653 system-traffic: Properly stop dangling ping after geneve test. 13de99ebd conntrack: Fix conntrack multiple new state. 6a75842cd python-c-ext: Fix a couple of build warnings. e57e91422 python-c-ext: Remove Python 2 support. b1524cb94 odp-execute: Avoid unnecessary logging for action implementations. 9ee6a71b3 system-dpdk: Add testpmd clean up in MTU unit tests. 384be3d4c netdev-offload-dpdk: Setting RSS hash types in RSS action. 9e83717ef lib: Print nw_frag in flow key. 75ca657b2 ovsdb: Remove extra make target dependency for local-config.5. 6e91000df ci: Prefer pip3 to install unit test dependencies. e2e8d7cd3 Prepare for 3.0.0. 1b53826d6 ofproto/bond: Add knob 'all-members-active'. 73ba04fd7 python: Add unit tests for filtering engine. 686bb5e72 python: Add unit tests to datapath parsing. 7448cbb4e python: Add unit tests for openflow parsing. 3425d01a9 python: Add unit tests for ListParser. 445dceb88 python: Introduce unit tests. 6a71bc09b python: Add a json encoder to flow fields. 7e588e82f python: Add flow filtering syntax. 076663b31 python: Add ovs datapath flow parsing. 3923b9331 python: Introduce OpenFlow Flow parsing. 1215cf133 python: Add flow base class. 61e040fc2 build-aux: Generate ofp field decoders. d542f0ea8 build-aux: Split extract-ofp-fields. 7803743a0 python: Add list parser. dcd17a896 python: Add mask, ip and eth decoders. 12bc968e2 python: Add generic Key-Value parser. 02341a187 systemd-dpdk: Fix typo's and capitalize first word. bf4782911 tests: Add OVS-DPDK MTU unit tests. ddaf4fe0e tests: Add OVS-DPDK QoS unit tests 3476bd393 Documentation: Remove kernel module documentation. dc433e25e acinclude.m4: Remove support for building the OVS kernel module. 422e90437 make: Remove the Linux datapath. 86642de3a tests: Remove support for check-kmod test. c94ae8a75 rhel: Stop packaging OVS kernel module. b6941ca7b ci: Stop building OVS kernel module. 16bec677a debian: Add option to build without DPDK. c78e7efa7 docs: Update package references in debian/ubuntu related docs. 3e31a2daf debian: Fix generation of copyright file. 6ad3be974 debian: Fix build of python json C extension. 671f93fe4 python: Allow building json C extension with static OVS library. ae262ddf2 ci: Separate job for debs, ensure built pkg is tested. 999032261 debian: Update packaging source from Debian/Ubuntu. 9f4f2bb7d checkpatch: Ignore line length and leading whitespace for debian/*. 02428f715 debian: Archive debian packaging source. 92eb03f7b odp-execute: Add ISA implementation of set_masked IPv4 action bcfe58543 odp-execute: Add ISA implementation of set_masked ETH 277f2375c odp-execute: Add ISA implementation of push_vlan action. 398f80fff odp-execute: Add ISA implementation of pop_vlan action. 529af6714 odp-execute: Add ISA implementation of actions. b52e0b396 acinclude: Add configure option to enable actions autovalidator at build time. 1713fc011 odp-execute: Add command to switch action implementation. eec822761 odp-execute: Add auto validation function for actions. 70b559e97 odp-execute: Add function pointer for pop_vlan action. 95e4a35b0 odp-execute: Add function pointers to odp-execute for different action implementations. d807a2bb4 AUTHORS: Add Jinjun Gao. c5553ce2f ovsdb/TODO: Update the list of tasks. 2fc29c427 man: Fix various typos across manual pages. 0443c1557 Fix spelling error exposed in binaries. 70a9f9e96 system-dpdk: Add unit test for user configured mempools. 55ba0e81d system-dpdk: Split ovsdb creation and vswitchd start. 3757e9f8e netdev-dpdk: Add shared mempool config. eacc544c4 tc: Fix misaligned access while creating pedit actions. e5162ac42 tc: Fix misaligned access to struct tcf_t for police action. 0d153bffb netdev-linux: Fix leak of a tc police get/del reply. 4dd68ff85 ovsdb: Add missing ovs-thread include. 3cd2cbd68 ovsdb: Prepare snapshot JSON in a separate thread. 485ac63d1 ovsdb: Add lazy-copy support for ovsdb_datum objects. 02dabb21f tests: Add check_pkt_len action test to system-offload-traffic. 492061257 system-offloads-traffic: Properly initialize offload before testing. e4daf88a4 netdev-offload-tc: Handle check_pkt_len datapath action. dd03672f7 netdev-offload-tc: Move flower_to_match action handling to isolated function. 64365293a netdev-offload-tc: Move flow_put action handling to isolated function. b15952590 conntrack: Check for expiration before comparing the keys during the lookup. 78387e88b conntrack: Use an atomic conn expiration value. 3d9c1b855 conntrack: Replace timeout based expiration lists with rculists. 4847baf4a conntrack-tp: Use a cmap to store timeout policies. 6edc278c8 conntrack: Use a cmap to store zone limits. cfba95158 utilities/bashcomp: Fix incorrect file mode. 23d496ac5 acinclude: Fix double -Werror. e773140ec ovsdb: Enable memory trimming after compaction by default. fe7382db6 tests: Add test for later IPv6 fragments nw_proto=44. 5d875809a meta-flow: Document nw_proto limitation for IPv6 later frags. f32bebc42 dpif-avx512: Add support for simple match lookup. dfff8b67b dpif-netdev: Refactor simple match lookup functions. eb8ebf8c4 doc: Add meter offload topic document 5660b89a3 dpif-netlink: Offloading meter to tc police action 218304df1 netdev-offload-tc: Offloading rules with police actions f6ed09ef5 netdev-offload-tc: Cleanup police actions with reserved indexes on startup 4c226944f netdev-offload-tc: Implement meter offload API for tc 5c039ddc6 netdev-linux: Add functions to manipulate tc police action ed2300cca netdev-linux: Refactor put police action netlink message a9b8cdde6 tc: Add support parsing tc police action 922b850f0 netdev-offload: Add meter offload API 0dd409c2a netdev-dpdk: Delay vhost mempool creation. b80f58cde dpif-netdev/mfex: Add ipv6 profile based hashing. 8cab30a9d dpif-netdev/mfex: Add AVX512 ipv6 traffic profiles. 3e6be8a0a mfex_avx512: Calculate miniflow_bits at compile time. 95be97a5a mfex_avx512: Calculate pkt offsets at compile time. 3a5d05c1e AUTHORS: Add Jeffrey Walton. 7d746f764 util: Update cache line size on PowerPC. 7045e91a9 Pmd.at: fix dpcls and dpif configuration test cases. e72b05686 tests/mfex: Improve pcap script for mfex tests. 6f24c2bc7 ovsdb: Add Local_Config schema. 603bc853f dpif-netdev: Fix leak of AVX512 DPIF scratch pad. c8bff848a ofproto-dpif-xlate: No clone when tunnel push is last action. 22ac9d6aa AUTHORS: Add Seamus Ryan. 09a2b8028 tests: Add ovs-dpdk rate limiting unit tests. e4a2b0109 AUTHORS: Add Ales Musil. fe171e4f1 dpif-netdev: Refactor AVX512 runtime checks. 6835d4b01 python: Add Python bindings TODO file. a9ec4e3be ovsdb-server: Log database transactions for user requested tables. c558f9f1e ovsdb-idl: Get per-database memory usage statistics. 23ed22594 dpif-netdev-extract-avx512: Protect GCC builtin usage. 8c1c447a1 ovs-tcpdump: Default to OVS_RUNDIR if present. 751d05b47 dpcls: Add unlisted alias for subtable lookup command. cb9ae5f0f ovsdb: Fix memory leak on error path in ovsdb_file_read__(). 299050c2d odp-util: Ignore unknown attributes in parse_key_and_mask_to_match(). 29a2f1835 ofproto-dpif: Avoid unneccesary backer revalidation. 509c32765 lldp: Fix lldp memory leak. f1c51be50 ipfix: Trigger revalidation if ipfix options changes. 4e1e1e189 conntrack: Fix incorrect bit shift while hashing nat range. 334d43bc0 packets: Fix misaligned write to MPLS lse. a2d202bde tc: Fix misaligned access to stats and time values. 499b9d73c odp-util: Fix unaligned access to tunnel id. 888193cec ofpbuf: Fix offsetting a NULL pointer in ofpbuf_reserve. 1dbc3b9f3 drop-stats.at: Fix frequent failures of the recursion too deep test. d632ad0aa odp_util: Fix parse_key_and_mask_to_match() vlan parsing. 70f81aa23 datapath-windows: Update layers for multiple tunnels processing bca410283 datapath-windows: Fix GRE/VxLAN/STT Tunnel RX. 88e3ae5d6 ofproto-dpif-xlate: Fix internal CT state for non-recirc traffic. ca4421851 classifier: Adjust segment boundary to execute prerequisite processing. c0d7d630b ovs-tcpdump: Fix error when stopping ovs-tcpdump. 165f5fbb5 conntrack: Limit port clash resolution attempts. c608ace71 conntrack: Remove the IP iterations in nat_get_unique_l4. 071b802c6 checkpatch.py: Add checks for easy-to-misuse APIs. 805e9340d ofproto-dpif: Fix meter use-after-free. c67941e97 ovs-rcu: Add ovsrcu_barrier. ba462b358 dpif-netdev: Fix ALB 'rebalance_intvl' max hard limit. 83c0a3647 dpif-netdev: Fix ALB parameters type mismatch. 31dfea34c AUTHORS: Add Michael Phelan. 87ef13b00 dpdk: Use DPDK 21.11.1 release. cb1c64007 acinclude: Add seperate checks for AVX512 ISA. fb85ae434 automake.mk: Remove -mavx512dq CFLAG from AVX512 library. 34a77ca70 dpif-netdev-extract: Remove unnecessary compiler targets. 66c85fae3 dpif-netdev-lookup: Fix GCC 5 warning. 90cadf170 dpif-netdev-private-extract: Fix typo VMBI -> VBMI. 2c24daa09 raft: Don't use HMAP_FOR_EACH_SAFE when logging commands. 3ecfaf136 dpif-netdev: Restructure rxq schedule logging. 37ccbd9c9 dpif-netdev: Split function to find lowest loaded PMD thread core. 04e5adfed ovsdb: raft: Fix transaction double commit due to lost leadership. 336d7dd7c dynamic-string: Fix undefined behavior due to offsetting null pointer. e8f557df3 sha1: Use implementation from openssl if available. 7b3a4c2e8 Revert "odp-util: Always report ODP_FIT_TOO_LITTLE for IGMP." 482abeae5 ofproto-dpif-xlate: Fix netdev native tunnel neigh discovery spa. c5bcbd58d ovs-router: Expose the ovs_router_get_netdev_source_address function. 743b53622 ofproto-dpif: Trigger revalidation if ct tp changes. bb78070fc Carefully release NBL in Windows 738c76a50 dpcls: Change info-get function to fetch dpcls usage stats. da9424ad0 tests: Properly kill ovsdb test processes. e5d4f011a AUTHORS: Add Han Ding. 8ce7ead8c ovs-save: Get highest ofp version error. 5ec547330 dpif-netdev: Only hash port number when necessary. d7c0b90fa ci: Add UB Sanitizer. c8c49a9db netdev-linux: Properly access 32-bit aligned rtnl_link_stats64 structs. a5cc859a4 ofp-actions: Use aligned structures when decoding ofp actions. 08c3e5e37 ofp-errors: Ensure parsed OFPT_ERROR messages are properly aligned. 933aaf944 ofp-actions: Ensure aligned accesses to masked fields. 471babb81 treewide: Avoid offsetting NULL pointers. 3764f5188 treewide: Fix invalid bit shift operations. 9dd3031d2 Documentation: Fix use of rst verbatim code chunk syntax. 6c5046209 vswitchd.xml: Fix whitespace. b3bbfc172 utilities: Handle dumping packets in GDB TUI. dd4d8e34b ofproto-dpif-xlate: Remove mirror assert. b91025187 Documentation: Clarify QEMU version requirement. 6882c45d4 docs: Note ALLOW_EXPERIMENTAL_API for tunnel offloads. 7e7083cc4 dpif-netdev: Replace loop iterating over packet batch with macro. 8523ee2f8 netdev-dpdk: Fix tx drops statistic for a down netdev. c896bffd8 netdev-dpdk: Remove a leftover lock annotation. 29b94e12d netdev-dpdk: Refactor the DPDK transmit path. 8c506d372 ofp-monitor: Fix abort on malformed flow update event. e8515c8cc ovs-monitor-ipsec: Allow custom options per tunnel. af864cedb dpif-netdev/mfex: Add ipv4 profile based hashing. dc8082276 netdev-offload-dpdk: Fix ethernet type for VLANs. 9b7ed5f6f netdev-offload-dpdk: Use has_vlan match attribute. 7d3555442 python: idl: Raise AttributeError from uuid_to_row. 218dad97d windows: Fix NEWS and add OVS version in FAQ. c3e64047d ofp-monitor: Support flow monitoring for OpenFlow 1.3, 1.4+. d8ab75cd6 ofp-monitor: Extend Flow Monitoring support for OF 1.0-1.2 with Nicira Extensions. d94cd0d3e ovsdb-idl: Support write-only-changed IDL monitor mode. b7aaf41eb AUTHORS: Add Thilak Raj Surendra Babu. c1c8cb8a1 ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. 2080979ae dpif-netdev-avx512: Fix overflow of UINT32_C(1). 5db8aa39d dpif-netdev-avx512: Fix ubsan shift error in bitmasks. 4e3966e64 python: Politely handle misuse of table.condition. b21e2805d AUTHORS: Add Dincer Beken. 0e0eef533 ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels. 4ea1bb639 system-traffic: Fix fragment reassembly with L3 L4 protocol information. 53b75e91d datapath-windows: Add IPv6 conntrack support on Windows. 96dc66dda cirrus: Update FreeBSD versions. edb233586 datapath-windows: Add IPv6 Geneve tunnel support in Windows 9d70f4a7c NEWS: Highlight libopenvswitch API change caused by UB fixes. 21b76c774 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable. d29491eeb python: idl: Set cond_changed to true if condition change requested. 9a67d883d dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id. 853a89c4f AUTHORS: Update email for Rosemarie O'Riorden. 2f16123c1 json: Improve string parsing. 3b18b8656 alb.at: Add tests for cross-numa polling. c591827ec dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate. cdc9a196b pmd.at: Add tests for multi non-local numa pmds. da6ce41d8 dpif-netdev: Fix non-local numa selection for more than two numas. 4b5c3b66a dpif-netdev: Fix typo in function name. 8ff9dec46 AUTHORS: Add Abhiram R N. 7539b4e45 netdev-vport: Register IFINDEX for ERSPAN device. 3a3a76334 signals: Add support for sigdescr_np. e3de0bd82 python: idl: Set cond_changed to false if last id is zero. 0027b3b46 ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal(). efa6f1f2e ofproto/ofproto-dpif: Fix dpif_type for userspace tunnels. b16270e69 sset: add SHORT version of SAFE loop macros. 7aff8a511 sparse: bump recommended version and include headers. b54067b24 idlc: support short version of SAFE macros. d293965d7 rculist: use multi-variable helpers for loop macros. 745c80f52 hindex: remove the next variable in safe loops. 2d4027738 hindex: use multi-variable iterators. ef3961648 cmap: use multi-variable iterators. 9e56549c2 hmap: use short version of safe loops if possible. 860e69a8c hmap: implement UB-safe hmap pop iterator. 9e8d960a6 hmap: use multi-variable helpers for hmap loops. e9bf5bffb list: use short version of safe loops if possible. d4566085e list: use multi-variable helpers for list loops. 5a2940978 util: add helpers to overload SAFE macro. 882689711 util: add safe multi-variable iterators. 187a602fa util: add multi-variable loop iterator macros. 08e9e5337 ovsdb: raft: Fix inability to read the database with DNS host names. d96d14b14 openvswitch.h: Align uAPI definition with the kernel. 9d8645951 system-traffic.at: Fix flaky DNAT load balancing test. 5f76d0ded Set release date for 2.17.0. 635cb95e0 dpif-netdev: Keep orig_in_port as a field of the flow. 2e2217c12 tests: Fix incorrect usage of OVS_WAIT_UNTIL. 31b467a75 odp-util: Fix output for tc to be equal to kernel. 6d76cfc44 netdev-offload-tc: Fix IP and port ranges in flower returns. 38298a877 netdev-offload-tc: Fix use of ICMP values instead of masks defines. a03963695 netdev-offload-tc: Always include conntrack information to tc. db40eb79e netdev-offload-tc: Check for valid netdev ifindex in flow_put. b4868ee16 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks. 2bdf5b288 netdev-offload-tc: Add debug logs on tc rule verify failures. 920ec5761 tc: Keep header rewrite actions order. be93ce40e faq: Update OVS/DPDK version table for OVS 2.15/2.16 c44876b9e system-dpdk: Fix mfex autovalidator tests. 3bd593917 ofp-prop: Silence the 'may be uninitialized' warning. b1e783dde tests: Ignore log about failing to set NETLINK_EXT_ACK. 8d480c5ce ovsdb-cluster.at: Avoid test failures due to different hashing. c356f6c0b dpif-netdev: Simplify atomic function pointer stores. f77dbc1eb ofproto: Use xlate map for uuid lookups. ba4ec2914 AUTHORS: Add Hongzhi Guo. b46fd37ab ofproto: Add refcount to ofproto to fix ofproto use-after-free. 7baed8fe6 ovs-monitor-ipsec: Add list-commands command. a9f5ee119 ofproto-dpif: Trigger revalidation when ipfix config set. 545b64415 conntrack: Prefer dst port range during unique tuple search. ec85f5325 conntrack: Select correct sport range for well-known origin sport. 10b55282a ipsec: StrongSwan report connection update failures to ovs logs. 7bd08b6c1 AUTHORS: Add Mohammad Heib. 02cff6b2d ipsec: Libreswan report connection failures to ovs logs. 9016592ca netdev-dpdk: Add mempool count in cmd get-mempool-info. 7ed60839d system-tso: Skip encap tests when userspace TSO is enabled. f34a7626c tc: Fix stats byte count on fragmented packets. de634e422 compat: Add gen_stats include to define tc hw stats. 015994d37 ovsdb: row: Optimize row updates by applying diffs in-place. a3e97b1af ovsdb: relay: Add transaction history support. 999ba294f ovsdb: raft: Fix inability to join the cluster after interrupted attempt. 6de8868d1 reconnect: Fix broken inactivity probe if there is no other reason to wake up. 7aaa5b813 datapath-windows: Fix NXM_OF_IP_TOS issue 4f933301f Documentation: Update USDT documentation to include systemtap dependency. 4628be9ff ovsdb-idl: Fix use-after-free when destroying an IDL loop. 31dc72c64 dpif-netdev: Use dp_netdev reference in offload threads. 7d8b6ab64 dpif-netdev: Fix a race condition in deletion of offloaded flows. a81bb674e dpif-netdev: Move port flush after datapath reconfiguration. f92e6946d dpif-netdev-dpcls: Make subtable reprobe thread-safe. 5f4dfcccb ci: Fix typo in variable name. 3ffeb03fe dp-packet: Ensure packet base is always non-NULL. 172d8bfed bfd: lldp: stp: Fix misaligned packet field access. b9e8354d0 ovsdb-idlc: Avoid accessing member within NULL idl index cursors. b07c2e92e stopwatch: Fix buffer underflow when computing percentiles. 5a9bb85ca dpif-netdev: Fix misaligned access. 8ed26a8be treewide: Don't pass NULL to library functions that expect non-NULL. 989895501 system-traffic.at: Avoid sporadic failures during conntrack IPv6 HTTP/FTP tests. e969370d3 system-traffic.at: Do not use ranges with broadcast address. 78ff3961c daemon-unix: Close log file in monitor process while waiting on child. b9cf52070 system-dpdk.at: Add warning log in mfex fuzzy test. f0a9000ca ofproto: Fix ipfix not always sampling on egress. 96ad83bc7 tc: Fix incorrect TC rule for decap+encap datapath flow. ab4d3bfbe netdev-dpdk: Update to use RTE_ETH namespace defines. 4f810deab dpif-netdev: fix vlan and ipv4 parsing in avx512 d5453008c ci: Install wheel before installing any other python packages. f81483ad5 odp-util: Fix tunnel key attr for GTP-U. 28f36edd1 ovsdb-idl: Only process successful txn in ovsdb_idl_loop_run. 97772a9b2 AUTHORS: Add Wan Junjie. cbcd9ca42 ofproto-dpif-upcall: Fix n_revalidators on upcall show. 33027afd2 acinclude: Detect avx512 vpopcntdq compiler support. 0bca7fa1a Documentation: Fix userspace Tx steering section. a7f52b7eb vswitchd.xml: Add missing tx-steering PMD option. 53a540e53 ovsdb-idl: ovsdb_idl_loop_destroy must also destroy the committing txn. 712202ff7 ofproto-dpif-xlate: Fix packet drops with decap action on MPLS Multicast. 3ae3e8605 tests: Fix cosmetic errors in system-traffic.at. 5202710a7 python: idl: Clear last_id on reconnect if condition changes in-flight. c1691ccea ovsdb-cs: Clear last_id on reconnect if condition changes in-flight. 718dc8fca python: idl: Resend requested but not acked conditions when reconnecting. 9632f5551 tests: Add de-serialization check to the json string benchmark. 4056ae487 ofp-flow: Skip flow reply if it exceeds the maximum message size. 77967b53f conntrack: Check TCP state while testing established connections pick up. 6e13565dd ovsdb: transaction: Keep one entry in the transaction history. 3a05c6370 ovsdb-cs: Fix ignoring of the last id from the initial monitor reply. dadd8357f ofproto-dpif: Fix issue with non-reversible actions on a patch ports. 0a395a52d NEWS: Fix some typo. 5b3bb16b8 ovs-monitor-ipsec: Fix generated strongSwan ipsec.conf for IPv6. 8723063c3 system-dpdk: Fix MFEX logs check. 0506efbd0 datapath-windows: Pickup Ct tuple as CT lookup key in function OvsCtSetupLookupCtx c6f0b623e Prepare for post-2.17.0 (2.17.90). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: update to 1.1,2Bruce Ashfield2023-01-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cni to version v0.8.0-126-gf024754, which comprises the following commits: f024754 refactor: move from io/ioutil to io and os packages e18f632 Update email to gmail 58488a6 Upgrade GitHub actions packages to resolve NodeJS 12 warnings 62709e0 Removed loxilight as it is not supported anymore 76aaefb libcni: handle string-type disableCheck values 04dce8c testhelpers: use `go mod tidy` to ensure all necessary dependencies before building be9139d cdc: update email dc22d04 go.mod: bump to go1.18 6996769 github: bump go version to v1.19 08fb460 go fmt dbf33e2 fix 714-plugin add netns validation reinforcement 8dba382 libcni: add specific type for CHECK not supported a710a7b Updated Calico project link 1c7c696 Fix successfully unmarshalled nil raw result 58b77bd spec: fix format 55fe94e invoke: if Result CNIVersion is empty use netconf CNIVersion 99eac24 cnitool: address golint error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> cni-flannel: update to 1.1,2 Bumping flannel-cni-plugin.git to version v1.1.2-2-ga2398ab, which comprises the following commits: 1537c92 update of GH workflows acb770d Make sure the CNI delete function does not fail when the json config is wrong e541b70 Allow multiple flannel networks and upgrade to Go 1.19.2 6e8bb11 upgrade cni and plugins deps 076c446 add mips64le dockerfile Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: mark layer compatible with mickledoreBruce Ashfield2023-01-031-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-viewer: add opengl to REQUIRED_DISTRO_FEATURESMingli Yu2022-12-221-1/+3
| | | | | | | | | | | Fixes: ERROR: Nothing PROVIDES 'spice-gtk' (but /build/layers/meta-virtualization/recipes-extended/virt-viewer/virt-viewer_11.0.bb DEPENDS on or otherwise requires it) spice-gtk was skipped: missing required distro feature 'opengl' (not in DISTRO_FEATURES) ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'virt-viewer', 'spice-gtk'] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: avoid textrel QA Issue warningXiangyu Chen2022-12-221-0/+3
| | | | | | | | Fix some of arch such as arm/aarch64 would report QA warning as below: WARNING: criu-3.17.1+gitAUTOINC+d46f40f4ff-r0 do_package_qa: QA Issue: criu: ELF binary /usr/sbin/criu has relocations in .text [textrel] Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: use generic DOCKER_COMMIT in do_compileBruce Ashfield2022-12-073-2/+6
| | | | | | | | | | do_compile() is shared and shouldn't have been using SRCREV_moby as that is obviously only set in the moby recipe. Switch to using a generic DOCKER_COMMIT variable and set it in both docker_moby and docker-ce. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kvmtool: refresh crosscompiler patchBruce Ashfield2022-12-071-13/+13
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* upx: Use git fetcher instead of gitsmJoakim Roubert2022-12-071-2/+11
| | | | | | | | | | | The current upx will trigger the Bitbake Fetcher Error added in Kirkstone 4.0.5 189a6d452e3037c9e94ccdf6af38359fc6058064 commit. This patch replaces gitsm with git and explicitly adds the git submodules with the corresponding commits. Change-Id: I1b1231f06481f7a1e25dc35277d0f1725c7631e0 Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add seccomp to default packageconfig settingsBruce Ashfield2022-12-071-1/+1
| | | | | | | Much of meta-virt requires seccomp to function properly, so we update docker to match that common default. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add mobyproject:moby to CVE_PRODUCTBruce Ashfield2022-12-072-2/+2
| | | | | | | | | | | | | Add mobyproject:moby to CVE_PRODUCT to reflect where the source is coming from for both docker recipes. We keep the old 'docker' designation for compatibility. It is unclear whether or not we should also be adding the cli and libnetwork to the CVE_PRODUCT. But since they are on different SRCREVs and not vendored, we keep them out for now. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* upx: update to latest devel releaseBruce Ashfield2022-12-072-35/+5
| | | | | | | | | | | | | | | | The upx development branch history has been rebaseed, so we update our SRCREV to match. As part of this update, we can drop our patch as it has now been merged into the project. The cmake structure has changed slightly, so we inherit cmake-native to make it available as part of the Makefile driven build. And finally, the name and location of the binary has changed, so we adapt our install rule to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt-glib: fix pointer-sign issueMarkus Volk2022-12-071-1/+1
| | | | | | | Update to latest commit to fix a build issue with latest glib-2-0 Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.7Bruce Ashfield2022-12-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.7-6-gbebd67f, which comprises the following commits: cb6ae27 handlers: set selinux/apparmor profile 0efbe56 utils: change AppArmor profile for the current proc f1f286a utils: change SELinux label for the current proc a1cd1a6 handlers: use only the handler name if needed 40d996e NEWS: tag 1.7 3239c52 container: do not leak container status ab73033 utils: do not leak error fe21bee cgroup: fix memory leak 10c1fcc handlers: add an alias field 92e67d7 wasm: check pointers before dereferencing cc2ab3b copr: enable wasmedge support for f36 and higher 9c5ad48 container: rewrite argv when using a handler a81b115 libcrun: propagate argc and argv 0a94c5b linux: create parent dir with 0755 5308c49 copr: crun-wasm subpackage 8743809 crun: automatically pick handler from argv0 ddb614b crio,test: skip unrelated seccomp notifier with * 6feeff4 wasmtime: add support for compiling .wat format 7b49b79 NEWS: fill data for old releases baa98f4 container: use clone3 to join directly the target cgroup 37a438d cgroupfs: implement precreate cgroup c4af47e cgroup: new interface to preload a cgroup Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.6.9Bruce Ashfield2022-12-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v20.10.21Bruce Ashfield2022-12-072-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> docker-ce: update to v20.10.21 Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> containerd: update to v1.6.9 Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-umoci: add convenience symlink for oci image tarBruce Ashfield2022-12-071-0/+2
| | | | | | | | We have been symlinking the -oci image directory for a while, but we can also create a shorted convenience symlink for the tar'd version of that directory. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-sloci: add convenience symlinks in deployBruce Ashfield2022-12-071-0/+7
| | | | | | | | To sync the sloci OCI image backend with the umoci variant, create shortened convenience symlinks for the image and image.tar in the deploy directory. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-viewer: fix buildpaths QA warningBruce Ashfield2022-12-071-0/+7
| | | | | | | | | | | | | | The file virt-viewer-enums.c in the virt-viewer src is generated by glib-mkenums. glib-mkenums is embedding full paths into this file. There's no option for this utility to use a sysroot style variable. So to avoid QA errors, we sed WORKDIR out of the generated file (after build, before packaging) and make its includes relative. The file can then be packaged into virt-viewer-src without a QA error. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-viewer: add recipeMarkus Volk2022-12-071-0/+29
| | | | | | | | | | | | | | | | | | | virt-viewer is a minimal tool for displaying the graphical console of a virtual machine. The console is accessed using the VNC or SPICE protocol. The guest can be referred to based on its name, ID, or UUID. If the guest is not already running, then the viewer can be told to wait until it starts before attempting to connect to the console. The viewer can connect directly to both local and remotely hosted machines , optionally using SSL/TLS encryption. virt-viewer is the required client for the debian based proxmox ve. That's also the environ- ment for which it was tested at runtime (only on x86_64). I have successfully compiled it for x86_64, aarch64 and qemumips. Other platforms might work (as long as gobject-introspection is available), but are untested. Adding the vnc protocol would pull in a layer dependency on meta-gnome. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt-glib: add recipeMarkus Volk2022-12-071-0/+14
| | | | | | | | | | | | | | | | | libvirt-glib wraps libvirt to provide a high-level object-oriented API better suited for glib-based applications, via three libraries: - libvirt-glib - GLib main loop integration & misc helper APIs - libvirt-gconfig - GObjects for manipulating libvirt XML documents - libvirt-gobject - GObjects for managing libvirt objects It is needed as a dependency for glib based projects that make use of libvirt e.g. virt-manager, virt-viewer or gnome boxes. Compilation was tested for x86_64, aarch64 and qemumips Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.1.4-tipBruce Ashfield2022-12-072-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits: 3b958289 Fixes inability to use /dev/null when inside a container 335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally fb145a2f cirrus-ci: enable EPEL for CentOS 7 276297b6 VERSION: back to development 5fd4c4d1 Release 1.1.4 204c673c [1.1] fix failed exec after systemctl daemon-reload ec2efc2c ci: fix for codespell 2.2 c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19 d83a861d Fix error from runc run on noexec fs d614445d [1.1] libct/nsenter: switch to sane_kill() 3ca5673f CI: workaround CentOS Stream 9 criu issue c3986e53 tests/int: don't use --criu f46c0dad [1.1] ci: fix delete.bats for GHA 6b94849d tests/int: runc delete: fix flake, enable for rootless fa3354dc libct: fix mounting via wrong proc fd eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.4-tipBruce Ashfield2022-12-012-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits: 3b958289 Fixes inability to use /dev/null when inside a container 335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally fb145a2f cirrus-ci: enable EPEL for CentOS 7 276297b6 VERSION: back to development 5fd4c4d1 Release 1.1.4 204c673c [1.1] fix failed exec after systemctl daemon-reload ec2efc2c ci: fix for codespell 2.2 c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19 d83a861d Fix error from runc run on noexec fs d614445d [1.1] libct/nsenter: switch to sane_kill() 3ca5673f CI: workaround CentOS Stream 9 criu issue c3986e53 tests/int: don't use --criu f46c0dad [1.1] ci: fix delete.bats for GHA 6b94849d tests/int: runc delete: fix flake, enable for rootless fa3354dc libct: fix mounting via wrong proc fd eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to 1.6+Bruce Ashfield2022-12-011-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.6-75-g4907f10, which comprises the following commits: 0e4cf20 container: pass the argv0 on errors with handlers 6da989c wasmtime: honor error message length 2f46f21 wasmtime: mark unused argument baa98f4 container: use clone3 to join directly the target cgroup 2497b9b linux: add run.oci.pidfd_receiver=PATH annotation 37a438d cgroupfs: implement precreate cgroup c4af47e cgroup: new interface to preload a cgroup 352d8ac criu: use a temporary error 3ebaba3 container: cache the bpf generated by seccomp 18abbfc Typos: a/an e5d4c07 man: fix indentation for run.oci.handler=HANDLER 74d097b seccomp: use relative paths to open bpf 8cfcc8f seccomp: move copy bpf to seccomp 7a66ccc container: move open_seccomp_output to seccomp a2de8fb seccomp: add functions to calculate checksum 6861b2a container: compute seccomp options earlier dd310aa configure.ac: add check for libgcrypt 81d3b16 exec: set context 0cffffe crun: display rundir in --version output 882a054 wasm: inherit environment variables in the WasmEdge handler 1f71880 man: cleanup run.oci.handler and define krun and wasm d474211 Refer to libocispec header files under ocispec/ 5027629 build(deps): bump uraimo/run-on-arch-action from 2.2.1 to 2.3.0 fef6ce2 build(deps): bump github/codeql-action from 1 to 2 5837234 crun: open libcrun with dlopen 5f2464f build(deps): bump actions/cache from 2 to 3 ba0adeb build(deps): bump uraimo/run-on-arch-action from 2.2.0 to 2.2.1 5d2a536 build(deps): bump actions/upload-artifact from 2 to 3 a4ffe17 build(deps): bump actions/checkout from 2 to 3 108d9ec Check for github actions updates on weekly basis 9f2acfc cgroup: account for swap usage for checkBeforeUsage 6666dec list: remove yajl usage 6fdcb89 container: new API libcrun_write_json_containers_list e1b32c7 update: remove yajl usage 270961f python: Fix argument type in container_delete 17f4e55 container: new API libcrun_container_update_from_values 1c681c1 python: Fix argument parsing in make_context e666af1 crun: chown std streams before joining the user namespace 391df45 linux: reject sysctl kernel.domainname when OCI knob domainname is set f94655c test: ack (none) as output of getdomainname fdb26d0 cgroup: honor checkBeforeUpdate 8758f31 add support for setting the domainname 17ba516 libocispec update 7ea7617 systemd: create sub-cgroup on v1 as well 08bccc7 tests: update containerd to 1.6.8 978e719 Copr: Fix i386 builds 18cf2ef NEWS: tag 1.6 396ac88 seccomp: honor SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV 074cd9a wasm: provide an integration test for crun with wasmedge support 399e5ea wasm: use wasmedge library soname in dlopen 3e34345 crun: reintroduce -V (uppercase) as an alias for --version 17337c4 seccomp: use helper process to send listener fd f34ebf2 Copr: wasmtime support only for non-x86 df20997 crun: now -v prints the version fdcf83a utils: wrap mmap and munmap 95744c8 utils: unify read process exit status 44c305f linux: move definition of syscall_clone to linux.h d254d3e utils: run process with timeout restores sigmask 57df79b init mask 430dea1 container: drop intermediate userns feature 2e647e0 crio,CI: skip failing checkpoint and restore one container 8d0dfc3 podman,CI: skip top on priviledged container ad9008b copr: depend on wasmtime-c-api for shared lib Bumping runtime-spec to version v1.0.2-114-g494a5a6, which comprises the following commits: 4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV 6be797c CODEOWNERS: sync with MAINTAINERS 9e658bc config-linux: add memory.checkBeforeUpdate 1924f6b GOVERNANCE: correct the Charter URL 744912b add domainname spec entity 0da1600 fix rfc link b57ada5 maintainer updates as per #1101 e78a3c3 Add available `LinuxSeccompFlag`s Bumping libocispec to latest, which comprises the following commits: 02f231b Move header files under ocispec/ 39e1872 Make libocispec installable 6fd1d94 update runtime-spec to latest 1e37c8a rust, runtime: add domainname to spec d59cc93 rust,runtime: add MountUidMapping and MountGidMapping ac69f5a rust,runtime: add idle type to CPU e9c21c1 rust,runtime: rename GidMapping,UidMapping to Linux{Uid/Gid}Mapping 8258e1d image-spec: update from upstream b2e74e1 runtime-spec: update from upstream ce973fd parser: allocate empty arrays 845aad5 runtime-spec: sync from upstream 1380666 image-spec: sync from upstream 9bb6aa9 src: fix regression 27763d8 runtime-spec: sync from upstream 8abb1b1 image-spec: update from upstream 2ea0d22 runtime-spec: update from upstream cde73d8 yajl: update from upstream fc57095 src: fix generated code indentation e739a1c .github: set safe directory f09f411 build: fix bashism in configure.ac 23ed5eb git: ignore newly added test binary to prevent untracked changes in crun d15ed35 fix bug when contain null value in json 2a622ef image-spec: update from upstream 3dd60db runtime-spec: update from upstream 88241d7 sync: add CMT and MBM fields to Intel RDT Bumping image-spec to version v1.1.0-rc2-12-g4df8887, which comprises the following commits: 867ce74 ArtifactType is optional, omit when empty 59780aa Add ArgsEscaped field to image config 3625ee3 doc: fix example in artifact.md 94f2431 version: bump main back to -dev 19a74bc version: release v1.1.0-rc2 0a97fe7 docs: Added artifact.md to docs and spec.md c91663b Update RELEASES.md 0e7e0dd docs: Update release process docs with checklist 5d055a4 version: switch back to -dev 4728b6e version: bump for 1.1.0-rc1 release a7ac485 Rename refers field to subject (#950) 4c15674 Use go install and full path to commands ce50f1f Bump from Go 1.16 to 1.17 ca2e500 Embed Platform in Image a865bc0 Fix whitespace consistency in config.md da33ef0 Remove io/ioutil references ed7e07b Add artifact to spec.md bc9c4bd Update schema for mediaType validation (#933) b04b320 Working Group Proposal for Reference Types ba36edd Add regclient to implementations ba3f174 Add maintainer nomination template 08825b8 Pinning version of golangci-lint to support 1.16 9747134 Move inactive maintainers to emeritus 0bd8a03 Add Brandon as maintainer c7ca3ac Update URLs to https 874a191 Add Sajay as maintainer 6ffdc78 Move inactive maintainers to emeritus d6ce48a Add mediaType fields into example manifest & image index JSON references bc44f5b Fixing charter link 0895292 implementations: point to krustlet/oci-distribution 02c5c05 implementations: adding the C and Rust libraries a36b0c8 Handle multiple matching index entries a3eee7d README.md: Remove link to OCI scope table The OCI scope table no-longer exists. 4533d3e schema: use Go's embed package instead of esc d147780 .tool: remove lint tool, call linter directly 0e094f3 schema, specs-go: fix lint errors d3cd202 *: switch to golangci-lint 4d865bc go: have the go.mod at top-level 0f6c001 Remove unneeded docker pull of pandoc image de28903 Makefile: stale installation of glide was failing 3a46ac8 github: bring forward the versions of golang tested/built with 6ced3bd media-types: `.mediaType` is available in both OCI and Docker 3be64d9 version: bump main back to -dev beccafd version: release 1.0.2 5b82148 specs-go: adding `mediaType` to the index and manifest structures 2eb4046 *.md: bring mediaType out of reserved status e3885ce version: bump main back to -dev 67d2d56 version: release 1.0.2 dcdcb7f specs-go: adding `mediaType` to the index and manifest structures 5f31485 *.md: bring mediaType out of reserved status 3fee04b Adding ACR to implementations 8087946 Reflect docker dontation of distribution to CNCF bd2fa25 Minor spelling correction fc4df0a Fix very minor oversight in config example 0d98a6c Scope data verification to content consumers 83479d4 Clean up portability considerations fccc435 Implementations MUST NOT populate data arbitrarily 2596ec0 Expand godoc for Data 58c082d Add note about portability concerns ce281ce Add Embedded Data section aaf8045 Define the data field 4f080a7 Add go.mod and pin dependencies Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 4.3Bruce Ashfield2022-12-011-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We add ${datadir}/user-tmpfiles.d/* to package some newly added systemd files, but otherwise, the recipe is unchanged. Bumping libpod to version v4.3.0-7-g9ce592fcb, which comprises the following commits: 83b02f8fd Update c/image from release-5.23 branch 14563ef13 system tests: fix broken bashisms 34ebb9af2 Release notes fixes d5a0dfc1e Bump to v4.3.1-dev ad42af949 Bump to v4.3.0 9496a3836 Final release notes for v4.3.0 ac7fa8437 libpod: Add support for 'podman top' on FreeBSD f8a79409c libpod: Factor out jail name construction from stats_freebsd.go e33306683 pkg/util: Add pid information descriptors for FreeBSD 3810a9dac [CI:BUILD] copr: podman rpm should depend on containers-common-extra 94499aa47 Podman image: Set default_sysctls to empty for rootless containers 8a28b896b Allow volume mount dups, iff source and dest dirs 295d0d1d9 libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit c9c683a58 markdown-preprocess: add generic include mechanism 42a221874 markdown-preprocess: almost complete OO rewrite ca9eaec5e bump golangci-lint to v1.49.0 6972d47ff rootless: fix return value handling 5a214f6e5 generate systemd: set --stop-timeout for stopping containers c6ad786ca Change to correct break statements 1a5506459 Add swagger install + allow version updates in CI 78d4af894 Cirrus: Fix windows clone race fc43751e7 kill: wait for the container 9c01425ad hack/tree_status.sh: print diff at the end 682dd8e45 Man pages: refactor common options (misc) b98f6b52f Man pages: Refactor common options: --detach-keys c7e946482 Man pages: refactor common options: --attach 83b5fcf38 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 6d5d84a05 Man pages: refactor common options: --annotation (manifest) 7f88deff1 KillContainer: improve error message b805a068c build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6 42b642509 docs: add missing options f2a2ab557 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 095aa5c3a play kube: notifyproxy: listen before starting the pod b7514ee40 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 f7732ae52 Man pages: refactor common options: --os-version 298a2432e play kube: add support for configmap binaryData 2efdff528 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1 802118ad1 Revert "Add checkpoint image tests" dfa55ff6a Revert "cmd/podman: add support for checkpoint images" eb43d175c system tests: health-on-failure: fix broken logic ee5bd1e0c Man pages: Add mention of behavior due to XDG_CONFIG_HOME c88dfbb98 Add and use libpod/Container.Terminal() helper cbde35e32 Avoid unnecessary timeout of 250msec when waiting on container shutdown d15b4af92 healthcheck: fix --on-failure=stop 81c645f2f libpod: Add support for 'podman pod' on FreeBSD 546e9445e libpod: Factor out cgroup validation from (*Runtime).NewPod 26df7d97c libpod: Move runtime_pod_linux.go to runtime_pod_common.go 70e0cb509 specgen/generate: Avoid a nil dereference in MakePod f92360283 libpod: Factor out cgroups handling from (*Pod).refresh b9d479b72 health checks: make on-failure action retry aware ead78d8ba libpod: Remove 100msec delay during shutdown 640eac465 Clean up when stopping pods d31a06ce8 Create full path to a directory when DirectoryOrCreate is used with play kube 9ce61988d Return error in podman system service if URI scheme is not unix/tcp 8041df3b6 Update vendor of containers/buildah v1.28.0 d13509f27 Man pages: refactor common options: --time c16078f2d Release notes for all content before cherry-picks 3451aac35 Man pages: refactor common options: --pod aaa9f4ea9 Prevent nil pointer deref in GetImage f250560a8 Add pods created by kube play to a default network 26468c227 Man pages: refactor common options: --features 2f6c911d6 build(deps): bump github.com/opencontainers/image-spec 62bc8e3a1 Cirrus: Fix tag & branch go checks failing eaa389262 Man pages: refactor common options: --variant 9bafd9c46 Man pages: refactor common options: --compression-format eb7f54ef6 cleanup: always delete netns mount a2581abbf Adds brew info podman to issue template. 73c8416c3 Update for https://github.com/klauspost/pgzip/pull/50 02b0f9fc3 container inspect: include image digest fe3c91d58 Update vendor containers/(common,image) f304a1757 Fix typo about e2e tests name 66747351f [CI:DOCS] Add quay-description update reminder 0660f5b7a Cirrus: Combine build and code consistency tasks 6c8a11b74 Cirrus: Combine pre-test checks into build task 0e7d166ee Cirrus: Minor YAML comment/whitespace fix e7328cb97 Man pages: refactor common options: --network fe2b4df38 podman kube play allow --network host e4c0c8994 Man pages: Refactor common options: --sign-passphrase-file 309f4fb54 Man pages: refactor common options: --log-opt 6f821f03d `podman pod logs -l` no longer panics f00ceaabd vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423 3b5171d0e fix "podman system prune networks" flake ebff193f8 Add test for podman run with checkpoint image 9c3d8bb49 cmd/podman: add support for checkpoint images b17d8ff46 restore: make IsCheckpointImage reusable e2fe9eaba Revert "remote: fix manifest add --annotation" 32f54a81e remote: fix manifest add --annotation 496d4c753 System tests: stop deep-checking log-level ba70dd5ec build(deps): bump github.com/container-orchestrated-devices/container-device-interface 66517d86a fix: kube play liveness probe http path f5fc0960e Default missing hostPort to containerPort is defined in kube.yaml 359e39744 libpod: Add volume support for FreeBSD abe8dad34 libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount 9de2a5ff7 libpod: Move volume_internal_linux.go to volume_internal_common.go 065474755 libpod: Move runtime_volume_linux.go to runtime_volume_common.go 95cb14aff fix: liveness check with http probe 3e8093152 System tests: light cleanup 0fb95f95d CI: only make install.tools when needed 2e4e1bb97 podman machine ssh handling 53d604182 Cirrus: Build pkginstaller in CI c1ae7f193 Add SELinux information about boolean for using random devices f32b02c7b Bump to v4.3.0-dev f818eb4a5 Bump to v4.3.0-RC1 527fc409e Cirrus: Add golang code consistency check script f6724116a Man pages: refactor common options: --env-file 7bc36602f auto-update: validate container image fa18d35e8 Man pages: refactor common options: --env 911ceb823 Man pages: Refactor common options: --sig-proxy fde4d21be man page xref: verify page title 8c627dfb5 Contrib: Add containerfile to create podman-remote binary image 9261a5469 Remove redundant log message 52656887e compat API: network inspect do not show isolate option 337f1f586 [CI:DOCS] man pages: fix incorrect title f5e83f684 Fixup Buildah merge 54653ceeb Update vendor or containers/buildah 3a5b5d04b Fix machine starting state 69ac1e36c Cirrus: Catch use of deprecated io/ioutil package 8ff54cbe8 Fix libsubid detection 326d386ee [CI:BUILD] Copr: also define _user_tmpfilesdir for f35 2478e32ca fix restore API endpoint 6ee582315 Events for containers in pods now include the pod's ID dc05d1212 Add --pretty to podman secret inspect fc6dcd12b Add support for 'image' volume driver 5a2405ae1 Don't mount /dev/tty* inside privileged containers running systemd d5f044ee7 System tests: reenable some skipped aarch64 tests 33c31112f cli: Add signature-policy flag to podman save ba6f84666 Fix a few missed io/ioutil -> os updates fb3d55006 Improve generate systemd format 9bb51e8e9 Add labels to secrets 7cfe0328f Add support to sig-proxy for podman-remote 377773ab5 Fix podman-remote run --attach stdin to show container ID d968f3fe0 Replace deprecated ioutil bb160be12 libpod: Implement 'podman cp' for FreeBSD 88f82ceab libpod: Move jointMountAndExec to container_copy_linux.go 75d6e7bae libpod: Move part of (*Container).stat to container_stat_linux.go 0b02d4cee libpod: Move container_copy_linux.go to container_copy_common.go 24d129071 libpod: Move container_stat_linux.go to container_stat_common.go 6790deb1b man pages: document some --format options 23195646d pkginstaller: use path_helper to add podman and helpers to path dc8fdb46c label.Relabel third option is shared not recurse 049b10884 podman container clone env patch 903f551ae build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0 4a053a821 notifyproxy: don't set a read deadline 1071098ee kube play: sdnotify proxy: use a wait group 21841dc38 Default to --dns-option to match Docker and Buildah d63e49a26 remote: checkpoint --export prints a rawInput or an error on remote cfbc4aaeb Cleanup: fix problems reported by shell lint e2573b734 Fix broken titles on readthedocs 62d1c487d Man pages: Refactor common options: --dns 7d1f688ff [CI:DOCS] man pages: document some --format options 884fd4575 Revert "generate systemd: drop ExecStop" 3508bd22f Add support for podman context as alias to podman system connection 9ba034293 Man pages: refactor common options: 2 stats opts c20abf12c generate systemd: drop ExecStop 45d09e65b libpod: Make getContainerInspectData work on FreeBSD 2e4db139a libpod: Factor out platform-specfic code from generateInspectContainerHostConfig 60ef4ad1c stats: cap memory limit to the available memory cf2118eab stats: map MaxUsage to the correct value 3f8591c2f Man pages: refactor common options: --shm-size f76390d5e Man pages: refactor common options: --user e19e0de5f Introduce graph-based pod container removal 51a8635c7 Cirrus: Fix win_installer task clone failure cb6ad7631 Cirrus: Only run unit-testing on Fedora. 815655b9d Cirrus: Move gitlab test to cirrus-cron "main" 88879d588 System tests: cleanup in --format test d4a62ff93 System tests: fix three races 14e5d1c15 libpod: fix lookup for subpath in volumes 92dc61d5e libpod: rename function 42937cd9a Ensure that a broken OCI spec does not break inspect b6c75a3cc Man pages: refactor common options: --preserve-fds, -it dd53ee599 fix ci: update systemd generate unit test 4df460836 Man pages: refactor common options: --ip6 47fff4b00 improve slirp4netns allow_host_loopback docs 0aedddd3b [systemd] Ensure that podCreateArgs appear last in ExecStartPre= b47ce9a6e libpod: Add support for 'podman stats' on FreeBSD b3e978e43 libpod: Split out the common code from GetContainerStats 47bd9e811 libpod: Move stats.go to stats_linux.go for consistency 1e6da1115 pkg/rctl: Add a simple FreeBSD RCTL library 75740be39 all: stop using deprecated GenerateNonCryptoID 76eb06330 Man pages: refactor common options: --tls-verify fe04c86a2 generate systemd: fix pod dependencies d4a000312 Man pages: Refactor common options: --publish 9d41b95d7 rework --format system test dacd59424 Man pages: refactor common options: --publish-all 885bc4742 Enable github labeler, use for api-change 74e0511c9 Man pages: refactor common options: --os (pull) f30d4852e Man pages: refactor common options: --ip 0ea5080c9 generate systemd: warn on --restart without --new c8c2aab50 health checks: restart timers 908458d06 enable podman pod inspect --format test 7f8e99ded podman version: use report.Formatter over Template 0c21dcf70 podman machine info: use report.Formatter over Template e5389e98f podman info: use report.Formatter over Template 1acebdda3 tests for 15673 43f7bdf82 podman inspect return exit code > 0 on print error 00240a0e2 podman inspect: use report.Formatter over Template 377599f1f podman secret inspect: use report.Formatter over Template f5e13ded9 podman secret ls: use report.Formatter over Template 1463898b0 podman network ls: use report.Formatter over Template 90634d5ee podman volume ls: use report.Formatter over Template 20eccfc9d podman machine inspect: use report.Formatter over Template a687949db podman machine ls: use report.Formatter over Template 65e78d92c podman auto-update: use report.Formatter over Template 70e6b19d4 events: Fix spelling of newNullEventer 9457549ff build(deps): bump github.com/vbauerster/mpb/v7 from 7.5.2 to 7.5.3 09ba2e0b9 Man pages: refactor common options: --rootfs 07a8eb829 Ensure that the DF endpoint updated volume refcount e24c2f009 system tests: periodic cleanup and fixes a63a40c3e podman events --format: fix duplicated newline 2ae4ce799 fix race where podman events exits to early b3212a680 set default EventsLogFilePath on first run 12a1483e7 Improve --tmpdir and --events-backend docs 72e715a11 Use new secret store API cd32b929e libpod: runtime newEventer() cleanup 76980a222 event backend journald: fix problem with empty journal 138b09c7e event backend none: return an error when reading events c5bdb6afe fix hang with podman events file logger 56c880a7e libpod: Move ocicniPortsToNetTypesPorts and compareOCICNIPorts to networking_common.go 221c4d5f0 libpod: Move NetworkDisconnect and NetworkConnect to networking_common.go f939f3fdf libpod: Move resultToBasicNetworkConfig to networking_common.go c9de84080 libpod: Add support for getContainerNetworkInfo on FreeBSD 51c70e588 libpod: Move getContainerNetworkInfo to networking_common.go d014dca81 libpod: Move isBridgeNetMode and reloadContainerNetwork to networking_common.go 1dd0eb467 libpod: Move teardownNetwork and teardownCNI to networking_common.go 2bf050f1d libpod: Move setUpNetwork and getCNIPodName to networking_common.go 3d7f9f67a libpod: Move convertPortMappings and getNetworkOptions to networking_common.go d1414adbb libpod: Add FreeBSD implementation of container networking c5f64d9f5 libpod: Re-work the container's network state to help code sharing 36cfd05a7 libpod: Move platform-specific bind mounts to a per-platform method 369d86040 libpod: Avoid a nil dereference when generating resolv.conf on FreeBSD a1fa9faa4 Buildah treadmill script: various fixes 43da39d31 Man pages: refactor common options: --volumes-from 050ae6181 [CI:DOCS] --volume: consistent wording d935e9799 update c/storage to latest 6091ff42d Include more environment variables in conmon env. 118546c6a refactor: use `os.ReadDir` for lightweight directory reading 2c63b8439 Fix stutters b8108d06b Fix CPU usage limitation in play kube for non integer values 8466c4a19 Cirrus: Don't run win_installer in multiarch cron 6210c6723 TEMPORARY: instrumenting for 15488 3a9a7dcdc Man pages: refactor common options: --volume a82672047 build(deps): bump github.com/docker/docker 6bf8670b6 stop: fix error handling aad29e759 health check: add on-failure actions 8e1aa7af3 Fixes for vendoring Buildah eb28a1c08 update buildah and c/common to latest c7411af9e Ignore cpu realtime options on cgroups V2 systems 27be5eaaf Fix swagger documentation 9a286f712 generate, kube: plug HostUsers 1994f3823 Add --config for Docker compatibility ad63aa20d kube: plug HostUsers in the pod spec 626ee118c e2e: fix run_staticip_test in proxy environment d10e77e1b fix podman pod inspect to support multiple pods 911e4a138 specgen/generate: Factor out setting resource limits from CompleteSpec db33f06a9 fixes data race in system.Events and nil error logging f75c3181b podman: skip /sys/fs/cgroup/systemd if not present 3f0b5cd40 Man pages: refactor common options: --userns (pod) 8d40bf3f1 proper --debug/-D flag support 4fbc4b8f7 Man pages: refactor common options: --privileged f85fa9806 libpod: Filter out ENOTCONN errors when trying to close unix domain sockets 6668ac93b libpod: Factor out capabilites code from prepareProcessExec f6e3cfa53 system tests: fix systemd tests in proxy environment 744878a71 Add win-installer build/verify workflows to CI ecb9f99b8 Add new windows installer and build d759576ab emit container labels also for container exited and exec died events 9585147e1 fix Pod removal after OS hard shutdown e0d5b4e3f Change pipe wait to 20 seconds 63c779a85 Fix manpage headers 4675103c2 Man pages: refactor common options: --sysctl eb39d56df Bump github.com/docker/go-units from 0.4.0 to 0.5.0 f4c39df25 Add win-sshproxy.exe to windows client zips 40cd1c0ff Man pages: refactor common options: --device 4462305fe Update the displayed warning in documentation regarding the system reset 092690297 build(deps): bump github.com/container-orchestrated-devices/container-device-interface 77ab6125f remove SkipIfNotFedora() from events test d22aeeec2 fix podman events with custom format a9a411f8a Add generate systemd -e/--env option 274d34a25 kube play: support auto updates and rollbacks 04f0ac2aa system tests: fix some tests in proxy environment 6a3c28968 Drop stale config value resulting in asymmetric config c2c910736 CI: Cirrus setup: retry failed curls fb38838fe Man pages: refactor common options: --memory* 0df291d3b Update system reset warning message to warn against deletion of all volumes bdfc4df1f pkg/autoupdate: allow updating multiple tasks per unit cbaa78cd8 Fix list of default capabilities a3aecf0f2 libpod: Factor out setting volume atime to container_internal_linux.go 7a1abd03c libpod: Move miscellaneous file handlling to container_internal_common.go d162285f3 libpod: Don't mount /dev/shm in containers on FreeBSD 212b11c34 libpod: Factor out handling of slirp4netns and net=none eab4291d9 libpod: Move functions related to /etc bind mounts to container_internal_common.go b3989be76 libpod: Move getRootNetNsDepCtr to container_internal_common.go a148c1622 libpod: Use (*Container).addNetworkNamespace to restore checkpoint network 7518a9136 libpod: Move functions related to checkpoints to container_internal_common.go be5d1261b libpod: Move mountNotifySocket to container_internal_common.go 71e2074e8 libpod: Move getUserOverrides, lookupHostUser to container_internal_common.go 232eea5a0 libpod: Move isWorkDirSymlink, resolveWorkDir to container_internal_common.go a5ee3cb79 pkg/util: Add no-op implementation of AddPrivilegedDevices on FreeBSD 0889215d8 libpod: Use platform-specific mount type for volume mounts c1a86a8c4 libpod: Factor out platform-specific sections from generateSpec e101f4350 libpod: Move getOverlayUpperAndWorkDir and generateSpec to container_internal_common.go 6e4b5b007 libpod: Add FreeBSD implementation of container internals 8ade76e79 libpod: Move networkDisable to container_linux.go 71978b0a0 Fix #15243 Set AutomountServiceAccountToken to false b9df3a6a9 Man pages: refactor common options: --label d82a41687 Add container GID to additional groups 3e1dde10b [CI:BUILD] Copr: Define _user_tmpfilesdir for rhel 875fd4858 Fix swagger documentation 070dfa3b3 Man pages: refactor common options: --digestfile 3e744e52b System tests for podman-update c05b6e5d3 Update test per comment in #15555 3d09d47a2 Man pages: refactor common options: --device-X-Y 050f3291b implement podman update c63830166 Man pages: refactor common options: --name 4a1acccf9 Fix bind-mount-option annotation in gen/play kube 64eb07941 CI: disable flaking test on ubuntu b667d7340 libpod: Ensure that generated container names are random 5faf4eff1 Cirrus: pick UIDs/GIDs starting at 1500, not 1000 b25d62a4d [CI:BUILD] Packit: Disable until proved in other repos 84352a81c Set enableServiceLinks to false in generated yaml fed4ce0ea Inhibit SIGTERM during Conmon startup 70a599b57 Man pages: refactor common options: --signal da57065ab specgen: Use platform-specific mount type for volume mounts 0300271bf libpod/define: Make TypeBind a platform-specific constant 1ed9a4740 Man pages: refactor common options: --restart 98169c20d Add emptyDir volume support to kube play 8637548a3 docs: move userns options to separate file e015c9e3f podman: add uid and gid options to keep-id cd6260604 infra: remove dead code 62d87aa9b Man pages: refactor common options: --subXidname 08a2851ba Allow to override default username via command line 4781bc7fe specgen/generate: Add support for FreeBSD 68f4dcf00 specgen/generate: Move specConfigNamespaces to namespace_linux.go and add stubs 39880670c specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs. a240146a2 e2e tests: try to deflake 5000 08af95f63 updated apiv2 tests to reflect hash compat fix c1480b39a Improved Windows compatibility for machine command 4e18c8100 Man pages: refactor common options: --http-proxy 0166feef2 specgen/generate: Move security.go to security_linux.go and add stubs a7d791202 libpod: Make sure writeConmonPipeData is called on FreeBSD d19438fa6 Man pages: refactor common options: --dns-* dcb4d4357 [makefile] disable security labeling instead of using --privileged 78aec2130 Fix #15499 already connected network b4f5a246a remove github.com/docker/libnetwork dependency 0ee9a3129 podman rmi: emit untag events 0b3184a5a pkg/domain: Add terminal support for FreeBSD 11de12097 Fix example sections to follow the same format e4f816fdb [CI:DOCS] Cirrus: Update meta-task for EC2 image e448122fe service: make move to sub-cgroup non fatal 167b026e7 [CI:BUILD] Packit: Re-introduce packit with fix-spec-file action 61d842a18 Fix template name inconsistency 39d809d3c Bump github.com/vbauerster/mpb/v7 from 7.4.2 to 7.5.2 e00272cd9 remote: fix implementation of build with --userns=auto for API 15aeccb83 libpod: UpdateContainerStatus: do not wait for container 61fc1870a cmd/podman: Enable --syslog on FreeBSD cfdca8293 Mark some of the option fields as ignored in pkg/bindings c7fda06f6 Compat API image remove events now have 'delete' status 9553f3baf Run codespell b27bfbc71 [CI:DOCS] Automatically set podman version in pkginstaller e634470fa APIv2 test cleanup, part 2 of 2 42fdc72aa Man pages: refactor common options: --systemd a5a5c6b3f Temporarily Revert "Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide" 10b460512 Remove duplicate annotations in generated service yaml 61fe95bb4 Preserve all unknown PolicyRequirement fields on (podman image trust set) ad0c785f8 Reorganize the types in policy.go a bit a7e88c8da Add support for showing keyPaths in (podman image trust show) 752eceaec Support (image trust show) for sigstoreSigned entries b36a1d1b7 BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements bba306788 Reorganize descriptionsOfPolicyRequirements a bit 2f6c145e8 Use the full descriptionsOfPolicyRequirements for the default scope b15afce55 Rename haveMatchRegistry to registriesDConfigurationForScope 1a97c4d9f Rename tempTrustShowOutput to entry 51064acc4 Split descriptionsOfPolicyRequirements out of getPolicyShowOutput d4c521728 Recognize the new lookaside names for simple signing sigstore 4df1e2524 Add a unit test for trust.PolicyDescription 4b2bd1036 Make the output of (podman image trust show) deterministic 35fa8c16a Make most of pkg/trust package-private 7723a1ea6 Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription ff3f574fc Add support for sigstoreSigned in (podman image trust set) 9828bc445 Create new policy entries together with validating input e2d1bdd1d Improve validation of data in ImageEngine.SetTrust cbdbb025a Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries 0ff0fde49 Man pages: refactor common options: log-related options 4f6807530 Add a variable for scope 4c5366ee0 Make trust.CreateTempFile private 5be00f227 Reorganize pkg/trust 1d2def8d0 Remove an unused trust.ShowOutput type df1d8d0e9 Remove commented out code 010d495a3 APIv2 test cleanup a933269ba System test cleanup 35b4f26c7 test: use private instead of slave for the mount 2fed2a282 Man pages: refactor common options: --pid ea67d84f5 test: fix comment 19a617eaa Allow colons in windows file paths 1788b26c4 Fixes isRootfull check using qemu machine on Windows 88e4e4c82 vendor containers/psgo@v1.7.3 33ab7e846 Man pages: refactor common options: --ipc ef6285a6f Man pages: refactor common options: --gidmap c64a6ba07 Man pages: Refactor common options: --workdir b0700aa48 libpod: Enable 'podman info' for FreeBSD ff20c74e9 libpod: Move getCPUUtilization to info_linux.go 694cbaca3 libpod: Read kernel version and uptime using buildah/pkg/util 877e67399 libpod: Split out platform-specific code from hostInfo e1c206d98 e2e: Add run --memory-swap test c3dc92a50 Fix rpm packaging error b4584ea85 run,create: add support for --env-merge for preprocessing vars b47c54ab6 Install podman-docker.conf on user-tmpfiles.d too 0e6a421ca Use tmpfiles.d specifiers instead of fixed path 9dca68bdd Man pages: refactor common options: --ignore d45a5d4aa Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide 8b1e88bf8 Fix documentation of use of tcp connections 0f7393556 Add support for containers.conf volume timeouts 7d7aead51 Man pages: refactor common options: --device-cgroup-rule 65efcdf70 Allow podman to run in an environment with keys containing spaces 2c03681b2 Man pages: refactor common options: --disable-content-trust 8f797ab66 libpod: Add definition of containerPlatformState for FreeBSD 5c9bac141 Man pages: refactor common options: --cpus 5f719b533 podman kube play/down --read from URL 5b06b2e77 Document restrictions on transport in FROM 70e103c04 inspect, image: alias .Config.HealthCheck to .HealthCheck for compatibility f87f6d2fc Improved Windows compatibility 64339d47c Warning messages are printed and ignored if we use an unsupported option 716ac1c86 Refactor: About the RawInput process 74388fe75 Man pages: refactor common options: --pod-id-file 0f768cef3 [CI:DOCS] Update Troubleshooting.md c6488fe4a Man pages: fix sloppiness 53369aaa1 pass environment variables to container clone 46f31361f Man pages: refactor common options: --cidfile bd90818b0 Man pages: refactor common options: --creds fbe2bd87b [CI:DOCS] elaborate on image lookups of foreign platforms eee0ec97e Add quiet/q flag to podman secret ls d5f83135b version bump to 4.3.0-dev be1455ead Update "CONTRIBUTING" file with Debian/Ubuntu dependencies" f8e73eadd [CI:DOCS] Update how to enable resource limit delegation a0560eefa Man pages: refactor common options: cert-dir 8ffeb626c events: Add freebsd support for libpod/event 8aa29fd54 cmd/podman: Enable ABI and Tunnel mode for freebsd 1f76ad40a fix CI: remove hardcodeded alpine version 3bf52aa33 Add ProgressWriter to PullOptions ec9508ea1 Pass io.Writer when pushing images/manifests from command line e48681e60 Use request Context() in API handlers b9fb60c68 Simplify ImagesPull for when Quiet flag is on 09ef6fc66 podman generate kube - add actual tests 976ce76eb podman save: update --compress validation 054d64710 libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD cb4158889 libpod: Move openUnixSocket to oci_conmon_attach_linux.go d43fac20f libpod: Move moveConmonToCgroupAndSignal and GetLimits to oci_conmon_linux.go 93bad9048 libpod: Move socket label handling from oci_conmon_common.go to oci_conmon_linux.go 6791cdbdf libpod: Move rootless handling from oci_conmon_common.go to oci_conmon_linux.go 68b2450d3 libpod: Move oci_conmon_exec_linux.go to oci_conmon_exec_common.go 8d229c6cd libpod: Move oci_conmon_attach_linux.go to oci_conmon_attach_common.go bebf55c0f libpod: Move oci_conmon_linux.go to oci_conmon_common.go 20ad12274 runtime: use FindCommon from c/common 86f665a1d vendor: update containers/common 0dd2fcf71 Add podman manifest create -a. Alias for --amend:Docker compatibility aa197a65f sort hc.Binds returned from compat api 546bb3548 Add podman stats --no-trunc option f6e7b0b59 Add podman secret inspect -f alias for --format: Docker compatibility d50ff4f51 Add podman secret create -d as alias for --driver for Docker compatibility 6411f57e7 api: return imageID instead of imageName, for "Image" when Podman API is queried 2a6daa1e3 Cirrus: add podman_machine_aarch64 1572420c3 libpod: Move uses of unix.O_PATH to container_internal_linux.go 5d7778411 libpod: Move rootless network setup details to container_internal_linux.go 1b88927c2 libpod: Add stubs for non-linux builds 7e7a79b07 podman manifest create: accept --amend and --insecure flags 5f09d9b60 Fix podman kube generate --help to show correct help message 06b3a4c1c system tests: fix broken runc test f0e864075 Man pages: refactor common options: authfile a78b67a47 Man pages: refactor common options: --annotation a68e6ddbb utils: Add missing symbols for FreeBSD a6af67ca9 Cirrus: Update podman-machine comment 22f3dd4c2 Man pages: refactor common options: arch f14bf91c4 podman images and friends can take one image as argument 7e490e195 [CI:DOCS] Add .DS_Store to gitignore ab72a371b Don't warn on '/' not being shared while in a container 2d30b4dee Add compatibility support for --debug -D flag from docker bfae6bca9 build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 b9c094a5d Add Docker compatibility for --dns-option to --dns-opt 1393038c8 pkg/domain: Add stubs for non-linux builds 65641ba8d pkg/specgen: Add stubs for non-linux builds 056917c22 Reword --exit-policy option d7f6d355b podman-kube@.service.in: Remove Restart=never option with typo bd0a8c146 added docs for installing certficate authority 5ee3522f5 pkg: Build pkg/machine on FreeBSD b806e9f36 pkg: Build pkg/util on FreeBSD 6df0ceb9a Add default value for $RM bc56ee158 Update cmd/podman/containers/restart.go f26a5246e Fix updated link to install instructions 0dbbb1cb3 Add restart --cidfile, --filter d856fb43e Add "podman kube generate" command e2a3f9592 docs: specify git protocol is not supported for github hosted repo 2935c38fd Update release notes for v4.2.0 a4efd401c remote manifest push: show copy progress 79e21b5b1 kube play: sd-notify integration 3fc126e15 libpod: allow the notify socket to be passed programatically 67a2e7351 add `pkg/systemd/notifyproxy` 245be9b39 Document behavior of --timestamp when only FROM is used e3f029cb8 build(deps): bump github.com/container-orchestrated-devices/container-device-interface 658960c97 build(deps) bump CDI dependency from 0.4.0 to 0.5.0 2bcee9f62 Man pages: refactor common options 25f6fc9c6 I believe that these tests will now run with crun. a561b7dac check memory test based on range 280f5d8cb podman ssh work, using new c/common interface d2d7898b8 Cirrus: Improve CI VM image updates for EC2 d7f134d68 Refactor common man page options, phase 2 3738221c5 test: update apply-podman-deltas for new tests 59cb410fe build: implement --cache-to,--cache-from and --cache-ttl 7bd886480 Bump to Buildah v1.27.0 1045647a4 Add interface for apple hypervisor 62e889e2b fix LogConfig type for libpod API 2e3a192bb cmd: refuse --userns if a mapping is specified 696ea7905 specgen: use sandbox id instead of name for annotation 771a35e4b pkginstaller: use correct GOARCH value in case of arm build b1d1248a1 pkg/bindings: Support writing image push progress to specified io.Writer f4c53a41c docs: update the podman logo 7ebaabb93 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8 d4c6e056d Fixes #15154 Change order when config and connections are written 83bd7a5c2 e2e: Add rootless mount cleanup test cc8e4d5fe remove image podman no prune 842c6c7c6 podman generate spec 4cea8adb9 Cirrus: Run Cross builds in [CI:DOCS] mode 3102194f0 podman rmi: improve error message for build containers 5ea4ebb16 markdown-preprocess: force extra newline on comments 9964366f6 start filter flag changes e67e60226 podman info: hide `--debug` 623b0c57f pkginstaller: use correct GOARCH while building podman binaries bcfbee986 ISSUE TEMPLATE: remove `--debug` from `podman info` 81a1ea18c pkg/autoupdate: "image" policy: add deprecation comment 43cca5d97 pkg/autoupdate: decompose the update logic 0df51bb6b pkg/autoupdate: move status into `task` af3ce7084 pkg/autoupdate: document fields of `updater` 3fdd3b1ae pkg/autoupdate: remove image map from updater 82d18a86f pkg/autoupdate: use policy consts were possible 1cc933c6b pkg/autoupdate: introduce status constants 42c4c17c0 pkg/autoupdate: move authfile into `tasks` 3f1928d76 pkg/autoupdate: move more logic under `task` cfa089c36 pkg/autoupdate: s/updateImage/pullImage/ 13a8ebd09 pkg/autoupdate: repull image if other containers failed 2c999f1ec pkg/autoupdate: update unit-by-unit f8b6a81ae test/system/255-auto-update.bats: add an SELinux comment 87c0c760e pkg/autoupdate: introduce the notion of a `task` 033cc059f pkg/autoupdate: remove redundant branch 328c8ba7b pkg/autoupdate: move policy map into updater d47609773 pkg/autoupdate: introduce `updater` for shared state 79b10a7c6 readthedocs(sphinx): run the markdown preprocessor 65fb90165 hack/markdown-preprocess: allow to be executed from any dir 031b7dec7 fix hack/markdown-preprocess to support older python versions 7df8d8050 add omitempty to Secret in k8s VolumeSource 328eb2b4c Cirrus: Remove disused env. var. 1e4a141d8 Cirrus: Support EC2 instances in hack/get_ci_vm.sh 44212b90b pkginstaller: makefile improvements to avoid redownloading e6670cd29 pkginstaller: add makefile target to notarize the built pkg c5029d2ee pkginstaller: sign qemu-system-* binary for the pkg 56039cffd Refactor common options in man pages 50981cb84 skip pod resource limits test on aarch64 1dbd61653 Cirrus: Fix e2e tests for "mount_rootless_test" 3a7a275c3 Cirrus: use dnf instead of rpm to install packages 1249cbb75 add "podman kube down" command c5150a571 Add support, and default to rootless w/WSL prompt bce16a58d Disable F36 service that is incompat with WSL kern 69d7407af switch from "kube/play" endpoint to "play/kube" endpoint. 2685c8dc4 Output messages display rawInput 4dfef202c podman generate systemd --new: allow -h hostname 5ab98f2c0 test: verify manifest inspect must contain OCI annotations 3a05ddfb7 fix e2e sign tests 6c69a2ea1 podman-volume-import: Reword "precendence" c21306f06 man podman-volume-import: Clarify that merge happens d462da676 Add support for creating sigstore signatures, and providing passphrases 7075e2e1d Hide podman manifest push --sign-by on remote 68cf11611 Use signByFlagName instead of copy&pasting the string 02f570e4b Remove libpod/common 63d77da5b Update c/common to an unreleased version 5a5624f81 Update the registry server we test against from 2.6 to 2.8 7599fde73 Use existing REGISTRY_IMAGE variables in more places 24a599fe1 Add flag "--compression-format" to "podman manifest push" both in local/remote mode. 53ec47968 Add rm --filter option 68463278e Use httpasswd from the surrouding OS instead of the registry image 49bcb7eaa Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 7a909a3e2 Use 8k buffer to help clients w/ broken parsing a53a0fca9 Cirrus: Minor YAML cleanup a24cc463a Remove bats installation script and make target 6764fe03d CI: new check for leftover skips/fixmes 17e3680fb Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools 379bf1080 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 de04d9d75 docs: resolve typo in create,run manpages de13dea86 With --rm option remove container if podman run fails da98c8877 Cirrus: enable Fedora 36 aarch64 tasks on EC2 389a4a6cc syncContainer: transition from `stopping` to `exited` 7fab449e3 [CI:DOCS] socket_activation.md: Add start/stop sections 8628c01f5 Fix: manifest push --rm removes a correct manifest list e4992fb81 Fix: Restore a container which name is equal to a image name 75419c5d8 When removing objects specifying --force,podman should exit with 0 56578c413 Cirrus: Use the latest imgts container c35ae7640 Add support for building macOS pkg installer 8e56a5605 machine: Fix check which is always true 1b099eec8 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify 52a4642ed Set TLSVerify=true by default for API endpoints 94e0a364a Semiperiodoc cleanup of obsolete FIXMEs 27679d80b pod create --share none should not create infra 4d18a98ec benchmarks: fix create test 4724a0000 prune filter handling 6a9338ad6 podman generate systemd: handle --sdnotify correctly ad8940cec fix container create/run throttle devices 290116bf8 integration test: fix network backend option with remote 5a80770e8 API: libpod/create use correct default umask 35035d281 container wait: improve error message cbdda4e56 docs: remove CNI word where it is not applicable 0a160fed7 Bump VMs, to Ubuntu 2204 with cgroups v1 c00ea686f resource limits for pods bc6a48eeb [CI:DOCS] Cirrus: Add prominent gitlab warning 88b57dd9f fix broken machine test 19f4a463e pkg/machine/e2e: do not import from cmd/podman 604920dd1 fix some pkg/machine/e2e test to read stderr ee35ce86d enable linter for pkg/machine/e2e dd2b79406 libpod: create /etc/passwd if missing b79ac0aca remote push: show copy progress afbfbe18a compose test: remove cni config copy 56093a3b4 compat api: always turn on network isolation for networks 80ad0cfd0 compat api: allow default bridge name for networks 3a016c6e4 e2e: show command and output when a timeout happens 138d185cc Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 ab4c58bd3 Compat API: unify pull/push and add missing progress info c1f04a024 podman-remote pull: fix duplicate progress outputs af118f7c6 libpod: do not lock all containers on pod rm 139d65be8 Fix machine test 438fef1ca kube secret handling for podman play kube 8d190fc48 vendor: remove unused deps 013300a7c Makefile: remove building pages for man5 19495b9fc makefile: remove processing of pkg/docs f64985135 rpkg: remove usage of pkg/hooks ffe5da20a pkg,libpod: remove pkg/hooks and use hooks from c/common da33f1005 Update init ctr default for play kube 4e72aa586 fix goroutine leaks in events and logs backend 9b152ef20 Add pause/unpause --latest, --cidfile, --filter a65265942 Fix potential leak on mid-stream read error 10d6586cb Makefile: use order-only prereq for podman-remote 0a2ddc9bd [CI:DOCS] Fix typo in manifest manpage 26ae055a2 Remove return error from "containers.pause" eef39b69e "pod pause/unpause/stop" append "report.Errs" to "reports" aa1711e3d Cirrus: comment out f35 for podman4 1f0116817 system tests: new system-service bats file fdba0d790 Vendor in latests containers/storage and opencontainers/runtime-tools 82b1d85eb Print rootfs download as a specific version on Win 576321729 document isolate option for network create 1aafb01a9 buildah vendor treadmill f67ab1eb2 Vendor in containers/(storage,image, common, buildah) 5f848d89e Run codespell 18c0c19aa Add --host and -H as equivalent options to --url c9722c0b1 [CI:DOCS] socket_activation.md: fix typo and layout 5f04f9961 Machine init: create .ssh dir if not exist 56cfdffe4 [CI:DOCS] Tutorials.rst: add socket activation b513dc4c1 Clean up cached machine images d95e79ebe GHA: Fix dumb error check d385914cd Cirrus: Trigger podman-machine task by label a2f6cc74e Podman stop --filter flag 90607a6d0 Podman pull --all-tags shorthand option 3b5034e91 fix tests for "podman kube play" 8e2add770 [CI:DOCS] Update docs/tutorials/socket_activation.md 2270bc5f9 [CI:DOCS] Add socket activation tutorial ad7c54e13 man page checker: enforce stricter options format 66cb856f9 Switch to `github.com/blang/semver/v4` 0f53abd09 Fixes #14698 Use prepared image for WSL2 machine init cc2cfe060 Add podman events -f to be alias for --filter e08a77ce6 Add "podman kube play" cmd 1392922d4 [CI:DOCS] man pages: replace -c with --cpu-shares e3419c032 abi: create new cgroup when running in a container 7b4afbf62 podman: always call into SetupRootless 16b8d77f9 utils: call MaybeMoveToSubCgroup once 4b547a72a podman: move MaybeMoveToSubCgroup to utils/ 445089421 Fix last machine test bb8ff86bf Use SafeChown rather then chown for volumes on NFS c9a82d72a Docker uses "-c" to mean "--cpu-shares" in create and run e83ff8e5e [CI:DOCS] podman-create.md: replace -c with --cpu-shares da8c6a8ea CI: sanity check for desired runtime b8a7e275d [CI:DOCS] rootless_tutorial: Remove incorrect advice regarding volumes and mount points f6ed7a8c9 [CI:DOCS] man pages: remove non-existent option builtin-volume 27e12aa07 test,manifest-run: declare TARGETPLATFORM before using it ffbc2adf7 fix wrong log message on Trace level 377057b40 [CI:DOCS] Improve language. Fix spelling and typos. 3ed323e1b logformatter: link by *task ID*, not build ID 3ce0709f3 podman machine: do not commit proxies into config file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: renamed upstream branch master to mainGuenther Meyer2022-12-011-1/+1
| | | | | Signed-off-by: Guenther Meyer <g.meyer@signum-media.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: avoid host contamination by GOCACHEChangqing Li2022-12-011-0/+2
| | | | | | | | | | | By default GOCACHE is set to $HOME/.cache. Fix: make[1]: Entering directory '/mnt/tmp-glibc/work/core2-64-wrs-linux/conmon/2.1.3+gitAUTOINC+19110c9746-r0/git/tools' | failed to initialize build cache at /home/build/.cache/go-build: mkdir /home/build: permission denied Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: do not build for riscv64Chen Qi2022-11-221-0/+2
| | | | | | | | | | | | | Currently docker-distribution has a do_compile error for riscv64. The problem could be reproduced by: MACHINE=qemuriscv64 bitbake docker-distribution So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64. When someone interested in using this recipe for riscv64 fixes the compile issue, this setting could be removed. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: support python 3.11sakib.sajal@windriver.com2022-11-222-2/+2
| | | | | | | | | | | | | | python3 has been upgraded to 3.11 in oe-core causing ceph do_configure to fail with the error: | Could NOT find Python3 (missing: Python3_LIBRARY Python3_INCLUDE_DIR | Development) (found suitable version "3.6.9", minimum required is "3") Support python 3.11 to fix the issue Upstream-Status: sent to upstream (https://github.com/ceph/ceph/pull/48947) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-colorama: sync with meta-openembeddedBruce Ashfield2022-11-021-2/+6
| | | | | | | | | | | This version of python3-colorama has shown to work with the meta-virt recipes and software stacks. Sync our version with meta-openembedded. We continue to keep this around as a "canary" package. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Make xilinx extension genericMark Hatle2022-10-262-1/+0
| | | | | | | Move the xilinx specific bbappend to a wildcard append. Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: remove package config qemu for powerpc and riscv32Kai Kang2022-10-261-1/+3
| | | | | | | | qemu is not compatible with ppc32 and riscv32, so remove libvirt's package config 'qemu' for them. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to v1.24.7Bruce Ashfield2022-10-254-768/+788
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping k3s to version v1.24.7-rc4+k3s1, which comprises the following commits: e3c9d859e8 Return ProviderID in URI format e44d22ca61 Add ServiceAccount for svclb pods 2ca51a3d59 Update to v1.24.7-k3s1 (#6270) 0751b6052e Fix dualStack test 519f13e34d [Release-1.24] Replace deprecated ioutil package (#6235) c1c7b95dc0 Fix flakey etcd test 6ed1e1423f Fix helm job failure on multi-server tests 87bfc8883b Bump traefik to 2.9.1 / chart 12.0.0 06eb948c23 Fix the typo in the test 3a829ae860 Handle custom kubelet port in agent tunnel 3f5c88e4a3 Fix occasional "TLS handshake error" in apiserver network proxy. cb0f4bd49c Use structured logging instead of logrus for event recorders 44ae7aa4db Dump info on coredns when deployment rollout fails a75bbf5f4e Add ADR for ServiceLB move to CCM 69dd30433b Disable cloud-node and cloud-node-lifecycle if CCM is disabled 76f13d3558 Move servicelb into cloudprovider LoadBalancer interface 23c302dccc Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control 307e45e739 Implement InstancesV2 instead of Instances 7198eb2f74 Bump metrics-server to v0.6.1 0be4ef9213 Add flannel-external-ip when there is a k3s node-external-ip a8e0c66d1a updating to v1.24.6-k3s1 (#6164) fb823c8a5f Update to v1.24.5 (#6143) ae7d6285b6 Fix gofmt warnings 1b806f5fee Bump golang to correct version ee859f7f5a Add validation check to confirm correct golang version for Kubernetes cf684c74a3 [Release-1.24] Bulk Backport of Testing Changes b8f05e4904 Bump containerd to v1.6.8-k3s1 35e488c9c7 Bump runc to v1.1.4 e1884e4d60 Update Flannel to v0.19.2 to fix older iptables issue 79bb7bccd9 Fix e2e tests (#6018) 4c9ad2546c Fix dualStack test and change ipv6 network (#6023) 654d2b9567 CI: update Fedora 34 -> 35 (#5996) 2b35f89664 Convert install tests to run PR build of k3s (#6003) f81138402e E2E: Add support for CentOS 7 and Rocky 8 (#6015) ab2638a247 mark v1.24.4+k3s1 as stable (#6036) 7d6982d1fa Export agent.NetworkName for Windows 3e394f8ec5 The Windows kubelet does not accept cadvisor flags c3f830e9b9 Update to v1.24.4 (#6014) 035c03cfaa Remove codespell from Drone, add to GH Actions (#6004) b14cabc107 Add nightly install github action (#5998) 75f8cfb6ea E2E: Local cluster testing (#5977) 116c977fbf Convert vagrant tests to yaml based config (#5992) 30fc909581 Update run scripts (#5979) a30971efaa Updated flannel to v0.19.1 6b7b9c5aa9 Add scripts to run e2e test using ansible (#5134) 18cb7ef650 fix checkError in terraform/testutils (#5893) 77fa7fb490 Removing checkbox indicating backports since the policy is to backport everything (#5947) b7f7379157 Update MAINTAINERS with new folks and departures (#5948) db3c569b7f Add docker e2e test aadab55145 Add ADR for inclusion of cri-dockerd 4aca21a1f1 Add cri-dockerd support as backend for --docker flag b1fa63dfb7 Revert "Remove --docker/dockershim support" cf66559940 Print stack on panic abdf0c7319 Fix comments and add check in case of IPv6 only node d90ba30353 Added NodeIP autodect in case of dualstack connection 82e5da35a9 Upgrade macos-10.15 to macos-12 (#5953) 43508341c1 Bump minio to v7.0.33 1c17f05b8e Fix secrets reencryption for 8K+ secrets (#5936) 118a68c913 Updates to CLI flag grouping + deprecated flag warnings. (#5937) 13af0b1d88 Save agent token to /var/lib/rancher/k3s/server/agent-token 4c0bc8c046 Update etcd error to match correct url (#5909) db2ba7b61d Don't enable unprivileged ports and icmp on old kernels 90016c208d ADR: Depreciating and Removing Old Flags (#5890) 24da6adfa9 Move v1.24.3+k3s1 to stable (#5889) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose2: introduce go version of docker-composeBruce Ashfield2022-10-254-0/+1169
| | | | | | | | | | Introducing a recipe to build (and create a vendor directory) for the docker-compose2 command, which is a go implementation of he formely python3 docker-compose. This co-exists (for now) with the python version. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: remove the version 4.15 recipesChristopher Clark2022-10-082-38/+0
| | | | | | | | The existing 4.16 recipes are the current preferred Xen version, so per the Xen version update policy, the 4.15 recipes can now be removed. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: Bump SRCREV of the 4.16 recipes to 4.16.2Christopher Clark2022-10-082-4/+4
| | | | | | | Update to use the latest stable 4.16 release. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: Fix INSTALL_MOD_PATHPaul Barker2022-10-082-2/+2
| | | | | | | | | If the usrmerge DISTRO_FEATURE is enabled, modules should be installed under /usr/lib instead of /lib. We can handle this by using ${root_prefix} in INSTALL_MOD_PATH. Signed-off-by: Paul Barker <paul.barker@sancloud.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* tini: fix function declaration without a prototypeJose Quaresma2022-10-042-0/+75
| | | | | | | This also fix building with clang 1.15 Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-05-21 11:34:08 +0000