summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* k3s: update to v1.31.1+k3s1Bruce Ashfield2024-10-034-673/+683
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping k3s to version v1.31.1+k3s1, which comprises the following commits: 452dbbc14c update kubernetes to v1.31.1-k3s3 (#10910) 9ae2c39004 Update Kubernetes to v1.31.1 (#10895) d926e69073 Fix hosts.toml header var 2caa785e17 Only clean up containerd hosts dirs managed by k3s 4c8ef7f477 Fix rotateca validation failures when not touching default self-signed CAs 0c8d3c0d58 Bump helm-controller for skip-verify/plain-http and updated tolerations db3cf9370e Bump containerd to v1.7.21, runc to v1.1.14 28a1fd0302 Update coredns to 1.11.3 and metrics-server to 0.7.2 944b3b2830 Bump traefik to v2.11.8 703e7697b0 Tag PR image build as latest before scanning 88d5576be6 Fix /trivy action running against target branch instead of PR branch 9c537cb705 Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795) be60661f18 Add trivy scanning trigger for PRs (#10758) e0c4e60171 Update CNI plugins version 3923e0c699 Cover edge case when on new minor release for E2E upgrade test (#10781) 8bfcfd70cc Fix deploy latest commit on E2E tests (#10725) e8de533e90 Remove secrets encryption controller (#10612) 34be6d96d1 Update kubernetes to v1.31.0-k3s3 (#10780) c7468edbe7 Bump go dependencies to match upstream 1.31 ebbb109840 Update VERSION_K8S to handle any k3s revision f5c6472b16 Bump Kine to v0.12.0 d358a89171 Fix secrets-encrypt metrics 178aadbe20 Add k3s-io/kubernetes tags 5087240e32 Downgrade Microsoft/hcsshim to v0.8.26 8cbcbcd044 go generate 20b50426ab Update to v1.31.0 876d54cf49 chore: Bump Trivy version (#10670) 518276fb77 adding MariaDB to README.md (#10717) 649678bd89 Fix k3s-killall.sh support for custom data dir 38df76708d Fix caching name for e2e vagrant box (#10695) ae0d79c7ea Update to v1.30.3-k3s1 and Go 1.22.5 (#10536) 019b0afdd8 Fix: Add $SUDO prefix to transactional-update commands in install script (#10531) 22fb7049bd Add tolerations support for DaemonSet pods daf0094cc7 Bump helm-controller to v0.16.3 to drop Helm v2 support ac247d29cf Update to newer OS images for install testing (#10681) 0ee714d62b Bump containerd to v1.7.20 (#10659) acb71ee379 Allow Amazon Linux 2 rpm installs 79ec016b6d Allow kylin V10 rpm installs 8ff7d162cc Allow fedora iot rpm installs 45c04f3502 Allow Amazon Linux 2023 rpm installs 3aceb85c22 Add a change for killall to not unmount server and agent directory 82ba778a86 bump docker/docker to v25.0.6 38e8b01b8f update stable channel to v1.30.3+k3s1 (#10647) bffdf463e1 Fix cloudprovider controller name e168438d44 Wire lasso metrics up to common gatherer e2179aa957 Update pkg/cluster/managed.go 3ec086f6f7 Update pkg/secretsencrypt/config.go e4f3cc7b54 remove deprecated use of wait functions e514940020 Fix inconsistent loading of config dropins when config file does not exist 9111b1f77e Add K3S_DATA_DIR as env var for --data-dir flag a26a5ab1d7 Don't set K3S_DATA_DIR env var 59e0761043 Use higher QPS for secrets reencryption (#10571) a70157c12e Allow Pprof and Superisor metrics in standalone mode (#10576) ecff337e00 Enhance E2E Hardened option (#10558) d4c3422a85 Fix ipv6 sysctl required by non-ipv6 LoadBalancer service 21611c5665 Cap length of generated name used for servicelb daemonset 891e72f90f Update secretsencrypt pagination c2216a62ad Use pagination when retrieving etcd snapshot list 37830fe170 Don't use server and token values from config file for etcd-snapshot commands cb6bf74bc4 Add dial duration to debug error message 118acabec2 Fix IPv6 primary node-ip handling 9841517457 Fix agents removing configured supervisor address 9d0c2e0000 Fix reentrant rlock in loadbalancer.dialContext b999a5b23d Bump kine to v0.11.11 58ab25927f For E2E upgrade test, automatically determine the channel to use (#10461) c36db53e54 Add etcd s3 config secret implementation 5508589fae chore: Bump Trivy version eb8bd15889 Ensure remotedialer kubelet connections use kubelet bind address a0b374508e Bump Local Path Provisioner version (#10394) 0b417385a4 chore: Bump golang:alpine version f6942f3de4 Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 b045465178 Add data-dir to uninstall and killall scripts d1709d60ce Fix INSTALL_K3S_PR support 047664b610 Bump k3s-root to v0.14.0 4204248bc3 Check for bad token permissions when install via PR (#10387) 8f9ad1f992 Move test-compat to GHA (#10414) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: Add PACKAGECONFIG optionsMichal Sieron2024-10-031-10/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | Neither systemd nor seccomp is hard required by crun. They can actually be disabled during configuration with --disable-systemd or --disable-seccomp. Introduce PACKAGECONFIG options for them and default them to presence of corresponding entries in DISTRO_FEATURES. Now REQUIRED_DISTRO_FEATURES and features_check can also be removed. Similarly dependency on libcap can be made optional. crun actually contains pregenerated manpages in the repository so dependency on go-md2man-native can be made optional as well. As there is a configuration option for embedding yajl I added an option for that as well. However, as PACKAGECONFIG can only specify dependencies when config is enabled I had to invert the options so the config is for external-yajl. I set default PACKAGECONFIG value to match previous state (except detecting if systemd and seccomp are in DISTRO_FEATURES). Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: update to v1.2.3Bruce Ashfield2024-10-034-53/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cni to version v0.8.0-307-g4c9ae43, which comprises the following commits: 692efbd libcni: set both GC valid attachment keys 6a68851 SPEC: use correct GC field name. 587837e libcni: remove use of Masterminds/semver 2c926b5 SPEC: add warning about preserving shared resources for GC 9d422db Fix faulty json.Marshal behavior for embeds types.NetConf c283314 libcni: implement disableGC 1125b83 Spec: add disableGC flag 529bccb GetCachedAttachments should ignore missing directories 267db70 build(deps): bump github.com/onsi/ginkgo/v2 in the golang group 6ef5715 libcni: always delete the cache on conflist for CNI DEL 02ffd01 build(deps): bump alpine in /.github/actions/retest-action 1e7858f supplement ns building files for darwin os 52babb0 Update golangci-lint to v1.57.1 f5e23f5 build(deps): bump golangci/golangci-lint-action from 4 to 6 e34763a build(deps): bump the golang group with 2 updates 3d7be1b build(deps): bump the golang group across 1 directory with 2 updates 047255e spec: remove "-dev" tag dd65e2d add version to cni interface 0036b62 cnitool CNI 1.1.0 support a67dabb use errors package in golang v20 to join multiple errors f846cb7 build(deps): bump the golang group with 2 updates 829ae61 Update golang to active supported version 56f11c6 types: add ValidAttachments to "base" NetConf struct 8eb1091 pkg/invoke: add DelegateStatus, DelegateGC methods 2e9688f Docs: remove obsolete information about building release artifacts c45adb6 Add MTU to CNI result 2d04079 tolerate invalid cni caches for deletion 00576a2 Scope property as int pointer a4d4a0d Add Scope property for routes 163db33 Add socket path and pciid to CNI interface result 94fc2b1 Table ID property as int pointer 3c4079b Add table ID property for routes Bumping cni-plugins.git to version v1.1.0-313-g01b3db8e, which comprises the following commits: 01b3db8e SBR: option to pass the table id (#1088) 06ba001d Update containernetworking/cni to v1.2.3 for GC deb8ef63 Update go-iptables bdb6814f macvlan: add bcqueuelen setting 07bd3250 build(deps): bump the golang group across 1 directory with 4 updates d924f05e build: update github.com/vishvananda/netlink to 1.3.0 6269f399 Fix unnecessary retrying when the link is down in dhcp. 675ca922 test: bump go version 30078e1c .github: fix double-triggering CI 352c8b7a Change chown to change current dir as well d5f9ad99 build(deps): bump the golang group with 2 updates 508c94ca build(deps): bump the golang group across 1 directory with 3 updates 434e9b9e Fix release tar images' owner to root 0e87bccf build(deps): bump alpine in /.github/actions/retest-action 14cad164 build(deps): bump the golang group with 2 updates 5c95925a build(deps): bump golangci/golangci-lint-action from 4 to 6 dc8b8289 build(deps): bump the golang group across 1 directory with 4 updates 9397270f dependabot: don't automatically update cni packages 3656c69d build: bump release go version 427af863 Fix release script in github action ada798a3 fix: close resolv.conf eb49a034 ip: include peer name in error message 717b4337 build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 ccc1cfaa Simplify unit test 78ebd8bf minor case change c666d140 bandwidth plugin: split unit tests in several files ab0b386b bandwidth: possibility to specify shaped subnets or to exclude some from shaping 52da39d3 bandwidth: possibility to exclude some subnets from traffic shaping 6f05dc32 build(deps): bump the golang group with 1 update c4646743 build(deps): bump the golang group with 4 updates ba5bdafe Use temporary name for netdevice when moving in/out of NS d34720b5 Support DeviceID on Auxiliary Bus 8a3014f2 build(deps): bump actions/checkout from 3 to 4 352e0512 Update golangci-lint-action package to v4 9c016b5d Rename unused variables to resolve lint warnings 394ab0d1 build(deps): bump the golang group with 5 updates 47373d26 build(deps): bump actions/setup-go from 3 to 5 2bae9b67 Update to Go v1.22 in CI and release cb244060 Fix version of golangci-lint 8b2b1d20 Add github action to build binaries for each platform at release 7e131a00 bridge: Enable disabling bridge interface 133a764c build(deps): bump alpine in /.github/actions/retest-action e6099fb8 build(deps): bump actions/setup-go from 4 to 5 Bumping flannel-cni-plugin.git to version v1.5.1-flannel3, which comprises the following commits: b691133 Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 ce2b072 Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 3bcc5a8 Bump go to 1.22 c5e4f4b Bump github.com/containernetworking/cni from 1.2.1 to 1.2.3 8a9a79d Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.20.1 67765da Bump alpine from 20240606 to 20240807 6fe8827 Bump alpine from 20240329 to 20240606 3838eea Bump Go version b60152b Bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 957ab8a Bump github.com/containernetworking/plugins from 1.5.0 to 1.5.1 9aa349b Bump github.com/containernetworking/cni from 1.1.2 to 1.2.0 3260428 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0 aab0543 Bump github.com/containernetworking/plugins from 1.4.1 to 1.5.0 5eaab45 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 9864944 Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 2e28128 Bump github.com/onsi/gomega from 1.32.0 to 1.33.0 85206d1 Bump Go and plugins version edfb6ce Bump alpine from 20231219 to 20240329 b3c6e9f Bump github.com/onsi/gomega from 1.31.1 to 1.32.0 6eec09d Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 37b5025 Bump github.com/onsi/gomega from 1.30.0 to 1.31.1 0a6e942 Bump alpine from 20230901 to 20231219 92c06f2 Bump github.com/containerd/containerd from 1.6.23 to 1.6.26 da2c8ca Create dependabot.yml 28a4dca fix doc 78381fe fix wrong doc 45a7bb3 Update to plugins v1.4.0 9bd5e58 upload release artifact on the release page f58497e set CGO_ENABLED=1 when GOARCH=amd64 8d52b1f simplify the packaging and releasing of flannel-cni 9f9ea24 Fix typo in flannel_linux_test.go 6214abd update Githb actions to stay up to date 1dfe98d Add support for riscv64 f50cfdc Set as latest the released image 6464faa Fixed release artifacts path Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to v1.2.0-rc.3Bruce Ashfield2024-10-032-4/+4
| | | | | | | | | | | | | | | | | Bumping runc to version v1.2.0-rc.3-3-gf9f57641, which comprises the following commits: 429e06a5 libct: Signal: honor RootlessCgroups 961b8031 VERSION: back to development 45471bc9 VERSION: release v1.2.0-rc.3 6c24b2e8 changelog: update to include 1.1.14 notes 63c29081 rootfs: try to scope MkdirAll to stay inside the rootfs 767bc008 Makefile: Don't read COMMIT, BUILDTAG, EXTRA_BUILDTAGS from env vars 2cd24a4d ci/gha: add all-done jobs cc2078cc Makefile: Add EXTRA_VERSION f76489f0 mv contrib/cmd tests/cmd (except memfd-bind) f4cc3d83 Revert "allow overriding VERSION value in Makefile" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.0-rc.4Bruce Ashfield2024-10-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.0-rc.4-40-g19430264c, which comprises the following commits: 9037069da update to go1.23.1, go1.22.7 18725f010 integration: regression test for issue 10589 5f37a2c20 fifosync: cross-process synchronization 421a4b568 runc-shim: handle pending execs as running 299a9717f update runc binary to 1.1.14 f4529ace1 build(deps): bump the otel group with 8 updates e7357916b runc-shim: refuse to start execs after init exits def477b07 Bump crun to 1.16 3d7955bf7 remove duplicated descriptor from/to proto 93d6f0f92 remove duplicated sandbox to proto func bfc1465a2 Reorganize mount/unmount code so it is easier to add Darwin-specific implementation 9c3400572 reduce ptypes.Empty creation by defining it in as a var 7f3bf993d runc-shim: remove misleading comment f6677a4ec Cumulative stats can't decrease 94c163209 TestNewBinaryIOCleanup: fix a comment, minor rewrite d83184ced avoid repeated calls in Tricolor gc 6b97a08ee add benchmark 1b03ca57c build(deps): bump github.com/prometheus/client_golang 9906fac59 build(deps): bump github.com/vishvananda/netlink cdbfcc257 Prepare release notes for v2.0.0-rc.4 4ba502a03 Update api vendor to latest tag a36d38fb4 Add mailmap entry for Michael Zappa bf5fc240b build(deps): bump google-github-actions/upload-cloud-storage faaafd6de build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3 47350982b build(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11 3cd8f9734 core/mount: use ptrace instead of go:linkname 35b029257 remove sha256-simd 1195b68eb build(deps): bump github.com/prometheus/client_golang 50b06182f Register local content plugin from separate package 021063c4a build(deps): bump the k8s group with 5 updates 1bff3bfed build(deps): bump dario.cat/mergo from 1.0.0 to 1.0.1 429085c84 build(deps): bump google-github-actions/upload-cloud-storage 93abc2fdd Update hcsshim to v0.12.6 bcdf50736 core/mount: add benchmark test for GetUsernsFD 6f3833f25 CRI: remove `disable_cgroup` fc1637d16 Attest artifacts in release workflow 337d8c52c Update release job to generate artifacts attestation Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: simplify the kernel-cfg-fragments-native dependencyBruce Ashfield2024-10-031-1/+3
| | | | | | | | | | | | | The routine calculating the -native depdenency for configuration fragments had issues with variations in kernel PV definitions. To avoid making the routine even more complex, this commit switches to using the same variables that include the correct virtualization include file. This way, if bitbake has located and included the file that adds the -native dependency, we know that the variables will find the correct recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* meta-virt-container.inc: Install shadow in read-only rootfsPavel Zhukov2024-10-031-0/+3
| | | | | | | | | Podman requires /etc/sub[g]uid for rootless mode but the file is being deleted if shadow is in ROOTFS_RO_UNNEEDED (even if different package like the podman itself provides it) and rpm backend is used. Signed-off-by: Pavel Zhukov <pavel@zhukoff.net> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to 4.20-devBruce Ashfield2024-10-032-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version 4.20-dev-288-gc23571fe31, which comprises the following commits: 57338346f2 x86/IRQ: avoid double unlock in map_domain_pirq() 1ddc8c1bad CI: Add Ubuntu 22.04 (Jammy) and 24.04 (Noble) testing 6db222eb1f CI: Refresh Ubuntu Focal container as 20.04-x86_64 51e5081c6e CI: Refresh Ubuntu Bionic container as 18.04-x86_64 1ab414b915 CI: Refresh Ubuntu Xenial container as 16.04-x86_64 e85ff1f1af CI: Refresh OpenSUSE Leap container a8bc31be01 CI: Refresh OpenSUSE Tumbleweed container 1e66e18806 CI: Refresh and upgrade the GCC-IBT container 248200bd5b CI: Swap to debian for riscv64 build and test a507bd7d1f CI: Introduce debian:11/12-riscv64 containers d46e4264c3 CI: Refresh bullseye-ppc64le as debian:11-ppc64le 155c9d7f1b CI: Use debian:12-ppc64le for smoke testing a2a0ee0eaf CI: Introduce a debian:12-ppc64le container 5e1773dc86 CI: Mark Archlinux/x86 as allowing failures 4b716647f7 CI: Drop Ubuntu Trusty testing 2617d2f141 CI: Drop Debian Stretch testing aabccd1018 CI: Drop Debian Jessie dockerfiles 83754331a7 CI: Remove useless/misleading randconfig jobs 3420cc1a50 CI: Fix CONTAINER_UID0=1 scripts/containerize 5d3e2140bb automation: Use a different ImageBuilder repository URL d49ba6bf8f build: Drop xorg-x11 as a build dependency 47f465d485 build: Drop libiconv as a build dependecy cb3a371469 build: Drop openssl as a build dependency 37810b52d0 tools/libxs: Fix fcntl() invocation in set_cloexec() 8e7c08a336 stubdom: Remove more leftovers of caml-stubdom c4ebeb79d1 CI: Refresh the Coverity Github Action configuration 64cee18837 build: Fix the version of python checked for by ./configure 7cc95f4166 build: Regenerate ./configure with Autoconf 2.71 0d2b87b5ad x86/physdev: Return pirq that irq was already mapped to c2a66d0b58 CI: Rework the CentOS7 container 7878756565 CI: Adjust the usage of inline files aa2b6e4d84 CI: Formalise the use of heredocs 56b77d7db0 build/mkheader: Fix Syntax/DeprecationWarnings 31618bf80e build/mkheader: Remove C-isms from the code 5d8c784783 tools/xs-clients: Fix `make clean` rule 7e3701b6ce xen/vmap: Document the vmap header a771e02594 xen/riscv: use .insn with operands to support the older gas 63c66274d9 xen: Fix XEN_EXTRAVERSION after 4.19-rc1 fb76e08a8f cmdline: "extra_guest_irqs" is inapplicable to PVH 1f56accba3 amend 'cmdline: document and enforce "extra_guest_irqs" upper bounds' 08daa72cdc xen: avoid UB in guest handle field accessors d2fe9ab304 x86/entry: don't clear DF when raising #UD for lack of syscall handler 17f6d398f7 cmdline: document and enforce "extra_guest_irqs" upper bounds a2ff677852 tools/libxs: Fix CLOEXEC handling in xs_fileno() 1957dd6aff tools/libxs: Fix CLOEXEC handling in get_socket() bf7c146470 tools/libxs: Fix CLOEXEC handling in get_dev() 4c3a618b0a tools/dombuilder: Correct the length calculation in xc_dom_alloc_segment() 9ec74bdb25 xen/common: fix build issue for common/trace.c daa90dfea9 pirq_cleanup_check() leaks 4a73eb4c20 Update Xen version to 4.19-rc 7584e39986 Config.mk pin QEMU_UPSTREAM_REVISION (prep for Xen 4.19 RC1) 08f9b1dd9c MAINTAINERS: Step down as maintainer and committer 6d41f5b9e1 automation/eclair: add deviations agreed in MISRA meetings 402e473249 x86/traps: address violations of MISRA C Rule 20.7 bfea273b7b automation/eclair_analysis: clean ECLAIR configuration scripts 8f5581d7e1 x86/irq: address violations of MISRA C Rule 20.7 c7e195fac0 automation/eclair_analysis: address violations of MISRA C Rule 20.7 f39642c308 xen/guest_access: address violations of MISRA rule 20.7 4929fea7bd xen/self-tests: address violations of MISRA rule 20.7 0dca0f2b9a automation/eclair: address violations of MISRA C Rule 20.7 ecadd22a3d CHANGELOG: Add entries related to tracing dde20e47af tools/xenalyze: Remove argp_program_bug_address 188e5f1a80 CHANGELOG.md: Fix indentation of "Removed" section 4712e3b376 Config.mk: update MiniOS commit 853f707cd9 automation/eclair_analysis: deviate and|or|xor|not for MISRA C Rule 21.2 0ac3b175e7 automation/eclair: configure Rule 13.6 and custom service B.UNEVALEFF 11ea49a3fd gnttab: fix compat query-size handling 735865f884 xen: re-add type checking to {,__}copy_from_guest_offset() 93db2f64f3 MAINTAINERS: Update my email address again b14dae96c0 x86/pagewalk: Address MISRA R8.3 violation in guest_walk_tables() 6e07f41b27 common/unlzo: address violation of MISRA C Rule 7.3 c2f4ea4dc9 automation/eclair: add more guidelines to the monitored set 5add709cc6 automation/eclair: add deviations of MISRA C Rule 5.5 912412f97a automation/eclair: add deviation for MISRA C Rule 17.7 c56f1ef577 xen/arm: static-shmem: request host address to be specified for 1:1 domains 908407bf2b xen/riscv: Drop legacy __ro_after_init definition 8c3bb4d8ce xen/gnttab: Perform compat/native gnttab_query_size check ebed411e7a xen/xlat: Sort structs per file 90c1520d4e xen/xlat: Sort out whitespace 6a17e11993 x86/shadow: Don't leave trace record field uninitialized 8765783434 x86/shadow: Rework trace_shadow_emulate_other() as sh_trace_gfn_va() 578066d82b x86/shadow: Introduce sh_trace_gl1e_va() 2e9f8a734e x86/shadow: Rework trace_shadow_gen() into sh_trace_va() ba52b3b624 tools/xl: Open xldevd.log with O_CLOEXEC 9e7c26ad85 libelf: avoid UB in elf_xen_feature_{get,set}() c5746b021e x86/ioapic: Fix signed shifts in io_apic.c 62071a1c16 livepatch: use appropriate type for buffer offset variables e2bb28d621 x86/irq: forward pending interrupts to new destination in fixup_irqs() 74970165ba tools/libs/light: Fix nic->vlan memory allocation f16ac12bd4 hotplug: Restore block-tap phy compatibility 43d5c5d5f7 xen: avoid UB in guest handle arithmetic 267122a24c x86/defns: Clean up X86_{XCR0,XSS}_* constants 71cacfb035 x86/cpuid: Fix handling of XSAVE dynamic leaves fdb7e77fea x86/cpu-policy: Simplify recalculate_xstate() df09dfb94d x86/xstate: Rework xstate_ctxt_size() as xstate_uncompressed_size() a09022a09e x86/boot: Collect the Raw CPU Policy earlier on boot d31a111940 x86/xstate: Cross-check dynamic XSTATE sizes at boot 9e6dbbe8bf x86/xstate: Fix initialisation of XSS cache aba98c8d67 xen/arch: Centralise __read_mostly and __ro_after_init 82f4809447 xen/irq: Address MISRA Rule 8.3 violation efa6e9f15b Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor" 443c488a0b Revert "docs/features/dom0less: Update the late XenStore init protocol" 988f1c7e1f xen/arm: static-shmem: fix "gbase/pbase used uninitialized" build failure 53c5c99e87 docs/features/dom0less: Update the late XenStore init protocol 6f9d90ea94 xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor cb1ddafdc5 xen/arm/static-shmem: Static-shmem should be direct-mapped for direct-mapped domains bd59af9970 xen/ubsan: Fix UB in type_descriptor declaration 369558924a x86/irq: handle moving interrupts in _assign_irq_vector() 817d1cd627 x86/irq: deal with old_cpu_mask for interrupts in movement in fixup_irqs() fa4d026737 x86/Intel: unlock CPUID earlier for the BSP 77b1ed1d02 automation/eclair_analysis: add more clean MISRA guidelines 0f0235e9e9 automation/eclair_analysis: address remaining violations of MISRA C Rule 20.12 8b4243a9b5 xen/docs: Describe static shared memory when host address is not provided 3deac416a3 xen/arm: Implement the logic for static shared memory from Xen heap a21bfc9126 xen/arm: Rework heap page allocation outside allocate_bank_memory 1544d355b5 xen/arm: Parse xen,shared-mem when host phys address is not provided 3e2121ce47 xen/p2m: put reference for level 2 superpage 79a43c8838 xen/arm: Wrap shared memory mapping code in one function e90f8d562d xen/arm: Lookup bootinfo shm bank during the mapping 4fdd8d7556 x86/EPT: drop questionable mfn_valid() from epte_get_entry_emt() 777c71d313 x86/EPT: avoid marking non-present entries for re-configuring 5540b94e81 x86/EPT: correct special page checking in epte_get_entry_emt() b490f470f5 xen/arm: ffa: support notification 452551c723 xen/arm: add and call tee_free_domain_ctx() dd348eb005 xen/arm: add and call init_tee_secondary() 67ef3db45a xen/arm: allow dynamically assigned SGI handlers 282c33cec3 xen/arm: ffa: simplify ffa_handle_mem_share() 4d2b1b5d69 xen/arm: ffa: use ACCESS_ONCE() 66e6e47511 xen/arm: ffa: refactor ffa_handle_call() 401448f2d1 x86/physdev: replace physdev_{,un}map_pirq() checking against DOMID_SELF c7564d7366 x86/irq: limit interrupt movement done by fixup_irqs() 0e8cde5884 x86/irq: describe how the interrupt CPU movement works 171c52fba5 x86/smp: do not use shorthand IPI destinations in CPU hot{,un}plug contexts b0e5352c60 MAINTAINERS: alter EFI section d05d97c090 MAINTAINERS: add me as scheduler maintainer 5ea7f2c9d7 CI: Update FreeBSD to 13.3 43de96a70f automation: add a test for HVM domU on PVH dom0 ea1cb444c2 x86/pvh: declare PVH dom0 supported with caveats 0a5b2ca32c x86/domain: deviate violation of MISRA C Rule 20.12 e63209d3ba x86/irq: remove offline CPUs from old CPU mask when adjusting move_cleanup_count c2d5e63c73 xen: fix MISRA regressions on rule 20.9 and 20.12 5f7606c048 xen/bitops: Rearrange the top of xen/bitops.h 04e70af5f2 xen/bitops: Clean up ffs64()/fls64() definitions 54b10ef6c8 xen/bitops: Implement fls()/flsl() in common logic 5ed26fc076 xen/bitops: Implement ffsl() in common logic 989e5f08d3 x86/bitops: Improve arch_ffs() in the general case ef1dd8dff4 xen/bitops: Implement ffs() in common logic 95ddb7e9b0 xen/bitops: Implement generic_ffsl()/generic_flsl() in lib/ ea59e7d780 xen/bitops: Cleanup and new infrastructure ahead of rearrangements 1408cf7a28 xen/bitops: Delete find_first_set_bit() 03147e6837 arch/irq: Centralise no_irq_type 8aeda4a241 arch/irq: Make irq_ack_none() mandatory 16884ac6c8 CI: Improve serial handling in qemu-smoke-ppc64le.sh 2ff6d17bc3 CI: Use a debug build of Xen for the Xilinx HW tests 1250c73c1a xen/riscv: Update Kconfig in preparation for a full Xen build db04be9e7d x86/hvm: allow XENMEM_machine_memory_map 9a905d7dc6 xen/bitops: Replace find_first_set_bit() with ffs()/ffsl() - 1 1773a74469 xen/page_alloc: Coerce min(flsl(), foo) expressions to being unsigned e807b137f7 ppc/boot: Run constructors on boot 6ef4fa1e7f tools: (Actually) drop libsystemd as a dependency 12f9599a3b Partial revert of "x86/MCE: optional build of AMD/Intel MCE code" 845a60b63b xen/x86: remove foreign mappings from the p2m on teardown 0291089f6e xen: enable altp2m at create domain domctl 8ef1e96a04 xen/x86: account number of foreign mappings in the p2m 0840bc5ea1 xen: Introduce CONFIG_SELF_TESTS 2bc462f645 x86: address violations of MISRA C Rule 8.4 19b6e9f914 x86/MCE: optional build of AMD/Intel MCE code 5effd810c6 x86/MCE: add default switch case in init_nonfatal_mce_checker() 498a4ded74 x86/intel: move vmce_has_lmce() routine to header d27c2835e0 x86/svm: Rework VMCB_ACCESSORS() to use a plain type name 58b3437bae xen/x86: Address two misc MISRA 17.7 violations 2d082710f7 xen/x86: Drop useless non-Kconfig CONFIG_* variables 56d3b24979 xen/lzo: Implement COPY{4,8} using memcpy() 2d93f78bfe x86/traps: address violation of MISRA C Rule 8.4 8b977fe572 CHANGELOG: Mention libxl blktap/tapback support 96af090e33 automation/eclair_analysis: avoid an ECLAIR warning about escaping 841f437a8b docs/misra: exclude gdbsx from MISRA compliance 1eba1fe18d automation/eclair_analysis: add already clean rules to the analysis 4bc8dc01a3 automation/eclair_analysis: set MISRA C Rule 10.2 as clean ac572152e5 docs: Add device tree overlay documentation 2c4fbadf73 tools: Introduce the "xl dt-overlay attach" command 4c733873b5 xen/arm: Add XEN_DOMCTL_dt_overlay and device attachment to domains 1c77496bc8 xen/arm/gic: Allow adding interrupt to running VMs 6f588194d9 tools/arm: Introduce the "nr_spis" xl config entry 1d2b4f3049 xen/arm, doc: Add a DT property to specify IOMMU for Dom0less domUs c8cbc5eb1c tools/xl: Correct the help information and exit code of the dt-overlay command 2172a01c4c tools/xenalyze: Ignore HVM_EMUL events harder 320e644616 x86/hvm/trace: Use a different trace type for AMD processors 701190abb3 xen/arm: Set correct per-cpu cpu_core_mask 2a40b106e9 tools/xentrace: Remove xentrace_format ae26101f6b tools: Drop libsystemd as a dependency caf8644826 tools/{c,o}xenstored: Don't link against libsystemd 78510f3a15 tools: Import stand-alone sd_notify() implementation from systemd 219cdff3fb LICENSES: Add MIT-0 (MIT No Attribution) 9e58da32cc xen/arm: mem_access: Conditionally compile mem_access.c d6a7fd8303 vpci: add initial support for virtual PCI bus topology 9c831e429c vpci/header: emulate PCI_COMMAND register for guests 7db7bd0f31 arm/vpci: honor access size when returning an error 2c15fa332e x86: detect PIT aliasing on ports other than 0x4[0-3] 249affc129 x86/PIT: supply and use #define-s e6ed98863b xen/riscv: add required things to current.h 3cd46d4ec8 xen/riscv: introduce atomic.h 51dabd6312 xen/riscv: introduce cmpxchg.h 9f482c6a7e xen/x86: Simplify header dependencies in x86/hvm 212cb5effa iommu/x86: print RMRR/IVMD ranges using full addresses 3a3111d018 xen/livepatch: make .livepatch.funcs read-only for in-tree tests ced21fbb28 x86_64/cpu_idle: address violations of MISRA C Rule 20.7 1b0b050bd6 x86_64/uaccess: address violations of MISRA C Rule 20.7 670b7ec65d x86/hvm: address violations of MISRA C Rule 20.7 1b9311da4b x86/vpmu: address violations of MISRA C Rule 20.7 bba4eb88fd xen/common/dt-overlay: Fix lock issue when add/remove the device 24dbf5bd03 x86/p2m: Add braces for better code clarity ed1ac3e968 xen/riscv: introduce vm_event_*() functions 7e036f7e0c xen/riscv: introduce monitor.h 44b69e9c17 xen/x86: pretty print interrupt CPU affinity masks 9c5444b01a xen/trace: Drop old trace API aa60520cd3 xen/trace: Removal final {__,}trace_var() users in favour of the new API 26da08059e xen: Switch to new TRACE() API d64693df1a xen/sched: Clean up trace handling df50666449 xen/rt: Clean up trace handling ab8bc19850 xen/credit2: Clean up trace handling e978b462ec xen/trace: Introduce new API 26b122e3bf tools/xen-cpuid: Drop old names bbb5c171d7 tools/xen-cpuid: Use automatically generated feature names e96fefdb06 tools/xen-cpuid: Rename decodes[] to leaf_info[] f79189cb29 x86/gen-cpuid: Minor cleanup 54aa34fc89 tools/golang: Add missing golang bindings for vlan 594b22ca5b x86/msi: prevent watchdog triggering when dumping MSI state 21611c6870 include/ctype.h: fix MISRA R10.2 violation 53dc37829c xen/arm: Add DT reserve map regions to bootinfo.reserved_mem d946787a27 xen/arm64: lib: Use the generic xen/linkage.h macros fe1b97d321 xen/arm64: cache: Use the generic xen/linkage.h macros c9906bd79e xen/arm64: mmu/head: Add missing code symbol annotations 8151fe503c xen/arm64: bpi: Add missing code symbol annotations fdba3ff11f xen/arm64: debug: Add missing code symbol annotations fba250ae60 xen/arm64: head: Add missing code symbol annotations 78ce1dc625 xen/arm64: sve: Add missing code symbol annotations 8d92a26a41 xen/arm64: smc: Add missing code symbol annotations 1125f3529c xen/arm64: entry: Add missing code symbol annotations 977d98e67c x86/ucode: Further fixes to identify "ucode already up to date" ae7584f636 x86/p2m: move altp2m-related code to separate file f1fa994d89 x86/MCE: guard {intel/amd}_mcheck_init() calls 71b5eccbdd x86/MCE: guard access to Intel/AMD-specific MCA MSRs a3ec23a940 x86/vpmu: separate amd/intel vPMU code 6628bacc81 xen/bitops: put __ffs() into linux compatible header d0c6114058 x86: detect PIC aliasing on ports other than 0x[2A][01] c09960a1a2 x86: allow to suppress port-alias probing 762a848223 automation/eclair_analysis: deviate macro count_args_ for MISRA Rule 20.7 7fe9679db9 automation/eclair_analysis: fully deviate MISRA C Rules 21.9 and 21.10 abd00b037d x86/mtrr: avoid system wide rendezvous when setting AP MTRRs 0cc01c603f tools/xl: add vlan keyword to vif option 3bc14e4fa4 tools/libs/light: Add vlan field to libxl_device_nic e27fc7d15e tools/xentop: Fix cpu% sort order 9b7d793889 tools/hvmloader: Further simplify SMP setup 8a78d89881 x86/cpufreq: Rename cpuid variable/parameters to cpu 7270fdc7a0 x86: respect mapcache_domain_init() failing d104a07524 xen/sched: set all sched_resource data inside locked region for new cpu 319a5125ca xen/console: fix Rule 10.2 violation 46aa3031ae docs/misra: add R21.6 R21.9 R21.10 R21.14 R21.15 R21.16 9110072b76 x86/io: Don't cast away constness in read{b..q}() 2d8d7481ca Revert "evtchn: refuse EVTCHNOP_status for Xen-bound event channels" 90a1bc9e82 xen: Use -Wuninitialized and -Winit-self 0b01395c44 xen: Use -Wflex-array-member-not-at-end when available d31d0665f1 automation/eclair_analysis: tag MISRA C Rule 1.1 as clean 531d3bea5e libxl: Fix handling XenStore errors in device creation b2cd07a044 x86/hvm: Allow access to registers on the same page as MSI-X table e9607d4061 x86/msi: Extend per-domain/device warning mechanism 5cc7347b04 libxl: fix population of the online vCPU bitmap for PVH 996576b965 xen: allow up to 16383 cpus b0082b9083 automation/eclair: hide reports coming from adopted code in scheduled analysis f4cd14e502 automation/eclair_analysis: amend configuration for some MISRA rules 93c27d54dd xen/arm: Fix MISRA regression on R1.1, flexible array member not at the end 1672df9ebd xen/kernel.h: Import __struct_group from Linux 53959cb830 x86/boot: Refactor pvh_load_kernel() to have an initrd_len local 49c810e867 x86/boot: Explain how moving mod[0] works fcefb2a247 x86/IOMMU: address violations of MISRA C:2012 Rule 14.4 3d1033c911 automation/eclair: add deviation of MISRA C:2012 Rule 14.4 14424d90e1 xen/pci: address violations of MISRA C Rule 20.7 8e22c78e17 xen/unaligned: address violation of MISRA C Rule 20.7 1dd6b50dc4 x86/hvm: Defer the size calculation in hvm_save_cpu_xsave_states() 752ec9a9b1 tools/hvmloader: Wake APs with hypercalls rather than INIT+SIPI+SIPI 754a29cacf tools/hvmloader: Move various helpers to being static inlines 1c6112b8f5 xen/gunzip: Move crc state into gunzip_state 7a4483358f xen/gunzip: Move bitbuffer into gunzip_state d386a383dd xen/gunzip: Move output count into gunzip_state fd273a5690 xen/gunzip: Move input buffer handling into gunzip_state 461eacc76b xen/gunzip: Move window position into gunzip_state 02e32883f3 xen/gunzip: Introduce struct gunzip_state and refactor window 473156eec6 xen/gunzip: don't leak memory on error paths 648db37a15 x86/ucode: Distinguish "ucode already up to date" 3c228e24b2 automation/eclair_analysis: unblock pipelines from certain repositories 0c79b7bc9b automation/eclair_analysis: tag MISRA C Rule 8.2 as clean. e8e8afee99 svm: Fix MISRA 8.2 violation a2330b51df x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake f4f2f3402b tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC ebab808eb1 x86/platform: correct #undef in compat checking d7032b4ca2 AMD/IOMMU: add helper to check whether ATS is to be used for a device b5996ab284 VT-d: parse ACPI "SoC Integrated Address Translation Cache Reporting Structure"s 426dbf404e VT-d: tidy error handling of RMRR parsing 692f6199bd automation/eclair: add deviation for Rule 16.4 50a4f7c177 docs/misra: add Terms & Definitions section to rules.rst 6654248f22 ppc/riscv: fix arch_acquire_resource_check() b801ccfe7e drivers/char: address violation of MISRA C Rule 20.7 04e31583ba VT-d: correct ATS checking for root complex integrated devices f95cd010cb xen/Kconfig: Drop the final remnants of ---help--- 2d4ba20559 tools/tests: let test-xenstore exit with non-0 status in case of error 642005e310 tools/tests: don't let test-xenstore write nodes exceeding default size feb9158a62 automation/eclair: make explicit there are no adopted files by default 7556f46a9b automation: do not allow failure for triggered analyses c1aa6fb5f6 automation/eclair: tag Rule 7.2 as clean and temporarily remove Rules 1.1 and 8.2 9e30bd8f4a x86/cpu-policy: Annotate the accumulated features b819bd65f4 revert "x86/mm: re-implement get_page_light() using an atomic increment" bf0059282d xen/riscv: improve check-extension() macro 08e79bba73 xen/x86: Fix Syntax warning in gen-cpuid.py 647f7e50eb xen/xsm: Wire up get_dom0_console abc68e78a3 x86/MCE: guard call to Intel-specific intel_get_extended_msrs() 64b21662b1 x86/msi: passthrough all MSI-X vector ctrl writes to device model be5b08dd6e xen-livepatch: fix --force option comparison 13893a58e2 xen/spinlock: use correct pointer a505890d81 x86/entry: shrink insn size for some of our EFLAGS manipulation fd4ff921f7 gzip: clean up comments and fix code alignment 232ee07c23 arm/vpci: make prefetchable mem 64 bit a0e29b3163 CI: Drop glibc-i386 from the build containers 4edbbcd0c0 automation/eclair: reorganize pipelines 23cd1207e7 VMX: no open-coding in vmx_get_cpl() 7ea3a3e44f MAINTAINERS: Update my email address 656ae8f109 x86/spec: adjust logic that elides lfence 049ab0b2c9 x86/spec: fix reporting of BHB clearing usage from guest entry points 6d5111b10e tools/ocaml: Fix warnings in config.ml 524eee7ce0 x86/hap: Refactor boolean field assignments bd5213384b x86/shadow: correct shadow_vcpu_init()'s comment 9a73b4e210 x86/paging: vCPU host mode is always set 8c01d0e336 x86/msr: add suffix 'U' to MSR_AMD_CSTATE_CFG macro ea3272f845 x86/pci: add suffix 'U' to PCI_CONF_ADDRESS macro 62a72092a5 livepatch: introduce --force option fb2716a191 xen-livepatch: fix parameter name parsing 4a75f2ffc0 x86/mm: address violations of MISRA C Rule 20.7 445f66fe00 x86/debugreg: address violation of MISRA C Rule 20.7 c717d52a5d x86/vhpet: address violations of MISRA C Rule 20.7 4f900035a4 x86/acpi: address violations of MISRA Rule 20.7 0440fcad2a x86/pci: address violation of MISRA C Rule 20.7 489d13da93 xen/spinlock: address violations of MISRA C Rule 20.7 0d02b75d7c xen/page-defs: address violation of MISRA C Rule 20.7 8189230d80 libelf: address violations of MISRA C Rule 20.7 d7c4d59b51 libxl: Support blktap with HVM device model 76a484193d hotplug: Update block-tap 31d6b5b4a7 automation: Add arm64 test for running Xen with GICv3 db49973411 automation: Add arm{64,32} earlyprintk jobs c05b97fc7a automation: Drop some of the non-debug variants of the same Arm jobs 7846f7699f xen/arm: List static shared memory regions as /memory nodes 51a2b3f109 xen/arm: fix duplicate /reserved-memory node in Dom0 a0fee882c1 xen/arm: remove shm holes from extended regions 2b557af192 xen/arm: Reduce struct membank size on static shared memory e5816ad4e8 xen/arm: Introduce helper for static memory pages 9f657d8832 xen/arm: Avoid code duplication in check_reserved_regions_overlap b3e66aa1c2 xen/arm: Avoid code duplication in find_unallocated_memory e13499b3c4 xen/arm: Conditional compilation of kernel_info.shm_mem member 2209c1e35b xen/arm: Introduce a generic way to access memory bank structures 8d5ff14477 xen/arm: Pass struct kernel_info parameter to make_{resv,shm}_memory_node 6d14a742f8 xen/arm: avoid repetitive checking in process_shm_node ab327c8e8b xen/arm: remove stale addr_cells/size_cells in assign_shared_memory 6c04a0bf2c tools/golang: Run `go vet` as part of the build process 9c08a88ad0 golang/xenlight: Ensure comments aren't interpreted as docstrings 27c176d298 tools/golang: When returning pointers, actually allocate structrues 0d19d3aab0 svm/nestedsvm: Introduce nested capabilities bit 410ef33439 x86/monitor: allow fast-singlestepping without enabling singlestep monitor 77e25f0e30 x86/MTRR: correct inadvertently inverted WC check f82c43a384 xen: introduce header file with section related symbols 70d46b51e2 docs/man: Add xenwatchdog manual page 9c872b5766 tools/misc: Add xenwatchdogd.c copyright notice e906bfae48 tools/misc: xenwatchdogd enhancements f0fa75c9ea tools/misc: xenwatchdogd: add parse_secs() 43a0706986 x86/rtc: Avoid UIP flag being set for longer than expected cccb7878f3 x86/pvh: zero VGA information c3b40c95da x86/video: add boot_video_info offset generation to asm-offsets 93d6e6efa8 automation/eclair_analysis: substitute deprecated service STD.emptrecd bc5827fad1 xen/riscv: check whether the assembler has Zbb extension support 1fc166d6cd xen/domain: deviate MISRA C Rule 16.2 violation 480179bc26 x86/PVH: Use unsigned int for dom0 e820 index 09cb855f33 x86/svm: Add flushbyasid in the supported features 5495ed0cd2 eclair_analysis: deviate x86 emulator for Rule 16.2 1d2d283818 xen/riscv: add minimal stuff to page.h to build full Xen 58798e3f1f xen/riscv: introduce io.h 5b33845adf xen/ppc: mm-radix: Replace debug printing code with printk 78d980071a x86/MCE: move intel mcheck init code to separate file 8763eb782b xen/gzip: Drop huffman code table tracking 052cf1dcdf xen/gzip: Remove custom memory allocator 492fe0778b xen/gzip: Drop unused define checks 489a46c177 x86/emul: Simplify segment override prefix decoding 4cd66fb56d xen/efi: Rewrite DOS/PE magic checking without memcmp() 02fbb2d591 docs/misra: mark the gzip folder as adopted code 2a9a19be13 Revert "public: s/int/int32_t" 83e081b29e docs: arm: Update where Xen should be loaded in memory afab29d088 public: s/int/int32_t ad363fb17d docs/misra: add Rule 16.4 487838f13a docs/misra/rules.rst: add rule 5.5 c0f890cd9d docs/hypercall-abi: State that the hypercall page is optional cfb922bb7d xen/gzip: Colocate gunzip code files af4cd0a6a6 altcall: fix __alt_call_maybe_initdata so it's safe for livepatch 09abf1b61b libxl: devd: Spawn QEMU for 9pfs 3c7482b73c libxl: Use vkb=[] for HVMs 2b31a1f055 xen/include: move definition of ASM_INT() to xen/linkage.h 6cb501e3e6 MAINTAINERS: Update livepatch maintainers 86c008aa5d tools/misc: xenwatchdogd: add static qualifier 5d09f8cbdc tools/misc: rework xenwatchdogd signal handling 0668d35594 tools/misc: xenwatchdogd: use EXIT_* constants c304bdf1e7 xen/acpi: Allow xen/acpi.h to be included on non-ACPI archs 2145512e21 xen/xsm: address violation of MISRA C Rule 16.2 bbbbd024e8 x86/hvm: address violations of MISRA C Rule 16.2 eeab8c4619 xen/domctl: address violations of MISRA C Rule 16.2 f509d39d5b x86/efi: tidy switch statement and address MISRA violation 24f204748e x86/irq: tidy switch statement and address MISRA violation 3b51a812e0 x86/cpuid: address violation of MISRA C Rule 16.2 6af626c1da x86/vlapic: tidy switch statement and address MISRA violation 478002370c x86/emul: Adjust X86EMUL_OPC_EXT_MASK to placate MISRA 761358b9eb xen/spinlock: Adjust LOCK_DEBUG_INITVAL to placate MISRA e5b93b70d5 xen/vPCI: Remove shadowed variable 52bde26c1c xen/nospec: Remove unreachable code d0a718a45f x86/hvm: Fix Misra Rule 19.1 regression d37c184236 xen/virtual-region: Drop setup_virtual_regions() 038ba305fd xen/virtual-region: Link the list build time 3434518d05 xen/virtual-region: Rework how bugframe linkage works 337f11ea73 xen/link: Introduce a common BUGFRAMES definition 0e7ea8ca5f x86/Kconfig: Introduce CONFIG_{AMD,INTEL} and conditionalise ucode 2eea952b70 x86/ucode: Move vendor specifics back out of early_microcode_init() f48299cad5 docs/misra: document the expected sizes of integer types dfc9455b80 MAINTAINERS: Become a reviewer of iMX8Q{M,XP} related patches 2f85a6d9f5 xen/drivers: imx-lpuart: Replace iMX8QM compatible with iMX8QXP 71d4356544 xen/arm: Add imx8q{m,x} platform glue a9fa825008 x86/entry: Fix build with older toolchains d5887c0dec x86/spec-ctrl: Support the "long" BHB loop sequence 689ad48ce9 x86/spec-ctrl: Wire up the Native-BHI software sequences 954c983abc x86/spec-ctrl: Software BHB-clearing sequences 62a1106415 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI c94e210592 x86/tsx: Expose RTM_ALWAYS_ABORT to guests 0b66d7ce3c x86: Drop INDIRECT_JMP 8e186f98ce x86: Use indirect calls in reset-stack infrastructure 45dac88e78 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields 97c5b8b657 x86/vmx: Add support for virtualize SPEC_CTRL 40dea83b75 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_* 2378d16a93 x86/spec-ctrl: Simplify DO_COND_IBPB 9607aeb660 x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR} 22390697bf x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV 94896de1a9 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_* c62673c433 x86/spec-ctrl: Rename spec_ctrl_flags to scf 489d93cd0f x86/spec-ctrl: Fix BTC/SRSO mitigations 4b3da946ad x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests 4be1fef1e6 x86/alternatives: fix .init section reference in _apply_alternatives() 9926e692c4 hypercall_xlat_continuation: Replace BUG_ON with domain_crash 6a98383b08 x86/HVM: clear upper halves of GPRs upon entry from 32-bit code 672b26b66e drivers: char: Enable OMAP UART driver for TI K3 devices c079823df6 xen/compiler: address violation of MISRA C Rule 20.9 dfc9fab003 x86/PVH: Support relocatable dom0 kernels 4d3b8669d8 libelf: Store maximum PHDR p_align 77b219f915 xen/rwlock: raise the number of possible cpus c286bb93d2 xen/spinlock: support higher number of cpus 0b09531d21 xen/spinlock: let all is_locked and trylock variants return bool bfbec024b8 xen/spinlock: split recursive spinlocks from normal ones 31be78285c xen/spinlock: add missing rspin_is_locked() and rspin_barrier() ee1e133125 xen/spinlock: add another function level 3696a9f27d xen/spinlock: add explicit non-recursive locking functions 402c2d3e66 MISRA C Rule 17.1 states: "The features of `<stdarg.h>' shall not be used" ea33a6e1e3 MISRA C:2012 Rule 17.1 states: The features of `<stdarg.h>' shall not be used 80d28865e1 automation/eclair: add deviations for Rule 20.7 6bdb67d19e arm/public: address violations of MISRA C Rule 20.7 e9b0f8b690 x86: Address MISRA Rule 13.6 b33f191e3c x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch 270588b9b2 char: lpuart: Drop useless variables from UART structure 4932163b35 drivers: char: Drop useless suspend/resume stubs in Arm drivers 6eeb3e86bd vsprintf: address violations of MISRA C:2012 Rule 16.3 226bdb155b xen/sched: address violations of MISRA C:2012 Rule 16.3 21e0c8fc0e tools: Move MB/GB() to common-macros.h 4c41749852 tools/init-xenstore-domain: Replace variable MB() usage 1e6cd4155d xen/riscv: introduce extension support check by compiler 7b02b505bb automation: introduce fixed randconfig for RISC-V 6117179dd9 docs/misra: add 13.6 to rules.rst 538ab07bad xen/arm: ffa: support FFA_FEATURES be75f686eb xen/arm: ffa: separate rxtx buffer routines bded3e6467 xen/arm: ffa: separate partition info get routines 8836867200 xen/arm: ffa: separate memory sharing routines bb584ec036 xen/arm: ffa: move common things to ffa_private.h b21cbaf6ba xen/arm: ffa: rename functions to use ffa_ prefix ac682fbac1 xen/vm-event: address a violation of MISRA C:2012 Rule 16.3 cde0c58714 xen/evtchn: address a violation of MISRA C:2012 Rule 16.3 163ea7d9a8 console: address a violation of MISRA C:2012 Rule 16.3 2c205ce5c0 xen/domctl: address a violation of MISRA C:2012 Rule 16.3 795c4e367b x86/amd: address violations of MISRA C Rule 20.7 da88f434bc xen/mm: address violations of MISRA C Rule 20.7 5811fb4816 x86/hvm: address violations of MISRA C Rule 20.7 a9b2a72926 x86/vPMU: address violations of MISRA C Rule 20.7 dd5101a616 drivers/char: mark extra reserved device memory in memory map 7a09966e7b x86/spec-ctrl: Move __read_mostly data into __ro_after_init 3c9e76cd87 x86/mm: Refine address alignment checks in modify_xen_mappings_lite() 8f85af65af tools/oxenstored: Re-format 0cd50753eb nestedsvm: Disable TscRateMSR 4f8b0e94d7 x86: Move SVM features exposed to guest into hvm_max_cpu_policy e3883336bb xen/efi: efibind: address violations of MISRA C Rule 20.7 853c71dfbf xen/elfnote: Specify ELF Notes are x86-specific 7d8c9b4e8d libelf: Expand ELF note printing 8802230bfa Revert "xen/x86: bzImage parse kernel_alignment" f6a4139948 x86/public: address violations of MISRA C Rule 20.7 a65d9988ad x86/hvm: address violations of Rule 20.7 e2eeb1b753 xen/page_alloc: address violations of MISRA C Rule 20.7 cab6de6a95 xen: address MISRA C Rule 20.7 violation in generated hypercall 7757981d94 xentrace: address violation of MISRA C Rule 20.7 12a3b90c2a xen/list: address violations of MISRA C Rule 20.7 6f6de10ade xen/xsm: add parentheses to comply with MISRA C Rule 20.7 4b60085b6e xen/console: add comment about external console lock helper 03e484a4f6 x86/vcpu: relax VCPUOP_initialise restriction for non-PV vCPUs d654612e98 xen/riscv: add minimal stuff to processor.h to build full Xen 5095b610df EFI: Introduce inline stub for efi_enabled on !X86 && !ARM cbe393b709 Revert "xen/page_alloc: introduce preserved page flags macro" ee973396f0 x86/cpuid: More AMD features 5205bda5f1 x86/p2m: Coding style cleanup 97b90f9bf2 xen/ppc: Ensure ELF sections' physical load addresses start at 0x0 10e8d824b7 AMD/IOMMU: drop remaining guest-IOMMU bits too cc950c49ae x86/PoD: tie together P2M update and increment of entry count f5c2b6da26 xen/page_alloc: introduce page flag to stop buddy merging 75214d5e53 xen/page_alloc: introduce preserved page flags macro 6eb13b6b1d tools/xl_parse: remove message for tsc mode string eaafbd1134 docs/parse-support-md: Handle BulletList 188fa82305 xen/vpci: Improve code generation in mask_write() 131892e0dc x86/boot: Support the watchdog on newer AMD systems f658321374 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly 9e18f33983 x86/boot: Improve the boot watchdog determination of stuck cpus d2276b86e5 xen/nospec: Include <xen/stdbool.h> d9e709e8c0 xen/wait: address violations of MISRA C Rule 20.7 239b72d874 xen/notifier: address violations of MISRA C Rule 20.7 88822d5fbd xen/arm: smmu: address violations of MISRA C Rule 20.7 8e7207d512 EFI: address violations of MISRA C Rule 20.7 b51d7f39dc xen/device_tree: address violations of MISRA C Rule 20.7 9979cc594a x86/cpufeature: add parentheses to comply with Rule 20.7 a02174c6c8 amd/iommu: clean up unused guest iommu related functions b053075d1a xen/spinlock: make struct lock_profile rspinlock_t aware cc3e8df542 xen/spinlock: add rspin_[un]lock_irq[save|restore]() c9aca2a1f6 xen/spinlock: rename recursive lock functions 475080b6b2 xen/spinlock: introduce new type for recursive spinlocks a97de92e76 IOMMU: store name for extra reserved device memory 62018f0870 x86/mm: use block_lock_speculation() in _mm_write_lock() d92a67b60c xen/sched: address violations of MISRA C Rule 20.7 f93d8dd519 automation/eclair: allow parameter name "unused" a5b90a90ee MAINTAINERS: remove myself from various positions ad52857efc MAINTAINERS: drop AMD IOMMU and Intel VT-d sections 8a8d5c22af perfc: add pseudo-keyword fallthrough 53b5208de8 x86/svmdebug: Print np, sev and sev_es vmcb bits 2f09f797ba x86/svm: Drop the suffix _guest from vmcb bit d638e304f1 SUPPORT.MD: Fix matrix generation after 43c416d0d819 and 77c39a53cf5b 77c39a53cf xen/arm: arm32: Add emulation of Debug Data Transfer Registers 43c416d0d8 xen/arm: arm64: Add emulation of Debug Data Transfer Registers bd06cf74fc xen/arm: Introduce CONFIG_PARTIAL_EMULATION and "partial-emulation" cmd option af7fed3fdf xen/spinlock: remove misra rule 21.1 violations 68e008db0c xen: avoid grep fodder define and undef 70e549fd44 MAINTAINERS: Remove myself from several subsystems a6081d0176 x86/svm: Drop the _enabled suffix from vmcb bits d2686bf964 xen/compiler: deviate the inline macro for MISRA C Rule 20.4 3945b61ddb xen/lz4: address violations of MISRA C:2012 Directive 4.10 ec2587ab4b x86/mtrr: address violations of MISRA C:2012 Directive 4.10 13a7b0f9f7 restrict concept of pIRQ to x86 4dc9a8b060 automation/eclair_analysis: deviate certain macros for Rule 20.12 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: correct direction creation for sysusers.dBruce Ashfield2024-10-021-1/+2
| | | | | | | | | | | Matthis Mauschild <matthis.hauschild@airbus.com> noticed that commit 3902ac8844a9868ab14f [libvirt: ensure sysusers.d path for libvirt-qemu] does not universally work. Adjusting the directory creation to be the same as other installs in the recipe to ensure it works everywhere. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: ensure sysusers.d path for libvirt-qemuTim Orling2024-09-301-1/+1
| | | | | | | | | | | | | | In 8138d9cc7e0c31171230110db0cfa881c46a821b the path to /lib/sysusers.d might not exist, use install -d to ensure it does. Fixes: install: cannot create regular file '.../libvirt/v10.5.0+git/image/lib/sysusers.d/libvirt-qemu.conf': No such file or directory Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* u-boot-xlnx-scr.bbappend: Fix xen boot script comparisonMark Hatle2024-09-251-1/+1
| | | | | | | | | | | | Some versions of python/bitbake appear to allow 'true' and 'false', but this is incorrect, True and False are the correct boolean variables. Fixes: ERROR: ExpansionError during parsing .../meta-xilinx/meta-xilinx-core/recipes-bsp/u-boot/u-boot-xlnx-scr.bb Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix do_rootfs errorWang Mingyu2024-09-112-0/+2
| | | | | | | | | | | | When do_rootfs, the following error occured: WARNING: do_rootfs: Group kvm has been defined with id (47) but sysusers.d expects gid (36) WARNING: do_rootfs: Group qemu has been defined with id (975) but sysusers.d expects gid (107) ERROR: do_rootfs: Error executing a python function in exec_func_python() autogenerated: Create an empty file libvirt-qemu.conf to solve the issue of gid mismatch Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* u-boot-xlnx-scr.bbappend: Enable xen boot script using variableJohn Vicky Vykuntapu2024-09-111-2/+4
| | | | | | | | | | | | | | | Xen related boot script offset was override from meta-virtualization for non xen builds. ERROR: RD image overlaps OS image (OS=0xe00000..0x2610000) Add to include xen boot script only if ENABLE_XEN_UBOOT_SCR variable set from the configuration file and xen enabled in DISTRO_FEATURES to avoid override. Signed-off-by: John Vicky Vykuntapu <johnvicky.vykuntapu@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-colorama: drop recipeBruce Ashfield2024-09-091-14/+0
| | | | | | | We no longer need our own pinned version of this recipe, and it causes us issues with meta-python. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix build on qemuarmChen Qi2024-09-052-0/+77
| | | | | | | | | | | | | On qemuarm, time_t is 'long long int', so using '%lu' to print it out will give us the following error: error: format '%lu' expects argument of type 'long unsigned int', but argument 10 has type 'time_t' {aka 'long long int'} [-Werror=format=] So use %llu to print it out. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: dont set polkit permissions manuallyMarkus Volk2024-09-031-9/+0
| | | | | | | | | | | | | According to this commit polkit rules should go to ${datadir} instead of ${sysconfdir}: https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=d5e90541f8e35916abc930b2da6de037b23d51a1 Theres no need to adjust the permissions for ${datadir} anymore: https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=6da0fd21c900e32a0693a6b27d38182f19c8c76c This commit fixes build after: https://git.yoctoproject.org/poky/commit/?id=ef9a927a3af1dd817fe298bbe45470b738d9ce2f Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Fix do_package QA issueWang Mingyu2024-09-031-0/+1
| | | | | | | | | | | When enable multilib, the following do_package QA happens: ERROR: libvirt-v10.5.0+git-r0 do_package: QA Issue: libvirt: Files/directories were installed but not shipped in any package: /usr/lib/sysusers.d /usr/lib/sysusers.d/libvirt-qemu.conf Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* linux-yocto_virtualization.inc: parse MAJOR.MINOR version from PV not ↵Martin Jansa2024-09-031-6/+1
| | | | | | | | | | | | | | | | PREFERRED_VERSION * it was introduced in: https://git.yoctoproject.org/meta-virtualization/commit/?id=a940a0e873f9163d4585555b3f3d38e99400d237 but it doesn't work well when PREFERRED_VERSION is set to e.g. "6.6.%", you remove the '%' but not the trailing dot, causing: ERROR: Nothing PROVIDES 'yocto-cfg-fragments-6.6.-native'. Close matches: yocto-cfg-fragments-6.10-native yocto-cfg-fragments-6.6 yocto-cfg-fragments-6.6-native Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-manager: update RDEPENDS for virt-manager-installKai Kang2024-09-031-1/+7
| | | | | | | | | | | | Update RDEPENDS for package virt-manager-install which are required by command virt-install. For example, the error is as follows when missing virsh: Error launching ['virsh', '--connect', 'qemu:///system', 'console', 'myvm']: [Errno 2] No such file or directory Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt-virsh: rdepends on libvirt-libvirtdKai Kang2024-09-031-0/+1
| | | | | | | | | | | | | virsh can not do anything without libvirt daemon running, such as $ virsh list error: failed to connect to the hypervisor error: Operation not supported: Cannot use direct socket mode if no URI is set So add libvirt-libvirtd to RDEPENDS of libvirt-virsh. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to v1.30.0-tipBruce Ashfield2024-08-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.30.0-387-g20c06a19c, which comprises the following commits: 2562cea42 build(deps): bump the actions group with 2 updates 7472e56e9 Trigger `test` workflow after release branch fast forward 5aa911d5a Update shfmt to v3.9.0 d1e6111e5 Fix space at EOL in actions a15d14d23 fixed token-permission and pinned-dependencies issue 99b02b97b Switch to go 1.23 c36f2b5bd build(deps): bump the gomod group across 1 directory with 8 updates 8e48b06da Add `crun` integration tests 9f47c4738 Fix tab in Info to string, add tests 8e313e986 Vendor Kubernetes v1.31.0 0262d1980 Squash MetaHostPortManager into HostPortManager 6cdc457b6 Drop port-opening code from hostport manager aa6d034d6 Skip storage directory corruption recovery tests on Kata Containers ba0bd3e8b Add crio check sub-command used to check storage for errors 269137ede contrib: temporarily move to crun 1.15 to fix CI 0c7f36a16 Remove custom golang version for runc 211de0d70 build(deps): bump sigstore/cosign-installer in the actions group a79fa8ba4 Make internal repair the new default and disable internal wipe fc7a26bea Allow for storage directory removal to be forced 1a20443b2 Wipe storage only after giving storage.Repair() a chance 1348885f8 Remove orphaned mounts before removing storage directory 5cf0fc68a internal/oci: improve container termination process in killContainer 04143e0e0 build(deps): bump actions/upload-artifact in the actions group 9ee915794 Move config warning for NoSyncLog 6d76b7841 build(deps): bump the actions group with 2 updates 895c2cab8 Make the storage shutdown force unmount images on error 7b058f26b Move log message from HandleUncleanShutdown() function 8f5557429 Replace open-coded repair options with the RepairEverything() helper 46b167de3 Use custom set of checks over the CheckEverything() for storage checks ffcf8ecb3 Log how configuration gets loaded 46ef7a1c5 Update conmon-rs to v0.6.5 af0d3e79d build(deps): bump google-github-actions/upload-cloud-storage f03eef4d8 Run critest in parallel 07addee6b Update nixpkgs c8ff7aec7 Add pause image to dependencies.yaml 3a7bfdfa0 build(deps): bump actions/upload-artifact in the actions group 136b3ed5e build(deps): bump crate-ci/typos in the actions group 32ad0fde5 build(deps): bump golangci/golangci-lint-action in the actions group d1c4129b1 Enable and fix `gomoddirectives`, `gomodguard`, `noctx` and `wastedassign` linters b98f56996 Make container and image removal/stop idempotent 0c0c7f6d2 Fix unshare index c60000697 build(deps): bump ossf/scorecard-action in the actions group a46e1d98a build(deps): bump the gomod group with 5 updates c20d16cfb Trim `crio version Version: …` prefix from `crio -v` a048e1530 Fix trailing whitespace in docs 3d778ed26 Rework no_sync_log to be a runtimes.runtime setting 988444bdd build(deps): bump crate-ci/typos in the actions group 877a4b0fa Fix lint timeout option de0d48a57 build(deps): bump the gomod group across 1 directory with 4 updates b9b7f089e Remove error log message if mountpoint cannot be found 8b4759730 build(deps): bump crate-ci/typos in the actions group 3a256325a Make ImageVolume garbage collection work cfa3f2979 Add documentation for setting up CRI-O with Flatcar b6ad92802 ci: Add timeout value on WaitEvent for TestContainerEvents 6ed96dcaf oci_volumes: require crictl that can request OCI volumes cca74fe23 Use cri-tools master for CI tests 2cd9ad326 Log version only for main CRI-O command 8bc0487a4 Disable network ping tests for actuated runners 6e98e4210 test: config tests should ignore default runtime environment variable c39e8014f Add OCI Volume Source support 04c768a26 test: re-enable hooks.bats in integration tests for kata 3f08208eb test: use kata 3.6.0 for testing 50046c72b test: kata test - set skip_mount_home in storage options 14e5af098 ci: kata-specific testing in integration tests e30e13907 ci: cleanup kata processes during teardown 7f9efe304 ci: enable debug log level for the kata container runtime 2e9d44dbf Use `.gitignore` in nix build excludes c2c0bae26 KEP-3619: implement RuntimeStatus.features.supplemental_groups_policy field f05dac5d5 KEP-3619: update cri-api version 5f66ac000 oci: separate out timer logic from the backoff manager 08180027b oci: move oci-specific code into their respective runtime 8693692a7 test: add test coverage for multiple stop calls c119e524e oci: remove redundant ShouldBeStopped check for stopping containers bf9b5a309 Remove duplicate `exclude_graphdriver_devicemapper` from static builds 0bc0e6c6f Dedup installation docs ff047539d updates pause image to 3.10 b8d9714fe Fix "data loss" description of no_sync_log setting d1a7ee15f build(deps): bump the gomod group across 1 directory with 6 updates 031c6af6b build(deps): bump crate-ci/typos in the actions group e14676520 Remove go-setup from jobs not using golang 0f4ab88eb Remove config migration b3c7ebc43 build(deps): bump actions/setup-go in the actions group 481b25a72 Add table of contents to README.md b4c6af21a Cleanup install docs 8eed3d8e1 Update crio.conf manpage for no_sync_log 6e3685c81 Update manpage for --no-sync-log beae8bd53 server: propagate the pinned status of an image when queried via crictl 5a2e10ea2 Allow disabling fsync on log rotate and pod shutdown 33ceea55e Add automatic markdown table of contents generation 52707b8be Move hostport tests to use ginkgo 6d6149a0b build(deps): bump the actions group with 2 updates bc86390e0 Sanitize CRI-O version set in the User-Agent header fc1bd923a nri: pass around context and log failed pid for not spoofed containers Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to v1.37.1Bruce Ashfield2024-08-201-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.37.1-1-g0117c423e, which comprises the following commits: 67cc51e90 [release-1.37] Bump to Buildah v1.37.1 02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1 f9de1bbd1 Buildah v1.37.0 7de5d5d6e Bump c/storage, c/image, c/common for v1.37.0 6373be5a1 "build with basename resolving user arg" tests: correct ARG use dcf3ea5fd bud-multiple-platform-no-run test: correct ARG use 3e38e5e13 imagebuildah: always have default values for $TARGET... args ready 7f1fe46fc bump github.com/openshift/imagebuilder to v1.2.14 f6f2da76d fix(deps): update module github.com/docker/docker to v27.1.1+incompatible 5e20b928c fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1 54d84483a fix(deps): update module github.com/docker/docker to v27.1.0+incompatible 3ad0fd1ed CI: use local registry, part 2 of 2 52df6e0e0 CI: use local registry, part 1 of 2 2a99f9bcd fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1 b756a3d00 Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1" b1dff416b Replace libimage.LookupReferenceFunc with the manifests version 9bb25a6da conformance tests: enable testing CompatVolumes 1861c1320 conformance tests: add a test that tries to chown a volume a7098c776 imagebuildah: make traditional volume handling not the default b5eafdf55 StageExecutor.prepare(): mark base image volumes for preservation 5940e721c fix(deps): update module github.com/containers/image/v5 to v5.31.1 e2f080554 Vendor in latest containers/(common, storage, image) 5d8b53910 fix(deps): update module golang.org/x/term to v0.22.0 b08c9cf1c fix(deps): update module golang.org/x/sys to v0.22.0 2d172d50e fix(deps): update golang.org/x/exp digest to 7f521ea aa6f75225 fix(deps): update github.com/containers/luksy digest to a8846e2 d6771f81a imagebuildah.StageExecutor.Copy(): reject new flags for now a63fbba3f bump github.com/openshift/imagebuilder to v1.2.11 21fb5ea4f Rework parsing of --pull flags feb17a95c fix(deps): update module github.com/containers/image/v5 to v5.31.1 d79a36fae imagebuildah.StageExecutor.prepare(): log the --platform flag 3a35d2fd6 CI VMs: bump 14f19e980 buildah copy: preserve owner info with --from= a container or image bfa84dfcb conformance tests: enable testing CompatSetParent bfaee577d containerImageRef.NewImageSource(): move the FROM comment to first 66957cc05 commit: set "parent" for docker format only when requested a7224d167 Update godoc for Builder.EnsureContainerPathAs 75ae17c0f fix(deps): update module github.com/spf13/cobra to v1.8.1 a4cdb7879 fix(deps): update module github.com/containernetworking/cni to v1.2.0 6bef4b71c fix(deps): update module github.com/opencontainers/runc to v1.1.13 fe2fd8620 Change default for podman build to --pull missing b9c43961a fix(deps): update module github.com/containers/common to v0.59.1 5afd52fd9 Clarify definition of --pull options 1480f147f buildah: fix a nil pointer reference on FreeBSD 8b0ecd787 Use /var/tmp for $TMPDIR for vfs conformance jobs 0569f3728 Cirrus: run `df` during job setup 5891afffe conformance: use quay.io/libpod/centos:7 instead of centos:8 56fb08092 Stop setting "parent" in docker format ba0947a3d conformance: check if workdir trims path separator suffixes 9565585a6 push integration test: pass password to docker login via stdin afe1a5dd5 Re-enable the "copy with chown" conformance test f552bd57f healthcheck: Add support for `--start-interval` 420beb248 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible a4f32a142 fix(deps): update module github.com/containerd/containerd to v1.7.18 04e5423ae tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork a9e5a1496 Cross-build on Fedora a42019d61 Drop copyStringSlice() and copyStringStringMap() b8c3530cb fix(deps): update module golang.org/x/crypto to v0.24.0 cb302075b fix(deps): update module github.com/openshift/imagebuilder to v1.2.10 e591844e9 Provide an uptime_netbsd.go 30c2e31d8 Spell unix as "!windows" e47ffc831 Add netbsd to lists-of-OSes 159425c45 fix(deps): update golang.org/x/exp digest to fd00a4e bf33b9291 [skip-ci] Packit: enable c10s downstream sync 7602e9e1d CI VMs: bump, to debian with cgroups v2 9521672fd Document when BlobDirectory is overridden 939a58b96 fix secret mounts for env vars when using chroot isolation 7ff83d505 Change to take a types.ImageReference arg e6c7949aa imagebuildah: Support custom image reference lookup for cache push/pull a33fda67a fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0 f39d5fba2 Bump to v1.37.0-dev 671f29870 CI: Clarify Debian use for conformance tests Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.16.0Bruce Ashfield2024-08-201-3/+3
| | | | | | | | Bumping skopeo to version v1.16.0, which comprises the following commits: 88aad2e5 Bump Skopeo to v1.16.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to v1.2.0-rc.2-tipBruce Ashfield2024-08-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.2.0-rc.2-44-g376e875f, which comprises the following commits: cc2078cc Makefile: Add EXTRA_VERSION f4cc3d83 Revert "allow overriding VERSION value in Makefile" 606257c6 Bump golangci-lint to v1.60, fix new warnings adedeb99 ci/gha: add Go 1.23, drop 1.21 be539412 ensure we can download the specific version's go a7c8d86f tests/int: fix "cpu burst" failure on new kernels b437ed30 tests/int: check_{systemd,cgroup}_value: better log 2c398bb4 libct/int/seccomp_test: simplify exit code checks 171304c8 docs/systemd: fix a broken link 1410a698 rootfs: consolidate mountpoint creation logic 6fc2733a document build prerequsites for different platforms 15ec295b ci/gha: bump golangci-lint to v1.59 bb2db7b4 libct: drop error from (*Container).currentState return c8395b6e Enable govet nilness, fix an issue a5e660ca seccomp-notify.bats: add fcntl to the important syscall list e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.0-rc.3Bruce Ashfield2024-08-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.0-rc.3-209-ge8104a485, which comprises the following commits: 93abc2fdd Update hcsshim to v0.12.6 66817fccc script/setup/install-dev-tools: include patch version in versions cd4e24ef7 script/setup/install-dev-tools: update protoc-gen-go-ttrpc to v1.2.5 9e2357f33 docs: add k8s 1.31 to support matrix to RELEASES a3d84a172 docs: update for containerd v2 43568373f docs: Update BUILDING.md ebc47359e use format string when using printf like commands 1027b314a ignore the static check when using anonymous struct in testing f8e075336 remove windows check in linux_test file 20ee6de0b update golangci-lint to v1.60.1 fb8cd045b add go1.23.0 3f53e7a6e build(deps): bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.4 1127908ae build(deps): bump k8s.io/cri-api in the k8s group 6ed54e966 build(deps): bump golang.org/x/sys in the golang-x group 1de84c29f build(deps): bump google-github-actions/upload-cloud-storage a100b055c update to go1.22.6 977604724 migrate to github.com/moby/sys/userns 8ef73c5dd Fix TestNewBinaryIOCleanup on Go 1.23 and Linux 5.4 7d4da0cb2 ctr: shim state query for old shims d59e8a840 ctr: shim state for secondary tasks 32c2d1493 use ctx object from cliContext instead of a creating a new one 349d2b5c1 script/setup/install-runc: fix runc using incorrect version 267fac568 build(deps): bump the golang-x group with 3 updates 6814cc354 build(deps): bump google-github-actions/upload-cloud-storage d036988ee docs/content-flow: fix code fence delimiter 83c26962c Remove extra span created in the instrumented service layer c0cdcb34f Add spans to CRI runtime service and related client methods 0e4f2108b support to syncfs after pull by using diff plugin 551ac0600 Ensure /run/containerd is created with correct perms 4cfeb7b19 core/metadata: migrate sandboxes bucket into v1 a97b11898 Make `StopContainer` RPC idempotent c6cea95d9 Make `StopPodSandbox` RPC idempotent ad24ca960 build(deps): bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3 71b5b34de build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 eddd90d7c remove deprecated pkg/userns 8437c567d pkg/userns: deprecate and migrate to github.com/moby/sys/user/userns 40a315b95 vendor: github.com/moby/sys/user v0.2.0 f9146c051 deprecation: update warnings for CRI config fields 0dcc51aed introspection: regenerate UUID if state is empty abdb4fd77 build(deps): bump the k8s group across 1 directory with 4 updates bc51d4b20 build(deps): bump the otel group across 1 directory with 8 updates 025d1161e build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 81ef46584 KEP-3619: update cri-api version ee2c0d9e7 KEP-3619: implement features.supplemental_groups_policy in RuntimeStatus 2d97134e5 build(deps): bump github.com/containerd/imgcrypt f0aecaa2e Fix TestNewBinaryIOCleanup failing with gotip b41bb6df7 Avoid potential reallocs by pre-sizing some slices a779449c4 vendor: github.com/moby/sys/sequential v0.6.0 1bfa7c8fe vendor: github.com/moby/sys/symlink v0.3.0 95b429c01 vendor: github.com/moby/sys/signal v0.7.1 08d6c9323 vendor: github.com/moby/sys/mountinfo v0.7.2 fb674f8b4 Add resolver workaround for error: name resolver error: produced zero addresses 63b468817 Use grpc.NewClient instead of deprecated ones a5be62993 Vendor GRPC 1.64 1a5c711c3 update documentation for content-flow c8254dfae Include filename in error 9eda0b73a build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5 9315d59bf build(deps): bump tags.cncf.io/container-device-interface 7480de28a Remove static link to images outside of the repository edd84f4a6 Add read permission limit on link workflow 274de35fe updated the domain in the link 807f32573 cri: optimize ListPodSandboxStats with parallelism 7c4de2821 Update cri-tools to v1.30.1 0772d0a37 Fix for `[cri] ttrpc: closed` during ListPodSandboxStats 300fd770a use typeurl funcs for marshalling anypb.Any e1adfaeb9 script/setup/config-containerd: Use slow_chown 89a2cac37 scripts/critest.sh: Prepare for userns tests in runc 63b55e6df build(deps): bump the golang-x group with 2 updates 203cb303e script: bump up imgcrypt version to v1.2.0-rc1 efd441506 client: fix tasks with PID 0 cannot be forced to delete eaa1afe63 Set stderr to empty string when using terminal on Windows. fe5f85c7d Fix incorrect comment about ordering of parent layers 0f76e35fd added the openssf scorecard badge 98544a358 Add file name to device type check failure message Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v5.2.1Bruce Ashfield2024-08-201-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.2.1-5-g679276e136, which comprises the following commits: dbdff97042 Create volume path before state initialization 628446c88c Update Cirrus DEST_BRANCH 30f104cf36 Bump to v5.2.2-dev d0582c9e1e Bump to v5.2.1 1cec5dc24e Update release notes for v5.2.1 8227722c3c [v5.2] Add zstd:chunked test fix 854e0c2eb4 [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1 8f198092d7 libpod: reset state error on init 669767c3a9 libpod: do not save expected stop errors in ctr state 851ec1f81c libpod: fix broken saveContainerError() 6b45888959 Bump to v5.2.1-dev b22d5c61ee Bump to v5.2.0 3f13c38048 Never skip checkout step in release workflow c83c891fb2 Bump to v5.2.0-dev 028bee289e Bump to v5.2.0-rc3 23c6e0fb9f Update release notes for v5.2.0-rc3 784856b6ae Tweak versions in register_images.go d6ae7427f7 fix network cleanup flake in play kube c0f3ce462c WIP: Fixes for vendoring Buildah a8f4c12003 Add --compat-volumes option to build and farm build 8bc493324a Bump Buildah, c/storage, c/image, c/common 4fbcece05f libpod: bind ports before network setup 3f14fcf7c3 pkg/api: do not leak config pointers into specgen 02a932372b build: Update gvisor-tap-vsock to 0.7.4 929c64ecf3 test/system: fix borken pasta interface name checks c231ba8b23 test/system: fix bridge host.containers.internal test b1ad869560 CI: system tests: instrument to allow failure analysis 5da126dc49 Use uploaded .zip for Windows action 5f4acdf227 RPM: podman-iptables.conf only on Fedora 11f56fa42c Bump to v5.2.0-dev 716874f44e Bump to v5.2.0-rc2 d72fefc418 Update release notes for v5.2.0-rc2 5209495865 test/e2e: fix ncat tests b6b61a6a49 libpod: add hidden env to set sqlite timeout 0ecd6fa59f Add support for StopSignal in quadlet .container files 55b6e4c3e8 podman pod stats: fix race when ctr process exits 742d29e9d8 Update module github.com/vbauerster/mpb/v8 to v8.7.4 5e8884ab0d libpod: correctly capture healthcheck output 5a7199015a Bump bundled krunkit to 0.1.2 55749af0c7 podman stats: fix race when ctr process exists 7995e3de53 nc -p considered harmful 182224defb podman pod stats: fix pod rm race e1caf80e81 podman ps: fix racy pod name query 85f4f89810 system connection remove: use Args function to validate f630eebcfa pkg/machine/compression: skip decompress bar for empty file 7100ead475 nc -p considered harmful 46f4044893 podman system df: fix fix ErrNoSuchCtr/Volume race 1413a28409 podman auto-update: fix ErrNoSuchCtr race 02c094425f Fix name for builder in farm connection 2f7fd64e98 700-play.bats: use unique pod/container/image/volume names 380ed3a40d safename: consistent within same test, and, dashes 6d01ce417d 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml 987d15a378 700-play.bats: eliminate $testYaml 48aea083c0 700-play.bats: refactor clumsy yamlfile creation 517c6e6f10 700-play.bats: move _write_test_yaml up near top ed71000e6d chore(deps): update dependency setuptools to v71 3c52ef43f5 Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d) 5666100c2e Remove references and checks for --gpus 1ec3edd3f6 Do not crash on invalid filters 692d2a5b08 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0 59696341b5 Bump to v5.2.0-dev 973e865422 Bump to v5.2.0-rc1 f3e945c86e Keep the volume-driver flag deprecated b28027148b System tests: safe container/image/volume/etc names d26f0ca90f Implement disable default mounts via command line fa75599569 Remove the unused machine volume-driver Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel/cfg: allow multiple kernel configuration optionsBruce Ashfield2024-08-123-3/+54
| | | | | | | | | | | | | | | | | | | When more than one kernel is supported in oe-core, we may have situations where the options from an older (or newer) kernel are not appropriate for the other version (i.e. options have been added, removed or renamed). To support this we check the preferred version of the kernel and depend on a specific yocto-cfg recipe. This is similar to how the virtualization .inc files are chosen. If this technique proves to be correct, we can factor the common routines into a .inc and just set SRCREVs in the individual .bb files. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf/versions: set xen default to 4.19Bruce Ashfield2024-08-081-2/+2
| | | | | | update our default xen version to 4.19 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: drop EOL 4.17 recipesBruce Ashfield2024-08-082-41/+0
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to 4.19Bruce Ashfield2024-08-085-21/+68
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version RELEASE-4.19.0, which comprises the following commits: 026c9fa297 Set 4.19 version df9b8a649f README: make heading say 4.19 b2d2878ab2 Config.mk: Bump tags to 4.19.0 final fe84f5392d CHANGELOG.md: Finalize changes in 4.19 release cycle 6ce22ee4ba SUPPORT.md: Define support lifetime 2d7b6170cc hotplug: Restore block-tap phy compatibility (again) 9d7f7e3444 x86/altcall: fix clang code-gen when using altcall in loop constructs 5eea879049 CHANGELOG.md: Set release date for 4.19 7ae9503645 Turn off debug by default 48acf0fd3e Config.mk: switch to named tags (for stable branch) 57338346f2 x86/IRQ: avoid double unlock in map_domain_pirq() 1ddc8c1bad CI: Add Ubuntu 22.04 (Jammy) and 24.04 (Noble) testing 6db222eb1f CI: Refresh Ubuntu Focal container as 20.04-x86_64 51e5081c6e CI: Refresh Ubuntu Bionic container as 18.04-x86_64 1ab414b915 CI: Refresh Ubuntu Xenial container as 16.04-x86_64 e85ff1f1af CI: Refresh OpenSUSE Leap container a8bc31be01 CI: Refresh OpenSUSE Tumbleweed container 1e66e18806 CI: Refresh and upgrade the GCC-IBT container 248200bd5b CI: Swap to debian for riscv64 build and test a507bd7d1f CI: Introduce debian:11/12-riscv64 containers d46e4264c3 CI: Refresh bullseye-ppc64le as debian:11-ppc64le 155c9d7f1b CI: Use debian:12-ppc64le for smoke testing a2a0ee0eaf CI: Introduce a debian:12-ppc64le container 5e1773dc86 CI: Mark Archlinux/x86 as allowing failures 4b716647f7 CI: Drop Ubuntu Trusty testing 2617d2f141 CI: Drop Debian Stretch testing aabccd1018 CI: Drop Debian Jessie dockerfiles 83754331a7 CI: Remove useless/misleading randconfig jobs 3420cc1a50 CI: Fix CONTAINER_UID0=1 scripts/containerize 5d3e2140bb automation: Use a different ImageBuilder repository URL d49ba6bf8f build: Drop xorg-x11 as a build dependency 47f465d485 build: Drop libiconv as a build dependecy cb3a371469 build: Drop openssl as a build dependency 37810b52d0 tools/libxs: Fix fcntl() invocation in set_cloexec() 8e7c08a336 stubdom: Remove more leftovers of caml-stubdom c4ebeb79d1 CI: Refresh the Coverity Github Action configuration 64cee18837 build: Fix the version of python checked for by ./configure 7cc95f4166 build: Regenerate ./configure with Autoconf 2.71 0d2b87b5ad x86/physdev: Return pirq that irq was already mapped to c2a66d0b58 CI: Rework the CentOS7 container 7878756565 CI: Adjust the usage of inline files aa2b6e4d84 CI: Formalise the use of heredocs 56b77d7db0 build/mkheader: Fix Syntax/DeprecationWarnings 31618bf80e build/mkheader: Remove C-isms from the code 5d8c784783 tools/xs-clients: Fix `make clean` rule 7e3701b6ce xen/vmap: Document the vmap header a771e02594 xen/riscv: use .insn with operands to support the older gas 63c66274d9 xen: Fix XEN_EXTRAVERSION after 4.19-rc1 fb76e08a8f cmdline: "extra_guest_irqs" is inapplicable to PVH 1f56accba3 amend 'cmdline: document and enforce "extra_guest_irqs" upper bounds' 08daa72cdc xen: avoid UB in guest handle field accessors d2fe9ab304 x86/entry: don't clear DF when raising #UD for lack of syscall handler 17f6d398f7 cmdline: document and enforce "extra_guest_irqs" upper bounds a2ff677852 tools/libxs: Fix CLOEXEC handling in xs_fileno() 1957dd6aff tools/libxs: Fix CLOEXEC handling in get_socket() bf7c146470 tools/libxs: Fix CLOEXEC handling in get_dev() 4c3a618b0a tools/dombuilder: Correct the length calculation in xc_dom_alloc_segment() 9ec74bdb25 xen/common: fix build issue for common/trace.c daa90dfea9 pirq_cleanup_check() leaks 4a73eb4c20 Update Xen version to 4.19-rc 7584e39986 Config.mk pin QEMU_UPSTREAM_REVISION (prep for Xen 4.19 RC1) 08f9b1dd9c MAINTAINERS: Step down as maintainer and committer 6d41f5b9e1 automation/eclair: add deviations agreed in MISRA meetings 402e473249 x86/traps: address violations of MISRA C Rule 20.7 bfea273b7b automation/eclair_analysis: clean ECLAIR configuration scripts 8f5581d7e1 x86/irq: address violations of MISRA C Rule 20.7 c7e195fac0 automation/eclair_analysis: address violations of MISRA C Rule 20.7 f39642c308 xen/guest_access: address violations of MISRA rule 20.7 4929fea7bd xen/self-tests: address violations of MISRA rule 20.7 0dca0f2b9a automation/eclair: address violations of MISRA C Rule 20.7 ecadd22a3d CHANGELOG: Add entries related to tracing dde20e47af tools/xenalyze: Remove argp_program_bug_address 188e5f1a80 CHANGELOG.md: Fix indentation of "Removed" section 4712e3b376 Config.mk: update MiniOS commit 853f707cd9 automation/eclair_analysis: deviate and|or|xor|not for MISRA C Rule 21.2 0ac3b175e7 automation/eclair: configure Rule 13.6 and custom service B.UNEVALEFF 11ea49a3fd gnttab: fix compat query-size handling 735865f884 xen: re-add type checking to {,__}copy_from_guest_offset() 93db2f64f3 MAINTAINERS: Update my email address again b14dae96c0 x86/pagewalk: Address MISRA R8.3 violation in guest_walk_tables() 6e07f41b27 common/unlzo: address violation of MISRA C Rule 7.3 c2f4ea4dc9 automation/eclair: add more guidelines to the monitored set 5add709cc6 automation/eclair: add deviations of MISRA C Rule 5.5 912412f97a automation/eclair: add deviation for MISRA C Rule 17.7 c56f1ef577 xen/arm: static-shmem: request host address to be specified for 1:1 domains 908407bf2b xen/riscv: Drop legacy __ro_after_init definition 8c3bb4d8ce xen/gnttab: Perform compat/native gnttab_query_size check ebed411e7a xen/xlat: Sort structs per file 90c1520d4e xen/xlat: Sort out whitespace 6a17e11993 x86/shadow: Don't leave trace record field uninitialized 8765783434 x86/shadow: Rework trace_shadow_emulate_other() as sh_trace_gfn_va() 578066d82b x86/shadow: Introduce sh_trace_gl1e_va() 2e9f8a734e x86/shadow: Rework trace_shadow_gen() into sh_trace_va() ba52b3b624 tools/xl: Open xldevd.log with O_CLOEXEC 9e7c26ad85 libelf: avoid UB in elf_xen_feature_{get,set}() c5746b021e x86/ioapic: Fix signed shifts in io_apic.c 62071a1c16 livepatch: use appropriate type for buffer offset variables e2bb28d621 x86/irq: forward pending interrupts to new destination in fixup_irqs() 74970165ba tools/libs/light: Fix nic->vlan memory allocation f16ac12bd4 hotplug: Restore block-tap phy compatibility 43d5c5d5f7 xen: avoid UB in guest handle arithmetic 267122a24c x86/defns: Clean up X86_{XCR0,XSS}_* constants 71cacfb035 x86/cpuid: Fix handling of XSAVE dynamic leaves fdb7e77fea x86/cpu-policy: Simplify recalculate_xstate() df09dfb94d x86/xstate: Rework xstate_ctxt_size() as xstate_uncompressed_size() a09022a09e x86/boot: Collect the Raw CPU Policy earlier on boot d31a111940 x86/xstate: Cross-check dynamic XSTATE sizes at boot 9e6dbbe8bf x86/xstate: Fix initialisation of XSS cache aba98c8d67 xen/arch: Centralise __read_mostly and __ro_after_init 82f4809447 xen/irq: Address MISRA Rule 8.3 violation efa6e9f15b Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor" 443c488a0b Revert "docs/features/dom0less: Update the late XenStore init protocol" 988f1c7e1f xen/arm: static-shmem: fix "gbase/pbase used uninitialized" build failure 53c5c99e87 docs/features/dom0less: Update the late XenStore init protocol 6f9d90ea94 xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor cb1ddafdc5 xen/arm/static-shmem: Static-shmem should be direct-mapped for direct-mapped domains bd59af9970 xen/ubsan: Fix UB in type_descriptor declaration 369558924a x86/irq: handle moving interrupts in _assign_irq_vector() 817d1cd627 x86/irq: deal with old_cpu_mask for interrupts in movement in fixup_irqs() fa4d026737 x86/Intel: unlock CPUID earlier for the BSP 77b1ed1d02 automation/eclair_analysis: add more clean MISRA guidelines 0f0235e9e9 automation/eclair_analysis: address remaining violations of MISRA C Rule 20.12 8b4243a9b5 xen/docs: Describe static shared memory when host address is not provided 3deac416a3 xen/arm: Implement the logic for static shared memory from Xen heap a21bfc9126 xen/arm: Rework heap page allocation outside allocate_bank_memory 1544d355b5 xen/arm: Parse xen,shared-mem when host phys address is not provided 3e2121ce47 xen/p2m: put reference for level 2 superpage 79a43c8838 xen/arm: Wrap shared memory mapping code in one function e90f8d562d xen/arm: Lookup bootinfo shm bank during the mapping 4fdd8d7556 x86/EPT: drop questionable mfn_valid() from epte_get_entry_emt() 777c71d313 x86/EPT: avoid marking non-present entries for re-configuring 5540b94e81 x86/EPT: correct special page checking in epte_get_entry_emt() b490f470f5 xen/arm: ffa: support notification 452551c723 xen/arm: add and call tee_free_domain_ctx() dd348eb005 xen/arm: add and call init_tee_secondary() 67ef3db45a xen/arm: allow dynamically assigned SGI handlers 282c33cec3 xen/arm: ffa: simplify ffa_handle_mem_share() 4d2b1b5d69 xen/arm: ffa: use ACCESS_ONCE() 66e6e47511 xen/arm: ffa: refactor ffa_handle_call() 401448f2d1 x86/physdev: replace physdev_{,un}map_pirq() checking against DOMID_SELF c7564d7366 x86/irq: limit interrupt movement done by fixup_irqs() 0e8cde5884 x86/irq: describe how the interrupt CPU movement works 171c52fba5 x86/smp: do not use shorthand IPI destinations in CPU hot{,un}plug contexts b0e5352c60 MAINTAINERS: alter EFI section d05d97c090 MAINTAINERS: add me as scheduler maintainer 5ea7f2c9d7 CI: Update FreeBSD to 13.3 43de96a70f automation: add a test for HVM domU on PVH dom0 ea1cb444c2 x86/pvh: declare PVH dom0 supported with caveats 0a5b2ca32c x86/domain: deviate violation of MISRA C Rule 20.12 e63209d3ba x86/irq: remove offline CPUs from old CPU mask when adjusting move_cleanup_count c2d5e63c73 xen: fix MISRA regressions on rule 20.9 and 20.12 5f7606c048 xen/bitops: Rearrange the top of xen/bitops.h 04e70af5f2 xen/bitops: Clean up ffs64()/fls64() definitions 54b10ef6c8 xen/bitops: Implement fls()/flsl() in common logic 5ed26fc076 xen/bitops: Implement ffsl() in common logic 989e5f08d3 x86/bitops: Improve arch_ffs() in the general case ef1dd8dff4 xen/bitops: Implement ffs() in common logic 95ddb7e9b0 xen/bitops: Implement generic_ffsl()/generic_flsl() in lib/ ea59e7d780 xen/bitops: Cleanup and new infrastructure ahead of rearrangements 1408cf7a28 xen/bitops: Delete find_first_set_bit() 03147e6837 arch/irq: Centralise no_irq_type 8aeda4a241 arch/irq: Make irq_ack_none() mandatory 16884ac6c8 CI: Improve serial handling in qemu-smoke-ppc64le.sh 2ff6d17bc3 CI: Use a debug build of Xen for the Xilinx HW tests 1250c73c1a xen/riscv: Update Kconfig in preparation for a full Xen build db04be9e7d x86/hvm: allow XENMEM_machine_memory_map 9a905d7dc6 xen/bitops: Replace find_first_set_bit() with ffs()/ffsl() - 1 1773a74469 xen/page_alloc: Coerce min(flsl(), foo) expressions to being unsigned e807b137f7 ppc/boot: Run constructors on boot 6ef4fa1e7f tools: (Actually) drop libsystemd as a dependency 12f9599a3b Partial revert of "x86/MCE: optional build of AMD/Intel MCE code" 845a60b63b xen/x86: remove foreign mappings from the p2m on teardown 0291089f6e xen: enable altp2m at create domain domctl 8ef1e96a04 xen/x86: account number of foreign mappings in the p2m 0840bc5ea1 xen: Introduce CONFIG_SELF_TESTS 2bc462f645 x86: address violations of MISRA C Rule 8.4 19b6e9f914 x86/MCE: optional build of AMD/Intel MCE code 5effd810c6 x86/MCE: add default switch case in init_nonfatal_mce_checker() 498a4ded74 x86/intel: move vmce_has_lmce() routine to header d27c2835e0 x86/svm: Rework VMCB_ACCESSORS() to use a plain type name 58b3437bae xen/x86: Address two misc MISRA 17.7 violations 2d082710f7 xen/x86: Drop useless non-Kconfig CONFIG_* variables 56d3b24979 xen/lzo: Implement COPY{4,8} using memcpy() 2d93f78bfe x86/traps: address violation of MISRA C Rule 8.4 8b977fe572 CHANGELOG: Mention libxl blktap/tapback support 96af090e33 automation/eclair_analysis: avoid an ECLAIR warning about escaping 841f437a8b docs/misra: exclude gdbsx from MISRA compliance 1eba1fe18d automation/eclair_analysis: add already clean rules to the analysis 4bc8dc01a3 automation/eclair_analysis: set MISRA C Rule 10.2 as clean ac572152e5 docs: Add device tree overlay documentation 2c4fbadf73 tools: Introduce the "xl dt-overlay attach" command 4c733873b5 xen/arm: Add XEN_DOMCTL_dt_overlay and device attachment to domains 1c77496bc8 xen/arm/gic: Allow adding interrupt to running VMs 6f588194d9 tools/arm: Introduce the "nr_spis" xl config entry 1d2b4f3049 xen/arm, doc: Add a DT property to specify IOMMU for Dom0less domUs c8cbc5eb1c tools/xl: Correct the help information and exit code of the dt-overlay command 2172a01c4c tools/xenalyze: Ignore HVM_EMUL events harder 320e644616 x86/hvm/trace: Use a different trace type for AMD processors 701190abb3 xen/arm: Set correct per-cpu cpu_core_mask 2a40b106e9 tools/xentrace: Remove xentrace_format ae26101f6b tools: Drop libsystemd as a dependency caf8644826 tools/{c,o}xenstored: Don't link against libsystemd 78510f3a15 tools: Import stand-alone sd_notify() implementation from systemd 219cdff3fb LICENSES: Add MIT-0 (MIT No Attribution) 9e58da32cc xen/arm: mem_access: Conditionally compile mem_access.c d6a7fd8303 vpci: add initial support for virtual PCI bus topology 9c831e429c vpci/header: emulate PCI_COMMAND register for guests 7db7bd0f31 arm/vpci: honor access size when returning an error 2c15fa332e x86: detect PIT aliasing on ports other than 0x4[0-3] 249affc129 x86/PIT: supply and use #define-s e6ed98863b xen/riscv: add required things to current.h 3cd46d4ec8 xen/riscv: introduce atomic.h 51dabd6312 xen/riscv: introduce cmpxchg.h 9f482c6a7e xen/x86: Simplify header dependencies in x86/hvm 212cb5effa iommu/x86: print RMRR/IVMD ranges using full addresses 3a3111d018 xen/livepatch: make .livepatch.funcs read-only for in-tree tests ced21fbb28 x86_64/cpu_idle: address violations of MISRA C Rule 20.7 1b0b050bd6 x86_64/uaccess: address violations of MISRA C Rule 20.7 670b7ec65d x86/hvm: address violations of MISRA C Rule 20.7 1b9311da4b x86/vpmu: address violations of MISRA C Rule 20.7 bba4eb88fd xen/common/dt-overlay: Fix lock issue when add/remove the device 24dbf5bd03 x86/p2m: Add braces for better code clarity ed1ac3e968 xen/riscv: introduce vm_event_*() functions 7e036f7e0c xen/riscv: introduce monitor.h 44b69e9c17 xen/x86: pretty print interrupt CPU affinity masks 9c5444b01a xen/trace: Drop old trace API aa60520cd3 xen/trace: Removal final {__,}trace_var() users in favour of the new API 26da08059e xen: Switch to new TRACE() API d64693df1a xen/sched: Clean up trace handling df50666449 xen/rt: Clean up trace handling ab8bc19850 xen/credit2: Clean up trace handling e978b462ec xen/trace: Introduce new API 26b122e3bf tools/xen-cpuid: Drop old names bbb5c171d7 tools/xen-cpuid: Use automatically generated feature names e96fefdb06 tools/xen-cpuid: Rename decodes[] to leaf_info[] f79189cb29 x86/gen-cpuid: Minor cleanup 54aa34fc89 tools/golang: Add missing golang bindings for vlan 594b22ca5b x86/msi: prevent watchdog triggering when dumping MSI state 21611c6870 include/ctype.h: fix MISRA R10.2 violation 53dc37829c xen/arm: Add DT reserve map regions to bootinfo.reserved_mem d946787a27 xen/arm64: lib: Use the generic xen/linkage.h macros fe1b97d321 xen/arm64: cache: Use the generic xen/linkage.h macros c9906bd79e xen/arm64: mmu/head: Add missing code symbol annotations 8151fe503c xen/arm64: bpi: Add missing code symbol annotations fdba3ff11f xen/arm64: debug: Add missing code symbol annotations fba250ae60 xen/arm64: head: Add missing code symbol annotations 78ce1dc625 xen/arm64: sve: Add missing code symbol annotations 8d92a26a41 xen/arm64: smc: Add missing code symbol annotations 1125f3529c xen/arm64: entry: Add missing code symbol annotations 977d98e67c x86/ucode: Further fixes to identify "ucode already up to date" ae7584f636 x86/p2m: move altp2m-related code to separate file f1fa994d89 x86/MCE: guard {intel/amd}_mcheck_init() calls 71b5eccbdd x86/MCE: guard access to Intel/AMD-specific MCA MSRs a3ec23a940 x86/vpmu: separate amd/intel vPMU code 6628bacc81 xen/bitops: put __ffs() into linux compatible header d0c6114058 x86: detect PIC aliasing on ports other than 0x[2A][01] c09960a1a2 x86: allow to suppress port-alias probing 762a848223 automation/eclair_analysis: deviate macro count_args_ for MISRA Rule 20.7 7fe9679db9 automation/eclair_analysis: fully deviate MISRA C Rules 21.9 and 21.10 abd00b037d x86/mtrr: avoid system wide rendezvous when setting AP MTRRs 0cc01c603f tools/xl: add vlan keyword to vif option 3bc14e4fa4 tools/libs/light: Add vlan field to libxl_device_nic e27fc7d15e tools/xentop: Fix cpu% sort order 9b7d793889 tools/hvmloader: Further simplify SMP setup 8a78d89881 x86/cpufreq: Rename cpuid variable/parameters to cpu 7270fdc7a0 x86: respect mapcache_domain_init() failing d104a07524 xen/sched: set all sched_resource data inside locked region for new cpu 319a5125ca xen/console: fix Rule 10.2 violation 46aa3031ae docs/misra: add R21.6 R21.9 R21.10 R21.14 R21.15 R21.16 9110072b76 x86/io: Don't cast away constness in read{b..q}() 2d8d7481ca Revert "evtchn: refuse EVTCHNOP_status for Xen-bound event channels" 90a1bc9e82 xen: Use -Wuninitialized and -Winit-self 0b01395c44 xen: Use -Wflex-array-member-not-at-end when available d31d0665f1 automation/eclair_analysis: tag MISRA C Rule 1.1 as clean 531d3bea5e libxl: Fix handling XenStore errors in device creation b2cd07a044 x86/hvm: Allow access to registers on the same page as MSI-X table e9607d4061 x86/msi: Extend per-domain/device warning mechanism 5cc7347b04 libxl: fix population of the online vCPU bitmap for PVH 996576b965 xen: allow up to 16383 cpus b0082b9083 automation/eclair: hide reports coming from adopted code in scheduled analysis f4cd14e502 automation/eclair_analysis: amend configuration for some MISRA rules 93c27d54dd xen/arm: Fix MISRA regression on R1.1, flexible array member not at the end 1672df9ebd xen/kernel.h: Import __struct_group from Linux 53959cb830 x86/boot: Refactor pvh_load_kernel() to have an initrd_len local 49c810e867 x86/boot: Explain how moving mod[0] works fcefb2a247 x86/IOMMU: address violations of MISRA C:2012 Rule 14.4 3d1033c911 automation/eclair: add deviation of MISRA C:2012 Rule 14.4 14424d90e1 xen/pci: address violations of MISRA C Rule 20.7 8e22c78e17 xen/unaligned: address violation of MISRA C Rule 20.7 1dd6b50dc4 x86/hvm: Defer the size calculation in hvm_save_cpu_xsave_states() 752ec9a9b1 tools/hvmloader: Wake APs with hypercalls rather than INIT+SIPI+SIPI 754a29cacf tools/hvmloader: Move various helpers to being static inlines 1c6112b8f5 xen/gunzip: Move crc state into gunzip_state 7a4483358f xen/gunzip: Move bitbuffer into gunzip_state d386a383dd xen/gunzip: Move output count into gunzip_state fd273a5690 xen/gunzip: Move input buffer handling into gunzip_state 461eacc76b xen/gunzip: Move window position into gunzip_state 02e32883f3 xen/gunzip: Introduce struct gunzip_state and refactor window 473156eec6 xen/gunzip: don't leak memory on error paths 648db37a15 x86/ucode: Distinguish "ucode already up to date" 3c228e24b2 automation/eclair_analysis: unblock pipelines from certain repositories 0c79b7bc9b automation/eclair_analysis: tag MISRA C Rule 8.2 as clean. e8e8afee99 svm: Fix MISRA 8.2 violation a2330b51df x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake f4f2f3402b tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC ebab808eb1 x86/platform: correct #undef in compat checking d7032b4ca2 AMD/IOMMU: add helper to check whether ATS is to be used for a device b5996ab284 VT-d: parse ACPI "SoC Integrated Address Translation Cache Reporting Structure"s 426dbf404e VT-d: tidy error handling of RMRR parsing 692f6199bd automation/eclair: add deviation for Rule 16.4 50a4f7c177 docs/misra: add Terms & Definitions section to rules.rst 6654248f22 ppc/riscv: fix arch_acquire_resource_check() b801ccfe7e drivers/char: address violation of MISRA C Rule 20.7 04e31583ba VT-d: correct ATS checking for root complex integrated devices f95cd010cb xen/Kconfig: Drop the final remnants of ---help--- 2d4ba20559 tools/tests: let test-xenstore exit with non-0 status in case of error 642005e310 tools/tests: don't let test-xenstore write nodes exceeding default size feb9158a62 automation/eclair: make explicit there are no adopted files by default 7556f46a9b automation: do not allow failure for triggered analyses c1aa6fb5f6 automation/eclair: tag Rule 7.2 as clean and temporarily remove Rules 1.1 and 8.2 9e30bd8f4a x86/cpu-policy: Annotate the accumulated features b819bd65f4 revert "x86/mm: re-implement get_page_light() using an atomic increment" bf0059282d xen/riscv: improve check-extension() macro 08e79bba73 xen/x86: Fix Syntax warning in gen-cpuid.py 647f7e50eb xen/xsm: Wire up get_dom0_console abc68e78a3 x86/MCE: guard call to Intel-specific intel_get_extended_msrs() 64b21662b1 x86/msi: passthrough all MSI-X vector ctrl writes to device model be5b08dd6e xen-livepatch: fix --force option comparison 13893a58e2 xen/spinlock: use correct pointer a505890d81 x86/entry: shrink insn size for some of our EFLAGS manipulation fd4ff921f7 gzip: clean up comments and fix code alignment 232ee07c23 arm/vpci: make prefetchable mem 64 bit a0e29b3163 CI: Drop glibc-i386 from the build containers 4edbbcd0c0 automation/eclair: reorganize pipelines 23cd1207e7 VMX: no open-coding in vmx_get_cpl() 7ea3a3e44f MAINTAINERS: Update my email address 656ae8f109 x86/spec: adjust logic that elides lfence 049ab0b2c9 x86/spec: fix reporting of BHB clearing usage from guest entry points 6d5111b10e tools/ocaml: Fix warnings in config.ml 524eee7ce0 x86/hap: Refactor boolean field assignments bd5213384b x86/shadow: correct shadow_vcpu_init()'s comment 9a73b4e210 x86/paging: vCPU host mode is always set 8c01d0e336 x86/msr: add suffix 'U' to MSR_AMD_CSTATE_CFG macro ea3272f845 x86/pci: add suffix 'U' to PCI_CONF_ADDRESS macro 62a72092a5 livepatch: introduce --force option fb2716a191 xen-livepatch: fix parameter name parsing 4a75f2ffc0 x86/mm: address violations of MISRA C Rule 20.7 445f66fe00 x86/debugreg: address violation of MISRA C Rule 20.7 c717d52a5d x86/vhpet: address violations of MISRA C Rule 20.7 4f900035a4 x86/acpi: address violations of MISRA Rule 20.7 0440fcad2a x86/pci: address violation of MISRA C Rule 20.7 489d13da93 xen/spinlock: address violations of MISRA C Rule 20.7 0d02b75d7c xen/page-defs: address violation of MISRA C Rule 20.7 8189230d80 libelf: address violations of MISRA C Rule 20.7 d7c4d59b51 libxl: Support blktap with HVM device model 76a484193d hotplug: Update block-tap 31d6b5b4a7 automation: Add arm64 test for running Xen with GICv3 db49973411 automation: Add arm{64,32} earlyprintk jobs c05b97fc7a automation: Drop some of the non-debug variants of the same Arm jobs 7846f7699f xen/arm: List static shared memory regions as /memory nodes 51a2b3f109 xen/arm: fix duplicate /reserved-memory node in Dom0 a0fee882c1 xen/arm: remove shm holes from extended regions 2b557af192 xen/arm: Reduce struct membank size on static shared memory e5816ad4e8 xen/arm: Introduce helper for static memory pages 9f657d8832 xen/arm: Avoid code duplication in check_reserved_regions_overlap b3e66aa1c2 xen/arm: Avoid code duplication in find_unallocated_memory e13499b3c4 xen/arm: Conditional compilation of kernel_info.shm_mem member 2209c1e35b xen/arm: Introduce a generic way to access memory bank structures 8d5ff14477 xen/arm: Pass struct kernel_info parameter to make_{resv,shm}_memory_node 6d14a742f8 xen/arm: avoid repetitive checking in process_shm_node ab327c8e8b xen/arm: remove stale addr_cells/size_cells in assign_shared_memory 6c04a0bf2c tools/golang: Run `go vet` as part of the build process 9c08a88ad0 golang/xenlight: Ensure comments aren't interpreted as docstrings 27c176d298 tools/golang: When returning pointers, actually allocate structrues 0d19d3aab0 svm/nestedsvm: Introduce nested capabilities bit 410ef33439 x86/monitor: allow fast-singlestepping without enabling singlestep monitor 77e25f0e30 x86/MTRR: correct inadvertently inverted WC check f82c43a384 xen: introduce header file with section related symbols 70d46b51e2 docs/man: Add xenwatchdog manual page 9c872b5766 tools/misc: Add xenwatchdogd.c copyright notice e906bfae48 tools/misc: xenwatchdogd enhancements f0fa75c9ea tools/misc: xenwatchdogd: add parse_secs() 43a0706986 x86/rtc: Avoid UIP flag being set for longer than expected cccb7878f3 x86/pvh: zero VGA information c3b40c95da x86/video: add boot_video_info offset generation to asm-offsets 93d6e6efa8 automation/eclair_analysis: substitute deprecated service STD.emptrecd bc5827fad1 xen/riscv: check whether the assembler has Zbb extension support 1fc166d6cd xen/domain: deviate MISRA C Rule 16.2 violation 480179bc26 x86/PVH: Use unsigned int for dom0 e820 index 09cb855f33 x86/svm: Add flushbyasid in the supported features 5495ed0cd2 eclair_analysis: deviate x86 emulator for Rule 16.2 1d2d283818 xen/riscv: add minimal stuff to page.h to build full Xen 58798e3f1f xen/riscv: introduce io.h 5b33845adf xen/ppc: mm-radix: Replace debug printing code with printk 78d980071a x86/MCE: move intel mcheck init code to separate file 8763eb782b xen/gzip: Drop huffman code table tracking 052cf1dcdf xen/gzip: Remove custom memory allocator 492fe0778b xen/gzip: Drop unused define checks 489a46c177 x86/emul: Simplify segment override prefix decoding 4cd66fb56d xen/efi: Rewrite DOS/PE magic checking without memcmp() 02fbb2d591 docs/misra: mark the gzip folder as adopted code 2a9a19be13 Revert "public: s/int/int32_t" 83e081b29e docs: arm: Update where Xen should be loaded in memory afab29d088 public: s/int/int32_t ad363fb17d docs/misra: add Rule 16.4 487838f13a docs/misra/rules.rst: add rule 5.5 c0f890cd9d docs/hypercall-abi: State that the hypercall page is optional cfb922bb7d xen/gzip: Colocate gunzip code files af4cd0a6a6 altcall: fix __alt_call_maybe_initdata so it's safe for livepatch 09abf1b61b libxl: devd: Spawn QEMU for 9pfs 3c7482b73c libxl: Use vkb=[] for HVMs 2b31a1f055 xen/include: move definition of ASM_INT() to xen/linkage.h 6cb501e3e6 MAINTAINERS: Update livepatch maintainers 86c008aa5d tools/misc: xenwatchdogd: add static qualifier 5d09f8cbdc tools/misc: rework xenwatchdogd signal handling 0668d35594 tools/misc: xenwatchdogd: use EXIT_* constants c304bdf1e7 xen/acpi: Allow xen/acpi.h to be included on non-ACPI archs 2145512e21 xen/xsm: address violation of MISRA C Rule 16.2 bbbbd024e8 x86/hvm: address violations of MISRA C Rule 16.2 eeab8c4619 xen/domctl: address violations of MISRA C Rule 16.2 f509d39d5b x86/efi: tidy switch statement and address MISRA violation 24f204748e x86/irq: tidy switch statement and address MISRA violation 3b51a812e0 x86/cpuid: address violation of MISRA C Rule 16.2 6af626c1da x86/vlapic: tidy switch statement and address MISRA violation 478002370c x86/emul: Adjust X86EMUL_OPC_EXT_MASK to placate MISRA 761358b9eb xen/spinlock: Adjust LOCK_DEBUG_INITVAL to placate MISRA e5b93b70d5 xen/vPCI: Remove shadowed variable 52bde26c1c xen/nospec: Remove unreachable code d0a718a45f x86/hvm: Fix Misra Rule 19.1 regression d37c184236 xen/virtual-region: Drop setup_virtual_regions() 038ba305fd xen/virtual-region: Link the list build time 3434518d05 xen/virtual-region: Rework how bugframe linkage works 337f11ea73 xen/link: Introduce a common BUGFRAMES definition 0e7ea8ca5f x86/Kconfig: Introduce CONFIG_{AMD,INTEL} and conditionalise ucode 2eea952b70 x86/ucode: Move vendor specifics back out of early_microcode_init() f48299cad5 docs/misra: document the expected sizes of integer types dfc9455b80 MAINTAINERS: Become a reviewer of iMX8Q{M,XP} related patches 2f85a6d9f5 xen/drivers: imx-lpuart: Replace iMX8QM compatible with iMX8QXP 71d4356544 xen/arm: Add imx8q{m,x} platform glue a9fa825008 x86/entry: Fix build with older toolchains d5887c0dec x86/spec-ctrl: Support the "long" BHB loop sequence 689ad48ce9 x86/spec-ctrl: Wire up the Native-BHI software sequences 954c983abc x86/spec-ctrl: Software BHB-clearing sequences 62a1106415 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI c94e210592 x86/tsx: Expose RTM_ALWAYS_ABORT to guests 0b66d7ce3c x86: Drop INDIRECT_JMP 8e186f98ce x86: Use indirect calls in reset-stack infrastructure 45dac88e78 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields 97c5b8b657 x86/vmx: Add support for virtualize SPEC_CTRL 40dea83b75 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_* 2378d16a93 x86/spec-ctrl: Simplify DO_COND_IBPB 9607aeb660 x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR} 22390697bf x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV 94896de1a9 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_* c62673c433 x86/spec-ctrl: Rename spec_ctrl_flags to scf 489d93cd0f x86/spec-ctrl: Fix BTC/SRSO mitigations 4b3da946ad x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests 4be1fef1e6 x86/alternatives: fix .init section reference in _apply_alternatives() 9926e692c4 hypercall_xlat_continuation: Replace BUG_ON with domain_crash 6a98383b08 x86/HVM: clear upper halves of GPRs upon entry from 32-bit code 672b26b66e drivers: char: Enable OMAP UART driver for TI K3 devices c079823df6 xen/compiler: address violation of MISRA C Rule 20.9 dfc9fab003 x86/PVH: Support relocatable dom0 kernels 4d3b8669d8 libelf: Store maximum PHDR p_align 77b219f915 xen/rwlock: raise the number of possible cpus c286bb93d2 xen/spinlock: support higher number of cpus 0b09531d21 xen/spinlock: let all is_locked and trylock variants return bool bfbec024b8 xen/spinlock: split recursive spinlocks from normal ones 31be78285c xen/spinlock: add missing rspin_is_locked() and rspin_barrier() ee1e133125 xen/spinlock: add another function level 3696a9f27d xen/spinlock: add explicit non-recursive locking functions 402c2d3e66 MISRA C Rule 17.1 states: "The features of `<stdarg.h>' shall not be used" ea33a6e1e3 MISRA C:2012 Rule 17.1 states: The features of `<stdarg.h>' shall not be used 80d28865e1 automation/eclair: add deviations for Rule 20.7 6bdb67d19e arm/public: address violations of MISRA C Rule 20.7 e9b0f8b690 x86: Address MISRA Rule 13.6 b33f191e3c x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch 270588b9b2 char: lpuart: Drop useless variables from UART structure 4932163b35 drivers: char: Drop useless suspend/resume stubs in Arm drivers 6eeb3e86bd vsprintf: address violations of MISRA C:2012 Rule 16.3 226bdb155b xen/sched: address violations of MISRA C:2012 Rule 16.3 21e0c8fc0e tools: Move MB/GB() to common-macros.h 4c41749852 tools/init-xenstore-domain: Replace variable MB() usage 1e6cd4155d xen/riscv: introduce extension support check by compiler 7b02b505bb automation: introduce fixed randconfig for RISC-V 6117179dd9 docs/misra: add 13.6 to rules.rst 538ab07bad xen/arm: ffa: support FFA_FEATURES be75f686eb xen/arm: ffa: separate rxtx buffer routines bded3e6467 xen/arm: ffa: separate partition info get routines 8836867200 xen/arm: ffa: separate memory sharing routines bb584ec036 xen/arm: ffa: move common things to ffa_private.h b21cbaf6ba xen/arm: ffa: rename functions to use ffa_ prefix ac682fbac1 xen/vm-event: address a violation of MISRA C:2012 Rule 16.3 cde0c58714 xen/evtchn: address a violation of MISRA C:2012 Rule 16.3 163ea7d9a8 console: address a violation of MISRA C:2012 Rule 16.3 2c205ce5c0 xen/domctl: address a violation of MISRA C:2012 Rule 16.3 795c4e367b x86/amd: address violations of MISRA C Rule 20.7 da88f434bc xen/mm: address violations of MISRA C Rule 20.7 5811fb4816 x86/hvm: address violations of MISRA C Rule 20.7 a9b2a72926 x86/vPMU: address violations of MISRA C Rule 20.7 dd5101a616 drivers/char: mark extra reserved device memory in memory map 7a09966e7b x86/spec-ctrl: Move __read_mostly data into __ro_after_init 3c9e76cd87 x86/mm: Refine address alignment checks in modify_xen_mappings_lite() 8f85af65af tools/oxenstored: Re-format 0cd50753eb nestedsvm: Disable TscRateMSR 4f8b0e94d7 x86: Move SVM features exposed to guest into hvm_max_cpu_policy e3883336bb xen/efi: efibind: address violations of MISRA C Rule 20.7 853c71dfbf xen/elfnote: Specify ELF Notes are x86-specific 7d8c9b4e8d libelf: Expand ELF note printing 8802230bfa Revert "xen/x86: bzImage parse kernel_alignment" f6a4139948 x86/public: address violations of MISRA C Rule 20.7 a65d9988ad x86/hvm: address violations of Rule 20.7 e2eeb1b753 xen/page_alloc: address violations of MISRA C Rule 20.7 cab6de6a95 xen: address MISRA C Rule 20.7 violation in generated hypercall 7757981d94 xentrace: address violation of MISRA C Rule 20.7 12a3b90c2a xen/list: address violations of MISRA C Rule 20.7 6f6de10ade xen/xsm: add parentheses to comply with MISRA C Rule 20.7 4b60085b6e xen/console: add comment about external console lock helper 03e484a4f6 x86/vcpu: relax VCPUOP_initialise restriction for non-PV vCPUs d654612e98 xen/riscv: add minimal stuff to processor.h to build full Xen 5095b610df EFI: Introduce inline stub for efi_enabled on !X86 && !ARM cbe393b709 Revert "xen/page_alloc: introduce preserved page flags macro" ee973396f0 x86/cpuid: More AMD features 5205bda5f1 x86/p2m: Coding style cleanup 97b90f9bf2 xen/ppc: Ensure ELF sections' physical load addresses start at 0x0 10e8d824b7 AMD/IOMMU: drop remaining guest-IOMMU bits too cc950c49ae x86/PoD: tie together P2M update and increment of entry count f5c2b6da26 xen/page_alloc: introduce page flag to stop buddy merging 75214d5e53 xen/page_alloc: introduce preserved page flags macro 6eb13b6b1d tools/xl_parse: remove message for tsc mode string eaafbd1134 docs/parse-support-md: Handle BulletList 188fa82305 xen/vpci: Improve code generation in mask_write() 131892e0dc x86/boot: Support the watchdog on newer AMD systems f658321374 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly 9e18f33983 x86/boot: Improve the boot watchdog determination of stuck cpus d2276b86e5 xen/nospec: Include <xen/stdbool.h> d9e709e8c0 xen/wait: address violations of MISRA C Rule 20.7 239b72d874 xen/notifier: address violations of MISRA C Rule 20.7 88822d5fbd xen/arm: smmu: address violations of MISRA C Rule 20.7 8e7207d512 EFI: address violations of MISRA C Rule 20.7 b51d7f39dc xen/device_tree: address violations of MISRA C Rule 20.7 9979cc594a x86/cpufeature: add parentheses to comply with Rule 20.7 a02174c6c8 amd/iommu: clean up unused guest iommu related functions b053075d1a xen/spinlock: make struct lock_profile rspinlock_t aware cc3e8df542 xen/spinlock: add rspin_[un]lock_irq[save|restore]() c9aca2a1f6 xen/spinlock: rename recursive lock functions 475080b6b2 xen/spinlock: introduce new type for recursive spinlocks a97de92e76 IOMMU: store name for extra reserved device memory 62018f0870 x86/mm: use block_lock_speculation() in _mm_write_lock() d92a67b60c xen/sched: address violations of MISRA C Rule 20.7 f93d8dd519 automation/eclair: allow parameter name "unused" a5b90a90ee MAINTAINERS: remove myself from various positions ad52857efc MAINTAINERS: drop AMD IOMMU and Intel VT-d sections 8a8d5c22af perfc: add pseudo-keyword fallthrough 53b5208de8 x86/svmdebug: Print np, sev and sev_es vmcb bits 2f09f797ba x86/svm: Drop the suffix _guest from vmcb bit d638e304f1 SUPPORT.MD: Fix matrix generation after 43c416d0d819 and 77c39a53cf5b 77c39a53cf xen/arm: arm32: Add emulation of Debug Data Transfer Registers 43c416d0d8 xen/arm: arm64: Add emulation of Debug Data Transfer Registers bd06cf74fc xen/arm: Introduce CONFIG_PARTIAL_EMULATION and "partial-emulation" cmd option af7fed3fdf xen/spinlock: remove misra rule 21.1 violations 68e008db0c xen: avoid grep fodder define and undef 70e549fd44 MAINTAINERS: Remove myself from several subsystems a6081d0176 x86/svm: Drop the _enabled suffix from vmcb bits d2686bf964 xen/compiler: deviate the inline macro for MISRA C Rule 20.4 3945b61ddb xen/lz4: address violations of MISRA C:2012 Directive 4.10 ec2587ab4b x86/mtrr: address violations of MISRA C:2012 Directive 4.10 13a7b0f9f7 restrict concept of pIRQ to x86 4dc9a8b060 automation/eclair_analysis: deviate certain macros for Rule 20.12 03cf7ca23e x86: protect conditional lock taking from speculative execution 42a572a38e x86/mm: add speculation barriers to open coded locks 197ecd838a locking: attempt to ensure lock wrappers are always inline f218daf6d3 percpu-rwlock: introduce support for blocking speculation into critical regions a1fb15f616 rwlock: introduce support for blocking speculation into critical regions 7ef0084418 x86/spinlock: introduce support for blocking speculation into critical regions c4f427ec87 xen: Swap order of actions in the FREE*() macros fb5b6f6744 x86/spec-ctrl: Mitigation Register File Data Sampling 1eb91a8a06 x86/spec-ctrl: VERW-handling adjustments f7603ca252 x86/spec-ctrl: Rename VERW related options 0a666cf2cd x86/spec-ctrl: Perform VERW flushing later in exit paths 475fa20b73 x86/vmx: Perform VERW flushing later in the VMExit path 7c81558208 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite() 1396892d80 xen/ppc: switch PPC to use asm-generic/device.h e90089db3f arm/smmu: address some violations of MISRA C Rule 20.7 acb13d1b81 x86/irq: parenthesize negative constants 22d0e3487f xen/arm: address some violations of MISRA C Rule 20.7 d937b2d1ee xen/param: address violations of MISRA C Rule 20.7 e51649b4c2 xen/include: address violations of MISRA C Rule 20.7 9106769ea9 xen/spinlock: address violations of MISRA C Rule 20.7 c44cac2290 xen/x86: bzImage parse kernel_alignment bf7a2eaede features.h: Replace hard tabs 698c35184c xen/domain.h: Centrialize is_domain_direct_mapped() 8395f275eb MAINTAINERS: drop AMD SVM and Intel VT-x sections 8ef780a1cf xen/mem-access: ifdef inclusion of <asm/mem_access.h> 136fff30b3 xen/asm-generic: introduce stub header monitor.h ef31ffbc3d automation/eclair: add deviation for MISRA C:2012 Rule 16.6 90173fc5a2 tools/9pfsd: Fix build error caused by strerror_r b52c45b1bd MAINTAINERS: add an entry for tools/9pfsd b083b1c393 x86/livepatch: Relax permissions on rodata too ef969144a4 xen/virtual-region: Include rodata pointers 989556c6f8 xen/virtual-region: Rename the start/end fields 08bb338f09 SUPPORT.md: add xen-9pfsd 49b664f5bf x86/asm: add commas to further macros definitions/invocations 4ad4df0964 CHANGELOG: add an entry for 9pfsd 9249a441c9 x86/asm: add commas to BUILD_BUG_ON 5daf46b439 Kbuild: simplify as-insn a little 2f7481d592 x86/EFI: correct compiler probing 66c8e9b76c tools/xentop: Add VBD3 support to xentop f4900d6d69 9pfsd: allow building with old glibc e14fece7d4 xen/{RISCV,PPC}/xen.lds: Delete duplicate _erodata definitions cd53ee9c41 SUPPORT.md: clarify support of booting 32-bit Xen on ARMv8 e7b62fcfd9 x86: i387.c cleanup 57acad12a0 hvmloader/PCI: skip huge BARs in certain calculations 91ed573391 xen/riscv: introduces acquire, release and full barriers cfbcfce494 Argo: don't obtain excess page references fc84b4a5a3 xen/tasklet: address violations of MISRA C Rule 20.7 47fdf9a79f xen/errno: address violations of MISRA C Rule 20.7 771c4e3963 xen/arm: smmuv3: address violations of MISRA C Rule 20.7 9174674c3b arch: move array_index_mask_nospec() 2d514678a3 hvmloader: suppress GNU ld 2.39 warning about RWX load segments 856664f774 docs/misra/rules.rst: add rule 14.4 c40bc0576d x86/mm: re-implement get_page_light() using an atomic increment de17162caf x86/cpu-policy: Allow for levelling of VERW side effects 0263dc9069 tests/resource: Fix HVM guest in !SHADOW builds e2d8a65225 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies 5420aa165d x86/cpu-policy: Hide x2APIC from PV guests efad36f1ba docs/misra/rules.rst: Fix entry for 20.12 rule 4cac80e226 docs/misra/rules.rst: add rule 16.6 and 20.12 e1de3a0536 automation/eclair: tag MISRA C:2012 Rule 8.2 as clean b87697fc1a automation/eclair: fully deviate MISRA C:2012 Rules 5.7 and 18.7 635dd1120a pci: fix locking around vPCI removal in pci_remove_device() d388673d1b tools/xenstored: have a single do_control_memreport() 8937d44628 tools/xenstored: support complete log capabilities in stubdom 2a750fcf7d tools/xenstored: add helpers for filename handling 0a999849c8 tools/xenstored: mount 9pfs device in stubdom 254c6f787c stubdom: extend xenstore stubdom configs 90c0b97e27 config: update Mini-OS commit 7159164bee xen/riscv: introduce nospec.h c20850540a x86/altcall: always use a temporary parameter stashing variable c103bb8ad4 x86: remove redundant XEN_SHSTK check from reinit_bsp_stack() b36d850c22 docs: Move function and macro properties in docs/misra 6d05d52940 x86/memsharing: use an atomic add instead of a cmpxchg loop d4f3d35f04 libxl: Fix segfault in device_model_spawn_outcome 54fd7b9974 xen/livepatch: group and document payload hooks e579677095 xen/livepatch: properly build the noapply and norevert tests cdae267ce1 xen/livepatch: fix norevert test attempt to open-code revert d2daa40fb3 xen/livepatch: search for symbols in all loaded payloads a57b4074ab xen/livepatch: register livepatch regions when loaded 195e75371b x86: Resync intel-family.h from Linux b2b3d40f9a xen/arm: Fix arm32 build failure when early printk is enabled ba0d1a7ced xen/lib: introduce generic find next bit operations 801c4e7262 tests/vpci: fix unit tests after locking change 576528a2a7 x86/spec: do not print thunk option selection if not built-in 8441fa806a x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled 6e9507f7d5 x86/spec: print the built-in SPECULATIVE_HARDEN_* options 52ebde3cfa vpci/header: program p2m with guest BAR view 622bdd9628 vpci/header: handle p2m range sets per BAR 99eeb2eb0b rangeset: add rangeset_purge() function fe62abfcb2 rangeset: add RANGESETF_no_print flag 8c5bca7074 vpci/header: implement guest BAR register handlers e262826159 vpci/header: rework exit path in init_header() f20dde9259 vpci: add hooks for PCI device assign/de-assign 80b0eb095a vpci: restrict unhandled read/write operations for guests 4f78438b45 vpci: use per-domain PCI lock to protect vpci structure cfe3ad6712 x86: re-run exception-from-stub recovery selftests with CET-SS enabled 91f5f7a915 x86: account for shadow stack in exception-from-stub recovery 28154a245c x86: document how stub exception recovery works 7356bb5e47 xen/arm: ffa: reclaim shared memory on guest destroy ca7c872c70 xen: introduce Kconfig function alignment option 84b9617c03 xen/ppc: address violations of MISRA C:2012 Rule 11.8 150e7a4e79 automation: remove bin86/dev86 from tumbleweed image 37541208f1 x86/entry: Introduce EFRAME_* constants 0603a0c092 x86/entry: Simplify expressions in compat_restore_all_guest() 7d3c91377d x86/entry: Adjustments to "reduce assembly code size of entry points" 6f1b280876 docs/sphinx: Start an FAQ, and add Kconfig/CET details 03fb5f503c nestedsvm: Remove bogus debug message from nestedsvm_check_intercepts 2beef32b42 xen/hvm: Move other hvm_function_table booleans into the caps bitfield 42b8e78b37 svm: Improve type of cpu_has_svm_feature 5cd5e3070b xen/hvm: Convert hap_capabilities into a bitfield 60e00f77a5 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled 21051291ad automation: Rework "build-each-commit-gcc" test 56a9641359 x86: Dom0 "broken ELF" reporting adjustments 164daecb18 x86/HVM: limit upcall vector related verbosity 8de3afc0b4 xen: move BUG_ON(), WARN_ON(), ASSERT(), ASSERT_UNREACHABLE() to xen/bug.h 2ce562b2a4 x86/altcall: use a union as register type for function parameters on clang ef101f5251 xen/cmdline: fix printf format specifier in no_config_param() 001d7fdb55 xen/consoled: drop return value from consoled_guest_rx/tx f49fb70d3d x86/hpet: use an atomic add instead of a cmpxchg loop f0622dd4fd xen/livepatch: fix norevert test hook setup typo 92babc88f6 Revert stubdom+xenstore 9pfs changes f5e1c527d0 tools/xenstored: have a single do_control_memreport() a76f8809f1 tools/xenstored: support complete log capabilities in stubdom 93892648ff tools/xenstored: add helpers for filename handling 297a2587e6 tools/xenstored: mount 9pfs device in stubdom e21d9dbf44 tools: add 9pfs device to xenstore-stubdom 0b761781c4 stubdom: extend xenstore stubdom configs 4287a71f9b tools/xl: support new 9pfs backend xen_9pfsd ab5a6b5986 tools/libs/light: add backend type for 9pfs PV devices 098d868e52 tools/oxenstored: Make Quota.t pure b6cf604207 tools/oxenstored: Use Map instead of Hashtbl for quotas 7e5b662b28 x86/altp2m: p2m_altp2m_get_or_propagate() should honor ap2m->default_access 98e79be5b6 xen/*/asm-offset: Fix bad copy&paste from x86 812bdc99f4 xen-analysis.py: Accept deviation comment at the end of the line d064b429b6 xen-analysis.py: Substitute only the comment instead of the line ddd6696fc6 xen-analysis.py: Use named group for tag regex 8c5e4ce145 consolidate do_bug_frame() / bug_fn_t f75b051f78 x86/APIC: drop regs parameter from direct vector handler functions 4da40a267a IRQ: drop regs parameter from handler functions b31e753fe7 serial: drop serial_[rt]x_interrupt()'s regs parameter e1e0579afa PV-shim: drop pv_console_rx()'s regs parameter 4f09e51027 serial: drop serial_rx_fn's regs parameter feb338d843 keyhandler: drop regs parameter from handle_keyregs() ba3c8373cd serial: fake IRQ-regs context in poll handlers 9ee7dc877b x86emul: make run32 test harness goal work again cb319824bf x86emul: add missing EVEX.R' checks 54557ee9b4 x86/uaccess: add attribute noreturn to __{get,put}_user_bad() d34e5fa2e8 build: make sure build fails when running kconfig fails bb1619ed4f tools/9pfsd: add missing va_end() in fill_data() d9fe1d743f Constify some parameters 512f88a92d xen/riscv: use some asm-generic headers a4a790f432 gnttab: fully ignore zero-size copy requests 97883aa269 libxl: Disable relocating memory for qemu-xen in stubdomain too f8791d0fd3 xen/arm: Make hwdom vUART optional feature 981f722efa xen/asm-generic: fold struct devarch into struct dev c0dd41e055 xen/arm: switch Arm to use asm-generic/device.h c2263735f5 xen/asm-generic: introduce generic device.h c144b9e324 x86: Reduce assembly code size of entry points 1eb013ef97 libxl: Add "grant_usage" parameter for virtio disk devices f93629b18b build: Replace `which` with `command -v` 4917b9a423 mm: add the __must_check attribute to {gfn,mfn,dfn}_add() 0441c3acc7 xen/arm: fixmap: Rename the fixmap slots to follow the x86 convention 78398afae1 tools/xen-9pfsd: add 9pfs read request support e93172d57d tools/xen-9pfsd: add 9pfs write request support 01c569f3fc tools/xen-9pfsd: add 9pfs stat request support 34449f8cf0 tools/xen-9pfsd: add 9pfs create request support 052a3a7fd9 tools/xen-9pfsd: add 9pfs clunk request support 7c0d5f3cac tools/xen-9pfsd: add 9pfs open request support 9615e40f47 tools/xen-9pfsd: add 9pfs walk request support 27815b5f8f tools/xen-9pfsd: add 9pfs attach request support bcec59cf7f tools/xen-9pfsd: add 9pfs version request support 7809132b1a tools/xen-9pfsd: add 9pfs response generation support 8219809423 tools/xen-9pfsd: add transport layer d43c72a785 tools/xen-9pfsd: connect to frontend c3e583b01b tools: add a new xen 9pfs daemon c4d6802d33 docs: add a best practices coding guide d9bfc2810e iommu/x86: fix IVMD/RMRR range checker loop increment d670c1a38b libxl: Fix comment for LIBXL_HAVE_VMTRACE_BUF_KB 40da8a7e4b tools: add access macros for unaligned data 03e08d44c8 tools/xentop: add option to display dom0 first d9d4c5a142 libxl: Allow Phy backend for CDROM devices 4e41947bad libxl: Create empty file for Phy cdrom 4f2c81d509 xen/riscv: define an address of frame table 9bb281d328 Argo: drop meaningless mfn_valid() check b3bea912a7 docs/misra: add asm-offset.c to exclude-list a185f88e98 iommu/vt-d: switch to common RMRR checker e45801dea1 iommu/x86: introduce a generic IVMD/RMRR range validity helper e72f951df4 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path 2fb516157f xen/riscv: introduce event.h a541ddadec xen/riscv: introduce time.h af46249ad8 xen/riscv: introduce regs.h 4988704e00 xen/riscv: introduce p2m.h 6cb8ced1e8 xen/riscv: introduce irq.h ebb64781dd xen/riscv: introduce smp.h 05ff18b4f0 xen/riscv: introduce flushtlb.h 392c0c871d xen/riscv: introduce setup.h f9f339d33f xen: avoid generation of empty asm/iommu.h 2c162e2f69 xen/riscv: introduce guest_atomics.h d42ebc95e2 xen/riscv: introduce cpufeature.h 4c13f9c3fc xen: add support in public/hvm/save.h for PPC and RISC-V 6d7d8d2b3e libxl: Add support for blktap vbd3 cbbca7be4a x86/p2m: make p2m_get_page_from_gfn() handle grant case correctly 772380f754 eclair: remove wrongly added -eval_file 897def94b5 x86/hvm: Fix fast singlestep state persistence a773adedbd x86/PV32: restore PAE-extended-CR3 logic 4e5bd87d24 config: update Mini-OS commit 06024b2619 xen/serial: Drop serial_{put,get}c e36c106b0b tools/ocaml: Add missing vmtrace_buf_kb field 837e5144ac x86: convert misc assembly function annotations 00ae55ad76 SVM: convert entry point annotations e11f576650 xen/arm: Fix UBSAN failure in start_xen() f4519ee87e eclair: move function and macro properties outside ECLAIR 38ae4739d8 xen/ns16550: address violations of MISRA C:2012 Rule 13.1 e8f1bb803f block-common: Fix same_vm for no targets 878159bf25 VMX: tertiary execution control infrastructure 59a69674b5 automation: Switch yocto-qemux86-64 job to run on x86 57a923bfd9 golang: Regen binding 02c6ad4515 x86/entry: Reduce assembly instruction size 80b01e20d0 x86/paging: Use more specific constant 83afa31358 amd-vi: fix IVMD memory type checks 8ac8999d70 x86/srat: vmap the pages for acpi_slit 861d987726 xen/numa: vmap the pages for memnodemap f940facaa3 acpi: vmap pages in acpi_os_alloc_memory ef0873946c xen/vmap: Introduce vmap_size() and use it 2213b5a293 setup: Move vm_init() before acpi calls 1cb7949b37 xen/evtchn: Remove useless assignment in evtchn_alloc_unbound() 3ce2e1f606 tools/xenstored: map stubdom interface 097388d520 tools/xenstored: split domain_init() 5edc819ed5 tools/xenstored: rework ring page (un)map functions a3e37f7024 tools/xenstored: get own domid in stubdom case e199a30680 tools/xenstored: move all socket handling into posix.c aae54458a1 tools/xenstored: move all log-pipe handling into posix.c 511cc30cf8 tools/xenstored: move systemd handling to posix.c e767a98f04 tools/xenstored: add early_init() function 1c2c7f7901 tools/xenstored: rename xenbus_evtchn() 9c076988fe tools/helpers: allocate xenstore event channel for xenstore stubdom 29f17d8374 tools/xentop: fix sorting bug for some columns 10e0fb655d x86/cpu: Fix mixed tabs/spaces 9eee78988c xen/bitmap: Deduplicate __bitmap_weight() implementations 930605f155 x86/ucode: Remove accidentally introduced tabs 660f8a7501 x86/CPU: convert vendor hook invocations to altcall e931edccc5 x86/guest: finish conversion to altcall 044168fa3a x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking() 3f819af8a7 xen: Remove debugger.h d182f9feae x86: Remove gdbstub 583f1d0950 x86/spec-ctrl: Expose BHI_CTRL to guests 478e4787fa x86/spec-ctrl: Expose RRSBA_CTRL to guests 4dd6760706 x86/spec-ctrl: Expose IPRED_CTRL to guests c852ca5c05 tools/ocaml: Bump minimum version to OCaml 4.05 558e84b7ff xen/bitmap: Consistently use unsigned bits values 4f0b0ffff3 x86/traps: Annotate {l,c}star_enter() as nocall fb22c33d17 x86/boot: Add braces in reloc.c ae6d4fd876 xen/sched: Fix UB shift in compat_set_timer_op() 9d701bc9ab x86/hvm: Fix UBSAN failure in do_hvm_op() printk 8e36c668ca xen: Drop superfluous semi-colons 4c2d50d586 xen/arm: Properly clean update to init_ttbr and smp_up_cpu bc45f20c01 shim: avoid building of vendor IOMMU code 9916fdff4b IOMMU: iommu_use_hap_pt() implies CONFIG_HVM 1aee91fe98 xen/page_alloc: introduce init_free_page_fields() helper 18cd984905 xenpm: Print message for disabled commands d3df0f180f x86/PoD: simplify / improve p2m_pod_cache_add() cc6ba68edf VT-d: Fix "else" vs "#endif" misplacement cb4ecb3cc1 pci: fail device assignment if phantom functions cannot be assigned 4a7e71aa08 x86/iommu: cleanup unused functions 0e1bd15a1d x86/iommu: switch hwdom IOMMU to use a rangeset 79fcc0e9d7 x86/iommu: remove regions not to be mapped 40a7467702 x86: purge NMI_IO_APIC 4396761654 x86/APIC: purge {GET,SET}_APIC_DELIVERY_MODE() 1097878338 NUMA: no need for asm/numa.h when !NUMA a75c5aa2b2 xen/vmap: Check the page has been mapped in vm_init_type() c378ff8983 x86/entry: fix jump into restore_all_guest without %rbx correctly set dbdd7e8df7 xen/arm64: head: Use PRINT_ID() for secondary CPU MMU-off boot code 9a5114074b arm/smpboot: Move smp_up_cpu to a new section .data.idmap 5ed59e62c6 arm/mmu: Move init_ttbr to a new section .data.idmap b24b540de6 x86/entry: Avoid register spilling in cr4_pv32_restore() 024e7131be tools: don't expose XENFEAT_hvm_pirqs by default 72cad62abb x86/hvm: make X86_EMU_USE_PIRQ optional cf7fe8b72d x86/ucode: Fix stability of the raw CPU Policy rescan 052d78fbec pmstat: Limit hypercalls under HWP e047b8d0fa x86/entry: replace two GET_CURRENT() uses f575f05524 x86/NMI: refine "watchdog stuck" log message 610775d0dd x86/p2m-pt: fix off by one in entry check assert 98ae35cab0 x86/entry: Fix ELF metadata for NMI and handle_ist_exception 55fbecb64e x86/kexec: Drop compatibility_mode_far bbf7d6acd3 xen/riscv: introduce guest_access.h f132bb5b6b xen/riscv: introduce domain.h f67bddf3bc IRQ: generalize [gs]et_irq_regs() 79519fcfa0 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets) 2cfdbd5863 PPC: switch entry point annotations to common model 4900c939cb tools/binfile: switch to common annotations model 7015f337a2 RISC-V: annotate entry points with type and size ae08d0c304 Arm: annotate entry points with type and size 9de79317e8 x86: also mark assembler globals hidden b3a9037550 x86: annotate entry points with type and size df2209f9b7 common: assembly entry point type/size annotations 85ba4d050f x86/MCE: switch some callback invocations to altcall 9f58616ddb x86/MCE: separate BSP-only initialization 1212af3e8c x86/PV: avoid indirect call for I/O emulation quirk hook e9e0eb30d4 x86/MTRR: avoid several indirect calls 1bc07ebcac core-parking: use alternative_call() b25607e528 xen: Fold exit paths in find_text_region() c30021be30 xen/livepatch: Make check_for_livepatch_work() faster in the common case 86d0edda34 x86/cpuid: Change cpuid() from a macro to a static inline 3643bb53a0 x86/vmx: Disallow the use of inactivity states d1f8883aeb x86/vmx: Fix IRQ handling for EXIT_REASON_INIT 6522ef73fd x86/vmx: Collect all empty VMExit cases together 730d2637a8 x86/HPET: avoid an indirect call 467ae515ca cpufreq: finish genapic conversion to altcall b1cc53753c x86/APIC: finish genapic conversion to altcall 6bdb965178 x86/intel: ensure Global Performance Counter Control is setup correctly f3f6c500e2 xen/arm64: head: Allow to use early printk while on 1:1 mapping d5a2ff06b1 xen/arm32: head: Move earlyprintk 'hex' to .rodata.idmap c2ce346647 CirrusCI: drop FreeBSD 12 cd574f3ed8 x86/vPMU: drop regs parameter from interrupt functions 7a3bd1cbc4 x86/vIRQ: split PCI link load state checking from actual loading 69c89dd787 x86/vPIC: check values loaded from state save record c53013da6f x86/vPIT: check values loaded from state save record c3c6e9b8e8 x86/HVM: adjust save/restore hook registration for optional check handler 5b6cab423c x86/HVM: split restore state checking from state loading 5e600b4fb9 NUMA: limit first_valid_mfn exposure 137c08aa07 xen/riscv: introduce system.h cef805dce4 x86emul: support SM4 390777414a x86emul: support SM3 aa18530282 x86emul: support SHA512 c8bb7553f2 x86emul: support AVX-VNNI-INT16 1ec3fe1f66 xen/arm32: head: Improve logging in head.S 410837189e xen/arm: bootfdt: Harden handling of malformed mem reserve map 89c384c525 xen/common: Don't dereference overlay_node after checking that it is NULL 0f9a688f60 xen/arm32: head: Rework how the fixmap and early UART mapping are prepared c27c8922f2 x86/iommu: introduce a rangeset to perform hwdom IOMMU setup 48193fe00a x86/HVM: drop tsc_scaling.setup() hook 0b5f149338 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware f628fc8d18 VMX: drop vmx_virt_exception and make vmx_vmfunc static 2467ab2a74 x86/mwait-idle: fix ubsan warning cc5a436002 xen/public: add some more 9pfs xenstore paths 589d8cf146 xen: ifdef inclusion of <asm/grant_table.h> in <xen/grant_table.h> 42b814b7ff xen/asm-generic: introduce stub header softirq.h e2c7111d65 xen/asm-generic: introduce generic div64.h header 5a3ace21f3 xen/arm: smmu-v3: address violations of MISRA C:2012 Rule 16.3 49818cde63 xen: remove asm/unaligned.h f61685f1fa xen: make include/xen/unaligned.h usable on all architectures 23db507a01 x86/amd: Extend CPU erratum #1474 fix to more affected models b74c735f88 xen/xmalloc: XMEM_POOL_POISON improvements 3909fb4692 docs/misra: exclude files inherited from ACPI CA from MISRA compliance 773db8f307 x86/platform: tidy do_platform_op() a little 6ccd2501b4 x86/mm: use "break" in arch_memory_op() 8862c7b8b6 pci: introduce per-domain PCI rwlock f4d0859da3 pci: msi: pass pdev to pci_enable_msi() function 94039d97e2 amd-vi: set IOMMU page table levels based on guest reported paddr width ad3a4b7c76 x86/p2m: move and rename paging_max_paddr_bits() 6efc654a0b tools/xg: Reserialise CPU policies with the allocated number of leaves. ecabcd0d4e xen/bug: Complete outstanding TODO 5f7fd392d9 driver/char: Drop run_in_exception_handler() ifdefary 1fa104ee7a tools/pygrub: Drop compatibility symlink e9786ba9ee xen/arm: mmu: address a violations of MISRA C:2012 Rule 16.3 2750111969 xen/arm: guest_walk: address violations of MISRA C:2012 Rule 16.3 f1e956cdbf xen/arm: traps: address violations of MISRA C:2012 Rule 16.3 7d18ab2b9b xen/arm: gic-v3: address violations of MISRA C:2012 Rule 16.3 18828f00e4 automation/eclair_analysis: fix typo in deviation. 5171930429 docs/misra/rules.rst: add Rule 17.1 913a177416 x86/IO-APIC: correct RTE polarity comment e6cb988a3d xen/common: address violations of MISRA C:2012 Rule 11.8 9d8c3bc887 xen: remove unused function ERR_CAST 23a5fb3df7 xen: add deviations for Rule 11.8 1fb1d3e77f xen/arm: address violations of MISRA C:2012 Rule 11.8 725acf8e4d xen/arm: vcpreg: address violation of MISRA C Rule 2.1 2a0f5a11f2 xen/arm: traps: add ASSERT_UNREACHABLE() where needed c877b90928 xen/arm: address MISRA C:2012 Rule 2.1 51ffb33118 xen: move declaration of first_valid_mfn to xen/numa.h fba913a21a docs/misra: add entries to exclude-list ed45dd16c4 automation/eclair: update configuration of MISRA C:2012 Rule 5.6 a128d8da91 automation/eclair: add deviations for MISRA C:2012 Rule 16.3 1b42304fd1 xen/arm: ffa: return fpi size from FFA_PARTITION_INFO_GET 05b6368ba0 x86: don't open-code max_page calculation nor pfn_to_paddr() 11126964d8 automation/eclair_analysis: avoid violation of MISRA Rule 2.1 bfd52e979d xen/shutdown: address MISRA C:2012 Rule 2.1 36a05926b0 xen/wait: address violations of MISRA C Rule 11.9 e66237eb1a x86/hvm: dom0: use helper to get sizeof struct field 985fe473c0 x86/ioapic: use NULL as a null pointer constant 0940d34291 xen/hvm: use NULL as a null pointer constant 3af0a4f922 iommu/vt-d: do not assume page table levels for quarantine domain 64d32b75e6 x86: allow non-BIGMEM configs to boot on >= 16Tb systems 0cc74376d6 x86/hvm: address a violation of MISRA C:2012 Rule 11.8 abdee7b1db x86/boot: address violations of MISRA C:2012 Rule 11.8 b736154e89 xen/efi: address violations of MISRA C:2012 Rule 11.8 5fbb3e9da9 xen/arm64: address violations of MISRA C:2012 Rule 11.8 a57680db1a xen/x86_emulate: address violations of MISRA C:2012 Rule 14.4 c714b8807b xen/x86: add missing instances of asmlinkage attributes c6dbc6df52 xen: fix compilation issue of serial.c d2ab1347bd xen: add RISCV support for pmu.h fa469c5a86 xen/riscv: add public arch-riscv.h a60067f398 docs/misra/rules.rst: add Rule 16.2 896c191786 automation/eclair_analysis: file exclusion automation cad6f9a4c1 smp: move cpu_is_offline() definition 68e6b7fc11 tools/libs/evtchn: fix locking in Mini-OS 75571e162b xen/arm: ffa: return FFA_RET_NOT_SUPPORTED on unhandled calls a236b74b96 xen/arm: don't pass iommu properties to hwdom for iommu-map 666e3c294d xen/iommu: address leftover violation of MISRA C:2012 Rule 8.2 75b6bcbd9e xen/drivers: address violations of MISRA C:2012 Rule 8.2 76ecfc517d x86/include: address violations of MISRA C:2012 Rule 8.2 b9905a04e4 xen/compat: address violations of MISRA C:2012 Rule 8.2 abdbf82448 MAINTAINERS: add me as Mini-OS maintainer 56c633bc8e xen/riscv: define bug frame tables in xen.lds.S a6a8fe0eb1 Revert "xen: make include/xen/unaligned.h usable on all architectures" 8fe6219d83 Revert "xen: remove asm/unaligned.h" 7fca0463c7 xen/spinlock: make spinlock initializers more readable a77fcbc389 xen/spinlock: reduce lock profile ifdefs 35431ecb9d xen/arm: smmu: move phys_addr_t definition to linux-compat.h 889af18eee xen/sched: address MISRA C:2012 Rule 2.1 f0bb77bf73 AMD/IOMMU: address violations of MISRA C:2012 Rule 8.2 6d5e94ca7d x86/mm: address violations of MISRA C:2012 Rule 8.2 fbc8cff877 x86/mm: remove compat_subarch_memory_op() 431ada87e5 xen/acpi: address violations of MISRA C:2012 Rule 8.2 190b7f49af xen/arm: page: Avoid pointer overflow on cache clean & invalidate 0fb4b6b0ea MAINTAINERS: Hand over the release manager role to Oleksii Kurochko 6619c6f891 xen: remove asm/unaligned.h 6c4be49503 xen: make include/xen/unaligned.h usable on all architectures 3e3ff7f9cd xen/arm: set -mno-unaligned-access compiler option for Arm32 cf40abbc7f tools/xenstored: potentially split trace_io() out message 1403131596 x86/viridian: make build_assertions static f45e488e7b docs/misra/rules.rst: add more rules 519c7a1d58 xen: address violations of MISRA C:2012 Rule 14.4 807321b6f3 x86/acpi: remove acpi_pic_sci_set_trigger() bc4fe94a69 tools/libs/evtchn: replace assert()s in stubdom with proper locking e6e8c5831a Config: Update MiniOS revision d2b7c442b4 CODING_STYLE: Add a section of the naming convention 25147005da xen/sched: do some minor cleanup of sched_move_domain() 23792cc0f2 xen/sched: fix sched_move_domain() 02d0a615b3 xen/arm: bootfdt: Check return code of device_tree_for_each_node() c4ccad6f3f tools/xenstored: remove the "-R" command line option cc6609eed2 tools/xenstored: remove the "-P" command line option cddc66b1ea tools/xenstored: remove "-V" command line option 98f2cb76f6 tools/xenstored: remove "-D" command line parameter dbe69e1c85 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3 add7046baf Revert "x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3" d4bfd38998 xen/hypervisor: Don't use cc-option-add for -Wdeclaration-after-statement 40be6307ec Only compile the hypervisor with -Wdeclaration-after-statement 59df285131 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3 e4c0489ec5 xen/pci: address violations of MISRA C:2012 Rule 8.2 24b2672695 x86/mce: address violations of MISRA C:2012 Rule 8.2 8b0dc4a88f x86/page: address violations of MISRA C:2012 Rule 8.2 fa9171ed05 config: update Mini-OS commit 2e5e9ec4ff x86/vPIC: vpic_elcr_mask() master bit 2 control 634c6e15ac x86/HVM: introduce hvm_get_entry() 55cd2eaec3 xen/riscv: introduce spinlock.h 204aa245df xen/riscv:introduce asm/byteorder.h 3e5672d69f automation/eclair: tag function calls to address violations of MISRA C:2012 Rule 13.1 1ff6d92938 automation/eclair: add deviations for MISRA C:2012 Rule 5.6 d97d6a7f08 docs/misra: deviate deliberately unused labels 4c6142a1ab CI: Fix fallout from adding elfutils-dev to the build container 01da0aeecd ns16550: remove partial explicit initializer 948e033031 automation/alpine: add elfutils-dev afb2692c47 ubsan: Introduce CONFIG_UBSAN_FATAL to panic on UBSAN failure ff11780620 xen/domain: fix error path in domain_create() d830b0a7bc xen/vpci: header: filter PCI capabilities a3c8fb450a xen/vpci: header: status register handler 6f7db3e0a0 xen: address violations of MISRA C:2012 Rule 11.8 3e7a3f08ce bump default SeaBIOS version to 1.16.3 06e8d65d33 xen/sched: fix adding offline cpu to cpupool 787d11c5aa x86emul: avoid triggering event related assertions 93d913c6e6 xen/public: fix flexible array definitions 80a7669afd x86/p2m: address a violation of MISRA C:2012 Rule 8.3 f0a00ab1a6 x86/p2m: preparation work for xenmem_add_to_physmap_one() 525c7c094b xen/arm: Move static event channel feature to a separate module 1571ff7a98 tools/xg: Fix potential memory leak in cpu policy getters/setters 02ef46b675 .gitignore: generalize *.new cd1a4a5709 docs/misra: add entry to exclude-list.json ebd7074dd0 xen/arm: mmu: add headers for missing declarations e7c4b68738 xen/serial: address a violation of MISRA C:2012 Rule 8.2 498c130104 xen/perfc: address a violation of MISRA C:2012 Rule 8.2 5dc781b4af xen/param: address a violation of MISRA C:2012 Rule 8.2 13832e2367 xen/kernel: address a violation of MISRA C:2012 Rule 8.2 80aeb9ccec xen/iommu: address violations of MISRA C:2012 Rule 8.2 59f31d970f xen/notifier: address violations of MISRA C:2012 Rule 8.2 24dbf93ebd xen/domain: address violations of MISRA C:2012 Rule 8.2 def73fc144 automation/eclair: improve scheduled analyses e5aba2909c docs/misra: fix a typo in rules.rst 829b4731df automation: Switch u-boot boot command to bootz for arm32 tests f0dd0cd959 docs/misra: add guidance on the format of Dir 4.1 docs for ECLAIR ddf664a557 automation/eclair: make the docs for MISRA C:2012 Dir 4.1 visible to ECLAIR 2f848d3cee arm/bitops: encapsulate violation of MISRA C:2012 Rule 10.1 902377b690 xen/livepatch: fix livepatch tests b3d3267286 cirrus-ci: update FreeBSD versions 92696bf052 xen/arm64: Move print_reg macro to asm/arm64/macros.h 7e1f5b68ac xen/asm-generic: introduce generic header altp2m.h f1ac700b44 xen/asm-generic: introduce generalized hardirq.h 7c20d1616d xen/asm-generic: introduce generic header percpu.h 18f3095654 xen/asm-generic: introduce stub header <asm/random.h> f6082c7b6c xen/asm-generic: introduce generic header iocap.h 2ae2a306f4 xen/asm-generic: introduce generic hypercall.h 94854f1419 xen/asm-generic: introduce stub header paging.h 90309854fd xen/x86: In x2APIC mode, derive LDR from APIC ID 8b15717518 xen/dmi: address a violation of MISRA C:2012 Rule 8.2 022d7d87cc xen/cpumask: address violations of MISRA C:2012 Rule 8.2 b0356bc0e0 xen/acpi: address violations of MISRA C:2012 Rule 8.2 07551414ca xen/console: address violations of MISRA C:2012 Rule 8.2 84eba1dc6d xen: remove <asm/delay.h> 72ec070930 xen: replace some occurrences of SAF-1-safe with asmlinkage attribute caa221791d domain: add ASSERT to help static analysis tools 18540a313c arm/dom0less: introduce Kconfig for dom0less feature d7d80e7a32 xen/arm: Move static memory build code in separate modules 8d2c3ab18c arm/dom0less: put dom0less feature code in a separate module dcb92d4ef1 xen/arm: Add asm/domain.h include to kernel.h 4a6962fa7f arm/gicv2: make GICv2 driver and vGICv2 optional 72d51813d6 x86: amend cpu_has_xen_{ibt,shstk} 17754972fa x86/atomic: address violations of MISRA C:2012 Rule 11.8 fc63c0ebef AMD/IOMMU: address violations of MISRA C:2012 Rule 11.8 fe26cb2dd2 x86/boot/reloc: address violations of MISRA C:2012 Rule 11.8 09c2fe438d x86/platform_hypercall: address violations of MISRA C:2012 Rule 11.8 82182ad7b4 livepatch: do not use .livepatch.funcs section to store internal state 46f2e2c3bc xen/mm: address violations of MISRA C:2012 Rules 8.2 and 8.3 b82b867a66 x86/mm: preparation work to uniform modify_xen_mappings* interfaces fbcec32d6d x86/mem_sharing: Release domain if we are not able to enable memory sharing b9eeb19926 x86/mem_sharing: Fix typo in comment 80c153c48b xen/sort: address violations of MISRA C:2012 Rule 8.2 a66b02a6b6 x86/vPIC: correct vpic_domain() 9b3476f13e xen/iommu: use ISOLATE_LSB to wrap a violation of Rule 10.1 80d72670ad xen/vmap: use ISOLATE_LSB to wrap a violation of Rule 10.1 de4f3cf327 x86_64/mm: express macro CNT using ISOLATE_LSB 02d754aa55 xen/pdx: amend definition of PDX_GROUP_COUNT f02829592e x86emul/test: fold AVX512VL scatter/gather test blobs with AVX512F ones 03d6720a4c tools/pygrub: Restrict depriv operation with RLIMIT_AS 2d63785a8a tools/pygrub: Fix expression before it's copied elsewhere de577641cf tools/pygrub: Fix bug in LIMIT_FSIZE env variable override c789c7ff7e tools/pygrub: Set mount propagation to private recursively 16a0e16dab tools/python: add .gitignore file 9b1972dff5 tools/pygrub: add .gitignore file 5d4b948169 xen/efi: Drop image_name from efi_arch_handle_cmdline() f96e2f6457 xen/MISRA: Remove nonstandard inline keywords 563193de85 x86/apic: Drop the APIC_MSR_BASE constant e39cbf52b1 x86/apic: Drop atomic accessors 9153b64bea xen: Enable -Wwrite-strings b1185ce66c arm/efi: Simplify efi_arch_handle_cmdline() ef2071d45b x86/efi: Simplify efi_arch_handle_cmdline() 858e3bf349 x86/setup: Rework cmdline_cook() to be compatible with -Wwrite-strings 0dd3231330 x86/setup: Clean up cmdline handling in create_dom0() 1e2b13bcf0 xen/arm: gicv3: clean up GICD_CTRL write 8f45862580 xen/xalloc: address violations of MISRA C:2012 Rule 8.2 382257af0c xen/vmap: address violations of MISRA C:2012 Rule 8.2 764851a8be xen/serial: address violations of MISRA C:2012 Rule 8.2 89c1784f5f xen/common: address violations of MISRA C:2012 Rule 8.2 5c72b54b65 x86: add asmlinkage macro to variables only used in asm code 3ea5918ead x86/ACPI: constify acpi_enter_sleep argument 843265ad0b x86/cpuid: enumerate and expose PREFETCHIT{0,1} 9dfc824590 x86emul: deal with decode failure in predicates test c22fe7213c automation: switch to multi-platform images when possible 3b2ba63994 automation: set architecture in docker files b78b4de1c5 automation: update tests to use Debian Bookworm b5739330d7 automation: fix jessie/stretch images to use archive.debian.org apt repos 7440355a29 automation: add Xen timestamps to all tests 24532be907 automation: remove com1= parameter on QEMU smoke tests b576497e3b automation: remove CR characters from serial output 4b99ce89eb config: update Mini-OS commit e536a49754 stubdom: Remove caml-stubdom 84915b80a9 x86/hvm: Trivial style cleanup in vlapic.c 0fa916aba8 x86/mm: Fix up bad bool conversion in ept_set_entry() 820ee3ec4d x86: add deviation for asm-only functions 10081c2dc5 arm/platforms: Make compatbile with -Wwrite-strings 6c1d5f6516 arm/duart: make dt_uart_init() compile with -Wwrite-strings 1a177d4669 x86/setup: Make the loader variable const 24b1107449 xen: Drop bool_t e0d0961f3f xen/treewide: Switch bool_t to bool de577618c2 x86/treewide: Switch bool_t to bool ee34444712 x86/ioapic: Check 1k alignment for IO-APIC physical addresses d9fc66554f x86/traps: More use of nocall 625f2cc66f x86/entry: Use 32bit XOR in handle_ist_exception 7e939abca7 xen: Annotate printk() as cold 71dd0f6e3b x86: Fix XEN_DOMCTL_gdbsx_guestmemio crash a1f9490ccc docs/misra: exclude three more files 707b8b8717 x86/mem_access: make function static e7ad219bb2 xen/console: remove stub definition in consoled.h 8b9e6939a0 x86/vm_event: add missing include for hvm_vm_event_do_resume 5c7c09f64e x86/grant: switch included header to make declarations visible 62c84c3031 xen: modify or add declarations for variables where needed 40acb0c111 SUPPORT.md: change current version to 4.19-unstable 983aaa533b xenstored: use correct conversion specifier in the tracing function c9237aa2cf xen/spinlock: fix coding style issues fa2da5bce9 xen/arm32: head Split and move MMU-specific head.S to mmu/head.S a9f931e96f xen/arm32: head: Introduce enable_{boot,secondary}_cpu_mm() ee0f41fda3 xen/arm: mmu: move MMU specific P2M code to mmu/p2m.{c,h} 1bf5c104fe xen/arm: Rename init_secondary_pagetables() to prepare_secondary_mm() e6bef277d4 xen/arm: Fold pmap and fixmap into MMU system 672d67f339 xen/arm: Split MMU-specific setup_mm() and related code out f661a20aa8 xen/arm: Extract MMU-specific MM code ea59db96a4 xen/arm: Fold mmu_init_secondary_cpu() to head.S 210e83ae56 xen/arm: Split MMU system SMP MM bringup code to mmu/smpboot.c 1bf8a6aafc xen/arm: Split page table related code to mmu/pt.c cfb777791d amd/iommu: fully initialize array in 'flush_command_buffer' b264570ba2 x86/sysctl: address a violation of MISRA C:2012 Rule 8.2 05644bd9d2 x86/platform_hypercall: address violations of MISRA C:2012 Rule 8.2 168f87f590 x86/physdev: address violations of MISRA C:2012 Rule 8.2 8976587dc7 x86/pci: address a violation of MISRA C:2012 Rule 8.2 45402cc136 x86/smp: address a violation of MISRA C:2012 Rule 8.2 340a75a4f4 x86/vpmu: address a violation of MISRA C:2012 Rule 8.2 9b1fcb4648 x86/mmconfig: address violations of MISRA C:2012 Rule 8.2 f5b4c5f537 x86/hvm: address violations of MISRA C:2012 Rule 8.2 4709ec8291 xen/sched: fix sched_move_domain() 98758ae489 xen: introduce function type bug_fn_t. 83e9e30510 automation/eclair: add a deviation for MISRA C:2012 Rule 8.6 26cdd09801 xen: address violations of Rule 11.9 71576f8852 automation/eclair: update deviations and accepted guidelines a2e8d64c80 xen/string: address violations of MISRA C:2012 Rules 8.2 and 8.3 ab9558ef5e xen/compat: use BUILD_BUG_ON in CHECK_SIZE macros ee409f36b6 xen/types: address Rule 10.1 for DECLARE_BITMAP use 5b2a570f84 x86/io_apic: address violation of MISRA C:2012 Rule 10.1 4bee3b9c2c xen: Add deviations for MISRA C:2012 Rule 7.1 1003608606 xen/x86: address violations of MISRA C:2012 Rule 7.2 652683e1ae x86/hvm: address violations of MISRA C:2012 Rule 7.2 ee7bab7912 x86/vmx: address violations of MISRA C:2012 Rule 7.2 97f8555acb xenstored: print domain id in traces 6cd046c501 xen/arm: Enlarge identity map space to 10TB 02df8ada5a xen/arm: Add macro XEN_VM_MAPPING 9dfcef827c arm32: head: Add missing hunk from previous commit 9b807e23e7 xen/arm32: head: Replace load_paddr with adr_l when they are equivalent 046f13a2b3 xen/arm64: head: only use the macro load_paddr() in the MMU code c419d2dd35 xen/arm: Skip memory nodes if not enabled b739e2067b xen/include: add macro ISOLATE_LSB ef8eba3535 x86/hpet: address violations of MISRA C:2012 Rule 8.2 9c27a730b8 x86/vmce: address violations of MISRA C:2012 Rule 8.2 dc64ba0c41 x86/mcaction: address a violation of MISRA C:2012 Rule 8.2 5310230b61 x86/cpuidle: address violations of MISRA C:2012 Rule 8.2 614417165c x86/domain: address violations of MISRA C:2012 Rule 8.2 21f6d31ed6 x86/mtrr: address violation of MISRA C:2012 Rule 8.2 6f3f60b090 x86/mctelem: address violations of MISRA C:2012 Rule 8.2 fb62aa714d misra: add R21.1 R21.2 06e484767b docs/misra: add R11.1 R11.2 R11.3 R11.6 7ad0c774e4 x86/boot: tidy #include-s b24a0f3c5e tools: Remove all DECLARE_* op macros in xc 22b773d5c9 x86/psr: address a violation of MISRA C:2012 Rule 8.3 fde774154c x86/xstate: address a violation of MISRA C:2012 Rule 8.3 76fa223438 x86/uaccess: address violations of MISRA C:2012 Rule 8.3 a48bb129f1 x86/spec-ctrl: Remove conditional IRQs-on-ness for INT $0x80/0x82 paths fe1e4668b3 iommu/amd-vi: use correct level for quarantine domain page tables fb41228ece docs/sphinx: Fix indexing ab03b284b4 docs/sphinx: Fix syntax issues in exclude-list.rst 93ad5dd974 docs/sphinx: Fix syntax issues in hyperlaunch.rst 044503f61c docs: Delete kconfig docs to fix licensing violation 8ee1a332b4 docs/misra: Add missing SPDX tags 162a1589e3 xen/set_{c,p}x_pminfo: address violations od MISRA C:2012 Rule 8.3 0e4720655f xen/sched: address violations of MISRA C:2012 Rule 8.2 ecbe563500 x86/msi: address violations of MISRA C:2012 Rules 8.2 and 8.3 06719e449f x86/intel: fix indentation dec9e02f31 xen: avoid generation of stub <asm/pci.h> header d0ea916fcd x86: don't allow Dom0 access to ELCR ports bede1c7e3b exclude-list: generalise exclude-list d82a8217d5 cppcheck: rework exclusion_file_list.py code f3795523dc arm/gic: add missing parameter names and uniform function declarations dc79336075 xen/domain_page: address violations of MISRA C:2012 Rule 8.3 adac94da8b build: Allow setting KBUILD_DEFCONFIG in the environment f5ff26da32 xen/arm64: domctl: Avoid unreachable code in subarch_do_domctl() ca1279f879 arm/cpufeature: address violations of MISRA C:2012 Rule 8.2 5704923f94 bitmap: fix nbits signess 25dc15db92 arm/smmu: address violation of MISRA C:2012 Rule 8.2 ffe54cd871 arm/domain: address violations of MISRA C:2012 Rule 8.2 be7f7149c4 arm/vgic-v3: address a violation of MISRA C:2012 Rule 8.2 a17a2b2073 arm/cmpxchg: address violations of MISRA C:2012 Rule 8.2 c07e81f646 arm/p2m: address a violation of MISRA C:2012 Rule 8.2 5d38f3eab0 arm/setup: address violations of MISRA C:2012 Rule 8.2 49604292b0 arm/smpboot: address violations of MISRA C:2012 Rule 8.2 4c910b0461 automation/eclair: update accepted and clean guidelines 78a86b2686 x86/spec-ctrl: Add SRSO whitepaper URL fab51099a1 ubsan: Fix pointer overflow error message e3c409d59a x86/x2apic: introduce a mixed physical/cluster mode de1cc5102b MAINTAINERS: add xen/drivers/char/imx-lpuart.c to ARM section 1f849edc2f golang: Fix bindings after XSA-443 1429f9c548 golang: Fixup binding for Arm FF-A 5ae0a4ad38 AMD/IOMMU: drop tasklet handler forward declaration b6c7951f23 x86/hvm/dom0: fix PVH initrd and metadata placement 86b06295f6 arch: drop get_processor_id() ad193a79c2 xenoprof: move asm/ include 7d46710f08 console: conditionalize console_input_domain() ea3dabfb80 x86/PVH: allow Dom0 ELF parsing to be verbose 9589296e9c build: simplify clean handling of extras directory ea083911b1 xen/include: make enum perfcounter anonymous 7211904e09 docs/misra: add documentation skeleton for MISRA C:2012 Dir 4.1 202f410721 MAINTAINERS: make Michal Orzel ARM Maintainer 801b804945 x86/time: Fix UBSAN failure in __update_vcpu_system_time() 649c190a1f xen/ppc: Implement a basic exception handler abb8a88d59 xen/ppc: Add .text.exceptions section for exception vectors 87f37449d5 x86/i8259: do not assume interrupts always target CPU0 26a449ce32 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER fe0ae3f7dd xen/riscv: introduce identity mapping af670c14e8 xen/riscv: introduce function for physical offset calculation 86266162fc x86: don't allow Dom0 (direct) access to port F0 306e3dc919 x86/PVH: deny Dom0 access to the ISA DMA controller 9e2c146c38 x86: don't allow Dom0 access to port 92 ee3bcf907a x86: don't allow Dom0 access to port CF9 7b1de98b66 x86/vRTC: minor adjustment to reads from index port 7befef87cc x86/p2m: address violations of MISRA C:2012 Rules 8.2 and 8.3 93ec30bc54 x86/pv-shim: fix grant table operations for 32-bit guests 23eb39acf0 x86/mem_sharing: add missing m2p entry when mapping shared_info page cfff187ed5 x86/cpu-policy: Adjust CPUID_MAX_SERIALISED_LEAVES to placate MISRA 8e74432dd3 xen/spinlock: fix use of 0 as a null pointer constant 6386f5585c x86/mce: Move MC_NCLASSES into the enum mctelem_class a944636478 CHANGELOG.md: Start new 4.19.0 section e4fdec09bb CHANGELOG.md: Finalize the 4.18 release date bf51f85f20 CHANGELOG: More 4.18 content d9c1166078 CHANGELOG: Reformat 850382254b docs: Fix IOMMU command line docs some more df43b54590 automation: fix race condition in adl-suspend test 9659b2a6d7 Set version to 4.18; return ./autogen.sh 7f48e34298 Revert "Config.mk pin QEMU_UPSTREAM_REVISION (prep for Xen 4.18 RC1)" 4294987c7a Set version to 4.19; 4.18 has branched Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: add 6.10 configurationBruce Ashfield2024-08-051-0/+4
| | | | | | | kernel version 6.10 will be the next reference kernel, so we add the .inc file to enable the configuration Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: use nobranchBruce Ashfield2024-08-032-2/+41
| | | | | | | | | | The upstream repository has both removed tags and renamed branches. To prevent some of these failures in the future, let's run with nobranch=1 for a bit. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-image-minimal: Add missing dependency causing intermittent failuresRichard Purdie2024-08-011-0/+1
| | | | | | | | | | | | | | | "bitbake xen-image-minimal -c do_image_wic" fails with: | ERROR: _exec_cmd: install -m 0644 tmp/deploy/images/qemux86-64/xen-qemux86-64.gz tmp/work/qemux86_64-poky-linux/xen-image-minimal/1.0/tmp-wic/hdd/boot/xen.gz returned '1' instead of 0 | output: install: cannot stat 'tmp/deploy/images/qemux86-64/xen-qemux86-64.gz': No such file or directory | | WARNING: exit code 1 from a shell command. ERROR: Task (/media/build/poky/meta-virtualization/recipes-extended/images/xen-image-minimal.bb:do_image_wic) failed with exit code '1' Add the missing dependency to avoid this. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* upx: update to v4.2.4Bruce Ashfield2024-07-231-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping upx to version v4.2.4-54-g03c41840, which comprises the following commits: 03c41840 all: misc cleanups 0a82280f cmake update a7fa2f87 cmake update 3a11a5a8 CI updates 08a38af5 Workaround bug in Alpine Linux 043a54cf all: minor cleanups 16c8f6d1 src: portability updates 285472bc submodules: update for new versions a77adcd4 src: new ACC version cebd4392 Fix checksum error de-compressing ELF with large .p_align and small blocksize 64a3de5a FIX PT_GNU_HASH when "empty" 261609f7 CI updates 17cf7300 CI updates ad566d79 CI updates b499ed3d CI updates de8de9c0 Option --unmap-all-pages completely avoids /proc/self/exe 3b36dce5 Mention PT_MIPS_ABIFLAGS forwarding dcd8dfd5 CI: add zigcc linux-mips soft-float targets 78f3b629 src/pefile.cpp: default to strict reloc checks a49fe3b0 CI: remove zigcc linux-mips workaround f23cc7da CI update: remove macos-11 runner cafd9d7a Sync stub checksums 1b6c1208 64-bit phdrx[], PT_NOTE, PT_GNU_STACK 99afc50e PT_MIPS_ABIFLAGS, PT_MIPS_REGINFO 3286f7c5 De-compression of PT_MIPS_ABIFLAGS 72ccca9f PT_MIPS_ABIFLAGS, compression side only, 32-bit only 3c294d97 all: minor cleanups 1aff5f5b all: misc cleanups 937ae4c5 Avoid crash on outrageous fuzzed input 056865f5 Detect bad placement of LINK segment c58246b4 Detect compressed length too short 3495d1af all: minor cleanups b0ce0723 src: fix compilation on older compilers; update tests 9f4d18ba src: yet more constexpr updates f65c8f8c src: more work on constexpr e0633b89 CI updates c3341ce4 src: add support for constexpr bele.h 43f9b90c cmake update 6ee45dcd CI updates 34424672 src: more upx::max cleanups 57763ca1 ELF stubs: go_lang different placement of DT_STRTAB, DT_SYMTAB 40b7e24f src: introduce upx::max and friends; updates for clang-19 git snapshot 9e0f16a6 submodules: update for new versions 33f4f3a5 all: minor clang-tidy cleanups 07a3b75b submodules: update for new versions bdea2539 cmake: use recommended CMAKE install variables ed3d7b0c all: minor cleanups cba44c45 src: introduce ptr_get_address() 07b533f9 submodules: update for new versions 7b0a79de all: update LZMA SDK license information befd01aa CI updates 1cc26362 submodules: update for new versions 4daa2c1c testsuite: update checksums caused by version bump 7081c575 all: post-release version bump 3757579f all: prepare for release 2962dc35 CI updates c04c6854 src: restrict upx::atomic_exchange to pointer-size for now 72c97699 src: avoid warnings when compiling with llvm-mingw-nightly 42759b94 all: more clang-tidy cleanups aa9e69f0 submodules: update for new versions 0f3939df src: pacify clang-tidy 62265a1b fix typos 76b2cec8 src: fix compilation with clang 3d82f0cf src: introduce upx::atomic_exchange; cleanups e5546bc8 32-bit ELF escape hatch when no fit on last executable page 6fc0a00a all: update for clang-tidy-18 3e5ba5c0 CI updates 4c32a8e3 Fix attempted recovery from corrupted b_info 2ea316d7 Detect sizeofcmds too small 548227a5 mb_dt_offsets.clear() prevents undef from corrupted input a831a209 unpackExtent detects corrupted compression method 811f66de Check gnu_shift during unpack 84d80632 CI updates 285d4c4c submodules: update for new versions 8506f5b1 testsuite: update checksums caused by version change a87fd56b all: update version f0cb30e2 all: minor cleanups 038743c6 CI updates 0e6cef99 Guard against empty PT_NOTE 92c925fe New i386/lzma-multi_d.S enables unpacking more than one block 4562d545 Some non-ELF --lzma stubs assumed only one block, and <= 0.5MiB 8393ded1 CI updates b0dc4831 CI updates 3c0ca813 CI updates 157a63a0 CI updates 80e22a7e Fix --preserve-build-id ddf2da3d cmake: run tests in parallel; misc/podman: add 30-rebuild-stubs.sh 0e6478a6 submodules: update for new versions aed2c085 misc: update mimic_ctest.sh a7592b2c all: enhance tests 265c1008 PowerPC64 nrv2d decompressor 84e8288f Propagate yesterday's fix to stub decoding on PowerPC c69b4561 src: initialize some fields to suppress harmless valgrind errors 6db0af8d PowerPC cannot branch on CArry; requires contortions 842d2cbb testsuite: update checksums 9fb64ded Syscall on powerpc linux wipes arg registers, unlike x86_64 9d26713b Add experimental (and undocumented) --help-verbose and --help-short options. eb3c55b5 all: add more tests 896596f6 cmake update e4de1461 CI updates 1d2b2764 all: improve tests 35c6a200 CI updates 90a7faa1 CI updates 91f5fe1c arm64 --nrv2d instruction confusion d48a7d30 Sync checksums for testsuite_1 (-release) bb816f0c arm64 --nrv2d preserve sign when decoding offset 93abe97e powerpc64le --nrv2d register conflict 97cf29ff all: enhance CMake tests; assorted updates ed35613d misc/podman/rebuild-stubs: upgrade to ubuntu-24.04 f5ec8363 CI updates 87956de0 CI updates 0f931538 cmake: only enable UBSAN for clang versions >= 9 3538d796 CI updates 24f38245 CI updates and minor cleanups 70b20d7d CI updates 7b21a062 CI updates 3949af6d Unpacking detects and defends against malicious ELF d1f62e3a testsuite: update checksums caused by version bump 6e644fa4 all: post-release version bump 5bef9680 all: prepare for release 543cfe0a submodules: update for new versions 3ba91b80 cmake update a27a9e60 all: and yet more cleanups; NFCI 7e839e69 all: more cleanups; NFCI 809a1b3d submodules: update for new versions 9b80628f src/pefile.cpp: support relocs of large files a21a006f all: yet more minor cleanups 54d16a45 CI updates; cleanups cfc5f42e testsuite: update checksums caused by version change e3d24238 all: update version 56e7b369 src: new ACC version f2979147 all: yet more cleanups 52d9b53b all: minor cleanups 839a78f2 Better fix for previous commit to avoid out-of-bounds pointer. 680ce0a7 find_dt_ndx defends against overrun 06b0de9c CI: work-around zig cc mips bad codegen for hard-float 76b0b7b1 all: clang-format fabda4df R_PPC64_REL24 is reallly "PC-rel. 26 bit, word aligned: fdcdaf59 all: pacify clang-tidy, CI and cmake updates be44cefb CI updates c1050e62 submodules: update for new versions ae6d3b9b all: more assorted cleanups 25aa0e2e un_asl_dynsym() should skip when !dynstr 8f7578ee CI: enable valgrind 29ce4807 all: minor updates 41f6945b Fix auxv_up() to avoid SIGSEGV under valgrind 718ec468 all: more assorted cleanups; NFCI d4298014 Avoid &file_image[file_size] because some Standards object 024091e6 src: fix previous bounds checking commit d849e9de src: add some bounds checking to MemBufferBase c0e40da2 more checking of Mach_header when unpacking for MachOS dff37665 Detect too-large bit-shift in elf_lookup of DT_GNUHASH 2767ec54 more checking of PackUnix::p_info at unpack ac72c027 check nbucket earlier in DT_HASH on ELF 69c51eee better checking of DT_STRSZ for ELF ff5a4eeb ELF versus --brute: addStubEntrySections() needs ph_forced_method() b48f8707 Detect circular DT_HASH and DT_GNUHASH lookup 10807ebd Unpack 8-byte b_info only if (ph.version <= 11): 2001 or earlier 5d649f83 all: assorted cleanups 65b25adc submodules: update for new versions d615985b elf_find_table_size() did not check for empty table b0194409 testsuite: update checksums caused by version year bump 38ed4b20 arm32, arm64 ABI for -static must preserve register 0 2ad0d512 PeFile::rebuildImports(): Allow strlen() up to the very end of a logical block e4a611bc PeFile ::readPeHeader should check ih.subsystem. f3728d99 Check ph.method in PackMachBase::unpack b87f60a9 Check Mach_fat_arch.align 28f26da6 Need more care in PackMachBase::canUnpack() d3e780d6 Unpacking ELF requires e_phnum at least 2 d549c2b5 More care when recovering from slid b_info f310ce37 Beware fuzzer setting compressed size too small 553fc9b1 invert_pt_dynamic: Compilers differ, unsigned vs. signed 6dde9f7d find_overlay_offset() did not check carefully enough 3dca1175 invert_pt_dynamic() needs better checking for malformed input 09c5e383 arm64-linux.elf ABI owns x0 at execve()? fe6f1f0b arm64-linux.elf-fold.S typo (eyesight) 250c656b testsuite: update checksums caused by version bump 9a0b5b65 all: remove unused scripts 57b2fb4c all: post-release version bump 099c3d82 all: prepare for release. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: update to v10.5.0 -tipBruce Ashfield2024-07-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libvirt to version v10.5.0-77-ge5232f6fd6, which comprises the following commits: e5232f6fd6 virt-host-validate: Allow longer list of CPU flags 8f3b46e30b Translated using Weblate (Portuguese (Brazil)) 149ffd964b Translated using Weblate (Swedish) e8c5ecd3cf Translated using Weblate (English (United Kingdom)) 6699341d88 docs: use real examples for QEMU cli passthrough c019350a76 security: AppArmor allow write when os loader readonly=no 65b54e791f tests: Add test for UEFI autoselection on riscv64 a4fbb7bcc7 tests: Add firmware descriptor for edk2 on riscv64 47d34ffb26 qemu: ROM firmware images are always readonly f13b3f8098 qemu: Filter firmware images by type b14c97e007 tests: Add more firmware selection coverage 79941dd3c9 tests: Update firmware descriptors ea6c3ea2d5 qemu: virtiofs: format --rlimit-nofile 562fc02ac1 conf: virtiofs: add rlimit_nofile element 239669049d vmx: Be even more lax when trying to comprehend serial ports fcf6beaf3d ci: Refresh generated files 3bc3b7220b news: Mention pauth Arm CPU feature 6690b01de2 tests: Add coverage for pauth Arm CPU feature 1ac1e4dae0 cpu_map: Add pauth Arm CPU feature bec903cae8 qemu: Don't leave beingDestroyed=true on inactive domain c9fa43c48c virt-host-validate: Drop extra "PASS" 92333a2c4e Translated using Weblate (Swedish) d94b31a68a qemu: migration: allow migration for virtiofs 8dc04cafec qemu: do not use deprecated options for new virtiofsd 730eaafaac qemu: fill capabilities for virtiofsd 132bf6d89b tests: qemuxmlconf: adjust test case to new virtiofsd f64e658df0 tests: vhostuser: add virtiofsd json descriptor 6d3955acf1 Include support for Vfio stats during Migration 7a9e9dfb18 network: allow "modify" option for DNS-Txt records cf934c87cc network: allow "modify" option for DNS-Srv records 09a5d8165c network: allow "modify" option for DNS hostname 619a915862 domain_conf: comment not match the code below b5c54df901 virt-aa-helper: Drop needless comments 0d3e962d47 security_manager: Remove redundant qemuSecurityGetNested() call Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Enable support for riscv64Mingli Yu2024-07-221-2/+0
| | | | | | | | | Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix meson build issuePawan Badganchi2024-07-221-2/+1
| | | | | | | | | | | | | Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-rpi-u-boot-scr: WORKDIR -> UNPACKDIR transitionTim Orling2024-07-221-1/+4
| | | | | | | | | | | | | | | | | | Borrowed from Leon Anavi <leon.anavi@konsulko.com> meta-raspberrypi: commit 434ed33c90b7659152b1e8d7c2d4d785db85105f and from Martin Jansa <martin.jansa@gmail.com> meta-raspberrypi: commit c39c2b165e68388767f54dc86acf4595a33ee1e1 This adapts to the oe-core rework to enforce a separate directory for unpacking local sources (UNPACKDIR) instead of directly using WORKDIR. Follows the preliminary guideline from: https://lists.openembedded.org/g/openembedded-architecture/message/2007 Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: fix gcc14 and 19.0.0 packaging issuesBruce Ashfield2024-07-224-1/+88
| | | | | | | | | | To fix the final gcc14 errors, we temporarily disable incompatible type warnings on two python modules. We also package a new systemd file and account for WORKDIR being replaced by UNPACKDIR for patches. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: build rocksdb, disable QAT, use bundled dependencies (no pip)Bruce Ashfield2024-07-221-4/+9
| | | | | | | | | | | | By building rocksdb out of the tree, we can avoid incompatiblity issues in the API with a dependency. QAT doesn't build well, so disable it. Ensure that we are using our python dependencies otherwise pip will be run at build / package time. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: convert to git and toxBruce Ashfield2024-07-221-6/+11
| | | | | | | | | Waiting for ceph releases means a lot of backported patches and missing bundled dependencies. We switch to gitsm to make our updates easier. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: initial gcc14 fixesBruce Ashfield2024-07-222-0/+147
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: update to 18.2.3Bruce Ashfield2024-07-221-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: update to v0.4.7 -tipBruce Ashfield2024-07-161-1/+1
| | | | | | | | Bumping umoci to version v0.4.7-224-gff684ba, which comprises the following commits: 3078d6b build(deps): bump github.com/vbatts/go-mtree from 0.5.3 to 0.5.4 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.15.2Bruce Ashfield2024-07-161-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping skopeo to version v1.15.1-8-g80626759, which comprises the following commits: 0002d9ca [release-1.15] Bump to v1.15.2 260f444b [release-1.15] Fixes an interoperability issue while listing tags cda43af4 [skip-ci] Packit: enable c10s downstream sync 7e81106f Refer to registry.k8s.io instead of k8s.gcr.io e2ea4269 [release-1.15] Bump to v1.15.1 5267baab [release-1.15] Freeze the fedora-minimal image reference cd5f7090 [release-1.15] CVE-2024-3727 99e3c448 Bump to v1.15.0 6d6d5b7b chore(deps): update module google.golang.org/protobuf to v1.33.0 [security] 78ddfd9d fix(deps): update module github.com/containers/ocicrypt to v1.1.10 e46c71c3 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 549fc862 chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] cca855ac [CI:DOCS] Migrate skopeo container image 2ffc4ec3 fix(deps): update module github.com/containers/common to v0.58.0 086701bd fix(deps): update module github.com/containers/image/v5 to v5.30.0 96443048 fix(deps): update module github.com/containers/storage to v1.53.0 a80f634f fix(deps): update module golang.org/x/term to v0.18.0 4d80bf8c fix(deps): update github.com/containers/image/v5 digest to faa4f4f 2db09313 Move a go.mod dependency entry to the right section 95f6eac4 Avoid a warning by gopls / VSCode dbf465d6 fix typo 55abe69d update docs based on review 439dd5f4 docs: make sure that CGO_ENABLED='1' f0b07848 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2 8b6774b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0 e294a380 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1 c3e2b202 Update c/image after https://github.com/containers/image/pull/2273 8f2a7c65 Also change the MIME type in manifest when decompressing a layer 812a02af Replace decompress-dirs.sh with Go code 09f282e4 Split decompressDir from runDecompressDirs 9fd98112 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.0 122bf968 fix(deps): update module github.com/containers/common to v0.57.4 149fec0a fix(deps): update golang.org/x/exp digest to 1b97071 d77f7153 fix(deps): update module github.com/containers/common to v0.57.3 c941d813 Update github.com/containers/image/v5 to post-v5.29.2 main b412ed6e Run codespell on code 58ff9fdb fix(deps): update module github.com/containers/storage to v1.52.0 177d4adb add kubasobon:semver changes 4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 e32dfefb Bump to v1.15.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.2.0-rc2Bruce Ashfield2024-07-163-9/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.2.0-rc.2-21-g3778ae60, which comprises the following commits: 309a6d91 ci/gha: add go-fix job a5e660ca seccomp-notify.bats: add fcntl to the important syscall list e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd" b18d052b ci/cirrus: switch from CentOS to Almalinux 8b1c0f7e CHANGELOG.md: dedup v1.2.0-rc.2 notes 6980adb6 libct/userns: implement RunningInUserNS with sync.OnceValue b3b31ff2 libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS 5b09a712 libct/userns: change RunningInUserNS to a wrapper instead of an alias 30b530ca libct/userns: split userns detection from internal userns code c1421339 remove pre-go1.17 build-tags 5ea76254 VERSION: back to development f2d2ee5e VERSION: release 1.2.0-rc.2 ee601b87 MAINTAINERS_GUIDE: rm chief maintainer role d6563f6b MAINTAINERS: move crosbymichael to EMERITUS ad976aa1 put the changelog of v1.1.13 after v1.2.0-rc.1 4e2d7c0a update changelog after v1.1.13 released 2cb46c6e script/keyring_validate.sh: fix a typo d6e427e1 runc exec: avoid stuttering in error messages a6d46ed1 runc exec: improve options parsing 42cea2ec libct: don't allow to start second init process e3e10725 libct: fix locking in Start/Run/Exec 304a4c0f libct: createExecFifo: rm unneeded os.Stat e7294527 try to delete exec fifo file when failure in creation 1c505fff Revert "Set temporary single CPU affinity..." f8f1bc9a Vagrantfile.fedora: bump to F40 77190360 libct/cg: write unified resources line by line 40dd884a MAINTAINERS: add Rodrigo Campos 3019e842 libct/cg: use clear built-in b7fdd524 libct: use slices package a1e87f8d libct: rm eaccess 6b2eb52f go.mod,README: require Go 1.21 17380da2 Dockerfile: switch to Go 1.22 and Debian 12 a3302f20 ci: switch to go 1.22 as main version e660ef61 libct/nsenter: stop blacklisting go 1.22+ 24c2d28d fix a debug msg for user ns in nsexec 3083bd44 tests/cgroups: separate cgroup v2 swap test 4209439b libct/cg/fs/v2: ignore setting swap in some cases dbb011ec tests/int/helpers: fix cgroups_swap check for v2 8626c717 tests/int: fixup find statements e530b2a6 tests/int/update: fix v2 swap check 024c2711 make trimpath optional 760105ab script/*: fix gpg usage wrt keyboxd 67f6c37b ci/gha: switch to ubuntu 24.04 40bb9c46 ci/cirrus: rm centos stream 8 48c4e733 ci: workaround for centos stream 8 being EOLed 5c5ebe77 tests/int/scheduler: require smp b24fc9d2 ci: pin codespell 584afc67 libct/system: ClearRlimitNofileCache for go 1.23 b74b33c4 Dockerfile: bump Debian to 12, Go to 1.21 d697725a libct/cg/dev: fix TestSetV1Allow panic 177c7d4f Fix codespell warnings a35f7d80 fix comments for ClearRlimitNofileCache 6ab3d8ad vendor: golang.org/x/net@v0.24.0 f8052066 libct/cg/fs: fix setting rt_period vs rt_runtime e5e8f336 .cirrus.yml: rm FIXME from rootless fs on CentOS 7 36be6d05 libct/int: checkpoint test: skip pre-dump if not avail e42d981d libct/int: rm double logging in checkpoint_test 62a31465 libct/int/cpt: simplify test pre-check e676dac5 libct/criu: simplify checkCriuFeatures f6a8c9b8 libct: checkCriuFeatures: return underlying error 4ea0bf88 update/add some tests for rlimit da68c8e3 libct: clean cached rlimit nofile in go runtime a853a826 runc exec: setupRlimits after syscall.rlimit.init() completed f452f667 ci/gha: bump golangci-lint-action from 5 to 6 bac50646 libct: fix a comment dbd0c334 libct/system: rm Execv 9d9273c9 allow overriding VERSION value in Makefile 75e02193 use go mod instead of go get in spec.bats b032fead libct/cg/fs: don't write cpu_burst twice on ENOENT 6bf1d3ad tests/int/tty: increase the timeout 8732eada Vagrantfile.fedora: bump Fedora to 39 d63018c2 ci/gha: bump golangci-lint to v1.57 0eb8bb5f Format sources with gofumpt v0.6 6bcc7361 ci/gha: bump golangci/golangci-lint-action to v5 baba55e2 ci/actuated: re-enable CRIU tests f6b7167b tests/int/checkpoint: add requires criu_feature_xxx e5c82f00 tests/int/checkpoint: rm double logging 00238f5d CI: add actuated-arm64 758b2e2b helpers.bats: cgroups_cpu_burst: check kernel version d618c6fe cgroups.bats: check cgroups_io_weight 053f6a0d seccomp_syscall_test1: use ftruncate instead of kcmp 30dc98f5 CI: run apt with -y 4f3319b5 libct: decouple libct/cg/devices afc23e33 Set temporary single CPU affinity before cgroup cpuset transition. cde1d090 libcontainer: force apps to think fips is enabled/disabled for testing 6b1f7308 tests/integration: Fix remount on debian testing 5052c075 tests/integration/mounts_sshfs.bats: Fix test on debian testing e4bf49ff runc update: distinguish nil from zero afcb9c2e add a test case for runc update cpu burst 5194bd8d VERSION: back to development 275e6d85 VERSION: release v1.2.0-rc.1 fc3e04dc changelog: update to include all new changes since 1.1.0 b47fb3fd changelog: sync changelog entries up to runc 1.1.12 d4b670fc changelog: mention key breaking changes for mount options 851e3882 ci/test: exclude some runc_nodmz jobs e377e168 [hotfix] nsenter: refuse to build with Go 1.22 on glibc ac31da6b ci/cross-i386: pin Go to 1.21.x bfbd0305 Add I/O priority ccc500c4 seccomp: patchbpf: always include native architecture in stub b288abea seccomp: patchbpf: rename nativeArch -> linuxAuditArch ab6788d3 Remove dependabot ignore cdccf6d6 build: update libseccomp to v2.5.5 da79b616 fix runc-dmz bin path error in Makefile 37581ad3 dmz: remove SELinux special-casing eefc6ae2 features: implement returning potentiallyUnsafeConfigAnnotations list 606251ab build(deps): bump github.com/opencontainers/runtime-spec bb5673f2 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 7ab66b18 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 6056ed2d build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 fc76b136 Makefile: Fix runc-dmz removal 46b72107 contrib/cmd/memfd-bind: Mention runc-dmz needs RUNC_DMZ=true 1dae66f7 libct/dmz: Require RUNC_DMZ=true to opt-in 935d586b build(deps): bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 86360598 tests/int: fix flaky kill tests 82499d42 Fixed spelling mistake in the Makefile at .PHONY vendor 93e37723 ci/golangci-lint: add checks permission 302b2e89 tests/int: use gawk where needed 3a9859bd libct/nsenter: rm unused include ea140db7 libct/nsenter: rm unused code 27cbabd0 build(deps): bump golangci/golangci-lint-action from 3 to 4 afd90f44 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 97632a6d build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 174940a7 build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 a596a055 update go version to 1.21 in cirrus ci bc4a869d test: no execve error msg synced to parent process d0750587 close the sync pipe explicitly in exec 0bc4732c test for execve error without runc-dmz 35aa63ea never send procError after the socket closed d8edada9 init: don't special-case logrus fds ee73091a libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init 89c93ddf cgroup: plug leaks of /sys/fs/cgroup handle f2f16213 init: close internal fds before execve 8e1cd2f5 init: verify after chdir that cwd is inside the container 7094efb1 init: use *os.File for passed file descriptors 093c83e1 keyring: update AkihiroSuda key expiry 34eceb21 keyring: update cyphar@cyphar.com key expiry fe95a2a0 tests/integration: Test exec failures 8afeccc8 libct/dmz: Print execve() errors b1e3c3c7 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0 2a473a76 Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check e1e3ca02 build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 68438ba2 fix scheduler validate 55c9d6bf we have implemented idmapped-mounts with no limitations e90d8cb8 we have supported rsvd hugetlb cgroup a7c3e07c libct: Improve error msg when idmap is not supported 43306be3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 5a4f5217 script/check-config.sh: check CONFIG_BLK_CGROUP_IOCOST d87366f0 scripts/check-config: fix kernel version checks 7f65cc75 script/check-config.sh: check CONFIG_CHECKPOINT_RESTORE 6aa4c1a1 script/check-config: disable colors b94b5590 scripts/check-config: don't check MEMCG_SWAP on newer kernels 3f4a73d6 TestCheckpoint: skip on ErrCriuMissingFeatures c8113085 remove remap-rootfs bin when running make clean 0bbb7e9f move the target 'clean' next to 'all' d08ba9ca fix a (u|g)IDMappings type value convertion error 7b655782 build(deps): bump actions/upload-artifact from 3 to 4 482e5637 configs: make id mappings int64 to better handle 32-bit fa93c8b0 tests: mounts: add some tests to check mount ordering 3b57e45c mount: add support for ridmap and idmap 7795ca46 specconv: handle recursive attribute clearing more consistently cdff09ab rootfs: fix 'can we mount on top of /proc' check 8e8b136c tree-wide: use /proc/thread-self for thread-local state a04d88ec vendor: update to github.com/moby/sys/mountinfo@v0.7.1 5ae88daf idmap: allow arbitrary idmap mounts regardless of userns configuration ba0b5e26 libcontainer: remove all mount logic from nsexec ebcef3e6 specconv: temporarily allow userns path and mapping if they match e66ba70f build(deps): bump actions/setup-go from 4 to 5 c045886f tests: remap rootfs for userns tests 6fa8d068 integration: add mega-test for joining namespaces e6fb7fe5 nsexec: allow timens to work with non-rootless userns 09822c3d configs: disallow ambiguous userns and timens configurations 3bab7e92 configs: clean up error messages for Host[UG]ID 9387eac3 init: don't pre-flight-check the set[ug]id arguments 1912d598 *: actually support joining a userns with a new container 88411747 tests: integration: fix spurious SC203[01] shellcheck errors c25493fc build(deps): bump golang.org/x/net from 0.17.0 to 0.19.0 b2782965 build(deps): bump golang.org/x/sys a6f40817 libct: Destroy: don't proceed in case of errors ab3cd8d7 runc delete, container.Destroy: kill all processes 7396ca90 runc delete: do not ignore error from destroy d3d7f7d8 libct/cg: improve cgroup removal logic 29283bb7 runc delete -f: fix for no pidns + no init case dcf1b731 runc kill: fix sending KILL to non-pidns container 542cce01 libct: Signal: slight refactor d9f2a24a libct: replace runType with hasInit 94505a04 *: introduce pidfd-socket flag 3bde5111 fix some unit test error after bump ebpf to 0.12.3 b2f7614a bump github.com/cilium/ebpf from 0.12.2 to 0.12.3 823636c3 ci/cirrus: disable selinux-dmz kludge for centos-stream-8 9d8fa6d6 libcontainer: dmz: fix "go get" builds 669f4dbe configs: validate: add validation for bind-mount fsflags 4bf8b555 libct: Remove old comment 87bd7846 Add dmz-vs-selinux kludge and a way to disable it 393c7a81 README: fix reference to memfd-bind b39781b0 tests/int: add selinux test case b2539a7d libct/cg: skip TestWriteCgroupFileHandlesInterrupt on CentOS 7 a2f7c6ad internal/testutil: create, add SkipOnCentOS 2c9598c8 libct/cgroups.OpenFile: clean "file" argument 98511bb4 linux: Support setting execution domain via linux personality 6d279220 tests/int: fix flaky "runc run with tmpfs perm" 104b8dc9 libct/cg: add swapOnlyUsage in MemoryStats 7c71a227 rootfs: remove --no-mount-fallback and finally fix MS_REMOUNT 153865d0 tests/int: fix teardown in mounts_sshfs.bats 7f5daa88 libct/cg/fs.Set: fix error message 5ea7c60f tests/int: fix cgroup tests bbf8eff8 tests/int: fix "runc run (hugetlb limits)" d60d17a6 build(deps): bump github.com/cilium/ebpf from 0.12.1 to 0.12.2 9cd5d6cd libct/cg: remove retry on EINTR in 54d38c61 build(deps): bump github.com/cilium/ebpf from 0.12.0 to 0.12.1 f944d7b6 ci/gha: fix downloading Release.key b6a0c483 libct/dmz: Support compiling on all arches 4a7d3ae5 libct/cg: support hugetlb rsvd aec0dc7d build(deps): bump github.com/cilium/ebpf from 0.11.0 to 0.12.0 6f7266c3 libcontainer: drop system.Setxid 2860708d build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 b8f75f39 Makefile: move .PHONY to before each target bdf78b44 libct/cg/dev: add sync.Once to test case 46bfcac8 Makefile: avoid calling sub-make 961d0f12 Makefile: make verify-dmz-arch less talkative fa8f3817 ci: skip TestPodSkipDevicesUpdate on CentOS 7 927a5836 build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0 0ab58aa2 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 730bc844 Fix directory perms vs umask for tmpcopyup 770728e1 Support `process.scheduler` efbebb39 libct: rename root to stateDir in struct Container c89faacc libc: rm _LIBCONTAINER_STATEDIR 6538e6d0 libct: fix a typo 109dcadd fix two typos f755c808 libct/cg/stats: support misc for cgroup v2 2e2ecf29 libct: use chmod instead of umask 4b3b7e99 docs/spec-conformance: update 531e29e1 script/lib.sh: set GOARM=5 for armel, GOARM=6 for armhf 90606665 docs: clarify the supported architectures (No MIPS) 9976be86 libct/dmz: Move comment out of the Makefile rule 90f5da65 libct/dmz: Reduce the binary size using nolibc 8da42aae sync: split init config (stream) and synchronisation (seqpacket) pipes ccc76713 sync: rename procResume -> procHooksDone 99469eba Handle kmem.limit_in_bytes removal 90c8d36a dmz: use sendfile(2) when cloning /proc/self/exe f8348f64 tests: integration: add runc-dmz smoke tests 6be763ee tests: integration: fix capability setting for CAP_DAC_OVERRIDE b9a4727f contrib: memfd-bind: add helper for memfd-sealed-bind trick dac41717 runc-dmz: reduce memfd binary cloning cost with small C binary e089db3b dmz: add fallbacks to handle noexec for O_TMPFILE and mktemp() 0e9a3358 nsexec: migrate memfd /proc/self/exe logic to Go code 321aa20c scripts: add proper 386 and amd64 target triples and builds d9ea71bf deprecate libcontainer/user ca32014a migrate libcontainer/user to github.com/moby/sys/user 65a1074c increase memory.max in cgroups.bats b17c6f23 validator: Relax warning for not abs mount dst path c378602b libct/specconv: remove redundant nil check c7ad2749 build(deps): bump github.com/cyphar/filepath-securejoin e1584831 libct/cg: add CFS bandwidth burst for CPU 1fe9447f build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0 2d0cd0b3 build(deps): bump actions/checkout from 3 to 4 d8e9ed3e libcontainer/userns: simplify, and separate from "user" package. 5f05b96e build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 937ca107 Fix File to Close e8525238 tests/int: add a test for host mntns vs hooks 41778ddc Fix for host mount ns containers fe6f33b2 build(deps): bump tim-actions/commit-message-checker-with-regex 0f3eeb9b tests/int: add failed hooks tests cadf0a14 tests/int: rename hooks.bats to hooks_so.bats 6a4870e4 libct: better errors for hooks f62f0bdf Remove nolint annotations for unix errno comparisons 17e7e230 ci/gha: bump golangci-lint to v1.54 b3e97214 Add issue reference to nolint annotation cc7e607a features: Expose idmap support 671e211e vendor: Update runtime-spec to expose mountExtensions b22073c5 ci/gha: add job timeouts 1f25724a configs: fix idmapped mounts json field names 8aa97ad3 nsexec: remove cgroupns special-casing 5c7839b5 rootfs: use empty src for MS_REMOUNT 20b95f23 libcontainer: seccomp: pass around *os.File for notifyfd f81ef149 libcontainer: sync: cleanup synchronisation code c6e7b1a8 libct: initProcess.start: fix sync logic b0c7ce51 makefile: quote TESTFLAGS when passing to containerised make aa5f4c11 tests: add several timens tests 9acfd7b1 timens: minor cleanups 46d6089f ci/gha: re-enable go caching 5741ea23 ci: add go 1.21, remove go 1.19 ec2ffae5 libct: Allow rel paths for idmap mounts 19d26a65 Revert "libct/validator: Error out on non-abs paths" 61a454cc build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 883aef78 libct/init: unify init, fix its error logic 789a73db init.go: move logger setup to StartInitialization 0d890ad6 nsenter: cloned_binary: use MFD_EXEC and F_SEAL_EXEC b999376f nsenter: cloned_binary: remove bindfd logic entirely 38676931 criu: do not add log file into error message c77aaa3f criu checkpoint/restore: print errors from criu log e4478e9f criuSwrk: simplify switch cb981e51 libct: move criu-related stuff to separate file f88a7654 ci: fix flaky test "update memory vs CheckBeforeUpdate" 5c6b334c ci: fix TestOpenat2 when no systemd is used 962019d6 ci: fix TestNilResources when systemd not available cfc801b7 Fix running tests under Docker/Podman and cgroup v2 ebc2e7c4 Support time namespace 83137c68 add a test case about missing stricky bit 6092a4b4 fix some file mode bits missing when doing mount syscall 06882888 contrib/fs-idmap: Move logic to a new function 855c5a0e contrib/fs-idmap: Don't hardcode sleep path 882e5fe3 contrib/fs-idmap: Check exactly 2 args are received 821d0018 contrib/fs-idmap: Remove not needed flags 7d2becdf libct/cg/fs2: use `file` + `anon` + `swap` for usage 99340bb0 contrib/fs-idmap: Reap childs c537cb3d build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0 70f4e46e utils: use close_range(2) to close leftover file descriptors 57f31c68 libct/nsenter: Show better errors for idmap mounts 701dff79 libct/cg/sd: use systemd v240+ new MAJOR:* syntax da780e4d Fix bind mounts of filesystems with certain options set 237acdd8 add some important announcements in unreleased section c875ea85 use the length of UIDMappings/GIDMappings to check whether empty or not d9494fc6 CHANGELOG: forward-port 1.1.6-1.1.8 changes 11b6c9b6 build(deps): bump github.com/opencontainers/runtime-spec a3785c88 Remove idmapFD field for mountEntry 46ada59b Use an *int for srcFD c47f58c4 Capitalize [UG]idMappings as [UG]IDMappings f92057aa tests/int: update set_cgroups_path doc 19f76b66 tests/int/ps: enable for rootless 867ee905 docs: Update spec conformance for idmap mounts b460dc39 tests/integration: Add tests for idmap mounts fda12ab1 Support idmap mounts on volumes 98317c16 ci: bump golangci-lint, remove fixed exception fe4528b1 libcontainer: Just print the mountFds slice len on errors 73b64970 libcontainer: Add mountFds struct 0172016a libcontainer: Add generic parseFdsFromEnv() f5814a10 libcontainer: Add generic sendFdsSources() 96bd4875 nsenter: Add idmap helpers 5166164d nsexec: Add generic receive_sources() 4b668a82 Switch setupUserNamespace() to use the toConfigIDMap() helper fbf183c6 Add uid and gid mappings to mounts 83418f88 build(deps): bump github.com/cilium/ebpf from 0.10.0 to 0.11.0 2c844977 build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0 881e92a3 libct/validator: Error out on non-abs paths 45c75ac7 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 017d6996 libct/nsenter: namespace the bindfd shuffle 3b191ff7 libct/nsenter: set FD_CLOEXEC on received fd 8f671781 libct/nsenter: refactor ipc funcs for reusability 890dceee libct/nsenter: annotate write_log() prototype 35fddfd2 chore(libct/nsenter): extract utility code 37732d1e MAINTAINERS: add Li Fu Bang ad040b1c tests/int/delete: make sure runc delete removes failed unit 58a811f6 tests/int: add/use "requires systemd_vNNN" 43564a7b runc delete: call systemd's reset-failed 91b4cd25 libct/cg/sd: remove logging from resetFailedUnit dacb3aaa tests/int/cgroups: remove useless/wrong setting 5cdf7671 libct/cg: IsCgroup2UnifiedMode: don't panic 5e53e659 ci: bump shellcheck to 0.9.0, fix new SC2016 warnings a57d94d3 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 9fa8b9de Fix tmpfs mode opts when dir already exists eb55472e Fix integration tests failure when calling "ip" a52efc1f build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0 e3627658 .codespellrc: update for 2.2.5 c9209fd2 ci/gha: don't skip rootless+systemd on ubuntu 22.04 1aa7ca80 libct/cg/stats: support PSI for cgroup v2 bc390b2e build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 73b5dc02 docs/systemd: fix a broken link 62963fef libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed. 0ac3376c go.mod: runtime-spec v1.1.0-rc.3 78d31a49 ci/cirrus: enable rootless tests on cs9 41e04aa6 tests/int: rename a variable e83ca519 tests/int/cgroups: filter out rdma 31e3c229 build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 7d09ba10 libct: implement support for cgroup.kill f8ad20f5 runc kill: drop -a option 9583b3d1 libct: move killing logic to container.Signal 2a7dcbbb libct: fix shared pidns detection 5b8f8712 libct: signalAllProcesses: remove child reaping e0e8d9c8 tests/int/kill: add kill -a with host pidns test 67bc4bc2 tests/rootless.sh: drop set -x fed0b124 tests/int: increase num retries for oom tests 5929b019 ci/gha: add space-at-eol check, fix existing issues 511c7614 man/runc: fixes bb4dbbc4 ci/cirrus: limit numcpu 650efb2c Fix Vagrant caching b9d2d8d8 build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 7e481ee2 libct/int: remove logger from init eba31a7c libct/StartInitialization: rename returned error 4f0a7e78 libct/init: call Init from containerInit 72657eac libct: move StartInitialization 2a347045 build(deps): bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0 62cc13ea gha: disable setup-go cache for golangci job 083e9789 ci/gha: rm actions/cache from validate/deps job da5cdfed ci/gha: fix cross-i386 b32655d2 ci/gha: rm kludges for cross-i386 job f6c393da features: graduate from experimental 6beb3c6a go.mod: runtime-spec v1.1.0-rc.2 882a2cc8 build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0 02afa9f1 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 a60933bb libct/rootfs: introduce and use mountEntry 976748e8 libct: add mountViaFDs, simplify mount 5a177463 deps: bump urfave/cli 20e38fb2 init: do not print environment variable value 5f6aafb3 libct: document process.LogLevel field defb1cc7 libct/cg/dev: optimize and test findDeviceGroup 13091eee ci: bump bats 1.8.2 -> 1.9.0 a1920009 Vagrantfile.fedora: bump to 38 33b6ec29 ci/cirrus: use vagrant from hashicorp repo 14d6c7df runc.keyring: add Akihiro Suda d7208f59 libct/cg/sd: use systemd version when generating dev props cfc3c6da scripts: keyring validate: print some more information a7583103 runc.keyring: add Kolyshkin 42a10919 runc-kill(8): amend the --all description fe278b9c libct: fix a race with systemd removal 056ec0ca keyring: add Aleksa's <cyphar@cyphar.com> signing key 0c9c60aa keyring: add Aleksa's <asarai@suse.com> signing key 22538f89 keyring: verify runc.keyring has legitimate maintainer keys 957bccfe scripts: release: add verification checks for signing keys 87214947 release: add runc.keyring file and script d9230602 Implement to set a domainname 6053aea4 Fix undefined behavior. Do not accept setjmp return value as variable. 953e1cc4 ci/gha: switch to or add ubuntu 22.04 439673d5 build(deps): bump golang.org/x/net from 0.8.0 to 0.9.0 fd1a79ff ci/cirrus: improve host_info 873d7bb3 ci/cirrus: use Go 1.19.x not 1.19 611bbacb libct/cg: add misc controller to v1 drivers 9b71787b tests/int: fix some checks 9dbb9f90 ci: bump bats 1.3.0 -> 1.8.2 a6e95c53 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 fd5debf3 libct/cg: rm GetInitCgroup[Path] 1034cfa8 build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2 ed9651bc libct/cg/sd: support setting cpu.idle via systemd b5ecad7b tests/int/update: test bad cpu.idle values 3ffbd4c8 tests/int: fix update cpu.idle failure on CS9 509b312c libct/cg/sd/v2: unifiedResToSystemdProps nit 82bc89cd runc run: refuse a non-empty cgroup 1d18743f libct/cg/sd: reset-failed and retry startUnit on UnitExists c2533420 libct/cg/sd: ignore UnitExists only for Apply(-1) c6e8cb79 libct/cg/sd: refactor startUnit 9f32ce6a CHANGELOG: forward-port 1.1.4 and 1.1.5 changes 73acc77b libct/cg: rm EnterPid 4ff49046 Makefile: add verify-changelog as release dependency b2fc0a58 verify-changelog: allow non-ASCII 370e3be2 tests/int/mounts: only check non-shadowed mounts a37109ce tests/int/mount: fix issues with ro cgroup test 8293ef2e tests/int: test for CAP_DAC_OVERRIDE 8491d334 Fix runc run "permission denied" when rootless 99a337f6 Dockefile: bump go go 1.20 da98076c mountToRootfs: minor refactor 54e20217 libctr/cgroups: don't take init's cgroup into account a7a836ef libct/cg/dev: skip flaky test of CentOS 7 65df6b91 fix wrong notes for `const MaxNameLen` 9d45ae8d tests: Fix fuzzer location in oss-fuzz config 0d72adf9 Prohibit /proc and /sys to be symlinks 8f0d0c4d build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 cecb039d nsexec: retry unshare on EINVAL e3cf217c build(deps): bump actions/setup-go from 3 to 4 a7046b83 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 df4eae45 rootless: fix /sys/fs/cgroup mounts afeffb7e .github/ISSUE_TEMPLATE/config.yml: fix contact links 7d940bdf Add `.github/ISSUE_TEMPLATE/config.yml` 6b41f8ed build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 6faef164 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 7b4c3fc1 Add support for umask when exec container f2e71b08 libct/int: make TestFdLeaks more robust be7e0394 libct/int: wording nits 7c75e84e libc/int: add/use runContainerOk wrapper 97ea1255 Fix runc crushes when parsing invalid JSON b3b0bde6 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 2e44a202 Makefile: fix typo in LDFLAGS_STATIC 92a4ccb8 specconv: avoid mapping "acl" to MS_POSIXACL 2adeb6f9 nsexec: Remove bogus kill to stage_2_pid 4d0a60ca tests: Fix weird error on centos-9 2ca3d230 nsexec: Add debug logs to send mount sources e412b4e8 docs: add docs/spec-conformance.md 787fcf09 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1 fbfc6afe tests: add tests for capabilities bc8d6e3b build(deps): bump github.com/opencontainers/selinux 0e1346fe build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0 42dffaaa Dockerfile: fix build wrt new git 14e3ce9e build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 1bb6209a tests/int: test for /dev/null owner regression 7e5e017d libcontainer: skip chown of /dev/null caused by fd redirection 5ecd40b9 Add Go 1.20, require Go 1.19, drop Go 1.18 81ca678f Disable clang-format 81c379fa support SCHED_IDLE for runc cgroupfs 5ce511d6 nsexec: Check for errors in write_log() 3fbc5ba7 ci: add tests/int/get-images.sh check 6d28928c Explicitly pin busybox and debian downloads e29e57b5 libcontainer: configs: ensure can build on darwin cc63d074 build(deps): bump github.com/cilium/ebpf from 0.9.3 to 0.10.0 6676f980 tests/integration/get-images.sh: fix busybox.tar.xz URL eacada76 build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 0ac98807 libct/cg/sd: stop using regex, fix systemdVersionAtoi b44da4c0 libct: validateID: stop using regexp 15677e7b ci: fix delete.bats for GHA c4aa452b tests/int/checkpoint: fix lazy migration flakiness 68352878 man/runc-restore: describe restore into different cgroup d4582ae2 tests/int: add "--manage-cgroups-mode ignore" test e8cf8783 libct/criuApplyCgroups: add a TODO 3438ef30 restore: fix --manage-cgroups-mode ignore on cgroup v2 212d25e8 checkpoint/restore: add --manage-cgroups-mode ignore ff3b4f3b restore: fix ignoring --manage-cgroups-mode 4f2af605 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0 19a9d9fc tests/int: use runc features in seccomp flags test ac04154f seccomp: set SPEC_ALLOW by default 076745a4 runc features: add seccomp filter flags ab848089 types/features: fix docstrings 8e9128ff Vagrantfile.fedora: upgrade Fedora to 37 9fc707e7 Fixed init state error variable 067ca8f5 notify_socket.go: use sd_notify_barrier mechanism ee88b900 notify_socket.go: avoid use of bytes.Buffer 313723fd fix libcontainer example 9f383793 build(deps): bump golang.org/x/net from 0.1.0 to 0.2.0 467dd234 build(deps): bump golang.org/x/sys from 0.1.0 to 0.2.0 e0d3c3e0 build(deps): bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0 783f9ffe runc checkpoint: destroy only on success 79aedac1 go.mod: golang.org/x/*: use tagged versions 6462e9de runc update: implement memory.checkBeforeUpdate 56edc41c ci: bump shfmt to 3.5.1, simplify CI setup 18f8f482 Fix comment of signalAllProcesses for process wait due to sigkill 2cd05e44 libct/seccomp/patchbpf: rm duplicated code fbce47a6 deps: bump github.com/checkpoint-restore/go-criu to 6.3.0 b265d128 libct/seccomp: enable binary tree optimization 65840f64 tests/int/seccomp: fix flags test on ARM 6bf2c3b6 ci/gha: use v3 tag for actions/cache a04363c1 build(deps): bump actions/cache from 3.0.10 to 3.0.11 4a8750d9 tests/int: add a "update cpuset cpus range via v2 unified map" test 77cae9ad cgroups: cpuset: fix byte order while parsing cpuset range to bits 462e719c Fixes inability to use /dev/null when inside a container 04389ae9 libcontainer/cgroups: return concrete types ae53cde3 cirrus-ci: install EPEL on CentOS 7 conditionally 8584900e build(deps): bump actions/cache from 3.0.9 to 3.0.10 1be5d45d build(deps): bump github.com/cilium/ebpf from 0.9.1 to 0.9.3 79a5c110 build(deps): bump actions/cache from 3.0.8 to 3.0.9 da9126f7 build(deps): bump github.com/opencontainers/selinux 7189ba8d build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0 491713e8 cirrus-ci: enable EPEL for CentOS 7 4e65118d tests/int/helpers: gawk -> awk 0ffb49db tests/int: suppress bogus error 6fce0a1c build(deps): bump github.com/checkpoint-restore/go-criu/v6 e965e10c tests/int: do not set inheritable capabilities 29a28848 Add check for CONFIG_CGROUP_BPF in check-config.sh 746f4580 deps: bump go-criu to v6 45041985 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 26dc55ef seccomp: fix flag test to actually check the value c7dc8b1f libct/seccomp/patchbpf: support SPEC_ALLOW 8206f5b2 build(deps): bump actions/cache from 3.0.7 to 3.0.8 58b1374f Fix failed exec after systemctl daemon-reload df9e32bc ci: fix for codespell 2.2 b7dcdcec Add go 1.19, require go 1.18, drop go 1.17 0f4bf2c8 ci/gha: bump golangci-lint to 1.48 45cc290f libct: fixes for godoc 1.19 bf8d7c71 build(deps): bump actions/cache from 3.0.5 to 3.0.7 589a9d50 ci/gha: fix cross-386 job vs go 1.19 450dd3e2 build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.28.1 6d00bf6c build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 ea0bd782 libct/intelrdt: check if available iff configured 56daf36b libct/intelrdt: skip remove unless configured c156bde7 libct/intelrdt: elide parsing mountinfo 9f107489 libct/intelrdt: skip reading /proc/cpuinfo 13674f43 libct/intelrdt: delete IsMBAScEnabled() d9a3acb9 build(deps): bump github.com/cilium/ebpf from 0.9.0 to 0.9.1 58ea21da seccomp: add support for flags c152e831 go.mod: update runtime-spec 4fd4af5b CI: workaround CentOS Stream 9 criu issue 5fd3d09e build(deps): bump actions/cache from 3.0.4 to 3.0.5 66bf3718 tests: replace local hello world bundle with busybox bundle e119db7a tests: enable seccomp default action tests on arm d2a5acd2 CHANGELOG.md: forward-port 1.1.x changes 957d97bc Fix error from runc run on noexec fs 086ddb15 Vagrantfile.fedora: upgrade Fedora to 36 35e6c3bf libct/nsenter: switch to sane_kill() 7481c3c9 ci: bump golangci-lint to 1.46 66625701 libct: fix staticcheck warning d370e3c0 libct: fix mounting via wrong proc fd c0be1aa2 export blockIODevice 56fcc938 Switch to newer v0.10.0 release of libseccomp-golang cc0feb4b build(deps): bump actions/cache from 3.0.2 to 3.0.4 5ed3fdff build(deps): bump github.com/moby/sys/mountinfo from 0.6.1 to 0.6.2 343951a2 cgroups: systemd: skip adding device paths that don't exist 03a210d0 libcontainer: relax getenv_int sanity check 72ad2099 docs/cgroup-v2.md: update the distro list 65f41d57 vendor: bump urfave/cli, add urfave_cli_no_docs tag e0406b4b vendor: bump cilium/ebpf to v0.9.0 6b96cbdd ci: improve shellcheck job e1d04cdf script/seccomp.sh: check tarball sha256 fbafaf31 ci: drop docker layer caching from release job f7b07fd5 Dockerfile,scripts/release: bump libseccomp to v2.5.4 6a79271c seccomp: patchbpf: minor cleanups be6488a5 seccomp: enosys: always return -ENOSYS for setup(2) on s390(x) 0ca0bb9f libct/cg/sd: check dbus.ErrClosed instead of isDbusError 47e09976 libct/cg/dev: privatize some functions b6967fa8 Decouple cgroup devices handling 25f18562 libct/cg/sd: factor out devices.go d1601160 libct: use `unix.Getwd` instead of `os.Getwd` to avoid symlink cab38885 go.mod: golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5 a14cc405 release: add riscv64 binary 1d7b2971 libct/seccomp: add riscv64 dafcacb5 Makefile: set CGO_ENABLED=1 when needed 21e32d47 Makefile: add support for static PIE ab5c60d0 Makefile: fix GO_BUILDMODE setting f2f6e599 Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC f0f1b5f9 Dockerfile: don't use crossbuild-essential-* 476aa18a Dockerfile: rm dpkg --add-architecture lines d542ad65 Dockerfile: nit 98fe566c runc: do not set inheritable capabilities 009e627c Vagrantfile.fedora: fix build wrt new git 4d3e52f2 tests/int: fix a bad typo 2ce40b6a Remove tun/tap from the default device rules 68427f33 libct/seccomp/config: add missing KillThread, KillProcess df2bc138 vendor: bump seccomp/libseccomp-golang to f33da4d 29a56b52 fix deprecated ActKill 9c710564 vendor: bump urfave/cli to v1.22.6 fa83a17c ci/gha: convert lint-extra from a job to a step de25777a build(deps): bump github.com/moby/sys/mountinfo from 0.6.0 to 0.6.1 d73579ca build(deps): bump actions/cache from 3.0.1 to 3.0.2 66be704d ci/gha: remove stable: when installing Go b6eb9476 build(deps): bump actions/upload-artifact from 2 to 3 9d2268b9 build(deps): bump actions/setup-go from 2 to 3 b76b6b93 Allow mounting of /proc/sys/kernel/ns_last_pid 67e06706 ci/gha: limit jobs permissions 7260bae6 build(deps): bump actions/cache from 2 to 3.0.1 ae6cb653 man/*sh: fix shellcheck warnings, add to shellcheck cacc8237 ci: add call to check-config.sh 5d1ef78c script/check-config.sh: enable set -u, fix issues d66498e7 script/check-config.sh: fix remaining shellcheck warnings baa06227 script/check-config.sh: fix SC2166 warnings dc73d236 script/check-config.sh: fix wrap_color usage 6b16d005 shfmt: add more files 01f30162 ci/gha: run on main branch d77f898f build(deps): bump github.com/opencontainers/selinux 52229286 libct/specconv: use a local variable in CreateCgroupConfig() d0c89dfa libct/cg: IsCgroup2HybridMode: don't panic 82bc042d build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 d620a401 tests/int: remove $ROOTLESS, use $EUID d330f94b tests/int/update.bats: fix extra reqs a2123baf tests/int: replace CGROUP_UNIFIED with CGROUP_V{1,2} 25ef852a tests/int: use = in test for strings comparison 102b8abd libct: rm BaseContainer and Container interfaces 6a3fe161 libcontainer: remove LinuxFactory 6a29787b libct/factory: make some methods functions 8358a0ec libct: StartInitialization: decouple from factory a78c9a01 libct: remove Factory interface 71bc308b libct/New: remove options argument b6514469 libct: remove TmpfsRoot 87cf5d20 CI/cirrus: add centos-stream-9 a0f8847e Drop go 1.16 5211cc3f Add / switch to Go 1.18 7cec81e0 libct: suppress strings.Title deprecation warning fcab941e ci: switch to golangci-lint 1.45 3618079c README.md: add cirrus-ci badge f309a69a README,libct/README: fix pkg.go.dev badges 48006d00 libct/configs/validate: rootlessEUIDMount: speedup a99f82ad tests: Add comment to clarify intent of seccomp-notify tests 9f9acd1a tests: Improve name of seccomp notify test 728571c1 tests/int: runc delete: fix flake, enable for rootless f7637def ci: use golangci-lint-action v3, GO_VERSION f7d46134 ci: bump golangci-lint to v1.44 89733cd0 Format sources using gofumpt 0.2.1 a43485c9 build(deps): bump actions/checkout from 2 to 3 1a935208 libct/cg/sd: simplify DetectUserDbusSessionBusAddress 11895cd0 libct/cg/sd: escape dbus address value 38c21694 tests/integration/helpers: set -u c8c3e852 tests: fix checks for non-existent variables 99d5c023 tests/int/{root,list}.bats: ALT_ROOT fixups in teardown 7da77d80 tests/int: don't add --root if $ROOT is not set 9e2a0463 tests/int: fix runc_spec for set -u ab9609db build(deps): bump github.com/godbus/dbus/v5 from 5.0.6 to 5.1.0 8c04b981 libct/cg/sd/v2: fix ENOENT on cgroup delegation 01f00e1f ensure the path is a sub-cgroup path 40b00886 loadFactory: remove d1fca8e5 list: report error when non-existent --root is specified 2b07e751 reviseRootDir: skip default values, add validation 899342b5 main: improve XDG_RUNTIME_DIR handling eb2f08dc checkpoint,restore,list: don't call fatal 36786c36 list, utils: remove redundant code 1d5c3310 configs/validate: looser validation for RDT 0f0f1f61 build(deps): bump github.com/cilium/ebpf from 0.8.0 to 0.8.1 be00ae07 ci: shellcheck: update to 0.8.0, fix/suppress new warnings 0b74e49d runc run/exec: ignore SIGURG 24ab543f build(deps): bump github.com/moby/sys/mountinfo from 0.5.0 to 0.6.0 dbd990d5 libct: rm intelrtd.Manager interface, NewIntelRdtManager 85932850 libct: rm TestGetContainerStats, mockIntelRdtManager 9258eac0 libct/start: use execabs for newuidmap lookup 39bd7b72 libct: Container, Factory: rm newuidmap/newgidmap 0d215150 libct: remove Validator interface 630c0d7e libct: Container, Factory: rm InitPath, InitArgs 376c9886 libct/specconv: improve checkPropertyName d37a9726 libct/specconv: test nits 58c1ff39 signals: fix signal name debug print 0767b782 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 7346dda3 libcontainer: remove "pausing" state 18e28626 libct/nsenter: fix extra runc re-exec on tmpfs 6e1d476a runc: remove --criu option 485e6c84 Fix some revive warnings bb6a8388 libct: initContainer: rename Id -> ID 1b14d974 libct/configs: rm Windows TODO 76c398f8 libct/README: rm Cgroupfs 0fec1c2d libct: Mount: rm {Pre,Post}mountCmds dffb8db7 libct: handleCriuConfigurationFile: use utils.SearchLabels 3d86d31b libct/utils: SearchLabels: optimize 1a3ee496 list: use Info(), fix race with delete 095929b1 list: getContainers: less indentation cb364108 build(deps): bump github.com/cilium/ebpf from 0.7.0 to 0.8.0 146c8c0c libct: fixStdioPermissions: ignore EROFS 18c4760a libct: fixStdioPermissions: skip chown if not needed b7fdb688 libct: fixStdioPermissions: minor refactoring 2eb6ac53 CHANGELOG: add #3306 e4d23d50 CHANGELOG.md: nit 5e201e7c libct/intelrdt: explain why mountinfo is required c45eed9a libct/specconv: rm empty key from mountPropagationMapping b5cb4056 ci: add go 1.18beta1 907aefd4 libct: StartInitialization: fix %w related warning 024adbb1 libct: Create: rm unneeded chown edeb3b37 libct/intelrdt: faster init if rdt is unsupported 6c6b14e0 libct/intelrdt: remove findMountpointDir test 02e961bc libct/intelrdt: wrap Root in sync.Once Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: update to v1.2.0 -tipBruce Ashfield2024-07-161-1/+1
| | | | | | | | | | Bumping podman-compose to version v1.2.0-29-g0866492, which comprises the following commits: 8505009 Support python direct call _parse_args or run 9fe3038 tests/integration: Automate 'build_fail' manual test 0f8348b tests/integration: Automate 'build' manual test Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v5.2.0-rc1Bruce Ashfield2024-07-161-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits: 59696341b5 Bump to v5.2.0-dev 973e865422 Bump to v5.2.0-rc1 eb750f61f6 Vendor in latest containers(common, storage,image, buildah) b08b630c84 test: drop unmount for overlay e16e528f39 test: gracefully terminate server fbc4768a00 libpod: shutdown Stop waits for handlers completion 6832a35f65 libpod: cleanup store at shutdown 54fce37968 Add NetworkAlias= support to quadlet 317a88ee4e cmd: call shutdown handler stop function 3280da0500 fix race conditions in start/attach logic 04fb77efe2 swagger: exlude new docker network types f90bd48859 vendor: bump c/storage e24367aa14 update to docker 27 b1e535b911 contrib: use a distinct --pull-option= for each flag 02af4f8bd6 Update warning message when using external compose provider 7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0 830e550073 Ignore result of EvalSymlinks on ENOENT 926547f7d3 test/upgrade: fix tests when netavark uses nftables 5856adb9f8 test/system: fix network reload test with nftables c4b2015e3a test/e2e: rework some --expose tests 9945981afb test: remove publish tests from e2e 43f6173cc6 CI: test nftables driver on fedora 07b69943a4 CI: use local registry, part 3 of 3: for developers dd1bcabae9 CI: use local registry, part 2 of 3: fix tests 2e8c074234 CI: use local registry, part 1 of 3: setup d4c0e7ecbd CI: test composefs on rawhide 176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security] 4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0 bd71b75de4 Improve container filenname ambiguity. 4336c5a4f5 containers/attach: Note bug around goroutine leak 1dd8a35b2f Drop minikube CI test 6f6e0e7126 add libkrun test docs 766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0 4b7aaafb2d cirrus: check for header files in source code check 336c45f68e pkg/machine/e2e: run debug command only for macos c819c7a973 create runtime's worker queue before queuing any job 34ba26ec52 test/system: fix pasta host.containers.internal test 81250cc5a9 Visual Studio BuildTools as a MinGW alternative a2c83cb0fd SetupRootless(): only reexec when needed 3350cd3eed pkg/rootless: simplify reexec for container code 049942db04 cirrus: add missing test/tools to danger files 1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0 e2ff5d4e5d Windows Installer: switch to wix5 f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0 5e3d821814 pkg/machine/e2e: print tests timings at the end 527c0f0bfa pkg/machine/e2e: run debug commands after init ada4e1a8c1 pkg/machine/e2e: improve timeout handling 62956ac192 libpod: first delete container then cidfile ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0 a181b7bc61 System test fixes 55ad0d6e0e cirrus.yml: automatic skips based on source 2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0 d00e68e550 podman events: fix error race b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0 1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security] 5c41eb6df8 Update CI VM images 3c0176b2d0 pkg/machine/e2e: fix broken cleanup f84f4a9cce pkg/machine/e2e: use tmp file for connections fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage e810b340ef CI: mount tmpfs for container storage 9814ed40c7 docs: --network remove missing leading sentence 83863a6863 specgen: parse devices even with privileged set 5e156c424f vendor: update c/storage 22b57d3230 feat(quadlet): log option handling 786ea01a64 Error when machine memory exceeds system memory 0d0418a5bf machine: Always use --log-file with gvproxy c9e3458c99 CI: Build-Each-Commit test: run only on PRs d2ca2058c6 Small fixes for testing libkrun 069eace84b Podman machine resets all providers e58e715583 Clearly indicate names w/ URLencoded duplicates 926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs fdb736d282 apple virtiofs: fix racy mount setup 67df6d60c3 cirrus: fix broken macos artifacts URL 6db8ff7f7b libpod/container_top_linux.c: fix missing header 3703cbf1d7 refactor(build): improve err when file specified by -f does not exist 905e7ae070 Minor: Remove unhelpful comment 541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11 439fe90208 Minor: Rename the OSX Cross task 02b922ebfc [skip-ci] Remove conditionals from changelog 65ed96585d podman top: join the container userns 6c75a10875 Run linting in parallel with building 7ff4bbae26 Fix missing Makefile target dependency a3d5842746 build API: accept platform comma separated 180cc6f863 [skip-ci] RPM: create podman-machine subpackage de58c5f292 ExitWithError() - more upgrades from Exit() a7415c9316 test/e2e: remove podman system service tests a0b2b0d34c cirrus: reduce int tests timeout 8f2d403cd1 cirrus: remove redundant skip logic 7562f4ccdb pkg/machine/apple: machine stop timeout 1a6a200403 CI: logformatter: link to correct PR base d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0 f50734636c ExitWithError(): continued 31888f23aa test/system: Add test steps for journald log check in quadlet def182d396 restore: fix missing network setup a158eae7ff podman run use pod userns even with --pod-id-file 5815195528 macos-installer: bundle krunkit e404976d1b remote API: fix pod top error reporting 29ecf5984c libpod API: return proper error status code for pod start 945226a844 fix #22233 5d009715f6 added check for `registry.IsRemote()`. and correct error message. e4f64f91fe fix #20686 4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image. 49eb5af301 libpod: intermediate mount if UID not mapped into the userns 08a8429459 libpod: avoid chowning the rundir to root in the userns c81f075f43 libpod: do not chmod bind mounts 094bc673ef libpod: unlock the thread if possible d53fee511f CI Cleanup: Remove cgroups v1 support d810f4187e ExitWithError() - more upgrades from Exit() 4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing 7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope e48f3137c0 libpod: fix comment 8be9ec7216 e2e: test container restore in pod by name c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs. 3f785e8735 systests: kube: bump up a timeout f134ab77bc cirrus.yml: add CI:ALL mode to force all tests d9183f0587 cirrus.yml: implement skips based on source changes 2f680eb4b5 CI VMs: bump 7dc288dbed restore: fix container restore into pod 6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig 83549ba11f chore(deps): update dependency setuptools to ~=70.1.0 91a5c0de2a Quadlet - use specifier for unescaped values for templated container name 0eaec1a2e9 cirrus: check for system test leaks in nightly 4e0cd49148 test/system: check for leaks in teardown suite 81c90f51c2 test/system: speed up basic_{setup,teardown}() a2352fa3ea test/system: fix up many tests that do not cleanup e9c6cd1559 test/system: fix podman --authfile=nonexistent-path f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1 043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1 f4aa71e730 Update module github.com/spf13/cobra to v1.8.1 0627fce798 Update module github.com/gorilla/schema to v1.4.0 5c1e5cd026 pkg/machine/wsl: force terminate wsl instance bd906cb314 pkg/machine/wsl: wrap command errors dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution c20767120f CI: do not install python packages at runtime 54edf3d8ee Release workflow: Include candidate descriptor 19989380b8 Minor: Fix indentation in GHA release workflow 82973c38e4 GHA: Send release notification mail ad56dc7e2b GHA: Validate release version number 64091777fe Remove references to --pull=true and --pull=false 267d838e38 ExitWithError, continued 730a215025 podman: add new hidden flag --pull-option 5a4416be08 [CI:DOCS] Fix typos in podman-build 8fececcdb9 infra: mark storageSet when imagestore is changed 18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver 5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2 0c587f0246 refactor(machine,wsl): improve operations of Windows API ad8fc6a74b --squash --layers=false should be allowed 858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0 fa4f11facc update golangci-lint to v1.59.1 3825e73120 Rename master to main in CONTRIBUTING.md cec6859369 podman 5, pasta and inter-container networking a9de888a15 libpod: do not resuse networking on start 4b29c9dd73 machine/linux: Switch to virtiofs by default bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default) 406f130590 machine/linux: Use memory-backend-memfd by default f317eb29ab ExitWithError() - continued 550cb07fc0 Enable libkrun provider to open a debug console dcec81e694 Add new targets on Windows makefile (winmake.ps1) 5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible 2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1 f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0 8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0 ffc8522646 libpod: fix 'podman kube generate' on FreeBSD df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0 e8ea1e7632 libpod: do not leak systemd hc startup unit timer 15a4e1dffd vendor latest c/common 7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly 80ed85dc17 run bats -T, to profile timing hogs 350dfabf66 test/system: speed up podman ps --external 8fa1ffbbec test/system: speed up podman network connect/disconnect 8640ce998c test/system: speed up podman network reload 609146fb75 test/system: speed up quadlet - pod simple 7f3bb2d238 test/system: speed up podman parallel build should not race 8852614792 test/system: speed up podman cp dir from host to container 8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label 471e001c7f test/system: speed up podman --log-level recognizes log levels 26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test c466377013 test/system: speed up quadlet - basic 6b021dd4ba test/system: speed up user namespace preserved root ownership 2e70d4201f System tests: add `podman system check` tests fec58a4571 Add `podman system check` for checking storage consistency f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0 7243c7109c fix(libpod): add newline character to the end of container's hostname file 6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10 e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504 af7bd67d4e Fix 5.1 release note re: runlabel 164573dc34 test/e2e: use local skopeo not image b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo b146f9126a chore(deps): update dependency requests to ~=2.32.3 dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81 900e29549a libpod: do not move podman with --cgroups=disabled 12f634edf0 Update release notes on Main to v5.1.0 5dc1738c05 test: look at the file base name 6243f5cebe tests: simplify expected output 7552735fa9 Sigh, new VMs again 4adb5cbbff Fail earlier when no containers exist in stats fb4ddf86cc Add Hyper-V option in windows installer 4ece83bdf9 libpod: cleanup default cache on system reset aa08552bf6 vendor: update c/image ad661b5b31 test/system: speed up kube generate tmpfs on /tmp bff0697de8 test/system: speed up podman kube play tests 67356a71b3 test/system: speed up podman shell completion test 01642c64ea test/system: simplify test signal handling in containers 6fa064f991 test/system: speed up podman container rm ... 37120bbe80 test/system: speed up podman ps - basic tests 4f3c691087 test/system: speed up read-only from containers.conf edf6f1814e test/system: speed up podman logs - multi ... fe05e25edf test/system: speed up podman run --name 1ae05473c1 Debian: switch to crun 1093ebb72b test/system: speed up podman generate systemd - envar 15606148e5 test/system: speed up podman-kube@.service template 42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds 9e321aafda test/system: speed up exit-code propagation test 94ba2cf1a1 test/system: speed up "podman run --timeout" 82bffb9c50 test/system: fix slow kube play --wait with siginterrupt 7ce3c6bf1e undo auto-formatting 9a7ffaa077 test/system: speed up podman events tests 9f823ecb25 Quadlet: Add support for .build files 9de1d4f653 test/system: speed up "podman auto-update using systemd" a09152ab28 test/system: remove podman wait test 7f567a4e51 tests: disable tests affected by a race condition 2b43f62233 update golangci-lint to v1.59.0 6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported b45364254f working name of pod on start and stop c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0 f8cc1b4807 Bump Buildah to v1.36.0 661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0 9c92bc64a7 fix typo in Tutorials.rst 74e8f98772 Mac PM test: Require pre-installed rosetta db3abd0d28 test/e2e: fix new error message 23c830704d Add configuration for podmansh 4fd425429b Update containers/common to latest main 046c0e5fc2 Only stop chowning volumes once they're not empty d094a9f18e podman: fix --sdnotify=healthy with --rm e166f6bfe0 libpod: wait another interval for healthcheck ad1d3f8fc7 quadlet: Add a network requirement on .image units d418391ce6 test, pasta: Ignore deprecated addresses in tests 18557659e4 [CI:DOCS] performance: update network docs 08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 93ef340071 CI: disable minikube task 8f8dfb971f [CI:DOCS] Fix windows action trigger 1766a1a24b chore(deps): update dependency setuptools to v70 3ab9e864f6 Check AppleHypervisor before accessing it e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0 d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2 63df724a40 add podman-clean-transient.service service to rootless 9a8c3433c1 [CI:DOCS] Update podman network docs fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode 54ce5c6af1 vendor latest c/common main fe7cc67ef4 Add Rosetta support for Apple Silicon mac ad297b1823 bump main to 5.2.0-dev 8afa06ee89 Use a defined constant instead of a hard-coded magic value 47f01e85c5 cirrus: use faster VM's for integration tests 943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c 4b0ae78e00 [CI:DOCS] Fix Mac pkg link 061bcc06ea test: remove test_podman* scripts cb905f59ea test/system: fix documentation 6408a05927 Return StatusNotFound when multiple volumes matching occurs 35375e0af8 container_api: do not wait for healtchecks if stopped b06c58b4a5 libpod: wait for healthy on main thread bcb7edfded remote API: restore v4 payload in container inspect 6c78a72995 Remove duplicate call 164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3 590fec7a78 Change tmpDir for macOS 120660e239 fix: close resource file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-spec: update to v1.2.0Bruce Ashfield2024-07-161-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runtime-spec to version v1.2.0-17-g7017384, which comprises the following commits: 119ae42 Add CPU affinity to executed processes 2149fb5 config-linux: describe the format of cpus and mems c6af124 ci: remove redundunt actions d4aa6d8 chore: format JSON file `make -C schema fmt` b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-spec: update to v1.1.0 latestBruce Ashfield2024-07-161-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping image-spec to version v1.1.0-25-g39ab2d5, which comprises the following commits: a977bd3 Remove validation warnings to stdout 4bbdd7f Switch jsonschema validation libraries 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-06-28 13:24:09 +0000