summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* ceph: update to v20.0.0Bruce Ashfield2025-03-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping ceph to version v20.0.0-709-ga53e858fd7c, which comprises the following commits: b7dc6bb1ec5 rbd: print the return codes on error 20b621fceb8 doc/cephadm/services: Add mention of --zap for OSD removal 4dee7917bf0 PendingReleaseNotes; doc/rados/operations: document "rm-pg-upmap-primary-{all}" commands 1b6c0fd00cf .github/workflows,script: add test for missing .qa links 0d65d140d72 mgr/dashboard:fixed alignment of create action button 46ff6b42b5f qa: add missing .qa links 55d72f38b67 mgr/dashboard: NFS - Fix Edit NFS export request 7b5f73f4c17 doc/cephadm/services: Correct indentation in osd.rst c18a78ef58a workflows: Pin specific SHAs a74dbbe8ee1 PendingReleaseNote: add note that "volume create" accepts pool names... 3044bf7e4b6 doc/cephfs: mention new options for "fs volume create" cmd e541dca2278 mgr/nfs: NFS Cluster and Export Listing 60b1bc4cd5e rgw: radolist clean up, calculate obj info slightly earlier de2023f4fca rgw: modify radoslist to better support the rgw-gap-list tool 9d1ac190ffb rgw: fix regression in radoslist with SLO manifests 3d6de8a6698 mgr/dashboard: add types for mgr-module list f4bc03e4040 mgr/dashboard: fix access control permissions for roles e4147a0988a test/common: skip google tests which create core dumps in test_interval_set 8f7f923e945 mgr/dashboard: bucket lifecycle fixes after using xmltodict package f4c74f50fa6 mgr/dashboard: Not able to edit user display/full name in user form 058b95abe62 doc/radosgw /notifications: fix topic details 3ae193035c8 qa/cephfs: test passing pool names to "fs volume create" cmd 058769c1317 qa/cephfs: separate the tests for "ceph fs volume create" cmd e794a19fd0d mgr/vol: allow passing pool names to "fs volume create" cmd f59066195fd mgr/dashboard:fixed issue with notification icon 58cd2958307 test/unitest_bluestore_types: fix a compilation error c9382d87d64 osd: use cmd_getval_cast_or() to fetch shard-id ae1e251c5f3 common: add cmd_getval_cast_or() 3d0283a0cd6 monitoring: add SMB overview grafana dashboard 49cc45afe88 libcephfs_proxy: remove redundant unsigned >= 0 comparison ee69f521939 doc/cephadm: Add PG autoscaler advice to upgrade.rst e7bf6072693 doc/dev/developer_guide/essentials: update mailing lists c8953a03d24 doc/rados/troubleshooting/log-and-debug: add section for Monitors a7e2fab0085 doc/radosgw: Improve layout.rst 37b70581d89 doc: add clarification note on how charmap is applied ecce75132a5 qa: Edit test files to incorporate unset arguments, crush_rule, size, min_size 78a988f35db mgr/dashboard: Fix rgw user key modal not shown 84e2f2f3216 rgw: fix stacked delete marker test in test_rgw_versioning 017f3339c05 librbd: migrate from boost::variant to std::variant 6e9e2033bf0 mon, osd: add command to remove invalid pg-upmap-primary entries 82ec00ddf08 monitoring: rename NVMeoFSingleGatewayGroup alert cc66889b974 doc/rados/operations/pools: Edit Unsetting values for a stretch pool cacc5f51270 [3AZ Stretch pool]: Allow user to specify values when unsetting pools 4f3815deb96 crypto: remove unused include 98b70c149d5 cmake: make libcap REQUIRED fe171132c35 nvmeof: bump image version to 1.5 94aebfc3f7d mgr/dashboard: Add RGW topics endpoint creation for create ,delete and list in dashboard 0727321d899 common: remove deprecated get_tracked_conf_keys() 300f6435095 rgw/cloudrestore: Add Restore support from Glacier/Tape cloud endpoints 38d2c11bf24 rgw/cloud-tier: Redefining cloud tier types b1ddd68f7c7 rgw/cloud-restore: Add new tier-type & options related to S3 Glacier 826d4936896 rgw: skip replication from lock enabled buckets to lock disbaled buckets 2c4b7181621 rgw: skip versioned entries to non-versioned buckets and vice-versa 7e47deede0b rgw: reject PutBucketReplication on mismatched versioning and lock 56a21cbc03e doc/rados/troubleshooting: Improve troubleshooting-pg.rst 59a894713a9 doc/rados/operations: improve crush-map-edits.rst 62c3e5ec69f rgw/iam: add policy evaluation for Arn-based Conditions 66d2dc78720 mgr/volumes: fix issues pointed by flake8 0d6a6f528c3 mgr/volumes: correct logger names 8fd7be55f44 rgw/cloud-restore: Handle "null" instance non-current objects cef383b0a76 rgw/cloud-restore: Handle versioned objects afded137307 mgr/dashboard: add basic e2e to verify wizard 5c8fa84fe5d mgr/dashboard: fix multisite wizard form not showing 737ae7f73a8 mgr/dashboard: fix OAuth2 SSO when roles_path is empty a7a63aa3ffe rgw/iam: match_policy() treats MATCH_POLICY_ARN as case-sensitive 4cd40c7f715 rgw/iam: simplify match_policy() for colon-delimited use only 567c9e76674 mgr/dashboard: add xlmtodict import and fix lifecycle get request 1ad62cf887b qa/tasks/radosbench: make use of concurrency flag c29f531a972 qa/rgw: suppress "pool(s) full" cluster warning for rados-pool-quota 9ff036e7ed4 qa/rgw: test_rgw_rados_pool_quota expects InsufficientCapacity 7a06e841468 rgw/s3: map ENOSPC to 507 InsufficientCapacity 9d351a76ab1 rgw: rgw_init_ioctx() adds set_pool_full_try() 38929f4e17a rgw: RGWRadosRemoveCR uses rgw_init_ioctx() 7ad1937547d include/cephfs: dump optmetadata 5fc94be121f mds: set alternate_name for new fullbit dentries db2784581ec qa: test alternate_name recovery during mds failover c7c5089ff95 libcephfs: getcwd after chdir for API constraint cda2a6e6fac client: unwrap dentries for getcwd 3bfd614a358 client: refactor / optimize chdir 28bdb8e565f test/libcephfs: test getcwd with case insensitive dir d62a3795902 test/libcephfs: refactor ManyNestedDirs a33faa7c413 include/filepath: add iterators for components b4e11f75bfa script: ensure curl is always available in build containers 6b635d3ec08 script/build-with-container: fix incorrect build invocation for tests 5bcccabe7e0 crimson/os/seastore: introduce rename_omap_root() with src and dest onodes ef2b82a3bc5 crimson/os/seastore: prevent omaptree_rm_key() to be called concurrently in the same transaction c66e46f44c3 crimson/os/seastore: introduce and use omaptree_initialize() 5b97e495279 crimson/os/seastore: reuse get_omap_root() 71e094faba8 os/bluestore: Improve bluestore_blob_t::add_tail 5016925d96e os/bluestore: Make write_v2 not need to use compress_extents, addendum bfff750dc4e os/bluestore: Make write_v2 calculate affected range bda481b7b86 os/bluestore: Make write_v2 not need to use compress_extents 7a2a4720c3d mgr/dashboard: skip nfs exports check ddd01a5f7f1 mgr/dashboard: save video only on failure d8d7836e042 mgr/dashboard: fix rgw and osd regression in e2e aeee649c203 mgr/dashboard: undefined while creating rbd image a80aa1a84a3 mgr/dashboard: cypress failure after angular upgrade 09d3e67fd2f mgr/dashboard: fixing cephadm dashboard e2e failures 6cc1305cb2b mgr/dashboard: fix osd list search with id f0f863a1a54 mgr/dashboard: reorder test runs 395c49a43d2 mgr/dashboard: add custom items to combo box 0140e6d1671 crimson/os/seastore: clear an omap root for log during _omap_clear 03b90d589ca PendingReleaseNote: add note for pause_purging and pause_cloninig 1f0bfe1c599 doc/cephfs: add note for config option pause_purging and pause_cloning e7eb36e4393 qa/cephfs: add tests for mgr/vol config pause_cloning 6d6be8b41c9 qa/cephfs: extend wait for trash empty f38fcbc6109 qa/cephfs: add tests for config option pause_purging 9582b9b13a4 qa/cephfs: don't strip any whitespace for get_shell_stdout 01d37d5e1ba mgr/vol: add pause/resume mechanism for async jobs ea867b49ee1 qa/vault: create_secrets() cleanup checks for orphaned keys 5e40ec969cd doc/rados/configuration/bluestore-config-ref: Fix lowercase typos 34366f0f0d8 rgw: Try to handle unwatch errors sensibly 59220c1d538 librbd/ConfigWatcher: fix a missing 'override' f9a687a339b build: Pass `-DBOOST_ALLOW_DEPRECATED_HEADERS` to compiler b446290f441 build: Upgrade to Boost 1.87 bb3be446fbd test: add file blockdiff tests 72b6c7f3e9c libcephfs / client: wire up file blockdiff 8cc05b17255 mds: add blockdiff operation support ab05bf908fb tools/rados: include latest snapshot sequence in listsnaps 1bc67295c8b doc/monitoring: Improve index.rst cf93924c237 crimson/os/alienstore/CMakeLists: Add comment 95dcfd9d8c9 qa: test fio with multiple versions of NFS 5a8598acee5 mgr/dashboard: Disable MFA test 1f84505f123 mgr/dashboard: pin lxml to fix run-dashboard-tox-make-check failure 97c43c728dc OSDMonitor: exclude destroyed OSDs from "ceph node ls" output fe829d461ad qa/cephfs: require-osd-release should now be tentacle 96be3f122c3 common/include: Add map type election and fmt::format to interval_map af8d267e5f8 client: avoid multiple calls to path_walk b7fdda71c7c os/bluestore: Add fault_range_ex e685a333356 qa/suite/rados: exclude hybrid_btree2 from testing 35cf0f6c135 dmclock/.../dmclock_server: do not clean clients with requests 0938a592e92 test/osd/TestMClockScheduler: TestMultiClientOrderedEnqueueDequeue use client class 5562ecbcdb1 test/osd/TestMClockScheduler: create_item should pass prio < cutoff b35589f7eb3 test/osd/TestMClockScheduler: add test for very slow dequeue 8b7b0463792 osd/scheduler/mClockScheduler: add constructor to specify idle/erase/check times 35b6176d90e osd/scheduler/mClockScheduler: move constructor to header c95539ec370 src/dmclock: remove superfluous license files c625008dae9 src/dmclock: copy dmclock submodule into ceph.git 53bac4648ed common: Remove unnecessary assert checking unsigned number is 0 or greater. b6f3cda5597 */: Cleanup WITH_ALIENSTORE 2b9c79e881d os: Introduce WITH_KSTORE b0970905291 crimson/os/alienstore/CMakeLists: move alien::cflags alien::cflags is now only relevant to crimson-alienstore. 5bb1d9e1d58 crimson/os/alienstore/CmakeLists: Drop WITH_SEASTAR/ALIEN facd084b694 crimson/os/alienstore/CMakeLists: cleanup crimson-alien-common 9f3619af9ae mgr/dashboard: When configuring the RGW Multisite endpoints from the UI allow FQDN(Not only IP) e5189891b09 test: test the fmt support for bitset_set & mini_flat_map eeeb0127ae7 common: fmt support for bitset_set & mini_flat_map e5003a6af51 mgr/cepahdm: adding a message when certificates check is OK ec2b3415b95 mgr/cephadm: addressing reviewer comments f4f0de8f3c6 mgr/cepahadm: fixing certificate get_status_description output 9ffe71350e7 mgr/cephadm: adding new debug flag for testing purposes only 81c54dd9c78 mgr/cephadm: fixing docs and defaults for some options eae45d208a6 mgr/cephadm: improving individual certificates checks dd6e81be3a2 mgr/cepahadm: added some logic to avoid loading unknown certs/keys 40e5ab760af mgr/cephadm: reverting usage of Org Name 'Ceph' in self-signed certs 37869ee2936 mgr/cephadm: adding new comands to remvoe keys/certificates 70e4e1c69e0 mgr/cepahadm: adding code to store self-signed rgw certificate fa990d39db8 doc/cepahadm: adding new file for certmgr documentation 14b914fa3c1 mgr/cephadm: adding cephadm mgr-module to the gitleaks file 8be392f62b1 mgr/cepahdm: adjusting grafana custom code to handle certificates b008856bcf7 mgr/cepahdm: fixing cert user_made and pre_remove actions of mgmt-gw b1b74f74c28 mgr/cephadm: fixing oauth_proxy pre_remove action 6ce19fab002 mgr/cephadm: adding UT and adjusting existing unit-tests 5d42b73e748 mgr/cephadm: renaming cert-store cmds to certmgr, adding new cmds 3bb6c572a38 mgr/cepahdm: adding certificates validationg and management logic 2ab4e8b309a mgr/cephadm: refactor cert_store to use the same code for cert/key bef277a5ce0 Revert "os/bluestore: Add debug hooks" 6f8275c880a Revert "os/bluestore: Deferred writes unit test, replicates corruption" e1c75071b4e Revert "os/bluestore: Modify _deferred_replay" caa77ed690c Revert "os/bluestore: Split _deferred_replay into 1) apply IO and 2) remove keys" d2b49489447 Revert "test/unittest_deferred: debug code" 5ec60853cfb Revert "more debug code" 4180ff9cbd8 Revert "fixup" c2b2d33293b kernel/KernelDevice: replace obsolete get_tracked_conf_keys() 6dfc166e53e crimson/osd/recovery_backend: scan_for_backfill pass start by value 8ca4fc01b1a crimson/osd/recovery_backend: scan_for_backfill to use seastar::lambda 6533f261dc3 test/crimson/test_crimson_coroutine: add test_coroutine_loops 1f80b3840d0 crimson/osd/recovery_backend: _handle_pull_response to use obc_manager a0df2e5133c crimson/.../replicate_recovery_backend: remove unnecessary check b6095992051 crimson/osd/recovery_backend: scan_for_backfill to use obc_manager 878f3bff706 crimson/osd/recovery_backend: move scan_for_backfill to coroutine f65b00ea8a9 mgr/dashboard: Improve sso role mapping 0d0f38fb5cf osd: Make casting to/from shard_id_t require explicit casts. bf6faed0010 mgr/dashboard: fix token polling req in multi-cluster UI bedc75fff28 qa/workunits/rbd: wait for resize to be applied in rbd-nbd 8e9b08ec7f8 librbd/ConfigWatcher: replace obsolete get_tracked_conf_keys() 329043355e6 rbd/throttler: replace obsolete get_tracked_conf_keys() 4325a506351 mds: replace obsolete get_tracked_conf_keys() bb2ac3222fc nvmeof: replace obsolete get_tracked_conf_keys() 52568c35460 test/crimson/test_config: replace obsolete get_tracked_conf_keys() 27c5678fd12 mgr/dashboard: update dashboard nvmeof proto files 2290a904bd6 doc/releases: Add ordering comment to releases.yml a3f45c70a23 qa/rgw: add test for sync policy user mode c22c5c1f6b8 qa/rgw: add non-account (alt) users to multisite tests 16daa6a687c ceph-volume: allow zapping partitions on multipath devices cf0e9308836 mgr/smb: Add ceph_snapshots vfs module to share definition 32d57d77132 common: bitset_set and mini_flat_map 7b4ac886621 doc: fixup #58689 - document SSE-C iam condition key bfcb5334c2f mgr/cephadm: use ip_hash to enforce the same prometheues upstream db494081588 crimson/os/seastore/rbm: add do_with() to prevent accessing unavailable reference d8eed120044 crimson/os/seastore/rbm: create a device file if it doesn't exist afa53017330 qa/suite/crimson-rados: add seastore test with RBM b7c189b33c7 qa/rgw: bump vault version to v1.19.0 2e73c875640 os/bluestore: implemented bluestore_blob_t::get_unused_mask 088c9ed28fb RGW - Temporarily disable List2Inotify1 in the posix bucket cache unit tests, until we can find why inotify fails on CI machines 8dbcb175e46 rgw: sync fairness watcher reconnects on any error dc0c6ab5e86 crimson/osd/pg_backend: rep_op_ret_t to not return acked_peers 7462b1c06e3 crimson/osd/pg: Handle peer replies handling once received 522cc6c3c41 crimson/osd/replicated_backend: Introduce pending_shart_t::last_complete 551eb008718 crimson/osd/pg: Introduce PG peering helpers 164d76f5cc6 crimson/osd/pg: use rep_op_fut_t 81cac395a84 common/obj_bencher: include cleanup 7175fb3c13f common/cmdparse: include cleanup 19ab0fe8c3f common/Formatter: remove unnecessary include 5b589f55860 common/SloppyCRCMap: add missing include 30a9248d6ce common/ceph_time: remove unnecessary include ec52e618774 common/convenience.h: remove unnecessary includes 2b5fbc050c0 common/Finisher: remove unnecessary include 498e7271c6b include/denc: remove unnecessary include 5ca8173af56 common/TrackedOp: add missing includes b24aabad6a9 include/types.h: include cleanup be3329477b5 common/perf_counters*: add missing includes 04e285e253e common/fair_mutex: include <thread> only with CEPH_DEBUG_MUTEX 90484deb9f0 common/PriorityCache: add missing include d7467b0992e blk/kerneldevice: count ops not bytes in discard_op perf counter 814f1136cac qa: add test case for remove xattr e16820fa4a0 test/libcephfs: include inode type change test for snapdiff 33c6f232069 mds: include deleted file dentry in snapdiff readdir result 6869996f2a1 doc/radosgw: Improve layout.rst fd75679cf4b build-with-container.py: Add --rpmbuild-extra-args a5a983c7363 Dockerfile.build: Install sccache 800f5c2924d build-with-container.py: Add --ceph-version a1f607bd1be make-srpm.sh: Skip make-dist if tarball is present 8e9544fed3d build-with-container.py: Add --env-file ef84118419a cephfs-shell: Add the option to remove xattr 70eb1d64ac1 cmake/cephfs: fix options to enable client and dependencies 28d8281ad60 crimson/osd/osd_operation/client_request: remove CompletionEvent from instance_handle_t::pg_tracking_events 90ac7409279 pybind/cephfs: use legacy noexcept for cdefs for cython 3.Y.Z f2b3bc810a1 osd_type: use SERVER_TENTACLE for fixing the pg_pool_t dencoding 395263ceb2f pybind/cephfs: increment ref before calling out to c++ fd184893ac0 test/osd: Code formatting changes for plugin support in ceph_test_rados_io_support dd06be06eb2 test/osd: Added support for new plugins 4cc245e43c7 src/test/osd: Split reader classes for program options into a seperate class e66437a98d5 src/test/osd: Move ceph_test_rados_io_sequence to its own subfolder 678ed6e1b09 erasure-code: Add minimum granularity interface to EC plugins fe3bc7605c7 rgw/rados: calculate_preferred_shards takes bool is_versioned 519b8b2808c rgw: scale shards based on versioned() to cover suspended buckets b45f65615d3 rgw: trigger resharding of versioned buckets sooner 66077a8a49e tests: replace obsolete get_tracked_conf_keys() fe97d05f0de crimson/mgr/client: add Client::retry_interval() d3e0ca7ffa8 crimson/mgr/client:Introduce Client::send() ce3181ed251 mds: Fix MMDSCacheRejoin::dn_strong version check failure 693f058426a mds: Fix mdcache rejoin invented referent inode 7b2d9c4b580 qa: add more referent inode tests 43b4ef3f54c qa: referent inodes - unlink, stray_reintegration 1adfe920f28 test: ceph_test_rados_io_sequence - seq 14 - write object filling gaps 146e4d7085a test: ceph_test_rados_io_sequence - scripting enhancements ae012cce34e test: ceph_test_rados_io_sequence - add truncate fff72a05b65 test: ceph_test_rados_io_sequence - add append with gaps sequence f3ee8757f49 test: ceph_test_rados_io_sequence append sequences 03316ff4ace test: ceph_test_rados_io_sequence support appends 9911ecb683b mgr/dashboard: carbonize rgw user and bucket form 3303f86fdd5 crimson/os/seastore/linked_tree_node: set reserved_ptr to an 8-byte aligned address c2d226adb00 rgw/cloudtier: Correct option ordering in RGWZoneGroupPlacementTier a090f14fc73 os/bluestore: New unit test for BlueFS deb78a9199e Revert "pybind/mgr: Protobuffer file generation for grpc deps." 741742e3910 Revert "pybind/mgr: Generate pb2 file in src/pybind/mgr/dashboard/services/proto using the protobuf file from the gateway submodule." 9cc3fbebb7e Revert "Move proto generation code block out of if(WITH_MGR_DASHBOARD_FRONTEND)." 6e23a1e43be crimson/mgr/client: partial move to coroutines b5f7200c05b crimson/mgr/client: update logger c34d9b039c7 qa/suites/orch: add a test to verify ctdb_status doesn't include GONE node ecd24969339 qa: Disable referent inodes for a few test_strays tests f27a47ac9de qa: referent inode test - link w/ max_mds=1 5e4812cdb55 qa: Add function to fetch inode from metadata pool d4a93ce43ad tools/ceph-dencoder: Add an option stray_okay 1772dc1cdf0 mgr/dashboard: Changing SimpleGraphPanel to TimeSeries Panel in cephfs.libsonnet 5935a0f295a fixup 5a29f74454f qa/rgw: add new teuthology for cloud restore s3 tests d2c1f9953d8 qa: Fix dashboard test_health failure f6f460c1492 tools/cephfs-journal-tool: Recover referent hardlink dentry ba5df7ae75a qa/cephfs-data-scan: Validate referent hardlink recovery 4e0f7dbd558 qa/test_backtrace: Validate remote_inode xattr is stored 410dcccc79b tools/cephfs-data-scan: Recover referent_inode list 3d4ac8c82fe tools/cephfs-data-scan: Recover referent hardlink - build dentry 97650eeef18 mds: Referent hardlink Recovery - Store remote_inode f264f11f44d mds: Fix straydn race between unlink/rename linkmerge f66353d36e7 mds/rename: Handle referent inode rollback 1c8ec948f62 mds/rename: Handle source dentry being referent remote 04b1ead3e45 mds/rename: Handle existing destdn referent remote 69d401f606e mds/rename: Handle referent remote linkmerge case e6c6f52e548 multi-mds/unlink: Handle rollback of referent_inodes list 236a4b7b046 multi-mds/unlink: Referent inode - reverse link mgmt 42d88f4072f multi-mds/unlink: Unlink referent inode on dentry replicas f94c8327fac multi-mds/unlink: Remove referent inode on unlink 0779064a7c2 mds/unlink: Referent inode - reverse link management bcf2e7d9a0f mds/unlink: Remove referent inode on unlink 0ed8c2a2b1c multimds: Consistent view of referent inode list c39977ff26f multi-mds/link: Handle rollback for referent_inodes list 18165365fe6 multi-mds/link: Reverse link primary inode to hardlink d7d294e3687 multi-mds/link: Send referent inode to dentry_replicas 79c3d122d2e multi-mds/link: Create referent inode and store backtrace 8abee7d58ae mds/readdir: Handle referent inode efa6a8c75a1 mds/link: Reverse link primary inode to hardlink fb3bf789f4d mds/link: Create referent inode and store backtrace 645493bc6c4 mds/mdcache: Handle referent inode on discover a069e7a6ac8 mds/rejoin: Don't fetch the dir is already complete during rejoin 2ec2c1d63b9 mds/rejoin: Handle referent inode on MDSCache rejoin 11eddc85d5a mds/migration: Handle referent inode during subtree migration dafc07cb816 mds: Handle referent inode while trimming the dentry 1e5fca15822 mds: Handle referent remote similar to remote 1bb435d4a2a mds: Log referent_inodes list with CInode a6088f0d877 mds: Log and dump referent remote cdentry 8c624968957 mds/journal: Replay referent remote dentry 1cce52fd0d8 mds/journal: Journal referent remote dentry 72613db034c mds: Make referent inodes a optional feature 1b4d4f8e24a mds: Load referent inode from disk 8de360960af mds: Commit referent inode to disk 7822a588e8e mds: Store list of hardlinks on the inode of primary link 3c034df6794 mds: Store remote inode number in referent inode b9947bacdfd mds: Hardlink referent inode plumbing work d41f0fa01f5 test/pybind/rbd: fix read offset in write zeroes tests 54f47cc28ff librbd: add rbd_diff_iterate3() API to take source snapshot by ID e1e840628d3 more debug code 2c03fc63e9a mon: track 'mon_cluster_log_to_file' 1a06923049d auth,client: replace obsolete get_tracked_conf_keys() 2d4b4235fc2 mon,mgr: replace obsolete get_tracked_conf_keys() f858fa958a6 doc: add dump stray folder command to the docs ee2beecfe9e qa/tasks/cephfs: add test for dump stray comamnd 801951e8c0d mds: implement new asok command for dumping stray folder df404e03915 mds: move MDSContext completion handling to finish method 7193adafaea ceph-volume: Refactor is_ceph_device to simplify error handling fc085405abe ceph-volume: Introduce new `Lvm` base class to unify LVM object handling 3e9ff5cc1af ceph-volume: refactors `api.lvm.Volume._format_tag_args` 59df54e4103 test/crimson/seastore/CMakeLists: [arm64] disable omap manager 25a16116f07 crimson: bump up seastar fixes ec4edf73eec seastar: bump up seastar submodule d5e900f0aa3 mgr/cephadm: Open port 4721 while deploying cephadm agent f8c794fe857 crimson/os/seastore: group omaptree-related implementations 75be0272e84 doc/rados/operations: Clarify stretch mode vs device class d1379781d16 crimson/os/seastore: improve omaptree logs 1cb13e87ab4 crimson/os/seastore: unify omaptree interfaces 79d74bf5449 bluestore: replace obsolete get_tracked_conf_keys() ea80b5fa6eb librados,msg: replace obsolete get_tracked_conf_keys() e3755b047e4 crimson/os/seastore: pass onode as reference whenever possible 6008796799f crimson/os/seastore: unify Transaction& parameter for omap 8a7bad00428 crimson/os/seastore: introduce get_omap_root() 56c37d7035e cmake/modules/BuildISAL.cmake: set no-integrated-as on clang only ff9aa20bc35 librbd: fix a deadlock on image_lock caused by Mirror::image_disable() 7b9662628e3 crimson/os/seastore: cleanups around omap_root_t fff713965ec test/unittest_deferred: debug code a9b00cfbef5 doc/rgw: update dynamic resharding docs to reflect recent changes 313546146c4 doc: document the new container build tool and link to it in README 794e3d0b25a script/build-with-container: add support for overlay dir 4208a736652 script/build-with-container: skip dnf cache dir volume mounts on docker 612a9d6808f script/build-with-container: remove default --volume arg from ctr build f6e6188e30a script/build-with-container.py: build builder image with --pull=always 37b7d509c59 script/build-with-container: add a common packages target 30836c4ed4b script/build-with-container: support custom tag suffixes ff34bf7241f script/build-with-container: add --base-branch cli option a1d49d557cf src/script: rename CEPH_BRANCH to CEPH_BASE_BRANCH for build container c1713c5bc37 script/build-with-container: add --current-branch cli option 65f055f0d83 script/build-with-container: add more distro aliases de855aec1c7 script/build-with-container: apply black formatting to file f8571d9cf9a rgw: add radosgw-admin sub-command to set-min-shards for a bucket 5ee4a92380e rgw: allow per-bucket minimum number of shards 36f2ed56d47 msg: messenger dump: Handle name collisions 453c11fcfc8 test/msgr: use 'atomic' from 'std' explicitly 2dd0059582c PendingReleaseNotes: Add note on messenger dump 1becca76b53 doc: Add Messenger Status Section to Operations->Monitoring 75a02c25db6 qa: Test `ceph tell <target> messenger dump` 4b7d43751a8 msg: Add `messenger dump <name>` asok command b7d47bceaf5 qa/cephfs: avoid unnecessary importing in test_volumes.py 323ef5175f4 crimson/os/seastore: introduce omaptree_update_root() 2c03e77e042 crimson/os/seastore: introduce omaptree_clear() 43f9eeb1e36 crimson/os/seastore: drop unnecessary _xattr_clear() a1ef880821e qa/rgw: s3tests task adds --purge-data to 'account rm' 83bacbb4745 radosgw-admin: support 'account rm --purge-data' d41a676b494 crimson/os/seastore: various cleanups and indention adjustments 470b6fa81fa crimson/os/seastore: introduce NONE to omap_type_t 1588712b558 qa/tests: retry the api call after making the request 9b2e474e04c crimson/os/seastore: drop unnecessary _omap_set_kvs() 31333885a12 crimson/os/seastore: cleanup _omap_set_kvs() 2b2b17afc5b crimson/os/seastore: drop unnecessary do_omap_get_values() 09807250719 mgr/dashboard: Changing SimpleGraphPanel to TimeSeries Panel in pool.libsonnet cccbfe12fb1 test/test_not_before_queue: fix Signed-vs-Unsigned warnings d7f9aecd3ad osd/scrub: log scrub-queue advance_time() failures 7ba63ac2947 common/not_before_queue_t: tolerate non-monotonic cut-off values f155abe5187 mgr/dashboard: Changing SimpleGraphPanel to TimeSeries Panel in host.libsonnet 171954e7dd6 mgr/dashboard: Changing SimpleGraphPanel to TimeSeries Panel in osd.libsonnet 93fba05e46c mg/dashboard: Edit Storage Class 616fdd1ae39 client: skip unexpected command replies 56cb05775a9 mgr: indicate map message is acked instead of unhandled f060ee867f5 osdc/Objecter: convert to ms_dispatch2 for ack 2810ed0f608 client: indicate maps are acked not processed c9d0913f53b msg: add alternate statuses for ms_dispatch2 handling 3b79bdbee04 tools/cephfs_mirror: do not process maps with fast dispatch 404d7e32781 doc: add docs for volumes interface for charmap 71c57121cf6 qa: add tests for subvolume charmap settings a6eeec80d77 pybind/mgr/volumes: wire up charmap for subvol/subvolgroup f7329814c91 pybind/mgr: send MDS commands through cephfs client 72d0a76e8c5 pybind/cephfs: wire up mds_command2 b3ec7385ab2 mgr: add module method to send notifications 62601ef6420 libcephfs: add mds_command2 for asynchronous commands f20df2eb854 mgr: excise CephFS client from mgr C++ base 706b2be4162 mgr: use std namespace d862d74a098 doc: add docs for CephFS charmap config 84bf1898be5 qa: add charmap tests 6f76b22c9b0 qa: add helpful exceptions for attr changes 0e9cdbe0abc qa: ignore libicu leaks 751cf313dd5 client: add wrappings for charmap manipuluation of dentry names 0fa4a95eadf client: add dir_result_t::dentry::print e80d0bf0079 win32: add libicu Windows build db58a29a538 CMakeLists: add boost::locale dependency for client 668a556322d install-deps: unconditionally install boost libraries 292f5ac45b8 test/libcephfs: update root operation return values b8662fdb033 client: refactor all path traversals through path_walk aaaa04264a0 test/libcephfs: test parallel creates 0f2abc9bc93 test/libcephfs: add test for lookup failure after readdir 4f8d1d38a38 client: init dentry shared_gen with invalid value bac86c20d0e client: add _lookup debugging 41a3f099516 client: remove redundant check 764208ead49 client: dump InodeStat from mds 6c891f96aae mds: encode optmetadata in InodeStat sent to clients 9bbfdadd1f5 mds: check client features for charmap 4ac9776adbd mds: add client feature bit for charmap 9f0c4227261 mds: wire up vxattr for changing charmap 033d8666373 mds: inherit charmap on mkdir 1ffaa361454 mds,include: add charmap optmetadata d958bcb73c6 mds,include: add inode_t optional metadata 1e34963af11 client: hide alternate_name from API 9c276fd9b63 client: move alternate_name once f346e9a2cab client: optimize alternate_name passing to helper 45ff4994f25 client: relocate definition 5c0fa1128c4 client: print dentry with alternate_name on dump c2e551260cc client: move inode dump to print method de8ceffe2b6 mds: add debugging for encoding lease stat c48f1db6ef5 mds: make encode_lease a proper method 59405d4da16 mds: add fscrypt metadata for inode stat size ff42d860370 client: use DentryRef for ref counting in MetaRequest 3c3d56fbbad client: add DentryRef 5f53a239a44 client: add helper for determining if a perm check is necessary d27eb1aab68 client: cache client_permissions config be954e09e48 client: add debugging for conf changes a84c396e7d3 client: sort configs aeb07bb1cbf client/UserPerm: add print method 8e88fb00452 client: note mount parameters in debug log d6a5656387b client: print stat mode in octal da50c6e581f common: add missing op string e62fce4ec98 include/filepath: add empty path check 5ae53387e1c src/test/crimson/seastore/CMakeLists: disable unittest-transaction-manager 374ddbc0e87 rgw/log: Fix crash during shutdown with ops-log enable. 8137616ecf8 mgr/cephadm: Add virtual_ip as a param for mgmt-gateway apply cmd fa0598af33b doc/rbd: improve nvmeof-requirements.rst 562aad626ff osd: truncate shard object to correct size with ECSwitch. dd4248f69ac osd: test: Split unittest harness for EC into legacy and new code. 1fceb55f25d osd: Re-introduce the "optimized" IO path. e5657805f9a osd: ECBackendL should not implement PGBackend directly (only ECSwitch) and add ECLegacy namespace df7decd854c osd: Move ec_inject interface in ECCommon into ECInject.cc c9e67c9d052 osd: Move ECListener to its own file. 31a2b10cd8b osd: Add ECTypes and add ec_align_t to it 482ec835d1e osd: implement ECSwitch to switch between EC implementations 481dfb15e46 blk/kernel : skip AIO thread for zero-sized devices ab5005f7597 osd: Use #pragma once rather than ifdefs to control inclusion. d9eda192c21 osd: Re-introduce ECUtil 182473f0d0c osd: Duplicate ECUtil to ECUtilL ed0fbcf850a osd: Auto-refactor: ECTransaction -> ECTransactionL 3cad33dcbb4 osd: Auto-refactor: ExtentCache -> ECExtentCacheL 6a9ab113cdf osd: Auto-refactor: ECBackend -> ECBackendL 526dac1331f osd: Auto-refactor: ECCommon -> ECCommonL c3a4c9b440f Revert: "crimson/osd/ops_executer: prevent access to null pointers caused by gcc bug" 0e6e218215f crimson/os/seastore/omap_manager: do binary search on omap nodes 032fd3a51fe crimson/so/seastore: clean up logical_child_node.cc 642e5f2da00 container/build.sh: remove local container images 64ab3a3e49d rgw: use object ARN for InitMultipart permissions 945eb10c11d doc: PR Template - Remove non-functional trigger phrases c84a89bb56b doc: PR Template - Add Jenkins job URLs to commands 357f12f074d radosgw-admin: lower default thread pool size 2390788b890 qa/rgw: fix user cleanup in s3tests task 0a4be810899 rgw: ensure connect timeout is set to 3 seconds only in the case of notifications 1b59a154109 rgw: remove unused log op info from prepare_op f15b35d7dcc Revert "test/crimson/test_interruptible_future: disable handle_error" cb5698a0679 Revert "crimson/.../replicated_request: work around gcc 11 bug in with_pg_interruptible" 7f509578ed6 Revert "crimson/.../client_request: work around gcc bz101244 and bz102217" 4a7866aeccf monitoring: fix NVMeoFSubsystemNamespaceLimit f4360508cc3 osd_recovery_sleep_degraded, osd_recovery_sleep_degraded_ssd, osd_recovery_sleep_degraded_hdd added in the configuration to throttle the data movement while recovery when pg is degraded b7ee4a3d50b qa/.../test_rgw_rados_pool_quota: ignore cluster warnings c426a2ba610 crimson: Trigger a wake operation via acquire_throttle 3065ffeb014 mon: show count of active/total nvmeof gws in "ceph -s" e3fab2a50f1 mon: Add nvmeof group/gateway name in "ceph -s" c3b7d6f1936 doc: fix incorrect radosgw-admin subcommand 53098baf693 rgw/cksum: GetObject omits checksum headers for Range requests 66b782fcda4 qa/.../test_rgw_rados_pool_quota: add test for deleting objects with pool at quota 2efa41d860b rgw/rados: use set_pool_full_try() when deleting tail objects 2b700c6d002 rgw/rados: use set_pool_full_try() when deleting head objects 76bd3d4b5e7 rgw: reject PutBucketLifecycleConfiguration on indexless buckets fa4c5cebd2b rgw: improved error when listing indexless bucket b05a9580f8e examples/rgw: register boto extension for BucketIndex on CreateBucket 567f6086ce8 rgw/s3: CreateBucket extension for layout type and shard count cd867bc19d9 rgw/rados: create_bucket() can override index type and shards c7774831d5c rgw/rados: indexless buckets skip init_index/clean_index 184da0a83bc rgw/s3: CreateBucket's LocationConstraint is optional 0d930f2d93f mgr/vol: add a helpful comment in async_job.py 3327cc0500c os/bluestore : Refactoring Allocator Class 71f028e81e4 os/bluestore : Refactoring Allocator Class 49ac822fba5 os/bluestore : Refactoring Allocator Class 67659230bf8 mgr/dashboard: SMB - Edit Cluster Fixes: https://tracker.ceph.com/issues/69964 57137e799b2 qa: remove unreacheable/redundant code from test_data_scan.py 2bd1cc13700 doc/releases: correct squid release order 54fef6bca26 mgr/dashboard: Add GKLM(KMIP) option to SSE-KMS dropdown Menu in the Dashboard UI cd394e51c8b mgr/dashboard: SMB - Edit Share. c61c314ed64 doc/rgw: clarify path-style vs virtual-hosted-style access 05e22c76f4c doc/rbd: Improve nvmeof-requirements.rst with proxy and other info e681d372b3c mgr/cephadm: don't block matching group for identical nvmeof services eedfc17597d rbd-mirror: default <-> non-default namespace remapping a741f61b002 python-common: add ctdb port to smb service spec 38eb10e9381 cephadm/smb: add ctdb ports to smb daemon endpoint f26d160485f mgr/dashboard: Update bucket details section after making bucket lifecycle changesn 0ceefb407d6 cmake/modules/BuildISAL.cmake: use GNU assembler 6ea54929b34 src/CMakeLists.txt: -Wno-vla-cxx-extension only on clang >= 18 b340461b651 script/ceph-backport: remove upstream remote inferencing 684f1938506 os/bluestore : Assigning a named variable to ceph::time_guard to prevent immediate destruction 0f4a37dd9f2 qa/workunits/rbd: add a test for force promote with a user snapshot 3053af8b11c ceph-volume: update lvm batch unit tests 01f8f710c1a qa/cephfs: add tests for "fs subvolume create" command when... 82fc1e7cac3 mgr/vol: print proper message when subvolume metadata filename is too... 6bf46083946 rgw/cloudtier : disable sync for cloud tier objects ff1b9565511 mgr/dashboard: nvmeof trash rbd image on namespace rm a3662765e63 doc: Support to retrigger docs/readthedocs.org:ceph PR build 42990500a59 doc: fix syntax (squash this) bb41cc71c77 doc: fixup (squash this) c3c94806a7f mgr/dashboard: update openapi specification for /api/cluster/user/export 961d474efa5 src/common/options: Improve descriptions in rgw.yaml.in de8b21d7bdf install-deps.sh: enable crb repository for centos 10 stream 37a3fd46c59 do_cmake.sh: specify correct python version for centos 10 stream 90d1d6ba82e doc/cephadm/services: Re-improve osd.rst b454668983f rgw: PutObjectLockConfiguration can enable object lock on existing buckets 1c0359dcf00 qa: ignore variant of down fs acc80adde99 os/bluestore: fix fault_range for _do_write_v2 520d326ebdd rgw: add default parameter for clients to time out incase they hit wrong url this fix ensures clients gracefully time out in case endpoint url is wrongly configured. ac7789139e3 tool/ceph-bluestore-tool: Make bluefs-bdev-expand command output nicer. a70a3ced7e1 os/bluestore: do not log undecodable bdev label as an error 4f5f8483444 doc/ceph-bluestore-tool: add description for show-label-at command. bd7764bc699 os/bluestore: fix alloc update after bdev expansion in NCB mode. 2a9c776f6aa os/bluestore: be less strict in main bdev label validation. ba3e4d2c9da os/bluestore: use proper device when updating DB/WAL label while expanding. 173bbe7dba7 os/bluestore: don't use bdev.size() when dealing with bdev labels in fsck. c06ccf57de3 os/bluestore: fix bdev label.size update when expanding device. 19788291c99 tools/bluestore-tool: add "show-label-at" command e1e2fbae176 tests: add call to fscrypt_cli_setup.sh to all fscrypt YAML files abe99d04411 tests: use custom fscrypt cli for xfs tests acae8940d85 tests: add --verbose for better debugging of the custom fscript cli 09daeb666fc tests: add new script for custom fscrypt cli setup 0a76d6cd01d qa/standalone/scrub: retry in TEST_abort_periodic_for_operator() 4717fa3a9ff osdc/ObjectCacher: include cleanup e24ced86861 osdc/Objecter: include cleanup 6d0bcaa55d8 osdc/Journaler: include cleanup 50c5cb2e1d1 osdc/Striper: add missing includes d9bd0043deb osdc/Filer: include cleanup 7f904c4b6d9 crush/CrushWrapper: un-inline methods to fix linker errors a8f21ce3fe6 client/Client: add missing include and forward declaration 80b0065fd71 mds/snap: include cleanup 36aae820e91 mds/MetricsHandler: include cleanup dbba44628f4 mds/LogSegment: add missing includes 7e84be8741f mds/JournalPointer: include cleanup f5b2171e8bf mds/cephfs_features: include cleanup 00b11730975 mds/MDSMap: include cleanup 0ca2e4f0b34 mds/Migrator: include cleanup c510cdeef72 mds/MDLog: include cleanup b13022f9810 mds/SnapServer: include cleanup 7c673c33dc7 mds/MDSTableServer: include cleanup 7c48d167ff0 mds/MetricAggregator: include cleanup 614540f9e0f mds/SnapClient: include cleanup 200f81a602d mds/MDSPinger: include cleanup 5b20b7ae544 mds/flock: include cleanup 9799356a8f9 mds/MDSAuthCaps: include cleanup 4aaeefde01b mds/QuiesceAgent: include cleanup 6a1f76cac54 mds/QuiesceDb: include cleanup fe177b34960 mds/mdstypes: include cleanup 09cfb4b24fc msg/Locker: include cleanup 520a56f0fe7 mds/journal: add missing includes d2820348583 mds/Server: include cleanup b76c99bc320 mds/LogEvent: include cleanup 00ae09e7483 mds/Capability: include cleanup a660eae3c54 mds/DamageTable: include cleanup 85fad5021fc mds/StrayManager: include cleanup be2624f8ea4 mds/Mutation: include cleanup a2b3c464ab8 mds/SnapRealm: include cleanup 1bda0d4b73b mds/InoTable: add missing include 63a662f29bf mds/ScatterLock: add missing include 83d47c8e8f0 mon/MDSMonitor: add missing include 645307fa38e mon/MDSDaemon: add missing include cc36b4f78c6 os/memstore: add missing includes 31188970a4a src/libcephfs_proxy/CMakeLists.txt: add -Wno-gnu-pointer-arith 9b8e337cbad src/erasure-code/jerasure/CMakeLists.txt:: add -Wno-unused-but-set-variable 88845c2ae23 src/CMakeLists.txt: add -Wno-vla-cxx-extension to clang 0e5a51b6b8a script/run-make: bump up to clang 19 c296b7a8120 src/CMakeLists.txt: require clang16 08ae32f016e src/script/lib-build.sh: start search for clang versions with 16 rather than 14 607d011c440 test/objectstore/..ops_replayer: cleanup include std::format ad5db1feac7 script:run-make: use llvm.sh (download.ceph) mirror 6d927cb0525 cmake/modules/BuildQATzip: Disable errors 9614ad3834a src/script/run-make.sh: clang 14->16 5026c1d5e4c crimson/os/seastore: cleanup, reuse onode[op->oid] 2f5982b27a0 crimson/os/seastore: handle log_root in _rename 68e6227122e crimson/os/seastore/../fltree_onode_manager: add omap type asserts 9d5eaa0df6e crimson/os/seastore: remove d_onodes 4e727a36efa src/crimson/os/seastore: add logs to track log-related OPs in transaction 78bf7bb541a test/crimson/seastore: adjust existing test based on two omap trees 17fa54d1787 crimson/os/seastore: adjust _remove to support omap tree for LOG c84ef0986b8 crimson/os/seastore: adjust _clone to support omap tree for LOG 4690721880e crimson/os/seastore: reuse do_omap_get_values in _get_attrs 0dbbbd72227 crimson/os/seastore: reuse _omap_set_values() instead of _omap_set_kvs() dbfc5305b04 crimson/os/seastore: handle log-related interfaces depending on the type e0109bb9ac4 crimson/os/seastore: add omap_type_t to omap_context_t to allocate OMapLeafNode in omap_load_context 082c90006ec crimson/os/seastore: allocate OMapLeafNode depending on the type cd6bdd288d6 crimson/os/seastore: initailize log_root if set_all_hint is called with the corresponding flag efba0106de4 crimson/os/seastore: initialize omap tree using omap type 868b8160df4 crimson/os/seastore: adjust onode to store the two omap trees 6fae0fdf383 crimson/os/seastore: introduce two omap types (small and large) to omap_root_t 14e6ed80d66 crimson/osd: use set_alloc_hint when creating an object for PGLog 55c3ac55dce ceph-volume: migrate unit tests from 'mock' to 'unittest.mock' 140199b098b ceph-volume: refactor get_physical_osds() 7dfeceed4a6 ceph-volume: support splitting db even on collocated scenario 8d8f203caef ceph-volume: enhance BlockSysFs 50c2f0709f0 qa/standalone/scrub: fix osd-scrub-repair() b657f9f2c63 qa/standalone/scrub: expand standard_scrub_cluster() 071abe955df osd/scrub: remove config option osd_repair_during_recovery 10af90547fd mgr/dashboard: add actions to create, edit and delete smb join-auth and usersgroups resources e5127b914cb suites/rados: cache tier deprecated, no need to keep the tests for it 56cb53db963 LogMonitor: set no_reply for forward MLog commands 11677c29ee6 mgr/dashboard: disable deleting bucket with objects edd96f9b05e include/unordered_{map,set}: remove, use `std` directly instead 891225014fd cephadm/tests: update daemon_action tests with force flag 0046eaaa367 mgr/cephadm: default check ok-to-stop when restarting daemons through orchestrator d0ec2d2841d qa/cephadm: add timeouts and debug commands to rgw-ingress test 5d5cf5b4225 mgr/dashboard: Make API backward compatible with size param change b1405c3c5e1 mgr/dashboard: add smb share delete action 6b2c7422d1a libcephfs_proxy: implement client side async rw operation e23667892c5 libcephfs_proxy: implement server side async rw operation 4762223ef13 libcephfs_proxy: implement the async rw callback 03b92b19272 libcephfs_proxy: define async rw opcode and structures 5e3c983d910 libcephfs_proxy: define some helper macros for callbacks df1eff54e2a rgw: /admin/account APIs accept negative values 7d75161051d librbd: fix a crash in get_rollback_snap_id 1c1acfad5dd test/store_test: wait for collection removal before going forward with the next stage in CompressionTest a6a499ed5fc os/bluestore: preload all the compressor plugins on mount. 8009a3d78f0 qa/standalone: do not use /etc/fstab as an always-there bytes source bf8737028fe qa/rgw: configure 'iam root' accounts outside of rgw/verify f9e30c84185 crimson/osd: replace obsolete get_tracked_conf_keys() 9e73041aa30 mgr/dashboard: Rgw ratelimit feature for user and bucket fd8fbea2e73 qa/workunits/nvmeof/fio_test.sh: add more debug commands e2f3bed312a qa/suites/nvmeof: Run fio with scalability test 877c726ce7f qa/suites/nvmeof: add more asserts to scalability_test e4504065405 qa/workunits/nvmeof/fio_test: Log cluster status if fio fails 9a1ee7a3da6 rgw/lua: Update background thread to handle config changes 7ef164ebcbd crimson: fix -Wmissing-template-arg-list-after-template-kw 05ea5527c4f crimson/common/operation: fix decltype usage aca5ae65719 crimson/tools/perf_crimson_msgr: fix unused-lamda-capture d24ea15ef08 crimson/osd: move the destructor of OpsExecuter to ops_executer.cc 75a74f235e6 mgr/dashboard: tox command to generate the nvmeof proto files 70819577ba2 msg/async/Stack: include cleanup 74aea6d26f2 msg/Message: include cleanup 1b42d74a7a5 msg/async/crypto_onwire: include cleanup 36beea7a855 msg/async/ProtocolV1: add missing includes f9ca9569c40 msg/async/frames_v2: add missing includes 1a1e4eb4e81 msg/msg_types: add missing includes a98f5fe5049 erasure-code: add missing include 925bb875f23 qa/tasks/thrashosds-health: whitelist PG_BACKFILL_FULL 5cdbd8f6567 rgw/iam: add RemoveClientIDFromOpenIDConnectProvider c3dfac493d8 doc/cephadm/services: Improve osd.rst 4a6e9b0de6b doc/start: Mention RGW in Intro to Ceph c0f5359b7b4 test/rbd_mirror: clear Namespace::s_instance at the end of a test 109c75ea99a mgr/dashboard: add bucket tiering option to create lifecycle policy 9748de76e02 qa/cephfs: ignore warning that pg is stuck peering for upgrade jobs 7d9298e3de7 doc/mgr: edit grammar and formatting of rgw.rst f34243463c3 libcephfs_proxy: move pointer obfuscation functions to proxy_helpers.h 22ad8e16e8c libcephfs_proxy: negotiate and use the async cbk feature a49069748f0 libcephfs_proxy: implement asynchronous callbacks 76106dd9890 doc/mgr: Add root CA cert instructions to rgw.rst 753fcff94d1 rgw: implement ConfirmRemoveSelfBucketAccess header for bucket policy 01caaa3d376 rgw/auth: add is_root and is_root_of to identities 7055fa53c50 mds: use system error codes instead of CEPHFS_EXX codes 86a8f661519 crush/CrushWrapper: un-inline methods to fix linker errors 312ebf1d3a5 mgr/dashboard: fix Python xmlsec build issue bd3b248ab9f mds,client: change result field handling in the MClientReply message 4fe51a1afc6 mds: prepare infra to replace CEPHFS_EXXX codes to system codes b1b2716f1fd pybind/cephfs: switch CEPHFS_E error codes to system error codes 54ce97973a5 PendingReleaseNotes: add note on client/mds error codes 6866d6a3fe7 mgr/dashboard: remaning critical-confirmation-modal to delete-confirmation-modal and keeping default demetion impact as medium ed222df1090 mgr/dashboard: Add confirmation textbox for resource name on delete action 06a5ad49e92 osd/ReplicatedBackend: assert non-trivial obc existence 9efa1b97b0e rgw/cloudtier : handle multisite sync for cloud objects 153639ca7f4 common/options: fix the description of osd_max_scrubs 012ab7fbfce qa: update require-osd-release to tentacle 7e4fe061a62 tools/monmaptool: bump new cluster version to X a8148634450 doc/dev/release-checklists: remove ceph-container task 4adc8b5dc26 script/ceph-release-notes: add squid/tentacle 52efefe77e7 doc/dev/release-checklists:: mark task complete 6f6bb743c24 doc/dev/release-checklist: add nightlies task fb30a782cbc doc/dev/release-checklists: update ceph-build for tentacle 1ecb95dcefe doc/dev/release-checklists: note redmine is done b5e93dfcd22 qa: update to tentacle 0be5482fe24 doc/dev/release-checklist: question telemetry tentacle test d945d372677 osd/OSDMap: update to tentacle 816e32c8778 qa/workunits/cephtool/test: update to tentacle 995570fb345 mon/OSDMonitor: update to tentacle f276334c136 common/options/global.yaml.in: update for tentacle e30eb4f3c35 mon/MgrMonitor: update for tentacle 1d3520d1d32 qa/standalone/mon/misc: update for tentacle a8b441a1cf2 doc: update compatset for tentacle 97f1afd47ad doc: no deprecated features 9ca081cf311 include/ceph_features: add SERVER_TENTACLE feature bit 843489352bd cephadm,ceph-volume: update to tentacle a9fbfb5cf2f doc/dev/release-checklist: add backport-create-issue 7bf49d69e34 script: update backport-resolve-issue to tentacle 9fa558750c8 *: add constants and release names 4e89cc9a2d5 ceph_release: update to tentacle 586b6cfff02 librbd: bump version 2edeb88cbef CMakeLists.txt: update VERSION 115f4c4a561 doc: remove obsolete checklist item a8d535cc86f doc: reset for tentacle 15962991609 RGW - Fix POSIX bucket notify test 0c3f69deef0 qa/suites/rados/basic: ignore POOL_APP_NOT_ENABLED detail in cluster log 1881cc8778a msg: Add dump() filters to async messenger/connection 2176ec2766f msg: Add connection and messenger dump() b478ff8dbd0 msg: Add dump() to Protocol{V1,V2} f33c970da6e common: Add utility to fetch TCP_INFO for socket 3d978ca9e2f rgw: be explicit on moving rados op in APIs 0a8ceefdc20 mgr/dashboard: RGW - Create Storage Class 7b4af1f4917 mgr/cephadm/nvmeof: Add QOS timeslice field to NVMeOF configuration Fixes https://tracker.ceph.com/issues/69952 5d111e23b89 test/rbd_mirror: flush watch/notify callbacks in TestImageReplayer a9d043380b4 cephadm: ingress- Add v4v6 flag to HAProxy bind directive b783d759a9e mgr/dashboard: Add namespace counter in nvmeof namepsaces c50960c39e0 mgr/dashboard: fix image size in nvmeof namespace create/update api d9d1ab7882f librbd: add missing includes 15e09a981f8 rbd_replay: add missing include 44ae6952aba SimpleRADOSStriper: add missing include af2c4b9aba0 librados: add missing includes 9f14dab4914 nvmeofgw*: disable some tests in test_nvmeof_mon_encoding.cc since they are crashed, plan to fix this in separate commit 102d5e17bf7 nvmeofgw*: test for encode/decode of new types added for epoch-filter feature 438fdd5750c nvmeofgw*: MonClient should send a first beacon with CREATED state b35273824f9 nvmeofgw*: Add mechanism to send maps to clients that need them ba7cc3b5260 crimson: Provide an options to configure several seastar parameters edcf93a4479 crimson/osd: remove invalid argurment when printing log c7254903768 osd/scrub: clean-up scrub-store IDs generation 649f33777dd mgr/dashboard: ns update route robustness c60514087bc rbd-mirror: fix possible recursive lock of ImageReplayer::m_lock 228a5663824 qa/tasks/cephadm: don't fail if we've already cleaned up conf/keyring 3a3848678bc qa/cephadm: stop cephadm mgr module during cleanup 97bbbb11b3b tools/bluestore-tool: dump label locations with "show-label" cmd 9b718a50d63 perfglue: add missing include 5093852ae08 libcephfs_proxy: gracefully handle connection close 9caf8aeef2d cls/numops: add missing include 84ece8cb2f5 cls/rbd: add missing includes b9a18ed9bed cls/cephfs: add missing forward declaration e704ed9294f cls/2pc_queue: add missing include af2525c2568 journal: add missing includes b9ff102eaf3 libcephfs_proxy: add negotiation documentation 2d85a3537d1 libcephfs_proxy: replace legacy handshake by negotation in server side 4714e40d702 libcephfs_proxy: replace legacy handshake by negotation in client side 6704556eacf libcephfs_proxy: implement server side negotiation 1e99a25ef4a libcephfs_proxy: implement client side negotiation f9766460117 os/bluestore : Fill onode test instances with sample data 7e53cf7013a rgw: prevent data sync from replicating to buckets not owned by the user 56c8c519972 mgr/dashboard: SMB Create Share 4df368381d3 do_cmake: use Python 3.12 on ubuntu >= 24 489cc484105 common/perf_counters: use the RAII helpers when dumping c834352cc70 rgw/sts: replacing load_stats with list_buckets to correctly create a federated user in oidc namespace. 9ff058e67ac qa/suites/upgrade: ignore when pg is stuck peering 0b740052a87 common: add missing mds op names 2d389a5b94d rgw: check for duplicate rule priorities in replication configuration 4e7a682284f kv: add missing includes 938672d5d4f crush: include cleanup ef956e614c4 libcephsqlite: include cleanup 31d3275f0b8 mon/ConfigMonitor: include cleanup 379f0567932 mon/MonMap: include cleanup 8a4d9f5bf55 mon/mon_types: include cleanup 0e543469d8b mon/MDSMonitor: include cleanup d50d19a0003 mon/PGMap: include cleanup 80613fd2a8a mon/FSCommands: include cleanup a0b4583d3d7 mon/Monitor: add missing includes b7198fc6ebf mon/Paxos: include cleanup fff48287ef0 mon/ConfigMap: add missing includes f33acee3b91 mon/MonClient: add missing include ef94bac8102 mon/MgrMap: add missing includes 9d99e6bdc6f mon/Session: add missing includes c31a93cf29c mon/ElectionLogic: add missing includes 0da679061db krbd: include cleanup db6d13f55f8 doc/rgw/logging: update field description 9bc321e7433 Fix 'orch ls' to display SMB ports 1393a144274 mgr/dashboard: RGW - Delete Storage Class 8abba8b1503 doc/dev/release-process.rst: release builds cannot build containers 90101c75f25 crimson/os/seastore: only LBALeafnodes take logical extents' pointers as update parameters 4e292443361 doc: Upgrade and unpin some python versions bf101108d0b mgr/cephadm: unit test for nvmeof get_blocking_daemon_hosts function e8edf47047d mgr/cephadm: block deploying nvmeof daemons of different groups on same host 972e1eaa500 mgr/cephadm: unit test for blocking_daemon_hosts in scheduler 838b1f8df1d mgr/cephadm: add "blocking_daemon_hosts" mechanism to scheduler 60300360cc5 cephadm: fence old ranks for SMB service 7fa78e62a45 mgr/dashboard: fix image size in nvmeof namespace create/update api 4f5aa60c5d7 mgr/cephadm: use double quotes for NFSv4 RecoveryBackend in ganesha conf 3c5ae6c7d01 os/bluestore: Add libfmt to "os" 72263dbb798 os/bluestore: Add health warning for bluestore fragmentation 83a23c4c037 ceph-backport.sh: add squid to known milestones 1e7663d3825 rgw/logging: flush command should print flushed log object name 55e6f54831f script/lib-build: Use clang 14 44804a374a8 qa/workunits/rbd: use create_image_and_enable_mirror() in bootstrap tests 774016bd763 rbd: don't clone ioctx before calling get_mirror_peer_sites() f5eadfff807 librbd: fix mirror image status summary in a namespace 18d787a32b9 crimson/os/seastore: remove fixed-kv-btree parent<->child pointer codes from FixedKVNodes 6856dba3ed0 crimson/os/seastore/btree: fix fixed_kv_btree's type errors f292b670181 crimson/os/seastore: add linked tree nodes 3bd34683e79 crush/CrushWrapper: Merge weights if rule contains multiple take df496529870 pybind/mgr/mgr_module: turn off all automatic transactions fa12ce661f3 cephfs-top: exception when terminal size greater than PAD_WIDTH e58e2f553d2 os/bluestore: fix do_write_v2 extentmap compress issue d9b0e780013 qa/multisite: add a create_bucket test with tenanted user 31da2c6be83 doc/rados/operations: Improve pools.rst 7cd76660188 libcephfs_proxy: implement receiving of negotiate structure f893605c16a libcephfs_proxy: add negotiation structures 3a4232728b7 libcephfs_proxy: add support for control messages 9e0a231d8c3 libcephfs_proxy: reuse proxy_link_{read|write} b079a079ea3 script/clean-ci: allow specifying custom remote name to push/fetch 2804a59a744 script/clean-ci: do not push if there is nothing to delete f7cce293051 erasure-code: Set reed_sol_van to be the default technique for Jerasure if none is specified. Also make the erasure_code_plugin_exists function in ceph-helpers.sh differentiate between a non-existent plugin and an initialization failure. 3667f4ab795 os/bluestore: make retry_max and initial_delay configurable for aio submit_batch c36c1628315 qa: cut squid nightlies to one-per-week 7b185ecaaf7 tests/ceph_timer: Fix link error that keeps showing up 1ab250796c1 exporter: Asio deprecations b2e76314cf0 rgw: Asio deprecations 87ee31f88d8 immutable_object_cache: Asio deprecations ac1241e75b7 test/neorados: Use `asio::post` free function ed47559bca9 common/Graylog: Fix Asio resolve call da3545d5847 rgw/multisite: forwarded bucket create requests reflect empty tenants as they are requested by system user. this fix overloads SysReqApplier::get_tenant() with effective_owner's tenant to ensure proper bucket ownership when there is tenant involved. 4dbaf644980 src/common/options: improve rgw_max_chunk_size description 2c6d3ec3d8e rgw/notification/logging: add bucket as context param b73c87cf25a Revert ".github/workflows: Do not exempt PRs with milestone" 343bafc4a4d script: add bash script to cleanup ceph-ci.git 289d6045a94 mgr/smb: add threading lock for SqliteStore 4ee31d88f73 docs/mgr: fix typo 2848244e73f blk/kernel : Make bdev stop immediately f21cb07c859 mgr/cephadm: use get_dependencies to calculate daemon deps abc4a197f78 doc/cephadm: improve "Activate Existing OSDs". f0c4937c973 cephadm: orch upgrade status to return output according to the format specified 2496f2b4b21 mgr/dashboard: smb join-auth and usersgroups resources listing 42d338478b0 cephadm: add cephadmlib to tox coverage environment e4f65d58b1a cephadm: add a new set of specific tests for list_daemons 0f178e61de5 container: stop deleting python generated files bf9b8d36aba container: avoid installing docs using the dnf configuration e3a66809157 os: get rid of the Transaction::decode_bp() 37e633384b7 Move proto generation code block out of if(WITH_MGR_DASHBOARD_FRONTEND). 7f2e1910af0 pybind/mgr: Generate pb2 file in src/pybind/mgr/dashboard/services/proto using the protobuf file from the gateway submodule. 0ff89b041dc pybind/mgr: Protobuffer file generation for grpc deps. d5c882c7569 qa/suites/upgrade/telemetry-upgrade: improve ignorelist ec50fc720c4 qa/tasks: improve ignorelist for thrashing OSDs 618de5350bd qa/cephadm: start mgr-nfs-upgrade test from reef 2de592e2f0b doc/cephadm: improve "Activate Existing OSDs" 4ac2d6b536b mgr/DaemonHealthMetricCollector: include cleanup 6e7e13e07b6 mgr/DaemonServer: include cleanup aeeb15ea7d6 mgr/MgrClient: include cleanup 078d00939ea mgr/ActivePyModules: add missing include 3c2565f0966 mgr/PyOSDMap: add missing include 50c1612fdf1 mgr/TTLCache: add missing include 84fcd885090 mgr/mgr_perf_counters: add missing includes e261155a8a0 doc: Clarify that there are no tertiary OSDs 691ed012600 tools: add missing includes 55c2f49a8e8 mgr/BaseMgrStandbyModule: add missing include 2d2982e7420 mgr/DaemonState: add missing includes 5c70e38a8a0 mgr/MgrOpRequest: add missing includes 4f1f40ad614 mgr/MgrCap: add missing includes 0f367a5f9b3 mgr/ServiceMap: add missing includes 64b77fb5bb5 mgr/MDSPerfMetricTypes.h: use <iosfwd> 327b3de54ee mgr/ClusterState: move own header to the top ae5aadf538c mgr/Mgr: add missing include 8dbc5f84265 mgr/cephadm: adding the SSL cert as a dependency for ingress service bd049edb942 mgr/cephadm: adding the SSL cert as a dependency for rgw service 1991c493ca3 neorados: include cleanup 7f3ea86094f os/kstore: add missing include 0d2b588d488 os/bluestore: include cleanup a1de6d562de client/Client: add missing include and forward declaration f5ff6b95b9d rgw: add missing includes 92ceeb79fde crimson/backref_entry: add missing includes b849c636e22 mgr/dashboard: add smb share listing in UI fd42b879270 mgr/cephadm: reconfig rgw daemon when certificate changes 0c57b7116d5 interval_set: Re-introduce the original behaviour of interval_set by default. 03ed3af2a50 crimson/osd: clean up BackfillRecovery 865839faa49 osd/PeeringState: check racing with OP_BACKFILL_FINISH when defering backfill 13b9cdfccfb osd/PeeringState: set PG_STATE_BACKFILLING before calling on_backfill_reserved 48f2943dd0f crimson/osd/pg_recovery: trigger BackfillState events synchronously 88fb54e99b7 crimson: report dynamic perf stats to mgr 7c300425aa0 crimson/osd/pg: record client requests' metrics in DynamicPerfStats 89d79344f93 osd/DynamicPerfStats: remove the dependency on classic osds df83836ca92 crimson/osd/pg_recovery: avoid repeatedly updating the peering missing set for the same object 9d6eab50388 crimson/osd/recovery_backend: always set the primary osd's BackfillInterval::version to the last_update_ondisk b78aea8bbb2 doc/releases: fix heading types 5ef4376db05 doc/releases: move related tracker on new line 4b8ede82626 doc/releases: fix formatting with v19.2.1 documentation f893778ef00 mds: do not schedule quiesce for non-head imported inodes 55198cfa05b os/bluestore: Fix default base size for histogram bc03c5bac47 Revert "msg/async/ProtocolV2: call KeepAliveFrameAck::Encode() without `write_lock`" e3ed3b302c5 qa: do read checks with non-empty file 3646e2448b1 Revert "msg/async/ProtocolV[12]: unlock the `write_lock` before doing I/O" d6db6fadf8f doc/releases: Add notable changes for v19.2.1 cf0ed0a2859 script: allow relative & ~ paths in build-with-container dnf cache arg 5ee832185b1 mon,cephfs: small improvement for health warning methods 59511e65868 qa/cephfs: test that failing a FS is possible when other MDS/FS has... d53be13c04d qa/cephfs: allow detecting MDS ID from FS object for method the.. 0437952c43d mon,cephfs: don't disallow "fs fail" when other FS/MDS has health... cf68e49597d cephfs,mon: rename variable to a better name 7f5553ce434 mon,cephfs: fix indentation level for a code block 95a812a5f5c qa/cephfs: test that a MDS can be failed when other FS/MDS has a... 5a7834b6cd8 qa/cephfs: allow passing MDS ID to method that generate... 3f16e0c5931 mgr/dashboard: fixed unit tests 39b4d38a3d0 rgw/lua: Fix healthchecks requests to not goto backend storage. f7165966277 script: set execute bit on build-with-container.py b8f89327e1a rgw: handle destination bucket as an ARN in ReplicationConfiguration c4947c57562 mgr/nfs: nodeid should be numeric for RADOS_KV block in ganesha.conf file 29b5fcc62b4 qa: Remove openstack.yaml file which is no longer relevant fcf8d36e43e qa/suites/rados/verify: Allow selection of 2 or 4 node cluster b1e5da594a6 doc/rados/operations: Improve pools.rst 85d2633310c lmgr/cephadm: validate no duplicate groups and group vs. service id for nvmeof 27c9e65f57f mgr/cephadm: add function to get service specs by service type b16fc92155e mgr/cephadm: fix typo with vrrp_interfaces in keepalive setup f276cc5176f src/script: add a script to help build ceph using containers bde72fc478c build: add files needed to create a build container 4578625ce06 build: small script tweak to allow different build dirs 3046f78d69e src/script: add helper function has_build_dir 18d5cae6252 qa: remove redundant and broken test 926011ad9d3 cephadm: use get_container_image_stats in cephadm.py e965813da15 cephadm: add parsed_container_image_stats to container_engines 32fe8aacc98 cephadm: replace get_container_stats in cephadm.py 3154cd228ba cephadm: add get_container_stats to container_types cc087cf979a cephadm: add parsed_container_stats to container_engines bc61710baed cephadm: move ContainerInfo class to container_engines.py b9d1e96fba1 pybind/mgr/cephadm: fix issue with multiple nfs clusters on the same port 9bc969b34c9 mgr/dashboard: fix host form issues 8679652cced crimson/CMakeLists: cleanup BOOST_ASIO_DISABLE_CONCEPTS 4badc83940f common/ceph_fs: Enable O_DIRECTORY|O_NOFOLLOWUP flags translation under Win in ceph_flags_sys2wire() 717c1c5a084 mgr/dashboard: Storage Class Management a03d3311796 mgr/cephadm: continue in nfs service purge if grace file is already deleted 0aa73ea12ed qa/suites/orch/cephadm/smb: add cephfs proxy enablment tests 1d2057c49f9 mgr/smb: default to using the proxied vfs module de7fd2c0c88 mgr/smb: automatically enable proxy for shares with proxied provider 7dce09ae69d mgr/smb: add value 'samba-vfs/proxied' for when module is to be proxied f86a17d7beb mgr/smb: simplify share config generation function b1a3e364e46 cephadm: add a libcephfs proxy sidecar option to smb daemon 12809b6c4af mgr/cephadm: add option to pass ceph image to smb for proxy sidecar cc72a583488 python-common/deployment: add cephfs-proxy feature flag d1815c64199 mgr/cephadm: update get_container_image function 420298b80d1 cephadm: move envs_list logic back to base class ec4885cb257 common/perf-counters: replace 'assert' with 'ceph_assert' 5bf0150f608 rgw: replace obsolete get_tracked_conf_keys() 99e0e3aa5f4 qa/rados: Reorganized bluestore 3b9b290c5f6 qa/suites/nvmeof: use SCALING_DELAYS: '120' 4d6c8298dd0 common,osd: replace obsolete get_tracked_conf_keys() 7f25376e933 mgr/dashboard: Add 'Browse Dashboards' button in Grafana dashboards a612ba0e87b mgr/smb: Add profiling configuration to global definition 011b174ea09 Display comma separated ports for RGW services 798b94642da cephadm: Add pre_remove and ensure deployment values are reset and API settings are updated when removing Prometheus or Alertmanager daemons 7d99290092b Fixup for emacs/vim modes, moved to top of file. 0d8bd4d0352 mgr/cephadm/nvmeof: Add max_hosts field to NVMeOF configuration and update default values Fixes https://tracker.ceph.com/issues/69759 e5cb5db0020 monitoring: add tests for NVMeoFMaxGatewayGroups ab4a1ddcd89 monitoring: add alert NVMeoFMaxGatewayGroups c5c4b10ac12 monitoring: add NVMeoFMaxGatewayGroups 983b489e006 doc/rados/operations/stretch-mode: fix mistake in stretch mode c43e7337212 doc/rados: improve pg_num/pgp_num info ba9270dc9fe win32_deps_build.sh: pin zlib tag 76b40284a6b qa/suites/nvmeof: Remove watchdog from thrasher 01502bb23e7 src: modernize sample.ceph.conf 4ab3bed3f6a doc/cephadm: clarify "Monitoring OSD State" 00b530fc975 doc/architecture: remove sentence 6093f918259 crimson/.../replicated_recovery_backend: take excl lock while pushes commit 46d5eec6b60 crimson/.../replicated_recovery_backend: route pushes earlier 7af22ba0008 pybind/mgr/cephadm: allow setting custom monitoring_port for nfs c353b788ebe mgr/cephadm: add Server_Scope = <fsid> to NFSv4 section of ganesha conf 8666c5694eb doc/rbd: use https links in live import examples 8e5db6e09ce mgr/cephadm: create OSD daemon deploy specs through make_daemon_spec 624640cbdf2 Isolate the absl flags to ceph-mon & ceph-nvmeof-monitor-client targets only afc89fdde80 qa/workunits/rbd: add test_import_nbd_stream_disconnected() e4657cb2a2b librbd: stop filtering async request error codes e8201d3442e qa/tasks/nvmeof.py: Add teardown() method d4aec583b7e qa/tasks/nvmeof.py: Ignore systemctl_stop thrashing method 7dfd3d36e9e qa/tasks/nvmeof.py: Fix do_checks() method 5a58114498b qa/tasks/nvmeof.py: make seperate calls in do_checks() b5e6a0c24e5 qa/tasks/nvmeof.py: Do not use 'systemctl start' in thrasher 06811a48197 qa/workunits/nvmeof/fio_test.sh: fix fio filenames 0b0f450e95b qa/tasks/nvmeof.py: Add stop_and_join method to thrasher d7551f79cc5 qa: Add qa/suites/nvmeof/thrash/gateway-initiator-setup/2-subsys-8-namespace.yaml 023c20975c1 qa/tasks/nvmeof: Add --refresh flag in do_checks() cmds 744b04aea66 mgr/cephadm/nvmeof: Add verify_listener_ip field to NVMeOF configuration and remove obsolete enable_key_encryption Fixes https://tracker.ceph.com/issues/69731 8b264e6c412 tools/contrib: Add lscpu.py auxiliary module to parse the output of lscpu, rebased with updates 51806c1d5a3 tools/contrib: Add balance-cpu.py to distribute Seastar reactors to CPU cores using two strategies: OSD and NUMA socket based f83110a9add tools/contrib: Add tasksetcpu.py to show the CPU allocation grid ee2d5968d53 vstart: Add new --crimson-balance-cpu option 83c03c01fdf doc/dev/crimson: Add BalanceCPUCrimson with clarifications as per conversation/review c96f8a77e99 mgr/dashboard: Multi-site replication wizard breaks when a default realm is already present in the secondary cluster. 7853731a837 osd/scrub: discard repair_oinfo_oid() 0a17afe304d osd/scrub: remove unnecessary loop 7c8f081b2ef common: ceph_context: make use of get_tracked_keys() 21d099239e8 mds: skip scrubbing damaged dirfrag 9c83f6c9a50 tools/cephfs/DataScan: test equality of link including frag a66a68bfa53 tools/cephfs/DataScan: skip linkages that have been removed ff44ab5e63b tools/cephfs/DataScan: do not error out when failing to read a dentry 7d59db1d980 tools/cephfs/DataScan: create all ancestors during scan_inodes 593a8c50b46 tools/cephfs/DataScan: cleanup debug prints 38d4aef7e58 qa: remove old MovedDir test 4feb30b2ee2 qa: add data scan tests for ancestry rebuild 2f4a6b876ef mds: fix option mds_bal_overload_epochs bc196b7e63a qa: make the directory non-empty to force migration cb3229bf2fb qa: avoid unnecessary mds restart 9bb0de4d99f cephadm: remove some lines that are now redundant 530a81a5a63 cephadm: use parsed_container_cpu_perc in cephadm.py 1834881bd1c cephadm: add parsed_container_cpu_perc to container_engines bd93a46d8a4 cephadm: use parsed_container_mem_usage in cephadm.py 395b8d322f2 cephadm: add parsed_container_mem_usage to container_engines c20073f425c cephadm: add support for not mocking certain call methods 52b573299cd cephadm: rework with_cephadm_ctx fixture to use exitstack 531bd370377 rgw/lua: Add rgw config to enable/disable lua. dabb3bd3b36 cephadm: move get_legacy_daemon_fsid to data_utils 95137402e65 rgw: log request_id on start new request 37c1522bb39 rgw/sync: track last_update timestamp per-shard instead of per-entry 2a8d84ecf6b rgw: replace '-''s with '_''s in the sync delta counter labels 818e678d223 rgw: add labeled counters for sync deltas of shards d9e96c44f63 doc/cephadm: simplify confusing math proposition 0884e990048 RGW | bucket notifications: support cross tenant operations 7b5cc9f6525 libcephfs_proxy: implement ceph_readdir_r() 6803f28124e mgr/dashboard: upgrade angular to v18 7a4d23c474c mgr/dashboard: upgrade angular to v17 484e3105cd7 mgr/dashboard: upgrade angular to v16 6daf9eea70a crimson/.../replicate_recovery_backend: remove unnecessary check 0cda4658814 crimson/.../object_context_loader: add lock_excl_sync method d82b1cf0ef0 crimson/.../object_context_loader: add obc get_obc_manager variant 3661977a56f crimson/.../replicated_recovery_backend: move do_transaction to _handle_pull_response 3b07d56ef53 crimson/.../replicated_recovery_backend: only call _committed_pushed_object if complete c5591f5cd84 crimson/.../replicated_recovery_backend: convert handle_pull_response to coroutine cfcbb82956a crimson/.../replicated_recovery_backend: convert _handle_pull_response to coroutine 08ca60ef32e crimson/.../replicated_recovery_backend: convert submit_push_data to coroutine 99a25b38223 crimson/.../replicated_recovery_backend: convert prep_push_target to coroutine c7821d0a442 crimson/.../recovery_backend: convert to logging macros, some formatting changes 5bec3c06337 crimson/.../replicated_recovery_backend: convert to logging macros, some formatting changes 3dbc971f8b6 rgw/lua: Fix - Reset Lua background start time for accurate time limit 3fcd3536728 rgw: update to latest zpp_bits.h to compile w/gcc-14 & clang 19 4397c029ee8 nvmeofgw*: 2 fixes - for duplicated optimized pathes and fix for GW startup 1. fix duplicated optimized host's pathes - trigger process_gw_down upon fast-gw reboot, removed old fast-reboot handlers 2. fix GW startup - trigger process_gw_down when expired WAIT_BLOCKLIST timer 3243af47d60 mds: do not path traverse a damaged dirfrag c4bd8194ec4 qa: test file create on damaged directory 221700273a8 mon,cephfs: check MDS ID before aborting "mds fail" command f8cff38a5a3 mgr/dashboard: smb raise exception for unsucessful resource update ea576ccd037 doc/radosgw: s/zonegroup/pools/ af8e7523ebf mgr/dashboard: Add additional cli endpoints to align with existing nvmeof cli d3d6bd6ca1f mgr/cephadm: using service registry pattern for cephadm services c291168a04a script/ceph-debug-docker.sh: fix manifest unknown error d99367e1e03 osd/OSDCap: fix misleading grammar comments 5f3815e8002 mon/OSDMonitor: relax cap enforcement for unmanaged snapshots 3571c6dd5ff mgr/dashboard: create smb cluster 57c4e161577 nvmeofgw*: change log level of critical nvmeof monitor events to 1 154307e817a Allow passing ssl_certificate as an rgw_frontend_extra_arg. adaafdd86a9 interval_set: Improve comments 4dac20e8987 qa/workunit: update telemetry quincy/reef workunits with "basic_stretch_cluster" collection 6472b6b9f94 mgr/telemetry: add stretch_mode information 9fce4f03c40 interval_set: Fix test_interval_set.cc 757fe1c8c59 interval_set: Add back insert() 2a4f4c5269a interval_set: Review comments 679d10a7aef interval_map: Review comments d074b22c9b9 interval_set: tests to cover interval set changes eda51ac2662 interval_set: align method to extend all intervals to be aligned with a specified alignment fd67fd5f6a9 interval_set: erase and subtract enhancements c90e94b70c6 interval_set: Enhancements to improve efficiency of insert() and to allow more flexibility. c10ec8edd67 interval_set: contains() returns true if a specified interval is entirely contained within the set. 40c032a1c0c interval_map: tests. Tests to cover new function in interval map 8cd072d8e02 interval_map: contains() to determine if range is entirely contained within range. 5f8a76d4336 interval_map: Add interfaces for getting start/end and lower ranges. 6e0ae194127 mgr/dashboard: Introduce nvmeof cli 9e512e074c2 mgr/dashboard: delete smb cluster Fixes: https://tracker.ceph.com/issues/69191 https://tracker.ceph.com/issues/69605 c9d73451e74 test/libcephfs: remove warning in Windows build 7b8a86f105f libcephfs/client: pin inode/dentry for an opened directory a27ed27c2c2 test/libcephfs: reproduce an issue after client cache trimming 09c904c94b8 Abort nvme deployment with pool that doesn't exists d15f1f68694 doc/cephadm: correct note 39a12b5e0f8 osd: avoid costly md_config_t::get_val<>() when preparing stats 5670054bd05 doc/cephfs: edit disaster-recovery-experts (6 of x) 9d224ab3ab1 common: modify md_config_cacher_t to implement get_tracked_keys() 48a43f06db3 common: modify md_config_obs_impl API 67f5769ce6e doc/rados: pool and namespace are independent osdcap restrictions b8df0c023d0 doc/rbd: Update nvme documentation b4f4323e6cc container: add label ceph=True back a745e07e7ee container/build.sh: don't require repo creds on NO_PUSH 3e2332db848 RGW:fix obj by multipart upload cant get tag Fixes: https://tracker.ceph.com/issues/53016 1dee8837959 blk/KernelDevice: Introduce a cap on the number of pending discards 6e2f3fbeff6 osd/scrub: use ObjectSection & ArraySection d81d15839a2 examples/rgw: add type to HeadBucketOutput for old boto f2b33bc9719 os/bluestore: Split _deferred_replay into 1) apply IO and 2) remove keys 3b9ba9083ee rgw: add a multisite test case for stacked delete markers 65e3e9b5888 rgw: revert PR #41897 to allow multiple delete markers to be created 9af7d9786a1 doc/cephfs: edit disaster-recovery-experts (5 of x) 1fb6137afe1 container/build.sh: fix up org vs. repo naming 61baa879340 librbd: clear ctx before initiating close in Image::{aio_,}close() 21591186067 mgr/dashboard: Added unit tests and fixed minor issues c5dfb16de77 mgr/dashboard: Delete account integrated 47d74651abb mgr/dashboard: account edit functionality added 7db16e1b471 mgr/dashboard: added Create Account Functionality d12857161df mgr/dashboard: RGW user accounts UI d2b910bfef3 common/perf_counters: select_labeled_t as a parameter to dumpers 23a17e2a531 common/perf_counters: 'nullptr' instead of 'NULL' 90329537596 common/perf_counters: enabling 'find()' by logger name a5c9a884ac3 test/librbd: add unit test for flatten migration ecda6780c93 crimson: clarify RecoveryBackend::handle_backfill_op 4612195b9c3 cls/rbd: don't use read API for write-like methods 8c28695cde0 os/bluestore: Improve dout when bdev label cannot be decoded cc1bd71f4ed qa/standalone: Expand testing cases 76978bc673a os/bluestore: Fix CBT bluefs-bdev-expand a69587d3202 mgr/dashboard: revert ModalCdsService for uncarbonized pool form 2a18459eff7 neorados_pool_test: Erase a pool name from local map during delete_pool f2529d11745 doc/cephfs: edit disaster-recovery-experts (4 of x) 9b7df3a2927 RGW\logging: adding transport layer fields 5550486c778 crimson/net/io_handler: drop io_state_t::none 9f660b1e567 crimson/net/io_handler: promote and refine logs for debugging aa4b517d4ce crimson/common/smp_helpers: crosscore to return an incremented in_seq 4d18b137de3 osd/PG: add logs to PG::split_into() 6479e9e336c osd/SnapMapper: Add logs to ctor and update_bits() e736b277180 osd/SnapMapper: print *this Snapmapper instance f1c1b73567b mgr/dashboard: add warning message on smb service management 29f6929048d mgr/dashboard: fix service/daemon events not showing up in service details d602c8da3dc ceph-volume: update unit tests 8d477959d62 ceph-volume: remove duplicate code 1107f5b0e32 ceph-volume: add type annotations to devices.lvm.batch 12b1e7ed348 ceph-volume: add type annotations to devices.lvm.listing e65bc616ad2 ceph-volume: improve clarity and consistency in List.single_report 93827e8703d ceph-volume: add type annotations to devices.lvm.common 229dcb88b8b ceph-volume: add type annotations to devices.lvm.prepare d10b7cc81b4 ceph-volume: add type annotations to devices.lvm.trigger b460a1a19ef ceph-volume: add type annotations to devices.lvm.main aa26a5aa0df ceph-volume: add type annotations to devices.lvm.deactivate a9a149b8874 ceph-volume: add type annotations to devices.lvm.create 858d6d59e31 crimson/net/ProtocolV2: convert features/flags/cookies to hex format 74a62932788 ceph-volume: add type annotations to devices.lvm.activate 79acee1347f ceph-volume: fix type annotation in `objectore` a69c4142b7f doc/cephfs: edit disaster-recovery-experts (3 of x) 5d590f5b203 RGW:support x-amz-expected-bucket-owner to verify bucket ownership with bucket owner condition 20f27ee967a rgw/dbstore: Update bucket attrs as part of put_info() dceaab9a1a4 doc/cephfs: disaster-recovery-experts cleanup 3e3cb156fc5 rgw/lua: add configurable runtime limit for the lua state 4f3a69eb919 doc/cephfs: edit disaster-recovery-experts (2 of x) 504fac312cf qa/suites/upgrade/telemetry-upgrade: ignore TELEMETRY_CHANGED warning 0a3817fa9d8 qa/workunits: fix some details on telemetry workunits a3c6c6b5a8b doc/releases: edit warning for balancer issues cdb2bd5351d qa/suites/upgrade/telemetry-upgrade: replace quincy tests with squid tests 08b4ed6a45c qa/workunits: remove inaccurate reference to quincy from telemetry reef-->x test a04c88636bb qa/workunits: add new collections to telemetry upgrade workunits (reef) ca15873cfa0 rgw: Add objects expirer API to the SAL interface 51706eeaa3f doc/releases/squid: add warning for balancer issues 6652ac6729e doc/cephfs: remove link to undeveloped tool 42bac97b53e mgr/cephadm/nvmeof: Add SPDK iobuf options field to NVMeOF configuration Fixes https://tracker.ceph.com/issues/69554 e443d75b4f7 test/rgw/lua: install luarocks cc8cfeddbd2 doc/cephfs: edit disaster-recovery-experts b072c323b60 mgr/dashboard: Typo in NVMe-oF create service 786fe8f9a28 Add Abhishek Kane into peoplemap, githubmap, organizationmap, mailmap ac4c37d08f7 mgr/cephadm: After deploying nvmeof gateway group, the prometheus port 10008/tcp is not opened 14ac318c300 qa/cephadm: wait between starting and restarting osd in test_daemon_restart test 5d6b75a40a2 src/CMakeLists: require gcc13 for crimson, clarify error messages 3dab2ed3294 rgw: update attrs with replication status to reflect in response f54176f28c6 rgw: set dest bucket id in bucket sync checkpoint 0377e1cd8f3 RGW\log: adding some missing members 1e2f3758118 mon/test_mon_osdmap_prune: Use first_pinned instead of first_committed 466930b4732 rgw: S3 Delete Bucket Policy should return 204 on success fe411156c0e suite: thrash old client ignore list expend 5d92965b318 qa/tasks: Include stderr on tasks badness check. 044cd2c3dd2 rgw: RGWRados::get_olh() needs to use the correct attr a29646eebee doc/radosgw/config-ref: fix lifecycle workload tuning description f83c88077bf mgr/cephadm: Retry command when SSH connection closes 4257d11936c rgw/s3: remove local variable 'uri' that shadows member variable d913c1c97e3 os/bluestore: Fix unittest_bluefs 3eaea791cbd ceph/doc/radosgw: update list of valid admin capabilities 1280f0114dc mgr/cephadm: re-factoring the dependencies calculation code f304fba824b mgr/cephadm: Changes for creating root cert with manager cluster fsid 3d3380f5fe3 rgw: allow management of `accounts` user caps 3cec1036a58 script/ceph-backport: Remove stray `\` from grep command 4d0e0058b1e Documentation changes for updating non-ceph image service 166b605a39c mgr/cephadm: Command to upgrade non-ceph image services f292b789af8 log: ignore return value of write in unit test d8dae241040 mgr/cephadm: set service name for DaemonDescription object used during daemon removal c199a48f807 crimson/.../replicated_request: work around gcc 11 bug in with_pg_interruptible 4fccf58b4b1 service_spec: force ceph-exporter sock_dir to be unest or "/var/run/ceph/" 3b28df83624 cephadm: fix handling of ceph-exporter sock-dir 31c87445e84 osd/scrub: increase the default scrub load limit 3f6dae8d616 ceph-volume: add type annotation to api.lvm 2d45aa17c5a qa: add test checking 'journal import' from empty dump file 01db5d107c6 cephfs-journal-tool: fix segfault during 'journal import' from invalid dump file e81fbe4ebf9 client: Fix signed comparison warning 52a8984d89e test/neorados: Silence mismatched new/delete warning fdcc1d4f296 os/bluestore: Fix signed comparison warning 75bccfc6270 ceph-volume: add type annotations to util.device fc528584877 crimson/.../replicated_request: hold pg ref until complete() resolves 32113166080 crimson/.../replicated_request: fix op lifetime in with_pg finally ffaf5cb056d rgw:fix radosgw-admin use after free f6fb7df808c PendingReleaseNotes: add a note about tracker #67846 a37ebbd5547 RGW/S3: truncate S3 LastModified response (timestamp) to exact seconds 93316941a9d test/librados/asio: add test cases for deferred a546495203f test/librados/asio: add test cases for use_awaitable b735d96f684 test/librados/asio: add test cases for async_notify() 8b3479e2bd7 librados/asio: async_operate() takes ownership of ObjectOperation args 887ed45a33e librados/asio: take ref arguments as cref from async_initiate() 81ffffb0b34 librados/asio: take Executor instead of ExecutionContext 2f7a94c71d3 rgw: /admin/user api dumps account-related user info 05e24124574 rgw/lc: make lc worker thread name shorter ff04e0af192 rgw/rgw_admin.cc : Make restore attrs readable in admin cli 31231360fd7 mgr/dashboard: smb error page to enable/disable module This commit introduces a redirect to an error page when the smb module is not enabled and adds a new button to directly enable the module. To do this some logic was moved from the mgr-module-list.component.ts to the mgr-module.service.ts f28886124f7 rgw: skip on EACCES in RGWBucketSyncSingleEntryCR b18b5491bae rgw: set retcode on verify_bucket_permission in RGWObjFetchCR 3c72d3e49dd doc: squid 19.2.1 release notes https://tracker.ceph.com/issues/69234 046921e2968 ceph-volume: add typing hints to lvm.zap 4b0c3bbed37 ceph-volume: set default value for BlueStore.block_lv to None 297aa57ca5f ceph-volume: improve wipefs retry logic in lvm.zap 0e027d535b1 crimson/common/tri_mutex: use string for tri_mutex::name debug 178d312a52b crimson/common/tri_mutex: operator<< to print address dfc909d071e crimson/osd/pg: duplicate_obc to not create ObjectContext ad51353f59b rgw: use effective owner in PutBucketReplication 9a34ae55ede doc/cephfs: edit grammar in snapshots.rst 276b81a55d3 mds: avoid acquiring the wrlock twice for a single request a86ee496be9 mds: add 'mds_allow_async_dirops' opt to allow/disable async dirop 29c43371b59 osd/PeeringState: rename "cancel_backfill" to "suspend_backfill" e0b22e94f04 utils: fix a Y2038 bug by replacing Int32x32To64 with multiplication ea30bd53a3c rgwlc: non-current expiration sends LifecycleExpirationDelete 12233b15444 rgwlc: avoid duplicate notifies during transitions c046ace17d9 rgwlc: send pool transition notifications too 198b3e6d462 mon: Encapuslate all scrub related objects into a single atomic ScrubContext edb0321d454 mon/nvme: fix unused lambda capture warnings 9e04f49a2fa src/test: allow ENOENT if target object of tier_flush has snapshots 24984b704f0 rgw: add missing last_modified field to swift api ddb472136b0 do_cmake.sh: add support for Fedora 41 a02132a1f95 os/bluestore: Add 'bluefs-files' command to ceph-bluestore-tool. c10a794f726 os/bluestore: Modify _deferred_replay b2086ef0c96 os/bluestore: Deferred writes unit test, replicates corruption cbfc24dd7e9 os/bluestore: Add debug hooks 25cac0fea2d erasure-code/lrc: Change LRC default plugin from Jerasure to ISA 4d3adb5ade6 common/options: Change default erasure code profile from jerasure to isa 71d0695a8c7 vstart.sh: Change default erasure code profile from jerasure to isa 11d5616da92 test/erasure-code: Change default erasure code profile from jerasure to isa dc870530617 qa: Change default erasure code profile from jerasure to isa 0c2e056573f Containerfile: Add libcephfs-daemon package c374f2cfe98 Revert "Temporarily change the libcephfs dependencies" 005e492288b qa: fix test_cephfs_mirror_stats failure b800149243b msg/async: race condition between reset_recv_state and shutdown_connections 56688070513 rados/valgrind-leaks: add timeout value for stop command a4f0ba46067 rgw/cloud-restore: Do not send internal headers to cloud-endpoint ce99b6b5bfa qa/suites/fs/upgrade/mds_upgrade_sequence/tasks: set require-osd-release 158f7c332f5 qa/rados: add empty default.yaml for default replica read policy a6bf5a652eb qa/rados: move read-affinity/ under rados/verify subsuite 24087ec41fb librados: local affinity for exec calls is configurable 2028e4e7a82 qa/rados: add read affinity yamls ab0007299cd librados: disable local affinity for IoCtx::exec() and aio_exec() calls af176311c47 objclass: change objclass exec read calls to write ones where needed 0a2f572d4f6 objecter: weaker memory ordering for extra_read_flags 59c708c2a0e objecter: add log messages related to read policy cadc73b4066 objecter: use read policy configurable abbc9d49395 objecter: configurable for localized and balanced reads 0b12afafe68 rgw : provide multiple option for read replica policy 81ef8d57f8a librados: disable symbol versions when building statically c3da9112757 mgr/nfs: Show ingress mode in output of 'ceph nfs cluster info' 94926556086 rgw/rgw_zone : fixing inline-data default value 4e2874a8dea Update src/mon/MonClient.cc 895691ec47c common/config: make `legacy_values` static 612ea38fc5f test/objectstore: extend `#ifdef WITH_BLUESTORE` 46a0824c6ff messages/*: add missing includes 882eaa7ceec ceph-object-corpus: update the submodule fa98a781b44 workunit/tes_readable: enforce cascading backward compatibility checks ca36171c2b8 rgw/rados: resolve CopyObject crash from remote zonegroup 19ce2c69851 common/lockdep: include cleanup ec992da10db common/bit_str: include cleanup 623cda09858 common/ceph_argparse: include cleanup 120a6ccbbd4 common/str_map: include cleanup 44ca5fab653 common/OutputDataSocket: include cleanup a973d09a061 common/config: include cleanup 72bdb2996e7 common/compat: include cleanup b43412f8dab common/WorkQueue: include cleanup 30beb2f8833 common/EventTrace: include cleanup 695554fa11f common/win32: include cleanup 86e5fde9b29 common/filepath: include cleanup 9de0e6b2796 common/Throttle: include cleanup d9fd1df9608 common/map_cacher: add missing includes d7a427e00ca common/common_init: include cleanup b09e04c0872 include/Context: include <set> only if DEBUG_GATHER 7686e1d2668 common/not_before_queue: include cleanup 8eb6649d641 common/lru_map: include cleanup 201bff7e8d3 common/Finisher: add missing includes 537401f77e1 include/frag.h: include cleanup 15bf0d41c30 common/ceph_time: add missing includes e187c5b549f common/TrackedOp: add missing includes fefca2ef35d common/perf_histogram: include cleanup ebe54a10880 common/assert: add missing includes 6fa985ac895 include/ceph_features.h: add missing includes 2b178c034af common/dns_resolve: add missing includes 0a33c344225 common/fd: add missing includes 33591026c65 common/hobject: add missing includes c1b126e317a common/ceph_json: add missing includes a8606701bda common/snap_types: include cleanup 3c8917d5f75 include/fs_types: include cleanup 346a6285e06 common/numa: include cleanup c76111058c9 common/buffer: add missing includes 39bb99152a6 common/Graylog: add missing include c1b49372679 common/admin_socket: add missing includes 8017c09a59e include/util: add missing includes d23a8d880d5 common/LogClient: add missing includes 0d3417214b7 common/LogEntry.h: add missing includes 80917f011ff qa/tasks/thrashosds-health.yaml: Add osds down to ignorelist b0f469e2269 mgr/vol: use error number instead of error message 8bb28efcbdd include/types.h, tools/cephfs: remove _BACKWARD_BACKWARD_WARNING_H f0823176c41 journal/Entry: include <sstream> instead of <strstream> 9fdf5008743 mds/SimpleLock: add is_xlocked_by() fc48d88c766 mds/SimpleLock: add has_xlock_by() 1ae22591f30 common/Formatter: use emplace_back() 673d0200b20 common/Formatter: use range-based `for` e8e3b93c1ad common/Formatter: make get_attrs_str() const 4ebdd59cfe4 mds: combine several fixed-size `encode()` calls b27c8015a05 common/fs_types: combine several fixed-size `encode()` calls 605661f1092 script: ceph-backport no longer launches firefox 82d46470516 qa: add tests for fixing dangling symlink efb119eb51a mgr/volumes: handling dangling symlinks gracefully 100d164705d cephfs_mirror: do not log the previous error 1924a8f2cee rados/test_crash.sh: add PG_DEGRADED to ignorelist 701d8d0e0f0 osd: EC: Fix partial reads with LRC plugin 32f22f4d254 osd: EC: helper functions for chunk mapping ccf1229bba0 osd: further EC partial stripe read fixes 9272df1bd05 Update src/pybind/mgr/orchestrator/module.py 75f73c75ad6 cephadm: ceph orch upgrade status - Display easily understandable message 25ff18b2e4b crimson/client_request: support inject delay request 34f209f51ff crimson/mgr/client.cc: daemon_health_metrics support 46b82ed1856 mgr/dashboard: adapt kcli plan for multi-clusters 97b815c2459 doc/rados/operations/health-checks: Added NONEXISTENT_MON_CRUSH_LOC_STRETCH_MODE 9b1e75fa988 src/mon/HealthMonitor.cc: Add NONEXISTENT_MON_CRUSH_LOC_STRETCH_MODE 5c46c482dde src/mon/OSDMonitor.cc: ignore non-exist CRUSH bucket 99c40417ee2 objclass: don't do costly string formatting when not needed a07c5ef9259 client: resolve bogus self-assignment 5e3fd1e574d tools/ceph-dencoder: introduce add_crc32c command to append crc32 for the encoded buffer. Sometimes we might need to recalculate encoded object crc and this looked like a non-trivial task before this patch. f261347e9a8 client/barrier: use empty() instead of size()==0 3ee1ce7faa6 various: disable `boost::intrusive::constant_time_size` e9ca8a01323 pybind/rados: add note for reversed arguments to WriteOp.zero() 3a27c3e58fc test/pybind/test_rados.py: add test for reversed arguments offset,length in WriteOp.zero 049d7d35abe pybind/rados: fix the incorrect order of offset,length in WriteOp.zero 7ac14cac91c qa: reconfigure only the appropriate client auth caps 68c72c5dff5 systemd: use CMake install prefix in templates 22a577101e3 kv/RocksDBStore: Improve estimate_prefix_size. 612f24b41fb os/bluestore: Add unittest for BlueFS::truncate() dff84f8fc1d test/objectstore: extend `#ifdef WITH_BLUESTORE` d67934bbb05 CMakeLists.txt: build test_trans only if WITH_BLUESTORE=yes 85fac18a1cb os/bluestore: Make truncate() drop unused allocations 163d8297bd5 os/bluestore: Disable invoking unittest_deferred f98d4b3cfd2 RGW: add src/dest object info to fetch_remote_obj()'s debug log events c2d192f527b msg/async/Timeout: always round up 32dcaa949d7 msg/async/Event{Poll,Epoll}: move timeout calculation to Timeout.h cec2e4550fe blk/kerneldevice: notify_all only required when discard_drain wait for condition f8b1495949d os/bluestore: Fix CBT bluefs-bdev-expand ebd3d454d53 qa/standalone/bluefs: Fix CBT bluefs-bdev-expand 9276d24355d msg/Dispatcher: simplify and optimize the `marrival` tree 19b406f8d24 blk/CMakeLists.txt: generate interface library if `libblk` is disabled 38f52dc2755 common/options: increase `ms_tcp_prefetch_max_size` default to 64 kB 216eb2635c2 erasure-code: Increase SIMD_ALIGN from 32 to 64 e2798ecb69b msg/async/ProtocolV2: call KeepAliveFrameAck::Encode() without `write_lock` f07cd30733a msg/async/ProtocolV[12]: unlock the `write_lock` before doing I/O 23fd2cc4486 msg/DispatchQueue: wake up only one dispatch thread 9917ddcfc58 common: get rid off autovector.h 47144456944 kv/BinnedLRUCache: do not use autovector to keep entries to be deleted. 5d9ca40e980 blk: Don't forget call io_uring_unregister_files. 094bfc535eb rgw: false assumption on vault bucket key deletion 548d069a00e tools/ceph-bluestore-tool: optimize offline trim report info 006380b6e1e qa/erasure-code: add new teuthology isa configs Signed-off-by: Jamie Pryde <jamiepry@uk.ibm.com> 943c8296baa test: fix ld link errors a3d0c624232 qa/suites: Make fixed-4 an option for verify tests a4fb7b1f443 test: add encode decode test for pg_pool_t Adding some unit test for pg_pool_t to make sure encode\decode\encode doesn't failed to produce the same pg_pool_t struct a23c2ac9840 osd_type: encode new version for stretch CRUSH buckets 08112e6052e suites: set mon client hunt on resend to false for rados basic f058250b4cd monclient: try to resend the mon commands to the same monitor if available 753a8ff5d00 doc: Change default erasure code profile from jerasure to isa Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* diod: update to 1.0.24-tipBruce Ashfield2025-03-252-102/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Along with the new commits, we do the following: - drop the upstreamed patch - pass our systemd system unit dir to configure - disable auth to fix a build error Bumping diod to version 1.0-pre27-763-g54d1325, which comprises the following commits: b91d74b diod: Fix uint32 overflow when Tread/Twrite count > UINT32_MAX-IOHDRSZ 539827e diod: keep --foreground option for compatibility 9126275 build: don't just warn if libcap is missing 729830b build: don't just warn if munge is missing 4b04d68 diod: require --no-auth if not build with munge 45ae4ac diod: make multi-user initialization errors fatal fb4a588 diod: refactor startup logic for clarity a474d34 build: adjust multi-user configuration options 4684e5c diod: log access policy 06e325b diod: use setgroups() on linux for transition d093411 diod: log user transition and simplify code cce7b2d diod: don't cache effective uid 2948cc7 systemd: support systemctl reload diod 5e22ace diod: log listen addresses 6d3d25d diod: drop program prefix from logs e5d270f testsuite: fix test server TAP logging d666304 diod: initialize rdma after user transitions ef46b9b ci: add build-only check for RDMA 8615778 ci: cull package dependencies 9380f2d build: fix rdma configure logic 2038957 rdma: fix include paths 7aea316 systemd: switch to Type=exec from Type=forking 2f9e3f8 man: drop --foreground from diod(8) 3dc9363 diod: always run in the foreground cc881bd man: drop syslog from diod(8), diod.conf(5) 4de6eed diod: drop --logdest=syslog[options] c8775c2 libdiod: drop leftover TCP Wrappers stuff 9abd6ae testsuite: drop setgroups unit test d367f3a diod: make SYS_setgroups test safer b78d7cd diod: improve supplementary group warning + comments cf4bfac build: drop FreeBSD automatic --disable-diodmount 43b2e25 build: drop configure --disable-tests option 1a9391d build: drop checks for vsprintf(), vsscanf() 59b221f drop TCP Wrappers support e96f369 build: drop conditional getopt stuff c510de8 build: drop libpopt references bd0d3ac tests: Handle various time_t sizes in printf (#124) adc86ad testsuite: drop unused tests 8b18a31 testsuite: skip FALLOC_FL_PUNCH_HOLE in fsx e08d71e testsuite: drop record locking kernel tests c24c22f testsuite: drop fcntl locking test 7cacf63 testsuite: add locking unit test 9b1bdc3 libnpclient: add npc_lock() and npc_getlock() 7ea6e7f libnpfs: replace kernel 9p.h header 4ab0076 don't include 9p.h directly b66c8a9 testsuite: reduce unnecessary include directives e057687 headers include the headers they depend on cb0c9dc add header guards c992e0e testsuite: factor out duplicated server code 5567efc testsuite: factor out duplicated thread code 9730b8f eliminate src/daemon directory f5fe359 testsuite: enable parallel test harness ff57671 build: fix Makefile.am typo 932fea8 testsuite: make unit tests work w/parallel harness ccf9dc5 liblsd: clean up source directory dependencies 3b6ce5c ci: valgrind and sudo some unit tests 7b435ab testsuite: convert multiuser cli/srv test to TAP 3d5d90a testsuite: convert dir/file cli/srv test to TAP 2e4645d testsuite: convert simple np cli/srv test to TAP aaa28bc testsuite: convert config file test to TAP 3a97415 testsuite: convert setreuid test to TAP b810cd4 testsuite: convert setgroups groups test to TAP c87295e testsuite: convert setfsuid test to TAP 1300b50 testsuite: convert fcntl locking test to TAP 3022797 testsuite: convert capability test to TAP f8cd2ed testsuite: convert list test to TAP e7a67b6 testsuite: convert opt test to TAP 6829e1e testsuite: convert fidpool test to TAP ca886f4 testsuite: convert encoding test to TAP a1e4e7d testsuite: add TAP unit test framework cf9496b diodmount: drop --9nbd-attach, --9nbd-detach opts dbed88e fix fsid in Rstatfs result d2b311f doc: update Rstatfs description 573d107 implement Tfsync datasync 075c321 doc: Tfsync is missing 'datasync' 2265d6b libnpfs: catch overflow in np_deserialize_p9dirent 6b4384d build: add make deb target for debian package e97e68d src: move source code to one directory d698cd9 man: move all man pages to one directory 7a5671b simplify autogen.sh script 43db888 build: combine and simplify etc and scripts c081e85 configure: normalize systemd unit install 968bd75 configure: drop AC_HEADER_STDC c02fe09 configure: use AC_CONFIG_HEADERS 7bc04ab libnpfs: fix off by one buffer check 34263af diod: check offset in xattr read/write 65d69a8 diod: handle xattr write errors properly c529cd8 ci: run kernel tests in CI b0a25c5 testsuite: fix racy test looking for old bug f3c4a7d ci: add scrub to github workflow e4bbbe7 testsuite: drop subversion test 1e3cb24 testsuite: remove security xattr XFAIL 55da67f testsuite: add setfattr prereq to t46,t47 6dea909 testsuite: drop internal copy of dbench eb0306c testsuite: remove dbench XFAIL d4401fc testsuite: set root mount propagation to private 2b03061 Shutdown all connection threads when applications is terminated f300f90 Signal that connection is done after all cleanup has finished 9819777 Use a pthread_cleanup callback function in connection thread 49c4c32 signal refcond in connection under lock 4c6e4bd tests: Skip kern tests t35 and t40 unless there is enough disk space 6985948 Mark kernel tests t19 t23 t32 t37 t43 and t47 as XFAIL 70e9b6b tests/kern/runtest: Delete PATH_EXPDIR and PATH_MNTDIR on failure 180749e tests/user/runtest: Delete PATH_EXPDIR when it is a file 2bb882a tests/user/t16: Delete the tempfile on failure e0cd706 Don't use pushd/popd in kern test t33 e9097f9 Use grep -E instead of egrep in kern test t28 9684b82 kern test t28 requires rsync, skip if it not available eae17bc Handle various time_t sizes in printf and scanf 76fd64e ci: drop deprecated 18.04 actions runner f7dc0e8 add mergify support f732f19 auto.diod.in: remove bashisms Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: update to v2.0.3Bruce Ashfield2025-03-245-316/+862
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping nerdctl to version v2.0.3-249-g497c7cf7, which comprises the following commits: bd7cbb38 Stop sharding cache per containerd version 99d03ee8 Dockerfile: update buildkit to 0.20.1 cc81c720 Remove golanci-lint action 430c57c5 Update Canary and EL8 titles 1d372563 update RootlessKit (2.3.4) 27b91ecf ensure logger completion after container exit e33a85f9 Dockerfile: remove "goversion" stage 98a531a2 Move GHA to zstd compression bc4642a4 build(deps): bump the golang-x group across 1 directory with 6 updates f19eb5a3 CI: simplify setting up Lima 7505c3f5 Replace hack/verify-no-patent.sh with depguard e52580ee Adding document analyzing CI/dockerfile f7901228 Disable buildx output for dependency stage 3daef1cb Implement updated test matrix 699c8509 Fix broken lint-license task 9182ea4e Increase wait for ensurecontainerstarted a81136c2 Fix kubectl download url bd5bcca4 Fix referenceutil.FamiliarMatch SIGSEGV ce10c922 Update containerd/project-checks (1.2.2) d80c2cf4 Fix alma ci target 34e44e7b Migrate TestRunDevice test d9a0e87b Quiet out apt-get calls 0296acd3 Use makefile task to install golangci 0b606c7f build(deps): bump github.com/opencontainers/image-spec 121c656f build(deps): bump actions/cache from 4.2.1 to 4.2.2 678822a9 --quiet image pulls in tests 4d76aa96 CI: drop Ubuntu 20.04, add AlmaLinux 8 147ebca4 [ci] rollback setup vagrant comment 6d3c49a7 Fix test TestNoneNetworkHostName 62c1565b Add golangci and yamllint to tigron 077558c8 Lint fixes 7f049905 Move to creack pty 0020c912 Makefile fixes ea685aed Add qemu/rosetta notes 8af2e4c2 Update containerd v2.0.3 e58ceaa6 build(deps): bump github.com/containernetworking/plugins d432a4a1 build(deps): bump github.com/containerd/containerd/v2 ca1fd3cb build(deps): bump github.com/opencontainers/runtime-spec 37e5e59d build(deps): bump docker/setup-qemu-action from 3.5.0 to 3.6.0 898e3e46 Harden test pty error handling e21e4b2c Cleaning variables and function names in cmd 0e883056 Fix apparmor host check to include aa-parser a5a7f181 build(deps): bump actions/cache from 4.2.1 to 4.2.2 5220350d add hostsPath to inspect response 88e9c5d9 Rename NO_COLORS 715cb0c2 Enforce pkg isolation as part of golangci f99a5635 build(deps): bump the docker group with 2 updates d52eaf3e build(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 166ace96 build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 18e52416 build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.5.0 14b3ace1 build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 44b8b584 Fix kube-hide-dupe docs typo ef92eec5 build(deps): bump golang.org/x/crypto in the golang-x group 4b765cd8 Reorg test package 9210685b Makefile cleanup b41e8c98 Normalize all command variables to cmd 701e5563 goimports-reviser: remove hack 7fcde18b Disable golangci preflight config validation 11f6fe2c go.mod: set minimum Go version to 1.23 7341e841 CI: set GOTOOLCHAIN=local 18df1402 update Go (1.24) cd151127 CI: arm64-8core-32gb -> ubuntu-24.04-arm 01d3cafb Increase CI run timeout 0d62b98e Restrict EnsureContent to the requested platform 745aaf7f CI: set fail-fast to false 10ddc598 build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 37d99587 feat: add hostConfig to nerdctl inspect response c2c1d4a0 Rewrite signal tests d90729c8 Add test tooling for signals 16e22577 Make subpackage test a separate module 655171c7 Remove unbuffer from container tests c7919f93 Prevent acquire from blanking hosts file 3b59119e Cleanup XDGRuntime logic 0128d4a8 Remove forked sysinfo package 11e6d04b Tests to error on timeout a687e2c9 Rewrite detach tests without unbuffer 8664311c feat: add signal option to containerRestart 8bef3618 docs: add --log-driver=none to run command reference c1694998 Support bind propagation options in Compose volume long syntax 4e0688b7 build(deps): bump github.com/containerd/accelerated-container-image a0f12369 build(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0 59b48e63 build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 3eb9a963 build(deps): bump actions/cache from 4.2.0 to 4.2.1 d3f5d105 add tests b45d96db build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 31a7ab84 build(deps): bump golangci/golangci-lint-action from 6.4.1 to 6.5.0 99210b69 add signal option to container stop command 893a3937 feat: add support for 'domainname' option in container create 5ffcba6e Fix FATA error when inspecting images in native mode 3f496b8c Cleanup old/unused helpers 105e5eba Remove require daemon version for >=1.6 8675cc6c build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.4.1 cb416319 Add pty support for testing 94c271e8 update runc (1.2.5) 974bc843 fix: network cleanup called twice 4e111d32 docs(nerdctl-compose): add missing details in command-reference.md 4722dd6f build(deps): bump github.com/compose-spec/compose-go/v2 3680b00a build(deps): bump gotest.tools/v3 from 3.5.1 to 3.5.2 3f7b70fa build(deps): bump golang.org/x/net in the golang-x group a6086d1e build(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.2 d64ab5a9 enable host name and default resolv.conf and hosts file in none network 402bd2a2 build(deps): bump docker/setup-qemu-action from 3.3.0 to 3.4.0 0f17259a build(deps): bump golang.org/x/crypto in the golang-x group c6666e3f fix nerdctl-full SHA256SUMS fails cf95ae0e Reduce file permissions c4a795fa build(deps): bump docker/setup-buildx-action from 3.8.0 to 3.9.0 5e36bef0 build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.0 fd0bcbe5 build(deps): bump the golang-x group with 4 updates 2ecc3944 Fix apparmor test not running 38636145 Prevent reference filter from failing on dangling images 2b07c188 build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 8a80469c Harden journald test 7565cebb build(deps): bump github.com/cyphar/filepath-securejoin 653c6de0 test: Add a test for container access with 127.0.0.2 specified in -p in rootless mode 82791bf6 fix journald logger exit and wait behavior 2a750939 Consistently use WithError when logging errors instead of %s 17bbdffd Consistently use %w instead of %s or %v when wrapping errors 6e5e943b fix: prevent panic in nydus snapshotter inspect 7f433aaa Fix socket address not being updated properly 10e4cda3 Test portability fix: ensure tini-custom is here 7c9d25ad Disable systemd test on arm64 fe59974d build(deps): bump docker/build-push-action from 6.12.0 to 6.13.0 99bd7728 Fix test time to use UTC 73520336 Skip TestRunBindMountPropagation a6fe6c15 Fix wrong error comparison ec6a6abd Relax error on annotations read failure 26c03224 build(deps): bump github.com/ipfs/go-cid from 0.4.1 to 0.5.0 8a0c16c0 build(deps): bump the docker group with 2 updates af3bb999 build(deps): bump github.com/rootless-containers/bypass4netns 84caccfc build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 a4fa4faa integration test: specify IPFS_PATH for IPFS service cb7fc0d4 update BuildKit (0.19.0) e7e27f62 update containerd-fuse-overlayfs (2.1.1) 00e21f75 update bypass4netns (0.4.2) d786133a update RootlessKit (2.3.2) f17df13e update Kubo (0.32.1) 8af25af6 update containerd (2.0.2) 08206c8e build(deps): bump github.com/rootless-containers/rootlesskit/v2 128e6a7c [doc] AppArmor profile setup for rootlesskit ab027adf Correct `compose logs` command reference 9a6426d8 fix: save multiple images for the same image id to a tar archive ae9894e3 build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 ef26ad8f reset spec if update returned error 7a4c2528 build(deps): bump docker/build-push-action from 6.11.0 to 6.12.0 fcb900e9 test: Add an test for added logic to TestRunWithInvalidPortThenCleanUp 7bfbd31f fix: Add the logic to clean up an orphaned etchosts directory e3d27107 test: refactor TestRunWithInvalidPortThenCleanUp 70bed8df build(deps): bump github.com/containerd/containerd/v2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* tini: Support posix basename from musl libcKyungjik Min2025-03-242-0/+77
| | | | | | | This fixes building with musl libc. Signed-off-by: Kyungjik Min <dpmin7@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oath: fix autotools usageMartin Jansa2025-03-241-0/+4
| | | | | | | | | * add include for m4 directory to fix: http://errors.yoctoproject.org/Errors/Details/848019/ configure.ac:48: error: possibly undefined macro: AM_PATH_XML2 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-manager: update for PACKAGECONFIG guiKai Kang2025-03-241-7/+3
| | | | | | | | | It turned to meson since virt-manager 5.0, so update for PACKAGECONFIG gui accordingly. And merge the DEPENDS lines that the latter one uses direct assign('=') which clears the content of DEPENDS set before. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: Add CONTAINER_DEFAULT_RUNTIME to run-ptestZhang Peng2025-03-241-0/+10
| | | | | | | | | | | | | | | | | | CRI-O version 1.31 and later defaults to crun instead of runc. This change cause ptests to fail if crun is not installed on the target system, as the test runner verifies the runtime's availability using 'command -v "$CONTAINER_DEFAULT_RUNTIME"'. Additionally, CRI-O specifies the runtime via the VIRTUAL-RUNTIME_container_runtime variable as a dependency. This commit explicitly sets the CONTAINER_DEFAULT_RUNTIME environment variable within the run-ptest script, based on the value of VIRTUAL-RUNTIME_container_runtime. This ensures ptests execute with the expected container runtime. Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* passt: update to 2025_03_20.32f6212Bruce Ashfield2025-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping passt to version 2025_03_20.32f6212-11-gcf4d3f0, which comprises the following commits: cf4d3f0 packet: Upgrade severity of most packet errors 0857515 packet: ASSERT on signs of pool corruption 9153aca util: Add abort_with_msg() and ASSERT_WITH_MSG() helpers 38bcce9 packet: Rework packet_get() versus packet_get_try() 961aa6a packet: Move checks against PACKET_MAX_LEN to packet_check_range() 37d9f37 packet: Avoid integer overflows in packet_get_do() c48331c packet: Correct type of PACKET_MAX_LEN 9866d14 tap: Clarify calculation of TAP_MSGS a41d6d1 tap: Make size of pool_tap[46] purely a tuning parameter e43e007 packet: More cautious checks to avoid pointer arithmetic UB 4592719 vu_common: Tighten vu_packet_check_range() 32f6212 Makefile: Enable -Wformat-security 07c2d58 conf: Include libgen.h for basename(), fix build against musl ebdd463 tcp: Flush socket before checking for more data in active close state c250ffc migrate: Bump migration version number cfb3740 migrate, tcp: Migrate RFC 7323 timestamp 28772ee migrate, tcp: More careful marshalling of mss parameter during migration 51f3c07 passt-repair: Fix build with -Werror=format-security cb5b593 tcp, flow: Better use flow specific logging heleprs 96fe554 conf: Unify several paths in conf_ports() 78f1f0f test/perf: Simplify iperf3 server lifetime management 26df8a3 conf: Limit maximum MTU based on backend frame size 9d1a6b3 pcap: Correctly set snaplen based on tap backend type b6945e0 Simplify sizing of pkt_buf c4bfa33 tap: Use explicit defines for maximum length of L2 frame 1eda8de packet: Remove redundant TAP_BUF_BYTES define c43972a packet: Give explicit name to maximum packet size 74cd82a conf: Detect vhost-user mode earlier 4b17d04 conf: Move mode detection into helper function bb00a04 conf: Use the same optstring for passt and pasta modes c8b520c flow, repair: Wait for a short while for passt-repair to connect 0470170 passt-repair: Add directory watch 2b58b22 cppcheck: Add suppressions for "logically" exported functions a83c806 vhost_user: Don't export several functions 27395e6 tcp: Don't export tcp_update_csum() 12d5b36 checksum: Don't export various functions e36c35c log: Don't export passt_vsyslog() 57d2db3 treewide: Mark assorted functions static 68b0418 udp: create and send ICMPv6 to local peer when applicable 87e6a46 tap: break out building of udp header from tap_udp6_send function 55431f0 udp: create and send ICMPv4 to local peer when applicable 82a839b tap: break out building of udp header from tap_udp4_send function 1924e25 conf: Be more precise about minimum MTUs 672d786 tcp: Send RST in response to guest packets that match no connection 1f23681 tap: Consider IPv6 flow label when building packet sequences 0081756 ip: Helpers to access IPv6 flow label 52419a6 migrate, tcp: Don't flow_alloc_cancel() during incoming migration b270821 tcp: Unconditionally move to CLOSED state on tcp_rst() 56ce03e tcp: Correct error code handling from tcp_flow_repair_socket() 39f85bc migrate, flow: Don't attempt to migrate TCP flows without passt-repair 7b92f2e migrate, flow: Trivially succeed if migrating with no flows 8747173 selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage be86232 seccomp.sh: Silence stty errors ea69ca6 tap: always set the no_frag flag in IPv4 headers 4dac235 contrib/fedora: Actually install passt-repair SELinux policy file 16553c8 dhcp: Add option code byte in calculation for OPT_MAX boundary check 183bedf Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls 1cc5d4c conf: Use 0 instead of -1 as "unassigned" mtu value 3dc7da6 conf: More thorough error checking when parsing --mtu option 65e317a flow: Clean up and generalise flow traversal macros b79a22d flow: Remove unneeded bound parameter from flow traversal macros 7ffca35 flow: Remove unneeded index from foreach_* macros adb46c1 flow: Add flow_perror() helper ba0823f tcp: Don't pass both flow pointer and flow index 854bc7b tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window e56c803 tcp: More type safety for tcp_flow_migrate_target_ext() 5a07eb3 tcp_vu: head_cnt need not be global 6b40651 tap: Remove unused ETH_HDR_INIT() macro 354bc0b packet: Don't pass start and offset separately to packet_check_range() 0a51060 packet: Use flexible array member in struct pool bcc4908 dhcp: Remove option 255 length byte a1e48a0 test: Add migration tests 89ecf2f migrate: Migrate TCP flows 3e903bb repair, passt-repair: Build and warning fixes for musl 01b6a16 tcp_splice: A typo three years ago and SO_RCVLOWAT is gone 667caa0 tcp_splice: Don't wake up on input data if we can't write it anywhere 7c33b12 vhost_user: Clear ring address on GET_VRING_BASE 71249ef tcp, tcp_splice: Don't set SO_SNDBUF and SO_RCVBUF to maximum values 30f1e08 tcp: Keep updating window and checking for socket data after FIN from guest 98d474c contrib/selinux: Enable mapping guest memory for libvirt guests 9a84df4 selinux: Add rules needed to run tests a301158 rampstream: Add utility to test for corruption of data streams 6f122f0 tcp: Get bound address for connected inbound sockets too f3fe795 vhost_user: Make source quit after reporting migration state b899141 Add interfaces and configuration bits for passt-repair 155cd0c migrate: Migrate guest observed addresses 5911e08 migrate: Skeleton of live migration logic 836fe21 passt-repair: Fix off-by-one in check for number of file descriptors def7de4 tcp_vu: Fix off-by one in header count array adjustment 90f91fe tcp: Implement conservative zero-window probe on ACK timeout 472e2e9 tcp: Don't discard window information on keep-alive segments 31e8109 dhcp, dhcpv6: Add hostname and client fqdn ops a3d142a conf: Don't map DNS traffic to host, if host gateway is a resolver 864be47 passt-repair: Send one confirmation *per command*, not *per socket* fe8b6a7 dhcp: Don't re-use request message for reply b7b70ba passt-repair: Dodge "structurally unreachable code" warning from Coverity 0f009ea passt-repair: Fix calculation of payload length from cmsg_len a0b7f56 passt-repair: Don't use perror(), accept ECONNRESET as termination a5cca99 conf, passt.1: Un-deprecate --host-lo-to-ns-lo 0da87b3 debug: Add tcpdump to mbuto.img f66769c apparmor: Workaround for unconfined libvirtd when triggered by unprivileged user 593be32 passt-repair.1: Fix indication of TCP_REPAIR constants 9215f68 passt-repair: Build fixes for musl a9d63f9 passt-repair: use _exit() over return d0006fa treewide: use _exit() over exit() 745c163 tcp: Simplify handling of getsockname() b4a7b5d migrate: Fix several errors with passt-repair dcf014b doc: Add mock of migration source and target 52e57f9 tcp: Get socket port and address using getsockname() when connecting from guest 8c24301 Introduce passt-repair e894d9a vhost_user: Turn some vhost-user message reports to trace() e25a930 util: Add read_remainder() and read_all_buf() 71fa736 tcp_splice, udp_flow: fcntl64() support on PPC64 depends on glibc version b75ad15 vhost_user: On 32-bit ARM, mmap() is not available, mmap2() is used instead 722d347 tcp: Don't reset outbound connection on SYN retries bf28608 pasta.te: fix demo.sh and remove one duplicate rule dcd6d81 tcp: Add HOSTSIDE(x), HOSTFLOW(x) macros 0349cf6 util: Rename and make global vu_remove_watch() 10c4a9e tcp: Always pass NULL event with EPOLL_CTL_DEL dd6a685 vhost-user: Implement an empty VHOST_USER_SEND_RARP command d477a1f netlink: Skip loopback interface while looking for a template 4f2c8e7 vhost_user: Drop packet with unsupported iovec array ec5c4d9 tcp: Set PSH flag for last incoming packets in a batch db2c91a tcp: Set ACK flag on *all* RST segments, even for client in SYN-SENT state 54bb972 tcp: Disable Nagle's algorithm (set TCP_NODELAY) on all sockets 8757834 tcp: Buffer sizes are *not* inherited on accept()/accept4() c96a88d vhost_user: remove ASSERT() on iovec number 412ed4f vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_DEVICE_STATE 31d7002 vhost-user: add VHOST_USER_SET_DEVICE_STATE_FD command 878e163 vhost-user: add VHOST_USER_CHECK_DEVICE_STATE command 78c73e9 vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_LOG_SHMFD 3c1d91b vhost-user: add VHOST_USER_SET_LOG_BASE command 538312a vhost-user: Pass vu_dev to more virtio functions b04195c vhost-user: add VHOST_USER_SET_LOG_FD command 6016e04 vhost-user: update protocol features and commands list a8f4fc4 tcp: Mask EPOLLIN altogether if we're blocked waiting on an ACK from the guest b8f573c tcp: Set EPOLLET when when reading from a socket fails with EAGAIN 22cf08b tcp: Don't subscribe to EPOLLOUT events on STALLED 707f77b tcp: Fix ACK sequence getting out of sync on EPOLLOUT wake-up 1b95bd6 vhost_user: fix multibuffer from linux Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: update to v3.5.0Bruce Ashfield2025-03-241-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping ovs to version v3.5.0-8-g445594155, which comprises the following commits: 445594155 ofproto-dpif: Fix dp_hash mapping after select group modification. 2d05966ba tests: Disable rate limiting for tests parsing flow dumps from logs. 59a155c93 tests: Fix 'ICMP related with SNAT' test case in offload scenario. d7536101f github: Get sparse from the official GitHub mirror. 0aa6a73d3 python: ovsdb-idl: Fix persist_uuid references. b11084dc7 python: ovsdb-idl: Handle inserts w/o changes. 490d0377d ofproto-dpif-xlate: Fix source IP lookup for non-bridge ports. 8a1fb4bcf Prepare for 3.5.1. 400db9746 Set release date for 3.5.0. 8d2a5f62a tests: Use correct arguments to curl. 6740a5230 dpif-netdev: Fix Auto Load Balance debug log. 196145a4a miniflow_extract: Push ct_tp_{src, dst} for later frags. d087675ba dpif-netdev: Preserve inner offloads on recirculation. cae90a3d7 ovsdb-server: Do not use filename after free. 3392e4375 netdev-vport: Ignore ipsec_ tunnel option prefix for all tunnels. 54c3a78ef ofproto-dpif-xlate: Fix memory leak in xlate_generic_encap_action(). 8ceccbb40 github: Update fedora image to 41. eab4db54a documentation: Fix Sphinx program directive. 1ccfc9882 documentation: Fix ovs-flowviz warnings on older Sphinx. 63785d16d fedora: Don't generate network-scripts-openvswitch for ver > 40. 57c3cc37c route-table: Allow parsing routes without nexthop. 123798f7f sparse: Remove wrappers for some DPDK headers. 472143855 netdev-offload-tc: Fix ignore of dl type mask when installing flows. 0aaa85240 faq: Update DPDK releases for older branches. 09095c698 AUTHORS: Add Markus Linnala. cb7a44690 utilities/bashcomp: Do not run ovs-vsctl when not possible. c0c61e12f ofproto-macros.at: Fix hex matching in the strip_recird() macro. 84768a4b0 route-table: Use ofpbuf_use_const() for multipath attributes. 6e708a043 route-table: Fix potential memory leak. ee9b72178 route-table: Avoid potential NULL ptr dereference. 09f3b32a3 ofp-ct: Add missing struct declaration. 005e25892 Prepare for 3.5.0. 2276c3a2c userspace: Support GRE TSO. d68b73e2f docs: Update userspace TSO tunnel fallback documentation. a4efa0788 docs: Add tunnel support to TSO GRE documentation. 91fc51106 route-table: Support parsing multipath routes. 50f7d2082 route-table: Export route table sync functions. da58f0291 route-table: Use correct type for nlmsg_type. 18aa16831 route-table: Rename route_data mark to rta_mark. ca8f5af37 route-table: Rename route_data local to rtn_local. a75eb5464 route-table: Store original value for rtm_dst_len. e573adeec route-table: Use callback for handling route msgs. e15910ddc route-table: Use RTA_TABLE for route table filter. 9d9a99d15 route-table: Support parsing RTA_VIA attribute. 6f9196a3d route-table: Store nexthops in linked list. 583dd0315 route-table: Harmonize log msgs with code base. 910bc81e6 route-table: Rename static nln callback buffer. 71785737d route-table: Split header and attribute parsing. 78d10bdc3 route-table: Store route protocol. 10ae7983e route-table: Store route priority. 903989bdb route-table: Store route table ID. e67f317ef ovs-ctl: Fix inability to set custom options for ovs-monitor-ipsec. fe1d48dba rhel, debian: Add missing restart policy to ipsec service. 656c95e13 rhel, debian: Fix systemd monitoring wrong pid for ovs-monitor-ipsec. 867093679 dpif-netdev: Modify code comments for function parse_tcp_flags. c3f4d9fe5 ipf: Fix the over-sized reassembly. 367e0fff2 debian: Let *-ctl handle runtime directory. 3f19558e7 debian: Use PIDFile with systemd. 439e0bf2f debian: Add X-Python3-Version stanza. 4ce47bbcc debian: Move ovs-flowviz to openvswitch-common. 96d5bcf99 debian: Drop hard Python dep where appropriate. f64e94d8d debian: Drop shlibs:Depends macro for -ipsec. 0ff25dfca debian: Drop python3:Depends macro for -vtep. 6a1a5f2ee python: Allow ovs-flowviz to run without graphviz. e4193663a debian: Use pybuild to handle OVS Python module. 8b7f1eb8d ovsdb: Fix asan warning on ovsdb fatal errors. a24413cd3 netdev-dpdk: Set vhost port maximum number of queue pairs. b72f6bb4c netdev-offload-dpdk: Fix spelling error in the comments. 260925314 dpdk: Update to use v24.11.1. e929e2c20 ipf: Cancel fragment pkt copy. 638433bb9 utilities: Add upcall statistics to the kernel_delay.py script. a48b3278f ipsec: Add support for using default crypto with Libreswan. 09d7c5ac0 ipsec: Add support for using non-root ipsec.conf. 1be33d52a netdev-tc-offloads: Don't offload header modification on ip fragments. 7b1ce8e2a ofpbuf: Add helper method to truncate the buffer. 4d09d6b48 stream-ssl: Add explicit support for configuring TLSv1.3. 0e23c9cab stream-ssl: Use DEFAULT:@SECLEVEL=2 cipher list by default. 57c235801 ovs-pki: Use 3072-bit keys by default and drop 1024-bit ones. 3131588e1 python: Require Python 3.7 for ssl.TLSVersion. e70670add m4: Fix check for Python 3.6 version. 2b9cc5f1c stream-ssl: Remove use of deprecated SSLv23_method. 57d58b799 stream-ssl: Support protocol ranges. 4b2016b82 stream-ssl: Drop support for OpenSSL 1.1.0 and older. 49f299313 treewide: Refer to SSL configuration as SSL/TLS. 923a80d1d stream-ssl: Deprecate and disable TLSv1 and TLSv1.1. 36645a62c AUTHORS: Add Allen Chen. af292d273 netdev-dpdk: Restore outer UDP checksum for Intel nics. 6f075ae4e netdev-offload-dpdk: Support ICMPv6 offload. b272282ab ofproto: Fix default pmd_id for ofproto/detrace. f62716992 ovsdb-data: Fix overflow in ovsdb_datum_sort_unique()'s return value. 69f1a128a ofp-meter: Initialize command with valid value. ccf083b55 general: Fix overflowed integer arguments. 7f6aa2e3d documentation: Fix ovs-flowviz highlight option. d104feb7f github: Skip clang-analyze when reference generation fails. 682a48908 cirrus: Update to FreeBSD 14.2 and 13.4. 9f0c46b5d bridge: Fix log spam about prefixes. 3b37a6154 netdev-vport: Deprecate STT tunnel port type. 8d7ac031c netdev-vport: Deprecate LISP tunnel port type. 77ac0b28c netdev: Always clear struct ifreq before ioctl. 40ba3fc93 netdev-native-tnl: Fix use of uninitialized RSS hash. 34868de01 tests: Use OVS_CHECK_XT6 for all applicable IPv6 tests. 2964cbbd4 tests: Use OVS_CHECK_XT for all applicable IPv4 tests. f0d1608a7 classifier: Fix the fieldspec comment in the prefix tracking section. 249a9b56e system-traffic: Fix syntax errors in FTP and IPv6 curl calls. e6844c646 ovsdb-idl: Fix use of uninitialized datum for graph consistency check. cd922bdd1 db-ctl-base: Fix uninitialized datum fields while checking conditions. a20e2c8ce ovsdb-types: Fix use of uninitialized reference type. 464bc6f9c ofproto-dpif-upcall: Fix use of uninitialized missed dumps counter. 308e56642 ovs-vsctl, vtep-ctl: Silence memory sanitizer warning for longindex. 303628e33 tests: multipath: Fix use of uninitialized wildcards. 54c4fd220 stream: replay: Fix potential NULL dereference on write failure. da12d3d9c ofp-actions: Fix use of uninitialized padding in set-field. 54ba1e272 system-traffic: Standardize by replacing all wget instances with curl. 6bafaebf3 system-traffic: Replace wget with curl for negative and ftp tests. 2af7cef26 ofproto: Enable address prefix tracking for IPv6 by default. 4394f7281 classifier: Increase the maximum number of prefixes (tries). 1ec2381d9 Revert "github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel." 8433cea48 python: Use "if x not in" instead of "if not x in". ba5a1536c netdev-dpdk: Check error for device info and link status queries. 7383f0e1b netdev-dpdk: Cache representor flag at init. 6204d3837 netdev-dpdk: Cache device info during port configuration. d4b222bb6 netdev-dpdk: Stop configuring after device init failure. dc7663f13 tests: Fix transient failure in ping6 header modify. 05ba50324 github: Build Libreswan v5.1 from sources. ec2a950d7 tests: Handle marks using nft if available. 91ee06739 tests: Add nft support to ADD_EXTERNAL_CT. d595473cc tests: Add nft accept support. 764e020c1 AUTHORS: Add Mike Ovsiannikov. 9fa73098c ofproto/ofproto: Initialize learn add rule flag. 415628c41 ci: Update GitHub actions runner from Ubuntu 22.04 to 24.04. cb5aebd6d dpdk: Fix dpdk logs being split over multiple lines. e998d4558 ipsec: libreswan: Reduce chances for crossing streams. 91ef898ec tests: ipsec: Check that nodes can ping each other in the NxN test. 65f2e68c7 tests: ipsec: Add NxN + reconciliation test. 62167ff93 system-tests: Verbose cleanup of ports and namespaces. e2a7853ec ipsec: Make command timeout configurable. 91e6bc3f8 ipsec: libreswan: Avoid monitor hanging on stuck ipsec commands. f11fdde3c ipsec: libreswan: Try to bring non-active connections up. 25a301822 ipsec: libreswan: Reconcile missing connections periodically. c0368418d ipsec: libreswan: Fix regexp for connections waiting on child SA. 01b988ded ipsec: Add a helper function to run commands from the monitor. a119828ea meta-flow: Fix nw_frag mask while parsing from string. c30ff22b5 ci: Remove dependency on libpcap. 2d93dfd51 github: Remove ASLR entropy workaround. b3e08faf9 bond: Always revalidate unbalanced bonds when active member changes. 49a249fb2 ofproto-dpif-upcall: Fix redundant mirror on metadata modification. 06b8b9ecc system-offload: Add TC tunnel flags test case. 316fcc631 netdev-offload-tc: Add don't fragment support to encap action. aee4f9aec netdev-offload-tc: Match against tunnel flags if supported. 3f7af5233 netdev-offload-tc: Check if TCA_FLOWER_KEY_ENC_FLAGS is supported. 19ee88ef0 debian, rhel: Move ovs-flowviz and the man page to appropriate places. 4d1b1aa93 debian, rhel: Suggest ovs-flowviz dependencies. e26370889 python: Don't install ovs-flowviz.conf as a global data. 0256ee64e dpdk: Use DPDK 23.11.2 release. e532f937f documentation: Document ovs-flowviz. 4214bf4b2 python: ovs: flowviz: Add datapath graph format. f36b06510 python: ovs: flowviz: Add datapath html format. 60c3a4228 python: ovs: flowviz: Add Openflow cookie format. f4f8f650f python: ovs: flowviz: Add OpenFlow logical view. 1135fc321 python: ovs: flowviz: Add datapath tree format. 196b86eac python: ovs: flowviz: Add html formatting. d6fbc19e4 python: ovs: flowviz: Add default config file. ec2646dd4 python: ovs: flowviz: Add console formatting. e3149d480 python: ovs: flowviz: Add file processing infra. 2fb2dbe82 python: ovs: Add flowviz scheleton. 8bac5c0c7 python: ovs: flow: Add offloaded key to odp flow. c7e5cf39c python: ovs: flow: Support dp-extra-info section. 4c5c1aa9f conntrack: Fix Windows build due to ternary syntax extension. d1430f3d8 checkpatch: Fix checkpatch's check-authors-file option in CirrusCI. 54aa6e12a AUTHORS: Update Kevin Traynor. 63a4b4d0f dpctl: Do not allow out of range values in ct-set-limits. b57c1da5c conntrack: Use a per zone default limit. 41f3f5b90 conntrack: Turn zl local limit into atomic. 8ff40f335 conntrack: Do not use atomics to report zones info. 8ec7d55bf conntrack: Add zone limit coverage counter. db26ef7c0 conntrack: Correctly annotate conntrack member. a6ccd1115 checkpatch: Add new check-authors-file option to checkpatch.py. 58c66c190 selinux: Add missing permissions for netlink_rdma_socket. 445991838 ovs-macros.at: Correctly delete iptables rule on_exit. 60917c822 system-traffic: Do not rely on conncount for already tracked packets. cb6423478 ofproto-dpif: Improve load balancing in dp_hash select groups. 7df4dd2aa debian: Allow passing DEB_BUILD_OPTIONS. 84ea72fcc Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions." f2ab45c66 ci: Use sarif-tools v3.0.1 due to issues in earlier versions. 8370cda58 AUTHORS: Add Sunyang Wu. 38a9482bc netdev-offload: Fix incorrect comments. 68517f43a tests: ovsdb: Add ovsdb prefix to related tests. f27a1a081 tests: ovsdb: Update missing ovsdb keywords. 2c7e2d58c selinux: Update policy file. e3ac1e5e7 AUTHORS: Add Jonathan Davies . e40f9312f github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel. 5c42db83b ci: Run oss-fuzz build stage during CI. 2bf609f70 netdev-dpdk: Disable outer udp checksum offload for txgbe driver. 1b9964902 AUTHORS: Add Liu Yulong. 172a66580 netdev-offload-dpdk: Change flow offload failure log level. ec0f3772f utilities: Add a GDB macro to dump ct conns. fa731c112 oss-fuzz: Fix odp_flow_format() API in the fuzz tests. 234e62619 ci: Use previous sarif-tools release due to issue in latest release. c98759a4f ovsdb-idl: Fix IDL memory leak. ddd6490ab mcast-snooping: Don't access ovs_list members directly. 363435fe8 mcast-snooping: Properly check group_get_lru return code. d1332ee41 vconn: Always properly free flow stats reply. 3d6b048d8 classifier: Store n_indices between usage. cfc8321da netlink-socket: Initialize socket family. cfb0abb95 jsonrpc: Don't access ovs_list members directly. a67db28fd dpif-netdev: Remove undefined integer division. e48ba271f ovsdb-error: Annotate non-null functions. bd48ff8f7 netdev-dpdk: Re-enable VXLAN/Geneve offload for Intel cards. 82c1028e3 Userspace: Software fallback for UDP encapsulated TCP segmentation. 5cb19214e ofproto/bond: Preserve active bond member over restarts. 6c3074686 conntrack: Disambiguate the cleaned count log. 252ee0f18 dpif: Fix flow put debug message match content. 604e54fc3 ovs-dpctl-top: Fix RuntimeError with resizing flow dict during iteration. 0051785f0 ovs-dpctl-top: Fix Python3.12 invalid syntax warning. 70fd13e25 utilities: Updated dpif_nl_exec_monitor.py to debug all operations. bc9561c87 utilities: Update dpif_nl_exec_monitor.py to include new actions. 180ab2fd6 ofproto-dpif-upcall: Avoid stale ukeys leaks. c38ff60c2 odp-util: Fix dead code warning in format_odp_set_nsh(). edb66993f dpif-netdev-perf: Eliminate dead code. 941b1825b vlog: Only close() valid file descriptors. f5c4bdafe stopwatch: Handle spurious wakeups of ovs_mutex_cond_wait(). c90362488 dpif: Fix potential NULL pointer access in log_flow_message(). 4a9c06ba0 netdev-native-tnl: Fix Coverity integer overflows report. 01769004c hash: Fix integer overflow before widen in hash_finish32(). d7a9a9eb6 userspace: Correctly set ip offload flag in native tunneling. 963dec466 docs: Fix argument formatting in ovs-appctl(8) man page. 19d809afb AUTHORS: Update email for Rosemarie O'Riorden. dbeabcc68 Set release date for 3.4.0. f3197b73b releases: Mark 3.3 as a new LTS release. 2ff8ed8de dp-packet: Correct IPv4 checksum calculation. ea2bd0d6f netdev-linux: Fix unaligned access to rpl_rtnl_link_stats64. 8d3cd41c3 route-table: Fix another UBsan warning about pointer type. 4ba65112d netdev-linux: Do not offload IP checksum. 82ed9ef78 tunnel, tests: Add test for mirroring over tunnels. 70bc3baaa ofproto-dpif-xlate: Add a recursion limit to tunnel address lookup. 9f0c6e16e netdev-dpdk: Fix race condition in mempool information dump. a5023d597 ovsdb: transaction: Remove incorrect transaction abort in pre-commit. 8f3d6c145 netlink-notifier: Silence the UBsan's function pointer mismatch error. f12f4d890 Documentation: Update QEMU documentation URLs. cdba5e30e AUTHORS: Add Vipul Ashri. 53d9dcb9f match: Fix false-positive snprintf size warning. b516da14c util: Add non-NULL format assertion to xvasprintf. f9078407a ofproto-dpif-xlate: Initialize observe_offset for sample actions. ebdc3cf91 docs: Define Read the Docs configuration for Sphinx HTML parameters. f973d9543 ofproto-dpif-xlate: Remove misleading wc NULL check in packet mirror. d5fef714b flow: Fix unaligned access to the ND target in miniflow_extract. 6165c92a2 ofp-actions: Fix reporting observation point bits instead of domain. 03cd668e0 dpif-netlink-rtnl: Fix netdev leak in out-of-tree tunnels probe. 3985fa03b dpctl: Fix netdev reference leak in "show" command. 903aa8fdc Prepare for post-3.4.0 (3.4.90). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni-plugins: update to -topBruce Ashfield2025-03-241-1/+1
| | | | | | | | | | | | | | | | Bumping cni-plugins.git to version v1.1.0-353-g35831f3d, which comprises the following commits: 35831f3d Fix addresses and routes reinserted to the VRF e20492f0 DHCP lease maintenance should terminate when interface no longer exists. 3c224f5b Add a new firewall ingress-policy "isolated" bd8da200 host-device: Return interface name in result 44ec80b7 build(deps): bump the golang group with 2 updates 6e7fb607 build(deps): bump golang.org/x/sys in the golang group 7c122fab bridge: Add option to enable port isolation e4ca66b4 build: split CI and go.mod version abfac4a9 Remove scripts/release.sh because of no longer used (#1137) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.18.0Bruce Ashfield2025-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping skopeo to version v1.18.0-67-ge8d9f916, which comprises the following commits: da1bf9f7 chore(deps): update dependency containers/automation_images to v20250324 7983f20a Remove obsolete build tag syntax 8d000f45 Use the new maps.Keys and slices.Sorted 1f49b2c0 Use slices.Backward a31470d7 proxy: Add GetLayerInfoPiped ec219604 Update github.com/hashicorp/go-multierror 1a38d976 Update github.com/dsnet/compress 49569bcf Complete paths for some transports e7e09255 Don't complete a space after '<transport>:' 9c0f31dc In (skopeo inspect), validate the manifest against a digest reference 9fda7e73 In (skopeo layers), validate the blob against the expected digest a0799484 Always close the blob we are reading from a registry a5182876 fix(deps): update module golang.org/x/term to v0.30.0 b8637922 chore(deps): update dependency golangci/golangci-lint to v1.64.8 56ccf09c ROADMAP: new file 03fa889d chore(deps): update module golang.org/x/net to v0.36.0 [security] 15132e6c Update to Go 1.23 4080a631 fix(deps): update module github.com/containers/common to v0.62.2 cc743c3c chore(deps): update dependency golangci/golangci-lint to v1.64.7 91c6aa61 fix(deps): update module github.com/containers/image/v5 to v5.34.2 d00ea33d fix(deps): update module github.com/containers/storage to v1.57.2 7bd0dc21 .github: remove cirrus rerun action 547141ce fix(deps): update module github.com/opencontainers/image-spec to v1.1.1 a185498c chore(deps): update dependency golangci/golangci-lint to v1.64.6 fad5a31a chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] 5744b9b4 chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.4 [security] 934ea727 fix(deps): update module github.com/containers/common to v0.62.1 8a44fe6c fix(deps): update module github.com/containers/image/v5 to v5.34.1 c7aaed73 Update for cobra API change 9d73060a fix(deps): update module github.com/spf13/cobra to v1.9.1 5c968d67 chore(deps): update dependency golangci/golangci-lint to v1.64.5 841a1b61 chore(deps): update dependency golangci/golangci-lint to v1.64.4 8c2eff1d chore(deps): update dependency golangci/golangci-lint to v1.64.3 f88186e6 [skip-ci] Packit/TMT: Run system tests ff462b3d PR Labels: apply release label to release- branch PRs 8c20592d chore(deps): update dependency golangci/golangci-lint to v1.64.2 20746ae2 Bump Skopeo to v1.19.0-dev 64361bde Bump Skopeo to v1.18.0 bd1ac466 Switch to the CNCF Code of Conduct 59ec5547 fix(deps): update module golang.org/x/term to v0.29.0 04d65888 fix(deps): update module github.com/containers/common to v0.62.0 137a912c chore(deps): update dependency containers/automation_images to v20250131 52895bc6 fix(deps): update module github.com/spf13/pflag to v1.0.6 b78a4159 fix(deps): update module github.com/containers/image/v5 to v5.34.0 5eba0614 RPM: include check section to silence rpmlint 9764c99d RPM: cleanup gobuild macro for CentOS Stream a81cb65f fix(deps): update module github.com/containers/storage to v1.57.1 85fa4dff fix(deps): update module github.com/containers/storage to v1.57.0 ed0efc69 feat: Add `--retry-delay` Option ab53f644 fix(deps): update module github.com/containers/common to v0.61.1 653db366 fix(deps): update module github.com/containers/image/v5 to v5.33.1 6483de48 fix(deps): update module github.com/containers/storage to v1.56.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to v1.3.0-rc.1Bruce Ashfield2025-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.3.0-rc.1-40-g25d47644, which comprises the following commits: bac33825 build(deps): bump github.com/opencontainers/selinux bc96bc85 libct/seccomp: use maps and slices pkgs 370733b7 libct/cap: rm mapKeys, use maps.Keys, slices.Sorted 3a33b6a3 Make state.json 25% smaller 9c5e687b libct: Use chown(uid, -1) to not change the gid d31e6b87 ci: bump bats to v0.11.0 8e653e40 script/setup_host_fedora.sh: use bash arrays a76a1361 script/setup_host_fedora.sh: remove -p from mkdir af386d1d tests/int: rm some "shellcheck disable" annotations b48dd651 ci: bump shellcheck to v0.10.0 6e5ffb7c Makefile: bump shfmt to v3.11.0 53931553 libct: log a warning on join session keyring failure 9aeb7905 tests/int/selinux: fix skip message 5ac77ed6 libct/int: add/use needUserNS helper 1d9bea53 .cirrus.yml: install less dependencies 1afa1b86 signals: replace unix.Kill with process.Signal 346c80d7 libct: replace unix.Kill with os.Process.Signal 135552e5 CI: migrate Vagrant + Cirrus to Lima + GHA d5fe5303 build(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 000cdef7 build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 79e9cf53 doc: update spec-conformance.md 12c2e21f build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 05e83fc6 deps: bump go-criu to v7 5d6e7e12 VERSION: back to development a00ce11e VERSION: release v1.3.0-rc.1 10ca66bf runc exec: implement CPU affinity d92dd226 performance improvement: setup signal notify in a new go routine a75076b4 Switch to opencontainers/cgroups 6e01e850 CHANGELOG: fwd port 1.2.1 to 1.2.5 changes 537a2276 build(deps): bump github.com/opencontainers/runtime-spec c43ea7d6 exeseal: do not use F_SEAL_FUTURE_WRITE 1d047e44 expose criu options for link remap and skip in flight 559bd4eb libcontainer: rename dmz -> exeseal ad09197e libct: don't send config to nsexec when joining an existing timens 74619689 test: exec into a container with private time ns 28475f12 Retry direct unix package calls if observing EINTR 4e0f7a20 libct/cg/dev: remove specconv dependency 69792827 libct/cg: don't use utils.CleanPath 5e1dcdf5 libct/cg: add internal/path.Inner 271aa88e libct/cg/fs2: rm _defaultDirPath 7bebe68c libct/cg: stop using utils.ProcThreadSelf 42449786 CI: gha: rm ubuntu-20.04 79a4ac05 deps: bump cilium/ebpf to v0.17.3 8db6ffbe libc/utils: simplify CleanPath 26cfe142 release: explicitly set --keyserver in release signing scripts 0e3b5d5b build: bump libseccomp to v2.5.6 d237bc46 .cirrus.yml: use Go 1.24 16d73367 Require Go 1.23.x, drop Go 1.22 support 87420749 CI: add Go 1.24, drop go1.22 99f9ed94 runc exec: fix setting process.Scheduler b9114d91 runc exec: fix setting process.ioPriority 73849e79 libct: simplify Caps inheritance 049a5f76 libct/cap: allow New(nil) f26ec922 libct: rm Rootless* properties from initConfig 2a86c357 libct: document initConfig and friends 13277b20 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 4b87c7d4 Fixups for newProcess 8fbdb7e7 setupIO: optimize c4eb0c61 libct: createExecFifo: optimize 5d2e2445 execProcess: move some code to newProcess c283ed10 tests/int: add hooks argv[0] test 8529591c build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 746a5c23 libcontainer/configs/validate: improve rootlessEUIDMount 055041e8 libct: use strings.CutPrefix where possible 259b71c0 libct/utils: stripRoot: rm useless HasPrefix ecf74300 libct/cg/fscommon: GetCgroupParam*: unify ef983f51 libct/cg/fscommon: ParseKeyValue: stricter check d83d533b libct/cg/fscommon: GetValueByKey: use strings.CutPrefix f1348712 libct/cg/fscommon: ParseKeyValue: use strings.Cut e9855bda libct/cg/fscommon: use strings.Cut in RDMA parser 930cd494 libct/cg/fs2: use strings.Cut in parsePSIData 40ce69cc libct/cg/fs2: use strings.Cut in setUnified 037668e5 libct/cg/fs2: simplify parseCgroupFromReader 075cea3a libcontainer/cgroups/fs: some refactoring 4271ecf7 libct/cg/fs: refactor getCpusetStat bfcd479c libct/cg/fs: getPercpuUsage: rm TODO 871d9186 exec: improve getSubCgroupPaths 7149781f exec: use strings.Cut to parse --cgroup ec9b0b5f runc list: use standard os/user 52f702af libct: earlier Rootless vs AdditionalGroups check 7dc24868 libct: switch to numeric UID/GID/groups b55167e0 tests/int/exec --user: check default HOME ccb589bd libc/int/userns: add build tag to C file d84388ae libct/cg/sd: set the DeviceAllow property before DevicePolicy a274d275 build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 54fa0c55 capabilities: be more graceful in resetting ambient f414b534 CI: fix criu-dev compile 8e5bb0d8 deps: roll back to cilium/ebpf v0.16.0 6c9ddcc6 libct: switch from libct/devices to libct/cgroups/devices/config 200f5631 libct/devices: move config to libct/cg/devices/config 70e500e7 deps: update to github.com/cyphar/filepath-securejoin@v0.4.1 24ec764a build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 33315a05 libcontainer: if close_range fails, fall back to the old way 111e8dcc libcontainer: Use MaxInt32 as the last FD to match kernel size semantics 7b26da9e libcontainer: Prevent startup hang when CloseExecFrom errors 9af79522 build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 a50e6872 tests/int: simplify assignments a22ea827 tests/int/hooks_so: don't hardcode soname 1890af6d support cgroup v1 mounted with noprefix af929228 RELEASES: add formal release policy for runc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v1.4.0Bruce Ashfield2025-03-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.9.0-438-g204d054c, which comprises the following commits: 204d054c Bump to v1.4.0 59a9904e README.md fix demo link 8460ac45 Bump golang.org/x/crypto to v0.33.0 db872518 Bump github.com/containers/buildah from 1.38.1 to 1.39.1 87d8ab15 bugfix panic in system events 610cf9fc Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 aa8a4771 Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 7c30fa9d Bump podman to v5.4.0 9a57aeb7 enhance: merge READMEs a07daf87 docs: enhance directory structure 53146731 Bump github.com/containers/podman/v5 from 5.3.1 to 5.3.2 958a2a44 packit update epel + centos stream af4b22fa Bump golang.org/x/net from 0.30.0 to 0.33.0 d8f0ffb3 Bump github.com/gdamore/tcell/v2 from 2.7.4 to 2.8.1 086842a2 Bump golang.org/x/crypto from 0.31.0 to 0.32.0 f1f1ff11 Bump golang.org/x/crypto from 0.29.0 to 0.31.0 0e8ff20e Bump to v1.4.0-dev 37019c2f Bump to v1.3.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: update to v1.3.0 -tipBruce Ashfield2025-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-compose to version v1.3.0-107-g4d899ed, which comprises the following commits: f9489af Allow merging of args in both list and dict syntax 65b455f Fix project name evaluation order 1aa750b integration/tests: Test project name override with COMPOSE_PROJECT_NAME env variable 98b9bb9 Fix interpolation for COMPOSE_PROJECT_NAME 170411d test/integration: Test COMPOSE_PROJECT_NAME interpolation f5a6df6 added changes to release notes f106ea0 modifications to pass pylint test b748c26 add try-except block to handle error in case of shutdown error 3973c47 catch SIGINT signal properly in 'up' function and call compose 'down' function for a graceful shutdown 2e7d83f Properly surface errors from build commands 8ef537e test/integration: Automate manual `selinux` test d476071 Don't raise exception on inexistent services in 'down' command 202c377 test/integration: Automate manual `uidmaps` test b9f2779 Add hook to check for signoff in commit messages 4cd1642 Add quiet flag to podman-compose config fd40133 added release note to newsfragment directory 37b27fa Refactor event loop handling to simplify logic for Windows platforms c6b3d49 Adds lint exclusions already ignored by the code 10ad739 Replaces black with ruff on pre-commit-config 784d798 Fix event loop handling for Windows platform in compose_up function 81a0a59 Add more logging tests c289a3b Fix logging test coding style baccce4 Fix comments related to logging cbc5a8c Add newsfragment for interface_name option aeaceed integration test for x-podman.interface_name option b1eb558 Document existence of x-podman.interface_name 1cdc9e6 interface_name can be specified in net_config_ 838957b test/integration: Automate manual 'secrets' test d4e5859 Do not close file descriptors when executing podman bfba7ba tests/integration: Automate manual `seccomp` test 43a2f1d Implement x-podman.pod_args to override --pod-args default eaec193 tests/integration: Describe `pid` test bfea139 tests/integration: Automate manual `no_services` test e626f15 tests/integration: Automate manual `nets_test_ip` test 29404af tests/integration: Automate manual 'nets_test3' test e03d675 Remove incorrect os.chdir call to fix folder error bdb3e4e Throw a readable error on too old Python 105e390 Add support for dockerfile_inline d9ef3d2 tests/integration: Add missing __init__.py for network_scoped_aliases d23ef4f tests/integration: Add missing __init__.py for build_labels test b685bce tests/integration: Move test utils to one test_utils file 7d5bf64 tests/integration: Move test "vol" to corresponding directory 9f7ae38 tests/integration: Move test "ports" to corresponding directory 3cee4e0 tests/integration: Move test "config" to corresponding directory 498a199 tests/integration: Move test "env" to corresponding directory 488908f tests/integration: Move test "env_file" to corresponding directory f7bcc42 tests/integration: Move test "up_down" to corresponding directory a73df71 tests/integration: Move test "build_ulimits" to corresponding directory 50dc19f tests/integration: Move test "network" to corresponding directory 9029dce tests/integration: Move test "nets_test2" to corresponding directory a8282c7 tests/integration: Move test "nets_test1" to corresponding directory f4b775c tests/integration: Move test "nethost" to corresponding directory adf30e0 tests/integration: Move test "multicompose" to corresponding directory 41675c3 tests/integration: Move test "ipam_default" to corresponding directory 6caf2ea tests/integration: Move test "interpolation" to corresponding directory 3093b00 tests/integration: Move test "include" to corresponding directory 1c21d65 tests/integration: Move test "in_pod" to corresponding directory 18e5fd6 tests/integration: Move test "filesystem" to corresponding dir 24bdfd1 tests/integration: Move test "extends_w_file_subdir" to corresp. dir c2d3e15 tests/integration: Move test "extends_w_file" to corresponding directory ba95100 tests/integration: Move test "extends_w_empty_service" to corresp. dir 6022669 tests/integration: Move test "extends" to corresponding directory e29df71 tests/integration: Move test "exit_from" to corresponding directory 21b9d38 tests/integration: Move test "deps" to corresponding directory 4c17ce2 tests/integration: Move test "default_net_behavior" to corresponding dir 09d54e9 tests/integration: Move test "build_secrets" to corresponding directory f1dd9b3 tests/integration: Move test "build_fail" to corresponding directory 87af67f tests/integration: Move test "network_scoped_aliases" to corresp. dir f1d6638 tests/integration: Move test "build" to corresponding directory 69ffff3 tests/integration: Move test "additional_contexts" to corresp. dir 9be3ec9 Add network "dns" support 6e642dc Add network "disable-dns" support 2aa042b expand service environment_variables before adding to subs_dict bc4177f Exclude dependent containers on up if --no-deps. 8206cc3 Run should not add --requires if --no-deps. 48c6c38 build(deps): bump virtualenv from 20.25.1 to 20.26.6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v5.4.1Bruce Ashfield2025-03-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.4.1-10-g227df90eb7, which comprises the following commits: 33b4b301fc RPM: Add riscv64 to ExclusiveArch-es 64e2b91ab4 Fix HealthCheck log destination, count, and size defaults bef77d74d7 Win installer test: hardcode latest GH release ID 88a3bfbde2 Packit: Fix action script for fetching upstream commit 405c55b4a4 Bump to v5.4.2-dev b79bc8afe7 Bump to v5.4.1 01a55d9d5c update gvproxy version to 0.8.4 0f20d21240 Update Buildah to v1.39.2 bdcede792f Update release notes for v5.4.1 3e6e003173 Fix reporting summed image size for compat endpoint 090dbc4cee podman-import only supports gz and tar 5327df1921 quadlet kube: correctly mark unit as failed bc37e935ba pkg/domain/infra/abi/play.go: fix two nilness issues 02e8a59774 kube play: don't print start errors twice cd8582d4f0 libpod: race in WaitForConditionWithInterval() ab7c54b4cf libpod: race in WaitForExit() with autoremove 180d55165d Don't try to resolve host path if copying to container from stdin. b716aa17e2 Use svg for pkginstaller banner bff9da4e3a Create quota before _data dir for volumes a15623d12f Packit: clarify secondary status in CI 118aa9ef94 Packit/RPM: Display upstream commit SHA in all rpm builds fea21e9bc0 podman run: fix --pids-limit -1 wrt runc 07d7101429 vendor: update github.com/go-jose/go-jose/v3 to v3.0.4 599a0b71a6 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] b8b0639e7c wire up --retry-delay for artifact pull 5671cfe3ab Revert "silence false positve from golangci-lint" 2d18a7cc47 update golangci-lint to v1.64.4 0b31c710ce update golangci-lint to v1.64.2 fc63a340f3 silence false positve from golangci-lint e50898e1f7 cmd/podman: refactor Context handling 11ef179de2 fix new usetesting lint issue f5d96a5959 Packit/Copr: Fix `podman version` in rpm fd5eb1fdf3 Remove persist directory when cleaning up Conmon files 223f827213 Bump to v5.4.1-dev f9f7d48b24 Bump to v5.4.0 246011458c Update release notes for v5.4.0 final 3d344ffd26 In SQLite state, use defaults for empty-string checks 2612e3c233 Bump FreeBSD version to 13.4 3d917a395c docs: add v5.4 to API reference 13ebc5860c Update rpm/podman.spec f34d6c76db RPM: set buildOrigin in LDFLAG 6218d42ed6 RPM: cleanup macro defs 18249e10c1 Makefile: escape BUILD_ORIGIN properly d280feb96c rootless: fix hang on s390x fa263d2cc9 Set Cirrus DEST_BRANCH appropriately to fix CI 0f01f00f03 Bump to v5.4.0-dev ad54787bf0 Bump to v5.4.0-rc3 6c78bad0dd Update release notes for v5.4.0-rc3 02eac2979c Add BuildOrigin field to podman info 141eae99b8 artifact: only allow single manifest d5989990d5 test/e2e: improve write/removeConf() 522f9de9e3 Add --noheading to artifact ls 9e83191c8f Add --no-trunc to artifact ls 4cd76ef27b Add type and annotations to artifact add bc8124fd62 pkg/api: honor cdi devices from the hostconfig 57b9709b69 util: replace Walk with WalkDir bc5de3dfc7 fix(pkg/rootless): avoid memleak during init() contructor. 8ee7b117b6 Add `machine init --playbook` 5feb81d9ff RPM: include empty check to silence rpmlint 48459db076 RPM: adjust qemu dependencies 9b67d4c285 Force use of iptables on Windows WSL cadf081554 rpm: add attr as dependency for podman-tests d4f5817862 update gvproxy version fe02e390af [v5.4] Bump Buildah to v1.39.0 9e2e7f2a77 podman exec: correctly support detaching e24ccdd27b libpod: remove unused ExecStartAndAttach() 25674e05cd [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0 5f6adf4d80 Move detection of libkrun and intel 599da8c50b Prevent two podman machines running on darwin 03b100563e Remove unnecessary error handling bba28688f7 Remove usused Kind() function d475b48766 Bump to v5.4.0-dev 14f6a69dd3 Bump to v5.4.0-rc2 d52277db75 Update release notes for v5.4.0-rc2 fa0e8f0582 Safer use of `filepath.EvalSymlinks()` on Windows 1c111eead7 error with libkrun on intel-based machines 14cd6ff1d2 chore(deps): update dependency pytest to v8.3.4 97323a691a test/buildah-bud: skip two new problematic tests on remote 527a51dcc4 Fix podman-restart.service when there are no containers 3aa09dd521 Avoid upgrading from v5.3.1 on Windows 81eb84fdaa Clean up after unexpectedly terminated build 06c103469d system-tests: switch ls with getfattr for selinux tests 141bd613b8 vendor latest c/{buildah,common,image,storage} bbf00ec6bf Makefile: Add validatepr description for 'make help' output 0d2431dca2 docs: Enhance podman build --secret documentation and add examples 016f41ab49 docs: mount.md - idmapped mounts only work for root user 4bdb947d72 Define, and use, PodmanExitCleanlyWithOptions df9e8c3ce6 Eliminate PodmanSystemdScope 7c40e85968 Fix image ID query 11ee6c4f90 Revert "Use the config digest to compare images loaded/pulled using different methods" 6639c20278 Update c/image after https://github.com/containers/image/pull/2613 f20d9bd637 Update expected errors when pulling encrypted images 9363c8c362 Eliminate PodmanExtraFiles 44c5767460 Introduce PodmanTestIntegration.PodmanWithOptions ce1b4f72a7 Restructure use of options d509bb0823 Inline PodmanBase into callers f17590b2bd Pass all of PodmanExecOptions to various [mM]akeOptions functions f2d552f5db Turn PodmanAsUserBase into PodmanExecBaseWithOptions 51d599bce3 Avoid indirect links through quadlet(5) 5522def65a do not set the CreateCommand for API users 5181becfde Add podman manifest rm --ignore f911d39457 Bump to v5.4.0-dev 1b3528df8d Bump to v5.4.0-rc1 6c81dc4f42 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2 d7553fabc7 podman artifact b6f1364319 vendor latest c/{common,image,storage} cfac38a0f2 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2 6ee51c5e4f cirrus: bump macos machine test timeout bdc195d641 pkg/machine/e2e: improve podman.exe match dc3a7e56be pkg/machine/e2e: improve "list machine from all providers" cfeefb3219 Remove JSON tag from UseImageHosts in ContainerConfig 805e78c2aa Set network ID if available during container inspect 969057bacc Stop creating a patch for v5.3.1 upgrades on windows 34d42514f1 compose docs: fix typo d4f4cf0988 Document kube-play CDI support e93f0acbee docs: Add quadlet debug method systemd-analyze 6ad44fe179 Replace instances of PodmanExitCleanly in play_kube_test.go 6ad4742ba8 docs: add 'initialized' state to status filters ded5a2db82 fix(deps): update module google.golang.org/protobuf to v1.36.3 3fb37c588d Switch all calls of assert.Nil to assert.NoError 6565bde6e8 Add --no-hostname option 68f29df602 Fix unescaping octal escape sequence in values of Quadlet unit files a91aa36367 Remove `.exe` suffix if any 0d0a78cc6b Add kube play support for CDI resource allocation 75b4a1b2aa add support to `;` for comments in unit files as per systemd documentation de1aa44cc9 Use PodmanExitCleanly in attach_test.go 0c18beaea7 Introduce PodmanTestIntegration.PodmanExitCleanly ba24512959 chore(deps): update dependency setuptools to ~=75.8.0 121caa04ca Add newer c/i to support artifacts fca64e5429 fix(deps): update module golang.org/x/tools to v0.29.0 3be6c501c0 fix(deps): update module golang.org/x/net to v0.34.0 806722b3d6 specgenutil: Fix parsing of mount option ptmxmode b0b1d19723 namespaces: allow configuring keep-id userns size 6dba0d9586 Update description for completion 0b3ad66a78 Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless 418ea52e06 Document .build for Image .container option c75e1c41d0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1 62c81298fd New VM Images e9fb805522 update golangci/golangci-lint to v1.63.4 4288c81da0 fix(deps): update module google.golang.org/protobuf to v1.36.2 b23349d3bd chore(deps): update dependency setuptools to ~=75.7.0 dd76034660 Fixing ~/.ssh/identity handling 1dbd68f061 vendor latest c/common from main 17a9408c0d fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12 481c608fd4 fix(deps): update module github.com/opencontainers/runc to v1.2.4 1e0f03b046 specgen: fix comment 7a51916e3b Add hint to restart Podman machine to really accept new certificates a445ebde9d fix(deps): update module github.com/onsi/gomega to v1.36.2 2aff249156 fix(deps): update module github.com/moby/term to v0.5.2 6fa234a5de Pass container hostname to netavark 53e5e402aa Fix slirp4netns typo in podman-network.1.md d1a3f96cbf Add support to ShmSize in Pods with Quadlet de829251fc fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1 29c29e215f chore(deps): update module golang.org/x/crypto to v0.31.0 [security] 1b1e0446a5 fix(deps): update module golang.org/x/net to v0.33.0 [security] ecd882f9f7 Kube volumes can not container _ cbd650212a fix(deps): update module github.com/docker/docker to v27.4.1+incompatible f2f6eb88e9 test/system: fix "podman play --build private registry" error 23d4908c8b test/system: CopyDirectory() do not chown files 8729725684 test/system: remove system dial-stdio test 153a975888 shell completion: respect CONTAINERS_REGISTRIES_CONF 10d65f30b6 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6 8b23e6d408 When generating host volumes for k8s, force to lowercase ff9d4e72b0 test: enable newly added test 8b90e3f9c0 vfkit: Use 0.6.0 binary 3021dbec7a gvproxy: Use 0.8.1 binary 64e94efb95 systemd: simplify parser and fix infinite loop 5f79cd3aef Revert "win-installer test: revert to v5.3.0" e3d2463a48 Avoid rebooting twice when installing WSL 2bca5052f1 Avoid rebooting on Windows when upgrading and WSL isn't installed af607d0de4 Add win installer patch d582c39dc8 Bump WiX toolset version to 5.0.2 e6d8603136 test/e2e: SkipOnOSVersion() add reason field e74df8c35a test/e2e: remove outdated SkipOnOSVersion() calls ae9120a71d Update VM images f1e77cf172 fix(deps): update module golang.org/x/crypto to v0.31.0 [security] c11fd6562d fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0 851ef2529f fix(deps): update module github.com/opencontainers/runc to v1.2.3 cf505fe788 quadlet: fix inter-dependency of containers in `Network=` e4a135a6ac Add man pages to Mac installer 5848dbee68 fix(deps): update module github.com/onsi/gomega to v1.36.1 a70c418b7d fix(deps): update module github.com/docker/docker to v27.4.0+incompatible 2f31a61cce Fix device limitations in podman-remote update on remote systems 2c58af0e6b Use latest version of VS BuildTools 9c14d15f4c bin/docker: fix broken escaping and variable substitution 0a4885610d manifest annotate: connect IndexAnnotations 8f45474809 Fix panic in `manifest annotate --index` 9dbc9b5055 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5 45c979d6b3 fix(deps): update module golang.org/x/net to v0.32.0 2c17ffa54d fix(deps): update module golang.org/x/tools to v0.28.0 a9b52fdedf fix(deps): update module golang.org/x/crypto to v0.30.0 66f9e81c17 fix(deps): update module golang.org/x/sys to v0.28.0 8f1266c717 Fix overwriting of LinuxResources structure in the database c76932f4c6 api: replace inspectID with name 18a93ec68b fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563 e7bbcbfbf7 Replace ExclusiveArch with ifarch c4c3fb23ce fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1 ededb4c3c4 Improve platform specific URL handling in `podman compose` for machines 0d3a653c30 Fix `podman info` with multiple imagestores 43825122d4 Switch to fixed common 49b52227b4 refact: use uptime.minutes instead of uptime.seconds dec8f3dca6 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11 db6c2c7cdf fix(deps): update golang.org/x/exp digest to 2d47ceb f3d250cf27 fix(deps): update github.com/godbus/dbus/v5 digest to c266b19 5bbfed2dc1 Cover Unix socket in inpect test on Windows platform 48ae52c08b Add a test for forcing compression and v2s2 format 9de7e07e56 fix(deps): update module github.com/crc-org/vfkit to v0.6.0 9475ea8fb9 Package podman-machine on supported architectures only. 156fc084a9 Fixes missing binary in systemd. 6673f5c202 stats: ignore errors from containers without cgroups 1fa27ffb62 api: Error checking before NULL dereference 4ef773d69e [skip-ci] Packit/copr: switch to fedora-all 2f1a1fb6f3 make remotesystem: fail early if serial tests fail 4b38294e92 spec: clamp rlimits without CAP_SYS_RESOURCE 6f85808707 Clarify the reason for skip_if_remote 39e08c3ffa Sanity-check that the test is really using partial pulls 5ff496ea2b Fix apparent typos in zstd:chunked tests 7f6a203558 Fix compilation issues in QEMU machine files (Windows platform) e66b788a51 Mount volumes before copying into a container 44b0c24ca5 Revert "libpod: remove shutdown.Unregister()" e608874004 docs: improve documentation for internal networks 697c4181d2 docs: document bridge mode option 415d762475 [skip-ci] Packit: remove epel and re-enable c9s e5ed7847c1 chore(deps): update dependency golangci/golangci-lint to v1.62.2 e16f14a44d vendor: update containers/common ef565b76f2 OWNERS: remove edsantiago c2dcfca4ca fix(deps): update module github.com/onsi/gomega to v1.36.0 506fec1fa9 fix(deps): update github.com/containers/common digest to ceceb40 e4e7bc41f3 refact: EventerType and improve consistency 4f7395f93a Add --hosts-file flag to container and pod commands dc564257a2 Add nohosts option to /build and /libpod/build 936461e3c2 fix(deps): update module github.com/stretchr/testify to v1.10.0 13affe96d6 Quadlet - Use = sign when setting the pull arg for build 916b805f97 win-installer test: revert to v5.3.0 5f907e4850 fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0 34d63459ba fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0 3096681ce3 chore(deps): update dependency setuptools to ~=75.6.0 07aaa7832a Update windows installer tests 7162c58ba2 Windows: don't install WSL/HyperV on update c6549fc25b Switch to non-installing WSL by default 28305685f6 fix(deps): update github.com/containers/buildah digest to 52437ef a1249425bd Configure HealthCheck with `podman update` 97ed067d1a CI: --image-volume test: robustify e6e9d2c21c docs: add 5.3 as Reference version 926b31e053 Bump CI VMs e60e11167e libpod: pass down NoPivotRoot to Buildah d59794992f vendor: bump containers/buildah cf2ef12664 fix(deps): update module github.com/opencontainers/runc to v1.2.2 61b57b7d7d Overlay mounts supersede image volumes & volumes-from d513973237 libpod: addHosts() prevent nil deref 71f1f52894 only read ssh_config for non machine connections cbb2820a7e ssh_config: allow IdentityFile file with tilde a7120b50b1 ssh_config: do not overwrite values from config file 8a5ec2c505 connection: ignore errors when parsing ssh_config 7b41e28b95 Bump bundled krunkit to 0.1.4 2e22ab3bcd fix(deps): update module google.golang.org/protobuf to v1.35.2 315e7412e8 add support for driver-specific options during container creation 6809bf1d90 doc: fix words repetitions d2d2e4a605 Update release notes on main for v5.3.0 590fcafc2b chore(deps): update dependency setuptools to ~=75.5.0 1c77ee6fc5 CI: system tests: parallelize 010 34a15ae300 fix podman machine init --ignition-path 3e47e0bc8c vendor: update containers/common 0a69aefa41 spec: clamp rlimits in a userns 8a192c8403 Add subpath support to volumes in `--mount` option da6404ba16 refactor: simplify LinuxNS type definition and String method 0a1363d8eb test/e2e: remove FIPS test 42e8322532 vendor containers projects to tagged versions fa335f99e0 fix(deps): update module github.com/moby/sys/capability to v0.4.0 ca7703643b chore(deps): update dependency setuptools to ~=75.4.0 969417711d system tests: safer install_kube_template() 33398ebc1e Buildah treadmill tweaks 9eca92d625 update golangci-lint to v1.62.0 8d8b98b64d fix(deps): update module golang.org/x/net to v0.31.0 e1a6c53909 fix(deps): update module golang.org/x/tools to v0.27.0 e39ddde709 Revert "Reapply "CI: test nftables driver on fedora"" b5c9fe948c Yet another bump, f41 with fixed kernel 30a82cad7a test: add zstd:chunked system tests 40534d352e pkg/machine/e2e: remove dead code e1fe4b4b95 fix(deps): update module golang.org/x/crypto to v0.29.0 fbbfd07463 kube SIGINT system test: fix race in timeout handling b20960b860 New `system connection add` tests 62c9627d7a Update codespell to v2.3.0 cbf1d7fcae Avoid printing PR text to stdout in system test d49497ce6c Exclude symlink from pre-commit end-of-file-fixer 9f5bbecb95 api: Add error check 1b74ab5a85 [CI:ALL] Bump main to v5.4.0-dev 22152a2f9c test/buildah-bud: build new inet helper fb3a0e93a8 test/system: add regression test for TZDIR local issue f6af35c695 vendor latest c/{buildah,common,image,storage} 0e66a793bc Reapply "CI: test nftables driver on fedora" d770069062 Revert "cirrus: test only on f40/rawhide" ba5ce49c10 test f41 VMs 6346a11b09 AdditionalSupport for SubPath volume mounts 4e8d2dd726 wsl-e2e: Add a test to ensure port 2222 is free with usermode networking 6cf3cb1bfc winmake.ps1: Fix the syntax of the function call Win-SSHProxy 9a0c0b2eef volume ls: fix race that caused it to fail 9cb80d1856 gvproxy: Disable port-forwarding on WSL 52caa0fbb9 build: update gvisor-tap-vsock to 0.8.0 c23d9c6f23 Log network creation and removal events in Podman c05987ddd3 api: Replace close function in condition body Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: update to v1.14.1Bruce Ashfield2025-03-242-194/+262
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Creates updated with: bitbake -c update_crates netavark Bumping netavark to version v1.14.1-1-g0d623ce, which comprises the following commits: 8711e83 Release v1.14.1 0b7cbc5 Release notes for v1.14.0 389d8d9 Fix detect of Firewalld's StrictForwardPorts property 6267803 test/001-basic: Make commit test optional 99bd7d7 cirrus: do not build debug bins ce947ad Makefile: do not rebuild if nothing changed 1e5dc1c Makefile: uninstall netavark-firewalld-reload.service 3b5bf92 docs/Makefile: several fixes c4c37ca Makefile: build docs by default 26baf2c Makefile: do not build twice 2af9044 Release v1.14.0 c38577b release notes for v1.14.0 b086c4e update release notes from v1.13.1 35a0efb run cargo update 4fea4c0 Finalize firewalld port forwarding support 6b4ecbd chore(deps): update rust crate once_cell to 1.20.3 6f0bc1d fix(deps): update rust crate rand to 0.9.0 6e5de55 Add handling for firewalld's StrictForwardPorts setting fd8e99b fix lint issues wirh rust 1.84 bb17a6d chore(deps): update dependency containers/automation_images to v20250131 3cd3d9e chore(deps): update rust crate tempfile to 3.16.0 f57ae66 rename macvlan_dhcp.rs to dhcp.rs 58bb08d bridge: only allow dhcp with unmanaged mode a75c979 bridge: support DHCP ipam driver a47b5df fix(deps): update rust crate ipnet to 2.11.0 a03cdd9 fix(deps): update rust crate serde_json to 1.0.136 b4ccb6c fix(deps): update rust crate log to 0.4.24 7562017 bridge: add vlan support cb250d4 fix(deps): update rust crate tokio to 1.43.0 7d9edf9 fix(deps): update rust crate serde_json to 1.0.135 5789f67 New VM Images eb49d9a fix(deps): update rust crate clap to ~4.5.23 d67e98a chore(deps): update rust crate tempfile to 3.15.0 854b8bf fix(deps): update rust crate nispor to 1.2.22 2c759c5 fix(deps): update rust crate serde_json to 1.0.134 732cc05 fix(deps): update rust crate env_logger to 0.11.6 2bf9cfd Add container hostname to DHCP requests and use container id as client id bbc5f95 fix(deps): update rust crate mozim to 0.2.5 6217c49 generate protobuf in OUT_DIR d0d999b fix(deps): update rust crate tower to 0.5.2 795a36b Cargo.lock: bump some versions a2ec8cc run cargo update cbfe8fe cargo: set rust-version 6453c23 fix new rust 1.83 lint errors 62f4570 OWNERS: remove edsantiago 73e9911 setup: on av errors cleanup again 5861afa nftables: add daddr match to port forward jump rule 2900e92 network: bridge: don't change forwarding sysctl for internal bridges 4dae6d0 network: bridge: add support for unmanaged mode 71d8a5a test-dhcp: remove deprecated ifconfig/brctl commands 55a0f25 fix new rust 1.82 lint errors 8892b7f update ci images ceb113f fix(deps): update rust crate serde_json to 1.0.133 dc99b01 network: bridge: add support for host_interface_name option 818a19f network: add support for network-specific options a9dcf42 fix(deps): update rust crate ipnet to 2.10.1 b41f6f5 chore(deps): update rust crate tempfile to 3.14.0 31c32a9 fix(deps): update rust crate tokio to 1.41.1 e2cb0bd fix(deps): update rust crate anyhow to 1.0.93 1fca9f9 fix(deps): update rust crate url to 2.5.3 7dea7fb [skip-ci] RPM: cleanup changelog conditionals 8425b8e fix(deps): update rust crate anyhow to 1.0.92 1d75d62 Bump to 1.14.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* scripts/oe-go-mod-autogen: verbosely log exceptions and continue processingBruce Ashfield2025-03-241-7/+15
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Reapply "k8s: WIP [needs newer go]: not for merge: update to -tip"Bruce Ashfield2025-03-131-5/+5
| | | | | | | | We now have a new enough go in OEcore to enable this update. This reverts commit 3ec3b0605053ca2cb922ed426c9db3b25535604b. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: enable docker.service by defaultBruce Ashfield2025-03-131-1/+1
| | | | | | | | | | | | Some platforms are seeing long (2+ minute) start times to get the docker daemon initialized. This doesn't happen when the daemon is started on boot. To avoid this usability issue, we enable both the socket and service automatically. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: fixup SRCREV and modules.txtBruce Ashfield2025-03-132-486/+4164
| | | | | | | | | The revert of the pending upgrade (that was waiting for a newer go) did not build as the upgrade was incomplete. Bumping the SCREV and modules.txt to complete the process. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Reapply "k3s: WIP: [needs newer go]: not for merge: upgrade"Bruce Ashfield2025-03-134-539/+517
| | | | This reverts commit fd1d4c65e4103141921ab66cf44d20f759be9b80.
* aardvark-dns: update to v1.14.0Bruce Ashfield2025-03-112-223/+245
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping aardvark-dns to version v1.14.0-21-g7fa18ef, which comprises the following commits: 423ee20 Release v1.14.0 a09156c release notes for v1.14.0 6902a23 update release notes from v1.13.1 e59135d run cargo update b053576 fix lint issues with rust 1.84 9c94509 chore(deps): update dependency containers/automation_images to v20250131 b2405f6 fix(deps): update rust crate clap to ~4.5.28 25dee01 fix(deps): update rust crate log to 0.4.25 4cdab7c fix(deps): update rust crate tokio to 1.43.0 d49caa6 chore(deps): update dependency containers/automation_images to v20250107 8dc485e fix(deps): update rust crate clap to ~4.5.23 e66de45 fix(deps): update rust crate libc to 0.2.169 1fdd24c fix(deps): update hickory-dns monorepo to 0.24.2 d5e7a2f Cargo.lock: bump some versions eb938db run cargo update 7e7b7db cargo: set rust-version 24a0302 fix(deps): update rust crate clap to ~4.5.21 234a634 fix(deps): update rust crate libc to 0.2.167 2714706 OWNERS: remove edsantiago ba26b80 fix(deps): update rust crate libc to 0.2.165 3a87b98 fix(deps): update rust crate libc to 0.2.164 99938cd chore(deps): update dependency containers/automation_images to v20241107 11fcad7 fix(deps): update rust crate tokio to 1.41.1 d11cd29 fix(deps): update rust crate libc to 0.2.162 9842cb4 test: make jq query work on centos stream 9 db71833 [skip-ci] Packit: disable osh-diff-scan de9890d support ipv6 link local addresses in resolv.conf 1f26559 [skip-ci] Packit: enable c9s downstream updates 82c1697 [skip-ci] TMT: install builddeps downstream 2d5462c [skip-ci] RPM: cleanup changelog conditionals 59d5622 [skip-ci] Packit/TMT: idiomatic repo addition 02c7213 [skip-ci] Packit: Remove epel jobs 15c8e62 tmt: install dnsmasq dependency 319d871 Bump to 1.14.0-dev 8bb4806 Release v1.13.0 685b132 Update release notes for 1.13.0 e6ce710 test: use dnsmasq over slirp4netns 5db65bd coredns: forward names with no ndots as well 7e77a8d run cargo update e002654 fix(deps): update rust crate tokio to 1.41.0 8e6a556 fix(deps): update rust crate flume to 0.11.1 9955080 fix(deps): update rust crate libc to 0.2.161 894e5b0 fix(deps): update rust crate libc to 0.2.160 9440643 fix(deps): update rust crate clap to ~4.5.20 ce0d57d cirrus: check for msrv build b57674c define a MSRV policy 1da4b9a chore(deps): update dependency containers/automation_images to v20241010 7dbedb8 [skip-ci] Packit: constrain koji job to the fedora package 246657a dns: limit to 3 resolvers and use better timeout for them 94a210d OWNERS file audit and update fb501cf fix new lint error with rust 1.81 2900aea test: make them pass on RHEL/Centos Stream 9 6b7741f Packit: disable F39 and separate out ELN 22293ef serve: parse resolv.conf ourselves e9120c7 fix(deps): update rust crate libc to 0.2.159 5a21a4e coredns: allow host lookup of names fc08648 backend: return simple Vector in lookup() edbe4e9 coredns: use a TTL of 0 for our names 6ec9581 coredns: do not clonse the Record 5b79e12 netavark_cache_groom.sh: fix wrong branch 4f3d45c Packit: add sidetag to release with netavark 39d0043 coredns: work on tcp requests concurrently 6d76c50 tcp: add timeout to connection 16c85e4 fix(deps): update rust crate tokio to 1.40.0 6503cae fix(deps): update rust crate libc to 0.2.158 8e6021a chore(deps): update dependency containers/automation_images to v20240821 65e069c fix(deps): update rust crate tokio to 1.39.3 bd49d09 fix(deps): update rust crate libc to 0.2.156 bc93f61 Bump main version back to v1.13.0-dev 95aeb56 Release v1.12.1 e6847a3 Updated release notes for 1.12.1 9e4562b Change av cargo categories a74d9ea Bump to 1.13.0-dev 8cfe0a6 Release 1.12.0 a7ceaf5 Release notes for 1.12 6bb82d6 config: ignore enoent errors while reading configs 6989e0f run cargo update cc25b2f update upsteam resolvers on each refresh c24de46 fix(deps): update rust crate syslog to v7 8326739 fix(deps): update rust crate tokio to 1.39.2 7a5e6e7 add tcp support for forwarding a3ffae3 add tcp listening support aa4ee01 test: add new test to check for startup error 8575b7e return bind error to caller on first start 6416ca4 add our own error type and use it over anyhow 0e239cd server: use anyhow to wrap parse_configs error 1bb0a28 server: split out main loop into new function 5e635c8 main: remove aardvark-dns error prefix 7049573 coredns: remove unnecessary try_join! call 667e5db coredns: drop pointless name var 0691689 serve: read nameservers once 48fcdee replace signal-hook with tokio::signal 48754fa serve: fix broken error logging 6f6e5a6 server: improve parent <-> child error handling ef2dcc2 add some basic perf check script 1c08966 fix(deps): update rust crate tokio to 1.39.0 67fccab coredns: create reply_ip() function 922db0f coredns: match dns type explicitly 224756d server: use only one tokio runtime 867570e coredns: improve indentation for process_message() 7b5301a coredns: move upstream resolvers detection later 96784c3 coredns: do not clone sender 6039c8f read AARDVARK_NO_PROXY once 78e0c0e coredns: move main code out of select! 80e48df coredns: fix "name" naming bcc5195 coredns: remove unused forward_addr/port 7d1677f coredns: fix handling of dns search domain b6773a9 coredns: rework PTR lookup flow 2a062e0 fix(deps): update rust crate tokio to 1.38.1 b731153 [skip-ci] TMT: Reorg upstream tests for downstream reusability 003123d [skip-ci] Packit: use `packages: [aardvark-dns-fedora]` for podman-next builds Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: drop SRCREV_FORMATChen Qi2025-03-111-3/+1
| | | | | | | | The source comes from one repo, there's no need to use SRCREV_FORMAT any more. So drop it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-core: WORKDIR -> UNPACKDIR transitionChangqing Li2025-03-111-3/+3
| | | | | | | | | | | | This adapts to the oe-core rework to enforce a separate directory for unpacking local sources (UNPACKDIR) instead of directly using WORKDIR. Follows the preliminary guideline from: https://lists.openembedded.org/g/openembedded-architecture/message/2007 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to v1.32.2Bruce Ashfield2025-03-111-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.32.2, which comprises the following commits: e37e198e8 version: bump to 1.32.2 e681a34c8 go.{mod,sum}: bump CDI deps to v0.8.1. 85214c31b vendor: bump go-jose to 4.0.5 47566d01d Fix context cancellation when image pull progress timeout is `0` 1b98ce087 test: add test coverage for LinkLogs malicious paths d4a9f6bae internal/linklogs: sanitize the directory path before using it f168b6b39 version: bump to 1.32.1 5c8f66f8f Bump containers/storage 99ca98117 Avoid using UpdateContainerStatus for ReopenContainerLog and add logs tests 612f43a6d watchdog: decouple CNI plugin initialization from CRI-O health checks fffe6270d Cherry-pick changes from containers/image project 890c75c93 Cherry-pick changes from containers/storage project b57566b9c Update containernetworking/plugins Go package release to v1.6.2 6e44ed6d7 server: fix panic when default annotations are specified 0daeb208f Refactor man page variables in Makefile. a103688e7 config: add default_annotations 533b7d5e2 build(deps): bump actions/upload-artifact in the actions group d80af0f80 build(deps): bump crate-ci/typos in the actions group 986b386fc maintainers: promote Sohan and Krzysztof to approvers 10621f089 Update NRI to v0.9.0 34003b146 build(deps): bump the actions group across 1 directory with 2 updates 4409a15f6 Refactoring factory/container to remove references of snadbox 3576d0822 Update mocks b7d4c78d0 build(deps): bump the gomod group across 1 directory with 37 updates ea7cdad90 Require go 1.23 for build c5bdce024 Update golangci-lint to v1.62.2 and config 31b86eb6b Remove old golang build tags a5320071d Update nixpkgs c1a7989d9 build(deps): bump the actions group with 2 updates 08b9acb9a Don't pass seccomp section when it's disabled a89b991bd Don't start seccomp notifier watcher when seccomp is disabled d4a0b860e Update cni-plugins to v1.6.1 33dbcc12b Add systemd watchdog support 698025097 Update sandbox_run_linux.go 2329bd698 Update container_create.go 197f98bb8 Always clear env even when `monitor_env` is unset 634c733df Update sandbox_run_linux.go f448fea40 Update container_create.go a64119adf build(deps): bump crate-ci/typos in the actions group 80aa12b19 Use `monitor_env` for calling the OCI runtime 7de043007 Update sandbox_run_linux.go cad07030e Update container_create.go 7e48c71d6 build(deps): bump crate-ci/typos in the actions group 7c3290dea Allow to remove pod sandbox on netns removal 608c89e9c Fix container restore lint report 84ac370c9 build(deps): bump crate-ci/typos in the actions group 29a0b9429 Fix NRI CLI flags e5bddc646 Call network plugin GC on startup 7a29433e7 build(deps): bump codecov/codecov-action in the actions group 44429579c build(deps): bump codecov/codecov-action in the actions group 6ca411a93 RuntimeHandler inheritance bug-fix 72fa20e93 build(deps): bump codecov/codecov-action in the actions group 02e5817d2 Add `--pull-progress-timeout` / `pull_progress_timeout` option 8b8be22a7 Use `slices.Equal` instead of custom implementation 19ac18b4e Update golangci-lint to v1.62.0 4d79d6b75 build(deps): bump the actions group with 2 updates 76049febe RuntimeHandler inheritance e4bd1caee refactor cert 19efac249 vendor cni 0.4.3 426244c73 Make dual-stack hostport test reuse same test data as single-stack tests f812c5aae Update and fix nix packages 8462bc745 remove validation for TLSCA. 50fbdcc01 Further hostport unit test cleanup 7ea8faf1a Fix ids/IPs in hostport manager test cases 74598c4cd Improve HostPortManager unit tests checking 0ff4e7cc3 Split hostport test case data out of the actual test functions f62645f93 build(deps): bump crate-ci/typos in the actions group ee6d71d09 Use google.golang.org/protobuf instead of gogo 680efef80 build(deps): bump crate-ci/typos in the actions group 0470ab6ed Validate stream server TLS config on startup 429ef7c36 Only restore container if all bind mounts are defined f552e82b0 Convert `interface{}` to `any` 87d6b6076 Fix `typos` in CI 2c015a3ac Remove dead code in HostportManager 9c008e890 expose Pod assigned IPs to NRI plugins bf1c47b50 bump nri version to get PodIPs 595557cb8 build(deps): bump crate-ci/typos in the actions group f7116fbe5 build(deps): bump the actions group with 2 updates 30f48c5ba Disable actuated runners 30a262354 Move interceptors and metrics collector packages f50d181a1 Use context for logging in server d4c613d39 Switch to golang native context 20bc86cde Remove unused server metrics interceptor 09ac8a590 Centralize handling of CreateContainerRequest.PodSandboxId cdd37ebe4 Remove the option to load a sandbox ID from the snapshot image 431f66a9a Fail in CRImportCheckpoint earlier if we should be enforcing signatures 8031b6270 Consistently use someNameOf{The,This}Image for that kind of value 4302e0a63 go.{mod,sum}: update NRI deps and re-vendor. 28069c8f2 build(deps): bump crate-ci/typos in the actions group 48d45ccf5 build(deps): bump the actions group with 3 updates b6e9d6d68 Add `crio status heap` and `/debug/heap` endpoint a2e62f24d nix: don't build gpgme with `--enable-fixed-path` b13e45f4b pass cliContext instead of creating a new one 0d68102f8 Remove the first return value of PullImage 06993f4ba After pulling the pause image, use the canonical reference to look it up 4c164f5e3 Add a warning about assuming per-namespace policies are stricter b56ddca32 Add a comment warning against repeated lookups 3f9b09e44 Consistently use the UserRequestedImage for the lookup input fffc734c8 Simplify BROKEN pullImageOutputItem 0b184e47e Return a RegistryImageReference instead of reference.Canonical from PullImage a2e29ba09 Better document, and sometimes rename, parameters and return values c91de5884 Add a comment about possible future handling of complex situations. 899266bb2 Inline prepareReference into its only caller ca1b55010 Remove no longer used code 14f4c6482 Fix build on macOS d0a64e27b build(deps): bump crate-ci/typos in the actions group b280cb565 vendor: bump runc to v.1.2.0 722f70ca3 utils: use moby/sys/user 1b7a8dfd2 internal/dbusmgr: use moby/sys/userns 2665ada11 crio status: add `goroutines` subcommand dcc2a7587 build(deps): bump actions/cache from 4.1.1 to 4.1.2 in the actions group fbbc7bfd5 Refactor memory stores to use generics 3ef549868 Simplify container stop in sandbox 9e01a99ed Remove `skip_pod_runtime` build tag 83ba7fe9b Update zeitgeist to v0.5.4 509de1aba ci: bump cri-o spec version to be higher than any cri-o version running 82fe372c1 Update gomock to v0.5.0 a271b4a79 seccomp_unsupported.go: Fix lint issues 7849e3efc Re-allow building without seccomp installed 2a42045ad Use context timeout/deadline for container stop d1e817f14 Refactor sandbox label usage 937d24316 Refactoring factory/container to remove references of snadbox ba13b2bac upgrade runc to v.1.1.15 9254b36d5 Re-enable exit code matching in restore test d93ce4cc7 build(deps): bump actions/upload-artifact in the actions group a5ee1950a build(deps): bump the actions group with 2 updates 589720f14 contrib/test: avoid running setup tasks twice a7c46dd67 build(deps): bump the actions group across 1 directory with 8 updates 098ae5d66 Use `SignatureValidationFailed` CRI error for invalid signatures 69b4635b0 Mark `release-1.28` as EOL 5a1d62f8f Update nixpkgs d688986db build(deps): bump github.com/containers/common from 0.60.2 to 0.60.4 6a6f57011 config: fix validation of allowed annotations 236d336fb config: pass down PullOptions from the storage configuration eda8023ff test: fix empty pinned_images test c02f9bb21 tests: improve wait_for_log to allow multiple calls for the same message ddb79873d build(deps): bump peter-evans/create-pull-request in the actions group adf2ca5f4 Don't rely on vendored tools 44def2c87 build(deps): bump the actions group across 1 directory with 2 updates dea93eeb8 Bump release-notes to v0.17.8 4a2d29e65 image: serialize RegistryImageReferences when checking signatures c7a819d3e Update golangci-lint to v1.61.0 dc087b219 Update nixpkgs f030d3596 Update release and branching versions a73311497 build(deps): bump the actions group across 1 directory with 3 updates 333530298 Use go 1.23 for nix (static) builds 915393f96 Switch to `RFC3339Nano` log format d85ae5293 Make unit tests independent from third party binaries 8b2872139 Use nanosecond timestamp for evented pleg pod status 9910c39e1 Pin govulncheck to specific version to match Go version requirements 44e0241f8 Enable more crun integration tests 66c010968 refactoring: get some spec generation code out of createSandboxContainer() 0418b5d5c cleanup: refactoring createSandboxContainers() b0b584ac8 refactoring: create a container.SpecSetLinuxContainerResources() function 8ec1805e6 refactoring: create a container.SpecSetPrivileges() function Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: update to v2.33.1Bruce Ashfield2025-03-114-793/+1729
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.26.1-364-geaf980094, which comprises the following commits: eaf980094 build(deps): bump github.com/opencontainers/image-spec 4c2ecb542 reject compose file with bind mounts bcd000ab4 refuse to publish compose file with local include 8092ce941 build(deps): bump github.com/docker/buildx from 0.21.1 to 0.21.2 97595066e build(deps): bump github.com/docker/docker 508309414 build(deps): bump github.com/docker/cli b6c8a2b9f display the location of OCI or GIT Compose stack download 19571c2c8 e2e test for watch.include 0ef7bbcdd introduce watch.include 66dfa7d18 block the publication of an OCI artifact if one or more services contain only a build section 876ecc48b Test version command c7bf302c2 wrap builder execution within a project/build span 7b3bdbe03 otel attribute to track builder implementation selected 094b48fd7 build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 43c52e2a8 build(deps): bump tags.cncf.io/container-device-interface 6c1ee1069 support refresh pull policy e38b729a3 fix service: additional_contexts running internal buildkit client 145bb8466 Update yaml docs acac18413 Link to configuration file docs 3292740c1 build: only print COMPOSE_BAKE recommendation when disabled cae8e8463 require go 1.23|1.24 (stable) da2eff4ba add support for gw_priority, enable_ipv4 (requires docker v28.0) 20f780e95 make the mocks generator happy cf2fc2005 go.mod: docker/docker, docker/cli v28.0.0, buildx v0.21.1 d0398a468 go.mod: github.com/moby/buildkit v0.20.0 ac40aae4c go.mod: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f f25fea5e6 pkg/compose: stopDependentContainers: rename var that shadowed b27f56eb1 fix error message when detach is implied by wait 4e593ed07 Fix pull --parallel and --no-parallel deprecation warnings missing d956ff13d don't display bake suggestion when using --progress with quiet or json option 5f7c9a2b4 report error using non-file secret|config with read-only service fd0c23a1c build(deps): bump google.golang.org/grpc from 1.68.1 to 1.70.0 7aa64ae9c run watch standalone if menu fails to start c23eea934 build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 036da4795 go.mod: remove toolchain directive 33172d5e4 let user know bake is now supported 3f1a6b72a build(deps): bump gotest.tools/v3 from 3.5.1 to 3.5.2 f9a6e6c41 build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 18ef6e592 build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 2884d6df0 Fix ls --quiet help description 4459012a4 Dockerfile: update golangci-lint to v1.63.4 6f1f76c0e pkg/e2e: fix contains: use assert.Contains (testifylint) ed72c2187 use BlockUntilContext fa4cfb652 build(deps): bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 200638b02 build(deps): bump github.com/otiai10/copy from 1.14.0 to 1.14.1 a0320f12e build(deps): bump golang.org/x/sys from 0.28.0 to 0.30.0 f8a912ab9 bump compose-go v2.4.8 c23a7e728 golangci-lint: enable copyloopvar linter 49575ef49 gha: add docker engine v28.x to the test-matrix faa46d374 go.mod: github.com/moby/term v0.5.2 6ecb8d40a Full test coverage for convert compatibility cmd a6a39422e remove cli.args opentelemetry attribute 40cd08f31 Update link in stats --help output 5e2abb6c2 support additional_context reference to another service 4db5fcd56 fix bake uses selected builder f14c15fa5 capture error message reported by bake and forward to compose 8d68ef587 fix exporter to only load image for default platform cde9ae595 pass --allow for filesystem read access 806ac91cf add warning when trying to publish env variables with OCI artifact 1c073c0a0 watch should ony build selected services 840288895 add --with-env flag to publish command this flag allow publishing env variables in the Compose OCI artifact 4b70ff0cc fix support for ssh key from CLI flags 23351ece8 remove exit code per error type used by legacy metrics system 7c7407672 bump docker to v27.5.1 25cfa66a9 bump buildx v0.20.1 and docker v27.5.0 f160333e9 ci: use main branch for docs upstream validation workflow d04b3f48e e2e test covering multi-service rebuild with common resources ed10804e0 manage `watch` applied to mulitple services 52578c099 Properly handle "builtin" seccomp profile bd2b49a1c add codeowners file 433a60e12 ci: fix provenance for binaries and generate sbom 489fe9cf0 add support for BUILDKIT_PROGRESS ef1931c8d add missing tag for build during merge workflow 9be7a3c9a ci: re-use local source to build binary images 666996bee ci: use local source for binary builds 083f67621 ci: update bake-action to v6 e81de103d simplification fa3950346 image can be set to a local ID, that isn't a valid docker ref a35158502 can't render progress concurrently with buildkit b6db1380e exclude one-off container running convergence 2ebb47543 Only override service mac if set on the main network. d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26 2b21c5df9 fix relative path in compose file 1f3c10eb4 bump compose-go to v2.4.7 68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token 3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906 be09b2e8c checkExpectedVolumes must ignore anonymous volumes 571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name 8f644eea7 only check bind mount conflict if sync action is involved 56e92e34b use the 3 latest major versions of the engine to run e2e step a42a04dfe bump Golang version to v1.22.10 and update CI actions 34bcd03a7 add --pull to run command ed61e42f9 CI to validate fmt 65696bb1c `make fmt` so any contributor can enforce formatting 446e00520 format code with gofumpt c01c9c29f e2e test to prevent future regression 038c81f34 only check volume mounts for updated config a20b69ac5 e2e test for recreate volume 977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 8e0520e71 prompt user to confirm volume recreation 332311358 Recreate container on volume configuration change df9e420dd introduce watch restart action 142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions 700c586bc bump docker/buildx to latest release fc566509d fix support for service.mac_address e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ 624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 a1729c52d Update pkg/e2e/watch_test.go 254224c18 first watch action for a file event wins 0861e6845 fix af5b74850 revisit TestDebounceBatching 32a22c1f4 introduce sync+exec watch action e6ea8fb96 log configuration error as a watch log event 043465448 do not require a build section but for `rebuild` action 1d0839086 pull --quiet should not drop status message, only progress 69a83d130 use latest engine tags 781b9f1cd Bump buildx to 0.19.1 cbff0e555 be sure everything has been cleanup at the end of each tests e4222bff5 add local config.json to test configuration dir if exists 25197fe6d disable failing TestBuildSSH test 85cdaf9dd fix build with bake a8469db83 bump containerd to v1.7,24 08488dae5 bump google.golang.org/grpc to v1.68.0 cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2 6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2 6b3e57503 only stop dependent containers ... if there's some 8e497a128 disable TestNetworkConfigChanged which is unstable on CI 5aed70437 only check attached networks on running containers 1ff9b758d fix: commit tests 9eaba5597 feat: add commit command a85f8a40a run build tests against bake 095f65cb4 delegate build to buildx bake 208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 2d148faed use service.stop to stop dependent containers 43ac1e31c Update wait-timeout flag usage to include the unit 5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2 ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2 5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev) a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1 3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1 d4fa63fdc Update pkg/compose/convergence.go c21d4cfb4 detect network config changes and recreate if needed 61f1d4f69 go.mod: github.com/docker/buildx v0.18.0 f7cce281d go.mod: github.com/moby/buildkit v0.17.1 bcaacc7f2 gha: test against docker engine v27.4.0 3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub 2bb67f270 remove ddev e2e tests bf521fe3a implement remove-orphans on run 11e9621da ci: enable testifylint linter a9de9abcf Emit events for building images 799ab842a Fix compose images that reutn a different image with the same ID 2f65ace2a remove obsolete containers first on scale down aa0a4189e pass stal bot inactivity limit from 6 to 3 months eba3ff8f3 fix(config): Print service names with --no-interpolate 6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 a8bfbc147 bump compose-go v2.4.4 fbbd6f83d Avoid starting all services on rebuild a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact 361c0893a build(deps): bump github.com/compose-spec/compose-go/v2 513b6128c Service being declared in a profile must not trigger re-creation eececb9ad Add profile e2e test case to document in compose 501b5acde Update `MAINTAINERS` file f51bc4cd0 bump compose-go to version v2.4.2 517f87a37 bump google.golang.org/grpc to v1.67.1 718049cbd bump go.uber.org/mock to v0.5.0 02371f312 bump golang minimal version to 1.22 in go.mod a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23 51ebeb544 introduce generate command as alpha command fafaa9c5b bump compose-go to version v2.4.1 fc9c3cde0 Add license header to dockerignore_test.go 73bfbab54 fix 2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go eeea049f1 push: Fix error message typo 26064d4b6 allow usage of -f flag with oci Compose artifact 7c46beb8a resurrect --all flag for cp to target oneoff container aa1ec4524 connect to external networks by name a4ee6ca7a don't warn about uid/gid not being supported while ... they are 5617eff0c bump compose-go to v2.4.0 fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command 0aad9595a don't use progress to render restart, which hides logs 813900180 compose-go clean volume target to avoid ambiguous comparisons 82417bd5b add support for bind.recursive 0cbb73c02 Improve error message to include expected network label 38e3d670a desktop: allow this client to be identified via user-agent 24c78728e bump compose-go to v2.3.0 9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability 8da82c98e gha: set default permissions to "contents: read" 1a8c85548 Add security policy 15bd0b0c5 add support for raw env_file format 39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 3a95a0872 add support for CDI device request using `devices` f794c79eb Support Dockerfile-specific ignore-file with watch 407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav 82b41b9eb introduce service hooks 6c06170eb pass device.options to engine 60c1311f6 chore: remove errors depricated pkg 17add87e4 fix: validate-go-mod bf0418bac fix: lint b9d0c77cd feat: add export command bdb854561 fix(convergence): Serialize access to observed state 41df35c1f Remove bind options when creating a volume type 3ef5045a0 Bump docker v27.3.1 d9df7aab6 fix(push): Fix unexpected EOF on alpha publish c9d96b449 use compose-go version fixing extra_hosts unicity issue 1744b4576 Show watch error message and open DD only when w is pressed 87f457e7d add tests to down.go abcc91e2b fix(down): Fix down command if specified services are not running 8b9fe8984 After container restart register printer consumer 34b18194f check secret source exists, as bind mount would create target as a folder otherwise ce27dba52 wait for dependent service up to delay set by --wait-timeout d2b945613 append unix-style relative path when computing container target path 9c60fe67d revert commits link to mount API over bind changes c16df17e1 don't set propagation if target engine isn't linux 20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2 f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2 cb00aaad2 set propagation default e885bc084 Remove custom codeql workflow 73d3a25eb fix import 3524bcfad chore(watch): Add debug log when skipping service without build context 1076f1d9a stop dependent containers before recreating diverged service 16652ed26 Fixed possible `nil` pointer dereference c6a76b9bd bump github.com/docker/buildx v0.17.1 3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1 86ef8e62c gha: test against docker engine v27.3.0 8bf0627ea show sync files only in debug level 2e1419168 chore(watch): Add changed files path/count to log 155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 8db0cba0a bump compose-go to version v2.2.0 a7424435b Restore compose v1 behavior to recreate containers when ran with -V d445ebba3 fix linting issues with golangci-lint 1.60.2 f592aad10 bump golang to version 1.22.7 ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0 150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0 524a97e55 Fix typos 1d608e033 Use logrus instead of direct output to stderr. 329ad7392 attach: close streams when done b633c5c3e Fix typo in pull.go e6ef8629a Allow combination of bind mounts and 'rebuild' watches d658fecc6 service hash must exlude depends_on f9c7a0cc0 prefer mount API over bind 6e172d6b8 docs: duplicate documentation for root cmd 98e261ba3 docs(wait): Fix wait command description 11c7a25ae allow to add empty line in the logs when nav menu activated 234036756 upgrade docker versions 9c03797f9 initial sync files that modified after image creation 485c0eba5 initial sync for root directory 69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go 1601ead7b docs: Update docker compose kill usage ea4ccf639 Fix stop on file chane for sync-restart action b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1 adba639e8 remove all dependabot update PRs for OTel dependencies d8518529c gp.mod: github.com/gofrs/flock v0.12.1 c79f15da9 go.mod: golang.org/x/sys v0.22.0 3f55382ff update to go1.21.12 44337d2bb Enhance JSON progress events with more fields. bc733508d bump compose-go v2.1.5 c422b5447 bump github.com/docker/cli v27.1.0 e74441c90 bump github.com/docker/docker v27.1.0 2bac32a46 bump github.com/containerd/containerd v1.7.20 f278400fb gha: add docker 27.1.0 4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers 06bf339a4 fix: typos 231ea1005 update docs generation to avoid man pages generation 46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0 d3d378b92 restore setEnvWithDotEnv 163cdfd31 empty env variable with no value must be unset in container 25f85938b exclude unnecessary resources after services have been selected cacbca859 change time for stale bot ecac13f27 Remove debug mode and run twice a week 14793cc2e Add stale workflow 11d5ecdc7 update docs 9549a213b feat(watch): Add --prune option to docker-compose watch command da434013e Remove COMPOSE_MENU env from e2e tests ace69c96a Use rawjson for the build backend. 2db04c1e4 Set logging format to JSON. 8f7cd0048 Format errors as JSON when in JSON progress mode. 5a6e1a7e2 Pass 'plain' instead of 'json' to build backend 06545d066 Add JSON stream progress writer 075fd9345 go.mod: docker/cli, docker/docker v27.0.3 d062ad739 gha: test against docker v27.0.3 7cd5209cc go.mod: docker/cli, docker/docker v27.0.2 f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out` Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: introduce 4.20 recipesBruce Ashfield2025-03-062-0/+40
| | | | | | | Introducing the 4.20 recipes as the newest reference version for the upcoming LTS. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update devel version to 4.21-devBruce Ashfield2025-03-062-5/+5
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: drop 4.18 recipesBruce Ashfield2025-03-063-86/+0
| | | | | | | The 4.18 series will go out of support in our next LTS window, so we drop it in favour of 4.19 and 4.20 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v28.0.1Bruce Ashfield2025-03-062-11/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v28.0.1, which comprises the following commits: 18143632f7 Revert "contrib/check-config: add ipset related flags" 558da63444 Jump to DOCKER-INGRESS from DOCKER-FORWARD 76417bf763 Don't use ipset c35159ed7d c8d/manifests: Fix Content size including missing content 468c2c814d Fix swarm network creation from a config-only network 8e6cc4ac48 Fix swarm net validation for config-from networks 8cc4d1d4a2 Fix daemon startup on a no-IPv6 host 341cafa611 Test with a drop rule appended to filter-FORWARD 984a610a21 Add chain DOCKER-FORWARD 21582b84fb c8d/list: Fix empty Manifests for some images 6b1b170708 c8d/inspect: Fix image not found error for index-only image 5ced8fd377 vendor: tags.cncf.io/container-device-interface v0.8.1 a92d20bcc4 Better error message for missing ip_set kernel modules 73f2a5336d libnet/d/bridge: fix compilation on i386 013c43fb56 Mark default-bridge-only opts in --help and manpage 3cf4ff971d Fix network inspect IPv6 gateway address format 501ce33bab Fix v28 regression `protocol "tcp" is not supported by the RootlessKit port driver "slirp4netns"` ccdfac5328 contrib/check-config: add ipset related flags ac8b4e3e75 daemon: handleContainerExit: ignore networking errors d67f035d31 vendor: github.com/moby/buildkit v0.20.0 1fde8c4615 builder-next: fix cdi manager cde9f0752e vendor: github.com/moby/buildkit v0.20.0-rc3 b2b55903d0 Dockerfile: fix linting warnings a3628f3f8e docs/api: add documentation for API v1.48 9eccc20a17 c8d/list: Fix panic when listing images 4e97729f14 c8d/list: Test with SharedSize = true 322eddfb41 api/swagger: remove custom example from /containers/{id}/json endpoint 60539d0956 api/swagger: remove custom example from /containers/json endpoint 119b52f302 golangci-lint: ignore "nested context" (fatcontext) in tests 15fbd67407 Dockerfile: update golangci-lint to v1.64.5 7b6c3ebe7b api/swagger: inline Exec example values 2fc90096bf project: update status of branches bd92f2bb92 daemon/logger/splunk: New(): combine switches for format validation eac39ffdb8 daemon/logger/splunk: remove some intermediate variables 9bb3900c30 daemon/logger: Info.ExtraAttributes: make env-var handling conditional cbbff10b01 daemon/logger: use consistent name for "extra attributes" ba559c4f12 daemon/logger/fluentd: fix minor (linting) issues b9e7e82b66 daemon/logger/splunk: plunkLogger.postMessages(): improve logs 2f82cbb5f8 daemon/logger/splunk: suppress some unhandled errors f049d0c66b daemon/logger/splunk: don't defer in a loop 0d938b6bb3 daemon/logger/splunk: rename var that shadowed import 529a56d31a container: Container.StopSignal: fix handling of invalid signals ef0fe1ac00 container: define defaultStopSignal as a syscall.Signal 0a4c4c9e82 container: some cleanups in view tests 49f2320bc7 container: some cleanups in tests 07aa4d96ea container: TestReplaceAndAppendEnvVars: assert with gotest.tools 0914e97df2 container: rename test file 9bcac6d573 c8d/progress: Fix panic when pulling some images acc4d45278 container: ensure image manifest is deep copied from the container into the snapshot 903ba2f487 client: Move opts to separate files b9319f64ed client: Change ImageSave to use functional options ae4c688fd8 client: Change ImageLoad to use functional options 85808a6abf client: Change ImageHistory to use functional options 5719e8edf9 Don't create iptables rules when iptables is disabled 068aa86c23 client: Group deprecated functions into ImageAPIClientDeprecated d1c6550f71 daemon: use structured logs for printing reloaded config, move to cli 838ae09a23 Dockerfile: update runc binary to v1.2.5 707d8d80b9 vendor: update buildkit to v0.20.0-rc2 c9f8758570 golangci-lint: enable reassign linter 04ae510a1e golangci-lint: enable gocheckcompilerdirectives linter 179e621019 golangci-lint: enable exhaustive linter 1f9ada6668 golangci-lint: enable errchkjson linter 8b2439a383 golangci-lint: enable durationcheck linter d62e499bfe golangci-lint: enable dogsled linter 75fc4de8c3 golangci-lint: enable asasalint linter 7218a64e87 golangci-lint: enable wastedassign linter 55b047e49c golangci-lint: enable fatcontext linter a97d6fe84f golangci-lint: enable nosprintfhostport linter (again) fc09a52d85 golangci-lint: enable spancheck linter a0ef452f0c golangci-lint: enable mirror linter 0de3c1b7e3 golangci-lint: enable makezero linter e6e68278f6 golangci-lint: enable iface linter (with default settings) c8ee8c6302 golangci-lint: enable nilnesserr linter 081fac187e golangci-lint: enable exptostd linter 927e07e46e API: add Platform (OS and Architecture) to /containers/json e364e28ec8 vendor: update buildkit to v0.20.0-rc1 d47eb241bf vendor: github.com/vishvananda/netlink 655392bc778a 47ff7969b4 Add experimental feature warning for image mount 3e51818c5c Add ability to return warnings from host config c5b226e377 vendor: github.com/miekg/dns v1.1.61 56a6383883 api: deprecation of "error" and "progress" fields in streaming responses e36fb45eec vendor: github.com/spf13/pflag v1.0.6 bd13fc37b0 pkg/jsonmessage: JSONMessage: fix deprecation of ProgressMessage, ErrorMessage 66910da5a3 vendor: github.com/containerd/go-cni v1.1.12 3d72df0e89 vendor: google.golang.org/grpc v1.69.4 72c91e378d client: remove serverResponse and use http.Response directly b99b5422b0 api/types: deprecate IDResponse 96dc9cb693 Don't log a warning when an IP address is already in an ipset b23b8f1567 Restore more iptables rules on firewalld reload 9a20edf7b6 api/types/container: introduce ExecCreateResponse type 0df3a0047a api/types/container: introduce CommitResponse type be1ac5d8e5 api/types/container: rename ContainerTopOKBody to TopResponse f4dc38cd36 api/types/container: rename ContainerUpdateOKBody to UpdateResponse 85ff36de26 Dockerfile: update docker CLI to v28.0.0-rc.1 cc6754f3fa Dockerfile: update buildx v0.20.1 b90a2bac7d Dockerfile: bump gotest.tools/gotestsum v1.12.0 c786cdf124 update authors and mailmap b4af9341af client: fix deprecation comment for ImageInspectWithRaw 6ba4e78066 vendor: gotest.tools/v3 v3.5.2 43532eb1e1 daemon: Daemon.Containers: make switches exhaustive (exhaustive) 10ebdbbb92 daemon: Daemon.ProcessEvent: make switches exhaustive (exhaustive) f448d5ae3b daemon/events: make switches exhaustive (exhaustive) d9cf097402 daemon/cluster/executor/container: make switches exhaustive (exhaustive) bf3b4d4986 daemon/cluster/convert: make switches exhaustive (exhaustive) 4d8dfc1409 daemon/cluster: make switches exhaustive (exhaustive) 6929a3fd22 libnetwork/networkdb: make switches exhaustive (exhaustive) 827f84d3ef volume/mounts: parseMountSpec: make switch exhaustive (exhaustive) 0ee343222b daemon: eventTimestamp: make switch exhaustive (exhaustive) b343d235a0 container: State.conditionAlreadyMet: make switch exhaustive (exhaustive) 8a35300b4a integration/internal/swarm: make switch excaustive (exhaustive) 66ab2e9e77 plugin/executor/containerd: Executor.ProcessEvent: make switch excaustive (exhaustive) 1a047bbe8b libnetwork: ignore unchecked json (Un)Marshal errors (errchkjson) 63deb55263 libnetwork/drivers/bridge: bridgeEndpoint.UnmarshalJSON: fix unhandled errors (errchkjson) ccbcce2169 daemon/logger/templates: ignore unchecked error (errchkjson) 32153dee9f daemon: Daemon.Reload: fix unhandled errors printing config (errchkjson) 664558f916 daemon/cluster/convert: tmpfsOptionsToGRPC: ignore unchecked error (errchkjson) 4a7f891fc3 integration/plugin: fix unhandled errors in tests (errchkjson) 196a66a643 integration-cli: fix unhandled errors in tests (errchkjson) 26d30159f7 libnetwork/driverapi: ignore unchecked error (for now) (errchkjson) b87c9fb3f4 libnetwork/diagnostic: ignore unchecked error (errchkjson) 7dbceec8aa api/server/router/volume: fix unhandled errors in tests (errchkjson) 07e2fc83ae pkg/plugins: fix "Multiplication of durations" (durationcheck) 1ffbcb566b pkg/jsonmessage: fix "Multiplication of durations" (durationcheck) eac45daf06 runconfig: fix declaration has 3 blank identifiers (dogsled) 09c5a01346 pks/plugins/pluginrpc-gen: fix unused value assign (wastedassign) a4dba91424 daemon/containerd: fix unused value assign (wastedassign) f1d7bd60ab integration/image: TestRemoveByDigest fixed unused values (wastedassign) 9f8eafc101 plugin: withFetchProgress work around "nested context in loop (fatcontext)" e9c90834fa opts: host:port should be constructed with net.JoinHostPort (nosprintfhostport) 0bf8c8b99e pkg/tailfile: avoid allocations with (*os.File).WriteString (mirror) 4e6c91cc56 pkg/pools: avoid allocations with (*bufio.Writer).WriteString (mirror) f0a233bdc3 pkg/archive: avoid allocations with strings.Compare (mirror) 17f32e8822 libnetwork/internal/resolvconf: avoid allocations with bytes.NewBufferString (mirror) 0c8d086ed3 libnetwork: avoid allocations with regexp.Match (mirror) 6ff3dfd88a integration-cli: avoid allocations with (*os.File).WriteString (mirror) 405ce2ef15 distribution/xfer: avoid allocations with bytes.NewBufferString (mirror) d50492a70d container/stream: avoid allocations with (*bytes.Buffer).WriteString (mirror) dbf2cdd06c integration/networking: fix append to non-zero initialized length (makezero) dd8ee9eeb1 libnetwork/cnmallocator: fix append to non-zero initialized length (makezero) 8e9fce7970 libnetwork/bitmap: fix append to non-zero initialized length (makezero) f9890d97d1 libnet: kvstore/boltdb: fix append to non-zero initialized length (makezero) 1f7d497a99 errdefs: remove duplicate "causer" interface definition (iface) 1784026740 client: custom trace options cab2157182 Dockerfile: update golangci-lint to v1.63.4 f34a1aafe9 vendor: cloud.google.com/go/compute/metadata v0.5.2 9c7112d118 daemon: configureMaxThreads: remove unused arg 9e77d05967 add //go:build directives to prevent downgrading to go1.16 language 192431cb35 pkg/idtools: un-deprecate Windows consts for now 5a703c2eda libnet/osl: scan ns ifaces to generate ifname 78b0475605 libnet/osl: AddInterface: un-alias props into local vars 56a7817b2d libnet: add support for custom interface names 6a8360012c libnet/osl: distinguish dstName & dstPrefix 2e9e7989f8 cmd/dockerd: initBuildkit: return close-func 2dc03f934f cmd/dockerd: refactor buildkit init in daemon startup 9509f27e28 rootless: use `getsubids` tool for validation if possible a096045678 all: Replace deprecated ImageInspectWithRaw usage 3d37537f75 c8d/inspect: Add Manifests field 639a1214fa client/image-inspect: Introduce client opts 6664f1220a c8d/inspect: Avoid interim images.Image conversion bdb6a7abdc c8d/list: multiPlatformSummary d4fa252cd3 Wait for a route to ff02::1 before sending NAs 1126d477fd Add live-restore tests for mount image 90aea3b85f Add image subpath mounting functionality 634951457d Implement GwAllocChecker for the remote network driver 12756071f1 update to go1.23.6 294df1c447 volumes/service: OpErr: implement go1.13 unwrapper db68c99d4b distribution: fallbackError, notFoundError implement go1.13 unwrapper b96b14d078 cluster/executor/container: exitError: implement go1.13 unwrapper 2997c0ddc0 client: deprecate CommonAPIClient interface 846b2272e6 client: deprecate ErrorConnectionFailed helper e93ff742e8 client: doRequest: use errors.As for error-detection 3725998e7d client: define interface for all Swarm-specific methods a57d737a86 client: define separate interface for HijackDialer 902c06fdf0 client: make setupHijackConn a regular function e6dabfa3b1 client: move resetting mediaType for hijack to where applicable b0e206b807 client: separate Dialer() implementation from public API fcb924712b integration/internal: JobComplete: require shallower interface 0f04532956 errdefs: touch-up godoc for helpers 329b2a26f3 client: normalize and validate empty ID / name arguments to fail early 844797348e Implement image mount for the snapshotter 8c58934106 Implement mount from image c935a4609d Fix typo in API docs 30e75b8396 client: improve handling of JSON error-responses with incorrect schema 9a6e96fd9c Before sending ARPs/NAs, check the bridge is ready 8e529682af builder: wire up new gc types for buildkit prune functionality 52ea449c55 daemon: Daemon.restore: make legacy-link code conditional 9a69161992 daemon: remove Daemon.children(), Daemon.parents() wrappers 513fd86710 daemon: Daemon.getNetworkedContainer: fix errors for invalid network container 51cb066ec8 daemon: Daemon.rmLink: don't fuzzy-match container when using ID 79b0e89628 github: Clarify release notes description c43aa0b6aa Fix concurrency issue in dind 7ac0e34dba gha/validate-pr: Also run when PR has new commits 9b5a51a881 api/types/container: remove use of errdefs package in test 02eb72380f client: remove uses of pkg/errors in tests 3f354e8c1b api/types/registry: use stdlib errors package 0ca0ccd37a client: improve test-coverage for error-responses 9fdcde7618 Add bridge gateway mode "isolated" 97b50bca2c client: WithVersion: strip v-prefix when setting API version bbaa8af8f3 libnetwork/drivers/bridge: un-export errors 3f9698e1f6 libnetwork/drivers/bridge: TestLinkDelete: use gotest.tools 74fd2ec0cf libnetwork/drivers/bridge: TestLinkCreateNoEnableIPv6: use gotest.tools 6e9ba725f8 libnetwork/drivers/bridge: TestLinkCreateTwo: use gotest.tools bf3323fd40 libnetwork/drivers/bridge: TestLinkCreate: use gotest.tools 7012e3ce14 libnetwork/drivers/bridge: remove NonDefaultBridgeExistError 47f6d4e1bc libnetwork/drivers/bridge: internalize ErrInvalidGateway 3a9f4e0146 libnetwork/drivers/bridge: remove ErrInvalidMtu 2f42aa0e26 libnetwork/drivers/bridge: remove IPv4AddrNoMatchError 0c1b660048 libnetwork/drivers/bridge: remove IPv4AddrAddError dc52ecb1d0 libnetwork/drivers/bridge: remove ErrNoIPAddr 77261b5e42 libnetwork/drivers/bridge: remove "InternalError()" method from errors 2766298f49 libnetwork/drivers/bridge: remove unused errors 59c2d2a4b3 libnetwork/drivers/bridge: remove ErrInvalidDriverConfig 6bb9f581a5 libnetwork/drivers/windows: remove ErrUnsupportedAddressType 54a969d1a4 Dockerfile: Use CLI generated completions in the dev shell 510e6f4f8a libnetwork/options: rewrite tests with gotest.tools af9ffb64cd builder/dockerfile: more consistently put "expected" on the right 86a8bfdce4 remove redundant uses of api/types/strslice.StrSlice d216084185 libnet/d/bridge: drop remote connections to port mapped on lo 27adcd596b libnet/d/bridge: port mappings: drop direct-access when gw_mode=nat 8474153e13 integration: accessing mappings from another docker network a7e6d0a8a3 libnet/d/bridge: releasePortBindings: append directly into 'errs' aa3a23d4f9 Temporary debug for unsolicited NA 49b1ed6d27 libnetwork: remove ErrInvalidName a98ecc5f79 libnetwork: remove ErrInvalidID 548b0b6290 libnetwork: remove ErrNoSuchEndpoint 7cc81407aa Add trace/logging in waitForIfUpped 30601d96b7 Dump daemon logs when TestAdvertiseAddrs fails 8705018705 daemon/cluster/executor: containerConfig: store Network instead of envelope 90323ae123 daemon/cluster/executor: networkCreateRequest: not a method f5f4a062a5 daemon/cluster/executor: networkCreateRequest: slight DRY cleanup 16770340ea daemon/cluster/executor: networkCreateRequest don't shadow config cef6fd2fa2 libnetwork: remove Network.EndpointByID as it must not be used 4e6535fd3e man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.6 5c1fe287fc libnetwork: remove UnknownNetworkError 8f4c98e1eb libnetwork: TestControllerGetSandbox: use errdefs for error asserts d34ca256b8 libnetwork: TestNetworkConfig: use gotest.tools for errdefs assertions c6f0fe5fc0 libnetwork: parallelTester.Do: use errdefs for error assertions 11a6cb5fac libnetwork: TestEndpointJoin: use gotest.tools for errdefs assertions ea7d17376e libnetwork: TestInvalidRemoteDriver: use gotest.tools for error assertions 01c87cc809 libnetwork: TestContainerInvalidLeave: use gotest.tools for errdefs assertions 9472c860de libnetwork: TestEndpointMultipleJoins: use gotest.tools for errdefs assertions ab9d250876 libnetwork: TestEndpointDeleteWithActiveContainer: use gotest.tools for errdefs assertions 56debcfc1c libnetwork: TestNetworkQuery: use gotest.tools for errdefs assertions 874fb4d2f4 libnetwork: TestControllerQuery: use gotest.tools for errdefs assertions 53bf2e8960 libnetwork: TestUnknownEndpoint: use gotest.tools for errdefs assertions 895ee1214a libnetwork: TestDuplicateEndpoint: use gotest.tools for errdefs assertions 678a8a27f5 libnetwork: TestUnknownNetwork: use gotest.tools for errdefs assertions 9304d98757 libnetwork: TestDeleteNetworkWithActiveEndpoints: use gotest.tools for errdefs assertions 01b0fe1172 libnetwork: TestNetworkName: use gotest.tools for errdefs assertions 24df497674 libnetwork: TestNilRemoteDriver: use gotest.tools for errdefs assertions 532d36c251 libnetwork: TestUnknownDriver: use gotest.tools for errdefs assertions 400ad04c74 libnetwork: TestNull: use gotest.tools for errdefs assertions 3bb40af036 dockerd: enable shell-completion; add (hidden) completion subcommand 816f3fa516 integration: remove assertAttachedStream, check both STDERR and STDOUT 2197549e4f daemon: health: getShell: simplify logic (LCOW remnants) d3c0825439 daemon: make daemon.getEntrypointAndArgs a regular function 65120d586b Create bridge veth in container netns b3b9e990ee Get netns before calling moveLink 357fb9d58d Add trace/logging in waitForIfUpped 203d6530d0 libnetwork: use gotest.tools assertions a39bee9b71 libnetwork: suppress some unhandled errors in tests 376ff6add6 libnetwork: use assert.Check in defers 71c9a45672 libnetwork: use assert.NilError (step 2) 231012996f libnetwork: use assert.NilError (step 1) 6bb69a21bf EnableIPv4:false is no longer --experimental 9a37ae3657 Test unsolicited ARP/NA on interface creation bc130f367d bridge/macvlan endpoints always use a random MAC address a900e0b5bb libn/netutils: put more entropy into random MACs 422e056b0f Treat failure to send an initial ARP/NA as an error 522016a842 Configurable count and interval for gratuitous ARP/NA messages eaa84bc8f4 Send unsolicited ARP/NA requests when bringing up interfaces 2f84e2b208 libnetwork/drivers/bridge: driver.configure: move vars close to where used 3955c021ff libnetwork: remove redundant type conversion 41d502892d libnetwork/drivers/bridge: remove redundant type conversion 6e6cf999ed libnetwork: remove isNotfound test-utility c9c322785c libnetwork: Controller.defaultGwNetwork: use errdefs to check for not-found 59722228d7 libnetwork/types: compareIPMask: make error more readable 768b152494 libnetwork/types: TestUtilGetBroadcastIP: use gotest.tools, table-tests 06ae35afb9 libnetwork/types: TestUtilGetHostPartIP: use gotest.tools, table-tests 9e11ea9287 libnetwork/types: TestCompareIPMask: use gotest.tools, table-tests 85cd2b7c94 libnetwork/types: TestErrorConstructors: use errdefs for asserting afcf1b92a5 libnetwork: TestErrorInterfaces: use errdefs helpers to check error-types 2b4aa5eb52 gha: update DCO check to alpine 3.21 9dab00554d libnetwork/driverapi: fix GoDoc for UpdateIpamConfig 52d2d28148 libnetwork/types: align error-types with errdefs 836a5fac10 Dockerfile: update compose to v2.32.4 b75a75017d Dockerfile: update buildx to v0.20.0 1e2a828ed5 Dockerfile: update docker CLI to v27.5.0 c52c68a709 vendor: update buildkit to v0.19.0 366f2b563d Clarify code/comments in defaultipam.newPoolData bc93bba099 Use addrset.AddrSet instead of bitmap.Bitmap in IPAM 7e247e8b13 Add addrset.AddrSet to track a set of IP addresses 46e290fec6 Don't increment "unselected" in Bitmap when clearing a 0 5e9ee1a849 gha: Adjust release branches ae0fda655b update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) fc7caf96d2 Revert "libnet/d/bridge: port mappings: filter by input iface" f658ea3152 Fix parsing of user/group during copy operation 131441b37f daemon: NewDaemon: align max backoff delay with containerd 2.0 76a496a482 daemon/links: fix duplicate env-vars and cleanup range-detection fcdd6f4ad2 daemon/links: fix port-ranges with mixed protocols 251c68c647 daemon/links: fix port-sorting with mixed protocols 3d37d54b8c daemon/links: Link.ToEnv: simplify adding default port env-var c508919b7c daemon/links: add BenchmarkLinkMultipleEnv 3b27e36d67 daemon/links: add EnvVars function b54053d5da daemon/links: NewLink: simplify map to string conversion 53fec9813f daemon: Daemon.setupLinkedContainers: don't fetch linked containers if not used 6b14bdb7c7 daemon/config: validate network-diagnostic-port 370c7a30e2 libnetwork/diagnostic: rename methods 16cc0be0e1 libnetwork/diagnostic: move and improve logs for starting/stoping 8f1a49fa8c libnetwork: Controller: remove redundant mutex for diagnosticServer e4abcad7ac libnetwork/diagnostic: make EnableDiagnostic, DisableDiagnostic idempotent e899092b25 libnetwork/diagnostic: make DisableDiagnostic idempotent 1e6449dfc7 libnetwork/diagnostic: print newline after stackdump log path 8cc0e11823 libnetwork: un-export Controller.DiagnosticServer bf7a87a15a docs: clarify fromImage vs tag behavior in ImageCreate aa565ec1ef Dockerfile: update RootlessKit to v2.3.2 f3f9641f5d vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.2 912a64e22a vendor.mod: golang.org/x/sys v0.29.0 e8c6e7ceb0 build: don't print warning when connection was terminated 52774154c9 distribution: continueOnError: handle context cancellation / timeout 6b5f14a7bb distribution/utils: WriteDistributionProgress simplify check for broken pipe 61aa1657f7 layerStore.registerWithDescriptor: improve logs for cleaning up cache e7bd60ee2d Allow users to ignore missing br_netfilter 66e6a0b7a1 vendor: update buildkit to v0.19.0-rc3 21870ad796 daemon: NewDaemon: update grpc options for containerd 2.0 22c02219de Bridge: on network delete, make sure it's deleted from store feb2dabaa9 Ignore error when adding a bridge already in the ipset 0fad8324a8 libcontainer/supervisor: monitorDaemon: move options inline again 29ce3633e5 libcontainerd/supervisor: remove grpc options that are the default b750eb87cd daemon: NewDaemon: remove grpc options that are the default e94114305e daemon: NewDaemon: align grpc options with containerd's defaults 80b0570445 spelling fix in comments 8c236de735 ci: switch from jenkins to gha for arm64 build and tests c817ea2159 api/server/middleware: log before, not after the request d86920b9b3 ci(bin-image): fix bake build 078c5edcd7 Adjust test to support cgroupv1 c75e333b6f Satisfy linter ce3e34816a Add support for bare `writable-cgroups` security-opt f8187c0214 Error on invalid requests for writable-cgroups bc7d118fd7 Adjust TestCgroupRW to test output before exit code 081b9d97db Update TestCgroupRW with subtests + nil case fix b5b5b7e983 integration/container: test the writable-cgroups security option e3cdd59a82 daemon/&container/: enable `--security-opt writable-cgroups=true` as an option b1ea8032fa api: swagger: document StatsResponse 9ed85f487d daemon: don't discard "invalid parameter" errors for archive endpoints c6d8a93d58 daemon: containerExtractToDir: remove handling for read-only paths on windows ca0158b235 daemon: containerExtractToDir: combine checks for read-only target 0530750d7e daemon: containerExtractToDir: remove named error return 9ed662e72e daemon: containerExtractToDir: remove handling for copyUIDGID on windows ca06b222e3 api/types/container: merge Stats and StatsResponse 16cbb27e4e use StatsResponse instead of Stats in tests 390cb4c2f1 Increase integration test timeout from 5m to 10m 0aa8fe0bf9 Update to containerd v2.0.2, buildkit v0.19.0-rc2 a63602472d Use local cleanup method rather than dependency 3db60168e7 pkg/ioutils: remove crypto/sha256, crypto/sha512 imports f68eb9c3cb vendor: github.com/Microsoft/hcsshim v0.12.9 488d6972b2 vendor: github.com/stretchr/testify v1.10.0 2008799026 vendor: k8s.io/klog/v2 v2.130.1 adec695d36 vendor: github.com/fsnotify/fsnotify v1.7.0 1ef5957089 vendor: github.com/vbatts/tar-split v0.11.6 de86c46158 vendor: github.com/containernetworking/cni v1.2.3 6dd592bd49 vendor: github.com/containerd/go-cni v1.1.11 2ea97aec2d vendor: github.com/containerd/ttrpc v1.2.7 cc120c4c05 testutil: update to semconv v1.26.0 6439c46e06 vendor: github.com/containerd/errdefs v1.0.0 f40b92272c vendor: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20231105174938-2b5cbb29f3e2 eb592fecad vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 48e6b4e8f7 vendor: otel v0.56.0 / v1.31.0 d60f164e21 vendor: github.com/creack/pty v1.1.24 a78b84c212 vendor: github.com/aws/aws-sdk-go-v2 v1.30.3 d5fe43335f vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 5066658f39 vendor: golang.org/x/oauth2 v0.23.0 81d5487330 vendor: cloud.google.com/go/compute/metadata v0.5.0 433b1f9b17 libnet/d/bridge: port mappings: filter by input iface 49ec488036 logger/fluentd: remove deprecated fluentd-async-connect option d560704c91 libnet/d/bridge: init driver.nlh in newDriver 5a6a980dad daemon/export: Stop when context is canceled 15df1c9c40 imageService: Remove PerformWithBaseFS 2f60d15ddf Internal macvlan networks don't need a gateway address. 8b13cde274 L3 and internal ipvlans don't need a gateway address 43f71fb582 Bridge - skip gateway allocation if no gateway is needed 38e76ebea9 Only allocate a gateway if the n/w driver wants one 64006f964a Simplify selection of gateway address 24f09ef13c Update MAINTAINER file email for laurazard e26122c609 pkg/ioutils: remove unused NewReaderErrWrapper 2b4db9383c pkg/archive: nosysFileInfo: implement tar.FileInfoNames to prevent lookups ce8d3d1c78 pkg/ioutils: remove deprecated NopWriteCloser 39f1abb1fb pkg/ioutils: remove deprecated NopWriter 3faa170371 pkg/ioutils: deprecate NopWriteCloser 7fa3c553e7 pkg/ioutils: deprecate NopWriter ad860173a2 vendor: github.com/containerd/containerd v1.7.25 c12bfda3cd Dockerfile: update containerd to v1.7.25 d80e3410bc vendor: github.com/containerd/containerd/api v1.8.0 d23871469b pkg/sysinfo: Remove deprecated `NumCPU` cdd4a7429f pkg/ioutils: remove errWriteFlusherClosed 034cd27da0 pkg/ioutils: remove deprecated NopFlusher e183df63f9 pkg/ioutils: remove deprecated WriteCounter, NewWriteCounter 15ce2914a5 pkg/ioutils: move BytesPipe to container/streams/bytespipe 8f9c09edd4 Fix unit tests for an nftables host 818a180fce pkg/ioutils: deprecate NopFlusher 18f1ecafea c8d/snapshot: Rename variable that collided with import 15d3c99ff6 daemon: Remove "Error: " error message prefix cd9c292de9 imageService: Unify `Mount` and `Unmount` 0cbb604665 c8d: Implement `RWLayer` and remove `PrepareSnapshot` daed0bd4d6 container/rwLayer: Remove unused TarStreamer, ApplyDiff, Size and Name 85de28901d container/rwLayer: Remove Changes bafebbbd8a container: Decouple RWLayer from graphdriver implementation 383503d382 pkg/ioutils: deprecate WriteCounter, NewWriteCounter 60971a66b4 pkg/ioutils: deprecate BytesPipe, NewBytesPipe, ErrClosed 3db72b255d pkg/sysinfo: Deprecate NumCPU 6d24a21643 improve validation of cpu-shares, and migrate TestRunInvalidCPUShares 400f1ed95c runconfig: TestValidateResources: use subtests 93907c904d runconfig: TestValidateResources: fix duplicate test-case 5b18a7914c deprecate pkg/parsers.ParseKeyValueOpt and move internal aad7bcedd2 Dockerfile: update runc binary to v1.2.4 35932cdeec pkg/ioutils: un-export readCloserWrapper 392d33c98c image/save: set a stable timestamp for assets e324df3f1b image/tarexport: patch MkDirall to accept atime, mtime ca962cecfd image/tarexport: add fork of os.MkdirAll (non-buildable commit) ee1a15a970 daemon: ImageService.LogImageEvent: pass through context ea00e72c21 libnetwork/drivers/bridge: processIPAM: remove unused arg f8a973ba4e ci: update bake-action to v6 586556eda7 runconfig: return correct error-types and touch-up error messages fbb421efaa runconfig: cleanup TestDecodeContainerConfig c76cab29df runconfig: cleanup TestValidatePrivileged ff64a348cc runconfig: fix and refactor TestDecodeContainerConfigIsolation 7864454792 pkg/ioutils: move atomic file-writers to a separate (pkg/atomicwriter) package 34ab9570ad daemon/links: TestLinkMultipleEnv: assert with gotest.tools, remove TestLinkPortRangeEnv 97dc3056c6 Clear RWLayer reference under container lock 080d8e7d63 daemon/links: TestLinkEnv: assert with gotest.tools 702df89d9b daemon/links: TestLinkNaming: assert with gotest.tools 51eb0c6a24 daemon/links: TestLinkNew: assert with gotest.tools 382fb41563 daemon/links: remove newPortNoError utility 3fa5e7e6a9 Update internal use of idtools to usergroup 9c368a93b6 Split internal idtools functionality a4ae38b010 Use bridge consts for "DefaultGatewayIPv[46]" aux-addr keys 0f7a43271c daemon/events: Move metrics to internal/metrics 90e2afd0be daemon: Move direct usages of go-metrics to internal/metrics 438f5801e1 daemon/images: Move ImageActions to metrics 51c2689427 daemon/metrics: Move out to `internal/metrics` 048fece105 Alias github.com/docker/go-metrics imports 24ad9bef9d pkg/idtools: rewrite to use moby/sys/user f4e2cfa209 libnetwork/osl: Namespace.setSysctls: use stdlib errors 064cdf475c pkg/parsers: deprecate ParseUintListMaximum, ParseUintList 39c05177ef Check network connect/disconnect after live-restore c2fe1d31e9 Fix live-restore of the osSbox a77ee8b9c0 Mark endpoints as "populated" after live restore db1ed280f1 Live-restore gw-priority 9138195cef Rename Controller.sandboxCleanup to sandboxRestore 1359772433 pkg/sysinfo: parse cpuset.cpus/mems once and memoize 35fcbc1d1a Test a container attached to l3-ipvlan and bridge networks 81f6e087c1 Treat connected routes to unspecified addrs like default gws 725defe1e9 Include iface routes to unspecified addrs when looking for default gws 0416e31876 Add comments to selectGatewayEndpoint 1b9c09e10a daemon/logger: un-export RingLogger 263c46d755 integration/internal/container: IsInState: touch up error-logs 2282279180 pkg/sysinfo: internalize parsing cpusets aa696ffbb1 pkg/sysinfo: touch-up docs for cgroupCpusetInfo.Cpus, Mems 4597396cb5 pkg/sysinfo: define const for default Max CPUs 799501d172 pkg/sysinfo: rename vars/arguments for clarity 0d51680f91 pkg/sysinfo: stub out parsing cpusets on non-linux b7ed099727 daemon: isOnlineFSOperationPermitted: cleanup confusing syntax fb03a3c403 vendor: github.com/moby/term v0.5.2 be39e4f732 man: remove --allow-nondistributable-artifacts 4f9150cee5 Update swarm to latest for server alpn config a51baca00d pkg/fileutils: move GetTotalUsedFds internal in daemon ba8279bf1f golangci-lint: remove temporary exception for deprecated code e45f20352d pkg/fileutils: deprecate GetTotalUsedFds a079f62f47 Add testutil daemon.WithResolvConf d7f59cec05 daemon/config: add basic validation of exec-opt options a646467a66 integration-cli: migrate TestCreateByImageID to integration suite 5b31a5b370 libnetwork/drivers/windows: fix error-matching for hcsshim "not found" 1f4c9f23c3 libnetwork/drivers/bridge: format errors with '%v' for consistency 3b8ba71fe3 libnetwork/drivers/windows: fix non-constant format string 8c96e45375 distribution: fix non-constant format string e451b698d3 golangci-lint: add forbidigo rules to prevent regex.MustCompile 86e470fe3a daemon/names: use lazyregexp b7c88502fb internal/testutils/networking: use lazyregexp ae13510577 daemon/logger/awslogs: use lazyregexp to compile regexes on first use 690e00733e volume/mounts: use lazyregexp to compile regexes on first use 72ebf2c309 testutil: use lazyregexp to compile regexes on first use b5d90d746b registry: use lazyregexp to compile regexes on first use b6b19059c5 plugin: use lazyregexp to compile regexes on first use 0fe953dff0 pkg/idtools: use lazyregexp to compile regexes on first use 48d63b99ef opts: use lazyregexp to compile regexes on first use 06948b83f3 oci: use lazyregexp to compile regexes on first use 98f7c45e7f integration-cli: use lazyregexp to compile regexes on first use bc1dbd9ea6 daemon: use lazyregexp to compile regexes on first use d61a6924d7 client: use lazyregexp to compile regexes on first use 0672b3b7f7 builder: use lazyregexp to compile regexes on first use 43b3aaa62d implement lazyregexp package ce37cb3ea0 Down with the sickness (AUTO_GOPATH) 839b0afbc7 integration/container: use is.ErrorType for some tests 4504ca6bf6 integration/container: rename vars that shadowed imports 6b0085eebd integration/container: use consistent name for api-client fa0b9f9505 integration/container: use consistent alias for test-container pkg 547151abd2 pkg/sysinfo: cleanup tests 25009ed5c0 Restore labels when re-creating Windows networks 7bd1b64058 daemon/logger/loggertest: remove workaround for OSC string terminator parsing 5149401665 vendor: github.com/Azure/go-ansiterm faa5f7b0171c ddd885a961 daemon: don't repeatedly call NumCPU if not needed aa7493f953 daemon: minor cleanups for getting system info 1c37a4454b daemon: adjust tests for changes in go1.24 JSON errors c5575b5119 daemon: add missing "//go:build" directive f8524ab041 daemon: remove workaround for go1.21 compiler bug 8e9213a6b6 daemon: remove kernel-version check for kernel < 4.0.0 86a2df8be6 pkg/parsers: rename var that collided with builtin cfc988e4da integration-cli: TestRunInvalidCpuset.. create instead of run 8d5cf1db1e Use the roundtripper during build f321120767 daemon: parseSecurityOpt: rename var that shadowed function 44db31b9cc remove pkg/broadcaster and make it internal to container/streams 6ab9212168 pkg/ioutils: remove OnEOFReader and move it internal be4eac753f Remove use of bufio in cli import tests 4c251b6b03 Add pool for archive decompress stream 9189a6e0ab Fix chrootarchive test a93a079cb4 Remove use of pools in archive 8d787e3461 builder/dockerfile: unconvert e19e4de775 daemon: ignore some errors when setting env-vars c759fb20d6 daemon: remove uses of deprecated system.MkdirAll 1e060d3315 daemon/graphdriver/windows: remove uses of deprecated system.MkdirAll 05ec732667 libcontainerd/supervisor: remove uses of deprecated system.MkdirAll 84bb6e5afb container: remove uses of deprecated system.MkdirAll c02c2a3a79 cmd/dockerd: remove uses of deprecated system.MkdirAll e783bb5c69 builder/dockerfile: remove uses of deprecated system.MkdirAll bc61b31935 pkg/idtools: remove uses of deprecated system.MkdirAll 4472e9b7f8 pkg/system: deprecate MkdirAll and remove custom volume GUID handling e5bf6d8ba0 libnet: pass store as an arg to netdrivers 93e9f7f75f distribution: Pass Traceparent OTEL HTTP header 524a63a958 pkg/chrootarchive: remove "// import" comments 302ca6227f pkg/chrootarchive: use stdlib errors 727ab584bb vendor: github.com/containerd/cgroups v3.0.5 275bbcd300 builder: don't fall back to defaultKeepStorage when set to zero 315891dd2e Remove import comments e4236c93d9 Remove unused pkg/system functions 12b2b56fa6 Update archive to use fs.FileInfo over custom stat bb3e95dfdc Update archive to use unix.Mknod directly 35b9525f9a Update archive to use its own xattr funcs 1b4cbea3a8 Update archive to use time operations directly 90fef061ec daemon/c8d: Force c8dimages alias for containerd/images 8c30e11321 c8d/delete: Consistent method receiver 1ad78f00b1 daemon/c8d: Fix duplicate containerd/images import 6bd5840675 vendor: golang.org/x/net v0.33.0 364e4790e1 docs/api: allow for an empty string for Isolation (api v1.25-v1.47) 7e9a5064dc api: Remove unused imageStore and layerStore c452af6651 image: Remove unused `Details` fields d9795da33e image: Remove `GetImageManifest` 4f5ec9994c pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec 7fbbd52b0e add Shaun Thompson as curator b0be1f3af8 Enable external DNS if a network has an IPv6 gateway ec8a5b0f4c libnet/d/bridge: move iptRule to iptables pkg 1b823fb54e libnet: don't put external DNS answers in OTel spans 1aecca8bbd docs: Update example section for SwarmJoinRequest b6594353f8 libnetwork/iptables: remove deprecated Passthrough() d34d092b42 libnetwork/iptables: remove deprecated IPV, Iptables, IP6Tables 820dea0d2b libnet/d/bridge: hardcode chain names bd30a51ea7 libnet/iptables: split ProgramChain and move to bridge driver df3c78d061 Combine outgoing and ICC iptables rules 0f259dd76d Rename setupIPTablesInternal -> setupNonInternalNetworkRules 556b8eed16 Tidy setupIPTablesInternal 8fd177d79b pkg/reexec: Command: separate public API from implementation 6568c06d12 pkg/reexec: make platform-agnostic (again) 7672d60033 pkg/reexec: use const for name of test binary 0ef2b24c80 Make libnetwork responsible for DOCKER-USER setup/reload 9699284e8f Add iptablesdoc for a swarm network 6473d37002 Run commands in an L3Segment netns without failing the test. 3bf9a80818 Rename L3Segment Host.Run -> Host.MustRun 29e20fc904 Add static filter-FORWARD rules during bridge driver init 5ccc699513 Use golden testdata in TestUserChain cd81985bfa vendor: update buildkit to v0.18.2 d688389f4a libnetwork/iptables: deprecate Passthrough 8991c4e382 Deprecate BridgeNfIptables and BridgeNfIp6tables fields 30a365f543 docs/api: version-history.md: fix markdown 01a55860c6 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err 31fc7dd750 libcontainer: ReplaceContainer: fix var shadowing import 4e9df46a6e docs/api: document correct case for Api-Version header 53a9127349 integration/build: make TestBuildEmitsImageCreateEvent less noisy 504e1d4686 pkg/archive: replace uses of pkg/errors for stdlib errors f0ce367e1e pkg/system: deprecate types and functions that are only used internally f053beb34c libnet/osl: drop netns path GC 27deff4da1 libnet/iptables: deprecate type IPV c8f19e5e4c libnet/iptables: remove mutex-based serialization 537eea8744 vendor: golang.org/x/net v0.32.0 678ef1a267 libnet/d/bridge: unconditionally error out if LinkSetMTU fails 5c358743af daemon: info: remove bridge-nf-call-iptables / ip6tables warnings d8358ebc87 otel: Use non-noop tracer provider for grpc 96ef85272f c8d/pull: Show `Extracting` layer status 899360b649 integration/build_traces: Create own tracer provider 4847557d1b otel: Avoid excessive memory allocations if not configured 927ff16860 vendor: github.com/opencontainers/runc v1.2.3 88a08a070e vendor: github.com/cyphar/filepath-securejoin v0.3.5 ba90fd8da0 Decouple pkg/archive from pkg/ioutils ec5c9e06e3 Dockerfile: update runc binary to v1.2.3 e6443e4af2 vendor: golang.org/x/crypto v0.31.0 035eeee209 vendor: golang.org/x/text v0.21.0 df8b3e787c vendor: golang.org/x/sync v0.10.0 c4f80dd931 vendor: golang.org/x/sys v0.28.0 8b243a1a82 docs/api: deprecate non-distributable artifacts 1932091e21 remove support for non-distributable artifacts and deprecate API fields and config e394ff695c Dockerfile: remove libbtrfs-dev dependency 7d79b301bc Dockerfile: remove libsecret-1-dev dependency 3192b2aba7 Dockerfile: remove libudev-dev dependency 7c4afb1e6b Dockerfile: remove dpkg-dev dependency 7bba43a731 Dockerfile: remove libapparmor-dev dependency b08ff81204 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy 1a453abfb1 integration-cli: don't skip AppArmor tests on SLES be9e39b48b registry: ConvertToHostname: use strings.Cut to reduce allocations a6f98dc60d registry: Service.lookupV2Endpoints: add arg to skip mirrors 50215913db registry: loginV2: move variables closer to where they're used c1ef39e56e registry: loginV2: don't contact registry when failing to construct request a7da6fb2a7 man: vendor: github.com/cpuguy83/go-md2man v2.0.5 89899b71a0 update xx to v1.6.1 for compatibility with alpine 3.21 9da0e69608 api/server: Server.CreateMux: pass context and use structured logs 9c1ff095e8 cmd/dockerd: pass debug-router instead of constructing in CreateMux 27294df576 api/server: Server.CreateMux: also register API-version debug endpoints e2d2834be1 api/server: Server.CreateMux: register debug endpoints with correct methods 2f5412de8d api/server: set /debug prefix as part of debug-router routes 694c01620b chore: fix some function names in comment 76a5ca1d4d Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers 5fc32c12c7 cmd/dockerd: ignore some unhandled errors b0ec823cc7 daemon: remove Daemon.NetworkControllerEnabled 59bfc32a33 daemon/containerd: hostsWrapper: remove unused regService argument 3014d6d7a3 registry: deprecate APIEndpoint.TrimHostName fe2637a05b api/types/network: add godoc for EndpointSettings.GwPriority 15ba03c8fc Jenkins: don't modprobe kernel module 2af19b6b7c Don't try to modprobe ip6_tables in the moby dev container f2e1f52a04 Try to load kernel module ip6_tables, when necessary. 4740820716 Use ioctl to try to trigger kernel module loads 56eb47c622 Ignore kernel-assigned LL addrs when selecting "bip6" 404118c22b vendor: google.golang.org/protobuf v1.35.2 20ddbe2a0b vendor: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f 1e51b7a28c vendor: golang.org/x/tools v0.27.0 750d6f4423 vendor: golang.org/x/mod v0.22.0 99f593b762 vendor: golang.org/x/net v0.31.0 e5895eacac vendor: golang.org/x/crypto v0.29.0 fb9977e42e vendor: golang.org/x/text v0.20.0 115acf7c15 vendor: golang.org/x/sync v0.9.0 e542dee0a6 vendor: golang.org/x/sys v0.27.0 8fee8a759f Remove test env var DOCKER_TEST_CREATE_DEFAULT_BRIDGE 0eb3d431c0 Run tests that change docker0 in their own netns 52d7e407b7 update to go1.23.4 504ee465fc vendor: update buildkit to v0.18.1 4e30acb63f Dockerd rootless: make {/etc,/var/run}/cdi available 820520affd distribution: verifySchema1Manifest: pass through context 9a0b61ab29 daemon/daemon_linux.go: Fix a minor typo d75394bf77 Wait longer for a stable goroutine count in tests dd7831187d Fix typo in waitForStableGourtineCount f91afea6ea c8d/commit,import,build: Preserve overriden image f0c8becffb c8d/tag: Extract createOrReplaceImage 0194a18ca8 registry: remove assignment of default values in some tests a93f6c61db c8d/tag: Don't log a warning if the source image is not dangling 28a700bf5b registry: override net.LookupIP per test, not globally d17cd847ea registry: isCIDRMatch: don't try to resolve host if not needed 5f91c769f5 registry: deprecate RepositoryInfo.Class 3903f71f9f registry: remove deprecated APIEndpoint.Version and APIVersion type 0bd8738e33 registry: isCIDRMatch: return early if no CIDRs are set cce5dfe1e7 Jenkinsfile: modprobe br_netfilter 59c5919b12 Put --help before --host in the dockerd manpage 2fbb18ece2 Add --host-gateway to the dockerd manpage 0aba67203a Implement gateway mode "nat-unprotected" 07dff11a7e Wrap errors rather than using err.Error() d3c2376ff1 cmd/dockerd: change routerOptions.Build to a regular func 5b752fab32 api: add Priority field to EndpointSettings 229dc6676c daemon: early-return from buildJoinOptions c9f17bedc7 daemon/config: extract validation of userland-proxy config 83f8f4efd7 daemon/config: deprecate Config.ValidatePlatformConfig 74a00f183b daemon/config: move utility-functions separate from Config methods a4714fa04d daemon/config: verifyDefaultCgroupNsMode: update error message for consistency 2c000b8ac4 daemon: Daemon.RegistryHosts: use internal method to get daemon config 16be996b6b ci: use edge releases of buildx 3e4f437697 cmd/dockerd: newRouterOptions: rename arg that shadowed import 68a98a7263 daemon: getCD: remove use of parsers.ParseKeyValueOpt 003e35fea5 libnetwork/ipams/null: gofumpt code a8e5a19706 libnetwork/drivers/bridge: gofumpt code da5e86a82b daemon: gofumpt code fb6e650ab9 integration: add wait e7d15d4d58 daemon/graphdriver/zfs: ignore non-existent dataset on removal 264c15bfc4 Fix br_netfilter module loading logic b4769e86a4 vendor: update buildkit to v0.18.0 b57aa7f3b7 integration: remove default poll delay and timeouts c9a1e4dc8c Test host-gateway addresses from docker0 af0b973595 Allow IPv4 and IPv6 host-gateway-ip addresses 01e2168c1e Move Linux-only integration/network tests into Linux-only file 90250ce93a vendor: update buildkit to v0.18.0-rc2 b7f43c3729 Remove buildkit init timeout 0b5b1db1c1 Use default ULA prefix if fixed-cidr-v6 is not specified fdd2591cbe Separate IPv4 IPAM conf from the rest of default bridge conf cc538b2bf0 Drop fixed-cidr if not within user-managed bridge subnet 311a8bc899 Allow increase of fixed-cidr subnet size 85159ce09f Allow non-overlapping change of fixed-cidr 237654a553 Refactor IPAM config for default bridge 90baa2bc36 Fix selection of subnet from user-managed default bridge 63b558af77 Don't clear top bits of IP then check if it's global unicast facb2323a0 Add tests for IPAM Config of default bridge 4a2bd1085e Move default bridge test into linux-only file 46a91a947e api/types/filters: reduce uses of non-exported fields in tests cffee85725 api/types/filters: also test generated JSON 848f11aa7c api/types/filters: rewrite tests with gotest.tools 4becdaca72 Add label on PrepareSnapshot to warn about non-expiring leases eef6b83e53 Update containerd image builder to use lease prune label e6170a5c4f Fix lease management during image operations 1a26e627bc vendor: github.com/vishvananda/netns v0.0.5 0666d4a585 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2) 557e4ed83b tests: migrate simple cases to assert.ErrorIs caae3c051d tests: migrate to assert.ErrorContains when possible 1b470d15d8 tests: migrate away from assert.Assert(v == nil) 0553d3d994 tests: migrate away from assert.Assert(err == nil) 5e4e34a966 tests: migrate strings.Contains -> is.Contains in assertions 48b237f7af vendor: update buildkit to v0.18.0-rc1 44f9eec1ae vendor: github.com/tonistiigi/go-actions-cache 394979b8119e 1551d95727 vendor: resenje.org/singleflight v0.4.3 b9a904c48a integration/container: TestCDISpecDirsAreInSystemInfo: use fixtures d23bc11b97 vendor: github.com/containerd/continuity v0.4.5 8cecf3a71c Dockerfile: update containerd to v1.7.24 a650dbd951 Update containerd to v1.7.24 821d974789 volume/testutils: simplify fakePluginGetter b656cffe4c Disallow "network generic data" with type options.Generic 223929a44d Test routed n/w inter-network communication 0546d9084f Routed networks accept traffic from anywhere. 10338053f0 Don't add default-RETURN rules to DOCKER-ISOLATION chains 939bc14616 Tidy bridgeNetwork.isolateNetwork 255fff4acd Propagate error from INC rule setup d3b7d84b23 Simplify setINC() 1a607cf257 Rename gwMode.natDisabled() to gwMode.routed() 9c9eccfb23 client: support multiple platforms on save and load e257856116 Dockerfile: update to runc v1.2.2 44ed3067ca c8d/container/inspect: Return `ImageManifestDescriptor` 0020c41e3a daemon: Best-effot container `OS` to `ImagePlatform` migration 638172417c container: Add `ImagePlatform` field and deprecate `OS` 60cd165012 Dockerfile/frozen-images: Add amd64 and arm64 hello world f303531757 client: ImageImport: omit empty query-parameters f96994ec17 Skip tests that are flaky for 4 already be36ac13e5 .golanci.yml: rm runc exception acf920823b update golangci-lint to v1.62.0 329d35bcca vendor: github.com/opencontainers/runc v1.2.2 4b26582bc6 vendor: google.golang.org/grpc v1.66.3 1eccc326de vendor: github.com/golang-jwt/jwt/v4@v4.5.1 a333c2990f client: TestImageImport: use table-test, asserts, add platform test-case 2bab030d6c client: TestImageSave: use table-test, asserts, add platform test-case 1ea24b7be3 client: TestImageLoad: add test-case for platform 613538469b client: TestImageLoad: rewrite to use table-tests, use asserts b0b6357701 Makefile: don't automatically inherit graph-driver from host d88ab0f3a2 c8d/image/inspect: Return `Descriptor` c2c0046d11 remove logentries check and migration code 5ef5ca3adc EnableIPv4 will be in API 1.48, not 1.47 1a16f5099b daemon/logger: logDriverError: use WithFields for logs 451fee91c5 libnetwork: add missing go:build tag 0f0c5eeaca api/server/router/container: add missing go:build tag 835b1f1063 daemon/containerd: add missing go:build tag 354dfdb928 Delete /etc/hosts entries on network disconnect c1bf84fdbc Move Austin Vazquez (austinvazquez) to maintainers 82fdae7730 daemon/images: fix godoc for ImageActions 4a2c48e231 Dockerfile: update compose to v2.30.3 ee95c7bd89 Dockerfile: update buildx to v0.18.0 8a81a97af5 Only delete /etc/hosts entries for disconnected network b034dc41a2 deprecate pkg/platform and move internal b15cd283d8 c8d/list: Return `Descriptor` fc590032f3 hack: Add explicit containerd feature to `daemon.json` 7d89d83485 golangci-lint: enable copyloopvar linter d67a21b6fc pkg/idtools: remove redundant capturing of loop vars (copyloopvar) 3350920788 integration/service: remove redundant capturing of loop vars (copyloopvar) 70b354713b runconfig: remove redundant capturing of loop vars (copyloopvar) 1a89c1e4a6 pkg/archive: remove redundant capturing of loop vars (copyloopvar) 517baee5f2 distribution: remove redundant capturing of loop vars (copyloopvar) 04d8766d4e integration/network/bridge: remove redundant capturing of loop vars (copyloopvar) 020b7102e3 daemon/logger/syslog: remove redundant capturing of loop vars (copyloopvar) 59f68d3f99 api/server/middleware: remove redundant capturing of loop vars (copyloopvar) 243442280e integration/system: remove redundant capturing of loop vars (copyloopvar) bb682f75f9 integration-cli: remove redundant capturing of loop vars (copyloopvar) a19b892c29 integration/volume: remove redundant capturing of loop vars (copyloopvar) cd5e043aff daemon/cluster/executor/container: remove redundant capturing of loop vars (copyloopvar) f797d70649 api/types/container: remove redundant capturing of loop vars (copyloopvar) 08dbb7a593 integration/build: remove redundant capturing of loop vars (copyloopvar) ee54e43bf1 integration/daemon: remove redundant capturing of loop vars (copyloopvar) 9a7278fbdc integration/capabilities: remove redundant capturing of loop vars (copyloopvar) ff97ff8320 daemon/logger/loggerutils: remove redundant capturing of loop vars (copyloopvar) 67d91e7622 volume/local: remove redundant capturing of loop vars (copyloopvar) f7b547ba0d integration/network/ipvlan: remove redundant capturing of loop vars (copyloopvar) b5c0f6cd70 daemon: remove redundant capturing of loop vars (copyloopvar) d885d097ef libnetwork/ipams/defaultipam: remove redundant capturing of loop vars (copyloopvar) 7db58fefdc internal/mod: remove redundant capturing of loop vars (copyloopvar) 74e44345e7 distribution/xfer: remove redundant capturing of loop vars (copyloopvar) 874ad2fcf0 api/types/filters: remove redundant capturing of loop vars (copyloopvar) 3a34264129 volume/mounts: remove redundant capturing of loop vars (copyloopvar) a505b19170 integration/plugin/common: remove redundant capturing of loop vars (copyloopvar) 742509150b libnetwork/bitmap: remove redundant capturing of loop vars (copyloopvar) 082a52e8ac oci: remove redundant capturing of loop vars (copyloopvar) e9b009fef5 integration/networking: remove redundant capturing of loop vars (copyloopvar) 53d78d73e6 integration/container: remove redundant capturing of loop vars (copyloopvar) 0b2d687b06 daemon/containerd: remove redundant capturing of loop vars (copyloopvar) b5b077f2ea api/types/network: remove redundant capturing of loop vars (copyloopvar) 0fc7b1c201 daemon/cluster/convert: remove redundant capturing of loop vars (copyloopvar) 6a85a13c0a internal/testutils/specialimage: remove redundant capturing of loop vars (copyloopvar) 1c6958bf13 integration/network/macvlan: remove redundant capturing of loop vars (copyloopvar) 88e24ccda6 image/cache: remove redundant capturing of loop vars (copyloopvar) 89add8c64f libnetwork/drivers/overlay: remove redundant capturing of loop vars (copyloopvar) ce1a39ab34 client: remove redundant capturing of loop vars (copyloopvar) ea10382ffa integration/image: remove redundant capturing of loop vars (copyloopvar) 69d0c773ca daemon/logger/fluentd: remove redundant capturing of loop vars (copyloopvar) c2e22d85b3 api/server/httputils: remove redundant capturing of loop vars (copyloopvar) aea8a0724a integration/network: remove redundant capturing of loop vars (copyloopvar) f0b896c5f2 builder/remotecontext/git: remove redundant capturing of loop vars (copyloopvar) 4768d680d1 libcontainerd/remote: remove redundant capturing of loop vars (copyloopvar) 443a074fa4 profiles/seccomp: remove redundant capturing of loop vars (copyloopvar) 93f98535c3 daemon/logger/loggertest: remove redundant capturing of loop vars (copyloopvar) 35aa84fbc2 pkg/plugins: remove redundant capturing of loop vars (copyloopvar) 63f0b9a1d5 opts: remove redundant capturing of loop vars (copyloopvar) c0de852afa integration/config: remove redundant capturing of loop vars (copyloopvar) 41bf78226f daemon/config: remove redundant capturing of loop vars (copyloopvar) b01a37a6b7 libnetwork/drivers/bridge: remove redundant capturing of loop vars (copyloopvar) 53e48e8623 libnetwork: remove redundant capturing of loop vars (copyloopvar) 8b190b16df registry: remove redundant capturing of loop vars (copyloopvar) 21e1038d12 golanci-lint: sync comments with docker/cli b453aa65fa update go:build tags to use go1.22 bf251c33d0 Only masquerade access to own published ports for userland-proxy=false 3dea9fd4e6 Add TestFilterForwardPolicy 3cadadb4eb Add daemon option --ip-forward-no-drop 5823b05c97 Modify IP forwarding and filter-FORWARD DROP setup. a4d74c6383 Move setupIPv6Forwarding() to setup_ip_forwarding.go 24f53eba7f Move integration/network/bridge_test.go to bridge subdir ca273f465a Dockerfile: update registry to v3.0.0-rc.1 c9570da15b chore(libnetwork): fix some comments 756586e437 vendor: update buildkit to v0.17.1 a6e5f7f86b Structured logs in sbJoin/sbLeave and funcs they call 18327745c0 Allow separate IPv4/IPv6 gateway endpoints. 869f7996fc Option to disable implicit mapping IPv6 host to IPv4. 4ac7f14e99 Add EnableIPv4 to the bridge driver c0045476b8 all: Remove redundant `units` alias for `go-units` 20818454c4 update to go1.23.3 16f6fd1a95 Add a comment explaining host-networking hosts file generation 7c1e41a06d libnetwork: Sandbox.buildHostsFile: remove intermediate var 6a5ab42f28 libnetwork/etchosts: Delete: truncate file instead of close and write 7d98e45a6e libnetwork/etchosts: Add: combine with "mergeRecords()" 28d029cf9f libnetwork/etchosts: don't panic on invalid regex 80e4631998 Use netip.Addr instead of string when building /etc/hosts c2a09d2721 Don't update /etc/hosts separately for each initial network 0af6203b46 vendor: github.com/containerd/typeurl v2.2.3 84965c0752 Windows: Run containerd as managed process 5014c90516 api/swagger: Improve description for platform in images/push 7766b35d74 golangci: govet: enable more rules 24bd11ce22 pkg/plugins: TestLocalSocket ignore deepequalerrors (govet) 626d9b421b distribution: TestLayerAlreadyExists: fix deepequalerrors (govet) 06bf2a2699 distribution: manifestStore.Put: fix unusedwrite (govet) facdfc1751 daemon/images: onlyFallbackMatcher.Match: fix unusedwrite (govet) 406e3a0ff7 daemon/containerd: storeJson: fix redundant err-check (govet) 8e76998aee integration-cli: loadSpecialImage: fix shadowed variables (govet) a0b84a34c2 layer: verifiedReadCloser.Read: fix shadowed variables (govet) 38db7265fc pkg/plugins: loadWithRetry: fix shadowed variables (govet) a28e6e2d21 daemon/graphdriver/btrfs: Driver.parseStorageOpt: fix shadowed variables (govet) b3705f12cd distribution: pushDescriptor.layerAlreadyExists: fix shadowed variables (govet) 0c8c098719 libnetwork: Network.rmLBBackend: fix shadowed variables (govet) 544b1574e2 builder/dockerfile: fix shadowed variables (govet) bb9251c46d daemon/containerd: fix shadowed variable in tests (govet) 979227484f daemon/containerd: ImageService.imageDeleteHelper: fix shadowed variable (govet) 6dc31171c5 builder/builder-next/exporter: patchImageConfig: fix shadowed variable (govet) b019372446 libnetwork/bitmap: fix shadowed variable in tests (govet) 32aa56af00 pkg/idtools: fix shadowed variable (govet) 6f3dd5f040 plugin: TestPluginAlreadyRunningOnStartup: fix shadowed variable (govet) e46e159001 plugin: Manager.getManifestDescriptor: fix shadowed variable (govet) d058e09200 daemon/graphdriver/overlay2: fix shadowed variable (govet) ee425a9773 builder/builder-next: fix "id" variable being shadowed (govet) 79c5b938f4 daemon: Daemon.autoRemove: fix shadowing (govet) 007daf5045 daemon: Daemon.handleContainerExit rename vars to prevent shadowing (govet) 738fb74a1a libnetwork/datastore: MockStore.AtomicPut: remove redundant nil check (govet) 473b1d419c golangci: run gosec on test files as well f6d86126c4 distribution/xfer: createChainIDFromParent: ignore G602 false positive (gosec) a309e88dff pkg/tarsum: renderSumForHeader: ignore G110 in tests (gosec) 41b5645ba2 integration-cli: TestDaemonStartWithDefaultTLSHost: fix G402: TLS MinVersion too low 4bb96a5a4a awslogs: TestNewAWSLogsClientCredentialEndpointDetect: ignore G101 (gosec) 6f220c3340 daemon/logger/splunk: HTTPEventCollectorMock: fix G114 (gosec) 79196deae9 pkg/authorization: fix G112 Potential Slowloris Attack (gosec) e6e6f0cdca client: TestTLSCloseWriter: fix G112 Potential Slowloris Attack (gosec) 963a9d7504 integration-cli: ignore some file-permissions issues (gosec) 7d7412af31 integration-cli: TestRunCreateVolumesInSymlinkDir: adjust file perms (gosec) 0d1c645919 integration-cli: writeFile: fix file permissions (gosec) 6ca0d3b1b1 integration-cli: inspectMountPoint: fix implicit memory aliasing (gosec) c8e085b56a volume/mounts: TestConvertTmpfsOptions: fix implicit memory aliasing (gosec) c3fa5b2e57 integration/plugin/logging: adjust file permissions in test (gosec) 9fc2b45fa5 fix vendor of github.com/containerd/containerd 73fae59cef golangci: remove invalid govet config 1188e80cc5 golangci: move gosec exclusions to linters-settings section a0807e7cfe golangci: set go version to prevent fallback to go1.17 semantics 29e5bfb0f0 golangci: fix deprecated run option 7809dc08f1 golangci: remove global ignore for EXC0006 / G103 (gosec) 79e9619412 pkg/archive: ignore G103 (gosec) 88c178328f libnetwork/drivers/bridge: ignore G103 (gosec) 62e137377b integration/image: ignore G103 (gosec) e567b816d2 golangci: sort linters-settings 0940460c2f libnetwork: endpointJoinInfo.UnmarshalJSON: fix shadowed variable (govet) e601e71681 Remove function isLinkable 083d595286 client: TestImageHistory: add minimal test for platform 73fabd5a21 client: TestImageHistory: use fixture for JSON response 5cfd326aa4 client: Client.ImageHistory: don't decorate error twice caf2d5dc7c Change meaning of return from DNSBackend.ResolveName ec3dde7001 Only allocate IPv6 addresses if IPv6 is enabled. fe856b94b5 Configure network endpoints after creating a container 788db583b1 Make buildSandboxOption a function instead of a Daemon method 4c553defce Separate Sandbox/Endpoint construction a715ccaaa3 Unconditionally update NetworkSettings 933fcc9814 Re-remove the SetKey OCI prestart hook 035b8afe04 chore: fix function name 330e717403 fix(systemd): start Docker engine *after* DNS resolution is ready 96039276b6 client: add utilities to encode platforms 816dbbfddc ci: re-enable firewalld jobs 8c3945c761 client: rename vars for consistency 0e72863b9d vendor: update buildkit to v0.17.0 17b76511d5 Fix: Duplicate event on network disconnect #48797 fbb595cb66 Remove libnetwork_test.TestMain 5f39567e56 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 741cc494cd builder-next: exporter: emptyImageConfig: use platform directly 9be6e902b5 Restore 27.x path for libnet's Bolt database 2cc21208e6 vendor: update buildkit to v0.17.0-rc2 cb966073ce container create: add warning for volumeDriver together with mounts 93255bd748 vendor: github.com/Microsoft/hcsshim v0.12.7 3dc042b1df vendor: sigs.k8s.io/yaml v1.4.0 2807c0c2d2 Revert "ci: run integration tests with firewalld enabled" db68a019fd c8d/save: Add tests 3cc736e95c chore: fix some function names ba454f573b c8d/inspect: Fix duplicate RepoDigests ae87c1d84c remove deprecated pkg/directory 2054fd99b1 pkg/longpath: remove deprecated Prefix const c1652ab357 volume/service: use local driver as default for anonymous volumes 31880791a4 volumes/mounts: test the actual MountConfig returned 275609eb37 volumes/mounts: test the actual error returned 6b0c4b5216 volumes/mounts: don't set "expected" values for fail cases e141be8752 volumes/mounts: remove backticks from test logs be7d57367b volumes/mounts: remove backticks from errors 0b290094b5 volume/mounts: windowsParser.ConvertTmpfsOptions don't use runtime.GOOS 75e8f57579 internal/safepath: Join(): remove workaround for ECI / Sysbox 4b60c68803 internal/safepath: Join(): log some unhandled errors 5fc5b0574b internal/safepath: kubernetesSafeOpen: explicitly suppress unhandled err 4e5c7eeafc daemon: cdiHandler.getErrors: remove var that shadowed import 0c43bc6891 demon: ImageService.Mount: use structured logs 5c48736863 remove redundant alias for runtime-spec 352b4ff2f1 volume: VolumesService.Create: fix log-level for debug logs 2aaae08ade Cleanup legacy mirror string to registry host b3569ebd5a Add HTTP fallback to all insecure registries 1c34581812 Use daemon config to check for legacy config 8b4cb6f58c Update host resolver to use containerd host config 8e0bf25bc3 container: update confusing GoDoc for Container and State f2a3acc104 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 d9a2ca7b49 vendor: go.opentelemetry.io/otel v1.28.0 070d6c75a7 vendor: google.golang.org/genproto/googleapis/api f6361c86f094 c2029cb257 Update tmLanguage file to cover first escape character 95959f7000 vendor: github.com/prometheus/client_golang v1.20.5 10d57fde44 volume/mounts: fix anonymous volume not being labeled 7d7089247c api/types/filters: GetBoolOrDefault: remove unreachableCode f31188bc4c vendor: github.com/cenkalti/backoff/v4 v4.3.0 c3cab4170b vendor: github.com/go-logr/logr v1.4.2 d2557466c6 vendor: google.golang.org/protobuf v1.34.2 c98c6d4f08 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 a6d5b48e67 vendor: github.com/opencontainers/runc v1.2.0 bb364cc0f3 inte/t/networking: delete veth ifaces before netns 4ab7644d8d c8d/load: Don't ignore missing platform when requested 533e7d150a From 28.0.0, don't migrate per-endpoint sysctls. b79bba6b68 Remove feature flag "windows-dns-proxy" 88b90ebbd2 vendor: github.com/opencontainers/selinux v1.11.1 5c72a95a30 client: prevent idle connections leaking FDs 0105091745 vendor: github.com/cilium/ebpf v0.16.0 51dd387bc9 vendor: github.com/cyphar/filepath-securejoin v0.3.4 6be2074aef daemon: use OwnCgroupPath in withCgroups d4159a7e73 ci/gha: enable go caching 0acdc37a20 container: remove deprecated ErrNameReserved, ErrNameNotReserved 1dcb7af2cb daemon: remove Daemon.containerRoot, Daemon.newBaseContainer 7c087c3267 Fork buildkit resolver logic to daemon package aba8df74a1 Add TestDirectRoutingOpenPorts c9fdeaf70e Explicitly DROP packets for ports/protos that aren't mapped. 6634fc5136 Allow ICMP in routed mode 6131322c6f daemon: remove deprecated Daemon.IsPaused 692024a18c daemon: remove deprecated Daemon.Exists 3bbb9749f4 c8d/test: Add memoryLabelStore 3f745f2b21 c8d/list: Extract fake service helpers 1bb5f8bb67 update to go1.23.2 a8cd0fc4d4 vendor: go.etcd.io/etcd/server/v3 v3.5.16 5f994c49e8 vendor: go.etcd.io/etcd v3.5.16 ac6e32cb5c daemon: deprecate Daemon.IsPaused d47c31ffdd daemon: deprecate Daemon.Exists d9ae34289a daemon: Daemon.newContainer: explicitly return nil-error 303530c1f5 daemon: Daemon.newContainer: inline Daemon.generateHostname 7faaa3afa8 client: explicitly return zero-type on failures in prune functions 0539b7073e pkg/stringid: optimize GenerateRandomID 7ebe625db7 pkg/archive: move deprecated NewTempArchive, TempArchive to test-utils b313fcb8ff pkg/archive: remove deprecated CanonicalTarNameForPath c837027a9c pkg/stringid: replace TestShortenIdXXX with TestTruncateID table test 83f17b0cbb pkg/stringid: remove deprecated IsShortID, ValidateID 77f97926ad daemon: remove secretsSupported utility c0b86dd068 daemon: remove configsSupported utility 5208e2954c daemon: deprecate Daemon.Register and make it internal d122ea0aea api: GET /images/json: preserve original manifest order 1aba291cd4 Releases container layer on export 66f159dc24 build: log when build is cancelled cca7085464 cmd/dockerd: Add workaround for OTEL meter leak 21b0d5f0c1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e fafdcd1194 dockerd-rootless-setuptool.sh: let --force ignore smoke test errors e7e555f573 distribution: remove formatPlatform utility abed0e1f97 client: ContainerResize, ContainerExecResize: don't overflow width/height ed44a05607 api: backend.ContainerExecResize: pass context and use uint32 for width, height 2b2aa69100 api: exec resize: improve errors for invalid width/height 8553d34593 api: backend.ContainerResize: pass context and use uint32 for width, height d19aa0c590 api: container resize: improve errors for invalid width/height 1dd9d2c780 api/server/httputils: add Uint32Value utility 0548fe251c Enable bridge netfiltering if userland-proxy=false 039e164bf5 api/server/httputils: DecodePlatform: improve test-coverage a8bfa83667 Fix: setup user chains even if there are running containers 1701bce9e0 api/server/middleware: use structured logs for debug-logs 4e840b9e29 volume/service: change some logs to use structured logs bca54a6838 daemon: killWithSignal: use more structured logs 44010e76c2 integration/container: add TestExecResize 944dc4a559 integration/container: TestResize: add more test-cases 3f2e9da010 api/server/router/container: move API adjustments to API 0c595fe781 api/server/router/container: fix inconsistent receiver name 59cf8e8565 Add iptables doc for a gateway-mode=routed network 19328fdd4f Add iptables doc for a --internal network bc84b4b6d9 Add iptables doc for a network with icc=false a8eaeba3f9 Add iptables doc for a network with userland-proxy disabled ac4a95d1d0 Add iptables doc for a user-defined network 20571e453b Generate iptables documentation a602054826 daemon: fix restoring containers with name matching an ID 71977a841c daemon: Daemon.registerName: inline validateID utility 4e567e1622 ci: run integration tests with firewalld enabled 8883db20c5 hack: run firewalld when $DOCKER_FIREWALLD is set 6c6174b371 cmd/docker-proxy: UDP: reply to clients with original daddr a0a0bbae6c Discard ErrDumpInterrupted and return data after maxRetries 3cf90ca73f container: deprecate ErrNameReserved, ErrNameNotReserved 0200c58c4a container: viewDB.ReserveName, view.GetID: return errdefs errors 0603bd9577 container: viewDB.withTxn: don't wrap errors 0d36ab1875 container: TestNames: don't string-match error assertions d9627b6159 docs: api: document w (width) and h (height) query params as required 2a3a7e8ee8 api: document w (width) and h (height) query params as required a051aba82e gha: shorter time limits for smoke, validate 91c448bfb5 gha: use "ubuntu-24.04" instead of "ubuntu-latest" 9a14299540 gha: dco: small tweaks to running the container 3cb98d759d gha: dco: update ALPINE_VERSION to 3.20 7da4ab9a91 README: add some badges cfe0d2a131 gha: build (binary), build (dynbinary): limit to 20 minutes e75f7aca2f gha: dco: limit to 10 minutes 4a2361ea09 pkg/authorization: update link to API documentation 5b149d3faa client: update link to API documentation 0f8f143a27 docs/api: version-history: update documentation links e06245a2a6 client: imageBuildOptionsToQuery: omit "default" networkmode b13cf4fc5f client: imageBuildOptionsToQuery: only send "rm" when disabling 805e2c67e2 builder/builder-next: Builder.Build: use network-mode consts 740798da34 client: imageBuildOptionsToQuery: omit empty values from query c68c9aed8c gha: restrict cross and bin-image to 20 minutes 7fe04c142d vendor: github.com/moby/buildkit v0.17.0-rc1 cd551b936b daemon/containerd: getPushDescriptor: fix formatting of platform in errors c16be54040 daemon/containerd: touch-up errPlatformNotFound error 91f74c2fe0 Disable iptables/ip6tables in two tests to remove conflict 8681b3c2ac images: GetImage: touch-up error message for missing platform d31c241ea5 PushImage: remove misleading error about --platform without containerd 037bac89fc gha: remove stray double empty line 26049febb2 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452 6b7e2783d1 gha: add guardrails timeouts on all jobs 7fa6d3c230 integration/build: remove TestBuildWithSession, and fsutil direct dependency 2e699872bc vendor: google.golang.org/grpc v1.66.2 e007ef71c1 vendor: google.golang.org/protobuf v1.34.1 30b6e58242 vendor: github.com/cespare/xxhash/v2 v2.3.0 4592ce42b6 vendor: golang.org/x/tools v0.25.0 36549fb56e vendor: golang.org/x/mod v0.21.0 cc80652bcd vendor: golang.org/x/net v0.29.0 9d6db83acc vendor: golang.org/x/crypto v0.27.0 6e32888caa vendor: golang.org/x/text v0.18.0 51cf0ed303 vendor: golang.org/x/sys v0.25.0 6b7565ba40 vendor: go.etcd.io/bbolt v1.3.11 02d4fc3234 gha: buildkit: make sure expected Go version is installed d7ff538467 Fix iptables rule descriptions 77e51657fe cmd/docker-proxy: re-add SO_REUSEADDR 38f0483ea7 Set NODAD on bridge IPv6 addresses 58f4e916a3 build: create distinct history db for each store 367125e0cc Use `pools.Copy` for archive file copy operations 2f02f456f5 Fix comments fd0d008504 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350 7ca9e9b496 libnet/d/bridge: port mapping: proxy LL connections 49ab30ea2c Fix vendoring for moby/docker-image-spec 7eb508e14c api: postImagesLoad: fix API version for platform 5875b6e8cf inte/networking: test access to published ports from remote host 2552782c1d inte/networking: test accessing a published port from the host 98efe665a5 Log rather than error if port mapping is overspecified 339592f59b Pass context to the port mapping code ca4c68ab95 update to go1.22.8 c866a7e5f8 daemon/exec: don't overwrite exit code if set 4babd72186 tests: skip docker-py exec exit code test e6488c9c0e runconfig: validateNetContainerMode: simplify validation 5bdbc2f026 client: ContainerCreate: normalize CapAdd, CapDrop capabilities be248d18b5 client.ContainerCreate: use container.CreateRequest instead of local type 98d74e3a3c Update download-frozen-image-v2.sh added OCI v1 support 91df504bf1 inte/networking: move port mapping tests into a dedicated file 6a1d8a9899 daemon: add IPv6 loopback as insecure registry 7624a6bfa5 Dockerfile: update compose to v2.29.7 233dce3dba Dockerfile: update docker CLI to v27.3.1 edcefd4efb libnet/i/kv/boltdb: fail fast in case of contention ed08486ec7 libnet/ds: simplify datastore.New() 3ca91a6a12 libnetwork: unit tests: drop OptionBoltdbWithRandomDBFile 450200b4a6 gha: add CodeQL Analysis workflow 32b9e7b8b9 libnet/i/kv/boltdb: remove unused field 'timeout' 4f1d739de5 gha: govulncheck: make sure read permissions are set 8c598b1005 cmd/dockerd: runDaemon: extract platform-agnostic code 5228850225 cmd/dockerd: windows: don't use Fatal log to prevent early exit 0aebbd0ba9 cmd/dockerd: use golang.org/x/sys/windows/service param-change consts b186261b84 cmd/dockerd: un-export DaemonCli, NewDaemonCli 6f83fda310 cmd/dockerd: construct context in main 52694ebe16 cmd/dockerd: windows: move setting PIDFile location to setPlatformOptions 44a3bba2a2 cmd/dockerd: apply options when creating daemonCLI, not when starting 5c1b037ff5 cmd/dockerd: rename loadCLIPlatformConfig to setPlatformOptions 1388d959bc cmd/dockerd: set default configfile location as part of newDaemonOptions 19a8e7ff7e cmd/dockerd: getDefaultDaemonConfigFile: add GoDoc for Windows implementation 388c0a8cda cmd/dockerd: remove unused error-returns 1624ae197e cmd/dockerd: move Windows code for data-root 333cfa6402 Fix merge problem db25b0dcd0 Only enable bridge netfiltering when needed 605f51172a Dockerfile: update compose to v2.29.4 3d4831a23f Dockerfile: update buildx to v0.17.1 45a9dde660 man: dockerd: add description for --log-format option c4aaa97f02 man: remove docs for deprecated --api-cors-header c2fc1f4a40 internal/opts: SetOpts: invalidate empty option-names 908bb959e7 internal/opts: SetOpts.Set: remove redundant var assignment 758cca6036 internal/opts: SetOpts,NamedSetOpts: test for optional value 50e83a0713 man: dockerd: value is optional for --feature flag f9c0103413 Do not DNAT packets from WSL2's loopback0 2b6550bb2e man: fix duplicate word in --feature flag description edaa0eb56d Add linting rules to spot use of un-wrapped netlink functions. 00bf437d84 Add nlutil functions to retry on netlink EINTR 8b0e94ffaf Update dlv in the dev-env 3dd96ce3c4 Fix enableIPv4 for old networks fa06acc851 man: update dockerd man-page to include --feature flag ff191c58f7 api: info: deprecate "Commit.Expected" fields f13c08246d Add feature to daemon flags fefa98ae90 c8d/prune: Keep deletion order stable 521fa833fe images: Support platform selection on graphdrivers f143f4ec51 image/save&load: Support `Platform` parameter ab075ecd10 image/history: Support `Platform` parameter 5128007116 Explicitly disable nvidia device injection for --gpus=0 adb00d3d55 TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping 23e79a261e c8d/prune: Add OTEL spans e4c2eb9d8a c8d/prune: Keep the last tagged image instead of creating dangling image 962da27cdf Dockerfile: update compose to v2.29.2 2b43979395 API: bump version to 1.48 e5e8addeee Dockerfile: update buildx to 0.17.0 d291722110 Dockerfile: update docker CLI to v27.2.1 c095dbe512 project: update 23.0 EOL and add 25.0 LTM branch 43036f350a Dockerfile: update RootlessKit to v2.3.1 c98aad0518 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.1 829aa845bb integration/system: rename vars to prevent shadowing imports 71e449de0a vendor: update buildkit to v0.16.0 7263cd226f image/tarexport: saveSession.save: inline variables 2e4079ff31 image/tarexport: saveSession.save: remove redundant Platform ab5c5df1d5 image/tarexport: rename variables that shadowed imports 5fd3cd2d77 layer: layerStore.deleteLayer(): remove redundant error-check f5cc04284d remove deprecated image/spec package 92195c1333 Dockerfile: update containerd binary to v1.7.22 b4a3e8a307 vendor: github.com/containerd/containerd v1.7.22 6f37e5a168 vendor: update buildkit to v0.16.0-rc2 1161b790cf seccomp: add riscv64 mapping to seccomp_linux.go 16d686c7bc internal/unix_noeintr: fix godoc for package 47d5ce0ef8 gha/bin-image: Also run on branches like `27.x` 09fc6ab2d9 docs/api: update deprecation version for erroneous fields (v1.46, v1.47) 3df03d8e66 api/swagger: update deprecation version for erroneous fields aca38a4218 docs: api: fix documentation for image push endpoint (API v1.25-v1.47) 07e31e393a api: swagger: fix documentation for image push endpoint fb6da4f4b7 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16 5403e3f4de libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16 928e5aa524 container/stream: Config.CloseStreams(): use errors.Join 59eba0ae13 Fix typos a2e14dd8bd update to go1.22.7 5ebc179cb1 test: update since session signature has changed f4261dbb75 vendor: update buildkit to v0.16.0-rc1 b5ec31f090 vendor: github.com/opencontainers/runc v1.1.14 2189aa2426 update runc binary to 1.1.14 4e0d1dfc17 docs/api: add documentation for API v1.47 d000f12fcc hack/make/.binary: enable pie mode on windows/arm64 28dc2f6fac Increase test handler sleep, replace deprecated assert c7f8557310 c8d/pull: Same error message for non-matching platform f5108e9c6b golangci-lint: temporarily disable G115: integer overflow conversion 9b11bb507b update golangci-lint to v1.60.2 3df59c9dcf update to go1.22.6 4cd5c2b643 hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5 e853c093bf hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5 bb899c654a api/types: move RequestPrivilegeFunc to api/types/registry 88b118688e man: create parent directories in install recipe 9bbe5a50dd Dockerfile: update registry to v3.0.0-beta.1 f4e82e2fb0 c8d/list: Don't exclude non-container images d6446d81d8 vendor.mod: golang.org/x/net v0.28.0, etc. 65fdd363a0 vendor.mod: golang.org/x/time v0.6.0 4bfdfd6f72 vendor.mod: golang.org/x/sys v0.24.0 78d0ef5e87 vendor.mod: golang.org/x/sync v0.8.0 492fe40052 vendor.mod: golang.org/x/mod v0.20.0 d7ff6b5085 vendor.mod: drop direct dependency on golang.org/x/exp 8e580efb73 portallocator: un-export PortAllocator.Begin, PortAllocator.End fb1ae4bdb7 portallocator: RequestPortsInRange: validate range once 05d784d6da portallocator: make newPortMap a regular constructor c00f6281d9 portallocator: RequestPort: skip RequestPortInRange as intermediate 78d88d06dc portallocator: use net.IPv4zero for defaultIP, and make it a property 630a47177b portallocator: use new instance in tests 1897a21d60 portallocator: ReleaseAll: remove unused error-return 2a2176f317 portallocator: RequestPortInRange: fix doc-link in godoc a88efd7359 vendor: github.com/containerd/containerd v1.7.21 de4fc1c927 Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only) 1ad5b5abb2 daemon: fix non-constant format string in call (govet) 005b488506 api/types: fix non-constant format string in call (govet) 0fd3a53c12 api/server/router: fix non-constant format string in call (govet) 4a93233b88 container/stream: fix non-constant format string in call (govet) 068c1bf3be libnetwork/drivers/bridge: fix non-constant format string in call (govet) f434cdd14a volume/testutils: fix non-constant format string in call (govet) 81a1ca0217 builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet) b56c58a860 layer: ignore G602: slice index out of range (gosec) c308bd3e0e internal/cleanups: fix non-constant format string in call (govet) 7b60a7047d libnetwork/cnmallocator: fix non-constant format string in call (govet) 06bfe8bab3 cmd/dockerd: fix non-constant format string in call (govet) 6008c42ca2 libnetwork: fix non-constant format string in call (govet) b79a4696ee integration-cli: fix non-constant format string in call (govet) 6bbacbec26 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors 3ca38f0b5e integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors 2b7a687554 integration-cli: use erors.New() instead of fmt.Errorf c7b36f8953 libnetwork: TestDNSOptions: remove redundant skip check 6bd7835cb6 integration-cli: remove redundant platform checks 0afe684685 c8d/pull: Replace pointer to interface with interface db40a6132b c8d/pull: Keep the replaced image as dangling 6ebe6a7353 c8d/load: Only unpack host platform images 728894b7d0 c8d/load: Don't fail whole operation if unpack failed 0db71bb629 vendor: dario.cat/mergo v1.0.1 2c498c6a74 vendor: github.com/vishvananda/netlink v1.3.0 6d0a5e31d7 vendor: github.com/vishvananda/netlink v1.2.1 55f693e7b7 integration/TestAPIImagesListManifests: Check `Containers` 29a2f6d339 c8d/list: Update benchmark to also have containers a5d75f6d27 c8d/list: Fix race condition when traversing containers 2f0180934d vendor: tags.cncf.io/container-device-interface v0.8.0 fe307b5dab libnetwork: resolvconf: remove dependency on errdefs afdfc04e10 libnetwork: resolvconf: remove var that shadowed import 6d94122217 logger/journald: plumb contexts into reader 9b6ba18fc9 logfile: Close reader when caller cancels c4ba1f4718 Dockerfile: update xx to v1.5.0 abcb9e972b libcontainerd/supervisor: set log-level through the config-file edfde78355 man: support bringing your own go-md2man 05d7008419 man: build dockerd man pages using make 1804f0c911 integration/container: rename var that collided with import 62bcc6ef50 libcontainerd/supervisor: consolidate platform-specific defaults f49fad75eb vendor.mod: github.com/microsoft/hcsshim v0.12.5 b93cf37dcd c8d/list: Don't require `opts.ContainerCount` for manifest containers cd148d39d9 feat(stream): log the event when stream copy failed c459986399 vendor: update buildkit to v0.15.2 6bb6befc37 c8d: Rename readConfig to readJSON 495fab8e66 c8d/list: Add test for total and content size 469c2ef3ec c8d/list: Fix `Total` size calculation e77e543b58 api/types/registry: fix godoc, and add some doc-links 218c08b283 plugin: fix deprecation comments 771377f9fa Test ipvlan IPv6-only 390713607f Allow ipvlan containers with no address b95f8e7799 Fix some ipvlan error types for the API 660e8118a4 Allow no-IPv4 on an ipvlan network 8427de3bac Test macvlan IPv6-only d599cc5842 Allow macvlan containers with no address f57e0dc2ff Fix some macvlan error types for the API a7a5de676d Allow no-IPv4 on a macvlan network 496b457ad8 Allow --ip-range ending on a 64-bit boundary 9c6d30481d remove leftovers for building docker-proxy on Windows 3cd28504de govulncheck to report known vulnerabilities a308f12ed8 add Austin Vazquez (austinvazquez) to curators 7b0ef10a9a migrate to github.com/moby/sys/userns 8411ecb5e3 Makefile: Add BIND_GIT variable 050afe1e1a api/list: Expose manifests f8b638b98f c8d/list: Use ReadConfig helper 85e9102dc9 api: Bump default version to 1.47 efb3c50799 swagger: Disable ImageSummary model generation b24c2e95e5 update to go1.21.13 925b484a40 No fallback nameservers for internal resolver d29767431c Use host netns for host's ext-dns servers 344039b9ae Populate DNS records for IPv6-only endpoints b4cee5c3ee Removed all mentions of "please" from docs and messages f1ec84314d docs: add default-network-opt daemon option 23812190c3 docs: remove devicemapper 690d166632 man/dockerd.8: assorted formatting fixes 374b779dd1 man/dockerd.8: escape asterisks and underscores 386d0c0fbc docs: update dockerd usage output for new proxy-options 54971ac807 Fix styling of arguments a8b8f9b288 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 68e9223289 docs: remove documentation about deprecated cluster-store 6c702167bf Document `--validate` daemon option af45195a21 Update man-page source MarkDown to work with go-md2man v2 562a6d2b13 docs: update for cgroup v2 and rootless 7cf2132655 docker run: specify cgroup namespace mode with --cgroupns 1cbcd5d47a daemon: document --max-download-attempts option 3cfa74724c Update document links and title. 462f38bd8b Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054 13ff896b38 Update docs and completion-scripts for deprecated features f3c3b05b50 Added docs for dockerd 20f8455562 fix a number of minor typos c23d4b017a Introduce/document new IPC modes 25baee8ab9 docs: add documentation for dm.libdm_log_level 7d3f09a9c3 Restore dockerd man page ea914a66a2 Use retErr in Network.ipamAllocate cdea750966 Tell RootlessKit about port mappings when --userland-proxy=false b3fabedecc Create docker-proxy TCP/UDP listener sockets in the daemon dac7ffa340 Remove rootlesskit-docker-proxy f1e0746c08 Tell RootlessKit about docker-proxy port mappings 384ca56d90 Fix error type used for ProgramExternalConnectivity 7a8663c9ea cmd/docker-proxy: drop FrontendAddr() method 88fb0c9fec cmd/docker-proxy: drop unused BackendAddr() method ba2f3c0a98 cmd/docker-proxy: pass open listener to proxy impl e0c7a839a8 Only build docker-proxy for Linux ee766ae7b1 c8d: Wrap matchRequestedOrDefault result with a platform 842c5c584e c8d/image: Add `matchRequestedOrDefault` 6617cdc66b daemon/c8d: Fill wanted platform in GetImageManifest 427b111943 c8d/history: Unmarshal only a subset of ImageConfig b9d04c07c4 c8d: Simplify `presentImages` into `getBestPresentImageManifest` 23d565cae3 c8d: Improve error message for platform not found e73c2a05b2 daemon/c8d: Simplify `presentImages` signature af84ddec13 vendor: github.com/containerd/nydus-snapshotter v0.14.0 1e5c0c4d77 vendor: github.com/containerd/nydus-snapshotter v0.13.14 dfe36fa226 touch-up security policy 3b1341972b Only assign an IPv4 address if required 15e5f6868a Don't auto-allocate IPv4 IPAM if !enableIPv4 c0a6145f6d Enable IPv4 in the unit tests that will need it. b42f4b96aa Check for an IPv6 gateway before connecting to docker_gwbridge 034a5a8986 Reject swarm n/w creation with IPv4 disabled. c91dc7e6dc Reject Windows network creation with IPv4 disabled. a86a9e3aa4 API 1.46: end per-interface sysctl migration in major release 17adc1478b Migrate per-endpoint sysctls until 28.0.0 d44f869a2d vendor: google.golang.org/grpc v1.62.0 716ec490db vendor: golang.org/x/time v0.5.0 ac145a82fd api/types: NewHijackedResponse: fix typo in GoDoc 80822715cd plugin: fix typos in GoDoc 1f542d5d6c Set EnableIPv4 for predefined networks 903daa4dc4 Add flag 'enableIPv4' to libnetwork.Network d4d8611164 Added API create/inspect option EnableIPv4 c7dec1c67a docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46) 66b5b8bfa8 api/swagger: fix x-nullable for SystemInfo.Containerd 3279b4f8f4 hack/make: suppress "not mounted" message a23dcf4798 Bump API version to 1.47 403f9dbc42 project: update supported release branches 96762a28c7 libcontainerd/supervisor: remove remnants of adjusting oom-score 2a71815b83 daemon: remove unused import 2b5ffa0b63 gha: set permissions to read-only by default 7a92f21445 daemon: isPermissibleC8dRuntimeName: use local utility to reduce c8d deps 2847c4b7fe libnetwork/networkdb: switch to go-immutable-radix v2 fca57ac32f Split Linux/bridge and Windows/nat integration tests ef8e2fe282 Use retErr in Endpoint.sbJoin 58808e7748 Remove code to update Network.enableIPv6 if false 8f1989556a Trivial tidy-up of Endpoint.assignAddress() 6fe26e0629 Add IPv6 to the null IPAM driver dcf922e266 daemon: openContainerFS: log cleanup errors aa60f7891b daemon: openContainerFS: rename output var 3539fef440 daemon: setupMounts: rename var that shadowed import a19c2ccc7b daemon: rename "mounts" type to reduce shadowing 39c79e08e4 daemon: move sortMounts to a platform-agnostic file cdbfae1d3e api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize cd11843df8 images: Extract ImageInspect from GetImage 1baf8f9e60 vendor: update buildkit to v0.15.1 2ce811e632 migrate to github.com/moby/sys/user/userns 91dfc326cf vendor: github.com/moby/sys/user v0.2.0 1e2ccf8046 vendor: github.com/gofrs/flock v0.12.1 077b32ac4e vendor: golang.org/x/sys v0.22.0 4c97ff777d Clean up networks in 'integration/network' tests e2237240f5 dockerd-rootless-setuptool.sh: move RootlessKit smoke test a3efa3026b contrib/check-config.sh: remove special case for userns on CentOS/RHEL 7 6d0b508699 daemon: remove setMayDetachMounts (set may_detach_mounts=1 on startup) ae96ce866f remove support for setting CORS headers (deprecated) dbf6873f45 Logfile: Add tracing spans 1b46faf233 Logfile: skip files that are corrupted 77f2d90e27 Refactor logfile reads b37c8a03c0 Fix time comparison in sharedtemp implementation 21fd5a3f30 vendor: github.com/moby/sys/sequential v0.6.0 e0b98a3222 gha: check-pr-branch: fix branch check regression fbbda057ac update containerd binary to v1.7.20 f460110ef5 gha: check-pr-branch: verify major version only 6a6b49f2de vendor: github.com/moby/sys/symlink v0.3.0 68636d56fc vendor: github.com/moby/sys/signal v0.7.1 44b266ab59 vendor: github.com/moby/sys/mount v0.3.4 dc4a12874e vendor: github.com/moby/sys/mountinfo v0.7.2 55a5f3fcaa vendor: github.com/containerd/containerd v1.7.20 a42f7fd717 Dockerfile: update compose to v2.29.0 97b51c6b72 Dockerfile: update buildx to v0.16.1 b37c983d31 README: replace obsolete Docker EE mention 508939821b daemon/containerd: rm use of regexp b66d4b567a image/v1: rm regexp use 1c0dc8a94f layer: rm regexp use 499c842c52 hack: explicitly control enabling the journald logging driver 5282cb25d0 If url includes scheme, urlPath will drop hostname, which would not match the auth check 2ac8a479c5 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com> 0fa71a4cfc vendor: cloud.google.com/go/logging v1.9.0 eafad2cb86 vendor: golang.org/x/oauth2 v0.21.0 9b782b8ff7 vendor: cloud.google.com/go/compute/metadata v0.3.0 68bd630830 vendor: update buildkit to v0.15.0 f649fd0c97 Fix API version in TestSetInterfaceSysctl 7f04a603f6 docs/api: Add missing ` 89781912c1 vendor: update buildkit to v0.15.0-rc2 8be292a7bb By-default, don't create an iptables rule to checksum SCTP 1787c364e0 vendor: update buildkit to v0.15.0-rc1 688301caf4 daemon/graphdriver: remove Capabilities, CapabilityDriver 185b1e3d69 Add lint rule to forbid old-style atomic ops 5e64a7a003 volume/service: switch to Go 1.19 atomics 1c102140f8 libnetwork: switch to Go 1.19 atomics 46133bdb8e libnetwork/diagnostic: drop unsound use of atomics 5044778433 distribution: switch to Go 1.19 atomics 2ab618696a daemon/images: switch to Go 1.19 atomics 30d740ada0 daemon/logger/ring: switch to Go 1.19 atomics 7ef0c7acbe d/logger/loggerutils: switch to Go 1.19 atomics e612990994 daemon/logger/journald: switch to Go 1.19 atomics 78893cdc05 daemon/logger/gcplogs: switch to Go 1.19 atomics 508f51044d daemon/containerd: switch to Go 1.19 atomics 71a299ff6a daemon: switch to Go 1.19 atomics 206445fa4f rootless: add `Requires=dbus.socket` 4776e6dd60 Remove IPv6 bridge RouteAdd() that always fails 066b7fa83c vendor: golang.org/x/net v0.25.0 7721408db7 vendor: golang.org/x/crypto v0.23.0 f43436e6b8 vendor: golang.org/x/text v0.15.0 342ce515ab vendor: golang.org/x/sys v0.21.0 2e58a29023 vendor: github.com/klauspost/compress v1.17.9 fb18966aa5 api/types/container: InspectResponse: keep old name for embedded type 837289ba62 update to go1.21.12 [part 2] 4d1d7c3ebe update to go1.21.12 398e15b7de update containerd binary to v1.7.19 d0aa3eaccf Migrate to github.com/containerd/platforms module 8983957ac5 vendor: github.com/containerd/containerd v1.7.19 73979f3f04 daemon/logger/journald: add //nolint:unused for readSyncTimeout ef356c53ba api/types: remove deprecated ContainerNode, ContainerJSONBase.Node 5b9ed8081b api/types: remove deprecated ImageLoadResponse d3defe9140 api/types: remove deprecated ImageImportSource 6cdb123b6f api/types: remove deprecated ImageSearchOptions 67b7b15674 api/types: remove deprecated EventsOptions 3cbc166d2e api/types: remove deprecated container stats types ec5cede0a2 api/types: remove deprecated ContainerStats 4ffe497ba4 api/types: remove deprecated CopyToContainerOptions 345e31ab96 api/types: remove deprecated ContainerPathStat 2bceb34717 api/types: remove deprecated ContainersPruneReport 0e64c9e93b api/types: remove deprecated ContainerExecInspect 6f0caec226 api/types: remove deprecated ExecStartCheck 13fbd394ee api/types: remove deprecated ExecConfig 665eef54db api/types: remove deprecated NetworksPruneReport d2256faa0e api/types: remove deprecated NetworkResource ffdd2de674 api/types: remove deprecated EndpointResource f0f2b8f7cb api/types: remove deprecated NetworkDisconnect cf9d9ff50d api/types: remove deprecated NetworkConnect 39c7b5f3e3 api/types: remove deprecated NetworkInspectOptions 64583771f0 api/types: remove deprecated NetworkCreateResponse c99e0bc8ae api/types: remove deprecated NetworkListOptions 48f147e8d3 api/types: remove deprecated NetworkCreate ff1f1c58d5 api/types: remove deprecated NetworkCreateRequest 4117a9308d api/types: remove deprecated VolumesPruneReport e0156f0f16 api/types: remove deprecated ImagesPruneReport 1abc8f6158 api/types: move container-inspect types to api/types/container 05b0e653dd api/types: move Container to api/types/container 84ffc644ef api/types: move ContainerState to api/types/image 7053007f71 api/types: move ImageInspect and RootFS to api/types/image da039ca918 api/types: move GraphDriverData to api/types/storage e12b7493b9 api/types: move Port to api/types/container 5517322cf9 api/types: move MountPoint to api/types/container c130ce1f5d api/types: move container Health types to api/types/container df22a511cb api/types: move container-networksettings types to api/types/container 53bc396ef4 c8d/build: Log `image tag` event when image was built with Buildkit 1506bbcfe8 builder-next: Add ImageNamedByBuildkit callback bce76d486e builder-next: Don't return error from exported callback e4d792a06d api/types/system: remove Info.ExecutionDriver 0f3273e71a daemon/graphdriver: move RefCounter to an internal package efdaca2792 pkg/rootless/specconv: move to internal b7d26f2f8f pkg/dmesg: remove deprecated package 3a3bb1cb50 pkg/directory: deprecate, and move to internal 80900bdbcd pkg/directory: fix comment, and remove import comments e55897977c daemon/graphdriver: simplify Checker, remove NewFsChecker, NewDefaultChecker 554db8f113 daemon/internal/fstype: make FsMagic values not platform-dependent 49f6e004f1 daemon/graphdriver: move FsMagic utilities to an internal package 09f62a8a61 runconfig/opts: remove deprecated ConvertKVStringsToMap 4a30231d05 runconfig: remove deprecated IsPreDefinedNetwork ed712ad0b9 runconfig: remove deprecated DefaultDaemonNetworkMode 13984ef185 runconfig: remove deprecated SetDefaultNetModeIfBlank 6e2b6399d7 runconfig: remove deprecated ContainerConfigWrapper d80a3f2e48 pkg/capabilities move to daemon/internal 625c795785 errdefs: FromStatusCode(): use early returns 81be279c6b daemon/logger, volume/drivers: remove redundant import-aliases f2970e5358 pkg/containerfs: move to internal a3e6ce95c4 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper e2ae6907c6 pkg/containerfs: remove CleanScopedPath and make it internal fa150ca759 cleanup: Remove unnecessary return value a2fe103f0d vendor: github.com/microsoft/hcsshim v0.11.7 dfbcddb9f5 Fix incorrect validation of port mapping 4de54ee14c Fix duplicate subnet allocations 6521057bb2 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ 969993a729 pkg/archive: createTarFile: consistently use the same value for userns 379ce56cd8 pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors af85e47343 pkg/archive: getWhiteoutConverter: don't error with userns enabled 080a8e1b6b libcontainerd: gofumpt 56fa45773f pkg/plugins: gofumpt 0e2d40c24a pkg/archive: gofumpt 84e43da752 libnetwork: gofumpt bb1b766ddb layer: gofumpt 07469b4509 internal: gofumpt 8e50a96a78 integration: gofumpt c3ac7fee26 integration-cli: gofumpt e765dd90ee daemon: gofumpt 181101c4a8 daemon/containerd: gofumpt 46b0102da4 daemon/config: gofumpt 4a89963f1e builder: gofumpt 8768145519 api/types: gofumpt 92346bcec6 api/server: gofumpt 6ada1cff02 fix some gofmt issues reported by goreportcard 84cabde357 daemon/graphdriver: deprecate GetDriver(), and remove its use b7896056c1 daemon/graphdriver: New(): update GoDoc 25d12b54d3 daemon/graphdriver: combine GetDriver and getBuiltinDriver 3928165cf7 Dockerfile: update docker CLI to v27.0.2 555dac5e14 daemon/graphdriver: remove support for external graphdriver plugins bc4991e443 layer: rename vars that shadowed imports 0ed172b700 daemon/graphdriver: rename vars that shadowed imports bbced07f96 builder/builder-next: applySourcePolicies: remove redundant check and vars 790035f754 Dockerfile: update compose to v2.28.1 95fae036ae update golangci-lint to v1.59.1 d4160d5aa7 pkg/archive: reformat code to make #nosec comment work again 04bf0e3d69 builder/remotecontext: reformat code to make #nosec comment work again 1fc9236119 api/types: deprecate ContainerJSONBase.Node, ContainerNode ca396dfaaa awslogs: Prevent close from being blocked on log 9893520c62 libnetwork: Mark flaky tests d0d8d5d97d hack/unit: Rerun failed flaky libnetwork tests a52aab8598 project,vendor.mod: document more clearly that we are not a Go module 1e28299f77 project: document currently known packagers f502f49e49 project: document modern branch and tag practices Bumping docker-cli to version v28.0.1, which comprises the following commits: d75f8d83d Add detailed descriptions for --ulimit options in docker run documentation 75595836f vendor: github.com/go-jose/go-jose/v4 v4.0.5 4e7497e9c Update dockerd command line ref, default bridge opts be669099c Update dockerd command line ref, changes in 28.0 427c1361c gha: add docker 28 to test matrix aad2ae50e docs: network ls add heading and anchor for "--no-trunc" 8a1b096e7 docs: fix missing anchors in swarm reference pages c99d3312e docs: fix broken anchor-link in "container restart" reference 0cff34098 cmd/docker: do not print error status on exec/run 8f5573857 completion: add completion for docker service flags 768d10767 completion: add completion for docker node flags d5e6e2ec6 completion: add completion for node names 7e71782ba cli/command/context: fix error-handling of skip-tls-verify 762d59359 completion: use service names, and support DOCKER_COMPLETION_SHOW_SERVICE_IDS 33f327a98 vendor: github.com/docker/docker v28.0.0-dev (af898abe4466) f977b923c Fix missing link from Configure node healthcheck heading f53cee5dd vendor: github.com/docker/docker v28.0.0-rc.3 fe349e6a6 vendor: github.com/docker/docker 00ab386b5a2e (master, v28.0.0-rc.3) 136901961 vendor: github.com/docker/docker v28.0.0-rc.2 a8affefee golangci-lint: replace deprecated `tenv` linter in favor of `usetesting` 1c8243cc9 golangci-lint: fix invalid nakedret config, disallow for any func length a5020ea16 cli/command/container: don't use naked returns (nakedret) e569b9f74 cli/internal/oauth: don't use naked returns (nakedret) 3e9fa43ef cli/command/trust: fix "usetesting" linting errors aca0bd775 cli/command/trust: fix "usetesting" linting errors b2f3c1249 Dockerfile: update golangci-lint to v1.64.5 2b169c1ab golangci-lint: enable revive "line-length-limit" linter a67c65657 golangci-lint: enable revive "unused-receiver" rule 71c40dfa7 golangci-lint: sort revive rules a35b899df cmd/docker: fix "unused-receiver" linting 1a4491f8c cli/command/stack: fix "unused-receiver" linting 994e1b7ca cli/command/service: fix "unused-receiver" linting 5ef673bb1 cli/command/system: fix "unused-receiver" linting e71380eb5 cli/command/container: fix "unused-receiver" linting 4827fdef9 cli/command/trust: fix "unused-receiver" linting 3e44cc4d0 cli/command/image: fix "unused-receiver", "line-length-limit" linting e2f28fac4 cli/command/registry: fix "unused-receiver" linting a54d356a7 cli/command/swarm: fix "unused-receiver" linting 25e6b2da0 cli/command/formatter: fix "unused-receiver" linting 450768c31 cli-plugins/manager: fix "unused-receiver" linting e5f3cc14c internal/test: fix "unused-receiver" linting 1b3718f45 cli/command: fix "unused-receiver" linting d27f6a61a cli/registry: fix "unused-receiver" linting 72b32c69c internal/test/notary: fix "unused-receiver" linting ba3f4fb41 cli/internal/oauth/manager: fix "unused-receiver" linting f0f19c6d4 cli/trust: fix "unused-receiver" linting c8bd0a7e5 cli/manifest: fix "unused-receiver" linting 20b4ab366 cli/compose: fix "unused-receiver" linting 1e7add9f4 cli/internal/oauth/api: fix "unused-receiver" linting 9b62e5740 cli/config/configfile: fix "unused-receiver" linting f79193c22 opts: fix "unused-receiver", line-length-limit linting d0c3380ce cli/connhelper/commandconn: fix "unused-receiver" linting fdc665820 cli/config/credentials: fix "unused-receiver" linting 88b2e78e0 internal/tui: fix "unused-receiver" linting 20c15cee9 cli/compose/loader: shorten skip-comment to please the linters cac88ca34 cli/command: wrap some long lines (revive) eef4127de cli/internal/oauth/manager: ignore line-length-limit d8e76bc33 cli: define const for magic value 9fda9134a cli/command/service/progress: define const for magic value 3825d3792 cli/command: define some consts for repeated values 2f65cf7d1 cli/command: fix some unused-receiver linting a368e3eb5 cmd/docker: fix unused-receiver (revive) add32e4b5 cli/compose: Handle Volume Subpath 4cc2dce80 cli/compose: Fix Image Subpath e868f0f58 cli/command/container/opts_test: Fix entrypoint parsing logic c2ba77de4 vendor: github.com/docker/docker 57d4d23825f4 (master, v28.0.0-rc.2) 1d3eb6f95 vendor: github.com/docker/docker 5cc3f1dab895 (master, v28.0.0-rc.2) 591fcb273 vendor: golang.org/x/sys v0.29.0 1edc4e07d gha: Mirror PR template and validate PR workflow from moby a656dfd40 Restrict completion for some commands with a limit paramter for ImageNames 04b1b4e08 Add image mount options c6a7f9a64 vendor: github.com/docker/docker b570831cc3a3 (master, v28.0.0-rc.2) 018bf1b23 vendor: google.golang.org/grpc v1.69.4 558ebd592 vendor: github.com/spf13/pflag v1.0.6, remove local IPNetSliceVar fork 2c17edf80 cli/connhelper/commandcon.New: pass context with WithoutCancel 61a3b4bd5 Remove preceding white space from cobra help template 1acf32cdc Dockerfile: dev-container: update buildx v0.20.1 bb74513ef Dockerfile.dev: bump github.com/josephspurrier/goversioninfo to v1.4.1 7b3f264a6 Dockerfile.dev: bump mvdan.cc/gofumpt to v0.7.0 aecc31039 Dockerfile: bump gotest.tools/gotestsum v1.12.0 e1a9d1cd3 Dockerfile: update golangci-lint to v1.63.4 df8c19d8f vendor: gotest.tools/v3 v3.5.2 3c0d703ac vendor: github.com/docker/docker/v28.0.0-rc.1 2815d2337 add //go:build directives to prevent downgrading to go1.16 language 01da8a582 vendor: github.com/docker/docker 6c3797923dcb (master, v28.0-dev) 76e0088b5 minor cleanup 85a77af59 Don't print "context canceled" if user terminated 7e83ff773 bump version to v28.0.0-dev 6d7afd48a login: improve text on already authenticated and on OAuth login 1d9d349c1 update to go1.23.6 81da375c4 cli/command/service: runScale: use errors.Join, and cleanup 09b513ecf cli/command/service: runRollback: remove intermediate vars aa96cb7aa cli/command/volume: use errors.Join be985bd28 cli/command/stack/swarm: use errors.Join f1193effc cli/command/service: use errors.Join f9e433556 cli/command/secret: use errors.Join 2a9fd4a93 cli/command/node: use errors.Join f8729c6da cli/command/manifest: use errors.Join 1fd9d0dd3 cli/command/manifest: pass manifest-store and handle context f431f6156 cli/command/inspect: use errors.Join 7147e85f6 cli/command/image: use errors.Join 2b9a4d5f4 cli/command/context: use errors.Join 150f27b68 cli/command/container: use errors.Join 791e06b43 cli/command/config: RunConfigRemove: use errors.Join 632f179e8 cli/command/image: minor cleanups e81d76ffe cli/command/container: minor cleanups deaa60118 cli/command/config: minor cleanups c950d48f7 image/tree: Chips to represent "in use" c51be7776 cmd/docker: add cause to user-terminated `context.Context` 8169a5142 jsonstream: Display: rename var that shadowed type a4288003b service/progress: ServiceProgress: avoid fuzzy matching service ID in loop e88b1939f service/progress: newReplicatedJobProgressUpdater: slight cleanup dea59eabb cli/command/stack/swarm: waitOnServices remove redundant check for multi-error 37b25f226 cli/command/plugins: runRemove: fix incorrect use of errors.Join 007e88ec3 TestCheckpointCreateWithOptions check both "keep-running=true/false" 31b819828 cli/command/volume: TestVolumeCreateClusterOpts: minor fixes and refactor 5b8c08d19 cli/command/volume: TestVolumeCreateCluster: minor fixes and refactor a8265e72b cli/command/volume: TestVolumeCreateWithFlags: minor fixes 8b5e5539e cli/command/volume: TestVolumeCreateWithName: minor fixes and improvements 2e266001c cli/command/volume: TestVolumeCreateErrors: assert unhandled errors 987da0957 cli/command/volume: remove example and var for long description 13ef82974 cli/flags: suppress some errors dc5a4501a cli/command: minor cleanups: use Println, suppress errors cd6d902df cli/command/inspect: remove additional newline from log 10f5b3f73 cli/command/volumes: minor cleanups: use Println, rename vars 299aae041 cli/command/trust: minor cleanups: use Println, rename vars 5cfc89c1c cli/command/system: minor cleanups: use Println, rename vars 8c5e85d4c cli/command/swarm: minor cleanups: use Println, rename vars 925b8fe34 cli/command/stack: minor cleanups: use Println, rename vars aa74f931d cli/command/service: minor cleanups: use Println, rename vars 016dbef44 cli/command/registry: minor cleanups: use Println, rename vars 53aed6119 cli/command/plugin: minor cleanups: use Println, rename vars 35e74d58e cli/command/node: minor cleanups: use Println, rename vars 886f2295c cli/command/network: minor cleanups: use Println, rename vars 5d3bdf8ac cli/command/manifest: minor cleanups: use Println, rename vars c8f27b027 cli/command/image: minor cleanups: use Println, rename vars a0ca41e6f cli/command/formatter: suppress some errors 82e2efbbf cli/command/context: minor cleanups c462eaee1 cli/command/container: minor cleanups: use Println 8650ffef3 cli/command/checkpoint: minor cleanups: use Println, rename vars b10b79e6f cli-plugins: minor cleanups: use Println 2e26ce145 e2e/testutils: remove uses of pkg/errors in tests 4de5e9212 internal/test: remove uses of pkg/errors in tests c55b39a2e cli/config/credentials: remove uses of pkg/errors in tests 832f5fa2c cli/compose/convert: remove uses of pkg/errors in tests 45d81f849 cli/command: remove uses of pkg/errors in tests a85a94f46 cli/command/system: remove uses of pkg/errors in tests 694d24800 cli/command/swarm: remove uses of pkg/errors in tests 8b09ee1e1 cli/command/stack: remove uses of pkg/errors in tests ec5ae0c2d cli/command/secret: remove uses of pkg/errors in tests c50068f7e cli/command/plugin: remove uses of pkg/errors in tests 2b02e05f9 cli/command/node: remove uses of pkg/errors in tests 38f61539e cli/command/network: remove uses of pkg/errors in tests d6c26471d cli/command/manifest: remove uses of pkg/errors in tests f29fdd309 cli/command/image: remove uses of pkg/errors in tests d30c894af cli/command/idresolver: remove uses of pkg/errors in tests 5a99ea9ad cli/command/container: remove uses of pkg/errors in tests 0d913efe8 cli/command/config: remove uses of pkg/errors in tests 957be84a3 cli/command/checkpoint: remove uses of pkg/errors in tests 10aca7dd5 cli/command/volume: remove uses of pkg/errors in tests a87cb974f remove dockerd man-page (moved back to moby repository) 6ab9b92aa Makefile: add "shell-completion" target 0760e8513 Dockerfile: update to alpine 3.21 2c35778a6 Allow '--link' with '--network bridge' 1546f023f Dockerfile: update compose to v2.32.4 7b0724270 Dockerfile: update buildx to v0.20.0 91adb70d6 pkg/command: wrap `jsonmessage.DisplayJSONMessagesStream` with go context 81b0bb58b gha: Adjust release branches 3c0691146 update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) 26010e4c3 image/tree: Print longest names first and use full width f906139fc cli/tree: Use single character triple dot 4c2fece0c cmd/docker: enable cobra completion descriptions 48dbdc6f2 fix(dockerfiles): Update CMD instruction in 'Dockerfile.dev' to use exec form instead of shell form 58bf0f184 switch to gopkg.in/yaml.v3 9abd0ebdf cli/command: update semconv to 1.26.0 2f42b3272 vendor: otel v0.56.0 / v1.31.0 3d9b86116 vendor: github.com/mattn/go-runewidth v0.0.16 aa540679e vendor: github.com/containerd/platforms v1.0.0-rc.1 d3ca99585 vendor: github.com/creack/pty v1.1.24 b412f7199 vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 324edc3d5d38 7244f7d42 update cli-docs-tool to v0.9.0 6f3ba987b vendor: github.com/docker/cli-docs-tool v0.9.0 97a14c456 update go-md2man to v2.0.5 acbdad955 completion: replace fluentd-async-connect with fluentd-async 3da5f5893 docs: mark logger opt 'fluentd-async-connect' as removed 0df55307c vendor: github.com/docker/docker 69687190936d (master, v28.0-dev) cc571902b ci: update bake-action to v6 987befaea gha/build: Publish bin image for release branches 216674c3e vendor: github.com/docker/docker 50212d215ba7 (master, v28.0-dev) bf2dae22d cli/command/plugin: runCreate: minor cleanup a289f11ac vendor: github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554 7e8f94903 docs, man: remove --allow-nondistributable-artifacts flag 760326694 contrib/completion: remove --allow-nondistributable-artifacts flag 2334df110 Deprecate configuration for pushing non-distributable artifacts 2fc32c707 vendor: github.com/moby/term v0.5.2 e1a0c377b vendor: github.com/Azure/go-ansiterm faa5f7b0171c f42c0ccd0 contrib/completion: remove deprecated --api-cors-header 2db88599f contrib/completion: remove --oom-score-adj daemon flag eb5c507cd docs: dockerd: --oom-score-adj flag 7b37f30da Use io.copy for build context compression 7b7a4c020 docs, man: remove confusing example for "--isolation" 25f02bc04 vendor: github.com/docker/docker 6f6c3b921180 (master, v28.0.0-dev) 8c0cb3051 Fix cp test to separate source and destination c8c47b1dd golangci-lint: depguard: prevent uses of pkg/system 76ec0ea2e vendor: github.com/docker/docker a72026acbbdf (master, v28.0.0-dev) a8f83d5d9 TestRunCopyFromContainerToFilesystem: use Tar without options 0c04dc05b golangci-lint: sync some depguard settings with moby/moby cc65127cb vendor: github.com/docker/docker ad6929339acd (master, v28.0.0-dev) 6f47bce41 vendor: golang.org/x/net v0.33.0 83156e662 vendor: golang.org/x/net v0.32.0 450f6b995 vendor: golang.org/x/crypto v0.31.0 b74302eb5 vendor: golang.org/x/text v0.21.0 cb2e35286 vendor: golang.org/x/sync v0.10.0 e56b665d8 vendor: golang.org/x/sys v0.28.0 1eda49878 cli/command/container: use local copy of pkg/system.IsAbs ffe0354c2 cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests 73ff81b65 cli/command/system: TestEventsFormat: set cmd.Args to prevent test-failures 55e404e7a cli/command/system: remove netfilter warnings from tests eaa8b5716 update go-md2man to v2.0.5 b8fd20517 Makefile: use go1.22 semantics for gofumpt 6a2cde6c7 Add option '--ipv4' 5c896c95d Docs: emphasise that some options that are for docker0 a5353e55d Docs: include --fixed-cidr-v6 and --bip6 docker0 options 1e51ae7af update xx to v1.6.1 for compatibility with alpine 3.21 b39f48287 update golangci-lint to v1.62.2 2a5ac8f5a vendor: github.com/docker/docker b249c5ebd214 (master, v28.0.0-dev) afab76501 registry/client: remove uses of APIEndpoint.TrimHostName 7dab597e6 tests: cleanup comment 30c4637f0 run: don't hang if only attaching STDIN 2eb77f4ed vendor: github.com/docker/docker 5d72419486fe (master, v28.0.0-dev) b51a71148 cli/command/system: don't use "non-distributable-artifacts" fields in tests f50dea6c4 vendor: google.golang.org/protobuf v1.35.2 9399483f7 vendor: golang.org/x/net v0.31.0 6751bcc97 vendor: golang.org/x/crypto v0.29.0 d41ab7703 vendor: golang.org/x/term v0.26.0 5972025fa vendor: golang.org/x/text v0.20.0 feb1e2a34 vendor: golang.org/x/sync v0.9.0 4c27c895f vendor: golang.org/x/sys v0.27.0 a1e57ac72 update to go1.23.4 e398d16c0 cli/command/registry: return status only instead of whole response 297afb2a2 cli/command/registry: TestLoginWithCredStoreCreds slight refactor 575e37366 cli/command/registry: rename some vars that collided with imports d4db289eb run, create, connect: add support for gw-priority cf89afb32 cli/command/registry: storeCredentials: accept configfile as arg b5a00d0b0 cli/command/registry: loginWithRegistry: use shallower interface 13f0d4641 cli/command/registry: don't return creds on error a3d9fc494 run: cleanup – remove `errCh` nil check 446f36ce5 run: cleanup – move "detached" early exit earlier 843129882 run: cleanup – use `attached` where applicable aee9eebf3 run: return error code when only STDIN attached ed9fcf31e cli/trust: GetNotaryRepository: remove uses of RepositoryInfo.Class c629eca89 Put --help before --host in the dockerd manpage ea84e8f94 Add --host-gateway to the dockerd manpage cf88ab074 Docs: host-gateway-ip daemon option IPv4+IPv6 ae54c9d97 Add --bip6 to the dockerd manpage 1911dedcf Add --ip-filter-forward-drop 0f058041c docs: fix janky rendering of toc on docs.docker.com fcd94feef cli-plugins: Simplify addPluginCandidatesFromDir 6de3d71ab cli-plugins: Fix searching inaccessible directories 30a73ff19 fix: ctx should cancel image pull on run 1d4a7ae08 tests: cleanup table test names 4a219b1a4 chore: update commit guidelines in CONTRIBUTING.md d41b80faf vendor: github.com/docker/docker e5c2b5e10d68 (master, v28.0.0-dev) 11fbc9993 vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346 b0c0cd5e3 build(deps): bump codecov/codecov-action from 4 to 5 f6599300f vendor: github.com/go-viper/mapstructure/v2 v2.2.1 446d4138e vendor: github.com/moby/sys/capability v0.4.0 07e5ddd05 update golangci-lint to v1.62.0 93a931920 Dockerfile: bump github.com/josephspurrier/goversioninfo to v1.4.1 cb2f95cee Optimise `docker stats` to not require clearing the whole screen d1d535326 cli/command/container: fix missing go:build tag 3dd762124 Dockerfile: update compose to v2.30.3 4242cda82 Dockerfile: update buildx to v0.18.0 7c80e4f93 update go:build tags to use go1.22 06260e68f Handle null completions with a default callback 4525fe37b Add completion for `--volume-driver` db0ed1e21 Add completion for `--cgroupns` 291574927 Add completion for `--uts` 3a2503fa4 Add completion for --log-driver` and --log-opt` 9a9ae231a Add completion for `--security-opt` 5f7c43e5e Add completion for `--detach-keys` 3292afe6e Add completion for `--userns` 5d709a8d9 Add completion for `--ulimit` 2d89339b3 Add completion for `--storage-opt` ac7bde6f6 Add completion for `--pid` e51345424 Add completion for `--link` c555327f0 Add completion for `--ipc` b598ec8cd Add completion for `--attach` 761d76750 Share the container completions 382d4c34a update to go1.23.3 1440f9f8c docs: change link to desktop docs fafaac59f Add --bip6 to dockerd cmdline ref 13754f677 deps: update `go-jose/go-jose` to `v4` 172f34011 docs: update example redis tags from 3.0.x to 7.4.x 4a7b04d41 golangci-lint: set go version to prevent fallback to go1.17 d77760fe5 cli-plugins/manager: remove redundant capturing of loop vars (copyloopvar) 32b40deb4 cli/command/service: remove redundant capturing of loop vars (copyloopvar) 40833fd29 cli/compose/loader: remove redundant capturing of loop vars (copyloopvar) 78a7e1503 cli/command/container: remove redundant capturing of loop vars (copyloopvar) 4a71ce02e cli/command/image: remove redundant capturing of loop vars (copyloopvar) 7d9ea2556 templates: remove redundant capturing of loop vars in tests (copyloopvar) 046ac9714 service: remove redundant capturing of loop vars in tests (copyloopvar) 762b5a8df opts: remove redundant capturing of loop vars in tests (copyloopvar) 417974cdc cmd/docker: remove redundant capturing of loop vars in tests (copyloopvar) bf37e26b3 cli/manifest: remove redundant capturing of loop vars in tests (copyloopvar) 6489a777e e2e: remove redundant capturing of loop vars in tests (copyloopvar) 20de86113 cli/config: remove redundant capturing of loop vars in tests (copyloopvar) 1448cecba cli/compose: remove redundant capturing of loop vars in tests (copyloopvar) 67458f710 cli/command: remove redundant capturing of loop vars in tests (copyloopvar) 0c999fe95 docs: Correct `run` exit code 126 description 5f1311ae8 vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev) 10c5a5792 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 5e40d288c vendor: go.opentelemetry.io/otel v1.28.0 9ba73a1a0 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 f3cf1b421 vendor: go.etcd.io/etcd/raft/v3 v3.5.16 cae19e392 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 074d1028b vendor: update prometheus dependencies 1dbcce205 vendor: google.golang.org/grpc v1.67.1 1bba00994 vendor: google.golang.org/protobuf v1.35.1 e3942d46a vendor: github.com/klauspost/compress v1.17.11 97ff1b7c0 vendor: github.com/go-logr/logr v1.4.2 4c85feb4d vendor: github.com/cenkalti/backoff/v4 v4.3.0 3b48a57b0 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 36e6c4297 vendor: golang.org/x/net v0.30.0 84bfa52a6 vendor: golang.org/x/crypto v0.28.0 7a94f592e vendor: golang.org/x/text v0.19.0 ef197f731 vendor: golang.org/x/term v0.25.0 02b92c699 vendor: golang.org/x/sys v0.26.0 42cda3884 update to go1.23.2 0b16070ae Buffer 'docker stats' text to avoid terminal flickering 9af049c61 bump golangci-lint to v1.61.0 745629bd5 golangci-lint: update comment, and disable "exclude-dirs-use-default" 7451339ab golangci-lint: move gosec excludes to linters-settings 020f3a7ad golangci-lint: enable G204, add #nosec comments instead e1c5180db Add tests for completions that call the API d4f4cf141 Add completion for `events --filter` 59b90305f cli/command/container: parse: remove client-side warning e9ae9f788 docker inspect: add support for swarm configs 3c7806924 cli/config/credentials: add test for save being idempotent 0dd6f7f1b cil/config/credentials: remove newStore() test-utility 5f4b14950 cli: remove deprecated Errors type d96f8b7f9 cli/config: improve error when failing to parse config file d3f6867e4 cli/config/credentials: skip saving config-file if credentials didn't change 6b9083776 cli/command: AddPlatformFlag: suppress unhandled error fb61156b0 cli/command/registry: fix minor linting issues 3f7b156c8 Fix bash completion for `events --filter daemon=` 4b7a1e461 cli/command: PromptUserForCredentials: suppress unhandled errors 378a3d7d3 cli/command: PromptUserForCredentials: use consts for all hints 54e3685bc cli/command: ConfigureAuth: fix deprecation comment 3d8b49523 cli/command: PromptUserForCredentials: print error on terminal restore fail a21a5f424 cli/command: PromptUserForCredentials: always trim password eda78e9cd cli/command: PromptUserForCredentials: move trimming where it's used 581cf36bd cli/command: PromptUserForCredentials: move "post" check for empty name a55cfe5f8 cli/command: PromptUserForCredentials: inline isDefaultRegistry 3a8485085 cli/command: PromptUserForCredentials: remove named output variables d3bafa5f3 cli: deprecate Errors type 71ebbb81a cli/command/plugins: use errors.Join instead of custom cli.Errors 87acf77ae cli/hints: add tests 9b525bc9d vendor: github.com/docker/docker 36a3bd090489 (master, v28.0-dev) 670f81803 cmd/docker: add tests for flag-completions, and refactor 12dcc6e25 templates: add test for HeaderFunctions cbbb91732 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e 2c6b80491 docs: update prose about image tag/name format 50ef0c58c docs: corrected the max events returned 35d7b1a7a cli/command/container: TestWaitExitOrRemoved use subtests 3b38dc67b cli/command/container: set empty args in tests and discard output e1c472a43 completion: add test for VolumeNames 302d73f99 completion: add test for NetworkNames ab418a38d completion: add test for ImageNames f3b4094eb completion: add test for ContainerNames be197da6b completion: add test for NoComplete 51713196c completion: add test for FromList a5ca5b33f completion: add test for FileNames 8f2e5662e completion: add test for EnvVarNames b8cddc63a completion: ContainerNames: don't panic on nil filter a58faf797 README: update pkg.go.dev badge, add OpenSSF scorecard b6d27ff60 vendor: google.golang.org/grpc v1.66.2 200225f53 vendor: google.golang.org/protobuf v1.34.1 9599251d0 vendor: github.com/cespare/xxhash/v2 v2.3.0 ea8aa2a41 vendor: golang.org/x/net v0.29.0 61867feec vendor: golang.org/x/crypto v0.27.0 843ae6d7e vendor: golang.org/x/term v0.24.0 bea4ee658 vendor: golang.org/x/text v0.18.0 a88ee33f7 vendor: golang.org/x/sys v0.25.0 147630a30 Only complete removable containers if --force is not given d085e2445 image/history: Add `--platform` flag b0bb4ba7f image/load: Add `--platform` a20eb45b2 image/save: Add `--platform` 0319795d4 cli/compose: implement the ports validation method 839dbbcf2 cli/command/images: set cmd.Args to prevent test-failures 19eeb1015 cli/command/image: fix TestNewSaveCommandSuccess to actually test d42cf96e1 cli/command/image: add shell completion for --platform flags 8c7f713db cli/command/container: add shell completion for --platform flags ce1aebcc3 cli/command/completion: add Platforms 2f2b16a96 docs: fix inaccurate description of --restart=unless-stopped c70b2165a docs: Link supported Go duration strings 442c38636 command: add tests for container kill, commit, and pause a6ab65948 ci: update to go1.22.8 9ecfe4f5a move parsing key-value files to a separate package 76196dbb0 opts: parseKeyValueFile: cleanup and remove redundant trimming 95e221ef4 opts: remove ErrBadKey as it's not used as a sentinel error b129660dd opts: cleanup ParseEnvFile tests d49e72c0a cli/command/container: add unit tests for completion helpers 462e08219 cli/container: use github.com/moby/sys/capability for completions bd96bdaf1 align "conflicting options" errors for consistency df8b34595 cli/command/container: stop, restart: rename "--time" to "--timeout" 607530348 docs/reference: stop, restart: add flag descriptions 8fca0a1f2 Check that --ip-range is a CIDR address ac502b590 cli/command/container: add unit tests for container stop 16aa99425 cli/command/container: add unit tests for container restart 54a20ce54 docs: fix a typo in run.md b12ac897f vendor: github.com/docker/docker 164cae56ed95 (master, v-next) df52ddcfc Images Tree: Change 'Used' to 'In Use' 17040890e Do not underline image name 46b360b05 command: add tests for container diff and rename 465e87afc docs: fix anchor link to web-based login section 8a3d838a1 docs: use important callout for buildkit vs legacy builder 3e271461e cli/formatter: fix unbracketed IPv6 addrs 91c90a979 Update `VERSION` file to `v27.3.1-dev` ce26ebc0e Dockerfile: update compose to v2.29.7 1355d7e9f telemetry: fix early meterprovider shutdown f46860616 gha: codeql: minor touch-ups and fixes 3472bbc28 command: change drive to lowercase for wsl path e1213edcc gha: update codeql workflow to go1.22.7 b1956f507 telemetry: pass otel errors to the otel handler for shutdown and force flush f7a513cff Dockerfile: update compose to v2.29.4 42ce06aa5 Dockerfile: update buildx to v0.17.1 baceb4b15 docs: dockerd: add documentation for --log-format option a42ca1148 docs/reference: dockerd: add docs for --feature option 9ae514fdc man: dockerd: add description for --log-format option 1a0e32099 docs: dockerd: remove --api-cors-header (deprecated) 9bfd0e1a4 man: remove docs for deprecated --api-cors-header a357db0ab man: dockerd: value is optional for --feature flag fb056d2ce man: fix duplicate word in --feature flag description 610f9157f man: update dockerd man-page to include --feature flag 605c9bf16 docs: Fix --rm=false flag in container_run.md dccb8bfa5 vendor: google.golang.org/grpc v1.62.0 8cdf90cd9 vendor: tags.cncf.io/container-device-interface v0.8.0 a5f15bee7 vendor: golang.org/x/net v0.28.0 b93fc3963 vendor: golang.org/x/crypto v0.26.0 3a63df265 vendor: golang.org/x/text v0.17.0 c6e534193 vendor: golang.org/x/term v0.23.0 5f9fe33b6 vendor: golang.org/x/time v0.6.0 7074e5011 vendor: golang.org/x/sync v0.8.0 958fff82f vendor: golang.org/x/sys v0.24.0 fb264ffc0 vendor: dario.cat/mergo v1.0.1 38c3fef1a command: check for wsl mount path on windows 5b81f0dcb chore: remove duplicated `govet` linter config 88ca4e958 info: stop printing "Expected" commits daea277ee volume/update: require 1 argument/fix panic 0fcaffb7e chore: fix style/lint issues in deprecated.md 45d55961d Fix broken links in CONTRIBUTING.md 0b9d58245 cli/command: fix docstring for ContainerFormat.CreatedAt 4a6ab2b37 fix: binary file line endings 3bf39d25a update to go1.22.7 1b8180a40 vendor.mod: put github.com/pkg/browser in the right group 5ca40e0a3 docs: add front matter title to deprecated.md 071f6f939 docs: rename plugins index file and add linkTitle bbb6e7643 login: handle non-tty scenario consistently 60d045028 oauth/api: drain timer channel on each iteration d7d56599c update to go1.22.6 9e2996796 scripts/build/plugins: don't override CGO_ENABLED set by .variables 81744d7aa copynit: s/WEB BASED/WEB-BASED/ 2f206fff3 docs: update docker login reference 1e6cbbc3f Dockerfile: update xx to v1.5.0 e532eead9 login: use normalized hostname when storing dab9674db Revert "login: normalize `registry-1.docker.io`" c4a55df7c cli: rename args that collided with builtins (predeclard) 9c8789127 e2e/global: fix n-constant format string in call (govet) f101f07a7 cli/command: fix n-constant format string in call (govet) cc1d7b7ac cli/command/system: remove redundant nil-check (gosimple) 964155cd2 cli/formatter: bracket IPv6 addrs prepended to ports a327476f7 login: add e2e tests for oauth + escape hatch c974a8339 chore: update link to docker engine api reference 846ecf59f login: add oauth escape hatch 7b9164794 list/tree: No extra spacing for graphdriver 351249dce list/tree: Print <untagged> as dangling image name 6979ab073 list/tree: Fix some escape codes included in nonTTY a9b78da54 list/tree: Add spacing before the content and first image 0242a1e3c list/tree: Capitalize column headers d417d0668 list/tree: Add an experimental warning b1a08f784 list/tree: Sort by created date 18ab78882 list/tree: Align number right, text left ea8aafcd9 cli/tree: Add `Content size` column be11b74ee image/list: Add `--tree` flag f1befabe9 docs: use gh alert syntax for callouts c3fe7bc33 fallback to regular login if oauth login fails to start 5eb3275c2 filestore: don't print warning multiple times e6624676e login: normalize `registry-1.docker.io` 6e4818e7d Refactor `cli/command/registry` fcfdd7b91 auth: add support for oauth device-code login 2dd4eb06a docs: update link to moved build context doc 0fd3fb084 cli/connhelper: getConnectionHelper: move ssh-option funcs out of closure f3c2c26b1 disable pseudoterminal creation d4a362aa1 docs: update internal links after refactor 78a8fba2c docs: fix link to http proxy document 6440816c7 vendor: github.com/docker/docker 2269acc7a31d (master, v-next) b8a53ee34 vendor: github.com/docker/docker master (f3cf9359bdf6) 9c4480604 plugins: don't panic on Close if PluginServer nil 434d8b75e update to go1.21.13 73e78a582 run: fix GetList return empty issue for throttledevice e29292f92 add security policy 40a5b297b vendor: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 e4d99b4b6 gha: set permissions to read-only by default eac83574c tests/run: fix flaky `RunAttachTermination` test 7b46bfc5a attach: wait for exit code from `ContainerWait` f0a29af0f vendor: docker/docker 2b1097f08088 (removes containerd dependency) b34e8e4df vendor: github.com/moby/sys/sequential v0.6.0 ea37ac9ba vendor: github.com/moby/sys/symlink v0.3.0 435c65833 vendor: github.com/moby/sys/signal v0.7.1 501904d48 vendor: golang.org/x/sys v0.22.0 cc4163296 lint: replace deprecated linter names 66aa0f672 attach: don't return context cancelled error 4a7388f0d tests: fix other flaky `connhelper` tests cc68c66c9 tests: fix flaxy `TestCloseRunningCommand` test b36522b47 docs: refresh image versions in examples aa2c2cd90 Allow for OomScoreAdj 401048b9c vendor: github.com/containerd/containerd v1.7.20 6638deb9d add support for DOCKER_CUSTOM_HEADERS env-var (experimental) 9617e8d0c gha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1) 6d8fcbb23 gha: check-pr-branch: verify major version only 77c0d8360 Dockerfile: update compose to v2.29.0 d00e1abf5 Dockerfile: update buildx to v0.16.1 ab80ea355 cli/config/credentials: move warning to fileStore fcefe44bd login: slightly cleanup warning about unencrypted store a78ab6380 login: don't print "unencrypted" warning when failing to save credentials 90058df30 cli/command/container: remove reportError, and put StatusError to use 64a3fb82d docs: fix typos and version for cli-docs-tool scripts e3e9b9901 vendor: github.com/docker/cli-docs-tool v0.8.0 f28fc7f82 cli: FlagErrorFunc: don't print long usage output for invalid flags b1c0ddca0 cli/command/container: add completion for --stop-signal d6f78cdbb cli/command/container: add completion for --volumes-from 7fe7223c2 cli/command/container: add completion for --restart f30158dbf cli/command/container: add completion for --cap-add, --cap-drop e4dd8b189 cli/context/store: Names(): fix panic when called with nil-interface 42b68a3ed cmd/docker: fix completion for --context 162d9748b cli/command/container: provide flag-completion for "docker create" 5e7bcbeac cli/command/completion: add FromList utility e3427f341 cli/command/completion: add EnvVarNames utility 9207ff104 cli/command/completion: add FileNames utility eed0e5b02 cli/command/container: NewRunCommand: slight cleanup of completion e8baee9c7 vendor: github.com/docker/docker aae044039ca4 (master, v-next) a77ba7eda vendor: google.golang.org/genproto/googleapis/api 49dd2c1f3d0b caa5d15e9 vendor: github.com/prometheus/procfs v0.15.1 0f712827f vendor: github.com/containerd/containerd v1.7.19 b28a1cd02 vendor: golang.org/x/sync v0.7.0 991b1303d chore: restore ctx without cancel on container run 6c04adc05 push: Improve note message and colors 0579cd797 test: e2e SIGTERM attached container on `docker run` d40199440 c8d: Remove `docker convert` mention 4ce6e50e2 push: Don't default to DOCKER_DEFAULT_PLATFORM 3f3ecb94c Makefile: add completion target 150fb55a8 fix: container stream should not be terminated by ctx 3d80b7b0a Dockerfile.dev: install bash-completion in dev container eae75092a cmd/docker: split handling exit-code to a separate utility b7695d6c7 cli-plugins: RunPlugin(): rename error-variable that's possibly shadowed 350a0b68a cli-plugins: Run(): don't discard cli.StatusError errors without message 3dd6fc365 cmd/docker: don't discard cli.StatusError errors without custom message 2f83064ec e2e/cli-plugins: check for exit-errors in tests baf35da40 e2e/cli-plugins: use cmd.CombinedOutput() instead of custom buffer c6b40640c e2e/cli-plugins: use identifiable output for test e9f32edac e2e/cli-plugins: explicitly ignore fmt.Printxx errors 5e7948ec8 e2e/cli-plugins: rename var that shadowed import c60b360c3 cli: improve argument validation output a6e96c758 cli: improve output and consistency for unknown (sub)commands bca209006 cli: make cli.StatusError slightly prettier 88896eeaa cli/command/container: TestSplitCpArg: cleaner skip b194274be replace uses of deprecated API types 4cac8efb5 vendor: github.com/docker/docker 508cc7c61226 (master) dc22572e3 chore: regenerate docs 8549d250f docs: update cli-docs-tool (v0.8.0) 3d4c12af7 docs: update links to docker cli reference bf33c8f10 docs: regenerate base command b0650f281 docs: align heading structure for base command cfea2353b docs: remove frontmatter for base command 03961449a docs: rename cli.md to docker.md (base command) a68382338 docs: remove empty docker base command reference a0c4e56de vendor: golang.org/x/net v0.25.0 723130d7f vendor: golang.org/x/crypto v0.23.0 d33ef57dc vendor: golang.org/x/text v0.15.0 21dbedd41 vendor: golang.org/x/sys v0.21.0 f8e7c0a0d vendor: github.com/klauspost/compress v1.17.9 10a015f87 cli/command/network: NewPruneCommand: explicitly ignore error b3d8809f4 cli/command/network: rewrite consolidateIpam to take an option-struct ab230240a test spring-cleaning c7d46aa7a Enable completion for 'image' sub commands 2eb61318b cli/command/network: some cleanup and pass smaller interfaces b711372ca cli/command/container: TestNewAttachCommandErrors: use struct-literals 229616e17 cli/command/image: fakeClient.ImagesPrune: fix unhandled err-return 42ba29395 rename vars to prevent colliding with imports 3a77fdd91 cli/command/trust: unconvert 26223f701 cli/command/formatter: don't use unkeyed structs c56f4a1ef workflow: remove git `autocrlf=false` setup on windows d73d7d4ed update to go1.21.12 e91f0ded9 docs: make buildx build the canonical reference doc c15ade0c6 fix: ctx cancellation on login prompt 2bd4e95bf feat: force lf line endings by default be14edca2 cli/command/stack: fix faulty sort for sorting stacks 0f6370c94 vendor: github.com/fvbommel/sortorder v1.1.0 2e6aaf05d vendor: github.com/docker/docker v27.0.3 9455d6176 vendor: github.com/docker/docker v27.0.2 1382fbe61 vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6) ab0898ee3 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974) cfec21f28 vendor: github.com/docker/docker v27.0.1 8b0a7b025 cli/config/credentials: ConvertToHostname: handle IP-addresses 238048160 re-introduced support for port numbers in docker registry URL 60775b615 gha/e2e: Update latest version to 27.0 b5d1b4de1 update golangci-lint to v1.59.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to 1.20Bruce Ashfield2025-03-061-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.20-53-g4d6eae2e, which comprises the following commits: 107214b1 build(deps): bump uraimo/run-on-arch-action from 2.8.1 to 3.0.0 c954b1b6 criu: use a process to initialize the cgroup 959cc6c4 cgroup: extend function e3866cc5 cgroup: fix ownership of dfd in read_pids_cgroup 0f16ced1 linux: set subsystem_path before use in error 6ed12c63 linux: remove dead code 6c049b81 criu: hide feature if dlopen is not present 73d00079 tests: map all IDs into the user namespace 0037d567 ci: fail on "sudo make check" f82ead82 tests: fix test_resources_unified_invalid_controller() 37213555 utils: improve error message if path not executable 5f5454b5 utils: do not use hardcoded path buffer 4948e451 utils: check for eaccess existence 410f0d53 container: pass down executable path to custom handler bb56343c utils: move error handling inside find_executable() a77702c0 tests: do a shallow git clone for podman f941be48 error: silence compiler warning b8b25ea1 Prevent dlopen() for CRIU in static link'ed binary 990b5f68 krun: fix libkrun_unload 79b7e6b3 libcrun: use an hash map to lookup the key 51fa411b libcrun: move annotations handling to a separate struct 9abef0da linux: fix dup error 14d5baa4 README: add CentOS Stream 9 & 10, rm 8 e735b4bc krun: fix libkrun_exec return value 90a321c6 container, error: update error handling 620b91b5 utils: fix PATH lookup 48470009 Downstream Fedora: fix gating config 7949fbc6 tests: disable new test that does not use the runtime 7f76fcd4 utils: add missing crun_error_release() 6598c99b utils: add O_NOFOLLOW 9c9a76ac NEWS: tag 1.20 0aec82c2 krun: fix CVE-2025-24965 793188c2 krun: initialize bool ac956685 utils: add O_WRONLY to WRITE_FILE_DEFAULT_FLAGS dcf4f78b utils: drop rootfs_len from safe_openat function de33f0a8 utils: write_file_at_with_flags uses safe_write c460b253 utils: safe_write uses size_t for the buffer length 12778089 utils: drop function write_file_with_flags f1ef3bb4 utils: move write_file* wrappers to utils.h 3e2344b0 utils: fix partial writes with write_file_at_with_flags 7930c13d krun: drop unused variable f7987aa9 linux, mono: remove unneeded crun_error_release() b548479c utils: reduce memory consumption in safe_readlinkat 3b653170 chroot_realpath: remove dead code 17135c1b chroot_realpath: do not return non-existing paths 7ab1acd3 container: fix error after read 490d5502 linux, utils: remove dead code crun_ensure_file*() 432a66d9 status: validate container id 73bcfabb status: report errors from get_state_directory_status_file 30d22ba3 status: report errors from get_run_directory 873db607 status: report errors from libcrun_get_state_directory f5e7718c linux: improve error writing to net.ipv4.ping_group_range 5c35f278 tests: make python script executable 5b51cca8 github: disable aarch64, ppc64le and s390x build 84d50992 github: cat config.log on configure failures 7aa2cd85 github: add r/w permissions 4f823090 github: show apt-get output 2d08f586 exec: always call setsid b788f338 scheduler: ignore ENOSYS when resetting affinity mask e292c9e9 src/linux: handle EINVAL during pidfd_open gracefully 869804f4 TMT: account for environments on internal testing farm ranch 65484cb9 TMT: Replace `adjust` with `prepare` conditionals a4dcb9c6 cgroup: Show the absolute path to cgroup.controllers when a controller is not available 179686b7 Revert "cgroup: remove tun/tap from the default allow list" 68e8d9ab test: use wasm32-wasip1 instead of wasm32-wasi 3158e491 criu: improve error handling for CRIU function calls 3cd9c2c9 criu: do not set network_lock if not specified Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.3Bruce Ashfield2025-03-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.3, which comprises the following commits: eaa7ca80d proxy: break up writes from the remote writer to avoid grpc limits c7f64196f Fix privileged container sysfs can't be rw because pod is ro by default 569af34cb Prefer runtime options for PluginInfo request b8dde9189 Prepare release notes for v2.0.3 0ce93e16a prevent oom watcher depend on shim pkg. f3284aa68 CI: arm64-8core-32gb -> ubuntu-24.04-arm 92ae2951f Update CDI dependency to v0.8.1. f95a426b8 move the device after the options when using mkfs.ext4 4d19a6adf update build to go1.23.6, test go1.24.0 c738c3aab build(deps): bump actions/cache from 4.1.2 to 4.2.0 b5313993c Revert "Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG" 697c59c63 Update runc binary to v1.2.5 fcf64305c Update vendor files to fix build failure d3437eb29 Upgrade x/net to 0.33.0 0785bd8cc Update install-imgcrypt to allow change install repo 06891f899 fix go-cni race condition 79cdbf61b cri,nri: block NRI plugin sync. during event processing. 9d5cfce83 Update github.com/containerd/imgcrypt to v2.0.0 1f4e5688e update to go1.23.5 / go1.22.11 f58939c33 Remove deprecated WithCDIDevices in oci spec opts 3d53430fe Move CDI device spec out of the OCI package 3a6ab80d0 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 cdaf4dfb4 Prepare release notes for v2.0.2 eb125e1dd Update platforms to latest rc 468079c5c Remove confusing warning in cri runtime config migration a2d9d4fd5 Fix runtime platform loading in cri image plugin init 184ffad01 Add integ test to check tty leak 17181ed33 fix master tty leak due to leaking init container object 8666e7422 Bump up otelttrpc to 0.1.0 7373ddd70 update runc binary to v1.2.4 c4270430d ctr: `ctr images import --all-platforms`: fix unpack f34147772 downgrade go-difflib and go-spew to tagged releases Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to v1.39.1Bruce Ashfield2025-03-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.39.1-1-g1c4d85879, which comprises the following commits: 9347a39c2 Tag v1.39.1 717fb39c4 CI config: post-branch update 7dbd71040 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] 4c0c3f0b9 chroot createPlatformContainer: use MS_REMOUNT c15ab104a Bump to Buildah v1.39.0 298a64106 Bump c/storage v1.57.1, c/image 5.34.0, c/common v0.62.0 3c7c611c7 Update module github.com/containers/storage to v1.57.0 d11bd71f4 CI, .cirrus: parallelize containerized integration bd2d78e40 ed's comment: cleanup ea39556a6 use seperate blobinfocache for flaky test 72161b3a1 bump CI VMs to 4 CPUs (was: 2) for integration tests 56078ef2d cleanup, debug, and disable parallel in blobcache tests 708fe0aff bats tests - parallelize 670a7bec6 pkg/overlay: cleanups ca957c487 RPM: include check section to silence rpmlint 6cee07f52 RPM: use default gobuild macro on RHEL 2119c8da3 tests: remove masked /sys/dev/block check 4887a4fb1 vendor to latest c/{common,image,storage} 4383e34c0 build, run: record hash or digest in image history 3541a3ce2 Accept image names as sources for cache mounts 9e00b6b39 Run(): always clean up options.ExternalImageMounts 59024c41a refactor: replace golang.org/x/exp with stdlib a67b07957 Update to c/image @main d694644ae fix broken doc link e40f62941 run_freebsd.go: only import runtime-spec once eca1c8e90 fix(deps): update module github.com/docker/docker to v27.5.1+incompatible 678dca8fd bump github.com/vbatts/tar-split 9b9c161ff Add more checks to the --mount flag parsing logic 1ccc34515 chroot mount flags integration test: copy binaries 80100ac44 fix(deps): update module github.com/moby/buildkit to v0.19.0 e7f790296 relabel(): correct a misleading parameter name 6e62bd083 Fix TOCTOU error when bind and cache mounts use "src" values c30f5784d define.TempDirForURL(): always use an intermediate subdirectory 25a3b385a internal/volume.GetBindMount(): discard writes in bind mounts 0f5c6fc50 pkg/overlay: add a MountLabel flag to Options c0efbe821 pkg/overlay: add a ForceMount flag to Options 50210d51c Add internal/volumes.bindFromChroot() f7155c0ab Add an internal/open package 9a9fa9607 fix(deps): update module github.com/containers/common to v0.61.1 ccfd61bdd fix(deps): update module github.com/containers/image/v5 to v5.33.1 9beaf1018 [CI:DOCS] Touch up changelogs 9b55ec998 fix(deps): update module github.com/docker/docker to v27.5.0+incompatible 65b634b7d copy-preserving-extended-attributes: use a different base image 292ecfe0f fix(deps): update github.com/containers/luksy digest to a3a812d 67991e0d5 chore(deps): update module golang.org/x/net to v0.33.0 [security] 6b53330c3 fix(deps): update module golang.org/x/crypto to v0.32.0 727f00bf4 New VM Images e2b33d252 fix(deps): update module github.com/opencontainers/runc to v1.2.4 ac9815992 fix(deps): update module github.com/docker/docker to v27.4.1+incompatible 5a336bf1a fix(deps): update module github.com/containers/ocicrypt to v1.2.1 adf54cde0 Add support for --security-opt mask and unmask 77e357020 Allow cache mounts to be stages or additional build contexts a1dede87e [skip-ci] RPM: cleanup changelog conditionals d18344416 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6 d77314a7a fix(deps): update module github.com/moby/buildkit to v0.18.2 62709d718 Fix an error message in the chroot unit test cfd98d782 copier: use .PAXRecords instead of .Xattrs 4adca286f chroot: on Linux, try to pivot_root before falling back to chroot 5f3975333 manifest add: add --artifact-annotation c41f02130 Add context to an error message f81b26560 Update module golang.org/x/crypto to v0.31.0 e9932b7bb Update module github.com/opencontainers/runc to v1.2.3 ad5b02cdc Update module github.com/docker/docker to v27.4.0+incompatible 2b7e1e9be Update module github.com/cyphar/filepath-securejoin to v0.3.5 a82826f56 CI: don't build a binary in the unit tests task 8eb6b10b0 CI: use /tmp for $GOCACHE 36f6038d3 CI: remove dependencies on the cross-build task 83b280599 CI: run cross-compile task with make -j 2b6cf6452 Update module github.com/docker/docker to v27.4.0-rc.4+incompatible 4afa31d07 Update module github.com/moby/buildkit to v0.18.1 c35374f9c Update module golang.org/x/crypto to v0.30.0 041c1f26f Update golang.org/x/exp digest to 2d47ceb 058a2d37f Update github.com/opencontainers/runtime-tools digest to f7e3563 a34792457 [skip-ci] Packit: remove rhel copr build jobs 7a8312a61 [skip-ci] Packit: switch to fedora-all for copr 564f90f09 Update module github.com/stretchr/testify to v1.10.0 7b45052fd Update module github.com/moby/buildkit to v0.17.2 17ee51d75 Makefile: use `find` to detect source files 75c8852a8 Tests: make _prefetch() parallel-safe 8e525d445 Update module github.com/opencontainers/runc to v1.2.2 eb7a42217 executor: allow to specify --no-pivot-root 6cfd93424 Update module github.com/moby/sys/capability to v0.4.0 135431f8d Makefile: mv codespell config to .codespellrc c2b42c5e4 Fix some codespell errors f0361414d Makefile,install.md: rm gopath stuff c07a5eb56 Makefile: rm targets working on .. 5adb14cbf build: rm exclude_graphdriver_devicemapper tag 967fb5ec1 Makefile: rm unused var f4d4bb240 Finish updating to go 1.22 6832420b6 CI VMs: bump again 147765b45 Bump to Buidah v1.39.0-dev 7aa3b5ee0 Bump to Buildah v1.38.0 e911fe4a2 Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0 356e4d41e fix(deps): update module golang.org/x/crypto to v0.29.0 6b1e4a58c fix(deps): update module github.com/moby/buildkit to v0.17.1 3a583bf04 fix(deps): update module github.com/containers/storage to v1.56.0 e3950407f tests: skip two ulimit tests 4703b5b0c CI VMs: bump f40 -> f41 2cba66285 tests/tools: rebuild tools when we change versions 3cf2ec21b tests/tools: update golangci-lint to v1.61.0 a7c316ab7 fix(deps): update module github.com/moby/buildkit to v0.17.0 701d6bbe9 Handle RUN --mount with relative targets and no configured workdir 9a5b88d3e tests: bud: make parallel-safe 953fb3259 fix(deps): update module github.com/opencontainers/runc to v1.2.1 d8d117534 fix(deps): update golang.org/x/exp digest to f66d83c fddd1be38 fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a 3c4e552eb tests: blobcache: use unique image name 1cd6346b3 tests: sbom: never write to cwd 2797d22ab tests: mkcw: bug fixes, refactor aa7077164 deps: bump runc to v1.2.0 e213d65be deps: switch to moby/sys/userns 855ec0f0c tests/test_runner.sh: remove some redundancies 5abf038dd Integration tests: run git daemon on a random-but-bind()able port 27324c256 fix(deps): update module github.com/opencontainers/selinux to v1.11.1 8b7adfa2c go.mod: remove unnecessary replace 6c85740ba Document more buildah build --secret options aeb6ffeec Add support for COPY --exclude and ADD --exclude options 57bba3469 fix(deps): update github.com/containers/luksy digest to e2530d6 9cf613a2b chore(deps): update dependency containers/automation_images to v20241010 6349dc4a2 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4 873beddba Properly validate cache IDs and sources 0d27af46f [skip-ci] Packit: constrain koji job to fedora package to avoid dupes e0b7b10e6 Audit and tidy OWNERS 714a23c26 fix(deps): update module golang.org/x/crypto to v0.28.0 c7dd90dd7 tests: add quotes to names a018ec2b0 vendor: update c/common to latest 732f77064 CVE-2024-9407: validate "bind-propagation" flag settings 95f2e1020 vendor: switch to moby/sys/capability 37a6bde53 Don't set ambient capabilities 5193f21b0 Document that zstd:chunked is downgraded to zstd when encrypting 271093d51 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3 03ca93fb0 buildah-manifest-create.1: Fix manpage section fea5c3d49 chore(deps): update dependency ubuntu to v24 d0819591d Make `buildah manifest push --all` true by default 2ff91b8b0 chroot: add newlines at the end of printed error messages 5e82f27fb Do not error on trying to write IMA xattr as rootless c07ae2b4c fix: remove duplicate conditions 4bc98d54d fix(deps): update module github.com/moby/buildkit to v0.16.0 128117224 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2 1f02b65c6 Document how entrypoint is configured in buildah config baf91f2b0 In a container, try to register binfmt_misc 81d1256bd imagebuildah.StageExecutor: clean up volumes/volumeCache 80e15584c build: fall back to parsing a TARGETPLATFORM build-arg edc43c4e6 `manifest add --artifact`: handle multiple values b2defd39e Packit: split out ELN jobs and reuse fedora downstream targets 0494df68b Packit: Enable sidetags for bodhi updates 81b357e36 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible 71fc845d0 tests/bud.bats: add git source 47297b3d5 add: add support for git source 5184bf161 Add support for the new c/common pasta options 7bf7da57a vendor latest c/common 8d7286762 fix(deps): update module golang.org/x/term to v0.24.0 e08437000 fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0 a35380059 packit: update fedora and epel targets 909cca8b1 cirrus: disable f39 testing db2a666dd cirrus: fix fedora names 3f047d49b update to go 1.22 ed881abfe Vendor c/common:9d025e4cb348 9e374f9fd copier: handle globbing with "**" path components cee3c1311 fix(deps): update golang.org/x/exp digest to 9b4947d 9ab093138 fix(deps): update github.com/containers/luksy digest to 2e7307c f88579d1f imagebuildah: make scratch config handling toggleable 01a58991c fix(deps): update module github.com/docker/docker to v27.2.0+incompatible 09c231f83 Add a validation script for Makefile $(SOURCES) 510dd75f6 fix(deps): update module github.com/openshift/imagebuilder to v1.2.15 344366935 New VMs e8e83bb8b Update some godocs, use 0o to prefix an octal in a comment a2629f528 buildah-build.1.md: expand the --layer-label description b695098b0 fix(deps): update module github.com/containers/common to v0.60.2 d0988936b stage_executor: set avoidLookingCache only if mounting stage f1cd5ae4a imagebuildah: additionalContext is not a local built stage 0ade01048 run: fix a nil pointer dereference on FreeBSD ca3b80eb0 CI: enable the whitespace linter 0ad0ffaad Fix some govet linter warnings 662abee0b Commit(): retry committing to local storage on storage.LayerUnknown 8ae99121c CI: enable the gofumpt linter d07c3dfb0 conformance: move weirdly-named files out of the repository a60788c56 fix(deps): update module github.com/docker/docker to v27.1.2+incompatible ec87847c9 fix(deps): update module github.com/containers/common to v0.60.1 fd3aba991 *: use gofmt -s, add gofmt linter 24da18800 *: fix build tags 57d820d37 fix(deps): update module github.com/containers/image/v5 to v5.32.1 3ea43566a Add(): re-escape any globbed items that included escapes 05da9a745 conformance tests: use mirror.gcr.io for most images c39f622d0 unit tests: use test-specific policy.json and registries.conf a1ce1c1ee fix(deps): update module golang.org/x/sys to v0.24.0 c7b7f1272 Update to spun-out "github.com/containerd/platforms" 832ff6cb8 Bump github.com/containerd/containerd ed6dd4227 test/tools/Makefile: duplicate the vendor-in-container target f52158f0e linters: unchecked error abea603df linters: don't end loop iterations with "else" when "then" would fdf1c75cd linters: unused arguments shouldn't have names 6224e9a44 linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5() ae0d9d002 linters: don't name variables "cap" 282cc38c3 `make lint`: use --timeout instead of --deadline d01e4ede3 Drop the e2e test suite c65328683 fix(deps): update module golang.org/x/crypto to v0.26.0 23f241e6f fix(deps): update module github.com/onsi/gomega to v1.34.1 277d40a2e `make vendor-in-container`: use the caller's Go cache if it exists aac50f661 fix(deps): fix test/tools ginkgo typo dd8715976 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1 34a7ce99b Update to keep up with API changes in storage 00d67a48f fix(deps): update github.com/containers/luksy digest to 1f482a9 987e63a2d install: On Debian/Ubuntu, add installation of libbtrfs-dev e3c1953f7 fix(deps): update module golang.org/x/sys to v0.23.0 5f96e0392 fix(deps): update golang.org/x/exp digest to 8a7402a 9254e5ca8 fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2 edc1b7752 Use Epoch: 2 and respect the epoch in dependencies. 4e78b5723 Bump to Buildah v1.38.0-dev 5f18ba259 AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields c467bd139 Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions 8aa9a1c22 integration tests: teach starthttpd() about TLS and pid files Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: fix do_compile failedhongxu2025-02-182-11/+18
| | | | | | | | | | | | | | | | | | | | | Using latest poky + meta-virtualization + meta-openembedded, build multlib failed ...local.conf... MACHINE = "qemux86-64" require conf/multilib.conf MULTILIBS = "multilib:lib32" DEFAULTTUNE:virtclass-multilib-lib32 = "x86" $ bitbake lib32-nerdctl ... -buildmode=pie requires external (cgo) linking, but cgo is not enabled make: *** [Makefile:63: nerdctl] Error 1 ... Get back the patch to allow external specification of build settings and rebase to v2.0.2 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: add json-c for driver_qemuhongxu2025-02-181-1/+1
| | | | | | | | | | | | | | | | After upstreamm applied commit [meson: switch checks to depend on json-c as well as yajl][1], json-c is required to build QEMU driver. Depending on your distro configuration, json-c may or may not be pulled in as a dependency via elfutils. To ensure we are distro configuration independent, we explicitly add json-c as a depdendency when the qemu_driver is used. [1] https://github.com/libvirt/libvirt/commit/28c987263980afc5b606a36a8d264b68cb01e9b9 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix installed-vs-shipped QA errorhongxu2025-02-181-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In commit [1], upstream added sysusers config file for qemu & kvm user/groups, the install dir is "install_dir: prefix / 'lib' / 'sysusers.d'". In commit [2], Yocto created an empty file libvirt-qemu.conf to override sysusers config file which is added by commit [1] While usrmerge not in DISTRO_FEATURES, nonarch_base_libdir does not match install_dir and trigger an installed-vs-shipped QA error ... ERROR: QA Issue: libvirt: Files/directories were installed but not shipped in any package: /usr/lib/sysusers.d /usr/lib/sysusers.d/libvirt-qemu.conf Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. libvirt: 2 installed and not shipped files. [installed-vs-shipped] ... Use nonarch_libdir to intead of nonarch_base_libdir to match the install dir in commit [1] [1] https://github.com/libvirt/libvirt/commit/a2c3e390f7bedf36f4ddc544d09fe3b8772c5c6f [2] https://git.yoctoproject.org/meta-virtualization/commit/?id=8138d9cc7e0c31171230110db0cfa881c46a821b Suggested-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: disable lxc-staticdev buildpaths checkingXiangyu Chen2025-02-181-0/+2
| | | | | | | | | | | | lxc enabled the ffat-lto-objects option since 6.0.3[1], that liblxc.a object files contain both the intermediate language and the object code, that cause yocto QA report a QA warning. Ref: [1] https://github.com/lxc/lxc/commit/277ac364074f8287be91393f50f8f999d51101c4 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: drop 6.6 supportBruce Ashfield2025-02-113-47/+0
| | | | | | | | | | | | | | | It could be argued that we could keep the fragments and virtualization .inc file for old versions, as they won't trigger and immediate issue for configurations that are using the older supported kernel versions. BUT, we could extend that comment to any / all versions ever supported by OEcore. Since 6.6 isn't actively being tested in master, let's drop all the references and only have 6.12 active. If someone does need the older kernel support, then the support could be restored. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: switch libnetwork to moby versionPaolo Barbolini2025-01-303-73/+2
| | | | | | | | Some time ago libnetwork was moved from it's own repository to moby. This patch updates the docker recipe to use the new location Signed-off-by: Paolo Barbolini <paolo.barbolini@m4ss.net> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-unmoci: preserve file modesBruce Ashfield2025-01-171-1/+1
| | | | | | | | | | | | | | | | | Based on the following patch: Subject: [meta-virtualization][PATCH] image-oci-umoci: preserve file modes in rootfs From: "Florian Wickert via lists.yoctoproject.org" <FlorianWickert=gmail.com@lists.yoctoproject.org> cp does not preserve file modes by default. This will break sudo (among others) which needs the suid flag to do its work. This patch adds the --preserve=mode flag to the cp call to fix this. Signed-off-by: Florian Wickert <FlorianWickert@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: fix textrel QA issueChen Qi2025-01-172-3/+46
| | | | | | | | | | | | | | Basically we pass "-buildmode=pie" to fix textrel QA issue. A new patch is added and submitted to upstream: 0001-Makefile-introduce-GO_TEST-for-more-flexible-configu.patch. With this new patch, the old patch, 0001-Add-trimpath-to-build-nri.test.patch, could be dropped. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: fix already-stripped QA issue and clean upChen Qi2025-01-171-5/+3
| | | | | | | | | | | | | Set DEBUG=1 to avoid stripping. See https://github.com/cri-o/cri-o/blob/main/Makefile#L93 Set STRIP=true to avoid stripping bin/pinns. See https://github.com/cri-o/cri-o/blob/main/pinns/Makefile#L4 ALLOW_EMPTY:${PN} = "1" is not needed. Remove it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-metalinter: remove it from podman's DEPENDSChen Qi2025-01-171-1/+0
| | | | | | | | This package is pure source package and its only user is podman's DEPENDS. The current podman does not need it to be built successfully. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "k3s: WIP: [needs newer go]: not for merge: upgrade"Bruce Ashfield2025-01-174-517/+539
| | | | This reverts commit b2a271ea4d9c0703812bee1f00dd2735e4ae8afc.
* Revert "k8s: WIP [needs newer go]: not for merge: update to -tip"Bruce Ashfield2025-01-171-5/+5
| | | | This reverts commit e27c332dc3fc55c6892c5dcd4c31264c4033b40b.
* Revert "docker-compose: WIP [needs go 1.22.10+]: not for merge: update to ↵Bruce Ashfield2025-01-174-320/+470
| | | | | | v2.32.2" This reverts commit 61c4511b2ac313c587a42012bd0e188b9b196758.
* k3s: WIP: [needs newer go]: not for merge: upgradeBruce Ashfield2025-01-174-539/+517
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: WIP [needs newer go]: not for merge: update to -tipBruce Ashfield2025-01-171-5/+5
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: WIP [needs go 1.22.10+]: not for merge: update to v2.32.2Bruce Ashfield2025-01-174-470/+320
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.26.1-287-gfa3950346, which comprises the following commits: fa3950346 image can be set to a local ID, that isn't a valid docker ref a35158502 can't render progress concurrently with buildkit b6db1380e exclude one-off container running convergence 2ebb47543 Only override service mac if set on the main network. d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26 2b21c5df9 fix relative path in compose file 1f3c10eb4 bump compose-go to v2.4.7 68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token 3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906 be09b2e8c checkExpectedVolumes must ignore anonymous volumes 571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name 8f644eea7 only check bind mount conflict if sync action is involved 56e92e34b use the 3 latest major versions of the engine to run e2e step a42a04dfe bump Golang version to v1.22.10 and update CI actions 34bcd03a7 add --pull to run command ed61e42f9 CI to validate fmt 65696bb1c `make fmt` so any contributor can enforce formatting 446e00520 format code with gofumpt c01c9c29f e2e test to prevent future regression 038c81f34 only check volume mounts for updated config a20b69ac5 e2e test for recreate volume 977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 8e0520e71 prompt user to confirm volume recreation 332311358 Recreate container on volume configuration change df9e420dd introduce watch restart action 142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions 700c586bc bump docker/buildx to latest release fc566509d fix support for service.mac_address e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ 624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 a1729c52d Update pkg/e2e/watch_test.go 254224c18 first watch action for a file event wins 0861e6845 fix af5b74850 revisit TestDebounceBatching 32a22c1f4 introduce sync+exec watch action e6ea8fb96 log configuration error as a watch log event 043465448 do not require a build section but for `rebuild` action 1d0839086 pull --quiet should not drop status message, only progress 69a83d130 use latest engine tags 781b9f1cd Bump buildx to 0.19.1 cbff0e555 be sure everything has been cleanup at the end of each tests e4222bff5 add local config.json to test configuration dir if exists 25197fe6d disable failing TestBuildSSH test 85cdaf9dd fix build with bake a8469db83 bump containerd to v1.7,24 08488dae5 bump google.golang.org/grpc to v1.68.0 cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2 6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2 6b3e57503 only stop dependent containers ... if there's some 8e497a128 disable TestNetworkConfigChanged which is unstable on CI 5aed70437 only check attached networks on running containers 1ff9b758d fix: commit tests 9eaba5597 feat: add commit command a85f8a40a run build tests against bake 095f65cb4 delegate build to buildx bake 208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 2d148faed use service.stop to stop dependent containers 43ac1e31c Update wait-timeout flag usage to include the unit 5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2 ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2 5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev) a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1 3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1 d4fa63fdc Update pkg/compose/convergence.go c21d4cfb4 detect network config changes and recreate if needed 61f1d4f69 go.mod: github.com/docker/buildx v0.18.0 f7cce281d go.mod: github.com/moby/buildkit v0.17.1 bcaacc7f2 gha: test against docker engine v27.4.0 3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub 2bb67f270 remove ddev e2e tests bf521fe3a implement remove-orphans on run 11e9621da ci: enable testifylint linter a9de9abcf Emit events for building images 799ab842a Fix compose images that reutn a different image with the same ID 2f65ace2a remove obsolete containers first on scale down aa0a4189e pass stal bot inactivity limit from 6 to 3 months eba3ff8f3 fix(config): Print service names with --no-interpolate 6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 a8bfbc147 bump compose-go v2.4.4 fbbd6f83d Avoid starting all services on rebuild a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact 361c0893a build(deps): bump github.com/compose-spec/compose-go/v2 513b6128c Service being declared in a profile must not trigger re-creation eececb9ad Add profile e2e test case to document in compose 501b5acde Update `MAINTAINERS` file f51bc4cd0 bump compose-go to version v2.4.2 517f87a37 bump google.golang.org/grpc to v1.67.1 718049cbd bump go.uber.org/mock to v0.5.0 02371f312 bump golang minimal version to 1.22 in go.mod a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23 51ebeb544 introduce generate command as alpha command fafaa9c5b bump compose-go to version v2.4.1 fc9c3cde0 Add license header to dockerignore_test.go 73bfbab54 fix 2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go eeea049f1 push: Fix error message typo 26064d4b6 allow usage of -f flag with oci Compose artifact 7c46beb8a resurrect --all flag for cp to target oneoff container aa1ec4524 connect to external networks by name a4ee6ca7a don't warn about uid/gid not being supported while ... they are 5617eff0c bump compose-go to v2.4.0 fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command 0aad9595a don't use progress to render restart, which hides logs 813900180 compose-go clean volume target to avoid ambiguous comparisons 82417bd5b add support for bind.recursive 0cbb73c02 Improve error message to include expected network label 38e3d670a desktop: allow this client to be identified via user-agent 24c78728e bump compose-go to v2.3.0 9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability 8da82c98e gha: set default permissions to "contents: read" 1a8c85548 Add security policy 15bd0b0c5 add support for raw env_file format 39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 3a95a0872 add support for CDI device request using `devices` f794c79eb Support Dockerfile-specific ignore-file with watch 407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav 82b41b9eb introduce service hooks 6c06170eb pass device.options to engine 60c1311f6 chore: remove errors depricated pkg 17add87e4 fix: validate-go-mod bf0418bac fix: lint b9d0c77cd feat: add export command bdb854561 fix(convergence): Serialize access to observed state 41df35c1f Remove bind options when creating a volume type 3ef5045a0 Bump docker v27.3.1 d9df7aab6 fix(push): Fix unexpected EOF on alpha publish c9d96b449 use compose-go version fixing extra_hosts unicity issue 1744b4576 Show watch error message and open DD only when w is pressed 87f457e7d add tests to down.go abcc91e2b fix(down): Fix down command if specified services are not running 8b9fe8984 After container restart register printer consumer 34b18194f check secret source exists, as bind mount would create target as a folder otherwise ce27dba52 wait for dependent service up to delay set by --wait-timeout d2b945613 append unix-style relative path when computing container target path 9c60fe67d revert commits link to mount API over bind changes c16df17e1 don't set propagation if target engine isn't linux 20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2 f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2 cb00aaad2 set propagation default e885bc084 Remove custom codeql workflow 73d3a25eb fix import 3524bcfad chore(watch): Add debug log when skipping service without build context 1076f1d9a stop dependent containers before recreating diverged service 16652ed26 Fixed possible `nil` pointer dereference c6a76b9bd bump github.com/docker/buildx v0.17.1 3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1 86ef8e62c gha: test against docker engine v27.3.0 8bf0627ea show sync files only in debug level 2e1419168 chore(watch): Add changed files path/count to log 155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 8db0cba0a bump compose-go to version v2.2.0 a7424435b Restore compose v1 behavior to recreate containers when ran with -V d445ebba3 fix linting issues with golangci-lint 1.60.2 f592aad10 bump golang to version 1.22.7 ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0 150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0 524a97e55 Fix typos 1d608e033 Use logrus instead of direct output to stderr. 329ad7392 attach: close streams when done b633c5c3e Fix typo in pull.go e6ef8629a Allow combination of bind mounts and 'rebuild' watches d658fecc6 service hash must exlude depends_on f9c7a0cc0 prefer mount API over bind 6e172d6b8 docs: duplicate documentation for root cmd 98e261ba3 docs(wait): Fix wait command description 11c7a25ae allow to add empty line in the logs when nav menu activated 234036756 upgrade docker versions 9c03797f9 initial sync files that modified after image creation 485c0eba5 initial sync for root directory 69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go 1601ead7b docs: Update docker compose kill usage ea4ccf639 Fix stop on file chane for sync-restart action b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1 adba639e8 remove all dependabot update PRs for OTel dependencies d8518529c gp.mod: github.com/gofrs/flock v0.12.1 c79f15da9 go.mod: golang.org/x/sys v0.22.0 3f55382ff update to go1.21.12 44337d2bb Enhance JSON progress events with more fields. bc733508d bump compose-go v2.1.5 c422b5447 bump github.com/docker/cli v27.1.0 e74441c90 bump github.com/docker/docker v27.1.0 2bac32a46 bump github.com/containerd/containerd v1.7.20 f278400fb gha: add docker 27.1.0 4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers 06bf339a4 fix: typos 231ea1005 update docs generation to avoid man pages generation 46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0 d3d378b92 restore setEnvWithDotEnv 163cdfd31 empty env variable with no value must be unset in container 25f85938b exclude unnecessary resources after services have been selected cacbca859 change time for stale bot ecac13f27 Remove debug mode and run twice a week 14793cc2e Add stale workflow 11d5ecdc7 update docs 9549a213b feat(watch): Add --prune option to docker-compose watch command da434013e Remove COMPOSE_MENU env from e2e tests ace69c96a Use rawjson for the build backend. 2db04c1e4 Set logging format to JSON. 8f7cd0048 Format errors as JSON when in JSON progress mode. 5a6e1a7e2 Pass 'plain' instead of 'json' to build backend 06545d066 Add JSON stream progress writer 075fd9345 go.mod: docker/cli, docker/docker v27.0.3 d062ad739 gha: test against docker v27.0.3 7cd5209cc go.mod: docker/cli, docker/docker v27.0.2 f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out` Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: update to 4.20.0-rc1Bruce Ashfield2025-01-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version 4.20.0-rc1-23-g75d88297f5, which comprises the following commits: 75d88297f5 docs/misra: Document ECLAIR extension to Rule 20.7 24c685286d Manual pages: Fix a few typos 274c509162 xl: properly dispose of libxl_dominfo struct instances 737e8cc91b xl: properly dispose of vTPM struct instance c33e14abb1 xentrace: free CPU mask string before overwriting pointer a29a1fb5a5 docs/misc: Fix a few typos f0f1050d47 docs: Fix some typos in the design docs 22d7141d2e xen/ppc: Fix double xen_ulong_t typedef in public/arch-ppc.h 6b97c31146 docs/sphinx: gitignore generated files 0edb30455b docs: rationalise .gitignore f79af67982 docs/sphinx: import sys for error reporting 9ee63ef540 automation/gitlab: disable coverage from clang randconfig 164ae033ad x86/time: prefer CMOS over EFI_GET_TIME 7eba2f46a1 x86/time: introduce command line option to select wallclock 405fdcee91 automation/eclair: make Misra rule 20.7 blocking d68de81344 docs: Improve spelling of few cases in the documentation 16a670ab53 MAINTAINERS: Change reviewer of the ECLAIR integration f4697f7a35 misra: add deviation for MISRA C Rule R11.8 ff10aa9d8f x86: Add Support for Paging-Write Feature b94305d984 x86: Rename _rsvd field to pw and move it to the bit 58 8aaf5dc2c9 build: Set DATE to SOURCE_DATE_EPOCH if available 5dd85073d1 docs/Makefile: Add ppc and riscv to DOC_ARCHES 2ab44af38f CI: Add an x86_64 Clang Randconfig job 19730dbb3f Update Xen version to 4.20-rc 3604d15d1a Config.mk: Pin QEMU_UPSTREAM_REVISION b8f80aca12 xen/arm: Fully initialise struct membanks_hdr fields b9f9b39645 docs: fusa: Add dom0less domain configuration requirements 4d8acc9c1c xen/events: fix race with set_global_virq_handler() a1a1e2b7dc xen/arm: ffa: fix build with clang 40f35d07aa CI: Update Fedora to 41 70f5a875be xen/arm64: Drop relocate_and_switch_ttbr() stub 83a4dade0f xen/flask: Wire up XEN_DOMCTL_set_llc_colors 7fa1411676 xen/flask: Wire up XEN_DOMCTL_dt_overlay 29daa72e40 xen/flask: Wire up XEN_DOMCTL_vuart_op 645b8d48c7 x86emul: correct put_fpu()'s segment selector handling d3709d1324 x86emul: VCVT{,U}DQ2PD ignores embedded rounding 15bbbecad5 libxl: drop setting XEN_QEMU_CONSOLE_LIMIT in the environment (XSA-180 / CVE-2014-3672) 25492368ea xen/perfc: Cleanup e7ea1de774 xen/perfc: Trim includes 02c24a1325 xen/perfc: Add perfc_defn.h to asm-generic 8900010501 xen/perfc: Drop arch_perfc_{gather,reset}() f29cc14de1 x86/amd: Misc setup for Fam1Ah processors 0009feff8b x86/pv: Fix build with Clang and CONFIG_PERF_COUNTERS 555866cb56 x86/traps: Rework LER initialisation and support Zen5/Diamond Rapids 7e6edeaee3 eclair-analysis: tidy toolchain.ecl configuration and mark Rule 1.1 clean 4288576c16 xen/scripts: Fix regex syntax warnings with Python 3.12 a1746cd443 x86/spec-ctrl: Support for SRSO_U/S_NO and SRSO_MSR_FIX 0d729221ab xen/arch/x86: make objdump output user locale agnostic 6e1036b197 tools: fix typo: subsytem -> subsystem c6d0d89c30 docs/man: fix typo: hexidecimal -> hexadecimal 5becb6bbad docs/man/xen-vbd-interface.7: Provide properly-formatted NAME section 6419020270 CHANGELOG: Mention LLC coloring feature on Arm 869aeb7f02 tools: Introduce a xc_xenver_buildid() wrapper 75f9160762 tools: Introduce a non-truncating xc_xenver_cmdline() 1b421d52b2 tools: Introduce a non-truncating xc_xenver_changeset() 6625d581ec tools: Introduce a non-truncating xc_xenver_capabilities() 504ea442e3 tools: Introduce a non-truncating xc_xenver_extraversion() 583a0fb0fa tools/libxc: Move xc_version() out of xc_private.c into its own file 3d94cc8809 xen/version: Misc style fixes 8eed14bf9d xen/version: Fold build_id handling into xenver_varbuf_op() e3bb1b6525 xen/version: Introduce non-truncating deterministically-signed XENVER_* subops 7cf44c61c5 xen/version: Calculate xen_capabilities_info once at boot 075e7e35db MAINTAINERS: Add myself as maintainer for NXP S32G3 294faa3760 SUPPORT.md: Describe SCMI-SMC layer feature f09ee5f550 CHANGELOG.md: Add NXP S32G3 and SCMI-SMC layer support mentions 78b0b025be xen/arm: platforms: Add NXP S32G3 Processors config a767076c03 xen/arm: vsmc: Enable handling SiP-owned SCMI SMC calls 3e322bef8b xen/arm: firmware: Add SCMI over SMC calls handling layer e7a80636f1 xen/arm: add cache coloring support for Xen image f376ff0e4f xen/arm: make consider_modules() available for xen relocation 0975bab5ea xen/arm: add Xen cache colors command line parameter 95debe51a9 xen: add cache coloring allocator for domains 5948dc1675 xen/arm: add support for cache coloring configuration via device-tree 748bd725fb tools: add support for cache coloring configuration 6985aa5e0c xen: extend domctl interface for cache coloring 6cdea3444e xen/arm: add Dom0 cache coloring support 02975cc383 xen/arm: permit non direct-mapped Dom0 construction f4985fce6f xen/arm: add initial support for LLC coloring on arm64 44dd6d4a12 xen/common: add cache coloring common code 8089e4ba44 automation: Pin down CONFIG_QEMU_PLATFORM for RISC-V's randconfig job e547f730e8 xen/ioreq: Fix check for CONFIG_ARCH_VCPU_IOREQ_COMPLETION e6472d4668 tools/xg: increase LZMA_BLOCK_SIZE for uncompressing the kernel dd05f7c8dd x86/hvm: Use constants for x86 modes d17b7562d4 tools/libxg: Don't gunzip the guests initrd 2e22a8ba29 x86/boot: Use printk_once() instead of opencoding it 63ebfcca04 x86/sched: Drop unused includes from credit2.c 188d568db8 xen/sched: Untangle credit2 vs cpu_nr_siblings() 9a17d5c7c9 xen/riscv: relocating and unflattening host device tree 0a510b8f81 xen/riscv: implement prereq for DTB relocation 81d80f44ef xen/riscv: implement data and instruction cache operations ec0ed39265 xen/riscv: update layout table in config.h b527a27e17 xen/page_alloc: introduce preserved page flags macro b359d38013 tools: add a dedicated header file for barrier definitions 826a9eb072 tools: Fix regex syntax warnings with Python 3.12 f9a2e86f21 x86/CET: Support cet=<bool> on the command line 171cb318de MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade 631f535a3d xen: update ECLAIR service identifiers from MC3R1 to MC3A2. d95703eb83 docs/guest-guide: Discuss when not use a hypercall page f38fd27c4c x86/io-apic: prevent early exit from i8259 loop detection 4cde11cdae xen/arm: Check for Static Heap feature when freeing resources df8a0eec1c xen/arm: ffa: Add indirect message support e6794b683b xen/arm: ffa: Remove per VM notif_enabled 42b6f47132 xen/arm: ffa: move message function into ffa_msg.c 6dceb1378d xen/arm: ffa: Transmit RXTX buffers to the SPMC 2833aa172f xen/arm: ffa: Use bit 15 convention for SPs 8a932b91aa xen/arm: ffa: Rework partition info get 2f9f240a5e xen/arm: ffa: Fine granular call support da07df5558 xen/arm: ffa: Fix version negotiation 1a20f862f3 xen/arm: ffa: Rework feature discovery cf15d85707 xen/arm: ffa: Rework firmware discovery 2e955d2554 tools/misc: Drop xensymoops 58ba55959a xen: add a domain unique id to each domain 5793b84c5e xen/xsm: make getdomaininfo xsm dummy checks more stringent df98c03864 xen/riscv: add {set,clear}_fixmap() functions for managing fixmap entries f5bf0d100b xen/riscv: reorder includes in asm/page.h alphabetically 0eb8b71604 xen/riscv: add destroy_xen_mappings() to remove mappings in Xen page tables 89dca886ac arm/domain_build: Make find_unallocated_memory() more generic a974366f7a MAINTAINERS: add Anthony, Michal, Roger to THE REST bf8a209915 tools/ocaml: Specify rpath correctly for ocamlmklib 13df44f8a1 CHANGELOG: Mention xl suspend/resume bec5b2447c x86: p2m-pod: address violation of MISRA C Rule 2.1 d636e0ed91 x86/FPU: make vcpu_reset_fpu() build with old gcc 1645bb7997 xen/arm: Move setup_frametable_mappings to arm/mmu c8e59af7ad xen/arm: Use vmap_contig instead of __vmap where it's possible b772a9f517 arm/setup: Move MMU specific extern declarations to mmu/setup.h 57fe471f56 common/vmap: Fall back to simple allocator when !HAS_VMAP d39a92aefe xen/mmu: enable SMMU subsystem only in MMU 214f9cc67b xen/mpu: Map early uart when earlyprintk on dc8e1b33a5 tools/xl: add suspend and resume subcommands 5a455a52ea bootfdt: Add missing trailing commas in BOOTINFO_{ACPI,SHMEM}_INIT 28301682f4 libs/guest: Fix migration compatibility with a security-patched Xen 4.13 0cc8845fb9 CI: Update to FreeBSD 14.2 ee7edb0d29 xen/arm: mpu: Implement a dummy enable_secondary_cpu_mm 5423a08eae xen/arm: mpu: Enable MPU 868fe87c46 xen/arm: mpu: Create boot-time MPU protection regions b30bad3832 xen/arm32: Get rid of __memzero() 126b0a6e53 xen/Kconfig: livepatch-build-tools requires debug information 4191619e08 libxl: extend IGD check 3df8812f90 x86emul: correct VPBROADCASTMW2D predicate testing 4c5d9a01f8 x86emul: MOVBE requires a memory operand 6b8c85872e xl: Keep monitoring suspended domain 7bd8d37897 drivers/char: rename arm-uart.c to uart-init.c a14593e399 xen/device-tree: Allow region overlapping with /memreserve/ ranges 4a06cc7178 xsm/flask: missing breaks, MISRA rule 16.4 738df43521 x86/setup: fix typo in acpi=off description bf37973929 xen/riscv: finalize boot allocator and transition to boot state 6b71d4f849 xen/riscv: initialize the VMAP_DEFAULT virtual range e6cf43717d xen/riscv: introduce setup_mm() c8e3e39085 page-alloc: make scrub_one_page() static a24f1c042d libxl/ACPI: bound RSDP allocation 4e0b1adff0 libxl/ACPI: don't hard-code guest page size fcf91ce9de x86/pv: don't populate the GDT/LDT L3 slot at domain creation 8fe330a4da xen/pci: remove logic catering to adding VF without PF 931eaa21cd x86/msi: fix locking for SR-IOV devices 4e18a39056 xen/pci: introduce PF<->VF links b661fe107d build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS 9ea9c1c49b docs/sphinx: Refresh config for newer Sphinx 233f03dd83 docs/sphinx: Fix FUSA indexing 2e853c1920 xen/common: Move gic_dt_preinit() to common code 722d93bc91 x86/pvh: also print hardware domain pIRQ limit for PVH 5c56361c61 x86/irq: fix calculation of max PV dom0 pIRQs ca5c01513a xen/arm32: mm: Rename 'first' to 'root' in init_secondary_pagetables() c0bf8816c9 xen/bitops: Fix break usage in for_each_set_bit() loop f52004b20e x86/ucode: Only rescan features on successful microcode load 365f408339 x86/boot: Load microcode much earlier on boot e0058760a0 MISRA: Mark Rule 8.4 as clean c74230bdce x86/mce: Compile do_mca() for CONFIG_PV only 5cc971a4bf CI: New stage "containers" to rebuild some containers a231538acd CI: Define XEN_REGISTRY variable 5726d8e5ef CI: Remove deprecated "only:variables" in favor of "rules:if" 96efb13459 bootfdt: Unify early printing of memory ranges endpoints 22d9e75944 misra: increase identifiers length to 63 and align doc with ECLAIR config cd7cc5320b x86/boot: add start and size fields to struct boot_module 6308301208 x86/pmstat: deal with Misra 8.4 violations a1ed107f59 x86/boot: Introduce boot-helpers.h 429840a81e xen/bootinfo: Include declaration for fw_unreserved_regions() 488579e956 x86/msi: fix Misra Rule 20.7 in msi.h 9e8c97f3eb x86/msi: prune unused macros 3ac41c60e8 x86/mm: fix IS_LnE_ALIGNED() to comply with Misra Rule 20.7 3128d7248f x86/boot: introduce module release 891f077a71 xen/arm: use domain memory to allocate p2m page tables 88c40dc108 x86/boot: convert domain construction to use boot info 8417b4b0bb x86/emul: Adjust get_stub() to avoid shadowing an outer variable b1b657afa9 x86/ucode: Drop MIS_UCODE and microcode_match_result 91afda4a34 x86/ucode: Fix cache handling in microcode_update_helper() acd9bf6f89 x86/ucode: Remove the collect_cpu_info() call from parse_blob() b1ebb6461a x86/mm: fix alignment check for non-present entries d2bbb0d455 xen/multicall: Change nr_calls to uniformly be unsigned long d2c214ede0 x86/trampoline: Rationalise the constants to describe the size 5c9b7a6659 x86/trampoline: Document how the trampoline is laid out 7d73c6f196 x86/trampoline: Simplify the wakeup_stack checks 04a77fb843 x86/trampoline: Check the size of the permanent trampoline at link time 74376e015c xen/multiboot: Make headers be standalone 5022dfe513 xen/earlycpio: Fix header to be standalone 41c8049608 x86/mm: ensure L2 is always freed if empty 73194b5701 x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings() 5b52e1b043 x86/mm: skip super-page alignment checks for non-present entries 97fb6fcf26 x86/mm: introduce helpers to detect super page alignment 939a9e800c x86emul: avoid double memory read for RORX d5febe7f64 automation/eclair: tag Rule 16.3 as clean 3d1db2942f x86/emul: use pseudo keyword fallthrough 5bf8f2f5cc x86/emul: auxiliary definition of pseudo keyword fallthrough 1179d51dcb x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode 5b8780869e x86emul: correct EFLAGS testing for BMI1/BMI2 380b32a476 x86/e820: Fix parameter names of reserve_e820_ram()/e820_change_range_type() 5c8b638c2a x86/apic: Include genapic.h in delivery.c 38febce5b3 x86/ucode: Rework Intel's microcode_update_match() 39360c38c3 x86/ucode: Rework AMD's microcode_fits() 502478bc1d x86/ucode: Fold microcode_update_cpu() and fix error handling 41314ccee8 x86/ucode: Don't use microcode_update_cpu() in early_microcode_load() d3da79e1d1 drivers/char: Use sub-page ro API to make just xhci dbc cap RO 8847d6e23f x86/mm: add API for marking only part of a MMIO page read only 64d2290cf9 mm: adjust _xvrealloc() declaration 0bfe567b58 libxl: Use zero-ed memory for PVH acpi tables 7d5781d526 x86/boot: Setup correctly fs segment for bogus_real_magic 9ef78a614d x86/trampoline: Change type of trampoline_phys to uint32_t c839c8c3fc x86/wakeup: Fix code generation for bogus_saved_magic d4829a20ad x86: Drop mach_mpspec.h b80c535794 x86: Drop mach-default/bios_ebda.h cd7b518680 x86: Move mach-default/io_ports.h to asm/io-ports.h fc147fec19 x86: Move mach-default/irq_vectors.h to asm/irq-vectors.h b212fefc04 x86: Delete mach_apic.h 5eb9c14324 x86/mach-apic: Move the genapic wrappers to genapic.h b44d96ecb3 x86/mach-apic: Drop set_apicid() bdb509c382 x86/mach-apic: Drop check_apicid_present() 9aa1e60b90 x86/mach-apic: Drop check_apicid_used() bffc52ea26 x86/mach-apic: Drop ioapic_phys_id_map() a384eef9e3 x86/mach-apic: Drop apic_id_registered() 0a51e5e17b x86/mach-apic: Move generic_*_probe() declarations into genapic.h 7f81e81774 x86: Drop includes of mach_apic.h 19c3016a8a VT-d: Drop includes of mach_apic.h 718400a54d xen/x86: prevent addition of .note.gnu.property if livepatch is enabled c8754cbc1d CHANGELOG: Add note about xAPIC destination mode change 3eda1f8912 iommu/ipmmu-vmsa: Add Renesas R8A779G0 (R-Car V4H) support 6c88e35fa1 x86/boot: Fix bootinfo.h to be standalone c62eed3ee6 x86/trampoline: Collect other scattered trampoline symbols 75035c386e x86/boot: add cmdline_pa to struct boot_module ccdb7e08fd x86/boot: move kextra into boot info 6320f08206 x86/boot: move headroom to boot modules 37bd4e90bd NUMA: Introduce NODE_DATA->node_present_pages (RAM) 65ef8cd5c0 x86/xstate: Remove stale assertions in fpu_x{rstor,save}() 00e074834e x86emul/test: drop an undue conditional 1ceabff115 CI: Refresh the Debian 12 x86_32 container 44b742de09 CI: Refresh the Debian 12 x86_64 container 2c83678e78 CI: Don't use -y with apt-get update 4e7863e82d x86/boot: introduce boot module flags 74af2d9827 x86/boot: eliminate module_map 5899b749b8 x86/boot: introduce boot module types 282bd66cee x86/ucode: Fold early_update_cache() into its single caller 59d81c89cc x86/ucode: Drop ucode_mod and ucode_blob 414725d0ee x86/ucode: Use bootstrap_unmap() in early_microcode_load() c25c964634 x86/ucode: Enforce invariant about module selection c05ac8fe30 x86/boot: Explicitly list .{sym,shstr,str}tab in build32.lds.S 1580813006 x86/boot: Uses nm command instead of map file to get symbols e75b327c45 x86/boot: Fix intermediate file names to generate 32 bit code c6b84ccf8d CI: Fix package installation for Coverity run 921a2ba5c5 x86/ucode: Move the CPIO path string into microcode_ops 3372f8a361 x86/ucode: Fold microcode_grab_module() into its single caller 28d347041f x86/ucode: Fold early_microcode_update_cpu() into its single caller 54047cedab x86/ucode: Break early_microcode_load() out of early_microcode_init() 29a4fbf60a x86/ucode: Turn microcode_init_cache() into a presmp_initcall a7c7c3f642 tools/libxl: remove usage of VLA arrays 86001b3970 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping babe11b46c CI: Drop alpine-3.18-rootfs-export and use test-artefacts d736b6eb45 xen/arm: mpu: Define Xen start address for MPU systems 0388a5979b xen/arm: mpu: Introduce choice between MMU and MPU b75dee16b3 xen/arm: Skip initializing the BSS section when it is empty a6d71d59ca SUPPORT.md: Argo: Upgrade status to Tech Preview e27436fba7 CI: Fix cppcheck parallel build more 7a88871aac Revert "x86/mm: ensure L2 is always freed if empty" 2478bed83f Revert "scripts: Fix git-checkout.sh to work with branches other than master" a6dba2761e x86/mm: ensure L2 is always freed if empty c01855bec5 x86/msi: harden stale pdev handling bd01fffef2 types: replace remaining use of __u64 cdbaca6faa byteorder: replace __u64 517cf3dbfd types: replace remaining uses of __u32 0d87ca0237 x86: modernize swab64() 60db1b1ccd byteorder: replace __u32 61ea18e39a byteorder: replace __u16 3eb037fbbc MAINTAINERS: minor file line update eb4042e3c5 Config: Update MiniOS revision c554ec124b scripts: Fix git-checkout.sh to work with branches other than master 9a2a50d5de x86/mm: Use standard C types for sized integers aa4ad424f0 x86/setup: Make setup.h header self contained fa2d831803 x86/cpu-policy: Extend the guest max policy max leaf/subleaves bb7296d77f automation/eclair: monitor Rules 11.2 and 18.1 and update configuration 6d7c26a005 automation: add x86_64 test (linux argo) 56bd76925e x86/boot: Use trampoline_phys variable directly from C code d5a73cdc6b x86/boot: Use boot_vid_info variable directly from C code db8acf31f9 x86/boot: Reuse code to relocate trampoline aa9045e771 x86/boot: Rework how 32bit C is linked/included for early boot fa1463cecf x86/boot: Explain how discard_initial_images() works 83892f6a12 x86/boot: Drop the mbi and mod pointers in __start_xen() d03dfab66a x86/boot: Convert mod[] to bi->mods[] in __start_xen() 3fd82e09d0 x86/boot: Introduce bootstrap_map_bm() to map boot_module's 0ba5392e70 x86/boot: Introduce bootstrap_unmap() 980579291d x86/boot: Drop initial_images pointer 2802b77abe x86/ucode: Explain what microcode_set_module() does 9cbf61445c xen/earlycpio: Drop nextoff parameter a974725a87 x86/boot: Remove the mbi_p parameter from __start_xen() 6cf0aaeb8d x86/boot: Fix XSM module handling during PVH boot 8ddf63a252 x86/boot: Fix microcode module handling during PVH boot 89f855d564 x86/boot: Add a temporary module_map pointer to boot_image be84e7fe58 x86/boot: convert consider_modules to struct boot_module 2c3294775e x86/boot: Simplify size calculations in move_memory() c960871c7c x86/boot: Simplify address calculations in move_memory() e33e18df05 x86/boot: Convert move_memory() to use bootstrap_map_addr() 70262d5940 x86/emul: address violations of MISRA C Rule 16.3 79560b68a1 x86/pv: remove unlikely() from BUG_ON() condition in pv_map_ldt_shadow_page() 0fe607b2a1 x86/boot: Fix PVH boot during boot_info transition period b837d02163 CI: Add {adl,zen3p}-pvshim-* tests 3be3ae0770 CI: Rework domU_config generation in qubes-x86-64.sh 6685a129c7 CI: Minor cleanup to qubes-x86-64.sh 49a068471d x86/fpu: Rework fpu_setup_fpu() uses to split it in two edb48e7645 x86/fpu: Combine fpu_ctxt and xsave_area in arch_vcpu 7cf6e073e4 x86/boot: introduce struct boot_module 73785a4c77 x86/boot: Fix PVH boot following the start of the MBI->BI conversion e9f227685e xen/arm: Add NXP LINFlexD UART early printk support 6ba3b1f828 xen/arm: Add NXP LINFlexD UART Driver 0710b38921 Update deprecated SPDX license identifiers 4c21b6affb x86/boot: Further simplify CR4 handling in dom0_construct_pv() 6e085825cb CI: Refresh and upgrade the Fedora container d84f6870fe ocaml/libs: Fill build failure due to unused variable in ocaml macro 0bcf66d05a automation: Fix URL to the gitlab container registry documentation 572010c552 x86/boot: split bootstrap_map_addr() out of bootstrap_map() a285d2ac2e x86/boot: move mmap info to boot info 29aaded97d x86/boot: move cmdline to boot info b438c5fbf4 x86/boot: move boot loader name to boot info 038826b61e x86/boot: move x86 boot module counting into a new boot_info struct 081683ea57 xen/arm: dom0less: cope with missing /gic phandle 1e81d2df4f device-tree: Move dt-overlay.c to common/device-tree/ b3ca3caaf3 x86emul/test: drop Xeon Phi S/G prefetch special case 09d22fe15c x86emul/test: correct loop body indentation in evex-disp8.c:test_one() 330d4e6250 docs: update documentation of reboot param 47990ecef2 x86/boot: Improve MBI2 structure check f4c3300d88 x86/boot: Align mbi2.c stack to 16 bytes 3f6ee3db2e xen/public: add comments regarding interface version bumps 93af5cc4df x86/boot: Prep work for 32bit object changes 2defb54490 iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU 8c858d04ac xen/riscv: parse and handle fdt command line de709f7647 xen/riscv: initialize bootinfo from dtb 028148788f xen/vpci: address violations of MISRA C Rule 16.3 ed896312f2 xen/common: move device initialization code to common code af2a1339c4 xen/riscv: add section for device information in linker script 7a87b5e05c xen/ppc: add section for device information in linker script 31f31b624a xen/arm: use {DT,ACPI}_DEV_INFO for device info sections 083344a05d xen: define ACPI and DT device info sections macros 17d32cf2ec xen: introduce DECL_SECTION_WITH_LADDR 542ac112fc xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init() 76a54badf8 stubdom: use real lib dependencies for xenstore stubdoms 45333e2888 tools/xenstored: remove unneeded libxenguest reference 906cee8718 config: update Mini-OS commit b2c7d7070d dt-overlay: Print overlay I/O memory ranges in hex 239b0c8f06 dt-overlay: Ignore nodes that do not have __overlay__ as their subnode b32d24bcd6 dt-overlay: Support target-path being root node 81862825e8 dt-overlay: Remove ASSERT_UNREACHABLE from add_nodes() 656ac422c4 device-tree: Remove __init from unflatten_dt_alloc() 95f2a5656e dt-overlay: Fix NULL pointer dereference b5b9420334 stubdom: add fine grained library config items to Mini-OS configs a592c98f94 ocaml/libs: Remove xsd_glue_dev package, package plugin_interface_v1.a c73adc9cf8 Flask: replace uses of __u32 2b49ef4503 xen/riscv: register Xen's load address as a boot module 59ef5d2a95 xen/riscv: switch LINK_TO_LOAD() to virt_to_maddr() a11b3926c4 xen/riscv: implement virt_to_maddr() 4dec51ca72 x86: restore semicolon after explicit DS prefix 439f3e6757 xen: Update header guards - ARGO eb48045d74 x86/vlapic: Move lapic migration checks to the check hooks e305256e69 CI: Stop building QEMU in general 3b79d825b5 MAINTAINERS: Add myself as a reviewer for RISC-V 6b80ec957c types: replace remaining uses of s64 9d278c8c6c MAINTAINERS: add myself as maintainer for arm tee 2f413e22fa x86/msr: add log messages to MSR state load error paths dcbf8210f3 x86/APIC: Switch flat driver to use phys dst for ext ints b315293130 xen: Update header guards - RISC-V 6bbcb97ba4 xen: Update header guards - I/O MMU 964c9568ea xen: Update header guards - Intel TXT c95cd5f9c5 x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs 908c1b5efa docs: fusa: Replace VM with domain 7d83c392c7 xen/pci: address a violation of MISRA C Rule 16.3 7f743fac94 x86/emul: add defensive code 2e0b545b84 ioreq: don't wrongly claim "success" in ioreq_send_buffered() 011814bd45 x86/boot: Rationalise .gitignore 9ab0496350 .gitignore: Remove not generated files 16a81486c4 automation: use python-3.11 in Leap container c1035b0463 CI: Drop bin86/dev86 from archlinux container 79ade905b9 x86: Use standard C types in multiboot2.h header 2d6a835b05 build: move xenlibs-dependencies make definition to uselibs.mk c66c134175 stubdom: explcitly add libc and lwip Mini-OS config options e07ae82853 stubdom: swtich to local .gitignore file 29555668b5 x86/dpci: do not leak pending interrupts on CPU offline a7201c0211 CODING_STYLE: header file guard naming rules ceefa8c039 efi: address violation of MISRA C Rule 16.3 6b20755c24 automation/eclair: tag Rule 13.6 as clean a0094dc136 xen/gnttab: address a violation of MISRA C Rule 13.6 6f621f23bc EFI: address a violation of MISRA C Rule 13.6 1223375d8b CI: Fix builds following qemu-xen update bcce5a6b62 automation: shorten the timeout for smoke tests 2d1c673bae automation: add a smoke test for xen.efi on X86 636e66b143 automation: preserve built xen.efi 1eeb7c3379 x86: Introduce X86_ET_* constants in x86-defns.h 7fd80df2bf x86/boot: Convert remaining uses of the legacy ALIGN d82e0e094e automation: introduce TEST_TIMEOUT_OVERRIDE 163338e6fb x86/boot: Don't use INC to set defaults f75780d26b xen: move per-cpu area management into common code eb21ce14d7 x86/boot: Rewrite EFI/MBI2 code partly in C 444cb9350f stubdom: Fix newlib build with GCC-14 41190d2ceb x86/kexec: Separate code and data into different cache lines b102c9f1ce x86: move ENTRY(), GLOBAL(), and ALIGN eaa7a72eda x86: convert dom_crash_sync_extable() annotation 373d93cfce x86/kexec: convert entry point annotations a8c8d6c529 x86/ACPI: annotate assembly function/data with type and size 1d199e83c7 VMX: convert entry point annotations bcd932b5b2 xen/riscv: introduce early_fdt_map() 557b7f1b9a xen/riscv: page table handling 3a38cc2bd7 x86: prefer RDTSCP in rdtsc_ordered() f9ce66ea9d docs: fusa: Add Assumption of Use (AOU) 633ee8b2df x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour 8a6c495d72 x86/pv: Handle #PF correctly when reading the IO permission bitmap 7429e1cc07 x86/pv: Rework guest_io_okay() to return X86EMUL_* 66878a8b75 x86/MSR: improve code gen for rdmsr_safe() and rdtsc() b42cf31d11 x86: use alternative_input() in cache_flush() db70a52f75 iommu/amd-vi: make IOMMU list ro after init b06e76db7c x86/traps: Re-enable interrupts after reading cr2 in the #PF handler 67a8e5721e x86/PV: simplify (and thus correct) guest accessor functions 94423b8f75 drivers/video: Convert source files to UTF-8 f97f885c71 tools: Add new function to do PIRQ (un)map on PVH dom0 b93e5981d2 tools: Add new function to get gsi from dev d6e9a2aab3 x86/irq: allow setting IRQ permissions from GSI instead of pIRQ c353c47757 xen/riscv: introduce and initialize SBI RFENCE extension b6c8f34a90 xen/riscv: introduce functionality to work with CPU info f89e1a1702 xen/riscv: introduce asm/pmap.h header 13684f539e xen/riscv: set up fixmap mappings f9e69c266e xen/riscv: allow write_atomic() to work with non-scalar types dee9e4b1cc x86/intel: optional build of PSR support 34d4227e6a x86: introduce x86_seg_sys 457052167b blkif: Fix a couple of typos e9a0101dde blkif: Fix alignment description for discard request 0857c75e6f x86/boot: Refactor BIOS/PVH start a184ac74f5 x86/alternatives: build time check feature is in range aa5a06d5d6 x86/alternatives: do not BUG during apply fa49f4be41 xen/livepatch: do Xen build-id check earlier 86d09d16dd xen/livepatch: simplify and unify logic in prepare_payload() 8c81423038 xen/livepatch: drop load_addr Elf section field 3a28da8f4d xen/livepatch: remove useless check for duplicated sections b083121c94 x86/boot: Initialise BSS sooner 1aec9a4ba7 changelog: add note about blkif protocol fixes b81ea162ef x86/defns: Fix typo in comment "Porection" -> "Protection" 11eb4e2969 xen: introduce common macros for per-CPU sections defintion 512ac41aa6 xen/efi: efibind: Fix typo in comment 8752ad83e7 xen/ucode: Make Intel's microcode_sanity_check() stricter 0416f1f66a xen/ucode: Improve commentary for parsing AMD containers 9b0d2465c8 x86/APIC: Remove x2APIC pure cluster mode c42d9ec61f x86/vLAPIC: prevent undue recursion of vlapic_error() f7f42accbb x86/efi: Use generic PE/COFF structures 6a039b0500 x86/cpufeature: Reposition cpu_has_{lfence_dispatch,nscb} 95c3ae591c tools/libxs: Style consistency improvements b1642aaea2 x86: enable long section names for xen.efi c4344ecc5a x86/mwait-idle: add dependency on general Intel CPU support e1c8a3dc8a x86/boot: Drop stale comment about zeroing the stack f4c7663d19 xen/riscv: use {read,write}{b,w,l,q}_cpu() to define {read,write}_atomic() b64f62fcbd ubsan: use linux-compat.h 7298e63519 docs/misra: add R17.2 and R18.2 0843b40c47 docs: fusa: Add requirements for emulated uart 03400a2a26 automation/eclair: add deviation for MISRA C 2012 Dir 4.10 ef3b4768b3 arm/smmu: Complete SMR masking support 6279b9a3be xen/arm: Enable workaround for Cortex-A53 erratum #1530924 4e1a333745 arm: Drop deprecated early printk platform options a8bf14f6f3 xen/ucode: Fix buffer under-run when parsing AMD containers 4e23c86bd8 xen/keyhandler: Move key_table[] into __ro_after_init 08ffd8705d x86/hvm: Simplify stdvga_mem_accept() further 42968684e5 ARM/cache: Drop legacy __read_mostly/__ro_after_init definitions ec185ec239 x86/mm: undo type change of partial_flags 221f2748e8 blkif: reconcile protocol specification with in-use implementations eb97f87919 types: replace remaining uses of s32 5ffe6d4a02 types: replace remaining uses of s16 6e7f7a0c16 xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build 40f5c7e138 x86/HVM: drop .complete hook for intercept handling b180a50326 x86/HVM: drop stdvga's "lock" struct member 3beb4baf2a x86/HVM: drop stdvga's "vram_page[]" struct member 86c03372e1 x86/HVM: drop stdvga's "{g,s}r_index" struct members 7aba44bdd7 x86/HVM: drop stdvga's "sr[]" struct member b16c0966a1 x86/HVM: drop stdvga's "gr[]" struct member 89108547af x86/HVM: remove unused MMIO handling code b740a9369e x86/HVM: drop stdvga's "stdvga" struct member eb7cd0593d x86/HVM: properly reject "indirect" VRAM writes 3d65f1c072 x86emul: support CMPccXADD 582fade2a9 automation/eclair_analysis: address violation of Rule 20.7 738db54711 xen/bitmap: remove redundant deviations 3c5c9743ca automation/eclair: update configuration of Rule 20.7 33888e7aaa automation/eclair_analysis: deviate linker symbols for Rule 18.2 4b3f30ea30 automation/eclair_analysis: fix MISRA Rule 20.7 regression in self-tests.h 035baa203b x86/hvm: allow {,un}map_pirq hypercalls unconditionally 53b7246bdf x86/HVM: drop stdvga's "cache" struct member 2b24c090d1 x86/mmcfg: address violation of MISRA C Rule 16.3 f6cc23e234 x86/mm: address violations of MISRA C Rule 16.3 6f5b873600 x86/monitor: address violation of MISRA C Rule 16.3 c4fe5296e6 x86/hypercall: address violations of MISRA C Rule 16.3 a42c3ec62f x86/vm_event: address violation of MISRA C Rule 16.3 b3173a25ba x86/time: address violations of MISRA C Rule 16.3 76529a1ce1 x86/psr: address violation of MISRA C Rule 16.3 09217c2618 x86/APIC: address violation of MISRA C Rule 21.2 233ee468bb x86/cpufreq: address MISRA Rule 7.3 violation cb4f22884e x86/time: introduce probing logic for the wallclock 6da090b4b7 x86/time: pull cmos_rtc_probe outside of function and rename 5b4664b9e4 x86/mm address violations of MISRA C:2012 Rule 5.3 3502c033f6 arm/gicv3: Fix ICH_VTR_EL2.ListRegs mask c23571fe31 automation: fix xilinx test console settings Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>