summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* runc-opencontainers: update to v1.3.0-rc.1Bruce Ashfield2025-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.3.0-rc.1-40-g25d47644, which comprises the following commits: bac33825 build(deps): bump github.com/opencontainers/selinux bc96bc85 libct/seccomp: use maps and slices pkgs 370733b7 libct/cap: rm mapKeys, use maps.Keys, slices.Sorted 3a33b6a3 Make state.json 25% smaller 9c5e687b libct: Use chown(uid, -1) to not change the gid d31e6b87 ci: bump bats to v0.11.0 8e653e40 script/setup_host_fedora.sh: use bash arrays a76a1361 script/setup_host_fedora.sh: remove -p from mkdir af386d1d tests/int: rm some "shellcheck disable" annotations b48dd651 ci: bump shellcheck to v0.10.0 6e5ffb7c Makefile: bump shfmt to v3.11.0 53931553 libct: log a warning on join session keyring failure 9aeb7905 tests/int/selinux: fix skip message 5ac77ed6 libct/int: add/use needUserNS helper 1d9bea53 .cirrus.yml: install less dependencies 1afa1b86 signals: replace unix.Kill with process.Signal 346c80d7 libct: replace unix.Kill with os.Process.Signal 135552e5 CI: migrate Vagrant + Cirrus to Lima + GHA d5fe5303 build(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 000cdef7 build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 79e9cf53 doc: update spec-conformance.md 12c2e21f build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 05e83fc6 deps: bump go-criu to v7 5d6e7e12 VERSION: back to development a00ce11e VERSION: release v1.3.0-rc.1 10ca66bf runc exec: implement CPU affinity d92dd226 performance improvement: setup signal notify in a new go routine a75076b4 Switch to opencontainers/cgroups 6e01e850 CHANGELOG: fwd port 1.2.1 to 1.2.5 changes 537a2276 build(deps): bump github.com/opencontainers/runtime-spec c43ea7d6 exeseal: do not use F_SEAL_FUTURE_WRITE 1d047e44 expose criu options for link remap and skip in flight 559bd4eb libcontainer: rename dmz -> exeseal ad09197e libct: don't send config to nsexec when joining an existing timens 74619689 test: exec into a container with private time ns 28475f12 Retry direct unix package calls if observing EINTR 4e0f7a20 libct/cg/dev: remove specconv dependency 69792827 libct/cg: don't use utils.CleanPath 5e1dcdf5 libct/cg: add internal/path.Inner 271aa88e libct/cg/fs2: rm _defaultDirPath 7bebe68c libct/cg: stop using utils.ProcThreadSelf 42449786 CI: gha: rm ubuntu-20.04 79a4ac05 deps: bump cilium/ebpf to v0.17.3 8db6ffbe libc/utils: simplify CleanPath 26cfe142 release: explicitly set --keyserver in release signing scripts 0e3b5d5b build: bump libseccomp to v2.5.6 d237bc46 .cirrus.yml: use Go 1.24 16d73367 Require Go 1.23.x, drop Go 1.22 support 87420749 CI: add Go 1.24, drop go1.22 99f9ed94 runc exec: fix setting process.Scheduler b9114d91 runc exec: fix setting process.ioPriority 73849e79 libct: simplify Caps inheritance 049a5f76 libct/cap: allow New(nil) f26ec922 libct: rm Rootless* properties from initConfig 2a86c357 libct: document initConfig and friends 13277b20 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 4b87c7d4 Fixups for newProcess 8fbdb7e7 setupIO: optimize c4eb0c61 libct: createExecFifo: optimize 5d2e2445 execProcess: move some code to newProcess c283ed10 tests/int: add hooks argv[0] test 8529591c build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 746a5c23 libcontainer/configs/validate: improve rootlessEUIDMount 055041e8 libct: use strings.CutPrefix where possible 259b71c0 libct/utils: stripRoot: rm useless HasPrefix ecf74300 libct/cg/fscommon: GetCgroupParam*: unify ef983f51 libct/cg/fscommon: ParseKeyValue: stricter check d83d533b libct/cg/fscommon: GetValueByKey: use strings.CutPrefix f1348712 libct/cg/fscommon: ParseKeyValue: use strings.Cut e9855bda libct/cg/fscommon: use strings.Cut in RDMA parser 930cd494 libct/cg/fs2: use strings.Cut in parsePSIData 40ce69cc libct/cg/fs2: use strings.Cut in setUnified 037668e5 libct/cg/fs2: simplify parseCgroupFromReader 075cea3a libcontainer/cgroups/fs: some refactoring 4271ecf7 libct/cg/fs: refactor getCpusetStat bfcd479c libct/cg/fs: getPercpuUsage: rm TODO 871d9186 exec: improve getSubCgroupPaths 7149781f exec: use strings.Cut to parse --cgroup ec9b0b5f runc list: use standard os/user 52f702af libct: earlier Rootless vs AdditionalGroups check 7dc24868 libct: switch to numeric UID/GID/groups b55167e0 tests/int/exec --user: check default HOME ccb589bd libc/int/userns: add build tag to C file d84388ae libct/cg/sd: set the DeviceAllow property before DevicePolicy a274d275 build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 54fa0c55 capabilities: be more graceful in resetting ambient f414b534 CI: fix criu-dev compile 8e5bb0d8 deps: roll back to cilium/ebpf v0.16.0 6c9ddcc6 libct: switch from libct/devices to libct/cgroups/devices/config 200f5631 libct/devices: move config to libct/cg/devices/config 70e500e7 deps: update to github.com/cyphar/filepath-securejoin@v0.4.1 24ec764a build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 33315a05 libcontainer: if close_range fails, fall back to the old way 111e8dcc libcontainer: Use MaxInt32 as the last FD to match kernel size semantics 7b26da9e libcontainer: Prevent startup hang when CloseExecFrom errors 9af79522 build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 a50e6872 tests/int: simplify assignments a22ea827 tests/int/hooks_so: don't hardcode soname 1890af6d support cgroup v1 mounted with noprefix af929228 RELEASES: add formal release policy for runc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v1.4.0Bruce Ashfield2025-03-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.9.0-438-g204d054c, which comprises the following commits: 204d054c Bump to v1.4.0 59a9904e README.md fix demo link 8460ac45 Bump golang.org/x/crypto to v0.33.0 db872518 Bump github.com/containers/buildah from 1.38.1 to 1.39.1 87d8ab15 bugfix panic in system events 610cf9fc Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 aa8a4771 Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 7c30fa9d Bump podman to v5.4.0 9a57aeb7 enhance: merge READMEs a07daf87 docs: enhance directory structure 53146731 Bump github.com/containers/podman/v5 from 5.3.1 to 5.3.2 958a2a44 packit update epel + centos stream af4b22fa Bump golang.org/x/net from 0.30.0 to 0.33.0 d8f0ffb3 Bump github.com/gdamore/tcell/v2 from 2.7.4 to 2.8.1 086842a2 Bump golang.org/x/crypto from 0.31.0 to 0.32.0 f1f1ff11 Bump golang.org/x/crypto from 0.29.0 to 0.31.0 0e8ff20e Bump to v1.4.0-dev 37019c2f Bump to v1.3.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: update to v1.3.0 -tipBruce Ashfield2025-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-compose to version v1.3.0-107-g4d899ed, which comprises the following commits: f9489af Allow merging of args in both list and dict syntax 65b455f Fix project name evaluation order 1aa750b integration/tests: Test project name override with COMPOSE_PROJECT_NAME env variable 98b9bb9 Fix interpolation for COMPOSE_PROJECT_NAME 170411d test/integration: Test COMPOSE_PROJECT_NAME interpolation f5a6df6 added changes to release notes f106ea0 modifications to pass pylint test b748c26 add try-except block to handle error in case of shutdown error 3973c47 catch SIGINT signal properly in 'up' function and call compose 'down' function for a graceful shutdown 2e7d83f Properly surface errors from build commands 8ef537e test/integration: Automate manual `selinux` test d476071 Don't raise exception on inexistent services in 'down' command 202c377 test/integration: Automate manual `uidmaps` test b9f2779 Add hook to check for signoff in commit messages 4cd1642 Add quiet flag to podman-compose config fd40133 added release note to newsfragment directory 37b27fa Refactor event loop handling to simplify logic for Windows platforms c6b3d49 Adds lint exclusions already ignored by the code 10ad739 Replaces black with ruff on pre-commit-config 784d798 Fix event loop handling for Windows platform in compose_up function 81a0a59 Add more logging tests c289a3b Fix logging test coding style baccce4 Fix comments related to logging cbc5a8c Add newsfragment for interface_name option aeaceed integration test for x-podman.interface_name option b1eb558 Document existence of x-podman.interface_name 1cdc9e6 interface_name can be specified in net_config_ 838957b test/integration: Automate manual 'secrets' test d4e5859 Do not close file descriptors when executing podman bfba7ba tests/integration: Automate manual `seccomp` test 43a2f1d Implement x-podman.pod_args to override --pod-args default eaec193 tests/integration: Describe `pid` test bfea139 tests/integration: Automate manual `no_services` test e626f15 tests/integration: Automate manual `nets_test_ip` test 29404af tests/integration: Automate manual 'nets_test3' test e03d675 Remove incorrect os.chdir call to fix folder error bdb3e4e Throw a readable error on too old Python 105e390 Add support for dockerfile_inline d9ef3d2 tests/integration: Add missing __init__.py for network_scoped_aliases d23ef4f tests/integration: Add missing __init__.py for build_labels test b685bce tests/integration: Move test utils to one test_utils file 7d5bf64 tests/integration: Move test "vol" to corresponding directory 9f7ae38 tests/integration: Move test "ports" to corresponding directory 3cee4e0 tests/integration: Move test "config" to corresponding directory 498a199 tests/integration: Move test "env" to corresponding directory 488908f tests/integration: Move test "env_file" to corresponding directory f7bcc42 tests/integration: Move test "up_down" to corresponding directory a73df71 tests/integration: Move test "build_ulimits" to corresponding directory 50dc19f tests/integration: Move test "network" to corresponding directory 9029dce tests/integration: Move test "nets_test2" to corresponding directory a8282c7 tests/integration: Move test "nets_test1" to corresponding directory f4b775c tests/integration: Move test "nethost" to corresponding directory adf30e0 tests/integration: Move test "multicompose" to corresponding directory 41675c3 tests/integration: Move test "ipam_default" to corresponding directory 6caf2ea tests/integration: Move test "interpolation" to corresponding directory 3093b00 tests/integration: Move test "include" to corresponding directory 1c21d65 tests/integration: Move test "in_pod" to corresponding directory 18e5fd6 tests/integration: Move test "filesystem" to corresponding dir 24bdfd1 tests/integration: Move test "extends_w_file_subdir" to corresp. dir c2d3e15 tests/integration: Move test "extends_w_file" to corresponding directory ba95100 tests/integration: Move test "extends_w_empty_service" to corresp. dir 6022669 tests/integration: Move test "extends" to corresponding directory e29df71 tests/integration: Move test "exit_from" to corresponding directory 21b9d38 tests/integration: Move test "deps" to corresponding directory 4c17ce2 tests/integration: Move test "default_net_behavior" to corresponding dir 09d54e9 tests/integration: Move test "build_secrets" to corresponding directory f1dd9b3 tests/integration: Move test "build_fail" to corresponding directory 87af67f tests/integration: Move test "network_scoped_aliases" to corresp. dir f1d6638 tests/integration: Move test "build" to corresponding directory 69ffff3 tests/integration: Move test "additional_contexts" to corresp. dir 9be3ec9 Add network "dns" support 6e642dc Add network "disable-dns" support 2aa042b expand service environment_variables before adding to subs_dict bc4177f Exclude dependent containers on up if --no-deps. 8206cc3 Run should not add --requires if --no-deps. 48c6c38 build(deps): bump virtualenv from 20.25.1 to 20.26.6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v5.4.1Bruce Ashfield2025-03-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.4.1-10-g227df90eb7, which comprises the following commits: 33b4b301fc RPM: Add riscv64 to ExclusiveArch-es 64e2b91ab4 Fix HealthCheck log destination, count, and size defaults bef77d74d7 Win installer test: hardcode latest GH release ID 88a3bfbde2 Packit: Fix action script for fetching upstream commit 405c55b4a4 Bump to v5.4.2-dev b79bc8afe7 Bump to v5.4.1 01a55d9d5c update gvproxy version to 0.8.4 0f20d21240 Update Buildah to v1.39.2 bdcede792f Update release notes for v5.4.1 3e6e003173 Fix reporting summed image size for compat endpoint 090dbc4cee podman-import only supports gz and tar 5327df1921 quadlet kube: correctly mark unit as failed bc37e935ba pkg/domain/infra/abi/play.go: fix two nilness issues 02e8a59774 kube play: don't print start errors twice cd8582d4f0 libpod: race in WaitForConditionWithInterval() ab7c54b4cf libpod: race in WaitForExit() with autoremove 180d55165d Don't try to resolve host path if copying to container from stdin. b716aa17e2 Use svg for pkginstaller banner bff9da4e3a Create quota before _data dir for volumes a15623d12f Packit: clarify secondary status in CI 118aa9ef94 Packit/RPM: Display upstream commit SHA in all rpm builds fea21e9bc0 podman run: fix --pids-limit -1 wrt runc 07d7101429 vendor: update github.com/go-jose/go-jose/v3 to v3.0.4 599a0b71a6 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] b8b0639e7c wire up --retry-delay for artifact pull 5671cfe3ab Revert "silence false positve from golangci-lint" 2d18a7cc47 update golangci-lint to v1.64.4 0b31c710ce update golangci-lint to v1.64.2 fc63a340f3 silence false positve from golangci-lint e50898e1f7 cmd/podman: refactor Context handling 11ef179de2 fix new usetesting lint issue f5d96a5959 Packit/Copr: Fix `podman version` in rpm fd5eb1fdf3 Remove persist directory when cleaning up Conmon files 223f827213 Bump to v5.4.1-dev f9f7d48b24 Bump to v5.4.0 246011458c Update release notes for v5.4.0 final 3d344ffd26 In SQLite state, use defaults for empty-string checks 2612e3c233 Bump FreeBSD version to 13.4 3d917a395c docs: add v5.4 to API reference 13ebc5860c Update rpm/podman.spec f34d6c76db RPM: set buildOrigin in LDFLAG 6218d42ed6 RPM: cleanup macro defs 18249e10c1 Makefile: escape BUILD_ORIGIN properly d280feb96c rootless: fix hang on s390x fa263d2cc9 Set Cirrus DEST_BRANCH appropriately to fix CI 0f01f00f03 Bump to v5.4.0-dev ad54787bf0 Bump to v5.4.0-rc3 6c78bad0dd Update release notes for v5.4.0-rc3 02eac2979c Add BuildOrigin field to podman info 141eae99b8 artifact: only allow single manifest d5989990d5 test/e2e: improve write/removeConf() 522f9de9e3 Add --noheading to artifact ls 9e83191c8f Add --no-trunc to artifact ls 4cd76ef27b Add type and annotations to artifact add bc8124fd62 pkg/api: honor cdi devices from the hostconfig 57b9709b69 util: replace Walk with WalkDir bc5de3dfc7 fix(pkg/rootless): avoid memleak during init() contructor. 8ee7b117b6 Add `machine init --playbook` 5feb81d9ff RPM: include empty check to silence rpmlint 48459db076 RPM: adjust qemu dependencies 9b67d4c285 Force use of iptables on Windows WSL cadf081554 rpm: add attr as dependency for podman-tests d4f5817862 update gvproxy version fe02e390af [v5.4] Bump Buildah to v1.39.0 9e2e7f2a77 podman exec: correctly support detaching e24ccdd27b libpod: remove unused ExecStartAndAttach() 25674e05cd [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0 5f6adf4d80 Move detection of libkrun and intel 599da8c50b Prevent two podman machines running on darwin 03b100563e Remove unnecessary error handling bba28688f7 Remove usused Kind() function d475b48766 Bump to v5.4.0-dev 14f6a69dd3 Bump to v5.4.0-rc2 d52277db75 Update release notes for v5.4.0-rc2 fa0e8f0582 Safer use of `filepath.EvalSymlinks()` on Windows 1c111eead7 error with libkrun on intel-based machines 14cd6ff1d2 chore(deps): update dependency pytest to v8.3.4 97323a691a test/buildah-bud: skip two new problematic tests on remote 527a51dcc4 Fix podman-restart.service when there are no containers 3aa09dd521 Avoid upgrading from v5.3.1 on Windows 81eb84fdaa Clean up after unexpectedly terminated build 06c103469d system-tests: switch ls with getfattr for selinux tests 141bd613b8 vendor latest c/{buildah,common,image,storage} bbf00ec6bf Makefile: Add validatepr description for 'make help' output 0d2431dca2 docs: Enhance podman build --secret documentation and add examples 016f41ab49 docs: mount.md - idmapped mounts only work for root user 4bdb947d72 Define, and use, PodmanExitCleanlyWithOptions df9e8c3ce6 Eliminate PodmanSystemdScope 7c40e85968 Fix image ID query 11ee6c4f90 Revert "Use the config digest to compare images loaded/pulled using different methods" 6639c20278 Update c/image after https://github.com/containers/image/pull/2613 f20d9bd637 Update expected errors when pulling encrypted images 9363c8c362 Eliminate PodmanExtraFiles 44c5767460 Introduce PodmanTestIntegration.PodmanWithOptions ce1b4f72a7 Restructure use of options d509bb0823 Inline PodmanBase into callers f17590b2bd Pass all of PodmanExecOptions to various [mM]akeOptions functions f2d552f5db Turn PodmanAsUserBase into PodmanExecBaseWithOptions 51d599bce3 Avoid indirect links through quadlet(5) 5522def65a do not set the CreateCommand for API users 5181becfde Add podman manifest rm --ignore f911d39457 Bump to v5.4.0-dev 1b3528df8d Bump to v5.4.0-rc1 6c81dc4f42 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2 d7553fabc7 podman artifact b6f1364319 vendor latest c/{common,image,storage} cfac38a0f2 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2 6ee51c5e4f cirrus: bump macos machine test timeout bdc195d641 pkg/machine/e2e: improve podman.exe match dc3a7e56be pkg/machine/e2e: improve "list machine from all providers" cfeefb3219 Remove JSON tag from UseImageHosts in ContainerConfig 805e78c2aa Set network ID if available during container inspect 969057bacc Stop creating a patch for v5.3.1 upgrades on windows 34d42514f1 compose docs: fix typo d4f4cf0988 Document kube-play CDI support e93f0acbee docs: Add quadlet debug method systemd-analyze 6ad44fe179 Replace instances of PodmanExitCleanly in play_kube_test.go 6ad4742ba8 docs: add 'initialized' state to status filters ded5a2db82 fix(deps): update module google.golang.org/protobuf to v1.36.3 3fb37c588d Switch all calls of assert.Nil to assert.NoError 6565bde6e8 Add --no-hostname option 68f29df602 Fix unescaping octal escape sequence in values of Quadlet unit files a91aa36367 Remove `.exe` suffix if any 0d0a78cc6b Add kube play support for CDI resource allocation 75b4a1b2aa add support to `;` for comments in unit files as per systemd documentation de1aa44cc9 Use PodmanExitCleanly in attach_test.go 0c18beaea7 Introduce PodmanTestIntegration.PodmanExitCleanly ba24512959 chore(deps): update dependency setuptools to ~=75.8.0 121caa04ca Add newer c/i to support artifacts fca64e5429 fix(deps): update module golang.org/x/tools to v0.29.0 3be6c501c0 fix(deps): update module golang.org/x/net to v0.34.0 806722b3d6 specgenutil: Fix parsing of mount option ptmxmode b0b1d19723 namespaces: allow configuring keep-id userns size 6dba0d9586 Update description for completion 0b3ad66a78 Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless 418ea52e06 Document .build for Image .container option c75e1c41d0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1 62c81298fd New VM Images e9fb805522 update golangci/golangci-lint to v1.63.4 4288c81da0 fix(deps): update module google.golang.org/protobuf to v1.36.2 b23349d3bd chore(deps): update dependency setuptools to ~=75.7.0 dd76034660 Fixing ~/.ssh/identity handling 1dbd68f061 vendor latest c/common from main 17a9408c0d fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12 481c608fd4 fix(deps): update module github.com/opencontainers/runc to v1.2.4 1e0f03b046 specgen: fix comment 7a51916e3b Add hint to restart Podman machine to really accept new certificates a445ebde9d fix(deps): update module github.com/onsi/gomega to v1.36.2 2aff249156 fix(deps): update module github.com/moby/term to v0.5.2 6fa234a5de Pass container hostname to netavark 53e5e402aa Fix slirp4netns typo in podman-network.1.md d1a3f96cbf Add support to ShmSize in Pods with Quadlet de829251fc fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1 29c29e215f chore(deps): update module golang.org/x/crypto to v0.31.0 [security] 1b1e0446a5 fix(deps): update module golang.org/x/net to v0.33.0 [security] ecd882f9f7 Kube volumes can not container _ cbd650212a fix(deps): update module github.com/docker/docker to v27.4.1+incompatible f2f6eb88e9 test/system: fix "podman play --build private registry" error 23d4908c8b test/system: CopyDirectory() do not chown files 8729725684 test/system: remove system dial-stdio test 153a975888 shell completion: respect CONTAINERS_REGISTRIES_CONF 10d65f30b6 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6 8b23e6d408 When generating host volumes for k8s, force to lowercase ff9d4e72b0 test: enable newly added test 8b90e3f9c0 vfkit: Use 0.6.0 binary 3021dbec7a gvproxy: Use 0.8.1 binary 64e94efb95 systemd: simplify parser and fix infinite loop 5f79cd3aef Revert "win-installer test: revert to v5.3.0" e3d2463a48 Avoid rebooting twice when installing WSL 2bca5052f1 Avoid rebooting on Windows when upgrading and WSL isn't installed af607d0de4 Add win installer patch d582c39dc8 Bump WiX toolset version to 5.0.2 e6d8603136 test/e2e: SkipOnOSVersion() add reason field e74df8c35a test/e2e: remove outdated SkipOnOSVersion() calls ae9120a71d Update VM images f1e77cf172 fix(deps): update module golang.org/x/crypto to v0.31.0 [security] c11fd6562d fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0 851ef2529f fix(deps): update module github.com/opencontainers/runc to v1.2.3 cf505fe788 quadlet: fix inter-dependency of containers in `Network=` e4a135a6ac Add man pages to Mac installer 5848dbee68 fix(deps): update module github.com/onsi/gomega to v1.36.1 a70c418b7d fix(deps): update module github.com/docker/docker to v27.4.0+incompatible 2f31a61cce Fix device limitations in podman-remote update on remote systems 2c58af0e6b Use latest version of VS BuildTools 9c14d15f4c bin/docker: fix broken escaping and variable substitution 0a4885610d manifest annotate: connect IndexAnnotations 8f45474809 Fix panic in `manifest annotate --index` 9dbc9b5055 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5 45c979d6b3 fix(deps): update module golang.org/x/net to v0.32.0 2c17ffa54d fix(deps): update module golang.org/x/tools to v0.28.0 a9b52fdedf fix(deps): update module golang.org/x/crypto to v0.30.0 66f9e81c17 fix(deps): update module golang.org/x/sys to v0.28.0 8f1266c717 Fix overwriting of LinuxResources structure in the database c76932f4c6 api: replace inspectID with name 18a93ec68b fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563 e7bbcbfbf7 Replace ExclusiveArch with ifarch c4c3fb23ce fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1 ededb4c3c4 Improve platform specific URL handling in `podman compose` for machines 0d3a653c30 Fix `podman info` with multiple imagestores 43825122d4 Switch to fixed common 49b52227b4 refact: use uptime.minutes instead of uptime.seconds dec8f3dca6 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11 db6c2c7cdf fix(deps): update golang.org/x/exp digest to 2d47ceb f3d250cf27 fix(deps): update github.com/godbus/dbus/v5 digest to c266b19 5bbfed2dc1 Cover Unix socket in inpect test on Windows platform 48ae52c08b Add a test for forcing compression and v2s2 format 9de7e07e56 fix(deps): update module github.com/crc-org/vfkit to v0.6.0 9475ea8fb9 Package podman-machine on supported architectures only. 156fc084a9 Fixes missing binary in systemd. 6673f5c202 stats: ignore errors from containers without cgroups 1fa27ffb62 api: Error checking before NULL dereference 4ef773d69e [skip-ci] Packit/copr: switch to fedora-all 2f1a1fb6f3 make remotesystem: fail early if serial tests fail 4b38294e92 spec: clamp rlimits without CAP_SYS_RESOURCE 6f85808707 Clarify the reason for skip_if_remote 39e08c3ffa Sanity-check that the test is really using partial pulls 5ff496ea2b Fix apparent typos in zstd:chunked tests 7f6a203558 Fix compilation issues in QEMU machine files (Windows platform) e66b788a51 Mount volumes before copying into a container 44b0c24ca5 Revert "libpod: remove shutdown.Unregister()" e608874004 docs: improve documentation for internal networks 697c4181d2 docs: document bridge mode option 415d762475 [skip-ci] Packit: remove epel and re-enable c9s e5ed7847c1 chore(deps): update dependency golangci/golangci-lint to v1.62.2 e16f14a44d vendor: update containers/common ef565b76f2 OWNERS: remove edsantiago c2dcfca4ca fix(deps): update module github.com/onsi/gomega to v1.36.0 506fec1fa9 fix(deps): update github.com/containers/common digest to ceceb40 e4e7bc41f3 refact: EventerType and improve consistency 4f7395f93a Add --hosts-file flag to container and pod commands dc564257a2 Add nohosts option to /build and /libpod/build 936461e3c2 fix(deps): update module github.com/stretchr/testify to v1.10.0 13affe96d6 Quadlet - Use = sign when setting the pull arg for build 916b805f97 win-installer test: revert to v5.3.0 5f907e4850 fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0 34d63459ba fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0 3096681ce3 chore(deps): update dependency setuptools to ~=75.6.0 07aaa7832a Update windows installer tests 7162c58ba2 Windows: don't install WSL/HyperV on update c6549fc25b Switch to non-installing WSL by default 28305685f6 fix(deps): update github.com/containers/buildah digest to 52437ef a1249425bd Configure HealthCheck with `podman update` 97ed067d1a CI: --image-volume test: robustify e6e9d2c21c docs: add 5.3 as Reference version 926b31e053 Bump CI VMs e60e11167e libpod: pass down NoPivotRoot to Buildah d59794992f vendor: bump containers/buildah cf2ef12664 fix(deps): update module github.com/opencontainers/runc to v1.2.2 61b57b7d7d Overlay mounts supersede image volumes & volumes-from d513973237 libpod: addHosts() prevent nil deref 71f1f52894 only read ssh_config for non machine connections cbb2820a7e ssh_config: allow IdentityFile file with tilde a7120b50b1 ssh_config: do not overwrite values from config file 8a5ec2c505 connection: ignore errors when parsing ssh_config 7b41e28b95 Bump bundled krunkit to 0.1.4 2e22ab3bcd fix(deps): update module google.golang.org/protobuf to v1.35.2 315e7412e8 add support for driver-specific options during container creation 6809bf1d90 doc: fix words repetitions d2d2e4a605 Update release notes on main for v5.3.0 590fcafc2b chore(deps): update dependency setuptools to ~=75.5.0 1c77ee6fc5 CI: system tests: parallelize 010 34a15ae300 fix podman machine init --ignition-path 3e47e0bc8c vendor: update containers/common 0a69aefa41 spec: clamp rlimits in a userns 8a192c8403 Add subpath support to volumes in `--mount` option da6404ba16 refactor: simplify LinuxNS type definition and String method 0a1363d8eb test/e2e: remove FIPS test 42e8322532 vendor containers projects to tagged versions fa335f99e0 fix(deps): update module github.com/moby/sys/capability to v0.4.0 ca7703643b chore(deps): update dependency setuptools to ~=75.4.0 969417711d system tests: safer install_kube_template() 33398ebc1e Buildah treadmill tweaks 9eca92d625 update golangci-lint to v1.62.0 8d8b98b64d fix(deps): update module golang.org/x/net to v0.31.0 e1a6c53909 fix(deps): update module golang.org/x/tools to v0.27.0 e39ddde709 Revert "Reapply "CI: test nftables driver on fedora"" b5c9fe948c Yet another bump, f41 with fixed kernel 30a82cad7a test: add zstd:chunked system tests 40534d352e pkg/machine/e2e: remove dead code e1fe4b4b95 fix(deps): update module golang.org/x/crypto to v0.29.0 fbbfd07463 kube SIGINT system test: fix race in timeout handling b20960b860 New `system connection add` tests 62c9627d7a Update codespell to v2.3.0 cbf1d7fcae Avoid printing PR text to stdout in system test d49497ce6c Exclude symlink from pre-commit end-of-file-fixer 9f5bbecb95 api: Add error check 1b74ab5a85 [CI:ALL] Bump main to v5.4.0-dev 22152a2f9c test/buildah-bud: build new inet helper fb3a0e93a8 test/system: add regression test for TZDIR local issue f6af35c695 vendor latest c/{buildah,common,image,storage} 0e66a793bc Reapply "CI: test nftables driver on fedora" d770069062 Revert "cirrus: test only on f40/rawhide" ba5ce49c10 test f41 VMs 6346a11b09 AdditionalSupport for SubPath volume mounts 4e8d2dd726 wsl-e2e: Add a test to ensure port 2222 is free with usermode networking 6cf3cb1bfc winmake.ps1: Fix the syntax of the function call Win-SSHProxy 9a0c0b2eef volume ls: fix race that caused it to fail 9cb80d1856 gvproxy: Disable port-forwarding on WSL 52caa0fbb9 build: update gvisor-tap-vsock to 0.8.0 c23d9c6f23 Log network creation and removal events in Podman c05987ddd3 api: Replace close function in condition body Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: update to v1.14.1Bruce Ashfield2025-03-242-194/+262
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Creates updated with: bitbake -c update_crates netavark Bumping netavark to version v1.14.1-1-g0d623ce, which comprises the following commits: 8711e83 Release v1.14.1 0b7cbc5 Release notes for v1.14.0 389d8d9 Fix detect of Firewalld's StrictForwardPorts property 6267803 test/001-basic: Make commit test optional 99bd7d7 cirrus: do not build debug bins ce947ad Makefile: do not rebuild if nothing changed 1e5dc1c Makefile: uninstall netavark-firewalld-reload.service 3b5bf92 docs/Makefile: several fixes c4c37ca Makefile: build docs by default 26baf2c Makefile: do not build twice 2af9044 Release v1.14.0 c38577b release notes for v1.14.0 b086c4e update release notes from v1.13.1 35a0efb run cargo update 4fea4c0 Finalize firewalld port forwarding support 6b4ecbd chore(deps): update rust crate once_cell to 1.20.3 6f0bc1d fix(deps): update rust crate rand to 0.9.0 6e5de55 Add handling for firewalld's StrictForwardPorts setting fd8e99b fix lint issues wirh rust 1.84 bb17a6d chore(deps): update dependency containers/automation_images to v20250131 3cd3d9e chore(deps): update rust crate tempfile to 3.16.0 f57ae66 rename macvlan_dhcp.rs to dhcp.rs 58bb08d bridge: only allow dhcp with unmanaged mode a75c979 bridge: support DHCP ipam driver a47b5df fix(deps): update rust crate ipnet to 2.11.0 a03cdd9 fix(deps): update rust crate serde_json to 1.0.136 b4ccb6c fix(deps): update rust crate log to 0.4.24 7562017 bridge: add vlan support cb250d4 fix(deps): update rust crate tokio to 1.43.0 7d9edf9 fix(deps): update rust crate serde_json to 1.0.135 5789f67 New VM Images eb49d9a fix(deps): update rust crate clap to ~4.5.23 d67e98a chore(deps): update rust crate tempfile to 3.15.0 854b8bf fix(deps): update rust crate nispor to 1.2.22 2c759c5 fix(deps): update rust crate serde_json to 1.0.134 732cc05 fix(deps): update rust crate env_logger to 0.11.6 2bf9cfd Add container hostname to DHCP requests and use container id as client id bbc5f95 fix(deps): update rust crate mozim to 0.2.5 6217c49 generate protobuf in OUT_DIR d0d999b fix(deps): update rust crate tower to 0.5.2 795a36b Cargo.lock: bump some versions a2ec8cc run cargo update cbfe8fe cargo: set rust-version 6453c23 fix new rust 1.83 lint errors 62f4570 OWNERS: remove edsantiago 73e9911 setup: on av errors cleanup again 5861afa nftables: add daddr match to port forward jump rule 2900e92 network: bridge: don't change forwarding sysctl for internal bridges 4dae6d0 network: bridge: add support for unmanaged mode 71d8a5a test-dhcp: remove deprecated ifconfig/brctl commands 55a0f25 fix new rust 1.82 lint errors 8892b7f update ci images ceb113f fix(deps): update rust crate serde_json to 1.0.133 dc99b01 network: bridge: add support for host_interface_name option 818a19f network: add support for network-specific options a9dcf42 fix(deps): update rust crate ipnet to 2.10.1 b41f6f5 chore(deps): update rust crate tempfile to 3.14.0 31c32a9 fix(deps): update rust crate tokio to 1.41.1 e2cb0bd fix(deps): update rust crate anyhow to 1.0.93 1fca9f9 fix(deps): update rust crate url to 2.5.3 7dea7fb [skip-ci] RPM: cleanup changelog conditionals 8425b8e fix(deps): update rust crate anyhow to 1.0.92 1d75d62 Bump to 1.14.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* scripts/oe-go-mod-autogen: verbosely log exceptions and continue processingBruce Ashfield2025-03-241-7/+15
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Reapply "k8s: WIP [needs newer go]: not for merge: update to -tip"Bruce Ashfield2025-03-131-5/+5
| | | | | | | | We now have a new enough go in OEcore to enable this update. This reverts commit 3ec3b0605053ca2cb922ed426c9db3b25535604b. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: enable docker.service by defaultBruce Ashfield2025-03-131-1/+1
| | | | | | | | | | | | Some platforms are seeing long (2+ minute) start times to get the docker daemon initialized. This doesn't happen when the daemon is started on boot. To avoid this usability issue, we enable both the socket and service automatically. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: fixup SRCREV and modules.txtBruce Ashfield2025-03-132-486/+4164
| | | | | | | | | The revert of the pending upgrade (that was waiting for a newer go) did not build as the upgrade was incomplete. Bumping the SCREV and modules.txt to complete the process. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Reapply "k3s: WIP: [needs newer go]: not for merge: upgrade"Bruce Ashfield2025-03-134-539/+517
| | | | This reverts commit fd1d4c65e4103141921ab66cf44d20f759be9b80.
* aardvark-dns: update to v1.14.0Bruce Ashfield2025-03-112-223/+245
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping aardvark-dns to version v1.14.0-21-g7fa18ef, which comprises the following commits: 423ee20 Release v1.14.0 a09156c release notes for v1.14.0 6902a23 update release notes from v1.13.1 e59135d run cargo update b053576 fix lint issues with rust 1.84 9c94509 chore(deps): update dependency containers/automation_images to v20250131 b2405f6 fix(deps): update rust crate clap to ~4.5.28 25dee01 fix(deps): update rust crate log to 0.4.25 4cdab7c fix(deps): update rust crate tokio to 1.43.0 d49caa6 chore(deps): update dependency containers/automation_images to v20250107 8dc485e fix(deps): update rust crate clap to ~4.5.23 e66de45 fix(deps): update rust crate libc to 0.2.169 1fdd24c fix(deps): update hickory-dns monorepo to 0.24.2 d5e7a2f Cargo.lock: bump some versions eb938db run cargo update 7e7b7db cargo: set rust-version 24a0302 fix(deps): update rust crate clap to ~4.5.21 234a634 fix(deps): update rust crate libc to 0.2.167 2714706 OWNERS: remove edsantiago ba26b80 fix(deps): update rust crate libc to 0.2.165 3a87b98 fix(deps): update rust crate libc to 0.2.164 99938cd chore(deps): update dependency containers/automation_images to v20241107 11fcad7 fix(deps): update rust crate tokio to 1.41.1 d11cd29 fix(deps): update rust crate libc to 0.2.162 9842cb4 test: make jq query work on centos stream 9 db71833 [skip-ci] Packit: disable osh-diff-scan de9890d support ipv6 link local addresses in resolv.conf 1f26559 [skip-ci] Packit: enable c9s downstream updates 82c1697 [skip-ci] TMT: install builddeps downstream 2d5462c [skip-ci] RPM: cleanup changelog conditionals 59d5622 [skip-ci] Packit/TMT: idiomatic repo addition 02c7213 [skip-ci] Packit: Remove epel jobs 15c8e62 tmt: install dnsmasq dependency 319d871 Bump to 1.14.0-dev 8bb4806 Release v1.13.0 685b132 Update release notes for 1.13.0 e6ce710 test: use dnsmasq over slirp4netns 5db65bd coredns: forward names with no ndots as well 7e77a8d run cargo update e002654 fix(deps): update rust crate tokio to 1.41.0 8e6a556 fix(deps): update rust crate flume to 0.11.1 9955080 fix(deps): update rust crate libc to 0.2.161 894e5b0 fix(deps): update rust crate libc to 0.2.160 9440643 fix(deps): update rust crate clap to ~4.5.20 ce0d57d cirrus: check for msrv build b57674c define a MSRV policy 1da4b9a chore(deps): update dependency containers/automation_images to v20241010 7dbedb8 [skip-ci] Packit: constrain koji job to the fedora package 246657a dns: limit to 3 resolvers and use better timeout for them 94a210d OWNERS file audit and update fb501cf fix new lint error with rust 1.81 2900aea test: make them pass on RHEL/Centos Stream 9 6b7741f Packit: disable F39 and separate out ELN 22293ef serve: parse resolv.conf ourselves e9120c7 fix(deps): update rust crate libc to 0.2.159 5a21a4e coredns: allow host lookup of names fc08648 backend: return simple Vector in lookup() edbe4e9 coredns: use a TTL of 0 for our names 6ec9581 coredns: do not clonse the Record 5b79e12 netavark_cache_groom.sh: fix wrong branch 4f3d45c Packit: add sidetag to release with netavark 39d0043 coredns: work on tcp requests concurrently 6d76c50 tcp: add timeout to connection 16c85e4 fix(deps): update rust crate tokio to 1.40.0 6503cae fix(deps): update rust crate libc to 0.2.158 8e6021a chore(deps): update dependency containers/automation_images to v20240821 65e069c fix(deps): update rust crate tokio to 1.39.3 bd49d09 fix(deps): update rust crate libc to 0.2.156 bc93f61 Bump main version back to v1.13.0-dev 95aeb56 Release v1.12.1 e6847a3 Updated release notes for 1.12.1 9e4562b Change av cargo categories a74d9ea Bump to 1.13.0-dev 8cfe0a6 Release 1.12.0 a7ceaf5 Release notes for 1.12 6bb82d6 config: ignore enoent errors while reading configs 6989e0f run cargo update cc25b2f update upsteam resolvers on each refresh c24de46 fix(deps): update rust crate syslog to v7 8326739 fix(deps): update rust crate tokio to 1.39.2 7a5e6e7 add tcp support for forwarding a3ffae3 add tcp listening support aa4ee01 test: add new test to check for startup error 8575b7e return bind error to caller on first start 6416ca4 add our own error type and use it over anyhow 0e239cd server: use anyhow to wrap parse_configs error 1bb0a28 server: split out main loop into new function 5e635c8 main: remove aardvark-dns error prefix 7049573 coredns: remove unnecessary try_join! call 667e5db coredns: drop pointless name var 0691689 serve: read nameservers once 48fcdee replace signal-hook with tokio::signal 48754fa serve: fix broken error logging 6f6e5a6 server: improve parent <-> child error handling ef2dcc2 add some basic perf check script 1c08966 fix(deps): update rust crate tokio to 1.39.0 67fccab coredns: create reply_ip() function 922db0f coredns: match dns type explicitly 224756d server: use only one tokio runtime 867570e coredns: improve indentation for process_message() 7b5301a coredns: move upstream resolvers detection later 96784c3 coredns: do not clone sender 6039c8f read AARDVARK_NO_PROXY once 78e0c0e coredns: move main code out of select! 80e48df coredns: fix "name" naming bcc5195 coredns: remove unused forward_addr/port 7d1677f coredns: fix handling of dns search domain b6773a9 coredns: rework PTR lookup flow 2a062e0 fix(deps): update rust crate tokio to 1.38.1 b731153 [skip-ci] TMT: Reorg upstream tests for downstream reusability 003123d [skip-ci] Packit: use `packages: [aardvark-dns-fedora]` for podman-next builds Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: drop SRCREV_FORMATChen Qi2025-03-111-3/+1
| | | | | | | | The source comes from one repo, there's no need to use SRCREV_FORMAT any more. So drop it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-core: WORKDIR -> UNPACKDIR transitionChangqing Li2025-03-111-3/+3
| | | | | | | | | | | | This adapts to the oe-core rework to enforce a separate directory for unpacking local sources (UNPACKDIR) instead of directly using WORKDIR. Follows the preliminary guideline from: https://lists.openembedded.org/g/openembedded-architecture/message/2007 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to v1.32.2Bruce Ashfield2025-03-111-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.32.2, which comprises the following commits: e37e198e8 version: bump to 1.32.2 e681a34c8 go.{mod,sum}: bump CDI deps to v0.8.1. 85214c31b vendor: bump go-jose to 4.0.5 47566d01d Fix context cancellation when image pull progress timeout is `0` 1b98ce087 test: add test coverage for LinkLogs malicious paths d4a9f6bae internal/linklogs: sanitize the directory path before using it f168b6b39 version: bump to 1.32.1 5c8f66f8f Bump containers/storage 99ca98117 Avoid using UpdateContainerStatus for ReopenContainerLog and add logs tests 612f43a6d watchdog: decouple CNI plugin initialization from CRI-O health checks fffe6270d Cherry-pick changes from containers/image project 890c75c93 Cherry-pick changes from containers/storage project b57566b9c Update containernetworking/plugins Go package release to v1.6.2 6e44ed6d7 server: fix panic when default annotations are specified 0daeb208f Refactor man page variables in Makefile. a103688e7 config: add default_annotations 533b7d5e2 build(deps): bump actions/upload-artifact in the actions group d80af0f80 build(deps): bump crate-ci/typos in the actions group 986b386fc maintainers: promote Sohan and Krzysztof to approvers 10621f089 Update NRI to v0.9.0 34003b146 build(deps): bump the actions group across 1 directory with 2 updates 4409a15f6 Refactoring factory/container to remove references of snadbox 3576d0822 Update mocks b7d4c78d0 build(deps): bump the gomod group across 1 directory with 37 updates ea7cdad90 Require go 1.23 for build c5bdce024 Update golangci-lint to v1.62.2 and config 31b86eb6b Remove old golang build tags a5320071d Update nixpkgs c1a7989d9 build(deps): bump the actions group with 2 updates 08b9acb9a Don't pass seccomp section when it's disabled a89b991bd Don't start seccomp notifier watcher when seccomp is disabled d4a0b860e Update cni-plugins to v1.6.1 33dbcc12b Add systemd watchdog support 698025097 Update sandbox_run_linux.go 2329bd698 Update container_create.go 197f98bb8 Always clear env even when `monitor_env` is unset 634c733df Update sandbox_run_linux.go f448fea40 Update container_create.go a64119adf build(deps): bump crate-ci/typos in the actions group 80aa12b19 Use `monitor_env` for calling the OCI runtime 7de043007 Update sandbox_run_linux.go cad07030e Update container_create.go 7e48c71d6 build(deps): bump crate-ci/typos in the actions group 7c3290dea Allow to remove pod sandbox on netns removal 608c89e9c Fix container restore lint report 84ac370c9 build(deps): bump crate-ci/typos in the actions group 29a0b9429 Fix NRI CLI flags e5bddc646 Call network plugin GC on startup 7a29433e7 build(deps): bump codecov/codecov-action in the actions group 44429579c build(deps): bump codecov/codecov-action in the actions group 6ca411a93 RuntimeHandler inheritance bug-fix 72fa20e93 build(deps): bump codecov/codecov-action in the actions group 02e5817d2 Add `--pull-progress-timeout` / `pull_progress_timeout` option 8b8be22a7 Use `slices.Equal` instead of custom implementation 19ac18b4e Update golangci-lint to v1.62.0 4d79d6b75 build(deps): bump the actions group with 2 updates 76049febe RuntimeHandler inheritance e4bd1caee refactor cert 19efac249 vendor cni 0.4.3 426244c73 Make dual-stack hostport test reuse same test data as single-stack tests f812c5aae Update and fix nix packages 8462bc745 remove validation for TLSCA. 50fbdcc01 Further hostport unit test cleanup 7ea8faf1a Fix ids/IPs in hostport manager test cases 74598c4cd Improve HostPortManager unit tests checking 0ff4e7cc3 Split hostport test case data out of the actual test functions f62645f93 build(deps): bump crate-ci/typos in the actions group ee6d71d09 Use google.golang.org/protobuf instead of gogo 680efef80 build(deps): bump crate-ci/typos in the actions group 0470ab6ed Validate stream server TLS config on startup 429ef7c36 Only restore container if all bind mounts are defined f552e82b0 Convert `interface{}` to `any` 87d6b6076 Fix `typos` in CI 2c015a3ac Remove dead code in HostportManager 9c008e890 expose Pod assigned IPs to NRI plugins bf1c47b50 bump nri version to get PodIPs 595557cb8 build(deps): bump crate-ci/typos in the actions group f7116fbe5 build(deps): bump the actions group with 2 updates 30f48c5ba Disable actuated runners 30a262354 Move interceptors and metrics collector packages f50d181a1 Use context for logging in server d4c613d39 Switch to golang native context 20bc86cde Remove unused server metrics interceptor 09ac8a590 Centralize handling of CreateContainerRequest.PodSandboxId cdd37ebe4 Remove the option to load a sandbox ID from the snapshot image 431f66a9a Fail in CRImportCheckpoint earlier if we should be enforcing signatures 8031b6270 Consistently use someNameOf{The,This}Image for that kind of value 4302e0a63 go.{mod,sum}: update NRI deps and re-vendor. 28069c8f2 build(deps): bump crate-ci/typos in the actions group 48d45ccf5 build(deps): bump the actions group with 3 updates b6e9d6d68 Add `crio status heap` and `/debug/heap` endpoint a2e62f24d nix: don't build gpgme with `--enable-fixed-path` b13e45f4b pass cliContext instead of creating a new one 0d68102f8 Remove the first return value of PullImage 06993f4ba After pulling the pause image, use the canonical reference to look it up 4c164f5e3 Add a warning about assuming per-namespace policies are stricter b56ddca32 Add a comment warning against repeated lookups 3f9b09e44 Consistently use the UserRequestedImage for the lookup input fffc734c8 Simplify BROKEN pullImageOutputItem 0b184e47e Return a RegistryImageReference instead of reference.Canonical from PullImage a2e29ba09 Better document, and sometimes rename, parameters and return values c91de5884 Add a comment about possible future handling of complex situations. 899266bb2 Inline prepareReference into its only caller ca1b55010 Remove no longer used code 14f4c6482 Fix build on macOS d0a64e27b build(deps): bump crate-ci/typos in the actions group b280cb565 vendor: bump runc to v.1.2.0 722f70ca3 utils: use moby/sys/user 1b7a8dfd2 internal/dbusmgr: use moby/sys/userns 2665ada11 crio status: add `goroutines` subcommand dcc2a7587 build(deps): bump actions/cache from 4.1.1 to 4.1.2 in the actions group fbbc7bfd5 Refactor memory stores to use generics 3ef549868 Simplify container stop in sandbox 9e01a99ed Remove `skip_pod_runtime` build tag 83ba7fe9b Update zeitgeist to v0.5.4 509de1aba ci: bump cri-o spec version to be higher than any cri-o version running 82fe372c1 Update gomock to v0.5.0 a271b4a79 seccomp_unsupported.go: Fix lint issues 7849e3efc Re-allow building without seccomp installed 2a42045ad Use context timeout/deadline for container stop d1e817f14 Refactor sandbox label usage 937d24316 Refactoring factory/container to remove references of snadbox ba13b2bac upgrade runc to v.1.1.15 9254b36d5 Re-enable exit code matching in restore test d93ce4cc7 build(deps): bump actions/upload-artifact in the actions group a5ee1950a build(deps): bump the actions group with 2 updates 589720f14 contrib/test: avoid running setup tasks twice a7c46dd67 build(deps): bump the actions group across 1 directory with 8 updates 098ae5d66 Use `SignatureValidationFailed` CRI error for invalid signatures 69b4635b0 Mark `release-1.28` as EOL 5a1d62f8f Update nixpkgs d688986db build(deps): bump github.com/containers/common from 0.60.2 to 0.60.4 6a6f57011 config: fix validation of allowed annotations 236d336fb config: pass down PullOptions from the storage configuration eda8023ff test: fix empty pinned_images test c02f9bb21 tests: improve wait_for_log to allow multiple calls for the same message ddb79873d build(deps): bump peter-evans/create-pull-request in the actions group adf2ca5f4 Don't rely on vendored tools 44def2c87 build(deps): bump the actions group across 1 directory with 2 updates dea93eeb8 Bump release-notes to v0.17.8 4a2d29e65 image: serialize RegistryImageReferences when checking signatures c7a819d3e Update golangci-lint to v1.61.0 dc087b219 Update nixpkgs f030d3596 Update release and branching versions a73311497 build(deps): bump the actions group across 1 directory with 3 updates 333530298 Use go 1.23 for nix (static) builds 915393f96 Switch to `RFC3339Nano` log format d85ae5293 Make unit tests independent from third party binaries 8b2872139 Use nanosecond timestamp for evented pleg pod status 9910c39e1 Pin govulncheck to specific version to match Go version requirements 44e0241f8 Enable more crun integration tests 66c010968 refactoring: get some spec generation code out of createSandboxContainer() 0418b5d5c cleanup: refactoring createSandboxContainers() b0b584ac8 refactoring: create a container.SpecSetLinuxContainerResources() function 8ec1805e6 refactoring: create a container.SpecSetPrivileges() function Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: update to v2.33.1Bruce Ashfield2025-03-114-793/+1729
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.26.1-364-geaf980094, which comprises the following commits: eaf980094 build(deps): bump github.com/opencontainers/image-spec 4c2ecb542 reject compose file with bind mounts bcd000ab4 refuse to publish compose file with local include 8092ce941 build(deps): bump github.com/docker/buildx from 0.21.1 to 0.21.2 97595066e build(deps): bump github.com/docker/docker 508309414 build(deps): bump github.com/docker/cli b6c8a2b9f display the location of OCI or GIT Compose stack download 19571c2c8 e2e test for watch.include 0ef7bbcdd introduce watch.include 66dfa7d18 block the publication of an OCI artifact if one or more services contain only a build section 876ecc48b Test version command c7bf302c2 wrap builder execution within a project/build span 7b3bdbe03 otel attribute to track builder implementation selected 094b48fd7 build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 43c52e2a8 build(deps): bump tags.cncf.io/container-device-interface 6c1ee1069 support refresh pull policy e38b729a3 fix service: additional_contexts running internal buildkit client 145bb8466 Update yaml docs acac18413 Link to configuration file docs 3292740c1 build: only print COMPOSE_BAKE recommendation when disabled cae8e8463 require go 1.23|1.24 (stable) da2eff4ba add support for gw_priority, enable_ipv4 (requires docker v28.0) 20f780e95 make the mocks generator happy cf2fc2005 go.mod: docker/docker, docker/cli v28.0.0, buildx v0.21.1 d0398a468 go.mod: github.com/moby/buildkit v0.20.0 ac40aae4c go.mod: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f f25fea5e6 pkg/compose: stopDependentContainers: rename var that shadowed b27f56eb1 fix error message when detach is implied by wait 4e593ed07 Fix pull --parallel and --no-parallel deprecation warnings missing d956ff13d don't display bake suggestion when using --progress with quiet or json option 5f7c9a2b4 report error using non-file secret|config with read-only service fd0c23a1c build(deps): bump google.golang.org/grpc from 1.68.1 to 1.70.0 7aa64ae9c run watch standalone if menu fails to start c23eea934 build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 036da4795 go.mod: remove toolchain directive 33172d5e4 let user know bake is now supported 3f1a6b72a build(deps): bump gotest.tools/v3 from 3.5.1 to 3.5.2 f9a6e6c41 build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 18ef6e592 build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 2884d6df0 Fix ls --quiet help description 4459012a4 Dockerfile: update golangci-lint to v1.63.4 6f1f76c0e pkg/e2e: fix contains: use assert.Contains (testifylint) ed72c2187 use BlockUntilContext fa4cfb652 build(deps): bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 200638b02 build(deps): bump github.com/otiai10/copy from 1.14.0 to 1.14.1 a0320f12e build(deps): bump golang.org/x/sys from 0.28.0 to 0.30.0 f8a912ab9 bump compose-go v2.4.8 c23a7e728 golangci-lint: enable copyloopvar linter 49575ef49 gha: add docker engine v28.x to the test-matrix faa46d374 go.mod: github.com/moby/term v0.5.2 6ecb8d40a Full test coverage for convert compatibility cmd a6a39422e remove cli.args opentelemetry attribute 40cd08f31 Update link in stats --help output 5e2abb6c2 support additional_context reference to another service 4db5fcd56 fix bake uses selected builder f14c15fa5 capture error message reported by bake and forward to compose 8d68ef587 fix exporter to only load image for default platform cde9ae595 pass --allow for filesystem read access 806ac91cf add warning when trying to publish env variables with OCI artifact 1c073c0a0 watch should ony build selected services 840288895 add --with-env flag to publish command this flag allow publishing env variables in the Compose OCI artifact 4b70ff0cc fix support for ssh key from CLI flags 23351ece8 remove exit code per error type used by legacy metrics system 7c7407672 bump docker to v27.5.1 25cfa66a9 bump buildx v0.20.1 and docker v27.5.0 f160333e9 ci: use main branch for docs upstream validation workflow d04b3f48e e2e test covering multi-service rebuild with common resources ed10804e0 manage `watch` applied to mulitple services 52578c099 Properly handle "builtin" seccomp profile bd2b49a1c add codeowners file 433a60e12 ci: fix provenance for binaries and generate sbom 489fe9cf0 add support for BUILDKIT_PROGRESS ef1931c8d add missing tag for build during merge workflow 9be7a3c9a ci: re-use local source to build binary images 666996bee ci: use local source for binary builds 083f67621 ci: update bake-action to v6 e81de103d simplification fa3950346 image can be set to a local ID, that isn't a valid docker ref a35158502 can't render progress concurrently with buildkit b6db1380e exclude one-off container running convergence 2ebb47543 Only override service mac if set on the main network. d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26 2b21c5df9 fix relative path in compose file 1f3c10eb4 bump compose-go to v2.4.7 68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token 3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906 be09b2e8c checkExpectedVolumes must ignore anonymous volumes 571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name 8f644eea7 only check bind mount conflict if sync action is involved 56e92e34b use the 3 latest major versions of the engine to run e2e step a42a04dfe bump Golang version to v1.22.10 and update CI actions 34bcd03a7 add --pull to run command ed61e42f9 CI to validate fmt 65696bb1c `make fmt` so any contributor can enforce formatting 446e00520 format code with gofumpt c01c9c29f e2e test to prevent future regression 038c81f34 only check volume mounts for updated config a20b69ac5 e2e test for recreate volume 977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 8e0520e71 prompt user to confirm volume recreation 332311358 Recreate container on volume configuration change df9e420dd introduce watch restart action 142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions 700c586bc bump docker/buildx to latest release fc566509d fix support for service.mac_address e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ 624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 a1729c52d Update pkg/e2e/watch_test.go 254224c18 first watch action for a file event wins 0861e6845 fix af5b74850 revisit TestDebounceBatching 32a22c1f4 introduce sync+exec watch action e6ea8fb96 log configuration error as a watch log event 043465448 do not require a build section but for `rebuild` action 1d0839086 pull --quiet should not drop status message, only progress 69a83d130 use latest engine tags 781b9f1cd Bump buildx to 0.19.1 cbff0e555 be sure everything has been cleanup at the end of each tests e4222bff5 add local config.json to test configuration dir if exists 25197fe6d disable failing TestBuildSSH test 85cdaf9dd fix build with bake a8469db83 bump containerd to v1.7,24 08488dae5 bump google.golang.org/grpc to v1.68.0 cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2 6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2 6b3e57503 only stop dependent containers ... if there's some 8e497a128 disable TestNetworkConfigChanged which is unstable on CI 5aed70437 only check attached networks on running containers 1ff9b758d fix: commit tests 9eaba5597 feat: add commit command a85f8a40a run build tests against bake 095f65cb4 delegate build to buildx bake 208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 2d148faed use service.stop to stop dependent containers 43ac1e31c Update wait-timeout flag usage to include the unit 5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2 ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2 5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev) a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1 3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1 d4fa63fdc Update pkg/compose/convergence.go c21d4cfb4 detect network config changes and recreate if needed 61f1d4f69 go.mod: github.com/docker/buildx v0.18.0 f7cce281d go.mod: github.com/moby/buildkit v0.17.1 bcaacc7f2 gha: test against docker engine v27.4.0 3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub 2bb67f270 remove ddev e2e tests bf521fe3a implement remove-orphans on run 11e9621da ci: enable testifylint linter a9de9abcf Emit events for building images 799ab842a Fix compose images that reutn a different image with the same ID 2f65ace2a remove obsolete containers first on scale down aa0a4189e pass stal bot inactivity limit from 6 to 3 months eba3ff8f3 fix(config): Print service names with --no-interpolate 6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 a8bfbc147 bump compose-go v2.4.4 fbbd6f83d Avoid starting all services on rebuild a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact 361c0893a build(deps): bump github.com/compose-spec/compose-go/v2 513b6128c Service being declared in a profile must not trigger re-creation eececb9ad Add profile e2e test case to document in compose 501b5acde Update `MAINTAINERS` file f51bc4cd0 bump compose-go to version v2.4.2 517f87a37 bump google.golang.org/grpc to v1.67.1 718049cbd bump go.uber.org/mock to v0.5.0 02371f312 bump golang minimal version to 1.22 in go.mod a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23 51ebeb544 introduce generate command as alpha command fafaa9c5b bump compose-go to version v2.4.1 fc9c3cde0 Add license header to dockerignore_test.go 73bfbab54 fix 2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go eeea049f1 push: Fix error message typo 26064d4b6 allow usage of -f flag with oci Compose artifact 7c46beb8a resurrect --all flag for cp to target oneoff container aa1ec4524 connect to external networks by name a4ee6ca7a don't warn about uid/gid not being supported while ... they are 5617eff0c bump compose-go to v2.4.0 fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command 0aad9595a don't use progress to render restart, which hides logs 813900180 compose-go clean volume target to avoid ambiguous comparisons 82417bd5b add support for bind.recursive 0cbb73c02 Improve error message to include expected network label 38e3d670a desktop: allow this client to be identified via user-agent 24c78728e bump compose-go to v2.3.0 9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability 8da82c98e gha: set default permissions to "contents: read" 1a8c85548 Add security policy 15bd0b0c5 add support for raw env_file format 39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 3a95a0872 add support for CDI device request using `devices` f794c79eb Support Dockerfile-specific ignore-file with watch 407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav 82b41b9eb introduce service hooks 6c06170eb pass device.options to engine 60c1311f6 chore: remove errors depricated pkg 17add87e4 fix: validate-go-mod bf0418bac fix: lint b9d0c77cd feat: add export command bdb854561 fix(convergence): Serialize access to observed state 41df35c1f Remove bind options when creating a volume type 3ef5045a0 Bump docker v27.3.1 d9df7aab6 fix(push): Fix unexpected EOF on alpha publish c9d96b449 use compose-go version fixing extra_hosts unicity issue 1744b4576 Show watch error message and open DD only when w is pressed 87f457e7d add tests to down.go abcc91e2b fix(down): Fix down command if specified services are not running 8b9fe8984 After container restart register printer consumer 34b18194f check secret source exists, as bind mount would create target as a folder otherwise ce27dba52 wait for dependent service up to delay set by --wait-timeout d2b945613 append unix-style relative path when computing container target path 9c60fe67d revert commits link to mount API over bind changes c16df17e1 don't set propagation if target engine isn't linux 20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2 f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2 cb00aaad2 set propagation default e885bc084 Remove custom codeql workflow 73d3a25eb fix import 3524bcfad chore(watch): Add debug log when skipping service without build context 1076f1d9a stop dependent containers before recreating diverged service 16652ed26 Fixed possible `nil` pointer dereference c6a76b9bd bump github.com/docker/buildx v0.17.1 3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1 86ef8e62c gha: test against docker engine v27.3.0 8bf0627ea show sync files only in debug level 2e1419168 chore(watch): Add changed files path/count to log 155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 8db0cba0a bump compose-go to version v2.2.0 a7424435b Restore compose v1 behavior to recreate containers when ran with -V d445ebba3 fix linting issues with golangci-lint 1.60.2 f592aad10 bump golang to version 1.22.7 ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0 150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0 524a97e55 Fix typos 1d608e033 Use logrus instead of direct output to stderr. 329ad7392 attach: close streams when done b633c5c3e Fix typo in pull.go e6ef8629a Allow combination of bind mounts and 'rebuild' watches d658fecc6 service hash must exlude depends_on f9c7a0cc0 prefer mount API over bind 6e172d6b8 docs: duplicate documentation for root cmd 98e261ba3 docs(wait): Fix wait command description 11c7a25ae allow to add empty line in the logs when nav menu activated 234036756 upgrade docker versions 9c03797f9 initial sync files that modified after image creation 485c0eba5 initial sync for root directory 69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go 1601ead7b docs: Update docker compose kill usage ea4ccf639 Fix stop on file chane for sync-restart action b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1 adba639e8 remove all dependabot update PRs for OTel dependencies d8518529c gp.mod: github.com/gofrs/flock v0.12.1 c79f15da9 go.mod: golang.org/x/sys v0.22.0 3f55382ff update to go1.21.12 44337d2bb Enhance JSON progress events with more fields. bc733508d bump compose-go v2.1.5 c422b5447 bump github.com/docker/cli v27.1.0 e74441c90 bump github.com/docker/docker v27.1.0 2bac32a46 bump github.com/containerd/containerd v1.7.20 f278400fb gha: add docker 27.1.0 4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers 06bf339a4 fix: typos 231ea1005 update docs generation to avoid man pages generation 46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0 d3d378b92 restore setEnvWithDotEnv 163cdfd31 empty env variable with no value must be unset in container 25f85938b exclude unnecessary resources after services have been selected cacbca859 change time for stale bot ecac13f27 Remove debug mode and run twice a week 14793cc2e Add stale workflow 11d5ecdc7 update docs 9549a213b feat(watch): Add --prune option to docker-compose watch command da434013e Remove COMPOSE_MENU env from e2e tests ace69c96a Use rawjson for the build backend. 2db04c1e4 Set logging format to JSON. 8f7cd0048 Format errors as JSON when in JSON progress mode. 5a6e1a7e2 Pass 'plain' instead of 'json' to build backend 06545d066 Add JSON stream progress writer 075fd9345 go.mod: docker/cli, docker/docker v27.0.3 d062ad739 gha: test against docker v27.0.3 7cd5209cc go.mod: docker/cli, docker/docker v27.0.2 f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out` Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: introduce 4.20 recipesBruce Ashfield2025-03-062-0/+40
| | | | | | | Introducing the 4.20 recipes as the newest reference version for the upcoming LTS. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update devel version to 4.21-devBruce Ashfield2025-03-062-5/+5
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: drop 4.18 recipesBruce Ashfield2025-03-063-86/+0
| | | | | | | The 4.18 series will go out of support in our next LTS window, so we drop it in favour of 4.19 and 4.20 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v28.0.1Bruce Ashfield2025-03-062-11/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v28.0.1, which comprises the following commits: 18143632f7 Revert "contrib/check-config: add ipset related flags" 558da63444 Jump to DOCKER-INGRESS from DOCKER-FORWARD 76417bf763 Don't use ipset c35159ed7d c8d/manifests: Fix Content size including missing content 468c2c814d Fix swarm network creation from a config-only network 8e6cc4ac48 Fix swarm net validation for config-from networks 8cc4d1d4a2 Fix daemon startup on a no-IPv6 host 341cafa611 Test with a drop rule appended to filter-FORWARD 984a610a21 Add chain DOCKER-FORWARD 21582b84fb c8d/list: Fix empty Manifests for some images 6b1b170708 c8d/inspect: Fix image not found error for index-only image 5ced8fd377 vendor: tags.cncf.io/container-device-interface v0.8.1 a92d20bcc4 Better error message for missing ip_set kernel modules 73f2a5336d libnet/d/bridge: fix compilation on i386 013c43fb56 Mark default-bridge-only opts in --help and manpage 3cf4ff971d Fix network inspect IPv6 gateway address format 501ce33bab Fix v28 regression `protocol "tcp" is not supported by the RootlessKit port driver "slirp4netns"` ccdfac5328 contrib/check-config: add ipset related flags ac8b4e3e75 daemon: handleContainerExit: ignore networking errors d67f035d31 vendor: github.com/moby/buildkit v0.20.0 1fde8c4615 builder-next: fix cdi manager cde9f0752e vendor: github.com/moby/buildkit v0.20.0-rc3 b2b55903d0 Dockerfile: fix linting warnings a3628f3f8e docs/api: add documentation for API v1.48 9eccc20a17 c8d/list: Fix panic when listing images 4e97729f14 c8d/list: Test with SharedSize = true 322eddfb41 api/swagger: remove custom example from /containers/{id}/json endpoint 60539d0956 api/swagger: remove custom example from /containers/json endpoint 119b52f302 golangci-lint: ignore "nested context" (fatcontext) in tests 15fbd67407 Dockerfile: update golangci-lint to v1.64.5 7b6c3ebe7b api/swagger: inline Exec example values 2fc90096bf project: update status of branches bd92f2bb92 daemon/logger/splunk: New(): combine switches for format validation eac39ffdb8 daemon/logger/splunk: remove some intermediate variables 9bb3900c30 daemon/logger: Info.ExtraAttributes: make env-var handling conditional cbbff10b01 daemon/logger: use consistent name for "extra attributes" ba559c4f12 daemon/logger/fluentd: fix minor (linting) issues b9e7e82b66 daemon/logger/splunk: plunkLogger.postMessages(): improve logs 2f82cbb5f8 daemon/logger/splunk: suppress some unhandled errors f049d0c66b daemon/logger/splunk: don't defer in a loop 0d938b6bb3 daemon/logger/splunk: rename var that shadowed import 529a56d31a container: Container.StopSignal: fix handling of invalid signals ef0fe1ac00 container: define defaultStopSignal as a syscall.Signal 0a4c4c9e82 container: some cleanups in view tests 49f2320bc7 container: some cleanups in tests 07aa4d96ea container: TestReplaceAndAppendEnvVars: assert with gotest.tools 0914e97df2 container: rename test file 9bcac6d573 c8d/progress: Fix panic when pulling some images acc4d45278 container: ensure image manifest is deep copied from the container into the snapshot 903ba2f487 client: Move opts to separate files b9319f64ed client: Change ImageSave to use functional options ae4c688fd8 client: Change ImageLoad to use functional options 85808a6abf client: Change ImageHistory to use functional options 5719e8edf9 Don't create iptables rules when iptables is disabled 068aa86c23 client: Group deprecated functions into ImageAPIClientDeprecated d1c6550f71 daemon: use structured logs for printing reloaded config, move to cli 838ae09a23 Dockerfile: update runc binary to v1.2.5 707d8d80b9 vendor: update buildkit to v0.20.0-rc2 c9f8758570 golangci-lint: enable reassign linter 04ae510a1e golangci-lint: enable gocheckcompilerdirectives linter 179e621019 golangci-lint: enable exhaustive linter 1f9ada6668 golangci-lint: enable errchkjson linter 8b2439a383 golangci-lint: enable durationcheck linter d62e499bfe golangci-lint: enable dogsled linter 75fc4de8c3 golangci-lint: enable asasalint linter 7218a64e87 golangci-lint: enable wastedassign linter 55b047e49c golangci-lint: enable fatcontext linter a97d6fe84f golangci-lint: enable nosprintfhostport linter (again) fc09a52d85 golangci-lint: enable spancheck linter a0ef452f0c golangci-lint: enable mirror linter 0de3c1b7e3 golangci-lint: enable makezero linter e6e68278f6 golangci-lint: enable iface linter (with default settings) c8ee8c6302 golangci-lint: enable nilnesserr linter 081fac187e golangci-lint: enable exptostd linter 927e07e46e API: add Platform (OS and Architecture) to /containers/json e364e28ec8 vendor: update buildkit to v0.20.0-rc1 d47eb241bf vendor: github.com/vishvananda/netlink 655392bc778a 47ff7969b4 Add experimental feature warning for image mount 3e51818c5c Add ability to return warnings from host config c5b226e377 vendor: github.com/miekg/dns v1.1.61 56a6383883 api: deprecation of "error" and "progress" fields in streaming responses e36fb45eec vendor: github.com/spf13/pflag v1.0.6 bd13fc37b0 pkg/jsonmessage: JSONMessage: fix deprecation of ProgressMessage, ErrorMessage 66910da5a3 vendor: github.com/containerd/go-cni v1.1.12 3d72df0e89 vendor: google.golang.org/grpc v1.69.4 72c91e378d client: remove serverResponse and use http.Response directly b99b5422b0 api/types: deprecate IDResponse 96dc9cb693 Don't log a warning when an IP address is already in an ipset b23b8f1567 Restore more iptables rules on firewalld reload 9a20edf7b6 api/types/container: introduce ExecCreateResponse type 0df3a0047a api/types/container: introduce CommitResponse type be1ac5d8e5 api/types/container: rename ContainerTopOKBody to TopResponse f4dc38cd36 api/types/container: rename ContainerUpdateOKBody to UpdateResponse 85ff36de26 Dockerfile: update docker CLI to v28.0.0-rc.1 cc6754f3fa Dockerfile: update buildx v0.20.1 b90a2bac7d Dockerfile: bump gotest.tools/gotestsum v1.12.0 c786cdf124 update authors and mailmap b4af9341af client: fix deprecation comment for ImageInspectWithRaw 6ba4e78066 vendor: gotest.tools/v3 v3.5.2 43532eb1e1 daemon: Daemon.Containers: make switches exhaustive (exhaustive) 10ebdbbb92 daemon: Daemon.ProcessEvent: make switches exhaustive (exhaustive) f448d5ae3b daemon/events: make switches exhaustive (exhaustive) d9cf097402 daemon/cluster/executor/container: make switches exhaustive (exhaustive) bf3b4d4986 daemon/cluster/convert: make switches exhaustive (exhaustive) 4d8dfc1409 daemon/cluster: make switches exhaustive (exhaustive) 6929a3fd22 libnetwork/networkdb: make switches exhaustive (exhaustive) 827f84d3ef volume/mounts: parseMountSpec: make switch exhaustive (exhaustive) 0ee343222b daemon: eventTimestamp: make switch exhaustive (exhaustive) b343d235a0 container: State.conditionAlreadyMet: make switch exhaustive (exhaustive) 8a35300b4a integration/internal/swarm: make switch excaustive (exhaustive) 66ab2e9e77 plugin/executor/containerd: Executor.ProcessEvent: make switch excaustive (exhaustive) 1a047bbe8b libnetwork: ignore unchecked json (Un)Marshal errors (errchkjson) 63deb55263 libnetwork/drivers/bridge: bridgeEndpoint.UnmarshalJSON: fix unhandled errors (errchkjson) ccbcce2169 daemon/logger/templates: ignore unchecked error (errchkjson) 32153dee9f daemon: Daemon.Reload: fix unhandled errors printing config (errchkjson) 664558f916 daemon/cluster/convert: tmpfsOptionsToGRPC: ignore unchecked error (errchkjson) 4a7f891fc3 integration/plugin: fix unhandled errors in tests (errchkjson) 196a66a643 integration-cli: fix unhandled errors in tests (errchkjson) 26d30159f7 libnetwork/driverapi: ignore unchecked error (for now) (errchkjson) b87c9fb3f4 libnetwork/diagnostic: ignore unchecked error (errchkjson) 7dbceec8aa api/server/router/volume: fix unhandled errors in tests (errchkjson) 07e2fc83ae pkg/plugins: fix "Multiplication of durations" (durationcheck) 1ffbcb566b pkg/jsonmessage: fix "Multiplication of durations" (durationcheck) eac45daf06 runconfig: fix declaration has 3 blank identifiers (dogsled) 09c5a01346 pks/plugins/pluginrpc-gen: fix unused value assign (wastedassign) a4dba91424 daemon/containerd: fix unused value assign (wastedassign) f1d7bd60ab integration/image: TestRemoveByDigest fixed unused values (wastedassign) 9f8eafc101 plugin: withFetchProgress work around "nested context in loop (fatcontext)" e9c90834fa opts: host:port should be constructed with net.JoinHostPort (nosprintfhostport) 0bf8c8b99e pkg/tailfile: avoid allocations with (*os.File).WriteString (mirror) 4e6c91cc56 pkg/pools: avoid allocations with (*bufio.Writer).WriteString (mirror) f0a233bdc3 pkg/archive: avoid allocations with strings.Compare (mirror) 17f32e8822 libnetwork/internal/resolvconf: avoid allocations with bytes.NewBufferString (mirror) 0c8d086ed3 libnetwork: avoid allocations with regexp.Match (mirror) 6ff3dfd88a integration-cli: avoid allocations with (*os.File).WriteString (mirror) 405ce2ef15 distribution/xfer: avoid allocations with bytes.NewBufferString (mirror) d50492a70d container/stream: avoid allocations with (*bytes.Buffer).WriteString (mirror) dbf2cdd06c integration/networking: fix append to non-zero initialized length (makezero) dd8ee9eeb1 libnetwork/cnmallocator: fix append to non-zero initialized length (makezero) 8e9fce7970 libnetwork/bitmap: fix append to non-zero initialized length (makezero) f9890d97d1 libnet: kvstore/boltdb: fix append to non-zero initialized length (makezero) 1f7d497a99 errdefs: remove duplicate "causer" interface definition (iface) 1784026740 client: custom trace options cab2157182 Dockerfile: update golangci-lint to v1.63.4 f34a1aafe9 vendor: cloud.google.com/go/compute/metadata v0.5.2 9c7112d118 daemon: configureMaxThreads: remove unused arg 9e77d05967 add //go:build directives to prevent downgrading to go1.16 language 192431cb35 pkg/idtools: un-deprecate Windows consts for now 5a703c2eda libnet/osl: scan ns ifaces to generate ifname 78b0475605 libnet/osl: AddInterface: un-alias props into local vars 56a7817b2d libnet: add support for custom interface names 6a8360012c libnet/osl: distinguish dstName & dstPrefix 2e9e7989f8 cmd/dockerd: initBuildkit: return close-func 2dc03f934f cmd/dockerd: refactor buildkit init in daemon startup 9509f27e28 rootless: use `getsubids` tool for validation if possible a096045678 all: Replace deprecated ImageInspectWithRaw usage 3d37537f75 c8d/inspect: Add Manifests field 639a1214fa client/image-inspect: Introduce client opts 6664f1220a c8d/inspect: Avoid interim images.Image conversion bdb6a7abdc c8d/list: multiPlatformSummary d4fa252cd3 Wait for a route to ff02::1 before sending NAs 1126d477fd Add live-restore tests for mount image 90aea3b85f Add image subpath mounting functionality 634951457d Implement GwAllocChecker for the remote network driver 12756071f1 update to go1.23.6 294df1c447 volumes/service: OpErr: implement go1.13 unwrapper db68c99d4b distribution: fallbackError, notFoundError implement go1.13 unwrapper b96b14d078 cluster/executor/container: exitError: implement go1.13 unwrapper 2997c0ddc0 client: deprecate CommonAPIClient interface 846b2272e6 client: deprecate ErrorConnectionFailed helper e93ff742e8 client: doRequest: use errors.As for error-detection 3725998e7d client: define interface for all Swarm-specific methods a57d737a86 client: define separate interface for HijackDialer 902c06fdf0 client: make setupHijackConn a regular function e6dabfa3b1 client: move resetting mediaType for hijack to where applicable b0e206b807 client: separate Dialer() implementation from public API fcb924712b integration/internal: JobComplete: require shallower interface 0f04532956 errdefs: touch-up godoc for helpers 329b2a26f3 client: normalize and validate empty ID / name arguments to fail early 844797348e Implement image mount for the snapshotter 8c58934106 Implement mount from image c935a4609d Fix typo in API docs 30e75b8396 client: improve handling of JSON error-responses with incorrect schema 9a6e96fd9c Before sending ARPs/NAs, check the bridge is ready 8e529682af builder: wire up new gc types for buildkit prune functionality 52ea449c55 daemon: Daemon.restore: make legacy-link code conditional 9a69161992 daemon: remove Daemon.children(), Daemon.parents() wrappers 513fd86710 daemon: Daemon.getNetworkedContainer: fix errors for invalid network container 51cb066ec8 daemon: Daemon.rmLink: don't fuzzy-match container when using ID 79b0e89628 github: Clarify release notes description c43aa0b6aa Fix concurrency issue in dind 7ac0e34dba gha/validate-pr: Also run when PR has new commits 9b5a51a881 api/types/container: remove use of errdefs package in test 02eb72380f client: remove uses of pkg/errors in tests 3f354e8c1b api/types/registry: use stdlib errors package 0ca0ccd37a client: improve test-coverage for error-responses 9fdcde7618 Add bridge gateway mode "isolated" 97b50bca2c client: WithVersion: strip v-prefix when setting API version bbaa8af8f3 libnetwork/drivers/bridge: un-export errors 3f9698e1f6 libnetwork/drivers/bridge: TestLinkDelete: use gotest.tools 74fd2ec0cf libnetwork/drivers/bridge: TestLinkCreateNoEnableIPv6: use gotest.tools 6e9ba725f8 libnetwork/drivers/bridge: TestLinkCreateTwo: use gotest.tools bf3323fd40 libnetwork/drivers/bridge: TestLinkCreate: use gotest.tools 7012e3ce14 libnetwork/drivers/bridge: remove NonDefaultBridgeExistError 47f6d4e1bc libnetwork/drivers/bridge: internalize ErrInvalidGateway 3a9f4e0146 libnetwork/drivers/bridge: remove ErrInvalidMtu 2f42aa0e26 libnetwork/drivers/bridge: remove IPv4AddrNoMatchError 0c1b660048 libnetwork/drivers/bridge: remove IPv4AddrAddError dc52ecb1d0 libnetwork/drivers/bridge: remove ErrNoIPAddr 77261b5e42 libnetwork/drivers/bridge: remove "InternalError()" method from errors 2766298f49 libnetwork/drivers/bridge: remove unused errors 59c2d2a4b3 libnetwork/drivers/bridge: remove ErrInvalidDriverConfig 6bb9f581a5 libnetwork/drivers/windows: remove ErrUnsupportedAddressType 54a969d1a4 Dockerfile: Use CLI generated completions in the dev shell 510e6f4f8a libnetwork/options: rewrite tests with gotest.tools af9ffb64cd builder/dockerfile: more consistently put "expected" on the right 86a8bfdce4 remove redundant uses of api/types/strslice.StrSlice d216084185 libnet/d/bridge: drop remote connections to port mapped on lo 27adcd596b libnet/d/bridge: port mappings: drop direct-access when gw_mode=nat 8474153e13 integration: accessing mappings from another docker network a7e6d0a8a3 libnet/d/bridge: releasePortBindings: append directly into 'errs' aa3a23d4f9 Temporary debug for unsolicited NA 49b1ed6d27 libnetwork: remove ErrInvalidName a98ecc5f79 libnetwork: remove ErrInvalidID 548b0b6290 libnetwork: remove ErrNoSuchEndpoint 7cc81407aa Add trace/logging in waitForIfUpped 30601d96b7 Dump daemon logs when TestAdvertiseAddrs fails 8705018705 daemon/cluster/executor: containerConfig: store Network instead of envelope 90323ae123 daemon/cluster/executor: networkCreateRequest: not a method f5f4a062a5 daemon/cluster/executor: networkCreateRequest: slight DRY cleanup 16770340ea daemon/cluster/executor: networkCreateRequest don't shadow config cef6fd2fa2 libnetwork: remove Network.EndpointByID as it must not be used 4e6535fd3e man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.6 5c1fe287fc libnetwork: remove UnknownNetworkError 8f4c98e1eb libnetwork: TestControllerGetSandbox: use errdefs for error asserts d34ca256b8 libnetwork: TestNetworkConfig: use gotest.tools for errdefs assertions c6f0fe5fc0 libnetwork: parallelTester.Do: use errdefs for error assertions 11a6cb5fac libnetwork: TestEndpointJoin: use gotest.tools for errdefs assertions ea7d17376e libnetwork: TestInvalidRemoteDriver: use gotest.tools for error assertions 01c87cc809 libnetwork: TestContainerInvalidLeave: use gotest.tools for errdefs assertions 9472c860de libnetwork: TestEndpointMultipleJoins: use gotest.tools for errdefs assertions ab9d250876 libnetwork: TestEndpointDeleteWithActiveContainer: use gotest.tools for errdefs assertions 56debcfc1c libnetwork: TestNetworkQuery: use gotest.tools for errdefs assertions 874fb4d2f4 libnetwork: TestControllerQuery: use gotest.tools for errdefs assertions 53bf2e8960 libnetwork: TestUnknownEndpoint: use gotest.tools for errdefs assertions 895ee1214a libnetwork: TestDuplicateEndpoint: use gotest.tools for errdefs assertions 678a8a27f5 libnetwork: TestUnknownNetwork: use gotest.tools for errdefs assertions 9304d98757 libnetwork: TestDeleteNetworkWithActiveEndpoints: use gotest.tools for errdefs assertions 01b0fe1172 libnetwork: TestNetworkName: use gotest.tools for errdefs assertions 24df497674 libnetwork: TestNilRemoteDriver: use gotest.tools for errdefs assertions 532d36c251 libnetwork: TestUnknownDriver: use gotest.tools for errdefs assertions 400ad04c74 libnetwork: TestNull: use gotest.tools for errdefs assertions 3bb40af036 dockerd: enable shell-completion; add (hidden) completion subcommand 816f3fa516 integration: remove assertAttachedStream, check both STDERR and STDOUT 2197549e4f daemon: health: getShell: simplify logic (LCOW remnants) d3c0825439 daemon: make daemon.getEntrypointAndArgs a regular function 65120d586b Create bridge veth in container netns b3b9e990ee Get netns before calling moveLink 357fb9d58d Add trace/logging in waitForIfUpped 203d6530d0 libnetwork: use gotest.tools assertions a39bee9b71 libnetwork: suppress some unhandled errors in tests 376ff6add6 libnetwork: use assert.Check in defers 71c9a45672 libnetwork: use assert.NilError (step 2) 231012996f libnetwork: use assert.NilError (step 1) 6bb69a21bf EnableIPv4:false is no longer --experimental 9a37ae3657 Test unsolicited ARP/NA on interface creation bc130f367d bridge/macvlan endpoints always use a random MAC address a900e0b5bb libn/netutils: put more entropy into random MACs 422e056b0f Treat failure to send an initial ARP/NA as an error 522016a842 Configurable count and interval for gratuitous ARP/NA messages eaa84bc8f4 Send unsolicited ARP/NA requests when bringing up interfaces 2f84e2b208 libnetwork/drivers/bridge: driver.configure: move vars close to where used 3955c021ff libnetwork: remove redundant type conversion 41d502892d libnetwork/drivers/bridge: remove redundant type conversion 6e6cf999ed libnetwork: remove isNotfound test-utility c9c322785c libnetwork: Controller.defaultGwNetwork: use errdefs to check for not-found 59722228d7 libnetwork/types: compareIPMask: make error more readable 768b152494 libnetwork/types: TestUtilGetBroadcastIP: use gotest.tools, table-tests 06ae35afb9 libnetwork/types: TestUtilGetHostPartIP: use gotest.tools, table-tests 9e11ea9287 libnetwork/types: TestCompareIPMask: use gotest.tools, table-tests 85cd2b7c94 libnetwork/types: TestErrorConstructors: use errdefs for asserting afcf1b92a5 libnetwork: TestErrorInterfaces: use errdefs helpers to check error-types 2b4aa5eb52 gha: update DCO check to alpine 3.21 9dab00554d libnetwork/driverapi: fix GoDoc for UpdateIpamConfig 52d2d28148 libnetwork/types: align error-types with errdefs 836a5fac10 Dockerfile: update compose to v2.32.4 b75a75017d Dockerfile: update buildx to v0.20.0 1e2a828ed5 Dockerfile: update docker CLI to v27.5.0 c52c68a709 vendor: update buildkit to v0.19.0 366f2b563d Clarify code/comments in defaultipam.newPoolData bc93bba099 Use addrset.AddrSet instead of bitmap.Bitmap in IPAM 7e247e8b13 Add addrset.AddrSet to track a set of IP addresses 46e290fec6 Don't increment "unselected" in Bitmap when clearing a 0 5e9ee1a849 gha: Adjust release branches ae0fda655b update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) fc7caf96d2 Revert "libnet/d/bridge: port mappings: filter by input iface" f658ea3152 Fix parsing of user/group during copy operation 131441b37f daemon: NewDaemon: align max backoff delay with containerd 2.0 76a496a482 daemon/links: fix duplicate env-vars and cleanup range-detection fcdd6f4ad2 daemon/links: fix port-ranges with mixed protocols 251c68c647 daemon/links: fix port-sorting with mixed protocols 3d37d54b8c daemon/links: Link.ToEnv: simplify adding default port env-var c508919b7c daemon/links: add BenchmarkLinkMultipleEnv 3b27e36d67 daemon/links: add EnvVars function b54053d5da daemon/links: NewLink: simplify map to string conversion 53fec9813f daemon: Daemon.setupLinkedContainers: don't fetch linked containers if not used 6b14bdb7c7 daemon/config: validate network-diagnostic-port 370c7a30e2 libnetwork/diagnostic: rename methods 16cc0be0e1 libnetwork/diagnostic: move and improve logs for starting/stoping 8f1a49fa8c libnetwork: Controller: remove redundant mutex for diagnosticServer e4abcad7ac libnetwork/diagnostic: make EnableDiagnostic, DisableDiagnostic idempotent e899092b25 libnetwork/diagnostic: make DisableDiagnostic idempotent 1e6449dfc7 libnetwork/diagnostic: print newline after stackdump log path 8cc0e11823 libnetwork: un-export Controller.DiagnosticServer bf7a87a15a docs: clarify fromImage vs tag behavior in ImageCreate aa565ec1ef Dockerfile: update RootlessKit to v2.3.2 f3f9641f5d vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.2 912a64e22a vendor.mod: golang.org/x/sys v0.29.0 e8c6e7ceb0 build: don't print warning when connection was terminated 52774154c9 distribution: continueOnError: handle context cancellation / timeout 6b5f14a7bb distribution/utils: WriteDistributionProgress simplify check for broken pipe 61aa1657f7 layerStore.registerWithDescriptor: improve logs for cleaning up cache e7bd60ee2d Allow users to ignore missing br_netfilter 66e6a0b7a1 vendor: update buildkit to v0.19.0-rc3 21870ad796 daemon: NewDaemon: update grpc options for containerd 2.0 22c02219de Bridge: on network delete, make sure it's deleted from store feb2dabaa9 Ignore error when adding a bridge already in the ipset 0fad8324a8 libcontainer/supervisor: monitorDaemon: move options inline again 29ce3633e5 libcontainerd/supervisor: remove grpc options that are the default b750eb87cd daemon: NewDaemon: remove grpc options that are the default e94114305e daemon: NewDaemon: align grpc options with containerd's defaults 80b0570445 spelling fix in comments 8c236de735 ci: switch from jenkins to gha for arm64 build and tests c817ea2159 api/server/middleware: log before, not after the request d86920b9b3 ci(bin-image): fix bake build 078c5edcd7 Adjust test to support cgroupv1 c75e333b6f Satisfy linter ce3e34816a Add support for bare `writable-cgroups` security-opt f8187c0214 Error on invalid requests for writable-cgroups bc7d118fd7 Adjust TestCgroupRW to test output before exit code 081b9d97db Update TestCgroupRW with subtests + nil case fix b5b5b7e983 integration/container: test the writable-cgroups security option e3cdd59a82 daemon/&container/: enable `--security-opt writable-cgroups=true` as an option b1ea8032fa api: swagger: document StatsResponse 9ed85f487d daemon: don't discard "invalid parameter" errors for archive endpoints c6d8a93d58 daemon: containerExtractToDir: remove handling for read-only paths on windows ca0158b235 daemon: containerExtractToDir: combine checks for read-only target 0530750d7e daemon: containerExtractToDir: remove named error return 9ed662e72e daemon: containerExtractToDir: remove handling for copyUIDGID on windows ca06b222e3 api/types/container: merge Stats and StatsResponse 16cbb27e4e use StatsResponse instead of Stats in tests 390cb4c2f1 Increase integration test timeout from 5m to 10m 0aa8fe0bf9 Update to containerd v2.0.2, buildkit v0.19.0-rc2 a63602472d Use local cleanup method rather than dependency 3db60168e7 pkg/ioutils: remove crypto/sha256, crypto/sha512 imports f68eb9c3cb vendor: github.com/Microsoft/hcsshim v0.12.9 488d6972b2 vendor: github.com/stretchr/testify v1.10.0 2008799026 vendor: k8s.io/klog/v2 v2.130.1 adec695d36 vendor: github.com/fsnotify/fsnotify v1.7.0 1ef5957089 vendor: github.com/vbatts/tar-split v0.11.6 de86c46158 vendor: github.com/containernetworking/cni v1.2.3 6dd592bd49 vendor: github.com/containerd/go-cni v1.1.11 2ea97aec2d vendor: github.com/containerd/ttrpc v1.2.7 cc120c4c05 testutil: update to semconv v1.26.0 6439c46e06 vendor: github.com/containerd/errdefs v1.0.0 f40b92272c vendor: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20231105174938-2b5cbb29f3e2 eb592fecad vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 48e6b4e8f7 vendor: otel v0.56.0 / v1.31.0 d60f164e21 vendor: github.com/creack/pty v1.1.24 a78b84c212 vendor: github.com/aws/aws-sdk-go-v2 v1.30.3 d5fe43335f vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 5066658f39 vendor: golang.org/x/oauth2 v0.23.0 81d5487330 vendor: cloud.google.com/go/compute/metadata v0.5.0 433b1f9b17 libnet/d/bridge: port mappings: filter by input iface 49ec488036 logger/fluentd: remove deprecated fluentd-async-connect option d560704c91 libnet/d/bridge: init driver.nlh in newDriver 5a6a980dad daemon/export: Stop when context is canceled 15df1c9c40 imageService: Remove PerformWithBaseFS 2f60d15ddf Internal macvlan networks don't need a gateway address. 8b13cde274 L3 and internal ipvlans don't need a gateway address 43f71fb582 Bridge - skip gateway allocation if no gateway is needed 38e76ebea9 Only allocate a gateway if the n/w driver wants one 64006f964a Simplify selection of gateway address 24f09ef13c Update MAINTAINER file email for laurazard e26122c609 pkg/ioutils: remove unused NewReaderErrWrapper 2b4db9383c pkg/archive: nosysFileInfo: implement tar.FileInfoNames to prevent lookups ce8d3d1c78 pkg/ioutils: remove deprecated NopWriteCloser 39f1abb1fb pkg/ioutils: remove deprecated NopWriter 3faa170371 pkg/ioutils: deprecate NopWriteCloser 7fa3c553e7 pkg/ioutils: deprecate NopWriter ad860173a2 vendor: github.com/containerd/containerd v1.7.25 c12bfda3cd Dockerfile: update containerd to v1.7.25 d80e3410bc vendor: github.com/containerd/containerd/api v1.8.0 d23871469b pkg/sysinfo: Remove deprecated `NumCPU` cdd4a7429f pkg/ioutils: remove errWriteFlusherClosed 034cd27da0 pkg/ioutils: remove deprecated NopFlusher e183df63f9 pkg/ioutils: remove deprecated WriteCounter, NewWriteCounter 15ce2914a5 pkg/ioutils: move BytesPipe to container/streams/bytespipe 8f9c09edd4 Fix unit tests for an nftables host 818a180fce pkg/ioutils: deprecate NopFlusher 18f1ecafea c8d/snapshot: Rename variable that collided with import 15d3c99ff6 daemon: Remove "Error: " error message prefix cd9c292de9 imageService: Unify `Mount` and `Unmount` 0cbb604665 c8d: Implement `RWLayer` and remove `PrepareSnapshot` daed0bd4d6 container/rwLayer: Remove unused TarStreamer, ApplyDiff, Size and Name 85de28901d container/rwLayer: Remove Changes bafebbbd8a container: Decouple RWLayer from graphdriver implementation 383503d382 pkg/ioutils: deprecate WriteCounter, NewWriteCounter 60971a66b4 pkg/ioutils: deprecate BytesPipe, NewBytesPipe, ErrClosed 3db72b255d pkg/sysinfo: Deprecate NumCPU 6d24a21643 improve validation of cpu-shares, and migrate TestRunInvalidCPUShares 400f1ed95c runconfig: TestValidateResources: use subtests 93907c904d runconfig: TestValidateResources: fix duplicate test-case 5b18a7914c deprecate pkg/parsers.ParseKeyValueOpt and move internal aad7bcedd2 Dockerfile: update runc binary to v1.2.4 35932cdeec pkg/ioutils: un-export readCloserWrapper 392d33c98c image/save: set a stable timestamp for assets e324df3f1b image/tarexport: patch MkDirall to accept atime, mtime ca962cecfd image/tarexport: add fork of os.MkdirAll (non-buildable commit) ee1a15a970 daemon: ImageService.LogImageEvent: pass through context ea00e72c21 libnetwork/drivers/bridge: processIPAM: remove unused arg f8a973ba4e ci: update bake-action to v6 586556eda7 runconfig: return correct error-types and touch-up error messages fbb421efaa runconfig: cleanup TestDecodeContainerConfig c76cab29df runconfig: cleanup TestValidatePrivileged ff64a348cc runconfig: fix and refactor TestDecodeContainerConfigIsolation 7864454792 pkg/ioutils: move atomic file-writers to a separate (pkg/atomicwriter) package 34ab9570ad daemon/links: TestLinkMultipleEnv: assert with gotest.tools, remove TestLinkPortRangeEnv 97dc3056c6 Clear RWLayer reference under container lock 080d8e7d63 daemon/links: TestLinkEnv: assert with gotest.tools 702df89d9b daemon/links: TestLinkNaming: assert with gotest.tools 51eb0c6a24 daemon/links: TestLinkNew: assert with gotest.tools 382fb41563 daemon/links: remove newPortNoError utility 3fa5e7e6a9 Update internal use of idtools to usergroup 9c368a93b6 Split internal idtools functionality a4ae38b010 Use bridge consts for "DefaultGatewayIPv[46]" aux-addr keys 0f7a43271c daemon/events: Move metrics to internal/metrics 90e2afd0be daemon: Move direct usages of go-metrics to internal/metrics 438f5801e1 daemon/images: Move ImageActions to metrics 51c2689427 daemon/metrics: Move out to `internal/metrics` 048fece105 Alias github.com/docker/go-metrics imports 24ad9bef9d pkg/idtools: rewrite to use moby/sys/user f4e2cfa209 libnetwork/osl: Namespace.setSysctls: use stdlib errors 064cdf475c pkg/parsers: deprecate ParseUintListMaximum, ParseUintList 39c05177ef Check network connect/disconnect after live-restore c2fe1d31e9 Fix live-restore of the osSbox a77ee8b9c0 Mark endpoints as "populated" after live restore db1ed280f1 Live-restore gw-priority 9138195cef Rename Controller.sandboxCleanup to sandboxRestore 1359772433 pkg/sysinfo: parse cpuset.cpus/mems once and memoize 35fcbc1d1a Test a container attached to l3-ipvlan and bridge networks 81f6e087c1 Treat connected routes to unspecified addrs like default gws 725defe1e9 Include iface routes to unspecified addrs when looking for default gws 0416e31876 Add comments to selectGatewayEndpoint 1b9c09e10a daemon/logger: un-export RingLogger 263c46d755 integration/internal/container: IsInState: touch up error-logs 2282279180 pkg/sysinfo: internalize parsing cpusets aa696ffbb1 pkg/sysinfo: touch-up docs for cgroupCpusetInfo.Cpus, Mems 4597396cb5 pkg/sysinfo: define const for default Max CPUs 799501d172 pkg/sysinfo: rename vars/arguments for clarity 0d51680f91 pkg/sysinfo: stub out parsing cpusets on non-linux b7ed099727 daemon: isOnlineFSOperationPermitted: cleanup confusing syntax fb03a3c403 vendor: github.com/moby/term v0.5.2 be39e4f732 man: remove --allow-nondistributable-artifacts 4f9150cee5 Update swarm to latest for server alpn config a51baca00d pkg/fileutils: move GetTotalUsedFds internal in daemon ba8279bf1f golangci-lint: remove temporary exception for deprecated code e45f20352d pkg/fileutils: deprecate GetTotalUsedFds a079f62f47 Add testutil daemon.WithResolvConf d7f59cec05 daemon/config: add basic validation of exec-opt options a646467a66 integration-cli: migrate TestCreateByImageID to integration suite 5b31a5b370 libnetwork/drivers/windows: fix error-matching for hcsshim "not found" 1f4c9f23c3 libnetwork/drivers/bridge: format errors with '%v' for consistency 3b8ba71fe3 libnetwork/drivers/windows: fix non-constant format string 8c96e45375 distribution: fix non-constant format string e451b698d3 golangci-lint: add forbidigo rules to prevent regex.MustCompile 86e470fe3a daemon/names: use lazyregexp b7c88502fb internal/testutils/networking: use lazyregexp ae13510577 daemon/logger/awslogs: use lazyregexp to compile regexes on first use 690e00733e volume/mounts: use lazyregexp to compile regexes on first use 72ebf2c309 testutil: use lazyregexp to compile regexes on first use b5d90d746b registry: use lazyregexp to compile regexes on first use b6b19059c5 plugin: use lazyregexp to compile regexes on first use 0fe953dff0 pkg/idtools: use lazyregexp to compile regexes on first use 48d63b99ef opts: use lazyregexp to compile regexes on first use 06948b83f3 oci: use lazyregexp to compile regexes on first use 98f7c45e7f integration-cli: use lazyregexp to compile regexes on first use bc1dbd9ea6 daemon: use lazyregexp to compile regexes on first use d61a6924d7 client: use lazyregexp to compile regexes on first use 0672b3b7f7 builder: use lazyregexp to compile regexes on first use 43b3aaa62d implement lazyregexp package ce37cb3ea0 Down with the sickness (AUTO_GOPATH) 839b0afbc7 integration/container: use is.ErrorType for some tests 4504ca6bf6 integration/container: rename vars that shadowed imports 6b0085eebd integration/container: use consistent name for api-client fa0b9f9505 integration/container: use consistent alias for test-container pkg 547151abd2 pkg/sysinfo: cleanup tests 25009ed5c0 Restore labels when re-creating Windows networks 7bd1b64058 daemon/logger/loggertest: remove workaround for OSC string terminator parsing 5149401665 vendor: github.com/Azure/go-ansiterm faa5f7b0171c ddd885a961 daemon: don't repeatedly call NumCPU if not needed aa7493f953 daemon: minor cleanups for getting system info 1c37a4454b daemon: adjust tests for changes in go1.24 JSON errors c5575b5119 daemon: add missing "//go:build" directive f8524ab041 daemon: remove workaround for go1.21 compiler bug 8e9213a6b6 daemon: remove kernel-version check for kernel < 4.0.0 86a2df8be6 pkg/parsers: rename var that collided with builtin cfc988e4da integration-cli: TestRunInvalidCpuset.. create instead of run 8d5cf1db1e Use the roundtripper during build f321120767 daemon: parseSecurityOpt: rename var that shadowed function 44db31b9cc remove pkg/broadcaster and make it internal to container/streams 6ab9212168 pkg/ioutils: remove OnEOFReader and move it internal be4eac753f Remove use of bufio in cli import tests 4c251b6b03 Add pool for archive decompress stream 9189a6e0ab Fix chrootarchive test a93a079cb4 Remove use of pools in archive 8d787e3461 builder/dockerfile: unconvert e19e4de775 daemon: ignore some errors when setting env-vars c759fb20d6 daemon: remove uses of deprecated system.MkdirAll 1e060d3315 daemon/graphdriver/windows: remove uses of deprecated system.MkdirAll 05ec732667 libcontainerd/supervisor: remove uses of deprecated system.MkdirAll 84bb6e5afb container: remove uses of deprecated system.MkdirAll c02c2a3a79 cmd/dockerd: remove uses of deprecated system.MkdirAll e783bb5c69 builder/dockerfile: remove uses of deprecated system.MkdirAll bc61b31935 pkg/idtools: remove uses of deprecated system.MkdirAll 4472e9b7f8 pkg/system: deprecate MkdirAll and remove custom volume GUID handling e5bf6d8ba0 libnet: pass store as an arg to netdrivers 93e9f7f75f distribution: Pass Traceparent OTEL HTTP header 524a63a958 pkg/chrootarchive: remove "// import" comments 302ca6227f pkg/chrootarchive: use stdlib errors 727ab584bb vendor: github.com/containerd/cgroups v3.0.5 275bbcd300 builder: don't fall back to defaultKeepStorage when set to zero 315891dd2e Remove import comments e4236c93d9 Remove unused pkg/system functions 12b2b56fa6 Update archive to use fs.FileInfo over custom stat bb3e95dfdc Update archive to use unix.Mknod directly 35b9525f9a Update archive to use its own xattr funcs 1b4cbea3a8 Update archive to use time operations directly 90fef061ec daemon/c8d: Force c8dimages alias for containerd/images 8c30e11321 c8d/delete: Consistent method receiver 1ad78f00b1 daemon/c8d: Fix duplicate containerd/images import 6bd5840675 vendor: golang.org/x/net v0.33.0 364e4790e1 docs/api: allow for an empty string for Isolation (api v1.25-v1.47) 7e9a5064dc api: Remove unused imageStore and layerStore c452af6651 image: Remove unused `Details` fields d9795da33e image: Remove `GetImageManifest` 4f5ec9994c pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec 7fbbd52b0e add Shaun Thompson as curator b0be1f3af8 Enable external DNS if a network has an IPv6 gateway ec8a5b0f4c libnet/d/bridge: move iptRule to iptables pkg 1b823fb54e libnet: don't put external DNS answers in OTel spans 1aecca8bbd docs: Update example section for SwarmJoinRequest b6594353f8 libnetwork/iptables: remove deprecated Passthrough() d34d092b42 libnetwork/iptables: remove deprecated IPV, Iptables, IP6Tables 820dea0d2b libnet/d/bridge: hardcode chain names bd30a51ea7 libnet/iptables: split ProgramChain and move to bridge driver df3c78d061 Combine outgoing and ICC iptables rules 0f259dd76d Rename setupIPTablesInternal -> setupNonInternalNetworkRules 556b8eed16 Tidy setupIPTablesInternal 8fd177d79b pkg/reexec: Command: separate public API from implementation 6568c06d12 pkg/reexec: make platform-agnostic (again) 7672d60033 pkg/reexec: use const for name of test binary 0ef2b24c80 Make libnetwork responsible for DOCKER-USER setup/reload 9699284e8f Add iptablesdoc for a swarm network 6473d37002 Run commands in an L3Segment netns without failing the test. 3bf9a80818 Rename L3Segment Host.Run -> Host.MustRun 29e20fc904 Add static filter-FORWARD rules during bridge driver init 5ccc699513 Use golden testdata in TestUserChain cd81985bfa vendor: update buildkit to v0.18.2 d688389f4a libnetwork/iptables: deprecate Passthrough 8991c4e382 Deprecate BridgeNfIptables and BridgeNfIp6tables fields 30a365f543 docs/api: version-history.md: fix markdown 01a55860c6 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err 31fc7dd750 libcontainer: ReplaceContainer: fix var shadowing import 4e9df46a6e docs/api: document correct case for Api-Version header 53a9127349 integration/build: make TestBuildEmitsImageCreateEvent less noisy 504e1d4686 pkg/archive: replace uses of pkg/errors for stdlib errors f0ce367e1e pkg/system: deprecate types and functions that are only used internally f053beb34c libnet/osl: drop netns path GC 27deff4da1 libnet/iptables: deprecate type IPV c8f19e5e4c libnet/iptables: remove mutex-based serialization 537eea8744 vendor: golang.org/x/net v0.32.0 678ef1a267 libnet/d/bridge: unconditionally error out if LinkSetMTU fails 5c358743af daemon: info: remove bridge-nf-call-iptables / ip6tables warnings d8358ebc87 otel: Use non-noop tracer provider for grpc 96ef85272f c8d/pull: Show `Extracting` layer status 899360b649 integration/build_traces: Create own tracer provider 4847557d1b otel: Avoid excessive memory allocations if not configured 927ff16860 vendor: github.com/opencontainers/runc v1.2.3 88a08a070e vendor: github.com/cyphar/filepath-securejoin v0.3.5 ba90fd8da0 Decouple pkg/archive from pkg/ioutils ec5c9e06e3 Dockerfile: update runc binary to v1.2.3 e6443e4af2 vendor: golang.org/x/crypto v0.31.0 035eeee209 vendor: golang.org/x/text v0.21.0 df8b3e787c vendor: golang.org/x/sync v0.10.0 c4f80dd931 vendor: golang.org/x/sys v0.28.0 8b243a1a82 docs/api: deprecate non-distributable artifacts 1932091e21 remove support for non-distributable artifacts and deprecate API fields and config e394ff695c Dockerfile: remove libbtrfs-dev dependency 7d79b301bc Dockerfile: remove libsecret-1-dev dependency 3192b2aba7 Dockerfile: remove libudev-dev dependency 7c4afb1e6b Dockerfile: remove dpkg-dev dependency 7bba43a731 Dockerfile: remove libapparmor-dev dependency b08ff81204 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy 1a453abfb1 integration-cli: don't skip AppArmor tests on SLES be9e39b48b registry: ConvertToHostname: use strings.Cut to reduce allocations a6f98dc60d registry: Service.lookupV2Endpoints: add arg to skip mirrors 50215913db registry: loginV2: move variables closer to where they're used c1ef39e56e registry: loginV2: don't contact registry when failing to construct request a7da6fb2a7 man: vendor: github.com/cpuguy83/go-md2man v2.0.5 89899b71a0 update xx to v1.6.1 for compatibility with alpine 3.21 9da0e69608 api/server: Server.CreateMux: pass context and use structured logs 9c1ff095e8 cmd/dockerd: pass debug-router instead of constructing in CreateMux 27294df576 api/server: Server.CreateMux: also register API-version debug endpoints e2d2834be1 api/server: Server.CreateMux: register debug endpoints with correct methods 2f5412de8d api/server: set /debug prefix as part of debug-router routes 694c01620b chore: fix some function names in comment 76a5ca1d4d Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers 5fc32c12c7 cmd/dockerd: ignore some unhandled errors b0ec823cc7 daemon: remove Daemon.NetworkControllerEnabled 59bfc32a33 daemon/containerd: hostsWrapper: remove unused regService argument 3014d6d7a3 registry: deprecate APIEndpoint.TrimHostName fe2637a05b api/types/network: add godoc for EndpointSettings.GwPriority 15ba03c8fc Jenkins: don't modprobe kernel module 2af19b6b7c Don't try to modprobe ip6_tables in the moby dev container f2e1f52a04 Try to load kernel module ip6_tables, when necessary. 4740820716 Use ioctl to try to trigger kernel module loads 56eb47c622 Ignore kernel-assigned LL addrs when selecting "bip6" 404118c22b vendor: google.golang.org/protobuf v1.35.2 20ddbe2a0b vendor: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f 1e51b7a28c vendor: golang.org/x/tools v0.27.0 750d6f4423 vendor: golang.org/x/mod v0.22.0 99f593b762 vendor: golang.org/x/net v0.31.0 e5895eacac vendor: golang.org/x/crypto v0.29.0 fb9977e42e vendor: golang.org/x/text v0.20.0 115acf7c15 vendor: golang.org/x/sync v0.9.0 e542dee0a6 vendor: golang.org/x/sys v0.27.0 8fee8a759f Remove test env var DOCKER_TEST_CREATE_DEFAULT_BRIDGE 0eb3d431c0 Run tests that change docker0 in their own netns 52d7e407b7 update to go1.23.4 504ee465fc vendor: update buildkit to v0.18.1 4e30acb63f Dockerd rootless: make {/etc,/var/run}/cdi available 820520affd distribution: verifySchema1Manifest: pass through context 9a0b61ab29 daemon/daemon_linux.go: Fix a minor typo d75394bf77 Wait longer for a stable goroutine count in tests dd7831187d Fix typo in waitForStableGourtineCount f91afea6ea c8d/commit,import,build: Preserve overriden image f0c8becffb c8d/tag: Extract createOrReplaceImage 0194a18ca8 registry: remove assignment of default values in some tests a93f6c61db c8d/tag: Don't log a warning if the source image is not dangling 28a700bf5b registry: override net.LookupIP per test, not globally d17cd847ea registry: isCIDRMatch: don't try to resolve host if not needed 5f91c769f5 registry: deprecate RepositoryInfo.Class 3903f71f9f registry: remove deprecated APIEndpoint.Version and APIVersion type 0bd8738e33 registry: isCIDRMatch: return early if no CIDRs are set cce5dfe1e7 Jenkinsfile: modprobe br_netfilter 59c5919b12 Put --help before --host in the dockerd manpage 2fbb18ece2 Add --host-gateway to the dockerd manpage 0aba67203a Implement gateway mode "nat-unprotected" 07dff11a7e Wrap errors rather than using err.Error() d3c2376ff1 cmd/dockerd: change routerOptions.Build to a regular func 5b752fab32 api: add Priority field to EndpointSettings 229dc6676c daemon: early-return from buildJoinOptions c9f17bedc7 daemon/config: extract validation of userland-proxy config 83f8f4efd7 daemon/config: deprecate Config.ValidatePlatformConfig 74a00f183b daemon/config: move utility-functions separate from Config methods a4714fa04d daemon/config: verifyDefaultCgroupNsMode: update error message for consistency 2c000b8ac4 daemon: Daemon.RegistryHosts: use internal method to get daemon config 16be996b6b ci: use edge releases of buildx 3e4f437697 cmd/dockerd: newRouterOptions: rename arg that shadowed import 68a98a7263 daemon: getCD: remove use of parsers.ParseKeyValueOpt 003e35fea5 libnetwork/ipams/null: gofumpt code a8e5a19706 libnetwork/drivers/bridge: gofumpt code da5e86a82b daemon: gofumpt code fb6e650ab9 integration: add wait e7d15d4d58 daemon/graphdriver/zfs: ignore non-existent dataset on removal 264c15bfc4 Fix br_netfilter module loading logic b4769e86a4 vendor: update buildkit to v0.18.0 b57aa7f3b7 integration: remove default poll delay and timeouts c9a1e4dc8c Test host-gateway addresses from docker0 af0b973595 Allow IPv4 and IPv6 host-gateway-ip addresses 01e2168c1e Move Linux-only integration/network tests into Linux-only file 90250ce93a vendor: update buildkit to v0.18.0-rc2 b7f43c3729 Remove buildkit init timeout 0b5b1db1c1 Use default ULA prefix if fixed-cidr-v6 is not specified fdd2591cbe Separate IPv4 IPAM conf from the rest of default bridge conf cc538b2bf0 Drop fixed-cidr if not within user-managed bridge subnet 311a8bc899 Allow increase of fixed-cidr subnet size 85159ce09f Allow non-overlapping change of fixed-cidr 237654a553 Refactor IPAM config for default bridge 90baa2bc36 Fix selection of subnet from user-managed default bridge 63b558af77 Don't clear top bits of IP then check if it's global unicast facb2323a0 Add tests for IPAM Config of default bridge 4a2bd1085e Move default bridge test into linux-only file 46a91a947e api/types/filters: reduce uses of non-exported fields in tests cffee85725 api/types/filters: also test generated JSON 848f11aa7c api/types/filters: rewrite tests with gotest.tools 4becdaca72 Add label on PrepareSnapshot to warn about non-expiring leases eef6b83e53 Update containerd image builder to use lease prune label e6170a5c4f Fix lease management during image operations 1a26e627bc vendor: github.com/vishvananda/netns v0.0.5 0666d4a585 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2) 557e4ed83b tests: migrate simple cases to assert.ErrorIs caae3c051d tests: migrate to assert.ErrorContains when possible 1b470d15d8 tests: migrate away from assert.Assert(v == nil) 0553d3d994 tests: migrate away from assert.Assert(err == nil) 5e4e34a966 tests: migrate strings.Contains -> is.Contains in assertions 48b237f7af vendor: update buildkit to v0.18.0-rc1 44f9eec1ae vendor: github.com/tonistiigi/go-actions-cache 394979b8119e 1551d95727 vendor: resenje.org/singleflight v0.4.3 b9a904c48a integration/container: TestCDISpecDirsAreInSystemInfo: use fixtures d23bc11b97 vendor: github.com/containerd/continuity v0.4.5 8cecf3a71c Dockerfile: update containerd to v1.7.24 a650dbd951 Update containerd to v1.7.24 821d974789 volume/testutils: simplify fakePluginGetter b656cffe4c Disallow "network generic data" with type options.Generic 223929a44d Test routed n/w inter-network communication 0546d9084f Routed networks accept traffic from anywhere. 10338053f0 Don't add default-RETURN rules to DOCKER-ISOLATION chains 939bc14616 Tidy bridgeNetwork.isolateNetwork 255fff4acd Propagate error from INC rule setup d3b7d84b23 Simplify setINC() 1a607cf257 Rename gwMode.natDisabled() to gwMode.routed() 9c9eccfb23 client: support multiple platforms on save and load e257856116 Dockerfile: update to runc v1.2.2 44ed3067ca c8d/container/inspect: Return `ImageManifestDescriptor` 0020c41e3a daemon: Best-effot container `OS` to `ImagePlatform` migration 638172417c container: Add `ImagePlatform` field and deprecate `OS` 60cd165012 Dockerfile/frozen-images: Add amd64 and arm64 hello world f303531757 client: ImageImport: omit empty query-parameters f96994ec17 Skip tests that are flaky for 4 already be36ac13e5 .golanci.yml: rm runc exception acf920823b update golangci-lint to v1.62.0 329d35bcca vendor: github.com/opencontainers/runc v1.2.2 4b26582bc6 vendor: google.golang.org/grpc v1.66.3 1eccc326de vendor: github.com/golang-jwt/jwt/v4@v4.5.1 a333c2990f client: TestImageImport: use table-test, asserts, add platform test-case 2bab030d6c client: TestImageSave: use table-test, asserts, add platform test-case 1ea24b7be3 client: TestImageLoad: add test-case for platform 613538469b client: TestImageLoad: rewrite to use table-tests, use asserts b0b6357701 Makefile: don't automatically inherit graph-driver from host d88ab0f3a2 c8d/image/inspect: Return `Descriptor` c2c0046d11 remove logentries check and migration code 5ef5ca3adc EnableIPv4 will be in API 1.48, not 1.47 1a16f5099b daemon/logger: logDriverError: use WithFields for logs 451fee91c5 libnetwork: add missing go:build tag 0f0c5eeaca api/server/router/container: add missing go:build tag 835b1f1063 daemon/containerd: add missing go:build tag 354dfdb928 Delete /etc/hosts entries on network disconnect c1bf84fdbc Move Austin Vazquez (austinvazquez) to maintainers 82fdae7730 daemon/images: fix godoc for ImageActions 4a2c48e231 Dockerfile: update compose to v2.30.3 ee95c7bd89 Dockerfile: update buildx to v0.18.0 8a81a97af5 Only delete /etc/hosts entries for disconnected network b034dc41a2 deprecate pkg/platform and move internal b15cd283d8 c8d/list: Return `Descriptor` fc590032f3 hack: Add explicit containerd feature to `daemon.json` 7d89d83485 golangci-lint: enable copyloopvar linter d67a21b6fc pkg/idtools: remove redundant capturing of loop vars (copyloopvar) 3350920788 integration/service: remove redundant capturing of loop vars (copyloopvar) 70b354713b runconfig: remove redundant capturing of loop vars (copyloopvar) 1a89c1e4a6 pkg/archive: remove redundant capturing of loop vars (copyloopvar) 517baee5f2 distribution: remove redundant capturing of loop vars (copyloopvar) 04d8766d4e integration/network/bridge: remove redundant capturing of loop vars (copyloopvar) 020b7102e3 daemon/logger/syslog: remove redundant capturing of loop vars (copyloopvar) 59f68d3f99 api/server/middleware: remove redundant capturing of loop vars (copyloopvar) 243442280e integration/system: remove redundant capturing of loop vars (copyloopvar) bb682f75f9 integration-cli: remove redundant capturing of loop vars (copyloopvar) a19b892c29 integration/volume: remove redundant capturing of loop vars (copyloopvar) cd5e043aff daemon/cluster/executor/container: remove redundant capturing of loop vars (copyloopvar) f797d70649 api/types/container: remove redundant capturing of loop vars (copyloopvar) 08dbb7a593 integration/build: remove redundant capturing of loop vars (copyloopvar) ee54e43bf1 integration/daemon: remove redundant capturing of loop vars (copyloopvar) 9a7278fbdc integration/capabilities: remove redundant capturing of loop vars (copyloopvar) ff97ff8320 daemon/logger/loggerutils: remove redundant capturing of loop vars (copyloopvar) 67d91e7622 volume/local: remove redundant capturing of loop vars (copyloopvar) f7b547ba0d integration/network/ipvlan: remove redundant capturing of loop vars (copyloopvar) b5c0f6cd70 daemon: remove redundant capturing of loop vars (copyloopvar) d885d097ef libnetwork/ipams/defaultipam: remove redundant capturing of loop vars (copyloopvar) 7db58fefdc internal/mod: remove redundant capturing of loop vars (copyloopvar) 74e44345e7 distribution/xfer: remove redundant capturing of loop vars (copyloopvar) 874ad2fcf0 api/types/filters: remove redundant capturing of loop vars (copyloopvar) 3a34264129 volume/mounts: remove redundant capturing of loop vars (copyloopvar) a505b19170 integration/plugin/common: remove redundant capturing of loop vars (copyloopvar) 742509150b libnetwork/bitmap: remove redundant capturing of loop vars (copyloopvar) 082a52e8ac oci: remove redundant capturing of loop vars (copyloopvar) e9b009fef5 integration/networking: remove redundant capturing of loop vars (copyloopvar) 53d78d73e6 integration/container: remove redundant capturing of loop vars (copyloopvar) 0b2d687b06 daemon/containerd: remove redundant capturing of loop vars (copyloopvar) b5b077f2ea api/types/network: remove redundant capturing of loop vars (copyloopvar) 0fc7b1c201 daemon/cluster/convert: remove redundant capturing of loop vars (copyloopvar) 6a85a13c0a internal/testutils/specialimage: remove redundant capturing of loop vars (copyloopvar) 1c6958bf13 integration/network/macvlan: remove redundant capturing of loop vars (copyloopvar) 88e24ccda6 image/cache: remove redundant capturing of loop vars (copyloopvar) 89add8c64f libnetwork/drivers/overlay: remove redundant capturing of loop vars (copyloopvar) ce1a39ab34 client: remove redundant capturing of loop vars (copyloopvar) ea10382ffa integration/image: remove redundant capturing of loop vars (copyloopvar) 69d0c773ca daemon/logger/fluentd: remove redundant capturing of loop vars (copyloopvar) c2e22d85b3 api/server/httputils: remove redundant capturing of loop vars (copyloopvar) aea8a0724a integration/network: remove redundant capturing of loop vars (copyloopvar) f0b896c5f2 builder/remotecontext/git: remove redundant capturing of loop vars (copyloopvar) 4768d680d1 libcontainerd/remote: remove redundant capturing of loop vars (copyloopvar) 443a074fa4 profiles/seccomp: remove redundant capturing of loop vars (copyloopvar) 93f98535c3 daemon/logger/loggertest: remove redundant capturing of loop vars (copyloopvar) 35aa84fbc2 pkg/plugins: remove redundant capturing of loop vars (copyloopvar) 63f0b9a1d5 opts: remove redundant capturing of loop vars (copyloopvar) c0de852afa integration/config: remove redundant capturing of loop vars (copyloopvar) 41bf78226f daemon/config: remove redundant capturing of loop vars (copyloopvar) b01a37a6b7 libnetwork/drivers/bridge: remove redundant capturing of loop vars (copyloopvar) 53e48e8623 libnetwork: remove redundant capturing of loop vars (copyloopvar) 8b190b16df registry: remove redundant capturing of loop vars (copyloopvar) 21e1038d12 golanci-lint: sync comments with docker/cli b453aa65fa update go:build tags to use go1.22 bf251c33d0 Only masquerade access to own published ports for userland-proxy=false 3dea9fd4e6 Add TestFilterForwardPolicy 3cadadb4eb Add daemon option --ip-forward-no-drop 5823b05c97 Modify IP forwarding and filter-FORWARD DROP setup. a4d74c6383 Move setupIPv6Forwarding() to setup_ip_forwarding.go 24f53eba7f Move integration/network/bridge_test.go to bridge subdir ca273f465a Dockerfile: update registry to v3.0.0-rc.1 c9570da15b chore(libnetwork): fix some comments 756586e437 vendor: update buildkit to v0.17.1 a6e5f7f86b Structured logs in sbJoin/sbLeave and funcs they call 18327745c0 Allow separate IPv4/IPv6 gateway endpoints. 869f7996fc Option to disable implicit mapping IPv6 host to IPv4. 4ac7f14e99 Add EnableIPv4 to the bridge driver c0045476b8 all: Remove redundant `units` alias for `go-units` 20818454c4 update to go1.23.3 16f6fd1a95 Add a comment explaining host-networking hosts file generation 7c1e41a06d libnetwork: Sandbox.buildHostsFile: remove intermediate var 6a5ab42f28 libnetwork/etchosts: Delete: truncate file instead of close and write 7d98e45a6e libnetwork/etchosts: Add: combine with "mergeRecords()" 28d029cf9f libnetwork/etchosts: don't panic on invalid regex 80e4631998 Use netip.Addr instead of string when building /etc/hosts c2a09d2721 Don't update /etc/hosts separately for each initial network 0af6203b46 vendor: github.com/containerd/typeurl v2.2.3 84965c0752 Windows: Run containerd as managed process 5014c90516 api/swagger: Improve description for platform in images/push 7766b35d74 golangci: govet: enable more rules 24bd11ce22 pkg/plugins: TestLocalSocket ignore deepequalerrors (govet) 626d9b421b distribution: TestLayerAlreadyExists: fix deepequalerrors (govet) 06bf2a2699 distribution: manifestStore.Put: fix unusedwrite (govet) facdfc1751 daemon/images: onlyFallbackMatcher.Match: fix unusedwrite (govet) 406e3a0ff7 daemon/containerd: storeJson: fix redundant err-check (govet) 8e76998aee integration-cli: loadSpecialImage: fix shadowed variables (govet) a0b84a34c2 layer: verifiedReadCloser.Read: fix shadowed variables (govet) 38db7265fc pkg/plugins: loadWithRetry: fix shadowed variables (govet) a28e6e2d21 daemon/graphdriver/btrfs: Driver.parseStorageOpt: fix shadowed variables (govet) b3705f12cd distribution: pushDescriptor.layerAlreadyExists: fix shadowed variables (govet) 0c8c098719 libnetwork: Network.rmLBBackend: fix shadowed variables (govet) 544b1574e2 builder/dockerfile: fix shadowed variables (govet) bb9251c46d daemon/containerd: fix shadowed variable in tests (govet) 979227484f daemon/containerd: ImageService.imageDeleteHelper: fix shadowed variable (govet) 6dc31171c5 builder/builder-next/exporter: patchImageConfig: fix shadowed variable (govet) b019372446 libnetwork/bitmap: fix shadowed variable in tests (govet) 32aa56af00 pkg/idtools: fix shadowed variable (govet) 6f3dd5f040 plugin: TestPluginAlreadyRunningOnStartup: fix shadowed variable (govet) e46e159001 plugin: Manager.getManifestDescriptor: fix shadowed variable (govet) d058e09200 daemon/graphdriver/overlay2: fix shadowed variable (govet) ee425a9773 builder/builder-next: fix "id" variable being shadowed (govet) 79c5b938f4 daemon: Daemon.autoRemove: fix shadowing (govet) 007daf5045 daemon: Daemon.handleContainerExit rename vars to prevent shadowing (govet) 738fb74a1a libnetwork/datastore: MockStore.AtomicPut: remove redundant nil check (govet) 473b1d419c golangci: run gosec on test files as well f6d86126c4 distribution/xfer: createChainIDFromParent: ignore G602 false positive (gosec) a309e88dff pkg/tarsum: renderSumForHeader: ignore G110 in tests (gosec) 41b5645ba2 integration-cli: TestDaemonStartWithDefaultTLSHost: fix G402: TLS MinVersion too low 4bb96a5a4a awslogs: TestNewAWSLogsClientCredentialEndpointDetect: ignore G101 (gosec) 6f220c3340 daemon/logger/splunk: HTTPEventCollectorMock: fix G114 (gosec) 79196deae9 pkg/authorization: fix G112 Potential Slowloris Attack (gosec) e6e6f0cdca client: TestTLSCloseWriter: fix G112 Potential Slowloris Attack (gosec) 963a9d7504 integration-cli: ignore some file-permissions issues (gosec) 7d7412af31 integration-cli: TestRunCreateVolumesInSymlinkDir: adjust file perms (gosec) 0d1c645919 integration-cli: writeFile: fix file permissions (gosec) 6ca0d3b1b1 integration-cli: inspectMountPoint: fix implicit memory aliasing (gosec) c8e085b56a volume/mounts: TestConvertTmpfsOptions: fix implicit memory aliasing (gosec) c3fa5b2e57 integration/plugin/logging: adjust file permissions in test (gosec) 9fc2b45fa5 fix vendor of github.com/containerd/containerd 73fae59cef golangci: remove invalid govet config 1188e80cc5 golangci: move gosec exclusions to linters-settings section a0807e7cfe golangci: set go version to prevent fallback to go1.17 semantics 29e5bfb0f0 golangci: fix deprecated run option 7809dc08f1 golangci: remove global ignore for EXC0006 / G103 (gosec) 79e9619412 pkg/archive: ignore G103 (gosec) 88c178328f libnetwork/drivers/bridge: ignore G103 (gosec) 62e137377b integration/image: ignore G103 (gosec) e567b816d2 golangci: sort linters-settings 0940460c2f libnetwork: endpointJoinInfo.UnmarshalJSON: fix shadowed variable (govet) e601e71681 Remove function isLinkable 083d595286 client: TestImageHistory: add minimal test for platform 73fabd5a21 client: TestImageHistory: use fixture for JSON response 5cfd326aa4 client: Client.ImageHistory: don't decorate error twice caf2d5dc7c Change meaning of return from DNSBackend.ResolveName ec3dde7001 Only allocate IPv6 addresses if IPv6 is enabled. fe856b94b5 Configure network endpoints after creating a container 788db583b1 Make buildSandboxOption a function instead of a Daemon method 4c553defce Separate Sandbox/Endpoint construction a715ccaaa3 Unconditionally update NetworkSettings 933fcc9814 Re-remove the SetKey OCI prestart hook 035b8afe04 chore: fix function name 330e717403 fix(systemd): start Docker engine *after* DNS resolution is ready 96039276b6 client: add utilities to encode platforms 816dbbfddc ci: re-enable firewalld jobs 8c3945c761 client: rename vars for consistency 0e72863b9d vendor: update buildkit to v0.17.0 17b76511d5 Fix: Duplicate event on network disconnect #48797 fbb595cb66 Remove libnetwork_test.TestMain 5f39567e56 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 741cc494cd builder-next: exporter: emptyImageConfig: use platform directly 9be6e902b5 Restore 27.x path for libnet's Bolt database 2cc21208e6 vendor: update buildkit to v0.17.0-rc2 cb966073ce container create: add warning for volumeDriver together with mounts 93255bd748 vendor: github.com/Microsoft/hcsshim v0.12.7 3dc042b1df vendor: sigs.k8s.io/yaml v1.4.0 2807c0c2d2 Revert "ci: run integration tests with firewalld enabled" db68a019fd c8d/save: Add tests 3cc736e95c chore: fix some function names ba454f573b c8d/inspect: Fix duplicate RepoDigests ae87c1d84c remove deprecated pkg/directory 2054fd99b1 pkg/longpath: remove deprecated Prefix const c1652ab357 volume/service: use local driver as default for anonymous volumes 31880791a4 volumes/mounts: test the actual MountConfig returned 275609eb37 volumes/mounts: test the actual error returned 6b0c4b5216 volumes/mounts: don't set "expected" values for fail cases e141be8752 volumes/mounts: remove backticks from test logs be7d57367b volumes/mounts: remove backticks from errors 0b290094b5 volume/mounts: windowsParser.ConvertTmpfsOptions don't use runtime.GOOS 75e8f57579 internal/safepath: Join(): remove workaround for ECI / Sysbox 4b60c68803 internal/safepath: Join(): log some unhandled errors 5fc5b0574b internal/safepath: kubernetesSafeOpen: explicitly suppress unhandled err 4e5c7eeafc daemon: cdiHandler.getErrors: remove var that shadowed import 0c43bc6891 demon: ImageService.Mount: use structured logs 5c48736863 remove redundant alias for runtime-spec 352b4ff2f1 volume: VolumesService.Create: fix log-level for debug logs 2aaae08ade Cleanup legacy mirror string to registry host b3569ebd5a Add HTTP fallback to all insecure registries 1c34581812 Use daemon config to check for legacy config 8b4cb6f58c Update host resolver to use containerd host config 8e0bf25bc3 container: update confusing GoDoc for Container and State f2a3acc104 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 d9a2ca7b49 vendor: go.opentelemetry.io/otel v1.28.0 070d6c75a7 vendor: google.golang.org/genproto/googleapis/api f6361c86f094 c2029cb257 Update tmLanguage file to cover first escape character 95959f7000 vendor: github.com/prometheus/client_golang v1.20.5 10d57fde44 volume/mounts: fix anonymous volume not being labeled 7d7089247c api/types/filters: GetBoolOrDefault: remove unreachableCode f31188bc4c vendor: github.com/cenkalti/backoff/v4 v4.3.0 c3cab4170b vendor: github.com/go-logr/logr v1.4.2 d2557466c6 vendor: google.golang.org/protobuf v1.34.2 c98c6d4f08 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 a6d5b48e67 vendor: github.com/opencontainers/runc v1.2.0 bb364cc0f3 inte/t/networking: delete veth ifaces before netns 4ab7644d8d c8d/load: Don't ignore missing platform when requested 533e7d150a From 28.0.0, don't migrate per-endpoint sysctls. b79bba6b68 Remove feature flag "windows-dns-proxy" 88b90ebbd2 vendor: github.com/opencontainers/selinux v1.11.1 5c72a95a30 client: prevent idle connections leaking FDs 0105091745 vendor: github.com/cilium/ebpf v0.16.0 51dd387bc9 vendor: github.com/cyphar/filepath-securejoin v0.3.4 6be2074aef daemon: use OwnCgroupPath in withCgroups d4159a7e73 ci/gha: enable go caching 0acdc37a20 container: remove deprecated ErrNameReserved, ErrNameNotReserved 1dcb7af2cb daemon: remove Daemon.containerRoot, Daemon.newBaseContainer 7c087c3267 Fork buildkit resolver logic to daemon package aba8df74a1 Add TestDirectRoutingOpenPorts c9fdeaf70e Explicitly DROP packets for ports/protos that aren't mapped. 6634fc5136 Allow ICMP in routed mode 6131322c6f daemon: remove deprecated Daemon.IsPaused 692024a18c daemon: remove deprecated Daemon.Exists 3bbb9749f4 c8d/test: Add memoryLabelStore 3f745f2b21 c8d/list: Extract fake service helpers 1bb5f8bb67 update to go1.23.2 a8cd0fc4d4 vendor: go.etcd.io/etcd/server/v3 v3.5.16 5f994c49e8 vendor: go.etcd.io/etcd v3.5.16 ac6e32cb5c daemon: deprecate Daemon.IsPaused d47c31ffdd daemon: deprecate Daemon.Exists d9ae34289a daemon: Daemon.newContainer: explicitly return nil-error 303530c1f5 daemon: Daemon.newContainer: inline Daemon.generateHostname 7faaa3afa8 client: explicitly return zero-type on failures in prune functions 0539b7073e pkg/stringid: optimize GenerateRandomID 7ebe625db7 pkg/archive: move deprecated NewTempArchive, TempArchive to test-utils b313fcb8ff pkg/archive: remove deprecated CanonicalTarNameForPath c837027a9c pkg/stringid: replace TestShortenIdXXX with TestTruncateID table test 83f17b0cbb pkg/stringid: remove deprecated IsShortID, ValidateID 77f97926ad daemon: remove secretsSupported utility c0b86dd068 daemon: remove configsSupported utility 5208e2954c daemon: deprecate Daemon.Register and make it internal d122ea0aea api: GET /images/json: preserve original manifest order 1aba291cd4 Releases container layer on export 66f159dc24 build: log when build is cancelled cca7085464 cmd/dockerd: Add workaround for OTEL meter leak 21b0d5f0c1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e fafdcd1194 dockerd-rootless-setuptool.sh: let --force ignore smoke test errors e7e555f573 distribution: remove formatPlatform utility abed0e1f97 client: ContainerResize, ContainerExecResize: don't overflow width/height ed44a05607 api: backend.ContainerExecResize: pass context and use uint32 for width, height 2b2aa69100 api: exec resize: improve errors for invalid width/height 8553d34593 api: backend.ContainerResize: pass context and use uint32 for width, height d19aa0c590 api: container resize: improve errors for invalid width/height 1dd9d2c780 api/server/httputils: add Uint32Value utility 0548fe251c Enable bridge netfiltering if userland-proxy=false 039e164bf5 api/server/httputils: DecodePlatform: improve test-coverage a8bfa83667 Fix: setup user chains even if there are running containers 1701bce9e0 api/server/middleware: use structured logs for debug-logs 4e840b9e29 volume/service: change some logs to use structured logs bca54a6838 daemon: killWithSignal: use more structured logs 44010e76c2 integration/container: add TestExecResize 944dc4a559 integration/container: TestResize: add more test-cases 3f2e9da010 api/server/router/container: move API adjustments to API 0c595fe781 api/server/router/container: fix inconsistent receiver name 59cf8e8565 Add iptables doc for a gateway-mode=routed network 19328fdd4f Add iptables doc for a --internal network bc84b4b6d9 Add iptables doc for a network with icc=false a8eaeba3f9 Add iptables doc for a network with userland-proxy disabled ac4a95d1d0 Add iptables doc for a user-defined network 20571e453b Generate iptables documentation a602054826 daemon: fix restoring containers with name matching an ID 71977a841c daemon: Daemon.registerName: inline validateID utility 4e567e1622 ci: run integration tests with firewalld enabled 8883db20c5 hack: run firewalld when $DOCKER_FIREWALLD is set 6c6174b371 cmd/docker-proxy: UDP: reply to clients with original daddr a0a0bbae6c Discard ErrDumpInterrupted and return data after maxRetries 3cf90ca73f container: deprecate ErrNameReserved, ErrNameNotReserved 0200c58c4a container: viewDB.ReserveName, view.GetID: return errdefs errors 0603bd9577 container: viewDB.withTxn: don't wrap errors 0d36ab1875 container: TestNames: don't string-match error assertions d9627b6159 docs: api: document w (width) and h (height) query params as required 2a3a7e8ee8 api: document w (width) and h (height) query params as required a051aba82e gha: shorter time limits for smoke, validate 91c448bfb5 gha: use "ubuntu-24.04" instead of "ubuntu-latest" 9a14299540 gha: dco: small tweaks to running the container 3cb98d759d gha: dco: update ALPINE_VERSION to 3.20 7da4ab9a91 README: add some badges cfe0d2a131 gha: build (binary), build (dynbinary): limit to 20 minutes e75f7aca2f gha: dco: limit to 10 minutes 4a2361ea09 pkg/authorization: update link to API documentation 5b149d3faa client: update link to API documentation 0f8f143a27 docs/api: version-history: update documentation links e06245a2a6 client: imageBuildOptionsToQuery: omit "default" networkmode b13cf4fc5f client: imageBuildOptionsToQuery: only send "rm" when disabling 805e2c67e2 builder/builder-next: Builder.Build: use network-mode consts 740798da34 client: imageBuildOptionsToQuery: omit empty values from query c68c9aed8c gha: restrict cross and bin-image to 20 minutes 7fe04c142d vendor: github.com/moby/buildkit v0.17.0-rc1 cd551b936b daemon/containerd: getPushDescriptor: fix formatting of platform in errors c16be54040 daemon/containerd: touch-up errPlatformNotFound error 91f74c2fe0 Disable iptables/ip6tables in two tests to remove conflict 8681b3c2ac images: GetImage: touch-up error message for missing platform d31c241ea5 PushImage: remove misleading error about --platform without containerd 037bac89fc gha: remove stray double empty line 26049febb2 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452 6b7e2783d1 gha: add guardrails timeouts on all jobs 7fa6d3c230 integration/build: remove TestBuildWithSession, and fsutil direct dependency 2e699872bc vendor: google.golang.org/grpc v1.66.2 e007ef71c1 vendor: google.golang.org/protobuf v1.34.1 30b6e58242 vendor: github.com/cespare/xxhash/v2 v2.3.0 4592ce42b6 vendor: golang.org/x/tools v0.25.0 36549fb56e vendor: golang.org/x/mod v0.21.0 cc80652bcd vendor: golang.org/x/net v0.29.0 9d6db83acc vendor: golang.org/x/crypto v0.27.0 6e32888caa vendor: golang.org/x/text v0.18.0 51cf0ed303 vendor: golang.org/x/sys v0.25.0 6b7565ba40 vendor: go.etcd.io/bbolt v1.3.11 02d4fc3234 gha: buildkit: make sure expected Go version is installed d7ff538467 Fix iptables rule descriptions 77e51657fe cmd/docker-proxy: re-add SO_REUSEADDR 38f0483ea7 Set NODAD on bridge IPv6 addresses 58f4e916a3 build: create distinct history db for each store 367125e0cc Use `pools.Copy` for archive file copy operations 2f02f456f5 Fix comments fd0d008504 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350 7ca9e9b496 libnet/d/bridge: port mapping: proxy LL connections 49ab30ea2c Fix vendoring for moby/docker-image-spec 7eb508e14c api: postImagesLoad: fix API version for platform 5875b6e8cf inte/networking: test access to published ports from remote host 2552782c1d inte/networking: test accessing a published port from the host 98efe665a5 Log rather than error if port mapping is overspecified 339592f59b Pass context to the port mapping code ca4c68ab95 update to go1.22.8 c866a7e5f8 daemon/exec: don't overwrite exit code if set 4babd72186 tests: skip docker-py exec exit code test e6488c9c0e runconfig: validateNetContainerMode: simplify validation 5bdbc2f026 client: ContainerCreate: normalize CapAdd, CapDrop capabilities be248d18b5 client.ContainerCreate: use container.CreateRequest instead of local type 98d74e3a3c Update download-frozen-image-v2.sh added OCI v1 support 91df504bf1 inte/networking: move port mapping tests into a dedicated file 6a1d8a9899 daemon: add IPv6 loopback as insecure registry 7624a6bfa5 Dockerfile: update compose to v2.29.7 233dce3dba Dockerfile: update docker CLI to v27.3.1 edcefd4efb libnet/i/kv/boltdb: fail fast in case of contention ed08486ec7 libnet/ds: simplify datastore.New() 3ca91a6a12 libnetwork: unit tests: drop OptionBoltdbWithRandomDBFile 450200b4a6 gha: add CodeQL Analysis workflow 32b9e7b8b9 libnet/i/kv/boltdb: remove unused field 'timeout' 4f1d739de5 gha: govulncheck: make sure read permissions are set 8c598b1005 cmd/dockerd: runDaemon: extract platform-agnostic code 5228850225 cmd/dockerd: windows: don't use Fatal log to prevent early exit 0aebbd0ba9 cmd/dockerd: use golang.org/x/sys/windows/service param-change consts b186261b84 cmd/dockerd: un-export DaemonCli, NewDaemonCli 6f83fda310 cmd/dockerd: construct context in main 52694ebe16 cmd/dockerd: windows: move setting PIDFile location to setPlatformOptions 44a3bba2a2 cmd/dockerd: apply options when creating daemonCLI, not when starting 5c1b037ff5 cmd/dockerd: rename loadCLIPlatformConfig to setPlatformOptions 1388d959bc cmd/dockerd: set default configfile location as part of newDaemonOptions 19a8e7ff7e cmd/dockerd: getDefaultDaemonConfigFile: add GoDoc for Windows implementation 388c0a8cda cmd/dockerd: remove unused error-returns 1624ae197e cmd/dockerd: move Windows code for data-root 333cfa6402 Fix merge problem db25b0dcd0 Only enable bridge netfiltering when needed 605f51172a Dockerfile: update compose to v2.29.4 3d4831a23f Dockerfile: update buildx to v0.17.1 45a9dde660 man: dockerd: add description for --log-format option c4aaa97f02 man: remove docs for deprecated --api-cors-header c2fc1f4a40 internal/opts: SetOpts: invalidate empty option-names 908bb959e7 internal/opts: SetOpts.Set: remove redundant var assignment 758cca6036 internal/opts: SetOpts,NamedSetOpts: test for optional value 50e83a0713 man: dockerd: value is optional for --feature flag f9c0103413 Do not DNAT packets from WSL2's loopback0 2b6550bb2e man: fix duplicate word in --feature flag description edaa0eb56d Add linting rules to spot use of un-wrapped netlink functions. 00bf437d84 Add nlutil functions to retry on netlink EINTR 8b0e94ffaf Update dlv in the dev-env 3dd96ce3c4 Fix enableIPv4 for old networks fa06acc851 man: update dockerd man-page to include --feature flag ff191c58f7 api: info: deprecate "Commit.Expected" fields f13c08246d Add feature to daemon flags fefa98ae90 c8d/prune: Keep deletion order stable 521fa833fe images: Support platform selection on graphdrivers f143f4ec51 image/save&load: Support `Platform` parameter ab075ecd10 image/history: Support `Platform` parameter 5128007116 Explicitly disable nvidia device injection for --gpus=0 adb00d3d55 TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping 23e79a261e c8d/prune: Add OTEL spans e4c2eb9d8a c8d/prune: Keep the last tagged image instead of creating dangling image 962da27cdf Dockerfile: update compose to v2.29.2 2b43979395 API: bump version to 1.48 e5e8addeee Dockerfile: update buildx to 0.17.0 d291722110 Dockerfile: update docker CLI to v27.2.1 c095dbe512 project: update 23.0 EOL and add 25.0 LTM branch 43036f350a Dockerfile: update RootlessKit to v2.3.1 c98aad0518 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.1 829aa845bb integration/system: rename vars to prevent shadowing imports 71e449de0a vendor: update buildkit to v0.16.0 7263cd226f image/tarexport: saveSession.save: inline variables 2e4079ff31 image/tarexport: saveSession.save: remove redundant Platform ab5c5df1d5 image/tarexport: rename variables that shadowed imports 5fd3cd2d77 layer: layerStore.deleteLayer(): remove redundant error-check f5cc04284d remove deprecated image/spec package 92195c1333 Dockerfile: update containerd binary to v1.7.22 b4a3e8a307 vendor: github.com/containerd/containerd v1.7.22 6f37e5a168 vendor: update buildkit to v0.16.0-rc2 1161b790cf seccomp: add riscv64 mapping to seccomp_linux.go 16d686c7bc internal/unix_noeintr: fix godoc for package 47d5ce0ef8 gha/bin-image: Also run on branches like `27.x` 09fc6ab2d9 docs/api: update deprecation version for erroneous fields (v1.46, v1.47) 3df03d8e66 api/swagger: update deprecation version for erroneous fields aca38a4218 docs: api: fix documentation for image push endpoint (API v1.25-v1.47) 07e31e393a api: swagger: fix documentation for image push endpoint fb6da4f4b7 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16 5403e3f4de libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16 928e5aa524 container/stream: Config.CloseStreams(): use errors.Join 59eba0ae13 Fix typos a2e14dd8bd update to go1.22.7 5ebc179cb1 test: update since session signature has changed f4261dbb75 vendor: update buildkit to v0.16.0-rc1 b5ec31f090 vendor: github.com/opencontainers/runc v1.1.14 2189aa2426 update runc binary to 1.1.14 4e0d1dfc17 docs/api: add documentation for API v1.47 d000f12fcc hack/make/.binary: enable pie mode on windows/arm64 28dc2f6fac Increase test handler sleep, replace deprecated assert c7f8557310 c8d/pull: Same error message for non-matching platform f5108e9c6b golangci-lint: temporarily disable G115: integer overflow conversion 9b11bb507b update golangci-lint to v1.60.2 3df59c9dcf update to go1.22.6 4cd5c2b643 hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5 e853c093bf hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5 bb899c654a api/types: move RequestPrivilegeFunc to api/types/registry 88b118688e man: create parent directories in install recipe 9bbe5a50dd Dockerfile: update registry to v3.0.0-beta.1 f4e82e2fb0 c8d/list: Don't exclude non-container images d6446d81d8 vendor.mod: golang.org/x/net v0.28.0, etc. 65fdd363a0 vendor.mod: golang.org/x/time v0.6.0 4bfdfd6f72 vendor.mod: golang.org/x/sys v0.24.0 78d0ef5e87 vendor.mod: golang.org/x/sync v0.8.0 492fe40052 vendor.mod: golang.org/x/mod v0.20.0 d7ff6b5085 vendor.mod: drop direct dependency on golang.org/x/exp 8e580efb73 portallocator: un-export PortAllocator.Begin, PortAllocator.End fb1ae4bdb7 portallocator: RequestPortsInRange: validate range once 05d784d6da portallocator: make newPortMap a regular constructor c00f6281d9 portallocator: RequestPort: skip RequestPortInRange as intermediate 78d88d06dc portallocator: use net.IPv4zero for defaultIP, and make it a property 630a47177b portallocator: use new instance in tests 1897a21d60 portallocator: ReleaseAll: remove unused error-return 2a2176f317 portallocator: RequestPortInRange: fix doc-link in godoc a88efd7359 vendor: github.com/containerd/containerd v1.7.21 de4fc1c927 Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only) 1ad5b5abb2 daemon: fix non-constant format string in call (govet) 005b488506 api/types: fix non-constant format string in call (govet) 0fd3a53c12 api/server/router: fix non-constant format string in call (govet) 4a93233b88 container/stream: fix non-constant format string in call (govet) 068c1bf3be libnetwork/drivers/bridge: fix non-constant format string in call (govet) f434cdd14a volume/testutils: fix non-constant format string in call (govet) 81a1ca0217 builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet) b56c58a860 layer: ignore G602: slice index out of range (gosec) c308bd3e0e internal/cleanups: fix non-constant format string in call (govet) 7b60a7047d libnetwork/cnmallocator: fix non-constant format string in call (govet) 06bfe8bab3 cmd/dockerd: fix non-constant format string in call (govet) 6008c42ca2 libnetwork: fix non-constant format string in call (govet) b79a4696ee integration-cli: fix non-constant format string in call (govet) 6bbacbec26 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors 3ca38f0b5e integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors 2b7a687554 integration-cli: use erors.New() instead of fmt.Errorf c7b36f8953 libnetwork: TestDNSOptions: remove redundant skip check 6bd7835cb6 integration-cli: remove redundant platform checks 0afe684685 c8d/pull: Replace pointer to interface with interface db40a6132b c8d/pull: Keep the replaced image as dangling 6ebe6a7353 c8d/load: Only unpack host platform images 728894b7d0 c8d/load: Don't fail whole operation if unpack failed 0db71bb629 vendor: dario.cat/mergo v1.0.1 2c498c6a74 vendor: github.com/vishvananda/netlink v1.3.0 6d0a5e31d7 vendor: github.com/vishvananda/netlink v1.2.1 55f693e7b7 integration/TestAPIImagesListManifests: Check `Containers` 29a2f6d339 c8d/list: Update benchmark to also have containers a5d75f6d27 c8d/list: Fix race condition when traversing containers 2f0180934d vendor: tags.cncf.io/container-device-interface v0.8.0 fe307b5dab libnetwork: resolvconf: remove dependency on errdefs afdfc04e10 libnetwork: resolvconf: remove var that shadowed import 6d94122217 logger/journald: plumb contexts into reader 9b6ba18fc9 logfile: Close reader when caller cancels c4ba1f4718 Dockerfile: update xx to v1.5.0 abcb9e972b libcontainerd/supervisor: set log-level through the config-file edfde78355 man: support bringing your own go-md2man 05d7008419 man: build dockerd man pages using make 1804f0c911 integration/container: rename var that collided with import 62bcc6ef50 libcontainerd/supervisor: consolidate platform-specific defaults f49fad75eb vendor.mod: github.com/microsoft/hcsshim v0.12.5 b93cf37dcd c8d/list: Don't require `opts.ContainerCount` for manifest containers cd148d39d9 feat(stream): log the event when stream copy failed c459986399 vendor: update buildkit to v0.15.2 6bb6befc37 c8d: Rename readConfig to readJSON 495fab8e66 c8d/list: Add test for total and content size 469c2ef3ec c8d/list: Fix `Total` size calculation e77e543b58 api/types/registry: fix godoc, and add some doc-links 218c08b283 plugin: fix deprecation comments 771377f9fa Test ipvlan IPv6-only 390713607f Allow ipvlan containers with no address b95f8e7799 Fix some ipvlan error types for the API 660e8118a4 Allow no-IPv4 on an ipvlan network 8427de3bac Test macvlan IPv6-only d599cc5842 Allow macvlan containers with no address f57e0dc2ff Fix some macvlan error types for the API a7a5de676d Allow no-IPv4 on a macvlan network 496b457ad8 Allow --ip-range ending on a 64-bit boundary 9c6d30481d remove leftovers for building docker-proxy on Windows 3cd28504de govulncheck to report known vulnerabilities a308f12ed8 add Austin Vazquez (austinvazquez) to curators 7b0ef10a9a migrate to github.com/moby/sys/userns 8411ecb5e3 Makefile: Add BIND_GIT variable 050afe1e1a api/list: Expose manifests f8b638b98f c8d/list: Use ReadConfig helper 85e9102dc9 api: Bump default version to 1.47 efb3c50799 swagger: Disable ImageSummary model generation b24c2e95e5 update to go1.21.13 925b484a40 No fallback nameservers for internal resolver d29767431c Use host netns for host's ext-dns servers 344039b9ae Populate DNS records for IPv6-only endpoints b4cee5c3ee Removed all mentions of "please" from docs and messages f1ec84314d docs: add default-network-opt daemon option 23812190c3 docs: remove devicemapper 690d166632 man/dockerd.8: assorted formatting fixes 374b779dd1 man/dockerd.8: escape asterisks and underscores 386d0c0fbc docs: update dockerd usage output for new proxy-options 54971ac807 Fix styling of arguments a8b8f9b288 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 68e9223289 docs: remove documentation about deprecated cluster-store 6c702167bf Document `--validate` daemon option af45195a21 Update man-page source MarkDown to work with go-md2man v2 562a6d2b13 docs: update for cgroup v2 and rootless 7cf2132655 docker run: specify cgroup namespace mode with --cgroupns 1cbcd5d47a daemon: document --max-download-attempts option 3cfa74724c Update document links and title. 462f38bd8b Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054 13ff896b38 Update docs and completion-scripts for deprecated features f3c3b05b50 Added docs for dockerd 20f8455562 fix a number of minor typos c23d4b017a Introduce/document new IPC modes 25baee8ab9 docs: add documentation for dm.libdm_log_level 7d3f09a9c3 Restore dockerd man page ea914a66a2 Use retErr in Network.ipamAllocate cdea750966 Tell RootlessKit about port mappings when --userland-proxy=false b3fabedecc Create docker-proxy TCP/UDP listener sockets in the daemon dac7ffa340 Remove rootlesskit-docker-proxy f1e0746c08 Tell RootlessKit about docker-proxy port mappings 384ca56d90 Fix error type used for ProgramExternalConnectivity 7a8663c9ea cmd/docker-proxy: drop FrontendAddr() method 88fb0c9fec cmd/docker-proxy: drop unused BackendAddr() method ba2f3c0a98 cmd/docker-proxy: pass open listener to proxy impl e0c7a839a8 Only build docker-proxy for Linux ee766ae7b1 c8d: Wrap matchRequestedOrDefault result with a platform 842c5c584e c8d/image: Add `matchRequestedOrDefault` 6617cdc66b daemon/c8d: Fill wanted platform in GetImageManifest 427b111943 c8d/history: Unmarshal only a subset of ImageConfig b9d04c07c4 c8d: Simplify `presentImages` into `getBestPresentImageManifest` 23d565cae3 c8d: Improve error message for platform not found e73c2a05b2 daemon/c8d: Simplify `presentImages` signature af84ddec13 vendor: github.com/containerd/nydus-snapshotter v0.14.0 1e5c0c4d77 vendor: github.com/containerd/nydus-snapshotter v0.13.14 dfe36fa226 touch-up security policy 3b1341972b Only assign an IPv4 address if required 15e5f6868a Don't auto-allocate IPv4 IPAM if !enableIPv4 c0a6145f6d Enable IPv4 in the unit tests that will need it. b42f4b96aa Check for an IPv6 gateway before connecting to docker_gwbridge 034a5a8986 Reject swarm n/w creation with IPv4 disabled. c91dc7e6dc Reject Windows network creation with IPv4 disabled. a86a9e3aa4 API 1.46: end per-interface sysctl migration in major release 17adc1478b Migrate per-endpoint sysctls until 28.0.0 d44f869a2d vendor: google.golang.org/grpc v1.62.0 716ec490db vendor: golang.org/x/time v0.5.0 ac145a82fd api/types: NewHijackedResponse: fix typo in GoDoc 80822715cd plugin: fix typos in GoDoc 1f542d5d6c Set EnableIPv4 for predefined networks 903daa4dc4 Add flag 'enableIPv4' to libnetwork.Network d4d8611164 Added API create/inspect option EnableIPv4 c7dec1c67a docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46) 66b5b8bfa8 api/swagger: fix x-nullable for SystemInfo.Containerd 3279b4f8f4 hack/make: suppress "not mounted" message a23dcf4798 Bump API version to 1.47 403f9dbc42 project: update supported release branches 96762a28c7 libcontainerd/supervisor: remove remnants of adjusting oom-score 2a71815b83 daemon: remove unused import 2b5ffa0b63 gha: set permissions to read-only by default 7a92f21445 daemon: isPermissibleC8dRuntimeName: use local utility to reduce c8d deps 2847c4b7fe libnetwork/networkdb: switch to go-immutable-radix v2 fca57ac32f Split Linux/bridge and Windows/nat integration tests ef8e2fe282 Use retErr in Endpoint.sbJoin 58808e7748 Remove code to update Network.enableIPv6 if false 8f1989556a Trivial tidy-up of Endpoint.assignAddress() 6fe26e0629 Add IPv6 to the null IPAM driver dcf922e266 daemon: openContainerFS: log cleanup errors aa60f7891b daemon: openContainerFS: rename output var 3539fef440 daemon: setupMounts: rename var that shadowed import a19c2ccc7b daemon: rename "mounts" type to reduce shadowing 39c79e08e4 daemon: move sortMounts to a platform-agnostic file cdbfae1d3e api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize cd11843df8 images: Extract ImageInspect from GetImage 1baf8f9e60 vendor: update buildkit to v0.15.1 2ce811e632 migrate to github.com/moby/sys/user/userns 91dfc326cf vendor: github.com/moby/sys/user v0.2.0 1e2ccf8046 vendor: github.com/gofrs/flock v0.12.1 077b32ac4e vendor: golang.org/x/sys v0.22.0 4c97ff777d Clean up networks in 'integration/network' tests e2237240f5 dockerd-rootless-setuptool.sh: move RootlessKit smoke test a3efa3026b contrib/check-config.sh: remove special case for userns on CentOS/RHEL 7 6d0b508699 daemon: remove setMayDetachMounts (set may_detach_mounts=1 on startup) ae96ce866f remove support for setting CORS headers (deprecated) dbf6873f45 Logfile: Add tracing spans 1b46faf233 Logfile: skip files that are corrupted 77f2d90e27 Refactor logfile reads b37c8a03c0 Fix time comparison in sharedtemp implementation 21fd5a3f30 vendor: github.com/moby/sys/sequential v0.6.0 e0b98a3222 gha: check-pr-branch: fix branch check regression fbbda057ac update containerd binary to v1.7.20 f460110ef5 gha: check-pr-branch: verify major version only 6a6b49f2de vendor: github.com/moby/sys/symlink v0.3.0 68636d56fc vendor: github.com/moby/sys/signal v0.7.1 44b266ab59 vendor: github.com/moby/sys/mount v0.3.4 dc4a12874e vendor: github.com/moby/sys/mountinfo v0.7.2 55a5f3fcaa vendor: github.com/containerd/containerd v1.7.20 a42f7fd717 Dockerfile: update compose to v2.29.0 97b51c6b72 Dockerfile: update buildx to v0.16.1 b37c983d31 README: replace obsolete Docker EE mention 508939821b daemon/containerd: rm use of regexp b66d4b567a image/v1: rm regexp use 1c0dc8a94f layer: rm regexp use 499c842c52 hack: explicitly control enabling the journald logging driver 5282cb25d0 If url includes scheme, urlPath will drop hostname, which would not match the auth check 2ac8a479c5 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com> 0fa71a4cfc vendor: cloud.google.com/go/logging v1.9.0 eafad2cb86 vendor: golang.org/x/oauth2 v0.21.0 9b782b8ff7 vendor: cloud.google.com/go/compute/metadata v0.3.0 68bd630830 vendor: update buildkit to v0.15.0 f649fd0c97 Fix API version in TestSetInterfaceSysctl 7f04a603f6 docs/api: Add missing ` 89781912c1 vendor: update buildkit to v0.15.0-rc2 8be292a7bb By-default, don't create an iptables rule to checksum SCTP 1787c364e0 vendor: update buildkit to v0.15.0-rc1 688301caf4 daemon/graphdriver: remove Capabilities, CapabilityDriver 185b1e3d69 Add lint rule to forbid old-style atomic ops 5e64a7a003 volume/service: switch to Go 1.19 atomics 1c102140f8 libnetwork: switch to Go 1.19 atomics 46133bdb8e libnetwork/diagnostic: drop unsound use of atomics 5044778433 distribution: switch to Go 1.19 atomics 2ab618696a daemon/images: switch to Go 1.19 atomics 30d740ada0 daemon/logger/ring: switch to Go 1.19 atomics 7ef0c7acbe d/logger/loggerutils: switch to Go 1.19 atomics e612990994 daemon/logger/journald: switch to Go 1.19 atomics 78893cdc05 daemon/logger/gcplogs: switch to Go 1.19 atomics 508f51044d daemon/containerd: switch to Go 1.19 atomics 71a299ff6a daemon: switch to Go 1.19 atomics 206445fa4f rootless: add `Requires=dbus.socket` 4776e6dd60 Remove IPv6 bridge RouteAdd() that always fails 066b7fa83c vendor: golang.org/x/net v0.25.0 7721408db7 vendor: golang.org/x/crypto v0.23.0 f43436e6b8 vendor: golang.org/x/text v0.15.0 342ce515ab vendor: golang.org/x/sys v0.21.0 2e58a29023 vendor: github.com/klauspost/compress v1.17.9 fb18966aa5 api/types/container: InspectResponse: keep old name for embedded type 837289ba62 update to go1.21.12 [part 2] 4d1d7c3ebe update to go1.21.12 398e15b7de update containerd binary to v1.7.19 d0aa3eaccf Migrate to github.com/containerd/platforms module 8983957ac5 vendor: github.com/containerd/containerd v1.7.19 73979f3f04 daemon/logger/journald: add //nolint:unused for readSyncTimeout ef356c53ba api/types: remove deprecated ContainerNode, ContainerJSONBase.Node 5b9ed8081b api/types: remove deprecated ImageLoadResponse d3defe9140 api/types: remove deprecated ImageImportSource 6cdb123b6f api/types: remove deprecated ImageSearchOptions 67b7b15674 api/types: remove deprecated EventsOptions 3cbc166d2e api/types: remove deprecated container stats types ec5cede0a2 api/types: remove deprecated ContainerStats 4ffe497ba4 api/types: remove deprecated CopyToContainerOptions 345e31ab96 api/types: remove deprecated ContainerPathStat 2bceb34717 api/types: remove deprecated ContainersPruneReport 0e64c9e93b api/types: remove deprecated ContainerExecInspect 6f0caec226 api/types: remove deprecated ExecStartCheck 13fbd394ee api/types: remove deprecated ExecConfig 665eef54db api/types: remove deprecated NetworksPruneReport d2256faa0e api/types: remove deprecated NetworkResource ffdd2de674 api/types: remove deprecated EndpointResource f0f2b8f7cb api/types: remove deprecated NetworkDisconnect cf9d9ff50d api/types: remove deprecated NetworkConnect 39c7b5f3e3 api/types: remove deprecated NetworkInspectOptions 64583771f0 api/types: remove deprecated NetworkCreateResponse c99e0bc8ae api/types: remove deprecated NetworkListOptions 48f147e8d3 api/types: remove deprecated NetworkCreate ff1f1c58d5 api/types: remove deprecated NetworkCreateRequest 4117a9308d api/types: remove deprecated VolumesPruneReport e0156f0f16 api/types: remove deprecated ImagesPruneReport 1abc8f6158 api/types: move container-inspect types to api/types/container 05b0e653dd api/types: move Container to api/types/container 84ffc644ef api/types: move ContainerState to api/types/image 7053007f71 api/types: move ImageInspect and RootFS to api/types/image da039ca918 api/types: move GraphDriverData to api/types/storage e12b7493b9 api/types: move Port to api/types/container 5517322cf9 api/types: move MountPoint to api/types/container c130ce1f5d api/types: move container Health types to api/types/container df22a511cb api/types: move container-networksettings types to api/types/container 53bc396ef4 c8d/build: Log `image tag` event when image was built with Buildkit 1506bbcfe8 builder-next: Add ImageNamedByBuildkit callback bce76d486e builder-next: Don't return error from exported callback e4d792a06d api/types/system: remove Info.ExecutionDriver 0f3273e71a daemon/graphdriver: move RefCounter to an internal package efdaca2792 pkg/rootless/specconv: move to internal b7d26f2f8f pkg/dmesg: remove deprecated package 3a3bb1cb50 pkg/directory: deprecate, and move to internal 80900bdbcd pkg/directory: fix comment, and remove import comments e55897977c daemon/graphdriver: simplify Checker, remove NewFsChecker, NewDefaultChecker 554db8f113 daemon/internal/fstype: make FsMagic values not platform-dependent 49f6e004f1 daemon/graphdriver: move FsMagic utilities to an internal package 09f62a8a61 runconfig/opts: remove deprecated ConvertKVStringsToMap 4a30231d05 runconfig: remove deprecated IsPreDefinedNetwork ed712ad0b9 runconfig: remove deprecated DefaultDaemonNetworkMode 13984ef185 runconfig: remove deprecated SetDefaultNetModeIfBlank 6e2b6399d7 runconfig: remove deprecated ContainerConfigWrapper d80a3f2e48 pkg/capabilities move to daemon/internal 625c795785 errdefs: FromStatusCode(): use early returns 81be279c6b daemon/logger, volume/drivers: remove redundant import-aliases f2970e5358 pkg/containerfs: move to internal a3e6ce95c4 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper e2ae6907c6 pkg/containerfs: remove CleanScopedPath and make it internal fa150ca759 cleanup: Remove unnecessary return value a2fe103f0d vendor: github.com/microsoft/hcsshim v0.11.7 dfbcddb9f5 Fix incorrect validation of port mapping 4de54ee14c Fix duplicate subnet allocations 6521057bb2 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ 969993a729 pkg/archive: createTarFile: consistently use the same value for userns 379ce56cd8 pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors af85e47343 pkg/archive: getWhiteoutConverter: don't error with userns enabled 080a8e1b6b libcontainerd: gofumpt 56fa45773f pkg/plugins: gofumpt 0e2d40c24a pkg/archive: gofumpt 84e43da752 libnetwork: gofumpt bb1b766ddb layer: gofumpt 07469b4509 internal: gofumpt 8e50a96a78 integration: gofumpt c3ac7fee26 integration-cli: gofumpt e765dd90ee daemon: gofumpt 181101c4a8 daemon/containerd: gofumpt 46b0102da4 daemon/config: gofumpt 4a89963f1e builder: gofumpt 8768145519 api/types: gofumpt 92346bcec6 api/server: gofumpt 6ada1cff02 fix some gofmt issues reported by goreportcard 84cabde357 daemon/graphdriver: deprecate GetDriver(), and remove its use b7896056c1 daemon/graphdriver: New(): update GoDoc 25d12b54d3 daemon/graphdriver: combine GetDriver and getBuiltinDriver 3928165cf7 Dockerfile: update docker CLI to v27.0.2 555dac5e14 daemon/graphdriver: remove support for external graphdriver plugins bc4991e443 layer: rename vars that shadowed imports 0ed172b700 daemon/graphdriver: rename vars that shadowed imports bbced07f96 builder/builder-next: applySourcePolicies: remove redundant check and vars 790035f754 Dockerfile: update compose to v2.28.1 95fae036ae update golangci-lint to v1.59.1 d4160d5aa7 pkg/archive: reformat code to make #nosec comment work again 04bf0e3d69 builder/remotecontext: reformat code to make #nosec comment work again 1fc9236119 api/types: deprecate ContainerJSONBase.Node, ContainerNode ca396dfaaa awslogs: Prevent close from being blocked on log 9893520c62 libnetwork: Mark flaky tests d0d8d5d97d hack/unit: Rerun failed flaky libnetwork tests a52aab8598 project,vendor.mod: document more clearly that we are not a Go module 1e28299f77 project: document currently known packagers f502f49e49 project: document modern branch and tag practices Bumping docker-cli to version v28.0.1, which comprises the following commits: d75f8d83d Add detailed descriptions for --ulimit options in docker run documentation 75595836f vendor: github.com/go-jose/go-jose/v4 v4.0.5 4e7497e9c Update dockerd command line ref, default bridge opts be669099c Update dockerd command line ref, changes in 28.0 427c1361c gha: add docker 28 to test matrix aad2ae50e docs: network ls add heading and anchor for "--no-trunc" 8a1b096e7 docs: fix missing anchors in swarm reference pages c99d3312e docs: fix broken anchor-link in "container restart" reference 0cff34098 cmd/docker: do not print error status on exec/run 8f5573857 completion: add completion for docker service flags 768d10767 completion: add completion for docker node flags d5e6e2ec6 completion: add completion for node names 7e71782ba cli/command/context: fix error-handling of skip-tls-verify 762d59359 completion: use service names, and support DOCKER_COMPLETION_SHOW_SERVICE_IDS 33f327a98 vendor: github.com/docker/docker v28.0.0-dev (af898abe4466) f977b923c Fix missing link from Configure node healthcheck heading f53cee5dd vendor: github.com/docker/docker v28.0.0-rc.3 fe349e6a6 vendor: github.com/docker/docker 00ab386b5a2e (master, v28.0.0-rc.3) 136901961 vendor: github.com/docker/docker v28.0.0-rc.2 a8affefee golangci-lint: replace deprecated `tenv` linter in favor of `usetesting` 1c8243cc9 golangci-lint: fix invalid nakedret config, disallow for any func length a5020ea16 cli/command/container: don't use naked returns (nakedret) e569b9f74 cli/internal/oauth: don't use naked returns (nakedret) 3e9fa43ef cli/command/trust: fix "usetesting" linting errors aca0bd775 cli/command/trust: fix "usetesting" linting errors b2f3c1249 Dockerfile: update golangci-lint to v1.64.5 2b169c1ab golangci-lint: enable revive "line-length-limit" linter a67c65657 golangci-lint: enable revive "unused-receiver" rule 71c40dfa7 golangci-lint: sort revive rules a35b899df cmd/docker: fix "unused-receiver" linting 1a4491f8c cli/command/stack: fix "unused-receiver" linting 994e1b7ca cli/command/service: fix "unused-receiver" linting 5ef673bb1 cli/command/system: fix "unused-receiver" linting e71380eb5 cli/command/container: fix "unused-receiver" linting 4827fdef9 cli/command/trust: fix "unused-receiver" linting 3e44cc4d0 cli/command/image: fix "unused-receiver", "line-length-limit" linting e2f28fac4 cli/command/registry: fix "unused-receiver" linting a54d356a7 cli/command/swarm: fix "unused-receiver" linting 25e6b2da0 cli/command/formatter: fix "unused-receiver" linting 450768c31 cli-plugins/manager: fix "unused-receiver" linting e5f3cc14c internal/test: fix "unused-receiver" linting 1b3718f45 cli/command: fix "unused-receiver" linting d27f6a61a cli/registry: fix "unused-receiver" linting 72b32c69c internal/test/notary: fix "unused-receiver" linting ba3f4fb41 cli/internal/oauth/manager: fix "unused-receiver" linting f0f19c6d4 cli/trust: fix "unused-receiver" linting c8bd0a7e5 cli/manifest: fix "unused-receiver" linting 20b4ab366 cli/compose: fix "unused-receiver" linting 1e7add9f4 cli/internal/oauth/api: fix "unused-receiver" linting 9b62e5740 cli/config/configfile: fix "unused-receiver" linting f79193c22 opts: fix "unused-receiver", line-length-limit linting d0c3380ce cli/connhelper/commandconn: fix "unused-receiver" linting fdc665820 cli/config/credentials: fix "unused-receiver" linting 88b2e78e0 internal/tui: fix "unused-receiver" linting 20c15cee9 cli/compose/loader: shorten skip-comment to please the linters cac88ca34 cli/command: wrap some long lines (revive) eef4127de cli/internal/oauth/manager: ignore line-length-limit d8e76bc33 cli: define const for magic value 9fda9134a cli/command/service/progress: define const for magic value 3825d3792 cli/command: define some consts for repeated values 2f65cf7d1 cli/command: fix some unused-receiver linting a368e3eb5 cmd/docker: fix unused-receiver (revive) add32e4b5 cli/compose: Handle Volume Subpath 4cc2dce80 cli/compose: Fix Image Subpath e868f0f58 cli/command/container/opts_test: Fix entrypoint parsing logic c2ba77de4 vendor: github.com/docker/docker 57d4d23825f4 (master, v28.0.0-rc.2) 1d3eb6f95 vendor: github.com/docker/docker 5cc3f1dab895 (master, v28.0.0-rc.2) 591fcb273 vendor: golang.org/x/sys v0.29.0 1edc4e07d gha: Mirror PR template and validate PR workflow from moby a656dfd40 Restrict completion for some commands with a limit paramter for ImageNames 04b1b4e08 Add image mount options c6a7f9a64 vendor: github.com/docker/docker b570831cc3a3 (master, v28.0.0-rc.2) 018bf1b23 vendor: google.golang.org/grpc v1.69.4 558ebd592 vendor: github.com/spf13/pflag v1.0.6, remove local IPNetSliceVar fork 2c17edf80 cli/connhelper/commandcon.New: pass context with WithoutCancel 61a3b4bd5 Remove preceding white space from cobra help template 1acf32cdc Dockerfile: dev-container: update buildx v0.20.1 bb74513ef Dockerfile.dev: bump github.com/josephspurrier/goversioninfo to v1.4.1 7b3f264a6 Dockerfile.dev: bump mvdan.cc/gofumpt to v0.7.0 aecc31039 Dockerfile: bump gotest.tools/gotestsum v1.12.0 e1a9d1cd3 Dockerfile: update golangci-lint to v1.63.4 df8c19d8f vendor: gotest.tools/v3 v3.5.2 3c0d703ac vendor: github.com/docker/docker/v28.0.0-rc.1 2815d2337 add //go:build directives to prevent downgrading to go1.16 language 01da8a582 vendor: github.com/docker/docker 6c3797923dcb (master, v28.0-dev) 76e0088b5 minor cleanup 85a77af59 Don't print "context canceled" if user terminated 7e83ff773 bump version to v28.0.0-dev 6d7afd48a login: improve text on already authenticated and on OAuth login 1d9d349c1 update to go1.23.6 81da375c4 cli/command/service: runScale: use errors.Join, and cleanup 09b513ecf cli/command/service: runRollback: remove intermediate vars aa96cb7aa cli/command/volume: use errors.Join be985bd28 cli/command/stack/swarm: use errors.Join f1193effc cli/command/service: use errors.Join f9e433556 cli/command/secret: use errors.Join 2a9fd4a93 cli/command/node: use errors.Join f8729c6da cli/command/manifest: use errors.Join 1fd9d0dd3 cli/command/manifest: pass manifest-store and handle context f431f6156 cli/command/inspect: use errors.Join 7147e85f6 cli/command/image: use errors.Join 2b9a4d5f4 cli/command/context: use errors.Join 150f27b68 cli/command/container: use errors.Join 791e06b43 cli/command/config: RunConfigRemove: use errors.Join 632f179e8 cli/command/image: minor cleanups e81d76ffe cli/command/container: minor cleanups deaa60118 cli/command/config: minor cleanups c950d48f7 image/tree: Chips to represent "in use" c51be7776 cmd/docker: add cause to user-terminated `context.Context` 8169a5142 jsonstream: Display: rename var that shadowed type a4288003b service/progress: ServiceProgress: avoid fuzzy matching service ID in loop e88b1939f service/progress: newReplicatedJobProgressUpdater: slight cleanup dea59eabb cli/command/stack/swarm: waitOnServices remove redundant check for multi-error 37b25f226 cli/command/plugins: runRemove: fix incorrect use of errors.Join 007e88ec3 TestCheckpointCreateWithOptions check both "keep-running=true/false" 31b819828 cli/command/volume: TestVolumeCreateClusterOpts: minor fixes and refactor 5b8c08d19 cli/command/volume: TestVolumeCreateCluster: minor fixes and refactor a8265e72b cli/command/volume: TestVolumeCreateWithFlags: minor fixes 8b5e5539e cli/command/volume: TestVolumeCreateWithName: minor fixes and improvements 2e266001c cli/command/volume: TestVolumeCreateErrors: assert unhandled errors 987da0957 cli/command/volume: remove example and var for long description 13ef82974 cli/flags: suppress some errors dc5a4501a cli/command: minor cleanups: use Println, suppress errors cd6d902df cli/command/inspect: remove additional newline from log 10f5b3f73 cli/command/volumes: minor cleanups: use Println, rename vars 299aae041 cli/command/trust: minor cleanups: use Println, rename vars 5cfc89c1c cli/command/system: minor cleanups: use Println, rename vars 8c5e85d4c cli/command/swarm: minor cleanups: use Println, rename vars 925b8fe34 cli/command/stack: minor cleanups: use Println, rename vars aa74f931d cli/command/service: minor cleanups: use Println, rename vars 016dbef44 cli/command/registry: minor cleanups: use Println, rename vars 53aed6119 cli/command/plugin: minor cleanups: use Println, rename vars 35e74d58e cli/command/node: minor cleanups: use Println, rename vars 886f2295c cli/command/network: minor cleanups: use Println, rename vars 5d3bdf8ac cli/command/manifest: minor cleanups: use Println, rename vars c8f27b027 cli/command/image: minor cleanups: use Println, rename vars a0ca41e6f cli/command/formatter: suppress some errors 82e2efbbf cli/command/context: minor cleanups c462eaee1 cli/command/container: minor cleanups: use Println 8650ffef3 cli/command/checkpoint: minor cleanups: use Println, rename vars b10b79e6f cli-plugins: minor cleanups: use Println 2e26ce145 e2e/testutils: remove uses of pkg/errors in tests 4de5e9212 internal/test: remove uses of pkg/errors in tests c55b39a2e cli/config/credentials: remove uses of pkg/errors in tests 832f5fa2c cli/compose/convert: remove uses of pkg/errors in tests 45d81f849 cli/command: remove uses of pkg/errors in tests a85a94f46 cli/command/system: remove uses of pkg/errors in tests 694d24800 cli/command/swarm: remove uses of pkg/errors in tests 8b09ee1e1 cli/command/stack: remove uses of pkg/errors in tests ec5ae0c2d cli/command/secret: remove uses of pkg/errors in tests c50068f7e cli/command/plugin: remove uses of pkg/errors in tests 2b02e05f9 cli/command/node: remove uses of pkg/errors in tests 38f61539e cli/command/network: remove uses of pkg/errors in tests d6c26471d cli/command/manifest: remove uses of pkg/errors in tests f29fdd309 cli/command/image: remove uses of pkg/errors in tests d30c894af cli/command/idresolver: remove uses of pkg/errors in tests 5a99ea9ad cli/command/container: remove uses of pkg/errors in tests 0d913efe8 cli/command/config: remove uses of pkg/errors in tests 957be84a3 cli/command/checkpoint: remove uses of pkg/errors in tests 10aca7dd5 cli/command/volume: remove uses of pkg/errors in tests a87cb974f remove dockerd man-page (moved back to moby repository) 6ab9b92aa Makefile: add "shell-completion" target 0760e8513 Dockerfile: update to alpine 3.21 2c35778a6 Allow '--link' with '--network bridge' 1546f023f Dockerfile: update compose to v2.32.4 7b0724270 Dockerfile: update buildx to v0.20.0 91adb70d6 pkg/command: wrap `jsonmessage.DisplayJSONMessagesStream` with go context 81b0bb58b gha: Adjust release branches 3c0691146 update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) 26010e4c3 image/tree: Print longest names first and use full width f906139fc cli/tree: Use single character triple dot 4c2fece0c cmd/docker: enable cobra completion descriptions 48dbdc6f2 fix(dockerfiles): Update CMD instruction in 'Dockerfile.dev' to use exec form instead of shell form 58bf0f184 switch to gopkg.in/yaml.v3 9abd0ebdf cli/command: update semconv to 1.26.0 2f42b3272 vendor: otel v0.56.0 / v1.31.0 3d9b86116 vendor: github.com/mattn/go-runewidth v0.0.16 aa540679e vendor: github.com/containerd/platforms v1.0.0-rc.1 d3ca99585 vendor: github.com/creack/pty v1.1.24 b412f7199 vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 324edc3d5d38 7244f7d42 update cli-docs-tool to v0.9.0 6f3ba987b vendor: github.com/docker/cli-docs-tool v0.9.0 97a14c456 update go-md2man to v2.0.5 acbdad955 completion: replace fluentd-async-connect with fluentd-async 3da5f5893 docs: mark logger opt 'fluentd-async-connect' as removed 0df55307c vendor: github.com/docker/docker 69687190936d (master, v28.0-dev) cc571902b ci: update bake-action to v6 987befaea gha/build: Publish bin image for release branches 216674c3e vendor: github.com/docker/docker 50212d215ba7 (master, v28.0-dev) bf2dae22d cli/command/plugin: runCreate: minor cleanup a289f11ac vendor: github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554 7e8f94903 docs, man: remove --allow-nondistributable-artifacts flag 760326694 contrib/completion: remove --allow-nondistributable-artifacts flag 2334df110 Deprecate configuration for pushing non-distributable artifacts 2fc32c707 vendor: github.com/moby/term v0.5.2 e1a0c377b vendor: github.com/Azure/go-ansiterm faa5f7b0171c f42c0ccd0 contrib/completion: remove deprecated --api-cors-header 2db88599f contrib/completion: remove --oom-score-adj daemon flag eb5c507cd docs: dockerd: --oom-score-adj flag 7b37f30da Use io.copy for build context compression 7b7a4c020 docs, man: remove confusing example for "--isolation" 25f02bc04 vendor: github.com/docker/docker 6f6c3b921180 (master, v28.0.0-dev) 8c0cb3051 Fix cp test to separate source and destination c8c47b1dd golangci-lint: depguard: prevent uses of pkg/system 76ec0ea2e vendor: github.com/docker/docker a72026acbbdf (master, v28.0.0-dev) a8f83d5d9 TestRunCopyFromContainerToFilesystem: use Tar without options 0c04dc05b golangci-lint: sync some depguard settings with moby/moby cc65127cb vendor: github.com/docker/docker ad6929339acd (master, v28.0.0-dev) 6f47bce41 vendor: golang.org/x/net v0.33.0 83156e662 vendor: golang.org/x/net v0.32.0 450f6b995 vendor: golang.org/x/crypto v0.31.0 b74302eb5 vendor: golang.org/x/text v0.21.0 cb2e35286 vendor: golang.org/x/sync v0.10.0 e56b665d8 vendor: golang.org/x/sys v0.28.0 1eda49878 cli/command/container: use local copy of pkg/system.IsAbs ffe0354c2 cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests 73ff81b65 cli/command/system: TestEventsFormat: set cmd.Args to prevent test-failures 55e404e7a cli/command/system: remove netfilter warnings from tests eaa8b5716 update go-md2man to v2.0.5 b8fd20517 Makefile: use go1.22 semantics for gofumpt 6a2cde6c7 Add option '--ipv4' 5c896c95d Docs: emphasise that some options that are for docker0 a5353e55d Docs: include --fixed-cidr-v6 and --bip6 docker0 options 1e51ae7af update xx to v1.6.1 for compatibility with alpine 3.21 b39f48287 update golangci-lint to v1.62.2 2a5ac8f5a vendor: github.com/docker/docker b249c5ebd214 (master, v28.0.0-dev) afab76501 registry/client: remove uses of APIEndpoint.TrimHostName 7dab597e6 tests: cleanup comment 30c4637f0 run: don't hang if only attaching STDIN 2eb77f4ed vendor: github.com/docker/docker 5d72419486fe (master, v28.0.0-dev) b51a71148 cli/command/system: don't use "non-distributable-artifacts" fields in tests f50dea6c4 vendor: google.golang.org/protobuf v1.35.2 9399483f7 vendor: golang.org/x/net v0.31.0 6751bcc97 vendor: golang.org/x/crypto v0.29.0 d41ab7703 vendor: golang.org/x/term v0.26.0 5972025fa vendor: golang.org/x/text v0.20.0 feb1e2a34 vendor: golang.org/x/sync v0.9.0 4c27c895f vendor: golang.org/x/sys v0.27.0 a1e57ac72 update to go1.23.4 e398d16c0 cli/command/registry: return status only instead of whole response 297afb2a2 cli/command/registry: TestLoginWithCredStoreCreds slight refactor 575e37366 cli/command/registry: rename some vars that collided with imports d4db289eb run, create, connect: add support for gw-priority cf89afb32 cli/command/registry: storeCredentials: accept configfile as arg b5a00d0b0 cli/command/registry: loginWithRegistry: use shallower interface 13f0d4641 cli/command/registry: don't return creds on error a3d9fc494 run: cleanup – remove `errCh` nil check 446f36ce5 run: cleanup – move "detached" early exit earlier 843129882 run: cleanup – use `attached` where applicable aee9eebf3 run: return error code when only STDIN attached ed9fcf31e cli/trust: GetNotaryRepository: remove uses of RepositoryInfo.Class c629eca89 Put --help before --host in the dockerd manpage ea84e8f94 Add --host-gateway to the dockerd manpage cf88ab074 Docs: host-gateway-ip daemon option IPv4+IPv6 ae54c9d97 Add --bip6 to the dockerd manpage 1911dedcf Add --ip-filter-forward-drop 0f058041c docs: fix janky rendering of toc on docs.docker.com fcd94feef cli-plugins: Simplify addPluginCandidatesFromDir 6de3d71ab cli-plugins: Fix searching inaccessible directories 30a73ff19 fix: ctx should cancel image pull on run 1d4a7ae08 tests: cleanup table test names 4a219b1a4 chore: update commit guidelines in CONTRIBUTING.md d41b80faf vendor: github.com/docker/docker e5c2b5e10d68 (master, v28.0.0-dev) 11fbc9993 vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346 b0c0cd5e3 build(deps): bump codecov/codecov-action from 4 to 5 f6599300f vendor: github.com/go-viper/mapstructure/v2 v2.2.1 446d4138e vendor: github.com/moby/sys/capability v0.4.0 07e5ddd05 update golangci-lint to v1.62.0 93a931920 Dockerfile: bump github.com/josephspurrier/goversioninfo to v1.4.1 cb2f95cee Optimise `docker stats` to not require clearing the whole screen d1d535326 cli/command/container: fix missing go:build tag 3dd762124 Dockerfile: update compose to v2.30.3 4242cda82 Dockerfile: update buildx to v0.18.0 7c80e4f93 update go:build tags to use go1.22 06260e68f Handle null completions with a default callback 4525fe37b Add completion for `--volume-driver` db0ed1e21 Add completion for `--cgroupns` 291574927 Add completion for `--uts` 3a2503fa4 Add completion for --log-driver` and --log-opt` 9a9ae231a Add completion for `--security-opt` 5f7c43e5e Add completion for `--detach-keys` 3292afe6e Add completion for `--userns` 5d709a8d9 Add completion for `--ulimit` 2d89339b3 Add completion for `--storage-opt` ac7bde6f6 Add completion for `--pid` e51345424 Add completion for `--link` c555327f0 Add completion for `--ipc` b598ec8cd Add completion for `--attach` 761d76750 Share the container completions 382d4c34a update to go1.23.3 1440f9f8c docs: change link to desktop docs fafaac59f Add --bip6 to dockerd cmdline ref 13754f677 deps: update `go-jose/go-jose` to `v4` 172f34011 docs: update example redis tags from 3.0.x to 7.4.x 4a7b04d41 golangci-lint: set go version to prevent fallback to go1.17 d77760fe5 cli-plugins/manager: remove redundant capturing of loop vars (copyloopvar) 32b40deb4 cli/command/service: remove redundant capturing of loop vars (copyloopvar) 40833fd29 cli/compose/loader: remove redundant capturing of loop vars (copyloopvar) 78a7e1503 cli/command/container: remove redundant capturing of loop vars (copyloopvar) 4a71ce02e cli/command/image: remove redundant capturing of loop vars (copyloopvar) 7d9ea2556 templates: remove redundant capturing of loop vars in tests (copyloopvar) 046ac9714 service: remove redundant capturing of loop vars in tests (copyloopvar) 762b5a8df opts: remove redundant capturing of loop vars in tests (copyloopvar) 417974cdc cmd/docker: remove redundant capturing of loop vars in tests (copyloopvar) bf37e26b3 cli/manifest: remove redundant capturing of loop vars in tests (copyloopvar) 6489a777e e2e: remove redundant capturing of loop vars in tests (copyloopvar) 20de86113 cli/config: remove redundant capturing of loop vars in tests (copyloopvar) 1448cecba cli/compose: remove redundant capturing of loop vars in tests (copyloopvar) 67458f710 cli/command: remove redundant capturing of loop vars in tests (copyloopvar) 0c999fe95 docs: Correct `run` exit code 126 description 5f1311ae8 vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev) 10c5a5792 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 5e40d288c vendor: go.opentelemetry.io/otel v1.28.0 9ba73a1a0 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 f3cf1b421 vendor: go.etcd.io/etcd/raft/v3 v3.5.16 cae19e392 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 074d1028b vendor: update prometheus dependencies 1dbcce205 vendor: google.golang.org/grpc v1.67.1 1bba00994 vendor: google.golang.org/protobuf v1.35.1 e3942d46a vendor: github.com/klauspost/compress v1.17.11 97ff1b7c0 vendor: github.com/go-logr/logr v1.4.2 4c85feb4d vendor: github.com/cenkalti/backoff/v4 v4.3.0 3b48a57b0 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 36e6c4297 vendor: golang.org/x/net v0.30.0 84bfa52a6 vendor: golang.org/x/crypto v0.28.0 7a94f592e vendor: golang.org/x/text v0.19.0 ef197f731 vendor: golang.org/x/term v0.25.0 02b92c699 vendor: golang.org/x/sys v0.26.0 42cda3884 update to go1.23.2 0b16070ae Buffer 'docker stats' text to avoid terminal flickering 9af049c61 bump golangci-lint to v1.61.0 745629bd5 golangci-lint: update comment, and disable "exclude-dirs-use-default" 7451339ab golangci-lint: move gosec excludes to linters-settings 020f3a7ad golangci-lint: enable G204, add #nosec comments instead e1c5180db Add tests for completions that call the API d4f4cf141 Add completion for `events --filter` 59b90305f cli/command/container: parse: remove client-side warning e9ae9f788 docker inspect: add support for swarm configs 3c7806924 cli/config/credentials: add test for save being idempotent 0dd6f7f1b cil/config/credentials: remove newStore() test-utility 5f4b14950 cli: remove deprecated Errors type d96f8b7f9 cli/config: improve error when failing to parse config file d3f6867e4 cli/config/credentials: skip saving config-file if credentials didn't change 6b9083776 cli/command: AddPlatformFlag: suppress unhandled error fb61156b0 cli/command/registry: fix minor linting issues 3f7b156c8 Fix bash completion for `events --filter daemon=` 4b7a1e461 cli/command: PromptUserForCredentials: suppress unhandled errors 378a3d7d3 cli/command: PromptUserForCredentials: use consts for all hints 54e3685bc cli/command: ConfigureAuth: fix deprecation comment 3d8b49523 cli/command: PromptUserForCredentials: print error on terminal restore fail a21a5f424 cli/command: PromptUserForCredentials: always trim password eda78e9cd cli/command: PromptUserForCredentials: move trimming where it's used 581cf36bd cli/command: PromptUserForCredentials: move "post" check for empty name a55cfe5f8 cli/command: PromptUserForCredentials: inline isDefaultRegistry 3a8485085 cli/command: PromptUserForCredentials: remove named output variables d3bafa5f3 cli: deprecate Errors type 71ebbb81a cli/command/plugins: use errors.Join instead of custom cli.Errors 87acf77ae cli/hints: add tests 9b525bc9d vendor: github.com/docker/docker 36a3bd090489 (master, v28.0-dev) 670f81803 cmd/docker: add tests for flag-completions, and refactor 12dcc6e25 templates: add test for HeaderFunctions cbbb91732 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e 2c6b80491 docs: update prose about image tag/name format 50ef0c58c docs: corrected the max events returned 35d7b1a7a cli/command/container: TestWaitExitOrRemoved use subtests 3b38dc67b cli/command/container: set empty args in tests and discard output e1c472a43 completion: add test for VolumeNames 302d73f99 completion: add test for NetworkNames ab418a38d completion: add test for ImageNames f3b4094eb completion: add test for ContainerNames be197da6b completion: add test for NoComplete 51713196c completion: add test for FromList a5ca5b33f completion: add test for FileNames 8f2e5662e completion: add test for EnvVarNames b8cddc63a completion: ContainerNames: don't panic on nil filter a58faf797 README: update pkg.go.dev badge, add OpenSSF scorecard b6d27ff60 vendor: google.golang.org/grpc v1.66.2 200225f53 vendor: google.golang.org/protobuf v1.34.1 9599251d0 vendor: github.com/cespare/xxhash/v2 v2.3.0 ea8aa2a41 vendor: golang.org/x/net v0.29.0 61867feec vendor: golang.org/x/crypto v0.27.0 843ae6d7e vendor: golang.org/x/term v0.24.0 bea4ee658 vendor: golang.org/x/text v0.18.0 a88ee33f7 vendor: golang.org/x/sys v0.25.0 147630a30 Only complete removable containers if --force is not given d085e2445 image/history: Add `--platform` flag b0bb4ba7f image/load: Add `--platform` a20eb45b2 image/save: Add `--platform` 0319795d4 cli/compose: implement the ports validation method 839dbbcf2 cli/command/images: set cmd.Args to prevent test-failures 19eeb1015 cli/command/image: fix TestNewSaveCommandSuccess to actually test d42cf96e1 cli/command/image: add shell completion for --platform flags 8c7f713db cli/command/container: add shell completion for --platform flags ce1aebcc3 cli/command/completion: add Platforms 2f2b16a96 docs: fix inaccurate description of --restart=unless-stopped c70b2165a docs: Link supported Go duration strings 442c38636 command: add tests for container kill, commit, and pause a6ab65948 ci: update to go1.22.8 9ecfe4f5a move parsing key-value files to a separate package 76196dbb0 opts: parseKeyValueFile: cleanup and remove redundant trimming 95e221ef4 opts: remove ErrBadKey as it's not used as a sentinel error b129660dd opts: cleanup ParseEnvFile tests d49e72c0a cli/command/container: add unit tests for completion helpers 462e08219 cli/container: use github.com/moby/sys/capability for completions bd96bdaf1 align "conflicting options" errors for consistency df8b34595 cli/command/container: stop, restart: rename "--time" to "--timeout" 607530348 docs/reference: stop, restart: add flag descriptions 8fca0a1f2 Check that --ip-range is a CIDR address ac502b590 cli/command/container: add unit tests for container stop 16aa99425 cli/command/container: add unit tests for container restart 54a20ce54 docs: fix a typo in run.md b12ac897f vendor: github.com/docker/docker 164cae56ed95 (master, v-next) df52ddcfc Images Tree: Change 'Used' to 'In Use' 17040890e Do not underline image name 46b360b05 command: add tests for container diff and rename 465e87afc docs: fix anchor link to web-based login section 8a3d838a1 docs: use important callout for buildkit vs legacy builder 3e271461e cli/formatter: fix unbracketed IPv6 addrs 91c90a979 Update `VERSION` file to `v27.3.1-dev` ce26ebc0e Dockerfile: update compose to v2.29.7 1355d7e9f telemetry: fix early meterprovider shutdown f46860616 gha: codeql: minor touch-ups and fixes 3472bbc28 command: change drive to lowercase for wsl path e1213edcc gha: update codeql workflow to go1.22.7 b1956f507 telemetry: pass otel errors to the otel handler for shutdown and force flush f7a513cff Dockerfile: update compose to v2.29.4 42ce06aa5 Dockerfile: update buildx to v0.17.1 baceb4b15 docs: dockerd: add documentation for --log-format option a42ca1148 docs/reference: dockerd: add docs for --feature option 9ae514fdc man: dockerd: add description for --log-format option 1a0e32099 docs: dockerd: remove --api-cors-header (deprecated) 9bfd0e1a4 man: remove docs for deprecated --api-cors-header a357db0ab man: dockerd: value is optional for --feature flag fb056d2ce man: fix duplicate word in --feature flag description 610f9157f man: update dockerd man-page to include --feature flag 605c9bf16 docs: Fix --rm=false flag in container_run.md dccb8bfa5 vendor: google.golang.org/grpc v1.62.0 8cdf90cd9 vendor: tags.cncf.io/container-device-interface v0.8.0 a5f15bee7 vendor: golang.org/x/net v0.28.0 b93fc3963 vendor: golang.org/x/crypto v0.26.0 3a63df265 vendor: golang.org/x/text v0.17.0 c6e534193 vendor: golang.org/x/term v0.23.0 5f9fe33b6 vendor: golang.org/x/time v0.6.0 7074e5011 vendor: golang.org/x/sync v0.8.0 958fff82f vendor: golang.org/x/sys v0.24.0 fb264ffc0 vendor: dario.cat/mergo v1.0.1 38c3fef1a command: check for wsl mount path on windows 5b81f0dcb chore: remove duplicated `govet` linter config 88ca4e958 info: stop printing "Expected" commits daea277ee volume/update: require 1 argument/fix panic 0fcaffb7e chore: fix style/lint issues in deprecated.md 45d55961d Fix broken links in CONTRIBUTING.md 0b9d58245 cli/command: fix docstring for ContainerFormat.CreatedAt 4a6ab2b37 fix: binary file line endings 3bf39d25a update to go1.22.7 1b8180a40 vendor.mod: put github.com/pkg/browser in the right group 5ca40e0a3 docs: add front matter title to deprecated.md 071f6f939 docs: rename plugins index file and add linkTitle bbb6e7643 login: handle non-tty scenario consistently 60d045028 oauth/api: drain timer channel on each iteration d7d56599c update to go1.22.6 9e2996796 scripts/build/plugins: don't override CGO_ENABLED set by .variables 81744d7aa copynit: s/WEB BASED/WEB-BASED/ 2f206fff3 docs: update docker login reference 1e6cbbc3f Dockerfile: update xx to v1.5.0 e532eead9 login: use normalized hostname when storing dab9674db Revert "login: normalize `registry-1.docker.io`" c4a55df7c cli: rename args that collided with builtins (predeclard) 9c8789127 e2e/global: fix n-constant format string in call (govet) f101f07a7 cli/command: fix n-constant format string in call (govet) cc1d7b7ac cli/command/system: remove redundant nil-check (gosimple) 964155cd2 cli/formatter: bracket IPv6 addrs prepended to ports a327476f7 login: add e2e tests for oauth + escape hatch c974a8339 chore: update link to docker engine api reference 846ecf59f login: add oauth escape hatch 7b9164794 list/tree: No extra spacing for graphdriver 351249dce list/tree: Print <untagged> as dangling image name 6979ab073 list/tree: Fix some escape codes included in nonTTY a9b78da54 list/tree: Add spacing before the content and first image 0242a1e3c list/tree: Capitalize column headers d417d0668 list/tree: Add an experimental warning b1a08f784 list/tree: Sort by created date 18ab78882 list/tree: Align number right, text left ea8aafcd9 cli/tree: Add `Content size` column be11b74ee image/list: Add `--tree` flag f1befabe9 docs: use gh alert syntax for callouts c3fe7bc33 fallback to regular login if oauth login fails to start 5eb3275c2 filestore: don't print warning multiple times e6624676e login: normalize `registry-1.docker.io` 6e4818e7d Refactor `cli/command/registry` fcfdd7b91 auth: add support for oauth device-code login 2dd4eb06a docs: update link to moved build context doc 0fd3fb084 cli/connhelper: getConnectionHelper: move ssh-option funcs out of closure f3c2c26b1 disable pseudoterminal creation d4a362aa1 docs: update internal links after refactor 78a8fba2c docs: fix link to http proxy document 6440816c7 vendor: github.com/docker/docker 2269acc7a31d (master, v-next) b8a53ee34 vendor: github.com/docker/docker master (f3cf9359bdf6) 9c4480604 plugins: don't panic on Close if PluginServer nil 434d8b75e update to go1.21.13 73e78a582 run: fix GetList return empty issue for throttledevice e29292f92 add security policy 40a5b297b vendor: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 e4d99b4b6 gha: set permissions to read-only by default eac83574c tests/run: fix flaky `RunAttachTermination` test 7b46bfc5a attach: wait for exit code from `ContainerWait` f0a29af0f vendor: docker/docker 2b1097f08088 (removes containerd dependency) b34e8e4df vendor: github.com/moby/sys/sequential v0.6.0 ea37ac9ba vendor: github.com/moby/sys/symlink v0.3.0 435c65833 vendor: github.com/moby/sys/signal v0.7.1 501904d48 vendor: golang.org/x/sys v0.22.0 cc4163296 lint: replace deprecated linter names 66aa0f672 attach: don't return context cancelled error 4a7388f0d tests: fix other flaky `connhelper` tests cc68c66c9 tests: fix flaxy `TestCloseRunningCommand` test b36522b47 docs: refresh image versions in examples aa2c2cd90 Allow for OomScoreAdj 401048b9c vendor: github.com/containerd/containerd v1.7.20 6638deb9d add support for DOCKER_CUSTOM_HEADERS env-var (experimental) 9617e8d0c gha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1) 6d8fcbb23 gha: check-pr-branch: verify major version only 77c0d8360 Dockerfile: update compose to v2.29.0 d00e1abf5 Dockerfile: update buildx to v0.16.1 ab80ea355 cli/config/credentials: move warning to fileStore fcefe44bd login: slightly cleanup warning about unencrypted store a78ab6380 login: don't print "unencrypted" warning when failing to save credentials 90058df30 cli/command/container: remove reportError, and put StatusError to use 64a3fb82d docs: fix typos and version for cli-docs-tool scripts e3e9b9901 vendor: github.com/docker/cli-docs-tool v0.8.0 f28fc7f82 cli: FlagErrorFunc: don't print long usage output for invalid flags b1c0ddca0 cli/command/container: add completion for --stop-signal d6f78cdbb cli/command/container: add completion for --volumes-from 7fe7223c2 cli/command/container: add completion for --restart f30158dbf cli/command/container: add completion for --cap-add, --cap-drop e4dd8b189 cli/context/store: Names(): fix panic when called with nil-interface 42b68a3ed cmd/docker: fix completion for --context 162d9748b cli/command/container: provide flag-completion for "docker create" 5e7bcbeac cli/command/completion: add FromList utility e3427f341 cli/command/completion: add EnvVarNames utility 9207ff104 cli/command/completion: add FileNames utility eed0e5b02 cli/command/container: NewRunCommand: slight cleanup of completion e8baee9c7 vendor: github.com/docker/docker aae044039ca4 (master, v-next) a77ba7eda vendor: google.golang.org/genproto/googleapis/api 49dd2c1f3d0b caa5d15e9 vendor: github.com/prometheus/procfs v0.15.1 0f712827f vendor: github.com/containerd/containerd v1.7.19 b28a1cd02 vendor: golang.org/x/sync v0.7.0 991b1303d chore: restore ctx without cancel on container run 6c04adc05 push: Improve note message and colors 0579cd797 test: e2e SIGTERM attached container on `docker run` d40199440 c8d: Remove `docker convert` mention 4ce6e50e2 push: Don't default to DOCKER_DEFAULT_PLATFORM 3f3ecb94c Makefile: add completion target 150fb55a8 fix: container stream should not be terminated by ctx 3d80b7b0a Dockerfile.dev: install bash-completion in dev container eae75092a cmd/docker: split handling exit-code to a separate utility b7695d6c7 cli-plugins: RunPlugin(): rename error-variable that's possibly shadowed 350a0b68a cli-plugins: Run(): don't discard cli.StatusError errors without message 3dd6fc365 cmd/docker: don't discard cli.StatusError errors without custom message 2f83064ec e2e/cli-plugins: check for exit-errors in tests baf35da40 e2e/cli-plugins: use cmd.CombinedOutput() instead of custom buffer c6b40640c e2e/cli-plugins: use identifiable output for test e9f32edac e2e/cli-plugins: explicitly ignore fmt.Printxx errors 5e7948ec8 e2e/cli-plugins: rename var that shadowed import c60b360c3 cli: improve argument validation output a6e96c758 cli: improve output and consistency for unknown (sub)commands bca209006 cli: make cli.StatusError slightly prettier 88896eeaa cli/command/container: TestSplitCpArg: cleaner skip b194274be replace uses of deprecated API types 4cac8efb5 vendor: github.com/docker/docker 508cc7c61226 (master) dc22572e3 chore: regenerate docs 8549d250f docs: update cli-docs-tool (v0.8.0) 3d4c12af7 docs: update links to docker cli reference bf33c8f10 docs: regenerate base command b0650f281 docs: align heading structure for base command cfea2353b docs: remove frontmatter for base command 03961449a docs: rename cli.md to docker.md (base command) a68382338 docs: remove empty docker base command reference a0c4e56de vendor: golang.org/x/net v0.25.0 723130d7f vendor: golang.org/x/crypto v0.23.0 d33ef57dc vendor: golang.org/x/text v0.15.0 21dbedd41 vendor: golang.org/x/sys v0.21.0 f8e7c0a0d vendor: github.com/klauspost/compress v1.17.9 10a015f87 cli/command/network: NewPruneCommand: explicitly ignore error b3d8809f4 cli/command/network: rewrite consolidateIpam to take an option-struct ab230240a test spring-cleaning c7d46aa7a Enable completion for 'image' sub commands 2eb61318b cli/command/network: some cleanup and pass smaller interfaces b711372ca cli/command/container: TestNewAttachCommandErrors: use struct-literals 229616e17 cli/command/image: fakeClient.ImagesPrune: fix unhandled err-return 42ba29395 rename vars to prevent colliding with imports 3a77fdd91 cli/command/trust: unconvert 26223f701 cli/command/formatter: don't use unkeyed structs c56f4a1ef workflow: remove git `autocrlf=false` setup on windows d73d7d4ed update to go1.21.12 e91f0ded9 docs: make buildx build the canonical reference doc c15ade0c6 fix: ctx cancellation on login prompt 2bd4e95bf feat: force lf line endings by default be14edca2 cli/command/stack: fix faulty sort for sorting stacks 0f6370c94 vendor: github.com/fvbommel/sortorder v1.1.0 2e6aaf05d vendor: github.com/docker/docker v27.0.3 9455d6176 vendor: github.com/docker/docker v27.0.2 1382fbe61 vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6) ab0898ee3 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974) cfec21f28 vendor: github.com/docker/docker v27.0.1 8b0a7b025 cli/config/credentials: ConvertToHostname: handle IP-addresses 238048160 re-introduced support for port numbers in docker registry URL 60775b615 gha/e2e: Update latest version to 27.0 b5d1b4de1 update golangci-lint to v1.59.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to 1.20Bruce Ashfield2025-03-061-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.20-53-g4d6eae2e, which comprises the following commits: 107214b1 build(deps): bump uraimo/run-on-arch-action from 2.8.1 to 3.0.0 c954b1b6 criu: use a process to initialize the cgroup 959cc6c4 cgroup: extend function e3866cc5 cgroup: fix ownership of dfd in read_pids_cgroup 0f16ced1 linux: set subsystem_path before use in error 6ed12c63 linux: remove dead code 6c049b81 criu: hide feature if dlopen is not present 73d00079 tests: map all IDs into the user namespace 0037d567 ci: fail on "sudo make check" f82ead82 tests: fix test_resources_unified_invalid_controller() 37213555 utils: improve error message if path not executable 5f5454b5 utils: do not use hardcoded path buffer 4948e451 utils: check for eaccess existence 410f0d53 container: pass down executable path to custom handler bb56343c utils: move error handling inside find_executable() a77702c0 tests: do a shallow git clone for podman f941be48 error: silence compiler warning b8b25ea1 Prevent dlopen() for CRIU in static link'ed binary 990b5f68 krun: fix libkrun_unload 79b7e6b3 libcrun: use an hash map to lookup the key 51fa411b libcrun: move annotations handling to a separate struct 9abef0da linux: fix dup error 14d5baa4 README: add CentOS Stream 9 & 10, rm 8 e735b4bc krun: fix libkrun_exec return value 90a321c6 container, error: update error handling 620b91b5 utils: fix PATH lookup 48470009 Downstream Fedora: fix gating config 7949fbc6 tests: disable new test that does not use the runtime 7f76fcd4 utils: add missing crun_error_release() 6598c99b utils: add O_NOFOLLOW 9c9a76ac NEWS: tag 1.20 0aec82c2 krun: fix CVE-2025-24965 793188c2 krun: initialize bool ac956685 utils: add O_WRONLY to WRITE_FILE_DEFAULT_FLAGS dcf4f78b utils: drop rootfs_len from safe_openat function de33f0a8 utils: write_file_at_with_flags uses safe_write c460b253 utils: safe_write uses size_t for the buffer length 12778089 utils: drop function write_file_with_flags f1ef3bb4 utils: move write_file* wrappers to utils.h 3e2344b0 utils: fix partial writes with write_file_at_with_flags 7930c13d krun: drop unused variable f7987aa9 linux, mono: remove unneeded crun_error_release() b548479c utils: reduce memory consumption in safe_readlinkat 3b653170 chroot_realpath: remove dead code 17135c1b chroot_realpath: do not return non-existing paths 7ab1acd3 container: fix error after read 490d5502 linux, utils: remove dead code crun_ensure_file*() 432a66d9 status: validate container id 73bcfabb status: report errors from get_state_directory_status_file 30d22ba3 status: report errors from get_run_directory 873db607 status: report errors from libcrun_get_state_directory f5e7718c linux: improve error writing to net.ipv4.ping_group_range 5c35f278 tests: make python script executable 5b51cca8 github: disable aarch64, ppc64le and s390x build 84d50992 github: cat config.log on configure failures 7aa2cd85 github: add r/w permissions 4f823090 github: show apt-get output 2d08f586 exec: always call setsid b788f338 scheduler: ignore ENOSYS when resetting affinity mask e292c9e9 src/linux: handle EINVAL during pidfd_open gracefully 869804f4 TMT: account for environments on internal testing farm ranch 65484cb9 TMT: Replace `adjust` with `prepare` conditionals a4dcb9c6 cgroup: Show the absolute path to cgroup.controllers when a controller is not available 179686b7 Revert "cgroup: remove tun/tap from the default allow list" 68e8d9ab test: use wasm32-wasip1 instead of wasm32-wasi 3158e491 criu: improve error handling for CRIU function calls 3cd9c2c9 criu: do not set network_lock if not specified Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.3Bruce Ashfield2025-03-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.3, which comprises the following commits: eaa7ca80d proxy: break up writes from the remote writer to avoid grpc limits c7f64196f Fix privileged container sysfs can't be rw because pod is ro by default 569af34cb Prefer runtime options for PluginInfo request b8dde9189 Prepare release notes for v2.0.3 0ce93e16a prevent oom watcher depend on shim pkg. f3284aa68 CI: arm64-8core-32gb -> ubuntu-24.04-arm 92ae2951f Update CDI dependency to v0.8.1. f95a426b8 move the device after the options when using mkfs.ext4 4d19a6adf update build to go1.23.6, test go1.24.0 c738c3aab build(deps): bump actions/cache from 4.1.2 to 4.2.0 b5313993c Revert "Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG" 697c59c63 Update runc binary to v1.2.5 fcf64305c Update vendor files to fix build failure d3437eb29 Upgrade x/net to 0.33.0 0785bd8cc Update install-imgcrypt to allow change install repo 06891f899 fix go-cni race condition 79cdbf61b cri,nri: block NRI plugin sync. during event processing. 9d5cfce83 Update github.com/containerd/imgcrypt to v2.0.0 1f4e5688e update to go1.23.5 / go1.22.11 f58939c33 Remove deprecated WithCDIDevices in oci spec opts 3d53430fe Move CDI device spec out of the OCI package 3a6ab80d0 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 cdaf4dfb4 Prepare release notes for v2.0.2 eb125e1dd Update platforms to latest rc 468079c5c Remove confusing warning in cri runtime config migration a2d9d4fd5 Fix runtime platform loading in cri image plugin init 184ffad01 Add integ test to check tty leak 17181ed33 fix master tty leak due to leaking init container object 8666e7422 Bump up otelttrpc to 0.1.0 7373ddd70 update runc binary to v1.2.4 c4270430d ctr: `ctr images import --all-platforms`: fix unpack f34147772 downgrade go-difflib and go-spew to tagged releases Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to v1.39.1Bruce Ashfield2025-03-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.39.1-1-g1c4d85879, which comprises the following commits: 9347a39c2 Tag v1.39.1 717fb39c4 CI config: post-branch update 7dbd71040 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] 4c0c3f0b9 chroot createPlatformContainer: use MS_REMOUNT c15ab104a Bump to Buildah v1.39.0 298a64106 Bump c/storage v1.57.1, c/image 5.34.0, c/common v0.62.0 3c7c611c7 Update module github.com/containers/storage to v1.57.0 d11bd71f4 CI, .cirrus: parallelize containerized integration bd2d78e40 ed's comment: cleanup ea39556a6 use seperate blobinfocache for flaky test 72161b3a1 bump CI VMs to 4 CPUs (was: 2) for integration tests 56078ef2d cleanup, debug, and disable parallel in blobcache tests 708fe0aff bats tests - parallelize 670a7bec6 pkg/overlay: cleanups ca957c487 RPM: include check section to silence rpmlint 6cee07f52 RPM: use default gobuild macro on RHEL 2119c8da3 tests: remove masked /sys/dev/block check 4887a4fb1 vendor to latest c/{common,image,storage} 4383e34c0 build, run: record hash or digest in image history 3541a3ce2 Accept image names as sources for cache mounts 9e00b6b39 Run(): always clean up options.ExternalImageMounts 59024c41a refactor: replace golang.org/x/exp with stdlib a67b07957 Update to c/image @main d694644ae fix broken doc link e40f62941 run_freebsd.go: only import runtime-spec once eca1c8e90 fix(deps): update module github.com/docker/docker to v27.5.1+incompatible 678dca8fd bump github.com/vbatts/tar-split 9b9c161ff Add more checks to the --mount flag parsing logic 1ccc34515 chroot mount flags integration test: copy binaries 80100ac44 fix(deps): update module github.com/moby/buildkit to v0.19.0 e7f790296 relabel(): correct a misleading parameter name 6e62bd083 Fix TOCTOU error when bind and cache mounts use "src" values c30f5784d define.TempDirForURL(): always use an intermediate subdirectory 25a3b385a internal/volume.GetBindMount(): discard writes in bind mounts 0f5c6fc50 pkg/overlay: add a MountLabel flag to Options c0efbe821 pkg/overlay: add a ForceMount flag to Options 50210d51c Add internal/volumes.bindFromChroot() f7155c0ab Add an internal/open package 9a9fa9607 fix(deps): update module github.com/containers/common to v0.61.1 ccfd61bdd fix(deps): update module github.com/containers/image/v5 to v5.33.1 9beaf1018 [CI:DOCS] Touch up changelogs 9b55ec998 fix(deps): update module github.com/docker/docker to v27.5.0+incompatible 65b634b7d copy-preserving-extended-attributes: use a different base image 292ecfe0f fix(deps): update github.com/containers/luksy digest to a3a812d 67991e0d5 chore(deps): update module golang.org/x/net to v0.33.0 [security] 6b53330c3 fix(deps): update module golang.org/x/crypto to v0.32.0 727f00bf4 New VM Images e2b33d252 fix(deps): update module github.com/opencontainers/runc to v1.2.4 ac9815992 fix(deps): update module github.com/docker/docker to v27.4.1+incompatible 5a336bf1a fix(deps): update module github.com/containers/ocicrypt to v1.2.1 adf54cde0 Add support for --security-opt mask and unmask 77e357020 Allow cache mounts to be stages or additional build contexts a1dede87e [skip-ci] RPM: cleanup changelog conditionals d18344416 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6 d77314a7a fix(deps): update module github.com/moby/buildkit to v0.18.2 62709d718 Fix an error message in the chroot unit test cfd98d782 copier: use .PAXRecords instead of .Xattrs 4adca286f chroot: on Linux, try to pivot_root before falling back to chroot 5f3975333 manifest add: add --artifact-annotation c41f02130 Add context to an error message f81b26560 Update module golang.org/x/crypto to v0.31.0 e9932b7bb Update module github.com/opencontainers/runc to v1.2.3 ad5b02cdc Update module github.com/docker/docker to v27.4.0+incompatible 2b7e1e9be Update module github.com/cyphar/filepath-securejoin to v0.3.5 a82826f56 CI: don't build a binary in the unit tests task 8eb6b10b0 CI: use /tmp for $GOCACHE 36f6038d3 CI: remove dependencies on the cross-build task 83b280599 CI: run cross-compile task with make -j 2b6cf6452 Update module github.com/docker/docker to v27.4.0-rc.4+incompatible 4afa31d07 Update module github.com/moby/buildkit to v0.18.1 c35374f9c Update module golang.org/x/crypto to v0.30.0 041c1f26f Update golang.org/x/exp digest to 2d47ceb 058a2d37f Update github.com/opencontainers/runtime-tools digest to f7e3563 a34792457 [skip-ci] Packit: remove rhel copr build jobs 7a8312a61 [skip-ci] Packit: switch to fedora-all for copr 564f90f09 Update module github.com/stretchr/testify to v1.10.0 7b45052fd Update module github.com/moby/buildkit to v0.17.2 17ee51d75 Makefile: use `find` to detect source files 75c8852a8 Tests: make _prefetch() parallel-safe 8e525d445 Update module github.com/opencontainers/runc to v1.2.2 eb7a42217 executor: allow to specify --no-pivot-root 6cfd93424 Update module github.com/moby/sys/capability to v0.4.0 135431f8d Makefile: mv codespell config to .codespellrc c2b42c5e4 Fix some codespell errors f0361414d Makefile,install.md: rm gopath stuff c07a5eb56 Makefile: rm targets working on .. 5adb14cbf build: rm exclude_graphdriver_devicemapper tag 967fb5ec1 Makefile: rm unused var f4d4bb240 Finish updating to go 1.22 6832420b6 CI VMs: bump again 147765b45 Bump to Buidah v1.39.0-dev 7aa3b5ee0 Bump to Buildah v1.38.0 e911fe4a2 Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0 356e4d41e fix(deps): update module golang.org/x/crypto to v0.29.0 6b1e4a58c fix(deps): update module github.com/moby/buildkit to v0.17.1 3a583bf04 fix(deps): update module github.com/containers/storage to v1.56.0 e3950407f tests: skip two ulimit tests 4703b5b0c CI VMs: bump f40 -> f41 2cba66285 tests/tools: rebuild tools when we change versions 3cf2ec21b tests/tools: update golangci-lint to v1.61.0 a7c316ab7 fix(deps): update module github.com/moby/buildkit to v0.17.0 701d6bbe9 Handle RUN --mount with relative targets and no configured workdir 9a5b88d3e tests: bud: make parallel-safe 953fb3259 fix(deps): update module github.com/opencontainers/runc to v1.2.1 d8d117534 fix(deps): update golang.org/x/exp digest to f66d83c fddd1be38 fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a 3c4e552eb tests: blobcache: use unique image name 1cd6346b3 tests: sbom: never write to cwd 2797d22ab tests: mkcw: bug fixes, refactor aa7077164 deps: bump runc to v1.2.0 e213d65be deps: switch to moby/sys/userns 855ec0f0c tests/test_runner.sh: remove some redundancies 5abf038dd Integration tests: run git daemon on a random-but-bind()able port 27324c256 fix(deps): update module github.com/opencontainers/selinux to v1.11.1 8b7adfa2c go.mod: remove unnecessary replace 6c85740ba Document more buildah build --secret options aeb6ffeec Add support for COPY --exclude and ADD --exclude options 57bba3469 fix(deps): update github.com/containers/luksy digest to e2530d6 9cf613a2b chore(deps): update dependency containers/automation_images to v20241010 6349dc4a2 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4 873beddba Properly validate cache IDs and sources 0d27af46f [skip-ci] Packit: constrain koji job to fedora package to avoid dupes e0b7b10e6 Audit and tidy OWNERS 714a23c26 fix(deps): update module golang.org/x/crypto to v0.28.0 c7dd90dd7 tests: add quotes to names a018ec2b0 vendor: update c/common to latest 732f77064 CVE-2024-9407: validate "bind-propagation" flag settings 95f2e1020 vendor: switch to moby/sys/capability 37a6bde53 Don't set ambient capabilities 5193f21b0 Document that zstd:chunked is downgraded to zstd when encrypting 271093d51 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3 03ca93fb0 buildah-manifest-create.1: Fix manpage section fea5c3d49 chore(deps): update dependency ubuntu to v24 d0819591d Make `buildah manifest push --all` true by default 2ff91b8b0 chroot: add newlines at the end of printed error messages 5e82f27fb Do not error on trying to write IMA xattr as rootless c07ae2b4c fix: remove duplicate conditions 4bc98d54d fix(deps): update module github.com/moby/buildkit to v0.16.0 128117224 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2 1f02b65c6 Document how entrypoint is configured in buildah config baf91f2b0 In a container, try to register binfmt_misc 81d1256bd imagebuildah.StageExecutor: clean up volumes/volumeCache 80e15584c build: fall back to parsing a TARGETPLATFORM build-arg edc43c4e6 `manifest add --artifact`: handle multiple values b2defd39e Packit: split out ELN jobs and reuse fedora downstream targets 0494df68b Packit: Enable sidetags for bodhi updates 81b357e36 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible 71fc845d0 tests/bud.bats: add git source 47297b3d5 add: add support for git source 5184bf161 Add support for the new c/common pasta options 7bf7da57a vendor latest c/common 8d7286762 fix(deps): update module golang.org/x/term to v0.24.0 e08437000 fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0 a35380059 packit: update fedora and epel targets 909cca8b1 cirrus: disable f39 testing db2a666dd cirrus: fix fedora names 3f047d49b update to go 1.22 ed881abfe Vendor c/common:9d025e4cb348 9e374f9fd copier: handle globbing with "**" path components cee3c1311 fix(deps): update golang.org/x/exp digest to 9b4947d 9ab093138 fix(deps): update github.com/containers/luksy digest to 2e7307c f88579d1f imagebuildah: make scratch config handling toggleable 01a58991c fix(deps): update module github.com/docker/docker to v27.2.0+incompatible 09c231f83 Add a validation script for Makefile $(SOURCES) 510dd75f6 fix(deps): update module github.com/openshift/imagebuilder to v1.2.15 344366935 New VMs e8e83bb8b Update some godocs, use 0o to prefix an octal in a comment a2629f528 buildah-build.1.md: expand the --layer-label description b695098b0 fix(deps): update module github.com/containers/common to v0.60.2 d0988936b stage_executor: set avoidLookingCache only if mounting stage f1cd5ae4a imagebuildah: additionalContext is not a local built stage 0ade01048 run: fix a nil pointer dereference on FreeBSD ca3b80eb0 CI: enable the whitespace linter 0ad0ffaad Fix some govet linter warnings 662abee0b Commit(): retry committing to local storage on storage.LayerUnknown 8ae99121c CI: enable the gofumpt linter d07c3dfb0 conformance: move weirdly-named files out of the repository a60788c56 fix(deps): update module github.com/docker/docker to v27.1.2+incompatible ec87847c9 fix(deps): update module github.com/containers/common to v0.60.1 fd3aba991 *: use gofmt -s, add gofmt linter 24da18800 *: fix build tags 57d820d37 fix(deps): update module github.com/containers/image/v5 to v5.32.1 3ea43566a Add(): re-escape any globbed items that included escapes 05da9a745 conformance tests: use mirror.gcr.io for most images c39f622d0 unit tests: use test-specific policy.json and registries.conf a1ce1c1ee fix(deps): update module golang.org/x/sys to v0.24.0 c7b7f1272 Update to spun-out "github.com/containerd/platforms" 832ff6cb8 Bump github.com/containerd/containerd ed6dd4227 test/tools/Makefile: duplicate the vendor-in-container target f52158f0e linters: unchecked error abea603df linters: don't end loop iterations with "else" when "then" would fdf1c75cd linters: unused arguments shouldn't have names 6224e9a44 linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5() ae0d9d002 linters: don't name variables "cap" 282cc38c3 `make lint`: use --timeout instead of --deadline d01e4ede3 Drop the e2e test suite c65328683 fix(deps): update module golang.org/x/crypto to v0.26.0 23f241e6f fix(deps): update module github.com/onsi/gomega to v1.34.1 277d40a2e `make vendor-in-container`: use the caller's Go cache if it exists aac50f661 fix(deps): fix test/tools ginkgo typo dd8715976 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1 34a7ce99b Update to keep up with API changes in storage 00d67a48f fix(deps): update github.com/containers/luksy digest to 1f482a9 987e63a2d install: On Debian/Ubuntu, add installation of libbtrfs-dev e3c1953f7 fix(deps): update module golang.org/x/sys to v0.23.0 5f96e0392 fix(deps): update golang.org/x/exp digest to 8a7402a 9254e5ca8 fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2 edc1b7752 Use Epoch: 2 and respect the epoch in dependencies. 4e78b5723 Bump to Buildah v1.38.0-dev 5f18ba259 AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields c467bd139 Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions 8aa9a1c22 integration tests: teach starthttpd() about TLS and pid files Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: fix do_compile failedhongxu2025-02-182-11/+18
| | | | | | | | | | | | | | | | | | | | | Using latest poky + meta-virtualization + meta-openembedded, build multlib failed ...local.conf... MACHINE = "qemux86-64" require conf/multilib.conf MULTILIBS = "multilib:lib32" DEFAULTTUNE:virtclass-multilib-lib32 = "x86" $ bitbake lib32-nerdctl ... -buildmode=pie requires external (cgo) linking, but cgo is not enabled make: *** [Makefile:63: nerdctl] Error 1 ... Get back the patch to allow external specification of build settings and rebase to v2.0.2 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: add json-c for driver_qemuhongxu2025-02-181-1/+1
| | | | | | | | | | | | | | | | After upstreamm applied commit [meson: switch checks to depend on json-c as well as yajl][1], json-c is required to build QEMU driver. Depending on your distro configuration, json-c may or may not be pulled in as a dependency via elfutils. To ensure we are distro configuration independent, we explicitly add json-c as a depdendency when the qemu_driver is used. [1] https://github.com/libvirt/libvirt/commit/28c987263980afc5b606a36a8d264b68cb01e9b9 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix installed-vs-shipped QA errorhongxu2025-02-181-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In commit [1], upstream added sysusers config file for qemu & kvm user/groups, the install dir is "install_dir: prefix / 'lib' / 'sysusers.d'". In commit [2], Yocto created an empty file libvirt-qemu.conf to override sysusers config file which is added by commit [1] While usrmerge not in DISTRO_FEATURES, nonarch_base_libdir does not match install_dir and trigger an installed-vs-shipped QA error ... ERROR: QA Issue: libvirt: Files/directories were installed but not shipped in any package: /usr/lib/sysusers.d /usr/lib/sysusers.d/libvirt-qemu.conf Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. libvirt: 2 installed and not shipped files. [installed-vs-shipped] ... Use nonarch_libdir to intead of nonarch_base_libdir to match the install dir in commit [1] [1] https://github.com/libvirt/libvirt/commit/a2c3e390f7bedf36f4ddc544d09fe3b8772c5c6f [2] https://git.yoctoproject.org/meta-virtualization/commit/?id=8138d9cc7e0c31171230110db0cfa881c46a821b Suggested-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: disable lxc-staticdev buildpaths checkingXiangyu Chen2025-02-181-0/+2
| | | | | | | | | | | | lxc enabled the ffat-lto-objects option since 6.0.3[1], that liblxc.a object files contain both the intermediate language and the object code, that cause yocto QA report a QA warning. Ref: [1] https://github.com/lxc/lxc/commit/277ac364074f8287be91393f50f8f999d51101c4 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: drop 6.6 supportBruce Ashfield2025-02-113-47/+0
| | | | | | | | | | | | | | | It could be argued that we could keep the fragments and virtualization .inc file for old versions, as they won't trigger and immediate issue for configurations that are using the older supported kernel versions. BUT, we could extend that comment to any / all versions ever supported by OEcore. Since 6.6 isn't actively being tested in master, let's drop all the references and only have 6.12 active. If someone does need the older kernel support, then the support could be restored. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: switch libnetwork to moby versionPaolo Barbolini2025-01-303-73/+2
| | | | | | | | Some time ago libnetwork was moved from it's own repository to moby. This patch updates the docker recipe to use the new location Signed-off-by: Paolo Barbolini <paolo.barbolini@m4ss.net> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-unmoci: preserve file modesBruce Ashfield2025-01-171-1/+1
| | | | | | | | | | | | | | | | | Based on the following patch: Subject: [meta-virtualization][PATCH] image-oci-umoci: preserve file modes in rootfs From: "Florian Wickert via lists.yoctoproject.org" <FlorianWickert=gmail.com@lists.yoctoproject.org> cp does not preserve file modes by default. This will break sudo (among others) which needs the suid flag to do its work. This patch adds the --preserve=mode flag to the cp call to fix this. Signed-off-by: Florian Wickert <FlorianWickert@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: fix textrel QA issueChen Qi2025-01-172-3/+46
| | | | | | | | | | | | | | Basically we pass "-buildmode=pie" to fix textrel QA issue. A new patch is added and submitted to upstream: 0001-Makefile-introduce-GO_TEST-for-more-flexible-configu.patch. With this new patch, the old patch, 0001-Add-trimpath-to-build-nri.test.patch, could be dropped. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: fix already-stripped QA issue and clean upChen Qi2025-01-171-5/+3
| | | | | | | | | | | | | Set DEBUG=1 to avoid stripping. See https://github.com/cri-o/cri-o/blob/main/Makefile#L93 Set STRIP=true to avoid stripping bin/pinns. See https://github.com/cri-o/cri-o/blob/main/pinns/Makefile#L4 ALLOW_EMPTY:${PN} = "1" is not needed. Remove it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-metalinter: remove it from podman's DEPENDSChen Qi2025-01-171-1/+0
| | | | | | | | This package is pure source package and its only user is podman's DEPENDS. The current podman does not need it to be built successfully. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "k3s: WIP: [needs newer go]: not for merge: upgrade"Bruce Ashfield2025-01-174-517/+539
| | | | This reverts commit b2a271ea4d9c0703812bee1f00dd2735e4ae8afc.
* Revert "k8s: WIP [needs newer go]: not for merge: update to -tip"Bruce Ashfield2025-01-171-5/+5
| | | | This reverts commit e27c332dc3fc55c6892c5dcd4c31264c4033b40b.
* Revert "docker-compose: WIP [needs go 1.22.10+]: not for merge: update to ↵Bruce Ashfield2025-01-174-320/+470
| | | | | | v2.32.2" This reverts commit 61c4511b2ac313c587a42012bd0e188b9b196758.
* k3s: WIP: [needs newer go]: not for merge: upgradeBruce Ashfield2025-01-174-539/+517
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: WIP [needs newer go]: not for merge: update to -tipBruce Ashfield2025-01-171-5/+5
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: WIP [needs go 1.22.10+]: not for merge: update to v2.32.2Bruce Ashfield2025-01-174-470/+320
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.26.1-287-gfa3950346, which comprises the following commits: fa3950346 image can be set to a local ID, that isn't a valid docker ref a35158502 can't render progress concurrently with buildkit b6db1380e exclude one-off container running convergence 2ebb47543 Only override service mac if set on the main network. d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26 2b21c5df9 fix relative path in compose file 1f3c10eb4 bump compose-go to v2.4.7 68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token 3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906 be09b2e8c checkExpectedVolumes must ignore anonymous volumes 571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name 8f644eea7 only check bind mount conflict if sync action is involved 56e92e34b use the 3 latest major versions of the engine to run e2e step a42a04dfe bump Golang version to v1.22.10 and update CI actions 34bcd03a7 add --pull to run command ed61e42f9 CI to validate fmt 65696bb1c `make fmt` so any contributor can enforce formatting 446e00520 format code with gofumpt c01c9c29f e2e test to prevent future regression 038c81f34 only check volume mounts for updated config a20b69ac5 e2e test for recreate volume 977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 8e0520e71 prompt user to confirm volume recreation 332311358 Recreate container on volume configuration change df9e420dd introduce watch restart action 142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions 700c586bc bump docker/buildx to latest release fc566509d fix support for service.mac_address e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ 624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 a1729c52d Update pkg/e2e/watch_test.go 254224c18 first watch action for a file event wins 0861e6845 fix af5b74850 revisit TestDebounceBatching 32a22c1f4 introduce sync+exec watch action e6ea8fb96 log configuration error as a watch log event 043465448 do not require a build section but for `rebuild` action 1d0839086 pull --quiet should not drop status message, only progress 69a83d130 use latest engine tags 781b9f1cd Bump buildx to 0.19.1 cbff0e555 be sure everything has been cleanup at the end of each tests e4222bff5 add local config.json to test configuration dir if exists 25197fe6d disable failing TestBuildSSH test 85cdaf9dd fix build with bake a8469db83 bump containerd to v1.7,24 08488dae5 bump google.golang.org/grpc to v1.68.0 cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2 6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2 6b3e57503 only stop dependent containers ... if there's some 8e497a128 disable TestNetworkConfigChanged which is unstable on CI 5aed70437 only check attached networks on running containers 1ff9b758d fix: commit tests 9eaba5597 feat: add commit command a85f8a40a run build tests against bake 095f65cb4 delegate build to buildx bake 208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 2d148faed use service.stop to stop dependent containers 43ac1e31c Update wait-timeout flag usage to include the unit 5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2 ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2 5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev) a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1 3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1 d4fa63fdc Update pkg/compose/convergence.go c21d4cfb4 detect network config changes and recreate if needed 61f1d4f69 go.mod: github.com/docker/buildx v0.18.0 f7cce281d go.mod: github.com/moby/buildkit v0.17.1 bcaacc7f2 gha: test against docker engine v27.4.0 3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub 2bb67f270 remove ddev e2e tests bf521fe3a implement remove-orphans on run 11e9621da ci: enable testifylint linter a9de9abcf Emit events for building images 799ab842a Fix compose images that reutn a different image with the same ID 2f65ace2a remove obsolete containers first on scale down aa0a4189e pass stal bot inactivity limit from 6 to 3 months eba3ff8f3 fix(config): Print service names with --no-interpolate 6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 a8bfbc147 bump compose-go v2.4.4 fbbd6f83d Avoid starting all services on rebuild a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact 361c0893a build(deps): bump github.com/compose-spec/compose-go/v2 513b6128c Service being declared in a profile must not trigger re-creation eececb9ad Add profile e2e test case to document in compose 501b5acde Update `MAINTAINERS` file f51bc4cd0 bump compose-go to version v2.4.2 517f87a37 bump google.golang.org/grpc to v1.67.1 718049cbd bump go.uber.org/mock to v0.5.0 02371f312 bump golang minimal version to 1.22 in go.mod a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23 51ebeb544 introduce generate command as alpha command fafaa9c5b bump compose-go to version v2.4.1 fc9c3cde0 Add license header to dockerignore_test.go 73bfbab54 fix 2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go eeea049f1 push: Fix error message typo 26064d4b6 allow usage of -f flag with oci Compose artifact 7c46beb8a resurrect --all flag for cp to target oneoff container aa1ec4524 connect to external networks by name a4ee6ca7a don't warn about uid/gid not being supported while ... they are 5617eff0c bump compose-go to v2.4.0 fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command 0aad9595a don't use progress to render restart, which hides logs 813900180 compose-go clean volume target to avoid ambiguous comparisons 82417bd5b add support for bind.recursive 0cbb73c02 Improve error message to include expected network label 38e3d670a desktop: allow this client to be identified via user-agent 24c78728e bump compose-go to v2.3.0 9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability 8da82c98e gha: set default permissions to "contents: read" 1a8c85548 Add security policy 15bd0b0c5 add support for raw env_file format 39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 3a95a0872 add support for CDI device request using `devices` f794c79eb Support Dockerfile-specific ignore-file with watch 407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav 82b41b9eb introduce service hooks 6c06170eb pass device.options to engine 60c1311f6 chore: remove errors depricated pkg 17add87e4 fix: validate-go-mod bf0418bac fix: lint b9d0c77cd feat: add export command bdb854561 fix(convergence): Serialize access to observed state 41df35c1f Remove bind options when creating a volume type 3ef5045a0 Bump docker v27.3.1 d9df7aab6 fix(push): Fix unexpected EOF on alpha publish c9d96b449 use compose-go version fixing extra_hosts unicity issue 1744b4576 Show watch error message and open DD only when w is pressed 87f457e7d add tests to down.go abcc91e2b fix(down): Fix down command if specified services are not running 8b9fe8984 After container restart register printer consumer 34b18194f check secret source exists, as bind mount would create target as a folder otherwise ce27dba52 wait for dependent service up to delay set by --wait-timeout d2b945613 append unix-style relative path when computing container target path 9c60fe67d revert commits link to mount API over bind changes c16df17e1 don't set propagation if target engine isn't linux 20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2 f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2 cb00aaad2 set propagation default e885bc084 Remove custom codeql workflow 73d3a25eb fix import 3524bcfad chore(watch): Add debug log when skipping service without build context 1076f1d9a stop dependent containers before recreating diverged service 16652ed26 Fixed possible `nil` pointer dereference c6a76b9bd bump github.com/docker/buildx v0.17.1 3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1 86ef8e62c gha: test against docker engine v27.3.0 8bf0627ea show sync files only in debug level 2e1419168 chore(watch): Add changed files path/count to log 155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 8db0cba0a bump compose-go to version v2.2.0 a7424435b Restore compose v1 behavior to recreate containers when ran with -V d445ebba3 fix linting issues with golangci-lint 1.60.2 f592aad10 bump golang to version 1.22.7 ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0 150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0 524a97e55 Fix typos 1d608e033 Use logrus instead of direct output to stderr. 329ad7392 attach: close streams when done b633c5c3e Fix typo in pull.go e6ef8629a Allow combination of bind mounts and 'rebuild' watches d658fecc6 service hash must exlude depends_on f9c7a0cc0 prefer mount API over bind 6e172d6b8 docs: duplicate documentation for root cmd 98e261ba3 docs(wait): Fix wait command description 11c7a25ae allow to add empty line in the logs when nav menu activated 234036756 upgrade docker versions 9c03797f9 initial sync files that modified after image creation 485c0eba5 initial sync for root directory 69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go 1601ead7b docs: Update docker compose kill usage ea4ccf639 Fix stop on file chane for sync-restart action b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1 adba639e8 remove all dependabot update PRs for OTel dependencies d8518529c gp.mod: github.com/gofrs/flock v0.12.1 c79f15da9 go.mod: golang.org/x/sys v0.22.0 3f55382ff update to go1.21.12 44337d2bb Enhance JSON progress events with more fields. bc733508d bump compose-go v2.1.5 c422b5447 bump github.com/docker/cli v27.1.0 e74441c90 bump github.com/docker/docker v27.1.0 2bac32a46 bump github.com/containerd/containerd v1.7.20 f278400fb gha: add docker 27.1.0 4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers 06bf339a4 fix: typos 231ea1005 update docs generation to avoid man pages generation 46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0 d3d378b92 restore setEnvWithDotEnv 163cdfd31 empty env variable with no value must be unset in container 25f85938b exclude unnecessary resources after services have been selected cacbca859 change time for stale bot ecac13f27 Remove debug mode and run twice a week 14793cc2e Add stale workflow 11d5ecdc7 update docs 9549a213b feat(watch): Add --prune option to docker-compose watch command da434013e Remove COMPOSE_MENU env from e2e tests ace69c96a Use rawjson for the build backend. 2db04c1e4 Set logging format to JSON. 8f7cd0048 Format errors as JSON when in JSON progress mode. 5a6e1a7e2 Pass 'plain' instead of 'json' to build backend 06545d066 Add JSON stream progress writer 075fd9345 go.mod: docker/cli, docker/docker v27.0.3 d062ad739 gha: test against docker v27.0.3 7cd5209cc go.mod: docker/cli, docker/docker v27.0.2 f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out` Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: update to 4.20.0-rc1Bruce Ashfield2025-01-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version 4.20.0-rc1-23-g75d88297f5, which comprises the following commits: 75d88297f5 docs/misra: Document ECLAIR extension to Rule 20.7 24c685286d Manual pages: Fix a few typos 274c509162 xl: properly dispose of libxl_dominfo struct instances 737e8cc91b xl: properly dispose of vTPM struct instance c33e14abb1 xentrace: free CPU mask string before overwriting pointer a29a1fb5a5 docs/misc: Fix a few typos f0f1050d47 docs: Fix some typos in the design docs 22d7141d2e xen/ppc: Fix double xen_ulong_t typedef in public/arch-ppc.h 6b97c31146 docs/sphinx: gitignore generated files 0edb30455b docs: rationalise .gitignore f79af67982 docs/sphinx: import sys for error reporting 9ee63ef540 automation/gitlab: disable coverage from clang randconfig 164ae033ad x86/time: prefer CMOS over EFI_GET_TIME 7eba2f46a1 x86/time: introduce command line option to select wallclock 405fdcee91 automation/eclair: make Misra rule 20.7 blocking d68de81344 docs: Improve spelling of few cases in the documentation 16a670ab53 MAINTAINERS: Change reviewer of the ECLAIR integration f4697f7a35 misra: add deviation for MISRA C Rule R11.8 ff10aa9d8f x86: Add Support for Paging-Write Feature b94305d984 x86: Rename _rsvd field to pw and move it to the bit 58 8aaf5dc2c9 build: Set DATE to SOURCE_DATE_EPOCH if available 5dd85073d1 docs/Makefile: Add ppc and riscv to DOC_ARCHES 2ab44af38f CI: Add an x86_64 Clang Randconfig job 19730dbb3f Update Xen version to 4.20-rc 3604d15d1a Config.mk: Pin QEMU_UPSTREAM_REVISION b8f80aca12 xen/arm: Fully initialise struct membanks_hdr fields b9f9b39645 docs: fusa: Add dom0less domain configuration requirements 4d8acc9c1c xen/events: fix race with set_global_virq_handler() a1a1e2b7dc xen/arm: ffa: fix build with clang 40f35d07aa CI: Update Fedora to 41 70f5a875be xen/arm64: Drop relocate_and_switch_ttbr() stub 83a4dade0f xen/flask: Wire up XEN_DOMCTL_set_llc_colors 7fa1411676 xen/flask: Wire up XEN_DOMCTL_dt_overlay 29daa72e40 xen/flask: Wire up XEN_DOMCTL_vuart_op 645b8d48c7 x86emul: correct put_fpu()'s segment selector handling d3709d1324 x86emul: VCVT{,U}DQ2PD ignores embedded rounding 15bbbecad5 libxl: drop setting XEN_QEMU_CONSOLE_LIMIT in the environment (XSA-180 / CVE-2014-3672) 25492368ea xen/perfc: Cleanup e7ea1de774 xen/perfc: Trim includes 02c24a1325 xen/perfc: Add perfc_defn.h to asm-generic 8900010501 xen/perfc: Drop arch_perfc_{gather,reset}() f29cc14de1 x86/amd: Misc setup for Fam1Ah processors 0009feff8b x86/pv: Fix build with Clang and CONFIG_PERF_COUNTERS 555866cb56 x86/traps: Rework LER initialisation and support Zen5/Diamond Rapids 7e6edeaee3 eclair-analysis: tidy toolchain.ecl configuration and mark Rule 1.1 clean 4288576c16 xen/scripts: Fix regex syntax warnings with Python 3.12 a1746cd443 x86/spec-ctrl: Support for SRSO_U/S_NO and SRSO_MSR_FIX 0d729221ab xen/arch/x86: make objdump output user locale agnostic 6e1036b197 tools: fix typo: subsytem -> subsystem c6d0d89c30 docs/man: fix typo: hexidecimal -> hexadecimal 5becb6bbad docs/man/xen-vbd-interface.7: Provide properly-formatted NAME section 6419020270 CHANGELOG: Mention LLC coloring feature on Arm 869aeb7f02 tools: Introduce a xc_xenver_buildid() wrapper 75f9160762 tools: Introduce a non-truncating xc_xenver_cmdline() 1b421d52b2 tools: Introduce a non-truncating xc_xenver_changeset() 6625d581ec tools: Introduce a non-truncating xc_xenver_capabilities() 504ea442e3 tools: Introduce a non-truncating xc_xenver_extraversion() 583a0fb0fa tools/libxc: Move xc_version() out of xc_private.c into its own file 3d94cc8809 xen/version: Misc style fixes 8eed14bf9d xen/version: Fold build_id handling into xenver_varbuf_op() e3bb1b6525 xen/version: Introduce non-truncating deterministically-signed XENVER_* subops 7cf44c61c5 xen/version: Calculate xen_capabilities_info once at boot 075e7e35db MAINTAINERS: Add myself as maintainer for NXP S32G3 294faa3760 SUPPORT.md: Describe SCMI-SMC layer feature f09ee5f550 CHANGELOG.md: Add NXP S32G3 and SCMI-SMC layer support mentions 78b0b025be xen/arm: platforms: Add NXP S32G3 Processors config a767076c03 xen/arm: vsmc: Enable handling SiP-owned SCMI SMC calls 3e322bef8b xen/arm: firmware: Add SCMI over SMC calls handling layer e7a80636f1 xen/arm: add cache coloring support for Xen image f376ff0e4f xen/arm: make consider_modules() available for xen relocation 0975bab5ea xen/arm: add Xen cache colors command line parameter 95debe51a9 xen: add cache coloring allocator for domains 5948dc1675 xen/arm: add support for cache coloring configuration via device-tree 748bd725fb tools: add support for cache coloring configuration 6985aa5e0c xen: extend domctl interface for cache coloring 6cdea3444e xen/arm: add Dom0 cache coloring support 02975cc383 xen/arm: permit non direct-mapped Dom0 construction f4985fce6f xen/arm: add initial support for LLC coloring on arm64 44dd6d4a12 xen/common: add cache coloring common code 8089e4ba44 automation: Pin down CONFIG_QEMU_PLATFORM for RISC-V's randconfig job e547f730e8 xen/ioreq: Fix check for CONFIG_ARCH_VCPU_IOREQ_COMPLETION e6472d4668 tools/xg: increase LZMA_BLOCK_SIZE for uncompressing the kernel dd05f7c8dd x86/hvm: Use constants for x86 modes d17b7562d4 tools/libxg: Don't gunzip the guests initrd 2e22a8ba29 x86/boot: Use printk_once() instead of opencoding it 63ebfcca04 x86/sched: Drop unused includes from credit2.c 188d568db8 xen/sched: Untangle credit2 vs cpu_nr_siblings() 9a17d5c7c9 xen/riscv: relocating and unflattening host device tree 0a510b8f81 xen/riscv: implement prereq for DTB relocation 81d80f44ef xen/riscv: implement data and instruction cache operations ec0ed39265 xen/riscv: update layout table in config.h b527a27e17 xen/page_alloc: introduce preserved page flags macro b359d38013 tools: add a dedicated header file for barrier definitions 826a9eb072 tools: Fix regex syntax warnings with Python 3.12 f9a2e86f21 x86/CET: Support cet=<bool> on the command line 171cb318de MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade 631f535a3d xen: update ECLAIR service identifiers from MC3R1 to MC3A2. d95703eb83 docs/guest-guide: Discuss when not use a hypercall page f38fd27c4c x86/io-apic: prevent early exit from i8259 loop detection 4cde11cdae xen/arm: Check for Static Heap feature when freeing resources df8a0eec1c xen/arm: ffa: Add indirect message support e6794b683b xen/arm: ffa: Remove per VM notif_enabled 42b6f47132 xen/arm: ffa: move message function into ffa_msg.c 6dceb1378d xen/arm: ffa: Transmit RXTX buffers to the SPMC 2833aa172f xen/arm: ffa: Use bit 15 convention for SPs 8a932b91aa xen/arm: ffa: Rework partition info get 2f9f240a5e xen/arm: ffa: Fine granular call support da07df5558 xen/arm: ffa: Fix version negotiation 1a20f862f3 xen/arm: ffa: Rework feature discovery cf15d85707 xen/arm: ffa: Rework firmware discovery 2e955d2554 tools/misc: Drop xensymoops 58ba55959a xen: add a domain unique id to each domain 5793b84c5e xen/xsm: make getdomaininfo xsm dummy checks more stringent df98c03864 xen/riscv: add {set,clear}_fixmap() functions for managing fixmap entries f5bf0d100b xen/riscv: reorder includes in asm/page.h alphabetically 0eb8b71604 xen/riscv: add destroy_xen_mappings() to remove mappings in Xen page tables 89dca886ac arm/domain_build: Make find_unallocated_memory() more generic a974366f7a MAINTAINERS: add Anthony, Michal, Roger to THE REST bf8a209915 tools/ocaml: Specify rpath correctly for ocamlmklib 13df44f8a1 CHANGELOG: Mention xl suspend/resume bec5b2447c x86: p2m-pod: address violation of MISRA C Rule 2.1 d636e0ed91 x86/FPU: make vcpu_reset_fpu() build with old gcc 1645bb7997 xen/arm: Move setup_frametable_mappings to arm/mmu c8e59af7ad xen/arm: Use vmap_contig instead of __vmap where it's possible b772a9f517 arm/setup: Move MMU specific extern declarations to mmu/setup.h 57fe471f56 common/vmap: Fall back to simple allocator when !HAS_VMAP d39a92aefe xen/mmu: enable SMMU subsystem only in MMU 214f9cc67b xen/mpu: Map early uart when earlyprintk on dc8e1b33a5 tools/xl: add suspend and resume subcommands 5a455a52ea bootfdt: Add missing trailing commas in BOOTINFO_{ACPI,SHMEM}_INIT 28301682f4 libs/guest: Fix migration compatibility with a security-patched Xen 4.13 0cc8845fb9 CI: Update to FreeBSD 14.2 ee7edb0d29 xen/arm: mpu: Implement a dummy enable_secondary_cpu_mm 5423a08eae xen/arm: mpu: Enable MPU 868fe87c46 xen/arm: mpu: Create boot-time MPU protection regions b30bad3832 xen/arm32: Get rid of __memzero() 126b0a6e53 xen/Kconfig: livepatch-build-tools requires debug information 4191619e08 libxl: extend IGD check 3df8812f90 x86emul: correct VPBROADCASTMW2D predicate testing 4c5d9a01f8 x86emul: MOVBE requires a memory operand 6b8c85872e xl: Keep monitoring suspended domain 7bd8d37897 drivers/char: rename arm-uart.c to uart-init.c a14593e399 xen/device-tree: Allow region overlapping with /memreserve/ ranges 4a06cc7178 xsm/flask: missing breaks, MISRA rule 16.4 738df43521 x86/setup: fix typo in acpi=off description bf37973929 xen/riscv: finalize boot allocator and transition to boot state 6b71d4f849 xen/riscv: initialize the VMAP_DEFAULT virtual range e6cf43717d xen/riscv: introduce setup_mm() c8e3e39085 page-alloc: make scrub_one_page() static a24f1c042d libxl/ACPI: bound RSDP allocation 4e0b1adff0 libxl/ACPI: don't hard-code guest page size fcf91ce9de x86/pv: don't populate the GDT/LDT L3 slot at domain creation 8fe330a4da xen/pci: remove logic catering to adding VF without PF 931eaa21cd x86/msi: fix locking for SR-IOV devices 4e18a39056 xen/pci: introduce PF<->VF links b661fe107d build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS 9ea9c1c49b docs/sphinx: Refresh config for newer Sphinx 233f03dd83 docs/sphinx: Fix FUSA indexing 2e853c1920 xen/common: Move gic_dt_preinit() to common code 722d93bc91 x86/pvh: also print hardware domain pIRQ limit for PVH 5c56361c61 x86/irq: fix calculation of max PV dom0 pIRQs ca5c01513a xen/arm32: mm: Rename 'first' to 'root' in init_secondary_pagetables() c0bf8816c9 xen/bitops: Fix break usage in for_each_set_bit() loop f52004b20e x86/ucode: Only rescan features on successful microcode load 365f408339 x86/boot: Load microcode much earlier on boot e0058760a0 MISRA: Mark Rule 8.4 as clean c74230bdce x86/mce: Compile do_mca() for CONFIG_PV only 5cc971a4bf CI: New stage "containers" to rebuild some containers a231538acd CI: Define XEN_REGISTRY variable 5726d8e5ef CI: Remove deprecated "only:variables" in favor of "rules:if" 96efb13459 bootfdt: Unify early printing of memory ranges endpoints 22d9e75944 misra: increase identifiers length to 63 and align doc with ECLAIR config cd7cc5320b x86/boot: add start and size fields to struct boot_module 6308301208 x86/pmstat: deal with Misra 8.4 violations a1ed107f59 x86/boot: Introduce boot-helpers.h 429840a81e xen/bootinfo: Include declaration for fw_unreserved_regions() 488579e956 x86/msi: fix Misra Rule 20.7 in msi.h 9e8c97f3eb x86/msi: prune unused macros 3ac41c60e8 x86/mm: fix IS_LnE_ALIGNED() to comply with Misra Rule 20.7 3128d7248f x86/boot: introduce module release 891f077a71 xen/arm: use domain memory to allocate p2m page tables 88c40dc108 x86/boot: convert domain construction to use boot info 8417b4b0bb x86/emul: Adjust get_stub() to avoid shadowing an outer variable b1b657afa9 x86/ucode: Drop MIS_UCODE and microcode_match_result 91afda4a34 x86/ucode: Fix cache handling in microcode_update_helper() acd9bf6f89 x86/ucode: Remove the collect_cpu_info() call from parse_blob() b1ebb6461a x86/mm: fix alignment check for non-present entries d2bbb0d455 xen/multicall: Change nr_calls to uniformly be unsigned long d2c214ede0 x86/trampoline: Rationalise the constants to describe the size 5c9b7a6659 x86/trampoline: Document how the trampoline is laid out 7d73c6f196 x86/trampoline: Simplify the wakeup_stack checks 04a77fb843 x86/trampoline: Check the size of the permanent trampoline at link time 74376e015c xen/multiboot: Make headers be standalone 5022dfe513 xen/earlycpio: Fix header to be standalone 41c8049608 x86/mm: ensure L2 is always freed if empty 73194b5701 x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings() 5b52e1b043 x86/mm: skip super-page alignment checks for non-present entries 97fb6fcf26 x86/mm: introduce helpers to detect super page alignment 939a9e800c x86emul: avoid double memory read for RORX d5febe7f64 automation/eclair: tag Rule 16.3 as clean 3d1db2942f x86/emul: use pseudo keyword fallthrough 5bf8f2f5cc x86/emul: auxiliary definition of pseudo keyword fallthrough 1179d51dcb x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode 5b8780869e x86emul: correct EFLAGS testing for BMI1/BMI2 380b32a476 x86/e820: Fix parameter names of reserve_e820_ram()/e820_change_range_type() 5c8b638c2a x86/apic: Include genapic.h in delivery.c 38febce5b3 x86/ucode: Rework Intel's microcode_update_match() 39360c38c3 x86/ucode: Rework AMD's microcode_fits() 502478bc1d x86/ucode: Fold microcode_update_cpu() and fix error handling 41314ccee8 x86/ucode: Don't use microcode_update_cpu() in early_microcode_load() d3da79e1d1 drivers/char: Use sub-page ro API to make just xhci dbc cap RO 8847d6e23f x86/mm: add API for marking only part of a MMIO page read only 64d2290cf9 mm: adjust _xvrealloc() declaration 0bfe567b58 libxl: Use zero-ed memory for PVH acpi tables 7d5781d526 x86/boot: Setup correctly fs segment for bogus_real_magic 9ef78a614d x86/trampoline: Change type of trampoline_phys to uint32_t c839c8c3fc x86/wakeup: Fix code generation for bogus_saved_magic d4829a20ad x86: Drop mach_mpspec.h b80c535794 x86: Drop mach-default/bios_ebda.h cd7b518680 x86: Move mach-default/io_ports.h to asm/io-ports.h fc147fec19 x86: Move mach-default/irq_vectors.h to asm/irq-vectors.h b212fefc04 x86: Delete mach_apic.h 5eb9c14324 x86/mach-apic: Move the genapic wrappers to genapic.h b44d96ecb3 x86/mach-apic: Drop set_apicid() bdb509c382 x86/mach-apic: Drop check_apicid_present() 9aa1e60b90 x86/mach-apic: Drop check_apicid_used() bffc52ea26 x86/mach-apic: Drop ioapic_phys_id_map() a384eef9e3 x86/mach-apic: Drop apic_id_registered() 0a51e5e17b x86/mach-apic: Move generic_*_probe() declarations into genapic.h 7f81e81774 x86: Drop includes of mach_apic.h 19c3016a8a VT-d: Drop includes of mach_apic.h 718400a54d xen/x86: prevent addition of .note.gnu.property if livepatch is enabled c8754cbc1d CHANGELOG: Add note about xAPIC destination mode change 3eda1f8912 iommu/ipmmu-vmsa: Add Renesas R8A779G0 (R-Car V4H) support 6c88e35fa1 x86/boot: Fix bootinfo.h to be standalone c62eed3ee6 x86/trampoline: Collect other scattered trampoline symbols 75035c386e x86/boot: add cmdline_pa to struct boot_module ccdb7e08fd x86/boot: move kextra into boot info 6320f08206 x86/boot: move headroom to boot modules 37bd4e90bd NUMA: Introduce NODE_DATA->node_present_pages (RAM) 65ef8cd5c0 x86/xstate: Remove stale assertions in fpu_x{rstor,save}() 00e074834e x86emul/test: drop an undue conditional 1ceabff115 CI: Refresh the Debian 12 x86_32 container 44b742de09 CI: Refresh the Debian 12 x86_64 container 2c83678e78 CI: Don't use -y with apt-get update 4e7863e82d x86/boot: introduce boot module flags 74af2d9827 x86/boot: eliminate module_map 5899b749b8 x86/boot: introduce boot module types 282bd66cee x86/ucode: Fold early_update_cache() into its single caller 59d81c89cc x86/ucode: Drop ucode_mod and ucode_blob 414725d0ee x86/ucode: Use bootstrap_unmap() in early_microcode_load() c25c964634 x86/ucode: Enforce invariant about module selection c05ac8fe30 x86/boot: Explicitly list .{sym,shstr,str}tab in build32.lds.S 1580813006 x86/boot: Uses nm command instead of map file to get symbols e75b327c45 x86/boot: Fix intermediate file names to generate 32 bit code c6b84ccf8d CI: Fix package installation for Coverity run 921a2ba5c5 x86/ucode: Move the CPIO path string into microcode_ops 3372f8a361 x86/ucode: Fold microcode_grab_module() into its single caller 28d347041f x86/ucode: Fold early_microcode_update_cpu() into its single caller 54047cedab x86/ucode: Break early_microcode_load() out of early_microcode_init() 29a4fbf60a x86/ucode: Turn microcode_init_cache() into a presmp_initcall a7c7c3f642 tools/libxl: remove usage of VLA arrays 86001b3970 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping babe11b46c CI: Drop alpine-3.18-rootfs-export and use test-artefacts d736b6eb45 xen/arm: mpu: Define Xen start address for MPU systems 0388a5979b xen/arm: mpu: Introduce choice between MMU and MPU b75dee16b3 xen/arm: Skip initializing the BSS section when it is empty a6d71d59ca SUPPORT.md: Argo: Upgrade status to Tech Preview e27436fba7 CI: Fix cppcheck parallel build more 7a88871aac Revert "x86/mm: ensure L2 is always freed if empty" 2478bed83f Revert "scripts: Fix git-checkout.sh to work with branches other than master" a6dba2761e x86/mm: ensure L2 is always freed if empty c01855bec5 x86/msi: harden stale pdev handling bd01fffef2 types: replace remaining use of __u64 cdbaca6faa byteorder: replace __u64 517cf3dbfd types: replace remaining uses of __u32 0d87ca0237 x86: modernize swab64() 60db1b1ccd byteorder: replace __u32 61ea18e39a byteorder: replace __u16 3eb037fbbc MAINTAINERS: minor file line update eb4042e3c5 Config: Update MiniOS revision c554ec124b scripts: Fix git-checkout.sh to work with branches other than master 9a2a50d5de x86/mm: Use standard C types for sized integers aa4ad424f0 x86/setup: Make setup.h header self contained fa2d831803 x86/cpu-policy: Extend the guest max policy max leaf/subleaves bb7296d77f automation/eclair: monitor Rules 11.2 and 18.1 and update configuration 6d7c26a005 automation: add x86_64 test (linux argo) 56bd76925e x86/boot: Use trampoline_phys variable directly from C code d5a73cdc6b x86/boot: Use boot_vid_info variable directly from C code db8acf31f9 x86/boot: Reuse code to relocate trampoline aa9045e771 x86/boot: Rework how 32bit C is linked/included for early boot fa1463cecf x86/boot: Explain how discard_initial_images() works 83892f6a12 x86/boot: Drop the mbi and mod pointers in __start_xen() d03dfab66a x86/boot: Convert mod[] to bi->mods[] in __start_xen() 3fd82e09d0 x86/boot: Introduce bootstrap_map_bm() to map boot_module's 0ba5392e70 x86/boot: Introduce bootstrap_unmap() 980579291d x86/boot: Drop initial_images pointer 2802b77abe x86/ucode: Explain what microcode_set_module() does 9cbf61445c xen/earlycpio: Drop nextoff parameter a974725a87 x86/boot: Remove the mbi_p parameter from __start_xen() 6cf0aaeb8d x86/boot: Fix XSM module handling during PVH boot 8ddf63a252 x86/boot: Fix microcode module handling during PVH boot 89f855d564 x86/boot: Add a temporary module_map pointer to boot_image be84e7fe58 x86/boot: convert consider_modules to struct boot_module 2c3294775e x86/boot: Simplify size calculations in move_memory() c960871c7c x86/boot: Simplify address calculations in move_memory() e33e18df05 x86/boot: Convert move_memory() to use bootstrap_map_addr() 70262d5940 x86/emul: address violations of MISRA C Rule 16.3 79560b68a1 x86/pv: remove unlikely() from BUG_ON() condition in pv_map_ldt_shadow_page() 0fe607b2a1 x86/boot: Fix PVH boot during boot_info transition period b837d02163 CI: Add {adl,zen3p}-pvshim-* tests 3be3ae0770 CI: Rework domU_config generation in qubes-x86-64.sh 6685a129c7 CI: Minor cleanup to qubes-x86-64.sh 49a068471d x86/fpu: Rework fpu_setup_fpu() uses to split it in two edb48e7645 x86/fpu: Combine fpu_ctxt and xsave_area in arch_vcpu 7cf6e073e4 x86/boot: introduce struct boot_module 73785a4c77 x86/boot: Fix PVH boot following the start of the MBI->BI conversion e9f227685e xen/arm: Add NXP LINFlexD UART early printk support 6ba3b1f828 xen/arm: Add NXP LINFlexD UART Driver 0710b38921 Update deprecated SPDX license identifiers 4c21b6affb x86/boot: Further simplify CR4 handling in dom0_construct_pv() 6e085825cb CI: Refresh and upgrade the Fedora container d84f6870fe ocaml/libs: Fill build failure due to unused variable in ocaml macro 0bcf66d05a automation: Fix URL to the gitlab container registry documentation 572010c552 x86/boot: split bootstrap_map_addr() out of bootstrap_map() a285d2ac2e x86/boot: move mmap info to boot info 29aaded97d x86/boot: move cmdline to boot info b438c5fbf4 x86/boot: move boot loader name to boot info 038826b61e x86/boot: move x86 boot module counting into a new boot_info struct 081683ea57 xen/arm: dom0less: cope with missing /gic phandle 1e81d2df4f device-tree: Move dt-overlay.c to common/device-tree/ b3ca3caaf3 x86emul/test: drop Xeon Phi S/G prefetch special case 09d22fe15c x86emul/test: correct loop body indentation in evex-disp8.c:test_one() 330d4e6250 docs: update documentation of reboot param 47990ecef2 x86/boot: Improve MBI2 structure check f4c3300d88 x86/boot: Align mbi2.c stack to 16 bytes 3f6ee3db2e xen/public: add comments regarding interface version bumps 93af5cc4df x86/boot: Prep work for 32bit object changes 2defb54490 iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU 8c858d04ac xen/riscv: parse and handle fdt command line de709f7647 xen/riscv: initialize bootinfo from dtb 028148788f xen/vpci: address violations of MISRA C Rule 16.3 ed896312f2 xen/common: move device initialization code to common code af2a1339c4 xen/riscv: add section for device information in linker script 7a87b5e05c xen/ppc: add section for device information in linker script 31f31b624a xen/arm: use {DT,ACPI}_DEV_INFO for device info sections 083344a05d xen: define ACPI and DT device info sections macros 17d32cf2ec xen: introduce DECL_SECTION_WITH_LADDR 542ac112fc xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init() 76a54badf8 stubdom: use real lib dependencies for xenstore stubdoms 45333e2888 tools/xenstored: remove unneeded libxenguest reference 906cee8718 config: update Mini-OS commit b2c7d7070d dt-overlay: Print overlay I/O memory ranges in hex 239b0c8f06 dt-overlay: Ignore nodes that do not have __overlay__ as their subnode b32d24bcd6 dt-overlay: Support target-path being root node 81862825e8 dt-overlay: Remove ASSERT_UNREACHABLE from add_nodes() 656ac422c4 device-tree: Remove __init from unflatten_dt_alloc() 95f2a5656e dt-overlay: Fix NULL pointer dereference b5b9420334 stubdom: add fine grained library config items to Mini-OS configs a592c98f94 ocaml/libs: Remove xsd_glue_dev package, package plugin_interface_v1.a c73adc9cf8 Flask: replace uses of __u32 2b49ef4503 xen/riscv: register Xen's load address as a boot module 59ef5d2a95 xen/riscv: switch LINK_TO_LOAD() to virt_to_maddr() a11b3926c4 xen/riscv: implement virt_to_maddr() 4dec51ca72 x86: restore semicolon after explicit DS prefix 439f3e6757 xen: Update header guards - ARGO eb48045d74 x86/vlapic: Move lapic migration checks to the check hooks e305256e69 CI: Stop building QEMU in general 3b79d825b5 MAINTAINERS: Add myself as a reviewer for RISC-V 6b80ec957c types: replace remaining uses of s64 9d278c8c6c MAINTAINERS: add myself as maintainer for arm tee 2f413e22fa x86/msr: add log messages to MSR state load error paths dcbf8210f3 x86/APIC: Switch flat driver to use phys dst for ext ints b315293130 xen: Update header guards - RISC-V 6bbcb97ba4 xen: Update header guards - I/O MMU 964c9568ea xen: Update header guards - Intel TXT c95cd5f9c5 x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs 908c1b5efa docs: fusa: Replace VM with domain 7d83c392c7 xen/pci: address a violation of MISRA C Rule 16.3 7f743fac94 x86/emul: add defensive code 2e0b545b84 ioreq: don't wrongly claim "success" in ioreq_send_buffered() 011814bd45 x86/boot: Rationalise .gitignore 9ab0496350 .gitignore: Remove not generated files 16a81486c4 automation: use python-3.11 in Leap container c1035b0463 CI: Drop bin86/dev86 from archlinux container 79ade905b9 x86: Use standard C types in multiboot2.h header 2d6a835b05 build: move xenlibs-dependencies make definition to uselibs.mk c66c134175 stubdom: explcitly add libc and lwip Mini-OS config options e07ae82853 stubdom: swtich to local .gitignore file 29555668b5 x86/dpci: do not leak pending interrupts on CPU offline a7201c0211 CODING_STYLE: header file guard naming rules ceefa8c039 efi: address violation of MISRA C Rule 16.3 6b20755c24 automation/eclair: tag Rule 13.6 as clean a0094dc136 xen/gnttab: address a violation of MISRA C Rule 13.6 6f621f23bc EFI: address a violation of MISRA C Rule 13.6 1223375d8b CI: Fix builds following qemu-xen update bcce5a6b62 automation: shorten the timeout for smoke tests 2d1c673bae automation: add a smoke test for xen.efi on X86 636e66b143 automation: preserve built xen.efi 1eeb7c3379 x86: Introduce X86_ET_* constants in x86-defns.h 7fd80df2bf x86/boot: Convert remaining uses of the legacy ALIGN d82e0e094e automation: introduce TEST_TIMEOUT_OVERRIDE 163338e6fb x86/boot: Don't use INC to set defaults f75780d26b xen: move per-cpu area management into common code eb21ce14d7 x86/boot: Rewrite EFI/MBI2 code partly in C 444cb9350f stubdom: Fix newlib build with GCC-14 41190d2ceb x86/kexec: Separate code and data into different cache lines b102c9f1ce x86: move ENTRY(), GLOBAL(), and ALIGN eaa7a72eda x86: convert dom_crash_sync_extable() annotation 373d93cfce x86/kexec: convert entry point annotations a8c8d6c529 x86/ACPI: annotate assembly function/data with type and size 1d199e83c7 VMX: convert entry point annotations bcd932b5b2 xen/riscv: introduce early_fdt_map() 557b7f1b9a xen/riscv: page table handling 3a38cc2bd7 x86: prefer RDTSCP in rdtsc_ordered() f9ce66ea9d docs: fusa: Add Assumption of Use (AOU) 633ee8b2df x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour 8a6c495d72 x86/pv: Handle #PF correctly when reading the IO permission bitmap 7429e1cc07 x86/pv: Rework guest_io_okay() to return X86EMUL_* 66878a8b75 x86/MSR: improve code gen for rdmsr_safe() and rdtsc() b42cf31d11 x86: use alternative_input() in cache_flush() db70a52f75 iommu/amd-vi: make IOMMU list ro after init b06e76db7c x86/traps: Re-enable interrupts after reading cr2 in the #PF handler 67a8e5721e x86/PV: simplify (and thus correct) guest accessor functions 94423b8f75 drivers/video: Convert source files to UTF-8 f97f885c71 tools: Add new function to do PIRQ (un)map on PVH dom0 b93e5981d2 tools: Add new function to get gsi from dev d6e9a2aab3 x86/irq: allow setting IRQ permissions from GSI instead of pIRQ c353c47757 xen/riscv: introduce and initialize SBI RFENCE extension b6c8f34a90 xen/riscv: introduce functionality to work with CPU info f89e1a1702 xen/riscv: introduce asm/pmap.h header 13684f539e xen/riscv: set up fixmap mappings f9e69c266e xen/riscv: allow write_atomic() to work with non-scalar types dee9e4b1cc x86/intel: optional build of PSR support 34d4227e6a x86: introduce x86_seg_sys 457052167b blkif: Fix a couple of typos e9a0101dde blkif: Fix alignment description for discard request 0857c75e6f x86/boot: Refactor BIOS/PVH start a184ac74f5 x86/alternatives: build time check feature is in range aa5a06d5d6 x86/alternatives: do not BUG during apply fa49f4be41 xen/livepatch: do Xen build-id check earlier 86d09d16dd xen/livepatch: simplify and unify logic in prepare_payload() 8c81423038 xen/livepatch: drop load_addr Elf section field 3a28da8f4d xen/livepatch: remove useless check for duplicated sections b083121c94 x86/boot: Initialise BSS sooner 1aec9a4ba7 changelog: add note about blkif protocol fixes b81ea162ef x86/defns: Fix typo in comment "Porection" -> "Protection" 11eb4e2969 xen: introduce common macros for per-CPU sections defintion 512ac41aa6 xen/efi: efibind: Fix typo in comment 8752ad83e7 xen/ucode: Make Intel's microcode_sanity_check() stricter 0416f1f66a xen/ucode: Improve commentary for parsing AMD containers 9b0d2465c8 x86/APIC: Remove x2APIC pure cluster mode c42d9ec61f x86/vLAPIC: prevent undue recursion of vlapic_error() f7f42accbb x86/efi: Use generic PE/COFF structures 6a039b0500 x86/cpufeature: Reposition cpu_has_{lfence_dispatch,nscb} 95c3ae591c tools/libxs: Style consistency improvements b1642aaea2 x86: enable long section names for xen.efi c4344ecc5a x86/mwait-idle: add dependency on general Intel CPU support e1c8a3dc8a x86/boot: Drop stale comment about zeroing the stack f4c7663d19 xen/riscv: use {read,write}{b,w,l,q}_cpu() to define {read,write}_atomic() b64f62fcbd ubsan: use linux-compat.h 7298e63519 docs/misra: add R17.2 and R18.2 0843b40c47 docs: fusa: Add requirements for emulated uart 03400a2a26 automation/eclair: add deviation for MISRA C 2012 Dir 4.10 ef3b4768b3 arm/smmu: Complete SMR masking support 6279b9a3be xen/arm: Enable workaround for Cortex-A53 erratum #1530924 4e1a333745 arm: Drop deprecated early printk platform options a8bf14f6f3 xen/ucode: Fix buffer under-run when parsing AMD containers 4e23c86bd8 xen/keyhandler: Move key_table[] into __ro_after_init 08ffd8705d x86/hvm: Simplify stdvga_mem_accept() further 42968684e5 ARM/cache: Drop legacy __read_mostly/__ro_after_init definitions ec185ec239 x86/mm: undo type change of partial_flags 221f2748e8 blkif: reconcile protocol specification with in-use implementations eb97f87919 types: replace remaining uses of s32 5ffe6d4a02 types: replace remaining uses of s16 6e7f7a0c16 xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build 40f5c7e138 x86/HVM: drop .complete hook for intercept handling b180a50326 x86/HVM: drop stdvga's "lock" struct member 3beb4baf2a x86/HVM: drop stdvga's "vram_page[]" struct member 86c03372e1 x86/HVM: drop stdvga's "{g,s}r_index" struct members 7aba44bdd7 x86/HVM: drop stdvga's "sr[]" struct member b16c0966a1 x86/HVM: drop stdvga's "gr[]" struct member 89108547af x86/HVM: remove unused MMIO handling code b740a9369e x86/HVM: drop stdvga's "stdvga" struct member eb7cd0593d x86/HVM: properly reject "indirect" VRAM writes 3d65f1c072 x86emul: support CMPccXADD 582fade2a9 automation/eclair_analysis: address violation of Rule 20.7 738db54711 xen/bitmap: remove redundant deviations 3c5c9743ca automation/eclair: update configuration of Rule 20.7 33888e7aaa automation/eclair_analysis: deviate linker symbols for Rule 18.2 4b3f30ea30 automation/eclair_analysis: fix MISRA Rule 20.7 regression in self-tests.h 035baa203b x86/hvm: allow {,un}map_pirq hypercalls unconditionally 53b7246bdf x86/HVM: drop stdvga's "cache" struct member 2b24c090d1 x86/mmcfg: address violation of MISRA C Rule 16.3 f6cc23e234 x86/mm: address violations of MISRA C Rule 16.3 6f5b873600 x86/monitor: address violation of MISRA C Rule 16.3 c4fe5296e6 x86/hypercall: address violations of MISRA C Rule 16.3 a42c3ec62f x86/vm_event: address violation of MISRA C Rule 16.3 b3173a25ba x86/time: address violations of MISRA C Rule 16.3 76529a1ce1 x86/psr: address violation of MISRA C Rule 16.3 09217c2618 x86/APIC: address violation of MISRA C Rule 21.2 233ee468bb x86/cpufreq: address MISRA Rule 7.3 violation cb4f22884e x86/time: introduce probing logic for the wallclock 6da090b4b7 x86/time: pull cmos_rtc_probe outside of function and rename 5b4664b9e4 x86/mm address violations of MISRA C:2012 Rule 5.3 3502c033f6 arm/gicv3: Fix ICH_VTR_EL2.ListRegs mask c23571fe31 automation: fix xilinx test console settings Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to 4.20.0-rc1Bruce Ashfield2025-01-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version 4.20.0-rc1-23-g75d88297f5, which comprises the following commits: 75d88297f5 docs/misra: Document ECLAIR extension to Rule 20.7 24c685286d Manual pages: Fix a few typos 274c509162 xl: properly dispose of libxl_dominfo struct instances 737e8cc91b xl: properly dispose of vTPM struct instance c33e14abb1 xentrace: free CPU mask string before overwriting pointer a29a1fb5a5 docs/misc: Fix a few typos f0f1050d47 docs: Fix some typos in the design docs 22d7141d2e xen/ppc: Fix double xen_ulong_t typedef in public/arch-ppc.h 6b97c31146 docs/sphinx: gitignore generated files 0edb30455b docs: rationalise .gitignore f79af67982 docs/sphinx: import sys for error reporting 9ee63ef540 automation/gitlab: disable coverage from clang randconfig 164ae033ad x86/time: prefer CMOS over EFI_GET_TIME 7eba2f46a1 x86/time: introduce command line option to select wallclock 405fdcee91 automation/eclair: make Misra rule 20.7 blocking d68de81344 docs: Improve spelling of few cases in the documentation 16a670ab53 MAINTAINERS: Change reviewer of the ECLAIR integration f4697f7a35 misra: add deviation for MISRA C Rule R11.8 ff10aa9d8f x86: Add Support for Paging-Write Feature b94305d984 x86: Rename _rsvd field to pw and move it to the bit 58 8aaf5dc2c9 build: Set DATE to SOURCE_DATE_EPOCH if available 5dd85073d1 docs/Makefile: Add ppc and riscv to DOC_ARCHES 2ab44af38f CI: Add an x86_64 Clang Randconfig job 19730dbb3f Update Xen version to 4.20-rc 3604d15d1a Config.mk: Pin QEMU_UPSTREAM_REVISION b8f80aca12 xen/arm: Fully initialise struct membanks_hdr fields b9f9b39645 docs: fusa: Add dom0less domain configuration requirements 4d8acc9c1c xen/events: fix race with set_global_virq_handler() a1a1e2b7dc xen/arm: ffa: fix build with clang 40f35d07aa CI: Update Fedora to 41 70f5a875be xen/arm64: Drop relocate_and_switch_ttbr() stub 83a4dade0f xen/flask: Wire up XEN_DOMCTL_set_llc_colors 7fa1411676 xen/flask: Wire up XEN_DOMCTL_dt_overlay 29daa72e40 xen/flask: Wire up XEN_DOMCTL_vuart_op 645b8d48c7 x86emul: correct put_fpu()'s segment selector handling d3709d1324 x86emul: VCVT{,U}DQ2PD ignores embedded rounding 15bbbecad5 libxl: drop setting XEN_QEMU_CONSOLE_LIMIT in the environment (XSA-180 / CVE-2014-3672) 25492368ea xen/perfc: Cleanup e7ea1de774 xen/perfc: Trim includes 02c24a1325 xen/perfc: Add perfc_defn.h to asm-generic 8900010501 xen/perfc: Drop arch_perfc_{gather,reset}() f29cc14de1 x86/amd: Misc setup for Fam1Ah processors 0009feff8b x86/pv: Fix build with Clang and CONFIG_PERF_COUNTERS 555866cb56 x86/traps: Rework LER initialisation and support Zen5/Diamond Rapids 7e6edeaee3 eclair-analysis: tidy toolchain.ecl configuration and mark Rule 1.1 clean 4288576c16 xen/scripts: Fix regex syntax warnings with Python 3.12 a1746cd443 x86/spec-ctrl: Support for SRSO_U/S_NO and SRSO_MSR_FIX 0d729221ab xen/arch/x86: make objdump output user locale agnostic 6e1036b197 tools: fix typo: subsytem -> subsystem c6d0d89c30 docs/man: fix typo: hexidecimal -> hexadecimal 5becb6bbad docs/man/xen-vbd-interface.7: Provide properly-formatted NAME section 6419020270 CHANGELOG: Mention LLC coloring feature on Arm 869aeb7f02 tools: Introduce a xc_xenver_buildid() wrapper 75f9160762 tools: Introduce a non-truncating xc_xenver_cmdline() 1b421d52b2 tools: Introduce a non-truncating xc_xenver_changeset() 6625d581ec tools: Introduce a non-truncating xc_xenver_capabilities() 504ea442e3 tools: Introduce a non-truncating xc_xenver_extraversion() 583a0fb0fa tools/libxc: Move xc_version() out of xc_private.c into its own file 3d94cc8809 xen/version: Misc style fixes 8eed14bf9d xen/version: Fold build_id handling into xenver_varbuf_op() e3bb1b6525 xen/version: Introduce non-truncating deterministically-signed XENVER_* subops 7cf44c61c5 xen/version: Calculate xen_capabilities_info once at boot 075e7e35db MAINTAINERS: Add myself as maintainer for NXP S32G3 294faa3760 SUPPORT.md: Describe SCMI-SMC layer feature f09ee5f550 CHANGELOG.md: Add NXP S32G3 and SCMI-SMC layer support mentions 78b0b025be xen/arm: platforms: Add NXP S32G3 Processors config a767076c03 xen/arm: vsmc: Enable handling SiP-owned SCMI SMC calls 3e322bef8b xen/arm: firmware: Add SCMI over SMC calls handling layer e7a80636f1 xen/arm: add cache coloring support for Xen image f376ff0e4f xen/arm: make consider_modules() available for xen relocation 0975bab5ea xen/arm: add Xen cache colors command line parameter 95debe51a9 xen: add cache coloring allocator for domains 5948dc1675 xen/arm: add support for cache coloring configuration via device-tree 748bd725fb tools: add support for cache coloring configuration 6985aa5e0c xen: extend domctl interface for cache coloring 6cdea3444e xen/arm: add Dom0 cache coloring support 02975cc383 xen/arm: permit non direct-mapped Dom0 construction f4985fce6f xen/arm: add initial support for LLC coloring on arm64 44dd6d4a12 xen/common: add cache coloring common code 8089e4ba44 automation: Pin down CONFIG_QEMU_PLATFORM for RISC-V's randconfig job e547f730e8 xen/ioreq: Fix check for CONFIG_ARCH_VCPU_IOREQ_COMPLETION e6472d4668 tools/xg: increase LZMA_BLOCK_SIZE for uncompressing the kernel dd05f7c8dd x86/hvm: Use constants for x86 modes d17b7562d4 tools/libxg: Don't gunzip the guests initrd 2e22a8ba29 x86/boot: Use printk_once() instead of opencoding it 63ebfcca04 x86/sched: Drop unused includes from credit2.c 188d568db8 xen/sched: Untangle credit2 vs cpu_nr_siblings() 9a17d5c7c9 xen/riscv: relocating and unflattening host device tree 0a510b8f81 xen/riscv: implement prereq for DTB relocation 81d80f44ef xen/riscv: implement data and instruction cache operations ec0ed39265 xen/riscv: update layout table in config.h b527a27e17 xen/page_alloc: introduce preserved page flags macro b359d38013 tools: add a dedicated header file for barrier definitions 826a9eb072 tools: Fix regex syntax warnings with Python 3.12 f9a2e86f21 x86/CET: Support cet=<bool> on the command line 171cb318de MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade 631f535a3d xen: update ECLAIR service identifiers from MC3R1 to MC3A2. d95703eb83 docs/guest-guide: Discuss when not use a hypercall page f38fd27c4c x86/io-apic: prevent early exit from i8259 loop detection 4cde11cdae xen/arm: Check for Static Heap feature when freeing resources df8a0eec1c xen/arm: ffa: Add indirect message support e6794b683b xen/arm: ffa: Remove per VM notif_enabled 42b6f47132 xen/arm: ffa: move message function into ffa_msg.c 6dceb1378d xen/arm: ffa: Transmit RXTX buffers to the SPMC 2833aa172f xen/arm: ffa: Use bit 15 convention for SPs 8a932b91aa xen/arm: ffa: Rework partition info get 2f9f240a5e xen/arm: ffa: Fine granular call support da07df5558 xen/arm: ffa: Fix version negotiation 1a20f862f3 xen/arm: ffa: Rework feature discovery cf15d85707 xen/arm: ffa: Rework firmware discovery 2e955d2554 tools/misc: Drop xensymoops 58ba55959a xen: add a domain unique id to each domain 5793b84c5e xen/xsm: make getdomaininfo xsm dummy checks more stringent df98c03864 xen/riscv: add {set,clear}_fixmap() functions for managing fixmap entries f5bf0d100b xen/riscv: reorder includes in asm/page.h alphabetically 0eb8b71604 xen/riscv: add destroy_xen_mappings() to remove mappings in Xen page tables 89dca886ac arm/domain_build: Make find_unallocated_memory() more generic a974366f7a MAINTAINERS: add Anthony, Michal, Roger to THE REST bf8a209915 tools/ocaml: Specify rpath correctly for ocamlmklib 13df44f8a1 CHANGELOG: Mention xl suspend/resume bec5b2447c x86: p2m-pod: address violation of MISRA C Rule 2.1 d636e0ed91 x86/FPU: make vcpu_reset_fpu() build with old gcc 1645bb7997 xen/arm: Move setup_frametable_mappings to arm/mmu c8e59af7ad xen/arm: Use vmap_contig instead of __vmap where it's possible b772a9f517 arm/setup: Move MMU specific extern declarations to mmu/setup.h 57fe471f56 common/vmap: Fall back to simple allocator when !HAS_VMAP d39a92aefe xen/mmu: enable SMMU subsystem only in MMU 214f9cc67b xen/mpu: Map early uart when earlyprintk on dc8e1b33a5 tools/xl: add suspend and resume subcommands 5a455a52ea bootfdt: Add missing trailing commas in BOOTINFO_{ACPI,SHMEM}_INIT 28301682f4 libs/guest: Fix migration compatibility with a security-patched Xen 4.13 0cc8845fb9 CI: Update to FreeBSD 14.2 ee7edb0d29 xen/arm: mpu: Implement a dummy enable_secondary_cpu_mm 5423a08eae xen/arm: mpu: Enable MPU 868fe87c46 xen/arm: mpu: Create boot-time MPU protection regions b30bad3832 xen/arm32: Get rid of __memzero() 126b0a6e53 xen/Kconfig: livepatch-build-tools requires debug information 4191619e08 libxl: extend IGD check 3df8812f90 x86emul: correct VPBROADCASTMW2D predicate testing 4c5d9a01f8 x86emul: MOVBE requires a memory operand 6b8c85872e xl: Keep monitoring suspended domain 7bd8d37897 drivers/char: rename arm-uart.c to uart-init.c a14593e399 xen/device-tree: Allow region overlapping with /memreserve/ ranges 4a06cc7178 xsm/flask: missing breaks, MISRA rule 16.4 738df43521 x86/setup: fix typo in acpi=off description bf37973929 xen/riscv: finalize boot allocator and transition to boot state 6b71d4f849 xen/riscv: initialize the VMAP_DEFAULT virtual range e6cf43717d xen/riscv: introduce setup_mm() c8e3e39085 page-alloc: make scrub_one_page() static a24f1c042d libxl/ACPI: bound RSDP allocation 4e0b1adff0 libxl/ACPI: don't hard-code guest page size fcf91ce9de x86/pv: don't populate the GDT/LDT L3 slot at domain creation 8fe330a4da xen/pci: remove logic catering to adding VF without PF 931eaa21cd x86/msi: fix locking for SR-IOV devices 4e18a39056 xen/pci: introduce PF<->VF links b661fe107d build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS 9ea9c1c49b docs/sphinx: Refresh config for newer Sphinx 233f03dd83 docs/sphinx: Fix FUSA indexing 2e853c1920 xen/common: Move gic_dt_preinit() to common code 722d93bc91 x86/pvh: also print hardware domain pIRQ limit for PVH 5c56361c61 x86/irq: fix calculation of max PV dom0 pIRQs ca5c01513a xen/arm32: mm: Rename 'first' to 'root' in init_secondary_pagetables() c0bf8816c9 xen/bitops: Fix break usage in for_each_set_bit() loop f52004b20e x86/ucode: Only rescan features on successful microcode load 365f408339 x86/boot: Load microcode much earlier on boot e0058760a0 MISRA: Mark Rule 8.4 as clean c74230bdce x86/mce: Compile do_mca() for CONFIG_PV only 5cc971a4bf CI: New stage "containers" to rebuild some containers a231538acd CI: Define XEN_REGISTRY variable 5726d8e5ef CI: Remove deprecated "only:variables" in favor of "rules:if" 96efb13459 bootfdt: Unify early printing of memory ranges endpoints 22d9e75944 misra: increase identifiers length to 63 and align doc with ECLAIR config cd7cc5320b x86/boot: add start and size fields to struct boot_module 6308301208 x86/pmstat: deal with Misra 8.4 violations a1ed107f59 x86/boot: Introduce boot-helpers.h 429840a81e xen/bootinfo: Include declaration for fw_unreserved_regions() 488579e956 x86/msi: fix Misra Rule 20.7 in msi.h 9e8c97f3eb x86/msi: prune unused macros 3ac41c60e8 x86/mm: fix IS_LnE_ALIGNED() to comply with Misra Rule 20.7 3128d7248f x86/boot: introduce module release 891f077a71 xen/arm: use domain memory to allocate p2m page tables 88c40dc108 x86/boot: convert domain construction to use boot info 8417b4b0bb x86/emul: Adjust get_stub() to avoid shadowing an outer variable b1b657afa9 x86/ucode: Drop MIS_UCODE and microcode_match_result 91afda4a34 x86/ucode: Fix cache handling in microcode_update_helper() acd9bf6f89 x86/ucode: Remove the collect_cpu_info() call from parse_blob() b1ebb6461a x86/mm: fix alignment check for non-present entries d2bbb0d455 xen/multicall: Change nr_calls to uniformly be unsigned long d2c214ede0 x86/trampoline: Rationalise the constants to describe the size 5c9b7a6659 x86/trampoline: Document how the trampoline is laid out 7d73c6f196 x86/trampoline: Simplify the wakeup_stack checks 04a77fb843 x86/trampoline: Check the size of the permanent trampoline at link time 74376e015c xen/multiboot: Make headers be standalone 5022dfe513 xen/earlycpio: Fix header to be standalone 41c8049608 x86/mm: ensure L2 is always freed if empty 73194b5701 x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings() 5b52e1b043 x86/mm: skip super-page alignment checks for non-present entries 97fb6fcf26 x86/mm: introduce helpers to detect super page alignment 939a9e800c x86emul: avoid double memory read for RORX d5febe7f64 automation/eclair: tag Rule 16.3 as clean 3d1db2942f x86/emul: use pseudo keyword fallthrough 5bf8f2f5cc x86/emul: auxiliary definition of pseudo keyword fallthrough 1179d51dcb x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode 5b8780869e x86emul: correct EFLAGS testing for BMI1/BMI2 380b32a476 x86/e820: Fix parameter names of reserve_e820_ram()/e820_change_range_type() 5c8b638c2a x86/apic: Include genapic.h in delivery.c 38febce5b3 x86/ucode: Rework Intel's microcode_update_match() 39360c38c3 x86/ucode: Rework AMD's microcode_fits() 502478bc1d x86/ucode: Fold microcode_update_cpu() and fix error handling 41314ccee8 x86/ucode: Don't use microcode_update_cpu() in early_microcode_load() d3da79e1d1 drivers/char: Use sub-page ro API to make just xhci dbc cap RO 8847d6e23f x86/mm: add API for marking only part of a MMIO page read only 64d2290cf9 mm: adjust _xvrealloc() declaration 0bfe567b58 libxl: Use zero-ed memory for PVH acpi tables 7d5781d526 x86/boot: Setup correctly fs segment for bogus_real_magic 9ef78a614d x86/trampoline: Change type of trampoline_phys to uint32_t c839c8c3fc x86/wakeup: Fix code generation for bogus_saved_magic d4829a20ad x86: Drop mach_mpspec.h b80c535794 x86: Drop mach-default/bios_ebda.h cd7b518680 x86: Move mach-default/io_ports.h to asm/io-ports.h fc147fec19 x86: Move mach-default/irq_vectors.h to asm/irq-vectors.h b212fefc04 x86: Delete mach_apic.h 5eb9c14324 x86/mach-apic: Move the genapic wrappers to genapic.h b44d96ecb3 x86/mach-apic: Drop set_apicid() bdb509c382 x86/mach-apic: Drop check_apicid_present() 9aa1e60b90 x86/mach-apic: Drop check_apicid_used() bffc52ea26 x86/mach-apic: Drop ioapic_phys_id_map() a384eef9e3 x86/mach-apic: Drop apic_id_registered() 0a51e5e17b x86/mach-apic: Move generic_*_probe() declarations into genapic.h 7f81e81774 x86: Drop includes of mach_apic.h 19c3016a8a VT-d: Drop includes of mach_apic.h 718400a54d xen/x86: prevent addition of .note.gnu.property if livepatch is enabled c8754cbc1d CHANGELOG: Add note about xAPIC destination mode change 3eda1f8912 iommu/ipmmu-vmsa: Add Renesas R8A779G0 (R-Car V4H) support 6c88e35fa1 x86/boot: Fix bootinfo.h to be standalone c62eed3ee6 x86/trampoline: Collect other scattered trampoline symbols 75035c386e x86/boot: add cmdline_pa to struct boot_module ccdb7e08fd x86/boot: move kextra into boot info 6320f08206 x86/boot: move headroom to boot modules 37bd4e90bd NUMA: Introduce NODE_DATA->node_present_pages (RAM) 65ef8cd5c0 x86/xstate: Remove stale assertions in fpu_x{rstor,save}() 00e074834e x86emul/test: drop an undue conditional 1ceabff115 CI: Refresh the Debian 12 x86_32 container 44b742de09 CI: Refresh the Debian 12 x86_64 container 2c83678e78 CI: Don't use -y with apt-get update 4e7863e82d x86/boot: introduce boot module flags 74af2d9827 x86/boot: eliminate module_map 5899b749b8 x86/boot: introduce boot module types 282bd66cee x86/ucode: Fold early_update_cache() into its single caller 59d81c89cc x86/ucode: Drop ucode_mod and ucode_blob 414725d0ee x86/ucode: Use bootstrap_unmap() in early_microcode_load() c25c964634 x86/ucode: Enforce invariant about module selection c05ac8fe30 x86/boot: Explicitly list .{sym,shstr,str}tab in build32.lds.S 1580813006 x86/boot: Uses nm command instead of map file to get symbols e75b327c45 x86/boot: Fix intermediate file names to generate 32 bit code c6b84ccf8d CI: Fix package installation for Coverity run 921a2ba5c5 x86/ucode: Move the CPIO path string into microcode_ops 3372f8a361 x86/ucode: Fold microcode_grab_module() into its single caller 28d347041f x86/ucode: Fold early_microcode_update_cpu() into its single caller 54047cedab x86/ucode: Break early_microcode_load() out of early_microcode_init() 29a4fbf60a x86/ucode: Turn microcode_init_cache() into a presmp_initcall a7c7c3f642 tools/libxl: remove usage of VLA arrays 86001b3970 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping babe11b46c CI: Drop alpine-3.18-rootfs-export and use test-artefacts d736b6eb45 xen/arm: mpu: Define Xen start address for MPU systems 0388a5979b xen/arm: mpu: Introduce choice between MMU and MPU b75dee16b3 xen/arm: Skip initializing the BSS section when it is empty a6d71d59ca SUPPORT.md: Argo: Upgrade status to Tech Preview e27436fba7 CI: Fix cppcheck parallel build more 7a88871aac Revert "x86/mm: ensure L2 is always freed if empty" 2478bed83f Revert "scripts: Fix git-checkout.sh to work with branches other than master" a6dba2761e x86/mm: ensure L2 is always freed if empty c01855bec5 x86/msi: harden stale pdev handling bd01fffef2 types: replace remaining use of __u64 cdbaca6faa byteorder: replace __u64 517cf3dbfd types: replace remaining uses of __u32 0d87ca0237 x86: modernize swab64() 60db1b1ccd byteorder: replace __u32 61ea18e39a byteorder: replace __u16 3eb037fbbc MAINTAINERS: minor file line update eb4042e3c5 Config: Update MiniOS revision c554ec124b scripts: Fix git-checkout.sh to work with branches other than master 9a2a50d5de x86/mm: Use standard C types for sized integers aa4ad424f0 x86/setup: Make setup.h header self contained fa2d831803 x86/cpu-policy: Extend the guest max policy max leaf/subleaves bb7296d77f automation/eclair: monitor Rules 11.2 and 18.1 and update configuration 6d7c26a005 automation: add x86_64 test (linux argo) 56bd76925e x86/boot: Use trampoline_phys variable directly from C code d5a73cdc6b x86/boot: Use boot_vid_info variable directly from C code db8acf31f9 x86/boot: Reuse code to relocate trampoline aa9045e771 x86/boot: Rework how 32bit C is linked/included for early boot fa1463cecf x86/boot: Explain how discard_initial_images() works 83892f6a12 x86/boot: Drop the mbi and mod pointers in __start_xen() d03dfab66a x86/boot: Convert mod[] to bi->mods[] in __start_xen() 3fd82e09d0 x86/boot: Introduce bootstrap_map_bm() to map boot_module's 0ba5392e70 x86/boot: Introduce bootstrap_unmap() 980579291d x86/boot: Drop initial_images pointer 2802b77abe x86/ucode: Explain what microcode_set_module() does 9cbf61445c xen/earlycpio: Drop nextoff parameter a974725a87 x86/boot: Remove the mbi_p parameter from __start_xen() 6cf0aaeb8d x86/boot: Fix XSM module handling during PVH boot 8ddf63a252 x86/boot: Fix microcode module handling during PVH boot 89f855d564 x86/boot: Add a temporary module_map pointer to boot_image be84e7fe58 x86/boot: convert consider_modules to struct boot_module 2c3294775e x86/boot: Simplify size calculations in move_memory() c960871c7c x86/boot: Simplify address calculations in move_memory() e33e18df05 x86/boot: Convert move_memory() to use bootstrap_map_addr() 70262d5940 x86/emul: address violations of MISRA C Rule 16.3 79560b68a1 x86/pv: remove unlikely() from BUG_ON() condition in pv_map_ldt_shadow_page() 0fe607b2a1 x86/boot: Fix PVH boot during boot_info transition period b837d02163 CI: Add {adl,zen3p}-pvshim-* tests 3be3ae0770 CI: Rework domU_config generation in qubes-x86-64.sh 6685a129c7 CI: Minor cleanup to qubes-x86-64.sh 49a068471d x86/fpu: Rework fpu_setup_fpu() uses to split it in two edb48e7645 x86/fpu: Combine fpu_ctxt and xsave_area in arch_vcpu 7cf6e073e4 x86/boot: introduce struct boot_module 73785a4c77 x86/boot: Fix PVH boot following the start of the MBI->BI conversion e9f227685e xen/arm: Add NXP LINFlexD UART early printk support 6ba3b1f828 xen/arm: Add NXP LINFlexD UART Driver 0710b38921 Update deprecated SPDX license identifiers 4c21b6affb x86/boot: Further simplify CR4 handling in dom0_construct_pv() 6e085825cb CI: Refresh and upgrade the Fedora container d84f6870fe ocaml/libs: Fill build failure due to unused variable in ocaml macro 0bcf66d05a automation: Fix URL to the gitlab container registry documentation 572010c552 x86/boot: split bootstrap_map_addr() out of bootstrap_map() a285d2ac2e x86/boot: move mmap info to boot info 29aaded97d x86/boot: move cmdline to boot info b438c5fbf4 x86/boot: move boot loader name to boot info 038826b61e x86/boot: move x86 boot module counting into a new boot_info struct 081683ea57 xen/arm: dom0less: cope with missing /gic phandle 1e81d2df4f device-tree: Move dt-overlay.c to common/device-tree/ b3ca3caaf3 x86emul/test: drop Xeon Phi S/G prefetch special case 09d22fe15c x86emul/test: correct loop body indentation in evex-disp8.c:test_one() 330d4e6250 docs: update documentation of reboot param 47990ecef2 x86/boot: Improve MBI2 structure check f4c3300d88 x86/boot: Align mbi2.c stack to 16 bytes 3f6ee3db2e xen/public: add comments regarding interface version bumps 93af5cc4df x86/boot: Prep work for 32bit object changes 2defb54490 iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU 8c858d04ac xen/riscv: parse and handle fdt command line de709f7647 xen/riscv: initialize bootinfo from dtb 028148788f xen/vpci: address violations of MISRA C Rule 16.3 ed896312f2 xen/common: move device initialization code to common code af2a1339c4 xen/riscv: add section for device information in linker script 7a87b5e05c xen/ppc: add section for device information in linker script 31f31b624a xen/arm: use {DT,ACPI}_DEV_INFO for device info sections 083344a05d xen: define ACPI and DT device info sections macros 17d32cf2ec xen: introduce DECL_SECTION_WITH_LADDR 542ac112fc xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init() 76a54badf8 stubdom: use real lib dependencies for xenstore stubdoms 45333e2888 tools/xenstored: remove unneeded libxenguest reference 906cee8718 config: update Mini-OS commit b2c7d7070d dt-overlay: Print overlay I/O memory ranges in hex 239b0c8f06 dt-overlay: Ignore nodes that do not have __overlay__ as their subnode b32d24bcd6 dt-overlay: Support target-path being root node 81862825e8 dt-overlay: Remove ASSERT_UNREACHABLE from add_nodes() 656ac422c4 device-tree: Remove __init from unflatten_dt_alloc() 95f2a5656e dt-overlay: Fix NULL pointer dereference b5b9420334 stubdom: add fine grained library config items to Mini-OS configs a592c98f94 ocaml/libs: Remove xsd_glue_dev package, package plugin_interface_v1.a c73adc9cf8 Flask: replace uses of __u32 2b49ef4503 xen/riscv: register Xen's load address as a boot module 59ef5d2a95 xen/riscv: switch LINK_TO_LOAD() to virt_to_maddr() a11b3926c4 xen/riscv: implement virt_to_maddr() 4dec51ca72 x86: restore semicolon after explicit DS prefix 439f3e6757 xen: Update header guards - ARGO eb48045d74 x86/vlapic: Move lapic migration checks to the check hooks e305256e69 CI: Stop building QEMU in general 3b79d825b5 MAINTAINERS: Add myself as a reviewer for RISC-V 6b80ec957c types: replace remaining uses of s64 9d278c8c6c MAINTAINERS: add myself as maintainer for arm tee 2f413e22fa x86/msr: add log messages to MSR state load error paths dcbf8210f3 x86/APIC: Switch flat driver to use phys dst for ext ints b315293130 xen: Update header guards - RISC-V 6bbcb97ba4 xen: Update header guards - I/O MMU 964c9568ea xen: Update header guards - Intel TXT c95cd5f9c5 x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs 908c1b5efa docs: fusa: Replace VM with domain 7d83c392c7 xen/pci: address a violation of MISRA C Rule 16.3 7f743fac94 x86/emul: add defensive code 2e0b545b84 ioreq: don't wrongly claim "success" in ioreq_send_buffered() 011814bd45 x86/boot: Rationalise .gitignore 9ab0496350 .gitignore: Remove not generated files 16a81486c4 automation: use python-3.11 in Leap container c1035b0463 CI: Drop bin86/dev86 from archlinux container 79ade905b9 x86: Use standard C types in multiboot2.h header 2d6a835b05 build: move xenlibs-dependencies make definition to uselibs.mk c66c134175 stubdom: explcitly add libc and lwip Mini-OS config options e07ae82853 stubdom: swtich to local .gitignore file 29555668b5 x86/dpci: do not leak pending interrupts on CPU offline a7201c0211 CODING_STYLE: header file guard naming rules ceefa8c039 efi: address violation of MISRA C Rule 16.3 6b20755c24 automation/eclair: tag Rule 13.6 as clean a0094dc136 xen/gnttab: address a violation of MISRA C Rule 13.6 6f621f23bc EFI: address a violation of MISRA C Rule 13.6 1223375d8b CI: Fix builds following qemu-xen update bcce5a6b62 automation: shorten the timeout for smoke tests 2d1c673bae automation: add a smoke test for xen.efi on X86 636e66b143 automation: preserve built xen.efi 1eeb7c3379 x86: Introduce X86_ET_* constants in x86-defns.h 7fd80df2bf x86/boot: Convert remaining uses of the legacy ALIGN d82e0e094e automation: introduce TEST_TIMEOUT_OVERRIDE 163338e6fb x86/boot: Don't use INC to set defaults f75780d26b xen: move per-cpu area management into common code eb21ce14d7 x86/boot: Rewrite EFI/MBI2 code partly in C 444cb9350f stubdom: Fix newlib build with GCC-14 41190d2ceb x86/kexec: Separate code and data into different cache lines b102c9f1ce x86: move ENTRY(), GLOBAL(), and ALIGN eaa7a72eda x86: convert dom_crash_sync_extable() annotation 373d93cfce x86/kexec: convert entry point annotations a8c8d6c529 x86/ACPI: annotate assembly function/data with type and size 1d199e83c7 VMX: convert entry point annotations bcd932b5b2 xen/riscv: introduce early_fdt_map() 557b7f1b9a xen/riscv: page table handling 3a38cc2bd7 x86: prefer RDTSCP in rdtsc_ordered() f9ce66ea9d docs: fusa: Add Assumption of Use (AOU) 633ee8b2df x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour 8a6c495d72 x86/pv: Handle #PF correctly when reading the IO permission bitmap 7429e1cc07 x86/pv: Rework guest_io_okay() to return X86EMUL_* 66878a8b75 x86/MSR: improve code gen for rdmsr_safe() and rdtsc() b42cf31d11 x86: use alternative_input() in cache_flush() db70a52f75 iommu/amd-vi: make IOMMU list ro after init b06e76db7c x86/traps: Re-enable interrupts after reading cr2 in the #PF handler 67a8e5721e x86/PV: simplify (and thus correct) guest accessor functions 94423b8f75 drivers/video: Convert source files to UTF-8 f97f885c71 tools: Add new function to do PIRQ (un)map on PVH dom0 b93e5981d2 tools: Add new function to get gsi from dev d6e9a2aab3 x86/irq: allow setting IRQ permissions from GSI instead of pIRQ c353c47757 xen/riscv: introduce and initialize SBI RFENCE extension b6c8f34a90 xen/riscv: introduce functionality to work with CPU info f89e1a1702 xen/riscv: introduce asm/pmap.h header 13684f539e xen/riscv: set up fixmap mappings f9e69c266e xen/riscv: allow write_atomic() to work with non-scalar types dee9e4b1cc x86/intel: optional build of PSR support 34d4227e6a x86: introduce x86_seg_sys 457052167b blkif: Fix a couple of typos e9a0101dde blkif: Fix alignment description for discard request 0857c75e6f x86/boot: Refactor BIOS/PVH start a184ac74f5 x86/alternatives: build time check feature is in range aa5a06d5d6 x86/alternatives: do not BUG during apply fa49f4be41 xen/livepatch: do Xen build-id check earlier 86d09d16dd xen/livepatch: simplify and unify logic in prepare_payload() 8c81423038 xen/livepatch: drop load_addr Elf section field 3a28da8f4d xen/livepatch: remove useless check for duplicated sections b083121c94 x86/boot: Initialise BSS sooner 1aec9a4ba7 changelog: add note about blkif protocol fixes b81ea162ef x86/defns: Fix typo in comment "Porection" -> "Protection" 11eb4e2969 xen: introduce common macros for per-CPU sections defintion 512ac41aa6 xen/efi: efibind: Fix typo in comment 8752ad83e7 xen/ucode: Make Intel's microcode_sanity_check() stricter 0416f1f66a xen/ucode: Improve commentary for parsing AMD containers 9b0d2465c8 x86/APIC: Remove x2APIC pure cluster mode c42d9ec61f x86/vLAPIC: prevent undue recursion of vlapic_error() f7f42accbb x86/efi: Use generic PE/COFF structures 6a039b0500 x86/cpufeature: Reposition cpu_has_{lfence_dispatch,nscb} 95c3ae591c tools/libxs: Style consistency improvements b1642aaea2 x86: enable long section names for xen.efi c4344ecc5a x86/mwait-idle: add dependency on general Intel CPU support e1c8a3dc8a x86/boot: Drop stale comment about zeroing the stack f4c7663d19 xen/riscv: use {read,write}{b,w,l,q}_cpu() to define {read,write}_atomic() b64f62fcbd ubsan: use linux-compat.h 7298e63519 docs/misra: add R17.2 and R18.2 0843b40c47 docs: fusa: Add requirements for emulated uart 03400a2a26 automation/eclair: add deviation for MISRA C 2012 Dir 4.10 ef3b4768b3 arm/smmu: Complete SMR masking support 6279b9a3be xen/arm: Enable workaround for Cortex-A53 erratum #1530924 4e1a333745 arm: Drop deprecated early printk platform options a8bf14f6f3 xen/ucode: Fix buffer under-run when parsing AMD containers 4e23c86bd8 xen/keyhandler: Move key_table[] into __ro_after_init 08ffd8705d x86/hvm: Simplify stdvga_mem_accept() further 42968684e5 ARM/cache: Drop legacy __read_mostly/__ro_after_init definitions ec185ec239 x86/mm: undo type change of partial_flags 221f2748e8 blkif: reconcile protocol specification with in-use implementations eb97f87919 types: replace remaining uses of s32 5ffe6d4a02 types: replace remaining uses of s16 6e7f7a0c16 xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build 40f5c7e138 x86/HVM: drop .complete hook for intercept handling b180a50326 x86/HVM: drop stdvga's "lock" struct member 3beb4baf2a x86/HVM: drop stdvga's "vram_page[]" struct member 86c03372e1 x86/HVM: drop stdvga's "{g,s}r_index" struct members 7aba44bdd7 x86/HVM: drop stdvga's "sr[]" struct member b16c0966a1 x86/HVM: drop stdvga's "gr[]" struct member 89108547af x86/HVM: remove unused MMIO handling code b740a9369e x86/HVM: drop stdvga's "stdvga" struct member eb7cd0593d x86/HVM: properly reject "indirect" VRAM writes 3d65f1c072 x86emul: support CMPccXADD 582fade2a9 automation/eclair_analysis: address violation of Rule 20.7 738db54711 xen/bitmap: remove redundant deviations 3c5c9743ca automation/eclair: update configuration of Rule 20.7 33888e7aaa automation/eclair_analysis: deviate linker symbols for Rule 18.2 4b3f30ea30 automation/eclair_analysis: fix MISRA Rule 20.7 regression in self-tests.h 035baa203b x86/hvm: allow {,un}map_pirq hypercalls unconditionally 53b7246bdf x86/HVM: drop stdvga's "cache" struct member 2b24c090d1 x86/mmcfg: address violation of MISRA C Rule 16.3 f6cc23e234 x86/mm: address violations of MISRA C Rule 16.3 6f5b873600 x86/monitor: address violation of MISRA C Rule 16.3 c4fe5296e6 x86/hypercall: address violations of MISRA C Rule 16.3 a42c3ec62f x86/vm_event: address violation of MISRA C Rule 16.3 b3173a25ba x86/time: address violations of MISRA C Rule 16.3 76529a1ce1 x86/psr: address violation of MISRA C Rule 16.3 09217c2618 x86/APIC: address violation of MISRA C Rule 21.2 233ee468bb x86/cpufreq: address MISRA Rule 7.3 violation cb4f22884e x86/time: introduce probing logic for the wallclock 6da090b4b7 x86/time: pull cmos_rtc_probe outside of function and rename 5b4664b9e4 x86/mm address violations of MISRA C:2012 Rule 5.3 3502c033f6 arm/gicv3: Fix ICH_VTR_EL2.ListRegs mask c23571fe31 automation: fix xilinx test console settings Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to RELEASE-4.19.1-tipBruce Ashfield2025-01-172-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version RELEASE-4.19.1-9-g8dd897e691, which comprises the following commits: 8dd897e691 MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade 8b584c97f8 xen: update ECLAIR service identifiers from MC3R1 to MC3A2. c41c22bf8e x86/io-apic: prevent early exit from i8259 loop detection fbe3ec72dc tools/ocaml: Specify rpath correctly for ocamlmklib 60573721c5 libs/guest: Fix migration compatibility with a security-patched Xen 4.13 475511a467 xen/Kconfig: livepatch-build-tools requires debug information 3a9e5a93e6 x86emul: MOVBE requires a memory operand 5d61bc0585 update Xen version to 4.19.2-pre 6f7af8383f xen/device-tree: Allow region overlapping with /memreserve/ ranges ccf4008467 update Xen version to 4.19.1 5d4a29158d x86/msi: fix locking for SR-IOV devices f67d770d86 xen/pci: introduce PF<->VF links 54452a3df9 build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS 7eb2df50a6 x86/pvh: also print hardware domain pIRQ limit for PVH 755b136aa4 x86/irq: fix calculation of max PV dom0 pIRQs 6a0ef94a8f x86/mm: ensure L2 is always freed if empty 18ea86302e x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings() f2e41f075d x86/mm: skip super-page alignment checks for non-present entries 0560ce8243 x86/mm: introduce helpers to detect super page alignment e461f0cd14 x86emul: avoid double memory read for RORX 7da6997e46 x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode 0560252cbd x86/cpu-policy: Extend the guest max policy max leaf/subleaves bb62ed831c x86/alternatives: do not BUG during apply 36789fa096 xen/livepatch: do Xen build-id check earlier 60ea799246 xen/livepatch: simplify and unify logic in prepare_payload() 8fa1ee4053 xen/livepatch: drop load_addr Elf section field af7423e78d x86/boot: Preserve the value clobbered by the load-base calculation 2d02d54cce tools/ocaml: Fix the version embedded in META files 2914b2b19c tools/ocaml: Drop the OCAMLOPTFLAG_G invocation f7b4e4558b tools/ocaml: Fix OCaml libs rules 04442e130a tools/ocaml: Remove '-cc $(CC)' from OCAMLOPTFLAGS 5231f97f24 x86/shutdown: change default reboot method preference fa1f4752eb x86/viridian: Clarify some viridian logging strings 38cbe0a62e tools/libxs: Stop playing with SIGPIPE 823abf0955 tools/libxs: Use writev()/sendmsg() instead of write() c991b585c4 tools/libxs: Track whether we're using a socket or file 97fded1c09 tools/libxs: Rework xs_talkv() to take xsd_sockmsg within the iovec dd2494735c tools/libxs: Fix length check in xs_talkv() 4abfe60f06 tools/misc: xen-hvmcrash: Inject #DF instead of overwriting RIP 8567eefe37 xen/arm64: entry: Actually skip do_trap_*() when an SError is triggered 251a949648 xen/x86: prevent addition of .note.gnu.property if livepatch is enabled 1406f07aa1 tools/libxl: remove usage of VLA arrays c86ec8e156 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping 267796fd04 libxl: Use zero-ed memory for PVH acpi tables ad77081ac6 x86/hvm: Simplify stdvga_mem_accept() further 1cb4e0a5fe x86/HVM: drop stdvga's "lock" struct member 7b2df91a0e x86/HVM: drop stdvga's "vram_page[]" struct member 77cb6587d4 x86/HVM: drop stdvga's "{g,s}r_index" struct members 04f1c5e6f7 x86/HVM: drop stdvga's "sr[]" struct member 2334fb4fef x86/HVM: drop stdvga's "gr[]" struct member 2ac4917c24 x86/HVM: remove unused MMIO handling code 92667bef14 x86/HVM: drop stdvga's "stdvga" struct member ed8105c364 x86/HVM: drop stdvga's "cache" struct member c92f26973d CI: Refresh the Debian 12 x86_32 container 6ac45f72a3 CI: Refresh the Debian 12 x86_64 container 32e9c5de2e CI: Drop alpine-3.18-rootfs-export and use test-artefacts 01951e1a05 CI: Add {adl,zen3p}-pvshim-* tests 7e0ba9a387 CI: Rework domU_config generation in qubes-x86-64.sh 1dd4b60de1 CI: Minor cleanup to qubes-x86-64.sh 76f180625b CI: Stop building QEMU in general e9b2124fe8 automation: shorten the timeout for smoke tests 811637696b automation: add a smoke test for xen.efi on X86 d1c774c17a automation: preserve built xen.efi b68a7b9b29 automation: introduce TEST_TIMEOUT_OVERRIDE 7b3b33efab automation: fix xilinx test console settings 9c17da3ea0 automation: use expect utility in xilinx tests ed130bef93 automation: fix false success in qemu tests 5efbc09cd7 automation: update xilinx test scripts (tty) 59ac149af9 automation: restore CR filtering cbea75a3cd automation: add default QEMU_TIMEOUT value if not already set a0e776530c automation: add x86_64 xilinx smoke test 3ba995ab8d CI: Resync .cirrus.yml for FreeBSD testing 47cdc5fe71 Config: Update MiniOS revision fadbc7e32e x86/boot: Fix XSM module handling during PVH boot 8e157210c0 x86/boot: Fix microcode module handling during PVH boot eec09073ad iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU a756c242ea xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init() 05292f914f x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs d15e9fa3c8 ioreq: don't wrongly claim "success" in ioreq_send_buffered() 8ebd6b066d x86/dpci: do not leak pending interrupts on CPU offline 8eb2fdbc5b stubdom: Fix newlib build with GCC-14 8321aa3db8 x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour 0cfbae3f86 x86/pv: Handle #PF correctly when reading the IO permission bitmap f879df5eb4 x86/pv: Rework guest_io_okay() to return X86EMUL_* 8f9dad658a x86/traps: Re-enable interrupts after reading cr2 in the #PF handler 950e57e0ce x86/PV: simplify (and thus correct) guest accessor functions 84d8fbd883 xen/ucode: Make Intel's microcode_sanity_check() stricter 2c61ab4071 xen/ucode: Fix buffer under-run when parsing AMD containers 933416b139 blkif: reconcile protocol specification with in-use implementations d0ea9b319d xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build ec3999e205 x86/HVM: properly reject "indirect" VRAM writes 78d412f8bc x86emul/test: fix build with gas 2.43 d625c4e9fb x86: fix UP build with gcc14 3ceb79ceab SUPPORT.md: split XSM from Flask c18635fd69 libxl: Fix nul-termination of the return value of libxl_xen_console_read_line() ee826bc490 Arm64: adjust __irq_to_desc() to fix build with gcc14 6e96dee93c x86/HVM: correct partial HPET_STATUS write emulation 743af91672 x86/dom0: disable SMAP for PV domain building only 404fb9b745 x86/x2APIC: correct cluster tracking upon CPUs going down for S3 a0d6b75b83 x86emul: set (fake) operand size for AVX512CD broadcast insns 1e68200487 x86emul: always set operand size for AVX-VNNI-INT8 insns cb6c3cfc5f x86/pv: Address Coverity complaint in check_guest_io_breakpoint() b74a5ea839 x86/pv: Fix merging of new status bits into %dr6 de924e4dba x86/pv: Introduce x86_merge_dr6() and fix do_debug() e2f29f7bad x86emul: correct #UD check for AVX512-FP16 complex multiplications e12998a9db xl: fix incorrect output in "help" command 46a2ce3521 Arm: correct FIXADDR_TOP 9358a7fad7 x86/vLAPIC: prevent undue recursion of vlapic_error() 0918434e0f automation: use expect to run QEMU 51ae51301f automation: disable Yocto jobs 3e8a2217f2 x86/pass-through: documents as security-unsupported when sharing resources c61d4264d2 x86/IOMMU: move tracking in iommu_identity_mapping() 033060ee6e x86/emul: Fix misaligned IO breakpoint behaviour in PV guests 8ad5a8c5c3 9pfsd: fix release build with old gcc e0e84771b6 tools/lsevtchn: Use errno macro to handle hypercall error cases 97a15007c9 xen/hvm: Don't skip MSR_READ trace record b37580d5e9 xen/sched: fix error handling in cpu_schedule_up() ee032f2997 x86/altcall: further refine clang workaround adf1939b51 x86/dom0: fix restoring %cr3 and the mapcache override on PV build error d2ecc1f231 XSM/domctl: Fix permission checks on XEN_DOMCTL_createdomain e54077cbca bunzip2: fix rare decompression failure f97db9b3bc update Xen version to 4.19.1-pre 026c9fa297 Set 4.19 version Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-viewer: update to v11.0Bruce Ashfield2025-01-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping virt-viewer to version v11.0-81-gf666425, which comprises the following commits: f666425 ci: refresh with latest 'lcitool manifest' 82dbca4 ci: refresh with latest lcitool manifest 41949db ci: add 'libc' package to lcitool project def 4e08a54 ci: import lcitool project package list definitions 8e1aea4 Translated using Weblate (Czech) 887a4a3 Translated using Weblate (Chinese (Simplified)) 0f44b80 Update translation files 26ce13f Translated using Weblate (Indonesian) cdb1e45 Added translation using Weblate (Romanian) db33b14 Translated using Weblate (Spanish) 4676c57 Make app-id and desktop file name match ee49623 check for incompatible libgovirt version 46997b9 Translated using Weblate (Turkish) 6bacfeb Translated using Weblate (Swedish) 3b37bec Translated using Weblate (Georgian) ef33a2e Translated using Weblate (Finnish) 3f1294a Translated using Weblate (Korean) e3d2651 Translated using Weblate (Italian) b11a26a Translated using Weblate (Ukrainian) b1f93c5 Translated using Weblate (Polish) bd1fa28 Update translation files 25457fe po: update pot file 4868bfe po: add all C sources to POTFILES 286a951 Translated using Weblate (Czech) 968b445 Add codespell configuration 6b7c11f Typo fixes 10b111c Add content_rating to appdata 44db193 Add launchable desktop file and virt-viewer binary 50e793d Translated using Weblate (Spanish) de864c1 Read oVirt CA and pass it to gtk-vnc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-manager: update to v5.0.0Bruce Ashfield2025-01-173-81/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping virt-manager to version v5.0.0-18-gda2f65f9, which comprises the following commits: da2f65f9 ci: add a simple codespell job 3cfd2e2d chore: drop codespell excluded word e1340f73 chore: tell codespell to ignore the whole 'po' subdirectory 2724194c chore: move codespell configuration in its own file 412c5d1a Fix typos c3debb4e cli, man: Always list --osinfo before --os-variant f92c2574 addhardware: panic: Fill in model combo with advertised values by libvirt f9ceec2b tests: Update capabilities for advertisting panic device models c859c7ac domcaps: get list of supported panic device models 8af438dd cpu: Prefer maximum mode for many emulated guests 11b70218 gui: Support maximum CPU mode fca41cfa cli: Support --cpu maximum ebf5d5f4 spec: rhel: drop spice dep, default to VNC ffc7d2bb spec: Remove unused `with_guestfs` 94271b42 spec: Skip dconf dep if building for flatpak a4c84aa1 spec: Add /usr/share/virt-manager/ui/ to RPM database (bz 2283244) b74730eb spec: update link to virt-manager sources 40d5804c ci: bump codecov/codecov-action from 4 to 5 d17731ae Release of virt-manager 5.0.0 cb2e5aa7 tests: urls: update old and obsolete OS versions 06265f80 tests: urls: replace Scientific Linux with AlmaLinux 4aa80f4c Update translation files 9efd0575 Translated using Weblate (German) 1ba412f3 Translated using Weblate (Finnish) ff0b17e0 Translated using Weblate (Polish) cc6ddf4f Translated using Weblate (Korean) 160b8be2 Translated using Weblate (Ukrainian) 34f990e3 Translated using Weblate (Turkish) a6b6558c Translated using Weblate (Georgian) aa75b492 Translated using Weblate (Russian) 89c98cdb Translated using Weblate (Romanian) 03e5e536 Translated using Weblate (Indonesian) 0a6cb73e Translated using Weblate (Czech) d9b3b4df Translated using Weblate (Swedish) c70d8d6c Translated using Weblate (Italian) e9ee09d8 Update translation files 58c93f0e po: Refresh translation template 14a6bd64 po: meson: drop --join-existing from gettext arguments 17f171cd cli: add `--network passt,portForward=8080:80` convenience syntax 2f8f0e81 virt-xml: implement `--edit --boot uefi=off` cfcd63b7 virt-install: implement `--boot uefi=off` f0820873 cli: Add stub support for `--boot uefi=on|off` f3aa24bd virt-install: use default `--cpu` mode more often 8fb78739 virt-clone: try harder to allow nonexisting images with --preserve 058d8b4c storage: Add testsuite way to trigger StoragePool.install error 3e47db67 virt-clone: document limits of `--replace` 8eb87af4 cloner: Handle .qcow2 nvram extension 276aa4a7 virt-clone: only attempt --reflink for raw images a22ac093 man: virt-clone: Fix typo 625c99fb guest: refactor _add_default_input_device 2835c250 virt-install: support `--input none` c78ec969 virt-install: let libvirt handle `--input bus=default` fa927c78 add a note that tpm can be effectively disabled by passing `none` f211e1a5 update `virt-manager.spec.in` reference d93e3cb8 ci: fix libvirt upstream job after meson 301423b8 virt-install: Fix the active_pcr_banks issue for TPM emulator fd48e0be virt-install: Add --tpm backend.source support 7e4f7ae3 virt-install: Add support for 'debug' parameter on TPM emulator 12190303 virt-install: Add support for streams attribute for 'virtio' sound card e883e7d5 virt-install: Add support for multi-channel mode for 'usb' sound card 1c0f7f62 virt-install: Add support for blockio.discard_granularity 0054b71d virt-install: Fix a typo 50b6a90a po: Refresh translation template 819b746d Translated using Weblate (German) 991355ef Translated using Weblate (French) d1fce2ff Translated using Weblate (Finnish) ea7306b0 Translated using Weblate (Kabyle) a05298f9 Translated using Weblate (Kabyle) 123978ce Translated using Weblate (Spanish) 8b787b94 Translated using Weblate (Romanian) 3f9398e3 Translated using Weblate (Portuguese (Brazil)) 69a91e86 Translated using Weblate (Spanish) dfbc705b Translated using Weblate (Arabic) 42074a0f Translated using Weblate (Italian) 2c12dd38 Translated using Weblate (Czech) 1b9df22a Translated using Weblate (Indonesian) a774a535 Translated using Weblate (Swedish) 712fc0d4 Translated using Weblate (Polish) 11f91c63 Translated using Weblate (Chinese (Simplified) (zh_CN)) 8a7b0de5 Translated using Weblate (Hungarian) 96e37d2b Translated using Weblate (Russian) 8c61113f Translated using Weblate (Georgian) e3a4c150 Translated using Weblate (Ukrainian) bdeb4404 Translated using Weblate (Turkish) d7287252 Translated using Weblate (Swedish) db5ccb05 Translated using Weblate (Korean) 47518b13 Translated using Weblate (English (United Kingdom)) 145a476d Update translation files 1f8c61cd ci: update .packit.yaml to use meson c385cd4e ci: update github workflows to use meson cbd2a7ef update setup.py usage and docs to meson 31cb3219 remove remaining setuptools files 5f34dea0 meson: add tests f41deedd meson: add build config and its options 54aadf01 meson: add icons and schemas options 0f9d89e0 meson: build and install bin wrappers 01acaa38 meson: add po files 3247dab7 meson: add virtManager files 03e35a7c meson: add virtinst files ff1fa4cc meson: add ui files 2abd3e75 meson: add icons dd909f20 meson: add data files 6a462a3f meson: add man pages 1f80a622 meson: rename and modify spec file d803491c introduce meson.build file 07557113 tests: uitests: cover cli changes 408a39a7 virt-manager: Switch to `--no-fork` by default 028fdf2c man: virt-manager: document fork behavior and VIRT_MANAGER_DEFAULT_FORK 5de63270 virt-manager: add VIRT_MANAGER_DEFAULT_FORK=yes|no env variable 7ff899b8 virt-manager: Add `--fork` option 17e39de0 virt-manager: Set SSH_ASKPASS_REQUIRE=force 6c9842a1 ci: tweak Packit configuration d46674b8 fix: improve translatable message 5126c007 tests: update tests to reflect the latest panic device changes 2ce04b7c virtinst.cli: replace DevicePanic.MODEL_ISA with "isa" 48ec63cc tests: uitests: tweak for panic dev changes c5a46646 addhardware: panic: default to asking libvirt for default model ebeb8007 devices: panic: let libvirt fill in model default afa82315 virt-install: add `--network hostdev=HOSTDEV` 300f934c virt-install: add `--network type=hostdev,source.address.X=` pci options 315b340f virt-install: add `--features msrs.unknown=ignore` 7dd7383b tests: uitests: cover serial autoconnect bug fix dc1c9982 console: Handle autoconnect=off for serial console too 97ab16a7 uitests: fix coverage with scaling default change 715acbf5 console: Default to scaling=Always 5875019b Update installertreemedia.py c99b6472 man: update libvirt.org links 8f75ac4e virt-install: implement `--osinfo require=no` as fallback `name=generic` e0260776 virt-install: Warn if `--osinfo detect=on,name=OSNAME` detection fails e3da4337 cli: `--osinfo detect=on` shouldn't default to require=off 1487dbd2 cli: --osinfo: clean up `require=` handling a28401cb tests: Test that `--osinfo detect=on` implies `require=off` 3006c5a1 virtManager: drop libappindicator usage 31eab9b4 pylint: fix false positive errors d4194c13 misc: codespell fixes a9a78f45 installer: rename has_install_phase to requires_postboot_xml_changes 1c8e6f84 virt-install: Make --cloud-init reboot by default (again) 351233f8 vmwindow: Default new window viewer size to 1280x800 d231e66a console: Fix resize_to_vm with host fractional scaling 2ee22419 console: drop manual size request, let widgets do it for us 1d7fcac3 viewers: simplify shared self._display handling 7e79023b viewers: Share most of _refresh_grab_keys implementation 51c3f1c6 virt-xml: Add `--edit --convert-to-vnc` f7988a94 guest: convert_to_vnc: optionally add qemu-vdagent d58299ee guest: convert_to_vnc: convert video device f0078a17 guest: remove spiceport devices when spice is removed 229b9050 guest: add convert_to_vnc() c498c519 virt-install: Exit gracefully when VM is undefined behind our back dd354e8b virt-xml: add `--edit --convert-to-q35` 454aad78 guest: add convert_to_q35 fe09e8f4 viewers: add explicit signal for desktop resize f140ff18 console: drop the scroll size-allocate callback e5208adc console: drop the console_size_allocate call 24324bb6 console: Leave scroll policy as AUTOMATIC 95006f42 console: Clean up get_desktop_resolution usage 371cd1ad console: Simplify usbredir menu handling 4cc52de8 console: Fix widget size with scaling=never and host fractional scaling 6b944ef6 console: Add a comment about _set_size_to_vm and fractional scaling bd0d0920 console: Add logging to _set_size_to_vm dfb1f330 connection: handle disappearing obj in agent handler 2ee2dda1 virt-xml: Fix cli_arg_name vs cli_flag_name() usage f66cca92 cli: Make --xml option parsing less special 76f45994 virtxml: Don't require `options` at XML action time 455b38f7 virtxml: Add Action class to track action + option pairs b7c72af7 virtxml: move some functions 4941bb92 testmock: Remove some console mocking that's no longer required 2c9f2194 console: Remove needless console scale comparison babeb151 console: Cleanup _scroll_size_allocate 8e551f51 console: Remove our custom aspect ratio handling 9929f2d6 vmwindow: Disable 'Resize to VM' menu when VM is offline 20000fb3 vmwindow: Don't desensitive `Auto resize` 289a993a viewers: spice: hook into display-primary-create 70861c50 viewers: vnc: use set_keep_aspect_ratio(True) 3ee677c2 viewers: Log once when checking vnc set_allow_resize support d79d4633 snapshots: Don't save outdated screenshot data 1f448a19 virt-manager: Stop blocking SIGHUP 683b486c ui: snapshots: Fix button placement when resizing 'New' dialog de00ff76 virt-xml: Fix `--define` with stdin XML b83a1b0d domain: Use KEEP_TPM flag for domain rename c6bc3a86 tests: uitests: test localhost tcp graphics 380af310 console: allow localhost connections over TCP 258df88e domain: tweak q35 <-> pc editing 78064728 domain: Remove the pcie-root and ports for i440fx in customized dialog 2d94e92d guest: Drop the '_' prefix for _add_q35_pcie_controllers 9813dc3b capabilities: Exclude a line from code coverage e1468c04 tests: Add testDomainCapabilitiesLoongArch64() 2a52d770 domcapabilities: Add firmware patterns for loongarch64 5419524f tests: Add testDomainCapabilitiesRISCV64() dc603792 domcapabilities: Add firmware patterns for riscv64 cf0b6cd7 tests: Add testDomainCapabilitiesPPC64le() 01a451e7 tests: Update ppc64le capabilities 5d5da5ff domcapabilities: Update comment 579eb3e9 tests: Extend testDomainCapabilitiesAArch64() 38906948 tests: Update aarch64 capabilities 07ae6da3 domain: don't attempt to predict if VM supports snapshots e412ecf1 domain: log object XML after snapshot creation 4782dd1c cli: Add --disk driver.discard_no_unref=on|off 6a65def6 cli: Add --video model.blob=on|off febddd4b cli: Add --memdev target.address_base for virtio-mem and virtio-pmem 7a974a3a cli: Add --features kvm.pv-ipi.state=on|off 63f8f78e tests: Check missing_xorriso in osinfo-netinst-unattended test case 9ec9c400 tests: add fake-win-multi.iso and test it f4a9722d uitests: cover serial console changes 6264167c serialcon: Don't disable console menu items for offline VM 2293ec49 console: Handle inactive VM when console menu selection changes a58223ba addhardware: Only set channel clipboard XML if UI is visible adc1948e details: only refresh os page if its currently selected e1798ef8 Add missing test file 83daac04 domain: os: treat `xenpvh` as xen PV 65d568eb Scrub references to virt-tools-list 9ad347fd tests: test XML generation for --disk path=file://... 67206a85 tests: add more test cases to cover all code paths 74fd503b virtinst: enable most Hyper-V features by default 169db9dc virtinst.support: drop unused conn_hyperv_vapic function 9e9dbf73 domain.features: use domcapabilities when setting default Hyper-V features 66bbfa23 domain.features: extract setting default hyperv features c279c17e domcapabilities: get list of supported Hyper-V features bec2d7cb tests: update kvm-x86_64-domcaps-latest 139b0e28 cli: add --features hyperv.avic.state=on/off a06d5359 cli: add --features hyperv.evmcs.state=on/off 5afc6919 cli: add --features hyperv.ipi.state=on/off e3ec248c cli: add --features hyperv.tblflush.state=on/off c421ec1b cli: add --features hyperv.reenlightenment.state=on/off 2786ea5d cli: add --features hyperv.frequencies.state=on/off 6289a136 cli: add --features hyperv.stimer.direct.state=on/off 1f69795b cli: add --features hyperv.stimer.state=on/off d7976a88 cli: add --features hyperv.runtime.state=on/off d2a29245 cli: add --features hyperv.vpindex.state=on/off 1c3fb025 test_cli: extract hyperv features to separate lines ac26945c domain.features: reorder Hyper-V features 2da48849 tests: Cover some weird virt-xml corner case behaviors 7e79e064 Revert virt-xml multiple --edit support 5fe6dcc6 Fix some pylint 97469abd tests: add tests for AMD SEV-SNP 3559dcd9 virtinst: add properties for AMD SEV-SNP 1fef5d86 tests: add virt-xml test to demonstrate changing graphics and video at the same time b34ae0d0 virt-xml: allow multiple --edit options cb6636f4 virtinst: add getter/setter for video model 093d58fb virtinst: add/remove spice devices when updating graphics type aaf85519 virtinst: remove spice devices when removing last spice graphics 7a03f3ef testsuite: add test-spice vm definition 2a0aa2d5 virtinst: fix compare for audio devices ef64949e virtinst: unify detection of duplicate console when removing device 29145b9e Fix some pylint 90ceb87b virt-install: implement passt backend for user network interface b1ee4c94 po: Refresh translation template baa380aa Translated using Weblate (Arabic) 2d3f3faa Translated using Weblate (German) deadb8a5 Translated using Weblate (Indonesian) 41fa111c Translated using Weblate (Indonesian) 276c1c4b Translated using Weblate (Chinese (Traditional) (zh_TW)) 383c83af Translated using Weblate (Korean) 735a4352 Translated using Weblate (Portuguese (Brazil)) 4e6ce92e Translated using Weblate (English (United Kingdom)) a4adbc1a Translated using Weblate (French) 954c9b6b uitests: createvm: fix case on f40 2ddbea5d uitests: Fix get_text() on fedora40 0cad0c4d uitests: force internal snapshots in test_snapshot.py a00c0900 uitests: handle newer libvirt test driver UpdateDevice support 2e1bacfd uitests: Add live external snapshot testing 95ca39aa uitests: test xmleditor textview fallback 8eb37c0e uitests: Add some virtManager coverage exclusions 1194f099 tests: cli: Fix with latest libvirt 0288e925 tests: cli: Use regex for grep= and nogrep= args 648f52bd virt-install: fix cloud-init ssh keys 72a74fb1 virtinstall: Fix --location and --cloud-init conflict 0c981eec tests: Add test for DeviceDisk.paths_in_use_by 328cabca hoststorage: Use DeviceDisk.paths_in_use_by for performance cd8eeaf5 virtinst: disk: Add paths_in_use_by() 8a0e2239 tests: add s390x default test case 43f581c2 virtinst: add graphics to risc-v virt VMs by default faebce40 virtinst: add graphics to aarch64 virt VMs by default 9ede5d22 Add test cases for loongarch ea3cae4d Add some default device support for loongarch d2cf01b3 Add loongarch support eee8d09d cli: Deprecate --cpu host 8b5f73e9 cli: Don't suggest --cpu host 0530df76 man: Don't suggest --cpu host ba3a098c virtinst: disk: strip away `file://` protocol 5fcf506e tests: skip mdev tests for libvirt older than 10.4.0 6a85d79a xmleditor: make gtksourceview optional a91e23c8 install: Use virtio-scsi for unattended installations 7f8230a1 guest: Prefer UEFI for riscv64 6fca91f2 tests: Add more riscv64 tests 3b09701f tests: Use SPICE graphics on riscv64 9ec58525 tests: Switch to --osinfo for riscv64 0612dca8 tests: Drop precompare_check from riscv64 094a8120 tests: Update riscv64 capabilities 1261666c ci: Add test-against-libvirt-git.yml ca25b41a ci: clarify comment about what fedora packages we test against 738a8d9f uitests: Fix with GtkFileChooserNative db1b2fbc Use GtkFileChooserNative 231a3dbc build: use setuptools.command.build when available 4f4e73d0 build: use super() 17d9f339 Tweak for codecov v4 68efec21 ci: bump codecov/codecov-action from 3 to 4 8f8a1b9b ci: checkout the code after installing git-core 14c5684f ci: split base dependency and build dependency installation 3f79e76e ci: install git-core as well e21129ae ci: Rename `CI` workflow to `Test on fedora:latest` dce9de48 hostdev: Fix error when mdev type_id is missing 8b6db203 tests: Fix host-copy XML with libvirt 10.1.0 4ffbc0d9 Allow serial console resize to beyond 80 columns. e95ca453 virtManager: ignore agen livecycle event for shutoff VMs 5488ff47 virtManager: add support to create external snapshots f1ba012e virtManager: domain: allow disk only snapshots d8565ac5 virtinst: snapshot: add memory file attribute 3cde1acb virtinst: add external snapshot capability dadb9a0d po: sort LINGUAS 55b4c1bc Translated using Weblate (Chinese (Simplified) (zh_CN)) 1be248e6 Translated using Weblate (Korean) e4e406e3 Translated using Weblate (Portuguese (Brazil)) 9c4b7895 Translated using Weblate (Georgian) c8c37cb0 Translated using Weblate (Portuguese (Brazil)) a6b62a20 systray: Cleanups and improvements for --show-systray 2043847a uitests: More handling for slow startup on f39 75e4d1dd baseclass: Avoid glib `Source ID XX not found` at app shutdown 6c977426 man: document --show-systray option 69290e05 cli: add --show-systray option 014d1ef9 console: Cleanup and improve console menu handling 409e4bf2 console: Select the first embeddable graphics device as graphical console d83074a0 domain: Add idx parameter to open_graphics_fd() 9c242ef7 console: Move embeddable_graphics() to console.py 0d3b7f67 Fix pylint 3.1.0 issues a52ab24e createvm: Replace deprecated pkgutil.find_loader 0c899a7c uitests: Handle slow app launch on fedora 39 a05ab5cd uitests: Fix walkUI flakyness bb867213 ui: details: Increased scrolledview6's height request 04cc4895 ui: details: fix Applications width. 7ae3e10b netlist: Fix UI error when virtual network doesn't exist cf172c8e testdriver: Add portgroups example to test-many-devices 82f1c449 domain: rename: handle firmware ending with .qcow2 78f7797c Support creating sparse volumes on ZFS pools 6710ca69 setup: Allow `pylint -j0` Along with the update to 5.0.0, we switch from setuptools to meson. - man page building is patched out - we add some new rdepends/depends for the build - we disable the building of tests - disable icon cache updating Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* rootlesskit: update to v2.3.1Bruce Ashfield2025-01-174-60/+51
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping rootlesskit to version v2.3.1-28-g0b4ed7b, which comprises the following commits: b4fe9a7 go fmt a1beb23 Build(deps): Bump golang.org/x/net from 0.28.0 to 0.33.0 9546d0d Build(deps): Bump golang.org/x/sys from 0.28.0 to 0.29.0 2363620 fix: allow to propagate the address specified in -p option a710d84 Build(deps): Bump golang.org/x/sys from 0.27.0 to 0.28.0 7c52d16 Build(deps): Bump golang.org/x/sys from 0.25.0 to 0.27.0 16c6608 Build(deps): Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 19fab4c Build(deps): Bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5 b26bc59 Build(deps): Bump golang.org/x/sys from 0.24.0 to 0.25.0 f11b0e6 port/builtin: return proper error for sctp f98e27e Build(deps): Bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 3bb2efa docs/network: Mention that pasta won't work with some Ubuntu package versions baec6fd docs/network: Don't suggest removing AppArmor rules for pasta ae0c97d pasta: Update comment about issue with AppArmor and creation of user namespace 3c35024 v2.3.1+dev fcc67fe v2.3.1 56337e7 CI: attest-build-provenance: fix a subject-path issue (461) 2c2a107 v2.3.0+dev 5bf364f v2.3.0 f3948fd Enable actions/attest-build-provenance e403655 CI: update Docker (27.1.2) 169edeb CI: update pasta (2024_08_14.61c0b0d) d5a270f go.mod: golang.org/x/net v0.28.0 5e81602 go.mod: github.com/insomniacslk/dhcp v0.0.0-20240812123929-b105c29bd1b5 8751f26 Deprecate rootlesskit-docker-proxy (no longer needed since Docker v28) 36ceb0e child, pasta: Allow drivers to configure their own interface, let pasta do that ade4c86 pasta: Let it run in background, and wait until it forks 8cbb3ae CI: update Go to 1.23 1139aed Build(deps): Bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.4 fba675b Build(deps): Bump golang.org/x/sys from 0.22.0 to 0.24.0 926c6aa Build(deps): Bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3 90ad956 Build(deps): Bump github.com/gofrs/flock from 0.12.0 to 0.12.1 1899165 Build(deps): Bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2 c5a4fbf v2.2.0+dev 17a2cd4 v2.2.0 b8197ef go.mod: update d6a8962 CI: update dependencies a631a8c Build(deps): Bump github.com/gofrs/flock from 0.8.1 to 0.12.0 ca26493 Add reexec branch for socket activation to correct LISTEN_PID c202896 Build(deps): Bump golang.org/x/sys from 0.21.0 to 0.22.0 8ce63fd Build(deps): Bump github.com/containernetworking/plugins f68acb9 Build(deps): Bump golang.org/x/sys from 0.20.0 to 0.21.0 c784875 Build(deps): Bump github.com/containernetworking/plugins Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: update to v11.0.0 -tipBruce Ashfield2025-01-173-12/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop yajl, since it has been dropped upstream. Bumping libvirt to version v11.0.0-3-g14fc6812df, which comprises the following commits: 14fc6812df Translated using Weblate (Georgian) 13b17f7720 Translated using Weblate (Georgian) 32f822969d Post-release version bump to 11.1.0 a0b9f813a1 Release of libvirt-11.0.0 c1b8e8c00b news: document support for mdev <-> SRIOV VF vGPU live migration d53da4b905 news: note addition of vlan tagging support for Linux host bridges b2c999855d Translated using Weblate (Ukrainian) 529d9a421e Translated using Weblate (Spanish) 7a03d6c2fa NEWS: Document some of my fixes in this release dc8fdeb1fb NEWS: Add few things I changed this release c85d87fe8f NEWS: document bug fix for snapshots 1942a88813 NEWS: Document features/improvements/bug fixes I've participated in 027bcf1112 NEWS: document fix for starting transient domains a4def2eb95 conf: Do not parse hyperv features with passthrough mode 32140bdb09 meson: Replace meson.source_root() with meson.project_source_root() a71985f6f3 qemu_migration: Do not consider post-copy active in postcopy-recover 413e798eb1 Translated using Weblate (Korean) 9759d39c67 Translated using Weblate (Ukrainian) 3639a38985 Translated using Weblate (Korean) 9e1b7ff760 Update translation files 9ab2cd48ea access: fix po_check when polkit is disabled 7a903458f1 qemu: support vlan change for linux host bridge during update-device f35bddae90 docs: standard linux bridges now support vlans d51179fa82 qemu: snapshot: delete disk image only if parent snapshot is external 30b0e553bc docs: Clarify documentation of host-model CPU mode 4c7bb1cc4a po: Refresh potfile for v11.0.0 caa10431cd util: don't attempt to acquire logind inhibitor if not requested a28a5b675d rpc: log details of OS signals received by daemon a586411889 spec: Disable ch driver on RHEL 922a219d0a Translated using Weblate (Finnish) 1523cd3c6e Translated using Weblate (Finnish) 95a20d7aa5 Translated using Weblate (Spanish) 7c5e9e1bce Translated using Weblate (Spanish) 3aa8b9c700 Translated using Weblate (Spanish) bc2bcd54c5 Translated using Weblate (Spanish) 1a5340d7f0 Translated using Weblate (Spanish) 16a4e3f9f8 Translated using Weblate (Spanish) d0acf28d20 Translated using Weblate (Spanish) 4bc2b6c5ec Translated using Weblate (Finnish) 7803363339 Translated using Weblate (Finnish) ebb90e7412 Translated using Weblate (Finnish) 693feada8b Translated using Weblate (Finnish) 748008d602 Translated using Weblate (Swedish) 1eda6c9b90 Translated using Weblate (English (United Kingdom)) e1b63ac56b Translated using Weblate (Swedish) dd82e2baa8 qemu: allow migration of guest with mdev vGPU to VF vGPU c1a0d08518 Enable vlan support for standard linux bridges 582f0966f9 util: Add vlan support to virNetDevBridgeAddPort 2e651ec101 util: add netlink bridge vlan filtering 18ea5e19c6 apparmor: fix UUID specification a751d30220 security: replace uses of label and VIR_FREE by g_autofree 76b9227eea security_apparmor: fix memleaks in AppArmorSetFDLabel c97766a639 spec: Enable ch driver d12e937f47 tools: fix ordering mistake in virt-admin daemon-set-timeout code fc3a60d9d7 util: fix off-by-1 in inhibitor constants 2ac1a0c13f meson: remove unneeded dependency on libdevmapper for storage_disk 9df14f5173 conf: Adjust hyperv tlbflush formatting ad6b4d1fef conf: refactor hyperv features formatting 91bb41a8b7 virtiofs: Allow read only mode d2a39db35b security: apparmor: Remove hardcoded "libvirtd" profile name 6d3b877171 remote: apply translations to polkit files c244d041d9 meson: remove duplication of polkit dirs construction b996e99c51 po: add its rules for translating polkit file strings 062a2c07cc qemu_tpm: do not delete parent directory for custom source 958283a21f qemu_tpm: lock the state explicitly when running swtpm 90014e7bc4 Revert "qemu: explicit swtpm state locking" 18b8e6d3cc hyperv: Introduce and export 'facility' variable. a91b22ffc6 apparmor: Allow running loongarch64 VMs 247357cc29 qemu: Add support for direct and extended tlbflush features ac08b362da conf, docs: Add support for direct and extended tlbflush features f7c33eeeb7 ch: Enable logging curl responses from ch db4e837598 ch: move curl_data and curl_callback definitions 72a9a91e3b ch: Enable logging for ch domains 334d2f604c hypervisor: Move QEMU log context to hypervisor 94b393dd6e util/xml: open XML files before calling libxml2 7f2fd38ee7 util/xml: don't assume libxml2 has the filename of the document 0635cd9555 util/xml: fix extraction of XML context f7cbb136c3 src: drop obsolete checks for virDomainConfigFile failure 8575724aef rpc: remove logind support for virNetDaemon 48f0b6dfa1 src: convert drivers over to new virInhibitor APIs d2e5aa4f4e util: introduce object for holding a system inhibitor lock a0a8c95d07 cpu_map: Add missing CPU features 3d55a2e593 cpu_map: Add ibpb-brtype CPU feature 2284e8c29b cpu_map: Add zero-fcs-fds CPU feature dc12ca3949 cpu_map: Add fdp-excptn-only CPU feature 212b7d8e28 cpu_map: Add sha512, sm3, and sm4 CPU features 41a6de76bc cpu_map: Add GraniteRapids-v2 CPU model 30f05acf35 cpu_map: Add avx10* CPU features 060fd63c26 qemu: Call migrate-incoming with exit-on-error=false 090a2f27c2 qemu: Replace qemuDomainCheckMonitor with qemuMigrationJobCheckStatus 3100f43a1d qemu: Detect exit-on-error argument of migrate-incoming 9636ac40a3 qemu_capabilities: Avoid memleak in virQEMUCapsProbeFullDeprecatedProperties() 0162f2008e qemu: Enable I/O APIC even more frequently ef7c0f46f9 rpm: ensure we own directories we might create 9e227634d3 Fix a few typos in error messages 62658bbf06 conf: add deprecated_features attribute 15d45964e4 virsh: add --disable-deprecated-features flag to domcapabilities cd1e837c22 qemu_capabilities: filter deprecated features if requested 4e2c8de204 libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES 51c098347d qemu_capabilities: query deprecated features for host-model 45140d2930 qemu: parse deprecated-props from query-cpu-model-expansion response 60e407deb5 qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions 2d222ecf6e qemu: Enable I/O APIC if needed 99474f8e50 logging: Change return type of virLogDaemonConfigFilePat to void 0e1a848733 util: Change return type of virSCSIVHostDeviceSetUsedBy to void 20afcd4b14 util: Change return type of virSCSIDeviceSetUsedBy to void ed8eec073f util: Change return type of virPCIDeviceSetUsedBy to void 4e987a86b5 qemu: re-use existing ActualNetDef for more interface types during update-device 2195037265 util: virsysinfo: Change return type of functions that never fail to void abd9887b6c hyperv: Change return type of hypervCheckParams to void f3179d5abe rpc: Change return type of virNetClientAddStream to void b0da352c58 rpc: Change return type of virNetClientAddProgram to void 5afe228ea7 rpc: Change return type of virNetServerAddProgram to void 393b0471a7 access: Change return type of virAccessDriverStackAppend to void da2439b746 cpu_map: Add EPYC-Genoa-v1 CPU model 9bc479a3c0 cpu_map: Add Opteron_G5-v1 CPU model d092730fb4 cpu_map: Add Opteron_G4-v1 CPU model 422d90dc56 cpu_map: Add Opteron_G3-v1 CPU model 51ffa44fb4 cpu_map: Add Opteron_G2-v1 CPU model a1625b73f6 cpu_map: Add Opteron_G1-v1 CPU model 332136e49a cpu_map: Add phenom-v1 CPU model 6b775a68ec cpu_map: Add athlon-v1 CPU model 8f5e36cbce cpu_map: Add KnightsMill-v1 CPU model 537f136549 cpu_map: Add Penryn-v1 CPU model 2d061eba8c cpu_map: Add Conroe-v1 CPU model 6d25eafaec cpu_map: Add kvm64-v1 CPU model 2c6a015a7f cpu_map: Add qemu64-v1 CPU model 4a8259b5a3 cpu_map: Add kvm32-v1 CPU model d9b23d77c0 cpu_map: Add qemu32-v1 CPU model a3cab1ae67 cpu_map: Add core2duo-v1 CPU model c9fa77bfe8 cpu_map: Add n270-v1 CPU model ae14b20aaa cpu_map: Add coreduo-v1 CPU model 886fd169c5 cpu_map: Add pentium3-v1 CPU model df34ae48e9 cpu_map: Add pentium2-v1 CPU model 70a4ec29a7 cpu_map: Add pentium-v1 CPU model 2abf6bd47c cpu_map: Add 486-v1 CPU model 8bc6ebb495 sync_qemu_models_i386: Generate missing -v1 variants 19b56603c4 sync_qemu_models_i386: Update meson.build 50c6d727b6 cpu_map: Sort data files in meson.build b1725fbfb8 virsh: Fix --timeout option of migrate command 6cc93bf288 qemu: Grab a QUERY job when formatting domain XML 56d448ad0f ch: Enable user aliases 81da7a2c2a qemu: tpm: do not update profile name for transient domains c63bdd17b9 virt-aa-helper: allow riscv64 EDK II daa560858b qemuDomainDiskChangeSupportedIothreads: Change error wording to fix grammar 300362421e rpm: replace 'git' with 'git-core' 57835f432f qemu: enable QEMU core dump by default on Linux dd217cd938 lxc: remove no longer working netns check dba710374d util: Fix typo in virNetDevOpenvswitchInterfaceSetQos be784aa513 Post-release version bump to 11.0.0 7e5641bbc0 Release of libvirt-10.10.0 94338f1375 Translated using Weblate (Swedish) b0a782f708 docs: document external swtpm 984f6bb43f Translated using Weblate (Swedish) 349ea8669c Translated using Weblate (Korean) 304b93dbb5 NEWS: Document features/improvements/bug fixes I've participated in f850c2a569 virschematest: Don't skip all "directory" tests 99dadf9e08 schemas: domaincaps: Add schema for CPU 'blockers' fcd9b78863 schemas: domaincaps: Add schema for 'canonical' cpu model name 5e514c6733 schemas: domaincaps: Add schema for 'panic' device 2704648936 schemas: domain: Make <identity> subelement of NFS disk source optional 0bd01ef765 NEWS: Mention qcow2 'data-file', block NVRAM, and internal snapshot reversion 976300fdf4 qemuDomainGetStorageSourceByDevstr: Lookup also '<dataStore>' 515ed143ec qemuDomainVirStorageSourceFindByNodeName: Match also '<dataStore>' sources 71935d4972 qemuDomainVirStorageSourceFindByNodeName: Extract nodename matching 2a9349c8e8 qemu: snapshot: Change 'data-file' to read-only after snapshot 754ca45c45 qemu: block: Ensure that <dataStore> is in appropriate state ed656f4c8f qemuBlockReopenAccess: Don't require backing chain terminator for non-chained images b83e87ca78 qemuBlockReopenAccess: Fix update of 'readonly' state b510f8ca8a qemuBlockReopenAccess: Add debug log entry about state of the image c4d6bd3bf5 qemu: Validate QoS values in qemuDomainSetInterfaceParameters() 9b55a130b7 NEWS: Document support for versioned CPU models c0b6774d50 cpu: Check blockers in virCPUCompareUnusable only if they exist 444f45135a Update translation files b35d559d6c po: Refresh potfile for v10.10.0 68aaadd3a4 Translated using Weblate (Swedish) e9e5ebe6a6 network: add tc filter rule to nftables backend to fix checksum of DHCP responses 6412c2cb51 util: add new "tc" layer for virFirewallCmd objects f1d94bbfa6 util: don't re-add the qdisc used for tx filters if it already exists 35a5bf25d1 util: put the command that adds a tx filter qdisc into a separate function 250435546a util: make it optional to clear existing tc qdiscs/filters in virNetDevBandwidthSet() fa50454c05 util: use a single flags arg for virNetDevBandwidthSet(), not multiple bools 6490d6ac11 cpu_map: Add KnightsMill CPU model b5c15cf0d0 cpu_map: Add Denverton CPU model 6e09d69cff cpu_map: Add versions of Dhyana CPU model 3310ab0e58 cpu_map: Add versions of EPYC CPU model cbccbe6e43 cpu_map: Add versions of EPYC-Rome CPU model 33209d63cd cpu_map: Add versions of EPYC-Milan CPU model d0e5e984b6 cpu_map: Add versions of Nehalem CPU model 679305a98e cpu_map: Add versions of Westmere CPU model 57b5f8078b cpu_map: Add versions of SandyBridge CPU model d00ba759c4 cpu_map: Add versions of IvyBridge CPU model 569a06b07e cpu_map: Add versions of Haswell CPU model 80d374422c cpu_map: Add versions of Broadwell CPU model 8bf6c7eb84 cpu_map: Add versions of Skylake-Client CPU model 6a3f1bc466 cpu_map: Add versions of Skylake-Server CPU model 4ad434654a cpu_map: Add versions of Cascadelake-Server CPU model 5bb09e6790 cpu_map: Add versions of Icelake-Server CPU model eed7a2c4f7 cpu_map: Add versions of Cooperlake CPU model 860f40053d cpu_map: Add versions of Snowridge CPU model 5faffbc514 cpu_map: Add versions of SapphireRapids CPU model 073f825dab cpu_map: Add versions of GraniteRapids CPU model 135a3ad2a4 cpu_map: Add versions of SierraForest CPU model fff2bbee7f domain_capabilities: Report canonical names of CPU models ca0ea085d7 cpu: Introduce virCPUGetCanonicalModel cb6463d803 cpu_x86: Record relations between CPU models a410f0256a sync_qemu_models_i386: Copy signatures from base model 7133d72eff sync_qemu_models_i386: Update index.xml e2e7602a22 cpu_map: Properly group models in index.xml 3bb2c2b641 sync_qemu_models_i386: Switch to lxml 19cfe21d4e sync_qemu_models_i386: Store extra info in a separate file db127963d5 sync_qemu_models_i386: Add support for versioned CPU models 515568071d sync_qemu_models_i386: Do not require full path to QEMU's cpu.c 233afc3c58 sync_qemu_models_i386: Do not overwrite existing models c16e7f231f sync_qemu_models_i386: Use f-strings ba1652e84a sync_qemu_features_i386: Add some removed features back 88e7cc1477 cpu_x86: Promote added/removed from ancestor 61dd5d6bef cpu_x86: Annotate virCPUx86Model fields 6aed4360e5 Translated using Weblate (Swedish) d1b9899905 Translated using Weblate (Swedish) 5391f29008 Translated using Weblate (Swedish) ec66ac0d2d Translated using Weblate (Swedish) 7117291513 Translated using Weblate (Swedish) ec11cf12fe Translated using Weblate (Swedish) 86189ac148 Translated using Weblate (Swedish) 68cfeab9ea Translated using Weblate (Swedish) 03b4129b25 Translated using Weblate (Georgian) 1d040e0315 Translated using Weblate (French) fe730c0861 Translated using Weblate (Swedish) 806884cd58 Translated using Weblate (Chinese (Simplified) (zh_CN)) ab5f29ab46 Translated using Weblate (Swedish) 4268bdc0d6 Translated using Weblate (Swedish) e9b8be23f7 qemuxmlconftest: Add test cases for the <dataStore> feature 4801729abc qemuxmlactivetest: Add tests for <dataStore> 4281362a96 tests: virstoragetest: Add tests for detection of qcow2 'data_file' feature 59b1408860 qemu: block: Add support for 'data-file' feature of qcow2 cb5371a8bd qemu: factor out qemuDomainPrepareStorageSource() 9ba2bef816 qemu: put data-file path to VM's cgroup and namespace 702f8b5a77 security: apparmor: handle qcow2 data-file 8fcc6c8025 security: selinux: handle qcow2 data-file on image label set/restore 724a4c6dc4 security: DAC: handle qcow2 data-file on image label set/restore 0a3d177d9b storage file: fill in src->dataFileStore during file probe 63481eca80 storage file: add qcow2 data-file path parsing from header 8799818036 storage file: add getDataFile function to FileTypeInfo b3171cf8da conf: implement XML parsing/formating for <dataStore> element of a storage <source> 28d88e9fc3 Add schema and documentation for 'dataStore' sub-element of disk source 64627d5645 conf: add data-file feature and related fields to virStorageSource 2cb6cb05d4 docs: formatsecret: Fix an example of secret-set-value c54df8ed9e QEMU: allow to hot plugging virtio-serial-pci device a86b429046 tests: qemucapabilitiesdata: Update 'x86_64' capabilities for the qemu-9.2 dev cycle e4d058866e qemu: passt: Use 'reconnect-ms' instead of 'reconnect' with new qemus 9e273db203 qemu: capabilities: Introduce QEMU_CAPS_NETDEV_STREAM_RECONNECT_MILISECONDS 25f1fc8568 qemu: capabilities: Restore grouping in 'virQEMUCapsQMPSchemaQueries' 74ef4888ff qemuDomainDiskChangeSupported: Add missing iothreads check 5872ab7fe9 manpage: virsh: Add warning about 'migrate' with '--persistent' together with '--xml' 055379df23 API: migration: Warn about use of VIR_MIGRATE_PERSIST_DEST with VIR_MIGRATE_PARAM_DEST_XML 6f237f4642 Revert "qemu: migration: Improve handling of VIR_MIGRATE_PARAM_DEST_XML with VIR_MIGRATE_PERSIST_DEST" 6d9bf5b63c NEWS: Add the news for CVE-2024-4418 5ca7daf397 NEWS: Add the news for CVE-2024-2494 eb2775e1d6 NEWS: cpu_map: Add the EPYC-Genoa cpu mode ef57b7431f NEWS: qemu: Add support for hyperv enlightenments features da2132d124 docs: Recommend virtio instead of virtio-(non-)transitional 7b73e681a2 vmx: Get the VMware boolean uefi.secureBoot.enabled ec8be9aceb qemu: Avoid use of '-loadvm' commandline argument for internal snapshot reversion 2da32ff468 qemu: monitor: Extract vmstate presence for internal snapshots in qemuBlockGetNamedNodeData 6902e77c01 qemu: Add enum entries for 'snapshot-load' qemu job 2ed93e1a4b qemu: monitor: Add monitor infrastructure for 'snapshot-load' QMP command c82dd60b2e qemuSnapshotForEachQcow2: Handle also NVRAM image for internal snapshots 5ca0552d31 qemuSnapshotForEachQcow2: Refactor 5dfd0a0ce8 qemu: Move 'qemuDomainSnapshotForEachQcow2(Raw)' to qemu_snapshot.c 60838fee08 qemuDomainSnapshotForEachQcow2Raw: Remove 'driver' argument 20ffcb912f qemu: Don't store path to qemu img 25fdb57d8e ch: Enable callbacks for ch domain events ed1cef6264 ch: enable virNodeGetMemoryStats API 91d6a0a1a9 Translated using Weblate (Swedish) cf37b66835 Translated using Weblate (Swedish) af3d7fa7df Translated using Weblate (Swedish) 4454af822e Translated using Weblate (Swedish) 25f72a3b72 Translated using Weblate (Swedish) 221b2fe856 Translated using Weblate (Swedish) a0554d6922 Translated using Weblate (Czech) d79542eec6 qemu: Read back the profile name after creation of a TPM instance 957bda01c8 qemu: Move adding --tpmstate to swtpm command line into own function fc9a333f37 qemu: Move adding of keys to swtpm command line into own function cd37721d19 qemu: Extend swtpm_setup command line to set a profile by its name 526f08da62 docs: Add documentation for the TPM backend profile node 90c40d3b9c conf: Add support for profile parameter on TPM emulator in domain XML 498b5b7440 schema: Extend schema for TPM emulator profile node 15ba6edabd conf: Define enum virDomainTPMProfileRemoveDisabled 1079532d74 util: Add parsing support for swtpm_setup's cmdarg-profile capability 279b14cb81 qemu: Pass virQEMUDriverConfig rather than some of its fields 8bba15bdc1 conf: Move TPM emulator parameters into own struct b0aa9d31f2 qemu: Avoid useless tmp variable in qemuCanonicalizeMachine 5904676d2f ch: explicitly set INFILESIZE to 0 cec5bb372a ch: reattach PCI devices to host while stopping guest 1e8cc91f9d ch: allow hostdev in domain definitions c6dbc6042d ch: prepare host for PCI passthrough acfe2e7a50 ch: prepare domain definition for pci passthrough 5d4f9e1bdd ch: add host device manager to driver 89ef0c0f2b hypervisor: move HostdevHostSupportsPassthroughVFIO b05f6134c9 hypervisor: move HostdevNeedsVFIO to hypervisor 0dad1ec009 kbase: virtiofs: Clarify migration support statement f35f817ebf qemu: process: Introduce setup of block-device backed NVRAM fce4319f58 qemu: process: Extract setup of file-backed nvram from template 32228ecb02 conf: Remove nonsensical requirement of nvram format matching firmware format d3016e47be qemuFirmwareMatchDomain: Don't base firmware selection on nvram image format 2aa644a2fc qemuPrepareNVRAM: Refuse conversion of NVRAM backing file format 6540cc08b1 conf: Always format firmware image format 49ce561e3f conf: domain: Output 'format' attribute of '<nvram>' also for' raw images 366907e520 firmware: Add 'templateFormat' XML attribute and plumb it in f90567f3a8 docs: formatdomain: Clarify that NVRAM template is also being autoselected a448d4a18a conf: domain: Clarify nvram/loader format logic d57630c282 qemu: Install backing store terminators for 'pflash' blockdevs 6a8bcd1110 qemuFirmwareEnsureNVRAM: Don't try to setup non-local nvram 273157dd9f qemuPrepareNVRAM: Don't attempt to create NVRAM on block device fde04774db syntax-check: Suggest ways to fix internal references b3a4b049c4 docs: Document authselect to enable the NSS module 3224b25607 docs: Rework documentation for the NSS module 24580d13d1 qemu: Move PostParse functions out of qemu_domain.c bf2af76ec2 qemu_hotplug: Do not report unknown error when hot-unplugging non-existing device aeebb30ba2 Drop unused function declarations 6c50d11276 virnetserverclient.h: Fix typo in comment of virNetServerClientPrivPreExecRestart() a053f57ebc docs: Add Sys::Async::Virt to apps.html dbe4bdbe3a Translated using Weblate (Swedish) 17d03614de Translated using Weblate (Swedish) 4d19cbaa0d Translated using Weblate (Swedish) e13d1f0c8c Translated using Weblate (Swedish) abef180b69 Translated using Weblate (Swedish) 75ac9929bb Translated using Weblate (Swedish) d359855df7 Translated using Weblate (Swedish) 1287dc21a6 Translated using Weblate (Swedish) e088f2107e Translated using Weblate (Swedish) 309c5cd4a3 ci: Update with newer lcitool d88ebd4374 ch_monitor: Report OS error when removing socket fails f1f4cbb50a ch_monitor: Avoid possible double free in virCHMonitorClose() 4be361a385 test_driver: provide basic disk hotunplug support c530a96151 test_driver: provide basic disk hotplug support c7611a6b13 Translated using Weblate (Swedish) 756257497d Translated using Weblate (Swedish) 5ea60597b0 Translated using Weblate (Swedish) ff836adb4b Translated using Weblate (Swedish) 5fbf054360 Translated using Weblate (Swedish) 948c9cf7a1 Translated using Weblate (Swedish) 1872a09f14 Translated using Weblate (Swedish) 340b5dad78 Translated using Weblate (Swedish) 863df80534 Translated using Weblate (Swedish) d4c2dc239a Translated using Weblate (Swedish) 6721985db7 Translated using Weblate (Swedish) b86dd42113 Translated using Weblate (Swedish) 27ae5e602a qemu_hotplug: Report better error message for platform serial devices 52c2e3e0a7 qemu: Expose qemuChrIsPlatformDevice outside from qemu_command 9dc2226e68 NEWS: qemu: add multi boot device support on s390x bf0308b2d4 qemu: command: add multi boot device support on s390x 48fd995f3b tests: add capabilities for QEMU 9.2.0 on s390x 3ccf692e08 qemu: capabilities: Add QEMU_CAPS_VIRTIO_CCW_DEVICE_LOADPARM a3b8753db9 virnetdevopenvswitch: Warn on unsupported QoS settings 9132b486a3 Translated using Weblate (Chinese (Simplified) (zh_CN)) 844d1036eb qemu_domain: Automagically add IOMMU if needed b15047ff26 qemu: Turn EIM IOMMU on automagically a9797d7c43 libvirt_private.syms: Export virDomainIOMMUDefNew() e393d688a3 Translated using Weblate (Swedish) e45313c031 ch: check return value of virJSONValueArrayAppend da66bf53b0 util: json: check return value of virJSONValueFromJsonC 13f40898ab qemu: chardev: avoid impossible overflow 2e64ca6ef2 Translated using Weblate (French) 736e386273 docs: fix since tag for TPM with custom path 806e266fa1 docs: formatdomain: fix XML snippets bb5e26749f qemu: explicit swtpm state locking f1304cc566 qemu_tpm: handle file/block storage source a110042d0c schema: add TPM emulator <source type='dir' path='..'> 579fd44612 schema: add TPM emulator <source type='file' path='..'> 6d4eb07a55 tpm: rename 'storagepath' to 'source_path' cc0aab9395 util: check swtpm nvram-backend-{dir,file} capabilities 78a9e7bf4a Translated using Weblate (Swedish) ef8ea25a7c Translated using Weblate (Romanian) a52cd504b3 qemu: Report supported panic device models in domcapabilities 5d9b886a4e spec: Fix attributes for some qemu dirs in %{_rundir} dec2f370ca Translated using Weblate (Swedish) faf6edfa74 json: do not call json_tokener_free with NULL 23d78e1c58 Translated using Weblate (Swedish) e081541b32 Translated using Weblate (Swedish) 14bf42613f Translated using Weblate (Swedish) 021fafe5f6 Translated using Weblate (English (United Kingdom)) 44de1c58a6 Translated using Weblate (Swedish) 6da4de016e Translated using Weblate (Swedish) eb4ed1fe15 docs: domain: Be more upfront about 'sgio' not being actually supported d02140383d virstring: Use 'g_new0' instead of improper use of 'g_malloc0_n' bb4bd9d31f Replace improper use of g_malloc(0) with g_new0 354a3d2be4 virJSONValueFromString: Prefix error message from 'json-c' e71a510605 qemu: Fix maximum physical address size in baseline CPU f22d00a9e6 Post-release version bump to 10.10.0 8f4dc1bd62 Release of libvirt-10.9.0 e011ad32b1 Translated using Weblate (Swedish) 961fb8944d spec: Fix attributes for ghosts directories in %{_rundir} 7581e3b6d5 Revert "network: add rule to nftables backend that zeroes checksum of DHCP responses" 12b456c94b Translated using Weblate (Swedish) e07535b531 Translated using Weblate (Swedish) 20cca0d6d5 Translated using Weblate (Korean) 6e700f0000 Translated using Weblate (Korean) 564de95569 Translated using Weblate (Korean) 271850f790 Translated using Weblate (Korean) ceb2f089c1 Translated using Weblate (Ukrainian) 342ebdf500 Update translation files 34325bb59a Translated using Weblate (Swedish) 372d4b42d3 docs: permit a user's chosen identity with SoB 42ab0148dd network: add rule to nftables backend that zeroes checksum of DHCP responses b18fd84a68 po: Refresh potfile for v10.9.0 e44db63d07 Translated using Weblate (Swedish) 08c907bac9 tests: add capabilities for QEMU 9.1.0 on s390x d5af1e90bb network: don't unset the firewalld zone if it's going to be immediately re-set e8228a9e79 network: ignore/don't log errors when unsetting firewalld zone dbc9fbf644 NEWS: Report CPU model blockers in domain capabilities f4dc248a95 domain_capabilities: Report CPU blockers 016be5510a domain_capabilities: Sort CPU models 0c6134f190 util: Introduce virStringListRemoveDuplicates f928eb5fc8 qemu: Change CPU comparison algorithm for future models e373f87034 qemu: Introduce virQEMUCapsGetCPUBlockers 5f8abbb7d0 cpu: Introduce virCPUCompareUnusable 591b364f49 qemu: Separate partial CPU check into a function 52d2a8eb6c qemu: Use virCPUCompare in qemuConnectCompareHypervisorCPU directly 1c45473b93 qemu: Use g_autoptr in qemuConnectCompareHypervisorCPU 5475688a29 cpu: Introduce virCPUGetCheckMode cd93f7ddab cpu_map: Use compat partial check for all x86 CPU models f8ade72c2b cpu_x86: Introduce <check> element for CPU models 0cf9039071 Translated using Weblate (Swedish) 3e98349542 ci: Move definition of exit codes allowed to fail for cirrus jobs d60979f731 spec: Drop nwfilter dependency in libvirt-daemon-xen 0884bf1f3e ci: Regenerate with latest lcitool to pick up 'cirrus-ci' out of credit detection 755b53c3a5 Translated using Weblate (Swedish) c0aa21b6d4 Translated using Weblate (Swedish) 54bd75fcce docs: formatdomain: Document the temporary file for transient disks 36080e1b57 qemu: snapshot: Delete leftover overlay files for <transient/> disks 35fef220f1 rpm: Require dmidecode on more architectures 7cbe9e94c4 util: bitmap: Rewrite virBitmapShrink using new helpers e506e0b3f1 util: virbitmap: Extract clearing of unused bits at the end of the last unit e572150ebe virbitmap: Extract and reuse buffer size calculation into a function cfe638ef80 virBitmapNewCopy: Honor sizes of either bitmap when doing memcpy() 99acc29557 NEWS: Fix naming of DISK_DETECT_ZEROES migration parameter f7c89763b1 qemu: Do not hardcode Hyper-V feature names on command line ca8c0862ac qemu: Add more translations to virQEMUCapsCPUFeatureTranslationTable 5148f64a3c ci: refresh with 'lcitool manifest' e937929c16 wireshark: drop gmodule.h include to avoid glib warnings c891f17c2b tests: stop stubbing libselinux APIs for purpose of data overrides 0fd36e9656 lxc: fix variable storage order before call f2710260d4 qemu_namespace: Only replicate labels on created files 26f249034d qemu_namespace: Properly report new files 2b19f4b82d qemu_namespace: Rename variable 9cff1e29d3 tests: qemucapabilities: Add test data for the qemu-9.2 dev cycle ec47e2e0fd qemuxmlconftest: Add '9.1.0' versions of test cases for 'reconnect' option of chardevs baa4edfb79 qemu: chardev: Use 'reconnect-ms' instead of deprecated 'reconnect' 23fa1d2184 qemu: capabilities: Introduce QEMU_CAPS_CHARDEV_RECONNECT_MILISECONDS 050398a4c3 qemuxmlconftest: Pin 'disk-network-gluster' case to qemu-9.1 4beb255138 qemuxml(conf|active)test: Use 'nbd' instead of 'gluster' in 'disk-backing-chains-(no)index' cases d018c8dc9e qemuxmlconftest: Use only 'nfs' protocol in 'disk-network-nfs' e4829506fa qemublocktest: Mark 'gluster' case in image creation test as deprecated b9e43f882f qemublocktest: Mark gluster cases in XML->json->XML tests as deprecated b6545bcec1 qemublocktest: Convert all 'gluster' instances to 'nbd' in 'xml2json' cases 81493d8eb6 apparmor: Allow running i686 VMs on Debian 12 e996536a3b Remove pointless bool conversions d7a57f5275 Translated using Weblate (Swedish) e2c6f4c800 qemu: snapshot: Remove dead code in 'qemuSnapshotDeleteBlockJobRunning' 2e29ab3269 NEWS: mention zero detection for non-shared-storage migration 332ee4931a docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES 04d6a0ec5d qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES 0c653fc9a5 util: Rename variable "major" in virIsDevMapperDevice f07068d61c Translated using Weblate (Swedish) 46d0f88f8b Translated using Weblate (Swedish) e29d087f23 Translated using Weblate (English (United Kingdom)) 50cc7a0d9d docs: Document watchdog action=dump slightly more 37800af9a4 network: inhibit idle timeout of daemon if there are any active networks f677665ce9 Translated using Weblate (Swedish) d721b6840f libxl: Reject VM config referencing nwfilters 068771068d NEWS: Mention documention improvements of image format settings c0ba3ed69d network: a different implementation of *un*setting firewalld zone when network is destroyed cb4e38d4b1 network: a different way of supporting firewalld zone for mode='open' networks d552d810b9 network: call network(Add|Remove)FirewallRules() for forward mode='open' ef760a4133 Revert "network: support setting firewalld zone for bridge device of open networks" 816876f517 Revert "network: *un*set the firewalld zone while shutting down a network" bd6d7ebf62 qemu: Use consistent naming for save image format b0dc8a923d qemu: conf: Improve the foo_image_format setting descriptions 07467e2719 docs: Prohibit 'external' links within the webpage dcc8deb536 docs: newreposetup: Drop section about 'libvirt project server' 5c1ba38913 docs: Use relative links within the web page bafb54f073 kbase: Fix link in 'merging_disk_image_chains' article 86a5acbe10 docs: Reject non-https external links 8618535990 docs: remote: Replace broken link to article about 'ssh-agent' 72fb7cd75c news: mention internal snapshot changes aa08a30048 qemu: snapshot: Allow internal snapshots with PFLASH nvram 8be8b7de78 qemuSnapshotActiveInternalDeleteGetDevices: Add warning when deleting inconsistent snapshot eac1a86f72 qemu snapshot: use QMP snapshot-delete for internal snapshots deletion b93af62c40 qemu snapshot: use QMP snapshot-save for internal snapshots creation 6d8ae98fa0 qemu: monitor: Store internal snapshot names from 'query-named-block-nodes' 9df1453db8 qemu: capabilities: Introduce QEMU_CAPS_SNAPSHOT_INTERNAL_QMP capability ce4ed8deef qemu: blockjob: Add job types for 'snapshot-save/delete' 5d0773633a qemu: monitor: Add plumbing for 'snaphot-save'/'snapshot-delete' QMP commands 2e325804cc qemuDomainObjWait: Annotate with G_GNUC_WARN_UNUSED_RESULT 93d97d8fa2 cpu_map: Drop vmx-invvpid-single-context from CPU models b1d4196580 cpu_map: Drop vmx-ept-{uc,wb} features from CPU models 29aa9b02aa qemu: Replace big condition in virQEMUCapsCPUFilterFeatures with array 98700d354b qemu: Translate vmx-invvpid-single-context-noglobals CPU feature 662e511d1e cpu-data.py: Properly handle aliases 00e55059e6 qemu: Do not drop unknown CPU features from domain XML aae8a5774b qemu: Drop vmx-* from migratable CPU model only when origCPU is set cd630c1b16 Translated using Weblate (Swedish) 51e9a281bd Translated using Weblate (Korean) 9c962b3902 Translated using Weblate (Swedish) 215cada343 util: Look for newer name of cpu wait time statistic 7d6759135e qemu: Handle locking of TPM state directory for incoming migration 454219ad6c security: Allow skipping locking when labeling lock files 8fe803247e security: Always forget labels for TPM state directory 3bfcb35dd5 qemu: migration: Don't remember seclabel for images shared from current host b581045520 storage_source: Add field for skipping seclabel remembering eabeae605f security_(dac|selinux): Unref remembered security labels on outgoing migration 2983dd44c5 virSecuritySELinuxRestoreImageLabelInt: Move FD image relabeling after 'migrated' check 568b3c6abe virParseOwnershipIds: Refactor 7af0b6ea75 virFileIsSharedFSOverride: Export da0c363835 qemu: Always set labels for TPM state f7b9313ec7 utils: Use overrides in virFileIsSharedFS() 6952af8b43 qemu: Propagate shared_filesystems df3597ee70 qemu: Introduce shared_filesystems configuration option 5ea466648c security: Fix alignment c6ba83b3e4 test_driver: provide basic NIC hotunplug support cda4ee02a6 test_driver: provide basic NIC hotplug support 3b296a98aa domain_validate: Validate dma_translation for iommu models 8105426d8f libxl_conf: Add check for unsupported graphics type cb2a6ef8b5 libxl_conf: Fix config generation for multiple serial devices 655225315c Translated using Weblate (English (United Kingdom)) 5f81aa953e Translated using Weblate (Swedish) 89ce634253 virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter 621f879adf qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES' 448b14f74d qemu: migration: Remove 'nmigration_disks' variable from all places aaefaabf5a qemu: migration: Extract validation of disk target list 4ebf1acb83 qemu: migration: Avoid use of 'nmigration_disks' d98beef107 qemu: migration: Don't log 'nmigrate_disks' ab52a069ee qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk() 9bf319147c virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated 7933310ce9 virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields b74fed0173 virTypedParamsFilter: Introduce option to filter also by type e5fae984b1 virTypedParamsGetStringList: Refactor and adjust docs 933ab93e8f virTypedParamsFilter: Adjust return type and docs 165b30e06a qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation 54109db826 qemu: blockjob: Clean out disk mirror data after concluding the job b85b60d140 qemu: blockjob: Update 'mirror' of a copy job before removing images fc4d0e7461 testutilsqemuschema: Support 'unstable' feature in QMP schema validator 7203b7df6b testutilsqemuschema: Rename and document 'testQEMUSchemaValidateDeprecated' f05488f78c Post-release version bump to 10.9.0 314fd5f40c Release of libvirt-10.8.0 bcd5ae4e73 qemu: fix regression in update-device for interfaces 120de48828 Translated using Weblate (Swedish) ded649c09e NEWS: Describe more fixed things for this release 10a30b5dbb NEWS: YAJL -> json-c switch 3e15dd6fc7 news: Mention 'showmount' dependency change and overflow/memleak fixes b4c910d5a4 NEWS: add blurbs about a couple of bugs I fixed this month 55c3c09197 qemu: Look for qemu-bridge-helper in more directories ed1fa1d197 Translated using Weblate (Swedish) 8efd3762db Translated using Weblate (Ukrainian) e400c88a61 Translated using Weblate (Korean) 4cf8067c73 ci: adapt to 'dtrace' package split 8a9750cb29 Translated using Weblate (Korean) 1609138e50 Update translation files c50fe682e9 po: Refresh potfile for v10.8.0 f527da37be cpu_map: Fix SierraForest CPU model 97f41f4878 Translated using Weblate (Swedish) 785dfad13c rpc: ssh: Allow SSH_ASKPASS_REQUIRE 6126f743b1 qemu: Provide sane default for dump_guest_core 18b61cb4f9 qemu.conf.in: Fix dumpCore capitalization 8287ca7119 Translated using Weblate (Swedish) de8b3b9764 Translated using Weblate (Georgian) badc4b44f8 Translated using Weblate (Swedish) ff94824125 Translated using Weblate (Swedish) d86dc9d308 Translated using Weblate (English (United Kingdom)) 469824ce21 Translated using Weblate (Swedish) 6f0974ca32 qemu: Generate domain memory backing path directly f035f24777 qemu: Rename memory path functions d599fc3d57 qemu: Make qemuGetMemoryBackingDomainPath static ff49d2a8c2 qemu: Use per-domain private memoryBackingDir for new memory backends f58a4dc9d5 qemu: Set memoryBackingDir in private data upon start da8a1d7943 qemu: Add memoryBackingDir to qemuDomainObjPrivate c9a35eb255 qemu: Change parameters of qemuGetMemoryBackingDomainPath() edcf14be9c qemu: Move domain-related functions to qemu_domain 1c76827270 meson: Sort values reported in summary() 794d49e3cf meson: Restore alphabetical order of reported libraries 6d09340d6f ci: drop yajl completely 81e532c701 util: json: remove yajl implementation d96e753d84 meson: options: drop yajl 84198ad88a nss: convert findMACs to use json-c a8d828c88b nss: convert findLeases to use json-c 9e6555fd90 util: json: write a json-c implementation 28c9872639 meson: switch checks to depend on json-c as well as yajl 1873b54512 meson: add option for building with json-c 297fbcb346 ci: install json-c too dcb7cfd149 build: introduce WITH_JSON 8eba36d4b1 tests: switch to compact empty JSON object formatting 330cf7f492 util: json: introduce virJSONStringPrettifyBlanks e14a5fcac4 util: use uint32 instead of char[4] for several virSocketAddrIPv4 operations 009464902a util: make virSocketAddrIPv4 a union 14623a3424 util: fix virSocketAddrMask() when source and result are the same object f7a2d158f7 network: fix argument order/log level in message about firewall_backend c7ea694f7d qemu: rework needBridgeChange/needReconnect decisions in qemuDomainChangeNet() 601f4160b9 qemu: replace open-coded remove/attach bridge with virNetDevTapReattachBridge() e3f8bccea6 util: don't return early from virNetDevTapReattachBridge() if "force" is true a37bd2a15b qemu: prevent unnecessarily failing live interface update 852380cef5 qemuBuildChardevCommand: Remove unused variable 24d468993c qemu: Reject unsupported chardev backend protocols 3778964207 conf: Convert 'protocol' field of TCP char device backend to proper type 2256466f70 qemu: monitor: Remove the old chardev backend generator e352a692a7 qemu: Use the new chardev backend JSON props generator also in the monitor d897ad2b89 qemu: Move check for chardev backends which can't be hotplugged out of the monitor b8129d2530 qemuxmlconftest: Add test case for QMP schema validation of -chardev backends e00739ff0d qemuxmlconftest: Add support for validating schema for 'chardev-add' 36d06a5637 qemu: Introduce unified chardev backend config generator 1bc023cae8 qemuxmlconftest: Add 'chardev-backends' test case 9c88a566d8 qemu: capabilities: Explain that QEMU_CAPS_CHARDEV_JSON will be used in tests only d2dd209cdd Translated using Weblate (English (United Kingdom)) 03970c886b Translated using Weblate (Swedish) 2e9af9674c Translated using Weblate (Swedish) 22d0c0fd32 Translated using Weblate (Swedish) 1a62add889 Translated using Weblate (Swedish) 08aad30cbb Translated using Weblate (Swedish) f1fd89fea7 Translated using Weblate (Swedish) a2f5095b93 Translated using Weblate (English (United Kingdom)) 31c19057a7 Translated using Weblate (Swedish) e95a1e89af Translated using Weblate (Swedish) 50404ad307 rpm: Add riscv64 to arches_qemu_kvm 200f60b2e1 network: *un*set the firewalld zone while shutting down a network 1a3778fe0a network: remove firewalld version check from networkSetBridgeZone() 1a72b83d56 network: support setting firewalld zone for bridge device of open networks eeebbc1eec network: belatedly update an error message 114c0ec656 network: permit <forward mode='open'/> when a network has no IP address d0a48eeb72 network: Remove unused variable in networkDestroy 8a2717e803 network: Clean up after disappeared transient inactive networks 2bea2782d5 network: Separate cleanup from networkRemoveInactive 74a22c09be network: Try to read dnsmasq PIDs for inactive networks too 447fda8981 network: Clean up after inactive objects during start 0e43cb09ee network: Don't check if network is active in networkShutdownNetwork 3e43670f01 network: Move port deletion into the shutdown function 5988fdec91 network: Do not call virNetworkObjUnsetDefTransient on start cleanup 97ed0574ea network: Do not update network ports for inactive networks 02b57caf5e tests: Fix typo in README.rst of qemucapabilitiesdata d622ca04f6 apparmor: Don't check for existence of templates upfront 4b68c7e55b resctrl: Do not rewrite default MB values for new allocations ebc4580a5f Revert "vircommand: Parse /dev/fd on *BSD-like systems when looking for opened FDs" 308ec0fb2c vircommand: Parse /dev/fd on *BSD-like systems when looking for opened FDs 4df8dc576f vircommand: Make sysconf(_SC_OPEN_MAX) failure non-fatal 6ded014ba3 vircommand: Isolate FD dir parsing into a separate function dfe496ae33 vircommand: Drop unused arguments from virCommandMassCloseGetFDs*() 8cf7d0d457 tests: Add caps2xml and resctrl data from the wild bfad111c43 resctrl: Use cache IDs instead of max_id/max_cache_id f3fd0664cf resctrl: Don't assume MBA availability in virResctrlAllocNewFromInfo bc97a2c043 capabilities: Also report L2 caches 4437a775dc resctrl: Add virResctrlInfoPerTypeFree 7c40f1ead9 resctrl: Add virResctrlInfoMemBWFree 03b6383f33 resctrl: Move virResctrlAllocCopyMemBW up in the file d7e3a15a98 resctrl: Relax the limit of maximum memory bandwidth allocation b4f93ae8af docs: Document memory bandwidth allocation limits more clearly eae19bb505 resctrl: Account for memory bandwidth of 0 being valid b04730f6f2 docs: Clarify hypervisor support for nwfilter profiles f60e5f87d4 documentation: Remove untrue statement in GetVersion() description 0186a13f54 Translated using Weblate (Swedish) 80faf18068 Translated using Weblate (Swedish) cc05007a43 vmx: use xmlBufferDetach() when applicable 09ebe53349 util/virxml: use xmlCtxtGetLastError when applicable 317139a316 util/virutil: Use readpassphrase when libbsd is available 94e8a5b650 vmx: Allow '*' to appear in VMX file keys 5f6ccb0875 Allow apparmor parser to be executed in /usr/bin d15b7c3859 qemuxmlconfttest: Add test case for invalid disk target e562b16ede virDiskNameParse: Fix integer overflow in disk name parsing a9ede822da virconf: Properly fix numeric overflow when parsing numbers in conf files 23cb613606 internal: Add helper macro for checking multiply and add overflows 3c5839973f virDomainFeaturesDefParse: Add comment warning about features being specified repeatedly ead2419df3 virDomainFeaturesTCGDefParse: Don't leak 'tcg_features' when '<tcg>' feature is repeated 574769ceb6 virDomainFeaturesHyperVDefParse: Don't overwrite hypervisor vendor_id 8e28f2c5c2 virBitmapShrink: Do not attempt to clear bits beyond end of buffer bc02cb9506 virDomainDefParseBootInitOptions: Don't leak 'name' on failure 2feeefc0b4 cpu_map: Install SierraForest description file b7a133f200 Translated using Weblate (Swedish) ecffc91d02 qemuBackupDiskDataCleanupOne: Don't skip rest of cleanup if we can't enter monitor 8666523b7d virconf: Fix numeric overflow when parsing numbers in conf files 5d77061d7e conf: Don't overwrite KVM feature config struct if the feature is present twice 3afbb1644c cpu_map: Add SierraForest CPU model 6ac72ea6dd cpu_map: Add missing feature "avx-vnni-int16" 4d3a2c61a3 Translated using Weblate (Swedish) be183218ed Translated using Weblate (English (United Kingdom)) 9b22c25548 qemu: backup: Use 'async' monitor in 'qemuBackupDiskDataCleanupOne' 2ccb213f94 virshtest: Add test case for script friendly options fc9442a638 NEWS: Mention breakage of scrip-friendly virsh output 0082148420 virsh: cmdList: Revert to script-friendly output for 'virsh list --uuid' a35a355b09 tests: qemucapabilitiesdata: Add caps for 'caps_9.1.0_riscv64' (captured on x86_64) 712b2c8f01 tests: qemucapabilities: Update 'caps_9.1.0_x86_64' for final release 61c8a7180e qemuProcessSetupRawIO: Refactor return value and remove useless #ifdef d02a77c2ff spec: Demote 'nfs-utils' as a weak dependency of 'daemon-driver-storage-core' ce1c9bb8ea storage: fs: Remove build-time detection of 'showmount' program 6f10d15ca1 spec: Fix dtrace BuildRequires on fedora 41+ f6fb097e11 virnetdevtap: Add better error message for a possible common user error 4ce9196dc4 virnetdevtap: Do (not) use NULLSTR consistently a16bd55819 Translated using Weblate (Swedish) ad92468924 qemu: Use pvpanic by default on aarch64 6d92185a49 qemu: Sometimes the default panic model doesn't exist 9e1970efa5 qemu: Refactor default panic model f22583c6c4 tests: Add coverage for panic on riscv64 ac05dc8d4f qemu_driver: Fix indentation 3a4a26f53e Post-release version bump to 10.8.0 7d72b18017 Release of libvirt-10.7.0 d9eac9bb54 NEWS: Mention fix for CVE-2024-8235 f4ebbb1dcb Translated using Weblate (English (United Kingdom)) 76f6caee3c qemu: Fix a few comments 479b9b1325 Translated using Weblate (Ukrainian) f582acfcb5 Translated using Weblate (Korean) 8dfb12cb77 udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) 3284b0d8cd docs: Document presence of PS/2 feature in domcaps 725afb4e7b qemu: Expose availability of PS/2 feature in domcaps e0e496d90c qemu: Change signature for virQEMUCapsSupportsI8042Toggle() d292c5ba17 qemu: Export a few functions 21562c4df6 NEWS: Add an entry for network support in ch driver. d9be0beb4c ch: Enable bridge network mode 8a44f78625 ch: interface: correctly update nicindexes 4d8ebbfee8 virschematest: Replace g_lstat() with virFileIsLink() 48bdeaf2fa Update translation files 87c3fa1cde conf: check for migration job during domain start cabb0dda0e po: Refresh potfile for v10.7.0 1819dcbebc Translated using Weblate (Chinese (Simplified) (zh_CN)) 38fddf2250 Translated using Weblate (English (United Kingdom)) 805f66d7ca hypervisor: interface: Stub out virDomainCreateInBridgePortWithHelper using 'socketpair' on win32 1b815465d9 remoteDispatchConnectOpen: Fix check for 'BHYVE' connection type aa64209073 ch: Enable NAT Network mode support af87ee7927 hypervisor: Move domain interface mgmt methods 7b6702d516 hyperv: Support hv-xmm-input enlightenment 0313a500a9 hyperv: Support hv-emsr-bitmap enlightenment d543c4e753 Translated using Weblate (Chinese (Simplified) (zh_CN)) 0888784f38 qemu: Use virEventThreadStop() in qemuProcessStop() 7aca235d8d vireventthread: Introduce virEventThreadStop bec195607c NEWS: Mention the new 'ps2' feature 825516e6e3 qemuxmlconftest: Add test cases for the new 'ps2' feature a9a5f8ef39 qemu: Introduce the 'ps2' feature 9eb3c28323 qemu_capabilities: Introduce QEMU_CAPS_MACHINE_I8042_OPT 51521d13a8 qemu: Improve PS/2 controller detection 22fc1e2977 Translated using Weblate (Chinese (Simplified) (zh_CN)) 4aaa2aa4cc Translated using Weblate (English (United Kingdom)) 62d6e8dcb2 qemu: validate: Reject empty USB disks 204013d4aa qemu: block: Allow NULL 'data' in 'qemuBlockStorageSourceChainDetach' 85e07fb1ce security: apparmor: Allow QEMU read /proc/sys/vm/max_map_count a70cdeeb2a conf: Validate QoS values ab489ea318 conf: Introduce virNetDevBandwidthValidate() f644cba8ae virsh: Simplify vshTableRowAppend() calling in cmdList(), part two cf0e0715e0 virsh: Simplify vshTableRowAppend() calling in cmdList(), part one ab7f877f27 lib: Use NULLSTR family of macros more 3780522968 Translated using Weblate (English (United Kingdom)) 797dd8ffca Translated using Weblate (English (United Kingdom)) 1627f38a2c Translated using Weblate (Chinese (Simplified) (zh_CN)) 4de8962a79 virarptable: End parsing earlier in case of NLMSG_DONE ef84581a69 virarptable: Fix check for message length e7530769e8 virarptable: Properly calculate rtattr length 271940223c virsh: allow both --table and --uuid at the same time b1524a3efc ci: update OpenSUSE Leap to 15.6 0290dbeac7 tests: json: relax some test cases 1371aeb281 Translated using Weblate (Chinese (Simplified) (zh_CN)) f547c76bc5 Translated using Weblate (Swedish) 239cfeaf55 formatstorage: Document qcow2 default version change 03852c85af cpu_map: Add GraniteRapids CPU model 19f30f68ce sync_qemu_models_i386.py: Add missing features a18b232712 cpu_map: Add libcpuinfo as optional data source b3edf03c31 qemu: hotplug: Rollback FD passthrough for 'slirpfd' and 'vdpafd' on hotplug failure 1b797e6421 virnetlibsshsession: Reflect API change in libssh c195be19ab Translated using Weblate (Swedish) 6215035e37 Translated using Weblate (Swedish) 8fce5916f3 Translated using Weblate (Swedish) a2451f6da5 Translated using Weblate (Swedish) 244fdeba69 Translated using Weblate (Swedish) cd9709a6ab glibcompat: remove obsolete clang workaround 71f14351f9 qemuxmlconftest: Add test cases for broken and missing XML files 4dc889a626 testQemuConfXMLCommon: Strip 'abs_srcdir' paths from '.err' files in qemuxmlconftest 63080f0582 glibcompat: "Backport" 'g_string_replace' 66112fbabb NEWS: Mention restore with n/w devices support for ch c4be2cb2de ch: kill CH process if restore fails 0587ee2aab ch: support restore with net devices 4ae70b7c2d ch: refactor virCHMonitorSaveVM fd34fbed79 ch: use monitor socket fd to send restore request 4919f3a120 ch: support poll with -1 in chSocketRecv ea271081dd ch: refactor chProcessAddNetworkDevices 3e41cd5e82 ch: Pass net ids explicitly during vm creation fa66343ef9 ch: report response message instead of just code 14ca8ef256 qemucapabilitiesdata: Update data for qemu-9.1 dev cycle on x86_64 022457e748 qemuxmlconftest: Don't use soon-to-be-removed machine types c122aa1021 qemuxmlconftest: Add test for old-style NUMA memory specification 6d7dd09e8a qemu: format dma-translation on intel-iommu command line 6866f958c1 conf: add dma_translation attribute to iommu b2cc19e5fd qemu_capabilities: Introduce QEMU_CAPS_INTEL_IOMMU_DMA_TRANSLATION 11f6773f19 qemu: Avoid false failure when resuming post-copy migration 79e0b50bb6 qemu: Add support for postcopy-recover-setup migration state 18fd4899f3 vsh: Allow vshReadlineInit() to be called multiple times 376e0424d8 Translated using Weblate (Swedish) b6f6b45f7b Translated using Weblate (Swedish) f3e670ee6b network: fix crashing "modify" option for hostname 959ecee474 network: NULL check for "modify" DNS-txt records 0caacf47d7 apparmor: Allow more paths for qemu-bridge-helper 2be2fb9a9f Allow unmounting some things libvirt mounted 432e442ca8 qemuxmlconftest: Add tests for the ACPI stripping hack on s390 4ba4f659e4 qemu_domain: Strip <acpi/> from s390(x) definitions ee84b85a17 Translated using Weblate (Swedish) 049846497b Post-release version bump to 10.7.0 a33190e717 Release of libvirt-10.6.0 b2de9720f4 Translated using Weblate (Swedish) 30a71fd6a0 Revert "network: allow "modify" option for DNS-Srv records" 49433d41e4 Translated using Weblate (Swedish) 6b521fef8c Translated using Weblate (Swedish) ac0b669c56 security: Allow RW access to pstore device d913f204e0 qemu: Pre-create pstore device file 3033a9380f Translated using Weblate (Korean) a0ecbb46e4 Translated using Weblate (Swedish) 106a87aec8 Update translation files 87789cbcbf Translated using Weblate (Swedish) aec390df81 NEWS: Document features/improvements/bug fixes I've participated in de355b7873 qemu: Autofill pstore path if missing 7428738597 po: Refresh potfile for v10.6.0 d842afb88f Translated using Weblate (Swedish) c33a4d0a2f Translated using Weblate (English (United Kingdom)) bd11c753f3 virsysinfo: Calculate OEM string index better 5bb4540dbb virsysinfo: Be more forgiving when decoding OEM strings 98a9dc532d tests: Add HPE Apollo test case to sysinfotest 185065b645 virsysinfo: Trim newline when decoding OEM strings b103200bf3 vircommand: Initialize dryRunStatus to portable EXIT_SUCCESS instead of 0 716243f1f7 NEWS: Document pstore device addition 9faa615384 security: Set seclabels for pstore device 3cfe4caa0a qemu: Build cmd line for pstore device 90e50e67c6 conf: Introduce pstore device 4a9c2d9bbe qemu_capabilities: Introduce QEMU_CAPS_DEVICE_ACPI_ERST 8d3b239737 qemu: virtiofs: cache: use 'never' instead of 'none' e62c26a20d qemu: add a monitor to /proc/$pid when killing times out e5eb64e9fd qemu_hotplug: Do not allow absent values in rom settings b53e9f834b virtiofs: rename member to 'openfiles' for clarity ce9c9e315f meson: correct git detection e5232f6fd6 virt-host-validate: Allow longer list of CPU flags Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kvmtool: update -tipBruce Ashfield2025-01-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping kvmtool to latest, which comprises the following commits: 6d754d0 Reset all VCPUs before any entering run loops 9b26a8e arm64: Increase the payload memory region size to 512MB 32345de arm64: Use the kernel header image_size when loading into memory ca57fb6 arm: Check return value for host_to_guest_flat() 167aa1e arm: Fix off-by-one errors when computing payload memory layout 2be69d9 builtin-run: Allow octal and hex numbers for -m/--mem 574bd7b riscv: Pass correct size to snprintf() 3040b29 riscv: Add Zimop extension support 1f0e5ba riscv: Add Zcmop extension support 9f50870 riscv: Add Zcf extension support 80d2e0c riscv: Add Zcd extension support 78bafd5 riscv: Add Zcb extension support 4b8b352 riscv: Add Zca extension support c7a4bd9 riscv: Add Zawrs extension support b862ed4 Sync-up headers with Linux-6.11 kernel b48735e disk/core: Fix memory leakage in open all disks 100fade riscv: Correct number of hart bits 027784f riscv: Set SBI_SUCCESS on successful DBCN call fa958fb riscv: Add Sscofpmf extensiona support 0117153 Sync-up headers with Linux-6.10 kernel 0592f8f remove wordsize.h inclusion (for musl compatibility) ca31abf arm64: Allow the user to select the max SVE vector length 32f8103 riscv: Add Zacas extensiona support a20adc6 riscv: Add Ztso extensiona support 85aaadf Sync-up headers with Linux-6.9 kernel da4cfc3 x86: Fix some memory sizes when setting up bios d38c8f7 riscv: Allow disabling SBI STA extension for Guest 9cf213d riscv: Add Zfa extensiona support 5a64c1e riscv: Add Zvfh[min] extensions support fce2865 riscv: Add Zihintntl extension support bd7f13c riscv: Add Zfh[min] extensions support 65b58f7 riscv: Add vector crypto extensions support d9052a9 riscv: Add scalar crypto extensions support 8b4cc70 riscv: Add Zbc extension support f8c9614 kvmtool: Fix absence of __packed definition 9968468 Sync-up headers with Linux-6.8 for KVM RISC-V 4d2c017 Fix 9pfs open device file security flaw Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: update to 24.4.1Bruce Ashfield2025-01-171-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cloud-init to version 24.4.1, which comprises the following commits: 4b475ed36 Release 24.4.1 470f652da fix: Ensure _should_wait_via_user_data() handles all user data types (#5976) e702638be fix: Don't log error in wait_for_url (#5972) 30232cfd4 feat(url_helper): Retry on 503 error (#5938) b2cf0a6fd fix: Don't break modules that use get_meta_doc() (#5953) 07db0da44 refactor: Pass deprecation log args as tuple (#5953) 4d559e732 fix: uninstall custom signal handlers before shutdown (#5913) c9b9eef30 Release 24.4 82f94812b test: Ensure unit ordering in ftp tests includes downstream units (#5892) 9f2cae7fa test: re-decrement expected webhook events (#5894) ba04e4c41 test: allow relative path in apt-get test (#5891) d3b7e121d Fix metric setting of nmconnection for rhel (#5878) edaaeeabc chore: remove unused code(#5887) 1f520d93d feat(ephemeral): replace old has_url_connectivity() with new _check_connectivity_to_imds() c0e3ecf20 feat(oracle): add true single stack ipv6 support 062a12b69 feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check aedb7f97a test: Decrement expected webhook events (#5888) 1ef775162 chore: remove `--docs` option from `cloud-init schema` (#5857) 3c24560cb test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885) dd448e0ac ci: bump integration tests to use plucky 7f5065e7d test: add grub_dpkg to inactive modules 892b59863 test: move default behavior tests into their own module 70c28373f test(apt): add plucky version for hello pkg (#5883) 6beb71f61 Docs: improved mermaid diagram for better visibility. Add "MaheshG11" as contributor (#5874) df9e51ccc fix(ntp): Fix RockyLinux OS support (#5864) 368232532 chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856) 7f9a34fd8 chore: remove deprecation warning getting jsonschema's version (#5856) 5950099a3 chore: use filter arg for tar.extractall (#5856) cd74e9948 chore: remove __init__ from pytest test class (#5856) f94256b04 chore: do not test element's truth value directly (#5856) 345043f56 chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856) d6efb3eb9 chore: migrate from deprecated datetime.datetime.utcnow() (#5856) b3120f7fe chore: set recursive=False for ensure_dir if parent path is "/" (#5816) fad947594 ci: fix broken daily dependencies (#5867) e15b5d729 ci: fix packaging tests (#5865) acbb26c1d feat(vultr): add override for network interface detection (#5847) aeccf8991 feat(networkd): Support RequiredForOnline option (#5852) 2df49b652 Prevent NM from handling DNS when network interfaces have DNS config (#5846) 5e1a8cbeb fix(smartos): Add `addrconf` IPv6 support (#5831) 96a07fb75 freebsd: adjust to match the new pyyaml package name (#5844) 4b56c5cb5 fix: disable grub-dpkg by default (#5840) a911b5e58 fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790) 4c156a803 test: Fix duplicate judgment conditions in password generation (#5835) d1d7af662 chore: don't render non-templated unit files (#5830) be88242be chore: simplify and standardize cloud-final.service (#5830) cb0c08ded chore: simplify Conflicts=shutdown.target (#5830) 069efee7d chore: remove redundant Before=NetworkManager.service (#5830) 9bb0a882b chore: remove unnecessary systemd settings (#5830) 0680d0330 chore: eliminate redundant ordering dependencies (#5819) df51941e2 fix: fix ordering cycle for distros with default deps (#5819) 7ff199ad7 test: unbreak pytest-xdist (#5829) e30549e88 feat: Conditionally remove networkd online dependency on Ubuntu (#5772) 879945f56 feat: Ensure random passwords contain multiple character types (#5815) 5819c942a docs: split example page into example library (#5645) 1fc063a57 doc: clarify workarounds required for single process changes (#5817) 0c24aa29d chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825) 9554338e6 fix: Render v2 bridges correctly on network-manager with set-name (#5740) 5f90d9656 test: add no_thinpool unit test (#5802) 64a622b42 chore: split lxd init config into separate function (#5802) 11586cd46 test: pytestify test_cc_lxd.py (#5802) 296b296ee fix: Correctly handle missing thinpool in cc_lxd (#5802) a8f69409e fix: Render bridges correctly for v2 on sysconfig with set-name (#5674) 39f2742b7 tests(minimal): rsyslog not in minimal images expect warning (#5811) efcd4889d tests(lxd): avoid failure on multiple calls to --show-log (#5811) 40f9bae1f chore: update netplan import semantics and related tests (#5805) 5d2ff7335 lint: fix untyped-defs on /tests/unittest/cmd (#5800) 760ded95a test: actually use devel release and verify_clean_boot enhancements (#5801) dba2dd3a3 feat(locale): locales install on minimal images when cfg requests (#5799) 90d905b7f feat(byobu): support byobu install on minimal images when cfg requests (#5799) 0f77b3c13 chore: Use devel release and no sbuild in integration CI (#5798) 4de61f395 test: Update integration tests from netplan backport (#5796) e10b09be3 test: add get_syslog_or_console for minimal images without syslog (#5793) beb08710a chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) dcfb2c93e docs: Fix field name from `contents` to `content` (#5787) a57a565b8 chore: bump pycloudlib to required version (#5792) 55de797e4 fix: avoid deprecation logs for calling cli stages (#5770) 99f4ca4f9 tests: bump pycloudlib deps to include gce bug fix for id str (#5783) 9df99d82c fix(test): convert use p.gce.instance.id instead of instance_id (#5783) 2b15be199 fix(network-manager): bond properties and network schema (#5768) a399f4b08 Fix metric setting for ifcfg network connections for rhel (#5777) ce8078147 fix(akamai): handle non-string user data in base64 decoding (#5751) 545e9ac2f fix(ci): do not auto stale issues (#5775) 11298f41d Make pytest more verbose for easier debugging (#5778) f9082bf85 ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting (#5774) 2e866d38d tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682) dc3cfde68 test(hotplug): Simplify test_multi_nic_hotplug (#5763) ff336d423 test(hotplug): increase nc timeout (#5763) 9dff1af8c test: pytestify test_main.py (#5758) 27f89c610 test(ec2-dual-stack): fix int-test (#5762) 178b0699b test: make verify_clean_boot really respect return code (#5761) d5d6df590 test: bump timeout in test_order (#5759) c9fa9067c docs: Properly document the cc_ubuntu_autoinstall module (#5757) b15263e32 docs: fix WSL tutorial (#5752) 5133c838b test: make verify_clean_boot respect return code by environment (#5754) e6183967e feat(integration_test): add CLOUD_INIT_PKG setting (#5739) bbe6191ca fix(ci): fix packaging check merge operation (#5750) 9491566d8 doc: do not document user.meta-data key (#5745) 590fd3eeb test: avoid undocumented lxd key (#5748) c9dce94d3 test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727) 7988b8189 chore: update docs URLs to cloud-init.io (#5741) 6725c0f89 test: fix timer logging change expected logs (#5734) 1dd685065 fix: type annotations for several modules (#5733) 70d4a5c25 chore: add timer to io and string manipulation code 71cc75cee feat: add log package and performance module f114c6387 remove newline injected for cloud-init status --wait (#5700) d1ce9b456 test: webhook require_deprecation msg on 24.3 (#5731) 869d624a5 test: fix test_nocloud message typo introduced by 313390f8 (#5731) fc2147ad4 test: Fix test_log_message_on_missing_version_file (#5730) 3505c02e9 tests: assert info level warnings instead of require_deprecation 6113b0e0a tests: fix test to ignore_warnings not require Used fallback ds c93c259d3 chore: clean up pytest warnings (#5721) 067a464e0 tests(pro): bump pycloudlib add noble release to pro tests (#5719) b36ddb195 fix(hotplugd.socket): remove basic.target as dependency (#5722) eef27eb19 ci: fix integration test positional argument (#5718) 53857c865 Create datasource for CloudCIX (#1351) 9d0fc5ae9 ci: colorize output (#5716) ddb62cc09 fix(schema): Allow for locale: false in schema add tests (#5647) 0a021418d ci: fix packaging patch check (#5713) c4847202f chore: clean up old pickle workaround (#5714) 436126b2b fix: force sftp cleanup when done with instance (#5698) c62d7f22c test(hotplug): reenable vpc test in focal (#5492) df75b526a chore: fix typing of userdata_raw (#5710) bde913ae2 fix(NetworkManager): Fix network activator (#5620) 32f8554b8 fix: lxd do not check for thinpool kernel module (#5709) 654cb4414 docs: fix typo in docstring (#5708) 1c61f3f24 Scaleway: Force on-link: true for static networks (#5654) 2c80c5a0a fix: Invalid "seedfrom" in NoCloud system configuration (#5701) aad528672 tests: pytestify test_nocloud.py (#5701) a9c6b1407 test: make verify_clean_boot respect return code by series (#5695) 7a32eff8a fix: use cross-distro netcat name (#5696) b88f91010 ci: fix labeler (#5697) 920e83112 chore(actions): add packaging label for any branches modifying debian/* (#5693) 313390f81 test: add verify_clean_boot() calls alongside verify_clean_log() (#5671) 10df0c173 test: add deprecation support to verify_clean_boot (#5671) e1f05b732 doc: remove misleading warning (#5681) 7a0d957c2 chore: Prefer other methods over $INSTANCE_ID (#5661) 5d91e9639 ci: fix packaging test when no patches (#5680) 7a750e31a chore: fix tip-ruff and update to latest version (#5676) 8b9998035 chore: make ansible test serial (#5677) 1a6fd6fd3 feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565) d8fd56db0 chore: fix typo in requirements.txt (#5637) f79471a60 feat: make pyserial an optional dependency (#5637) 82efd3ec5 chore: bump ci dependency versions (#5660) eddfe02af chore: drop broken optimization (#5666) b10d90503 Release 24.3.1 (#5375) (#5663) 30addd2f3 test: add test coverage for iproute2 commands (#5651) 3e74d5e67 fix(netops): fix ip addr flush command (#5651) 9cc458c7d fix(systemd): add Before=shutdown.target to cloud-init-main.service.tmpl (#5653) 60a856ae3 test: assert that schema is valid by default (#5657) 5a74d19d0 chore(azurelinux): update cloud.cfg.tmpl for azurelinux e30ce6bf1 fix(scaleway): Don't override IPv6 routes when IPv4 not primary (#5640) 9faafb0df Release 24.3 (#5646) 5ff1a4a2b docs: Clarify v2 set-name behavior (#5639) 93f30bbfc fix: properly handle blank lines in fstab (#5643) 6d644e612 fix: cc_user_groups incorrectly assumes "useradd" never locks password field (#5355) fa042b853 tests: assert cloud-init user-data cert is the only root cert (#5641) 8bc3e4254 feat: add automation for ubuntu/* branches asserting quilt patches apply (#5622) bbdfe3663 fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633) a38d6da76 feat(azure): add PPS support for azure-proxy-agent (#5601) 6e4343eab fix(tests): use instance.clean/restart instead of clean --reboot (#5636) 8f741da4a test: fix cmd/test_schema int test (#5629) c6ba0dfab test: fix test_honor_cloud_dir int test (#5627) ca9ffac83 docs: alphabetize dsname lookup table. update comment to create the csv (#5624) 0411057e6 docs: new datasources should update reference/ds_dsname_map (#5624) 79e5d31ce test: fix ca_certs int test (#5626) a2193da3e chore: update schema docs to use RST bold for config key names (#5562) d85be37d2 fix(doc): italics around deprecation prefix, description bolds key names (#5562) fdccc6113 feat(doc): add env vars to debug config module doc builds (#5562) e14ce3d64 fix(doc): doc of nested objects under JSON schema items.oneOf (#5562) 24cdaa75a fix(doc): object type check if patternProperties or properties (#5562) 0a8bf72b9 doc(schema): schema descriptions should end with trailing stop (#5562) 56aa70636 fix(wsl): Properly assemble multipart data (#5538) c28092fa6 feat: collect-logs improvements (#5619) 2e4c39b75 tests: fix test_ca_certs.py for gcp (#5621) d79050d1b fix(nm): Ensure bond property name formatting matches schema definition (#5383) 90a319046 Update behavior of base bond interface with NetworkManager (#5385) e1845be5d ci: Drop Python 3.6 and 3.7 (#5607) 56658ec5f chore(black): Bump version (#5607) 2bb49b4f8 chore(mypy): Fix failures on newer versions of mypy (#5607) 56dc23cbe chore(tox.ini): Simplify configuration, fix minor bugs (#5607) 19a9cca47 chore(mypy): Lint log module (#5607) ac94539ab fix(systemd): Correct location of installed drop-in files(#5615) dfcc2b867 fix(btrfs): Version parsing (#5618) 07d0384be docs: Remove unnecessary section, add feature flag page (#5617) 14edf67c2 docs: Drop Python 3.6 and 3.7 support (#5617) 8b11d99d4 chore: explain other use of oauth (#5616) 4c96055e5 chore(actions): add doc label for any doc related subdir file matches (#5602) baeb35cc3 doc: Add misc links, improve wording (#5595) 001446706 doc(boot): Make first boot a dedicated page (#5595) 6ae8f6800 doc: Describe all stages in a single process (#5595) bd6cd1fbe chore: Deprecate old commands in help output (#5595) e3db1adbb chore: add comment explaining the NetworkManager may-fail setting (#5598) 65014b974 Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)" (#5596) edd92b712 fix: read_optional_seed to set network-config when present (#5593) 0787d6299 feat(snap): avoid refresh on package_upgrade: true and refresh.hold (#5426) acf04d616 fix: Fix tests which have outdated strings (#5585) 7532589f4 fix: Fix ftp failures (#5585) f93a6b5a6 doc: improve integration testing configuration instructions (#5556) b71f48f8f azure: check azure-proxy-agent status (#5138) d396de1ad refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509) c0ffdd4d0 fix: Update default LXD meta-data with user meta-data (#5584) 0aea65c20 chore: Fix log message in url_helper.py (#5583) b7b11bc04 fix: nocloud no fail when network-config absent (#5580) 143bc9e40 feat: Single process optimization (#5489) ca3e6bc3a chore: Add helper, refactor utilities into separate module (#5573) d15a7704b refactor: update handle function of cc_mounts (#5498) ea831d676 fix: Integration tests (#5576) 5322dca2f fix(NoCloudNet): Add network-config support (#5566) e6b2e0fea feat: Eliminate redundant configuration reads (#5536) b5d4f3fa1 fix(actions): correct typo in cloudinit/config/schemas/ match (#5570) f8d8a0cd4 fix: add host template for AOSC (#5557) 00317d16d chore(debian): Remove vestigial postinst and preinst code (#5569) f8c1b51f5 fix(actions): doc labeler needs all clause instead of default any (#5568) f9ab856f4 docs: Overhaul user data formats documentation (#5551) 15200a002 chore: Deprecate ENI as an input configuration format (#5561) 914a3a8a4 doc: improve drop-in custom modules (#5548) 81ef45ef8 doc(NoCloud): Categorize the different configuration types (#5521) 779dd6b00 doc(autoinstall): Remove incorrect statements, be more direct (#5545) 25058e115 chore: remove unneeded doc-lint tox env config (#5547) 2ffd6528a fix(doc-spelling): config spelling_word_list_filename (#5547) 883d8e2f9 doc(modules): add section to wrap modules' doc (#5550) e5e78c2ed doc: Update docs on boothooks (#5546) c1760751e fix: doc auto label to consider schema json changes as doc PRs (#5543) 5f9372661 feat(schema): add chef_license schema enum (#5543) 8ceae8b7b doc: add diagram with boot stages (#5539) 02beb9ab4 docs: improve qemu command line (#5540) bb4b7c0c6 fix: auto label doc PRs (#5542) 99ac8193f fix(wsl): Put back the "path" argument to wsl_path in ds-identify (#5537) f90f0b8a6 test: fix test_kernel_command_line_match (#5529) 2d2385226 test: fix no ds cache tests (#5529) 2534432bf fix(azurelinux): Change default usr_lib_exec path (#5526) 7c2d4fd63 feat: Support URI sources in `write_files` module (#5505) e1147bd02 add openeuler to distros in cc_spacewalk.py (#5530) 5532b4a69 feat(wsl): Special handling Landscape client config tags (#5460) 16a319812 chore: Deprecate partially supported system config (#5515) 7703634ec chore: Improve detection logging for user clarity (#5515) 23be88d00 fix(ds-identify): Detect nocloud when seedfrom url exists (#5515) 6e4153b34 refactor: logs.py add typing and small misc refactors (#5414) 19c86ffb4 refactor: logs.py pathlib changes (#5414) 8ec2f64ad refactor: replace verbosity with log levels in logs.py (#5414) b0a673a53 feat: Add trace-level logger (#5414) 57d130eeb chore(formatting): fix squashed commit test formatting (#5524) 550c685c9 fix: Clean cache if no datasource fallback (#5499) 0b4084374 Support setting mirrorlist in yum repository config (#5522) 658d1841f doc(OFV): Document how to configure cloud-init (#5519) 311f72347 fix: Update DNS behavior for NetworkManager interfaces (#5496) e0e6a427f Fix configuration of DNS servers via OpenStack (#5384) 8dbc5c23b test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503) 18d76ac60 tests: revert expectation of exit 2 from cloud-init init --local (#5504) a911d0795 fix(test): Fix ip printer for non-lxd (#5488) 75add5c72 feat(systemd): convert warning level message to deprecation (#5209) 8aa1c30dd test: allow verify_clean_boot to ignore all or specific tracebacks (#5209) 604d80eb6 test: Don't fail tests which call cloud-init as a command (#5209) 4abdd5a70 feat(systemd): Warn user of unexpected run mode (#5209) 7d35664ef fix: add schema rules for 'baseurl' and 'metalink' in yum repo config (#5501) 4c0468c57 Set MTU for bond parent interface (#5495) 0128716c2 refactor: util.mounts to handle errors (#5490) 188656b21 refactor: util.get_proc_env to work with strs (#5490) db828d054 typing: fix check_untyped_defs in cloudinit.util (#5490) 7130bbbb1 test: Add missing assert to test_status.py (#5494) 8a582709a test: Ensure mkcert executable in ftp tests (#5493) 0af459eac test: pytestify and cleanup test_cc_mounts.py (#5459) 2b6fe6403 fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471) 053331e5c fix(openbsd): fix mtu on newline in hostname files (#5412) 9357c3899 feat(aosc): Add 'AOSC OS' support (#5310) fd6329755 Release 24.2 (#5481) 0a4c43d47 test: Fix no default user in test_status.py (#5478) 0a7036ed7 fix: correct deprecated_version=22.2 for users.sudo b0d6c7ddc test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479) 291aabeb7 fix(test): Fix pycloudlib types in integration tests (#5350) 2bca69a9a fix(test): Fix ip printing for non-lxd instances (#5350) c95ec1a4f chore(mypy): Drop unused missing import exclusions (#5350) 8ad0bbaf6 type: Add stub types for network v1/v2 config (#5350) 73a5c512a chore: Auto-format network jsonschema in ci (#5350) e4c05e80b fix(tox): Update tox.ini (#5350) 97146b57f chore(typing): Remove type ignores and casts (#5350) b26d388ce refactor(typing): Remove unused code paths (#5350) a8cf24b7c fix(typing): Add / update type annotations (#5350) 555028524 fix(typing): Remove type annotation for unused variable (#5350) 16018b244 fix(typing): Remove invalid type annotations (#5350) 41c375c4f ci(mypy): Set default follow_imports value (#5350) 40e2eb4ae test: Update integration tests to pass on focal (#5476) c45280e98 tests: update ubuntu_pro test to account for info-level deprecations (#5475) ee1b25b73 tests: update nocloud deprecation test for boundary version (#5474) 681b7de1a fix(rh_subscription): add string type to org (#5453) d59724a15 tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY 7693ee2a6 tests: update keyserver PPA key fur curtin-dev (#5472) 0a698a57f test: Fix deprecation test failures (#5466) 5ce2ee36e chore: fix schema.py formatting (#5465) 25669f736 fix: dont double-log deprecated INFOs (#5465) 726159b9a fix(test): Mock version boundary (#5464) 121539b0f fix(schema): Don't report changed keys as deprecated (#5464) debafbc9b test: fix unit test openstack vlan mac_address (#5367) 371b2362b fix: Ensure properties for bonded interfaces are properly translated (#5367) b3618d44a fix(schema): permit deprecated hyphenated keys under users key (#5456) 70f7e78ec fix: Do not add the vlan_mac_address field into the VLAN object (#5365) bbcc67dda doc(refactor): Convert module docs to new system (#5427) 7f98af900 test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411) 8906e17ef feat: Add deprecation boundary support to schema validator (#5411) e80514b56 feat: Add deprecation boundary to logger (#5411) bcc5920a7 fix: Gracefully handle missing files (#5397) f8f9d1940 test(openstack): Test bond mac address (#5369) 12f1198e8 fix(openstack): Fix bond mac_address (#5369) 3851c5c89 test: Add ds-identify integration test coverage (#5394) 6ee007939 chore(cmdline): Update comments (#5458) 790d22918 fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435) 2c09f6917 fix(net): klibc ipconfig PROTO compatibility (#5437) 525026061 Support metalink in yum repository config (#5444) 8470af001 tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450) eb388c72f ci: PR update checklist GH- anchors to align w/ later template (#5449) 8c396a4bb test: update validate error message in test_networking (#5436) 32f0400f8 ci: Add PR checklist (#5446) ffe823661 chore: fix W0105 in t/u/s/h/test_netlink.py (#5409) 63f7237db chore(pyproject.toml): migrate to booleans (#5409) 355560312 typing: add check_untyped_defs (#5409) 2ea276548 fix(openstack): Append interface / scope_id for IPv6 link-local metadata address (#5419) db8594512 test: Update validation error in test_cli.py test (#5430) ccf5850cf test: Update schema validation error in integration test (#5429) 8fede42e3 test: bump pycloudlib to get azure oracular images (#5428) 1d9b22aa1 fix(azure): fix discrepancy for monotonic() vs time() (#5420) 2cc398b9b fix(pytest): Fix broken pytest gdb flag (#5415) a60a705aa fix: Use monotonic time (#5423) e9cfdb438 docs: Remove mention of resolv.conf (#5424) d9ff2e391 perf(netplan): Improve network v1 -> network v2 performance (#5391) 4981ea9a5 perf(set_passwords): Run module in Network stage (#5395) 5a3dc932e fix(test): Remove temporary directory side effect (#5416) 9c3258f4c Improve schema validator warning messages (#5404) 1b8030e0c feat(sysconfig): Add DNS from interface config to resolv.conf (#5401) 92f187aca typing: add no_implicit_optional lint (#5408) cbcb05349 doc: update examples to reflect alternative ways to provide `sudo` option (#5418) b533fa51a fix(jsonschema): Add missing sudo definition (#5418) f9352b946 chore(doc): migrate cc modules i through r to templates (#5313) 0976b43c1 chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313) 95f5fea20 chore(json): migrate cc_apt_configure and json schema indents (#5313) 997cbe9c4 chore(doc): migrate ca_certs/chef to template, flatten schema (#5313) 532746611 chore(doc): migrate cc_byobu to templates (#5313) c17d9416e chore(doc): migrate cc_bootcmd to templates (#5313) a01b8d31f fix(apt): Enable calling apt update multiple times (#5230) fdc250587 chore(VMware): Modify section of instance-id in the customization config (#5356) bbc72bfed fix(treewide): Remove dead code (#5332) fc2134bed doc: network-config v2 ethernets are of type object (#5381) 227538547 Release 24.1.7 (#5375) 5f40426f0 fix(azure): url_helper: specify User-Agent when using headers_cb with readurl() (#5298) 325abf1c3 fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370) fbec4d022 doc: update docs adding YAML 1.1 spec and jinja template references 28d66efb9 fix(final_message): do not warn on datasourcenone when single ds 15bce6474 fix(growpart): correct growpart log message to include value of mode 9a71ddd73 feat(hotplug): disable hotplugd.socket (#5058) f80d165e6 feat(hotlug): trigger hotplug after cloud-init.service (#5058) 617f8aff5 test: add function to push and enable systemd units (#5058) a061e81da test(util): fix wait_until_cloud_init exit code 2 (#5058) 7e4d293ff test(hotplug): fix race getting ipv6 (#5271) e843f6a0c docs: Adjust CSS to increase font weight across the docs (#5363) 072711c63 fix(ec2): Correctly identify netplan renderer (#5361) 719679338 tests: fix expect logging from growpart on devent with partition (#5360) f93514aae test: Add v2 test coverage to test_net.py (#5247) 3d69851a9 refactor: Simplify collect_logs() in logs.py (#5268) 60766db43 fix: Ensure no subp from logs.py import (#5268) 06eaa7a0e tests: fix integration tests for ubuntu pro 32.3 release (#5351) 226d4fb10 tests: add oracular's hello package for pkg upgrade test (#5354) e520c944e growpart: Fix behaviour for ZFS datasets (#5169) dff02125e device_part_info: do not recurse if we did not match anything (#5169) bbb7f62c2 feat(alpine): add support for Busybox adduser/addgroup (#5176) 5fb0dfaee ci: Move lint tip and py3-dev jobs to daily (#5347) 4c47005aa fix(netplan): treat netplan warnings on stderr as debug for cloud-init (#5348) 4df641623 feat(disk_setup): Add support for nvme devices (#5263) 461fc1d91 fix(log): Do not warn when doing requested operation (#5263) c76ad9cd2 Support sudoers in the "/usr/usr merge" location (#5161) fa1b8688e doc(nocloud): Document network-config file (#5204) 2856f4c8a fix(netplan): Fix predictable interface rename issue (#5339) 2c992597c cleanup: Don't execute code on import (#5295) e432a31d6 fix(net): Make duplicate route add succeed. (#5343) 00ab32835 fix(freebsd): correct configuration of IPv6 routes (#5291) 42930d845 fix(azure): disable use-dns for secondary nics (#5314) 01367a7c9 chore: fix lint failure (#5320) 5ad609ffd Update pylint version to support python 3.12 (#5338) de1966eb1 fix(tests): use regex to avoid focal whitespace in jinja debug test (#5335) 0fdbeefe4 chore: Add docstrings and types to Version class (#5262) 6748913c1 ci(mypy): add type-jinja2 stubs (#5337) 19cb8cf92 tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329) f7c6292d9 test: Add oracular release to integration tests (#5328) e68c8c74c Release 24.1.6 (#5326) bb4553b16 test: Fix failing test_ec2.py test (#5324) 825eb1e7b fix: Check renderer for netplan-specific code (#5321) c80c9c711 docs: Removal of top-level --file breaking change (#5308) 3a6b53972 fix: typo correction of delaycompress (#5317) 3f4a2dd0a docs: Renderers/Activators have downstream overrides (#5322) 587ac9ca7 fix(ec2): Ensure metadata exists before configuring PBR (#5287) 699159e6e fix(lxd): Properly handle unicode from LXD socket (#5309) 739c5f63c docs: Prefer "artifact" over "artefact" (#5311) 3c8d02816 chore(doc): migrate cc_byobu to templates 371f02581 chore(doc): migrate cc_bootcmd to templates 3b7f4b393 chore(doc): migrate apt_pipelining and apk_configure to templates 074ad67f3 tests: in_place mount module-docs into lxd vm/container 48ddb3eb5 feat(docs): generate rtd module schema from rtd/module-docs 23136e6a9 feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296) 120adcc19 test: Avoid circular import in Azure tests (#5280) 33f50185a test: Fix test_failing_userdata_modules_exit_codes (#5279) 63a0fcd86 chore: Remove CPY check from ruff (#5281) 81337eabc chore: Clean up docstrings ce2dfbc8a chore(ruff): Bump to version 0.4.3 dce1d4c74 feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265) 9388cc1ad feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264) d5254aab0 docs: cc_apt_pipelining docstring typo fix (#5273) e10b052c5 feat(azure): add request identifier to IMDS requests (#5218) dd54327ca test: Fix TestFTP integration test (#5237) 44d0c13fe feat(ifconfig): prepare for CIDR output (#5272) 8e8947b8b fix: stop manually dropping dhcp6 key in integration test (#5267) cf72d7f37 test: Remove some CiTestCase tests (#5256) f24ecef8b fix: Warn when signal is handled (#5186) 51c6569f9 fix(snapd): ubuntu do not snap refresh when snap absent aa357fa23 feat(landscape-client): handle already registered client (#4784) 370e680c0 doc: Show how to debug external services blocking cloud-init (#5255) 4ffde902b fix(pdb): Enable running cloud-init under pdb (#5217) b5b4dd39a chore: Update systemd description (#5250) 9b1b29440 fix(time): Harden cloud-init to system clock changes 6530fa34f fix: Update analyze timestamp uptime 9454e2f53 fix(schema): no network validation on netplan systems without API a3ed8e000 fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226) 24584a055 fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235) 237d957c0 tests: force version of cloud-init from PPA regardless of version (#5251) 8b12a654f ci: Print isort diff (#5242) a22d85333 test: Fix integration test dependencies (#5248) c1a19d7b6 fix(ec2): Fix broken uuid match with other-endianness (#5236) 66a874bc2 fix(schema): allow networkv2 schema without top-level key (#5239) efd37c0fa fix(cmd): Do not hardcode reboot command (#5208) 44ad8ac7e test: Run Alpine tests without network (#5220) e41b71923 docs: Add base config reference from explanation (#5241) e98e62373 docs: Remove preview from WSL tutorial (#5225) 7eb5a1df0 chore: Remove broken maas code (#5219) 70e87f7f8 feat(WSL): Add support for Ubuntu Pro configs (#5116) 3671caa2a chore: sync ChangeLog and version.py from 24.1.x (#5228) a6f7577d5 bug(package_update): avoid snap refresh in images without snap command acc68de05 ci: Skip package build on tox runs (#5210) 8e7f98380 chore: Fix test skip message b028368ca test(ec2): adopt pycloudlib public ip creation while launching instances 2e96ac844 test(ec2): add ipv6 testing for multi-nic instances 234f9a38d test(ec2): adopt pycloudlib enable_ipv6 while launching instances 22f4ff870 feat: tool to print diff between netplan and networkv2 schema (#5200) aeafb83c7 test: mock internet access in test_upgrade (#5212) 725f5fb2c ci: Add timezone for alpine unit tests (#5216) ddde8dddc fix: Ensure dump timestamps parsed as UTC (#5214) 90c15a60f docs: Add WSL tutorial (#5206) 8854179d6 feature(schema): add networkv2 schema (#4892) 641b107a2 Add alpine unittests to ci (#5121) 2e58770ce test: Fix invalid openstack datasource name (#4905) 70b03a9df test: Fix MAAS test and mark xfail (#4905) 17d477554 chore(ds-identify): Update shellcheck ignores (#4905) 84231d9b6 fix(ds-identify): Prevent various false positives and false negatives (#4905) 509ed36a9 Use grep for faster parsing of cloud config in ds-identify (#4905) 7268003a9 tests: validate netplan API YAML instead of strict content (#5195) 31039d05e chore(templates): update ubuntu universe wording (#5199) 5205b4dd7 Deprecate the users ssh-authorized-keys property (#5162) ac9821217 doc(nocloud): Describe ftp and ftp over tls implementation (#5193) c465de827 feat(net): provide network config to netplan.State for render (#4981) 47e9ad74c docs: Add breaking datasource identification changes (#5171) 8fe149449 fix(openbsd): Update build-on-openbsd python dependencies (#5172) 0b1ca1740 fix: Add subnet ipv4/ipv6 to network schema (#5191) 7c67f7732 docs: Add deprecated system_info to schema (#5168) 5a40b3bc9 docs: Add DataSourceNone documentation (#5165) 70581bb08 test: Skip test if console log is None (#5188) ea54139a0 fix(dhcp): Enable interactively running cloud-init init --local (#5166) 9bcb3dce9 test: Update message for netplan apply dbus issue d1351890f test: install software-properties-common if absent during PPA setup bc18820a6 test: bump pycloudlib to use latest version edec7dcf7 test: Update version of hello package installed on noble 5d587ecd0 test: universally ignore netplan apply dbus issue (#5178) b86f4066f chore: Remove obsolete nose workaround b9aff9474 feat: Add support for FTP and FTP over TLS (#4834) 197409efd feat(opennebula): Add support for posix shell d01c9ed80 test: Make analyze tests not depend on GNU date ff06c1054 test: Eliminate bash dependency from subp tests 8778506ad docs: Add breaking changes section to reference docs (#5147) 93f5a0165 util: add log_level kwarg for logexc() (#5125) 5c200af23 refactor: Make device info part of distro definition (#5067) 1aa5c7031 refactor: Distro-specific growpart code (#5067) 596266ac1 test(ec2): fix mocking with responses==0.9.0 (focal) (#5163) d075d43a4 chore(safeyaml): Remove unicode helper for Python2 (#5142) 6d5978bb6 Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148) 01027e5a0 refactor(net): Reuse netops code 1763e1d35 refactor(iproute2): Make expressions multi-line for legibility 42becf13d feat(freebsd): support freebsd find part by gptid and ufsid (#5122) 0a3a5e250 feat: Determining route metric based on NIC name (#5070) ec384da45 test: Enable profiling in integration tests (#5130) 414c310eb dhcp: support configuring static routes for dhclient's unknown-121 option (#5146) ffacae61a feat(azure): parse ProvisionGuestProxyAgent as bool (#5126) 516fad6d9 fix(url_helper): fix TCP connection leak on readurl() retries (#5144) da9b22296 test: pytest-ify t/u/sources/test_ec2.py 1feb32947 Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) 2f9812e80 fix: Logging sensitive data 4a134bf7f test: Mock ds-identify systemd path (#5119) f6ac6ee8a fix(dhcpcd): Make lease parsing more robust (#5129) 9758673f6 test: fix upgrade dhcp6 on ec2 (#5131) 77771023a net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease (#5128) a6e09d9bf fix: Fix runtime file locations for cloud-init (#4820) 2c7ca5e92 ci: fix linkcheck.yml invalid yaml (#5123) 372e80f8e net/dhcp: bump dhcpcd timeout to 300s (#5127) f0fb84188 ec2: Do not enable dhcp6 on EC2 (#5104) 9929a0058 fix: Fall back to cached local ds if no valid ds found (#4997) 9d598f238 ci: Make linkcheck a scheduled job (#5118) 8f806e20b net: Warn when interface rename fails f74b61eae ephemeral(dhcpcd): Set dhcpcd interface down 4de8dc2a2 Release 24.1.3 e1c19a596 chore: Handle all level 1 TiCS security violations (#5103) cdbbd17ae fix: Always use single datasource if specified (#5098) 9a7674af7 fix(rhel): Fix network ordering in sysconfig 97537494d feat: Use NetworkManager renderer by default in RHEL family 180a62313 fix: Allow caret at the end of apt package (#5099) 1c64ee1b8 test: Add missing mocks to prevent bleed through (#5082) 9633a7b0f fix: Ensure network config in DataSourceOracle can be unpickled (#5073) 0aa17cd10 docs: set the home directory using homedir, not home (#5101) b97227406 fix(cacerts): Correct configuration customizations for Photon (#5077) 7672a1681 fix(test): Mock systemd fs path for non-systemd distros 6a2cd02fc fix(tests): Leaked subp.which mock 45a9b7ca0 fix(networkd): add GatewayOnLink flag when necessary (#4996) 1dfffd066 Release 24.1.2 dc0eafbc7 test: fix `disable_sysfs_net` mock (#5065) 5062bee05 refactor: don't import subp function directly (#5065) 144782a83 test: Remove side effects from tests (#5074) accdfe6a8 refactor: Import log module rather than functions (#5074) cbe5f3a11 fix: Fix breaking changes in package install (#5069) ff40d1af8 fix: Undeprecate 'network' in schema route definition (#5072) 02515b804 refactor(ec2): simplify convert_ec2_metadata_network_config a3aa44f16 fix(ec2): fix ipv6 policy routing cacf452bd fix: document and add 'accept-ra' to network schema (#5060) dbe67393b bug(maas): register the correct DatasourceMAASLocal in init-local (#5068) d8e3a4b4d ds-identify: Improve ds-identify testing flexibility (#5047) b1bfa594b fix(ansible): Add verify_commit and inventory to ansible.pull schema (#5032) e517f5abd doc: Explain breaking change in status code (#5049) 18daab5ca gpg: Handle temp directory containing files (#5063) 82a5fb358 distro(freebsd): add_user: respect homedir (#5061) 3ad7f2876 doc: Install required dependencies (#5054) 1f19c5cde networkd: Always respect accept-ra if set (#4928) c461cc152 chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059) f7c1c7610 test: Don't assume ordering of ThreadPoolExecutor submissions (#5052) 9c001cf3f feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931) 7281055f8 fix(gpg): Make gpg resilient to host configuration changes (#5026) 79ee65623 Sync 24.1.1 changelog and version e544a0db8 DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029) 586ff2d83 packages/debian: remove dependency on isc-dhcp-client (#5041) 94609bcb6 test: Allow fake_filesystem to work with TemporaryDirectory (#5035) 4ece79d62 tests: Don't wait for GCE instance teardown (#5037) 9c64aba29 fix: Include DataSourceCloudStack attribute in unpickle test (#5039) df522fdad bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021) 52c6abdd0 fix(apt): Don't warn on apt 822 source format (#5028) ccd438eec fix(atomic_helper.py): ensure presence of parent directories (#4938) c6f1e61f4 fix: Add "broadcast" to network v1 schema (#5034) 3fd0e4398 pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg (#5030) faeca647f net/dhcp: handle timeouts for dhcpcd (#5022) 9c77b3896 fix: Make wait_for_url respect explicit arguments 29edefe78 test: Fix scaleway retry assumptions eadaaf095 fix: Make DataSourceOracle more resilient to early network issues (#5025) 621c522cc chore(cmd-modules): fix exit code when --mode init (#5017) d9204fcf1 feat: pylint: enable W0201 - attribute-defined-outside-init 1488c7402 refactor: Ensure no attributes defined outside __init__ 8bfad0ca1 chore: disable attribute-defined-outside-init check in tests 30d5e9a33 refactor: Use _unpickle rather than hasattr() in sources 0579f61f7 chore: remove unused vendordata "_pure" variables 0c8056992 chore(cmd-modules): deprecate --mode init (#5005) 9baf31c71 tests: drop CiTestCase and convert to pytest 463d36cc2 bug(tests): mock reads of host's /sys/class/net via get_sys_class_path 67685d65f fix: log correct disabled path in ds-identify (#5016) 3462445b5 tests: ec2 dont spend > 1 second retrying 19 times when 3 times will do bee1d8372 tests: openstack mock expected ipv6 IMDS e4bd2fc30 bug(wait_for_url): when exceptions occur url is unset, use url_exc b7d442fb0 feat(run-container): Run from arbitrary commitish (#5015) 538412a54 tests: Fix wsl test (#5008) 69da05cda feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633) d86f35a80 chore(ephemeral): add debug log when bringing up ephemeral network (#5010) 5b80ba180 release: sync changelog and version (#5011) a576d11ef Cleanup test_net.py (#4840) 2ba7fdf0e refactor: remove dependency on netifaces (#4634) d15779535 feat: make lxc binary configurable (#5000) f8ac76e40 docs: update 404 page for new doc site and bug link 4a0534f89 test(aws): local network connectivity on multi-nics (#4982) b538549d8 test: Make integration test output more useful (#4984) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: update to v19.3.0Bruce Ashfield2025-01-171-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Along with pulling in the new commits (listed below), we also: - tweak the license checksum. No change to the license. - bump the requested python to 3.13 to match oe-core - package some new .so libraries - add a new pkcfonfig file to the -dev package - disable libraries that are not in our dependencies Bumping ceph to version v19.3.0-6907-g71d130f7990, which comprises the following commits: 786fe8f9a28 Add Abhishek Kane into peoplemap, githubmap, organizationmap, mailmap 73c935db908 mon: do not show nvmeof in 'ceph versions' output 3d36a3b9bbe AsyncMessenger.cc : improve error messages 5a966ca95d9 qa/scrub: more delay when waiting for noscrub to take effect 5c098880829 common: config_cacher: use set::contains() instead of count() 9821bf8f329 qa/scrub: change 'bin/ceph' to 'ceph' 8ac04704574 common: fix md_config_cacher_t 2c4ab9c5712 doc/releases: add actual_eol for quincy 1694b8ab0bf common/io_exerciser: Reorder lines in RadosIo send_command functions fb05a2ff0f8 librbd/migration/HttpClient: Use asio::ssl::stream fe4a61424cf common/io_exerciser: Clear the stringstream in RadosIO class 7f3601089d4 os/bluestore: Fix BlueFS::truncate() fcfc50b2313 rgw/logging: clean pending objects b1e7c06430c rgw/logging: retry attribuite set in case of race b7174ca1409 rgw/logging: log bucket must not have encryption 462edf385d0 rgw/logging: source and log bucket must be different cc1a0e584ee rgw/logging: support source and destination buckets on different tenants d44b2227cdc mgr: Work around bug in Boost MPI/Python 8f5f3fa3556 rgw_attrs: fixes for 3 more iam/perms mappings dc539b3ea80 doc: improve tests-integration-testing-teuthology-workflow.rst f2b5e2fa0a9 os/bluestore: bluefs unittest for truncate bug cadb2027ebb crimson/os/seastore: refactor LBAMapping e2f09651fc5 qa/tests: removed quincy from crontab 027d1c501b2 doc/releases: remove Quincy from "Active" afa2b83687d doc/rgw: document UserName requirements for account migration 4318b188740 rgw: Don't crash on exceptions from pool listing f6ec7c543f1 rados/monthrash: add PG_DEGRADED to ignorelist f3c18818b9b monitoring: Update nvmeof alert limits in config 8cc7fdbd29e doc/rados/operations/stretch-mode: Improve doc b7ae18a292c doc/radosgw/config-ref: fix lc worker thread tuning 8de182808c5 Fix signed/unsigned warning and add parameter range checking. 43a6f123e24 rgw/multisite: the create_bucket forward request omits the the request body, thus missing some data if specified inside CreateBucketConfiguration xml on the non-master zone. also, now that we perform cksum validation against empty payloads, such a request would fail with -ERR_AMZ_CONTENT_SHA256_MISMATCH due to a zero content-length but a non-empty payload hash. this fix ensures that request body is forwarded during create_bucket 0cb0d471b7b vstart.sh: add support for launching the ceph-exporter daemon 22f91cdc652 qa/workunits/nvmeof/basic_tests.sh: fix connect-all assert 6c534ba3a0a rgw:attrs: dump marker and max_parts only if sent 2b8689eec9d rgw:attrs cap max_parts at 1000 b2462337c40 rgw: GetObjAttrs enforces MaxSize and returns correct IsTruncated f6bc276d627 rgw/rados: Object::list_parts() starts after marker cbcf0e3eb20 rgw/rados: get_part_obj_state() fixes accounted_size when uncompressed 56bf5073cf3 rgw: GetObjAttrs calls rgw_s3_prepare_decrypt() 1be4399edda rgw_cksum: return version_id in all cases bac02fc435c rgw_cksum: permit fallback to checksum-type from create-multipart, in upload-part 5c4d5942835 rgw: defensive check for part cksum in try_sum_part_cksums b164ad893ee rgw_cksum: don't display nil checksums in get-object-attributes (parts) f73e83ad8a9 rgw: GetObjectAttributes iam policy policy hooks ed6134c0b0b rgw_cksum: zero-initialize GetObjAttrs integral members eb949395465 rgw: implement GetObjectAttributes 013c1c666cd ceph-volume: fix loop devices support 8fb78290425 common/io_exerciser: Make chunksize so initial generated value is 4096 and random values are generated thereafter f50106f1c1d common/io_exerciser: Make sure Sequence 10 removes objects after finishing running d8712e67221 src/common/json: Modified JSON structures so they take advantage of ceph_json.h fully. 6804964b96e src/common/io_exerciser: Remove unneccisairy override in data_generation::SeededRandomGenerator 9c1907481ba src/common/io_exerciser: add missing override statements to JsonStructures.h 5811155de65 src/common/io_exerciser: Formatting improvements using clang format e2ef12525f5 common/io_exerciser: Add simple sequences for testing error injects 347ba63e83f common/io_exerciser: Add injecterror commands to ceph_test_rados_io_sequence interactive mode 23dd255a2c4 osd: EC error inject interfaces 4f3ef50fd8a src/common/io_exerciser: Code readability improvements de4a2a033c7 Revert "doc/dev/crimson: update SeaStore as default backend" c202195819d qa/suites/crimson-rados-exp: add Seastore/thrash b8d2681d9cd qa/suites/crimson-rados-exp: remove basic 5150dae471c qa/suites/crimson-rados: disable thrash/seastore d869ca8a00d common/options/crimson.yaml.in: Bluestore by default 1fc0edb9fa0 ceph-volume: add python hints to util.prepare.create_id() 56cf5122d97 mon/NVMeofGwMap: add delay to NVMEOF_GATEWAY_DELETING warning dfa632b4255 mgr/cephadm: mgr orchestrator module raise exception if there is trailing tab in yaml file 57359801515 rgw: migrate rgw_admin to new directory. 3075894aab6 container/Containerfile: replace CEPH_VERSION var for backward compat 340e353de68 rgw: don't use merge_and_store_attrs() when recreating a bucket 95bdcbfd813 ceph-volume: fix Zap.ensure_associated_raw() f108a373970 doc/radosgw/s3: correct eTag op match tables 7b33f7727e0 src/common/options/mon.yaml.in: add mon_nvmeofgw_delete_grace 885b1bf88ee doc: add snapshots in docs under Cephfs concepts 8e4ddcf076a rgw: fix user rate limit is not enforced w/ global rate limit set 44233b9d860 crimson/osd/replicated_recovery_backend: prevent recovery/backfills from polluting the cache of the underlying futurized store 4d53a276b13 crimson/os: all "read/get" interfaces accept op_flags b413f76b0a5 crimson/os/seastore: introduce cache_hint_t af1bc2220f6 crimson/osd/replicated_backend: make sure the check on whether to send ops to replica osds and the pg log append happens in the same continuation fa7ef62d2c6 crimson/osd/replicated_recovery_backend: ignore the recovery of delete objects 360e6503135 crimson/osd/replicate_backend: add standalone delete to the push queue if the object is deleted while it's being backfilled 14e068fdc55 crimson/osd/pg_recovery: throttle backfills together with pg-log based recoveries 59377c6eb22 crimson/osd/backfill_state: recheck whether needs to scan the primary at the end of Enqueuing::Enqueuing aa9fc357022 mgr/cephadm: Restore client file(s) default SELinux context type c0e91389b03 doc: README.md - improve "Tshooting" and "Tips & Tricks" acbb2e50783 doc: README.md - format "Troubleshooting" 571dd531663 mon/NVMeofGwMap: add healthcheck warning NVMEOF_GATEWAY_DELETING 639cfc5975e doc: README.md - format "Tips and Tricks" 26a0f9adcf9 mgr/cephadm/nvmeof: Add key verification field to NVMeOF configuration Fixes https://tracker.ceph.com/issues/69413 7989e98e1b1 crimson/common/shared_lru: rename Deleter::cache c21e0e6d148 crimson/common/shared_lru: invalidate Deleter's cache c695df47691 qa/standalone/scrub: osd-scrub-test.sh - test operator overrides 4726bebefee osd/scrub: reset m_active_target when the scrub ends 656408d3685 osd/scrub: convey 'reserving replicas' status in query results 65be7d65055 qa/standalone/scrub: add build_pg_dicts() cb439994320 doc/mgr/dashboard: Fix HAProxy TLS example cb2204e04ba test/rgw/noitifications: fix test names 46da1f631df qa: write out ESubtreeMap more frequently to find large events 821f9b7e05b doc: README.md - format admonition d3194eaf257 osd/scrub: abort reserving scrub if an operator-initiated scrub is requested ab5c5d7d1d7 osd/scrub: register for 'osd_max_scrubs' config changes 31e6bacfbf6 osd/scrub: register for 'osd_max_scrubs' config changes ae927739884 doc/cephfs: document purge queue and its perf counters 1a34cd1be9f rgw: allow bucket notification send message to kafka with multiple brokers 08963622491 doc: Fixes a typo in controllers section of hardware recommendations ef7127e8bfc osd/scrub: show reservation status in 'pg dump' output 93df0b3e32c crimson/os/seastore/cache: move committing existing blocks to prepare_record() 4a08c37da56 crimson/os/seastore/journal: hide RBM specific finish_commit() d9ff8f0419a crimson/os/seastore/cache: minor cleanup c9f4727aab6 doc: Update vstart section in readme.md 1f71671dc65 rbd: drop --pool option from "rbd group image {add,rm}" b4d7b660863 doc/radosgw: line edit uadk-accel.rst (1st half) f35e3a6e9d9 rbd: handle --{group,image}-namespace in "rbd group image {add,rm}" c21b5f7e0b1 qa/rgw: set api_name if not provided in create_zonegroup 19aa6f72440 rgw: respect location constraint in master zonegroup 53a27b4d097 PendingReleaseNotes: add note about tracker #69012 650e21dd493 rbd: open images in read-only mode for "rbd mirror pool status --verbose" 1c37f81fd85 script/ceph-backport: allow hyphen in project during ceph fork deduction ffe5bf693e9 doc/radosgw: edit uadk-accel.rst 15e746bf5b1 vstart: use crimson_osd_objectstore 41327dcf0f7 doc/dev/crimson: update SeaStore as default backend b85d61de7f4 vstart.sh: set alien cores with bluestore only 3a6ce3cadf4 qa/suites/crimson-rados: make use of crimson_osd_objectstore 58f7b6e0777 crimson/os/seastore: make the updates to backref_entry_mset be consistent with extents 60c58013c53 client: Fix a deadlock when osd is full ef942e13fa5 qa: Add async io test to nfs ganesha using fio 1f1051d91f3 crimson/osd/pg_shard_manager: discard outdated operations when the corresponding pgs are already removed 1fcc7199b2f qa/suites/crimson-rados: enable short_pg_log 65614c4ca44 rgw/notifications: Add tests for RGWPSListTopicsOp::execute() ffcd90313b9 test/librbd: add TestInternal.FlattenInconsistentObjectMap 97ed3fced13 librbd: avoid data corruption on flatten when object map is inconsistent 61b3289e41d monitoring: Add prometheus alert NVMeoFMultipleNamespacesOfRBDImage f80687256d9 src/nvmeof/NVMeofGwMonitorClient: remove MDS client, not needed 4d4e1b54d95 doc/radosgw: edit uadk-accel.rst 4a393280acb crimson/os/seastore: move backref_entry_t to a separate header be00314b93c crimson/os/seastore/cache: rework backref_batch_update() 6c7de641c78 crimson/os/seastore: introduce named factory methods for alloc/retire f1db2cbc208 crimson/os/seastore/seastore_types: use is_backref_mapped_type() 665418e471b crimson/os/seastore/cache: don't mark allocations as L_ADDR_NULL 98d693cdb63 crimson/os/seastore: misc related cleanups 8091f318106 crimson/os/seastore/cache: drop unused backref_entry_t::seq 0f55c1759d4 examples/rgw: register boto extension for HeadBucket stats cbc771a4db6 os, test: make omap_iterate obligatory for ObjectStores e3df536e591 os/kstore: bring support for omap_iterate 4e1a500f9c6 os/memstore: bring support for omap_iterate 3c2b4bbcf51 crimson, os: put AlienStore::omap_get_values() on top of OS::omap_iterate() 08508288c5f os/bluestore: reduce dependencies of omap_iterate()'s loop on Onode a7c81953d07 kv: avoid memcpy around key() in OMAP iterator of KeyValueDB 8f931cff653 Revert "ops_replayer: fix signed/unsigned warning and add parameter range checking." d2531a0baf4 os/bluestore: bring latency logging to omap_iterate() d4901af641c common/ceph_time: introduce time_guard for RAII-styled timediff calculation 87d6447079e os/bluestore: implement the lightweight OMAP iteration f348ea3cf53 kv: avoid memcpy in OMAP iterator of KeyValueDB c7407549e5a os, osd: introduce a lightweight OMAP iteration 68612d166d4 crimson/.../replicated_request: do commit in concurrent phase 6f29657c3d1 crimson/.../replicated_request: split discard check and reply send out of PG::handle_rep_op d299e46ed84 crimson/.../replicated_request: convert with_pg_interruptible to coroutine 7b88c38ac96 crimson/.../replicated_request: factor out with_pg_interruptible 02b70a62a43 crimson/.../replicated_request: call handle.complete() once in finally e5008c858a2 crimson/.../replicated_request: fix debug line ca189fb511f qa/standalone/scrub: fix TEST_periodic_scrub_replicated e03f5ca25f2 RGW\logging: convert s3_filter to key_filter ca9e0f40612 RGW/logging: add filtering for bucket logging 9a9e14db350 RGW/logging: add rest API to flush logging bucket ee66dc51cc3 nvmeofgw*: fix no-listeners ceb62c0c807 nvmeofgw* : fix publishing rebalance index d9aa164cd38 mgr/dashboard: Fix Latency chart data units in rgw overview page 0fc5aecd554 mgr/dashboard: RGW user accounts CRUD api's e717a925aea cephadm/nvmeof: fix ports when default values are overridden a2ebc00a56f rgw/posix: std::ignore return value of write() 06a56b7efb8 Fix signed/unsigned warning and add parameter range checking. c5503187af9 qa/rgw: force Hadoop to run under Java 1.8 2f47f9dc3c8 cephadm/nvmeof: support per-node gateway addresses 3181acc223d mgr/dashboard: Administration > Configuration > Some of the config options are not updatable at runtime b71ec88c13c mgr/cephadm: fixing logic in cert-store save_cert method 81023d996b0 mgr/dashboard: carbonize user management form 36541efe49c rgw: RGWAbortMultipart maps NoSuchKey to NoSuchUpload f4dee79c330 crimson: switch to SeaStore as default objectstore 3069d946639 deb: Add cephfs.pc to libcephfs-dev 85805ddf581 rpm: Add cephfs.pc to libcephfs-devel c9e19442855 cephfs: Add a pkgconfig file for libcephfs 1e22c110183 test/crimson/test_backfill: more detailed backfill cancellation tests a34b0ce2aa6 crimson/osd/backfill_state: treat Cancelled as a pause of the ongoing backfilling 3aae66611dd qa/rgw: pull Apache artifacts from mirror instead of archive.apache.org 2b2ce787157 tools/cephfs: fix flake8 f-string formatting for py3.12 dbb129cc633 doc/dev/crimson/pipeline.rst: simplify and update to reflect new stages 4c46b012760 crimson: remove now unused pipeline stages a051d32790d crimson: introduce and use repop stage 0c87de8e882 crimson/osd/object_context_loader: print obc (with refcount) upon release 9e69d0e9f21 crimson/.../pg: more debugging dc6a9fc1616 crimson/.../ops_executer: split execute_clone into prepare_cloning_ctx,complete_cloning_ctx 62b8491c5ff crimson/.../ops_executer: split osd_op_params intitialization ff55c4f8737 crimson/.../ops_executer: rework prepare_transaction/mutate_object fc029270ef4 crimson/.../ops_executer: just call submit_transaction in flush_changes_n_do_ops_effects 45cc9e96d12 crimson/.../ops_executer: rename flush_changes_n_do_effects to flush_changes_and_submit 86588d26a96 crimson/.../pg_backend: split clone into clone_for_write, set_metadata f655f7f5871 crimson: convert client_request, internal_client_request, snaptrim_event to use obc stages 64210532033 crimson/.../osd_operation*: add wait_pg_ready and get_obc 29dedef4b7a crimson: add CommonOBCPipeline bcda5524dbb crimson: expose CommonOBCPipeline via ObjectContextLoader::Orderer 854bb63ee31 rgw: allow disabling bucket stats on head bucket 9c7580a2935 doc/cephfs: edit 3rd 3rd of mount-using-kernel-driver 88557dff2fe librbd/migration/HttpClient: socket isn't shut down on some state transitions 1046d610e3d librbd/migration/HttpClient: avoid hitting an assert in advance_state() 9fa0bcc67d7 librbd/migration/HttpClient: ignore stream_truncated when shutting down SSL e305a5908bd librbd/migration/HttpClient: propagate ec to handle_handshake() 8566224e940 librbd/migration/HttpClient: drop SslHttpSession::m_ssl_enabled 331b5ea3225 librbd/migration/HttpClient: don't call disconnect() in handle_handshake() 20885b11794 librbd/migration/HttpClient: avoid reusing ssl_stream after shut down 5699e4b871c librbd/migration/HttpClient: don't shut down socket in resolve_host() d1a83f264ae librbd/migration/HttpClient: fix some error messages in handle_receive() eb773496d53 librbd/migration/HttpClient: log ec details in handle_{issue,receive}() bacd59e4def qa/suites/rados: Add ceph_test_bluefs 01acb340924 os/bluestore: duplicate unittest_bluefs -> ceph_test_bluefs 6c095f02e4d qa/config/crimson_qa_overrides: enable ms debug 0811c1b9da0 crimson/net/io_handler: minor adjustments to logs 5a886ee6ce9 doc: Fix typo. 560d66e34ed test/pybind: Test method has been renamed in unittest 3.2 aec8ca8b268 test/pybind: Clean whitespace. 31283c0b2ab mgr/cephadm/nvmeof: Rewrite NVMEoF fields validation. Fixes https://tracker.ceph.com/issues/69176 90e221d0b53 mgr: fix subuser creation via dashboard 25fde2483b8 mgr/dashboard: added ports in administration table 5d584b4badb doc/dev: instruct devs to backport 0526124b605 doc/cephfs: edit 2nd 3rd of mount-using-kernel-driver bfc8fb6aff3 mgr/cephadm/nvmeof: Add auto rebalance fields to NVMeOF configuration Fixes https://tracker.ceph.com/issues/69176 7fc0ead36ca doc/cephfs: edit first 3rd of mount-using-kernel-driver b44af183031 os/bluestore: Reduce unittest_bluefs for jenkins 1c295464836 qa/rgw: force s3 java tests to run gradle on Java 8 14855b306c4 mgr/dashboard: add a custom warning message when enabling feature 9ed81f52af1 crimson: inline InternalClientRequest::do_process 54a42bef571 crimson: manage log submission atomicity independently of pipeline stages 5021e87338c crimson/.../pg: update debugging in PG::submit_error_log fda23c94e42 crimson/.../pg: convert submit_error_log to coroutine c8f19ead527 crimson: inline SnapTrimObjSubEvent::process_and_submit adc63e283c6 crimson/.../client_request: move log line to complete_request callback 4b4473f3bd6 test/fio: remove assign-only variable 1f02262bab3 test/cls_log: remove unused variable 15136449836 qa/suites/upgrade/*-x: ignore more POOL_APP_NOT_ENABLED variants b957e9bc766 qa/suites/upgrade/reef-x: ignore more POOL_FULL variants f7adf6723cd crimson/.../internal_client_request: extend start() until stages have exited 883d0231e4f crimson/.../client_request: extend instance_handle lifetime 87c3ea23d9f crimson/.../ops_executer: emplace osd_op_params in fill_op_params bb2c45f8696 crimson/.../ops_executer: no reason to return cloning_ctx c0da4093152 crimson/osd/pg: fix tabbing in replica_clear_repop_obc 7a36f74ceab crimson: clear obcs whether referenced or not upon replica write ef6a48c8bbe msg/async/Event: make the pipe byte static 1bd5571d164 test: add missing includes c07d370c668 crimson: add missing includes 37ff5a104fc pybind/rbd: fix a type comment for p_snapshot of clone() cb6d1838acc mgr/dashboard: Show correct token expiration date in Manage Clusters page 453beeae499 doc/releases: fix formatting for the 17.2.8 release with hyperlinks (el8 CERN) 4a638e51521 crimson/osd/object_context: add formatter instance for ObjectContext 06affa6c2a4 common/intrusive_lru: add method to access use count cb2c5e3a604 qa/suites/upgrade/*-x: ignore telemetry re-opt-in nudges ad51e25d39e qa/suites/upgrade/*-x: add OSD_UPGRADE_FINISHED to log-ignorelist 8971b72c24c qa/suites/upgrade/*-x: add FS_DEGRADED to log-ignorelist 42e428e104a doc/releases: fix formatting for the 17.2.8 release (el8 CERN) 082ff952b69 test/common/test_time: add missing `using ceph::mono_clock` 69c6e9e5af7 tools/ceph-dencoder/sstring.h: use `char8_t` instead of `unsigned char` 858ed425cb0 common/bit_vector: use static_assert() instead of BOOST_STATIC_ASSERT() 2caa47b8fa7 include/random: use std::optional instead of boost::optional 92aa60e9996 mgr/PyModule: get_error_string() returns copy 2cdb67c2fe1 mgr/PyModule: do not lock in get_name() bb40fe448df test/rgw/logging: add bucket logging test suite to teuthology 790c38eacc5 rgw/logging: add support for GetBucketLogging and PutBucketLogging 8fa6cf757ec qa/suites/upgrade/*-x: add more PG states to log-ignorelist 05dca26c24e qa/suites/upgrade/*-x: add "is down" to log-ignorelist a54f5710456 doc/conf.py: try to provide real jar path cf48fddbc6a doc/_ext: mute syntax check warn E711 0e73c9dd66e radosgw-admin: bucket link/unlink support accounts 0c578a127e3 rgw: shouldn't call index_op.cancel() when rados op return ETIMEDOUT 8de984d413d rgw: append query string to redirect URL if present bb5893f15a8 qa/suites/upgrade/reef-x: sync log-ignorelist with quincy-x 3162581d2de qa/rgw: bump keystone/barbican from 2023.1 to 2024.1 dbe8c9299eb mgr/cephadm/nvmeof: Add key encryption support to nvmeof configuration caa4371a93e ceph orch <start/stop/restart> commands should work for service name osd and added a new command to updated service name for osd 41f2ded4e61 Documentation changes for 'ceph orch osd set-spec-affinity' command 48dd55a0ad4 mgr/dashboard: Update and correct zonegroup delete notification 666f8faf11c mgr/dashboard: Add ceph_daemon filter to rgw overview grafana panel queries 73109c1dcee test/objectstore: Make test idempotent 64539ed2af6 rgw: Make test idempotent. 1b5391d1a3d rgw: Remove unnecessary whitespace. c4868ff2d1e doc/dev: update link to backporter manual 8bec39b66ae doc/radosgw: edit uadk-accel.rst 91488321277 rgw: optimize bucket listing to skip past regions of namespaced entries 27fc12bfa04 qa/suites/upgrade/*-x: skip TestClsRbd.group_snap_{set,remove} cd1b41de75c cls/rbd: fix mirror_image_map_list object cc8ad9acb47 qa/suites/rados/thrash-old-clients: skip TestClsRbd.group_snap_{set,remove} 26a63205943 qa/suites/rados/thrash-old-clients: switch to cls/test_cls_rbd.sh workunit 178036924e7 doc/dev/release-process.rst: New container build/release process de9ce1e2732 rgw: fix stale entries in bucket indexes b5665cfac47 crimson/osd/ops_executer: prevent access to null pointers caused by gcc bug 97df4479d90 doc/rados: fix sentences in health-checks (3 of x) 4b3c0cb8f3f container/{Containerfile,build.sh}: use a secret to pass secrets 18d14b22f31 container/Containerfile: allow failure from curl to stop build 08432ef5421 container/Containerfile: purge .repo files with secrets before commit ce74f14de50 container/Containerfile fix boolean IS_RELEASE usage ce487613d08 qa/tasks/nvme_loop: update task to work with new nvme list format de2d9186bdd qa/workunits/mon: ensure election strategy is "connectivity" for stretch mode a3a9f188cab container/make-manifest-list.py: use LOCALMANIFEST throughout 4f050d7811f containers/make-manifest.py: Add --promote 7374b9b1114 container/Containerfile, build.sh: Add PRERELEASE_USERNAME/PASSWORD 6c8e9984253 container/build.sh: 44b2fc4d5e1 container/make-manifest-list.py fc598223583 labeler: add container labelers fb4ec711176 container/build.sh: use UTC dates for tags 256a2d6dab8 doc: fix EC overhead table m-numbering 7ee9ad0e2ae rgw: respect rgw_graceful_stop on realm reload 7a747bc5538 cephfs-mirror: remove redundant ceph_close() calls. 6f1d21c9ec4 cephfs/client: dir_reset_t::reset() - add missing fd reset. 20cb0063ebd mgr/cephadm: Add only_bind_ports_on_network spec parameter for Alertmanager ee0ef765349 doc/rados: fix sentences in health-checks (2 of x) 8522452bb64 python-common/ceph/cephadm: Change NVME image version to 1.4. Fixes https://tracker.ceph.com/issues/69099 aec87b9188a doc/rados: make sentences agree in health-checks.rst 892cf5661f2 crimson/osd/backfill_state: drop Cancelled 8f2ad5f5606 crimson/osd/backfill_state: Enqueuing doesn't last, so there should be no other events coming to it than those it generated itself 475782f3b0b crimson/osd/backfill_state: add pg infos to all backfill_state's logs 23fcab7fc6b rgw: fix data corruption when rados op return ETIMEDOUT 15cc5a68f76 crimson/os/seastore: convert offset/length in seastore logs to hex format 0c65b4130f4 crimson/os/seastore: convert offset/length in segment logs to hex format 254dad29aa9 qa/multisite: enable two zonegroup yaml 4a67cc189e1 rgw: relax RGWPutACLs_ObjStore::get_params read data log 2de973c039c doc/rbd: Add mirror snapshot schedule information 926aedfef19 mgr/dashboard: list smb Tracker: https://tracker.ceph.com/issues/69080 88ce1daae61 doc/cephadm: s/ceph/Ceph/ in mon.rst b053ad57462 crimson/os/seastore: minor cleanup 75e0b8c2aa6 crimson/os/seastore: drop unused file d68857c1e57 common/pick_address: Add IPv6 support to is_addr_in_subnet a1cec3de570 doc/glossary.rst: add "Dashboard Plugin" d2386e80bb2 mds: Fix invalid access of mdr->dn[0].back() 6b14ac1796b mgr/cephadm: fixing config files for prometheus and alertmanager 65acd39d190 PendingReleaseNotes: add note for replay completion warning 19db699ea65 qa: test to verify `MDS_ESTIMATED_REPLAY_TIME` warning 761489329c4 doc: add a note for `MDS_ESTIMATED_REPLAY_TIME` MDS warning 8db596944f1 mds: emit warning for estinated replay time 98d61fa0ade mgr/dashboard: add smb endpoints 3ae0e6d0537 mgr/dashboard: fix multisite e2e failures 45ff7e3365e doc/radosgw: update rgw_dns_name doc b6eb98cc108 os/bluestore: Improve documentation introduced by #57722 bf15ebcd594 mgr/dashboard: carbon tree component a7830814b59 crimson/os/seastore/transaction_manager: add log in get_extents_if_live() 0732a3d39a0 crimson/os/seastore/transaction_manager: fix get_extents_if_live d512f6262ef crimson/os/seastore/transaction_manager: adjust do_with for pin_list in get_extents_if_live 19581dda911 crimson/os/seastore/transaction_manager: verify type in read_pin_by_type e4efceba181 crimson/os/seastore/transaction_manager: fully read the extent before rewritting it da5e195cb4d crimson/os/seastore: convert transaction related paths with interruptor 1a76129c2bf crimson/os/seastore: split out transaction_interruptor.h 7998a03a2fe crimson/os/seastore/transaction_manager: implement and use maybe_indirect_extent_t::get_bl() 6f8ff6e9b4c crimson/os/seastore: delay setting bptr for all types of extent in case of read 0630af44bac test/crimson/seastore: add test case for partial reads 1642d487ecc crimson/os/seastore: disable seastore_max_data_allocation_size by default e29a1a4fd97 crimson/os/seastore: update lru size based on loaded extent size 2770a61059f crimson/os/seastore: implement partial reads from cached_extent to object_data_handler ff23cbf5c17 crimson/os/seastore/cached_extent: introduce BufferSpace for partial reads 090c59df755 crimson/os/seastore/cached_extent: minor adjustments to print d2a9cb13fc2 crimson/os/seastore: add missing final keywords 919d4d9eea8 crimson/os/seastore: hide the complexity of extent indirection 59d692f8f05 crimson/os/seastore/transaction_manager: fix to use direct key/length to get absent extent 6004f2639a1 crimson/os/seastore/cache: adjust logs 48d6d1d1fa0 crimson/os/seastore: misc cleanups and asserts 29d0b9025f3 crimson/os/seastore: clarify zero length is only possible for root 946edf65b1d crimson/os/seastore/cached_extent: clarify invarients in the cstors df15d59dfb3 crimson/os/seastore/cache: cleanup, use the same method to create extents 528f4206fba crimson/os/seastore/cached_extent: unify extent ptr creation e595f353b53 doc/glossary: add "DC" (Data Center) to glossary e79488912ca osd/scrub: remove the 'has_deep_errors' scheduling flag c24dc78484c doc/radosgw: Improve archive-sync-module.rst more 8f46603c7e9 doc/rados/operations/stretch-mode.rst: Added Limitations to stretch pool configurations 87df76e84f2 build/uadk: fix uadk repo's commit id b875c783ef7 docs/rgw: deprecate tenant-based IAM in favor of accounts 303ce155a34 doc/radosgw: Improve archive-sync-module.rst b564084cbfa rgw: fix bucket link operation fd05431d0e5 mgr/dashboard: Automate system user creation and restart of rgw daemons on Migrate to Multisite 09ade3db7c9 qa/suites/nvmeof/thrash: add 10-subsys-90-namespace-no_huge_pages.yaml 7ee46770f4b qa/workunits/nvmeof/basic_tests.sh: Assert number of devices 2030411aaf2 qa/workunits/nvmeof/setup_subsystem.sh: add list_namespaces() func 82118e19c4c qa/tasks/nvmeof.py: Improve thrasher and rbd image creation e1983c51020 qa/suites/nvmeof/thrasher: use 120 subsystems and 8 ns each c0ca0eb6f0f qa/suites/nvmeof/thrash: Add "is unavailable" to log-ignorelist f670916d310 qa/suites/nvmeof/basic: use default image in nvmeof_initiator.yaml 51743e6701f qa/suite/nvmeof/thrash: increase number of thrashing 9393509a5e3 qa/suite/nvmeof: add asserts to scalability_test.sh 6e15b5e5595 qa/suites/nvmeof: fix nvmeof_namespaces.yaml 74b0749b7e6 mgr/dashboard: fix total objects/Avg object size in RGW Overview Page 7d7ea8f1763 doc/releases: fix some formatting for the 17.2.8 release notes 59cc81a0c69 rgw: consider multi zonegroup for is_syncing_bucket_meta 5378cfe3c5b radosgw-admin: 'user create' rejects uids matching the account id format 69aabb39284 mgr/dashboard: update carbon-components-angular package 9701b4b157e python-common/ceph/deployment: Add key encryption support to nvmeof configuration Fixes https://tracker.ceph.com/issues/69036 aca468240f7 mgr/cephadm: Add key encryption support to nvmeof configuration Fixes https://tracker.ceph.com/issues/69036 771f16e5824 qa/rgw/sts: run s3tests against both auth orders 0601e565c5c qa/rgw/keystone: run s3tests against both auth orders 543fd1041f5 Revert "rgw/auth: Fix the return code returned by AuthStrategy," 44c9519cc3e doc/rados/troubleshooting: Improve log-and-debug.rst 6e273676ed9 doc/cephadm: Improve "Curl-based Installation" 8cf77d03a1f doc/cephadm: Clarify "Deploying a new Cluster" a8e112cf538 rgw: send self zonegroup on forward to master 49e76c23de1 qa/rgw: the rgw/verify suite runs java tests last 60797f6862f osd: optimize extent comparison in PrimaryLogPG 263a10615c3 rgw:Wrong x-rgw-quota-bucket-objects header when bucket quota is disabled 06fd8720130 mgr/dashboard: Display bucket's number of shards on the ceph dashboard 77605ce2297 cephadm: Modify the structure of the default container images b65d7492af0 qa: use a larger timeout for kernel_untar_build workunit 38a32b2212e osd/scrub: fixing reservations dump format 38513cbb5f4 cephadm/nvmeof: support no huge pages for nvmeof spdk 5c7d47af557 rgw/dbstore: correcting merge_and_store_attrs to store attrs in place of new_attrs. 8ba6c2de830 rgw: RGWAccessKey::decode_json() preserves default value of 'active' 8c78a22d2cf ceph-volume: fix importlib.metadata compat f92042853a0 common: rm the cast operator of md_config_cacher_t 71de8c0accd osd: rm all uses of the cast operator of md_config_cacher_t 3cd7d0226fe osd/scrub: cache frequently used configuration parameters a99fa1c51ee common: a simple API to extract md_config_cacher_t cached value ca3cd0e69ad librados/asio: document requirement on IoCtx's lifetime 216c3b9aece librados: document shallow copy semantics of IoCtx 3e40916227a librados/asio: forward asio cancellations to AioCompletion::cancel() 0331c2f9057 librados: expose op cancellation through AioCompletion::cancel() 5fd7d2a3694 test/librados: add test cases for aio_cancel() bae9ed83edf rgw/abortmp: Added lock for AbortMultipartUpload 258cc44b784 qa/config/crimson_qa_overrides: enable alienstore debug 1807a553f12 mgr/cephadm: Add resource limits to nvmeof configuration Fixes https://tracker.ceph.com/issues/68967 4269d7c1528 python-common/ceph/deployment: Add resource limits to nvmeof configuration Fixes https://tracker.ceph.com/issues/68967 d2ee4c1bba8 crimson: Set device class during spawn of a crimson osd 614e14654db monitoring: Add alert NVMeoFTooManyNamespaces c2f1fac3b94 doc/start: update os-recommendations.rst 0ab7bdb27cb qa/suites/rados/verify/validater: ignore OSD_DOWN dfe79fa7841 rgw/notification: Forward Topic & Notification requests to master only when notification_v2 enabled. 265e6785be0 mds: account for header size during omap commit d27dab240d5 rgw/notification: fix segmentation fault and topic listing logic 16dfa00100e doc: add pendingreleasenotes for cephfs subvolume earmarking feature 6054be59c56 .github/workflows: Do not exempt PRs with milestone 184c1861f81 crimson/osd/replicate_backend: add the skipped newly created clone object to the push queue after the clone request completes 6e0324f26b2 exporter: SIGTERM/SIGINT/SIGHUP management 63357492db3 doc: 17.2.8 Release Notes 05e207fa774 radosgw-admin: create user without credentials via cli 71c1a2967f2 osd/osd_types: perfect forwarding in pool_opts_t::set() c1fdc53bc7b osd/osd_types: use std::map::insert_or_assign() 84f87afd61e osdc/Objecter: use the erase() return value f3f5b084a99 osd: disable `boost::intrusive::constant_time_size` 3cf00cde820 ceph-volume: fix dmcrypt activation regression 00b0711188f mds: client is evicted when an export subtree task is interrupted 2e7d1ee6e7e Add multiple labels in single command to host f23bd5d0995 qa: add test for importer's unexpected client eviction after an export subtree task is interrupted 057c5b1610c mds: session in the importing state cannot be cleared if an export subtree task is interrupted while the state of importer is acking eccaf85294a qa: add test for importer's session cleanup after an export subtree task is interrupted 73d5c01ae62 qa/suites/nvmeof: add nvmeof warnings to log-ignorelist 11a4303d66f mds: the assert should be before the journal entry submit otherwise it's racy 79a33025d50 mds: add `importing_count` to session dump 489eed66cdd osd/scrub: list additional information when dumping the queue 4e130affe1a rgw: Update README for DBStore and Posix drivers d833431ea43 crimson/osd/replicated_backend: add the dedicated method to construct MOSDRepOp b75dd8d333e crimson/osd/pg: add is_missing_on_peer() b6f27f8305b crimson/osd/pg: reuse already defined methods as many as possible to improve readability 8a1fab37f2a crimson/osd/ops_executor: call OpsExecutor::apply_stats() before OpsExecutor::obc is moved out. cbd22c7ba22 crimson/osd/pg: fix dangerous lambda captures 961aef1bb4e doc/radosgw: s/Poliicy/Policy/ 22010719d7e doc/start: fix "are are" typo f1a2637c79a doc/rados: correct "full ratio" note a8784609620 monitoring: add tests for 2 new nvmeof alerts e5ff1916e3d doc/start: separate package chart from container chart 7994fea4363 monitoring: add 2 new nvmeof alerts f02e3128441 monitoring: add 2 nvmeof alerts to prometheus_alerts.yaml 8c025045332 rgw: for delete ops for a bucket, where an attr/attrs are erased from the existing attrs, call put_info() in place of merge_and_store(), to store them in the backend store. eafe4ac81b7 rgw: fix rados bucket merge and store attrs 1627e3836eb test/crimson/seastore/test_object_data_handler: always access object data based on offsets relative to the start of the object data base b6bdebe42b0 test/crimson/seastore/test_transaction_manager: take RootMetaBlock into account 8911b29fa23 crimson/os/seastore/cache: throw enospc when failed to alloc new extents 4cb1243d030 crimson/os/seastore: move the root meta out of the root block 6567e7d934d qa/vstart-runner: Only remove non-ASCII characters from string-based command outputs b8a5917f154 rgw: evaluate policies for dest object in data sync a3f40b4ec6f rgw: pass uid on fetch object in data sync 44c31faa0e7 rgw-admin: Add --format option for bucket sync status 80674a3e12d make-dist: Quiet submodule operations in Jenkins a2a4a3415c0 qa/dashboard: fix test_list_enabled_module failure c3584838cf1 mon/nvmeofgw*: monitors publish in nvme-gw show ana group responsible for namespace rebalance 64c9b53cf4a ceph.spec.in: Add option to enable sccache 1ba45628896 mgr/dashboard: update carbon-components-angular 865c66966ce crimson/.../object_context: remove unused lock helpers 7961b3714d9 crimson/osd/object_context_loader.cc: retab remaining methods 14be39509b4 crimson: InternalClientRequests require that the pg is already active bd5efa44b74 crimson/.../client_request: complete_request() only in with_pg_process 293679dbb5d crimson/.../client_request: always remove from orderer in complete_request cef3f2f9b70 crimson/.../client_request: remove unnecessary get_handle().exit() de2e92bc93c crimson: rewrite with_[clone_]obc[_only] via manager, remove other helpers 177176beabd crimson: remove unused PG::with_locked_obc fc8315a6df6 crimson: convert PG::with_locked_obc users to use obc manager 5f996662420 crimson: introduce RAII style obc lock mechanic 737676bdb5c crimson: track obcs unconditionally 1dbd7768c03 crimson: remove ObjectContextLoader::reload_obc e94ad0dfffe crimson/osd/object_context: add formatter for RWState::State cc74b76f3e7 d/control: fix lua dependencies for librgw2 ab49ca023a2 osd/scrub: fix 'schedule-deepscrub' test asok command db943eef653 Fix tuned profile to allow multiple settings ba0d989f9c9 mds: do not process client metrics message with fast dispatch edd7fe76c49 client: Gracefully handle empty pathname for statxat() 92c5ab99b8d libcephfs.h: Fix API documentation for ceph_statxat 829f3889922 client: Gracefully handle empty pathname for chownat() f6b56f9ee5d doc/cephadm: clean "Adv. OSD Service Specs" cdfa299a251 doc/cephadm: link to "host pattern" matching sect fccf7fd25e5 doc/rgw/notification: clarified the notification_v2 behavior upon upgrade 0f0089472cc TEST_backfill_grow fails after finding "num_bytes mismatch" in osd log 14b09519739 Make mon addrs consistent with mon info 34bc35a7344 doc/cephadm: Update operations.rst e4164273cf3 rgw: return MalformedXML for empty objects list in DeleteObjects 919da369666 [CVE-2024-48916] rgw/sts: fix to disallow unsupported JWT algorithms while authenticating AssumeRoleWithWebIdentity using JWT obtained from an external IDP. 141b675b0b4 hiding parquet dependencies upon parquet-select option is off 0a76ec38559 test/crimson/test_backfill: support projected log and pg log 7a2db2f46e2 crimson/osd/pg: introduce projected_log 77dd0027baf spdk: update spdk submodule to fix build with newer glibc 7ae56f4f561 mgr/dashboard: remove cherrypy_backports.py df422f9f252 include/str_list: remove unnecessary #include dcb6c4a30ba common/error_code: remove unused includes cd95497f039 common/perf_counters: forward-declare class utime_t b9ffdba1a77 common/DecayCounter: forward-declare ceph::Formatter 9615c04d7d8 common/Thread: include cleanup f7ee8b122db common/Journald: add missing include 85f9521b4e9 common/StackStringStream: remove unused includes 3d0550026fc common/{ceph_time,Throttle}: use <iosfwd> f9126e65b39 common/pick_address: add missing includes 0ea0e100680 common/options: add missing include for strict_si_cast() and std::cerr eb150432f0c common/strtol: add missing include b1bd141ca77 common/ceph_argparse: add missing forward declaration 98bf9fd9f5c common/buffer: add missing include for std::cerr 24c2b1994aa common/Graylog: add missing include a42c023b65d common/elist: add missing includes fc076a9925c common/admin_socket: add missing includes 9a4ab0089db tools/radosacl: add missing include for std::cerr a349d3ec68e test: add missing include for std::cout 881d111aa01 cepadm: update tox.init to use latest flake 8 versions a529b234a24 cephadm: mock a call to shutil.rmtree 6739a68efa0 cephadm: do not trigger rollback in bootstrap unit tests 9fbbdf7c530 cephadm: fix invalid use of mock called_with method d9acf69589e cephadm: update some type annotations 213d0b1ea2d cephadm: update some type annotations a1c7b5d9c92 cephadm: update some type annotations bb58be856a6 cephadm: update some type annotations 6405f756352 cephadm: update some type annotations 1a2346e612b cephadm: update some type annotations f0f7d9b10bc cephadm: fix f-string expression formatting a141ffb7b15 cephadm: update some type annotations 67ece5d2fa9 cephadm: update some type annotations b02cef96ca5 python-common: use tox.ini envlist defaults when run via cmake dd89369b0c6 python-common: remove unused requirements-lint.txt 894371cd36a python-common: update tox.ini linting environments bdf7d4f30c5 python-common/tests: update some type annotations 39df3c0771a python-common/deployment: disable some unused import flake8 errors d36c1dea17d python-common/deployment: fix string that should not be an f-string 9bb9819db2d python-common/deployment: rename a single letter variable 851d740d62e python-common/deployment: disable some unused import flake8 errors 9475f843b35 python-common/deployment: disable some unused import flake8 errors d34492c694a python-common/deployment: disable some unused import flake8 errors 4dd84cdf07f python-common/deployment: disable some unused import flake8 errors dc625594af7 python-common/deployment: update some type annotations 8726e214fb7 mgr/cephadm: fix invalid use of mock called_with method b77829c45e2 python-common: fix mypy errors in earmarking.py 799ff256894 pybind/mgr: fix flake8 f-string formatting for py3.12 19545eb9864 tools: respect set features when adding addresses f07c4d47f19 Revert "rgw/multisite: avoid redundant error repo entry logging" dd0c8168325 mon: emit warning during fs rm 5c5102c23fd mgr/volumes: warn about active snap-schedules when volume is deleted ec272797c4c doc/rgw/notification: add missing admin commands 153a698c31c doc/cephfs: note about volume deletion affecting snap-schedule Manager module 4d2af0c5783 mgr/snap_schedule: handle volume delete 6f5612a3a7d mgr/dashboard: improve the kcli bootstrap process 790afd27773 doc: Document which options are disabled by mClock. ab8d7095979 mgr/cephadm: orch host drain command does not return error for invalid hostname 7e5898ff413 Revert "suites: crimson basic adding wait for test" 66ca80e7d7d mon/nvmeofgw*: fix no-listeners FSM, fix detection of no-listeners condition 5cf1e93ad44 crimson/osd/replicated_recovery_backend: call on_global_recover() only when all replicas and the primary have been recovered c4274c0c3a6 doc: document balancer configurable "update_pg_upmap_activity" 62c9f152e31 mgr/balancer: tie `update_pg_upmap_activity` to a configurable 31c498da96f mgr/balancer: optimize 'balancer status detail' 55860520b3f qa/multisite: add extra checkpoints in datalog_autotrim testcase aee484425f7 doc/cephadm/services: Update monitoring.rst to add additional templates 3a4beadce9d doc/cephadm/services: [v1] Update monitoring.rst to add additional templates 88deedee942 ceph.spec.in: Add an option to disable dwz ea1a470fb48 doc: s/Whereas,/Although/ 749007f7cf9 crimson/osd/backfill_state: don't try to do object backfills when primary_bi is empty 8878619ed07 doc/cephadm: documentation for RGW spec "disable_multisite_sync_traffic" option d620ba65121 mgr/cephadm: allow disabling rgw_run_sync_thread through spec 874f12451da cephadm: update default image imports to point to common location 297f9f94b3c cephadm: add python-common/ceph to MYPYPATH and pytest PYTHONPATH b1b9cc0c84f python-common: add spot in python-common for cephadm default images b44121f4832 cephadm: add python-common/ceph to cephadm zipapp 9244f0a3030 test/pybind: update to test_fallocate for mode 0 b0690837f31 qa: test fallocate fails in mode 0 ac34dd33099 PendingReleaseNotes: add note about fallocate mode 0 98a67b65961 client: return EOPNOTSUPP for fallocate with mode 0 2b30c8e8958 cephadm/smb: convert config object to use a dataclass 66e9ef16a93 mgr/cephadm: sign generated RGW certs fd9c40465bd mon/MDSMonitor: send reply to beacons with `state=DNE` 96a2f89dc57 CODEOWNERS: let orchestration cover all of python-common 0276ab4eb9d mds/Beacon: wake up the thread in shutdown() 961757b59bf mgr/dashboard: Replacing bootstrap modal service with cds modal service dd5dcc2945a mgr/cephadm: Change NVME image version to 1.3.3. Fixes https://tracker.ceph.com/issues/68755 63c0649da42 osd: revert PR#57582 1a895c9d121 doc: mention how to initiate snapshot mirroring c29c1e7bb2d doc/dev/crimson: update index 61ebde0be2a doc/dev/crimson: Add initial BackfillMachine docs 2368dcb402e doc/start: add supported Squid distros b9e7dead3f6 doc/governance: updates based on 2024q4 election b23b0407fec librados: dont duplicate class names in member definitions 63cb345c6ad crimson/osd/osd_operations/client_request: no need to hold head's obc lock throughout the recovery of clones 314c1530519 crimson/osd/pg: fix wrong debug logs 63b9de4a3a7 crimson/osd/pg: make sure ops are sent to backfill targets if and only if the object has been pushed. b0085bf224a mgr/{restful,zabbix}: document removal 8ccb6348046 mgr/zabbix: remove deprecated module 96ec7badb85 mgr/restful: remove deprecated module 79d61bbb58c qa/dashboard: fix tasks.mgr.dashboard.test_health.HealthTest 6648d94aed5 doc/rados: add blaum_roth coding guidance 1770b177fc1 osd/scrub: improve scrub information conveyed in standard PG log line references 9c3c8d48a2d doc: improve pending release notes and CephFS cbc33e8d983 .github/check-license: correct grammar in "license check" 30b9c4b615f rgw: fix json output for bucket layout a2a989aaa5e mds: add or update MDS thread names bfe489ed19d log: cache recent threads up to a day 7de5af59c27 common: cache pthread names eb760013c2b qa/suites/orch: add a tests for testing public_addr for smb cluster create cmd 4ef8a86fa41 mgr/dashboard: Carbon Design - Create realm popup 1f40d0c06c4 log: concatenate thread names and print once per thread 4941d098e33 ceph-volume: support zapping by osd-id for RAW OSDs f1135273f33 Add API tests for nvmeof service.ts file dd04fc5339a crimson/osd/backfill_state: discard CancelBackfill events when the backfill is done 13c7c9d9988 doc/cephfs: use 'p' flag to set layouts or quotas 5818305e809 cephadm: handle "systemctl start" failures during deployment better 778218adf1b mgr/dashboard:Roles section is not aligned with column name ed3ce72fbc0 doc: explain the consequence of enabling mirroring through monitor commands a9824956d43 mgr/vol: add helpers to spawn all threads and more threads 72395884f97 mgr/vol: reuse code for spawning threads e1f33442160 rgw/lc: Fix lifecycle not working while bucket versioning is suspended 38601d0c9ea <comomon> fix buffer out-of-bounds in HTMLFormatter 207003c5123 <common> fix formatter buffer out-of-bounds 4080115739d mgr/dashboard: rm nvmeof conf based on its daemon name 5b5db8974bd mailmap, githubmap, organisationmap: Add Anuradha Gadge c323da351ec Update .githubmap 3e043a903ca doc/cephfs: edit "Disabling Volumes Plugin" 470cd133ec2 qa/suites/fs/thrash: add convolve operator for overrides fa46810b5b3 qa/cephfs: s/prefetch_dirfrags/prefetch_oft_dirfrags 69992c8f797 doc/rbd : add namespace mirroring updates a42be085bd7 doc/start: add vstart install guide 42e4b45d304 .github/check-license: add friendly name 68c9f16fab4 mgr/dashboard: carbonize Cluster > Hosts form 0092cfe3c3e mds: remove obsolete comments f54be33382a doc: remove refrences to `mds_log_major_segment_event_ratio` 718afe26ba8 mds: start a new major segment after reaching minor segment threshold 7d11c708b99 mds: make parts of mdlog reusable to be used by beacon 8403096655b added tests migration with namespace 599bdbf0a24 doc/glossary: add "PLP" to glossary c8b4155d2d2 doc/rados: standardize markup of "clean" f39c9232e18 crimson/osd/shard_services: fix dangling reference caused by rvalue reference of ShardSercies::dispatch_context() 5639030d48d test/crimson: disable stall-detector on aarch64 to fix asan failures f6cf7ae5281 doc/cephfs: rearrange subvolume group information eab096c188d rgw: fix empty storage class on display of multipart uploads cb3c475359c vstart: log faulty physical disk device dd4549238e5 mgr/dashboard: fix bucket get for s3 account owned bucket 60149ade9d5 rgw/lc: Fix issues with non-current objects with instance empty c4206676642 doc/cephadm: correct "ceph orch apply" command 16c23e03378 osd/scrub: remove the 'only_deadlined' flag 9f3e18b97cb osd/scrub: make sched-targets comparator transitive 0dcc207194b mgr/cephadm: Add namespace netmask parameters to nvmeof configuration Fixes https://tracker.ceph.com/issues/68542 dd4b357ce97 python-common/ceph/deployment: Add namespace netmask parameters to nvmeof configuration Fixes https://tracker.ceph.com/issues/68542 2f81b4d618e remove the code-lines that checking the {ofs,len} bounderies; and modifies them if necessary(invalid read) dda683b20c4 suites/rados/thrash-erasure-code/.../ec-small-objects-balanced.yaml: remove 87c8a9c1b77 qa/tasks/rados: set pct_update_delay if balance_reads is set 8ab313fb699 osd: wire up async primary->replica pct updates aee7b306196 common/intrusive_timer.h: introduce intrusive_timer 64f252c2401 radosgw-admin: allow 'sync group pipe modify' with existing user 4b084c608c1 qa/cephfs: override testing kernel with -k option 18b8277e86e mgr/cephadm: add "Enable_UDP = false;" to ganesha conf 4d795a8ea41 mgr/cephadm: add "mount_path_pseudo = true;" to generated ganesha conf 1e69ebc6cea mgr/cephadm: add NFSv3 protocol to cephadm generated ganesha conf b39be5abe03 mgr/nfs: add NFSv3 protocol to exports 575a19d2a81 RGW|Bucket notification: fix for v2 topics rgw-admin list operation 810c7068682 Add multi-cluster support (showMultiCluster=True) to alerts fdc93ad15e8 qa/suites/nvmeof: add mtls test 8f7c5f08e6f mgr/vol: add comments to explain queuing data structures 3232f6b7af1 PendingReleaseNote: add release note that mgr/volumes plugin can be... 373910de34f doc/cephfs: add doc for disabling mgr/volumes plugin 0abc227131c qa/cephfs: test enable/disable of volumes plugin 99627723580 mon/MgrMonitor: allow disabling always-on MGR modules 4374ac74d28 mon/MgrMontitor: add log entry to support debugging e830f89240e mon/MgrMonitor: improve a log message 75236e9c0be messages: add MOSDPGPCT f4b0589e3b3 osd/osd_types: add PCT_UPDATE_DELAY pool option 8e14ce00c80 osd: introduce acting set specific feature vector d20325a3908 osd/PeeringState: proc_replica_info->proc_replica_notify, pass in pg_notify_t d760935f2c6 osdc: add replica read perf counters to Objecter 990051fa1d4 osd,crimson/osd: add perf counters for replica reads 8c4c22c15b2 crimson/.../client_request: bounce replica read if missing 8c31d84692e crimson/.../client_request: minor cosmetic simplification ba246b10e73 osd,crimson/osd: remove external interfaces for mlcod a6da03104cf osd/ECBackend: simplfy pg_committed_to handling 8116c88ea1c osd/PrimaryLogPG: adjust assert in log_operation a2d4faf0f12 osd,crimson/osd: pg_committed_to rather than mlcod for submit_log_entries 407350daf1c osd,crimson/osd: roll_forward_to->pg_committed_to for MOSDPGUpdateLogMissing and related c58a40f1dd5 osd,crimson/osd: use pg_committed_to rather than mlcod for submit_transaction 6be4d397d02 osd,crimson/osd: maintain pg_committed_to on replica rather than min_last_complete_ondisk 8411911b6b9 osd: roll_forward_to->pg_committed_to in EC* 9d72303f969 osd/PeeringState: refine pg_committed_to semantics a5f66eef9d6 osd/PeeringState: rename last_update_ondisk to pg_committed_to bd4fa931912 osd: remove support for replicas without OSD_REPOP_MLCOD 7eebc628a84 osd/PeeringState: remove unused PeeringState::append_log_with_trim_to_updated f46e469d603 osd/PrimaryLogPG: cosmetic fix for long debug line 4690e8b3f2b osd/PeeringState: cosmetic fix for long line f1bc95dafe0 doc/dev: add walkthrough for CephFS kernel development 231a1c352d0 mgr/dashboard: Removing duplicate cephfs constant file & importing correct default_subvolumegroup. a2566ce4c41 mon,cephfs: fix indentation level of a code block 04757a317ac ci: fix typo in check-license 27feea13ff0 MDS/CDir: return as early as possible from CDir::should_split_fast() 4b2ba587b7d mgmt-gateway: add e2e testing da4b85c55a1 common,osd: Use last valid OSD IOPS value if measured IOPS is unrealistic 4b9d6a3ba1c doc/cephadm: adding documentation for mgmt-gateway HA setup b7ee45ab6ad mgr/cephadm: adding UT for new mgmt-gateway functionality 06fccea5cfc mgr/cephadm: fixing deps handling for mgmt-gateway Fixes: https://tracker.ceph.com/issues/68377 0392505386e mgr/cephadm: adding HA support for mgmt-gateway and ouath2-proxy d0db937cbb3 mgr/cephadm: adding md5_hash stable hash to the utils collection 87612f499f8 mgr/dashboard: fix lifecycle issues f7a379fe9bc cephadm: Added new cephadm command to list all the default images 565bb1407a9 doc/cephadm: document new flags on maintenance exit command 56a1a27a9fb doc/cephfs: add note to remind user about snap-schedule during volume delete ee9b7c0617c mgr/cephadm: add offline host handling to maintenance exit eaad13485b8 mgr/cephadm: set maintenance mode healthcheck when removing hosts 82b6a1c5786 mgr/smb: rm all `smb dump` commands 3c9b07eb87e exporter: New metric for report ceph daemons health 212c8740831 orch: disk replacement enhancement b5e7008d28a ceph-volume: address mypy errors in disk.py dd2a150f40f ceph-volume: address test_activate_dmcrypt_tpm 10d4f309f3c mgr/dashboard: Add 'Browse Dashboards' button in multi-cluster and ceph-cluster Grafana dashboards 7343be72087 os/bluestore: Fix repair of multilabel when collides with BlueFS 11e3ecabf97 crimson/osd/pg: trigger PG::wait_for_active_blocker only when the pg is going active 80d0037c251 mailmap: Add dashboard new joinees in maps 56b60c01cac mgr/dashboard: Adapt gateway group changes in nvmeof UI 67f884d39c3 CodingStyle: allow C++ forward declarations f4e165305f8 common/io_exerciser: Add assertion on failure of IO validation 163a28aa116 test/osd: Add interactive mode to ceph_test_rados_io_sequence 88917c5b8ae test/osd: Remove unnecessary whitespace c78d1ba668d rgw: add mstart-related scripts to CODEOWNERS and labeler b6cb908e0b7 rgw: document mstart.sh and related scripts 942044cc603 mds/Beacon: set a thread name 629922bf6a0 doc: update Key Idea in cephfs-mirroring.rst 0006599c9e1 mon: add warning NVMEOF_GATEWAY_DOWN 1cad0401cfc mon: add nvmeof healthchecks 2ed1a3bd70c .github: detect GPL license in PRs 3ab5d1f67f1 mgr/cephadm: disabling nginx buffering for grafana location 0be8d01c9dd log: thread name save/fetch infra 24f453dd39c client: Resolve symlink from dirfd for empty pathname 8443821073b client: Fix symlink open with O_PATH and O_NOFOLLOW e036fde7e4b mgr/dashboard: The subvolumes are missing from the dropdown menu on the "Create NFS export" page 7cd60242a96 ceph-fuse: Improve fuse mount usage message 2b562b64a64 crimson: remove unused OpsExecuter::rollback_obc_if_modified overload 7ac64b0b245 crimson: OpsExecuter no longer needs to be a lw shared ptr 8f3ac965c31 crimson: remove now unused PG::do_osd_ops* and log_reply a0efff116cd crimson: clarify ops_executer.h comment c091f3b2ab6 crimson: convert InternalClientRequest::do_request to use *_executer rather than do_osd_ops* fc41fcb9d2a crimson: factor out InternalClientRequest::do_process 304e20e9bcf crimson: switch ClientRequest::do_request to use *_executer rather than do_osd_ops 00057b45f03 crimson: introduce PG::run_executer,submit_executer 7a826eb86c4 crimson: PG::submit_error_log returns eversion_t rather than optional 5e28a3bd3b5 crimson: introduce rollback_obc_if_modified without an error argument 24b7b4f4b5d crimson: futures from flush_changes_n_do_ops_effects must not fail a43452f47ee crimson: OpsExecutor::flush_clone_metadata no longer needs to return a future 0a83d956e54 crimson: remove the eagain error from PG::do_osd_ops 7da7c3d736c crimson/osd: move pipelines to osd_operation.h 96c771383ae crimson: eliminate get_obc stage 238f3e573d4 crimson/.../internal_client_request: convert with_interruption to coroutine a091414c67b crimson/.../internal_client_request: factor out with_interruption a7812e095c1 crimson/.../internal_client_request: remove unnecessary system_shutdown guard 4bea366e5de crimson: fix typo OpsExecutor->OpsExecuter 1f99108d197 crimson: add missing field to SUBLOGDPPI and LOGDPPI 7b783876960 crimson: remove watchers upon object deletion 843daa9af72 common/async: remove unused common/async/bind_like.h c6415e14eb2 common/async: use asio::associator for Forwarding/CompletionHandler abaca8110ad common/async: SharedMutex uses append instead of bind_handler 03dfb8635ec rgw_cksum: treat mpu checksums w/o part count as valid in CompleteMultipart c4c647480ad osdc: remove unused overloads for async::Completion 56e48d4ba70 common/async: Completion removes unnecessary bind_executor() 71ed54ba772 common/async: Completion uses asio::recycling_allocator by default 2f61b2847d9 doc/governance: update my CSC email e4177406f97 mailmap: add my ibm email 022b90a7533 doc/governance: add new CSC members 88e4484acf1 mgr/cephadm: add ok_to_stop func for smb service 517ab013e2a mgr/dashboard: sync policy's in Object >> Multi-site >> Sync-policy, does not show the zonegroup to which policy belongs to b027d43e97f rgw/restore: Fixed status codes and response headers f7e2ca02110 rgw/dbstore: Cleanup - use unique_ptr instead of new/delete in DBZone cb4ff28af09 mds: add issue_seq to all cap messages da89acdc850 mgr/smb: prevent switching between clustering modes 263c0f8e730 mgr/smb: move logic validating cluster changes to handler 2f7fe668fe2 mgr/smb: split _check_cluster function body into two functions 5b0d849730c common/ceph_context: use std::atomic<std::shared_ptr<T>> 3dc091dd12c mgr/dashboard: Fix listener deletion 8ebcb2dd46e os/bluestore/ceph-bluestore-tool: Modify show-label for many devs f9b50b2e88a mgr/dashboard: fix group name bugs in the nvmeof API 86378344ab0 mgr/dashboard: introduce server side pagination for osds ad147f2e8d8 mgr/cephadm: RGW service deployment defaults to 'default' realm/zonegroup/zone despite non-default spec in service 7e03ee798f4 container/build.sh: fix arm architecture tagging 0a867d149e9 mgr/cephadm: adding more UT for mgmt-gateway service b92d14a0aa9 rgw: initialize createparams zone_placement to avoid garbage value 1a85d4df026 mds/QuiesceDbEncoding: add `inline` to work around linker error 0c4028a6a35 qa/standalone/scrub: remove TEST_recovery_scrub_2 4f1ef85c720 osd/scrub: modify ScrubStore contents retrieval 47ef574bee6 qa/standalone/scrub: test new ScrubStore implementation daf848fa5af osd/scrub: separate shallow vs deep errors storage 031580fb662 common/scrub,osd/scrub: minor cleanups to ScrubStore 283f4c25864 common: extend MapCacher API ce58c881583 osd/scrub: add dout() capability to the ScrubStore 571e2f3c193 osd/scrub: directly create or reinit the ScrubStore 38d9cf4ca76 osd/scrub: introduce ScrubStore::at_level_t e80b7ba4add mgr/cephadm: move Grafana's subpath handling logic to grafana config 47e7a24c7b9 mon/nvmeofgw*: fix HA usecase when gateway has no listeners: behaves like no-subsystems 1da6ef237fc include/ceph_fs: correct ceph_mds_cap_peer field name 655cddb7c9f include/ceph_fs: correct ceph_mds_cap_item field name 6d8a73439ed messages/MClientCaps: use correct ceph_seq_t for cap sequence types 7766d3c7249 messages/MClientCaps: dump issue_seq for debugging a72b31e2fb3 mds: remove dead code 5a1a21573b9 mgr/dashboard: unable to edit pipe config for bucket level policy of a bucket 95916c91906 doc/dev: remove "Stable Releases and Backports" 0317b5f87ac doc: SubmittingPatches-backports - remove backports team 9b7fb48c246 Add cosbench deprecation warning to qa/README 074dee9cbd6 qa/suites/tasks/cbt.py: Deprecating cosbench from Teuthology in preparation for deletion of cosbench support from CBT. The code being deleting is infrastructure code, no qa test suite uses this function. Therefore it can be safely deleted. 303f18b1aff qa/workunits/nvmeof/setup_subsystem.sh: use --no-group-append 0bab553399c qa/suites/nvmeof: use "latest" image of gateway and cli 6c419323584 cephadm/smb: Add NET_RAW capability to deploy ctdbd 67928a27357 qa/standalone/mon/mon_cluster_log.sh: retry check for log line efc96a2d134 common/Finisher: pass name as std::string_view to ctor f4bc4be0fa8 common/Finisher: add method get_thread_name() 62ade6b38d1 mgr/ActivePyModule: build thread name with fmt 9d47b164afd mgr/ActivePyModule: return std::string_view instead of std::string copy d513cc527ca labeler: add nvmeof labelers 12e0c26dd3a common/Finisher: use fmt to build strings 3717827b8bc common/Finisher: un-inline ctor and dtor a1e7ef6383e common/Finisher: add `const` to several fields cdd9bbd51e5 common/Finisher: merge duplicate field initializers 09df46644e0 common/Finisher: call notify_one() instead of notify_all() 0abad594d85 common/Finisher: wake up after pushing to the queue e30551eb86c common/Finisher: do not wake up the thread if already running 2a19a27040e common/Finisher: call logger without holding the lock 5b97c09b6f0 common/Finisher: use `std::lock_guard` instead of `std::unique_lock` c4c4b640f5c common/Finisher: merge all queue() container methods into one template 425fc4d21d3 msg/async/AsyncConnection: move the writeCallback instead of copying it c72dae9b6e4 msg/async/AsyncConnection: do not wrap writeCallback in `std::optional` 10a9914f848 msg/async/frames_v2: use zero-initialization instead of memset() 7fcb8a8afaf msg/async/Event: use zero-initialization instead of memset() 62ebf16f71f msg/Message: use zero-initialization instead of memset() 6597d773611 msg/async/ProtocolV2: eliminate redundant std::map lookups 342a25b9df1 msg/async/ProtocolV[12]: reverse the std::map sort order 988705a49b5 msg/async/ProtocolV[12]: use `auto` a1438447864 msg/async/ProtocolV[12]: use range-based `for` cae1af38601 msg/async/ProtocolV1: use zero-initialization instead of memset() 9441e9ad3a2 common/options: pass name as rvalue reference d29434c6190 common/config: use libfmt to build strings 1e391415a6e common/config: use emplace_back() instead of push_back() 2e2bcd5518a common/HeartbeatMap: pass name as rvalue reference 26858737028 common/config_obs_mgr: use the erase() return value adc0a601d87 common/SloppyCRCMap: use the erase() return value 6c1d2fc2d67 common: disable `boost::intrusive::constant_time_size` 42f7383589c CMakeLists.txt: do not compile {Objecter,Striper}.cc twice 78ae3b13509 qa/cephfs: update earmark values to valid ones in test_volumes.py 4fbb678c9c6 mds/MDCache: use `auto` f51ea0450ad mds/CDir: use the erase() return value ac30518d183 mds/MDCache: remove unnecessary empty() check e4b27678311 mds/MDCache: use the erase() return value b96998f8499 mds/MDCache: pass iterator by value a0c51d0e7f0 common/io_exerciser: Modify is_locked_by_me call in ceph_test_rados_io_sequence 1b535c011f1 doc: update 'header get' output in cephfs-journal-tool.rst 08632621d07 crimson/os/seastore: initialize oi and ss in onode_layout_t to zero 512eea1af52 doc: fix email 9fc65f160cd os/bluestore: Make truncate() drop unused allocations 256b20de486 qa: do not fail cephfs QA tests for slow bluestore ops 5506ed63c2f qa: add test for 'dump_export_states' d34f33055d2 mds: add an asok command to dump export states ad8e622fa97 suite/upgrade/quincy-x/filestore-remove-check: update ignore list 5b90117348d common/io_exerciser: Add version argument to callbacks in ceph_radios_io_sequence 97e68b20aa3 crimson/osd/backfill_state: add the object to be pushed in the peer missing set of PeeringState ec5c6c5761e crimson/os/seastore/transaction_manager: refine logs 1ee32107df9 crimson/os/seastore/transaction_manager: misc cleanups 14eacf64559 crimson/os/seastore: workaround log linkage issue under clang14 589e9cb9356 crimson/os/seastore: refine logs of seastore.h/cc d39949e8e9c crimson/os/seastore: adjust op names a49e49a1fd6 crimson/os/seastore: convert length logs to the hex format fc537c8d914 crimson/os/seastore: misc cleanups 966920e063c msg/async/ProtocolV2: pass `desc` as `std::string_view` to write() 984a76f5a3e test/rgw/lua: use stats polling instead of sleep 9f0af5d75dc doc/man: supplant "wsync" with "nowsync" as the default 0cb2636f1a6 doc/governance: revert d7c144c0d7e490bfda9715a0c8462bb67cffc764 471ebae9240 qa/suites/crimson-rados/perf: add ssh keys 8dd9e9dad6a mgr/dashboard: fix gateways section error:”404 - Not Found RGW Daemon not found: None” ea53aceb8d7 mgr/dashboard: show non default realm sync status in rgw overview page ee16b099d54 common: missing std include with GCC 14 ce5d62db0e5 mgr/vol: remove unused variable 485cb051192 mgr/dashboard: add gw_groups to all nvmeof endpoints 401e8109fc7 mgr/dashboard: Enable refresh button on Manage Clusters - Clusters List table 4d15ed813b1 mgr/dashboard: increase timeout to detect replication user in the secondary cluster 2f5dbed0cf5 doc: remove note for smb3 support 597a702874b s3select submodule 405798aeda9 qa/tasks: added "is down" warning to thrash-old-clients ingorelist 1578931220a osd/scrubber: Clean up unused function add_double 8daa791d396 test/rgw/multisite: add meta checkpoint after bucket creation cfe254758b1 doc/radosgw/multisite: fix Configuring Secondary Zones -> Updating the Period db926acb533 doc/dev/radosgw: update paths that moved under src/rgw/driver/rados/ 942474c2f5b client: Fix aio zerobyte file read 10c8330f20c client: Fix caps_ref[c]<0 assert 3ebe97484d2 client: Fix libcephfs aio metadata corruption. b5af1c1ffe8 test/client: Fix aio nonblocking test 59b996f0ed0 qa: Add libcephfs client test with objectcacher disabled 6d8f61015f2 qa: Add data read/write test for nfs-ganesha 247562fad74 script/run-make: stop args duplication ad9ff386278 mgr/vol: better to call base class __init__() at beginning 322c1a79206 doc/governance: add Zac Dover's updated email 31a5d5f2f97 doc/governance: add exec council responsibilites 5a9c1c06e8d cephadm/smb: Add a provision to specify ctdb log level 39723ff29d4 mgr/dashboard: Donot display restart gateway message on completion of Setup Multisite Replication wizard a48080af395 test/common: add death test for double !recursive lock 9eeca730fa0 global: Call getnam_r with a 64KiB buffer on the heap 9d1be68be06 mgr/smb: fix condition for smb earmark when cluster_id doesn't match 7b2085daad1 librbd/crypto/LoadRequest: clone format for migration source image 63529523f57 librbd/crypto/LoadRequest: rename m_is_current_format_cloned a92ca37b73c cephadm: use a shared smb.conf for clustered smb container sets 8d2d54f6c26 cephfs-shell: fixing the cephfs-shell test failures 80b7917cef6 json_spirit: add missing dependency on Boost::thread 1b66bc527eb RGW: Cloud Restore cli and its corresponding response for user. c49aa6aa3b1 cloud restore: completing read through 0e0222d0162 rgw/cloudtier: Restore object from cloud endpoint 5c40a5c1737 Add Containerfile and build.sh to build it. 84ebb30ea94 common/test: do not test exception raised from recursive lock 1213df95915 test/common: fix invalid vim mode bec702dad7a common,osdc: remove obsolete ceph::mutex_debugging 69baa6de257 common: assert debug mutex lock is not held if !recursive fd895dde9d6 cephadm: pull container images from quay.io c7fda7cabb0 mailmap, githubmap, organisationmap: Add Shweta Bhosale b39ee674295 qa/tasks/tox: unpin tox version 725b4e18479 src/exporter: improve usage message 3e3b7fa8ea2 mgr/cephadm: add "allow_set_io_flusher_fail = true;" to ganesha conf 0ed14dc8336 mgr/dashboard: Unable to delete realm via dashboard 1173caf7960 qa/tasks/ceph: wait for OSDs to go down before checking logs 287ff3b3603 mgr/dashboard: Allow adding all listeners unders a subsystems a71c8e8d118 PendingReleaseNotes: add a release note about confirm flag for max_mds 2d28faaeea1 doc/cephfs: update about changing max_mds FS setting variable 4d5ec87ab40 qa/cephfs: add tests for confirmationn required to change max_mds a55a75c57e7 mon,cephfs: require confirmation when changing max_mds on unhealthy cluster 417c5441ef7 mon/nvmeofgw*:fix monitor database corruption upon add gw b8516bf6b91 rgw: decrypt multipart get part when encrypted a09e6d3c2f7 README: add OpenSSF Best Practices Badge 48d1517b417 mgr/dashboard: Fix `null` gateway group c0e05bf3606 ceph-volume: drop unnecessary call to `get_single_lv()` 719fd989523 os/bluestore: log max throttle cost and txc count on slow op. c2e8c295dc4 ceph-volume: add new class UdevData ee8c7d2e3bb mgr/cephadm: adding config to check client cert for internal nginx Fixes: https://tracker.ceph.com/issues/68310 a2b2eac0367 rgw/lc: Fix a bug in LCOpAction_Transition::check() 2baa027b13c doc/rados: edit "Placement Groups Never Get Clean" 99ae9590a5b doc/releases: move Dashboard items from CephFS 84f5ace9498 doc: Adds release date. 706eb26f560 mds: do not dump empty bufptr bb7d5b62d9d doc: Document the Windows CI job 9d44eef4ae3 rgw/multisite: add zonegroup parameter to test-rgw-mulitisite.sh b4c62fe6367 ceph-volume: docstring and typing corrections ad471f553d3 mgr/dashboard: fix doc links in rgw-multisite 59e39d11779 osdc: fix mutex assert for !debug builds d31397457cc common/io_exerciser: code enhancements to ceph_test_rados_io_sequence 50ec38470fa mgr/dashboard: rbd table actions enhancements cf5b9eafb3b mon/nvmeofgw*: fix tracking gateways in DELETING state 1.Ignore subsystems of GWs in state DELETING when calculate number namespaces 2.Call tracking function always in the monitor's tick - not just if the beacon is active 3482ebcd3c7 mgr/vol: don't define progress bar ID repeatedly 829c857b9e1 crimson/os/seastore: fix data inconsistency during ool writes 012bb63b276 mailmap, githubmap, organisationmap: Add Kushal b96d714b23b mgr/mgr_util: log traceback when exception occurs in RTimer.run() 8db39bcbdb4 crimson/osd/backfill_state: do at least one time of replica scanning if necessary in the Enqueuing state c39ae16f78f qa/standalone: bugfix for wait_for_scrub 4a4fc7bad53 qa: ignore pg availability/degraded warnings 4b2e841144e script/ceph-debug-docker: add debuginfod for ubuntu dccebc7ca4c script/ceph-debug-docker: drop /ceph mount 6cdef7ad93a doc/releases: add highlights section 7769bdb9438 rgw/rados: rgw_rados_operate() takes version_t* 21cf769ae78 mgr/mgr_util: don't set event when it is already set a191f9a6d29 rgw/multisite: avoid redundant error repo entry logging 7075998a64a doc/releases: update squid release date 5cc7cf44dba librados/asio: add version_t to completion signatures 0daba18f9af doc/releases: Add warning about iSCSI bug 29e122f8754 qa/suites/rbd/iscsi: enable all supported container hosts d3f385aaed0 qa: avoid a non-standard shell construct in rbd/iscsi_client.t b66b98e76d4 qa: don't hardcode podman in rbd/gwcli_{create,delete}.t 9022ef19a58 qa/tasks/ceph_iscsi_client: don't use mpathconf 9e3449995f8 qa/cephfs: test clone progress reporter after subvol is deleted but... fdecec7349b qa/rgw: add debug log to help diagnose 'bucket check unlinked' failure 517a3458af8 Temporarily change the libcephfs dependencies 45ad72a5e4d proxy: Add the design document c7c982cdb67 proxy: Add the proxy to the deb builds b524c4c1427 proxy: Add the proxy to the rpm builds 0df9f4451f5 Initial version of the libcephfs proxy 9c65adeb23f blk/KernelDevice: using join() to wait thread end is more safe 5a11bc00e6c doc: fix typo 0f8676f04f3 doc/_ext: accomodate three active releases in the Ceph timeline 36315d48140 mds: do not duplicate journaler write heads b3025914374 mds: use Journaler getters 55652f08197 osdc: properly acquire locks for getters ce5d84d1fa4 osdc: add print method for Journaler::Header 98b7402b272 mds: do not trim segments after open file table commit b2711f655a7 mds: delay expiry if LogSegment is ahead of committed oft seq 92e50c4f533 mds: do not write journal head twice on trim 6828bd05029 mds: simplify and explain expiry finisher ctx 76eab177a13 mds: add mds_lock asserts for journal flush ddc55945ea2 mds: skip second wait_for_safe 66478ab2755 mds: trim only to the LogSegment created for flush 64ec1e2e951 mds: allow passing explicit seq to trim to 6030e748165 mds: quiet unhelpful debug message f41bb2e68c9 mds: add C_IO_Wrapper completion debugging 52070edd0f0 mds: add dout for new segment 6d010bb994d doc/releases: add fixes 8a101ef9be5 mgr/dashboard: Forbid snapshot name "." and any containing "/". c01b5b179e2 rgw/auth: fix internal server error for presigned urls ad0a7fa655e node-proxy: fix a regression when processing the RedFish API 9b9ce5369ea mgr/dashboard: adjust federate ssl code with mTLS f39c5f50544 rgw/rados: RGWRados::delete_objs_inline() uses AioThrottle e39f601295b cls/rgw: cls_rgw_obj_chain uses vector instead of list 24af1beeb54 earmarking: improve error handling when getxattr fails 2ab0103e822 mgr/nfs: earmark resolver for subvolume 51adf772719 rgw: handle http options CORS with v2 auth e40b4c56cfe mgr/dashboard: Add progress bar to rgw multisite automation wizard 358f33a148c os/bluestore: Fix ceph-bluestore-tool allocmap command f6b86bbf2fe mgr/dashboard: carbonize user management-role form 15ad2bcce8a librbd: add LIBRBD_SUPPORTS_GROUP_SNAP_GET_INFO define a88c84aa1ca crimson/osd/pg: correct log messages for ShardServices::dispatch_context_messages b0f5e1086a6 crimson/osd/pg: also trigger callbacks for empty peering transactions 597e48b857e doc/releases: add Squid target release date 22546c61e9d pybind/mgr: drop py37 test from tox.ini de90c32240e mypy-constrains.txt: bump mypy up to version 1.9 a2cbb409257 pybind/mgr/telemetry: remove misleading tox env ffcc157a694 pybind/mgr: replace imports of distutils.util 51516ba146e python-common: add a utils function to replace distutils.util.strtobool 7d9fe0a5dbc mgr/smb: use is comparisions for enum values 3ec02970325 cephadm: make bootstrap default to "global" section for public_network setting af437b4e7f1 mgr/dashboard: multisite sync policy improvements 23bc88c8684 os/bluestore: log additional txc info for slow op warning on kv_committed. 1f99b55488b kv: add a pair of informative getters to KeyValueDB::TransactionImpl 4db3bb77b64 mgr/smb: accept public_addrs on cli when creating cluster 334e79002b2 qa/tasks/fwd_scrub: remove unnecessary traceback 0b09d16f10f qa: modify `test_human_readable_quota_invalid_values` 07d5199c9d8 src/test: test to check proper handling of units by strict_iec_cast 39d1cc5fd94 src/common : proper handling of units in `strict_iec_cast` ff7aa420b1a mgr/dashboard: fix setting compression type while editing rgw zone 5b2378104a9 doc: update doc for subvolumes earmarking mentioning valid formats bc168d7eda9 mgr/smb: earmark resolver for subvolume 6850bce5543 qa/standalone/scrub: increase status updates frequency 138ac6aa182 rgw: remove rgw_data_log_obj_prefix b9f63e12572 qa/cephadm: wait a bit before checking rgw daemons upgraded w/ `ceph versions` bde621dbc52 mgr/cephadm: adding health check endpoint for mgmt-gateway 42d89dfb641 doc: revert sync_duration to seconds 46e3e28a2e8 qa: update test for last_sync_duration e1612d048a1 pybind/mgr/orchestrator/module.py: NvmeofServiceSpec service_id 4277cd29897 mds: invalid id for client eviction is to be treated as success 49ee68245b7 mgr/dashboard: fix handling NaN values in dashboard charts e4183b2fde8 mgr/rgwam: use realm/zonegroup/zone method arguments for period update a7f3b7b749a src/mon/MonMap: modify dump function 4d2f8879bed qa: Added tests for disabling stretch mode 3be430040b4 osd/scrub: disable high work-queue priority for h.p. scrub 142c96e7ca5 ceph-volume: fix OSD lvm/tpm2 activation ec2af67dba8 crimson/osd/pg: remove snapmapper objects when eventually removing collections at the last moment of pg deleting, just as pg meta objects 902a45a23c5 qa: remove all bluestore signatures on devices d257eacb05a doc: Update "Getting Started" to link to start not install 45cdd3786fc librbd: introduce rbd_group_snap_namespace_type_t enum ea3bdc6f678 mgr/dashboard: update period after migrating to multisite 14c905d0c1f test/crimson/test_backfill: set BackfillState's log level to debug bfe15f68075 crimson/osd/backfill_state: always go to Enqueuing when object is pushed during Waiting 5400aab8d92 cls/user: reset stats only returns marker when truncated 28d2fa30c25 mgr/dashboard: NFS Export form fixes Fixes: https://tracker.ceph.com/issues/67400 1889ef5db5e mgr/dashboard: fix checkbox selection and role clone modal 81c8c8c71f0 common/io_exerciser: performance, readability and safety improvements 524dabc0aaa erasure-code/isa: Handle case where data and coding buffers are not 32-byte aligned 696a41037f0 mgr/dashboard: List gateways in a group a5d0f546807 crimson/osd/backfill_state: push peer pg infos' last_backfills only when all objects before them are backfilled 7c6c16c5936 mgr/dashboard: Add group selector in subsystems views a0e88abf4ec cephfs_mirror: revert sync_duration to seconds b534f60ed5f mgr/dashboard: rm unnecessary classmethods a939c75f107 mgr/dashboard: ignore exceptions raised when no cert/key found 0680f17d7ba doc/rados/operations/stretch-mode.rst: Added Exitting Stretch Mode 78ce68de41b mon [stretch mode]: support disable_stretch_mode 52278f169fe mgr/dashboard: zonegroup level policy created at master zone did not sync to non-master zone afb6399c400 src/test/osd/ceph_test_rados_io_sequence 921d92f17e3 doc/cephadm: don't hardcode default oauth2-proxy image into docs 83108769334 mgr/cephadm: update oauth2 proxy image variable name c187b0d6e22 mgr/cephadm: add --no-exception-when-missing flag to cert-store cert/key get 3bcbe50b01f mgr/dashboard: Service form fixes for mTLS 399c53fae04 rgw_log_backing: error code not returned 95cdae7f39b COPYING,common/*s390x*: distribute under Apache 2 license for s390x 33e3f8d6362 arch/s390x: add license notices, use LGPL afd27596802 ceph.spec.in: Fix unversioned Obsoletes: rpmbuild warning a159821ddfc doc/rados: add confval directives to health-checks 0f6039f9afa doc: update nfs doc for Kerberos setup of ganesha in Ceph 91734345b61 doc/radosgw: correct RST formatting 85dff0d1918 crimson/osd: purge strays when PGs go clean 9dd0b2369f9 os/bluestore: Move reservation of bdev label to proper place. e15a9c1e711 mgr/dashboard: Fix space between the text in few sections 984780eeae1 mgr/dashboard: carbonize the wizard component ccd58786b90 mgr/vol: use pre-defined timeout period instead of hardcoded value a79e9a4e7ae doc/rgw/uadk: Add UADK document for compressor zlib d1c942a9849 pybind/mgr: attempt to fix mypy importing from python-common b360419f5f0 mon: remove duplicated NVMeofGwMap.h 9d454bd8be6 os: remove unused btrfs_ioctl.h and tests 3582e6e9d5d mailmap, githubmap, organizationmap: add Naveen Naidu a98c0d67b63 common: remove unused sync_filesystem.h bec46e941d2 rbd: set journaling feature when --mirror-image-mode is journal a8918f35941 crimson/mon/MonClient: use gates to handle multi-shards da409bb22ce crimson/mgr/client: use gates to handle multi-shards e4b5a327bf4 common/gated: enable ceph_assert on shard id 45327462e09 orch: Fix `daemon add osd` boolean param handling 528f09c04eb mgr/dashboard: fix minor issues in carbon tables 656b6cb3ff0 cephadm: update LATEST_STABLE_RELEASE to squid 48b0a20bd42 rbd: display mirror uuid for mirror pool info output 5c6c4a07d8d mgr/dashboard: Cloning subvolume not listing _nogroup subvolumegroup if there are no subvols in _nogroup Fixes: https://tracker.ceph.com/issues/67891 Signed-off-by: Dnyaneshwari talwekar <dtalweka@redhat.com> 21454d08484 mgr/dashboard: remove orch required decorator from host UI router (list) 3fdbc160bb2 rbd-mirror: allow mirroring to a different namespace 174b9d4abe6 doc: document earmark option for subvolume and new commands d2f8d102215 qa/cephfs: update tests for test_volumes & unit-test for earmarking a08ddab34ab mgr/volumes: add earmarking for subvol 876bdcf2def mds: dump next_snap when checking dentry corruption 847380958b8 crimson/osd: remove CommonClientRequest::should_abort_request, no callers 5c280d2d3dc crimson/osd: InternalClientRequests should not be repeated after interval change 9aee68a25f0 qa: correct daemon for warning conf 95e8c42f4c3 qa: print config dump after setting b895e596a88 doc: nit fixes for nfs doc daafaf7f65e client: remove hypertable 1d01d0407ee mgr/dashboard: Add mTLS support e0e467a7a20 mgr/dashboard: Adding group and pool name to service name 94418d90d2b mgr/dashboard: fix UI modal issues bda1c7fe2b7 mon/NVMeofGw*: fix issue that GW was down when last subsystem was deleted a3767525d88 mgr/dashboard: add SSO through oauth2 protocol bc830a322df mgr/dashboard: add service management for mgmt-gateway 8fccda90d5b crimson/os/seastore/rbm: add assert to check if bptr is page-aligned e3953d324bf mgr/dashboard: add service management for oauth2-proxy 3bc36d1fa8d crimson/os/seastore/rbm: remove unnecessary copy during ool write f57e99e1731 doc/rados: add osd_deep_scrub_interval setting operation 482270a8d7b doc/install: add prompts to install-storage-cluster b98a46582e5 osd/scrub: reduce osd_requested_scrub_priority default value 36c620b04f3 doc/README.md: create selectable commands e4434feafc8 test/crimson/test_messenger_thrash: fix local variable out of scope in async task 1716224760d crimson/osd/pg: make "PG::submit_error_log()" and "PG::complete_error_log" interruptible 4ed50051484 crimson/osd/ops_executer: revoke OpsExecuter::get_obc() b9ef4367229 crimson/osd/ops_executor: simplify OpsExecuter::rollback_obc_if_modified fc41513d4e9 crimson/osd/pg: rollback ops by copying obc beforehand and recover after errors e0f77686523 cephadm: Support Docker Live Restore 86a0a80cb03 mgr/dashboard: fix table filter afeaeb711fa tools/ceph-bluestore-tool: Added zap-device documentation e3d8a37ef6e orch: refactor boolean handling in drive group spec 5eee7e81051 mgr/dashboard: RGW multisite sync remove zones fix 3bb41eb33b4 mgr/dashboard: fix start time format 1a80319bbff tools/ceph-bluestore-tool: remove param zap_size b61c7616819 mgr/dashboard: fix table column pipe transform dcf743928e3 ceph-volume: add call to `ceph-bluestore-tool zap-device` 55a2ffb342c mgr/cephadm: use host address while updating rgw zone endpoints 8c56a2327fa rgw/service: remove unused metadata and metadata backend services fb7cb18df92 rgw/services: remove unused RGWSI_Role_RADOS bb2ba14dfc4 rgw/role: add rgwrados::role interface for role metadata 4ed934a2190 rgw/metadata: use raw RGWMetadataHandler for role metadata 78bbf69b57f rgw/metadata: encapsulate role metadata handler in rgw_role.cc a2b37a10f80 rgw/metadata: use raw RGWMetadataHandler for user metadata 62e95e133f4 rgw/user: remove unused 'meta backend ctx' arguments a5898734a9e rgw/user: call sysobj directly instead of 'sysobj meta backend' c83fd2e1b1b rgw/metadata: use raw RGWMetadataHandler for bucket instances b04ca1367cb rgw/metadata: use raw RGWMetadataHandler for bucket entrypoints 7fb384207f9 rgw/bucket: remove unused 'meta backend ctx' arguments 2cdf27f06ed rgw/bucket: call sysobj directly instead of 'sysobj meta backend' 7b6ef9e6455 rgw/bucket: free functions for bucket instance metadata keys 890caebdc87 rgw/services: remove otp service and metadata backend 48753d440cc rgw/metadata: remove backend stuff from otp metadata handler b017975d673 rgw/services: remove unused RGWOTPCtl 0753d678402 rgw: clear output keys in RGWMetadataLister::get_next() c83698b9714 test/rgw/posix: add missing include for cpp_strerror() 8c2ed94e9cb osd/scrub: decrease default deep scrub chunk size 816df9cb2a7 qa/rgw/multifs: add tasks/+ to concatenate tasks into same job 64f71715202 qa/rgw/multifs: factor common setup tasks into 0-install.yaml 86e737fdac5 qa/rgw/multifs: remove 'rgw relaxed s3 bucket names' overrides ed09e85a890 qa/rgw: perl tests generate valid bucket names 25e0a323ad2 mgr/cephadm: renaming whitelist_domains field to allowlist_domains 0997e4cd51e python-common/ceph/deployment/service_spec.py: Allow the cephadm deployment to determine the default addresses 589258241a4 doc/releases: add rbd-wnbd scalability note 1b431a3757e tools/ceph-bluestore-tool: Allow show-label even if OSD is running 62a4247353d pybind/mgr/cephadm/services/nvmeof.py: allow setting '0.0.0.0' as address in the spec file 128e6451d8c doc/install: Keep the name field of the created user consistent with the node name in the Start RADOSGW service command 17cc3237715 mgr/dashboard: fix indefinite loop in cephadm dashboard e2e 7a952dcbc00 qa: restrict 'perf dump' on active mds 80beab8eb2c rgw/kafka: refactor topic creation to avoid rd_kafka_topic_name() 9eb3b99b99b mgr/cephadm: Make the discovery and gateway IPs configurable in NVMEof configuration Fixes https://tracker.ceph.com/issues/68030 02bbd3cf3c1 python-common/ceph/deployment: Make the discovery and gateway IPs configurable in NVMEof configuration Fixes https://tracker.ceph.com/issues/68030 04f26b29e0c Checking for dereference of a null pointer (loaded from variable 't') b9ca3957303 doc/README.md: improve formatting e905fedfccb osd/PG: make use of SnapMapper::update_snap_map 4af51349e5e mgr/dashboard: mgr/dashboard: Select no device by default in EC profile 73231640d95 crimson/osd: more detailed debug logs 918539e9de2 crimson/os/seastore/rbm: remove duplicate code and introduce a shared routine in read() and write() c8434d67d08 mgr/dashboard: expose gw_groups list api 47f57d434d1 mgr/dashboard: add gw_groups support to nvmeof api 20da9296a23 mgr/status: Fix 'fs status' json output faa68920aab mgr/dashboard: fix context switcher and multi-cluster add cluster feature e61c0e05676 mgr/dashboard: add check if federate job is running else show reconnect message 5f31be9df25 mgr/dashboard: add ssl to prometheus federation d8cd10243d8 doc/releases: add Telemetry section 34f8306fe5c rgw/multisite: no need to capture error from callback. we are already doing that within RGWDataFullSyncSingleEntryCR() ed3312085b3 rgw/multisite: drain_all() after notify stack cancel 676479354d9 rg/multisite: if the first shard fails to sync, we must drain and return error. b01c0e9b50a test/scrub: only instruct clean PGs to scrub 447f8818bec mgr/cephadm: add command to list systemd units of dameons c939c95265c mgr/cephadm: add systemd unit to stored info about daemons 5f2604807a5 crimson/osd/ops_executer: cleanup snap_map_* b7cbd6a341c crimson/osd/osd_operations/snaptrim_event: only increase osd_osd_param_t::at_version after clone adjustments f4c82b10d8a crimson/osd/osd_operations/snaptrim_event: we do SnapMapper updates in ReplicatedBackend::submit_transaction(), drop all SnapMapper updates before that 8f969360069 qa: Add test for 'fs status' in standby-replay mds setup c00d2078651 Change code from non-PIC to PIC for ppc64 45871f73221 os/bluestore: perfect comments in hybrid_allocator fd93ecd88a5 mgr/cephadm: open ceph-exporter when firewalld is enabled 5f956e52d1b osd/scrub: remove the 'planned scrub' flag set 92b0f851261 osd/scrub: remove requested_scrub_t::need_auto ec3e4abeeb7 mgr/dashboard: service form hosts selection only show up to 10 entries c43853afd57 osd/scrub: set_op_parameters() no longer uses the 'requested' flags fcdae78c356 cephadm: bootstrap: verify orch module is running before setting cephadm backend 12a9aba43ca cephadm: add ability to continue on failure when applying multiple specs 6b34707f827 doc/man: edit ceph-bluestore-tool.rst baab1dc6463 rgw/notify: add copy ctor to token waiter 7171f73c81d doc/README.md: improve formatting 5b1f9aaf4ff mgr/cephadm: changing the nginx upstream image used by mgmt-gateway 4ccbc083e29 osd/scrub: remove requested_scrub_t::must_repair de29f25ef2a mgr/smb: stop trying to clean external store during cluster sync 162efeaeefd osd/scrub: complete on_mid_scrub_abort() refactoring 3cdde70d2aa crimson/osd: check_osdmap_features - add log 0d37bc91f4c crimson/osd/ops_executer: pass MutFunc by value ea89f46aace crimson/osd/ops_executer: avoid seastar::async comment 28f44131729 crimson/osd/osd_operations/snaptrim_event: make use of process_and_submit 38bd4e7c5c3 crimson/osd/osd_operations/snaptrim_event: introduce process_and_submit dbf7425c89e crimson/osd/ops_executer: flush_changes_n_do_ops_effects to use coroutines 24a278be8f9 crimson/osd/osd_operations/snaptrim_event: start to use coroutines 2a61d4f5811 crimson/osd/pg: make use of SnapMapper::update_snap_map dfda0c6f594 mgr/dashboard: datatable performance improvement def275e100a osd/scrub: fix scheduled_at for distinct urgencies fc925a0e4c6 osd/scrub: implement urgency_t::repairing 761873577ac osd/scrub: remove requested_scrub_t::must_deep_scrub 769790122d3 osd/scrub: remove requested_scrub_t::must_scrub 2e31563389f osd/scrub: base queue priority on the urgency of the scrub target 83b8ca54bb9 osd/scrub: remove remaining refs to the Scrubber's 'required' flag e2ffccdfc5d osd/scrub: mid-scrub-aborts logic should use the new urgency attributes 22bb6d9ed55 osd/scrub: remove flags_to_shallow_priority() 93d90ea358c doc/cephadm: add malformed-JSON removal instructions 062108efca9 tools/rbd_ggate: fix sign of errno 908dc7f14a8 qa/crontab: Add weekly crimson-rados suites d8e4be257a4 doc/releases: add Crimson/Seastore section 01306208eac src/include/uuid.h: fix for boost 1.86.0 e7139a8f438 ceph.spec.in: we need jsonnet for all distroes for make check 36a8e202a2b mgr/cephadm: stop running "true" before every command d620a51c306 doc/rados: add "pgs not deep scrubbed in time" info 6fd11c0276d librbd/migration/NBDStream: abstract out libnbd and add unit tests 3260b8fbea9 qa/suites/rbd: add snippets for migration import from NBD e1418e19757 librbd/migration/NBDStream: call nbd_shutdown() in close() 90b55cfdc25 librbd/migration/NBDStream: switch to NBD URIs d6d308003b2 librbd/migration/NBDStream: check for nbd_get_size() errors 1b12f4603e5 librbd/migration/NBDStream: introduce from_nbd_errno() d52bd80f1f9 librbd/migration/NBDStream: be more thorough around nbd_block_status() dc8eed68ce5 librbd/migration: add nbd stream 926f91c5d33 cephfs-top: fix exception on small sized windows af84f6d512a mgr/cephadm: adding spec fields for oauth2-proxy whitelist_domains c9c30bcdb07 tool/bluestore-tool: add zap_device command support 13a59272967 rbd/bench: Add ability to write a random string of bytes or a specific byte with --pattern-bytes option c266ef0f61f tools/ceph-bluestore-tool: fix "--yes-i-really-really-mean-it" option 0b277fe3809 doc/README.md: edit "Build Prerequisites" 3106f79f5b8 mon/NVMeofGw*: 1. fix blocklist bug - blockist was not called 2. originally monitor only bloklisted specific ana groups but since we allow the changing of ns ana grp on the fly for the sake of ns load balance, it is not good enough and we need to blocklist all the cluster contexts of the failing gateway Signed-off-by: Leonid Chernin <leonidc@il.ibm.com> a59f007695d cephfs-top: fix exception on large sized windows ef68253a87b qa: relocate subvol creation overrides and test e7bd4bcdd07 doc/dev: add "activate latest release" RTD step d0a83cb03ff doc/releases: move Op tracker to mgr f2350a8c7fa cls/rgw: warn about CLSRGWConcurrentIO use in asio threads 745f6f2c711 doc/releases: add more to RADOS section d011c522bb1 cls/rgw: duplicate reshard checks in all cls_rgw write operations 658098b4799 cls/rgw: remove unused cls_rgw_bi_get_vals() a86f97badcb rgw/rados: remove unused RGWRados::bi_get_vals() 6ec74a5dccc rgw/reshard: use cls_rgw_bi_put_entries() when replaying the reshard log e11480aa4c5 cls/rgw: add bulk cls_rgw_bi_put_entries() op for reshard 7ce0b5ebbda test/cls/rgw: simplify set_reshard_status() d78a2767bb0 test/cls/rgw: helpers take const strings fa7873e1917 cls/rgw: remove rgw_bucket_dir_entry_meta default ctor 5c05291b544 cls/rgw/client: expose cls_rgw_bucket_init_index2() 088f5abaff3 cls/rgw: rgw_cls_bi_entry::get_info() is const cce84124574 cls/rgw: remove rgw_cls_bi_entry default ctor 926ef939e7d cmake/ec: use ExternalProject to build isal library 3bfc1ae3d72 cmake/crypto: use ExternalProject to build isal crypto library 2e319cb30c8 rgw/notifications: free completion pointer using unique_ptr 12c7c6522ba mgr/dashboard: Increase maximum namespace count to 1024 d14d87b085e crimson/common/gated: Comment out ceph_assert for shard ID check 1071cc38868 crimson/net/io_handler: ctor add gate ctor with shard id 81f9d064f71 doc/rados: add link to messenger v2 info in mon-lookup-dns.rst 1fda7cb7e23 qa: test fetching foreign config item 529cdd34249 mgr/snap_schedule: correctly fetch mds_max_snaps_per_dir from mds 037537ed8c6 mon/NVMeofGw*: Fix issue when ana group of deleted GW was not serviced. Introduced GW Deleting state Signed-off-by: Leonid Chernin <leonidc@il.ibm.com> f78f7950dfa doc: Add Squid 19.2.0 release notes 20e2948a375 mgr/cephadm: make ssh keepalive settings configurable 461be1cd3d5 rgw/rados: guard against dir suggest during reshard 190623575e8 mgr/smb: add support for new ceph vfs module 5fc36f6463c ceph-volume: pass self.osd_id to create_id() call d7c7aa7328d osd/scrub: implement existing 'interval' as a distinct delay reason ec8f61ffa6b test/osd: fix 'recovery scrub' standalone test a84c3c45754 osd/scrub: add 'snap-trimming' as a distinct delay reason c0a52a59697 test/osd/scrub: set new scrub-related config options to test values 70691410032 osd/scrub: add configuration parameters to control length of delay a94a0ad634d mgr/dashboard: Rephrase dedicated pool helper in rbd create form 494ec06f301 osd/SnapMapper: introduce SnapMapper::update_snap_map 5929a1f5374 crimson/osd/osd_operations/snaptrim_event: encapsulate new snaps in the pglog entry 0697562bde4 crimson/osd: update snaps based on log entries on primary and replica 5963dba0a34 crimson/osd/pg: convert PG::handle_rep_op to coroutine f7504b29c72 crimson/osd/pg: convert PG::handle_rep_op to logging macros abc6a47fc92 crimson/osd/pg: skip unnecessary stopping check in PG::handle_rep_op 4811263eb81 crimson/osd/object_metadata_helper: take clone objects' clean regions into account when recovering them d6c51fe80f6 crimson/osd/ops_executer: set correct clean regions for CLONE pg log entry b2da7394ee0 qa/tests: fix test_list_enabled_modules timeout error e0d452f2c8f mgr/cephadm: bump grafana to 10.4.8 196a73cbd4c cls/rgw: add a helper function for calls to cls_cxx_map_remove_key() 2aa82539ede doc/rados/operations: Improve health-checks.rst 332804bad58 doc/mds: improve wording dfca044b646 mgr/dashboard: Fix variable capitalization in embedded rbd-details panel 710747031b7 ceph-volume: fix generic activation with raw osds 1e97d4f6447 crimson/os/seastore: update the capacity calculation for lba/backref internal/leaf nodes b3521e00093 crimson/os/seastore: validate the node capacity for lba/backref node c99f6be8091 crimson/os/seastore: backref_node_meta_le_t should use paddr_le_t as template parameter 37a6f1ca0aa crimson/os/seastore: add packed attribute to lba/backref map value 5ac01659cf8 client: fix d_reclen for readdir 0d81e721378 common/options: Change HDD OSD shard configuration defaults for mClock eda7eee9359 osd object store compaction on start wasn't working because of wrong boot sequence. More specifically compaction is called before authentication of monClient. Store compaction now is moved after authentication of monClient. da8e95c3923 qa/suites/nvmeof: wait for service "nvmeof.mypool.mygroup0" 4d97b1aa6b5 qa/suites/nvmeof: increase hosts in cluster setup f628b13f3bb crimson/osd: write require_osd_release only when needed 4594e38bf19 doc/rgw/d3n: pass cache dir volume to extra_container_args 2ed818ebd8d qa: move nvmeof shell scripts to qa/workunits/nvmeof f4906299929 rgw/notifications: update release notes with fix to principalId 7ca0d71eada mgr/dashboard: Wrong(half) uid is observed in dashboard 84a30ba6b94 doc: Correct link to Prometheus docs 6c25635be8c mgr/dashboard: carbon datatable minor bug fixes 1091a9d516e mgr/dashboard: carbonize cephfs forms 3d9ce6e1d86 crimson/os/seastore: cleanups to SeaStore::report_stats() 0dafee51788 crimson/os/seastore/cache: report cache access stats c8a7d3d9494 crimson/os/seastore/cache: minor fix in get_stats() 6bacf5e7616 crimson/os/seastore/cache: drop inaccurate cache_query_by_src 20adfb08aad crimson/os/seastore/cache: monitor cache access by extent and trans 339019377fb crimson/os/seastore/cache: add asserts c25fd3525e5 crimson/os/seastore/transaction_manager: minor cleanup befa65c8d20 crimson/os/seastore/cache: report cache index sizes 8e58a52a408 librbd/migration: don't include ImageState.h in formats d9192b5aca1 librbd/migration: prune snapshot extents in RawFormat::list_snaps() 5d64c9c5cda librbd: factor out prune_extents() from prune_parent_extents() 11de53f36cf mgr/cephadm: revert SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67844 f3a774c8df7 crimson/os/seastore/rbm: write merged-able ool extents at once cb28d391d0e python-common/ceph/deployment: revert SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67844 9bfcb8e17db doc: update tests-integration-testing-teuthology-workflow.rst 8e743fc6033 doc/radosgw: Improve config-ref.rst e0d8f7d363a false use-after-move on store bfbcb3c7f64 integer being interpreted as a character code when assigning to a string d7e68964d81 test/crimson: verify the backfill cancellation & resumption ae7469ae6b0 test/crimson: add event-type-checking next_round2() to BackfillFixture 9ba4cd8bc39 crimson/osd: wire up backfill resumption 8e5da475446 crimson/osd: BackfillMachine does support cancel and resume now 15df7efca5c qa/rgw/multisite: add optional --default arg to 'realm pull' 7bbaa316646 qa/rgw/multisite: fix spelling of is_default in realm configs e4157c8e98a qa/rgw/multisite: specify realm/zonegroup/zone args for 'account create' 789b5f352c5 options/rgw: raise default rgw_max_listing_results=5000 4b29809a163 options/rgw: use s3 names for listing operations 621e5ce0fc7 tests/rbd-mirror: fixes BootstrapReplayer test 7e02946a3f6 rbd: mention namespace in "rbd mirror pool" command descriptions 98618aaa1c8 doc/ceph-volume: add spillover fix procedure 0e7767a0052 cls/rbd: async methods for group snap list 4f1d97918e0 cephadm: configuring prometheus endpoint for smb 2c4096943ed cephadm: run smbmetrics as side-car container 3cc0605988f cephadm: propagate smbmetrics image via config_blobs bb6e68a7a9b cephadm: samba metrics-exporter image db130628c0c ptl-tool.py: replace regex strings with raw string literal 4f9289e11ae qa/tasks/ceph_manager: set-require-min-compat-client to squid for msr profiles e4f60eb438e mgr/dashboard: alerts module supports setting multiple email recipients 5e64748927d doc/rbd: add namespace information for mirror commands 508bba9b0d7 examples/rgw/boto3/README.md: update documentation for boto3 extension installation. Fixes: https://tracker.ceph.com/issues/67768 570adc62352 src/test/rgw/bucket_notification/README.rst: use systemctl, update rabbitmq installation process. Fixes: https://tracker.ceph.com/issues/67768 682cc90c4dd src/test/rgw/bucket_notification/README.rst: update RabbitMQ documentation. Fixes: https://tracker.ceph.com/issues/67768 1b006f47b8f mgr/dashboard: Fix banner and scroll issue ac998b58487 qa/task: update alertmanager endpoints version b8f3db5b404 mgr/nfs: add additional tests for cmount_path & user_id deletion 6b24da78abc qa: test 'ceph fs snapshot mirror ls' command e60d82ab7cf doc: update docs for 'fs snapshot mirror ls' command 1c07a39a94d cephfs_mirror: ceph fs snapshot mirror ls command 5d1ee140d05 mgr/dashboard: Update nvmeof microcopies dbebf1a3db6 qa/config/seastore: enable all subsystem debug cd7067adde3 crimson/osd/pg: fix missing priority argument 9a2c9157984 test/rgw/notifications: also verify bucket notifications are updated correctly 81fb5ae2432 forwarding reference passed to std::move() b863c93ef1a cephadm: emit warning if daemon's image is not to be used b377085c302 mgr/orchestrator: allow passing group to apply/add nvmeof commands e63d4b01e6b Revert "mgr/cephadm: migrate nvmeof specs without group field" 3e5e85aadc1 Revert "mgr/orchestrator: require "group" field for nvmeof specs" d02b94d8200 mgr/nfs: ensure user_id for create_export_from_dict a09fd4210b1 test/erasure-code: increase ceph_erasure_code_benchmark default buffer size 1e088468139 mailmap, githubmap, organisationmap: Add Shraddha Agrawal d944d320792 seastar: re-enable gate debug 9fc02b203d5 crimson: use gate per shard for AlienStore and OSD e5a9cda3267 qa/suites/nvmeof/basic: add nvmeof_scalability test 58d8be9fd83 qa: Expand nvmeof thrasher and add nvmeof_namespaces.yaml job c43542f7b9d crimson/osd: cancel ongoing pglog-based recoveries on recovery defering 277423c15a7 qa: add test for data uninlining 4e30d18a16b mds: handle mds_scrub_stats_review_period change via ScrubStack::handle_conf_change() 73c4541da3b mds: add manual and auto purging scrub stats feature 9459766868a mds: dump scrub stats during scrub status c7cd7f92e9f mds: collect and propagate individual scrub stats 10fbd2dbf4a mds: save path on uninline failure 23b0484bf52 mds: fail mds on journal failure b616159109a mds: refactor scrub and uninline accounting 56caef2ceb5 mds: collect and propagate scrub status to rank 0 eb1c04ee623 mds: move uninline failures to DamageTable 671ad4ff9aa mds: add DamageTable infra to hold uninline failures 15a4dbcc5b1 mds: add counters for uninlining 97429f0a7da mds: add inline data info to ino dump command 8970fef4ecc mds/scrub: move inline data to data pool object 5f064a52707 rbd: clarify "rbd {group,} rename" command description 76af1c0b1be mgr/dashboard: Zone details showing incorrect data for data pool values and compression info for Storage Classes 1d6b4d4a507 mon/OSDMonitor: check crush features in crush_rule_create_erasure cb157b45c71 osd: use CEPH_FEATUREMASK_CRUSH_MSR, not CEPH_FEATURE_CRUSH_MSR 2130115ec22 osd/OSDMap: require CRUSH_MSR if any rule is msr, even if used by no pool dc09d17eca9 qa/suites/orch: add test for smb with ctdb and cluster public ips 9997a648d98 doc: add documentation for (cluster_)public_addrs options e2649091777 mgr/smb: add cluster public ip information to service spec 5d5757e57aa mgr/smb: extend cluster resource type to define public ip addrs 961fa851742 mgr/cephadm: pass public addresses for a cluster to cephadm binary e2839803b26 python-common/deployment: add a cluster public ip spec for smb d46f01e9f9a test/multisite: create default realm in multisite config 782c88aa96c qa: ignore warnings variations af63b474254 doc: Update pendingreleasenotes for CephFS NFS exports d38858da360 doc: cmount_path documentation for CEPHFS nfs exports 07a1a2ffd1a crimson/osd/pg: clear backfill_state when the PG goes clean 027a7261f40 mgr/dashboard: improve prometheus service request handling 1abb4113ca1 mgr/nfs: adopt API & unit tests for nfs exports 9c70adf8080 mgr/nfs: add cmount_path 86627f8bd33 crimson/os/seastore: ensure the block size of device is always greater than laddr_t::UNIT_SIZE 2346cd912ee rbd-mirror: use correct ioctx for namespace bf694f2d89e crimson/osd/pg: add logs for repeating pulls 4b9def89f14 crimson/osd/recovery_backend: restart object pulling for recoveries that are blocked pulling from down osds 1df9dd97677 crimson/common/interruptible_future: new interruptor function `repeat_eagain` e6327c51745 cephadm: add support for cluster public ip addresses to smb daemon 8c845bd4ee8 mgr/smb: simplify orch backend enablement 574d3f8e735 doc/rgw/account: Handling notification topics when migrating an existing user into an account 0de916dc04a osd/scrub: modify deep scrub interval randomization 053e704cf43 test/rgw/notifications: integration test for migrating a topic to an account aa1ba5de6e7 test/rgw: include --rgw-realm/zonegroup/zone args for 'account create' c5a8afd56a8 test/rgw: test_multi.py creates realm with --default 902cc0a71e9 rgw: ignore zoneless default realm when not configured e946c4f5cfd radosgw-admin: add 'realm default rm' command 1fd58c769d6 test/rgw/notifications: non-functional change, remove trailing spaces 31d1a827764 test/rgw/notifications: non-functional change, addressing comment typo s/iempty/empty/ c9a6fedbfa9 qa/tasks/nvmeof.py: add nvmeof gw-group to deployment 272f72bd6ff crimson/osd/osd_operations/snaptrim_event: encode OI_ATTR without oid e397216e0cd crimson/osd: drop PGBackend::mutate_object() c6552eb9b73 crimson/osd/pg: Seperate mutate_object from submit_transaction 8d402e31f5e mon/NVMeofGw*: fixing bugs - handle gw fast-reboot, proper handle of gw delete scenarios 3c50ef6f5c0 mon/NVMeofGw*: support upgrades from prior out-of-tree nvmeofha implementation (nvmeof-reef) b9359a334f9 include/ceph_features: add NVMEOFHA feature bit 337269d337b include/ceph_features: remove stray available marker ee84f8970ab crimson: Add support for bench osd command d00d1b52d50 doc/cephadm: how to get exact size_spec from device dffbdf45ae3 test/osd/scrub: fix searched-for log string 78d0255949a osd/scrub: fix missing 'const' on some formatters 503ebee8f9d test/osd/scrub: disable tests for deleted scrub functionality 26cd41c503b test/osd: test new functionality added to the not-before queue 5ed435bffd4 osd/scrub: delay both targets on some failures 8aa48dc64ad osd/scrub: reverse OSDRestrictions flags polarity 51a593e7e2d osd/scrub: fix the conditions for auto-repair scrubs 0385fc4faf9 osd/scrub: remove requested_scrub_t::deep_scrub_on_error 709302478ed qa/standalone/scrub: disable scrub_extended_sleep test 48f2c21d4b4 osd/scrub: remove non-display usage of target's is_high_priority() 159cfd29cf1 osd/scrub: remove 'calculated_to_deep' flag 1f327081ef6 osd/scrub: modify after-repair-scrub triggering 90176a2ec8b osd/scrub: fix ReplicaReservations ctor to use correct query 8a57eb88cf3 osd/scrub: fix parameters validation on scrub start af17ae808fd osd/scrub: fix reserve_local() 3cde1421504 osd/scrub: fix initiation path of operator-commanded scrubs 75394147abd common/not_before_queue: extending the container's API 4ec5d31c7f5 osd/scrub: OSD's scrub queue now holds SchedEntry-s d70c243e7be common/not_before_queue: move status_t out of container_t a30f3969111 common/not_before_queue: some spelling fixes 63da6ea20fa common: add not_before_queue_t 673f36099ea osd/scrub: modify ScrubJob to hold two SchedTarget-s 0dc41857c77 nvmeof/NVMeofGwMonitorClient: use a separate mutex for beacons 4f309603caa qa: drop XMLSTARLET variable, use xmlstarlet directly ebb51fdce5e mon: enable nvmeof gw monitor 907e53aa852 rbd: "rbd bench" always writes the same byte d64e273de16 rgw: realm create only sets default realm on --default 0baf2e4f19b qa/tasks: add a new cephadm_from_container feature to cephadm task 451b70dedb9 rgw/multipart: use cls_version to avoid racing between part upload and multipart complete a0d604f8f37 rgw/sal: LCHead and LCEntry don't need abstraction 43057b88538 doc/glossary: add "object storage" a7090783cf8 rgw/beast: optimize for accept when meeting error in listenning 90503682082 crimson/os/seastore/onode_manager: adapt block aligned laddr_t a97269ffd73 crimson/os/seastore: adapt laddr_t/laddr_offset_t get_byte_distance 1c621b0a596 crimson/os/seastore: adapt laddr_offset_t::checked_to_laddr 73d66a62f6d crimson/os/seastore/ObjectDataHandler: handle block not alinged input b2d604e581d crimson/os/seastore: construct laddr_t explicitly 1469febff04 crimson/os/seastore: remove laddr_t alignment check f2fc9e75e56 crimson/os/seastore: make laddr_t block aligned 9f23d741fca crimson/os/seastore/onode_manager: use laddr_le_t in laddr_packed_t fb2358c0a31 crimson/os/seastore: turn laddr_t into a struct 2268923dd9f qa/rados/upgrade: ignore PG_DEGRADED daf4798086b qa: failfast mount for better performance 69484828552 crimson/os/seastore: set dirty root version to 1 during replay 7d58853d29a crimson/os/seastore/cache: report rewrite stats f74b8bb0f6a crimson/os/seastore: refine documents related to inplace rewrite 46ccac41c9a crimson/os/seastore/transaction: refine version_stat_t as rewrite_stats_t 0bd89aca384 crimson/os/seastore/onode_manager: remove hex format of laddr_t e174ece71d1 rgw: remove RGWRados::list_lc_progress() 4e5f269c01d qa/distros: reinstall nvme-cli on centos 9 nodes 190868a8f6f mds: move fscrypt_last_block to vector in mds_co mempool bf8f704e231 mds: move fscrypt_file inode_t metadata to mds_co mempool ed9481c1ac6 mds: move fscrypt_auth inode_t metadata to mds_co mempool 814245ce789 include/buffer: add helpers for uint8_t vectors 4a6800f1468 qa/workunits/rbd: exercise snap_{name,id} parsing in test_import_native_format() 175ca1e0f09 doc/rbd: clarify when image_id is expected for import-only migration 293d523ea69 librbd/migration: add external clusters support b5536d8b8d4 mgr/dashboard: Add Performance Details grafana charts for individual clusters in Manage-clusters page 1bd56a73126 rgw/sts: fix for wrong certificate getting picked during validation of a web token signature. 16d00041f6c rgw: changes to vstart.sh file - adding oidc-provider caps to user to run oidc provider iam tests in teuthology. 55d17c042bb rgw/doc: adds documentation for UpdateOpenIDConnectProviderThumbprint. fae194c0962 rgw/doc: adds documentation for AddClientIDToOpenIDConnectProvider. 37170a0d470 rgw/iam: adds implementation for iam UpdateOidcProviderThumbprint. 70e187a8c2a rgw/iam: adds implementation for iam AddClientIdToOIDCProvider. a610c147a8f doc/releases: Correct mimic.rst 344202582af crimson/os/cache: simplify lru stats data structures c068b63a044 crimson/os/cache: report dirty usage/in/out by trans and extent type e31058a295e crimson/os/seastore/cache: monitor dirty cache by extent and trans f7e4f0daa25 crimson/os/seastore/cache: extents added to dirty must be fully loaded b990397c6cf crimson/os/seastore/cache: cleanup dirty add/remove with consistent asserts fd662e5957e rgw: decrement qlen/qactive perf counters on error 2b6e1dd90b7 osd/scrub: introducing the concept of a SchedEntry 9296c2a36f4 qa: load all dirfrags before testing altname recovery 43be486375f mgr/dashboard: can't scroll to the end of the page f011cc22627 qa: Add ignorelist entries for reef-x tests 383091e89fb .gitmodules: remove shallow=true config from nvmeof/gateway 8cc3a35c2dc cephadm: mount nvmeof certs into container 1c895979579 doc: add clustering related items to smb docs daf405ea5ba qa/suites/orch: add a pair of teuthology tests for ctdb smb clusters 84d5d8b356d qa/suites/orch: old smb tests need placement count 1 to avoid using clustering 19e854cf367 mgr/cephadm: enable the smb service to prevent stray ctdb services 33e1b119569 mgr/cephadm: extend stray service detection with a general ignore hook d84c7b36cf0 mgr/cephadm: move logic determining name in stray func a64e1d57ec1 mgr/smb: enable clustering when setting up a cluster 4ef7a48e559 mgr/smb: add a cluster resource field to manage clustering 7272e5b6188 mgr/cephadm: configure ctdb cluster metadata from cephadm smb service cd2d01e9f51 mgr/smb: add a python module to help manage the ctdb cluster 6c36f61b227 mgr/smb: add function to parse rados psuedo-uri values efe6b3989b1 mgr/smb: add support for rados locks to rados store fd0812f9e56 mgr/cephadm: improve key management of smb service 3e4926a5b86 python-common: add clustering related params to SMBSpec ef3b1252101 cephadm: add ctdb support to smb daemon type 9c06ff345d5 cephadm: allow longer subcomponent names f6cab59a8f7 cephadm: add a new context getter for rank d20824272ba mgr/cephadm: change SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67629 d18e6fb96ee python-common/ceph/deployment: change SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67629 f01d7a8d5b8 doc/rados: document unfound object cache-tiering scenario 4722fe742c6 warn when QAT switches to software [de]compression dd7e8bbde6d doc/mgr/restful: update max_request config 7b251cad2c2 PendingReleaseNotes: Adding note about rest module change and adding max_request option 58281c19171 mgr/rest: Trim request array and limit size c90cf8460e0 mgr/dashboard: Add group field in nvmeof service form db9825d3142 qa: make all replayer threads busy and query 'syncing' status bd78bdca3d7 cephfs_mirror: Fixes 'Bad file descriptor' showing during test_cephfs_mirror_cancel_mirroring_and_readd execution 66620ccb32b crimson/osd/pg: add PGLogEntryHandler::remove() 32c9183b1f8 crimson/osd/pg: add PG::remove_object_maybe_snapmapped() 9f27bde0b99 qa/cephfs: add test to verify backtrace update failure on deleted data pool d1d3a8c7c80 mds: batch backtrace updates by pool-id when expiring a log segment e5728c40b37 mds: dump log segment in segment expiry callback 5639fa298dc mds: dump log segment end along with offset f956fbcf960 crimson/common/tri_mutex: also wake up waiters when demoting 82bc7eb02ba rgw/multisite: initialize sync_status in RGWDataFullSyncSingleEntryCR ctor 064b524815c test/rgw/notifications: don't check for full queue if topics expired 04330f5df92 mgr/cephadm: add "original_weight" parameter to OSD class 75ff2b8b552 rgw: d3n: set access permissions for the D3N cache directory when creating it bbcb820c779 qa: barbican: restrict python packages with upper-constraints bed40e67482 crimson/osd/osd_operations/client_requests: add the actual unfound oid into PGRecovery::unfound, instead of heads c37ad2b4373 client: calls to _ll_fh_exists() should hold client_lock da6f3c4523d Revert "crimson/os/seastore: wait ool writes in DeviceSubmission phase" 79866621574 librbd/migration: move away from util::create_ioctx() in NativeFormat 57a8c535cca common/config: export CEPH_CONF_FILE_DEFAULT df2189acc5d librbd: RefreshParentRequest::m_parent_snap_id is unused 23cd20e0d55 librbd: assert on parent in ImageCtx destructor 409d36c7087 qa/tasks/qemu: remove hard-coding of cluster name 4f8dc834cc6 qa/tasks/rbd: support non-default ceph clusters 1ee644d9710 librbd/migration: don't clone when flattening fda2db5ac7b doc: Harmonize 'mountpoint' f2fdffa6863 crimson/osd/replicated_backend: mark all pglog entries as unrollbackable when submitting transactions a0f81cfb509 doc/cephfs: s/mountpoint/mount point/ 57ed73eaa69 doc/cephfs: s/mountpoint/mount point/ cdd75b499f7 test/rgw/notification: use real ip address instead of localhost 8a71aea942d rgw: load copy source bucket attrs in putobj c307a91f258 rgw/auth: Remove Keystone v2.0 API support 0761463250a rgw/sts: correcting the error message returned for an sts key to indicate that the key needs to be alphanumeric. b5bfc4526a2 client: flush the caps release in filesystem sync dee230c26d4 rgw/notify: process_queue() constructs wait tokens when spawning 0e000937710 rgw/http: finish_request() after logging errors db433a62e6b crimson/osd/backfill_state: support backfilling cancellation 0c1ec1a1fac crimson/osd/pg_recovery: reset backfill_state when backfill finished 24336088078 crimson/os/seastore/cache: report lru usage/in/out with trans and extent type b9c2fb78149 crimson/os/seastore: cleanup periodical reporting 800b3528bba crimson/os/seastore/cache/lru: renames 2dddd07193c crimson/os/seastore/cache: refine lru logics bd6e6f00306 crimson/os/seastore: move counter_by_extent_t definition 280dd13df01 crimson/os/seastore/seastore_types: unify checks to the extent types b480ac99551 crimson/osd/osd: update heartbeat peers after committing osdmaps 71d38e415e8 crimson/osd/osd: mark down connections of the new down osds 9a45a0bb635 crimson/net/Messenger: add the "mark_down" interface 1ca89e6ca3d doc/glossary: add "flapping OSD" 8f226fdc770 mgr/dashboard: carbon datatables impr and cleanups ed0caa4ad13 CMakeLists: set FMT_INSTALL OFF 5c3dddf5e71 mds: add compile time checks for sortedness 6e257b5618d mds: sort conf keys d12ba11741d doc/rgw/notification: persistent notification queue full behavior 677affcbf54 mgr/cephadm: adding oauth2-proxy cephadm service 24d98f4842b rgw/notifications: fixing radosgw-admin notification json a6b95a5a69f qa/cephfs: update a test in test_volumes.py d6c51a72211 ceph.spec.in: spec files comments 21fe5264f70 osd: use an hex-only format for snap_id when creating snapmapper entries 4e3146c61ff test/common/test_hobject: fmt fixes 63594b2824e crimson: fmt 11 fixes 755767fe956 seastar: cherry-pick fmt 11 fixes bafdf390313 osd/scrub: missing 'const' in scrubber_common.h formatter 0e8da230413 osd: fix scrub_backend formatters 3db48acaa49 osd,common: add explicit formatter for shard_id_t 7f77d50baa4 common,include,msg: fmt 11 fixes e5af3c65efd fmt: bump up version to 11.0.2 645cc6e6a83 doc/cephfs: add release notes and docs for clone progress report e0c85b86ae4 qa/cephfs: add tests for clone progress 92aecabdb21 qa/cephfs: return size of data generated in _do_subvolume_io() db0e736d4a2 qa/cephfs: use safe_while in test_volumes.py 9f60848df49 qa/cephfs: add method to run and get shell cmd stdout 10949bf68d2 qa/cephfs: improvements for helper methods for clone state 65b789edfb5 mgr/vol: show clone progress in "ceph status" output d7bc8282c86 mgr/vol: show progress in "fs clone status" output 96ca322c62e crimson/os/seastore/cache: pass missing src to touch_extent() aa86e49c841 crimson/os/seastore/cache: cleanup add_extent() 0d924258b36 crimson/os/seastore/cache: cleanup remove_from_dirty() dba31242e73 crimson/os/seastore: drop duplicated calls to touch_extent() af75b2fc3ae crimson/os/seastore/cached_extent: rename primary_ref_list 9a46c52387f qa: do the set/get attribute on the remote filesystem 57cf4d424d1 mgr/dashboard: fix multi-cluster usage bar error after carbon changes 2d5715c00f0 crimson/os/seastore/btree: fix minor corner case issue 729fd8e25ff ceph-volume: add "packaging" to install_requires e225b127eaf qa/suites/upgrade: ignore MON_DOWN and PG_AVAILABILITY warnings in upgrade tests 42721c03ee6 mgr/orchestrator: fix encrypted flag handling in orch daemon add osd 9ea03123a16 rbd: fix CLI output of `rbd group snap info` command f38429b857d qa/s3tests: configure tenant name for 's3 tenant' section cd03946a931 mgr/dashboard: replace ngx-datatable by carbon a66b9df483e test/store_test: fix assertions due to unclosed collection refs. 41c5dbe9420 qa/cephadm: add group param when applying nvmeof 2a6b105b8ae mgr/cephadm: make nvme-gw adds be able to handle multiple services/groups d7b00eab08b mgr/cephadm: migrate nvmeof specs without group field f6d552d7c77 mgr/orchestrator: require "group" field for nvmeof specs ce28c8ecefb mgr/cephadm: add ability for cephadm to create self-signed cert for RGW be725040bdf ceph-volume: switch over to new disk sorting behavior by default 2e80471cf7c mgr/cephadm: bump DEFAULT_NVMEOF_IMAGE to 1.2.17 de4b649fc31 osd/config: fix non zero return code when needed during early config 157c7083254 mgr/dashboard: replace individual cluster's capacity info with Usage bar in Multi-Cluster 8074a0abe54 common/version: ceph-osd --version to specify crimson a6f311a5f3b doc/radosgw: improve qat-accel.rst 3f48bcdb617 mds: encode quiesce payload on demand 7f2324fb5f2 python-common/service_spec: fix zonegroup_hostnames type 2c9e7f5a48b mds: print quiesce message name in debug log 53df1639020 mds: fix spelling typo 240a328ae86 rgw: increase log level for enoent caused by clients 1de14a5e30c client: use vectors for context lists aa3bdae2314 doc/cephfs: improve cache-configuration.rst d7377dac503 rgw: revert account-related changes to get_iam_policy_from_attr() 0949b410433 doc/cephfs: improve "layout fields" text 2e0e469195f mon/thrasher: set stopping 0c423e1d81a test: test_rados_tools compare output without trimming newline d58f32726be uadk: add unit tests e93c7e09fab uadk: move numactl dependency 2b78a5b3147 client: Prevent race condition when printing Inode in ll_sync_inode 317465c07b3 uadk: add uadk support 180378b5ade doc:update e-mail addresses governance fec896b301f ceph-volume: refactor device path handling for LVM lookups 88836135fd0 ceph-volume: add TPM2 token enrollment support for encrypted OSDs ce10e5e424d doc: mention the peer status failed when snapshot created on the remote filesystem. db65867f776 qa: add test_cephfs_mirror_remote_snap_corrupt_fails_synced_snapshot 8055255c73f cephfs_mirror: update peer status for invalid metadata in remote snapshot f446f4c1d46 blk/kerneldevice: add perfcounter for block async discard d51e251be1e src/mon/PGMap: raise POOL_APP_NOT_ENABLED after some time for new pool 857a63f2080 rgw/rados: zero-init shard_count in RGWBucket::check_index_unlinked() 24f34caf9e7 compressor: switch out of get_current_ptr() for the sake of const-stricter bufferlist e8126bf2f64 qa: cover a custom object size in krbd_discard_granularity.t 144270eb737 qa: adjust expected io_opt in krbd_discard_granularity.t d8ce3dae808 mgr/dashboard: fix ceph-users api doc dd10b32b61e crimson/osd/pg: fix wrong lambda capture of transactions in `PG::submit_error_log()` 5fb45e5fb83 mgr/nfs: scrape nfs monitoring endpoint bf26274ae47 doc/cephfs: add cache pressure information 4de57e904cf PGMap: remove pool max_avail scale factor f6cf38cd630 doc: doc/dev/osd_internals/erasure_coding/enhancements.rst 90835d66b0c os/bluestore: passing device type name parameter to kernel device f90af12de37 crimson/osd/osd_operations/client_request: check already complete in the "check_already_complete_get_obc" phase a7e8779be73 doc/README.md - add "tip" alert styling 65734ae92b6 crimson/.../alien_store: clear coll_map in umount rather than stop a2f85f0588a crimson/osd/osd.cc: convert fmt::print to INFO in OSD::mkfs dc6825e81ad crimson/osd/osd.cc: convert OSD::mkfs to a coroutine aa1d8cf4fa3 docs/rados/operations/stretch-mode: warn device class is not supported ebf66af8278 qa: wait for file creation before changing mode cd50b3fec18 mgr/dashboard: fix typo in Multi-Cluster > Manager Cluster to Manage Clusters 943e9024f60 crimson/osd/osd_operations/client_request: merge recover_missing, recover_missing_lock_obc and recover_missing_snaps into a single OrderedConcurrentPhase 1b2e4d9ab06 crimson/osd/osd_operations: make the "recover_missing" phase concurrent 59857a78fa4 os/bluestore: Write_v2 changes 1b24c7cb53f os/bluestore: Write_v2 changes 7b0d27e12ef tests/bluestore_types: Fixed data generation bluestore_blob_t::release_extents 8bd233bef5a qa/bluestore: Add write_v1/v2 selection 7de8a6c42b9 os/bluestore: Add conf.bluestore_write_v2_random 3b5b7fa4fce os/bluestore: Add compression fallback 5326fed8328 os/bluestore: Writer, fix find_mutable_blob 938a0f183ce os/bluestore: Writer, improved calculation of need_size d2fda6c852d os/bluestore: Writer, fix for clang 255ad42da48 crimson/alienstore: New write path & debug c989d743a64 os/bluestore: Add Writer::_crop_allocs_to_io 1c5fd0fc47a os/bluestore: Fix after rebase 96065b1f59f os/bluestore: Review fixes to Writer 22fa03e93cb os/bluestore: Add perf counters to Writer 9e847a917f4 os/bluestore: Writer, fix _try_reuse_allocated_l/r 83d6a4e8dd5 os/bluestore: Cleanup on bluestore_blob_t::release_extents d19b998dd71 os/bluestore: Writer, rename _deferred_decision -> _defer_or_allocate bf824f790b1 os/bluestore: Review fixes of Writer 55004549f8e os/bluestore: Fix _try_reuse_allocated_r in Writer.cc 3f4bb3ff9d5 os/bluestore: Modify _write_expand_l/r df43f472268 os/bluestore: Add bluestore_write_v2 conf variable f0c82b37201 os/bluestore: Added new write path with BlueStore 03bac5d64ce os/bluestore: Add "write_lat" perf counter ad11abee6d4 os/bluestore: Add unit test for BlueStore::Writer 193c8fb1537 os/bluestore: Introducing BlueStore::Writer 21454afa688 os/bluestore: Functions to manipulate Blob ca0d589b0cd os/bluestore: Add csum_type to WriteContext 42cb03425bb tests/bluestore_types: Fix % 0 in tests 00b98788028 os/bluestore: Unit tests for punch_hole_2 93bb26360a6 os/bluestore: Refactor of write path. New punch_hole_2 function. 1f6fc570abb os/bluestore: Add ExtentMap::split_at and ExtentMap::maybe_split_at 8e62d0c89a6 os/bluestore: Add bluestore_blob_use_tracker_t::put_simple 5ef9d11cb5b include/intarith: add p2remain e51ec4bdb14 os/bluestore: New variant of bluestore_blob_t::release_extents f400cb19a3a os/bluestore: Fix debug after rebase c4fa859535b os/bluestore: Add ability to partially print Onode 55c6182cd45 os/bluestore: Move OBJECT_MAX_SIZE 93a8ab11fb7 os/bluestore: Blob, Onode debug printout c435cd260a7 os/bluestore: small improvement for printers 66e3aa7369a os/bluestore: Add improved printer for Onode d47103376c0 os/bluestore: Add printing buffers to Blob 03dbd42c564 os/bluestore: Add improved printer for Extent 89c211281b0 os/bluestore: Add improved printer for Blob 0000c344740 librbd/migration: make ImageDispatch handle encryption for non-native formats b20a897061f librbd: don't make an extra copy of image_extents in C_ImageReadRequest ctor 82d26909cb1 qa/workunits/rbd: perform cleanup in test_clone_encryption() 830cbee7a5f qa/workunits/rbd: no need to chmod in luks-encryption.sh 100d1b63bd5 rgw/beast: spawn a cancellable coroutine for the accept loop b6f8f83470f qa: enable the git clone debug logs 1d25782903e qa: increase the http.maxRequestBuffer to 100MB ae3faac004e qa/cephfs: fix TestRenameCommand and unmount the clinet before failing fs 42358c6b1af doc/cephadm/smb: Add missing user_sources option to service spec 19dbe686dcf crimson/os/seastore: report outstanding requests per phase c9e423facea crimson/os/seastore: wait ool writes in DeviceSubmission phase 140e77638dc doc: documenting the feature that scrub clear the entries from damage table on repair c105a45c900 doc/README.md - allocate information correctly 103d65ea678 doc/dev/peering: Change acting set num 9b8d72f15a9 RGW - Zipper: pull in upstream fix for zpp_bits 5c5e6724c63 script/: add cpu-map.sh to aid manual selection of CPU cores for threads for profiling 9f355b681b3 mgr/vol: improvements and cleanup for "list_volumes()" 8c536f78907 mgr/vol: move reusable parts from async_cloner a035b5a22fb thrashers: standardize stop and join method names 21b4b89e528 qa/tasks: watchdog terminate thrasher bc45e9a77cf cls/rbd: add functions to get group snap orders c2ca0561bcb crimson/os/seastore/transaction: cleanup, drop unused getters a6cac66baa7 crimson/os/seastore/transaction: rename ool_block_lists 1c9112091ce crimson/os/seastore/epm: RandomBlockOolWriter to update extents upon submitting writes 382357dcd4f qa: simplify postmerge construction 126184fcc98 qa/crontab: force priority for main rados nightlies fe4f03dfcc5 rgw/notify: visit() returns copy of owner string 6c7253be6f6 qa/mgr/dashboard: fix test race condition 7f723017454 cephfs: Fixed a bug that read operation hung in Client::get_caps when the Fc caps is wanted but revoked by the mds, and the Fc cap refs is no-zero 56feeb4373e os/bluestore: BluestoreRepairTest ch cleanup bdcc7dab995 blk/kernel: Fix uninitialized discard_stop 3662bc7b3dc cls/rbd: save max group snap order a71990f70f5 tools/rados: Fix extra NL in getxattr ec6224db3e5 cls/rbd: save group snapshot creation order in a new key 1f21057e416 doc/README.md - add ordered list e26545f86f9 PeeringState.cc: Only populate want_acting when num_osds < bucket_max d595505eea3 librbd: Reduce use of atomics in librbd throttling 03c839e14fa test/cls_2pc_queue: prevent list+remove race between consumers 8c6cedea0af crimson/os/seastore/cache: introduce maybe_add_to_read_set() 6933f4c9980 crimson/os/seastore/cache: verify pending extents in get_extent_viewable_by_trans() a5329cbbaa2 crimson/os/seastore: consider segment_header_t::modify_time as the segments' modify_time for no-tail OOL segments 48ff8f0e73b crimson/os/seastore/epm: SegmentedOolWriter to update ool paddr upon submitting writes bcbc069ae03 crimson/os/seastore/record_submitter: return record-base immediately upon submit 8c494150bb0 crimson/os/seastore/record_submitter: cleanup around write_base ab608c0fa24 crimson/os/seastore/record_submitter: minor cleanups 73a7ecfe265 crimson/os/seastore/record_submitter: refactor to make write base available 6c4e50a8bf0 crimson/os/seastore/record_submitter: refactor JournalAllocator::write() dc366fafec0 crimson/osd: send empty transactions to backfill targets that haven't backfilled the objects yet 484e9d2b9d8 doc/glossary: add "ceph-ansible" 8164efe5d09 qa/cephadm: use cephadm ceph-volume directly to zap devs 4fa39268921 cephadm: limit mounts for shell and ceph-volume commands 4424f55c760 rgw/rados: RGWRados::Object::Read::read() uses rgw_rados_operate() 4475fcbbe69 rgw/rados: delete_objs_inline() uses rgw_rados_operate() 19399def5bd mgr/cephadm: add SPDK log level to nvmeof configuration Fixes https://tracker.ceph.com/issues/67258 d3cc2377f4f python-common/ceph/deployment: add SPDK log level to nvmeof configuration Fixes https://tracker.ceph.com/issues/67258 a24f3cf1e90 src/osd: pg stat are not synced between osds after deep-scrub. So if primary osd is killed, next primary osd has wrong stats. Reason behind it is PeeringState::proc_primary_info does not process or update any pg stats. 214328d9daa common/Formatter: dump inf/nan as null c052e12f35a os/bluestore: remove unused functions d95e8511eb6 mgr/cephadm: fixing Grafana domain handling c30cdbd14dd qa/cephfs: update ignorelist f4b3943fb2e mgr/dashboard: Dashboard not showing Object/Overview correctly. a81d36caadf crimson/os/seastore/cache: adjust get_extent_viewable_by_trans() 2bb39c50f3a crimson/os/seastore/cached_extent: cleanups and comments 3d056148d5d crimson/os/seastore/cache: add comments about the correct usage 563950f8b0d crimson/os/seastore: fix names get_extents_if_live c69f860ffee mgr/dashboard: make multi-cluster context switcher scrollable if we have many entries in it 9607b66e97f doc/cephfs: edit "Layout Fields" text d5e013f5928 mon/NVMeofGwSerialize.h: tabbing, bracing, line length fixes e0f0469f14e mon/NVMeofGwTypes.h: tabbing, bracing, line length fixes bff9dd47068 mon/NVMeofGwMon.cc: tabbing, line length, formatting 1f470f0388b mon/NVMeofGwMon.h: tabbing, line length, formatting 58d16c73845 mon/NVMeofGwMap.h: tabbing, line length, formatting 8bf309ecd7b mon/NVMeofGwMap.cc: tabbing, line length, formatting 5890a156524 doc: Improve doc/radosgw/placement.rst 89a547822d6 submodule: remove the boost_redis submodule again (again) 9dc630b00db mgr/cephadm: add SSL support to ceph-exporter 862a38e3386 mgr/cephadm: adding mTLS support 039bd045563 rgwlc: fix typo in getlc (ObjectSizeGreaterThan) beb4d2286ac osd: fix partial reading during multi-region EC reads 30921272dde workunit/dencoder: fix corpus test for backword and forward compability 02496a86650 corpus: update forward incompat for cls_rgw_reshard_* ceph-object-corpus submodule Fixes: https://tracker.ceph.com/issues/67263 Signed-off-by: NitzanMordhai <nmordech@redhat.com> 6911df2c834 nvmeof gw monitor: disable by default d0c4182bf57 qa/suites/rbd/nvmeof: add multi-subsystem setup and thrash test 2946b195edf mgr/cephadm: ceph nvmeof monitor support bb75ddee819 mon: add NVMe-oF gateway monitor and HA doc 5843c6b04ba mon: add NVMe-oF gateway monitor and HA 80edcd40e80 debian pkg: record python3-packaging dependency for ceph-volume cb421a46636 RGW|BN: fix lifecycle test and http server issue 0596664c402 mgr/cephadm: introducing new cmd to generate self-signed certs 25a4f2adada mgr/cephadm: introducing cert_mgr new class to centralize certs mgmt 7e08760a0e5 mds: add the event when creating the batch head 5d8aa5245cb mds: print the path depth to help debug mds issue 1a76464999c doc/glossary: add "Prometheus" 6e7bc284e63 bluestore: record omapiter init latency if one object has many `internal keys` at its omap beginning, it maybe very slow for the underlying seek to reach the first `user key` when initializing a omapiter. this may stuck osd when build_push_op, seek recovering object's first omap key again and again. 62562ec65e3 doc/rados/operations: remove vanity cluster name reference from crush-map.rst b6c7f69b804 librbd/migration: make FormatInterface::read() void again 63159d6b431 librbd/migration: close source image in OpenSourceImageRequest cacf7ca9418 librbd/migration: don't instantiate NativeFormat, handle it via dispatch 3bbf1f5ddba librbd/migration/NativeFormat: refactor source spec parsing 1ba9a32598f librbd/migration/NativeFormat: do pool lookup instead of creating io_ctx f172fb97be9 librbd/migration: make SourceSpecBuilder::parse_source_spec() static c14356b1f9e librbd/migration/OpenSourceImageRequest: rename io_ctx -> dst_io_ctx e99fc5c82fd doc/cephadm: edit "Using Custom Images" b81d6af1b48 doc/dev: improve basic-workflow.rst 2e2adb2719c client: Fix leading / issue with mds_check_access 983f893fb93 qa: Add mds caps test for testing fs read and a path rw 789df2ce38f librbd/migration: massage some error messages b92ad49a355 librbd/api: clean up leftovers in Migration::prepare_import() 872adf5ac5e qa/standalone/scrub: fix the searched-for text for snaps decode errors 4f321056dec RGW - Add Multipart and Versioned to POSIXDriver 091625e6fee doc: update 'sync_bytes' in peer status 3fd00ebc578 doc: update current_syncing_snap in peer status 7c32d159965 doc: document labelled perf metrics for mds/cephfs-mirror 6efe049dfc9 mgr/dashboard: carbonize block forms 5535e72364f qa: check last successful snapshot sync metrics in perf counters fb985c4830a cephfs_mirror: provide metrics for last successful snapshot sync cc721a55bd3 cephfs_mirror: show 'sync_bytes' in peer status 2c8802a3dd5 qa: some test set `refuse_client_session`, so the cluster log is expected ccb292c818b osdmon: Remove any pg_upmap_primary mapping during remove a pool d1c049d24be doc/glossary: add "ceph-fuse" entry 66fb04fa55f mgr/dashboard: carbonize breadcrums 7d55db51b44 mgr/dashboard: carbonize general components and styles d14119e37e0 doc/cephfs: edit "Dynamic Subtree Partitioning" 5925880d178 tools/ceph_objecstore_tool: cleanup collection handle on exit cbdecc1f34d crimson/osd: clear ondisk temp objects on startup 1251345231f crimson/common/tri_mutex: avoid hobject_t formatting 12f98a23598 crimson/os/seastore/circular_journal_space: cleanup, write_ertr vs submit_ertr ff17a966aed crimson/os/seastore/epm: add checks in ool writes about the writer type a5cea810cce crimson/os/seastore/epm: fix an incorrect type 724f52cc15e crimson/os/seastore/block: fix log 74b03a8cb2f doc/cephfs: fix "OSD capabilities" link c5a6226f06c script/backport-create-issue: handle ResourceAttrError when getting CF_TAGS f5a581b9806 mgr/dashboard: support rgw user level NFS export 8452eb88904 test/store_test: Make ceph_test_objectstore run faster f8becaaedb2 test: add a test for `fs set down` on online cluster 6bfce64f7e9 mon: fix `fs set down` to adjust max_mds only when cluster is not down e2fb2c63ea2 reshard: limiting the number of log to be recorded 98723d51b96 doc/radosgw/qat-accel: Update and Add QATlib information 1f82dc8b8f1 mgr/dashboard: Add initiators add/update in dashboard b827fe706a3 crimson/os/seastore/lba_manager: correct the range end of lba mappings 039377fa290 mgr/dashboard: Changes for Sign out text 6bb5ce94c6a doc/cephfs: fix "file layouts" link 50390af720b mon/scrub: print detail if get error from store cec5e83d8ee test/rgw: add test for logrecord reshard 72997836c2f reshard: guarantee no duplicated index entries exist before starting reshard ab3d3aca8a0 rgw/posix: name the lock_guard in BucketCacheEntry::reclaim() 6bfa726fafe mds: only authpin on wrlock when not a locallock 2872c75f184 rgw/async/notifications: use common async waiter in pubsub push 2e83b77c9f6 doc/rbd/rbd-exclusive-locks: mention incompatibility with advisory locks fcae1041c58 cephadm: do not hard code samba debuglevel 6 64f6b5d1d7e os/bluestore: Fix unbalanced new[]/delete[] in read_bdev_label functions 1ec999cd473 mds: remove the misleading and redundant logs 3f62db0393b qa/crontab: update frequency and priority for rados nightlies f03d0cec0fc common/async: spawn_throttle wraps call to asio::spawn() 21a25f41240 doc/releases: add release note about thread creation incompatibility 7e5d28f4423 common/async: add parallel_for_each() algorithm 3c62daf69e9 common/async: add co_spawn_group template for fork-join parallelism d192ca79862 common/async: implement max_concurrent_for_each() for awaitable 9217fcc5558 common/async: add co_throttle for bounded concurrency with c++20 coroutines 057c2a2a8a1 script/backport-create-issue: add debug messages for retry ba7b6ec2157 mgr/dashboard: use grafana server instead of grafana-server in grafana 10.4.0 d8e1567cec0 crimson/osd/recovery_backend: set interruption to recovery related promises, instead of system_error 80be0ae0aae crimson/osd/osd_operations/client_request: hang client requests when the object is missing in the whole cluster 4ddae3a7928 librbd: Modify locks and atomics in AioCompletion to improve performance 2a9f92f2347 qa/suites/krbd: override extra_system_packages directly on install task 8fee41da8b8 qa/suites/krbd: stress test for recovering from watch errors for -o exclusive d3dd910f13e cls/rbd: make group_snap_list return error if it failed 2e8c0c23e37 script/backport-create-issue: retry without if assignee is invalid 6dfb20b2c3c mgr/zabbix: fix invalid escape sequence 6b91f8ecede mgr/rook: fix ivalid escape sequence 1458405b898 mgr/osd_perf_query: fix ivalid escape sequence e12e92c50fd crimson/osd: execute PGListener async operations in order 8389471b3a9 crimson/.../alien_store: access coll_map under coll_map_lock 924384f5da8 crimson/.../alien_store: clear coll_map on stop() e2b75b56010 crimson/.../alien_store: update coll_map from alien tp 618bef54243 crimson/.../alien_store: factor out get_alien_coll_ref 443040bc66f crimson/.../alien_store: add comment explaining coll_map 4d707415ab9 qa: suppress __trans_list_add valgrind warning ee52b19adc5 crimson/.../shard_services: add logging to local and remote reservers 2b3a1783843 crimson/.../pg: add logging to most PeeringState::Listener implementations cdef41d9081 qa: generate valgrind suppressions 627c466915a test/allocsim: replayer merge files by timestmap 8476a02bed8 cls/rgw: define lc ops in terms of ObjectOperation instead of IoCtx 3f11eb905f9 rgw/sal: add dpp and optional_yield to lifecycle ops 32f58e70d4c cls/rgw: gc_list uses ObjectOperation instead of IoCtx 00063a964ad kv/RocksDBStore: add kv_stats function to print all CF info 01a9cfba444 shrink the object-size used for orphan-list test by a factor of 100 from 5100MB -> 51MB 6f9f52033b0 test/cls_2pc_queue: fix multi-threaded access to non-atomic variables 6be7a9cc77a blk/aio: fix compile issue when HAVE_LIBURING isn't defined 4a4f9a3e994 qa/rados/dashboard: Add PG_DEGRADED to ignorelist e5ccce14c4b rbd: add group snap info command da784bc14ef Fixes: https://tracker.ceph.com/issues/67070 56504d2ad92 kv/rocksdb: return error for dump_objectstore_kv_stats asok command if relevant config settings result in no output. 02d5a6a3371 doc/dev_guide: add needs-upgrade-testing label info 92fea64c1f2 doc/dev/crimson: clarify and rearrange for userability 8ee137f662b qa/suites/rados: Reduced BlueStore log levels 811f2979f53 os/bluestore: Modify read_meta() 721482adc0d os/bluestore: fix fsck fixing multiple bdev label (superblock) 4adb942a648 os/bluestore: Review fixes 3c2574c3aa1 test/store_test: Add double check for repair 4927876f7a4 ceph-bluestore-tool: Fix set-label-key and rm-label-key 7bbf2a897a0 os/bluestore: multiple bdev label (superblock) fixes 6acad6d19e9 os/bluestore: Adapt unittest for multi bdev label eac365cd1a7 os/bluestore: Small fix to mkfs fe764c4fd8d os/bluestore: Made read/write_meta bdev aware 9b30da39a0d os/bluestore: Add read/write_bdev_label functions 8a825e133a7 os/bluestore: Modify bdev-label functions operate on bdev 0891702f23a os/bluestore: Bluefs, expand api for getting BlockDevice on BD/WAL e1cc40b133b os/bluestore: Minor fixes b89fb919160 os/bluestore: Update test for resilience of bdev label against bad UUID 82b2ec7c2dd os/bluestore: Only accept bdev labels with our UUID a3b044bb9df os/bluestore: Split check* and set* _main_bdev_label 66070915479 os/bluestore: Adapt multi bdev label tests for !bdev->supported_bdev_label() c8d6ab7edd0 os/bluestore: Make bdev multi label compatible with !bdev->supported_bdev_label() 12236c37351 os/bluestore: Fix of bdev label fsck b53a6d04295 os/bluestore: Tests for multi bdev label feature f6f5f898f15 os/bluestore: Fix of funny constructor misuse 9ab22a84ccd os/bluestore: Fix problem with marking unavailable bdev label positions 140dc2e74d7 os/bluestore: Fix repair for multi label b24a4945a6c os/bluestore: Add ability to upgrade into multi label 733a4513e56 os/bluestore: Hack for fsck with multi label c7b4bcbaec6 os/bluestore: Fix bdev_label_main_try_reserve 28dbacf1745 os/bluestore: Fix write_bdev_label 12e8c32299f os/bluestore: fix DB_SUPER_RESERVED->SUPER_RESERVED 7e1d04345d9 os/bluestore: Small fix to check_or_set_bdev_label d48f2c6f99c os/bluestore: Fix write_meta; increase epoch with each write 86f3aad2db4 os/bluestore: Fix fsck() for multi label b4a0365741d os/bluestore: Fix _check_or_set_main_bdev_label 408ff2378cf os/bluestore: Fix _main_bdev_label_try_reserve 019a88b766c os/bluestore: minor fix in _check_or_set_main_bdev_label c4f212ee1fc os/bluestore: Fix read_main_bdev_label 7c4a8642f6c os/bluestore: Fix write_bdev_label c0bd6fff41b os/bluestore: Fix read_meta and write_meta 7ecaede175a os/bluestore: Add fsck procedure for bdev multi labels f955c66290b os/bluestore: Adapt read_meta / write_meta aed1e686b3e os/bluestore: Give label multiple positions to replicate to 75b1a22b959 os/bluestore: Create read_bdev_main_label function 8e7b9deb653 os/bluestore: Modify read/write_bdev_label functions 3b904283f33 os/bluestore: Remove bluestore_debug_prefill 22c3eb548bf os/bluestore: Make read_meta / write_meta cached 6241be164dc Fixes: https://tracker.ceph.com/issues/67074 71ba42693e7 crimson/osd/recovery_backend: fix RecoveryBackend::temp_contents usage 92b07ddece5 doc/start/os-recommendations: remove 16.2.z support for CentOS 7 9485f9723fc doc/start: add tested container host oses 8d7cea5b1a1 mgr/dashboard: use assertEqual in test_iscsi 876ceab888c crimson/osd/osd_operation/client_request: requeue client requests from a temporary queue other than ClientRequest::Orderer::list 98f2da079b4 crimson/os/seastore/btree: drop unused lines a6cf5bba4a4 crimson/os/seastore/cached_extent: add the "refresh" ability to lba mappings 077cedff6e1 crimson/os/seastore: rename PhysicalNodeMapping::is_parent_valid() to PhysicalNodeMapping::is_parent_viewable() b87f6141a88 crimson/os/seastore/btree: add copy_source->pending links to FixedKVNode 07d066346fc crimson/os/seastore/cbj: skip crc calculation for cbj header if device supports the checksum offload e92273a4f15 crimson/os/seastore: disable crc calculation if end to end data protection is enabled 169a81ee51b crimson/os/seastore/rbm: add handle_exception() to pass_through_io() cc5b4a25155 crimson/os/seastore: remove multistream related codes 5f86c84118e crimson/os/seastore: add nvme_read and nvme_write to be used when end to end data protection is enabled 71398e2d4fe crimson/os/seastore/rbm: turn on end-to-end-data-protection during mkfs if possible 364fb38669f crimson/os/seastore: replace rbm_metadata_header_t with rbm_superblock_t 8f68b3fdaec reshard: small fix and cleanup 5e7de76407c rgw/reshard: Backward Compatibility f19347d43b7 rgw/reshard: stop recording logs when reshard failed 4d288ac31ce common/async: fix duplicate definition errors from SharedMutexImpl 4990864eab1 erasure-code/clay: cleanup unused but set variable count_retrieved_sub_chunks 5194bb6bdd3 rgw/reshard: take into account the object stats of dest shards 55b404afeb6 rgw/reshard: copy the index entries to dest shards. 14318e4210a make-dist: replace all '-' for '.' for rpm release 3b647ec17fb msg/async/rdma: cleanup unused variables 3b0360bc2ea doc: Amend dev mailing list subscribe instructions. 59b37e0ec85 rgw/reshard: record a duplicated index entry copy together with version bucket writting operations. be852cd8417 rgw/reshard: record a duplicated index entry copy together with prepare and complete. 14727dd19e3 rgw/reshard: Define the operation to record a duplicated index entry. b952558adcf rgw/reshard: Add logrecord phase in resharding 3c054a140d2 doc/rgw: add design doc for noblock resharding 55bd03de42d rgw: add support sse-c to bucket policy conditions 9e1c0342e99 qa/workunits/rbd: avoid caching effects in luks-encryption.sh aeaeaae7f5b test/rgw: address potential race condition in reshard testing ddbe2c06fd7 rgw/auth: RemoteApplier respects implicit tenants 019aaa4d101 rgw: donot check for NotPrincipal in IsPublicStatement fbb7c3df31e rgw: donot allow NotPrincipal with Allow Effect 9c77963300f doc/cephadm/upgrade: ceph-ci containers are hosted by quay.ceph.io 90bc35499eb mgr/test_orchestrator: add apply_mds command in the test_orch 0a4dda59ca3 mon/osdmonitor: cleanup the code for preprocess_mark_me_dead 8a20dff09f9 rgw: fixup compressor_message didn't store in some cases 855c5d6826d compressor: Change data formt to QZ_DEFLATE_GZIP_EXT for QAT zlib a242fe3d940 doc/start: update mailing list links 16b4a892941 osd/scheduler: fix unittest_mclock_scheduler failed 8036426fe3f osd/scheduler: add mclock queue length perfcounter 9ae2c89511b qa/cephfs: ignore when specific OSD is reported down during upgrade fe644c795ac qa: suppress Leak_StillReachable mon leaks cd2042b1ad0 rgw/iam: CreateRole ignores EEXIST after forwarded request b45eb557961 mgr/dashboard: Add namespaces views in dashboard 63f63662483 erasure-code/isa: Use isa/raid's xor_gen() instead of the region_xor() optimisation ca4759b8f48 mgr/dashboard: rgw sync policy routing fixes abdcc51aa41 test/rgw/amqp: skip TestAMQP.MaxConnections test 820f8ead891 doc/cephfs: streamline a paragraph 08347be0b73 Revert "qa/config/crimson_qa_overrides: adjust mgr_stats_period" 49c9dad15e5 mgr/client: validate connection before sending d034fec4633 qa: Restrict rados api tests to large clusters and increase timeout ed7f4e8829e qa: Added mon connection score tests c05d4e27160 src/mon/ConnectionTracker.cc: fix dump 7b41aff3f00 qa/suites/rados: 3-az-stretch-cluster-netsplit test fb0011a692c doc/rados/operations/pools.rst: Added docs for stretch pool set|unset|show 4ca1320727d qa/suites/rados/singleton/all: init mon-stretch-pool.yaml 661e8e22cff Allow setting peering_crush_bucket_{count|target|barrier} a4f2eefe21f mgr/dashboard: Create and delete listeners d451b4d1795 mgr/dashboard: RGW multisite sync pipe f433e2ff456 rgw/rados: set_attrs() falls back to existing attrs for index update c0b2db74b2a mgr/dashboard: add NFS export route from subvolume/subvolume grp 2e54c9a01e5 mgr/dashboard: Add a new chart for replication delta per shard in rgw sync overview grafana dashboard f6e65edf9b4 librbd: get rid of AIO_STATE_CALLBACK in AioCompletion 3a103f2f87b rgw: set correct requestId and hostId on s3select error d56779e521c crimson/os/seastore/transaction_manager: consider inconsistency between backrefs and lbas acceptable when cleaning segments 063d100526e msg: insert PriorityDispatchers in sorted position 331f1af2803 mon, osd, *: expose upmap-primary in OSDMap::get_features() 36a4a72959c mgr/dashboard: nvmf apis broken for insecure channel 699dd28ad5c osd/scrub: fix job requeue conditions 2187c494a66 test/osd: delete test_scrub_sched (for now) 58cce757a92 osd/scrub: making osd_scrub_sched.cc compatible with Clang-14 24647e87e8f qa/standalone/scrub: fix osd-scrub-test.sh 8a8fa48b8b0 osd/scrub: scheduling the next scrub following scrub completion 75b8ecbc2a2 osd/scrub: improve update_scrub_job() c55c6479f96 osd/scrub: passing the scrub-job copy through the scrubber 54168d28094 osd/scrub: fix adjust_target_time() 473177f8f99 osd/scrub: modify scrub registration implementation details 3edb4317fd8 osd/scrub: the scrub queue now holds a copy of the ScrubJob 16ad488d27d osd/scrub: Modify osd_scrub_sched.h high-level diagram e63101650d4 Fix the handling of HEAD requests that do not comply with RFC standards 6143b80ef7f include/denc.h: Review fixes eb538ebd595 tools/objectstore: check for wrong coll open_collection 08d985933c5 cephadm/smb: Determine samba version within container b687e2eeafc doc: reef 18.2.4 release note f1ca0c79de1 qa/upgrade: use staggered upgrade features for reef-x/stress-split 61a48c5cedd qa/upgrade: fix checks to make sure upgrade is still in progress 4c4063a0975 doc/dev: add formatting to basic workflow 67dbd062731 mgr/nfs: Do not ignore clusters from rados pool conf objects 617c9364bc2 blk/KernelDevice: Unify discard thread management decf32e8234 qa: add test for ceph tell with unknown cephtype 2811bb0dfe3 pybind/ceph_argparse: fixing error message for ceph tell command a9de8be0f46 suites: crimson basic adding wait for test 74297e6abac crimson/osd: adding osdmap subscribe ed082dbd127 librbd: fold complete_event_socket() into notify_callbacks_complete() db0c7daede9 os/bluestore: remove not used zone_adjustments 111c54a19dc RGW - Fix copy_obj handling of obj_ctx d496d20c803 Fixes: https://tracker.ceph.com/issues/66286 Improve display of ref_count in the rados commandline utility 5cd1746c750 qa: agetty entry in selinux allowlist is redundant now 26ee0696a61 common/async: add co_waiter class template dc4bd3ea08d qa: improve and add commit ID to comment for context c6e2c97c6e9 cephfs: disallow removing root_squash via "fs authorize" cmd 9a7645e9d6f client: fix file cache cap leak which can stall async read call 204101c452f qa/multisite: add copy_object tests 46eef5fb5c0 rgw/multisite: remove source object's RGW_ATTR_OBJ_REPLICATION_TRACE during copy_object. if a copy_object is executed on a replicated object, it fails to sync the copied object to the original source zone where the source object was first written and replicated from. this is because copy_object retains source attrs by default. when a get_obj() is issued from a fetch_remote_obj() call during sync, we check for this RGW_ATTR_OBJ_REPLICATION_TRACE and if that destination zone is already present in the trace, we return NOT_MODIFIED error, thus failing to replicate the copied object. b49f82a18b2 crimson/.../pg_interval_interrupt_condition: clarify member, add comments 252801a0280 crimson/.../pg_interval_interrupt_condition: remove IOInterruptCondition(Ref<PG>& pg); constructor eec5d0bfacd crimson/osd: convert remaining IOInterruptCondition users to specify epoch 61826ec15b7 crimson/.../background_recovery: use epoch_started for interruption 238f15e42df crimson/.../internal_client_request: record epoch at construction and use for interruption cf36ba98177 os/bluestore: fix valgrind's "Invalid read" error in hybrid btree2 allocator. 97119edd8b1 doc/mgr/smb: Fix a typo in options for cluster resource 770016d3acd doc/mgr/smb: Add missing option for standalone mode 48d8279dc77 mgr/smb: Replace "clusters" with "shares" in error status 0e3400d5dd5 os/bluestore: refactor allocator's ExtentCollectionTraits 55f65bda78c os/bluestore: refactor allocator histogram to use ExtentCollectionTraits 3db0e22083b os/bluestore: move and rename ExtentCache to Allocator class. 54b6d243389 os/bluestore: uniform allocator's error handling c448a06ee8e os/bluestore: introduce new allocator hybrid_btree2 4e44500cd1d include/intarith: introduce p2aligned() 7b588d3b3ad test/objecstore/store_test: be more specific with the desired allocator. f74820cb969 os/bluestore: make hybrid allocator implementation reusable 5caa16dd81f os/bluestore: Allocator's cosmetic cleanup/improvement. d7a2cd5d671 test/allocator_replay: print elapsed time for try_alloc command 82ae96fa86b crimson/osd/pg: update PG stats on handle_rep_op Fixes: https://tracker.ceph.com/issues/61761 Signed-off-by: Md Mahamudur Rahaman Sajib <mahamudur.sajib@croit.io> 8e17e9b6752 cephadm: update shared folder python packages dir 38ab28739e3 crimson/.../peering_event: complete_rctx under the PGPeeringPipeline::process stage 816c9e9e850 crimson/.../pg: factor out PG::complete_rctx 0f32fc60800 crimson/osd/pg: limit usage of async for peering state machine 4f80036480b ptl-tool: Fix token file name and variable names a926a4a54ce os/bluestore: assert CollectionRef count is 1 on umount acb66c16659 crimson/osd/pg_recovery: push the iteration forward after finding unfound objects when starting primary recoveries d25fe4e7860 qa/suites/fs/workload: drop mgrmodules stanza 8b5e7cc5b5d qa/tasks/ceph: fix "ceph mgr module enable" command d77139e74b6 qa/suites/orch: enable cephadm single_host_defaults for smb tests 0c48ae3af6f mgr/smb: improve error handling for generic exceptions 96b9564f99f pybind/mgr: add a specific exception for the mgr_pool disabled case f9c962a60f0 pybind/mgr: add a log line to hint why mgr sqlite3 db not ready 28a7ee81280 test/crimson/seastore/test_seastore.cc: should not return a value 37f772172f4 src/crimson/osd/scrub: fix the null pointer error 2539c6f3215 CMakeLists: Seastar_DEPRECATED_OSTREAM_FORMATTERS OFF 220669abbb0 CMakeLists: Crimson - remove Seastar_STD_OPTIONAL_VARIANT_STRINGVIEW 9328060a1c9 labeler: label seastar submodule as crimson 425f3338dfd crimson: use get instead of deprecated get0 9fddade5a9e seastar: update submodule 91b0207ed8d os/bluestore: improve ExtentMap::reshard readabilty 859f920e964 os/bluestore: improve ExtentMap::update readabilty 958ecba9e90 rgw/amqp: lock erase and create connection before emplace 949f25e1ea0 mon/scrub: add mon scrub latency e6468f3db17 crush: avoid out-of-bound access and simplify enlarging buckets cc8c7662a7b test/allocsim: don't join caches e2203385ea0 test/allocsim: string cache as set of ptrs ec604e725da test/allocsim: performance improvements, gotta go fast 111e1636631 corpus: update submodule with mark cls_rgw_reshard_entry forward_incompat 8178667fc67 mgr/smb: use the sqlite mirroring store by default b1cbf7c9dd3 mgr/smb: filter out password fields in sqlite store 30ed498e0a1 mgr/smb: add function for setting up sqlite mirroring store 4d5066832a8 mgr/smb: add SqliteMirroringStore class da7ebd543d7 mgr/smb: add transactions to handler funcs underlying show command 80eed4846e3 mgr/smb: make the new sqlite store our default internal store 615cd84f105 mgr/smb: add a new sqlite db backed store 25930c1a52b mgr/smb: add store transactions to parts of the handler 29ab71466be mgr/smb: add TransactingConfigStore protocol 11f299f535e mgr/smb: add a unit test to verify the new name in use check 028fe052bd6 mgr/smb: validate that a share name is unique per-cluster fd6d4a77c85 mgr/smb: add find_in_store function to config_store.py d28d0c41c73 mgr/smb: add ObjectCachingEntry class to config_store.py 2d35e4cfda6 mgr/smb: add a new protocol for a FindingConfigStore 2a82d9b1564 pybind/mgr: add convenient context mgrs for accessing module db 6472b9bc2a6 mgr/smb: Use the default for minimum protocol version 5ac43ef8af8 mgr/smb: Add acl_xattr configuration to share definition 729c5de4f85 ceph-volume: do not convert LVs's symlink to real path 71ca41dbaa5 include/denc: Not use fmt::format 867be2c3f59 crimson/.../peering_event: use peering event epoch for interruption 45b7aafd090 crimson/.../scrub_events: use epoch at which operation was scheduled for interruption 7a1b91ac5e0 crimson/.../pg_interval_interrupt_condition: allow specifying epoch 5ad0df3beed mds: generate correct path for unlinked snapped files 61381768ba9 qa: add test for cephx path check on unlinked snapped dir tree 9397f464310 mds: add debugging for stray_prior_path 02e9a4c77a2 clang tidy generates use-after-move warning d4a83b71706 test/encoding.cc: Harmonize expected text with exception 3d4a899d6c5 blk/KernelDevice: Fix several issues with stopping discard threads 8ffe35e85f2 blk/KernelDevice: React to bdev_enable_discard changes in handle_conf_change() d17efaf388b test: Create ParallelPGMapper object before start threadpool 6ae002460b8 mgr/vol : shortening the name of function 3ac8b61aaa1 suites: thrash old client missing SLOW_OPS in the ignore-list 4c58cb58725 osd/PGLog,crimson/osd/pg: remove support for rebuild_missing_set_with_deletes_crimson 1a56293f2c8 build: split ceph_ver.h d8c3c45e00c cephfs-shell: excute cmd 'rmdir_helper' reported error Fixes: https://tracker.ceph.com/issues/66735 Signed-off-by: teng jie <tengjie5@asiainfo.com> 99a554671d0 qa/suites/fs: pull compiled cephadm for squid branch in mds_upgrade_sequence 4e54a9034c8 qa: ceph.py mkfs.ext4 has no -f 0b52d0f8151 qa: ignore container checkpoint/restore related selinux denials for centos9 bfbfbbfed6c mon/MonClient: handle ms_handle_fast_authentication return a4123d08a79 script/ceph-backport: only fetch the merge sha1 97c49d67eaf script/ceph-backport: do not assume ref layout for checkout 165869fe8f3 test/librbd: add TestLibRBD.FormatAndCloneFormatOptions 74eee542ba1 rbd: add the validate of the format and clone_format e5cd5469b26 suites/ec-rados-plugin=jerasure-k=8-m=6-crush: roles set with overrides 2ef093a32dc suites/upgrade/quincy-x: update the ignore list 9b26784b24b rgw: log bucket name to req done line d6d9a3e3d60 rgw: log op name in req done line 548426630e1 rgw: log x-amz-request-id along with the request 89d695fb8b6 suites: check for host thrasher 66b42c3f5c0 suites: host thrasher should check min_in before thrashing host afb531019f7 mds/QuiesceDbManager: get requested state of members before iterating through each quiesce set members 73b80a9a2c3 Warning added for slow operations and stalled read in BlueStore. User can control how much time the warning should persist after last occurence and maximum number of operations as a threshold will be considered for the warning. 4c5d0e30d2c qa/suites/rados: Cancel injectfull to allow cleanup ebd8283e2f2 include/encoding.h: Fix message on compat failure c94c8baf012 include/denc: Add protection against bumping up compat 62aba6df38d include/denc: Add missing check for compat 2140fbf72d2 mds: use intrusive set for ClientLease tracking 0a4a5d34929 mds: optimize sending cap messages 575f5d46170 rgw: delay the RGW process exit until all actice requests have completed 59eab456911 qa/cephfs: ignore variant of MDS_UP_LESS_THAN_MAX 2c65f1da969 suites: test should ignore osd_down warnings f7bc4e45478 PrimaryLogPG: Keep soid before erase entry cf448e83c01 anotated rgw_auth.cc d699e23f172 common: MemoryModel: do not discard memory mappings marked [stack] 705e60f77a1 common: MemoryModel: do not store measurements bdc5782a276 common: MemoryModel: speed-up and clean get_mapped_heap() cf62ba80110 common: MemoryModel: do not issue error messages directly 6ed303881c4 common: MemoryModel: use charconv to parse /proc/status 7752ceed3ca mds/MDCache: avoid using static variables in check_memory_usage a6e2a7c53dc common: MemoryModel: keep /proc files open e97223399d0 common: rename MemoryModel::snap to mem_snap_t e08126880e0 common/MemoryModel: make MemoryModel::snap accessors const a1f3c99eb4e client: eliminate duplicate lokups wherever possible 95b64a65bc9 mon: fix inconsistencies in class param 9e0744f8592 refactored the code to remove use-after-move warning generation. bl length would be stored before moving f17f2d6fee1 qa/suites: drop --show-reachable=yes from fs:valgrind tests b931251b259 AsyncMessenger: l_msgr_active_connections numerical anomaly df0073598ea mds: put ClientLease in map container b6c79ab6480 mds: reduce Capability size by using elist::item d2645fd157b qa/cephfs: add test_session_evict_non_blocklisted test case c5a61107b3f mds: cleanup the debug logs to make it to be more readable e63b967aeb0 doc/mgr/dashboard: fix TLS typo bbce02800b2 qa/standalone: bugfix for latecy repair after scrub 98c9c8cf157 qa: set debug_ms=2 for cephfs tests 2ea33487c98 msg: decrease the level to print the sending msgs from the protocol 41eba3e370c neorados: Fix use-after-move in Builder::build_ c3fd1deec2d mon: validate also mons and osds on {rm-,}pg-upmap-primary 3840b2c41c2 rgw/notification: add logic to prevent logging password associated with topics. 4d1dacf87e6 crc32c optimized for s390x arch d37f0943561 test/pybind/test_rados.py: fix warnings 81382acd1ee tool/ceph_dedup: move signal_handler into SampleDedupGlobal to remove a gobal variable 59c48b1202b test/denc: Add check for compat 54516b75782 tool/ceph_dedup: rename make_crawling_daemon to run_crawling_daemon 111c94e05ba tool/ceph_dedup: refactor globals to put them into automatic variable 6855b049fb3 mon/OSDMonitor: Add force-remove-snap mon command 63508ccb96a rgw: eliminate vault token perm for group read a4374ab5380 mgr/dashboard: adapt dashboard e2e for grafana aae02b6af46 qa/suites/rados/verify/validater: increase heartbeat grace timeout 55d9682a90e osd: make the chunking in e.g. PG deletion controlable c719d8ac2d7 mgr/cephadm: bump monitoring stacks versions 3163be345c1 test/client: test contiguous read for a non-contiguous write a7bd91dafb5 Test: osd-recovery-space.sh extends the wait time for "recovery toofull". 9eb14fc01c3 qa/rados: Adapt bluestore tests to new naming in ceph_test_objectstore c594bb5635a tests/store_test: Split matrix tests into separate test cases bd8d7e96956 src/pybind/mgr/pg_autoscaler/module.py: fix 'pg_autoscale_mode' output b1ea37c5a6c mds: always make getattr wait for xlock to be released by the previous client 34b086e702f osd: add watch ping timeout count in osd acf7f153afe bli/aio: replace inappropriate aio_read() with aio_write for POSIXAIO 8e3235975af test/store_test: add a simplified test for readv. 8238b608696 blk/aio: fix incomplete patch to get rid off aio_size 8564caf393a bluestore/bluestore_types: avoid heap-buffer-overflow in another way to keep code uniformity 7b52409ed70 osd: Remove aios_size argument from submit_batch Due to aios_size being a uint16 and the source value for the actual call being an int there was a possible overflow. This was "fixed" with an assert, however that still causes a crash. 62c1ed82828 blk/kernel: always use ceph_assert ccb66145a4e test/store_test: add a case for reading an object with 64+K extents. 09f3c879f2f ceph-dencoder: MDS - Add missing types d3c0a3d0b6b qa/rgw: enable valgrind in rgw/notifications suite 78d7668dccf osd/OSD: improve var naming identify_splits_and_merges ddd741b393f osd/OSD: Add pg_num_history comment 791614e6eb0 osd/OSD: fix track_pools_and_pg_num_changes on mapgaps 8e61af9614e tools/rados: allow to read setomapheader value from file 5f552357af2 osd/OSD: introduce track_pools_and_pg_num_changes 51acf34e7d0 osd/OSD: handle_osd_map rename i and j 482e5b85f08 test/store_test: get rid off explicit offset specifications in shared blob repair test case. b01453b1c1b osd: remove unnecessary return statements 78d6bfe54c3 osd: add clear_shards_repaired command 92fde258bbb qa/cephadm: extend iscsi teuth test 5b9c08eadcb crimson/osd/backfill_state: set backfill_infos when the last round of scan doesn't produce any object that needs to be backkfilled 3d712181966 crimson/osd/backfill_state: consider backfills as complete when all replicas have acknowledged the finish of the backfill 1d99222ffce TrackedOp: Make history_slow_op_threshold a float e1a02841973 common/TrackedOp: rename and raise prio of slow op perfcounter 7830383a1bf doc/dev/developer_guide/testing_integration_tests: Document the random selection operator 33037eccf07 tool/ceph-bluestore-tool: fix wrong keyword for 'free-fragmentation' command. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* slirp4netns: update to v1.3.1Bruce Ashfield2025-01-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping slirp4netns to version v1.3.1-2-gee1542e, which comprises the following commits: d1a900b v1.3.1+dev e5e368c v1.3.1 036c206 CI: bump libslirp to v4.8.0 1c4eec1 CI: drop CentOS 7 3c8f086 v1.3.0+dev 8a4d439 v1.3.0 436755d Support new --netns-type=tapfd d39499f Do not leak socket in case of success. c75ce87 release.yaml: fix tag a6d372a v1.2.3+dev c22fde2 v1.2.3 cdea74d Dockerfile.artifact: jammy-20240125 afc3126 main: do not leak tapfd fa1f950 main: do not leak sockfd on errors f5287ef main: fix some leaks on error paths a6c3eb7 api: use g_free with fwd 63220fa api: allocate ctx with calloc e1ec9eb api: do not leak fd on errors f9a92bc release.yaml: migrate from `hub` to `gh` d5996a4 overmindtech/buildkit-cache-dance -> reproducible-containers/buildkit-cache-dance 84b878d CI: release.yaml: fix release note again 15067fc v1.2.2+dev 0ee2d87 v1.2.2 f4723a5 CI: release.yaml: fix release note 0252253 v1.2.2-beta.0+dev 1e814cc v1.2.2-beta.0 fbca8f5 CI: release.yaml: add guide for reproducible builds c223351 CI: release.yaml: reproduce commit hash e5ea9fe Dockerfile.artifact: propagate SOURCE_DATE_EPOCH from host a52eda0 Dockerfile.artifact: pin package versions 9d55a09 v1.2.1+dev 09e31e9 v1.2.1 3c2ef5c Dockerfile.artifact: XX_VERSION=1.2.1 ba0d32f Re-remove usage of qemu-setup-action 036b88c parson: update to v1.5.2 b380f0f CI: fix test-centos7 9103678 Add support for escaping resolv.conf symlinks 7b798d6 Update buildx actions 5c4aa63 Fix git://git.qemu.org urls which no longer respond 8c8bdff v1.2.0+dev 656041d v1.2.0 ba68f7e Dockerfile.artifact: strip binary da591df Dockerfile.artifact: enable cross-compilation without dependency on QEMU 6717933 v1.2.0-rc.0+dev e3a5714 v1.2.0-rc.0 873a35f CI: refactor release.yaml 7d2125f CI: build slirp4netns-riscv64 67b2b8c Dockerfile.tests: Ubuntu 20.04 -> Ubuntu 22.04 7b28b6c Dockerfile.artifact: Debian 11 -> Ubuntu 22.04 e2f022e CI: bump libslirp to v4.7.0 82c5146 Fix typo in warning message for `--outbound-addr` and `--outbound-addr6` 2365e85 configure: remove inet_ntoa check 2b607f2 Replace deprecated inet_ntoa with safer inet_ntop Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: update to v3.4.1Bruce Ashfield2025-01-172-13/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping ovs to version v3.4.1-39-g7aa5f4270, which comprises the following commits: 7aa5f4270 dpif-netdev: Modify code comments for function parse_tcp_flags. 4727d139b ipf: Fix the over-sized reassembly. 8c2bf8bff debian: Let *-ctl handle runtime directory. 29dddea09 debian: Use PIDFile with systemd. 308b441a1 debian: Add X-Python3-Version stanza. 860b6f985 debian: Drop shlibs:Depends macro for -ipsec. 9ac8b0fc0 debian: Drop python3:Depends macro for -vtep. 80cccfbdd ovsdb: Fix asan warning on ovsdb fatal errors. 034b40fbb netdev-tc-offloads: Don't offload header modification on ip fragments. 5346c14b9 m4: Fix check for Python 3.6 version. 84a98a8ba ofproto: Fix default pmd_id for ofproto/detrace. 65efbaa56 github: Skip clang-analyze when reference generation fails. 069f5a776 netdev-dpdk: Restore outer UDP checksum for Intel nics. acee75730 cirrus: Update to FreeBSD 14.2 and 13.4. eb98e20da bridge: Fix log spam about prefixes. a234629c3 netdev: Always clear struct ifreq before ioctl. 118b4f207 netdev-native-tnl: Fix use of uninitialized RSS hash. 49d8d3066 tests: Use OVS_CHECK_XT6 for all applicable IPv6 tests. 8886c64c1 tests: Use OVS_CHECK_XT for all applicable IPv4 tests. 985f7ee31 classifier: Fix the fieldspec comment in the prefix tracking section. 07720bc3f tests: Handle marks using nft if available. f3de3ab1b tests: Add nft support to ADD_EXTERNAL_CT. 5931c6feb tests: Add nft accept support. e4d76aacd ovs-macros.at: Correctly delete iptables rule on_exit. 2cdd886fc system-traffic: Do not rely on conncount for already tracked packets. 2463a1bf9 system-traffic: Fix syntax errors in FTP and IPv6 curl calls. 77e82fa31 ovsdb-idl: Fix use of uninitialized datum for graph consistency check. fb1dad5be db-ctl-base: Fix uninitialized datum fields while checking conditions. 9bda0df40 ovsdb-types: Fix use of uninitialized reference type. 3ed582f4a ofproto-dpif-upcall: Fix use of uninitialized missed dumps counter. fcc8c2a91 ovs-vsctl, vtep-ctl: Silence memory sanitizer warning for longindex. 76c3deb14 tests: multipath: Fix use of uninitialized wildcards. b359f1cf7 stream: replay: Fix potential NULL dereference on write failure. 4d8155a5c ofp-actions: Fix use of uninitialized padding in set-field. 6d02d8749 system-traffic: Standardize by replacing all wget instances with curl. a946d61f5 system-traffic: Replace wget with curl for negative and ftp tests. 87efb3c94 classifier: Increase the maximum number of prefixes (tries). 5338f3ebe Revert "github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel." c25085f3d Prepare for 3.4.2. 22a6b1110 Set release date for 3.4.1. fde8912b0 tests: Fix transient failure in ping6 header modify. 5cefc1114 github: Build Libreswan v5.1 from sources. 3d0246e3c ci: Update GitHub actions runner from Ubuntu 22.04 to 24.04. 5c13ad000 dpdk: Fix dpdk logs being split over multiple lines. c6fc230a5 ipsec: libreswan: Reduce chances for crossing streams. e9f9e1eff tests: ipsec: Check that nodes can ping each other in the NxN test. 94aeab7de tests: ipsec: Add NxN + reconciliation test. 992e09e4d system-tests: Verbose cleanup of ports and namespaces. a5b5fce08 ipsec: Make command timeout configurable. 49b066b5c ipsec: libreswan: Avoid monitor hanging on stuck ipsec commands. 729b4813c ipsec: libreswan: Try to bring non-active connections up. cb981fdb3 ipsec: libreswan: Reconcile missing connections periodically. f95b566db ipsec: libreswan: Fix regexp for connections waiting on child SA. f1fcf08b3 ipsec: Add a helper function to run commands from the monitor. 77dc74395 meta-flow: Fix nw_frag mask while parsing from string. 7e6a298c0 ci: Remove dependency on libpcap. b2d2ca05c github: Remove ASLR entropy workaround. b00d1115c bond: Always revalidate unbalanced bonds when active member changes. d9f146931 ofproto-dpif-upcall: Fix redundant mirror on metadata modification. 7e0f702fd dpdk: Use DPDK 23.11.2 release for OVS 3.4. a15ce086d ofproto-dpif: Improve load balancing in dp_hash select groups. f6329c428 Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions." b7a277b73 ci: Use sarif-tools v3.0.1 due to issues in earlier versions. d17dbccf0 netdev-dpdk: Disable outer udp checksum offload for txgbe driver. e05a76931 selinux: Update policy file. 7d074979f github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel. 76ba41b5c vconn: Always properly free flow stats reply. fa840997f mcast-snooping: Properly check group_get_lru return code. 64cb90507 ovsdb-idl: Fix IDL memory leak. 9e9433ec5 ofproto/bond: Preserve active bond member over restarts. 05b752082 ofproto-dpif-upcall: Avoid stale ukeys leaks. a91553ef0 ci: Use previous sarif-tools release due to issue in latest release. a67c12d51 userspace: Correctly set ip offload flag in native tunneling. 32ff65ac6 docs: Fix argument formatting in ovs-appctl(8) man page. c45794afb Prepare for 3.4.1. c598c05c8 Set release date for 3.4.0. a71dd64a2 releases: Mark 3.3 as a new LTS release. b0e749ba8 dp-packet: Correct IPv4 checksum calculation. 6b6823a57 netdev-linux: Fix unaligned access to rpl_rtnl_link_stats64. d49f51a05 route-table: Fix another UBsan warning about pointer type. cb121f4ea netdev-linux: Do not offload IP checksum. 6cea2b36c tunnel, tests: Add test for mirroring over tunnels. a1afd8369 ofproto-dpif-xlate: Add a recursion limit to tunnel address lookup. 1532c15a5 netdev-dpdk: Fix race condition in mempool information dump. 6743a83e1 ovsdb: transaction: Remove incorrect transaction abort in pre-commit. a2d11f1be netlink-notifier: Silence the UBsan's function pointer mismatch error. a1fca3d17 Documentation: Update QEMU documentation URLs. f4f199af5 match: Fix false-positive snprintf size warning. 2eb49ec25 util: Add non-NULL format assertion to xvasprintf. 4cf2073cb ofproto-dpif-xlate: Initialize observe_offset for sample actions. 7ca0d3fee docs: Define Read the Docs configuration for Sphinx HTML parameters. 41c4034cb ofproto-dpif-xlate: Remove misleading wc NULL check in packet mirror. 2bf43ea3c flow: Fix unaligned access to the ND target in miniflow_extract. 7dbf2a836 ofp-actions: Fix reporting observation point bits instead of domain. 86f7db6c1 dpif-netlink-rtnl: Fix netdev leak in out-of-tree tunnels probe. 12f9e1410 dpctl: Fix netdev reference leak in "show" command. 0aa14d912 Prepare for 3.4.0. 3b1882261 ofproto-dpif-mirror: Add support for pre-selection filter. 04c090c61 ofproto-dpif-mirror: Reduce number of function parameters. 600125b2c ofproto: Add ofproto/detrace command to map UFIDs to OpenFlow. 9e6d43ef3 rhel: Make the version, displayed to the user, customizable. 1aa9e137f ofp-actions: Load data from fields in sample action. c2e683646 ofproto-dpif-xlate: Avoid allocating mf_subfield. 516569d31 ofproto: xlate: Make sampled drops explicit. 45034c206 tests: Test local sampling. 742de01a4 tests: Add test-psample testing utility. c10dbcec7 ofproto-dpif-xlate: Use psample for local sample. d54b967e8 vswitchd: Add local sampling to vswitchd schema. 5b99ebc26 ofproto: Add ofproto-dpif-lsample. d0afbf094 ofproto_dpif: Check for psample support. 1a3bd96b4 odp-util: Add support OVS_ACTION_ATTR_PSAMPLE. d9de6b01c ofproto-dpif: Allow forcing dp features. d7e77143f tunnel: Allow UDP zero checksum with IPv6 tunnels. 4935e8932 ofproto: Add JSON output for 'dpif/show' command. 379d036ac vswitchd: Add JSON output for 'list-commands' command. 3c572af65 python: Add option for pretty-printing JSON output to appctl.py. a0925cef7 appctl: Add option '--pretty' for pretty-printing JSON output. 97a1bce6a python: Add option for JSON output to unixctl classes and appctl.py. 939a5cea5 Add global option for JSON output to ovs-appctl. f8ed13355 ovsdb: raft: Don't forward more than one command to the leader. 773b0fb59 cirrus: Update to FreeBSD 14.1. 239b59bdf ovs-monitor-ipsec: LibreSwan v5 support. 802df1e37 ovs-monitor-ipsec: LibreSwan autodetect version. c1dce72a3 python: ovsdb-idl: Add custom transaction operations. 56e315937 vswitchd: Only lock pages that are faulted in. 639fcf200 netdev-dpdk: Check pending reset when adding device. 481184944 odp-execute: Check IPv4 checksum offload flag in AVX. 3f4df4c7b odp-execute: Set IPv6 traffic class in AVX implementation. 2f196c80e netdev-dpdk: Use LSC interrupt mode. 6b09799f0 ofp-prop: Fix unaligned 128 bit access. 24907bd1b ovsdb-client: Document "--timeout" option in help. 8b405f45d ovsdb-client: Add "COLUMN" arg to help for 'dump'. c00dd0c94 dpdk: Check other_config:dpdk-extra for '--lcores'. 85d19a5ed appveyor: Fix caching of OpenSSL installer. 2c1a432e2 python: ovs: flow: Fix nested check_pkt_len acts. fad8c8f7f python: idl: Fix index not being updated on row modification. d40129195 python: ovsdb-idl: Convert new_uuid insert() arg to UUID. 79a306565 python: ovsdb-idl: Make IndexedRows mirror hmap. 35e647051 checkpatch: Don't warn on pointer to pointer. f01a768e9 ci: Restore vhost-user unit tests in check-dpdk. 2efae5894 system-dpdk: Fix socket conflict when starting testpmd. c39a84c13 netdev-dpdk: Refactor tunnel checksum offloading. 844a7cfa6 netdev-dpdk: Use guest TSO segmentation size hint. d618d0917 netdev-dpdk: Refactor TSO request code. 3d2c8223a netdev-dpdk: Fix inner checksum when outer is not supported. 29abd07e4 netdev-dpdk: Disable outer UDP checksum for net/iavf. 041d6aded netdev-dpdk: Fallback to non tunnel checksum offloading. 6280f5d04 netdev-offload-tc: Reserve lower tc prio for vlan ethertype. 792e8ee86 debian: Fix tabs vs spaces. ac4df0c8d nsh: Add support to compose-packet and use it in system tests. cd4ea33b5 tests: Convert ND, MPLS and CT sendpkt tests to compose-packet. 40f0ac48f tests: sendpkt: Allow different input formats. 16f688535 ipf: Handle common case of ipf defragmentation. 3a6b8c836 ipf: Only add fragments to batch of same dl_type. 1d681ffe3 AUTHORS: Add Ville Skyttä. 90b8e4d05 docs: afxdp: Fix CONFIG_HAVE_EBPF_JIT Kconfig option spelling. 4a838f627 AUTHORS: Add Jun Gu. 8e2b06af9 ovs-ctl: Fix typo. 4c0e1a1d7 python: ovsdb-idl: Use monitor_cond for _Server DB. 474ebd6dd ovsdb-idl: Add C IDL test for "monitor" fallback. 6003a8875 tests: Fix non-portable plus match in python vlog test. f2e4195b0 netdev-linux: Fix uninitialized gso_type case. d97eee88e db-ctl-base: Initialize the output variable in the ctx structure. 361d7bce0 ofproto-dpif: Define age as time_t in ofproto_unixctl_fdb_add(). f673d0cd5 sflow: Fix check for disabled receive time. 11e48b8ca sflow: Use uint32_t instead of time_t for tick handling in the poller. e42d3ed29 sflow: Replace libc's random() function with the OVS's random_range(). b253d74d4 cfm: Fix possible integer overflow in tc_add_matchall_policer(). 18436bed8 netdev-linux: Fix possible int overflow in tc_add_matchall_policer(). 488ad8bee dpdk: Use DPDK 23.11.1 release. 7af0716ea odp-execute: Fix AVX checksum calculation. 4d25656a2 netdev-linux: Initialize link speed in error conditions. 0c1b9b015 netdev-linux: Return an error if device feature names are empty. 4837b5fed socket: Fix uninitialized values in inet_parse_ functions. 51a2476bc dpctl: Fix uninitialized value when deleting flows. 8359cc422 netdev-native-tnl: Fix use of uninitialized offset on SRv6 header pop. 8e5a89cd0 netdev-offload: Fix null pointer dereference warning on dump creation. ce1663b5f netdev-linux: Fix ethtool_cmd is partly outside array bounds. d4bd0a2ad atlocal: Replace deprecated pkg_resources. 4d2c64ca1 atlocal: Fix setting HAVE_PYTEST on unexpected errors. 320f7e1a4 srv6: Fix misaligned writes to segment list. 0c8e62640 utilities: Correct deletion reason in flow_reval_monitor.py. ec405e857 compiler: Fix errors in Clang 17 ubsan checks. 8d5486b65 AUTHORS: Add Amit Prakash Shukla. 325ca0455 packets: Assert for incorrect packet. f61e1da46 AUTHORS: Add Pengfei Sun. ac7a10721 table: Fix freeing global variable. 90cd797da vlog: Destroy async_append first then close log_fd. 3833506db conntrack: Fully initialize conn struct before insertion. 4989dc7e0 conntrack: Do not use {0} to initialize unions. cbc54b2fe AUTHORS: Add Martin Kalcok. 5dfbc643f ci: Set platform parameter when building DPDK. 0940a51b1 ovsdb-client: Add missing arg to help for 'dump'. b91f6788c ofproto-dpif-trace: Fix access to an out-of-scope stack memory. f0e0e48ec hash, jhash: Fix unaligned access to the hash remainder. 855df0ad2 sparse: Add additional define for sparse on GCC >= 14. 01a0fff36 docs: Document manual cluster recovery procedure. 139b564db conntrack: Key connections by zone. c176635f5 test-conntrack: Add per zone benchmark tool. bf82d2cce Documentation: Update Pacemaker main page link. bd8e9f48f sparse: Add immintrin.h header. 169ff9ea9 tc: Fix -Wgnu-variable-sized-type-not-at-end warning with Clang 18. 1876b2796 tests: Fix build failure with Clang 18 due to -Wformat-truncation. 8ce5c95f0 dpctl: Fix segfault on ct-{set,del}-limits. fb46f5d29 netdev-dpdk: Improve error print to the user for flow control error. bcacd805f ovsdb: raft: Fix probe intervals after install snapshot request. d7f2150ea ovsdb: raft: Fix inability to join a cluster with a large database. 153d563c2 AUTHORS: Add Chris Riches. e876b0466 rhel/systemd: Set ovsdb-server timeout to 5 minutes. fbade819d ovsdb-idl: Add python keyword to persistent UUID test. 2b7efee03 socket: Increase listen backlog to 64 everywhere. 4f29804f2 netdev-dpdk: Fix possible memory leak configuring VF MAC address. 66a8430c7 appveyor: Fix too wide OpenSSL version regexp. e1e0c6a3e checkpatch: Allow rST manpages to be added. 16b747541 github: Update python to 3.12. dd24c57de ovsdb-dot: Fix flake8 issues. 3cd0299aa ovsdb-doc: Fix syntax warning with Python 3.12 and flake8 issues. acf653712 github: Remove reference to master branch. b34dac4c6 appveyor: Remove reference to master branch. 241365b6d python: Remove hacking dependency and use recent flake8. 751e14c63 cirrus: Update to FreeBSD 13.3. a35fc4ae5 checkpatch: Don't spellcheck names in tags. a75e1c37a vlog: Log stack trace on vlog_abort. 74cf01436 Documentation: Updates for rename of primary development branch as main. 120140f89 ofproto: Fix Coverity false positive. 9185793e7 tests: Fix compatibility issue with Python 3.13 in vlog.at. 95f5012bb checkpatch: Add additional words to extra_keywords. ed379a810 ofproto-dpif-upcall: Fix ukey installation failure logs and counters. 337db5865 tests: system-offload-traffic: Verify re-probe of drop action. edf56245b tests: system-traffic: Add coverage for drop action. 3c8d069b9 dpif: Probe support for OVS_ACTION_ATTR_DROP. 54d94f8f4 dpif: Support atomic_bool field type. dec09fd7b dpif: Make get_datapath_cap() access support by pointer. 8bb065961 dpif: Stub out unimplemented action OVS_ACTION_ATTR_DEC_TTL. 9ec849e8a netlink-conntrack: Optimize flushing ct zone. 6439d694a util: Support checking for kernel versions. b5e682925 conntrack: Do not use icmp reverse helper for icmpv6. b674e7e04 conntrack: Fix SNAT with exhaustion system test. 2324596f1 Documentation: Update references to kernel datapath in OVS tree. 95ff912ed appveyor: Prepare for rename of primary development branch. 5b9feacfc ovsdb: raft: Fix inability to join after leadership change round trip. e987af503 ovsdb: raft: Fix assertion when 1-node cluster looses leadership. af5a99737 ovsdb: raft: Fix permanent joining state on a cluster member. bcad733e2 ovsdb: raft: Fix time intervals for multitasking while joining. aab379ec2 ovsdb: raft: Avoid transferring leadership to unavailable servers. bf7c0b0a9 ofproto-dpif-xlate: Fix continuations with associated metering. c6538b443 dpif-netdev: Fix crash due to tunnel offloading on recirculation. e6a8a8e90 AUTHORS: Add Jun Wang. 6f93d8e62 netdev-dpdk: Disable outer UDP checksum offload for ice/i40e driver. 3ddb31f60 ovs-monitor-ipsec: LibreSwan autodetect paths. 840979663 route-table: Avoid routes from non-standard routing tables. 3388c3451 ovs-tcpdump: Fix cleanup mirror failed with twice fatal signals. 9d0a40120 ofproto-dpif: Fix tunnel with different name del/add failure. 5339ce386 ofpbuf: Prevent undefined behavior in ofpbuf_clone. 679b068ac AUTHORS: Add Kevin Sprague. b89a6b814 rhel: Enable USDT scripts by default in Fedora builds. 86b9e653e revalidator: Add a USDT probe during flow deletion with purge reason. 0ce82ac45 netdev-dpdk: Fix tunnel type check during Tx offload preparation. 05e9f05d1 netdev-dpdk: Fix TCP check during Tx offload preparation. f8809760f netdev-dpdk: Clear inner packet marks if no inner offloads requested. 7df30c86c netdev-dpdk: Clean up all marker flags if no offloads requested. fa0dfa18d github: Reduce ASLR entropy to be compatible with asan in llvm 14. 33f45ded6 ovsdb: Don't iterate over rows on empty mutation. 2c4ffd2f8 netdev-dpdk: Dump packets that fail Tx preparation. 07c2ef5cd bfd: Improve state change log message. d2a42f396 tests: Fix "SSL db: Implementation" test with openssl > 3.2.0. 6c082a831 conntrack: Fix flush not flushing all elements. e0aa15f89 utilities: Use localhost as sample hostname. b3ebc34a0 netdev-linux: Rename local variables as primary_*. f92b30a0f netdev-linux: Rename struct nedev_linux field as is_lag_primary. 0c255bf76 Documentation: Update to refer to main repository. 29e09c809 vswitch.xml: Use member wording for bonds. 9d8208484 appveyor: Build with OpenSSL 3.0. 68e931221 m4: Fix linking with OpenSSL 1.1.0+ and 3+ on Windows. f5fa9a0a3 ovs-pki: Fix file permissions on Windows. d439c2017 appveyor: Print out config.log on configuration failure. 436aba68d bond: Reset stats when deleting post recirc rule. 6fc215de3 ofproto-dpif-trace: Fix infinite recirculation tracing. 99c86c6c4 github: Temporarily disable SNAT with exhaustion system test. cc0e79518 Documentation: Update links to upstream Kernel documentation. 2d7a2bddb Documentation: Update Pacemaker link. 3c52cd15a Documentation: Anuket project updates. 786a89aba Documentation: Correct spelling errors. 5639aa7b6 Documentation: Extend copyright to 2024. 4c32b6d09 dp-packet: Don't offload inner csum if outer isn't supported. f0d1beca6 dpif-netdev: Do not create handler threads. 166ee41d2 ofproto-dpif-xlate: Fix ignoring IPv6 local_ip for native tunnels. 7992a26ef netdev-dummy: Add local route entries for IP addresses. f9e42c668 tests: Move the non-local port as tunnel endpoint test. 46159983d ovs-thread: Log pthread failures. afdc1171a conntrack: Handle persistent selection for IP addresses. 99413ec26 conntrack: Handle random selection for port ranges. 5f2af0b7a utilities: Add TASK_STOPPED accounting to the kernel_delay.py script. 9aeda62cd Set release date for 3.3.0. 619d4e679 system-traffic.at: Add tests with UDP tunneling of UDP traffic. f81d782c1 netdev-native-tnl: Mark all vxlan/geneve packets as tunneled. a2d4ad651 netdev-linux: Only repair IP checksum in IPv4. cb0cbffbe netdev-linux: Favour inner packet for multi-encapsulated TSO. 3e666ba00 rstp: Fix deadlock with patch ports. 5df46a44e dpif-netdev: Increase MAX_RECIRC_DEPTH to 8. c7dd0a7b0 ovs-pki: Remove umask trick for self-signing. dda253293 ovs-pki: Remove executable bit from private/cakey.pem. 19cffe30c netdev-linux: Avoid deadlock in netdev_get_speed. 0061a4892 ofproto-dpif-monitor: Remove unneeded calls to clear packets. 8cebf7efb dp-packet: Include inner offsets in adjustments and checks. 281b8d24c bfd: Set proper offsets and flags in BFD packets. bf921e567 dp-packet: Validate correct offset for L4 inner size. 11b62f5e0 appveyor: Move from MinGW 32bit to msys64. b3fc82220 AUTHORS: Add Roberto Bartzen Acosta. 2832faa22 Documentation: Adding note about using the jemalloc library. be695f26f netdev-offload-tc: Check geneve metadata length. 61003d028 odp: ND: Follow Open Flow spec converting from OF to DP. 027ae2ba1 faq: Update DPDK releases for older branches. 6bdca1579 github: Bump Fedora version to 39. 1be7f896a github: Update versions of action dependencies (Node.js 20). 7b838a24f mcast-snooping: Remove typedef from mcast_group_proto. 96990ea1e dp-packet: Reset offload/offsets when clearing a packet. 3f74d6bf3 tests: ovsdb-server: Fix config-file same schema test. 432a0b935 ci: Run system tests in a separate namespace. 3eb91a8d1 netdev-dpdk: Trigger port reconfiguration in main thread for resets. 9ca8d3a4d tests: mcast-snooping: Stop time for the group protocol test. bacd2c304 dp-packet: Avoid checks while preparing non-offloading packets. 335a5deac ovs-atomic: Fix inclusion of Clang header by GCC 14. 85ceed7c7 Prepare for post-3.3.0 (3.3.90). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>