summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* podman: introduce README for testing/configurationBruce Ashfield2023-08-241-0/+20
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: drop python variantBruce Ashfield2023-08-241-41/+0
| | | | | | | | The python variant of docker-compose is no longer updated. We have the golang version, so we drop this recipe to avoid use of an obselete and potentially non-secure application. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: 3.1.2Bruce Ashfield2023-08-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping ovs to version v3.1.2-12-g8b1795c69, which comprises the following commits: 8b1795c69 ovsdb-tool: Fix json leak while showing clustered log. d4d068fef ovsdb-server: Fix excessive memory usage on DB open. 369daff0d tests: Add ovsdb execution cases for set size constraints. eb33626b5 ovsdb: relay: Fix handling of XOR updates with size constraints. 8d2c8c33e ovsdb: file: Fix diff application to a default column value. 379755815 ovsdb: file: Fix inability to read diffs that violate type size. 96d02ee7a ovs-tcpdump: Clear auto-assigned ipv6 address of mirror port. 618d3bdbb ofproto-dpif: Fix removal of renamed datapath ports. 11c542104 netdev-dpdk: Negotiate delivery of per-packet Rx metadata. cad4759fa ofproto-dpif-upcall: Mirror packets that are modified. 17022ea06 vswitchd: Wait for a bridge exit before replying to exit unixctl. 4aba34b82 Prepare for 3.1.3. 916777447 Set release date for 3.1.2. aba1862d8 ofproto-dpif-upcall: Don't set statistics to 0 when they jump back. 859071224 ovsdb: monitor: Destroy initial change set when new columns added. 54e45e3fe ovsdb: Monitor: Keep and maintain the initial change set. 5fe322e16 fatal-signal: Don't share signal fds/handles with forked process. 3fcb81784 cpu: Fix cpuid check for some AMD processors. 01f0668fd tc: Fix crash on malformed reply from kernel. 45dba48f3 netdev-dpdk: Fix warning with gcc 13. faddfa21d utilities/bashcomp: Fix PS1 generation on new bash. 33db42a34 netdev-offload-dpdk: Fix crash in debug log. 55535451b stream-ssl: Disable alerts on unexpected EOF. e3b84fd4a tests: layer3-tunnels: Skip bareudp tests if not supported by kernel. e91339405 ovs-fields: Modify the width of tpa and spa. 23d77ba10 netdev-vport: RCU-fy tunnel config. 0f303e4a7 smap: Make argument of smap_add_ipv6 constant. 467b891f7 netdev-vport: Fix unsafe handling of GRE sequence number. ea2014688 tests: dpdk: Pass `--no-pci` to tests that do not use physical ports. f4cc9ca82 dpctl: Fix dereferencing null pointer in parse_ct_limit_zones(). 9e27e8fe8 netdev-offload: Fix deadlock/recursive use of the netdev_hmap_rwlock rwlock. 087439e41 ofproto-dpif-xlate: Fix use-after-free when xlate_actions(). bf9c834e6 ci: Separate DPDK from OVS build. bf1b32e20 ovsdb-idl.at: Fix write-changed-only tests without change tracking. c6cb82887 tc: Fix cleaning chains. 29c61a402 python-stream: Handle SSL error in do_handshake. 615548e53 dpif-netlink: Fix memory leak dpif_netlink_open(). 42edc9a1d ofp-parse: Check ranges on string to uint32_t conversion. d3a479c4b learning-switch: Fix coredump of OpenFlow15 learning-switch. 9529e9aa9 ovsdb: Allow conversion records with no data in a clustered storage. 7006bb112 ovsdb: Check for ephemeral columns before writing a new schema. 27678b3a1 ovsdb-tool: Fix cluster-to-standalone for DB conversion records. 771c989a9 ovs-tcpdump: Stdout is shutdown before ovs-tcpdump exit. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: update to v1.1.2Bruce Ashfield2023-08-241-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cni to version v0.8.0-171-gca96f4c, which comprises the following commits: a899051 libcni: add version v1.1.0 c768dcb SPEC: bump version to v1.1.0-dev e34f9d2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.11.0 2161bf8 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.7 b6608f8 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4 15612fc build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.9.2 10ec024 build(deps): bump actions/setup-go from 3 to 4 db718fc build(deps): bump github.com/containernetworking/plugins 9302e5f enable more linters 05f80e4 3rd party plugins - spiderpool aef15f6 Porting over getCachedNetworkInfo routine from cri-o 435fcb1 add meeting link to README d4c7848 ci(lint): enable errorlint linter 1ffb655 fix wrong notes for ValidateInterfaceName() 420e594 Extend capabilities with cgroup path 024c57f build(deps): bump github.com/vishvananda/netns from 0.0.2 to 0.0.4 121798a build(deps): bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.8.0 da8672c ci(lint): setup lint job 8ac5c8a build(deps): bump github.com/onsi/ginkgo/v2 from 2.6.1 to 2.7.0 5fa3464 build(deps): bump github.com/vishvananda/netns from 0.0.1 to 0.0.2 45761d9 update github.com/vishvananda/netns to v0.0.1 aeb1d8e build(deps): bump github.com/containernetworking/plugins dd2d40c build(deps): bump github.com/containernetworking/cni in /plugins/debug 9795493 Update dependabot.yml 0a26996 build(deps): bump alpine in /.github/actions/retest-action cc03617 build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.24.2 55be4cc Create dependabot.yml f024754 refactor: move from io/ioutil to io and os packages Bumping cni-plugins.git to version v1.1.0-181-g9d9ec6e3, which comprises the following commits: c1a7948b vrf: fix route filter to use output iface 8e69e38d test_linux.sh: Do not fail if called twice 0a100e5d meta: firewall: Fix firewalld test with non-abstract sockets 3eb775c5 plugins: meta: portmap: Implement a teardown() fast path 719f60bb utils: iptables: Use go-iptables' ChainExists() 2ba7f160 spoofcheck: Make use of go-nft's ApplyConfigEcho() ba41448f test: install binaries using `go install` 13fd3de7 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 470eee13 [tuning]add ability to set tx queue len 2216cff9 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.11.0 83029bef build(deps): bump golang.org/x/sys from 0.7.0 to 0.9.0 48aa2f4e Fix race conditions in DHCP test ca12d49b Add routes propagation for VRF plugin 0389a290 github: remove stale issue cleanup edab9efd tap: allow for a tap device to be created as a bridge port 1b2dc7c2 build(deps): bump alpine in /.github/actions/retest-action 7e918412 [sbr]: Ignore LinkNotFoundError during cmdDel 99b475ab build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9 d8fc886b Bump to golang 1.20 to pick up go1.19.6 / go1.20.1 CVE fixes c347755f Fix ValidateExpectedRoute with non default routes and nil GW 5b7a263e tuning: fix cmdCheck when using IFNAME 135292e0 bridge, del: timeout after 55 secs of trying to list rules 7dcd738d bridge, spoofcheck: only read the prerouting chain on CNI delete 83fe87c5 build: consume specific tables/chains via go-nft 090af7db bridge: add vlan trunk support 10ddd9e4 enable govet and unparam linters 435ef223 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 821982da Add parameter to disable default vlan cac8230e bridge, spoof check: remove drop rule index bc5f3def go.mod: bump all deps 7bbd4d19 linter: fix ginkgolinter errors 6c0d73ec Fix wastedassign linter errors 086f7eb7 build(deps): bump actions/stale from 7 to 8 d71d0f2d Fix revive linter errors 00e0d3b7 build(deps): bump actions/setup-go from 3 to 4 2fb0efe8 enable durationcheck, predeclared, unconvert, unused and wastedassign linters c0fe3b7b remove govet and gofmt from test_linux.sh 09f36a29 enable ginkgolinter linter a02bf4b4 enable revive linter 79f52468 enable gocritic linter 5a7619c0 enable gosimple linter 709e775b enable nonamedreturns linter 3a04eb00 enable ineffassign linter 16ba4222 enable contextcheck linter 177e0bf2 enable staticcheck linter d12b81de ci(lint): setup golangci-lint 6223674f ci(lint): setup yamllint linter Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com> 9ee4d322 Fix overwritten error var in getMTUByName 2d1005ec Update tests to utilize ginkgo/v2 23c21341 Update ginkgo to v2 in go.mod, go.sum, vendor 01d00314 Tap plugin 9a2f7633 build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.26.0 29e64861 build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 fb5d195f Only check ipv6 when an IPv6 is configured ac7cf825 Add support for in-container master for macvlans c798f809 Add support for in-container master for ipvlan 9fa80036 Add support for in-container master for vlans 2c4c27eb bridge: re-fetch mac address 0fc229df Update Allocate method to reuse lease if present ec924a4b build(deps): bump github.com/safchain/ethtool to v0.2.0 20a92ff3 build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0 fa2ed0fd Add IPv6 support for AddDefaultRoute b769956c build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.2 df141fc7 build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.5.0 35047644 build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5 352f181f build(deps): bump alpine in /.github/actions/retest-action 91b1a0e3 build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.1.0 648dd2e1 build(deps): bump github.com/vishvananda/netlink 615420fa build(deps): bump github.com/alexflint/go-filemutex from 1.1.0 to 1.2.0 90ed30a5 build(deps): bump github.com/Microsoft/hcsshim from 0.8.20 to 0.9.6 020b8db6 build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.24.2 c5e81e3c Update dependabot.yml 3be17f4a build(deps): bump actions/checkout from 2 to 3 f64652fa build(deps): bump actions/stale from 4 to 7 edfd2274 build(deps): bump actions/setup-go from 2 to 3 d7efab18 Update dependabot.yml 12471312 Update dependabot.yml c1e2be27 ci(deps): setup dependabot fd9408bc Fix tuning path validation 9dc2ed2c Update email to gmail 6b30e290 Update portmap test's iptables error check 1a6f4789 Remove references to io/ioutil package 63a6dbcf fix bug on getting NextIP of addresses with first byte 0 198ab129 Fix path substitution to enable setting sysctls on vlan interfaces 0463fd19 support masquerade all config 87c3643d host-local: remove unused Release(ip) from type Store interface f89a0057 Cleanup Socket and Pidfile on exit 7fcf8e48 dummy: Create a Dummy CNI plugin that creates a virtual interface. c78e1e46 Use the same options for acquiring, renewing lease 9f4090da bridge: update vlanFiltering variable to make code more readable f1aa6c26 ci: only rerun failed jobs on `/retest` bf4068e1 build: support riscv64 7c452c77 Check for duplicated sysctl keys f8917228 Update github.com/vishvananda/netlink to v1.2.0-beta a70e87c3 bridge: support IPAM DNS settings 0a0853a7 Bump to go 1.18 8b8825bc V2 API support for win-overlay CNI e3d563b0 bug: return errors when iptables and ip6tables are unusable e952f16c github: ignore issues with "keep" label from stale closing 5ad4fcf8 Make description for `static` plugin more exact 57c1cb50 workflow: add something to auto-close stale PRs 7a989794 ipam/dhcp: Fix client id in renew/release 7aa07efe call ipam.ExceDel after clean up device in netns fix #666 96c3af81 Add sysctl allowlist Bumping flannel-cni-plugin.git to version v1.1.2-13-g6464faa, which comprises the following commits: 6464faa Fixed release artifacts path bff4cf9 FIx bug in actions/download-artifact@v3 ffabfad Update go.mod 088da1a Use writeAndSyncFile instead of just write 04854df Update ginkgo to v2 eb47c95 Upgrade go version to 1.20.5 6f13a99 Fix some errors thrown by lint tool 3511c0a Updated Docker registry f271951 only include the binary file for one architecture in the release archive 1537c92 update of GH workflows Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-viewer: update to 11.0-tipBruce Ashfield2023-08-241-1/+1
| | | | | | | | | | | | | | | | Bumping virt-viewer to version v11.0-52-gde864c1, which comprises the following commits: de864c1 Read oVirt CA and pass it to gtk-vnc db3b070 Translated using Weblate (Friulian) b2a50c1 session-vnc: Plug leak in error path 97ed170 rpm: convert license to SPDX format f374f7a Add support for usb-redirect-on-connect in vv-files 0a6155c src: Fix ssh tunnel with non-POSIX remote shells dec15f9 build: use full_path() for referencing programs f7900e4 Translated using Weblate (German) 1e99e5e ci: refresh with latest lcitool manifest Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: update to 9.6.0Bruce Ashfield2023-08-242-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libvirt to version v9.6.0-18-g1ca3c339a1, which comprises the following commits: fb12c5e049 Release of libvirt-9.6.0 fe306190bf NEWS: Mention CVE-2023-3750 and BeeGFS migration support a3a8cc0415 Translated using Weblate (Korean) c964dd09f0 NEWS: Document my contributions for upcoming release 010cfec969 Translated using Weblate (Ukrainian) caf4344339 Translated using Weblate (Czech) e33054b72c rpm: Delete unused macros a7bc8d1606 rpm: Switch to new macros for handling of systemd units 3bfc76a953 rpm: Introduce new macros for handling of systemd units df1e4e34cc rpm: Remove custom libvirtd restart logic ea45933d35 rpm: Reduce use of with_modular_daemons 1f3065a552 rpm: Reorder scriptlets 05ef4da4d7 rpm: Style/alignment tweaks bdb10f9de8 rpm: Bump min_fedora 8e958c1644 Update translation files dab2b7529b po: Refresh potfile for v9.6.0 ea4c67f567 remote: handle partial data transmission 0cec8abdba docs: formatdomain: Mention the QEMU requirement for discard_no_unref 3d9e35b837 virrandom: Accept "nodedev" driver in virRandomGenerateWWN() baeefe0327 qemu_domain: Partially validate memory amounts when auto-adding NUMA node 5b6badcfbf Translated using Weblate (Czech) 658660681c util: file: Mark 'BeeGFS' as shared filesystem 51ae80d6a7 ci: Switch to OpenSUSE Leap 15.5 edf17b5e99 sync_qemu_models_i386.py: Add missing features a2c6000c72 cpu_map: Add missing feature "pbrsb-no" db81435b92 cpu_map: Add missing feature "psdp-no" 4143916b1d cpu_map: Add missing feature "fbsdp-no" fb426d7957 cpu_map: Add missing feature "sbdr-ssdp-no" 95a442dee6 cpu_map: Add missing feature "mcdt-no" 8cb0c11f29 docs: Mention vhostuser for queues and queue_size ba9a8b5b56 NEWS: qemu: Implement QEMU NBD reconnect delay attribute 411cbe7199 remote: fix stream use-after-free 54e59e9135 net: add debug logs 6c3ef66cc6 qemu_tpm: Try harder to create emulator state 1b33578854 virfile: Introduce virDirIsEmpty() ac9c9b621f conf/domain_validate: Validate the disk queue_size cef25914eb conf/domain_validate.c: Improve the err for queue validation 986596f7a5 Translated using Weblate (Swedish) 033c4fcddf qemu_monitor: Remove helpers for 'query-commands' 0af5a514ee qemu: capabilities: Don't probe 'query-commands' d8b6801095 qemu: capabilities: Probe presence of commands from QMP schema instead of 'query-commands' 7ca777cc09 node_device: Don't leak error message buffer from virMdevctlListDefined|Active 294cf405d5 qemu: capabilities: Retire QEMU_CAPS_(IDE|SCSI)_DRIVE_WWN 37f20a9bdb qemu: Always assume support for QEMU_CAPS_IDE_DRIVE_WWN 5eed97e313 qemu: Always assume support for QEMU_CAPS_SCSI_DISK_WWN f276dbeefe qemu: capabilities: Update capabilities test data for qemu-8.1 dev cycle 9a47442366 storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' a7f7bfa347 qemuTestDriverInit: Don't autopopulate qemu capabilities when initializing driver b1126c46eb qemudomaincheckpointxml2xmltest: Use real 'x86_64' capabilities in all test data f45aff1635 qemuagenttest: Use real x86_64 capabilities for parsing domain definitions 86edcfac4d tests: qemudomainsnapshotxml2xmlout: Use real 'x86_64' capabilities in all test data faa4d488e5 qemumemlocktest: Use 'testQemuInsertRealCaps' bb142b6db1 testutilsqemu: Introduce 'testQemuInsertRealCaps' helper 4cac4867ad testQemuGetRealCaps: Extract caching of the caps into a new helper b5ddd072bc testQemuGetRealCaps: Strip the default machine alias before insertion into cache 64dcb59756 domaincapstest: Use obviously fake firmware name in capabilities 0cbe448977 testutils: Print number of failed tests c90c97a734 Properly mark auto-added 'terminator' virStorageSource 49aca0a845 qemu: driver: Reformat helpers for saving VM state d051e0623c util: add logging about node suspend availability 6103584284 src: remove dep on systemd-logind.service from unit files 29f2222dd5 util: relax requirement for logind to be running 38abf9c34d src: set max open file limit to match systemd >= 240 defaults 04b82f961b rpc: automatically raise max file limit in all daemons c41cc852f6 util: add helper for raising the max files limit 3967174d03 util: remove pointless wrappers for setrlimit/getrlimit 427eef8959 src: remove deps on ip[6]tables/firewalld.service from systemd units a315070047 src: remove After=local-fs.target from systemd units c7ceac59f3 tests: Refresh valgrind suppressions 7ba20863a7 meson: Annotate each test() with 'suite' 3cde509f1a storage: zfs: Use 'zfs list' to check pool status fa0d5f4ebc nodedev: report mdev persistence properly 988f8443fb qemu: require memfd memory for virtio 'blob' support ecbce92371 qemu: Adapt to new way of specifying PC speaker f9641d2c37 qemu_capabilities: Retire QEMU_CAPS_USB_STORAGE_REMOVABLE 1a663b53c0 qemu: Always assume QEMU_CAPS_USB_STORAGE_REMOVABLE d90a34cf29 virrandommock: Drop virRandomGenerateWWN ae7df11377 test_driver: Pass virt_type to virNodeDeviceDefParse() in testNodeDeviceCreateXML() b857ad0696 virrandom: Fix printf format string in virRandomGenerateWWN() f6e88f6113 virsh: Make cmdVersion() work with split daemon 59d73ae768 NEWS: cpu_map: Add SapphireRapids cpu model c002e51dab NEWS: qemu: Support removable attribute for scsi disk 8417c1394c qemu: S390 does not provide physical address size aece25f665 conf: domcaps: Add 'async-teardown' domain capability f5d4f5c8ee qemu: Add NUMA node automatically for memory hotplug 2d7542a8a5 docs: expand clangd instructions 6b8cf9ffff Translated using Weblate (Georgian) 8311d1794f Translated using Weblate (Georgian) fc366d7e13 Translated using Weblate (Georgian) 6853f83613 Translated using Weblate (Georgian) 36b247b908 docs: Reword ninja invocation note to clarify build directory ef7228f5ca docs: Fix deprecated use of implicit meson "setup" command 4d50cd23c9 docs: Point to mailing list archives from submitting-patches 7160215146 docs: Advise running CI tests prior to submission 941fc36f11 docs: Reword "Preparing Patches" to clarify 3da8d8b5b1 docs: Add config instructions for clangd with libvirt 401a6171a3 docs: Point to compiling guide from code contribution guide 7218970862 docs: Link main "contributing" from programming-specific guide 225f6de45f docs: Missing "full-stop"/"period" on some bullet items cccf129c2d docs: Link to main docs directory from Quick Links 14026db9b0 nodedev: update mdevs from the mdevctl thread 9b7fadc5dc nodedev: refactor mdevctl thread functions 37481aa1f1 nodedev: transient mdev update on nodeDeviceCreateXML 851c5f075b qemu_domain: Deduplicate targetNode check in qemuDomainDefValidateMemoryHotplugDevice() b9eeeebddb libxl: Advertise support for VIR_MIGRATE_CHANGE_PROTECTION f3ed5c2713 libxl: Don't attempt to resume domain on canceled migration ded44a0406 node_device: Enclose Linux specific code in ifdef __linux__ 3bf02acdc5 qemu: allow use of async teardown in domain 65c6513811 qemu: add run-with async-teardown capability 584820b6bb tests: add capabilities for QEMU 8.1.0 on s390x d8e95ab6b7 tests: remove acpi support from s390x ccw hotplug tests 1ed695bcff qemu: Support removable for scsi disk 5f7f6ceb47 Revert "meson: attr_dep switch to dependency()" 00cd7d2b1a Translated using Weblate (Georgian) cd4bdcb8cf NEWS: Mention overrides for AppArmor profiles and abstractions 4c6feb832f apparmor: Make all profiles extensible 21a84ec994 apparmor: Improve virt-aa-helper include b6092de883 apparmor: Make abstractions extensible 84e01d182e apparmor: Only support passt on 3.x 63a312fa2d apparmor: Allow version-specific bits in abstractions too 19eb8abc9a apparmor: Allow version-specific bits in profiles 4a779f21bd meson: Detect AppArmor 3.x b7ca6f93f1 NEWS: Fix vertical spacing 6742edff2e Post-release version bump to 9.6.0 692543b5cc Release of libvirt-9.5.0 7f1562a739 NEWS: Document changes for the release 95ca371f3b NEWS: Move section about 'discard_no_unref' to features 63792a286d Revert "lxc_fuse: Tell FUSE that /proc/meminfo is nonseekable" 4163dcc4cb Translated using Weblate (Ukrainian) a9e7d5c587 Translated using Weblate (Korean) 28141adfdc scripts: Fix the flake8 syntax-check failures d7fb8deb6a Revert "apparmor: Add support for local profile customizations" d725932a28 Update translation files db1cf10784 po: Refresh potfile for v9.5.0 a46ad01d5e Translated using Weblate (Korean) 2d6659e778 qemu: prevent SIGSEGV in qemuProcessHandleDumpCompleted 83686f1eea qemu_passt: Actually use @logfd ceb4dc8e17 docs: Move passt log file in our example XML 8511b96a31 qemu_passt: Precreate passt logfile f4fea84f59 Explicitly reject unsupported storage types for legacy config generators db4dd170a2 tests: qemucapabilitiesdata: Update data for qemu-8.1 dev cycle 7b793a00bd util: don't validate empty params b7f7f07542 qemuDomainWaitForDeviceRemoval: recheck the value of priv->unplug.alias when timeout 2fbc1b05d9 NEWS: Update NEWS with new discard_no_unref option b855f8ea1e Add discard_no_unref option for qcow2 images 1092a88e13 qemu: capabilities: Introduce QEMU_CAPS_QCOW2_DISCARD_NO_UNREF 91856be29b qemuxml2(argv|xml)test: Add case for validating proper DIMM slot validation e4b4765f4f conf: Allow omitting 'slots' attribute of <maxMemory> e3ce39195c qemu_domain: Properly validate count of memory slots a52c68443d qemu_command: Always use modern syntax of '-m' 1dddd44451 virGlobalInit: Make glib init its own global state a5bf2c4bf9 NEWS: Mention an improvement for virConnectBaselineHypervisorCPU ce6d1dca6d qemu: Include maximum physical address size in baseline CPU be1b7d5b18 qemu: Report physical address size in domain capabilities 078e645cc3 conf/nwfilter: Initialize size_t attr to zero e31ac985f5 meson-dist: Use shutil.copy for copying a file 2ed41d7cd9 util: Use g_ascii_strtoll fd340227a7 util: Remove virStrToLong_l e940cac98e util: Parse RSS into ullp a7ee9eac83 conf: virtiofs: validate that the target dir is unique even for hotplug 063e8b9d62 meson: Use dependency().found() instead of conf.has() 2ef5876e2b meson: numactl_dep switch to dependency() dffeef89ef meson: attr_dep switch to dependency() 63ca3e656c meson: acl_dep switch to dependency() 97f0bd00b4 Translated using Weblate (German) d09b73b560 qemu: Drop @unionMems argument from qemuProcessSetupPid() 83adba541a qemu: Allow more generous cpuset.mems for vCPUs and IOThreads fddbb2f12f qemu: Don't try to 'fix up' cpuset.mems after QEMU's memory allocation 9b743ee190 apparmor: Add support for local profile customizations 17565ee0aa qemucapabilitiestest: Add data for the qemu-8.1 8b11489284 qemumonitorjsontest: Work around deprecation of 'vcpu' argument of 'trace-event-get-state' debe7f5406 Translated using Weblate (Korean) 1b8c1ce704 virnetsshsession: Adapt to changed libssh2 API 794c583f46 docs: fix changed API calls bc2c392bd1 conf: nwfilter: Refactor virNWFilterFormatParamAttributes 3a5f9a4041 conf: nwfilter: Refactor virNWFilterIncludeParse 9cb4e78ffd virNWFilterRuleDefDetailsFormat: Refactor formatter 59a1455012 virNWFilterRuleParse: Refactor attribute parser 3774fca88f virNWFilterRuleParse: Parse 'priority' via 'virXMLPropInt' f0c5da0f24 virNWFilterRuleDef: Turn 'action' and 'tt' into proper enum types 43f280cc65 conf: nwfilter: Refactor XML formatting in virNWFilterRuleDefFormat d50eb74b9d conf: network: Refactor XML parsing in virNetworkDHCPDefParseXML 7abf1d864b nwfilterxml2xmltest: Add test case for parser and formatter quirks dcd49d2cd6 util: xml: Introduce virXMLNodeGetSubelementList 4aafa900ce virNetworkDHCPDefParseXML: Refactor cleanup 355582e3df virNetDevBandwidthParse: Use virXMLNodeGetSubelement instead of looped parser 036e677886 virNetDevBandwidthParseRate: Refactor parsing ede5ee9eca virNetDevBandwidthParse: Use 'virXMLPropUInt' to parse 'classID' 92332ade1f virNetDevBandwidthParse: Don't validate element name 79b04c9606 testQEMUSchemaValidateObjectMember: validate QMP object member deprecation 9d6867198d qemuMonitorSetBlockIoThrottle: Drop 'diskalias' argument f0296aa9a3 qemuMonitorGetBlockIoThrottle: Drop 'diskalias' argument 52c874d913 qemumonitorjsontest: Use 'id' instead of deprecated 'device' argument of 'block_set_io_throttle' 4ba032a2a2 qemu: Refuse setting <iotune> for 'SD' disks 6d6a87f229 qemuDiskConfigBlkdeviotuneEnabled: Make 'disk' argument const cec5a9989c qemumonitorjsontest: Drop 'schema-meta' case 7975702aec Drop unused qemuMonitorTestAddItemParams 6019679092 testQemuMonitorJSONqemuMonitorJSONSetBlockIoThrottle: Rewrite using qemuMonitorTestAddItemVerbatim 1885c7a9ca testQemuMonitorJSONqemuMonitorJSONSendKeyHoldtime: Rewrite using qemuMonitorTestAddItemVerbatim b4f07b371d testQemuAgentFSTrim: Rewrite using qemuMonitorTestAddItemVerbatim 5e7def0b81 testQemuAgentCPU: Rewrite using qemuMonitorTestAddItemVerbatim f8625248ac virRaiseErrorLog: Don't skip error printing when enabling debug logging env variable 25420111ba ci: fix Cirrus CI jobs run from merge requests 8b9d2bda8a qemu: Set proper PCI backend for <interface/>-s that are actually hostdevs adf67ca987 ci: refresh with latest lcitool manifest f26923fb2e qemuMonitorTestAddItemExpect: Remove unused helper e79ccbae1c qemuMonitorJSONTestAttachOneChardev: Rewrite using qemuMonitorTestAddItemVerbatim 9482098395 testQemuMonitorJSONAttachChardev: Move all setup code under virTestRun 594fe5f882 qemuMonitorTestAddHandler: Remove return value d74f8e95e3 qemuMonitorTestAddItemVerbatim: Simplify cleanup 2380242928 docs: Use '--exit-status=' option for 'rst2html5' 9f49f60aca docs: go: Add 'go-import' metadata via rST 54c1f31fda docs: page.xsl: Drop passhrough of <script> elements into header 464450772f docs: newapi: Remove unused 'docomponents' template 1c7335add9 qemu_passt: Format portForward device even without address a36318be9d conf: Reject invalid device's <seclabel relabel='yes'/> with no <label/> 68545ed21b Post-release version bump to 9.5.0 80d670f63d Release of libvirt-9.4.0 80bb89ad0a Translated using Weblate (Georgian) 0033998e9a conf: node_device: use separate variables for parsing integers c47e17689e include: Fix 'Since' for new VIR_MIGRATE_PARAM_COMPRESSION_* macros 9222f35dc6 NEWS: Document my contributions for upcoming release 632999b929 Translated using Weblate (Korean) e35b5df3f5 Translated using Weblate (Ukrainian) a1bdffdd96 qemu_command: Generate .memaddr for virtio-mem and virtio-pmem 2c15506254 qemu: Fill virtio-mem/virtio-pmem .memaddr at runtime 677156f662 conf: Introduce <address/> for virtio-mem and virtio-pmem f08309d868 conf: Run virDomainInputDefPostParse() only for VIR_DOMAIN_DEVICE_INPUT 997994b6b1 Update translation files e712afcab3 po: Refresh potfile for v9.4.0 1a86c27edb sync_qemu_models_i386.py: Add missing features af6b5c1edf sync_qemu_models_i386.py: Fix complaint from flake8 b4560dc69b cpu_map: Add missing feature "vnmi" b038d52e30 cpu_map: Add missing feature "stibp-always-on" 5d1a8d0053 cpu_map: Add missing feature "prefetchiti" e680f69f77 cpu_map: Add missing feature "null-sel-clr-base" 822c5df993 cpu_map: Add missing feature "no-nested-data-bp" 0876e2cd9f cpu_map: Add missing feature "lfence-always-serializing" 877f609b8c cpu_map: Add missing feature "flush-l1d" bd93b13294 cpu_map: Add missing feature "fb-clear" aff0caeae8 cpu_map: Add missing feature "cmpccxadd" 7d57f0f1e5 cpu_map: Add missing feature "avx-vnni-int8" 3836efdaaf cpu_map: Add missing feature "avx-ne-convert" c8c44a59fe cpu_map: Add missing feature "avx-ifma" 01be1472f9 cpu_map: Add missing feature "auto-ibrs" c0dfb6b953 cpu_map: Add missing feature "amx-fp16" c8d67f644c cpu_map: Add missing feature "amd-psfd" a8c983d0fa docs: Clarify values reported by virDomainMemoryStats() 6a15e22265 docs: newapi.xsl: Generate overall docs for enums too 1fa7443dc7 docs: newapi.xsl: Generate docs on generic typedefs 96c8d39af0 cpu_map: Add SapphireRapids CPU model 44a0f2f0c8 nodedev: update transient mdevs e53291514c qemu_hotplug: Temporarily allow emulator thread to access other NUMA nodes during mem hotplug 3ec6d586bc qemu: Start emulator thread with more generous cpuset.mems c4a7f8007c qemuProcessSetupPid: Use @numatune variable more 1bb439e4b0 qemu: Use thread-context even with numatune's restrictive mode 1716ec3d36 cpu-data.py: Filter out apic current logical processor 17e92b4305 NEWS: Mention support for compressing parallel migration 3b6d69237f Revert "conf: Introduce MTE domain feature" 4fd5f0d660 Revert "qemu:: Introduce QEMU_CAPS_MACHINE_VIRT_MTE capability" 178a66f9af Revert "qemu: Validate MTE feature" 167138a525 Revert "qemu: Generate command line for MTE feature" 4850a9a39b rpm: Explain BuildRequires on qemu-img 17c8a173b6 numa_conf: Deny other memory modes than 'restrictive' if a memnode is 'restrictive' f6ba9fc12a numa_conf: Move memnode mode validation into virDomainNumaDefValidate() a152d856c3 virDomainNumatuneNodeSpecified: Fix const correctness 90404c5368 docs: make isa-debugcon example more useful / directly applicable f06d15b512 docs: fix typo in isa-debugcon example ffa258a39d qemu: support set parallel migration compression method 4ab5591c95 virsh: Add migrate options to set parallel compress level 150ae3e62b Add public API for parallel compression method 5ee27c37e6 docs: xsl: Simplify templating XSL f11c773014 docs: newapi.xsl: Remove support for generating index page 7aa2706d3b docs: html: Add a manually written index page 02e7f8d709 css: Remove override of width for 'hvsupport' page dc9c6c5405 hvsupport: Split out common APIs from hypervisor API section eca6846376 scripts: hvsupport: Properly register virConnectOpenAuth/virConnectOpenReadOnly APIs ef01df4a5c docs: Remove XSLT table of contents generator 5ff58a0ce7 docs: index: Convert to 'rst' c0a06c081c docs: acl: Convert to 'rst' 0f1d6ef6e7 css: Fix styling of the "3 panel" pages 82db6fb765 css: mobile: Make colums in "3 column" mobile layout wider 2b9d96fcac css: mobile: Fix hiding of big logo in mobile layout 0e8f61beba css: mobile: Fix responsive design of 'docs' and 'knowledgebase' pages 1a39a07879 css: mobile: Replace tabs with spaces e51922335c css: Drop styles for '.gitmirror' class e21b32ed4f css: Drop styles for '.mail' class 08de356e1d css: Drop style for 'p.image' selector 79e1853186 css: Drop style for '#changelog' id e28fe28b04 css: Drop styles for '#projects' id af621caa6b conf: numa: Allow formatting 'none' values for 'associativity' and 'policy' of cache 0d5fc7219a virDomainNumaDefNodeCacheParseXML: Refactor parsing of cache XML a8a63587ff qemuxml2xmltest: Modernize all 'audio-' cases c051fa874f qemuxml2argvtest: Use real caps instead of fake caps for 'audio-default-*' cases 36d7d87c87 qemuxml2xmlout: Replace symlinks of all 'audio-' tests by real files b10bc8f7ab qemu: Generate command line for MTE feature c6c9b5d251 qemu: Validate MTE feature 1347a19f75 qemu:: Introduce QEMU_CAPS_MACHINE_VIRT_MTE capability 720e8f13ff conf: Introduce MTE domain feature 37e41b7f16 qemu: Drop @forceVFIO argument of qemuDomainGetMemLockLimitBytes() 4f355fa5b7 qemu: Drop @forceVFIO argument of qemuDomainAdjustMaxMemLock() c925bb9273 qemu_domin: Account for NVMe disks when calculating memlock limit on hotplug 9884e89236 schemas: backup: Allow missing 'type' attribute for backup disk 1222ada2af conf: backup: Fix logic for generating default backup filenames de48ade195 virDomainBackupDefAssignStore: Restructure control flow a091edf9db virmockstathelpers: Adapt to musl-1.2.4 4a681995bc Translated using Weblate (Hungarian) 517d76466b qemu: Update documentation for dbus_daemon qemu.conf key 4400f63636 meson: Stop looking for dbus-daemon 769de39f50 qemu: Find dbus-daemon at runtime db91bf2ba3 qemu: Update documentation for qemu.conf keys b134a9bd2a meson: Stop looking for QEMU helpers 934113d376 qemu: Find helpers at runtime ef91f9e52a util: Introduce virFileFindInPathFull() d92054c867 util: Small refactor dcb9ee99f3 ci: integration: Flip QEMU upstream integration tests to Fedora 38 2bb0efa367 ci: Flip mingw jobs from Fedora 37 to Fedora 38 ffd2a97070 ci: Drop Fedora 36 target 96ffb7318e ci: Add Fedora 38 target 45abfaf68d Translated using Weblate (Hungarian) 9469587314 virfirewallmock: Replace virFindFileInPath() with virFirewallDIsRegistered() c033377a17 util: include virfirewall.h in virfirewalld.h 3d6bc5c611 conf: qemu: Add support for multi-channel mode for 'usb' sound cards 783c6bc2f0 conf: Register autoptr cleanup for 'virDomainSoundDef' and refactor virDomainSoundDefParseXML d6d4cfa5fc qemuxml2(argv|xml)test: Modernize 'sound-device' case 351504744e qemuxml2(argv|xml)test: Remove 'sound' case 374c716af9 docs: formatdomain: Use code blocks to emphasize various sound device options 30a1ceb67c qemu: Report domain name in unexpectedly closed monitor message 25ce34998b logging: Provide empty VIRTLOGD_ARGS in the unit file 236d2c0f4a .gitlab-ci.yml: Fix Leap 15.4 codestyle job 9b8bb536ff qemu: hotplug: Reorder setup of disk backend metadata d18572b4b7 meson: Improve initconfdir defaults 6f42d9610c meson: Move definition of os_release e54a419693 rpm: Set initconfdir explicitly 32f772e986 meson: Use initconfdir 9850b37e39 meson: Introduce initconfdir option 4419e74117 util: Improve comment for workaround e533074983 qemu: Fix error message d4c39bad85 cpu_riscv64.c: add update() implementation 2f197ab695 meson: Fix qemu_{user,group} defaults for Arch b4f5e6c91b tools: virsh-domain: display progress with enhanced granularity 51cfca2210 tools: virsh-domain: refactor variable initialization 4b5a9e34ad qemu: Use configured iothread poll parameters on startup 83eee66f81 conf: Store the iothread 'poll' settings in the XML 6df1d137dd virsh: cmdIOThreadSet: Use bigger types for --poll-grow and --poll-shrink 6f9d66c828 qemu: Store all iothread's 'poll*' attributes as unsigned long long 6d8dcc644c qemu: Remove iothread 'poll-' value validation e094d21004 virsh: cmdIOThreadSet: Refactor to use virTypedParamList 07652410a7 virTypedParamsValidate: Allow typed params to be both _UINT and _ULLONG b5ee977d17 virTypedParamsValidate: Refactor variable declaration and cleanup 111eeba7a7 util: virtypedparam: Introduce virTypedParamsGetUnsigned e280e83bff util: typedparam: Introduce virTypedParamListAddUnsigned f9f40a6d4b util: virtypedparam: Remove return values from virTypedParamListAdd* APIs 29dd390ea6 util: virtypedparam: Store errors inside virTypedParamList ec3a076c9e util: virtypedparam: Refactor return value of virTypedParamListStealParams 88925728f6 util: virtypedparam: Privatize definition of struct _virTypedParamList 50be70ded3 Use 'virTypedParamListFetch' for extracting identity parameters list 0fac024958 util: virtypedparam: Introduce 'virTypedParamListFetch' 8ea33c8c18 qemuDomainGetStatsBlock: Don't directly access virTypedParamList e3dff704bf util: typedparam: Introduce 'virTypedParamListConcat' 0d09e79b42 util: virtypedparam: Introduce virTypedParamListNew() 2e18d84746 virtypedparam.h: Consistently use contemporary header style 6813a46db5 util: virtypedparam: Simplify error handling in virTypedParamListAdd* ff8a626c58 virTypedParameterAssignValueVArgs: Ensure proper typed param type in caller 81391c0e1d virTypedParamsDeserialize: Remove unnecessary line breaks 49dc447d31 util: virtypedparam: Use proper enum type for all switch() statements d9ed32bb27 virTypedParameterAssignValue: Drop 'copystr' parameter 30403ef1d6 Post-release version bump to 9.4.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to 1.13.1Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | Bumping skopeo to version v1.13.1-4-g416218f5, which comprises the following commits: 882b087b Packit: remove pre-sync action 3162e17e [release-1.13] Bump to v1.13.2-dev 8ace37a4 [release-1.13] Bump to v1.13.1 cac20311 [release-1.13] Bump c/common to v0.55.2 d5b1f34e [release-1.13 backport] [CI:BUILD] Packit: install golist before updating downstream spec 85d99af2 [release-1.13] Bump to v1.13.1-dev 8b9999e1 Bump to v1.13.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.8Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.8-7-gaa68c400, which comprises the following commits: aaed58c8 add a test case about missing stricky bit 3d3a2b38 fix some file mode bits missing when doing mount syscall 7c36375a Update github actions packages in validate workflow 1fa89476 VERSION: back to development 82f18fe0 VERSION: release 1.1.8 ef6491ec tests/int/delete: make sure runc delete removes failed unit ebdd4fa6 [1.1] tests/int: add "requires systemd_vNNN" 1188c5a1 runc delete: call systemd's reset-failed 71e76007 libct/cg/sd: remove logging from resetFailedUnit 3a4b3af6 tests/int/cgroups: remove useless/wrong setting 6bc3f22a libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed. d375351b ci/cirrus: enable rootless tests on cs9 e1a8b52f tests/int/cgroups: filter out rdma Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.1.8Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.8-7-gaa68c400, which comprises the following commits: aaed58c8 add a test case about missing stricky bit 3d3a2b38 fix some file mode bits missing when doing mount syscall 7c36375a Update github actions packages in validate workflow 1fa89476 VERSION: back to development 82f18fe0 VERSION: release 1.1.8 ef6491ec tests/int/delete: make sure runc delete removes failed unit ebdd4fa6 [1.1] tests/int: add "requires systemd_vNNN" 1188c5a1 runc delete: call systemd's reset-failed 71e76007 libct/cg/sd: remove logging from resetFailedUnit 3a4b3af6 tests/int/cgroups: remove useless/wrong setting 6bc3f22a libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed. d375351b ci/cirrus: enable rootless tests on cs9 e1a8b52f tests/int/cgroups: filter out rdma Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v0.9.1Bruce Ashfield2023-08-241-3/+3
| | | | | | | | | Bumping podman-tui to version v0.9.1, which comprises the following commits: d77db5fd bump to 0.9.1 ad29f4fa Container create error fix when selecting a volume Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 4.6.0Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v4.6.0-14-g2215847e6, which comprises the following commits: f05f00717 do not redefine gobuild for eln 45fd917fa [CI:BUILD] RPM: define gobuild macro for rhel/centos stream 8ee1f1197 [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38 5831bd68b System tests: add test tags 954177e7e API: kill: return 409 on invalid state e4e983e7a Mention TimeoutStartSec in quadlet man page d68ee576e If quadlets have same name, only use first 94431182b Bump to v4.6.1-dev 38e6fab96 Bump to v4.6.0 8aec5997e Update release notes for v4.6.0 09b1da382 Ensure that we appropriately warn that TCP is insecure 0115a4800 CI: remove build without cgo task 598ebe8a1 libpod: use io.Writer vs io.WriteCloser for attach streams 574b78291 top: do not depend on ps(1) in container 255111269 api: fix doc for default ps_args 34274ce15 Add more tests for liveness probes with default hostname & named ports 48deafc64 Fix TCP probes when the optional host field is not given 6817e0ae3 Add support for using port names in Kubernetes health probes 5445bd6f0 [CI:DOCS] fix command incorrect in windows 50195c244 [CI:DOCS] Reformat and reorder table with --userns options 924bc7055 [CI:DOCS] Better document the default value of --userns e4c38e719 Add missing return after utils.InternalServerError() 7a4bd4c95 Fix markdown in docs for podman-network-create 7cbe41212 Fix multiple filter options logic for `podman volume ls ` 5ea019419 Should be checking tmpfs versus type not source b4859d283 Use constants for mount types 39b7ac99d Fix `podman container prune` docs for `--filter` 7ba306ec6 docs: podman-build --network add slirp and pasta c810420c8 docs: podman run --network mention comma separted names 2c970dd01 network create: document --internal better 5106b7a38 pkg/specgen: fix support for --rootfs on FreeBSD 41f809e3e systests: quadlet: fixes for RHEL8 061841c0c Fix windows installer 8f05405db Podmansh: Better error, increase timeout to 30s 2b683a400 Emergency gating-test fixes for RHEL8 d0dee61e7 Packit: remove pre-sync action 70e30a2be [CI:DOCS] Update RELEASE_NOTES.md with Makefile change b8ef289e3 Bump to v4.6.0-dev bfe2e0fca Bump to v4.6.0-rc2 145748d1f Makefile: `package` -> `rpm` be21bc082 Update release notes 8fffcf4d6 system tests: refactor registry code 624bb8350 machine start: qemu: wait for SSH readiness 732a02c57 machine start: qemu: adjust backoffs afe48ba36 auto update: fix usage of --authfile 24439cdd2 [CI:BUILD] Packit: downstream task action fix 7b3d47c3b Fix container errors not being sent via pod removal API 9d0470f12 netavark: macvlan networks keep custom nameservers 5583358f6 add hostname to network alias 2aea98cab libpod: set cid network alias in setupContainer() d0b0c6285 Fix: cgroup is not set: internal libpod error after os reboot 258135221 test/e2e: wait for socket a3a62854f api: fix slow version endpoint 28e92b9de manifest inspect: support authentication e354514dc libpod: don't make a broken symlink for /etc/mtab on FreeBSD c81a00101 make --syslog errors non fatal edc51d9ff Fixes typo in the path where quadlet looks for files a673bb23e [CI:DOCS] uidmap man pages: fix corrupt italics dd7dbb826 [CI:DOCS] podman-system-service.1.md: document systemd usage a312553fc Use bytes size consistently instead of human size 2ef2a671e bugfix: do not try to parse empty ranges 662cca7cc pkg/specgen: properly identify image OS on FreeBSD cf5c4c9ee [CI:DOCS] Document support of pod security context IDs c8cfcc253 pkg/specgen: add support for 'podman run --init' on FreeBSD fc8f229bd Remove 'inspecting object' from inspect errors ee6329374 Fix readonly=false failure a3598ff61 pkg/specgen: Add support for Linux emulation on FreeBSD e30197e6f Fix up podmansh man page 47e6ce19c Pass in correct cwd value for hooks exe f654f7cc7 specgen: honor --device-cgroup-rule with a new user namespace fcf673d5d specgen, rootless: raise error with --device-cgroup-rule f70189991 make image listing more resilient 62fc35c07 Trim whitespace from unit files while parsing ed5618759 play.go: remove volumes on down -f 04897ee64 Vendor c/common v0.55.2 ff71df0e8 system service: unset listen fds on tcp 6960a8183 [CI:DOCS] [Release Notes]: add static routes e4cf2afbc [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: update to 1.7.0Bruce Ashfield2023-08-243-296/+444
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping netavark to version v1.7.0-49-gab03eec, which comprises the following commits: 067bbde fix(deps): update rust crate serde to 1.0.180 0ae529b fix(deps): update rust crate serde_json to 1.0.104 e155cbf fix(deps): update rust crate serde to 1.0.179 e64a5a9 fix(deps): update rust crate serde to 1.0.176 6f5dc41 fix(deps): update rust crate clap to 4.3.19 074de60 fix(deps): update rust crate serde to 1.0.175 2a2d066 fix(deps): update rust crate clap to 4.3.17 cb49b4f fix(deps): update rust crate clap to 4.3.15 69c802a fix(deps): update rust crate clap to 4.3.12 c627b76 fix(deps): update rust crate serde_json to 1.0.103 747384d [CI:BUILD] Packit: remove pre-sync action 64d55ee fix(deps): update rust crate serde_json to 1.0.102 cc1d2aa fix(deps): update rust crate nispor to 1.2.12 c227eed macvlan: use netlink type for bclim f92a065 bump netlink deps ba31874 fix(deps): update rust crate serde to 1.0.171 355ad29 fix(deps): update rust crate serde to 1.0.167 91665d4 fix(deps): update rust crate clap to 4.3.11 dd3a221 fix(deps): update rust crate serde to 1.0.166 0eb2033 fix(deps): update rust crate serde_json to 1.0.100 1340988 iptables: improve error when ip6?tables commands are missing 6f56308 fix(deps): update rust crate clap to 4.3.10 e7518b2 fix(deps): update rust crate zbus to 3.14.1 3455012 [CI:BUILD] RPM: Fix ELN build and cleanup spec 1691f8c bump to v1.8.0-dev 158e11b release v1.7.0 6ba1f8a Update release notes for v1.7.0 15af075 fix(deps): update rust crate tokio to 1.29 6e06b7d netavark: make --config required for dns 816d73d fix(deps): update rust crate serde_json to 1.0.99 14d4c54 fix(deps): update rust crate clap to 4.3.8 c5784bc [CI:BUILD] Packit: add Fedora downstream tasks d2d3092 run cargo update da6ee1f fix(deps): update rust crate serde_json to 1.0.97 0d62a35 fix(deps): update rust crate sha2 to 0.10.7 77b09a7 fix(deps): update rust crate clap to 4.3.4 68080c7 chore(deps): update dependency containers/automation_images to v20230614 0e976f1 fix(deps): update rust crate clap to 4.3.3 175c095 fix(deps): update rust crate log to 0.4.19 23c48d8 aardvark: fix missleading dns disabled log d31c157 firewall: add NETAVARK_ISOLATION_3 chain for strict isolation bb690f9 docs: fix link to getting started ca147fb fix(deps): update rust crate serde to 1.0.164 871096c netlink: fix incorrect info log for del_route 72aa0dd dhcp-proxy: apply new ip address/gateway 2a17957 test-dhcp: fix broekn has_ip() check 44b5a28 dhcp-proxy: actually implement renewing leases 1a5f674 dhcp-proxy: simplify code f7e950b dhcp-proxy: drop macaddr dependency 827bdd9 dhcp-proxy: remove some unused traits 5b2662e fix(deps): update rust crate zbus to 3.13.1 8fd57c7 fix(deps): update rust crate clap to 4.3.2 7000903 chore(deps): update rust crate once_cell to 1.18.0 e495d0b fix(deps): update rust crate url to 2.4.0 3a2c8e5 fix(deps): update rust crate clap to 4.3.1 3fcbfab chore(deps): update dependency containers/automation_images to v20230601 be0e01e chore(deps): update rust crate chrono to 0.4.26 3bdb499 chore(deps): update rust crate chrono to 0.4.25 f9dce04 fix(deps): update rust crate log to 0.4.18 8db90d8 chore(deps): update rust crate once_cell to 1.17.2 e4e78f0 macvlan: add bclim option 3d3563b parse_option(): return option instead of default e0ae9bc add no_default_gateway option d39db0b fix(deps): update rust crate clap to 4.3.0 ba0cb46 chore(deps): update dependency containers/automation_images to v20230517 62b35fd fix(deps): update rust crate serde to 1.0.163 416853b Add ability to add static route d2ef6cc fix(deps): update rust crate serde to 1.0.162 9e0e186 Cirrus: Update fedora name to match image 11626fc fix(deps): update rust crate clap to 4.2.7 e6ee988 chore(deps): update dependency containers/automation_images to v20230426 85dde17 correct typo in Makefile 8418f9b simplify path printing 65ff4f1 fix(deps): update rust crate tokio to 1.28 690fa8d aardvark-dns pid: return better errors 394789f fix comment in Subnet definition 2362e82 aardvark: no error when aardvark config is not there 5d41c71 fix(deps): update rust crate zbus to 3.12.0 bdf84b8 fix(deps): update rust crate clap to 4.2.4 fced2f1 fix(deps): update rust crate clap to 4.2.2 6aeabc0 fix(deps): update rust crate serde_json to 1.0.96 f0d5cc8 update clap to v4 be0e133 fix(deps): update rust crate serde to 1.0.160 173d7ac bump to v1.7.0-dev 2f01092 v1.6.0 release 1d2d150 Update release notes for v1.6.0 e1b0aa9 dhcp-proxy: fix typo for --activity-timeout f125bf0 chore(deps): update dependency containers/automation_images to v20230405 8b4c678 dhcp-proxy: use better error when connection fails c4a216d add documentation for netavark plugins 3ad293d add stderr example plugin to test stderr passthrough cee4d9f add netavark plugin driver b2ffb90 add example error plugin bc35cdd add host-device example plugin ab8156d plugin: add simple plugin interface 092b9a3 netlink: add dump_addresses cc1730e netlink: add set_link_ns 14a5205 dhcp-proxy: correctly exit > 0 on errors 24698f1 fix(deps): update rust crate tonic to 0.9 50b0fbb fix(deps): update rust crate mozim to 0.2.2 a5eba62 fix(deps): update rust crate serde to 1.0.159 dd0034c fix(deps): update rust crate netlink-sys to 0.8.5 40695e6 dhcp-proxy: create socket directory only when used fe9ca67 dhcp-proxy: do not remove socket when running under systemd dca3d53 Makefile: netavark-dhcp-proxy.service use correct path 71d128a fix(deps): update rust crate http to 0.2.9 5d85d4e chore(deps): update rust crate once_cell to 1.17.1 08d163e fix(deps): update rust-futures monorepo to 0.3.28 0370986 fix(deps): update rust crate serde_json to 1.0.95 2d7cb2a chore(deps): update dependency containers/automation_images to v20230330 9fd64cf Disable Dependabot in favor of Renovate 5ed1430 chore(deps): update rust crate chrono to 0.4.24 3f3a73e build(deps): bump ipnet from 2.7.1 to 2.7.2 1b8d361 build(deps): bump serde from 1.0.158 to 1.0.159 a3d7d79 build(deps): bump serde_json from 1.0.94 to 1.0.95 4f0dcc0 update,main: dont write empty space when no network_dns_servers is given 9532644 fix(deps): update rust crate tokio to 1.27 5ea45b7 Quit Leasing when Client disconnects b2aeb6c build(deps): bump mozim from 0.2.1 to 0.2.2 f36ff11 iptables: fix incorrect debug statement cdf27dc build(deps): bump serde from 1.0.156 to 1.0.158 8a1975a iptables: port fw handle wildcard address correctly ab6c621 chore(deps): update dependency containers/automation_images to v20230320 2f38b17 build(deps): bump zbus from 3.11.0 to 3.11.1 99142bf build(deps): bump anyhow from 1.0.69 to 1.0.70 e42393c [CI:BUILD] Packit: trigger builds on commit to main branch c30f461 Cirrus: Invalidate v2 bin cache 28c63f2 Include Systemd Files in RPM Package 8ec9d4b Cirrus: Fix success failing on artifact extraction 95c6fc4 fix lint issue with new rust version 1.68 d84e415 Cirrus: Update to newer CI VM images c637b1a build(deps): bump serde from 1.0.152 to 1.0.156 ca27aa6 combine dhcp-proxy and netavark into one binary cecef1e update: should allow empty network_dns_servers 07dfcae build(deps): bump libc from 0.2.139 to 0.2.140 bf22c29 fix aarch64 ncat flake 98f18b8 update to mozim 0.2.1 64bb7f0 build(deps): bump zbus from 3.10.0 to 3.11.0 4199dc0 packit: Update build release tag correctly de88f04 test: move proto option into run_nc_test() 91f3bfb test: add netns pid param to port checks eea98ee test: import podman code to check for ports 9d070c8 cirrus.yaml: add new binaries in art_prep_script bca5370 fix netavark-dhcp-proxy binary in system unit 31b4bb4 import netavark-proxy-dhcp tests c599b2e add build_proxy_client target c76e257 add netavark-dhcp-proxy to rpm a8cff4d Fix dhcp-proxy build 8dc8c96 Merge nv-dhcp-proxy into nv 3a365ed fix default route metric test name ad222b7 build(deps): bump tokio from 1.25.0 to 1.26.0 c505c58 Support none parameter on NETAVARK_FW 2272042 build(deps): bump anyhow from 1.0.68 to 1.0.69 2798f06 Fix typos 88a2a7a update netlink-packet-{route,core} to 0.15 and 0.5 216f6f6 build(deps): bump serde_json from 1.0.92 to 1.0.93 bbbec75 build(deps): bump zbus from 3.8.0 to 3.10.0 70d6f33 [CI:BUILD] Packit: initial enablement 065243d Allow custom cargo binary path 5ce550d build(deps): bump serde_json from 1.0.91 to 1.0.92 781b84e Cirrus: Reduce requested CPUs for compile-tasks 9deb91b bump to version 1.0.6-dev dbdeb9a v1.0.5 release 43c9bf2 release notes updates for v1.0.5 97f91f0 build(deps): bump netlink-sys from 0.8.3 to 0.8.4 b8fae87 build(deps): bump tokio from 1.24.1 to 1.25.0 3919e0f build(deps): bump zbus from 3.7.0 to 3.8.0 f688710 Switch to explicit platform list for `cargo vendor-filterer` 67b7da4 Add renovate.json5 c02fb16 Convert a few words to more inclusive 102b81c build(deps): bump nix from 0.26.1 to 0.26.2 60c08e9 Minor: Add script remote re-use comment. dae850f Cirrus: Fix two minor typos. c361afa Cirrus: Improve caching effectiveness f11a8fc Fix UDS path 823e69b build(deps): bump ipnet from 2.7.0 to 2.7.1 c55b1b3 build(deps): bump tokio from 1.23.0 to 1.24.1 e7c41c8 build(deps): bump zbus from 3.6.2 to 3.7.0 d690d35 build(deps): bump serde from 1.0.151 to 1.0.152 5a19903 build(deps): bump libc from 0.2.138 to 0.2.139 040f3d6 add ipvlan support 058be67 fix lint issues for rust 1.66 2524e56 update CI images 8055fb4 build(deps): bump serde_json from 1.0.89 to 1.0.91 f80f417 Add ability for MacVLAN dhcp a810489 build(deps): bump serde from 1.0.150 to 1.0.151 53c6774 build(deps): bump anyhow from 1.0.66 to 1.0.68 bcb52af CI: install mandown for validate 97e90a3 fix make docs 3eee824 build(deps): bump serde from 1.0.149 to 1.0.150 820d538 build(deps): bump sysctl from 0.5.2 to 0.5.4 753c3de build(deps): bump ipnet from 2.6.0 to 2.7.0 bd1bf8b build(deps): bump zbus from 3.6.1 to 3.6.2 a3f90ec build(deps): bump ipnet from 2.5.1 to 2.6.0 3a1ff24 lock: stop using yanked 0.8.13 crossbeam-utils 75b440c Cirrus: Add backup to aardvark-binary artifact DL a03b7b1 Bump to v1.4.1-dev c2a4b9a Release v1.4.0 0e3268b Update release notes for v1.4.0 011f899 release,make: add rule crate-publish for publishing crates.io 302828f main: Pass config_dir as `&str` bb4c73d [skip-ci] GHA/Cirrus-cron: Fix execution order d957601 build(deps): bump serde from 1.0.148 to 1.0.149 cece3d6 build(deps): bump nix from 0.25.0 to 0.26.1 354450f build(deps): bump libc from 0.2.137 to 0.2.138 8c1a071 build(deps): bump zbus from 3.5.0 to 3.6.1 7563db2 remove verify_vendor CI task 15894f3 chrono: use from_timestamp_opt 0c61f05 update: add support for netavark update command 2f0b025 Add nspath to commands 64d762f build(deps): bump serde from 1.0.147 to 1.0.148 d27588c build(deps): bump env_logger from 0.9.3 to 0.10.0 46f9f59 aardvark, netavark: support network scoped dns via network_dns_servers c9cbc6a build(deps): bump serde_json from 1.0.88 to 1.0.89 84b9078 Drop now unneeded futures dep c858e2f Make use of zbus::blocking wrappers 84a0ddd Port to zbus 3.5 a3c8156 Drop direct zvariant dep 03cb6a5 remove number of .clone() calls 581352c build(deps): bump serde_json from 1.0.87 to 1.0.88 9dad47a fix iptables teardown d7d88da fix rust doc comments effd448 GHA: Add cirrus-cron rerun job ada06b4 fix new lint issues reported with rust 1.65 2af0d9f update CI images f5d114d Correct dev version 34f1488 Bump to v1.3.0-dev 6df8139 Release v1.3.0 53a7b00 v1.3.0 Release notes 832098f run cargo update d36af04 build(deps): bump ipnet from 2.5.0 to 2.5.1 e383f8d build(deps): bump env_logger from 0.9.1 to 0.9.3 0cc2556 macvlan modes: use upstream consts e6d09ff macvlan: remove tmp interface when name already used in netns 0789f44 Add support for route metrics 52b1b08 Drop indirect dependency on time 0.1 72c42b6 netlink: return better error if ipv6 is disabled 980d68a macvlan: fix name collision on hostns 3c03dce build(deps): bump libc from 0.2.136 to 0.2.137 99459c1 build(deps): bump clap from 3.2.22 to 3.2.23 8247f46 Ignore dns-enabled for macvlan bd18cb1 build(deps): bump libc from 0.2.135 to 0.2.136 3f7e75e build(deps): bump serde_json from 1.0.86 to 1.0.87 b65a35b build(deps): bump serde from 1.0.145 to 1.0.147 885f657 netlink: check sequence_number 795fa47 build(deps): bump anyhow from 1.0.65 to 1.0.66 61181e5 tests: add test for verifying multiple custom dns severs 95c982b tests: unskip exisiting test for custom dns server 698627b build(deps): bump futures from 0.3.24 to 0.3.25 6e04f79 netlink: improve error message on invalid netlink result 3aac0a0 NetworkOptions::load(): do not open /dev/stdin f07cc04 use cargo-vendor-filterer to create vendor tarball d89f4bd teardown: handle errors better c9de5d0 error: remove unused equal code c11c5f8 fix broken build f6e0258 netavark ,aardvark: accept and populate custom dns_servers for containers 59be422 netlink: add del_{addr,route} calls 6646be4 error: NetavarkError use Into<String> Trait 0417eb8 netlink: add basic unit tests 454ebb3 bridge: do not set gateway for internal network c017bfe README.md: remove latest release section 652d233 build(deps): bump libc from 0.2.134 to 0.2.135 3166b7b build(deps): bump serde from 1.0.144 to 1.0.145 ca5f4f6 build(deps): bump serde_json from 1.0.85 to 1.0.86 7c93f79 Do not use ipv6 autoconf #2 36a20bf fix test issues in podman 0fb6ddc improve error messages 96993f4 netlink: use low level sync api 4881651 add simple script to measure the netavark perfomance 4294bf6 Do not use ipv6 autoconf 0805420 build(deps): bump tokio from 1.21.1 to 1.21.2 060c6a6 Make build date reproducible 08c3152 Cirrus: Use images w/ fixed-in-time rust + clippy 3d4fe6b build(deps): bump libc from 0.2.133 to 0.2.134 7ab86f6 build(deps): bump clap from 3.2.8 to 3.2.22 cbc0a31 Bumping to v1.2.0-dev 90cccc1 Release v1.2.0 We also refresh one patch, and add protobuf-c as a build depenency Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxcfs: update to 5.0.4 and convert to mesonBruce Ashfield2023-08-244-83/+45
| | | | | | | | | | This is a large update to lxcfs, that includes a move to meson as the build backend. We drop a couple of uneeded patches, and add a new meson specific one as the detection of pid_* functions is failing. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.0.3Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping lxc to version lxc-5.0.3, which comprises the following commits: cb8e38aca Release LXC 5.0.3 85d3f4b1d github: Update for main branch d195603e3 CONTRIBUTING: add a note on AI generated code 54227bdb1 get_hierarchy: dont WARN about no usable controller be7efff35 github: Add DCO/target tests 8751cd208 explicitly convert *mainloop_handler to __u64 c16bb5b71 tests: fix parse_config_file seccomp test 95ef57c73 src/tests: Fix container creation errors 30c79f8a7 rename functions which clash with libsystemd's 3801a6a3d mainloop: io_uring: disable IORING_POLL_ADD_MULTI fba0ae071 terminal: make a terminal FDs non-blocking 1af412d2f file_utils: add fd_make_nonblocking helper eaaf041f6 file_utils: rename fd_make_nonblocking to fd_make_blocking d05fb8a45 setproctitle(): Handle potential NULL return from strrchr() 709d42691 make setproctitle()'s /proc/pid/stat parsing safe b183d437b console-log test: make sure container is stopped before restarting d638d5951 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC c12c0acb0 Allow fuse mounts in apparmor start-container. c93418d98 Add support for squashfs images in oci via atomfs 3754e803f apparmor: don't try to mmap empty files 706ee25cd initutils: use PRIu64 for uint64_t in setproctitle 3cdd5078c lxc-net.in: fix nftables syntax for IPv6 NAT 97bf62247 Fix strlcat's return value checks 7c81572af Fix typo: bev_type -> bdev_type 727adc052 drop broken lxc-test-fuzzers Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: update to 2.8.2Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker-distribution to version v2.8.2-2-g8728c52e, which comprises the following commits: ab7178cc Pass BUILDTAGS argument to go build a173a9c6 Add v2.8.2 release notes 483ad69d registry/errors: Parse http forbidden as denied 2b0f84df Revert "registry/client: set Accept: identity header when getting layers" 5f3ca1b2 Add release notes for 2.8.2-beta.2 release e884644f Dockerfile: fix filenames of artifacts ac6c72b2 Add 2.8.2-beta.1 release notes ae58bde9 Fix gofmt warnings 3f2a4e24 update to go1.19.9 9c04409f [release/2.8] ignore deprecation of io/ioutil 3d8f3cc4 Dockerfile: update xx to v1.2.1 70db3a46 bump up golang version db1389e0 dockerfiles: formatting 018472de dockerfiles: set ALPINE_VERSION 19b3feb5 Update to xx 1.1.1 14bd72bc Dockerfile: switch to xx 2392893b bump up golang v1.17 092a2197 [release/2.8] fix package name in Dockerfile 22a80503 fix(ci): use go install instead of go get 1d52366d Merge pull request #2815 from bainsy88/issue_2814 521ea3d9 Fix runaway allocation on /v2/_catalog ad5991de Fix panic in inmemory driver 38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.8.6Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.8.6-11-gd7ee549, which comprises the following commits: c786d4c linux: simplify error handling c972772 linux: do not write twice errors 74a3874 linux: use helper functions instead of custom read/write 35a0166 linux: define helper to ack on the sync socket c3e518e libcrun: drop symbol for crun_make_error 080e560 features: use exported function libcrun_make_error 5c2dedc Make the spec file parseable without copr_username defined 73f759f NEWS: tag 1.8.6 26ef1e0 linux: add sync before sending mounts 71c53b0 RPM: Set Epoch only for Copr builds ee0e405 tests: install procps-ng for podman tests 6a3d7a7 Packit: initial enablement 58bb52c tests: fix cpu-weight-systemd test under a user manager ee111ae tests: skip test_uid_tty if no tty is attached 74dd5f9 tests: use get_crun_path() in oci_features b160e2c cgroup-resources: allow setting swap to 0 19cd8aa ps: fix segfault with pids=NULL Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: update to v1.27.1Bruce Ashfield2023-08-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-tools to version v1.26.0-279-gdd51f3b7, which comprises the following commits: 16975aba Make `haircommander` an approver e3cc516b override path defaults for FreeBSD f8f05611 Use `UserSpecifiedImage` for seccomp tests a4110ef6 Bump github.com/onsi/gomega from 1.27.9 to 1.27.10 2cffae40 Bump github.com/docker/docker 2d4e6c27 Bump github.com/onsi/gomega from 1.27.8 to 1.27.9 4a84e5a3 Bump github.com/opencontainers/runc from 1.1.7 to 1.1.8 28bbd92a Switch to logrus in favor of glog edf8fd39 Update version in README dafc2b62 Add `crictl runtime-config` command 01952e78 Use google/uuid 183c8fa3 Fix release notes job cf42ba9f Drop support for docker log format c1e6f2eb Bump Kubernetes to v1.28.0-alpha.4 fc7c11ed Bump github.com/docker/docker fcb21b99 Revert "fix listCoontainerStats not filter" ffb1ef1e Bump github.com/docker/docker 505d5ce7 Bump Kubernetes to v1.27.3 49cf12cb Bump golang.org/x/net from 0.11.0 to 0.12.0 0aa3049e Bump golang.org/x/sys from 0.9.0 to 0.10.0 e6438103 fix listCoontainerStats not filter 2ee62a09 Typo fix in critest 5b6b7180 Format print output in imagefsinfo cmd b432bc8d Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 d901bb43 Bump github.com/urfave/cli/v2 from 2.25.6 to 2.25.7 acc3f298 Bump golang.org/x/net from 0.10.0 to 0.11.0 5feab035 Bump github.com/urfave/cli/v2 from 2.25.5 to 2.25.6 90b22c75 Bump golang.org/x/term from 0.8.0 to 0.9.0 0b7c24b5 Bump google-github-actions/setup-gcloud from 0 to 1 5c28a488 Bump actions/upload-artifact from 1 to 3 c3a28fe2 add dependabot config to update github actions 806c66f9 update actions using node12 5e9d1f5d Add image build test to GitHub actions b80b9bde Bump github.com/onsi/gomega from 1.27.7 to 1.27.8 8e03fbd3 Bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 a8ca78a0 Pin `FROM` images to tags bde07883 Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 5fd98895 Migrate to field based seccomp tests 5d362aa6 Bump github.com/onsi/ginkgo/v2 from 2.9.6 to 2.9.7 32ba4251 added testing on 1.7 b7e85c71 Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.6 4714253b Update critest from 1.17 to 1.27 88a2b60b Bump github.com/urfave/cli/v2 from 2.25.3 to 2.25.5 63e39e26 Bump github.com/docker/docker 2c0f354e Bump github.com/docker/docker aeea5099 Update the incorrect link to release page in crictl.md ea559418 Bump github.com/onsi/gomega from 1.27.6 to 1.27.7 7ed308a3 Bump github.com/sirupsen/logrus from 1.9.1 to 1.9.2 f0bf767c Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.27.1Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | Bumping cri-o to version v1.27.1-7-gab7845e07, which comprises the following commits: fbfca3a52 oci: update unit tests for new stop code 6dec88e7c oci: simplify stopping code 5b7b82f56 oci: don't return ErrContainerStopped from StopContainer 0e4df2e9c oci: change IsAlive to Living 92b455156 devices: fill the FileMode field in spec e54504a00 version: bump to 1.27.1 a61082768 vendor: drop podman replace and actually update runc 9c86a1269 vendor: bump runc to 1.1.6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.2Bruce Ashfield2023-08-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits: 2eaeb3205 Fix ro mount option being passed 4cb2f1515 [release/1.7] Add release notes for v1.7.3 b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory 14328ae03 migrate to community owned bucket b985f7ef1 update runc binary to v1.1.8 f7a20e17c Move logrus setup code to log package 7353c0286 ctr: update WritePidFile to use atomicfile ae7021300 shim: WritePidFile & WriteAddress use atomicfile 186eb64b7 cri: write generated CNI config atomically on Unix 64c3dcd8e atomicfile: new package for atomic file writes 083f57160 capture desc variable in range variable just in case that it run in parallel mode a9440ce6b Use t.TempDir instead of os.MkdirTemp eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User eace67180 fix userstr for dditionalGids on Linux 973778193 Update Go to 1.20.6,1.19.11 60a6db9c2 Cirrus CI: configure apt-get to wait for locks 6b6b0c828 bugfix(port-forward): Correctly handle known errors 898eca21e Change http.Header copy to builtin Clone fa2efc406 Resolve docker.NewResolver race condition 241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns d5639a5a8 vendor: github.com/containerd/zfs v1.1.0 403033e52 update go to go1.20.5, go1.19.10 15d65709e ci: remove libseccomp-dev installation for nightly a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2 c2c54af9d Update ginkgo to match cri-tools' version 6281d46df seccomp: always allow name_to_handle_at 3bf3996d9 integration/client: add timeout to `TestShimOOMScore` 699d6701a Pinned image support 18c6503d9 runtime/v2/runc: handle early exits w/o big locks dafbeb5b1 No more nondistributable layers in MS registry Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to 2.1.7Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping conmon to version v2.1.3-74-g75f8ceb, which comprises the following commits: fa67ce6 ensure console socket buffers are properly sized 2902909 Remove lgtm badge 2832e4f chore(deps): update dependency containers/automation_images to v20230614 7a7c893 log fds more permissive c26648e Fix close_other_fds on FreeBSD ebc6717 chore(deps): update dependency containers/automation_images to v20230601 8225789 chore(deps): update dependency containers/automation_images to v20230517 dcee6fb Update nixos image and dependencies' version. e907fdc Changes to build conmon for ppc64le 5510eb0 fix compile regression on FreeBSD be144a1 chore(deps): update dependency containers/automation_images to v20230426 3fcc1d2 Packit: update config 676e86d ctrl: fix a debug statement b7aa7b1 [skip-ci] Update actions/setup-go action to v4 d8bf969 [skip-ci] Update actions/checkout action to v3 53debe6 [skip-ci] Update actions/cache action to v3 758ff5a vendor: bump to latest packages 44448e7 fix(deps): update module github.com/containers/libpod to v4 95ecbf5 chore(deps): update dependency containers/automation_images to v20230405 3b447bc conmon: drop return after pexit() d637b73 ctrl: make accept4 failures fatal cbc7c40 cmsg: recvfd returns an error on failures 0251765 cmsg: fix program name 5fcb8da ctrl: on EINTR retry accept4 08c34bd Add renovate configuration 9a3af8f logging: avoid opening /dev/null for each write Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.31.1Bruce Ashfield2023-08-241-3/+3
| | | | | | | | | | Bumping buildah to version v1.31.1-3-g0cc7680cc, which comprises the following commits: 806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream a3056cacd [release-1.31] Bump c/common d0de60bbf Bump 1.31.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* aardvark-dns: update to v1.7.0Bruce Ashfield2023-08-242-185/+221
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping aardvark-dns to version v1.7.0, which comprises the following commits: d27d3b3 release v1.7.0 b6a270b Update release notes for v1.7.0 099f5d4 fix(deps): update rust crate tokio to 1.29.0 47219ee fix(deps): update rust crate clap to 4.3.8 1648525 fix(deps): update rust crate clap to 4.3.5 5d9add2 run cargo update 03fc574 [CI:BUILD] Packit: add Fedora downstream tasks ed141a4 fix(deps): update rust crate clap to 4.3.4 4facdac chore(deps): update dependency containers/automation_images to v20230614 ffdfd7b fix(deps): update rust crate clap to 4.3.3 7d9827a fix(deps): update rust crate log to 0.4.19 ebd84ca fix(deps): update rust crate clap to 4.3.2 bdf07b1 fix(deps): update rust crate clap to 4.3.1 93a0f4f cirrus: remove verify_vendor task 90038b0 chore(deps): update dependency containers/automation_images to v20230601 8709a43 fix(deps): update rust crate trust-dns-server to 0.22.1 f22fc51 chore(deps): update rust crate chrono to 0.4.26 2163d08 fix(deps): update rust crate tokio to 1.28.2 d7b61ec fix(deps): update rust crate log to 0.4.18 fde8e1a chore(deps): update rust crate chrono to 0.4.25 a0ac881 fix(deps): update rust crate clap to 4.3.0 d298585 chore(deps): update dependency containers/automation_images to v20230517 4c29222 fix(deps): update rust crate tokio to 1.28.1 3358de3 chore(deps): update dependency containers/automation_images to v20230426 c4deaf8 fix(deps): update rust crate clap to 4.2.7 4dd6a17 fix(deps): update rust crate anyhow to 1.0.71 140846f fix typo in makefile 8cd804a fix(deps): update rust crate tokio to 1.28.0 15db510 fix(deps): update rust crate clap to 4.2.5 e322d2c fix(deps): update rust crate syslog to ^6.1.0 f591500 fix(deps): update rust crate clap to 4.2.4 7961a9b fix(deps): update rust crate clap to 4.2.3 e6ce1a5 fix(deps): update rust crate clap to v4 40bcf9e chore(deps): update dependency containers/automation_images to v20230405 c09d67b bump to v1.7.0-dev fb411dd v1.6.0 release 619c232 Update release notes for v1.6.0 63bdcac fix(deps): update rust crate tokio to 1.27.0 f587536 use lower TTL for contianer entries 234e75b fix(deps): update rust crate syslog to ^6.0.1 21d7555 fix(deps): update rust crate futures-util to 0.3.28 3067fd0 chore(deps): update dependency containers/automation_images to v20230330 4fb8f35 Disable Dependabot in favor of Renovate bf19047 chore(deps): update dependency containers/automation_images to v20230320 302b099 build(deps): bump futures-util from 0.3.26 to 0.3.27 35c5bab [CI:BUILD] Packit: trigger builds on commit to main branch 075e095 build(deps): bump anyhow from 1.0.68 to 1.0.70 cc81866 fix lint issue with new rust version 1.68 3555692 Cirrus: Update to newer CI VM images 65d68c8 build(deps): bump chrono from 0.4.23 to 0.4.24 abb9cf7 build(deps): bump libc from 0.2.139 to 0.2.140 dec9b98 build(deps): bump async-broadcast from 0.5.0 to 0.5.1 de81a25 build(deps): bump signal-hook from 0.3.14 to 0.3.15 d41f573 build(deps): bump futures-util from 0.3.25 to 0.3.26 5438208 build(deps): bump tokio from 1.25.0 to 1.26.0 dfea9a8 [CI:DOCS] Clarify packit related comments 62737ec [CI:BUILD] Packit: initial enablement ff56126 Allow custom cargo binary path 0049b88 Switch to explicit platform list for `cargo vendor-filterer` c30a24d bump to v1.6.0-dev 65480f4 v1.5.0 release 24350c4 update release notes for v1.0.5 997ab9a build(deps): bump nix from 0.26.1 to 0.26.2 8ff094a build(deps): bump tokio from 1.24.2 to 1.25.0 4769592 Add renovate.json5 938e1bb build(deps): bump tokio from 1.24.1 to 1.24.2 8f72cb9 Cirrus: Groom rust cache before updating 0763020 add code of conduct 36224d6 cargo: bump trust-dns-client and trust-dns-proto to 0.22 81def17 Cirrus: Add backup to netavark-binary artifact DL ce45624 build(deps): bump tokio from 1.23.0 to 1.24.1 ef56659 build(deps): bump async-broadcast from 0.4.1 to 0.5.0 7425f56 build(deps): bump libc from 0.2.138 to 0.2.139 6f294d7 fix lint issues with rust 1.66 af49056 update CI images 860bd4c build(deps): bump tokio from 1.21.2 to 1.23.0 0431acc build(deps): bump anyhow from 1.0.66 to 1.0.68 6d22d42 Bump to v1.4.1-dev 65b9804 Release v1.4.0 bc265b0 Update release notes for v1.4.0 e632528 release,make: add rule crate-publish for publishing crates.io 563c2d7 silly pr to fix ci 33ceb7e [skip-ci] GHA/Cirrus-cron: Fix execution order 89b85bf build(deps): bump libc from 0.2.137 to 0.2.138 614d9df build(deps): bump nix from 0.25.0 to 0.26.1 01a9f18 config,coredns: add support for network scoped dns servers 26a3ae8 fix new lint issues with rust 1.65 3eace77 update CI images bb0b151 GHA: Add cirrus-cron auto-rerun job 1c3798f build: stop using deprecated from_timestamp 34b2e76 cargo: bump chrono to 0.4.23 142af2c Fix dev version 87e26bd Bump to v1.3.0-dev 9254bb9 v1.3.0 Release 046f3cb v1.3 Release notes 36208f3 use cargo-vendor-filterer to create vendor tarball 612da2f build(deps): bump anyhow from 1.0.65 to 1.0.66 a5e4104 build(deps): bump libc from 0.2.136 to 0.2.137 e6dc1b4 build(deps): bump clap from 3.2.22 to 3.2.23 619a398 build(deps): bump libc from 0.2.135 to 0.2.136 d3cc7e0 test,helpers: refactor create_config to accept named args c541311 cirrus,setup: show netavark binary being used by commit 044f425 aardvark-dns: add support for container's custom dns_servers 836d0bd build(deps): bump futures-util from 0.3.24 to 0.3.25 7c2774c Reduce tokio and futures-util features d3b49a1 build(deps): bump libc from 0.2.134 to 0.2.135 496825e Cirrus: Update CI VM Images 096b1b7 build(deps): bump libc from 0.2.133 to 0.2.134 54bbab7 build(deps): bump tokio from 1.21.1 to 1.21.2 b417fee Bump to v1.2.0-dev cb1a462 Release v1.2.0 b6d0679 backend,clippy: remove needless borrow from lookup logic ad541ca Make build date reproducible Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vhost-device-gpio: only enable if meta-clang existsErik Schilling2023-08-241-0/+2
| | | | | | | | | | | This disables the recipe - which depends on clang-native - if meta-clang is not active. Link: https://lore.kernel.org/yocto-meta-virtualization/ZNyErpfW8p2lX81Z@nuoska/ Reported-by: Richard Purdie <richard.purdie@linuxfoundation.org> Suggested-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Erik Schilling <erik.schilling@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vhost-device: fix README.md locationErik Schilling2023-08-171-0/+0
| | | | | | | | | I accidentially created it in the root while it meant to go to the subfolder. Link: https://lore.kernel.org/yocto-meta-virtualization/CUUO41I813NY.CPU5GWIZUCC4@fedora/ Signed-off-by: Erik Schilling <erik.schilling@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-boot-cmd: Remove hard assigment for ramdisk imageSandeep Gundlupet Raju2023-08-171-1/+1
| | | | | | | | | Setting hard assignment for RAMDISK_IMAGE will take precedence during variable pre-expansion. Hence set RAMDISK_IMAGE variable with soft assignment. Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vhost-device: add recipes for vhost-device daemonsErik Schilling2023-08-1511-0/+991
| | | | | | | | | | | | | This adds recipes for the first tagged release of the vhost-device daemons of the rust-vmm project. While the initial release was done for all daemons at the same time, the daemons all have indepentend version numbers and will be released on their own schedules in the future. Therefore, I splitted them into independent recipes. Signed-off-by: Erik Schilling <erik.schilling@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: fix installed-vs-shipped with usrmergeMartin Jansa2023-08-151-2/+2
| | | | | | | | | | | | * fixes: ERROR: nerdctl-v1.3.0-r0 do_package: QA Issue: nerdctl: Files/directories were installed but not shipped in any package: /bin /bin/nerdctl Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. nerdctl: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: fix installed-vs-shipped with usrmergeMartin Jansa2023-08-151-3/+3
| | | | | | | | | | | | * fixes: ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package: /bin /bin/k8s-init Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. kubernetes: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: fix usrmerge QA issueMartin Jansa2023-08-152-0/+51
| | | | | | | | | | | | | | | | | | | | | | * backport a fix from 23.2 version (notice that the recipe claims to be: v23.2.2+git, but the commit in master-next which updated PV only changed the branch name, not the SRCREV, so it's still 23.1 and missing this fix cloud-init/v23.2.2+git/git $ git describe --tags 23.1-53-g57752970e * fixes: ERROR: cloud-init-v23.2.2+git-r0 do_package_qa: QA Issue: cloud-init package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge] caused by udev rules: $ find cloud-init/v23.2.2+git/image/lib/ cloud-init/v23.2.2+git/image/lib/ cloud-init/v23.2.2+git/image/lib/udev cloud-init/v23.2.2+git/image/lib/udev/rules.d cloud-init/v23.2.2+git/image/lib/udev/rules.d/66-azure-ephemeral.rules Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: update to 23.2.2Bruce Ashfield2023-08-151-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cloud-init to version 23.2.2, which comprises the following commits: e65a715d Release 23.2.2 7e22ea8b Fix reference before assignment (#4292) bd909995 Fix NoCloud kernel commandline key parsing (#4273) cda47255 Release 23.2.1 0bbf84e5 nocloud: parse_cmdline no longer detects nocloud-net datasource (#4204) cdc24d86 Release 23.2 2f83ab48 BSD: simplify finding MBR partitions by removing duplicate code 10721027 tests: bump pycloudlib version for mantic builds f663e94a network-manager: Set higher autoconnect priority for nm keyfiles (#3671) 2a927738 alpine.py: change the locale file used (#4139) e0b1a477 cc_ntp: Sync up with current FreeBSD ntp.conf (#4122) ddb07212 config: drop refresh_rmc_and_interface as RHEL 7 no longer supported a5366e24 docs: Add feedback button to docs 009dbf85 net/sysconfig: enable sysconfig renderer if network manager has ifcfg-rh plugin (#4132) 431d2c14 For Alpine use os-release PRETTY_NAME (#4138) 5d440856 network_manager: add a method for ipv6 static IP configuration (#4127) 06eadd8a correct misnamed template file host.mariner.tmpl (#4124) ea573ba6 nm: generate ipv6 stateful dhcp config at par with sysconfig (#4115) 6d09df5e Add templates for GitHub Issues 1b9c2b57 Add 'peers' and 'allow' directives in cc_ntp (#3124) 8c1a3ff8 FreeBSD: Fix user account locking (#4114) 21006925 FreeBSD: add ResizeGrowFS class to cc_growpart (#2334) ffdb7a7d Update tests in Azure TestCanDevBeReformatted class (#2771) ce2f26c2 Replace Launchpad references with GitHub Issues 7c52b8a5 Fix KeyError in iproute pformat (#3287) 73f34575 schema: read_cfg_paths call init.fetch to lookup /v/l/c/instance 9f845036 azure/errors: introduce reportable errors for imds (#3647) 60248d88 FreeBSD (and friends): better identify MBR slices (#2168) 481bf4d3 azure/errors: add host reporting for dhcp errors (#2167) 0c4d53f2 net: purge blacklist_drivers across net and azure (#2160) 64227612 net: refactor hyper-v VF filtering and apply to get_interfaces() (#2153) 6cc09f3c tests: avoid leaks to underlying filesystem for /etc/cloud/clean.d (#2251) a0f5279b net: refactor find_candidate_nics_on_linux() to use get_interfaces() (#2159) 0dfe06ba resolv_conf: Allow > 3 nameservers (#2152) e07ad4a5 Remove mount NTFS error message (#2134) b1a14a2a integration tests: fix image specification parsing (#2166) 4d28d203 ci: add hypothesis scheduled GH check (#2149) a18442af Move supported distros list to docs (#2162) e8ef58b9 Fix logger, use instance rather than module function (#2163) ed2ebf09 README: Point to Github Actions build status (#2158) 59edb3f1 Revert "fix linux-specific code on bsd (#2143)" (#2161) c53f04ae Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled (#2142) 76fe7ddb Add documentation label automatically (#2156) 96710408 sources/azure: report success to host and introduce kvp module (#2141) 5abf5f5f setup.py: use pkg-config for udev/rules path (#2137) 7ffd0bcd openstack/static: honor the DNS servers associated with a network (#2138) a9cec5da fix linux-specific code on bsd (#2143) e9d1d3a0 cli: schema validation of jinja template user-data (SC-1385) (#2132) aa0cd62c gce: activate network discovery on every boot (#2128) be3441b2 tests: update integration test to assert 640 across reboots (#2145) a378b7e4 Make user/vendor data sensitive and remove log permissions (#2144) c1b47220 Update kernel command line docs (SC-1457) (#2133) 1132b2ce docs: update network configuration path links (#2140) 6e380dd6 sources/azure: report failures to host via kvp (#2136) 34637a49 net: Document use of `ip route append` to add routes (#2130) 0a534a6d dhcp: Add missing mocks (#2135) 4f3fe823 azure/imds: retry fetching metadata up to 300 seconds (#2121) 5942f402 [1/2] DHCP: Refactor dhcp client code (#2122) 9e4cb4f0 azure/errors: treat traceback_base64 as string (#2131) d6de22e3 azure/errors: introduce reportable errors (#2129) 3ee38468 users: schema permit empty list to indicate create no users b7179409 azure: introduce identity module (#2116) 34e8c914 Standardize disabling cloud-init on non-systemd (#2112) 44ab4f4a Update .github-cla-signers (#2126) f146fe71 NoCloud: Use seedfrom protocol to determine mode (#2107) 24945cad rhel: Remove sysvinit files. (#2114) a664b712 tox.ini: set -vvvv --showlocals for pytest (#2104) 250280ad Fix NoCloud kernel commandline semi-colon args d9844fa8 run-container: make the container/VM timeout configurable (#2118) e572643f suse: Remove sysvinit files. (#2115) e71f0a13 test: Backport assert_call_count for old requests (#2119) 9490585f Add "licebmi" as contributor (#2113) e02c4607 Adapt DataSourceScaleway to upcoming IPv6 support (#2033) 6d42aa8e rhel: make sure previous-hostname file ends with a new line (#2108) 55eaba2f Adding contributors for DataSourceAkamai (#2110) 0273712c Cleanup ephemeral IP routes on exception (#2100) 09a64bad Fix private key permissions when openssh not earlier than 9.0 #2072 612b4de8 Standardize kernel commandline user interface (#2093) 2a61a589 config/cc_resizefs: fix do_resize arguments (#2106) b33d528e Fix test_dhclient_exits_with_error (#2105) c82ace92 net/dhcp: catch dhclient failures and raise NoDHCPLeaseError (#2083) 4fbf5317 sources/azure: move pps handling out of _poll_imds() (#2075) d6ac22e1 tests: bump pycloudlib version (#2102) d7bdba6f schema: do not manipulate draft4 metaschema for jsonschema 2.6.0 (#2098) ed3ebfc4 sources/azure/imds: don't count timeout errors as connection errors (#2074) e3f1ec3f Fix Python 3.12 unit test failures (#2099) 2562f933 integration tests: Refactor instance checking (#1989) ad33cbba ci: migrate remaining jobs from travis to gh (#2085) 4b6e4e13 missing ending quote in instancedata docs(#2094) baad0946 refactor: stop passing log instances to cc_* handlers (#2016) 7803f9c6 tests/vmware: fix test_no_data_access_method failure (#2092) 56c88caf Don't change permissions of netrules target (#2076) e54ca3ad tests/sources: patch util.get_cmdline() for datasource tests (#2091) ceb66d45 macs: ignore duplicate MAC for devs with driver driver qmi_wwan (#2090) 055395d3 Fedora: Enable CA handling (#2086) 74ed9ef2 Add frantisekz as contributor (#2087) 7f91bdea Send dhcp-client-identifier for InfiniBand ports (#2043) 85b2fbc2 cc_ansible: complete the examples and doc (#2082) eaa4ccb1 contributor: add bdrung c13f4738 bddeb: for dev package, derive debhelper-compat from host system 7382cb66 apport: only prompt for cloud_name when instance-data.json is absent a60c0845 datasource: Optimize datasource detection, fix bugs (#2060) 36346784 Handle non existent ca-cert-config situation (#2073) 5eb43b95 sources/azure: add networking check for all source PPS (#2061) fc6c1d37 do not attempt dns resolution on ip addresses (#2040) 8a0feb1e chore: fix style tip (#2071) 2e697bb0 Fix metadata IP in instancedata.rst (#2063) b463f30c util: Pass deprecation schedule in deprecate_call() (#2064) 9af4b0bf config: Update grub-dpkg docs (#2058) b91dd0e8 docs: Cosmetic improvements and styling (#2057) 2fd24cc8 cc_grub_dpkg: Added UEFI support (#2029) 20335153 tests: Write to /var/spool/rsyslog to adhere to apparmor profile (#2059) 6b9bf7b9 oracle-ds: prefer system_cfg over ds network config source (#1998) b728b4e7 Remove dead code (#2038) 4896402b Release 23.1.1 (#2052) d1ffbea5 source: Force OpenStack when it is only option (#2045) 635b5a52 cc_ubuntu_advantage: improve UA logs discovery d781e14c sources/azure: fix regressions in IMDS behavior (#2041) 5d1d2544 tests: fix test_schema (#2042) b2220798 dhcp: Cleanup unused kwarg (#2037) f79efeba sources/vmware/imc: fix-missing-catch-few-negtive-scenarios (#2027) 2ee614aa dhclient_hook: remove vestigal dhclient_hook command (#2015) 6100fda6 log: Add standardized deprecation tooling (SC-1312) (#2026) 46fcd031 Enable SUSE based distros for ca handling (#2036) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v24.0.5Bruce Ashfield2023-08-151-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits: b7c5385b81 update to go1.20.7 6be708aa7d vendor: gotest.tools/v3 v3.5.0 b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is() 02241b05fc update containerd binary to v1.7.3 3a6899c6fd update containerd binary to v1.7.2 7927cae910 c8d/container: Follow snapshot parents for size calculation 45ba926c6d daemon/list: Drop unused arg from containerReducer 6c4121a943 daemon/list: Refactor refreshImage fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check 3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs 35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev eede7f09c7 Remove Upstart scripts 907f838603 Remove Upstart and cgroups bits from Debian sysvinit script f022632503 Dockerfile: update runc binary to v1.1.8 98a6422cbc c8d/inspect: Include platform Variant aab94fb340 Dockerfile: update buildx to v0.11.2 1be48ec553 c8d: Make sure the content isn't removed while we export ff0144de3b ci(buildkit): remove early-return from buildkit-ref a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref 4c29864b02 hack/with-go-mod.sh: warn on stderr 3c5c192baf c8d/resolveImage: Fix Digested and Named reference 572de8764e c8d/inspect: Don't duplicate digested ref 5dded3340c ci: extract buildkit version correctly with replace-d modules bd1ae65aab quota: remove gotest.tools from testhelpers 544032f7a4 hack/d/cli.sh: properly handle errors in curl 0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching 05f82fdd00 Dockerfile(.simple): align APT_MIRROR support 151686a5c8 Makefile: pass through APT_MIRROR 31567e0973 Dockerfile: use default apt mirrors d94f2dcab2 client: Client.postHijacked: use Client.buildRequest bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors 8bdf6d1baf ci(bin-image): add SHA-based tags 26a457e7a3 ci(bin-image): fix meta step b9904ba319 ci(bin-image): fix typo e7c333cb6e ci(bin-image): don't set tags when pushing by digest fcb87e8ae1 ci: push bin image to Docker Hub 68c0cec772 Disable tls when launching dockerd through hack/make.sh 738d8417e0 libnet: Return a 403 when overlay network isn't allowed a5c0fda157 libnet: Return proper error when overlay network can't be created deea880581 pkg/jsonmessage: use string-literals for easier grep'ing 962a4f434f pkg/ioutils: use string-literals for easier grep'ing cea5829402 pkg/idtools: use string-literals for easier grep'ing 69d77bc150 opts: use string-literals for easier grep'ing ff667ed932 integration: use string-literals for easier grep'ing efe9e90ef5 libnetwork: use string-literals for easier grep'ing 2d2df4376b daemon/cluster: use string-literals for easier grep'ing ae8e3294dd client: use string-literals for easier grep'ing 892857179a cli/debug: use string-literals for easier grep'ing 147b87a03e daemon: use string-literals for easier grep'ing a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing 5bba60b1bb builder/builder-next: use string-literals for easier grep'ing 632fc235d6 builder/dockerfile: use string-literals for easier grep'ing 75a90f85ad gha: add note about buildkit using older go version fa909dfaf4 update go to go1.20.6 bdaadec788 testutil: use dummyhost for non-tcp connections 547ea18fbb pkg/plugins: use a dummy hostname for local connections 597a5f9794 client: define a "dummy" hostname to use for local connections fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals 959889efd9 integration: Don't env cleanup before parallel subtests 6c5144d3e5 Add t.Helper() to the cli test helper functions 9ff2c3918c ci(buildkit): match moby go version for buildkit tests a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e 6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit 0e88c57c47 integration: disable iptables in parallel tests a3049653c1 pkg/plugins: make unit test less time sensitive d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume 5892aae60f docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable 50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option 32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable f66ef31605 docs: api v1.41: remove outdated information from ServerVersion acb95e4544 docs: api v1.42: remove outdated information from ServerVersion 335ed29345 docs: api v1.43: remove outdated information from ServerVersion 0ef846ce2e api: remove outdated information from ServerVersion af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields 7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields 457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2 016ad9b3e8 c8d/prune: Handle containers started from image id 87778af711 c8d/prune: Exclude dangling tag of the images used by containers 8bf037b246 c8d/softDelete: Deep copy Labels 8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage e2bade43e7 testutil/environment: Add GetTestDanglingImageId e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import 42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations 5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds 01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg ee29fd944b gha: don't fail if no daemon.json is present b8ee9a7829 c8d/images: handle images without manifests for default platform d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 806849eb62 seccomp: add name_to_handle_at to allowlist c24c37bd8a Restore active mount counts on live-restore c306276ab1 remove name_to_handle_at(2) from filtered syscalls d5e31e03b6 gha: Setup Runner: add missing sudo 85ad299668 Dockerfile: make cli stages more resilient against unclean termination e84365f967 Skip cache lookup for "FROM scratch" in containerd 96534f015d integration-cli: don't use pkg/homedir in test 6424ae830b Dockerfile: update buildx to v0.11.0 6055b07292 Fix missing Topology in NodeCSIInfo 2f379ecfd6 daemon: fix restoring container with missing task 136893e33b daemon: fix double-unlock in health check probe 290fc0440c daemon: fix panic on failed exec start 0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields 35a29c7328 builder: pass host-gateway IP as worker label 210c4d6f4b daemon: ensure OCI options play nicely together f50cb0c7bd daemon: stop setting container resources to zero 0a6a5a9140 daemon: modernize oci_linux_test.go c92fd5220a c8d: mark stargz as requiring reference-counted mounts 5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19 6776279896 daemon: registerName(): don't reserve name twice 7db3243e34 don't cancel container stop when cancelling context aec7a80c6f c8d: Use reference counting while mounting a snapshot 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits: 11eaf1f0 sync MAINTAINERS file with new moby maintainers dbbf124d Clean up inDelete network atomically Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits: c0e376854 update to go1.20.7 1481c8ce9 vendor: gotest.tools/v3 v3.5.0 e97c76557 vendor: github.com/docker/docker v24.0.5 1ee40e2c7 configfile: Initialize nil AuthConfigs 3bd6d6902 Dockerfile: update buildx to v0.11.2 05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000 8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5 2a6348d1b Dockerfile: update buildx to v0.11.1 f4782b325 update go to go1.20.6 7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc 1447974b8 docs: rephrase section on credential stores for docker login 46293e97f Dockerfile: update to xx 1.2.1 bfe2ff820 cli/container: Don't ignore error when parsing volume spec b40742962 vendor: github.com/docker/docker v24.0.4 79c42c0b9 vendor: golang.org/x/net v0.10.0 a96d0a526 vendor: golang.org/x/text v0.9.0 5c5c50d71 vendor: golang.org/x/term v0.8.0 4bf11b756 vendor: golang.org/x/sys v0.8.0 224c7dbec vendor: github.com/sirupsen/logrus v1.9.3 e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3 419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 2d5f041bd commandconn: return original error while closing 520e3600e commandconn: don't return error if command closed successfully cd68c8f00 docker info: fix condition for printing debug information a78fd6ca6 docs: update link location for the overlay driver 9cd335d44 docs: fix static ip example, network needs a subnet d61e4fe87 docs: fix broken link 8e3a2942a cli/command/context: don't use pkg/homedir in test c3ef1cead docs: update the runtime configuration section 44eebb8bc Dockerfile: update buildx to v0.11.0 7ecfa2e7f Dockerfile: update gotestsum to v1.10.0 f11f30909 update go to go1.20.5 3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: drop 5.15 inc fileBruce Ashfield2023-08-151-4/+0
| | | | | | | | | 5.15 hasn't been in master for quite some time, so we drop our version matching .inc Support for 5.15 can be found on release branches. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: switch branch to mainBruce Ashfield2023-08-151-1/+1
| | | | | | | | | The upstream repoistory transitioned from master to main, and also deleted the v2 branch this recipe was using. Switch everything to main until (if?) new versioned branches appear. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Add missing runtime dependency python-dotenvLeonard Anderweit2023-08-121-1/+4
| | | | | Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Update arm assembly patch to upstream accepted oneKhem Raj2023-08-121-20/+28
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-dtc: drop recipeBruce Ashfield2023-08-012-158/+0
| | | | | | | | oe-core commit 123077ecd9f3c1839d [python3-dtc: add from meta-virtualization] brings this recipe into core, so we drop our version. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* qemu: adapt to OE-core qemu splittingBruce Ashfield2023-08-011-6/+31
| | | | | | | | | | | | | | Since oe-core commit 893846ead7ee54d53 [qemu: Split the qemu package], qemu now has a similar (but different) split to what meta-virt has been providing to vmsep enabled systems. We override the oe-core splitting function to restore our ability to separate functionality into logical groups. This commit also provided RDEPENDS for the new oe-core named packages to allow compatbility with updated images. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to 1.13.0Bruce Ashfield2023-08-011-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping skopeo to version v1.13.0, which comprises the following commits: 8b9999e1 Bump to v1.13.0 4de3a90f proxy: Policy verification of OCI Image before pulling e9303879 Update module github.com/opencontainers/image-spec to v1.1.0-rc4 3d8d2128 Update module github.com/containers/common to v0.55.1 bfa04ea2 Update module github.com/containers/common to v0.54.0 1d5458fa Update module github.com/containers/image/v5 to v5.26.0 290a7630 [CI:BUILD] RPM: fix ELN builds d72d53cc Update module github.com/containers/storage to v1.47.0 0297033e Packit: easier to read distro conditionals 03a19132 Update dependency golangci/golangci-lint to v1.53.3 c04ee48b Help Renovate manage the golangci-lint version 37a81ea7 Minor: Cleanup renovate configuration e2174f17 Update dependency containers/automation_images to v20230614 ceeeb67e Update module golang.org/x/term to v0.9.0 411e9838 [CI:BUILD] Packit: add jobs for downstream Fedora package builds deee28a9 Update module github.com/sirupsen/logrus to v1.9.3 574b2cc4 Update dependency containers/automation_images to v20230601 73e7618d Update golang.org/x/exp digest to 2e198f4 1c738806 Update github.com/containers/image/v5 digest to e14c1c5 2e07073c Update module github.com/stretchr/testify to v1.8.4 c06aa5c6 Update module github.com/stretchr/testify to v1.8.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.8.5-tipBruce Ashfield2023-08-011-1/+1
| | | | | | | | | | | | | | | Bumping crun to version 1.8.5-40-g56d9d9a, which comprises the following commits: 19cd8aa ps: fix segfault with pids=NULL d006733 features: add wasm annotation 935f4fe tests: add test for oci_features 366af73 src/*: implement features 21b1733 Makefile.am: update clang-format command 9e5a749 libcrun: report when status file not found 84a6599 libcrun: crun_path_exists distinguish ENOENT ef224f9 docs: remove module.wasm.image/variant=compat annotation Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compse: update to v1.0.6Bruce Ashfield2023-08-011-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-compose to version v1.0.6, which comprises the following commits: f6dbce3 version 1.0.6 dfb64d8 fix pylint 990f774 fix pylint 5e518c7 #648: check if sed exists to color logs 9046f7e #634: follow up ef55067 add support for network priorities ed2a6c0 Support network_mode: none b4c0792 Add --remove-orphans on down command e84451f Allow environment parameters without value 456370b Support build secrets efe3714 Add support for the `group_add` property of a service. c55a2f4 Fixes #657: Support act and developer-friendly environment b8a7593 #154: timeout bd29ddb #154: no -t for start 38219eb FIXES #154: handle stop_grace_period 08ffcf6 updating test_podman_compose_extends_w_file_subdir to use the correct image name 801faea Bump actions/setup-python from 2 to 4 06da966 Bump actions/checkout from 2 to 3 de3f607 Check for github actions updates weekly db1861d pull: accept service names as positional arguments 9d5b255 Use top-level name property as project name if user doesn't set one explicitly 2d05c5c FIXES #534: add systemd unit label 3c46016 FIXES #534: add systemd unit label 5b9cfe5 implement services.*.build.tags 8d1a4d7 Implemented basic Bash shell completion 859f03c Add healthcheck.disable support ae6be27 reformat ccdb98c implement podman kill command 909d05e reformat 0cf98c7 reimplement the of pause and unpause commands 843b876 fix typo 1188463 fix Typo podman-composer in version command 10580db Add pause,unpause commands support f7d335d #516: allow empty network 4a73ae8 FIXES #511: ipv6 f674ab8 #512: only use --net when bridge 265e0ca #512: only use --net when bridge 92662f3 FIXES #511: ipv6 42c0078 mac_address with dash da5ee72 reformat 06fc071 reformat 9eda56c FIXES #507: respecte mac_address 13c8981 Fix help message for systemd subcommand ee7029f reformat 75033a4 add python demo example c175fd1 reformat d479001 reference awesome-compose a2defdd example wordpress c55cd67 #307: default to /etc/ eed38ce Fixed accidental deletion of project functionality. 86ffad8 Added port subcommand. 118d39b Fix linter errors 814bd2a Support driver_opts for networks 606b9d9 Simplify var assignment 0057a4b Fix default external name in dict case 8ecb749 Update external volume name management d983056 Update external volume name management ed302ca Fix external volume name when no name provided 0b5c844 Add runtime error if no external volume exists 9c29c89 FIXES #486: replace realpath with abspath 89d2062 Fixed some spelling and grammar issues f42b568 Correct the help text for --pod-args a1d3ba4 Lint fixes for --services flag handling in config 6be661f Support platform property fc3598f Allow --services in config fbff315 FIXES #464: accept -v in run fc34703 format c7ada82 format 5e286f6 format 3dd8b05 format 3ecb4b5 FIXES #462: fix extends merge d05cad4 FIXES #462: fix extends merge ebb3dfe #452: better missing network message 7b99b38 nethost test 4ef8afc hit counter with redis cluster example a1aed09 GCR hello app 2cacf9c add echo example 4064c84 add azure vote example 0dde95a update gitignore 1be41b4 do not merge command array 105c27c example nodejs project f820594 use exec for wait 8a72321 FIXES #409: detect changes and recreate 5293919 FIXES #409: detect changes and recreate 48a19f1 print more help with systemd a9faabb print more help with systemd 3fb2b98 print more help with systemd b35b7e4 add systemd -a list 1a72e1e add systemd -a list b620311 FIXES #449: accept int port bf8004b systemd unit file cadf046 fix pylint 8d8149c fix pylint 3dd9817 fix pylint 0b469e0 format 9e3020a FIXES #307: systemd command fc9ed19 wait command 2d6bb52 FIXES #442: allow --no-pod or custom --pod-args 7942a09 FIXES #442: allow --no-pod or custom --pod-args 701311a FIXES #447: support --env-file d704915 FIXES #447: support --env-file 3b7bf81 remove unused test a735aa5 Fix inverted condition in merging arguments b785095 Fix linter issues 7623180 Force black formatting af10345 FIXES #440: absolute secret 2d1bcdd update readme 4f02567 add unit tests 0645212 add badge b7c5609 pylint 4450835 pylint 5c33e4e pylint cbd6f6b pylint cleanups de1e59d fix some pylint 2f0ca9e add pytest ci 59c9a69 add pylint b7eac1e pylint 0d47e47 activate test c2d7b26 #434: handle unknown service 1e895c0 calc proper hash 132a22b #130: handle nested extend and normalize build context 0bde01d remove unused imports 91a579b Adding Test that the changes can build Image from build context of extended compose-file 56b8863 Fixing subdirectory from extends where extended service will build a Service from Dockerfile in an own subdirectory 5c3ec5f FIXES #431: support dns 779198b #379: no infra container 40cb6a7 log version 4fd9d86 #379: nothing shared in the pod to allow hostname 2a2c3a0 Fix timeout value data type 80e8527 #379: create a pod d6e21dc FIXES #425: pass --requires b9b2f83 FIXES #415: allow network_mode=slirp4netns 9af65ea adjust comment 3e6e268 test for logs af6a306 fix syntax error without a new line 68f745f referenced unmerged pr #192 to bring colors into container logging 90dcfdb FIXES #420: document -t ed8635a FIXES #422: Remove debug print 1d972ef Propagate all bind-type mount options 536925c FIXES #413: parse network_mode: container:container_name correctly 09c6cbe FIXES #408: preserve exit code 154a512 FIXES #386: make sure volumes are present in top level 523d215 #407: allow network_mode=service:mysrv 25494b5 Update README.md 19662c0 Fix healthcheck test type on replicas 4943e52 #395: make podman respect PODMAN_* in .env 4aa08cd FIXES #399: pass specific ip 15e0ab9 FIXES #397: support host network mode f66861f #249: read COMPOSE_PROJECT_NAME env af53b65 Simplify volume identification 890c584 Update README.md 0bd493f Allow empty default/error value in substitution 481c6d0 #394: config: multiple yaml 31df70b updated per maintainer review df40051 removes version from CONTRIBUTING 21a716c added log back in f00ac92 added config command 0433410 added args for version 0f9fe2b FiXES #393: missing arg when build as part of run a1be5ce add fallback to get 56a4988 Add support for volume driver and options 377b552 Fix substitution for empty variables c50599c FIXES #388: do not force build in run 4557279 #88: multiple aliases 7ad3775 FIXES #380: output to stderr 30051c2 Update README.md. Add link to podman dns plugin source 9e8e25c #378: down -v 2c60516 fix hostname in test Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 4.6Bruce Ashfield2023-08-011-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits: c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables 7680e5013 libpod: use new libcontainer BlockIO constructors 829b3e9b3 Bump to v4.6.0-dev 4d59a0f5c Bump to v4.6.0-rc1 e4a7923ca Bump to v4.6.1-dev c756b24f4 Bump to v4.6.0 2e53a5083 Release notes for v4.6.0 727362bde Update Release Notes for v4.5.1 8f2b73b03 rootless: use default_rootless_network_cmd config 3bd4c6a10 tests: fix "Storing signatures" check d5e8cc1d1 Fixes for vendoring Buildah 2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs a306eb5f6 Do not use deprecated hook functions from c/common bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0 a64016e17 pasta: Remove some leftover code from pasta bats tests 6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces 9cc19b055 fix(command): ignore `--format` in `podman search --list-tags` 714c3fe72 Use /proc/self/gid_map as intended, not uid_map d29e33650 podman machine start: fix ready service 1a1602b72 Makefile: don't rely on the non-standard -r flag for ln db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD 82a4b0816 cmd/podman/system: add API server support on FreeBSD 2f25372de pasta: Create /etc/hosts entries for pods using pasta networking 9555446d3 RPM: Fix koji and ELN issues 0749d685a Cirrus: Update operating branch dde6bcbca system tests: add and use _prefetch 0ee19f08c pkg/api: BufferedResponseWriter flush correctly d0505d6ba pkg/api: top return error to client 1398cbce8 container wait: support health states b680daa2d [CI:DOCS] Fix example on PublishPort 811867249 container wait API: use string slice instead of state slice 64153ace0 podman wait: update man page a699ed0eb StopContainer(): ignore one more conmon warning bd69b151f run,create: modify `--env-merge` behavior for non-existent vars 614c962c2 use libnetwork/slirp4netns from c/common 180cf0cf1 update c/common to latest d0af5df89 e2e: use parallel-safe /dev subdirectories aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version 00292ae1c systests: test instrumentation 63dfe842b compat API create/pull: fix error handling d54541894 compat API push: fix error handling 26721b0a0 GetSafeIPAddress(): discourage its use 810c97bd8 libpod: write /etc/{hosts,resolv.conf} once 13db83a00 e2e: fix one of the many log flakes bb932cc84 cmd, push: expose --compression-level 459248337 vendor: bump containers/common f4c514bff compat API container create: handle platform parameter 04a1cdfa9 refactor(machine): remove hard code ae6e39076 vendor in latests containers/common 81e63227e fix(machine): throw `connect: connection refused` after set proxy ec0924c6d [CI:BUILD] Packit: cleanups 65e5d2773 Add console mode to podman machine ddcefc9b9 e2e: kube test: specify expected exit code 574e00d32 e2e --authfile test: fix test condition f8f337501 chore(deps): update dependency setuptools to v68 84e42877a make lint: re-enable revive aa453c4f1 make lint: re-enable ginkgolinter 2efa7c3fa make lint: enable rowserrcheck f07aa1bfd make lint: enable wastedassign 60a5a5947 make lint: enable mirror a35da3ad8 bump golangci-lint to v1.53.3 47e0557d5 auto update: restart instead of stop+start acb5f97f9 cmd/podman/root.go: fix help document issue of the image store e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c 3829fbd35 podman: add support for splitting imagestore e29274853 network create --ip-range allow for custom range c2360800e fix(ssh): start machine failed to start with exit status 255 ed24f0b2c remote wait: fix "removed" condition 8d036906a [CI:DOCS] Fix service_destinations description in podman man page bfe61af6d quadlet should exit non zero on failures 91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0 ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress 5ffbfd937 pasta: use code from c/common 479677cb6 Add support for setting autoupdate in quadlet 3efaffae4 New command: podmansh 67674b3a6 vendor: update c/common to latest bdc2e8165 Add quadlet container support for Mask,Umask options 13c2aca21 libpod: make conmon always log to syslog 0ecc0d9e1 Document how to get secret mounts working on RHEL8 c28a43efd Verify podman pull dup image only prints id once d464e1d4f Vendor in latests containers/common 741ad0b4f Apply suggestions from code review f31466e74 Revert "rootlessport: exclude storage drivers via build tags" 8a90765b9 filters: use new FilterID function from c/common de494eb05 logformatter: ignore 'TOP-LEVEL' headings 63f5116ad test/e2e: fix network ID test 8c48f97c9 update c/{common,image,storage} to latest 354b8e20b [CI:DOCS] clarify supported transports in manifest push aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports c0ab29313 container wait: indicate timeout in error af7555e0d network-create: document new bclim option 7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0 6f821634a libpod: Podman info output more network information d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0 ac0ba2c2c quadlet: adjust container unit documentation 837b47244 e2e: GetRandomIPAddress(): parallelize 676c4d4e8 Makefile: add support for 'make help' on FreeBSD ab502fc5c criu: return error when checking for min version 16092930c Update docs/source/markdown/podman-systemd.unit.5.md faa2689dc 250-systemd.bats: remove outdated comment 0714321de github: add issue type as link to podman-desktop a66bab340 Add WorkingDir support to quadlet ebf747474 rootlessport: exclude storage drivers via build tags 8bf168cc1 Add ability to set static routes 68183b07d test/upgrade: correctly share mounts between host and container 444f19cb2 Update common, image, and storage deps ec6b7dbd9 Fix system service manpage name in API Documentation d734fcbff style(specgen): omit nil check 53834ef0d fix(specgen): index out of range when unmask=[] 71cae3159 Makefile to force a shell when running command 02432fc69 cirrus,ci: default to overlay for debian env b37f74b73 Quadlet: Add support for --sysctl flag 44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0 2ebc9004f Ignore spurious warnings when killing containers 7832879bf Makefile: don't hard-code the path for bash de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2 a7271f9dd GHA: Fix bad job-names & links in monitoring emails 6a696cb8f podman-registry: simpler, safer invocations f1ecdca4b Ensure our mutexes handle recursive locking properly 310082444 Fix an expected error message from pod removal a750cd987 Fix a race removing multiple containers in the same pod 0e47465e4 Discard errors when a pod is already removed 398e48a24 Change Inherit to use a pointer to a container b65ba90df e2e: add ginkgo decorators to address flakes 992093ae9 filters: better handling of id= 7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8 c7a8d29f1 refactor: improve get ssh path duplicate code 137c8ef4d logformatter: better recognition of ginkgo test names 944673c88 Address review feedback and add manpage notes 3b79f241b Add support for SecurityLabelNested flag in quadlet a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1 4fda7936c `system locks` now reports held locks 92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17 0948c078c Add a new hidden command, podman system locks 1013696ad Add number of free locks to `podman info` 3b39eb133 Include lock number in pod/container/volume inspect 1ce53677a fix ignition config creation 4584350f6 Makefile binaries target adopted for Mac and Win e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09 c51c6675e logformatter: proper status color for failed tests cf9bc25bb pasta: Test handling of unknown protocols b2c000670 pasta: Correct handling of unknown protocols 6611735ae Quadlet - add support for Pull key in .container 5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 d68121a60 Add default ulimit test for gen kube 81d64547f feat: add insecure registry troubleshooting solution 1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3 7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2 28934897e e2e: GetPort(): safer allocation of random ports 2c9f18182 The removeContainer function now accepts a struct 4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test"" b75ff3a8f Add a test for removing dependencies with rm -fa bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180" ef1a22cde Fix a deadlock when removing pods 8cb5d39d4 Pods now return what containers were removed with them bc1a31ce6 Make RemoveContainer return containers and pods removed e8d745627 Add an API for removing a container and dependencies 543b80949 systests: fixes for coping with extra systemd image 34c258b41 libpod: fix timezone handling 22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695 7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2 4173f942f test/system: quadlet use correct systemd restart policy 0372bf4bd systests: minimize race-condition window 1a34e1f85 systests: fix improper backgrounding of run_podman f09772889 set max ulimits for rootless on each start 5c7d50f08 Fix: display online_cpus in compat REST API bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6 72d4cede2 systests: fix race in quadlet tests f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0 88e78456d e2e: make BuildImage parallel-safe 370e1132c completion: fix panic in simplePathJoinUnix() 46456f5f1 Update module github.com/stretchr/testify to v1.8.4 585d715bb authfile.md: add default path of file for Windows/macOS. 01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1 e3240c2fb hack: fix typo in hack/podman-registry de92db0c8 man pages and command help: clean up descriptions e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts dfba6ddd4 Man pages: fix broken tables 5b2d963c4 test/e2e: add regression testing for comma-containing labels 047a4bc83 fix: volume create filters 0be9887af fix: move filter flags from StringSliceVar to StringArrayVar 6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec 85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync 8f94a4775 [CI:DOCS] fix Quadlet man page rendering 29f7c494e Quadlet: kube: use ExecStopPost 6487d9c11 Quadlet: kube: add ExitCodePropagation field 08b0d93ea kube play: exit-code propagation 6dbc13833 prune exit codes only when container doesn't exist 977b3cdbf podman: Add pasta to podman info 373919ca0 Revert "test/system/255-auto-update.bats: add debug logs" 901900530 Quadlet - add support for PodmanArgs to all groups 6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds fb8a12490 In a concurrent removal test, don't remove concurrently with builds 032d4a95f Consolidate error handling in Runtime.removeContainer f556e58bb Consolidate error handling in Container.cleanupStorage 4969c552e Fix reporting errors on container unmount 94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy d623670e1 pkginstaller: bump Qemu to version 8.0.0 4108b3711 Support podman --remote when Containerfile is not in context directory 9969374b6 chore(deps): update dependency requests to ~=2.31.0 5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name 6b48e9962 fix(deps): update module github.com/docker/docker to v24 1b9272a06 wait: look for exit code in stopped state 7d831d555 network create/update: allow dns servers comma separated 685c73618 source code comments and docs: fix typos, language, Markdown layout fe41077d4 Increase download progress to 80ch 8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0 29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED] 2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2 7c53a463b stats: get mem limit from the cgroup 8e2e7a440 quadlet tests: enable device.volume test bb3f611ff quadlet tests: remove unused socketactivated.container 18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3 5d522431c Correct markdown in docs 76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7 a99ad3b36 [CI:DOCS] Improve security in mysql examples 99cedae31 Cirrus: Record the buildah version for reference a54d4d7e1 test/e2e: do not call setenforce 458f2e8ed Fix discombobulated kubernetes support table 192ad70e9 run: ignore PODMAN_USERNS with --pod 5ff6fc559 Add --configmap to podman-remote kube play ad8d0e57d compat: accept tag in /images/create?fromSrc bf0cea76c fix HTMLSpan warnings a576fa3f1 generate systemd: error on init containers 32c2cea0f Remove future tense from man pages 5b148a0a6 compat,build: pull must accept string d1dcb0846 Cirrus: Add support for `[CI:NEXT]` eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic 3360214a0 system tests: add precision timestamps 8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options 4bed2c285 e2e: refactor and document serialization ce07860a1 machine: fix default connection URL to use 127.0.0.1 a485ba505 e2e: serialize gpg tests b9aaafbe1 Document podman-machine-default behavior 7580b8ae4 e2e: fix more test races (missing "wait") 6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5 ae5cbf37c Fix documentation of `--network-cmd-path` CLI option 71853319f Skip rhel-release branch unnecessary CI tasks ab29ff2f6 test/e2e: dedup Before/AfterEach nodes d01ae436e remote-save: fix permissions and dir formats 5a176f09c Set machine docker.sock according to rootful flag 13f787842 Fix handling of .containenv on tmpfs 2c0f40482 Do not include image annotations when building spec dd5d22cb3 build(deps): bump github.com/docker/distribution 26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy 74a5b92b3 test: check restart policy of init containers 3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469 04707f62d issue template: mention `su` 14001ad48 e2e: logs test: fix flakes 6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0 ff37615bf e2e: stop podman.service test: wait for server cb8e19677 logformatter: handle podman-machine test logs 58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1 2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate 01e20818c Ensure the consistent setting of the HOME env variable on container start 8aaa13acc Quadlet system tests - fix socket notification 1fb3cdf8a sqlite: disable WAL mode d24bec0d0 system tests: timeoutize quadlet, systemd 3d6894426 test: update README for integration tests c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes b97be3406 quadlet: support `HostName` 9dc107e74 e2e: fix race in a play-kube test bdb3ed795 Fix preference of user quadlets directories 40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0 661a238a9 fix(deps): update module golang.org/x/net to v0.10.0 332b47fef Check on client side for Containerfile, if none specified 18cd174c9 build(deps): bump github.com/docker/docker 9ec630f30 Buildah treadmill: several fixes 11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76 1bf057e8c chore(deps): update dependency docker to ~=6.1.0 27891a664 Update docs/source/markdown/podman-systemd.unit.5.md 505e02e04 fix(deps): update github.com/containers/common digest to bc15b04 53220717e fix: initContainer restart policy overridden by pod c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0 773b45704 chore(deps): update dependency requests to ~=2.30.0 0c070ebfb ginkgo json output: only in CI, not on laptop runs 73d3487cc Allow user quadlets to be stored under /etc 334adac74 fix(deps): update github.com/containers/common digest to ea87b34 95557a532 libpod: do not Cleanup() more than once df9344ac4 compat container create: match duplicate mounts correctly 42c822720 Update podman-completion.1.md 3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58 75d92f41d Run generate.CompleteSpec() for initContainers as well d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4 df8cc7af3 remote: return better connect error 61985a610 Add missing man page links for Docker man pages f877d7dcd Replace egrep/fgrep with grep -E/-F 19aabf440 remote: exec inspect update exec session status 305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778 999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d 38f993543 fix(deps): update github.com/containers/buildah digest to f353690 1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3 dc7515dc3 MVP for Podman Machine with AppleHV 54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts 1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310 e1e03a0e3 bindings, build: don't pass invalid platform in case of none ae5305134 Revert "logformatter: anchors: link to test summary, not name" fbe62f329 More cleanup: volumes: do not export to stdout 3050a6437 e2e test cleanup fa1ba17bc Update kube gen & play to use pod restart policy db4ad54f9 Add {{.Restarts}} to podman pod ps 0fef113a4 Add {{.Restarts}} to podman ps edbeee523 Add --restart flag to pod create 9e9bcec9e history: correctly set tags 073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0 3858a833b Makefile: do not run machine test in parallel 5af433923 pkg/machine/e2e: switch to GinkgoWriter 1720042d0 api: fix parsing filters c4b9f4b34 ginkgo-v2 cleanup workaround for #18180 5eb99a0ac test/e2e: fix custom timing reporting 1bff0108f logformatter: anchors: link to test summary, not name 914ff01f9 WIP: logformatter: handle ginkgo v2 logs b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns 054154c77 test/e2e: run system reset test serial c5922cc6f test/e2e: fix CleanupVolume/Secrets() bc1ed07b5 ginkgo v2: fix new Skip() behavior cd46e7279 test/e2e: fix pause tests to unpause before cleanup() 2ce4e935b ginkgo v2: drop localbenchmarks fb7a96638 test/e2e: switch to GinkgoWriter cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup() 8cc7a3618 ginkgo: run on all cores 9c1f713c7 test/e2e: fix Cleanup() 9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test" 629a6a6e4 test/e2e: actually check for cleanup errors b9ba85044 Lower e2e timeout to not waste time when it hangs fbb7c980a test/e2e: containers.conf tests add missing Wait() c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription() 666e31447 ginkgo v2: remove deprecated flags 445815036 update to ginkgo v2 502654580 test/e2e: do not remove CNI directory 7b25f362e e2e: login_logout: use unique authfile for each test d06480d99 Fix clashing subuid 24be46a51 [CI:DOCS] troubleshooting: fix subuid example bab4217cd manifest, push: use source as destination if not specified 202701e65 Update github.com/moby/term digest to 0564e01 e8f34e457 Add name-generation test b5ef9555a Implement machine provider selection 70870895b libpod: improve errors management in cleanupStorage 5592dc12f libpod: report unmount idmapped rootfs errors 2932208c2 test: do not wait 10 seconds before killing myyaml 891bc117e podman: simplify code with a switch bac57409f test: fix typo 5fefb54d2 build(deps): bump github.com/docker/docker 0a92b399d swagger: fix Info name conflict 20c42489e Nightly dependency treadmill: remove 33fa54580 Update short description for disconnect cmd aca993632 windows: podman save allow the use of stdout 512b39475 Update c/common and avoid setting umask 7ff2eaf96 Cirrus: Update CI VM Image to F38/37 0e1ddd3df Cirrus: Run code validation on rawhide 221e3023f Fix rand.Seed() deprecation in golang 1.20 edaf3b4d5 Add sha256: to images history id for docker compatibility d51911f7b Support systemd optional prefix '-' for devices. a0c7bb26a Fix a copy/paste error in an error message ba4586375 chore(deps): update dependency requests to ~=2.29.0 d905e412e Fix simple typo in podman-network-create.md a027bf102 e2e cleanup: push with auth: add error checks eeb210bc5 e2e: remove "-it" from podman run & exec 64959b744 pkg/machine: rework RemoveConnection() 2296e71e3 machine: qemu only remove connection after confirmation c8e423b55 Add file swith for pre-exec 6aaf6a284 system reset: show graphRoot/runRoot before removal e95e9be76 fix manifest annotate help bdf367958 Netavark userns test: give aardvark time to come up bbe9d61c4 sqlite: move first read into a transaction f3c3ef72d Recover from failed podman machine start d222a392c rootless: support joining contianers that use host ns 0e955bec7 auto-update: return errors when checking for updates fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2 ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463 230ddbe0c Add user mode networking feature to Windows 3216110de system/reset.go: help: fix typo ae5ed6d85 e2e create same-IP: try to fix flake faeed14f6 system tests: safer container-stop signaling 6014f26c4 Revert "Resolve symlink path for qemu directory if possible" c5a928c5b ps: --format {{.State}} match docker output b4eecd908 test/system/260-sdnotify.bats: fix test flake 1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services fb3b92b96 Eliminate transient container deps from wslkerninst dd217d8e0 Wording d16c880fb fix(deps): update github.com/containers/common digest to 5547996 70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call 1f1525f2e support `--digestfile` for remote push d640461ce e2e: skip journald test if journald is unavailable 5156ab996 Cirrus: Enable testing on Fedora rawhide 8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task 77f86f48e chore(deps): update dependency setuptools to ~=67.7.0 03a7c6a91 Cirrus: Drop benchmarks artifacts 15664b4b0 test/e2e: correctly reap service process c9d861023 test/e2e: add missing options to remote service 1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir() 601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file 08c651016 test/e2e: fix network create flake due same subnet 525c27fe1 test/e2e: fix SkipIfNotActive() 01d518a97 test/e2e: do not try to use docker as rootless 6e97976ad test/e2e: do not leak "hello" file 750442d09 podman-remote logs: handle server error correctly 3aaa2793d test/e2e: use custom network config v2 00fdfa063 rename ImagePushReport to ImagePushStream 81621ce8a Specify format to buildah before commit 7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman edb64f8a7 libpod: stop containers with --restart=always 0364aef1e test: fix race when listing cgroups b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune 346483717 [CI:DOCS] Update RELEASE_PROCESS.md 8019dc9e6 hyperv: add podman socket mapping a089f1b5c e2e networking test: better way to get host IP bce38c1af Updated system test to be easier to read 5f5bea0d1 bindings tests: bail out early on image errors f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version 8125bab9b chore(deps): update dependency setuptools to v67 a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5 da83364eb e2e: quadlet uses PODMAN env for podman binary path 6e0cf9344 Fixes format inconsistencies with docker for certain history fields acb24f164 Makefile: do not prefix /etc 7e4cd22ac libpod: configureNetNS() tear down on errors 4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message 4b8230119 HyperV: wait on stop 3cdaf85d6 build(deps): bump github.com/docker/docker 459f751ae Makefile: include `release-artifacts` target 3222545ad Enabled network over vsock aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1 64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 41d516412 fix remote start --filter 1cac53506 Update API reference to include v4.5 a0204f1dd Add missing security options to /info response de5fa9ce9 Add mention of redir to doc `rootless.md` 08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0 8e7f98ae6 docs(readme): add status badges and remove hardcoded release info e9356ba20 Don't use bytes.NewBuffer to read data f488d9890 Add support for HVSOCK on hyperv e7a323635 docs: update network tutorial with netavark DHCP support 32344952a bump main to v4.6.0-dev 54ba17f69 Remove disused test/install 1fa4e45a9 Return title fields as a list be148665c [CI:BUILD] Packit: Initial Enablement 4aced7e3e Quadlet - do not set log-driver by default 51b582d0e system tests: address COPY-hardlink flake 25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8 31420112c system tests: fix race in kube-play read-only f544971b7 chore(deps): update dependency docker to v6 f95276bfa CI: enable sqlite system tests d28656403 test: enable test_wait_next_exit f312c8533 Update dependency PyYAML to v6 f67d640b8 test/e2e/systemd_activate_test.go: simplify test 5315c0cc7 Update docker.io/library/golang Docker tag to v1.20 b4cfc727b api: auth: fix nil deref 176c329f9 Update dependency requests-mock to ~=1.10.0 b75ee05d3 Update dependency requests to ~=2.28.2 d38b22d50 fix: Document removing anonymous volumes at create fe22299f9 Use a sane polling interval in WaitContainerDocker bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands 785c63c0f Renovate: Ensure release-note-none label is added 4bc4609d8 Renovate: Update ignore paths 64ea5971a *: migrate image registry to registry.k8s.io 4f5f89cf8 Do not display the resource limits warning message Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.31Bruce Ashfield2023-08-011-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.31.0, which comprises the following commits: d0de60bbf Bump 1.31.0 723ed8e18 Bump c/common to 0.55.1 and c/image to 5.26.1 b835631bf Update vendor of containers/common c4d2a8520 Run unit tests for copier and chroot without -cover 135b5a8f0 Fix transition test to work with latest selinux policy d8b06097d Bump c/image to 5.26.0 and c/common to 0.54.0 7a5a18334 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` a8f350fc5 rootless: use default_rootless_network_cmd config b3edcaa06 vendor: update c/{common,image,storage} to latest d22a5293b chore: pkg imported more than once 74b885b9e buildah: add pasta(1) support 11ba328e2 use slirp4netns package from c/common a5c0c8acf update c/common to latest 14cd28c26 add hostname to /etc/hosts when running with host network eb135b8d5 vendor: update c/common to latest 237ac533e [CI:BUILD] Packit: add jobs for downstream Fedora package builds eeaf80f95 fix(deps): update module golang.org/x/sync to v0.3.0 b064ad7f6 fix(deps): update module golang.org/x/crypto to v0.10.0 bdd27d393 Add smoke tests for encryption CLI helpers b090ae238 fix(deps): update module golang.org/x/term to v0.9.0 fefbd04e5 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3 bd32a04c3 Remove device mapper support 92582a75c Remove use of deprecated tar.TypeRegA 261a524b9 Update tooling to support newer golangci-lint 6714a79eb Make cli.EncryptConfig,DecryptConfig, GetFormat public b3e39dfd9 Don't decrypt images by default 14b74e7f8 fix(deps): update module github.com/onsi/gomega to v1.27.8 1d08bd9de fix(deps): update github.com/containers/storage digest to 3f3fb2f 0dac0dfa5 Renovate: Don't touch fragile test stuffs d9ecd7c59 [CI:DOCS] Update comment to remove ambiguity 232230cae fix(deps): update github.com/containers/image/v5 digest to abe5133 4247a3e47 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 925ff0e62 fix(deps): update module github.com/containerd/containerd to v1.7.2 5a83012c9 Explicitly ref. quay images for CI 9b65b12ae At startup, log the effective capabilities for debugging 3a351f603 parse: use GetTempDir from internal utils 6adbfeeb4 GetTmpDir: honor image_copy_tmp_dir from containers.conf 5eb356bb8 docs/Makefile: don't show sed invocations a630e3513 CI: Support testing w/ podman-next COPR packages 90f7436ac intermediate-images inherit-label test: make it debuggable 08b9a5407 fix(deps): update github.com/containers/common digest to 462ccdd 7e327cf18 Add a warning to `--secret` docs 9cd28db91 vendor: bump c/storage to v1.46.2-0.20230526114421-55ee2d19292f 0766b004b executor: apply label to only final stage beae5647c remove registry.centos.org 68337bf9c Go back to setting SysProcAttr.Pdeathsig for child processes 371bc34fe Fix auth.json path (validated on Fedora 38) wq Signed-off-by: Andreas Mack <andreas.mack@gmail.com> c6e73322b fix(deps): update module github.com/stretchr/testify to v1.8.3 0b69f7029 CI: fix test broken by renovatebot a5ad7b047 chore(deps): update quay.io/libpod/testimage docker tag to v20221018 86470bfd9 fix(deps): update module github.com/onsi/gomega to v1.27.7 91ce0571d test: use debian instead of docker.io/library/debian:testing-slim 7d9447b2f vendor: bump logrus to 1.9.2 e2b751a0b [skip-ci] Update tim-actions/get-pr-commits action to v1.3.0 d58d3a14b Revert "Proof of concept: nightly dependency treadmill" 911c3b5e8 fix(deps): update module github.com/sirupsen/logrus to v1.9.1 797f03430 vendor in containers/(common,storage,image) ba8a1bd0e fix(deps): update module github.com/docker/distribution to v2.8.2+incompatible 0eb266a95 run: drop Pdeathsig e8d11201a chroot: lock thread before setPdeathsig 51c03212e tests: add a case for required=false 00581b806 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 be682de68 build: validate volumes on backend dcc7feb6f secret: accept required flag w/o value ba06158ab fix(deps): update module github.com/containerd/containerd to v1.7.1 cad25dd6b fix(deps): update module golang.org/x/crypto to v0.9.0 dffb148b3 Update the demos README file to fix minor typos efa0d69a2 fix(deps): update module golang.org/x/sync to v0.2.0 e0fe30e61 fix(deps): update module golang.org/x/term to v0.8.0 d5b32b0f0 manifest, push: use source as destination if not specified 2fed5fc91 run,mount: remove path only if they didnt pre-exist 4b1c5e3a9 Cirrus: Fix meta task failing to find commit a913dc56a parse: filter edge-case for podman-remote 9252470c4 fix(deps): update module github.com/opencontainers/runc to v1.1.7 0019256f2 fix(deps): update module github.com/docker/docker to v23.0.5+incompatible b37c4ee43 build: --platform must accept only arch 5e43f8c9d fix(deps): update module github.com/containers/common to v0.53.0 562172751 makefile: increase conformance timeout 4775b247b Cap suffixDigitsModulo to a 9-digits suffix. 07fda81df Rename conflict to suffixDigitsModulo 4bb28899e fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 411bdc968 fix(deps): update module github.com/opencontainers/runc to v1.1.6 d27c59f85 chore(deps): update centos docker tag to v8 43440ec6e Clarify the need for qemu-user-static package c34fbea7c chore(deps): update quay.io/centos/centos docker tag to v8 449fd3d2e Renovate: Ensure test/tools/go.mod is managed 6d877d89d Revert "buildah image should not enable fuse-overlayfs for rootful mode" e9884fc41 Bump to v1.31.0-dev 04965f119 Bump to v1.30.0 b5867198c fix(deps): update module github.com/containers/common to v0.52.0 41b760f97 fix(deps): update module golang.org/x/crypto to v0.8.0 9bd6ccf92 chore(deps): update dependency containers/automation_images to v20230405 d57638879 vendor c/common ff62cdebdd0e f847463ed vendor in latest containers/(storage, image) 45940016c fix(deps): update module github.com/opencontainers/runc to v1.1.5 0ff4746c4 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.7 2e25b156f buildah image should not enable fuse-overlayfs for rootful mode dcd7b789a stage_executor: inline network add default string c8c37c78f parse: add support for relabel bind mount option c95370cd3 build: pass process environment variables by reference 2ad68d816 run: pass process environment variables by reference d45916350 fix(deps): update module github.com/containers/common to v0.51.2 a92fe130e chore(deps): update dependency containers/automation_images to v20230330 e67bddded fix(deps): update module github.com/docker/docker to v23.0.2+incompatible 20861cd21 chore(deps): update dependency containers/automation_images to v20230320 73dc43c1d fix(deps): update module github.com/onsi/gomega to v1.27.6 e3a30b54a fix(deps): update github.com/opencontainers/runtime-tools digest to e931285 374133c95 [skip-ci] Update actions/stale action to v8 ce8c56780 test: don't allow to override io.buildah.version dfc9bb20e executor: only apply label on the final stage 946395494 Update docs/buildah-build.1.md 58a22053b update build instruction for Ubuntu aad1e994a code review 3afa5ca74 build: accept arguments from file with --build-arg-file 8e84bb709 run_linux: Update heuristic for mounting /sys 78416393f [CI:BUILD] Packit: Enable Copr builds on PR and commit to main e8dee4083 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.6 c0f0efada Update to Go 1.18 db0bafef3 Disable dependabot in favor of renovate 4055cc880 chore(deps): update dependency containers/automation_images to v20230314 2088f6bd7 Fix requiring tests on Makefile changes b85a38946 Vendor in latest containers/(storage, common, image) b6f32e576 imagebuildah: set len(short_image_id) to 12 499f1301f Re-enable conformance tests fa145b092 Skip conformance test failures with Docker 23.0.1 bc2423ebc Cirrus: Replace Ubuntu -> Debian SID 37afb5dbc run: add support for inline --network in RUN stmt e2210c3b7 vendor: bump imagebuilder to a3c3f8358ca31b1e4daa6 db509859d stage_executor: attempt to push cache only when cacheKey is valid a35dbb284 Add "ifnewer" as option in help message for pull command c1b82d195 build: document behaviour of buildah's distributed cache f444d6589 fix(deps): update module golang.org/x/term to v0.6.0 376eb73ab Add default list of capabilities required to run buildah in a container 46ffaf935 executor,copy: honor default ARG value while eval stage fd5db96c0 sshagent: use ExtendedAgent instead of Agent 9e6e15c31 tests/bud: remove unwated test 8a8f99e09 executor: do not warn on builtin default args b9e4e29e9 executor: don't warn about unused TARGETARCH,TARGETOS,TARGETPLATFORM 0ed9b4c8c Fix tutorial for rootless mode cf408f758 Vendor in latest containers/(common, storage, image) 0e707faa7 Ignore the base image's base image annotations 30f84c8ee fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.5 05785ee57 build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4 21e6e91e4 Vendor in latest containers/common 0b7a7f80b docs/tutorials/04: add defaults for Run() 7baf73b2a imagebuildah.StageExecutor: suppress bogus "Pushing cache []:..." be10b8d20 executor: also add stage with no children to cleanupStages f9e51e744 [CI:BUILD] copr: fix el8 builds 8125e45a5 Fix documentation on which Capabilities are allowed by default a8ed3bb58 Skip subject-length validation for renovate PRs 956c5155d Temporarily hard-skip bud-multiple-platform-values test 3afa7e360 fix(deps): update github.com/openshift/imagebuilder digest to 86828bf 4875f1bc9 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.17 36cade0c3 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 e0e43a419 build(deps): bump github.com/containers/image/v5 from 5.24.0 to 5.24.1 24b85d217 [skip-ci] Update tim-actions/get-pr-commits digest to 55b867b f96e1ad4d build(deps): bump github.com/opencontainers/selinux 2ef59fc2c build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 482bf4df4 Add renovate configuration 4dfb82890 Run codespell on codebase ae697555c login: support interspersed args for password 123ef1693 conformance: use scratch for minimal test 6a0367ff2 pkg/parse: expose public CleanCacheMount API 5d50a7320 build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 6d53ec7a3 build(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.16 dbf1d43b3 docs: specify order preference for FROM 2008a5302 Bump to v1.30.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Fix build with gas/2.41Khem Raj2023-08-012-0/+66
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: convert CVE_CHECK_IGNORE to new CVE_STATUS formatPeter Marko2023-08-011-3/+1
| | | | | | | See https://git.openembedded.org/openembedded-core/commit/?id=34f682a24b7075b12ec308154b937ad118d69fe5 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: ignore CVE-2022-2989 and CVE-2023-0778Peter Marko2023-08-011-0/+3
| | | | | | | | | | | | | | | | | | NVD shows only redhat links and does not mention fixed-in release se these CVEs will show-up in reports indefinitely. They are already fixed in current version, so ignore them. CVE-2022-2989 * https://github.com/advisories/GHSA-4wjj-jwc9-2x96 * https://github.com/containers/podman/pull/15618 * commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups CVE-2023-0778 * https://github.com/advisories/GHSA-qwqv-rqgf-8qh8 * https://github.com/containers/podman/pull/17528 * commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content Signed-off-by: Peter Marko <peter.marko@siemens.com>
* recipes-bsp: Add u-boot-xlnx scripts for Xen supportSandeep Gundlupet Raju2023-08-013-0/+120
| | | | | | | | | | | | | | | | | | | | | | | Add new boot.cmd.xen to u-boot-xlnx-scr bbappend to enable Xen support for ZynqMP and Versal devices. User can enable xen u-boot script by adding below variable from configuration file. BOOTMODE = "xen" This u-boot script also supports to configure below Xen params from configuration file params variable assignment ------ ------------------- duart XEN_SERIAL_CONSOLES = "serial0" dom0_mem DOM0_MEM = "1500M" dom0_max_vcpus DOM0_MAX_VCPUS = "1" extra params XEN_CMDLINE_APPEND = "loglvl=all" Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* recipes-bsp: Add device-tree files for Xen supportSandeep Gundlupet Raju2023-08-017-0/+288
| | | | | | | | | Add device-tree files for Xen support, Earlier all these files were in meta-petalinux layer, Hence move these files to this layer so that users can build Xen without including meta-petalinux. Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: use bfd linker even when gold is selected by ls-is-goldMartin Jansa2023-07-271-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: ld: --no-dynamic-linker: unknown option * you might need to clean the build for updated LDFLAGS to be corectly re-configured * lld and bfd are fine: $ ld.gold --help | grep dynamic-linker -I PROGRAM, --dynamic-linker PROGRAM $ ld.bfd --help | grep dynamic-linker -I PROGRAM, --dynamic-linker PROGRAM --no-dynamic-linker Produce an executable with no program interpreter header $ ld.lld --help | grep dynamic-linker --dynamic-linker=<value> --no-dynamic-linker Inhibit output of .interp section * not sure where this came from only place where I see --no-dynamic-linker in runc-opencontainers WORKDIR is: aarch64-oe-linux/13.1.1/plugin/include/config/aarch64/aarch64-linux.h: %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \ aarch64-oe-linux/13.1.1/plugin/include/aarch64-linux.h: %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \ so my guess is: 923ae4da Makefile: add support for static PIE Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ovs: fix some installed packages in openvswitch cannot be executedXiangyu Chen2023-07-252-0/+44
| | | | | | | | | | | | | | | | | | | | | The variable "PYTHON3" in Makefile.am set as python3, this cause the following scripts error: /usr/sbin/ovs-bugtool Not found the interpreter python3 /usr/bin/ovs-pcap Not found the interpreter python3 /usr/bin/ovs-test Not found the interpreter python3 /usr/bin/ovs-tcpdump Not found the interpreter python3 /usr/bin/ovs-tcpundump Not found the interpreter python3 /usr/bin/ovs-vlan-test Not found the interpreter python3 /usr/bin/ovs-l3ping Not found the interpreter python3 /usr/bin/ovs-parse-backtrace Not found the interpreter python3 /usr/bin/ovs-dpctl-top Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-check-dead-ifs Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-check-dead-ifs Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-monitor-ipsec Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-vtep Not found the interpreter python3 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: set CVE_VERSION explicitlyChen Qi2023-07-251-0/+1
| | | | | | | | | The CVE_VERSION defaults to PV, but in NVD database, there's no prefixing 'v' in database. So set CVE_VERSION explicitly for better CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>