| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
|
| |
commit [xen-tools: don't declare xencommons as an initscript for
systemd] was wrong in an amazing two ways. It has an extranenous
} and it has inverted logic.
The result is that xencommons is not being properly declared as
an initscript for sysvinit, and hence we don't fully boot. It
isn't a problem for most systemd configurations, so we were
booting as the initscript wasn't firing.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
| |
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Upgrade to 0.8a.
License checksum updated as the FSF street address changed.
Apply a patch to use the correct host compiler when building biossums,
removing the need for a separate biossums-native recipe.
Don't hardcode /usr/share, use ${datadir}.
Install all found firmware (including the new Banshee BIOS in 0.8a) and
the debug files which were not installed but intended to be packaged.
Remove redundant PR and S assignments, as these are the default values.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
Fix a race in cpp/ where token[12].h are written to a temporary file
with the same name.
Also update the status of cross.patch.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Add a space before doing an append in IMAGE_INSTALL on x86.
This is solving issues happening if someone is using IMAGE_INSTALL in
local.conf to add things to the generated image.
Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Backport a patch to fix segfault when undefining virtual machines.
virsh undefine vm
rpc-libvirtd[9725]: segfault at 18 ip 00007f8b0a5f17a9 sp 00007f8b3f8cbb60
error 4 in libvirt_driver_qemu.so[7f8b0a56e000+113000]
error: Code: a4 01 0f 84 89 03 00 00 4c 89 ff e8 d1 ed f7 ff 85 c0 0f 88 b9
02 00 00 48 8b 45 b8 48 8b b0 80 00 00 00 48 8b 86 b0 02 00 00
<48> 8b 78 18 48 85 ff 0f 84 42 01 00 00 e8 b5 02 f8 ff 48 89 45 c0
Disconnected from qemu:///system due to end of file
error: Failed to undefine domain 'vm'
error: End of file while reading data: Input/output error
Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The NVD database uses version without a prefixing 'v'
for containerd.
e.g.
https://nvd.nist.gov/vuln/detail/CVE-2022-23648
So we need to explictly set CVE_VERSION.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
This makes the main recipe more readable, and allows us to
clearly see changes to the SRC_URI and the main recipe
separately.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping nerdctl to version v0.18.0-61-g48f189a, which comprises the following commits:
8385be4 add test case for nerdctl inspect to check mounts field
a766555 show mounts info for nerdctl inspect
1547f73 Add flag ipfs-address to push to remote IPFS node
2db1039 update stargz-snapshotter (0.11.4), IPFS (0.12.2)
7b1c33d Import NOTICE from Docker/Moby
bc66bfa CI: upload go-mod-vendor.tar.gz as a backup
43f7b6b Dockerfile: update Ubuntu to 22.04
6c22944 Follow-up to `Support --init argument in nerdctl run command`
a8c3de4 Bump github.com/moby/sys/mount from 0.3.1 to 0.3.2
c4cf6a0 Bump actions/checkout from 3.0.0 to 3.0.1
90a91d2 Bump github.com/compose-spec/compose-go from 1.2.2 to 1.2.4
839faf5 Added volume remove fixes(issue #971)
f8272ed Support --init argument in nerdctl run command
175923e Export OS Platform and Arch information in `nerdctl version` command
b3504ce feat: container image build ci for push image to github registry
8dc5fc5 seccomp: relax restrictions depending on --cap-add
65170cb Bump actions/setup-go from 2 to 3
fe6a7e8 inspect: add type flag to inspect command
ac58d8c CI: relax timeout
96b5e49 nerdctl wait: fix flakeness and error handling
ba0624d Deflake TestComposeKill
401b541 update BuildKit (0.10.1)
1a3dfe9 Bump github.com/containerd/continuity from 0.2.2 to 0.3.0
800d9ee Bump github.com/ipfs/go-ipfs-http-client from 0.2.0 to 0.3.0
72a2923 Bump github.com/ipfs/interface-go-ipfs-core from 0.6.1 to 0.6.2
7c78e79 Bump github.com/compose-spec/compose-go from 1.2.1 to 1.2.2
8941220 update runc (1.1.1)
6fdf4d1 go.mod: vishvananda/netlink v1.2.0-beta
457317a build: fix `content digest ... not found` for built multi-platform image
500f039 Bump github.com/compose-spec/compose-go from 1.1.0 to 1.2.1
929298c Format created to be compatible with docker inspect
0564fc1 Remove orphan containers before the service has be started
b66451e update RootlessKit (1.0.0), imgcrypt (1.1.4)
50cbdfc Add check of snapshotter when sharing images
9c3cca2 docs: clarify availability of optional features
e45c8ea Bump github.com/docker/docker
589fc27 Bump github.com/docker/cli
6f5d0d2 Bump github.com/ipfs/interface-go-ipfs-core from 0.6.0 to 0.6.1
4372842 Fix nerdctl ignores BUILDKIT_HOST
0c334bd Support assign static IP address in `compose up` command by using ipv4_address field
facc229 CI: set fail-fast to false
fcdaa2e Add a document about setting up `nerdctl build` with BuildKit
ae1399a CNI: switch away from `isolation` plugin to `firewall` plugin with `ingressPolicy`
0cb1fe6 update containerd (1.6.2)
7f13c20 Fix `nerdctl build` logs error even when succeeds
8e3923c Bump github.com/containerd/go-cni from 1.1.3 to 1.1.4
d948091 avoid nil authconfig && display warning msg for unencrypted passwd
d8167e0 docs: clarify that P2P image distribution (IPFS) is completely optional
ba88f62 update CNI plugins (1.1.1), stargz-snapshotter (0.11.3), IPFS (0.12.1)
19bf1d3 enhance namespace management
1231875 push: skip foreign layers
87aa769 Support --ip argument when run the container
8ec0672 rootless: Support BuildKit containerd worker
21d0350 Bump github.com/ipfs/interface-go-ipfs-core from 0.5.2 to 0.6.0
debe171 CI: remove integration test with contianerd v1.4.5
fb0339e build with go 1.18
c0e0edf fix login on defaultRegistry
7e68a87 Support fallback to plain http in nerdctl login
7cb387d Follow-up to `Add GitHub issue templates`
701a55c Add GitHub issue templates
a9e5022 Windows CI: install git
2bcbdcb refactor netutil
b75b86c Bump github.com/docker/cli
94d9169 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0
04199ec Bump github.com/docker/docker
12ca1b0 fix make failed when use go1.16
3e073bc build(deps): bump github.com/containernetworking/plugins
802db60 Update the README.md to remind people to upgrade the Go version
f20ef09 add macvlan/ipvlan doc for cni
d56bdd6 pkg/portutil: improve rootless error message
b154105 update stargz-snapshotter (0.11.2)
3f1ffe2 Support allocate host port when try to run container
9c14a02 CI: temporarily remove FreeBSD integration tests
0e7ddc9 Attempt to deflake TestPushInsecureWithLogin
1b1f1df build test-integration image in arm64
1dcc70c update containerd, CNI plugins, IPFS, Stargz Snapshotter
e8f7b6a Bump github.com/compose-spec/compose-go from 1.0.9 to 1.1.0
63ba16a Bump github.com/containerd/containerd from 1.6.0 to 1.6.1
b6850ff Bump golangci/golangci-lint-action from 2 to 3.1.0
f4d689d Bump actions/checkout from 2 to 3
f15e589 add ipam-driver and ipam-opt flags for create network
47190c4 Separate network code
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
We previously disabled init.d/xencommons when systemd is the
init system (to fix duplicate initialization of some resources),
but during rootfs install, update-rc.d will look for the script
if xencommons is declared as an initscript package.
We match the installation and only delcare it as an initscript
in a non systemd configuration.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
K3s (and Kubernetes) supports load balancing via IPVS, and by default reports
errors when IPVS kernel modules cannot be loaded.
This patch adds the missing reported kernel modules to the k3s recipe:
* ip-vs
* ip-vs-rr
* ip-vs-wrr
* ip-vs-sh
The modules are configured by including the ip_vs kernel feature.
Signed-off-by: Richard Neill <richard.neill@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
commits short log:
41bb202fb (tag: v2.17.1) Set release date for 2.17.1.
8f42d4f59 NEWS: Highlight libopenvswitch API change caused by UB fixes.
14301b3a3 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.
3a2eef792 python: idl: Set cond_changed to true if condition change requested.
d05ccf288 dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id.
79e291f98 alb.at: Add tests for cross-numa polling.
9c3b74fb2 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate.
8580ff9dd pmd.at: Add tests for multi non-local numa pmds.
6bf4eeddb dpif-netdev: Fix non-local numa selection for more than two numas.
c41434b3b dpif-netdev: Fix typo in function name.
e0aa5e132 python: idl: Set cond_changed to false if last id is zero.
8da40d31c ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().
63a903ab4 ofproto/ofproto-dpif: Fix dpif_type for userspace tunnels.
14d54eb8b sset: add SHORT version of SAFE loop macros.
f0e63b115 sparse: bump recommended version and include headers.
70b87cf72 idlc: support short version of SAFE macros.
3777ed90c rculist: use multi-variable helpers for loop macros.
bb52e9beb hindex: remove the next variable in safe loops.
7d6cbfa24 hindex: use multi-variable iterators.
97ad96b63 cmap: use multi-variable iterators.
cd62fda22 hmap: use short version of safe loops if possible.
d56bfd752 hmap: implement UB-safe hmap pop iterator.
e2c835486 hmap: use multi-variable helpers for hmap loops.
897d6647e list: use short version of safe loops if possible.
979a9eb5b list: use multi-variable helpers for list loops.
6bacf802c util: add helpers to overload SAFE macro.
f127123d6 util: add safe multi-variable iterators.
38e73f0b6 util: add multi-variable loop iterator macros.
e91edf456 ovsdb: raft: Fix inability to read the database with DNS host names.
The ptest results BEFORE uprev:
ERROR: 2340 tests were run,
30 failed unexpectedly.
65 tests were skipped.
failed cases:
10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1024 1180 1181
1182 1183 1184 1185 1290 1291 2387 2391 2394
The ptest results AFTER uprev:
ERROR: 2343 tests were run,
30 failed unexpectedly.
65 tests were skipped.
failed cases:
10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1025 1183 1184
1185 1186 1187 1188 1293 1294 2390 2394 2397
Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
We shall only have recipes for the last two stable releases, thus
get rid of the 4.14 recipes and the corresponding patches.
Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add recipes for Xen 4.16 release as, according to the documentation
we shall have recipes for the latest stable major version of Xen
before the next Yocto release. Bump PREFERED_VERSION to 4.16 as well.
Take the opportunity to update SRCREV of xen recipes for master
and bump XEN_REL version to 4.17 as this is the current development
version.
Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
Bump SRCREV version of xen recipes to use the latest 4.15 release
which is 4.15.2.
Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The commit [ xen: only package xencommon systemd components if systemd
is enabled] attempted to only package init.d scripts for non-systemd
systems (and vice-versa for unit files).
But the xen-tools builds installs the files uncondtionally, so we can
end up with unpackaged files in some configurations. We can test on
the init system and removed the unused versions of the init to avoid
both packging and runtime issues.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
vbd was added for xen based VMs since
bdee00fac9b4 ("Disk reading interface for Xen based VMs and example")
and should be built only when xen is enabled, otherwise there would not be
necessary xen headers and cause the following failure.
Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
On some build hosts, one of our downloaded depedencies matches
patch.bbclass' regex, and is then thought to be a patch. That leads
to errors as follows:
Compiling k3s failed with:
do_patch: Importing patch 'github.com.andreyvit.diff' with striplevel '1'
We add a noapply to the SRC_URI to ensure that it is not considered
a patch.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The uprev of libvirt introduced a new sysctl file:
60-qemu-postcopy-migration.conf
In a standard configuration, the FILES variable of
python-libvirt picks up the fiel, but in a multiconfig setup,
the definition of ${libdir} changes and the file is missed.
Since systcl always looks in /usr/lib, we can't rely only
on ${libdir}, so we explicitly add the new .conf file into
the packaging. This will allow new additions in the future
to be considered as to in which package they belong.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
The newly added flannel_plugin had a typo of protcol, so we add our
missing 'o' and fix the uri parameter.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
We have flannel users! It was noted that flannel is no longer part
of the main cni-plugins repo, but is instead hosted in a standalone
location.
We add the new repository, its SRCREV and drop it back where it
can be built and packaged in the same way as it previously was.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
| |
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The shortlog of the previous uprev incorrectly stated that
1.23.x was the target. There are issues remaining with that
version, so the uprev was contained to 1.22.x
We also typically do NOT use the exact release tag, since
fixes are continually arriving post release, and with the
extensive go mod vendor process, it doesn't accurately
represent the version.
As such, we switch to: v1.22.6+k3s1+git${SRCREV_k3s}, for
finer grained version tracking.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
Add the curses/terminal control application for podman.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Bumping irqbalance to version v1.6.0-154-gb3adb5f, which comprises the following commits:
0f594a6 Separate variable declaration from assignment
9b004c6 Ensure that we get all of a unix message
df7b543 Add '\0' to the end of strings to avoid heap buffer overflow
f8bdd0e ui/ui.c: always use "%s"-style format for printf()-style functions
efab272 Drop CapabilityBoundingSet from irqbalance service
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping kvmtool to latest, which comprises the following commits:
faae833 Revert "kvm tools: Filter out CPU vendor string"
1b76b6e Add --no-pvtime command line argument
7d4671e aarch64: Add stolen time support
ff69582 aarch64: Populate the vCPU struct before target->init()
95f4796 arm: pci: Generate "msi-parent" property only with a MSI controller
c334a68 arm: Use pr_debug() to print memory layout when loading a firmware image
9b681b0 Remove initrd magic check
2108c86 virtio/pci: Signal INTx interrupts as level instead of edge
20b93be x86: Set the correct APIC ID
d4d6f15 x86: Fix initialization of irq mptable
cdd7d8c riscv: Generate PCI host DT node
721da16 riscv: Handle SBI calls forwarded to user space
7c9aac0 riscv: Generate FDT at runtime for Guest/VM
762224e riscv: Add PLIC device emulation
42bfe44 riscv: Implement Guest/VM VCPU arch functions
867159a riscv: Implement Guest/VM arch functions
2e99678 riscv: Initial skeletal support
5968b5f update_headers: Sync-up ABI headers with Linux-5.16-rc1
642f35b Makefile: Calculate the correct kvmtool version
7a60af0 arm/pci: update interrupt-map only for legacy interrupts
39181fc vfio/pci: Align MSIX Table and PBA size to guest maximum page size
b20d6e3 vfio/pci: Print an error when offset is outside of the MSIX table or PBA
f93acc0 vfio/pci: Rework MSIX table and PBA physical size allocation
5f44d5d vfio/pci: Rename PBA offset in device descriptor to fd_offset
34bfe5f pci: Fix pci_dev_* print macros
3d3dca0 vfio/pci.c: Remove double include for assert.h
e3b0ade arm/gicv2m: Set errno when gicv2_update_routing() fails
dc66461 arm64: Be more permissive when parsing the kernel header
5303f09 arm64: Use the default offset when the kernel image magic is not found
5613ae2 Add --nodefaults command line argument
a5253f7 builtin-run: Move kernel command line generation to a separate function
39ab3a0 Use kvm->nr_disks instead of kvm->cfg.image_count
cce9616 builtin-run: Abstract argument validation into a separate function
638630c builtin-run: Do not attempt to find vmlinux if --firmware
6cbec43 builtin-run: Warn when ignoring initrd because --firmware was specified
6810e75 builtin-run: Treat specifying both --kernel and --firmware as an error
2e7380d virtio/pci: Size the MSI-X bar according to the number of MSI-X
bdb86d0 kvmtool: arm64: Configure VM with the minimal required IPA space
066b5c0 kvmtool: arm64: Use the maximum supported IPA size when creating the VM
4250819 kvmtool: Abstract KVM_VM_TYPE into a weak function
25c1dc6 arm/arm64: vfio: Add PCI Express Capability Structure
e69b766 arm/arm64: Add PCI Express 1.1 support
6b74f68 arm/fdt.c: Don't generate the node if generator function is NULL
070fb91 Move fdt_irq_fn typedef to fdt.h
415f92c arm: Fail early if KVM_CAP_ARM_PMU_V3 is not supported
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping libvmi to version v0.10-1073-g41600b6, which comprises the following commits:
41600b6 Actually define __XS_EVENT_REASON_MAX (#1016)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Bumping libslirp to version v4.6.1-55-g888ddad, which comprises the following commits:
888ddad Add sanitizers CI runs
55d498c socket: Handle ECONNABORTED from recv
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Along with patch refreshes, and a drop since it is now upstream ..
Bumping ovs to version v2.17.0-30-g2404d4536, which comprises the following commits:
2404d4536 system-traffic.at: Fix flaky DNAT load balancing test.
6b8adfdd8 dpif-netdev: Keep orig_in_port as a field of the flow.
6098b7f25 tests: Fix incorrect usage of OVS_WAIT_UNTIL.
cf9018d37 odp-util: Fix output for tc to be equal to kernel.
992de2406 netdev-offload-tc: Fix IP and port ranges in flower returns.
7e26796c0 netdev-offload-tc: Fix use of ICMP values instead of masks defines.
e319e2706 netdev-offload-tc: Always include conntrack information to tc.
51ef81ad7 netdev-offload-tc: Check for valid netdev ifindex in flow_put.
974253dc2 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks.
c43c159ae netdev-offload-tc: Add debug logs on tc rule verify failures.
d34622a03 tc: Keep header rewrite actions order.
5255713d1 faq: Update OVS/DPDK version table for OVS 2.15/2.16
05cf36a62 system-dpdk: Fix mfex autovalidator tests.
87540e3b9 ofp-prop: Silence the 'may be uninitialized' warning.
812164ade tests: Ignore log about failing to set NETLINK_EXT_ACK.
ae51ccc12 ovsdb-cluster.at: Avoid test failures due to different hashing.
f33cde23c ofproto: Use xlate map for uuid lookups.
6ac255496 ofproto: Add refcount to ofproto to fix ofproto use-after-free.
db0cc8be3 ofproto-dpif: Trigger revalidation when ipfix config set.
31b86e5c9 conntrack: Prefer dst port range during unique tuple search.
b761b532c conntrack: Select correct sport range for well-known origin sport.
78bd058c3 ipsec: StrongSwan report connection update failures to ovs logs.
aa05596df ipsec: Libreswan report connection failures to ovs logs.
427776cea system-tso: Skip encap tests when userspace TSO is enabled.
66d16e288 tc: Fix stats byte count on fragmented packets.
b63c41f31 compat: Add gen_stats include to define tc hw stats.
c531b3828 ovsdb: raft: Fix inability to join the cluster after interrupted attempt.
498cedc48 reconnect: Fix broken inactivity probe if there is no other reason to wake up.
5dc1423d8 datapath-windows: Fix NXM_OF_IP_TOS issue
91c0f0068 Prepare for 2.17.1.
db7c86e5d Set release date for 2.17.0.
6dd933478 Documentation: Update USDT documentation to include systemtap dependency.
8b5136a89 ovsdb-idl: Fix use-after-free when destroying an IDL loop.
a3182552c dpif-netdev: Use dp_netdev reference in offload threads.
691295d5a dpif-netdev: Fix a race condition in deletion of offloaded flows.
bebbf0d6e dpif-netdev: Move port flush after datapath reconfiguration.
e03a14c89 dpif-netdev-dpcls: Make subtable reprobe thread-safe.
036957015 ci: Fix typo in variable name.
76da23462 dp-packet: Ensure packet base is always non-NULL.
2cd30fd6b bfd: lldp: stp: Fix misaligned packet field access.
88705f1ba ovsdb-idlc: Avoid accessing member within NULL idl index cursors.
b006e8ebb stopwatch: Fix buffer underflow when computing percentiles.
a6ba4b037 dpif-netdev: Fix misaligned access.
6da79614a treewide: Don't pass NULL to library functions that expect non-NULL.
bee8ec09d system-traffic.at: Avoid sporadic failures during conntrack IPv6 HTTP/FTP tests.
3626f3ca6 system-traffic.at: Do not use ranges with broadcast address.
2035b1b33 system-dpdk.at: Add warning log in mfex fuzzy test.
095f87c24 ofproto: Fix ipfix not always sampling on egress.
fbeef2794 tc: Fix incorrect TC rule for decap+encap datapath flow.
54bca0430 dpif-netdev: fix vlan and ipv4 parsing in avx512
aa713d9b4 ci: Install wheel before installing any other python packages.
573230ec0 odp-util: Fix tunnel key attr for GTP-U.
4638cb58f ovsdb-idl: Only process successful txn in ovsdb_idl_loop_run.
87f67448b ofproto-dpif-upcall: Fix n_revalidators on upcall show.
268402b47 acinclude: Detect avx512 vpopcntdq compiler support.
1ff8fe347 Documentation: Fix userspace Tx steering section.
44963a78e vswitchd.xml: Add missing tx-steering PMD option.
17cedcb2d ovsdb-idl: ovsdb_idl_loop_destroy must also destroy the committing txn.
06d484409 ofproto-dpif-xlate: Fix packet drops with decap action on MPLS Multicast.
69155eb20 tests: Fix cosmetic errors in system-traffic.at.
62eeea709 python: idl: Clear last_id on reconnect if condition changes in-flight.
ecdb9ca81 ovsdb-cs: Clear last_id on reconnect if condition changes in-flight.
f08013b5e python: idl: Resend requested but not acked conditions when reconnecting.
15bb5a978 ofp-flow: Skip flow reply if it exceeds the maximum message size.
4fdd6666a ovsdb: transaction: Keep one entry in the transaction history.
553f566d9 ovsdb-cs: Fix ignoring of the last id from the initial monitor reply.
167c2ff0e ofproto-dpif: Fix issue with non-reversible actions on a patch ports.
b8dba6594 NEWS: Fix some typo.
b1b77967f ovs-monitor-ipsec: Fix generated strongSwan ipsec.conf for IPv6.
109d02455 system-dpdk: Fix MFEX logs check.
6b1cfa209 datapath-windows: Pickup Ct tuple as CT lookup key in function OvsCtSetupLookupCtx
280d8de05 Prepare for 2.17.0.
f20abde5a netdev-dpdk: Remove rte-flow API access locks.
b0b6b7b46 dpif-netdev: Use one or more offload threads.
7daa50346 dpif-netdev: Replace port mutex by rwlock.
d85b9230a dpif-netdev: Make megaflow and mark mappings thread objects.
ec4ac6258 dpif-netdev: Use lockless queue to manage offloads.
b3e029f7c netdev-offload-dpdk: Protect concurrent offload destroy/query.
54dcf60e6 netdev-offload-dpdk: Lock rte_flow map access.
7851e602c netdev-offload-dpdk: Use per-thread HW offload stats.
5b0aa5577 dpif-netdev: Execute flush from offload thread.
d68d2ed46 dpif-netdev: Introduce tagged union of offload requests.
73ecf098d dpif-netdev: Use id-fpool for mark allocation.
528a8ab62 dpif-netdev: Postpone flow offload item freeing.
55dc4ef17 dpif-netdev: Quiesce offload thread periodically.
62c2d8a67 netdev-offload: Add multi-thread API.
2eac33c6c id-fpool: Module for fast ID generation.
5396ba5b2 mpsc-queue: Module for lock-free message passing.
5878b9252 ovs-atomic: Expose atomic exchange operation.
83823ae32 dpif-netdev: Implement hardware offloads stats query.
9ac3d951b mov-avg: Add a moving average helper structure.
e4543c7b1 dpif-netdev: Rename offload thread structure.
9ab104718 dpctl: Add function to read hardware offload statistics.
0e6366c23 netdev-offload-dpdk: Implement hw-offload statistics read.
adbd4301a netdev-offload-dpdk: Use per-netdev offload metadata.
1088f4e7f netdev: Add flow API uninit function.
aec1081c7 tests: Add ovs-barrier unit test.
59b8f9f8f dpif-netdev: Rename flow offload thread.
6207205e5 ovs-thread: Fix barrier use-after-free.
1b9fd884f Documentation: Remove experimental tag for PMD ALB.
09192a815 Documentation: Update PMD Auto Load Balance section.
5cc052435 Documentation: Update PMD thread statistics.
f0adea3fc Documentation: Minor spelling and grammar fixes.
4da71121d Documentation: Fix Rx/Tx queue configuration section.
85d3785e6 utilities: Add netlink flow operation USDT probes and upcall_cost script.
51ec98635 utilities: Add upcall USDT probe and associated script.
ff4c712d4 Documentation: Add USDT documentation and bpftrace example.
512fab8f2 openvswitch: Define the OVS_STATIC_TRACE() macro.
191013cae configure: Add --enable-usdt-probes option to enable USDT probes.
844f14181 dpif-netdev.at: Add test for Tx packet steering.
c18e707b2 dpif-netdev: Introduce hash-based Tx packet steering mode.
31e67c998 dpif-netdev: Introduce Tx queue mode.
e97112ce7 netdev-dummy: Introduce per rxq/txq statistics.
eff740b14 ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.
1917ace89 Encap & Decap actions for MPLS packet type.
4a6a47346 netlink-socket: Log extack error messages in netlink transactions.
eb1ab5357 netdev-linux: Use matchall classifier for ingress policing.
3b489a3b1 dpif-netdev: Improve loading of packet data for undersized packets.
8bc135d2d acinclude: Provide better error info when linking fails with DPDK.
1140c87e2 netdev-dpdk: Expose per rxq/txq basic statistics.
f260db1ef netdev-dpdk: Fix statistics when changing Rx/Tx queues count.
b84386fa9 dpdk: Support running PMD threads on any core.
356f36206 tests/oss-fuzz: Fix the arguments of parse_tcp_flags.
ddca1eb3a odp-util: Stop action list parsing if already oversized.
6e50c1651 dpif-netdev: Avoid hw_miss_packet_recover() for devices with no support.
e7e9973b8 dpif-netdev: Forwarding optimization for flows with a simple match.
46d44cf3b python: idl: Add monitor_cond_since support.
0d1ffb775 checkpatch: Detect "trojan source" attack.
428b11caa utilities: Add another GDB macro for ovs-vswitchd.
2f2ae5b6b tests: Fix endianness in netlink policy test fixtures.
0b6d2faac ci: Remove -Wno-cast-align from CI.
d652fc6a5 checkpatch: Correct line count in error messages.
28ef2535c dpif-netdev-extract: Change availability log level to DBG.
38c53dd17 AUTHORS: Add Nobuhiro MIKI.
9a834205a docs: afxdp: Remove duplicated lines.
d446dcb7e system-dpdk: Refactor common logs matching.
b366fa2f4 dpif-netdev: Call cpuid for x86 isa availability.
11441385c bridge: Fix incorrect configuration of netdev's dpif type.
ec2aa2ab4 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.
b723b9320 tnl-neigh-cache: Do not refresh the entry while revalidating.
02f95638a tnl-neigh-cache: Add tnl/neigh/aging command.
f527aef14 tnl-neigh-cache: Read/write expires atomically.
f0266292b dpif-netdev: Improve handling of IP/TCP in avx512 mfex.
893693e80 AUTHORS: Add Nir Anteby.
7617d0583 netdev-offload-dpdk: Add support for matching on gre fields.
5f60741dc netdev-offload-dpdk: Support tnl_pop for gre tunnel.
a32cb78b5 netdev-dpdk: Add flow_api support for netdev gre vports.
827904146 netdev-offload-dpdk: Refactor get_vport_netdev().
76527525e AUTHORS: Update email for Alin Serdean.
38b42aa93 MAINTAINERS: Move Joe to emeritus status.
269b927fd dpdk: Use --in-memory by default.
b5d2dbdbb system-dpdk: Fix race in vhost-user tests.
9827312fa docs: Re-work the documentation around CPU ISA optimizations.
ed9778e94 dpif-netdev: Fix the autovalidator output for the miniflow extract.
339f97044 ovsdb: storage: Randomize should_snapshot checks when the minimum time passed.
bf07cc9cd raft: Only allow followers to snapshot.
20a4f546f dpif-netdev: Use PMD context to get the port for HW miss recovery.
17346b389 dpdk: Update to use DPDK v21.11.
72745ab0c compat: handle NF_REPEAT error on nf_conntrack_in.
18db7ec5e system-dpdk: Improve vhost-user ping tests reliability.
4f19a78a6 netdev-vport: Fix userspace tunnel ioctl(SIOCGIFINDEX) info logs.
4a7b58163 alb.at: Increase time/warp.
09c4449b2 alb.at: Check for log from correct line number.
1f5749c79 flow: Consider dataofs when parsing TCP packets.
d4bed9596 tests/flowgen: Fix packet data endianness.
e40982468 dpif-netlink: Improve feature negotiation for older kernels.
4490792dd ofproto-dpif: Increase dp_hash default max buckets.
91e1ff5dd ovsdb-idl: Don't reparse orphaned rows.
149169836 ofproto: Fix resource usage explosion due to removal of large number of flows.
a05883b89 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.
79953a57e stream-ssl: Avoid unnecessary memory copies on send.
dec429168 ovsdb-data: Consolidate ovsdb atom and json strings.
9d29990c2 json: Inline clone and destroy functions.
19aa70168 tests/flowgen: Fix length field of 802.2 data link header.
024ba5257 AUTHORS: Add Mike Pattrick.
958ca7ba3 ovs-tcpdump: Improve performance with dummy interface.
c60eec064 ovs-lib: Backup and remove existing DB when joining cluster.
c041042c1 python: idl: Avoid pre-allocating column defaults.
2fe20d0be docs/dpdk: Fix install doc.
29f8dc629 AUTHORS: Add Salvatore Daniele.
f88ee78e0 match: Do not print "igmp" match keyword.
59622fd1b ovs-save: Save igmp flows in ofp_parse syntax.
3b2982c42 faq: Update OVS/DPDK version table for OVS 2.13/2.14.
72fbb90af ofproto-dpif-xlate: Add a trace log for tnl_port_build_header() error.
7b8aeadd6 ovsdb-idl: Re-parse backrefs of inserted rows only once.
fb7a75e52 ofproto-dpif-xlate: Terminate native tunnels only on ports with IP addresses.
9fe0ce4f7 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.
a83a40609 dpif-netdev: Sync PMD ALB state with user commands.
513ed6570 system-traffic.at: Fix typo in conntrack zones tests.
23083672b dpif-netdev: Reset RxQ cycles history on PMD reload.
bd0fec42a ofproto/bond: Improve admissibility debug readability.
71eb2ec44 datapath-windows: Reset flow key after Ipv4 fragments are reassembled
04b017e3a python: db: Avoid allocation of an attr dict/row+column.
695530d8f github: Remove workaround fixing up /etc/hosts.
113f925aa rhel: Use /run instead of /var/run.
9b20df73a dpctl: dpif: Allow viewing and configuring dp cache sizes.
efd55eb34 dpctl: dpif: Add kernel datapath cache hit output.
317b1bfd7 ovsdb: Don't let transaction history grow larger than the database.
1bdda7b6d ovsdb-idl: Use functions to apply diff in place.
4dbff9f0a ovsdb: transaction: Incremental reassessment of weak refs.
066741d9c ovsdb-idl: Add memory report function.
c5d384f77 checkpatch: Check if some tags are wrongly written.
9f2258360 AUTHORS: Add Somnath Chatterjee.
42c348184 dpif: Fix function pointer check for bond_add.
68543dd52 python: Replace pyOpenSSL with ssl.
3f550fa53 python: socket-util: Split inet_open_active function and use connect_ex.
56c3de3c6 datapath-windows:Reset PseudoChecksum value only for TX direction offload case
4bd375581 ci: Make linux-prepare trust system installs.
fa2bc2bb7 github: Stick to python 3.9.
a621ac5ea datapath-windows: add layers when adding the deferred actions
c1fdb8347 ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields.
02aebad3f dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments.
01bca6dab tunnel-push-pop.at: Mask source port in tunnel header.
3486d81d1 AUTHORS: Add Remi Jouannet.
f9f391982 ovs-ctl: Add missing description for --ovs-vswitchd-options and --ovsdb-server-options to usage().
755cf31a3 dpdk-stub: Change the ERR log to DBG.
d41cac475 docs/userspace-tunneling: Fix IP addresses for host2.
32899c824 acinclude: Use standardized DPDK component defines.
b841e3cd4 dpif-netlink: Fix feature negotiation for older kernels.
b12242e0e packets: Correct VXLAN_GPE_FLAGS_P macro name.
bd056cb94 dpif-netdev: Fix pmd thread comments to include SMC.
4a6217fab datapath: handle DNAT tuple collision.
cc0a87b11 pmd.at: Add test-cases for DPCLS and DPIF commands.
34fbdc410 python: idl: Avoid sending transactions when the DB is not synced up.
803ed12e3 ipf: release unhandled packets from the batch
13d05b8e5 sflow functions: fix unused parameter warnings for sflow functions
7796253db datapath-windows: Add file digest algorithm for signtool
5b7d54efc MAINTAINERS: Transition myself to emeritus status.
a461bc62e datapath-windows:adjust Offset when processing packet in POP_VLAN action
4feb05140 fix typo in dpdk doc
429b114c5 ovsdb-data: Deduplicate string atoms.
32b51326e ovsdb-data: Add function to apply diff in-place.
bb12b6317 ovsdb-data: Optimize subtraction of sets.
51946d222 ovsdb-data: Optimize union of sets.
bfc6e9735 dpif-netdev: Remove OVS_UNUSED flag in functions for ct_zone limits.
b2712d026 ovsdb: transaction: Use diffs for strong reference counting.
9e7081b14 cirrus: Reduce memory requirements for FreeBSD VMs.
849a40ccf netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock().
81de3a81a bond: Check for NULL member in bond_member_set_enable().
3168f328c pcap-file: Fix memory leak in ovs_pcap_open().
22c95f9fe odp-util: Fix a null pointer dereference in odp_flow_format().
a566c02a2 odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__().
5e86db383 netdev-dpdk: Fix RSS configuration for virtio.
d0020c5e8 docs: Recommend the use of dpdkvhostuserclient ports.
16e5b51f2 docs: afxdp: Fix wrapping in QEMU CMDs.
0eeca50f0 Documentation: Cleanup PMD information.
ee74a8b75 AUTHORS: Add Sergey Madaminov.
aae08a577 include/windows/unistd.h: Fixed type cast warning on Windows.
e05e1e3c0 netdev-offload-dpdk: Don't ignore frags as they are handled.
1318929f9 netdev-offload-dpdk: Support IPv6 fragmentation types.
c1a5d0e2b netdev-offload-dpdk: Support IPv4 fragmentation types.
26b18f189 netdev-offload-dpdk: Add last attribute to patterns.
a2fa8b289 conntrack: Remove the nat_action_info from the conn.
fdef31fb7 hash: Fix compilation error on Fedora 34 with GCC 11 and -O0.
ebcbb534e ipf: Fix only nat the first fragment in the reass process.
00d3d4a7d checkpatch: Avoid catastrophic backtracking.
372b790f1 AUTHORS: Add Tony van der Peet.
7e6b41ac8 dpif-netdev: Fix crash when PACKET_OUT is metered.
5c1cc74da rhel: Fix dual kernel rpm install for RHEL 8.4
944950dcc AUTHORS: Update Simon Horman
43e66fc27 ovsdb: monitor: Store serialized json in a json cache.
0de882954 raft: Don't keep full json objects in memory if no longer needed.
b0bca6f27 json: Add support for partially serialized json objects.
c2fb5bdae ovs-actions: Convert man page from xml to rST.
748010ff3 json: Optimize string serialization.
7847bf89e tests: Skip netlink policy test on non-Linux platforms.
7502849e9 ovsdb-idl: Add APIs to query if a table and a column is present.
bfee9f6c0 netlink: Add support for parsing link layer address.
9ab5075bf Set release date for 2.16.0.
3fc34862b AUTHORS: Add Vlad Buslov.
6bb3f363d tc: Set action flags for tunnel_key release.
d08c086e5 netlink-socket: Replace error with txn->error when logging nacked transactions.
d9a5fb78d netdev-offload-dpdk: Initialize s_tnl dynamic string.
0363891d1 dynamic-string: Fix a crash in ds_clone().
0b3a5d7ad dpif-netdev: fix memory leak in dpif and mfex commands
01cbe1ed4 dpif-netdev: fix memory leak in dpcls subtable set command
d2ad305a6 dpif-netdev: Fix dead code in mfex command
8a5f055a0 docs/dpdk/bridge: Fix dpif-netdev/miniflow-parser-set formatting
96e513f55 dpif-netdev-unixctl.man: Document miniflow-parser-* CMDs
3004ebf20 dpif-netdev-unixctl.man: Document subtable-lookup-* CMDs
c15c3df3a dpcls: fix build on compilers without AVX512-VPOPCNT
ccb6cc20f AUTHORS.rst: Add Lin Huang.
765c8a774 AUTHORS.rst: Add Gaetan Rivet and Wentao Jia.
2480d09e9 ovsdb: transaction-forward: Fix initialization of the 'sent' hmap node.
a3bd383e9 acinclude: Don't set AVX512-related configuration via CFLAGS.
e21e9dcec dpif-netdev: Log flow modification in debug level.
6f69e0e30 dpif-netdev: Fix offloads of modified flows.
0d25621e4 dpif-netdev: Fix flow modification after failure.
8917010b0 dpif-netdev: Do not flush PMD offloads on reload.
cd36a34f3 dpif-netdev: Fix non-atomic read of smc_enable_db.
de15afa50 dpdk: Stop configuring socket-limit with the value of socket-mem.
a8621f49d dpdk: Remove default values for socket-mem and limit.
1f7f55760 netdev-offload-dpdk: Fix vxlan vni cast-align warnings.
e8cccd3a3 netdev-offload-dpdk: Fix IPv6 rewrite cast-align warning.
b8b31d841 daemon-unix: Fix leak of a fork error message.
daf627f45 ovsdb-cs: Perform forced reconnects without a backoff.
69b2bdfd3 system-dpdk.at: Fix module not found error for pyhton < 3.6.
43b7d960a netdev-dummy: Silence the 'may be uninitialized' warning.
f05d6d623 ofproto-dpif-xlate: Fix continuations with OF instructions in OF1.1+.
8e808e7f1 datapath-windows:Correct checksum for DNAT action
954798752 Documentation: Remove duplicate words.
4703bc67b Prepare for post-2.16.0 (2.16.90).
45bd6d93f Prepare for 2.16.0.
298d4151f bond: Fix broken rebalancing after link state changes.
b1e517bd2 dpif-netlink: Introduce per-cpu upcall dispatch.
485e3a13a dpif-netlink: Fix report_loss() message.
1325debb4 ofproto: Change type of n_handlers and n_revalidators.
3222a89d9 dpif-netdev: Report overhead busy cycles per pmd.
30bfba024 tests: Add new test for cross-numa pmd rxq assignments.
6193e0326 dpif-netdev: Allow pin rxq and non-isolate PMD.
3dd050909 dpif-netdev: Add group rxq scheduling assignment type.
4fb54652e dpif-netdev: Assign PMD for failed pinned rxqs.
0efefc4f9 dpif-netdev: Sort PMD list by core id for rxq scheduling.
58fed7e8d dpif-netdev: Make PMD auto load balance use common rxq scheduling.
f577c2d04 dpif-netdev: Rework rxq scheduling code.
ccc24fc88 ofproto-dpif: APIs and CLI option to add/delete static fdb entry.
ae2424696 dpdk: Logs to announce removal of defaults for socket-mem and limit.
15329b728 flow: Count and dump invalid IP packets.
6545977ce ovs-rcu: Remove unused perthread mutex.
cb4bff6ff Don't mangle shebangs when building DKMS RPM package.
1f38f9dcf AUTHORS: Add Adrian Guzowski.
2abd8148c Add ability to override default Release suffix in RPM packages.
d28c5ca57 python: Add cooperative_yield() API method to Idl.
487253d5b python: Update bundled sortedcontainers to 2.4.0.
6c41bcb13 ci: Do not dump logs on error for GitHub Actions.
7ab851e1b dpif-netdev: Do not execute packet recovery without experimental support.
a72c1dfbd dpif/dpcls: limit count subtable search info logs
26fbd1a1b AUTHORS: Add Cian Ferriter.
83aae83e6 AUTHORS: Add Amber Kumar.
aa85a2509 dpif-netdev/mfex: Add more AVX512 traffic profiles
250ceddcc dpif-netdev/mfex: Add AVX512 based optimized miniflow extract
32f93dc5e dpdk: Add additional CPU ISA detection strings
dc39608d2 dpif/stats: Add miniflow extract opt hits counter
50be6715c test/sytem-dpdk: Add unit test for mfex autovalidator
a395b132b dpif-netdev: Add packet count and core id paramters for study
5324b54e6 dpif-netdev: Add configure to enable autovalidator at build time.
5c5c98cec docs/dpdk/bridge: Add miniflow extract section.
72dd22a0d dpif-netdev: Add study function to select the best mfex function
dd3f5d86d dpif-netdev: Add auto validation function for miniflow extract
3d8f47bc0 dpif-netdev: Add command line and function pointer for miniflow extract
3e82604b7 docs: Add documentation for ovsdb relay mode.
e26bf9726 ovsdb: Make clients aware of relay service model.
edcf44172 ovsdb: relay: Reflect connection status in _Server database.
7964ffe7d ovsdb: relay: Add support for transaction forwarding.
026c77c58 ovsdb: New ovsdb 'relay' service model.
b4cef64c8 ovsdb: row: Add support for xor-based row updates.
85dbbe275 ovsdb: table: Expose functions to execute operations on ovsdb tables.
e93fc5db9 ovsdb: storage: Allow setting the name for the unbacked storage.
4d9605379 jsonrpc-server: Wake up jsonrpc session if there are completed triggers.
00dda78ed ovsdb-cs: Avoid unnecessary re-connections when updating remotes.
73259ea70 ovsdb-server: Fix memleak when failing to read storage.
066a84f89 latch-unix: Decrease the stack usage in latch
d2e97030e netdev-linux: fix compile error in nl_msg_put_act_police
d53ea18be AUTHORS: Add Andrew Rybchenko.
909b40f67 netdev-offload-dpdk: Fix port ID logging on destroy.
b889d5dcc conntrack: Init hash basis first at creation.
b0d289bb5 netdev-linux: Ignore TSO packets when TSO is not enabled for userspace.
464b5b13e netdev-offload-tc: Verify the flower rule installed.
1e3148913 dpcls-avx512: Enable avx512 vector popcount instruction.
60c9e1a2f dpdk: Cache result of CPU ISA checks.
2100f0e51 dpif-netdev/dpcls: Specialize more subtable signatures.
47a2a8f41 dpif-netdev/dpcls-avx512: Enable 16 block processing.
d76a719a7 dpif-netdev: Add a partial HWOL PMD statistic.
3f86fdf5c dpif-netdev: Add command to get dpif implementations.
abb807e27 dpif-netdev: Add command to switch dpif implementation.
9ac84a1a3 dpif-avx512: Add ISA implementation of dpif.
e540499e4 dpif-netdev: Add function pointer for netdev input.
5930dfeeb dpif-netdev: Refactor to multiple header files.
c36c8e3f5 ovsdb-tool: Fix memory leak in "check-cluster" command.
ba16a36f3 dpif-netdev: Add all-zero SNAT to the advertised features of ct.
61e48c2d1 conntrack: Handle SNAT with all-zero IP address.
fa0e2d26d util: Add token concatenation macro with argument expansion.
1e19f9aa2 conntrack: Handle already natted packets.
aa4359cb9 dpif-netdev: Read recirc depth and flow api enabled once per batch.
e6ad4d8d9 conntrack: Document all-zero IP SNAT behavior and add a test case.
355fef6f2 ofproto-dpif-xlate: Avoid successive ct_clear datapath actions.
347362d0c AUTHORS: Add Bodo Petermann and David Wilder.
b7809111a odp-util: Stop key parsing if already oversized.
3da3cc1a0 ovs-numa: Support non-contiguous numa nodes and offline CPU cores.
154983c59 python: Fix Idl.run change_seqno update.
b57b062f5 ofp-actions: Report an error if there are too many actions to parse.
b30bfb6b8 ovsdb-server.7.rst Fix response result of monitor_cond_change
0c0995238 stream-ssl: Remove unsafe 1024 bit dh params
4e948b86c bridge: Use correct (legacy) role names in database.
828d9cb8d ovs: fix wrong quote
00c1bce13 docs: fix wrong quote
780b2bde8 bridge: fix type mismatch
911adb93e ovs-save: Use right OpenFlow version for "ovs-ofctl dump-tlv-map".
8ab198092 NEWS: Add note about PPS support for ingress policing
10c9dfeb5 bridge: Only an inactivity_probe of 0 should turn off inactivity probes.
8d7c24083 fail-open: Only fail open if we've been disconnected for at least 1 s.
f686957c9 add test cases for ingress_policing_kpkts parameters
c2567e533 add port-based ingress policing based packet-per-second rate-limiting
b6c5f30cf checkpatch: Ignore macro definitions of FOR_EACH.
772a842fb dpif-netdev: Apply subtable-lookup-prio-set on any datapath.
07a5fa610 AUTHORS: Add Paolo Valerio.
331975506 ovs-actions.xml: Add missing bracket.
63c01b895 netdev-offload-tc: Use nl_msg_put_flag for OVS_TUNNEL_KEY_ATTR_CSUM.
2c597c890 conntrack: add coverage counters for L3 bad checksum.
76700f374 conntrack: Increment coverage counter for all bad checksum cases.
e5b5008ac ovs-lib: pass optional --election-timer arg to ovsdb-tool
e098c2f96 netdev-dpdk-offload: Add vxlan pattern matching function.
507d20e77 netdev-offload-dpdk: Support vports flows offload.
b5e6f6f6b dpif-netdev: Provide orig_in_port in metadata for tunneled packets.
be56e063d netdev-offload-dpdk: Support tunnel pop action.
20b176044 netdev-offload-dpdk: Change log rate limits.
a1ec42803 netdev-offload: Disallow offloading to unrelated tunneling vports.
6a855d3e7 netdev-offload: Allow offloading to netdev without ifindex.
bc341440d dpif-netdev: Add HW miss packet state recover logic.
aca2f8a8a netdev-offload-dpdk: Implement HW miss packet recover for vport.
c5b56f0eb netdev-dpdk: Add flow_api support for netdev vxlan vports.
1b27484f2 netdev-offload: Introduce an API to traverse ports.
6f50f28b9 netdev-dpdk: Introduce DPDK tunnel APIs.
f36e7438f netdev-offload: Add HW miss packet state recover API.
f0e4a7338 tests: Add PMD auto load balance unit tests.
833f1b843 pmd.at: Get next line number of log.
f3ad560d5 dpif-netdev: Expand the meter capacity.
bd9052455 Remove Python 2 leftovers.
ad256c314 dpdk: Add debug appctl to get malloc statistics.
c16b9ac74 datapath-windows: Specify external include paths
e81ed9421 Fix redundant datapath set ethernet action with NSH Decap.
c2999459d tests: Fixed L3 over patch port tests.
cca40141a netlink: removed incorrect optimization
661fd5edb AUTHORS: Add Wang Liang.
640d4db78 ipf: Fix a use-after-free error, and remove the 'do_not_steal' flag.
2afe31169 odp-util: Return an error on actions overflow while parsing from string.
5fe3ef1a0 tests: Fix spelling error in test name.
50b419d0a raft: print local server ID when opening RAFT database
c5a58ec15 python: idl: Allow retry even when using a single remote.
04f8881f5 ovsdb-idl: Fix the database update signaling if it has never been connected.
91cb55bc8 system-traffic.at:add missing comma
9f3815ed6 AUTHORS: Add Rosemarie O'Riorden.
6426417c1 ipfix-gen-entities: Add missing argument in function call.
210c4cba9 docs: Add a topic about record/replay with ovsdb-server.
4275b5b7f ovsdb-client: Integrate record/replay functionality.
0be15ad76 ovsdb-server.at: Add unit test for record/replay.
964da9a8b jsonrpc: Disable inactivity probes if replay engine is active.
30ccf2c51 ovsdb-server: Don't update manager status if replay engine is active.
182a0b8ad ovsdb-server: Integrate stream replay engine.
07a07d06a uuid: Allow record/replay of generated UUIDs.
fae1ae043 stream: Add record/replay functionality.
610ac1e82 ovs-replay: New library to create and manage replay files.
a4b04276a ofproto: Fix potential NULL dereference in ofproto_ct_*_zone_timeout_policy().
dd0f59783 ofproto: Fix potential NULL dereference in ofproto_get_datapath_cap().
f1951d41f ovs-save: Fix awk command to return highest ofp version.
3012710ec tests: Fix PKIDIR checks in AT_SKIP.
5da031d6d tests: Drop support for glibc before version 2.11.
fb1e7863e ovsdb-tool: add --election-timer=ms option to 'create-cluster'
13c0eaa7b dpif-netlink: Fix send of uninitialized memory in ct limit requests.
328d20e0f ofproto-dpif: Fix use of uninitialized attributes of timeout policy.
577b9a816 netdev-linux: Fix use of uninitialized LAG master name.
0b3ff31d3 ofp_actions: Fix set_mpls_tc formatting.
7731d2614 dpif-netdev: Remove meter rate from the bucket size calculation.
76b720ed1 ovs-actions: Document normal pipeline.
60638d61a AUTHORS: Add Wang Yibo.
f173527ec ovs-ofctl: Fix coredump when using "add-groups" command.
3c2d6274b raft: Transfer leadership before creating snapshots.
b5bb044fb ovsdb-cs: Consider all tables when computing expected cond seqno.
7100c220e mac-learning: Remove obsolete comments about tags.
b45958bf7 dpdk: Use DPDK 20.11.1 release.
484e9a4dd github: Fix up malformed /etc/hosts.
843cd4304 doc: automake: Add support for sphinx 4.0.
b03daccfd cirrus: Look up existing versions of python dependencies.
721488d4a classifier: Make find_match_wc() prototype and definition match.
b96d2756f tnl-neigh-cache: Include expected array sizes in prototypes.
f09182a3b ofp-group: Use big-enough buffer in ofputil_format_group().
09fe18af2 xml2nroff: Fix formatting of action headers in ovs-actions(7) manpage.
a019868a6 ofproto/ofproto-dpif-sflow: Check sflow agent in case of race
5dce24d04 ipsec: Fix race in system tests.
fd1114e96 AUTHORS: Add Michal Kazior.
d90b4f292 rtnetlink: ignore IFLA_WIRELESS events.
f9d303903 dpif: Fix use of uninitialized execute hash.
4a6be85c8 odp-util: Fix use of uninitialized erspan metadata.
3311ca0d4 AUTHORS: Add Ariel Levkovich.
ea71a9d44 netdev-offload-tc: Add support for ct_state flag rel.
0c147fb4e dpif-netlink: Fix using uninitialized info.tc_modify_flow_deleted in out label.
44ea24427 Add test cases for ingress_policing parameters
67e0e0bc1 netdev-linux: correct unit of burst parameter
d2d051310 AUTHORS: Add Aidan Shribman.
23f9ec9eb make: don't prompt during build
332b8a3e4 util: Add allocation wrappers that don't increment coverage counters.
4cb38cd22 ovs-lldp: Get rid of pointless null pointer check.
f8be30acf ipsec: Update ordering of imports.
8fc62df8b ipsec: Introduce IPsec system tests for Libreswan.
d6afbc00d ipsec: Allow custom file locations.
4ce8bb159 system-common-macros: clean up veth device on test failure.
58b4146e0 ipsec: Fix IPv6 default route support for Libreswan.
ac85cdb38 ovsdb-idl: Mark arc sources as updated when destination is deleted.
95689f166 ovsdb-idl: Preserve references for deleted rows.
4c0d093b1 ovsdb-idl.at: Make test outputs more predictable.
31629b538 ovs-ofctl: Fix segfault due to bad meter n_bands.
b4a9c9cd8 netlink: make Netlink socket receive buffer 4x larger
50b0b4d86 db-ctl-base: Warn if "destroy" command lacks --all or record argument.
9801d7c4b github: Fix handling of python packages.
c3690ccbc dpif-netdev: Refactor and fix the buckets calculation.
759aaa851 dpif-netdev: Fix the meter buckets overflow.
af0ce3866 AUTHORS: Add Shahar Klein.
925a09477 debian: Add configure option to debian/rules
2eb7e22a4 rhel: Do not update kmod RPM newer major revision kernels.
56e60eca7 rhel: ovs-kmod-manage.sh: Disable unneeded warning.
ec68a877d dpif-netdev: Allow PMD auto load balance with cross-numa.
edcfd7176 netdev-offload-tc: Add support for ct_state flags inv and rpl
1e4aa061a netdev-offload-tc: Probe for support for any of the ct_state flags
0a8bd432a compat: Add ct_state flags definitions
64b8c1d9a python: Send notifications after the transaction ends.
cdaa7e0fd dpif-netdev: Fix crash when add dp flow without in_port field.
2ad201659 ovs-ctl: Allow recording hostname separately.
f013e6f2d Documentation: Fix DPDK qos example.
39b937f06 raft: Add 'stop-raft-rpc' failure test command.
4c1d9ef14 raft: Report disconnected in cluster/status if candidate retries election.
14b2b0aad raft: Reintroduce jsonrpc inactivity probes.
ac09cbfcb ovsdb-cs: Fix use-after-free for the request id.
47e73f7f0 netdev-offload-tc: Flush rules on all chains before attach ingress block
436ce00da connmgr: Check nullptr inside ofmonitor_report().
8f09b2688 AUTHORS: Add Alexey Roytman.
e775bf32e ovsdb-client: Fix needs-conversion when SERVER is explicitly specified.
4cee0150a windows, tests: Modify service test.
e7df370cf netdev-linux: Fix indentation.
97918ed19 AUTHORS: Add Balazs Nemeth.
647a71988 docs: Add instruction to set local_ip to ipsec tutorial.
163b134d0 ofproto-dpif-upcall: Fix ukey leak on udpif destroy.
014496e73 ci: Use parallel build for distcheck.
5740843c4 github: Run clang test with AddressSanitizer enabled.
77cccc74d ofp-actions: Fix use-after-free while decoding RAW_ENCAP.
5704a7f35 Set release date for 2.15.0.
4b674829f dpif-netdev: auto load balance log state on user request.
81661d768 AUTHORS: Add Hariprasad Govindharajan.
8d0416153 faq: Update OVS/DPDK version table for OVS 2.15.
1560b4667 docs: Update for auto load balance threshold parameters.
caa41a871 cirrus: Use FreeBSD 12.2.
79349cbab flow: Support extra padding length.
e4a89a7cc rhel: Update build required dpdk.
9acbdd65c rhel: Add option to enable AF_XDP on rpm package.
498cf3eae netdev-offload-tc: Reject rules with unsupported ct_state flags.
255fd6ad2 dist-docs: Include manpages generated from rST.
da33a6875 db-ctl-base: Fix XML syntax error.
9513c0233 db-ctl-base: Add {in} and {not-in} set relational operators.
0f252daa9 tc: Fix mpls bottom of stack bit mask reporting.
3eec7fb07 pcap-file: Fix calculation of TCP payload length in tcp_reader_run().
c3da0ae65 ofp-table: Improve log message in ofputil_decode_table_features().
83f5e6fda AUTHORS: Add Volkan Atlı.
d8df84998 rhel: Update '--with-dpdk' argument for DPDK 20.11.
59611d6fe ovs-lib: Remove second parameter for stop_daemon.
9cf39b3e7 Add Tao YunXiang <taoyunxiang@cmss.chinamobile.com>.
2e0dace0e doc: Add 'faq' about datapath-id
c17f32a11 netdev-dpdk: Fix incorrect shinfo initialization.
75e1e6fd2 lib/tc: add ICMP type and code match offload
d5c429a30 github: Don't fail the job if 'apt update' failed.
492bbb54c vswitchd.xml: Fix supported IPsec tunnels.
748483d3f netdev-afxdp: Updated documentation.
d27494647 acinclude: Remove default library for DPDK.
3f19b124e ovsdb-doc: Add build dependency on dirs.py.
9049a11f0 system-dpdk: Fix 4th and 5th testcases of the system-dpdk testsuite.
25eb72a26 ovs-ctl: Prepend OVS binary directories to PATH.
c2e501c16 AUTHORS: Add Mao YingMing.
82440ad72 dpctl: Fix dpctl process command parameter error.
8e69349f2 conntrack: Fix the icmp conntrack new state.
1c337c43a ovsdb-idl: Break into two layers.
a5c067a8b ovsdb-cs: New module that factors out code from ovsdb-idl.
81f06e2b8 test-ovsdb: Log steps in idl test.
e7eb904d2 odp-util: Fix abort while formatting nsh actions.
50e5523b9 Prepare for post-2.15.0 (2.15.90).
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping kubernetes to version v1.23.6-rc.0-16-gfbcfa330181, which comprises the following commits:
1e8f6d51484 Copy request in timeout handler
edd7a386c61 kube-up: use registry.k8s.io for containerd-related jobs
3194c87ba25 e2e: Wait only for the service account
a62ee8e5c3b e2e: Wait for kube-root-ca.crt to be created
651b1fa1cce Include pod UID in secret/configmap cache key
33d089b173c Move kubelet secret and configmap manager calls to sync_Pod functions
7f02733e4d8 test: Verify that nodes do not transition to Failed while ready
77865d3db93 test: Add E2E for job completions with cpu reservation
b51d11be7a4 test: Add E2E for init container pod deletion
290cdbf8792 kubelet: Delay writing a terminal phase until the pod is terminated
914475e2e9f Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
b3b64745789 Release commit for Kubernetes v1.23.6-rc.0
c285e781331 Release commit for Kubernetes v1.23.5
01c2f1c6420 Remove apf_fd from httplog
c52cd9c5920 Update Go to 1.17.8
1a897af197a cluster/gce: update konnectivity image tags to v0.0.30
d741174d7e1 bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
0b8199041d1 fix dryrun when ca file exists
903f164b679 fix regression introduced by PR 100320
56bfc202e45 Add unit tests
a5faf0b5ce2 Fix nodes volumesAttached status not updated
4c85abf90bb Fix default config flags
1570a75766b test/e2e/framework: include the new control plane taint
60cd43c44e0 kubelet: Clean up a static pod that has been terminated before starting
33863be9478 Add an e2e test for updating a static pod while it restarts
621894de9d6 cronjob_controllerv2: do not filter jobs to be reconciled by labels
c9f904304d9 kube-proxy: fix duplicate port opening
f783e573f11 increase Azure ACR credential provider timeout
ba2cd0ca3db Updating EndpointSlice strategy to retain node name in topology until field is set
4e69dd88613 fix: do not return early in the node informer when there is no change of the topology label.
68ea240512a /test/e2e_kubeadm: adjust label checks for 1.23
2efffd62367 Ignore container notfound error while getPodstatuses
9f5e25033b6 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
d4b2d8cf961 Release commit for Kubernetes v1.23.5-rc.0
e6c093d87ea Release commit for Kubernetes v1.23.4
949798fe712 Add PDB selector patch integration test
47fc5aea4a2 Revert v1beta1 PodDisruptionBudget select patchStrategy
ef293a9ee95 test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
799ffd58065 kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
c465ceccb32 Update Go to 1.17.7
f0eac451011 Use serializable struct for x-kubernetes-validations in openapi
02d1a291c8b Make JSON schema round tripping test more strict
30eff360132 ignore CRI PodSandboxNetworkStatus for host network pods
34a8474e600 set secondary address on host-network pods
14c399ec5e3 Deeply copy JSONSchemaProps.XValidations.
9fe0c40c8e5 wrap error from RunCordonOrUncordon
0d487176d3a Ensure the execHostnameTest() compares hostnames
733c0ebc7c3 Revert "Fix comparison between FQDN and hostname"
ebfa08cd39b service REST: Call Decorator(old) on update path
92d09f90c01 add namespace in azurefile volumeid
5830d1474ff fix: azurefile volumeid conflict in csi migration
bce4e5ba5b1 Mark device as uncertain if unmount device succeeds
4b868d09c98 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
72506a8439c Release commit for Kubernetes v1.23.4-rc.0
816c97ab8cf Release commit for Kubernetes v1.23.3
f2c6108f462 kubelet: fix podstatus not containing pod full name
398effdfe0d Fix bug with node restriction blocking pvc.status.resizestatus change
6d08a56228a Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
996d8fca977 Set max results if its not set
9c31df589b7 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
918dd8343f0 Release commit for Kubernetes v1.23.3-rc.0
9d142434e3a Release commit for Kubernetes v1.23.2
4935e0a527e Update k/utils to v0.0.0-20211116205334-6203023598ed
38e9dce15f4 [go] update to Go 1.17.6
28ad5463fda fix: remove outdated ipv4 route when the corresponding node is deleted
dfea07a3b04 fix: delete non existing disk issue
65b309c76d8 Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
677eae51666 fix containers order after applying
89d8be52ef4 generated: ./hack/update-vendor.sh
04f3c5793c1 upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
8c8fe66f7aa Execute sync before taking the snapshot
4b1d9d80da7 Correct the feature gate string for RBD migration.
50e813278cd fix: azuredisk parameter lowercase translation issue
879947434c0 removed unnecessary log line
88249a973a8 kubectl: add integration test for result reporting
16a4de9268a cli: let kubectl handle error printing
c5365784330 cli: avoid logging command line errors in more cases
26dae30f913 Fix header mutation race in timeout filter
81c8d0aad93 clear pod's .status.nominatedNodeName when necessary
f61c4b18c42 use node informer to check volumes attachment status before backoff
f4ba875cdfd When volume is not marked in-use, do not backoff
e36b9382ecd kubeadm: remove the restriction that the ca.crt can only contain one certificate
f4835a2cd3e flake fix: remove the error handler for cronjob integration test
962ab763c5e Fix the leak of vSphere client sessions
cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls
d42a44fcb2f Enabling kube-proxy metrics on windows kernel mode
e6a8826e992 Remove JSON logging performance regression
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Bumping libvirt to a newer version. We drop our backported patches,
update the checksums, change the meson configuration slightly and
adjust the location of the systemd manipulations.
Along with functionality changes and bugfixes, we pickup newer
python components, so we can survive the depreciation of distutils
more easily.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
OEcore has pulled in python3-sphinx, and bumped the version. Our
recipe is causing failures. We still have a version dependency on
4.2.x, so we create a specific recipe to keep things working.
Hopefully this can be deleted shortly, and this is only being
created as a transition project.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
commit a83623a54a375d3ae9198a135b94379881a2b7a5 was added
to oe-core which removes CXXFLAGS and CFLAGS causing
compilation for ceph to fail.
Set CXXFLAGS and CFLAGS to resolve the issue.
Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The significant commit in this series is:
0e72260df4 delete vendor dir
Which means that we completely have to revamp the recipe to build
without go accessing the network to pull in dependencies. This is
an initial effort, and it is acknowledged that it isn't efficient
or fast, due to the number of fetches and I/O required to complete
the population of the vendor/ directory.
The recipe can be iterated and made more efficient over time.
Bumping k3s to version v1.23.1+k3s1-11-ge7464a17f7, which comprises the following commits:
e7464a17f7 Fix use of agent creds for secrets-encrypt and config validate
8d8c8b0c6b Don't skip the dev image when skipping airgap
31f1a00b6f Fix a typo: advertise-up -> advertise-ip (#4827)
2ac8df3602 Integration tests utilities improvements (#4832)
612a9412fd Enable make generate to use dapper and standardize go and gzip versions (#4861)
66eeabbdfc linter doesn't actually run on windows, found these while getting it running on a windows machine
142b1d96f4 Update channel.yaml for 1.23
ff49dcf71e Export default parser
d0f7e23328 Require integration test to be run as sudo/root (#4824)
a02db0f2fa Fix cgroup smoke test (#4823)
08d538fb3a Update golang
87395e32d6 Update modules for Kubernetes v1.23
6656d48415 Add tests to use vagrantfile (#4722)
70902209b9 Bump stable to v1.22.5+k3s1 (#4821)
3ee3ecb3ac package rename wasnt approved yet, backing out cruft that snuck into last pr
a5c6e6a68a Fix panic checking name of uninitialized etcd member
52e450f033 Add etcd sonobuoy tests
9919f229b6 Add variable to enforce max test concurrency
247298a20d Fix previous channel detection
6872e7da25 More codespell ignores
3ae550ae51 Update bootstrap logic to output all changed files on disk (#4800)
0e72260df4 delete vendor dir
e6cf8f5982 code changes to drop the vendor dir
4eb282edac Move flannel logs to logrus
2e91913f54 Close agentReady channel only in k3s (#4792)
8ad7d141e8 Close etcd clients to avoid leaking GRPC connections
588d15db8f Remove Disables, Skips and DisableKubeProxy from the comparing configs
555dfc54db Add initial skeleton ADOPTERS.md to better track large use cases (#4764)
baf865b836 Add ADR
6f4217a340 Build standalone containerd
8737e2e13f Build script cleanups
89e63972e9 Bump k3s-root to v0.10.1
17eebe0563 Fix cold boot and reconcilation on secondary servers (#4747)
73725a0882 docs: adrs: Dual-stack in network policy agent
d71b335871 Fix snapshot restoration on fresh nodes (#4737)
bf4e037fcf Resolve Bootstrap Migration Edge Case (#4730)
2f3bfc27c0 Add in docs/adr to ensure we capture decisions properly during design calls (#4707)
a6fe2c0bc5 Resolve restore bootstrap (#4704)
a70487d5ae Update wharfie usage in windows code path
3985fd0e26 [master] Add validation to certificate rotation (#4692)
e8a30a87c8 Bump runc to v1.0.3
eb068da7f3 Add `SKIP_AIRGAP` enviroment variable for make (#4688)
8f389ab030 Include node-external-ip in serving-kubelet.crt SANs (#4620)
bcb662926d Secrets-encryption rotation (#4372)
1b3187ea07 Check HA network parameters
7d3447ceff Bump wharfie to v0.5.1 and use shared decompression code
05d43278e2 bump kine to v0.8.1
3b6a3fe905 Update dynamiclistener
a8f7e9f7e8 Nighlty automation vagrant rework (#4574)
a0208058ae Bump stable to v1.21.7+k3s1 (#4636)
77fd3e99ec Add cert rotation command (#4495)
1e6e4db2bc Update maintainers list (#4622)
d05c334a78 Improved cleanup for etcd unit test (#4537)
ae4a1a144a etcd snapshot functionality enhancements (#4453)
0c1f816f24 go generate
a7ba3e14ff Add package version to traefik helm chart
7685da3e24 Improve flannel logging
d93c82f958 [master] Bump golang and containerd (#4538)
65110a4eec [master] Bump Kubernetes to v1.22.4-k3s1 (#4536)
03485632ea Fix regression with cluster reset (#4521)
ef263bd2b0 Improved regex for double equals arguments (#4505)
535a919635 Removed value from warning about skipping flags (#4491)
c77efe64e1 tests/vagrant: refactor vagrant smoke tests (#4484)
f18b3252c0 [master] Add etcd extra args support for K3s (#4463)
41ff19de71 Feature: Add CoreDNS Customization Options
4b57951fb0 Fix to allow etcd-snapshot to use config file with flags that are only used with k3s server. (#4464)
5ab6d21a7d Increase agent's apiserver ready timeout (#4454)
bc7cdc78ca go generate
2e9358934d Add dashboard annotations to Traefik helm chart
5d168a1d59 Allow svclb pod to enable ipv6 forwarding
adaeae351c update bootstrap logic (#4438)
d85b2468ea Corrected skip check for dualstack on CI (#4427)
559c8ad94b install: /usr/sbin/transactional-update (#4403)
7bd65047c3 Match to last After keyword for parser (#4383)
8915e4c7f7 Replace gzip with pigz for faster builds (#4411)
0a5c6b1088 Remove unit tests from drone CI (#4424)
36c6634cce [master] updating to new signals package in wrangler (#4399)
f1d6e9bc4b install.sh: fix path detection for sle-micro (#4398)
86c6924119 containerd: v1.5.7-k3s2 (#4387)
f7dcc139ff Bump klipper-lb image for arm fix
aa3332085f Update k3s CI to run all integration tests (#4358)
94c1b988ca Enable Epics Action to automatically check off child issues in an epic (#4353)
f1622129e4 refactor: Use plain channel send or receive
f9f1cabe9c Fix log/reap reexec
702fe24afe containerd/cri: enable the btrfs snapshotter (#4316)
3da1bb3af2 Fix other uses of NewForConfigOrDie in contexts where we could return err
5acd0b9008 Watch the local Node object instead of get/sleep looping
3fe460d080 Block scheduler startup on untainted node when using embedded CCM
52eb6cac1c install.sh: initial support for sle-micro (#4331)
91cf835ec3 Update to v1.22.3 (#4354)
7c3f21e581 K3s Integration test fixes (#4341)
ab3d25a2c5 Update peer address when running cluster-reset
0a0b915921 reset buffer after use (#4279)
02a314c69a Bump klipper-helm version
918945da45 Added configuration input to etcd-snapshot (#4280)
72a1925a34 install.sh: capture quoted environment variables (#4275)
6e410fad49 Update to the newest flannel
b5b7033afd Bump klog fork version
e11a4bf8bb set duration to second (#4231)
0452f017c1 Add etcd s3 timeout (#4207)
34080b23b1 Copy old bootstrap buffer data for use during migration (#4215)
dbc14b8990 Fix race condition in cloud provider
5a923ab8dc Add containerd ready channel to delay etcd node join
6b4d75d245 maintainers: add Manuel and Michal (#4193)
b282528ee2 Display cluster tls error only in debug mode (#4124)
dc18ef2e51 Refactor log and reaper exec to omit MAINPID
d6b6a3ee9f vagrant: Add Ubuntu 21.04 support
5e01201195 vagrant: Update package list for Ubuntu
e420583684 vagrant: Add support for vagrant-libvirt
f830d09d6e vagrant: Change OS environment variable to DISTRO
feec44572d Improve error message when using a "K10" prefixed token (#4180)
ac7a8d89c6 Add ability to reconcile bootstrap data between datastore and disk (#3398)
9e787bfacb moving fossa to being inline step with a sles image
b6919adf62 Add "etcd-" prefix to etcd-snapshot commands as aliases (#4161)
00cf4578ec Dual-stack support LB controller
1f7151ed2f Update stable to v1.21.5+k3s2
9b35734e1a Add topologySpreadConstraints to support scaling of coredns
e24e1332fd Bump containerd to v1.5.7+k3s1
12e675e2cc Don't evacuate the root cgroup when rootless
cd5002ea37 Skip tests that violate version skew policy
5d1a37ee32 Send MAINPID to systemd when reexecing for logfile output
a16105b348 Properly handle operation as init process
f4cea90cb9 set transport to skip verify if se skip flag passed (#4102)
fd495a6a5f Bump stable to v1.21.5+k3s1 (#4068)
87524a7ac7 Enable the inheritance of settings for ipv6
4ec71b360c Adding fossa anaylze/test drone step
73e21e739f Drop broken SupportNoneCgroupDriver support
8005885bad Add 1.22 channel
539e224159 Update build images to python3 for compat with recent gsutil change
b99b943c17 Use the new klipper-lb image that has newer go and Alpine versions
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping lopper to latest, which comprises the following commits:
c7b22ce lopper/subsystem: update access to latest specification
716fe89 lopper/init: pass permissive to dt_compile if specified on the command line
2575d66 dt_compile: allow duplicate label errors to be skipped with --permissive
22b2515 lopper: drop duplicate labels due to node merging
f70eb86 lopper: bump version to 1.0.2
9b72de5 lopper: only execute main() when __main__ is called directly
b0b19a1 lopper: improve label round trip handling
d4b7706 docs: clarify lop versioning an compatible strings
e44204b README: add phandle-desc-v1 description
17350a7 version: bump to 1.0.1
0a4fcac tree: fix tree export and reload
520dea8 lopper/base: add secure-address-map description
6e660c5 lopper/lops: resolve tree when copying
8d46634 lopper: allow select to match labels
7aac1e3 openamp: add stub for OpenAMP Domain processing landing function
82986bb lopper: add the ability to extend phandle meta-data table
914c7e2 yaml: add alias/anchor based node naming
d9f1abb spec: update remoteproc example per latest spec
40cc05d lop-load: add back CDO
d5d23ab xlnx: subsystem: rename lopper_tree to lopper.tree in imports
7d23ba6 lop-load: update for latest master
4caa022 openamp: add stubs for picking up domain to domain YAML property
d8dae9d openamp_xlnx: rename fily openamp_xlnx.py to allow includes from this file
0358879 yaml-xlate: add stub for domain-to-domain property
903b16a spec: remove resource-groups
1dd1e67 README: update to add mailing list information
5da82a1 lopper/yaml: add lopper processing for "<<+" extension marker
3d05302 assists: domain_access: Fix update_mem_node handling for higher address
3c81fcc fdt: handle large integers
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
We've had reports of both the init.d xencommons and the systemd
services attempting to initialize the console, and breaking boot.
The systemd initialization really only needs to be enabled when
systemd is in DISTRO_FEATURES, and init.d the opposite.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We also switch to building with -mod=vendor, and drop our custom symlink
configuration.
Bumping netns to version v0.5.3-8-g00d5d07, which comprises the following commits:
00d5d07 update generation
74d2bd0 update
6cba61f update to github actions
dc7233e update to github actions
d6b2244 update to github actions
b65a990 docs: Update TOC
16152a0 update to github actions
56ffc34 update travis
9b103a1 Bump version to v0.5.3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Importing libslirp to meet the requirements of the updated slirp4netns.
This is very similar to:
https://github.com/schnitzeltony/meta-retro/blob/master/recipes-support/slirp/libslirp.bb
But we create our own recipe for now, as we don't want to introduce
more layer dependencies. If we can get libslirp moved to
meta-openembedded, we'll drop this recipe.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Bumping slirp4netns to version v1.2.0-beta.0-5-g323aa69, which comprises the following commits:
2365e85 configure: remove inet_ntoa check
2b607f2 Replace deprecated inet_ntoa with safer inet_ntop
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cni to version v0.8.0-90-g35efaab, which comprises the following commits:
3e49ce1 Fix incorrect pointer inputs to `json.Unmarshal`
b92c836 fix version of cni v0.8.1 does not have a directory of github.com/containernetworking/cni/pkg/types/100 refer to https://github.com/containernetworking/cni/tree/v0.8.1/pkg/types
269bf61 Spec: Container runtime shall tear down namespaces
48fac6a Update README.md
798e63d Updated README.md to include Netlox loxilight CNI
9070cb3 documentation: update Multus link in README.md to point to the k8snetworkplumbingwg repository
21cd5f0 [exec-plugins]: support plugin lists
c362597 skel: remove superfluous err nil check in (*dispatcher).pluginMain
42f2474 Remove Gabe Rosenhouse as maintainer
2e4887b skel: print out CNI versions supported in help text.
c7f5f70 pkg/version: add VersionsFrom function
5608690 spec: bump to 1.0.0
30e06a8 Docs: bump spec version information
a956246 docs: revise cnitool docs
63a3bca wrap returned errors
b277ec1 docs: correct the extension name of the configuration file
34a8a46 chore: standardize documentation on IP assignment
76bf3de types: ensure empty CNIVersion always creates/converts to 0.1.0
4feedb9 Add breadcrumbs for CNI.go
57cf1ce types/create: add CreateFromBytes()
4fdc5f6 chore: support both value type and pointer type in LoadArgs
f30a824 Remove Bryan Boreham as maintainer
c63d850 Add debug plugin to help debugging/troubleshooting (#818)
9546b70 spec: Some minor corrections
3a13f68 Spec: Bring 1.0's treatment of "args" in line with 0.4.0
c92642b upgrade kube-ovn new github site
67ec904 Fix typo in SPEC.md
0555966 typos correct
8ad568b Rewrite spec.md for 1.0.0
0016917 Adding reference to Azure CNI as 3rd party plugin in readme
ad59be0 types/040: add testcase for <= 0.2.0 Result requirement of one or more IPs
e32b586 remove build badges from homepage
296290a Switch from Travis to GH Actions
a199e6a go fmt
c735780 Markups.
b678c26 Log out the plugin name on ADD/DEL failure.
cni-plugins: update to 1.1,0
Bumping cni-plugins.git to version v1.1.0-6-gb8a10bb, which comprises the following commits:
7a98979 ipam/dhcp: Fix client id in renew/release
7aa07ef call ipam.ExceDel after clean up device in netns fix #666
96c3af8 Add sysctl allowlist
08d0f33 portmap: fix checkPorts result when chain does not exist
dca23ad portmap: fix bug that new udp connection deletes all existing conntrack entries
ba47b49 Enhanced dad set to 1
2be2960 Add boolean to enable/disable dad
8ede7ee Disable DAD for container side veth
22dd6c5 firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
90e8e1f Fix host-device gofmt
3b2afc9 host-device: Bring interfaces up after moving into container
9649ec1 pkg/ns: use file system magic numbers from golang.org/x/sys/unix
0c12d8a gofmt
152e7a4 go mod tidy
4319bc4 build: bump to go 1.17
7a55617 Remove arp notify setting per comment
5d073d6 plugins: replace arping package with arp_notify
67110e0 fix #685
1324428 Ran go fmt so tests would pass
fd4c335 Fixed DHCP problem that broke when fast retry was added.
c9d0423 dhcp ipam: adjust retry mechanism
547a516 add ipam tests for dpdk device
3033fd2 add ipam support for dpdk device
d5a6569 ipvlan: Send Gratuitous ARP after IPs are set
27fdec5 dhcp ipam: fix client id
a1051f3 dhcp ipam: rename inconsistent options among files
c627ea8 dhcp ipam: add more options capable for sending
4b216e9 dhcp ipam: add fast retry
2bebd89 dhcp ipam: support customizing dhcp options
be383cf dhcp ipam: truncate client id to 254 bytes
6d1f71e dhcp ipam: print error correctly without format string
24259e7 dhcp ipam: using full config to regular the code
c16cff9 Allow setting sysctls on a particular interface
7cb3453 dhcp: remove implemented TODO
ceb34eb Don't redundantly filepath.Clean the output of filepath.Join
90c0185 Use crypto/rand.Read, not crypto.Reader.Read
081ed44 bridge: Add macspoofchk support
ba48f8a plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
62952ff vendor: bump to libcni v1.0.1
8ab2336 static ipam: do not parse the CIDR twice
2052c30 static ipam: improve error msgs when provisioning invalid CIDR
156e59c bump go to 1.16, other misc fixes
0818512 vendor: bump all direct dependencies
9b1666d vendor: bump to libcni v1.0
0e38a1d docs: Update the CI badge from Travis CI to GitHub Actions
24b3fbc bridge: Fix typo in error message for promiscuous mode
a49f908 ip: place veth peer in host namspace directly
a3cde17 bridge: Add mac field to specify container iface mac
a786b12 static ipam: decide wrong cidr error msg
0db5882 static ipam: stop wrapping net.ParseCIDR errors
5a40818 static ipam: show confusing error msg
2f9917e utils, hwaddr: Remove unused package
272f154 ip, link_linux: Remove unused SetHWAddrByIP function
77233dd plugins: remove flannel
4b180a9 refactor(win-bridge): netconf
9215e60 refactor(win-bridge): hcn api processing
93a5503 refactor(win-bridge): hns api processing
aa8c8c1 chore(win-bridge): location related
ec75bb8 chore(win-bridge): text related
c4d4aa7 Remove Bryan Boreham as maintainer
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Along with the commit summary below, we have the following changes:
- refresh the GO cross compiler patch context
- add new go dependency package symlinks
- only build the 'tool', since that is all we need
- fix the build error of:
cannot find package runtime/cgo (using -importcfg)
...
recipe-sysroot-native/usr/lib/aarch64-poky-linux/go/pkg/tool/linux_amd64/link:
cannot open file : open : no such file or directory
by setting the GO_BUILD_FLAGS appropriately for our static and -pie
configuration
Bumping runtime-tools to version v0.9.0-75-g0105384, which comprises the following commits:
8927281 Add syscall "statx" in seccomp to fix Operation not permitted
a202491 spec generator support setting unified
30cecc1 validation/linux_rootfs_propagation: fix
10d2584 runtimetest: validateRootfsPropagation: fixes
8b26e24 validate: rm Clean() arguments
3fb1264 validation: fix Cleanup
14cd51e Makefile: replace TAP with TAPTOOL
adcb290 Fix hanging on runc create.
5ce2cac cmd/runtimetest: fix NewPid deprecation warning
8e1a3b5 deps: bump github.com/syndtr/gocapability to latest
543268b deps: github.com/hashicorp/go-multierror to v1.1.1
4b164a1 deps: bump github.com/opencontainers/selinux to v1.9.1
ee9c051 deps: bump github.com/mrunalp/fileutils to v0.5.0
01a6f47 deps: bump sirupsen/logrus to v1.8.1
abcb94d deps: switch to google/uuid
2253869 validation/.gitignore: fix
953e752 MAINTAINERS: add @kolyshkin
221e5ea deps: bump github.com/xeipuuv/gojsonschema to v1.2.0
67884fc validate: prepare for new xeipuuv/gojsonschema
09d837b Change /dev to be mounted by default with /noexec
10c865d ci: re-add commit subject length validation
a22a894 ci: add golangci-lint run
a7cecde Add*Hook: do not return errors
c0037c9 runtimetest: silence errlint on unix.Unmount
9505f16 Explicitly ignore errors from YAML
fec9c3c validation: fix Clean
0ab61ae validation: fix/rename ReadStandardStreams
6f4b5ba validate: fix staticcheck linter warning
6a9ad7c runtimtest: fix validatePosixMounts
44e9496 Fix "addr cannot be nil" staticcheck linter warnings
d38bd63 Fix deprecation warnings from staticcheck linter
1826c32 Fix gosimple linter warnings
e36f98f Fix deadcode linter warnings
112c88c Makefile: use fancy git commit ids
16dfbbd Makefile: add/use BUILD_FLAGS
5432bc4 ci: replace travis with gha ci
fab664e Makefile: rm gofmt and golint, simplify gotest
98b2d35 Run make .gofmt
0e5956d Switch from Godeps to go modules
71a5e7c generate: add --linux-intelRdt-closid option
4f51ef9 validation: read pid in PostCreate
6502e57 Fix build of hugetlb tests on 32-bit platforms
10f8f55 generate: fix type for Umask
8f1e958 Remove spurious WARNING message
43243fe Add missing interface to set init processes Umask
120c67a AddDevice(): better diagnostic when creating dup
2affd45 Add missing clone rule for s390x.
be9f6f1 Update hugetlb tests to be more portable
5a98426 Fix cgroup hugetlb size prefix for kB
cd1349b Improve performance of AddProcessEnv
73e9a99 update Mashimiao email in MAINTAINERS
ee63cfa release v0.9.0
0d022f7 Makefile: add rule to print validation-tests
6212483 delete: reduce check waiting time
3abdc1f kill: cleanup container on error
4db38e4 oci: kill process before delete
1c40e59 seccomp: add TAP plan to the output
dd39124 validate: check mount label only for bind mounts
6fd7866 misc: use different objects for the different tests
e83ba34 capabilities: correctly add not existing capability
9585ecb adding security and CoC links
6dae2f0 Simplified code
2e8216d validation: add apparmorProfile validation
b113b38 runtimetest: add apparmorProfile validation
743b0b3 validation: add mountLabel validation
3bc60a4 Windows: Typos and incorrect defaults
20302da add selinux deps
555c03d validate: add mountlabel validation
a2df8d9 runtimetest: add mountlabel validation
b90e5bc generate: add oci-version option
00f6e86 Modify the corresponding test according to hashicorp/go-multierror v1.0.0.
b005481 Godeps: update hashicorp/go-multierror
1f0579c hack: drop -dev from runtime-spec version
b1c11da fix up vm parameters
9f6de4d generate: add process-cap-drop option
192a8eb generate: add process-cap-add option
575c8a0 man: Add some instructions and examples to some commands.
9f55c07 generate: fix capabilities add/drop option
3fc5fcb generate: Verify the input values
146c5ee generate: add vm-image-format option
f5e59a3 generate: add vm-image-path option
0cd6663 generate: add vm-kernel-initrd option
3e43643 generate: add vm-kernel-parameters option
fc0fc84 generate: add vm-kernel-path option
73f6711 generate: add vm-hypervisor-parameters option
9b1de8c generate: add vm-hypervisor-path option
e980d2f generate: add windows-devices option
f5556a8 update to golang 1.11
58f2a15 Initialize Config Windows Network
a4a33d4 release v0.8.0
c291c2a Add generate.New support for Windows.
2974f2e readme: fix wrong filepath
fb101d5 Expose Windows namespace
4615fa4 /proc should be mounted with nosuid, noexec, nodev to match the host
30a03ab Fix test
c48ee5c Vendor in windows runtime-spec changes
d5be152 validation: mounts: fix condition of source & type check
069db1a validation tests: use new RuntimeInsideValidate
270145a RuntimeInsideValidate: can now be called several times
4b49cba devel guidelines: update TAP documentation
caa32a1 validation: Implement DeleteOnlyCreatedRes
e86b898 MAINTAINERS: remove philips
dcadcca Makefile: add generate to gotest
ae94592 release v0.7.0
6c943e8 validation: Implement DeleteResImplement
fab1de6 validation: use t.Fail when checking for main test errors
06591d3 travis: add go 1.10
68b7caa mountinfo: parse empty strings in source
a6e6aff validation: check for masked block, char devices, fifo
99c5e91 validation: check for invalid symlink inside container
234933b validation: check for a masked relative path
303ae30 validation: check for read-only block, char devices, fifo
e60cd06 validation: check for invalid symlink inside container
5dd461f validation: check for a read-only relative path
d9febe1 validation: more test cases for masked paths tests
91f2983 validation: more test cases for readonly paths tests
e2d34c1 validation: add more test cases for private & slave propagations
94f1f84 validation: squash rootfs propagation tests into a single file
708de67 runtimetest: improve logic for checking for file modes
2c9b929 runtimetest: correctly check for a readable directory
0a7749a validation: test with different test cases for hugetlb cgroups
ef113d1 validation: add different test cases for blkio cgroup tests
cf9decf validation: add more test cases for linux_cgroups_network
acaa992 validation: test linux_cgroups_cpus with different values
871f0eb validation: test linux_cgroups_memory with different values
279a194 validation: allow RuntimeOutsideValidate to take a tap parameter
58ea84a fix some misspells
c887efb fix generate test in calling generate.New
cf7b786 README: fix broken links to documentation
cd3faf9 validation: fix nil dereference when handling multierror in hooks_stdin
1fb00d9 validation: use helper util.GetRuntimeToolsNamespaces()
0f52f9a validation: add a new test for NSPathMatchTypeError
ad0e97e validation: exclude user namespaces and cgroup namespaces
f64bed2 validation: add more signals to killsig test
613c5de runtimetest: check if /dev/ptmx is a symlink to /dev/pts/ptmx
582a909 validation: test validation test with an empty hostname
1ceca9e validation: use rfcError instead of specerror
a90cd2b validation: print out correct diagnostics based on specError
23c9a51 validation: sync with unshare by using select & time ticker
e132d37 validation: kill child processes by setting process groups
73358a3 validation: fix a bug when passing in namespace strings
c5c1422 validation: add test for NSProcInPath
1794938 validation: add cgroup devices validation
7c6996f check the status of the state passed to hooks over stdin
6cc92d0 validation: fix nil deferences in cpu & blkio cgroups tests
1c243a8 release v0.6.0
ef75900 validation/kill_no_effect: fix bug
3e3094d Add cgroupsPath validation
f7dd673 cgroups_v1: Correction parameters
2640f5c travis: fix fetch issue of golint
e830fa3 validation: split out pringDiag from testNamespaceInheritType
1ac1c02 validation: split out pringDiag from testNamespaceNoPath
7992f01 specerror: Add NewRFCError and NewRFCErrorOrPanic
d165658 validation: add more values for rlimits test
9152ff4 validation: create: don't skip errors on state
cc8ab2e doc: add developer guidelines
d7985e3 validation: add a new test for NSInheritWithoutType
5ce0ff8 validation: add a new test for NSNewNSWithoutPath
14e621c bash: add os
5d2dc61 validation: Implement ConfigUpdatesWithoutAffect
84a62c6 generate: Move Generator.spec to Generator.Config
2e6f6ab generate: Respect runtime.GOOS when generating default template
1917b8c validate: With --host-specific, compare config platform vs. runtime
e1ad3f0 README: Update to reflect granular TAP output
4b888f2 runtimetest: Use ModeType as the mask in the symlink check
732d438 validation: Use non-empty files in masked/readonly tests
20a71e4 runtimetest: Make TAP output more granular
b4014f8 validation/test-yaml: Drop this local experiment
7f50875 docs/command-line-interface: Require complete runtime coverage
fc1bcf5 fix process_user validation
7c5f941 generate: add process-username option
83d367b validation: add process_user validation
0ddb5cd kill stopped container generate error
73964f2 add hooks stdin test
a79a1cb add test case for KillNonCreateRunHaveNoEffect
ff399f1 contrib/rootfs-builder: Use $(cat rootfs-files)
0f3cf9d validation: LinuxUIDMapping: fix tests
984dbc8 Fix error messages in validation cgroup tests
d5630f7 validation: Implement ProcArgsApplyUntilStart
82836c8 validate: mv deviceValid to validate_linux
e99b47e Implement DevicesErrorOnDup
9e919c6 runtimetest: fix root readonly check
c9b4d66 runtimetest: count correctly TAP tests
a7f94a2 rootfs-386.tar.gz: Add with BusyBox v1.28.0
be8811c contrib/rootfs-builder: Support xz (and other) compression formats
eea2bc9 contrib/rootfs-builder: Support timestamps in stage3 dates
141f9ea contrib/rootfs-builder: Don't hit latest-stage3 when STAGE3 is supplied
4dfca7a contrib/rootfs-builder: add /proc, /dev, /sys in rootfs
b5e5322 contrib/rootfs-builder: fix busybox link list
79ae4aa validation: run CLI with correct argument order
e43d1ff return ErrorOrNil in bundle validate
4e999f2 runtimetest: fix uid_map parsing
d412a17 Fix condition in BlockIO test
8e42ca5 Add system validation
4e8dc67 add annotation and prop tests
ac12f97 Implement PosixProcRlimitsTypeGenError and LinuxProcCapError
0ec9fe6 validation: Add system validation
3401d41 validate: CheckLinux is platform dependent
0451545 validate: allow non-linux compatibility
536b713 Implement PosixProcRlimitsSoftMatchCur and PosixProcRlimitsHardMatchMax
198b3ff add 'delete' testcases
b456bda validation: Add error judgment to SetConfig
1cbf66a check RootOnWindowsRequired
e2fbc1b generate/seccomp: platform independent values
55d7e14 implement kill tests
899a400 generate: fix handling of permitted caps drop
4902e9c implement start operation tests
86869d1 validation: Increase err judgment
4947839 validation: implement PosixHooksCalledInOrder test
f48ae22 validate_test: add weightDevice test
27acd46 implement DefaultStateJSONPattern test
b25ef0d validate: implement DevicesErrorOnDup
87c5e52 release v0.5.0
e211fb5 validate: add logrus.Debugf to CheckJSONSchema
fb9511d validate: Add a non-nil test to CheckMandatoryFields
9177741 add tests when prestart/poststart/poststop hooks fail
5cbd8c7 don't overwrite hook which has a same path
9dca840 validate: add weightDevice validation
78fdf66 validate_test: Complement test
4fdf325 nil config support in lifecycle validate
09ddc02 add lifecycle validation
be390c4 change two LGTMs requirement to one
696b805 waiting until the container stopped in inside validation
ed2a4b3 add 'state' test
c76062f validation: Remove runc 'create' exit timing crutches
d8d2396 validation/util/container: Use ExitError for stderr
5e8b51e Add lifecycle testing function; Add pidfile test. Fixes #556
17486b4 Relax LGTM acquirement for PullApprove
0909a7f release v0.4.0
b5a43d1 validation/util/container: Use --bundle (and stop requiring BundleDir)
8769602 validate_test: add TestCheckMandatoryFields
7815111 cmd/runtimetest/main: Run validateDefaultDevices even with process unset
6ae0867 README: Link to the runtime API docs
fb19ae1 cmd/runtimetest/main: Loop for DRYer validateCapabilities
e85081a Makefile: Clearer warning on missing validation executable(s)
0c2e37e validation/util/container: Use a local UUID for stdout/stderr
a12de42 validation/create: Label the state ID comparison test
b880d57 *: Transition from tap Diagnostic(...) to YAML(...)
0c66fe9 vendor/github.com/mndrix/tap-go: Bump to 629fa407
7a4cb36 docs/command-line-interface: Add Runtime CLI Spec (#321)
c2f774c validation: add mount validation
625e232 Hooks should be passed in as rspec.Hook, not as a string.
48b7f56 Modify the legal value of the rootfs-propagation
5bb8754 runtimetest: add validateSeccomp
9144f82 generate: add windows-servicing option
ef277d6 generate: add windows-resources-storage option
4068d38 generate: add windows-resources-memory-limit option
93b5f72 generate: add windows-resources-cpu option
b285305 generate: add windows-network option
6a71d30 generate: add windows-layer-folders option
e9507da generate: add windows-ignore-flushes-during-boot option
df629e3 generate: add windows-hyperv-utilityVMPath option
8397b70 Add interface to remove mounts.
e266af5 generate: modify the function return value
e996b69 generate: add solaris-milestone option
fc48567 generate: add solaris-max-shm-memory option
3bca692 generate: add solaris-limitpriv option
4a9f3fa generate: add solaris-capped-memory-swap option
c9ef766 generate: add solaris-capped-memory-physical option
61884ee generate: add solaris-capped-cpu-ncpus option
01cf5e7 generate: add solaris-anet option
6f10352 AddMounts should be AddMount you are only adding a single Mount
9bcbe83 Recursive propagation flags should be legal to use
3bd8d43 validation/linux_cgroups_*: Generate TAP output
c94875e validation/util/test: Fix 'start' -> 'create' typo in error message
1094856 validation/util: Generic RuntimeOutsideValidate API
612c315 validate_test: perfect TestJSONSchema
8fb3e83 Add validation when host-specific is set
9db5ddf validate: change platform default value
8a09ee1 generate: Use non-null validation instead of initialization
10ede2c validate: Add a double guards to the call of the verification function
2f21180 filepath/clean: Add Windows support
17ce13a filepath/abs_test: Compare IsAbs with the standard library
60df768 filepath/clean_test: Compare with the standard library
f2e8be2 filepath/clean: Avoid a panic on abs-path with trailing ..
eb2ffab filepath/clean: Handle 'a/..' -> '.' case
4b20ce2 validate: fix CheckHooks
4d0a011 validate: fix CheckCapabilities
45068ce validate_test: add TestCheckHooks
34f773a validate_test: add TestCheckPlatform
7c09b4c add relative cgroupath test
1aebc09 update to support relative cgrouppath test
6351044 add cgroup network test for runtime
72e67e5 add cgroup pids test for runtime
b712995 add cgroup cpus test for runtime
f1e02ff add cgroup blkio test for runtime
432615a add cgroup hugetlb test for runtime
4a57b0f add cgroup memory test for runtime
07118a8 add runtimeOutsideValidate
9a56096 add cgroups package
0d75257 validate: remove duplicate verification
229722a validate_test: add TestCheckLinux
e7ee761 remove kernel limit for id mappings
f7b8c7e fix idmappings test
53da048 generate: add linux-intelRdt-l3CacheSchema option
ad47e7d Makefile: Change from prove to node-tap
0a919c0 validation/util/container: Remove bundle even if delete fails
e11b77f validation: Use prove(1) as a TAP harness
721fbce solve conflicting option problem
e409855 man: small fixs
58374ae remove --mount-cgroups option
74d6245 man: add manpage for option --mounts-add
6e78ff2 support json value for hooks
1c2dca0 generate: Move generate_test.go from validation
9422eec cmd/runtimetest/main: Use TAP diagnostics for errors
ca332ae runtimetest: fix nil dereference
cdf38ca validate: fix nil deference
3e82a0a add all left behind container inside tests
9a69e14 add preFunc
39f3f74 runtimetest: add host platform validation
7026311 runtimetest: add rootfs propagation test
adf1844 generate: fix error return
d327e0b generate: fix DropProcessCapability*
b5c45de generate: remove redundant code
5557d36 add more test cases for default runtime validation
9f47cbe remove debug info
68e7720 generate: change process-tty to process-terminal
045bc5f generate: fixed seccompSet
8765570 runtimetest: add posixValidations
45b2686 runtimetest: add validateUser
cc5bf05 runtimetest: fix process validation
6c98b46 runtimetest: Raise ConfigInRootBundleDir for missing config.json
95e0d95 runtimetest: Make validateRlimits silent on Windows
2746c06 move validateRlimits to defaultValidations
3c9cdc5 runtimetest: fix error return
630f06a validate_test: add cwd check to TestCheckProcess
3a46197 add version file
e08f842 release v0.3.0
90ace62 translate RFC errors
a171213 redefine error code as int64
3a97b98 translate more RFC errors based on specerror
87d3df2 complete RFC codes of runtime.md
ccef443 generate: add mounts related option
64c5ef8 complete specerror of config-linux.md config-windows.md
6df06d9 validation: add a generate smoke-test
a6f475f config: correct rootfs default
de08605 validate: allow unset "type" fields in resource devices whitelist
7553161 validate: Soften unrecognized rlimit types to SHOULD violations
b446e38 add specerror framework; complete rfc errors of bundle.md and config.md
19b061c generate: fix nil deference
6d2dbbc runtimetest: fix nil deference
0b49b01 man: fix typo
6089f63 specerror: Add SplitLevel helper
a9dbd7e cmd/oci-runtime-tool: Implement --compliance-level
286d437 fix compile issue
310bac8 bash: fix commands
6dabb9b generate: fix rootfs-propagation
93ba5a2 bash: fix rootfs-propagation
4beb2a6 validate: fix cap validation
ed4adc3 travis: update go versions
19ae238 CHANGELOG: Document changes since v0.1.0
f172006 release: v0.2.0
c3c8c02 rootfs-386.tar.gz: Add with BusyBox 1.25.1
894cae7 validate/validate: Linux rlimits extend the POSIX rlimits
6367e88 validation: Support per-architecture tarballs
ff5e578 contrib/rootfs-builder: Support multiple architectures
a94f1f6 contrib/rootfs-builder/Makefile: Ignore previous symlinks
8635532 contrib/rootfs-builder/Makefile: Raise errors from echo recipe
4f756fd Specific cap-drop command
ea55f9d Specific cap-add command
5cb6c48 rootfs.tar.gz: Bump to BusyBox 1.25.1
1a9532e generate: remove redundant content
567f1aa validate: add root.path validation when platform is windows
2cbb341 validate/validate_test: Add linux.rootfsPropagation checks
6e7da81 validate/validate_test: Better error messages for unexpected JSON Schema errors
4a705c6 validate/validate_test: Handle JSON Schema test not raising an error
16be985 validate: Delete the extra validation
b3fc8fe validate: add the validation of rlimit.type when platform is solaris
24a2327 validate: modify the condition of the deviceValid
cf64923 filepath: Add a stand-alone package for explicit-OS path logic
fa9842c Add manpages and bash-completion for --device-access-add and --device-access-remove
7f09e1b generate: add --device-access-add and --device-access-remove option
a9c6787 generate: support blkio related options
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runtime-spec to version v1.0.2-79-g7ceeb8a, which comprises the following commits:
600a8bd cgroup ownership: clarify that some files may not exist
0608c1f Switch to GitHub Actions, CODEOWNERS, etc.
f4ef391 specify cgroup ownership semantics
104385d config-linux: MAY reject an unfit cgroup
411082c add youki to implementations.md
6641127 alphabetize the implementation list.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Bumping image-tools to version v1.0.0-rc3-6-g11f9988, which comprises the following commits:
8899fa9 README: add summary of project status
c6e5a1b version: back to development
25e557a version: update to 1.0.0-rc3
e324098 update email in MAINTAINERS
c3f8284 Revert "Relax LGTMs"
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping image-spec to version v1.0.2-144-g02efb9a, which comprises the following commits:
d6ce48a Add mediaType fields into example manifest & image index JSON references
bc44f5b Fixing charter link
02c5c05 implementations: adding the C and Rust libraries
a36b0c8 Handle multiple matching index entries
a3eee7d README.md: Remove link to OCI scope table The OCI scope table no-longer exists.
4533d3e schema: use Go's embed package instead of esc
d147780 .tool: remove lint tool, call linter directly
0e094f3 schema, specs-go: fix lint errors
d3cd202 *: switch to golangci-lint
4d865bc go: have the go.mod at top-level
0f6c001 Remove unneeded docker pull of pandoc image
de28903 Makefile: stale installation of glide was failing
3a46ac8 github: bring forward the versions of golang tested/built with
6ced3bd media-types: `.mediaType` is available in both OCI and Docker
3be64d9 version: bump main back to -dev
beccafd version: release 1.0.2
5b82148 specs-go: adding `mediaType` to the index and manifest structures
2eb4046 *.md: bring mediaType out of reserved status
e3885ce version: bump main back to -dev
67d2d56 version: release 1.0.2
dcdcb7f specs-go: adding `mediaType` to the index and manifest structures
5f31485 *.md: bring mediaType out of reserved status
3fee04b Adding ACR to implementations
8087946 Reflect docker dontation of distribution to CNCF
bd2fa25 Minor spelling correction
fc4df0a Fix very minor oversight in config example
0d98a6c Scope data verification to content consumers
83479d4 Clean up portability considerations
fccc435 Implementations MUST NOT populate data arbitrarily
2596ec0 Expand godoc for Data
58c082d Add note about portability concerns
ce281ce Add Embedded Data section
aaf8045 Define the data field
4f080a7 Add go.mod and pin dependencies
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We refresh our wget -> curl patch for context, but otherwise, no other
changes are required.
Bumping lxc to version lxc-4.0.12-8-g5ba5725cb, which comprises the following commits:
5ba5725cb cgroups: modify cgroup2 attach logic
1e4631641 ttys: ensure container_ttys= env variable is set correctly
8ef019a6c doc: Fix reverse allowlist/denylist in Japanese man page
f1c4a17e7 cgroups: log fd of newly created cgroup
f7446b4e1 cgroups: check that opened file descriptor is a cgroup filesystem
71ba7f656 doc: Fix reverse allowlist/denylist
f314419d1 lxc-checkconfig: Fix bashism
ca4c25c6e lxc-net: don't start by default inside lxc
7e37cc96b Release LXC 4.0.12
d678aa61e lxccontainer: allow xdev when creating the container dir
bc61d2354 github: Clear default ACL on /home
fb0e0b3dd github: add systemd-coredump
53e0d390c github: more detailed compilation instructions
db84a8b6b github: log system info
e9282b6a6 github: ensure system liblxc is wiped
ad8a3bd68 lxccontainer: properly wrap lxcapi_create()
bceb81cd2 build: simplify thread local storage handling
919da35b0 build: only enable LTO for regular builds
d0a1e9c44 lxccontainer: simplify partial file creation
62b5c0051 lxccontainer: improve create_partial()
bfe24cb6a lxccontainer: improve do_lxcapi_create()
1a5c236ac lxccontainer: improve do_lxcapi_save_config()
bae0d7196 conf: log termination status
4eb09aaad conf: improve userns_exec_mapped_root()
928943280 github: stop installing gnupg now that it's unused
7c70b0d14 lxc-download: Rely on HTTPS only
199d2077c Update README.md: Fix broken link (403 Forbidden)
0b6b230e3 attach: don't pointlessly call cgroup_init()
dbef704fb commands: log command during file descriptor retrieval
733f9c909 lxc-checkconfig.in: CONFIG_NF_NAT_IPV4 was removed from the kernel 2019-03-03
ce392e230 (trivial) Fix error message, failure was connect not bind
5628bff79 seccomp: close seccomp notifier fd in cleanup handler
1f2af83a9 seccomp: only guard seccomp notify behind HAVE_DECL_SECCOMP_NOTIFY_FD
9451303d5 api-extensions: don't advertise seccomp notify support if it's not compiled in
23d07c315 use 2 sysfs instances for sys:mixed
0dd3258bd Revert "api: ->save_config() doesn't need to create container dir"
93edd510a api: ->save_config() doesn't need to create container dir
28b2e04f1 cgroups: fix compiler warning
15515f9a3 Revert "initutils: use vfork() in lxc_container_init()"
41d2530d1 macro: ensure necessary io_uring flags are defined
fc4e948c9 autotools: Avoid multiple liblxc.so with --enable-pam
a616a311a build: refuse to compile with unsupported liburing version
93be4e512 tests: add lxc.proc.* test
d8027e49c tests: add lxc.sysctls.* test
6f580343e test: improve logging helpers
a10ff3418 conf: improve logging setting sysctl and /proc/<pid>/ parameters
334cf7beb conf: apply /proc/sys and /proc/<pid>/ parameters
1b74e01ad tests: include config.h
c36379431 build: move _FILE_OFFSET_BITS to common option
f24c234ee start: log signal name and number
4915c9112 process_utils: add signal_name() helper
78baec37d build: improve liburing support detection
1a102b310 mainloop: make ifdefs easier to follow
cf931928f Replace last occurence of 'which' with 'command -v'
1ec5939b4 Replace deprecated backticks with $() construct
fdfb4a13d Replace 'which' with 'command -v' in tests too
71743e811 start: check event loop type before closing fd
f69e6b4d3 mainloop: make sure that descr->ring is allocated
1a8895855 Replace 'which' with 'command -v'
9219277cc build: add io-uring-event-loop option
d04eb166c build: add static libcap to output
bc51048b7 confile: don't use path_simplify() on lxc.{execute,init}.cmd
48728e988 conf: add cgroup2, cgroup2:ro, cgroup2:force, cgroup2:ro:force options
4d3aad49d AUTHORS: Update to point to git history
e328a988e conf: handle kernels without or not using SMT
d40b0deb4 doc: fix typo in English lxc.container.conf(5)
49fab27fc doc: Add lxc.sched.core to Japanese lxc.container.conf(5)
1ad1cab80 doc: add loglevels to ja and ko common options
1505f0780 conf: make it more obvious how auto-mount flags are defined
429233cf0 criu: support restoring containers with pre-created veth devices
48e079bf3 Release LXC 4.0.11
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping umoci to version v0.4.7-70-gfa8e9f8, which comprises the following commits:
c67586e build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
88aaeca fuzz: always use golang:latest
37b9db4 build(deps): bump golang from 1.17.4 to 1.17.5
09ff9d5 build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
86eb281 build(deps): bump golang from 1.17.3 to 1.17.4
610dabf oci: protect against mediatype confusion attacks (CVE-2021-41190)
9b17e05 oci: gc: fix tests to correctly use the right media-types
38c20f1 ci: fix fresh builds
220b0c0 build(deps): bump github.com/opencontainers/image-spec
732d36d build(deps): bump golang from 1.17.2 to 1.17.3
58f3a37 mutator: .Config() should return ispec.Image vs. ImageConfig
001bbd4 ci: update main branch name
7bebba6 ci: osx: only try to unlink parallel if installed
a0d54ce build(deps): bump golang from 1.17.1 to 1.17.2
72ec924 *: use new protobuf package
09d1d79 build(deps): bump github.com/golang/protobuf from 1.5.0 to 1.5.2
88243cd build(deps): bump github.com/rootless-containers/proto
12270d3 build(deps): bump github.com/opencontainers/runc
056236a *: make codecov slightly less annoying
18fdf79 build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
6f84bbb build(deps): bump github.com/cyphar/filepath-securejoin
0b4d52f build(deps): bump github.com/apex/log from 1.4.0 to 1.9.0
ac6ba6c build(deps): bump github.com/klauspost/pgzip from 1.2.4 to 1.2.5
9cd570d build(deps): bump golang from 1.14 to 1.17.1
26e57a2 gha: enable dependabot
65932cd ci: hardcode Go version used for linting
17111a6 *: use go1.17-friendly go:build tags
f6c2e79 codecov: drop explicit env.CODECOV_TOKEN
f80d8e2 ci: use codecov-action
785ed73 fix(Makefile): avoid usage of which
97099f1 mutate: implement an AddExisting() API
5adbd99 oci: casext: walk: do not attempt to recurse into un-parseable blobs
aad89ed oci: cas: add StatBlob to CAS interface
7091cd1 ci: switch to GitHub Actions
3ceb144 Add 2 fuzzers
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping skopeo to version v1.6.1-10-g3e2defd6, which comprises the following commits:
52002728 Update github.com/containerd/containerd
0ad25b2d Bump github.com/containers/image/v5 from 5.19.1 to 5.20.0
8cbfcc82 do not recommend upgrading all packages
370be7e7 Improve a comment in the 010-inspect.bats test
73edfb82 Move to v1.7.0-dev
49084d2c Bump to v1.6.1
23183072 Work around systemd-resolved's handling of .invalid domains
3be97ce2 Beautify a few calls
49d9fa9f Only look for the layer digests in the Layers field.
77363128 Don't expect the config blob to be listed in (skopeo inspect)
0f363498 Cirrus: Use updated VM images
27b77f2b Bump c/common to v0.47.4
de714082 tests: skip sif test on RHEL
697ef595 Bump to v1.6.1-dev
e4b79d77 Release v1.6.0
162bbab3 Bump version of containers/image and containers/common
004519f1 Improve the documentation of boolean flags
9db60ec0 Document where various fields of (skopeo inspect) come from
cb74933b Improve the documentation of the argument to (skopeo inspect)
7f4db3db Update vendor of containers/storage and containers/common
a4476c35 add a SIF systemtest
042f4816 Update vendor of containers/common
bd8ed664 Github workflow: Fix yaml syntax
b51707d5 Bump github.com/containers/storage from 1.38.0 to 1.38.1
bb49923a prompt-less signing via passphrase file
cd58349b Github-workflow: Report both failures and errors
2858904e Run codespell on code
923c58a8 Update the vendor of containers/common
1bf18b7e Bump github.com/containers/storage from 1.37.0 to 1.38.0
d32c56b4 Update github.com/containerd/containerd to 1.5.9
6007e792 Fix the pseudo-version of github.com/opencontainers/image-spec
5aa06a51 Update github.com/opencontainers/runc to v1.0.3
f6a84289 Bump github.com/spf13/cobra from 1.2.1 to 1.3.0
c5b45c6c Bump github.com/docker/docker
c582c484 Add option to preserve digests on copy
2046bfda Add option to preserve digests on copy
e7dc5e79 proxy: Also bump compatible semver
3606b2d1 proxy: Add a GetFullConfig method
5c82c772 Update github.com/containerd/containerd to v1.5.8
37d801c9 Update opencontainers/image-spec
d9401546 Add an option to allow copying image indexes alone
4dcd28df Use a dynamic temp dir for test
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.1.0-5-gb9460f26, which comprises the following commits:
986e7c53 libct: fixStdioPermissions: ignore EROFS
5053a065 libct: fixStdioPermissions: skip chown if not needed
d2939b6b libct: fixStdioPermissions: minor refactoring
d7f7b22a VERSION: back to development
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.1.0-5-gb9460f26, which comprises the following commits:
986e7c53 libct: fixStdioPermissions: ignore EROFS
5053a065 libct: fixStdioPermissions: skip chown if not needed
d2939b6b libct: fixStdioPermissions: minor refactoring
d7f7b22a VERSION: back to development
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
