summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
...
* podman: update to 3.2.1Bruce Ashfield2021-06-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v3.2.1-2-gab4d0cf90, which comprises the following commits: 60752b320 Bump to v3.2.2-dev 152952fe6 Bump to v3.2.1 c5d9c0a6f Updated release notes for v3.2.1 4f56f7f13 Fix network connect race with docker-compose e42d727a9 Revert "Ensure minimum API version is set correctly in tests" f69789155 Fall back to string for dockerfile parameter 5a158563c remote events: fix --stream=false 38fbd2cb9 [CI:DOCS] fix incorrect network remove api doc 26eae3bf8 remote: always send resize before the container starts c751544fa remote events: support labels c28f442b2 remote pull: cancel pull when connection is closed 2993bdf1e Fix network prune api docs 8ba0c92e6 Improve systemd-resolved detection c3f6ef63a logs: k8s-file: fix race f1e7a0747 Fix image prune --filter cmd behavior 5ddd76edd Several shell completion fixes 2afb5eeab podman-remote build should handle -f option properly 6beae86f0 System tests: deal with crun 0.20.1 80362b34c Fix build tags for pkg/machine... c85b6b3fe Fix pre-checkpointing b61701acb container: ignore named hierarchies e0dcffa8d [v3.2] vendor containers/common@v0.38.9 d46deca8c rootless: fix fast join userns path f2b3da502 [v3.2] vendor containers/common@v0.38.7 78430ee1d [v3.2] vendor containers/common@v0.38.6 b6ef7cf21 Correct qemu options for Intel macs 9647d8844 Ensure minimum API version is set correctly in tests 72455ece4 Bump to v3.2.1-dev 0281ef262 Bump to v3.2.0 cff73766f Fix network create macvlan with subnet option 8688f54ea Final release notes updates for v3.2.0 f62c6bf6e add ipv6 nameservers only when the container has ipv6 enabled 4b8ca6303 Use request context instead of background ce5c3b554 [v.3.2] events: support disjunctive filters dd83f5c0c System tests: add :Z to volume mounts 32927f5d6 generate systemd: make mounts portable abb57e5cf vendor containers/storage@v1.31.3 1e4563182 vendor containers/common@v0.38.5 fbf8b78a3 Bump to v3.2.0-dev 684729482 Bump to v3.2.0-RC3 f49023031 Update release notes for v3.2.0-RC3 ee5dd0603 Fix race on podman start --all 6c9de9382 Fix race condition in running ls container in a pod 69bae4774 docs: --cert-dir: point to containers-certs.d(5) 934f36df5 Handle hard links in different directories 5eecc2761 Improve OCI Runtime error ba884865c Handle hard links in remote builds c53638e9f Podman info add support for status of cgroup controllers ac8b7ddd8 Drop container does not exist on removal to debugf 18e917cdc Downgrade API service routing table logging efa15b96c add libimage events a9108ab25 docs: generate systemd: XDG_RUNTIME_DIR bb589bec2 Fix problem copying files when container is in host pid namespace Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to rc95Bruce Ashfield2021-06-142-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synchronize the 'runc-docker' with the opencontainers variant. This allows the common patch to be used once again, and we refresh our docker specific patch to the new content. Bumping runc to version v1.0.0-rc95-28-gbfcbc947, which comprises the following commits: 37767c05 ci: lint: show all errors in PRs 07ca0be0 *: clean up remaining golangci-lint failures 00119c85 integration: add repeated "runc update" test d0f2c25f cgroup2: devices: replace all existing filters when attaching 98a3c0e4 cgroup2: devices: switch to emulator for cgroupv1 parity dcc1cf7c devices: add emulator.Rules shorthand 54904516 libcontainer: fix integration failure in "make test" c7c70ce8 *: clean t.Skip messages a95237f8 libctr/cg/systemd: export rangeToBits df0206a6 errcheck: utils 0c65f833 errcheck: signals 3b31e3ea errcheck: tty b45fbd43 errcheck: libcontainer 463ee5e1 errcheck: libcontainer/nsenter 7e7ff872 errcheck: libcontainer/configs a8995053 errcheck: libcontainer/integration b93666eb libct/cg/fs2: setFreezer: wait until frozen 1069e4e9 libct/cg/fs2: optimize setFreezer more 5d193188 libct/cg/fs2: optimize setFreezer 8a7a374f VERSION: back to development b9ee9c63 VERSION: release v1.0.0-rc95 0ca91f44 rootfs: add mount destination validation c61f6062 libcontainer: honor seccomp defaultErrnoRet d519da5e Dockerfile, Vagrantfile.centos7, .github: bats 1.3.0 bdad2859 Dockerfile, Vagrantfile.centos7: use go 1.16 f96530f2 EMERITUS: recognise previous maintainers c73a6626 VERSION: back to development 2c7861bc VERSION: release v1.0.0-rc94 12e9cac9 Vagrantfile.fedora: set Delegate=yes ac70a9a1 tests/int: run rootless_cgroup tests for v2+systemd 601cf582 tests/int/cgroups: don't check for hugetlb 40b97919 tests/int: enable/use requires cgroups_<ctrl> 44fcbfd6 tests/int/helpers: generalize require cgroups_freezer 353f2ad1 tests/int/update.bats: don't set cpuset in setup 4f8ccc5f libct/cg/sd/v2: call initPath from Path 0ed1f802 tests/int/helpers: rm old code af2e03c5 ci/gha: bump shellcheck 0.7.1 -> 0.7.2 2d1bb91d ci/gha: bump shfmt 3.2.0 -> 3.2.4 a7feb423 libct/int: add TestFdLeaksSystemd c7f847ed libct/cg/sd: use global dbus connection 99c5c504 libct/cg/sd: introduce and use getManagerProperty 0fabed76 libct/int/checkpoint_test: use kill(0) for pid check 7eb1405b libct/int/checkpoint_test: use waitProcess helper 72d7a824 libct/int/checkpoint_test: use t.Helper bcca7968 libct/int: simplify/fix showing errors 524abc59 freezer: add delay after freeze e1d842cf libct/intelrdt: fix unit test 541fc19e Makefile: allow overriding go command by environment 06a9ea36 script/release.sh: add -a to force rebuild 91b01682 Update golang.org/x/sys to add linux/ppc support ee4612bc CI: enable Go 1.13 again e2dd9220 go.mod: demote to Go 1.13 45f49e8f libcontainer: avoid using t.Cleanup 1a659bc6 Revert "Makefile: rm go 1.13 workaround" abf12ce0 libc/cg: improve Manager docs 3f659467 libct/cg: make Set accept configs.Resources af0710a0 libct/cg/sd/v2: fix Set argument 850b2c47 libct/cg/fscommon.OpenFile: speed up ro case 71a8aee8 cgroups/systemd: replace deprecated dbus functions 47ef9a10 libct/cg/sd: retry on dbus disconnect 6122bc8b Privatize NewUserSystemDbus 15fee989 libct/cg/sd: add renew dbus connection bacfc2c2 libct/cg/sd: add isDbusError cdbed6f0 libct/cg/sd: add dbus manager 9efd8466 libct/cg/fscommon.OpenFile: reverse checks order 0bee5e0b libct/cg/fs: add GetStats benchmark 7e7eb1c3 CI: update Fedora to 34 d3cee12a cloned_binary: switch from #error to #warning for SYS_memfd_create 23e3794d checkpoint: validate parent path fcd7fe85 libct/cg/fs/freezer: make sure to thaw on failure 0216716c tests/int: add a case for cgroupv2 mount 5ffcc568 tests/int: use bfq test with rootless ff692f28 Fix cgroup2 mount for rootless case 3826db19 libct/rootfs/mountCgroupV2: minor refactor 1e476578 libct/rootfs: introduce and use mountConfig deb8a8dd libct/newInitConfig: nit 2192670a libct/configs/validate: validate mounts 1f1e91b1 libct/specconv: check mount destination is absolute 73f22e7f libcontainer/cgroups/systemd: replace use of deprecated dbus.New() aa622723 tiny fix iterative checkpoint test case ee3b563d Add cfs throttle stats to cgroup v2 6faed0e4 libct/int: use ok(t, err) af3c5699 libct/int: remove unused code 7b802a7d libct/int: better test container names 9f3d7534 logging: enable file/line info if --debug is set ef9922c2 libct/cg: don't return OOMKillCount error when rootless 5cdd9022 libct/cg/fs[2]: fix comments about m.rootless 31dd1e49 tests/int: add rootless + host pidns test case a2050ea4 runc run: fix start for rootless + host pidns 2f1a3ed3 Fix vendored dependencies d15c7bb0 go.mod: github.com/cilium/ebpf v0.5.0 f28a8cc2 ebpf: replace deprecated prog.Attach/prog.Detach 928ef7af libct/nsenter: add json msg escaping 52390d68 Ignore kernel memory settings b7c315ad vendor: bump containerd/console to 1.0.2 b6cdb8ae fix a typo 64bb59f5 nsenter: improve debug logging 6ce2d63a libct/init_linux: retry chdir to fix EPERM c5029c00 tests: fix hello-world tarball name in testdata for arm64 289a3045 go.mod: github.com/moby/sys/mountinfo v0.4.1 4316df8b libcontainer/system: move userns utilities to separate package e7fd383b libcontainer/system: un-export UIDMapInUserNS() 249356a1 libcontainer/system: remove unused GetParentNSeuid() dc52ed25 libcontainer/user: remove outdated MAINTAINERS file 72ecf59c libcontainer/user: fix windows compile error 2515b0c2 libct/user: rm windows code 0596f6e1 libcontainer/devices/device_windows.go: rm b1deba8c libcontainer/configs/config_windows_test.go: rm f1586dbd libcontainer/configs/validate: make Validate() less DRY 4126b807 libcontainer/configs: add missing type for hooknames 48125179 go.mod: github.com/cilium/ebpf v0.4.0 44611630 docs/systemd: add 27bb1bd5 libct/specconv/CreateCgroupConfig: don't set c.Parent default d748280a make release: build/include libseccomp aa6da82c script/release.sh: fix shellcheck warnings 3eb46d89 ci: make static built binary available f0dec0b4 libct/specconv/CreateCgroupConfig: nit 36fe3cc2 tests/int/cpt: fix lazy-pages flakiness 2dd62b3d libct/checkCriuFeatures: rm excessive debug 0e089002 tests/int/checkpoint: close lazy_r fd b09030a5 tests/int/checkpoint: close fds in check_pipes e63df1e6 tests/int: really randomize cgroup/unit names 6e4c5b6e tests/int/cgroups: don't use BUSYBOX_BUNDLE adf733fa vendor: update go-systemd and godbus f09a3e1b tests/int: don't set/use CGROUP_XXX variables 4ecff8d9 start: don't kill runc init too early b1184302 libct/configs/validator: add some cgroup support 0f8d2b6b libct/cg/fs2.Stat: don't look for available controllers 85416b87 libct/cg/fs2.statPids: fall back directly 10f9a982 libct/cg/fs2/getPidsWithoutController: optimize 6121f8b6 libct/cg/fs2.Stat: always call statCpu 9455395b libct/cg/fs2/memory.Stat: add usage for root cgroup a9c47fe7 libct/cg/fs[2]/getMemoryData[V2]: optimize b99ca25a libct/cg/fs2/memory: fix swap reporting 79a8647b libct/int: add TestFdLeaks b3be2b0b libct: close execFifo after start 08b52797 Make test specific to disassembleFilter function 7b3e0bcf Ensure the scratch pipe is read during ExportBPF 62f1f0e4 tests/int/checkpoint: check all logs for errors 346cb359 Revert "tests/checkpoint: show full log lazy pages cpt" c9b3787b script/check-config.sh: add SELinux and AppArmor 5fb831a0 capabilities: WARN, not ERROR, for unknown / unavailable capabilities e49d5da2 go.mod: OCI runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 2726146b runc --debug: more tests 201d60c5 runc run/start/exec: fix init log forwarding race c06f999b libct/logs/test: refactor 688ea99e runc init: fix double call to ConfigureLogs dd6c8d76 main: cast Chmod argument to os.FileMode 69ec21a1 libct/logs.ForwardLogs: use bufio.Scanner 0300299a tests/int/debug.bats: fixups d38d1f9f libcontainer/logs: use int for Config.LogPipeFd ac93746c libct/seccomp: rm IsEnabled 9b2f1e6f runc version: don't use seccomp.IsEnabled c8e0486f Fix oss-fuzz build d76309f9 script/check-config.sh: add CONFIG_SECCOMP_FILTER 997e8942 capabilities.Caps: use a map for capability-types 41f466d8 nsexec.c: fix formatting for netlink defines 522bd641 Fix checking C code formatting 1948b4ce cloned_binary.c: rm redundant comments b67deb56 nsexec.c: rm a block 513d89ee capabilities: use BOUNDING/AMBIENT instead of their alias dd2caace go.mod: runtime-spec v1.0.3-0.20210316141917-a8c4a9ee0f6b a608b7e7 libcontainer/apparmor: use sync.Once for AppArmor detection d6e89248 Fix build-tags in libcontainer/devices f585cec7 libct/cg/v2: always enable TasksAccounting 8c7ece1e fs2: fallback to setting io.weight if io.bfq.weight 74299a1c CI: cache ~/.vagrant.d/boxes 97f2e351 go.mod, libct: bump go-criu to v5, use google.golang.org/protobuf db025aba libct: criuSwrk: only iterate over CriuOpts if debug is set 051646a3 tests: test nested bind mount restore 705b6cc7 Re-create mountpoints during restore Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to 1.21 latestBruce Ashfield2021-06-141-1/+1
| | | | | | | | | | | | | | Bumping k3s to version v1.21.1+k3s1-10-geac48f69bc, which comprises the following commits: eac48f69bc Add kubernetes.default.svc to serving certs 16ae282c7a Fix RBAC cloud-controller-manager name 3308 (#3388) (#3408) ff54d8c96d Add a path for wireguard's privatekey 1932979f44 Update flannel version 8fd180e0d9 move object channel defer close to goroutine 69795277be add retention default and wire in s3 prune 58649c5e85 add etcd snapshot save subcommand Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to v2.0.28Bruce Ashfield2021-06-041-2/+2
| | | | | | | | | | | | | | | | | | | | 6b18f7e bump to v2.0.28 dd63dcb Cirrus: Update VM Images 096e2c1 conmon: do not chown /dev/null 3efab3e Add Kubernetes e2e tests as GitHub action 0114f3c move integration to gh actions 186038c run make vendor 31c5a2e add tests running a runtime c53c155 always set container pid file 1955f59 write runtime stderr to journal on error af1f3c4 some small cleanups 6c38b5a Use less resources 355dbf1 conn_sock: fix potential segfault 4587294 ci/gha: bump runc to rc93 92867a7 Add Podman integration test GitHub action 1ec43d9 bump to v2.0.28-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to rc95Bruce Ashfield2021-06-042-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest runc, which includes the following commits: 37767c05 ci: lint: show all errors in PRs 07ca0be0 *: clean up remaining golangci-lint failures 00119c85 integration: add repeated "runc update" test d0f2c25f cgroup2: devices: replace all existing filters when attaching 98a3c0e4 cgroup2: devices: switch to emulator for cgroupv1 parity dcc1cf7c devices: add emulator.Rules shorthand 54904516 libcontainer: fix integration failure in "make test" c7c70ce8 *: clean t.Skip messages a95237f8 libctr/cg/systemd: export rangeToBits df0206a6 errcheck: utils 0c65f833 errcheck: signals 3b31e3ea errcheck: tty b45fbd43 errcheck: libcontainer 463ee5e1 errcheck: libcontainer/nsenter 7e7ff872 errcheck: libcontainer/configs a8995053 errcheck: libcontainer/integration b93666eb libct/cg/fs2: setFreezer: wait until frozen 1069e4e9 libct/cg/fs2: optimize setFreezer more 5d193188 libct/cg/fs2: optimize setFreezer 8a7a374f VERSION: back to development b9ee9c63 VERSION: release v1.0.0-rc95 0ca91f44 rootfs: add mount destination validation c61f6062 libcontainer: honor seccomp defaultErrnoRet d519da5e Dockerfile, Vagrantfile.centos7, .github: bats 1.3.0 bdad2859 Dockerfile, Vagrantfile.centos7: use go 1.16 f96530f2 EMERITUS: recognise previous maintainers c73a6626 VERSION: back to development 2c7861bc VERSION: release v1.0.0-rc94 12e9cac9 Vagrantfile.fedora: set Delegate=yes ac70a9a1 tests/int: run rootless_cgroup tests for v2+systemd 601cf582 tests/int/cgroups: don't check for hugetlb 40b97919 tests/int: enable/use requires cgroups_<ctrl> 44fcbfd6 tests/int/helpers: generalize require cgroups_freezer 353f2ad1 tests/int/update.bats: don't set cpuset in setup 4f8ccc5f libct/cg/sd/v2: call initPath from Path 0ed1f802 tests/int/helpers: rm old code af2e03c5 ci/gha: bump shellcheck 0.7.1 -> 0.7.2 2d1bb91d ci/gha: bump shfmt 3.2.0 -> 3.2.4 a7feb423 libct/int: add TestFdLeaksSystemd c7f847ed libct/cg/sd: use global dbus connection 99c5c504 libct/cg/sd: introduce and use getManagerProperty 0fabed76 libct/int/checkpoint_test: use kill(0) for pid check 7eb1405b libct/int/checkpoint_test: use waitProcess helper 72d7a824 libct/int/checkpoint_test: use t.Helper bcca7968 libct/int: simplify/fix showing errors 524abc59 freezer: add delay after freeze e1d842cf libct/intelrdt: fix unit test 541fc19e Makefile: allow overriding go command by environment 06a9ea36 script/release.sh: add -a to force rebuild 91b01682 Update golang.org/x/sys to add linux/ppc support ee4612bc CI: enable Go 1.13 again e2dd9220 go.mod: demote to Go 1.13 45f49e8f libcontainer: avoid using t.Cleanup 1a659bc6 Revert "Makefile: rm go 1.13 workaround" abf12ce0 libc/cg: improve Manager docs 3f659467 libct/cg: make Set accept configs.Resources af0710a0 libct/cg/sd/v2: fix Set argument 850b2c47 libct/cg/fscommon.OpenFile: speed up ro case 71a8aee8 cgroups/systemd: replace deprecated dbus functions 47ef9a10 libct/cg/sd: retry on dbus disconnect 6122bc8b Privatize NewUserSystemDbus 15fee989 libct/cg/sd: add renew dbus connection bacfc2c2 libct/cg/sd: add isDbusError cdbed6f0 libct/cg/sd: add dbus manager 9efd8466 libct/cg/fscommon.OpenFile: reverse checks order 0bee5e0b libct/cg/fs: add GetStats benchmark 7e7eb1c3 CI: update Fedora to 34 d3cee12a cloned_binary: switch from #error to #warning for SYS_memfd_create 23e3794d checkpoint: validate parent path fcd7fe85 libct/cg/fs/freezer: make sure to thaw on failure 0216716c tests/int: add a case for cgroupv2 mount 5ffcc568 tests/int: use bfq test with rootless ff692f28 Fix cgroup2 mount for rootless case 3826db19 libct/rootfs/mountCgroupV2: minor refactor 1e476578 libct/rootfs: introduce and use mountConfig deb8a8dd libct/newInitConfig: nit 2192670a libct/configs/validate: validate mounts 1f1e91b1 libct/specconv: check mount destination is absolute 73f22e7f libcontainer/cgroups/systemd: replace use of deprecated dbus.New() aa622723 tiny fix iterative checkpoint test case ee3b563d Add cfs throttle stats to cgroup v2 6faed0e4 libct/int: use ok(t, err) af3c5699 libct/int: remove unused code 7b802a7d libct/int: better test container names 9f3d7534 logging: enable file/line info if --debug is set 31dd1e49 tests/int: add rootless + host pidns test case a2050ea4 runc run: fix start for rootless + host pidns 0f8d2b6b libct/cg/fs2.Stat: don't look for available controllers 85416b87 libct/cg/fs2.statPids: fall back directly 10f9a982 libct/cg/fs2/getPidsWithoutController: optimize 6121f8b6 libct/cg/fs2.Stat: always call statCpu 9455395b libct/cg/fs2/memory.Stat: add usage for root cgroup a9c47fe7 libct/cg/fs[2]/getMemoryData[V2]: optimize b99ca25a libct/cg/fs2/memory: fix swap reporting c8e0486f Fix oss-fuzz build Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skope: update to 1.3.xBruce Ashfield2021-06-042-3/+41
| | | | | | | | | Updating skopeo to the 1.3.x series. Along with the version bump, we patch the Makefile to stop using gpgme-config and instead using pkg-config, since OE taints gpgme-config and the build will break if we call it directly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: update to 1.21 releaseBruce Ashfield2021-06-042-6/+6
| | | | | | | | | | | | | | | | | | | | | | We update to the latest 1.21 commits, and we refresh our patch for context changes. eb0faebe Bump google.golang.org/grpc from 1.37.1 to 1.38.0 1d34ea0c Add global handler for Interrupt signal d2c028aa Bump k8s.io/cri-api from 0.21.0 to 0.21.1 cac74d4f Bump k8s.io/apimachinery from 0.21.0 to 0.21.1 0e4c365c Bump k8s.io/api from 0.21.0 to 0.21.1 4b956efa Bump k8s.io/kubectl from 0.21.0 to 0.21.1 b3bc7d45 Update golangci-lint to v1.40.1 and fix lints a72896da Bump google.golang.org/grpc from 1.37.0 to 1.37.1 09df93a2 Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 8a28583f Clone cri-dockerd from permanent repo 29c6b21e Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 50a297dc Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2 15eee85f Mention deb/rpm packages hosted on OBS in README 6ead47bd Trim build paths for binaries Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.22 releaseBruce Ashfield2021-06-041-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: update to 1.5.2Bruce Ashfield2021-06-042-4/+47
| | | | | | | | | | | | | | | | | Updating to the released 1.5.x containerd. We also add a patch to fix the following: Since our oe-core go infrastructure insists on both -pie and static builds (for the most part), and that is not recommended by many packages, we end up with errors like: cannot find package runtime/cgo (using -importcfg) ... recipe-sysroot-native/usr/lib/aarch64-poky-linux/go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: upate to latest 20.10.xBruce Ashfield2021-06-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | docker: 41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux 56541eca9a [20.10] update containerd binary to v1.4.6 fb179ff098 update runc binary to v1.0.0-rc95 4c801fdb7d integration: remove KernelMemory tests 6174e3cf22 Update runc binary to v1.0.0-rc94 afbb1277a3 Swarm config: use absolute paths for mount destination strings 94c1890d39 builder-next: relax second cache key requirements for schema1 01f734cb4f [20.10] update containerd binary to v1.4.5 21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init` 12b03bcb27 Error string match: do not match command path 8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which` 9ca66776fa bump up rootlesskit to v0.14.2 08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build 404ede5737 Bump hcsshim for error details fix cli: f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 78fcd905c docs: Fix broken jump link 12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 00755d7db printServerWarningsLegacy: silence "No kernel memory limit support" 8264f5be8 docs: dockerd: fix broken link and markdown touch-ups 4fbdf3f36 docs: document log-opts for "dual logging" cache 1ff45aac4 Update stop.md ed71df1b9 docs: cleanup / refactor cli doc ee20fa1ec docs: add reference for "docker config" commands ffe40dc6b docs: update some examples for proxy configuration fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated 3de2cc6ef docs/reference/builder: update "syntax" section 234036d10 docs/reference/builder: update example output, and some rephrasing 0c442dc17 docs/reference/builder: remove outdated example Dockerfiles 6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes network: 56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be 7b9c2905 fix port forwarding with ipv6.disable=1 c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to latest 20.10Bruce Ashfield2021-06-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the lastest moby commits, which comprise the following commits: moby: 41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux 56541eca9a [20.10] update containerd binary to v1.4.6 fb179ff098 update runc binary to v1.0.0-rc95 4c801fdb7d integration: remove KernelMemory tests 6174e3cf22 Update runc binary to v1.0.0-rc94 afbb1277a3 Swarm config: use absolute paths for mount destination strings 94c1890d39 builder-next: relax second cache key requirements for schema1 01f734cb4f [20.10] update containerd binary to v1.4.5 21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init` 12b03bcb27 Error string match: do not match command path 9ca66776fa bump up rootlesskit to v0.14.2 404ede5737 Bump hcsshim for error details fix cli: f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 78fcd905c docs: Fix broken jump link 12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 00755d7db printServerWarningsLegacy: silence "No kernel memory limit support" 8264f5be8 docs: dockerd: fix broken link and markdown touch-ups 4fbdf3f36 docs: document log-opts for "dual logging" cache 1ff45aac4 Update stop.md ed71df1b9 docs: cleanup / refactor cli doc ee20fa1ec docs: add reference for "docker config" commands ffe40dc6b docs: update some examples for proxy configuration fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated 3de2cc6ef docs/reference/builder: update "syntax" section 234036d10 docs/reference/builder: update example output, and some rephrasing 0c442dc17 docs/reference/builder: remove outdated example Dockerfiles 6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes network: 56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be 7b9c2905 fix port forwarding with ipv6.disable=1 c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: bump to v1.22-alphaBruce Ashfield2021-06-041-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to v1.21.xBruce Ashfield2021-06-041-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: bump to 3.2-rcXBruce Ashfield2021-06-041-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: switch branch to mainBruce Ashfield2021-05-191-1/+1
| | | | | | | crun has renamed master -> main, so we adjust our fetching to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* sloci-image: allow target and nativesdk variantsBruce Ashfield2021-05-181-2/+2
| | | | | | | | | | | | | | We now have use cases for sloci that can run on the target itself, or have it used in a nativesdk scenario. To avoid the awkwardly named "nativesdk-sloci-image-native" or .inc files, we rename the recipe sloci-image_git and use BBCLASSEXTEND for native/nativesdk support This is similar to the change sent by: Hongxu Jia <hongxu.jia@windriver.com>, but is updated to the current sloci-image recipe contents. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "runc-opencontainers: use bfd even with ld-is-gold"Martin Jansa2021-05-131-7/+0
| | | | | | | | | | This reverts commit dda5ae36b44c61e61439341ea3153e6be5cb015e. binutils gold linker was fixed with: https://git.openembedded.org/openembedded-core/commit/?id=d07d4d739ae17787017f771dd2068fda0e836722 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: update to 2.7.x latestBruce Ashfield2021-05-111-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: create -native do_compile and make it staticBruce Ashfield2021-05-071-15/+45
| | | | | | | | | | | We need to use different build architecture and flags for the native variant, so add a specific do_compile for it. The settings are taken from the kubernetes recipes native go build. We also switch to the umoci.static for -native, since patchelf is breaking our executable if we leave it dynamic. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: use bfd even with ld-is-goldMartin Jansa2021-05-061-0/+7
| | | | | | | | | | | | | | * just a work around for internal error in binutils-2.36 gold: http://errors.yoctoproject.org/Errors/Details/580099/ CGO_ENABLED=1 x86_64-oe-linux-go build -trimpath -tags "seccomp seccomp netgo osusergo" -ldflags "-w -extldflags -static -X main.gitCommit="fce58ab2d5c488bc573d02712db476a6daa9a60c-dirty" -X main.version=1.0.0-rc93+dev " -o runc . TOPDIR/tmp-glibc/work/core2-64-oe-linux/runc-opencontainers/1.0.0-rc93+gitAUTOINC+fce58ab2d5-r0/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/11.0.1/ld: internal error in format_file_lineno, at ../../gold/dwarf_reader.cc:2278 collect2: error: ld returned 1 exit status * it fails like this only together with gcc-11, with gcc-10.3 it builds fine even with gold Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: add -native variantBruce Ashfield2021-05-061-2/+4
| | | | | | | | | | | | In preparation for using umoci along side of sloci as to construct multi later oci images, we need a -native variant. For now, we don't need skopeo on the host side, so we clear it from the class-native RDEPENDS. Skopeo has significant dependencies, so we'd rather avoid ever needing it as a -native tool. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: update to 0.4.7Bruce Ashfield2021-05-061-5/+5
| | | | | | | Updating to the latest 0.4.7 release and updating the build and fetch directories to the opencontainers github. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: introduce umoci recipe for image buildingBruce Ashfield2021-05-061-0/+48
| | | | | | Importing umoci from meta-overc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: add CVE_PRODUCT to recipesRalph Siemsen2021-04-292-0/+4
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: add CVE_PRODUCT to recipeRalph Siemsen2021-04-291-0/+2
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add CVE_PRODUCT to recipesRalph Siemsen2021-04-293-0/+5
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.5-rc -latestBruce Ashfield2021-04-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding the following commits into our containerd build: 3187b6dc8 tests: Adds consumed memory stats test 969ec8949 Specify seccomp target arch for CC c19b7b64d RELEASES.md: recommend alternatives for deprecated features 8a62aa1c3 Deprecate built-in aufs snapshotter 4e7915f80 CI: allow Go 1.13 for Docker/Moby compatibility 8e589e873 Vagrantfile: update to Fedora 34 5847340a7 tests: Refactors container image usage 9f43eade6 Prepare v1.5.0-rc.3 release notes 4c7b960cb prow needs some additional setup for docker buildx 2e4c1d4b7 Use the multi-arch version of the test images 4e00c4b65 integration tests needs lsof 177273680 Add script to build test images 1b5d59dfe Add multi-arch support for test images 78e529727 add integration tests 2b0e6cdd4 Separate jobs for build and test for openlab/arm64 cdd075853 Release artifacts for Linux ARM64 efcb18742 Add unit tests for PID NamespaceMode_TARGET validation b48f27df6 Support PID NamespaceMode_TARGET 909660ea9 process: use the unbuffered channel as the done signal 0f332dadd Update cgroups for regenerated protos 391b123a5 adds quiet option for ref ab1654d0e Fix PushHandler cannot push image that contains duplicated blobs 00f8d32ef add not found debug out for check cmd; update usage 55734b1c5 Prepare 1.5.0-rc.2 release notes 3ef337ae3 Update containerd vendors to tags fbe1e140f Update Go to 1.16.3 c1d1edbad gha: use sudo -E in some places to prevent dropping env-vars 7966a6652 Cleanup code 5d79d3adb go.mod: update kubernetes to v1.20.6 1c03c377e go.mod: github.com/containerd/fifo v1.0.0 12a2a2108 go.mod: github.com/google/uuid v1.2.0 3292ea586 pkg/seccomp: use sync.Once to speed up IsEnabled 00b5c99b1 pkg/seccomp: simplify IsEnabled, update doc 6dd29c25f go.mod: github.com/containerd/aufs 330a2a809 go.mod: github.com/containerd/zfs 34780d67a runtime/shim: check the namespace flag first c3dde8c4b freebsd: add zfs to the default plugins b431fe4fc freebsd: don't run shim delete in deleted dir 1f4192daf freebsd: exclude v1 runtimes cb1580937 metadata: improve deleting a non-empty namespace's error message 5bf84034d Remove junit test result processor b83d04f91 Add variable names to runtime's interface definitions 993b86399 Add shim start opts 8a4cbabc6 Reimport windows layers when comitting snapshots af1e2af72 ci: upload junit formatted test results Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: introduce -clie packageBruce Ashfield2021-04-291-0/+18
| | | | | | | | | | | | | | By the docker-packaging repository and https://docs.docker.com/engine/install/centos/#installation-methods docker is packaged by most distros with a split between the engine and the CLI. We do the same here, by introducing the -cli package But to keep existing use cases working, we also create a RDEPENDS between the main docker package (the engine) and the cli, so existing "docker" package installs will continue to work the same way. To have separate and non-redepending packages created set the DOCKER_UNIFIED_PACKAGE variable to False Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: unify common parts of docker-ce and docker-moby recipesBruce Ashfield2021-04-2911-349/+95
| | | | | | | | | | | | | | | | | Now that docker-ce is being built from the same repos as docker-moby, the only unique things in the recipes are the SRCREVs. We move the common packaging, compile/install routines and configuration to the .inc files. We also move the patches to the generic 'files' directory, so they can be shared. If we there are SRCREV bumps in the future that diverge moby and docker, we'll hold patches in their named directorys and tweak the compile/install routines as necessary. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby; add _git suffix to recipeBruce Ashfield2021-04-291-0/+0
| | | | | | | | | | For whatever reason, the -ce recipe has _git and the moby variant doesn't. When in reality, the _git is more significant for moby than for -ce. Renaming the recipe to normalize the recipe naming. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.6Bruce Ashfield2021-04-293-23/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating docker-ce to 20.10.6, we also restructure the recipe to build as mentioned in: https://github.com/docker/docker-ce This now makes the docker-ce recipe virtually identical to the moby variant, with only SRCREV differences being signficant. The docker-ce recipe will build the tags as identified by the docker-packaging repository. We keep this as a separate recipe for this update, so we can backport the 20.10.6 change to older branches (for CVEs, etc), but the moby and docker-ce recipes will (re)unify in following updates. root@qemux86-64:~# docker --version Docker version 20.10.6-ce, build 370c28948e root@qemux86-64:~# docker pull alpine Using default tag: latest latest: Pulling from library/alpine 540db60ca938: Pull complete Digest: sha256:69e70a79f2d41ab5d637de98c1e0b055206ba40a8145e7bddb55ccc04e13cf8f Status: Downloaded newer image for alpine:latest docker.io/library/alpine:latest root@qemux86-64:~# docker run -it alpine /bin/sh [ 4099.428945] docker0: port 1(veth33cc29a) entered blocking state [ 4099.430548] docker0: port 1(veth33cc29a) entered disabled state [ 4099.434641] device veth33cc29a entered promiscuous mode [ 4100.219415] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 4100.739037] eth0: renamed from vethe948f63 [ 4100.746450] IPv6: ADDRCONF(NETDEV_CHANGE): veth33cc29a: link becomes ready [ 4100.748508] docker0: port 1(veth33cc29a) entered blocking state [ 4100.750150] docker0: port 1(veth33cc29a) entered forwarding state [ 4100.754370] IPv6: ADDRCONF(NETDEV_CHANGE): docker0: link becomes ready / # cat /etc/issue Welcome to Alpine Linux 3.13 Kernel \r on an \m (\l) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: bump to 20.10-latestBruce Ashfield2021-04-281-1/+1
| | | | | | | | | Grabbing the following (minor) commits: 8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which` 08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: bump to 20.10-latestBruce Ashfield2021-04-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Bumping the SRCREV to pick up the following commits: 3b8193b399 Upgrade Docker Scan plugin to v0.8.0 9303aa4b6b Add John Howard to our alumni ba87f9abb5 dockerd-rootless.sh: use `command -v` instead of `which` efe9ca44fe Prepare tests for Windows containerd support ed269a15ff vendor: github.com/docker/swarmkit 5a5494a9a7b408b790533a5e4e1cb43ca1c32aad 62761e5710 vendor: github.com/coreos/etcd v3.3.25 07de8d8bea vendor: github.com/containerd/containerd 19ee068f93c91f7b9b2a858457f1af2cabc7bc06 2ee09a228a vendor: github.com/gogo/protobuf v1.3.2 ce1125b768 Remove needless check 5c7fa82d85 Remove lowenna (aka jhowardmsft) from maintainters 0d83bab69a bump up rootlesskit to v0.14.2 fc17485819 Dockerfile: update yamllint to v1.26.1 to fix build 03ac69b517 Error string match: do not match command path d1b9bc135d Update contrib/nuke-graph-directory.sh b39a1ca16b Fixes subvol delete on a non-btrfs volume 618c440ae3 Bump hcsshim to get some fixes. a0fa96c25b Update stop.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* packages: drop libseccomp checks / package blacklistBruce Ashfield2021-04-261-2/+0
| | | | | | | | libseccomp has moved to oe-core, so we can drop our checks and blacklisting of packages if meta-security is not in the layer configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: use REQUIRED_DISTRO_FEATURES to indicate systemd dependencyBruce Ashfield2021-04-261-1/+3
| | | | | | | crun has a hard dependency on systemd, we need to add it to the recipe to avoid failing package QA checks. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add upstream-status to patchBruce Ashfield2021-04-181-0/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Added kernel modules for iptables errorNathan Dunne2021-04-181-1/+1
| | | | | | | | | Added kernel modules kernel-module-xt-masquerade and kernel-module-xt-comment to RRECOMMENDS, to avoid iptables errors with podman Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc-recipe: Fix compilation without seccomp when libseccomp is installedRameshkrishnanX Geddy Sekar2021-04-183-0/+97
| | | | | | | Original URL: https://github.com/lxc/lxc/pull/3623 Signed-off-by: RameshkrishnanX Geddy Sekar <rameshkrishnanx.geddy.sekar@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: update to 3.14Bruce Ashfield2021-04-163-194/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to 3.14+. We drop a two patches that are no longer needed, and pickup the following commits: e49ce513c net: allow restoring of precreated veth devices 901ea2b56 scripts/build: drop obsolete ENV1 variable b98bbda8e images: re-license as Expat license (so-called MIT) 38a9cbe7a ci: enable crit tests in CI 7accc4454 test: fix crit test and extend it e65a56a1e lib: also handle extra pipe data correctly 35a4761ab lib: print nice error if crit gets wrong input f9616e917 lib: correctly handle stdin/stdout (Python 3) 840dc0b4d criu: Replace faccessat with fstatat when using AT_SYMLINK_NOFOLLOW flag 9edf53128 criu: Throw error when parent path is provided but invalid 480605824 cr-service: fix CRIU_REQ_TYPE__FEATURE_CHECK RPC request 49b9cff74 lib: fix crit-recode fix for Python 2 ca032081e ci: move CentOS 8 based test to Cirrus 9b0d75279 Use a real VM instead of a privileged container d334ba38d pstree: don't change sid/gid-s if current sid/gid is the same c8beca655 lib: correctly handle padding of dump images 02b0e850d lib: fromstring() and tostring() are deprecated d49ace9d3 criu-ns: Merge comparisons with 'in' 66f5ab439 criu-ns: Add unsupported msg for restore-sibling 719c5b07e criu-ns: Handle restore-detached option 6055d0be7 criu-ns: Pass arguments to run_criu() b31d3ad92 criu-ns: Close namespace fd before raise 44a1d321b criu-ns: Extract set namespace functions ab9418d96 criu-ns: Remove unused _umount b790ce21e criu-ns: Use documentation strings 097834dad criu-ns: Extract wait for process into a function c7d76082c criu-ns: Extract mount new /proc into a function a6659c3a7 criu-ns: Remove space before/after bracket 42df84994 criu-ns: Convert indentation to spaces 628ff18fc ci: run zdtm/transition/pid_reuse with pre-dumps in ci tests b7d2c2a26 ci: remove ccache setup 9f2a69691 ci: run recode tests on more input files 8017b6a8e lib: fix recode errors seen in Jenkins cdfca8694 ci: remove '-Wl,-z,now' workaround ca2d27378 lib/cli.py: Open out file as a binary fddf3a732 docker-test: set log file path 19be9ced9 docker-test: use containerd v1.5.0-beta.0 b51fb87a4 ci: move Travis CI Docker tests to GitHub Actions 77968d43c pstree: check for pid collision before switching to new sid/gid 1c1949ab5 test: move vt test to minor 65 on s390x 447b3cf61 zdtm/fpu03: Add .desc file to omit running on !x86 6569412bb Revert "compel: add -ffreestanding to force gcc not to use builtin memcpy, memset" fc1fefd6e s390: Purge stale comment 24f57c68d fault-injection: Run fpu corruption tests e07e5eee3 compel: Provide compel_set_task_ext_regs() e9b1e0b74 compel: Store extended registers set in the thread context 8394062e4 zdtm/fpu03: Add a test to check fpu C/R in a thread 6e1cd5b6a zdtm/fpu00: Simplify ifdeffery 2fdc09499 x86/compel/fault-inject: Add a fault-injection for corrupting extended regset e4e58a8f3 namespaces: properly handle errors of snprintf 84be3047a x86: Use PTRACE_GET_THREAD_AREA instead of sys_get_thread_area() f8cf0715e ci/compat: Check if tests are 32-bit ELFs e0d4aef35 github/stale: separate labels with commas without following spaces 168668ec7 ci: fix Fedora rawhide CI failures ab395e423 plugin: check for plugin path truncation 3397ac0a7 sk-unix: check whether a socket name is NULL before printing it 950a88c74 bug: add __builtin_unreachable in BUG_ON_HANDLER 42171caba test: fix test compilation on rawhide 6110236b6 zdtm: Add javaTests output to .gitignore 7a8f426f1 test: Reduce verbosity of mvn output 89aa87484 javaTests: Add --file-locks option 2692215a5 file-lock: Add space in error message a277c8493 ci: use runc instead of crun for podman tests 42c211285 seccomp: initialize seccomp_mode in all cases 1b5dbe567 zdtm: add second fifo_upon_unix test 903b903d2 zdtm: add fifo upon unix socket test case 82f203308 sk-unix: rework unix_resolve_name a4c000e30 sk-unix: make criu respect existing files while restoring ghost unix socket fd 8d92d4694 files-reg: rework strip_deleted 9546f3919 files: Don't forget on stripping deleted postfix on linked files 042560a2f ci: move coverage run to github 3fb8cd3a4 test/zdtm: check that locks are not dumped if --file-locks isn't set 7a64074c0 dump: dump has to fail if there is locks and --file-locks isn't set 81c3c9748 ci: move compat tests to Github Actions 4c3f3245e README.md: remove unused badges; add a few new badges 10cb8521d README.md: remove trailing whitespaces 5792612d3 ci: move asan and image streamer test to github 2cb1156e6 vdso: fix segmentation fault caused by char pointer array b62707bc1 Tell podman to use vfs as storage-driver 41efd592e ci: move Fedora Rawhide based tests away from Travis 442dc6515 ci: factor out Fedora Rawhide CI setup 8c89fbde3 ci: skip bpf tests on vagrant 9ec1f1a7b ci: upgrade vagrant and Fedora version d4b0f0f94 ci: fix syntax error in stale.yml 098d4cc72 zdtm: handle a case when a test vma is merged with another one 7d63ceaec util: zero the events pointer to avoid its double free 90f043dea namespaces: handle errors of snprintf 76f9ccc70 ci: also use clang for compel-host-bin 7766f12e9 ci: run aarch64 compile tests on Drone af1103ff2 zdtm: cleanup thread-bomb test error handling and printing 9807413c3 ci: move vagrant test to cirrus ci 11b3a1a75 workflows/stale: Don't close issue that has labels 'new feature' or 'enhancement' 2cf09cc4e fsnotify: rework redundant code d3b1d6e0c mount: adjust log level for mnt_is_dir 504c032af mount: adjust log level for get_clean_mnt 41b486790 dump: at exit do not call timing_stop if stats are not initialized 3dc47b22d coverity: get_service_fd() is passed to a parameter that cannot be negative 8112e7657 restore: warning: Value stored to 'ret' is never read 56853fb53 memfd: use PROC_SELF instead of getpid in __open_proc 3f047f13a util: move open_proc_self_fd to service_fd 4178beaa5 servicefd: don't move service fds in case they remain in the same place 0e7321c2f compel/test: Fix warn_unused_result cf0337c80 compel: Fix missing loff_t in Alpine 1b3274a90 ci: Enable compel testing 988b40230 compel/test: Add main makefile 61db62a87 compel/test: Resolve missing includes f5a408cdd dump/ppc64,arm,mips: sanitize the ERESTART_RESTARTBLOCK -> EINTR transition b4be97de9 github: auto-close stale issues and pull requests 43023fe75 zdtm: look up iptables in /sbin and /usr/sbin cb9c85fb6 test/zdtm_ct: Run zdtm.py in the host time namespace 5351b6efe ci: Alpine's busybox based free does not understand -h 72fc2e8e4 namespaces: don't set rst on error in switch_ns_by_fd cf8c88df6 ci: move alpine based tests to github actions 944bd0b6e ci: give an overview of the current CI environment 52bbac5a9 ci: add Circle CI definition ac9843b08 CONTRIBUTING.md: add component prefix to the subject example e403226ce .gitignore: Remove qemu-user-static bde4e8565 scripts/Docerfile.centos8: Use 'powertools' repo name e0da8b895 x86/asm: fix compile error in bitops.h a9d08735f others/ns_ext: restore a process out of PID namespaces into the host PID namespace 660e12843 cr-restore: setup external pidns only for root task c72901dcb namespaces: make root_ns_mask more consistent 5db1657ab cr-restore: make CLONE_NEWPID flag in clone_flags more consistent b27c7e9c8 compel/handle-elf: override unexpected precalculated addresses 55a8b099d docs: fix simple typo, clietn -> client 9cc1f051e vim: remove wrong 8-space tabs indent from python files 82f6518db zdtm: on fail with no error also print the tail of the log bc94f35a0 uffd: check for exited task when reading uffd_msg 87d007bcd uffd: cleanup read error handling in handle_uffd_event a667d5778 cr-restore: Properly inspect status in sigchld_process() a813f8676 ci: remove special handling for mips 430e464c7 CI: remove centos7 from Travis 3cf87ed48 ci: use graviton2 for arm64 tests on Travis 42a86db74 tls: Add logging within send/recv callbacks 0ecec9966 compel/log: Provide %u specifier parsing 56d3eab1c compel/log: Stop parsing at unknown format specifier 403741feb vdso: Let zero-terminator in vdso_symbol_length ab288c35c uffd: handle xrealloc() failure 7e1f22b78 uffd: fix 'double free detected in tcache 2' ffac3d649 ci: add CentOS 8 based CI run 407404297 ci: switch centos7 to github actions 369e17b29 travis: rename centos test to centos7 68585dec9 criu-ns: Remove unreachable statement 953e87c7b ci: fix lazy-pages test selection 8722bf012 ci: 'fix' lazy tests 50878f4f7 CI: distribute CI jobs between CI systems 0e47308d0 CI: rename 'travis' to 'ci' 2d290eeb0 namespaces: fix 'Declaring variable "path" without initializer' cec432500 coverity: img_raw_fd() returns a negative number 84df563c5 sk-unix: ignore coverity chroot() warning ef4ec3261 cr-dump: get_service_fd() is passed to a parameter that cannot be negative d95c2683b util: fix double_close false positive 5527329ba dump: Potential leak of memory pointed to by 'si' fc20d280c coverity: fix parameter_hidden: declaration hides parameter 73ed071e0 restore: Value stored to 'ret' is never read 53501e5e8 cr-dump: Potential leak of memory pointed to by 'si' 36f9700b1 vdso-compat: let coverity know that the function does not return 62ab67ed5 coverity: ignore CHECKED_RETURN 42e3e2e84 autofs: Potential leak of memory pointed to by 'token' 84ffb965c sk-unix: do not overwrite function parameter eb741528f Use 'is None' instead of '== None' 407d3fe0f bfd: remove unused line bbca79ab6 coredump: remove two unused variables 6a9bff88b lib/py: remove unused variable e13a7ecd2 infect: initialize struct to avoid CLANG_WARNING b80dd7e7c lock: disable clang_analyzer for the LOCK_BUG_ON() macro 2ec05a056 compel: don't mmap parasite as RWX 53dd29e93 cr-restore: Wait child & reap zombies if PID=1 265569a40 criu-ns: Use PID 1 on restore e18017285 flog: Missing varargs init or cleanup (VARARGS) 532944695 Add flog to CRIU bfb051a51 criu-ns: Convert c_char_p strings to bytes object 3f7189729 criu-ns: Print usage info when no args provided 226efaac9 criu-ns: Convert to python3 style print() syntax ca5c93d38 python: Replace xrange with range 1609a345a crns.py: New attempt to have --unshare option f68da4a86 criu: Version 3.15 5a655e890 travis: install gzip and redhat-rpm-config for Fedora Rawhide based tests 1062cc4fe x86/asm: update test_bit() and test_and_set_bit() c7726b7f3 zdtm: add alternative socket filter 5c4cc46fd sockets: fix incorrect malloc size 749eb33a9 compel: Calculate sh_addr if not provided by linker 867dd27c9 util: Improper use of negative value (NEGATIVE_RETURNS) 16aea4a7c mount: Explicit null dereferenced (FORWARD_NULL) 5f0674075 util: Improper use of negative value (NEGATIVE_RETURNS) ca7a832b5 page-xfer: Argument cannot be negative (NEGATIVE_RETURNS) f0e48be48 sk-netlink: Argument cannot be negative (NEGATIVE_RETURNS) 4e4227871 kerndat: Argument cannot be negative (NEGATIVE_RETURNS) 50dbcadf0 net: Argument cannot be negative (NEGATIVE_RETURNS) 4a77e0456 net: Argument cannot be negative (NEGATIVE_RETURNS) 5631e9dca action-scripts: Improper use of negative value (NEGATIVE_RETURNS) 0f4b053c1 cr-dump: Resource leak (RESOURCE_LEAK) 7e4f50e74 irmap: Double close (USE_AFTER_FREE) 2ed16451b proc_parse: Copy into fixed size buffer (STRING_OVERFLOW) 864564823 autofs: Resource leak (RESOURCE_LEAK) 90369437f cgroup-props: Resource leak (RESOURCE_LEAK) 2a4c4bf2f filesystem: Double close (USE_AFTER_FREE) 38246bf55 uffd: Resource leak (RESOURCE_LEAK) 03d66390b mount: Resource leak (RESOURCE_LEAK) c1ab1a19e pagemap: Logically dead code (DEADCODE) 4e7e26b70 files-reg: Resource leak (RESOURCE_LEAK) da5a4d6e5 cgroup: Resource leak (RESOURCE_LEAK) af569ac01 pagemap: Argument cannot be negative (NEGATIVE_RETURNS) 19365c1e6 cgroup: Resource leak (RESOURCE_LEAK) b89303433 img-streamer: Double close (USE_AFTER_FREE) 59010ad6d net: Argument cannot be negative (NEGATIVE_RETURNS) 82cd3bb0d zdtm: update and refactor tests for BPF array and hash maps 8301c7e01 criu: adding support for BPF map name, ifindex and freeze 02f7e3434 images: adding support for BPF map file name and ifindex 97ab725db zdtm: adding BPF helper functions as a new library f7bd70573 servicefd: close temporary fd on error path 3ef2c1ff8 criu: check matching the tcp-close option on restore only 9acca8df9 tcp: add a separate test for listen sockets 9ba9d6706 tcp: dump shutdown state for unconnected sockets fd7b6e73d CI: run cross compile on all branches 32b162831 CI: add Travis test script to 'lint' 025ef090d CI: switch to loop based apt-get 0def9bc1f tests: only run 'make lint' once in CI 84215e035 scripts: run shellcheck on the scripts folder e2101abf2 crtools: Fix --help output line width 4a80dfab8 doc: update documentations for the tcp-close option e42f5e032 tcp: allow to specify --tcp-close on dump 4f7c48041 test/zdtm: write in a tcp socket has to fail if tcp-close was set 5b5f4b717 socket/tcp: shutdown tcp sockets if the tcp-close option is set 3957d9533 Switch to python 3 variants of dependencies on debian-based builds a6214c360 mips64: implement vdso_redirect_calls() 80672c9f3 zdtm: Add test for SO_LINDER 5bb5890cb socket: c/r support for SO_LINGER 0aeddba7c socket: c/r support for SO_OOBINLINE 5c11b0e44 zdtm: check that unbindable mount flag does not affect restore b554eacb5 mount: replace mountpoint to mnt_id in error messages f3b18865f mount: delay setting unbindable flag where possible dbf798811 sk-netlink: Handle case of in-use netlink peer ids c0f365310 images: kindly ask not to use fields with id 18 in unix_sk_entry ed74c9e05 zdtm: add new epoll01 test 0dda60f51 eventpoll: fix toff off calculation dd082fad1 eventpoll: resort toff back by idx 596276a9a travis: use Fedora rawhide images from Fedora df0c793d5 travis: restore lazy-pages tests for uns flavor 1391f84d8 criu: don't use the deprecated security_context_t (SELinux) 20d87bbfa scripts: adding libbpf for Travis tests 372782d8a zdtm: adding tests for BPF maps 14b1cc26d criu: restoring BPF map data 4d073a75e criu: restoring BPF maps (without data) 4b8186cb6 crit: add BPF map data decoding b924394cc criu: dumping BPF map data 5ff0e7058 criu: dumping meta-data about BPF map files b85709797 criu: parse information about BPF maps from procfs aa59dfc6d Set Makefile config variables for libbpf 95b7d06cb criu: define constants for c/r of BPF maps c26cd1395 images: protobuf definitions for BPF map meta-data and data d6735616a travis: add a focal based test run ca360ce30 travis: switch travis to Python 3 8063fbb47 contrib: Add python-future to Debian packages 52eff52e6 github: disable cross-compule for mips on master branch 5b751fbaf criu: the type of a socket inode has to be "unsigned int" a6b00b1a7 actions: create file for daily rebuild 18f42b302 travis: loop over apt-get to recover from errors 3d67e8a0d Makefiles: do not re-generate magic.py every time 9ce4ed093 python: Handle byte strings when converting protobuf to dict 320c88e92 CONTRIBUTING.md: clarify placement of Fixes: tags 83be11f1f lib/c: extend receive to handle incoming FDs 20a24c11e log: Ask developers not to use print_on_level directly ebc0d205a log: Hide vprint_on_level in log.c 478072474 util: Use pr_info in vma printing 1955d4907 ipc: Use pr_info() instead of print_on_level(PR_INFO...) 99fc76d8b proc_parse: Do not feed loglevel into restore_loginuid 8564bc49e check: Use pr_foo macros 7646deed6 vagrant: Update to Fedora 32 cee36af38 criu/files-reg.c: build-id size bug fix aeeaa30a5 criu/files-reg.c: build-id from multiple headers fix 9c0b904a0 compel/infect: Don't adjust stack/args alignment 70ecbbcc8 compel: allocate the GOT table to avoid memory corruption fee517b3d compel: remove x86/prologue.S 8d8dd5a79 compel: x86 parasite_service entry point simplification b8c1d9d93 compel: rewrite parasite cmd and args manipulation from assembly to C 391da7464 compel: stop rounding up the parasite blob size and args region to PAGE_SIZE d99fc1e55 compel: remove "addr_" from offset variable names a531f9a8b compel: pass the parasite_blob_desc to compel_relocs_apply() 8ac0fa6aa compel: add error message for COMMON symbols f92948cca zdtm: make cgroup_yard to be aware of cgroup2 f96cd8c74 tests: skip cgroup04 and cgroup_ifpriomap on pure cgroup2 systems 5f160811a zdtm.py: add the cgroup2 freezer support 98e9165f0 cgroup: Add the initial support for cgroup2 a93df9eb9 pidns: fixup bb555b372 criu/config.c: added cli option for build-id 9191f8728 criu/files-reg.c: add build-id validation functionality 7b18c13c1 images/regfile.proto: adds additional fields to RegFileEntry 8354b526c restore: skip unnecessary setgroups calls 0d8d7f232 tests: criu-image-streamer change dev branch to master branch 62d70bd48 test/zdtm/autofs: use sigaction instead of the deprecated siginterrupt 539183fad Add error logging to config + crtools init 9a4b933f2 Add error logging to kerndat init 3490d997b test: test external namespace support f3ebdeebe pidns: add external pidns to man-page 9dd1ab00e pidns: support external PID namespaces f1e6b1036 pidns: write and read pidns information 4e7ec3c88 pidns: add pidns image file definition 99c848783 zdtm: add zombie_leader test f0438f47f cgroup: make prepare_task_cgroup lookup current cgset in ancestors d38046b00 mount: restore_task_mnt_ns - Lookup for mount namespace conditionally 41b535d31 test: skip vdso test on non-vdso systems ce22e0f37 uffd: uffd_open prints info, caller prints error 6815aa958 CONTRIBUTING.md: add pull request guidelines 35f8c056a CONTRIBUTING.md: add sections about patch description and splitting 2e5805878 CONTRIBUTING.md: minor formatting fixes d0fcb01d4 CONTRIBUTING.md: import "How to submit patches" from criu.org 808684c99 Add CONTRIBUTING.md 6ee4b7238 arch/x86: Fix calculation of xstate_size 1d9438aef criu swrk: fix usage, allow common options cbf099400 Travis: use Vagrant to run VMs d72428b7c Also report clone3() errors correctly 047ecd3a1 test/others/libcriu: test version library calls 55f71b866 lib/c: add criu_get_version() e57e74a18 criu: optimize find_unix_sk_by_ino() 62c03530c swrk: send notification instead of using status fd faf6dbf33 close_service_fd: rename to status_ready e34f5dd3a clang: Branch condition evaluates to a garbage value b4c51ea49 coverity: fix FORWARD_NULL in criu/proc_parse.c: 1481 64347398c coverity: fix RESOURCE_LEAK criu/timens.c: 67 f33410252 libcriu: Add space between 'if' and parenthesis 4ac9a3c90 libcriu: Use spaces around '=' ae4fd07ca libcriu: Add orphan pts master f6d1b498d cr-service: spell out an error 00a44031e cr-service: fix wording in debug messages 00b8257d9 tests: move cross compilation to github actions 8452be93c travis: use bionic almost everywhere 5bd776da3 Remove dupe of "deprecated stuff on" msg 8364b0940 soccr/test: Fix error logging in libsoccr tcp-test 277b0b69f mips: fix fail when run zdtm test pthread01.c be1394122 mips: impliment arch_shmat() d38851c9b test/jenkins: use bash to run shell scripts 40169b950 style: fix typos b5c34c74c mips:support docker-cross compile afe90627e mips:criu: Enable mips in criu d325b7b77 mips:criu/arch/mips: Add mips parts to criu 158e8f8fe mips:proto: Add mips to protocol buffer files e7d13b368 mips:compel: Enable mips in compel/ ba0d6dbac mips:compel/arch/mips: Add architecture support to compel tool and libraries 8be1d457d net: fix coverity RESOURCE_LEAK eb732bcf0 util: Remove deprecated print_data() routine 8c538ca10 page-read: Warn about async read w/o completion cb 27ab533cb tests: run tests with criu-image-streamer with --stream 7d79a58f4 img-streamer: introduction of criu-image-streamer 51c3f8a90 pipes: loop over splice() when dumping a pipe's data 0708cbd88 remote: Use tmp file buffer when restore ip dump 01cab14df util: Fix addr casting for IPv4/IPv6 in autobind be2ded15e test: fix flake8 errors d23d1fc0f travis: fix alpine builds f2edc1e19 Update certificates for failing tls based tests 95ead1487 criu: Version π 5c5e7695a get_clean_mount: demote an error to a warning c83a0aae2 proc: parse clock symbolic names in /proc/pid/timens_offsets 7dc89376b pstree: improve error handling in read_pstree_image 42b5700b7 kerndat remove duplicate call to kerndat_nsid() 2c2fdd333 parasite-msg: %u is not implemented for parasite code ef7ef9cfa kerndat: remove duplicate call to kerndat_socket_netns() 62088c721 criu: put statement continuation on the same line as the closing bracket d1fa1734e autofs: fix integer overflow in mount options parsing 6b9faabf3 mem: avoid re-opening CR_FD_PAGES when not needed 4d34f84bb img: rellocate a PATH_MAX buffer from the bss section to the stack bb0b4219e img: fix image_name() when image is empty 067a20c81 zdtm: fail if test with the crfail tag passes 698f3a4db zdtm: limit the line length for ps by 160 symbols eab1a3074 timens: restore processes in a new timens to restore clocks 73438d34b test: check that C/R of nested time namespaces fails 0d8c0562f zdtm_ct: run each test in a new time namespace f1655fd54 zdtm: add a new test to check c/r of time namespaces 3fd0fa4bd zdtm: add support for time namespaces ddba4af60 namespace: fail if ns/time_for_children isn't equal to ns/time 4127ef4ab criu: Add support for time namespaces 0e9b42acf MAINTAINERS: Add Pavel (myself) to maintainers e3fb52e37 remove header include statements duplicates 8c36865c8 memfd: split the struct memfd_inode e3a5d0975 memfd: save all memfd inodes in one image 967797a86 Add build directory to gitignore cc362b432 namespaces: fix error handling in dump_user_ns 1ad8657dd config/nftables: include string.h for strlen 5f28b692a test/fifo_loop: change sizes of all fifo-s to fit a test buffer 1ad209b9c test/pipe03: check that pipe size is restored 2b376168e pipe: restore pipe size even if a pipe is empty fa705e418 zdtm: Use safe helper function to initialize unix socket sockaddr structure 691b4a4e7 zdtm: Implemented get_current_dir_name wrapper that checks for 'x' permissions c40c09cbb test/zdtmp: add a test to C/R shared memory file descriptors 10b1d46f6 mem/vma: set VMA_FILE_{PRIVATE,SHARED} if a vma file is borrowed fb65ab2b1 mem: dump shared memory file descriptors f42ae70c7 make: use cflags/ldflags for config.h detection mechanism d0d6f1ad1 mailmap: update my email c3ad4942d travis: add ppc64-cross test on amd64 b9c8e957d crit-recode: skip (not try to parse) nftables raw image 1f74f8d77 travis: Use debian/buster as base for cross build tests 18ac1540c travis: Add aarch64-cross test on amd64 327554ee6 compel: Remove compel.h 62ad2f609 criu: Remove compel.h includes 065ff6f41 zdtm/fifo_loop: don't try to write more than pipe size 73e0ed3b8 zdtm: add a test on open symlink migration 1936608ce files: allow dumping opened symlinks 8b9c1f4c5 zdtm: add a test for files opened with O_PATH f167d1f4e fown: Don't fail on dumping files opened with O_PATH 58fd63042 zdtm/inhfd: force python to read new data from a file fce196d88 memfd: don't corrupt a state of the dumped fd ffe0896ed fs: use __open_proc instead of open("/proc/...", ... ) 4129d3262 cgroup2: add minimal cgroup2 support 10416bcbc seize: support cgroup v2 freezer 9f902e0c6 seize: factor out opening and writing the freezer state 563c5e5e7 seize: prepare for cgroupv2 freezer bb032cc3e criu(8): Convert tabs to spaces 48f3b6516 criu(8): Add documentation for --enable-fs cdd08cdff uffd: use userns_call() to execute ioctl(UFFDIO_API) 38793699e test/jenkins: remove empty line at the end of file 3eab205ba python: sort imports bc49927bb criu: Make use strlcpy() to copy into allocated strings ec1164495 criu: Use strlcpy() instead of strncpy() 2dd105b8d memfd: add tests b133c375a inhfd_test: add support for non-pair files 56d8e2455 memfd: add seals support 29a1a88bc memfd: add memory mapping support b25684e24 memfd: add --inherit-fd support 875ac4d03 files: increase path buffer size in inherited_fd() c1e72aa93 memfd: add file support 5dbc24b20 util: introduce the mount_detached_fs helper e19f4cf3b MAINTAINERS: Add Dima and Adrian to maintainers 42db2c156 MAINTAINERS: add Mike 872b795a5 Maintainers: Suggest the maintainers codex (#932) ff756cbb2 python: sort imports d68a68b8f test/zdtm/inhfd: update dump options one each iteration f5181b276 Travis: fix podman test case 3a4c33c50 zdtm: mntns_rw_ro_rw update error msg 9cb4067e1 vdso: Don't page-align vvar a96a7ed87 vdso: Repair !CONFIG_VDSO 0022c2846 vdso: Add vdso_is_present() helper 99346a282 zdtm: Make test_{doc,author} weak variables 72ff29070 criu: Make use strlcpy() to copy into allocated strings 0f438ceee typo: fix missing space in error message 9bc9366c9 vdso: use correct offsets to remap vdso and vvar mappings f1714ccce test/vdso: check the code path when here is no API to map vDSO 56258da17 criu: fix build failure against gcc-10 23374b779 criu(8): fix for asciidoctor a15426a11 criu(8): some minor rewording 8477875dc doc/Makefile: don't hide xmlto stderr c98af78c5 compel: add -ffreestanding to force gcc not to use builtin memcpy, memset f6de8d4ea travis: fix warning and errors from validation 0e291d26c arm: use clone3() if it exists f991f2350 aarch64: use clone3() if possible 3dabd38a8 clone3: handle clone3() with CLONE_PARENT f6469493d ppc64le: use clone3() if possible 55c8ec62a arm: remove stack pointer from clobber list cbadd201c s390x: use clone3() if possible 4c4f67a56 s390x: remove stack pointer from clobber list a1ea8deb4 Use clone3() with set_tid to create processes 97c03b97d Add assembler wrapper for clone3() ca02c4707 kerndat: detect if system support clone3() with set_tid 8fea2647b travis: reduce the number of podman tests 4232b270b image: core -- Reserve start_time field f1abc9aa2 ppc64le: remove register '1' from clobber list 0c218746d Switch open-j9 alpine tests to python3 1e9ff2aa0 Add Socket-based Java Functional Tests 8b5dea33f travis: switch alpine to python3 75a744238 files: Add FD_CLOEXEC test 8255caf27 files: Remove O_CLOEXEC from file flags 2ac43cd42 python: Improve decoding of file flags 7622b7a70 files: fix ghost file error path acb42456d zdtm: nft tables preservation test e1c487175 net: add nftables c/r 17c4a8b24 style: Enforce kernel style -Wstrict-prototypes 8bb3c17a0 style: Enforce kernel style -Wdeclaration-after-statement 79559bef9 Fix tests on Ubuntu 8b467dd94 zdtm: Add test for SO_KEEPALIVE d4e6fc2a0 socket: c/r support for SO_KEEPALIVE 0980617e2 sockets: Remove duplicate variable assignment 00bb06878 scripts: alpine: Install py2 packages with pip 2e656222d crit: fix python3 encoding issues 4c46cbc4d x86/cpu: cleanup and improve xfeatures_mask check 55f7a571f zdtm: sysctl net.unix.max_dgram_qlen value preservation test ebe3b5235 unix: sysctl -- Preserve max_dgram_qlen value 1d23dc4a3 mount: Order call_helper_process calls 2237666ac restorer/inotify: reorder inotify cleanup after waiting helpers and zombies af7e5f994 readme: github pull-requests is the preferred way to contribute be43c3b84 cgroup: use new mount API to open the cgroup file system 76e4d31a3 net: use new mount API to open the sysfs file system 1a2d8ad7e mount: use new mount API to open the proc file system 4997a096e util: introduce the mount_detached_fs helper b5b1c4ec4 kerndat: check whether the new mount API is supported of not 3ca09b191 travis: ignore fails of podman-test 37220b3c4 Add File-based Java Functional Tests 6ab2bdd94 zdtm/socket-tcp-fin-wait1: Use array index fro TEST_MSG 434e6b92d Documentation: Add a hint about docker build 1dbc83595 travis: Add armv7-cross as cross-compile test bffa6e0ad build/zdtm: Use pkg-config to find includes/libs 3b24574b6 build/zdtm: Makefile hack for travis aarch64/armv8l 70fae1250 build/zdtm: Support cross-build 1463c4111 build: Use SUBARCH df66aa99b build/nmk: Provide proper SUBARCH a4fa4162d build/nmk: Remove SRCARCH 25f6d4f72 build: Remove SRCARCH 60bb5c731 zdtm: Set --root path to 0700 on restore 90cbeadb6 zdtm: Replace if->continue with if->elif->else 9a50fbce7 man: Describe --root option requirements 8ab3e40e3 restore: Create temp proc in /tmp d99ee9753 mount: Bind-mount root via userns_call b50b6ea09 mount: Add error messages 75fcec0ec travis: exclude uns tests for lazy-pages on newer kernels 8f45330d1 travis: group lazy-pages options dc4677123 Checkpoint only specified controllers 1c0716924 compel/criu: Add __must_check 56bc4189e criu: Kill tasks even when the network is unlocked c21c0aea1 compel/infect: Detach but fail compel_resume_task() bd17ee858 parasite-syscall: Log if can't cure on failed infection abe48f8c3 cr-restore: Warn if restorer can't be unmapped 1038a0ae4 cr-dump: Warn if unmapping local memfd failed b5a83623b cr-dump: Try to cure remote on err-pathes 717385657 lib/infect: Check if compel succeed in executing munmap ee449e27c compel: Mark compat argument of __NR() as used c8f16bfac compel/infect: Warn if close() failed on memfd a93117ede lib/ptrace: Be more elaborate about failures ef277068d lib/ptrace: Allow PTRACE_PEEKDATA with errno != 0 ea018e9a9 travis: remove group from .travis.yml fe668075a travis: switch pcp64le and s390x to real hardware eab8cf077 travis: switch all arm related tests to real hardware 075f1beaf Makefile hack for travis aarch64/armv8l 6be414bb2 travis: Do not run privileged containers in LXD 62953d433 travis: fix copy paste error from previous commit 2b4e65336 Run java functional tests on travis f3cca97d8 mount: make mnt_resort_siblings nonrecursive and reuse friendly 35adc0859 mount: rework mount tree build step on restore 7be726026 ns/restore/image: do not read namespace images for non-namespaced case 71dff54aa ns: make rst_new_ns_id static d804f70a6 mount: remove useless check in populate_mnt_ns 9325339e6 travis: Disallow failures on ia32 389bcfef3 test/java: Add FileRead Tests c4006c003 test/static:conntracks: Support nftables a7c625938 travis: start to use aarch64 hardware 3861b334b Fix broken web-links 1a28dee52 Action scripts should be invoked with normal signal behavior 19a24df53 early-log: Print warnings only if the buffer is full 00ce121fd Add `criu` to PATH env variable in libcriu tests 321f82662 Enable libcriu testing in travis jobs f8125b8be Couple of fixes to build and run libcriu tests 477c3a4b0 service: Use space on stack for msg buffer e56401ed3 image-desc: Remove CR_FD_FILE_LOCKS_PID f65b17e97 cgroup: fix cg_yard leak on error path in prepare_cgroup_sfd 5a92f100b page-pipe: Resize up to PIPE_MAX_SIZE 71c2a9dc7 Guard against empty file lock status 3efe44382 image: avoid name conflicts in image files 6b264f591 criu: use atomic_add instead of atomic_sub 7c97cc7eb lib/c: fix a compile time error d30557699 zdtm: handle --pre-dump-mode in the rpc mode befbbd9bb Refactor time accounting macros 98608b90d read mode pre-dump implementation 4c774afc1 Adding cnt_sub for stats manipulation 29b63e9a7 Skip adding PROT_READ to non-PROT_READ mappings e0ea21ad5 Handling iov generation for non-PROT_READ regions 20d4920a8 Adding --pre-dump-mode option 576a99f49 restorer/inotify: Don't overflow PIE stack 578597299 Cleanup do_full_int80() b84f481b5 unix: print inode numbers as unsigned int 3f1c4a17a pipe: print pipe_id as unsigned to generate an external pipe name b47ef26ea cgroup: fixup nits f44939317 zdtm/cgroup_yard: create a test cgroup yard from the post-start hook db40ef5be test/cgroup_yard: always clean up a test cgroup yard 813bfbeb4 Convert pr_msg() error messages to pr_err() a9f974b49 Introduce flush_early_log_to_stderr destructor 8bdc60d50 arch/x86: fpu_state->fpu_state_ia32.xsave hast to be 64-byte aligned 4f24786b3 travis: Install missing diffutils dependency cf0080505 test: implement test for new --cgroup-yard option 2f337652a Add new command line option: --cgroup-yard ad7e82a30 scripts: Drop Fedora 28/rawhide fix 3e9dc1c7f compel/x86: Don't use pushq for a label 0d8e2477e arch/x86: push correct eip on the stack before lretq 8ea953f18 cr-dump: Remove redundant if-statement 3eed47223 files-reg: Drop clear_ghost_files() prototype 08f3b57ab py: Manual fixlets of code formatting Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: bump to 1.2.3 -devBruce Ashfield2021-04-161-2/+2
| | | | | | | | | | | | | Pulling in the small set of commits that move us to the 1.2.3-dev cycle: 5a117bfc Bump c/storage to v1.24.8 and c/image to v5.10.5 for RHEL 8.4 in release-1.2 560a34af Bump to v1.2.3-dev b94b7dc0 Bump to Skopeo v1.2.2 f78bf42c Bump c/common c/image and c/storage to latest b4210c0b Fix gating test in release-1.2 port #1169 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to rc93 latestBruce Ashfield2021-04-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the SRCREV to include the following commits: ef9922c2 libct/cg: don't return OOMKillCount error when rootless 5cdd9022 libct/cg/fs[2]: fix comments about m.rootless 2f1a3ed3 Fix vendored dependencies d15c7bb0 go.mod: github.com/cilium/ebpf v0.5.0 f28a8cc2 ebpf: replace deprecated prog.Attach/prog.Detach 928ef7af libct/nsenter: add json msg escaping 52390d68 Ignore kernel memory settings b7c315ad vendor: bump containerd/console to 1.0.2 b6cdb8ae fix a typo 64bb59f5 nsenter: improve debug logging 6ce2d63a libct/init_linux: retry chdir to fix EPERM c5029c00 tests: fix hello-world tarball name in testdata for arm64 289a3045 go.mod: github.com/moby/sys/mountinfo v0.4.1 4316df8b libcontainer/system: move userns utilities to separate package e7fd383b libcontainer/system: un-export UIDMapInUserNS() 249356a1 libcontainer/system: remove unused GetParentNSeuid() dc52ed25 libcontainer/user: remove outdated MAINTAINERS file 72ecf59c libcontainer/user: fix windows compile error 2515b0c2 libct/user: rm windows code 0596f6e1 libcontainer/devices/device_windows.go: rm b1deba8c libcontainer/configs/config_windows_test.go: rm f1586dbd libcontainer/configs/validate: make Validate() less DRY 4126b807 libcontainer/configs: add missing type for hooknames 48125179 go.mod: github.com/cilium/ebpf v0.4.0 44611630 docs/systemd: add 27bb1bd5 libct/specconv/CreateCgroupConfig: don't set c.Parent default d748280a make release: build/include libseccomp aa6da82c script/release.sh: fix shellcheck warnings 3eb46d89 ci: make static built binary available f0dec0b4 libct/specconv/CreateCgroupConfig: nit 36fe3cc2 tests/int/cpt: fix lazy-pages flakiness 2dd62b3d libct/checkCriuFeatures: rm excessive debug 0e089002 tests/int/checkpoint: close lazy_r fd b09030a5 tests/int/checkpoint: close fds in check_pipes e63df1e6 tests/int: really randomize cgroup/unit names 6e4c5b6e tests/int/cgroups: don't use BUSYBOX_BUNDLE adf733fa vendor: update go-systemd and godbus f09a3e1b tests/int: don't set/use CGROUP_XXX variables 4ecff8d9 start: don't kill runc init too early b1184302 libct/configs/validator: add some cgroup support 79a8647b libct/int: add TestFdLeaks b3be2b0b libct: close execFifo after start 08b52797 Make test specific to disassembleFilter function 7b3e0bcf Ensure the scratch pipe is read during ExportBPF 62f1f0e4 tests/int/checkpoint: check all logs for errors 346cb359 Revert "tests/checkpoint: show full log lazy pages cpt" c9b3787b script/check-config.sh: add SELinux and AppArmor 5fb831a0 capabilities: WARN, not ERROR, for unknown / unavailable capabilities e49d5da2 go.mod: OCI runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 2726146b runc --debug: more tests 201d60c5 runc run/start/exec: fix init log forwarding race c06f999b libct/logs/test: refactor 688ea99e runc init: fix double call to ConfigureLogs dd6c8d76 main: cast Chmod argument to os.FileMode 69ec21a1 libct/logs.ForwardLogs: use bufio.Scanner 0300299a tests/int/debug.bats: fixups d38d1f9f libcontainer/logs: use int for Config.LogPipeFd ac93746c libct/seccomp: rm IsEnabled 9b2f1e6f runc version: don't use seccomp.IsEnabled d76309f9 script/check-config.sh: add CONFIG_SECCOMP_FILTER 997e8942 capabilities.Caps: use a map for capability-types 41f466d8 nsexec.c: fix formatting for netlink defines 522bd641 Fix checking C code formatting 1948b4ce cloned_binary.c: rm redundant comments b67deb56 nsexec.c: rm a block 513d89ee capabilities: use BOUNDING/AMBIENT instead of their alias dd2caace go.mod: runtime-spec v1.0.3-0.20210316141917-a8c4a9ee0f6b a608b7e7 libcontainer/apparmor: use sync.Once for AppArmor detection d6e89248 Fix build-tags in libcontainer/devices f585cec7 libct/cg/v2: always enable TasksAccounting 8c7ece1e fs2: fallback to setting io.weight if io.bfq.weight 74299a1c CI: cache ~/.vagrant.d/boxes 97f2e351 go.mod, libct: bump go-criu to v5, use google.golang.org/protobuf db025aba libct: criuSwrk: only iterate over CriuOpts if debug is set 051646a3 tests: test nested bind mount restore 705b6cc7 Re-create mountpoints during restore Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to v2.0.27Bruce Ashfield2021-04-161-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to 2.0.27. Also, move to a _git suffix on the recipe. We already had one bump that made the extension and PV be out of sync. Since we track this by git increments, not release or release tarballs, the _git is appropriate. The following changes are part of this update: 3efab3e Add Kubernetes e2e tests as GitHub action 0114f3c move integration to gh actions 186038c run make vendor 31c5a2e add tests running a runtime c53c155 always set container pid file 1955f59 write runtime stderr to journal on error af1f3c4 some small cleanups 6c38b5a Use less resources 355dbf1 conn_sock: fix potential segfault 4587294 ci/gha: bump runc to rc93 92867a7 Add Podman integration test GitHub action 1ec43d9 bump to v2.0.28-dev 65fad4b bump to v2.0.27 dd99302 Add CRI-O integration test GitHub action 911c786 exec: don't fail on EBADFD 3ac015e close_fds: fix close of external fds 1c7e6fb Add arm64 static build binary c3f31c0 bump to v2.0.27-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: update to 1.21Bruce Ashfield2021-04-162-15/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating cri-tools. We refresh a patch, and change the recipe to capture the binary from build/bin versus _output dir. The following commits are part of this bump: e0b90a7f Increase image build timeout 8f0434e8 Add image-test builds to main cloudbuild script b796452d Add windows images to build script e1e9f853 Bump github.com/docker/docker 0cd06f41 Add hostnet-nginx image build to main script 74ccfeaf Bump k8s.io/api from 0.0.0 to 0.21.0 c98b734a Bump k8s.io/kubernetes from 0.0.0 to 0.21.4 109fb62d Bump k8s.io/kubectl from 0.0.0 to 0.21.0 534d9f03 Bump k8s.io/apimachinery from 0.0.0 to 0.21.0 8c5599a6 Bump k8s.io/cri-api from 0.0.0 to 0.21.0 8694106a Bump README versions to v1.21.0 b953f776 Update dependencies ef872c25 Add dependabot config file eaf18dae Simplify test image build process for user images afb5b62c Move from gcr.io/cri-tools to gcr.io/k8s-staging-cri-tools 1b32fe8d Fix UID/GID and username values for test images f749fc76 Bump gcb-docker-gcloud image to v20210331-c732583 916fae03 add docker.io/ prefix to image:busybox in docs/examples/ a0d17c4a Fix CRI-O master installation in GitHub actions 791ddab1 fix StartedAt and FinishedAt of the container status 2d5c2872 Fix CRI-O master installation in GitHub actions 44fd67ce Makefile: avoid rebuilding binaries 14485a8c support mips64le architecture. c8c1ebae Modify hack/release.sh script to include sha256 sum files ec31d9a2 Trigger prow job 3e939cf7 Update CRI-O to v1.20.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.21-latestBruce Ashfield2021-04-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the latest 1.21 release changes, which comprise the following commits: bce3e6c5f Fix tests ec1a512ac Bump to v3.1.1-dev 9f09fb62c Bump to v3.1.0 1386f9046 Fix test failure 38bb77c5b Update release notes for v3.1.0 final release 670e1ac67 [NO TESTS NEEDED] Turn on podman-remote build --isolation ac4bdd265 Fix long option format on docs.podman.io 96ffce219 Fix containers list/prune http api filter behaviour e772719bf [CI:DOCS] Add note to mappings for user/group userns in build 52cd3ce2d Validate passed in timezone from tz option 633ae014e Generate Kubernetes PersistentVolumeClaims from named volumes c9640bab7 libpod/image: unit tests: use a `registries.conf` for aliases 43c772aa2 libpod/image: unit tests: defer cleanup 396a59b02 libpod/image: unit tests: use `require.NoError` a01b387e8 Unification of until filter across list/prune endpoints 183a68a81 Unification of label filter across list/prune endpoints d1589f280 fixup 31351ad94 fix: build endpoint for compat API 7148544df [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot 88672b58c Check if stdin is a term in --interactive --tty mode 23f3805df [NO TESTS NEEDED] Fix rootless volume plugins 5e3445e6e Ensure manually-created volumes have correct ownership 6b6989206 Support multi doc yaml for generate/play kube d560f168f Correct json field name 573ed9220 Fix filters in image http compat/libpod api endpoints 1b349d79a podman generate systemd --new do not duplicate params 1089f83a4 Fix podman build --pull-never be02c8581 man pages: correct seccomp-policy label 62b49e176 [NO TESTS NEEDED] Use same function podman-remote rmi as podman 3d1aaffdb Add problematic volume name to kube play error messages d498022fd Fix list pods filter handling in libpod api 66b1c2bd9 [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS b55730180 Remove resize race condition e7dc66d83 [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 57e0d8f29 Use TMPDIR when commiting images 505f43c08 Add RequiresMountsFor= to systemd generate 15da607d1 Fix swapped dimensions from terminal.GetSize 0127cc184 Revert go-systemd to v2.22.0 4f11517c0 Cirrus: Update configuration for v3.1 branch 834f4caaa Bump to v3.1.0-dev 1b56ea2d9 Bump to v3.1.0-rc2 1ae87ff46 Update release notes for v3.1.0-RC2 3b609a706 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.3.0 1dfbdd5d9 Fix system prune cmd user message with options afce37671 System tests: reenable a bunch of skipped tests 417f36281 Cleanup /libpod/images/load handler adf652e2a vendor: drop replace for github.com/syndtr/gocapability e85cf8f4a security: use the bounding caps with --privileged f46b34ecd Bump github.com/containers/common from 0.35.0 to 0.35.3 5a18b5eb7 Bump k8s.io/apimachinery from 0.20.4 to 0.20.5 aa2d6e6e6 Fix volumes and networks list/prune filters in http api ec1651fbf Bump github.com/containers/storage from 1.25.0 to 1.28.0 1ca74b00d add a dependabot config to automate vendoring a596d1f5d Bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2 8ea02d0b6 network prune filters for http compat and libpod api 8da5fd820 test: check for io.stat existence on cgroup v2 592aae4f9 test: fix test for last crun/runc 1c873c7da test: simplify cgroup path af3499db5 Latest crun/runc should handle blkio-weight test 82858a97c fix user message image prune --all 3d01d42f2 Docs: removing secrets is safe for in-use secrets 21f229a3d Downgrade github.com/coreos/go-systemd/v22 e8918ff10 pkg/bindings/images.Build(): fix a race condition in error reporting 310eae4ba Switch all builds to pull-never 963d19c75 System test cleanup f4b2d597a Fix for volumes prune in http compat api 8de560703 Fix remote client timezone test 57e8c6632 Do not leak libpod package into the remote client 762148deb Split libpod/network package 955aaccc5 fix use with localhost (testing) 9251b6c8c add /auth for docker compatibility 3803d0a4a create endpoint for querying libpod networks 12fb9e465 Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 660a72993 sdnotify tests: try real hard to kill socat processes 7b0155cf7 Fix array instead of one elem network http api 92a8d69a7 Delete all containers and pods between tests 258749e43 apiv2 tests: finally fix POST as originally intended c9ef26071 Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables f1eb8e816 Removing a non existing container API should return 404 dc0c72a48 Docs: Add docs to access APIs inside container 6d4899745 options: append CLI graph driver options 930bec4d3 podman load: fix error handling 1f2f7e745 podman cp: evaluate symlink correctly when copying from container 2033fa4c7 rm pkg/api/handlers/libpod/copy.go 31b11b5cd podman cp: fix copying to a non-existent dir a61d70cf8 podman cp: fix ownership 2abfef380 podman cp: ignore EPERMs in rootless mode d175fbfdb vendor buildah@v1.19.8 e33f52390 apiv2 tests: add helpers to start/stop a local registry e926b5d73 Bump to v3.1.0-dev aa9616cd4 Bump to v3.1.0-rc1 e9db60492 allow the removal of storage images 9eac4a7f7 podman-remote build does not support volumes d1878cc67 Compat API: Avoid trying to create volumes if they already exist 7e289833e Bump github.com/onsi/gomega from 1.10.5 to 1.11.0 0e36e65ea Allow users to generate a kubernetes yaml off non running containers 80390dd18 Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1 d0d084dd8 turn hidden --trace into a NOP 320df8388 pkg/terminal: use c/storage/pkg/homedir cc7a7568a Update nix pin with `make nixpkgs` 9e75cafd5 build-arg 326f3eda3 Handle podman build --dns-search 01ffe2c30 podman build --build-arg should fall back to environment 2c500a814 Add support for podman build --ignorefile 1a33b7648 replace local mount consts with libpod/define e4da5096b separate file with mount consts in libpod/define 9fc29f63e Correct compat images/{name}/push response a910f74ea [NO TESTS NEEDED] Bump pre-commit-hooks version 3ae580b0e [ci skip] Bad formatting fix in build documentation 803e58b36 Bump github.com/containernetworking/plugins to v0.9.1 d107c3729 podman-remote stop -time 0 does not work 5bb8fa30b Do not return from c.stop() before re-locking 2bcc95257 Fix for podman network rm (-f) workflow 3396343d4 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.2.0 efc592fba Bump github.com/containers/buildah from 1.19.6 to 1.19.7 793c52dd5 Add tests for selinux kvm/init labels 8453424e2 Respect NanoCpus in Compat Create a090301bb podman cp: support copying on tmpfs mounts e43385eca image removal: ignore unknown-layer errors aa0a57f09 Fix cni teardown errors f86d64130 Use version package to track all versions 252aec1c9 Check for supportsKVM based on basename of the runtime 53d22c779 Compat API: create volume source dirs on the host 61e626c85 Makefile: add install.docker-docs-nobuild for packaging use 81a3f8a43 Add /sys/fs/cgroup as readonly path in docs 8f2192922 Add network summary to compat ps 4eed89aca Fix possible panic with podman build --iidfile 9391bfc52 Add version field to secret compat list/inspect api b19791c0b Tidy duplicate log tests 5df625140 Fix support for podman build --timestamp 43e899c2e Rewrite Rename backend in a more atomic fashion 91b2f07d5 Use functions and defines from checkpointctl bf92e2111 Move checkpoint/restore code to pkg/checkpoint/crutils bd819ef7d Vendor in checkpointctl 2c8c5393a Support label type dict on compat build ac992e4b0 Makefile: install systemd services conditionally 63a3b8a09 podman-system-service.1.md: fix timeout example 774aea45e swagger: update the libpodPutArchive operation verb 3908c0079 Makefile: split install.docker-docs from install.docker 2f0fc2911 Bump RootlessKit v0.14.0-beta.0 8b7caa6d0 Compat api containers/json Ports field is null 14d5bd164 Bump github.com/cri-o/ocicni to latest master 7927fe01f Refactor python tests to run against python3.9 9435e5b79 APIv2 tests: make more maintainable e9d94dc90 [CI:DOCS] Improve release process docs 375201633 podman rmi: handle corrupted storage better d9cb135b6 Enable cgroupsv2 rw mount via security-opt unmask cc679d952 podman-image-sign.1.md: typo fix f54ed7269 compat api network ls accept both format options 680dacaea Enable no_hosts from containers.conf fcce1da1b Correct compat images/create?fromImage response ba319e3ba [Compat API] Also print successfully tagging images in /build endpoint 43d010bd0 Fix parsing of Tmpfs field in compat create 24d9bda7f prune remotecommand dependency bee21f1e4 system test image: build it multiarch ef549235e Updated based on Jhonce comments ccbe4ff73 updated common to 0.35.0 836bfebb4 Refactored file 1aa96ed2e swagger: removes the schema type for PodSpecGenerator $ref 431f75519 podman-system-connection.1.md: fix copy/paste error 90050671b Add dns search domains from cni response to resolv.conf f152f9cf0 Network connect error if net mode is not bridge fc32ec768 Sort CapDrop in inspect to guarantee order 79eaadd3f podman upgrade tests 3947feb4b test: ignore named hierarchies for cgroups=split e5ac28f3b container removal: handle already removed containers a775c5920 Bump github.com/rootless-containers/rootlesskit from 0.13.1 to 0.13.2 0ab32d11d Bump k8s.io/apimachinery from 0.20.3 to 0.20.4 874f2327e Add U volume flag to chown source volumes fcf669fd9 Replace Labels and Options nulls with {} in NetworkResource 4875a8fb4 Cirrus: Temp. disable prior-fedora (F32) testing f3a8e3324 podman cp: test /dev/stdin correctly 8577be72e podman cp: treat /dev/stdout correctly e87c5b6c1 cgroup: change cgroup deletion logic on v1 9d818be73 Fix podman network IDs handling d9655b0f0 pr-should-include-tests: recognized "renamed" tests d2f3098c6 --no-header flag implementation for generate systemd af7a68fa8 [NO TESTS NEEDED] Make binding util internal c236aebb9 Two variations of --new flag added to e2e a2e1b3eab swagger: add missing schema properties 5dded6fae bump go module to v3 d333ef82b Fix 'storage.options' indent d886cd930 Bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0 b40d778f4 Bump github.com/containers/buildah from 1.19.4 to 1.19.6 05eb06f56 Turn on journald and k8s file logging tests f06dd45e0 Allow podman play kube to read yaml file from stdin 43a581904 Log working dir when chdir fails d6b0b5412 Fix segfault in run with memory-swap e1ad50654 leak fix in rootless_linux.c fcn can_use_shortcut 612ba6aa8 Fix journald logs with more than 1 container 9016387bb Fix journald logs --follow f2d057c94 Fix journald logs --since fbc50e528 fix journald logs --tail 0 cf2a55189 [CI:DOCS]basic networking guide 71689052a cp: treat "." and "/." correctly caa0bc157 [CI:DOCS] [NO TESTS NEEDED] Update swagger doc for libpod container wait 31eca5c20 Bump k8s.io/apimachinery from 0.20.2 to 0.20.3 e022c1975 Don't switch on a single case 3e168b19f Quote URL b3f9559c8 bindings: support simple types that implement fmt.Stringer interface 9699e81a0 API: fix libpod's container wait endpoint condition conversion a9d548bf7 Change source path resolution for volume copy-up e2d5a1d05 podman ps --format '{{ .Size }}' requires --size option 12b6342c3 infra: downgrade warning to debug 12a577aea Ignore entrypoint=[\"\"] 684290725 Bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1 68a8d397c Add missing early returns in compat API 5d1ec2960 Do not reset storage when running inside of a container 958f90143 podman kill should report rawInput not container id 759fc9334 Fix an issue where copyup could fail with ENOENT 2ec0e3b65 do not set empty $HOME 2a21ecafa images/create: always pull image f2f18768a Fix panic in pod creation 0fd480708 Bump github.com/rootless-containers/rootlesskit from 0.13.0 to 0.13.1 2845f7b83 podman build: pass runtime to buildah 39c1fdb15 correct startup error message 690c02f60 Add missing params for podman-remote build a532994f8 Fix typo podman run doc in flag -pid=mode "efault" 4a9bd7a18 When stopping a container, print rawInput 714acf326 fix create container: handle empty host port 3d50393f0 Don't chown workdir if it already exists bf083c185 Fix broken podman generate systemd --new with pods 227c54813 fix dns resolution on ubuntu 0ab5bfd31 e2e: fix network alias test 704fa8b55 fix failing image e2e test 9a24d5098 Update troubleshooting.md 6ffd05d0b [NO TESTS NEEDED] Refactor generated code 2c31f3839 Fix superfluous response.WriteHeader call in WaitContainerLibpod() 4067f3a4d change ps Created to unix 78b419909 Enable more golangci-lint linters adfcb7460 make layer-tree lookup errors non-fatal 78c8a8736 Enable whitespace linter 69ab67bf9 Enable golint linter ef2fc90f2 Enable stylecheck linter 40c3c972d Update Master to reflect the 3.0 release 660a06f2f utils: takes the longest path on cgroup v1 5f999b6bc container ps json format miscue 8e2fae186 Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 1b5f3ed24 utils: create parent cgroups 9196a5ce3 utils: ignore unified on cgroupv1 if not present f4fd25a00 utils: skip empty lines f28b08fe9 Correct compat network prune response 5ccb1596b Display correct value for unlimited ulimit fdf39e169 apiv2: handle docker-java clients pulling ea910fc53 Rewrite copy-up to use buildah Copier 31b2b2cc2 bump to v3.1.0-dev 68133414f [NO TESTS NEEDED] Update linter 46b014bad Bump github.com/spf13/cobra from 1.1.1 to 1.1.2 1cc387bf7 Add shell completion tests for secrets f4ece018b Docker APIv2 push sends digest in response body f2a856203 Fix compat networks endpoint for a empty result 21deafba8 hardening flags for fedora rpmbuilds e15e170ac [CI:DOCS]First pass at release process 46385dd60 Restart service when CONTAINERS_CONF changes cc846a8cd Support annotations from containers.conf 68414537c vendor github.com/containers/image v5.10.2 ea704da72 APIv2 tests: lots of cleanup 721a1e104 Fix Docker APIv2 push endpoint 48c612cf6 generate kube: support --privileged 08d8290f1 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 832a69b0b Implement Secrets 45981ba29 Bump containers/buildah to v1.19.4 1caace8f4 Allow path completion for podman create/run --rootfs 6c75419a8 Cirrus: Send cirrus-cron report e-mail to list. feecdf919 make `podman rmi` more robust 407e86dcd Implement missing arguments for podman build 3c3e644c1 vendor latest containers/common 91ea3fabd add network prune 821ef6486 fix logic when not creating a workdir 002f2aca7 Bump remote API version to 3.0.0 6c713984e play kube selinux test case 5c6ab3075 Fix podman network disconnect wrong NetworkStatus number 05444cb2c Fix per review request c995b5460 generate kube: handle entrypoint 96adf0e2a play kube selinux test case 2b8d6ca09 Increase timeouts in some tests 3c57bc845 Add test for Docker APIv2 wait 4a219aa23 Implement Docker wait conditions fc385806d Improve ContainerEngine.ContainerWait() 570e1587d Improve container libpod.Wait*() functions 6a6e86829 Cirrus: Collect ginkgo node logs artifacts ebc42f508 Bump github.com/containers/storage from 1.24.5 to 1.25.0 9dc795191 Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1 bc149a4dd bindings: attach: warn correct error d87f54fbb Fix invalid wait condition on kill dfa9a340a Makefile: make bin/* real targets! 3d105015f typo c40cd1be9 Bump github.com/onsi/gomega from 1.10.4 to 1.10.5 bda95bdb6 Update nix pin with `make nixpkgs` 1c50e09b0 System test for #9096 (truncated stdout) 432ee04c5 play kube selinux label test case e0bc8ffb5 Gating tests: diff test: workaround for RHEL8 failure bde23a021 [NO TESTS NEEDED] style: indendation 89df89b5f [NO TESTS NEEDED] fixup: remove debug code 7e4d696d9 Report StatusConflict on Pod opt partial failures bd0e22ed1 Honor network options for macvlan networks 095919680 Make slirp MTU configurable (network_cmd_options) ac3bd4c33 [NO TESTS NEEDED] Generated files 5a746c08f [NO TESTS NEEDED] Improve generator c68b59f97 play kube selinux label issue e9f936a29 Makefile: refactor ginkgo * ginkgo-remote 931ea939a Allow pods to use --net=none 323ab314e Bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0 077fd670b Update release notes for v3.0.0 ee8ee651d New 'make completions' target e11d8f15e add macvlan as a supported network driver 5352df226 Fix podman generate systemd --new special char handling eaafd975a Bump github.com/rootless-containers/rootlesskit from 0.12.0 to 0.13.0 51c11fea8 Endpoint that lists containers does not return correct Status value 3cfd4ce45 Fix --network parsing for podman pod create 9b5b03d1e list volumes before pruning 4a6d042c2 Docker ignores mount flags that begin with constency cdbbc6120 podman generate kube ignores --network=host 073f76c13 Switch podman stop/kill/wait handlers to use abi b842d97f5 [CI:DOCS]build instructions for macOS 280f332bd Vendor in containers/buildah v1.19.3 ca0dd76bf Honor custom DNS in play|generate kube d7c356552 Podman-remote push can support --format b74f939fb Bump github.com/containers/image/v5 from 5.10.0 to 5.10.1 8d979e093 Cirrus: Build static podman-remote c0bf0ba9e podman build --pull: refine help message and docs c450092fd Revert "podman build --pull: use correct policy" 75c3b3389 Bump github.com/containers/image/v5 from 5.9.0 to 5.10.0 59076888d Cleanup bindings for image pull 89bb8a9b3 Don't fail if one of the cgroups is not setup 1fac43654 Add support for rootless network-aliases c717b3cac Allow static ip and mac with rootless cni network 15caebfe5 podman build --pull: use correct policy bfc1b66be Cirrus: Fix running Validate task on branches f8bf509d1 Fix static build cache by using cachix 84f7bdc4d Switch podman image push handlers to use abi fee2fadc3 e2e tests: synchronize test results 21cb3043f podman-remote ps --external --pod --sort do not work. f79d68eea Fix podman history --no-trunc for the CREATED BY field c63599d36 remote exec: write conmon error on hijacked connection e9f4fb975 Fix #9100 Change console mode message to debug 02ec5299f Add default net info in container inspect 1ae410d19 Ensure the Volumes field in Compat Create is honored 35c89ccc5 [CI:DOCS]update state of restful service 0f668aa08 workdir presence checks 7b186dcb9 libpod: add (*Container).ResolvePath() 74a63df05 Fixup search 97f5e9458 Pass DefaultMountsFile to podman build 5350254f0 Ensure shutdown handler access is syncronized 33179c281 System tests: cover gaps from the last month 5623cb9d3 Fix --arch and --os flags to work correctly a86d23c75 Bump github.com/google/uuid from 1.1.5 to 1.2.0 75698b4b7 Fix typo 393a8f026 disable dnsname when --internal ef76b92b8 swagger.go: Fix compilation error 8c1768e38 Fix fish completion issue if the command is prefixed with a space a457c5c92 Bump golang.org/x/crypto 0ba1942f2 networking: lookup child IP in networks c182091b0 Small API test improvement for compatibility search endpoint 6e6a38b41 podman manifest exists c9baa6b93 Accept and ignore 'null' as value for X-Registry-Auth 4b8df5903 Turn on some remote test 94f96c78a Add a notice to remove pod before starting service ef654941d libpod: move slirp magic IPs to consts 5e65f0ba3 rootlessport: set source IP to slirp4netns device 37319dec1 vendor: update rootlesskit to v0.12.0 2fa67fe4b api: fix import image swagger definition 9d31fed5f podman volume exists 4e4d318b7 Cirrus: Upload swagger YAML in every context dbb99433d [CI:DOCS] Cirrus: Skip smoke task on branch-push 836fa4c49 Move the cni lock file into the cni config dir c1cd512cb Use random network names in the e2e tests 3fedb2b6d [CI:DOCS] Update project name in Code of Conduct f43046745 Set log driver for compatability containers c3cbaa355 Make generate systemd --new robust against double curly braces 6518391e8 Fix man page for fuse-overlayfs config in rootless mode a3621a7cf Cirrus: add bindings checks e7df73efa Fix handling of container remove 41a7e11c7 make bindings generation explicit f302ce578 make bindings generation more robuts 175fc3867 Revert "ginkgo: install on demand via `go get -u`" 37abec240 [CI:DOCS] fix go-md2man HTMLSpan warnings 9f6bb3563 CI: smoke test: insist on adding tests on PRs a45d22a1d podman network exists de05e5816 ginkgo: install on demand via `go get -u` d2ee3d815 runner.sh : deal with bash 'set -e' 4ccb0729b Add binding options for container|pod exists 683bab03f [CI:DOCS]Do not run compose tests with CI:DOCS 2df59829e simplify bindings generation 462994268 make: generate bindings: use vendor caaaa2c5e hack/install_golangci.sh: smarter install f38b7f48c golangci-lint: install to ./bin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: move to 1.21 releaseBruce Ashfield2021-04-163-20/+17
| | | | | | | | | Updating kubernetes to the 1.21 release. Minor build changes and patch refreshes were required. The changelog is massive, so we won't list it here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to v1.20.6Bruce Ashfield2021-04-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Bumping to the latest 1.20.x release, which comprises the following commits: b06a5ffc2f Update to v1.20.6 77390596e6 add cloud controller manager fixes from master ef28edaf9a Update to v1.20.6 1521e3b085 Resolve local retention issue when S3 in use. 221c9ae589 add hidden attribute to disable flags 9a572ecae0 delete nocluster file and remove build tag 3f73665131 remove hidden attribute from cluster flags and related code 29f6275aae add etcd s3 secret and access key flags and env vars to secret data 355fff3017 Update to Kubernetes v1.20.5 (#3094) c09142a3a7 put etcd bootstrap save call in goroutine and update comment a2b1d28c68 [release 1.20] containerd: v1.4.4-k3s1 (#3086) 62839b302a remove duplicate method 0167f86f5d Have Bootstrap Data Stored in etcd at Completed Start (#3038) 1da86eaa0b Etcd Snapshot/Restore to/from S3 Compatible Backends (#2902) 0a3360fc6f Add ability to perform an etcd on-demand snapshot via cli (#2819) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.5.x seriesBruce Ashfield2021-04-152-25/+20
| | | | | | | | | Bumping containerd to the 1.5.x development series. We refresh patches and add new build dependencies, but otherwise the overall structure is the same. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v20.10-betaBruce Ashfield2021-04-155-81/+70
| | | | | | | | | | | | | | | | | moby has moved on to the 20.10+ series, while docker-ce has stayed behind a bit. Master of docker-ce now has imports from moby and is getting ready for release. To keep our variants from diverging, we switch to master (for now) and will track the new development. We adapt some patches from the moby build to work for docker-ce, in particular, we cannot use docker to build docker, so we port the cli building from moby. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.6Bruce Ashfield2021-04-153-26/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to the lastet 20.10 series. This includes the following moby commits: 255c79a1e8 Move cgroup v2 out of experimental f2c0b3688a Pin arm64 machines to a specific Ubuntu version 29ff2af2d3 Fix flaky TestInspect 60310e2409 Use docker media type for plugin layers 8088859bab btrfs: Allow unprivileged user to delete subvolumes (kernel >= 4.18) d22dde8eb1 rootless: fix getCurrentOOMScoreAdj c1e7924f7c archive: do not use overlayWhiteoutConverter for UserNS 22dc1597b9 overlay2: doesSupportNativeDiff: add fast path for userns daae27bfce overlay2: call d.naiveDiff.ApplyDiff when useNaiveDiff==true e974cb638c rootless: bind mount: fix "operation not permitted" 7022b1e12e bump up rootlesskit to v0.14.1 88470052e7 vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46 d26ed2c33b fix assertPortList normalizing being too strict 915b239519 builder: produce error when using unsupported Dockerfile option ef2351b416 integration-cli: rely less on "docker port" output format 86d98f5711 integration: update getExternalAddress to prefer IPv4 b41e2d4dc1 integration/container: wrap some long lines for readability 407a61cdb2 hack: use GOPROXY for rootlesskit to workaround issue with old git on CentOS/RHEL 7 a35e1f451e update rootlesskit to v0.14.0 9780942e20 Remove cli test for duplicate --net/--network opts e1ee2823ec TestPushMultipleTags: Add support for 20.10 CLI 969bde2009 jsonfile: more defensive reader implementation cb501700e8 Fix handling for json-file io.UnexpectedEOF 2d39a44c1c overlayutils/userxattr.go: add "fast path" for kernel >= 5.11.0 95d2b686be overlay2: support "userxattr" option (kernel 5.11) 074270703c Use buster backports to build with libseccomp-2.4.4 fed6ba2790 Include VPNkit binary for arm64 2ab3cd8c9e update containerd binary to v1.4.4 d3188dc164 Dockerfile: switch to "stable" dockerfile front-end 98273a606a dockerd-rootless-setuptool.sh: create CLI context "rootless" a0670c6d3d pkg/archive: TestUntarParentPathPermissions requires root 04d9b581e9 Update documentation links 1015b5b438 dockerd-rootless.sh: prohibit running as root 35f5f9e624 builder: fix incorrect cache match for inline cache with empty layers 3ce37a6aa4 vendor: github.com/moby/buildkit v0.8.2 5e8c1b4f7d dockerd-rootless.sh: add typo guard a24d92f95b check-config.sh: add NETFILTER_XT_MARK 80019e1b0e builder: fix blobs releasing via leases after pull 2a220f1f3d Update Swarmkit to pick up fixes to heartbeat period and stalled tasks da1a672102 builder: fix pull synchronization regression 0e001154f9 Check the length of the correct variable #42039 3beb2e4422 Move cpu variant checks into platform matcher 0caf485abb Fallback to manifest list when no platform match a6a88b3145 profiles: seccomp: update to Linux 5.11 syscall list e3750357a5 builder: ensure libnetwork state file do not leak ab5711e619 Fix builder inconsistent error on buggy platform df2a989769 Add shim config for custom runtimes for plugins d13e162a63 Handle long log messages correctly on SizedLogger 34446d0343 replace json.Unmarshal with NewFromJSON in Create c00fb1383f docs: fix double "the" in existing API versions b7e6803ec4 swagger.yaml: Remove extra 'the' wrapped by newline 420de4c569 contrib/check-config.sh: fix INET_XFRM_MODE_TRANSPORT 8412078b1e contrib/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED bb0866f04e contrib/check-config.sh: fix MEMCG_SWAP_ENABLED db47bec3c7 contrib/check-config.sh: fix NF_NAT_NEEDED 6bc47ca4b4 contrib/check-config.sh: fix NF_NAT_IPV4 491642e696 contrib/check-config.sh: support for cgroupv2 cda6988478 Fix Error in daemon_unix.go and docker_cli_run_unit_test.go 1640d7b986 Fix daemon panic when starting container with invalid device cgroup rule 6e3f2acdac docs: fix NanoCPUs casing ad777ff3bc api: fix NanoCPUs casing in swagger 94d2467613 Fix userns-remap option when username & UID match acb8a48a3c update runc binary to v1.0.0-rc93 5d442b1cb7 pkg/archive: Unpack() use 0755 permissions for missing directories 5db18e0aba archive: avoid creating parent dirs for XGlobalHeader 94feac18d2 Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses cc377d27ac Update TestDaemonRestartWithLiveRestore: fix docker0 subnet missmatch Fix docker0 subnet missmatch when running from docker in docker (dind) fc07fecfb5 TestBuildUserNamespaceValidateCapabilitiesAreV2: verify build completed f7893961de TestBuildUserNamespaceValidateCapabilitiesAreV2: use correct image name d31b2141ae Jenkinsfile: add cgroup2 5de9bc7e01 TestInspectOomKilledTrue: skip on cgroup v2 ff49cb3e33 Dockerfile.simple: Fix compile docker binary error with btrfs 49e706e14c Dockerfile.buildx: update buildx to v0.5.1 0211909bde testing: update docker-py 4.4.1 faf6442f80 integration: fix TestBuildUserNamespaceValidateCapabilitiesAreV2 not using frozen image f0e526f43e Make test work with rootless mode a287e76e15 pkg/archive: allow mknodding FIFO inside userns And the following cli commits: dc017bdda bake: remove windows targets other than windows/amd64 feb6f439e Makefile: have binary, cross, dynbinary targets not use docker for backwards compat 8bc4062fc set default version from git 84cc7d87c update readme with new examples c1c3d3b3a remove unused targets 048a84614 update circleci cross target 33dacda24 add windows/arm64 target fcc05e5ea update windows resources generation 58061d25f dockerfile based binary building 4c3b87d92 config.Load() remove unneeded locks 019609872 vendor: github.com/theupdateframework/notary v0.7.0-21-gbf96a202 6ebf76504 vendor: update notary to 5f1f4a34 f508ce9db vendor: github.com/theupdateframework/notary v0.7.0 2c0435431 docs: remove trailing spaces to prevent yamldocs using "compact" notation ff945151e docs: improve example for "remove all stopped containers" 4571d90f2 config: print deprecation warning when falling back to ~/.dockercfg f33a69f6e [20.10] Revert "Ignore SIGURG on Linux." d6eeeb625 service rollback: always verify state 3e157d529 docker service rollback: fix non-zero exit code in some cases 1fdf84b8e fix --update-order and --rollback-order flags 376b99c6d Rename bin/md2man to bin/go-md2man 0de4e6e9a Fix reading context and dockerfile from stdin with BuildKit de40c2b17 Fix panic when failing to get DefaultAuthConfig d513e46bf cli/config: prevent warning if HOME is not set 2b74b90ef Add docs and completion for docker node ls --filter node.label 05343b36a fix docker-run man page table formatting f90db254d docs: Fix wrong variable name 0dcfdde33 Removed format flag for inspect 03cd1dc50 Added zsh completion for docker context subcommands 42811a7eb docs: add redirect for old reference URL be966aa19 docs: fix typo in deprecated.md b22fe0fb1 deprecate blkio-weight options with cgroups v1 4eb050071 Update bash completion for fluentd --log-options 08c4fdfa7 Add bash completion for `dockerd --ip6tables` 6aa1b37c8 Add bash completion for `docker run|create --pull` e82920d76 Remove duplicate word in push.md 82123939f Add bash completion for jobs Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v3.1Bruce Ashfield2021-04-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to v3.1, which comprises the following commits: bce3e6c5f Fix tests ec1a512ac Bump to v3.1.1-dev 9f09fb62c Bump to v3.1.0 1386f9046 Fix test failure 38bb77c5b Update release notes for v3.1.0 final release 670e1ac67 [NO TESTS NEEDED] Turn on podman-remote build --isolation ac4bdd265 Fix long option format on docs.podman.io 96ffce219 Fix containers list/prune http api filter behaviour e772719bf [CI:DOCS] Add note to mappings for user/group userns in build 52cd3ce2d Validate passed in timezone from tz option 633ae014e Generate Kubernetes PersistentVolumeClaims from named volumes c9640bab7 libpod/image: unit tests: use a `registries.conf` for aliases 43c772aa2 libpod/image: unit tests: defer cleanup 396a59b02 libpod/image: unit tests: use `require.NoError` a01b387e8 Unification of until filter across list/prune endpoints 183a68a81 Unification of label filter across list/prune endpoints d1589f280 fixup 31351ad94 fix: build endpoint for compat API 7148544df [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot 88672b58c Check if stdin is a term in --interactive --tty mode 23f3805df [NO TESTS NEEDED] Fix rootless volume plugins 5e3445e6e Ensure manually-created volumes have correct ownership 6b6989206 Support multi doc yaml for generate/play kube d560f168f Correct json field name 573ed9220 Fix filters in image http compat/libpod api endpoints 1b349d79a podman generate systemd --new do not duplicate params 1089f83a4 Fix podman build --pull-never be02c8581 man pages: correct seccomp-policy label 62b49e176 [NO TESTS NEEDED] Use same function podman-remote rmi as podman 3d1aaffdb Add problematic volume name to kube play error messages d498022fd Fix list pods filter handling in libpod api 66b1c2bd9 [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS b55730180 Remove resize race condition e7dc66d83 [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 57e0d8f29 Use TMPDIR when commiting images 505f43c08 Add RequiresMountsFor= to systemd generate 15da607d1 Fix swapped dimensions from terminal.GetSize 0127cc184 Revert go-systemd to v2.22.0 4f11517c0 Cirrus: Update configuration for v3.1 branch 834f4caaa Bump to v3.1.0-dev 1b56ea2d9 Bump to v3.1.0-rc2 1ae87ff46 Update release notes for v3.1.0-RC2 3b609a706 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.3.0 1dfbdd5d9 Fix system prune cmd user message with options afce37671 System tests: reenable a bunch of skipped tests 417f36281 Cleanup /libpod/images/load handler adf652e2a vendor: drop replace for github.com/syndtr/gocapability e85cf8f4a security: use the bounding caps with --privileged f46b34ecd Bump github.com/containers/common from 0.35.0 to 0.35.3 5a18b5eb7 Bump k8s.io/apimachinery from 0.20.4 to 0.20.5 aa2d6e6e6 Fix volumes and networks list/prune filters in http api ec1651fbf Bump github.com/containers/storage from 1.25.0 to 1.28.0 1ca74b00d add a dependabot config to automate vendoring a596d1f5d Bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2 8ea02d0b6 network prune filters for http compat and libpod api 8da5fd820 test: check for io.stat existence on cgroup v2 592aae4f9 test: fix test for last crun/runc 1c873c7da test: simplify cgroup path af3499db5 Latest crun/runc should handle blkio-weight test 82858a97c fix user message image prune --all 3d01d42f2 Docs: removing secrets is safe for in-use secrets 21f229a3d Downgrade github.com/coreos/go-systemd/v22 e8918ff10 pkg/bindings/images.Build(): fix a race condition in error reporting 310eae4ba Switch all builds to pull-never 963d19c75 System test cleanup f4b2d597a Fix for volumes prune in http compat api 8de560703 Fix remote client timezone test 57e8c6632 Do not leak libpod package into the remote client 762148deb Split libpod/network package 955aaccc5 fix use with localhost (testing) 9251b6c8c add /auth for docker compatibility 3803d0a4a create endpoint for querying libpod networks 12fb9e465 Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 660a72993 sdnotify tests: try real hard to kill socat processes 7b0155cf7 Fix array instead of one elem network http api 92a8d69a7 Delete all containers and pods between tests 258749e43 apiv2 tests: finally fix POST as originally intended c9ef26071 Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables f1eb8e816 Removing a non existing container API should return 404 dc0c72a48 Docs: Add docs to access APIs inside container 6d4899745 options: append CLI graph driver options 930bec4d3 podman load: fix error handling 1f2f7e745 podman cp: evaluate symlink correctly when copying from container 2033fa4c7 rm pkg/api/handlers/libpod/copy.go 31b11b5cd podman cp: fix copying to a non-existent dir a61d70cf8 podman cp: fix ownership 2abfef380 podman cp: ignore EPERMs in rootless mode d175fbfdb vendor buildah@v1.19.8 e33f52390 apiv2 tests: add helpers to start/stop a local registry e926b5d73 Bump to v3.1.0-dev aa9616cd4 Bump to v3.1.0-rc1 e9db60492 allow the removal of storage images 9eac4a7f7 podman-remote build does not support volumes d1878cc67 Compat API: Avoid trying to create volumes if they already exist 7e289833e Bump github.com/onsi/gomega from 1.10.5 to 1.11.0 0e36e65ea Allow users to generate a kubernetes yaml off non running containers 80390dd18 Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1 d0d084dd8 turn hidden --trace into a NOP 320df8388 pkg/terminal: use c/storage/pkg/homedir cc7a7568a Update nix pin with `make nixpkgs` 9e75cafd5 build-arg 326f3eda3 Handle podman build --dns-search 01ffe2c30 podman build --build-arg should fall back to environment 2c500a814 Add support for podman build --ignorefile 1a33b7648 replace local mount consts with libpod/define e4da5096b separate file with mount consts in libpod/define 9fc29f63e Correct compat images/{name}/push response a910f74ea [NO TESTS NEEDED] Bump pre-commit-hooks version 3ae580b0e [ci skip] Bad formatting fix in build documentation 803e58b36 Bump github.com/containernetworking/plugins to v0.9.1 d107c3729 podman-remote stop -time 0 does not work 5bb8fa30b Do not return from c.stop() before re-locking 2bcc95257 Fix for podman network rm (-f) workflow 3396343d4 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.2.0 efc592fba Bump github.com/containers/buildah from 1.19.6 to 1.19.7 793c52dd5 Add tests for selinux kvm/init labels 8453424e2 Respect NanoCpus in Compat Create a090301bb podman cp: support copying on tmpfs mounts e43385eca image removal: ignore unknown-layer errors aa0a57f09 Fix cni teardown errors f86d64130 Use version package to track all versions 252aec1c9 Check for supportsKVM based on basename of the runtime 53d22c779 Compat API: create volume source dirs on the host 61e626c85 Makefile: add install.docker-docs-nobuild for packaging use 81a3f8a43 Add /sys/fs/cgroup as readonly path in docs 8f2192922 Add network summary to compat ps 4eed89aca Fix possible panic with podman build --iidfile 9391bfc52 Add version field to secret compat list/inspect api b19791c0b Tidy duplicate log tests 5df625140 Fix support for podman build --timestamp 43e899c2e Rewrite Rename backend in a more atomic fashion 91b2f07d5 Use functions and defines from checkpointctl bf92e2111 Move checkpoint/restore code to pkg/checkpoint/crutils bd819ef7d Vendor in checkpointctl 2c8c5393a Support label type dict on compat build ac992e4b0 Makefile: install systemd services conditionally 63a3b8a09 podman-system-service.1.md: fix timeout example 774aea45e swagger: update the libpodPutArchive operation verb 3908c0079 Makefile: split install.docker-docs from install.docker 2f0fc2911 Bump RootlessKit v0.14.0-beta.0 8b7caa6d0 Compat api containers/json Ports field is null 14d5bd164 Bump github.com/cri-o/ocicni to latest master 7927fe01f Refactor python tests to run against python3.9 9435e5b79 APIv2 tests: make more maintainable e9d94dc90 [CI:DOCS] Improve release process docs 375201633 podman rmi: handle corrupted storage better d9cb135b6 Enable cgroupsv2 rw mount via security-opt unmask cc679d952 podman-image-sign.1.md: typo fix f54ed7269 compat api network ls accept both format options 680dacaea Enable no_hosts from containers.conf fcce1da1b Correct compat images/create?fromImage response ba319e3ba [Compat API] Also print successfully tagging images in /build endpoint 43d010bd0 Fix parsing of Tmpfs field in compat create 24d9bda7f prune remotecommand dependency bee21f1e4 system test image: build it multiarch ef549235e Updated based on Jhonce comments ccbe4ff73 updated common to 0.35.0 836bfebb4 Refactored file 1aa96ed2e swagger: removes the schema type for PodSpecGenerator $ref 431f75519 podman-system-connection.1.md: fix copy/paste error 90050671b Add dns search domains from cni response to resolv.conf f152f9cf0 Network connect error if net mode is not bridge fc32ec768 Sort CapDrop in inspect to guarantee order 79eaadd3f podman upgrade tests 3947feb4b test: ignore named hierarchies for cgroups=split e5ac28f3b container removal: handle already removed containers a775c5920 Bump github.com/rootless-containers/rootlesskit from 0.13.1 to 0.13.2 0ab32d11d Bump k8s.io/apimachinery from 0.20.3 to 0.20.4 874f2327e Add U volume flag to chown source volumes fcf669fd9 Replace Labels and Options nulls with {} in NetworkResource 4875a8fb4 Cirrus: Temp. disable prior-fedora (F32) testing f3a8e3324 podman cp: test /dev/stdin correctly 8577be72e podman cp: treat /dev/stdout correctly e87c5b6c1 cgroup: change cgroup deletion logic on v1 9d818be73 Fix podman network IDs handling d9655b0f0 pr-should-include-tests: recognized "renamed" tests d2f3098c6 --no-header flag implementation for generate systemd af7a68fa8 [NO TESTS NEEDED] Make binding util internal c236aebb9 Two variations of --new flag added to e2e a2e1b3eab swagger: add missing schema properties 5dded6fae bump go module to v3 d333ef82b Fix 'storage.options' indent d886cd930 Bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0 b40d778f4 Bump github.com/containers/buildah from 1.19.4 to 1.19.6 05eb06f56 Turn on journald and k8s file logging tests f06dd45e0 Allow podman play kube to read yaml file from stdin 43a581904 Log working dir when chdir fails d6b0b5412 Fix segfault in run with memory-swap e1ad50654 leak fix in rootless_linux.c fcn can_use_shortcut 612ba6aa8 Fix journald logs with more than 1 container 9016387bb Fix journald logs --follow f2d057c94 Fix journald logs --since fbc50e528 fix journald logs --tail 0 cf2a55189 [CI:DOCS]basic networking guide 71689052a cp: treat "." and "/." correctly caa0bc157 [CI:DOCS] [NO TESTS NEEDED] Update swagger doc for libpod container wait 31eca5c20 Bump k8s.io/apimachinery from 0.20.2 to 0.20.3 e022c1975 Don't switch on a single case 3e168b19f Quote URL b3f9559c8 bindings: support simple types that implement fmt.Stringer interface 9699e81a0 API: fix libpod's container wait endpoint condition conversion a9d548bf7 Change source path resolution for volume copy-up e2d5a1d05 podman ps --format '{{ .Size }}' requires --size option 12b6342c3 infra: downgrade warning to debug 12a577aea Ignore entrypoint=[\"\"] 684290725 Bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1 68a8d397c Add missing early returns in compat API 5d1ec2960 Do not reset storage when running inside of a container 958f90143 podman kill should report rawInput not container id 759fc9334 Fix an issue where copyup could fail with ENOENT 2ec0e3b65 do not set empty $HOME 2a21ecafa images/create: always pull image f2f18768a Fix panic in pod creation 0fd480708 Bump github.com/rootless-containers/rootlesskit from 0.13.0 to 0.13.1 2845f7b83 podman build: pass runtime to buildah 39c1fdb15 correct startup error message 690c02f60 Add missing params for podman-remote build a532994f8 Fix typo podman run doc in flag -pid=mode "efault" 4a9bd7a18 When stopping a container, print rawInput 714acf326 fix create container: handle empty host port 3d50393f0 Don't chown workdir if it already exists bf083c185 Fix broken podman generate systemd --new with pods 227c54813 fix dns resolution on ubuntu 0ab5bfd31 e2e: fix network alias test 704fa8b55 fix failing image e2e test 9a24d5098 Update troubleshooting.md 6ffd05d0b [NO TESTS NEEDED] Refactor generated code 2c31f3839 Fix superfluous response.WriteHeader call in WaitContainerLibpod() 4067f3a4d change ps Created to unix 78b419909 Enable more golangci-lint linters adfcb7460 make layer-tree lookup errors non-fatal 78c8a8736 Enable whitespace linter 69ab67bf9 Enable golint linter ef2fc90f2 Enable stylecheck linter 40c3c972d Update Master to reflect the 3.0 release 660a06f2f utils: takes the longest path on cgroup v1 5f999b6bc container ps json format miscue 8e2fae186 Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 1b5f3ed24 utils: create parent cgroups 9196a5ce3 utils: ignore unified on cgroupv1 if not present f4fd25a00 utils: skip empty lines f28b08fe9 Correct compat network prune response 5ccb1596b Display correct value for unlimited ulimit fdf39e169 apiv2: handle docker-java clients pulling ea910fc53 Rewrite copy-up to use buildah Copier 31b2b2cc2 bump to v3.1.0-dev 68133414f [NO TESTS NEEDED] Update linter 46b014bad Bump github.com/spf13/cobra from 1.1.1 to 1.1.2 1cc387bf7 Add shell completion tests for secrets f4ece018b Docker APIv2 push sends digest in response body f2a856203 Fix compat networks endpoint for a empty result 21deafba8 hardening flags for fedora rpmbuilds e15e170ac [CI:DOCS]First pass at release process 46385dd60 Restart service when CONTAINERS_CONF changes cc846a8cd Support annotations from containers.conf 68414537c vendor github.com/containers/image v5.10.2 ea704da72 APIv2 tests: lots of cleanup 721a1e104 Fix Docker APIv2 push endpoint 48c612cf6 generate kube: support --privileged 08d8290f1 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 832a69b0b Implement Secrets 45981ba29 Bump containers/buildah to v1.19.4 1caace8f4 Allow path completion for podman create/run --rootfs 6c75419a8 Cirrus: Send cirrus-cron report e-mail to list. feecdf919 make `podman rmi` more robust 407e86dcd Implement missing arguments for podman build 3c3e644c1 vendor latest containers/common 91ea3fabd add network prune 821ef6486 fix logic when not creating a workdir 002f2aca7 Bump remote API version to 3.0.0 6c713984e play kube selinux test case 5c6ab3075 Fix podman network disconnect wrong NetworkStatus number 05444cb2c Fix per review request c995b5460 generate kube: handle entrypoint 96adf0e2a play kube selinux test case 2b8d6ca09 Increase timeouts in some tests 3c57bc845 Add test for Docker APIv2 wait 4a219aa23 Implement Docker wait conditions fc385806d Improve ContainerEngine.ContainerWait() 570e1587d Improve container libpod.Wait*() functions 6a6e86829 Cirrus: Collect ginkgo node logs artifacts ebc42f508 Bump github.com/containers/storage from 1.24.5 to 1.25.0 9dc795191 Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1 bc149a4dd bindings: attach: warn correct error d87f54fbb Fix invalid wait condition on kill dfa9a340a Makefile: make bin/* real targets! 3d105015f typo c40cd1be9 Bump github.com/onsi/gomega from 1.10.4 to 1.10.5 bda95bdb6 Update nix pin with `make nixpkgs` 1c50e09b0 System test for #9096 (truncated stdout) 432ee04c5 play kube selinux label test case e0bc8ffb5 Gating tests: diff test: workaround for RHEL8 failure bde23a021 [NO TESTS NEEDED] style: indendation 89df89b5f [NO TESTS NEEDED] fixup: remove debug code 7e4d696d9 Report StatusConflict on Pod opt partial failures bd0e22ed1 Honor network options for macvlan networks 095919680 Make slirp MTU configurable (network_cmd_options) ac3bd4c33 [NO TESTS NEEDED] Generated files 5a746c08f [NO TESTS NEEDED] Improve generator c68b59f97 play kube selinux label issue e9f936a29 Makefile: refactor ginkgo * ginkgo-remote 931ea939a Allow pods to use --net=none 323ab314e Bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0 077fd670b Update release notes for v3.0.0 ee8ee651d New 'make completions' target e11d8f15e add macvlan as a supported network driver 5352df226 Fix podman generate systemd --new special char handling eaafd975a Bump github.com/rootless-containers/rootlesskit from 0.12.0 to 0.13.0 51c11fea8 Endpoint that lists containers does not return correct Status value 3cfd4ce45 Fix --network parsing for podman pod create 9b5b03d1e list volumes before pruning 4a6d042c2 Docker ignores mount flags that begin with constency cdbbc6120 podman generate kube ignores --network=host 073f76c13 Switch podman stop/kill/wait handlers to use abi b842d97f5 [CI:DOCS]build instructions for macOS 280f332bd Vendor in containers/buildah v1.19.3 ca0dd76bf Honor custom DNS in play|generate kube d7c356552 Podman-remote push can support --format b74f939fb Bump github.com/containers/image/v5 from 5.10.0 to 5.10.1 8d979e093 Cirrus: Build static podman-remote c0bf0ba9e podman build --pull: refine help message and docs c450092fd Revert "podman build --pull: use correct policy" 75c3b3389 Bump github.com/containers/image/v5 from 5.9.0 to 5.10.0 59076888d Cleanup bindings for image pull 89bb8a9b3 Don't fail if one of the cgroups is not setup 1fac43654 Add support for rootless network-aliases c717b3cac Allow static ip and mac with rootless cni network 15caebfe5 podman build --pull: use correct policy bfc1b66be Cirrus: Fix running Validate task on branches f8bf509d1 Fix static build cache by using cachix 84f7bdc4d Switch podman image push handlers to use abi fee2fadc3 e2e tests: synchronize test results 21cb3043f podman-remote ps --external --pod --sort do not work. f79d68eea Fix podman history --no-trunc for the CREATED BY field c63599d36 remote exec: write conmon error on hijacked connection e9f4fb975 Fix #9100 Change console mode message to debug 02ec5299f Add default net info in container inspect 1ae410d19 Ensure the Volumes field in Compat Create is honored 35c89ccc5 [CI:DOCS]update state of restful service 0f668aa08 workdir presence checks 7b186dcb9 libpod: add (*Container).ResolvePath() 74a63df05 Fixup search 97f5e9458 Pass DefaultMountsFile to podman build 5350254f0 Ensure shutdown handler access is syncronized 33179c281 System tests: cover gaps from the last month 5623cb9d3 Fix --arch and --os flags to work correctly a86d23c75 Bump github.com/google/uuid from 1.1.5 to 1.2.0 75698b4b7 Fix typo 393a8f026 disable dnsname when --internal ef76b92b8 swagger.go: Fix compilation error 8c1768e38 Fix fish completion issue if the command is prefixed with a space a457c5c92 Bump golang.org/x/crypto 0ba1942f2 networking: lookup child IP in networks c182091b0 Small API test improvement for compatibility search endpoint 6e6a38b41 podman manifest exists c9baa6b93 Accept and ignore 'null' as value for X-Registry-Auth 4b8df5903 Turn on some remote test 94f96c78a Add a notice to remove pod before starting service ef654941d libpod: move slirp magic IPs to consts 5e65f0ba3 rootlessport: set source IP to slirp4netns device 37319dec1 vendor: update rootlesskit to v0.12.0 2fa67fe4b api: fix import image swagger definition 9d31fed5f podman volume exists 4e4d318b7 Cirrus: Upload swagger YAML in every context dbb99433d [CI:DOCS] Cirrus: Skip smoke task on branch-push 836fa4c49 Move the cni lock file into the cni config dir c1cd512cb Use random network names in the e2e tests 3fedb2b6d [CI:DOCS] Update project name in Code of Conduct f43046745 Set log driver for compatability containers c3cbaa355 Make generate systemd --new robust against double curly braces 6518391e8 Fix man page for fuse-overlayfs config in rootless mode a3621a7cf Cirrus: add bindings checks e7df73efa Fix handling of container remove 41a7e11c7 make bindings generation explicit f302ce578 make bindings generation more robuts 175fc3867 Revert "ginkgo: install on demand via `go get -u`" 37abec240 [CI:DOCS] fix go-md2man HTMLSpan warnings 9f6bb3563 CI: smoke test: insist on adding tests on PRs a45d22a1d podman network exists de05e5816 ginkgo: install on demand via `go get -u` d2ee3d815 runner.sh : deal with bash 'set -e' 4ccb0729b Add binding options for container|pod exists 683bab03f [CI:DOCS]Do not run compose tests with CI:DOCS 2df59829e simplify bindings generation 462994268 make: generate bindings: use vendor caaaa2c5e hack/install_golangci.sh: smarter install f38b7f48c golangci-lint: install to ./bin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>