crun: update to v1.14

Bumping crun to version 1.14-19-g9d01392, which comprises the following commits:

    3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
    b883e6c Make function arguments valid Python identifiers
    e0027bc Add no_new_keyring argument to make_context() Python function
    cb3ffb5 apparmor: Fix wrong determination whether crun is confined
    adb912d linux: harden chdir()
    f157e80 container: attempt to close all the files before execv(2)
    ed1abf9 container: simplify statement
    3aaadf3 ebpf: add fallback when bpf(2) fails with ENOSPC
    f2ade60 ebpf: add fallback when bpf(2) fails
    8b611f2 ebpf: try harder to bump RLIMIT_MEMLOCK
    d88d77e build(deps): bump uraimo/run-on-arch-action from 2.6.0 to 2.7.1
    f70fe0b cgroup, systemd: fix segfault if resources not specified
    667e6eb NEWS: tag version 1.14
    688f186 build(deps): bump actions/cache from 3 to 4
    8d96f08 build: drop gcrypt dependency
    5221ca8 seccomp: use blake3 instead of libgcrypt
    6d9fa42 cpuset: don't clobber parent cgroup value
    3873541 build: embed blake3 hashing function
    4f1f3d4 seccomp: include default_errno_ret in cache digest
    beb9565 utils: remove unneeded if statement
    9306457 ebpf: do not require MEMLOCK for eBPF programs
    87740ce linux: force umask(0)
    5078ce6 apparmor: stack apparmor profiles if nnp and confined
    c761349 NEWS: tag 1.13
    cb53ac2 build(deps): bump actions/upload-artifact from 3 to 4
    94a5950 cgroup: use "max" when pids limit < 0
    3b819bc Improve error msg on idmap mounts
    bace3a2 build(deps): bump github/codeql-action from 2 to 3
    4ddf5e6 criu: remove unneeded if statement
    8c27dea error: reset pointer after vasprintf failure
    c5643c4 status: fix double free
    ece4f9e utils: return a valid error if access fails
    68a9487 list: initialize variable
    ea27b13 libcrun: fix compile error without libseccomp and libcap
    487ba3a fix checking of relative idmapped mount
    49f439d ctx: drop no_subreaper bool

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
This commit is contained in:
Bruce Ashfield 2024-02-07 22:37:43 +00:00
parent a6cf2e0e7d
commit 2118aace8f

View File

@ -3,7 +3,7 @@ LICENSE = "GPL-2.0-only"
LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
PRIORITY = "optional" PRIORITY = "optional"
SRCREV_crun = "90b21ddd007f0306952b8b38aa66ddee58afffe4" SRCREV_crun = "9d013929d95873a11c8b1a3e6677d8afd6d2e029"
SRCREV_libocispec = "19c05670c37a42c217caa7b141bcaada7867cc15" SRCREV_libocispec = "19c05670c37a42c217caa7b141bcaada7867cc15"
SRCREV_ispec = "9615142d016838b5dfe7453f80af0be74feb5c7c" SRCREV_ispec = "9615142d016838b5dfe7453f80af0be74feb5c7c"
SRCREV_rspec = "720792f25ae6e9ee6b1332db698f37659e69ce8d" SRCREV_rspec = "720792f25ae6e9ee6b1332db698f37659e69ce8d"
@ -17,7 +17,7 @@ SRC_URI = "git://github.com/containers/crun.git;branch=main;name=crun;protocol=h
git://github.com/containers/yajl.git;branch=main;name=yajl;destsuffix=git/libocispec/yajl;protocol=https \ git://github.com/containers/yajl.git;branch=main;name=yajl;destsuffix=git/libocispec/yajl;protocol=https \
" "
PV = "v1.12+git${SRCREV_crun}" PV = "v1.14+git${SRCREV_crun}"
S = "${WORKDIR}/git" S = "${WORKDIR}/git"
REQUIRED_DISTRO_FEATURES ?= "systemd seccomp" REQUIRED_DISTRO_FEATURES ?= "systemd seccomp"