MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2025-07-05 05:15:25 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,335 Commits 38 Branches 0 Tags 8.9 MiB
gatesgarth-next
Commit Graph

1335 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bruce Ashfield
b5ae84170a containerd: update to v1.4.4 
Dropping the backported CVE patch, as it is part of this version bump,
which contains the followig commits:

   c64cfa03b runtime/v2/runc: fix the defer cleanup of the NewContainer
   60c139c9a gha: use sudo -E in some places to prevent dropping env-vars
   e0d452986 GHA: use setup-go@v2
   ac87e05f6 [release/1.4] update Go to 1.15.11
   425a6e4f8 night ci fix: add packages for ubuntu 20.04
   80de6e2b4 vendor: golang.org/x/sys 5cba982894dd4e8879e3ef0a0c308ceff39f6154
   92da2dbfa vendor: golang.org/x/sync 67f06af15bc961c363a7260195bcd53487529a21
   b24c8a2ec vendor: golang.org/x/net 69a78807bb2bb6d1599c68698c6b009505012083
   ebdd88cc0 vendor: sigs.k8s.io/structured-merge-diff/v4 v4.0.3
   fe197b9b5 vendor: update kubernetes to v1.19.10
   07e347903 adds log for each failed host and status not found on host
   18a271509 need to bring critest backup
   8c5422eb6 Fix error log when copy file
   f9d6a7604 runtime/v2/runc: fix leaking socket path
   24921417f Fix missing close
   bfe95947f install-runc: set GO111MODULE=off to use vendor
   520d179ed Prevent runc inheriting BUILDTAGS from containerd
   039c24043 move runc version to a separate file for easier consumption
   0e957e5ad Separate runc binary version from libcontainer version
   bd5bbbd1a Remove references to apparmor and selinux buildtags for runc
   fca4a0d1b script/setup: use git clone instead of go get -d
   4c875c81a cmd/ctr: fix export command
   bbde7b700 overlay: support "userxattr" option (kernel 5.11)
   4c2f6a7ab Fix advisory link in release notes for containerd 1.4.4
   3ba4a3171 Prepare release notes for 1.4.4
   cbcb2f57f vendor: update cri
   633bfb712 CI: cache ~/.vagrant.d/boxes
   e7851d743 CI: fix "ls: cannot access '/etc/cni/net.d': Permission denied"
   f4a6e163e Update continuity
   2ec4a495f Update gogo/protobuf to v1.3.2
   232cee448 Update to go 1.15.8

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:17:35 -04:00
Ralph Siemsen
300c3f0d13 runc: add CVE_PRODUCT to recipes 
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:15:15 -04:00
Ralph Siemsen
d7087b8395 containerd: add CVE_PRODUCT to recipe 
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:14:29 -04:00
Ralph Siemsen
8c0e83ff1a docker: add CVE_PRODUCT to recipes 
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:13:55 -04:00
Mark Hatle
920fe0dd6b xen: Remove deltask for setscene 
As of the gatesgarth you are no longer allowed to remove setscene tasks
as the eSDK generation expects for tasks to actually be executed.

Signed-off-by: Mark Hatle <mark.hatle@xilinx.com>
Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:12:56 -04:00
Ralph Siemsen
eeff98a314 docker-moby: update to v19.03.15 
Bumping to 19.03.15 to pickup bugfixes and security changes. The
following commits comprise the change:

420b1d3625 pull: Validate layer digest format
5472f39022 buildkit: Apply apparmor profile
b96fb8837b vendor buildkit 396bfe20b590914cd77945ef0d70d976a0ed093c
67de83e70b Use real root with 0701 perms
5eff67a2c2 Do not set DOCKER_TMP to be owned by remapped root
1342c51d5e Ensure MkdirAllAndChown also sets perms
7d75c1d40d Merge pull request #41731 from thaJeztah/19.03_container_1.3.9
d3c5506330 update containerd binary to v1.3.9 (address CVE-2020-15257)
1babdf81e7 update containerd binary to v1.3.8
35968c420d Merge pull request #41685 from ameyag/19.03-bmp-libnetwork-nil-deference
f80f6304e2 Bump libnetwork
837baebb74 Merge pull request #41635 from AkihiroSuda/rootlesskit-0.11.0-1903
4b181db52b bump up rootlesskit to v0.11.0
619f1b54c6 Merge pull request #41596 from thaJeztah/19.03_backport_swagger_fix
7487dca8a5 docs: fix builder-version swagger
bb69504a4a Merge pull request #41557 from AkihiroSuda/cherrypick-41156-1903
c7253a0e1a dockerd-rootless.sh: support containerd v1.4 shim socket path convention
b27122246a Merge pull request #41542 from thaJeztah/19.03_backport_fix_41517
88eec2e811 Also trim "~..." from AppArmor versions
ecd3baca25 pkg/aaparser: support parsing version like "3.0.0-beta1"
233a6379e5 Merge pull request #41522 from thaJeztah/19.03_backport_gcp_leak
74c0c5b7f1 Fix gcplogs memory/connection leak
88623e101c Merge pull request #41293 from thaJeztah/19.03_backport_fix_getexecuser
705762f23c Merge pull request #41494 from thaJeztah/19.03_backport_aws_sdk_go
5f32bd9ced awslogs: Update aws-sdk-go to support IMDSv2
bd33bbf049 Merge pull request #41314 from thaJeztah/19.03_backport_fix_racey_logger_test
426396f438 Merge pull request #41451 from thaJeztah/19.03_update_buildkit
406dba269c Merge pull request #41446 from thaJeztah/19.03_backport_swagger_fixes
50b33bd3cd Merge pull request #41312 from thaJeztah/19.03_backport_pass_network_error
519462f3df Merge pull request #41334 from thaJeztah/19.03_backport_bump_golang_1.13.15
64fffefffa Merge pull request #40408 from thaJeztah/19.03_backport_update_containerd_1.3
8cf9d50fc0 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc
a4e96a486f swagger: fix MemTotal units in SystemInfo endpoint
9fe291827a Bump Golang 1.13.15
a15a770e1b update containerd to v1.3.7
9380ec7397 update containerd to v1.3.6
80cef48453 update containerd to v1.3.5
fc8f88dc14 update containerd to v1.3.4
89a4208757 update containerd binary to v1.3.3
490c45b756 Update containerd to v1.3.2
56d897347d Update containerd to v1.3.1
d4c63720e9 update containerd binary v1.3.0
ec14dc44d1 Fix log file rotation test.
a958fc3e65 Fix flakey test for log file rotate.
89da709cb7 Check for context error that is wrapped in url.Error
88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns
83baeafc3c oci: correctly use user.GetExecUser interface
dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e
7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes
22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock
8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit
eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1
168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903
9dc455dffb bump up rootlesskit to v0.10.0
c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests
9eade7d03c docs: API v1.39: move system version response to definitions
4685e9ef72 docs: API v1.40: move system version response to definitions
d8f22d0307 swagger: move system version response to definitions
32366de5f9 plugin: fix a double RLock bug
ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt
d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit
892c228219 Remove apt.dockerproject.org from test
a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates
765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e
2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup
b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14
4d9397c268 swagger: sync updates to v1.39
51bd95dc95 swagger: sync updates to v1.40
d5ba93575c docs: sync API v1.40 swagger formatting with current version
12b7746a84 docs: sync API v1.39 swagger formatting with current version
0c6bdf5974 docs: add example calculations to container stats API
630185b4ae swagger: add DeviceRequests to container create, inspect example
d7423180e7 swagger: move NetworkingConfig to definitions
c30ff6885e swagger: reformat, and wrap to ~80-chars
7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint
1608292c09 Bump Golang 1.13.14
1763b4e88b Bump Go 1.13.13
5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit
23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef
789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr
0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit
9d6053eda2 Revendor hcsshim to fix image import bug
589b07262c vendor: Microsoft/hcsshim v0.8.9
e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f)
a40b877fbb Merge pull request #41133 from roidelapluie/bsd2
7dd9fdcfbe Enable client on netbsd and dragonfly
9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork
abb5beffff Merge pull request #41088 from thaJeztah/19.03_backport_invalid_cpu_shares_fix
b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
d5a82971a4 Merge pull request #41082 from thaJeztah/19.03_backport_bump_golang_1.13.12
5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc
058ea43c5c Bump Golang 1.13.12
ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure
77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6
b47e742558 Merge pull request #41027 from thaJeztah/19.03_bump_criu
b85d75e29a Merge pull request #41009 from tiborvass/19.03-fix-dns-fallback-regression
c104a50de4 integration: Add TestDaemonDNSFallback
9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b
d4e12315cd hack: add more debugging to understand exit codepath
4c24512241 Dockerfile: bump CRIU 3.14
ad0f0b3970 Merge pull request #40978 from thaJeztah/19.03_backport_bump_golang_1.13.11
29796375c9 Bump Golang 1.13.11
c1cc6ec81a Merge pull request #40988 from thaJeztah/19.03_backport_fix_gotestsum_install
8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded
811a247d06 Merge pull request #40970 from AkihiroSuda/archive-40939-1903
4d1885fb94 Merge pull request #40964 from AkihiroSuda/rootless-requires-slirp4netns-040-1903
0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir
9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0
ab567a4327 Merge pull request #40955 from tonistiigi/19.03-buildkit-update
ee3f3ece72 Merge pull request #40951 from AkihiroSuda/rootlesskit-095-1903
a76633684b vendor: update buildkit to a7d7b7f1
0803200be9 Merge pull request #40946 from thaJeztah/19.03_backport_fix_selinux_enotsup
706008a1da bump up rootlesskit to v0.9.5
57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling
c4c6cf6b6a Merge pull request #40921 from cpuguy83/19.03_log_rotate_error_handling
7d4dd91a52 logfile: Check if log is closed on close error during rotate
edf2c49410 vendor: pkg/errors v0.9.1
1adcc64f40 Merge pull request #40877 from thaJeztah/19.03_update_buildkit
e7349349fd Merge pull request #40850 from thaJeztah/19.03_backport_criu_3.13
3677003554 Merge pull request #40782 from thaJeztah/19.03_backport_switch_to_s390x_ubuntu_1804
63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa
2fbb374ab7 Merge pull request #40863 from AkihiroSuda/rootlesskit-094-1903
946d0ff67e bump up rootlesskit to v0.9.4
70e7d6fe4a Update CRIU to v3.13 "Silicon Willet"
f432f71595 Merge pull request #40563 from thaJeztah/19.03_backport_fix_windows_file_handles
47a6d9b54f Merge pull request #40565 from thaJeztah/19.03_backport_fix_bip_subnet_config
6a0995e0d8 Merge pull request #40831 from thaJeztah/19.03_bump_swarmkit
e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e
25b82fa9b8 Merge pull request #40801 from thaJeztah/19.03_backport_update_go_events
e149ff62fe vendor: update go-events to fix alignment for 32bit systems
90a31c4829 Merge pull request #40809 from thaJeztah/19.03_update_libnetwork
aa98b4f5d6 Merge pull request #40803 from thaJeztah/19.03_backport_bump_golang_1.13.10
860e7e273d Merge pull request #40800 from thaJeztah/19.03_backport_api_docs_fix_link
a58b52b037 Merge pull request #40799 from thaJeztah/19.03_backport_fix_test_filter
a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17
282567a58d Bump Golang 1.13.10
b66813eb45 api docs: fix broken link on GitHub
edbb1d9e95 Merge pull request #40784 from thaJeztah/19.03_update_buildkit
9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli"
4275aec641 Merge pull request #40592 from thaJeztah/19.03_backport_bump_golang_1.13
4b040147cf Merge pull request #40417 from thaJeztah/19.03_backport_test_fixes
08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7
1e1caccb13 Merge pull request #40780 from thaJeztah/19.03_backport_map_sync
5ba2bf37a8 Bump Golang 1.13.9
f432a04243 Update Golang 1.13.8
81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
6e1d159680 Update Golang 1.13.6
4241093b63 Update Golang 1.13.5
162fd8b856 Bump Golang 1.13.4
05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596)
f8d4276a89 bump golang 1.13.1 (CVE-2019-16276)
7df2d881f3 Bump Golang version 1.13.0
fed832e224 Update to using alpine 3.10
4581499848 Switch to s390x Ubuntu 18.04
f34a5b5af0 builder: fix concurrent map write
0df114a8f8 Merge pull request #40779 from thaJeztah/19.03_backport_unify_apis
9f5a5da4cb docs: add API versions v1.30 - v1.37
037d5a9e9a Merge pull request #40769 from thaJeztah/19.03_backport_seccomp_time64
5ed8f9a203 Merge pull request #40681 from thaJeztah/19.03_backport_schema2v1_dep_notice_on_error_only
284bbde996 seccomp: add 64-bit time_t syscalls
43b0a73273 Merge pull request #40758 from thaJeztah/19.03_backport_arm_matching
89f296a534 Merge pull request #40562 from thaJeztah/19.03_backport_39353_subgid_subuid
d12b6d24d1 Merge pull request #40628 from cpuguy83/19.03_backport_39360_swarm_log_fill_rate
359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e
1454987253 Merge pull request #40617 from SamWhited/19.03
021258661b Update libnetwork and DNS library
1db5199ddc Merge pull request #40564 from thaJeztah/19.03_backport_apparmor_fixes
6ed0f6ab78 Merge pull request #40652 from thaJeztah/19.03_backport_fix_backingfs
100d240d86 Move schema1 deprecation notice
4a4b3ed37f Merge pull request #40558 from thaJeztah/19.03_backport_buster_or_bust
57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9
68db0c1739 Dockerfile: switch to iptables-legacy to match the host
4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages
a070874828 hack/make: ignore failure to stop apparmor
237843a059 Dockerfile: align consecutive COPY lines
400b2850ff Dockerfile: order COPY lines by change frequency
ddfeaf32ff Dockerfile: sort packages alphabetically
cb813faebf Dockerfile: use build-arg for vpnkit
0499db23d1 Dockerfile: use spaces for indentation
c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower
c6511ee4db bump vndr v0.1.1
0fa8a0c575 bump vndr v0.1.0 to support versioned import paths
f3009e2f51 Use build args to override binary commits in dockerfile
92ca652fc9 Revert "dockerfile: update vndr to 85886e1a"
fdad16840c go-swagger: fix panic
075e057de5 Dockerfile: set GO111MODULE=off
fe2a25a785 fix backingFs assignment
e6c9e2736f Fix rate limiting for logger, increase refill rate
911ecc3376 Set the bip network value as the subnet
08420b1c95 AppArmor: add missing rules for running in userns
fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database
1a830501b7 Use FILE_SHARE_DELETE for log files on Windows.
dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid
4076c57b50 Fix more signal handling issues in tests.
68e1150357 DaemonCli: Move check into startMetricsServer
b813c398bb Add `FromClient` to test env execution

No change to libnetwork or cli.

Tested on arm32 via cli.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-27 22:46:38 -04:00
Robi Buranyi
e7d1a444b6 lxc: change download folder 
The URI has been changed to 'https://linuxcontainers.org/downloads/lxc'
by the site maintainers recently. Updating the recipe to reflect the new
path.

Signed-off-by: Robi Buranyi <rburanyi@google.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-03-12 08:22:55 -05:00
Bertrand Marquis
55ccbab52e xen: Bump SRCREV to 4.14.1 and current master 
Bump SRCREV version of xen recipes to use the latest 4.14 release
(4.14.1) and the current status of master.

This allows to remove some patches related to gcc 10 support which have
now been merged in Xen.

Xen-tools is modified to include the latest tools installed with Xen:
- a rename of the bash-completion,
- a new xl example,
- xen-access,
- xen-memshare (only available on x86).

A new patch to fix python and pygrub is added as the makefiles have been
deeply modified in 4.15 which require a new patch (but doing the same).

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-03-04 22:41:12 -05:00
Martin Jansa
a4439b76db libvirt-python: inherit python3targetconfig 
* otherwise libvirt build will incorrectly use host's gcc and fail with:
  gcc: error: unrecognized command line option "-fmacro-prefix-map=/OE/libvirt/6.1.0-r0=/usr/src/debug/libvirt/6.1.0-r0"

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-02-16 09:26:24 -05:00
Yanfei Xu
9fe997733d ceph: add support for python3.9 
Add support for python3.9, or it will do_configure failed.

Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-14 23:07:20 -05:00
sakib.sajal@windriver.com
6687be2233 ceph: add missing include for atomic<bool> 
ceph do_compile failed with error:
src/tools/rbd/action/Bench.cc:20:26: error: aggregate 'std::atomic<bool>
terminating' has incomplete type and cannot be defined

Add missing include to fix it.

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-14 23:07:13 -05:00
Bertrand Marquis
f7687c8b22 xen: Fix xenpmd compilation error on arm32 
Add patch merged in current Xen master to solve compilation errors on
xenmpd when Xen is compiled for arm32.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Change-Id: Ifd94aa30e1b3a1016156ead395688f594ad2711d
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-14 22:59:03 -05:00
Bertrand Marquis
17660b5e8f xen: Fix python libraries installation on multilib 
Fix install path for xen python libraries when multilib configuration is
activated (which is mandatory to compile xen for x86_64).
Depending on the version of Xen, the libraries are installed on lib or
on the nonarch lib directory so add both.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Change-Id: I1f7f81a4e9e1420bce55d1e4bfe03d98ac2c93a3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-14 22:59:03 -05:00
Martin Jansa
82bca23d6a xvisor: fix build with gcc-10 
* with gcc-10 (which doesn't include -fcommon by default) it fails like this:
  aarch64-oe-linux-ld: error: TOPDIR/BUILD/work/raspberrypi3_64-oe-linux/xvisor/git-r0/git/build/drivers/mmc/core/mmc.o: multiple definition of 'sdio_func_type'
  aarch64-oe-linux-ld: error: TOPDIR/BUILD/work/raspberrypi3_64-oe-linux/xvisor/git-r0/git/build/drivers/mmc/core/sdio_bus.o: multiple definition of 'sdio_func_type'
  aarch64-oe-linux-ld: error: TOPDIR/BUILD/work/raspberrypi3_64-oe-linux/xvisor/git-r0/git/build/drivers/mmc/core/sdio_io.o: multiple definition of 'sdio_func_type'
  aarch64-oe-linux-ld: error: TOPDIR/BUILD/work/raspberrypi3_64-oe-linux/xvisor/git-r0/git/build/drivers/mmc/core/sdio.o: multiple definition of 'sdio_func_type'
  aarch64-oe-linux-ld: TOPDIR/BUILD/work/raspberrypi3_64-oe-linux/xvisor/git-r0/git/build/drivers/mmc/core/core.o: previous definition here

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-09 23:03:58 -05:00
Martin Jansa
8e4b1e39a2 xvisor: skip QA checks ldflags and textrel 
* feel free to fix it properly, I don't use xvisor at all
  it just shown these 2 errors in my aarch64 world builds
  and this recipe needs more love than just these 2 issues
  like setting PV to something better than "git"

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-09 23:03:58 -05:00
Martin Jansa
8afc0b32da cloud-init: fix usrmerge QA error: 
* respect udevdir variable
* with usrmerge cloud-init triggers QA error:
  ERROR: cloud-init-20.3-r0 do_package_qa: QA Issue: cloud-init package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]
  ERROR: cloud-init-20.3-r0 do_package_qa: QA run found fatal errors. Please consider fixing them.
  because of:
  /lib/udev/rules.d/66-azure-ephemeral.rules

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-09 23:03:55 -05:00
Martin Jansa
19c3d8bab4 cloud-init: add dependency on systemd to fix installed-vs-shipped QA issue 
* without systemd in RSS, setup.py will fail to call:
  "pkg-config systemd --variable=systemdsystemunitdir"
  and then clound-init might fail with:
  ERROR: cloud-init-20.3-r0 do_package: QA Issue: cloud-init: Files/directories were installed but not shipped in any package:
    /lib/systemd
    /lib/systemd/system-generators
    /lib/systemd/system
    /lib/systemd/system-generators/cloud-init-generator
    /lib/systemd/system/cloud-final.service
    /lib/systemd/system/cloud-init.service
    /lib/systemd/system/cloud-config.target
    /lib/systemd/system/cloud-init.target
    /lib/systemd/system/cloud-init-local.service
    /lib/systemd/system/cloud-config.service
  Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
  cloud-init: 10 installed and not shipped files. [installed-vs-shipped]

  when systemd on host or in the systemd fallback uses
  different systemdsystemunitdir value than what OE packages with:
  FILES_${PN}-systemd += "${systemd_unitdir}/*"

  setup.py fallback:
  def pkg_config_read(library, var):
    fallbacks = {
        'systemd': {
            'systemdsystemunitdir': '/lib/systemd/system',
            'systemdsystemgeneratordir': '/lib/systemd/system-generators',
        }
    }
    ..

  ubuntu:
  meta-virtualization$ pkg-config systemd --variable=systemdsystemunitdir
  /lib/systemd/system

  OE (with usrmerge in DISTRO_FEATURES):
  cloud-init/20.3-r0$ pkg-config systemd --variable=systemdsystemunitdir
  /usr/lib/systemd/system

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-09 23:03:55 -05:00
Bruce Ashfield
515f39e453 guest: import cloud-init from meta-openstack 
Bringing cloud-init from meta-openstack into meta-virtualization to make
it more visible/obvious for use with Xen and k*s images.

Not only is this an import, it is a significant update to the package
and the way it is built.

Out of the box, it installs either systemd or sysvinit startup services,
templates and the main script/binary.

It is not expected that this will be useful out of the box, but will
need to be bbappended and have variables added to the main recipe to
make it flexible for more use cases.

But we can't gather those use cases, without the package being
available, so we integrate this as a starting point.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-05 14:39:32 -05:00
Bruce Ashfield
afef7f0635 container-base: make CONTAINER_SHELL a conditional image install 
In some scenarios (and package managers), packages post install
scripts may have references to /bin/sh.

The package manager doesn't know if the scripts will run on the
build host or target, so we get a calculated redepnds on /bin/sh

base-files and base-passwd fall into this category of having
post installs, but no need for /bin/sh on the target.

If you know what you are installing, and want the smallest
container possible, this package will satisfy the dependency when
assembling the rootfs.

To enable it, put the following in a configuration file (local.conf
or otherwise):

    PACKAGE_EXTRA_ARCHS_append = " container-dummy-provides"

This image will detect if the dummy provides arch is set, and will
automatically install the providing recipe, otherwise, busybox is
installed.

If you have a custom shell or want a different behaviour, the
CONTAINER_SHELL variable can be overriden.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-05 14:39:32 -05:00
Bruce Ashfield
e9a8756758 containers: add a dummy provider for /bin/sh and /bin/env 
In some scenarios (and package managers), packages post install
scripts may have references to /bin/sh.

The package manager doesn't know if the scripts will run on the
build host or target, so we get a calculated redepnds on /bin/sh

base-files and base-passwd fall into this category of having
post installs, but no need for /bin/sh on the target.

If you know what you are installing, and want the smallest
container possible, this package will satisfy the dependency when
assembling the rootfs.

To enable it, put the following in a configuration file (local.conf
or otherwise):

   PACKAGE_EXTRA_ARCHS_append = " container-dummy-provides"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-05 14:39:32 -05:00
Ricardo Salveti
74e0b8d2ac python3-docker-compose: upgrade 1.26.0 to 1.27.4 
Release notes for 1.27.4:
- Bugs
  - Remove path checks for bind mounts
  - Fix port rendering to output long form syntax for non-v1
  - Add protocol to the docker socket address

Release notes for 1.27.3:
- Bugs
  - Merged max_replicas_per_node on docker-compose config.
  - Fixed depends_on serialization on docker-compose config.
  - Fixed scaling when some containers are not running on docker-compose
    up.
  - Enabled relative paths for driver_opts.device for local driver.
  - Allowed strings for cpus fields.

Release notes for 1.27.2:
- Bugs
  - Fix bug on docker-compose run container attach

Release notes for 1.27.1:
- Bugs
  - Fix compose run when service.scale is specified
  - Allow driver property for external networks as temporary workaround
    for swarm network propagation issue
  - Pin new internal schema version to 3.9 as the default
  - Preserve the version when configured in the compose file

Release notes for 1.27.0:
- Features
  - Merge 2.x and 3.x compose formats and align with COMPOSE_SPEC schema
  - Implement service mode for ipc
  - Pass COMPOSE_PROJECT_NAME environment variable in container mode
  - Make run behave in the same way as up
  - Use docker build on docker-compose run when COMPOSE_DOCKER_CLI_BUILD
    environment variable is set
  - Use docker-py default API version for engine queries (auto)
  - Parse network_mode on build
- Bugs
  - Ignore build context path validation when building is not required
  - Fix float to bytes conversion via docker-py bump to 4.3.1
  - Fix scale bug when deploy section is set
  - Fix docker-py bump in setup.py
  - Fix experimental build failure detection
  - Fix context propagation to docker cli
- Miscellaneous
  - Drop support for Python 2.7
  - Add script for docs syncronization
  - Bump docker-py to 4.3.1
  - Bump tox to 3.19.0
  - Bump virtualenv to 20.0.30

Release notes for 1.26.2:
- Bugs
  - Enforce docker-py 4.2.2 as minimum version when installing with pip

Release notes for 1.26.1:
- Features
  - Bump docker-py from 4.2.1 to 4.2.2
- Bugs
  - Enforce docker-py 4.2.1 as minimum version when installing with pip
  - Fix context load for non-docker endpoints

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-03 16:30:29 -05:00
Ricardo Salveti
2f83558f46 python3-docker: upgrade 4.2.1 to 4.3.1 
Release notes for 4.3.1:
- Miscellaneous
  - Set default API version to auto
  - Fix conversion to bytes for float
  - Support OpenSSH identityfile option

Release notes for 4.3.0:
- Features
  - Add DeviceRequest type to expose host resources such as GPUs
  - Add support for DriverOpts in EndpointConfig
  - Disable compression by default when using container.get_archive method
- Miscellaneous
  - Update default API version to v1.39
  - Update test engine version to 19.03.12

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-03 16:30:29 -05:00
sakib.sajal@windriver.com
af5ed18c97 nagios-core: uprev v4.4.3 -> v4.4.6 
Minor upgrade including bug and CVE fixes namely CVE-2020-13977

Testing:
Built, booted and started nagios-core service without any errors.

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-03 16:29:42 -05:00
Diego Sueiro
cc99031c0b xen: extend SYSROOT_DIRS to include installed binaries 
If a recipe DEPENDS on xen we should include its binaries in the sysroot.
The do_install task also ships files to /boot and /usr/lib64. Hence, extend
SYSROOT_DIRS to include these paths.

Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-03 16:28:25 -05:00
Diego Sueiro
3620511fad xen: run do_deploy after do_compile and do_populate_sysroot 
When having rm_work and bitbake needs to re-run do_deploy, we need to ensure
that the ${B} is re-generated, otherwise the deploy-xen will be empty.

Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-03 16:28:24 -05:00
Chen Qi
d47e7143e0 nagios-core: use /run instead of /var/run in systemd service file 
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-27 23:24:47 -04:00
Chen Qi
3f8f47e31e nagios-nsca: use /run instead of /var/run in systemd service file 
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-27 23:24:47 -04:00
Chen Qi
28cca9a78e openvswitch: use /run instead of /var/run in systemd service file 
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-27 23:24:47 -04:00
Bruce Ashfield
9d5d904f8a containerd: provide 'ctr' along with 'containerd-ctr' 
Historically we copied ctr into the install as containerd-ctr, but many
different guides expect 'ctr' to be present. So we make the copy and
then create a symlink to make both variants available.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-27 14:27:35 -04:00
Bertrand Marquis
7a8167fa82 xen: Fix x86_64 xen-tools installation 
Python related things are installed in /usr/lib and not /usr/lib64 even
if xen-tools is built for x86_64 with multilib activated.
Use nonarch_libdir variable for all python related files.

Change-Id: I24e4336aaac4477efc5dc7426a6d9e909c98a6af
Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-15 10:57:16 -04:00
Robert Yang
28fda6d848 kubernetes: Fix race issue for installing go2make 
The src/import/build/root/Makefile.generated_files are called several times
during the build, so the following target which installs go2make will also run
several times:

$(META_DIR)/$(GO_PKGDEPS_FILE): FORCE

It runs automatically when the Makefile is called because of:
sinclude $(META_DIR)/$(GO_PKGDEPS_FILE)

So there is a race issue of go2make when parallel build:
hack/run-in-gopath.sh: line 34: build/tmp-glibc/work/corei7-64-wrs-linux/kubernetes/1.18.8-r0/git/src/import/_output/local/go/bin/go2make: No suc h file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-15 10:57:12 -04:00
Bruce Ashfield
80d83eacda containerd: fix x86-64 build 
Since our oe-core go infrastructure insists on both -pie and static
builds (for the most part), and that is not recommended by many
packages, we end up with errors like:

     containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/git/src/import/cmd/containerd-shim
    cannot find package runtime/cgo (using -importcfg)
     containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/recipe-sysroot-native/usr/lib/x86_64-overc-linux/go/pkg/tool/linux_amd64/link:
    cannot open file : open : no such file or directory

In a similar manner to:

  https://www.yoctoproject.org/pipermail/meta-virtualization/2019-March/004084.html

We introduce '-a -pkgdir dontusecurrentpkgs' to mask/fix the problem,
and continue to work towards non-static builds.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-15 10:52:22 -04:00
Bruce Ashfield
f59d55ec57 conf: add gatesgarth to compat, drop zeus 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-15 08:20:03 -04:00
Bertrand Marquis
1d86197846 ipxe: Fix gcc10 compilation 
Add ipxe patch to pass -fcommon flag to gcc during compilation.
This patch is required to have ipxe compiling properly with gcc10.

Without it the following error occur (and multiple others of the same
kind:
bin/blib.a(epic100.o):(.bss+0x0): multiple definition of `_shared_bss';
  bin/blib.a(davicom.o):(.bss+0x0): first defined here

Change-Id: Id9aed4cfe6bec9c0cbdb0b99271ddff472f1f0c3
Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
ef00e949b7 containerd: package runc shims 
With the newer containerd, we need the runc shims in order to properly
start a container. So we add the v1 and v2 variants to our install and
packaging.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
68a9860fdc containerd: depreciate containerd-docker 
The containerd-docker fork has been abandoned for a while now. We take
the first step in removing it, but making it generate a warning if
someone attempts to use it.

Next release, we'll consolodate the .inc and remove the recipe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
d3207bbd6f containerd: upgrade to 1.4.x 
Updating containerd to the 1.4.x release series, which contains the
following changes:

   97d690d20 Prepare v1.4.1 release
   42f387186 Always consume shim logs
   f247618a3 Report correct stats for windows containers
   cc5d1518f Update go list to respect build tags
   086e859d2 BUILDING.md: fix description about static builds
   16712ae49 bump cni version to v0.8.0
   1575c88cc seccomp: add `faccessat2` syscall.
   8bd2becea seccomp: add `openat2` syscall.
   4e3397e05 shimv1: downgrade poroccess missing log to debug
   d118c90d3 Ignore SIGURG signals in signal forwarder
   3ee6189fe Exit signal forward if process not found
   a1289d6b8 tasks: Monitor v2 tasks in initFunc as well
   1f823f76d seccomp: allow io-uring related system calls
   3d28944be seccomp: allow clock_settime when CAP_SYS_TIME is added
   e5cc7d527 seccomp: allow quotactl with CAP_SYS_ADMIN
   20273a803 seccomp: allow sync_file_range2 on supported architectures.
   357d10021 seccomp: allow personality with UNAME26 bit set
   0c9de6629 seccomp: allow syscall membarrier
   caa461167 seccomp: allow adjtimex get time operation
   2b80b7dc4 seccomp: allow add preadv2 and pwritev2 syscalls
   e71eccbca seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG
   feff914af runtime: ignore ErrNotExist when remove rootfs
   23e0ea27b snapshots/devmapper: fix rollback
   d68ddb0c0 Prepare v1.4.0
   6be2eccd7 Update releases page for v1.4.0
   d469bffcd CI: disable crun on Vagrant to decrease flakiness
   77a33e3db systemd: add license header to systemd unit
   8d39722fe Vagrantfile: increase memory
   41469ed72 Update version for 1.4.0-rc.1
   60fa35f11 Fix DCO commit limit
   d2472ecc5 Add CRI release build
   1c7312e5d Update containerd systemd unit file
   ccda53760 Create etcd user in cloud init.
   e973719cc use containerd/project header test
   cb7ffd4b0 Fix indent in cni.template.
   3e03ba7aa Update deployment and integration test
   9c5451792 Add TaskMax=infinity
   523b0b3c6 Remove `noSnat`
   231d291b2 Use v2 config.
   1e1688d21 Use per-pod shim.
   87bd84a7b Add DefaultRuntimeName option.
   cfab98a5f Use ctr images import.
   5e3ac16cc Add `cri` as required plugin.
   5b9d8476e Use runc.v1 for now for debugging.
   e6e272e74 Enable runc.v2 as the default runtime in test.
   d19aa0fd2 Use local env to avoid writing to passed-in readonly env.
   ee6d69bbc Set default "" to extra runtime handler.
   474c79bd5 Expose vars to configure an additional runtime handler
   ce12477f4 Support docker 18.09 in the test script.
   146712101 Remove the unused `health-monitor.sh`.
   201ad4d3c Support netd in GCE bootstrap.
   5ce705750 Serve streaming on localhost by default to match k8s 1.11 default.
   b553fdaf3 Remove crictl on GCE for all cases.
   d8ce08fd9 Set stream server to serve on localhost on GCE.
   1629bab7f Make max container log line size configurable through cloud init.
   042378dcf Disable TLS streaming to work with new kubelet streaming proxy.
   37f2ecad9 Update cni.template
   b58b6fef8 Disable restart plugin on GCE.
   f938a166c Fix kube-container-runtime-monitor.
   91f8e61bd Use crictl installed in kube-up.sh
   5161f663e Add `unix://` prefix for socket addresses used by CRI remote client.
   1b995fcaf Add KUBE_CONTAINER_RUNTIME_NAME to fix fluentd support.
   48457a254 Try using preloaded containerd if no version is specified.
   c67a38b0b Add log level support.
   4453aac00 Improve gce bootstrapping in various ways.
   1bd3cdc57 Add cni config template support.
   d520fac50 Enable TLS streaming in all the setup.
   cdb4aec93 Use systemd service cgroup and oom score adj.
   af8bd8068 Fix for kube-up.sh and update several documments.
   005da4a9b Replace `ctrcri` with `ctr cri`.
   0e2bd216c Update GCE cluster bootstrapping and e2e test
   59e65e1f3 Enable container log rotation.
   85b4e69c9 Do not block on stream server close.
   2ea6584ca Add initial wait for health-monitor and use pkill -x.
   56b7ef2c4 The ENV is finalized as KUBE_KUBELET_EXTRA_ARGS.
   24a3a0a06 change crictl sandboxes to pods; other references to sandboxes
   8bc30e7a2 Update ocicni to main stream.
   a01071558 Add a separate CLI for cri-containerd `ctrcri`.
   a843a3064 Use registry-1.docker.io as backup
   ec649079a Put version into metadata so that version won't be changed across restart.
   7cbc1c8dc Set registry mirror.
   9f0816ac4 Configure container runtime cgroups for cgroup.
   be72f47ec Add runtime cgroup and fix a cli panic.
   680e21c43 Update all glog flags to `log-level`.
   d50b9dd64 Update containerd to 6c7abf7c76c1973d4fb4b0bad51691de84869a51.
   869ea6b0c Add document for kube-up.sh
   30cbfb62e Add OS and arch in release tarball.
   0512d1e0b Add `cluster` directory and health-monitor.sh.
   a1736f98a vendor: containerd/cri 4e6644c8cf7fb825f62e0007421b7d83dfeab5a1
   15fa7f378 vendor: update kubernetes v1.19.0-rc.4
   4a0ac319c vendor: golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4
   f80b4dc58 vendor: golang.org/x/net v0.0.0-20200707034311-ab3426394381
   5a9a6a145 vendor: golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
   aa40ebb41 vendor: json-iterator/go v1.1.10
   b4376e986 Update Vagrantfile for testing SELinux
   55c9eade3 Bump Golang 1.13.15
   e3e2c3946 update docs/rootless.md
   843360298 update runc to v1.0.0-rc92
   e20a5079e Add --cpu-quota, --cpu-period flag to ctr
   3cc2be2a8 Update cri-tools to v1.18.0-100-g2bf7674 for Go 1.15 compatibility
   628855923 Prepare 1.4.0-rc.0 release
   74e9aa7ab snapshots/devmapper: don't hardcord the platform strings
   adeba792f Add namespace query parameter for registry proxying
   5a190c707 Remove seccomp/Linux deps steps in GH Actions
   6988b4d64 remove `seccomp` buildtag
   362b7167a vendor: update cri (no more libseccomp cgo dependency)
   03b5a053e remotes: mark GetTokenScopes public
   b43a01a22 Change nodeset to `ubuntu-xenial-arm64-openlab`
   04b98bb0e Deprecate legacy shims
   b87023185 vendor runc library to v1.0.0-rc91-48-g67169a9d
   02afa9425 Add --cpus flag to ctr
   aa56cfc0a Import Windows manifest into test build, rather than copying by script
   5b1627410 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165
   1ec1e9eab Add Windows 10/Windows Server 2004 for integration tests
   faa4ff56e Usefully fail tests with unknown or bad Windows Build version
   3795dd41a Always report server log from verbose integration test runs
   4318f93f9 Add Spec() method to task
   3611efdce update cri to 8448b92d237e877bed1e4aa7a0baf0dee234
   1b320bcc2 update for cni config
   c2081369c Add doc about remote snapshotter
   403dc83a2 mount: retry executing the helper binary on ECHILD
   06fb93e0f Reject host-mode networking on Windows
   ca15cb0d8 Fix incorrect (cut-and-paste) method comment
   c8b14ae4c Set content labels based on content type
   d7b9cb001 shim: move event context timeout to publsher
   b97c660e1 cgroup2 CI: add RUNC_FLAVOR=runc
   1a7bbd1f7 vendor: update containerd/cri
   96099550b parseIDMapping: accept 32-bit IDs
   089672fff Bump Golang 1.13.14
   c383436af snapshots/devmapper: suspend a device to avoid data corruption
   71f11db8a Annotate bare ErrNotImplemented returns
   061d338ec CI: run CRI tests on Fedora 32
   decbb0499 RELEASES.md: fix a dead link
   b2ee43206 CI: add back shim v1 test
   c4418bb3a CI: remove an unreferenced variable
   212c29833 Updates to go-systemd and selinux
   b47c7ec27 Update to later version of critools with timing fix.
   7af3d7e17 Don't clash with GH Actions runner's containerd
   c520f819a Bump Go 1.13.13
   7119a2a15 platforms: don’t log arm variant error on darwin
   fc0448518 Update version to 1.4.0-beta.2
   cc493eba3 vendor: containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff
   7855b0a78 Make title similar with other CI workflow jobs
   852587cd1 [events/exchange_test] Fix deadlock in TestExchangeFilters
   d47c0392d Updating build doc to require Go 1.13
   09f453394 CI: {v1, v2} -> io.containerd.runc.{v1,v2}
   d7e59b141 enable removecontainer to forcibly remove containers
   963625d7b Update runc to v1.0.0-rc91
   c041970e9 update crun to v0.14
   a6dd1f27d update urfave/cli v1.22.1, go-md2man v2.0.0, blackfriday v2.0.1
   68b736ddf cio: should not open fifo for stderr if terminal
   57a9f0b50 Minor actions fixes/updates
   148cc8f71 [events] Fix deadlock in TestExchangeBasic
   aa191deff Change log for unknown mt to debug
   45c28f56b Add ability to use remapper labels versus remapping snapshot helper
   c76bf5504 Make unique snapshotter opt for label-assisted remapping
   331793118 allow user namespace remapping using snapshotters
   e977564a8 seccomp: allow 'rseq' syscall in default seccomp profile
   e7f069e2c describe content flow and dependencies
   b96f5f4b5 Fix deprecation warnings in CRI tests due to missing unix:// scheme
   fd99b6566 decrease log level of cgroup2 ToggleController error when running in UserNS
   2b0a994cc explicitly fail apparmor when !linux
   bebfbab03 vendor: update bbolt to v1.3.5
   1a83f9a63 Bump Golang 1.13.12
   03ab1b2ca Add config for allowing GC to clean unpacked layers up
   ee734e867 Add test case with backticks
   ea0687769 vendor: golang.org/x/text v0.3.3
   f1a469a03 shim v2 runc: propagate options.Root to Cleanup
   8897e1520 Add more test cases with single quotes
   cb91b1724 Add testcase containing mountpoint with escaped backslash
   87f9fdb06 Cope with double quotes in Linux Mountinfo
   4c49ff88c integration: assume TEST_RUNTIME to be io.containerd.runc.v2 by default
   785f4c5cd Bump CRI for 1.4x release
   730b7a932 Change the type of PdeathSignal
   d656fa38c restart plugin: support binary log uri
   0f831093c Update usage of whitelist in project
   d36810d66 overlay: use index=off to fix EBUSY on mount
   7213cd89d Process I/O: Fix goroutine leak
   ae08491bf waitForPid: fix goroutine leak
   8fcd5a1f2 Streamline hcs shim release flow
   ef0cf1264 Match version used in CRI project
   2be80f999 Add windows hcsshim to release pipeline
   3e95727f3 Make killing shims more resilient
   e64b14820 Revendor CRI to 62c91260d2f43b57fff408a9263a800b7a06a647
   3dd8242a6 Add host specific headers
   2f601013e cgroup2: implement `containerd.events.TaskOOM` event
   62fd1750e Revendor CRI to 8898550e348932e406049e937d98fb7564ac4e7a
   2bc4e90f6 Don't inadvertently clip release notes
   636c533d9 Add ctr subcommand to print default OCI spec
   230cf6ded Add unit test for func in remotes/docker/handler.go
   bb2b2825b Add release GH Action triggered by signed tag
   8f1ddb142 Update release for 1.4.0-beta.1
   c376f4f76 Move Windows testing to GH Actions
   322628347 Fix client tests to work on Windows.
   b8ccdcb07 Add `ctr` flags for configuring default TLS credentials.
   c5273930b Update CRI to 52c2c6b5df15790b671ebd6cbbc6039a4d30
   af131d725 cgroup2 CI
   e34bf08e5 riscv64 arch does not support -buildmode=pie
   0c9b05fa6 Fix image usage calculation error
   84619ee99 Fix configurations with no server provided
   06b0cd45b Fix nil pointer errors
   03755821d seccomp: remove the unused query_module(2)
   5765991f2 seccomp: Whitelist `clock_adjtime`
   db74d3115 unpacker: Fix data race and possible data corruption
   232518252 docker: fix data race on err
   d07a71b97 Bump Golang 1.13.11
   0207b7ff0 Enable running CodeQL on PRs that modify Action
   1a06884f1 Add CodeQL Analysis workflow
   563964e9d Trigger nightly builds on pull reuqest events
   77ab0104e Add release notes for 1.4 beta
   6eeed18cb vendor: opencontainers/go-digest v1.0.0
   7cdacdda8 Set codecov to not comment on PRs
   3e7bbb8a4 vendor: update containerd/cri, remove "docker/distribution" dependency
   9898dc2a6 Code about `task` in "README.md" is out of date
   f09e99909 vendor: containerd/go-runc 7016d3ce2328dd2cb1192b2076ebd565c4e8df0c
   d9d1d5b62 vendor: containerd/fifo f15a3290365b9d2627d189e619ab4008e0069caf
   c5078a5b7 vendor: containerd/continuity d3ef23f19fbb106bb73ffde425d07a9187e30745
   b437938d2 Transfer error to ErrNotFound when kill a not exist container, also add test case.
   2c77dc63a vendor: update containerd/cri to current master
   a4f8be1d4 vendor: kubernetes v1.18.2
   0d198fd09 vendor: roll docker/distribution back to latest (v2.7.1) release
   1b9640496 ConfigureHosts: remove deprecated DualStack option
   e9e765d6e Use tagged versions in vendor file
   bd3210d29 remove releases/*-beta.toml
   ed261720c Update ttrpc/typeurl to v1.0.1
   dc92ad652 Replace errors.Cause() with errors.Is()
   f212e7d1f vendor: github.com/pkg/errors v0.9.1
   63b7587cd snapshots/devmapper: fix race windown causing IO hangup
   24b331ad1 omit sudo when EUID eqto 0
   0088c2de8 sys: RunningInUserNS(): use sync.Once
   76c62f272 sys: simplify RunningInUserNS to original implementation
   6a9b94927 Remove remaining uses of libcontainer/system package
   37c839e59 sys/proc: remove GetSystemCPUUsage as it is unused
   1b66fecad Integrate sys.SetSubreaper, sys.GetSubreaper in sys/reaper package
   fffea312a move sys.Reap() into sys/reaper package
   295e74008 sys: remove custom setChildSubreaper const
   ec12d3042 vendor: sirupsen/logrus v1.6.0
   23aab35fd Remove libcontainer from containerd-shim
   ae7cdc814 vendor: update containerd/cri
   c1096864a Update to latest hcsshim - 0.8.9
   ea182aec8 vendor: sirupsen/logrus v1.5.0
   68f151593 vendor konsorten/go-windows-terminal-sequences v1.0.3
   046a520c9 vendor: update containerd/cri dc7afe8fbe53db06c3f883f6f8c9895a9dfb2314
   8e76d18ef remove if condition because it is handled by the sdNotify daemon func
   1a10211e3 WithLease: always return context and done fn
   98b30f469 Add commands to mount/unmount image from ref
   cd0e62f5c Allow more time for containerd to start for integration
   9687ba631 test: TestRuntimeWithEmptyMaxEnvProcs should cleanup
   b566859ac .zuul: update go version to 1.13.10
   32649fe30 Fix retrieval of golangci-lint specific version
   126e497e6 vendor: update ttrpc with 6e416eafd26e6e738df716b21d421d5b59702bb4
   0116352e1 runtime: ignore ttrpc.ErrClosed when delete task
   917e7646a Add binary IO tests
   9175401b2 Cleanup binary IO resources on error
   0dc7c8595 Don't use timeout package when stopping shim logger
   857408315 This config no longer exists, so remove from docs.
   e79d666cd vendor: update containerd/cri 61b7af7564602234662562a9d37e772f5a54facb
   61597b431 Disable Travis CI on master
   74ceb35f5 Small fixes to our Actions CI workflow
   7a252f3ca Build runc with selinux support
   041545cd6 Fix protobuild and CI check protos
   e3bc5c487 Use GH Actions CI status for badge
   49200a1dd CRI plugin needs selinux tag as well
   d97cca47e RELEASES.md: update release1.2 status
   4615111ba content/local: validate digest before calculating path
   a6828e8c3 CI: Some Go 1.13.10 updates that were missed
   7da1e13b5 Bump Golang 1.13.10
   35c14c6b5 sys/mount_linux: use pipe for communicating mount result
   f328f61b8 Update to selinux 1.5.1
   f7c2bf544 Migrate functions to actions
   d7c2513ff Update integration test timeout
   0caa23315 Rework shim logger shutdown process
   067aba732 Add test for default setup for host configuration
   d9a1c3f9e bugfix: add default host config if not set
   6d4429edd Setup dependencies between jobs
   e598e5e0c Add CRI tests
   4175ebf23 Move integration tests to Github Actions
   599547d9c Make binaries with Github Actions
   3968fb0a4 Revert "vendor: update go.etcd.io/bbolt v1.3.4"
   056d60224 vendor: update go-events to fix alignment for 32bit systems
   4fb3410f6 vendor: cilium/ebbf 4032b1d8aae306b7bb94a2a11002932caf88c644
   e822296fc vendor: runtime-spec v1.0.2
   3261fb5c4 vendor: containerd/cgroups b4448137398923af7f4918b8b2ad8249172ca7a6
   aa76d9537 Bump Golang 1.13.9
   ad090e67e man: move ctr.1, containerd-config to section 8, and fix generation
   356782cb4 Makefile: man page: rename containerd.1 to containerd.8
   547301cb0 Update ctr resolver to use new config package
   17b6050d2 Add Docker resolver configuration package
   dc131aa86 support loading certs from a directory
   c263c5b14 Add unit test for func in remotes/docker/handler.go
   c8d9c6f2a Add unit test for func in remotes/docker/handler.go
   fb9e3d9f2 vendor: update go.etcd.io/bbolt v1.3.4
   e4cbbc78b Move checks to Github actions
   c1a218195 Add docs for build tags used by cri.
   d654dbafa Allow the id for cgroup metrics to be changed
   78ab1d13d Correct logic of FIFO cleanup
   92a36dc10 Add version numbers for newly tagged repos
   0c78dacbc Move isFifo from process/io to sys/ and make public
   9529c69b8 seccomp: add 64-bit time_t syscalls
   ebd745f91 ctr: do not assume runc options by default
   e2269f2ae archive: skip chmod IsNotExist error
   bd2265300 Add devmapper configuration examples
   5ef66e48f ParseSignal: drop add'l check for numeric signals
   649f2aac6 add -v to shim binaries
   4ff9d6996 Increase golangci-lint timeout
   c00cf9a67 vendor: containerd/cri 92cb4ed9786a6cd271152ba1f862183d84701003
   488d6194f fix dial error when clean up a dead shim
   6e638ad27 Nit: fix use of bufio.Scanner.Err
   4326fc624 Update Golangci-lint v1.23.8
   4756258fa service_windows.go: remove unused "service" variable
   a9bd451ab Avoid duplicate imports of github.com/gogo/protobuf/types
   cad67b73f Update btrfs dependencies in docs for debian buster and ubuntu 19.10 * Fixes: #4090
   632023698 Partial revert of sys: windows: use golang.org/x/sys/windows
   0a7fd55f3 sys: deprecate EpollCreate1, EpollCtl, EpollWait
   7b06192f6 sys: windows: use golang.org/x/sys/windows
   1b7d1e81b vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0
   ddae905b8 Support NOTIFY_SOCKET
   b78dfbdfb vendor: golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf
   ba6796abd vendor: update kubernetes v1.18.0-beta.1
   f3d062423 vendor: sigs.k8s.io/yaml v1.2.0
   04c805e63 vendor: github.com/google/gofuzz v1.1.0
   12c7d6976 vendor: update containerd/cri 1a00c068864a59835ff442e0dddfa5a254be6bb3
   5607b23b0 vendor.conf: move some imports to match position with containerd/cri
   e3ab8bda6 Avoid allocating slice for finding Process
   1239f5403 export cgroups collectors
   8c9e84174 RELEASES.md: update release status
   e0a8fe7cb vendor: bump golang.org/x/crypto bac4c82f6975
   a687d3a36 Check error return from json.Unmarshal
   a3ca8a0df Add linux resource oci.SpecOpts
   00e6be9f4 Add ctr c info --spec flag to output spec
   3be12fe1c Do not loose snapshotter options
   8cddb5f91 Pass snapshotter opts during Pull
   a3685262f snapshots/devmapper: do not stop snapshot GC when one snapshot removing fails
   b6bf7b97c devmapper: async remove device using Cleanup
   c7eec0c17 Fix file header in builtins_cri.go
   f2edc6f16 vendor: update gotest.tools v3.0.2
   026e43806 Update to a released version of opencontainers/selinux (1.3.3)
   f8ade8deb Use named error return for service#StartShim
   985b26f2f AppVeyor: disable download progress on choco installs
   4105135e3 fix killall when use pidnamespace
   4dd75be2b Unify dialer implementations
   8e448bb27 vendor protobuf & grpc
   c134a9bef Use spec's mountLabel when mounting the rootfs
   1d888ad6a cleanup the image synchronously for Usage case
   18e581dd9 bugfix: cleanup dangling shim by brand new context
   fed8890e9 Enable CRI plugin for Windows builds as well
   84464b801 v2: Cancel shim log ctx when ttrpc is closed
   f3652d068 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382
   773adf7ab Remove the executable bit for api/*.txt files
   8e685f78c support building with BUILDTAGS="no_zfs no_aufs"
   61596169b Update .mailmap
   f44d36099 Update .mailmap with changes from release-branches
   499ab8a99 Update Golang 1.13.8
   246a560ed script: use github.com/kubernetes-sigs/cri-tools directly
   75d0c5f2e Fix incorrect comment from copy/paste of starting script
   0dd6d24d2 Fix reference to LICENSE in README.md
   89de113de Support 32-bit userspace on 64-bit ARM cores
   d8a0d29c2 Set octet-stream content-type on put request
   348e683ce Fix zsh autocomplete script
   263ab7014 vendor: bump gopkg.in/yaml.v2 v2.2.8
   4c3827889 vendor: update containerd/cri c0294ebfe0b4342db85c0faf7727ceb8d8c3afce
   f0652e143 Make tests less flaky
   bb8af922b Add support for custom wcow and lcow sandbox scratch sizes
   5e6d56ee2 Fix startup_delay within default configuration
   833701165 ctr events: do not exit on an error
   200241163 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1
   32ba75f0f Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
   e42110f32 Fix broken link to release-tool
   e2e07c9bc RELEASES.md update links to latest v1.2.11 and v1.3.2
   0dc69620b update dependencies of containerd/cri
   53ced5ffe update to latest containerd/cri (master)
   faf03c3d2 Pick up fix for CVE-2019-16884 in opencontainers/selinux
   923c05bed Bump to opencontainers/runc new version - v1.0.0-rc10
   e44d00865 Appveyor on_success field should be an array.
   a224937d2 Disable CGO for AppVeyor build steps
   75af17946 Pull: create image record after blobs download
   45a17cffb Vendor Microsoft/hcsshim with CGO removal
   94964b36d Update Golang 1.13.6
   22b73a9a7 vendor: bump containerd/btrfs to 153935315f4ab9be5bf03650a1341454b05efa5d
   1189cc40f snapshots: fix flaky TestMetastore
   35a8e6e58 sys: clean up process after test
   3eb57b01b Added IO metrics
   e859b8a92 gc: increase sleep time in test
   486d33631 test runtime v2 CPU settings
   66508589d fix: eventfd leak for v2 runtime with v1 cgroups
   9456040ac fix: eventfd leak
   2f0db8e2a vendor: bump prometheus/client_golang v1.3.0
   e10c91187 vendor: bump prometheus/client_golang v1.1.0
   845b91d6b vendor: bump prometheus/client_golang v0.9.4
   04506b87d vendor: bump docker/go-metrics v0.0.1:
   99911ea66 vendor: bump prometheus/procfs v0.0.8
   ed6ae8186 vendor: bump prometheus/common v0.7.0
   c02dc24ec vendor: bump prometheus/client_model v0.1.0
   77a3780c2 vendor: bump beorn7/perks v1.0.1
   e1221e69a revendor containerd/cgroups
   4d62d8795 bump microsoft/hcsshim to 0.8.7
   95fbf3dc2 Fix unpacker to pass use apply options
   3af3a7602 Fix filter errors
   7b52bc506 Add unit test for func in filter.go
   cd1cad9d5 Support disk usage in windows-lcow snapshot
   f3090ce80 ci: set pipefail in zuul script
   90cd777a6 platforms: fill default arm variant when parse platform specifier
   b553bc14a update docs/rootless.md
   94d499843 Add Makefile variable to skip test packages
   123af61c0 Add Cleanup to snapshot API
   465c11dc8 Fix build with gccgo
   52e477f94 Fix outdated comments
   b127b666a ctr: support $CONTAINERD_ADDRESS env var
   a4b423b19 overlay: test actual Opts
   067a66b90 .travis.yml: run test with crun
   1fb1d9321 v2: Fix missing ns when openShimLog on windows
   a18f77bea create local version of introspection service
   e739314ed mount: support FUSE helper
   87e2a9595 Fix a typo in task.go
   d82fa4319 v2: Call shim.Delete at first when create is failed
   493a36de9 Move label filter to snapshots package
   06f6ea099 switch nighly builds to Go 1.13.5
   c07e356d2 Update Golang 1.13.5
   072dfbaf3 Support pushing a specific platform of a multi-architecture docker image to a registry
   4ccb7aa22 Enable to propagate necessary information to snapshotter during unpack
   496836c09 Update containerd/console vendor for fix
   a057bfbd7 Add more adopters to ADOPTERS.md
   facedf898 Remove an empty line
   05d192929 Update checkImages to accept images.MediaTypeDockerSchema2Manifest
   c4ed3ff1e Replace ocispec.MediaTypeImageManifest with manifest.MediaType
   fbd46d709 runtime v2: Close platform in runc shim's Shutdown method.
   02dcf384b Disable criu tests in Travis CI
   62adc516d sys: mkdirAs: do chown if dir already exists
   49e7039a8 cpu metrics consistency
   b9d9bdf1f make cpu metrics consistent with v2 docs
   929ab521c fix system usage naming
   659c971ca task metrics fix
   23dbae3e7 Schema name fix
   17d61d6b7 Units fix
   f287bc229 Schema names fix
   6bfb24824 Fix prometheus metrics units
   b98cc7918 Added memory and cpu metrics for cgroupv2
   75efbaf67 Attempt to make device mapper snapshotter tests less flaky
   9eef69e3a Update after review comments
   43fca9eba metrics: rename pids_v2 to pids
   a022c2181 Improve host fallback behaviour in docker remote
   fa62b6d23 Use logrus instead of printf for warning
   08517e586 Allow empty scope authorization
   499fbb033 Improve install scripts
   e0011978f start.go: Improve help text
   9862cb8f8 support user remapping in ctr
   b02e20f12 cgroup2: enable controllers automatically
   8f870c233 support cgroup2
   caeacfce3 Correct grammar/typo in BUILDING.MD
   51a6813c0 Split uid and gid user ns remapping in oci
   30d92eff1 Defer layer download until unpack
   9d5a095b0 Bump containerd console for os.File changes
   cd23ad244 Bump go-runc for buffer race fix
   6a22a8fc9 Return the underlying images metadata
   787be0efe Modify ctr run to search for read-only flag instead of readonly
   cfb4f734d Make sure for next release branch appveyor runs
   f92470b3e Fix dependency in BUILDING.md
   a6b6097c9 Fix container pid.
   726dcaea5 update cpuinfo to make variant matches aarch64 and so on
   6fa9a42ea vendor.conf: sort imports alphabetically
   a44189d2f vendor.conf: pin all dependencies by git-sha
   55ea3dc9b vendor.conf: reformat to use columns
   8da434668 Fix cleanup error on content client test
   252d6550f Update cri and docker vendors
   8a66dc6ed bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def
   526c0db69 Support target snapshot references on prepare
   d1261b508 Update snapshot parent filter property to always exist
   11ef041ff Update golang.org/x/sys to recent commit
   afd33bce8 test add tests to spec_opts
   731e144a4 devmapper: update example base image size in README
   19f7f3ccc test: Do SynchronousDelete cleanup before testing ImageIsUnpacked
   0bb48aef0 Add `--log-file` flag for windows service.
   c56059162 Avoid deadlock in unpacker.
   32ef2e630 Update README
   82651d386 Cross build nightly builds (arm64, s390x, ppc64el)
   c479156b8 Add Github workflow for nightly builds
   856ea3055 Add client unpack opts
   3db1c3b8f Better support windows binaries.
   843423ec3 snapshots: return error if readSnapshot fails
   5bf2c6fc2 Fix panic on reference.Spec.Hostname()
   fda652be5 Update name for btrfs headers package
   a647407ca Fix dependency in BUILDING.md
   608791bfc Update to Golang 1.13.4
   cfb425fc1 Update .mailmap to reduce duplicates
   15669a1d3 Update to Golang 1.12.13
   8f74de9e9 ctr: allow specifying --runc-systemd-cgroup
   7f5d90076 ctr: allow specifying --runc-binary
   0f4374169 Add proto path /usr/include to Protobuild
   4c99c8132 mips: -buildmode=pie is not supported for the mips arch
   fdf7a795b Clarify requirements for identifiers validation
   76aa4e546 Use common identifiers package with less restrictive regex
   84879b7c4 Add CGO makefile flag
   7c016b655 add tests to server_test
   8f9eff4fe Support disk usage in windows snapshot.
   d21f0f116 windows process shim installer
   a2688b972 bring back aufs and zfs
   78be73662 Return not found error if no platform matched.
   d12b53a07 ppc64: -buildmode=pie is not supported
   5e5584196 Makefile: Drop vndr whitelist
   20e844a22 Use logrus trace support.
   66aa1d3ef Add snapshot walk implementations
   e8c14c07c Added filters to snapshots API
   f593efdf0 RELEASES.md: 1.1 EOL
   aaccfcbe2 Fix `containerd config dump`.
   c224edc5c apply: use naive applier when running in UserNS
   37b56cafc Add ctr metrics support for Windows/LCOW containers
   178469e2a Update Microsoft/hcsshim vendor
   3bf461ae8 Move autocomplete files to contrib/
   885232b72 bump google.golang.org/grpc v1.23.1
   6356e55be Update Golang 1.12.12 (CVE-2019-17596)
   074b453ac vendor: call vndr to remove useless pkgs and update vendor
   7177af84a Allow 202 response code for commit
   d52cbc19b snapshots/native: ignore xattr errors during CopyDir
   f8cca26f3 Handle large output in v2 shim with TTY
   d5b7bf51a Move flag.Parse in tests to TestMain
   54257bb5e Add local-fs.target to service file
   a6d3f4d30 Add device opts to ctr --privileged
   ffcb1cc9b Fix delete error code on the containerd daemon side.
   036db34f3 build: Fix manpage generation
   06be794cb Fix shim delete error code.
   901bcb223 Add distribution subpkgs to core
   eaef634ef version: use runtime.Version() directly
   25947db04 Add support for spec generation with host devices
   c0984941e adding go version to client description
   fe947e83d bump runc v1.0.0-rc9
   772032598 Fix flaky btrfs test
   e4e7e554d Make client's WithLease more flexible.
   18be6e371 Use cached state instead of `runc state`.
   f277665ed Bump runc to 1b8a1eeec3f337ab5d94f28980
   e33f70385 Add more detail on releases
   8ff5827e9 Update cri and cgroup packages
   b5fa55b0c ctr: Enable shell autocompletion
   45ce73567 Limit travis release script to a single build
   0cb7e4d5f Perfect documentations
   b172b7f9d Update release docs for 1.3.0
   394db03f1 Fix all media types in Accept header to match RFC
   90735a5d1 Update cri to 5d49e7e51b43e36a6b9c4386257c7d08c602237f.
   1b1b862eb Get CRI dependency versions from containerd vendor.conf.
   35d3bae1e AppVeyor: bump golang 1.12.10 (CVE-2019-16276)
   95dbbdc8c Bump runc for CVE-2019-16884
   62c2eea78 fix-up typo
   c5821baa4 Sync and stat btrfs loopback in tests
   5ea936362 Perfect documentation
   a0ae24b98 Word spelling correction
   85eac2550 Add release note for gc fix
   cbbb6a229 Update release note.
   fc31fa176 Update cri to 4ea022f82a55c449bf15bfc62ac8b0de968d81be.
   0b224ac7d Update metadata interfaces for containers and leases
   2a636f8c3 gen-manpages: Create man directory if it does not exist
   0a2129222 Check for more kill error types
   dd5122809 Don't search for state.json path
   6f31417d4 Generalize media types
   f3148d0b9 Add metrics type alias
   57b51b948 Move golangci-lint deadline to config file
   e84a84a5a Add function to set custom auth scope in context
   bca374aa1 Get media type key from context
   20d3fae3d Add Opt for modifying shm size
   83a72858f Makefile: increase deadline to 2m for golangci-lint
   b4211d94e fail on file not found for shim reconnect on containerd restart
   fd6299be9 Fix density spec generation
   3bc99755d Try set GOGC for golint
   19ecd49ed implement ctr -connect-timeout
   58892a3ba Skip darwin deploy
   5bb0281d1 Fix missing vendor packages
   5a656cacb Move manpage gen to separate binary
   6ed809168 Publish cri release to gs://cri-containerd-release.
   f997c30ec Skip cleanup in travis deploy and avoid gcs race condition.
   36c543a72 Remove extra CI testing on older Ubuntu
   4e8a49948 Encrypt the secret file in containerd/containerd.
   f3a5b8c0a Add command to generate man pages
   d1a12823b Update gcs cri release.
   424d33c5b Update go-runc to e029b79d8cda8374981c64eba71f28e
   3db5a5ad2 Fix darwin build for cri release
   1b4cec979 Update cri test to fix image reference test and fix gcs deploy.
   e3abd03ae Fix CRI release build.
   61f113e60 Automate CRI tarball release.
   c1fc21e92 ctr: use NewDockerAuthorizer instead of deprecated NewAuthorizer
   fa11147e5 Add --env-file to ctr
   5c576b026 Update and simplify mailmap
   c8cb864ce platforms: update known OS and arch values
   3d1fdaccc config_test: sort result before check
   8788af7f8 modify-document-duplicate-word
   d6a6e0b8b Support foreign and encrypted layers in the unpacker.
   a4482d9a6 Fix proxy plugin config validation
   01f726589 Support v1 configurations for config dump
   cd79e0edf travis: fix Xenial tests not being run on master
   555cb31fd Support configurable default platform in the client.
   c410f0eae Fix potential panic for task in unknown state.
   dd24d76a1 Fix potential containerd panic during graceful shutdown.
   fa546dc3e travis: don't run old Xenial LTS on pull requests
   94e4b6879 travis.yml: add TRAVIS_DISTRO env-var for easier identification
   214b8328d travis: add Bionic (Ubuntu 18.04 LTS) to test matrix
   b6c811b7a Update cri to 0165d516161e25e52b4ab52a404a00823f8f0ef6
   db3a71173 Add 'containerd config dump' subcommand
   779701b29 Add --seccomp flag to ctr
   86f8be86e Add sigprocmask to default profile
   f4927a298 fix mis-spelling in nvidia.go
   bc692cc59 Use default UNIX env when image has no environment
   a292bf0f2 bump containerd/zfs 2ceb2dbb8154202ed1b8fd32e4ea25b491d7b251
   97962976a Update ttrpc to 92c8520ef9f86600c650dd540266a00
   92a5b08a6 fix-grammar-mistake
   372472b5f archive: truncate modification time
   2d8a65b1b Export shim publisher functions
   6624a70d9 runtime/opts: move WithNamespaceCgroupDeletion from containerd to its own package
   8266a3c5e fix-up spelling mistake
   09b184c15 rootfs: use new ctx to cleanup instead of canceled one
   2f54a7cb6 bump containerd/ttrpc 9abb3e268010ea188f4e4051f77eb5aca49315fb
   eb7a6bf02 bump google.golang.org/grpc v1.23.0
   56bcc7767 Handle layers with the same digest in unpacker.
   6f8fb9ee5 add WithImageName container opt
   a40c3830d Add option to pull all metadata
   55f737bd3 bump hashicorp/golang-lru v0.5.3
   ed1df65c2 bump hashicorp/go-multierror v1.0.0
   cbb3a3790 bump hashicorp/errwrap v1.0.0
   5cab0d3f3 update the max if cur will be greater than max for setting the limit
   24b9e2c1a Merge configs section by section
   8ebffecbc Use map for stream processors
   aae2d0d75 delete unnecessary checks and fix a test
   9e183f5e5 add cli option to download all manifests
   ea6c749e3 Update config doc
   19cd0a4f1 Append slices when importing config files
   b5f03eacd Pin to libseccomp 2.3.3
   4d11bb36a devmapper: activate dm device if snap device marked as activated
   bca085753 Fix toml plugin decoding
   a1e3779ca Support config imports #3289
   6e2228df7 Vendor github.com/imdario/mergo
   6cf031e1e Pass ttrpc address to shim via env
   89eae6429 Cleanup: fix some typos in code comment
   d7e1b2538 Allow explicit configuration of TTRPC address
   03aafaa1c Update the integration test.
   60f73b6cf Support simultaneous image unpack.
   550518ab8 Read trailing data on apply
   348e9f7c3 Update release notes and mailmap
   8acf5a142 Update release note for CRI plugin for 1.3.
   041e9debb Revendor github.com/Microsoft/hcsshim
   21174cb49 Change bufferSize back to 32
   1073868e5 runtime: only check killall for init process
   64a0b2eb2 Revendor to remove unused dependencies
   7379fa663 Remove the process default ENV
   5023d96ad Remove Windows EventLog logging hook
   276363938 Try to preserve exit event order
   04caf1fc4 Ignore fifo error when using v2 multi-container shim
   9cbd18ac7 Update cri to f1d492b0cdd14e76476ee4dd024696ce3634e501.
   bcc4a146e Support applying with parent directories
   5a0ff41c8 Update continuity vendor
   80d31d15b Update fifo for typed errors
   6d0e355c6 cleanup code typos in leases.go
   bee4c1a8a Add retry and non-blocking send for exit events
   0d27d8f4f Unifi reaper logic into package
   bb4c92c77 Fix shim hung
   1c30d4d04 bugfix: override image.Env with process.Env, rather than be contrary
   7682acb9e AppVeyor: update to go 1.12.9
   81386df91 Add direct unpack support for overlay and aufs
   1b389b362 AppVeyor: update to go 1.12.8 (CVE-2019-9512, CVE-2019-9514)
   2e8ea9fd6 Allow timeouts to be configured in config
   a80db38c3 blkio.go: correct help message word spells.
   3ef26cd87 bump x/sys to fix riscv64 epoll
   2ff7183cc AppVeyor: update to go 1.12.7
   c017e0efe Use a child context for errgroup in dispatch
   75771c463 Add usage function to client
   b6fca48fe bump go.etcd.io/bbolt v1.3.3
   0dadef19c Add docs for stream processors
   d085d9b46 Remove encryption code from containerd core
   282b19efd remotes: remove useless line
   a3a30635e namespace: Copy ttrpc metadata before setting header
   04b7f1b59 Remove ppc64le from travis
   2fac3ee27 Add release notes for stream processor
   116140977 Limit multiple platform manifests to one for size check
   fe3638e88 Add UnpackOpts to RemoteContext
   d8322e38c cast Rdev of Stat_t to uint64 for mips
   af7b7cdb0 Save default namespace in the client.
   552a0b1be Handle stderr in stream processors
   3fded74bc Add unpack opts
   26b90619e Pass apply opts through rootfs/* code
   e1489f93c Use named pipes for windows processors
   134d3c815 Add windows apply code
   f867401c6 Use fds and pass Payloads over diff api
   366823727 Add server config for stream processors
   97a98773c Add StreamProcessor for apply
   0bc5df035 Clarify text on `ctr` support/inclusion
   0a3769eec pusher.go: error message typo correction
   635ccc067 Add cri release notes
   4667ee47a Update Microsoft/go-winio v0.4.14
   7792c23b1 Limit default matrix to runc v2 runtime
   9f0bc2b53 Add UUID and server info to introspection
   08483d18a v2: Close ttrpc connection when `Delete()`
   4b5dfaee1 Completely remove Windows v2 in-tree shim
   2398421d5 Fix travis matrix
   a5940da62 Remove `ctr cri load` and update cri-tools to v1.15.0
   0a4bf1bd1 Mark faulty devices
   c99961c6c Update cri to b213648c5bd0a1d2ee42709c10dff63fbfee3ad7
   4b4ce4a26 remotes: remove unnecessary string formatting
   d1b9ee543 travis: Enable travis CI for ppc64le arch
   bb9968891 Fix containerd on windows.
   3e52e2902 Fix bug in export named manifest option
   594f42319 protobuf: Bump Protobuf version to 3.7.0
   c965a6c4d Prevent push by tag for sub-manifests
   5cf79913e gpg: Use a Pipe() rather than a file
   6a2512879 gpg: Pass the passphrase to the gpg2 tool using a file
   3741fd859 Remove deferred flag when removing devmapper device
   b16e7c5de Update pkg/ttrpcutil with improved pipe dial logic
   daf12cd19 Improve error return from AnonDialer on Windows
   4d5a0e19e Mark faulty device in one transaction
   878a3205c Better error recovery in devmapper
   578216950 Add note about pb.txt files
   f68186e10 Improve custom cgroup test
   8a6190856 Add 1.3 beta release note
   612628c2f fix wrong spells in compression.go
   98ead46d1 Call Update of snapshotter plugin
   f543f2fbc Call CloseIO when stdin closes in ctr
   eb4b3e877 Fast path getting pid from task
   8cd480c23 Specify protocols in ctr encrypt recipients
   e3cc9c20c bug fix:#3448
   c27e48d66 fix mis-spelling in client.go
   22f44c44d Add garbage collection doc
   02826345c Add option to compress blobs on import
   9da7d3036 archive: return chtimes error with path information
   3d1fa6969 Implemented constructors for both encryption and decryption
   392668d00 ctr:Support deleting multiple tasks at a time
   05a2b63e8 Create CryptoConfig constructors in place of dcparameters
   1c7eab197 Allocate a conhost during Windows service startup
   364de4c35 Wrap creation of CryptoConfig in constructors
   51bc61533 Update releases doc for 1.1 release
   101d4b78e Add timeout to task state calls
   e097ab8bb Disable windows integration tests
   f055bdb0a Remove windows v1 runtime
   d531e7849 Modified image_enc_test to use a different image from other tests
   5e5ae23d8 test: Check manifest.Platform before dereferencing
   1945e26ac Add concurrent execs in stress tests
   ffa86b25f Add new shims for checking binary sizes
   c118c45f8 Change image_enc_test so that it more reliably delete images
   c6d437fd7 Corrected lease implementation
   c00517a94 Made fixes and optimizations to encryption GC
   725d3ad8c Add --device flag to ctr
   518be1cb0 Fix bug in setting request body
   dd0a45dfe Add flat GC label for leases
   dca17853d Add WithLinuxDevices Opt
   804ae89be errors: use errdefs errors in client and commands
   dde436e65 Crypto library movement and changes to content helper interfaces
   bf8804c74 Implemented image encryption/decryption libraries and ctr commands
   30c344394 Add crypto dependencies/vendoring
   a1f3ebaec Update cgroups to c4b9ac5c7601384c965b9646fc51588
   b72673fdc Makefile: allow custom base path to install
   fab016c7a runtime/v1/linux: ignore ErrCgroupDeleted in Task.Start
   ce0d2489a Fix regiression from #3403 with snapshot cmd
   0b29c9c37 Update resolver to handle endpoint configuration
   63ceaf877 Add testing log context
   f63eab32e Add testing log hook to context
   61d930ad5 Move specific errors to their respective packages
   82826df9b Small refactor due to CI linter changes
   ef7f46eb7 Fix linter errors
   2b521e25a Switch to golangci-lint
   abc152d14 fix name in containers file
   70b00a0fa fix variable name
   4988424fc * fix: view snapshot is deleted before diff
   db95af43f centralize harded-code message
   d643f1dc8 images: only fetch the best matched manifest info
   550a6f1d7 Fix integration tests
   1918ee4d1 Respect default snapshotter label
   47d2ac090 Improve default label handling
   4e2fc81ed Add aliases to namespaces subcommand
   2a92c2741 Bump travis to criu 3.12
   5ed1a3ce0 Add RELEASE note about config versioning
   6601b406b Refactor runtime code for code sharing
   7d2117245 Fix metadata content store to call writer digest after commit
   af93e4009 ctr: Add images tag subcommand
   ec8d9d3d7 shimv2: remove the dead task from runtime task list
   d3e1a51f8 vendor: bump go-runc
   46af8ccd2 Check exec log flags compatibility
   9fda4a5fe Bumps the version of go-winio.
   6b59b425e Support --log-uri for exec subcommand
   844c58102 Add cgroup delete opt for ns deletion
   3d3dbc8fb Handle RequestTimeout and TooManyRequests
   7dfc605fc Set shim OOM scores to +1 containerd daemon score
   719a2c594 Robust pid locking for shim processes
   2d0379115 docs: remove shim_no_newns in ops.md
   0886e4f1b No need to keep 2017 DockerCon doc
   650a7e5c1 Add hashsum for release archives
   cb4a8f51a bump runc v1.0.0-rc8-32-gf4982d86
   bb41ef87f bump libseccomp-golang v0.9.1
   174c4907d Fix shim's file IO logging
   1a8df3f23 Reserve exec id to prevent race
   245052243 Add timeout for I/O waitgroups
   12a14c442 fix: polish log to make more clear
   ec78305c4 Close the inherited socket fd
   fbf96d302 Fix path in LogFile creator
   63a8dee60 Switch to GitHub's new issue templates.
   341c7c144 Update dependency containerd/cgroups
   5e0d79380 Fix bugs in BinaryIO creator
   75f183887 Allow opts to flow to the backend snapshotter during snapshot creation.
   95f9bbf18 Add timeout in load shim v2
   62e9e1169 switch to a working link
   41e1bb832 Fix snapshotter getter in client code
   052551573 Ensure labels is not nil in differ
   67cf9f7f0 AppVeyor: Bump golang 1.12.6
   0b7abc02b ttrpc updates for interceptors, close, and metadata
   d15a06b19 docs: Fix typo to some markdown files in /docs.
   dd7c0aabc remotes: support cross-repo-push
   bca566736 Make newBinaryIO public
   31afff294 Fix backwards compat with v2 containerd configs
   bb0087280 Add user agent header to all requests
   9547d269a Add v2 server config support with plugin URIs
   9e0cd529d fix shim std logs not close after shim exit
   fb6b0ae4c Update x/sys, x/net and bbolt modules to support Risc-V
   ed308ea1e Unmount rootfs with separate Remove() in bundle
   cf7fb14ef Update timestamp atomic write
   4f6ba8286 Ensure close in content test
   faf925ba2 Handle EOF from ReadAt in content.ReadBlob
   fa6a9f063 Add ttrpc namespace support
   42f24b57e Update ttrpc to a5bd8ce9e40bc7c065a11c6936f4d032ce
   7531c66d5 Ensure that the rootfs dir is created in the bundle
   bf24fb0ca Close file r.log after used to release resources.
   5b9a43d2e Fix seccomp contributed profile for clone syscall
   cee19d1e6 Change restart delay for Windows service to 15s
   8a388d623 leases: support resource management
   ac4485c76 Add support to gRPC errdefs for context cancel/deadline exceeded
   bbe45e446 add Restart=always to unit file
   a274dbe82 Fix run with specified platform
   48b81e872 Do not return error when rootfs already exists.
   e0c4fe411 Forcibly sync writes on lcow layer.vhd after write
   5e2d7efd8 Use a single custom annotation for export
   41b7b0e0d Ensure namespaced writer commit has correct namespace
   7f79fbb24 Move ttrpc client to pkg/ttrpcutil
   5b7a327c4 Improve atomic delete
   fe6a2b03e Add shim cgroup support for v2 runtimes
   62609d66d Fix typo in description comment
   90c6c1af4 Pass options on shim create for v2
   690706286 ctr: make ctr shim command easy to use
   7b06c9a1c Add TTRPC client
   5e962dd8b Remove unused Resize method from initState
   66036d920 v1: Respect the `shim_debug` flag when load tasks
   a6a888cb5 Bump ttrpc
   fbb80b951 containerd-shim: redirect output into stdout fifo
   543d1e807 Add travis_wait to prevent vndr timing out
   00bc2f5cf Update to Golang 1.12, and prepare for ppc64le
   67b45aef4 Add WithoutRefreshed metadata
   ad25c1a9c Improve ARM platform matching
   bd27bef4a Move checkpoint and restore commands to new files
   cf6e00854 Fix fd leak of shim log
   6f463d350 test/snapshots: umount before committing snapshot
   388705317 snapshots/devmapper: deactivate thin device after committed
   bdd7dce31 Add OpenLab CI configuration
   660554d67 Fix error handling for task deletion.
   2ed8e60fa bump google.golang.org/grpc v1.20.1
   d1c59513d bump google.golang.org/grpc v1.12.2
   2f22d8e67 Fix broken link to containerd logo
   cb7c780af ctr images import: add --no-unpack option
   ee902afa5 Compute manifest metadata when not provided.
   5c9811ded Cleanup dead v2 shim.
   cfc36388b Remove redundant error checks
   38e369657 Use cancel on errors
   eded188f4 Fix misspells
   969035bcb Stop logging error on v2 multi shim log failure
   c7f067f27 Update vendor/ with new required vndr go.mod files
   8c5779c32 bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636
   dff745680 Return NotFound error for kill and delete in deleted state.
   5d17ed230 Update cri to 2fc62db8146ce66f27b37306ad5fda34207835f3.
   e5aab17a0 bump opencontainers/selinux v1.2.2
   dd85aea62 bump runc v1.0.0-rc8
   5b9bd993a differ: fix deadlock on commit error
   48f46516a Support disabling default setup of shim logger.
   c79c7921c bump docker/go-units v0.4.0
   dfa51c927 runtime-v1: kill shim in cleanupAfterDeadShim
   0376dd460 Don't write dumped stacks to file for ETW capture state
   e6fc0ed22 Convert Windows CI to use Microsoft MCR image urls
   06a3a480c bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f
   a333dbcfb Update x/crypto to 88737f569e3a9c7ab309cdc09a07fe7fc87233c3
   0fd02564a bump gocapability
   7718d060e Write stack dump to `os.TempDir()` as well
   a4942ca4f Fix error on pull hang in CI
   6bcf463b0 Move to sha-specified test image for nanoserver
   cfb8b5573 .mailmap: update Akihiro Suda's email address
   be2cbd0b2 Access to client's GRPC connection object
   78f3dc433 Allow dumping stacks via ETW capture state
   05dd66b2e Update go-winio in vendor.conf
   c9059c767 bump mistifyio/go-zfs f784269be439d704d3dfa1906f45dd848fed2beb
   63c7a879b Requeue events in the shim publisher
   fc167f957 Correct PusherFunc helper to match Pusher intf
   a7af3c13a Correct import path in services/server package
   9cc58781f Check task list to avoid unnecessary cleanup.
   97d247cd0 Rename `hrpc` to `tcpServer`
   047348e19 Add dialer for events service
   ae87730ad Improve shim shutdown logic
   a12f836d5 Use $TEST_RUNTIME for cri test.
   4b3b99ea1 Add support for required plugins.
   4ba756edd Fix API forward events for shims
   1a1f8f11a Set nofile to 1048576
   b911ae342 Add tcp service for grpc listeners
   a6f587e4c Use ttrpc to publish runtime v2 events
   a8a805cad Add ttrpc server to containerd
   c93d64543 Add GetOOMScore function
   ae5ca8177 Refactor mount path check and add comments
   7045801fd delete the ingest when any errors happen during resuming status
   dcf6023c4 Extend release timeline
   d5b770aa8 Introduce 'clean-test' target in Makefile
   2583d9e42 update gogo/googleapis v1.2.0
   a98df70da update containerd/btrfs af5082808c833de0e79c1e72eea9fea239364877
   aa8dccd22 update containerd/aufs f894a800659b6e11c1a13084abd1712f346e349c
   ed61d7f68 bump containerd/zfs and dependencies
   d667628ca bump github.com/pkg/errors v0.8.1
   68ef17835 bump github.com/BurntSushi/toml v0.3.1
   1978c0b74 bump gotest.tools v2.3.0, google/go-cmp v0.2.0
   2741dbe2c contrib: Dockerfile: bump go 1.12
   a84f87d84 contrib: Dockerfile: add a base stage
   a07e12cde contrib: Dockerfile: reformat, and use --no-install-recommends
   ba9e1ea23 contrib: Dockerfile: use build-arg for go-version
   4754d2aee Update image export to support Docker format
   74eb0dc81 Return event publish errors.
   10cf21dcf Export ExitStatus init func
   a73358749 Update cri to 6d353571e64417d80c9478ffaea793714dd539d0.
   de1da8be3 Update handling of registry errors
   8d1ae237e Always add compressed blobs to Docker import manifest
   c0f0b2131 Apply PR feedback
   2a5e4c4be Skip rootfs unmount when no mounts are provided
   abfc89ce0 Update CRI to master
   4730088cb Update runc to resolve selinux issues
   2d11f5e6d Regenerate protobufs
   830b0294c Update protobuf v1.2.0
   7c1365b46 bump sirupsen/logrus v1.4.1
   01310eaeb do not use unkeyed fields in compose literals
   90085a7ac Add empty file to prevent build from failing
   baf340343 Extend Applier's Apply() method with an optional options parameter
   8784eb630 Move snapshotters benchmark to a separate package
   adc4fa217 Use pkg/errors for all errors
   c22effb16 fix parseInfoFile does not handle spaces in filenames
   559dfa59a Add configurable plugin path
   d9526f5c4 Move CloudFormation template to contrib
   ae04c1660 runtime: guard Close() until both streams are complete
   e96ac2040 runtime: log IO error when copying output streams
   515be73c8 Add snapshotters benchmark
   872296642 fix shouldKillAllOnExit check for v2
   fa5f744a7 fix shouldKillAllOnExit check
   f7f6dd7b4 test: add custom cgroup test
   2b8df8309 bump containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1
   bc6ac0878 update opencontainers/runc v1.0.0-rc7
   808b22353 Fix race and panic.
   87289a0c6 devmapper: implement Usage
   010b4da36 devmapper: implement dmsetup status
   871094016 Windows: Build shim binary from Microsoft/hcsshim
   e16e99593 Vendor Microsoft/hcsshim@8abdbb82
   5d50b9c2b Extend adaptImage function with annotations case
   388c8a176 Fastpath opt and ExecProcess loading
   a84966451 Windows:ProgramFiles to ProgramData
   6034c1950 Windows:Create root/state with ACL
   7361b1987 Update Windows lcow differ to set NT VIRTUAL MACHINE\Virtual Machines SID
   4c9b5ef8e Update vendor github.com/Microsoft/go-winio
   d15832a4c Address review comments
   8f8fd3c3a seccomp: whitelist statx syscall
   908b77108 Add code to return message field of returned registry errors
   9a8727cf0 Allow to import an image for the default platform only.
   4506eb45b seccomp: whitelist io_pgetevents
   f3ff95ab7 decouple api.ContentServer implementation package from bbolt dependency
   14a050688 ctr: fix image cmd ArgsUsage
   bdd84abf0 Add additional capability handling opts
   a631796fd horten the unix socket path for shim
   b858cfb41 Makefile: allow overriding package name
   7ca2c3d68 contrib/nvidia: export helper binary path and list of Nvidia capabilities
   a7aeffc22 Update mailmap for cgroup authors
   e6ae9cc64 Shim pluggable logging
   506b81548 remotes: add distribution labels to blob data
   b8d40b353 update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
   09cf2a629 Extend metadata images test with fieldpaths for Annotations
   5124f9ee5 Write the Annotations map into the bolt db
   02cc1485d Prepare boltutil for reading and writing another map
   1e893b19c devmapper: add no_devmapper build tag
   79248fea2 Add test for ocispec.Descriptor Annotations
   34f377295 Allow WithNewSnapshot and WithNewSnapshotView to take in snapshotter options.
   aaae81189 Update checkpoint opts with runtime handling
   160737d2c Fix no pivot and keyring opts
   0b711d616 Copy annotations around where necessary
   4d2a26d75 BUILDING.md: update testing section
   6424a3603 ctr/commands/images/push: don't show progress if it is debug mode
   7cfb99ab9 Add content gc ref labels from containers, images, and snapshots
   f0d5dd3c8 Use unix.SignalNum in ParseSignal on unix platform
   1745951ba Vendor golang.org/x/sys d455e41777fca6e8a5a79e34a14b8368bc11d9ba
   e13a4b67e Update the snapshotter docs to refer to the snapshots package for WithLabels.
   277147135 Fix issue with NewFIFOSetInDir with Terminal true
   828f6eb84 Fix a bug in shim log on Windows that can cause 100% CPU utilization
   c6703d4c7 Add missing annotations map to Descriptor for gRPC transfer
   d2bec5422 Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97
   208957ba3 devmapper: proper cleanup in pool device test
   734989c2a Update README
   fb8048371 docs: Add NAME section in all manpages
   95f0a4903 devmapper: rollback thin devices on error
   adf5c640f devmapper: don't create or reload thin-pool from snapshotter
   7efda48c5 devmapper: more precise way of checking if device is activated
   37cdedc61 devmapper: add linux tags, fix build
   0c6d194cc devmapper: add README and minor fixes
   2218275ec devmapper: register plugin
   cec72efc2 devmapper: add snapshotter
   3a7588252 devmapper: add pool device manager
   6e0ae68e1 devmapper: add snapshotter config
   fcd9dc274 devmapper: add pool metadata
   809e5fd3b devmapper: add dmsetup
   fe05e4d1a devmapper: add losetup
   d83e4e9b3 Vendor Microsoft/go-winio@v0.4.12
   e0d7ed12a Windows: Enable ETW logging
   cbc032ed3 Update go.etcd.io/bbolt to v1.3.2
   5e8406984 Update travis to xenial worker
   84a24711e Add runc.v2 multi-shim
   6bcbf88f8 Move runc shim code into common package
   fd6ac5d02 Vendor sirupsen/logrus@1.3.0
   b553a12be runtime: allow specifying supported platforms with config
   f6ac73d71 fixing typo and added a missing comment.
   4b3e0a8aa metadata: merge snapshot labels with metadata's labels
   88f19a90a Windows: Update stackdump event name
   14f7e5272 Unpack should set 0755 when the parent directory doesn't exist.
   a6f43b549 Add website update to release process
   17b2c8498 Update supported versions
   b87e9eef3 Add ExecID for StateResponse
   bfb266ab5 Fix some misspells in helpers_test.go
   dc09ed1e1 Add image handler wrapper
   a4f7b3758 Add support for TaskDelete event on exec in RuntimeV2
   00895670e Stop sending stderr with TTY on Windows
   6a21728fb Use defaults package for listing namespace labels
   14eaad0cd Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736)
   98766e863 Vendor opencontainers/runtime-spec 29686dbc
   225d9b120 Fix LCOW layer ordering
   0190e5f39 Removes the oci.test.exe binary.
   525802f9c Use distribution's reference.ParseDockerRef
   3538174e6 Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580
   2dacef07c Add shim skeleton code
   59ea134ce OCI Modifiers for Windows
   d25007e54 Add structure documentation for metadata
   823b7a8a0 Cleanup releases directory
   7bd8dcd0d Fix potential containerd panic.
   41f540621 Add release documentation
   f014adfa1 readme: fix example for checkpoint
   dfcc5942f Fix deadlock in Windows runhcs shim exec
   da2ab865e Add documentation for using namespace labels for configuring defaults.
   952d58297 Add a separate lock for pid.
   9777d7689 Revert "use state machine management for exec.Pid()"
   34323985a Use labels only when default namespace is provided and prefer given options.
   59432aaec Take default runtime and snapshotter from namespace labels
   6629f853a BUILDING: update BUILDING.md
   d7ed40307 Add image pull concurrency limit.
   7f5d7ff6b Update snapshots docs with garbage collector label
   34672d483 metadata/gc: remove the noop-loop for snapshot reference
   6ed293ba9 Fix bug in shim path lookup
   d63099c4a Allow matching shim path side by side with containerd
   764afa0d1 Include extension for shim binary format on Windows
   dfebb404c remove excessive []byte(s) conversion
   85aa8ad36 Move task events to runc v2 shim
   28f8a90bd Update cri plugin to 4dd6735020f5596dd41738f8c4f5cb07fa804c5e.
   bb32c0f61 Revendor github.com/Microsoft/hcsshim v0.8.4
   f44469698 Return out of windows signal handler
   26ab393e7 Use context.Background for `O_NONBLOCK` `OpenFifo`.
   7db569771 unix.UtimesNanoAt now supported on Darwin
   132ee9b82 fix: linter issue
   6468619d7 Implement the Runtime v2 Shim async task model for runhcs
   b444d7d50 Handle additional cleanups from prior PR
   4ef9bf5c8 Windows: Publish exit status correctly in TaskExit
   90caf6f6a Windows:NewDirectIOFromFIFOSet
   3aec9e7be bump up runc
   0befa457d Update ttrpc to support context timeout.
   946e40266 Update releases files
   c5a8c9fc1 Fix issue in runhcs shim CloseIO
   31616e794 Fix runhcs shim bug in Create with "len(Rootfs) == 0"
   bcd4cc51c Fixes a bug in runhcs shim Exec.Pid
   bc76e01a8 Update runhcs options to include CRI Sandbox support
   a79879e9d Add security audit report to README
   dee0945e1 Fix spurious ttrpc client shutdown error log on success
   64a004641 Update cri-tools to v1.13.0.
   b55c9c6c3 Update cri to 4b4b2abb2eb19ad6913a6c5d2a6869a0a43a3fc1.
   17b77aeb0 Fix annotation typo errors
   5137fc6f1 bugfix: support application/octet-stream during pull
   568b5be93 runtime: add Add/Delete method in PlatformRuntime interface
   7faaa64cf fix: miss remove temp file in createSnapshot
   4247f2684 metadata: define content sharing policy
   1be86af10 add test for WithImageConfigArgs
   36e4dc603 Ensure bundle removal is atomic
   723797d32 docs: remove website leftovers
   d4ecb00f6 checkpoint: return empty image if checkpointPath exist
   f2344db40 do not mutate defaults in replaceOrAppendEnvValues
   da9471fb1 fix oci.WithImageConfigArgs for windows
   897afeaf3 Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)"
   0ec6526fd Update the delete docs for Runtime V2 on Windows
   e20ba5fa5 test: add test for c/r without image
   40267382c fix ctr image export not found error
   8be05eb23 Fix freebsd build
   7b1e6f323 fix: use func args instead of build new one
   9baecf66b fix: fix defer in loop
   903abf33c Fix annotation typo error
   52de37170 Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)
   2d96aad77 bugfix: unpack should always set the snapshot gc label
   a2a424197 Add timeout and cancel to shim fifo open
   6f944e419 fix: SCHILY.xattrs should be SCHILY.xattr
   6ccb0d062 fix: remove dead code
   2db0c6c26 Explicitly stating utf-8 when fetching oauth token
   603e97a9e ctr/content: make editor flag is required
   7ac221e8d Adding ctr memory and cpu flags
   822ae18b1 Update cgroups to 1152b960fcee041f50df15cdc67c29db
   3ae8e8a30 Add shim config for shim binary options
   66c20f2b7 Update runc to 96ec2177ae841256168fcf76954f7177af
   79499980e Kill should still work in stopped state.
   27ba2db10 Revendor github.com/Microsoft/hcsshim to v0.8.3
   2d3a4f99e should no defer when detach
   70084ea6c Add /proc/asound to masked paths
   6daf8b778 Eliminate misuses of errors.Wrapf
   a404f27a0 Add more adopters
   6593399e9 cr: support checkpoint/restore without image
   996c60616 fix: fix error info start capitalized
   b4a642f6a Add dumpStacks support for containerd on Windows
   40d898a82 Windows: Allow running as a service
   97dd5df66 Update runc to v1.0.0-rc6
   09bf314bf Cache shim v2 exec.LookPath results
   fd16bf6d4 runtimev2: add image-path and work-path for c/r
   83ebcf999 runtimev1: add image-path and work-path for c/r
   f90e5d564 Move ctr run --isolation to Windows only
   bbc2a995f use state machine management for exec.Pid()
   461222dba fix: should get runtime name from container info
   2101b1362 add ctr delete --exec-id to debug DeleteProcess
   a2e8ab9ff remotes: avoid panic with default resolver conf
   7d91d631e Lock `KillAll`.
   9639db552 refactor: no need defer in closeAll
   e76a8879e fix pipe in broken may cause shim lock forever for runtime v1
   b3438f7a6 fix pipe in broken may cause shim lock forever for runtime v2
   956e49a36 Revert v2 dropped events
   1d4105cac Use named pipes for shim logs
   581a63ce4 Add build requirement doc on fedora/centos
   01f5aa387 add flag -d for ctr t exec to run a service in container
   51ad4d302 change args usage for ctr c create
   bd2a21985 fix container cmd args may parsed as ctr args
   90880078b Adding a --load-kmods flag to the NVIDIA OCI hook
   e1a59ba0f Update runc to 10d38b660a77168360df3522881e2dc2be
   8e25ca6bf Revendor github.com/sirupsen/logrus to v1.0.3
   0e7a70dbf skip already exists content
   6f2f4e434 checkpoint: add copts to checkpoint; save snapshotter to annotation
   40caece8d update tests
   4fdf720b8 move rw to opt; make snapshot opt; move to NewContainerOpts
   147208061 add image name and runtime name media types; remove task operation on checkpoint
   ce0673fd7 Restore take image
   0e4d9da75 remove task handling from Restore
   2d3db08da refactor spec and snapshot restore into opts
   45c700a95 refactor checkpoint and restore to client
   555ea3fb4 Ignore modprobe failures in ExecStartPre (systemd unit)
   abd971cfb Revendor github.com/Microsoft/hcsshim
   831a41b95 Fix process locking and state management
   c4feaa75c fix: fix failed to get container-shim relation with io.containerd.runc.v1
   c524b9ce4 Partially revert the event discard change in #2748.
   38d7d59e8 enhance: update v1/v2 runtime
   ce6d4c9a9 add docs/rootless.md
   dd0539b09 ctr: add --cgroup for oci.WithCgroup
   18363d0c9 Add ADOPTERS.md file
   354dab0ca Forward ctr.exe --debug as io.containerd.runhcs.v1 options
   a33ad4024 Implement io.containerd.runhcs.v1 shim log opts
   ec3dbd155 Add io.containerd.runhcs.v1 shim proto options
   7d70d2b78 Fix Makefile to run protobuild on paths with spaces
   83f4ab885 makefile: remove emoji on Linux
   8329a491b Build Windows V1 and V2 runtimes always
   124194b98 check task existence before new task
   a02f7cea8 bugfix: use skip-verify flag in ctr instead of insecure
   2bb7da843 Fix mingw version back to working version with Golang
   068880ff1 Add custom headers option to dockerResolver
   fa912a79b update link for slack invite
   7c85d873a fix typo in ResolverOptions.Credentials documentation
   232a06349 Increase reaper buffer size and non-blocking send
   00ba92364 bugfix: CloseIO should return correct status code
   1cc93460d Bump aufs for unsupported errors
   1301813f7 Update ZFS for unsupported warnings
   16aaf6c06 Change unsupported snapshot warnings to INFO
   07237e34e Bump to Go 1.11.x
   c206da795 optimize shim lock in runtime v1
   c5a0c7f49 Add build option "GODEBUG=1"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
43a5cc7f03 docker: add more kernel-module RRECOMMENDS 
The kernel RRECOMMENDS, wasn't complete and in some minimal systems
we are missing modules to start dockerd.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-08 18:36:41 -04:00
Bruce Ashfield
5be8686e65 kernel: fix conditional application of fragments 
using bb.utils.contains wasn't able to match on the substring
"type=kmeta" to enable the conditional inclusion of fragments
and KERNEL_FEATURES.

We switch to a python string only method so we can fix the
fragment application

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-08 18:33:41 -04:00
Bruce Ashfield
96c644f896 devtoos: introduce 'yq' 
yq is used by some builds to do command line parsing of yaml config
files.

We introduce the recipe/package and all of its dependencies.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-08 10:53:39 -04:00
Bruce Ashfield
fcb0c3a663 kata: cleanup runtime recipe 
Some of the dependencies are no longer valid for the kata runtime
recipe.

This also drops hyperstart as a dependency. With this removal, we
need a replacement kernel and initrd for kata. That replacement
will happen in future commits.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-08 10:51:58 -04:00
Bruce Ashfield
6f7475a1e2 hyperstart: update to latest commit 
Although it appears abandoned, and has some build issues, updating
hyperstart to its newest commit to be a base for future work, or
simply be removed.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-08 10:50:28 -04:00
Bruce Ashfield
9cdcd3ee8d kernel: add 5.8 linux-yocto include file 
Adding the version specific include for linux-yocto 5.8.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-06 14:20:38 -04:00
Bruce Ashfield
47425c21c7 config: make kernel meta data include more specific 
Rather than only matching on the major/minor version, we should also
check that the SRC_URI contains a "type=kmeta", to indicate that a
kernel-meta data repository is available.

This allows fragment enabled kernels, that don't want to use the
main kernel meta data repository to not throw an error (when their
version matches one of the reference kernels).

This can potentially mask runtime issues (since kernel configuration
options may not be present in the final kernel), but it makes the
layer more usable, so we take the tradeoff.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-06 14:16:24 -04:00
Mingli Yu
d898bd1ca5 lxc: remove deprecated options in lxc*.service 
Remove deprecated options in lxc*.service to silence below warning:
 # systemctl status lxc
 [snip]
 /usr/lib/systemd/system/lxc.service:17: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether.
 /usr/lib/systemd/system/lxc.service:18: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-01 23:08:10 -04:00
Bruce Ashfield
b17bd2c4b0 busybox-initrd: move static configuration to 'vmsep' distro feature 
We already have a distro feature that controls the static/non-static
configuration of libgcrypt: 'vmsep'

To avoid build errors on distros that don't have static libgcrypt
available, we move the CONFIG_STATIC config to a fragment and only
enable it whent he distro feature is set.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-28 18:27:51 -04:00
Ricardo Salveti
0ac91aa8f2 python3-texttable: remove recipe 
Newer version now available via meta-oe/meta-python:
- meta-python/recipes-devtools/python/python3-texttable_1.6.3.bb

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-27 22:40:54 -04:00
Ricardo Salveti
9258d20358 python3-websocket-client: remove recipe 
Remove local python3-websocket-client recipe in favor of a similar one
that is provided by meta-oe/meta-python (same verison but with the correct
license).

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-27 22:40:54 -04:00
Bruce Ashfield
cdf6f55347 runx: allow internal and external busybox 
runx knows how to build its own copy of busybox for its initrd,
adding a flag to allow us to select which mode we want.

Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-22 15:51:27 -04:00
Bruce Ashfield
b40be07bf0 conf: enable xilinx dynamic layer 
Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-22 15:51:24 -04:00