Commit Graph

2916 Commits

Author SHA1 Message Date
Bruce Ashfield
28d26fd953 lopper: update to -tip
Bumping lopper to latest, which comprises the following commits:

    b3ef974 lopper: assists: xlnx_overlay_dt: Remove explicit phandle property configuration
    5ee18e1 lopper: assists: xlnx_overlay_dt: Sort imports
    15780a1 lopper: assists: xlnx_overlay_dt: Use Lopper logging
    9bfadf3 lopper: assists: xlnx_overlay_dt: Refactor to use Lopper tree operations
    435a501 openamp: xlnx: add specific checks to ensure reserved mem is ok
    3a3df0a lopper_sanity/schema: add /bits/ 64 bit preserved test
    cd8a467 lopper/tree: fix /bits/ 64 property output
    363b74b lopper:assists:baremetallinker_xlnx: Correct OCM memory mapping in xlnx_memipname
    35f96f9 gen_domain_dts: Fix RTC interrupt format for Zephyr
    1c11d1c lopper: assists: zephyr: Add Xilinx RTC node for Zephyr
    85bf49e gen_domain_dts: Fix back clock_props logic
    afa272d openamp: xlnx: enable zephyr RPU DT without domain-access
    09ba439 openamp: xlnx: parity with default openamp cases
    a279acf lopper: assist: zephyr: for R52 update ranges property
    7db8955 gen_domain_dts: Remove mig-7series, ddr4 and lmb_bram from the list of PL memory IPs that need to be removed
    e6a1d17 assists: gen_domain_dts: Add tcm lockstep nodes to linux_ignore_ip_list
    833d64b lops/sample: add a sample lop file for phandle modifications
    c97589b lopper:assist: Define FRL enable macro based on HDMI mode
    696a855 lopper:assists:baremetalconfig_xlnx: Fix file handle leak in DtbtoCStruct causing _g.c file corruption
    4fa6a81 lopper:assists: Refactor device tree node property access to use propval() method
    aa0ba9a openamp: xlnx: xlnx_openamp_get_ddr_elf_load: skip mmio-sram nodes
    8080436 assists/yaml_to_dts_expansion: resolve_host_remote: fix err handling path
    d8c8022 assists/yaml_to_dts_expansion: openamp_remote_cpu_expand: fix lockstep check
    8b39ddf sanity/openamp: reformat test to use internal script
    32ab506 assists/domain_access: fix includes
    b717e84 assists/yaml_to_dts_expansion: add start/size helper
    72a938c assists/yaml_to_dts_expansion: Add cleanups
    87e3d3e assists/domain_access: Document case of empty memory description for domain
    b3d7642 lopper: move YAML expansion to its own plugin yaml_translation
    429834f assists/subsystem: add yaml handling from openamp
    7e88aef openamp: remove yaml handling here
    6e77a4b assists/domain_access: remove expand calls
    84cba90 openamp: xlnx: removed yaml translation routines
    3c7947e openamp: xlnx: Add documentation for each routine.
    18cb02e lopper: assists: zephyr: Add MMIO SRAM
    d7e1875 assists/domain_access: memory: account for empty memory value
    cb66e4d openamp: xlnx: refactor for domain access
    387d72e assists/domain_access: Only do a re-order for reserved memory
    efb5998 yaml-xlate: update handling for domain reserved memory
    f395a39 assists/subsystem: reserved_memory_expand: change to follow phandle list convention
    f120d7e gen_domain_dts: remove openamp handling
    bf70796 baremetallinker_xlnx: update openamp elf ddr routine
    61a19eb assists/subsystem: add RPU power domain to domain
    419b2b0 lops/xlate-yaml: synchronize interrupt-map phandle definition
    3c827f4 lops: drop cdo lops from default loading
    b48475e housekeeping: remove unused cdo lops and assists
    ad3d848 lopper:assists:baremetalconfig_xlnx: Fix file handle leak in DtbtoCStruct causing _g.c file corruption
    892679f lopper/base: tweak comment regex to skip embedded python
    6f0ffe0 lopper: correctly label compact (or sparse) nodes in --enhanced mode
    06ca2b9 lopper: Use absolute() instead of resolve() to preserve substituted drive letters and avoid Windows path length issues
    4117062 lopper_sanity: make results output uniform
    8569906 loper/yaml: update to lopper.log and global trace level values
    61d252b tree: drop if verbose checks
    0ddcc1c lopper/query: convert to lopper.log format
    59fc977 loper/base: convert output to lopper.log format
    460ca22 assists/extract: convert to lopper log output
    608610a assits/domain_access: set finer grained lopper log level
    7e75684 assists/compare: convert to lopper.log output
    fd630e3 lopper/common_utils: convert remaining print to lopper.log
    2330e5f lopper/cdo: use lopper.log instead of print
    c0f92ba lopper/main: convert remaining print statments to lopper.log
    4cee119 lopper: SDT: convert print statements to lopper.log output
    27b0b6a lopper/fdt: convert print statements to lopper log calls
    fd17a4f lopper/log: add additional logging levels
    abf3aed lopper: convert remaining verbosity checks to lopper.log calls
    59d307f lopper: allow .dtsi files to be joined with the SDT
    e4c11a0 gpios: add phandle field description
    f4bfbbf lopper:assists: Add exception handling for missing clock nodes
    50c245d assists: baremetallinker_xlnx: Add support for lpddr memory IP
    dd91add baremetal_gentestapp_xlnx: Skip the inclusion of the IP in peripheral test if is-hierarchy is present in the DT node
    4f56ad3 lopper: assists: gen_domain_dts: Fix for Zephyr microblaze Kconfig generation alignment and ordering
    9303c00 lopper: assist: zephyr: Add support for dma-channels property in AXI-DMA node
    873dc86 docs(zephyr): Add comprehensive AMD SoC processor documentation with Sphinx integration

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-06 15:06:07 -05:00
Vishwas Udupa
03fe48aa5c lxc: delete empty lxc state directory
lxc systemd service [1] defines a StateDirectory to ensure that
the /var/lib/lxc directory is automatically created and managed
by systemd during service startup.
Do not create lxc directory at build time for systemd.

[1] f9ff9ea2a9/config/init/systemd/lxc.service.in (L16)

Signed-off-by: Vishwas Udupa <vudupa@qti.qualcomm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-06 14:43:13 -05:00
Paul Le Guen de Kerneizon
9d98a3a8e9 cockpit-machines: add recipe
`cockpit-machines` is a Cockpit plugin used to provide a web interface
to manage virtual machines. Since Cockpit version 242, cockpit-machines
has been moved to a dedicated repository. This package is dependent on
cockpit package from meta-webserver layer.

To test it, access the cockpit-machines UI on the tested target at
`https://127.0.0.1:9090/machines`.

Signed-off-by: Paul Le Guen de Kerneizon <paul.leguendekerneizon@savoirfairelinux.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-06 14:32:39 -05:00
Yi Zhao
980ef86fd2 python3-dotenv: add UPSTREAM_CHECK_PYPI_PACKAGE
Add UPSTREAM_CHECK_PYPI_PACKAGE to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version python3-dotenv
INFO: Current version: 1.1.0
INFO: Latest version: 1.0.1

After the patch:
$ devtool latest-version python3-dotenv
INFO: Current version: 1.1.0
INFO: Latest version: 1.2.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-06 14:29:20 -05:00
hongxu
f6a438e078 irqbalance: correct to install /etc/default for systemd
Due to upstream commit [Properly embed EnvironmentFile sourced systemd
configs into meson and autonconf][1], introduced 2 configurable directories,
defaults set to: /usr/etc/default.

This commit uses option --with-pkgconfdir to correct to install /etc/default
for systemd as usual

[1] 41cb97c714

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-06 14:19:58 -05:00
Bruce Ashfield
207052a82c kernel/config/6.18: bump yocto-cfg-fragments for netfilter fixes
bumping to pickup the following change:

  commit af4e4301c12e98dc03b8827a44eb29786c1a61a6 (HEAD -> yocto-6.18, origin/yocto-6.18)
  Author: Bruce Ashfield <bruce.ashfield@gmail.com>
  Date:   Mon Jan 5 09:41:06 2026 -0500

      config/netfilter: migrate from legacy NF to NETFILTER_XT_TARGET_MASQUERADE

        - 9fce66583f06c212 ("netfilter: Exclude LEGACY TABLES on PREEMPT_RT.")
           adds NETFILTER_XTABLES_LEGACY and switches the iptables legacy options
           (IP_NF_IPTABLES_LEGACY, IP_NF_NAT, IP6_NF_NAT, IP_NF_TARGET_MASQUERADE,
           etc.) from select to depends on it in net/ipv4/netfilter/Kconfig and
           net/ipv6/netfilter/Kconfig.

      If NETFILTER_XTABLES_LEGACY is left unset, IP_NF_TARGET_MASQUERADE
      becomes unreachable and no longer auto-selects NETFILTER_XT_TARGET_MASQUERADE,
      so the xt_MASQUERADE module vanishes.

        - 25a8b88f000c33a1 ("netfilter: add back NETFILTER_XTABLES dependencies")
          restores depends on NETFILTER_XTABLES for those legacy symbols but keeps
          the new NETFILTER_XTABLES_LEGACY gate in the same Kconfig files.

      Effect: after these patches in the 6.18 cycle, keeping kernel-module-xt-masquerade
      without enabling the legacy iptables stack requires setting
      CONFIG_NETFILTER_XT_TARGET_MASQUERADE directly (as in your fix) or turning on
      NETFILTER_XTABLES_LEGACY in the config.

      Solution: for now, we just enable NETFILTER_XT_TARGET_MASQUERADE to fix a
                specific error, and will start the migration of all the legacy
                options to their new options. If breakage becomes widespread,
                we'll enable NETFILTER_XTABLES_LEGACY.

This avoids a build error in xen-image-minimal due to missing kernel
module packages.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-05 12:16:51 -05:00
Bruce Ashfield
85b63d3141 cni: regenerate go-mod/shallow/hybrid
There were some issues with hyrid vcs mode and shallow clones.

The tools have been updated to deal with those issues, so we
regenerate to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:47:30 -05:00
Bruce Ashfield
1906c7a7be rootlesskit: regenerate go-mod/shallow/hybrid
There were some issues with hyrid vcs mode and shallow clones.

The tools have been updated to deal with those issues, so we
regenerate to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:47:06 -05:00
Bruce Ashfield
e9bd9c9e61 nerdctl: regenerate go-mod/shallow/hybrid
There were some issues with hyrid vcs mode and shallow clones.

The tools have been updated to deal with those issues, so we
regenerate to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:46:41 -05:00
Bruce Ashfield
58dd80d89d k3s: regenerate go-mod/shallow/hybrid
There were some issues with hyrid vcs mode and shallow clones.

The tools have been updated to deal with those issues, so we
regenerate to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:45:55 -05:00
Bruce Ashfield
56a7b72a93 docker-compose: regenerate go-mod/shallow/hybrid
There were some issues with hyrid vcs mode and shallow clones.

The tools have been updated to deal with those issues, so we
regenerate to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:43:27 -05:00
Bruce Ashfield
dbf720ccb0 go-mod-fetcher: fix shallow clone handling, duplicates, and discovery workflow
oe-go-mod-fetcher.py:
  - Remove BB_GIT_SHALLOW_EXTRA_REFS generation - refs must be present in
    ALL repositories which isn't the case for module dependencies. Instead,
    use tag= parameter in individual SRC_URI entries.
  - Add tag=<tagname> to SRC_URI when ref is a tag, allowing BitBake's
    shallow clone to include the necessary tag (with BB_GIT_SHALLOW=1)
  - Remove premature _ref_points_to_commit() check that was clearing
    ref_hints before repos were fetched, preventing tag= from being added
  - Fix pseudo-version verification: only use shallow fetch for actual
    tags (refs/tags/...), not branch refs. Pseudo-versions with branch
    refs (refs/heads/...) now correctly use unshallow path to reach
    historical commits that aren't fetchable with depth=1

  oe-go-mod-fetcher-hybrid.py:
  - Fix duplicate SRC_URI entries when multiple modules share the same
    git repo/commit (e.g., errdefs and errdefs/pkg). Track added vcs_hashes
    to skip duplicates.
  - Add --discovery-cache option to calculate module sizes from discovery
    cache .zip files, enabling size recommendations during discover_and_generate

  go-mod-discovery.bbclass:
  - Add automatic hybrid mode recommendations after generate_modules,
    showing module sizes and suggested --git prefixes for conversion
  - Add GO_MOD_DISCOVERY_SKIP_VERIFY variable to skip commit verification
    on retries (useful after fixing verification issues)
  - Pass --discovery-cache to hybrid script for accurate size calculations

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:40:15 -05:00
Bruce Ashfield
d743412952 oe-go-mod-fetcher-hybrid: improve duplicate detection
The main go-mod discovery fetcher had stronger duplicate detection
than the hybrid mode converter. We synchronize the two to avoid
getting dups in our generate SRC_URIs.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-03 00:03:25 -05:00
Bruce Ashfield
8fbc17f8db docker-compose: refresh hybrid gomod files
After a hybrid fetcher fix to remove duplicates, the following
was run:

  python3 scripts/oe-go-mod-fetcher-hybrid.py \
          --recipedir recipes-containers/docker-compose/ \
          --git "github.com/containerd,github.com/kubernetes"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-03 00:01:45 -05:00
Bruce Ashfield
b9a29d2423 kernel: add 6.18 kernel support
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-18 23:48:23 -05:00
Bruce Ashfield
595cfe484e libvirt: update to v10.10.0
Bumping libvirt to version v11.10.0-35-g2df30bca10, which comprises the following commits:

    2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x
    c9f45792b7 virfiletest: Fix build on non-Linux
    eedf9ed68b util: Rework virFileIsSharedFSOverride using virFileCheckParents
    3a44f0c23d util: Fix race condition in virFileIsSharedFSOverride
    b6addd42be util: Fix race condition in virFileIsSharedFSType
    121d179e06 tests: Test virFileIsSharedFSOverride
    5ca7d3227d qemuMigrationParamsForSave: Don't take opaque 'flags'
    61ae36fa0b qemuMigrationSrcToFile: Don't cross-contaminate 'flags' variable
    4469a61553 virsh: Add completer for '--image-format' option of 'save' command
    1e2a71be0f include: Create constants for save image format values
    22c5ce995b qemu: conf: Use proper type for (save|dump|snapshot)ImageFormat
    cad980c83f qemu: Use 'virQEMUSaveFormat' type everywhere except qemu_conf
    7c0778deb7 qemuSnapshotPrepare: Prohibit 'manual' disk snapshot mode with VIR_DOMAIN_SNAPSHOT_CREATE_QUIESCE flag
    627bcc8525 qemu: snapshot: Setup disks for manual snapshot only when the VM is actually paused
    881aec23f8 qemuMigrationSrcToFile: Don't leak 'qemuFDPass' in cleanup path
    b98d29e022 qemu: Treat memory device source nodemask as strict NUMA policy
    b9abe20ce3 qemuxmlconftest: Introduce memory-hotplug-numa-preferred test case
    60d5428d87 qemu.conf.in: Fix some typos
    d56d056094 qemu: tpm: Account for possible migration without actually sharing storage
    fe22d80c0c NEWS: Mention the passt hostname and fqdn attributes
    da4305b7bc qemu: Use pci_bus to identify multi-smmuv3 model
    45ff1c0026 tests: add test for a single per-device smmuv3
    86d8c3e331 ci: refresh with 'lcitool manifest'
    414c5b11bf lib: Avoid changing const strings via strchr() and friends
    821a028c5d iptablesPrivateChainCreate: Avoid modifying const string
    5230ca5404 iptablesPrivateChainCreate: Switch to STRSKIP()
    33c486f4fd iptablesPrivateChainCreate: Rename @tmp variable
    1d95cee608 virSkipSpacesBackwards: Turn @endp into const
    1b8d108c64 virfirewalltest: Introduce testIPtablesSetupPrivateChains()
    b3e48f9470 virstringtest: Introduce a test for virSkipSpacesBackwards()
    141cf9c11f vircommand: Update documentation to virCommandSetDryRun()
    216cb57ef6 cpu_map: update vmx-* features
    0742c15d40 cpu_map: fix sync script to extract correctly vmx-* features
    6a3fe7f7e0 spec: Fix RPM build when %{fedora} is undefined
    fce7fabd53 Post-release version bump to 12.0.0
    cd16a1e913 Release of libvirt-11.10.0
    c7733935a5 Translated using Weblate (Spanish)
    2504f6f99b NEWS: Mention CVE-2025-13193 and improvements for block stats/config and backups
    f625585788 rpm: disable QEMU driver on non-64-bit arches for Fedora >= 44
    ad76c59450 news: document improved certs, host validate details & TDX fix
    54f3472d72 formatdomaincaps: Fix typo in Hyper-V Enlightenments section
    e60c21fc3f NEWS: Fix incoming migration to QEMU 10.0.0
    6cd0d7951a NEWS: Add CVE-2025-12748
    70f5a75f78 NEWS: Document features/improvements/bug fixes I've participated in
    df0d1c915d src: fix redundant/misleading build conditional for KVM MSR code
    40f5e37ff3 Translated using Weblate (Chinese (Simplified) (zh_CN))
    6b1a32f1cc Translated using Weblate (Ukrainian)
    67b8836be1 Translated using Weblate (Portuguese)
    2e727417ac Translated using Weblate (Korean)
    e2a0af28df ci: refresh with 'lcitool manifest'
    c58ee467ad NEWS: Document Hyper-V virttype for Qemu Domains
    ead8915a7e Update translation files
    faa5c69899 po: Refresh potfile for v11.10.0
    44118a7a70 Translated using Weblate (Italian)
    a4563be866 Translated using Weblate (Portuguese (Brazil))
    18cbdffec7 Translated using Weblate (Chinese (Simplified) (zh_CN))
    7f343d454b Translated using Weblate (Czech)
    cec8eb4a49 Translated using Weblate (Czech)
    afcfc6b8c4 Translated using Weblate (Korean)
    8a16508bdb Translated using Weblate (Portuguese)
    33b512a7de qemuxmlconftest: Update 'aarch64' tests using 'virt-4.2' machine type
    f6212a4ff2 qemuxmlconftest: Update 'aarch64' tests using 'virt-4.0' machine type
    3fab3ea57e qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.2.0-rc1-38-gfb241d0a1f'
    59685009ee NEWS: mention VNC 'wait' attribute for bhyve
    3a2127bef1 docs: bhyve: document VNC's wait attribute
    4176cdc978 spec: Fix 'libvirt-daemon-driver-storage-zfs' on Fedora 43 and newer
    c1576ad519 Add support for 'dpofua' setting for SCSI disks
    b1a2ea971d virDomainDiskDefCheckABIStability: Add missing check for 'removable' property
    eadbb34a8f docs: page.xsl: Convert repository edit URI into a parameter
    361106506b docs: site.xsl: Use separate 'asset_href_base' and 'link_href_base'
    071d29b726 docs: css: Split out any main-page CSS to local.css
    5ca7270c08 docs: index: Link to security notices from home page
    895a973c49 kbase: Add note about preserving VM on shutdown to backup article
    eca6a92a6d qemu: backup: Add support for VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN
    56432ed065 lib: Introduce VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN flag
    4453331b89 lib: Introduce VIR_DOMAIN_EVENT_SUSPENDED_GUEST_SHUTDOWN event reason
    8e5b0cd450 qemuBlockJobProcessEventConcludedBackup: Notify the backup job later
    0fe378f1b1 qemu: backup: Don't attempt to stop the NBD server twice
    7d90085e12 qemuProcessReconnect: Continue reconnection if VM untergoes fake-reboot
    18ceb1002d virDomainNestedJobAllowed: Allow VIR_JOB_MODIFY_MIGRATION_SAFE if VIR_JOB_MODIFY is allowed
    baf5f7b0ee qemu: always report s390 prot-virt feature in domain caps
    e98a12d133 qemu: always report TDX feature caps on x86
    62d14ba496 qemu: correctly detect working TDX support
    dac28c6185 docs: describe support for multiple certs & PQC config
    59a65f4987 rpc: support loading multiple certificate identities
    ba8e1720aa rpc: reduce duplication when locating credentials
    375ab122d5 rpc: move file access checks into TLS config API
    88a7a57806 rpc: skip fallback when using custom PKI path
    289d554998 remote: support specifying multiple keys/certs in libvirtd.conf
    d249170bf6 rpc: add support for loading multiple certs & keys
    74a664edd7 rpc: refactor TLS sanity checking to support many cert files
    9aff986bc4 rpc: change 'isServer' parameter from 'int' to 'bool'
    86143735a6 remote: use g_strfreev for free()ing lists of strings
    65d21c8692 domain_addr.c: update virtconsole port reservation comment and allowZero var
    2083efe030 domain_addr.c: Fix virtio console port autoassign on virtio-serial bus
    22059030f9 tests: Add console-virtio-serial-autoassign-address tests
    e9f74bbdba src: cap the data size in stream I/O functions
    2e595888aa include: fix version for recent block stats constants
    3e33e91c5d tests: qemuxmlconftest: Add case for hyperv domains
    9290014103 tests: qemucapabilities: Introduce MSHV capability
    33e716a56d tests: Add domaincaps case for mshv
    82b40953a0 conf: Fix virttype handling in schemas
    7b752b98f1 qemu: conditionally add /dev/mshv to acl
    ba40f678f4 qemu: use mshv accel for hyperv domains
    c852d9ca3c qemu: Append mshv to hwaccel list.
    6d0702f4cc qemu: Query and use mshv capabilities
    3b7edf755d qemu: Introduce mshv capabilities
    029933be86 qemu: only allow enabling deprecated features that are supported
    906f0e448a qemu: query and cache static/host deprecated features
    82eb7690a0 qemu: refactor load/format of deprecated features
    8403817182 qemu: rename modelinfo's deprecated_props to full_dep_props
    37b0b74b48 tests: Don't link vmx2xmltest with esx_lib
    7d5a1a5384 Edit apps.rst to add Apache CloudStack in the IaaS section.
    4ab1e25f6e qemu: Remove redundant kvm group config in sysusers.d
    6bc397eb23 cputest: Skip test for Intel(R) Xeon(R) 6788P CPU when QEMU driver is disabled
    047affcbd0 tests: skip vmx tests when ESX is disabled
    f1c8c9a1e8 build: drop userfaultfd_sysctl option
    7b471c563f tests: qemuxmlconfdata: provide device-pluggable smmuv3 sample XML and CLI args
    4d6419b286 qemu: Implement pluggable-device smmuv3
    e70c4d54d3 conf: Support multiple device-pluggable smmuv3 IOMMUs
    d97bc25b82 qemu: Format IOMMU devices after controllers
    a523920171 qemu: make qemuBuildDeviceAddressPCIGetBus more generic
    5944f566ac bhyve: support VNC 'wait' attribute
    c8bffda588 conf: introduce 'wait' attribute for VNC
    ec501bdc5e tools: inform user which hardware virt was found during validation
    e6d8983cdb tools: be explicit about failure to find x86 secure virt
    785c9fd512 tools: inform user which CVM is found during validation
    f44e2ecc5b tools: inform user which IOMMU was found during validation
    c0f42f4d76 tools: allow passing details for passed validation tests
    fa15860ac1 vmx2xmltest: Add a test case for disks in subfolder
    07d3cc9d57 esx: Allow disk images in subdirectories
    f82d30307d vmx2xmltest: Drop custom file name parse function
    29ddffbe6c tests: Introduce vmx2xmlmock
    ad92def79e esx: Make esxVI_LookupDatastoreByName() mockable
    c3a927c121 esx: Make esxVI_LookupDatastoreHostMount() mockable
    bdd681f9b2 esx: Make esxVI_LookupDatastoreList() mockable
    3ccb15006a esx: Expose esxParseVMXFileName() for tests
    6db235e913 libvirt_esx.syms: Put proper header file name into comment
    4ae5351a50 docs: domain: add watchdog notification support
    475ed7075d qemuDomainPrepareDiskSourceData: Setup 'detect_zeroes' for all layers
    312be5eb9a qemuxmlconftest: Improve coverage of 'disk-detect-zeroes' test case
    f5bb1ae77b selinux: Mark anything using content_context as shared
    5616eaf63e selinux: Add is_shared plumbing to RestoreFileLabel
    f4903ebcf7 selinux: Don't remember labels for shareable SCSI devices
    3a611df5b1 selinux: Match remember/recall arguments for SavedStateLabel
    cf0806477b bhyve: s/provconn/privcon/
    a379327d8a qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots
    2a326c415a qemu: Check ACLs before parsing the whole domain XML
    eb4322dfe8 ch: Check ACLs before parsing the whole domain XML
    7285c10a7e vz: Check ACLs before parsing the whole domain XML
    a6dcfee896 lxc: Check ACLs before parsing the whole domain XML
    a1f48bca07 libxl: Check ACLs before parsing the whole domain XML
    b45f10bc0a bhyve: Check ACLs before parsing the whole domain XML
    e6de1e43ab conf: Add virDomainDefIDsParseString
    05baaddb3f virXMLFormatMetadata: Don't modify deprecated 'xmlIndentTreeOutput'
    f307c7dc0c virVBoxSnapshotConfSaveVboxFile: Don't modify deprecated 'xmlIndentTreeOutput'
    a181d99cba bhyve: domain: improve disks validation
    b3e1e9a187 bhyve: domain: refactor bhyveDomainDeviceDefValidate()
    26a9c7d840 bhyve: support queue configuration for NVMe disks
    52bddfd65c conf: domain_validate: make disk queue configuration driver specific
    f81e5158d4 docs: drvbhyve: add guest-specific nodes section
    b2c7dba3eb docs: drvbhyve: improve the manpage link
    f4751e23d3 docs: drvbhyve: document device passthrough
    15833693e6 meson: default to system crypto policies where available
    81ce368347 ch: Sort driver sources and drop header files
    b224d2b377 ch: Assign device alias early
    85cf0e4f17 ch: Set transient domain definition
    7e5d224536 ch: Use correct domain definition in chDomainGetXMLDesc()
    29195b7b17 ch_process: Avoid memleak in chProcessAddNetworkDevice()
    bf34b3c86f domain_capabilities: Use virXMLFormatElement() in FORMAT_PROLOGUE and FORMAT_EPILOGUE macros
    d2d442d79d domain_capabilities: Check NULL in FORMAT_PROLOGUE
    b20ae99e1d domain_capabilities: Rework virDomainCapsCPUFormat()
    166fad633a domain_capabilities: Rework virDomainCapsCPUCustomFormat()
    132ba55a00 domain_capabilities: Move indentation adjustment out of virDomainCapsCPUCustomFormat()
    238be79bb9 bhyve: auto-assign PCI addresses for hostdevs
    43579767f4 bhyve: Tie the 'passthru' option to the 'hostdev' XML config
    447252a54c bhyve: Advertise hostdev support
    e4056c458a bhyve: Support passing the 'passthru' command line option
    4714272b39 bhyve: process: improve domain startup error handling
    afafb2a28b cpu_map: Add YongFeng-v3 CPU model
    a6000b20ba cpu_map: Add YongFeng-v2 CPU model
    98b4609b51 cpu_map: Add YongFeng CPU model
    db80641510 cpu_map: Add features used by Zhaoxin YongFeng Processor
    56ee1bfb7a cpu_map: Add Zhaoxin CentaurHauls CPU vendor
    ee95c9d7d1 cpu_map: Add EPYC-Turin CPU model
    f37126bc55 cpu_map: Add EPYC-Milan-v3 CPU model
    0fcde0edc5 cpu_map: Add EPYC-v5 CPU model
    d2925f23e7 cpu_map: Add EPYC-Rome-v5 CPU model
    7e8f1698c7 cpu_map: Add EPYC-Genoa-v2 CPU model
    dec859cb66 cpu_map: Add ClearwaterForest CPU model
    b8d830ff54 cpu_map: Add GraniteRapids-v3 CPU model
    cbc2f8e2b3 cpu_map: Add SapphireRapids-v4 CPU model
    bd43aa4cbb cpu_map: Add SierraForest-v3 CPU model
    64143828d7 cpu_map: Add SierraForest-v2 CPU model
    189d7b64ac cputest: Add data for AMD Ryzen 9 9950X 16-Core CPU
    034f02d25c cputest: Add data for Intel(R) Xeon(R) 6788P CPU
    b7c92ce918 cputest: Read more MSRs in cpu-data.py
    a3395fb598 cputest: Ignore missing MSRs in cpu-data.py
    21c61bee36 sync_qemu_models_i386: Support adding models to an empty group
    d3888c470a sync_qemu_models_i386: Handle unknown features in GraniteRapids-v2
    b74b452f8a sync_qemu_models_i386: Print current model for unknown features
    58972035bd sync_qemu_models_i386: Fix typo in CPUID_8000_0021_EAX_No_NESTED_DATA_BP
    96df5805fd cpu_map: Fix ordering of CPU models in meson.build
    a86973056a cpu_map: Add feature for detecting Indirect Target Selection immunity
    81c20d2c32 cpu_map: Add feature for detecting Branch History Injection immunity
    c80b283277 cpu_map: Add features for Transient Scheduler Attacks mitigation
    b72758d62a cpu_map: Add a few missing features to 0x80000021 CPUID leaf
    819ce69b38 cpu_map: Add msr-imm CPU feature
    a088734d57 scripts: do not use uninitialized variable
    1ff3d18528 tools/nss: check for missing array element
    f1e59f961d src: check for invalid stream in virStreamInData
    15c9ca383c scripts: use subprocess.run instead of os.system
    7db2138dc9 qemu: Use query-accelerators to query accelerators
    4c266d53e8 qemu: Introduce query-accelerators cap
    878470256e src: report error from failing to add timer/FD watches
    9b7ef8058b conf: Don't leak virDomainDiskDef's 'statistics' member
    7ee9dbacbe qemu: Add support for enabling timed block device statistics collection
    19fc614d53 conf: Add configuration option for timed disk statistics collection
    1c4234b34e qemu: capabilities: Introduce QEMU_CAPS_DISK_TIMED_STATS
    166be0d48c Expose qemu timed block statistics via bulk stats API
    6914b4f2a5 qemu_monitor: Extract 'timed_stats' of block devices
    d1eafbe88b Expose qemu storage request limits via bulk stats API
    c33e5971b1 qemu: monitor: Extract block limit values
    c177003d4d qemucapabilitiestest: qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.1.0-1969-g53b41bb789'
    ed0f489352 qemu: capabilities: Fix logic for formatting 'reconnect' parameter
    d0316c24ca qemu: capabilities: Retire QEMU_CAPS_CHARDEV_RECONNECT
    ce0c3e0ea3 qemucapabilitiesdata: README: Add rules for dumps of unreleased qemu
    5e8698aa76 ci: Refresh with 'lcitool manifest'
    b100dabd6d rpm: change from fuse-devel to fuse3-devel
    258bb23e94 Remove arm from KVM arches
    ba16113c76 qemu: Ignore "ht" CPU feature
    4d5c1bc241 qemu_monitor: Filter CPU features reported by QEMU
    c15ae99dab qemu_process: Always fix CPUs on reconnect
    2ab6925218 qemu_domain: Fix qemuDomainFixupCPUs
    fbf44bc8cf qemu_domain: Simplify qemuDomainFixupCPUs
    fd6cf1b44a cpu_conf: Make virCPUDefFilterFeatures return void
    3c7e44d3c8 Post-release version bump to 11.10.0
    91f3e8b667 Release of libvirt-11.9.0
    cdbb3bc8d7 NEWS: mention 'manual' snapshot mode improvement
    73b99b2ba0 Translated using Weblate (Portuguese)
    4bc00fd6da Translated using Weblate (Portuguese)
    d31a4a2c78 Translated using Weblate (Portuguese)
    f80eec7eab NEWS: Document features/improvements/bug fixes I've participated in
    05ca6be8a6 Translated using Weblate (Ukrainian)
    b59bed2603 Translated using Weblate (Portuguese)
    63e989cc26 docs: drvbhyve: document NVMe device
    cc2b022c35 NEWS: document bhyve changes for 11.9.0
    86bba8f1d9 drvch: Document config file locations
    3299ce060f ch: Load ch.conf from SYSCONFDIR
    4c5021bc92 drvch: Demote example section to a subsection
    a96a4b04e1 docs: Document supported URIs for CH driver
    47683ca63d Update translation files
    339ff29e5d po: Refresh potfile for v11.9.0
    fa89c178a5 domain_conf: Avoid memory leak in virDomainMemoryDefFree()
    ccc0538329 NEWS: Document virtio options for memory models
    e6d1cb69d5 qemu_command: Generate virtio options for memory device
    4848c85053 conf: Introduce virtio options for virtio memory models
    3c6d7f2705 qemu: Use virDomainMemoryIsVirtioModel()
    0d46a1f4d5 conf: Introduce virDomainMemoryIsVirtioModel()
    6787f82cfc domain_conf: Switch to virXMLFormatElement() in virDomainMemoryDefFormat()
    30eab13fc9 domain_conf: Make virDomainMemoryDefFormat() return void
    93c4b1bf55 bhyve: support specifying disk rotation rate
    4d70b2c783 bhyve: nvme: check if NVMe is supported by bhyve
    a997aee58f bhyve: do not allow more than one NVMe device per controller
    8d9bf732a7 bhyve: tests: cover 2 NVMe devices on 2 controllers case
    79e46b1698 bhyve: implement NVMe device support
    1ab27a5b96 Translated using Weblate (Italian)
    6038ed07c2 Translated using Weblate (Spanish)
    d207136b5d Translated using Weblate (Finnish)
    02266588b4 Translated using Weblate (Russian)
    92e1519395 Translated using Weblate (Portuguese)
    0a30b6d2e5 qemuDomainBlocksStatsGather: Fix blockstats gathering after refactor
    f6ea64f182 conf: never reject <disk> <seclabel relabel='no'> overrides
    be638396f0 NEWS: ch: announce network hotplug feature
    058df74ed6 ch: implement network device hot detach
    92441ba35a ch: implement network device hot attach
    6a4c59e993 ch: add net device alias assignment
    b90cf0c916 apparmor: Allow AMD-SEV device access for AMD-SEV VM
    d8d3595851 qemu: Drop /dev/kvm from default device ACL
    f3f8408975 NEWS: Document Hyper-v never notify feature for spinlocks
    66a47f8049 qemu: Update hyperv spinlock retries count default
    d0de1b89be qemu: Fix hyperv spinlock retries count type mismatch
    6862969cf8 qemu: forbid readonly attribute for externally launched virtiofsd
    69e5ad478e qemumonitorjsontes: Properly free blockstats
    45f49ad340 Remove qemuMonitorBlockStatsUpdateCapacityBlockdev
    5b0fd22920 qemuMonitorJSONGetAllBlockStatsInfo: Directly probe data from 'query-named-block-nodes'
    a189ad03bb qemuMonitorJSONBlockStatsUpdateCapacityData: Merge into caller
    5485e7e832 qemuMigrationCookieAddNBD: Use qemuBlockGetNamedNodeData to fetch the capacities
    58aa005f3e qemu: monitor: Rework qemuBlockStats into a g_object
    d35e519dca qemu_monitor_json.h: Use consistent function hader coding style
    6773f77dad qemu_monitor_json.c: Use consistent function hader coding style
    74ca46972f qemu: monitor: Remove qemuMonitorQueryBlockstats
    96980df098 virNetDevVlanParse: Refactor cleanup
    e412761206 virNetDevVlanParse: Use g_autofree for temporary variables
    40c4e4c847 virNetDevVlanParse: Don't clear data on failure
    4c32ad3469 qemuxmlconftest: Add example for "sgio='filtered'" disk option
    1ebee849db docs: snapshot: Add a note that blockjobs ought to be avoided with 'manual' snapshots
    69e066c0ba qemu: snapshot: Allow snapshot consisting only of 'manual'-y handled disks
    2e19e68093 qemu: snapshot: Deactivate block nodes on manually snapshotted disks
    f879d5f403 qemu: migration: Don't reactivate block nodes after migration failure any more
    7b5566ce67 qemu: Re-activate block nodes before storage operations
    84ad496494 qemu: block: Introduce helper function to ensure that block nodes are active
    648b0ddb13 qemu: monitor: Track inactive state of block nodes in 'qemuBlockNamedNodeData'
    ac6b351b42 qemuDomainGetStatsCpuProc: Use string constants for CPU stats
    0c1a1f9fd4 qemu: Drop reconnectBlockjobs from _qemuDomainObjPrivate struct

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-15 11:01:15 -05:00
Bruce Ashfield
a7ac9b11d7 virt-manager: update to v5.1.0
Also as part of this update, we drop the python3-libxml2 depend and
rdepend. That package is no longer being generated by OEcore and is
scheduled to be removed from upstream libxml (so there's no sense
just brining the package here). Upstream virt-manager has been moving
to ElementTree for their xml handling/API requirements, so we count
on that to provide us what we need without the xml2 python bindings.

Bumping virt-manager to version v5.1.0-24-g35ad9057f, which comprises the following commits:

    35ad9057f virtinst: Fix XDG_DATA_HOME handling
    488389ced ci: Add gobject-introspection dep
    e1613dba5 ci: Fix test-against-libvirt-git
    a2baaf789 installer: add support to use device boot order
    3985b0746 virtinst: remove legacy attribute from set_boot_order/get_boot_order
    3a25792d9 virtinst: guest: introduce can_use_device_boot_order
    25670b2ee virtinst: rework get_boot_order
    161fb1baa maint: use constants instead of strings for boot devices
    e438a7724 ci: bump actions/checkout from 5 to 6
    411f019f8 virtinst: add support for pcihole64
    53df7b496 virtinst: add support for acpi-generic-initiator
    d57e2e738 virtinst: interface: add support for backend.hostname and backend.fqdn
    57e6f96f9 virtManager: wrapped details hw-panel with GtkScrolledWindow
    f9a01fbf9 metainfo: Add developer tag
    9e9252982 Rename AppStream metadata to rDNS format
    f907ede75 Calling loader.close() before pixbuf assignment to avoid NoneType pixbuf
    6fe47feca Fix typo in virt-clone documentation
    766bf2ecd xmlapi: add xmletree.py backend
    d0372e82c xmllibxml2: lazily import libxml2
    ff9fa95e5 xmlbase: fix parentnode None check
    d4988b02e xmlapi: split out xmlbase.py and xmllibxml2.py
    ea71cf9a8 virtinst: cloudinit: include empty meta-data file
    ecd280d59 addhardware: network: adjust supported network devices for bhyve
    a2c00ee84 ci: bump actions/setup-python from 5 to 6
    eb4898b19 Release of virt-manager 5.1.0
    8d7c3adb2 Update translation files
    5915dd09f po: Refresh translation template
    1427cc990 tests: urls: update old Fedora version
    84eaa535a Translated using Weblate (Japanese)
    f3f797c82 Translated using Weblate (Arabic)
    d3562d08a Translated using Weblate (Finnish)
    aa5f1bb79 Translated using Weblate (German)
    00a9046a9 details: Add support for startup policy for USB passed through devices
    6fefb9ee0 addhardware: Add support for startup policy for USB passed through devices
    e518ad262 addhardware: Add a function build_hostdev_usb_startup_policy_combo
    52752d1bf virt-install: Add source.startupPolicy for USB passed through devices
    9bf51435d virtinst: Do not assume virtio is supported on Arm virt
    9d0e875f9 virtinst: Do not require x86 for virtio
    b8861f10f virtinst: Use ramfb for UEFI on Arm
    0b10fd64d virtinst: Use sd only for vexpress
    2a14495ac virtinst: Fallback to usb instead of ide on non-x86
    dfcab03dc tests: Add virt-install-aarch64-win11
    d11245452 ci: bump actions/checkout from 4 to 5
    1ead880b2 virtinst: add support for creating TDX guests
    ead255cad Translated using Weblate (Turkish)
    a477190e8 Translated using Weblate (Arabic)
    84ee0a312 Translated using Weblate (Chinese (Traditional) (zh_TW))
    f28525d03 Translated using Weblate (Spanish)
    a44165a4f Translated using Weblate (Spanish)
    b6200b7f3 Translated using Weblate (German)
    df95dc1a3 Translated using Weblate (Polish)
    5a84d84b8 Translated using Weblate (Russian)
    bcbadd869 Translated using Weblate (Romanian)
    91a2ba307 Translated using Weblate (Italian)
    2df46a841 Translated using Weblate (Czech)
    528b2fce4 Translated using Weblate (Ukrainian)
    20cd9fcbd Translated using Weblate (Georgian)
    38e9b13d5 Translated using Weblate (Swedish)
    77015e612 Translated using Weblate (Portuguese (Brazil))
    2a6f7d435 Translated using Weblate (Korean)
    0c68d8bb9 Update translation files
    cf392cf04 Add keywords to virt-manager.desktop.in
    bd8fe24a1 chore: enable flake8-pytest-style for ruff
    67002f4b2 tests: rename test_create() helper to check_create()
    988b51392 virt-manager: improve feedback for unavailable system tray icon
    60f200bd2 ci: extend pre-commit configuration with ruff-check
    e022f4e0d chore: configure ruff for linting
    96d306bd3 chore: reformat .pre-commit-config.yaml
    83e4b5568 ci: rename & generalize black workflow
    27b788e44 chore: split string into different continuation lines
    7bd89f7cd chore: add inline noqa for E501 (long lines)
    201417e00 tests: simplify checking for untested XML properties
    c8d8c32fd tests: refactor URL test from ini files
    035abfbf9 tests: use pytest.raises() instead of try/except blocks
    85c43959c chore: avoid using 'l' as variable/parameter name
    48e907ec8 po: Refresh translation template
    3c1346479 Translated using Weblate (Catalan)
    4c67cbd05 Translated using Weblate (Chinese (Simplified) (zh_CN))
    44c9aa374 chore: remove extra parentheses
    c3df2ba5d chore: drop "object" inheritance
    c814183ba chore: concatenate strings in the same line
    d074f56e5 fix: move parameter out of gettext calls
    576b07bc6 chore: explicitly specify flake8 issue to silent
    2539b2637 fix: switch from logging.WARN to logging.WARNING
    e5cd614ca chore: use "not in/is" rather than "not .. in/is"
    a4ed49c83 chore: exclude E402 in wrapper scripts
    0ef185c15 data: improve desktop file
    4b89c39ee Add Ctrl+Alt+Shift+Esc key command for logind's SecureAttentionKey
    62f976a61 fix: default start_folder to None
    f901c3277 tests: add checks for cloud-init config files from URL
    80109ffeb virtinst: cloudinit: add support to fetch cloud-init config files from URL
    5b2d0997a virtinst: cloudinit: refactor creation of could-init config files
    30bbee361 virtinst: cloudinit: convert all functions to class methods
    515a50a83 virtinst: cloudinit: move all variables to init
    4e51b595a Translated using Weblate (Spanish)
    e7cbaab55 Translated using Weblate (Chinese (Traditional) (zh_TW))
    af9baaceb Translated using Weblate (German)
    e17c3ef3a Translated using Weblate (German)
    237896029 Validation: allow spaces, disallow slashes
    443123ece virtinst: urldetect: detect Debian version for ISO images
    66aa81ae6 test_urldetect: arch is detected from the ISO media
    fbf7f060b virtinst: urldetect: figure out Debian arch from the ISO media
    4257e1974 virtinst: urldetect: move default Debian arch to _set_url_paths
    c8a5b8186 virtinst: urldetect: don't check x86_64 for Debian/Ubuntu
    3b3eac28a test_urldetect: use fake badarch Debian
    fb71f02fa uitests: Add coverage for mixed internal and external snapshots
    09574977d uitests: fix testManagerDefaultStartup race
    6458f09b7 uitests: fix testNewVMSession after networking changes
    f31287249 uitests: fix `push button` usage on fedora 41
    4f9618289 virt-install: detect wayland in order to start virt-viewer

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-12 11:54:44 -05:00
Bruce Ashfield
8339891ada rootlesskit: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
ce23494e15 nerdctl: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
e05c2caec1 k3s: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
175bf1f03c docker-compose: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
2bee001d6d go-mod: introduce hybrid mode
Introduce the ability to have hybrid gomod:// and git:// repositories.

This allows SRCREV bumping when fixing bugs, and using the git archiver
for some, all or none of the modules in a go mod project.

 Example: k3s Hybrid Conversion

 1. Ensure VCS mode works first
 bitbake k3s

 2. Get recommendations
 bitbake k3s -c go_mod_recommend

 3. Convert with recommended prefixes (keep containerd, k8s.io as git://)
 python3 ./meta-virtualization/scripts/oe-go-mod-fetcher-hybrid.py \
    --recipedir ./meta-virtualization/recipes-containers/k3s/ \
    --git "github.com/containerd,k8s.io,sigs.k8s.io,github.com/rancher"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
2385a74140 docs: add QUICKSTART for go-mod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
4d63f76992 rootlesskit: update to v3.0.0-alpha.1
Bumping rootlesskit to version v3.0.0-alpha.1-2-g8059d35, which comprises the following commits:

    64d4cd5 v3.0.0-alpha.1+dev
    7ae0e6b v3.0.0-alpha.1
    45e4ed5 Build(deps): Bump golang.org/x/sync from 0.17.0 to 0.18.0
    02054ac Build(deps): Bump golang.org/x/crypto from 0.42.0 to 0.45.0
    6794af3 Build(deps): Bump actions/checkout from 5 to 6
    4a3a5b7 ci: fix missing tag variable in release note generation
    a91432a  network/port driver build tags support
    476cdb6 Build(deps): Bump github.com/gofrs/flock from 0.12.1 to 0.13.0
    41e185f v3.0.0-alpha.0+dev
    ec10409 v3.0.0-alpha.0
    d62c5f8 go.mod: bump up
    ce86985 port.md: update benchmark description for gvisor-tap-vsock driver
    d0d6c23 go.mod: update gvisor-tap-vsock to v0.8.8 and improve port driver benchmarks
    3c14934 refactor: replace Debugf with Debug for logging messages
    185f2b1 bump go to version 1.24 (version 1.23 is not supported) update go.mod and go.sum for dependency upgrades and fix gvisor-tap-vsock compatibility
    bd8b631 Add gvisortapvsock port driver support
    2b6262a Build(deps): Bump actions/attest-build-provenance from 2 to 3
    ce8c7b4 Build(deps): Bump actions/checkout from 4 to 5
    ec9c22a Build(deps): Bump golang.org/x/sys from 0.34.0 to 0.35.0
    0c30f0a Build(deps): Bump golang.org/x/sys from 0.33.0 to 0.34.0
    ae984d4 network: add support for gvisor-tap-vsock driver and integration tests
    41fac7c Build(deps): Bump github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0
    718a551 Build(deps): Bump github.com/urfave/cli/v2 from 2.27.6 to 2.27.7
    2ca0537 Implement Pdeathsig behavior for child processes and enhance integration tests
    cc4f3f5 child: refactor command execution to use goroutines with Pdeathsig
    b5ddfeb v2.3.5+dev
    0cc0811 v2.3.5
    f2dc076 Build(deps): Bump golang.org/x/sys from 0.32.0 to 0.33.0
    32e2a2a Dockerfile: update test deps
    56ecf67 Build(deps): Bump github.com/moby/vpnkit from 0.5.0 to 0.6.0
    4a92456 Build(deps): Bump github.com/containernetworking/plugins
    a21cdd9 Build(deps): Bump golang.org/x/sys from 0.31.0 to 0.32.0
    f7ae285 Build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0
    968358d Parameter for ISA of binaries
    8d196ce Build(deps): Bump golang.org/x/net from 0.33.0 to 0.36.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
45441d41bc rootlesskit: convert to go-mod-vcs format
1. Removed rsync-native from DEPENDS (no longer copying vendor directories)
  2. Removed include src_uri.inc and include relocation.inc
  3. Removed SRC_URI += "file://modules.txt" (vendor/modules.txt not needed)
  4. Added include go-mod-git.inc and include go-mod-cache.inc
  5. Added go-mod-discovery configuration variables
  6. Added inherit go-mod-discovery
  7. Simplified do_compile() - removed -mod=vendor, vendor symlinks, and modules.txt copy
  9. Added a patch to fix buildpaths in the binaries

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
5760ab3c50 go-mod: make extracted files writeable
Make extracted files writable so BitBake can clean them later
Go's module cache is read-only by design, but this breaks rm -rf
and our subsquent task runs will fail.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
38e9d728a3 docker-compose: update to v5.0.0
Bumping compose to version v2.26.1-849-g9fada6cc2, which comprises the following commits:

    9fada6cc2 Bumped build images: tonistiigi/xx:1.9.0, crazymax/osxcross:15.5
    85ea24b62 Fix grammar: pluralize 'service' and remove apostrophes in lets
    000a4a4b9 check buildx version before comparing it
    08de90c26 bump golang 1.24.11
    cfcee45a8 fix SDK example
    13d70b1c1 refactor: replace interface{} with any for clarity and modernization
    72f4d655e Bump compose go to v2.10.0
    dc66e6bad golangci-lint: use gci formatter instead of goimports
    8d9d5259e Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    b32297dcc add --wait option to start command
    af8cac576 just warn user
    8477a85ce feat(model): reject runtime flags in model configuration
    6ee714635 build(deps): bump golang.org/x/crypto v0.45.0
    f28503426 build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0
    e0977c2df only check for env_file
    2d569916f skip includes preparing publish
    3975f0215 refactor: use strings.Builder to improve performance
    fa832d72d Added support for build.no_cache_filter
    822f5a702 refactor: replace Split in loops with more efficient SplitSeq
    68bb7a71b bump dependencies
    6f365395e Fix support for port range
    305293462 build(deps): bump github.com/docker/buildx from v0.29.1 to v0.30.0
    428abab16 build(deps): bump github.com/moby/buildkit from v0.25.2 to v0.26.0
    755618e70 build(deps): bump go.opentelemetry.io/otel v1.38.0, go.opentelemetry.io/contrib v0.63.0
    c47b8c32e Dockerfile: update golangci-lint to v2.6.2
    89d394483 fix linting issues
    f2b14fe1a gha: use custom names for matrix
    bd2257b6d gha: test against docker v29, v28
    d7e5f20eb images command should display image Created time or N/A if not available
    2b4543935 next release will be major version v5.x
    f0dce1b97 sdk docs: patch
    6e55832b1 add (restore) support for detach keys
    45def5111 make DRYRUN_PREFIX a display attribute, move DryRunClient out of pkg/api
    aff5c115d move progress UI components into cmd
    5ef495c89 removed unecessary check
    9de7e2a38 SDK docs
    dc90c4e44 Grammatical fix
    91e1753d8 Grammatical fix
    9db27a65c Making the American/British spellings consistent to the error messages
    efd7424da build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0
    02109c8d3 build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0
    c37ede62d on up buildOptions must include all enabled services
    7eb5adeef introduce --insecure-registry, reserved for testing purpose
    0793ad7c6 document support for OCI and Git remote resources
    8137b2bce build(deps): bump github.com/docker/cli
    4e3372b47 build(deps): bump github.com/containerd/containerd/v2
    fef26fb37 build(deps): bump github.com/docker/docker
    a32e13a2b build(deps): bump github.com/moby/buildkit from 0.25.1 to 0.25.2
    67e39a41f fixes
    dc1283289 fix: use NewParallelCLI in compose_run_build_once_test.go
    0c596ed3c build(deps): bump github.com/containerd/platforms
    13870006f disable progress UI when build is ran with --print
    af579ebd4 drop support for internal buildkit builder
    fc2a7d13f from Compose CLI, we know the streams used to configure LogConsumer
    d70bb8cf5 distinguish event (short) status text and details
    bff3d3530 render events in order they were first received
    b80bb0586 Migrate CLI commands to use LoadProject API
    d74274bc0 Add LoadProject method to Compose SDK API
    10f15cacd fix typo in error message
    3658a063b add AlwaysOkPrompt to replace 'AlwaysYes' current implementation'
    74a4ccdd8 fix various linting issues
    6719f47bd test checking bake internal load build definition
    3eb2934eb bump compose-go to version v2.9.1
    c416ea703 fix compose_run_build_once_test.go
    0d396bbac fix(git): Add validation for Git subdirectory paths to prevent traversal
    fc74c7896 Update e2e tests in compose_run_build_once_test.go to use project names for Docker Compose commands.
    658bff335 Revert "no parallel in compose_run_build_once_test.go"
    80030e139 no parallel in compose_run_build_once_test.go
    6a35be511 lint fix
    0c854a6ab add e2e tests
    557e0b6ec fix(run): Ensure images exist only for the target service in run command
    a8933c91e stop progress UI during build to prevent interference with buildkit Display
    7e3993bca skip Start[ed|ing] events to avpd mix with container logs
    fd4f2f99c register TTYWritter as an Event Processor
    ae25d27e5 remove unused RunWithStatus, always pass operation as title
    394466683 use eventBus to collect tasks progress
    e5c8b6864 decouple Event from tty progress writer
    bf50c9919 pretend cli.Out is a containerd console.File
    8274be8d0 configure Compose service with io.Reader and io.Writer remove usage of internal IO interfaces
    86e91e010 Add streamOverrideWrapper to intercepts command.Cli stream methods and transparently returns custom streams when provided via options Add new GetConfiguredStreams function to Compose API definition
    e1678c5c4 Introduce abstractions to support SDK usage without requiring Docker CLI
    5924387e8 run hooks on restart
    7f668bd7f Setup Compose service using functional parameters This commit introduces WithMaxConcurrency and WithDryRun to replace direct mutators on composeService commands and flags are translated into a set of functional parameters which are eventually applied as a ComposeService is created just before being actually used by a command
    3ce52883c prompt default implementation to prevent a panic
    ac3b8fd8a Code Cleanup
    8619f5d72 Fix help output for "exec --no-tty" option
    e59150baa fix OCI compose override support
    6a90742ef Test to check writeComposeFile detects invalid OCI artifact
    6007d4c7e publish env_file references as opaque hash to prevent paths conflicts
    69bcb962b Enforce compose files from OCI artifact all get into the same target (cache) folder
    9b4fcce03 introduce WithPrompt to configure compose backend to use a plugable UI component for user interaction
    da5c57c29 test digest or canonical reference, not only tag, when checking if an image is already present
    e25265dd5 remove unused code to only rely on api.Service
    e19e1278b fail build if minimal required version of buildx isn't installed
    585c4db4f Compose can't create a tar with adequate uid:gid ownership as we can't get container UID/GID as int by ContainerInspect revert https://github.com/docker/compose/pull/13288
    be8c7e6c6 make CTRL+Z a no-op operation on Windows
    27f59d7f4 Detect failure to access os.TempDir
    2681ed17a mutualize code from injectSecrets / injectConfigs
    ee75be342 Set secret/config uid:gid to match container's USER
    157617480 fix race-condition bug in publish command
    88aae9c46 support Ctrl+Z to run compose in background
    775530234 use fixed version of compose bridge transformer images to avoid CI issue on Compose when a new version is released and change the outputs
    147923c44 bump golang to version 1.24.9
    289faae5f fix(publish): in `publish()`, select all profiles in the `project` to publish.
    e7aa484b7 fix(publish): in `processFile()`, load the compose file passing the `project.Profiles` to the `loader.Options`.
    ae3309afa pkg/compose: build with bake: drop support for buildx v0.16 and lower
    0b5fb36eb build(deps): bump docker/buildx v0.29.1, moby/buildkit v0.25.1
    63920c4cc pkg/compose: align classic builder implementation with docker/cli
    a03f2562d bake only interpolates ${*}
    a07f2b8de build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0
    f45a3ebcf build(deps): bump github.com/docker/cli
    7fec70b6c build(deps): bump github.com/docker/docker
    ce463d50b Fix: set PWD only if not set
    fa7e85ed8 Write error to watcher error channel if Start() fails
    d9423f687 build(deps): bump github.com/docker/cli
    5add90240 build(deps): bump github.com/docker/docker
    07602f207 publish Compose application as compose.yaml + images
    cf7e31f73 escape $ in bake.json as interpolation already has been managed by compose
    fa0812745 use containerd client for OCI operations
    4ee52ad16 pass bake secrets by env
    4a4776ec5 cmd/compose: fix minor linting issues
    713de5bb9 pkg/compose: explicitly map AuthConfig fields instead of a direct cast
    9ded1684c gha: update test-matrix: remove docker 26.x
    8bc8593fd provider services: use '--project-name=' notation
    8978c1027 use containerd registry client
    032e0309e cmd: pluginMain: use WithUserAgent option
    38ba35e16 pkg/mocks: re-generate mocks
    56e0ba808 build(deps): bump github.com/docker/docker, docker/cli v28.5.0-rc.1
    9752fa550 pluginMain: remove uses of DockerCLI.Apply
    4761fd88b pkg/compose: build: remove permissions warning on Windows
    02c8e6354 pkg/watch: remove unused IsWindowsShortReadError
    ab7a6e932 pkg/compose: remove uses of deprecated mitchellh/mapstructure module
    2ca7b96e3 resolve secrets based on env var before executing bake
    a32dc3da7 test: Set stop_signal to SIGTERM
    db260938c bump compose-go to version v2.9.0
    5aea94794 Update comment on run command with tty & piped command
    d07c437ce dectect if piped run command and disable tty if so
    da72230c3 remove tty attribute from run options and use dedicated variable to avoid confusion
    a429c09df fix support for build with bake when target docker endpoint requires TLS
    df3c27c86 add deprecation warning for x-initialSync + e2e test
    956891af5 add support of develop.watch.initial_sync attribute
    a47334105 volume ls command can run without a project
    385b3f5c9 bump compose-go to version v2.8.2
    2d482e61c propagate docker endpoint to bake using DOCKER_* env variables
    c75418ee0 Apply suggestions from code review
    0cdc5c9bf rename --no-TTY => --no-tty for consistency
    b768232c0 document (hidden) --tty --interactive flags
    09689400e fix run --build support for service:* reference in additional_context
    cb3691154 detect container is restarted
    b387ba4a0 only load COMPOSE_* from $PWD/.env
    7cd569922 only propagate os.Env to bake, not the whole project.Environment
    eec2bb7ea only force plain mode build if progress is set to auto
    2c15aef2e build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0
    290366205 build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0
    a91ca95a7 bump golang to version 1.24.7 to align with moby/moby version
    beb81a73f pkg/compose: remove aliases for container-state consts
    f21720787 pkg/compose: use state consts from moby API
    02ffe2ac6 prefer application container vs one-off running `exec` without index
    f48131fb6 build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    4dd369bdc fix sigint/sigterm support in logs --follow
    ad73766bf build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to 0.28.0
    3c1f5a181 go.mod: bump github.com/docker/docker, docker/cli v28.4.0
    42d1e4c33 build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    6ca8663bd build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    b33ecf65e go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2
    04b8ac5fe Unquote volume names in creation events
    d09948da4 build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    f1efbb832 use enum-consts for State and Health
    1d52012b8 go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1
    1d69f4a68 pkg/compose: composeService.Up: rewrite without go-multierror
    6078b4d99 Fix: use image created time when last tag time is not present Signed-off-by: Kian Eliasi <kian.elbo@gmail.com>
    73e593e69 Fix: incorrect time when last tag time is not set
    51499f645 pkg/compose: pull: use native multi-errors
    5165b0f81 internal/tracing: replace go-multierror.Group with sync.WaitGroup
    93dd1a455 internal/sync: replace go-multierror.Group with golang.org/x/sync/errgroup
    ba3f5664c cmd/formatter: remove unused SetMultiErrorFormat
    c420bc44c check the assume yes publish flag command before the presence of bind mounts
    60681a824 Add e2e test to verify `docker compose down` works even when env file is missing
    19ad737ee Fix runtime ops with missing env file
    d3a260e53 add completions for the --progress flag
    e75329dce build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0
    1dc0be2c3 go.mod: github.com/docker/buildx v0.27.0
    3bac9ffd0 Refactor to use maps.Copy
    f266715dd add --provenance and --sbom flag to generated bake command line, also add attestation per-service configuration to generated bake target
    c2cb0aef6 only monitor attached services on up command
    fbc62d111 bump golang to 1.23.12
    0d40064ce build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0
    91a6eafa1 build(deps): bump github.com/docker/go-connections from 0.5.0 to 0.6.0
    f36ee00f7 Add go as a prerequesite in build instructions
    29ede3ba7 build(deps): bump github.com/containerd/containerd/v2
    bf6d7bf47 define pull and no_cache from either service or flags values when building with bake
    fc66da06d pkg/compose: simplify getting auth-config key
    909211dd6 use cli-plugins/metadata package
    0dc9852c6 build(deps): bump github.com/docker/docker
    a47870223 build(deps): bump github.com/docker/cli
    2c12ad19d use log API for containers we didn't attached to
    038ea8441 apply BUILDKIT_PROGRESS value when building with bake
    9e98e6101 add missing _MODEL suffix to model variable pass to dependent services of a model
    52f04229c fixed lint error
    28895d032 fix lint error
    a926f7d71 Elimneted magic string
    fe046915e buildkit require os.Stdout to access the raw terminal
    adbd61e5d fixed lint error
    e37ac0432 deleted useless comment
    cab2c2a44 Refactoring of redundant condition checks
    1946de598 improved lint error
    8e29a138a improved test
    3c8da0afe Add test of json.go
    1b12c867c add Streams Comment
    1a4fc55fd bump compose-go to v2.8.1
    efc939dce add info about models usage to OpenTelemetry spans
    d6e9f79ba Integration of SetAttributes calls
    b4c44a431 Eliminate magic number in init functions
    fb5a8644c Efficiency of ansiColorCode function
    95660c5e5 bump buildx to v0.26.1
    f6ddd6ae8 use output registry when push true and load to docker store if not
    4ae706695 build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
    fd954f266 show build progress during watch rebuild
    d62e21025 forward git command error to user
    6a2d16bd1 bump compose-go to version v2.8.0
    4d47da6dc do not pass user id on Windows system as engine is not able to handel it
    8f91793fb introduce build.provenance and sbom support
    1d2223fb2 pkg/compose: use local copy of pkg/system.IsAbs
    d4f600071 remove import aliases for containerd/errdefs
    c50d16cd7 pkg/compose: remove uses of moby/errdefs
    3875e13fa simpler stop UI
    c89f30170 force plain displaymode if stdout isn't a terminal
    41a9b9188 warn user COMPOSE_BAKE=false is deprecated
    5fc2b2a71 fix yaml indentation
    b1cd40c31 swarm
    362ab0733 build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7
    f35d2cfb3 monitor must watch events even when context is cancelled
    17ba6c718 abstract model-cli commands execution with a model (pseudo) API
    1c37f1abb use logs API with Since to collect the very first logs after restart
    485b6200e (refactoring) introduce monitor to manage containers events and application termination
    8c17a3560 don't run navigation menu if stdin isn't a terminal
    6b9667401 fix the helm bridge e2e tests after the latest update of the templates
    9a1e589ce Fix report image name in bake result
    5e147e852 add default compose labels to images built from bake
    29308cb97 keep containers attached on stop to capture termination logs
    0b0242d0a add dry-run support to bake build
    5a704004d Add a space character to separate the timestamp from the log message
    cb9591001 chore: print model attribute instead of model name used in compose file
    f42226e35 feat: add --models flag to config command
    0cc3c7a55 bump dependencies
    f7ee9c8a0 feat(os): add FreeBSD support
    35efa97b7 feat: add since & until flags to events command
    9e17a091b build(deps): bump github.com/docker/docker
    4bbc6c609 add USER_AGENT variable to cmd when shellouting
    69f1430a4 resolve Dockerfile symlink but file name
    7cf7c6414 build resolves enabled service after project has been loaded
    0e0ed91a3 fix: lint errors
    66524e772 feat: add --networks flag to config command
    c626befee fix the way we're checking if the provider metadata are empty or not
    60ee6adcd a single place for shell-out command setup
    8faf1eb80 build(deps): bump github.com/docker/cli
    3b0601b67 build(deps): bump github.com/moby/buildkit from 0.23.1 to 0.23.2
    f42374bb1 add a Done event to model progress display
    b046a5ef7 chore: fix some minor issues in the comments
    1570c6c07 bump go-viper/mapstructure to version v2.3.0 Fix https://github.com/advisories/GHSA-fv92-fjc5-jj9h
    674e13fb6 bump golang to v1.23.10 Fix Vulnerability Report: GO-2025-3751
    6fa173124 (reactoring) avoid a global variable by introducing logConsumer decorator
    2c69fc3d4 pkg/compose: remove redundant uses of strslice.StrSlice
    317ebcd3b implement model_variable
    5cf1f0e2a bump compose-go to version v2.7.1
    6198ed5bd fix linting errors
    00ccddbde add volumes command test cases
    63b441401 add volumes docs/reference/
    3a7982fe4 add service filter to volumes command
    5430caa17 add volumes command
    ee1b1e0a9 run docker model configure
    26e46d7cc e2e tests in CI
    a9e76943f introduce support for models
    b6a0df8d3 e2e compose run --env
    5a063b751 fix provider concurrent environment map accesses
    ae49bba9b build(deps): bump github.com/docker/docker
    51acc5845 mount /var/run/docker.sock for --use-api-socket
    7c999d7f9 improve publish bind mount warning message
    ad750d614 remove publish limitation on bind mount list all bind mounts and ask user validation before publishing
    fe382df50 build(deps): bump github.com/docker/cli
    6501d59ef pass project.environment to bake
    33a782572 fix: typos
    65803ea12 remove error message from exec outpout by default Add the error as a log for verbose mode
    f61337937 make sure the post_start hooks fails before we were assuming the container will be close before the post_start will be executed
    3553aa26a add a default statut messsage to exec error to avoid empty line display
    257ea7b75 Swap to Reader in bake to avoid hangs on output
    d219aa66f don't fail down cmd if services with pre_stop hook already stopped/removed
    c9ebfad78 exclude provider services from the list of dependencies that Compose should wait for
    8e57362a0 use errdefs.IsNotImplemented to check if the logging is not implemented
    29630f184 check progress default value instead of empty string to use BUILDKIT_PROGRESS env variable value
    6514c680a only expose API socket to service asking for it
    3394bf031 propagate target docker host set by --host to Bake
    832a08f57 build(deps): bump github.com/moby/buildkit from 0.23.0 to 0.23.1
    aadce87b1 inject secrets/config just before container is started
    b3207c455 setting buildOptions.Services triggers image to be always rebuilt
    769b7391b don't create from run command during dependencies creation process
    149b882eb don't create from run command during dependencies creation process
    c97e40e2b pkg/compose: remove uses of ExecOptions.Detach
    22e23bd4d networkMode
    2dde5faeb add support for cache_to with bake
    f7825a56b bump buildx to v0.25
    4cf075ea0 bump compose-go to v2.6.5
    4f491ffa9 fix panic using w shortcut on project without watch support
    ea1c26d22 restore ContainerName in images --json
    9a5fa05ad add (temporary) support for use_api_socket
    276c22945 move `run` logic inside backend
    eef448dc6 build(deps): bump github.com/containerd/containerd/v2
    343117233 build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
    f599a8cdd add support for extra_hosts building with bake
    63b06f556 fix panic on failure starting plugin server
    1d34661e9 fix support for additional_contexts with service sub-dependencies
    0f9e6ab83 Fix the generated manifest for compose artifacts so that the empty config is not added as a layer.
    15c9651a3 restore os.Remove(metadataFile)
    4893a8b9a don't create metadatafile, just generate a random name
    97530790f only look for required image in bake metadata
    213c03f99 produce bake targets for all services, group for services to build
    ebd7b761f sanitize service name so they can be used as bake targets
    ea48480d8 Restore images format list format behaviour
    8151b5928 bump golang.org/x/sync v0.15.0
    ec49baca5 do not forgot to remove the bake metadata file few DD e2e tests failed on Windows due to permission issues
    7b9ad9624 fix SIGSEGV on Enable Watch
    9b67a48c3 (refactoting) Move watch logic into a dedicated Watcher type
    0d0e12cc8 use Bake by default
    92fafccfb add validation for required parameters of provider service when metadata are available
    fee8aee8f save provider metadata for Docker LSP
    40f5786e6 add support of metadata subcommand for provider services This command will let Compose and external tooling know about which parameters should be passed to the Compose plugin
    61e44da93 debug message to help diagnose platform mismatch
    0bf7d1ea2 pull does not require env_file being resolved
    80ace63df build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
    27e90a3fd end-to-end test
    3ca75bdf5 Fix the inability to restart the Compose stack after network configuration change
    eb3074bbd include platform and creation date listing image used by running compose application
    f4fc010d6 build dependent service images when required
    693b9ef07 fix support for BUILDKIT_PROGRESS
    046879a4a replace uses of golang.org/x/exp/(maps|slices) for stdlib
    7c79b2300 pkg/bridge: fix importShadow: shadow of imported package (gocritic)
    ad4cbee49 bump github.com/docker/docker, docker/cli v28.2.2
    60256a875 fix typo in suggestion log
    45bd60c33 resolve symlinks while making dockerfile path absolute
    cf89fd1aa also (re)start dependent services after watch rebuilt image
    23fef850b prefer use of slices.DeleteFunc
    12b73bea7 remove utils.Contains to prefer slice.ContainsFunc
    2e71440be refactor: use slices.Contains to simplify code
    d49a68ecb bridge - run transformer container as current user
    be83f63f2 add e2e tests for bridge convert and transformers ls commands
    9a9227ce6 add new bridge commands documentation
    024f8ebdc add convert subcommand to bridge command
    8c622da20 add bridge command and transformations subcommands
    bbb2b76a1 bump cli-doc-tools to v0.10.0 and update the documentation to pass CI checks
    e45e58b3e bumpd buildkit v0.22.0 and buildx v0.24.0
    f52af4c86 bump compose-go to v2.6.4
    a54814ff3 e2e test
    a2d7548ca fix up --build with additional_context dependency
    8a2cb90a3 example provider implementation
    cc50ada72 report error (re)creating container
    5c74f0799 build(deps): bump github.com/containerd/containerd/v2
    7e198ee6a remove provenance build flag for now
    0566431c6 only use attestation when building image outside the development inner loop when building a image, by default attestation are generated and modify the image ID which trigger a container recreation on up, run command even if there isn't any changes on the image content itself
    4f6cc2a33 run ContainerStart sequentially
    2352a4a01 introduce config --lock-image-digests
    1f076a378 bump compose-go to v2.6.3
    009a23951 remove convert alias from config command
    305957428 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
    1229a6938 build(deps): bump github.com/containerd/containerd/v2
    f2a88e02a ensure build dependencies are enabled
    7f9101845 report cancelled pull after another one failed
    944e5e67a do not throw an error on build with provider services
    23fc76a54 Fix quiet option when using COMPOSE_BAKE=1
    053d22582 append .exe to provider name doing executable lookup on windows
    93b597cce remove Docker EULA licensing which isn't relevant since Docker switched to a subscription model
    4dcaf94c3 add support of 'debug' messages in the communication between Compose and provider binaries
    07e7619f4 set provider environment
    ed81185c5 fix provider info message
    22f8a7009 provider.options can be an array
    91a0aa026 skip push step for provider services
    7cea455c4 simplification
    559a51e59 build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0
    480a556bf build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0
    626336119 build(deps): bump github.com/moby/buildkit from 0.21.0 to 0.21.1
    9ee03c3fe bump compose-go to v2.6.2
    4bf18d232 docs: regenerate
    f0f47a8aa e2e: add tests
    d6e3fa6d7 Fix config --variables not honoring the --format flag
    16e83f002 introduce build --check
    2dbef234d document behavior on missing extension
    20f0ffec0 seach for provider binary in PATH
    cee6a3c66 document extensibility using service.provider
    fc8c56b40 select services implicitly declared by a service:xx build dependency
    9c998a934 fix collect image digests for service images built by bake
    0403f0d76 e2e test for start_interval
    91d04a5ca build(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2
    d2274ebe6 display proper event message for provider services on up and down
    6e3565218 fix support for remote absolute path
    5bb46035c Set --progress flag default value from env if provided
    f8dae06df Add support for COMPOSE_PROGRESS env variable
    955e4ed94 introduce networks.interface_name
    60385e606 bump compose-go to v2.6.1 fixing parsing of npipe as volume type
    f5491328b remove support of Synchronize File Shares integration with Docker Desktop
    f46689a75 build(deps): bump github.com/containerd/containerd/v2
    8fd0c297f build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
    f3bbfdae5 build(deps): bump github.com/docker/docker
    322c531a8 build(deps): bump github.com/docker/cli
    bf6b44726 fix: concurrent map writes when pulling
    a96c305b2 build: write --print output to stdout
    2d7cd2a99 go.mod: bump github.com/docker/cli v28.1.0
    cbb616ca0 go.mod: bump github.com/docker/docker v28.1.0
    640c7deae downgrade go-difflib and go-spew to tagged releases
    75b48cfc8 go.mod: bump github.com/docker/buildx v0.23.0
    047899c3e go.mod: bump github.com/moby/buildkit v0.21.0
    f91b41875 go.mod: bump github.com/docker/docker-credential-helpers v0.9.3
    42cccb1fe go.mod: bump golang.org/x/net v0.39.0
    674af0d66 go.mod: bump golang.org/x/crypto v0.37.0
    877d23233 go.mod: bump golang.org/x/term v0.31.0
    4bba13233 go.mod: bump golang.org/x/text v0.24.0
    a786e70b0 go.mod: bump golang.org/x/time v0.11.0
    13cd780f3 migrate to use github.com/moby/go-archive
    8e2f799cd chore: make function comment match function name
    2a84dfecf build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0
    f6913b086 build(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1
    d629fffa9 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
    7471e16d8 build(deps): bump github.com/moby/buildkit from 0.20.1 to 0.20.2
    51907d9f7 fix zizmor security alerts on GHA workflows
    a3f88a0a1 test to cover preference for bind API
    c83f1285a use bind API for bind mounts
    29e642e23 ci(bin-image): free disk space
    0c37c1096 mount API is not strictly equivalent to bind
    43cc2be8c build(deps): bump github.com/compose-spec/compose-go/v2
    01e83defc introduce volume.type=image
    846161d44 Fix linting issue with resp.Body.Close()
    0bcc629fb refactor: improve Desktop client structure
    482b62228 pkg/compose: implement Export using atomicwriter
    ee3314302 capture git fetch output when debug output is enabled
    cb0b5f6e2 build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0
    138485353 build(deps): bump golang.org/x/sys from 0.31.0 to 0.32.0
    096b1e32d plugin provider support: check docker model runner status
    bf71138df cleanup runPluging function
    a1f673dcf Update secret detector to fix vulnerability https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
    02c747a7d bump compose-go to custom version of v2.5.0 should be replace by v2.5.1 it will be released
    88f4f265d communicate with plugin using json events
    e67348222 DRAFT external services plugin support
    b54338070 feat(run): Add --quiet and --quiet-build options for the run command
    2e75185a0 bump golang to 1.23.8
    7bedb5a02 bump golangci-lint to version v2.0.2 and apply migration script
    f9cd4d0b1 bump docker,cli,buildx
    0badcf3c8 include implicit build dependencies in build command
    ec49db98d fix: replace docker-compose.yml with compose.yaml
    e5a353b34 fix: replace docker-compose.yml with compose.yaml
    43e456145 fix scale completion
    75368c785 introduce `build --print` to dump equivalent bakefile
    6e814eac3 fix(secrets): Reverted secrets file mode 440 -> 444
    a0d1c3f94 introduce config --no-env-resolution
    0c5bd16da bake parses "${}" in DockerfileInline as a variable
    b0badf1eb Set watch option --prune=true as default
    342a2a9e7 Fix support for depends_on.restart in up and restart commands
    7814e5798 build(deps): bump github.com/containerd/containerd/v2
    42b2e1109 build(deps): bump github.com/docker/buildx from 0.21.2 to 0.21.3
    6a8c0988c run only loads required service env_file and ignores others
    9129abe51 Fix edge-case bug path prefix check for watch & bind mounts
    f38f3f754 PWD
    ea07ba8e2 fix support for secret set by env inside included file
    432ae23b0 Test commandName subcommand order
    b6f313b8a bump compose-go to version v2.4.9
    13618756d make publish a regular command of Compose
    6c1e21572 lint: address gofumpt issues
    33e863ac6 fix linting issue
    f70209cf1 review: move Summary/Replica collection from cmd/ to pkg/
    62e832eb5 compose top: reduce tabwriter padding
    80e8fda14 compose top: ensure CMD is right-most column
    375a27978 top: expose container labels
    a766e1669 condense output of `compose top`
    793c6f171 add cli.isatty attribute to spans generated by compose
    8e3e1f7f8 build(deps): bump tags.cncf.io/container-device-interface
    83cafe283 Add support to pass env-from-file to docker compose run
    55b5f233c use Defang secret-detector to identify potential secret leaks before publishing OCI artifacts
    c3a0c3568 implement extends.file replace without yqlib
    8615e9a7c deprecate --y, prefer --yes
    b23728941 only load env_file after services have been selected
    1a7343bc8 build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1
    41e609404 add warning message when a remote configuration include an another remote config
    66a47169d Publish compose file with required siblings used by `extends`
    4c72d3a0e build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0
    59f39b999 build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
    7ab65ba12 build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0
    d9f05d72d improve message suggesting using bake
    7b88c5b0e display interpolation variables and their values when running a remote stack
    eaf980094 build(deps): bump github.com/opencontainers/image-spec

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
9d5c2aed90 docker-compose: update to go-mod-vcs format
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
aee553e9d9 go-mod-vcs: declare cache defaults
There are variables which are common to all recipes, declare defaults
to make recipe integration simpler.

Also, when creating the cache the messages are normal about synthesis,
etc, so reduce them to bb.note.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
0e22a16765 cni: update to v1.3.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
d2044c0e7b go-mod-vcs: missing go.mod is not a warning
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
56db9d52a1 go-mod-discovery: support multi-patckage build
When building multiple packages (./... or multiple targets), go build
requires the output to be a directory. Create the directory and use it.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
6c71c81ea5 cni: update to go-mod-vcs format
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
233ad1457f nerdctl: update to to v2.2.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
d59326817b go-mod-discovery: move patching after discovery build
When updating a SRCREV and then running discovery, we expect that
some patches will fail. We don't want that to block discovery as
these patches are not normally ADDING dependencies that would be
found.

So we move discovery before patch and patch failures can be dealt
with on a full build.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
b4dfb683a9 nerdctl: update to go-mod-vcs format
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
43a9e53dee oe-go-mod-fetcher: use dereferenced tags
Use dereferenced tag (^{}) to get the actual commit hash
For annotated tags, ref_hint returns the tag object hash, not the commit

Example: refs/tags/v1.0.1 -> c49ff274 (tag object)
         refs/tags/v1.0.1^{} -> 37c8de36 (actual commit)
         current_tag_commit = git_ls_remote(vcs_url, f"{ref_hint}^{{}}")

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
df651f904e discover: manage go.* files
The discovery repository can be in an incosistent state
after a build. By restoring the go.* files, we ensure a stable
start point.

Add automatic removal of go.sum files from git-fetched
dependencies in vcs_cache during do_create_module_cache.
This prevents checksum mismatch errors caused by stale
go.sum files in dependencies having different checksums
than the git-sourced modules.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
ae9fa39e6f go-mod-discovery: split into more tasks
To make it easier to run individual components of the go module
discovery and generation process, we add invidual tasks as well
as a combined task:

 AVAILABLE TASKS:

   bitbake <recipe> -c discover_modules
       Build project and download modules from proxy.golang.org
       This populates the discovery cache but does NOT extract or generate

   bitbake <recipe> -c extract_modules
       Extract module metadata from discovery cache to modules.json
       Requires: discover_modules to have been run first

   bitbake <recipe> -c generate_modules
       Generate go-mod-git.inc and go-mod-cache.inc from modules.json
       Requires: extract_modules to have been run first

   bitbake <recipe> -c discover_and_generate
       Run all three steps: discover -> extract -> generate
       This is the "do everything" convenience task

   bitbake <recipe> -c show_upgrade_commands
       Show copy-pasteable command lines without running anything

   bitbake <recipe> -c clean_discovery
       Remove the persistent discovery cache

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
02f6761794 k3s: convert to go-mod-vcs based build
Convert k3s from the old vendor/modules.txt approach to the new
go-mod-vcs build system that fetches Go modules via git.

Changes:
- Update k3s_git.bb to inherit go-mod-vcs class
- Add go-mod-git.inc with SRC_URI entries for all module git repos
- Add go-mod-cache.inc with module path mappings
- Remove old src_uri.inc, relocation.inc, and modules.txt
- Update to k3s v1.34.1+k3s1

The go-mod-vcs class will:
1. Fetch all module sources via git (defined in go-mod-git.inc)
2. Build GOMODCACHE with proper zip files and hashes
3. Enable fully offline, reproducible Go module builds

This eliminates the need for vendored dependencies or network
access to Go module proxies during the build.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
a303bf16ff scripts: add oe-go-mod-fetcher for Go module VCS resolution
Add the oe-go-mod-fetcher.py tool and supporting files for resolving
Go module dependencies via git repositories instead of module proxies.

oe-go-mod-fetcher.py:
  - Parses go.mod and go.sum to identify required modules
  - Resolves module paths to git repositories (handles vanity URLs)
  - Maps module versions to git commits
  - Generates SRC_URI entries for bitbake fetcher
  - Creates go-mod-git.inc and go-mod-cache.inc files
  - Supports monorepo detection and nested module handling
  - Caches resolution results for performance

extract-discovered-modules.py:
  - Helper script to extract module information from discovery cache
  - Used by go-mod-discovery.bbclass during build

Also adds .gitignore to exclude runtime caches from version control.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
9f40ce9b27 classes: add go-mod-vcs and go-mod-discovery for Go module builds
Add two new bbclass files that enable building Go applications using
git-based module resolution instead of network proxy fetches:

go-mod-vcs.bbclass:
  - Provides do_create_module_cache task to build GOMODCACHE from git sources
  - Implements pure Python h1: hash calculation with go-dirhash-native fallback
  - Creates properly structured module zip files and hash files
  - Handles module path transformations and case encoding

go-mod-discovery.bbclass:
  - Runs module discovery using the oe-go-mod-fetcher tool
  - Generates go-mod-git.inc and go-mod-cache.inc files
  - Supports bootstrap mode for initial recipe conversion

Together these classes enable fully offline, reproducible Go builds
by fetching module sources via git and constructing the module cache
during the build rather than relying on network access to module proxies.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
44c4e44db7 devtools: add go-dirhash-native for Go module hash calculation
Add a native recipe that builds the Go dirhash tool for calculating
h1: hashes on module zip files. This is used as a fallback when the
pure Python implementation cannot be used.

The tool implements the Go module hash algorithm per the Go modules
reference specification.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
26e2b40b91 xen/x86: fix QA errors
The xen version bump brought in these QA errors:

  ERROR: xen-tools-4.21+stable-r0 do_package: QA Issue: xen-tools: Files/directories were installed but not shipped in any package:
    /usr/lib/xen/tests/test_x86_emulator
    /usr/lib/xen/tests/test-cpu-policy
    /usr/lib/xen/tests/test-tsx
  Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
  xen-tools: 3 installed and not shipped files. [installed-vs-shipped]
  ERROR: xen-tools-4.21+stable-r0 do_package: Fatal QA errors were found, failing task.
  ERROR: Logfile of failure stored in: build/tmp/work/x86-64-v3-poky-linux/xen-tools/4.21+stable/temp/log.do_package.2597669
  ERROR: Task (meta-virtualization/recipes-extended/xen/xen-tools_4.21.bb:do_package) failed with exit code '1'
  NOTE: Tasks Summary: Attempted 4228 tasks of which 4210 didn't need to be rerun and 1 failed.

We package two of the new files, and delete one host-compiled tool that
isn't used.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-03 17:25:26 -05:00
Bruce Ashfield
358452b4e5 kvmtool: update to -tip
Bumping kvmtool to latest, which comprises the following commits:

    7ad32e5 net/uip: Avoid deadlock in uip_tcp_socket_free()
    c4e9b3a virtio/pci: explicit zero unknown devices features
    ba6830e vfio: include libgen.h (for musl compatibility)
    1117dbc riscv: Allow including extensions in the min CPU type using command-line
    a50e8d8 riscv: Add cpu-type command-line option
    d47ad01 riscv: Include single-letter extensions in isa_info_arr[]
    b6e9f38 riscv: Fix no params with nodefault segfault
    1132ace riscv: Make system suspend time configurable
    fcc3160 riscv: Add SBI system suspend support
    0641ed8 riscv: Add Ziccrse extension support
    8be1c78 riscv: Add Zabha extension support
    a988086 riscv: Add Svvptc extension support
    2ab7f9f Sync kernel UAPI headers with v6.14
    ad9b731 util: Fix update_headers.sh after removal of 32-bit Arm code
    d410d9a arm64: Get rid of the 'arm-common' include directory
    0a10c48 arm64: Rename top-level directory
    4cd7b87 arm64: Move asm headers
    f8a539a arm64: Move remaining kvm/* headers
    7113578 arm64: Combine kvm-config-arch.h
    65878da arm64: Merge kvm-cpu.c
    14e8c42 arm64: Combine kvm.c
    5188575 arm64: Move arm64-only features into main directory
    329fe56 Drop support for 32-bit arm
    e48563f riscv: Add Ssnpm extension support

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:57:04 -05:00
Jaeyoon Jung
71801fb8a1 lxc: Fix build with musl
Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:49:04 -05:00
Kai Kang
4499b1b3f1 libvirt: set firewall backend priority
If firewall_backend isn't configured in the config file, libvirt will
choose the first available backend from the following list by default:

    [nftables, iptables]

so when nftables is installed in image, firewall backend nftables rather
than iptables is adopted.

Add a PACKAGECONFIG to set the firewall backend priority. And update
runtime dependencies for backend nftables.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:44:16 -05:00
Bruce Ashfield
18c8c60991 irqbalance: update to v1.9.4
Along with picking up the latest commits:

 - we drop our previously backported patch
 - make the init system selection more flexible, with a systemd
   PACKAGECONFIG
 - package the upstream .service file + support environment

Bumping irqbalance to version v1.9.4-85-g4c23485, which comprises the following commits:

    907b65f meson: force systemd-service installation with a seperate option
    14fb838 Fixed incorrect comparison in snprintf() in procinterrupts.c.
    5fdc1d6 Added missing '/' and fixed message in procinterrupts.c.
    030edf9 Safer string handling in procinterrupts.c.
    0a7ca36 Increase file descriptor limit via systemd service file
    ef80188 update workflows to ubuntu-24.04
    41cb97c Properly embed EnvironmentFile sourced systemd configs into meson and autonconf
    4996883 Unify meson and autoconf: Install executables to sbin
    ffa304a Fix the wrong string existence checking condition
    d602002 check_platform_device: Check the length of path
    105b155 Check API command length, allow up to 16384
    d434114 fix some GCC fanalyzer warnings
    3685d33 Use EPERM instead of EIO when try setting irq affinity fails
    1489ae3 irqbalance.1: a , b => a, b; it's type => its type
    25fa380 Check info->moved before updating
    196385b Add CAP_SETPCAP to CapabilityBoundingSet in irqbalance.service
    5d9eb19 Version option should return 0 rather than 1
    2860da4 Minor punctuation fix.
    42115bd define IRQBALANCE_ARGS as empty string to squelch systemd warning
    da75aae conver strncmp to g_str_has_prefix
    6f9f9e9 avoid malloc with create_credentials_msg
    4341808 use g_strdup_printf
    4d53728 gcc analyzer: increase socket_name size
    e39848b gcc analyzer: add NULL checks
    7622883 remove malloc from ucred
    a7cfbeb use g_malloc and friends
    13916f7 clang-tidy: remove pointless casts
    2ed4dd0 clang-tidy: don't assign in if
    16564e3 clang-tidy: add missing free
    d36ae56 direct initialize iovec
    5010a97 direct initialize msghdr members
    9851c8c Remove extraneous space causing --with-systemd not be aligned
    c90599b Disable linking to curses if --without-irqbalance-ui is specified.
    5405144 Track IRQ "slots" count per CPU to avoid overflowing
    d16ad5d Wrap migrate_irq in a higher level utility function
    44795ad CI: add meson CI
    e78ea26 clang-tidy: remove duplicate include
    02f7c17 clang-tidy: remove redundant declarations
    9b1ced2 clang-tidy: remove return in void functions
    2c3cbb5 clang-tidy: don't use else after return
    8f575ec replace malloc with g_malloc0
    4c1b0a0 clang-tidy: properly use strncmp
    122ae9e clang-tidy: don't assign in if
    80a8aeb ui: change void to char
    2e1bf90 meson: use find_library for numa
    280b89d meson: replace generic array with files()
    f2c8309 Drop ProtectKernelTunables
    23c6da7 meson: add a minimum version decorator
    ea733f4 meson: drop redundant install_man() options
    21e1ae8 meson: bump project version to 1.9.4
    922ee47 meson: move build files to repository root
    f2aebff cast void pointer to actual type
    b6a831d add void to fix strict-prototypes
    1277ea5 fix 32-bit formats
    8301666 Check fflush() return value
    c0cd614 irqbalance-ui: check if using a negative index of buffer
    f8b8cdd update configure to version 1.9.4
    8d7c783 Flush file before closing
    de0fe4a Fix socket API being blocked for 10s
    a99b604 Set additional systemd options for service
    f4d987f activate_mapping: set errsave before first jump to the error label
    b4c3771 Avoid repeated affinity checks when no change is necessary
    ad0ea2c Slience "... rebalancing" messages for unmigratable IRQs
    f3282f4 filter console only output when using journal mode
    43cace4 Enable systemd feature support by default when building with meson
    2c167c4 Add support for linking against libnl when building with meson
    73cc58c Turn NUMA support into an enabled feature, when building with meson
    1aed521 Set project version of meson build to 1.9.3
    f042291 Install man pages when building with meson
    2b59014 When building with meson, make sure to link against numa
    5635a2e Updating to version 1.9.3
    75a15c5 Automatically use systemd journal and run in foreground when under systemd
    bc7794d activate_mapping: avoid logging error when there is none
    eee7917 activate_mapping: only blacklist irq if error is considered permanent
    9a1fd29 activate_mapping: report error reason
    470a64b activate_mapping: make sure to catch all errors
    f589bdc activate_mapping: avoid use-after-free when affinity cannot be set
    4efc192 Revert "activate_mapping: fflush the buffered data to smp_affinity"
    8bbc0ae activate_mapping: fflush the buffered data to smp_affinity
    d02ec54 procinterrupts: fix initialisation of regex_t struct
    0e05127 Fix it so we actually stop when we hit an interrupt condition
    3920e06 Fix signedness of error handling
    ea1e9a7 Revert "Fix CPU number condition in service file"
    0e9acb6 Issue 259: select NL_SKIP / NL_STOP based on error
    f166b00 fix CPU number condition in service file
    c91bdf6 thermal: Fix log message for perf and efficiency
    f85c6c1 ui: do not force black background
    ac4ba06 irqbalance: fix memory leak in irq hotplug path
    bbcd9a4 procinterrupts: Fix IRQ name parsing on certain arm64 SoC
    178cf3b thermal: Fix the warning message
    efec4c6 allow AF_NETLINK in the systemd service restrictions
    7c18ffc optimize getting cpu number
    3ddaa30 updating to version 1.9.2
    febe697 change  the log level in thermal.c from error to warning
    b25b1f9 Avoid double free on deinit_thermal()
    014765d Fix uninitialized variable
    e10949e irqbalance: fix a minor typo
    ac05cb7 updating to version 1.9.1
    725d9b1 irqbalance: properly check if irq is banned
    402ca1b irqbalance-ui: display irq name in SETUP IRQS
    d48eaf6 irqbalance: use endptr to check whether the input parameter is empty
    c8d1fff irqbalance-ui: skip ',' in parse_setup to avoid coredump
    cfb15f0 Improve documentation and logging for banned cpus
    577796a irqbalance-ui: print cpulist in SETUP IRQS
    db7dc03 irqbalance-ui: support scroll under tui mode of irqbalance-ui
    a61b382 fix memory leak in ui/ui.c
    b65faa2 irqbalance-ui: can't change window when in editing state
    7f1caca irqbalance-ui: move 'ASSIGNED TO CPUS' to the last column
    0a82ddd parse_proc_interrupts: fix parsing interrupt counts
    028082a add keep_going check to prevent irqbalance from failing to exit after SIGTERM
    5602913 Handle thermal events to mask CPUs
    c65cda1 Implement Netlink helper functions to subscribe thermal events
    b66647a Prepare to handle thermal event
    378d470 add meson
    bd67801 Enable static building of irqbalance
    5228835 check whether savedptr is NULL before invoking strlen
    ff48ac9 get irq->module relationship from /sys/bus/pci/*/driver
    80d5fbb updating to version 1.0.9
    df3436b Add the cpus_copy() helper
    61a9423 correct wait time in oneshot mode
    917b102 Document migrateval
    188f9ef Confine irqbalance to systems where it is useful.
    0f594a6 Separate variable declaration from assignment
    9b004c6 Ensure that we get all of a unix message

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:40:02 -05:00
Bruce Ashfield
5459ca4fdc lxc: update to v6.0.5-tip
Bumping lxc to version v6.0.5-17-gf9ff9ea2a, which comprises the following commits:

    f9ff9ea2a build(deps): bump actions/checkout from 5 to 6
    c21296262 apparmor: skip /proc and /sys restrictions if nesting is enabled
    be5ce5529 Update lxc.spec.in to use meson
    e716bd6c8 config/apparmor/abstractions: Drop manually generated container-base file
    5d0182b0d config/apparmor/abstractions: Fix meson build generation of container-base
    539424964 build(deps): bump actions/upload-artifact from 4 to 5
    fdc302322 builds workflow: make .orig.tar.gz unique per build
    d0d4f9896 github: Drop focal source packages
    944118acd add MFD_EXEC and MFD_NOEXEC_SEAL flag to memfd_create
    ca9ecef01 Automatically detect compression format in the lxc-local template
    50bddb8e3 lxccontainer: check if target exists before remove in create_mount_target()
    d692ba5a9 Standardize log file create mode to 0640
    0e84c43d7 Enable systemd to create /var/lib/lxc at runtime with StateDirectory
    277634689 commands: Fix indent
    9184960a8 README: update links
    7e0e0d1ae Rename CONTRIBUTING to CONTRIBUTING.md
    675ffcd71 README: Fix CI links
    9e4e69ed1 Release LXC 6.0.5

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 22:45:51 -05:00
Bruce Ashfield
18dc032f50 xen-tools: fix QA error
Fixing:

ERROR: xen-tools-4.21+stable-r0 do_package_qa: QA Issue: File /usr/lib/xen/tests/.debug/test_vpci in package xen-tools-dbg contains reference to TMPDIR [buildpaths]
ERROR: xen-tools-4.21+stable-r0 do_package_qa: Fatal QA errors were found, failing task.
ERROR: Logfile of failure stored in: /poky/build/tmp/work/armv8a-poky-linux/xen-tools/4.21+stable/temp/log.do_package_qa.910059
ERROR: Task (/poky/meta-virtualization/recipes-extended/xen/xen-tools_4.21.bb:do_package_qa) failed with exit code '1'

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-21 15:39:00 -05:00