Commit Graph

14 Commits

Author SHA1 Message Date
Bruce Ashfield
bc2a750d5c containers: adapt to UNPACKDIR changes
This commit updates the container recipes to the OE core UNPACKDIR
changes.

  - We drop references to WORKDIR
  - We adjust destsuffix fetches to use BB_GIT_DEFAULT_DESTSUFFIX
    instead of 'git'
  - Update our GOPATH references to use UNPACKDIR
  - Drop S = assignemnts where possible

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-06-25 22:40:08 -04:00
Bruce Ashfield
5c7becd086 oci-runtime-spec: update to v1.2.0
Bumping runtime-spec to version v1.2.0-17-g7017384, which comprises the following commits:

    119ae42 Add CPU affinity to executed processes
    2149fb5 config-linux: describe the format of cpus and mems
    c6af124 ci: remove redundunt actions
    d4aa6d8 chore: format JSON file `make -C schema fmt`
    b983fbf CODEOWNERS: remove vbatts
    bf698d0 MAINTAINERS: move vbatts to EMERITUS
    12b653d Update golangci-lint to v1.56.1 in CI
    8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
    1a729af Update GitHub Actions packages to resolve warnings in CI
    65cd1f8 Back to +dev
    36852b0 version: release v1.2.0
    021ba94 config.md: allow empty mappings for [r]idmap
    5e98fec features: add potentiallyUnsafeConfigAnnotations
    cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
    4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
    2f6b090 config: improve bind mount and propagation doc
    0ec4e6b fix link to hooks in features
    6ffddf6 mount: Allow relative mount destinations on Linux
    f329913 features-linux: Expose idmap information
    7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
    2547bb0 config: add idmap and ridmap mount options
    3f552ce version: release v1.1.0+dev
    0625254 version: release v1.1.0
    d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
    5430e36 ChangeLog: Document changes since v1.1.0-rc.3
    2bd22fa features.md: add a note to avoid confusion about annotations
    5612d21 Remove outdated meeting.ics
    085728a README.md: update chat information
    8b4cadd version: v1.1.0-rc.3+dev
    ae35e39 version: release v1.1.0-rc.3
    d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
    1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
    fccfb09 config: add support for org.opencontainers.image annotations

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-16 14:02:22 +00:00
Bruce Ashfield
08435d20b1 recipes/classes/scripts: Drop SRCPV usage
bitbake has been enhanced such that SRCPV is no longer needed in
PV to handle updating git hashes and task signatures.

We can simplify our PV by dropping SRCPV

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
c8d2b7f738 oci-runtime-spec: update to 1.1.0-rc.2
Bumping runtime-spec to version v1.1.0-rc.2-22-g720792f, which comprises the following commits:

    1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
    d46c8b2 schema: fix definition for ioPriority
    504f70e Add I/O Priority Configuration for Process Group in Linux Containers
    05563ea features: update Example
    d89ef1e glossary: s/features document/Features structure/g
    39bd2ef MAINTAINERS: add Toru Komatsu (utam0k)
    f66aad4 Update ociVersion in config-linux.md example
    206251f releases: use +dev as in-development suffix
    8947849 spec: add scheduler entity
    4ee185a version: v1.1.0-rc.2-dev
    a5b4da4 version: release v1.1.0-rc.2
    54f948c ChangeLog: Document changes since v1.1.0-rc.1
    6152be4 schema: remove duplicate keys
    9d7c878 Clarify I/O throttling differences between cgroup v1 and v2
    b6980b0 schema: fix schema for timeOffsets
    689874f Add `features.md` to formalize the `runc features` JSON
    167ffb4 Add Go 1.20 support to CI
    15d2a5a Switch Go linting to use golangci-lint
    c9b5d0e Remove references to deprecated io/ioutil package
    77c37f1 Update config-linux.md fix time_namespaces url error.
    6c638b1 config: clarify Linux mount options
    72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern`
    c42f9ae version: v1.1.0-rc.1-dev
    3e013c2 version: release v1.1.0-rc.1
    f790b68 ChangeLog: Document changes since v1.0.2
    36bb632 Add support for time namespace
    f225699 config: change prestart hook spec to match reality
    4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
    d931d4b config-linux: add CFS bandwidth burst
    6be797c CODEOWNERS: sync with MAINTAINERS
    9e658bc config-linux: add memory.checkBeforeUpdate
    3565df5 config-linux: Clarify where device nodes can be created
    1924f6b GOVERNANCE: correct the Charter URL
    744912b add domainname spec entity
    0da1600 fix rfc link
    b57ada5 maintainer updates as per #1101
    9d1130d IDMapping field for mount point
    fc985aa config-linux: update type of LinuxCPU.Idle to *int64
    bc545ec schema: add cpu idle
    1fef707 Update Windows CPU comments
    e78a3c3 Add available `LinuxSeccompFlag`s
    600a8bd cgroup ownership: clarify that some files may not exist
    b8dbce9 update idle type of LinuxCPU from *int64 to int64
    9d363b3 config-linux: add idle option for container cgroup
    b05eb53 typo: seccompFD -> seccompFd
    a650533 config-linux: add support for rsvd hugetlb cgroup
    84251a4 specs-go: export LinuxBlockIODevice
    3f30167 schema: make with golang 1.16
    34a7544 schema: update README.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:32 -04:00
Chen Qi
96870b9712 meta-virt: sync SRC_URIs between k8s and k3s
k3s is using a lot of SRC_URIs and some of them have corrsponding
recipe in meta-virt, which are used by k8s. These components'
SRC_URIs are better to be kept in sync, because this avoids two
local git repos (Yocto supports fetching locally) which are totally
the same. Remove the '.git' suffix from these recipes to sync the
SRC_URIs.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-02-15 15:09:17 -05:00
Bruce Ashfield
3cd2f56a16 oci-runtime-spec: update to 1.0.2-tip
Bumping runtime-spec to version v1.0.2-79-g7ceeb8a, which comprises the following commits:

    600a8bd cgroup ownership: clarify that some files may not exist
    0608c1f Switch to GitHub Actions, CODEOWNERS, etc.
    f4ef391 specify cgroup ownership semantics
    104385d config-linux: MAY reject an unfit cgroup
    411082c add youki to implementations.md
    6641127 alphabetize the implementation list.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Martin Jansa
baf9e1a06f global: convert github SRC_URIs to use https protocol
* apply the same also for recipes using PKG_NAME starting
  with github.com which the conversion script doesn't update
  automatically

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-03 09:37:00 -04:00
Bruce Ashfield
e13ea7df92 oci-runtime-spec: update branch specification to main
master has become main in the runtime spec, so we update our recipe to
match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-03 09:33:46 -04:00
Bruce Ashfield
ac399ad091 global: add explicit branch to all SRC_URIs
As introduced in the oe-core post:

  https://lists.openembedded.org/g/openembedded-core/message/157623

SRC_URIs without an explicit branch will generate warnings, and
eventually be an error.

We run the provided conversion script to make sure that meta-virt
is ready for the change.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02 09:57:03 -04:00
Bruce Ashfield
cf81b3dec5 oci-runtime-spec: update to 1.0.2
Bumping runtime-spec to version v1.0.2-71-gab23082, which comprises the following commits:

    411082c add youki to implementations.md
    6641127 alphabetize the implementation list.
    15f418e fix the lifecycle reference in the states listing
    f0ac327 defs-zos: [Fix] prevent schema parsers from hitting recursion-loop while resolving types.
    cc7f6ec config-linux: Add Intel RDT CMT and MBM Linux support
    c83b45e Introduce zos as platform.
    0c021c1 config-linux: clarify the handling of ClosID RDT parameter
    9e65944 config-linux: fix indentation on IntelRdt
    0f84938 schema/defs-linux: Fix inconsistencies with seccomp notify
    7c549cb seccomp: Add missing const for seccomp notify action
    58798e7 Add Seccomp Notify support
    8c363e8 Proposal: runtime should ignore capabilities that cannot be granted
    f02cd4a config-linux: mark memory.kernel[TCP] as NOT RECOMMENDED
    76f7818 README: Fix broken link for charter
    f7ef278 seccomp: allow to override default errno return code
    ec964df seccomp: expect error with invalid errnoRet
    2978430 config-linux: fix personality link
    e9429bb Makefile: Fix golint URL used in go get
    8f65443 travis: fix go_import_path
    3866eec MAINTAINERS: update vbatts email
    2fe0475 Add support for SCMP_ACT_KILL_THREAD
    fd895fb Change all references from whitelist to allowed
    11bfea2 Fix int64 and uint64 type value ranges
    57a316b docs: Added enclave OCI runtime rune to implementations
    938cf9f Update seccomp architectures to support RISCV64
    d3f079a config.go: make umask a pointer
    a02a293 Update State structure to use the new ContainerState type
    7571d3d cgroup: add cgroup v2 support
    66ad83f Use dedicated type for Container State
    89419f0 Add State status constants to spec-go
    09fc3b4 Remove superfluous 'an'
    0e72101 Add Giuseppe Scrivano as runtime spec maintainer
    6042999 Define State for container and runtime namespace
    a9f1170 Add seccomp kill process
    d759f35 MAINTAINERS: Add @cyphar as maintainer
    f9df045 seccomp: fix go-specs for errnoRet
    3bfcde2 seccomp: allow to override errno return code
    1ac6f8d specs-go: bump master back to -dev
    c4ee7d1 specs-go: update version to 1.0.2
    ce773cb ChangeLog: changes v1.0.1...v1.0.2
    5ef5c78 Makefile: avoid SELinux for making docs
    d22e8e0 *: release process is duplicated in RELEASES.md
    41c3e47 Review (tianon)
    9be9595 Clarify case with pre-configured Intel RDT closID
    76c0da2 config-linux: describe more about rootfs mount propagation
    353ddcb config-linux: add SHOULD to linux.namespaces.type
    37fab77 Fix typo in RELEASES.md
    baa7978 remove unneeded indent
    a87fe24 Makefile: no DCO with git-validation on travis
    bacc285 MAINTAINERS: remove philips
    d5bfb2b MAINTAINERS: remove Vishnu
    dda13dc PullApprove: No need for 3 DCO checks
    12fd09a RELEASE: document how to do the release
    c166268 Add create-container, create-runtime and start-container hooks
    e6e17ad schema: drop id from umask
    fac34e2 schema: fix indentation
    03c526b schema: add missing definition for personality
    2b844a0 Add support for SCMP_ACT_LOG
    66f4ffa Add new seccomp action.
    d1ef109 config-linux: support seccomp flags
    ff32f02 implementations.md: fix repository for crun
    23c4be2 Update meeting info section to point to "org" repo
    78ab98c Fix markdown escape in config-linux
    5cc25d0 Add Linux personality support
    234aa0b config-linux: Add Memory cgroup's use_hierarchy
    6b04c63 config: add "umask" field to POSIX "user" section
    dba5778 config: Collapse extensibility to a single MUST
    574182a schema/defs-linux: change weight type to uint16
    ec0fc3d runtime: Clarify ociVersion as based on the state schema

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-18 14:04:15 -04:00
Bruce Ashfield
d876cfc5bf global: overrides syntax conversion
OEcore/bitbake are moving to use the clearer ":" as an overrides
separator.

This is pass one of updating the meta-virt recipes to use that
syntax.

This has only been minimally build/runtime tested, more changes
will be required for missed overrides, or incorrect conversions

Note: A recent bitbake is required:

    commit 75fad23fc06c008a03414a1fc288a8614c6af9ca
    Author: Richard Purdie <richard.purdie@linuxfoundation.org>
    Date:   Sun Jul 18 12:59:15 2021 +0100

        bitbake: data_smart/parse: Allow ':' characters in variable/function names

        It is becomming increasingly clear we need to find a way to show what
        is/is not an override in our syntax. We need to do this in a way which
        is clear to users, readable and in a way we can transition to.

        The most effective way I've found to this is to use the ":" charater
        to directly replace "_" where an override is being specified. This
        includes "append", "prepend" and "remove" which are effectively special
        override directives.

        This patch simply adds the character to the parser so bitbake accepts
        the value but maps it back to "_" internally so there is no behaviour
        change.

        This change is simple enough it could potentially be backported to older
        version of bitbake meaning layers using the new syntax/markup could
        work with older releases. Even if other no other changes are accepted
        at this time and we don't backport, it does set us on a path where at
        some point in future we could
        require a more explict syntax.

        I've tested this patch by converting oe-core/meta-yocto to the new
        syntax for overrides (9000+ changes) and then seeing that builds
        continue to work with this patch.

        (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284)

        Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02 17:17:53 -04:00
Bruce Ashfield
cf875d9ee9 containers/runtime-spec: update to v1.01
Updating the reference spec to v1.01. No functional or runtime changes
are expected from this.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Jason Wessel
a31f735bda oci-runtime-tools, oci-runtime-spec: Uprev to runc 1.0-rc3 versions
The config.json has elements which have changed in the latest runc.
These changes are not backward compatible with older versions of runc.

Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2017-07-13 13:53:58 -04:00
Bruce Ashfield
b18acd8bc4 oci: introduce oci-image-tools (and dependencies)
The oci image tools allow the easy manipulation of containers and
bundles.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2017-02-15 14:57:35 -05:00