Commit Graph

2213 Commits

Author SHA1 Message Date
Bruce Ashfield
06e6947fc9 docker-distribution: update to 2.8.2
Bumping docker-distribution to version v2.8.2-2-g8728c52e, which comprises the following commits:

    ab7178cc Pass BUILDTAGS argument to go build
    a173a9c6 Add v2.8.2 release notes
    483ad69d registry/errors: Parse http forbidden as denied
    2b0f84df Revert "registry/client: set Accept: identity header when getting layers"
    5f3ca1b2 Add release notes for 2.8.2-beta.2 release
    e884644f Dockerfile: fix filenames of artifacts
    ac6c72b2 Add 2.8.2-beta.1 release notes
    ae58bde9 Fix gofmt warnings
    3f2a4e24 update to go1.19.9
    9c04409f [release/2.8] ignore deprecation of io/ioutil
    3d8f3cc4 Dockerfile: update xx to v1.2.1
    70db3a46 bump up golang version
    db1389e0 dockerfiles: formatting
    018472de dockerfiles: set ALPINE_VERSION
    19b3feb5 Update to xx 1.1.1
    14bd72bc Dockerfile: switch to xx
    2392893b bump up golang v1.17
    092a2197 [release/2.8] fix package name in Dockerfile
    22a80503 fix(ci): use go install instead of go get
    1d52366d Merge pull request #2815 from bainsy88/issue_2814
    521ea3d9 Fix runaway allocation on /v2/_catalog
    ad5991de Fix panic in inmemory driver
    38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
3fe898899f crun: update to v1.8.6
Bumping crun to version 1.8.6-11-gd7ee549, which comprises the following commits:

    c786d4c linux: simplify error handling
    c972772 linux: do not write twice errors
    74a3874 linux: use helper functions instead of custom read/write
    35a0166 linux: define helper to ack on the sync socket
    c3e518e libcrun: drop symbol for crun_make_error
    080e560 features: use exported function libcrun_make_error
    5c2dedc Make the spec file parseable without copr_username defined
    73f759f NEWS: tag 1.8.6
    26ef1e0 linux: add sync before sending mounts
    71c53b0 RPM: Set Epoch only for Copr builds
    ee0e405 tests: install procps-ng for podman tests
    6a3d7a7 Packit: initial enablement
    58bb52c tests: fix cpu-weight-systemd test under a user manager
    ee111ae tests: skip test_uid_tty if no tty is attached
    74dd5f9 tests: use get_crun_path() in oci_features
    b160e2c cgroup-resources: allow setting swap to 0
    19cd8aa ps: fix segfault with pids=NULL

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
08f58c3181 cri-tools: update to v1.27.1
Bumping cri-tools to version v1.26.0-279-gdd51f3b7, which comprises the following commits:

    16975aba Make `haircommander` an approver
    e3cc516b override path defaults for FreeBSD
    f8f05611 Use `UserSpecifiedImage` for seccomp tests
    a4110ef6 Bump github.com/onsi/gomega from 1.27.9 to 1.27.10
    2cffae40 Bump github.com/docker/docker
    2d4e6c27 Bump github.com/onsi/gomega from 1.27.8 to 1.27.9
    4a84e5a3 Bump github.com/opencontainers/runc from 1.1.7 to 1.1.8
    28bbd92a Switch to logrus in favor of glog
    edf8fd39 Update version in README
    dafc2b62 Add `crictl runtime-config` command
    01952e78 Use google/uuid
    183c8fa3 Fix release notes job
    cf42ba9f Drop support for docker log format
    c1e6f2eb Bump Kubernetes to v1.28.0-alpha.4
    fc7c11ed Bump github.com/docker/docker
    fcb21b99 Revert "fix listCoontainerStats not filter"
    ffb1ef1e Bump github.com/docker/docker
    505d5ce7 Bump Kubernetes to v1.27.3
    49cf12cb Bump golang.org/x/net from 0.11.0 to 0.12.0
    0aa3049e Bump golang.org/x/sys from 0.9.0 to 0.10.0
    e6438103 fix listCoontainerStats not filter
    2ee62a09 Typo fix in critest
    5b6b7180 Format print output in imagefsinfo cmd
    b432bc8d Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0
    d901bb43 Bump github.com/urfave/cli/v2 from 2.25.6 to 2.25.7
    acc3f298 Bump golang.org/x/net from 0.10.0 to 0.11.0
    5feab035 Bump github.com/urfave/cli/v2 from 2.25.5 to 2.25.6
    90b22c75 Bump golang.org/x/term from 0.8.0 to 0.9.0
    0b7c24b5 Bump google-github-actions/setup-gcloud from 0 to 1
    5c28a488 Bump actions/upload-artifact from 1 to 3
    c3a28fe2  add dependabot config to update github actions
    806c66f9 update actions using node12
    5e9d1f5d Add image build test to GitHub actions
    b80b9bde Bump github.com/onsi/gomega from 1.27.7 to 1.27.8
    8e03fbd3 Bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0
    a8ca78a0 Pin `FROM` images to tags
    bde07883 Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
    5fd98895 Migrate to field based seccomp tests
    5d362aa6 Bump github.com/onsi/ginkgo/v2 from 2.9.6 to 2.9.7
    32ba4251 added testing on 1.7
    b7e85c71 Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.6
    4714253b Update critest from 1.17 to 1.27
    88a2b60b Bump github.com/urfave/cli/v2 from 2.25.3 to 2.25.5
    63e39e26 Bump github.com/docker/docker
    2c0f354e Bump github.com/docker/docker
    aeea5099 Update the incorrect link to release page in crictl.md
    ea559418 Bump github.com/onsi/gomega from 1.27.6 to 1.27.7
    7ed308a3 Bump github.com/sirupsen/logrus from 1.9.1 to 1.9.2
    f0bf767c Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
791ffcd5df cri-o: update to 1.27.1
Bumping cri-o to version v1.27.1-7-gab7845e07, which comprises the following commits:

    fbfca3a52 oci: update unit tests for new stop code
    6dec88e7c oci: simplify stopping code
    5b7b82f56 oci: don't return ErrContainerStopped from StopContainer
    0e4df2e9c oci: change IsAlive to Living
    92b455156 devices: fill the FileMode field in spec
    e54504a00 version: bump to 1.27.1
    a61082768 vendor: drop podman replace and actually update runc
    9c86a1269 vendor: bump runc to 1.1.6

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
c82deadd3b containerd: update to 1.7.2
Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits:

    2eaeb3205 Fix ro mount option being passed
    4cb2f1515 [release/1.7] Add release notes for v1.7.3
    b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory
    14328ae03 migrate to community owned bucket
    b985f7ef1 update runc binary to v1.1.8
    f7a20e17c Move logrus setup code to log package
    7353c0286 ctr: update WritePidFile to use atomicfile
    ae7021300 shim: WritePidFile & WriteAddress use atomicfile
    186eb64b7 cri: write generated CNI config atomically on Unix
    64c3dcd8e atomicfile: new package for atomic file writes
    083f57160 capture desc variable in range variable just in case that it run in parallel mode
    a9440ce6b Use t.TempDir instead of os.MkdirTemp
    eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User
    eace67180 fix userstr for dditionalGids on Linux
    973778193 Update Go to 1.20.6,1.19.11
    60a6db9c2 Cirrus CI: configure apt-get to wait for locks
    6b6b0c828 bugfix(port-forward): Correctly handle known errors
    898eca21e Change http.Header copy to builtin Clone
    fa2efc406 Resolve docker.NewResolver race condition
    241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
    801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
    d5639a5a8 vendor: github.com/containerd/zfs v1.1.0
    403033e52 update go to go1.20.5, go1.19.10
    15d65709e ci: remove libseccomp-dev installation for nightly
    a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2
    c2c54af9d Update ginkgo to match cri-tools' version
    6281d46df seccomp: always allow name_to_handle_at
    3bf3996d9 integration/client: add timeout to `TestShimOOMScore`
    699d6701a Pinned image support
    18c6503d9 runtime/v2/runc: handle early exits w/o big locks
    dafbeb5b1 No more nondistributable layers in MS registry

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
7867b58ca2 conmon: update to 2.1.7
Bumping conmon to version v2.1.3-74-g75f8ceb, which comprises the following commits:

    fa67ce6 ensure console socket buffers are properly sized
    2902909 Remove lgtm badge
    2832e4f chore(deps): update dependency containers/automation_images to v20230614
    7a7c893 log fds more permissive
    c26648e Fix close_other_fds on FreeBSD
    ebc6717 chore(deps): update dependency containers/automation_images to v20230601
    8225789 chore(deps): update dependency containers/automation_images to v20230517
    dcee6fb Update nixos image and dependencies' version.
    e907fdc Changes to build conmon for ppc64le
    5510eb0 fix compile regression on FreeBSD
    be144a1 chore(deps): update dependency containers/automation_images to v20230426
    3fcc1d2 Packit: update config
    676e86d ctrl: fix a debug statement
    b7aa7b1 [skip-ci] Update actions/setup-go action to v4
    d8bf969 [skip-ci] Update actions/checkout action to v3
    53debe6 [skip-ci] Update actions/cache action to v3
    758ff5a vendor: bump to latest packages
    44448e7 fix(deps): update module github.com/containers/libpod to v4
    95ecbf5 chore(deps): update dependency containers/automation_images to v20230405
    3b447bc conmon: drop return after pexit()
    d637b73 ctrl: make accept4 failures fatal
    cbc7c40 cmsg: recvfd returns an error on failures
    0251765 cmsg: fix program name
    5fcb8da ctrl: on EINTR retry accept4
    08c34bd Add renovate configuration
    9a3af8f logging: avoid opening /dev/null for each write

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
63dd08bf86 buildah: update to 1.31.1
Bumping buildah to version v1.31.1-3-g0cc7680cc, which comprises the following commits:

    806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    a3056cacd [release-1.31] Bump c/common
    d0de60bbf Bump 1.31.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
c08591fd7d aardvark-dns: update to v1.7.0
Bumping aardvark-dns to version v1.7.0, which comprises the following commits:

    d27d3b3 release v1.7.0
    b6a270b Update release notes for v1.7.0
    099f5d4 fix(deps): update rust crate tokio to 1.29.0
    47219ee fix(deps): update rust crate clap to 4.3.8
    1648525 fix(deps): update rust crate clap to 4.3.5
    5d9add2 run cargo update
    03fc574 [CI:BUILD] Packit: add Fedora downstream tasks
    ed141a4 fix(deps): update rust crate clap to 4.3.4
    4facdac chore(deps): update dependency containers/automation_images to v20230614
    ffdfd7b fix(deps): update rust crate clap to 4.3.3
    7d9827a fix(deps): update rust crate log to 0.4.19
    ebd84ca fix(deps): update rust crate clap to 4.3.2
    bdf07b1 fix(deps): update rust crate clap to 4.3.1
    93a0f4f cirrus: remove verify_vendor task
    90038b0 chore(deps): update dependency containers/automation_images to v20230601
    8709a43 fix(deps): update rust crate trust-dns-server to 0.22.1
    f22fc51 chore(deps): update rust crate chrono to 0.4.26
    2163d08 fix(deps): update rust crate tokio to 1.28.2
    d7b61ec fix(deps): update rust crate log to 0.4.18
    fde8e1a chore(deps): update rust crate chrono to 0.4.25
    a0ac881 fix(deps): update rust crate clap to 4.3.0
    d298585 chore(deps): update dependency containers/automation_images to v20230517
    4c29222 fix(deps): update rust crate tokio to 1.28.1
    3358de3 chore(deps): update dependency containers/automation_images to v20230426
    c4deaf8 fix(deps): update rust crate clap to 4.2.7
    4dd6a17 fix(deps): update rust crate anyhow to 1.0.71
    140846f fix typo in makefile
    8cd804a fix(deps): update rust crate tokio to 1.28.0
    15db510 fix(deps): update rust crate clap to 4.2.5
    e322d2c fix(deps): update rust crate syslog to ^6.1.0
    f591500 fix(deps): update rust crate clap to 4.2.4
    7961a9b fix(deps): update rust crate clap to 4.2.3
    e6ce1a5 fix(deps): update rust crate clap to v4
    40bcf9e chore(deps): update dependency containers/automation_images to v20230405
    c09d67b bump to v1.7.0-dev
    fb411dd v1.6.0 release
    619c232 Update release notes for v1.6.0
    63bdcac fix(deps): update rust crate tokio to 1.27.0
    f587536 use lower TTL for contianer entries
    234e75b fix(deps): update rust crate syslog to ^6.0.1
    21d7555 fix(deps): update rust crate futures-util to 0.3.28
    3067fd0 chore(deps): update dependency containers/automation_images to v20230330
    4fb8f35 Disable Dependabot in favor of Renovate
    bf19047 chore(deps): update dependency containers/automation_images to v20230320
    302b099 build(deps): bump futures-util from 0.3.26 to 0.3.27
    35c5bab [CI:BUILD] Packit: trigger builds on commit to main branch
    075e095 build(deps): bump anyhow from 1.0.68 to 1.0.70
    cc81866 fix lint issue with new rust version 1.68
    3555692 Cirrus: Update to newer CI VM images
    65d68c8 build(deps): bump chrono from 0.4.23 to 0.4.24
    abb9cf7 build(deps): bump libc from 0.2.139 to 0.2.140
    dec9b98 build(deps): bump async-broadcast from 0.5.0 to 0.5.1
    de81a25 build(deps): bump signal-hook from 0.3.14 to 0.3.15
    d41f573 build(deps): bump futures-util from 0.3.25 to 0.3.26
    5438208 build(deps): bump tokio from 1.25.0 to 1.26.0
    dfea9a8 [CI:DOCS] Clarify packit related comments
    62737ec [CI:BUILD] Packit: initial enablement
    ff56126 Allow custom cargo binary path
    0049b88 Switch to explicit platform list for `cargo vendor-filterer`
    c30a24d bump to v1.6.0-dev
    65480f4 v1.5.0 release
    24350c4 update release notes for v1.0.5
    997ab9a build(deps): bump nix from 0.26.1 to 0.26.2
    8ff094a build(deps): bump tokio from 1.24.2 to 1.25.0
    4769592 Add renovate.json5
    938e1bb build(deps): bump tokio from 1.24.1 to 1.24.2
    8f72cb9 Cirrus: Groom rust cache before updating
    0763020 add code of conduct
    36224d6 cargo: bump trust-dns-client and trust-dns-proto to 0.22
    81def17 Cirrus: Add backup to netavark-binary artifact DL
    ce45624 build(deps): bump tokio from 1.23.0 to 1.24.1
    ef56659 build(deps): bump async-broadcast from 0.4.1 to 0.5.0
    7425f56 build(deps): bump libc from 0.2.138 to 0.2.139
    6f294d7 fix lint issues with rust 1.66
    af49056 update CI images
    860bd4c build(deps): bump tokio from 1.21.2 to 1.23.0
    0431acc build(deps): bump anyhow from 1.0.66 to 1.0.68
    6d22d42 Bump to v1.4.1-dev
    65b9804 Release v1.4.0
    bc265b0 Update release notes for v1.4.0
    e632528 release,make: add rule crate-publish for publishing crates.io
    563c2d7 silly pr to fix ci
    33ceb7e [skip-ci] GHA/Cirrus-cron: Fix execution order
    89b85bf build(deps): bump libc from 0.2.137 to 0.2.138
    614d9df build(deps): bump nix from 0.25.0 to 0.26.1
    01a9f18 config,coredns: add support for network scoped dns servers
    26a3ae8 fix new lint issues with rust 1.65
    3eace77 update CI images
    bb0b151 GHA: Add cirrus-cron auto-rerun job
    1c3798f build: stop using deprecated from_timestamp
    34b2e76 cargo: bump chrono to 0.4.23
    142af2c Fix dev version
    87e26bd Bump to v1.3.0-dev
    9254bb9 v1.3.0 Release
    046f3cb v1.3 Release notes
    36208f3  use cargo-vendor-filterer to create vendor tarball
    612da2f build(deps): bump anyhow from 1.0.65 to 1.0.66
    a5e4104 build(deps): bump libc from 0.2.136 to 0.2.137
    e6dc1b4 build(deps): bump clap from 3.2.22 to 3.2.23
    619a398 build(deps): bump libc from 0.2.135 to 0.2.136
    d3cc7e0 test,helpers: refactor create_config to accept named args
    c541311 cirrus,setup: show netavark binary being used by commit
    044f425 aardvark-dns: add support for container's custom dns_servers
    836d0bd build(deps): bump futures-util from 0.3.24 to 0.3.25
    7c2774c Reduce tokio and futures-util features
    d3b49a1 build(deps): bump libc from 0.2.134 to 0.2.135
    496825e Cirrus: Update CI VM Images
    096b1b7 build(deps): bump libc from 0.2.133 to 0.2.134
    54bbab7 build(deps): bump tokio from 1.21.1 to 1.21.2
    b417fee Bump to v1.2.0-dev
    cb1a462 Release v1.2.0
    b6d0679 backend,clippy: remove needless borrow from lookup logic
    ad541ca Make build date reproducible

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Erik Schilling
683bfbfc19 vhost-device-gpio: only enable if meta-clang exists
This disables the recipe - which depends on clang-native - if meta-clang
is not active.

Link: https://lore.kernel.org/yocto-meta-virtualization/ZNyErpfW8p2lX81Z@nuoska/
Reported-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Suggested-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Erik Schilling <erik.schilling@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:37:32 +00:00
Erik Schilling
0e64f6382f vhost-device: fix README.md location
I accidentially created it in the root while it meant to go to the
subfolder.

Link: https://lore.kernel.org/yocto-meta-virtualization/CUUO41I813NY.CPU5GWIZUCC4@fedora/
Signed-off-by: Erik Schilling <erik.schilling@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-17 20:01:19 +00:00
Sandeep Gundlupet Raju
7fee614060 xen-boot-cmd: Remove hard assigment for ramdisk image
Setting hard assignment for RAMDISK_IMAGE will take precedence during
variable pre-expansion. Hence set RAMDISK_IMAGE variable with soft
assignment.

Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-17 20:01:19 +00:00
Erik Schilling
2820535869 vhost-device: add recipes for vhost-device daemons
This adds recipes for the first tagged release of the vhost-device
daemons of the rust-vmm project.

While the initial release was done for all daemons at the same time,
the daemons all have indepentend version numbers and will be released
on their own schedules in the future. Therefore, I splitted them into
independent recipes.

Signed-off-by: Erik Schilling <erik.schilling@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:48:32 +00:00
Martin Jansa
81bd76bd18 nerdctl: fix installed-vs-shipped with usrmerge
* fixes:
ERROR: nerdctl-v1.3.0-r0 do_package: QA Issue: nerdctl: Files/directories were installed but not shipped in any package:
  /bin
  /bin/nerdctl
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
nerdctl: 2 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:48:28 +00:00
Martin Jansa
884c0bbbc0 kubernetes: fix installed-vs-shipped with usrmerge
* fixes:
ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package:
  /bin
  /bin/k8s-init
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
kubernetes: 2 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:47:55 +00:00
Martin Jansa
926d714972 cloud-init: fix usrmerge QA issue
* backport a fix from 23.2 version (notice that the recipe claims to be:
  v23.2.2+git, but the commit in master-next which updated PV only changed
  the branch name, not the SRCREV, so it's still 23.1 and missing this fix

  cloud-init/v23.2.2+git/git $ git describe --tags
  23.1-53-g57752970e

* fixes:
  ERROR: cloud-init-v23.2.2+git-r0 do_package_qa: QA Issue: cloud-init package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]

  caused by udev rules:
  $ find cloud-init/v23.2.2+git/image/lib/
  cloud-init/v23.2.2+git/image/lib/
  cloud-init/v23.2.2+git/image/lib/udev
  cloud-init/v23.2.2+git/image/lib/udev/rules.d
  cloud-init/v23.2.2+git/image/lib/udev/rules.d/66-azure-ephemeral.rules

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:47:38 +00:00
Bruce Ashfield
0f1601d98f cloud-init: update to 23.2.2
Bumping cloud-init to version 23.2.2, which comprises the following commits:

    e65a715d Release 23.2.2
    7e22ea8b Fix reference before assignment (#4292)
    bd909995 Fix NoCloud kernel commandline key parsing (#4273)
    cda47255 Release 23.2.1
    0bbf84e5 nocloud: parse_cmdline no longer detects nocloud-net datasource (#4204)
    cdc24d86 Release 23.2
    2f83ab48 BSD: simplify finding MBR partitions by removing duplicate code
    10721027 tests: bump pycloudlib version for mantic builds
    f663e94a network-manager: Set higher autoconnect priority for nm keyfiles (#3671)
    2a927738 alpine.py: change the locale file used (#4139)
    e0b1a477 cc_ntp: Sync up with current FreeBSD ntp.conf (#4122)
    ddb07212 config: drop refresh_rmc_and_interface as RHEL 7 no longer supported
    a5366e24 docs: Add feedback button to docs
    009dbf85 net/sysconfig: enable sysconfig renderer if network manager has ifcfg-rh plugin (#4132)
    431d2c14 For Alpine use os-release PRETTY_NAME (#4138)
    5d440856 network_manager: add a method for ipv6 static IP configuration (#4127)
    06eadd8a correct misnamed template file host.mariner.tmpl (#4124)
    ea573ba6 nm: generate ipv6 stateful dhcp config at par with sysconfig (#4115)
    6d09df5e Add templates for GitHub Issues
    1b9c2b57 Add 'peers' and 'allow' directives in cc_ntp (#3124)
    8c1a3ff8 FreeBSD: Fix user account locking (#4114)
    21006925 FreeBSD: add ResizeGrowFS class to cc_growpart (#2334)
    ffdb7a7d Update tests in Azure TestCanDevBeReformatted class (#2771)
    ce2f26c2 Replace Launchpad references with GitHub Issues
    7c52b8a5 Fix KeyError in iproute pformat (#3287)
    73f34575 schema: read_cfg_paths call init.fetch to lookup /v/l/c/instance
    9f845036 azure/errors: introduce reportable errors for imds (#3647)
    60248d88 FreeBSD (and friends): better identify MBR slices (#2168)
    481bf4d3 azure/errors: add host reporting for dhcp errors (#2167)
    0c4d53f2 net: purge blacklist_drivers across net and azure (#2160)
    64227612 net: refactor hyper-v VF filtering and apply to get_interfaces() (#2153)
    6cc09f3c tests: avoid leaks to underlying filesystem for /etc/cloud/clean.d (#2251)
    a0f5279b net: refactor find_candidate_nics_on_linux() to use get_interfaces() (#2159)
    0dfe06ba resolv_conf: Allow > 3 nameservers (#2152)
    e07ad4a5 Remove mount NTFS error message (#2134)
    b1a14a2a integration tests: fix image specification parsing (#2166)
    4d28d203 ci: add hypothesis scheduled GH check (#2149)
    a18442af Move supported distros list to docs (#2162)
    e8ef58b9 Fix logger, use instance rather than module function (#2163)
    ed2ebf09 README: Point to Github Actions build status (#2158)
    59edb3f1 Revert "fix linux-specific code on bsd (#2143)" (#2161)
    c53f04ae Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled (#2142)
    76fe7ddb Add documentation label automatically (#2156)
    96710408 sources/azure: report success to host and introduce kvp module (#2141)
    5abf5f5f setup.py: use pkg-config for udev/rules path (#2137)
    7ffd0bcd openstack/static: honor the DNS servers associated with a network (#2138)
    a9cec5da fix linux-specific code on bsd (#2143)
    e9d1d3a0 cli: schema validation of jinja template user-data (SC-1385) (#2132)
    aa0cd62c gce: activate network discovery on every boot (#2128)
    be3441b2 tests: update integration test to assert 640 across reboots (#2145)
    a378b7e4 Make user/vendor data sensitive and remove log permissions (#2144)
    c1b47220 Update kernel command line docs (SC-1457) (#2133)
    1132b2ce docs: update network configuration path links (#2140)
    6e380dd6 sources/azure: report failures to host via kvp (#2136)
    34637a49 net: Document use of `ip route append` to add routes (#2130)
    0a534a6d dhcp: Add missing mocks (#2135)
    4f3fe823 azure/imds: retry fetching metadata up to 300 seconds (#2121)
    5942f402 [1/2] DHCP: Refactor dhcp client code  (#2122)
    9e4cb4f0 azure/errors: treat traceback_base64 as string (#2131)
    d6de22e3 azure/errors: introduce reportable errors (#2129)
    3ee38468 users: schema permit empty list to indicate create no users
    b7179409 azure: introduce identity module (#2116)
    34e8c914 Standardize disabling cloud-init on non-systemd (#2112)
    44ab4f4a Update .github-cla-signers (#2126)
    f146fe71 NoCloud: Use seedfrom protocol to determine mode (#2107)
    24945cad rhel: Remove sysvinit files. (#2114)
    a664b712 tox.ini: set -vvvv --showlocals for pytest (#2104)
    250280ad Fix NoCloud kernel commandline semi-colon args
    d9844fa8 run-container: make the container/VM timeout configurable (#2118)
    e572643f suse: Remove sysvinit files. (#2115)
    e71f0a13 test: Backport assert_call_count for old requests (#2119)
    9490585f Add "licebmi" as contributor (#2113)
    e02c4607 Adapt DataSourceScaleway to upcoming IPv6 support (#2033)
    6d42aa8e rhel: make sure previous-hostname file ends with a new line (#2108)
    55eaba2f Adding contributors for DataSourceAkamai (#2110)
    0273712c Cleanup ephemeral IP routes on exception (#2100)
    09a64bad Fix private key permissions when openssh not earlier than 9.0 #2072
    612b4de8 Standardize kernel commandline user interface (#2093)
    2a61a589 config/cc_resizefs: fix do_resize arguments (#2106)
    b33d528e Fix test_dhclient_exits_with_error (#2105)
    c82ace92 net/dhcp: catch dhclient failures and raise NoDHCPLeaseError (#2083)
    4fbf5317 sources/azure: move pps handling out of _poll_imds() (#2075)
    d6ac22e1 tests: bump pycloudlib version (#2102)
    d7bdba6f schema: do not manipulate draft4 metaschema for jsonschema 2.6.0 (#2098)
    ed3ebfc4 sources/azure/imds: don't count timeout errors as connection errors (#2074)
    e3f1ec3f Fix Python 3.12 unit test failures (#2099)
    2562f933 integration tests: Refactor instance checking (#1989)
    ad33cbba ci: migrate remaining jobs from travis to gh (#2085)
    4b6e4e13 missing ending quote in instancedata docs(#2094)
    baad0946 refactor: stop passing log instances to cc_* handlers (#2016)
    7803f9c6 tests/vmware: fix test_no_data_access_method failure (#2092)
    56c88caf Don't change permissions of netrules target (#2076)
    e54ca3ad tests/sources: patch util.get_cmdline() for datasource tests (#2091)
    ceb66d45 macs: ignore duplicate MAC for devs with driver driver qmi_wwan (#2090)
    055395d3 Fedora: Enable CA handling (#2086)
    74ed9ef2 Add frantisekz as contributor (#2087)
    7f91bdea Send dhcp-client-identifier for InfiniBand ports (#2043)
    85b2fbc2 cc_ansible: complete the examples and doc (#2082)
    eaa4ccb1 contributor: add bdrung
    c13f4738 bddeb: for dev package, derive debhelper-compat from host system
    7382cb66 apport: only prompt for cloud_name when instance-data.json is absent
    a60c0845 datasource: Optimize datasource detection, fix bugs (#2060)
    36346784 Handle non existent ca-cert-config situation (#2073)
    5eb43b95 sources/azure: add networking check for all source PPS (#2061)
    fc6c1d37 do not attempt dns resolution on ip addresses (#2040)
    8a0feb1e chore: fix style tip (#2071)
    2e697bb0 Fix metadata IP in instancedata.rst (#2063)
    b463f30c util: Pass deprecation schedule in deprecate_call() (#2064)
    9af4b0bf config: Update grub-dpkg docs (#2058)
    b91dd0e8 docs: Cosmetic improvements and styling (#2057)
    2fd24cc8 cc_grub_dpkg: Added UEFI support (#2029)
    20335153 tests: Write to /var/spool/rsyslog to adhere to apparmor profile (#2059)
    6b9bf7b9 oracle-ds: prefer system_cfg over ds network config source (#1998)
    b728b4e7 Remove dead code (#2038)
    4896402b Release 23.1.1 (#2052)
    d1ffbea5 source: Force OpenStack when it is only option (#2045)
    635b5a52 cc_ubuntu_advantage: improve UA logs discovery
    d781e14c sources/azure: fix regressions in IMDS behavior (#2041)
    5d1d2544 tests: fix test_schema (#2042)
    b2220798 dhcp: Cleanup unused kwarg (#2037)
    f79efeba sources/vmware/imc: fix-missing-catch-few-negtive-scenarios (#2027)
    2ee614aa dhclient_hook: remove vestigal dhclient_hook command (#2015)
    6100fda6 log: Add standardized deprecation tooling (SC-1312) (#2026)
    46fcd031 Enable SUSE based distros for ca handling (#2036)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:47:38 +00:00
Bruce Ashfield
23373571e7 moby: update to v24.0.5
Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits:

    b7c5385b81 update to go1.20.7
    6be708aa7d vendor: gotest.tools/v3 v3.5.0
    b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is()
    02241b05fc update containerd binary to v1.7.3
    3a6899c6fd update containerd binary to v1.7.2
    7927cae910 c8d/container: Follow snapshot parents for size calculation
    45ba926c6d daemon/list: Drop unused arg from containerReducer
    6c4121a943 daemon/list: Refactor refreshImage
    fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check
    3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs
    35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST
    fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev
    eede7f09c7 Remove Upstart scripts
    907f838603 Remove Upstart and cgroups bits from Debian sysvinit script
    f022632503 Dockerfile: update runc binary to v1.1.8
    98a6422cbc c8d/inspect: Include platform Variant
    aab94fb340 Dockerfile: update buildx to v0.11.2
    1be48ec553 c8d: Make sure the content isn't removed while we export
    ff0144de3b ci(buildkit): remove early-return from buildkit-ref
    a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref
    4c29864b02 hack/with-go-mod.sh: warn on stderr
    3c5c192baf c8d/resolveImage: Fix Digested and Named reference
    572de8764e c8d/inspect: Don't duplicate digested ref
    5dded3340c ci: extract buildkit version correctly with replace-d modules
    bd1ae65aab quota: remove gotest.tools from testhelpers
    544032f7a4 hack/d/cli.sh: properly handle errors in curl
    0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching
    05f82fdd00 Dockerfile(.simple): align APT_MIRROR support
    151686a5c8 Makefile: pass through APT_MIRROR
    31567e0973 Dockerfile: use default apt mirrors
    d94f2dcab2 client: Client.postHijacked: use Client.buildRequest
    bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors
    8bdf6d1baf ci(bin-image): add SHA-based tags
    26a457e7a3 ci(bin-image): fix meta step
    b9904ba319 ci(bin-image): fix typo
    e7c333cb6e ci(bin-image): don't set tags when pushing by digest
    fcb87e8ae1 ci: push bin image to Docker Hub
    68c0cec772 Disable tls when launching dockerd through hack/make.sh
    738d8417e0 libnet: Return a 403 when overlay network isn't allowed
    a5c0fda157 libnet: Return proper error when overlay network can't be created
    deea880581 pkg/jsonmessage: use string-literals for easier grep'ing
    962a4f434f pkg/ioutils: use string-literals for easier grep'ing
    cea5829402 pkg/idtools: use string-literals for easier grep'ing
    69d77bc150 opts: use string-literals for easier grep'ing
    ff667ed932 integration: use string-literals for easier grep'ing
    efe9e90ef5 libnetwork: use string-literals for easier grep'ing
    2d2df4376b daemon/cluster: use string-literals for easier grep'ing
    ae8e3294dd client: use string-literals for easier grep'ing
    892857179a cli/debug: use string-literals for easier grep'ing
    147b87a03e daemon: use string-literals for easier grep'ing
    a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing
    5bba60b1bb builder/builder-next: use string-literals for easier grep'ing
    632fc235d6 builder/dockerfile: use string-literals for easier grep'ing
    75a90f85ad gha: add note about buildkit using older go version
    fa909dfaf4 update go to go1.20.6
    bdaadec788 testutil: use dummyhost for non-tcp connections
    547ea18fbb pkg/plugins: use a dummy hostname for local connections
    597a5f9794 client: define a "dummy" hostname to use for local connections
    fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals
    959889efd9 integration: Don't env cleanup before parallel subtests
    6c5144d3e5 Add t.Helper() to the cli test helper functions
    9ff2c3918c ci(buildkit): match moby go version for buildkit tests
    a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e
    6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit
    0e88c57c47 integration: disable iptables in parallel tests
    a3049653c1 pkg/plugins: make unit test less time sensitive
    d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
    5892aae60f docs: api  v1.28 - v1.40: add missing "force" query arg on plugin disable
    7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable
    b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable
    b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable
    50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option
    32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable
    f66ef31605 docs: api v1.41: remove outdated information from ServerVersion
    acb95e4544 docs: api v1.42: remove outdated information from ServerVersion
    335ed29345 docs: api v1.43: remove outdated information from ServerVersion
    0ef846ce2e api: remove outdated information from ServerVersion
    af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
    7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
    649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields
    457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2
    016ad9b3e8 c8d/prune: Handle containers started from image id
    87778af711 c8d/prune: Exclude dangling tag of the images used by containers
    8bf037b246 c8d/softDelete: Deep copy Labels
    8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage
    e2bade43e7 testutil/environment: Add GetTestDanglingImageId
    e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import
    42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants
    aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
    bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations
    5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds
    01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
    cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg
    ee29fd944b gha: don't fail if no daemon.json is present
    b8ee9a7829 c8d/images: handle images without manifests for default platform
    d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    806849eb62 seccomp: add name_to_handle_at to allowlist
    c24c37bd8a Restore active mount counts on live-restore
    c306276ab1 remove name_to_handle_at(2) from filtered syscalls
    d5e31e03b6 gha: Setup Runner: add missing sudo
    85ad299668 Dockerfile: make cli stages more resilient against unclean termination
    e84365f967 Skip cache lookup for "FROM scratch" in containerd
    96534f015d integration-cli: don't use pkg/homedir in test
    6424ae830b Dockerfile: update buildx to v0.11.0
    6055b07292 Fix missing Topology in NodeCSIInfo
    2f379ecfd6 daemon: fix restoring container with missing task
    136893e33b daemon: fix double-unlock in health check probe
    290fc0440c daemon: fix panic on failed exec start
    0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields
    35a29c7328 builder: pass host-gateway IP as worker label
    210c4d6f4b daemon: ensure OCI options play nicely together
    f50cb0c7bd daemon: stop setting container resources to zero
    0a6a5a9140 daemon: modernize oci_linux_test.go
    c92fd5220a c8d: mark stargz as requiring reference-counted mounts
    5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19
    6776279896 daemon: registerName(): don't reserve name twice
    7db3243e34 don't cancel container stop when cancelling context
    aec7a80c6f c8d: Use reference counting while mounting a snapshot
    5652c59647 testing: temporarily pin docker-py tests to use "bullseye"
    aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b

Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits:

    11eaf1f0 sync MAINTAINERS file with new moby maintainers
    dbbf124d Clean up inDelete network atomically

Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits:

    c0e376854 update to go1.20.7
    1481c8ce9 vendor: gotest.tools/v3 v3.5.0
    e97c76557 vendor: github.com/docker/docker v24.0.5
    1ee40e2c7 configfile: Initialize nil AuthConfigs
    3bd6d6902 Dockerfile: update buildx to v0.11.2
    05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000
    8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5
    2a6348d1b Dockerfile: update buildx to v0.11.1
    f4782b325 update go to go1.20.6
    7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc
    1447974b8 docs: rephrase section on credential stores for docker login
    46293e97f Dockerfile: update to xx 1.2.1
    bfe2ff820 cli/container: Don't ignore error when parsing volume spec
    b40742962 vendor: github.com/docker/docker v24.0.4
    79c42c0b9 vendor: golang.org/x/net v0.10.0
    a96d0a526 vendor: golang.org/x/text v0.9.0
    5c5c50d71 vendor: golang.org/x/term v0.8.0
    4bf11b756 vendor: golang.org/x/sys v0.8.0
    224c7dbec vendor: github.com/sirupsen/logrus v1.9.3
    e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
    2d5f041bd commandconn: return original error while closing
    520e3600e commandconn: don't return error if command closed successfully
    cd68c8f00 docker info: fix condition for printing debug information
    a78fd6ca6 docs: update link location for the overlay driver
    9cd335d44 docs: fix static ip example, network needs a subnet
    d61e4fe87 docs: fix broken link
    8e3a2942a cli/command/context: don't use pkg/homedir in test
    c3ef1cead docs: update the runtime configuration section
    44eebb8bc Dockerfile: update buildx to v0.11.0
    7ecfa2e7f Dockerfile: update gotestsum to v1.10.0
    f11f30909 update go to go1.20.5
    3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17
    11af1189d docs: add "--detach-keys" example to docker run reference
    f118c05e8 docs: move "--detach-keys" example to examples section

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:41:49 +00:00
Bruce Ashfield
8e1a34f550 kernel: drop 5.15 inc file
5.15 hasn't been in master for quite some time, so we drop
our version matching .inc

Support for 5.15 can be found on release branches.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:24:13 +00:00
Bruce Ashfield
ade1182494 docker-compose: switch branch to main
The upstream repoistory transitioned from master to main, and also
deleted the v2 branch this recipe was using.

Switch everything to main until (if?) new versioned branches appear.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:24:05 +00:00
Leonard Anderweit
23ce17f66c podman-compose: Add missing runtime dependency python-dotenv
Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-12 03:15:55 +00:00
Khem Raj
ed6bcd97fa xen: Update arm assembly patch to upstream accepted one
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-12 03:15:19 +00:00
Bruce Ashfield
56593e277a python3-dtc: drop recipe
oe-core commit 123077ecd9f3c1839d [python3-dtc: add from
meta-virtualization] brings this recipe into core, so we drop
our version.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
77193109eb qemu: adapt to OE-core qemu splitting
Since oe-core commit 893846ead7ee54d53 [qemu: Split the qemu package],
qemu now has a similar (but different) split to what meta-virt has
been providing to vmsep enabled systems.

We override the oe-core splitting function to restore our ability to
separate functionality into logical groups.

This commit also provided RDEPENDS for the new oe-core named packages
to allow compatbility with updated images.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
58ef402d44 skopeo: update to 1.13.0
Bumping skopeo to version v1.13.0, which comprises the following commits:

    8b9999e1 Bump to v1.13.0
    4de3a90f proxy: Policy verification of OCI Image before pulling
    e9303879 Update module github.com/opencontainers/image-spec to v1.1.0-rc4
    3d8d2128 Update module github.com/containers/common to v0.55.1
    bfa04ea2 Update module github.com/containers/common to v0.54.0
    1d5458fa Update module github.com/containers/image/v5 to v5.26.0
    290a7630 [CI:BUILD] RPM: fix ELN builds
    d72d53cc Update module github.com/containers/storage to v1.47.0
    0297033e Packit: easier to read distro conditionals
    03a19132 Update dependency golangci/golangci-lint to v1.53.3
    c04ee48b Help Renovate manage the golangci-lint version
    37a81ea7 Minor: Cleanup renovate configuration
    e2174f17 Update dependency containers/automation_images to v20230614
    ceeeb67e Update module golang.org/x/term to v0.9.0
    411e9838 [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    deee28a9 Update module github.com/sirupsen/logrus to v1.9.3
    574b2cc4 Update dependency containers/automation_images to v20230601
    73e7618d Update golang.org/x/exp digest to 2e198f4
    1c738806 Update github.com/containers/image/v5 digest to e14c1c5
    2e07073c Update module github.com/stretchr/testify to v1.8.4
    c06aa5c6 Update module github.com/stretchr/testify to v1.8.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
feb1d78952 crun: update to v1.8.5-tip
Bumping crun to version 1.8.5-40-g56d9d9a, which comprises the following commits:

    19cd8aa ps: fix segfault with pids=NULL
    d006733 features: add wasm annotation
    935f4fe tests: add test for oci_features
    366af73 src/*: implement features
    21b1733 Makefile.am: update clang-format command
    9e5a749 libcrun: report when status file not found
    84a6599 libcrun: crun_path_exists distinguish ENOENT
    ef224f9 docs: remove module.wasm.image/variant=compat annotation

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
1fc1b1935f podman-compse: update to v1.0.6
Bumping podman-compose to version v1.0.6, which comprises the following commits:

    f6dbce3 version 1.0.6
    dfb64d8 fix pylint
    990f774 fix pylint
    5e518c7 #648: check if sed exists to color logs
    9046f7e #634: follow up
    ef55067 add support for network priorities
    ed2a6c0 Support network_mode: none
    b4c0792 Add --remove-orphans on down command
    e84451f Allow environment parameters without value
    456370b Support build secrets
    efe3714 Add support for the `group_add` property of a service.
    c55a2f4 Fixes #657: Support act and developer-friendly environment
    b8a7593 #154: timeout
    bd29ddb #154: no -t for start
    38219eb FIXES #154: handle stop_grace_period
    08ffcf6 updating test_podman_compose_extends_w_file_subdir to use the correct image name
    801faea Bump actions/setup-python from 2 to 4
    06da966 Bump actions/checkout from 2 to 3
    de3f607 Check for github actions updates weekly
    db1861d pull: accept service names as positional arguments
    9d5b255 Use top-level name property as project name if user doesn't set one explicitly
    2d05c5c FIXES #534: add systemd unit label
    3c46016 FIXES #534: add systemd unit label
    5b9cfe5 implement services.*.build.tags
    8d1a4d7 Implemented basic Bash shell completion
    859f03c Add healthcheck.disable support
    ae6be27 reformat
    ccdb98c implement podman kill command
    909d05e reformat
    0cf98c7 reimplement the of pause and unpause commands
    843b876 fix typo
    1188463 fix Typo podman-composer in version command
    10580db  Add pause,unpause commands support
    f7d335d #516: allow empty network
    4a73ae8 FIXES #511: ipv6
    f674ab8 #512: only use --net when bridge
    265e0ca #512: only use --net when bridge
    92662f3 FIXES #511: ipv6
    42c0078 mac_address with dash
    da5ee72 reformat
    06fc071 reformat
    9eda56c FIXES #507: respecte mac_address
    13c8981 Fix help message for systemd subcommand
    ee7029f reformat
    75033a4 add python demo example
    c175fd1 reformat
    d479001 reference awesome-compose
    a2defdd example wordpress
    c55cd67 #307: default to /etc/
    eed38ce Fixed accidental deletion of project functionality.
    86ffad8 Added port subcommand.
    118d39b Fix linter errors
    814bd2a Support driver_opts for networks
    606b9d9 Simplify var assignment
    0057a4b Fix default external name in dict case
    8ecb749 Update external volume name management
    d983056 Update external volume name management
    ed302ca Fix external volume name when no name provided
    0b5c844 Add runtime error if no external volume exists
    9c29c89 FIXES #486: replace realpath with abspath
    89d2062 Fixed some spelling and grammar issues
    f42b568 Correct the help text for --pod-args
    a1d3ba4 Lint fixes for --services flag handling in config
    6be661f Support platform property
    fc3598f Allow --services in config
    fbff315 FIXES #464: accept -v in run
    fc34703 format
    c7ada82 format
    5e286f6 format
    3dd8b05 format
    3ecb4b5 FIXES #462: fix extends merge
    d05cad4 FIXES #462: fix extends merge
    ebb3dfe #452: better missing network message
    7b99b38 nethost test
    4ef8afc hit counter with redis cluster example
    a1aed09 GCR hello app
    2cacf9c add echo example
    4064c84 add azure vote example
    0dde95a update gitignore
    1be41b4 do not merge command array
    105c27c example nodejs project
    f820594 use exec for wait
    8a72321 FIXES #409: detect changes and recreate
    5293919 FIXES #409: detect changes and recreate
    48a19f1 print more help with systemd
    a9faabb print more help with systemd
    3fb2b98 print more help with systemd
    b35b7e4 add systemd -a list
    1a72e1e add systemd -a list
    b620311 FIXES #449: accept int port
    bf8004b systemd unit file
    cadf046 fix pylint
    8d8149c fix pylint
    3dd9817 fix pylint
    0b469e0 format
    9e3020a FIXES #307: systemd command
    fc9ed19 wait command
    2d6bb52 FIXES #442: allow --no-pod or custom --pod-args
    7942a09 FIXES #442: allow --no-pod or custom --pod-args
    701311a FIXES #447: support --env-file
    d704915 FIXES #447: support --env-file
    3b7bf81 remove unused test
    a735aa5 Fix inverted condition in merging arguments
    b785095 Fix linter issues
    7623180 Force black formatting
    af10345 FIXES #440: absolute secret
    2d1bcdd update readme
    4f02567 add unit tests
    0645212 add badge
    b7c5609 pylint
    4450835 pylint
    5c33e4e pylint
    cbd6f6b pylint cleanups
    de1e59d fix some pylint
    2f0ca9e add pytest ci
    59c9a69 add pylint
    b7eac1e pylint
    0d47e47 activate test
    c2d7b26 #434: handle unknown service
    1e895c0 calc proper hash
    132a22b #130: handle nested extend and normalize build context
    0bde01d remove unused imports
    91a579b Adding Test that the changes can build Image from build context of extended compose-file
    56b8863 Fixing subdirectory from extends where extended service will build a Service from Dockerfile in an own subdirectory
    5c3ec5f FIXES #431: support dns
    779198b #379: no infra container
    40cb6a7 log version
    4fd9d86 #379: nothing shared in the pod to allow hostname
    2a2c3a0 Fix timeout value data type
    80e8527 #379: create a pod
    d6e21dc FIXES #425: pass --requires
    b9b2f83 FIXES #415: allow network_mode=slirp4netns
    9af65ea adjust comment
    3e6e268 test for logs
    af6a306 fix syntax error without a new line
    68f745f referenced unmerged pr #192 to bring colors into container logging
    90dcfdb FIXES #420: document -t
    ed8635a FIXES #422: Remove debug print
    1d972ef Propagate all bind-type mount options
    536925c FIXES #413: parse network_mode: container:container_name correctly
    09c6cbe FIXES #408: preserve exit code
    154a512 FIXES #386: make sure volumes are present in top level
    523d215 #407: allow network_mode=service:mysrv
    25494b5 Update README.md
    19662c0 Fix healthcheck test type on replicas
    4943e52 #395: make podman respect PODMAN_* in .env
    4aa08cd FIXES #399: pass specific ip
    15e0ab9 FIXES #397: support host network mode
    f66861f #249: read COMPOSE_PROJECT_NAME env
    af53b65 Simplify volume identification
    890c584 Update README.md
    0bd493f Allow empty default/error value in substitution
    481c6d0 #394: config: multiple yaml
    31df70b updated per maintainer review
    df40051 removes version from CONTRIBUTING
    21a716c added log back in
    f00ac92 added config command
    0433410 added args for version
    0f9fe2b FiXES #393: missing arg when build as part of run
    a1be5ce add fallback to get
    56a4988 Add support for volume driver and options
    377b552 Fix substitution for empty variables
    c50599c FIXES #388: do not force build in run
    4557279 #88: multiple aliases
    7ad3775 FIXES #380: output to stderr
    30051c2 Update README.md. Add link to podman dns plugin source
    9e8e25c #378: down -v
    2c60516 fix hostname in test

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
2a4b72b3a2 podman: update to 4.6
Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits:

    c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables
    7680e5013 libpod: use new libcontainer BlockIO constructors
    829b3e9b3 Bump to v4.6.0-dev
    4d59a0f5c Bump to v4.6.0-rc1
    e4a7923ca Bump to v4.6.1-dev
    c756b24f4 Bump to v4.6.0
    2e53a5083 Release notes for v4.6.0
    727362bde Update Release Notes for v4.5.1
    8f2b73b03 rootless: use default_rootless_network_cmd config
    3bd4c6a10 tests: fix "Storing signatures" check
    d5e8cc1d1 Fixes for vendoring Buildah
    2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
    a306eb5f6 Do not use deprecated hook functions from c/common
    bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
    a64016e17 pasta: Remove some leftover code from pasta bats tests
    6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces
    9cc19b055 fix(command): ignore `--format` in `podman search --list-tags`
    714c3fe72 Use /proc/self/gid_map as intended, not uid_map
    d29e33650 podman machine start: fix ready service
    1a1602b72 Makefile: don't rely on the non-standard -r flag for ln
    db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
    82a4b0816 cmd/podman/system: add API server support on FreeBSD
    2f25372de pasta: Create /etc/hosts entries for pods using pasta networking
    9555446d3 RPM: Fix koji and ELN issues
    0749d685a Cirrus: Update operating branch
    dde6bcbca system tests: add and use _prefetch
    0ee19f08c pkg/api: BufferedResponseWriter flush correctly
    d0505d6ba pkg/api: top return error to client
    1398cbce8 container wait: support health states
    b680daa2d [CI:DOCS] Fix example on PublishPort
    811867249 container wait API: use string slice instead of state slice
    64153ace0 podman wait: update man page
    a699ed0eb StopContainer(): ignore one more conmon warning
    bd69b151f run,create: modify `--env-merge` behavior for non-existent vars
    614c962c2 use libnetwork/slirp4netns from c/common
    180cf0cf1 update c/common to latest
    d0af5df89 e2e: use parallel-safe /dev subdirectories
    aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version
    00292ae1c systests: test instrumentation
    63dfe842b compat API create/pull: fix error handling
    d54541894 compat API push: fix error handling
    26721b0a0 GetSafeIPAddress(): discourage its use
    810c97bd8 libpod: write /etc/{hosts,resolv.conf} once
    13db83a00 e2e: fix one of the many log flakes
    bb932cc84 cmd, push: expose --compression-level
    459248337 vendor: bump containers/common
    f4c514bff compat API container create: handle platform parameter
    04a1cdfa9 refactor(machine): remove hard code
    ae6e39076 vendor in latests containers/common
    81e63227e fix(machine): throw `connect: connection refused` after set proxy
    ec0924c6d [CI:BUILD] Packit: cleanups
    65e5d2773 Add console mode to podman machine
    ddcefc9b9 e2e: kube test: specify expected exit code
    574e00d32 e2e --authfile test: fix test condition
    f8f337501 chore(deps): update dependency setuptools to v68
    84e42877a make lint: re-enable revive
    aa453c4f1 make lint: re-enable ginkgolinter
    2efa7c3fa make lint: enable rowserrcheck
    f07aa1bfd make lint: enable wastedassign
    60a5a5947 make lint: enable mirror
    a35da3ad8 bump golangci-lint to v1.53.3
    47e0557d5 auto update: restart instead of stop+start
    acb5f97f9 cmd/podman/root.go: fix help document issue of the image store
    e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
    3829fbd35 podman: add support for splitting imagestore
    e29274853 network create --ip-range allow for custom range
    c2360800e fix(ssh): start machine failed to start with exit status 255
    ed24f0b2c remote wait: fix "removed" condition
    8d036906a [CI:DOCS] Fix service_destinations description in podman man page
    bfe61af6d quadlet should exit non zero on failures
    91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0
    ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress
    5ffbfd937 pasta: use code from c/common
    479677cb6 Add support for setting autoupdate in quadlet
    3efaffae4 New command: podmansh
    67674b3a6 vendor: update c/common to latest
    bdc2e8165 Add quadlet container support for Mask,Umask options
    13c2aca21 libpod: make conmon always log to syslog
    0ecc0d9e1 Document how to get secret mounts working on RHEL8
    c28a43efd Verify podman pull dup image only prints id once
    d464e1d4f Vendor in latests containers/common
    741ad0b4f Apply suggestions from code review
    f31466e74 Revert "rootlessport: exclude storage drivers via build tags"
    8a90765b9 filters: use new FilterID function from c/common
    de494eb05 logformatter: ignore 'TOP-LEVEL' headings
    63f5116ad test/e2e: fix network ID test
    8c48f97c9 update c/{common,image,storage} to latest
    354b8e20b [CI:DOCS] clarify supported transports in manifest push
    aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports
    c0ab29313 container wait: indicate timeout in error
    af7555e0d network-create: document new bclim option
    7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0
    6f821634a libpod: Podman info output more network information
    d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0
    ac0ba2c2c quadlet: adjust container unit documentation
    837b47244 e2e: GetRandomIPAddress(): parallelize
    676c4d4e8 Makefile: add support for 'make help' on FreeBSD
    ab502fc5c criu: return error when checking for min version
    16092930c Update docs/source/markdown/podman-systemd.unit.5.md
    faa2689dc 250-systemd.bats: remove outdated comment
    0714321de github: add issue type as link to podman-desktop
    a66bab340 Add WorkingDir support to quadlet
    ebf747474 rootlessport: exclude storage drivers via build tags
    8bf168cc1 Add ability to set static routes
    68183b07d test/upgrade: correctly share mounts between host and container
    444f19cb2 Update common, image, and storage deps
    ec6b7dbd9 Fix system service manpage name in API Documentation
    d734fcbff style(specgen): omit nil check
    53834ef0d fix(specgen): index out of range when unmask=[]
    71cae3159 Makefile to force a shell when running command
    02432fc69 cirrus,ci: default to overlay for debian env
    b37f74b73 Quadlet: Add support for --sysctl flag
    44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0
    2ebc9004f Ignore spurious warnings when killing containers
    7832879bf Makefile: don't hard-code the path for bash
    de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2
    a7271f9dd GHA: Fix bad job-names & links in monitoring emails
    6a696cb8f podman-registry: simpler, safer invocations
    f1ecdca4b Ensure our mutexes handle recursive locking properly
    310082444 Fix an expected error message from pod removal
    a750cd987 Fix a race removing multiple containers in the same pod
    0e47465e4 Discard errors when a pod is already removed
    398e48a24 Change Inherit to use a pointer to a container
    b65ba90df e2e: add ginkgo decorators to address flakes
    992093ae9 filters: better handling of id=
    7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8
    c7a8d29f1 refactor: improve get ssh path duplicate code
    137c8ef4d logformatter: better recognition of ginkgo test names
    944673c88 Address review feedback and add manpage notes
    3b79f241b Add support for SecurityLabelNested flag in quadlet
    a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1
    4fda7936c `system locks` now reports held locks
    92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
    0948c078c Add a new hidden command, podman system locks
    1013696ad Add number of free locks to `podman info`
    3b39eb133 Include lock number in pod/container/volume inspect
    1ce53677a fix ignition config creation
    4584350f6 Makefile binaries target adopted for Mac and Win
    e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
    c51c6675e logformatter: proper status color for failed tests
    cf9bc25bb pasta: Test handling of unknown protocols
    b2c000670 pasta: Correct handling of unknown protocols
    6611735ae Quadlet - add support for Pull key in .container
    5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
    d68121a60 Add default ulimit test for gen kube
    81d64547f feat: add insecure registry troubleshooting solution
    1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3
    7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
    28934897e e2e: GetPort(): safer allocation of random ports
    2c9f18182 The removeContainer function now accepts a struct
    4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test""
    b75ff3a8f Add a test for removing dependencies with rm -fa
    bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180"
    ef1a22cde Fix a deadlock when removing pods
    8cb5d39d4 Pods now return what containers were removed with them
    bc1a31ce6 Make RemoveContainer return containers and pods removed
    e8d745627 Add an API for removing a container and dependencies
    543b80949 systests: fixes for coping with extra systemd image
    34c258b41 libpod: fix timezone handling
    22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
    7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2
    4173f942f test/system: quadlet use correct systemd restart policy
    0372bf4bd systests: minimize race-condition window
    1a34e1f85 systests: fix improper backgrounding of run_podman
    f09772889 set max ulimits for rootless on each start
    5c7d50f08 Fix: display online_cpus in compat REST API
    bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
    72d4cede2 systests: fix race in quadlet tests
    f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0
    88e78456d e2e: make BuildImage parallel-safe
    370e1132c completion: fix panic in simplePathJoinUnix()
    46456f5f1 Update module github.com/stretchr/testify to v1.8.4
    585d715bb authfile.md: add default path of file for Windows/macOS.
    01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1
    e3240c2fb hack: fix typo in hack/podman-registry
    de92db0c8 man pages and command help: clean up descriptions
    e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
    dfba6ddd4 Man pages: fix broken tables
    5b2d963c4 test/e2e: add regression testing for comma-containing labels
    047a4bc83 fix: volume create filters
    0be9887af fix: move filter flags from StringSliceVar to StringArrayVar
    6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec
    85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync
    8f94a4775 [CI:DOCS] fix Quadlet man page rendering
    29f7c494e Quadlet: kube: use ExecStopPost
    6487d9c11 Quadlet: kube: add ExitCodePropagation field
    08b0d93ea kube play: exit-code propagation
    6dbc13833 prune exit codes only when container doesn't exist
    977b3cdbf podman: Add pasta to podman info
    373919ca0 Revert "test/system/255-auto-update.bats: add debug logs"
    901900530 Quadlet - add support for PodmanArgs to all groups
    6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    fb8a12490 In a concurrent removal test, don't remove concurrently with builds
    032d4a95f Consolidate error handling in Runtime.removeContainer
    f556e58bb Consolidate error handling in Container.cleanupStorage
    4969c552e Fix reporting errors on container unmount
    94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy
    d623670e1 pkginstaller: bump Qemu to version 8.0.0
    4108b3711 Support podman --remote when Containerfile is not in context directory
    9969374b6 chore(deps): update dependency requests to ~=2.31.0
    5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name
    6b48e9962 fix(deps): update module github.com/docker/docker to v24
    1b9272a06 wait: look for exit code in stopped state
    7d831d555 network create/update: allow dns servers comma separated
    685c73618 source code comments and docs: fix typos, language, Markdown layout
    fe41077d4 Increase download progress to 80ch
    8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0
    29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
    2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2
    7c53a463b stats: get mem limit from the cgroup
    8e2e7a440 quadlet tests: enable device.volume test
    bb3f611ff quadlet tests: remove unused socketactivated.container
    18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3
    5d522431c Correct markdown in docs
    76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7
    a99ad3b36 [CI:DOCS] Improve security in mysql examples
    99cedae31 Cirrus: Record the buildah version for reference
    a54d4d7e1 test/e2e: do not call setenforce
    458f2e8ed Fix discombobulated kubernetes support table
    192ad70e9 run: ignore PODMAN_USERNS with --pod
    5ff6fc559 Add --configmap to podman-remote kube play
    ad8d0e57d compat: accept tag in /images/create?fromSrc
    bf0cea76c fix HTMLSpan warnings
    a576fa3f1 generate systemd: error on init containers
    32c2cea0f Remove future tense from man pages
    5b148a0a6 compat,build: pull must accept string
    d1dcb0846 Cirrus: Add support for `[CI:NEXT]`
    eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic
    3360214a0 system tests: add precision timestamps
    8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options
    4bed2c285 e2e: refactor and document serialization
    ce07860a1 machine: fix default connection URL to use 127.0.0.1
    a485ba505 e2e: serialize gpg tests
    b9aaafbe1 Document podman-machine-default behavior
    7580b8ae4 e2e: fix more test races (missing "wait")
    6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
    520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
    ae5cbf37c Fix documentation of `--network-cmd-path` CLI option
    71853319f Skip rhel-release branch unnecessary CI tasks
    ab29ff2f6 test/e2e: dedup Before/AfterEach nodes
    d01ae436e remote-save: fix permissions and dir formats
    5a176f09c Set machine docker.sock according to rootful flag
    13f787842 Fix handling of .containenv on tmpfs
    2c0f40482 Do not include image annotations when building spec
    dd5d22cb3 build(deps): bump github.com/docker/distribution
    26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument
    c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy
    74a5b92b3 test: check restart policy of init containers
    3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
    04707f62d issue template: mention `su`
    14001ad48 e2e: logs test: fix flakes
    6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0
    ff37615bf e2e: stop podman.service test: wait for server
    cb8e19677 logformatter: handle podman-machine test logs
    58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1
    2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate
    01e20818c Ensure the consistent setting of the HOME env variable on container start
    8aaa13acc Quadlet system tests - fix socket notification
    1fb3cdf8a sqlite: disable WAL mode
    d24bec0d0 system tests: timeoutize quadlet, systemd
    3d6894426 test: update README for integration tests
    c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes
    b97be3406 quadlet: support `HostName`
    9dc107e74 e2e: fix race in a play-kube test
    bdb3ed795 Fix preference of user quadlets directories
    40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0
    661a238a9 fix(deps): update module golang.org/x/net to v0.10.0
    332b47fef Check on client side for Containerfile, if none specified
    18cd174c9 build(deps): bump github.com/docker/docker
    9ec630f30 Buildah treadmill: several fixes
    11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76
    1bf057e8c chore(deps): update dependency docker to ~=6.1.0
    27891a664 Update docs/source/markdown/podman-systemd.unit.5.md
    505e02e04 fix(deps): update github.com/containers/common digest to bc15b04
    53220717e fix: initContainer restart policy overridden by pod
    c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0
    773b45704 chore(deps): update dependency requests to ~=2.30.0
    0c070ebfb ginkgo json output: only in CI, not on laptop runs
    73d3487cc Allow user quadlets to be stored under /etc
    334adac74 fix(deps): update github.com/containers/common digest to ea87b34
    95557a532 libpod: do not Cleanup() more than once
    df9344ac4 compat container create: match duplicate mounts correctly
    42c822720 Update podman-completion.1.md
    3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58
    75d92f41d Run generate.CompleteSpec() for initContainers as well
    d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
    df8cc7af3 remote: return better connect error
    61985a610 Add missing man page links for Docker man pages
    f877d7dcd Replace egrep/fgrep with grep -E/-F
    19aabf440 remote: exec inspect update exec session status
    305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778
    999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
    38f993543 fix(deps): update github.com/containers/buildah digest to f353690
    1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
    dc7515dc3 MVP for Podman Machine with AppleHV
    54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts
    1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
    e1e03a0e3 bindings, build: don't pass invalid platform in case of none
    ae5305134 Revert "logformatter: anchors: link to test summary, not name"
    fbe62f329 More cleanup: volumes: do not export to stdout
    3050a6437 e2e test cleanup
    fa1ba17bc Update kube gen & play to use pod restart policy
    db4ad54f9 Add {{.Restarts}} to podman pod ps
    0fef113a4 Add {{.Restarts}} to podman ps
    edbeee523 Add --restart flag to pod create
    9e9bcec9e history: correctly set tags
    073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0
    3858a833b Makefile: do not run machine test in parallel
    5af433923 pkg/machine/e2e: switch to GinkgoWriter
    1720042d0 api: fix parsing filters
    c4b9f4b34 ginkgo-v2 cleanup workaround for #18180
    5eb99a0ac test/e2e: fix custom timing reporting
    1bff0108f logformatter: anchors: link to test summary, not name
    914ff01f9 WIP: logformatter: handle ginkgo v2 logs
    b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns
    054154c77 test/e2e: run system reset test serial
    c5922cc6f test/e2e: fix CleanupVolume/Secrets()
    bc1ed07b5 ginkgo v2: fix new Skip() behavior
    cd46e7279 test/e2e: fix pause tests to unpause before cleanup()
    2ce4e935b ginkgo v2: drop localbenchmarks
    fb7a96638 test/e2e: switch to GinkgoWriter
    cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup()
    8cc7a3618 ginkgo: run on all cores
    9c1f713c7 test/e2e: fix Cleanup()
    9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test"
    629a6a6e4 test/e2e: actually check for cleanup errors
    b9ba85044 Lower e2e timeout to not waste time when it hangs
    fbb7c980a test/e2e: containers.conf tests add missing Wait()
    c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription()
    666e31447 ginkgo v2: remove deprecated flags
    445815036 update to ginkgo v2
    502654580 test/e2e: do not remove CNI directory
    7b25f362e e2e: login_logout: use unique authfile for each test
    d06480d99 Fix clashing subuid
    24be46a51 [CI:DOCS] troubleshooting: fix subuid example
    bab4217cd manifest, push: use source as destination if not specified
    202701e65 Update github.com/moby/term digest to 0564e01
    e8f34e457 Add name-generation test
    b5ef9555a Implement machine provider selection
    70870895b libpod: improve errors management in cleanupStorage
    5592dc12f libpod: report unmount idmapped rootfs errors
    2932208c2 test: do not wait 10 seconds before killing myyaml
    891bc117e podman: simplify code with a switch
    bac57409f test: fix typo
    5fefb54d2 build(deps): bump github.com/docker/docker
    0a92b399d swagger: fix Info name conflict
    20c42489e Nightly dependency treadmill: remove
    33fa54580 Update short description for disconnect cmd
    aca993632 windows: podman save allow the use of stdout
    512b39475 Update c/common and avoid setting umask
    7ff2eaf96 Cirrus: Update CI VM Image to F38/37
    0e1ddd3df Cirrus: Run code validation on rawhide
    221e3023f Fix rand.Seed() deprecation in golang 1.20
    edaf3b4d5 Add sha256: to images history id for docker compatibility
    d51911f7b Support systemd optional prefix '-' for devices.
    a0c7bb26a Fix a copy/paste error in an error message
    ba4586375 chore(deps): update dependency requests to ~=2.29.0
    d905e412e Fix simple typo in podman-network-create.md
    a027bf102 e2e cleanup: push with auth: add error checks
    eeb210bc5 e2e: remove "-it" from podman run & exec
    64959b744 pkg/machine: rework RemoveConnection()
    2296e71e3 machine: qemu only remove connection after confirmation
    c8e423b55 Add file swith for pre-exec
    6aaf6a284 system reset: show graphRoot/runRoot before removal
    e95e9be76 fix manifest annotate help
    bdf367958 Netavark userns test: give aardvark time to come up
    bbe9d61c4 sqlite: move first read into a transaction
    f3c3ef72d Recover from failed podman machine start
    d222a392c rootless: support joining contianers that use host ns
    0e955bec7 auto-update: return errors when checking for updates
    fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
    ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463
    230ddbe0c Add user mode networking feature to Windows
    3216110de system/reset.go: help: fix typo
    ae5ed6d85 e2e create same-IP: try to fix flake
    faeed14f6 system tests: safer container-stop signaling
    6014f26c4 Revert "Resolve symlink path for qemu directory if possible"
    c5a928c5b ps: --format {{.State}} match docker output
    b4eecd908 test/system/260-sdnotify.bats: fix test flake
    1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services
    fb3b92b96 Eliminate transient container deps from wslkerninst
    dd217d8e0 Wording
    d16c880fb fix(deps): update github.com/containers/common digest to 5547996
    70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call
    1f1525f2e support `--digestfile` for remote push
    d640461ce e2e: skip journald test if journald is unavailable
    5156ab996 Cirrus: Enable testing on Fedora rawhide
    8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task
    77f86f48e chore(deps): update dependency setuptools to ~=67.7.0
    03a7c6a91 Cirrus: Drop benchmarks artifacts
    15664b4b0 test/e2e: correctly reap service process
    c9d861023 test/e2e: add missing options to remote service
    1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir()
    601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file
    08c651016 test/e2e: fix network create flake due same subnet
    525c27fe1 test/e2e: fix SkipIfNotActive()
    01d518a97 test/e2e: do not try to use docker as rootless
    6e97976ad test/e2e: do not leak "hello" file
    750442d09 podman-remote logs: handle server error correctly
    3aaa2793d test/e2e: use custom network config v2
    00fdfa063 rename ImagePushReport to ImagePushStream
    81621ce8a Specify format to buildah before commit
    7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman
    edb64f8a7 libpod: stop containers with --restart=always
    0364aef1e test: fix race when listing cgroups
    b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune
    346483717 [CI:DOCS] Update RELEASE_PROCESS.md
    8019dc9e6 hyperv: add podman socket mapping
    a089f1b5c e2e networking test: better way to get host IP
    bce38c1af Updated system test to be easier to read
    5f5bea0d1 bindings tests: bail out early on image errors
    f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version
    8125bab9b chore(deps): update dependency setuptools to v67
    a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5
    da83364eb e2e: quadlet uses PODMAN env for podman binary path
    6e0cf9344 Fixes format inconsistencies with docker for certain history fields
    acb24f164 Makefile: do not prefix /etc
    7e4cd22ac libpod: configureNetNS() tear down on errors
    4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message
    4b8230119 HyperV: wait on stop
    3cdaf85d6 build(deps): bump github.com/docker/docker
    459f751ae Makefile: include `release-artifacts` target
    3222545ad Enabled network over vsock
    aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1
    64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
    41d516412 fix remote start --filter
    1cac53506 Update API reference to include v4.5
    a0204f1dd Add missing security options to /info response
    de5fa9ce9 Add mention of redir to doc `rootless.md`
    08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
    8e7f98ae6 docs(readme): add status badges and remove hardcoded release info
    e9356ba20 Don't use bytes.NewBuffer to read data
    f488d9890 Add support for HVSOCK on hyperv
    e7a323635 docs: update network tutorial with netavark DHCP support
    32344952a bump main to v4.6.0-dev
    54ba17f69 Remove disused test/install
    1fa4e45a9 Return title fields as a list
    be148665c [CI:BUILD] Packit: Initial Enablement
    4aced7e3e Quadlet - do not set log-driver by default
    51b582d0e system tests: address COPY-hardlink flake
    25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8
    31420112c system tests: fix race in kube-play read-only
    f544971b7 chore(deps): update dependency docker to v6
    f95276bfa CI: enable sqlite system tests
    d28656403 test: enable test_wait_next_exit
    f312c8533 Update dependency PyYAML to v6
    f67d640b8 test/e2e/systemd_activate_test.go: simplify test
    5315c0cc7 Update docker.io/library/golang Docker tag to v1.20
    b4cfc727b api: auth: fix nil deref
    176c329f9 Update dependency requests-mock to ~=1.10.0
    b75ee05d3 Update dependency requests to ~=2.28.2
    d38b22d50 fix: Document removing anonymous volumes at create
    fe22299f9 Use a sane polling interval in WaitContainerDocker
    bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands
    785c63c0f Renovate: Ensure release-note-none label is added
    4bc4609d8 Renovate: Update ignore paths
    64ea5971a *: migrate image registry to registry.k8s.io
    4f5f89cf8 Do not display the resource limits warning message

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
b37f53350d buildah: update to 1.31
Bumping buildah to version v1.31.0, which comprises the following commits:

    d0de60bbf Bump 1.31.0
    723ed8e18 Bump c/common to 0.55.1 and c/image to 5.26.1
    b835631bf Update vendor of containers/common
    c4d2a8520 Run unit tests for copier and chroot without -cover
    135b5a8f0 Fix transition test to work with latest selinux policy
    d8b06097d Bump c/image to 5.26.0 and c/common to 0.54.0
    7a5a18334 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
    a8f350fc5 rootless: use default_rootless_network_cmd config
    b3edcaa06 vendor: update c/{common,image,storage} to latest
    d22a5293b chore: pkg imported more than once
    74b885b9e buildah: add pasta(1) support
    11ba328e2 use slirp4netns package from c/common
    a5c0c8acf update c/common to latest
    14cd28c26 add hostname to /etc/hosts when running with host network
    eb135b8d5 vendor: update c/common to latest
    237ac533e [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    eeaf80f95 fix(deps): update module golang.org/x/sync to v0.3.0
    b064ad7f6 fix(deps): update module golang.org/x/crypto to v0.10.0
    bdd27d393 Add smoke tests for encryption CLI helpers
    b090ae238 fix(deps): update module golang.org/x/term to v0.9.0
    fefbd04e5 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3
    bd32a04c3 Remove device mapper support
    92582a75c Remove use of deprecated tar.TypeRegA
    261a524b9 Update tooling to support newer golangci-lint
    6714a79eb Make cli.EncryptConfig,DecryptConfig, GetFormat public
    b3e39dfd9 Don't decrypt images by default
    14b74e7f8 fix(deps): update module github.com/onsi/gomega to v1.27.8
    1d08bd9de fix(deps): update github.com/containers/storage digest to 3f3fb2f
    0dac0dfa5 Renovate: Don't touch fragile test stuffs
    d9ecd7c59 [CI:DOCS] Update comment to remove ambiguity
    232230cae fix(deps): update github.com/containers/image/v5 digest to abe5133
    4247a3e47 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
    925ff0e62 fix(deps): update module github.com/containerd/containerd to v1.7.2
    5a83012c9 Explicitly ref. quay images for CI
    9b65b12ae At startup, log the effective capabilities for debugging
    3a351f603 parse: use GetTempDir from internal utils
    6adbfeeb4 GetTmpDir: honor image_copy_tmp_dir from containers.conf
    5eb356bb8 docs/Makefile: don't show sed invocations
    a630e3513 CI: Support testing w/ podman-next COPR packages
    90f7436ac intermediate-images inherit-label test: make it debuggable
    08b9a5407 fix(deps): update github.com/containers/common digest to 462ccdd
    7e327cf18 Add a warning to `--secret` docs
    9cd28db91 vendor: bump c/storage to v1.46.2-0.20230526114421-55ee2d19292f
    0766b004b executor: apply label to only final stage
    beae5647c remove registry.centos.org
    68337bf9c Go back to setting SysProcAttr.Pdeathsig for child processes
    371bc34fe Fix auth.json path (validated on Fedora 38) wq Signed-off-by: Andreas Mack <andreas.mack@gmail.com>
    c6e73322b fix(deps): update module github.com/stretchr/testify to v1.8.3
    0b69f7029 CI: fix test broken by renovatebot
    a5ad7b047 chore(deps): update quay.io/libpod/testimage docker tag to v20221018
    86470bfd9 fix(deps): update module github.com/onsi/gomega to v1.27.7
    91ce0571d test: use debian instead of docker.io/library/debian:testing-slim
    7d9447b2f vendor: bump logrus to 1.9.2
    e2b751a0b [skip-ci] Update tim-actions/get-pr-commits action to v1.3.0
    d58d3a14b Revert "Proof of concept: nightly dependency treadmill"
    911c3b5e8 fix(deps): update module github.com/sirupsen/logrus to v1.9.1
    797f03430 vendor in containers/(common,storage,image)
    ba8a1bd0e fix(deps): update module github.com/docker/distribution to v2.8.2+incompatible
    0eb266a95 run: drop Pdeathsig
    e8d11201a chroot: lock thread before setPdeathsig
    51c03212e tests: add a case for required=false
    00581b806 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
    be682de68 build: validate volumes on backend
    dcc7feb6f secret: accept required flag w/o value
    ba06158ab fix(deps): update module github.com/containerd/containerd to v1.7.1
    cad25dd6b fix(deps): update module golang.org/x/crypto to v0.9.0
    dffb148b3 Update the demos README file to fix minor typos
    efa0d69a2 fix(deps): update module golang.org/x/sync to v0.2.0
    e0fe30e61 fix(deps): update module golang.org/x/term to v0.8.0
    d5b32b0f0 manifest, push: use source as destination if not specified
    2fed5fc91 run,mount: remove path only if they didnt pre-exist
    4b1c5e3a9 Cirrus: Fix meta task failing to find commit
    a913dc56a parse: filter edge-case for podman-remote
    9252470c4 fix(deps): update module github.com/opencontainers/runc to v1.1.7
    0019256f2 fix(deps): update module github.com/docker/docker to v23.0.5+incompatible
    b37c4ee43 build: --platform must accept only arch
    5e43f8c9d fix(deps): update module github.com/containers/common to v0.53.0
    562172751 makefile: increase conformance timeout
    4775b247b Cap suffixDigitsModulo to a 9-digits suffix.
    07fda81df Rename conflict to suffixDigitsModulo
    4bb28899e fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
    411bdc968 fix(deps): update module github.com/opencontainers/runc to v1.1.6
    d27c59f85 chore(deps): update centos docker tag to v8
    43440ec6e Clarify the need for qemu-user-static package
    c34fbea7c chore(deps): update quay.io/centos/centos docker tag to v8
    449fd3d2e Renovate: Ensure test/tools/go.mod is managed
    6d877d89d Revert "buildah image should not enable fuse-overlayfs for rootful mode"
    e9884fc41 Bump to v1.31.0-dev
    04965f119 Bump to v1.30.0
    b5867198c fix(deps): update module github.com/containers/common to v0.52.0
    41b760f97 fix(deps): update module golang.org/x/crypto to v0.8.0
    9bd6ccf92 chore(deps): update dependency containers/automation_images to v20230405
    d57638879 vendor c/common ff62cdebdd0e
    f847463ed vendor in latest containers/(storage, image)
    45940016c fix(deps): update module github.com/opencontainers/runc to v1.1.5
    0ff4746c4 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.7
    2e25b156f buildah image should not enable fuse-overlayfs for rootful mode
    dcd7b789a stage_executor: inline network add default string
    c8c37c78f parse: add support for relabel bind mount option
    c95370cd3 build: pass process environment variables by reference
    2ad68d816 run: pass process environment variables by reference
    d45916350 fix(deps): update module github.com/containers/common to v0.51.2
    a92fe130e chore(deps): update dependency containers/automation_images to v20230330
    e67bddded fix(deps): update module github.com/docker/docker to v23.0.2+incompatible
    20861cd21 chore(deps): update dependency containers/automation_images to v20230320
    73dc43c1d fix(deps): update module github.com/onsi/gomega to v1.27.6
    e3a30b54a fix(deps): update github.com/opencontainers/runtime-tools digest to e931285
    374133c95 [skip-ci] Update actions/stale action to v8
    ce8c56780 test: don't allow to override io.buildah.version
    dfc9bb20e executor: only apply label on the final stage
    946395494 Update docs/buildah-build.1.md
    58a22053b update build instruction for Ubuntu
    aad1e994a code review
    3afa5ca74 build: accept arguments from file with --build-arg-file
    8e84bb709 run_linux: Update heuristic for mounting /sys
    78416393f [CI:BUILD] Packit: Enable Copr builds on PR and commit to main
    e8dee4083 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.6
    c0f0efada Update to Go 1.18
    db0bafef3 Disable dependabot in favor of renovate
    4055cc880 chore(deps): update dependency containers/automation_images to v20230314
    2088f6bd7 Fix requiring tests on Makefile changes
    b85a38946 Vendor in latest containers/(storage, common, image)
    b6f32e576 imagebuildah: set len(short_image_id) to 12
    499f1301f Re-enable conformance tests
    fa145b092 Skip conformance test failures with Docker 23.0.1
    bc2423ebc Cirrus: Replace Ubuntu -> Debian SID
    37afb5dbc run: add support for inline --network in RUN stmt
    e2210c3b7 vendor: bump imagebuilder to a3c3f8358ca31b1e4daa6
    db509859d stage_executor: attempt to push cache only when cacheKey is valid
    a35dbb284 Add "ifnewer" as option in help message for pull command
    c1b82d195 build: document behaviour of buildah's distributed cache
    f444d6589 fix(deps): update module golang.org/x/term to v0.6.0
    376eb73ab Add default list of capabilities required to run buildah in a container
    46ffaf935 executor,copy: honor default ARG value while eval stage
    fd5db96c0 sshagent: use ExtendedAgent instead of Agent
    9e6e15c31 tests/bud: remove unwated test
    8a8f99e09 executor: do not warn on builtin default args
    b9e4e29e9 executor: don't warn about unused TARGETARCH,TARGETOS,TARGETPLATFORM
    0ed9b4c8c Fix tutorial for rootless mode
    cf408f758 Vendor in latest containers/(common, storage, image)
    0e707faa7 Ignore the base image's base image annotations
    30f84c8ee fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.5
    05785ee57 build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4
    21e6e91e4 Vendor in latest containers/common
    0b7a7f80b docs/tutorials/04: add defaults for Run()
    7baf73b2a imagebuildah.StageExecutor: suppress bogus "Pushing cache []:..."
    be10b8d20 executor: also add stage with no children to cleanupStages
    f9e51e744 [CI:BUILD] copr: fix el8 builds
    8125e45a5 Fix documentation on which Capabilities are allowed by default
    a8ed3bb58 Skip subject-length validation for renovate PRs
    956c5155d Temporarily hard-skip bud-multiple-platform-values test
    3afa7e360 fix(deps): update github.com/openshift/imagebuilder digest to 86828bf
    4875f1bc9 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.17
    36cade0c3 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
    e0e43a419 build(deps): bump github.com/containers/image/v5 from 5.24.0 to 5.24.1
    24b85d217 [skip-ci] Update tim-actions/get-pr-commits digest to 55b867b
    f96e1ad4d build(deps): bump github.com/opencontainers/selinux
    2ef59fc2c build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0
    482bf4df4 Add renovate configuration
    4dfb82890 Run codespell on codebase
    ae697555c login: support interspersed args for password
    123ef1693 conformance: use scratch for minimal test
    6a0367ff2 pkg/parse: expose public CleanCacheMount API
    5d50a7320 build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
    6d53ec7a3 build(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.16
    dbf1d43b3 docs: specify order preference for FROM
    2008a5302 Bump to v1.30.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Khem Raj
900c85076e xen: Fix build with gas/2.41
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:41:46 -04:00
Peter Marko
489fa21681 skopeo: convert CVE_CHECK_IGNORE to new CVE_STATUS format
See https://git.openembedded.org/openembedded-core/commit/?id=34f682a24b7075b12ec308154b937ad118d69fe5

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:41:46 -04:00
Peter Marko
07a578d49c podman: ignore CVE-2022-2989 and CVE-2023-0778
NVD shows only redhat links and does not mention fixed-in release
se these CVEs will show-up in reports indefinitely.
They are already fixed in current version, so ignore them.

CVE-2022-2989
* https://github.com/advisories/GHSA-4wjj-jwc9-2x96
* https://github.com/containers/podman/pull/15618
* commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups

CVE-2023-0778
* https://github.com/advisories/GHSA-qwqv-rqgf-8qh8
* https://github.com/containers/podman/pull/17528
* commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content

Signed-off-by: Peter Marko <peter.marko@siemens.com>
2023-08-01 14:41:46 -04:00
Sandeep Gundlupet Raju
7332b59472 recipes-bsp: Add u-boot-xlnx scripts for Xen support
Add new boot.cmd.xen to u-boot-xlnx-scr bbappend to enable
Xen support for ZynqMP and Versal devices.

User can enable xen u-boot script by adding below variable from
configuration file.

BOOTMODE = "xen"

This u-boot script also supports to configure below Xen params from
configuration file

params          variable assignment
------          -------------------
duart           XEN_SERIAL_CONSOLES = "serial0"
dom0_mem        DOM0_MEM = "1500M"
dom0_max_vcpus  DOM0_MAX_VCPUS = "1"
extra params    XEN_CMDLINE_APPEND = "loglvl=all"

Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:41:45 -04:00
Sandeep Gundlupet Raju
c9b65ee0e5 recipes-bsp: Add device-tree files for Xen support
Add device-tree files for Xen support, Earlier all these files
were in meta-petalinux layer, Hence move these files to this layer
so that users can build Xen without including meta-petalinux.

Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:41:45 -04:00
Martin Jansa
5bb2ad0d25 runc-opencontainers: use bfd linker even when gold is selected by ls-is-gold
* fixes:
  ld: --no-dynamic-linker: unknown option
* you might need to clean the build for updated LDFLAGS to be corectly re-configured

* lld and bfd are fine:

$ ld.gold --help | grep dynamic-linker
  -I PROGRAM, --dynamic-linker PROGRAM
$ ld.bfd --help | grep dynamic-linker
  -I PROGRAM, --dynamic-linker PROGRAM
  --no-dynamic-linker         Produce an executable with no program interpreter header
$ ld.lld --help | grep dynamic-linker
  --dynamic-linker=<value>
  --no-dynamic-linker     Inhibit output of .interp section

* not sure where this came from only place where I see --no-dynamic-linker
  in runc-opencontainers WORKDIR is:
  aarch64-oe-linux/13.1.1/plugin/include/config/aarch64/aarch64-linux.h:   %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \
  aarch64-oe-linux/13.1.1/plugin/include/aarch64-linux.h:   %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \

  so my guess is:
  923ae4da Makefile: add support for static PIE

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-27 12:03:05 -04:00
Xiangyu Chen
c507955709 ovs: fix some installed packages in openvswitch cannot be executed
The variable "PYTHON3" in Makefile.am set as python3, this cause the following scripts error:

/usr/sbin/ovs-bugtool Not found the interpreter python3
/usr/bin/ovs-pcap Not found the interpreter python3
/usr/bin/ovs-test Not found the interpreter python3
/usr/bin/ovs-tcpdump Not found the interpreter python3
/usr/bin/ovs-tcpundump Not found the interpreter python3
/usr/bin/ovs-vlan-test Not found the interpreter python3
/usr/bin/ovs-l3ping Not found the interpreter python3
/usr/bin/ovs-parse-backtrace Not found the interpreter python3
/usr/bin/ovs-dpctl-top Not found the interpreter python3
/usr/share/openvswitch/scripts/ovs-check-dead-ifs Not found the interpreter python3
/usr/share/openvswitch/scripts/ovs-check-dead-ifs Not found the interpreter python3
/usr/share/openvswitch/scripts/ovs-monitor-ipsec Not found the interpreter python3
/usr/share/openvswitch/scripts/ovs-vtep Not found the interpreter python3

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:57:32 -04:00
Chen Qi
fcf7968f1d kubernetes: set CVE_VERSION explicitly
The CVE_VERSION defaults to PV, but in NVD database, there's no
prefixing 'v' in database. So set CVE_VERSION explicitly for better
CVE scanning.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Bruce Ashfield
5dda7078ba runc-opencontainers: update to 1.1.7-tip
Bumping runc to version v1.1.7-37-gca73c9fd, which comprises the following commits:

    0d93d7d1 release: add riscv64 binary
    9164fe17 libct/seccomp: add riscv64
    ed47e31a Makefile: set CGO_ENABLED=1 when needed
    923ae4da Makefile: add support for static PIE
    2abca872 Makefile: fix GO_BUILDMODE setting
    120ec5bd Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC
    b9940113 Dockerfile: don't use crossbuild-essential-*
    028fc57a Dockerfile: rm dpkg --add-architecture lines
    4449ce84 Dockerfile: nit
    d375351b ci/cirrus: enable rootless tests on cs9
    e1a8b52f tests/int/cgroups: filter out rdma
    02e065ef docs/systemd: fix a broken link
    9af462e4 Fix tmpfs mode opts when dir already exists
    7d1bdc7d .codespellrc: update for 2.2.5
    8397943e man/runc: fixes
    f9da684d tests/int: increase num retries for oom tests
    7fa912ed ci/cirrus: limit numcpu
    e9c1ca08 Fix Vagrant caching
    e2265a92 ci: bump bats 1.8.2 -> 1.9.0
    bbddb6bd Vagrantfile.fedora: bump to 38
    27b86b4c ci/cirrus: use vagrant from hashicorp repo
    98a1b76c tests/int: fix some checks
    1eadcede ci: bump bats 1.3.0 -> 1.8.2
    63af8b00 init: do not print environment variable value
    404ea7ab libct: fix a race with systemd removal
    f0ecf30b VERSION: back to development
    860f061b VERSION: release 1.1.7

We refresh one patch for context changes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Bruce Ashfield
248be027d6 runc-docker: update to 1.1.7-tip
Bumping runc to version v1.1.7-37-gca73c9fd, which comprises the following commits:

    0d93d7d1 release: add riscv64 binary
    9164fe17 libct/seccomp: add riscv64
    ed47e31a Makefile: set CGO_ENABLED=1 when needed
    923ae4da Makefile: add support for static PIE
    2abca872 Makefile: fix GO_BUILDMODE setting
    120ec5bd Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC
    b9940113 Dockerfile: don't use crossbuild-essential-*
    028fc57a Dockerfile: rm dpkg --add-architecture lines
    4449ce84 Dockerfile: nit
    d375351b ci/cirrus: enable rootless tests on cs9
    e1a8b52f tests/int/cgroups: filter out rdma
    02e065ef docs/systemd: fix a broken link
    9af462e4 Fix tmpfs mode opts when dir already exists
    7d1bdc7d .codespellrc: update for 2.2.5
    8397943e man/runc: fixes
    f9da684d tests/int: increase num retries for oom tests
    7fa912ed ci/cirrus: limit numcpu
    e9c1ca08 Fix Vagrant caching
    e2265a92 ci: bump bats 1.8.2 -> 1.9.0
    bbddb6bd Vagrantfile.fedora: bump to 38
    27b86b4c ci/cirrus: use vagrant from hashicorp repo
    98a1b76c tests/int: fix some checks
    1eadcede ci: bump bats 1.3.0 -> 1.8.2
    63af8b00 init: do not print environment variable value
    404ea7ab libct: fix a race with systemd removal
    f0ecf30b VERSION: back to development
    860f061b VERSION: release 1.1.7

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Bruce Ashfield
5d41297f4b cri-o: update to 1.27-tip
Bumping cri-o to version v1.27.0-48-g3abbef701, which comprises the following commits:

    a61082768 vendor: drop podman replace and actually update runc
    9c86a1269 vendor: bump runc to 1.1.6
    1d6f5a00c [1.27] Add support for namespaced signature policies
    35afa9859 runtime handler hooks: run default hook when container stops gracefully
    3907696a4 main: Added a call to GarbageCollect
    ee6868938 Add a test for log linking
    5319875b4 linklogs: add support for symlinking container directory
    13f8ae560 Add support for linking pods logs
    605e4d935 server: ensure pod labels are present
    15d6d5977 OCPBUGS-14750: Pod termination must succeed when a hook fails
    ccd7e23af server: do not take lock to populate pid in container status and inspect
    57662c6f8 go.{mod,sum}, vendor: update NRI.
    ef90744ae test: adapt for sched_load_balance disable after stop
    169220817 runtime handler hooks: add DefaultCPULoadBalanceHooks
    a74999eb6 server: call hooks and NRI in stopContainer
    ea3297939 server: call hooks on infra container creation
    37518c031 high perf hooks: workaround libcontainer quirk when disabling cpu quota
    eca28447d cgmgr: export CrioPrefix and use containerCgroupPath more
    49cfa2060 *: update sandbox/pause image to 3.9
    bf9eec8cb Add debug to identify when a relabel was not requested
    2ee3398cb high perf hooks: disable CPU quota with libcontainer as a pre start hook
    11141ac32 test: add test for cpu-quota.crio.io
    69a6d6fc2 Fix events generated by Evented PLEG

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Bruce Ashfield
f634a540c4 podman: update to 4.5.1
Bumping libpod to version v4.5.1-6-gdae7df5a1, which comprises the following commits:

    3d7aba056 completion: fix panic in simplePathJoinUnix()
    9de891616 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
    5933be9ba Bump to v4.5.2-dev
    9eef30051 Release v4.5.1
    777ddfc42 [CI:DOCS] Final release notes for v4.5.1
    2b045de48 [CI:BUILD] Packit: set propose-downstream action type to pre-sync
    b1281ae46 Revert "Resolve symlink path for qemu directory if possible"
    8b35bbab9 no need for podman-next rpm test on maint branch
    6652633ce [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    97ec57da5 libpod: configureNetNS() tear down on errors
    d812087d1 libpod: rootlessNetNs.Cleanup() fix error message
    083894a22 network create/update: allow dns servers comma separated
    1575b3a7f machine: fix default connection URL to use 127.0.0.1
    1e86d0a75 compat: accept tag in /images/create?fromSrc
    7d0e4a644 compat container create: match duplicate mounts correctly
    dc21698d6 machine: qemu only remove connection after confirmation
    02b9f4f5d windows: podman save allow the use of stdout
    66fb7c9bb remote: exec inspect update exec session status
    5b21c38c8 podman-remote logs: handle server error correctly
    9558af2c4 libpod: stop containers with --restart=always
    0f18a0144 Do not include image annotations when building spec
    bc2f0115d [v4.5] system tests: fix race in kube-play read-only

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Bruce Ashfield
ee055b339d containerd: update to 1.7.2
Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits:

    dafbeb5b1 No more nondistributable layers in MS registry
    e5b2a0131 task: don't `close()` io before `cancel()`
    a6a15afe3 move to CRI-TOOLS v1.27.0
    58b6b99cd Add a check to skip stats for containers that are not running
    0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
    a24267b28 Remove cni conf_template deprecation
    89415fe36 Fix issue for HPC pod metrics
    e134b6393 Fix panic when remote differ returns empty result
    0e41daaea [release/1.7] Prepare release notes for v1.7.2
    99582fb1a fix: cio.Cancel() should close the pipes
    eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments
    313c226b8 Update continuity to a tagged version
    e21c8beee Post cherry-pick fixes
    246240f71 Move PLEG event back to CRI
    16f3726dd Generate sandbox exit events from CRI
    0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package
    91d9f5c64 Publish sandbox events
    4b77683b4 Add sandbox events protos
    8dd16285a UnmountAll is a no-op for missing mount points
    acff3eefa Improve error messages and remove check
    b4dd3bf4e Make ReadOnly() available on all platforms
    08d8baf3f Increase integration test tmieout to 20m
    1f0dbd011 Remove bind code path in mount()
    8f37b1c63 Remove "bind" code path from diff
    9139208b3 Properly mount base layers
    e61e7b312 Skip parent layer options on bind mounts
    e4307926f Add ReadOnly() function
    0277b9b01 Remove escalated privileges
    d5c18dfb7 Use DefaultSnapshotter
    853179366 use t.Fatal if we cannot enable process privileges
    5b3ee413f Update continuity
    375172604 Fix go.mod, simplify boolean logic, add logging
    600abd137 Ignore ERROR_NOT_FOUND error when removing mount
    df7295dcd Update continuity, go-winio and hcsshim
    0db78c482 Remove unused function
    219058766 Grant needed privileges for snapshotter tests
    96fbe5bc8 Fix layer comparison and enable read-only checks
    279e0d3c9 Use bind filer for mounts
    93e94da40 Enable TestSnapshotterClient on Windows
    3a3da693a Run Windows snapshotter through the test suite
    e7b62322f Fix misspelling of 'Native' as 'Naive'
    e1f999a18 Add paired 'mount' log for 'unmount'
    5788d6e52 Don't use all-upper-case filenames in snapshot tests
    3cdcb2f10 Skip tests that do not apply to WCOW on Windows
    b0968b8bb Ensure mounts are unmounted before leaving the test
    b57424851 Unify testutil.Unmount on Windows and Unix
    b9a8aad45 Implement Windows mounting for bind and windows-layer mounts
    1a64ee183 Implement WCOW parentless active snapshots and view snapshots
    7851b0a9f CRI: Make stats respect sandbox's platform
    8d7c340ca [sbserver] handle missing cpu stats
    d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes
    2c38cad77 notify readiness when registered plugins are ready
    08de6e7b8 Update volume-ownership image with latest hashes
    6a5e54c15 Get CDI devices from CRI Config.CDIDevices field

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Renato Caldas
680f56d9e4 cri-o: drop unneeded dependency on virtual-containerd
Signed-off-by: Renato Caldas <renato@calgera.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-11 19:11:34 +00:00
Renato Caldas
7e6f503083 crun: fix compilation with musl
Requires either libargp or argp-standalone.

Signed-off-by: Renato Caldas <renato@calgera.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-11 19:11:30 +00:00
Chen Qi
0cc4d01dcb cni: fix textrel QA issue
When building cni, we get textrel QA issue like below:

  cni: ELF binary /usr/libexec/cni/macvlan has relocations in .text

The problem could be solved by adding '-buildmode=pie' to ${GO}.

In go.bbclass, this flag is added to GOBUILDFLAGS conditionally,
that is, if the arch is not mips nor riscv32, this '-buildmode=pie'
is added to GOBUILDFLAGS. So make use of that.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-05 23:46:19 -04:00
Chen Qi
3ce3ef9486 kubernetes: do not strip binaries at build
Yocto/OE has its own way to control binary stripping. So don't do
it in the go build process. Otherwise, we'll get empty dbg packages.

Setting DBG=1 solves this problem, as stated in comments in the Makefile.
"""
  # Note: Specify DBG=1 for building unstripped binaries, which allows you to use code debugging
  # tools like delve. When DBG is unspecified, it defaults to "-s -w" which strips debug
  # information.
"""

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-05 23:46:19 -04:00
Chen Qi
4bc2f6e550 containerd: fix HOMEPAGE
The previous HOMEPAGE has been archived. Use the active one.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-26 18:50:56 -04:00
Martin Jansa
c2e8199d87 netavark, xen: *.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a

This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).

This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.

This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now:

Patches in Pending state: 15 (11%)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-22 14:41:45 -04:00
Martin Jansa
eaa50e95bd ipxe: Fix malformed Upstream-Status
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-22 14:41:44 -04:00
Martin Jansa
ed8c773b1b diod: Fix malformed Upstream-Status
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-22 14:41:44 -04:00
Bruce Ashfield
49fdcebf5b moby: update to v24.0.2
Bumping moby to version v24.0.2-56-gd7aa1e14e5, which comprises the following commits:

    5652c59647 testing: temporarily pin docker-py tests to use "bullseye"
    789a8755b8 run `getent` with a noop stdin
    f7298b326e vendor: github.com/sirupsen/logrus v1.9.3
    1c18ad6ca6 vendor: github.com/rootless-containers/rootlesskit v1.1.1
    ae4a10df67 update RootlessKit to v1.1.1
    24c882c3e0 update go to go1.20.5
    b3133d7471 contrib/check-config: move xt_bpf check to overlay section
    8c552012ae contrib/check-config: check for xt_bpf
    61d547fd06 Dockerfile: Move dockercli to base-dev
    e5fbc3f75a hack/cli.sh: Quiet origin cleanup
    1a078977e1 Dockerfile/shell: Install buildx cli plugin
    c4198e6053 Dockerfile: Use separate cli for shell and integration-cli
    647ba03224 builder-next: Set moby exporter as default
    961fe27408 c8d/handlers: Handle error in walkPresentChildren
    087cf6f238 c8d/load: Don't unpack pseudo images
    0b9d68f59d c8d/load: Use walkImageManifests
    cbf0779bfc c8d/list: Use walkImageManifests
    0139309fef c8d: Add walkImageManifests and ImageManifest wrapper
    e1c7956764 Dockerfile: use COPY --link for source code as well
    75afe3201b containerd: add c8d version and storage-driver to User-Agent
    8018ee4689 dockerversion: DockerUserAgent(): allow custom versions to be passed
    ed376a603f dockerversion: remove insertUpstreamUserAgent()
    1d45ea52f4 dockerversion: simplify escapeStr()
    a27b0381a6 dockerversion: add a basic unit-test
    1fc19772e0 Make sure the image is unpacked for the current snapshotter
    4217d9ea0a Dockerfile: use COPY --link to copy artifacts from build-stages
    4c6b8e737f added alias validation
    e370f224ae fixing consistent aliases for OCI spec imports
    ac1a867282 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
    2949fee1d3 containerd: set user-agent when pushing/pulling images
    f9c68e5fbc libn: fix resolver restore w/ chatty 'iptables -C'
    3452a76589 libnetwork: fix sandbox restore
    fec801a103 libnetwork: log why osl sandbox restore failed
    d9e39914a7 Fix npe in exec resize when exec errored
    042f0799db libn/d/overlay: support encryption on any port
    ec8ec9056c builder/remotecontext: deprecate CachableSource, NewCachableSource
    7a4ea19803 libcontainerd: work around exec start bug in c8d
    ae6e9333c0 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
    0d9acd24fe c8d/inspect: Fill `Created` time if available
    04eccf8165 vendor: github.com/containerd/go-runc v1.1.0
    d64bab35ee daemon: lock in snapshotter setting at daemon init
    329d671aef Dockerfile: temporarily skip CRIU stage
    4cc2081119 integration: Add TestImageInspectEmptyTagsAndDigests
    27df42255c hack: Rename .ensure-emptyfs to .build-empty-images
    9ee7d30aef hack/ensure-emptyfs: Create dangling image
    8a4b7c5af8 Add testenv.UsingSnapshotter utility
    a753ca64e2 hack/make/.binary: don't use "netgo" when building Windows binaries
    5276c2b6e0 c8d/pull: Use same progress action as distribution
    baf1fd1c3f libnetwork: check for netns leaks from prior tests
    992dc33fc5 libnetwork/osl: restore the right thread's netns
    ef1545ed4a libnetwork: leave global logger alone in tests
    876f5eda51 libnetwork: make resolver tests less confusing
    47a3dad256 c8d/list: Show layerless images
    0869b089e4 libnetwork: just forward the external DNS response
    3467ba6451 reorder load funcs to match newServiceConfig()'s order
    f9b886c01b add mirror to daemon reload test for insecure registries
    07140c0eca build: use daemon id as worker id for the graph driver controller
    d5ad186d49 ci(bin-image): distribute build across runners
    4d924c35f7 api/server: allow empty body for POST /commit again
    68b7ba0d03 api/inspect: Fix nil RepoTags and RepoDigests
    5ea7b8d091 fix: `docker pull` with platform checks wrong image tag

Bumping docker-cli to version v24.0.2-9-g0823df7da, which comprises the following commits:

    11af1189d docs: add "--detach-keys" example to docker run reference
    f118c05e8 docs: move "--detach-keys" example to examples section
    f66f7ed7f cli/command: fix GoDoc referencing wrong const
    2814c01b0 Dockerfile.vendor: update GOPROXY to use default with fallback
    32f66cbe5 vendor: github.com/docker/docker v24.0.2
    dc4707edb [24.0] vendor: github.com/docker/docker v24.0.1
    298e67926 docs: fix example for proxies in daemon.json
    9175ffa9b man: remove devicemapper from examples
    beb0330a7 Correct "ps --no-trunc" example output
    405be9063 docs: remove AuFS from glossary
    7a269817b docs: remove Docker Toolbox from glossary
    41ef7c45c docs: remove boot2docker and docker-machine from glossary
    c184a61da docs/deprecated: remove "disabled by default" for AuFS, overlay
    e7a60449f docs: remove aufs and legacy overlay
    77541afea contrib/completion: remove aufs, legacy overlay
    e67a7acd0 docs/deprecated: remove .patch release from deprecation status
    fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-21 01:56:06 +00:00