Commit Graph

1829 Commits

Author SHA1 Message Date
Christopher Clark
1c746a9768 qemuboot, xen-image-minimal: enable runqemu for qemuarm Xen images
The Xen hypervisor built for Arm 32-bit targets can be launched with
runqemu by providing a u-boot script and configuration for Qemu, which
enables interactive testing of Xen images.

Add qemuboot-xen-u-boot.bbclass to add a new bitbake task for generating
the u-boot script. Since this increases the number of qemuboot-specific
classes that are inherited by the xen-image-minimal recipe, change the
inherit of all of these to only apply to qemu machines with the qemuall
override.

Update qemuboot-xen-defaults.bbclass to supply working default
parameters for the qemuarm machine needed to boot successfully in
testing. Also change all the arch-specific variable overrides into
narrower qemu platform overrides instead to avoid unnecessary
interactions with other Arm platform machines.

Signed-off-by: Christopher Clark <christopher.clark@starlab.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-05-09 08:08:25 -04:00
Christopher Clark
da1e54ca79 xen, xen-tools: add recommendation for Qemu for non-hvm x86
The Spectre and Meltdown mitigations for Xen run PV guests within
HVM virtual machines, so Qemu is no longer only needed for systems
configured to run HVM guests.

With the split xen hypervisor and tools recipes, the bios dependencies
belong in the tools recipe, so move them and replace the hvm
PACKAGECONFIG option with the recommendation based on target arch.

Signed-off-by: Christopher Clark <christopher.clark@starlab.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-05-09 08:08:20 -04:00
Bruce Ashfield
b9e18c1dae xen-tools: correct xencommons initscript for systemd
commit [xen-tools: don't declare xencommons as an initscript for
systemd] was wrong in an amazing two ways. It has an extranenous
} and it has inverted logic.

The result is that xencommons is not being properly declared as
an initscript for sysvinit, and hence we don't fully boot. It
isn't a problem for most systemd configurations, so we were
booting as the initscript wasn't firing.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-05-08 23:22:07 -04:00
Ross Burton
973c8d0964 xen: use vgabios 0.8a
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-05-02 14:07:30 -04:00
Ross Burton
8386caefb7 vgabios: upgrade to 0.8a and cleanup recipe
Upgrade to 0.8a.

License checksum updated as the FSF street address changed.

Apply a patch to use the correct host compiler when building biossums,
removing the need for a separate biossums-native recipe.

Don't hardcode /usr/share, use ${datadir}.

Install all found firmware (including the new Banshee BIOS in 0.8a) and
the debug files which were not installed but intended to be packaged.

Remove redundant PR and S assignments, as these are the default values.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-05-02 14:07:30 -04:00
Ross Burton
36433bfef3 dev86: fix a build race
Fix a race in cpp/ where token[12].h are written to a temporary file
with the same name.

Also update the status of cross.patch.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-05-02 14:07:30 -04:00
Bertrand Marquis
21a5c29a10 xen: Add missing space in append to IMAGE_INSTALL
Add a space before doing an append in IMAGE_INSTALL on x86.
This is solving issues happening if someone is using IMAGE_INSTALL in
local.conf to add things to the generated image.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-26 23:03:42 -04:00
He Zhe
c21e22e8e6 libvirt: Fix error on undefining domain and segfault on libvirt_driver_qemu.so
Backport a patch to fix segfault when undefining virtual machines.

virsh undefine vm
rpc-libvirtd[9725]: segfault at 18 ip 00007f8b0a5f17a9 sp 00007f8b3f8cbb60
error 4 in libvirt_driver_qemu.so[7f8b0a56e000+113000]
error: Code: a4 01 0f 84 89 03 00 00 4c 89 ff e8 d1 ed f7 ff 85 c0 0f 88 b9
             02 00 00 48 8b 45 b8 48 8b b0 80 00 00 00 48 8b 86 b0 02 00 00
             <48> 8b 78 18 48 85 ff 0f 84 42 01 00 00 e8 b5 02 f8 ff 48 89 45 c0
Disconnected from qemu:///system due to end of file
error: Failed to undefine domain 'vm'
error: End of file while reading data: Input/output error

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-26 17:03:20 -04:00
Chen Qi
63b026b624 containerd-opencontainers: add CVE_VERSION setting
The NVD database uses version without a prefixing 'v'
for containerd.

e.g.
https://nvd.nist.gov/vuln/detail/CVE-2022-23648

So we need to explictly set CVE_VERSION.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-26 17:02:57 -04:00
Bruce Ashfield
bff2ad3131 nerdctl: move SRC_URI appends to include file
This makes the main recipe more readable, and allows us to
clearly see changes to the SRC_URI and the main recipe
separately.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-21 14:02:04 -04:00
Bruce Ashfield
c6464d8f04 nerdctl: update to v0.18
Bumping nerdctl to version v0.18.0-61-g48f189a, which comprises the following commits:

    8385be4 add test case for nerdctl inspect to check mounts field
    a766555 show mounts info for nerdctl inspect
    1547f73 Add flag ipfs-address to push to remote IPFS node
    2db1039 update stargz-snapshotter (0.11.4), IPFS (0.12.2)
    7b1c33d Import NOTICE from Docker/Moby
    bc66bfa CI: upload go-mod-vendor.tar.gz as a backup
    43f7b6b Dockerfile: update Ubuntu to 22.04
    6c22944 Follow-up to `Support --init argument in nerdctl run command`
    a8c3de4 Bump github.com/moby/sys/mount from 0.3.1 to 0.3.2
    c4cf6a0 Bump actions/checkout from 3.0.0 to 3.0.1
    90a91d2 Bump github.com/compose-spec/compose-go from 1.2.2 to 1.2.4
    839faf5 Added volume remove fixes(issue #971)
    f8272ed Support --init argument in nerdctl run command
    175923e Export OS Platform and Arch information in `nerdctl version` command
    b3504ce feat: container image build ci for push image to github registry
    8dc5fc5 seccomp: relax restrictions depending on --cap-add
    65170cb Bump actions/setup-go from 2 to 3
    fe6a7e8 inspect: add type flag to inspect command
    ac58d8c CI: relax timeout
    96b5e49 nerdctl wait: fix flakeness and error handling
    ba0624d Deflake TestComposeKill
    401b541 update BuildKit (0.10.1)
    1a3dfe9 Bump github.com/containerd/continuity from 0.2.2 to 0.3.0
    800d9ee Bump github.com/ipfs/go-ipfs-http-client from 0.2.0 to 0.3.0
    72a2923 Bump github.com/ipfs/interface-go-ipfs-core from 0.6.1 to 0.6.2
    7c78e79 Bump github.com/compose-spec/compose-go from 1.2.1 to 1.2.2
    8941220 update runc (1.1.1)
    6fdf4d1 go.mod: vishvananda/netlink v1.2.0-beta
    457317a build: fix `content digest ... not found` for built multi-platform image
    500f039 Bump github.com/compose-spec/compose-go from 1.1.0 to 1.2.1
    929298c Format created to be compatible with docker inspect
    0564fc1 Remove orphan containers before the service has be started
    b66451e update RootlessKit (1.0.0), imgcrypt (1.1.4)
    50cbdfc Add check of snapshotter when sharing images
    9c3cca2 docs: clarify availability of optional features
    e45c8ea Bump github.com/docker/docker
    589fc27 Bump github.com/docker/cli
    6f5d0d2 Bump github.com/ipfs/interface-go-ipfs-core from 0.6.0 to 0.6.1
    4372842 Fix nerdctl ignores BUILDKIT_HOST
    0c334bd Support assign static IP address in `compose up` command by using ipv4_address field
    facc229 CI: set fail-fast to false
    fcdaa2e Add a document about setting up `nerdctl build` with BuildKit
    ae1399a CNI: switch away from `isolation` plugin to `firewall` plugin with `ingressPolicy`
    0cb1fe6 update containerd (1.6.2)
    7f13c20 Fix `nerdctl build` logs error even when succeeds
    8e3923c Bump github.com/containerd/go-cni from 1.1.3 to 1.1.4
    d948091 avoid nil authconfig && display warning msg for unencrypted  passwd
    d8167e0 docs: clarify that P2P image distribution (IPFS) is completely optional
    ba88f62 update CNI plugins (1.1.1), stargz-snapshotter (0.11.3), IPFS (0.12.1)
    19bf1d3 enhance namespace management
    1231875 push: skip foreign layers
    87aa769 Support --ip argument when run the container
    8ec0672 rootless: Support BuildKit containerd worker
    21d0350 Bump github.com/ipfs/interface-go-ipfs-core from 0.5.2 to 0.6.0
    debe171 CI: remove integration test with contianerd v1.4.5
    fb0339e build with go 1.18
    c0e0edf fix login on defaultRegistry
    7e68a87 Support fallback to plain http in nerdctl login
    7cb387d Follow-up to `Add GitHub issue templates`
    701a55c Add GitHub issue templates
    a9e5022 Windows CI: install git
    2bcbdcb refactor netutil
    b75b86c Bump github.com/docker/cli
    94d9169 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0
    04199ec Bump github.com/docker/docker
    12ca1b0 fix make failed when use go1.16
    3e073bc build(deps): bump github.com/containernetworking/plugins
    802db60 Update the README.md to remind people to upgrade the Go version
    f20ef09 add macvlan/ipvlan doc for cni
    d56bdd6 pkg/portutil: improve rootless error message
    b154105 update stargz-snapshotter (0.11.2)
    3f1ffe2 Support allocate host port when try to run container
    9c14a02 CI: temporarily remove FreeBSD integration tests
    0e7ddc9 Attempt to deflake TestPushInsecureWithLogin
    1b1f1df build test-integration image in arm64
    1dcc70c update containerd, CNI plugins, IPFS, Stargz Snapshotter
    e8f7b6a Bump github.com/compose-spec/compose-go from 1.0.9 to 1.1.0
    63ba16a Bump github.com/containerd/containerd from 1.6.0 to 1.6.1
    b6850ff Bump golangci/golangci-lint-action from 2 to 3.1.0
    f4d689d Bump actions/checkout from 2 to 3
    f15e589 add ipam-driver and ipam-opt flags for create network
    47190c4 Separate network code

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-21 13:59:32 -04:00
Bruce Ashfield
48ef7901ab xen-tools: don't declare xencommons as an initscript for systemd
We previously disabled init.d/xencommons when systemd is the
init system (to fix duplicate initialization of some resources),
but during rootfs install, update-rc.d will look for the script
if xencommons is declared as an initscript package.

We match the installation and only delcare it as an initscript
in a non systemd configuration.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-21 11:58:56 -04:00
Richard Neill
6ed391fdb0 k3s: Add missing IP Virtual Server (ip_vs) feature to the kernel config
K3s (and Kubernetes) supports load balancing via IPVS, and by default reports
errors when IPVS kernel modules cannot be loaded.

This patch adds the missing reported kernel modules to the k3s recipe:

    * ip-vs
    * ip-vs-rr
    * ip-vs-wrr
    * ip-vs-sh

The modules are configured by including the ip_vs kernel feature.

Signed-off-by: Richard Neill <richard.neill@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-20 14:12:03 -04:00
He Zhe
e02f0d3391 openvswitch: uprev from v2.17.0-30-g2404d4536 to v2.17.1
commits short log:
41bb202fb (tag: v2.17.1) Set release date for 2.17.1.
8f42d4f59 NEWS: Highlight libopenvswitch API change caused by UB fixes.
14301b3a3 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.
3a2eef792 python: idl: Set cond_changed to true if condition change requested.
d05ccf288 dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id.
79e291f98 alb.at: Add tests for cross-numa polling.
9c3b74fb2 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate.
8580ff9dd pmd.at: Add tests for multi non-local numa pmds.
6bf4eeddb dpif-netdev: Fix non-local numa selection for more than two numas.
c41434b3b dpif-netdev: Fix typo in function name.
e0aa5e132 python: idl: Set cond_changed to false if last id is zero.
8da40d31c ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().
63a903ab4 ofproto/ofproto-dpif: Fix dpif_type for userspace tunnels.
14d54eb8b sset: add SHORT version of SAFE loop macros.
f0e63b115 sparse: bump recommended version and include headers.
70b87cf72 idlc: support short version of SAFE macros.
3777ed90c rculist: use multi-variable helpers for loop macros.
bb52e9beb hindex: remove the next variable in safe loops.
7d6cbfa24 hindex: use multi-variable iterators.
97ad96b63 cmap: use multi-variable iterators.
cd62fda22 hmap: use short version of safe loops if possible.
d56bfd752 hmap: implement UB-safe hmap pop iterator.
e2c835486 hmap: use multi-variable helpers for hmap loops.
897d6647e list: use short version of safe loops if possible.
979a9eb5b list: use multi-variable helpers for list loops.
6bacf802c util: add helpers to overload SAFE macro.
f127123d6 util: add safe multi-variable iterators.
38e73f0b6 util: add multi-variable loop iterator macros.
e91edf456 ovsdb: raft: Fix inability to read the database with DNS host names.

The ptest results BEFORE uprev:
ERROR: 2340 tests were run,
30 failed unexpectedly.
65 tests were skipped.
failed cases:
10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1024 1180 1181
1182 1183 1184 1185 1290 1291 2387 2391 2394

The ptest results AFTER uprev:
ERROR: 2343 tests were run,
30 failed unexpectedly.
65 tests were skipped.
failed cases:
10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1025 1183 1184
1185 1186 1187 1188 1293 1294 2390 2394 2397

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-20 14:11:28 -04:00
Michal Orzel
7df9b0f1e1 xen: Remove 4.14 recipes and related patches
We shall only have recipes for the last two stable releases, thus
get rid of the 4.14 recipes and the corresponding patches.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-20 14:09:30 -04:00
Michal Orzel
265518e689 xen: Add recipes for stable Xen 4.16 release and update master
Add recipes for Xen 4.16 release as, according to the documentation
we shall have recipes for the latest stable major version of Xen
before the next Yocto release. Bump PREFERED_VERSION to 4.16 as well.

Take the opportunity to update SRCREV of xen recipes for master
and bump XEN_REL version to 4.17 as this is the current development
version.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-20 14:09:23 -04:00
Michal Orzel
aa4ebb5dad xen: Bump SRCREV of 4.15 recipes to 4.15.2
Bump SRCREV version of xen recipes to use the latest 4.15 release
which is 4.15.2.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-20 14:09:15 -04:00
Bruce Ashfield
51e404af98 xen-tools: remove unused systemd/sysvinit files
The commit [ xen: only package xencommon systemd components if systemd
is enabled] attempted to only package init.d scripts for non-systemd
systems (and vice-versa for unit files).

But the xen-tools builds installs the files uncondtionally, so we can
end up with unpackaged files in some configurations. We can test on
the init system and removed the unused versions of the init to avoid
both packging and runtime issues.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-19 20:11:39 -04:00
He Zhe
1f9c37e1a6 libvmi: Fix out of box build failure with xen disabled
vbd was added for xen based VMs since
bdee00fac9b4 ("Disk reading interface for Xen based VMs and example")
and should be built only when xen is enabled, otherwise there would not be
necessary xen headers and cause the following failure.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-13 23:16:49 -04:00
Adrian Freihofer
bed7142c26 k3s: do not use a go file as patch
On some build hosts, one of our downloaded depedencies matches
patch.bbclass' regex, and is then thought to be a patch. That leads
to errors as follows:

Compiling k3s failed with:
do_patch: Importing patch 'github.com.andreyvit.diff' with striplevel '1'

We add a noapply to the SRC_URI to ensure that it is not considered
a patch.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-11 10:27:14 -04:00
Bruce Ashfield
d4f84ae3cd libvirt: fix QA packaging issue when multlib is enabled
The uprev of libvirt introduced a new sysctl file:
60-qemu-postcopy-migration.conf

In a standard configuration, the FILES variable of
python-libvirt picks up the fiel, but in a multiconfig setup,
the definition of ${libdir} changes and the file is missed.

Since systcl always looks in /usr/lib, we can't rely only
on ${libdir}, so we explicitly add the new .conf file into
the packaging. This will allow new additions in the future
to be considered as to in which package they belong.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-11 10:16:46 -04:00
Bruce Ashfield
654f8d02a6 cni: fix protocol argument typo
The newly added flannel_plugin had a typo of protcol, so we add our
missing 'o' and fix the uri parameter.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-11 08:13:16 -04:00
Bruce Ashfield
589391db27 cni: add flannel plugin from separate repository
We have flannel users! It was noted that flannel is no longer part
of the main cni-plugins repo, but is instead hosted in a standalone
location.

We add the new repository, its SRCREV and drop it back where it
can be built and packaged in the same way as it previously was.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-08 13:36:28 -04:00
Ross Burton
98575878df virt-what: add new recipe
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-07 17:48:39 -04:00
Bruce Ashfield
e1aeb3beaf k3s: clarify uprev version (1.22.6) and PV
The shortlog of the previous uprev incorrectly stated that
1.23.x was the target. There are issues remaining with that
version, so the uprev was contained to 1.22.x

We also typically do NOT use the exact release tag, since
fixes are continually arriving post release, and with the
extensive go mod vendor process, it doesn't accurately
represent the version.

As such, we switch to: v1.22.6+k3s1+git${SRCREV_k3s}, for
finer grained version tracking.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-31 15:24:28 -04:00
Bruce Ashfield
700220557c containers: introduce podman-tui
Add the curses/terminal control application for podman.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-30 09:42:46 -04:00
Bruce Ashfield
f17c020e20 irqbalance: update to 1.8.0-tip
Bumping irqbalance to version v1.6.0-154-gb3adb5f, which comprises the following commits:

    0f594a6 Separate variable declaration from assignment
    9b004c6 Ensure that we get all of a unix message
    df7b543  Add '\0' to the end of strings to avoid heap buffer overflow
    f8bdd0e ui/ui.c: always use "%s"-style format for printf()-style functions
    efab272 Drop CapabilityBoundingSet from irqbalance service

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-29 10:06:20 -04:00
Bruce Ashfield
c77f64d100 kvmtool: update to -tip
Bumping kvmtool to latest, which comprises the following commits:

    faae833 Revert "kvm tools: Filter out CPU vendor string"
    1b76b6e Add --no-pvtime command line argument
    7d4671e aarch64: Add stolen time support
    ff69582 aarch64: Populate the vCPU struct before target->init()
    95f4796 arm: pci: Generate "msi-parent" property only with a MSI controller
    c334a68 arm: Use pr_debug() to print memory layout when loading a firmware image
    9b681b0 Remove initrd magic check
    2108c86 virtio/pci: Signal INTx interrupts as level instead of edge
    20b93be x86: Set the correct APIC ID
    d4d6f15 x86: Fix initialization of irq mptable
    cdd7d8c riscv: Generate PCI host DT node
    721da16 riscv: Handle SBI calls forwarded to user space
    7c9aac0 riscv: Generate FDT at runtime for Guest/VM
    762224e riscv: Add PLIC device emulation
    42bfe44 riscv: Implement Guest/VM VCPU arch functions
    867159a riscv: Implement Guest/VM arch functions
    2e99678 riscv: Initial skeletal support
    5968b5f update_headers: Sync-up ABI headers with Linux-5.16-rc1
    642f35b Makefile: Calculate the correct kvmtool version
    7a60af0 arm/pci: update interrupt-map only for legacy interrupts
    39181fc vfio/pci: Align MSIX Table and PBA size to guest maximum page size
    b20d6e3 vfio/pci: Print an error when offset is outside of the MSIX table or PBA
    f93acc0 vfio/pci: Rework MSIX table and PBA physical size allocation
    5f44d5d vfio/pci: Rename PBA offset in device descriptor to fd_offset
    34bfe5f pci: Fix pci_dev_* print macros
    3d3dca0 vfio/pci.c: Remove double include for assert.h
    e3b0ade arm/gicv2m: Set errno when gicv2_update_routing() fails
    dc66461 arm64: Be more permissive when parsing the kernel header
    5303f09 arm64: Use the default offset when the kernel image magic is not found
    5613ae2 Add --nodefaults command line argument
    a5253f7 builtin-run: Move kernel command line generation to a separate function
    39ab3a0 Use kvm->nr_disks instead of kvm->cfg.image_count
    cce9616 builtin-run: Abstract argument validation into a separate function
    638630c builtin-run: Do not attempt to find vmlinux if --firmware
    6cbec43 builtin-run: Warn when ignoring initrd because --firmware was specified
    6810e75 builtin-run: Treat specifying both --kernel and --firmware as an error
    2e7380d virtio/pci: Size the MSI-X bar according to the number of MSI-X
    bdb86d0 kvmtool: arm64: Configure VM with the minimal required IPA space
    066b5c0 kvmtool: arm64: Use the maximum supported IPA size when creating the VM
    4250819 kvmtool: Abstract KVM_VM_TYPE into a weak function
    25c1dc6 arm/arm64: vfio: Add PCI Express Capability Structure
    e69b766 arm/arm64: Add PCI Express 1.1 support
    6b74f68 arm/fdt.c: Don't generate the node if generator function is NULL
    070fb91 Move fdt_irq_fn typedef to fdt.h
    415f92c arm: Fail early if KVM_CAP_ARM_PMU_V3 is not supported

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-29 10:04:49 -04:00
Bruce Ashfield
cd8f8873a0 libvmi: update to 0.14-tip
Bumping libvmi to version v0.10-1073-g41600b6, which comprises the following commits:

    41600b6 Actually define __XS_EVENT_REASON_MAX (#1016)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-29 08:11:27 -04:00
Bruce Ashfield
dc4a37ed7a slirp: update to 4.6.1-latest
Bumping libslirp to version v4.6.1-55-g888ddad, which comprises the following commits:

    888ddad Add sanitizers CI runs
    55d498c socket: Handle ECONNABORTED from recv

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-29 08:05:48 -04:00
Bruce Ashfield
239dba39f8 ovs: update to v2.17.0
Along with patch refreshes, and a drop since it is now upstream ..

Bumping ovs to version v2.17.0-30-g2404d4536, which comprises the following commits:

    2404d4536 system-traffic.at: Fix flaky DNAT load balancing test.
    6b8adfdd8 dpif-netdev: Keep orig_in_port as a field of the flow.
    6098b7f25 tests: Fix incorrect usage of OVS_WAIT_UNTIL.
    cf9018d37 odp-util: Fix output for tc to be equal to kernel.
    992de2406 netdev-offload-tc: Fix IP and port ranges in flower returns.
    7e26796c0 netdev-offload-tc: Fix use of ICMP values instead of masks defines.
    e319e2706 netdev-offload-tc: Always include conntrack information to tc.
    51ef81ad7 netdev-offload-tc: Check for valid netdev ifindex in flow_put.
    974253dc2 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks.
    c43c159ae netdev-offload-tc: Add debug logs on tc rule verify failures.
    d34622a03 tc: Keep header rewrite actions order.
    5255713d1 faq: Update OVS/DPDK version table for OVS 2.15/2.16
    05cf36a62 system-dpdk: Fix mfex autovalidator tests.
    87540e3b9 ofp-prop: Silence the 'may be uninitialized' warning.
    812164ade tests: Ignore log about failing to set NETLINK_EXT_ACK.
    ae51ccc12 ovsdb-cluster.at: Avoid test failures due to different hashing.
    f33cde23c ofproto: Use xlate map for uuid lookups.
    6ac255496 ofproto: Add refcount to ofproto to fix ofproto use-after-free.
    db0cc8be3 ofproto-dpif: Trigger revalidation when ipfix config set.
    31b86e5c9 conntrack: Prefer dst port range during unique tuple search.
    b761b532c conntrack: Select correct sport range for well-known origin sport.
    78bd058c3 ipsec: StrongSwan report connection update failures to ovs logs.
    aa05596df ipsec: Libreswan report connection failures to ovs logs.
    427776cea system-tso: Skip encap tests when userspace TSO is enabled.
    66d16e288 tc: Fix stats byte count on fragmented packets.
    b63c41f31 compat: Add gen_stats include to define tc hw stats.
    c531b3828 ovsdb: raft: Fix inability to join the cluster after interrupted attempt.
    498cedc48 reconnect: Fix broken inactivity probe if there is no other reason to wake up.
    5dc1423d8 datapath-windows: Fix NXM_OF_IP_TOS issue
    91c0f0068 Prepare for 2.17.1.
    db7c86e5d Set release date for 2.17.0.
    6dd933478 Documentation: Update USDT documentation to include systemtap dependency.
    8b5136a89 ovsdb-idl: Fix use-after-free when destroying an IDL loop.
    a3182552c dpif-netdev: Use dp_netdev reference in offload threads.
    691295d5a dpif-netdev: Fix a race condition in deletion of offloaded flows.
    bebbf0d6e dpif-netdev: Move port flush after datapath reconfiguration.
    e03a14c89 dpif-netdev-dpcls: Make subtable reprobe thread-safe.
    036957015 ci: Fix typo in variable name.
    76da23462 dp-packet: Ensure packet base is always non-NULL.
    2cd30fd6b bfd: lldp: stp: Fix misaligned packet field access.
    88705f1ba ovsdb-idlc: Avoid accessing member within NULL idl index cursors.
    b006e8ebb stopwatch: Fix buffer underflow when computing percentiles.
    a6ba4b037 dpif-netdev: Fix misaligned access.
    6da79614a treewide: Don't pass NULL to library functions that expect non-NULL.
    bee8ec09d system-traffic.at: Avoid sporadic failures during conntrack IPv6 HTTP/FTP tests.
    3626f3ca6 system-traffic.at: Do not use ranges with broadcast address.
    2035b1b33 system-dpdk.at: Add warning log in mfex fuzzy test.
    095f87c24 ofproto: Fix ipfix not always sampling on egress.
    fbeef2794 tc: Fix incorrect TC rule for decap+encap datapath flow.
    54bca0430 dpif-netdev: fix vlan and ipv4 parsing in avx512
    aa713d9b4 ci: Install wheel before installing any other python packages.
    573230ec0 odp-util: Fix tunnel key attr for GTP-U.
    4638cb58f ovsdb-idl: Only process successful txn in ovsdb_idl_loop_run.
    87f67448b ofproto-dpif-upcall: Fix n_revalidators on upcall show.
    268402b47 acinclude: Detect avx512 vpopcntdq compiler support.
    1ff8fe347 Documentation: Fix userspace Tx steering section.
    44963a78e vswitchd.xml: Add missing tx-steering PMD option.
    17cedcb2d ovsdb-idl: ovsdb_idl_loop_destroy must also destroy the committing txn.
    06d484409 ofproto-dpif-xlate: Fix packet drops with decap action on MPLS Multicast.
    69155eb20 tests: Fix cosmetic errors in system-traffic.at.
    62eeea709 python: idl: Clear last_id on reconnect if condition changes in-flight.
    ecdb9ca81 ovsdb-cs: Clear last_id on reconnect if condition changes in-flight.
    f08013b5e python: idl: Resend requested but not acked conditions when reconnecting.
    15bb5a978 ofp-flow: Skip flow reply if it exceeds the maximum message size.
    4fdd6666a ovsdb: transaction: Keep one entry in the transaction history.
    553f566d9 ovsdb-cs: Fix ignoring of the last id from the initial monitor reply.
    167c2ff0e ofproto-dpif: Fix issue with non-reversible actions on a patch ports.
    b8dba6594 NEWS: Fix some typo.
    b1b77967f ovs-monitor-ipsec: Fix generated strongSwan ipsec.conf for IPv6.
    109d02455 system-dpdk: Fix MFEX logs check.
    6b1cfa209 datapath-windows: Pickup Ct tuple as CT lookup key in function OvsCtSetupLookupCtx
    280d8de05 Prepare for 2.17.0.
    f20abde5a netdev-dpdk: Remove rte-flow API access locks.
    b0b6b7b46 dpif-netdev: Use one or more offload threads.
    7daa50346 dpif-netdev: Replace port mutex by rwlock.
    d85b9230a dpif-netdev: Make megaflow and mark mappings thread objects.
    ec4ac6258 dpif-netdev: Use lockless queue to manage offloads.
    b3e029f7c netdev-offload-dpdk: Protect concurrent offload destroy/query.
    54dcf60e6 netdev-offload-dpdk: Lock rte_flow map access.
    7851e602c netdev-offload-dpdk: Use per-thread HW offload stats.
    5b0aa5577 dpif-netdev: Execute flush from offload thread.
    d68d2ed46 dpif-netdev: Introduce tagged union of offload requests.
    73ecf098d dpif-netdev: Use id-fpool for mark allocation.
    528a8ab62 dpif-netdev: Postpone flow offload item freeing.
    55dc4ef17 dpif-netdev: Quiesce offload thread periodically.
    62c2d8a67 netdev-offload: Add multi-thread API.
    2eac33c6c id-fpool: Module for fast ID generation.
    5396ba5b2 mpsc-queue: Module for lock-free message passing.
    5878b9252 ovs-atomic: Expose atomic exchange operation.
    83823ae32 dpif-netdev: Implement hardware offloads stats query.
    9ac3d951b mov-avg: Add a moving average helper structure.
    e4543c7b1 dpif-netdev: Rename offload thread structure.
    9ab104718 dpctl: Add function to read hardware offload statistics.
    0e6366c23 netdev-offload-dpdk: Implement hw-offload statistics read.
    adbd4301a netdev-offload-dpdk: Use per-netdev offload metadata.
    1088f4e7f netdev: Add flow API uninit function.
    aec1081c7 tests: Add ovs-barrier unit test.
    59b8f9f8f dpif-netdev: Rename flow offload thread.
    6207205e5 ovs-thread: Fix barrier use-after-free.
    1b9fd884f Documentation: Remove experimental tag for PMD ALB.
    09192a815 Documentation: Update PMD Auto Load Balance section.
    5cc052435 Documentation: Update PMD thread statistics.
    f0adea3fc Documentation: Minor spelling and grammar fixes.
    4da71121d Documentation: Fix Rx/Tx queue configuration section.
    85d3785e6 utilities: Add netlink flow operation USDT probes and upcall_cost script.
    51ec98635 utilities: Add upcall USDT probe and associated script.
    ff4c712d4 Documentation: Add USDT documentation and bpftrace example.
    512fab8f2 openvswitch: Define the OVS_STATIC_TRACE() macro.
    191013cae configure: Add --enable-usdt-probes option to enable USDT probes.
    844f14181 dpif-netdev.at: Add test for Tx packet steering.
    c18e707b2 dpif-netdev: Introduce hash-based Tx packet steering mode.
    31e67c998 dpif-netdev: Introduce Tx queue mode.
    e97112ce7 netdev-dummy: Introduce per rxq/txq statistics.
    eff740b14 ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.
    1917ace89 Encap & Decap actions for MPLS packet type.
    4a6a47346 netlink-socket: Log extack error messages in netlink transactions.
    eb1ab5357 netdev-linux: Use matchall classifier for ingress policing.
    3b489a3b1 dpif-netdev: Improve loading of packet data for undersized packets.
    8bc135d2d acinclude: Provide better error info when linking fails with DPDK.
    1140c87e2 netdev-dpdk: Expose per rxq/txq basic statistics.
    f260db1ef netdev-dpdk: Fix statistics when changing Rx/Tx queues count.
    b84386fa9 dpdk: Support running PMD threads on any core.
    356f36206 tests/oss-fuzz: Fix the arguments of parse_tcp_flags.
    ddca1eb3a odp-util: Stop action list parsing if already oversized.
    6e50c1651 dpif-netdev: Avoid hw_miss_packet_recover() for devices with no support.
    e7e9973b8 dpif-netdev: Forwarding optimization for flows with a simple match.
    46d44cf3b python: idl: Add monitor_cond_since support.
    0d1ffb775 checkpatch: Detect "trojan source" attack.
    428b11caa utilities: Add another GDB macro for ovs-vswitchd.
    2f2ae5b6b tests: Fix endianness in netlink policy test fixtures.
    0b6d2faac ci: Remove -Wno-cast-align from CI.
    d652fc6a5 checkpatch: Correct line count in error messages.
    28ef2535c dpif-netdev-extract: Change availability log level to DBG.
    38c53dd17 AUTHORS: Add Nobuhiro MIKI.
    9a834205a docs: afxdp: Remove duplicated lines.
    d446dcb7e system-dpdk: Refactor common logs matching.
    b366fa2f4 dpif-netdev: Call cpuid for x86 isa availability.
    11441385c bridge: Fix incorrect configuration of netdev's dpif type.
    ec2aa2ab4 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.
    b723b9320 tnl-neigh-cache: Do not refresh the entry while revalidating.
    02f95638a tnl-neigh-cache: Add tnl/neigh/aging command.
    f527aef14 tnl-neigh-cache: Read/write expires atomically.
    f0266292b dpif-netdev: Improve handling of IP/TCP in avx512 mfex.
    893693e80 AUTHORS: Add Nir Anteby.
    7617d0583 netdev-offload-dpdk: Add support for matching on gre fields.
    5f60741dc netdev-offload-dpdk: Support tnl_pop for gre tunnel.
    a32cb78b5 netdev-dpdk: Add flow_api support for netdev gre vports.
    827904146 netdev-offload-dpdk: Refactor get_vport_netdev().
    76527525e AUTHORS: Update email for Alin Serdean.
    38b42aa93 MAINTAINERS: Move Joe to emeritus status.
    269b927fd dpdk: Use --in-memory by default.
    b5d2dbdbb system-dpdk: Fix race in vhost-user tests.
    9827312fa docs: Re-work the documentation around CPU ISA optimizations.
    ed9778e94 dpif-netdev: Fix the autovalidator output for the miniflow extract.
    339f97044 ovsdb: storage: Randomize should_snapshot checks when the minimum time passed.
    bf07cc9cd raft: Only allow followers to snapshot.
    20a4f546f dpif-netdev: Use PMD context to get the port for HW miss recovery.
    17346b389 dpdk: Update to use DPDK v21.11.
    72745ab0c compat: handle NF_REPEAT error on nf_conntrack_in.
    18db7ec5e system-dpdk: Improve vhost-user ping tests reliability.
    4f19a78a6 netdev-vport: Fix userspace tunnel ioctl(SIOCGIFINDEX) info logs.
    4a7b58163 alb.at: Increase time/warp.
    09c4449b2 alb.at: Check for log from correct line number.
    1f5749c79 flow: Consider dataofs when parsing TCP packets.
    d4bed9596 tests/flowgen: Fix packet data endianness.
    e40982468 dpif-netlink: Improve feature negotiation for older kernels.
    4490792dd ofproto-dpif: Increase dp_hash default max buckets.
    91e1ff5dd ovsdb-idl: Don't reparse orphaned rows.
    149169836 ofproto: Fix resource usage explosion due to removal of large number of flows.
    a05883b89 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.
    79953a57e stream-ssl: Avoid unnecessary memory copies on send.
    dec429168 ovsdb-data: Consolidate ovsdb atom and json strings.
    9d29990c2 json: Inline clone and destroy functions.
    19aa70168 tests/flowgen: Fix length field of 802.2 data link header.
    024ba5257 AUTHORS: Add Mike Pattrick.
    958ca7ba3 ovs-tcpdump: Improve performance with dummy interface.
    c60eec064 ovs-lib: Backup and remove existing DB when joining cluster.
    c041042c1 python: idl: Avoid pre-allocating column defaults.
    2fe20d0be docs/dpdk: Fix install doc.
    29f8dc629 AUTHORS: Add Salvatore Daniele.
    f88ee78e0 match: Do not print "igmp" match keyword.
    59622fd1b ovs-save: Save igmp flows in ofp_parse syntax.
    3b2982c42 faq: Update OVS/DPDK version table for OVS 2.13/2.14.
    72fbb90af ofproto-dpif-xlate: Add a trace log for tnl_port_build_header() error.
    7b8aeadd6 ovsdb-idl: Re-parse backrefs of inserted rows only once.
    fb7a75e52 ofproto-dpif-xlate: Terminate native tunnels only on ports with IP addresses.
    9fe0ce4f7 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.
    a83a40609 dpif-netdev: Sync PMD ALB state with user commands.
    513ed6570 system-traffic.at: Fix typo in conntrack zones tests.
    23083672b dpif-netdev: Reset RxQ cycles history on PMD reload.
    bd0fec42a ofproto/bond: Improve admissibility debug readability.
    71eb2ec44 datapath-windows: Reset flow key after Ipv4 fragments are reassembled
    04b017e3a python: db: Avoid allocation of an attr dict/row+column.
    695530d8f github: Remove workaround fixing up /etc/hosts.
    113f925aa rhel: Use /run instead of /var/run.
    9b20df73a dpctl: dpif: Allow viewing and configuring dp cache sizes.
    efd55eb34 dpctl: dpif: Add kernel datapath cache hit output.
    317b1bfd7 ovsdb: Don't let transaction history grow larger than the database.
    1bdda7b6d ovsdb-idl: Use functions to apply diff in place.
    4dbff9f0a ovsdb: transaction: Incremental reassessment of weak refs.
    066741d9c ovsdb-idl: Add memory report function.
    c5d384f77 checkpatch: Check if some tags are wrongly written.
    9f2258360 AUTHORS: Add Somnath Chatterjee.
    42c348184 dpif: Fix function pointer check for bond_add.
    68543dd52 python: Replace pyOpenSSL with ssl.
    3f550fa53 python: socket-util: Split inet_open_active function and use connect_ex.
    56c3de3c6 datapath-windows:Reset PseudoChecksum value only for TX direction offload case
    4bd375581 ci: Make linux-prepare trust system installs.
    fa2bc2bb7 github: Stick to python 3.9.
    a621ac5ea datapath-windows: add layers when adding the deferred actions
    c1fdb8347 ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields.
    02aebad3f dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments.
    01bca6dab tunnel-push-pop.at: Mask source port in tunnel header.
    3486d81d1 AUTHORS: Add Remi Jouannet.
    f9f391982 ovs-ctl: Add missing description for --ovs-vswitchd-options and --ovsdb-server-options to usage().
    755cf31a3 dpdk-stub: Change the ERR log to DBG.
    d41cac475 docs/userspace-tunneling: Fix IP addresses for host2.
    32899c824 acinclude: Use standardized DPDK component defines.
    b841e3cd4 dpif-netlink: Fix feature negotiation for older kernels.
    b12242e0e packets: Correct VXLAN_GPE_FLAGS_P macro name.
    bd056cb94 dpif-netdev: Fix pmd thread comments to include SMC.
    4a6217fab datapath: handle DNAT tuple collision.
    cc0a87b11 pmd.at: Add test-cases for DPCLS and DPIF commands.
    34fbdc410 python: idl: Avoid sending transactions when the DB is not synced up.
    803ed12e3 ipf: release unhandled packets from the batch
    13d05b8e5 sflow functions: fix unused parameter warnings for sflow functions
    7796253db datapath-windows: Add file digest algorithm for signtool
    5b7d54efc MAINTAINERS: Transition myself to emeritus status.
    a461bc62e datapath-windows:adjust Offset when processing packet in POP_VLAN action
    4feb05140 fix typo in dpdk doc
    429b114c5 ovsdb-data: Deduplicate string atoms.
    32b51326e ovsdb-data: Add function to apply diff in-place.
    bb12b6317 ovsdb-data: Optimize subtraction of sets.
    51946d222 ovsdb-data: Optimize union of sets.
    bfc6e9735 dpif-netdev: Remove OVS_UNUSED flag in functions for ct_zone limits.
    b2712d026 ovsdb: transaction: Use diffs for strong reference counting.
    9e7081b14 cirrus: Reduce memory requirements for FreeBSD VMs.
    849a40ccf netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock().
    81de3a81a bond: Check for NULL member in bond_member_set_enable().
    3168f328c pcap-file: Fix memory leak in ovs_pcap_open().
    22c95f9fe odp-util: Fix a null pointer dereference in odp_flow_format().
    a566c02a2 odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__().
    5e86db383 netdev-dpdk: Fix RSS configuration for virtio.
    d0020c5e8 docs: Recommend the use of dpdkvhostuserclient ports.
    16e5b51f2 docs: afxdp: Fix wrapping in QEMU CMDs.
    0eeca50f0 Documentation: Cleanup PMD information.
    ee74a8b75 AUTHORS: Add Sergey Madaminov.
    aae08a577 include/windows/unistd.h: Fixed type cast warning on Windows.
    e05e1e3c0 netdev-offload-dpdk: Don't ignore frags as they are handled.
    1318929f9 netdev-offload-dpdk: Support IPv6 fragmentation types.
    c1a5d0e2b netdev-offload-dpdk: Support IPv4 fragmentation types.
    26b18f189 netdev-offload-dpdk: Add last attribute to patterns.
    a2fa8b289 conntrack: Remove the nat_action_info from the conn.
    fdef31fb7 hash: Fix compilation error on Fedora 34 with GCC 11 and -O0.
    ebcbb534e ipf: Fix only nat the first fragment in the reass process.
    00d3d4a7d checkpatch: Avoid catastrophic backtracking.
    372b790f1 AUTHORS: Add Tony van der Peet.
    7e6b41ac8 dpif-netdev: Fix crash when PACKET_OUT is metered.
    5c1cc74da rhel: Fix dual kernel rpm install for RHEL 8.4
    944950dcc AUTHORS: Update Simon Horman
    43e66fc27 ovsdb: monitor: Store serialized json in a json cache.
    0de882954 raft: Don't keep full json objects in memory if no longer needed.
    b0bca6f27 json: Add support for partially serialized json objects.
    c2fb5bdae ovs-actions: Convert man page from xml to rST.
    748010ff3 json: Optimize string serialization.
    7847bf89e tests: Skip netlink policy test on non-Linux platforms.
    7502849e9 ovsdb-idl: Add APIs to query if a table and a column is present.
    bfee9f6c0 netlink: Add support for parsing link layer address.
    9ab5075bf Set release date for 2.16.0.
    3fc34862b AUTHORS: Add Vlad Buslov.
    6bb3f363d tc: Set action flags for tunnel_key release.
    d08c086e5 netlink-socket: Replace error with txn->error when logging nacked transactions.
    d9a5fb78d netdev-offload-dpdk: Initialize s_tnl dynamic string.
    0363891d1 dynamic-string: Fix a crash in ds_clone().
    0b3a5d7ad dpif-netdev: fix memory leak in dpif and mfex commands
    01cbe1ed4 dpif-netdev: fix memory leak in dpcls subtable set command
    d2ad305a6 dpif-netdev: Fix dead code in mfex command
    8a5f055a0 docs/dpdk/bridge: Fix dpif-netdev/miniflow-parser-set formatting
    96e513f55 dpif-netdev-unixctl.man: Document miniflow-parser-* CMDs
    3004ebf20 dpif-netdev-unixctl.man: Document subtable-lookup-* CMDs
    c15c3df3a dpcls: fix build on compilers without AVX512-VPOPCNT
    ccb6cc20f AUTHORS.rst: Add Lin Huang.
    765c8a774 AUTHORS.rst: Add Gaetan Rivet and Wentao Jia.
    2480d09e9 ovsdb: transaction-forward: Fix initialization of the 'sent' hmap node.
    a3bd383e9 acinclude: Don't set AVX512-related configuration via CFLAGS.
    e21e9dcec dpif-netdev: Log flow modification in debug level.
    6f69e0e30 dpif-netdev: Fix offloads of modified flows.
    0d25621e4 dpif-netdev: Fix flow modification after failure.
    8917010b0 dpif-netdev: Do not flush PMD offloads on reload.
    cd36a34f3 dpif-netdev: Fix non-atomic read of smc_enable_db.
    de15afa50 dpdk: Stop configuring socket-limit with the value of socket-mem.
    a8621f49d dpdk: Remove default values for socket-mem and limit.
    1f7f55760 netdev-offload-dpdk: Fix vxlan vni cast-align warnings.
    e8cccd3a3 netdev-offload-dpdk: Fix IPv6 rewrite cast-align warning.
    b8b31d841 daemon-unix: Fix leak of a fork error message.
    daf627f45 ovsdb-cs: Perform forced reconnects without a backoff.
    69b2bdfd3 system-dpdk.at: Fix module not found error for pyhton < 3.6.
    43b7d960a netdev-dummy: Silence the 'may be uninitialized' warning.
    f05d6d623 ofproto-dpif-xlate: Fix continuations with OF instructions in OF1.1+.
    8e808e7f1 datapath-windows:Correct checksum for DNAT action
    954798752 Documentation: Remove duplicate words.
    4703bc67b Prepare for post-2.16.0 (2.16.90).
    45bd6d93f Prepare for 2.16.0.
    298d4151f bond: Fix broken rebalancing after link state changes.
    b1e517bd2 dpif-netlink: Introduce per-cpu upcall dispatch.
    485e3a13a dpif-netlink: Fix report_loss() message.
    1325debb4 ofproto: Change type of n_handlers and n_revalidators.
    3222a89d9 dpif-netdev: Report overhead busy cycles per pmd.
    30bfba024 tests: Add new test for cross-numa pmd rxq assignments.
    6193e0326 dpif-netdev: Allow pin rxq and non-isolate PMD.
    3dd050909 dpif-netdev: Add group rxq scheduling assignment type.
    4fb54652e dpif-netdev: Assign PMD for failed pinned rxqs.
    0efefc4f9 dpif-netdev: Sort PMD list by core id for rxq scheduling.
    58fed7e8d dpif-netdev: Make PMD auto load balance use common rxq scheduling.
    f577c2d04 dpif-netdev: Rework rxq scheduling code.
    ccc24fc88 ofproto-dpif: APIs and CLI option to add/delete static fdb entry.
    ae2424696 dpdk: Logs to announce removal of defaults for socket-mem and limit.
    15329b728 flow: Count and dump invalid IP packets.
    6545977ce ovs-rcu: Remove unused perthread mutex.
    cb4bff6ff Don't mangle shebangs when building DKMS RPM package.
    1f38f9dcf AUTHORS: Add Adrian Guzowski.
    2abd8148c Add ability to override default Release suffix in RPM packages.
    d28c5ca57 python: Add cooperative_yield() API method to Idl.
    487253d5b python: Update bundled sortedcontainers to 2.4.0.
    6c41bcb13 ci: Do not dump logs on error for GitHub Actions.
    7ab851e1b dpif-netdev: Do not execute packet recovery without experimental support.
    a72c1dfbd dpif/dpcls: limit count subtable search info logs
    26fbd1a1b AUTHORS: Add Cian Ferriter.
    83aae83e6 AUTHORS: Add Amber Kumar.
    aa85a2509 dpif-netdev/mfex: Add more AVX512 traffic profiles
    250ceddcc dpif-netdev/mfex: Add AVX512 based optimized miniflow extract
    32f93dc5e dpdk: Add additional CPU ISA detection strings
    dc39608d2 dpif/stats: Add miniflow extract opt hits counter
    50be6715c test/sytem-dpdk: Add unit test for mfex autovalidator
    a395b132b dpif-netdev: Add packet count and core id paramters for study
    5324b54e6 dpif-netdev: Add configure to enable autovalidator at build time.
    5c5c98cec docs/dpdk/bridge: Add miniflow extract section.
    72dd22a0d dpif-netdev: Add study function to select the best mfex function
    dd3f5d86d dpif-netdev: Add auto validation function for miniflow extract
    3d8f47bc0 dpif-netdev: Add command line and function pointer for miniflow extract
    3e82604b7 docs: Add documentation for ovsdb relay mode.
    e26bf9726 ovsdb: Make clients aware of relay service model.
    edcf44172 ovsdb: relay: Reflect connection status in _Server database.
    7964ffe7d ovsdb: relay: Add support for transaction forwarding.
    026c77c58 ovsdb: New ovsdb 'relay' service model.
    b4cef64c8 ovsdb: row: Add support for xor-based row updates.
    85dbbe275 ovsdb: table: Expose functions to execute operations on ovsdb tables.
    e93fc5db9 ovsdb: storage: Allow setting the name for the unbacked storage.
    4d9605379 jsonrpc-server: Wake up jsonrpc session if there are completed triggers.
    00dda78ed ovsdb-cs: Avoid unnecessary re-connections when updating remotes.
    73259ea70 ovsdb-server: Fix memleak when failing to read storage.
    066a84f89 latch-unix: Decrease the stack usage in latch
    d2e97030e netdev-linux: fix compile error in nl_msg_put_act_police
    d53ea18be AUTHORS: Add Andrew Rybchenko.
    909b40f67 netdev-offload-dpdk: Fix port ID logging on destroy.
    b889d5dcc conntrack: Init hash basis first at creation.
    b0d289bb5 netdev-linux: Ignore TSO packets when TSO is not enabled for userspace.
    464b5b13e netdev-offload-tc: Verify the flower rule installed.
    1e3148913 dpcls-avx512: Enable avx512 vector popcount instruction.
    60c9e1a2f dpdk: Cache result of CPU ISA checks.
    2100f0e51 dpif-netdev/dpcls: Specialize more subtable signatures.
    47a2a8f41 dpif-netdev/dpcls-avx512: Enable 16 block processing.
    d76a719a7 dpif-netdev: Add a partial HWOL PMD statistic.
    3f86fdf5c dpif-netdev: Add command to get dpif implementations.
    abb807e27 dpif-netdev: Add command to switch dpif implementation.
    9ac84a1a3 dpif-avx512: Add ISA implementation of dpif.
    e540499e4 dpif-netdev: Add function pointer for netdev input.
    5930dfeeb dpif-netdev: Refactor to multiple header files.
    c36c8e3f5 ovsdb-tool: Fix memory leak in "check-cluster" command.
    ba16a36f3 dpif-netdev: Add all-zero SNAT to the advertised features of ct.
    61e48c2d1 conntrack: Handle SNAT with all-zero IP address.
    fa0e2d26d util: Add token concatenation macro with argument expansion.
    1e19f9aa2 conntrack: Handle already natted packets.
    aa4359cb9 dpif-netdev: Read recirc depth and flow api enabled once per batch.
    e6ad4d8d9 conntrack: Document all-zero IP SNAT behavior and add a test case.
    355fef6f2 ofproto-dpif-xlate: Avoid successive ct_clear datapath actions.
    347362d0c AUTHORS: Add Bodo Petermann and David Wilder.
    b7809111a odp-util: Stop key parsing if already oversized.
    3da3cc1a0 ovs-numa: Support non-contiguous numa nodes and offline CPU cores.
    154983c59 python: Fix Idl.run change_seqno update.
    b57b062f5 ofp-actions: Report an error if there are too many actions to parse.
    b30bfb6b8 ovsdb-server.7.rst Fix response result of monitor_cond_change
    0c0995238 stream-ssl: Remove unsafe 1024 bit dh params
    4e948b86c bridge: Use correct (legacy) role names in database.
    828d9cb8d ovs: fix wrong quote
    00c1bce13 docs: fix wrong quote
    780b2bde8 bridge: fix type mismatch
    911adb93e ovs-save: Use right OpenFlow version for "ovs-ofctl dump-tlv-map".
    8ab198092 NEWS: Add note about PPS support for ingress policing
    10c9dfeb5 bridge: Only an inactivity_probe of 0 should turn off inactivity probes.
    8d7c24083 fail-open: Only fail open if we've been disconnected for at least 1 s.
    f686957c9 add test cases for ingress_policing_kpkts parameters
    c2567e533 add port-based ingress policing based packet-per-second rate-limiting
    b6c5f30cf checkpatch: Ignore macro definitions of FOR_EACH.
    772a842fb dpif-netdev: Apply subtable-lookup-prio-set on any datapath.
    07a5fa610 AUTHORS: Add Paolo Valerio.
    331975506 ovs-actions.xml: Add missing bracket.
    63c01b895 netdev-offload-tc: Use nl_msg_put_flag for OVS_TUNNEL_KEY_ATTR_CSUM.
    2c597c890 conntrack: add coverage counters for L3 bad checksum.
    76700f374 conntrack: Increment coverage counter for all bad checksum cases.
    e5b5008ac ovs-lib: pass optional --election-timer arg to ovsdb-tool
    e098c2f96 netdev-dpdk-offload: Add vxlan pattern matching function.
    507d20e77 netdev-offload-dpdk: Support vports flows offload.
    b5e6f6f6b dpif-netdev: Provide orig_in_port in metadata for tunneled packets.
    be56e063d netdev-offload-dpdk: Support tunnel pop action.
    20b176044 netdev-offload-dpdk: Change log rate limits.
    a1ec42803 netdev-offload: Disallow offloading to unrelated tunneling vports.
    6a855d3e7 netdev-offload: Allow offloading to netdev without ifindex.
    bc341440d dpif-netdev: Add HW miss packet state recover logic.
    aca2f8a8a netdev-offload-dpdk: Implement HW miss packet recover for vport.
    c5b56f0eb netdev-dpdk: Add flow_api support for netdev vxlan vports.
    1b27484f2 netdev-offload: Introduce an API to traverse ports.
    6f50f28b9 netdev-dpdk: Introduce DPDK tunnel APIs.
    f36e7438f netdev-offload: Add HW miss packet state recover API.
    f0e4a7338 tests: Add PMD auto load balance unit tests.
    833f1b843 pmd.at: Get next line number of log.
    f3ad560d5 dpif-netdev: Expand the meter capacity.
    bd9052455 Remove Python 2 leftovers.
    ad256c314 dpdk: Add debug appctl to get malloc statistics.
    c16b9ac74 datapath-windows: Specify external include paths
    e81ed9421 Fix redundant datapath set ethernet action with NSH Decap.
    c2999459d tests: Fixed L3 over patch port tests.
    cca40141a netlink: removed incorrect optimization
    661fd5edb AUTHORS: Add Wang Liang.
    640d4db78 ipf: Fix a use-after-free error, and remove the 'do_not_steal' flag.
    2afe31169 odp-util: Return an error on actions overflow while parsing from string.
    5fe3ef1a0 tests: Fix spelling error in test name.
    50b419d0a raft: print local server ID when opening RAFT database
    c5a58ec15 python: idl: Allow retry even when using a single remote.
    04f8881f5 ovsdb-idl: Fix the database update signaling if it has never been connected.
    91cb55bc8 system-traffic.at:add missing comma
    9f3815ed6 AUTHORS: Add Rosemarie O'Riorden.
    6426417c1 ipfix-gen-entities: Add missing argument in function call.
    210c4cba9 docs: Add a topic about record/replay with ovsdb-server.
    4275b5b7f ovsdb-client: Integrate record/replay functionality.
    0be15ad76 ovsdb-server.at: Add unit test for record/replay.
    964da9a8b jsonrpc: Disable inactivity probes if replay engine is active.
    30ccf2c51 ovsdb-server: Don't update manager status if replay engine is active.
    182a0b8ad ovsdb-server: Integrate stream replay engine.
    07a07d06a uuid: Allow record/replay of generated UUIDs.
    fae1ae043 stream: Add record/replay functionality.
    610ac1e82 ovs-replay: New library to create and manage replay files.
    a4b04276a ofproto: Fix potential NULL dereference in ofproto_ct_*_zone_timeout_policy().
    dd0f59783 ofproto: Fix potential NULL dereference in ofproto_get_datapath_cap().
    f1951d41f ovs-save: Fix awk command to return highest ofp version.
    3012710ec tests: Fix PKIDIR checks in AT_SKIP.
    5da031d6d tests: Drop support for glibc before version 2.11.
    fb1e7863e ovsdb-tool: add --election-timer=ms option to 'create-cluster'
    13c0eaa7b dpif-netlink: Fix send of uninitialized memory in ct limit requests.
    328d20e0f ofproto-dpif: Fix use of uninitialized attributes of timeout policy.
    577b9a816 netdev-linux: Fix use of uninitialized LAG master name.
    0b3ff31d3 ofp_actions: Fix set_mpls_tc formatting.
    7731d2614 dpif-netdev: Remove meter rate from the bucket size calculation.
    76b720ed1 ovs-actions: Document normal pipeline.
    60638d61a AUTHORS: Add Wang Yibo.
    f173527ec ovs-ofctl: Fix coredump when using "add-groups" command.
    3c2d6274b raft: Transfer leadership before creating snapshots.
    b5bb044fb ovsdb-cs: Consider all tables when computing expected cond seqno.
    7100c220e mac-learning: Remove obsolete comments about tags.
    b45958bf7 dpdk: Use DPDK 20.11.1 release.
    484e9a4dd github: Fix up malformed /etc/hosts.
    843cd4304 doc: automake: Add support for sphinx 4.0.
    b03daccfd cirrus: Look up existing versions of python dependencies.
    721488d4a classifier: Make find_match_wc() prototype and definition match.
    b96d2756f tnl-neigh-cache: Include expected array sizes in prototypes.
    f09182a3b ofp-group: Use big-enough buffer in ofputil_format_group().
    09fe18af2 xml2nroff: Fix formatting of action headers in ovs-actions(7) manpage.
    a019868a6 ofproto/ofproto-dpif-sflow: Check sflow agent in case of race
    5dce24d04 ipsec: Fix race in system tests.
    fd1114e96 AUTHORS: Add Michal Kazior.
    d90b4f292 rtnetlink: ignore IFLA_WIRELESS events.
    f9d303903 dpif: Fix use of uninitialized execute hash.
    4a6be85c8 odp-util: Fix use of uninitialized erspan metadata.
    3311ca0d4 AUTHORS: Add Ariel Levkovich.
    ea71a9d44 netdev-offload-tc: Add support for ct_state flag rel.
    0c147fb4e dpif-netlink: Fix using uninitialized info.tc_modify_flow_deleted in out label.
    44ea24427 Add test cases for ingress_policing parameters
    67e0e0bc1 netdev-linux: correct unit of burst parameter
    d2d051310 AUTHORS: Add Aidan Shribman.
    23f9ec9eb make: don't prompt during build
    332b8a3e4 util: Add allocation wrappers that don't increment coverage counters.
    4cb38cd22 ovs-lldp: Get rid of pointless null pointer check.
    f8be30acf ipsec: Update ordering of imports.
    8fc62df8b ipsec: Introduce IPsec system tests for Libreswan.
    d6afbc00d ipsec: Allow custom file locations.
    4ce8bb159 system-common-macros: clean up veth device on test failure.
    58b4146e0 ipsec: Fix IPv6 default route support for Libreswan.
    ac85cdb38 ovsdb-idl: Mark arc sources as updated when destination is deleted.
    95689f166 ovsdb-idl: Preserve references for deleted rows.
    4c0d093b1 ovsdb-idl.at: Make test outputs more predictable.
    31629b538 ovs-ofctl: Fix segfault due to bad meter n_bands.
    b4a9c9cd8 netlink: make Netlink socket receive buffer 4x larger
    50b0b4d86 db-ctl-base: Warn if "destroy" command lacks --all or record argument.
    9801d7c4b github: Fix handling of python packages.
    c3690ccbc dpif-netdev: Refactor and fix the buckets calculation.
    759aaa851 dpif-netdev: Fix the meter buckets overflow.
    af0ce3866 AUTHORS: Add Shahar Klein.
    925a09477 debian: Add configure option to debian/rules
    2eb7e22a4 rhel: Do not update kmod RPM newer major revision kernels.
    56e60eca7 rhel: ovs-kmod-manage.sh: Disable unneeded warning.
    ec68a877d dpif-netdev: Allow PMD auto load balance with cross-numa.
    edcfd7176 netdev-offload-tc: Add support for ct_state flags inv and rpl
    1e4aa061a netdev-offload-tc: Probe for support for any of the ct_state flags
    0a8bd432a compat: Add ct_state flags definitions
    64b8c1d9a python: Send notifications after the transaction ends.
    cdaa7e0fd dpif-netdev: Fix crash when add dp flow without in_port field.
    2ad201659 ovs-ctl: Allow recording hostname separately.
    f013e6f2d Documentation: Fix DPDK qos example.
    39b937f06 raft: Add 'stop-raft-rpc' failure test command.
    4c1d9ef14 raft: Report disconnected in cluster/status if candidate retries election.
    14b2b0aad raft: Reintroduce jsonrpc inactivity probes.
    ac09cbfcb ovsdb-cs: Fix use-after-free for the request id.
    47e73f7f0 netdev-offload-tc: Flush rules on all chains before attach ingress block
    436ce00da connmgr: Check nullptr inside ofmonitor_report().
    8f09b2688 AUTHORS: Add Alexey Roytman.
    e775bf32e ovsdb-client: Fix needs-conversion when SERVER is explicitly specified.
    4cee0150a windows, tests: Modify service test.
    e7df370cf netdev-linux: Fix indentation.
    97918ed19 AUTHORS: Add Balazs Nemeth.
    647a71988 docs: Add instruction to set local_ip to ipsec tutorial.
    163b134d0 ofproto-dpif-upcall: Fix ukey leak on udpif destroy.
    014496e73 ci: Use parallel build for distcheck.
    5740843c4 github: Run clang test with AddressSanitizer enabled.
    77cccc74d ofp-actions: Fix use-after-free while decoding RAW_ENCAP.
    5704a7f35 Set release date for 2.15.0.
    4b674829f dpif-netdev: auto load balance log state on user request.
    81661d768 AUTHORS: Add Hariprasad Govindharajan.
    8d0416153 faq: Update OVS/DPDK version table for OVS 2.15.
    1560b4667 docs: Update for auto load balance threshold parameters.
    caa41a871 cirrus: Use FreeBSD 12.2.
    79349cbab flow: Support extra padding length.
    e4a89a7cc rhel: Update build required dpdk.
    9acbdd65c rhel: Add option to enable AF_XDP on rpm package.
    498cf3eae netdev-offload-tc: Reject rules with unsupported ct_state flags.
    255fd6ad2 dist-docs: Include manpages generated from rST.
    da33a6875 db-ctl-base: Fix XML syntax error.
    9513c0233 db-ctl-base: Add {in} and {not-in} set relational operators.
    0f252daa9 tc: Fix mpls bottom of stack bit mask reporting.
    3eec7fb07 pcap-file: Fix calculation of TCP payload length in tcp_reader_run().
    c3da0ae65 ofp-table: Improve log message in ofputil_decode_table_features().
    83f5e6fda AUTHORS: Add Volkan Atlı.
    d8df84998 rhel: Update '--with-dpdk' argument for DPDK 20.11.
    59611d6fe ovs-lib: Remove second parameter for stop_daemon.
    9cf39b3e7 Add Tao YunXiang <taoyunxiang@cmss.chinamobile.com>.
    2e0dace0e doc: Add 'faq' about datapath-id
    c17f32a11 netdev-dpdk: Fix incorrect shinfo initialization.
    75e1e6fd2 lib/tc: add ICMP type and code match offload
    d5c429a30 github: Don't fail the job if 'apt update' failed.
    492bbb54c vswitchd.xml: Fix supported IPsec tunnels.
    748483d3f netdev-afxdp: Updated documentation.
    d27494647 acinclude: Remove default library for DPDK.
    3f19b124e ovsdb-doc: Add build dependency on dirs.py.
    9049a11f0 system-dpdk: Fix 4th and 5th testcases of the system-dpdk testsuite.
    25eb72a26 ovs-ctl: Prepend OVS binary directories to PATH.
    c2e501c16 AUTHORS: Add Mao YingMing.
    82440ad72 dpctl: Fix dpctl process command parameter error.
    8e69349f2 conntrack: Fix the icmp conntrack new state.
    1c337c43a ovsdb-idl: Break into two layers.
    a5c067a8b ovsdb-cs: New module that factors out code from ovsdb-idl.
    81f06e2b8 test-ovsdb: Log steps in idl test.
    e7eb904d2 odp-util: Fix abort while formatting nsh actions.
    50e5523b9 Prepare for post-2.15.0 (2.15.90).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-28 13:16:23 -04:00
Bruce Ashfield
ebd4e07b77 k8s: update to 1.23.6
Bumping kubernetes to version v1.23.6-rc.0-16-gfbcfa330181, which comprises the following commits:

    1e8f6d51484 Copy request in timeout handler
    edd7a386c61 kube-up: use registry.k8s.io for containerd-related jobs
    3194c87ba25 e2e: Wait only for the service account
    a62ee8e5c3b e2e: Wait for kube-root-ca.crt to be created
    651b1fa1cce Include pod UID in secret/configmap cache key
    33d089b173c Move kubelet secret and configmap manager calls to sync_Pod functions
    7f02733e4d8 test: Verify that nodes do not transition to Failed while ready
    77865d3db93 test: Add E2E for job completions with cpu reservation
    b51d11be7a4 test: Add E2E for init container pod deletion
    290cdbf8792 kubelet: Delay writing a terminal phase until the pod is terminated
    914475e2e9f Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
    b3b64745789 Release commit for Kubernetes v1.23.6-rc.0
    c285e781331 Release commit for Kubernetes v1.23.5
    01c2f1c6420 Remove apf_fd from httplog
    c52cd9c5920 Update Go to 1.17.8
    1a897af197a cluster/gce: update konnectivity image tags to v0.0.30
    d741174d7e1 bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
    0b8199041d1 fix dryrun when ca file exists
    903f164b679 fix regression introduced by PR 100320
    56bfc202e45 Add unit tests
    a5faf0b5ce2 Fix nodes volumesAttached status not updated
    4c85abf90bb Fix default config flags
    1570a75766b test/e2e/framework: include the new control plane taint
    60cd43c44e0 kubelet: Clean up a static pod that has been terminated before starting
    33863be9478 Add an e2e test for updating a static pod while it restarts
    621894de9d6 cronjob_controllerv2: do not filter jobs to be reconciled by labels
    c9f904304d9 kube-proxy: fix duplicate port opening
    f783e573f11 increase Azure ACR credential provider timeout
    ba2cd0ca3db Updating EndpointSlice strategy to retain node name in topology until field is set
    4e69dd88613 fix: do not return early in the node informer when there is no change of the topology label.
    68ea240512a /test/e2e_kubeadm: adjust label checks for 1.23
    2efffd62367 Ignore container notfound error while getPodstatuses
    9f5e25033b6 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
    d4b2d8cf961 Release commit for Kubernetes v1.23.5-rc.0
    e6c093d87ea Release commit for Kubernetes v1.23.4
    949798fe712 Add PDB selector patch integration test
    47fc5aea4a2 Revert v1beta1 PodDisruptionBudget select patchStrategy
    ef293a9ee95 test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
    799ffd58065 kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
    c465ceccb32 Update Go to 1.17.7
    f0eac451011 Use serializable struct for x-kubernetes-validations in openapi
    02d1a291c8b Make JSON schema round tripping test more strict
    30eff360132 ignore CRI PodSandboxNetworkStatus for host network pods
    34a8474e600 set secondary address on host-network pods
    14c399ec5e3 Deeply copy JSONSchemaProps.XValidations.
    9fe0c40c8e5 wrap error from RunCordonOrUncordon
    0d487176d3a Ensure the execHostnameTest() compares hostnames
    733c0ebc7c3 Revert "Fix comparison between FQDN and hostname"
    ebfa08cd39b service REST: Call Decorator(old) on update path
    92d09f90c01 add namespace in azurefile volumeid
    5830d1474ff fix: azurefile volumeid conflict in csi migration
    bce4e5ba5b1 Mark device as uncertain if unmount device succeeds
    4b868d09c98 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
    72506a8439c Release commit for Kubernetes v1.23.4-rc.0
    816c97ab8cf Release commit for Kubernetes v1.23.3
    f2c6108f462 kubelet: fix podstatus not containing pod full name
    398effdfe0d Fix bug with node restriction blocking pvc.status.resizestatus change
    6d08a56228a Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
    996d8fca977 Set max results if its not set
    9c31df589b7 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
    918dd8343f0 Release commit for Kubernetes v1.23.3-rc.0
    9d142434e3a Release commit for Kubernetes v1.23.2
    4935e0a527e Update k/utils to v0.0.0-20211116205334-6203023598ed
    38e9dce15f4 [go] update to Go 1.17.6
    28ad5463fda fix: remove outdated ipv4 route when the corresponding node is deleted
    dfea07a3b04 fix: delete non existing disk issue
    65b309c76d8 Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
    677eae51666 fix containers order after applying
    89d8be52ef4 generated: ./hack/update-vendor.sh
    04f3c5793c1 upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
    8c8fe66f7aa Execute sync before taking the snapshot
    4b1d9d80da7 Correct the feature gate string for RBD migration.
    50e813278cd fix: azuredisk parameter lowercase translation issue
    879947434c0 removed unnecessary log line
    88249a973a8 kubectl: add integration test for result reporting
    16a4de9268a cli: let kubectl handle error printing
    c5365784330 cli: avoid logging command line errors in more cases
    26dae30f913 Fix header mutation race in timeout filter
    81c8d0aad93 clear pod's .status.nominatedNodeName when necessary
    f61c4b18c42 use node informer to check volumes attachment status before backoff
    f4ba875cdfd When volume is not marked in-use, do not backoff
    e36b9382ecd kubeadm: remove the restriction that the ca.crt can only contain one certificate
    f4835a2cd3e flake fix: remove the error handler for cronjob integration test
    962ab763c5e Fix the leak of vSphere client sessions
    cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls
    d42a44fcb2f Enabling kube-proxy metrics on windows kernel mode
    e6a8826e992 Remove JSON logging performance regression

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-28 12:05:00 -04:00
Bruce Ashfield
2a355647b9 libvirt: uprev to 8.1.0
Bumping libvirt to a newer version. We drop our backported patches,
update the checksums, change the meson configuration slightly and
adjust the location of the systemd manipulations.

Along with functionality changes and bugfixes, we pickup newer
python components, so we can survive the depreciation of distutils
more easily.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-25 16:48:36 -04:00
Bruce Ashfield
82f8a454a3 python3-sphinx: make a 4.2.0 specific recipe
OEcore has pulled in python3-sphinx, and bumped the version. Our
recipe is causing failures. We still have a version dependency on
4.2.x, so we create a specific recipe to keep things working.

Hopefully this can be deleted shortly, and this is only being
created as a transition project.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-24 08:10:59 -04:00
sakib.sajal@windriver.com
e7516708fe ceph: set CXXFLAGS and CFLAGS
commit a83623a54a375d3ae9198a135b94379881a2b7a5 was added
to oe-core which removes CXXFLAGS and CFLAGS causing
compilation for ceph to fail.

Set CXXFLAGS and CFLAGS to resolve the issue.

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-22 15:59:52 -04:00
Bruce Ashfield
8cba065209 k3s: update to 1.23.1
The significant commit in this series is:

    0e72260df4 delete vendor dir

Which means that we completely have to revamp the recipe to build
without go accessing the network to pull in dependencies. This is
an initial effort, and it is acknowledged that it isn't efficient
or fast, due to the number of fetches and I/O required to complete
the population of the vendor/ directory.

The recipe can be iterated and made more efficient over time.

Bumping k3s to version v1.23.1+k3s1-11-ge7464a17f7, which comprises the following commits:

    e7464a17f7 Fix use of agent creds for secrets-encrypt and config validate
    8d8c8b0c6b Don't skip the dev image when skipping airgap
    31f1a00b6f Fix a typo: advertise-up -> advertise-ip (#4827)
    2ac8df3602 Integration tests utilities improvements (#4832)
    612a9412fd Enable make generate to use dapper and standardize go and gzip versions (#4861)
    66eeabbdfc linter doesn't actually run on windows, found these while getting it running on a windows machine
    142b1d96f4 Update channel.yaml for 1.23
    ff49dcf71e Export default parser
    d0f7e23328 Require integration test to be run as sudo/root (#4824)
    a02db0f2fa Fix cgroup smoke test (#4823)
    08d538fb3a Update golang
    87395e32d6 Update modules for Kubernetes v1.23
    6656d48415 Add tests to use vagrantfile (#4722)
    70902209b9 Bump stable to v1.22.5+k3s1 (#4821)
    3ee3ecb3ac package rename wasnt approved yet, backing out cruft that snuck into last pr
    a5c6e6a68a Fix panic checking name of uninitialized etcd member
    52e450f033 Add etcd sonobuoy tests
    9919f229b6 Add variable to enforce max test concurrency
    247298a20d Fix previous channel detection
    6872e7da25 More codespell ignores
    3ae550ae51 Update bootstrap logic to output all changed files on disk (#4800)
    0e72260df4 delete vendor dir
    e6cf8f5982 code changes to drop the vendor dir
    4eb282edac Move flannel logs to logrus
    2e91913f54 Close agentReady channel only in k3s (#4792)
    8ad7d141e8 Close etcd clients to avoid leaking GRPC connections
    588d15db8f Remove Disables, Skips and DisableKubeProxy from the comparing configs
    555dfc54db Add initial skeleton ADOPTERS.md to better track large use cases (#4764)
    baf865b836 Add ADR
    6f4217a340 Build standalone containerd
    8737e2e13f Build script cleanups
    89e63972e9 Bump k3s-root to v0.10.1
    17eebe0563 Fix cold boot and reconcilation on secondary servers (#4747)
    73725a0882 docs: adrs: Dual-stack in network policy agent
    d71b335871 Fix snapshot restoration on fresh nodes (#4737)
    bf4e037fcf Resolve Bootstrap Migration Edge Case (#4730)
    2f3bfc27c0 Add in docs/adr to ensure we capture decisions properly during design calls (#4707)
    a6fe2c0bc5 Resolve restore bootstrap (#4704)
    a70487d5ae Update wharfie usage in windows code path
    3985fd0e26 [master] Add validation to certificate rotation (#4692)
    e8a30a87c8 Bump runc to v1.0.3
    eb068da7f3 Add `SKIP_AIRGAP` enviroment variable for make (#4688)
    8f389ab030 Include node-external-ip in serving-kubelet.crt SANs (#4620)
    bcb662926d Secrets-encryption rotation (#4372)
    1b3187ea07 Check HA network parameters
    7d3447ceff Bump wharfie to v0.5.1 and use shared decompression code
    05d43278e2 bump kine to v0.8.1
    3b6a3fe905 Update dynamiclistener
    a8f7e9f7e8 Nighlty automation vagrant rework (#4574)
    a0208058ae Bump stable to v1.21.7+k3s1 (#4636)
    77fd3e99ec Add cert rotation command (#4495)
    1e6e4db2bc Update maintainers list (#4622)
    d05c334a78 Improved cleanup for etcd unit test (#4537)
    ae4a1a144a etcd snapshot functionality enhancements (#4453)
    0c1f816f24 go generate
    a7ba3e14ff Add package version to traefik helm chart
    7685da3e24 Improve flannel logging
    d93c82f958 [master] Bump golang and containerd (#4538)
    65110a4eec [master] Bump Kubernetes to v1.22.4-k3s1 (#4536)
    03485632ea Fix regression with cluster reset (#4521)
    ef263bd2b0 Improved regex for double equals arguments (#4505)
    535a919635 Removed value from warning about skipping flags (#4491)
    c77efe64e1 tests/vagrant: refactor vagrant smoke tests (#4484)
    f18b3252c0 [master] Add etcd extra args support for K3s (#4463)
    41ff19de71 Feature: Add CoreDNS Customization Options
    4b57951fb0 Fix to allow etcd-snapshot to use config file with flags that are only used with k3s server. (#4464)
    5ab6d21a7d Increase agent's apiserver ready timeout (#4454)
    bc7cdc78ca go generate
    2e9358934d Add dashboard annotations to Traefik helm chart
    5d168a1d59 Allow svclb pod to enable ipv6 forwarding
    adaeae351c update bootstrap logic (#4438)
    d85b2468ea Corrected skip check for dualstack on CI (#4427)
    559c8ad94b install: /usr/sbin/transactional-update (#4403)
    7bd65047c3 Match to last After keyword for parser (#4383)
    8915e4c7f7 Replace gzip with pigz for faster builds (#4411)
    0a5c6b1088 Remove unit tests from drone CI (#4424)
    36c6634cce [master] updating to new signals package in wrangler (#4399)
    f1d6e9bc4b install.sh: fix path detection for sle-micro (#4398)
    86c6924119 containerd: v1.5.7-k3s2 (#4387)
    f7dcc139ff Bump klipper-lb image for arm fix
    aa3332085f Update k3s CI to run all integration tests (#4358)
    94c1b988ca Enable Epics Action to automatically check off child issues in an epic (#4353)
    f1622129e4 refactor: Use plain channel send or receive
    f9f1cabe9c Fix log/reap reexec
    702fe24afe containerd/cri: enable the btrfs snapshotter (#4316)
    3da1bb3af2 Fix other uses of NewForConfigOrDie in contexts where we could return err
    5acd0b9008 Watch the local Node object instead of get/sleep looping
    3fe460d080 Block scheduler startup on untainted node when using embedded CCM
    52eb6cac1c install.sh: initial support for sle-micro (#4331)
    91cf835ec3 Update to v1.22.3 (#4354)
    7c3f21e581 K3s Integration test fixes (#4341)
    ab3d25a2c5 Update peer address when running cluster-reset
    0a0b915921 reset buffer after use (#4279)
    02a314c69a Bump klipper-helm version
    918945da45 Added configuration input to etcd-snapshot (#4280)
    72a1925a34 install.sh: capture quoted environment variables (#4275)
    6e410fad49 Update to the newest flannel
    b5b7033afd Bump klog fork version
    e11a4bf8bb set duration to second (#4231)
    0452f017c1 Add etcd s3 timeout (#4207)
    34080b23b1 Copy old bootstrap buffer data for use during migration (#4215)
    dbc14b8990 Fix race condition in cloud provider
    5a923ab8dc Add containerd ready channel to delay etcd node join
    6b4d75d245 maintainers: add Manuel and Michal (#4193)
    b282528ee2 Display cluster tls error only in debug mode (#4124)
    dc18ef2e51 Refactor log and reaper exec to omit MAINPID
    d6b6a3ee9f vagrant: Add Ubuntu 21.04 support
    5e01201195 vagrant: Update package list for Ubuntu
    e420583684 vagrant: Add support for vagrant-libvirt
    f830d09d6e vagrant: Change OS environment variable to DISTRO
    feec44572d Improve error message when using a "K10" prefixed token (#4180)
    ac7a8d89c6 Add ability to reconcile bootstrap data between datastore and disk (#3398)
    9e787bfacb moving fossa to being inline step with a sles image
    b6919adf62 Add "etcd-" prefix to etcd-snapshot commands as aliases (#4161)
    00cf4578ec Dual-stack support LB controller
    1f7151ed2f Update stable to v1.21.5+k3s2
    9b35734e1a Add topologySpreadConstraints to support scaling of coredns
    e24e1332fd Bump containerd to v1.5.7+k3s1
    12e675e2cc Don't evacuate the root cgroup when rootless
    cd5002ea37 Skip tests that violate version skew policy
    5d1a37ee32 Send MAINPID to systemd when reexecing for logfile output
    a16105b348 Properly handle operation as init process
    f4cea90cb9 set transport to skip verify if se skip flag passed (#4102)
    fd495a6a5f Bump stable to v1.21.5+k3s1 (#4068)
    87524a7ac7 Enable the inheritance of settings for ipv6
    4ec71b360c Adding fossa anaylze/test drone step
    73e21e739f Drop broken SupportNoneCgroupDriver support
    8005885bad Add 1.22 channel
    539e224159 Update build images to python3 for compat with recent gsutil change
    b99b943c17 Use the new klipper-lb image that has newer go and Alpine versions

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 18:27:52 -04:00
Bruce Ashfield
5d30327332 lopper: update to 1.0.2
Bumping lopper to latest, which comprises the following commits:

    c7b22ce lopper/subsystem: update access to latest specification
    716fe89 lopper/init: pass permissive to dt_compile if specified on the command line
    2575d66 dt_compile: allow duplicate label errors to be skipped with --permissive
    22b2515 lopper: drop duplicate labels due to node merging
    f70eb86 lopper: bump version to 1.0.2
    9b72de5 lopper: only execute main() when __main__ is called directly
    b0b19a1 lopper: improve label round trip handling
    d4b7706 docs: clarify lop versioning an compatible strings
    e44204b README: add phandle-desc-v1 description
    17350a7 version: bump to 1.0.1
    0a4fcac tree: fix tree export and reload
    520dea8 lopper/base: add secure-address-map description
    6e660c5 lopper/lops: resolve tree when copying
    8d46634 lopper: allow select to match labels
    7aac1e3 openamp: add stub for OpenAMP Domain processing landing function
    82986bb lopper: add the ability to extend phandle meta-data table
    914c7e2 yaml: add alias/anchor based node naming
    d9f1abb spec: update remoteproc example per latest spec
    40cc05d lop-load: add back CDO
    d5d23ab xlnx: subsystem: rename lopper_tree to lopper.tree in imports
    7d23ba6 lop-load: update for latest master
    4caa022 openamp: add stubs for picking up domain to domain YAML property
    d8dae9d openamp_xlnx: rename fily openamp_xlnx.py to allow includes from this file
    0358879 yaml-xlate: add stub for domain-to-domain property
    903b16a spec: remove resource-groups
    1dd1e67 README: update to add mailing list information
    5da82a1 lopper/yaml: add lopper processing for "<<+" extension marker
    3d05302 assists: domain_access: Fix update_mem_node handling for higher address
    3c81fcc fdt: handle large integers

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
c9554c6937 xen: only package xencommon systemd components if systemd is enabled
We've had reports of both the init.d xencommons and the systemd
services attempting to initialize the console, and breaking boot.

The systemd initialization really only needs to be enabled when
systemd is in DISTRO_FEATURES, and init.d the opposite.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
5f1937e4fb netns: update to 0.5.3-tip
We also switch to building with -mod=vendor, and drop our custom symlink
configuration.

Bumping netns to version v0.5.3-8-g00d5d07, which comprises the following commits:

    00d5d07 update generation
    74d2bd0 update
    6cba61f update to github actions
    dc7233e update to github actions
    d6b2244 update to github actions
    b65a990 docs: Update TOC
    16152a0 update to github actions
    56ffc34 update travis
    9b103a1 Bump version to v0.5.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
04270c3baa networking: introduce slirp dependency
Importing libslirp to meet the requirements of the updated slirp4netns.

This is very similar to:
https://github.com/schnitzeltony/meta-retro/blob/master/recipes-support/slirp/libslirp.bb

But we create our own recipe for now, as we don't want to introduce
more layer dependencies. If we can get libslirp moved to
meta-openembedded, we'll drop this recipe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
8cd1584a01 slip4netns: update to 1.2.0
Bumping slirp4netns to version v1.2.0-beta.0-5-g323aa69, which comprises the following commits:

    2365e85 configure: remove inet_ntoa check
    2b607f2 Replace deprecated inet_ntoa with safer inet_ntop

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
0f7a2e57d6 cni: update to v1.0.1
Bumping cni to version v0.8.0-90-g35efaab, which comprises the following commits:

    3e49ce1 Fix incorrect pointer inputs to `json.Unmarshal`
    b92c836 fix version of cni v0.8.1 does not have a directory of github.com/containernetworking/cni/pkg/types/100 refer to https://github.com/containernetworking/cni/tree/v0.8.1/pkg/types
    269bf61 Spec: Container runtime shall tear down namespaces
    48fac6a Update README.md
    798e63d Updated README.md to include Netlox loxilight CNI
    9070cb3 documentation: update Multus link in README.md to point to the k8snetworkplumbingwg repository
    21cd5f0 [exec-plugins]: support plugin lists
    c362597 skel: remove superfluous err nil check in (*dispatcher).pluginMain
    42f2474 Remove Gabe Rosenhouse as maintainer
    2e4887b skel: print out CNI versions supported in help text.
    c7f5f70 pkg/version: add VersionsFrom function
    5608690 spec: bump to 1.0.0
    30e06a8 Docs: bump spec version information
    a956246 docs: revise cnitool docs
    63a3bca wrap returned errors
    b277ec1 docs: correct the extension name of the configuration file
    34a8a46 chore: standardize documentation on IP assignment
    76bf3de types: ensure empty CNIVersion always creates/converts to 0.1.0
    4feedb9 Add breadcrumbs for CNI.go
    57cf1ce types/create: add CreateFromBytes()
    4fdc5f6 chore: support both value type and pointer type in LoadArgs
    f30a824 Remove Bryan Boreham as maintainer
    c63d850 Add debug plugin to help debugging/troubleshooting (#818)
    9546b70 spec: Some minor corrections
    3a13f68 Spec: Bring 1.0's treatment of "args" in line with 0.4.0
    c92642b upgrade kube-ovn new github site
    67ec904 Fix typo in SPEC.md
    0555966 typos correct
    8ad568b Rewrite spec.md for 1.0.0
    0016917 Adding reference to Azure CNI as 3rd party plugin in readme
    ad59be0 types/040: add testcase for <= 0.2.0 Result requirement of one or more IPs
    e32b586 remove build badges from homepage
    296290a Switch from Travis to GH Actions
    a199e6a go fmt
    c735780 Markups.
    b678c26 Log out the plugin name on ADD/DEL failure.

cni-plugins: update to 1.1,0

Bumping cni-plugins.git to version v1.1.0-6-gb8a10bb, which comprises the following commits:

    7a98979 ipam/dhcp: Fix client id in renew/release
    7aa07ef call ipam.ExceDel after clean up device in netns fix #666
    96c3af8 Add sysctl allowlist
    08d0f33 portmap: fix checkPorts result when chain does not exist
    dca23ad portmap: fix bug that new udp connection deletes all existing conntrack entries
    ba47b49 Enhanced dad set to 1
    2be2960 Add boolean to enable/disable dad
    8ede7ee Disable DAD for container side veth
    22dd6c5 firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
    90e8e1f Fix host-device gofmt
    3b2afc9 host-device: Bring interfaces up after moving into container
    9649ec1 pkg/ns: use file system magic numbers from golang.org/x/sys/unix
    0c12d8a gofmt
    152e7a4 go mod tidy
    4319bc4 build: bump to go 1.17
    7a55617 Remove arp notify setting per comment
    5d073d6 plugins: replace arping package with arp_notify
    67110e0 fix #685
    1324428 Ran go fmt so tests would pass
    fd4c335 Fixed DHCP problem that broke when fast retry was added.
    c9d0423 dhcp ipam: adjust retry mechanism
    547a516 add ipam tests for dpdk device
    3033fd2 add ipam support for dpdk device
    d5a6569 ipvlan: Send Gratuitous ARP after IPs are set
    27fdec5 dhcp ipam: fix client id
    a1051f3 dhcp ipam: rename inconsistent options among files
    c627ea8 dhcp ipam: add more options capable for sending
    4b216e9 dhcp ipam: add fast retry
    2bebd89 dhcp ipam: support customizing dhcp options
    be383cf dhcp ipam: truncate client id to 254 bytes
    6d1f71e dhcp ipam: print error correctly without format string
    24259e7 dhcp ipam: using full config to regular the code
    c16cff9 Allow setting sysctls on a particular interface
    7cb3453 dhcp: remove implemented TODO
    ceb34eb Don't redundantly filepath.Clean the output of filepath.Join
    90c0185 Use crypto/rand.Read, not crypto.Reader.Read
    081ed44 bridge: Add macspoofchk support
    ba48f8a plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
    62952ff vendor: bump to libcni v1.0.1
    8ab2336 static ipam: do not parse the CIDR twice
    2052c30 static ipam: improve error msgs when provisioning invalid CIDR
    156e59c bump go to 1.16, other misc fixes
    0818512 vendor: bump all direct dependencies
    9b1666d vendor: bump to libcni v1.0
    0e38a1d docs: Update the CI badge from Travis CI to GitHub Actions
    24b3fbc bridge: Fix typo in error message for promiscuous mode
    a49f908 ip: place veth peer in host namspace directly
    a3cde17 bridge: Add mac field to specify container iface mac
    a786b12 static ipam: decide wrong cidr error msg
    0db5882 static ipam: stop wrapping net.ParseCIDR errors
    5a40818 static ipam: show confusing error msg
    2f9917e utils, hwaddr: Remove unused package
    272f154 ip, link_linux: Remove unused SetHWAddrByIP function
    77233dd plugins: remove flannel
    4b180a9 refactor(win-bridge): netconf
    9215e60 refactor(win-bridge): hcn api processing
    93a5503 refactor(win-bridge): hns api processing
    aa8c8c1 chore(win-bridge): location related
    ec75bb8 chore(win-bridge): text related
    c4d4aa7 Remove Bryan Boreham as maintainer

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
cbf5766d78 oci-runtime-tools: update to 0.9.0
Along with the commit summary below, we have the following changes:

  - refresh the GO cross compiler patch context
  - add new go dependency package symlinks
  - only build the 'tool', since that is all we need
  - fix the build error of:

          cannot find package runtime/cgo (using -importcfg)
                  ...
                 recipe-sysroot-native/usr/lib/aarch64-poky-linux/go/pkg/tool/linux_amd64/link:
                 cannot open file : open : no such file or directory

    by setting the GO_BUILD_FLAGS appropriately for our static and -pie
    configuration

Bumping runtime-tools to version v0.9.0-75-g0105384, which comprises the following commits:

    8927281 Add syscall "statx" in seccomp to fix Operation not permitted
    a202491 spec generator support setting unified
    30cecc1 validation/linux_rootfs_propagation: fix
    10d2584 runtimetest: validateRootfsPropagation: fixes
    8b26e24 validate: rm Clean() arguments
    3fb1264 validation: fix Cleanup
    14cd51e Makefile: replace TAP with TAPTOOL
    adcb290 Fix hanging on runc create.
    5ce2cac cmd/runtimetest: fix NewPid deprecation warning
    8e1a3b5 deps: bump github.com/syndtr/gocapability to latest
    543268b deps: github.com/hashicorp/go-multierror to v1.1.1
    4b164a1 deps: bump github.com/opencontainers/selinux to v1.9.1
    ee9c051 deps: bump github.com/mrunalp/fileutils to v0.5.0
    01a6f47 deps: bump sirupsen/logrus to v1.8.1
    abcb94d deps: switch to google/uuid
    2253869 validation/.gitignore: fix
    953e752 MAINTAINERS: add @kolyshkin
    221e5ea deps: bump github.com/xeipuuv/gojsonschema to v1.2.0
    67884fc validate: prepare for new xeipuuv/gojsonschema
    09d837b Change /dev to be mounted by default with /noexec
    10c865d ci: re-add commit subject length validation
    a22a894 ci: add golangci-lint run
    a7cecde Add*Hook: do not return errors
    c0037c9 runtimetest: silence errlint on unix.Unmount
    9505f16 Explicitly ignore errors from YAML
    fec9c3c validation: fix Clean
    0ab61ae validation: fix/rename ReadStandardStreams
    6f4b5ba validate: fix staticcheck linter warning
    6a9ad7c runtimtest: fix validatePosixMounts
    44e9496 Fix "addr cannot be nil" staticcheck linter warnings
    d38bd63 Fix deprecation warnings from staticcheck linter
    1826c32 Fix gosimple linter warnings
    e36f98f Fix deadcode linter warnings
    112c88c Makefile: use fancy git commit ids
    16dfbbd Makefile: add/use BUILD_FLAGS
    5432bc4 ci: replace travis with gha ci
    fab664e Makefile: rm gofmt and golint, simplify gotest
    98b2d35 Run make .gofmt
    0e5956d Switch from Godeps to go modules
    71a5e7c generate: add --linux-intelRdt-closid option
    4f51ef9 validation: read pid in PostCreate
    6502e57 Fix build of hugetlb tests on 32-bit platforms
    10f8f55 generate: fix type for Umask
    8f1e958 Remove spurious WARNING message
    43243fe Add missing interface to set init processes Umask
    120c67a AddDevice(): better diagnostic when creating dup
    2affd45 Add missing clone rule for s390x.
    be9f6f1 Update hugetlb tests to be more portable
    5a98426 Fix cgroup hugetlb size prefix for kB
    cd1349b Improve performance of AddProcessEnv
    73e9a99 update Mashimiao email in MAINTAINERS
    ee63cfa release v0.9.0
    0d022f7 Makefile: add rule to print validation-tests
    6212483 delete: reduce check waiting time
    3abdc1f kill: cleanup container on error
    4db38e4 oci: kill process before delete
    1c40e59 seccomp: add TAP plan to the output
    dd39124 validate: check mount label only for bind mounts
    6fd7866 misc: use different objects for the different tests
    e83ba34 capabilities: correctly add not existing capability
    9585ecb adding security and CoC links
    6dae2f0 Simplified code
    2e8216d validation: add apparmorProfile validation
    b113b38 runtimetest: add apparmorProfile validation
    743b0b3 validation: add mountLabel validation
    3bc60a4 Windows: Typos and incorrect defaults
    20302da add selinux deps
    555c03d validate: add mountlabel validation
    a2df8d9 runtimetest: add mountlabel validation
    b90e5bc generate: add oci-version option
    00f6e86 Modify the corresponding test according to hashicorp/go-multierror v1.0.0.
    b005481 Godeps: update hashicorp/go-multierror
    1f0579c hack: drop -dev from runtime-spec version
    b1c11da fix up vm parameters
    9f6de4d generate: add process-cap-drop option
    192a8eb generate: add process-cap-add option
    575c8a0 man: Add some instructions and examples to some commands.
    9f55c07 generate: fix capabilities add/drop option
    3fc5fcb generate: Verify the input values
    146c5ee generate: add vm-image-format option
    f5e59a3 generate: add vm-image-path option
    0cd6663 generate: add vm-kernel-initrd option
    3e43643 generate: add vm-kernel-parameters option
    fc0fc84 generate: add vm-kernel-path option
    73f6711 generate: add vm-hypervisor-parameters option
    9b1de8c generate: add vm-hypervisor-path option
    e980d2f generate: add windows-devices option
    f5556a8 update to golang 1.11
    58f2a15 Initialize Config Windows Network
    a4a33d4 release v0.8.0
    c291c2a Add generate.New support for Windows.
    2974f2e readme: fix wrong filepath
    fb101d5 Expose Windows namespace
    4615fa4 /proc should be mounted with nosuid, noexec, nodev to match the host
    30a03ab Fix test
    c48ee5c Vendor in windows runtime-spec changes
    d5be152 validation: mounts: fix condition of source & type check
    069db1a validation tests: use new RuntimeInsideValidate
    270145a RuntimeInsideValidate: can now be called several times
    4b49cba devel guidelines: update TAP documentation
    caa32a1 validation: Implement DeleteOnlyCreatedRes
    e86b898 MAINTAINERS: remove philips
    dcadcca Makefile: add generate to gotest
    ae94592 release v0.7.0
    6c943e8 validation: Implement DeleteResImplement
    fab1de6 validation: use t.Fail when checking for main test errors
    06591d3 travis: add go 1.10
    68b7caa mountinfo: parse empty strings in source
    a6e6aff validation: check for masked block, char devices, fifo
    99c5e91 validation: check for invalid symlink inside container
    234933b validation: check for a masked relative path
    303ae30 validation: check for read-only block, char devices, fifo
    e60cd06 validation: check for invalid symlink inside container
    5dd461f validation: check for a read-only relative path
    d9febe1 validation: more test cases for masked paths tests
    91f2983 validation: more test cases for readonly paths tests
    e2d34c1 validation: add more test cases for private & slave propagations
    94f1f84 validation: squash rootfs propagation tests into a single file
    708de67 runtimetest: improve logic for checking for file modes
    2c9b929 runtimetest: correctly check for a readable directory
    0a7749a validation: test with different test cases for hugetlb cgroups
    ef113d1 validation: add different test cases for blkio cgroup tests
    cf9decf validation: add more test cases for linux_cgroups_network
    acaa992 validation: test linux_cgroups_cpus with different values
    871f0eb validation: test linux_cgroups_memory with different values
    279a194 validation: allow RuntimeOutsideValidate to take a tap parameter
    58ea84a fix some misspells
    c887efb fix generate test in calling generate.New
    cf7b786 README: fix broken links to documentation
    cd3faf9 validation: fix nil dereference when handling multierror in hooks_stdin
    1fb00d9 validation: use helper util.GetRuntimeToolsNamespaces()
    0f52f9a validation: add a new test for NSPathMatchTypeError
    ad0e97e validation: exclude user namespaces and cgroup namespaces
    f64bed2 validation: add more signals to killsig test
    613c5de runtimetest: check if /dev/ptmx is a symlink to /dev/pts/ptmx
    582a909 validation: test validation test with an empty hostname
    1ceca9e validation: use rfcError instead of specerror
    a90cd2b validation: print out correct diagnostics based on specError
    23c9a51 validation: sync with unshare by using select & time ticker
    e132d37 validation: kill child processes by setting process groups
    73358a3 validation: fix a bug when passing in namespace strings
    c5c1422 validation: add test for NSProcInPath
    1794938 validation: add cgroup devices validation
    7c6996f check the status of the state passed to hooks over stdin
    6cc92d0 validation: fix nil deferences in cpu & blkio cgroups tests
    1c243a8 release v0.6.0
    ef75900 validation/kill_no_effect: fix bug
    3e3094d Add cgroupsPath validation
    f7dd673 cgroups_v1: Correction parameters
    2640f5c travis: fix fetch issue of golint
    e830fa3 validation: split out pringDiag from testNamespaceInheritType
    1ac1c02 validation: split out pringDiag from testNamespaceNoPath
    7992f01 specerror: Add NewRFCError and NewRFCErrorOrPanic
    d165658 validation: add more values for rlimits test
    9152ff4 validation: create: don't skip errors on state
    cc8ab2e doc: add developer guidelines
    d7985e3 validation: add a new test for NSInheritWithoutType
    5ce0ff8 validation: add a new test for NSNewNSWithoutPath
    14e621c bash: add os
    5d2dc61 validation: Implement ConfigUpdatesWithoutAffect
    84a62c6 generate: Move Generator.spec to Generator.Config
    2e6f6ab generate: Respect runtime.GOOS when generating default template
    1917b8c validate: With --host-specific, compare config platform vs. runtime
    e1ad3f0 README: Update to reflect granular TAP output
    4b888f2 runtimetest: Use ModeType as the mask in the symlink check
    732d438 validation: Use non-empty files in masked/readonly tests
    20a71e4 runtimetest: Make TAP output more granular
    b4014f8 validation/test-yaml: Drop this local experiment
    7f50875 docs/command-line-interface: Require complete runtime coverage
    fc1bcf5 fix process_user validation
    7c5f941 generate: add process-username option
    83d367b validation: add process_user validation
    0ddb5cd kill stopped container generate error
    73964f2 add hooks stdin test
    a79a1cb add test case for KillNonCreateRunHaveNoEffect
    ff399f1 contrib/rootfs-builder: Use $(cat rootfs-files)
    0f3cf9d validation: LinuxUIDMapping: fix tests
    984dbc8 Fix error messages in validation cgroup tests
    d5630f7 validation: Implement ProcArgsApplyUntilStart
    82836c8 validate: mv deviceValid to validate_linux
    e99b47e Implement DevicesErrorOnDup
    9e919c6 runtimetest: fix root readonly check
    c9b4d66 runtimetest: count correctly TAP tests
    a7f94a2 rootfs-386.tar.gz: Add with BusyBox v1.28.0
    be8811c contrib/rootfs-builder: Support xz (and other) compression formats
    eea2bc9 contrib/rootfs-builder: Support timestamps in stage3 dates
    141f9ea contrib/rootfs-builder: Don't hit latest-stage3 when STAGE3 is supplied
    4dfca7a contrib/rootfs-builder: add /proc, /dev, /sys in rootfs
    b5e5322 contrib/rootfs-builder: fix busybox link list
    79ae4aa validation: run CLI with correct argument order
    e43d1ff return ErrorOrNil in bundle validate
    4e999f2 runtimetest: fix uid_map parsing
    d412a17 Fix condition in BlockIO test
    8e42ca5 Add system validation
    4e8dc67 add annotation and prop tests
    ac12f97 Implement PosixProcRlimitsTypeGenError and LinuxProcCapError
    0ec9fe6 validation: Add system validation
    3401d41 validate: CheckLinux is platform dependent
    0451545 validate: allow non-linux compatibility
    536b713 Implement PosixProcRlimitsSoftMatchCur and PosixProcRlimitsHardMatchMax
    198b3ff add 'delete' testcases
    b456bda validation: Add error judgment to SetConfig
    1cbf66a check RootOnWindowsRequired
    e2fbc1b generate/seccomp: platform independent values
    55d7e14 implement kill tests
    899a400 generate: fix handling of permitted caps drop
    4902e9c implement start operation tests
    86869d1 validation: Increase err judgment
    4947839 validation: implement PosixHooksCalledInOrder test
    f48ae22 validate_test: add weightDevice test
    27acd46 implement DefaultStateJSONPattern test
    b25ef0d validate: implement DevicesErrorOnDup
    87c5e52 release v0.5.0
    e211fb5 validate: add logrus.Debugf to CheckJSONSchema
    fb9511d validate: Add a non-nil test to CheckMandatoryFields
    9177741 add tests when prestart/poststart/poststop hooks fail
    5cbd8c7 don't overwrite hook which has a same path
    9dca840 validate: add weightDevice validation
    78fdf66 validate_test: Complement test
    4fdf325 nil config support in lifecycle validate
    09ddc02 add lifecycle validation
    be390c4 change two LGTMs requirement to one
    696b805 waiting until the container stopped in inside validation
    ed2a4b3 add 'state' test
    c76062f validation: Remove runc 'create' exit timing crutches
    d8d2396 validation/util/container: Use ExitError for stderr
    5e8b51e Add lifecycle testing function; Add pidfile test. Fixes #556
    17486b4 Relax LGTM acquirement for PullApprove
    0909a7f release v0.4.0
    b5a43d1 validation/util/container: Use --bundle (and stop requiring BundleDir)
    8769602 validate_test: add TestCheckMandatoryFields
    7815111 cmd/runtimetest/main: Run validateDefaultDevices even with process unset
    6ae0867 README: Link to the runtime API docs
    fb19ae1 cmd/runtimetest/main: Loop for DRYer validateCapabilities
    e85081a Makefile: Clearer warning on missing validation executable(s)
    0c2e37e validation/util/container: Use a local UUID for stdout/stderr
    a12de42 validation/create: Label the state ID comparison test
    b880d57 *: Transition from tap Diagnostic(...) to YAML(...)
    0c66fe9 vendor/github.com/mndrix/tap-go: Bump to 629fa407
    7a4cb36 docs/command-line-interface: Add Runtime CLI Spec (#321)
    c2f774c validation: add mount validation
    625e232 Hooks should be passed in as rspec.Hook, not as a string.
    48b7f56 Modify the legal value of the rootfs-propagation
    5bb8754 runtimetest: add validateSeccomp
    9144f82 generate: add windows-servicing option
    ef277d6 generate: add windows-resources-storage option
    4068d38 generate: add windows-resources-memory-limit option
    93b5f72 generate: add windows-resources-cpu option
    b285305 generate: add windows-network option
    6a71d30 generate: add windows-layer-folders option
    e9507da generate: add windows-ignore-flushes-during-boot option
    df629e3 generate: add windows-hyperv-utilityVMPath option
    8397b70 Add interface to remove mounts.
    e266af5 generate: modify the function return value
    e996b69 generate: add solaris-milestone option
    fc48567 generate: add solaris-max-shm-memory option
    3bca692 generate: add solaris-limitpriv option
    4a9f3fa generate: add solaris-capped-memory-swap option
    c9ef766 generate: add solaris-capped-memory-physical option
    61884ee generate: add solaris-capped-cpu-ncpus option
    01cf5e7 generate: add solaris-anet option
    6f10352 AddMounts should be AddMount you are only adding a single Mount
    9bcbe83 Recursive propagation flags should be legal to use
    3bd8d43 validation/linux_cgroups_*: Generate TAP output
    c94875e validation/util/test: Fix 'start' -> 'create' typo in error message
    1094856 validation/util: Generic RuntimeOutsideValidate API
    612c315 validate_test: perfect TestJSONSchema
    8fb3e83 Add validation when host-specific is set
    9db5ddf validate: change platform default value
    8a09ee1 generate: Use non-null validation instead of initialization
    10ede2c validate: Add a double guards to the call of the verification function
    2f21180 filepath/clean: Add Windows support
    17ce13a filepath/abs_test: Compare IsAbs with the standard library
    60df768 filepath/clean_test: Compare with the standard library
    f2e8be2 filepath/clean: Avoid a panic on abs-path with trailing ..
    eb2ffab filepath/clean: Handle 'a/..' -> '.' case
    4b20ce2 validate: fix CheckHooks
    4d0a011 validate: fix CheckCapabilities
    45068ce validate_test: add TestCheckHooks
    34f773a validate_test: add TestCheckPlatform
    7c09b4c add relative cgroupath test
    1aebc09 update to support relative cgrouppath test
    6351044 add cgroup network test for runtime
    72e67e5 add cgroup pids test for runtime
    b712995 add cgroup cpus test for runtime
    f1e02ff add cgroup blkio test for runtime
    432615a add cgroup hugetlb test for runtime
    4a57b0f add cgroup memory test for runtime
    07118a8 add runtimeOutsideValidate
    9a56096 add cgroups package
    0d75257 validate: remove duplicate verification
    229722a validate_test: add TestCheckLinux
    e7ee761 remove kernel limit for id mappings
    f7b8c7e fix idmappings test
    53da048 generate: add linux-intelRdt-l3CacheSchema option
    ad47e7d Makefile: Change from prove to node-tap
    0a919c0 validation/util/container: Remove bundle even if delete fails
    e11b77f validation: Use prove(1) as a TAP harness
    721fbce solve conflicting option problem
    e409855 man: small fixs
    58374ae remove --mount-cgroups option
    74d6245 man: add manpage for option --mounts-add
    6e78ff2 support json value for hooks
    1c2dca0 generate: Move generate_test.go from validation
    9422eec cmd/runtimetest/main: Use TAP diagnostics for errors
    ca332ae runtimetest: fix nil dereference
    cdf38ca validate: fix nil deference
    3e82a0a add all left behind container inside tests
    9a69e14 add preFunc
    39f3f74 runtimetest: add host platform validation
    7026311 runtimetest: add rootfs propagation test
    adf1844 generate: fix error return
    d327e0b generate: fix DropProcessCapability*
    b5c45de generate: remove redundant code
    5557d36 add more test cases for default runtime validation
    9f47cbe remove debug info
    68e7720 generate: change process-tty to process-terminal
    045bc5f generate: fixed seccompSet
    8765570 runtimetest: add posixValidations
    45b2686 runtimetest: add validateUser
    cc5bf05 runtimetest: fix process validation
    6c98b46 runtimetest: Raise ConfigInRootBundleDir for missing config.json
    95e0d95 runtimetest: Make validateRlimits silent on Windows
    2746c06 move validateRlimits to defaultValidations
    3c9cdc5 runtimetest: fix error return
    630f06a validate_test: add cwd check to TestCheckProcess
    3a46197 add version file
    e08f842 release v0.3.0
    90ace62 translate RFC errors
    a171213 redefine error code as int64
    3a97b98 translate more RFC errors based on specerror
    87d3df2 complete RFC codes of runtime.md
    ccef443 generate: add mounts related option
    64c5ef8 complete specerror of config-linux.md config-windows.md
    6df06d9 validation: add a generate smoke-test
    a6f475f config: correct rootfs default
    de08605 validate: allow unset "type" fields in resource devices whitelist
    7553161 validate: Soften unrecognized rlimit types to SHOULD violations
    b446e38 add specerror framework; complete rfc errors of bundle.md and config.md
    19b061c generate: fix nil deference
    6d2dbbc runtimetest: fix nil deference
    0b49b01 man: fix typo
    6089f63 specerror: Add SplitLevel helper
    a9dbd7e cmd/oci-runtime-tool: Implement --compliance-level
    286d437 fix compile issue
    310bac8 bash: fix commands
    6dabb9b generate: fix rootfs-propagation
    93ba5a2 bash: fix rootfs-propagation
    4beb2a6 validate: fix cap validation
    ed4adc3 travis: update go versions
    19ae238 CHANGELOG: Document changes since v0.1.0
    f172006 release: v0.2.0
    c3c8c02 rootfs-386.tar.gz: Add with BusyBox 1.25.1
    894cae7 validate/validate: Linux rlimits extend the POSIX rlimits
    6367e88 validation: Support per-architecture tarballs
    ff5e578 contrib/rootfs-builder: Support multiple architectures
    a94f1f6 contrib/rootfs-builder/Makefile: Ignore previous symlinks
    8635532 contrib/rootfs-builder/Makefile: Raise errors from echo recipe
    4f756fd Specific cap-drop command
    ea55f9d Specific cap-add command
    5cb6c48 rootfs.tar.gz: Bump to BusyBox 1.25.1
    1a9532e generate: remove redundant content
    567f1aa validate: add root.path validation when platform is windows
    2cbb341 validate/validate_test: Add linux.rootfsPropagation checks
    6e7da81 validate/validate_test: Better error messages for unexpected JSON Schema errors
    4a705c6 validate/validate_test: Handle JSON Schema test not raising an error
    16be985 validate: Delete the extra validation
    b3fc8fe validate: add the validation of rlimit.type when platform is solaris
    24a2327 validate: modify the condition of the deviceValid
    cf64923 filepath: Add a stand-alone package for explicit-OS path logic
    fa9842c Add manpages and bash-completion for --device-access-add and --device-access-remove
    7f09e1b generate: add --device-access-add and --device-access-remove option
    a9c6787 generate: support blkio related options

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
3cd2f56a16 oci-runtime-spec: update to 1.0.2-tip
Bumping runtime-spec to version v1.0.2-79-g7ceeb8a, which comprises the following commits:

    600a8bd cgroup ownership: clarify that some files may not exist
    0608c1f Switch to GitHub Actions, CODEOWNERS, etc.
    f4ef391 specify cgroup ownership semantics
    104385d config-linux: MAY reject an unfit cgroup
    411082c add youki to implementations.md
    6641127 alphabetize the implementation list.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
5fd91604ef oci-image-tools: update to 1.0.0-rc3
Bumping image-tools to version v1.0.0-rc3-6-g11f9988, which comprises the following commits:

    8899fa9 README: add summary of project status
    c6e5a1b version: back to development
    25e557a version: update to 1.0.0-rc3
    e324098 update email in MAINTAINERS
    c3f8284 Revert "Relax LGTMs"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
f5bf9b80af oci-image-spec: update to 1.0.2
Bumping image-spec to version v1.0.2-144-g02efb9a, which comprises the following commits:

    d6ce48a Add mediaType fields into example manifest & image index JSON references
    bc44f5b Fixing charter link
    02c5c05 implementations: adding the C and Rust libraries
    a36b0c8 Handle multiple matching index entries
    a3eee7d README.md: Remove link to OCI scope table The OCI scope table no-longer exists.
    4533d3e schema: use Go's embed package instead of esc
    d147780 .tool: remove lint tool, call linter directly
    0e094f3 schema, specs-go: fix lint errors
    d3cd202 *: switch to golangci-lint
    4d865bc go: have the go.mod at top-level
    0f6c001 Remove unneeded docker pull of pandoc image
    de28903 Makefile: stale installation of glide was failing
    3a46ac8 github: bring forward the versions of golang tested/built with
    6ced3bd media-types: `.mediaType` is available in both OCI and Docker
    3be64d9 version: bump main back to -dev
    beccafd version: release 1.0.2
    5b82148 specs-go: adding `mediaType` to the index and manifest structures
    2eb4046 *.md: bring mediaType out of reserved status
    e3885ce version: bump main back to -dev
    67d2d56 version: release 1.0.2
    dcdcb7f specs-go: adding `mediaType` to the index and manifest structures
    5f31485 *.md: bring mediaType out of reserved status
    3fee04b Adding ACR to implementations
    8087946 Reflect docker dontation of distribution to CNCF
    bd2fa25 Minor spelling correction
    fc4df0a Fix very minor oversight in config example
    0d98a6c Scope data verification to content consumers
    83479d4 Clean up portability considerations
    fccc435 Implementations MUST NOT populate data arbitrarily
    2596ec0 Expand godoc for Data
    58c082d Add note about portability concerns
    ce281ce Add Embedded Data section
    aaf8045 Define the data field
    4f080a7 Add go.mod and pin dependencies

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Bruce Ashfield
3ca7a147e0 lxc: update to 4.0.12
We refresh our wget -> curl patch for context, but otherwise, no other
changes are required.

Bumping lxc to version lxc-4.0.12-8-g5ba5725cb, which comprises the following commits:

    5ba5725cb cgroups: modify cgroup2 attach logic
    1e4631641 ttys: ensure container_ttys= env variable is set correctly
    8ef019a6c doc: Fix reverse allowlist/denylist in Japanese man page
    f1c4a17e7 cgroups: log fd of newly created cgroup
    f7446b4e1 cgroups: check that opened file descriptor is a cgroup filesystem
    71ba7f656 doc: Fix reverse allowlist/denylist
    f314419d1 lxc-checkconfig: Fix bashism
    ca4c25c6e lxc-net: don't start by default inside lxc
    7e37cc96b Release LXC 4.0.12
    d678aa61e lxccontainer: allow xdev when creating the container dir
    bc61d2354 github: Clear default ACL on /home
    fb0e0b3dd github: add systemd-coredump
    53e0d390c github: more detailed compilation instructions
    db84a8b6b github: log system info
    e9282b6a6 github: ensure system liblxc is wiped
    ad8a3bd68 lxccontainer: properly wrap lxcapi_create()
    bceb81cd2 build: simplify thread local storage handling
    919da35b0 build: only enable LTO for regular builds
    d0a1e9c44 lxccontainer: simplify partial file creation
    62b5c0051 lxccontainer: improve create_partial()
    bfe24cb6a lxccontainer: improve do_lxcapi_create()
    1a5c236ac lxccontainer: improve do_lxcapi_save_config()
    bae0d7196 conf: log termination status
    4eb09aaad conf: improve userns_exec_mapped_root()
    928943280 github: stop installing gnupg now that it's unused
    7c70b0d14 lxc-download: Rely on HTTPS only
    199d2077c Update README.md: Fix broken link (403 Forbidden)
    0b6b230e3 attach: don't pointlessly call cgroup_init()
    dbef704fb commands: log command during file descriptor retrieval
    733f9c909 lxc-checkconfig.in: CONFIG_NF_NAT_IPV4 was removed from the kernel 2019-03-03
    ce392e230 (trivial) Fix error message, failure was connect not bind
    5628bff79 seccomp: close seccomp notifier fd in cleanup handler
    1f2af83a9 seccomp: only guard seccomp notify behind HAVE_DECL_SECCOMP_NOTIFY_FD
    9451303d5 api-extensions: don't advertise seccomp notify support if it's not compiled in
    23d07c315 use 2 sysfs instances for sys:mixed
    0dd3258bd Revert "api: ->save_config() doesn't need to create container dir"
    93edd510a api: ->save_config() doesn't need to create container dir
    28b2e04f1 cgroups: fix compiler warning
    15515f9a3 Revert "initutils: use vfork() in lxc_container_init()"
    41d2530d1 macro: ensure necessary io_uring flags are defined
    fc4e948c9 autotools: Avoid multiple liblxc.so with --enable-pam
    a616a311a build: refuse to compile with unsupported liburing version
    93be4e512 tests: add lxc.proc.* test
    d8027e49c tests: add lxc.sysctls.* test
    6f580343e test: improve logging helpers
    a10ff3418 conf: improve logging setting sysctl and /proc/<pid>/ parameters
    334cf7beb conf: apply /proc/sys and /proc/<pid>/ parameters
    1b74e01ad tests: include config.h
    c36379431 build: move _FILE_OFFSET_BITS to common option
    f24c234ee start: log signal name and number
    4915c9112 process_utils: add signal_name() helper
    78baec37d build: improve liburing support detection
    1a102b310 mainloop: make ifdefs easier to follow
    cf931928f Replace last occurence of 'which' with 'command -v'
    1ec5939b4 Replace deprecated backticks with $() construct
    fdfb4a13d Replace 'which' with 'command -v' in tests too
    71743e811 start: check event loop type before closing fd
    f69e6b4d3 mainloop: make sure that descr->ring is allocated
    1a8895855 Replace 'which' with 'command -v'
    9219277cc build: add io-uring-event-loop option
    d04eb166c build: add static libcap to output
    bc51048b7 confile: don't use path_simplify() on lxc.{execute,init}.cmd
    48728e988 conf: add cgroup2, cgroup2:ro, cgroup2:force, cgroup2:ro:force options
    4d3aad49d AUTHORS: Update to point to git history
    e328a988e conf: handle kernels without or not using SMT
    d40b0deb4 doc: fix typo in English lxc.container.conf(5)
    49fab27fc doc: Add lxc.sched.core to Japanese lxc.container.conf(5)
    1ad1cab80 doc: add loglevels to ja and ko common options
    1505f0780 conf: make it more obvious how auto-mount flags are defined
    429233cf0 criu: support restoring containers with pre-created veth devices
    48e079bf3 Release LXC 4.0.11

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:28 -04:00
Bruce Ashfield
2dd6ba297c umoci: update to 0.4.7-tip
Bumping umoci to version v0.4.7-70-gfa8e9f8, which comprises the following commits:

    c67586e build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
    88aaeca fuzz: always use golang:latest
    37b9db4 build(deps): bump golang from 1.17.4 to 1.17.5
    09ff9d5 build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
    86eb281 build(deps): bump golang from 1.17.3 to 1.17.4
    610dabf oci: protect against mediatype confusion attacks (CVE-2021-41190)
    9b17e05 oci: gc: fix tests to correctly use the right media-types
    38c20f1 ci: fix fresh builds
    220b0c0 build(deps): bump github.com/opencontainers/image-spec
    732d36d build(deps): bump golang from 1.17.2 to 1.17.3
    58f3a37 mutator: .Config() should return ispec.Image vs. ImageConfig
    001bbd4 ci: update main branch name
    7bebba6 ci: osx: only try to unlink parallel if installed
    a0d54ce build(deps): bump golang from 1.17.1 to 1.17.2
    72ec924 *: use new protobuf package
    09d1d79 build(deps): bump github.com/golang/protobuf from 1.5.0 to 1.5.2
    88243cd build(deps): bump github.com/rootless-containers/proto
    12270d3 build(deps): bump github.com/opencontainers/runc
    056236a *: make codecov slightly less annoying
    18fdf79 build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
    6f84bbb build(deps): bump github.com/cyphar/filepath-securejoin
    0b4d52f build(deps): bump github.com/apex/log from 1.4.0 to 1.9.0
    ac6ba6c build(deps): bump github.com/klauspost/pgzip from 1.2.4 to 1.2.5
    9cd570d build(deps): bump golang from 1.14 to 1.17.1
    26e57a2 gha: enable dependabot
    65932cd ci: hardcode Go version used for linting
    17111a6 *: use go1.17-friendly go:build tags
    f6c2e79 codecov: drop explicit env.CODECOV_TOKEN
    f80d8e2 ci: use codecov-action
    785ed73 fix(Makefile): avoid usage of which
    97099f1 mutate: implement an AddExisting() API
    5adbd99 oci: casext: walk: do not attempt to recurse into un-parseable blobs
    aad89ed oci: cas: add StatBlob to CAS interface
    7091cd1 ci: switch to GitHub Actions
    3ceb144 Add 2 fuzzers

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:28 -04:00
Bruce Ashfield
3b75599096 skopeo: update to 1.6.1
Bumping skopeo to version v1.6.1-10-g3e2defd6, which comprises the following commits:

    52002728 Update github.com/containerd/containerd
    0ad25b2d Bump github.com/containers/image/v5 from 5.19.1 to 5.20.0
    8cbfcc82 do not recommend upgrading all packages
    370be7e7 Improve a comment in the 010-inspect.bats test
    73edfb82 Move to v1.7.0-dev
    49084d2c Bump to v1.6.1
    23183072 Work around systemd-resolved's handling of .invalid domains
    3be97ce2 Beautify a few calls
    49d9fa9f Only look for the layer digests in the Layers field.
    77363128 Don't expect the config blob to be listed in (skopeo inspect)
    0f363498 Cirrus: Use updated VM images
    27b77f2b Bump c/common to v0.47.4
    de714082 tests: skip sif test on RHEL
    697ef595 Bump to v1.6.1-dev
    e4b79d77 Release v1.6.0
    162bbab3 Bump version of containers/image and containers/common
    004519f1 Improve the documentation of boolean flags
    9db60ec0 Document where various fields of (skopeo inspect) come from
    cb74933b Improve the documentation of the argument to (skopeo inspect)
    7f4db3db Update vendor of containers/storage and containers/common
    a4476c35 add a SIF systemtest
    042f4816 Update vendor of containers/common
    bd8ed664 Github workflow: Fix yaml syntax
    b51707d5 Bump github.com/containers/storage from 1.38.0 to 1.38.1
    bb49923a prompt-less signing via passphrase file
    cd58349b Github-workflow: Report both failures and errors
    2858904e Run codespell on code
    923c58a8 Update the vendor of containers/common
    1bf18b7e Bump github.com/containers/storage from 1.37.0 to 1.38.0
    d32c56b4 Update github.com/containerd/containerd to 1.5.9
    6007e792 Fix the pseudo-version of github.com/opencontainers/image-spec
    5aa06a51 Update github.com/opencontainers/runc to v1.0.3
    f6a84289 Bump github.com/spf13/cobra from 1.2.1 to 1.3.0
    c5b45c6c Bump github.com/docker/docker
    c582c484 Add option to preserve digests on copy
    2046bfda Add option to preserve digests on copy
    e7dc5e79 proxy: Also bump compatible semver
    3606b2d1 proxy: Add a GetFullConfig method
    5c82c772 Update github.com/containerd/containerd to v1.5.8
    37d801c9 Update opencontainers/image-spec
    d9401546 Add an option to allow copying image indexes alone
    4dcd28df Use a dynamic temp dir for test

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:28 -04:00
Bruce Ashfield
418b05846e runc-docker: update to 1.1.0-tip
Bumping runc to version v1.1.0-5-gb9460f26, which comprises the following commits:

    986e7c53 libct: fixStdioPermissions: ignore EROFS
    5053a065 libct: fixStdioPermissions: skip chown if not needed
    d2939b6b libct: fixStdioPermissions: minor refactoring
    d7f7b22a VERSION: back to development

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:28 -04:00