Commit Graph

2073 Commits

Author SHA1 Message Date
Bruce Ashfield
3292170646 podman: update to 4.2
We refresh one patch, and drop another that is already part of the
4.2.x release series.

Bumping libpod to version v4.2.0-8-g754ec89a8, which comprises the following commits:

    eb2496a77 Skip / update some tests under runc
    eba1f7749 Bump to v4.2.1-dev
    7fe5a419c Bump to v4.2.0
    754e32056 Final release notes for v4.2.0
    4900394c8 Document behavior of --timestamp when only FROM is used
    b619c7a72 check memory test based on range
    a3778b051 specgen: use sandbox id instead of name for annotation
    fa1085ed0 cmd: refuse --userns if a mapping is specified
    91a1f3022 e2e: Add rootless mount cleanup test
    297c72238 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8
    a6ea3325a start filter flag changes
    a19c5a252 Cirrus: Run Cross builds in [CI:DOCS] mode
    e776425e5 podman info: hide `--debug`
    53a631ca2 ISSUE TEMPLATE: remove `--debug` from `podman info`
    a7d932422 Cirrus: use dnf instead of rpm to install packages
    8c36b8c52 Cirrus: Fix e2e tests for "mount_rootless_test"
    bd3e36040 podman generate systemd --new: allow -h hostname
    5c17d1b14 test: verify manifest inspect must contain OCI annotations
    6b2bbd2d1 podman-volume-import: Reword "precendence"
    54ee42331 man podman-volume-import: Clarify that merge happens
    c5c0efc95 podman generate systemd: handle --sdnotify correctly
    7e7951145 Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
    8b9e5fb08 Use 8k buffer to help clients w/ broken parsing
    7efd81cb8 With --rm option remove container if podman run fails
    346b22f07 Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools
    5b5e53d70 syncContainer: transition from `stopping` to `exited`
    b7feafcb0 Fix: manifest push --rm removes a correct manifest list
    24f219efb Fix: Restore a container which name is equal to a image name
    32848b95f When removing objects specifying --force,podman should exit with 0
    312bef288 test: update apply-podman-deltas for new tests
    9b0a1fa75 build: implement --cache-to,--cache-from and --cache-ttl
    a382bd329 vendor: bump buildah to v1.27.0
    916d51bd0 test: update apply-podman-deltas for new tests
    3a239947a build: implement --cache-to,--cache-from and --cache-ttl
    6b2512f67 vendor: bump buildah to v1.27.0
    6beb3f208 Fixes #15154 Change order when config and connections are written
    eab03100f Add support, and default to rootless w/WSL prompt
    f826ed584 Disable F36 service that is incompat with WSL kern
    d16b42f26 pkginstaller: use correct GOARCH value in case of arm build
    0593ceb01 Cirrus: Update DEST_BRANCH to v4.2
    fb8584332 Cirrus: Improve CI VM image updates for EC2
    d5793db28 Bump back to v4.2.0-dev
    7e1f3106f Bump to v4.2.0-rc3
    1b7e16654 v4.2.0-rc3 release notes
    bf2a53a2e pkginstaller: use correct GOARCH while building podman binaries
    d4481a317 pkginstaller: makefile improvements to avoid redownloading
    1b3844f65 pkginstaller: add makefile target to notarize the built pkg
    64db955e0 pkginstaller: sign qemu-system-* binary for the pkg
    9a820b480 Add support for building macOS pkg installer
    5c95c0920 Add support for creating sigstore signatures, and providing passphrases
    0aebdb687 Hide podman manifest push --sign-by on remote
    b2b3edaca Use signByFlagName instead of copy&pasting the string
    49d40293b Remove libpod/common
    eacee60c8 Update c/common to an unreleased version
    62cc871c6 Update the registry server we test against from 2.6 to 2.8
    52db76373 Use existing REGISTRY_IMAGE variables in more places
    230363225 Use httpasswd from the surrouding OS instead of the registry image
    74155705e fix e2e sign tests
    983cfb90e Final v4.2.0-RC2 release notes
    bf6f79630 Skip one failing test on Ubuntu
    25efc9b2e Fix incorrect release note about regexp
    4acc14b4e Bump to v4.2.0-dev
    81005b8d8 Bump to v4.2.0-RC2
    6fafe120c Final release notes for v4.2.0-RC2
    990ef3cf6 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify
    c85722eb9 pod create --share none should not create infra
    c3e0f8ebe machine: Fix check which is always true
    e6ebfbd1e Set TLSVerify=true by default for API endpoints
    64bc2ee97 Semiperiodoc cleanup of obsolete FIXMEs
    b339045db benchmarks: fix create test
    fd1f5f55a integration test: fix network backend option with remote
    c7fef7316 docs: remove CNI word where it is not applicable
    976f818f1 libpod: do not lock all containers on pod rm
    772e883f8 container wait: improve error message
    206f11d4f Makefile: use order-only prereq for podman-remote
    c4616510a API: libpod/create use correct default umask
    ce8b6cebd compose test: remove cni config copy
    553a70096 compat api: always turn on network isolation for networks
    aef8039d3 compat api: allow default bridge name for networks
    fa7e9f0f8 Compat API: unify pull/push and add missing progress info
    fde39edb9 remote push: show copy progress
    1f48980af fix broken machine test
    cbcbde587 pkg/machine/e2e: do not import from cmd/podman
    69fcf04c6 fix some pkg/machine/e2e test to read stderr
    ce790e61b enable linter for pkg/machine/e2e
    ff7259567 [CI:DOCS] Cirrus: Add prominent gitlab warning
    3edaa174e libpod: create /etc/passwd if missing
    e41113dca e2e: show command and output when a timeout happens
    f6d18ed41 fix goroutine leaks in events and logs backend
    dc1dc4600 podman-remote pull: fix duplicate progress outputs
    2350ef9dd Fix potential leak on mid-stream read error
    7b28a1b7c vendor: remove unused deps
    3aec669e9 Makefile: remove building pages for man5
    ed49f9411 makefile: remove processing of pkg/docs
    24bbd40ce rpkg: remove usage of pkg/hooks
    73ecc5a4b pkg,libpod: remove pkg/hooks and use hooks from c/common
    d151edeea Fix machine test
    86159e39b document isolate option for network create
    c3c07ed09 Update init ctr default for play kube
    6057db75d Remove return error from "containers.pause"
    de8d2cc94 "pod pause/unpause/stop" append "report.Errs" to "reports"
    409fbeaab system tests: new system-service bats file
    d2e2756a4 Print rootfs download as a specific version on Win
    244055030 [CI:DOCS] Fix typo in manifest manpage
    76fa80447 Vendor in latests containers/storage and opencontainers/runtime-tools
    e89550bcd buildah vendor treadmill
    9c1de040b Vendor in containers/(storage,image, common, buildah)
    03eaea8bb Run codespell
    e4b82c77f Add --host and -H as equivalent options to --url
    183fdea5f Use SafeChown rather then chown for volumes on NFS
    17dbce2fb Clean up cached machine images
    e473c5e4b Machine init: create .ssh dir if not exist
    53edd9b65 Podman pull --all-tags shorthand option
    f07d2bac4 Cirrus: Trigger podman-machine task by label
    3bd248ae7 GHA: Fix dumb error check
    6d84a9952 Podman stop --filter flag
    a78be890e Switch to `github.com/blang/semver/v4`
    52850ce70 man page checker: enforce stricter options format
    a5827e13c Fixes #14698 Use prepared image for WSL2 machine init
    a4bae330a Add podman events -f to be alias for --filter
    d560c7897 [CI:DOCS] man pages: replace -c with --cpu-shares
    5f5379deb [CI:DOCS] podman-create.md: replace -c with --cpu-shares
    f7707c81a Fix last machine test
    35dc17bfe abi: create new cgroup when running in a container
    7b4ebfa65 podman: always call into SetupRootless
    3b37095b2 utils: call MaybeMoveToSubCgroup once
    edfe80027 podman: move MaybeMoveToSubCgroup to utils/
    b29a52a48 Docker uses "-c" to mean "--cpu-shares" in create and run
    ffd2e6df9 test,manifest-run: declare TARGETPLATFORM before using it
    ca4630ede CI: sanity check for desired runtime
    bf269e634 podman machine: do not commit proxies into config file
    b2f3b28c6 logformatter: link by *task ID*, not build ID
    cfb768a36 fix wrong log message on Trace level
    557b65e09 [CI:DOCS] Improve language. Fix spelling and typos.
    a363b3a65 Initial release notes for v4.2.0-RC1
    f22af2bf8 Bump to v4.2.0-dev
    74aa681e5 Bump to v4.2.0-rc1
    aa29bd6de Update CI base branch
    87793b633 [CI:DOCS] Rewrite the --gidmap option docs
    3bb4cf8ee libpod: read exit code when cleaning up the runtime
    62cdc387d podman wait: return 0 if container never ran
    25d74db45 [CI:DOCS] podman-info.1.md: Update examples
    b41e42f42 test/system/130-kill.bats: use $IMAGE
    81a19a568 Add ports and hostname correctly in kube yaml
    6b9abe69d improve pull-policy documentation
    76d887c77 Fix machine tests
    1e7686df6 Manifest test cleanup: use defer()
    96dd57ca5 podman wait can take multiple conditions
    a46f79883 pkg: switch to golang native error wrapping
    d1754bdd4 Refactored networkPrune function
    1161e8bd5 manifest_test: safer registry setup and teardown
    61a67a07b pkg/machine/qemu: start VM check if qemu is alive
    a26cf638e machine: qemu fix chardev id starting with letter
    4374038cc pkg/machine/e2e: do not import from cmd/podman
    4cfa8ccb2 machine test: fix endless loop in test
    3adda62d2 [minor] fix duplicate test name
    e8d2d70ee port forward range test: fix many oopses
    0424084b3 fix namespace reporting
    03ee8204d podman machine: make 9p security model configurable; adjust docs
    44bd166b3 test-apiv2: streamed response testing based on response duration
    a5898129c Fix qemu machine startHostNetworking always failing
    cc6faddfa use c/common code for resize and CopyDetachable
    1267515e1 Update play kube docs
    791dbf823 golangci install: explicitly set BINDIR
    4fd5fb97a e2e tests: cleanup: capitalize CONSTANTS
    72aa00aca Fix streaming for libpod/pods/stats endpoint
    ee05bc031 Fix network inspect compat API discrepancy
    9d6efb344 Podman machine info
    65d511c6d Fix podman pod unpaue TODO
    251d91699 libpod: switch to golang native error wrapping
    8f2d9e7a7 podman pod create --uts support
    5633ef1d1 Docker-compose disable healthcheck properly handled
    488eb3b74 (rootful) docker-compose now updates network MTU
    4fe7b8baf Podman system df JSON format outputs `Size` and `Reclaimable`
    b9aa47555 Sync: handle exit file
    49cb288df hack/test/utils: switch to golang native error wrapping
    2da731a7e test: reduce sleep interval
    c02f793ba test: return immediately on connect
    efe1176dd specgen,run: support running container from valid manifest list
    8601ab6b0 Silence setlocale warnings from `podman machine ssh`
    33a474286 pkg/machine: add missing build tags to tests
    5b1867923 TestEnvVarValue: fix assertion
    3fbe93371 envVarValueResourceFieldRef: use int64 for value
    4c5b058e8 fix flake in aardvark tests
    597de7a08 libpod/runtime: switch to golang native error wrapping
    8106568ca test: drop pod-create --device-read-bps test
    5491123c2 [CI:DOCS] troubleshooting: document --tty and CR
    fe559287c docs: Remove -s from systemctl enable --now sshd
    24fcfb5d9 Fix spelling "read only" -> "read-only"
    2f1075dfb Implement proxy support for Windows
    b92149e2a podman pod create --memory
    8cff1c2bf Cirrus: Add podman-machine integration test
    f58d7dbda Cirrus: Fix elevator workaround multi-cloud support
    7131c8472 fix build
    d6678adc9 overlay,mount: convert lowerdir to absolute path for overlay mounts of path
    891dfd3a8 specgen: fix parsing of cgroup devices rule
    5262f7e01 Fix podman machine on Windows
    9c658f490 docs: mention the podman-kube template
    c6fb533ca podman-play-kube template: rename to podman-kube
    bd51410b8 service: do not run under the root cgroup
    5c3979762 utils: move the cgroup if root on cgroupv2
    e8adec5f4 cmd/podman: switch to golang native error wrapping
    7bbfb3eb0 api,images: add support for LookupManifest to Image remove API
    64ec894c5 [CI:DOCS] Update podmanimage comment.
    d9ff0fd15 Only allow Rootless runs of Podman Machine
    6904b1a61 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    5790caaef bindings: Add support for Delete in pkg/bingings/manifest
    1affceb29 runtime: unpause the container before killing it
    7f994a80d only create crgoup when not rootless if using cgroupfs
    59a7ac210 Make `podman machine stop` wait for qemu to exit
    2ee9fe4cb vendor containers/common
    79a38a2c6 Add test for restore runtime verification using non-default runtime
    8e3a46a87 Fix runtime check during restore
    6c4c050d3 fix volume reporting in system df
    cc4914633 Docker compat returning unknown "initialized" for `status.status`
    6d3520e8b podman image scp remote support & podman image scp tagging
    dc58a7306 Makefile: don't try to build rootlessport on FreeBSD
    c55feb7bf Makefile: don't use '-t' to specify the directory to install manpages
    af16edf49 Makefile: use GNU sed to convert manpages on FreeBSD
    94a634fcf Makefile: use bash to evaluate tool paths
    0e03a64f9 pod: ps does not race with rm
    0cabd8006 pods: move code to a new function
    3b10c1b78 Use Regexp in volume ls --filter name
    aada13f24 volume: new options [no]copy
    a4094530b volume: drop TODO comment
    443a2afdb volumes: switch order of checks
    28e2a604b vendor: update containers/common
    99f68898c reveal machine error, ignore false state
    9cb93c6f9 go.sum: run make vendor
    0c1a3b70f Show Health Status events
    386ea49cf Show starting state when machine is starting
    66c62eb96 Implement CatchAll and StopCatch in signal_common.go
    345778ece Fix "podman run port forward range" flake
    4c5788bac Fix spelling of GetCriuVersion
    590290597 Add missing criu symbols to criu_unsupported.go
    2792e598c podman cgroup enhancement
    09754d21d [CI:DOCS] Minor update to podmanimage upstream docs
    041947b11 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5
    3619f0be9 Fix: Prevent OCI runtime directory remain
    a4ae22df8 Workaround for bug 14653 (checkpoint flake)
    491857a88 Use HaveLen instead of len in podman machine list e2e tests
    f0b9e56e9 Fix machine list: --format implies --noheading
    2fab7d169 add podman volume reload to sync volume plugins
    6e8953abf test/testvol: rework testvol binary
    fcc25afa5 test/testvol: update container image golang to 1.18
    472f79f08 test/testvol: move Containerfile into testvol dir
    0d3aa61be libpod: volume plugin sendRequest remove body bool
    ad78d239d fix system connection and scp testing
    3a810b8d2 Two fixes for DB exit code handling
    30e7cbccc libpod: fix wait and exit-code logic
    15188dce0 conmon: silence json-file error
    2eda547dc podman run/create -v relative filepath support
    ef563c5a1 logformatter: link to logs using Cirrus API
    aa4279ae1 Fix spelling "setup" -> "set up" and similar
    0320ce37d Fix system prune output message
    7ef282d64 Remove lorgus.Infof on bindings start and attach
    132393d15 Update basic_networking.md
    4a981c490 allow filter networks by dangling status
    050693b2e bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    ecf225019 rootless: attempt to join all specified paths
    9afd5e31c rootless: improve error messages
    99258703a rootless: do not ignore reexec_in_user_namespace_wait errors
    cfba09f68 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4
    1f539a264 api: show the memory limit specified for the container
    7f82c4323 Fix typos
    f451b68df podman pod create --shm-size
    46da7bc78 podman machine init --now: respect proxy envs
    bb5bd09ea API: containers/json always set application/json content type
    282714090 [CI:DOCS] "setup" -> "set up" in source code comments
    dda68201a [CI:DOCS] Rewrite --env docs
    948866e8a Update to use gopkg.in/yaml.v3
    075c9ac45 .cirrus.yml: fix matrix expansion by properly merging YAML mappings
    809044576 vendor in latests containers/image
    ce3d0954a Open Windows tutorial after MSI installation
    a3b3f1723 linter fix from #14299
    065302bd5 Cirrus: Fix build. dep. missed in #14521
    3af047b63 Vendor in latest containers/storage
    09c462d73 fix "podman -h" help output
    6c5e1420e Make it clear the REST API could be a security issue
    28a38617e [CI:DOCS] fix typos in prerequisites for Fedora and make binaries sections
    b3f094a61 test/system/410-selinux: fix for newer runc
    e69691c27 Fix interrupting machine start leaves the machine unstartable
    0a202a9f0 system test image: bump to 20220615
    21819254d golangci-lint: update to v1.46.2
    c6b9baa6c system tests: avoid rmi -a ... plus cleanup
    693d439ac Update release notes and README on Main for v4.1.1
    751ba07a7 libpod: improve check to create conmon cgroup
    90a669594 fix CI: golangci-lint is broken on main
    20b3fbe6d systemd socker activation: check listener to prevent panic
    43e12c135 Fix #14416: Use absolute path to WSL binary to create ssh keys for `machine init`
    bfc446eea buildah-bud tests: reenable skipped 'bud' tests
    455f4c782 CI: APIv2 tests: add rootless
    232b3e342 buildah-bud tests: add arg sanity check
    41528739c golangci-lint: enable nolintlint
    1b62e4543 golangci-lint: add systemd build tag
    fcfcd4cdb container: do not create .containerenv with -v SRC:/run
    4811cb110 podman system prune support prune unused networks
    5e9d20448 Update vendor of containers/buildah
    608ad7d11 Non-running containers now report statistics via the `podman stats` command
    958759a71 podman pod clone
    8d3e6577a Fix M1 QEMU flags
    b7c283759 Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /test/tools
    48cf1d258 podman-remote push --remove-signatures support
    d4272bed5 podman cp: do not overwrite non-dirs with dirs and vice versa
    46c8da7d9 vendor buildah@main
    7b3e43c1f podman volume create --opt=o=timeout...
    80d5a00bb Fix Remote filtering embedded directory test
    2b97795c1 APIv2 tests: (try to) fix flaky registry panic
    81153ffa2 Introduce 'Starting' status for machines
    b13fc1bf9 patch for pod host networking & other host namespace handling
    5614c29ce compat api: fix regressions from "Swagger refactor/cleanup"
    eed0e6671 Pass '--file-locks' to OCI runtime at restoring
    c77691f06 Do not error on signalling a just-stopped container
    7e9767502 Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
    549bffe58 shell completion: fix problems with container path completion
    bce97a3b5 apiv2 tests: clean up
    700248bfe Update remote_client.md
    254048e17 Cirrus: Fix artifact passing when dep. skipped
    f0516a014 --userns=keep-id,nomap are not allowed in rootful mode
    126686f3d Podman images generated with empty /etc/containers/storage.conf
    20aaaa382 Minor: Fix podmanimage README links
    dc4a01ec6 Add docs of changing default netavark networks
    ed1e4f94f Infra Inheritance patch
    5fc3d871a Cirrus: Simplify only_if/skip + optimize multiarch
    a69a48b0d test/e2e: network dis-/connect test remove unhelpful assertions
    90d80cf81 use resolvconf package from c/common/libnetwork
    ddf1d2cb3 update c/common to latest
    811cce5a8 libpod: store network status when userns is used
    0f424e90d Bump github.com/docker/docker
    e41d4a247 Add missing tests for manifests API
    2a0d896b3 runtime: make error clearer
    2c12f7bd1 Add some Readme updates around machine
    8533ea000 Privileged containers can now restart if the host devices change
    335925f47 Minor: Remove useless addition of storage.conf
    aadae49ad overlay-volumes: add support for non-volatile upperdir,workdir for anonymous volumes
    5c508cb4e Bump github.com/stretchr/testify from 1.7.1 to 1.7.2
    67ea5fdad Cleanup the leftovers used with ginkgo focus option
    1fc5a107a [CI:DOCS] PodmanImage Readme touchup
    22e442ee2 tests: buildah-bud fix reason for skip
    9de092ec0 Fix secret-verify-leak flake: set build context to subdir
    259c79963 Improve robustness of `podman system reset`
    87b05b6a6 Prevent simultaneous machine starts
    3c9b75c21 Using logDriver instead of query.LogDriver for podman play kube
    241458666 podman logs k8s-file: do not reassemble partial log lines
    2b0cb3002 test/e2e/save_test.go: fix flake
    b8de285a4 Stop machine before force removing files
    1b6505d74 Update test output expectation
    9a34b88c9 changed megabyte to mebibyte
    831d6534f fix pod network handling with a host network
    5023ce585 Align docker load and podman load output
    f2bbbd20d shell completion for paths inside the image/container
    69e44bbcc bindings: add manifest should follow es_model while marshalling OSVersion and OSFeatures
    5b9729c47 Document protocol usage for --publish
    6dffa453a Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
    44f11ec2c podman-remote: enable support for additional build-context on macOS, remote
    3fa09e9db Makefile: Handle unexpected empty var. values
    fc95f832a Podman image: Mass cleanup + fix missing storage.conf
    f728b7b5a podman pod create --uidmap patch
    8291b51ce expose podman.sock in machine inspect
    dbdc26a4c Removed `imageStream` hardcoded value
    2805c7353 pkg/specgen: parse default network mode on server
    78d1f5d7d fix "tail 800 lines: journald" flake
    193397290 Add ExecStop and dependencies to fix shutdown
    f91c852fa Makefile: force podman-remote-static to linux
    cef044d85 Bump gopkg.in/yaml.v3 to v3.0.1
    205c8c071 fix podman container restore without CreateNetNS
    16e8b2f32 podman stats: work with network connect/disconnect
    ec576a549 podman volume export/import: give better error
    4a8346551 podman machine ssh: do not print warning everytime
    7e69e2b53 Podman no-new-privileges format
    0e58636c3 podman machine ssh: set correct exit code
    a6f8cad54 fix bad import path for cmd/podman/utils
    c0ad9a43e Mount propagation works with named volumes
    f23ae4d66 healthcheck: wait for systemd operations
    8efdbf5c4 Add API support for NoOverwriteDirNonDir
    e13c5f3a9 Refactor populating uptime
    3a32d60e5 [CI:DOCS] Quick typo for troubleshooting
    ea1a8e243 Move Attach under the OCI Runtime interface
    fb163976f Support setting image_volume_mode in containers.conf
    d730f2b25 Add Authorixation field to Plugins for Info
    ab0728421 docs: note regarding version compatablity between server and client for bug fixes
    87ad46060 Remove TODO comment
    66a56ce05 vendor: bump buildah to v1.26.1-0.20220524184833-5500333c2e06
    6124b5199 build: allow using cache explicitly with --squash-all using --layers
    8c1128db4 Cirrus: Fix several TODOs
    426a07e70 Combine the CheckAllLatest CID and PodID functions
    c9f6639ec Fix TODO in parse/net.go
    32aa12a28 Remove TODO from pods/ps.go
    8c781416b Fix swagger model of `InspectPodResponse`
    de54d33d2 Fix test block bypass instructions
    b730e7328 cmd, build: remove redundant squash processing logic
    66c846616 Support remote deadlock errors in rm
    badf76e17 Remove more FIXMEs
    9fcfea764 First batch of resolutions to FIXMEs
    02c437405 [CI:DOCS] Add play kube support docs
    338f01237 Remove unused archive flag from diff commands
    cb76d1523 fix f35 integration test network flake
    c3677f515 test/system/250-systemd.bats: clean up outdated TODO
    c9279d4d9 pkg/bindings/play/play.go: drop TODO message
    462cb3370 pkg/bindings/containers/archive.go: drop TODO
    60e31d87d pkg/auth: drop the TODO
    09ae060a7 pkg/api/handlers/compat/images.go: drop TODO message
    c04ec104d libpod/pod_top_linux.go: s/TODO/NOTE/
    b19e2d6f8 events: drop TODO comment
    429b1f768 Fix codespell errors
    4a447a213 work queue: simplify and use a wait group
    2ce475576 Allow podman pod create --share +pid
    df394b521 Allow podman pod create to accept name argument
    70f147d01 cmd/podman/common/completion.go: fix FIXMEs
    2be4589b5 Remove TODO re: storage-driver
    8de3e9102 help-message system test: catch more cases
    33628003c Put current product first and historical product second
    2400d1d52 go format previosly touched files
    b3e2324f5 test/e2e/search_test.go: re-enable registry.redhat.io test
    956e2e1b8 pkg/domain/infra/abi/images_test.go: remove commented code
    fbeef1d70 image list: remove unused ConfigDigest
    90a6f39d0 pkg/inspect: remove unused ImageResult type
    5268314e5 podman image mount: print pretty table
    d3d3a207d pkg/bindings/images/rm.go: remove redundant FIXME
    6c6e97018 pkg/bindings/images: remove TODOs re: system context
    d924c46da autocomplete `podman search --filter`
    f98a7d140 build(deps): bump github.com/vbauerster/mpb/v7 from 7.4.1 to 7.4.2
    8af98b342 contain_top_linux.go: s/TODO/NOTE/
    f5450b1e8 system tests: fix flake waiting for container to run
    2133edb2c compat, build: suppress step errors when quiet is set
    8fbb933f5 look for firmware based on the path of qemu binary
    5d37d80ff Use containers/common/pkg/util.StringToSlice
    d29dec967 Cirrus: Fix building multiarch images
    dde428642 Bump Compat API maximum version to v1.41
    b7dbc505b Instead of erroring, clean up after dangling IDs in DB
    e22611baf fix typo
    ac154425d Update _play kube_ doc following PR #14266 merged
    c984956f9 fix compat image resolution
    d66288315 auto update: create an event
    633d5f1f8 fix --init with /dev bind mount
    4960a17a5 fix tests by randomize the device folder name
    94e82121b Support running podman under a root v2 cgroup
    a0d0207a2 fix podman-for-windows.md
    5b79cf15a Swagger refactor/cleanup
    fb219a809 Update c/image
    9c9fc96d2 shell completion: use more constants instead of duplicating strings
    337f8b9d9 shell completion: podman save --format use all valid values
    74f70315b shell completion: update podman inspect --type options
    318e95fd2 shell completion: fix podman event --filter values
    b22143267 linter: enable unconvert linter
    3b0844f99 shell completion --format: add help to function with args
    3d8a1f917 shell completion --format: support maps and functions
    ecd6edb19 shell completion --format: fix embedded struct handling
    11ff5ffd3 shell completion --format: only show usable methods
    eeeb88a66 shell completion --format: only show exported fields
    f5c8c0911 add tests and fix bug when char device pass the test as block device
    653117087 ci: pr-should-include-tests: add more exceptions
    40a1cd4ef Remove GO111MODULES use
    d49efde27 Makefile: rm gofmt target
    9bf81814a Makefile: rm CHANGELOG_* and ISODATE vars
    d2070a39e Makefile: rm -mod=vendor
    2b54bf3e6 Move GOPROXY from Makefile to cirrus.yml
    11d3cf269 Makefile, podman.spec.rpkg: rm GOBIN and GOPATH
    c63bb6b9a Makefile,.gitignore: rm .install.goimports
    e2d2b537a Makefile: rm .gopathok
    d8c42de41 Makefile: rm .install.libseccomp.sudo target
    c632a2efc dependabot: add release-note-none label
    0c9b0e2aa expose block and char devices with play kube
    8684d41e3 k8systemd: run k8s workloads in systemd
    6f9155cbb api: make no-op remote functional in /libpod/build
    21a5ef859 Don't complain about XDG_RUNTIME_DIR, Closes  #1424
    dc435ecb2 Make errors on removing exec sessions nonfatal
    ee782fcb7 Deleting an n use image should return conflict not system error
    977cd9bd1 Update WSL machine OS to enable user lingering
    0961002d9 Update tutorial list to include Podman for Windows
    5b2d5c365 Robust whitespace split of cpu utilization line from /proc/stat
    de4f76e7e Fix strange buildtag edit
    c45d51899 [BZ #2083997] pod: build pause image in custom user NS
    c058b828c Changed permission to 755
    25f80941a build(deps): bump github.com/docker/docker
    2b03a1088 Vendor in latest containers/common
    b8103640a Make sure tests are cleaned up when they complete
    7804f4d29 Add support for machine events on Windows
    a4aa07a07 [CI:DOCS] Treadmill script: add --reset option
    b7ce98619 Fix broken pwd
    1094d7553 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    9df390655 shell completion --format: work with pointer functions
    03af8213c sdnotify: send MAINPID only once
    840c120c2 play kube: service container
    ecf0177a0 vendor c/common@main
    16e22dbbe vendor: update c/storage and c/image
    37e30bcb2 Fix hang in build-each-commit test
    e76a07087 [CI:DOCS] man pages: fix inconsistencies
    60258925a test: update fedora toolbox image
    1834afd3e [CI:DOCS] Benchmarks: new tool for parsing results
    813f6a68f [CI:DOCS] fix `make localbenchmarks`
    876b05cdb Add initial Windows guide
    c7c00ce55 Add more machine tests
    d0ca90b3e test: simplify cleanup code
    0774a4ce1 kube: add support for --userns=
    2b5778d41 Cirrus: Update images + new automation library
    9ffc2a6ac Cirrus: Fix Makefile including 'hack' in $PATH
    abf4f77bc Cirrus: Simplify use of cache in automation
    237f76126 Cirrus: Simplify rootless ssh setup
    c1656e2ee Cirrus: Guarantee $DEST_BRANCH is passed through
    82f2b3edb bloat check: make more robust
    9e1ee081f kube: honor pod security context IDs
    82a4b8f01 kube: refactor setupSecurityContext to accept directly the security ctx
    be5abf03a fix: Container.cGroupPath() skip empty line to avoid false error logging
    c48657671 test skipper: check for $DEST_BRANCH
    8ecd0b5bc fix broken CI test
    bb8f53a72 test: fix "podman search format json"
    b58e7e7f1 play kube log tag handling
    a1a299797 Update version to v4.2.0-dev
    bce014e19 Update release notes for Podman v4.1.0
    9cd74a13c update podman version in readme
    0dbfd376f Add 4.1 branch to API documentation
    2a401b3ff Bump github.com/docker/docker
    ed8c1dfb4 libpod: add c.ConfigWithNetworks()
    d7f43e677 test: fix failing TestPostDeleteHooks
    cf35168f0 test: use `T.TempDir` to create temporary test directory
    6ddccd94f e2e: pull_test: speed up --all-tags
    c38e7e5f6 build: disable --output for podman-remote clients
    140fb3ae1 e2e: pull_test: squash --quiet test
    669401c31 e2e: pull_test: move tests around
    2fa906cca e2e: pull_test: remove redundant tests
    6eaa9ca26 e2e: manifest_test: use cached registry
    ed159f864 Vendor in containers/buildah@v1.26.1
    ebde52583 update rootless_tutorial.md
    7c59f1d07 Fix usermod call in rootless_tutorial.md
    5fa6f686d Report correct RemoteURI
    386614367 exclude new tools vendor dir from validate
    f6b397bf1 add dependabot config for test/tools go.mod
    3b9177995 vendor test tools in submodule
    80744c644 podman system reset removed machines incorrectly
    9974c90cc libpod: treat ECONNRESET as EOF
    245151e62 Add more unit tests
    a5800c78f machine events: only open sockets when needed
    36c5e6e0c Bump github.com/containers/storage from 1.40.0 to 1.40.2
    ccd576504 play kube default log driver
    8781a3635 benchmarks: push/pull
    1585b175d pass networks to container clone
    88015cf0d Implement --format for machine inspect
    8da5f3f73 Add podman machine events
    9166894c6 vendor test dependencies instead of installing via network
    6e2e3a78e generate systemd: pods: set exit policy
    5fac879ea vendor treadmill script: run 'git add vendor'
    0bb484937 Additional stats for podman info
    e247f02a4 Vendor in containers/(common, storage, image)
    e74717f34 Treadmill script: revamp
    e17b56e0c CI: emergency fix for broken go get
    4e44e5b5d Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1
    4eff0c8cf pod: add exit policies
    cfca85356 libpod: unset networks before storing container conf
    77d872ea3 vendor c/common@main
    5b78f9576 Implement machine inspect for WSL
    772ead253 Use simulated dual-stack binds when using WSL
    23de3801d buildah-vendor-treadmill script: yet more checks
    01acc2565 libpod: host netns keep same /etc/resolv.conf
    519820926 fix incorrect permissions for /etc/resolv.conf in userns
    e6557bf0a pkg/api: do not register decoder in endpoint handler
    a48c37df3 fix broken hooks-dir test
    69c479b16 enable errcheck linter
    384c2359b libpod: unlock containers when removing pod
    2902d32c4 Refactor machine inspect
    64a368ba2 remove unused codepath for creating/running ctr in a pod
    6b7fd318b image search --format: add completion for go template
    0d9f19028 shell completion --format: use structs by reference
    cac2b7800 image --format: fix add completion for go template
    7f28fd938 Report properly whether pod shares host network
    cb9a45630 shell completion --format: use anonymous struct field once
    8be978158 network inspect --format: add completion for go template
    f93ba587c shell completion --format: work with nil structs
    589e42c99 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
    a5aea8e50 Three manual fixes
    b3f38c31b Ginkgo: use HaveField() for better error checking
    91ead1528 volume: add new option -o o=noquota
    ea1fcd7bc podman search: truncate by default
    c721acf08 podman machine starting test
    3b8fa515f Emergency fix for new CI linter
    83a75d2a3 Produce better test error messages
    461b73f56 Github PR template: add release-note block
    22b421dd7 Add CreatedSince & CreatedAt format fields to podman image history
    e7390f30b Allow changing of CPUs, Memory, and Disk Size
    9c0c29f08 Cirrus: Fix ownership of repos. to keep git happy
    d4e30b33a Temporarily skip netavark/aardvark e2e test
    cf449e81a Cirrus: Temporarily update netavark/aardvark-dns
    cd7cff6bb Cirrus: Test w/ netavark/aardvark-dns in F36+
    3a07fc446 Cirrus: Update to F36 CI VM Images
    a73425a0b Revert "Cirrus: Disable F34 aka prior-fedora testing"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
f6bf30aca6 docker: ensure that sysvinit and systemd are exclusive
The sysvinit functionality conflicts with the docker daemon
settings required for the systemd docker.socket.

Ensure that the sysvinit capabilities are only enabled if
systemd is not present.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
5cfc4c3f80 kernel/cfg: add CONFIG_NETFILTER_XT_MATCH_IPVS to docker config
This is an optional feature (but still commonly used), so we add
it to our default fragment.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
05f316f70a lxc: update to 5.x and meson
This is a significant update to lxc as autotools has been replaced
with meson.

Not all existing autotools options have meson equivalents, so there
may be differences in functionallity.

As part of this update, and unused features have been dropped, mainly
when the meson equivalent was not available.

Basic / core functionality has been tested with systemd, sysvinit
requires more work, and patches will be accepted to restore that
capability.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Andrei Gherzan
538e94e674 skopeo: Mark CVE-2019-10214 as fixed
This CVE was fixed[1] in the container image go library skopeo is using
(vendoring). The current version of the image go module is v5.20.0 while
the fix landed since v3.0.0[2].

See RedHat's resolution[3] for more details.

[1] https://github.com/containers/image/issues/654
[2] a3d69a4a89
[3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:54:25 -04:00
Andrei Gherzan
d55da717eb podman: Rename podman-rootless.conf sysctl file to aid overrides
Files are sorted in lexicographic order. Moving podman-rootless.conf to
something greater then '00' would help with systems providing default
values in other configuration files that can be overridden by
podman-rootless.conf.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-23 21:44:32 -04:00
He Zhe
46f9004365 irqbalance: Use built-in irqbalance.service instead of local one
The local irqbalanced.service was written long before when there wasn't one in
upstream. Then upstream created temporary runtime directory /run/irqbalance in
its irqbalanced.service, but no one did this for this recipe. Which renders the
following error.

/usr/sbin/irqbalance[314]: Daemon couldn't be bound to the file-based socket.

This patch starts to use upstream irqbalance.service instead and remove the
local one.

root@qemux86-64:~# systemctl status irqbalanced
* irqbalanced.service - irqbalance daemon
     Loaded: loaded (/lib/systemd/system/irqbalanced.service; enabled; preset: enabled)
     Active: active (running) since Mon 2022-08-22 10:10:22 UTC; 3s ago
       Docs: man:irqbalance(1)
             https://github.com/Irqbalance/irqbalance
   Main PID: 208 (irqbalance)
      Tasks: 2 (limit: 263)
     Memory: 1.4M
     CGroup: /system.slice/irqbalanced.service
             `-208 /usr/sbin/irqbalance --foreground

Aug 22 10:10:22 qemux86-64 systemd[1]: Started irqbalance daemon.
root@qemux86-64:~# ls -l /run/irqbalance/irqbalance208.sock
srwxr-xr-x 1 root root 0 Aug 22 10:10 /run/irqbalance/irqbalance208.sock

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-23 21:43:33 -04:00
Joe Slater
dccd964570 ceph: Fix CVE-2021-3979
Ceph-volume does not properly control key sizes.

Cherry-pick from github.com/ceph/ceph.git.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-20 23:23:08 -04:00
Andrei Gherzan
fc1df13027 singularity: Drop explicit runtime dep glibc
There is no need we can see for this dependency to be provided as such -
especially forcing this to using glibc.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-20 23:18:44 -04:00
Martin Jansa
884355eeed dynamic-layers/raspberrypi: drop linux-yocto 5.10 bbappend
* the inc file was dropped in:
  58f5ac6 kernel: drop 5.10 .inc
  but this .bbappend still causes parsing error, because 5.10 recipes
  were removed from oe-core

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-12 09:32:31 -04:00
Bruce Ashfield
e43460f5ed nerdctl: update to 0.22.2
Bumping nerdctl to version v0.22.2-2-ge084a2d, which comprises the following commits:

    013ebdc Bump github.com/containerd/nydus-snapshotter
    37cb3fe Fix `can't get final child's PID from pipe` on rootless (v0.22.1 regression)
    fbbf10e Bump github.com/compose-spec/compose-go from 1.3.0 to 1.4.0
    7f94a17 fix(hosts): extra-host params should be 'domain:ip'
    a4fd8fa go-ipfs (0.13.1) -> Kubo (0.14.0)
    f3001be doc: readme and help msg about firewall plugin
    0e81051 ps_linux_test.go: improve variable names
    cae0f01 README.md: `nerdctl system prune` is now available
    8f57e95 add label display support in ps subcommand
    2dfa2a4 Bump github.com/compose-spec/compose-go from 1.2.9 to 1.3.0
    d0fe7ab skip reconfig network when missing
    83ce9a0 Add extra logging warning for log options
    09bd981 Pass https://index.docker.io/v1/ to GetAuthConfig() for Docker Hub
    17771d0 Refactor: Abstract the way to  handle remote snapshotter
    0ff788b Add the ability to inspect volume sizes
    3676219 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
    8b6417c fix stats values
    bcedaae optimize tests of stop the sleep container
    014525f support system prune
    81a9a9b add labels in container inspect using dockercompat mode
    81095fb fix yaml pkg vulnerability
    1bb09dd support network prune
    bc68696 Add oom-score-adj option while running
    3507d0b remove useless args from load
    d7ba334 rewrite test of run with init flag
    1f7ec3f Bump github.com/compose-spec/compose-go from 1.2.8 to 1.2.9
    5ecf242 Bump github.com/containerd/go-cni from 1.1.6 to 1.1.7
    cccf19e test fluentd log driver without build image
    1199ac5 small refactor for rmAction
    a4b51e2 bridge network use free subnet
    e027ce4 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    0818f7d Bump docker/build-push-action from 3.0.0 to 3.1.0
    a78de9a support --network=container:<contaienr> for sharing network namespace
    df376b8 Remove duplicate host record when update the DNS
    685371e TestRunWithJsonFileLogDriver: make log message more specific
    357fdfd Fallback to Containerfile when Dockerfile is not present.
    de3d05a README.md: clean up
    e06e3a6 ignore force remove container error
    4a7f6eb support force remove image
    f2cc696 fix stats for no-stream
    a7dd254 fix flaky test TestRunWithJsonFileLogDriver
    663541c README.md: clean up
    ad0e42f infoutil: make runc version output consistent with Docker
    e016c55 infoutil: relax buildctl version format
    2087827 fix found multiple IDs when container walker
    0e07104 update buildg (0.3.0)
    bd78358 update IPFS (0.13.1)
    ddf5b5a update stargz-snapshotter (0.12.0)
    8f5ac28 refactor container restart command
    70826c7 update imgcrypt (1.1.6)
    08f9f6b Display buildkit and runc version in nerdctl
    2c5bd7f Log matches of log paths to understand TestRunWithJsonFileLogDriver flakiness
    15decf3 wait for detached container running before exec
    fa392af Add document about overlaybd
    41c63f3 fix json file logging filenames
    9c63c61 container exit should terminate tail logs
    ff6e75f update unimplemented flags for run
    28de2e3 support volume prune
    a74e852 add update flag blkio-weight
    eb3715a fix dockerfile local dir
    e20c145 support image prune
    79ed9ca TestRunCgroupV1: fix cgroup version check
    d746ab9 fix broken deps for dbus
    5e91753 add flag kernel-memory
    9b4287e typo and return error
    67e2ded remove failed container state
    efd3961 adjust ps header
    b35ae67 cli: implement -s/--size option for nerdctl ps command
    e8127e6 docs: add nydus snapshotter description
    f20cb34 Validate formats before ticking
    8b5a0ec Bump github.com/containerd/nydus-snapshotter
    fb3eb33 fix error message
    5f41b41 support container prune
    4637c99 add TabReader for test
    4f9c3ed fix some error
    86056b8 Enable staticcheck in golangci-lint
    34e3ad8 feat: makes nerdctl available to pull nydus images
    76fbdbe Support multiple tags in nerdctl build.
    e56ac42 Fixed gosimple errors in issue #1134
    afb0c57 bind-mounts: add rbind option defaultly
    6a382f7 support stop-signal and stop-timeout
    f9522ae support dns-search and dns-option for compose
    486100d volume: set fstype to bind if mount options contains bind or rbind
    eaf3354 remove invalid debug
    50a8eaa show name for images
    0b67272 support dns-search and dns-opt
    2f79653 fix: using default resolver
    2b5a45b add group-add flag for run
    a5b0d1d go mod tidy
    b1930a7 1117: specify needsLoading when output flag is specified.
    abaa167 Bump github.com/compose-spec/compose-go from 1.2.7 to 1.2.8
    7954e19 Bump github.com/ipfs/go-ipfs-http-client from 0.3.1 to 0.4.0
    12aae30 Bump github.com/multiformats/go-multiaddr from 0.5.0 to 0.6.0
    8b34083 Fix typo in instructions on how to run docker compat tests.
    daea277 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    b1b226f Bump gotest.tools/v3 from 3.2.0 to 3.3.0
    0bcefdc Update golangci-lint version to 1.46.2
    063c025 fix stylecheck errors
    75ff587 CI: unparallelize TestRunAddHost
    1c191a1 add umask
    676c5c3 Validation for nerdctl load to fail when stdin is empty.
    1192a04 Fixed gosimple errors in issue #1134
    02582d0 go.mod: golang.org/x/* master
    e86deda go.mod: github.com/containerd/containerd v1.6.6 (=> v1.6.1-0.20220616041926-9c6154bff158)
    c078e20 pkg/logging: refactor
    92e3cc2 Initialize the log file to fix `nerdctl compose up` error
    5c3aec6 add memory-reservation memory-swappiness
    7fbafcb fix swap memory
    261da0c Add GitLab Container Registry documentation
    4f6b914 MAINTAINERS: add Zheao Li as a REVIEWER
    04a8450 update IPFS (0.13.0)
    8ac66ef update fuse-overlayfs (1.9)
    21edc9d update runc (1.1.3)
    ffdc0aa fix log-driver  name not check error
    8717e4f Implement fluentd logging driver
    a817a8b add flag memory-swap
    44c80db Adding tests for start and handling AkihiroSuda feedback
    db4a505 Adding --attach flag to start
    0b9e9cb add flag oom-kill-disable
    404c532 [#868] Update moby/sys to fix the FreeBSD build
    3b1df0e Bump github.com/docker/cli
    d50fec4 Bump github.com/docker/docker
    cfe8ca0 Bump github.com/moby/sys/mount from 0.3.2 to 0.3.3
    6386775 update buildg (0.2.0)
    26639fd update containerd (1.6.6)
    35f60d6 go.mod: github.com/containerd/containerd v1.6.1-0.20220606171923-c1bcabb45419
    8a36c0d persist default network config
    bb3f9ee Bump github.com/vishvananda/netlink from 1.2.0-beta to 1.2.1-beta.2
    eae4b2d Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
    3007fc8 Bump github.com/containerd/go-cni from 1.1.5 to 1.1.6
    b00fa84 fix squashes --add-host with the same ip
    dd8a0ff Implement journald logging driver
    f087279 Bump github.com/compose-spec/compose-go from 1.2.6 to 1.2.7
    60b77c1 Bump github.com/containerd/cgroups from 1.0.3 to 1.0.4
    96a3276 CI: TestRunCgroupV2: add --memory-swap=-1 for Docker with cgroup v2
    5a47349 CI: skip TestRunCgroupConf for Docker
    e077b38 CI: use GHA ubuntu-22.04 for cgroup2 tests
    08924b9 docs/compose.md: update the compatibility information
    423600f Bump github.com/compose-spec/compose-go from 1.2.5 to 1.2.6
    793a95d enbale entrypoint as stringArray
    feb1316 Bump github.com/compose-spec/compose-go from 1.2.4 to 1.2.5
    193e8d6 Bump up buildg to v0.1.0
    04f9b47 update BuildKit (0.10.3)
    0aeed30 update runc (1.1.2)
    fc87586 go.mod: golang.org/x/* master
    f66b943 refactor TestRunIpcHost
    b7d9eee create/run: add ipc flag to create and run commands
    998f457 Bump github.com/docker/cli
    47e7eb7 Bump github.com/docker/docker
    773a413 Support interactive debugging of Dockerfile
    d81dcf3 logging: ensure that MagicArgv1 is always argv1
    004f2ff README.md: typo
    70c90f1 Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0
    7c3fd8f add bind-nonrecursive for mount
    47ff895 fix flaky test TestComposeConfigWithComposeFileEnv
    c5841dd pkg/taskutil: let StdinCloser implement io.Closer
    c9881fd supporting COMPOSE_FILE environment variable
    b4f2e5f Support logging in compose file
    0fc816a Support for networks in compose files
    0b9d48e Bump github.com/docker/docker
    e031d13 update containerd (1.6.4)
    abaa4d0 Support riscv64
    49f6d78 Bump github.com/docker/cli
    7e3dc43 Bump docker/build-push-action from 2.10.0 to 3.0.0
    450486a Bump docker/login-action from 1.14.1 to 2.0.0
    e11fb20 Bump docker/metadata-action from 3.8.0 to 4.0.1
    d3e449a implement log opt with containerd logging driver
    97ece6a enhancement restart policy
    81528d5 support rename container
    56b0f10 update BuildKit (0.10.2)
    e258cda update RootlessKit (1.0.1)
    489a521 update slirp4netns (1.2.0)
    d73ef7a fix default driver capability for gpus
    ed10fec Bump docker/metadata-action from 3.7.0 to 3.8.0
    f853dc4 Bump github.com/containerd/go-cni from 1.1.4 to 1.1.5
    18ea81f Fix `flag -t needs -i to be specified together` restriction
    b2fa405 Makefile: avoid flattening `nerdctl-X.Y.Z-go-mod-vendor.tar.gz`
    ff1aec4 info: add --mode=native to show full plugin info
    a629145 update containerd (1.6.3)
    62979d7 Bump gotest.tools/v3 from 3.1.0 to 3.2.0
    6d1bfc6 fixes #1004 : Build image only when changes merged to master
    10990ad Bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5
    dbc0ec5 Bump github.com/ipfs/go-ipfs-http-client from 0.3.0 to 0.3.1
    c63982b Bump actions/checkout from 3.0.1 to 3.0.2
    85ca787 [Carry 643] cp cmd
    90a3a2c Bump github.com/tidwall/gjson from 1.14.0 to 1.14.1
    8385be4 add test case for nerdctl inspect to check mounts field
    a766555 show mounts info for nerdctl inspect

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
d90ad944d5 k3s: update to 1.24.3
We bumping to 1.24.x, along with the k3s changes, we update our
dependencies to allow a vendored build.

Dependencies were gathered via: go list -m all  | sort | uniq > mod.all

And then processed to generate the SRC_URI fetches and relocations into
the build.

We also change our TAGS to avoid two different errors. btrfs
build restrictions:

   package command-line-arguments
           imports github.com/k3s-io/k3s/pkg/cli/agent
           imports github.com/k3s-io/k3s/pkg/agent
           imports github.com/k3s-io/k3s/pkg/agent/config
           imports github.com/k3s-io/k3s/pkg/containerd
           imports github.com/containerd/containerd/snapshots/btrfs/plugin:
   build constraints exclude all Go files in github.com/k3s-io/containerd@v1.5.13-k3s1/snapshots/btrfs/plugin

And ctrd, which leads to the following (which is also
found on non Yocto / non-cross build k3s builds):

  # github.com/containerd/containerd/pkg/cri/server
  ../../go/pkg/mod/github.com/k3s-io/containerd@v1.5.13-k3s1/pkg/cri/server/instrumented_service.go:36:9: cannot use &instrumentedService{?} (value of type *instrumentedService) as type grpcServices in return statement:
        *instrumentedService does not implement grpcServices (missing ListPodSandboxStats method)
  ../../go/pkg/mod/github.com/k3s-io/containerd@v1.5.13-k3s1/pkg/cri/server/service.go:156:9: cannot use c (variable of type *criService) as type CRIService in return statement:
        *criService does not implement CRIService (missing ListPodSandboxStats method)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
19375812f9 crun: update to 1.4.5
Bumping crun to version 1.4.5-74-gba3cb60, which comprises the following commits:

    5af21e2 linux: fix idmap annotation
    c75b58d wasm,wasmedge: drop support for experimental WasmEdgeProcess
    22c6181 linux: fix creating devices in the rootfs
    6f46ad5 chore(wasmedge): remove legacy option
    0de6bb2 fix unknown type name 'uint64_t'
    3a16555 linux: fallback to netlink to setup lo device
    1a3f8f1 linux: use $PATH for newgidmap and newguidmap
    74679c6 krun: use library soname in dlopen
    0130f08 krun: limit the number of vCPUs to 8
    2a4458d linux: fallback to tmpfs mount if umount fails
    fd33331 artifacts, centos9-build: add libprotobuf-c-dev for protobuf headers
    77f5c99 linux: devices mounts should have NOEXEC and NOSUID
    c923cec tests: add wasmedge build test
    33f900c fix(wasmedge): breaking changes in wasmedge c api
    699757b test, podman: skip podman pod create --share-parent test
    eb4ff94 handler: move notifer for phase HANDLER_CONFIGURE_AFTER_MOUNTS just after finalizing mounts
    b02a68d linux: honor mount mappings
    8d774c5 libocispec: sync from upstream
    38f60b1 ci: re-enable and fix clang-format
    d21594a *.c: clang-format
    9ed3c1b mono: remove incorrect wasm headings from mono docs
    c44937b tests: disable "podman kill paused container"
    965129b test/check: fix wrong argument
    17d1c16 cgroup: make target cgroup threaded if needed
    77d2ac5 readme: show crun logo
    2ebd7fc Adding crun logo SVG file
    ec9ab49 container, exec: honor process user's uid while setting HOME env
    d8a0c7f tests/podman/Dockerfile: build on fedora:35 and fedora:36
    21de997 copy_recursive_fd_to_fd(): copy the whole file
    3445f0f tests: add tests for covering '--pid-file' and '--no-new-privs' options
    e48db34 mono: add documentation and tryout example
    f8b85e8 windows/mono: bind mount windows dlls and runtime config from host
    0df040d handler: add support for HANDLER_CONFIGURE_MOUNTS for handlers
    6b3b4dc linux: add public api libcrun_container_do_bind_mount for adding ctr mounts
    009430c windows: add mono based native dotnet handler
    eb48a65 cri-o: bump golang to 1.18.1 for capnproto.org/go/capnp
    6cc7b03 test: set /crun as safe directory on containers running the tests
    2f13875 linux: create missing cwd
    1e30424 cgroup: remove tun/tap from the default allow list
    6904cf4 cgroup: add support for cpu.idle
    2824e92 libocispec: sync from upstream
    70deaf0 podman-tests: change default log-driver to k8s-file instead of journald
    c381048 NEWS: tag 1.4.5
    359e26d crun.1: regenerate
    f0cd1a7 .github: fix CI
    9998f00 linux: hooks inherit env if not specified
    9e361c8 tests: specify the user in the form UID[:GID]
    4a61eb1 github: fix CI
    db77ef2 libcrun: fix typo
    69289ce tests: add an environment variable
    81ccd00 criu: add support for different manage cgroups modes
    27b7fe5 tests: specify an additional capability to add to the process
    cdbc357 tests: delete multiple containers
    a39b07d podman: skip authenticated push
    0ce2f2d exec: fix double free
    5a528f4 docs: fix dependencies on RHEL/CentOS 8 section
    cd93941 git-version-gen: fix version comparison
    38256da tests: disable failing CRI-O tests
    6521fcc NEWS: tag 1.4.4
    1aeeed2 exec: --cap do not set inheritable capabilities
    b847d14 spec: do not set inheritable capabilities
    ca75d1f feat(terminal-receiver): make terminal interactive
    ed6e424 remove duplicate "libtool" from install commands
    d10fe74 linux: resolve symlinks in bind mounts
    ba17004 tests, clang-check: install git
    1a4fae9 rhcontainerbot/podman-next COPR autobuild
    77df89b docs: update known issues with CRI and side-cars
    164d753 wasm, kubernetes: support wasm for kubernetes infrastructure with side-cars

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

crun: update runtimespec

Bumping runtime-spec to version v1.0.2-100-g8d0d6d4, which comprises the following commits:

    0da1600 fix rfc link
    9d1130d IDMapping field for mount point
    fc985aa config-linux: update type of LinuxCPU.Idle to *int64
    bc545ec schema: add cpu idle
    1fef707 Update Windows CPU comments
    600a8bd cgroup ownership: clarify that some files may not exist
    b8dbce9 update idle type of LinuxCPU from *int64 to int64
    9d363b3 config-linux: add idle option for container cgroup
    b05eb53 typo: seccompFD -> seccompFd
    0608c1f Switch to GitHub Actions, CODEOWNERS, etc.
    f4ef391 specify cgroup ownership semantics
    104385d config-linux: MAY reject an unfit cgroup
    411082c add youki to implementations.md
    6641127 alphabetize the implementation list.
    84251a4 specs-go: export LinuxBlockIODevice
    3f30167 schema: make with golang 1.16
    34a7544 schema: update README.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
7dd1f5384b umoci: update to v0.4.7-latest
Bumping umoci to version v0.4.7-101-g4270d5b, which comprises the following commits:

    d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    2163223 *: improve io.Pipe CloseWithError usage
    aab35e4 *: implement EINTR-retry logic for io.Copy users

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
e75695455b skopeo: update to v1.8.0
We drop our gpme patch, since it is no longer needed.

Bumping skopeo to version v1.8.0-75-gb95e0811, which comprises the following commits:

    61593fcc Revert "Change a repo used for sync tests"
    62158a58 Vendor unreleased c/image with OCI artifact support
    7900440a Use errors.As() instead of direct type checks
    c654871b Remove uses of pkg/errors
    7abcca93 Modify error messages on failures to close
    f7df4a08 Introduce noteCloseFailure, use it for reporting of cleanup errors
    33116235 Bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    89089f3a Update IRC information
    ba6af16e Use bytes.ReplaceAll instead of bytes.Replace(..., -1)
    2024e2e2 Update & fix skopeo multiarch image Containerfiles
    774ff9d1 Cirrus: Migrate multiarch build off github actions
    899d3686 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5
    2f77d213 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4
    2009d1c6 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    fe022809 [CI:DOCS] skopeo.spec.rpkg: Fix syntax highlighting
    71d450cb [CI:DOCS] Makefile: include cautionary note for rpm target
    37388544 CoPR: Autobuild rpm on rhcontainerbot/podman-next
    38f4b9d0 Enable schema1 support on the test registries
    1b5fb465 Update for docker/distribution CLI change
    e9ed5e04 Use an updated CI image
    bbdabebd Change a repo used for sync tests
    92c0d0c0 Use testing.T.Setenv instead of os.Setenv in tests
    a3a72342 Update go.mod to Go 1.17
    e9379d15 Bump github.com/docker/docker
    69840fd0 Bump github.com/stretchr/testify from 1.7.1 to 1.7.2
    63622bc7 Bump github.com/containers/ocicrypt from 1.1.4 to 1.1.5
    6b584598 Cirrus: use Ubuntu 22.04 LTS
    00a58e48 Update to github.com/opencontainers/runc >= 1.1.2
    263a5f01 fix make completions for all POSIX shells
    0a3be734 Update to gopkg.in/yaml.v3 v3.0.0
    0ad7ec24 Updated skopeo logo with new artwork
    014d47f3 [CI:DOCS] Pin actions to a full length commit SHA
    d78bc827 shell completion: add completion for transports names
    6c2a415f shell completion: add install instructions docs
    9bed0a9e shell completion: add Makefile target
    ebc5573e Stop calling gpgme-config
    1ebb2520 Update c/image
    9b4c1f15 Remove cgo_pthread_ordering_workaround.go
    6863fe2d add completion command to generate shell completion scripts
    3eca480c Bump github.com/docker/docker
    149dea8d Bump github.com/containers/storage from 1.40.2 to 1.41.0
    804f7c24 Avoid hard-coding the location of bash
    e47765ed Config files live in /usr/local/etc on FreeBSD
    13ceb93b Bump github.com/docker/docker
    cd4607f9 Move to v1.8.1-dev
    37727a45 Bump to v1.8.0
    75d94e79 Bump ocicrypt to v1.1.4
    737ed9c2 Vendor in containers/storage v1.40.2
    3c286dd1 Vendor in containers/(common, storage, image)
    b8b0e993 [CI:DOCS] install.md: include distro package info links
    d9035db6 [CI:DOCS] install.md: remove Kubic package info for Ubuntu
    916a395d Cirrus: Update to F36 w/ netavark+aardvark-dns
    8960ab3c Update vendor of containers/(common,storage,image)
    d9d3ceca Use filepath.WalkDir instead of filepath.Walk
    23a46057 Extract four copies of the same loop into a function
    4811c07d Update users of deprecated io/ioutil
    4ef35a38 Add option to specify the identity for signing
    38ae81fa Bump containers/image to include sign identity option
    9b09b6eb delete non-existent option in the cmdline example
    c233a6dc Add dry-run mode to skopeo-sync
    e6802c4d Update skopeoimage/README.md that tags are v-prefixed
    80871786 Bump to v1.7.1-dev
    f45ae950 Release 1.7.0
    3bc06242 Bump github.com/prometheus/client_golang to v1.11.1
    89cd1951 Bump github.com/containers/common from 0.47.4 to 0.47.5
    7f6b0e39 Bump github.com/containers/storage from 1.38.2 to 1.39.0
    f6bf5746 Bump github.com/docker/docker
    a9cc9b91 Improve the (skopeo delete) man page
    ac7edc7d Bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
    c819bc17 Update the command to install golint
    6a2f38d6 Formally record that we require Go 1.15
    2019b79c Use check.C.MkDir() instead of manual ioutil.TempDir() calls
    f79cc8ae Update to Go 1.14 and revendor
    ac4c291f Use assert.ErrorContains
    5aaf3a9e Bump github.com/stretchr/testify from 1.7.0 to 1.7.1
    bd524670 Simplify the proxy server a bit
    693de29e Add various missing error handling
    f44ee2f8 Remove assignments to an unused variable
    a7190099 Rename "self" receiver
    7ba56f3f Add support for docker-archive: to skopeo list-tags
    ad3e8f40 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0
    0703ec6c Bump github.com/docker/docker
    52002728 Update github.com/containerd/containerd

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
f351a925d7 docker-distribution: update to 2.8.1 -latest
Bumping docker-distribution to version v2.8.1-2-gdc5b207f, which comprises the following commits:

    38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16
    96cc1fdb FIx typo
    e744906f Update 2.8.1. release notes

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
bd60f149dc docker-ce: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits:

    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
    6f3f2b6d08 update containerd binary to v1.6.6
    b3bcb15da8 update containerd binary to v1.6.5
    f55b030fa0 system: unbreak build for darwin
    63ab12cd3a Port pkg/system/mknod.go to FreeBSD
    081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea
    8e9d647c01 [20.10] update golang to 1.17.11
    87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8
    27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b
    829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42
    6cbe73bfc0 Rename Reservation to Reservations in the open API
    d9ed3d7e28 update runc binary to v1.1.2
    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10

Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits:

    af0c46d8 Apply peformance tuning to new sandboxes also
    23ffb31f Set ExternalPortReserved for dummy proxy
    9b82e422 Bump hcsshim
    9db86fb7 Only check if route overlaps routes with scope: LINK

Bumping docker-cli to version v20.10.17, which comprises the following commits:

    7502d7e56 Fix dead external link
    308624c3b fix: remove asterisk from docker command suggestions
    de7d866b6 [20.10] update golang to 1.17.11
    240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd9 [20.10] update golang to 1.17.10
    49e9c2ae3 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17 vendor: update x/sys to 134d130e
    31dad66f9 [20.10] update golang to 1.17.9
    80f673bf9 gofmt with go1.17
    3d4cc8e69 [20.10] update remaining files to go1.17.8
    30277a8f8 update go to 1.17.8
    cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c [20.10] docs: reformat table for compatibility
    573a66463 Describe privileged mode in terms of capabilities
    cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f13825 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b872 [20.10] circleci: update buildx to v0.8.2
    55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05 e2e: update docker-compose to 1.29.2
    4ae338b33 docs: reference: remove trailing space to fix yaml formatting
    6380142dd docs: fix (table) formatting, fix some broken links
    82f422fcf docs: build: fix minor markdown and syntax issues
    80fd77903 Update the list of log drivers
    c3d4d623c Fix CMD --ignored-param1 example
    2e82d11de docs: dockerd: fix broken link in blockquote area
    738a6ee1c improve cp documentation with some illustration examples
    246d96bb6 docs: unify "docker create" and "docker run" reference
    2fd0f1705 docs: add missing documentation for --pull flag
    5fa500000 Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b Dockerfile: update xx to 1.1
    6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e30 Fix mistake with env var example in docker run docs
    62d27c32f Update WORKDIR command information
    c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d Update dockerd.md
    b721998b7 Fixing typo (his --> its)
    4065e1246 format create.md table
    f1002eb9f Fix typo
    e97c7b240 added missing closing parenthese
    aa7893763 Update stats.md add example json output
    40fe0573a Update Ubuntu version number references in push.md
    c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d08 Correct device syntax to --gpus
    fd5fc61ec [20.10] Update Go to 1.16.14
    3624019d8 [20.10] update Go to 1.16.13
    f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b31 fix innocuous data-race when config.Load called in parallel
    38dd744a1 [20.10] Update Go to 1.16.12
    4de40a825 Update Go to 1.16.11
    03fa8f92c Update Go to 1.16.10
    9989fdbc4 Update most links in docs to use https by default
    0e20c1fd2 Update Go to 1.16.9
    1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79 docs: some minor touch-ups in checkpoint reference
    8260476a0 docs: remove trailing space to fix generated YAML format
    bce2e1f95 docs: create.md: typo fix
    44064f51c Fix typo in documentation - build.md
    292779add Add doc for BUILDKIT_PROGRESS env var
    f2e79b826 docs: use "console" code-hint for shell examples
    fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089 experimental: fix broken link to "checkpoint and restore" page
    c72057c8d docs: move checkpoint/restore doc from experimental into reference
    77db97d59 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b docs: fix some broken anchors
    d0014a86b docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55a docs: fix search results by filterd is-official
    44fdac11f Update Go to 1.16.8
    061051c24 docs: add missing redirect, and remove /go/experimental redirect
    2012fbf11 Update Go to 1.16.7
    42d1c0275 registry: ensure default auth config has address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
dbe9ce60c2 docker-moby: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits:

    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
    6f3f2b6d08 update containerd binary to v1.6.6
    b3bcb15da8 update containerd binary to v1.6.5
    f55b030fa0 system: unbreak build for darwin
    63ab12cd3a Port pkg/system/mknod.go to FreeBSD
    081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea
    8e9d647c01 [20.10] update golang to 1.17.11
    87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8
    27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b
    829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42
    6cbe73bfc0 Rename Reservation to Reservations in the open API
    d9ed3d7e28 update runc binary to v1.1.2
    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10

Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits:

    af0c46d8 Apply peformance tuning to new sandboxes also
    23ffb31f Set ExternalPortReserved for dummy proxy
    9b82e422 Bump hcsshim
    9db86fb7 Only check if route overlaps routes with scope: LINK

Bumping docker-cli to version v20.10.17, which comprises the following commits:

    7502d7e56 Fix dead external link
    308624c3b fix: remove asterisk from docker command suggestions
    de7d866b6 [20.10] update golang to 1.17.11
    240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd9 [20.10] update golang to 1.17.10
    49e9c2ae3 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17 vendor: update x/sys to 134d130e
    31dad66f9 [20.10] update golang to 1.17.9
    80f673bf9 gofmt with go1.17
    3d4cc8e69 [20.10] update remaining files to go1.17.8
    30277a8f8 update go to 1.17.8
    cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c [20.10] docs: reformat table for compatibility
    573a66463 Describe privileged mode in terms of capabilities
    cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f13825 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b872 [20.10] circleci: update buildx to v0.8.2
    55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05 e2e: update docker-compose to 1.29.2
    4ae338b33 docs: reference: remove trailing space to fix yaml formatting
    6380142dd docs: fix (table) formatting, fix some broken links
    82f422fcf docs: build: fix minor markdown and syntax issues
    80fd77903 Update the list of log drivers
    c3d4d623c Fix CMD --ignored-param1 example
    2e82d11de docs: dockerd: fix broken link in blockquote area
    738a6ee1c improve cp documentation with some illustration examples
    246d96bb6 docs: unify "docker create" and "docker run" reference
    2fd0f1705 docs: add missing documentation for --pull flag
    5fa500000 Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b Dockerfile: update xx to 1.1
    6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
7ac3d53888 cri-o: update to 1.25
Bumping cri-o to version v1.24.0-189-g78992d160, which comprises the following commits:

    3e085ffc3 build(deps): bump github.com/containers/buildah from 1.26.1 to 1.26.2
    4ca27d0b0 Remove enable_custom_shm_size
    4149fa03e Add annotations to allow power management configuration
    0f4d79209 Fix release notes pull behavior
    44d42542f oci: unconditionally set as not stopping after a stop stops stopping
    56b807510 container_server: drop StopContainerAndWait
    b4ddab0e7 server: take container server Stop method
    7cda39bb4 container server: drop duplicated Remove function
    f03e563ec config: set version-file-persist to empty by default
    935652c90 version: don't wipe if filename is empty
    2e3b19475 bundle: always install runc
    c57d3b05c scripts: install runc if not found in get script
    6d729cd4d remove Vagrantfile
    87a4e8eb7 Fix a link in install.md building section about dependencies
    e8e523dda Retry release notes push if failed
    ee80a2b9e Bump version to 1.25.0
    c00962a51 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    a2d1ca204 server: userns support
    41f67c326 vendor, kubernetes: update to kubernetes-1.25.0-alpha.2
    df5e39094 Fix release-notes tag determination
    b068d17cf Upload release notes for each tag
    66d33db6b Fix unit test coverage
    f61332ed9 hostport: don't use unexported symbol
    01a7c0276 server: use k8s.io/utils/clock
    20ef6c73e update ubuntu releases
    8a981fef4 Pin upstream node e2e test to latest `main`
    7f0604ceb Verify SBOM for static binary bundle
    489caa132 Use default token for stale bot
    0a3bfc078 Switch to golang native error wrapping
    b86d8c343 build(deps): bump github.com/stretchr/testify from 1.7.4 to 1.7.5
    80d1d7908 Run more stale operations
    da2dce1e1 chore: Set permissions for GitHub actions
    c800d043b build(deps): bump github.com/urfave/cli/v2 from 2.10.2 to 2.10.3
    e30ae00a1 Add stale bot workflow
    863d1a334 cgmgr/systemd: don't recalculate cgroup path
    d94e48924 build(deps): bump sigs.k8s.io/bom from 0.3.0-rc1 to 0.3.0-rc.2
    8c7cc72e4 Generate SBOM for static binary bundle
    26138ec52 build(deps): bump k8s.io/klog/v2 from 2.60.1 to 2.70.0
    0cdf37c86 Verify signed artifacts via `get` script
    fdb6c3b30 server: unify logging in resourcecleaner
    896456bc8 server: move cleanup funcs closer to function that provisioned resource
    49ad4b0ad build(deps): bump github.com/urfave/cli/v2 from 2.10.1 to 2.10.2
    7b2475303 build(deps): bump github.com/stretchr/testify from 1.7.3 to 1.7.4
    0f46b58cb Fix container status for HostToContainer propagation
    99d86536e Fix docs validation
    9f105d8f0 build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.3
    748fd5d2e build(deps): bump github.com/urfave/cli/v2 from 2.8.1 to 2.10.1
    93fc6b72e build(deps): bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1
    491b03a30 Update cgroupfs cgroup manager
    de8672f7e contrib/test/int/build/runc: rm build tags
    0b3153d7d Bump runc to v1.1.3
    a3171b395 Sign static binary bundle via cosign
    704f9aeb6 dependencies: update conmon
    333cc8988 contrib/test/integration: skip installing conmon via ansible
    4b120cbef Fix lint CI
    40df9c9ae Bump `go.opentelemetry.io/*` dependencies
    06b6e86b2 Bump `containers/*` dependencies
    67c18103e Cleanup: remove BuildContainerdBinaryName as it is not called anymore.
    b480e8a3b Bump golang dependency on containerd
    864733f77 build(deps): bump actions/checkout from 2 to 3
    e2a32f36c bump ocicni to v0.4.0
    63399460e build(deps): bump github.com/containers/ocicrypt from 1.1.3 to 1.1.5
    e67e36753 build(deps): bump google.golang.org/grpc from 1.46.2 to 1.47.0
    24d401919 Bump golang dependencies
    f72969022 Fix unit tests
    37c1a01fe drop use of deprecated package io/ioutil
    8bdadc77c security: add 2022 audit report
    79e404fa5 conmonmgr: query help text to see if it supports log-global-size-max
    a4080bb34 add support for conmon log-global-size-max
    b7f15ac3d oci: cap exec sync length
    1e277b836 utils/RunUnderSystemdScope: fix wrt channel deadlock
    03e4aa482 Bump cri-tools to v1.24.2
    2fbf71963 test: set cri stats more idiomatically
    efff3878c server: reduce object creation in List{Containers,PodSandboxes}
    0cde0a6de update kubeadm init instructions
    e5bb0c600 docs: update for CNI package change
    62a14cf91 oci: reuse helper function to reduce duplication
    9fea6e219 oci: kill children of container if it is in the host pid namespace
    f6d963871 Add pause/unpause description to readme
    35ca21623 Fix review issues
    fa435f79c Use a default umask of `0o022`
    6293c07b9 Fix it case failed
    5d75cc24a Fix review issues
    26432e631 changesinREADME
    908111147 move 1.23 to 1.24 in README
    85bcbe8d1 OWNERS: remove fgiudici
    eb41d30e0 build(deps): bump actions/download-artifact from 2 to 3
    c14faa62e build(deps): bump golangci/golangci-lint-action from 2 to 3
    7fe39c7bc Add integration test for remove paused ctr
    33997ae93 vendor: bump crypto package
    8a090364d 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and   restart one
    1e61f1318 build(deps): bump actions/setup-go from 2 to 3
    c40fa5350 fix review issues
    985c182a4 build(deps): bump google.golang.org/grpc from 1.43.0 to 1.46.2
    cef56110d build(deps): bump actions/upload-artifact from 2 to 3
    e932964fc build(deps): bump cachix/install-nix-action from 12 to 17
    bf67bfd4f build(deps): bump actions/cache from 2 to 3
    7db2b3b39 Try to force delete ctr when in paused state
    0c1bf03fa chore: Included githubactions in the dependabot config
    c657f4623 Fix some uses of Atoi
    54d7da638 typo fix
    2b8a7055c Typo fix
    d4ec76bd4 Add CodeQL Github actions
    ed53fa23b Use go 1.18 buildinfo for version output
    21c8f6bde Bump third party dependencies
    d68931ddb Run critest with conmonrs

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
d36e757d42 cri-o: update to 1.24.1 -latest
Bumping cri-o to version v1.24.1-18-gb0d2ef327, which comprises the following commits:

    81ef20b38 Fix unit test coverage
    7b4941478 Fix release-notes tag determination
    0dde66a3c Upload release notes for each tag
    29762438c Fix container status for HostToContainer propagation
    2cf9cf9df bump ocicni to 0.4.0
    5481d35e9 Fix unit tests
    b0040ddd9 test: set cri stats more idiomatically
    cf0037d1a utils/RunUnderSystemdScope: fix wrt channel deadlock
    5b75a4763 oci: kill children of container if it is in the host pid namespace
    489819e33 bump to v1.24.1
    8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max
    fc852b402 add support for conmon log-global-size-max
    77f0429d9 oci: cap exec sync length

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
038b48664a runc-docker: update to 1.1.3
Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits:

    eb1552a0 VERSION: back to development
    6724737f VERSION: release 1.1.3
    91fa032d ci: add basic checks for CHANGELOG.md
    7219387e cgroups: systemd: skip adding device paths that don't exist
    93d1807b libcontainer: relax getenv_int sanity check
    8242c05d script/seccomp.sh: check tarball sha256
    017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4
    51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid
    3a09da6b ci: drop docker layer caching from release job
    8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
    fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError
    d105e052 libct/seccomp/config: add missing KillThread, KillProcess
    e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d
    dc083b2b fix deprecated ActKill
    bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
    1feafc31 ci: bump golangci-lint to v1.44
    89f79ff0 libct: StartInitialization: fix %w related warning
    3b7f2605 Format sources using gofumpt 0.2.1
    eeac4e77 build(deps): bump actions/checkout from 2 to 3
    cd7fa00d Vagrantfile.fedora: fix build wrt new git

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
d8ecc12a13 runc: update to 1.1.3
Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits:

    eb1552a0 VERSION: back to development
    6724737f VERSION: release 1.1.3
    91fa032d ci: add basic checks for CHANGELOG.md
    7219387e cgroups: systemd: skip adding device paths that don't exist
    93d1807b libcontainer: relax getenv_int sanity check
    8242c05d script/seccomp.sh: check tarball sha256
    017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4
    51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid
    3a09da6b ci: drop docker layer caching from release job
    8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
    fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError
    d105e052 libct/seccomp/config: add missing KillThread, KillProcess
    e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d
    dc083b2b fix deprecated ActKill
    bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
    1feafc31 ci: bump golangci-lint to v1.44
    89f79ff0 libct: StartInitialization: fix %w related warning
    3b7f2605 Format sources using gofumpt 0.2.1
    eeac4e77 build(deps): bump actions/checkout from 2 to 3
    cd7fa00d Vagrantfile.fedora: fix build wrt new git

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
fec43d04a4 kernel: add 5.19 inc file
The major stacks have been tested against 5.19, so we add the
tracking .inc to indicate support.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:25:04 -04:00
Bruce Ashfield
58f5ac62e8 kernel: drop 5.10 .inc
oe-core has removed 5.10 from master, so we drop our tracking .inc

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:25:04 -04:00
Andrei Gherzan
cca772a457 cni: Use gcc-based toolchain
clang-based builds are still broken due to:
https://github.com/llvm/llvm-project/issues/53999

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Andrei Gherzan
eb1f9b1e1f podman: Use gcc-based toolchain
clang-based builds are still broken due to:
https://github.com/llvm/llvm-project/issues/53999

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Andrei Gherzan
89abebb0fe podman: Backport patch to fix duplicate switch statements
This will fix clang-based builds.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Bruce Ashfield
52ec02f96d containerd: update to 1.6.6
Bumping containerd to version v1.6.6-10-g4e92d8e7e, which comprises the following commits:

    37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing
    fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0
    99c56d217 ctr: fix label args used in NewContainer
    51de785f8 [release/1.6] Make building static binaries simpler
    2ea4e6348 update runc binary to v1.1.3
    61213742a Prepare release notes for v1.6.6
    f92068350 Implicitly discard the input to drain the reader
    2eb67213b [release/1.6] Limit the response size of ExecSync
    185e87275 Prepare release notes for v1.6.5
    5c9c83d3e [release/1.6] update golang to 1.17.11
    fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version
    e33b9e709 archive: add human-readable hint to Lchown error
    3bb5a9d19 config: improve config v1 deprecation message
    6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3
    f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    9f99be51b [release/1.6] update golang to 1.17.10
    246a1b42e vendor: github.com/opencontainers/runc v1.1.2
    43717e03a update runc binary to v1.1.2
    82a77be2d reverts removal of parallel run from critest
    06bdfeb67 Allow git commands in Vagrantfile
    70839a344 Bug fix for mount path handling
    1520bae0f update critools to v1.24
    0d1d2953b Prepare release notes for 1.6.4
    42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1
    e9f22e008 Update go-cni to v1.1.5
    be4909e95 cri: close fifos when container is deleted
    baa386dc0 Prepare release notes for v1.6.3
    e8da82adc tracing: fix panic on startup when configured
    1764ea9a2 CRI: improve image pulling performance
    9cd76d465 [release/1.6] update golang to 1.17.9
    c09cc1242 check for duplicate nspath possibilities
    fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect
    8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main
    f2ba2041b update runc binary to v1.1.1
    b736b4dab go.mod: github.com/opencontainers/runc v1.1.1
    72f1e58c7 CI: add Rocky Linux 8
    7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4
    5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events
    da35c19da Test turning off golang CI lint cache
    a0213573b Add nolint:staticcheck to platform-specific calls
    ad0036ed6 Update prometheus client vendor
    c7bbf316f Mount devmapper xfs file system with "nouuid" option.
    a1de89c3e Make the temp mount as ready only in container WithVolumes
    82a12edf2 moving up to go-cni v1.1.4
    28b44826b native: fix deadlock from leaving transactions open
    8461dd6e5 Prepare release notes for v1.6.2
    91800c4e9 Add static checks to shim for Windows
    ca51d7f85 Update go.mod go version
    765df6609 [release/1.6] remove empty go mod to allow building for go 1.18
    e9af80859 Fix the Inheritable capability defaults.
    7c929318a Update TestNormalize to only test Windows
    06985e7d0 Upgrade golangci-lint and its GitHub Action
    b13d3e05c cri: relax test for system without hugetlb

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:05:21 -04:00
Bruce Ashfield
8915d8d54b python: synchronize colorama with meta-python
Our "canary" recipe for colorama picks up potentially destabilizing
changes in meta-python, but is kept in sync to avoid autombuilder
issues. If we can't stay in sync, we'll fork the recipe and change
our dependencies to match.

There has been a change in the meta-oe version, around checksums
and native integration. Both those changes are fine, so we update
to match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-28 11:57:34 -04:00
Christopher Clark
fb52b8d574 xen-image-minimal: reduce the x86 wic build dependencies
The Xen image recipe provides a default WKS_FILE for x86 builds to enable
booting the image either in qemu or directly on hardware. Add settings
for WKS_FILE_DEFAULT_DEPENDS that specify the wic image build
dependencies, which are lower than the defaults used without it.

This change reduces the amount of build resources required for CI of
this image and images that are derived from it.

Since WKS_FILE is specified separately for x86-64 and qemux86-64
overrides, do the same for WKS_FILE_DEFAULT_DEPENDS, even though the
dependencies for the two separate WKS_FILEs are currently the same.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-20 16:04:53 -04:00
Bruce Ashfield
7ec4b4746d podman; fix patch fuzz/failure
patch a33188f [podman: Fix host contamination] appears to have
introduced fuzz/failures. Which strangely wasn't picked up on
merge testing.

We refresh the patch to fix the issues.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-17 14:37:43 -04:00
Vasileios Anagnostopoulos
fb14913e22 image-oci-umoci: add parameter for stop signal
Add an optional parameter that allows to override the stop
signal that is used.

Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:14:57 -04:00
Pascal Bach
064a96fe1b image-oci-umoci: properly handle tags other than latest
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:14:57 -04:00
Andrei Gherzan
21cd0c24e3 fuse-overlayfs: Update to v1.9
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:13:35 -04:00
Andrei Gherzan
81d62914ce fuse-overlayfs: Fix buffer overflow bug on workdir path
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
cf8a763b28 podman: Add support for rootless mode
This support is disabled by default and exposed via PACKAGECONFIG.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
2e05df2f43 podman: Silence docker emulation warnings
Podman can run in via a docker symlink emulating docker commands. By
default this generates a runtime warning. This change silences it via
the provided interface.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
d9bad067f7 slirp4netns: Runtime recommend the tun kernel module
slirp4netns uses a TAP device to connect to the internet in an
unprivileged way. Without the required kernel support (TAP/TUN),
slirp4netns will fail at runtime.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Bruce Ashfield
8364fd6c98 lopper: update to -latest
Bumping lopper to latest, which comprises the following commits:

    9159040 lopper: assists: baremetallinker_xlnx: Fix race condition in memory domain handling
    38d18ca lopper/fdt: add /memreserve/ to preprocessing routines
    33ee8e6 sanity: add /memreserve/ test
    c6431bf fdt: fix dtb handling of common prefix nodes
    211c902 lopper: add support for /memreserve/
    4545eed base: add powerdomains to default phandle meta data
    bc95bc2 tree: handle variable sized phandle properties
    69d8849 openamp: Update YAML handling to match spec
    578de1d lopper: assists: bmcmake_metadata_xlnx: Fix race condition in the assist file
    14d2aa3 tree: ensure that phandle is initialized before export
    a6b38e8 tree: make label generation more robust
    9faf923 extract-xen: add [extract-xen] prefix, and write xen,passthrough
    00c14d5 assists: add imagebuilder wrapper assist
    d879eaf extract: use lopper.write for export of trees
    ca80fbb extract: improve xen passthrough configuration
    791f0f5 lopper.py: allow execution from any directory
    0c62984 lops: fix comment style
    3598d54 lopper/tree: handle invalid last phandle
    697aa62 assists: create generic tree extraction and xen-processing assists
    5ae6650 lopper/tree: improve phandle and node operations
    5a230a5 lopper/assists: allow chained command line assists
    bbb92ee lopper/tree: make import/export more robust
    b8aeb54 lopper/tree: improve node iteration and resolution
    692cbc9 lopper: lops: lop-domain-linux-a53-prune: Remove unneeded nodes for Linux boot
    cd25873 lopper: assists: baremetalconfig_xlnx: Fix KeyError exception
    58dd00c lopper: assists: baremetal_xparameters_xlnx: Fix KeyError exception
    01ae242 openamp: xlnx: Update RPMsg-kernel mailbox information
    fbc4329 lopper: assists: petalinuxconfig_xlnx: Fix indentation and width params
    5c3074b lopper: assists: petalinuxconfig_xlnx: Add support for additional meta-data
    cc3de25 lopper: assists: breametallinker: fix race condition in memory node handling
    7723fed lopper: lops: a72 linux: remove axi intc node
    743432e openamp: xlnx: remove TCM compat strings
    53746be lopper: lops: lop-domain-linux-a53-prune: remove amba_pl pruning
    0d56f35 lopper: lops: lop-domain-linux-a72: move prune operations to separate lop
    fdbbe7b openamp: xlnx: add support for Versal platform
    1839bdb openamp: xlnx: add 'power-domain' prop for Xilinx R5 remoteproc driver SRAMs
    14d1caf lopper: lops: lop-domain-linux-a53: move prune operations to separate lop
    7169df0 openamp: xlnx: remove dead code
    ec9fdce openamp: xlnx: remove definitions node
    07f48d0 openamp: xlnx: Add text file for OpenAMP Channel information
    637863f openamp: xlnx: update IPI for mappings for ZU+ platform
    1b41e52 openamp: xlnx: rpmsg: generate rpmsg device tree nodes
    a643273 openamp: xlnx: remoteproc: generate remoteproc device tree nodes
    a833729 openamp: fix bug for domain-to-domain subnodes for openamp relations.
    ea6d8e1 lops: openamp: describe OpenAMP relation properties as phandles
    40c2070 openamp: translate YAML Remoteproc carveouts to DTS
    fda40d8 openamp: translate YAML RPMsg carveouts to DTS
    9d938f7 openamp: xlnx: parse pre-existing nodes in YAML
    eafb17a lopper: process .dtsi input files the same as .dts
    ce4638a lopper: assists: petalinuxconfig_xlnx: Add assist file for generating petalinux tool required configuration
    cfa0593 fdt: make node prefix lookups more robust
    2f3f2d2 lopper/format: allow tabs to be used when writing dts
    c7b22ce lopper/subsystem: update access to latest specification

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-14 15:17:08 -04:00
Ross Burton
11c1003e87 xen: remove obsolete sdl PACKAGECONFIG
Nothing in Xen respects --enable-sdl, and nothing in Xen links to libSDL,
so this PACKAGECONFIG is obsolete.

It looks like the last user of SDL in Xen was removed in "Remove
internal tools/ioemu tree"[1] back in 2008.

[1] xen 19dc3860dcfde9bc4ec4ef35bb1337e13276f630

Signed-off-by: Ross Burton <ross.burton@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-13 16:31:43 -04:00
Christopher Clark
40a4c292e3 xen, xen-tools: pass prefix maps to fix buildpaths reproducible build issues
To fix warnings when the buildpaths QA test is enabled, pass the file
and debug prefix map options that were previously supplied only for
reproducible builds, adding them to the DEBUG_PREFIX_MAP variable
and supplying that to CC.

Testing indicates that passing the prefix maps needs to be via CC
rather than the EXTRA_CFLAGS_XEN_CORE/TOOLS variables.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-10 21:25:42 -04:00
Bertrand Marquis
aa0ac74a03 xen/sysvinit: add hvc0 console only if not there already
The base inittab recipe is creating inittab entries for consoles listed
in SERIAL_CONSOLES.
For qemu, this contains "115200,hvc0" so an entry is created in inittab
for it.
Prevent to create a second entry if hvc0 is present in SERIAL_CONSOLES.

On qemuarm, this solves issues with the console when starting on top of
Xen as dom0.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-07 10:55:15 -04:00
Bruce Ashfield
93abfdb327 colorama: update to 0.4.5
Keeping in sync with meta-python. We mainatain our own version of
the recipe, as docker-compose and others have been sensitive to
version bumps in the past.

We pick up the following commits:

    f8ab4fd version bump 0.4.5
    f411cb9 Release checklist: no need to rebuild
    372c486 Omit demo06 from demos.sh
    0f5c36f Further tweaks made to support the release
    c29f133 tweaks for build process
    6105ab3 Mention fixed ValueError at exit in CHANGELOG
    e866230 Release checklist includes '.candidate' releases
    35e9a91 Add methods to ``StreamWrapper`` to allow better pickling
    8ba396b Replace deprecated pypyX with pypy-X.Y
    8a364bd Added test
    788106f Detached stream fix
    7899683 Add light colors in README
    912fe9b Add support for Python 3.10
    53e0db3 Update README-hacking.md
    e8e311b Update README-hacking.md
    69f4644 Replace Travis CI with GitHub Actions
    5ed1070 README suggests not using Colorama to print colors
    536e966 fixup! Fix typo discovered by codespell
    1d92c3a .
    16847d7 Make bandit, codespell, and pytest mandatory tests
    f307a6d GitHub Action to lint Python code
    402d236 Note that escapes are stripped out for redirected outputs.
    eea3a58 Added new demo
    f690a2b Use ASCII decoding explicitly in setup.py
    0275556 Add support and testing for PyPy3
    293d782 Remove discussion of unmaintained nose for running tests
    8f0587b Remove unused test imports and utils
    d8a0836 Add support for Python 3.9
    9946cfb Reference my blog p[ost about annotated tags
    9b770a0 README-hacking on tagging
    86bfecd Add --extra-index-url to test-release scripts
    938f5c5 Add Makefile docstring to test-release
    e0a314e Release scripts now include sdist.
    14a21e9 README mentions Pypy compatibility.
    d8a7ff0 fix README-hacking typo
    99765af Fix README link markup
    d080175 Fix README link markup
    5a393b2 Move contributing info to README-hacking.md
    f7efb11 Fix Makefile PHONY declaration
    759d5c7 Bump to version 0.4.5-pre
    b7596ad Fix Changelog markup
    24721c0 Belated CHANGELOG entries for 0.4.4 release
    688f6cc Unicode README chars that don't render on PyPI
    dc8460c Make tests pass on all OS.
    faafef8 Add light colors in README

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-07 10:55:15 -04:00
Andrei Gherzan
a33188fab8 podman: Fix host contamination
The project's internal Makefile uses BUILDFLAGS variable to pass
arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a
patch to align this and avoid using host headers in which case, a musl
build will fail similarly to:

| [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk'
| [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h💯 undefined reference to `__fprintf_chk'
| collect2: error: ld returned 1 exit status

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-05 16:25:25 -04:00
Jeremy Puhlman
320f44c6e9 cloud-init: install sysvinit initscripts
The redhat versions work with out modification.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-27 23:38:33 -04:00
Jeremy Puhlman
c40479b735 cloud-init: add rdpends for netifaces and charset-normalizer
Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-27 23:38:33 -04:00
Jeremy Puhlman
66a2fa470b cloud-init: add depend on udev in sysvinit case.
Just as with systemd, the build needs the dev manager installed
as a dependancy

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-27 23:38:33 -04:00
sakib.sajal@windriver.com
13839c7b13 buildah: add recipe for buildah v1.26
buildah is a command line tool, to be installed and run on target,
that can be used to:
   - create a working container, either from scratch or using an image
     as a starting point
   - create an image, either from a working container or via the
     instructions in a Dockerfile
   - images can be built in either the OCI image format or the
     traditional upstream docker image format
   - mount a working container's root filesystem for manipulation
   - unmount a working container's root filesystem
   - use the updated contents of a container's root filesystem as a
     filesystem layer to create a new image
   - delete a working container or an image
   - rename a local container

Testing:
Setup the build directory:
   $ . oe-init-build-env <build_dir>

Add to local.conf:
   IMAGE_INSTALL:append = " buildah kernel-modules"
   KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \
                       features/netfilter/netfilter.scc  \
                       features/lxc/lxc-enable.scc"
   IMAGE_ROOTFS_EXTRA_SPACE = "5242880"

Build image:
   $ bitbake core-image-minimal

Run the image:
   $ runqemu nographic kvm qemuparams="-m 4096"

On target:
Pull an image:
   > cnt=$(buildah from fedora)

Or build from Dockerfile
   > buildah bud -t <image_name>:<tag> .

Mount the image:
   > mnt=$(buildah mount ${cnt})

Install packages on the container rootfs:
   > dnf install --installroot $mnt <packages_to_install> -y

Copy local files to the container:
   > buildah copy $cnt <local_file> <dest_on_container>

Save the changes to an image
   > buildah commit --format docker $cnt <name>:<tag>

Run the image using buildah:
   > buildah run $cnt /bin/sh

Or using docker:
   > docker run -it <name>:<tag>

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:11:17 -04:00
Chen Qi
e4e136c520 go-logrus: sync SRC_URI with nerdctl and k3s
Use the lower case and remove the '.git' suffix to sync with other
go-logurs SRC_URIs in nerdctl and k3s recipes.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:10:22 -04:00
Chen Qi
69ea90a25e netns: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00