MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2025-07-05 05:15:25 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,432 Commits 38 Branches 0 Tags 8.9 MiB
50c6615883
Commit Graph

2432 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bruce Ashfield
50c6615883 docs/README: drop meta-oe priority recommendation 
This hasn't been needed for over 10 years (and is in the
wrong format for overrides).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-04-04 19:57:46 +00:00
Bruce Ashfield
b2777a4389 podman: update to 5.0.1 
Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits:

    63f6a78eb Packit: Enable CentOS Stream 10 update job
    e22c9dd65 Bump to v5.0.2-dev
    946d055df Bump to v5.0.1
    131f3d089 Add release notes for v5.0.1
    2967eb9a2 [v5.0] libpod: restart always reconfigure the netns
    92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns
    b1dbd477e [v5.0] Bump Buildah to v1.35.3
    ebe3f395b hyperv: error if not admin
    4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD
    312313872 Use built-in ssh impl for all non-pty operations
    70fe2a1c9 fix remote build isolation on client side
    bfc63cc32 fix remote build isolation when server runs as root

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-04-04 19:57:46 +00:00
Bruce Ashfield
c0274365e7 openvswitch: 3.3.0 
Bumping ovs to version v3.3.0-26-g1c1f173ce, which comprises the following commits:

    1c1f173ce dpif-netdev: Fix crash due to tunnel offloading on recirculation.
    feb0fefd8 netdev-dpdk: Disable outer UDP checksum offload for ice/i40e driver.
    3280d95c4 ovs-monitor-ipsec: LibreSwan autodetect paths.
    4fedcae6e route-table: Avoid routes from non-standard routing tables.
    9f39cd4a1 ovs-tcpdump: Fix cleanup mirror failed with twice fatal signals.
    7fa40643e ofproto-dpif: Fix tunnel with different name del/add failure.
    04dc9d117 ofpbuf: Prevent undefined behavior in ofpbuf_clone.
    667c9eb2b netdev-dpdk: Fix tunnel type check during Tx offload preparation.
    332300c36 netdev-dpdk: Fix TCP check during Tx offload preparation.
    e7778b371 netdev-dpdk: Clear inner packet marks if no inner offloads requested.
    c85158e26 netdev-dpdk: Clean up all marker flags if no offloads requested.
    a6bb8be42 github: Reduce ASLR entropy to be compatible with asan in llvm 14.
    70dcee98f netdev-dpdk: Dump packets that fail Tx preparation.
    5ae591757 bfd: Improve state change log message.
    efbc37b94 tests: Fix "SSL db: Implementation" test with openssl > 3.2.0.
    0f1af687c conntrack: Fix flush not flushing all elements.
    04f1984a4 m4: Fix linking with OpenSSL 1.1.0+ and 3+ on Windows.
    8f903b598 ovs-pki: Fix file permissions on Windows.
    300201065 bond: Reset stats when deleting post recirc rule.
    02f0d6db1 ofproto-dpif-trace: Fix infinite recirculation tracing.
    e68ddb34b github: Temporarily disable SNAT with exhaustion system test.
    95d4d7108 dp-packet: Don't offload inner csum if outer isn't supported.
    05453d807 ofproto-dpif-xlate: Fix ignoring IPv6 local_ip for native tunnels.
    a0df9c85d netdev-dummy: Add local route entries for IP addresses.
    2f742d7af tests: Move the non-local port as tunnel endpoint test.
    a6bdf7d31 Prepare for 3.3.1.
    6c4da8cc2 Set release date for 3.3.0.
    54ba53bfa system-traffic.at: Add tests with UDP tunneling of UDP traffic.
    71a547474 netdev-native-tnl: Mark all vxlan/geneve packets as tunneled.
    91a147ea8 netdev-linux: Only repair IP checksum in IPv4.
    51ee4d36a netdev-linux: Favour inner packet for multi-encapsulated TSO.
    0eb8d8116 rstp: Fix deadlock with patch ports.
    c67de08f1 dpif-netdev: Increase MAX_RECIRC_DEPTH to 8.
    310247ae9 netdev-linux: Avoid deadlock in netdev_get_speed.
    e38ba0b0a ofproto-dpif-monitor: Remove unneeded calls to clear packets.
    37f24aebc dp-packet: Include inner offsets in adjustments and checks.
    eead56062 bfd: Set proper offsets and flags in BFD packets.
    2de9347a5 dp-packet: Validate correct offset for L4 inner size.
    76144cc63 netdev-offload-tc: Check geneve metadata length.
    5c8586b1a odp: ND: Follow Open Flow spec converting from OF to DP.
    5cc4eedc6 faq: Update matching DPDK releases for older branches.
    447d4ecd9 github: Bump Fedora version to 39.
    fe55ce37a github: Update versions of action dependencies (Node.js 20).
    86f79063b mcast-snooping: Remove typedef from mcast_group_proto.
    b0cf73112 dp-packet: Reset offload/offsets when clearing a packet.
    c467a7a71 tests: ovsdb-server: Fix config-file same schema test.
    2222dbb92 ci: Run system tests in a separate namespace.
    0c9e932aa netdev-dpdk: Trigger port reconfiguration in main thread for resets.
    928498aea tests: mcast-snooping: Stop time for the group protocol test.
    6ffceaf14 dp-packet: Avoid checks while preparing non-offloading packets.
    a940a691e ovs-atomic: Fix inclusion of Clang header by GCC 14.
    e802fe79a Prepare for 3.3.0.
    206dfaa36 AUTHORS: Add Dexia Li.
    85bcbbed8 userspace: Enable tunnel tests with TSO.
    084c80872 userspace: Support VXLAN and GENEVE TSO.
    0edfe05e4 netdev-dummy: Add support and test for TSO.
    76e2f20d5 userspace: Correct IPv6 header in software-GSO.
    9e3c842d5 dp-packet: Set checksum flags during software TSO.
    253d90075 python: ovs: flow: Add meter_id to controller.
    ea44cafae python: ovs: flow: Make check_pkt_len action a list.
    32f6737b5 python: ovs: flow: Add idle_age to openflow flows.
    e72b7b6f1 python: tests: Refactor test_odp section testing.
    5e45091ea python: ovs: flow: Add dp hash and meter actions.
    ab7d08961 python: ovs: flow: Add sample to nested actions.
    9ef49ca85 python: tests: Add info and key tests for OFPFlows.
    6bbbb7664 python: ovs: flow: Fix typo in n_packets.
    603890d6a ovsdb-server: Make use of cooperative multitasking.
    36bad3182 json: Add yielding json create/destroy functions.
    d4a15647b ovsdb: raft: Enable cooperative multitasking.
    3c8a4e942 lib: Introduce cooperative multitasking module.
    6ece3d57b timeval: Add internal timewarp interface.
    b222593bc mcast-snooping: Add group protocol to mdb/show output.
    077d0bad0 mcast-snooping: Store IGMP/MLD protocol version.
    8b51b2bcb ci: Add kernel and userspace ASAN/UBSAN tests.
    fc13c0d65 ci: Combine the ubsan and asan sanitizer runs.
    48d4f6963 tests: Set handle_segv for UBSAN to allow SIGSEGV tests.
    d662eee09 ci: Add clang-analyze to GitHub actions.
    ed738eca3 util: Annotate function that will never return NULL.
    da093acc7 netdev-offload-dpdk: Replace action PORT_ID with REPRESENTED_PORT.
    bdf2f1677 tests: Fix 'long flow dump duration' failures due to large time warp.
    8893e24d9 dpdk: Update to use v23.11.
    65b22552a tests: ovsdb: Add configuration tests with config file.
    47ddc474d tests: ovsdb: Add relay and replication execution with config file.
    55140090e ovsdb-server: Allow user-provided config files.
    99d7e8849 ovsdb: relay: Allow setting all jsonrpc session options.
    dd0947b87 ovsdb-cs: Add function to set all jsonrpc session options.
    6de317c0e ovsdb: replication: Allow to set all jsonrpc options.
    9a1b79c15 ovsdb: Embed jsonrpc session options into ovsdb jsonrpc options.
    40ce846e8 jsonrpc: Add function to update all options at once.
    37ab57b41 jsonrpc-server: Re-add remotes on role changes.
    8c8a6f793 ovsdb-server: Add no-op config-file option.
    e76f84720 ovsdb-server: Database config isolation.
    c8c0e570d ovsdb: replication: Automatically switch read-only mode.
    3ff980c85 ovsdb: replication: Isolate databases from each other.
    e56d30242 ovsdb: Extract relay string parsing into a separate function.
    80414c3e1 ovsdb: Track jsonrpc options per remote.
    da1a4f699 jsonrpc-server: Add functions to convert jsonrpc options to/from json.
    ea4362174 ovsdb: Allow database itself to be read-only.
    05d6f419c timeval: Add coverage counter for long poll interval events.
    969b3a570 ofproto-dpif-upcall: Add flow_limit coverage counters.
    92ff2a201 ofproto-dpif-upcall: Change flow dump duration message to WARN level.
    60457a5e9 ovsdb: transaction: Calculate added/removed from diff.
    7ab8f6f7c ovsdb: Preserve column diffs read from the storage.
    67ee63087 ovsdb-idl.at: Test IDL behavior during database conversion.
    ac04dfa7e python: idl: Handle monitor_canceled.
    c8d85a0e4 AUTHORS: Add Brad Cowie
    8aea66599 system-traffic.at: Test conntrack + FTP server running on a non-standard port.
    8abe32f95 conntrack: Use helpers from committed connections.
    14ef8b451 lib/conntrack: Only use given packet in protocol detection.
    7b74454c7 system-tests: Test openflow matching for ct related packets with SNAT.
    7404d25ea system-dpdk: Test with mlx5 devices.
    915b97971 checkpatch.py: Load codespell dictionary.
    21c61243f checkpatch: Fix personal word list storage.
    2535d171a vconn: Count vconn_sent regardless of log level.
    54b3eb531 backtrace: Fix error in log_backtrace() documentation.
    94371c099 ovsdb: trigger: Do not allow conversion in read-only mode.
    e951af81c ovsdb: jsonrpc-server: Fix the DSCP value in default options.
    d07a3b798 jsonrpc: Sort JSON objects while printing debug messages.
    0a2e16b67 tests: ovsdb: Use diff -up format for replay test.
    7c3df3676 ovsdb-server.at: Enbale debug logs in active-backup tests.
    0ef3ebb0c ovsdb: transaction: Don't try to diff unchanged columns.
    6f11d9daa ovsdb: transaction: Avoid diffs for different type references.
    d51d4f42d ovsdb: Fix incorrect sharing of UUID and _version columns.
    4102674b3 ovsdb-idl: Preserve change_seqno when deleting rows.
    5c3810491 tests: Move MFEX tests to dpif-netdev.
    98ee21ef6 system-dpdk: Use dummy-pmd port for packet injection.
    df5e5cf43 Documentation: Add section on inclusive language.
    de4cccf93 ci: Add make check-afxdp to GitHub actions ci.
    67c53a89d ci: Allow make check-dpdk to run the MFEX tests.
    26ffd192f ci: Fix dpdk build cache key generation.
    adfc3d4a3 ci: Add make check-system-tso to GitHub actions ci.
    09958e081 ci: Add make check-system-userspace to GitHub actions ci.
    15f179324 ci: Add make check-offloads to GitHub actions ci.
    e7b51b38f ci: Add make check-kernel to GitHub actions ci.
    a80883f76 ci: Fixed tests that show random failures through GitHub actions.
    6660fccb1 ci: Exclude tests that show random failures through GitHub actions.
    9dfa65dc7 ci: Update the GitHub Ubuntu runner image to Ubuntu 22.04.
    e07ae9a6d ci: Add make check-ovsdb-cluster tests to GitHub action ci.
    ee93f364b ci: Add JOBS variable to replace all the '-j4' instances.
    4cbbf56e6 dpif-netdev: Add per PMD sleep config.
    a095794bc openflow: Allow CT flush to match on mark and labels.
    386deb32c dpctl, ovs-ofctl: Unify parsing of ct-flush arguments.
    62c5d32ad ofp-prop: Add helper for parsing and storing of ovs_u128.
    cc670e741 system-dpdk: Wait for MTU changes to be applied.
    7067ed166 tests: Do not use zone 0 for CT limit system test.
    27e0349e2 ct-dpif: Enforce CT zone limit protection.
    1b3557f53 vswitchd, ofproto-dpif: Propagate the CT limit from database.
    324883361 ovs-vsctl: Add limit to CT zone.
    8f4b86237 dpctl: Allow the default CT zone limit to be deleted.
    4b9eb061b ct-dpif: Handle default zone limit the same way as other limits.
    6b1723588 tunnel: Do not carry source port from a previous tunnel.
    472dd6642 netdev-offload-tc: Fix offload of tunnel key tp_src.
    a34e306a0 ofp-ct: Return error for unknown property in CT flush.
    20022fbf5 editorconfig: Remove [*] section and trim_trailing_whitespace.
    8b5fe2dc6 userspace: Add Generic Segmentation Offloading.
    e0056018c userspace: Respect tso/gso segment size.
    6c59c1952 netdev-linux: Use ethtool to detect offload support.
    c8d494636 cirrus: Update from FreeBSD 12 to 14.
    cf984d5be appveyor: Use previous image to unblock CI.
    ceb29608d faq: Update matching DPDK releases for older branches.
    3626c1744 ovs-ofctl: Correctly mark the CT flush commands.
    40f651ce0 mcast-snooping: Fix comments format.
    42c1e2efe mcast-snooping: Flush flood and report ports when deleting interfaces.
    4990a9a27 mcast-snooping: Test per port explicit flooding.
    4e90baca8 system-dpdk: Run traffic tests.
    1d0ff364b system-dpdk: Rework cleanup for vhost-user client tests.
    1c37d869c system-dpdk: Refactor tests using vhost-user ports.
    d0a6cf57d system-dpdk: Fix race in some vhost-user client MTU test.
    64c1d16c6 system-dpdk: Remove tap interfaces from vport MTU tests.
    b561bbdc2 netdev-afxdp: Postpone libbpf logging helper registration.
    818217eaf system-dpdk: Refactor OVS daemons helpers.
    e6dd50d61 tests: Define a macro to skip tc relying tests.
    ab3eca612 ci: Run DPDK tests in GitHub Actions.
    c488f28a0 system-dpdk: Don't require hugetlbfs.
    209667c0e system-dpdk: Introduce helpers for testpmd.
    7b514aba0 ofproto-dpif-trace: Improve conjunctive match tracing.
    c62b4ac8f ovs-ofctl: Implement compose-packet --bare [--bad-csum].
    3e0d8d1f4 checkpatch.at: Add cases to verify skip committer check.
    74bfe3701 checkpatch: Add argument to skip committer signoff check.
    4d74e2307 build-aux/extract-ofp-fields: Fix the number of Summary columns.
    8b4265c11 release-process: Update LTS designation schedule example.
    c19a5b48b netdev-dpdk: Sync and clean {get, set}_config() callbacks.
    d614f2863 netdev-afxdp: Sync and clean {get, set}_config() callbacks.
    169c6b2d4 netdev-dummy: Sync and clean {get, set}_config() callbacks.
    bf843fd43 checkpatch: Don't spell check Fixes tag.
    fdbf0bb2a flake8: Fix E721 check failures.
    28f6e7602 build-aux: Enable flake8 checks for python extraction scripts.
    20e6309ba build-aux/extract-ofp-msgs: Fix flake8 and syntax errors.
    23fb4bd4b build-aux/extract-ofp-fields: Fix flake8 and syntax errors.
    6625f6f2f build-aux/extract-ofp-errors: Fix flake8 and syntax errors.
    51fb99290 build-aux/extract-ofp-actions: Fix flake8 and syntax errors.
    723cd4c9b automake: Move build-aux EXTRA_DIST updates to their own file.
    08212d755 netdev-offload: Fix Clang's static analyzer 'Division by zero' warnings.
    979bc94b1 ovsdb: Fix Clang's static analyzer 'func null dereference' warnings.
    03c8e8010 ofp-table: Fix count_common_prefix_run() function.
    5b6021957 general: Fix Clang's static analyzer 'Dead assignment' warnings.
    49096a0cf general: Fix Clang's static analyzer 'Dead initialization' warnings.
    fea52dc71 python: Remove duplicate UnixctlClient implementation.
    2c841eef9 vswitch.xml: Add entry for dpdkvhostuser userspace-tso.
    e8914353c vswitch.xml: Add dpdkvhostuser group status.
    594d14541 readthedocs: Use dirhtml builder.
    34ae81c1f tests: Use ping timeout instead of deadline.
    6cfb3d1ff tests/system-traffic: Ensure no name resolution for tcpdump.
    cc89bf8e2 README: Add documentation build status badge.
    e388bd73b readthedocs: Add the configuration file.
    a413fed99 tc: Improve logging of mismatched actions.
    bd86266ea ofproto-dpif-upcall: Pause revalidators when purging.
    d581473cb AUTHORS: Add Zengyuan Wang.
    23a70e286 db-ctl-base: Fix memory leak of db commands.
    c29ba5401 tc: Add IPIP/GRE protocols to offload in IP rewrite.
    b16ef5200 tc: Add csum offload of IGMP/UDPLITE/SCTP in IP rewrite.
    f100e6a83 tests: Update some tests title prefix print.
    c92ded551 tests/tunnel.at: Add geneve options mirror test.
    834bd9158 ofproto-dpif-upcall: Fix redundant mirror on geneve tunnel options.
    d76193008 tests: Add some tests for byteq module.
    297db8056 AUTHORS: Add Jakob Meng.
    bb6ed2472 netdev-dpdk: Document rx-steering status options.
    e9ada1629 netdev-dpdk: Update docs for interface info.
    8020eff9a netdev-dpdk: Document status options for VF MAC address.
    0aeb06e1f netdev-offload-dpdk: Fix flushing of a physdev.
    b78427639 Documentation: Add CVE-2022-40982, aka Downfall reference.
    155f632e7 connmgr: Fix ofconn configuration on vswitchd startup.
    13dde1131 utilities: Add kernel_delay.py script to debug a busy Linux kernel.
    4fc02650a ovsdb: Fix potential leak when making diff of conditions.
    a40c55eff hash: Add explicit typecasts to fix C++ compilation issues.
    880a2bbb4 lib, ovsdb, vtep: Add various null pointer checks.
    010c256ca lib: Add non-null assertions to some return values of `dp_packet_data`.
    1b8fa4a66 checkpatch: Add checks for the subject line.
    0896dc19e python: idl: Fix last-id update from a monitor reply.
    bac34b26a netlink-conntrack: Fix partial match of entries with SCTP.
    563c50fba ovsdb-cluster.at: Remove extra ordinal schema and schema name operations.
    154e4299d ofproto-dpif-xlate: Fix recirculation with patch port and controller.
    9a8b39b70 ofproto-dpif-xlate: Don't reinstall removed XC_LEARN rule.
    bc79a7bf0 treewide: Add `ovs_assert` to check for null pointers.
    40546cd6e lib, ovs-vsctl: Add zero-initializations.
    1116459b3 conntrack: Remove nat_conn introducing key directionality.
    85634fd58 ovsdb: raft: Support pre-vote mechanism to deal with disruptive server.
    bb61931dc netdev-dpdk: Disable net/tap Tx L4 checksum offloads.
    13b874f4f tests/mfex: Don't require python cryptography.
    28c0cec40 configure: Avoid deprecated AC_PROG_CC_C99 if possible.
    d3bdc7c91 tests: Fix time dependency in overlapping flows modification test.
    9b7e1a753 netdev-dpdk: Clear IP packet type when no offload is requested.
    bf7e53bb5 python: Use build to generate PEP517 compatible archives.
    f1983a508 python: Use twine to upload sdist package to pypi.org.
    bb0dd1135 python: Rename build related code to ovs_build_helpers.
    785e22f87 dpif-netdev: Fix length calculation of netdet_flow_key.
    0e98b9924 doc: Fix description of max_len for controller action.
    9842d89e5 docs: Fix rendering of VLAN Comparison Chart.
    57cccb076 fatal-signal: Drop logging of failed dummy backtrace.
    eb344e0be AUTHORS: Add Colin Watson and Lucas Nussbaum.
    6180fefa8 docs: Run tbl preprocessor in manpage-check rule.
    e46d45520 docs: Add `nowarn` region option to tables.
    f1305b5a2 tests: Add clang-analyzer-results to gitignore.
    d910fd8a0 ci: Add jobs to test -std=c99 builds.
    f0899b1fc tests: Fix order of includes in barrier/id-fpool/mpsc-queue tests.
    1776aa17a sflow: Always enable _BSD_SOURCE.
    be2cd24b1 compiler.h: Don't use asm and typeof with non-GNU compilers.
    e3d561670 AUTHORS: Add Ivan Malov.
    de86c5bbd Set release date for 3.2.0.
    41006c1b3 AUTHORS: Add gordonwwang and Xiaojie Chen.
    0945e1a5f ovs.tmac: Fix troff warning in versions above groff-1.23.
    d80df0b86 AUTHORS: Update email for Simon Horman.
    bd78f0e2e AUTHORS: Add François Rigault.
    77610902b connmgr: Count unsent async messages.
    cf11766cb ofproto-dpif-upcall: Fix push_dp_ops to handle all errors.
    eac54ee24 system-traffic.at: Avoid names veth0/veth1 in SRv6 tests.
    21410ff80 dpif-netdev: Fix dpif_netdev_flow_put.
    da64d1b2f MAINTAINERS: Add Aaron Conole.
    b8d4619d3 cirrus: Update to FreeBSD 13.2.
    bbdfb332d MAINTAINERS: Add Kevin Traynor.
    2f34475a9 ci: Fix OPTS not being passed to OSX builds.
    269053bf2 ovsdb-tool: Fix json leak while showing clustered log.
    bd2a80b1d ovsdb-server: Fix excessive memory usage on DB open.
    d6fd6e591 tests: Add ovsdb execution cases for set size constraints.
    2f1b43064 ovsdb: relay: Fix handling of XOR updates with size constraints.
    e062465a8 ovsdb: file: Fix diff application to a default column value.
    edfbd44ff ovsdb: file: Fix inability to read diffs that violate type size.
    aa56afb57 AUTHORS: Add Simon Jones.
    20a7654d2 ovs-tcpdump: Clear auto-assigned ipv6 address of mirror port.
    47520b33b ofproto-dpif: Fix removal of renamed datapath ports.
    d460c473e netdev-dpdk: Negotiate delivery of per-packet Rx metadata.
    feed7f677 ofproto-dpif-upcall: Mirror packets that are modified.
    f5188ff21 daemon.at: Correctly terminate ovsdb process in a backtrace test.
    24520a401 vswitchd: Wait for a bridge exit before replying to exit unixctl.
    bffffd841 Prepare for post-3.2.0 (3.2.90).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-04-04 19:57:46 +00:00
Bruce Ashfield
5853fc67da docker-compose: update to v2.26.0 
Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits:

    33712277 chore(desktop): revised feature detection for file shares
    e9dc8201 Add Navigation Menu to compose up
    39504607 Add support for volume Subpath option
    3b541b07 Bump docker v26.0.0
    25671ae6 introduce config --variables to list compose model variables
    0191e69d Fix docs on default build image name
    897d239f Bump compose-go to v2.0.2
    c5a760ce add support for annotations
    26f687a1 Revert "Bump compose-go to v2.0.1"
    ad414613 Bump compose-go to v2.0.1
    db4ed895 feat(desktop): synchronized file share integration (#11614)
    1b5fa3b9 feat(experiments): add experimental feature state (#11633)
    4f97edf3 reduce timeout of the Otel tracing command
    bc5fc6ba fix `compose config --format json`
    f937e42a Bump compose-go v2.0.0
    f46ca459 services shell completion bugfix
    b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig
    5a1ba0ef only use ToModel when --no-interpolate is set
    17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593)
    4efb8970 chore(deps): upgrade go to 1.21.8 (#11578)
    f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566)
    34b11c4f Add test summary for test jobs in ci
    c525373a make code simpler
    e99b8ace avoid duplicated "xx exited with code 0" message
    8ab8df86 introduce --watch
    de178267 move code into small functions for better readability
    1680f9a8 restore support for `config --no-interpolate`
    5c4f3370 remove docker cli step in ci.yml
    58ec0e9f get log to manage `attach`
    349d9f34 bump compose-go to version v2.0.0-rc.8
    697a48af use an dedicated compose file --quiet-pull e2e test
    9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state
    d10a179f add support of QuietOption to create command
    94246f3c pass QuietOption when starting dependencies from run command
    9630cc58 when ran with ANSI disabled, force progress=plain
    6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable
    9b0e3d53 ci: bump engine version to `25.0.3`
    de3da829 sort containers to optimize scale down
    c79aabde discard stdout for laaarge log test
    0aad3221 use listeners to collect include metrics
    b1c06770 docs: update cli reference link
    e330f590 docs: unify no trailing dots in docstrings and help (#11301)
    16c8099c Use listener for file metadata
    07bda596 fix deadlock collecting large logs
    d2034029 chore(watch): remove old `docker cp` implementation
    894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481)
    3ba66453 pass All option to backend api.Service when length statuses is not equal to zero
    2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu)
    1fea7c1b build(deps): bump github.com/opencontainers/image-spec
    acf2ffb0 feat(tracing): add project hash attr
    0d48a93f chore(load): ensure context passed to load
    aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44
    6ef55a53 bump compose-go to v2.0.0-rc.4
    a553db33 CI: docker engine version matrix
    05bec55d build(deps): bump github.com/docker/cli
    8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382)
    a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426)
    05820018 Fix canonical container name
    da1a34a8 don't check external network existence when swarm is enabled
    8b023ae0 build(deps): bump github.com/docker/cli
    8c80297c build(deps): bump github.com/docker/docker
    7e991515 Add support for storage_opt
    d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1
    71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues
    25d16d1f build(deps): bump actions/upload-artifact from v3 to v4
    ab97dcc7 update MAINTAINERS file
    a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE
    811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail
    1551fcb4 introduce stopAndRemoveContainer to share logic scaling down
    eb4249ec bump compose-go to v2.0.0-rc.2
    1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381)
    053a5604 docs: update link to use canonical URL for command
    34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1
    56e38260 go.mod: github.com/google/uuid v1.5.0
    c28bf522 bump version of compose-go to v2.0.0-rc.1
    51c113b6 build(deps): bump github.com/docker/docker
    7cdc7e15 remove watch command from the alpha command
    fb026543 build(deps): bump github.com/docker/cli
    d688d3bf fix(tracing): batch span exports to prevent blocking
    898e1b60 signals/utils: always handle received signals
    f414bf78 fix engine version require to use healthcheck.start_interval
    3c4593f2 Stop the resource timer after last expected event
    d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347)
    26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349)
    191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348)
    5d05df6e update compose-go to version using immutable Project functions
    b621948c feat(cli): report more useful User-Agent on engine API requests
    f5c53c2d ci(deps): bump golangci-lint to v1.55.2
    1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331)
    2bf2b22f Add source policies for build
    575f2ed7 watch: remove requirements for tar binary and for sync target to be rw
    5f4b22ed make docs
    dcf6bd77 make mocks
    80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach
    2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach)
    d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
    c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317)
    27987415 gha: update DOCKER_CLI_VERSION to v24.0.7
    566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1
    d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1
    a1d36379 go.mod: github.com/klauspost/compress v1.17.4
    0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4
    2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0
    dcbf005f up: gracefully teardown when command ctx cancelled
    e105f165 introduce `stats` command
    ce5a0c65 Fix cancellable context detection in `AdaptCmd`
    f58f23a6 remove ServiceProxy which was introduced for archived compose-cli
    9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3
    ccd83b8a go.mod: github.com/gorilla/mux v1.8.1
    9e57850c go.mod: github.com/docker/distribution v2.8.3
    35d3a7ca go.mod: golang.org/x/crypto v0.17.0
    6c998602 go.mod: golang.org/x/crypto v0.16.0
    402f3688 go.mod: golang.org/x/text v0.14.0
    30dd3e66 go.mod: golang.org/x/term v0.15.0
    0c4fa017 Bump compose-go v2-beta.2
    b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
    17da54da introduce build --with-dependencies
    1baa4f44 up: fix write/close race condition in logPrinter
    7781b7c9 deps: update docker/cli to fix go version selection issue
    785835b1 Add support for endpoint-specific MAC address
    e4fb5545 build do not require environment to be reslved
    74cc0912 github.com/golang/mock is deprecated
    5e61c62e collect services to build using WithServices
    fb3868ff add support for start_interval
    bdbda790 include disabled services for shell completion
    ae4fd791 bump golang to version 1.21.5
    26aca867 avoid use of service.Name when iterating on project.Services
    138facea project.Services is a map
    cda04f28 adopt compose-go/v2
    85a1aec1 regen docs
    9c29d223 use custom config type for OCI v1.0
    df6fe59f tweak help message on oci version flag
    07df9cc4 fix typo
    7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0
    111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR
    8026d0e2 adopt container.RestartPolicy*
    df1533a1 [lint] don't use deprecated types
    8639fbae go mod tidy
    56e2ad9e update to v1.25 for RunAttach
    ce1ddb6c fix combination of --pull always --no-build
    c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0
    1f148244 send out a cancel event on SIGINT/SIGTERM
    9faef4ae Update README.md to use standard compose.yaml file name
    59f11ecb Fix configs are mounted under /<id>
    750553c8 introduce compose logs --index to select a replica container
    8c964f5a Update E2E test
    90ca13b7 Fix E2E test to have index in the correct position
    f9946127 Fix docs
    ddda59a1 Add index option to compose logs command
    e981c358 Add failing test
    16c4241c log we don't expose service ports when --verbose
    9025d63a bump ddev
    a1de0b96 Restore `Project` is ps json output
    caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project
    29e9fdba let contributor know we might close unanswered issues
    c665c53c bump buildx to v0.12.0 and adapt code to changes
    a39cf75e build(deps): bump github.com/compose-spec/compose-go
    46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
    5c5d30c6 build(deps): bump github.com/docker/cli
    36fa8d4e build(deps): bump github.com/docker/docker
    2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
    2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
    b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
    5e77ae92 avoir use of []types.ServiceConfig
    f5572201 identify services to build and don't display 'building' if none
    8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
    7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
    cb01186c push also consider build.tags
    9c4efbdd Strip project prefix from docker-compose up output
    8ea7c9e0 Make it context aware and add test skipping options
    c1694360 render quiet after filtering applied
    254a94b0 bump golang to version 1.21.4
    cf608fa9 bump compose-go to v1.20.1
    426377a4 reject compose file using `secrets|configs.driver or template_driver`
    493f6c80 skips flaky e2e tests on watch and attach
    646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
    2945532f fix --pull documentation
    e5cd265a improve watch configuration logging Add action associated to each managed path
    d646d757 lint
    71237ef6 do not resolve cache dir until remote resource is in use
    0d905a89 add a copyright notice with original author
    b847c7f5 implement runtime file selection
    5e3d8f67 re-implement cache folder detection
    67279088 introduce --resolve-image-digests for publish to seal service images by digest
    4cd61957 fix build
    0d4cbbdb fix
    9631a49d ENGDOCS-1764
    328ca3f2 add docs upstream validation workflow
    e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
    616bba0a linter errors fixed
    ee6e3c2a NetworkList to NetworkInspect for ID search
    c7e31a3c Squashing feature branch commits in order to add signoff message.
    704a9fd3 Use project.ServiceNames() if no service specified in hash
    d9e0e42d Add branch configuration for pull_request trigger
    c48e3c4a Initial codeql.yml commit
    dd0803db fix SIGTERM support to stop/kill stack
    39008c53 align with OCI artifact best practices
    6c345b37 refactor(cmd/compose/run): remove redundant `len` check
    1ffa194e fail start if depependency is missing
    b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
    3d0207eb remove uncessary return value of pullComposeFiles function
    16a7c209 enable profile when down is ran with explicit service names
    818bc3c3 add sync+restart action to watch attribute
    38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
    0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
    ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
    d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
    9b4d577c remove refrecence docs generation
    14b43c1a remove cucumber tests as we haven't added new ones for a while
    9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
    2c0b0232 add dry-run support for publish command
    599e4b24 extract method to reduce cyclomatic complexity
    fe8c2780 warn user remote resource is disabled
    a345515f Don't delete dependent services
    8967df7a Apply platform before hashing
    4f694919 deps: remove deprecated github.com/pkg/errors
    6ecab957 Include image name in error message
    12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
    a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
    991901f2 pkg/remote/oci: refer to the manifest as manifest
    2d971fc9 update the watch warning message when no services with a develop section
    78f33619 ci: enable verbose output for e2e tests (#11045)
    44d21280 truncate command by default, introduce --no-trunc flag to get the full command
    ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
    ab81db5b config --xx don't need `env_file` being parsed
    61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
    6be5f300 move watch from alpha to main command
    c34c306c TestWatch to use new  `develop` section
    5ca35c88 implement publish
    805541be watch: use official `develop` section (#11026)
    8f489d6d build(deps): bump github.com/opencontainers/image-spec
    9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
    76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
    f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
    4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
    a697a069 introduce pull --missing flag to only pull images not present in cache
    8af49ff3 resolve service reference into container based on observed state
    f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
    6d5eb6fd update to go1.21.1
    9d7e0ad6 correct scale error messages formatting
    1a98a70b add scale command
    19bbb12f ci: tweak restricted imports in linter (#10992)
    7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
    13115468 cli: fix `--build` flag for `create` (#10982)
    e1aa4f77 otel: add args & flags to cli traces (#10974)
    d7b0b2bd watch: build & launch the project at start (#10957)
    e0f39ebb pull OCI remote resource
    c9d54f09 introduce publish (alpha) command
    52e54ef9 doc: updated README.md to remove broken link
    f4f2e934 migrate to github.com/distribution/reference
    32c3d0a3 Enable service explicitly requested to be restarted
    1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
    407a0d5b up: fix various race/deadlock conditions on exit (#10934)
    8caa6f1f pkg/api: replace uuid for basic random id

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-04-04 19:57:46 +00:00
Bruce Ashfield
fb2d44b8a0 podman: add new kernel module rrecommends 
Testing podman + netavark without kernel-modules installed
in the image shows some are missing from the rrecomends.

It could be argued that they belong in netavark, but since
podman + netavark are almost always used together, we group
them here.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-23 00:54:44 +00:00
Bruce Ashfield
081ef3c19c podman: update to 5.0.0 
Tested with cni:

   root@qemux86-64:~# podman version
   Client:       Podman Engine
   Version:      5.0.1-dev
   API Version:  5.0.1-dev
   Go Version:   go1.22.0
   Git Commit:   177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
   Built:        Thu Mar 21 17:59:57 2024
   OS/Arch:      linux/amd64

   root@qemux86-64:~# rpm -qa | grep cni
   cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64

   root@qemux86-64:~# rpm -qa | grep neta

Tested with netavark:

   root@qemux86-64:~# podman version
   Client:       Podman Engine
   Version:      5.0.1-dev
   API Version:  5.0.1-dev
   Go Version:   go1.22.0
   Git Commit:   177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
   Built:        Thu Mar 21 17:59:57 2024
   OS/Arch:      linux/amd64
   root@qemux86-64:~# rpm -qa | grep netavark
   netavark-1.10.3-r0.core2_64

Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits:

    bfc63cc32 fix remote build isolation when server runs as root
    f32338dfc bump version to v5.0.1-dev
    e71ec6f1d New release: v5.0.0
    6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753
    eb2b16d6d [v5.0] Bump Buildah to v1.35.1
    43b9ea8b9 Adjust to the standard location of gvforwarder used in new images
    4a84f39b3 Switch to 5.x WSL machine os stream using new automation
    a03de4c14 rpm: use macro supported vendoring
    069439820 Bump to v5.0.0-dev
    f8888a13b Bump to v5.0.0-RC7
    2e387df07 Add release notes for v5.0.0-rc7
    d36ce9c2b fix invalid HTTP header values when hijacking a connection
    8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote
    59512272b pkg/machine: make checkExclusiveActiveVM race free
    51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
    412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting
    1ca93f3fb pkg/machine: refresh config after we hold lock
    71320df8e rpm: update containers-common dep on f40+
    e58cb97de Change API socket to be machine name isolated
    dbf38779b Makefile: drop tests-included from validate target
    0fdd83173 Add release notes for v5.0.0
    d7bc7b7b4 do not require policy.json
    82597144b Machine decompress.go refactoring follow-up
    abaa179aa Add target win-gvproxy in winmake.ps1
    4c5d26f6f Add final machine endpoint
    068ddfd19 update API doc version to 5.0.0
    f2af295e4 Bump to 5.0.0-dev
    d26113ca8 Bump to 5.0.0-rc6
    52ed774c2 docs: generate-systemd: add clarification statement
    3d6758a61 docs: quadlet: improve docs on root/rootless dirs
    885dd2add [CI:DOCS] performance: fix URL and kernel version requirement
    e6ac569a1 [CI:DOCS] Remove outdated references
    364813da6 Add note for RHEL 8.5
    e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
    f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
    9b21a5b79 Bump to v5.0.0-dev
    bbad09bb0 Bump to v5.0.0-rc5
    432f4fbf9 Fix Mac CI
    d54a37399 Complete policy.json inclusion
    b234bb55e Bump Buildah to v1.35.0
    5d3a19f8d podman compose: enable machine socket connection
    6f4ee16d9 [CI:DOCS] Add farm command to commands list
    25f3a8ce7 podman machine start/stop do not write config unlocked
    75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer
    7a7591492 podman machine init: do not write config unlocked
    7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter
    5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users
    4c6505be5 Fix the logic for detecting an unexpected close error
    81906081e vendor libhvee-0.7.0
    3c9c5be7d podman machine set: change options only locked
    a65b546c6 Remove copySparseFile
    2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath
    724c5a06b Don't read full VM File before decompressing
    ff81cf7c7 [CI:DOCS] Fix windows installer action
    4d2fc293c machine: make more use of strongunits
    92b67a69a Fix wrong units size return
    79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c
    d6d260174 [CI:DOCS] Migrate podman container image
    a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0
    39851a0b9 CI: try to fix more flakes
    835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
    945995be1 e2e: fix potential race in file-locks test
    02403c2e6 Makefile: podman should have correct selinux label
    9ee96a956 properly implement pull-error event status
    155cd463d fix(deps): update module golang.org/x/tools to v0.19.0
    6272abbbb Resurrect auto-port reassignment, but for all providers
    ef7727238 Refactor env dir and port functions into new leaf pkgs
    eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0
    3b72f9178 Revert "Expose as-tested Mac/Windows repository state"
    24516f3ef fix(deps): update module golang.org/x/term to v0.18.0
    e8bf9a323 Update podman-for-windows.md
    8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af
    e09444327 machine init: print output to improve UX
    530782e11 logformatter: fixes for Macintosh
    ebce0e71d test/e2e: check for stderr errors in cleanup()
    ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished)
    fc4e16366 Bump to v5.0.0-dev
    bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0
    cfc5b8e0f Bump to v5.0.0-RC4
    185981fa5 Copy past golang/expansion form ks8.io/kubernetes

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-22 18:52:13 +00:00
Bruce Ashfield
3fbc1ae7ca podman: conditionally add cni build tag 
We should ensure that cni is built as part of podman if
that's the configured virtual runtime.

Although cni is not a primary networking backend for
podman, this also allows it to be skipped if netavark is
used.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-22 18:37:08 +00:00
Bruce Ashfield
4666b2a2d8 xen: use bzImage for boot (instead of vmlinux) 
Testing with the latest oe-core was unable to boot and
only syslinux was running.

It appears that the desired kernel is not on the /boot
partition, and hence the system can't continue.

bzImage is installed and available, so we switch to that.

We also ensure that both kernel-vmlinux and kernel-image
are installed to the rootfs so we can have choices in
the future.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-21 23:15:13 +00:00
Bruce Ashfield
4e6a74ff63 Revert "docker-compose: update to v2.24.6" 
One of the vendor components has deleted a commit that docker-compose
is using (and has listed as a replacement in go.mod). Until
docker-compose comes up with a solution, we temporarily revert to
and older compose.

We'll update to the latest 2.23.x if this isn't resolved in 2.24+
before release.

This reverts commit 29ec8e5cea.
 2024-03-20 17:19:21 +00:00
Bruce Ashfield
cabcaf1007 k3s: package check-config.sh 
In a similar way we package check-config.sh for docker, we package
the contrib script for k3s.

root@qemux86-64:/# ./usr/share/k3s/check-config.sh                                                                                                                                                                                                                                  [48/4924]

Verifying binaries in ./usr/share/k3s:
- sha256sum: sha256sums unavailable
- links: link list unavailable

System:
- /usr/sbin iptables v1.8.10 (legacy): ok
- swap: disabled
- routes: ok

Limits:
- /proc/sys/kernel/keys/root_maxkeys: 1000000

info: reading kernel config from /proc/config.gz ...

Generally Necessary:
- cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good
- CONFIG_NAMESPACES: enabled
- CONFIG_NET_NS: enabled
- CONFIG_PID_NS: enabled
- CONFIG_IPC_NS: enabled
- CONFIG_UTS_NS: enabled
- CONFIG_CGROUPS: enabled
- CONFIG_CGROUP_PIDS: enabled
- CONFIG_CGROUP_CPUACCT: enabled
- CONFIG_CGROUP_DEVICE: enabled
- CONFIG_CGROUP_FREEZER: enabled
- CONFIG_CGROUP_SCHED: enabled
- CONFIG_CPUSETS: enabled
- CONFIG_MEMCG: enabled
- CONFIG_KEYS: enabled
- CONFIG_VETH: enabled
- CONFIG_BRIDGE: enabled
- CONFIG_BRIDGE_NETFILTER: enabled
- CONFIG_IP_NF_FILTER: enabled (as module)
- CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module)
- CONFIG_IP_NF_NAT: enabled (as module)
- CONFIG_NF_NAT: enabled (as module)
- CONFIG_POSIX_MQUEUE: enabled

Optional Features:
- CONFIG_USER_NS: enabled
- CONFIG_SECCOMP: enabled
- CONFIG_BLK_CGROUP: enabled
- CONFIG_BLK_DEV_THROTTLING: enabled
- CONFIG_CGROUP_PERF: enabled
- CONFIG_CGROUP_HUGETLB: enabled
- CONFIG_NET_CLS_CGROUP: enabled
- CONFIG_CGROUP_NET_PRIO: enabled
- CONFIG_CFS_BANDWIDTH: enabled
- CONFIG_FAIR_GROUP_SCHED: enabled
- CONFIG_RT_GROUP_SCHED: enabled
- CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module)
- CONFIG_IP_SET: enabled (as module)
- CONFIG_IP_VS: enabled
- CONFIG_IP_VS_NFCT: enabled
- CONFIG_IP_VS_PROTO_TCP: enabled
- CONFIG_IP_VS_PROTO_UDP: enabled
- CONFIG_IP_VS_RR: enabled (as module)
- CONFIG_EXT4_FS: enabled
- CONFIG_EXT4_FS_POSIX_ACL: enabled
- CONFIG_EXT4_FS_SECURITY: enabled
- Network Drivers:
  - "overlay":
    - CONFIG_VXLAN: enabled (as module)
      Optional (for encrypted networks):
      - CONFIG_CRYPTO: enabled
      - CONFIG_CRYPTO_AEAD: enabled
      - CONFIG_CRYPTO_GCM: enabled
      - CONFIG_CRYPTO_SEQIV: enabled
      - CONFIG_CRYPTO_GHASH: enabled
      - CONFIG_XFRM: enabled
      - CONFIG_XFRM_USER: enabled (as module)
      - CONFIG_XFRM_ALGO: enabled
      - CONFIG_INET_ESP: enabled (as module)
      - CONFIG_INET_XFRM_MODE_TRANSPORT: missing
- Storage Drivers:
  - "overlay":
    - CONFIG_OVERLAY_FS: enabled

STATUS: pass

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-19 14:02:23 +00:00
Bruce Ashfield
c936858b1b kernel/cfg: update configuration for kubernetes 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-19 13:36:33 +00:00
Bruce Ashfield
29603462e1 kernel/cfg: add space before distro optional features 
distro optional features need to ensure that they are space
separated or we'll have configuration failures.

Additionally, always add a local configuration fragment for
easy debug and enablement of options.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-19 13:35:05 +00:00
Bruce Ashfield
54f80102b0 k3s: set version.UpstreamGolang in binaries 
k3s will refuse to start if the golang version it was built
with doesn't match the VERSION_GOLANG linker variable.

As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668

We query our version of the compiler and set it in the binaries
to ensure they match.

Note: this may cause issues if you bump the golang compiler, but
k3s doesn't rebuild. We'll worry about that when it happens.

With this change, k3s starts and the node becomes ready.

root@qemux86-64:~# uname -a
Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar  3 16:28:22 UTC 2024 x86_64 GNU/Linux

root@qemux86-64:~# kubectl get nodes
NAME         STATUS   ROLES                  AGE   VERSION
qemux86-64   Ready    control-plane,master   10m   v1.28.7-k3s1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 19:09:05 +00:00
Bruce Ashfield
5984a2e4b6 xen-tools/4.17: update to -tip 
Bumping xen to version RELEASE-4.17.3-53-g0ebd2e49bc, which comprises the following commits:

    0ebd2e49bc x86: protect conditional lock taking from speculative execution
    074b4c8987 x86/mm: add speculation barriers to open coded locks
    2cc5e57be6 locking: attempt to ensure lock wrappers are always inline
    468a368b2e percpu-rwlock: introduce support for blocking speculation into critical regions
    7454dad6ee rwlock: introduce support for blocking speculation into critical regions
    9d2f136328 x86/spinlock: introduce support for blocking speculation into critical regions
    0a53565f18 xen: Swap order of actions in the FREE*() macros
    bf70ce8b34 x86/paging: Delete update_cr3()'s do_locking parameter
    d85481135d x86/spec-ctrl: Mitigation Register File Data Sampling
    6663430b44 x86/spec-ctrl: VERW-handling adjustments
    d55d52961d x86/spec-ctrl: Rename VERW related options
    76af773de5 x86/spec-ctrl: Perform VERW flushing later in exit paths
    77f2bec134 x86/vmx: Perform VERW flushing later in the VMExit path
    abc43cf5a6 x86: Resync intel-family.h from Linux
    e691f99f17 x86/entry: Introduce EFRAME_* constants
    1f94117bec x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite()
    1e9808227c hvmloader/PCI: skip huge BARs in certain calculations
    54dacb5c02 x86/cpu-policy: Allow for levelling of VERW side effects
    2f49d9f89c x86/altcall: always use a temporary parameter stashing variable
    c4ee68eda9 libxl: Fix segfault in device_model_spawn_outcome
    a59106b276 xen/livepatch: properly build the noapply and norevert tests
    5564323f64 xen/livepatch: fix norevert test attempt to open-code revert
    c54cf903b0 xen/livepatch: search for symbols in all loaded payloads
    b11917de0c xen/livepatch: register livepatch regions when loaded
    0ce25b46ab x86/spec: do not print thunk option selection if not built-in
    693455c3c3 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled
    76ea2aab36 x86/spec: print the built-in SPECULATIVE_HARDEN_* options
    b75bee1832 xen/sched: Fix UB shift in compat_set_timer_op()
    9c0d518eb8 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware
    6cbccc4071 xen/arm: Fix UBSAN failure in start_xen()
    49f7760237 x86: account for shadow stack in exception-from-stub recovery
    9165001081 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled
    1aafe054e7 x86/altcall: use a union as register type for function parameters on clang
    229e8a72ee xen/cmdline: fix printf format specifier in no_config_param()
    f6b1279254 xen/livepatch: fix norevert test hook setup typo
    16f2e47eb1 x86emul: add missing EVEX.R' checks
    ea86997727 build: make sure build fails when running kconfig fails
    b974528073 libxl: Disable relocating memory for qemu-xen in stubdomain too
    1330a5fe44 build: Replace `which` with `command -v`
    b3ae0e6201 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path
    415f770d23 x86/hvm: Fix fast singlestep state persistence
    463aaf3fbf amd-vi: fix IVMD memory type checks
    61da71968e tools/xentop: fix sorting bug for some columns
    091466ba55 x86/p2m-pt: fix off by one in entry check assert
    afb85cf1e8 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets)
    7bd612727d x86/vmx: Disallow the use of inactivity states
    eca5416f9b x86/vmx: Fix IRQ handling for EXIT_REASON_INIT
    d0ad2cc5ea x86/intel: ensure Global Performance Counter Control is setup correctly
    0ef1fb43dd CirrusCI: drop FreeBSD 12
    abcc32f063 x86/amd: Extend CPU erratum #1474 fix to more affected models
    6b1864afc1 VT-d: Fix "else" vs "#endif" misplacement
    f9e1ed51bd pci: fail device assignment if phantom functions cannot be assigned
    4f6e9d4327 update Xen version to 4.17.4-pre
    949a4aad41 update Xen version to 4.17.3
    958706fd2e xen/arm: page: Avoid pointer overflow on cache clean & invalidate
    e2caee491a xen/sched: fix sched_move_domain()
    4000522008 Only compile the hypervisor with -Wdeclaration-after-statement
    83ae677d2a x86/x2apic: introduce a mixed physical/cluster mode
    6eb98dda5c xen/domain: fix error path in domain_create()
    5d01aa7ad5 xen/sched: fix adding offline cpu to cpupool
    7d8bd64e11 x86emul: avoid triggering event related assertions
    4923450c0e tools/xg: Fix potential memory leak in cpu policy getters/setters
    eac655d6be xen/x86: In x2APIC mode, derive LDR from APIC ID
    e3c1ffb2a3 livepatch: do not use .livepatch.funcs section to store internal state
    32c3403e4c x86/mem_sharing: Release domain if we are not able to enable memory sharing
    e1f9cb16e2 xen/sched: fix sched_move_domain()
    28f44b603f xen/grant: Fix build in PV_SHIM
    0527bab090 x86/spec-ctrl: Add SRSO whitepaper URL
    c635c17fde x86/i8259: do not assume interrupts always target CPU0
    d10db37b78 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER
    267ac3c592 x86/pv-shim: fix grant table operations for 32-bit guests
    4bd2c8c8b9 x86/mem_sharing: add missing m2p entry when mapping shared_info page
    011d20a69c docs: Fix IOMMU command line docs some more
    bb13e63143 x86: support data operand independent timing mode
    40685f9283 iommu/vt-d: fix SAGAW capability parsing
    ee4ce01198 iommu: fix quarantine mode command line documentation
    f6996645d2 x86/pvh: fix identity mapping of low 1MB
    e1275e58c7 x86/amd: Address AMD erratum #1485
    1a94fc132a x86: Add bit definitions for Automatic IBRS
    7eb2a4eba1 tools/pygrub: Fix pygrub's --entry flag for python3
    65e1f3d289 cxenstored: wait until after reset to notify dom0less domains
    6384cdf0c3 x86: Clarify that only 5 hypercall parameters are supported
    2e87f3a03a docs/sphinx: Switch hypercall-abi.rst to named footnotes
    4f43614a89 x86/amd: do not expose HWCR.TscFreqSel to guests
    0311ff4a2c x86/spec-ctrl: Remove conditional IRQs-on-ness for INT $0x80/0x82 paths
    b7a1e10539 iommu/amd-vi: use correct level for quarantine domain page tables
    0b56bed864 x86/pv: Correct the auditing of guest breakpoint addresses
    3f8b444072 x86/svm: Fix asymmetry with AMD DR MASK context switching
    46d00dbf4c libxl: limit bootloader execution in restricted mode
    42bf49d74b libxl: add support for running bootloader in restricted mode
    f5e211654e tools/pygrub: Deprivilege pygrub
    8ee19246ad tools/libfsimage: Export a new function to preload all plugins
    3797742067 tools/pygrub: Open the output files earlier
    e7059f16f7 tools/pygrub: Small refactors
    8a584126ea tools/pygrub: Remove unnecessary hypercall
    eb4efdac4c libfsimage/xfs: Add compile-time check to libfsimage
    78143c5336 libfsimage/xfs: Sanity-check the superblock during mounts
    f1cd620cc3 libfsimage/xfs: Amend mask32lo() to allow the value 32
    d665c6690e libfsimage/xfs: Remove dead code
    0d8f9f7f27 iommu/amd-vi: flush IOMMU TLB when flushing the DTE
    c4e05c97f5 tools/xenstored: domain_entry_fix(): Handle conflicting transaction
    90c540c589 x86/shadow: defer releasing of PV's top-level shadow reference
    9ac2f49f5f x86/spec-ctrl: Mitigate the Zen1 DIV leakage
    19ee1e1faa x86/amd: Introduce is_zen{1,2}_uarch() predicates
    2e2c3efcfc x86/spec-ctrl: Issue VERW during IST exit to Xen
    e4a71bc0da x86/entry: Track the IST-ness of an entry for the exit paths
    5f7efd47c8 x86/entry: Adjust restore_all_xen to hold stack_end in %r14
    ba023e93d0 x86/spec-ctrl: Improve all SPEC_CTRL_{ENTER,EXIT}_* comments
    3952c73bdb x86/spec-ctrl: Turn the remaining SPEC_CTRL_{ENTRY,EXIT}_* into asm macros
    84690fb82c x86/spec-ctrl: Fold DO_SPEC_CTRL_EXIT_TO_XEN into it's single user
    dc28aba565 x86/spec-ctrl: Fix confusion between SPEC_CTRL_EXIT_TO_XEN{,_IST}
    d2d2dcae87 x86/AMD: extend Zenbleed check to models "good" ucode isn't known for
    d31e5b2a9c xen/arm: page: Handle cache flush of an element at the top of the address space
    699de51274 x86/irq: fix reporting of spurious i8259 interrupts
    8be85d8c0d x86/vmx: Revert "x86/VMX: sanitize rIP before re-entering guest"
    a939e953cd x86/svm: Fix valid condition in svm_get_pending_event()
    7ca58fbef4 tboot: Disable CET at shutdown
    0429822978 libxl: slightly correct JSON generation of CPU policy
    ba360fbb64 build: correct gas --noexecstack check
    5116fe12d8 x86/iommu: pass full IO-APIC RTE for remapping table update
    e08e7330c5 iommu/vtd: rename io_apic_read_remap_rte() local variable
    1bd4523d69 x86/ioapic: RTE modifications must use ioapic_write_entry
    a885649098 x86/ioapic: add a raw field to RTE struct
    d0cdd34dd8 x86/ioapic: sanitize IO-APIC pins before enabling lapic LVTERR/ESR
    f04295dd80 xenalyze: Handle start-of-day ->RUNNING transitions
    e5f9987d5f x86/head: check base address alignment
    7b5155a79e xen/vcpu: ignore VCPU_SSHOTTMR_future
    052a8d24bc tools/vchan: Fix -Wsingle-bit-bitfield-constant-conversion
    f00d563095 CI: Resync FreeBSD config with staging
    e418a77295 rombios: Remove the use of egrep
    24487fec3b rombios: Avoid using K&R function syntax
    ae1045c429 rombios: Work around GCC issue 99578
    37f1d68fa3 x86emul: rework wrapping of libc functions in test and fuzzing harnesses
    476d2624ec Config.mk: evaluate XEN_COMPILE_ARCH and XEN_OS immediately
    a1f68fb567 build: evaluate XEN_BUILD_* and XEN_DOMAIN immediately
    36e84ea02e build: remove TARGET_ARCH, a duplicate of SRCARCH
    56076ef445 build: remove TARGET_SUBARCH, a duplicate of ARCH
    1c3927f8f6 build: define ARCH and SRCARCH later
    8d84be5b55 libxl: Use XEN_LIB_DIR to store bootloader from pygrub
    7d88979849 x86: fix build with old gcc after CPU policy changes
    2f337a04bf update Xen version to 4.17.3-pre
    322a20add0 Update Xen to version 4.17.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
7fe0f9a8c0 xen/4.17: update to -tip 
Bumping xen to version RELEASE-4.17.3-53-g0ebd2e49bc, which comprises the following commits:

    0ebd2e49bc x86: protect conditional lock taking from speculative execution
    074b4c8987 x86/mm: add speculation barriers to open coded locks
    2cc5e57be6 locking: attempt to ensure lock wrappers are always inline
    468a368b2e percpu-rwlock: introduce support for blocking speculation into critical regions
    7454dad6ee rwlock: introduce support for blocking speculation into critical regions
    9d2f136328 x86/spinlock: introduce support for blocking speculation into critical regions
    0a53565f18 xen: Swap order of actions in the FREE*() macros
    bf70ce8b34 x86/paging: Delete update_cr3()'s do_locking parameter
    d85481135d x86/spec-ctrl: Mitigation Register File Data Sampling
    6663430b44 x86/spec-ctrl: VERW-handling adjustments
    d55d52961d x86/spec-ctrl: Rename VERW related options
    76af773de5 x86/spec-ctrl: Perform VERW flushing later in exit paths
    77f2bec134 x86/vmx: Perform VERW flushing later in the VMExit path
    abc43cf5a6 x86: Resync intel-family.h from Linux
    e691f99f17 x86/entry: Introduce EFRAME_* constants
    1f94117bec x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite()
    1e9808227c hvmloader/PCI: skip huge BARs in certain calculations
    54dacb5c02 x86/cpu-policy: Allow for levelling of VERW side effects
    2f49d9f89c x86/altcall: always use a temporary parameter stashing variable
    c4ee68eda9 libxl: Fix segfault in device_model_spawn_outcome
    a59106b276 xen/livepatch: properly build the noapply and norevert tests
    5564323f64 xen/livepatch: fix norevert test attempt to open-code revert
    c54cf903b0 xen/livepatch: search for symbols in all loaded payloads
    b11917de0c xen/livepatch: register livepatch regions when loaded
    0ce25b46ab x86/spec: do not print thunk option selection if not built-in
    693455c3c3 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled
    76ea2aab36 x86/spec: print the built-in SPECULATIVE_HARDEN_* options
    b75bee1832 xen/sched: Fix UB shift in compat_set_timer_op()
    9c0d518eb8 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware
    6cbccc4071 xen/arm: Fix UBSAN failure in start_xen()
    49f7760237 x86: account for shadow stack in exception-from-stub recovery
    9165001081 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled
    1aafe054e7 x86/altcall: use a union as register type for function parameters on clang
    229e8a72ee xen/cmdline: fix printf format specifier in no_config_param()
    f6b1279254 xen/livepatch: fix norevert test hook setup typo
    16f2e47eb1 x86emul: add missing EVEX.R' checks
    ea86997727 build: make sure build fails when running kconfig fails
    b974528073 libxl: Disable relocating memory for qemu-xen in stubdomain too
    1330a5fe44 build: Replace `which` with `command -v`
    b3ae0e6201 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path
    415f770d23 x86/hvm: Fix fast singlestep state persistence
    463aaf3fbf amd-vi: fix IVMD memory type checks
    61da71968e tools/xentop: fix sorting bug for some columns
    091466ba55 x86/p2m-pt: fix off by one in entry check assert
    afb85cf1e8 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets)
    7bd612727d x86/vmx: Disallow the use of inactivity states
    eca5416f9b x86/vmx: Fix IRQ handling for EXIT_REASON_INIT
    d0ad2cc5ea x86/intel: ensure Global Performance Counter Control is setup correctly
    0ef1fb43dd CirrusCI: drop FreeBSD 12
    abcc32f063 x86/amd: Extend CPU erratum #1474 fix to more affected models
    6b1864afc1 VT-d: Fix "else" vs "#endif" misplacement
    f9e1ed51bd pci: fail device assignment if phantom functions cannot be assigned
    4f6e9d4327 update Xen version to 4.17.4-pre
    949a4aad41 update Xen version to 4.17.3
    958706fd2e xen/arm: page: Avoid pointer overflow on cache clean & invalidate
    e2caee491a xen/sched: fix sched_move_domain()
    4000522008 Only compile the hypervisor with -Wdeclaration-after-statement
    83ae677d2a x86/x2apic: introduce a mixed physical/cluster mode
    6eb98dda5c xen/domain: fix error path in domain_create()
    5d01aa7ad5 xen/sched: fix adding offline cpu to cpupool
    7d8bd64e11 x86emul: avoid triggering event related assertions
    4923450c0e tools/xg: Fix potential memory leak in cpu policy getters/setters
    eac655d6be xen/x86: In x2APIC mode, derive LDR from APIC ID
    e3c1ffb2a3 livepatch: do not use .livepatch.funcs section to store internal state
    32c3403e4c x86/mem_sharing: Release domain if we are not able to enable memory sharing
    e1f9cb16e2 xen/sched: fix sched_move_domain()
    28f44b603f xen/grant: Fix build in PV_SHIM
    0527bab090 x86/spec-ctrl: Add SRSO whitepaper URL
    c635c17fde x86/i8259: do not assume interrupts always target CPU0
    d10db37b78 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER
    267ac3c592 x86/pv-shim: fix grant table operations for 32-bit guests
    4bd2c8c8b9 x86/mem_sharing: add missing m2p entry when mapping shared_info page
    011d20a69c docs: Fix IOMMU command line docs some more
    bb13e63143 x86: support data operand independent timing mode
    40685f9283 iommu/vt-d: fix SAGAW capability parsing
    ee4ce01198 iommu: fix quarantine mode command line documentation
    f6996645d2 x86/pvh: fix identity mapping of low 1MB
    e1275e58c7 x86/amd: Address AMD erratum #1485
    1a94fc132a x86: Add bit definitions for Automatic IBRS
    7eb2a4eba1 tools/pygrub: Fix pygrub's --entry flag for python3
    65e1f3d289 cxenstored: wait until after reset to notify dom0less domains
    6384cdf0c3 x86: Clarify that only 5 hypercall parameters are supported
    2e87f3a03a docs/sphinx: Switch hypercall-abi.rst to named footnotes
    4f43614a89 x86/amd: do not expose HWCR.TscFreqSel to guests
    0311ff4a2c x86/spec-ctrl: Remove conditional IRQs-on-ness for INT $0x80/0x82 paths
    b7a1e10539 iommu/amd-vi: use correct level for quarantine domain page tables
    0b56bed864 x86/pv: Correct the auditing of guest breakpoint addresses
    3f8b444072 x86/svm: Fix asymmetry with AMD DR MASK context switching
    46d00dbf4c libxl: limit bootloader execution in restricted mode
    42bf49d74b libxl: add support for running bootloader in restricted mode
    f5e211654e tools/pygrub: Deprivilege pygrub
    8ee19246ad tools/libfsimage: Export a new function to preload all plugins
    3797742067 tools/pygrub: Open the output files earlier
    e7059f16f7 tools/pygrub: Small refactors
    8a584126ea tools/pygrub: Remove unnecessary hypercall
    eb4efdac4c libfsimage/xfs: Add compile-time check to libfsimage
    78143c5336 libfsimage/xfs: Sanity-check the superblock during mounts
    f1cd620cc3 libfsimage/xfs: Amend mask32lo() to allow the value 32
    d665c6690e libfsimage/xfs: Remove dead code
    0d8f9f7f27 iommu/amd-vi: flush IOMMU TLB when flushing the DTE
    c4e05c97f5 tools/xenstored: domain_entry_fix(): Handle conflicting transaction
    90c540c589 x86/shadow: defer releasing of PV's top-level shadow reference
    9ac2f49f5f x86/spec-ctrl: Mitigate the Zen1 DIV leakage
    19ee1e1faa x86/amd: Introduce is_zen{1,2}_uarch() predicates
    2e2c3efcfc x86/spec-ctrl: Issue VERW during IST exit to Xen
    e4a71bc0da x86/entry: Track the IST-ness of an entry for the exit paths
    5f7efd47c8 x86/entry: Adjust restore_all_xen to hold stack_end in %r14
    ba023e93d0 x86/spec-ctrl: Improve all SPEC_CTRL_{ENTER,EXIT}_* comments
    3952c73bdb x86/spec-ctrl: Turn the remaining SPEC_CTRL_{ENTRY,EXIT}_* into asm macros
    84690fb82c x86/spec-ctrl: Fold DO_SPEC_CTRL_EXIT_TO_XEN into it's single user
    dc28aba565 x86/spec-ctrl: Fix confusion between SPEC_CTRL_EXIT_TO_XEN{,_IST}
    d2d2dcae87 x86/AMD: extend Zenbleed check to models "good" ucode isn't known for
    d31e5b2a9c xen/arm: page: Handle cache flush of an element at the top of the address space
    699de51274 x86/irq: fix reporting of spurious i8259 interrupts
    8be85d8c0d x86/vmx: Revert "x86/VMX: sanitize rIP before re-entering guest"
    a939e953cd x86/svm: Fix valid condition in svm_get_pending_event()
    7ca58fbef4 tboot: Disable CET at shutdown
    0429822978 libxl: slightly correct JSON generation of CPU policy
    ba360fbb64 build: correct gas --noexecstack check
    5116fe12d8 x86/iommu: pass full IO-APIC RTE for remapping table update
    e08e7330c5 iommu/vtd: rename io_apic_read_remap_rte() local variable
    1bd4523d69 x86/ioapic: RTE modifications must use ioapic_write_entry
    a885649098 x86/ioapic: add a raw field to RTE struct
    d0cdd34dd8 x86/ioapic: sanitize IO-APIC pins before enabling lapic LVTERR/ESR
    f04295dd80 xenalyze: Handle start-of-day ->RUNNING transitions
    e5f9987d5f x86/head: check base address alignment
    7b5155a79e xen/vcpu: ignore VCPU_SSHOTTMR_future
    052a8d24bc tools/vchan: Fix -Wsingle-bit-bitfield-constant-conversion
    f00d563095 CI: Resync FreeBSD config with staging
    e418a77295 rombios: Remove the use of egrep
    24487fec3b rombios: Avoid using K&R function syntax
    ae1045c429 rombios: Work around GCC issue 99578
    37f1d68fa3 x86emul: rework wrapping of libc functions in test and fuzzing harnesses
    476d2624ec Config.mk: evaluate XEN_COMPILE_ARCH and XEN_OS immediately
    a1f68fb567 build: evaluate XEN_BUILD_* and XEN_DOMAIN immediately
    36e84ea02e build: remove TARGET_ARCH, a duplicate of SRCARCH
    56076ef445 build: remove TARGET_SUBARCH, a duplicate of ARCH
    1c3927f8f6 build: define ARCH and SRCARCH later
    8d84be5b55 libxl: Use XEN_LIB_DIR to store bootloader from pygrub
    7d88979849 x86: fix build with old gcc after CPU policy changes
    2f337a04bf update Xen version to 4.17.3-pre
    322a20add0 Update Xen to version 4.17.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
ca70674ea8 xen-tools-dev: update to -tip 
Bumping xen to version 4.18.0-rc4-707-g03cf7ca23e, which comprises the following commits:

    03cf7ca23e x86: protect conditional lock taking from speculative execution
    42a572a38e x86/mm: add speculation barriers to open coded locks
    197ecd838a locking: attempt to ensure lock wrappers are always inline
    f218daf6d3 percpu-rwlock: introduce support for blocking speculation into critical regions
    a1fb15f616 rwlock: introduce support for blocking speculation into critical regions
    7ef0084418 x86/spinlock: introduce support for blocking speculation into critical regions
    c4f427ec87 xen: Swap order of actions in the FREE*() macros
    fb5b6f6744 x86/spec-ctrl: Mitigation Register File Data Sampling
    1eb91a8a06 x86/spec-ctrl: VERW-handling adjustments
    f7603ca252 x86/spec-ctrl: Rename VERW related options
    0a666cf2cd x86/spec-ctrl: Perform VERW flushing later in exit paths
    475fa20b73 x86/vmx: Perform VERW flushing later in the VMExit path
    7c81558208 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite()
    1396892d80 xen/ppc: switch PPC to use asm-generic/device.h
    e90089db3f arm/smmu: address some violations of MISRA C Rule 20.7
    acb13d1b81 x86/irq: parenthesize negative constants
    22d0e3487f xen/arm: address some violations of MISRA C Rule 20.7
    d937b2d1ee xen/param: address violations of MISRA C Rule 20.7
    e51649b4c2 xen/include: address violations of MISRA C Rule 20.7
    9106769ea9 xen/spinlock: address violations of MISRA C Rule 20.7
    c44cac2290 xen/x86: bzImage parse kernel_alignment
    bf7a2eaede features.h: Replace hard tabs
    698c35184c xen/domain.h: Centrialize is_domain_direct_mapped()
    8395f275eb MAINTAINERS: drop AMD SVM and Intel VT-x sections
    8ef780a1cf xen/mem-access: ifdef inclusion of <asm/mem_access.h>
    136fff30b3 xen/asm-generic: introduce stub header monitor.h
    ef31ffbc3d automation/eclair: add deviation for MISRA C:2012 Rule 16.6
    90173fc5a2 tools/9pfsd: Fix build error caused by strerror_r
    b52c45b1bd MAINTAINERS: add an entry for tools/9pfsd
    b083b1c393 x86/livepatch: Relax permissions on rodata too
    ef969144a4 xen/virtual-region: Include rodata pointers
    989556c6f8 xen/virtual-region: Rename the start/end fields
    08bb338f09 SUPPORT.md: add xen-9pfsd
    49b664f5bf x86/asm: add commas to further macros definitions/invocations
    4ad4df0964 CHANGELOG: add an entry for 9pfsd
    9249a441c9 x86/asm: add commas to BUILD_BUG_ON
    5daf46b439 Kbuild: simplify as-insn a little
    2f7481d592 x86/EFI: correct compiler probing
    66c8e9b76c tools/xentop: Add VBD3 support to xentop
    f4900d6d69 9pfsd: allow building with old glibc
    e14fece7d4 xen/{RISCV,PPC}/xen.lds: Delete duplicate _erodata definitions
    cd53ee9c41 SUPPORT.md: clarify support of booting 32-bit Xen on ARMv8
    e7b62fcfd9 x86: i387.c cleanup
    57acad12a0 hvmloader/PCI: skip huge BARs in certain calculations
    91ed573391 xen/riscv: introduces acquire, release and full barriers
    cfbcfce494 Argo: don't obtain excess page references
    fc84b4a5a3 xen/tasklet: address violations of MISRA C Rule 20.7
    47fdf9a79f xen/errno: address violations of MISRA C Rule 20.7
    771c4e3963 xen/arm: smmuv3: address violations of MISRA C Rule 20.7
    9174674c3b arch: move array_index_mask_nospec()
    2d514678a3 hvmloader: suppress GNU ld 2.39 warning about RWX load segments
    856664f774 docs/misra/rules.rst: add rule 14.4
    c40bc0576d x86/mm: re-implement get_page_light() using an atomic increment
    de17162caf x86/cpu-policy: Allow for levelling of VERW side effects
    0263dc9069 tests/resource: Fix HVM guest in !SHADOW builds
    e2d8a65225 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies
    5420aa165d x86/cpu-policy: Hide x2APIC from PV guests
    efad36f1ba docs/misra/rules.rst: Fix entry for 20.12 rule
    4cac80e226 docs/misra/rules.rst: add rule 16.6 and 20.12
    e1de3a0536 automation/eclair: tag MISRA C:2012 Rule 8.2 as clean
    b87697fc1a automation/eclair: fully deviate MISRA C:2012 Rules 5.7 and 18.7
    635dd1120a pci: fix locking around vPCI removal in pci_remove_device()
    d388673d1b tools/xenstored: have a single do_control_memreport()
    8937d44628 tools/xenstored: support complete log capabilities in stubdom
    2a750fcf7d tools/xenstored: add helpers for filename handling
    0a999849c8 tools/xenstored: mount 9pfs device in stubdom
    254c6f787c stubdom: extend xenstore stubdom configs
    90c0b97e27 config: update Mini-OS commit
    7159164bee xen/riscv: introduce nospec.h
    c20850540a x86/altcall: always use a temporary parameter stashing variable
    c103bb8ad4 x86: remove redundant XEN_SHSTK check from reinit_bsp_stack()
    b36d850c22 docs: Move function and macro properties in docs/misra
    6d05d52940 x86/memsharing: use an atomic add instead of a cmpxchg loop
    d4f3d35f04 libxl: Fix segfault in device_model_spawn_outcome
    54fd7b9974 xen/livepatch: group and document payload hooks
    e579677095 xen/livepatch: properly build the noapply and norevert tests
    cdae267ce1 xen/livepatch: fix norevert test attempt to open-code revert
    d2daa40fb3 xen/livepatch: search for symbols in all loaded payloads
    a57b4074ab xen/livepatch: register livepatch regions when loaded
    195e75371b x86: Resync intel-family.h from Linux
    b2b3d40f9a xen/arm: Fix arm32 build failure when early printk is enabled
    ba0d1a7ced xen/lib: introduce generic find next bit operations
    801c4e7262 tests/vpci: fix unit tests after locking change
    576528a2a7 x86/spec: do not print thunk option selection if not built-in
    8441fa806a x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled
    6e9507f7d5 x86/spec: print the built-in SPECULATIVE_HARDEN_* options
    52ebde3cfa vpci/header: program p2m with guest BAR view
    622bdd9628 vpci/header: handle p2m range sets per BAR
    99eeb2eb0b rangeset: add rangeset_purge() function
    fe62abfcb2 rangeset: add RANGESETF_no_print flag
    8c5bca7074 vpci/header: implement guest BAR register handlers
    e262826159 vpci/header: rework exit path in init_header()
    f20dde9259 vpci: add hooks for PCI device assign/de-assign
    80b0eb095a vpci: restrict unhandled read/write operations for guests
    4f78438b45 vpci: use per-domain PCI lock to protect vpci structure
    cfe3ad6712 x86: re-run exception-from-stub recovery selftests with CET-SS enabled
    91f5f7a915 x86: account for shadow stack in exception-from-stub recovery
    28154a245c x86: document how stub exception recovery works
    7356bb5e47 xen/arm: ffa: reclaim shared memory on guest destroy
    ca7c872c70 xen: introduce Kconfig function alignment option
    84b9617c03 xen/ppc: address violations of MISRA C:2012 Rule 11.8
    150e7a4e79 automation: remove bin86/dev86 from tumbleweed image
    37541208f1 x86/entry: Introduce EFRAME_* constants
    0603a0c092 x86/entry: Simplify expressions in compat_restore_all_guest()
    7d3c91377d x86/entry: Adjustments to "reduce assembly code size of entry points"
    6f1b280876 docs/sphinx: Start an FAQ, and add Kconfig/CET details
    03fb5f503c nestedsvm: Remove bogus debug message from nestedsvm_check_intercepts
    2beef32b42 xen/hvm: Move other hvm_function_table booleans into the caps bitfield
    42b8e78b37 svm: Improve type of cpu_has_svm_feature
    5cd5e3070b xen/hvm: Convert hap_capabilities into a bitfield
    60e00f77a5 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled
    21051291ad automation: Rework "build-each-commit-gcc" test
    56a9641359 x86: Dom0 "broken ELF" reporting adjustments
    164daecb18 x86/HVM: limit upcall vector related verbosity
    8de3afc0b4 xen: move BUG_ON(), WARN_ON(), ASSERT(), ASSERT_UNREACHABLE() to xen/bug.h
    2ce562b2a4 x86/altcall: use a union as register type for function parameters on clang
    ef101f5251 xen/cmdline: fix printf format specifier in no_config_param()
    001d7fdb55 xen/consoled: drop return value from consoled_guest_rx/tx
    f49fb70d3d x86/hpet: use an atomic add instead of a cmpxchg loop
    f0622dd4fd xen/livepatch: fix norevert test hook setup typo
    92babc88f6 Revert stubdom+xenstore 9pfs changes
    f5e1c527d0 tools/xenstored: have a single do_control_memreport()
    a76f8809f1 tools/xenstored: support complete log capabilities in stubdom
    93892648ff tools/xenstored: add helpers for filename handling
    297a2587e6 tools/xenstored: mount 9pfs device in stubdom
    e21d9dbf44 tools: add 9pfs device to xenstore-stubdom
    0b761781c4 stubdom: extend xenstore stubdom configs
    4287a71f9b tools/xl: support new 9pfs backend xen_9pfsd
    ab5a6b5986 tools/libs/light: add backend type for 9pfs PV devices
    098d868e52 tools/oxenstored: Make Quota.t pure
    b6cf604207 tools/oxenstored: Use Map instead of Hashtbl for quotas
    7e5b662b28 x86/altp2m: p2m_altp2m_get_or_propagate() should honor ap2m->default_access
    98e79be5b6 xen/*/asm-offset: Fix bad copy&paste from x86
    812bdc99f4 xen-analysis.py: Accept deviation comment at the end of the line
    d064b429b6 xen-analysis.py: Substitute only the comment instead of the line
    ddd6696fc6 xen-analysis.py: Use named group for tag regex
    8c5e4ce145 consolidate do_bug_frame() / bug_fn_t
    f75b051f78 x86/APIC: drop regs parameter from direct vector handler functions
    4da40a267a IRQ: drop regs parameter from handler functions
    b31e753fe7 serial: drop serial_[rt]x_interrupt()'s regs parameter
    e1e0579afa PV-shim: drop pv_console_rx()'s regs parameter
    4f09e51027 serial: drop serial_rx_fn's regs parameter
    feb338d843 keyhandler: drop regs parameter from handle_keyregs()
    ba3c8373cd serial: fake IRQ-regs context in poll handlers
    9ee7dc877b x86emul: make run32 test harness goal work again
    cb319824bf x86emul: add missing EVEX.R' checks
    54557ee9b4 x86/uaccess: add attribute noreturn to __{get,put}_user_bad()
    d34e5fa2e8 build: make sure build fails when running kconfig fails
    bb1619ed4f tools/9pfsd: add missing va_end() in fill_data()
    d9fe1d743f Constify some parameters
    512f88a92d xen/riscv: use some asm-generic headers
    a4a790f432 gnttab: fully ignore zero-size copy requests
    97883aa269 libxl: Disable relocating memory for qemu-xen in stubdomain too
    f8791d0fd3 xen/arm: Make hwdom vUART optional feature
    981f722efa xen/asm-generic: fold struct devarch into struct dev
    c0dd41e055 xen/arm: switch Arm to use asm-generic/device.h
    c2263735f5 xen/asm-generic: introduce generic device.h
    c144b9e324 x86: Reduce assembly code size of entry points
    1eb013ef97 libxl: Add "grant_usage" parameter for virtio disk devices
    f93629b18b build: Replace `which` with `command -v`
    4917b9a423 mm: add the __must_check attribute to {gfn,mfn,dfn}_add()
    0441c3acc7 xen/arm: fixmap: Rename the fixmap slots to follow the x86 convention
    78398afae1 tools/xen-9pfsd: add 9pfs read request support
    e93172d57d tools/xen-9pfsd: add 9pfs write request support
    01c569f3fc tools/xen-9pfsd: add 9pfs stat request support
    34449f8cf0 tools/xen-9pfsd: add 9pfs create request support
    052a3a7fd9 tools/xen-9pfsd: add 9pfs clunk request support
    7c0d5f3cac tools/xen-9pfsd: add 9pfs open request support
    9615e40f47 tools/xen-9pfsd: add 9pfs walk request support
    27815b5f8f tools/xen-9pfsd: add 9pfs attach request support
    bcec59cf7f tools/xen-9pfsd: add 9pfs version request support
    7809132b1a tools/xen-9pfsd: add 9pfs response generation support
    8219809423 tools/xen-9pfsd: add transport layer
    d43c72a785 tools/xen-9pfsd: connect to frontend
    c3e583b01b tools: add a new xen 9pfs daemon
    c4d6802d33 docs: add a best practices coding guide
    d9bfc2810e iommu/x86: fix IVMD/RMRR range checker loop increment
    d670c1a38b libxl: Fix comment for LIBXL_HAVE_VMTRACE_BUF_KB
    40da8a7e4b tools: add access macros for unaligned data
    03e08d44c8 tools/xentop: add option to display dom0 first
    d9d4c5a142 libxl: Allow Phy backend for CDROM devices
    4e41947bad libxl: Create empty file for Phy cdrom
    4f2c81d509 xen/riscv: define an address of frame table
    9bb281d328 Argo: drop meaningless mfn_valid() check
    b3bea912a7 docs/misra: add asm-offset.c to exclude-list
    a185f88e98 iommu/vt-d: switch to common RMRR checker
    e45801dea1 iommu/x86: introduce a generic IVMD/RMRR range validity helper
    e72f951df4 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path
    2fb516157f xen/riscv: introduce event.h
    a541ddadec xen/riscv: introduce time.h
    af46249ad8 xen/riscv: introduce regs.h
    4988704e00 xen/riscv: introduce p2m.h
    6cb8ced1e8 xen/riscv: introduce irq.h
    ebb64781dd xen/riscv: introduce smp.h
    05ff18b4f0 xen/riscv: introduce flushtlb.h
    392c0c871d xen/riscv: introduce setup.h
    f9f339d33f xen: avoid generation of empty asm/iommu.h
    2c162e2f69 xen/riscv: introduce guest_atomics.h
    d42ebc95e2 xen/riscv: introduce cpufeature.h
    4c13f9c3fc xen: add support in public/hvm/save.h for PPC and RISC-V
    6d7d8d2b3e libxl: Add support for blktap vbd3
    cbbca7be4a x86/p2m: make p2m_get_page_from_gfn() handle grant case correctly
    772380f754 eclair: remove wrongly added -eval_file
    897def94b5 x86/hvm: Fix fast singlestep state persistence
    a773adedbd x86/PV32: restore PAE-extended-CR3 logic
    4e5bd87d24 config: update Mini-OS commit
    06024b2619 xen/serial: Drop serial_{put,get}c
    e36c106b0b tools/ocaml: Add missing vmtrace_buf_kb field
    837e5144ac x86: convert misc assembly function annotations
    00ae55ad76 SVM: convert entry point annotations
    e11f576650 xen/arm: Fix UBSAN failure in start_xen()
    f4519ee87e eclair: move function and macro properties outside ECLAIR
    38ae4739d8 xen/ns16550: address violations of MISRA C:2012 Rule 13.1
    e8f1bb803f block-common: Fix same_vm for no targets
    878159bf25 VMX: tertiary execution control infrastructure
    59a69674b5 automation: Switch yocto-qemux86-64 job to run on x86
    57a923bfd9 golang: Regen binding
    02c6ad4515 x86/entry: Reduce assembly instruction size
    80b01e20d0 x86/paging: Use more specific constant
    83afa31358 amd-vi: fix IVMD memory type checks
    8ac8999d70 x86/srat: vmap the pages for acpi_slit
    861d987726 xen/numa: vmap the pages for memnodemap
    f940facaa3 acpi: vmap pages in acpi_os_alloc_memory
    ef0873946c xen/vmap: Introduce vmap_size() and use it
    2213b5a293 setup: Move vm_init() before acpi calls
    1cb7949b37 xen/evtchn: Remove useless assignment in evtchn_alloc_unbound()
    3ce2e1f606 tools/xenstored: map stubdom interface
    097388d520 tools/xenstored: split domain_init()
    5edc819ed5 tools/xenstored: rework ring page (un)map functions
    a3e37f7024 tools/xenstored: get own domid in stubdom case
    e199a30680 tools/xenstored: move all socket handling into posix.c
    aae54458a1 tools/xenstored: move all log-pipe handling into posix.c
    511cc30cf8 tools/xenstored: move systemd handling to posix.c
    e767a98f04 tools/xenstored: add early_init() function
    1c2c7f7901 tools/xenstored: rename xenbus_evtchn()
    9c076988fe tools/helpers: allocate xenstore event channel for xenstore stubdom
    29f17d8374 tools/xentop: fix sorting bug for some columns
    10e0fb655d x86/cpu: Fix mixed tabs/spaces
    9eee78988c xen/bitmap: Deduplicate __bitmap_weight() implementations
    930605f155 x86/ucode: Remove accidentally introduced tabs
    660f8a7501 x86/CPU: convert vendor hook invocations to altcall
    e931edccc5 x86/guest: finish conversion to altcall
    044168fa3a x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking()
    3f819af8a7 xen: Remove debugger.h
    d182f9feae x86: Remove gdbstub
    583f1d0950 x86/spec-ctrl: Expose BHI_CTRL to guests
    478e4787fa x86/spec-ctrl: Expose RRSBA_CTRL to guests
    4dd6760706 x86/spec-ctrl: Expose IPRED_CTRL to guests
    c852ca5c05 tools/ocaml: Bump minimum version to OCaml 4.05
    558e84b7ff xen/bitmap: Consistently use unsigned bits values
    4f0b0ffff3 x86/traps: Annotate {l,c}star_enter() as nocall
    fb22c33d17 x86/boot: Add braces in reloc.c
    ae6d4fd876 xen/sched: Fix UB shift in compat_set_timer_op()
    9d701bc9ab x86/hvm: Fix UBSAN failure in do_hvm_op() printk
    8e36c668ca xen: Drop superfluous semi-colons
    4c2d50d586 xen/arm: Properly clean update to init_ttbr and smp_up_cpu
    bc45f20c01 shim: avoid building of vendor IOMMU code
    9916fdff4b IOMMU: iommu_use_hap_pt() implies CONFIG_HVM
    1aee91fe98 xen/page_alloc: introduce init_free_page_fields() helper
    18cd984905 xenpm: Print message for disabled commands
    d3df0f180f x86/PoD: simplify / improve p2m_pod_cache_add()
    cc6ba68edf VT-d: Fix "else" vs "#endif" misplacement
    cb4ecb3cc1 pci: fail device assignment if phantom functions cannot be assigned
    4a7e71aa08 x86/iommu: cleanup unused functions
    0e1bd15a1d x86/iommu: switch hwdom IOMMU to use a rangeset
    79fcc0e9d7 x86/iommu: remove regions not to be mapped
    40a7467702 x86: purge NMI_IO_APIC
    4396761654 x86/APIC: purge {GET,SET}_APIC_DELIVERY_MODE()
    1097878338 NUMA: no need for asm/numa.h when !NUMA
    a75c5aa2b2 xen/vmap: Check the page has been mapped in vm_init_type()
    c378ff8983 x86/entry: fix jump into restore_all_guest without %rbx correctly set
    dbdd7e8df7 xen/arm64: head: Use PRINT_ID() for secondary CPU MMU-off boot code
    9a5114074b arm/smpboot: Move smp_up_cpu to a new section .data.idmap
    5ed59e62c6 arm/mmu: Move init_ttbr to a new section .data.idmap
    b24b540de6 x86/entry: Avoid register spilling in cr4_pv32_restore()
    024e7131be tools: don't expose XENFEAT_hvm_pirqs by default
    72cad62abb x86/hvm: make X86_EMU_USE_PIRQ optional
    cf7fe8b72d x86/ucode: Fix stability of the raw CPU Policy rescan
    052d78fbec pmstat: Limit hypercalls under HWP
    e047b8d0fa x86/entry: replace two GET_CURRENT() uses
    f575f05524 x86/NMI: refine "watchdog stuck" log message
    610775d0dd x86/p2m-pt: fix off by one in entry check assert
    98ae35cab0 x86/entry: Fix ELF metadata for NMI and handle_ist_exception
    55fbecb64e x86/kexec: Drop compatibility_mode_far
    bbf7d6acd3 xen/riscv: introduce guest_access.h
    f132bb5b6b xen/riscv: introduce domain.h
    f67bddf3bc IRQ: generalize [gs]et_irq_regs()
    79519fcfa0 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets)
    2cfdbd5863 PPC: switch entry point annotations to common model
    4900c939cb tools/binfile: switch to common annotations model
    7015f337a2 RISC-V: annotate entry points with type and size
    ae08d0c304 Arm: annotate entry points with type and size
    9de79317e8 x86: also mark assembler globals hidden
    b3a9037550 x86: annotate entry points with type and size
    df2209f9b7 common: assembly entry point type/size annotations
    85ba4d050f x86/MCE: switch some callback invocations to altcall
    9f58616ddb x86/MCE: separate BSP-only initialization
    1212af3e8c x86/PV: avoid indirect call for I/O emulation quirk hook
    e9e0eb30d4 x86/MTRR: avoid several indirect calls
    1bc07ebcac core-parking: use alternative_call()
    b25607e528 xen: Fold exit paths in find_text_region()
    c30021be30 xen/livepatch: Make check_for_livepatch_work() faster in the common case
    86d0edda34 x86/cpuid: Change cpuid() from a macro to a static inline
    3643bb53a0 x86/vmx: Disallow the use of inactivity states
    d1f8883aeb x86/vmx: Fix IRQ handling for EXIT_REASON_INIT
    6522ef73fd x86/vmx: Collect all empty VMExit cases together
    730d2637a8 x86/HPET: avoid an indirect call
    467ae515ca cpufreq: finish genapic conversion to altcall
    b1cc53753c x86/APIC: finish genapic conversion to altcall
    6bdb965178 x86/intel: ensure Global Performance Counter Control is setup correctly
    f3f6c500e2 xen/arm64: head: Allow to use early printk while on 1:1 mapping
    d5a2ff06b1 xen/arm32: head: Move earlyprintk 'hex' to .rodata.idmap
    c2ce346647 CirrusCI: drop FreeBSD 12
    cd574f3ed8 x86/vPMU: drop regs parameter from interrupt functions
    7a3bd1cbc4 x86/vIRQ: split PCI link load state checking from actual loading
    69c89dd787 x86/vPIC: check values loaded from state save record
    c53013da6f x86/vPIT: check values loaded from state save record
    c3c6e9b8e8 x86/HVM: adjust save/restore hook registration for optional check handler
    5b6cab423c x86/HVM: split restore state checking from state loading
    5e600b4fb9 NUMA: limit first_valid_mfn exposure
    137c08aa07 xen/riscv: introduce system.h
    cef805dce4 x86emul: support SM4
    390777414a x86emul: support SM3
    aa18530282 x86emul: support SHA512
    c8bb7553f2 x86emul: support AVX-VNNI-INT16
    1ec3fe1f66 xen/arm32: head: Improve logging in head.S
    410837189e xen/arm: bootfdt: Harden handling of malformed mem reserve map
    89c384c525 xen/common: Don't dereference overlay_node after checking that it is NULL
    0f9a688f60 xen/arm32: head: Rework how the fixmap and early UART mapping are prepared
    c27c8922f2 x86/iommu: introduce a rangeset to perform hwdom IOMMU setup
    48193fe00a x86/HVM: drop tsc_scaling.setup() hook
    0b5f149338 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware
    f628fc8d18 VMX: drop vmx_virt_exception and make vmx_vmfunc static
    2467ab2a74 x86/mwait-idle: fix ubsan warning
    cc5a436002 xen/public: add some more 9pfs xenstore paths
    589d8cf146 xen: ifdef inclusion of <asm/grant_table.h> in <xen/grant_table.h>
    42b814b7ff xen/asm-generic: introduce stub header softirq.h
    e2c7111d65 xen/asm-generic: introduce generic div64.h header
    5a3ace21f3 xen/arm: smmu-v3: address violations of MISRA C:2012 Rule 16.3
    49818cde63 xen: remove asm/unaligned.h
    f61685f1fa xen: make include/xen/unaligned.h usable on all architectures
    23db507a01 x86/amd: Extend CPU erratum #1474 fix to more affected models
    b74c735f88 xen/xmalloc: XMEM_POOL_POISON improvements
    3909fb4692 docs/misra: exclude files inherited from ACPI CA from MISRA compliance
    773db8f307 x86/platform: tidy do_platform_op() a little
    6ccd2501b4 x86/mm: use "break" in arch_memory_op()
    8862c7b8b6 pci: introduce per-domain PCI rwlock
    f4d0859da3 pci: msi: pass pdev to pci_enable_msi() function
    94039d97e2 amd-vi: set IOMMU page table levels based on guest reported paddr width
    ad3a4b7c76 x86/p2m: move and rename paging_max_paddr_bits()
    6efc654a0b tools/xg: Reserialise CPU policies with the allocated number of leaves.
    ecabcd0d4e xen/bug: Complete outstanding TODO
    5f7fd392d9 driver/char: Drop run_in_exception_handler() ifdefary
    1fa104ee7a tools/pygrub: Drop compatibility symlink
    e9786ba9ee xen/arm: mmu: address a violations of MISRA C:2012 Rule 16.3
    2750111969 xen/arm: guest_walk: address violations of MISRA C:2012 Rule 16.3
    f1e956cdbf xen/arm: traps: address violations of MISRA C:2012 Rule 16.3
    7d18ab2b9b xen/arm: gic-v3: address violations of MISRA C:2012 Rule 16.3
    18828f00e4 automation/eclair_analysis: fix typo in deviation.
    5171930429 docs/misra/rules.rst: add Rule 17.1
    913a177416 x86/IO-APIC: correct RTE polarity comment
    e6cb988a3d xen/common: address violations of MISRA C:2012 Rule 11.8
    9d8c3bc887 xen: remove unused function ERR_CAST
    23a5fb3df7 xen: add deviations for Rule 11.8
    1fb1d3e77f xen/arm: address violations of MISRA C:2012 Rule 11.8
    725acf8e4d xen/arm: vcpreg: address violation of MISRA C Rule 2.1
    2a0f5a11f2 xen/arm: traps: add ASSERT_UNREACHABLE() where needed
    c877b90928 xen/arm: address MISRA C:2012 Rule 2.1
    51ffb33118 xen: move declaration of first_valid_mfn to xen/numa.h
    fba913a21a docs/misra: add entries to exclude-list
    ed45dd16c4 automation/eclair: update configuration of MISRA C:2012 Rule 5.6
    a128d8da91 automation/eclair: add deviations for MISRA C:2012 Rule 16.3
    1b42304fd1 xen/arm: ffa: return fpi size from FFA_PARTITION_INFO_GET
    05b6368ba0 x86: don't open-code max_page calculation nor pfn_to_paddr()
    11126964d8 automation/eclair_analysis: avoid violation of MISRA Rule 2.1
    bfd52e979d xen/shutdown: address MISRA C:2012 Rule 2.1
    36a05926b0 xen/wait: address violations of MISRA C Rule 11.9
    e66237eb1a x86/hvm: dom0: use helper to get sizeof struct field
    985fe473c0 x86/ioapic: use NULL as a null pointer constant
    0940d34291 xen/hvm: use NULL as a null pointer constant
    3af0a4f922 iommu/vt-d: do not assume page table levels for quarantine domain
    64d32b75e6 x86: allow non-BIGMEM configs to boot on >= 16Tb systems
    0cc74376d6 x86/hvm: address a violation of MISRA C:2012 Rule 11.8
    abdee7b1db x86/boot: address violations of MISRA C:2012 Rule 11.8
    b736154e89 xen/efi: address violations of MISRA C:2012 Rule 11.8
    5fbb3e9da9 xen/arm64: address violations of MISRA C:2012 Rule 11.8
    a57680db1a xen/x86_emulate: address violations of MISRA C:2012 Rule 14.4
    c714b8807b xen/x86: add missing instances of asmlinkage attributes
    c6dbc6df52 xen: fix compilation issue of serial.c
    d2ab1347bd xen: add RISCV support for pmu.h
    fa469c5a86 xen/riscv: add public arch-riscv.h
    a60067f398 docs/misra/rules.rst: add Rule 16.2
    896c191786 automation/eclair_analysis: file exclusion automation
    cad6f9a4c1 smp: move cpu_is_offline() definition
    68e6b7fc11 tools/libs/evtchn: fix locking in Mini-OS
    75571e162b xen/arm: ffa: return FFA_RET_NOT_SUPPORTED on unhandled calls
    a236b74b96 xen/arm: don't pass iommu properties to hwdom for iommu-map
    666e3c294d xen/iommu: address leftover violation of MISRA C:2012 Rule 8.2
    75b6bcbd9e xen/drivers: address violations of MISRA C:2012 Rule 8.2
    76ecfc517d x86/include: address violations of MISRA C:2012 Rule 8.2
    b9905a04e4 xen/compat: address violations of MISRA C:2012 Rule 8.2
    abdbf82448 MAINTAINERS: add me as Mini-OS maintainer
    56c633bc8e xen/riscv: define bug frame tables in xen.lds.S
    a6a8fe0eb1 Revert "xen: make include/xen/unaligned.h usable on all architectures"
    8fe6219d83 Revert "xen: remove asm/unaligned.h"
    7fca0463c7 xen/spinlock: make spinlock initializers more readable
    a77fcbc389 xen/spinlock: reduce lock profile ifdefs
    35431ecb9d xen/arm: smmu: move phys_addr_t definition to linux-compat.h
    889af18eee xen/sched: address MISRA C:2012 Rule 2.1
    f0bb77bf73 AMD/IOMMU: address violations of MISRA C:2012 Rule 8.2
    6d5e94ca7d x86/mm: address violations of MISRA C:2012 Rule 8.2
    fbc8cff877 x86/mm: remove compat_subarch_memory_op()
    431ada87e5 xen/acpi: address violations of MISRA C:2012 Rule 8.2
    190b7f49af xen/arm: page: Avoid pointer overflow on cache clean & invalidate
    0fb4b6b0ea MAINTAINERS: Hand over the release manager role to Oleksii Kurochko
    6619c6f891 xen: remove asm/unaligned.h
    6c4be49503 xen: make include/xen/unaligned.h usable on all architectures
    3e3ff7f9cd xen/arm: set -mno-unaligned-access compiler option for Arm32
    cf40abbc7f tools/xenstored: potentially split trace_io() out message
    1403131596 x86/viridian: make build_assertions static
    f45e488e7b docs/misra/rules.rst: add more rules
    519c7a1d58 xen: address violations of MISRA C:2012 Rule 14.4
    807321b6f3 x86/acpi: remove acpi_pic_sci_set_trigger()
    bc4fe94a69 tools/libs/evtchn: replace assert()s in stubdom with proper locking
    e6e8c5831a Config: Update MiniOS revision
    d2b7c442b4 CODING_STYLE: Add a section of the naming convention
    25147005da xen/sched: do some minor cleanup of sched_move_domain()
    23792cc0f2 xen/sched: fix sched_move_domain()
    02d0a615b3 xen/arm: bootfdt: Check return code of device_tree_for_each_node()
    c4ccad6f3f tools/xenstored: remove the "-R" command line option
    cc6609eed2 tools/xenstored: remove the "-P" command line option
    cddc66b1ea tools/xenstored: remove "-V" command line option
    98f2cb76f6 tools/xenstored: remove "-D" command line parameter
    dbe69e1c85 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3
    add7046baf Revert "x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3"
    d4bfd38998 xen/hypervisor: Don't use cc-option-add for -Wdeclaration-after-statement
    40be6307ec Only compile the hypervisor with -Wdeclaration-after-statement
    59df285131 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3
    e4c0489ec5 xen/pci: address violations of MISRA C:2012 Rule 8.2
    24b2672695 x86/mce: address violations of MISRA C:2012 Rule 8.2
    8b0dc4a88f x86/page: address violations of MISRA C:2012 Rule 8.2
    fa9171ed05 config: update Mini-OS commit
    2e5e9ec4ff x86/vPIC: vpic_elcr_mask() master bit 2 control
    634c6e15ac x86/HVM: introduce hvm_get_entry()
    55cd2eaec3 xen/riscv: introduce spinlock.h
    204aa245df xen/riscv:introduce asm/byteorder.h
    3e5672d69f automation/eclair: tag function calls to address violations of MISRA C:2012 Rule 13.1
    1ff6d92938 automation/eclair: add deviations for MISRA C:2012 Rule 5.6
    d97d6a7f08 docs/misra: deviate deliberately unused labels
    4c6142a1ab CI: Fix fallout from adding elfutils-dev to the build container
    01da0aeecd ns16550: remove partial explicit initializer
    948e033031 automation/alpine: add elfutils-dev
    afb2692c47 ubsan: Introduce CONFIG_UBSAN_FATAL to panic on UBSAN failure
    ff11780620 xen/domain: fix error path in domain_create()
    d830b0a7bc xen/vpci: header: filter PCI capabilities
    a3c8fb450a xen/vpci: header: status register handler
    6f7db3e0a0 xen: address violations of MISRA C:2012 Rule 11.8
    3e7a3f08ce bump default SeaBIOS version to 1.16.3
    06e8d65d33 xen/sched: fix adding offline cpu to cpupool
    787d11c5aa x86emul: avoid triggering event related assertions
    93d913c6e6 xen/public: fix flexible array definitions
    80a7669afd x86/p2m: address a violation of MISRA C:2012 Rule 8.3
    f0a00ab1a6 x86/p2m: preparation work for xenmem_add_to_physmap_one()
    525c7c094b xen/arm: Move static event channel feature to a separate module
    1571ff7a98 tools/xg: Fix potential memory leak in cpu policy getters/setters
    02ef46b675 .gitignore: generalize *.new
    cd1a4a5709 docs/misra: add entry to exclude-list.json
    ebd7074dd0 xen/arm: mmu: add headers for missing declarations
    e7c4b68738 xen/serial: address a violation of MISRA C:2012 Rule 8.2
    498c130104 xen/perfc: address a violation of MISRA C:2012 Rule 8.2
    5dc781b4af xen/param: address a violation of MISRA C:2012 Rule 8.2
    13832e2367 xen/kernel: address a violation of MISRA C:2012 Rule 8.2
    80aeb9ccec xen/iommu: address violations of MISRA C:2012 Rule 8.2
    59f31d970f xen/notifier: address violations of MISRA C:2012 Rule 8.2
    24dbf93ebd xen/domain: address violations of MISRA C:2012 Rule 8.2
    def73fc144 automation/eclair: improve scheduled analyses
    e5aba2909c docs/misra: fix a typo in rules.rst
    829b4731df automation: Switch u-boot boot command to bootz for arm32 tests
    f0dd0cd959 docs/misra: add guidance on the format of Dir 4.1 docs for ECLAIR
    ddf664a557 automation/eclair: make the docs for MISRA C:2012 Dir 4.1 visible to ECLAIR
    2f848d3cee arm/bitops: encapsulate violation of MISRA C:2012 Rule 10.1
    902377b690 xen/livepatch: fix livepatch tests
    b3d3267286 cirrus-ci: update FreeBSD versions
    92696bf052 xen/arm64: Move print_reg macro to asm/arm64/macros.h
    7e1f5b68ac xen/asm-generic: introduce generic header altp2m.h
    f1ac700b44 xen/asm-generic: introduce generalized hardirq.h
    7c20d1616d xen/asm-generic: introduce generic header percpu.h
    18f3095654 xen/asm-generic: introduce stub header <asm/random.h>
    f6082c7b6c xen/asm-generic: introduce generic header iocap.h
    2ae2a306f4 xen/asm-generic: introduce generic hypercall.h
    94854f1419 xen/asm-generic: introduce stub header paging.h
    90309854fd xen/x86: In x2APIC mode, derive LDR from APIC ID
    8b15717518 xen/dmi: address a violation of MISRA C:2012 Rule 8.2
    022d7d87cc xen/cpumask: address violations of MISRA C:2012 Rule 8.2
    b0356bc0e0 xen/acpi: address violations of MISRA C:2012 Rule 8.2
    07551414ca xen/console: address violations of MISRA C:2012 Rule 8.2
    84eba1dc6d xen: remove <asm/delay.h>
    72ec070930 xen: replace some occurrences of SAF-1-safe with asmlinkage attribute
    caa221791d domain: add ASSERT to help static analysis tools
    18540a313c arm/dom0less: introduce Kconfig for dom0less feature
    d7d80e7a32 xen/arm: Move static memory build code in separate modules
    8d2c3ab18c arm/dom0less: put dom0less feature code in a separate module
    dcb92d4ef1 xen/arm: Add asm/domain.h include to kernel.h
    4a6962fa7f arm/gicv2: make GICv2 driver and vGICv2 optional
    72d51813d6 x86: amend cpu_has_xen_{ibt,shstk}
    17754972fa x86/atomic: address violations of MISRA C:2012 Rule 11.8
    fc63c0ebef AMD/IOMMU: address violations of MISRA C:2012 Rule 11.8
    fe26cb2dd2 x86/boot/reloc: address violations of MISRA C:2012 Rule 11.8
    09c2fe438d x86/platform_hypercall: address violations of MISRA C:2012 Rule 11.8
    82182ad7b4 livepatch: do not use .livepatch.funcs section to store internal state
    46f2e2c3bc xen/mm: address violations of MISRA C:2012 Rules 8.2 and 8.3
    b82b867a66 x86/mm: preparation work to uniform modify_xen_mappings* interfaces
    fbcec32d6d x86/mem_sharing: Release domain if we are not able to enable memory sharing
    b9eeb19926 x86/mem_sharing: Fix typo in comment
    80c153c48b xen/sort: address violations of MISRA C:2012 Rule 8.2
    a66b02a6b6 x86/vPIC: correct vpic_domain()
    9b3476f13e xen/iommu: use ISOLATE_LSB to wrap a violation of Rule 10.1
    80d72670ad xen/vmap: use ISOLATE_LSB to wrap a violation of Rule 10.1
    de4f3cf327 x86_64/mm: express macro CNT using ISOLATE_LSB
    02d754aa55 xen/pdx: amend definition of PDX_GROUP_COUNT
    f02829592e x86emul/test: fold AVX512VL scatter/gather test blobs with AVX512F ones
    03d6720a4c tools/pygrub: Restrict depriv operation with RLIMIT_AS
    2d63785a8a tools/pygrub: Fix expression before it's copied elsewhere
    de577641cf tools/pygrub: Fix bug in LIMIT_FSIZE env variable override
    c789c7ff7e tools/pygrub: Set mount propagation to private recursively
    16a0e16dab tools/python: add .gitignore file
    9b1972dff5 tools/pygrub: add .gitignore file
    5d4b948169 xen/efi: Drop image_name from efi_arch_handle_cmdline()
    f96e2f6457 xen/MISRA: Remove nonstandard inline keywords

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
10a8dc3c37 xen-dev: update to -tip 
Bumping xen to version 4.18.0-rc4-707-g03cf7ca23e, which comprises the following commits:

    03cf7ca23e x86: protect conditional lock taking from speculative execution

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
25c9c87cce xen-tools/4.18: update to -tip 
Drop upstreamed patch, otherwise, no other changes.

Bumping xen to version RELEASE-4.18.0-71-g4da8ca9cb9, which comprises the following commits:

    4da8ca9cb9 x86: protect conditional lock taking from speculative execution
    e107a8ece7 x86/mm: add speculation barriers to open coded locks
    9de8a52b0e locking: attempt to ensure lock wrappers are always inline
    5a13c81542 percpu-rwlock: introduce support for blocking speculation into critical regions
    e7f0f11c88 rwlock: introduce support for blocking speculation into critical regions
    1932973ac9 x86/spinlock: introduce support for blocking speculation into critical regions
    bdda600406 xen: Swap order of actions in the FREE*() macros
    908cbd1893 x86/spec-ctrl: Mitigation Register File Data Sampling
    fb85a8fc91 x86/spec-ctrl: VERW-handling adjustments
    b7205fc1cb x86/spec-ctrl: Rename VERW related options
    95dd34fdbe x86/spec-ctrl: Perform VERW flushing later in exit paths
    9f89ec65fb x86/vmx: Perform VERW flushing later in the VMExit path
    b91c253e81 x86: Resync intel-family.h from Linux
    fe1869a569 x86/entry: Introduce EFRAME_* constants
    a96d2d4355 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite()
    4c84fa6cb6 hvmloader/PCI: skip huge BARs in certain calculations
    fd7cb7a1d0 x86/cpu-policy: Allow for levelling of VERW side effects
    75221fb0f8 x86/altcall: always use a temporary parameter stashing variable
    267845a838 libxl: Fix segfault in device_model_spawn_outcome
    e9516b73e7 xen/livepatch: properly build the noapply and norevert tests
    d81bfc7ff8 xen/livepatch: fix norevert test attempt to open-code revert
    50a8f74df7 xen/livepatch: search for symbols in all loaded payloads
    5382a6a79c xen/livepatch: register livepatch regions when loaded
    7404c25efd x86/spec: do not print thunk option selection if not built-in
    09b9db0413 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled
    b7f9168878 x86/spec: print the built-in SPECULATIVE_HARDEN_* options
    57f1370536 xen/sched: Fix UB shift in compat_set_timer_op()
    3e383bb413 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware
    498b3624d0 xen/arm: Fix UBSAN failure in start_xen()
    58bb811510 x86: account for shadow stack in exception-from-stub recovery
    4d47dca20d x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled
    19fd9ff998 x86/altcall: use a union as register type for function parameters on clang
    f6e5ab5fa7 xen/cmdline: fix printf format specifier in no_config_param()
    33a0368d3b xen/livepatch: fix norevert test hook setup typo
    a751d1321f x86emul: add missing EVEX.R' checks
    5fda826414 build: make sure build fails when running kconfig fails
    489c2b9ba1 libxl: Disable relocating memory for qemu-xen in stubdomain too
    006764b871 build: Replace `which` with `command -v`
    59e6ad6597 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path
    b51fd78aed x86/hvm: Fix fast singlestep state persistence
    16475909ba block-common: Fix same_vm for no targets
    fa9950a527 amd-vi: fix IVMD memory type checks
    184d723e7a tools/xentop: fix sorting bug for some columns
    b1fdd7d0e4 x86/ucode: Fix stability of the raw CPU Policy rescan
    295ab8060d x86/p2m-pt: fix off by one in entry check assert
    579a622eb4 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets)
    00550e808c x86/vmx: Disallow the use of inactivity states
    4cc0f88c42 x86/vmx: Fix IRQ handling for EXIT_REASON_INIT
    6ccf064b0c x86/intel: ensure Global Performance Counter Control is setup correctly
    b26c30a408 CirrusCI: drop FreeBSD 12
    62b3d7f8e4 x86/amd: Extend CPU erratum #1474 fix to more affected models
    c7ac596a57 VT-d: Fix "else" vs "#endif" misplacement
    637da04812 pci: fail device assignment if phantom functions cannot be assigned
    1792d1723b x86/x2apic: introduce a mixed physical/cluster mode
    a4f3f5a62c xen/arm: page: Avoid pointer overflow on cache clean & invalidate
    48eb9e9199 xen/sched: fix sched_move_domain()
    a56d598e13 Only compile the hypervisor with -Wdeclaration-after-statement
    25b7f9ed0f xen/domain: fix error path in domain_create()
    5ac87c8afd xen/sched: fix adding offline cpu to cpupool
    18f900b77b x86emul: avoid triggering event related assertions
    3af9d1cbb6 tools/xg: Fix potential memory leak in cpu policy getters/setters
    61d032e322 xen/x86: In x2APIC mode, derive LDR from APIC ID
    480168fcb3 livepatch: do not use .livepatch.funcs section to store internal state
    90a6d82175 x86/mem_sharing: Release domain if we are not able to enable memory sharing
    3f9390fea5 xen/sched: fix sched_move_domain()
    40bfa9dd57 x86/spec-ctrl: Add SRSO whitepaper URL
    fcb1016bbd x86/i8259: do not assume interrupts always target CPU0
    9e8edd4c75 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER
    880e06fdea x86/pv-shim: fix grant table operations for 32-bit guests
    52be29df79 x86/mem_sharing: add missing m2p entry when mapping shared_info page
    02f8d0adfb update Xen version to 4.18.1-pre
    d75f1e9b74 SUPPORT.md: Update release notes URL

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
a0a41ec5ed xen/4.18: update to -tip 
Bumping xen to version RELEASE-4.18.0-71-g4da8ca9cb9, which comprises the following commits:

    4da8ca9cb9 x86: protect conditional lock taking from speculative execution
    e107a8ece7 x86/mm: add speculation barriers to open coded locks
    9de8a52b0e locking: attempt to ensure lock wrappers are always inline
    5a13c81542 percpu-rwlock: introduce support for blocking speculation into critical regions
    e7f0f11c88 rwlock: introduce support for blocking speculation into critical regions
    1932973ac9 x86/spinlock: introduce support for blocking speculation into critical regions
    bdda600406 xen: Swap order of actions in the FREE*() macros
    908cbd1893 x86/spec-ctrl: Mitigation Register File Data Sampling
    fb85a8fc91 x86/spec-ctrl: VERW-handling adjustments
    b7205fc1cb x86/spec-ctrl: Rename VERW related options
    95dd34fdbe x86/spec-ctrl: Perform VERW flushing later in exit paths
    9f89ec65fb x86/vmx: Perform VERW flushing later in the VMExit path
    b91c253e81 x86: Resync intel-family.h from Linux
    fe1869a569 x86/entry: Introduce EFRAME_* constants
    a96d2d4355 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite()
    4c84fa6cb6 hvmloader/PCI: skip huge BARs in certain calculations
    fd7cb7a1d0 x86/cpu-policy: Allow for levelling of VERW side effects
    75221fb0f8 x86/altcall: always use a temporary parameter stashing variable
    267845a838 libxl: Fix segfault in device_model_spawn_outcome
    e9516b73e7 xen/livepatch: properly build the noapply and norevert tests
    d81bfc7ff8 xen/livepatch: fix norevert test attempt to open-code revert
    50a8f74df7 xen/livepatch: search for symbols in all loaded payloads
    5382a6a79c xen/livepatch: register livepatch regions when loaded
    7404c25efd x86/spec: do not print thunk option selection if not built-in
    09b9db0413 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled
    b7f9168878 x86/spec: print the built-in SPECULATIVE_HARDEN_* options
    57f1370536 xen/sched: Fix UB shift in compat_set_timer_op()
    3e383bb413 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware
    498b3624d0 xen/arm: Fix UBSAN failure in start_xen()
    58bb811510 x86: account for shadow stack in exception-from-stub recovery
    4d47dca20d x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled
    19fd9ff998 x86/altcall: use a union as register type for function parameters on clang
    f6e5ab5fa7 xen/cmdline: fix printf format specifier in no_config_param()
    33a0368d3b xen/livepatch: fix norevert test hook setup typo
    a751d1321f x86emul: add missing EVEX.R' checks
    5fda826414 build: make sure build fails when running kconfig fails
    489c2b9ba1 libxl: Disable relocating memory for qemu-xen in stubdomain too
    006764b871 build: Replace `which` with `command -v`
    59e6ad6597 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path
    b51fd78aed x86/hvm: Fix fast singlestep state persistence
    16475909ba block-common: Fix same_vm for no targets
    fa9950a527 amd-vi: fix IVMD memory type checks
    184d723e7a tools/xentop: fix sorting bug for some columns
    b1fdd7d0e4 x86/ucode: Fix stability of the raw CPU Policy rescan
    295ab8060d x86/p2m-pt: fix off by one in entry check assert
    579a622eb4 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets)
    00550e808c x86/vmx: Disallow the use of inactivity states
    4cc0f88c42 x86/vmx: Fix IRQ handling for EXIT_REASON_INIT
    6ccf064b0c x86/intel: ensure Global Performance Counter Control is setup correctly
    b26c30a408 CirrusCI: drop FreeBSD 12
    62b3d7f8e4 x86/amd: Extend CPU erratum #1474 fix to more affected models
    c7ac596a57 VT-d: Fix "else" vs "#endif" misplacement
    637da04812 pci: fail device assignment if phantom functions cannot be assigned
    1792d1723b x86/x2apic: introduce a mixed physical/cluster mode
    a4f3f5a62c xen/arm: page: Avoid pointer overflow on cache clean & invalidate
    48eb9e9199 xen/sched: fix sched_move_domain()
    a56d598e13 Only compile the hypervisor with -Wdeclaration-after-statement
    25b7f9ed0f xen/domain: fix error path in domain_create()
    5ac87c8afd xen/sched: fix adding offline cpu to cpupool
    18f900b77b x86emul: avoid triggering event related assertions
    3af9d1cbb6 tools/xg: Fix potential memory leak in cpu policy getters/setters
    61d032e322 xen/x86: In x2APIC mode, derive LDR from APIC ID
    480168fcb3 livepatch: do not use .livepatch.funcs section to store internal state
    90a6d82175 x86/mem_sharing: Release domain if we are not able to enable memory sharing
    3f9390fea5 xen/sched: fix sched_move_domain()
    40bfa9dd57 x86/spec-ctrl: Add SRSO whitepaper URL
    fcb1016bbd x86/i8259: do not assume interrupts always target CPU0
    9e8edd4c75 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER
    880e06fdea x86/pv-shim: fix grant table operations for 32-bit guests
    52be29df79 x86/mem_sharing: add missing m2p entry when mapping shared_info page
    02f8d0adfb update Xen version to 4.18.1-pre
    d75f1e9b74 SUPPORT.md: Update release notes URL

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
76a13fc455 conf: bump xen preferred version to 4.18 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
623219b362 libvmi: update -tip 
Bumping libvmi to version v0.10-1135-gdf8547f, which comprises the following commits:

    df8547f Set mem-range access, read wstrings, get last PF (#1095)
    fba6232 driver_wrapper: fix debug prints (#1094)
    8f37f07 Xen: fix calculation of ram size (#1092)
    071d81f Ensure that the third level descriptor is valid prior to returning (#1091)
    a2438e8 CMake: Adjust scope of linked libraries (#1089)
    d048e41 Kvm: Fix events not being processed during shutdown  (#1038)
    782bfff Implement SLAT for kvm (#1043)
    9bf6b62 Fill offset field for singlestep events (#1088)
    72ef3aa Add missing event clear wiring (#1087)
    e707440 Reduce cognitive complexity of kvm_events.c (#1086)
    bcc057c Add DIRTY bit definition (#1085)
    12d3a8c Fix bug not looking up xc_domain_setmaxmem (#1084)
    d4f95a5 New physical page api (#1083)
    1b47190 Feature/osx_support (#1078)
    b9691ca driver interface, xen driver: added prot flag to mmap interface (#1082)
    f47a568 Xen 4.18 support (#1081)
    0332ac2 fix KPCR read on Windows x86 (#1077)
    3c42697 examples: add missing long_opts array terminator (#1079)
    e2313cc Remove cached config entry as part of vmi_destroy function (#1076)
    8a79057 Use actions/checkout@v3 (#1075)
    d5b0177 Sanitize input for PE parser (#1073)
    0f832eb Symbol RVA translation for ELF executables and shared libraries (#1072)
    f2bfd4a Adding basic support for reading an ARM64 memory dump (#1070)
    d2f3fe9 Change xen vbd state check from 1 to 4 (#1069)
    9166fd6 Revise Xen minor version sanity checking logic (#1068)
    79ace5c Fix documentation url (#1067)
    c0edc27 Adjust xc_monitor_io availability (#1066)
    3fe7e6e I/O event hooking, firmware type check (#1045)
    63a6a2d Split complexity from scan-build CI test (#1065)
    a95e99e Calculate cognitive complexity score as part of scan-build (#1062)
    db93f47 Address to kernel symbol translation for windows (#1056)
    dd919a6 linux: use more strickt checks while initializing linux kaslr (#1060)
    9dee43c Skip consecutive PD/PT entries for Windows 10 in vmi_get_va_pages (#1055)
    afb05d0 Fix x64 windows address translation (#1054)
    5662dba Create SECURITY.md
    36bcb2c Return success if whole region is unmapped (#1050)
    38ff0db Fix struct layout warning in kvm.c (#1051)
    fecdb1f Revert "Revert "Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)" (#1047)" (#1049)
    b26888c Rework mem-event-example (#1048)
    68a4a69 Revert "Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)" (#1047)
    546e2e3 Fix vmi_read_str on page boundary (#1046)
    78a9512 Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)
    7328e9e Fix memory cache remove (#1042)
    92f9f70 Kvm: Implement pause counter (#1039)
    50d256b Pop pending events after pausing vm (#1026)
    0cb5db8 Add support for new Xen event type for vm exits (#1036)
    5edc478 Kvm: Flush pages from memory cache after write operation (#1035)
    ff2c1c9 Fix memory corruption in kvm interrupt event handling (#1034)
    09be0ef cmake: add ZLIB detection (#1033)
    932a87a vbd: fix uncompression of qcow2 cluster (#1032)
    26152fc vbd: Add support for JSON format of qcow2 backing file description (#1030)
    afd541b vbd: Remove some copy-paste in qcow2 reading code (#1031)
    1d17c98 vbd: Fix memory leak in uncompress_cluster (#1029)
    6859024 Fix vmi_init_paging issue on ARM64/ZCU102 (#1028)
    710b0a5 Fix double free corruption (#1027)
    7c0c537 Kvm: Ensure monitor_intr_on ist set to false in error case (#1025)
    f51d3fd Add kvm support for swap/clear events (#1024)
    c87a1fb Remove xen includes from vbd.c (#1023)
    45b32c0 Switch pid cache to g_direct_hash/equal (#1021)
    f108304 Use g_direct_hash/equal everywhere (#1020)
    b34cb61 Plug holes in events ABI and bump ABI version (#1019)
    f9db2f4 Use g_direct_hash/direct_equal for generic mem_events (#1018)
    41600b6 Actually define __XS_EVENT_REASON_MAX (#1016)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
21204daacb kvmtool: update -tip 
Bumping kvmtool to latest, which comprises the following commits:

    4d2c017 Fix 9pfs open device file security flaw
    e73a6b2 x86: Enable in-kernel irqchip before creating PIT
    f6cc06d riscv: Fix guest poweroff when using PLIC emulation
    4ddaa42 riscv: Handle SBI DBCN calls from Guest/VM
    ef89838 riscv: Set mmu-type DT property based on satp_mode ONE_REG interface
    8cd71ca riscv: Add Zicond extension support
    8d02d5a riscv: Add Smstateen extension support
    3436684 riscv: Add Zicsr and Zifencei extension support
    6676856 riscv: Add Zicntr and Zihpm extension support
    6331850 riscv: Add Zba and Zbs extension support
    7887b39 riscv: Make CPU_ISA_MAX_LEN depend upon isa_info_arr array size
    fcb0767 riscv: Improve warning in generate_cpu_nodes()
    92ef2dc Sync kernel headers with v6.7 to enable additional Risc-V extensions
    095773e riscv: Fix guest/init linkage for multilib toolchain
    328f087 riscv: Use AIA in-kernel irqchip whenever KVM RISC-V supports
    17aab30 riscv: Add IRQFD support for in-kernel AIA irqchip
    0dff350 riscv: Make irqchip support pluggable
    56e2d67 riscv: Add Svnapot extension support
    26c8589 Sync-up header with Linux-6.6 for KVM RISC-V
    74af145 virtio: Cancel and join threads when exiting devices devices
    9cb1b46 pci: Deregister KVM_PCI_CFG_AREA on pci__exit
    d560235 virtio/pci: Use consistent naming for the PCI ISR bit flags
    2921448 virtio/pci: Treat PCI ISR as a set of bit flags
    353fa0d virtio/pci: Level-trigger the legacy IRQ line in all cases
    c7b7a54 builtin-run: Document mode=none for -n/--network
    4498eb7 Revert "virtio-net: Don't print the compat warning for the default device"
    106e2ea riscv: Fix guest RAM alloc size computation for RV32
    8659200 riscv: Add Ssaia extension support
    8f1e47c riscv: Add Zicboz extension support
    8c1584e riscv: Add zbb extension support
    b346fab riscv: Sort the ISA extension array alphabetically
    a416fdc riscv: Allow disabling SBI extensions for Guest
    9e9cfde riscv: Allow setting custom mvendorid, marchid, and mimpid
    be98682 Sync-up headers with Linux-6.4
    d834369 kvm tools: Add __DECLARE_FLEX_ARRAY() in include/linux/stddef.h
    15757e8 virtio-net: Don't print the compat warning for the default device
    63643b1 Apply scaling down the calculated guest ram size to the number of pages
    834e5ed Factor out getting the number of physical memory host pages
    b6bae72 Factor out getting the host page size
    bd4ba57 Add --loglevel argument for the run command
    fc184a6 util: Use __pr_debug() instead of pr_info() to print debug messages
    72e1394 Replace printf/fprintf with pr_* macros
    2cc4929 util: Make pr_err() return void
    0b5e55f vfio/pci: Clarify the MSI states
    3a36d34 vfio/pci: Initialize MSI vectors unmasked
    3b1cdcf virtio/vhost: Clear VIRTIO_F_ACCESS_PLATFORM
    46aaf3b virtio/vhost: Support line interrupt signaling
    d30d948 Factor epoll thread
    3a70ab1 virtio/net: Warn about enabling multiqueue with vhost
    33e026a virtio: Fix messages about missing Linux config
    13534ee virtio: Document how to test the devices
    53171d5 virtio/net: Fix feature selection
    cf8358d virtio/vsock: Fix feature selection
    13ea439 virtio/scsi: Fix feature selection
    b8420e8 virtio/scsi: Initialize max_target
    7bc3b5d disk/core: Fix segfault on exit with SCSI
    145a86f virtio/scsi: Fix and simplify command-line
    13e7d62 virtio/scsi: Move VHOST_SCSI_SET_ENDPOINT to device start
    029cd2b virtio/vhost: Factor notify_vq_gsi()
    676c0c8 virtio/vhost: Factor notify_vq_eventfd()
    745221e virtio/vhost: Factor vring operation
    f84ab9e virtio: Factor vhost initialization
    5311413 virtio/rng: Fix build warning from min()
    426e875 arm/kvm-cpu: Fix new build warning
    8f6cabb Makefile: Refine -s handling in the make parameters
    b17552e virtio: sanitise virtio endian wrappers
    c1eecc6 option parsing: fix type of empty .argh parameter
    bc23b9d virtio/rng: return at least one byte of entropy
    62ba372 virtio/rng: switch to using /dev/urandom
    77b108c arm: Do not add padding alignment for hugetlbfs backed memory
    9b46ebc Add virtio-transport option and deprecate force-pci and virtio-legacy.
    2f030d2 riscv: Move serial and rtc from IO port space to MMIO area.
    e17d182 riscv: Add --disable-<xyz> options to allow user disable extensions
    798398f riscv: Add Zicbom extension support
    b721ac0 riscv: Move reg encoding helpers to kvm-cpu-arch.h
    23a8ed9 riscv: Add zihintpause extension support
    ac16e94 riscv: Add Svinval extension support
    76dfc0c Update UAPI headers based on Linux-6.1-rc1
    5a9cde6 hw/i8042: Fix value uninitialized in kbd_io()
    78771e7 pci: Disable writes to Status register
    717a3ab virtio-net: Fix vq->use_event_idx flag check
    ed805be riscv: Fix serial0 alias path
    3c07aea riscv: Add Sstc extension support
    2b4fe0f riscv: Add Svpbmt extension support
    8aff29e riscv: Append ISA extensions to the device tree
    8d0face Update UAPI headers based on Linux-6.0-rc1
    9987a37 net: Use vfork() instead of fork() for script execution
    336751f Makefile: Introduce LIBFDT_DIR to specify libfdt location

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
dfee1a5d7c cloud-init: update to 24.1.1 
Bumping cloud-init to version 24.1.1, which comprises the following commits:

    e982c2087 Release 24.1.1
    2a4c0b6f7 fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
    f1e43986f bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
    f32228e75 fix(apt): Don't warn on apt 822 source format (#5028)
    3eefceb3b fix: Add "broadcast" to network v1 schema (#5034)
    8eba10ca2 pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg (#5030)
    8aa31e3d3 net/dhcp: handle timeouts for dhcpcd (#5022)
    caea5619e fix: Make wait_for_url respect explicit arguments
    1f38828d5 bug(wait_for_url): when exceptions occur url is unset, use url_exc
    c2bb381e7 test: Fix scaleway retry assumptions
    3b93a01a9 fix: Make DataSourceOracle more resilient to early network issues (#5025)
    c9bdb1a67 tests: Fix wsl test (#5008)
    49df54730 Release 24.1
    5c15e7997 fix: Don't warn on vendor directory (#4986)
    12126f574 apt: kill spawned keyboxd after gpg cmd interaction
    c8507a49b tests: upgrade tests should only validate current boot log
    fc150eb86 net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
    f6a98c80d doc(network-v2): fix section nesting levels
    545991488 fix(tests): don't check for clean log on minimal image (#4965)
    fc81fb325 fix(cc_resize): Don't warn if zpool command not found (#4969)
    aa285fe67 feat(subp): Make invalid command warning more user-friendly (#4972)
    f8cbd5ca9 docs: Remove statement about device path matching (#4966)
    3780ee7cc test: Fix xfail to check the dhcp client name (#4971)
    cb49eee0c tests: avoid console prompts when removing gpg on Noble
    d8b6ac2bc test: fix test_get_status_systemd_failure
    1447bfe49 Release 23.4.4 (#4955)
    66b5ce9d5 fix(nocloud): smbios datasource definition
    4b694a45d tests: Check that smbios seed works
    beddd97c1 fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
    d175170ae refactor: Refactor status.py (#4864)
    05ea2c020 test: Use correct lxd network-config keys (#4950)
    e8c2eaf2f test: limit temp dhcp6 changes to < NOBLE (#4942)
    89ebcc394 test: allow downgrades when install debs (#4941)
    758536152 tests: on noble, expect default /etc/apt/sources.list
    e5249ab5a tests: lxd_vm early boot status test ordered After=systemd-remount-fs (#4936)
    6f52f15f4 tests: pro integration tests supply ubuntu_advantage until pro v32 (#4935)
    05eac8ba1 feat(hotplug): add cmd to enable hotplug (#4821)
    05ed5472a test: fix test_combined_cloud_config_json (#4925)
    9bd0f5264 test: xfail udhcpc on azure (#4924)
    4c822bd6b feat: Implement the WSL datasource (#4786)
    2e89bb317 refactor(openrc):  Improve the OpenRC files (#4916)
    0234f1b0b tests: use apt install instead of dpkg -i to install pkg deps
    b74299efe tests: inactive module rename ubuntu_advantage to ubuntu_pro
    4ed78b116 test: fix tmpdir in test_cc_apk_configure (#4914)
    94f58e812 test: fix jsonschema version checking in pro test (#4915)
    6d61b63f3 feat(dhcp): Make dhcpcd the default dhcp client (#4912)
    5fd3fc72f feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
    90fd7ac0e test: Retry longer in test_status.py integration test (#4910)
    29c215fa8 test: fix kernel override test (#4913)
    4775327e7 chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
    4779679e7 doc: update ubuntu_advantage references to pro
    09bb6190e chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
    b9b125fd8 feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
    25bc74cc4 feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
    0754ed2d6 test: fix verify_clean_log (#4903)
    a41401199 test: limit test_no_hotplug_triggered_by_docker to stable releases
    d6dc417d2 tests: generalize warning Open vSwitch warning from netplan apply (#4894)
    64631260b fix(hotplug): remove literal quotes in args
    cd5a72743 feat(apt): skip known /etc/apt/sources.list content
    9d08c1177 feat(apt): use APT deb822 source format by default
    48ab789b9 test(ubuntu-pro): change livepatch to esm-infra
    99394ecb9 doc(ec2): fix metadata urls (#4880)
    c948e4182 fix: unpin jsonschema and update tests (#4882)
    160b5ac8f distro: add eject FreeBSD code path (#4838)
    4dbb08f5f feat(ec2): add hotplug as a default network update event (#4799)
    f2750c058 feat(ec2): support instances with repeated device-number (#4799)
    b519d861a feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
    0ca5f3104 feat(ec2): support multi NIC/IP setups (#4799)
    e70cd4784 feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
    7d605eae6 test: harden test_dhcp.py::test_noble_and_newer_force_client
    9c4b799e6 test: fix test_combined_cloud_config_json (#4868)
    c7c4a334f feat(apport): Disable hook when disabled (#4874)
    0af00e48d chore: Add pyright ignore comments (#4874)
    534cbc26c bug(apport): Fix invalid typing (#4874)
    be68e2aac refactor: Move general apport hook to main branch (#4874)
    551f560d1 feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
    7a03691a8 chore: update CI package build to oldest supported Ubuntu release focal (#4871)
    4e87db2be test: fix test_cli.test_valid_userdata
    ee7994071 feat: handle error when log file is empty (#4859)
    15f786a5b test: fix test_ec2_ipv6
    5e7ef1032 fix: Address TIOBE abstract interpretation issues (#4866)
    c608a9c94 feat(dhcp): Make udhcpc use same client id (#4830)
    5c03247a4 feat(dhcp): Support InfiniBand with dhcpcd (#4830)
    7ed89d3f7 feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
    b7c7be95f test: Bring back dhcp6 integration test changes (#4855)
    39c106364 tests: add status --wait blocking test from early boot
    e6d56b636 tests: fix retry decorator to return the func value
    cb08cab5d docs: add create_hostname_file to all hostname user-data examples (#4727)
    fdefe08ad fix: Fix typos (#4850)
    33148a072 feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
    928e79029 tests(dhcp): Add udhcpc client to test matrix (#4839)
    b08193b37 fix: Add types to network v1 schema (#4841)
    40d65002a docs(vmware): fixed indentation on example userdata yaml (#4854)
    66c427ce1 tests: Remove invalid keyword from method call
    4e0329331 Release 23.4.3
    1f6eddd5b fix: Handle systemctl when dbus not ready (#4842)
    89cba2950 fix(schema cli): avoid netplan validation on net-config version 1
    7dab72dd5 tests: reduce expected reports due to dropped rightscale module
    ae38732be tests(net-config): add awareness of netplan on stable Ubuntu
    d45beaa88 fix(source): fix argument boundaries when parsing cmdline (#4825)
    2060e8359 feat: fall back to cdrom_id eject if eject is not available (#4769)
    81051acc6 fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
    2c748f502 tests: Add kernel commandline test (#4833)
    fc4e23334 fix: Ensure NetworkManager renderer works without gateway (#4829)
    2b693c656 test: Correct log parsing in schema test (#4832)
    1a248b592 refactor: Remove cc_rightscale_userdata (#4813)
    d27eab110 refactor: Replace load_file with load_binary_file to simplify typing (#4823)
    0e90131d5 refactor: Add load_text_file function to simplify typing (#4823)
    31fff57de refactor: Change variable name for consistent typing (#4823)
    21b2b6e44 feat(dhcp): Add support for dhcpcd (#4746)
    ba6fbfe4f refactor: Remove unused networking code (#4810)
    e8928418f test: Add more DNS net tests
    f7e0c4174 BREAKING CHANGE: Stop adding network v2 DNS to global DNS
    a85f0678c doc: update DataSource.default_update_events doc (#4815)
    15c78e8b2 chore: do not modify instance attribute (#4815)
    ef2e48e93 test: fix mocking leaks (#4815)
    a74653f98 Revert "ci: Pin pytest<8.0.0. (#4816)" (#4815)
    dba337bf7 test: Update tests for passlib (#4818)
    e168b4a13 fix(net-schema): no warn when skipping schema check on non-netplan
    56aa87969 feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
    ddbb7aa08 test: Cleanup unwanted logger setup calls (#4817)
    cb58abe04 refactor(cloudinit.util): Modernize error handling, add better warnings (#4812)
    7c96c9cd9 ci: Pin pytest<8.0.0. (#4816)
    180da9ba3 fix(tests): fixing KeyError on integrations tests (#4811)
    39c578140 tests: integration for network schema on netplan systems (#4767)
    275b66e3e feat(schema): use netplan API to validate network-config (#4767)
    dad4ad925 chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
    81a3fa462 fix: cli schema config-file option report network-config type (#4767)
    ae9a6ff43 refactor(azure): replace BrokenAzureDataSource with reportable errors (#4807)
    72418838f Fix Alpine and Mariner /etc/hosts templates (#4780)
    5370c3e26 tests: revert #4792 as noble images no longer return 2 (#4809)
    0a91df832 tests: use client fixture instead of class_client in cleantest (#4806)
    7ee0dc8ef tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
    48bdc150f fix(tests): failing integration tests due to missing ua token (#4802)
    d9677655e Release 23.4.2
    8ff94fe94 Revert "Use grep for faster parsing of cloud config in ds-identify (#4327)"
    f2851e099 tests: Demonstrate ds-identify yaml parsing broken
    3b9397ff8 tests: add exit 2 on noble from cloud-init status (#4792)
    9d22a63bf fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
    84b322c6f feat: Update cacerts to support VMware Photon (#4763)
    b620c0424 fix: netplan rendering integrations tests (#4795)
    bc2e24e5e azure: remove cloud-init.log reporting via KVP (#4715)
    ae38d4b07 feat(Alpine): Modify ds-identify for Alpine support and add OpenRC init.d script (#4785)
    ce07818f9 doc: Add DatasourceScaleway documentation (#4773)
    bb8ed452a fix: packaged logrotate file lacks suffix on ubuntu (#4790)
    d9865e2ac feat(logrotate): config flexibility more backups (#4790)
    da08a2609 fix(clean): stop warning when running clean command (#4761)
    17caebb26 feat: network schema v1 strict on nic name length 15 (#4774)
    0e247c897 logrotate config (#4721)
    494035101 test: Enable coverage in integration tests (#4682)
    f1ca01c5b test: Move unit test helpers to global test helpers (#4682)
    1c5726b1c test: Remove snapshot option from install_new_cloud_init (#4682)
    5b5eb8bd8 docs: fix cloud-init single param docs (#4682)
    5b6d08deb Alpine: fix location of dhclient leases file (#4782)
    034a5cdf1 test(jsonschema): Pin jsonschema version (#4781)
    1baa9ff06 refactor(IscDhclient): discover DHCP leases at distro-provided location (#4683)
    b729a4c4a feat: datasource check for WSL (#4730)
    f79505db9 test: Update hostname integration tests (#4744)
    901a9a695 test: Add mantic and noble releases to integration tests (#4744)
    436e6f5ce refactor: Ensure internal DNS state same for v1 and v2 (#4756)
    42d1c9571 feat: Add v2 route mtu rendering to NetworkManager (#4748)
    dc94a3901 tests: stable ubuntu releases will not exit 2 on warnings (#4757)
    bda164459 doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
    812df5038 fix: relax NetworkManager renderer rules (#4745)
    598e0560d fix: fix growpart race (#4618)
    0d787d0a2 feat: apply global DNS to interfaces in network-manager  (#4723)
    39abae9ec feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
    960faf87d chore: refactor schema data as enums and namedtuples (#4585)
    3274d2306 feat(schema): improve CLI message on unprocessed data files (#4585)
    8937b5e5a fix(config): relocate /run to /var/run on BSD (canonical#4677)
    83f99b547 fix(ds-identify): relocate /run on *BSD (#4677)
    ccf5bc4dc fix(sysvinit): make code a bit more consistent (#4677)
    b51536bc7 doc: Document how cloud-init is, not how it was (#4737)
    720665263 tests: add expected exit 2 on noble from cloud-init status (#4738)
    367300257 test(linkcheck): ignore github md and rst link headers (#4734)
    b6a1c635d test: Update webhook test due to removed cc_migrator module (#4726)
    0f3afb41b fix(ds-identify): Return code 2 is a valid result, use cached value
    cb36bf38b fix(cloudstack): Use parsed lease file for virtual router in cloudstack
    53eb8555e fix(dhcp): Guard against FileNotFoundError and NameError exceptions
    d662ffc5e fix(apt_configure): disable sources.list if rendering deb822 (#4699)
    21c1d9161 docs: Add link to contributing to docs (#4725)
    5a021d50b chore: remove commented code (#4722)
    fb5a7186d chore: Add log message when create_hostname_file key is false (#4724)
    c2c100e8c fix: Correct v2 NetworkManager route rendering (#4637)
    82162cb47 azure/imds: log http failures as warnings instead of info (#4714)
    bb1e298b4 fix(setup): Relocate libexec on OpenBSD (#4708)
    4f60ff099 feat(jinja): better jinja feedback and error catching (#4629)
    c698d8e2a test: Fix silent swallowing of unexpected subp error (#4702)
    9308e8767 fix: Move cloud-final.service after time-sync.target (#4610)
    1003d438b feat(log): Make logger name more useful for __init__.py
    468c0f62e Release 23.4.1 (#4695)
    1b0719420 chore: Remove cc_migrator module (#4690)
    c071f69ac fix(tests): make cmd/devel/tests work on non-GNU
    e90cb10bb chore: Remove cmdline from spelling list (#4670)
    290b0a0f7 doc: Document boot status meaning (#4670)
    5e1cf09c4 doc: Set expectations for new datasources (#4670)
    addfc845b ci: Show linkcheck broken links in job output (#4670)
    d29b744e7 fix: Handle systemctl commands when dbus not ready (#4681)
    4006c23cb dmi: Add support for OpenBSD (#4654)
    4ed09d63d ds-identify: fake dmidecode support on OpenBSD (#4654)
    533ec66bd ds-identify: add OpenBSD support in uname (#4654)
    949af5483 refactor: Ensure '_cfg' in Init class is dict (#4674)
    a6ef369ad refactor: Make event scope required in stages.py (#4674)
    da62f298f refactor: Remove unused argument (#4674)
    305ec6bec chore: Move from lintian to a sphinx spelling plugin (#3639)
    3e7caf3d0 fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
    75ee2f073 ci: Add Python 3.13 (#4567)
    78a653bfe Add AlexSv04047 to CLA signers file (#4671)
    969671bc7 fix(openbsd): services & build tool (#4660)
    bb474df78 tests/unittests: add a new unit test for network manager net activator (#4672)
    b45d23ce3 Implement DataSourceCloudStack.get_hostname() (#4433)
    d1d516689 net/nm: check for presence of ifcfg files when nm connection files are absent (#4645)
    1d6918bdf doc: Overhaul debugging documentation (#4578)
    084c053d2 doc: Move dangerous commands to dev docs (#4578)
    ebb843371 doc: Relocate file location docs (#4578)
    12950ae0a doc: Remove the debugging page (#4578)
    cfb1bef67 fix(util): Fix boottime to work on OpenBSD (#4667)
    0264e9691 net: allow dhcp6 configuration from generate_fallback_configuration()
    29dd5ace7 net/network_manager: do not set "may-fail" to False for both ipv4 and ipv6 dhcp
    72d6e187a feat(subp): Measure subprocess command time (#4606)
    09b70436b fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
    45501aaa1 style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
    4d6b96d8b copr: remove TODO.rst from spec file
    d798bb5e0 fix(packages/brpm): correct syntax error and typo
    9994f7f56 style(ruff): fix tip target
    12bb6818a config: Module documentation updates (#4599)
    3bad8b5a5 refactor(subp): Remove redundant parameter 'env' (#4555)
    ad6808f82 refactor(subp): Remove unused parameter 'target' (#4555)
    e6d0acde2 refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
    3ee514ace refactor(subp): Re-add return type to subp() (#4555)
    36959b6ab refactor(subp): Add type information to args (#4555)
    3924113df refactor(subp): Use subprocess.DEVNULL (#4555)
    9af8a4a07 refactor(subp): Remove parameter 'combine_capture' (#4555)
    e9b9971f6 refactor(subp): Remove unused parameter 'status_cb' (#4555)
    c02098ff0 fix(cli): fix parsing of argparse subcommands (#4559)
    9160bdb68 chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
    3c0eca190 chore!: do not generate ssh dsa host keys (#4456)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
769cf8be74 criu: patch cleanups 
Adding Upstream-Status and reformatting some of the long logs.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
a7bba8abf1 virt-manager: add Upstream-Status to patch 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
c20d158524 ceph: update to 18.2.2 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Chen Qi
21b439042b ceph: fix do_compile/do_install failures 
1. OECMAKE_C/CXX_COMPILER needs to have sysroot setting in it, because
   ceph's cmake files are using it to construct PY_CC. Without it, files
   such as stdlib.h cannot be found.
2. re2 is added to deps. Seems no way to disable it.
3. 0001-ceph-fix-build-errors-for-cross-compile.patch is dropped. It's useless
   and problematic for new version.
4. 0001-cmake-add-support-for-python3.11.patch is dropped as it's not needed anymore.
5. 0001-avoid-to_string-error.patch is added to fix build error, maybe caused by
   boost version incompatibility.
6. Some cleanups.
7. A few more options are set.
8. BUILD_DOC=1 is exported so that check_sanity() causes compilation error.
   This is a workaround and may need further visit in the future.
9. Delete the conditional check for /etc/debian_version which adds '--install-layout deb'
   and causes the following error.
     error: option --install-layout not recognized
   The patch is 0001-delete-install-layout-deb.patch.
10. ceph-volume[-systemd] are now in sbin.
11. cephfs-mirror units are added to avoid package QA issue.
12. cephfs-top is seded to fix incorrect shebang.
13. Ensure libcephsqlite.so is packaged into ceph instead of ceph-dev.
14. Add bash to RDEPENDS as rbdmap needs it.
15. Skip buildpaths QA.
16. Add ceph user/group, because ceph-crash needs it in drop_privilege function call.
17. Patch the build.py which creates the cephadm zipapp to ensure it uses the correct interpreter.
    We cannot simply use 'sed' against the cephadm as it's zip format.

Runtime tests:
cephfs-top --help
cephadm --help
systemctl status rbdmap
systemctl --failed

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
3e1ee1fda7 ceph: initial update to 18.2.0 
The ability to detected our python is fixed, but we are now
failing in the compilation phase on some of the applications.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
628d9430a8 kernel/cfg: move to a kernel-cache / central location for configuration 
We've had duplicate fragments in the kernel-cache and the meta-virt
layer for quite some time (i.e. docker).

To more easily keep these in sync, promote the sharing of fragments
and to allow them to be used even when meta-virt isn't part of
a build, we change our feature additions to use the yocto-kernel-cfg
clone of the kernel-cache instead of the ones in our layer.

It remains to be seen if any other kernel recipes will run into
issues with this movement of the fragments, so we mark this as a
WIP/RFC.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Ola x Nilsson
1482ea31ac diod: Update to b4b5e8e00ed11b21d7fcf05a080dc054a8eac2d6 
Just needs a single patch to handle the lua feature in configure when
cross-compiling.

f732f19 auto.diod.in: remove bashisms
7e0df4c build: Update ax_compiler_vendor.m4 from autoconf-archive 2023.02.20
7e56831 build: Update ax_lua.m4 from autoconf-archive 2023.02.20
76c7c18 build: Install diod.service and auto.diod without install-data-local
af5972f build: Add missing , to AS_CASE in configure.ac
6cbbacf diodmount: update man page with privport option
3777ea1 libdiod: Support ipv6 in diod_sock_connect
ddf6071 libdiod: Set global options on exports specified on
1db9e57 libdiod: support privport on ipv6
ae7c536 diodmount: Add option to set privport
66652bf diod: allow walk on open fids
2822ea6 tests: disable open-walk test
56f24b2 diod: fix incompatible-pointer-types warning
ab03b7f utils/diodls: fix error-format warnings
84d4e51 github: extend build matrix to include ubuntu18
203b4c7 README: reference SPDX identifier
d5444ce license: update 9p.h kernel header
0a5c80e license: update npfs source headers
88350f3 license: update license header to abbreivated one
57a621d protocol: fix plan9 manual links
ee95dd9 tests/misc: fix distcheck problems
d8e1e67 README: update dependencies
5425713 ci: install lua interpreter as prereq
25bebfb build: add configure --disable-config
e7f9df9 build: fix lua detection
3eabd5d ci: create build matrix with clang, gcc
20ca897 build: conditional use of gcc warning flags is broken
16f8da4 build: turn all compiler warnings into errors
59bdaa1 tests/kern/tfcntl3: drop dead code
7a0f557 tests/kern/tfcntl2: drop dead code
dd4d4c0 tests/kern/misc: ignore stringop-truncation warnings
3a05837 tests/kern/fsx: ignore unused-result warnings
c918476 tests/kern/postmark: ignore format-overflow warn
b20268c tests/kern/fsx: fix incorrect message
7ee5b68 tests/kern/pathwalk: check snprintf return value
657dc10 diod: use readdir(3) in ioctx_readdir()
cba3834 diod: normalize whitespace in ioctx_readdir_r()
3e8ed95 diod: use readdir() not deprecated readdir_r()
194416d diod: define _DEFAULT_SOURCE not _BSD_SOURCE
ddcbd3b diodmount: initialized variable
698d055 diodmount: check system() return value
787994e build: suppress liblsd errors
192229f build: enable automake "maintainer mode"
0086b9b libnpfs: don't call snprintf() with NULL %s arg
620792d ci: add basic github workflow
530e2d5 move main.yml into the correct directory
783cb8c ci: add github workflow stub
c7eccf9 ci: drop travis config
ff26333 Use PKG_CHECK_MODULES for ncurses, drop legacy curses
91d8966 Silence warnings when compiling with clang
3bb5798 Increase diod server maximum msize setting to 1MB
896f37c Add option to disable hostname lookups
cdd12f2 Remove empty README
c2cd87c Document IPv6 address format
899306b diod: Add support for IPv6 addresses
1878ce9 diodmount: Add support for IPv6 addresses
82b819f Splits the package in diod, and diod-utils.
cf33c8e Fixes spec file for systemd build on CentOS 7.
9af7d94 Travis-ci: added support for ppc64le
550ba49 document the FreeBSD changes
bfe6c4b implement impersonation on FreeBSD
c28286f restore user-linux.c from user-linux-0.c
2624b4f copy user-linux.c to user-freebsd.c
f4ae6ef save a copy of user-linux.c as user-linux-0.c
228c2d2 minor cleanup in liblsd/hostlist.c
f325ad5 fix the help message
e20572a finish the split of user.c
11ed83c remove non-shared code from user.c
929276d move common code from user.c out of the way
7d3d01a leave only a stub in user-stub.c
d7abf6f create user-stub.c from user.c
828cf89 remove non-Linux bits from user-linux.c
3eb807c create user-linux.c from user.c
490d7bc add a setting to configure access=user API
243b0b3 disable diodmount and tests except on Linux
1ece6d7 make building tests configurable
a3610ca make building diodmount configurable
13eace1 do not special-case Linux to do the same thing
33cd2b0 FreeBSD does not have ENODATA
e6ecd06 remove unused ifdefs
42958d2 check for missing defines directly
244adc7 use autoconf to detect headers
f3b9cae small fixes for FreeBSD
73fe9a6 Update protocol.md
f0f7d0d Fix systemd unit dir and file permissions
81eef82 Fix autoconf failure: Ensure m4 macro inclusion
ca1b0f5 Place systemd unit into $(libdir)/systemd/system
5551dbc libnpclient/read.c: fix out-of-bounds write
50bc4ea libdiod/diod_sock.c: zero initialize sockaddr
1d40ba5 diod/ops.c: distinguish opened and unopened Fids in {set,get}attr
d1d31c9 diod/ioctx.c: add stat, chmod, chown, truncate, utimensat
6749db3 diod/ops.c: disallow walk on opened fids
f1f1b38 tests/user: add tests for operations on opened fids
6fbe656 tests: fix xattr test build
d3946ca tests: check for daemon user
ff730b1 Fix typo in P9_TRENAME format
9690086 add git to debian dependencies
0498089 diod/ops.c: add header file for makedev
043f1ea cleanup: remove files that should not have been committed
0dd51c5 travis-ci: begin building under travis
fb191b7 tests/kern: avoid use of relative paths
47c63b0 tests/user: avoid use of relative paths
320eb5a tests/misc: avoid use of relative paths
74bfd84 test/misc: include test.h in dist target
89fb32d tests/kern/dbench: fix distcheck problem
d6881e0 build: fix source references in tests/misc
2379e20 build: include from $(srcdir) not relative path
f86b24e test/user: skip t18,19 if xattr not enabled
fc02397 test/user/attach: reduce number of threads
2f92e04 cleanup: drop trailing whitespace from test source
f958117 build: drop META
f33d72a libnpfs: use PACKAGE_NAME-PACKAGE_VERSION not META_ALIAS
5add7d2 dtop: show PACKAGE_VERSION not META_VERSION.RELEASE
3a51ec0 man: use PACKAGE not META macros
1fd1b11 spec: use PACKAGE not META macros
cf3247a cleanup: drop trailing whitespace from source
7ca7f56 protocol.md: fix typos and markdown errors
d04c39e README.md: trivial fixes
9d37f4a protocol.md: fix typos

Change-Id: I5f06ccaa86f935d5f32a0800c0edb49b9d17b0ff
Signed-off-by: Ola x Nilsson <olani@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Xiangyu Chen
b8d6bd833e libvirtd: don't allow named.service listening on libvirt network interface 
libvirtd has its own network interface named virbr0, and it using
dnsmasq to setup the DNS. the named.service also listen interface and try to
bind the port 59 on virtbr0, that cause dnsmasq report following error:

dnsmasq: failed to create listening socket for 192.168.122.1: Address already in use

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
c4523d341e kernel/cfg: synchronize latest docker configuration 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Markus Volk
1af4eeca00 libvirt-glib: update 4.0.0 -> 5.0.0 
5.0.0 - Nov 28, 2023
====================

- Fix compatiblity with libxml2 >= 2.12.0
- Bump min libvirt version to 2.3.0
- Bump min meson to 0.56.0
- Require use of GCC >= 4.8 / CLang > 3.4 / XCode CLang > 5.1
- Mark USB disks as removable by default
- Add support for audio device backend config
- Add support for DBus graphics backend config
- Add support for controlling firmware feature flags
- Improve compiler flag handling in meson
- Extend library version script handling to FreeBSD
- Fix pointer sign issue in capabilities config API
- Fix compat with gnome.mkenums() in Meson 0.60.0
- Avoid compiler warnings from gi-ir-scanner generated
  code by not setting glib version constraints
- Be more robust about NULL GError parameters
- Disable unimportant cast alignment compiler warnings
- Use 'pragma once' in all header files
- Updated translations

This fixes build after libxml update:
../git/libvirt-gconfig/libvirt-gconfig-object.c:200:37: error: passing argument 2 of 'xmlSetStructuredErrorFunc' from incompatible pointer type [-Werror=incompatible-pointer-types]
  200 |     xmlSetStructuredErrorFunc(NULL, gvir_xml_structured_error_nop);
      |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                                     |
      |                                     void (*)(void *, xmlError *) {aka void (*)(void *, struct _xmlError *)}
In file included from /home/flk/poky/build/tmp/work/corei7-64-poky-linux/libvirt-glib/4.0.0/recipe-sysroot/usr/include/libxml2/libxml/relaxng.h:14,

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Paul Le Guen de Kerneizon
a7ca71f70b virt-manager: add package 
virt-manager is a graphical tool for managing virtual machines via
libvirt. By default, virt-manager is compiled with GUI dependency using
`gui` flag.
Build tested on aarch64 and x86-64 machines, with both with and without
gui PACKAGECONFIG flag.

Signed-off-by: Paul Le Guen de Kerneizon <paul.leguendekerneizon@savoirfairelinux.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Bruce Ashfield
8c18554d3e cfg-fragments: update to 6.6 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
8dd5ca2900 criu: pycriu RDEPENDS on python3-fcntl 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
c735cd2ec9 criu: pycriu RDEPENDS on python3-ctypes 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
6f7a7d62cb criu: pycriu RDEPENDS on python3-protobuf 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
227452ab4b criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHON 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
cd11ca9de3 criu: fix pycriu build of wheel 
Inherit python_setuptools_build_meta instead of setuptools3, as
this is the build-backend declared in the pyproject.toml

We seem to need python3-protobuf-native as a DEPENDS, but
then the dependency check complains because our version in meta-python
is python3-protobuf_4.25.bb

Workaround this (for now?) by telling python3 -m build to --skip-dependency-check

This allows criu to _build_. Whether it is functional and proper is a different
story.

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:19 +00:00
Tim Orling
9b4acf5185 criu: build and install wheels 
Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and
do_install (python3 -m install) to build and install wheels and avoid the heavy
handed pip install usage.

FIXME: even though lib/pycriu/version.py is properly being dynamically generated,
       setuptools/config/expand.py is failing to detect the __version__ attr.

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
6509f2f6e1 criu: update to v3.19 
Bumping criu to version v3.19, which comprises the following commits:

    f8b14286b criu: Version 3.19 (Bronze Peacock)
    f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags
    0b62f4267 lib: use separate packages for pycriu and crit
    97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness.
    e076c11e2 ci: fix codespell errors
    41938f14b zdtm/static: test the offset migration of ELF files
    29026496d zdtm/lib: add missing signal.h header
    a77185dae files-reg: don't change the file pos in get_build_id
    5d4179ddb criu/proc_parse: refactor the eventpoll parser
    cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check
    36a84751e zdtm/cow00: fix typo
    48d6a59a2 arch/x86: remove the redundant check
    45670b655 apparmor: remove the redundant check
    5e8d7dc94 tun: don't parse buffers that have not been filled with data
    4c9d23d33 util: allow to run criu under strace
    c9fdd355f pie: Mark __export_*() functions as externally_visible
    5d6c8bc58 clang-format: disable column limit constraint
    81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings
    e86e8dac0 memfd: don't reopen file descriptors for memory mappings
    28e854d66 amdgpu: fix clang warnings
    ba168ab78 ci: enable build with amdgpu plugin
    aa38a5989 amdgpu: print an error if the dup syscall fails
    940a05c0b amdgpu: don't leak fd on an error path in open_img_file
    a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control
    66f39adf1 criu: change the comment about magic numbers
    9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy
    28adebefb Return page size as unsigned long
    00f8a56b6 zdtm: check userns once
    ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out.
    f6e820bed zdtm: Treat ESRCH from kill() as success.
    c29c5a1df zdtm: cgroup04: Improve skip check's robustness.
    131e464a0 zdtm: cgroup04: Improve error messages.
    785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes.
    5e544dc44 ci: stop testing ubuntu overlayfs
    7a2910f89 py/cli: add --version option
    61d9cf6f9 crit/setup.py: use __version__ from pycriu
    8adefc90d lib/pycriu: generate version.py
    59fcfa80d compel: Add support for ppc64le scv syscalls
    d06c9b5cd criu/plugin: Add environment variable to cap size of buffers.
    8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration
    2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available
    32241b00d vagrant: run tests with fedora 38
    862cb5c1c vagrant: update to version 2.3.7
    d2a0d1fa6 lint: don't fail workflow on indent fail
    08f286ed9 CONTRIBUTING.md: improve coding-style related sections
    38bf7f42e CONTRIBUTING.md: don't mention ctags
    b7a8bb088 zdtm: test execveat(memfd)
    c9b2633ca memfd: return original memfd fd for execveat()
    480565437 kerndat: check_pagemap: close(fd) on error path
    d5284313f kerndat: Make errors from clone3() check more precise.
    badf8060c proc_parse: Log smaps entry while dumping VMA.
    1800018bc test/other: add test for action-script
    ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user()
    f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message
    b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages.
    86ad52bc2 ci/loongarch64: compile tests before running zdtm.py
    0085f992c memfd: don't set fd attributes not needed for vma mapping
    8c17535f3 loongarch64: fix syscall_64.tbl
    6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels
    620e8c0a6 Put a cap on the size of single preadv in restore operation.
    2547ac8ac zdtm: membarrier: test migration of membarrier() registration
    e07155e19 dump+restore: Implement membarrier() registration c/r.
    5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs
    d1096e3b3 lib/py: add VMA_AREA_MEMFD constant
    d3b955e57 ci/docker: install all required packages
    9477354de scripts/apt: don't hide apt output
    a4b49c46f amdgpu_plugin: remove duplicated log prefix
    69200bec7 irmap: scan user-provided paths in order
    2a131167b page-xfer: Pull tcp_cork,nodelay().
    6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr
    3628589b5 zdtm/memfd00: test memfd file mode
    dfa541095 memfd: dump and restore permissions.
    ac1219f4e sk-inet: Extend 'TCP repair off' failure log.
    25d033080 restore: Skip dropping BSET capability if irrelevant.
    fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting
    a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting.
    7df3f6595 restore: Fix capability migration requirements between different kernels.
    7ab02639f restore: Skip setgroups() when already correct.
    4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids.
    99188cfbe tty: Avoid EPERM for no-op chown().
    113957270 memfd: Avoid EPERM for no-op chown().
    96fa42b79 cgroup: Replace restore_perms() with cr_fchperm().
    b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes.
    f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes.
    21560270d util: Implement fchown() and fchmod() wrappers.
    e25a243b2 ci: add workflow for loongarch64
    788e1e92e zdtm: add loongarch64 support
    ae0811475 criu: add loongarch64 support to parasite and restorer
    ec6dc2d5c images: add loongarch64 core image
    c9df09eea compel: add loongarch64 support
    b304106e6 include: add common header files for loongarch64
    8a24d4872 ci: add workflow to ensure self-contained commits
    23313080a kerndat: don't leak a socket file descriptor
    b2d74fbfd zdtm: replace NR_fstat with NR_statx
    8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled
    6b8107cd1 irmap: Reduce error log severity to warning.
    4eb6cc319 mount: Demote fsnotify logs for ignored failures.
    3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits.
    804c0ba82 soccr: Log name of socket queue that failed to restore.
    4018b7877 soccr: Log offset when failed to restore socket's queued data.
    1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket.
    5a723937a compel: Log the status word with "Task is still running" errors.
    664598dc7 files-reg: Debug "open file on overmounted mount" error.
    a5fe99d2c cgroup: Propagate error on cgroup mount failure.
    056cac474 zdtm: drop python 2 compatibility
    002f2372a lib/py: drop python 2 compatibility
    d388b91de test/others: drop setup_swrk() py2 compatibility
    ee9983d4a test/criu-ns: drop python 2 compatibility
    ede018176 make: remove checks for python 2 binary
    642fd99bf remove python-future dependency
    376f3d180 crit: add requirements.txt for pip>=20.1
    f5d06571c crit: drop python 2 support
    7825f4ebf coredump: drop python 2 support
    05f0535de ci: clean up CentOS 7 related tweaks
    362d8fa5c ci: disable CentOS 7 test in Cirrus CI
    94c9e4787 readme: refactor asciinema link for video playback
    7bda5e656 zdtm: Update netns purpose comment in zdtm_ct.
    9ad59f58f util: Make CRIU run_id machine-level unique.
    eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing.
    bf8446ae5 kerndat: unexport kerndat_nsid()
    f2011e1c7 util: Downgrade ignored errors to warnings.
    2aa9cb933 rpc: Support setting images_dir by path.
    439b52243 rpc: Support gathering external file list after freezing process tree.
    82a0db036 docker/podman: test c/r with action-script
    28d005638 action-scripts: allow shell scripts in rpc mode
    3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32().
    f043cb22a build: Guard against libbsd's version of `__aligned`.
    c5142104a build: Use make-provided AR for building libzdtmtst.
    88f8fdda8 build: Fix LIBS vs LDFLAGS order.
    cbbe6c683 build: Debug system feature tests.
    1a1fa439c build: Remove HAS_MEMFD test
    2bf10c8d2 restore: remove unused `secbits` field.
    e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host.
    eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case.
    ffa1e47fd sockets: Increase the size of sockets hashmap to 16K.
    304a309ae test/thp_disable: fix lint
    c97cc6a6c Allow skipping iptables/nftables invocation.
    d0ac547b3 zdtm: sock_opts00: Improve error messages.
    6bc00fcb8 zdtm: Implement test sharding.
    1fb5c410c zdtm: Allow --keep-going for single test.
    ed88e3241 zdtm: Add timeouts for test commands.
    516fade93 zdtm: Allow overriding /tmp.
    4b764a9dc Allow passing --log_to_stderr via RPC.
    1e5ebec39 Allow passing --display_stats via RPC.
    0e88a91ff Allow passing --leave_stopped by RPC.
    4455444ee compel/test: Return 0 in case of error in fdspy
    4c1409b8f Fill FPU init state if it's not provided by kernel.
    93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration
    01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration
    a0c78a790 zdtm: thp_disable: Output a single failure message
    2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected.
    21ce76263 Restore THP_DISABLE prctl.
    9943dcde1 Fix mount(cgroup2) for older kernels.
    0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16.
    a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions
    2ac15e3ad action-scripts: Add pre-stream hook
    c6ac396aa timers: improve and fix posix timer id sequence checks
    fc08fa907 criu-ns: Update shebang line to python
    9cd09f586 criu-ns: Install Python pathlib module in CentOS 7
    9c9e8ea3f criu-ns: Add tests for criu-ns script
    e4b6fb2d1 criu-ns: Add support for older Python version in CI
    733f16551 criu-ns: Add --criu-binary argument to run_criu()
    36709536e lib/c: add empty_ns interfaces to libcriu
    b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt
    cc607f810 criu-ns: make --pidfile option show pid in caller pidns
    50e17a1cf scripts: make newer versions of shellcheck happy
    df7b897a2 ci: fix new codespell errors
    727d79650 compel: support XSAVE on newer Intel CPUs
    fa6af25e7 dump: increase fcntl call failure judgment
    1c0f8787b zdtm: Add tests for ip tos restore
    04cdbd610 sk-inet: Add IP TOS socket option
    4c1a2ac41 criu: Version 3.18 (Silver Sandpiper)
    b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid
    9b3496043 log: fix timestamp logging when tv_sec>=100
    94ac9ee3c proc_parse: fix while condition in parse_pid_status
    45e4a6b27 netlink: fix netlink fd flags dump/restore failed
    6c728df1d zdtm: modify rseq01 to include a thread
    f8da250bb cr-dump: properly apply rseq fixup for all threads
    78c4e2c0f cr-dump: move rseq functions before dump_task_thread
    85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread
    9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test
    0c5239932 ci: cancel preceding workflows run
    5c8cdceec sk-unix: rework unix_resolve_name
    de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old
    d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old
    ccc790d54 zdtm/lib: fix cwd path freeing
    8e6fa9c3b net: Add net log prefix
    7f0f07599 crit: fix compatibility with Python 3.12
    bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job
    66fd45d51 sk-unix: add some missed error printing
    a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization
    12423abdb mount: allow bindmounts for external fuse mounts
    65407616e ci/archlinux: initialize machine ID
    34e2b0221 Optimized shell code with <'s (instead of cat + |)
    7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump
    69befdde1 cgroup-v2: make new field cg_set optional
    529f29891 cgroup-v2: make new field is_threaded optional
    6e681afb6 net: fail restore if nftables isn't supported but image is present
    156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12
    4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv
    3f8e3220b CONTRIBUTING.md: document make lint / indent
    42c4be2a9 net: use get_legacy_iptables_bin also on restore
    298286718 pie/restorer: Fix fd leaking on error path
    1d4777e45 test: add long command-line to coredump test
    edaec5d76 coredump: report missing files without a backtrace
    3ca979f9a coredump: handle long command-lines
    a0cc95c03 lib/py: reduce code duplication
    85b5c1e45 ci/podman-test: drop crun installation script
    91ff24b47 ci: disable c/r of cgroups with podman
    e7ab6fe63 restore: don't miss futex abort in restore_task_with_children
    676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return
    7b8035344 mailmap: update my email
    1ae9bac54 dump: improve error printing and readability of task_comm_info
    11c71656b ci: add test for crit info
    9b919ab74 crit: fix empty string comparison
    fa4af0430 dump: Show task comm early
    fd7e97fcf lint: exclude tags file from codespell
    50e42c9dd Add documentation for --ghost-fiemap
    4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options
    bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options
    7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also
    f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported
    14e883656 proc_parse: Handle btrfs files when map_files is not accessible
    d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace
    d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem
    144b467a0 shmem: pr_err -> pr_perror
    6d7c0d007 compel/mips: fix parasite with GCC 12
    7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation
    fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns
    63159c14c mount: simplify code around mount_cr_time_mount
    43fa4e76d remap: refactor goto jumping to a while loop
    757a2b46c remap: Fix typo
    3837d31b5 ci/lint: make push action have at least too commits depth
    cec43025a criu(8): Add info about unprivileged mode limitations
    80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs
    95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files
    951c56917 proc_parse: Set VMA_AREA_REGULAR where needed
    a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers
    0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers
    8cfda2748 log: remove all uses of %m specifier in pr_* functions
    7459d0204 lint: prohibit to use %m specifier in pr_* functions
    f73ba7726 ci: switch from lgtm to codeql
    0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure
    fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing
    ba09fad39 zdtm: add mountinfo topology compare to test lib
    2837a13ef zdtm: add mountinfo parsing to test lib
    543501d5f zdtm/lib: copy xmalloc.h
    d800ef658 zdtm/lib: copy list.h
    be61624f4 clang-format: rework make indent to check specific commits
    a918093ce scripts/ci: use Fedora 37 for vagrant based tests
    1bb84f96f tty: fix codding-style around for_each_bit call
    abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros
    c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format
    aab709b60 log: Write more details in write_pidfile
    7c6eb0b85 asm: fix for_each_bit macro
    bb3f7bef6 crtools: fix help message alignment for --network-lock
    a302b3694 zdtm: fix 'zdtm.py list' command
    21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte
    9686693aa test/javaTests: update org.testng:testng (Maven)
    5c60d35be sockets: tiny style fix
    5a19c3432 non-root: Don't dump socket option SO_MARK if 0
    2180e03b9 non-root: Rework socket bufs for unprivileged mode
    e5ccfbb24 Fix typo in comment
    bdbccc315 zdtm: add two tests for highly sparse ghost file
    f3fdce81a files-reg.c: fiemap algorithm for ghost file
    14b9ec195 ci: fix make indent
    d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python
    095b3e84b ci/lint: install ShellCheck with dnf
    c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0
    fa2c585c2 amdgpu: define __nmk_dir if missing
    c7211f52d Remove execute bit from source file
    f5e0f641a cgroup: Remove redundant code that handles zombie tasks
    c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned
    153614cb1 ci: move cgroup unmounting to run-ci-tests.sh
    516ebc4f5 ci: Do not fail if latest epel repository definition is already installed
    2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy
    07d538cef zdtm: Check threads are restored into correct threaded controllers
    20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers
    17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process
    ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved
    d7e874659 zdtm: Add write_value/read_value helpers into zdtm library
    167cfd366 cgroup-v2: Checkpoint and restore some global properties
    8a336ab22 Switch aarch64 builds to Cirrus CI
    840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach
    3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements
    1cba559da non-root: add non-root test case to cirrus runs
    6743d608c non-root: extend zdtm.py to be able to run tests as non-root
    251939992 Documentation: add details about --unprivileged
    47b07d011 non-root: Introduce unprivileged mode to kerndat
    6a30c7d1e non-root: enable non-root checkpoint/restore
    ce01f70d9 non-root: add functions to work with capabilities
    4b4bf0421 non-root: add infrastructure to run as non-root
    4c7f91aff ci: enable EPEL for CentOS 7
    a39d41656 compel: Fix ppc64le parasite stack layout
    17ec53913 compel: Add test to check parasite stack setup
    556ab0dea compel: Fix infect test to not override failures
    461fa7271 compel: Add APIs to facilitate testing
    debc9c16c seize: do not overwrite exit code from failpath
    16f1c147c test/others/crit/test.sh: use bash array
    0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings
    75b859f23 scripts/ci: rm shellcheck disable annotations
    aeb6961f3 scripts/ci/run-ci-tests: use bash arrays
    b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings
    9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning
    968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning
    86ac0f05e ci/gha/lint: install a recent shellcheck
    2039d7320 files-reg: skip failed mount lookup for shell-job's tty
    9e91e62a7 criu-ns: capture controlling tty
    40e1aaf56 mount: add definition for FSOPEN_CLOEXEC
    7bc24688d ci: Clean up and improve Java testing
    0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu
    39b3de60b ci: Rename openj9 Dockerfiles to hotspot
    f78d3d821 gitignore: Ignore top-evel build dir only
    aeaff6445 test/unix: check C/R of unix listen queues
    83c606e02 zdtm: return 1 from pr_err, pr_perror, fail
    dca55d281 criu: fail migration if data was sent to an in-flight socket
    dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64
    bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform
    b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform
    719fea2fc compel: clear a breakpoint right after it's been triggered
    d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls
    c089159a4 ci/cirrus: centos 8 job nits
    a202ec271 ci/cirrus: add CentOS Stream 9
    2642b657d docker-test: handle race condition error
    49319cd57 Add Alexander Mikhalitsyn to maintainers
    f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback
    cacddf19d cr-restore: rseq: dynamically handle *libc with rseq
    1f9bd82a5 cr-check: optimize check for apparmor stacking
    a1262f55f cr-check: fix check for apparmor stacking
    f9bc0a750 docker-test: use containerd installed from package
    750acec25 Revert "ci: Switch to non overlaysfs tests"
    e8a6765d1 criu: fix conflicting headers
    eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman
    da4803bea MAINTAINERS: Add Radostin (myself) to maintainers
    e62d541bd zdtm: add two tests for large ghost sparse file
    2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test
    fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files
    01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns
    d12e2364c zdtm: make root mount private in criu mntns
    70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso
    b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma
    c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS
    e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux
    ad58553d9 Add --skip-file-rwx-check opt test
    18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore
    6cef6e726 zdtm: add tests for SIGTSTP
    c7858ba42 infect: add SIGTSTP support
    49caf85b2 config: fail on --track-mem option if dirty tracking is not available
    91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach
    dd0217976 amdgpu: Add gitignore
    b117b211a zdtm/scm: add scm09 test with closed sender fd
    5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for
    28358db13 Fix the check for mnt namespace in criu-ns
    295dc85ca github: use git-clang-format instead of make indent
    ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported
    c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump"
    b26e1fdbf mem: Skip pre-dumping on hugetlb mappings
    9066f8741 cr-dump: do not report success to logs if post-dump script failed
    d46f40f4f criu: Version 3.17.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
417cfa77c5 kubernetes: fix build with go 1.21+ 
go1.21+ checks the GOTOOLCHAIN variable and will attempt
to validate/fetch the toolchain version requested.

That doesn't work in our environment, so we export the
variable as "local" to indicate that the build should trust
(and use) the local toolchain.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
e11497bda2 kubernetes: allow go 1.20 building 
Although k8s checks for, and demands, golang 1.21.x, runtime
tests show that golang 1.20.x is properly building and providing
enough for core functionality.

In an effort to see what else may be lurking, we patch out the
check to allow builds with our 1.20.x toolchain.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
17eeea68a5 kubernetes: update to 1.29.1 
Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits:

    a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1
    bc401b91f27 Release commit for Kubernetes v1.29.1
    5350f0829f5 Revert "Graduate Evented PLEG to Beta"
    5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
    0da29848c53 Make OpenAPIGetter tolerant of nil
    865f214fe53 use context for lazy evaluation.
    cde050c4d0b Initialize default attach func regardless of the value of flag
    b055126537b .*: bump golang.org/x/tools to v0.16.1
    05937cba41d add ut
    00045c3c9d6 fix
    b10ad75ab1d fix
    4b8554018c1 fix: 119921
    a5f64b743e4 Address comment
    ed501c1f080 Keep presence cost to 0 to ensure backward compatibility.
    37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
    4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
    40d8e405b8e Use a separate function for checking if device was reconstructed
    d30fda3c68c Add tests for checking of uncertain device paths
    910fa603a25 Fix device uncertain errors on reboot
    62d0bd7260f Fix CSI migration for vSphere volumes
    ce513803ca9 Wire in field dropping for CRDs
    9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
    95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
    85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs
    ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
    e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0
    3f7a50f3868 Release commit for Kubernetes v1.29.0
    3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default
    0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release
    a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2
    e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2
    0ca3089bee6 Bump distroless-iptables to v0.4.2
    1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5
    4e5321c92e0 add beta comment for pod replacement policy
    233949e05df Add an integration test to verify root path cleanup
    c769c2db6ed Revert conformance test addition of root paths
    ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation
    022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release
    71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1
    96a32568e66 Release commit for Kubernetes v1.29.0-rc.1
    f730dc39f9d Fix verify target to not update env var if already set
    51daa8cbd5e api: run hack/update-api-spec.sh
    f042994cb03 releng: update publishing bot rules for 1.29
    bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release
    ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0
    af34f62170c code-generator: fix invalid replace of klog
    d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status
    005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister
    64f8c6939f8 Replace -E with --setenv for systemd-run parameter
    dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated
    c3ff08250eb CHANGELOG: Update directory for v1.25.16 release
    59c63185457 CHANGELOG: Update directory for v1.26.11 release
    bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release
    3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release
    34e620d18c0 Support score extension function in preemption.
    99f7df3e1c1 improve default_servicecidr_controller startup
    c99b5a208de Check error from gomega
    49e8c196c34 use framework gomega
    8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
    6aa3002ad24 add kubeup label instead of a feature label
    27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances
    20853ef1200 Bump distroless-iptables to v0.4.2
    4b1b9a198a6 Fix issue with client rate limiter when polling
    7c5dfceff8a add false matchCondition benchmark
    f9ab24bf485 Refine test case
    617f2132fed e2e: avoid redundant labels in JUnit file
    172f680326a fix: smb file share unavailable issue when it's deleted
    2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables"
    bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew'
    2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
    11cdb8fd011 split compile and eval
    fe53db0dbdc authz: add benchmark for webhook authorizer
    475bfa4a633 set LimitedSwap
    819d1903a27 Add support for authorization-config to local-up-cluster
    b53134f129f Test anonymous and RBAC handling via config file
    264cd648246 Run RBAC hook correctly when running from authz config file
    1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified
    76277f693d0 create a new KubeUp feature label for tests marked for removal
    9e5b8402bb9 update go.mod
    88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4
    e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function
    f3dad977040 self nominate aroradaman as sig- proxy-reviewer
    2645b22003d Self nominate Kevin Hannon for reviewer for job controller
    b12db6d9b55 fix test store delete collection function failed
    9d5b2a44762 Fix API comment for the Job ready field
    1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action
    6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
    bb315d13392 bump runc to v1.1.10
    f77a4543d13 Unregister events in schedulingGates plugin
    70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build
    42a70cdbd16 codegen
    bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work
    eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true
    5edb27aa382 ratcheting-cel: add optionalOldSelf field
    6b6be38896b test: Fix NodeLogQuery tests
    ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir
    ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set
    bd6431323a5 ClusterTrustBundle projection: e2e test
    96e610ac188 ClusterTrustBundle: Enforce max size during validation
    1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections
    e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock
    599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API
    ecfdc8fda55 Define ClusterTrustBundlePEM projected volume
    0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate
    2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging
    e5bba37f20a apiserver: promote flowcontrol tests to conformance
    9ae1fc366b8 Store nodes before calling EnsureLoadBalancer
    60338c79d77 KCCM: fix slow node sync + service update
    a8673fa5b4a KCCM: add test validating slow node sync issue
    b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
    2259ac2444f pause: add --provenance=false during etcd multi-arch build
    50f092c1366 Add kubernetes.io/hostname to faked nodes in tests
    5bf63036c7f Make EnablePodSchedulingReadiness public
    0112d91a056 Add multi-webhook integration test
    b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL
    34b2c4e1ed0 framework: add SSH support for Azure
    44d89c8cf8c Include empty string attributes for CEL authz evaluation
    2e2f51a4417 Plumb failure policy from config to webhook construction
    0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release
    a000af25ff3 Require match condition version only if matchConditions are specified
    baebc376ff8 missed a few summary upper limits for major page faults
    3c268b75244 etcd: Update to version 3.5.10
    4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
    ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP
    2d9128116b6 Use golang library instead of mklink
    85b10c06fab update docs for v1.29 release (note this must be committed after code freeze)
    cda349cda49 Make service-cidrs-controller role feature-gated
    26923b91e8c implementation of split disk kep
    003e4886c6f Fix parameter passing error
    18adc309337 refactor: rename TransitionRule to UsesOldSelf
    b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery.
    338fe7ad55c e2e framework: validate test definitions
    f2cfbf44b1f e2e: use framework labels
    248100ce6df golangci-lint: tone down comment checking
    ecb32a3e29c increase bounded limits for major page faults
    ceaacc88f0d add --provenance=false during etcd multi-arch build
    833156b77e2 e2e: define environment
    4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf
    878d037d3ba dependencies: klog v2.110.1
    bc1df9e7dab bump to newest etcd: v3.5.10
    38905462656 Update APIs and adjust tests
    77f4178c98a Promote CSINodeExpandSecret to GA
    252e1d2dfee Imagepull per runtime class alpha release changes
    0993bb78efe Redo service dispatch with maps
    9d71513ac1e Redo no-endpoint handling with maps
    4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets
    edaa1d735b8 Redo --nodeport-addresses handling with a set
    ef1347b06db Port NAT rules to nftables (and backend is now functional)
    0c5c620b4f2 Port filter rules to nftables
    6cff4153057 Port service/endpoint chain creation/cleanup to nftables
    2735ad541e2 Port table setup/cleanup code to nftables
    bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
    93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup
    abb1a458a95 Create an nftables.Interface in nftables proxier
    1a530457f90 Drop unit tests of iptables-specific unit test helpers
    958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains
    3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain
    96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse
    6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff
    ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks
    5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
    1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support
    e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing
    39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode
    cac26737cd4 apiserver: add conformance tests for flowcontrol API
    a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables
    ce5a22d54c1 hack/update-codegen
    3b69bd6a9ba servicecidrs controller clarify condition false reevaluation
    fee07ad6080 make update with the new API with arrays
    9917c727a1e test e2e: use new ServiceCIDR API
    5d90d07f2d2 test integration: use new ServiceCIDR API
    271900a0f05 integration etcd data: use new ServiceCIDR API
    3edcce52e3c service cidr controller manager: use new ServiceCIDR API
    016c3c9e363 repairip controller: use new ServiceCIDR API
    881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API
    7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API
    513fdb54229 describer: use new ServiceCIDR API
    5123a93b342 printers: use new ServiceCIDR API
    c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings
    599597ca65a fix race on ServiceCIDR deletion
    e3a0df26a86 remove flag cidr max size validation if gate enable
    8182c4d9ec8 make update
    cb509b01f31 e2e for ServiceCIDRs
    46b13d48e20 etcd data
    ccbcadb0324 add integration test
    4ff80864e1c service cidr controller manager
    164276175fb plumb the new multicidr clusterip allocator
    65e69389463 make repair loop multi service cidr aware
    63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs
    d3386e171a2 add iptree radix tree util
    3b450378e07 bootstrap controller for default ServiceCIDR
    55a35bebee9 API printers
    7e77e8b21d1 kubectl describe
    2feb1503e29 Add ServiceCIDR to the REST Registry
    391b25197b8 add apis to apiserver storage
    632081a9078 add ServiceCIDR APIs
    16363b6fb4a fix IPAddress.Name validation message
    df80775693f Include managed field comparison in test
    cc190e0ace1 add integration tests
    26e3a03d12d Implement CEL and wire it with OIDC authenticator
    e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
    7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json
    8b9fc325e28 Update to new cadvisor v0.48.1
    e4776e0f85b avoid infinite recursion for type resolvers.
    fba2d2fadc1 Move invocation to not to cause ginkgo panic
    eb32969ab8f Lazy load OpenAPIV2
    f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl
    e7216c66230 use OpenAPIV3 for kubectl diff
    4f3b0b15182 Use OpenAPI V3 for client side SMP
    6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration
    168e016947c Benchmark job with backoff limit per index
    6ac7da1da87 encryptionconfig/controller: run unit tests faster
    c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl
    c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
    98a2f22e740 Revert "Make the decode function respect the timeout context"
    c7fcef18756 apiserver: set APF featuregate to ga
    8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests
    b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range
    31c76e9abb2 authz: add cel expression to webhook matchconditions
    56ab6c59421 generated changes
    ae90a696772 volumeattributesclass and core api changes
    c4aab1036f6 Add sig OWNERS to registry packages
    1daf1b0705f test that controller descriptors should not be feature gated
    fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor
    5b268e6daf5 apply: Add test for duplicates in associative lists
    9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists
    dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1
    b8cd792b368 rename the roundtrip annotation, forbid it in v1
    76463e21d4d KEP-4193: bound service account token improvements
    a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides
    70c1f2143fc Bump cel-go to v0.17.7
    d3de47ceeed chore: updates api doc
    2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    080fe8346da Fix typos in interface comments
    e95b7c6d8b8 feat: updates encryption config file watch logic to polling
    6d59480a70f Try a single gcloud command for scp-ing all files
    bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    f78b367db63 Make the decode function respect the timeout context
    79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement
    ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)
    233bc2449d9 apiserver: fix apf enablement with runtime-config
    acd60896597 apiserver: remove prerelease annotation for flowcontrol v1
    25447b95ad2 apiserver: add testdata for flowcontrol v1
    730d10a8fb9 apiserver: add generated files for flowcontrol api change
    9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field
    430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1
    90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3
    17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API
    25aebca8d54 apiserver: add etcd data and storage version hash for apf v1
    5972037ffd6 apiserver: generate code for apf flowcontrol v1 API
    03a9ad200d7 apiserver: remove copied generated files
    b24dd44904e apiserver: enable apf v1 API
    5cb03064d95 apiserver: update copy, rename v1beta3 to v1
    dc723080939 apiserver: copy apf v1beta3 to v1
    05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins
    5a20ff16173 fix wrong controller name for ephemeralController
    afc6c03ba74 Pass through static overrides in addtion to cgo overrides
    feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false
    3a308140cd5 Fix e2e
    2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node
    070e7a38cb6 generic set
    36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC
    9a8ccdebc5a use sysctl utils to do pod spec validation
    11de9543ee7 move sysctl namespace and some funcs to component helpers util
    4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
    6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    04b21126e58 Add cel new validator into Kubernetes.
    9ae77364e95 pkg/proxy: configure tcp-be-liberal
    a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier
    c1fd3f5f648 suppress per-expression cost limit for unmutated versions.
    4bb7dc224c5 metrics: publish metrics from ratcheting across a request
    e50cc47a068 Improve execution time for job e2e tests
    8c72be3b74e ratcheting: add benchmark
    7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values
    c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events
    3f8e6d6f77f etcd: Build image 3.5.10
    a73725d7999 Promote SidecarContainers feature to beta
    1591a0e132c add unit tests for NewControllerDescriptors
    44cac266673 move start controller pre- and post- checks/actions out of StartControllers
    b7689672802 move aliases into each registrable controller
    a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
    27a77e0ef3c Encapsulate KCM controllers with their metadata
    77dfd63d1db fix volume conformance e2e test break other test
    77e0adeb31d KEP-127: Update PSS based on feature gate
    b0491d71bd5 Support skipping pulling addons image.
    760abc2a821 bump gomega to 1.29.0
    5925dc07758 LegacyServiceAccountTokenCleanUp beta
    69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature
    a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA
    9f06eb4ca2a don't run these tests on aws
    e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test
    af14f97cba7 sample device plugin: fix incorrect Errorf invocation
    fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154)
    b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added
    fd132665a8a extend VAP status controller for extensions type checking.
    3f73cdcf2ad extend SchemaResolver for more types of schemas.
    38fecc8319d opportunistically attempt to refresh RESTMapper
    05cd3e66ef5 simplified e2e test for CRD typechecking.
    60a602f1701 gce: fix test for non-existing instance in cloud
    4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
    84faaf4427f Prevent sampledeviceplugin binary commit
    7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.*
    110ffa13b7d Delete binary file
    e07d898cfd2 Make StatefulSet restart pods with phase Succeeded
    27f6fb2fa7e hack/tools: golangci-lint v1.55.1
    6302f011211 e2e node: fix broken assertion
    d0a5cd16da8 e2e upgrades: fix broken assertion
    fb872e86384 test: fix storage status update test
    53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test
    071a67d8c29 export time function
    9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta
    c6b42c8a72f Make e2e node image ID test more flexible
    517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
    837090135f8 kubeadm: make super-admin.conf changes to app/cmd
    30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases
    d0328df04e0 add time tracking to CorrelatedObject
    1165609036c Add metric for e2e pod startup latency including image pull
    702d911e226 working-config-otel
    e7a9a148489 replace CEL ValidateWithRatcheting with variadic options
    f71040f620e Remove the usage of feature gate
    0ac35fe44f4 Update security contacts for sig-cli
    8d3a25c7c98 [KMSv2] Add tracing
    c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy
    f91228ee719 Unexport BaseEndpointInfo fields, fix getter names
    e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit
    2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo
    27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status
    2a8982b27b8 Remove problematic Dbus restart test
    39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm
    3738111337e Add unit tests
    08b942028f9 DRA: call plugins for claims even if exist in cache
    69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes
    98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants
    e511edf11f7 Fix SELinux unit tests
    2f5903b4cf4 Move SELinux warning metric to be counted once per pod
    d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN
    a92c1269e25 test: fixes hot reload flake
    71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake
    83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness.
    8e0be64b8ff remove data race on the devicemanager client plugin
    aeceec72bbd add integration tests
    97e72d792cc Remove independent tests for metrics
    84cd6dbb0aa use the latest semver version for the badge
    b3525946d5e ratcheting: provide a shared correlated object
    dfeab6eca8c fetch a shared correlated object off the validation options if it exists
    0a19b5ab6e2 fix usage
    432e8937cfb add variadic options to ValidateUpdate
    9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric
    055e926a924 e2e: Increases the memory limit for downward API tests
    88c0a8be1bd feat: add job_pods_creation_total metric
    b1ce529b2ac Remove unnecessary GetIndexer
    1224e0e881d Add PodHostIPs test
    f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342)
    12a972cc1e6 Promote KEP-2681 to beta in 1.29
    2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler
    bd8ac8c7fac kube-scheduler: checked err for golangci-lint
    b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging
    bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case
    bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0
    16b3acc27a1 cleanup UnknownCRISocket for unit tests
    71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff'
    20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta
    b06675724d6 Add e2e test for backoffLimitPerIndex
    4b59d2b05c0 kube-proxy: Optionally do privileged configs only
    35f4d29d735 Fix unit test
    b052c7b7cdf Update npd version to 0.8.13 in configure.sh
    a6f5246565b integration test for empty & unstructured.
    168998e87bf StreamTranslator and FallbackExecutor for WebSockets
    c6b3a2f477c allow empty object to be CEL value.
    8ae0d390d77 add container filesystem to CRI api
    93951bc00d3 Add stability tests for CEL cost estimation.
    d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload
    6d580da03fd ratcheting: ratchet CEL expressions for no-op updates
    27afb7d75d2 e2e storage: use framework to tag tests
    8a42be978bf Add CDI support to the sample device plugin
    d9131d5b390 [KMSv2] Drop the apimachinery
    6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29"
    55e3662b72d dra: refactoring overall flow of prepare/unprepare resources
    fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus
    e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core
    e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags
    074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663)
    b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature.
    d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0
    fb6b10997a7 cleanup: remove useless test
    3f4d3b67682 Cleanup paging parameters in etcd3 store
    2dbd4055834 Graduate ReadWriteOncePod to GA
    42945ea6dc8 update suspend test to match other test cases
    49c947ba15a metrics: add and use ImageGarbageCollectedTotal
    d8a5cd59c08 kubelet/images: add unit test for MaxAge
    914aa746c18 kubelet/images: add and use freeOldImages function
    76e623098c8 kubelet config validation: add validation for image max gc age
    d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
    9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates
    34294cd67f2 locking feature-gate for ready pods job status
    b386120da23 Remove storageConfig.Paging parameter
    106f58686d5 Remove disablePaging param
    b0d04d933be Introduce the job_finished_indexes_total metric
    6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text
    a913abe191b e2e test for checking ready of job status
    fb0ffb07a76 kubeadm coredns use drop ALL instead of all
    81b960efefe e2e framework: allow random ordering of tags and text, fix some functions
    a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster
    4f5bc7e8d76 fix based on reviews
    82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual
    eb3a11ea142 registry/core: wire NotFound getter instead of nil
    cbe3d897629 Promote CRD validation rule to stable
    fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown
    32fdb551920 Use Patch instead of SSA for Pod Disruption condition
    a7adde53be4 bump golang.org/grpc to v1.56.3
    a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests
    441d2b40dfd Undeprecated kubelet cloud-provider flag
    4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
    cf836309dc2 Add validation for --storage-media-type option.
    8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test
    1a41ed394d6 convert pointer to ptr for sig-apps integration tests
    27bb40a9d83 Remove GAed feature gates OpenAPIV3
    c5e25637c64 fix typo
    a25b87d84a3 e2e apimachinery: use feature gate
    ceba3be6b58 e2e: add more feature definitions
    9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go
    00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate
    cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses
    6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta
    8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API
    259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate'
    3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test
    aee73352853 add new test cases
    220d5c2e543 remove dead code in test
    79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once
    8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities
    0a6d9531f40 update generated code and openapi
    4d21a23be35 pin openapi
    31a1c00e49c cleanup: move unstructured check earlier in status update
    d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy
    cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating
    ced56a6adab Restrict supported media types for new apiservers.
    f5cb2ada944 k8s.io/kms: drop direct dependency on klog
    db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules
    6c4f71b31ce Fix spelling
    02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release
    9cf35f40016 CHANGELOG: Update directory for v1.26.10 release
    b7477c31b03 update versioned types
    4780a75d5fb CHANGELOG: Update directory for v1.27.7 release
    d7556769e7f Job: Replace deprecated wait functions with supported one
    1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release
    989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create"
    d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
    2508f468a8f kubelet/userns: Add more unit tests
    0dd495e6dc2 Address review comments
    7ff866463af Refactor watch event serialization to allow caching
    0cda42af7ab Unregister group path from apiserver when the group no longer exists
    a50d83c669e Add basic authz config integration test
    22e5a806a73 Add --authorization-config flag to apiserver
    75f20ee64da update pretty param description
    e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node
    7bcc98c46b9 sidecars: terminate sidecars after main containers
    c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue
    201c30fba82 Job: Handle error returned from AddEventHandler function (#119917)
    7a1ac18bc84 Fix panic if there are more terminating pods than active pods
    fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests
    007ef653ad0 add feature gates for authorization config
    2ccf7e8e49b fix: minor lint issues and redundant check
    056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods
    bf32f87d00e skip CEL validations for enum violation.
    e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests
    bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones
    72e67e0ef0d kubeapiserver/options: fix cloud provider validation
    911700e64e3 Fix typos in markdown
    2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types
    b500c3d6930 Correct the label selector used in TestSampleAPIServer
    c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster
    7d077f9271e e2e: move AllNodesReady check to DeferCleanup
    ca6fda05ce5 Restart containers in right order after the podSandboxChanged
    75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29
    e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors"
    9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure
    d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection
    f46cdf1428c node: sample-dp: set default value for `pluginSocksDir`
    211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration
    c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations
    6714e678d33 node: sample-dp: register by default and re-register on restarts
    465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params
    d2b803246af Don't reuse the device allocated to the restartable init container
    a45a813d5e3 kubeadm: fix "eliptic" typo in API package
    fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly
    1715fc0ca06 Fix issue in enabling evented pleg feature gate
    defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check
    5d5958e3389 fix ImageLocality plugin score is inconsistent
    76059738a4f update standard protocols to match KEP3726
    4ae7150f05d remove pc pvc status endpoints
    757597fabfa track unmaintained repo - mailru/easyjson
    2e8f66afb39 Promote PV/PVC status e2e test to Conformance
    28f335a3397 kubelet/images: refactor image gc unit tests
    e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder
    d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated
    56023e00cbc cri-api: compress OWNERS files
    f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases
    e3098225eaf bump kube-openapi
    b30c6bdff81 Fix v3 spec
    d1a6c0ae7df Update cri-api change in v1.29.0
    2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case.
    5d0f8530f6b fix Huge Pages failing test
    7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret
    dd9c3358f5e Revert "podresources: e2e: force eager connection"
    27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
    5c0618b848d codegen
    011c65e17e2 configure npd to run as daemonset on cos
    39dcad8a19e Populate CRI filesystem info error
    bfda244e54e pkg/proxy: dual stack health checker
    73a8965e2a9 Graduate DevicePluginCDIDevices to Beta
    f69e1fed82f Remove GAed feature gates TopologyManager
    957adfac498 fix invalid log calls
    8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors
    fed4f16a7ad Remove GAed feature gates SeccompDefault
    33f2d487e2d Promote KEP-2681 to beta in 1.29
    18c3b6fce43 Register metrics for apiserver handlers
    56836608303 remove deprecated framework.ExpectNotEqual for node
    b548bbb8cf8 When reading pvc status allow bound to be a valid value
    11b0eed9e7f Work around bug in gcloud when downloading logs
    1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls
    4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier
    6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole
    332779a3b29 add a simple e2e test
    3a96afdfefd implementation
    fa01dfdb0a4 validation
    0f46033dca2 fixed miscalled function
    9327f3a1734 api changes
    c2d473f0d43 remove ClusterCIDR
    32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required
    c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components
    fb1fc8b4a72 ratcheting: disable correlation by index
    d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc
    0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments
    60c90fc0854 cleanup: consistently support nil receiver and document
    abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment
    ddcbae734af Add a 0 × 0 case
    fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul
    26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete.
    e1fa1df3ae8 cleanup: consistent interface{} and any
    0495616230a cleanup: add godoc
    4de3e73b8ac Add test cases for mostPositive and mostNegative
    685ae024332 Add more unit tests
    79325b6178d Multiply by a scalar
    4381eb7237e quantity: Add multiplication methods
    1ae54296291 add potential fixes for flakiness in eviction tests
    db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters
    b0c7956a869 Bump distroless-iptables to v0.4.1
    a34d2f3b134 fix limitrange flaky test
    10151a5e38f kubelet/sysctl: update log level
    cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests
    4dedabf2a65 test: fix boilerplate
    80e378181ea add rundir folder to gitignore
    800a8eaba7f Prevent rapid reset http2 DOS on API server
    968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1
    78ffa882be2 chore: updates api doc
    de5dcdc79b7 cleanup: fix missing manual selectors in strategy test
    761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test
    b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy
    c94240e2e2e move kubelet constant for podreadytostart to staging
    1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10
    de01788deaa Switch to newer cos-gpu-installer - v2.1.9
    adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases
    7b1d87383ec add kubelet policy skew test for kubeadm
    5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7
    0149c1f8b31 test: few more correlatedobject test cases
    ba9347230e6 test: add correlatedobject test cases
    15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts
    c08a9321eed cleanup: add header and fix spelling
    27cb869e559 refactor: move correlatedObject to its own file
    b321e8bf0db refactor: make CachedDeepEqual independent of validation
    921c0d01800 cleanup: add defaulting for job manual selector (#120206)
    c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release
    baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests
    ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState.
    555c1b8091c bump kube-openapi
    83760ae56c8 update openapi with required requestBody
    5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3
    a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668)
    7989400bef5 Fix concurrent write when filling PVC labels
    54714686bc6 Modify test PVC to detect concurrent map write bug
    d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy
    2c1836bc245 remove deprecated framework.ExpectEqual
    990a46f9bde Update QueueingHInt's KEP
    b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+
    0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl
    babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts
    4acaf9ebed7 Add service name tests
    438c0daab75 add rest of accessors to common.Schema
    0f989046d06 kube-apiserver: move cloud provider validation into options
    5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216
    80269d5d349 fix missing http.target trace attribute
    dc334b953d9 dependencies: update otel-go dependencies
    e76aad1813b refactor: use common.Schema in CorrelatedObject
    83a1dbf885d refactor: export correlated fields
    e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject
    fc7c951d5a5 .: bump golang.org/x/net to v0.17.0
    2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local
    471e3ab8281 refactor: factor out object correlation
    30cf9ed5677 refactor: directly implement ValueValidator
    4fb5f1a6119 refactor: remove unnecessary lambda (noop)
    19ecf93ec3d e2e: define features and node features
    f2d34426f86 e2e: enhance SIGDescribe
    39b6916cbcc e2e: add wrapper functions to annotate tests
    535ab743461 e2e framework: track and report internal bugs
    3afdcc03ea5 e2e framework: list specs and labels
    aa4d2fc5edf e2e storage: remove useless info message
    581af9ba6da kube-apiserver: use only one client in apiserver controllers
    215c4627ef9 Update SECURITY_CONTACTS
    e9957d79aae make update
    0eacff0baf9 compatibility (adapt testdata)
    b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef
    f538be659c7 hack: fix update of golangci-lint verify scripts
    6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names
    00ae26cda8f Create e2e test for PV/PVC status endpoints
    b190ea0c966 hack: update golangci-lint verify scripts
    302d350e88e set maxLength to longest enum.
    d4a5a085a84 Improve error message in cpu assignment logic
    79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0
    52c58d970e5 fix data race in apf unit test
    a6b0a6c484d Bump distroless-iptables to v0.3.3
    f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed
    e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
    0be5fdb5ced Add volume plugin label to SELinux metrics
    137ad9bf2b5 clean up deprecated funcs in e2e framework
    d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual
    5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    122ff5a212a Move grpc rate limitter from podresource folder
    9cca527c4b3 Migrated  `pkg/scheduler/framework/plugins/examples/` to use contextual logging
    62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering
    ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating
    c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket
    bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion
    7cba35f6519 nodeports: scheduler queueing hints
    20db4ef3d64 kubeadm: fix wrong ut for util/etcd
    4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command
    3c4512c6ccc hpa: always update status metrics when updating the replica count
    89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    3ee2f27e5bb kubelet: cloud-provider external addresses
    619abfec70a [go] Bump images, dependencies and versions to go 1.21.2
    8b5f30ef096 Don't reuse CPU set of a restartable init container
    e8e22f645d0 kubeadm: Optimize the logic to override the arguments
    8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo
    a888fef242f Use timeout function to detect transient errors
    1b489963c8d Add nil checks for hpa object target type values
    0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
    3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty.
    a213edae2a6 Add package-level godoc to pkg/kubelet/cm
    b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    b96a074bcdf convert pointer to ptr for job controller
    1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
    914210ee9a6 revert back to IsUnexpectedCloseError check
    e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received
    c03579bfa40 typed variables support.
    4d157bb1427 add single boolean to composition e2e test.
    69a3e3d1089 Add --extra-peer in conversion in kube_codegen
    3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options
    4b391501795 reflector: fallback to the previous mode on any error
    11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
    5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599)
    9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test
    c65fe450d8a Generated files
    26f113be2fc reflector: close an established watcher when the StopCh was closed
    f17468ff060 Fixs a validation error in teh admission registration API
    6d759aac910 delete addon-manager test
    e7b2aeee930 Fix API docs for audit APIs
    38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node.
    243ba5fb6b6 remove an e2e test specific to kubeup clusters
    98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual
    566fad5eda3 add metrics to the ipallocator repair loop
    4eff70dcf9f add metrics to the nodeport allocator repair loop
    6c9ddf300cf update generated
    9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense.
    44cb330aa00 Improve kube-proxy config / CLI documentation
    0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows
    d2a3184c47c remove pkg/encrypt and pkg/value in kms
    e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services
    2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM
    74180aaf661 Fix scalability concerns in test runs
    5ebde41efb5 Refactoring variable declaration and value setting
    0e8a1f18163 e2e: remove redundant spaces in test names
    6200eb04aff use generic sets in scheduler
    e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go
    d9002176649 fix missed branch - targets when building using arm64
    61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    7437ad2617a Add/update prechecks to verify-govulncheck.sh
    59ad81a6157 controller/clusterauthenticationtrust: complete event filter
    a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int
    63950491764 controlplane: make option structs uniformly optional
    a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions
    5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods
    27a68aee3a4 k8s.io/client-go/tools: support context for event recording
    772b1f4cd84 handlers/watch: calculate and record WatchList latency metric.
    4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI
    394bcaf1820 Only configure swap if available on node
    2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks
    de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster
    19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together
    ff5f5bc1613 Merge several NodePort tests into TestNodePorts
    f38231d5687 Merge all the "reject when no endpoints" tests together
    2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral
    ce7ffa81754 Extend iptables packet tracer to support multiple node IPs
    2172ea60836 Fix typos: update Enpoint to Endpoint
    6297067ff1a apf: request ejected from queue should use reason 'time-out'
    11ef9514dad apf: remove RequestWaitLimit from queueset config
    da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function
    f39213a7e44 apf: use context for queue wait
    52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo)
    9b32d2f67d4 Default clientset_pkg and clientset_name variables
    36146ad686a e2e dra: enhance test driver
    46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release
    cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec
    0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock
    2ce4f85a465 update verify script to check deprecated fields
    e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27
    70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation
    e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
    4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds
    ca562fd280a storage/etcd: the watcher supports the API streaming
    84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate
    1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand
    1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency
    72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS
    b71d7f9305c use generic Set in scheduler
    7c5219438df Remove an old compatibility check/warning
    5c80007eccb cluster-bootstrap: make randBytes() be in constant-time
    1b602ffd9a4 Bump Konnectivity to 0.28.0
    06deb49d2c9 Fix panic testing intree vSphere dynamic PV.
    0910fe4b983 Extend iptables packet tracer to check the protocol
    a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests
    0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual
    4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests
    d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test
    43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices
    a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects
    534a0941e8d kubeadm: change kubelet skew to apiserver to n-3
    0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap
    9345da51ac4 fix comment mistake, run "make update"
    45a776d5ff4 update rules to switch from deprecated dir field
    9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test
    5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change
    b489beb365f Remove an old compatibility check/warning
    eb109e39480 e2e: bootstrap vsphere tests earlier
    d3d1827c054 Use local isCgroup2UnifiedMode consistently
    8a31bb6786c workqueue unit tests to assert collapsing behaviors
    dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests
    b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm
    d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver
    0786fcc941b kubeadm: Remove the support of configurable component configs
    3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging
    0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff.
    ed76c371df9 kubelet/lifecycle handlers: refactor port resolver
    e00551fe5d4 Allow storage migration of CTB without attest authorization
    c816601d834 reintroduce resourcequota.NewMonitor
    7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed"
    f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests
    a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err
    41584bde233 fix code style
    de244b2678f Promote StorageClass e2e test to Conformance
    b23575d0fcf remove storageclass endpoints
    a62eb45ae2b Rename job reasons to JobReasons as part of api review
    301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded"
    5341890c96f add missing labels to kube-dns deployment
    9e060590e6f skip kube-dns tests if kube-dns is missing
    2a827767458 change rolling update logic to exclude sunsetting nodes
    04668c00432 cache/reflector: check the value of the initial-events-end annotation
    83c37acb21f e2e framework: adapt unit test to Go 1.22
    5c28fd28478 vsphere: adapt to govmomi bump
    4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test
    26a395ecc28 Trigger CI
    12c0c08e658 fix data race in test
    9533cfe2eed fix: add unit test
    bad0593a686 fix kubelet image gc
    91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic
    272b23cc7ad kubelet: fix log when using --reserved-cpus
    42356bfbb3e move common logic of highestSupportedVersion to util package
    fc6b19a4ba6 .: bump govmomi to v0.30.6
    afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op)
    3a96baf3fa8 storage/testing/utils: add helper functions
    c8b9d64d81f scheduler test: unify util to fake pod.
    b953708fa93 Update 1.29 Release Notes team
    a919079ff31 Check --show-events in kubectl describe pvc (#120380)
    1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference.
    108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config
    52c582ca77c Bootstrap API Types for Structured Authorization Configuration
    bbb905c794c remove gce healthcheck interval e2e lb test
    b59d4afd14e fix typo exeucting => executing
    62275e3cc8c fix typo dervied => derived
    79a7833ade0 fix typo Mininum => Minimum
    6e3ebdc68e7 fix typo Conext => Context
    409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0.
    b4e5b868a8e Don't reuse memory of a restartable init container
    10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation
    6c59e8be5e2 hack/update-vendor.sh
    dad1b2a4306 Fixup kube-openapi/pkg/cached changes
    e1ffbacb7ae go.mod
    7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates
    39af594f312 storage/testing: a simple refactor
    40618b765cc add loging and bump timers to avoid races
    3cb0b520d60 Scheduler CSI tests: switch maxVols to int32
    79d0dde4a83 replace hardcode string with exists variable
    9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration
    62267518b83 Fix systemd unit string matchs
    c6e9fba79b8 move reasons to api package for job controller
    e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged
    0288367db80 test-e2e: Retrigger the RBD image post merge job
    28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency
    2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release
    2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release
    7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release
    309876b5d78 CHANGELOG: Update directory for v1.28.2 release
    710dceded51 Look for pods in ownerReferences of PVC (#120427)
    80c8074e3be service controller: limit logging node names to 50.
    349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed
    21e26486ac3 sync Service API status rest storage
    239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual
    7fc11f47ff4 Mark a volume as uncertain-attached after detach error
    99903071469 kube-scheduler: drop deprecated pointer package
    9e34aa306cd Update hack/verify-govulncheck.sh
    5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource
    af151eeba2c specifically check that the pod was successful
    7710128636a kms: remove livez check
    15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual
    4f20a72ea00 variable name should not conflit with import package, replace the variable name
    084deb7a7cf clarify the description of the metric apiserver_storage_objects
    9da533ced6f API Chunking conformance metadata
    3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489
    4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal
    819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test
    6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing
    868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9
    6b4ab616a2c Increase range of job_sync_duration_seconds
    d765e40a988 pass GOTOOLCHAIN to build containers
    7ad0e451aca remove unnecessary kube::golang::verify_go_version calls
    43b434f66a8 sig-node: add rphillips to reviewers
    d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version
    4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation.
    09d64ed7d4f promote sli metrics to stable
    0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525)
    0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105)
    e6435e98eda promote component SLIs to GA; remove feature gates for component slis
    e2c1c0d34a6 kubeadm: drop deprecated pointer package
    357d7804b8f kube-proxy: drop deprecated pointer package
    678b958567e use universal decoder and add a check on default dns Policy of static pod for test
    1fb4eee94e0 Use container log instead of termination log
    190f9d0d4b9 Add govulncheck script to expose go vulnerabilities
    fc3ee07b512 e2e pods: fix WaitForPodsResponding retry
    6f9140e421c DRA scheduler: stop allocating before deallocation
    2dd7db306a6 Update modules.txt
    61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient
    d3eb082568c Create a node startup latency tracker
    2d86c333f57 add test case for generating etcd manifests
    912041ce41b kubeadm: fix diff order and add test for new default value manifest
    41b62c4dd71 Promote PV/PVC e2e test to Conformance
    0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml
    f4467457776 Improve logging on kube-proxy exit
    df5c1bb1ea1 added documentation about the format of certificateKey
    43ccf6c4e8f kmsv2: add apiserver identity to metrics
    c1a0aa08e31 Add cni plugin auto Arch and OS selection
    b443a841e30 kubeadm: add log for static pod manifest diff
    f135eed37b9 update codegen
    d7264d0af03 Make StatefulSet restart pods with phase Succeeded
    4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins
    7e4b5d0d49a Final Fix
    f499b4f8918 Bump distroless-iptables to v0.3.2
    18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8
    93e3b07e11c [cluster/gce] Add KCM specific args
    48f453d6498 cloud-provider: Log additional options
    aa89e6dc978 Use ptr.To to retrieve intstr addresses
    9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace
    5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp
    3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
    a0a8765027a fix: update thirdpartyresources refs
    5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates
    43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient
    a69f56e1375 fix: check if initsystem service exists
    7dea3d6c3bf New mock test framework for windows kubeproxy.
    975da2fb239 fix typo in client-go package
    3a1a67e33d7 add aojea as controplane reviewer
    cc77b97c5e9 add aojea as client-go approver
    7a13b11af0e update e2e import restrictions
    6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests
    08006c842fd apiserver: rename request body size metric
    8451c80b601 pin gengo
    93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
    98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1
    dbd3eb54191 remove logcheck.yaml
    f365cae9ee6 Fix typo in api.proto
    2d1877c97b6 fix breaking pv creation when the validation webhook exists
    f33265cf5d0 HandleRetry has already called in the GetObject
    fc51a27c036 fix typecast missing
    2ea47038b90 podresources: e2e: force eager connection
    6cd446a2064 Add cloud library to unwanted deps
    9f76d8d45a0 Track vendor status of unwanted deps
    87d49a51bed fix(queue_test): make sure the first bind failure via counter
    94afd6e3a4d skip the reason check for OOM tests if it will fail
    f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests
    d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752)
    b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook
    c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints
    36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual
    9c1df5ff0af move back to bullseye
    67858e1ff06 Bump images, dependencies and versions to go 1.21.0
    0593cfdd14f Fixed variable used for moving auth-provider-gcp binary
    c682d2b8c59 scheduler: add ResourceClass events
    2ad4304e8f2 Add Windows support for IPPVS
    15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    43fc6b5bdb0 Added suggests changes
    355ae44a3ca Revert "bump npd to v0.8.14"
    e7ee3ae3d94 Create e2e test for StorageClass endpoints
    418af0f4dcb register API types only once for encryption config
    2144852f7c9 Commits merged
    657cc2045ee kmsv2: enable KMSv2KDF feature gate by default
    b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values"
    c131c92b9f3 scheduler: unit test case for concurrent event with other pod
    a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol
    0024c7e1668 Changed the generator codes for kubernetes metrics table
    cd943dd95e3 scheduler: fix tracking of concurrent events
    933bcc123b4 only drop invalid cstate packets if non liberal
    7c75b018d57 cmd/kube-apiserver: add .import-restrictions
    43783aeb18c drop release-1.24 rules from publishing-bot
    e190e179b3c Document `cluster/gce/gci/mounter` as static binary
    059e8353b76 check labels/annotations in the beginning
    6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package
    a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual
    e8564d6c5bc KEP-3895: Promote interactive delete to beta
    14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28
    ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout
    b35357b6c08 cleanup: omit comparison with bool constants
    622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual
    7c33b78418c  remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29
    9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout
    fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps
    e6dfdb240fd Output the error message for better analylsis
    ff3cb43c300 remove labeld-deployment.yaml
    cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey
    c74d045c4b7 scheduler_perf: show name of one pending pod in error message
    3c2cfd9a4fd resource claim controller: separate generated suffix from base
    2c5a11a55bf Match on cri-o socket suffix only
    214772c1104 dependencies: update opencontainers/selinux to v1.11.0
    95118ec30c1 e2e_network:stop using deprecated framework.ExpectError
    3f8f14397e1 Set external credential provider to true by default in kube-up.sh
    410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external
    45b9b0df41f Add namespace to apiserver tracing
    c83eb6dcaaa Add subresource to apiserver tracing
    bcb59a03ebb Add name to apiserver tracing
    646053d73db Add api-version to apiserver tracing
    8c34208a62f Add group to apiserver tracing
    6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go
    ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags
    2e5f17166b9 pkg/proxy: fix stale detection logic
    95121fe846f kmsv2: add legacy data integration test
    42e8cfa28ac fix failing metadata test
    cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers
    8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation
    0fb1f59a881 Improve service unit test failure report
    39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up
    36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test
    3e252857c1c Add unwanted cloud deps to track
    875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test
    6058540f3d0 storage: document ProgressNotify from storage.ListOptions
    f4fc4b16b1d doc: Add example for restarting all deployments in a namespace
    936d67f6888 Update distroless-iptables image version to v0.3.1
    bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open
    a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError
    bfc3c2110fc e2e-node: fix TopologyManager test jobs.
    3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError
    f1051f34a79 Remove deprecated framework
    062c57ae92f dra controller helper: make allocation error message more readable
    f96e23e477d dra controller helper: merge log entries for informer events
    78f3b76390b scheduler_perf: use different log names for different DRA drivers
    d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation
    fcff9969095 adjust error message a bit
    889c8e919bd New repo who dis? distribution/reference
    741f1461571 Revert to json-patch 4.12.0
    b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric
    8f6a79b29fa use external cloud provider by default with gce
    903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion
    a46bab69308 Fix a job quota related deadlock (#119776)
    696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    63177db32c2 Add an e2e test for the pod sandbox changed scenario
    e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API
    3c5a58c5f89 Refactor checkErr func
    f22d8540723 unwanted-dependendencies: updating references, and `jq`
    0323fe42e23 adding more callbacks in kubedrain helper
    e01bd641447 Avoid creating local variables that don't change
    10553a19668 Flatten switch case
    1f4f2a5d601 Refactor common WithRange case
    ede524e1a6a fix a pidpressure test flake
    3bc6ee6fef7 unwanted-dependencies: sort this list
    eb5695b0c5c unwanted-dependencies: adding archived repos
    15c02f2a034 add integration tests
    9e1ff1e5120 add loading config and wire feature flag
    57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator
    160589a0edb Refactor transformers for watch to implement Encoder interface
    04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29
    46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer
    bf41b0462cc Fix OpenAPI aggregation cleanup
    16a7b536022 Fix typos in comments
    2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs
    be4692864bb Remove duplicated returnRV variable
    2e174a029f5 Add timeout to listContainerStats context
    2825519da2c apf: remove v1alpha1 API
    a926f594da9 Bump runc to v1.1.9
    7b44d73f73f bump npd to v0.8.14
    879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join`
    53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError
    8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual
    209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual
    41adc93ca3a remove GAed FG DownwardAPIHugePages
    e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests
    7e7b67f2ccd remove GAed FG GRPCContainerProbe
    af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active
    5dbec5c715b local debugging should utilize the same defaults as prod
    d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI
    8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases
    f5d6c65186d paginate initial list inside the storage watcher
    8d9517318a4 Extend npd e2e timeout to fix npd e2e error
    618e40c61b7 kubeadm: promote EtcdLearnerMode to beta
    b2c0d80c37f Test watch converter encoder
    03126c54658 add comment
    651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592
    709721e0df1 feat: update google.golang.org/protobuf to v1.31.0
    3fcc045bce9 Minor cleanup tranformers interface
    172a41192c6 Cleanup setting non-nil Items field
    5269e769902 scheduler: properly skip DRA events
    1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry
    580f83ab4a5 Avoid duplicated dots in pod condition
    855b445d28d Remove deprecated selectorSpread
    c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin
    87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators
    0ea6522807d apiextensions-apiserver: generate applyconfigurations
    dbbce2aaba2 sort stability list of metrics in the shell command (#120197)
    9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test
    94d03ccc83b Squashed commit of the following:
    030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer
    cc784cfe857 Mark Job onPodConditions as optional in pod failure policy
    3d583398fe2 Avoid to build the error msg for twice
    484510863bf e2e_windows: stop using deprecated framework.ExpectEqual
    f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual
    05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual
    eb0afbc7d01 kubeadm: update swap warning for v1.28 change
    fa37bebcd4b Add comment about why AttachFunc be overridable
    d680bc540b5 fix(test): fix error handling condition in test
    01df59a73b9 pkg/proxy: remove equal method from endpoint interface
    6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
    e9be1d7438b Test now has coverage!
    628bbb9ef8a kubeadm: add supported etcd version for v1.29
    dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig`
    78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure
    e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg
    1bf90f9484c add StructuredAuthenticationConfiguration feature flag
    1bad3cbbf59 wiring existing oidc flags with internal API struct
    f909eb630ca add AuthenticationConfiguration v1alpha1 api
    ff56d3b6914 Refactor WatchServer to prepare for using encoders
    a4ce32769ff fix pod delete log in deployment controller
    0bc0256093b Update job_controller_test.go
    ff10df107a4 remove fake deployment
    13a8ad12b82 apiserver: fix data race in etcd metrics
    dec1c361255 add kubectl rollout e2e test
    22f4b1c56ad Static check fix
    70e2deb32f9 Fixing lint problem
    6ded53ce4dc Added back test changes
    5fb049ff473 Added create job & cleanup
    ff1659cb798 Added syncjob
    f87cc43cdb0 Review Changes
    d08fc3a4d01 Another one creeped in
    ef6a0eb6d85 Final Lint Fix
    aa9f38c36d8 More Lint Fixes
    601679446ae Lint fixes
    cf32ae9453b Initial Commit
    297f04b74ae Added function to remove finalizers as backup
    1d52fb2806e CHANGELOG: Update directory for v1.28.1 release
    5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler
    c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey
    47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function
    ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params
    02e51b27a9a CHANGELOG: Update directory for v1.27.5 release
    13b52a18483 fix crd finalizer validation
    ab018481342 Make sure skip score plugins alwarys returned
    6805632abb8 CHANGELOG: Update directory for v1.26.8 release
    f847565c081 Move mount warnings to info logs for normal expected paths
    63df8a5821a CHANGELOG: Update directory for v1.25.13 release
    52e85074042 CHANGELOG: Update directory for v1.24.17 release
    980fa6a2b9e Add CEL library lifecycle linter
    3fb14cf4e7a Bump cel string lib to v2, add tests
    640a2ec3327 Update k8s code to handle cel-go changes
    1a850a00630 Bump cel-go to v0.17.6
    24877f96fbb Incorporating feedback on 119341
    2bede058f92 Use environment varaibles for parameters in Powershell
    c761c165627 Use env varaibles for passing path
    1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
    9ee94b0204a Remove duplicate codes in framework RemovePod
    f752ca2dc84 Make API chunking conformance test deterministic
    28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name
    79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments
    ce9e668a932 golangci-lint: suppress one issue, demote others to "hints"
    6a16c076e76 hack: move common "verify generated" shell code into function
    9c83c380e0c Add wait for cache sync
    b1223e0d1ac check for overflow
    87cf890632c Fix CEL cost handling of zero length replacement strings
    b0e249f657a Handle edge cases in seat demand stats
    037640af8c8 Apply suggestions from code review
    bd06c26d580 fix: concurrent map writes in e2e test
    826f3a130ae promote to conformance Service multiprotocol tests
    98d772ca3c4 Support multiarch/platfrom in find-release-tars
    c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf
    93832de6246 stop using deprecated framework.ExpectNotEqual
    145dbb6accf stop using deprecated framework.ExpectNotEqual
    d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set
    0039f24d74d apf: refactor promise to use a context
    3e9a4c15a85 Restrict what imports get into code within test/e2e_node
    c1eb18c00ca generated files
    039859b9b72 e2e network test for udp services with hostNetwork clients
    2472291790e api: introduce separate VolumeResourceRequirements struct
    a5600b69251 storage/etcd: simplify passing the transformer
    6161752ecbe storage/etcd: remove newWatcher function
    3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty
    a9308927691 Gate: disallow .status.loadBalancer on non-LB svc
    b8512cfe247 expect the new resource_scape_error metric
    905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes"
    5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid
    f93bd699aaf Trim managedFields in pod informer
    2f576969eee reducae function calling to once
    093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation
    700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands
    75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key
    c112a34642d add unit test for kube-proxy service cache with ipMode
    7f805dc9354 fix test name
    30ff937aaf9 add a fake load balancer class to fix e2e test failure
    3cbecf218df kmsv2: add metric for DEK cache filled
    d86e72202c4 kmsv2 test feature enablement unit test
    bd6f5487463 mark the OOM killer as serial to reduce flakes
    afe9045e466 Add v1.28.0 API testdata
    a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io>
    8163d244ede Update ccm flag help to describe disabling webhook serving
    8291b847d58 Allow disabling both webhook ports in cloud-provider
    f407b31d42a kubeadm: Fix typo where API group is not correct
    72af21e1a13 kubeadm: Cleanup the unused input parameters
    1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go`
    e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual
    fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig
    48260b4a77b kubernetes mutual (2-way) x509 comment
    ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers
    6c2cfac0a97 Revert testgrid url changes from CHANGELOG
    577197559ae remove the legacy test dependency
    af26ebd0fa3 translate beta label to ga in volume_zone
    4712025ea84 Graduate kubelet resource metrics to GA
    6ef90979720 Update the URL of testgrid
    af9bf7b41e0 Prefer non-alpha storage versions when available
    09fa21ab879 Store validating admission policies and bindings as v1beta1
    a422d11c772 prep for go1.21: use -e in go list
    ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler
    cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing
    5567f288e74 api: change list type for node lists in PodSchedulingContext
    79333684600 Update CNI plugins to v1.3.0
    f07a3a3f263 calculate sidecar container resource in pod autoscaler
    427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    5bbc4f76055 Pass Pinned field to kubecontainer.Image
    a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858)
    b75c5d33e5c bump the busybox test version to resolve test failures
    bd36be02188 Make gomaxprocs install optional, limit to tests
    9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage
    f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature
    5752cbd8c76 chore: add pod UID in event log
    7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args
    f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs
    a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs
    bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4
    8314122382c e2e framework util subtle bug checking endpoints
    9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    1e961af858b scheduler_perf: test case for DRA with multiple claims
    0331e98957f scheduler_perf: fix installing DRA test driver multiple times
    092897f061f drop v1.26.0 API testdata
    4950521ad88 kubeadm: increase ut for certs/certlist
    224087abfa0 Add Pod Scheduling SLI Duration metric (#119049)
    3edae95e5ae Add unit tests for subdomain match in keyring
    8cb979ae55d CHANGELOG: Update directory for v1.28.0 release
    a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family
    a161fa8017b pull Host from kubeconfig when needed
    03415ebc1da Integration tests for IP mode field
    86b1f095ca7 Proxy changes for IP mode field
    47fec59a31a parse node selector in prefilter
    4fb0ce28377 Fix broken link to testgrid
    34a89f039b8 Update cri-tools to v1.28.0
    29a6705dabc Generated code for IP mode field
    3ac2899d2b5 Add IP mode field
    cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins
    b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    947c9376f6a change struct methods receiver to pointer
    e258228e4ac use a buffer equivalent to grace period to eliminate test flakes
    717c149a734 fix mirror pod nfs test failure due to differing NFS versions
    279a663f948 Update README.md
    6f27733af8d Job: Replace deprecated workqueue library with supported one
    dd7b7073c38 e2e: add test for verification of timestamp for new PVs
    8e661498702 e2e: remove extra spaces
    b9cf6991e63 Use tracing semconv types instead of own defines
    765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    1863a808b20 fix: add code comments
    9646ae5a9ef Fix: null jsonpath serialization
    8ab6bee676a Make seccomp status checks in e2e tests more robust
    509ffe2938f Fix receiver names in legacyProvider
    80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
    f73c253accf fix typos for pod replacement policy
    5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
    62b063b74b5 wsstream: use a single approach to detect connection upgrade
    74053e21519 Create e2e test for PV/PVC endpoints
    49e00e8bdee Move adding GroupVersion log until after an update is confirmed
    77b3bb0f69b fix race on etcd client constructor for healthchecks
    a6329ac4536 Fix to honor PDB with an empty selector `{}`
    0e238409290 dra test: enhance performance of test driver controller
    40b604e3741 Update pkg/apis/core/helper/qos/qos.go
    f355b22f5f7 implement Stringer for podActions
    e4d16f34c15 Add test coverage of result size of string operations
    10fe3da87db Delete PSP API types and generated clients
    69a5a528967 Bump cel-go to v0.16.1
    6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed`
    4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS.
    5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead
    ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits
    a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once
    37730c07dd6 apiserver/httplog: pretty up impersonation output
    3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual
    d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal
    0944c00778a Fix some typo in kubelet component source code
    3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed
    ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout
    24f32d9d185 Local PV Stress test: don't fail on deleting missing PV
    074d5b53299 Rewrite the tests to be table driven
    391c1a3eccd dra: cleanup manager unit tests
    a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules
    85c385d4101 Update the container images used in cloudbuild to their latest version
    c4f4e3bc43b pkg/proxy: unit test refactoring
    4bc9434f99d SSA: prevent usage of Extract calls via forbidigo
    b6ae858e01f Drop AvailableResources from controller context
    d5d90b7b228 add support for ExponentialBucketsRange
    90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers
    a215b29d7cf remove makefile:generated_files in v1.29.
    f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status
    c23cee1be3c fix OOM killer
    4b6abf10c6e Handle errors when preparing lease for update
    ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test.
    a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment
    14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets
    109cf6820d2 Update base image and add utilities to kubectl image
    2a767c9916a update the busybox test image to 1.36.1
    133696725ae implement secret empty string value integration test
    7f53f7649e1 Use intstr.Parse instead of reimplementing it
    1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy
    63cf568251d e2e_node: stop using deprecated framework.ExpectEqual
    18c46b2487a add validation for static pods to have a name
    66aa2af0979 CEL lazy map: add test for boolean short-circuiting
    307b0630aa6 cri-api: add CRI implementation maintainers as approvers
    c4739313b7f Track manually created secret-based tokens
    df89045b53c dependencies: update github.com/ishidawataru/sctp
    2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait().  This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done).
    213ed03c000 remove deprecated kube-apiserver identity lease garbage collector
    57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual
    fb9646fd60d apiserver: add flow control metric current_inqueue_seats
    4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy
    fdea6ad17d7 kubectl debug: Remove legacy server support
    baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one
    41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath
    3964f71fe02 e2e:podresources: verify count for terminal pods
    6d244728b9e adjust order and fix typo for kube upgrade
    479b2d03a43 kubectl: fix describe node output when sidecars are present
    4e2e059c7b2 Graduate RemainingItemCount to GA
    6acfa3cb4ac Graduate APIListChunking to GA
    e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual
    9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster
    2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual
    60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection
    7ffd3063cef dynamic resource allocation: reuse gRPC connection
    dbaa9fe6b46 added podgc orphaned pod unit tests
    173b5a75b96 Trim managedFields in controller-manager
    c86f562f29b Run hack/update-codegen.sh informers subprojects
    9c4651bd047 Add 'WithTransform' SharedInformerOption
    d1946392528 Cleanup kubectl legacy server fallback
    106a931c299 fix intergration test
    d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
    a35608cc614 Update debian-base for test images and others
    43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints
    a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls
    2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration
    f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration`
    709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O
    b8336f399bf KEP-2305: add metric to track unbounded label values
    1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest
    654e98e0a2e add endpointslice repo to staging README
    b7cbebcd034 Added oomkill test for init container and fix typos
    d8c145d20da fixes the issue in the documentation of kubectl events
    12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only
    c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters
    733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method
    3bae26ae58b Check dbus error on container runtime start/stop
    70f979c8da3 Alert message improved according to standards
    a6554b9d5d1 Make kubelet label types public
    f2fa6d5f6b3 Document PVLabeler as deprecated
    7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile`
    fc36d2fee83 chore: improve error message for unstructured helper method
    b60a3a58df2 api-machinery: stop using deprecated io/ioutil
    0da37d8c544 chore: omit comparison to bool constant
    17e6c5cb9f0 Error Typofix
    9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity
    01c2c4f35f3 Error test cases added
    a609beb6b19 Decline on resizePolicy if the restartPolicy is Never
    f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress
    c1cced24aa9 WIP: don't exclude .git from rsync
    396c8a67832 test: TestPodDeletionEvent
    975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager
    ba49ccdbc9b Gracefully handle empty config error when local flag is used
    96ab232f5f7 Remove reasons from PodConditionType
    1d9eed9f950 chore: slice replace loop
    9378e580cf4 chore: loop optimization
    fc1b8a823d4 cli: stop using deprecated io/ioutil
    b4d1440063d unittests: Fixes hostutil.GetFileType for Windows
    01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric
    07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func
    208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container
    72f89b63757 kubelet: fix comment typo
    12f8eeaf9b1 fixed typo in get-kube.sh
    3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32
    8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
    887654160f9 Improve the performance of schedulinggates
    0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32
    847df6d9153 kubelet: output log even file is rotated
    05f04f866eb Keep PLEG interruptions in a separate interface
    b109a585398 Improve the performance of isPodStatusCacheTerminal
    84c14c65c6b Remove unnecessary type conversion
    55d471601b1 [ut] increase covrage for kubelet/prober/results
    e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg
    18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction
    08a69d63413 Improve performance of method PodRequests
    337f4e524aa Do not error log CRI stats for not cached partitions
    f2aeb3b0d91 Improve lock performance
    fb6fd36384e Add endpoint to skip topology aware log when missing zone hint

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a5fee65b68 skopeo: update to v1.14.2 
Bumping skopeo to version v1.14.1-4-g1c2ab995, which comprises the following commits:

    c3e474e4 [release-1.14] Bump Skopeo to v1.14.3-dev
    b673eb60 [release-1.14] Bump Skopeo to v1.14.2
    18cc81ab [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a906b81ca6 podman-tui: upate to v0.17.0 
Bumping podman-tui to version v0.9.0-246-gb4350927, which comprises the following commits:

    b4350927 Bump to v0.17.0
    db48222a Bump github.com/containers/podman/v4 from 4.9.1 to 4.9.2
    49c31e9e Bump github.com/containers/common from 0.57.3 to 0.57.4
    c8c25120 Bump github.com/containers/podman/v4 from 4.9.0 to 4.9.1
    00626a40 Bump github.com/containers/common from 0.57.2 to 0.57.3
    bbba9ec9 go version update to 1.20
    5674249f Bump github.com/containers/podman/v4 from 4.8.3 to 4.9.0
    4d0b84f5 Bump to v0.17.0-dev
    cacf1b90 Bump to v0.16.0
    67f735b5 Bump github.com/containers/common from 0.57.1 to 0.57.2
    be25c60d Bump golang.org/x/crypto from 0.17.0 to 0.18.0
    2ff1bb62 Bump github.com/containerd/containerd from 1.7.9 to 1.7.11
    9b492e25 Bump github.com/containers/podman/v4 from 4.8.2 to 4.8.3
    519ed36f Bump to v0.16.0-dev
    f7f47149 Bump to v0.15.0
    9ba724c1 gh action update
    1cdeadb4 Bump golang.org/x/crypto from 0.16.0 to 0.17.0
    fb1886ea github action use golang 1.21.4 for golangci-lint
    6521ce91 Bump github.com/gdamore/tcell/v2 from 2.6.0 to 2.7.0
    54cd7d7e Bump github.com/containers/podman/v4 from 4.8.1 to 4.8.2
    bbb8c9a9 Bump to v0.15.0-dev
    c545dbd7 Bump to v0.14.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a9f0f00637 podman: update to 5.0.0-rc 
Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits:

    fc4e16366 Bump to v5.0.0-dev
    cfc5b8e0f Bump to v5.0.0-RC4
    0898b338b Use stop timeout of zero for system reset
    542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0
    99bb2bfce CI: must-add-tests check: use GH label, not text
    c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2
    3abc488c8 Vendor in containers/(buildah, common)
    4a03da22a Run codespell on code
    03f6589f3 Fix events by fully adding the new PullError event
    52fd284fd Update dependency pytest to v7.4.4
    2b86ab5a1 Change image-path to image for tests
    527b3793b Use machine image as specified in containers.conf
    4c1c4c082 Vendor latest c/common and fix tests
    c50826cea test: fix manifest e2e test assumption
    f168b3c11 podman manifest add: support creating artifact manifest on the fly
    2bbed8f20 Add man page content for artifacts
    d8bb63705 pkg/env.Join(): don't modify passed-in maps
    66d60384f add --retry --retry-delay to podman run/create
    c3c0c4ab9 Add support for podman push --retry --retry-delay
    e5ee0bb5f pullImage does not need to be exported
    2c9c7273c Vendor in latest containers/common
    99b2f369d test/system: fix mount external container test
    35133c842 Move locks to shim layer
    6957c7819 CI: run logformatter on mac
    fd1d95126 Move ignition functions into Containerfiles
    b58f20bdb machine/ociartifact: Include image name in error
    064258b49 Reenable boltdb upgrade tests
    77bcf233e fix: split string Entrypoint by space
    90e6478cf refacto: unknown signal return signal number without prefix
    1de94dceb ci: fix module not found
    585af039d feat: allow compatibility with podman v4 machine
    facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44
    23d6377ac chore: rename var host hostIP
    2cd72c272 tests: add docker api compatibility test
    de845a5b4 feat: make inspect compatible with docker v1.44
    950f612b5 logging: new mode -l passthrough-tty
    5952486df podman network inspect: include running containers
    8f02822c1 Remove xz unit tests as they are flaky
    f8abd7ff7 machine config: make write atomic
    26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist
    dfae51a4b Clean up gvproxy if machine start fails
    ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED
    7e374a52a Vendor in latest containers/(image,storage)
    698219cf9 Expose as-tested Mac/Windows repository state
    9f5c20f9b macos installer: Add vfkit entitlement
    15734f8c5 macos-installer: Remove hvf.entitlements
    74b87874b macos installer: Default to using ad-hoc signing
    c2a2113bb new vms, with rc6 rawhide kernel
    7b6d9a586 Fixup: avoid overriding io.Copy error
    59704665a Avoid overriding io.Copy error
    24a33a538 Move code for sparse optimized copy to a dedicated method
    50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set
    e32c9bb5e Makefile: add machine policy.json to podman-remote.zip
    1e5b5a889 macos installer: install default policy.json file
    bed61806c pkg/machine/ocipull: add default policy.json file
    f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option
    a02aa8f6a pkg/machine/ocipull: add custom policy.json location
    a210a4d7c test/compose: add test for default connection
    d9aff9b41 podman compose: only trim path suffix when ssh protocol
    3cada0409 podman compose: correctly accept --connection/--url
    6d3571dcf podman compose: build for all arches
    7d5a68c9c CI: e2e: use distinct ports, not just 5000
    5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date
    8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3
    cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment
    5b28a2b4a Fix podman stop -t -1 CID
    656bf7b76 Change QEMU netdev to Unix domain socket
    19b676f85 Enable lint for Darwin and fix identified issues
    1b068b79f Fix nightly cron checks
    83671ac34 systests: enable ipv6 tests
    188404366 Update github.com/containers/libhvee digest to c1bda9d
    f099250be Better file close and err handling
    ea4553d59 integrating changes from #21768
    fa99b9be9 renamed testfiles as testdata
    0b3f3f0ef Use faster gzip reader
    2245cf8dc Remove duplication and make consistent usage of the progress bar
    c42d3a74e Add a comment to explain why we look at file name for zip files
    95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go
    88af8852d Refactor machine decompress.go
    ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9
    53b5fc781 Update module golang.org/x/tools to v0.18.0
    608976902 Update module github.com/openshift/imagebuilder to v1.2.6
    3b127286a Adds example for secret creation from environment variable
    b68d3c7a0 Fix race conditions in hyperv readiness checking
    127a8060a Ignore docker's end point config when the final network mode isn't bridge.
    5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly
    c5434bf71 Expand sparseWriter tests
    a9ee31b92 Bump to v5.0.0-dev
    54795efeb Bump to v5.0.0-RC3
    3e76e594b Fix assumptions in 'push with --add-compression and --force-compression'
    8e99c697f Fix assumptions in 'push test --force-compression"'
    7acb49875 Update module golang.org/x/net to v0.21.0
    f601a446b Bump VMs. New pasta, gvisor
    d85a71b4d Update module github.com/klauspost/compress to v1.17.7
    d7f7f07c9 Stop using rm'd inspect format templates in tests
    be9aba7cc Remove image provenance from `machine inspect`
    d68240b15 Update machine files rm order and add QEMU rm
    4078a4405 libpod/events: remove duplicated Details ID field
    6f6925cca pkg/machine: ignore gvproxy pidfile not exists error
    8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable()
    a3a1b44c3 libpod/events: Update event time format and add timeNano
    f218f8430 machine: implement http proxy logic for all providers
    c4e68bdae Cirrus: Reuse shared clone script on Mac
    2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1
    f7d1726f9 Rearrange CI tasks for safety + efficiency
    89b415ba3 Comply to Kubernetes specifications for annotation size.
    a31e8d2a2 zstd now default compression for podman machine
    1c61f766d CI: fix search-test flakes
    0b861350c machine: add sparse file writer
    7746e2a3f systests: auto-update: minor cleanup
    09095acf2 machine: Add `ConnectionInfo` to `MachineConfig`
    5effdcca3 Fix up example description of podman-system commands
    ec68f07c0 Fix Lint on Windows and enable the job
    66fd41ff1 cirrus logcollector: update package list
    5327ddfdf Build with CNI support on FreeBSD
    c5a71c4fd Apply suggestions from code review
    67ead5cb5 Apply suggestions from code review
    408772d34 Apply suggestions from code review
    1612ff69c Fix up example description of podman-inspect.1.md.in
    62148bf61 Apply suggestions from code review
    b8c1a8e79 Apply suggestions from code review
    66f39eee5 machine: Remove unnecessary TODOs
    5b5343b38 Apply suggestions from code review
    9d73dc6ed Apply suggestions from code review
    f7659b12e Apply suggestions from code review
    4f13b836b Codespell code
    fc7140151 Fix up example description of podman-mount.1.md.in
    ee078a7e6 Update docs/source/markdown/podman-cp.1.md
    606865a47 Fix up example description of podman-container commands
    22effe8d4 Fix up example description of podman-stats.1.md.in
    3fd09dd18 System tests: enable debugging for parallel-rm test
    49400ecce Extract waitForGvProxy into shared utility function
    a0109caa7 Fix up example description of podman-volume commands
    803410f1a Fix up example description of podman-kill.1.md.in
    bc5a4fbb2 Fix up example description of podman-pod commands
    93a0c242c [skip-ci] Packit: Update downstream task targets
    8ed6d4fe5 Fix up example description of podman-build.1.md.in
    433efc1f5 Fix up example description of podman-commit.1.md
    fe910ae96 Fix up example description of podman-logout.1.md.in
    12af4f36b Fix up example description of podman-images.1.md.in
    66ed46987 Apply suggestions from code review
    de7cb639c Fix up example description of podman-export/export commands
    f59a5f135 Fix running container from docker client with rootful in rootless podman.
    10d748f58 Introduce Podman machine reset
    d4b3ab521 Fix up example description of podman-create.1.md.in
    717c00569 Fix up example description of podman-diff.1.md.in
    4e268c667 Fix up example description of podman-events.1.md
    537490cb9 Fix up example description of podman-farm commands
    aad195ca3 Fix up example description of podman-network commands
    777b258a7 Fix up example description of podman-image commands
    664d4ed28 Fix up example description of podman-port.1.md.in
    1116e68dd Fix up example description of podman-push.1.md.in
    79a10419c Fix up example description of podman-unshare.1.md
    63d9bf128 Fix up example description of podman-pause.1.md.in
    4b6ca1687 Fix up example description of podman-start.1.md.in
    f5c666d07 Fix up example description of podman-rm.1.md.in
    6c8123325 Fix up example description of podman-info.1.md
    8cbbd631d Fix up example description of podman-history.1.md
    1a06ec802 Fix up example description of podman-healthcheck-run.1.md
    10af44854 Fix up example description of podman-exec.1.md.in
    7e611f60b Fix up example description of podman-cp.1.md
    47d0aa1bc Fix up example description of podman-manifest commands
    7ba23cd6f Allow podman pull to specify --retry and --retry-delay
    f036476cf fix usermode test
    24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
    2846027dc machine init: validate machine name and username
    8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
    30a18fc02 pkg/machine: make only one AddConnection() call
    7f2a6c735 Bump to v5.0.0-dev
    f620aa0fb Bump to v5.0.0-rc2
    d60757cca pkg/machine: cleanup MakeSSHURL
    e0a766854 Improve cross platform support in QEMU machine sources
    bd0a9e903 Fix remove docker.sock symlink
    1f64ae10f Prune FCOS related code
    4fffa78ee Manually discover wsl.exe location
    889454104 Turn WSL machine tests back on
    a9401dead Build tag out QEMU for Darwin
    c7537d193 man-page xref: make nested-structure warnings fatal
    d221e0b00 Remove log-level from runSystemCommand since wsl does not support it
    9ee17d422 machine/qemu: use extra gvproxy socket
    3ca221360 Add a helper for stopping pods and containers in E2E
    bcec7e627 machine: ocipull do not error if downloaddir exists
    e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning
    144e420bb Add testcase for WSL dist conflicts
    d23dd35dc Correct VM existance check on WSL
    db34827bb Test PR, add a inconsequential period to docs
    9abc04232 Fix small bug in ocipull
    42a78c714 Add volumes-from support using annotation in kube yaml
    068d4e81c Allow CI user to cleanup own files
    41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22
    3de467d9f machine: Re-enable USBs check for wsl machine set
    0e9d86755 machine: `machine set` only when machine's stopped
    92d6194f0 Fix freebsd indentation + enable release-testing tasks
    f9bc9a85b Replace panic with no-op
    45b701b12 chore(deps): update dependency setuptools to ~=69.1.0
    464638cc8 Enable windows and PM windows testing
    001824b9f Windows uses USERPROFILE not HOME
    4c0d05718 Readme updates for Podman
    87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU
    7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
    66e292ebb Fix build on Main
    c29fde265 libpod: correctly map UID/GID for existing dirs
    2430fc71a Allow podman machine to download from oci registry
    ad55ba6eb Handle DOCKER_HOST environment for podman-docker package
    36853c0d0 Consistant handling DESTDIR variable expansion
    5eb801a56 Bump CI VMs to ones with netavark 1.10.3
    f7f4d1064 Fix the build on main
    eb8428df5 podman-image-scp: Load images without the use of a temporary file.
    f8847ea04 Improve comments on waitOnProcess
    d3328d4f3 Don't panic on podman4 machine configs
    00180bd5b Enforce podman-machine mac CI results
    667311c7d Use persist dir for oom file
    1f8a69bc9 docs: clarify when a URL is treated as a git repo
    bb7d8fdc4 Workaround connection hangups in start/stop racing
    09b86e26d Improve robustness of pipe checks
    487219d80 Complete WSL implementation, refactor a few areas
    d7cb66492 wsl - wip
    e74d268bf Minor cleanup from podman 4
    2a61998f0 Fail if vm exists in hyperv already
    477cb90a3 Update .cirrus.yml
    325d7f489 Re-enable mac testing
    7ecc41467 Vendor crc CopySparse
    69163af2a Remove gitleaks scanning
    5b6b68976 Remove disused Containerfile and docs
    d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible
    4413e75f0 [CI:BUILD] rpm: bump podman module version
    1ca608ea9 fix "podman run port forward range" flake
    41cd90a8e image scp: don't require port for ssh URL
    dbfa201c9 new testimage and systemd-image
    a2c086c78 [CI:DOCS] fix userns.pod.md mapping table
    3495aae42 docs: resole hierarchical issues with userns parameters
    7be6cd4b0 machine: USB passthrough
    02eb907db machine: change getDefaultDevices signature
    dc0d07c71 document new connection/farm storage location
    ef8e63cb2 update c/common to latest main
    10265661e Fix Quadlet Options=key=value documentation/example
    9f38b2215 pkg/machine: make it build for freebsd
    bcd48a6a7 Bump to v5.0.0-dev
    dc218a3c6 Bump to v5.0.0-rc1
    7e73bb341 Add v4.8, v4.9 to release notes
    30fb5de71 Restore Cirrus DEST_BRANCH to main
    72f1617fa Bump Go module to v5
    c023b789f Re-enable passing a logfile to gvproxy
    69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3
    e20b70c2e Upgrade tests: reenable, but revamped
    d47979761 Quadlet - do not look for line continuation in comment lines
    90c938737 Add functionality for `podman machine set --rootful`
    f23b144c6 Podman Machine AppleHV CI fixes
    d5eb8f3b7 AppleHV - make gz ops sparse
    85d828148 create machine dirs at discovery
    b1ce6ef9a podman machine 5 - hyperv
    6b02c4894 Podman 5 machine refactor - applehv
    e8501ca99 Implement generic providers
    9bb191df5 [CI:MACHINE]Podman5 QEMU refactor
    b9bcfa474 podman5 machine reconfig 1
    c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume
    3cf2f8ccf Handle more states during refresh
    77847bd67 docs: make --seccomp=profile.json clearer
    6ca6184ed gomod: Update containers/psgo to 1.9.0
    a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks
    6e0decbe0 Send container stats over API on a per-interface basis
    9983e8744 Remove leftover autoremove containers during refresh
    43a01d7dc Temporarily ignore windows-linting failures
    defbf4237 Lint before windows-cross build
    d44bafc3c Reimplement lint with improved compatibility
    c7910e75e Show network name network events with podman -remote events
    46fe7ef3b use pkg/strongunits from c/common
    5de4bd5d1 vendor: update c/common + libhvee to latest main
    a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests
    7d15bc2ef fix userns + restart policy with slirp4netns
    fcae70220 Reuse timezone code from containers/common
    85904e01f Vendor in containers/common
    01a8539ef Warn if cgroups-v1
    d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume
    2eee3cd81 Corrected markdown documentation for `--stars`
    35d1f1221 make podman pod inspect output a json array
    26cd01ee5 Do not test CNI in CI
    ee923358c Vendor c/common
    249474a84 drop support for "pasta" as a network name
    a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation
    d217de642 [skip-ci] Update github/issue-labeler action to v3.4
    9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible
    39f22c382 Include machine-tests in cirrus-cron jobs
    7de64b47f Vendor c/storage main
    9fb57d346 Cease using deprecated runc userlookup
    91b8f208a Bump to runc main
    6a727fdbe Fix updated runc dep breaking pod devices cgroup
    2818abf84 Update to runc main, removing pin to an older version
    0da405453 Verify the empty  mounts.conf does not generate warnings.
    1ab55defb Test new CI VMs
    c5c079932 Scan-secrets: Fix PR forcepush detection condition
    0a4beea6d Scanning-secrets: Support new-branch/renovate link
    0e9b07a02 Secret-scanning: Fix newly-opened PR conditional
    3f3d1e4de Temporarily ignore mac-linting failures
    d9ad7cbc9 Run lint for mac builds
    90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
    a06685a54 Farm build should read server registries.conf
    28856b6c1 Make leak-detection readable by humans
    b028f6aa7 add new libpod/images/$name/resolve endpoint
    f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21
    74454bf59 rework system connection and farm storage
    a1c47f029 Return nil health when inspecting containers without healthchecks
    6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0
    76791a21c pkginstaller: bump Qemu version to 8.2.1
    d202acd86 Bump containers/common to latest main
    174631f72 Convert SpecGen values to be nullable where possible
    f8e1ea414 Fix SSH Host argument in tag command during scp.
    3136f0fca Don't require engine connection for farm
    0ec84b8ec Revert "Enable win podman-machine test failure"
    39e53e6dc chore: extract duplicate codes
    8d14d4155 Run codespell on code
    d5bed05df docs: fix podman-manifest-rm header
    3592b56c3 docs: fix unclosed code block
    6678260eb man: Minor wording tweak for host/connection
    cd5982e98 quadlet: Add tests for templates
    dc94a10d6 quadlet: Add documentation about template use to manpage
    01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@.
    bb6dec46f quadlet: Support [Install] for templated units
    7e1942ed4 systemd.parser: Add GetTemplateParts()
    2df994ba0 quadlet: Don't put @ in container names for templated units
    b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+
    7dcbc75aa [CI:DOCS] minor man page cleanup
    202cab612 Fix inspect test that rely on digest
    ffd7a8998 Update module github.com/google/uuid to v1.6.0
    848078c93 Fix auto-update digest comparison
    93510a299 bindings: suggest using -tags remote to reduce file size
    f18ebad1e bindings: pods uses entities/types
    668d517af bindings: volumes uses entities/types
    df6cc8550 bindings: secrets uses entities/types
    aee733c58 bindings: network uses entities/types
    c736a8e20 bindings: manifests uses entities/types
    34cc55741 bindings: play uses entities/types
    528414970 bindings: generate uses entities/types
    5ddc82f7a bindings: images uses entities/types
    08cd7ce41 specgen: use storageTypes instead of storage package
    7aede410d bindings: containers/update uses entities/types
    40cc962a5 bindings: containers/exec uses directly Docker type
    88fb291a3 bindings: containers/create uses entities/types
    6c5704a09 bindings: containers/containers uses entities/types
    2d8231efe bindings: containers/commit uses directly Docker type
    9f0ea0dc8 bindings: containers/checkpoint uses entities/types
    b304ac1ea bindings: containers/archive uses entities/types
    923123420 domain: move system structs to types sub-package
    48a99c651 domain: move Event to types sub-package
    ee61b130a [CI:DOCS] Update farm docs
    90867d987 Fix image filters parsing
    7c8c94549 Vendor in latest c/common
    27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20
    505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10
    56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible
    3e6bfb6e9 Update module github.com/docker/docker to v25
    269149a9f Kube Play - allow creating image based volumes
    cf0b436b9 Deprecate BoltDB, preventing creation of new databases.
    d3a49fded Add information about --latest support on man pages
    d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files
    5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint
    f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED]
    2e38b9816 Restrict building the pkg/fileserver implementation to windows
    17613cc96 podman farm is no longer hidden. Enable doc checks.
    0e64e107b Fix Mount Unit Option
    660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0
    8d733b6d0 Update module github.com/onsi/gomega to v1.31.1
    a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6
    a0c914c6d [CI:DOCS]Remove final references to varlink
    70c3accf7 Update module golang.org/x/tools to v0.17.0
    75790b42b Label host volume mounted content in machine as nfs_t
    7472bdb16 Ensure podman temp directory is created on Start as well.
    a5612bc54 Quadlet: ensure all keys are documented
    0c3b5e433 quadlet.go: clean up keys
    77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer.
    6226b5669 Update module github.com/onsi/gomega to v1.31.0
    4c583e7a1 Update module golang.org/x/net to v0.20.0
    e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0
    728e842db Update module github.com/docker/go-connections to v0.5.0
    f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2
    c566551e9 gvproxy: Update to 0.7.2 release
    1964dbd40 Set up podman machine remote user correctly
    1c88b1220 rm pod with podman run if ctr creation failed
    79fad91db Add a net health recovery service to Qemu machines
    e66413b51 CI: reenable tests that are working again
    3fef531d9 applehv: return socket path from setupAPIForwarding
    90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment
    ab1316551 fix mongo-driver dependency
    971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect
    dbe0e6789 Man pages: tighter documenting of --format fields
    d95710a89 farm build: push built images to registry
    992e83d20 machine: Enable console autologin by default
    f374e07fb AppleHV: update LastUp time
    b94be90a1 Remove Libpod special-init conditions
    46cfc9858 Make --gpus work with nvidia gpus
    0e09527bd systests: kube with policies test: fix race
    f6107f631 Assign separate ports for each appleHV machine
    eeff3d2de Fix machine inspect test config
    7bd5dd42c Fix `podman machine set --rootful` for applehv
    585fbe373 Run mac jobs on labeled hosts
    a60fe34fd Fix `podman system reset` with external containers
    522934d5c Replace strings.SplitN with strings.Cut
    3714ae342 quadlet: fix quoting of example option values in container unit file documentation
    4e4c3e3db cmd: support --config option to locate authentication file
    83fa4843f Fix podman machine ssh command
    780733415 System tests: fixes for RHEL8 gating failures
    380fa1c83 Remove redundant code in generateSpec()
    a8c2b84c2 docs: update mariadb example
    d7760b23c labeler: Use `machine` label
    bccfda505 [CI:DOCS]Periodic update to OWNERS file
    3b881d4ec feat: disable pid max in the podman machine
    c90e9dad7 e2e: reenable warning checks on Debian
    e3f167f77 Add API forwarding support for HyperV
    a0a541351 consolidate ignition ready socket unit
    8341ca0e7 Remove --latest from podman CMD --help output
    06064150e machine: use GlobalDataDir helper
    8bdf77aa2 Refactor: replace StringInSlice with slices.Contains
    25602a03a fix(deps): update module golang.org/x/sys to v0.16.0
    3bfdd7915 Fix init teardown on bad ignition path
    b01a330d3 Use single persistent ssh key for all machines
    260f814bd test/system: add test for mounting issue in the init container
    f0319d5b7 Error messages not being reported unless more then one error present
    49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0
    450862054 xref-manpages script: more regression tests
    e63513542 Vendor latest c/image
    98f332d48 Use parser.UnitFile
    c728eeb39 Create `pkg/machine/ignition` package
    560455cbd docs: fix typos
    2a2d0b0e1 chore: delete obsolete // +build lines
    92f3bacc6 machine/qemu: A few debugging prints
    876b2207e ci/labeler: Add area/machine label
    f5a986f4e Set applehv as default darwin provider
    689d97a1d Quadlet - add StopTimeout key for .container file
    ac0353aec chore: remove unused link
    8c546cf7e CI: bump VMs
    f9de9809e docs/build_osx.md: Describe external gvproxy
    5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12
    70a53cb76 Quadlet - fix trailing whitespaces handling
    c315c8e74 Makefile - make sure gitvalidation is installed before calling it
    55b08d3ba applehv - fix vm lookup
    ec5422af5 e2e: Skip journalctl if journald is unavailable
    4f94c96b9 remote: fix podman-remote kube play --publish-all
    4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing
    f10a7bfd4 Add mmap cache option to QEMU mount
    2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security]
    90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
    f90b4e79a Tests for xref-helpmsgs-manpages
    1322f3193 abi: drop check for IsRootless()
    9d0da9d0f Strip key/values of external quotes
    4dd58f226 Move golang requirement from 1.18 to 1.20
    f169fc76a Allow PublishPorts to be used with [Pod] entry
    6a96c8b5f quadlet container support multiple Ulimit options
    ccc3eb774 Improve compose tests
    e51bab3c9 Remove duplicated content in docs
    d76bb978b docs: oci-dir does not support compress as suggested
    f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1
    5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19
    db68764d8 Fix Docker API compatibility with network alias (#17167)
    7c72d8c2f Fix path to example files
    5cc5b4347 Error on HyperV VM start when gvproxy has failed to start
    58edd06ff [skip-ci] Update actions/upload-artifact action to v4
    d026ccf9a Kube Play - pass arguments to build
    e4ecd7cca doc cleanup
    1c59a9ced CI: safer podman-stop tests
    8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0
    3a842027a CheckExclusiveArch should use local JSON too
    c290a561b Update gitleaks baseline w/ harmless findings
    446df4379 machine e2e : set default disk size to 11
    126670d5d Fix push endpoint stream
    232c32bd3 CI: systests: safer isolation in registry & tests
    f51ff7764 Support podman ps --format '{{ .Label label }}'
    36e04599a fix(deps): update module golang.org/x/tools to v0.16.1
    5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0
    5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld
    e5c726daf Make hyperv pass
    e5a4f00b7 Podman 5 machine config file - Step 1
    95eb22c71 Support a machine-test only mode
    0f02e43ce cli: podman manifest annotate --annotation use StringArray()
    d8c3e5b3c cli: podman manifest add --annotation use StringArray()
    3e10a6832 cli: podman kube play --configmap use StringArray()
    2be4b007b cli: podman kube play --log-opt use StringArray()
    48ab4aec3 podman kube play: fix broken annotation parsing
    e916f49f0 cli: podman kube play --annotation use StringArray()
    47b65086e cli: podman image trust set --pubkeysfile use StringArray()
    cdb178e95 cli: podman push --encryption-key use StringArray()
    3e1b9146f cli: podman pull --decryption-key use StringArray()
    36e29a843 Fix WSL machine test regressions
    6415471dc EMERGENCY: fix broken CI
    952c70890 added system test
    23f6c4851 Add test for relative idmap mount
    e7eb97b84 fix checking of relative idmapped mount
    c823d49fd CI: unskip tests
    4590b663a add test for podman exec --env-file
    06cee546a cli: podman exec --env-file use StringArray()
    7866f6c6e cli: podman run/create --blkio-weight-device use StringArray()
    432be1330 cli: podman run/create --device-{read,write}-bps use StringArray()
    8de13271c cli: podman run/create --device-{read,write}-iops use StringArray()
    e763cc62b cli: podman run/create --device use StringArray()
    833163ff3 add podman create --label-file test
    19571f750 cli: podman run/create --label-file use StringArray()
    24d08a94d cli: podman run/create --decryption-key use StringArray()
    f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build
    6c2a0196a machine: usb: Fix 'passtrough' typo
    201920f6a cli: podman run/create --chrootdirs use StringArray()
    dbbec9936 cli: podman run/create --log-opt use StringArray()
    b011aa443 cli: podman run/create --env-file use StringArray()
    ef10073b5 cli: podman run/create --annotation use StringArray()
    c5258d463 cli: podman --hooks-dir use StringArray()
    12c39ffda cli: podman --module use StringArray()
    c97560841 cli: add docs for StringArray vs StringSlice options
    1ebd507fb Fix regression in e2e machine test suite
    95145d957 buildah treadmill: cleaner YAML, uglier script
    0d1b90d36 CI: systests: fix flaking --since test
    9a963221b [CI:DOCS]use nginx in podman tutorial
    a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax
    cac4aa3b4 [skip-ci] Update actions/stale action to v9
    19457f382 system service: split out cgroups call into linux specific file
    03d411abc libpod: split out cgroups call into linux specific file
    32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd
    a687c3886 use rootless netns from c/common
    3d740674b Improve error handling in win-lib.ps1
    d78212a00 Update vendor of containers/storage
    98df5b397 Fix user-mode net init flag on first time install
    10db6442d [skip-ci] Update actions/setup-go action to v5
    8d8fb726f fix broken labeler.yml config
    4d2125baf systests: cp: add wait_for_ready
    7cc6501cf Add e2e tests for quadlet Entrypoint option
    01d397a65 podman: new option --preserve-fd
    a943be7e8 Kube Play - set ReportWriter when building an image
    972ffaca4 Add support for Entrypoint in quadlet
    94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
    1f42aff93 systests: debug systemd failures
    7f4b0f208 apiv2 tests: fix race
    f1dc126bf Do not aggregate failing mac test status
    2d46d0537 Implement bare-metal Mac M1 podman-machine testing
    b7a81c1ce Fix command failure not resulting in task failure
    ca66a90b8 [skip-ci] Update actions/labeler action to v5
    b1eccedf5 [CI:DOCS] Update health-start-periods docs
    bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254
    07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement
    0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95
    7e2a8d58a Quadlet .pod - add support for the Volume Key
    212b4c9e9 Quadlet .pod - add support for the Network Key
    0d260bdc1 Quadlet - fix pod service file name
    04519234e Add support for the userns annotation in kube play
    f384bdf66 Handle symlinks when checking DB vs runtime configs
    e14aa09bb Update podman-systemd.unit.5.md
    6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94
    4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11
    45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD
    00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
    b1acb43d7 CI: fix system_test_aarch64 dependencies
    f9e8585c5 Enable win podman-machine test failure
    269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
    c1eea91a0 fix(deps): update common, image, and storage deps
    31df9c237 Move the --farm flag to farm build command
    fa0aa9113 @@option volume.image: be specific that -v only affects RUN
    426db6fcc Accept a config blob alongside the "changes" slice when committing
    e197cf57d container create: use ParseUserNamespace to parse a user namespace setting
    f95dd21d5 deferred test failures: handle a corner case
    42ea21121 Fix locking error in WSL machine rm -f
    d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto
    5b3d82f9b sqlite: set busy timeout to 100s
    d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD
    55373dcce Vendor c/common
    3e7041508 Gating test fixes
    86296ff8d pkg/bindings: add new APIVersionError error type
    a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers
    f35d1c1c2 Don't update health check status during initialDelaySeconds
    8ee262202 quadlet: Support systemd style dropin files
    93bcd2a25 fix podman-remote exec regression with v4.8
    cf1ad300b utils: close a couple of ReadClosers
    4314b1c34 Fix transferring data using tar
    7b4d6a295 [CI:DOCS] Fix markdown bugs
    a2bf8c6d5 refactor(machine): improve machine marker value
    572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr
    d7b970a4c sqlite: fix issue in ValidateDBConfig()
    e26f677b1 sqlite: fix missing Commit() in RemovePodContainers()
    248cbc6f6 docs: drop default for tmpfs-mode
    6b2f48129 Quadlet - Add support for .pod units
    c664cfe88 [systests] podman mount no-dereference: complete rewrite
    13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs
    b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1
    07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0
    c8f262fec Use idtools.SafeChown and SafeLchown everywhere
    29d18079c [systests] new defer-assertion-failure
    f07b15105 fix(deps): update module golang.org/x/net to v0.19.0
    8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled
    d280e481a test/compose: remove debug leftovers
    ac3d57016 [CI:BUILD] rpm: remove dnsname
    386c8d6bf swagger: document play kube annotations param
    f6b2a1378 Clean up farm-build miscommit
    c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0
    41a6b992a system: enhance check for re-exec into rootless userns
    e82465773 Fix Ulimit syntax.
    fe65f059a libpod: drop dead code
    cd21973f4 pkg/util: use code from c/storage
    98c525cf9 Remove unnencessary pregenerated doc
    3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0
    da9349ce4 podman machine image from oci updates
    75638a72a If API calls for kube play --replace, then replace pod
    414642efd [CI:DOCS] Add podman farm build doc
    ddd6cdfd7 Ignore SELinux relabel on unsupported file systems
    e85cedf43 Use configured timeout in list_test.go
    478afa728 vendor: update containers/{common,storage,image,buildah}
    48cf44f23 machine applehv: create better error on start failure
    6cb2f9b12 quadlet: Support `healthy` for `Notify` directives
    2b95700bc No longer support deprecated legacy QEMU machine structures
    e40d70cec new 'no-dereference' mount option
    be2463330 Bump to v5.0.0-dev
    e75fbe54e Update dependency setuptools to v69
    ae9b63fbf Check for imageID, not imageName
    ff80e40ad Use NewStoreReference instead of ParseStoreReference
    e9587f5e3 Don't re-assign imageID
    c85068220 Remove clearly dead code
    87cef3654 Update release notes from v4.7 branch
    8b2667ef6 More rootless-tutorial fixes
    62060f323 Get masked paths and readonly masked patchs from containers/common
    4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
1a813b0e6f netavark: update to 1.10.3 
Updated via:

   bitbake -c update_crates netavark

Bumping netavark to version v1.10.3-1-gbe7bd48, which comprises the following commits:

    d9f9fdc v1.10.3
    a88dc00 fix netavark update to not start a new aardvark-dns
    664637b Release v1.10.2
    8e53052 Release notes for v1.10.2
    c70dc8e [CI:BUILD] Packit/rpm: fix aardvark-dns handling
    8a7422e Do not perform network namespace detection on AV update
    a78cfa8 Release v1.10.1
    187e0a6 Updated release notes for v1.10.1
    851ac90 update to nftables release 0.3 from crates.io
    1f60bce DISTRO_PACKAGE: fix incorrect vendored tar archive URL
    3328784 Bump to 1.11.0-dev
    799c1ae Release 1.10.0
    2965880 Release notes for 1.10.0
    f20eeeb RPM: update .cargo/config before building
    fddc681 Add support for isolation to the nftables driver
    04538cd build(deps): bump h2 from 0.3.22 to 0.3.24
    020cdd2 chore(deps): update rust crate chrono to 0.4.32
    b953314 fix(deps): update rust crate env_logger to 0.11.0
    a6f8855 chore(deps): update dependency containers/automation_images to v20240102
    687f07e Bump nftables-rs to latest commit
    db43e53 Netavark: nftables support
    c31d678 fix(deps): update rust crate serde_json to 1.0.111
    f59c28d feat: added the --firewall-driver option
    1f75d87 Document how to generate a code coverage report for netavark
    40a6ee0 fix(deps): update rust crate clap to ~4.4.12
    9b3a3d0 fix(deps): update rust crate serde_json to 1.0.110
    04f1517 fix(deps): update rust-futures monorepo to 0.3.30
    059c0cb fix(deps): update rust crate nispor to 1.2.16
    5fe12c3 chore(deps): update rust crate tempfile to 3.9.0
    a6afa03 Use tonic::transport::Uri instead of HTTP
    33d8d04 chore(deps): update dependency containers/automation_images to v20231208
    3faf33f fix(deps): update rust crate tokio to 1.35
    4759152 dhcp-proxy: return actual error instead of generic one
    f571e31 dhcp-proxy: skip set gateway if missing
    87f6691 bump netlink-packet-route to 0.18.1
    63c34a5 chore(deps): update rust crate once_cell to 1.19.0
    ff45e22 fix(deps): update rust crate nispor to 1.2.15
    c85d844 fix(deps): update rust crate serde to 1.0.193
    3bbc9fd fix(deps): update rust crate clap to ~4.4.10
    4f27552 aardvark: show error if process is in wrong netns
    a4e082d aardvark: remove unessesary unlock lockfile calls
    4c58983 fix(deps): update rust crate url to 2.5.0
    f588f1d Bump working version to v1.10.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
8824967159 nerdctl: update to v2.0.0-beta 
Updated via:

    oe-go-mod-autogen.py --repo  https://github.com/containerd/nerdctl.git --rev v2.0.0-beta.1

One patch refresh, no other modifications.

Bumping nerdctl to version v2.0.0-beta.1-10-g0a20db63, which comprises the following commits:

    4420aa67 update BuildKit (0.13.0-rc1)
    4acb599e CI: test compilation with Go 1.22
    6f1c767e build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1
    07dc8a58 build(deps): bump github.com/opencontainers/image-spec
    72a9737d platform: support loongarch64
    1b05ff3e Remove the support for the old CNI isolation plugin
    4c29703b rootless: fix `Not Authorized(uid): org.fedoraproject.FirewallD1.config`
    1eada1af build(deps): bump github.com/opencontainers/runtime-spec
    fdf7968b Fix soci image push with multi-platforms flags
    09168445 build(deps): bump golangci/golangci-lint-action from 3.7.1 to 4.0.0
    6fd3fb73 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
    cad6b2af build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1
    679adcf8 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
    c6236eea build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0
    cfc063cc update slirp4netns (1.2.3)
    2d59841b build(deps): bump github.com/rootless-containers/rootlesskit/v2
    5733be85 update RootlessKit (2.0.1)
    ae224f40 build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4
    c797578e build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
    6a229537  `containerd-rootless-setuptool.sh uninstall` cleanup all relevant services
    9ae613b3 support build attest
    741d06e5 Add support to run systemd in containers (with --systemd flag)
    b452c64b Support --ipc=container:<id> option
    3b45cc18 build(deps): bump github.com/containerd/nydus-snapshotter
    5df53e5f update BuildKit (0.13.0-beta3)
    37168690 build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1
    a3e8cb46 build(deps): bump github.com/containerd/containerd from 1.7.12 to 1.7.13
    dc7bbed8 update Kubo (0.26.0)
    ad02e192 update bypass4netns (0.4.0)
    02dc9b44 update runc (1.1.12)
    3ab02f69 update containerd (1.7.13)
    4892364c [Carry 2535] rootless: support detach-netns mode
    328497a8 update RootlessKit (2.0.0)
    58cc30c7 update BuildKit (0.13.0-beta2)
    5e38fa10 containerd-rootless-setuptool.sh: avoid creating buildkitd.toml
    76199746 build(deps): bump github.com/containerd/nydus-snapshotter
    bd6a915c build(deps): bump github.com/containerd/nydus-snapshotter
    1050dd65 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
    8df3f8a9 containerd/containerd/platforms -> containerd/platforms
    0ac36b66 Retag images when tag is already present in nerdctl build
    2863b6c7 CI: use standard GHA runner for Windows too
    3149671e build(deps): bump github.com/opencontainers/image-spec
    3a7948b3 CI: use standard GHA runners
    7f88313c build(deps): bump actions/cache from 3 to 4
    77234f5a update gpu image to 12.3
    2410e1f6 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
    d307fda9 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12
    4af27bd1 go.mod: module github.com/containerd/nerdctl/v2
    5ee55f28 add allow option in build
    410d5915 Document that profiles are supported
    05059400 build(deps): bump github.com/rootless-containers/bypass4netns
    3b5717be containerd-rootless-setuptool.sh nsenter: inherit RootlessKit env
    8e09af1e shfmt containerd-rootless-setuptool.sh
    a71209f8 fix: return error if volume create failed
    d0179a63 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0
    aa11ded3 build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0
    3fa62388 build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0
    ce955db1 build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
    2053c384 build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0
    b0458662 logging: respect ctx
    9afd9e3e update runc (v1.1.10)
    695f11a2 cniNetworkManager: move Windows-specific variable to `_windows.go`
    c44427fb nerdctl rm: fix printing `error="<nil>"` on warning
    df43d623 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
    f60bbc65 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
    f59c2bed Add docs for trouble shooting nvidia gpu operator
    970fed9f Remove "soci image rpull" from testing suite
    843d8600 fix typo in filename
    e4bf8b99 Fix #2199 to allow users to bind a named pipe on Windows.
    392daca1 go.mod: clean up
    c2d71273 fix groupadd in compose
    ea3a4e02 build(deps): bump github.com/awslabs/soci-snapshotter
    ffd76b5b build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0
    ef00a6d6 build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0
    255716ea docs: Fix typo in command-reference.md
    b6436017 fix etchosts in host network
    990d7eca implement persistent logging for contaiers running in foreground
    ae004af5 fix deadlinks in the notation doc
    e538124a build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1
    24aa6e27 update BuildKit (0.12.4)
    de985457 update containerd (1.7.11)
    139022f8 build(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11
    8567678e Dedup mounts for /etc/hosts /etc/resolv.conf
    a56dcfac build(deps): bump actions/setup-go from 4 to 5
    a4c33929 build(deps): bump github.com/containerd/nydus-snapshotter
    06628f63 nerdctl run: reset the default value of limits.
    f6004169 build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0
    f2030d29 update CNI plugins (1.4.0)
    722040c4 build(deps): bump github.com/containernetworking/plugins
    f709735a build(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4
    198797f2 build(deps): bump docker/metadata-action from 5.0.0 to 5.2.0
    0e73e3ed update containerd (1.7.10)
    21dc100a fix typo
    ed633b3b build(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10
    71bf53b3 update golangci-lint (1.55.2)
    a8aaac29 build(deps): bump golang.org/x/net from 0.18.0 to 0.19.0
    d6c7f0f3 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0
    aeeb338b update Nydus (2.2.4)
    e0808016 update Kubo (0.24.0)
    ec728349 update containerd (1.7.9)
    6e5c7f76 build(deps): bump github.com/containerd/accelerated-container-image
    2d508151 Fix nerdctl system info : sort problem.
    afe990db remove incompatible in TestComposeExecTTY
    8e9ca2b1 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
    30eaca09 build(deps): bump github.com/compose-spec/compose-go
    76c57d20 fix: typo
    51d09871 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3
    9b62e889 Add SOCI index digest flag
    d7676628 docs: read-only (RRO) bind-mount have been support by docker
    77d1fd64 build(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9
    ca8c1180 build(deps): bump github.com/compose-spec/compose-go
    c6a4bfeb build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0
    0d934074 Deflake TestContainerListWithFilter
    33350146 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
    411f9daf build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0
    a7cdd348 build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
    651cc8cb build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0
    6c560bcf [build][iidfile] Setthe same permissions as docker
    d08f4c47 build(deps): bump golang.org/x/text from 0.13.0 to 0.14.0
    d9d684bf chore(test): remove some incompatible in compose test
    a78b50ef Add diff command to docs & fix usage message
    3d1a5f11 Use prepared Stdout
    d03a5993 Fix wrong comment of completion
    00c0d3b7 Fix missing error handling
    cc52ea45 Support diff command's autocompletion
    da85b403 Remove diff test from windows
    2fcd3c4c Add comment to diff test
    d96ad3b4 Add `diff` command
    0008cd6c build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4
    a9e5ea43 update containerd-fuse-overlayfs (1.0.8)
    ae12819e Fix unstable sort of container list in compose
    0e643d2b update imgcrypt (1.1.9)
    2c57b5ca update BuildKit (0.12.3)
    9c1ee066 update runc (1.1.10)
    2c3cb4a4 update containerd (1.7.8)
    2af4cef9 nerdctl ps: implement `--format {{.Label "foo"}}`
    3dd95cd4 Dockerfile: stargz-snapshotter v0.15.1
    b5da5ea3 fix add-host overwritten
    9143054e build(deps): bump github.com/containerd/stargz-snapshotter/ipfs
    147cbbef build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9
    e6e24c21 build(deps): bump github.com/containerd/stargz-snapshotter
    1138bfbe nerdctl-full: compile ipfs (Kubo) as a static binary
    ac0ceb5a nerdctl-full: compile containerd as static binaries
    a6a2d917 Support IPv6 for nerdctl network
    55987ae9 Add support to CernVM-FS Snapshotter
    fff98e35 build(deps): bump github.com/docker/cli
    792a0cb1 support running container with network id
    63b8df5e build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8
    59640025 build(deps): bump github.com/docker/docker
    161bf205 compose_config_test: workaround for Docker Compose v2.23.0
    0b977127 Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2
    ae17b486 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3
    caea0f91 fix ps format names
    35966845 support ip-masq option
    5d18f61d build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2
    1c41c10f Replace logrus.SetOutput() with log.L.Logger.SetOutput()
    10854249 docs: minor soci push fix
    a97162ed build(deps): bump github.com/containerd/nydus-snapshotter
    8a5177c7 build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3
    0af5badb build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0
    f51e06d2 build(deps): bump github.com/compose-spec/compose-go
    35a7920a build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2
    8c2610a1 build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20
    6c8ea8bc build(deps): bump actions/checkout from 4.1.0 to 4.1.1
    41f2647a build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1
    63d446f1 Use https://github.com/containerd/log for logging
    04a35f82 build(deps): bump github.com/containerd/accelerated-container-image
    bc62b220 fix: typo
    5d4f0325 nerdctl compose: fix --env-file
    5a874813 build(deps): bump github.com/containerd/nydus-snapshotter
    ff0fa841 chore: unnecessary code
    a2cfe916 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
    3b09b4cb fix: call client close
    3b6cf701 go.mod: github.com/containerd/containerd v1.7.7
    b6d76eae dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http"
    e590756c update gotestsum (1.10.0)
    98d5724e update Kubo (0.23.0)
    02a59fc5 update containerd-fuse-overlayfs (1.0.7)
    869dec83 update slirp4netns (1.2.2)
    ea86ea87 update containerd (1.7.7)
    abec5ef0 containerd/containerd/log -> containerd/log
    93cb4802 chore: Comment should with an optional leading article
    d5dd50ce build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
    3006f23e release.yml: migrate from `hub` to `gh`
    6664661c build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
    11a43ac4 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
    980019a2 build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0
    fdf4b2c0 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
    34f73335 build(deps): bump github.com/containerd/nydus-snapshotter
    c1fd6782 Fix port allocate iptables regex
    6b5c43e2 CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni`
    e230c3cf build(deps): bump github.com/containerd/nydus-snapshotter
    88188be6 docs: minor fixes to soci documentation
    72665a07 update toml to v2
    8ce38135 fix: client close connection
    004a05a8 Support zstd (non-chunked) conversion
    7291147c build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0
    3b644b19 build(deps): bump actions/checkout from 4.0.0 to 4.1.0
    a9fb4c56 chore: Comment should with an optional leading article
    4b5129b5 build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1
    1b5a9867 add missing flags for compose ps
    20f929d1 add featrue network filter
    c407ceb5 build(deps): bump github.com/compose-spec/compose-go
    357113b4 nerdctl version: skip inspecting rootless daemon if the daemon is not running
    42cfd144 docs: add SOCI snapshotter guideline in README.md
    65334cc7 build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0
    98e87997 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
    6db2c459 update containerd (1.7.6)
    4c82cde7 feat: support push with soci
    dd03ebea nerdctl compose cp: support rootless
    69a1833e compose: silence "build.config should be relative path" warning
    1605587b Implement `nerdctl compose exec -T`
    a08e668f docs: fix docs for supported quiet flag of push command
    76dd7065 build(deps): bump github.com/opencontainers/image-spec
    78c855e0 add feature nerdctl compose cp
    ce611af1 build(deps): bump github.com/containerd/nydus-snapshotter
    9d4e5d68 seccomp: rename "default" to "builtin" to follow Docker 23
    be2acea7 update golangci-lint (1.54.2)
    ba3c6b91 update soci-snapshotter (0.4.0)
    b5b1f2a1 update Nydus (2.2.3)
    c5794dd6 update Kubo (0.22.0)
    ee1ac8f0 update fuse-overlayfs (1.13)
    bdb2c006 update slirp4netns (1.2.1)
    70b1ba31 update RootlessKit (1.1.1)
    822f1154 update imgcrypt (1.1.8)
    bcface07 update BuildKit (0.12.2)
    e4a2ceb7 update containerd (1.7.6)
    1e0b0bbf image: dedup same platform entry
    6d77b40b build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6
    c373e1bc build(deps): bump docker/login-action from 2.2.0 to 3.0.0
    81f4dba5 build(deps): bump docker/setup-qemu-action from 2 to 3
    765711c4 build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0
    ebede8d0 build(deps): bump docker/setup-buildx-action from 2 to 3
    03cb689c build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0
    68b58d8a build(deps): bump github.com/compose-spec/compose-go
    248b2b3a remove useless option from containerd-rootless-setuptool
    fe87f8b7 build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1
    bc7edb76 MAINTAINERS: add Kay Yan (yankay) as a REVIEWER
    a976067c fix bash completion of volume rm
    2cbb162b build(deps): bump github.com/cyphar/filepath-securejoin
    e1bad09d adjust writers fmt
    a80e0eb1 fix container_create_windows_test
    b598b583 add missing zero-length list check
    cdc917eb build(deps): bump github.com/docker/cli
    84309f24 build(deps): bump github.com/docker/docker
    1bb407c0 build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
    cf6ba305 build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0
    c565933b build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0
    c2b9f877 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
    f7752221 build(deps): bump actions/checkout from 3.6.0 to 4.0.0
    2739c8fc fix nerdctl run -v when host folder does not exist for bind mounts
    1352ac0d build(deps): bump github.com/awslabs/soci-snapshotter
    6e542c3a Makefile: install docs
    da05f926 Makefile: fix overriding GO command
    fa9e4edb Makefile: add GO_BUILD_FLAGS variable
    4dbe249e Makefile: derive BINDIR from PREFIX
    d30f0788 fix: grammatical errors
    79a15782 fix: succeeded typo
    c6dd2f5f build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5
    9a41384b build(deps): bump actions/checkout from 3.5.3 to 3.6.0
    a0aac07a Support copying out of volumes in stopped containers
    31d5d4ad Fix typo
    4dcef6e0 pkg/version: fulfill fields from `debug/buildinfo`
    1e5baaaf Fix usage of `errors.Join`
    91295033 build(deps): bump github.com/compose-spec/compose-go
    6ed3118e build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8
    ccd5be5d build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
    0844a51e support test integration docker 23 compatibility
    42c312a8 support volume create anonymous
    89bb5bc3 update runc (1.1.9)
    5130ccbf Remove dependency on github.com/hashicorp/go-multierror
    b98ce6a6 build(deps): bump github.com/compose-spec/compose-go
    3bc8f05b build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0
    56b0a7cb Update to Go 1.21 in CI
    ac0146f9 build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0
    424bf4ed FreeBSD: Linux Container Support and BuildKit Integration
    0d631726 build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
    569fe4e3 CI: Windows: enable Hyper-V containers
    3df165d0 fix attach help is messed up
    dd60cfe6 build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
    2888c388 CI: move Windows tests to GHA
    855da424 CI: move FreeBSD tests to GHA
    65934e92 test-integration-docker-compatibility: install Docker 20.10
    cf7b7428 build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
    b8a8100e .cirrus.yml: fix FreeBSD CI failure
    be2ba3ef build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
    f0140a5c feat: add 'nerdctl container attach'
    35296268 Bump containerd to 1.7.3
    7f5bca18 Remove special case for Windows when mounting view
    f57cb241 Add lease to prevent containerd GC

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00