Commit Graph

2906 Commits

Author SHA1 Message Date
Bruce Ashfield
56a7b72a93 docker-compose: regenerate go-mod/shallow/hybrid
There were some issues with hyrid vcs mode and shallow clones.

The tools have been updated to deal with those issues, so we
regenerate to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:43:27 -05:00
Bruce Ashfield
dbf720ccb0 go-mod-fetcher: fix shallow clone handling, duplicates, and discovery workflow
oe-go-mod-fetcher.py:
  - Remove BB_GIT_SHALLOW_EXTRA_REFS generation - refs must be present in
    ALL repositories which isn't the case for module dependencies. Instead,
    use tag= parameter in individual SRC_URI entries.
  - Add tag=<tagname> to SRC_URI when ref is a tag, allowing BitBake's
    shallow clone to include the necessary tag (with BB_GIT_SHALLOW=1)
  - Remove premature _ref_points_to_commit() check that was clearing
    ref_hints before repos were fetched, preventing tag= from being added
  - Fix pseudo-version verification: only use shallow fetch for actual
    tags (refs/tags/...), not branch refs. Pseudo-versions with branch
    refs (refs/heads/...) now correctly use unshallow path to reach
    historical commits that aren't fetchable with depth=1

  oe-go-mod-fetcher-hybrid.py:
  - Fix duplicate SRC_URI entries when multiple modules share the same
    git repo/commit (e.g., errdefs and errdefs/pkg). Track added vcs_hashes
    to skip duplicates.
  - Add --discovery-cache option to calculate module sizes from discovery
    cache .zip files, enabling size recommendations during discover_and_generate

  go-mod-discovery.bbclass:
  - Add automatic hybrid mode recommendations after generate_modules,
    showing module sizes and suggested --git prefixes for conversion
  - Add GO_MOD_DISCOVERY_SKIP_VERIFY variable to skip commit verification
    on retries (useful after fixing verification issues)
  - Pass --discovery-cache to hybrid script for accurate size calculations

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-04 11:40:15 -05:00
Bruce Ashfield
d743412952 oe-go-mod-fetcher-hybrid: improve duplicate detection
The main go-mod discovery fetcher had stronger duplicate detection
than the hybrid mode converter. We synchronize the two to avoid
getting dups in our generate SRC_URIs.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-03 00:03:25 -05:00
Bruce Ashfield
8fbc17f8db docker-compose: refresh hybrid gomod files
After a hybrid fetcher fix to remove duplicates, the following
was run:

  python3 scripts/oe-go-mod-fetcher-hybrid.py \
          --recipedir recipes-containers/docker-compose/ \
          --git "github.com/containerd,github.com/kubernetes"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-01-03 00:01:45 -05:00
Bruce Ashfield
b9a29d2423 kernel: add 6.18 kernel support
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-18 23:48:23 -05:00
Bruce Ashfield
595cfe484e libvirt: update to v10.10.0
Bumping libvirt to version v11.10.0-35-g2df30bca10, which comprises the following commits:

    2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x
    c9f45792b7 virfiletest: Fix build on non-Linux
    eedf9ed68b util: Rework virFileIsSharedFSOverride using virFileCheckParents
    3a44f0c23d util: Fix race condition in virFileIsSharedFSOverride
    b6addd42be util: Fix race condition in virFileIsSharedFSType
    121d179e06 tests: Test virFileIsSharedFSOverride
    5ca7d3227d qemuMigrationParamsForSave: Don't take opaque 'flags'
    61ae36fa0b qemuMigrationSrcToFile: Don't cross-contaminate 'flags' variable
    4469a61553 virsh: Add completer for '--image-format' option of 'save' command
    1e2a71be0f include: Create constants for save image format values
    22c5ce995b qemu: conf: Use proper type for (save|dump|snapshot)ImageFormat
    cad980c83f qemu: Use 'virQEMUSaveFormat' type everywhere except qemu_conf
    7c0778deb7 qemuSnapshotPrepare: Prohibit 'manual' disk snapshot mode with VIR_DOMAIN_SNAPSHOT_CREATE_QUIESCE flag
    627bcc8525 qemu: snapshot: Setup disks for manual snapshot only when the VM is actually paused
    881aec23f8 qemuMigrationSrcToFile: Don't leak 'qemuFDPass' in cleanup path
    b98d29e022 qemu: Treat memory device source nodemask as strict NUMA policy
    b9abe20ce3 qemuxmlconftest: Introduce memory-hotplug-numa-preferred test case
    60d5428d87 qemu.conf.in: Fix some typos
    d56d056094 qemu: tpm: Account for possible migration without actually sharing storage
    fe22d80c0c NEWS: Mention the passt hostname and fqdn attributes
    da4305b7bc qemu: Use pci_bus to identify multi-smmuv3 model
    45ff1c0026 tests: add test for a single per-device smmuv3
    86d8c3e331 ci: refresh with 'lcitool manifest'
    414c5b11bf lib: Avoid changing const strings via strchr() and friends
    821a028c5d iptablesPrivateChainCreate: Avoid modifying const string
    5230ca5404 iptablesPrivateChainCreate: Switch to STRSKIP()
    33c486f4fd iptablesPrivateChainCreate: Rename @tmp variable
    1d95cee608 virSkipSpacesBackwards: Turn @endp into const
    1b8d108c64 virfirewalltest: Introduce testIPtablesSetupPrivateChains()
    b3e48f9470 virstringtest: Introduce a test for virSkipSpacesBackwards()
    141cf9c11f vircommand: Update documentation to virCommandSetDryRun()
    216cb57ef6 cpu_map: update vmx-* features
    0742c15d40 cpu_map: fix sync script to extract correctly vmx-* features
    6a3fe7f7e0 spec: Fix RPM build when %{fedora} is undefined
    fce7fabd53 Post-release version bump to 12.0.0
    cd16a1e913 Release of libvirt-11.10.0
    c7733935a5 Translated using Weblate (Spanish)
    2504f6f99b NEWS: Mention CVE-2025-13193 and improvements for block stats/config and backups
    f625585788 rpm: disable QEMU driver on non-64-bit arches for Fedora >= 44
    ad76c59450 news: document improved certs, host validate details & TDX fix
    54f3472d72 formatdomaincaps: Fix typo in Hyper-V Enlightenments section
    e60c21fc3f NEWS: Fix incoming migration to QEMU 10.0.0
    6cd0d7951a NEWS: Add CVE-2025-12748
    70f5a75f78 NEWS: Document features/improvements/bug fixes I've participated in
    df0d1c915d src: fix redundant/misleading build conditional for KVM MSR code
    40f5e37ff3 Translated using Weblate (Chinese (Simplified) (zh_CN))
    6b1a32f1cc Translated using Weblate (Ukrainian)
    67b8836be1 Translated using Weblate (Portuguese)
    2e727417ac Translated using Weblate (Korean)
    e2a0af28df ci: refresh with 'lcitool manifest'
    c58ee467ad NEWS: Document Hyper-V virttype for Qemu Domains
    ead8915a7e Update translation files
    faa5c69899 po: Refresh potfile for v11.10.0
    44118a7a70 Translated using Weblate (Italian)
    a4563be866 Translated using Weblate (Portuguese (Brazil))
    18cbdffec7 Translated using Weblate (Chinese (Simplified) (zh_CN))
    7f343d454b Translated using Weblate (Czech)
    cec8eb4a49 Translated using Weblate (Czech)
    afcfc6b8c4 Translated using Weblate (Korean)
    8a16508bdb Translated using Weblate (Portuguese)
    33b512a7de qemuxmlconftest: Update 'aarch64' tests using 'virt-4.2' machine type
    f6212a4ff2 qemuxmlconftest: Update 'aarch64' tests using 'virt-4.0' machine type
    3fab3ea57e qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.2.0-rc1-38-gfb241d0a1f'
    59685009ee NEWS: mention VNC 'wait' attribute for bhyve
    3a2127bef1 docs: bhyve: document VNC's wait attribute
    4176cdc978 spec: Fix 'libvirt-daemon-driver-storage-zfs' on Fedora 43 and newer
    c1576ad519 Add support for 'dpofua' setting for SCSI disks
    b1a2ea971d virDomainDiskDefCheckABIStability: Add missing check for 'removable' property
    eadbb34a8f docs: page.xsl: Convert repository edit URI into a parameter
    361106506b docs: site.xsl: Use separate 'asset_href_base' and 'link_href_base'
    071d29b726 docs: css: Split out any main-page CSS to local.css
    5ca7270c08 docs: index: Link to security notices from home page
    895a973c49 kbase: Add note about preserving VM on shutdown to backup article
    eca6a92a6d qemu: backup: Add support for VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN
    56432ed065 lib: Introduce VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN flag
    4453331b89 lib: Introduce VIR_DOMAIN_EVENT_SUSPENDED_GUEST_SHUTDOWN event reason
    8e5b0cd450 qemuBlockJobProcessEventConcludedBackup: Notify the backup job later
    0fe378f1b1 qemu: backup: Don't attempt to stop the NBD server twice
    7d90085e12 qemuProcessReconnect: Continue reconnection if VM untergoes fake-reboot
    18ceb1002d virDomainNestedJobAllowed: Allow VIR_JOB_MODIFY_MIGRATION_SAFE if VIR_JOB_MODIFY is allowed
    baf5f7b0ee qemu: always report s390 prot-virt feature in domain caps
    e98a12d133 qemu: always report TDX feature caps on x86
    62d14ba496 qemu: correctly detect working TDX support
    dac28c6185 docs: describe support for multiple certs & PQC config
    59a65f4987 rpc: support loading multiple certificate identities
    ba8e1720aa rpc: reduce duplication when locating credentials
    375ab122d5 rpc: move file access checks into TLS config API
    88a7a57806 rpc: skip fallback when using custom PKI path
    289d554998 remote: support specifying multiple keys/certs in libvirtd.conf
    d249170bf6 rpc: add support for loading multiple certs & keys
    74a664edd7 rpc: refactor TLS sanity checking to support many cert files
    9aff986bc4 rpc: change 'isServer' parameter from 'int' to 'bool'
    86143735a6 remote: use g_strfreev for free()ing lists of strings
    65d21c8692 domain_addr.c: update virtconsole port reservation comment and allowZero var
    2083efe030 domain_addr.c: Fix virtio console port autoassign on virtio-serial bus
    22059030f9 tests: Add console-virtio-serial-autoassign-address tests
    e9f74bbdba src: cap the data size in stream I/O functions
    2e595888aa include: fix version for recent block stats constants
    3e33e91c5d tests: qemuxmlconftest: Add case for hyperv domains
    9290014103 tests: qemucapabilities: Introduce MSHV capability
    33e716a56d tests: Add domaincaps case for mshv
    82b40953a0 conf: Fix virttype handling in schemas
    7b752b98f1 qemu: conditionally add /dev/mshv to acl
    ba40f678f4 qemu: use mshv accel for hyperv domains
    c852d9ca3c qemu: Append mshv to hwaccel list.
    6d0702f4cc qemu: Query and use mshv capabilities
    3b7edf755d qemu: Introduce mshv capabilities
    029933be86 qemu: only allow enabling deprecated features that are supported
    906f0e448a qemu: query and cache static/host deprecated features
    82eb7690a0 qemu: refactor load/format of deprecated features
    8403817182 qemu: rename modelinfo's deprecated_props to full_dep_props
    37b0b74b48 tests: Don't link vmx2xmltest with esx_lib
    7d5a1a5384 Edit apps.rst to add Apache CloudStack in the IaaS section.
    4ab1e25f6e qemu: Remove redundant kvm group config in sysusers.d
    6bc397eb23 cputest: Skip test for Intel(R) Xeon(R) 6788P CPU when QEMU driver is disabled
    047affcbd0 tests: skip vmx tests when ESX is disabled
    f1c8c9a1e8 build: drop userfaultfd_sysctl option
    7b471c563f tests: qemuxmlconfdata: provide device-pluggable smmuv3 sample XML and CLI args
    4d6419b286 qemu: Implement pluggable-device smmuv3
    e70c4d54d3 conf: Support multiple device-pluggable smmuv3 IOMMUs
    d97bc25b82 qemu: Format IOMMU devices after controllers
    a523920171 qemu: make qemuBuildDeviceAddressPCIGetBus more generic
    5944f566ac bhyve: support VNC 'wait' attribute
    c8bffda588 conf: introduce 'wait' attribute for VNC
    ec501bdc5e tools: inform user which hardware virt was found during validation
    e6d8983cdb tools: be explicit about failure to find x86 secure virt
    785c9fd512 tools: inform user which CVM is found during validation
    f44e2ecc5b tools: inform user which IOMMU was found during validation
    c0f42f4d76 tools: allow passing details for passed validation tests
    fa15860ac1 vmx2xmltest: Add a test case for disks in subfolder
    07d3cc9d57 esx: Allow disk images in subdirectories
    f82d30307d vmx2xmltest: Drop custom file name parse function
    29ddffbe6c tests: Introduce vmx2xmlmock
    ad92def79e esx: Make esxVI_LookupDatastoreByName() mockable
    c3a927c121 esx: Make esxVI_LookupDatastoreHostMount() mockable
    bdd681f9b2 esx: Make esxVI_LookupDatastoreList() mockable
    3ccb15006a esx: Expose esxParseVMXFileName() for tests
    6db235e913 libvirt_esx.syms: Put proper header file name into comment
    4ae5351a50 docs: domain: add watchdog notification support
    475ed7075d qemuDomainPrepareDiskSourceData: Setup 'detect_zeroes' for all layers
    312be5eb9a qemuxmlconftest: Improve coverage of 'disk-detect-zeroes' test case
    f5bb1ae77b selinux: Mark anything using content_context as shared
    5616eaf63e selinux: Add is_shared plumbing to RestoreFileLabel
    f4903ebcf7 selinux: Don't remember labels for shareable SCSI devices
    3a611df5b1 selinux: Match remember/recall arguments for SavedStateLabel
    cf0806477b bhyve: s/provconn/privcon/
    a379327d8a qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots
    2a326c415a qemu: Check ACLs before parsing the whole domain XML
    eb4322dfe8 ch: Check ACLs before parsing the whole domain XML
    7285c10a7e vz: Check ACLs before parsing the whole domain XML
    a6dcfee896 lxc: Check ACLs before parsing the whole domain XML
    a1f48bca07 libxl: Check ACLs before parsing the whole domain XML
    b45f10bc0a bhyve: Check ACLs before parsing the whole domain XML
    e6de1e43ab conf: Add virDomainDefIDsParseString
    05baaddb3f virXMLFormatMetadata: Don't modify deprecated 'xmlIndentTreeOutput'
    f307c7dc0c virVBoxSnapshotConfSaveVboxFile: Don't modify deprecated 'xmlIndentTreeOutput'
    a181d99cba bhyve: domain: improve disks validation
    b3e1e9a187 bhyve: domain: refactor bhyveDomainDeviceDefValidate()
    26a9c7d840 bhyve: support queue configuration for NVMe disks
    52bddfd65c conf: domain_validate: make disk queue configuration driver specific
    f81e5158d4 docs: drvbhyve: add guest-specific nodes section
    b2c7dba3eb docs: drvbhyve: improve the manpage link
    f4751e23d3 docs: drvbhyve: document device passthrough
    15833693e6 meson: default to system crypto policies where available
    81ce368347 ch: Sort driver sources and drop header files
    b224d2b377 ch: Assign device alias early
    85cf0e4f17 ch: Set transient domain definition
    7e5d224536 ch: Use correct domain definition in chDomainGetXMLDesc()
    29195b7b17 ch_process: Avoid memleak in chProcessAddNetworkDevice()
    bf34b3c86f domain_capabilities: Use virXMLFormatElement() in FORMAT_PROLOGUE and FORMAT_EPILOGUE macros
    d2d442d79d domain_capabilities: Check NULL in FORMAT_PROLOGUE
    b20ae99e1d domain_capabilities: Rework virDomainCapsCPUFormat()
    166fad633a domain_capabilities: Rework virDomainCapsCPUCustomFormat()
    132ba55a00 domain_capabilities: Move indentation adjustment out of virDomainCapsCPUCustomFormat()
    238be79bb9 bhyve: auto-assign PCI addresses for hostdevs
    43579767f4 bhyve: Tie the 'passthru' option to the 'hostdev' XML config
    447252a54c bhyve: Advertise hostdev support
    e4056c458a bhyve: Support passing the 'passthru' command line option
    4714272b39 bhyve: process: improve domain startup error handling
    afafb2a28b cpu_map: Add YongFeng-v3 CPU model
    a6000b20ba cpu_map: Add YongFeng-v2 CPU model
    98b4609b51 cpu_map: Add YongFeng CPU model
    db80641510 cpu_map: Add features used by Zhaoxin YongFeng Processor
    56ee1bfb7a cpu_map: Add Zhaoxin CentaurHauls CPU vendor
    ee95c9d7d1 cpu_map: Add EPYC-Turin CPU model
    f37126bc55 cpu_map: Add EPYC-Milan-v3 CPU model
    0fcde0edc5 cpu_map: Add EPYC-v5 CPU model
    d2925f23e7 cpu_map: Add EPYC-Rome-v5 CPU model
    7e8f1698c7 cpu_map: Add EPYC-Genoa-v2 CPU model
    dec859cb66 cpu_map: Add ClearwaterForest CPU model
    b8d830ff54 cpu_map: Add GraniteRapids-v3 CPU model
    cbc2f8e2b3 cpu_map: Add SapphireRapids-v4 CPU model
    bd43aa4cbb cpu_map: Add SierraForest-v3 CPU model
    64143828d7 cpu_map: Add SierraForest-v2 CPU model
    189d7b64ac cputest: Add data for AMD Ryzen 9 9950X 16-Core CPU
    034f02d25c cputest: Add data for Intel(R) Xeon(R) 6788P CPU
    b7c92ce918 cputest: Read more MSRs in cpu-data.py
    a3395fb598 cputest: Ignore missing MSRs in cpu-data.py
    21c61bee36 sync_qemu_models_i386: Support adding models to an empty group
    d3888c470a sync_qemu_models_i386: Handle unknown features in GraniteRapids-v2
    b74b452f8a sync_qemu_models_i386: Print current model for unknown features
    58972035bd sync_qemu_models_i386: Fix typo in CPUID_8000_0021_EAX_No_NESTED_DATA_BP
    96df5805fd cpu_map: Fix ordering of CPU models in meson.build
    a86973056a cpu_map: Add feature for detecting Indirect Target Selection immunity
    81c20d2c32 cpu_map: Add feature for detecting Branch History Injection immunity
    c80b283277 cpu_map: Add features for Transient Scheduler Attacks mitigation
    b72758d62a cpu_map: Add a few missing features to 0x80000021 CPUID leaf
    819ce69b38 cpu_map: Add msr-imm CPU feature
    a088734d57 scripts: do not use uninitialized variable
    1ff3d18528 tools/nss: check for missing array element
    f1e59f961d src: check for invalid stream in virStreamInData
    15c9ca383c scripts: use subprocess.run instead of os.system
    7db2138dc9 qemu: Use query-accelerators to query accelerators
    4c266d53e8 qemu: Introduce query-accelerators cap
    878470256e src: report error from failing to add timer/FD watches
    9b7ef8058b conf: Don't leak virDomainDiskDef's 'statistics' member
    7ee9dbacbe qemu: Add support for enabling timed block device statistics collection
    19fc614d53 conf: Add configuration option for timed disk statistics collection
    1c4234b34e qemu: capabilities: Introduce QEMU_CAPS_DISK_TIMED_STATS
    166be0d48c Expose qemu timed block statistics via bulk stats API
    6914b4f2a5 qemu_monitor: Extract 'timed_stats' of block devices
    d1eafbe88b Expose qemu storage request limits via bulk stats API
    c33e5971b1 qemu: monitor: Extract block limit values
    c177003d4d qemucapabilitiestest: qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.1.0-1969-g53b41bb789'
    ed0f489352 qemu: capabilities: Fix logic for formatting 'reconnect' parameter
    d0316c24ca qemu: capabilities: Retire QEMU_CAPS_CHARDEV_RECONNECT
    ce0c3e0ea3 qemucapabilitiesdata: README: Add rules for dumps of unreleased qemu
    5e8698aa76 ci: Refresh with 'lcitool manifest'
    b100dabd6d rpm: change from fuse-devel to fuse3-devel
    258bb23e94 Remove arm from KVM arches
    ba16113c76 qemu: Ignore "ht" CPU feature
    4d5c1bc241 qemu_monitor: Filter CPU features reported by QEMU
    c15ae99dab qemu_process: Always fix CPUs on reconnect
    2ab6925218 qemu_domain: Fix qemuDomainFixupCPUs
    fbf44bc8cf qemu_domain: Simplify qemuDomainFixupCPUs
    fd6cf1b44a cpu_conf: Make virCPUDefFilterFeatures return void
    3c7e44d3c8 Post-release version bump to 11.10.0
    91f3e8b667 Release of libvirt-11.9.0
    cdbb3bc8d7 NEWS: mention 'manual' snapshot mode improvement
    73b99b2ba0 Translated using Weblate (Portuguese)
    4bc00fd6da Translated using Weblate (Portuguese)
    d31a4a2c78 Translated using Weblate (Portuguese)
    f80eec7eab NEWS: Document features/improvements/bug fixes I've participated in
    05ca6be8a6 Translated using Weblate (Ukrainian)
    b59bed2603 Translated using Weblate (Portuguese)
    63e989cc26 docs: drvbhyve: document NVMe device
    cc2b022c35 NEWS: document bhyve changes for 11.9.0
    86bba8f1d9 drvch: Document config file locations
    3299ce060f ch: Load ch.conf from SYSCONFDIR
    4c5021bc92 drvch: Demote example section to a subsection
    a96a4b04e1 docs: Document supported URIs for CH driver
    47683ca63d Update translation files
    339ff29e5d po: Refresh potfile for v11.9.0
    fa89c178a5 domain_conf: Avoid memory leak in virDomainMemoryDefFree()
    ccc0538329 NEWS: Document virtio options for memory models
    e6d1cb69d5 qemu_command: Generate virtio options for memory device
    4848c85053 conf: Introduce virtio options for virtio memory models
    3c6d7f2705 qemu: Use virDomainMemoryIsVirtioModel()
    0d46a1f4d5 conf: Introduce virDomainMemoryIsVirtioModel()
    6787f82cfc domain_conf: Switch to virXMLFormatElement() in virDomainMemoryDefFormat()
    30eab13fc9 domain_conf: Make virDomainMemoryDefFormat() return void
    93c4b1bf55 bhyve: support specifying disk rotation rate
    4d70b2c783 bhyve: nvme: check if NVMe is supported by bhyve
    a997aee58f bhyve: do not allow more than one NVMe device per controller
    8d9bf732a7 bhyve: tests: cover 2 NVMe devices on 2 controllers case
    79e46b1698 bhyve: implement NVMe device support
    1ab27a5b96 Translated using Weblate (Italian)
    6038ed07c2 Translated using Weblate (Spanish)
    d207136b5d Translated using Weblate (Finnish)
    02266588b4 Translated using Weblate (Russian)
    92e1519395 Translated using Weblate (Portuguese)
    0a30b6d2e5 qemuDomainBlocksStatsGather: Fix blockstats gathering after refactor
    f6ea64f182 conf: never reject <disk> <seclabel relabel='no'> overrides
    be638396f0 NEWS: ch: announce network hotplug feature
    058df74ed6 ch: implement network device hot detach
    92441ba35a ch: implement network device hot attach
    6a4c59e993 ch: add net device alias assignment
    b90cf0c916 apparmor: Allow AMD-SEV device access for AMD-SEV VM
    d8d3595851 qemu: Drop /dev/kvm from default device ACL
    f3f8408975 NEWS: Document Hyper-v never notify feature for spinlocks
    66a47f8049 qemu: Update hyperv spinlock retries count default
    d0de1b89be qemu: Fix hyperv spinlock retries count type mismatch
    6862969cf8 qemu: forbid readonly attribute for externally launched virtiofsd
    69e5ad478e qemumonitorjsontes: Properly free blockstats
    45f49ad340 Remove qemuMonitorBlockStatsUpdateCapacityBlockdev
    5b0fd22920 qemuMonitorJSONGetAllBlockStatsInfo: Directly probe data from 'query-named-block-nodes'
    a189ad03bb qemuMonitorJSONBlockStatsUpdateCapacityData: Merge into caller
    5485e7e832 qemuMigrationCookieAddNBD: Use qemuBlockGetNamedNodeData to fetch the capacities
    58aa005f3e qemu: monitor: Rework qemuBlockStats into a g_object
    d35e519dca qemu_monitor_json.h: Use consistent function hader coding style
    6773f77dad qemu_monitor_json.c: Use consistent function hader coding style
    74ca46972f qemu: monitor: Remove qemuMonitorQueryBlockstats
    96980df098 virNetDevVlanParse: Refactor cleanup
    e412761206 virNetDevVlanParse: Use g_autofree for temporary variables
    40c4e4c847 virNetDevVlanParse: Don't clear data on failure
    4c32ad3469 qemuxmlconftest: Add example for "sgio='filtered'" disk option
    1ebee849db docs: snapshot: Add a note that blockjobs ought to be avoided with 'manual' snapshots
    69e066c0ba qemu: snapshot: Allow snapshot consisting only of 'manual'-y handled disks
    2e19e68093 qemu: snapshot: Deactivate block nodes on manually snapshotted disks
    f879d5f403 qemu: migration: Don't reactivate block nodes after migration failure any more
    7b5566ce67 qemu: Re-activate block nodes before storage operations
    84ad496494 qemu: block: Introduce helper function to ensure that block nodes are active
    648b0ddb13 qemu: monitor: Track inactive state of block nodes in 'qemuBlockNamedNodeData'
    ac6b351b42 qemuDomainGetStatsCpuProc: Use string constants for CPU stats
    0c1a1f9fd4 qemu: Drop reconnectBlockjobs from _qemuDomainObjPrivate struct

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-15 11:01:15 -05:00
Bruce Ashfield
a7ac9b11d7 virt-manager: update to v5.1.0
Also as part of this update, we drop the python3-libxml2 depend and
rdepend. That package is no longer being generated by OEcore and is
scheduled to be removed from upstream libxml (so there's no sense
just brining the package here). Upstream virt-manager has been moving
to ElementTree for their xml handling/API requirements, so we count
on that to provide us what we need without the xml2 python bindings.

Bumping virt-manager to version v5.1.0-24-g35ad9057f, which comprises the following commits:

    35ad9057f virtinst: Fix XDG_DATA_HOME handling
    488389ced ci: Add gobject-introspection dep
    e1613dba5 ci: Fix test-against-libvirt-git
    a2baaf789 installer: add support to use device boot order
    3985b0746 virtinst: remove legacy attribute from set_boot_order/get_boot_order
    3a25792d9 virtinst: guest: introduce can_use_device_boot_order
    25670b2ee virtinst: rework get_boot_order
    161fb1baa maint: use constants instead of strings for boot devices
    e438a7724 ci: bump actions/checkout from 5 to 6
    411f019f8 virtinst: add support for pcihole64
    53df7b496 virtinst: add support for acpi-generic-initiator
    d57e2e738 virtinst: interface: add support for backend.hostname and backend.fqdn
    57e6f96f9 virtManager: wrapped details hw-panel with GtkScrolledWindow
    f9a01fbf9 metainfo: Add developer tag
    9e9252982 Rename AppStream metadata to rDNS format
    f907ede75 Calling loader.close() before pixbuf assignment to avoid NoneType pixbuf
    6fe47feca Fix typo in virt-clone documentation
    766bf2ecd xmlapi: add xmletree.py backend
    d0372e82c xmllibxml2: lazily import libxml2
    ff9fa95e5 xmlbase: fix parentnode None check
    d4988b02e xmlapi: split out xmlbase.py and xmllibxml2.py
    ea71cf9a8 virtinst: cloudinit: include empty meta-data file
    ecd280d59 addhardware: network: adjust supported network devices for bhyve
    a2c00ee84 ci: bump actions/setup-python from 5 to 6
    eb4898b19 Release of virt-manager 5.1.0
    8d7c3adb2 Update translation files
    5915dd09f po: Refresh translation template
    1427cc990 tests: urls: update old Fedora version
    84eaa535a Translated using Weblate (Japanese)
    f3f797c82 Translated using Weblate (Arabic)
    d3562d08a Translated using Weblate (Finnish)
    aa5f1bb79 Translated using Weblate (German)
    00a9046a9 details: Add support for startup policy for USB passed through devices
    6fefb9ee0 addhardware: Add support for startup policy for USB passed through devices
    e518ad262 addhardware: Add a function build_hostdev_usb_startup_policy_combo
    52752d1bf virt-install: Add source.startupPolicy for USB passed through devices
    9bf51435d virtinst: Do not assume virtio is supported on Arm virt
    9d0e875f9 virtinst: Do not require x86 for virtio
    b8861f10f virtinst: Use ramfb for UEFI on Arm
    0b10fd64d virtinst: Use sd only for vexpress
    2a14495ac virtinst: Fallback to usb instead of ide on non-x86
    dfcab03dc tests: Add virt-install-aarch64-win11
    d11245452 ci: bump actions/checkout from 4 to 5
    1ead880b2 virtinst: add support for creating TDX guests
    ead255cad Translated using Weblate (Turkish)
    a477190e8 Translated using Weblate (Arabic)
    84ee0a312 Translated using Weblate (Chinese (Traditional) (zh_TW))
    f28525d03 Translated using Weblate (Spanish)
    a44165a4f Translated using Weblate (Spanish)
    b6200b7f3 Translated using Weblate (German)
    df95dc1a3 Translated using Weblate (Polish)
    5a84d84b8 Translated using Weblate (Russian)
    bcbadd869 Translated using Weblate (Romanian)
    91a2ba307 Translated using Weblate (Italian)
    2df46a841 Translated using Weblate (Czech)
    528b2fce4 Translated using Weblate (Ukrainian)
    20cd9fcbd Translated using Weblate (Georgian)
    38e9b13d5 Translated using Weblate (Swedish)
    77015e612 Translated using Weblate (Portuguese (Brazil))
    2a6f7d435 Translated using Weblate (Korean)
    0c68d8bb9 Update translation files
    cf392cf04 Add keywords to virt-manager.desktop.in
    bd8fe24a1 chore: enable flake8-pytest-style for ruff
    67002f4b2 tests: rename test_create() helper to check_create()
    988b51392 virt-manager: improve feedback for unavailable system tray icon
    60f200bd2 ci: extend pre-commit configuration with ruff-check
    e022f4e0d chore: configure ruff for linting
    96d306bd3 chore: reformat .pre-commit-config.yaml
    83e4b5568 ci: rename & generalize black workflow
    27b788e44 chore: split string into different continuation lines
    7bd89f7cd chore: add inline noqa for E501 (long lines)
    201417e00 tests: simplify checking for untested XML properties
    c8d8c32fd tests: refactor URL test from ini files
    035abfbf9 tests: use pytest.raises() instead of try/except blocks
    85c43959c chore: avoid using 'l' as variable/parameter name
    48e907ec8 po: Refresh translation template
    3c1346479 Translated using Weblate (Catalan)
    4c67cbd05 Translated using Weblate (Chinese (Simplified) (zh_CN))
    44c9aa374 chore: remove extra parentheses
    c3df2ba5d chore: drop "object" inheritance
    c814183ba chore: concatenate strings in the same line
    d074f56e5 fix: move parameter out of gettext calls
    576b07bc6 chore: explicitly specify flake8 issue to silent
    2539b2637 fix: switch from logging.WARN to logging.WARNING
    e5cd614ca chore: use "not in/is" rather than "not .. in/is"
    a4ed49c83 chore: exclude E402 in wrapper scripts
    0ef185c15 data: improve desktop file
    4b89c39ee Add Ctrl+Alt+Shift+Esc key command for logind's SecureAttentionKey
    62f976a61 fix: default start_folder to None
    f901c3277 tests: add checks for cloud-init config files from URL
    80109ffeb virtinst: cloudinit: add support to fetch cloud-init config files from URL
    5b2d0997a virtinst: cloudinit: refactor creation of could-init config files
    30bbee361 virtinst: cloudinit: convert all functions to class methods
    515a50a83 virtinst: cloudinit: move all variables to init
    4e51b595a Translated using Weblate (Spanish)
    e7cbaab55 Translated using Weblate (Chinese (Traditional) (zh_TW))
    af9baaceb Translated using Weblate (German)
    e17c3ef3a Translated using Weblate (German)
    237896029 Validation: allow spaces, disallow slashes
    443123ece virtinst: urldetect: detect Debian version for ISO images
    66aa81ae6 test_urldetect: arch is detected from the ISO media
    fbf7f060b virtinst: urldetect: figure out Debian arch from the ISO media
    4257e1974 virtinst: urldetect: move default Debian arch to _set_url_paths
    c8a5b8186 virtinst: urldetect: don't check x86_64 for Debian/Ubuntu
    3b3eac28a test_urldetect: use fake badarch Debian
    fb71f02fa uitests: Add coverage for mixed internal and external snapshots
    09574977d uitests: fix testManagerDefaultStartup race
    6458f09b7 uitests: fix testNewVMSession after networking changes
    f31287249 uitests: fix `push button` usage on fedora 41
    4f9618289 virt-install: detect wayland in order to start virt-viewer

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-12 11:54:44 -05:00
Bruce Ashfield
8339891ada rootlesskit: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
ce23494e15 nerdctl: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
e05c2caec1 k3s: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
175bf1f03c docker-compose: convert to hybrid gmod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
2bee001d6d go-mod: introduce hybrid mode
Introduce the ability to have hybrid gomod:// and git:// repositories.

This allows SRCREV bumping when fixing bugs, and using the git archiver
for some, all or none of the modules in a go mod project.

 Example: k3s Hybrid Conversion

 1. Ensure VCS mode works first
 bitbake k3s

 2. Get recommendations
 bitbake k3s -c go_mod_recommend

 3. Convert with recommended prefixes (keep containerd, k8s.io as git://)
 python3 ./meta-virtualization/scripts/oe-go-mod-fetcher-hybrid.py \
    --recipedir ./meta-virtualization/recipes-containers/k3s/ \
    --git "github.com/containerd,k8s.io,sigs.k8s.io,github.com/rancher"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
2385a74140 docs: add QUICKSTART for go-mod-vcs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
4d63f76992 rootlesskit: update to v3.0.0-alpha.1
Bumping rootlesskit to version v3.0.0-alpha.1-2-g8059d35, which comprises the following commits:

    64d4cd5 v3.0.0-alpha.1+dev
    7ae0e6b v3.0.0-alpha.1
    45e4ed5 Build(deps): Bump golang.org/x/sync from 0.17.0 to 0.18.0
    02054ac Build(deps): Bump golang.org/x/crypto from 0.42.0 to 0.45.0
    6794af3 Build(deps): Bump actions/checkout from 5 to 6
    4a3a5b7 ci: fix missing tag variable in release note generation
    a91432a  network/port driver build tags support
    476cdb6 Build(deps): Bump github.com/gofrs/flock from 0.12.1 to 0.13.0
    41e185f v3.0.0-alpha.0+dev
    ec10409 v3.0.0-alpha.0
    d62c5f8 go.mod: bump up
    ce86985 port.md: update benchmark description for gvisor-tap-vsock driver
    d0d6c23 go.mod: update gvisor-tap-vsock to v0.8.8 and improve port driver benchmarks
    3c14934 refactor: replace Debugf with Debug for logging messages
    185f2b1 bump go to version 1.24 (version 1.23 is not supported) update go.mod and go.sum for dependency upgrades and fix gvisor-tap-vsock compatibility
    bd8b631 Add gvisortapvsock port driver support
    2b6262a Build(deps): Bump actions/attest-build-provenance from 2 to 3
    ce8c7b4 Build(deps): Bump actions/checkout from 4 to 5
    ec9c22a Build(deps): Bump golang.org/x/sys from 0.34.0 to 0.35.0
    0c30f0a Build(deps): Bump golang.org/x/sys from 0.33.0 to 0.34.0
    ae984d4 network: add support for gvisor-tap-vsock driver and integration tests
    41fac7c Build(deps): Bump github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0
    718a551 Build(deps): Bump github.com/urfave/cli/v2 from 2.27.6 to 2.27.7
    2ca0537 Implement Pdeathsig behavior for child processes and enhance integration tests
    cc4f3f5 child: refactor command execution to use goroutines with Pdeathsig
    b5ddfeb v2.3.5+dev
    0cc0811 v2.3.5
    f2dc076 Build(deps): Bump golang.org/x/sys from 0.32.0 to 0.33.0
    32e2a2a Dockerfile: update test deps
    56ecf67 Build(deps): Bump github.com/moby/vpnkit from 0.5.0 to 0.6.0
    4a92456 Build(deps): Bump github.com/containernetworking/plugins
    a21cdd9 Build(deps): Bump golang.org/x/sys from 0.31.0 to 0.32.0
    f7ae285 Build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0
    968358d Parameter for ISA of binaries
    8d196ce Build(deps): Bump golang.org/x/net from 0.33.0 to 0.36.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
45441d41bc rootlesskit: convert to go-mod-vcs format
1. Removed rsync-native from DEPENDS (no longer copying vendor directories)
  2. Removed include src_uri.inc and include relocation.inc
  3. Removed SRC_URI += "file://modules.txt" (vendor/modules.txt not needed)
  4. Added include go-mod-git.inc and include go-mod-cache.inc
  5. Added go-mod-discovery configuration variables
  6. Added inherit go-mod-discovery
  7. Simplified do_compile() - removed -mod=vendor, vendor symlinks, and modules.txt copy
  9. Added a patch to fix buildpaths in the binaries

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
5760ab3c50 go-mod: make extracted files writeable
Make extracted files writable so BitBake can clean them later
Go's module cache is read-only by design, but this breaks rm -rf
and our subsquent task runs will fail.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
38e9d728a3 docker-compose: update to v5.0.0
Bumping compose to version v2.26.1-849-g9fada6cc2, which comprises the following commits:

    9fada6cc2 Bumped build images: tonistiigi/xx:1.9.0, crazymax/osxcross:15.5
    85ea24b62 Fix grammar: pluralize 'service' and remove apostrophes in lets
    000a4a4b9 check buildx version before comparing it
    08de90c26 bump golang 1.24.11
    cfcee45a8 fix SDK example
    13d70b1c1 refactor: replace interface{} with any for clarity and modernization
    72f4d655e Bump compose go to v2.10.0
    dc66e6bad golangci-lint: use gci formatter instead of goimports
    8d9d5259e Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    b32297dcc add --wait option to start command
    af8cac576 just warn user
    8477a85ce feat(model): reject runtime flags in model configuration
    6ee714635 build(deps): bump golang.org/x/crypto v0.45.0
    f28503426 build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0
    e0977c2df only check for env_file
    2d569916f skip includes preparing publish
    3975f0215 refactor: use strings.Builder to improve performance
    fa832d72d Added support for build.no_cache_filter
    822f5a702 refactor: replace Split in loops with more efficient SplitSeq
    68bb7a71b bump dependencies
    6f365395e Fix support for port range
    305293462 build(deps): bump github.com/docker/buildx from v0.29.1 to v0.30.0
    428abab16 build(deps): bump github.com/moby/buildkit from v0.25.2 to v0.26.0
    755618e70 build(deps): bump go.opentelemetry.io/otel v1.38.0, go.opentelemetry.io/contrib v0.63.0
    c47b8c32e Dockerfile: update golangci-lint to v2.6.2
    89d394483 fix linting issues
    f2b14fe1a gha: use custom names for matrix
    bd2257b6d gha: test against docker v29, v28
    d7e5f20eb images command should display image Created time or N/A if not available
    2b4543935 next release will be major version v5.x
    f0dce1b97 sdk docs: patch
    6e55832b1 add (restore) support for detach keys
    45def5111 make DRYRUN_PREFIX a display attribute, move DryRunClient out of pkg/api
    aff5c115d move progress UI components into cmd
    5ef495c89 removed unecessary check
    9de7e2a38 SDK docs
    dc90c4e44 Grammatical fix
    91e1753d8 Grammatical fix
    9db27a65c Making the American/British spellings consistent to the error messages
    efd7424da build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0
    02109c8d3 build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0
    c37ede62d on up buildOptions must include all enabled services
    7eb5adeef introduce --insecure-registry, reserved for testing purpose
    0793ad7c6 document support for OCI and Git remote resources
    8137b2bce build(deps): bump github.com/docker/cli
    4e3372b47 build(deps): bump github.com/containerd/containerd/v2
    fef26fb37 build(deps): bump github.com/docker/docker
    a32e13a2b build(deps): bump github.com/moby/buildkit from 0.25.1 to 0.25.2
    67e39a41f fixes
    dc1283289 fix: use NewParallelCLI in compose_run_build_once_test.go
    0c596ed3c build(deps): bump github.com/containerd/platforms
    13870006f disable progress UI when build is ran with --print
    af579ebd4 drop support for internal buildkit builder
    fc2a7d13f from Compose CLI, we know the streams used to configure LogConsumer
    d70bb8cf5 distinguish event (short) status text and details
    bff3d3530 render events in order they were first received
    b80bb0586 Migrate CLI commands to use LoadProject API
    d74274bc0 Add LoadProject method to Compose SDK API
    10f15cacd fix typo in error message
    3658a063b add AlwaysOkPrompt to replace 'AlwaysYes' current implementation'
    74a4ccdd8 fix various linting issues
    6719f47bd test checking bake internal load build definition
    3eb2934eb bump compose-go to version v2.9.1
    c416ea703 fix compose_run_build_once_test.go
    0d396bbac fix(git): Add validation for Git subdirectory paths to prevent traversal
    fc74c7896 Update e2e tests in compose_run_build_once_test.go to use project names for Docker Compose commands.
    658bff335 Revert "no parallel in compose_run_build_once_test.go"
    80030e139 no parallel in compose_run_build_once_test.go
    6a35be511 lint fix
    0c854a6ab add e2e tests
    557e0b6ec fix(run): Ensure images exist only for the target service in run command
    a8933c91e stop progress UI during build to prevent interference with buildkit Display
    7e3993bca skip Start[ed|ing] events to avpd mix with container logs
    fd4f2f99c register TTYWritter as an Event Processor
    ae25d27e5 remove unused RunWithStatus, always pass operation as title
    394466683 use eventBus to collect tasks progress
    e5c8b6864 decouple Event from tty progress writer
    bf50c9919 pretend cli.Out is a containerd console.File
    8274be8d0 configure Compose service with io.Reader and io.Writer remove usage of internal IO interfaces
    86e91e010 Add streamOverrideWrapper to intercepts command.Cli stream methods and transparently returns custom streams when provided via options Add new GetConfiguredStreams function to Compose API definition
    e1678c5c4 Introduce abstractions to support SDK usage without requiring Docker CLI
    5924387e8 run hooks on restart
    7f668bd7f Setup Compose service using functional parameters This commit introduces WithMaxConcurrency and WithDryRun to replace direct mutators on composeService commands and flags are translated into a set of functional parameters which are eventually applied as a ComposeService is created just before being actually used by a command
    3ce52883c prompt default implementation to prevent a panic
    ac3b8fd8a Code Cleanup
    8619f5d72 Fix help output for "exec --no-tty" option
    e59150baa fix OCI compose override support
    6a90742ef Test to check writeComposeFile detects invalid OCI artifact
    6007d4c7e publish env_file references as opaque hash to prevent paths conflicts
    69bcb962b Enforce compose files from OCI artifact all get into the same target (cache) folder
    9b4fcce03 introduce WithPrompt to configure compose backend to use a plugable UI component for user interaction
    da5c57c29 test digest or canonical reference, not only tag, when checking if an image is already present
    e25265dd5 remove unused code to only rely on api.Service
    e19e1278b fail build if minimal required version of buildx isn't installed
    585c4db4f Compose can't create a tar with adequate uid:gid ownership as we can't get container UID/GID as int by ContainerInspect revert https://github.com/docker/compose/pull/13288
    be8c7e6c6 make CTRL+Z a no-op operation on Windows
    27f59d7f4 Detect failure to access os.TempDir
    2681ed17a mutualize code from injectSecrets / injectConfigs
    ee75be342 Set secret/config uid:gid to match container's USER
    157617480 fix race-condition bug in publish command
    88aae9c46 support Ctrl+Z to run compose in background
    775530234 use fixed version of compose bridge transformer images to avoid CI issue on Compose when a new version is released and change the outputs
    147923c44 bump golang to version 1.24.9
    289faae5f fix(publish): in `publish()`, select all profiles in the `project` to publish.
    e7aa484b7 fix(publish): in `processFile()`, load the compose file passing the `project.Profiles` to the `loader.Options`.
    ae3309afa pkg/compose: build with bake: drop support for buildx v0.16 and lower
    0b5fb36eb build(deps): bump docker/buildx v0.29.1, moby/buildkit v0.25.1
    63920c4cc pkg/compose: align classic builder implementation with docker/cli
    a03f2562d bake only interpolates ${*}
    a07f2b8de build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0
    f45a3ebcf build(deps): bump github.com/docker/cli
    7fec70b6c build(deps): bump github.com/docker/docker
    ce463d50b Fix: set PWD only if not set
    fa7e85ed8 Write error to watcher error channel if Start() fails
    d9423f687 build(deps): bump github.com/docker/cli
    5add90240 build(deps): bump github.com/docker/docker
    07602f207 publish Compose application as compose.yaml + images
    cf7e31f73 escape $ in bake.json as interpolation already has been managed by compose
    fa0812745 use containerd client for OCI operations
    4ee52ad16 pass bake secrets by env
    4a4776ec5 cmd/compose: fix minor linting issues
    713de5bb9 pkg/compose: explicitly map AuthConfig fields instead of a direct cast
    9ded1684c gha: update test-matrix: remove docker 26.x
    8bc8593fd provider services: use '--project-name=' notation
    8978c1027 use containerd registry client
    032e0309e cmd: pluginMain: use WithUserAgent option
    38ba35e16 pkg/mocks: re-generate mocks
    56e0ba808 build(deps): bump github.com/docker/docker, docker/cli v28.5.0-rc.1
    9752fa550 pluginMain: remove uses of DockerCLI.Apply
    4761fd88b pkg/compose: build: remove permissions warning on Windows
    02c8e6354 pkg/watch: remove unused IsWindowsShortReadError
    ab7a6e932 pkg/compose: remove uses of deprecated mitchellh/mapstructure module
    2ca7b96e3 resolve secrets based on env var before executing bake
    a32dc3da7 test: Set stop_signal to SIGTERM
    db260938c bump compose-go to version v2.9.0
    5aea94794 Update comment on run command with tty & piped command
    d07c437ce dectect if piped run command and disable tty if so
    da72230c3 remove tty attribute from run options and use dedicated variable to avoid confusion
    a429c09df fix support for build with bake when target docker endpoint requires TLS
    df3c27c86 add deprecation warning for x-initialSync + e2e test
    956891af5 add support of develop.watch.initial_sync attribute
    a47334105 volume ls command can run without a project
    385b3f5c9 bump compose-go to version v2.8.2
    2d482e61c propagate docker endpoint to bake using DOCKER_* env variables
    c75418ee0 Apply suggestions from code review
    0cdc5c9bf rename --no-TTY => --no-tty for consistency
    b768232c0 document (hidden) --tty --interactive flags
    09689400e fix run --build support for service:* reference in additional_context
    cb3691154 detect container is restarted
    b387ba4a0 only load COMPOSE_* from $PWD/.env
    7cd569922 only propagate os.Env to bake, not the whole project.Environment
    eec2bb7ea only force plain mode build if progress is set to auto
    2c15aef2e build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0
    290366205 build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0
    a91ca95a7 bump golang to version 1.24.7 to align with moby/moby version
    beb81a73f pkg/compose: remove aliases for container-state consts
    f21720787 pkg/compose: use state consts from moby API
    02ffe2ac6 prefer application container vs one-off running `exec` without index
    f48131fb6 build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    4dd369bdc fix sigint/sigterm support in logs --follow
    ad73766bf build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to 0.28.0
    3c1f5a181 go.mod: bump github.com/docker/docker, docker/cli v28.4.0
    42d1e4c33 build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    6ca8663bd build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    b33ecf65e go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2
    04b8ac5fe Unquote volume names in creation events
    d09948da4 build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    f1efbb832 use enum-consts for State and Health
    1d52012b8 go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1
    1d69f4a68 pkg/compose: composeService.Up: rewrite without go-multierror
    6078b4d99 Fix: use image created time when last tag time is not present Signed-off-by: Kian Eliasi <kian.elbo@gmail.com>
    73e593e69 Fix: incorrect time when last tag time is not set
    51499f645 pkg/compose: pull: use native multi-errors
    5165b0f81 internal/tracing: replace go-multierror.Group with sync.WaitGroup
    93dd1a455 internal/sync: replace go-multierror.Group with golang.org/x/sync/errgroup
    ba3f5664c cmd/formatter: remove unused SetMultiErrorFormat
    c420bc44c check the assume yes publish flag command before the presence of bind mounts
    60681a824 Add e2e test to verify `docker compose down` works even when env file is missing
    19ad737ee Fix runtime ops with missing env file
    d3a260e53 add completions for the --progress flag
    e75329dce build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0
    1dc0be2c3 go.mod: github.com/docker/buildx v0.27.0
    3bac9ffd0 Refactor to use maps.Copy
    f266715dd add --provenance and --sbom flag to generated bake command line, also add attestation per-service configuration to generated bake target
    c2cb0aef6 only monitor attached services on up command
    fbc62d111 bump golang to 1.23.12
    0d40064ce build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0
    91a6eafa1 build(deps): bump github.com/docker/go-connections from 0.5.0 to 0.6.0
    f36ee00f7 Add go as a prerequesite in build instructions
    29ede3ba7 build(deps): bump github.com/containerd/containerd/v2
    bf6d7bf47 define pull and no_cache from either service or flags values when building with bake
    fc66da06d pkg/compose: simplify getting auth-config key
    909211dd6 use cli-plugins/metadata package
    0dc9852c6 build(deps): bump github.com/docker/docker
    a47870223 build(deps): bump github.com/docker/cli
    2c12ad19d use log API for containers we didn't attached to
    038ea8441 apply BUILDKIT_PROGRESS value when building with bake
    9e98e6101 add missing _MODEL suffix to model variable pass to dependent services of a model
    52f04229c fixed lint error
    28895d032 fix lint error
    a926f7d71 Elimneted magic string
    fe046915e buildkit require os.Stdout to access the raw terminal
    adbd61e5d fixed lint error
    e37ac0432 deleted useless comment
    cab2c2a44 Refactoring of redundant condition checks
    1946de598 improved lint error
    8e29a138a improved test
    3c8da0afe Add test of json.go
    1b12c867c add Streams Comment
    1a4fc55fd bump compose-go to v2.8.1
    efc939dce add info about models usage to OpenTelemetry spans
    d6e9f79ba Integration of SetAttributes calls
    b4c44a431 Eliminate magic number in init functions
    fb5a8644c Efficiency of ansiColorCode function
    95660c5e5 bump buildx to v0.26.1
    f6ddd6ae8 use output registry when push true and load to docker store if not
    4ae706695 build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
    fd954f266 show build progress during watch rebuild
    d62e21025 forward git command error to user
    6a2d16bd1 bump compose-go to version v2.8.0
    4d47da6dc do not pass user id on Windows system as engine is not able to handel it
    8f91793fb introduce build.provenance and sbom support
    1d2223fb2 pkg/compose: use local copy of pkg/system.IsAbs
    d4f600071 remove import aliases for containerd/errdefs
    c50d16cd7 pkg/compose: remove uses of moby/errdefs
    3875e13fa simpler stop UI
    c89f30170 force plain displaymode if stdout isn't a terminal
    41a9b9188 warn user COMPOSE_BAKE=false is deprecated
    5fc2b2a71 fix yaml indentation
    b1cd40c31 swarm
    362ab0733 build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7
    f35d2cfb3 monitor must watch events even when context is cancelled
    17ba6c718 abstract model-cli commands execution with a model (pseudo) API
    1c37f1abb use logs API with Since to collect the very first logs after restart
    485b6200e (refactoring) introduce monitor to manage containers events and application termination
    8c17a3560 don't run navigation menu if stdin isn't a terminal
    6b9667401 fix the helm bridge e2e tests after the latest update of the templates
    9a1e589ce Fix report image name in bake result
    5e147e852 add default compose labels to images built from bake
    29308cb97 keep containers attached on stop to capture termination logs
    0b0242d0a add dry-run support to bake build
    5a704004d Add a space character to separate the timestamp from the log message
    cb9591001 chore: print model attribute instead of model name used in compose file
    f42226e35 feat: add --models flag to config command
    0cc3c7a55 bump dependencies
    f7ee9c8a0 feat(os): add FreeBSD support
    35efa97b7 feat: add since & until flags to events command
    9e17a091b build(deps): bump github.com/docker/docker
    4bbc6c609 add USER_AGENT variable to cmd when shellouting
    69f1430a4 resolve Dockerfile symlink but file name
    7cf7c6414 build resolves enabled service after project has been loaded
    0e0ed91a3 fix: lint errors
    66524e772 feat: add --networks flag to config command
    c626befee fix the way we're checking if the provider metadata are empty or not
    60ee6adcd a single place for shell-out command setup
    8faf1eb80 build(deps): bump github.com/docker/cli
    3b0601b67 build(deps): bump github.com/moby/buildkit from 0.23.1 to 0.23.2
    f42374bb1 add a Done event to model progress display
    b046a5ef7 chore: fix some minor issues in the comments
    1570c6c07 bump go-viper/mapstructure to version v2.3.0 Fix https://github.com/advisories/GHSA-fv92-fjc5-jj9h
    674e13fb6 bump golang to v1.23.10 Fix Vulnerability Report: GO-2025-3751
    6fa173124 (reactoring) avoid a global variable by introducing logConsumer decorator
    2c69fc3d4 pkg/compose: remove redundant uses of strslice.StrSlice
    317ebcd3b implement model_variable
    5cf1f0e2a bump compose-go to version v2.7.1
    6198ed5bd fix linting errors
    00ccddbde add volumes command test cases
    63b441401 add volumes docs/reference/
    3a7982fe4 add service filter to volumes command
    5430caa17 add volumes command
    ee1b1e0a9 run docker model configure
    26e46d7cc e2e tests in CI
    a9e76943f introduce support for models
    b6a0df8d3 e2e compose run --env
    5a063b751 fix provider concurrent environment map accesses
    ae49bba9b build(deps): bump github.com/docker/docker
    51acc5845 mount /var/run/docker.sock for --use-api-socket
    7c999d7f9 improve publish bind mount warning message
    ad750d614 remove publish limitation on bind mount list all bind mounts and ask user validation before publishing
    fe382df50 build(deps): bump github.com/docker/cli
    6501d59ef pass project.environment to bake
    33a782572 fix: typos
    65803ea12 remove error message from exec outpout by default Add the error as a log for verbose mode
    f61337937 make sure the post_start hooks fails before we were assuming the container will be close before the post_start will be executed
    3553aa26a add a default statut messsage to exec error to avoid empty line display
    257ea7b75 Swap to Reader in bake to avoid hangs on output
    d219aa66f don't fail down cmd if services with pre_stop hook already stopped/removed
    c9ebfad78 exclude provider services from the list of dependencies that Compose should wait for
    8e57362a0 use errdefs.IsNotImplemented to check if the logging is not implemented
    29630f184 check progress default value instead of empty string to use BUILDKIT_PROGRESS env variable value
    6514c680a only expose API socket to service asking for it
    3394bf031 propagate target docker host set by --host to Bake
    832a08f57 build(deps): bump github.com/moby/buildkit from 0.23.0 to 0.23.1
    aadce87b1 inject secrets/config just before container is started
    b3207c455 setting buildOptions.Services triggers image to be always rebuilt
    769b7391b don't create from run command during dependencies creation process
    149b882eb don't create from run command during dependencies creation process
    c97e40e2b pkg/compose: remove uses of ExecOptions.Detach
    22e23bd4d networkMode
    2dde5faeb add support for cache_to with bake
    f7825a56b bump buildx to v0.25
    4cf075ea0 bump compose-go to v2.6.5
    4f491ffa9 fix panic using w shortcut on project without watch support
    ea1c26d22 restore ContainerName in images --json
    9a5fa05ad add (temporary) support for use_api_socket
    276c22945 move `run` logic inside backend
    eef448dc6 build(deps): bump github.com/containerd/containerd/v2
    343117233 build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
    f599a8cdd add support for extra_hosts building with bake
    63b06f556 fix panic on failure starting plugin server
    1d34661e9 fix support for additional_contexts with service sub-dependencies
    0f9e6ab83 Fix the generated manifest for compose artifacts so that the empty config is not added as a layer.
    15c9651a3 restore os.Remove(metadataFile)
    4893a8b9a don't create metadatafile, just generate a random name
    97530790f only look for required image in bake metadata
    213c03f99 produce bake targets for all services, group for services to build
    ebd7b761f sanitize service name so they can be used as bake targets
    ea48480d8 Restore images format list format behaviour
    8151b5928 bump golang.org/x/sync v0.15.0
    ec49baca5 do not forgot to remove the bake metadata file few DD e2e tests failed on Windows due to permission issues
    7b9ad9624 fix SIGSEGV on Enable Watch
    9b67a48c3 (refactoting) Move watch logic into a dedicated Watcher type
    0d0e12cc8 use Bake by default
    92fafccfb add validation for required parameters of provider service when metadata are available
    fee8aee8f save provider metadata for Docker LSP
    40f5786e6 add support of metadata subcommand for provider services This command will let Compose and external tooling know about which parameters should be passed to the Compose plugin
    61e44da93 debug message to help diagnose platform mismatch
    0bf7d1ea2 pull does not require env_file being resolved
    80ace63df build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
    27e90a3fd end-to-end test
    3ca75bdf5 Fix the inability to restart the Compose stack after network configuration change
    eb3074bbd include platform and creation date listing image used by running compose application
    f4fc010d6 build dependent service images when required
    693b9ef07 fix support for BUILDKIT_PROGRESS
    046879a4a replace uses of golang.org/x/exp/(maps|slices) for stdlib
    7c79b2300 pkg/bridge: fix importShadow: shadow of imported package (gocritic)
    ad4cbee49 bump github.com/docker/docker, docker/cli v28.2.2
    60256a875 fix typo in suggestion log
    45bd60c33 resolve symlinks while making dockerfile path absolute
    cf89fd1aa also (re)start dependent services after watch rebuilt image
    23fef850b prefer use of slices.DeleteFunc
    12b73bea7 remove utils.Contains to prefer slice.ContainsFunc
    2e71440be refactor: use slices.Contains to simplify code
    d49a68ecb bridge - run transformer container as current user
    be83f63f2 add e2e tests for bridge convert and transformers ls commands
    9a9227ce6 add new bridge commands documentation
    024f8ebdc add convert subcommand to bridge command
    8c622da20 add bridge command and transformations subcommands
    bbb2b76a1 bump cli-doc-tools to v0.10.0 and update the documentation to pass CI checks
    e45e58b3e bumpd buildkit v0.22.0 and buildx v0.24.0
    f52af4c86 bump compose-go to v2.6.4
    a54814ff3 e2e test
    a2d7548ca fix up --build with additional_context dependency
    8a2cb90a3 example provider implementation
    cc50ada72 report error (re)creating container
    5c74f0799 build(deps): bump github.com/containerd/containerd/v2
    7e198ee6a remove provenance build flag for now
    0566431c6 only use attestation when building image outside the development inner loop when building a image, by default attestation are generated and modify the image ID which trigger a container recreation on up, run command even if there isn't any changes on the image content itself
    4f6cc2a33 run ContainerStart sequentially
    2352a4a01 introduce config --lock-image-digests
    1f076a378 bump compose-go to v2.6.3
    009a23951 remove convert alias from config command
    305957428 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
    1229a6938 build(deps): bump github.com/containerd/containerd/v2
    f2a88e02a ensure build dependencies are enabled
    7f9101845 report cancelled pull after another one failed
    944e5e67a do not throw an error on build with provider services
    23fc76a54 Fix quiet option when using COMPOSE_BAKE=1
    053d22582 append .exe to provider name doing executable lookup on windows
    93b597cce remove Docker EULA licensing which isn't relevant since Docker switched to a subscription model
    4dcaf94c3 add support of 'debug' messages in the communication between Compose and provider binaries
    07e7619f4 set provider environment
    ed81185c5 fix provider info message
    22f8a7009 provider.options can be an array
    91a0aa026 skip push step for provider services
    7cea455c4 simplification
    559a51e59 build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0
    480a556bf build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0
    626336119 build(deps): bump github.com/moby/buildkit from 0.21.0 to 0.21.1
    9ee03c3fe bump compose-go to v2.6.2
    4bf18d232 docs: regenerate
    f0f47a8aa e2e: add tests
    d6e3fa6d7 Fix config --variables not honoring the --format flag
    16e83f002 introduce build --check
    2dbef234d document behavior on missing extension
    20f0ffec0 seach for provider binary in PATH
    cee6a3c66 document extensibility using service.provider
    fc8c56b40 select services implicitly declared by a service:xx build dependency
    9c998a934 fix collect image digests for service images built by bake
    0403f0d76 e2e test for start_interval
    91d04a5ca build(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2
    d2274ebe6 display proper event message for provider services on up and down
    6e3565218 fix support for remote absolute path
    5bb46035c Set --progress flag default value from env if provided
    f8dae06df Add support for COMPOSE_PROGRESS env variable
    955e4ed94 introduce networks.interface_name
    60385e606 bump compose-go to v2.6.1 fixing parsing of npipe as volume type
    f5491328b remove support of Synchronize File Shares integration with Docker Desktop
    f46689a75 build(deps): bump github.com/containerd/containerd/v2
    8fd0c297f build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
    f3bbfdae5 build(deps): bump github.com/docker/docker
    322c531a8 build(deps): bump github.com/docker/cli
    bf6b44726 fix: concurrent map writes when pulling
    a96c305b2 build: write --print output to stdout
    2d7cd2a99 go.mod: bump github.com/docker/cli v28.1.0
    cbb616ca0 go.mod: bump github.com/docker/docker v28.1.0
    640c7deae downgrade go-difflib and go-spew to tagged releases
    75b48cfc8 go.mod: bump github.com/docker/buildx v0.23.0
    047899c3e go.mod: bump github.com/moby/buildkit v0.21.0
    f91b41875 go.mod: bump github.com/docker/docker-credential-helpers v0.9.3
    42cccb1fe go.mod: bump golang.org/x/net v0.39.0
    674af0d66 go.mod: bump golang.org/x/crypto v0.37.0
    877d23233 go.mod: bump golang.org/x/term v0.31.0
    4bba13233 go.mod: bump golang.org/x/text v0.24.0
    a786e70b0 go.mod: bump golang.org/x/time v0.11.0
    13cd780f3 migrate to use github.com/moby/go-archive
    8e2f799cd chore: make function comment match function name
    2a84dfecf build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0
    f6913b086 build(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1
    d629fffa9 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
    7471e16d8 build(deps): bump github.com/moby/buildkit from 0.20.1 to 0.20.2
    51907d9f7 fix zizmor security alerts on GHA workflows
    a3f88a0a1 test to cover preference for bind API
    c83f1285a use bind API for bind mounts
    29e642e23 ci(bin-image): free disk space
    0c37c1096 mount API is not strictly equivalent to bind
    43cc2be8c build(deps): bump github.com/compose-spec/compose-go/v2
    01e83defc introduce volume.type=image
    846161d44 Fix linting issue with resp.Body.Close()
    0bcc629fb refactor: improve Desktop client structure
    482b62228 pkg/compose: implement Export using atomicwriter
    ee3314302 capture git fetch output when debug output is enabled
    cb0b5f6e2 build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0
    138485353 build(deps): bump golang.org/x/sys from 0.31.0 to 0.32.0
    096b1e32d plugin provider support: check docker model runner status
    bf71138df cleanup runPluging function
    a1f673dcf Update secret detector to fix vulnerability https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
    02c747a7d bump compose-go to custom version of v2.5.0 should be replace by v2.5.1 it will be released
    88f4f265d communicate with plugin using json events
    e67348222 DRAFT external services plugin support
    b54338070 feat(run): Add --quiet and --quiet-build options for the run command
    2e75185a0 bump golang to 1.23.8
    7bedb5a02 bump golangci-lint to version v2.0.2 and apply migration script
    f9cd4d0b1 bump docker,cli,buildx
    0badcf3c8 include implicit build dependencies in build command
    ec49db98d fix: replace docker-compose.yml with compose.yaml
    e5a353b34 fix: replace docker-compose.yml with compose.yaml
    43e456145 fix scale completion
    75368c785 introduce `build --print` to dump equivalent bakefile
    6e814eac3 fix(secrets): Reverted secrets file mode 440 -> 444
    a0d1c3f94 introduce config --no-env-resolution
    0c5bd16da bake parses "${}" in DockerfileInline as a variable
    b0badf1eb Set watch option --prune=true as default
    342a2a9e7 Fix support for depends_on.restart in up and restart commands
    7814e5798 build(deps): bump github.com/containerd/containerd/v2
    42b2e1109 build(deps): bump github.com/docker/buildx from 0.21.2 to 0.21.3
    6a8c0988c run only loads required service env_file and ignores others
    9129abe51 Fix edge-case bug path prefix check for watch & bind mounts
    f38f3f754 PWD
    ea07ba8e2 fix support for secret set by env inside included file
    432ae23b0 Test commandName subcommand order
    b6f313b8a bump compose-go to version v2.4.9
    13618756d make publish a regular command of Compose
    6c1e21572 lint: address gofumpt issues
    33e863ac6 fix linting issue
    f70209cf1 review: move Summary/Replica collection from cmd/ to pkg/
    62e832eb5 compose top: reduce tabwriter padding
    80e8fda14 compose top: ensure CMD is right-most column
    375a27978 top: expose container labels
    a766e1669 condense output of `compose top`
    793c6f171 add cli.isatty attribute to spans generated by compose
    8e3e1f7f8 build(deps): bump tags.cncf.io/container-device-interface
    83cafe283 Add support to pass env-from-file to docker compose run
    55b5f233c use Defang secret-detector to identify potential secret leaks before publishing OCI artifacts
    c3a0c3568 implement extends.file replace without yqlib
    8615e9a7c deprecate --y, prefer --yes
    b23728941 only load env_file after services have been selected
    1a7343bc8 build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1
    41e609404 add warning message when a remote configuration include an another remote config
    66a47169d Publish compose file with required siblings used by `extends`
    4c72d3a0e build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0
    59f39b999 build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
    7ab65ba12 build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0
    d9f05d72d improve message suggesting using bake
    7b88c5b0e display interpolation variables and their values when running a remote stack
    eaf980094 build(deps): bump github.com/opencontainers/image-spec

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
9d5c2aed90 docker-compose: update to go-mod-vcs format
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
aee553e9d9 go-mod-vcs: declare cache defaults
There are variables which are common to all recipes, declare defaults
to make recipe integration simpler.

Also, when creating the cache the messages are normal about synthesis,
etc, so reduce them to bb.note.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
0e22a16765 cni: update to v1.3.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
d2044c0e7b go-mod-vcs: missing go.mod is not a warning
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
56db9d52a1 go-mod-discovery: support multi-patckage build
When building multiple packages (./... or multiple targets), go build
requires the output to be a directory. Create the directory and use it.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
6c71c81ea5 cni: update to go-mod-vcs format
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
233ad1457f nerdctl: update to to v2.2.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
d59326817b go-mod-discovery: move patching after discovery build
When updating a SRCREV and then running discovery, we expect that
some patches will fail. We don't want that to block discovery as
these patches are not normally ADDING dependencies that would be
found.

So we move discovery before patch and patch failures can be dealt
with on a full build.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
b4dfb683a9 nerdctl: update to go-mod-vcs format
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
43a9e53dee oe-go-mod-fetcher: use dereferenced tags
Use dereferenced tag (^{}) to get the actual commit hash
For annotated tags, ref_hint returns the tag object hash, not the commit

Example: refs/tags/v1.0.1 -> c49ff274 (tag object)
         refs/tags/v1.0.1^{} -> 37c8de36 (actual commit)
         current_tag_commit = git_ls_remote(vcs_url, f"{ref_hint}^{{}}")

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
df651f904e discover: manage go.* files
The discovery repository can be in an incosistent state
after a build. By restoring the go.* files, we ensure a stable
start point.

Add automatic removal of go.sum files from git-fetched
dependencies in vcs_cache during do_create_module_cache.
This prevents checksum mismatch errors caused by stale
go.sum files in dependencies having different checksums
than the git-sourced modules.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
ae9fa39e6f go-mod-discovery: split into more tasks
To make it easier to run individual components of the go module
discovery and generation process, we add invidual tasks as well
as a combined task:

 AVAILABLE TASKS:

   bitbake <recipe> -c discover_modules
       Build project and download modules from proxy.golang.org
       This populates the discovery cache but does NOT extract or generate

   bitbake <recipe> -c extract_modules
       Extract module metadata from discovery cache to modules.json
       Requires: discover_modules to have been run first

   bitbake <recipe> -c generate_modules
       Generate go-mod-git.inc and go-mod-cache.inc from modules.json
       Requires: extract_modules to have been run first

   bitbake <recipe> -c discover_and_generate
       Run all three steps: discover -> extract -> generate
       This is the "do everything" convenience task

   bitbake <recipe> -c show_upgrade_commands
       Show copy-pasteable command lines without running anything

   bitbake <recipe> -c clean_discovery
       Remove the persistent discovery cache

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
02f6761794 k3s: convert to go-mod-vcs based build
Convert k3s from the old vendor/modules.txt approach to the new
go-mod-vcs build system that fetches Go modules via git.

Changes:
- Update k3s_git.bb to inherit go-mod-vcs class
- Add go-mod-git.inc with SRC_URI entries for all module git repos
- Add go-mod-cache.inc with module path mappings
- Remove old src_uri.inc, relocation.inc, and modules.txt
- Update to k3s v1.34.1+k3s1

The go-mod-vcs class will:
1. Fetch all module sources via git (defined in go-mod-git.inc)
2. Build GOMODCACHE with proper zip files and hashes
3. Enable fully offline, reproducible Go module builds

This eliminates the need for vendored dependencies or network
access to Go module proxies during the build.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
a303bf16ff scripts: add oe-go-mod-fetcher for Go module VCS resolution
Add the oe-go-mod-fetcher.py tool and supporting files for resolving
Go module dependencies via git repositories instead of module proxies.

oe-go-mod-fetcher.py:
  - Parses go.mod and go.sum to identify required modules
  - Resolves module paths to git repositories (handles vanity URLs)
  - Maps module versions to git commits
  - Generates SRC_URI entries for bitbake fetcher
  - Creates go-mod-git.inc and go-mod-cache.inc files
  - Supports monorepo detection and nested module handling
  - Caches resolution results for performance

extract-discovered-modules.py:
  - Helper script to extract module information from discovery cache
  - Used by go-mod-discovery.bbclass during build

Also adds .gitignore to exclude runtime caches from version control.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
9f40ce9b27 classes: add go-mod-vcs and go-mod-discovery for Go module builds
Add two new bbclass files that enable building Go applications using
git-based module resolution instead of network proxy fetches:

go-mod-vcs.bbclass:
  - Provides do_create_module_cache task to build GOMODCACHE from git sources
  - Implements pure Python h1: hash calculation with go-dirhash-native fallback
  - Creates properly structured module zip files and hash files
  - Handles module path transformations and case encoding

go-mod-discovery.bbclass:
  - Runs module discovery using the oe-go-mod-fetcher tool
  - Generates go-mod-git.inc and go-mod-cache.inc files
  - Supports bootstrap mode for initial recipe conversion

Together these classes enable fully offline, reproducible Go builds
by fetching module sources via git and constructing the module cache
during the build rather than relying on network access to module proxies.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
44c4e44db7 devtools: add go-dirhash-native for Go module hash calculation
Add a native recipe that builds the Go dirhash tool for calculating
h1: hashes on module zip files. This is used as a fallback when the
pure Python implementation cannot be used.

The tool implements the Go module hash algorithm per the Go modules
reference specification.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-08 20:57:44 -05:00
Bruce Ashfield
26e2b40b91 xen/x86: fix QA errors
The xen version bump brought in these QA errors:

  ERROR: xen-tools-4.21+stable-r0 do_package: QA Issue: xen-tools: Files/directories were installed but not shipped in any package:
    /usr/lib/xen/tests/test_x86_emulator
    /usr/lib/xen/tests/test-cpu-policy
    /usr/lib/xen/tests/test-tsx
  Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
  xen-tools: 3 installed and not shipped files. [installed-vs-shipped]
  ERROR: xen-tools-4.21+stable-r0 do_package: Fatal QA errors were found, failing task.
  ERROR: Logfile of failure stored in: build/tmp/work/x86-64-v3-poky-linux/xen-tools/4.21+stable/temp/log.do_package.2597669
  ERROR: Task (meta-virtualization/recipes-extended/xen/xen-tools_4.21.bb:do_package) failed with exit code '1'
  NOTE: Tasks Summary: Attempted 4228 tasks of which 4210 didn't need to be rerun and 1 failed.

We package two of the new files, and delete one host-compiled tool that
isn't used.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-03 17:25:26 -05:00
Bruce Ashfield
358452b4e5 kvmtool: update to -tip
Bumping kvmtool to latest, which comprises the following commits:

    7ad32e5 net/uip: Avoid deadlock in uip_tcp_socket_free()
    c4e9b3a virtio/pci: explicit zero unknown devices features
    ba6830e vfio: include libgen.h (for musl compatibility)
    1117dbc riscv: Allow including extensions in the min CPU type using command-line
    a50e8d8 riscv: Add cpu-type command-line option
    d47ad01 riscv: Include single-letter extensions in isa_info_arr[]
    b6e9f38 riscv: Fix no params with nodefault segfault
    1132ace riscv: Make system suspend time configurable
    fcc3160 riscv: Add SBI system suspend support
    0641ed8 riscv: Add Ziccrse extension support
    8be1c78 riscv: Add Zabha extension support
    a988086 riscv: Add Svvptc extension support
    2ab7f9f Sync kernel UAPI headers with v6.14
    ad9b731 util: Fix update_headers.sh after removal of 32-bit Arm code
    d410d9a arm64: Get rid of the 'arm-common' include directory
    0a10c48 arm64: Rename top-level directory
    4cd7b87 arm64: Move asm headers
    f8a539a arm64: Move remaining kvm/* headers
    7113578 arm64: Combine kvm-config-arch.h
    65878da arm64: Merge kvm-cpu.c
    14e8c42 arm64: Combine kvm.c
    5188575 arm64: Move arm64-only features into main directory
    329fe56 Drop support for 32-bit arm
    e48563f riscv: Add Ssnpm extension support

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:57:04 -05:00
Jaeyoon Jung
71801fb8a1 lxc: Fix build with musl
Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:49:04 -05:00
Kai Kang
4499b1b3f1 libvirt: set firewall backend priority
If firewall_backend isn't configured in the config file, libvirt will
choose the first available backend from the following list by default:

    [nftables, iptables]

so when nftables is installed in image, firewall backend nftables rather
than iptables is adopted.

Add a PACKAGECONFIG to set the firewall backend priority. And update
runtime dependencies for backend nftables.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:44:16 -05:00
Bruce Ashfield
18c8c60991 irqbalance: update to v1.9.4
Along with picking up the latest commits:

 - we drop our previously backported patch
 - make the init system selection more flexible, with a systemd
   PACKAGECONFIG
 - package the upstream .service file + support environment

Bumping irqbalance to version v1.9.4-85-g4c23485, which comprises the following commits:

    907b65f meson: force systemd-service installation with a seperate option
    14fb838 Fixed incorrect comparison in snprintf() in procinterrupts.c.
    5fdc1d6 Added missing '/' and fixed message in procinterrupts.c.
    030edf9 Safer string handling in procinterrupts.c.
    0a7ca36 Increase file descriptor limit via systemd service file
    ef80188 update workflows to ubuntu-24.04
    41cb97c Properly embed EnvironmentFile sourced systemd configs into meson and autonconf
    4996883 Unify meson and autoconf: Install executables to sbin
    ffa304a Fix the wrong string existence checking condition
    d602002 check_platform_device: Check the length of path
    105b155 Check API command length, allow up to 16384
    d434114 fix some GCC fanalyzer warnings
    3685d33 Use EPERM instead of EIO when try setting irq affinity fails
    1489ae3 irqbalance.1: a , b => a, b; it's type => its type
    25fa380 Check info->moved before updating
    196385b Add CAP_SETPCAP to CapabilityBoundingSet in irqbalance.service
    5d9eb19 Version option should return 0 rather than 1
    2860da4 Minor punctuation fix.
    42115bd define IRQBALANCE_ARGS as empty string to squelch systemd warning
    da75aae conver strncmp to g_str_has_prefix
    6f9f9e9 avoid malloc with create_credentials_msg
    4341808 use g_strdup_printf
    4d53728 gcc analyzer: increase socket_name size
    e39848b gcc analyzer: add NULL checks
    7622883 remove malloc from ucred
    a7cfbeb use g_malloc and friends
    13916f7 clang-tidy: remove pointless casts
    2ed4dd0 clang-tidy: don't assign in if
    16564e3 clang-tidy: add missing free
    d36ae56 direct initialize iovec
    5010a97 direct initialize msghdr members
    9851c8c Remove extraneous space causing --with-systemd not be aligned
    c90599b Disable linking to curses if --without-irqbalance-ui is specified.
    5405144 Track IRQ "slots" count per CPU to avoid overflowing
    d16ad5d Wrap migrate_irq in a higher level utility function
    44795ad CI: add meson CI
    e78ea26 clang-tidy: remove duplicate include
    02f7c17 clang-tidy: remove redundant declarations
    9b1ced2 clang-tidy: remove return in void functions
    2c3cbb5 clang-tidy: don't use else after return
    8f575ec replace malloc with g_malloc0
    4c1b0a0 clang-tidy: properly use strncmp
    122ae9e clang-tidy: don't assign in if
    80a8aeb ui: change void to char
    2e1bf90 meson: use find_library for numa
    280b89d meson: replace generic array with files()
    f2c8309 Drop ProtectKernelTunables
    23c6da7 meson: add a minimum version decorator
    ea733f4 meson: drop redundant install_man() options
    21e1ae8 meson: bump project version to 1.9.4
    922ee47 meson: move build files to repository root
    f2aebff cast void pointer to actual type
    b6a831d add void to fix strict-prototypes
    1277ea5 fix 32-bit formats
    8301666 Check fflush() return value
    c0cd614 irqbalance-ui: check if using a negative index of buffer
    f8b8cdd update configure to version 1.9.4
    8d7c783 Flush file before closing
    de0fe4a Fix socket API being blocked for 10s
    a99b604 Set additional systemd options for service
    f4d987f activate_mapping: set errsave before first jump to the error label
    b4c3771 Avoid repeated affinity checks when no change is necessary
    ad0ea2c Slience "... rebalancing" messages for unmigratable IRQs
    f3282f4 filter console only output when using journal mode
    43cace4 Enable systemd feature support by default when building with meson
    2c167c4 Add support for linking against libnl when building with meson
    73cc58c Turn NUMA support into an enabled feature, when building with meson
    1aed521 Set project version of meson build to 1.9.3
    f042291 Install man pages when building with meson
    2b59014 When building with meson, make sure to link against numa
    5635a2e Updating to version 1.9.3
    75a15c5 Automatically use systemd journal and run in foreground when under systemd
    bc7794d activate_mapping: avoid logging error when there is none
    eee7917 activate_mapping: only blacklist irq if error is considered permanent
    9a1fd29 activate_mapping: report error reason
    470a64b activate_mapping: make sure to catch all errors
    f589bdc activate_mapping: avoid use-after-free when affinity cannot be set
    4efc192 Revert "activate_mapping: fflush the buffered data to smp_affinity"
    8bbc0ae activate_mapping: fflush the buffered data to smp_affinity
    d02ec54 procinterrupts: fix initialisation of regex_t struct
    0e05127 Fix it so we actually stop when we hit an interrupt condition
    3920e06 Fix signedness of error handling
    ea1e9a7 Revert "Fix CPU number condition in service file"
    0e9acb6 Issue 259: select NL_SKIP / NL_STOP based on error
    f166b00 fix CPU number condition in service file
    c91bdf6 thermal: Fix log message for perf and efficiency
    f85c6c1 ui: do not force black background
    ac4ba06 irqbalance: fix memory leak in irq hotplug path
    bbcd9a4 procinterrupts: Fix IRQ name parsing on certain arm64 SoC
    178cf3b thermal: Fix the warning message
    efec4c6 allow AF_NETLINK in the systemd service restrictions
    7c18ffc optimize getting cpu number
    3ddaa30 updating to version 1.9.2
    febe697 change  the log level in thermal.c from error to warning
    b25b1f9 Avoid double free on deinit_thermal()
    014765d Fix uninitialized variable
    e10949e irqbalance: fix a minor typo
    ac05cb7 updating to version 1.9.1
    725d9b1 irqbalance: properly check if irq is banned
    402ca1b irqbalance-ui: display irq name in SETUP IRQS
    d48eaf6 irqbalance: use endptr to check whether the input parameter is empty
    c8d1fff irqbalance-ui: skip ',' in parse_setup to avoid coredump
    cfb15f0 Improve documentation and logging for banned cpus
    577796a irqbalance-ui: print cpulist in SETUP IRQS
    db7dc03 irqbalance-ui: support scroll under tui mode of irqbalance-ui
    a61b382 fix memory leak in ui/ui.c
    b65faa2 irqbalance-ui: can't change window when in editing state
    7f1caca irqbalance-ui: move 'ASSIGNED TO CPUS' to the last column
    0a82ddd parse_proc_interrupts: fix parsing interrupt counts
    028082a add keep_going check to prevent irqbalance from failing to exit after SIGTERM
    5602913 Handle thermal events to mask CPUs
    c65cda1 Implement Netlink helper functions to subscribe thermal events
    b66647a Prepare to handle thermal event
    378d470 add meson
    bd67801 Enable static building of irqbalance
    5228835 check whether savedptr is NULL before invoking strlen
    ff48ac9 get irq->module relationship from /sys/bus/pci/*/driver
    80d5fbb updating to version 1.0.9
    df3436b Add the cpus_copy() helper
    61a9423 correct wait time in oneshot mode
    917b102 Document migrateval
    188f9ef Confine irqbalance to systems where it is useful.
    0f594a6 Separate variable declaration from assignment
    9b004c6 Ensure that we get all of a unix message

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 23:40:02 -05:00
Bruce Ashfield
5459ca4fdc lxc: update to v6.0.5-tip
Bumping lxc to version v6.0.5-17-gf9ff9ea2a, which comprises the following commits:

    f9ff9ea2a build(deps): bump actions/checkout from 5 to 6
    c21296262 apparmor: skip /proc and /sys restrictions if nesting is enabled
    be5ce5529 Update lxc.spec.in to use meson
    e716bd6c8 config/apparmor/abstractions: Drop manually generated container-base file
    5d0182b0d config/apparmor/abstractions: Fix meson build generation of container-base
    539424964 build(deps): bump actions/upload-artifact from 4 to 5
    fdc302322 builds workflow: make .orig.tar.gz unique per build
    d0d4f9896 github: Drop focal source packages
    944118acd add MFD_EXEC and MFD_NOEXEC_SEAL flag to memfd_create
    ca9ecef01 Automatically detect compression format in the lxc-local template
    50bddb8e3 lxccontainer: check if target exists before remove in create_mount_target()
    d692ba5a9 Standardize log file create mode to 0640
    0e84c43d7 Enable systemd to create /var/lib/lxc at runtime with StateDirectory
    277634689 commands: Fix indent
    9184960a8 README: update links
    7e0e0d1ae Rename CONTRIBUTING to CONTRIBUTING.md
    675ffcd71 README: Fix CI links
    9e4e69ed1 Release LXC 6.0.5

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-01 22:45:51 -05:00
Bruce Ashfield
18dc032f50 xen-tools: fix QA error
Fixing:

ERROR: xen-tools-4.21+stable-r0 do_package_qa: QA Issue: File /usr/lib/xen/tests/.debug/test_vpci in package xen-tools-dbg contains reference to TMPDIR [buildpaths]
ERROR: xen-tools-4.21+stable-r0 do_package_qa: Fatal QA errors were found, failing task.
ERROR: Logfile of failure stored in: /poky/build/tmp/work/armv8a-poky-linux/xen-tools/4.21+stable/temp/log.do_package_qa.910059
ERROR: Task (/poky/meta-virtualization/recipes-extended/xen/xen-tools_4.21.bb:do_package_qa) failed with exit code '1'

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-21 15:39:00 -05:00
Bruce Ashfield
cd3d19c7de conf/versions: update xen default to 4.21
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-21 00:10:46 -05:00
Bruce Ashfield
d76bc6736c xen: introduce 4.21 recipes
This introduces the 4.21 recipes. Along with the main Xen and Xen-tools
updates, we also have the following:

 - two compile patches for xen and xen-tools that fix issues with the
   way yajl is pickup in the yocto environment
 - packaging of the new libxenmanage libraries
 - fixup of the watchdog system units
 - updates to the test packaging (new directories)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-21 00:08:19 -05:00
Matt Fischer
19241a745f Add gpgme as a RDEPENDS for podman
podman needs gpgme in order to run. In some usages, this
is being pulled in transitively by skopeo, but since skopeo
was removed as a podman dependency last year, it now needs to be
direct.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-19 18:29:28 -05:00
Tom Hochstein
d54989cbee libvirt: Fix missing libvirt-python
The do_rootfs task for an image that includes libvirt-python fails.
```
  - nothing provides libvirt-python needed by packagegroup-fsl-virtualization-1.0-r0.ls1012afrwy from oe-repo
```

The log shows that the do_compile:append() from libvirt-python.inc is
failing but not reporting the failure.
```
174: cd: can't cd to /.../libvirt/v11.8.0+git/sources/libvirt-v11.8.0+git/libvirt-python-11.8.0
```

The root cause is the archive folder format is changed from
libvirt-python-VERSION to libvirt_python-VERSION, but the do_compile
and do_install tasks are hard-coded to the old format.

Fix the root cause by encoding the archive folder name in a common
variable. Also, fix the build and install commands so the cd failure is
not ignored.

Signed-off-by: Tom Hochstein <tom.hochstein@oss.nxp.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-19 18:22:50 -05:00
Changqing Li
c2185cd5ef layer.conf: add kubernetes into NON_MULTILIB_RECIPES for x86-64
Here is the setting in recipe kubernetes:
COMPATIBLE_HOST = '(x86_64.*|arm.*|aarch64.*)-linux'

x86 is not support, so add kubernetes into NON_MULTILIB_RECIPES for
x86-64 to avoid extending lib32- variant

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-11-05 23:19:33 -05:00
Bruce Ashfield
7936c72223 kernel/6.17: add support
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-10-30 13:19:00 -04:00
Bruce Ashfield
389df3b77e libvirt: update to v11.8.0
Bumping libvirt to version v11.8.0-87-g0c1a1f9fd4, which comprises the following commits:

    0c1a1f9fd4 qemu: Drop reconnectBlockjobs from _qemuDomainObjPrivate struct
    7353bc5fda NEWS: Document new host-model hyperv mode
    8458bb521e qemu_process: Populate hyperv features for host-model
    c181c7dd13 conf: Introduce hyperv host-model mode
    4545827ba3 qemu_caps: Introduce virQEMUCapsGetHypervCapabilities()
    ba011bebd9 qemu_capabilities: Fetch new hyperv domcaps
    0141f6544c qemu_capabilities: Format and parse new hyperv domcaps members
    57d2f4a0f0 conf: Report default hyperv values in domain capabilities
    4cc4f0b04a docs: Drop remark on now unsupported version of QEMU
    47271c204e conf: More hyperv related members into a single struct
    064682ab33 libxl: Simplify setting HyperV features
    c66bbac8d5 qemu_command: Prefer virBufferAddLit() in qemuBuildCpuHypervCommandLine()
    8b316fac49 qemu_command: Move hyperv cmd line generation into a function
    727c858d6a qemu_caps: Prefer VIR_DOMAIN_CAPS_ENUM_IS_SET()
    c9716c0e09 domain_conf: Use virXMLFormatElement() to format hyperv features
    78aa096ae2 domain_conf: Move format of hyperv features into a function
    5369f071e4 qemu: Use virXPathTristateBool()
    e3e4c620f1 virxml: Introduce virXPathTristateBool()
    c689aa80c1 virxml: Introduce virXPathTristateSwitch()
    b42a12174c wireshark: Adapt to wireshark-4.6.0
    002b9f559d wireshark: Don't leak column strings
    ba2c4bdd5c wireshark: Introduce and use vir_val_to_str()
    1086888f95 wireshark: Don't special case retval of get_program_data() in dissect_libvirt_message()
    7374c4ecbd wireshark: Fix int type of some virNetMessageHeader members
    02a0e78bf5 wireshark: Move WIRESHARK_VERSION macro definition
    41d3b45797 wireshark: Switch header files to #pragma once
    b825bb556b wireshark: Drop needless declaration of proto_register_libvirt() and proto_reg_handoff_libvirt()
    235e265b41 NEWS: Document Hyper-V enlightenment validation
    1d2873f9c6 qemu_validate: Reflect dependencies of hv-tlbflush-direct
    c6114de13c qemu_validate: Reflect dependencies of hv-evmcs
    f4557315f3 qemu_validate: Reflect dependencies of hv-ipi
    941af83360 qemu_validate: Reflect dependencies of hv-tlbflush
    da261327ea qemu_validate: Reflect dependencies of hv-stimer
    1822d030c3 qemu_validate: Reflect dependencies of hv-synic
    da76c1e8fe qemuxmlconfdata: Adjust hv-stimer related tests
    359909749a conf: Introduce virDomainDefHasTimer()
    6b71d32779 src: Drop needless typecast to virDomainTimerNameType
    88225150be network: pf: split flush and rules commands
    0756fefdc5 syntax-check: Prohibit the non-clearing 'g_new'
    a74b5bc37f Replace all use of 'g_new' with 'g_new0'
    5bc43f95e5 qemu-replies-tool: Fix logic error when dumping device properties
    076545ef27 qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to v10.1.0-1060-geb7abb4a71
    31800ec2b1 locking: use & install test_libvirt_sanlock.sug for both QEMU & LibXL
    cfed8b9e55 Revert "rpm: disable sanlock when QEMU is disabled"
    fcfd6f12c5 qemu: Don't add memballoon by default on RISC-V
    574d797f59 news: Update for USB controller model selection improvements
    436485cb7c qemu: Remove use of piix3-uhci for non-x86
    198e68197c qemu: Remove fallback to piix3-uhci for Arm virt guests
    21e584a4fb qemu: Don't special-case realview/versatilebp for USB
    bfe1aca211 qemu: Unify USB controllers across Arm architectures
    d9add4c3f1 qemu: Use qemu-xhci with no fallback on RISC-V
    a618b9e1cd qemu: Use qemu-xhci with no fallback on loongarch64
    c7365dd157 qemu: Clean up qemuDomainDefaultUSBControllerModelAutoAdded()
    8bb0f4275a qemu: Clean up qemuDomainDefaultUSBControllerModel()
    44a63c2188 qemu: Add qemuDomainDefaultUSBControllerModelAutoAdded()
    25be83dbfc qemu: Add qemuDomainDefaultUSBControllerModel()
    45eab0181e qemu: Validate USB controllers earlier
    5050039e30 qemu: Skip USB controller validation when model=none
    dc6e5b676d qemu: Validate PCI support for USB controllers
    2bbfcd2042 qemu: Rename function argument
    d069531a57 qemu: Fold check into qemuBuildSkipController()
    de797a86e1 qemu: Drop skip for USB controllers on s390x
    bed1112bbb qemu: Don't generate alias for model=none USB controllers
    ec1848975c qemu: Always default to no USB controller on s390x
    519cc637e8 qemu: Add sanity checks for auto-added PCI controllers
    956253d1cd qemu: Update qemuDomainSupportsPCI()
    2ad21cd97f qemu: Validate presence of PCI support
    fa46554957 qemu: Prevent use of PCI devices when PCI is not supported
    a66db76447 qemu: Introduce qemuDomainNetIsPCI()
    c60d168605 qemu: Don't add PCI, USB or memballoon to microvm
    80eb60354e qemu: Don't add memballoon to isapc
    205e131f97 tests: Add coverage for PCI use with isapc and microvm
    b38fb62e2e qemu: Fix PCI/USB handling for Arm realview boards
    30e3efad52 tests: Use realview-eb instead of realview-pbx-a9
    a416ccfb98 qemu: Check for pci-ohci availability
    4005d83a9a tests: Fix some usb-controller-*-unavailable cases
    9a3ff406b7 tests: Expand coverage for automatic/default USB controllers
    b5956b30aa tests: Rename usb-controller-implicit-*
    2a9bdeb0d5 tests: Minimize usb-controller tests
    b00c8f4b5f tests: Don't set PCI address in usb-controller-default tests
    6448293933 tests: Don't use memballoon=none for minimal tests
    fab45749f8 tests: Drop coverage for versatilepb on aarch64
    58d555fae7 tests: Fix typo in usb-controller-nec-xhci-autoassign
    f61b083f3d tests: validate an XML config with USB vendor/product set
    fefde61758 rpm: disable sanlock when QEMU is disabled
    f101e3432d rpc: fix race against dtrace probe generator
    eb99bbaf2e Post-release version bump to 11.9.0
    74249df557 Release of libvirt-11.8.0
    ade9dcf6c1 Translated using Weblate (Portuguese)
    a993609f46 NEWS: Fix format of XML elements/attributes in v11.8.0 section
    c2c08056a1 NEWS: Document features/improvements/bug fixes I've participated in
    9b7cfb7886 Translated using Weblate (Chinese (Simplified) (zh_CN))
    9324a2ca05 Translated using Weblate (Korean)
    227ec18c98 Translated using Weblate (Portuguese)
    9d57b562bd bhyve: hooks: improve process start error handling
    3a3ee77682 Update translation files
    2ffcadbf7c po: Refresh potfile for v11.8.0
    dcd5915030 Translated using Weblate (Portuguese)
    c925705fc9 Translated using Weblate (Spanish)
    7c49321678 Translated using Weblate (Spanish)
    c3d08ce65e tests: qemuxmlconftest: test locking with older virtiofsd
    90b4a24870 tests: qemuxmlconftests: test virtiofsd command line too
    bab8033bcc tests: qemuxmlconf: virtiofs: remove locking from the readonly test case
    0a33b7954c tests: qemuxmlconftest: test passt command line too
    43c2cd1d08 export qemuVirtioFSBuildCommandLine
    41eea2fe89 tests: qemuxmlconftest: Introduce testQemuConfMarkUsed
    94a15c3e68 tests: qemuxmlconftests: store suffix in testQemuInfo
    fc1e4eb008 qemu: passt: split out qemuPasstBuildCommand
    b1983d96f5 news: Update for firmware selection fixes
    2800ce3620 qemu: Fix matching for read/write firmware
    0b8daf9f68 qemu: Fix matching for stateless/combined firmware
    20813b87b7 tests: Add tests for SEV firmware selection
    6d35a0b554 tests: Improve AMD SEV-related tests
    05b67b8cde tests: Minimize SEV tests
    f2dbd14342 tests: Tweak descriptor for combined firmware
    2d6e21885f qemuMigrationSrcIsSafeDisk: Allow non-shared qcow2's with raw data file
    6e5a3334b2 qemuBlockGetNamedNodeData: Extract 'data_file_raw' flag
    f8201b0032 qemuMigrationSrcIsSafeDisk: Check also data file properties for migrability
    0ca45005d7 qemuMigrationSrcIsSafeDisk: Extract safe migration checks for one storage source
    60899fc8fc qemuMigrationSrcIsSafe: Extract code for checking safe migrability of one disk
    9bf19c09a4 qemuMigrationSrcIsSafe: Drop 'DEBUG' message about qemu supporting cache dropping
    07a40de613 ci: regenerate with 'lcitool manifest'
    970fead068 docs/apps: Remove "Cuckoo Sandbox"
    04c1f45831 Translated using Weblate (Portuguese)
    8e8f496d87 Translated using Weblate (Portuguese)
    c1f742fe69 Translated using Weblate (Chinese (Simplified) (zh_CN))
    229f9e8ee8 Translated using Weblate (Portuguese)
    4eb9cc83c8 Translated using Weblate (Spanish)
    1d1e316152 util: remove glibcompat.c
    48f04627c8 build: bump minimum glib version to 2.68
    a9bd4c1e0b ch: Implement virConnectDomainEventDeregister()
    5c04a84638 ch: Implement virConnectDomainEventRegister()
    76adad0b01 ch: Propagate lifecycle events
    f9c1b910bf ch: Emit event on device attach
    9c767752f2 ch: Emit event on device attach
    06802eeceb ch: Unlock domain in virCHEventStopProcess() on all exit paths
    cd00c70695 ch: Avoid memory leak in virCHProcessEvents()
    39a0374d13 Translated using Weblate (Portuguese)
    addb80ef41 Translated using Weblate (Spanish)
    bbe7b999ff Translated using Weblate (Spanish)
    0a77a035fd Added translation using Weblate (Arabic)
    96d1bfee3e conf: auto-add a pcie-root-port when needed while plugging in pcie-to-pci-bridge
    698aea684a conf: improve error message when a PCI controller can't be auto-added
    ce74632a61 conf: add forgotten clause to virDomainPCIControllerConectTypeToModel()
    82b794ca12 qemu: fix multiple missing setup/teardown of passt process for interface type='vhostuser'
    cca246e0cb qemu: support setting guest hostname/fqdn using DHCP on passt-backed interfaces
    f2a6c2d39d ch: Avoid memleak on disk detach in chDomainRemoveDevice()
    6751994950 ch: Drop useless variable in chDomainFindDisk()
    7b70c1868c ch: Drop deadcode from chDomainDetachDeviceLive()
    3bd17ffe97 ch: Actually remove device in chDomainDetachDeviceLive()
    20d5c61cb4 ch: Avoid memleak in virCHDriverConfigDispose()
    f35a1def9d ch: Implement VIR_DOMAIN_DESTROY_GRACEFUL flag support
    e635b6a6f7 ch: Introduce flags to virCHProcessStop()
    fc56f7279f ch: Make sure the cloud-hypervisor process is killed in virCHProcessStop()
    5a89be0611 virprocess: Report errno if virProcessAbort() fails
    7afc0388b8 conf: clear the acpiNodeset field after freeing
    e7d1a3e2fe qemu: block: Always enable discard forwarding for 'throttle' filter layer
    bfc08fcfe5 datatypes: Refactor rest of 'virGet*' helpers
    3abc707b2c datatypes: virGetStream: Add missing 'virCheckConnectReturn' check
    c3bdec1af0 NEWS: Mention new acpi-generic-initiator support
    d983a6bf3b docs: Document acpi nodeset in hostdev
    d12d0b160d qemu: Add acpi-generic-initiator unit test
    9c24784933 qemu: Generate acpi-generic-initiator command from acpi nodeset
    7032eb24e6 qemu: Validate acpi nodeset
    8275408276 conf: Add nodeset attribute to the <acpi> element
    b21822a29c qemu: Allow to define NUMA nodes without memory or CPUs assigned
    daccea611d qemu: capabilies: Introduce QEMU_CAPS_ACPI_GENERIC_INITIATOR
    d0752fafdb NEWS: announce disk hotplug support for ch
    fc7a3099bb ch: implement disk device detach in public API
    62330a66d3 ch: add disk detach helper functions
    f9cd2cf238 ch: add virCHMonitorRemoveDevice function
    4ba796ab74 ch: add virCHMonitorBuildKeyValueJson
    37f4fc95f3 ch: implement disk attach in public API
    98c995bdf4 ch: add disk attach helper functions
    ce7b66a48a ch: add monitor disk attach logic
    eb9906468f ch: add/use virCHMonitorPut function
    e285053dc7 ch: refactor virCHMonitorBuildDiskJson
    c90b6ff46a ch: pass disk alias to CHV
    c5f743c44e ch: assign aliases in ProcessPrepareDomain
    40b3321a70 ch: add ch_alias.{c,h} for device alias handling
    00db172987 ch: add ch_hotplug.{h,c} files to CH build
    6d912238ca esx: pass 'long' to curl_easy_setopt when needed
    d05443820e qemu: Don't query unavailable-features if qom-list-get is supported
    e18bc30236 qemu: Let qemuMonitorJSONGetCPUProperties also return disabled features
    5b88383e21 qemu: Merge qemuMonitorJSONGetCPUDataDisabled in qemuMonitorJSONGetGuestCPU
    74261b249f qemu: Always fetch disabled features in qemuMonitorJSONGetGuestCPU
    ffdbbc4138 qemu: Merge qemuMonitorJSONGetCPUData in qemuMonitorJSONGetGuestCPU
    1dee4afb14 qemu: Add qemuMonitorJSONCPUDataAddFeatures helper
    53eb546519 tests: Test qemuMonitorJSONGetGuestCPU with qom-get-list
    b21b211923 qemu: Use qom-list-get for checking enabled CPU features
    a5322a0a4c qemu: Introduce QEMU_CAPS_QOM_LIST_GET capability
    a9fad838f2 qemu: Parse properties list from any JSON array
    3c25adb289 qemu: Move feature filtering to qemuMonitorJSONGetCPUProperties
    001769452b qemu: Generalize filtering in qemuMonitorJSONParsePropsList
    5935abb72c tests: Test qemuMonitorJSONGetGuestCPU with empty unavailable-features
    4b7304cfe8 tests: Add a test for qemuMonitorJSONGetGuestCPU
    cab77b7a14 qemu: Drop legacy probing of CPU features
    55583ae429 libvirt-host: VIR_NODE_CPU_STATS_GUEST: clarify "guest" time
    814bec16ee tests: Drop unused vm variable in testQemuMonitorCPUInfo
    62a40b89b7 docs : add doc on cpu model and features
    f68fddeef0 Translated using Weblate (Portuguese)
    80a51de596 Translated using Weblate (Spanish)
    0aea1d3e46 scripts: qemu-replies-tool: Add option to dump JSON commands that weren't processed by --dump-all
    3fd2cd1115 scripts: qemu-replies-tool: Add stable dump of 'query-command-line-options'
    8c5eec9814 scripts: qemu-replies-tool: Dump data from query-version/query-target/query-kvm
    c961ddc535 scripts: qemu-replies-tool: Prefix output with filename when dumping data for multiple files
    301e1ba244 scripts: qemu-replies-tool: List also data from 'qom-list-properties'
    e53eb41b0d scripts: qemu-replies-tool: Dump machine types in --dump-all
    790fec6e53 scripts: qemu-replies-tool: Drop specific invocation of marginally useful dump modes
    5e585abc1c scripts: qemu-replies-tool: Convert the QMP conversation to list of dicts
    05a53dcf54 qemuxmlconftest: Add pinned versions of the 'cpu-host-*' cases for qemu-10.1
    c97374c612 qemucapabilitiestest: Add data for the qemu-10.2 dev cycle
    a1210230eb qemuxmlconftest: Rename and strip specific machine type from 'x86_64-default-cpu-*' cases
    9eda374f1d qemuxmlconftest: Add missing version specific invocations for 'cpu-host' tests
    f005ba072c qemu: monitor: Remove query-tpm-modes/query-tpm-types infrastructure
    aabccf3974 qemu: capabilities: Don't use query-tpm-types/query-tpm-models for probe
    8673ac3df5 qemu: capabilities: Detect TPM related capabilities from 'qom-list-types'
    40e12a60de qemu: capabilities: Drop probe of 'query-migrate-capabilities'
    8bb61dadb4 qemu: capabilities: Retire QEMU_CAPS_MIGRATE_RDMA
    c9fada7d0b qemu: Always assume support for QEMU_CAPS_MIGRATE_RDMA
    e19c1fd674 qemu: capabilities: Update '10.1.0' capabilities on x86_64 after release
    ef7fbc7ab4 qemu: monitor: Remove wrappers for 'block-dirty-bitmap-enable'/'block-dirty-bitmap-disable'
    b5878727c7 util: virHostCPUGetStatsLinux: support VIR_NODE_CPU_STATS_GUEST
    317626fae9 Post-release version bump to 11.8.0
    4d408ca4bf Release of libvirt-11.7.0
    44990eaf30 Translated using Weblate (Portuguese)
    62a9069d4d Translated using Weblate (Korean)
    0a7110d4c6 Translated using Weblate (Spanish)
    7bdc64ec94 Translated using Weblate (Portuguese)
    75e6158a95 Translated using Weblate (Spanish)
    37c3ea3ab5 Translated using Weblate (Portuguese)
    f46acba428 Translated using Weblate (Portuguese)
    6df9e7f62b Translated using Weblate (Czech)
    66af43a52d kbase: live_full_disk_backup: Improve the document
    b255d00624 docs: formatsecret: Convert inline emphasis of a warning to the '.. warning:' role
    e627b91a41 css: Add style for '.. note:' and '.. warning:' rST roles
    84f8b7f7d9 kbase: live_full_disk_backup: Fix use of '.. note' directive
    37a1bd9458 daemon: Drop log level of VIR_ERR_NO_SUPPORT to debug
    e45049c610 qemu: hotplug: Audit device detach before deleting it
    a82299ac8b NEWS: document bhyve changes for the release
    3acdea2ed3 Update translation files
    ca61552fe0 po: Refresh potfile for v11.7.0
    1ed76babe3 Translated using Weblate (Portuguese)
    9b584d80b1 Translated using Weblate (Chinese (Simplified) (zh_CN))
    506cf5484a Translated using Weblate (Spanish)
    561d98bbfe Translated using Weblate (Spanish)
    b84b31e27f Translated using Weblate (Spanish)
    6415fb1495 Translated using Weblate (Portuguese)
    9ace7d43c3 Translated using Weblate (Portuguese)
    52930e6ad1 Translated using Weblate (Portuguese)
    8866684043 Translated using Weblate (Portuguese)
    e4e9d5356e Translated using Weblate (Portuguese)
    220cdc680e Translated using Weblate (Portuguese)
    8286b5ff61 Translated using Weblate (Korean)
    83192fedaa Translated using Weblate (Portuguese)
    fc8b8e8220 bhyve: autofill NVRAM data for firmware='efi'
    d06f8f096a docs: add network driver documentation
    4462b85a56 network: bridge_driver: add BSD implementation
    d4ffd95614 bhyve: implement domainBlockStats
    9eddeb354a bhyve: implement domainMemoryStats
    870ccd2db7 virprocess: implement virProcessGetStatInfo() for FreeBSD
    9c8c238af0 bhyve: implement domainInterfaceStats
    291dbefd07 virt-aa-helper: Avoid duplicate when append rule
    35fc21b659 fix typos in NEWS.rst
    4e43cf0a4f docs/tlscerts: mention dropped 'encryption_key'
    aa7e4f5360 docs/tlscerts: document need for socket activation
    06fd44915d spec: Package newly introduced CH conf files
    5b69c37265 NEWS: ch: announce log_level config option
    65e7baed62 ch: add log level configuration option
    5dca0567f6 ch: Add config file support
    c573d08ccf tests/qemuxmlconfdata: add tests for video model 'edid' attribute
    2a0cd28095 conf: add support for 'edid' attribute to video model
    79d6509dbc qemuxmlconftest: Paper over test failure at MacOS
    e4588ddac7 docs: storage: fix the "since" tag
    35e2f4d7fc qemu: Match firmware with fully resolved and canonicalized paths
    12c35ab161 qemuxml2argvmock: Pretend FW blobs are always present
    1686db62ed docs: hacking: Define policy forbidding use of AI code generators
    0f0d561da2 virCHDomainRefreshThreadInfo: Remove illusion that caller cares about return value
    086e2072fd virCHDomainRefreshThreadInfo: Don't trust vcpu ID returned by hypervisor
    73ada8b2b9 qemu: domain: Remove unused qemuDomainGetVcpuHalted
    1067afb690 virDomainVcpuDefPostParse: Remove impossible check
    3ac25cd21b Unexport virCHProcessSetupVcpu
    29bea6b9fc network: introduce Packet Filter firewall backend
    63a0103df3 qemu: don't warn about missing SMM for CVM firmware
    5537732b06 ci: regenerate with 'lcitool manifest'
    23a1eb0dc7 Storage: ZFS: implement `resizeVol` method to support native resize
    b0cc1c5243 docs: update <hwuuid> docs to refer to version 11.7.0
    abe8d89daf qemuxmlconftest: add tests for new hardware UUID (hwuuid) element
    5d2235ff45 conf: introduce hardware UUID (hwuuid) element
    cd71d5a46e src: fix package name in local pkg-config files
    54e853c864 src: add missing libvirt-admin.pc.in for local usage
    70126914fb virnetdevvportprofile: Turn 'virtPortType' of virNetDevVPortProfile into proper enum type
    425ffa3cd5 virnetdevvportprofile: Drop explicit enum virNetDevVPortProfile declaration
    4e19e73bcd Post-release version bump to 11.7.0
    5085c7fd03 Release of libvirt-11.6.0
    1f5d1144eb Translated using Weblate (Korean)
    de4b8a51ca Translated using Weblate (Portuguese)
    dbb5642d12 NEWS: Mention RBD namespaces, and auto-shutdown/key encipherment fixes
    4747fcc07d qemu: Bypass sending VIR_DOMAIN_EVENT_RESUMED event when TD VM reboot
    4ee4bf062e news: document fixed nwfilter driver base chain creation
    ab71cd66a9 NEWS: Document features/improvements/bug fixes I've participated in
    c36c608f48 NEWS: document bhyve changes for the release
    b5a377bb18 Translated using Weblate (Portuguese)
    244f82908c Translated using Weblate (Portuguese)
    d92ed868a2 Translated using Weblate (Portuguese)
    cb1a1a4b6b Translated using Weblate (Portuguese)
    ebd995a8e2 Translated using Weblate (Portuguese)
    16b726693b Translated using Weblate (Portuguese)
    0cbb2dc71c Translated using Weblate (Portuguese)
    906e910d5e Translated using Weblate (Portuguese)
    c55dd6fbda Translated using Weblate (Portuguese)
    0af5b37187 Translated using Weblate (Portuguese)
    d8f099360a Translated using Weblate (Portuguese)
    d09f15eeba Translated using Weblate (Portuguese)
    ac2793f9b5 Translated using Weblate (Portuguese)
    cf33947981 Translated using Weblate (Portuguese)
    435cf5984a Translated using Weblate (Portuguese)
    12a6022e1c Translated using Weblate (Portuguese)
    60ba3e763e Translated using Weblate (Portuguese)
    108eb67121 Translated using Weblate (Portuguese)
    22fa8f7785 Translated using Weblate (Portuguese)
    71cccda5f6 Translated using Weblate (Portuguese)
    3786cb44bd Translated using Weblate (Portuguese)
    8ae8a66891 Translated using Weblate (Portuguese)
    07abe42cd5 Translated using Weblate (Portuguese)
    a0280f0369 Translated using Weblate (Portuguese)
    aff33becb5 Translated using Weblate (Portuguese)
    925040d7bb Revert "qemu: Match firmware with fully resolved and canonicalized paths"
    7baf59f4fc Revert "qemuxmlconfdata: Regenerate outputs after last commit"
    73345ccc7b qemuxmlconfdata: Regenerate outputs after last commit
    4efea21ae8 qemu: Match firmware with fully resolved and canonicalized paths
    249476cbf9 util: Fully resolve paths with virFileComparePaths
    980dd220e5 NEWS: Mention zero discard_granularity option
    802c424edc include: fix version for VIR_CONNECT_BASELINE_CPU_IGNORE_HOST
    c4c1ad0692 include: s/RECREATION/RECREATED/ in domain event names
    ff43c139d3 Update translation files
    b405bc6799 po: Refresh potfile for v11.6.0
    70b67dcc41 Translated using Weblate (Spanish)
    79397fd5d4 Translated using Weblate (Finnish)
    21913e4822 Translated using Weblate (Spanish)
    dcf9e6270f Translated using Weblate (Spanish)
    282ac75b7d Translated using Weblate (Spanish)
    646c39786b Translated using Weblate (Portuguese)
    899704b0ef NEWS: mention disabling deprecated features by default on s390 CPU models
    05bb287a3d qemu: add default_cpu_deprecated_features configuration option
    74c305f197 tests: new qemuxmlactive tests for s390x
    f279ea36b0 qemu: process: refactor deprecated features code
    30335e5fc5 qemu: caps: add virCPUFeaturePolicy param to virQEMUCapsUpdateCPUDeprecatedFeatures
    e03995e63e docs: domain: document deprecated_features attribute
    5e5528ef14 docs: domain: Add documentation for Intel TDX guest
    798f748210 qemuxmlconftest: Add latest version of 'launch-security-tdx*' test data
    fcc12f217e qemu: Support domain reset command for TDX guest
    1af740c501 qemu: Send event VIR_DOMAIN_EVENT_[STOPPED|STARTED] during recreation
    194a36f4fe qemu: Avoid duplicate FakeReboot for secure guest
    312c3afa48 qemu: Support reboot command in guest
    4f73334821 qemu: Add FakeReboot support for TDX guest
    61c4c1b538 qemu: Add command line for TDX Quote Generation Service(QGS)
    8214980432 conf: Add Intel TDX Quote Generation Service(QGS) support
    2dec0d9ede qemu_firmware: Pick the right firmware for TDX guests
    9df19f60f6 qemu: log the crash information for TDX
    626b9ca846 qemu: Force special parameters enabled for TDX guest
    0a825f910b conf: Expose TDX type in domain launch security capability
    67b0720d2f qemu: Add command line and validation for TDX type
    ea625cb60b conf: Validate TDX launchSecurity element mrConfigId/mrOwner/mrOwnerConfig
    e919a4dd37 conf: Add tdx as launch security type
    f873974883 conf: Expose TDX feature in domain capabilities
    121fd19942 qemu: Add QEMU_CAPS_TDX_GUEST capability
    2d8d8f83a1 qemucapabilitiestest: Add data for the qemu-10.1.0 dev cycle on x86_64 for the '+inteltdx' variant
    4c59ff7783 qemucapabilitiesdata: Document '+inteltdx' variant
    d7c96e809d qemu: Check if INTEL Trust Domain Extention support is enabled
    908bb55724 tools: Secure guest check for Intel in virt-host-validate
    a2aeeab0aa meson: Report library versions in the summary
    c2c165ea6c meson: Convert attr_dep to dependency()
    f8be069a0c qemu: Add support for RBD namespace.
    e910f3f172 virStorageSource: Eliminate 'volume' field
    0723e066d9 virStorageFileBackendGlusterInit: Refactor cleanup
    2bdaab374f conf: Turn 'protocol' field of virStorageSource into proper enum type
    fbb9ad02ab qemu: qemuDomainObjPrivateXMLParseVcpu refactor
    9ce764872c conf: virDomainChrDefParseTargetXML refactor
    5dc483d75f util: virSecretLookupParseSecret refactor
    1173b091fe conf: virNetDevVPortProfileParse refactor
    acaed8b247 virBitmapNextClearBit: Correct virBitmapNextClearBit function header comment
    9a7be0662d qemu: driver: Reformat function headers for block job APIs
    3b43fa08ff virSecuritySELinuxGetSecurityMountOptions: refactor printing
    aa732b4272 virSecuritySELinuxGenImageLabel: Refactor cleanup
    0122f88c6e virSecuritySELinuxRestoreInputLabel: Return values directly
    1f1da23162 virSecuritySELinuxSetFilecon: Automatically free 'econ' temp variable
    f69ecd970d virSecuritySELinuxGetProcessLabel: Automatically free 'ctx' temp variable
    6bb5993897 virSecuritySELinuxReserveLabel: Refactor cleanup
    83739c3a18 virSecuritySELinuxGenNewContext: Refactor cleanup
    9aa0cfdd55 virSecuritySELinuxContextAddRange: Refactor cleanup of 'context_t'
    08afef3fdc security_selinux: Declare internal autoptr cleanup helper for 'context_t'
    5db77e0c66 virSecuritySELinuxSetTapFDLabel: Refactor cleanup
    3487f083b9 virSecuritySELinuxSet(Daemon)SocketLabel: Refactor cleanup
    7f35a1e6f2 virSecuritySELinux(Set|Restore)ChardevLabel: Refactor cleanup
    85e22de810 virSecuritySELinux(Set|Restore)HostdevCapsLabel: Refactor cleanup
    4bc8d70969 virSecuritySELinuxRestoreFileLabels: Refactor variable freeing
    c936a456b5 virSecuritySELinux(Set|Restore)TPMFileLabel: Automatically free 'cancel_path'
    80ade3ac7c virSecuritySELinuxRestoreFileLabel: Refactor cleanup
    7891ed2d10 virSecuritySELinuxMCSFind: Refactor variable clearing
    79d2f496a5 virSecuritySELinuxTransactionRun: Refactor cleanup
    aff852bb12 security/security_driver.c/h: Fix function header formatting
    02669921cb news: document new crypto TLS priority string settings
    69485815d6 nwfilter: Check before removing and reinserting iptable base chains
    14e41ac9f3 qemu: add ability to set TLS priority string with QEMU
    0b9cfa791f qemu: sanitize blank lines in config file
    845e1b5138 qemu: fix order of VNC TLS config entries
    b860f44cf2 bhyve: implement timeout for bhyveload
    37fb778e53 bhyve: don't reset domain autostart flag on destroy
    3a39cfacc3 qemu_tpm: Do not use persistent definition during pre-start checks
    93c1571d90 Fix: missing a single quote in doc example
    6f8c5c07cf tests: nssdata: add empty status file
    618eafca05 nss: Debug print JSON files as they are parsed
    cf27a25f9f nss: Print module name
    9787ec5277 nss: Include filename in debug printings
    d8a911ef9d nss: Make logging conditional on an envvar
    bf6b390274 nss: Move logging into a separate file and turn it temporarily on
    c5015c435b nss: Promote debug message to proper error when time() fails
    3ab00ebb0a rpc: virnettlscert: Rename virNetTLSCertLoadCAListFromFile to virNetTLSCertLoadListFromFile
    70c8197a0f virNetTLSCertCheckPair: Fix function definition formatting
    306e27d955 virNetTLSContextNewPath: Refactor temporary variable usage
    bdbfed0b1c rpc: virnettlscontext: Fix formatting of function definitions
    fd0a90be27 NEWS: Mention virConnectHypervisorBaselineCPU improvements
    953f19258a virsh: Add support for VIR_CONNECT_BASELINE_CPU_IGNORE_HOST flag
    f9f2003762 qemu: Implement VIR_CONNECT_BASELINE_CPU_IGNORE_HOST
    bef64f9653 Introduce VIR_CONNECT_BASELINE_CPU_IGNORE_HOST flag
    905d6395b7 Change documentation style of virConnectBaselineCPUFlags
    d74928fed3 Clarify documentation of virConnectBaselineHypervisorCPU
    999d155b21 cpu: Show input CPU model names in debug log
    2d5ce69aa9 qemu_tpm: Don't report uninitialized variable in error message
    12d0fc3cf7 qemu: Report system error on failed open()
    c1cf7cb334 src: fix typo in fixup_name()
    22ee3b78db bhyve: sync error messages
    79456b79f3 bhyve: extend serial devices validation
    91a3d535c6 docs: drvbhyve: document TCP console support
    3a342f6402 bhyve: increase number of supported consoles to 4
    8b7db74d4a bhyve: support serial type 'tcp'
    680ee0e7d1 Allow specifying zero discard granularity for block devices
    3451987fca qemu_tpm: Only warn about missing locking feature on shared filesystems
    6c6b6b2b41 qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage
    05c5aabb47 qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage
    1eaaec533a virshFindDisk: fix NULL-dereference of xmlCopyNode() result
    cad407c862 qemu: qapi: fix potential SIGSEGV in virQEMUQAPISchemaTraverseObject()
    722aad03b0 conf: schemas: add sysinfo.rng and sysinfocommon.rng into list of installed schemas
    1f9a64a016 build: prohibit realpath() by syntax-check
    923cd431b9 conf: virDomainHostdevSubsysMediatedDevDefParseXML refactor
    6465a813d6 schema: Schema validate host '<sysinfo>' XML test documents
    918594b419 conf: schemas: Split out common parts of 'sysinfo' schema
    2da49eaea4 sysinfotest: Use '.xml' suffix for output files
    98a98f9ad6 docs: clarify how to build without -Werror
    81df391428 NEWS: Mention switch to virtio-scsi on ARM and RISC-V
    bf8c7af771 virdevmapper: Always use device name for finding targets
    edf7d9f29a nwfilter: Remove 'qemu-announce-self' example
    e7a7bfa66b qemucapabilitiestest: Add dump for the qemu-10.1 development cycle on x86_64
    325d3e3094 qemuxmlconftest: x86_64: Bump 'firmware*' test cases to 'pc-q35-10.0'
    974ec08cb9 qemuxmlconftest: x86_64: Bump 'firmware*' test cases to 'pc-i440fx-10.0'
    060c9efd42 qemuxmlconftest: x86_64: Drop explicit use of '2.9' machine type
    9ecbbd713f qemuxmlconftest: x86_64: Drop explicit use of '2.5' machine type
    53545ca3c5 qemuxmlconftest: x86_64: Drop explicit use of '2.12' machine type
    922db10ee4 qemuxmlconftest: x86_64: Drop explicit use of '2.10' machine type
    e67952b0e6 tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT
    3da4602369 kbase: tlscerts: Drop 'encryption_key' feature request
    8cecd3249e tls: Don't require 'keyEncipherment' to be enabled altoghther
    1c2295fbaf virDomainDriverAutoShutdown: Refactor selection logic for VMs
    e1f84ca87e virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs
    e13e9b46f6 hypervisor: Split out individual steps out of virDomainDriverAutoShutdown
    82963fdcb6 qemu: Fix auto-shutdown of qemu VMs by the qemu driver
    fe57a6deaa cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers
    9b12b7e859 virSystemdCreateMachine: Add flag to invert machined unit dependencies
    bb51963bb1 hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive
    c8adb8537b qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig
    3e0859566a cgroup: Unexport 'virDomainCgroupInitCgroup'
    0df20b69c8 virSystemdCreateMachine: Document @maxthreds
    3c8e60b9d0 qemu: Use virtio-scsi by default on RISC-V
    49478996c3 qemu: Clean up qemuDomainDefaultSCSIControllerModel()
    9bbb8944f5 qemu: Improve qemuDomainDefaultSCSIControllerModel()
    1fb968eaf1 qemu: Switch to virtio-scsi on ARM
    6f64315ba7 docs: fix typo in qemu-passthrough-security
    69b894dc04 qemu: Improve error message for USB controller validation
    358b68f09d qemu: Move error reporting out of qemuDomainDefaultSCSIControllerModel()
    4518ff0f24 qemu: Rename qemuDomainDefaultSCSIControllerModel()
    49a9b2e3ec tests: Add controller-scsi-default-unavailable
    a6d41688a6 Translated using Weblate (Portuguese)
    b2a6de3668 Translated using Weblate (Portuguese)
    3d7cb52282 Translated using Weblate (Portuguese)
    a3a2086497 Translated using Weblate (Portuguese)
    ef3c3990ab Translated using Weblate (Portuguese)
    155bae8b93 Translated using Weblate (Portuguese)
    2314d60b4e Translated using Weblate (Portuguese)
    6fd7945432 Translated using Weblate (Portuguese)
    4559999f9a Translated using Weblate (Portuguese)
    9cc5b0f9c4 Translated using Weblate (Portuguese)
    9f7e8edb6b Translated using Weblate (Portuguese)
    80a1157e36 Translated using Weblate (Portuguese)
    8b761cbf10 Translated using Weblate (Portuguese)
    c67a95fa8c Translated using Weblate (Portuguese)
    25e83d781a Translated using Weblate (Portuguese)
    d14452dc12 Translated using Weblate (Portuguese)
    a9ca942f7b Translated using Weblate (Portuguese)
    3ed6e2815b Translated using Weblate (Portuguese)
    acff59f868 Translated using Weblate (Portuguese)
    50e709fd77 Translated using Weblate (Portuguese)
    4fc6869793 Translated using Weblate (Portuguese)
    95c741f9c0 Translated using Weblate (Portuguese)
    e1227b9645 Translated using Weblate (Portuguese)
    ee5cf812e0 Translated using Weblate (Portuguese)
    8d6a5d391b Translated using Weblate (Portuguese)
    ed137febd8 Translated using Weblate (Portuguese)
    9f2638f8bb Translated using Weblate (Portuguese)
    f70454b056 Translated using Weblate (Portuguese)
    b1822eb340 Translated using Weblate (Portuguese)
    01badd1bfb virt-aa-helper-test: Switch to getopts
    9569a43b7a virt-aa-helper: Drop cleanup label from get_files()
    ecca0dded4 virt-aa-helper: Check retval of vah_add_file()
    05e06927b6 virt-aa-helper: Use automatic memory freeing
    2f7e11aaa3 virt-aa-helper: Decrease scope of @mem_path in get_files()
    980607b1e9 virt-aa-helper: Simplify paths collection
    cca3563602 virt-aa-helper: Rework USB hostdev handling
    935bd37c4a virt-aa-helper-test: Test hostdevs unconditionally
    9f12874238 virt-aa-helper-test: Silence ls
    58bf3de02c virt-aa-helper-test: Print errors to stderr
    300965f4f1 tests: Fix mocking of open()
    21e7bcc14f virpcimock: Strip fakerootdir prefix in virFileCanonicalizePath()
    99dd19c013 virpcimock: Automatically invent fakerootdir, if not provided
    96f286ef1d virt-aa-helper: Use virFileCanonicalizePath()
    68e877c1ad log_cleaner: Use virFileCanonicalizePath()
    55668bc3e0 gendispatch: Finish rename of the migration argument
    9d69dc2dbc qemu: Finish argument rename
    91e74f1de8 src: Unify argument name of virDomainMigratePerform3()
    96a5c4cb85 src: Unify argument name of virDomainMigrateBegin3()
    767b2b72e7 src: Unify argument name of virDomainMigratePrepareTunnel3()
    45d4a7bf57 src: Unify argument name of virDomainMigratePrepare3()
    0cf91e4ed3 src: Unify argument name of virDomainMigratePrepareTunnel()
    8e5e69e6eb src: Unify argument name of virDomainMigratePrepare2()
    846e584654 src: Unify argument name of virDomainMigratePerform()
    74976e7e52 src: Unify argument name of virDomainMigratePrepare()
    7b54da1d2f Post-release version bump to 11.6.0
    64ad0c3f57 Release of libvirt-11.5.0
    478290428d Translated using Weblate (Portuguese)
    4a9d6429b2 NEWS: document new AMD IOMMU device
    0360263f34 NEWS: Mention 'virsh await' and proper emulation of USB cdroms
    357cbcb05e NEWS: Mention shared filesystem detection fix
    cd867f28cf NEWS: Document features/improvements/bug fixes I've participated in
    3e2af21dda Translated using Weblate (Korean)
    8c80b9a8d4 Translated using Weblate (Korean)
    2cd5f00767 Translated using Weblate (Ukrainian)
    e30e75e1de Translated using Weblate (Spanish)
    de239f15f5 Update translation files
    4bcab57d7e po: Refresh potfile for v11.5.0
    c345ea0e7e qemuxmlconftest: Add 'disk-usb-device-model' case
    1ba6892d75 qemu: Replace usb-storage with usb-bot
    25c4a3643b qemuxmlconftest: Prepare for proper testing in 'disk-cdrom-usb-empty'
    3f8f18e389 qemu: monitor: Introduce 'qemuMonitorSetUSBDiskAttached'
    d325e96546 qemuBuildDeviceAddresDriveProps: Prepare for 'drive' address for usb-bot disks
    f08af07f83 qemu: Fill in model of 'usb' disks to preserve ABI compatibility
    0d47218419 conf: introduce usb disk models 'usb-storage' and 'usb-bot'
    d2dac8f8e2 qemuxmlconftest: Invoke "disk-usb-device" case also without QEMU_CAPS_DEVICE_USB_BOT and with ABI_UPDATE
    81d0501eb2 qemu_capabilities: Introduce QEMU_CAPS_DEVICE_USB_BOT
    9358c3d747 qemuxmlconftest: Distribute testing of 'removable' disk property
    4ca64e4e19 qemuxmlconftest: Drop 'disk-cdrom-bus-other'
    7747c1eeb7 qemusecuritytest: Use 'disk-usb-device' case instead of 'disk-cdrom-bus-other'
    83f6a02842 qemuxmlconftest: Test various combinations of config
    3be1f7933f qemuhotplugtest: Use VIR_DOMAIN_DEF_PARSE_ABI_UPDATE for virDomainDeviceDefParse
    8a64db5e38 Translated using Weblate (Spanish)
    bc8fbe2683 util: workaround libxml2 lack of thread safe initialization
    856f667c8a conf: add passthrough and xtsup attributes for IOMMU
    1476060091 qemu: add IOMMU model amd
    6291b0af3d docs: formatdomain: document intel-only IOMMU attributes
    33a5d9dcea qemu: introduce QEMU_CAPS_PCI_ID
    14192af47a qemu: introduce QEMU_CAPS_AMD_IOMMU
    1ee74707bd NEWS: mention console type in domain capabilities
    35e3c17e02 virSocketAddrPrefixToNetmask: Prevent undefined behaviour on bitshifts on signed integer
    11867b0224 tlscert: Don't force 'keyEncipherment' for ECDSA and ECDH
    da1ee7799a storage: disk: Properly handle partition numbers separated by 'p'
    550c32b172 storage: parthelper: Use if/else instead of ternary operator
    1f07ca49e4 virshPrintJobProgress: Don't rewrite migration status line on non-terminals
    d5a8cb26fa virQEMUCapsFindBinary: Refactor local variables
    c0e7b9923c storage_file_probe: Use named initializer for 'struct FileTypeInfo'
    be04898d18 security_manager: Don't leak seclabel in virSecurityManagerGenLabel()
    68df8388fc Translated using Weblate (Italian)
    f2aed8027f Translated using Weblate (Greek)
    e7986a3cb6 Translated using Weblate (Croatian)
    31055f2d1f Translated using Weblate (Korean)
    737031cb6c Translated using Weblate (Italian)
    441c23a7e6 qemu: Be more forgiving when acquiring QUERY job when formatting domain XML
    10bb3dd651 NEWS: Mention cacert parameter in esx driver
    6c9a0beeca esx: Allow specifying different CA bundle for remote connections
    6a8fb1851d virsh: await: Introduce 'guest-agent-available' condition
    05c9f3752d virsh: Introduce 'await' command for waiting until target domain state is reached
    71e276ed1d vsh: Add support for commands with more return values
    10c646993d vshCommandRun: Convert to directly return the exit code
    c60b7cbe28 virsh: cmdEvent: Ensure that event callbacks are unregistered before returning
    258f61b479 virthread: Add infrastructure for static virCond definitions
    6e44bb74f7 virthread: Register auto cleanup function for virMutex
    cf24dc8baa docs: Note that zero detection on migration sparsifies image only when discard='unmap' is set
    6733f02c40 Revert "docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES"
    7be1c5e2fe qemu.conf: Improve docs for 'dynamic_ownership' option
    fd21c3ecb4 storage: Implement a simple 'checkPool' method for 'rbd' type pools
    07a8be20c1 docs: outline bug expectations wrt automated tools / AI agents
    226e8ef548 docs: fix list term highlighting in URI docs
    71b4b2beb4 ci: Drop unnecessary build dependencies
    e362185e43 rpm: Drop unnecessary BuildRequires
    9d210f4bca rpm: Fix/clarify Requires
    6ca627d38b nvme: Fix more missing enum switches for VIR_DOMAIN_DISK_BUS_NVME
    8e8831c3ae bhyve: Fix build after introduction of emulated NVMe disks
    fca053ae37 NEWS: qemu support for emulated NVMe disks
    17cb1a0c42 NEWS: vmx support for NVMe disks
    dbcf514230 qemu: Add support for emulated NVMe disks
    1402c40714 qemu: Add support for NVMe controllers
    f806f63341 qemu_capabilities: Add emulated NVMe disk support to domain capabilities
    d5a87fd7f6 qemu_capabilities: Add NVMe controller and disk capabilities
    b295863d70 vmx: Add support for NVMe disks
    d80386745a docs, conf, schemas: Add support for NVMe disks
    683e1a3cf8 conf: Add virDomainDeviceFindNvmeController
    ebf6347879 util: Add support for parsing nvmeXnY(pZ) strings
    be1a89c950 docs, conf, schemas: Add support for NVMe controller
    6ef5644bfd nodedev: add nodedev name to mdevctl unsupport msg
    657d677a2f ci: refresh with 'lcitool manifest'
    c7078a136c virDomainDriverAutoShutdown: Fix printf conversion specifier for 'waitShutdownSecs'
    e7239c619f qemu: capabilities: Check if cpuModels is not NULL before trying to dereference it
    312e4801ed docs: Drop mention of read-only git mirrors
    062a0f8891 docs: Unify clone instructions
    3588bad8c0 libxl_capabilities: Make some functions return void
    6c15c1e6b2 libxl: capabilities: report supported console types
    4bbc0f2eae qemu: capabilities: report supported console types
    30edbd29ce bhyve: capabilities: report NMDM console
    280c5c31de domain_capabilities: add console capabilities
    fcea42b554 conf: desktop graphics remove unused option
    b5d08b69c4 conf: RDP graphics parse refactor
    af7b863726 conf: SDL fullscreen option refactor
    7357cb8857 conf: VNC graphics parse refactor
    496afd354f NEWS: Document removal of support of VIR_DUMP_LIVE flag from QEMU driver
    65bc6b0d4e qemu: Don't accept VIR_DUMP_LIVE flag in qemuDomainCoreDumpWithFormat()
    c61d6d0606 qemu: command: Don't attempt to set backend MTU for networks which don't use host backend directly
    edd5465c59 esx: Avoid corner case where esxUtil_ParseDatastorePath could be called with NULL 'datastorePath'
    947062e1ce docs: Change units to 'kiB' from 'kB'/'kilobytes'/'kb'
    2ecf6fe7bf virConnectAuthCallbackDefault: Return failure if 'virGetPassword' returns NULL
    ef4c0050b2 storage_file_probe: Remove unused image probing callbacks
    a9008a6ea8 storage_file_probe: Move setting of 'compat' attribute to qcow2GetFeatures
    982ce5083c storage_file_probe: Parse all qcow2 extensions at once
    6d49f0521c storage_file_probe: Call qcow2GetFeatures from qcow2GetImageSpecific
    cac833fccc storage_file_probe: Move qcow2GetFeatures(ProcessGroup) functions
    e3778b99ee storage_file_probe: Move logic from qcow2GetClusterSize to qcow2GetImageSpecific
    7758ddc107 storage_file_probe: Refactor qcowXGetBackingStore into specific callbacks for qcow and qcow2
    7ae9141a12 storage_file_probe: Refactor vmdk4GetBackingStore into vmdk4GetImageSpecific
    a685b03262 storage_file_probe: Refactor qedGetBackingStore into qedGetImageSpecific
    a5fdebe901 storage_file_probe: Refactor cowGetBackingStore into cowGetImageSpecific
    7f1bbcab42 storage_file_probe: Add image specific callback taking the whole virStorageSource
    4b1e566144 virstoragetest: Add qcow2 bitmaps to some images
    8e0a364632 storage_file_probe: qcow2GetExtensions: Fix qcow2 header extension parsing
    ed030f628c virstoragetest: Reformat output to highlight dataFile relationship
    c97e2a98cd qcow2GetExtensions: Add debug logs for interesting fields in qcow2 header extension parser
    9b41febf78 qemuProcessStartValidateGraphics: Move RDP validation logic to qemu_validate.c
    e5eb371343 qemuProcessStartValidateGraphics: Remove redundant checks for RDP protocol features
    acbfd585b2 qemu: Move checks for number of listening sockets of graphics to validation code
    19bc77d581 qemu: Move logic from qemuProcessStartValidateShmem to qemuValidateDomainDeviceDefShmem
    27e8378962 qemu: conf: Drop handling of 'vxhs' config options
    21dfb261d8 qemu.conf: Document options for VxHS block network protocol TLS config as ignored
    dc1764719d qemu: block: Drop code for 'vxhs' storage protocol
    90ad22ae08 qemu: Move disk backend validation checks from qemuProcessStartValidateDisks to qemuDomainValidateStorageSource
    30e08fd2fe qemuDomainValidateStorageSource: Rework protocol validation into a switch statement
    2b1393357c util: Move virFileGetExistingParent out of ifdef __linux__
    74c591b784 util: Avoid statfs in virFileGetExistingParent
    caa9497e7c docs: fix indent of hostdev examples
    94fb348d67 util: Fix virFileIsSharedFSOverride on nonexistent paths
    05526b5090 util: Introduce virFileGetExistingParent helper
    ee4231ae67 util: Document limitation of virFileCanonicalizePath
    3357f31476 Post-release version bump to 11.5.0
    8ba3d94995 Release of libvirt-11.4.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-10-20 10:11:41 -04:00
Bruce Ashfield
cd391e5d74 umoci: update to v0.6.0
Bumping umoci to version v0.6.0-3-gd631328, which comprises the following commits:

    d631328 deps: update github.com/AdaLogics/go-fuzz-headers to latest
    35992ba VERSION: back to development
    1c44d6f VERSION: release v0.6.0
    7fb9b5a man: umoci-stat: update output examples
    0242283 umoci new: include host ARM variant by default
    74874af config: add support for platform variants
    2ac8e55 oci: config: fix annotation precedence
    a8b1c9a test: config: add umoci-stat verification checks
    737f534 test: config: add tests for config.json annotation conversions
    4a95896 test: check annotations for config --{os,architecture}
    61f658e config: add "platform" prefix to "os" and "architecture" setting names
    21806cb deps: update to runtime-spec v1.2.1
    f7fb0ec test: disable oci-runtime-tool validation
    8873e3a build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0
    b3e5a6a build(deps): bump github/codeql-action from 3 to 4
    bce0b02 mutate: only embed <=10kB blobs in embedded descriptor test
    a058839 gha: reduce ClusterFuzzLite time limit
    b7bb5d2 gha: use mode=min caching
    94a7c04 gha: run rootless and rootful integration in parallel
    b3f2eda gha: add 'complete' job
    9726fba CHANGELOG: add image-spec v1.1.1 reference
    fe8c448 stat: do not error out for "invalid" config blobs
    3668aa9 casext: add handling for empty JSON media-type
    b668139 casext: add basic support for embedded descriptor data
    a41097f cas: dir: use image-spec-defined constants
    cb23ce1 stat: pretty-print image-spec v1.1 fields
    eb9098b deps: bump to image-spec v1.1.1
    157f759 mutate: handle DescriptorPath rewriting more delicately
    5aaf54e pprint: add tests for manifest and config pprint
    de8512a casext: improve Blob.RawData sanity check
    210b31f assert: move most panics to be in an assertion form
    4d6497e build(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10
    f294007 oci: config: use generics more effectively
    8b8f449 cmd: add more info to --version
    bf94833 CHANGELOG: mention --created and SOURCE_DATE_EPOCH
    5be7a47 pprint: add tests for struct pprint
    38b2ebe pprint: quote-wrap strings that contain spaces
    f8a27d2 pprint: add (empty) suffix when printing collections
    97e33f2 pprint: add unit tests
    0b3bab0 pprint: quote map keys as well
    3856c27 pprint: copy value slice before quoting
    1a963c5 make: add empty TESTS variable declaration
    72fe818 pathtrie: add benchmarks for PathTrie operations
    01fc37c README: move repology to install section
    e224b24 test: add 'umoci raw mtree-validate' tests
    31e611a tests: use --strict mode for gomtree validation
    560465e gomtree: switch to umoci branch
    3b97fab test: use "umoci raw mtree-validate" in tests
    d207716 umoci: add raw-mtree-validate helper to replace "gomtree --rootless"
    0b657e2 oci: layer: truncate mtime when generating archives
    b7c5f9f build(deps): bump github.com/cyphar/filepath-securejoin
    a5ade2f *: use personal email
    a821fb8 build(deps): bump golang from 1.24 to 1.25
    b431280 gha: switch to buildx-friendly caching
    41a35b9 Dockerfile: migrate to multi-stage builds
    7f961b3 test: add SOURCE_DATE_EPOCH tests
    ad66eeb oci: add SOURCE_DATE_EPOCH support for reproducible builds
    f11b243 CHANGELOG: mention new umoci-stat features
    65a984b test: add 'golden output' tests for umoci-stat
    fa4d5be stat: include manifest information
    4bf1adc umoci stat: include image config information
    0fce71a umoci stat: improve quoting of control characters
    60e4744 test: only check for history subset of umoci-stat
    4a02437 casext: provide raw blob data when fetching parsable blobs
    33be2bc dockerfile: build with go1.24
    a96b1bb build(deps): bump github.com/vbatts/go-mtree from 0.5.4 to 0.6.0
    f87f803 build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0
    52d147a *: apply go fix
    6bf0ba1 *: apply gopls modernize
    e3d8f81 go: update to Go 1.24
    37a7b99 build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9
    911252e gha: use registry.opensuse.org for openSUSE image
    2cbd4c4 dockerfile: update to Leap 16.0
    44f6ab8 oci: config: gracefully fallback if /etc/resolv.conf doesn't exist
    fb3f860 VERSION: back to development
    4ff26a3 VERSION: release v0.5.1
    df3a23e tests: fix failures on SELinux-enabled systems
    c5ac633 oci: casext: properly return errors for GetVerifiedBlob
    38fc012 pkg: hardening: disallow negative ExpectedSize
    3037f87 oci: casext: explicitly disallow negative-size descriptors
    5f31a52 oci: cas: use blob file size as ExpectedSize
    8438892 pkg: hardening: improve trailing data test
    848aba9 build(deps): bump actions/setup-go from 5 to 6
    a90680d build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8
    88b22f2 dockerfile: install 'file' explicitly
    8eaf1be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    bb31198 build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-10-18 21:59:05 -04:00
Bruce Ashfield
fcac36d912 skopeo: update to v1.20.0-tip
Bumping skopeo to version v1.20.0-87-gd2a1740f, which comprises the following commits:

    144e9151 Add missing newline to the output of (skopeo generate-sigstore-key)
    a45ceb03 fix(deps): update module golang.org/x/term to v0.36.0
    d287ec07 Fold the test cases of TestSyncTLSPrecedence to a single line each
    286c5990 Remove the explicit test name
    5699f10b Construct the source context from CLI instead of manually
    6d2144e6 Use a real YAML fragment instead of constructing inputs manually
    1e6817a1 Merge the two TestTLSPrecedence tests
    d80c776b Update dependency golangci/golangci-lint to v2.5.0
    c7a3a907 Update github.com/opencontainers/image-spec digest to 6519a62
    dbd18b97 sync: honor CLI/global tls-verify unless YAML explicitly sets tls-verify
    a489ea39 test-integration-local: use SKOPEO_BINARY if set
    f59e8938 Add --sign-by-sq-fingerprint and an integration test
    9753a1a1 Also build+test with Sequoia
    cba21646 Update CI images
    b258da23 Update conditions for signing tests
    86853ba4 Update module golang.org/x/term to v0.35.0
    0114569b Use strings.SplitSeq
    24c2a374 Use bytes.SplitSeq
    afc0c0f0 Rely on Go-maintained commit value instead of handling that ourselves
    509ed8e1 Update to Go 1.24
    53bba51c RPM: build with sequoia for F43+
    85e4414c RPM: Re-org distro conditionals
    af27d1d8 Packit/RPM: Epoch and version fetching fixes
    193b5136 Update CONTRIBUTING.md
    cf5b488b [skip-ci] Update actions/stale action to v10
    a3cb7bf3 Packit: re-enable CentOS Stream jobs on PRs
    8675dece Packit/TMT: enable ELN testing on PRs
    e5cf4ec7 Update to tagged container-libs releases
    5489763c Update module github.com/spf13/pflag to v1.0.10
    4e452f97 Add --dest-force-compress-format option on copy
    31ca77ce Packit: enable ELN
    9558c9c0 Packit: replace files_to_sync with prepare-files
    cd978903 RPM: skopeo-tests only installs dependencies
    d5881b94 TMT: additions to make local TMT runs similar to testing-farm
    dea3a8f1 Update module github.com/spf13/cobra to v1.10.1
    11dedf8b Update module github.com/spf13/pflag to v1.0.9
    75eb26e6 Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY]
    19f1202c TMT: run systemtest via `make test-system-local`
    02055fb0 Makefile: inline logic for test-integration-local
    7e235ea3 Makefile: test-system-local checks for SKOPEO_BINARY
    bb1f0575 Makefile: validate-local depends on tools
    885a4fba fix(deps): update module github.com/stretchr/testify to v1.11.1
    d6463199 Migrate storage, image and common to monorepo and remote go.podman.io imports.
    2451f10d Allow running CI from rawhide images
    8602d2e5 Stop using fgrep
    0a70844b Update tests to work with the Sequoia c/image backend
    01252ab8 chore(deps): update dependency golangci/golangci-lint to v2.4.0
    056d83e6 Adding mohanboddu as community manager to MAINTAINERS.md
    2d34849c fix(deps): update module golang.org/x/term to v0.34.0
    5538ce8c fix(deps): update module github.com/containers/common to v0.64.1
    12340b3e fix(deps): update module github.com/containers/image/v5 to v5.36.1
    94ef22e9 fix(deps): update module github.com/containers/storage to v1.59.1
    f9d10b3c chore(deps): update dependency golangci/golangci-lint to v2.3.1
    af9f6d73 Bump to v1.21.0-dev
    e2c1eecd Bump to v1.20.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-10-18 21:50:49 -04:00
Bruce Ashfield
3fdf80a484 runc: update to v1.4.0-rc.2
Bumping runc to version v1.4.0-rc.2-13-g13a5c4ed, which comprises the following commits:

    ae199719 ci: only run lint-extra job on PRs to main
    8bb53e42 ci: bump golangci-lint to v2.5
    52ee0fed all: format sources with gofumpt v0.9.1
    61070cc0 CI: remove deprecated lima-vm/lima-actions/ssh
    42b405d5 libct: refactor setnsProcess.start
    e8e22ae1 libct: close child fds on prepareCgroupFD error
    5aa229f7 [1.4] libct: switch to (*CPUSet).Fill
    18fbdbe9 [1.4] deps: update to golang.org/x/sys@v0.37.0
    46331735 VERSION: back to development
    8aeb2a4b VERSION: release v1.4.0-rc.2
    a2f2cf31 CHANGELOG: add note about cpu shares changes
    0b8a41e3 fix(seccompagent): close received FDs, not loop index
    1f9157d6 libcontainer/intelrdt: add support for EnableMonitoring field
    d792f9fd [1.4] runc exec: use CLONE_INTO_CGROUP when available
    33382519 [1.4] libct: use manager.AddPid to add exec to cgroup
    7db9930f [1.4] libct: move exec sub-cgroup handling down the line
    f19a4c71 [1.4] libct: split addIntoCgroup into V1 and V2
    207a497c [1.4] libct: factor out addIntoCgroup from setnsProcess.start
    c443aee7 [1.4] script/setup_rootless.sh: chown nit
    910f1345 [1.4] Add memory policy support
    12ed7f73 [1.4] events/intelrdt: report full schemata
    517e7996 [1.4] libcontainer/intelrdt: add support for Schemata field
    3009f9d7 [1.4] libcontainer/intelrdt: refactor tests
    a0858eaf [1.4] Update runtime-spec
    fb0268a0 libcontainer: remove deprecated package "userns"
    edef954c test: runc run with personality syscall blocked by seccomp
    a6efa62d libct: setup personality before initializing seccomp
    b72f4a8d tests/int/cgroups: Use 64K aligned limits for memory.max
    bce56e00 libcontainer/validator: allow setting user.* sysctls inside userns
    6297cb16 [1.4] VERSION: back to development
    b2ec7f92 VERSION: release v1.4.0-rc.1
    081b8c25 CHANGELOG: forward-port v1.3.1 changelog
    1931ebf7 CHANGELOG: forward-port v1.2.7 changelog
    edc2eb60 build(deps): bump actions/setup-go from 5 to 6
    779c9e1d libct: user: remove deprecated module
    c04d9c44 ci/validate: add modernize run
    76281949 libcontainer/configs/validate: add doc.go
    ba68a17a libcontainer/configs: add validator unit tests for intelRdt
    b8a83ac2 libcontainer/intelrdt: support explicit assignment to root CLOS
    89e59902 Modernize code for Go 1.24
    b042b6d4 types/events: use omitzero where appropriate
    26602650 Add go 1.25, require go 1.24
    237cc980 libct/sys/rlimit_linux: drop go:build tag
    a38f42ab tests/int/help: simplify and fix
    c5e7bc87 tests/int/selinux: fix for non-standard binary name
    121192ad libct: reset CPU affinity by default
    d1f6acfa tests: add RUNC_CMDLINE for tests incompatible with functions
    ea385de4 tests: add sane_run helper
    a8faf925 CHANGELOG: document breaking change of runc update
    a876347d build(deps): bump github.com/coreos/go-systemd/v22 from 22.5.0 to 22.6.0
    eedec9c5 build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8
    96f4a90a Switch to packaged criu on arm
    9e0f9890 ci: bump golangci-lint to v2.4.x
    cfb22c9a build(deps): bump actions/checkout from 4 to 5
    10567484 ci: use criu built from source on gha arm
    1cf09680 CI: switch to GHA for arm
    db26a717 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
    8f0bb877 build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0
    bf33fe5f build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7
    620956c2 libcontainer/intelrdt: use Mkdir/Remove instead of MkdirAll/RemoveAll
    f6a52d7f build(deps): bump github.com/seccomp/libseccomp-golang
    3b533b23 script/lib.sh: remove obsoleted comment
    3a962655 libcontainer/intelrdt: use SecureJoin in NewManager
    e6b4b5a1 tests: bfq: skip tests on misbehaving udev systems
    ceef984f tests: clean up loopback devices properly
    f73e2837 libcontainer/intelrdt: refactor path handling
    85801e84 runc update: refuse to create new rdt group
    e846add5 libcontainer/configs/validate: check that intelrdt is enabled
    57b6a317 runc update: don't lose intelRdt state
    314dd812 tests/cmd: simplify getting net.UnixConn
    87b8f974 setupIO: close conn on error
    7d2161f8 setupIO: simplify getting net.UnixConn
    1a26cf3a ci: speed up criu-dev install
    1c2810be ci: bump golangci-lint to v2.3.x
    66a533eb tests/int/events.bats: don't require root
    3620185d rootfs: remove /proc/net/dev from allowed overmount list
    46dac589 tests/int/update: fix getting block major
    6a0644df build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0
    859feb8e build(seccomp): Add audit support for loong64
    fc8162e6 build(deps): bump github.com/opencontainers/cgroups from 0.0.3 to 0.0.4
    b3432118 tests/int/cgroups.bats: exclude dmem controller
    4a6ef6b9 build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0
    a09e7038 docs/systemd.md: amend
    aa0e7989 libcontainer: close seccomp agent connection to prevent resource leaks
    da909478 deps: bump cgroups to v0.0.3, fix tests
    f24aa06e libct: State: ensure Resources is not nil
    1b39997e Preventing containers from being unable to be deleted
    d22a4211 libct/configs: stop using deprecated id
    b25bcaa8 libct/configs: fix/improve deprecation notices
    a10d338e libct/configs: add package docstring
    8d180e96 Add support for Linux Network Devices
    889c7b27 update runtime-spec
    ed5df5f9 libcontainer/configs package doc
    0b01dccf runc update: handle duplicated devs properly
    7696402d runc update: support per-device weight and iops
    99a4f198 build(deps): bump github.com/urfave/cli from 1.22.16 to 1.22.17
    31d141e2 build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0
    8b0e7511 build(deps): bump github.com/containerd/console from 1.0.4 to 1.0.5
    ce3cd423 criu: simplify isOnTmpfs check in prepareCriuRestoreMounts
    f91fbd34 criu: inline makeCriuRestoreMountpoints
    b8aa5481 criu: ignore cgroup early in prepareCriuRestoreMounts
    0c93d41c criu: improve prepareCriuRestoreMounts
    04be81b6 fix rootfs propagation mode
    995a39a4 ci: add scheduled run of GHA CI
    74209b73 ci/gha: allow to run jobs manually
    62e6ab6d gha/ci: allow validate/all-done to succeed for non-PRs
    b39bd105 ci/gha: fix exclusion rules
    b206a015 deps: bump opencontainers/cgroups to v0.0.2
    ae00c2bd tests/int: simplify using check_cpu_quota
    fbf1a320 build(deps): bump github.com/vishvananda/netlink from 1.3.0 to 1.3.1
    5cdfeea7 CHANGELOG: forward-port entries from 1.3.0
    e0282287 bug:fix runc delete run before delete exec.fifo
    0623ea10 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
    c1958d88 build(deps): bump golangci/golangci-lint-action from 7 to 8
    9f86496c ci: Check for exclude/replace directives
    67b8a685 go.mod: Delete exclude directives
    b0aa863f ci: bump golangci-lint to v2.1
    d920a722 build(deps): bump github.com/seccomp/libseccomp-golang
    8e3ee502 ci/cross-i386: retry adding ppa
    c12c99b7 runc: embed version from VERSION file
    d54eaaf2 runc --version: use a function
    3e3e0482 ci: upgrade to criu-4.1-2 in Fedora
    58c3ab77 rootfs: improve error messages for bind-mount vfs flag setting
    30302a28 mount: add string representation of mount flags
    87ae2f84 Unify and fix rootless key setup
    b520f750 ci: install newer criu for almalinux-8
    d7285e46 Fix "invalid workflow file" github actions error
    5f4d3f36 libct/apparmor: don't use vars for public functions
    08ebbfc8 tests/cmd/remap-rootfs: fix mips builds
    1d78cb21 Completely remove --criu option
    c8991936 ci: add check for toolchain in go.mod
    e34c1a04 CHANGELOG: Port 1.2.x changes
    c5ab4b6e runc pause/unpause/ps: get rid of excessive warning
    fda034c9 pause: refactor
    75a4546b go.mod: rm toolchain
    0a9639e3 build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0
    c5e0ece4 build(deps): bump golang.org/x/sys from 0.31.0 to 0.32.0
    19c65154 tests: Add env var tests
    09501d96 libct: Override HOME if its set to the empty string
    bb5aa116 build(deps): bump github.com/moby/sys/user from 0.3.0 to 0.4.0
    bf386464 libct: we should set envs after we are in the jail of the container
    4a0e282b test: check whether runc set a correct default home env or not
    7fdec327 Use any instead of interface{}
    17570625 Use for range over integers
    f64edc4d ps: use slices.Contains
    ef5acfab libct/configs: use slices.Delete
    0fc2338d libct/specconv: use maps.Clone
    7a58d823 .golanci-extra: disable staticcheck QF1008
    0b536265 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
    5cfd1a62 build(deps): bump bats-core/bats-action from 3.0.0 to 3.0.1
    131bdac1 tests/int/selinux: test keyring security label
    c735c073 tests/integration/selinux: collect user_avc as well
    491326cd int/linux: add/use Recvfrom
    e655abc0 int/linux: add/use Dup3, Open, Openat
    c690b66d int/linux: add/use Exec
    431b8bb4 int/linux: add/use Getwd
    8cc1eb37 Introduce and use internal/linux
    b68cbdff criu: Add time namespace to container config after checkpoint/restore
    127e8e68 ci: bump to golangci-lint v2.0
    9b3ccc19 libct/intelrdt: fix staticcheck ST1020 warnings
    30f8acab Fix staticcheck ST1020/ST1021 warnings
    9510ffb6 Fix a few staticcheck QF1001 warnings
    6405725c libct: fix staticcheck QF1006 warning
    fdb69163 notify_socket.go: fix staticcheck warning
    4622bb87 build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6
    a638f133 .golangci.yml: add nolintlint, fix found issues
    d00c3be9 ci: bump codespell to v2.4.1, fix some typos
    65e0f2b7 libct/int: use destroyContainer
    1aebfa3e libct/int: don't use _ = runContainerOk
    f55400dc .github: Improve issue template description
    bac33825 build(deps): bump github.com/opencontainers/selinux
    bc96bc85 libct/seccomp: use maps and slices pkgs
    370733b7 libct/cap: rm mapKeys, use maps.Keys, slices.Sorted
    3a33b6a3 Make state.json 25% smaller
    9c5e687b libct: Use chown(uid, -1) to not change the gid
    d31e6b87 ci: bump bats to v0.11.0
    8e653e40 script/setup_host_fedora.sh: use bash arrays
    a76a1361 script/setup_host_fedora.sh: remove -p from mkdir
    af386d1d tests/int: rm some "shellcheck disable" annotations
    b48dd651 ci: bump shellcheck to v0.10.0
    6e5ffb7c Makefile: bump shfmt to v3.11.0
    53931553 libct: log a warning on join session keyring failure
    9aeb7905 tests/int/selinux: fix skip message
    5ac77ed6 libct/int: add/use needUserNS helper
    1d9bea53 .cirrus.yml: install less dependencies
    1afa1b86 signals: replace unix.Kill with process.Signal
    346c80d7 libct: replace unix.Kill with os.Process.Signal
    135552e5 CI: migrate Vagrant + Cirrus to Lima + GHA
    d5fe5303 build(deps): bump golang.org/x/net from 0.36.0 to 0.37.0
    000cdef7 build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0
    79e9cf53 doc: update spec-conformance.md
    12c2e21f build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0
    05e83fc6 deps: bump go-criu to v7
    5d6e7e12 VERSION: back to development
    6a3f8ea3 skip read /proc/filesystems if process_label is null

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-10-18 21:27:03 -04:00