Commit Graph

2688 Commits

Author SHA1 Message Date
Bruce Ashfield
57fe8d0364 image-oci-unmoci: preserve file modes
Based on the following patch:

   Subject: [meta-virtualization][PATCH] image-oci-umoci: preserve file modes in rootfs
   From: "Florian Wickert via lists.yoctoproject.org" <FlorianWickert=gmail.com@lists.yoctoproject.org>

   cp does not preserve file modes by default.
   This will break sudo (among others) which needs the suid flag to do its
   work.

   This patch adds the --preserve=mode flag to the cp call to fix this.

   Signed-off-by: Florian Wickert <FlorianWickert@gmail.com>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:10 +00:00
Chen Qi
3763a3a9a6 cri-o: fix textrel QA issue
Basically we pass "-buildmode=pie" to fix textrel QA issue.

A new patch is added and submitted to upstream:

  0001-Makefile-introduce-GO_TEST-for-more-flexible-configu.patch.

With this new patch, the old patch, 0001-Add-trimpath-to-build-nri.test.patch,
could be dropped.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:10 +00:00
Chen Qi
7834a259ad cri-o: fix already-stripped QA issue and clean up
Set DEBUG=1 to avoid stripping.
See https://github.com/cri-o/cri-o/blob/main/Makefile#L93

Set STRIP=true to avoid stripping bin/pinns.
See https://github.com/cri-o/cri-o/blob/main/pinns/Makefile#L4

ALLOW_EMPTY:${PN} = "1" is not needed. Remove it.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Chen Qi
af1d32686e go-metalinter: remove it from podman's DEPENDS
This package is pure source package and its only user is podman's
DEPENDS. The current podman does not need it to be built successfully.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
fd1d4c65e4 Revert "k3s: WIP: [needs newer go]: not for merge: upgrade"
This reverts commit b2a271ea4d9c0703812bee1f00dd2735e4ae8afc.
2025-01-17 19:17:09 +00:00
Bruce Ashfield
3ec3b06050 Revert "k8s: WIP [needs newer go]: not for merge: update to -tip"
This reverts commit e27c332dc3fc55c6892c5dcd4c31264c4033b40b.
2025-01-17 19:17:09 +00:00
Bruce Ashfield
054b06692c Revert "docker-compose: WIP [needs go 1.22.10+]: not for merge: update to v2.32.2"
This reverts commit 61c4511b2ac313c587a42012bd0e188b9b196758.
2025-01-17 19:17:09 +00:00
Bruce Ashfield
a8d5387479 k3s: WIP: [needs newer go]: not for merge: upgrade
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
d5633843dd k8s: WIP [needs newer go]: not for merge: update to -tip
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
cdc4719904 docker-compose: WIP [needs go 1.22.10+]: not for merge: update to v2.32.2
Bumping compose to version v2.26.1-287-gfa3950346, which comprises the following commits:

    fa3950346 image can be set to a local ID, that isn't a valid docker ref
    a35158502 can't render progress concurrently with buildkit
    b6db1380e exclude one-off container running convergence
    2ebb47543 Only override service mac if set on the main network.
    d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26
    2b21c5df9 fix relative path in compose file
    1f3c10eb4 bump compose-go to v2.4.7
    68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token
    3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906
    be09b2e8c checkExpectedVolumes must ignore anonymous volumes
    571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name
    8f644eea7 only check bind mount conflict if sync action is involved
    56e92e34b use the 3 latest major versions of the engine to run e2e step
    a42a04dfe bump Golang version to v1.22.10 and update CI actions
    34bcd03a7 add --pull to run command
    ed61e42f9 CI to validate fmt
    65696bb1c `make fmt` so any contributor can enforce formatting
    446e00520 format code with gofumpt
    c01c9c29f e2e test to prevent future regression
    038c81f34 only check volume mounts for updated config
    a20b69ac5 e2e test for recreate volume
    977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
    d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
    f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
    8e0520e71 prompt user to confirm volume recreation
    332311358 Recreate container on volume configuration change
    df9e420dd introduce watch restart action
    142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions
    700c586bc bump docker/buildx to latest release
    fc566509d fix support for service.mac_address
    e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
    624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
    a1729c52d Update pkg/e2e/watch_test.go
    254224c18 first watch action for a file event wins
    0861e6845 fix
    af5b74850 revisit TestDebounceBatching
    32a22c1f4 introduce sync+exec watch action
    e6ea8fb96 log configuration error as a watch log event
    043465448 do not require a build section but for `rebuild` action
    1d0839086 pull --quiet should not drop status message, only progress
    69a83d130 use latest engine tags
    781b9f1cd Bump buildx to 0.19.1
    cbff0e555 be sure everything has been cleanup at the end of each tests
    e4222bff5 add local config.json to test configuration dir if exists
    25197fe6d disable failing TestBuildSSH test
    85cdaf9dd fix build with bake
    a8469db83 bump containerd to v1.7,24
    08488dae5 bump google.golang.org/grpc to v1.68.0
    cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2
    6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2
    6b3e57503 only stop dependent containers ... if there's some
    8e497a128 disable TestNetworkConfigChanged which is unstable on CI
    5aed70437 only check attached networks on running containers
    1ff9b758d fix: commit tests
    9eaba5597 feat: add commit command
    a85f8a40a run build tests against bake
    095f65cb4 delegate build to buildx bake
    208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
    2d148faed use service.stop to stop dependent containers
    43ac1e31c Update wait-timeout flag usage to include the unit
    5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2
    ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2
    5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
    a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1
    3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1
    d4fa63fdc Update pkg/compose/convergence.go
    c21d4cfb4 detect network config changes and recreate if needed
    61f1d4f69 go.mod: github.com/docker/buildx v0.18.0
    f7cce281d go.mod: github.com/moby/buildkit v0.17.1
    bcaacc7f2 gha: test against docker engine v27.4.0
    3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub
    2bb67f270 remove ddev e2e tests
    bf521fe3a implement remove-orphans on run
    11e9621da ci: enable testifylint linter
    a9de9abcf Emit events for building images
    799ab842a Fix compose images that reutn a different image with the same ID
    2f65ace2a remove obsolete containers first on scale down
    aa0a4189e pass stal bot inactivity limit from 6 to 3 months
    eba3ff8f3 fix(config): Print service names with --no-interpolate
    6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
    dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
    a8bfbc147 bump compose-go v2.4.4
    fbbd6f83d Avoid starting all services on rebuild
    a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact
    361c0893a build(deps): bump github.com/compose-spec/compose-go/v2
    513b6128c Service being declared in a profile must not trigger re-creation
    eececb9ad Add profile e2e test case to document in compose
    501b5acde Update `MAINTAINERS` file
    f51bc4cd0 bump compose-go to version v2.4.2
    517f87a37 bump google.golang.org/grpc to v1.67.1
    718049cbd bump go.uber.org/mock to v0.5.0
    02371f312 bump golang minimal version to 1.22 in go.mod
    a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23
    51ebeb544 introduce generate command as alpha command
    fafaa9c5b bump compose-go to version v2.4.1
    fc9c3cde0 Add license header to dockerignore_test.go
    73bfbab54 fix
    2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go
    eeea049f1 push: Fix error message typo
    26064d4b6 allow usage of -f flag with oci Compose artifact
    7c46beb8a resurrect --all flag for cp to target oneoff container
    aa1ec4524 connect to external networks by name
    a4ee6ca7a don't warn about uid/gid not being supported while ... they are
    5617eff0c bump compose-go to v2.4.0
    fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command
    0aad9595a don't use progress to render restart, which hides logs
    813900180 compose-go clean volume target to avoid ambiguous comparisons
    82417bd5b add support for bind.recursive
    0cbb73c02 Improve error message to include expected network label
    38e3d670a desktop: allow this client to be identified via user-agent
    24c78728e bump compose-go to v2.3.0
    9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability
    8da82c98e gha: set default permissions to "contents: read"
    1a8c85548 Add security policy
    15bd0b0c5 add support for raw env_file format
    39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0
    3a95a0872 add support for CDI device request using `devices`
    f794c79eb Support Dockerfile-specific ignore-file with watch
    407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav
    82b41b9eb introduce service hooks
    6c06170eb pass device.options to engine
    60c1311f6 chore: remove errors depricated pkg
    17add87e4 fix: validate-go-mod
    bf0418bac fix: lint
    b9d0c77cd feat: add export command
    bdb854561 fix(convergence): Serialize access to observed state
    41df35c1f Remove bind options when creating a volume type
    3ef5045a0 Bump docker v27.3.1
    d9df7aab6 fix(push): Fix unexpected EOF on alpha publish
    c9d96b449 use compose-go version fixing extra_hosts unicity issue
    1744b4576 Show watch error message and open DD only when w is pressed
    87f457e7d add tests to down.go
    abcc91e2b fix(down): Fix down command if specified services are not running
    8b9fe8984 After container restart register printer consumer
    34b18194f check secret source exists, as bind mount would create target as a folder otherwise
    ce27dba52 wait for dependent service up to delay set by --wait-timeout
    d2b945613 append unix-style relative path when computing container target path
    9c60fe67d revert commits link to mount API over bind changes
    c16df17e1 don't set propagation if target engine isn't linux
    20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2
    f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2
    cb00aaad2 set propagation default
    e885bc084 Remove custom codeql workflow
    73d3a25eb fix import
    3524bcfad chore(watch): Add debug log when skipping service without build context
    1076f1d9a stop dependent containers before recreating diverged service
    16652ed26 Fixed possible `nil` pointer dereference
    c6a76b9bd bump github.com/docker/buildx v0.17.1
    3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1
    86ef8e62c gha: test against docker engine v27.3.0
    8bf0627ea show sync files only in debug level
    2e1419168 chore(watch): Add changed files path/count to log
    155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
    8db0cba0a bump compose-go to version v2.2.0
    a7424435b Restore compose v1 behavior to recreate containers when ran with -V
    d445ebba3 fix linting issues with golangci-lint 1.60.2
    f592aad10 bump golang to version 1.22.7
    ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0
    150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0
    524a97e55 Fix typos
    1d608e033 Use logrus instead of direct output to stderr.
    329ad7392 attach: close streams when done
    b633c5c3e Fix typo in pull.go
    e6ef8629a Allow combination of bind mounts and 'rebuild' watches
    d658fecc6 service hash must exlude depends_on
    f9c7a0cc0 prefer mount API over bind
    6e172d6b8 docs: duplicate documentation for root cmd
    98e261ba3 docs(wait): Fix wait command description
    11c7a25ae allow to add empty line in the logs when nav menu activated
    234036756 upgrade docker versions
    9c03797f9 initial sync files that modified after image creation
    485c0eba5 initial sync for root directory
    69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go
    1601ead7b docs: Update docker compose kill usage
    ea4ccf639 Fix stop on file chane for sync-restart action
    b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1
    adba639e8 remove all dependabot update PRs for OTel dependencies
    d8518529c gp.mod: github.com/gofrs/flock v0.12.1
    c79f15da9 go.mod: golang.org/x/sys v0.22.0
    3f55382ff update to go1.21.12
    44337d2bb Enhance JSON progress events with more fields.
    bc733508d bump compose-go v2.1.5
    c422b5447 bump github.com/docker/cli v27.1.0
    e74441c90 bump github.com/docker/docker v27.1.0
    2bac32a46 bump github.com/containerd/containerd v1.7.20
    f278400fb gha: add docker 27.1.0
    4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers
    06bf339a4 fix: typos
    231ea1005 update docs generation to avoid man pages generation
    46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0
    d3d378b92 restore setEnvWithDotEnv
    163cdfd31 empty env variable with no value must be unset in container
    25f85938b exclude unnecessary resources after services have been selected
    cacbca859 change time for stale bot
    ecac13f27 Remove debug mode and run twice a week
    14793cc2e Add stale workflow
    11d5ecdc7 update docs
    9549a213b feat(watch): Add --prune option to docker-compose watch command
    da434013e Remove COMPOSE_MENU env from e2e tests
    ace69c96a Use rawjson for the build backend.
    2db04c1e4 Set logging format to JSON.
    8f7cd0048 Format errors as JSON when in JSON progress mode.
    5a6e1a7e2 Pass 'plain' instead of 'json' to build backend
    06545d066 Add JSON stream progress writer
    075fd9345 go.mod: docker/cli, docker/docker v27.0.3
    d062ad739 gha: test against docker v27.0.3
    7cd5209cc go.mod: docker/cli, docker/docker v27.0.2
    f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out`

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
6bb241b06e xen-tools: update to 4.20.0-rc1
Bumping xen to version 4.20.0-rc1-23-g75d88297f5, which comprises the following commits:

    75d88297f5 docs/misra: Document ECLAIR extension to Rule 20.7
    24c685286d Manual pages: Fix a few typos
    274c509162 xl: properly dispose of libxl_dominfo struct instances
    737e8cc91b xl: properly dispose of vTPM struct instance
    c33e14abb1 xentrace: free CPU mask string before overwriting pointer
    a29a1fb5a5 docs/misc: Fix a few typos
    f0f1050d47 docs: Fix some typos in the design docs
    22d7141d2e xen/ppc: Fix double xen_ulong_t typedef in public/arch-ppc.h
    6b97c31146 docs/sphinx: gitignore generated files
    0edb30455b docs: rationalise .gitignore
    f79af67982 docs/sphinx: import sys for error reporting
    9ee63ef540 automation/gitlab: disable coverage from clang randconfig
    164ae033ad x86/time: prefer CMOS over EFI_GET_TIME
    7eba2f46a1 x86/time: introduce command line option to select wallclock
    405fdcee91 automation/eclair: make Misra rule 20.7 blocking
    d68de81344 docs: Improve spelling of few cases in the documentation
    16a670ab53 MAINTAINERS: Change reviewer of the ECLAIR integration
    f4697f7a35 misra: add deviation for MISRA C Rule R11.8
    ff10aa9d8f x86: Add Support for Paging-Write Feature
    b94305d984 x86: Rename _rsvd field to pw and move it to the bit 58
    8aaf5dc2c9 build: Set DATE to SOURCE_DATE_EPOCH if available
    5dd85073d1 docs/Makefile: Add ppc and riscv to DOC_ARCHES
    2ab44af38f CI: Add an x86_64 Clang Randconfig job
    19730dbb3f Update Xen version to 4.20-rc
    3604d15d1a Config.mk: Pin QEMU_UPSTREAM_REVISION
    b8f80aca12 xen/arm: Fully initialise struct membanks_hdr fields
    b9f9b39645 docs: fusa: Add dom0less domain configuration requirements
    4d8acc9c1c xen/events: fix race with set_global_virq_handler()
    a1a1e2b7dc xen/arm: ffa: fix build with clang
    40f35d07aa CI: Update Fedora to 41
    70f5a875be xen/arm64: Drop relocate_and_switch_ttbr() stub
    83a4dade0f xen/flask: Wire up XEN_DOMCTL_set_llc_colors
    7fa1411676 xen/flask: Wire up XEN_DOMCTL_dt_overlay
    29daa72e40 xen/flask: Wire up XEN_DOMCTL_vuart_op
    645b8d48c7 x86emul: correct put_fpu()'s segment selector handling
    d3709d1324 x86emul: VCVT{,U}DQ2PD ignores embedded rounding
    15bbbecad5 libxl: drop setting XEN_QEMU_CONSOLE_LIMIT in the environment (XSA-180 / CVE-2014-3672)
    25492368ea xen/perfc: Cleanup
    e7ea1de774 xen/perfc: Trim includes
    02c24a1325 xen/perfc: Add perfc_defn.h to asm-generic
    8900010501 xen/perfc: Drop arch_perfc_{gather,reset}()
    f29cc14de1 x86/amd: Misc setup for Fam1Ah processors
    0009feff8b x86/pv: Fix build with Clang and CONFIG_PERF_COUNTERS
    555866cb56 x86/traps: Rework LER initialisation and support Zen5/Diamond Rapids
    7e6edeaee3 eclair-analysis: tidy toolchain.ecl configuration and mark Rule 1.1 clean
    4288576c16 xen/scripts: Fix regex syntax warnings with Python 3.12
    a1746cd443 x86/spec-ctrl: Support for SRSO_U/S_NO and SRSO_MSR_FIX
    0d729221ab xen/arch/x86: make objdump output user locale agnostic
    6e1036b197 tools: fix typo: subsytem -> subsystem
    c6d0d89c30 docs/man: fix typo: hexidecimal -> hexadecimal
    5becb6bbad docs/man/xen-vbd-interface.7: Provide properly-formatted NAME section
    6419020270 CHANGELOG: Mention LLC coloring feature on Arm
    869aeb7f02 tools: Introduce a xc_xenver_buildid() wrapper
    75f9160762 tools: Introduce a non-truncating xc_xenver_cmdline()
    1b421d52b2 tools: Introduce a non-truncating xc_xenver_changeset()
    6625d581ec tools: Introduce a non-truncating xc_xenver_capabilities()
    504ea442e3 tools: Introduce a non-truncating xc_xenver_extraversion()
    583a0fb0fa tools/libxc: Move xc_version() out of xc_private.c into its own file
    3d94cc8809 xen/version: Misc style fixes
    8eed14bf9d xen/version: Fold build_id handling into xenver_varbuf_op()
    e3bb1b6525 xen/version: Introduce non-truncating deterministically-signed XENVER_* subops
    7cf44c61c5 xen/version: Calculate xen_capabilities_info once at boot
    075e7e35db MAINTAINERS: Add myself as maintainer for NXP S32G3
    294faa3760 SUPPORT.md: Describe SCMI-SMC layer feature
    f09ee5f550 CHANGELOG.md: Add NXP S32G3 and SCMI-SMC layer support mentions
    78b0b025be xen/arm: platforms: Add NXP S32G3 Processors config
    a767076c03 xen/arm: vsmc: Enable handling SiP-owned SCMI SMC calls
    3e322bef8b xen/arm: firmware: Add SCMI over SMC calls handling layer
    e7a80636f1 xen/arm: add cache coloring support for Xen image
    f376ff0e4f xen/arm: make consider_modules() available for xen relocation
    0975bab5ea xen/arm: add Xen cache colors command line parameter
    95debe51a9 xen: add cache coloring allocator for domains
    5948dc1675 xen/arm: add support for cache coloring configuration via device-tree
    748bd725fb tools: add support for cache coloring configuration
    6985aa5e0c xen: extend domctl interface for cache coloring
    6cdea3444e xen/arm: add Dom0 cache coloring support
    02975cc383 xen/arm: permit non direct-mapped Dom0 construction
    f4985fce6f xen/arm: add initial support for LLC coloring on arm64
    44dd6d4a12 xen/common: add cache coloring common code
    8089e4ba44 automation: Pin down CONFIG_QEMU_PLATFORM for RISC-V's randconfig job
    e547f730e8 xen/ioreq: Fix check for CONFIG_ARCH_VCPU_IOREQ_COMPLETION
    e6472d4668 tools/xg: increase LZMA_BLOCK_SIZE for uncompressing the kernel
    dd05f7c8dd x86/hvm: Use constants for x86 modes
    d17b7562d4 tools/libxg: Don't gunzip the guests initrd
    2e22a8ba29 x86/boot: Use printk_once() instead of opencoding it
    63ebfcca04 x86/sched: Drop unused includes from credit2.c
    188d568db8 xen/sched: Untangle credit2 vs cpu_nr_siblings()
    9a17d5c7c9 xen/riscv: relocating and unflattening host device tree
    0a510b8f81 xen/riscv: implement prereq for DTB relocation
    81d80f44ef xen/riscv: implement data and instruction cache operations
    ec0ed39265 xen/riscv: update layout table in config.h
    b527a27e17 xen/page_alloc: introduce preserved page flags macro
    b359d38013 tools: add a dedicated header file for barrier definitions
    826a9eb072 tools: Fix regex syntax warnings with Python 3.12
    f9a2e86f21 x86/CET: Support cet=<bool> on the command line
    171cb318de MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade
    631f535a3d xen: update ECLAIR service identifiers from MC3R1 to MC3A2.
    d95703eb83 docs/guest-guide: Discuss when not use a hypercall page
    f38fd27c4c x86/io-apic: prevent early exit from i8259 loop detection
    4cde11cdae xen/arm: Check for Static Heap feature when freeing resources
    df8a0eec1c xen/arm: ffa: Add indirect message support
    e6794b683b xen/arm: ffa: Remove per VM notif_enabled
    42b6f47132 xen/arm: ffa: move message function into ffa_msg.c
    6dceb1378d xen/arm: ffa: Transmit RXTX buffers to the SPMC
    2833aa172f xen/arm: ffa: Use bit 15 convention for SPs
    8a932b91aa xen/arm: ffa: Rework partition info get
    2f9f240a5e xen/arm: ffa: Fine granular call support
    da07df5558 xen/arm: ffa: Fix version negotiation
    1a20f862f3 xen/arm: ffa: Rework feature discovery
    cf15d85707 xen/arm: ffa: Rework firmware discovery
    2e955d2554 tools/misc: Drop xensymoops
    58ba55959a xen: add a domain unique id to each domain
    5793b84c5e xen/xsm: make getdomaininfo xsm dummy checks more stringent
    df98c03864 xen/riscv: add {set,clear}_fixmap() functions for managing fixmap entries
    f5bf0d100b xen/riscv: reorder includes in asm/page.h alphabetically
    0eb8b71604 xen/riscv: add destroy_xen_mappings() to remove mappings in Xen page tables
    89dca886ac arm/domain_build: Make find_unallocated_memory() more generic
    a974366f7a MAINTAINERS: add Anthony, Michal, Roger to THE REST
    bf8a209915 tools/ocaml: Specify rpath correctly for ocamlmklib
    13df44f8a1 CHANGELOG: Mention xl suspend/resume
    bec5b2447c x86: p2m-pod: address violation of MISRA C Rule 2.1
    d636e0ed91 x86/FPU: make vcpu_reset_fpu() build with old gcc
    1645bb7997 xen/arm: Move setup_frametable_mappings to arm/mmu
    c8e59af7ad xen/arm: Use vmap_contig instead of __vmap where it's possible
    b772a9f517 arm/setup: Move MMU specific extern declarations to mmu/setup.h
    57fe471f56 common/vmap: Fall back to simple allocator when !HAS_VMAP
    d39a92aefe xen/mmu: enable SMMU subsystem only in MMU
    214f9cc67b xen/mpu: Map early uart when earlyprintk on
    dc8e1b33a5 tools/xl: add suspend and resume subcommands
    5a455a52ea bootfdt: Add missing trailing commas in BOOTINFO_{ACPI,SHMEM}_INIT
    28301682f4 libs/guest: Fix migration compatibility with a security-patched Xen 4.13
    0cc8845fb9 CI: Update to FreeBSD 14.2
    ee7edb0d29 xen/arm: mpu: Implement a dummy enable_secondary_cpu_mm
    5423a08eae xen/arm: mpu: Enable MPU
    868fe87c46 xen/arm: mpu: Create boot-time MPU protection regions
    b30bad3832 xen/arm32: Get rid of __memzero()
    126b0a6e53 xen/Kconfig: livepatch-build-tools requires debug information
    4191619e08 libxl: extend IGD check
    3df8812f90 x86emul: correct VPBROADCASTMW2D predicate testing
    4c5d9a01f8 x86emul: MOVBE requires a memory operand
    6b8c85872e xl: Keep monitoring suspended domain
    7bd8d37897 drivers/char: rename arm-uart.c to uart-init.c
    a14593e399 xen/device-tree: Allow region overlapping with /memreserve/ ranges
    4a06cc7178 xsm/flask: missing breaks, MISRA rule 16.4
    738df43521 x86/setup: fix typo in acpi=off description
    bf37973929 xen/riscv: finalize boot allocator and transition to boot state
    6b71d4f849 xen/riscv: initialize the VMAP_DEFAULT virtual range
    e6cf43717d xen/riscv: introduce setup_mm()
    c8e3e39085 page-alloc: make scrub_one_page() static
    a24f1c042d libxl/ACPI: bound RSDP allocation
    4e0b1adff0 libxl/ACPI: don't hard-code guest page size
    fcf91ce9de x86/pv: don't populate the GDT/LDT L3 slot at domain creation
    8fe330a4da xen/pci: remove logic catering to adding VF without PF
    931eaa21cd x86/msi: fix locking for SR-IOV devices
    4e18a39056 xen/pci: introduce PF<->VF links
    b661fe107d build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS
    9ea9c1c49b docs/sphinx: Refresh config for newer Sphinx
    233f03dd83 docs/sphinx: Fix FUSA indexing
    2e853c1920 xen/common: Move gic_dt_preinit() to common code
    722d93bc91 x86/pvh: also print hardware domain pIRQ limit for PVH
    5c56361c61 x86/irq: fix calculation of max PV dom0 pIRQs
    ca5c01513a xen/arm32: mm: Rename 'first' to 'root' in init_secondary_pagetables()
    c0bf8816c9 xen/bitops: Fix break usage in for_each_set_bit() loop
    f52004b20e x86/ucode: Only rescan features on successful microcode load
    365f408339 x86/boot: Load microcode much earlier on boot
    e0058760a0 MISRA: Mark Rule 8.4 as clean
    c74230bdce x86/mce: Compile do_mca() for CONFIG_PV only
    5cc971a4bf CI: New stage "containers" to rebuild some containers
    a231538acd CI: Define XEN_REGISTRY variable
    5726d8e5ef CI: Remove deprecated "only:variables" in favor of "rules:if"
    96efb13459 bootfdt: Unify early printing of memory ranges endpoints
    22d9e75944 misra: increase identifiers length to 63 and align doc with ECLAIR config
    cd7cc5320b x86/boot: add start and size fields to struct boot_module
    6308301208 x86/pmstat: deal with Misra 8.4 violations
    a1ed107f59 x86/boot: Introduce boot-helpers.h
    429840a81e xen/bootinfo: Include declaration for fw_unreserved_regions()
    488579e956 x86/msi: fix Misra Rule 20.7 in msi.h
    9e8c97f3eb x86/msi: prune unused macros
    3ac41c60e8 x86/mm: fix IS_LnE_ALIGNED() to comply with Misra Rule 20.7
    3128d7248f x86/boot: introduce module release
    891f077a71 xen/arm: use domain memory to allocate p2m page tables
    88c40dc108 x86/boot: convert domain construction to use boot info
    8417b4b0bb x86/emul: Adjust get_stub() to avoid shadowing an outer variable
    b1b657afa9 x86/ucode: Drop MIS_UCODE and microcode_match_result
    91afda4a34 x86/ucode: Fix cache handling in microcode_update_helper()
    acd9bf6f89 x86/ucode: Remove the collect_cpu_info() call from parse_blob()
    b1ebb6461a x86/mm: fix alignment check for non-present entries
    d2bbb0d455 xen/multicall: Change nr_calls to uniformly be unsigned long
    d2c214ede0 x86/trampoline: Rationalise the constants to describe the size
    5c9b7a6659 x86/trampoline: Document how the trampoline is laid out
    7d73c6f196 x86/trampoline: Simplify the wakeup_stack checks
    04a77fb843 x86/trampoline: Check the size of the permanent trampoline at link time
    74376e015c xen/multiboot: Make headers be standalone
    5022dfe513 xen/earlycpio: Fix header to be standalone
    41c8049608 x86/mm: ensure L2 is always freed if empty
    73194b5701 x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings()
    5b52e1b043 x86/mm: skip super-page alignment checks for non-present entries
    97fb6fcf26 x86/mm: introduce helpers to detect super page alignment
    939a9e800c x86emul: avoid double memory read for RORX
    d5febe7f64 automation/eclair: tag Rule 16.3 as clean
    3d1db2942f x86/emul: use pseudo keyword fallthrough
    5bf8f2f5cc x86/emul: auxiliary definition of pseudo keyword fallthrough
    1179d51dcb x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode
    5b8780869e x86emul: correct EFLAGS testing for BMI1/BMI2
    380b32a476 x86/e820: Fix parameter names of reserve_e820_ram()/e820_change_range_type()
    5c8b638c2a x86/apic: Include genapic.h in delivery.c
    38febce5b3 x86/ucode: Rework Intel's microcode_update_match()
    39360c38c3 x86/ucode: Rework AMD's microcode_fits()
    502478bc1d x86/ucode: Fold microcode_update_cpu() and fix error handling
    41314ccee8 x86/ucode: Don't use microcode_update_cpu() in early_microcode_load()
    d3da79e1d1 drivers/char: Use sub-page ro API to make just xhci dbc cap RO
    8847d6e23f x86/mm: add API for marking only part of a MMIO page read only
    64d2290cf9 mm: adjust _xvrealloc() declaration
    0bfe567b58 libxl: Use zero-ed memory for PVH acpi tables
    7d5781d526 x86/boot: Setup correctly fs segment for bogus_real_magic
    9ef78a614d x86/trampoline: Change type of trampoline_phys to uint32_t
    c839c8c3fc x86/wakeup: Fix code generation for bogus_saved_magic
    d4829a20ad x86: Drop mach_mpspec.h
    b80c535794 x86: Drop mach-default/bios_ebda.h
    cd7b518680 x86: Move mach-default/io_ports.h to asm/io-ports.h
    fc147fec19 x86: Move mach-default/irq_vectors.h to asm/irq-vectors.h
    b212fefc04 x86: Delete mach_apic.h
    5eb9c14324 x86/mach-apic: Move the genapic wrappers to genapic.h
    b44d96ecb3 x86/mach-apic: Drop set_apicid()
    bdb509c382 x86/mach-apic: Drop check_apicid_present()
    9aa1e60b90 x86/mach-apic: Drop check_apicid_used()
    bffc52ea26 x86/mach-apic: Drop ioapic_phys_id_map()
    a384eef9e3 x86/mach-apic: Drop apic_id_registered()
    0a51e5e17b x86/mach-apic: Move generic_*_probe() declarations into genapic.h
    7f81e81774 x86: Drop includes of mach_apic.h
    19c3016a8a VT-d: Drop includes of mach_apic.h
    718400a54d xen/x86: prevent addition of .note.gnu.property if livepatch is enabled
    c8754cbc1d CHANGELOG: Add note about xAPIC destination mode change
    3eda1f8912 iommu/ipmmu-vmsa: Add Renesas R8A779G0 (R-Car V4H) support
    6c88e35fa1 x86/boot: Fix bootinfo.h to be standalone
    c62eed3ee6 x86/trampoline: Collect other scattered trampoline symbols
    75035c386e x86/boot: add cmdline_pa to struct boot_module
    ccdb7e08fd x86/boot: move kextra into boot info
    6320f08206 x86/boot: move headroom to boot modules
    37bd4e90bd NUMA: Introduce NODE_DATA->node_present_pages (RAM)
    65ef8cd5c0 x86/xstate: Remove stale assertions in fpu_x{rstor,save}()
    00e074834e x86emul/test: drop an undue conditional
    1ceabff115 CI: Refresh the Debian 12 x86_32 container
    44b742de09 CI: Refresh the Debian 12 x86_64 container
    2c83678e78 CI: Don't use -y with apt-get update
    4e7863e82d x86/boot: introduce boot module flags
    74af2d9827 x86/boot: eliminate module_map
    5899b749b8 x86/boot: introduce boot module types
    282bd66cee x86/ucode: Fold early_update_cache() into its single caller
    59d81c89cc x86/ucode: Drop ucode_mod and ucode_blob
    414725d0ee x86/ucode: Use bootstrap_unmap() in early_microcode_load()
    c25c964634 x86/ucode: Enforce invariant about module selection
    c05ac8fe30 x86/boot: Explicitly list .{sym,shstr,str}tab in build32.lds.S
    1580813006 x86/boot: Uses nm command instead of map file to get symbols
    e75b327c45 x86/boot: Fix intermediate file names to generate 32 bit code
    c6b84ccf8d CI: Fix package installation for Coverity run
    921a2ba5c5 x86/ucode: Move the CPIO path string into microcode_ops
    3372f8a361 x86/ucode: Fold microcode_grab_module() into its single caller
    28d347041f x86/ucode: Fold early_microcode_update_cpu() into its single caller
    54047cedab x86/ucode: Break early_microcode_load() out of early_microcode_init()
    29a4fbf60a x86/ucode: Turn microcode_init_cache() into a presmp_initcall
    a7c7c3f642 tools/libxl: remove usage of VLA arrays
    86001b3970 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping
    babe11b46c CI: Drop alpine-3.18-rootfs-export and use test-artefacts
    d736b6eb45 xen/arm: mpu: Define Xen start address for MPU systems
    0388a5979b xen/arm: mpu: Introduce choice between MMU and MPU
    b75dee16b3 xen/arm: Skip initializing the BSS section when it is empty
    a6d71d59ca SUPPORT.md: Argo: Upgrade status to Tech Preview
    e27436fba7 CI: Fix cppcheck parallel build more
    7a88871aac Revert "x86/mm: ensure L2 is always freed if empty"
    2478bed83f Revert "scripts: Fix git-checkout.sh to work with branches other than master"
    a6dba2761e x86/mm: ensure L2 is always freed if empty
    c01855bec5 x86/msi: harden stale pdev handling
    bd01fffef2 types: replace remaining use of __u64
    cdbaca6faa byteorder: replace __u64
    517cf3dbfd types: replace remaining uses of __u32
    0d87ca0237 x86: modernize swab64()
    60db1b1ccd byteorder: replace __u32
    61ea18e39a byteorder: replace __u16
    3eb037fbbc MAINTAINERS: minor file line update
    eb4042e3c5 Config: Update MiniOS revision
    c554ec124b scripts: Fix git-checkout.sh to work with branches other than master
    9a2a50d5de x86/mm: Use standard C types for sized integers
    aa4ad424f0 x86/setup: Make setup.h header self contained
    fa2d831803 x86/cpu-policy: Extend the guest max policy max leaf/subleaves
    bb7296d77f automation/eclair: monitor Rules 11.2 and 18.1 and update configuration
    6d7c26a005 automation: add x86_64 test (linux argo)
    56bd76925e x86/boot: Use trampoline_phys variable directly from C code
    d5a73cdc6b x86/boot: Use boot_vid_info variable directly from C code
    db8acf31f9 x86/boot: Reuse code to relocate trampoline
    aa9045e771 x86/boot: Rework how 32bit C is linked/included for early boot
    fa1463cecf x86/boot: Explain how discard_initial_images() works
    83892f6a12 x86/boot: Drop the mbi and mod pointers in __start_xen()
    d03dfab66a x86/boot: Convert mod[] to bi->mods[] in __start_xen()
    3fd82e09d0 x86/boot: Introduce bootstrap_map_bm() to map boot_module's
    0ba5392e70 x86/boot: Introduce bootstrap_unmap()
    980579291d x86/boot: Drop initial_images pointer
    2802b77abe x86/ucode: Explain what microcode_set_module() does
    9cbf61445c xen/earlycpio: Drop nextoff parameter
    a974725a87 x86/boot: Remove the mbi_p parameter from __start_xen()
    6cf0aaeb8d x86/boot: Fix XSM module handling during PVH boot
    8ddf63a252 x86/boot: Fix microcode module handling during PVH boot
    89f855d564 x86/boot: Add a temporary module_map pointer to boot_image
    be84e7fe58 x86/boot: convert consider_modules to struct boot_module
    2c3294775e x86/boot: Simplify size calculations in move_memory()
    c960871c7c x86/boot: Simplify address calculations in move_memory()
    e33e18df05 x86/boot: Convert move_memory() to use bootstrap_map_addr()
    70262d5940 x86/emul: address violations of MISRA C Rule 16.3
    79560b68a1 x86/pv: remove unlikely() from BUG_ON() condition in pv_map_ldt_shadow_page()
    0fe607b2a1 x86/boot: Fix PVH boot during boot_info transition period
    b837d02163 CI: Add {adl,zen3p}-pvshim-* tests
    3be3ae0770 CI: Rework domU_config generation in qubes-x86-64.sh
    6685a129c7 CI: Minor cleanup to qubes-x86-64.sh
    49a068471d x86/fpu: Rework fpu_setup_fpu() uses to split it in two
    edb48e7645 x86/fpu: Combine fpu_ctxt and xsave_area in arch_vcpu
    7cf6e073e4 x86/boot: introduce struct boot_module
    73785a4c77 x86/boot: Fix PVH boot following the start of the MBI->BI conversion
    e9f227685e xen/arm: Add NXP LINFlexD UART early printk support
    6ba3b1f828 xen/arm: Add NXP LINFlexD UART Driver
    0710b38921 Update deprecated SPDX license identifiers
    4c21b6affb x86/boot: Further simplify CR4 handling in dom0_construct_pv()
    6e085825cb CI: Refresh and upgrade the Fedora container
    d84f6870fe ocaml/libs: Fill build failure due to unused variable in ocaml macro
    0bcf66d05a automation: Fix URL to the gitlab container registry documentation
    572010c552 x86/boot: split bootstrap_map_addr() out of bootstrap_map()
    a285d2ac2e x86/boot: move mmap info to boot info
    29aaded97d x86/boot: move cmdline to boot info
    b438c5fbf4 x86/boot: move boot loader name to boot info
    038826b61e x86/boot: move x86 boot module counting into a new boot_info struct
    081683ea57 xen/arm: dom0less: cope with missing /gic phandle
    1e81d2df4f device-tree: Move dt-overlay.c to common/device-tree/
    b3ca3caaf3 x86emul/test: drop Xeon Phi S/G prefetch special case
    09d22fe15c x86emul/test: correct loop body indentation in evex-disp8.c:test_one()
    330d4e6250 docs: update documentation of reboot param
    47990ecef2 x86/boot: Improve MBI2 structure check
    f4c3300d88 x86/boot: Align mbi2.c stack to 16 bytes
    3f6ee3db2e xen/public: add comments regarding interface version bumps
    93af5cc4df x86/boot: Prep work for 32bit object changes
    2defb54490 iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU
    8c858d04ac xen/riscv: parse and handle fdt command line
    de709f7647 xen/riscv: initialize bootinfo from dtb
    028148788f xen/vpci: address violations of MISRA C Rule 16.3
    ed896312f2 xen/common: move device initialization code to common code
    af2a1339c4 xen/riscv: add section for device information in linker script
    7a87b5e05c xen/ppc: add section for device information in linker script
    31f31b624a xen/arm: use {DT,ACPI}_DEV_INFO for device info sections
    083344a05d xen: define ACPI and DT device info sections macros
    17d32cf2ec xen: introduce DECL_SECTION_WITH_LADDR
    542ac112fc xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init()
    76a54badf8 stubdom: use real lib dependencies for xenstore stubdoms
    45333e2888 tools/xenstored: remove unneeded libxenguest reference
    906cee8718 config: update Mini-OS commit
    b2c7d7070d dt-overlay: Print overlay I/O memory ranges in hex
    239b0c8f06 dt-overlay: Ignore nodes that do not have __overlay__ as their subnode
    b32d24bcd6 dt-overlay: Support target-path being root node
    81862825e8 dt-overlay: Remove ASSERT_UNREACHABLE from add_nodes()
    656ac422c4 device-tree: Remove __init from unflatten_dt_alloc()
    95f2a5656e dt-overlay: Fix NULL pointer dereference
    b5b9420334 stubdom: add fine grained library config items to Mini-OS configs
    a592c98f94 ocaml/libs: Remove xsd_glue_dev package, package plugin_interface_v1.a
    c73adc9cf8 Flask: replace uses of __u32
    2b49ef4503 xen/riscv: register Xen's load address as a boot module
    59ef5d2a95 xen/riscv: switch LINK_TO_LOAD() to virt_to_maddr()
    a11b3926c4 xen/riscv: implement virt_to_maddr()
    4dec51ca72 x86: restore semicolon after explicit DS prefix
    439f3e6757 xen: Update header guards - ARGO
    eb48045d74 x86/vlapic: Move lapic migration checks to the check hooks
    e305256e69 CI: Stop building QEMU in general
    3b79d825b5 MAINTAINERS: Add myself as a reviewer for RISC-V
    6b80ec957c types: replace remaining uses of s64
    9d278c8c6c MAINTAINERS: add myself as maintainer for arm tee
    2f413e22fa x86/msr: add log messages to MSR state load error paths
    dcbf8210f3 x86/APIC: Switch flat driver to use phys dst for ext ints
    b315293130 xen: Update header guards - RISC-V
    6bbcb97ba4 xen: Update header guards - I/O MMU
    964c9568ea xen: Update header guards - Intel TXT
    c95cd5f9c5 x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs
    908c1b5efa docs: fusa: Replace VM with domain
    7d83c392c7 xen/pci: address a violation of MISRA C Rule 16.3
    7f743fac94 x86/emul: add defensive code
    2e0b545b84 ioreq: don't wrongly claim "success" in ioreq_send_buffered()
    011814bd45 x86/boot: Rationalise .gitignore
    9ab0496350 .gitignore: Remove not generated files
    16a81486c4 automation: use python-3.11 in Leap container
    c1035b0463 CI: Drop bin86/dev86 from archlinux container
    79ade905b9 x86: Use standard C types in multiboot2.h header
    2d6a835b05 build: move xenlibs-dependencies make definition to uselibs.mk
    c66c134175 stubdom: explcitly add libc and lwip Mini-OS config options
    e07ae82853 stubdom: swtich to local .gitignore file
    29555668b5 x86/dpci: do not leak pending interrupts on CPU offline
    a7201c0211 CODING_STYLE: header file guard naming rules
    ceefa8c039 efi: address violation of MISRA C Rule 16.3
    6b20755c24 automation/eclair: tag Rule 13.6 as clean
    a0094dc136 xen/gnttab: address a violation of MISRA C Rule 13.6
    6f621f23bc EFI: address a violation of MISRA C Rule 13.6
    1223375d8b CI: Fix builds following qemu-xen update
    bcce5a6b62 automation: shorten the timeout for smoke tests
    2d1c673bae automation: add a smoke test for xen.efi on X86
    636e66b143 automation: preserve built xen.efi
    1eeb7c3379 x86: Introduce X86_ET_* constants in x86-defns.h
    7fd80df2bf x86/boot: Convert remaining uses of the legacy ALIGN
    d82e0e094e automation: introduce TEST_TIMEOUT_OVERRIDE
    163338e6fb x86/boot: Don't use INC to set defaults
    f75780d26b xen: move per-cpu area management into common code
    eb21ce14d7 x86/boot: Rewrite EFI/MBI2 code partly in C
    444cb9350f stubdom: Fix newlib build with GCC-14
    41190d2ceb x86/kexec: Separate code and data into different cache lines
    b102c9f1ce x86: move ENTRY(), GLOBAL(), and ALIGN
    eaa7a72eda x86: convert dom_crash_sync_extable() annotation
    373d93cfce x86/kexec: convert entry point annotations
    a8c8d6c529 x86/ACPI: annotate assembly function/data with type and size
    1d199e83c7 VMX: convert entry point annotations
    bcd932b5b2 xen/riscv: introduce early_fdt_map()
    557b7f1b9a xen/riscv: page table handling
    3a38cc2bd7 x86: prefer RDTSCP in rdtsc_ordered()
    f9ce66ea9d docs: fusa: Add Assumption of Use (AOU)
    633ee8b2df x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour
    8a6c495d72 x86/pv: Handle #PF correctly when reading the IO permission bitmap
    7429e1cc07 x86/pv: Rework guest_io_okay() to return X86EMUL_*
    66878a8b75 x86/MSR: improve code gen for rdmsr_safe() and rdtsc()
    b42cf31d11 x86: use alternative_input() in cache_flush()
    db70a52f75 iommu/amd-vi: make IOMMU list ro after init
    b06e76db7c x86/traps: Re-enable interrupts after reading cr2 in the #PF handler
    67a8e5721e x86/PV: simplify (and thus correct) guest accessor functions
    94423b8f75 drivers/video: Convert source files to UTF-8
    f97f885c71 tools: Add new function to do PIRQ (un)map on PVH dom0
    b93e5981d2 tools: Add new function to get gsi from dev
    d6e9a2aab3 x86/irq: allow setting IRQ permissions from GSI instead of pIRQ
    c353c47757 xen/riscv: introduce and initialize SBI RFENCE extension
    b6c8f34a90 xen/riscv: introduce functionality to work with CPU info
    f89e1a1702 xen/riscv: introduce asm/pmap.h header
    13684f539e xen/riscv: set up fixmap mappings
    f9e69c266e xen/riscv: allow write_atomic() to work with non-scalar types
    dee9e4b1cc x86/intel: optional build of PSR support
    34d4227e6a x86: introduce x86_seg_sys
    457052167b blkif: Fix a couple of typos
    e9a0101dde blkif: Fix alignment description for discard request
    0857c75e6f x86/boot: Refactor BIOS/PVH start
    a184ac74f5 x86/alternatives: build time check feature is in range
    aa5a06d5d6 x86/alternatives: do not BUG during apply
    fa49f4be41 xen/livepatch: do Xen build-id check earlier
    86d09d16dd xen/livepatch: simplify and unify logic in prepare_payload()
    8c81423038 xen/livepatch: drop load_addr Elf section field
    3a28da8f4d xen/livepatch: remove useless check for duplicated sections
    b083121c94 x86/boot: Initialise BSS sooner
    1aec9a4ba7 changelog: add note about blkif protocol fixes
    b81ea162ef x86/defns: Fix typo in comment "Porection" -> "Protection"
    11eb4e2969 xen: introduce common macros for per-CPU sections defintion
    512ac41aa6 xen/efi: efibind: Fix typo in comment
    8752ad83e7 xen/ucode: Make Intel's microcode_sanity_check() stricter
    0416f1f66a xen/ucode: Improve commentary for parsing AMD containers
    9b0d2465c8 x86/APIC: Remove x2APIC pure cluster mode
    c42d9ec61f x86/vLAPIC: prevent undue recursion of vlapic_error()
    f7f42accbb x86/efi: Use generic PE/COFF structures
    6a039b0500 x86/cpufeature: Reposition cpu_has_{lfence_dispatch,nscb}
    95c3ae591c tools/libxs: Style consistency improvements
    b1642aaea2 x86: enable long section names for xen.efi
    c4344ecc5a x86/mwait-idle: add dependency on general Intel CPU support
    e1c8a3dc8a x86/boot: Drop stale comment about zeroing the stack
    f4c7663d19 xen/riscv: use {read,write}{b,w,l,q}_cpu() to define {read,write}_atomic()
    b64f62fcbd ubsan: use linux-compat.h
    7298e63519 docs/misra: add R17.2 and R18.2
    0843b40c47 docs: fusa: Add requirements for emulated uart
    03400a2a26 automation/eclair: add deviation for MISRA C 2012 Dir 4.10
    ef3b4768b3 arm/smmu: Complete SMR masking support
    6279b9a3be xen/arm: Enable workaround for Cortex-A53 erratum #1530924
    4e1a333745 arm: Drop deprecated early printk platform options
    a8bf14f6f3 xen/ucode: Fix buffer under-run when parsing AMD containers
    4e23c86bd8 xen/keyhandler: Move key_table[] into __ro_after_init
    08ffd8705d x86/hvm: Simplify stdvga_mem_accept() further
    42968684e5 ARM/cache: Drop legacy __read_mostly/__ro_after_init definitions
    ec185ec239 x86/mm: undo type change of partial_flags
    221f2748e8 blkif: reconcile protocol specification with in-use implementations
    eb97f87919 types: replace remaining uses of s32
    5ffe6d4a02 types: replace remaining uses of s16
    6e7f7a0c16 xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build
    40f5c7e138 x86/HVM: drop .complete hook for intercept handling
    b180a50326 x86/HVM: drop stdvga's "lock" struct member
    3beb4baf2a x86/HVM: drop stdvga's "vram_page[]" struct member
    86c03372e1 x86/HVM: drop stdvga's "{g,s}r_index" struct members
    7aba44bdd7 x86/HVM: drop stdvga's "sr[]" struct member
    b16c0966a1 x86/HVM: drop stdvga's "gr[]" struct member
    89108547af x86/HVM: remove unused MMIO handling code
    b740a9369e x86/HVM: drop stdvga's "stdvga" struct member
    eb7cd0593d x86/HVM: properly reject "indirect" VRAM writes
    3d65f1c072 x86emul: support CMPccXADD
    582fade2a9 automation/eclair_analysis: address violation of Rule 20.7
    738db54711 xen/bitmap: remove redundant deviations
    3c5c9743ca automation/eclair: update configuration of Rule 20.7
    33888e7aaa automation/eclair_analysis: deviate linker symbols for Rule 18.2
    4b3f30ea30 automation/eclair_analysis: fix MISRA Rule 20.7 regression in self-tests.h
    035baa203b x86/hvm: allow {,un}map_pirq hypercalls unconditionally
    53b7246bdf x86/HVM: drop stdvga's "cache" struct member
    2b24c090d1 x86/mmcfg: address violation of MISRA C Rule 16.3
    f6cc23e234 x86/mm: address violations of MISRA C Rule 16.3
    6f5b873600 x86/monitor: address violation of MISRA C Rule 16.3
    c4fe5296e6 x86/hypercall: address violations of MISRA C Rule 16.3
    a42c3ec62f x86/vm_event: address violation of MISRA C Rule 16.3
    b3173a25ba x86/time: address violations of MISRA C Rule 16.3
    76529a1ce1 x86/psr: address violation of MISRA C Rule 16.3
    09217c2618 x86/APIC: address violation of MISRA C Rule 21.2
    233ee468bb x86/cpufreq: address MISRA Rule 7.3 violation
    cb4f22884e x86/time: introduce probing logic for the wallclock
    6da090b4b7 x86/time: pull cmos_rtc_probe outside of function and rename
    5b4664b9e4 x86/mm address violations of MISRA C:2012 Rule 5.3
    3502c033f6 arm/gicv3: Fix ICH_VTR_EL2.ListRegs mask
    c23571fe31 automation: fix xilinx test console settings

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
f14fb91f5e xen: update to 4.20.0-rc1
Bumping xen to version 4.20.0-rc1-23-g75d88297f5, which comprises the following commits:

    75d88297f5 docs/misra: Document ECLAIR extension to Rule 20.7
    24c685286d Manual pages: Fix a few typos
    274c509162 xl: properly dispose of libxl_dominfo struct instances
    737e8cc91b xl: properly dispose of vTPM struct instance
    c33e14abb1 xentrace: free CPU mask string before overwriting pointer
    a29a1fb5a5 docs/misc: Fix a few typos
    f0f1050d47 docs: Fix some typos in the design docs
    22d7141d2e xen/ppc: Fix double xen_ulong_t typedef in public/arch-ppc.h
    6b97c31146 docs/sphinx: gitignore generated files
    0edb30455b docs: rationalise .gitignore
    f79af67982 docs/sphinx: import sys for error reporting
    9ee63ef540 automation/gitlab: disable coverage from clang randconfig
    164ae033ad x86/time: prefer CMOS over EFI_GET_TIME
    7eba2f46a1 x86/time: introduce command line option to select wallclock
    405fdcee91 automation/eclair: make Misra rule 20.7 blocking
    d68de81344 docs: Improve spelling of few cases in the documentation
    16a670ab53 MAINTAINERS: Change reviewer of the ECLAIR integration
    f4697f7a35 misra: add deviation for MISRA C Rule R11.8
    ff10aa9d8f x86: Add Support for Paging-Write Feature
    b94305d984 x86: Rename _rsvd field to pw and move it to the bit 58
    8aaf5dc2c9 build: Set DATE to SOURCE_DATE_EPOCH if available
    5dd85073d1 docs/Makefile: Add ppc and riscv to DOC_ARCHES
    2ab44af38f CI: Add an x86_64 Clang Randconfig job
    19730dbb3f Update Xen version to 4.20-rc
    3604d15d1a Config.mk: Pin QEMU_UPSTREAM_REVISION
    b8f80aca12 xen/arm: Fully initialise struct membanks_hdr fields
    b9f9b39645 docs: fusa: Add dom0less domain configuration requirements
    4d8acc9c1c xen/events: fix race with set_global_virq_handler()
    a1a1e2b7dc xen/arm: ffa: fix build with clang
    40f35d07aa CI: Update Fedora to 41
    70f5a875be xen/arm64: Drop relocate_and_switch_ttbr() stub
    83a4dade0f xen/flask: Wire up XEN_DOMCTL_set_llc_colors
    7fa1411676 xen/flask: Wire up XEN_DOMCTL_dt_overlay
    29daa72e40 xen/flask: Wire up XEN_DOMCTL_vuart_op
    645b8d48c7 x86emul: correct put_fpu()'s segment selector handling
    d3709d1324 x86emul: VCVT{,U}DQ2PD ignores embedded rounding
    15bbbecad5 libxl: drop setting XEN_QEMU_CONSOLE_LIMIT in the environment (XSA-180 / CVE-2014-3672)
    25492368ea xen/perfc: Cleanup
    e7ea1de774 xen/perfc: Trim includes
    02c24a1325 xen/perfc: Add perfc_defn.h to asm-generic
    8900010501 xen/perfc: Drop arch_perfc_{gather,reset}()
    f29cc14de1 x86/amd: Misc setup for Fam1Ah processors
    0009feff8b x86/pv: Fix build with Clang and CONFIG_PERF_COUNTERS
    555866cb56 x86/traps: Rework LER initialisation and support Zen5/Diamond Rapids
    7e6edeaee3 eclair-analysis: tidy toolchain.ecl configuration and mark Rule 1.1 clean
    4288576c16 xen/scripts: Fix regex syntax warnings with Python 3.12
    a1746cd443 x86/spec-ctrl: Support for SRSO_U/S_NO and SRSO_MSR_FIX
    0d729221ab xen/arch/x86: make objdump output user locale agnostic
    6e1036b197 tools: fix typo: subsytem -> subsystem
    c6d0d89c30 docs/man: fix typo: hexidecimal -> hexadecimal
    5becb6bbad docs/man/xen-vbd-interface.7: Provide properly-formatted NAME section
    6419020270 CHANGELOG: Mention LLC coloring feature on Arm
    869aeb7f02 tools: Introduce a xc_xenver_buildid() wrapper
    75f9160762 tools: Introduce a non-truncating xc_xenver_cmdline()
    1b421d52b2 tools: Introduce a non-truncating xc_xenver_changeset()
    6625d581ec tools: Introduce a non-truncating xc_xenver_capabilities()
    504ea442e3 tools: Introduce a non-truncating xc_xenver_extraversion()
    583a0fb0fa tools/libxc: Move xc_version() out of xc_private.c into its own file
    3d94cc8809 xen/version: Misc style fixes
    8eed14bf9d xen/version: Fold build_id handling into xenver_varbuf_op()
    e3bb1b6525 xen/version: Introduce non-truncating deterministically-signed XENVER_* subops
    7cf44c61c5 xen/version: Calculate xen_capabilities_info once at boot
    075e7e35db MAINTAINERS: Add myself as maintainer for NXP S32G3
    294faa3760 SUPPORT.md: Describe SCMI-SMC layer feature
    f09ee5f550 CHANGELOG.md: Add NXP S32G3 and SCMI-SMC layer support mentions
    78b0b025be xen/arm: platforms: Add NXP S32G3 Processors config
    a767076c03 xen/arm: vsmc: Enable handling SiP-owned SCMI SMC calls
    3e322bef8b xen/arm: firmware: Add SCMI over SMC calls handling layer
    e7a80636f1 xen/arm: add cache coloring support for Xen image
    f376ff0e4f xen/arm: make consider_modules() available for xen relocation
    0975bab5ea xen/arm: add Xen cache colors command line parameter
    95debe51a9 xen: add cache coloring allocator for domains
    5948dc1675 xen/arm: add support for cache coloring configuration via device-tree
    748bd725fb tools: add support for cache coloring configuration
    6985aa5e0c xen: extend domctl interface for cache coloring
    6cdea3444e xen/arm: add Dom0 cache coloring support
    02975cc383 xen/arm: permit non direct-mapped Dom0 construction
    f4985fce6f xen/arm: add initial support for LLC coloring on arm64
    44dd6d4a12 xen/common: add cache coloring common code
    8089e4ba44 automation: Pin down CONFIG_QEMU_PLATFORM for RISC-V's randconfig job
    e547f730e8 xen/ioreq: Fix check for CONFIG_ARCH_VCPU_IOREQ_COMPLETION
    e6472d4668 tools/xg: increase LZMA_BLOCK_SIZE for uncompressing the kernel
    dd05f7c8dd x86/hvm: Use constants for x86 modes
    d17b7562d4 tools/libxg: Don't gunzip the guests initrd
    2e22a8ba29 x86/boot: Use printk_once() instead of opencoding it
    63ebfcca04 x86/sched: Drop unused includes from credit2.c
    188d568db8 xen/sched: Untangle credit2 vs cpu_nr_siblings()
    9a17d5c7c9 xen/riscv: relocating and unflattening host device tree
    0a510b8f81 xen/riscv: implement prereq for DTB relocation
    81d80f44ef xen/riscv: implement data and instruction cache operations
    ec0ed39265 xen/riscv: update layout table in config.h
    b527a27e17 xen/page_alloc: introduce preserved page flags macro
    b359d38013 tools: add a dedicated header file for barrier definitions
    826a9eb072 tools: Fix regex syntax warnings with Python 3.12
    f9a2e86f21 x86/CET: Support cet=<bool> on the command line
    171cb318de MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade
    631f535a3d xen: update ECLAIR service identifiers from MC3R1 to MC3A2.
    d95703eb83 docs/guest-guide: Discuss when not use a hypercall page
    f38fd27c4c x86/io-apic: prevent early exit from i8259 loop detection
    4cde11cdae xen/arm: Check for Static Heap feature when freeing resources
    df8a0eec1c xen/arm: ffa: Add indirect message support
    e6794b683b xen/arm: ffa: Remove per VM notif_enabled
    42b6f47132 xen/arm: ffa: move message function into ffa_msg.c
    6dceb1378d xen/arm: ffa: Transmit RXTX buffers to the SPMC
    2833aa172f xen/arm: ffa: Use bit 15 convention for SPs
    8a932b91aa xen/arm: ffa: Rework partition info get
    2f9f240a5e xen/arm: ffa: Fine granular call support
    da07df5558 xen/arm: ffa: Fix version negotiation
    1a20f862f3 xen/arm: ffa: Rework feature discovery
    cf15d85707 xen/arm: ffa: Rework firmware discovery
    2e955d2554 tools/misc: Drop xensymoops
    58ba55959a xen: add a domain unique id to each domain
    5793b84c5e xen/xsm: make getdomaininfo xsm dummy checks more stringent
    df98c03864 xen/riscv: add {set,clear}_fixmap() functions for managing fixmap entries
    f5bf0d100b xen/riscv: reorder includes in asm/page.h alphabetically
    0eb8b71604 xen/riscv: add destroy_xen_mappings() to remove mappings in Xen page tables
    89dca886ac arm/domain_build: Make find_unallocated_memory() more generic
    a974366f7a MAINTAINERS: add Anthony, Michal, Roger to THE REST
    bf8a209915 tools/ocaml: Specify rpath correctly for ocamlmklib
    13df44f8a1 CHANGELOG: Mention xl suspend/resume
    bec5b2447c x86: p2m-pod: address violation of MISRA C Rule 2.1
    d636e0ed91 x86/FPU: make vcpu_reset_fpu() build with old gcc
    1645bb7997 xen/arm: Move setup_frametable_mappings to arm/mmu
    c8e59af7ad xen/arm: Use vmap_contig instead of __vmap where it's possible
    b772a9f517 arm/setup: Move MMU specific extern declarations to mmu/setup.h
    57fe471f56 common/vmap: Fall back to simple allocator when !HAS_VMAP
    d39a92aefe xen/mmu: enable SMMU subsystem only in MMU
    214f9cc67b xen/mpu: Map early uart when earlyprintk on
    dc8e1b33a5 tools/xl: add suspend and resume subcommands
    5a455a52ea bootfdt: Add missing trailing commas in BOOTINFO_{ACPI,SHMEM}_INIT
    28301682f4 libs/guest: Fix migration compatibility with a security-patched Xen 4.13
    0cc8845fb9 CI: Update to FreeBSD 14.2
    ee7edb0d29 xen/arm: mpu: Implement a dummy enable_secondary_cpu_mm
    5423a08eae xen/arm: mpu: Enable MPU
    868fe87c46 xen/arm: mpu: Create boot-time MPU protection regions
    b30bad3832 xen/arm32: Get rid of __memzero()
    126b0a6e53 xen/Kconfig: livepatch-build-tools requires debug information
    4191619e08 libxl: extend IGD check
    3df8812f90 x86emul: correct VPBROADCASTMW2D predicate testing
    4c5d9a01f8 x86emul: MOVBE requires a memory operand
    6b8c85872e xl: Keep monitoring suspended domain
    7bd8d37897 drivers/char: rename arm-uart.c to uart-init.c
    a14593e399 xen/device-tree: Allow region overlapping with /memreserve/ ranges
    4a06cc7178 xsm/flask: missing breaks, MISRA rule 16.4
    738df43521 x86/setup: fix typo in acpi=off description
    bf37973929 xen/riscv: finalize boot allocator and transition to boot state
    6b71d4f849 xen/riscv: initialize the VMAP_DEFAULT virtual range
    e6cf43717d xen/riscv: introduce setup_mm()
    c8e3e39085 page-alloc: make scrub_one_page() static
    a24f1c042d libxl/ACPI: bound RSDP allocation
    4e0b1adff0 libxl/ACPI: don't hard-code guest page size
    fcf91ce9de x86/pv: don't populate the GDT/LDT L3 slot at domain creation
    8fe330a4da xen/pci: remove logic catering to adding VF without PF
    931eaa21cd x86/msi: fix locking for SR-IOV devices
    4e18a39056 xen/pci: introduce PF<->VF links
    b661fe107d build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS
    9ea9c1c49b docs/sphinx: Refresh config for newer Sphinx
    233f03dd83 docs/sphinx: Fix FUSA indexing
    2e853c1920 xen/common: Move gic_dt_preinit() to common code
    722d93bc91 x86/pvh: also print hardware domain pIRQ limit for PVH
    5c56361c61 x86/irq: fix calculation of max PV dom0 pIRQs
    ca5c01513a xen/arm32: mm: Rename 'first' to 'root' in init_secondary_pagetables()
    c0bf8816c9 xen/bitops: Fix break usage in for_each_set_bit() loop
    f52004b20e x86/ucode: Only rescan features on successful microcode load
    365f408339 x86/boot: Load microcode much earlier on boot
    e0058760a0 MISRA: Mark Rule 8.4 as clean
    c74230bdce x86/mce: Compile do_mca() for CONFIG_PV only
    5cc971a4bf CI: New stage "containers" to rebuild some containers
    a231538acd CI: Define XEN_REGISTRY variable
    5726d8e5ef CI: Remove deprecated "only:variables" in favor of "rules:if"
    96efb13459 bootfdt: Unify early printing of memory ranges endpoints
    22d9e75944 misra: increase identifiers length to 63 and align doc with ECLAIR config
    cd7cc5320b x86/boot: add start and size fields to struct boot_module
    6308301208 x86/pmstat: deal with Misra 8.4 violations
    a1ed107f59 x86/boot: Introduce boot-helpers.h
    429840a81e xen/bootinfo: Include declaration for fw_unreserved_regions()
    488579e956 x86/msi: fix Misra Rule 20.7 in msi.h
    9e8c97f3eb x86/msi: prune unused macros
    3ac41c60e8 x86/mm: fix IS_LnE_ALIGNED() to comply with Misra Rule 20.7
    3128d7248f x86/boot: introduce module release
    891f077a71 xen/arm: use domain memory to allocate p2m page tables
    88c40dc108 x86/boot: convert domain construction to use boot info
    8417b4b0bb x86/emul: Adjust get_stub() to avoid shadowing an outer variable
    b1b657afa9 x86/ucode: Drop MIS_UCODE and microcode_match_result
    91afda4a34 x86/ucode: Fix cache handling in microcode_update_helper()
    acd9bf6f89 x86/ucode: Remove the collect_cpu_info() call from parse_blob()
    b1ebb6461a x86/mm: fix alignment check for non-present entries
    d2bbb0d455 xen/multicall: Change nr_calls to uniformly be unsigned long
    d2c214ede0 x86/trampoline: Rationalise the constants to describe the size
    5c9b7a6659 x86/trampoline: Document how the trampoline is laid out
    7d73c6f196 x86/trampoline: Simplify the wakeup_stack checks
    04a77fb843 x86/trampoline: Check the size of the permanent trampoline at link time
    74376e015c xen/multiboot: Make headers be standalone
    5022dfe513 xen/earlycpio: Fix header to be standalone
    41c8049608 x86/mm: ensure L2 is always freed if empty
    73194b5701 x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings()
    5b52e1b043 x86/mm: skip super-page alignment checks for non-present entries
    97fb6fcf26 x86/mm: introduce helpers to detect super page alignment
    939a9e800c x86emul: avoid double memory read for RORX
    d5febe7f64 automation/eclair: tag Rule 16.3 as clean
    3d1db2942f x86/emul: use pseudo keyword fallthrough
    5bf8f2f5cc x86/emul: auxiliary definition of pseudo keyword fallthrough
    1179d51dcb x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode
    5b8780869e x86emul: correct EFLAGS testing for BMI1/BMI2
    380b32a476 x86/e820: Fix parameter names of reserve_e820_ram()/e820_change_range_type()
    5c8b638c2a x86/apic: Include genapic.h in delivery.c
    38febce5b3 x86/ucode: Rework Intel's microcode_update_match()
    39360c38c3 x86/ucode: Rework AMD's microcode_fits()
    502478bc1d x86/ucode: Fold microcode_update_cpu() and fix error handling
    41314ccee8 x86/ucode: Don't use microcode_update_cpu() in early_microcode_load()
    d3da79e1d1 drivers/char: Use sub-page ro API to make just xhci dbc cap RO
    8847d6e23f x86/mm: add API for marking only part of a MMIO page read only
    64d2290cf9 mm: adjust _xvrealloc() declaration
    0bfe567b58 libxl: Use zero-ed memory for PVH acpi tables
    7d5781d526 x86/boot: Setup correctly fs segment for bogus_real_magic
    9ef78a614d x86/trampoline: Change type of trampoline_phys to uint32_t
    c839c8c3fc x86/wakeup: Fix code generation for bogus_saved_magic
    d4829a20ad x86: Drop mach_mpspec.h
    b80c535794 x86: Drop mach-default/bios_ebda.h
    cd7b518680 x86: Move mach-default/io_ports.h to asm/io-ports.h
    fc147fec19 x86: Move mach-default/irq_vectors.h to asm/irq-vectors.h
    b212fefc04 x86: Delete mach_apic.h
    5eb9c14324 x86/mach-apic: Move the genapic wrappers to genapic.h
    b44d96ecb3 x86/mach-apic: Drop set_apicid()
    bdb509c382 x86/mach-apic: Drop check_apicid_present()
    9aa1e60b90 x86/mach-apic: Drop check_apicid_used()
    bffc52ea26 x86/mach-apic: Drop ioapic_phys_id_map()
    a384eef9e3 x86/mach-apic: Drop apic_id_registered()
    0a51e5e17b x86/mach-apic: Move generic_*_probe() declarations into genapic.h
    7f81e81774 x86: Drop includes of mach_apic.h
    19c3016a8a VT-d: Drop includes of mach_apic.h
    718400a54d xen/x86: prevent addition of .note.gnu.property if livepatch is enabled
    c8754cbc1d CHANGELOG: Add note about xAPIC destination mode change
    3eda1f8912 iommu/ipmmu-vmsa: Add Renesas R8A779G0 (R-Car V4H) support
    6c88e35fa1 x86/boot: Fix bootinfo.h to be standalone
    c62eed3ee6 x86/trampoline: Collect other scattered trampoline symbols
    75035c386e x86/boot: add cmdline_pa to struct boot_module
    ccdb7e08fd x86/boot: move kextra into boot info
    6320f08206 x86/boot: move headroom to boot modules
    37bd4e90bd NUMA: Introduce NODE_DATA->node_present_pages (RAM)
    65ef8cd5c0 x86/xstate: Remove stale assertions in fpu_x{rstor,save}()
    00e074834e x86emul/test: drop an undue conditional
    1ceabff115 CI: Refresh the Debian 12 x86_32 container
    44b742de09 CI: Refresh the Debian 12 x86_64 container
    2c83678e78 CI: Don't use -y with apt-get update
    4e7863e82d x86/boot: introduce boot module flags
    74af2d9827 x86/boot: eliminate module_map
    5899b749b8 x86/boot: introduce boot module types
    282bd66cee x86/ucode: Fold early_update_cache() into its single caller
    59d81c89cc x86/ucode: Drop ucode_mod and ucode_blob
    414725d0ee x86/ucode: Use bootstrap_unmap() in early_microcode_load()
    c25c964634 x86/ucode: Enforce invariant about module selection
    c05ac8fe30 x86/boot: Explicitly list .{sym,shstr,str}tab in build32.lds.S
    1580813006 x86/boot: Uses nm command instead of map file to get symbols
    e75b327c45 x86/boot: Fix intermediate file names to generate 32 bit code
    c6b84ccf8d CI: Fix package installation for Coverity run
    921a2ba5c5 x86/ucode: Move the CPIO path string into microcode_ops
    3372f8a361 x86/ucode: Fold microcode_grab_module() into its single caller
    28d347041f x86/ucode: Fold early_microcode_update_cpu() into its single caller
    54047cedab x86/ucode: Break early_microcode_load() out of early_microcode_init()
    29a4fbf60a x86/ucode: Turn microcode_init_cache() into a presmp_initcall
    a7c7c3f642 tools/libxl: remove usage of VLA arrays
    86001b3970 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping
    babe11b46c CI: Drop alpine-3.18-rootfs-export and use test-artefacts
    d736b6eb45 xen/arm: mpu: Define Xen start address for MPU systems
    0388a5979b xen/arm: mpu: Introduce choice between MMU and MPU
    b75dee16b3 xen/arm: Skip initializing the BSS section when it is empty
    a6d71d59ca SUPPORT.md: Argo: Upgrade status to Tech Preview
    e27436fba7 CI: Fix cppcheck parallel build more
    7a88871aac Revert "x86/mm: ensure L2 is always freed if empty"
    2478bed83f Revert "scripts: Fix git-checkout.sh to work with branches other than master"
    a6dba2761e x86/mm: ensure L2 is always freed if empty
    c01855bec5 x86/msi: harden stale pdev handling
    bd01fffef2 types: replace remaining use of __u64
    cdbaca6faa byteorder: replace __u64
    517cf3dbfd types: replace remaining uses of __u32
    0d87ca0237 x86: modernize swab64()
    60db1b1ccd byteorder: replace __u32
    61ea18e39a byteorder: replace __u16
    3eb037fbbc MAINTAINERS: minor file line update
    eb4042e3c5 Config: Update MiniOS revision
    c554ec124b scripts: Fix git-checkout.sh to work with branches other than master
    9a2a50d5de x86/mm: Use standard C types for sized integers
    aa4ad424f0 x86/setup: Make setup.h header self contained
    fa2d831803 x86/cpu-policy: Extend the guest max policy max leaf/subleaves
    bb7296d77f automation/eclair: monitor Rules 11.2 and 18.1 and update configuration
    6d7c26a005 automation: add x86_64 test (linux argo)
    56bd76925e x86/boot: Use trampoline_phys variable directly from C code
    d5a73cdc6b x86/boot: Use boot_vid_info variable directly from C code
    db8acf31f9 x86/boot: Reuse code to relocate trampoline
    aa9045e771 x86/boot: Rework how 32bit C is linked/included for early boot
    fa1463cecf x86/boot: Explain how discard_initial_images() works
    83892f6a12 x86/boot: Drop the mbi and mod pointers in __start_xen()
    d03dfab66a x86/boot: Convert mod[] to bi->mods[] in __start_xen()
    3fd82e09d0 x86/boot: Introduce bootstrap_map_bm() to map boot_module's
    0ba5392e70 x86/boot: Introduce bootstrap_unmap()
    980579291d x86/boot: Drop initial_images pointer
    2802b77abe x86/ucode: Explain what microcode_set_module() does
    9cbf61445c xen/earlycpio: Drop nextoff parameter
    a974725a87 x86/boot: Remove the mbi_p parameter from __start_xen()
    6cf0aaeb8d x86/boot: Fix XSM module handling during PVH boot
    8ddf63a252 x86/boot: Fix microcode module handling during PVH boot
    89f855d564 x86/boot: Add a temporary module_map pointer to boot_image
    be84e7fe58 x86/boot: convert consider_modules to struct boot_module
    2c3294775e x86/boot: Simplify size calculations in move_memory()
    c960871c7c x86/boot: Simplify address calculations in move_memory()
    e33e18df05 x86/boot: Convert move_memory() to use bootstrap_map_addr()
    70262d5940 x86/emul: address violations of MISRA C Rule 16.3
    79560b68a1 x86/pv: remove unlikely() from BUG_ON() condition in pv_map_ldt_shadow_page()
    0fe607b2a1 x86/boot: Fix PVH boot during boot_info transition period
    b837d02163 CI: Add {adl,zen3p}-pvshim-* tests
    3be3ae0770 CI: Rework domU_config generation in qubes-x86-64.sh
    6685a129c7 CI: Minor cleanup to qubes-x86-64.sh
    49a068471d x86/fpu: Rework fpu_setup_fpu() uses to split it in two
    edb48e7645 x86/fpu: Combine fpu_ctxt and xsave_area in arch_vcpu
    7cf6e073e4 x86/boot: introduce struct boot_module
    73785a4c77 x86/boot: Fix PVH boot following the start of the MBI->BI conversion
    e9f227685e xen/arm: Add NXP LINFlexD UART early printk support
    6ba3b1f828 xen/arm: Add NXP LINFlexD UART Driver
    0710b38921 Update deprecated SPDX license identifiers
    4c21b6affb x86/boot: Further simplify CR4 handling in dom0_construct_pv()
    6e085825cb CI: Refresh and upgrade the Fedora container
    d84f6870fe ocaml/libs: Fill build failure due to unused variable in ocaml macro
    0bcf66d05a automation: Fix URL to the gitlab container registry documentation
    572010c552 x86/boot: split bootstrap_map_addr() out of bootstrap_map()
    a285d2ac2e x86/boot: move mmap info to boot info
    29aaded97d x86/boot: move cmdline to boot info
    b438c5fbf4 x86/boot: move boot loader name to boot info
    038826b61e x86/boot: move x86 boot module counting into a new boot_info struct
    081683ea57 xen/arm: dom0less: cope with missing /gic phandle
    1e81d2df4f device-tree: Move dt-overlay.c to common/device-tree/
    b3ca3caaf3 x86emul/test: drop Xeon Phi S/G prefetch special case
    09d22fe15c x86emul/test: correct loop body indentation in evex-disp8.c:test_one()
    330d4e6250 docs: update documentation of reboot param
    47990ecef2 x86/boot: Improve MBI2 structure check
    f4c3300d88 x86/boot: Align mbi2.c stack to 16 bytes
    3f6ee3db2e xen/public: add comments regarding interface version bumps
    93af5cc4df x86/boot: Prep work for 32bit object changes
    2defb54490 iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU
    8c858d04ac xen/riscv: parse and handle fdt command line
    de709f7647 xen/riscv: initialize bootinfo from dtb
    028148788f xen/vpci: address violations of MISRA C Rule 16.3
    ed896312f2 xen/common: move device initialization code to common code
    af2a1339c4 xen/riscv: add section for device information in linker script
    7a87b5e05c xen/ppc: add section for device information in linker script
    31f31b624a xen/arm: use {DT,ACPI}_DEV_INFO for device info sections
    083344a05d xen: define ACPI and DT device info sections macros
    17d32cf2ec xen: introduce DECL_SECTION_WITH_LADDR
    542ac112fc xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init()
    76a54badf8 stubdom: use real lib dependencies for xenstore stubdoms
    45333e2888 tools/xenstored: remove unneeded libxenguest reference
    906cee8718 config: update Mini-OS commit
    b2c7d7070d dt-overlay: Print overlay I/O memory ranges in hex
    239b0c8f06 dt-overlay: Ignore nodes that do not have __overlay__ as their subnode
    b32d24bcd6 dt-overlay: Support target-path being root node
    81862825e8 dt-overlay: Remove ASSERT_UNREACHABLE from add_nodes()
    656ac422c4 device-tree: Remove __init from unflatten_dt_alloc()
    95f2a5656e dt-overlay: Fix NULL pointer dereference
    b5b9420334 stubdom: add fine grained library config items to Mini-OS configs
    a592c98f94 ocaml/libs: Remove xsd_glue_dev package, package plugin_interface_v1.a
    c73adc9cf8 Flask: replace uses of __u32
    2b49ef4503 xen/riscv: register Xen's load address as a boot module
    59ef5d2a95 xen/riscv: switch LINK_TO_LOAD() to virt_to_maddr()
    a11b3926c4 xen/riscv: implement virt_to_maddr()
    4dec51ca72 x86: restore semicolon after explicit DS prefix
    439f3e6757 xen: Update header guards - ARGO
    eb48045d74 x86/vlapic: Move lapic migration checks to the check hooks
    e305256e69 CI: Stop building QEMU in general
    3b79d825b5 MAINTAINERS: Add myself as a reviewer for RISC-V
    6b80ec957c types: replace remaining uses of s64
    9d278c8c6c MAINTAINERS: add myself as maintainer for arm tee
    2f413e22fa x86/msr: add log messages to MSR state load error paths
    dcbf8210f3 x86/APIC: Switch flat driver to use phys dst for ext ints
    b315293130 xen: Update header guards - RISC-V
    6bbcb97ba4 xen: Update header guards - I/O MMU
    964c9568ea xen: Update header guards - Intel TXT
    c95cd5f9c5 x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs
    908c1b5efa docs: fusa: Replace VM with domain
    7d83c392c7 xen/pci: address a violation of MISRA C Rule 16.3
    7f743fac94 x86/emul: add defensive code
    2e0b545b84 ioreq: don't wrongly claim "success" in ioreq_send_buffered()
    011814bd45 x86/boot: Rationalise .gitignore
    9ab0496350 .gitignore: Remove not generated files
    16a81486c4 automation: use python-3.11 in Leap container
    c1035b0463 CI: Drop bin86/dev86 from archlinux container
    79ade905b9 x86: Use standard C types in multiboot2.h header
    2d6a835b05 build: move xenlibs-dependencies make definition to uselibs.mk
    c66c134175 stubdom: explcitly add libc and lwip Mini-OS config options
    e07ae82853 stubdom: swtich to local .gitignore file
    29555668b5 x86/dpci: do not leak pending interrupts on CPU offline
    a7201c0211 CODING_STYLE: header file guard naming rules
    ceefa8c039 efi: address violation of MISRA C Rule 16.3
    6b20755c24 automation/eclair: tag Rule 13.6 as clean
    a0094dc136 xen/gnttab: address a violation of MISRA C Rule 13.6
    6f621f23bc EFI: address a violation of MISRA C Rule 13.6
    1223375d8b CI: Fix builds following qemu-xen update
    bcce5a6b62 automation: shorten the timeout for smoke tests
    2d1c673bae automation: add a smoke test for xen.efi on X86
    636e66b143 automation: preserve built xen.efi
    1eeb7c3379 x86: Introduce X86_ET_* constants in x86-defns.h
    7fd80df2bf x86/boot: Convert remaining uses of the legacy ALIGN
    d82e0e094e automation: introduce TEST_TIMEOUT_OVERRIDE
    163338e6fb x86/boot: Don't use INC to set defaults
    f75780d26b xen: move per-cpu area management into common code
    eb21ce14d7 x86/boot: Rewrite EFI/MBI2 code partly in C
    444cb9350f stubdom: Fix newlib build with GCC-14
    41190d2ceb x86/kexec: Separate code and data into different cache lines
    b102c9f1ce x86: move ENTRY(), GLOBAL(), and ALIGN
    eaa7a72eda x86: convert dom_crash_sync_extable() annotation
    373d93cfce x86/kexec: convert entry point annotations
    a8c8d6c529 x86/ACPI: annotate assembly function/data with type and size
    1d199e83c7 VMX: convert entry point annotations
    bcd932b5b2 xen/riscv: introduce early_fdt_map()
    557b7f1b9a xen/riscv: page table handling
    3a38cc2bd7 x86: prefer RDTSCP in rdtsc_ordered()
    f9ce66ea9d docs: fusa: Add Assumption of Use (AOU)
    633ee8b2df x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour
    8a6c495d72 x86/pv: Handle #PF correctly when reading the IO permission bitmap
    7429e1cc07 x86/pv: Rework guest_io_okay() to return X86EMUL_*
    66878a8b75 x86/MSR: improve code gen for rdmsr_safe() and rdtsc()
    b42cf31d11 x86: use alternative_input() in cache_flush()
    db70a52f75 iommu/amd-vi: make IOMMU list ro after init
    b06e76db7c x86/traps: Re-enable interrupts after reading cr2 in the #PF handler
    67a8e5721e x86/PV: simplify (and thus correct) guest accessor functions
    94423b8f75 drivers/video: Convert source files to UTF-8
    f97f885c71 tools: Add new function to do PIRQ (un)map on PVH dom0
    b93e5981d2 tools: Add new function to get gsi from dev
    d6e9a2aab3 x86/irq: allow setting IRQ permissions from GSI instead of pIRQ
    c353c47757 xen/riscv: introduce and initialize SBI RFENCE extension
    b6c8f34a90 xen/riscv: introduce functionality to work with CPU info
    f89e1a1702 xen/riscv: introduce asm/pmap.h header
    13684f539e xen/riscv: set up fixmap mappings
    f9e69c266e xen/riscv: allow write_atomic() to work with non-scalar types
    dee9e4b1cc x86/intel: optional build of PSR support
    34d4227e6a x86: introduce x86_seg_sys
    457052167b blkif: Fix a couple of typos
    e9a0101dde blkif: Fix alignment description for discard request
    0857c75e6f x86/boot: Refactor BIOS/PVH start
    a184ac74f5 x86/alternatives: build time check feature is in range
    aa5a06d5d6 x86/alternatives: do not BUG during apply
    fa49f4be41 xen/livepatch: do Xen build-id check earlier
    86d09d16dd xen/livepatch: simplify and unify logic in prepare_payload()
    8c81423038 xen/livepatch: drop load_addr Elf section field
    3a28da8f4d xen/livepatch: remove useless check for duplicated sections
    b083121c94 x86/boot: Initialise BSS sooner
    1aec9a4ba7 changelog: add note about blkif protocol fixes
    b81ea162ef x86/defns: Fix typo in comment "Porection" -> "Protection"
    11eb4e2969 xen: introduce common macros for per-CPU sections defintion
    512ac41aa6 xen/efi: efibind: Fix typo in comment
    8752ad83e7 xen/ucode: Make Intel's microcode_sanity_check() stricter
    0416f1f66a xen/ucode: Improve commentary for parsing AMD containers
    9b0d2465c8 x86/APIC: Remove x2APIC pure cluster mode
    c42d9ec61f x86/vLAPIC: prevent undue recursion of vlapic_error()
    f7f42accbb x86/efi: Use generic PE/COFF structures
    6a039b0500 x86/cpufeature: Reposition cpu_has_{lfence_dispatch,nscb}
    95c3ae591c tools/libxs: Style consistency improvements
    b1642aaea2 x86: enable long section names for xen.efi
    c4344ecc5a x86/mwait-idle: add dependency on general Intel CPU support
    e1c8a3dc8a x86/boot: Drop stale comment about zeroing the stack
    f4c7663d19 xen/riscv: use {read,write}{b,w,l,q}_cpu() to define {read,write}_atomic()
    b64f62fcbd ubsan: use linux-compat.h
    7298e63519 docs/misra: add R17.2 and R18.2
    0843b40c47 docs: fusa: Add requirements for emulated uart
    03400a2a26 automation/eclair: add deviation for MISRA C 2012 Dir 4.10
    ef3b4768b3 arm/smmu: Complete SMR masking support
    6279b9a3be xen/arm: Enable workaround for Cortex-A53 erratum #1530924
    4e1a333745 arm: Drop deprecated early printk platform options
    a8bf14f6f3 xen/ucode: Fix buffer under-run when parsing AMD containers
    4e23c86bd8 xen/keyhandler: Move key_table[] into __ro_after_init
    08ffd8705d x86/hvm: Simplify stdvga_mem_accept() further
    42968684e5 ARM/cache: Drop legacy __read_mostly/__ro_after_init definitions
    ec185ec239 x86/mm: undo type change of partial_flags
    221f2748e8 blkif: reconcile protocol specification with in-use implementations
    eb97f87919 types: replace remaining uses of s32
    5ffe6d4a02 types: replace remaining uses of s16
    6e7f7a0c16 xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build
    40f5c7e138 x86/HVM: drop .complete hook for intercept handling
    b180a50326 x86/HVM: drop stdvga's "lock" struct member
    3beb4baf2a x86/HVM: drop stdvga's "vram_page[]" struct member
    86c03372e1 x86/HVM: drop stdvga's "{g,s}r_index" struct members
    7aba44bdd7 x86/HVM: drop stdvga's "sr[]" struct member
    b16c0966a1 x86/HVM: drop stdvga's "gr[]" struct member
    89108547af x86/HVM: remove unused MMIO handling code
    b740a9369e x86/HVM: drop stdvga's "stdvga" struct member
    eb7cd0593d x86/HVM: properly reject "indirect" VRAM writes
    3d65f1c072 x86emul: support CMPccXADD
    582fade2a9 automation/eclair_analysis: address violation of Rule 20.7
    738db54711 xen/bitmap: remove redundant deviations
    3c5c9743ca automation/eclair: update configuration of Rule 20.7
    33888e7aaa automation/eclair_analysis: deviate linker symbols for Rule 18.2
    4b3f30ea30 automation/eclair_analysis: fix MISRA Rule 20.7 regression in self-tests.h
    035baa203b x86/hvm: allow {,un}map_pirq hypercalls unconditionally
    53b7246bdf x86/HVM: drop stdvga's "cache" struct member
    2b24c090d1 x86/mmcfg: address violation of MISRA C Rule 16.3
    f6cc23e234 x86/mm: address violations of MISRA C Rule 16.3
    6f5b873600 x86/monitor: address violation of MISRA C Rule 16.3
    c4fe5296e6 x86/hypercall: address violations of MISRA C Rule 16.3
    a42c3ec62f x86/vm_event: address violation of MISRA C Rule 16.3
    b3173a25ba x86/time: address violations of MISRA C Rule 16.3
    76529a1ce1 x86/psr: address violation of MISRA C Rule 16.3
    09217c2618 x86/APIC: address violation of MISRA C Rule 21.2
    233ee468bb x86/cpufreq: address MISRA Rule 7.3 violation
    cb4f22884e x86/time: introduce probing logic for the wallclock
    6da090b4b7 x86/time: pull cmos_rtc_probe outside of function and rename
    5b4664b9e4 x86/mm address violations of MISRA C:2012 Rule 5.3
    3502c033f6 arm/gicv3: Fix ICH_VTR_EL2.ListRegs mask
    c23571fe31 automation: fix xilinx test console settings

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
4fe6a15b48 xen: update to RELEASE-4.19.1-tip
Bumping xen to version RELEASE-4.19.1-9-g8dd897e691, which comprises the following commits:

    8dd897e691 MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade
    8b584c97f8 xen: update ECLAIR service identifiers from MC3R1 to MC3A2.
    c41c22bf8e x86/io-apic: prevent early exit from i8259 loop detection
    fbe3ec72dc tools/ocaml: Specify rpath correctly for ocamlmklib
    60573721c5 libs/guest: Fix migration compatibility with a security-patched Xen 4.13
    475511a467 xen/Kconfig: livepatch-build-tools requires debug information
    3a9e5a93e6 x86emul: MOVBE requires a memory operand
    5d61bc0585 update Xen version to 4.19.2-pre
    6f7af8383f xen/device-tree: Allow region overlapping with /memreserve/ ranges
    ccf4008467 update Xen version to 4.19.1
    5d4a29158d x86/msi: fix locking for SR-IOV devices
    f67d770d86 xen/pci: introduce PF<->VF links
    54452a3df9 build: Remove -fno-stack-protector-all from EMBEDDED_EXTRA_CFLAGS
    7eb2df50a6 x86/pvh: also print hardware domain pIRQ limit for PVH
    755b136aa4 x86/irq: fix calculation of max PV dom0 pIRQs
    6a0ef94a8f x86/mm: ensure L2 is always freed if empty
    18ea86302e x86/setup: remove bootstrap_map_addr() usage of destroy_xen_mappings()
    f2e41f075d x86/mm: skip super-page alignment checks for non-present entries
    0560ce8243 x86/mm: introduce helpers to detect super page alignment
    e461f0cd14 x86emul: avoid double memory read for RORX
    7da6997e46 x86emul: ignore VEX.W for BMI{1,2} insns in 32-bit mode
    0560252cbd x86/cpu-policy: Extend the guest max policy max leaf/subleaves
    bb62ed831c x86/alternatives: do not BUG during apply
    36789fa096 xen/livepatch: do Xen build-id check earlier
    60ea799246 xen/livepatch: simplify and unify logic in prepare_payload()
    8fa1ee4053 xen/livepatch: drop load_addr Elf section field
    af7423e78d x86/boot: Preserve the value clobbered by the load-base calculation
    2d02d54cce tools/ocaml: Fix the version embedded in META files
    2914b2b19c tools/ocaml: Drop the OCAMLOPTFLAG_G invocation
    f7b4e4558b tools/ocaml: Fix OCaml libs rules
    04442e130a tools/ocaml: Remove '-cc $(CC)' from OCAMLOPTFLAGS
    5231f97f24 x86/shutdown: change default reboot method preference
    fa1f4752eb x86/viridian: Clarify some viridian logging strings
    38cbe0a62e tools/libxs: Stop playing with SIGPIPE
    823abf0955 tools/libxs: Use writev()/sendmsg() instead of write()
    c991b585c4 tools/libxs: Track whether we're using a socket or file
    97fded1c09 tools/libxs: Rework xs_talkv() to take xsd_sockmsg within the iovec
    dd2494735c tools/libxs: Fix length check in xs_talkv()
    4abfe60f06 tools/misc: xen-hvmcrash: Inject #DF instead of overwriting RIP
    8567eefe37 xen/arm64: entry: Actually skip do_trap_*() when an SError is triggered
    251a949648 xen/x86: prevent addition of .note.gnu.property if livepatch is enabled
    1406f07aa1 tools/libxl: remove usage of VLA arrays
    c86ec8e156 x86/io-apic: fix directed EOI when using AMD-Vi interrupt remapping
    267796fd04 libxl: Use zero-ed memory for PVH acpi tables
    ad77081ac6 x86/hvm: Simplify stdvga_mem_accept() further
    1cb4e0a5fe x86/HVM: drop stdvga's "lock" struct member
    7b2df91a0e x86/HVM: drop stdvga's "vram_page[]" struct member
    77cb6587d4 x86/HVM: drop stdvga's "{g,s}r_index" struct members
    04f1c5e6f7 x86/HVM: drop stdvga's "sr[]" struct member
    2334fb4fef x86/HVM: drop stdvga's "gr[]" struct member
    2ac4917c24 x86/HVM: remove unused MMIO handling code
    92667bef14 x86/HVM: drop stdvga's "stdvga" struct member
    ed8105c364 x86/HVM: drop stdvga's "cache" struct member
    c92f26973d CI: Refresh the Debian 12 x86_32 container
    6ac45f72a3 CI: Refresh the Debian 12 x86_64 container
    32e9c5de2e CI: Drop alpine-3.18-rootfs-export and use test-artefacts
    01951e1a05 CI: Add {adl,zen3p}-pvshim-* tests
    7e0ba9a387 CI: Rework domU_config generation in qubes-x86-64.sh
    1dd4b60de1 CI: Minor cleanup to qubes-x86-64.sh
    76f180625b CI: Stop building QEMU in general
    e9b2124fe8 automation: shorten the timeout for smoke tests
    811637696b automation: add a smoke test for xen.efi on X86
    d1c774c17a automation: preserve built xen.efi
    b68a7b9b29 automation: introduce TEST_TIMEOUT_OVERRIDE
    7b3b33efab automation: fix xilinx test console settings
    9c17da3ea0 automation: use expect utility in xilinx tests
    ed130bef93 automation: fix false success in qemu tests
    5efbc09cd7 automation: update xilinx test scripts (tty)
    59ac149af9 automation: restore CR filtering
    cbea75a3cd automation: add default QEMU_TIMEOUT value if not already set
    a0e776530c automation: add x86_64 xilinx smoke test
    3ba995ab8d CI: Resync .cirrus.yml for FreeBSD testing
    47cdc5fe71 Config: Update MiniOS revision
    fadbc7e32e x86/boot: Fix XSM module handling during PVH boot
    8e157210c0 x86/boot: Fix microcode module handling during PVH boot
    eec09073ad iommu/amd-vi: do not error if device referenced in IVMD is not behind any IOMMU
    a756c242ea xen/spinlock: Fix UBSAN "load of address with insufficient space" in lock_prof_init()
    05292f914f x86/domctl: fix maximum number of MSRs in XEN_DOMCTL_{get,set}_vcpu_msrs
    d15e9fa3c8 ioreq: don't wrongly claim "success" in ioreq_send_buffered()
    8ebd6b066d x86/dpci: do not leak pending interrupts on CPU offline
    8eb2fdbc5b stubdom: Fix newlib build with GCC-14
    8321aa3db8 x86/pv: Rename pv.iobmp_limit to iobmp_nr and clarify behaviour
    0cfbae3f86 x86/pv: Handle #PF correctly when reading the IO permission bitmap
    f879df5eb4 x86/pv: Rework guest_io_okay() to return X86EMUL_*
    8f9dad658a x86/traps: Re-enable interrupts after reading cr2 in the #PF handler
    950e57e0ce x86/PV: simplify (and thus correct) guest accessor functions
    84d8fbd883 xen/ucode: Make Intel's microcode_sanity_check() stricter
    2c61ab4071 xen/ucode: Fix buffer under-run when parsing AMD containers
    933416b139 blkif: reconcile protocol specification with in-use implementations
    d0ea9b319d xen/x86/pvh: handle ACPI RSDT table in PVH Dom0 build
    ec3999e205 x86/HVM: properly reject "indirect" VRAM writes
    78d412f8bc x86emul/test: fix build with gas 2.43
    d625c4e9fb x86: fix UP build with gcc14
    3ceb79ceab SUPPORT.md: split XSM from Flask
    c18635fd69 libxl: Fix nul-termination of the return value of libxl_xen_console_read_line()
    ee826bc490 Arm64: adjust __irq_to_desc() to fix build with gcc14
    6e96dee93c x86/HVM: correct partial HPET_STATUS write emulation
    743af91672 x86/dom0: disable SMAP for PV domain building only
    404fb9b745 x86/x2APIC: correct cluster tracking upon CPUs going down for S3
    a0d6b75b83 x86emul: set (fake) operand size for AVX512CD broadcast insns
    1e68200487 x86emul: always set operand size for AVX-VNNI-INT8 insns
    cb6c3cfc5f x86/pv: Address Coverity complaint in check_guest_io_breakpoint()
    b74a5ea839 x86/pv: Fix merging of new status bits into %dr6
    de924e4dba x86/pv: Introduce x86_merge_dr6() and fix do_debug()
    e2f29f7bad x86emul: correct #UD check for AVX512-FP16 complex multiplications
    e12998a9db xl: fix incorrect output in "help" command
    46a2ce3521 Arm: correct FIXADDR_TOP
    9358a7fad7 x86/vLAPIC: prevent undue recursion of vlapic_error()
    0918434e0f automation: use expect to run QEMU
    51ae51301f automation: disable Yocto jobs
    3e8a2217f2 x86/pass-through: documents as security-unsupported when sharing resources
    c61d4264d2 x86/IOMMU: move tracking in iommu_identity_mapping()
    033060ee6e x86/emul: Fix misaligned IO breakpoint behaviour in PV guests
    8ad5a8c5c3 9pfsd: fix release build with old gcc
    e0e84771b6 tools/lsevtchn: Use errno macro to handle hypercall error cases
    97a15007c9 xen/hvm: Don't skip MSR_READ trace record
    b37580d5e9 xen/sched: fix error handling in cpu_schedule_up()
    ee032f2997 x86/altcall: further refine clang workaround
    adf1939b51 x86/dom0: fix restoring %cr3 and the mapcache override on PV build error
    d2ecc1f231 XSM/domctl: Fix permission checks on XEN_DOMCTL_createdomain
    e54077cbca bunzip2: fix rare decompression failure
    f97db9b3bc update Xen version to 4.19.1-pre
    026c9fa297 Set 4.19 version

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
7027eecae9 virt-viewer: update to v11.0
Bumping virt-viewer to version v11.0-81-gf666425, which comprises the following commits:

    f666425 ci: refresh with latest 'lcitool manifest'
    82dbca4 ci: refresh with latest lcitool manifest
    41949db ci: add 'libc' package to lcitool project def
    4e08a54 ci: import lcitool project package list definitions
    8e1aea4 Translated using Weblate (Czech)
    887a4a3 Translated using Weblate (Chinese (Simplified))
    0f44b80 Update translation files
    26ce13f Translated using Weblate (Indonesian)
    cdb1e45 Added translation using Weblate (Romanian)
    db33b14 Translated using Weblate (Spanish)
    4676c57 Make app-id and desktop file name match
    ee49623 check for incompatible libgovirt version
    46997b9 Translated using Weblate (Turkish)
    6bacfeb Translated using Weblate (Swedish)
    3b37bec Translated using Weblate (Georgian)
    ef33a2e Translated using Weblate (Finnish)
    3f1294a Translated using Weblate (Korean)
    e3d2651 Translated using Weblate (Italian)
    b11a26a Translated using Weblate (Ukrainian)
    b1f93c5 Translated using Weblate (Polish)
    bd1fa28 Update translation files
    25457fe po: update pot file
    4868bfe po: add all C sources to POTFILES
    286a951 Translated using Weblate (Czech)
    968b445 Add codespell configuration
    6b7c11f Typo fixes
    10b111c Add content_rating to appdata
    44db193 Add launchable desktop file and virt-viewer binary
    50e793d Translated using Weblate (Spanish)
    de864c1 Read oVirt CA and pass it to gtk-vnc

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
5216f0fc99 virt-manager: update to v5.0.0
Bumping virt-manager to version v5.0.0-18-gda2f65f9, which comprises the following commits:

    da2f65f9 ci: add a simple codespell job
    3cfd2e2d chore: drop codespell excluded word
    e1340f73 chore: tell codespell to ignore the whole 'po' subdirectory
    2724194c chore: move codespell configuration in its own file
    412c5d1a Fix typos
    c3debb4e cli, man: Always list --osinfo before --os-variant
    f92c2574 addhardware: panic: Fill in model combo with advertised values by libvirt
    f9ceec2b tests: Update capabilities for advertisting panic device models
    c859c7ac domcaps: get list of supported panic device models
    8af438dd cpu: Prefer maximum mode for many emulated guests
    11b70218 gui: Support maximum CPU mode
    fca41cfa cli: Support --cpu maximum
    ebf5d5f4 spec: rhel: drop spice dep, default to VNC
    ffc7d2bb spec: Remove unused `with_guestfs`
    94271b42 spec: Skip dconf dep if building for flatpak
    a4c84aa1 spec: Add /usr/share/virt-manager/ui/ to RPM database (bz 2283244)
    b74730eb spec: update link to virt-manager sources
    40d5804c ci: bump codecov/codecov-action from 4 to 5
    d17731ae Release of virt-manager 5.0.0
    cb2e5aa7 tests: urls: update old and obsolete OS versions
    06265f80 tests: urls: replace Scientific Linux with AlmaLinux
    4aa80f4c Update translation files
    9efd0575 Translated using Weblate (German)
    1ba412f3 Translated using Weblate (Finnish)
    ff0b17e0 Translated using Weblate (Polish)
    cc6ddf4f Translated using Weblate (Korean)
    160b8be2 Translated using Weblate (Ukrainian)
    34f990e3 Translated using Weblate (Turkish)
    a6b6558c Translated using Weblate (Georgian)
    aa75b492 Translated using Weblate (Russian)
    89c98cdb Translated using Weblate (Romanian)
    03e5e536 Translated using Weblate (Indonesian)
    0a6cb73e Translated using Weblate (Czech)
    d9b3b4df Translated using Weblate (Swedish)
    c70d8d6c Translated using Weblate (Italian)
    e9ee09d8 Update translation files
    58c93f0e po: Refresh translation template
    14a6bd64 po: meson: drop --join-existing from gettext arguments
    17f171cd cli: add `--network passt,portForward=8080:80` convenience syntax
    2f8f0e81 virt-xml: implement `--edit --boot uefi=off`
    cfcd63b7 virt-install: implement `--boot uefi=off`
    f0820873 cli: Add stub support for `--boot uefi=on|off`
    f3aa24bd virt-install: use default `--cpu` mode more often
    8fb78739 virt-clone: try harder to allow nonexisting images with --preserve
    058d8b4c storage: Add testsuite way to trigger StoragePool.install error
    3e47db67 virt-clone: document limits of `--replace`
    8eb87af4 cloner: Handle .qcow2 nvram extension
    276aa4a7 virt-clone: only attempt --reflink for raw images
    a22ac093 man: virt-clone: Fix typo
    625c99fb guest: refactor _add_default_input_device
    2835c250 virt-install: support `--input none`
    c78ec969 virt-install: let libvirt handle `--input bus=default`
    fa927c78 add a note that tpm can be effectively disabled by passing `none`
    f211e1a5 update `virt-manager.spec.in` reference
    d93e3cb8 ci: fix libvirt upstream job after meson
    301423b8 virt-install: Fix the active_pcr_banks issue for TPM emulator
    fd48e0be virt-install: Add --tpm backend.source support
    7e4f7ae3 virt-install: Add support for 'debug' parameter on TPM emulator
    12190303 virt-install: Add support for streams attribute for 'virtio' sound card
    e883e7d5 virt-install: Add support for multi-channel mode for 'usb' sound card
    1c0f7f62 virt-install: Add support for blockio.discard_granularity
    0054b71d virt-install: Fix a typo
    50b6a90a po: Refresh translation template
    819b746d Translated using Weblate (German)
    991355ef Translated using Weblate (French)
    d1fce2ff Translated using Weblate (Finnish)
    ea7306b0 Translated using Weblate (Kabyle)
    a05298f9 Translated using Weblate (Kabyle)
    123978ce Translated using Weblate (Spanish)
    8b787b94 Translated using Weblate (Romanian)
    3f9398e3 Translated using Weblate (Portuguese (Brazil))
    69a91e86 Translated using Weblate (Spanish)
    dfbc705b Translated using Weblate (Arabic)
    42074a0f Translated using Weblate (Italian)
    2c12dd38 Translated using Weblate (Czech)
    1b9df22a Translated using Weblate (Indonesian)
    a774a535 Translated using Weblate (Swedish)
    712fc0d4 Translated using Weblate (Polish)
    11f91c63 Translated using Weblate (Chinese (Simplified) (zh_CN))
    8a7b0de5 Translated using Weblate (Hungarian)
    96e37d2b Translated using Weblate (Russian)
    8c61113f Translated using Weblate (Georgian)
    e3a4c150 Translated using Weblate (Ukrainian)
    bdeb4404 Translated using Weblate (Turkish)
    d7287252 Translated using Weblate (Swedish)
    db5ccb05 Translated using Weblate (Korean)
    47518b13 Translated using Weblate (English (United Kingdom))
    145a476d Update translation files
    1f8c61cd ci: update .packit.yaml to use meson
    c385cd4e ci: update github workflows to use meson
    cbd2a7ef update setup.py usage and docs to meson
    31cb3219 remove remaining setuptools files
    5f34dea0 meson: add tests
    f41deedd meson: add build config and its options
    54aadf01 meson: add icons and schemas options
    0f9d89e0 meson: build and install bin wrappers
    01acaa38 meson: add po files
    3247dab7 meson: add virtManager files
    03e35a7c meson: add virtinst files
    ff1fa4cc meson: add ui files
    2abd3e75 meson: add icons
    dd909f20 meson: add data files
    6a462a3f meson: add man pages
    1f80a622 meson: rename and modify spec file
    d803491c introduce meson.build file
    07557113 tests: uitests: cover cli changes
    408a39a7 virt-manager: Switch to `--no-fork` by default
    028fdf2c man: virt-manager: document fork behavior and VIRT_MANAGER_DEFAULT_FORK
    5de63270 virt-manager: add VIRT_MANAGER_DEFAULT_FORK=yes|no env variable
    7ff899b8 virt-manager: Add `--fork` option
    17e39de0 virt-manager: Set SSH_ASKPASS_REQUIRE=force
    6c9842a1 ci: tweak Packit configuration
    d46674b8 fix: improve translatable message
    5126c007 tests: update tests to reflect the latest panic device changes
    2ce04b7c virtinst.cli: replace DevicePanic.MODEL_ISA with "isa"
    48ec63cc tests: uitests: tweak for panic dev changes
    c5a46646 addhardware: panic: default to asking libvirt for default model
    ebeb8007 devices: panic: let libvirt fill in model default
    afa82315 virt-install: add `--network hostdev=HOSTDEV`
    300f934c virt-install: add `--network type=hostdev,source.address.X=` pci options
    315b340f virt-install: add `--features msrs.unknown=ignore`
    7dd7383b tests: uitests: cover serial autoconnect bug fix
    dc1c9982 console: Handle autoconnect=off for serial console too
    97ab16a7 uitests: fix coverage with scaling default change
    715acbf5 console: Default to scaling=Always
    5875019b Update installertreemedia.py
    c99b6472 man: update libvirt.org links
    8f75ac4e virt-install: implement `--osinfo require=no` as fallback `name=generic`
    e0260776 virt-install: Warn if `--osinfo detect=on,name=OSNAME` detection fails
    e3da4337 cli: `--osinfo detect=on` shouldn't default to require=off
    1487dbd2 cli: --osinfo: clean up `require=` handling
    a28401cb tests: Test that `--osinfo detect=on` implies `require=off`
    3006c5a1 virtManager: drop libappindicator usage
    31eab9b4 pylint: fix false positive errors
    d4194c13 misc: codespell fixes
    a9a78f45 installer: rename has_install_phase to requires_postboot_xml_changes
    1c8e6f84 virt-install: Make --cloud-init reboot by default (again)
    351233f8 vmwindow: Default new window viewer size to 1280x800
    d231e66a console: Fix resize_to_vm with host fractional scaling
    2ee22419 console: drop manual size request, let widgets do it for us
    1d7fcac3 viewers: simplify shared self._display handling
    7e79023b viewers: Share most of _refresh_grab_keys implementation
    51c3f1c6 virt-xml: Add `--edit --convert-to-vnc`
    f7988a94 guest: convert_to_vnc: optionally add qemu-vdagent
    d58299ee guest: convert_to_vnc: convert video device
    f0078a17 guest: remove spiceport devices when spice is removed
    229b9050 guest: add convert_to_vnc()
    c498c519 virt-install: Exit gracefully when VM is undefined behind our back
    dd354e8b virt-xml: add `--edit --convert-to-q35`
    454aad78 guest: add convert_to_q35
    fe09e8f4 viewers: add explicit signal for desktop resize
    f140ff18 console: drop the scroll size-allocate callback
    e5208adc console: drop the console_size_allocate call
    24324bb6 console: Leave scroll policy as AUTOMATIC
    95006f42 console: Clean up get_desktop_resolution usage
    371cd1ad console: Simplify usbredir menu handling
    4cc52de8 console: Fix widget size with scaling=never and host fractional scaling
    6b944ef6 console: Add a comment about _set_size_to_vm and fractional scaling
    bd0d0920 console: Add logging to _set_size_to_vm
    dfb1f330 connection: handle disappearing obj in agent handler
    2ee2dda1 virt-xml: Fix cli_arg_name vs cli_flag_name() usage
    f66cca92 cli: Make --xml option parsing less special
    76f45994 virtxml: Don't require `options` at XML action time
    455b38f7 virtxml: Add Action class to track action + option pairs
    b7c72af7 virtxml: move some functions
    4941bb92 testmock: Remove some console mocking that's no longer required
    2c9f2194 console: Remove needless console scale comparison
    babeb151 console: Cleanup _scroll_size_allocate
    8e551f51 console: Remove our custom aspect ratio handling
    9929f2d6 vmwindow: Disable 'Resize to VM' menu when VM is offline
    20000fb3 vmwindow: Don't desensitive `Auto resize`
    289a993a viewers: spice: hook into display-primary-create
    70861c50 viewers: vnc: use set_keep_aspect_ratio(True)
    3ee677c2 viewers: Log once when checking vnc set_allow_resize support
    d79d4633 snapshots: Don't save outdated screenshot data
    1f448a19 virt-manager: Stop blocking SIGHUP
    683b486c ui: snapshots: Fix button placement when resizing 'New' dialog
    de00ff76 virt-xml: Fix `--define` with stdin XML
    b83a1b0d domain: Use KEEP_TPM flag for domain rename
    c6bc3a86 tests: uitests: test localhost tcp graphics
    380af310 console: allow localhost connections over TCP
    258df88e domain: tweak q35 <-> pc editing
    78064728 domain: Remove the pcie-root and ports for i440fx in customized dialog
    2d94e92d guest: Drop the '_' prefix for _add_q35_pcie_controllers
    9813dc3b capabilities: Exclude a line from code coverage
    e1468c04 tests: Add testDomainCapabilitiesLoongArch64()
    2a52d770 domcapabilities: Add firmware patterns for loongarch64
    5419524f tests: Add testDomainCapabilitiesRISCV64()
    dc603792 domcapabilities: Add firmware patterns for riscv64
    cf0b6cd7 tests: Add testDomainCapabilitiesPPC64le()
    01a451e7 tests: Update ppc64le capabilities
    5d5da5ff domcapabilities: Update comment
    579eb3e9 tests: Extend testDomainCapabilitiesAArch64()
    38906948 tests: Update aarch64 capabilities
    07ae6da3 domain: don't attempt to predict if VM supports snapshots
    e412ecf1 domain: log object XML after snapshot creation
    4782dd1c cli: Add --disk driver.discard_no_unref=on|off
    6a65def6 cli: Add --video model.blob=on|off
    febddd4b cli: Add --memdev target.address_base for virtio-mem and virtio-pmem
    7a974a3a cli: Add --features kvm.pv-ipi.state=on|off
    63f8f78e tests: Check missing_xorriso in osinfo-netinst-unattended test case
    9ec9c400 tests: add fake-win-multi.iso and test it
    f4a9722d uitests: cover serial console changes
    6264167c serialcon: Don't disable console menu items for offline VM
    2293ec49 console: Handle inactive VM when console menu selection changes
    a58223ba addhardware: Only set channel clipboard XML if UI is visible
    adc1948e details: only refresh os page if its currently selected
    e1798ef8 Add missing test file
    83daac04 domain: os: treat `xenpvh` as xen PV
    65d568eb Scrub references to virt-tools-list
    9ad347fd tests: test XML generation for --disk path=file://...
    67206a85 tests: add more test cases to cover all code paths
    74fd503b virtinst: enable most Hyper-V features by default
    169db9dc virtinst.support: drop unused conn_hyperv_vapic function
    9e9dbf73 domain.features: use domcapabilities when setting default Hyper-V features
    66bbfa23 domain.features: extract setting default hyperv features
    c279c17e domcapabilities: get list of supported Hyper-V features
    bec2d7cb tests: update kvm-x86_64-domcaps-latest
    139b0e28 cli: add --features hyperv.avic.state=on/off
    a06d5359 cli: add --features hyperv.evmcs.state=on/off
    5afc6919 cli: add --features hyperv.ipi.state=on/off
    e3ec248c cli: add --features hyperv.tblflush.state=on/off
    c421ec1b cli: add --features hyperv.reenlightenment.state=on/off
    2786ea5d cli: add --features hyperv.frequencies.state=on/off
    6289a136 cli: add --features hyperv.stimer.direct.state=on/off
    1f69795b cli: add --features hyperv.stimer.state=on/off
    d7976a88 cli: add --features hyperv.runtime.state=on/off
    d2a29245 cli: add --features hyperv.vpindex.state=on/off
    1c3fb025 test_cli: extract hyperv features to separate lines
    ac26945c domain.features: reorder Hyper-V features
    2da48849 tests: Cover some weird virt-xml corner case behaviors
    7e79e064 Revert virt-xml multiple --edit support
    5fe6dcc6 Fix some pylint
    97469abd tests: add tests for AMD SEV-SNP
    3559dcd9 virtinst: add properties for AMD SEV-SNP
    1fef5d86 tests: add virt-xml test to demonstrate changing graphics and video at the same time
    b34ae0d0 virt-xml: allow multiple --edit options
    cb6636f4 virtinst: add getter/setter for video model
    093d58fb virtinst: add/remove spice devices when updating graphics type
    aaf85519 virtinst: remove spice devices when removing last spice graphics
    7a03f3ef testsuite: add test-spice vm definition
    2a0aa2d5 virtinst: fix compare for audio devices
    ef64949e virtinst: unify detection of duplicate console when removing device
    29145b9e Fix some pylint
    90ceb87b virt-install: implement passt backend for user network interface
    b1ee4c94 po: Refresh translation template
    baa380aa Translated using Weblate (Arabic)
    2d3f3faa Translated using Weblate (German)
    deadb8a5 Translated using Weblate (Indonesian)
    41fa111c Translated using Weblate (Indonesian)
    276c1c4b Translated using Weblate (Chinese (Traditional) (zh_TW))
    383c83af Translated using Weblate (Korean)
    735a4352 Translated using Weblate (Portuguese (Brazil))
    4e6ce92e Translated using Weblate (English (United Kingdom))
    a4adbc1a Translated using Weblate (French)
    954c9b6b uitests: createvm: fix case on f40
    2ddbea5d uitests: Fix get_text() on fedora40
    0cad0c4d uitests: force internal snapshots in test_snapshot.py
    a00c0900 uitests: handle newer libvirt test driver UpdateDevice support
    2e1bacfd uitests: Add live external snapshot testing
    95ca39aa uitests: test xmleditor textview fallback
    8eb37c0e uitests: Add some virtManager coverage exclusions
    1194f099 tests: cli: Fix with latest libvirt
    0288e925 tests: cli: Use regex for grep= and nogrep= args
    648f52bd virt-install: fix cloud-init ssh keys
    72a74fb1 virtinstall: Fix --location and --cloud-init conflict
    0c981eec tests: Add test for DeviceDisk.paths_in_use_by
    328cabca hoststorage: Use DeviceDisk.paths_in_use_by for performance
    cd8eeaf5 virtinst: disk: Add paths_in_use_by()
    8a0e2239 tests: add s390x default test case
    43f581c2 virtinst: add graphics to risc-v virt VMs by default
    faebce40 virtinst: add graphics to aarch64 virt VMs by default
    9ede5d22 Add test cases for loongarch
    ea3cae4d Add some default device support for loongarch
    d2cf01b3 Add loongarch support
    eee8d09d cli: Deprecate --cpu host
    8b5f73e9 cli: Don't suggest --cpu host
    0530df76 man: Don't suggest --cpu host
    ba3a098c virtinst: disk: strip away `file://` protocol
    5fcf506e tests: skip mdev tests for libvirt older than 10.4.0
    6a85d79a xmleditor: make gtksourceview optional
    a91e23c8 install: Use virtio-scsi for unattended installations
    7f8230a1 guest: Prefer UEFI for riscv64
    6fca91f2 tests: Add more riscv64 tests
    3b09701f tests: Use SPICE graphics on riscv64
    9ec58525 tests: Switch to --osinfo for riscv64
    0612dca8 tests: Drop precompare_check from riscv64
    094a8120 tests: Update riscv64 capabilities
    1261666c ci: Add test-against-libvirt-git.yml
    ca25b41a ci: clarify comment about what fedora packages we test against
    738a8d9f uitests: Fix with GtkFileChooserNative
    db1b2fbc Use GtkFileChooserNative
    231a3dbc build: use setuptools.command.build when available
    4f4e73d0 build: use super()
    17d9f339 Tweak for codecov v4
    68efec21 ci: bump codecov/codecov-action from 3 to 4
    8f8a1b9b ci: checkout the code after installing git-core
    14c5684f ci: split base dependency and build dependency installation
    3f79e76e ci: install git-core as well
    e21129ae ci: Rename `CI` workflow to `Test on fedora:latest`
    dce9de48 hostdev: Fix error when mdev type_id is missing
    8b6db203 tests: Fix host-copy XML with libvirt 10.1.0
    4ffbc0d9 Allow serial console resize to beyond 80 columns.
    e95ca453 virtManager: ignore agen livecycle event for shutoff VMs
    5488ff47 virtManager: add support to create external snapshots
    f1ba012e virtManager: domain: allow disk only snapshots
    d8565ac5 virtinst: snapshot: add memory file attribute
    3cde1acb virtinst: add external snapshot capability
    dadb9a0d po: sort LINGUAS
    55b4c1bc Translated using Weblate (Chinese (Simplified) (zh_CN))
    1be248e6 Translated using Weblate (Korean)
    e4e406e3 Translated using Weblate (Portuguese (Brazil))
    9c4b7895 Translated using Weblate (Georgian)
    c8c37cb0 Translated using Weblate (Portuguese (Brazil))
    a6b62a20 systray: Cleanups and improvements for --show-systray
    2043847a uitests: More handling for slow startup on f39
    75e4d1dd baseclass: Avoid glib `Source ID XX not found` at app shutdown
    6c977426 man: document --show-systray option
    69290e05 cli: add --show-systray option
    014d1ef9 console: Cleanup and improve console menu handling
    409e4bf2 console: Select the first embeddable graphics device as graphical console
    d83074a0 domain: Add idx parameter to open_graphics_fd()
    9c242ef7 console: Move embeddable_graphics() to console.py
    0d3b7f67 Fix pylint 3.1.0 issues
    a52ab24e createvm: Replace deprecated pkgutil.find_loader
    0c899a7c uitests: Handle slow app launch on fedora 39
    a05ab5cd uitests: Fix walkUI flakyness
    bb867213 ui: details: Increased scrolledview6's height request
    04cc4895 ui: details: fix Applications width.
    7ae3e10b netlist: Fix UI error when virtual network doesn't exist
    cf172c8e testdriver: Add portgroups example to test-many-devices
    82f1c449 domain: rename: handle firmware ending with .qcow2
    78f7797c Support creating sparse volumes on ZFS pools
    6710ca69 setup: Allow `pylint -j0`

Along with the update to 5.0.0, we switch from setuptools to meson.

 - man page building is patched out
 - we add some new rdepends/depends for the build
 - we disable the building of tests
 - disable icon cache updating

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
9f4d93e225 rootlesskit: update to v2.3.1
Bumping rootlesskit to version v2.3.1-28-g0b4ed7b, which comprises the following commits:

    b4fe9a7 go fmt
    a1beb23 Build(deps): Bump golang.org/x/net from 0.28.0 to 0.33.0
    9546d0d Build(deps): Bump golang.org/x/sys from 0.28.0 to 0.29.0
    2363620 fix: allow to propagate the address specified in -p option
    a710d84 Build(deps): Bump golang.org/x/sys from 0.27.0 to 0.28.0
    7c52d16 Build(deps): Bump golang.org/x/sys from 0.25.0 to 0.27.0
    16c6608 Build(deps): Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1
    19fab4c Build(deps): Bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5
    b26bc59 Build(deps): Bump golang.org/x/sys from 0.24.0 to 0.25.0
    f11b0e6 port/builtin: return proper error for sctp
    f98e27e Build(deps): Bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0
    3bb2efa docs/network: Mention that pasta won't work with some Ubuntu package versions
    baec6fd docs/network: Don't suggest removing AppArmor rules for pasta
    ae0c97d pasta: Update comment about issue with AppArmor and creation of user namespace
    3c35024 v2.3.1+dev
    fcc67fe v2.3.1
    56337e7 CI: attest-build-provenance: fix a subject-path issue (461)
    2c2a107 v2.3.0+dev
    5bf364f v2.3.0
    f3948fd Enable actions/attest-build-provenance
    e403655 CI: update Docker (27.1.2)
    169edeb CI: update pasta (2024_08_14.61c0b0d)
    d5a270f go.mod: golang.org/x/net v0.28.0
    5e81602 go.mod: github.com/insomniacslk/dhcp v0.0.0-20240812123929-b105c29bd1b5
    8751f26 Deprecate rootlesskit-docker-proxy (no longer needed since Docker v28)
    36ceb0e child, pasta: Allow drivers to configure their own interface, let pasta do that
    ade4c86 pasta: Let it run in background, and wait until it forks
    8cbb3ae CI: update Go to 1.23
    1139aed Build(deps): Bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.4
    fba675b Build(deps): Bump golang.org/x/sys from 0.22.0 to 0.24.0
    926c6aa Build(deps): Bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3
    90ad956 Build(deps): Bump github.com/gofrs/flock from 0.12.0 to 0.12.1
    1899165 Build(deps): Bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
    c5a4fbf v2.2.0+dev
    17a2cd4 v2.2.0
    b8197ef go.mod: update
    d6a8962 CI: update dependencies
    a631a8c Build(deps): Bump github.com/gofrs/flock from 0.8.1 to 0.12.0
    ca26493 Add reexec branch for socket activation to correct LISTEN_PID
    c202896 Build(deps): Bump golang.org/x/sys from 0.21.0 to 0.22.0
    8ce63fd Build(deps): Bump github.com/containernetworking/plugins
    f68acb9 Build(deps): Bump golang.org/x/sys from 0.20.0 to 0.21.0
    c784875 Build(deps): Bump github.com/containernetworking/plugins

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
8ba45b9434 libvirt: update to v11.0.0 -tip
We drop yajl, since it has been dropped upstream.

Bumping libvirt to version v11.0.0-3-g14fc6812df, which comprises the following commits:

    14fc6812df Translated using Weblate (Georgian)
    13b17f7720 Translated using Weblate (Georgian)
    32f822969d Post-release version bump to 11.1.0
    a0b9f813a1 Release of libvirt-11.0.0
    c1b8e8c00b news: document support for mdev <-> SRIOV VF vGPU live migration
    d53da4b905 news: note addition of vlan tagging support for Linux host bridges
    b2c999855d Translated using Weblate (Ukrainian)
    529d9a421e Translated using Weblate (Spanish)
    7a03d6c2fa NEWS: Document some of my fixes in this release
    dc8fdeb1fb NEWS: Add few things I changed this release
    c85d87fe8f NEWS: document bug fix for snapshots
    1942a88813 NEWS: Document features/improvements/bug fixes I've participated in
    027bcf1112 NEWS: document fix for starting transient domains
    a4def2eb95 conf: Do not parse hyperv features with passthrough mode
    32140bdb09 meson: Replace meson.source_root() with meson.project_source_root()
    a71985f6f3 qemu_migration: Do not consider post-copy active in postcopy-recover
    413e798eb1 Translated using Weblate (Korean)
    9759d39c67 Translated using Weblate (Ukrainian)
    3639a38985 Translated using Weblate (Korean)
    9e1b7ff760 Update translation files
    9ab2cd48ea access: fix po_check when polkit is disabled
    7a903458f1 qemu: support vlan change for linux host bridge during update-device
    f35bddae90 docs: standard linux bridges now support vlans
    d51179fa82 qemu: snapshot: delete disk image only if parent snapshot is external
    30b0e553bc docs: Clarify documentation of host-model CPU mode
    4c7bb1cc4a po: Refresh potfile for v11.0.0
    caa10431cd util: don't attempt to acquire logind inhibitor if not requested
    a28a5b675d rpc: log details of OS signals received by daemon
    a586411889 spec: Disable ch driver on RHEL
    922a219d0a Translated using Weblate (Finnish)
    1523cd3c6e Translated using Weblate (Finnish)
    95a20d7aa5 Translated using Weblate (Spanish)
    7c5e9e1bce Translated using Weblate (Spanish)
    3aa8b9c700 Translated using Weblate (Spanish)
    bc2bcd54c5 Translated using Weblate (Spanish)
    1a5340d7f0 Translated using Weblate (Spanish)
    16a4e3f9f8 Translated using Weblate (Spanish)
    d0acf28d20 Translated using Weblate (Spanish)
    4bc2b6c5ec Translated using Weblate (Finnish)
    7803363339 Translated using Weblate (Finnish)
    ebb90e7412 Translated using Weblate (Finnish)
    693feada8b Translated using Weblate (Finnish)
    748008d602 Translated using Weblate (Swedish)
    1eda6c9b90 Translated using Weblate (English (United Kingdom))
    e1b63ac56b Translated using Weblate (Swedish)
    dd82e2baa8 qemu: allow migration of guest with mdev vGPU to VF vGPU
    c1a0d08518 Enable vlan support for standard linux bridges
    582f0966f9 util: Add vlan support to virNetDevBridgeAddPort
    2e651ec101 util: add netlink bridge vlan filtering
    18ea5e19c6 apparmor: fix UUID specification
    a751d30220 security: replace uses of label and VIR_FREE by g_autofree
    76b9227eea security_apparmor: fix memleaks in AppArmorSetFDLabel
    c97766a639 spec: Enable ch driver
    d12e937f47 tools: fix ordering mistake in virt-admin daemon-set-timeout code
    fc3a60d9d7 util: fix off-by-1 in inhibitor constants
    2ac1a0c13f meson: remove unneeded dependency on libdevmapper for storage_disk
    9df14f5173 conf: Adjust hyperv tlbflush formatting
    ad6b4d1fef conf: refactor hyperv features formatting
    91bb41a8b7 virtiofs: Allow read only mode
    d2a39db35b security: apparmor: Remove hardcoded "libvirtd" profile name
    6d3b877171 remote: apply translations to polkit files
    c244d041d9 meson: remove duplication of polkit dirs construction
    b996e99c51 po: add its rules for translating polkit file strings
    062a2c07cc qemu_tpm: do not delete parent directory for custom source
    958283a21f qemu_tpm: lock the state explicitly when running swtpm
    90014e7bc4 Revert "qemu: explicit swtpm state locking"
    18b8e6d3cc hyperv: Introduce and export 'facility' variable.
    a91b22ffc6 apparmor: Allow running loongarch64 VMs
    247357cc29 qemu: Add support for direct and extended tlbflush features
    ac08b362da conf, docs: Add support for direct and extended tlbflush features
    f7c33eeeb7 ch: Enable logging curl responses from ch
    db4e837598 ch: move curl_data and curl_callback definitions
    72a9a91e3b ch: Enable logging for ch domains
    334d2f604c hypervisor: Move QEMU log context to hypervisor
    94b393dd6e util/xml: open XML files before calling libxml2
    7f2fd38ee7 util/xml: don't assume libxml2 has the filename of the document
    0635cd9555 util/xml: fix extraction of XML context
    f7cbb136c3 src: drop obsolete checks for virDomainConfigFile failure
    8575724aef rpc: remove logind support for virNetDaemon
    48f0b6dfa1 src: convert drivers over to new virInhibitor APIs
    d2e5aa4f4e util: introduce object for holding a system inhibitor lock
    a0a8c95d07 cpu_map: Add missing CPU features
    3d55a2e593 cpu_map: Add ibpb-brtype CPU feature
    2284e8c29b cpu_map: Add zero-fcs-fds CPU feature
    dc12ca3949 cpu_map: Add fdp-excptn-only CPU feature
    212b7d8e28 cpu_map: Add sha512, sm3, and sm4 CPU features
    41a6de76bc cpu_map: Add GraniteRapids-v2 CPU model
    30f05acf35 cpu_map: Add avx10* CPU features
    060fd63c26 qemu: Call migrate-incoming with exit-on-error=false
    090a2f27c2 qemu: Replace qemuDomainCheckMonitor with qemuMigrationJobCheckStatus
    3100f43a1d qemu: Detect exit-on-error argument of migrate-incoming
    9636ac40a3 qemu_capabilities: Avoid memleak in virQEMUCapsProbeFullDeprecatedProperties()
    0162f2008e qemu: Enable I/O APIC even more frequently
    ef7c0f46f9 rpm: ensure we own directories we might create
    9e227634d3 Fix a few typos in error messages
    62658bbf06 conf: add deprecated_features attribute
    15d45964e4 virsh: add --disable-deprecated-features flag to domcapabilities
    cd1e837c22 qemu_capabilities: filter deprecated features if requested
    4e2c8de204 libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES
    51c098347d qemu_capabilities: query deprecated features for host-model
    45140d2930 qemu: parse deprecated-props from query-cpu-model-expansion response
    60e407deb5 qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions
    2d222ecf6e qemu: Enable I/O APIC if needed
    99474f8e50 logging: Change return type of virLogDaemonConfigFilePat to void
    0e1a848733 util: Change return type of virSCSIVHostDeviceSetUsedBy to void
    20afcd4b14 util: Change return type of virSCSIDeviceSetUsedBy to void
    ed8eec073f util: Change return type of virPCIDeviceSetUsedBy to void
    4e987a86b5 qemu: re-use existing ActualNetDef for more interface types during update-device
    2195037265 util: virsysinfo: Change return type of functions that never fail to void
    abd9887b6c hyperv: Change return type of hypervCheckParams to void
    f3179d5abe rpc: Change return type of virNetClientAddStream to void
    b0da352c58 rpc: Change return type of virNetClientAddProgram to void
    5afe228ea7 rpc: Change return type of virNetServerAddProgram to void
    393b0471a7 access: Change return type of virAccessDriverStackAppend to void
    da2439b746 cpu_map: Add EPYC-Genoa-v1 CPU model
    9bc479a3c0 cpu_map: Add Opteron_G5-v1 CPU model
    d092730fb4 cpu_map: Add Opteron_G4-v1 CPU model
    422d90dc56 cpu_map: Add Opteron_G3-v1 CPU model
    51ffa44fb4 cpu_map: Add Opteron_G2-v1 CPU model
    a1625b73f6 cpu_map: Add Opteron_G1-v1 CPU model
    332136e49a cpu_map: Add phenom-v1 CPU model
    6b775a68ec cpu_map: Add athlon-v1 CPU model
    8f5e36cbce cpu_map: Add KnightsMill-v1 CPU model
    537f136549 cpu_map: Add Penryn-v1 CPU model
    2d061eba8c cpu_map: Add Conroe-v1 CPU model
    6d25eafaec cpu_map: Add kvm64-v1 CPU model
    2c6a015a7f cpu_map: Add qemu64-v1 CPU model
    4a8259b5a3 cpu_map: Add kvm32-v1 CPU model
    d9b23d77c0 cpu_map: Add qemu32-v1 CPU model
    a3cab1ae67 cpu_map: Add core2duo-v1 CPU model
    c9fa77bfe8 cpu_map: Add n270-v1 CPU model
    ae14b20aaa cpu_map: Add coreduo-v1 CPU model
    886fd169c5 cpu_map: Add pentium3-v1 CPU model
    df34ae48e9 cpu_map: Add pentium2-v1 CPU model
    70a4ec29a7 cpu_map: Add pentium-v1 CPU model
    2abf6bd47c cpu_map: Add 486-v1 CPU model
    8bc6ebb495 sync_qemu_models_i386: Generate missing -v1 variants
    19b56603c4 sync_qemu_models_i386: Update meson.build
    50c6d727b6 cpu_map: Sort data files in meson.build
    b1725fbfb8 virsh: Fix --timeout option of migrate command
    6cc93bf288 qemu: Grab a QUERY job when formatting domain XML
    56d448ad0f ch: Enable user aliases
    81da7a2c2a qemu: tpm: do not update profile name for transient domains
    c63bdd17b9 virt-aa-helper: allow riscv64 EDK II
    daa560858b qemuDomainDiskChangeSupportedIothreads: Change error wording to fix grammar
    300362421e rpm: replace 'git' with 'git-core'
    57835f432f qemu: enable QEMU core dump by default on Linux
    dd217cd938 lxc: remove no longer working netns check
    dba710374d util: Fix typo in virNetDevOpenvswitchInterfaceSetQos
    be784aa513 Post-release version bump to 11.0.0
    7e5641bbc0 Release of libvirt-10.10.0
    94338f1375 Translated using Weblate (Swedish)
    b0a782f708 docs: document external swtpm
    984f6bb43f Translated using Weblate (Swedish)
    349ea8669c Translated using Weblate (Korean)
    304b93dbb5 NEWS: Document features/improvements/bug fixes I've participated in
    f850c2a569 virschematest: Don't skip all "directory" tests
    99dadf9e08 schemas: domaincaps: Add schema for CPU 'blockers'
    fcd9b78863 schemas: domaincaps: Add schema for 'canonical' cpu model name
    5e514c6733 schemas: domaincaps: Add schema for 'panic' device
    2704648936 schemas: domain: Make <identity> subelement of NFS disk source optional
    0bd01ef765 NEWS: Mention qcow2 'data-file', block NVRAM, and internal snapshot reversion
    976300fdf4 qemuDomainGetStorageSourceByDevstr: Lookup also '<dataStore>'
    515ed143ec qemuDomainVirStorageSourceFindByNodeName: Match also '<dataStore>' sources
    71935d4972 qemuDomainVirStorageSourceFindByNodeName: Extract nodename matching
    2a9349c8e8 qemu: snapshot: Change 'data-file' to read-only after snapshot
    754ca45c45 qemu: block: Ensure that <dataStore> is in appropriate state
    ed656f4c8f qemuBlockReopenAccess: Don't require backing chain terminator for non-chained images
    b83e87ca78 qemuBlockReopenAccess: Fix update of 'readonly' state
    b510f8ca8a qemuBlockReopenAccess: Add debug log entry about state of the image
    c4d6bd3bf5 qemu: Validate QoS values in qemuDomainSetInterfaceParameters()
    9b55a130b7 NEWS: Document support for versioned CPU models
    c0b6774d50 cpu: Check blockers in virCPUCompareUnusable only if they exist
    444f45135a Update translation files
    b35d559d6c po: Refresh potfile for v10.10.0
    68aaadd3a4 Translated using Weblate (Swedish)
    e9e5ebe6a6 network: add tc filter rule to nftables backend to fix checksum of DHCP responses
    6412c2cb51 util: add new "tc" layer for virFirewallCmd objects
    f1d94bbfa6 util: don't re-add the qdisc used for tx filters if it already exists
    35a5bf25d1 util: put the command that adds a tx filter qdisc into a separate function
    250435546a util: make it optional to clear existing tc qdiscs/filters in virNetDevBandwidthSet()
    fa50454c05 util: use a single flags arg for virNetDevBandwidthSet(), not multiple bools
    6490d6ac11 cpu_map: Add KnightsMill CPU model
    b5c15cf0d0 cpu_map: Add Denverton CPU model
    6e09d69cff cpu_map: Add versions of Dhyana CPU model
    3310ab0e58 cpu_map: Add versions of EPYC CPU model
    cbccbe6e43 cpu_map: Add versions of EPYC-Rome CPU model
    33209d63cd cpu_map: Add versions of EPYC-Milan CPU model
    d0e5e984b6 cpu_map: Add versions of Nehalem CPU model
    679305a98e cpu_map: Add versions of Westmere CPU model
    57b5f8078b cpu_map: Add versions of SandyBridge CPU model
    d00ba759c4 cpu_map: Add versions of IvyBridge CPU model
    569a06b07e cpu_map: Add versions of Haswell CPU model
    80d374422c cpu_map: Add versions of Broadwell CPU model
    8bf6c7eb84 cpu_map: Add versions of Skylake-Client CPU model
    6a3f1bc466 cpu_map: Add versions of Skylake-Server CPU model
    4ad434654a cpu_map: Add versions of Cascadelake-Server CPU model
    5bb09e6790 cpu_map: Add versions of Icelake-Server CPU model
    eed7a2c4f7 cpu_map: Add versions of Cooperlake CPU model
    860f40053d cpu_map: Add versions of Snowridge CPU model
    5faffbc514 cpu_map: Add versions of SapphireRapids CPU model
    073f825dab cpu_map: Add versions of GraniteRapids CPU model
    135a3ad2a4 cpu_map: Add versions of SierraForest CPU model
    fff2bbee7f domain_capabilities: Report canonical names of CPU models
    ca0ea085d7 cpu: Introduce virCPUGetCanonicalModel
    cb6463d803 cpu_x86: Record relations between CPU models
    a410f0256a sync_qemu_models_i386: Copy signatures from base model
    7133d72eff sync_qemu_models_i386: Update index.xml
    e2e7602a22 cpu_map: Properly group models in index.xml
    3bb2c2b641 sync_qemu_models_i386: Switch to lxml
    19cfe21d4e sync_qemu_models_i386: Store extra info in a separate file
    db127963d5 sync_qemu_models_i386: Add support for versioned CPU models
    515568071d sync_qemu_models_i386: Do not require full path to QEMU's cpu.c
    233afc3c58 sync_qemu_models_i386: Do not overwrite existing models
    c16e7f231f sync_qemu_models_i386: Use f-strings
    ba1652e84a sync_qemu_features_i386: Add some removed features back
    88e7cc1477 cpu_x86: Promote added/removed from ancestor
    61dd5d6bef cpu_x86: Annotate virCPUx86Model fields
    6aed4360e5 Translated using Weblate (Swedish)
    d1b9899905 Translated using Weblate (Swedish)
    5391f29008 Translated using Weblate (Swedish)
    ec66ac0d2d Translated using Weblate (Swedish)
    7117291513 Translated using Weblate (Swedish)
    ec11cf12fe Translated using Weblate (Swedish)
    86189ac148 Translated using Weblate (Swedish)
    68cfeab9ea Translated using Weblate (Swedish)
    03b4129b25 Translated using Weblate (Georgian)
    1d040e0315 Translated using Weblate (French)
    fe730c0861 Translated using Weblate (Swedish)
    806884cd58 Translated using Weblate (Chinese (Simplified) (zh_CN))
    ab5f29ab46 Translated using Weblate (Swedish)
    4268bdc0d6 Translated using Weblate (Swedish)
    e9b8be23f7 qemuxmlconftest: Add test cases for the <dataStore> feature
    4801729abc qemuxmlactivetest: Add tests for <dataStore>
    4281362a96 tests: virstoragetest: Add tests for detection of qcow2 'data_file' feature
    59b1408860 qemu: block: Add support for 'data-file' feature of qcow2
    cb5371a8bd qemu: factor out qemuDomainPrepareStorageSource()
    9ba2bef816 qemu: put data-file path to VM's cgroup and namespace
    702f8b5a77 security: apparmor: handle qcow2 data-file
    8fcc6c8025 security: selinux: handle qcow2 data-file on image label set/restore
    724a4c6dc4 security: DAC: handle qcow2 data-file on image label set/restore
    0a3d177d9b storage file: fill in src->dataFileStore during file probe
    63481eca80 storage file: add qcow2 data-file path parsing from header
    8799818036 storage file: add getDataFile function to FileTypeInfo
    b3171cf8da conf: implement XML parsing/formating for <dataStore> element of a storage <source>
    28d88e9fc3  Add schema and documentation for 'dataStore' sub-element of disk source
    64627d5645 conf: add data-file feature and related fields to virStorageSource
    2cb6cb05d4 docs: formatsecret: Fix an example of secret-set-value
    c54df8ed9e QEMU: allow to hot plugging virtio-serial-pci device
    a86b429046 tests: qemucapabilitiesdata: Update 'x86_64' capabilities for the qemu-9.2 dev cycle
    e4d058866e qemu: passt: Use 'reconnect-ms' instead of 'reconnect' with new qemus
    9e273db203 qemu: capabilities: Introduce QEMU_CAPS_NETDEV_STREAM_RECONNECT_MILISECONDS
    25f1fc8568 qemu: capabilities: Restore grouping in 'virQEMUCapsQMPSchemaQueries'
    74ef4888ff qemuDomainDiskChangeSupported: Add missing iothreads check
    5872ab7fe9 manpage: virsh: Add warning about 'migrate' with '--persistent' together with '--xml'
    055379df23 API: migration: Warn about use of VIR_MIGRATE_PERSIST_DEST with VIR_MIGRATE_PARAM_DEST_XML
    6f237f4642 Revert "qemu: migration: Improve handling of VIR_MIGRATE_PARAM_DEST_XML with VIR_MIGRATE_PERSIST_DEST"
    6d9bf5b63c NEWS: Add the news for CVE-2024-4418
    5ca7daf397 NEWS: Add the news for CVE-2024-2494
    eb2775e1d6 NEWS: cpu_map: Add the EPYC-Genoa cpu mode
    ef57b7431f NEWS: qemu: Add support for hyperv enlightenments features
    da2132d124 docs: Recommend virtio instead of virtio-(non-)transitional
    7b73e681a2 vmx: Get the VMware boolean uefi.secureBoot.enabled
    ec8be9aceb qemu: Avoid use of '-loadvm' commandline argument for internal snapshot reversion
    2da32ff468 qemu: monitor: Extract vmstate presence for internal snapshots in qemuBlockGetNamedNodeData
    6902e77c01 qemu: Add enum entries for 'snapshot-load' qemu job
    2ed93e1a4b qemu: monitor: Add monitor infrastructure for 'snapshot-load' QMP command
    c82dd60b2e qemuSnapshotForEachQcow2: Handle also NVRAM image for internal snapshots
    5ca0552d31 qemuSnapshotForEachQcow2: Refactor
    5dfd0a0ce8 qemu: Move 'qemuDomainSnapshotForEachQcow2(Raw)' to qemu_snapshot.c
    60838fee08 qemuDomainSnapshotForEachQcow2Raw: Remove 'driver' argument
    20ffcb912f qemu: Don't store path to qemu img
    25fdb57d8e ch: Enable callbacks for ch domain events
    ed1cef6264 ch: enable virNodeGetMemoryStats API
    91d6a0a1a9 Translated using Weblate (Swedish)
    cf37b66835 Translated using Weblate (Swedish)
    af3d7fa7df Translated using Weblate (Swedish)
    4454af822e Translated using Weblate (Swedish)
    25f72a3b72 Translated using Weblate (Swedish)
    221b2fe856 Translated using Weblate (Swedish)
    a0554d6922 Translated using Weblate (Czech)
    d79542eec6 qemu: Read back the profile name after creation of a TPM instance
    957bda01c8 qemu: Move adding --tpmstate to swtpm command line into own function
    fc9a333f37 qemu: Move adding of keys to swtpm command line into own function
    cd37721d19 qemu: Extend swtpm_setup command line to set a profile by its name
    526f08da62 docs: Add documentation for the TPM backend profile node
    90c40d3b9c conf: Add support for profile parameter on TPM emulator in domain XML
    498b5b7440 schema: Extend schema for TPM emulator profile node
    15ba6edabd conf: Define enum virDomainTPMProfileRemoveDisabled
    1079532d74 util: Add parsing support for swtpm_setup's cmdarg-profile capability
    279b14cb81 qemu: Pass virQEMUDriverConfig rather than some of its fields
    8bba15bdc1 conf: Move TPM emulator parameters into own struct
    b0aa9d31f2 qemu: Avoid useless tmp variable in qemuCanonicalizeMachine
    5904676d2f ch: explicitly set INFILESIZE to 0
    cec5bb372a ch: reattach PCI devices to host while stopping guest
    1e8cc91f9d ch: allow hostdev in domain definitions
    c6dbc6042d ch: prepare host for PCI passthrough
    acfe2e7a50 ch: prepare domain definition for pci passthrough
    5d4f9e1bdd ch: add host device manager to driver
    89ef0c0f2b hypervisor: move HostdevHostSupportsPassthroughVFIO
    b05f6134c9 hypervisor: move HostdevNeedsVFIO to hypervisor
    0dad1ec009 kbase: virtiofs: Clarify migration support statement
    f35f817ebf qemu: process: Introduce setup of block-device backed NVRAM
    fce4319f58 qemu: process: Extract setup of file-backed nvram from template
    32228ecb02 conf: Remove nonsensical requirement of nvram format matching firmware format
    d3016e47be qemuFirmwareMatchDomain: Don't base firmware selection on nvram image format
    2aa644a2fc qemuPrepareNVRAM: Refuse conversion of NVRAM backing file format
    6540cc08b1 conf: Always format firmware image format
    49ce561e3f conf: domain: Output 'format' attribute of '<nvram>' also for' raw images
    366907e520 firmware: Add 'templateFormat' XML attribute and plumb it in
    f90567f3a8 docs: formatdomain: Clarify that NVRAM template is also being autoselected
    a448d4a18a conf: domain: Clarify nvram/loader format logic
    d57630c282 qemu: Install backing store terminators for 'pflash' blockdevs
    6a8bcd1110 qemuFirmwareEnsureNVRAM: Don't try to setup non-local nvram
    273157dd9f qemuPrepareNVRAM: Don't attempt to create NVRAM on block device
    fde04774db syntax-check: Suggest ways to fix internal references
    b3a4b049c4 docs: Document authselect to enable the NSS module
    3224b25607 docs: Rework documentation for the NSS module
    24580d13d1 qemu: Move PostParse functions out of qemu_domain.c
    bf2af76ec2 qemu_hotplug: Do not report unknown error when hot-unplugging non-existing device
    aeebb30ba2 Drop unused function declarations
    6c50d11276 virnetserverclient.h: Fix typo in comment of virNetServerClientPrivPreExecRestart()
    a053f57ebc docs: Add Sys::Async::Virt to apps.html
    dbe4bdbe3a Translated using Weblate (Swedish)
    17d03614de Translated using Weblate (Swedish)
    4d19cbaa0d Translated using Weblate (Swedish)
    e13d1f0c8c Translated using Weblate (Swedish)
    abef180b69 Translated using Weblate (Swedish)
    75ac9929bb Translated using Weblate (Swedish)
    d359855df7 Translated using Weblate (Swedish)
    1287dc21a6 Translated using Weblate (Swedish)
    e088f2107e Translated using Weblate (Swedish)
    309c5cd4a3 ci: Update with newer lcitool
    d88ebd4374 ch_monitor: Report OS error when removing socket fails
    f1f4cbb50a ch_monitor: Avoid possible double free in virCHMonitorClose()
    4be361a385 test_driver: provide basic disk hotunplug support
    c530a96151 test_driver: provide basic disk hotplug support
    c7611a6b13 Translated using Weblate (Swedish)
    756257497d Translated using Weblate (Swedish)
    5ea60597b0 Translated using Weblate (Swedish)
    ff836adb4b Translated using Weblate (Swedish)
    5fbf054360 Translated using Weblate (Swedish)
    948c9cf7a1 Translated using Weblate (Swedish)
    1872a09f14 Translated using Weblate (Swedish)
    340b5dad78 Translated using Weblate (Swedish)
    863df80534 Translated using Weblate (Swedish)
    d4c2dc239a Translated using Weblate (Swedish)
    6721985db7 Translated using Weblate (Swedish)
    b86dd42113 Translated using Weblate (Swedish)
    27ae5e602a qemu_hotplug: Report better error message for platform serial devices
    52c2e3e0a7 qemu: Expose qemuChrIsPlatformDevice outside from qemu_command
    9dc2226e68 NEWS: qemu: add multi boot device support on s390x
    bf0308b2d4 qemu: command: add multi boot device support on s390x
    48fd995f3b tests: add capabilities for QEMU 9.2.0 on s390x
    3ccf692e08 qemu: capabilities: Add QEMU_CAPS_VIRTIO_CCW_DEVICE_LOADPARM
    a3b8753db9 virnetdevopenvswitch: Warn on unsupported QoS settings
    9132b486a3 Translated using Weblate (Chinese (Simplified) (zh_CN))
    844d1036eb qemu_domain: Automagically add IOMMU if needed
    b15047ff26 qemu: Turn EIM IOMMU on automagically
    a9797d7c43 libvirt_private.syms: Export virDomainIOMMUDefNew()
    e393d688a3 Translated using Weblate (Swedish)
    e45313c031 ch: check return value of virJSONValueArrayAppend
    da66bf53b0 util: json: check return value of virJSONValueFromJsonC
    13f40898ab qemu: chardev: avoid impossible overflow
    2e64ca6ef2 Translated using Weblate (French)
    736e386273 docs: fix since tag for TPM with custom path
    806e266fa1 docs: formatdomain: fix XML snippets
    bb5e26749f qemu: explicit swtpm state locking
    f1304cc566 qemu_tpm: handle file/block storage source
    a110042d0c schema: add TPM emulator <source type='dir' path='..'>
    579fd44612 schema: add TPM emulator <source type='file' path='..'>
    6d4eb07a55 tpm: rename 'storagepath' to 'source_path'
    cc0aab9395 util: check swtpm nvram-backend-{dir,file} capabilities
    78a9e7bf4a Translated using Weblate (Swedish)
    ef8ea25a7c Translated using Weblate (Romanian)
    a52cd504b3 qemu: Report supported panic device models in domcapabilities
    5d9b886a4e spec: Fix attributes for some qemu dirs in %{_rundir}
    dec2f370ca Translated using Weblate (Swedish)
    faf6edfa74 json: do not call json_tokener_free with NULL
    23d78e1c58 Translated using Weblate (Swedish)
    e081541b32 Translated using Weblate (Swedish)
    14bf42613f Translated using Weblate (Swedish)
    021fafe5f6 Translated using Weblate (English (United Kingdom))
    44de1c58a6 Translated using Weblate (Swedish)
    6da4de016e Translated using Weblate (Swedish)
    eb4ed1fe15 docs: domain: Be more upfront about 'sgio' not being actually supported
    d02140383d virstring: Use 'g_new0' instead of improper use of 'g_malloc0_n'
    bb4bd9d31f Replace improper use of g_malloc(0) with g_new0
    354a3d2be4 virJSONValueFromString: Prefix error message from 'json-c'
    e71a510605 qemu: Fix maximum physical address size in baseline CPU
    f22d00a9e6 Post-release version bump to 10.10.0
    8f4dc1bd62 Release of libvirt-10.9.0
    e011ad32b1 Translated using Weblate (Swedish)
    961fb8944d spec: Fix attributes for ghosts directories in %{_rundir}
    7581e3b6d5 Revert "network: add rule to nftables backend that zeroes checksum of DHCP responses"
    12b456c94b Translated using Weblate (Swedish)
    e07535b531 Translated using Weblate (Swedish)
    20cca0d6d5 Translated using Weblate (Korean)
    6e700f0000 Translated using Weblate (Korean)
    564de95569 Translated using Weblate (Korean)
    271850f790 Translated using Weblate (Korean)
    ceb2f089c1 Translated using Weblate (Ukrainian)
    342ebdf500 Update translation files
    34325bb59a Translated using Weblate (Swedish)
    372d4b42d3 docs: permit a user's chosen identity with SoB
    42ab0148dd network: add rule to nftables backend that zeroes checksum of DHCP responses
    b18fd84a68 po: Refresh potfile for v10.9.0
    e44db63d07 Translated using Weblate (Swedish)
    08c907bac9 tests: add capabilities for QEMU 9.1.0 on s390x
    d5af1e90bb network: don't unset the firewalld zone if it's going to be immediately re-set
    e8228a9e79 network: ignore/don't log errors when unsetting firewalld zone
    dbc9fbf644 NEWS: Report CPU model blockers in domain capabilities
    f4dc248a95 domain_capabilities: Report CPU blockers
    016be5510a domain_capabilities: Sort CPU models
    0c6134f190 util: Introduce virStringListRemoveDuplicates
    f928eb5fc8 qemu: Change CPU comparison algorithm for future models
    e373f87034 qemu: Introduce virQEMUCapsGetCPUBlockers
    5f8abbb7d0 cpu: Introduce virCPUCompareUnusable
    591b364f49 qemu: Separate partial CPU check into a function
    52d2a8eb6c qemu: Use virCPUCompare in qemuConnectCompareHypervisorCPU directly
    1c45473b93 qemu: Use g_autoptr in qemuConnectCompareHypervisorCPU
    5475688a29 cpu: Introduce virCPUGetCheckMode
    cd93f7ddab cpu_map: Use compat partial check for all x86 CPU models
    f8ade72c2b cpu_x86: Introduce <check> element for CPU models
    0cf9039071 Translated using Weblate (Swedish)
    3e98349542 ci: Move definition of exit codes allowed to fail for cirrus jobs
    d60979f731 spec: Drop nwfilter dependency in libvirt-daemon-xen
    0884bf1f3e ci: Regenerate with latest lcitool to pick up 'cirrus-ci' out of credit detection
    755b53c3a5 Translated using Weblate (Swedish)
    c0aa21b6d4 Translated using Weblate (Swedish)
    54bd75fcce docs: formatdomain: Document the temporary file for transient disks
    36080e1b57 qemu: snapshot: Delete leftover overlay files for <transient/> disks
    35fef220f1 rpm: Require dmidecode on more architectures
    7cbe9e94c4 util: bitmap: Rewrite virBitmapShrink using new helpers
    e506e0b3f1 util: virbitmap: Extract clearing of unused bits at the end of the last unit
    e572150ebe virbitmap: Extract and reuse buffer size calculation into a function
    cfe638ef80 virBitmapNewCopy: Honor sizes of either bitmap when doing memcpy()
    99acc29557 NEWS: Fix naming of DISK_DETECT_ZEROES migration parameter
    f7c89763b1 qemu: Do not hardcode Hyper-V feature names on command line
    ca8c0862ac qemu: Add more translations to virQEMUCapsCPUFeatureTranslationTable
    5148f64a3c ci: refresh with 'lcitool manifest'
    e937929c16 wireshark: drop gmodule.h include to avoid glib warnings
    c891f17c2b tests: stop stubbing libselinux APIs for purpose of data overrides
    0fd36e9656 lxc: fix variable storage order before call
    f2710260d4 qemu_namespace: Only replicate labels on created files
    26f249034d qemu_namespace: Properly report new files
    2b19f4b82d qemu_namespace: Rename variable
    9cff1e29d3 tests: qemucapabilities: Add test data for the qemu-9.2 dev cycle
    ec47e2e0fd qemuxmlconftest: Add '9.1.0' versions of test cases for 'reconnect' option of chardevs
    baa4edfb79 qemu: chardev: Use 'reconnect-ms' instead of deprecated 'reconnect'
    23fa1d2184 qemu: capabilities: Introduce QEMU_CAPS_CHARDEV_RECONNECT_MILISECONDS
    050398a4c3 qemuxmlconftest: Pin 'disk-network-gluster' case to qemu-9.1
    4beb255138 qemuxml(conf|active)test: Use 'nbd' instead of 'gluster' in 'disk-backing-chains-(no)index' cases
    d018c8dc9e qemuxmlconftest: Use only 'nfs' protocol in 'disk-network-nfs'
    e4829506fa qemublocktest: Mark 'gluster' case in image creation test as deprecated
    b9e43f882f qemublocktest: Mark gluster cases in XML->json->XML tests as deprecated
    b6545bcec1 qemublocktest: Convert all 'gluster' instances to 'nbd' in 'xml2json' cases
    81493d8eb6 apparmor: Allow running i686 VMs on Debian 12
    e996536a3b Remove pointless bool conversions
    d7a57f5275 Translated using Weblate (Swedish)
    e2c6f4c800 qemu: snapshot: Remove dead code in 'qemuSnapshotDeleteBlockJobRunning'
    2e29ab3269 NEWS: mention zero detection for non-shared-storage migration
    332ee4931a docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES
    04d6a0ec5d qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES
    0c653fc9a5 util: Rename variable "major" in virIsDevMapperDevice
    f07068d61c Translated using Weblate (Swedish)
    46d0f88f8b Translated using Weblate (Swedish)
    e29d087f23 Translated using Weblate (English (United Kingdom))
    50cc7a0d9d docs: Document watchdog action=dump slightly more
    37800af9a4 network: inhibit idle timeout of daemon if there are any active networks
    f677665ce9 Translated using Weblate (Swedish)
    d721b6840f libxl: Reject VM config referencing nwfilters
    068771068d NEWS: Mention documention improvements of image format settings
    c0ba3ed69d network: a different implementation of *un*setting firewalld zone when network is destroyed
    cb4e38d4b1 network: a different way of supporting firewalld zone for mode='open' networks
    d552d810b9 network: call network(Add|Remove)FirewallRules() for forward mode='open'
    ef760a4133 Revert "network: support setting firewalld zone for bridge device of open networks"
    816876f517 Revert "network: *un*set the firewalld zone while shutting down a network"
    bd6d7ebf62 qemu: Use consistent naming for save image format
    b0dc8a923d qemu: conf: Improve the foo_image_format setting descriptions
    07467e2719 docs: Prohibit 'external' links within the webpage
    dcc8deb536 docs: newreposetup: Drop section about 'libvirt project server'
    5c1ba38913 docs: Use relative links within the web page
    bafb54f073 kbase: Fix link in 'merging_disk_image_chains' article
    86a5acbe10 docs: Reject non-https external links
    8618535990 docs: remote: Replace broken link to article about 'ssh-agent'
    72fb7cd75c news: mention internal snapshot changes
    aa08a30048 qemu: snapshot: Allow internal snapshots with PFLASH nvram
    8be8b7de78 qemuSnapshotActiveInternalDeleteGetDevices: Add warning when deleting inconsistent snapshot
    eac1a86f72 qemu snapshot: use QMP snapshot-delete for internal snapshots deletion
    b93af62c40 qemu snapshot: use QMP snapshot-save for internal snapshots creation
    6d8ae98fa0 qemu: monitor: Store internal snapshot names from 'query-named-block-nodes'
    9df1453db8 qemu: capabilities: Introduce QEMU_CAPS_SNAPSHOT_INTERNAL_QMP capability
    ce4ed8deef qemu: blockjob: Add job types for 'snapshot-save/delete'
    5d0773633a qemu: monitor: Add plumbing for 'snaphot-save'/'snapshot-delete' QMP commands
    2e325804cc qemuDomainObjWait: Annotate with G_GNUC_WARN_UNUSED_RESULT
    93d97d8fa2 cpu_map: Drop vmx-invvpid-single-context from CPU models
    b1d4196580 cpu_map: Drop vmx-ept-{uc,wb} features from CPU models
    29aa9b02aa qemu: Replace big condition in virQEMUCapsCPUFilterFeatures with array
    98700d354b qemu: Translate vmx-invvpid-single-context-noglobals CPU feature
    662e511d1e cpu-data.py: Properly handle aliases
    00e55059e6 qemu: Do not drop unknown CPU features from domain XML
    aae8a5774b qemu: Drop vmx-* from migratable CPU model only when origCPU is set
    cd630c1b16 Translated using Weblate (Swedish)
    51e9a281bd Translated using Weblate (Korean)
    9c962b3902 Translated using Weblate (Swedish)
    215cada343 util: Look for newer name of cpu wait time statistic
    7d6759135e qemu: Handle locking of TPM state directory for incoming migration
    454219ad6c security: Allow skipping locking when labeling lock files
    8fe803247e security: Always forget labels for TPM state directory
    3bfcb35dd5 qemu: migration: Don't remember seclabel for images shared from current host
    b581045520 storage_source: Add field for skipping seclabel remembering
    eabeae605f security_(dac|selinux): Unref remembered security labels on outgoing migration
    2983dd44c5 virSecuritySELinuxRestoreImageLabelInt: Move FD image relabeling after 'migrated' check
    568b3c6abe virParseOwnershipIds: Refactor
    7af0b6ea75 virFileIsSharedFSOverride: Export
    da0c363835 qemu: Always set labels for TPM state
    f7b9313ec7 utils: Use overrides in virFileIsSharedFS()
    6952af8b43 qemu: Propagate shared_filesystems
    df3597ee70 qemu: Introduce shared_filesystems configuration option
    5ea466648c security: Fix alignment
    c6ba83b3e4 test_driver: provide basic NIC hotunplug support
    cda4ee02a6 test_driver: provide basic NIC hotplug support
    3b296a98aa domain_validate: Validate dma_translation for iommu models
    8105426d8f libxl_conf: Add check for unsupported graphics type
    cb2a6ef8b5 libxl_conf: Fix config generation for multiple serial devices
    655225315c Translated using Weblate (English (United Kingdom))
    5f81aa953e Translated using Weblate (Swedish)
    89ce634253 virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter
    621f879adf qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES'
    448b14f74d qemu: migration: Remove 'nmigration_disks' variable from all places
    aaefaabf5a qemu: migration: Extract validation of disk target list
    4ebf1acb83 qemu: migration: Avoid use of 'nmigration_disks'
    d98beef107 qemu: migration: Don't log 'nmigrate_disks'
    ab52a069ee qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk()
    9bf319147c virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated
    7933310ce9 virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields
    b74fed0173 virTypedParamsFilter: Introduce option to filter also by type
    e5fae984b1 virTypedParamsGetStringList: Refactor and adjust docs
    933ab93e8f virTypedParamsFilter: Adjust return type and docs
    165b30e06a qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation
    54109db826 qemu: blockjob: Clean out disk mirror data after concluding the job
    b85b60d140 qemu: blockjob: Update 'mirror' of a copy job before removing images
    fc4d0e7461 testutilsqemuschema: Support 'unstable' feature in QMP schema validator
    7203b7df6b testutilsqemuschema: Rename and document 'testQEMUSchemaValidateDeprecated'
    f05488f78c Post-release version bump to 10.9.0
    314fd5f40c Release of libvirt-10.8.0
    bcd5ae4e73 qemu: fix regression in update-device for interfaces
    120de48828 Translated using Weblate (Swedish)
    ded649c09e NEWS: Describe more fixed things for this release
    10a30b5dbb NEWS: YAJL -> json-c switch
    3e15dd6fc7 news: Mention 'showmount' dependency change and overflow/memleak fixes
    b4c910d5a4 NEWS: add blurbs about a couple of bugs I fixed this month
    55c3c09197 qemu: Look for qemu-bridge-helper in more directories
    ed1fa1d197 Translated using Weblate (Swedish)
    8efd3762db Translated using Weblate (Ukrainian)
    e400c88a61 Translated using Weblate (Korean)
    4cf8067c73 ci: adapt to 'dtrace' package split
    8a9750cb29 Translated using Weblate (Korean)
    1609138e50 Update translation files
    c50fe682e9 po: Refresh potfile for v10.8.0
    f527da37be cpu_map: Fix SierraForest CPU model
    97f41f4878 Translated using Weblate (Swedish)
    785dfad13c rpc: ssh: Allow SSH_ASKPASS_REQUIRE
    6126f743b1 qemu: Provide sane default for dump_guest_core
    18b61cb4f9 qemu.conf.in: Fix dumpCore capitalization
    8287ca7119 Translated using Weblate (Swedish)
    de8b3b9764 Translated using Weblate (Georgian)
    badc4b44f8 Translated using Weblate (Swedish)
    ff94824125 Translated using Weblate (Swedish)
    d86dc9d308 Translated using Weblate (English (United Kingdom))
    469824ce21 Translated using Weblate (Swedish)
    6f0974ca32 qemu: Generate domain memory backing path directly
    f035f24777 qemu: Rename memory path functions
    d599fc3d57 qemu: Make qemuGetMemoryBackingDomainPath static
    ff49d2a8c2 qemu: Use per-domain private memoryBackingDir for new memory backends
    f58a4dc9d5 qemu: Set memoryBackingDir in private data upon start
    da8a1d7943 qemu: Add memoryBackingDir to qemuDomainObjPrivate
    c9a35eb255 qemu: Change parameters of qemuGetMemoryBackingDomainPath()
    edcf14be9c qemu: Move domain-related functions to qemu_domain
    1c76827270 meson: Sort values reported in summary()
    794d49e3cf meson: Restore alphabetical order of reported libraries
    6d09340d6f ci: drop yajl completely
    81e532c701 util: json: remove yajl implementation
    d96e753d84 meson: options: drop yajl
    84198ad88a nss: convert findMACs to use json-c
    a8d828c88b nss: convert findLeases to use json-c
    9e6555fd90 util: json: write a json-c implementation
    28c9872639 meson: switch checks to depend on json-c as well as yajl
    1873b54512 meson: add option for building with json-c
    297fbcb346 ci: install json-c too
    dcb7cfd149 build: introduce WITH_JSON
    8eba36d4b1 tests: switch to compact empty JSON object formatting
    330cf7f492 util: json: introduce virJSONStringPrettifyBlanks
    e14a5fcac4 util: use uint32 instead of char[4] for several virSocketAddrIPv4 operations
    009464902a util: make virSocketAddrIPv4 a union
    14623a3424 util: fix virSocketAddrMask() when source and result are the same object
    f7a2d158f7 network: fix argument order/log level in message about firewall_backend
    c7ea694f7d qemu: rework needBridgeChange/needReconnect decisions in qemuDomainChangeNet()
    601f4160b9 qemu: replace open-coded remove/attach bridge with virNetDevTapReattachBridge()
    e3f8bccea6 util: don't return early from virNetDevTapReattachBridge() if "force" is true
    a37bd2a15b qemu: prevent unnecessarily failing live interface update
    852380cef5 qemuBuildChardevCommand: Remove unused variable
    24d468993c qemu: Reject unsupported chardev backend protocols
    3778964207 conf: Convert 'protocol' field of TCP char device backend to proper type
    2256466f70 qemu: monitor: Remove the old chardev backend generator
    e352a692a7 qemu: Use the new chardev backend JSON props generator also in the monitor
    d897ad2b89 qemu: Move check for chardev backends which can't be hotplugged out of the monitor
    b8129d2530 qemuxmlconftest: Add test case for QMP schema validation of -chardev backends
    e00739ff0d qemuxmlconftest: Add support for validating schema for 'chardev-add'
    36d06a5637 qemu: Introduce unified chardev backend config generator
    1bc023cae8 qemuxmlconftest: Add 'chardev-backends' test case
    9c88a566d8 qemu: capabilities: Explain that QEMU_CAPS_CHARDEV_JSON will be used in tests only
    d2dd209cdd Translated using Weblate (English (United Kingdom))
    03970c886b Translated using Weblate (Swedish)
    2e9af9674c Translated using Weblate (Swedish)
    22d0c0fd32 Translated using Weblate (Swedish)
    1a62add889 Translated using Weblate (Swedish)
    08aad30cbb Translated using Weblate (Swedish)
    f1fd89fea7 Translated using Weblate (Swedish)
    a2f5095b93 Translated using Weblate (English (United Kingdom))
    31c19057a7 Translated using Weblate (Swedish)
    e95a1e89af Translated using Weblate (Swedish)
    50404ad307 rpm: Add riscv64 to arches_qemu_kvm
    200f60b2e1 network: *un*set the firewalld zone while shutting down a network
    1a3778fe0a network: remove firewalld version check from networkSetBridgeZone()
    1a72b83d56 network: support setting firewalld zone for bridge device of open networks
    eeebbc1eec network: belatedly update an error message
    114c0ec656 network: permit <forward mode='open'/> when a network has no IP address
    d0a48eeb72 network: Remove unused variable in networkDestroy
    8a2717e803 network: Clean up after disappeared transient inactive networks
    2bea2782d5 network: Separate cleanup from networkRemoveInactive
    74a22c09be network: Try to read dnsmasq PIDs for inactive networks too
    447fda8981 network: Clean up after inactive objects during start
    0e43cb09ee network: Don't check if network is active in networkShutdownNetwork
    3e43670f01 network: Move port deletion into the shutdown function
    5988fdec91 network: Do not call virNetworkObjUnsetDefTransient on start cleanup
    97ed0574ea network: Do not update network ports for inactive networks
    02b57caf5e tests: Fix typo in README.rst of qemucapabilitiesdata
    d622ca04f6 apparmor: Don't check for existence of templates upfront
    4b68c7e55b resctrl: Do not rewrite default MB values for new allocations
    ebc4580a5f Revert "vircommand: Parse /dev/fd on *BSD-like systems when looking for opened FDs"
    308ec0fb2c vircommand: Parse /dev/fd on *BSD-like systems when looking for opened FDs
    4df8dc576f vircommand: Make sysconf(_SC_OPEN_MAX) failure non-fatal
    6ded014ba3 vircommand: Isolate FD dir parsing into a separate function
    dfe496ae33 vircommand: Drop unused arguments from virCommandMassCloseGetFDs*()
    8cf7d0d457 tests: Add caps2xml and resctrl data from the wild
    bfad111c43 resctrl: Use cache IDs instead of max_id/max_cache_id
    f3fd0664cf resctrl: Don't assume MBA availability in virResctrlAllocNewFromInfo
    bc97a2c043 capabilities: Also report L2 caches
    4437a775dc resctrl: Add virResctrlInfoPerTypeFree
    7c40f1ead9 resctrl: Add virResctrlInfoMemBWFree
    03b6383f33 resctrl: Move virResctrlAllocCopyMemBW up in the file
    d7e3a15a98 resctrl: Relax the limit of maximum memory bandwidth allocation
    b4f93ae8af docs: Document memory bandwidth allocation limits more clearly
    eae19bb505 resctrl: Account for memory bandwidth of 0 being valid
    b04730f6f2 docs: Clarify hypervisor support for nwfilter profiles
    f60e5f87d4 documentation: Remove untrue statement in GetVersion() description
    0186a13f54 Translated using Weblate (Swedish)
    80faf18068 Translated using Weblate (Swedish)
    cc05007a43 vmx: use xmlBufferDetach() when applicable
    09ebe53349 util/virxml: use xmlCtxtGetLastError when applicable
    317139a316 util/virutil: Use readpassphrase when libbsd is available
    94e8a5b650 vmx: Allow '*' to appear in VMX file keys
    5f6ccb0875 Allow apparmor parser to be executed in /usr/bin
    d15b7c3859 qemuxmlconfttest: Add test case for invalid disk target
    e562b16ede virDiskNameParse: Fix integer overflow in disk name parsing
    a9ede822da virconf: Properly fix numeric overflow when parsing numbers in conf files
    23cb613606 internal: Add helper macro for checking multiply and add overflows
    3c5839973f virDomainFeaturesDefParse: Add comment warning about features being specified repeatedly
    ead2419df3 virDomainFeaturesTCGDefParse: Don't leak 'tcg_features' when '<tcg>' feature is repeated
    574769ceb6 virDomainFeaturesHyperVDefParse: Don't overwrite hypervisor vendor_id
    8e28f2c5c2 virBitmapShrink: Do not attempt to clear bits beyond end of buffer
    bc02cb9506 virDomainDefParseBootInitOptions: Don't leak 'name' on failure
    2feeefc0b4 cpu_map: Install SierraForest description file
    b7a133f200 Translated using Weblate (Swedish)
    ecffc91d02 qemuBackupDiskDataCleanupOne: Don't skip rest of cleanup if we can't enter monitor
    8666523b7d virconf: Fix numeric overflow when parsing numbers in conf files
    5d77061d7e conf: Don't overwrite KVM feature config struct if the feature is present twice
    3afbb1644c cpu_map: Add SierraForest CPU model
    6ac72ea6dd cpu_map: Add missing feature "avx-vnni-int16"
    4d3a2c61a3 Translated using Weblate (Swedish)
    be183218ed Translated using Weblate (English (United Kingdom))
    9b22c25548 qemu: backup: Use 'async' monitor in 'qemuBackupDiskDataCleanupOne'
    2ccb213f94 virshtest: Add test case for script friendly options
    fc9442a638 NEWS: Mention breakage of scrip-friendly virsh output
    0082148420 virsh: cmdList: Revert to script-friendly output for 'virsh list --uuid'
    a35a355b09 tests: qemucapabilitiesdata: Add caps for 'caps_9.1.0_riscv64' (captured on x86_64)
    712b2c8f01 tests: qemucapabilities: Update 'caps_9.1.0_x86_64' for final release
    61c8a7180e qemuProcessSetupRawIO: Refactor return value and remove useless #ifdef
    d02a77c2ff spec: Demote 'nfs-utils' as a weak dependency of 'daemon-driver-storage-core'
    ce1c9bb8ea storage: fs: Remove build-time detection of 'showmount' program
    6f10d15ca1 spec: Fix dtrace BuildRequires on fedora 41+
    f6fb097e11 virnetdevtap: Add better error message for a possible common user error
    4ce9196dc4 virnetdevtap: Do (not) use NULLSTR consistently
    a16bd55819 Translated using Weblate (Swedish)
    ad92468924 qemu: Use pvpanic by default on aarch64
    6d92185a49 qemu: Sometimes the default panic model doesn't exist
    9e1970efa5 qemu: Refactor default panic model
    f22583c6c4 tests: Add coverage for panic on riscv64
    ac05dc8d4f qemu_driver: Fix indentation
    3a4a26f53e Post-release version bump to 10.8.0
    7d72b18017 Release of libvirt-10.7.0
    d9eac9bb54 NEWS: Mention fix for CVE-2024-8235
    f4ebbb1dcb Translated using Weblate (English (United Kingdom))
    76f6caee3c qemu: Fix a few comments
    479b9b1325 Translated using Weblate (Ukrainian)
    f582acfcb5 Translated using Weblate (Korean)
    8dfb12cb77 udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235)
    3284b0d8cd docs: Document presence of PS/2 feature in domcaps
    725afb4e7b qemu: Expose availability of PS/2 feature in domcaps
    e0e496d90c qemu: Change signature for virQEMUCapsSupportsI8042Toggle()
    d292c5ba17 qemu: Export a few functions
    21562c4df6 NEWS: Add an entry for network support in ch driver.
    d9be0beb4c ch: Enable bridge network mode
    8a44f78625 ch: interface: correctly update nicindexes
    4d8ebbfee8 virschematest: Replace g_lstat() with virFileIsLink()
    48bdeaf2fa Update translation files
    87c3fa1cde conf: check for migration job during domain start
    cabb0dda0e po: Refresh potfile for v10.7.0
    1819dcbebc Translated using Weblate (Chinese (Simplified) (zh_CN))
    38fddf2250 Translated using Weblate (English (United Kingdom))
    805f66d7ca hypervisor: interface: Stub out virDomainCreateInBridgePortWithHelper using 'socketpair' on win32
    1b815465d9 remoteDispatchConnectOpen: Fix check for 'BHYVE' connection type
    aa64209073 ch: Enable NAT Network mode support
    af87ee7927 hypervisor: Move domain interface mgmt methods
    7b6702d516 hyperv: Support hv-xmm-input enlightenment
    0313a500a9 hyperv: Support hv-emsr-bitmap enlightenment
    d543c4e753 Translated using Weblate (Chinese (Simplified) (zh_CN))
    0888784f38 qemu: Use virEventThreadStop() in qemuProcessStop()
    7aca235d8d vireventthread: Introduce virEventThreadStop
    bec195607c NEWS: Mention the new 'ps2' feature
    825516e6e3 qemuxmlconftest: Add test cases for the new 'ps2' feature
    a9a5f8ef39 qemu: Introduce the 'ps2' feature
    9eb3c28323 qemu_capabilities: Introduce QEMU_CAPS_MACHINE_I8042_OPT
    51521d13a8 qemu: Improve PS/2 controller detection
    22fc1e2977 Translated using Weblate (Chinese (Simplified) (zh_CN))
    4aaa2aa4cc Translated using Weblate (English (United Kingdom))
    62d6e8dcb2 qemu: validate: Reject empty USB disks
    204013d4aa qemu: block: Allow NULL 'data' in 'qemuBlockStorageSourceChainDetach'
    85e07fb1ce security: apparmor: Allow QEMU read /proc/sys/vm/max_map_count
    a70cdeeb2a conf: Validate QoS values
    ab489ea318 conf: Introduce virNetDevBandwidthValidate()
    f644cba8ae virsh: Simplify vshTableRowAppend() calling in cmdList(), part two
    cf0e0715e0 virsh: Simplify vshTableRowAppend() calling in cmdList(), part one
    ab7f877f27 lib: Use NULLSTR family of macros more
    3780522968 Translated using Weblate (English (United Kingdom))
    797dd8ffca Translated using Weblate (English (United Kingdom))
    1627f38a2c Translated using Weblate (Chinese (Simplified) (zh_CN))
    4de8962a79 virarptable: End parsing earlier in case of NLMSG_DONE
    ef84581a69 virarptable: Fix check for message length
    e7530769e8 virarptable: Properly calculate rtattr length
    271940223c virsh: allow both --table and --uuid at the same time
    b1524a3efc ci: update OpenSUSE Leap to 15.6
    0290dbeac7 tests: json: relax some test cases
    1371aeb281 Translated using Weblate (Chinese (Simplified) (zh_CN))
    f547c76bc5 Translated using Weblate (Swedish)
    239cfeaf55 formatstorage: Document qcow2 default version change
    03852c85af cpu_map: Add GraniteRapids CPU model
    19f30f68ce sync_qemu_models_i386.py: Add missing features
    a18b232712 cpu_map: Add libcpuinfo as optional data source
    b3edf03c31 qemu: hotplug: Rollback FD passthrough for 'slirpfd' and 'vdpafd' on hotplug failure
    1b797e6421 virnetlibsshsession: Reflect API change in libssh
    c195be19ab Translated using Weblate (Swedish)
    6215035e37 Translated using Weblate (Swedish)
    8fce5916f3 Translated using Weblate (Swedish)
    a2451f6da5 Translated using Weblate (Swedish)
    244fdeba69 Translated using Weblate (Swedish)
    cd9709a6ab glibcompat: remove obsolete clang workaround
    71f14351f9 qemuxmlconftest: Add test cases for broken and missing XML files
    4dc889a626 testQemuConfXMLCommon: Strip 'abs_srcdir' paths from '.err' files in qemuxmlconftest
    63080f0582 glibcompat: "Backport" 'g_string_replace'
    66112fbabb NEWS: Mention restore with n/w devices support for ch
    c4be2cb2de ch: kill CH process if restore fails
    0587ee2aab ch: support restore with net devices
    4ae70b7c2d ch: refactor virCHMonitorSaveVM
    fd34fbed79 ch: use monitor socket fd to send restore request
    4919f3a120 ch: support poll with -1 in chSocketRecv
    ea271081dd ch: refactor chProcessAddNetworkDevices
    3e41cd5e82 ch: Pass net ids explicitly during vm creation
    fa66343ef9 ch: report response message instead of just code
    14ca8ef256 qemucapabilitiesdata: Update data for qemu-9.1 dev cycle on x86_64
    022457e748 qemuxmlconftest: Don't use soon-to-be-removed machine types
    c122aa1021 qemuxmlconftest: Add test for old-style NUMA memory specification
    6d7dd09e8a qemu: format dma-translation on intel-iommu command line
    6866f958c1 conf: add dma_translation attribute to iommu
    b2cc19e5fd qemu_capabilities: Introduce QEMU_CAPS_INTEL_IOMMU_DMA_TRANSLATION
    11f6773f19 qemu: Avoid false failure when resuming post-copy migration
    79e0b50bb6 qemu: Add support for postcopy-recover-setup migration state
    18fd4899f3 vsh: Allow vshReadlineInit() to be called multiple times
    376e0424d8 Translated using Weblate (Swedish)
    b6f6b45f7b Translated using Weblate (Swedish)
    f3e670ee6b network: fix crashing "modify" option for hostname
    959ecee474 network: NULL check for "modify" DNS-txt records
    0caacf47d7 apparmor: Allow more paths for qemu-bridge-helper
    2be2fb9a9f Allow unmounting some things libvirt mounted
    432e442ca8 qemuxmlconftest: Add tests for the ACPI stripping hack on s390
    4ba4f659e4 qemu_domain: Strip <acpi/> from s390(x) definitions
    ee84b85a17 Translated using Weblate (Swedish)
    049846497b Post-release version bump to 10.7.0
    a33190e717 Release of libvirt-10.6.0
    b2de9720f4 Translated using Weblate (Swedish)
    30a71fd6a0 Revert "network: allow "modify" option for DNS-Srv records"
    49433d41e4 Translated using Weblate (Swedish)
    6b521fef8c Translated using Weblate (Swedish)
    ac0b669c56 security: Allow RW access to pstore device
    d913f204e0 qemu: Pre-create pstore device file
    3033a9380f Translated using Weblate (Korean)
    a0ecbb46e4 Translated using Weblate (Swedish)
    106a87aec8 Update translation files
    87789cbcbf Translated using Weblate (Swedish)
    aec390df81 NEWS: Document features/improvements/bug fixes I've participated in
    de355b7873 qemu: Autofill pstore path if missing
    7428738597 po: Refresh potfile for v10.6.0
    d842afb88f Translated using Weblate (Swedish)
    c33a4d0a2f Translated using Weblate (English (United Kingdom))
    bd11c753f3 virsysinfo: Calculate OEM string index better
    5bb4540dbb virsysinfo: Be more forgiving when decoding OEM strings
    98a9dc532d tests: Add HPE Apollo test case to sysinfotest
    185065b645 virsysinfo: Trim newline when decoding OEM strings
    b103200bf3 vircommand: Initialize dryRunStatus to portable EXIT_SUCCESS instead of 0
    716243f1f7 NEWS: Document pstore device addition
    9faa615384 security: Set seclabels for pstore device
    3cfe4caa0a qemu: Build cmd line for pstore device
    90e50e67c6 conf: Introduce pstore device
    4a9c2d9bbe qemu_capabilities: Introduce QEMU_CAPS_DEVICE_ACPI_ERST
    8d3b239737 qemu: virtiofs: cache: use 'never' instead of 'none'
    e62c26a20d qemu: add a monitor to /proc/$pid when killing times out
    e5eb64e9fd qemu_hotplug: Do not allow absent values in rom settings
    b53e9f834b virtiofs: rename member to 'openfiles' for clarity
    ce9c9e315f meson: correct git detection
    e5232f6fd6 virt-host-validate: Allow longer list of CPU flags

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
fecf4062b3 kvmtool: update -tip
Bumping kvmtool to latest, which comprises the following commits:

    6d754d0 Reset all VCPUs before any entering run loops
    9b26a8e arm64: Increase the payload memory region size to 512MB
    32345de arm64: Use the kernel header image_size when loading into memory
    ca57fb6 arm: Check return value for host_to_guest_flat()
    167aa1e arm: Fix off-by-one errors when computing payload memory layout
    2be69d9 builtin-run: Allow octal and hex numbers for -m/--mem
    574bd7b riscv: Pass correct size to snprintf()
    3040b29 riscv: Add Zimop extension support
    1f0e5ba riscv: Add Zcmop extension support
    9f50870 riscv: Add Zcf extension support
    80d2e0c riscv: Add Zcd extension support
    78bafd5 riscv: Add Zcb extension support
    4b8b352 riscv: Add Zca extension support
    c7a4bd9 riscv: Add Zawrs extension support
    b862ed4 Sync-up headers with Linux-6.11 kernel
    b48735e disk/core: Fix memory leakage in open all disks
    100fade riscv: Correct number of hart bits
    027784f riscv: Set SBI_SUCCESS on successful DBCN call
    fa958fb riscv: Add Sscofpmf extensiona support
    0117153 Sync-up headers with Linux-6.10 kernel
    0592f8f remove wordsize.h inclusion (for musl compatibility)
    ca31abf arm64: Allow the user to select the max SVE vector length
    32f8103 riscv: Add Zacas extensiona support
    a20adc6 riscv: Add Ztso extensiona support
    85aaadf Sync-up headers with Linux-6.9 kernel
    da4cfc3 x86: Fix some memory sizes when setting up bios
    d38c8f7 riscv: Allow disabling SBI STA extension for Guest
    9cf213d riscv: Add Zfa extensiona support
    5a64c1e riscv: Add Zvfh[min] extensions support
    fce2865 riscv: Add Zihintntl extension support
    bd7f13c riscv: Add Zfh[min] extensions support
    65b58f7 riscv: Add vector crypto extensions support
    d9052a9 riscv: Add scalar crypto extensions support
    8b4cc70 riscv: Add Zbc extension support
    f8c9614 kvmtool: Fix absence of __packed definition
    9968468 Sync-up headers with Linux-6.8 for KVM RISC-V
    4d2c017 Fix 9pfs open device file security flaw

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
92f9277d27 cloud-init: update to 24.4.1
Bumping cloud-init to version 24.4.1, which comprises the following commits:

    4b475ed36 Release 24.4.1
    470f652da fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
    e702638be fix: Don't log error in wait_for_url (#5972)
    30232cfd4 feat(url_helper): Retry on 503 error (#5938)
    b2cf0a6fd fix: Don't break modules that use get_meta_doc() (#5953)
    07db0da44 refactor: Pass deprecation log args as tuple (#5953)
    4d559e732 fix: uninstall custom signal handlers before shutdown (#5913)
    c9b9eef30 Release 24.4
    82f94812b test: Ensure unit ordering in ftp tests includes downstream units (#5892)
    9f2cae7fa test: re-decrement expected webhook events (#5894)
    ba04e4c41 test: allow relative path in apt-get test (#5891)
    d3b7e121d Fix metric setting of nmconnection for rhel (#5878)
    edaaeeabc chore: remove unused code(#5887)
    1f520d93d feat(ephemeral): replace old has_url_connectivity() with new _check_connectivity_to_imds()
    c0e3ecf20 feat(oracle): add true single stack ipv6 support
    062a12b69 feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
    aedb7f97a test: Decrement expected webhook events (#5888)
    1ef775162 chore: remove `--docs` option from `cloud-init schema` (#5857)
    3c24560cb test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
    dd448e0ac ci: bump integration tests to use plucky
    7f5065e7d test: add grub_dpkg to inactive modules
    892b59863 test: move default behavior tests into their own module
    70c28373f test(apt): add plucky version for hello pkg (#5883)
    6beb71f61 Docs: improved mermaid diagram for better visibility. Add "MaheshG11" as contributor (#5874)
    df9e51ccc fix(ntp): Fix RockyLinux OS support  (#5864)
    368232532 chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
    7f9a34fd8 chore: remove deprecation warning getting jsonschema's version (#5856)
    5950099a3 chore: use filter arg for tar.extractall (#5856)
    cd74e9948 chore: remove __init__ from pytest test class (#5856)
    f94256b04 chore: do not test element's truth value directly (#5856)
    345043f56 chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
    d6efb3eb9 chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
    b3120f7fe chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
    fad947594 ci: fix broken daily dependencies (#5867)
    e15b5d729 ci: fix packaging tests (#5865)
    acbb26c1d feat(vultr): add override for network interface detection (#5847)
    aeccf8991 feat(networkd): Support RequiredForOnline option (#5852)
    2df49b652 Prevent NM from handling DNS when network interfaces have DNS config (#5846)
    5e1a8cbeb fix(smartos): Add `addrconf` IPv6 support (#5831)
    96a07fb75 freebsd: adjust to match the new pyyaml package name (#5844)
    4b56c5cb5 fix: disable grub-dpkg by default (#5840)
    a911b5e58 fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
    4c156a803 test: Fix duplicate judgment conditions in password generation (#5835)
    d1d7af662 chore: don't render non-templated unit files (#5830)
    be88242be chore: simplify and standardize cloud-final.service (#5830)
    cb0c08ded chore: simplify Conflicts=shutdown.target (#5830)
    069efee7d chore: remove redundant Before=NetworkManager.service (#5830)
    9bb0a882b chore: remove unnecessary systemd settings (#5830)
    0680d0330 chore: eliminate redundant ordering dependencies (#5819)
    df51941e2 fix: fix ordering cycle for distros with default deps (#5819)
    7ff199ad7 test: unbreak pytest-xdist (#5829)
    e30549e88 feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
    879945f56 feat: Ensure random passwords contain multiple character types (#5815)
    5819c942a docs: split example page into example library (#5645)
    1fc063a57 doc: clarify workarounds required for single process changes (#5817)
    0c24aa29d chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
    9554338e6 fix: Render v2 bridges correctly on network-manager with set-name (#5740)
    5f90d9656 test: add no_thinpool unit test (#5802)
    64a622b42 chore: split lxd init config into separate function (#5802)
    11586cd46 test: pytestify test_cc_lxd.py (#5802)
    296b296ee fix: Correctly handle missing thinpool in cc_lxd (#5802)
    a8f69409e fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
    39f2742b7 tests(minimal): rsyslog not in minimal images expect warning (#5811)
    efcd4889d tests(lxd): avoid failure on multiple calls to --show-log (#5811)
    40f9bae1f chore: update netplan import semantics and related tests (#5805)
    5d2ff7335 lint: fix untyped-defs on /tests/unittest/cmd (#5800)
    760ded95a test: actually use devel release and verify_clean_boot enhancements (#5801)
    dba2dd3a3 feat(locale): locales install on minimal images when cfg requests (#5799)
    90d905b7f feat(byobu): support byobu install on minimal images when cfg requests (#5799)
    0f77b3c13 chore: Use devel release and no sbuild in integration CI (#5798)
    4de61f395 test: Update integration tests from netplan backport (#5796)
    e10b09be3 test: add get_syslog_or_console for minimal images without syslog (#5793)
    beb08710a chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795)
    dcfb2c93e docs: Fix field name from `contents` to `content` (#5787)
    a57a565b8 chore: bump pycloudlib to required version (#5792)
    55de797e4 fix: avoid deprecation logs for calling cli stages (#5770)
    99f4ca4f9 tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
    9df99d82c fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
    2b15be199 fix(network-manager): bond properties and network schema (#5768)
    a399f4b08 Fix metric setting for ifcfg network connections for rhel (#5777)
    ce8078147 fix(akamai): handle non-string user data in base64 decoding (#5751)
    545e9ac2f fix(ci): do not auto stale issues (#5775)
    11298f41d Make pytest more verbose for easier debugging (#5778)
    f9082bf85 ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting (#5774)
    2e866d38d tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
    dc3cfde68 test(hotplug): Simplify test_multi_nic_hotplug (#5763)
    ff336d423 test(hotplug): increase nc timeout (#5763)
    9dff1af8c test: pytestify test_main.py (#5758)
    27f89c610 test(ec2-dual-stack): fix int-test (#5762)
    178b0699b test: make verify_clean_boot really respect return code (#5761)
    d5d6df590 test: bump timeout in test_order (#5759)
    c9fa9067c docs: Properly document the cc_ubuntu_autoinstall module (#5757)
    b15263e32 docs: fix WSL tutorial (#5752)
    5133c838b test: make verify_clean_boot respect return code by environment (#5754)
    e6183967e feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
    bbe6191ca fix(ci): fix packaging check merge operation (#5750)
    9491566d8 doc: do not document user.meta-data key (#5745)
    590fd3eeb test: avoid undocumented lxd key (#5748)
    c9dce94d3 test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
    7988b8189 chore: update docs URLs to cloud-init.io (#5741)
    6725c0f89 test: fix timer logging change expected logs (#5734)
    1dd685065 fix: type annotations for several modules (#5733)
    70d4a5c25 chore: add timer to io and string manipulation code
    71cc75cee feat: add log package and performance module
    f114c6387 remove newline injected for cloud-init status --wait (#5700)
    d1ce9b456 test: webhook require_deprecation msg on 24.3 (#5731)
    869d624a5 test: fix test_nocloud message typo introduced by 313390f8 (#5731)
    fc2147ad4 test: Fix test_log_message_on_missing_version_file (#5730)
    3505c02e9 tests: assert info level warnings instead of require_deprecation
    6113b0e0a tests: fix test to ignore_warnings not require Used fallback ds
    c93c259d3 chore: clean up pytest warnings (#5721)
    067a464e0 tests(pro): bump pycloudlib add noble release to pro tests (#5719)
    b36ddb195 fix(hotplugd.socket): remove basic.target as dependency (#5722)
    eef27eb19 ci: fix integration test positional argument (#5718)
    53857c865 Create datasource for CloudCIX (#1351)
    9d0fc5ae9 ci: colorize output (#5716)
    ddb62cc09 fix(schema): Allow for locale: false in schema add tests (#5647)
    0a021418d ci: fix packaging patch check (#5713)
    c4847202f chore: clean up old pickle workaround (#5714)
    436126b2b fix: force sftp cleanup when done with instance (#5698)
    c62d7f22c test(hotplug): reenable vpc test in focal (#5492)
    df75b526a chore: fix typing of userdata_raw (#5710)
    bde913ae2 fix(NetworkManager): Fix network activator (#5620)
    32f8554b8 fix: lxd do not check for thinpool kernel module (#5709)
    654cb4414 docs: fix typo in docstring (#5708)
    1c61f3f24 Scaleway: Force on-link: true for static networks (#5654)
    2c80c5a0a fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
    aad528672 tests: pytestify test_nocloud.py (#5701)
    a9c6b1407 test: make verify_clean_boot respect return code by series (#5695)
    7a32eff8a fix: use cross-distro netcat name (#5696)
    b88f91010 ci: fix labeler (#5697)
    920e83112 chore(actions): add packaging label for any branches modifying debian/* (#5693)
    313390f81 test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
    10df0c173 test: add deprecation support to verify_clean_boot (#5671)
    e1f05b732 doc: remove misleading warning (#5681)
    7a0d957c2 chore: Prefer other methods over $INSTANCE_ID (#5661)
    5d91e9639 ci: fix packaging test when no patches (#5680)
    7a750e31a chore: fix tip-ruff and update to latest version (#5676)
    8b9998035 chore: make ansible test serial (#5677)
    1a6fd6fd3 feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
    d8fd56db0 chore: fix typo in requirements.txt (#5637)
    f79471a60 feat: make pyserial an optional dependency (#5637)
    82efd3ec5 chore: bump ci dependency versions (#5660)
    eddfe02af chore: drop broken optimization (#5666)
    b10d90503 Release 24.3.1 (#5375) (#5663)
    30addd2f3 test: add test coverage for iproute2 commands (#5651)
    3e74d5e67 fix(netops): fix ip addr flush command (#5651)
    9cc458c7d fix(systemd): add Before=shutdown.target to cloud-init-main.service.tmpl (#5653)
    60a856ae3 test: assert that schema is valid by default (#5657)
    5a74d19d0 chore(azurelinux): update cloud.cfg.tmpl for azurelinux
    e30ce6bf1 fix(scaleway): Don't override IPv6 routes when IPv4 not primary (#5640)
    9faafb0df Release 24.3 (#5646)
    5ff1a4a2b docs: Clarify v2 set-name behavior (#5639)
    93f30bbfc fix: properly handle blank lines in fstab (#5643)
    6d644e612 fix: cc_user_groups incorrectly assumes "useradd" never locks password field (#5355)
    fa042b853 tests: assert cloud-init user-data cert is the only root cert (#5641)
    8bc3e4254 feat: add automation for ubuntu/* branches asserting quilt patches apply (#5622)
    bbdfe3663 fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
    a38d6da76 feat(azure): add PPS support for azure-proxy-agent (#5601)
    6e4343eab fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
    8f741da4a test: fix cmd/test_schema int test (#5629)
    c6ba0dfab test: fix test_honor_cloud_dir int test (#5627)
    ca9ffac83 docs: alphabetize dsname lookup table. update comment to create the csv (#5624)
    0411057e6 docs: new datasources should update reference/ds_dsname_map (#5624)
    79e5d31ce test: fix ca_certs int test (#5626)
    a2193da3e chore: update schema docs to use RST bold for config key names (#5562)
    d85be37d2 fix(doc): italics around deprecation prefix, description bolds key names (#5562)
    fdccc6113 feat(doc): add env vars to debug config module doc builds (#5562)
    e14ce3d64 fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
    24cdaa75a fix(doc): object type check if patternProperties or properties (#5562)
    0a8bf72b9 doc(schema): schema descriptions should end with trailing stop (#5562)
    56aa70636 fix(wsl): Properly assemble multipart data (#5538)
    c28092fa6 feat: collect-logs improvements (#5619)
    2e4c39b75 tests: fix test_ca_certs.py for gcp (#5621)
    d79050d1b fix(nm): Ensure bond property name formatting matches schema definition (#5383)
    90a319046 Update behavior of base bond interface with NetworkManager (#5385)
    e1845be5d ci: Drop Python 3.6 and 3.7 (#5607)
    56658ec5f chore(black): Bump version (#5607)
    2bb49b4f8 chore(mypy): Fix failures on newer versions of mypy (#5607)
    56dc23cbe chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
    19a9cca47 chore(mypy): Lint log module (#5607)
    ac94539ab fix(systemd): Correct location of installed drop-in files(#5615)
    dfcc2b867 fix(btrfs): Version parsing (#5618)
    07d0384be docs: Remove unnecessary section, add feature flag page (#5617)
    14edf67c2 docs: Drop Python 3.6 and 3.7 support (#5617)
    8b11d99d4 chore: explain other use of oauth (#5616)
    4c96055e5 chore(actions): add doc label for any doc related subdir file matches (#5602)
    baeb35cc3 doc: Add misc links, improve wording (#5595)
    001446706 doc(boot): Make first boot a dedicated page (#5595)
    6ae8f6800 doc: Describe all stages in a single process (#5595)
    bd6cd1fbe chore: Deprecate old commands in help output (#5595)
    e3db1adbb chore: add comment explaining the NetworkManager may-fail setting (#5598)
    65014b974 Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)" (#5596)
    edd92b712 fix: read_optional_seed to set network-config when present (#5593)
    0787d6299 feat(snap): avoid refresh on package_upgrade: true and refresh.hold (#5426)
    acf04d616 fix: Fix tests which have outdated strings (#5585)
    7532589f4 fix: Fix ftp failures (#5585)
    f93a6b5a6 doc: improve integration testing configuration instructions (#5556)
    b71f48f8f azure: check azure-proxy-agent status (#5138)
    d396de1ad refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
    c0ffdd4d0 fix: Update default LXD meta-data with user meta-data (#5584)
    0aea65c20 chore: Fix log message in url_helper.py (#5583)
    b7b11bc04 fix: nocloud no fail when network-config absent (#5580)
    143bc9e40 feat: Single process optimization (#5489)
    ca3e6bc3a chore: Add helper, refactor utilities into separate module (#5573)
    d15a7704b refactor: update handle function of cc_mounts (#5498)
    ea831d676 fix: Integration tests (#5576)
    5322dca2f fix(NoCloudNet): Add network-config support (#5566)
    e6b2e0fea feat: Eliminate redundant configuration reads (#5536)
    b5d4f3fa1 fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
    f8d8a0cd4 fix: add host template for AOSC (#5557)
    00317d16d chore(debian): Remove vestigial postinst and preinst code (#5569)
    f8c1b51f5 fix(actions): doc labeler needs all clause instead of default any (#5568)
    f9ab856f4 docs: Overhaul user data formats documentation (#5551)
    15200a002 chore: Deprecate ENI as an input configuration format (#5561)
    914a3a8a4 doc: improve drop-in custom modules (#5548)
    81ef45ef8 doc(NoCloud): Categorize the different configuration types (#5521)
    779dd6b00 doc(autoinstall): Remove incorrect statements, be more direct (#5545)
    25058e115 chore: remove unneeded doc-lint tox env config (#5547)
    2ffd6528a fix(doc-spelling): config spelling_word_list_filename (#5547)
    883d8e2f9 doc(modules): add section to wrap modules' doc (#5550)
    e5e78c2ed doc: Update docs on boothooks (#5546)
    c1760751e fix: doc auto label to consider schema json changes as doc PRs (#5543)
    5f9372661 feat(schema): add chef_license schema enum (#5543)
    8ceae8b7b doc: add diagram with boot stages (#5539)
    02beb9ab4 docs: improve qemu command line (#5540)
    bb4b7c0c6 fix: auto label doc PRs (#5542)
    99ac8193f fix(wsl): Put back the "path" argument to wsl_path in ds-identify (#5537)
    f90f0b8a6 test: fix test_kernel_command_line_match (#5529)
    2d2385226 test: fix no ds cache tests (#5529)
    2534432bf fix(azurelinux): Change default usr_lib_exec path (#5526)
    7c2d4fd63 feat: Support URI sources in `write_files` module (#5505)
    e1147bd02 add openeuler to distros in cc_spacewalk.py (#5530)
    5532b4a69 feat(wsl): Special handling Landscape client config tags (#5460)
    16a319812 chore: Deprecate partially supported system config (#5515)
    7703634ec chore: Improve detection logging for user clarity (#5515)
    23be88d00 fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
    6e4153b34 refactor: logs.py add typing and small misc refactors (#5414)
    19c86ffb4 refactor: logs.py pathlib changes (#5414)
    8ec2f64ad refactor: replace verbosity with log levels in logs.py (#5414)
    b0a673a53 feat: Add trace-level logger (#5414)
    57d130eeb chore(formatting): fix squashed commit test formatting (#5524)
    550c685c9 fix: Clean cache if no datasource fallback (#5499)
    0b4084374 Support setting mirrorlist in yum repository config (#5522)
    658d1841f doc(OFV): Document how to configure cloud-init (#5519)
    311f72347 fix: Update DNS behavior for NetworkManager interfaces (#5496)
    e0e6a427f Fix configuration of DNS servers via OpenStack (#5384)
    8dbc5c23b test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
    18d76ac60 tests: revert expectation of exit 2 from cloud-init init --local (#5504)
    a911d0795 fix(test): Fix ip printer for non-lxd (#5488)
    75add5c72 feat(systemd): convert warning level message to deprecation (#5209)
    8aa1c30dd test: allow verify_clean_boot to ignore all or specific tracebacks (#5209)
    604d80eb6 test: Don't fail tests which call cloud-init as a command (#5209)
    4abdd5a70 feat(systemd): Warn user of unexpected run mode (#5209)
    7d35664ef fix: add schema rules for 'baseurl' and 'metalink' in yum repo config (#5501)
    4c0468c57 Set MTU for bond parent interface (#5495)
    0128716c2 refactor: util.mounts to handle errors (#5490)
    188656b21 refactor: util.get_proc_env to work with strs (#5490)
    db828d054 typing: fix check_untyped_defs in cloudinit.util (#5490)
    7130bbbb1 test: Add missing assert to test_status.py (#5494)
    8a582709a test: Ensure mkcert executable in ftp tests (#5493)
    0af459eac test: pytestify and cleanup test_cc_mounts.py (#5459)
    2b6fe6403 fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
    053331e5c fix(openbsd): fix mtu on newline in hostname files (#5412)
    9357c3899 feat(aosc): Add 'AOSC OS' support (#5310)
    fd6329755 Release 24.2 (#5481)
    0a4c43d47 test: Fix no default user in test_status.py (#5478)
    0a7036ed7 fix: correct deprecated_version=22.2 for users.sudo
    b0d6c7ddc test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
    291aabeb7 fix(test): Fix pycloudlib types in integration tests (#5350)
    2bca69a9a fix(test): Fix ip printing for non-lxd instances (#5350)
    c95ec1a4f chore(mypy): Drop unused missing import exclusions (#5350)
    8ad0bbaf6 type: Add stub types for network v1/v2 config (#5350)
    73a5c512a chore: Auto-format network jsonschema in ci (#5350)
    e4c05e80b fix(tox): Update tox.ini (#5350)
    97146b57f chore(typing): Remove type ignores and casts (#5350)
    b26d388ce refactor(typing): Remove unused code paths (#5350)
    a8cf24b7c fix(typing): Add / update type annotations (#5350)
    555028524 fix(typing): Remove type annotation for unused variable (#5350)
    16018b244 fix(typing): Remove invalid type annotations (#5350)
    41c375c4f ci(mypy): Set default follow_imports value (#5350)
    40e2eb4ae test: Update integration tests to pass on focal (#5476)
    c45280e98 tests: update ubuntu_pro test to account for info-level deprecations (#5475)
    ee1b25b73 tests: update nocloud deprecation test for boundary version (#5474)
    681b7de1a fix(rh_subscription): add string type to org (#5453)
    d59724a15 tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
    7693ee2a6 tests: update keyserver PPA key fur curtin-dev (#5472)
    0a698a57f test: Fix deprecation test failures (#5466)
    5ce2ee36e chore: fix schema.py formatting (#5465)
    25669f736 fix: dont double-log deprecated INFOs (#5465)
    726159b9a fix(test): Mock version boundary (#5464)
    121539b0f fix(schema): Don't report changed keys as deprecated (#5464)
    debafbc9b test: fix unit test openstack vlan mac_address (#5367)
    371b2362b fix: Ensure properties for bonded interfaces are properly translated (#5367)
    b3618d44a fix(schema): permit deprecated hyphenated keys under users key (#5456)
    70f7e78ec fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
    bbcc67dda doc(refactor): Convert module docs to new system (#5427)
    7f98af900 test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
    8906e17ef feat: Add deprecation boundary support to schema validator (#5411)
    e80514b56 feat: Add deprecation boundary to logger (#5411)
    bcc5920a7 fix: Gracefully handle missing files (#5397)
    f8f9d1940 test(openstack): Test bond mac address (#5369)
    12f1198e8 fix(openstack): Fix bond mac_address (#5369)
    3851c5c89 test: Add ds-identify integration test coverage (#5394)
    6ee007939 chore(cmdline): Update comments (#5458)
    790d22918 fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
    2c09f6917 fix(net): klibc ipconfig PROTO compatibility (#5437)
    525026061 Support metalink in yum repository config (#5444)
    8470af001 tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
    eb388c72f ci: PR update checklist GH- anchors to align w/ later template (#5449)
    8c396a4bb test: update validate error message in test_networking (#5436)
    32f0400f8 ci: Add PR checklist (#5446)
    ffe823661 chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
    63f7237db chore(pyproject.toml): migrate to booleans (#5409)
    355560312 typing: add check_untyped_defs (#5409)
    2ea276548 fix(openstack): Append interface / scope_id for IPv6 link-local metadata address (#5419)
    db8594512 test: Update validation error in test_cli.py test (#5430)
    ccf5850cf test: Update schema validation error in integration test (#5429)
    8fede42e3 test: bump pycloudlib to get azure oracular images (#5428)
    1d9b22aa1 fix(azure): fix discrepancy for monotonic() vs time() (#5420)
    2cc398b9b fix(pytest): Fix broken pytest gdb flag (#5415)
    a60a705aa fix: Use monotonic time (#5423)
    e9cfdb438 docs: Remove mention of resolv.conf (#5424)
    d9ff2e391 perf(netplan): Improve network v1 -> network v2 performance (#5391)
    4981ea9a5 perf(set_passwords): Run module in Network stage (#5395)
    5a3dc932e fix(test): Remove temporary directory side effect (#5416)
    9c3258f4c Improve schema validator warning messages (#5404)
    1b8030e0c feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
    92f187aca typing: add no_implicit_optional lint (#5408)
    cbcb05349 doc: update examples to reflect alternative ways to provide `sudo` option (#5418)
    b533fa51a fix(jsonschema): Add missing sudo definition (#5418)
    f9352b946 chore(doc): migrate cc modules i through r to templates (#5313)
    0976b43c1 chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
    95f5fea20 chore(json): migrate cc_apt_configure and json schema indents (#5313)
    997cbe9c4 chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
    532746611 chore(doc): migrate cc_byobu to templates (#5313)
    c17d9416e chore(doc): migrate cc_bootcmd to templates (#5313)
    a01b8d31f fix(apt): Enable calling apt update multiple times (#5230)
    fdc250587 chore(VMware): Modify section of instance-id in the customization config (#5356)
    bbc72bfed fix(treewide): Remove dead code (#5332)
    fc2134bed doc: network-config v2 ethernets are of type object (#5381)
    227538547 Release 24.1.7 (#5375)
    5f40426f0 fix(azure): url_helper: specify User-Agent when using headers_cb with readurl() (#5298)
    325abf1c3 fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
    fbec4d022 doc: update docs adding YAML 1.1 spec and jinja template references
    28d66efb9 fix(final_message): do not warn on datasourcenone when single ds
    15bce6474 fix(growpart): correct growpart log message to include value of mode
    9a71ddd73 feat(hotplug): disable hotplugd.socket (#5058)
    f80d165e6 feat(hotlug): trigger hotplug after cloud-init.service (#5058)
    617f8aff5 test: add function to push and enable systemd units (#5058)
    a061e81da test(util): fix wait_until_cloud_init exit code 2 (#5058)
    7e4d293ff test(hotplug): fix race getting ipv6 (#5271)
    e843f6a0c docs: Adjust CSS to increase font weight across the docs (#5363)
    072711c63 fix(ec2): Correctly identify netplan renderer (#5361)
    719679338 tests: fix expect logging from growpart on devent with partition (#5360)
    f93514aae test: Add v2 test coverage to test_net.py (#5247)
    3d69851a9 refactor: Simplify collect_logs() in logs.py (#5268)
    60766db43 fix: Ensure no subp from logs.py import (#5268)
    06eaa7a0e tests: fix integration tests for ubuntu pro 32.3 release (#5351)
    226d4fb10 tests: add oracular's hello package for pkg upgrade test (#5354)
    e520c944e growpart: Fix behaviour for ZFS datasets (#5169)
    dff02125e device_part_info: do not recurse if we did not match anything (#5169)
    bbb7f62c2 feat(alpine): add support for Busybox adduser/addgroup (#5176)
    5fb0dfaee ci: Move lint tip and py3-dev jobs to daily (#5347)
    4c47005aa fix(netplan): treat netplan warnings on stderr as debug for cloud-init (#5348)
    4df641623 feat(disk_setup): Add support for nvme devices (#5263)
    461fc1d91 fix(log): Do not warn when doing requested operation (#5263)
    c76ad9cd2 Support sudoers in the "/usr/usr merge" location (#5161)
    fa1b8688e doc(nocloud): Document network-config file (#5204)
    2856f4c8a fix(netplan): Fix predictable interface rename issue (#5339)
    2c992597c cleanup: Don't execute code on import (#5295)
    e432a31d6 fix(net): Make duplicate route add succeed. (#5343)
    00ab32835 fix(freebsd): correct configuration of IPv6 routes (#5291)
    42930d845 fix(azure): disable use-dns for secondary nics (#5314)
    01367a7c9 chore: fix lint failure (#5320)
    5ad609ffd Update pylint version to support python 3.12 (#5338)
    de1966eb1 fix(tests): use regex to avoid focal whitespace in jinja debug test (#5335)
    0fdbeefe4 chore: Add docstrings and types to Version class (#5262)
    6748913c1 ci(mypy): add type-jinja2 stubs (#5337)
    19cb8cf92 tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
    f7c6292d9 test: Add oracular release to integration tests (#5328)
    e68c8c74c Release 24.1.6 (#5326)
    bb4553b16 test: Fix failing test_ec2.py test (#5324)
    825eb1e7b fix: Check renderer for netplan-specific code (#5321)
    c80c9c711 docs: Removal of top-level --file breaking change (#5308)
    3a6b53972 fix: typo correction of delaycompress (#5317)
    3f4a2dd0a docs: Renderers/Activators have downstream overrides (#5322)
    587ac9ca7 fix(ec2): Ensure metadata exists before configuring PBR (#5287)
    699159e6e fix(lxd): Properly handle unicode from LXD socket (#5309)
    739c5f63c docs: Prefer "artifact" over "artefact" (#5311)
    3c8d02816 chore(doc): migrate cc_byobu to templates
    371f02581 chore(doc): migrate cc_bootcmd to templates
    3b7f4b393 chore(doc): migrate apt_pipelining and apk_configure to templates
    074ad67f3 tests: in_place mount module-docs into lxd vm/container
    48ddb3eb5 feat(docs): generate rtd module schema from rtd/module-docs
    23136e6a9 feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
    120adcc19 test: Avoid circular import in Azure tests (#5280)
    33f50185a test: Fix test_failing_userdata_modules_exit_codes (#5279)
    63a0fcd86 chore: Remove CPY check from ruff (#5281)
    81337eabc chore: Clean up docstrings
    ce2dfbc8a chore(ruff): Bump to version 0.4.3
    dce1d4c74 feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
    9388cc1ad feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
    d5254aab0 docs: cc_apt_pipelining docstring typo fix (#5273)
    e10b052c5 feat(azure): add request identifier to IMDS requests (#5218)
    dd54327ca test: Fix TestFTP integration test (#5237)
    44d0c13fe feat(ifconfig): prepare for CIDR output (#5272)
    8e8947b8b fix: stop manually dropping dhcp6 key in integration test (#5267)
    cf72d7f37 test: Remove some CiTestCase tests (#5256)
    f24ecef8b fix: Warn when signal is handled (#5186)
    51c6569f9 fix(snapd): ubuntu do not snap refresh when snap absent
    aa357fa23 feat(landscape-client): handle already registered client (#4784)
    370e680c0 doc: Show how to debug external services blocking cloud-init (#5255)
    4ffde902b fix(pdb): Enable running cloud-init under pdb (#5217)
    b5b4dd39a chore: Update systemd description (#5250)
    9b1b29440 fix(time): Harden cloud-init to system clock changes
    6530fa34f fix: Update analyze timestamp uptime
    9454e2f53 fix(schema): no network validation on netplan systems without API
    a3ed8e000 fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
    24584a055 fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
    237d957c0 tests: force version of cloud-init from PPA regardless of version (#5251)
    8b12a654f ci: Print isort diff (#5242)
    a22d85333 test: Fix integration test dependencies (#5248)
    c1a19d7b6 fix(ec2): Fix broken uuid match with other-endianness (#5236)
    66a874bc2 fix(schema): allow networkv2 schema without top-level key (#5239)
    efd37c0fa fix(cmd): Do not hardcode reboot command (#5208)
    44ad8ac7e test: Run Alpine tests without network (#5220)
    e41b71923 docs: Add base config reference from explanation (#5241)
    e98e62373 docs: Remove preview from WSL tutorial (#5225)
    7eb5a1df0 chore: Remove broken maas code (#5219)
    70e87f7f8 feat(WSL): Add support for Ubuntu Pro configs (#5116)
    3671caa2a chore: sync ChangeLog and version.py from 24.1.x (#5228)
    a6f7577d5 bug(package_update): avoid snap refresh in images without snap command
    acc68de05 ci: Skip package build on tox runs (#5210)
    8e7f98380 chore: Fix test skip message
    b028368ca test(ec2): adopt pycloudlib public ip creation while launching instances
    2e96ac844 test(ec2): add ipv6 testing for multi-nic instances
    234f9a38d test(ec2): adopt pycloudlib enable_ipv6 while launching instances
    22f4ff870 feat: tool to print diff between netplan and networkv2 schema (#5200)
    aeafb83c7 test: mock internet access in test_upgrade (#5212)
    725f5fb2c ci: Add timezone for alpine unit tests (#5216)
    ddde8dddc fix: Ensure dump timestamps parsed as UTC (#5214)
    90c15a60f docs: Add WSL tutorial (#5206)
    8854179d6 feature(schema): add networkv2 schema (#4892)
    641b107a2 Add alpine unittests to ci (#5121)
    2e58770ce test: Fix invalid openstack datasource name (#4905)
    70b03a9df test: Fix MAAS test and mark xfail (#4905)
    17d477554 chore(ds-identify): Update shellcheck ignores (#4905)
    84231d9b6 fix(ds-identify): Prevent various false positives and false negatives (#4905)
    509ed36a9 Use grep for faster parsing of cloud config in ds-identify (#4905)
    7268003a9 tests: validate netplan API YAML instead of strict content (#5195)
    31039d05e chore(templates): update ubuntu universe wording (#5199)
    5205b4dd7 Deprecate the users ssh-authorized-keys property (#5162)
    ac9821217 doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
    c465de827 feat(net): provide network config to netplan.State for render (#4981)
    47e9ad74c docs: Add breaking datasource identification changes (#5171)
    8fe149449 fix(openbsd): Update build-on-openbsd python dependencies (#5172)
    0b1ca1740 fix: Add subnet ipv4/ipv6  to network schema (#5191)
    7c67f7732 docs: Add deprecated system_info to schema (#5168)
    5a40b3bc9 docs: Add DataSourceNone documentation (#5165)
    70581bb08 test: Skip test if console log is None (#5188)
    ea54139a0 fix(dhcp): Enable interactively running cloud-init init --local (#5166)
    9bcb3dce9 test: Update message for netplan apply dbus issue
    d1351890f test: install software-properties-common if absent during PPA setup
    bc18820a6 test: bump pycloudlib to use latest version
    edec7dcf7 test: Update version of hello package installed on noble
    5d587ecd0 test: universally ignore netplan apply dbus issue (#5178)
    b86f4066f chore: Remove obsolete nose workaround
    b9aff9474 feat: Add support for FTP and FTP over TLS (#4834)
    197409efd feat(opennebula): Add support for posix shell
    d01c9ed80 test: Make analyze tests not depend on GNU date
    ff06c1054 test: Eliminate bash dependency from subp tests
    8778506ad docs: Add breaking changes section to reference docs (#5147)
    93f5a0165 util: add log_level kwarg for logexc() (#5125)
    5c200af23 refactor: Make device info part of distro definition (#5067)
    1aa5c7031 refactor: Distro-specific growpart code (#5067)
    596266ac1 test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
    d075d43a4 chore(safeyaml): Remove unicode helper for Python2 (#5142)
    6d5978bb6 Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
    01027e5a0 refactor(net): Reuse netops code
    1763e1d35 refactor(iproute2): Make expressions multi-line for legibility
    42becf13d feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
    0a3a5e250 feat: Determining route metric based on NIC name (#5070)
    ec384da45 test: Enable profiling in integration tests (#5130)
    414c310eb dhcp: support configuring static routes for dhclient's unknown-121 option (#5146)
    ffacae61a feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
    516fad6d9 fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
    da9b22296 test: pytest-ify t/u/sources/test_ec2.py
    1feb32947 Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145)
    2f9812e80 fix: Logging sensitive data
    4a134bf7f test: Mock ds-identify systemd path (#5119)
    f6ac6ee8a fix(dhcpcd): Make lease parsing more robust (#5129)
    9758673f6 test: fix upgrade dhcp6 on ec2 (#5131)
    77771023a net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease (#5128)
    a6e09d9bf fix: Fix runtime file locations for cloud-init (#4820)
    2c7ca5e92 ci: fix linkcheck.yml invalid yaml (#5123)
    372e80f8e net/dhcp: bump dhcpcd timeout to 300s (#5127)
    f0fb84188 ec2: Do not enable dhcp6 on EC2 (#5104)
    9929a0058 fix: Fall back to cached local ds if no valid ds found (#4997)
    9d598f238 ci: Make linkcheck a scheduled job (#5118)
    8f806e20b net: Warn when interface rename fails
    f74b61eae ephemeral(dhcpcd): Set dhcpcd interface down
    4de8dc2a2 Release 24.1.3
    e1c19a596 chore: Handle all level 1 TiCS security violations (#5103)
    cdbbd17ae fix: Always use single datasource if specified (#5098)
    9a7674af7 fix(rhel): Fix network ordering in sysconfig
    97537494d feat: Use NetworkManager renderer by default in RHEL family
    180a62313 fix: Allow caret at the end of apt package (#5099)
    1c64ee1b8 test: Add missing mocks to prevent bleed through (#5082)
    9633a7b0f fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
    0aa17cd10 docs: set the home directory using homedir, not home (#5101)
    b97227406 fix(cacerts): Correct configuration customizations for Photon (#5077)
    7672a1681 fix(test): Mock systemd fs path for non-systemd distros
    6a2cd02fc fix(tests): Leaked subp.which mock
    45a9b7ca0 fix(networkd): add GatewayOnLink flag when necessary (#4996)
    1dfffd066 Release 24.1.2
    dc0eafbc7 test: fix `disable_sysfs_net` mock (#5065)
    5062bee05 refactor: don't import subp function directly (#5065)
    144782a83 test: Remove side effects from tests (#5074)
    accdfe6a8 refactor: Import log module rather than functions (#5074)
    cbe5f3a11 fix: Fix breaking changes in package install (#5069)
    ff40d1af8 fix: Undeprecate 'network' in schema route definition (#5072)
    02515b804 refactor(ec2): simplify convert_ec2_metadata_network_config
    a3aa44f16 fix(ec2): fix ipv6 policy routing
    cacf452bd fix: document and add 'accept-ra' to network schema (#5060)
    dbe67393b bug(maas): register the correct DatasourceMAASLocal in init-local (#5068)
    d8e3a4b4d ds-identify: Improve ds-identify testing flexibility (#5047)
    b1bfa594b fix(ansible): Add verify_commit and inventory to ansible.pull schema (#5032)
    e517f5abd doc: Explain breaking change in status code (#5049)
    18daab5ca gpg: Handle temp directory containing files (#5063)
    82a5fb358 distro(freebsd): add_user: respect homedir (#5061)
    3ad7f2876 doc: Install required dependencies (#5054)
    1f19c5cde networkd: Always respect accept-ra if set (#4928)
    c461cc152 chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
    f7c1c7610 test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
    9c001cf3f feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
    7281055f8 fix(gpg): Make gpg resilient to host configuration changes (#5026)
    79ee65623 Sync 24.1.1 changelog and version
    e544a0db8 DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
    586ff2d83 packages/debian: remove dependency on isc-dhcp-client (#5041)
    94609bcb6 test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
    4ece79d62 tests: Don't wait for GCE instance teardown (#5037)
    9c64aba29 fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
    df522fdad bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
    52c6abdd0 fix(apt): Don't warn on apt 822 source format (#5028)
    ccd438eec fix(atomic_helper.py): ensure presence of parent directories (#4938)
    c6f1e61f4 fix: Add "broadcast" to network v1 schema (#5034)
    3fd0e4398 pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg (#5030)
    faeca647f net/dhcp: handle timeouts for dhcpcd (#5022)
    9c77b3896 fix: Make wait_for_url respect explicit arguments
    29edefe78 test: Fix scaleway retry assumptions
    eadaaf095 fix: Make DataSourceOracle more resilient to early network issues (#5025)
    621c522cc chore(cmd-modules): fix exit code when --mode init (#5017)
    d9204fcf1 feat: pylint: enable W0201 - attribute-defined-outside-init
    1488c7402 refactor: Ensure no attributes defined outside __init__
    8bfad0ca1 chore: disable attribute-defined-outside-init check in tests
    30d5e9a33 refactor: Use _unpickle rather than hasattr() in sources
    0579f61f7 chore: remove unused vendordata "_pure" variables
    0c8056992 chore(cmd-modules): deprecate --mode init (#5005)
    9baf31c71 tests: drop CiTestCase and convert to pytest
    463d36cc2 bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
    67685d65f fix: log correct disabled path in ds-identify (#5016)
    3462445b5 tests: ec2 dont spend > 1 second retrying 19 times when 3 times will do
    bee1d8372 tests: openstack mock expected ipv6 IMDS
    e4bd2fc30 bug(wait_for_url): when exceptions occur url is unset, use url_exc
    b7d442fb0 feat(run-container): Run from arbitrary commitish (#5015)
    538412a54 tests: Fix wsl test (#5008)
    69da05cda feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
    d86f35a80 chore(ephemeral): add debug log when bringing up ephemeral network (#5010)
    5b80ba180 release: sync changelog and version (#5011)
    a576d11ef Cleanup test_net.py (#4840)
    2ba7fdf0e refactor: remove dependency on netifaces (#4634)
    d15779535 feat: make lxc binary configurable (#5000)
    f8ac76e40 docs: update 404 page for new doc site and bug link
    4a0534f89 test(aws): local network connectivity on multi-nics (#4982)
    b538549d8 test: Make integration test output more useful (#4984)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
4102296af9 ceph: update to v19.3.0
Along with pulling in the new commits (listed below), we also:

  - tweak the license checksum. No change to the license.
  - bump the requested python to 3.13 to match oe-core
  - package some new .so libraries
  - add a new pkcfonfig file to the -dev package
  - disable libraries that are not in our dependencies

Bumping ceph to version v19.3.0-6907-g71d130f7990, which comprises the following commits:

    786fe8f9a28 Add Abhishek Kane into peoplemap, githubmap, organizationmap, mailmap
    73c935db908 mon: do not show nvmeof in 'ceph versions' output
    3d36a3b9bbe AsyncMessenger.cc : improve error messages
    5a966ca95d9 qa/scrub: more delay when waiting for noscrub to take effect
    5c098880829 common: config_cacher: use set::contains() instead of count()
    9821bf8f329 qa/scrub: change 'bin/ceph' to 'ceph'
    8ac04704574 common: fix md_config_cacher_t
    2c4ab9c5712 doc/releases: add actual_eol for quincy
    1694b8ab0bf common/io_exerciser: Reorder lines in RadosIo send_command functions
    fb05a2ff0f8 librbd/migration/HttpClient: Use asio::ssl::stream
    fe4a61424cf common/io_exerciser: Clear the stringstream in RadosIO class
    7f3601089d4 os/bluestore: Fix BlueFS::truncate()
    fcfc50b2313 rgw/logging: clean pending objects
    b1e7c06430c rgw/logging: retry attribuite set in case of race
    b7174ca1409 rgw/logging: log bucket must not have encryption
    462edf385d0 rgw/logging: source and log bucket must be different
    cc1a0e584ee rgw/logging: support source and destination buckets on different tenants
    d44b2227cdc mgr: Work around bug in Boost MPI/Python
    8f5f3fa3556 rgw_attrs: fixes for 3 more iam/perms mappings
    dc539b3ea80 doc: improve tests-integration-testing-teuthology-workflow.rst
    f2b5e2fa0a9 os/bluestore: bluefs unittest for truncate bug
    cadb2027ebb crimson/os/seastore: refactor LBAMapping
    e2f09651fc5 qa/tests: removed quincy from crontab
    027d1c501b2 doc/releases: remove Quincy from "Active"
    afa2b83687d doc/rgw: document UserName requirements for account migration
    4318b188740 rgw: Don't crash on exceptions from pool listing
    f6ec7c543f1 rados/monthrash: add PG_DEGRADED to ignorelist
    f3c18818b9b monitoring: Update nvmeof alert limits in config
    8cc7fdbd29e doc/rados/operations/stretch-mode: Improve doc
    b7ae18a292c doc/radosgw/config-ref: fix lc worker thread tuning
    8de182808c5 Fix signed/unsigned warning and add parameter range checking.
    43a6f123e24 rgw/multisite: the create_bucket forward request omits the the request body, thus missing some data if specified inside CreateBucketConfiguration xml on the non-master zone. also, now that we perform cksum validation against empty payloads, such a request would fail with -ERR_AMZ_CONTENT_SHA256_MISMATCH due to a zero content-length but a non-empty payload hash. this fix ensures that request body is forwarded during create_bucket
    0cb0d471b7b vstart.sh: add support for launching the ceph-exporter daemon
    22f91cdc652 qa/workunits/nvmeof/basic_tests.sh: fix connect-all assert
    6c534ba3a0a rgw:attrs: dump marker and max_parts only if sent
    2b8689eec9d rgw:attrs cap max_parts at 1000
    b2462337c40 rgw: GetObjAttrs enforces MaxSize and returns correct IsTruncated
    f6bc276d627 rgw/rados: Object::list_parts() starts after marker
    cbcf0e3eb20 rgw/rados: get_part_obj_state() fixes accounted_size when uncompressed
    56bf5073cf3 rgw: GetObjAttrs calls rgw_s3_prepare_decrypt()
    1be4399edda rgw_cksum: return version_id in all cases
    bac02fc435c rgw_cksum: permit fallback to checksum-type from create-multipart, in upload-part
    5c4d5942835 rgw: defensive check for part cksum in try_sum_part_cksums
    b164ad893ee rgw_cksum: don't display nil checksums in get-object-attributes (parts)
    f73e83ad8a9 rgw: GetObjectAttributes iam policy policy hooks
    ed6134c0b0b rgw_cksum: zero-initialize GetObjAttrs integral members
    eb949395465 rgw: implement GetObjectAttributes
    013c1c666cd ceph-volume: fix loop devices support
    8fb78290425 common/io_exerciser: Make chunksize so initial generated value is 4096 and random values are generated thereafter
    f50106f1c1d common/io_exerciser: Make sure Sequence 10 removes objects after finishing running
    d8712e67221 src/common/json: Modified JSON structures so they take advantage of ceph_json.h fully.
    6804964b96e src/common/io_exerciser: Remove unneccisairy override in data_generation::SeededRandomGenerator
    9c1907481ba src/common/io_exerciser: add missing override statements to JsonStructures.h
    5811155de65 src/common/io_exerciser: Formatting improvements using clang format
    e2ef12525f5 common/io_exerciser: Add simple sequences for testing error injects
    347ba63e83f common/io_exerciser: Add injecterror commands to ceph_test_rados_io_sequence interactive mode
    23dd255a2c4 osd: EC error inject interfaces
    4f3ef50fd8a src/common/io_exerciser: Code readability improvements
    de4a2a033c7 Revert "doc/dev/crimson: update SeaStore as default backend"
    c202195819d qa/suites/crimson-rados-exp: add Seastore/thrash
    b8d2681d9cd qa/suites/crimson-rados-exp: remove basic
    5150dae471c qa/suites/crimson-rados: disable thrash/seastore
    d869ca8a00d common/options/crimson.yaml.in: Bluestore by default
    1fc0edb9fa0 ceph-volume: add python hints to util.prepare.create_id()
    56cf5122d97 mon/NVMeofGwMap: add delay to NVMEOF_GATEWAY_DELETING warning
    dfa632b4255 mgr/cephadm: mgr orchestrator module raise exception if there is trailing tab in yaml file
    57359801515 rgw: migrate rgw_admin to new directory.
    3075894aab6 container/Containerfile: replace CEPH_VERSION var for backward compat
    340e353de68 rgw: don't use merge_and_store_attrs() when recreating a bucket
    95bdcbfd813 ceph-volume: fix Zap.ensure_associated_raw()
    f108a373970 doc/radosgw/s3: correct eTag op match tables
    7b33f7727e0 src/common/options/mon.yaml.in: add mon_nvmeofgw_delete_grace
    885b1bf88ee doc: add snapshots in docs under Cephfs concepts
    8e4ddcf076a rgw: fix user rate limit is not enforced w/ global rate limit set
    44233b9d860 crimson/osd/replicated_recovery_backend: prevent recovery/backfills from polluting the cache of the underlying futurized store
    4d53a276b13 crimson/os: all "read/get" interfaces accept op_flags
    b413f76b0a5 crimson/os/seastore: introduce cache_hint_t
    af1bc2220f6 crimson/osd/replicated_backend: make sure the check on whether to send ops to replica osds and the pg log append happens in the same continuation
    fa7ef62d2c6 crimson/osd/replicated_recovery_backend: ignore the recovery of delete objects
    360e6503135 crimson/osd/replicate_backend: add standalone delete to the push queue if the object is deleted while it's being backfilled
    14e068fdc55 crimson/osd/pg_recovery: throttle backfills together with pg-log based recoveries
    59377c6eb22 crimson/osd/backfill_state: recheck whether needs to scan the primary at the end of Enqueuing::Enqueuing
    aa9fc357022 mgr/cephadm: Restore client file(s) default SELinux context type
    c0e91389b03 doc: README.md - improve "Tshooting" and "Tips & Tricks"
    acbb2e50783 doc: README.md - format "Troubleshooting"
    571dd531663 mon/NVMeofGwMap: add healthcheck warning NVMEOF_GATEWAY_DELETING
    639cfc5975e doc: README.md - format "Tips and Tricks"
    26a0f9adcf9 mgr/cephadm/nvmeof: Add key verification field to NVMeOF configuration Fixes https://tracker.ceph.com/issues/69413
    7989e98e1b1 crimson/common/shared_lru: rename Deleter::cache
    c21e0e6d148 crimson/common/shared_lru: invalidate Deleter's cache
    c695df47691 qa/standalone/scrub: osd-scrub-test.sh - test operator overrides
    4726bebefee osd/scrub: reset m_active_target when the scrub ends
    656408d3685 osd/scrub: convey 'reserving replicas' status in query results
    65be7d65055 qa/standalone/scrub: add build_pg_dicts()
    cb439994320 doc/mgr/dashboard: Fix HAProxy TLS example
    cb2204e04ba test/rgw/noitifications: fix test names
    46da1f631df qa: write out ESubtreeMap more frequently to find large events
    821f9b7e05b doc: README.md - format admonition
    d3194eaf257 osd/scrub: abort reserving scrub if an operator-initiated scrub is requested
    ab5c5d7d1d7 osd/scrub: register for 'osd_max_scrubs' config changes
    31e6bacfbf6 osd/scrub: register for 'osd_max_scrubs' config changes
    ae927739884 doc/cephfs: document purge queue and its perf counters
    1a34cd1be9f rgw: allow bucket notification send message to kafka with multiple brokers
    08963622491 doc: Fixes a typo in controllers section of hardware recommendations
    ef7127e8bfc osd/scrub: show reservation status in 'pg dump' output
    93df0b3e32c crimson/os/seastore/cache: move committing existing blocks to prepare_record()
    4a08c37da56 crimson/os/seastore/journal: hide RBM specific finish_commit()
    d9ff8f0419a crimson/os/seastore/cache: minor cleanup
    c9f4727aab6 doc: Update vstart section in readme.md
    1f71671dc65 rbd: drop --pool option from "rbd group image {add,rm}"
    b4d7b660863 doc/radosgw: line edit uadk-accel.rst (1st half)
    f35e3a6e9d9 rbd: handle --{group,image}-namespace in "rbd group image {add,rm}"
    c21b5f7e0b1 qa/rgw: set api_name if not provided in create_zonegroup
    19aa6f72440 rgw: respect location constraint in master zonegroup
    53a27b4d097 PendingReleaseNotes: add note about tracker #69012
    650e21dd493 rbd: open images in read-only mode for "rbd mirror pool status --verbose"
    1c37f81fd85 script/ceph-backport: allow hyphen in project during ceph fork deduction
    ffe5bf693e9 doc/radosgw: edit uadk-accel.rst
    15e746bf5b1 vstart: use crimson_osd_objectstore
    41327dcf0f7 doc/dev/crimson: update SeaStore as default backend
    b85d61de7f4 vstart.sh: set alien cores with bluestore only
    3a6ce3cadf4 qa/suites/crimson-rados: make use of crimson_osd_objectstore
    58f7b6e0777 crimson/os/seastore: make the updates to backref_entry_mset be consistent with extents
    60c58013c53 client: Fix a deadlock when osd is full
    ef942e13fa5 qa: Add async io test to nfs ganesha using fio
    1f1051d91f3 crimson/osd/pg_shard_manager: discard outdated operations when the corresponding pgs are already removed
    1fcc7199b2f qa/suites/crimson-rados: enable short_pg_log
    65614c4ca44 rgw/notifications: Add tests for RGWPSListTopicsOp::execute()
    ffcd90313b9 test/librbd: add TestInternal.FlattenInconsistentObjectMap
    97ed3fced13 librbd: avoid data corruption on flatten when object map is inconsistent
    61b3289e41d monitoring: Add prometheus alert NVMeoFMultipleNamespacesOfRBDImage
    f80687256d9 src/nvmeof/NVMeofGwMonitorClient: remove MDS client, not needed
    4d4e1b54d95 doc/radosgw: edit uadk-accel.rst
    4a393280acb crimson/os/seastore: move backref_entry_t to a separate header
    be00314b93c crimson/os/seastore/cache: rework backref_batch_update()
    6c7de641c78 crimson/os/seastore: introduce named factory methods for alloc/retire
    f1db2cbc208 crimson/os/seastore/seastore_types: use is_backref_mapped_type()
    665418e471b crimson/os/seastore/cache: don't mark allocations as L_ADDR_NULL
    98d693cdb63 crimson/os/seastore: misc related cleanups
    8091f318106 crimson/os/seastore/cache: drop unused backref_entry_t::seq
    0f55c1759d4 examples/rgw: register boto extension for HeadBucket stats
    cbc771a4db6 os, test: make omap_iterate obligatory for ObjectStores
    e3df536e591 os/kstore: bring support for omap_iterate
    4e1a500f9c6 os/memstore: bring support for omap_iterate
    3c2b4bbcf51 crimson, os: put AlienStore::omap_get_values() on top of OS::omap_iterate()
    08508288c5f os/bluestore: reduce dependencies of omap_iterate()'s loop on Onode
    a7c81953d07 kv: avoid memcpy around key() in OMAP iterator of KeyValueDB
    8f931cff653 Revert "ops_replayer: fix signed/unsigned warning and add parameter range checking."
    d2531a0baf4 os/bluestore: bring latency logging to omap_iterate()
    d4901af641c common/ceph_time: introduce time_guard for RAII-styled timediff calculation
    87d6447079e os/bluestore: implement the lightweight OMAP iteration
    f348ea3cf53 kv: avoid memcpy in OMAP iterator of KeyValueDB
    c7407549e5a os, osd: introduce a lightweight OMAP iteration
    68612d166d4 crimson/.../replicated_request: do commit in concurrent phase
    6f29657c3d1 crimson/.../replicated_request: split discard check and reply send out of PG::handle_rep_op
    d299e46ed84 crimson/.../replicated_request: convert with_pg_interruptible to coroutine
    7b88c38ac96 crimson/.../replicated_request: factor out with_pg_interruptible
    02b70a62a43 crimson/.../replicated_request: call handle.complete() once in finally
    e5008c858a2 crimson/.../replicated_request: fix debug line
    ca189fb511f qa/standalone/scrub: fix TEST_periodic_scrub_replicated
    e03f5ca25f2 RGW\logging: convert s3_filter to key_filter
    ca9e0f40612 RGW/logging: add filtering for bucket logging
    9a9e14db350 RGW/logging: add rest API to flush logging bucket
    ee66dc51cc3 nvmeofgw*: fix no-listeners
    ceb62c0c807 nvmeofgw* : fix publishing rebalance index
    d9aa164cd38 mgr/dashboard: Fix Latency chart data units in rgw overview page
    0fc5aecd554 mgr/dashboard: RGW user accounts CRUD api's
    e717a925aea cephadm/nvmeof: fix ports when default values are overridden
    a2ebc00a56f rgw/posix: std::ignore return value of write()
    06a56b7efb8 Fix signed/unsigned warning and add parameter range checking.
    c5503187af9 qa/rgw: force Hadoop to run under Java 1.8
    2f47f9dc3c8 cephadm/nvmeof: support per-node gateway addresses
    3181acc223d mgr/dashboard: Administration > Configuration > Some of the config options are not updatable at runtime
    b71ec88c13c mgr/cephadm: fixing logic in cert-store save_cert method
    81023d996b0 mgr/dashboard: carbonize user management form
    36541efe49c rgw: RGWAbortMultipart maps NoSuchKey to NoSuchUpload
    f4dee79c330 crimson: switch to SeaStore as default objectstore
    3069d946639 deb: Add cephfs.pc to libcephfs-dev
    85805ddf581 rpm: Add cephfs.pc to libcephfs-devel
    c9e19442855 cephfs: Add a pkgconfig file for libcephfs
    1e22c110183 test/crimson/test_backfill: more detailed backfill cancellation tests
    a34b0ce2aa6 crimson/osd/backfill_state: treat Cancelled as a pause of the ongoing backfilling
    3aae66611dd qa/rgw: pull Apache artifacts from mirror instead of archive.apache.org
    2b2ce787157 tools/cephfs: fix flake8 f-string formatting for py3.12
    dbb129cc633 doc/dev/crimson/pipeline.rst: simplify and update to reflect new stages
    4c46b012760 crimson: remove now unused pipeline stages
    a051d32790d crimson: introduce and use repop stage
    0c87de8e882 crimson/osd/object_context_loader: print obc (with refcount) upon release
    9e69d0e9f21 crimson/.../pg: more debugging
    dc6a9fc1616 crimson/.../ops_executer: split execute_clone into prepare_cloning_ctx,complete_cloning_ctx
    62b8491c5ff crimson/.../ops_executer: split osd_op_params intitialization
    ff55c4f8737 crimson/.../ops_executer: rework prepare_transaction/mutate_object
    fc029270ef4 crimson/.../ops_executer: just call submit_transaction in flush_changes_n_do_ops_effects
    45cc9e96d12 crimson/.../ops_executer: rename flush_changes_n_do_effects to flush_changes_and_submit
    86588d26a96 crimson/.../pg_backend: split clone into clone_for_write, set_metadata
    f655f7f5871 crimson: convert client_request, internal_client_request, snaptrim_event to use obc stages
    64210532033 crimson/.../osd_operation*: add wait_pg_ready and get_obc
    29dedef4b7a crimson: add CommonOBCPipeline
    bcda5524dbb crimson: expose CommonOBCPipeline via ObjectContextLoader::Orderer
    854bb63ee31 rgw: allow disabling bucket stats on head bucket
    9c7580a2935 doc/cephfs: edit 3rd 3rd of mount-using-kernel-driver
    88557dff2fe librbd/migration/HttpClient: socket isn't shut down on some state transitions
    1046d610e3d librbd/migration/HttpClient: avoid hitting an assert in advance_state()
    9fa0bcc67d7 librbd/migration/HttpClient: ignore stream_truncated when shutting down SSL
    e305a5908bd librbd/migration/HttpClient: propagate ec to handle_handshake()
    8566224e940 librbd/migration/HttpClient: drop SslHttpSession::m_ssl_enabled
    331b5ea3225 librbd/migration/HttpClient: don't call disconnect() in handle_handshake()
    20885b11794 librbd/migration/HttpClient: avoid reusing ssl_stream after shut down
    5699e4b871c librbd/migration/HttpClient: don't shut down socket in resolve_host()
    d1a83f264ae librbd/migration/HttpClient: fix some error messages in handle_receive()
    eb773496d53 librbd/migration/HttpClient: log ec details in handle_{issue,receive}()
    bacd59e4def qa/suites/rados: Add ceph_test_bluefs
    01acb340924 os/bluestore: duplicate unittest_bluefs -> ceph_test_bluefs
    6c095f02e4d qa/config/crimson_qa_overrides: enable ms debug
    0811c1b9da0 crimson/net/io_handler: minor adjustments to logs
    5a886ee6ce9 doc: Fix typo.
    560d66e34ed test/pybind: Test method has been renamed in unittest 3.2
    aec8ca8b268 test/pybind: Clean whitespace.
    31283c0b2ab mgr/cephadm/nvmeof: Rewrite NVMEoF fields validation. Fixes https://tracker.ceph.com/issues/69176
    90e221d0b53 mgr: fix subuser creation via dashboard
    25fde2483b8 mgr/dashboard: added ports in administration table
    5d584b4badb doc/dev: instruct devs to backport
    0526124b605 doc/cephfs: edit 2nd 3rd of mount-using-kernel-driver
    bfc8fb6aff3 mgr/cephadm/nvmeof: Add auto rebalance fields to NVMeOF configuration Fixes https://tracker.ceph.com/issues/69176
    7fc0ead36ca doc/cephfs: edit first 3rd of mount-using-kernel-driver
    b44af183031 os/bluestore: Reduce unittest_bluefs for jenkins
    1c295464836 qa/rgw: force s3 java tests to run gradle on Java 8
    14855b306c4 mgr/dashboard: add a custom warning message when enabling feature
    9ed81f52af1 crimson: inline InternalClientRequest::do_process
    54a42bef571 crimson: manage log submission atomicity independently of pipeline stages
    5021e87338c crimson/.../pg: update debugging in PG::submit_error_log
    fda23c94e42 crimson/.../pg: convert submit_error_log to coroutine
    c8f19ead527 crimson: inline SnapTrimObjSubEvent::process_and_submit
    adc63e283c6 crimson/.../client_request: move log line to complete_request callback
    4b4473f3bd6 test/fio: remove assign-only variable
    1f02262bab3 test/cls_log: remove unused variable
    15136449836 qa/suites/upgrade/*-x: ignore more POOL_APP_NOT_ENABLED variants
    b957e9bc766 qa/suites/upgrade/reef-x: ignore more POOL_FULL variants
    f7adf6723cd crimson/.../internal_client_request: extend start() until stages have exited
    883d0231e4f crimson/.../client_request: extend instance_handle lifetime
    87c3ea23d9f crimson/.../ops_executer: emplace osd_op_params in fill_op_params
    bb2c45f8696 crimson/.../ops_executer: no reason to return cloning_ctx
    c0da4093152 crimson/osd/pg: fix tabbing in replica_clear_repop_obc
    7a36f74ceab crimson: clear obcs whether referenced or not upon replica write
    ef6a48c8bbe msg/async/Event: make the pipe byte static
    1bd5571d164 test: add missing includes
    c07d370c668 crimson: add missing includes
    37ff5a104fc pybind/rbd: fix a type comment for p_snapshot of clone()
    cb6d1838acc mgr/dashboard: Show correct token expiration date in Manage Clusters page
    453beeae499 doc/releases: fix formatting for the 17.2.8 release with hyperlinks (el8 CERN)
    4a638e51521 crimson/osd/object_context: add formatter instance for ObjectContext
    06affa6c2a4 common/intrusive_lru: add method to access use count
    cb2c5e3a604 qa/suites/upgrade/*-x: ignore telemetry re-opt-in nudges
    ad51e25d39e qa/suites/upgrade/*-x: add OSD_UPGRADE_FINISHED to log-ignorelist
    8971b72c24c qa/suites/upgrade/*-x: add FS_DEGRADED to log-ignorelist
    42e428e104a doc/releases: fix formatting for the 17.2.8 release (el8 CERN)
    082ff952b69 test/common/test_time: add missing `using ceph::mono_clock`
    69c6e9e5af7 tools/ceph-dencoder/sstring.h: use `char8_t` instead of `unsigned char`
    858ed425cb0 common/bit_vector: use static_assert() instead of BOOST_STATIC_ASSERT()
    2caa47b8fa7 include/random: use std::optional instead of boost::optional
    92aa60e9996 mgr/PyModule: get_error_string() returns copy
    2cdb67c2fe1 mgr/PyModule: do not lock in get_name()
    bb40fe448df test/rgw/logging: add bucket logging test suite to teuthology
    790c38eacc5 rgw/logging: add support for GetBucketLogging and PutBucketLogging
    8fa6cf757ec qa/suites/upgrade/*-x: add more PG states to log-ignorelist
    05dca26c24e qa/suites/upgrade/*-x: add "is down" to log-ignorelist
    a54f5710456 doc/conf.py: try to provide real jar path
    cf48fddbc6a doc/_ext: mute syntax check warn E711
    0e73c9dd66e radosgw-admin: bucket link/unlink support accounts
    0c578a127e3 rgw: shouldn't call index_op.cancel() when rados op return ETIMEDOUT
    8de984d413d rgw: append query string to redirect URL if present
    bb5893f15a8 qa/suites/upgrade/reef-x: sync log-ignorelist with quincy-x
    3162581d2de qa/rgw: bump keystone/barbican from 2023.1 to 2024.1
    dbe8c9299eb mgr/cephadm/nvmeof: Add key encryption support to nvmeof configuration
    caa4371a93e ceph orch <start/stop/restart> commands should work for service name osd and added a new command to updated service name for osd
    41f2ded4e61 Documentation changes for 'ceph orch osd set-spec-affinity' command
    48dd55a0ad4 mgr/dashboard: Update and correct zonegroup delete notification
    666f8faf11c mgr/dashboard: Add ceph_daemon filter to rgw overview grafana panel queries
    73109c1dcee test/objectstore: Make test idempotent
    64539ed2af6 rgw: Make test idempotent.
    1b5391d1a3d rgw: Remove unnecessary whitespace.
    c4868ff2d1e doc/dev: update link to backporter manual
    8bec39b66ae doc/radosgw: edit uadk-accel.rst
    91488321277 rgw: optimize bucket listing to skip past regions of namespaced entries
    27fc12bfa04 qa/suites/upgrade/*-x: skip TestClsRbd.group_snap_{set,remove}
    cd1b41de75c cls/rbd: fix mirror_image_map_list object
    cc8ad9acb47 qa/suites/rados/thrash-old-clients: skip TestClsRbd.group_snap_{set,remove}
    26a63205943 qa/suites/rados/thrash-old-clients: switch to cls/test_cls_rbd.sh workunit
    178036924e7 doc/dev/release-process.rst: New container build/release process
    de9ce1e2732 rgw: fix stale entries in bucket indexes
    b5665cfac47 crimson/osd/ops_executer: prevent access to null pointers caused by gcc bug
    97df4479d90 doc/rados: fix sentences in health-checks (3 of x)
    4b3c0cb8f3f container/{Containerfile,build.sh}: use a secret to pass secrets
    18d14b22f31 container/Containerfile: allow failure from curl to stop build
    08432ef5421 container/Containerfile: purge .repo files with secrets before commit
    ce74f14de50 container/Containerfile fix boolean IS_RELEASE usage
    ce487613d08 qa/tasks/nvme_loop: update task to work with new nvme list format
    de2d9186bdd qa/workunits/mon: ensure election strategy is "connectivity" for stretch mode
    a3a9f188cab container/make-manifest-list.py: use LOCALMANIFEST throughout
    4f050d7811f containers/make-manifest.py: Add --promote
    7374b9b1114 container/Containerfile, build.sh: Add PRERELEASE_USERNAME/PASSWORD
    6c8e9984253 container/build.sh:
    44b2fc4d5e1 container/make-manifest-list.py
    fc598223583 labeler: add container labelers
    fb4ec711176 container/build.sh: use UTC dates for tags
    256a2d6dab8 doc: fix EC overhead table m-numbering
    7ee9ad0e2ae rgw: respect rgw_graceful_stop on realm reload
    7a747bc5538 cephfs-mirror: remove redundant ceph_close() calls.
    6f1d21c9ec4 cephfs/client: dir_reset_t::reset() - add missing fd reset.
    20cb0063ebd mgr/cephadm: Add only_bind_ports_on_network spec parameter for Alertmanager
    ee0ef765349 doc/rados: fix sentences in health-checks (2 of x)
    8522452bb64 python-common/ceph/cephadm: Change NVME image version to 1.4. Fixes https://tracker.ceph.com/issues/69099
    aec87b9188a doc/rados: make sentences agree in health-checks.rst
    892cf5661f2 crimson/osd/backfill_state: drop Cancelled
    8f2ad5f5606 crimson/osd/backfill_state: Enqueuing doesn't last, so there should be no other events coming to it than those it generated itself
    475782f3b0b crimson/osd/backfill_state: add pg infos to all backfill_state's logs
    23fcab7fc6b rgw: fix data corruption when rados op return ETIMEDOUT
    15cc5a68f76 crimson/os/seastore: convert offset/length in seastore logs to hex format
    0c65b4130f4 crimson/os/seastore: convert offset/length in segment logs to hex format
    254dad29aa9 qa/multisite: enable two zonegroup yaml
    4a67cc189e1 rgw: relax RGWPutACLs_ObjStore::get_params read data log
    2de973c039c doc/rbd: Add mirror snapshot schedule information
    926aedfef19 mgr/dashboard: list smb Tracker: https://tracker.ceph.com/issues/69080
    88ce1daae61 doc/cephadm: s/ceph/Ceph/ in mon.rst
    b053ad57462 crimson/os/seastore: minor cleanup
    75e0b8c2aa6 crimson/os/seastore: drop unused file
    d68857c1e57 common/pick_address: Add IPv6 support to is_addr_in_subnet
    a1cec3de570 doc/glossary.rst: add "Dashboard Plugin"
    d2386e80bb2 mds: Fix invalid access of mdr->dn[0].back()
    6b14ac1796b mgr/cephadm: fixing config files for prometheus and alertmanager
    65acd39d190 PendingReleaseNotes: add note for replay completion warning
    19db699ea65 qa: test to verify `MDS_ESTIMATED_REPLAY_TIME` warning
    761489329c4 doc: add a note for `MDS_ESTIMATED_REPLAY_TIME` MDS warning
    8db596944f1 mds: emit warning for estinated replay time
    98d61fa0ade mgr/dashboard: add smb endpoints
    3ae0e6d0537 mgr/dashboard: fix multisite e2e failures
    45ff7e3365e doc/radosgw: update rgw_dns_name doc
    b6eb98cc108 os/bluestore: Improve documentation introduced by #57722
    bf15ebcd594 mgr/dashboard: carbon tree component
    a7830814b59 crimson/os/seastore/transaction_manager: add log in get_extents_if_live()
    0732a3d39a0 crimson/os/seastore/transaction_manager: fix get_extents_if_live
    d512f6262ef crimson/os/seastore/transaction_manager: adjust do_with for pin_list in get_extents_if_live
    19581dda911 crimson/os/seastore/transaction_manager: verify type in read_pin_by_type
    e4efceba181 crimson/os/seastore/transaction_manager: fully read the extent before rewritting it
    da5e195cb4d crimson/os/seastore: convert transaction related paths with interruptor
    1a76129c2bf crimson/os/seastore: split out transaction_interruptor.h
    7998a03a2fe crimson/os/seastore/transaction_manager: implement and use maybe_indirect_extent_t::get_bl()
    6f8ff6e9b4c crimson/os/seastore: delay setting bptr for all types of extent in case of read
    0630af44bac test/crimson/seastore: add test case for partial reads
    1642d487ecc crimson/os/seastore: disable seastore_max_data_allocation_size by default
    e29a1a4fd97 crimson/os/seastore: update lru size based on loaded extent size
    2770a61059f crimson/os/seastore: implement partial reads from cached_extent to object_data_handler
    ff23cbf5c17 crimson/os/seastore/cached_extent: introduce BufferSpace for partial reads
    090c59df755 crimson/os/seastore/cached_extent: minor adjustments to print
    d2a9cb13fc2 crimson/os/seastore: add missing final keywords
    919d4d9eea8 crimson/os/seastore: hide the complexity of extent indirection
    59d692f8f05 crimson/os/seastore/transaction_manager: fix to use direct key/length to get absent extent
    6004f2639a1 crimson/os/seastore/cache: adjust logs
    48d6d1d1fa0 crimson/os/seastore: misc cleanups and asserts
    29d0b9025f3 crimson/os/seastore: clarify zero length is only possible for root
    946edf65b1d crimson/os/seastore/cached_extent: clarify invarients in the cstors
    df15d59dfb3 crimson/os/seastore/cache: cleanup, use the same method to create extents
    528f4206fba crimson/os/seastore/cached_extent: unify extent ptr creation
    e595f353b53 doc/glossary: add "DC" (Data Center) to glossary
    e79488912ca osd/scrub: remove the 'has_deep_errors' scheduling flag
    c24dc78484c doc/radosgw: Improve archive-sync-module.rst more
    8f46603c7e9 doc/rados/operations/stretch-mode.rst: Added Limitations to stretch pool configurations
    87df76e84f2 build/uadk: fix uadk repo's commit id
    b875c783ef7 docs/rgw: deprecate tenant-based IAM in favor of accounts
    303ce155a34 doc/radosgw: Improve archive-sync-module.rst
    b564084cbfa rgw: fix bucket link operation
    fd05431d0e5 mgr/dashboard: Automate system user creation and restart of rgw daemons on Migrate to Multisite
    09ade3db7c9 qa/suites/nvmeof/thrash: add 10-subsys-90-namespace-no_huge_pages.yaml
    7ee46770f4b qa/workunits/nvmeof/basic_tests.sh: Assert number of devices
    2030411aaf2 qa/workunits/nvmeof/setup_subsystem.sh: add list_namespaces() func
    82118e19c4c qa/tasks/nvmeof.py: Improve thrasher and rbd image creation
    e1983c51020 qa/suites/nvmeof/thrasher: use 120 subsystems and 8 ns each
    c0ca0eb6f0f qa/suites/nvmeof/thrash: Add "is unavailable" to log-ignorelist
    f670916d310 qa/suites/nvmeof/basic: use default image in nvmeof_initiator.yaml
    51743e6701f qa/suite/nvmeof/thrash: increase number of thrashing
    9393509a5e3 qa/suite/nvmeof: add asserts to scalability_test.sh
    6e15b5e5595 qa/suites/nvmeof: fix nvmeof_namespaces.yaml
    74b0749b7e6 mgr/dashboard: fix total objects/Avg object size in RGW Overview Page
    7d7ea8f1763 doc/releases: fix some formatting for the 17.2.8 release notes
    59cc81a0c69 rgw: consider multi zonegroup for is_syncing_bucket_meta
    5378cfe3c5b radosgw-admin: 'user create' rejects uids matching the account id format
    69aabb39284 mgr/dashboard: update carbon-components-angular package
    9701b4b157e python-common/ceph/deployment: Add key encryption support to nvmeof configuration Fixes https://tracker.ceph.com/issues/69036
    aca468240f7 mgr/cephadm: Add key encryption support to nvmeof configuration Fixes https://tracker.ceph.com/issues/69036
    771f16e5824 qa/rgw/sts: run s3tests against both auth orders
    0601e565c5c qa/rgw/keystone: run s3tests against both auth orders
    543fd1041f5 Revert "rgw/auth: Fix the return code returned by AuthStrategy,"
    44c9519cc3e doc/rados/troubleshooting: Improve log-and-debug.rst
    6e273676ed9 doc/cephadm: Improve "Curl-based Installation"
    8cf77d03a1f doc/cephadm: Clarify "Deploying a new Cluster"
    a8e112cf538 rgw: send self zonegroup on forward to master
    49e76c23de1 qa/rgw: the rgw/verify suite runs java tests last
    60797f6862f osd: optimize extent comparison in PrimaryLogPG
    263a10615c3 rgw:Wrong x-rgw-quota-bucket-objects header when bucket quota is disabled
    06fd8720130 mgr/dashboard: Display bucket's number of shards on the ceph dashboard
    77605ce2297 cephadm: Modify the structure of the default container images
    b65d7492af0 qa: use a larger timeout for kernel_untar_build workunit
    38a32b2212e osd/scrub: fixing reservations dump format
    38513cbb5f4 cephadm/nvmeof: support no huge pages for nvmeof spdk
    5c7d47af557 rgw/dbstore: correcting merge_and_store_attrs to store attrs in place of new_attrs.
    8ba6c2de830 rgw: RGWAccessKey::decode_json() preserves default value of 'active'
    8c78a22d2cf ceph-volume: fix importlib.metadata compat
    f92042853a0 common: rm the cast operator of md_config_cacher_t
    71de8c0accd osd: rm all uses of the cast operator of md_config_cacher_t
    3cd7d0226fe osd/scrub: cache frequently used configuration parameters
    a99fa1c51ee common: a simple API to extract md_config_cacher_t cached value
    ca3cd0e69ad librados/asio: document requirement on IoCtx's lifetime
    216c3b9aece librados: document shallow copy semantics of IoCtx
    3e40916227a librados/asio: forward asio cancellations to AioCompletion::cancel()
    0331c2f9057 librados: expose op cancellation through AioCompletion::cancel()
    5fd7d2a3694 test/librados: add test cases for aio_cancel()
    bae9ed83edf rgw/abortmp: Added lock for AbortMultipartUpload
    258cc44b784 qa/config/crimson_qa_overrides: enable alienstore debug
    1807a553f12 mgr/cephadm: Add resource limits to nvmeof configuration Fixes https://tracker.ceph.com/issues/68967
    4269d7c1528 python-common/ceph/deployment: Add resource limits to nvmeof configuration Fixes https://tracker.ceph.com/issues/68967
    d2ee4c1bba8 crimson: Set device class during spawn of a crimson osd
    614e14654db monitoring: Add alert NVMeoFTooManyNamespaces
    c2f1fac3b94 doc/start: update os-recommendations.rst
    0ab7bdb27cb qa/suites/rados/verify/validater: ignore OSD_DOWN
    dfe79fa7841 rgw/notification: Forward Topic & Notification requests to master only when notification_v2 enabled.
    265e6785be0 mds: account for header size during omap commit
    d27dab240d5 rgw/notification: fix segmentation fault and topic listing logic
    16dfa00100e doc: add pendingreleasenotes for cephfs subvolume earmarking feature
    6054be59c56 .github/workflows: Do not exempt PRs with milestone
    184c1861f81 crimson/osd/replicate_backend: add the skipped newly created clone object to the push queue after the clone request completes
    6e0324f26b2 exporter: SIGTERM/SIGINT/SIGHUP management
    63357492db3 doc: 17.2.8 Release Notes
    05e207fa774 radosgw-admin: create user without credentials via cli
    71c1a2967f2 osd/osd_types: perfect forwarding in pool_opts_t::set()
    c1fdc53bc7b osd/osd_types: use std::map::insert_or_assign()
    84f87afd61e osdc/Objecter: use the erase() return value
    f3f5b084a99 osd: disable `boost::intrusive::constant_time_size`
    3cf00cde820 ceph-volume: fix dmcrypt activation regression
    00b0711188f mds: client is evicted when an export subtree task is interrupted
    2e7d1ee6e7e Add multiple labels in single command to host
    f23bd5d0995 qa: add test for importer's unexpected client eviction after an export subtree task is interrupted
    057c5b1610c mds: session in the importing state cannot be cleared if an export subtree task is interrupted while the state of importer is acking
    eccaf85294a qa: add test for importer's session cleanup after an export subtree task is interrupted
    73d5c01ae62 qa/suites/nvmeof: add nvmeof warnings to log-ignorelist
    11a4303d66f mds: the assert should be before the journal entry submit otherwise it's racy
    79a33025d50 mds: add `importing_count` to session dump
    489eed66cdd osd/scrub: list additional information when dumping the queue
    4e130affe1a rgw: Update README for DBStore and Posix drivers
    d833431ea43 crimson/osd/replicated_backend: add the dedicated method to construct MOSDRepOp
    b75dd8d333e crimson/osd/pg: add is_missing_on_peer()
    b6f27f8305b crimson/osd/pg: reuse already defined methods as many as possible to improve readability
    8a1fab37f2a crimson/osd/ops_executor: call OpsExecutor::apply_stats() before OpsExecutor::obc is moved out.
    cbd22c7ba22 crimson/osd/pg: fix dangerous lambda captures
    961aef1bb4e doc/radosgw: s/Poliicy/Policy/
    22010719d7e doc/start: fix "are are" typo
    f1a2637c79a doc/rados: correct "full ratio" note
    a8784609620 monitoring: add tests for 2 new nvmeof alerts
    e5ff1916e3d doc/start: separate package chart from container chart
    7994fea4363 monitoring: add 2 new nvmeof alerts
    f02e3128441 monitoring: add 2 nvmeof alerts to prometheus_alerts.yaml
    8c025045332 rgw: for delete ops for a bucket, where an attr/attrs are erased from the existing attrs, call put_info() in place of merge_and_store(), to store them in the backend store.
    eafe4ac81b7 rgw: fix rados bucket merge and store attrs
    1627e3836eb test/crimson/seastore/test_object_data_handler: always access object data based on offsets relative to the start of the object data base
    b6bdebe42b0 test/crimson/seastore/test_transaction_manager: take RootMetaBlock into account
    8911b29fa23 crimson/os/seastore/cache: throw enospc when failed to alloc new extents
    4cb1243d030 crimson/os/seastore: move the root meta out of the root block
    6567e7d934d qa/vstart-runner: Only remove non-ASCII characters from string-based command outputs
    b8a5917f154 rgw: evaluate policies for dest object in data sync
    a3f40b4ec6f rgw: pass uid on fetch object in data sync
    44c31faa0e7 rgw-admin: Add --format option for bucket sync status
    80674a3e12d make-dist: Quiet submodule operations in Jenkins
    a2a4a3415c0 qa/dashboard: fix test_list_enabled_module failure
    c3584838cf1  mon/nvmeofgw*: monitors publish in nvme-gw show ana group responsible  for  namespace rebalance
    64c9b53cf4a ceph.spec.in: Add option to enable sccache
    1ba45628896 mgr/dashboard: update carbon-components-angular
    865c66966ce crimson/.../object_context: remove unused lock helpers
    7961b3714d9 crimson/osd/object_context_loader.cc: retab remaining methods
    14be39509b4 crimson: InternalClientRequests require that the pg is already active
    bd5efa44b74 crimson/.../client_request: complete_request() only in with_pg_process
    293679dbb5d crimson/.../client_request: always remove from orderer in complete_request
    cef3f2f9b70 crimson/.../client_request: remove unnecessary get_handle().exit()
    de2e92bc93c crimson: rewrite with_[clone_]obc[_only] via manager, remove other helpers
    177176beabd crimson: remove unused PG::with_locked_obc
    fc8315a6df6 crimson: convert PG::with_locked_obc users to use obc manager
    5f996662420 crimson: introduce RAII style obc lock mechanic
    737676bdb5c crimson: track obcs unconditionally
    1dbd7768c03 crimson: remove ObjectContextLoader::reload_obc
    e94ad0dfffe crimson/osd/object_context: add formatter for RWState::State
    cc74b76f3e7 d/control: fix lua dependencies for librgw2
    ab49ca023a2 osd/scrub: fix 'schedule-deepscrub' test asok command
    db943eef653 Fix tuned profile to allow multiple settings
    ba0d989f9c9 mds: do not process client metrics message with fast dispatch
    edd7fe76c49 client: Gracefully handle empty pathname for statxat()
    92c5ab99b8d libcephfs.h: Fix API documentation for ceph_statxat
    829f3889922 client: Gracefully handle empty pathname for chownat()
    f6b56f9ee5d doc/cephadm: clean "Adv. OSD Service Specs"
    cdfa299a251 doc/cephadm: link to "host pattern" matching sect
    fccf7fd25e5 doc/rgw/notification: clarified the notification_v2 behavior upon upgrade
    0f0089472cc TEST_backfill_grow fails after finding "num_bytes mismatch" in osd log
    14b09519739 Make mon addrs consistent with mon info
    34bc35a7344 doc/cephadm: Update operations.rst
    e4164273cf3 rgw: return MalformedXML for empty objects list in DeleteObjects
    919da369666 [CVE-2024-48916] rgw/sts: fix to disallow unsupported JWT algorithms while authenticating AssumeRoleWithWebIdentity using JWT obtained from an external IDP.
    141b675b0b4 hiding parquet dependencies upon parquet-select option is off
    0a76ec38559 test/crimson/test_backfill: support projected log and pg log
    7a2db2f46e2 crimson/osd/pg: introduce projected_log
    77dd0027baf spdk: update spdk submodule to fix build with newer glibc
    7ae56f4f561 mgr/dashboard: remove cherrypy_backports.py
    df422f9f252 include/str_list: remove unnecessary #include
    dcb6c4a30ba common/error_code: remove unused includes
    cd95497f039 common/perf_counters: forward-declare class utime_t
    b9ffdba1a77 common/DecayCounter: forward-declare ceph::Formatter
    9615c04d7d8 common/Thread: include cleanup
    f7ee8b122db common/Journald: add missing include
    85f9521b4e9 common/StackStringStream: remove unused includes
    3d0550026fc common/{ceph_time,Throttle}: use <iosfwd>
    f9126e65b39 common/pick_address: add missing includes
    0ea0e100680 common/options: add missing include for strict_si_cast() and std::cerr
    eb150432f0c common/strtol: add missing include
    b1bd141ca77 common/ceph_argparse: add missing forward declaration
    98bf9fd9f5c common/buffer: add missing include for std::cerr
    24c2b1994aa common/Graylog: add missing include
    a42c023b65d common/elist: add missing includes
    fc076a9925c common/admin_socket: add missing includes
    9a4ab0089db tools/radosacl: add missing include for std::cerr
    a349d3ec68e test: add missing include for std::cout
    881d111aa01 cepadm: update tox.init to use latest flake 8 versions
    a529b234a24 cephadm: mock a call to shutil.rmtree
    6739a68efa0 cephadm: do not trigger rollback in bootstrap unit tests
    9fbbdf7c530 cephadm: fix invalid use of mock called_with method
    d9acf69589e cephadm: update some type annotations
    213d0b1ea2d cephadm: update some type annotations
    a1c7b5d9c92 cephadm: update some type annotations
    bb58be856a6 cephadm: update some type annotations
    6405f756352 cephadm: update some type annotations
    1a2346e612b cephadm: update some type annotations
    f0f7d9b10bc cephadm: fix f-string expression formatting
    a141ffb7b15 cephadm: update some type annotations
    67ece5d2fa9 cephadm: update some type annotations
    b02cef96ca5 python-common: use tox.ini envlist defaults when run via cmake
    dd89369b0c6 python-common: remove unused requirements-lint.txt
    894371cd36a python-common: update tox.ini linting environments
    bdf7d4f30c5 python-common/tests: update some type annotations
    39df3c0771a python-common/deployment: disable some unused import flake8 errors
    d36c1dea17d python-common/deployment: fix string that should not be an f-string
    9bb9819db2d python-common/deployment: rename a single letter variable
    851d740d62e python-common/deployment: disable some unused import flake8 errors
    9475f843b35 python-common/deployment: disable some unused import flake8 errors
    d34492c694a python-common/deployment: disable some unused import flake8 errors
    4dd84cdf07f python-common/deployment: disable some unused import flake8 errors
    dc625594af7 python-common/deployment: update some type annotations
    8726e214fb7 mgr/cephadm: fix invalid use of mock called_with method
    b77829c45e2 python-common: fix mypy errors in earmarking.py
    799ff256894 pybind/mgr: fix flake8 f-string formatting for py3.12
    19545eb9864 tools: respect set features when adding addresses
    f07c4d47f19 Revert "rgw/multisite: avoid redundant error repo entry logging"
    dd0c8168325 mon: emit warning during fs rm
    5c5102c23fd mgr/volumes: warn about active snap-schedules when volume is deleted
    ec272797c4c doc/rgw/notification: add missing admin commands
    153a698c31c doc/cephfs: note about volume deletion affecting snap-schedule Manager module
    4d2af0c5783 mgr/snap_schedule: handle volume delete
    6f5612a3a7d mgr/dashboard: improve the kcli bootstrap process
    790afd27773 doc: Document which options are disabled by mClock.
    ab8d7095979 mgr/cephadm: orch host drain command does not return error for invalid hostname
    7e5898ff413 Revert "suites: crimson basic adding wait for test"
    66ca80e7d7d mon/nvmeofgw*: fix no-listeners FSM, fix detection of no-listeners condition
    5cf1e93ad44 crimson/osd/replicated_recovery_backend: call on_global_recover() only when all replicas and the primary have been recovered
    c4274c0c3a6 doc: document balancer configurable "update_pg_upmap_activity"
    62c9f152e31 mgr/balancer: tie `update_pg_upmap_activity` to a configurable
    31c498da96f mgr/balancer: optimize 'balancer status detail'
    55860520b3f qa/multisite: add extra checkpoints in datalog_autotrim testcase
    aee484425f7 doc/cephadm/services: Update monitoring.rst to add additional templates
    3a4beadce9d doc/cephadm/services: [v1] Update monitoring.rst to add additional templates
    88deedee942 ceph.spec.in: Add an option to disable dwz
    ea1a470fb48 doc: s/Whereas,/Although/
    749007f7cf9 crimson/osd/backfill_state: don't try to do object backfills when primary_bi is empty
    8878619ed07 doc/cephadm: documentation for RGW spec "disable_multisite_sync_traffic" option
    d620ba65121 mgr/cephadm: allow disabling rgw_run_sync_thread through spec
    874f12451da cephadm: update default image imports to point to common location
    297f9f94b3c cephadm: add python-common/ceph to MYPYPATH and pytest PYTHONPATH
    b1b9cc0c84f python-common: add spot in python-common for cephadm default images
    b44121f4832 cephadm: add python-common/ceph to cephadm zipapp
    9244f0a3030 test/pybind: update to test_fallocate for mode 0
    b0690837f31 qa: test fallocate fails in mode 0
    ac34dd33099 PendingReleaseNotes: add note about fallocate mode 0
    98a67b65961 client: return EOPNOTSUPP for fallocate with mode 0
    2b30c8e8958 cephadm/smb: convert config object to use a dataclass
    66e9ef16a93 mgr/cephadm: sign generated RGW certs
    fd9c40465bd mon/MDSMonitor: send reply to beacons with `state=DNE`
    96a2f89dc57 CODEOWNERS: let orchestration cover all of python-common
    0276ab4eb9d mds/Beacon: wake up the thread in shutdown()
    961757b59bf mgr/dashboard: Replacing bootstrap modal service with cds modal service
    dd5dcc2945a mgr/cephadm: Change NVME image version to 1.3.3. Fixes https://tracker.ceph.com/issues/68755
    63c0649da42 osd: revert PR#57582
    1a895c9d121 doc: mention how to initiate snapshot mirroring
    c29c1e7bb2d doc/dev/crimson: update index
    61ebde0be2a doc/dev/crimson: Add initial BackfillMachine docs
    2368dcb402e doc/start: add supported Squid distros
    b9e7dead3f6 doc/governance: updates based on 2024q4 election
    b23b0407fec librados: dont duplicate class names in member definitions
    63cb345c6ad crimson/osd/osd_operations/client_request: no need to hold head's obc lock throughout the recovery of clones
    314c1530519 crimson/osd/pg: fix wrong debug logs
    63b9de4a3a7 crimson/osd/pg: make sure ops are sent to backfill targets if and only if the object has been pushed.
    b0085bf224a mgr/{restful,zabbix}: document removal
    8ccb6348046 mgr/zabbix: remove deprecated module
    96ec7badb85 mgr/restful: remove deprecated module
    79d61bbb58c qa/dashboard: fix tasks.mgr.dashboard.test_health.HealthTest
    6648d94aed5 doc/rados: add blaum_roth coding guidance
    1770b177fc1 osd/scrub: improve scrub information conveyed in standard PG log line references
    9c3c8d48a2d doc: improve pending release notes and CephFS
    cbc33e8d983 .github/check-license: correct grammar in "license check"
    30b9c4b615f rgw: fix json output for bucket layout
    a2a989aaa5e mds: add or update MDS thread names
    bfe489ed19d log: cache recent threads up to a day
    7de5af59c27 common: cache pthread names
    eb760013c2b qa/suites/orch: add a tests for testing public_addr for smb cluster create cmd
    4ef8a86fa41 mgr/dashboard: Carbon Design - Create realm popup
    1f40d0c06c4 log: concatenate thread names and print once per thread
    4941d098e33 ceph-volume: support zapping by osd-id for RAW OSDs
    f1135273f33 Add API tests for nvmeof service.ts file
    dd04fc5339a crimson/osd/backfill_state: discard CancelBackfill events when the backfill is done
    13c7c9d9988 doc/cephfs: use 'p' flag to set layouts or quotas
    5818305e809 cephadm: handle "systemctl start" failures during deployment better
    778218adf1b mgr/dashboard:Roles section is not aligned with column name
    ed3ce72fbc0 doc: explain the consequence of enabling mirroring through monitor commands
    a9824956d43 mgr/vol: add helpers to spawn all threads and more threads
    72395884f97 mgr/vol: reuse code for spawning threads
    e1f33442160 rgw/lc: Fix lifecycle not working while bucket versioning is suspended
    38601d0c9ea <comomon> fix buffer out-of-bounds in HTMLFormatter
    207003c5123 <common> fix formatter buffer out-of-bounds
    4080115739d mgr/dashboard: rm nvmeof conf based on its daemon name
    5b5db8974bd mailmap, githubmap, organisationmap: Add Anuradha Gadge
    c323da351ec Update .githubmap
    3e043a903ca doc/cephfs: edit "Disabling Volumes Plugin"
    470cd133ec2 qa/suites/fs/thrash: add convolve operator for overrides
    fa46810b5b3 qa/cephfs: s/prefetch_dirfrags/prefetch_oft_dirfrags
    69992c8f797 doc/rbd : add namespace mirroring updates
    a42be085bd7 doc/start: add vstart install guide
    42e4b45d304 .github/check-license: add friendly name
    68c9f16fab4 mgr/dashboard: carbonize Cluster > Hosts form
    0092cfe3c3e mds: remove obsolete comments
    f54be33382a doc: remove refrences to `mds_log_major_segment_event_ratio`
    718afe26ba8 mds: start a new major segment after reaching minor segment threshold
    7d11c708b99 mds: make parts of mdlog reusable to be used by beacon
    8403096655b added tests migration with namespace
    599bdbf0a24 doc/glossary: add "PLP" to glossary
    c8b4155d2d2 doc/rados: standardize markup of "clean"
    f39c9232e18 crimson/osd/shard_services: fix dangling reference caused by rvalue reference of ShardSercies::dispatch_context()
    5639030d48d test/crimson: disable stall-detector on aarch64 to fix asan failures
    f6cf7ae5281 doc/cephfs: rearrange subvolume group information
    eab096c188d rgw: fix empty storage class on display of multipart uploads
    cb3c475359c vstart: log faulty physical disk device
    dd4549238e5 mgr/dashboard: fix bucket get for s3 account owned bucket
    60149ade9d5 rgw/lc: Fix issues with non-current objects with instance empty
    c4206676642 doc/cephadm: correct "ceph orch apply" command
    16c23e03378 osd/scrub: remove the 'only_deadlined' flag
    9f3e18b97cb osd/scrub: make sched-targets comparator transitive
    0dcc207194b mgr/cephadm: Add namespace netmask parameters to nvmeof configuration Fixes https://tracker.ceph.com/issues/68542
    dd4b357ce97 python-common/ceph/deployment: Add namespace netmask parameters to nvmeof configuration Fixes https://tracker.ceph.com/issues/68542
    2f81b4d618e remove the code-lines that checking the {ofs,len} bounderies; and modifies them if necessary(invalid read)
    dda683b20c4 suites/rados/thrash-erasure-code/.../ec-small-objects-balanced.yaml: remove
    87c8a9c1b77 qa/tasks/rados: set pct_update_delay if balance_reads is set
    8ab313fb699 osd: wire up async primary->replica pct updates
    aee7b306196 common/intrusive_timer.h: introduce intrusive_timer
    64f252c2401 radosgw-admin: allow 'sync group pipe modify' with existing user
    4b084c608c1 qa/cephfs: override testing kernel with -k option
    18b8277e86e mgr/cephadm: add "Enable_UDP = false;" to ganesha conf
    4d795a8ea41 mgr/cephadm: add "mount_path_pseudo = true;" to generated ganesha conf
    1e69ebc6cea mgr/cephadm: add NFSv3 protocol to cephadm generated ganesha conf
    b39be5abe03 mgr/nfs: add NFSv3 protocol to exports
    575a19d2a81 RGW|Bucket notification: fix for v2 topics rgw-admin list operation
    810c7068682 Add multi-cluster support (showMultiCluster=True) to alerts
    fdc93ad15e8 qa/suites/nvmeof: add mtls test
    8f7c5f08e6f mgr/vol: add comments to explain queuing data structures
    3232f6b7af1 PendingReleaseNote: add release note that mgr/volumes plugin can be...
    373910de34f doc/cephfs: add doc for disabling mgr/volumes plugin
    0abc227131c qa/cephfs: test enable/disable of volumes plugin
    99627723580 mon/MgrMonitor: allow disabling always-on MGR modules
    4374ac74d28 mon/MgrMontitor: add log entry to support debugging
    e830f89240e mon/MgrMonitor: improve a log message
    75236e9c0be messages: add MOSDPGPCT
    f4b0589e3b3 osd/osd_types: add PCT_UPDATE_DELAY pool option
    8e14ce00c80 osd: introduce acting set specific feature vector
    d20325a3908 osd/PeeringState: proc_replica_info->proc_replica_notify, pass in pg_notify_t
    d760935f2c6 osdc: add replica read perf counters to Objecter
    990051fa1d4 osd,crimson/osd: add perf counters for replica reads
    8c4c22c15b2 crimson/.../client_request: bounce replica read if missing
    8c31d84692e crimson/.../client_request: minor cosmetic simplification
    ba246b10e73 osd,crimson/osd: remove external interfaces for mlcod
    a6da03104cf osd/ECBackend: simplfy pg_committed_to handling
    8116c88ea1c osd/PrimaryLogPG: adjust assert in log_operation
    a2d4faf0f12 osd,crimson/osd: pg_committed_to rather than mlcod for submit_log_entries
    407350daf1c osd,crimson/osd: roll_forward_to->pg_committed_to for MOSDPGUpdateLogMissing and related
    c58a40f1dd5 osd,crimson/osd: use pg_committed_to rather than mlcod for submit_transaction
    6be4d397d02 osd,crimson/osd: maintain pg_committed_to on replica rather than min_last_complete_ondisk
    8411911b6b9 osd: roll_forward_to->pg_committed_to in EC*
    9d72303f969 osd/PeeringState: refine pg_committed_to semantics
    a5f66eef9d6 osd/PeeringState: rename last_update_ondisk to pg_committed_to
    bd4fa931912 osd: remove support for replicas without OSD_REPOP_MLCOD
    7eebc628a84 osd/PeeringState: remove unused PeeringState::append_log_with_trim_to_updated
    f46e469d603 osd/PrimaryLogPG: cosmetic fix for long debug line
    4690e8b3f2b osd/PeeringState: cosmetic fix for long line
    f1bc95dafe0 doc/dev: add walkthrough for CephFS kernel development
    231a1c352d0 mgr/dashboard: Removing duplicate cephfs constant file & importing correct default_subvolumegroup.
    a2566ce4c41 mon,cephfs: fix indentation level of a code block
    04757a317ac ci: fix typo in check-license
    27feea13ff0 MDS/CDir: return as early as possible from CDir::should_split_fast()
    4b2ba587b7d mgmt-gateway: add e2e testing
    da4b85c55a1 common,osd: Use last valid OSD IOPS value if measured IOPS is unrealistic
    4b9d6a3ba1c doc/cephadm: adding documentation for mgmt-gateway HA setup
    b7ee45ab6ad mgr/cephadm: adding UT for new mgmt-gateway functionality
    06fccea5cfc mgr/cephadm: fixing deps handling for mgmt-gateway Fixes: https://tracker.ceph.com/issues/68377
    0392505386e mgr/cephadm: adding HA support for mgmt-gateway and ouath2-proxy
    d0db937cbb3 mgr/cephadm: adding md5_hash stable hash to the utils collection
    87612f499f8 mgr/dashboard: fix lifecycle issues
    f7a379fe9bc cephadm: Added new cephadm command to list all the default images
    565bb1407a9 doc/cephadm: document new flags on maintenance exit command
    56a1a27a9fb doc/cephfs: add note to remind user about snap-schedule during volume delete
    ee9b7c0617c mgr/cephadm: add offline host handling to maintenance exit
    eaad13485b8 mgr/cephadm: set maintenance mode healthcheck when removing hosts
    82b6a1c5786 mgr/smb: rm all `smb dump` commands
    3c9b07eb87e exporter: New metric for report ceph daemons health
    212c8740831 orch: disk replacement enhancement
    b5e7008d28a ceph-volume: address mypy errors in disk.py
    dd2a150f40f ceph-volume: address test_activate_dmcrypt_tpm
    10d4f309f3c mgr/dashboard: Add 'Browse Dashboards' button in multi-cluster and ceph-cluster Grafana dashboards
    7343be72087 os/bluestore: Fix repair of multilabel when collides with BlueFS
    11e3ecabf97 crimson/osd/pg: trigger PG::wait_for_active_blocker only when the pg is going active
    80d0037c251 mailmap: Add dashboard new joinees in maps
    56b60c01cac mgr/dashboard: Adapt gateway group changes in nvmeof UI
    67f884d39c3 CodingStyle: allow C++ forward declarations
    f4e165305f8 common/io_exerciser: Add assertion on failure of IO validation
    163a28aa116 test/osd: Add interactive mode to ceph_test_rados_io_sequence
    88917c5b8ae test/osd: Remove unnecessary whitespace
    c78d1ba668d rgw: add mstart-related scripts to CODEOWNERS and labeler
    b6cb908e0b7 rgw: document mstart.sh and related scripts
    942044cc603 mds/Beacon: set a thread name
    629922bf6a0 doc: update Key Idea in cephfs-mirroring.rst
    0006599c9e1 mon: add warning NVMEOF_GATEWAY_DOWN
    1cad0401cfc mon: add nvmeof healthchecks
    2ed1a3bd70c .github: detect GPL license in PRs
    3ab5d1f67f1 mgr/cephadm: disabling nginx buffering for grafana location
    0be8d01c9dd log: thread name save/fetch infra
    24f453dd39c client: Resolve symlink from dirfd for empty pathname
    8443821073b client: Fix symlink open with O_PATH and O_NOFOLLOW
    e036fde7e4b mgr/dashboard: The subvolumes are missing from the dropdown menu on the "Create NFS export" page
    7cd60242a96 ceph-fuse: Improve fuse mount usage message
    2b562b64a64 crimson: remove unused OpsExecuter::rollback_obc_if_modified overload
    7ac64b0b245 crimson: OpsExecuter no longer needs to be a lw shared ptr
    8f3ac965c31 crimson: remove now unused PG::do_osd_ops* and log_reply
    a0efff116cd crimson: clarify ops_executer.h comment
    c091f3b2ab6 crimson: convert InternalClientRequest::do_request to use *_executer rather than do_osd_ops*
    fc41fcb9d2a crimson: factor out InternalClientRequest::do_process
    304e20e9bcf crimson: switch ClientRequest::do_request to use *_executer rather than do_osd_ops
    00057b45f03 crimson: introduce PG::run_executer,submit_executer
    7a826eb86c4 crimson: PG::submit_error_log returns eversion_t rather than optional
    5e28a3bd3b5 crimson: introduce rollback_obc_if_modified without an error argument
    24b7b4f4b5d crimson: futures from flush_changes_n_do_ops_effects must not fail
    a43452f47ee crimson: OpsExecutor::flush_clone_metadata no longer needs to return a future
    0a83d956e54 crimson: remove the eagain error from PG::do_osd_ops
    7da7c3d736c crimson/osd: move pipelines to osd_operation.h
    96c771383ae crimson: eliminate get_obc stage
    238f3e573d4 crimson/.../internal_client_request: convert with_interruption to coroutine
    a091414c67b crimson/.../internal_client_request: factor out with_interruption
    a7812e095c1 crimson/.../internal_client_request: remove unnecessary system_shutdown guard
    4bea366e5de crimson: fix typo OpsExecutor->OpsExecuter
    1f99108d197 crimson: add missing field to SUBLOGDPPI and LOGDPPI
    7b783876960 crimson: remove watchers upon object deletion
    843daa9af72 common/async: remove unused common/async/bind_like.h
    c6415e14eb2 common/async: use asio::associator for Forwarding/CompletionHandler
    abaca8110ad common/async: SharedMutex uses append instead of bind_handler
    03dfb8635ec rgw_cksum:  treat mpu checksums w/o part count as valid in CompleteMultipart
    c4c647480ad osdc: remove unused overloads for async::Completion
    56e48d4ba70 common/async: Completion removes unnecessary bind_executor()
    71ed54ba772 common/async: Completion uses asio::recycling_allocator by default
    2f61b2847d9 doc/governance: update my CSC email
    e4177406f97 mailmap: add my ibm email
    022b90a7533 doc/governance: add new CSC members
    88e4484acf1 mgr/cephadm: add ok_to_stop func for smb service
    517ab013e2a mgr/dashboard: sync policy's in Object >> Multi-site >> Sync-policy, does not show the zonegroup to which policy belongs to
    b027d43e97f rgw/restore: Fixed status codes and response headers
    f7e2ca02110 rgw/dbstore: Cleanup - use unique_ptr instead of new/delete in DBZone
    cb4ff28af09 mds: add issue_seq to all cap messages
    da89acdc850 mgr/smb: prevent switching between clustering modes
    263c0f8e730 mgr/smb: move logic validating cluster changes to handler
    2f7fe668fe2 mgr/smb: split _check_cluster function body into two functions
    5b0d849730c common/ceph_context: use std::atomic<std::shared_ptr<T>>
    3dc091dd12c mgr/dashboard: Fix listener deletion
    8ebcb2dd46e os/bluestore/ceph-bluestore-tool: Modify show-label for many devs
    f9b50b2e88a mgr/dashboard: fix group name bugs in the nvmeof API
    86378344ab0 mgr/dashboard: introduce server side pagination for osds
    ad147f2e8d8 mgr/cephadm: RGW service deployment defaults to 'default' realm/zonegroup/zone despite non-default spec in service
    7e03ee798f4 container/build.sh: fix arm architecture tagging
    0a867d149e9 mgr/cephadm: adding more UT for mgmt-gateway service
    b92d14a0aa9 rgw: initialize createparams zone_placement to avoid garbage value
    1a85d4df026 mds/QuiesceDbEncoding: add `inline` to work around linker error
    0c4028a6a35 qa/standalone/scrub: remove TEST_recovery_scrub_2
    4f1ef85c720 osd/scrub: modify ScrubStore contents retrieval
    47ef574bee6 qa/standalone/scrub: test new ScrubStore implementation
    daf848fa5af osd/scrub: separate shallow vs deep errors storage
    031580fb662 common/scrub,osd/scrub: minor cleanups to ScrubStore
    283f4c25864 common: extend MapCacher API
    ce58c881583 osd/scrub: add dout() capability to the ScrubStore
    571e2f3c193 osd/scrub: directly create or reinit the ScrubStore
    38d9cf4ca76 osd/scrub: introduce ScrubStore::at_level_t
    e80b7ba4add mgr/cephadm: move Grafana's subpath handling logic to grafana config
    47e7a24c7b9 mon/nvmeofgw*: fix HA usecase when gateway has no listeners: behaves like no-subsystems
    1da6ef237fc include/ceph_fs: correct ceph_mds_cap_peer field name
    655cddb7c9f include/ceph_fs: correct ceph_mds_cap_item field name
    6d8a73439ed messages/MClientCaps: use correct ceph_seq_t for cap sequence types
    7766d3c7249 messages/MClientCaps: dump issue_seq for debugging
    a72b31e2fb3 mds: remove dead code
    5a1a21573b9 mgr/dashboard: unable to edit pipe config for bucket level policy of a bucket
    95916c91906 doc/dev: remove "Stable Releases and Backports"
    0317b5f87ac doc: SubmittingPatches-backports - remove backports team
    9b7fb48c246 Add cosbench deprecation warning to qa/README
    074dee9cbd6 qa/suites/tasks/cbt.py: Deprecating cosbench from Teuthology in preparation for deletion of cosbench support from CBT. The code being deleting is infrastructure code, no qa test suite uses this function. Therefore it can be safely deleted.
    303f18b1aff qa/workunits/nvmeof/setup_subsystem.sh: use --no-group-append
    0bab553399c qa/suites/nvmeof: use "latest" image of gateway and cli
    6c419323584 cephadm/smb: Add NET_RAW capability to deploy ctdbd
    67928a27357 qa/standalone/mon/mon_cluster_log.sh: retry check for log line
    efc96a2d134 common/Finisher: pass name as std::string_view to ctor
    f4bc4be0fa8 common/Finisher: add method get_thread_name()
    62ade6b38d1 mgr/ActivePyModule: build thread name with fmt
    9d47b164afd mgr/ActivePyModule: return std::string_view instead of std::string copy
    d513cc527ca labeler: add nvmeof labelers
    12e0c26dd3a common/Finisher: use fmt to build strings
    3717827b8bc common/Finisher: un-inline ctor and dtor
    a1e7ef6383e common/Finisher: add `const` to several fields
    cdd9bbd51e5 common/Finisher: merge duplicate field initializers
    09df46644e0 common/Finisher: call notify_one() instead of notify_all()
    0abad594d85 common/Finisher: wake up after pushing to the queue
    e30551eb86c common/Finisher: do not wake up the thread if already running
    2a19a27040e common/Finisher: call logger without holding the lock
    5b97c09b6f0 common/Finisher: use `std::lock_guard` instead of `std::unique_lock`
    c4c4b640f5c common/Finisher: merge all queue() container methods into one template
    425fc4d21d3 msg/async/AsyncConnection: move the writeCallback instead of copying it
    c72dae9b6e4 msg/async/AsyncConnection: do not wrap writeCallback in `std::optional`
    10a9914f848 msg/async/frames_v2: use zero-initialization instead of memset()
    7fcb8a8afaf msg/async/Event: use zero-initialization instead of memset()
    62ebf16f71f msg/Message: use zero-initialization instead of memset()
    6597d773611 msg/async/ProtocolV2: eliminate redundant std::map lookups
    342a25b9df1 msg/async/ProtocolV[12]: reverse the std::map sort order
    988705a49b5 msg/async/ProtocolV[12]: use `auto`
    a1438447864 msg/async/ProtocolV[12]: use range-based `for`
    cae1af38601 msg/async/ProtocolV1: use zero-initialization instead of memset()
    9441e9ad3a2 common/options: pass name as rvalue reference
    d29434c6190 common/config: use libfmt to build strings
    1e391415a6e common/config: use emplace_back() instead of push_back()
    2e2bcd5518a common/HeartbeatMap: pass name as rvalue reference
    26858737028 common/config_obs_mgr: use the erase() return value
    adc0a601d87 common/SloppyCRCMap: use the erase() return value
    6c1d2fc2d67 common: disable `boost::intrusive::constant_time_size`
    42f7383589c CMakeLists.txt: do not compile {Objecter,Striper}.cc twice
    78ae3b13509 qa/cephfs: update earmark values to valid ones in test_volumes.py
    4fbb678c9c6 mds/MDCache: use `auto`
    f51ea0450ad mds/CDir: use the erase() return value
    ac30518d183 mds/MDCache: remove unnecessary empty() check
    e4b27678311 mds/MDCache: use the erase() return value
    b96998f8499 mds/MDCache: pass iterator by value
    a0c51d0e7f0 common/io_exerciser: Modify is_locked_by_me call in ceph_test_rados_io_sequence
    1b535c011f1 doc: update 'header get' output in cephfs-journal-tool.rst
    08632621d07 crimson/os/seastore: initialize oi and ss in onode_layout_t to zero
    512eea1af52 doc: fix email
    9fc65f160cd os/bluestore: Make truncate() drop unused allocations
    256b20de486 qa: do not fail cephfs QA tests for slow bluestore ops
    5506ed63c2f qa: add test for 'dump_export_states'
    d34f33055d2 mds: add an asok command to dump export states
    ad8e622fa97 suite/upgrade/quincy-x/filestore-remove-check: update ignore list
    5b90117348d common/io_exerciser: Add version argument to callbacks in ceph_radios_io_sequence
    97e68b20aa3 crimson/osd/backfill_state: add the object to be pushed in the peer missing set of PeeringState
    ec5c6c5761e crimson/os/seastore/transaction_manager: refine logs
    1ee32107df9 crimson/os/seastore/transaction_manager: misc cleanups
    14eacf64559 crimson/os/seastore: workaround log linkage issue under clang14
    589e9cb9356 crimson/os/seastore: refine logs of seastore.h/cc
    d39949e8e9c crimson/os/seastore: adjust op names
    a49e49a1fd6 crimson/os/seastore: convert length logs to the hex format
    fc537c8d914 crimson/os/seastore: misc cleanups
    966920e063c msg/async/ProtocolV2: pass `desc` as `std::string_view` to write()
    984a76f5a3e test/rgw/lua: use stats polling instead of sleep
    9f0af5d75dc doc/man: supplant "wsync" with "nowsync" as the default
    0cb2636f1a6 doc/governance: revert d7c144c0d7e490bfda9715a0c8462bb67cffc764
    471ebae9240 qa/suites/crimson-rados/perf: add ssh keys
    8dd9e9dad6a mgr/dashboard: fix gateways section error:”404 - Not Found RGW Daemon not found: None”
    ea53aceb8d7 mgr/dashboard: show non default realm sync status in rgw overview page
    ee16b099d54 common: missing std include with GCC 14
    ce5d62db0e5 mgr/vol: remove unused variable
    485cb051192 mgr/dashboard: add gw_groups to all nvmeof endpoints
    401e8109fc7 mgr/dashboard: Enable refresh button on Manage Clusters - Clusters List table
    4d15ed813b1 mgr/dashboard: increase timeout to detect replication user in the secondary cluster
    2f5dbed0cf5 doc: remove note for smb3 support
    597a702874b s3select submodule
    405798aeda9 qa/tasks: added "is down" warning to thrash-old-clients ingorelist
    1578931220a osd/scrubber: Clean up unused function add_double
    8daa791d396 test/rgw/multisite: add meta checkpoint after bucket creation
    cfe254758b1 doc/radosgw/multisite: fix Configuring Secondary Zones -> Updating the Period
    db926acb533 doc/dev/radosgw: update paths that moved under src/rgw/driver/rados/
    942474c2f5b client: Fix aio zerobyte file read
    10c8330f20c client: Fix caps_ref[c]<0 assert
    3ebe97484d2 client: Fix libcephfs aio metadata corruption.
    b5af1c1ffe8 test/client: Fix aio nonblocking test
    59b996f0ed0 qa: Add libcephfs client test with objectcacher disabled
    6d8f61015f2 qa: Add data read/write test for nfs-ganesha
    247562fad74 script/run-make: stop args duplication
    ad9ff386278 mgr/vol: better to call base class __init__() at beginning
    322c1a79206 doc/governance: add Zac Dover's updated email
    31a5d5f2f97 doc/governance: add exec council responsibilites
    5a9c1c06e8d cephadm/smb: Add a provision to specify ctdb log level
    39723ff29d4 mgr/dashboard: Donot display restart gateway message on completion of Setup Multisite Replication wizard
    a48080af395 test/common: add death test for double !recursive lock
    9eeca730fa0 global: Call getnam_r with a 64KiB buffer on the heap
    9d1be68be06 mgr/smb: fix condition for smb earmark when cluster_id doesn't match
    7b2085daad1 librbd/crypto/LoadRequest: clone format for migration source image
    63529523f57 librbd/crypto/LoadRequest: rename m_is_current_format_cloned
    a92ca37b73c cephadm: use a shared smb.conf for clustered smb container sets
    8d2d54f6c26 cephfs-shell: fixing the cephfs-shell test failures
    80b7917cef6 json_spirit: add missing dependency on Boost::thread
    1b66bc527eb RGW: Cloud Restore cli and its corresponding response for user.
    c49aa6aa3b1 cloud restore: completing read through
    0e0222d0162 rgw/cloudtier: Restore object from cloud endpoint
    5c40a5c1737 Add Containerfile and build.sh to build it.
    84ebb30ea94 common/test: do not test exception raised from recursive lock
    1213df95915 test/common: fix invalid vim mode
    bec702dad7a common,osdc: remove obsolete ceph::mutex_debugging
    69baa6de257 common: assert debug mutex lock is not held if !recursive
    fd895dde9d6 cephadm: pull container images from quay.io
    c7fda7cabb0 mailmap, githubmap, organisationmap: Add Shweta Bhosale
    b39ee674295 qa/tasks/tox: unpin tox version
    725b4e18479 src/exporter: improve usage message
    3e3b7fa8ea2 mgr/cephadm: add "allow_set_io_flusher_fail = true;" to ganesha conf
    0ed14dc8336 mgr/dashboard: Unable to delete realm via dashboard
    1173caf7960 qa/tasks/ceph: wait for OSDs to go down before checking logs
    287ff3b3603 mgr/dashboard: Allow adding all listeners unders a subsystems
    a71c8e8d118 PendingReleaseNotes: add a release note about confirm flag for max_mds
    2d28faaeea1 doc/cephfs: update about changing max_mds FS setting variable
    4d5ec87ab40 qa/cephfs: add tests for confirmationn required to change max_mds
    a55a75c57e7 mon,cephfs: require confirmation when changing max_mds on unhealthy cluster
    417c5441ef7  mon/nvmeofgw*:fix monitor database corruption upon add gw
    b8516bf6b91 rgw: decrypt multipart get part when encrypted
    a09e6d3c2f7 README: add OpenSSF Best Practices Badge
    48d1517b417 mgr/dashboard: Fix `null` gateway group
    c0e05bf3606 ceph-volume: drop unnecessary call to `get_single_lv()`
    719fd989523 os/bluestore: log max throttle cost and txc count on slow op.
    c2e8c295dc4 ceph-volume: add new class UdevData
    ee8c7d2e3bb mgr/cephadm: adding config to check client cert for internal nginx Fixes: https://tracker.ceph.com/issues/68310
    a2b2eac0367 rgw/lc: Fix a bug in LCOpAction_Transition::check()
    2baa027b13c doc/rados: edit "Placement Groups Never Get Clean"
    99ae9590a5b doc/releases: move Dashboard items from CephFS
    84f5ace9498 doc: Adds release date.
    706eb26f560 mds: do not dump empty bufptr
    bb7d5b62d9d doc: Document the Windows CI job
    9d44eef4ae3 rgw/multisite: add zonegroup parameter to test-rgw-mulitisite.sh
    b4c62fe6367 ceph-volume: docstring and typing corrections
    ad471f553d3 mgr/dashboard: fix doc links in rgw-multisite
    59e39d11779 osdc: fix mutex assert for !debug builds
    d31397457cc common/io_exerciser: code enhancements to ceph_test_rados_io_sequence
    50ec38470fa mgr/dashboard: rbd table actions enhancements
    cf5b9eafb3b mon/nvmeofgw*: fix tracking gateways in DELETING state 1.Ignore subsystems of GWs in state DELETING when calculate number namespaces 2.Call tracking function always in the monitor's tick - not just if the   beacon is active
    3482ebcd3c7 mgr/vol: don't define progress bar ID repeatedly
    829c857b9e1 crimson/os/seastore: fix data inconsistency during ool writes
    012bb63b276 mailmap, githubmap, organisationmap: Add Kushal
    b96d714b23b mgr/mgr_util: log traceback when exception occurs in RTimer.run()
    8db39bcbdb4 crimson/osd/backfill_state: do at least one time of replica scanning if necessary in the Enqueuing state
    c39ae16f78f qa/standalone: bugfix for wait_for_scrub
    4a4fc7bad53 qa: ignore pg availability/degraded warnings
    4b2e841144e script/ceph-debug-docker: add debuginfod for ubuntu
    dccebc7ca4c script/ceph-debug-docker: drop /ceph mount
    6cdef7ad93a doc/releases: add highlights section
    7769bdb9438 rgw/rados: rgw_rados_operate() takes version_t*
    21cf769ae78 mgr/mgr_util: don't set event when it is already set
    a191f9a6d29 rgw/multisite: avoid redundant error repo entry logging
    7075998a64a doc/releases: update squid release date
    5cc7cf44dba librados/asio: add version_t to completion signatures
    0daba18f9af doc/releases: Add warning about iSCSI bug
    29e122f8754 qa/suites/rbd/iscsi: enable all supported container hosts
    d3f385aaed0 qa: avoid a non-standard shell construct in rbd/iscsi_client.t
    b66b98e76d4 qa: don't hardcode podman in rbd/gwcli_{create,delete}.t
    9022ef19a58 qa/tasks/ceph_iscsi_client: don't use mpathconf
    9e3449995f8 qa/cephfs: test clone progress reporter after subvol is deleted but...
    fdecec7349b qa/rgw: add debug log to help diagnose 'bucket check unlinked' failure
    517a3458af8 Temporarily change the libcephfs dependencies
    45ad72a5e4d proxy: Add the design document
    c7c982cdb67 proxy: Add the proxy to the deb builds
    b524c4c1427 proxy: Add the proxy to the rpm builds
    0df9f4451f5 Initial version of the libcephfs proxy
    9c65adeb23f blk/KernelDevice: using join() to wait thread end is more safe
    5a11bc00e6c doc: fix typo
    0f8676f04f3 doc/_ext: accomodate three active releases in the Ceph timeline
    36315d48140 mds: do not duplicate journaler write heads
    b3025914374 mds: use Journaler getters
    55652f08197 osdc: properly acquire locks for getters
    ce5d84d1fa4 osdc: add print method for Journaler::Header
    98b7402b272 mds: do not trim segments after open file table commit
    b2711f655a7 mds: delay expiry if LogSegment is ahead of committed oft seq
    92e50c4f533 mds: do not write journal head twice on trim
    6828bd05029 mds: simplify and explain expiry finisher ctx
    76eab177a13 mds: add mds_lock asserts for journal flush
    ddc55945ea2 mds: skip second wait_for_safe
    66478ab2755 mds: trim only to the LogSegment created for flush
    64ec1e2e951 mds: allow passing explicit seq to trim to
    6030e748165 mds: quiet unhelpful debug message
    f41bb2e68c9 mds: add C_IO_Wrapper completion debugging
    52070edd0f0 mds: add dout for new segment
    6d010bb994d doc/releases: add fixes
    8a101ef9be5 mgr/dashboard: Forbid snapshot name "." and any containing "/".
    c01b5b179e2 rgw/auth: fix internal server error for presigned urls
    ad0a7fa655e node-proxy: fix a regression when processing the RedFish API
    9b9ce5369ea mgr/dashboard: adjust federate ssl code with mTLS
    f39c5f50544 rgw/rados: RGWRados::delete_objs_inline() uses AioThrottle
    e39f601295b cls/rgw: cls_rgw_obj_chain uses vector instead of list
    24af1beeb54 earmarking: improve error handling when getxattr fails
    2ab0103e822 mgr/nfs: earmark resolver for subvolume
    51adf772719 rgw: handle http options CORS with v2 auth
    e40b4c56cfe mgr/dashboard: Add progress bar to rgw multisite automation wizard
    358f33a148c os/bluestore: Fix ceph-bluestore-tool allocmap command
    f6b86bbf2fe mgr/dashboard: carbonize user management-role form
    15ad2bcce8a librbd: add LIBRBD_SUPPORTS_GROUP_SNAP_GET_INFO define
    a88c84aa1ca crimson/osd/pg: correct log messages for ShardServices::dispatch_context_messages
    b0f5e1086a6 crimson/osd/pg: also trigger callbacks for empty peering transactions
    597e48b857e doc/releases: add Squid target release date
    22546c61e9d pybind/mgr: drop py37 test from  tox.ini
    de90c32240e mypy-constrains.txt: bump mypy up to version 1.9
    a2cbb409257 pybind/mgr/telemetry: remove misleading tox env
    ffcc157a694 pybind/mgr: replace imports of distutils.util
    51516ba146e python-common: add a utils function to replace distutils.util.strtobool
    7d9fe0a5dbc mgr/smb: use is comparisions for enum values
    3ec02970325 cephadm: make bootstrap default to "global" section for public_network setting
    af437b4e7f1 mgr/dashboard: multisite sync policy improvements
    23bc88c8684 os/bluestore: log additional txc info for slow op warning on kv_committed.
    1f99b55488b kv: add a pair of informative getters to KeyValueDB::TransactionImpl
    4db3bb77b64 mgr/smb: accept public_addrs on cli when creating cluster
    334e79002b2 qa/tasks/fwd_scrub: remove unnecessary traceback
    0b09d16f10f qa: modify `test_human_readable_quota_invalid_values`
    07d5199c9d8 src/test: test to check proper handling of units by strict_iec_cast
    39d1cc5fd94 src/common : proper handling of units in `strict_iec_cast`
    ff7aa420b1a mgr/dashboard: fix setting compression type while editing rgw zone
    5b2378104a9 doc: update doc for subvolumes earmarking mentioning valid formats
    bc168d7eda9 mgr/smb: earmark resolver for subvolume
    6850bce5543 qa/standalone/scrub: increase status updates frequency
    138ac6aa182 rgw: remove rgw_data_log_obj_prefix
    b9f63e12572 qa/cephadm: wait a bit before checking rgw daemons upgraded w/ `ceph versions`
    bde621dbc52 mgr/cephadm: adding health check endpoint for mgmt-gateway
    42d89dfb641 doc: revert sync_duration to seconds
    46e3e28a2e8 qa: update test for last_sync_duration
    e1612d048a1 pybind/mgr/orchestrator/module.py: NvmeofServiceSpec service_id
    4277cd29897 mds: invalid id for client eviction is to be treated as success
    49ee68245b7 mgr/dashboard: fix handling NaN values in dashboard charts
    e4183b2fde8 mgr/rgwam: use realm/zonegroup/zone method arguments for period update
    a7f3b7b749a src/mon/MonMap: modify dump function
    4d2f8879bed qa: Added tests for disabling stretch mode
    3be430040b4 osd/scrub: disable high work-queue priority for h.p. scrub
    142c96e7ca5 ceph-volume: fix OSD lvm/tpm2 activation
    ec2af67dba8 crimson/osd/pg: remove snapmapper objects when eventually removing collections at the last moment of pg deleting, just as pg meta objects
    902a45a23c5 qa: remove all bluestore signatures on devices
    d257eacb05a doc: Update "Getting Started" to link to start not install
    45cdd3786fc librbd: introduce rbd_group_snap_namespace_type_t enum
    ea3bdc6f678 mgr/dashboard: update period after migrating to multisite
    14c905d0c1f test/crimson/test_backfill: set BackfillState's log level to debug
    bfe15f68075 crimson/osd/backfill_state: always go to Enqueuing when object is pushed during Waiting
    5400aab8d92 cls/user: reset stats only returns marker when truncated
    28d2fa30c25 mgr/dashboard: NFS Export form fixes Fixes: https://tracker.ceph.com/issues/67400
    1889ef5db5e mgr/dashboard: fix checkbox selection and role clone modal
    81c8c8c71f0 common/io_exerciser: performance, readability and safety improvements
    524dabc0aaa erasure-code/isa: Handle case where data and coding buffers are not 32-byte aligned
    696a41037f0 mgr/dashboard: List gateways in a group
    a5d0f546807 crimson/osd/backfill_state: push peer pg infos' last_backfills only when all objects before them are backfilled
    7c6c16c5936 mgr/dashboard: Add group selector in subsystems views
    a0e88abf4ec cephfs_mirror: revert sync_duration to seconds
    b534f60ed5f mgr/dashboard: rm unnecessary classmethods
    a939c75f107 mgr/dashboard: ignore exceptions raised when no cert/key found
    0680f17d7ba doc/rados/operations/stretch-mode.rst: Added Exitting Stretch Mode
    78ce68de41b mon [stretch mode]: support disable_stretch_mode
    52278f169fe mgr/dashboard: zonegroup level policy created at master zone did not sync to non-master zone
    afb6399c400 src/test/osd/ceph_test_rados_io_sequence
    921d92f17e3 doc/cephadm: don't hardcode default oauth2-proxy image into docs
    83108769334 mgr/cephadm: update oauth2 proxy image variable name
    c187b0d6e22 mgr/cephadm: add --no-exception-when-missing flag to cert-store cert/key get
    3bcbe50b01f mgr/dashboard: Service form fixes for mTLS
    399c53fae04 rgw_log_backing: error code not returned
    95cdae7f39b COPYING,common/*s390x*: distribute under Apache 2 license for s390x
    33e3f8d6362 arch/s390x: add license notices, use LGPL
    afd27596802 ceph.spec.in: Fix unversioned Obsoletes: rpmbuild warning
    a159821ddfc doc/rados: add confval directives to health-checks
    0f6039f9afa doc: update nfs doc for Kerberos setup of ganesha in Ceph
    91734345b61 doc/radosgw: correct RST formatting
    85dff0d1918 crimson/osd: purge strays when PGs go clean
    9dd0b2369f9 os/bluestore: Move reservation of bdev label to proper place.
    e15a9c1e711 mgr/dashboard: Fix space between the text in few sections
    984780eeae1 mgr/dashboard: carbonize the wizard component
    ccd58786b90 mgr/vol: use pre-defined timeout period instead of hardcoded value
    a79e9a4e7ae doc/rgw/uadk: Add UADK document for compressor zlib
    d1c942a9849 pybind/mgr: attempt to fix mypy importing from python-common
    b360419f5f0 mon: remove duplicated NVMeofGwMap.h
    9d454bd8be6 os: remove unused btrfs_ioctl.h and tests
    3582e6e9d5d mailmap, githubmap, organizationmap: add Naveen Naidu
    a98c0d67b63 common: remove unused sync_filesystem.h
    bec46e941d2 rbd: set journaling feature when --mirror-image-mode is journal
    a8918f35941 crimson/mon/MonClient: use gates to handle multi-shards
    da409bb22ce crimson/mgr/client: use gates to handle multi-shards
    e4b5a327bf4 common/gated: enable ceph_assert on shard id
    45327462e09 orch: Fix `daemon add osd` boolean param handling
    528f09c04eb mgr/dashboard: fix minor issues in carbon tables
    656b6cb3ff0 cephadm: update LATEST_STABLE_RELEASE to squid
    48b0a20bd42 rbd: display mirror uuid for mirror pool info output
    5c6c4a07d8d mgr/dashboard: Cloning subvolume not listing _nogroup subvolumegroup if there are no subvols in _nogroup Fixes: https://tracker.ceph.com/issues/67891 Signed-off-by: Dnyaneshwari talwekar <dtalweka@redhat.com>
    21454d08484 mgr/dashboard: remove orch required decorator from host UI router (list)
    3fdbc160bb2 rbd-mirror: allow mirroring to a different namespace
    174b9d4abe6 doc: document earmark option for subvolume and new commands
    d2f8d102215 qa/cephfs: update tests for test_volumes & unit-test for earmarking
    a08ddab34ab mgr/volumes: add earmarking for subvol
    876bdcf2def mds: dump next_snap when checking dentry corruption
    847380958b8 crimson/osd: remove CommonClientRequest::should_abort_request, no callers
    5c280d2d3dc crimson/osd: InternalClientRequests should not be repeated after interval change
    9aee68a25f0 qa: correct daemon for warning conf
    95e8c42f4c3 qa: print config dump after setting
    b895e596a88 doc: nit fixes for nfs doc
    daafaf7f65e client: remove hypertable
    1d01d0407ee mgr/dashboard: Add mTLS support
    e0e467a7a20 mgr/dashboard: Adding group and pool name to service name
    94418d90d2b mgr/dashboard: fix UI modal issues
    bda1c7fe2b7  mon/NVMeofGw*:  fix issue that GW was down when last subsystem  was deleted
    a3767525d88 mgr/dashboard: add SSO through oauth2 protocol
    bc830a322df mgr/dashboard: add service management for mgmt-gateway
    8fccda90d5b crimson/os/seastore/rbm: add assert to check if bptr is page-aligned
    e3953d324bf mgr/dashboard: add service management for oauth2-proxy
    3bc36d1fa8d crimson/os/seastore/rbm: remove unnecessary copy during ool write
    f57e99e1731 doc/rados: add osd_deep_scrub_interval setting operation
    482270a8d7b doc/install: add prompts to install-storage-cluster
    b98a46582e5 osd/scrub: reduce osd_requested_scrub_priority default value
    36c620b04f3 doc/README.md: create selectable commands
    e4434feafc8 test/crimson/test_messenger_thrash: fix local variable out of scope in async task
    1716224760d crimson/osd/pg: make "PG::submit_error_log()" and "PG::complete_error_log" interruptible
    4ed50051484 crimson/osd/ops_executer: revoke OpsExecuter::get_obc()
    b9ef4367229 crimson/osd/ops_executor: simplify OpsExecuter::rollback_obc_if_modified
    fc41513d4e9 crimson/osd/pg: rollback ops by copying obc beforehand and recover after errors
    e0f77686523 cephadm: Support Docker Live Restore
    86a0a80cb03 mgr/dashboard: fix table filter
    afeaeb711fa tools/ceph-bluestore-tool: Added zap-device documentation
    e3d8a37ef6e orch: refactor boolean handling in drive group spec
    5eee7e81051 mgr/dashboard: RGW multisite sync remove zones fix
    3bb41eb33b4 mgr/dashboard: fix start time format
    1a80319bbff tools/ceph-bluestore-tool: remove param zap_size
    b61c7616819 mgr/dashboard: fix table column pipe transform
    dcf743928e3 ceph-volume: add call to `ceph-bluestore-tool zap-device`
    55a2ffb342c mgr/cephadm: use host address while updating rgw zone endpoints
    8c56a2327fa rgw/service: remove unused metadata and metadata backend services
    fb7cb18df92 rgw/services: remove unused RGWSI_Role_RADOS
    bb2ba14dfc4 rgw/role: add rgwrados::role interface for role metadata
    4ed934a2190 rgw/metadata: use raw RGWMetadataHandler for role metadata
    78bbf69b57f rgw/metadata: encapsulate role metadata handler in rgw_role.cc
    a2b37a10f80 rgw/metadata: use raw RGWMetadataHandler for user metadata
    62e95e133f4 rgw/user: remove unused 'meta backend ctx' arguments
    a5898734a9e rgw/user: call sysobj directly instead of 'sysobj meta backend'
    c83fd2e1b1b rgw/metadata: use raw RGWMetadataHandler for bucket instances
    b04ca1367cb rgw/metadata: use raw RGWMetadataHandler for bucket entrypoints
    7fb384207f9 rgw/bucket: remove unused 'meta backend ctx' arguments
    2cdf27f06ed rgw/bucket: call sysobj directly instead of 'sysobj meta backend'
    7b6ef9e6455 rgw/bucket: free functions for bucket instance metadata keys
    890caebdc87 rgw/services: remove otp service and metadata backend
    48753d440cc rgw/metadata: remove backend stuff from otp metadata handler
    b017975d673 rgw/services: remove unused RGWOTPCtl
    0753d678402 rgw: clear output keys in RGWMetadataLister::get_next()
    c83698b9714 test/rgw/posix: add missing include for cpp_strerror()
    8c2ed94e9cb osd/scrub: decrease default deep scrub chunk size
    816df9cb2a7 qa/rgw/multifs: add tasks/+ to concatenate tasks into same job
    64f71715202 qa/rgw/multifs: factor common setup tasks into 0-install.yaml
    86e737fdac5 qa/rgw/multifs: remove 'rgw relaxed s3 bucket names' overrides
    ed09e85a890 qa/rgw: perl tests generate valid bucket names
    25e0a323ad2 mgr/cephadm: renaming whitelist_domains field to allowlist_domains
    0997e4cd51e python-common/ceph/deployment/service_spec.py: Allow the cephadm deployment to determine the default addresses
    589258241a4 doc/releases: add rbd-wnbd scalability note
    1b431a3757e tools/ceph-bluestore-tool: Allow show-label even if OSD is running
    62a4247353d pybind/mgr/cephadm/services/nvmeof.py: allow setting '0.0.0.0' as address in the spec file
    128e6451d8c doc/install: Keep the name field of the created user consistent with the node name in the Start RADOSGW service command
    17cc3237715 mgr/dashboard: fix indefinite loop in cephadm dashboard e2e
    7a952dcbc00 qa: restrict 'perf dump' on active mds
    80beab8eb2c rgw/kafka: refactor topic creation to avoid rd_kafka_topic_name()
    9eb3b99b99b mgr/cephadm: Make the discovery and gateway IPs configurable in NVMEof configuration Fixes https://tracker.ceph.com/issues/68030
    02bbd3cf3c1 python-common/ceph/deployment: Make the discovery and gateway IPs configurable in NVMEof configuration Fixes https://tracker.ceph.com/issues/68030
    04f26b29e0c Checking for dereference of a null pointer (loaded from variable 't')
    b9ca3957303 doc/README.md: improve formatting
    e905fedfccb osd/PG: make use of SnapMapper::update_snap_map
    4af51349e5e mgr/dashboard: mgr/dashboard: Select no device by default in EC profile
    73231640d95 crimson/osd: more detailed debug logs
    918539e9de2 crimson/os/seastore/rbm: remove duplicate code and introduce a shared routine in read() and write()
    c8434d67d08 mgr/dashboard: expose gw_groups list api
    47f57d434d1 mgr/dashboard: add gw_groups support to nvmeof api
    20da9296a23 mgr/status: Fix 'fs status' json output
    faa68920aab mgr/dashboard: fix context switcher and multi-cluster add cluster feature
    e61c0e05676 mgr/dashboard: add check if federate job is running else show reconnect message
    5f31be9df25 mgr/dashboard: add ssl to prometheus federation
    d8cd10243d8 doc/releases: add Telemetry section
    34f8306fe5c rgw/multisite: no need to capture error from callback. we are already doing that within RGWDataFullSyncSingleEntryCR()
    ed3312085b3 rgw/multisite: drain_all() after notify stack cancel
    676479354d9 rg/multisite: if the first shard fails to sync, we must drain and return error.
    b01c0e9b50a test/scrub: only instruct clean PGs to scrub
    447f8818bec mgr/cephadm: add command to list systemd units of dameons
    c939c95265c mgr/cephadm: add systemd unit to stored info about daemons
    5f2604807a5 crimson/osd/ops_executer: cleanup snap_map_*
    b7cbd6a341c crimson/osd/osd_operations/snaptrim_event: only increase osd_osd_param_t::at_version after clone adjustments
    f4c82b10d8a crimson/osd/osd_operations/snaptrim_event: we do SnapMapper updates in ReplicatedBackend::submit_transaction(), drop all SnapMapper updates before that
    8f969360069 qa: Add test for 'fs status' in standby-replay mds setup
    c00d2078651 Change code from non-PIC to PIC for ppc64
    45871f73221 os/bluestore: perfect comments in hybrid_allocator
    fd93ecd88a5 mgr/cephadm: open ceph-exporter when firewalld is enabled
    5f956e52d1b osd/scrub: remove the 'planned scrub' flag set
    92b0f851261 osd/scrub: remove requested_scrub_t::need_auto
    ec3e4abeeb7 mgr/dashboard: service form hosts selection only show up to 10 entries
    c43853afd57 osd/scrub: set_op_parameters() no longer uses the 'requested' flags
    fcdae78c356 cephadm: bootstrap: verify orch module is running before setting cephadm backend
    12a9aba43ca cephadm: add ability to continue on failure when applying multiple specs
    6b34707f827 doc/man: edit ceph-bluestore-tool.rst
    baab1dc6463 rgw/notify: add copy ctor to token waiter
    7171f73c81d doc/README.md: improve formatting
    5b1f9aaf4ff mgr/cephadm: changing the nginx upstream image used by mgmt-gateway
    4ccbc083e29 osd/scrub: remove requested_scrub_t::must_repair
    de29f25ef2a mgr/smb: stop trying to clean external store during cluster sync
    162efeaeefd osd/scrub: complete on_mid_scrub_abort() refactoring
    3cdde70d2aa crimson/osd: check_osdmap_features - add log
    0d37bc91f4c crimson/osd/ops_executer: pass MutFunc by value
    ea89f46aace crimson/osd/ops_executer: avoid seastar::async comment
    28f44131729 crimson/osd/osd_operations/snaptrim_event: make use of process_and_submit
    38bd4e7c5c3 crimson/osd/osd_operations/snaptrim_event: introduce process_and_submit
    dbf7425c89e crimson/osd/ops_executer: flush_changes_n_do_ops_effects to use coroutines
    24a278be8f9 crimson/osd/osd_operations/snaptrim_event: start to use coroutines
    2a61d4f5811 crimson/osd/pg: make use of SnapMapper::update_snap_map
    dfda0c6f594 mgr/dashboard: datatable performance improvement
    def275e100a osd/scrub: fix scheduled_at for distinct urgencies
    fc925a0e4c6 osd/scrub: implement urgency_t::repairing
    761873577ac osd/scrub: remove requested_scrub_t::must_deep_scrub
    769790122d3 osd/scrub: remove requested_scrub_t::must_scrub
    2e31563389f osd/scrub: base queue priority on the urgency of the scrub target
    83b8ca54bb9 osd/scrub: remove remaining refs to the Scrubber's 'required' flag
    e2ffccdfc5d osd/scrub: mid-scrub-aborts logic should use the new urgency attributes
    22bb6d9ed55 osd/scrub: remove flags_to_shallow_priority()
    93d90ea358c doc/cephadm: add malformed-JSON removal instructions
    062108efca9 tools/rbd_ggate: fix sign of errno
    908dc7f14a8 qa/crontab: Add weekly crimson-rados suites
    d8e4be257a4 doc/releases: add Crimson/Seastore section
    01306208eac src/include/uuid.h: fix for boost 1.86.0
    e7139a8f438 ceph.spec.in: we need jsonnet for all distroes for make check
    36a8e202a2b mgr/cephadm: stop running "true" before every command
    d620a51c306 doc/rados: add "pgs not deep scrubbed in time" info
    6fd11c0276d librbd/migration/NBDStream: abstract out libnbd and add unit tests
    3260b8fbea9 qa/suites/rbd: add snippets for migration import from NBD
    e1418e19757 librbd/migration/NBDStream: call nbd_shutdown() in close()
    90b55cfdc25 librbd/migration/NBDStream: switch to NBD URIs
    d6d308003b2 librbd/migration/NBDStream: check for nbd_get_size() errors
    1b12f4603e5 librbd/migration/NBDStream: introduce from_nbd_errno()
    d52bd80f1f9 librbd/migration/NBDStream: be more thorough around nbd_block_status()
    dc8eed68ce5 librbd/migration: add nbd stream
    926f91c5d33 cephfs-top: fix exception on small sized windows
    af84f6d512a mgr/cephadm: adding spec fields for oauth2-proxy whitelist_domains
    c9c30bcdb07 tool/bluestore-tool: add zap_device command support
    13a59272967 rbd/bench: Add ability to write a random string of bytes or a specific byte with --pattern-bytes option
    c266ef0f61f tools/ceph-bluestore-tool: fix "--yes-i-really-really-mean-it" option
    0b277fe3809 doc/README.md: edit "Build Prerequisites"
    3106f79f5b8  mon/NVMeofGw*:  1. fix blocklist bug - blockist was not called  2. originally monitor only bloklisted specific ana groups but since we allow     the changing of ns ana grp on the fly for the sake of ns load balance,     it is not good enough and we need to blocklist all the cluster contexts     of the failing gateway Signed-off-by: Leonid Chernin <leonidc@il.ibm.com>
    a59f007695d cephfs-top: fix exception on large sized windows
    ef68253a87b qa: relocate subvol creation overrides and test
    e7bd4bcdd07 doc/dev: add "activate latest release" RTD step
    d0a83cb03ff doc/releases: move Op tracker to mgr
    f2350a8c7fa cls/rgw: warn about CLSRGWConcurrentIO use in asio threads
    745f6f2c711 doc/releases: add more to RADOS section
    d011c522bb1 cls/rgw: duplicate reshard checks in all cls_rgw write operations
    658098b4799 cls/rgw: remove unused cls_rgw_bi_get_vals()
    a86f97badcb rgw/rados: remove unused RGWRados::bi_get_vals()
    6ec74a5dccc rgw/reshard: use cls_rgw_bi_put_entries() when replaying the reshard log
    e11480aa4c5 cls/rgw: add bulk cls_rgw_bi_put_entries() op for reshard
    7ce0b5ebbda test/cls/rgw: simplify set_reshard_status()
    d78a2767bb0 test/cls/rgw: helpers take const strings
    fa7873e1917 cls/rgw: remove rgw_bucket_dir_entry_meta default ctor
    5c05291b544 cls/rgw/client: expose cls_rgw_bucket_init_index2()
    088f5abaff3 cls/rgw: rgw_cls_bi_entry::get_info() is const
    cce84124574 cls/rgw: remove rgw_cls_bi_entry default ctor
    926ef939e7d cmake/ec: use ExternalProject to build isal library
    3bfc1ae3d72 cmake/crypto: use ExternalProject to build isal crypto library
    2e319cb30c8 rgw/notifications: free completion pointer using unique_ptr
    12c7c6522ba mgr/dashboard: Increase maximum namespace count to 1024
    d14d87b085e crimson/common/gated: Comment out ceph_assert for shard ID check
    1071cc38868 crimson/net/io_handler: ctor add gate ctor with shard id
    81f9d064f71 doc/rados: add link to messenger v2 info in mon-lookup-dns.rst
    1fda7cb7e23 qa: test fetching foreign config item
    529cdd34249 mgr/snap_schedule: correctly fetch mds_max_snaps_per_dir from mds
    037537ed8c6  mon/NVMeofGw*: Fix issue when ana group of deleted GW was not serviced.  Introduced GW Deleting state Signed-off-by: Leonid Chernin <leonidc@il.ibm.com>
    f78f7950dfa doc: Add Squid 19.2.0 release notes
    20e2948a375 mgr/cephadm: make ssh keepalive settings configurable
    461be1cd3d5 rgw/rados: guard against dir suggest during reshard
    190623575e8 mgr/smb: add support for new ceph vfs module
    5fc36f6463c ceph-volume: pass self.osd_id to create_id() call
    d7c7aa7328d osd/scrub: implement existing 'interval' as a distinct delay reason
    ec8f61ffa6b test/osd: fix 'recovery scrub' standalone test
    a84c3c45754 osd/scrub: add 'snap-trimming' as a distinct delay reason
    c0a52a59697 test/osd/scrub: set new scrub-related config options to test values
    70691410032 osd/scrub: add configuration parameters to control length of delay
    a94a0ad634d mgr/dashboard: Rephrase dedicated pool helper in rbd create form
    494ec06f301 osd/SnapMapper: introduce SnapMapper::update_snap_map
    5929a1f5374 crimson/osd/osd_operations/snaptrim_event: encapsulate new snaps in the pglog entry
    0697562bde4 crimson/osd: update snaps based on log entries on primary and replica
    5963dba0a34 crimson/osd/pg: convert PG::handle_rep_op to coroutine
    f7504b29c72 crimson/osd/pg: convert PG::handle_rep_op to logging macros
    abc6a47fc92 crimson/osd/pg: skip unnecessary stopping check in PG::handle_rep_op
    4811263eb81 crimson/osd/object_metadata_helper: take clone objects' clean regions into account when recovering them
    d6c51fe80f6 crimson/osd/ops_executer: set correct clean regions for CLONE pg log entry
    b2da7394ee0 qa/tests: fix test_list_enabled_modules timeout error
    e0d452f2c8f mgr/cephadm: bump grafana to 10.4.8
    196a73cbd4c cls/rgw: add a helper function for calls to cls_cxx_map_remove_key()
    2aa82539ede doc/rados/operations: Improve health-checks.rst
    332804bad58 doc/mds: improve wording
    dfca044b646 mgr/dashboard: Fix variable capitalization in embedded rbd-details panel
    710747031b7 ceph-volume: fix generic activation with raw osds
    1e97d4f6447 crimson/os/seastore: update the capacity calculation for lba/backref internal/leaf nodes
    b3521e00093 crimson/os/seastore: validate the node capacity for lba/backref node
    c99f6be8091 crimson/os/seastore: backref_node_meta_le_t should use paddr_le_t as template parameter
    37a6f1ca0aa crimson/os/seastore: add packed attribute to lba/backref map value
    5ac01659cf8 client: fix d_reclen for readdir
    0d81e721378 common/options: Change HDD OSD shard configuration defaults for mClock
    eda7eee9359 osd object store compaction on start wasn't working because of wrong boot sequence. More specifically compaction is called before authentication of monClient. Store compaction now is moved after authentication of monClient.
    da8e95c3923 qa/suites/nvmeof: wait for service "nvmeof.mypool.mygroup0"
    4d97b1aa6b5 qa/suites/nvmeof: increase hosts in cluster setup
    f628b13f3bb crimson/osd: write require_osd_release only when needed
    4594e38bf19 doc/rgw/d3n: pass cache dir volume to extra_container_args
    2ed818ebd8d qa: move nvmeof shell scripts to qa/workunits/nvmeof
    f4906299929 rgw/notifications: update release notes with fix to principalId
    7ca0d71eada mgr/dashboard: Wrong(half) uid is observed in dashboard
    84a30ba6b94 doc: Correct link to Prometheus docs
    6c25635be8c mgr/dashboard: carbon datatable minor bug fixes
    1091a9d516e mgr/dashboard: carbonize cephfs forms
    3d9ce6e1d86 crimson/os/seastore: cleanups to SeaStore::report_stats()
    0dafee51788 crimson/os/seastore/cache: report cache access stats
    c8a7d3d9494 crimson/os/seastore/cache: minor fix in get_stats()
    6bacf5e7616 crimson/os/seastore/cache: drop inaccurate cache_query_by_src
    20adfb08aad crimson/os/seastore/cache: monitor cache access by extent and trans
    339019377fb crimson/os/seastore/cache: add asserts
    c25fd3525e5 crimson/os/seastore/transaction_manager: minor cleanup
    befa65c8d20 crimson/os/seastore/cache: report cache index sizes
    8e58a52a408 librbd/migration: don't include ImageState.h in formats
    d9192b5aca1 librbd/migration: prune snapshot extents in RawFormat::list_snaps()
    5d64c9c5cda librbd: factor out prune_extents() from prune_parent_extents()
    11de53f36cf mgr/cephadm: revert SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67844
    f3a774c8df7 crimson/os/seastore/rbm: write merged-able ool extents at once
    cb28d391d0e python-common/ceph/deployment: revert SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67844
    9bfcb8e17db doc: update tests-integration-testing-teuthology-workflow.rst
    8e743fc6033 doc/radosgw: Improve config-ref.rst
    e0d8f7d363a false use-after-move on store
    bfbcb3c7f64 integer being interpreted as a character code when assigning to a string
    d7e68964d81 test/crimson: verify the backfill cancellation & resumption
    ae7469ae6b0 test/crimson: add event-type-checking next_round2() to BackfillFixture
    9ba4cd8bc39 crimson/osd: wire up backfill resumption
    8e5da475446 crimson/osd: BackfillMachine does support cancel and resume now
    15df7efca5c qa/rgw/multisite: add optional --default arg to 'realm pull'
    7bbaa316646 qa/rgw/multisite: fix spelling of is_default in realm configs
    e4157c8e98a qa/rgw/multisite: specify realm/zonegroup/zone args for 'account create'
    789b5f352c5 options/rgw: raise default rgw_max_listing_results=5000
    4b29809a163 options/rgw: use s3 names for listing operations
    621e5ce0fc7 tests/rbd-mirror: fixes BootstrapReplayer test
    7e02946a3f6 rbd: mention namespace in "rbd mirror pool" command descriptions
    98618aaa1c8 doc/ceph-volume: add spillover fix procedure
    0e7767a0052 cls/rbd: async methods for group snap list
    4f1d97918e0 cephadm: configuring prometheus endpoint for smb
    2c4096943ed cephadm: run smbmetrics as side-car container
    3cc0605988f cephadm: propagate smbmetrics image via config_blobs
    bb6e68a7a9b cephadm: samba metrics-exporter image
    db130628c0c ptl-tool.py: replace regex strings with raw string literal
    4f9289e11ae qa/tasks/ceph_manager: set-require-min-compat-client to squid for msr profiles
    e4f60eb438e mgr/dashboard: alerts module supports setting multiple email recipients
    5e64748927d doc/rbd: add namespace information for mirror commands
    508bba9b0d7 examples/rgw/boto3/README.md: update documentation for boto3 extension installation. Fixes: https://tracker.ceph.com/issues/67768
    570adc62352 src/test/rgw/bucket_notification/README.rst: use systemctl, update rabbitmq installation process. Fixes: https://tracker.ceph.com/issues/67768
    682cc90c4dd src/test/rgw/bucket_notification/README.rst: update RabbitMQ documentation. Fixes: https://tracker.ceph.com/issues/67768
    1b006f47b8f mgr/dashboard: Fix banner and scroll issue
    ac998b58487 qa/task: update alertmanager endpoints version
    b8f3db5b404 mgr/nfs: add additional tests for cmount_path & user_id deletion
    6b24da78abc qa: test 'ceph fs snapshot mirror ls' command
    e60d82ab7cf doc: update docs for 'fs snapshot mirror ls' command
    1c07a39a94d cephfs_mirror: ceph fs snapshot mirror ls command
    5d1ee140d05 mgr/dashboard: Update nvmeof microcopies
    dbebf1a3db6 qa/config/seastore: enable all subsystem debug
    cd7067adde3 crimson/osd/pg: fix missing priority argument
    9a2c9157984 test/rgw/notifications: also verify bucket notifications are updated correctly
    81fb5ae2432 forwarding reference passed to std::move()
    b863c93ef1a cephadm: emit warning if daemon's image is not to be used
    b377085c302 mgr/orchestrator: allow passing group to apply/add nvmeof commands
    e63d4b01e6b Revert "mgr/cephadm: migrate nvmeof specs without group field"
    3e5e85aadc1 Revert "mgr/orchestrator: require "group" field for nvmeof specs"
    d02b94d8200 mgr/nfs: ensure user_id for create_export_from_dict
    a09fd4210b1 test/erasure-code: increase ceph_erasure_code_benchmark default buffer size
    1e088468139 mailmap, githubmap, organisationmap: Add Shraddha Agrawal
    d944d320792 seastar: re-enable gate debug
    9fc02b203d5 crimson: use gate per shard for AlienStore and OSD
    e5a9cda3267 qa/suites/nvmeof/basic: add nvmeof_scalability test
    58d8be9fd83 qa: Expand nvmeof thrasher and add nvmeof_namespaces.yaml job
    c43542f7b9d crimson/osd: cancel ongoing pglog-based recoveries on recovery defering
    277423c15a7 qa: add test for data uninlining
    4e30d18a16b mds: handle mds_scrub_stats_review_period change via ScrubStack::handle_conf_change()
    73c4541da3b mds: add manual and auto purging scrub stats feature
    9459766868a mds: dump scrub stats during scrub status
    c7cd7f92e9f mds: collect and propagate individual scrub stats
    10fbd2dbf4a mds: save path on uninline failure
    23b0484bf52 mds: fail mds on journal failure
    b616159109a mds: refactor scrub and uninline accounting
    56caef2ceb5 mds: collect and propagate scrub status to rank 0
    eb1c04ee623 mds: move uninline failures to DamageTable
    671ad4ff9aa mds: add DamageTable infra to hold uninline failures
    15a4dbcc5b1 mds: add counters for uninlining
    97429f0a7da mds: add inline data info to ino dump command
    8970fef4ecc mds/scrub: move inline data to data pool object
    5f064a52707 rbd: clarify "rbd {group,} rename" command description
    76af1c0b1be mgr/dashboard: Zone details showing incorrect data for data pool values and compression info for Storage Classes
    1d6b4d4a507 mon/OSDMonitor: check crush features in crush_rule_create_erasure
    cb157b45c71 osd: use CEPH_FEATUREMASK_CRUSH_MSR, not CEPH_FEATURE_CRUSH_MSR
    2130115ec22 osd/OSDMap: require CRUSH_MSR if any rule is msr, even if used by no pool
    dc09d17eca9 qa/suites/orch: add test for smb with ctdb and cluster public ips
    9997a648d98 doc: add documentation for (cluster_)public_addrs options
    e2649091777 mgr/smb: add cluster public ip information to service spec
    5d5757e57aa mgr/smb: extend cluster resource type to define public ip addrs
    961fa851742 mgr/cephadm: pass public addresses for a cluster to cephadm binary
    e2839803b26 python-common/deployment: add a cluster public ip spec for smb
    d46f01e9f9a test/multisite: create default realm in multisite config
    782c88aa96c qa: ignore warnings variations
    af63b474254 doc: Update pendingreleasenotes for CephFS NFS exports
    d38858da360 doc: cmount_path documentation for CEPHFS nfs exports
    07a1a2ffd1a crimson/osd/pg: clear backfill_state when the PG goes clean
    027a7261f40 mgr/dashboard: improve prometheus service request handling
    1abb4113ca1 mgr/nfs: adopt API & unit tests for nfs exports
    9c70adf8080 mgr/nfs: add cmount_path
    86627f8bd33 crimson/os/seastore: ensure the block size of device is always greater than laddr_t::UNIT_SIZE
    2346cd912ee rbd-mirror: use correct ioctx for namespace
    bf694f2d89e crimson/osd/pg: add logs for repeating pulls
    4b9def89f14 crimson/osd/recovery_backend: restart object pulling for recoveries that are blocked pulling from down osds
    1df9dd97677 crimson/common/interruptible_future: new interruptor function `repeat_eagain`
    e6327c51745 cephadm: add support for cluster public ip addresses to smb daemon
    8c845bd4ee8 mgr/smb: simplify orch backend enablement
    574d3f8e735 doc/rgw/account: Handling notification topics when migrating an existing user into an account
    0de916dc04a osd/scrub: modify deep scrub interval randomization
    053e704cf43 test/rgw/notifications: integration test for migrating a topic to an account
    aa1ba5de6e7 test/rgw: include --rgw-realm/zonegroup/zone args for 'account create'
    c5a8afd56a8 test/rgw: test_multi.py creates realm with --default
    902cc0a71e9 rgw: ignore zoneless default realm when not configured
    e946c4f5cfd radosgw-admin: add 'realm default rm' command
    1fd58c769d6 test/rgw/notifications: non-functional change, remove trailing spaces
    31d1a827764 test/rgw/notifications: non-functional change, addressing comment typo s/iempty/empty/
    c9a6fedbfa9 qa/tasks/nvmeof.py: add nvmeof gw-group to deployment
    272f72bd6ff crimson/osd/osd_operations/snaptrim_event: encode OI_ATTR without oid
    e397216e0cd crimson/osd: drop PGBackend::mutate_object()
    c6552eb9b73 crimson/osd/pg: Seperate mutate_object from submit_transaction
    8d402e31f5e  mon/NVMeofGw*: fixing bugs - handle gw fast-reboot, proper handle of gw delete scenarios
    3c50ef6f5c0 mon/NVMeofGw*: support upgrades from prior out-of-tree nvmeofha implementation (nvmeof-reef)
    b9359a334f9 include/ceph_features: add NVMEOFHA feature bit
    337269d337b include/ceph_features: remove stray available marker
    ee84f8970ab crimson: Add support for bench osd command
    d00d1b52d50 doc/cephadm: how to get exact size_spec from device
    dffbdf45ae3 test/osd/scrub: fix searched-for log string
    78d0255949a osd/scrub: fix missing 'const' on some formatters
    503ebee8f9d test/osd/scrub: disable tests for deleted scrub functionality
    26cd41c503b test/osd: test new functionality added to the not-before queue
    5ed435bffd4 osd/scrub: delay both targets on some failures
    8aa48dc64ad osd/scrub: reverse OSDRestrictions flags polarity
    51a593e7e2d osd/scrub: fix the conditions for auto-repair scrubs
    0385fc4faf9 osd/scrub: remove requested_scrub_t::deep_scrub_on_error
    709302478ed qa/standalone/scrub: disable scrub_extended_sleep test
    48f2c21d4b4 osd/scrub: remove non-display usage of target's is_high_priority()
    159cfd29cf1 osd/scrub: remove 'calculated_to_deep' flag
    1f327081ef6 osd/scrub: modify after-repair-scrub triggering
    90176a2ec8b osd/scrub: fix ReplicaReservations ctor to use correct query
    8a57eb88cf3 osd/scrub: fix parameters validation on scrub start
    af17ae808fd osd/scrub: fix reserve_local()
    3cde1421504 osd/scrub: fix initiation path of operator-commanded scrubs
    75394147abd common/not_before_queue: extending the container's API
    4ec5d31c7f5 osd/scrub: OSD's scrub queue now holds SchedEntry-s
    d70c243e7be common/not_before_queue: move status_t out of container_t
    a30f3969111 common/not_before_queue: some spelling fixes
    63da6ea20fa common: add not_before_queue_t
    673f36099ea osd/scrub: modify ScrubJob to hold two SchedTarget-s
    0dc41857c77 nvmeof/NVMeofGwMonitorClient: use a separate mutex for beacons
    4f309603caa qa: drop XMLSTARLET variable, use xmlstarlet directly
    ebb51fdce5e mon: enable nvmeof gw monitor
    907e53aa852 rbd: "rbd bench" always writes the same byte
    d64e273de16 rgw: realm create only sets default realm on --default
    0baf2e4f19b qa/tasks: add a new cephadm_from_container feature to cephadm task
    451b70dedb9 rgw/multipart: use cls_version to avoid racing between part upload and multipart complete
    a0d604f8f37 rgw/sal: LCHead and LCEntry don't need abstraction
    43057b88538 doc/glossary: add "object storage"
    a7090783cf8 rgw/beast:  optimize for accept when meeting error in listenning
    90503682082 crimson/os/seastore/onode_manager: adapt block aligned laddr_t
    a97269ffd73 crimson/os/seastore: adapt laddr_t/laddr_offset_t get_byte_distance
    1c621b0a596 crimson/os/seastore: adapt laddr_offset_t::checked_to_laddr
    73d66a62f6d crimson/os/seastore/ObjectDataHandler: handle block not alinged input
    b2d604e581d crimson/os/seastore: construct laddr_t explicitly
    1469febff04 crimson/os/seastore: remove laddr_t alignment check
    f2fc9e75e56 crimson/os/seastore: make laddr_t block aligned
    9f23d741fca crimson/os/seastore/onode_manager: use laddr_le_t in laddr_packed_t
    fb2358c0a31 crimson/os/seastore: turn laddr_t into a struct
    2268923dd9f qa/rados/upgrade: ignore PG_DEGRADED
    daf4798086b qa: failfast mount for better performance
    69484828552 crimson/os/seastore: set dirty root version to 1 during replay
    7d58853d29a crimson/os/seastore/cache: report rewrite stats
    f74b8bb0f6a crimson/os/seastore: refine documents related to inplace rewrite
    46ccac41c9a crimson/os/seastore/transaction: refine version_stat_t as rewrite_stats_t
    0bd89aca384 crimson/os/seastore/onode_manager: remove hex format of laddr_t
    e174ece71d1 rgw: remove RGWRados::list_lc_progress()
    4e5f269c01d qa/distros: reinstall nvme-cli on centos 9 nodes
    190868a8f6f mds: move fscrypt_last_block to vector in mds_co mempool
    bf8f704e231 mds: move fscrypt_file inode_t metadata to mds_co mempool
    ed9481c1ac6 mds: move fscrypt_auth inode_t metadata to mds_co mempool
    814245ce789 include/buffer: add helpers for uint8_t vectors
    4a6800f1468 qa/workunits/rbd: exercise snap_{name,id} parsing in test_import_native_format()
    175ca1e0f09 doc/rbd: clarify when image_id is expected for import-only migration
    293d523ea69 librbd/migration: add external clusters support
    b5536d8b8d4 mgr/dashboard: Add Performance Details grafana charts for individual clusters in Manage-clusters page
    1bd56a73126 rgw/sts: fix for wrong certificate getting picked during validation of a web token signature.
    16d00041f6c rgw: changes to vstart.sh file - adding oidc-provider caps to user to run oidc provider iam tests in teuthology.
    55d17c042bb rgw/doc: adds documentation for UpdateOpenIDConnectProviderThumbprint.
    fae194c0962 rgw/doc: adds documentation for AddClientIDToOpenIDConnectProvider.
    37170a0d470 rgw/iam: adds implementation for iam UpdateOidcProviderThumbprint.
    70e187a8c2a rgw/iam: adds implementation for iam AddClientIdToOIDCProvider.
    a610c147a8f doc/releases: Correct mimic.rst
    344202582af crimson/os/cache: simplify lru stats data structures
    c068b63a044 crimson/os/cache: report dirty usage/in/out by trans and extent type
    e31058a295e crimson/os/seastore/cache: monitor dirty cache by extent and trans
    f7e4f0daa25 crimson/os/seastore/cache: extents added to dirty must be fully loaded
    b990397c6cf crimson/os/seastore/cache: cleanup dirty add/remove with consistent asserts
    fd662e5957e rgw: decrement qlen/qactive perf counters on error
    2b6e1dd90b7 osd/scrub: introducing the concept of a SchedEntry
    9296c2a36f4 qa: load all dirfrags before testing altname recovery
    43be486375f mgr/dashboard: can't scroll to the end of the page
    f011cc22627 qa: Add ignorelist entries for reef-x tests
    383091e89fb .gitmodules: remove shallow=true config from nvmeof/gateway
    8cc3a35c2dc cephadm: mount nvmeof certs into container
    1c895979579 doc: add clustering related items to smb docs
    daf405ea5ba qa/suites/orch: add a pair of teuthology tests for ctdb smb clusters
    84d5d8b356d qa/suites/orch: old smb tests need placement count 1 to avoid using clustering
    19e854cf367 mgr/cephadm: enable the smb service to prevent stray ctdb services
    33e1b119569 mgr/cephadm: extend stray service detection with a general ignore hook
    d84c7b36cf0 mgr/cephadm: move logic determining name in stray func
    a64e1d57ec1 mgr/smb: enable clustering when setting up a cluster
    4ef7a48e559 mgr/smb: add a cluster resource field to manage clustering
    7272e5b6188 mgr/cephadm: configure ctdb cluster metadata from cephadm smb service
    cd2d01e9f51 mgr/smb: add a python module to help manage the ctdb cluster
    6c36f61b227 mgr/smb: add function to parse rados psuedo-uri values
    efe6b3989b1 mgr/smb: add support for rados locks to rados store
    fd0812f9e56 mgr/cephadm: improve key management of smb service
    3e4926a5b86 python-common: add clustering related params to SMBSpec
    ef3b1252101 cephadm: add ctdb support to smb daemon type
    9c06ff345d5 cephadm: allow longer subcomponent names
    f6cab59a8f7 cephadm: add a new context getter for rank
    d20824272ba mgr/cephadm: change SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67629
    d18e6fb96ee python-common/ceph/deployment: change SPDK RPC fields in nvmeof configuration Fixes https://tracker.ceph.com/issues/67629
    f01d7a8d5b8 doc/rados: document unfound object cache-tiering scenario
    4722fe742c6 warn when QAT switches to software [de]compression
    dd7e8bbde6d doc/mgr/restful: update max_request config
    7b251cad2c2 PendingReleaseNotes: Adding note about rest module change and adding max_request option
    58281c19171 mgr/rest: Trim request array and limit size
    c90cf8460e0 mgr/dashboard: Add group field in nvmeof service form
    db9825d3142 qa: make all replayer threads busy and query 'syncing' status
    bd78bdca3d7 cephfs_mirror: Fixes 'Bad file descriptor' showing during test_cephfs_mirror_cancel_mirroring_and_readd execution
    66620ccb32b crimson/osd/pg: add PGLogEntryHandler::remove()
    32c9183b1f8 crimson/osd/pg: add PG::remove_object_maybe_snapmapped()
    9f27bde0b99 qa/cephfs: add test to verify backtrace update failure on deleted data pool
    d1d3a8c7c80 mds: batch backtrace updates by pool-id when expiring a log segment
    e5728c40b37 mds: dump log segment in segment expiry callback
    5639fa298dc mds: dump log segment end along with offset
    f956fbcf960 crimson/common/tri_mutex: also wake up waiters when demoting
    82bc7eb02ba rgw/multisite: initialize sync_status in RGWDataFullSyncSingleEntryCR ctor
    064b524815c test/rgw/notifications: don't check for full queue if topics expired
    04330f5df92 mgr/cephadm: add "original_weight" parameter to OSD class
    75ff2b8b552 rgw: d3n: set access permissions for the D3N cache directory when creating it
    bbcb820c779 qa: barbican: restrict python packages with upper-constraints
    bed40e67482 crimson/osd/osd_operations/client_requests: add the actual unfound oid into PGRecovery::unfound, instead of heads
    c37ad2b4373 client: calls to _ll_fh_exists() should hold client_lock
    da6f3c4523d Revert "crimson/os/seastore: wait ool writes in DeviceSubmission phase"
    79866621574 librbd/migration: move away from util::create_ioctx() in NativeFormat
    57a8c535cca common/config: export CEPH_CONF_FILE_DEFAULT
    df2189acc5d librbd: RefreshParentRequest::m_parent_snap_id is unused
    23cd20e0d55 librbd: assert on parent in ImageCtx destructor
    409d36c7087 qa/tasks/qemu: remove hard-coding of cluster name
    4f8dc834cc6 qa/tasks/rbd: support non-default ceph clusters
    1ee644d9710 librbd/migration: don't clone when flattening
    fda2db5ac7b doc: Harmonize 'mountpoint'
    f2fdffa6863 crimson/osd/replicated_backend: mark all pglog entries as unrollbackable when submitting transactions
    a0f81cfb509 doc/cephfs: s/mountpoint/mount point/
    57ed73eaa69 doc/cephfs: s/mountpoint/mount point/
    cdd75b499f7 test/rgw/notification: use real ip address instead of localhost
    8a71aea942d rgw: load copy source bucket attrs in putobj
    c307a91f258 rgw/auth: Remove Keystone v2.0 API support
    0761463250a rgw/sts: correcting the error message returned for an sts key to indicate that the key needs to be alphanumeric.
    b5bfc4526a2 client: flush the caps release in filesystem sync
    dee230c26d4 rgw/notify: process_queue() constructs wait tokens when spawning
    0e000937710 rgw/http: finish_request() after logging errors
    db433a62e6b crimson/osd/backfill_state: support backfilling cancellation
    0c1ec1a1fac crimson/osd/pg_recovery: reset backfill_state when backfill finished
    24336088078 crimson/os/seastore/cache: report lru usage/in/out with trans and extent type
    b9c2fb78149 crimson/os/seastore: cleanup periodical reporting
    800b3528bba crimson/os/seastore/cache/lru: renames
    2dddd07193c crimson/os/seastore/cache: refine lru logics
    bd6e6f00306 crimson/os/seastore: move counter_by_extent_t definition
    280dd13df01 crimson/os/seastore/seastore_types: unify checks to the extent types
    b480ac99551 crimson/osd/osd: update heartbeat peers after committing osdmaps
    71d38e415e8 crimson/osd/osd: mark down connections of the new down osds
    9a45a0bb635 crimson/net/Messenger: add the "mark_down" interface
    1ca89e6ca3d doc/glossary: add "flapping OSD"
    8f226fdc770 mgr/dashboard: carbon datatables impr and cleanups
    ed0caa4ad13 CMakeLists: set FMT_INSTALL OFF
    5c3dddf5e71 mds: add compile time checks for sortedness
    6e257b5618d mds: sort conf keys
    d12ba11741d doc/rgw/notification: persistent notification queue full behavior
    677affcbf54 mgr/cephadm: adding oauth2-proxy cephadm service
    24d98f4842b rgw/notifications: fixing radosgw-admin notification json
    a6b95a5a69f qa/cephfs: update a test in test_volumes.py
    d6c51a72211 ceph.spec.in: spec files comments
    21fe5264f70 osd: use an hex-only format for snap_id when creating snapmapper entries
    4e3146c61ff test/common/test_hobject: fmt fixes
    63594b2824e crimson: fmt 11 fixes
    755767fe956 seastar: cherry-pick fmt 11 fixes
    bafdf390313 osd/scrub: missing 'const' in scrubber_common.h formatter
    0e8da230413 osd: fix scrub_backend formatters
    3db48acaa49 osd,common: add explicit formatter for shard_id_t
    7f77d50baa4 common,include,msg: fmt 11 fixes
    e5af3c65efd fmt: bump up version to 11.0.2
    645cc6e6a83 doc/cephfs: add release notes and docs for clone progress report
    e0c85b86ae4 qa/cephfs: add tests for clone progress
    92aecabdb21 qa/cephfs: return size of data generated in _do_subvolume_io()
    db0e736d4a2 qa/cephfs: use safe_while in test_volumes.py
    9f60848df49 qa/cephfs: add method to run and get shell cmd stdout
    10949bf68d2 qa/cephfs: improvements for helper methods for clone state
    65b789edfb5 mgr/vol: show clone progress in "ceph status" output
    d7bc8282c86 mgr/vol: show progress in "fs clone status" output
    96ca322c62e crimson/os/seastore/cache: pass missing src to touch_extent()
    aa86e49c841 crimson/os/seastore/cache: cleanup add_extent()
    0d924258b36 crimson/os/seastore/cache: cleanup remove_from_dirty()
    dba31242e73 crimson/os/seastore: drop duplicated calls to touch_extent()
    af75b2fc3ae crimson/os/seastore/cached_extent: rename primary_ref_list
    9a46c52387f qa: do the set/get attribute on the remote filesystem
    57cf4d424d1 mgr/dashboard: fix multi-cluster usage bar error after carbon changes
    2d5715c00f0 crimson/os/seastore/btree: fix minor corner case issue
    729fd8e25ff ceph-volume: add "packaging" to install_requires
    e225b127eaf qa/suites/upgrade: ignore MON_DOWN and PG_AVAILABILITY warnings in upgrade tests
    42721c03ee6 mgr/orchestrator: fix encrypted flag handling in orch daemon add osd
    9ea03123a16 rbd: fix CLI output of `rbd group snap info` command
    f38429b857d qa/s3tests: configure tenant name for 's3 tenant' section
    cd03946a931 mgr/dashboard: replace ngx-datatable by carbon
    a66b9df483e test/store_test: fix assertions due to unclosed collection refs.
    41c5dbe9420 qa/cephadm: add group param when applying nvmeof
    2a6b105b8ae mgr/cephadm: make nvme-gw adds be able to handle multiple services/groups
    d7b00eab08b mgr/cephadm: migrate nvmeof specs without group field
    f6d552d7c77 mgr/orchestrator: require "group" field for nvmeof specs
    ce28c8ecefb mgr/cephadm: add ability for cephadm to create self-signed cert for RGW
    be725040bdf ceph-volume: switch over to new disk sorting behavior by default
    2e80471cf7c mgr/cephadm: bump DEFAULT_NVMEOF_IMAGE to 1.2.17
    de4b649fc31 osd/config: fix non zero return code when needed during early config
    157c7083254 mgr/dashboard: replace individual cluster's capacity info with Usage bar in Multi-Cluster
    8074a0abe54 common/version: ceph-osd --version to specify crimson
    a6f311a5f3b doc/radosgw: improve qat-accel.rst
    3f48bcdb617 mds: encode quiesce payload on demand
    7f2324fb5f2 python-common/service_spec: fix zonegroup_hostnames type
    2c9e7f5a48b mds: print quiesce message name in debug log
    53df1639020 mds: fix spelling typo
    240a328ae86 rgw: increase log level for enoent caused by clients
    1de14a5e30c client: use vectors for context lists
    aa3bdae2314 doc/cephfs: improve cache-configuration.rst
    d7377dac503 rgw: revert account-related changes to get_iam_policy_from_attr()
    0949b410433 doc/cephfs: improve "layout fields" text
    2e0e469195f mon/thrasher: set stopping
    0c423e1d81a test: test_rados_tools compare output without trimming newline
    d58f32726be uadk: add unit tests
    e93c7e09fab uadk: move numactl dependency
    2b78a5b3147 client: Prevent race condition when printing Inode in ll_sync_inode
    317465c07b3 uadk: add uadk support
    180378b5ade doc:update e-mail addresses governance
    fec896b301f ceph-volume: refactor device path handling for LVM lookups
    88836135fd0 ceph-volume: add TPM2 token enrollment support for encrypted OSDs
    ce10e5e424d doc: mention the peer status failed when snapshot created on the remote filesystem.
    db65867f776 qa: add test_cephfs_mirror_remote_snap_corrupt_fails_synced_snapshot
    8055255c73f cephfs_mirror: update peer status for invalid metadata in remote snapshot
    f446f4c1d46 blk/kerneldevice: add perfcounter for block async discard
    d51e251be1e src/mon/PGMap: raise POOL_APP_NOT_ENABLED after some time for new pool
    857a63f2080 rgw/rados: zero-init shard_count in RGWBucket::check_index_unlinked()
    24f34caf9e7 compressor: switch out of get_current_ptr() for the sake of const-stricter bufferlist
    e8126bf2f64 qa: cover a custom object size in krbd_discard_granularity.t
    144270eb737 qa: adjust expected io_opt in krbd_discard_granularity.t
    d8ce3dae808 mgr/dashboard: fix ceph-users api doc
    dd10b32b61e crimson/osd/pg: fix wrong lambda capture of transactions in `PG::submit_error_log()`
    5fb45e5fb83 mgr/nfs: scrape nfs monitoring endpoint
    bf26274ae47 doc/cephfs: add cache pressure information
    4de57e904cf PGMap: remove pool max_avail scale factor
    f6cf38cd630 doc: doc/dev/osd_internals/erasure_coding/enhancements.rst
    90835d66b0c os/bluestore: passing device type name parameter to kernel device
    f90af12de37 crimson/osd/osd_operations/client_request: check already complete in the "check_already_complete_get_obc" phase
    a7e8779be73 doc/README.md - add "tip" alert styling
    65734ae92b6 crimson/.../alien_store: clear coll_map in umount rather than stop
    a2f85f0588a crimson/osd/osd.cc: convert fmt::print to INFO in OSD::mkfs
    dc6825e81ad crimson/osd/osd.cc: convert OSD::mkfs to a coroutine
    aa1d8cf4fa3 docs/rados/operations/stretch-mode: warn device class is not supported
    ebf66af8278 qa: wait for file creation before changing mode
    cd50b3fec18 mgr/dashboard: fix typo in Multi-Cluster > Manager Cluster to Manage Clusters
    943e9024f60 crimson/osd/osd_operations/client_request: merge recover_missing, recover_missing_lock_obc and recover_missing_snaps into a single OrderedConcurrentPhase
    1b2e4d9ab06 crimson/osd/osd_operations: make the "recover_missing" phase concurrent
    59857a78fa4 os/bluestore: Write_v2 changes
    1b24c7cb53f os/bluestore: Write_v2 changes
    7b0d27e12ef tests/bluestore_types: Fixed data generation bluestore_blob_t::release_extents
    8bd233bef5a qa/bluestore: Add write_v1/v2 selection
    7de8a6c42b9 os/bluestore: Add conf.bluestore_write_v2_random
    3b5b7fa4fce os/bluestore: Add compression fallback
    5326fed8328 os/bluestore: Writer, fix find_mutable_blob
    938a0f183ce os/bluestore: Writer, improved calculation of need_size
    d2fda6c852d os/bluestore: Writer, fix for clang
    255ad42da48 crimson/alienstore: New write path & debug
    c989d743a64 os/bluestore: Add Writer::_crop_allocs_to_io
    1c5fd0fc47a os/bluestore: Fix after rebase
    96065b1f59f os/bluestore: Review fixes to Writer
    22fa03e93cb os/bluestore: Add perf counters to Writer
    9e847a917f4 os/bluestore: Writer, fix _try_reuse_allocated_l/r
    83d6a4e8dd5 os/bluestore: Cleanup on bluestore_blob_t::release_extents
    d19b998dd71 os/bluestore: Writer, rename _deferred_decision -> _defer_or_allocate
    bf824f790b1 os/bluestore: Review fixes of Writer
    55004549f8e os/bluestore: Fix _try_reuse_allocated_r in Writer.cc
    3f4bb3ff9d5 os/bluestore: Modify _write_expand_l/r
    df43f472268 os/bluestore: Add bluestore_write_v2 conf variable
    f0c82b37201 os/bluestore: Added new write path with BlueStore
    03bac5d64ce os/bluestore: Add "write_lat" perf counter
    ad11abee6d4 os/bluestore: Add unit test for BlueStore::Writer
    193c8fb1537 os/bluestore: Introducing BlueStore::Writer
    21454afa688 os/bluestore: Functions to manipulate Blob
    ca0d589b0cd os/bluestore: Add csum_type to WriteContext
    42cb03425bb tests/bluestore_types: Fix % 0 in tests
    00b98788028 os/bluestore: Unit tests for punch_hole_2
    93bb26360a6 os/bluestore: Refactor of write path. New punch_hole_2 function.
    1f6fc570abb os/bluestore: Add ExtentMap::split_at and ExtentMap::maybe_split_at
    8e62d0c89a6 os/bluestore: Add bluestore_blob_use_tracker_t::put_simple
    5ef9d11cb5b include/intarith: add p2remain
    e51ec4bdb14 os/bluestore: New variant of bluestore_blob_t::release_extents
    f400cb19a3a os/bluestore: Fix debug after rebase
    c4fa859535b os/bluestore: Add ability to partially print Onode
    55c6182cd45 os/bluestore: Move OBJECT_MAX_SIZE
    93a8ab11fb7 os/bluestore: Blob, Onode debug printout
    c435cd260a7 os/bluestore: small improvement for printers
    66e3aa7369a os/bluestore: Add improved printer for Onode
    d47103376c0 os/bluestore: Add printing buffers to Blob
    03dbd42c564 os/bluestore: Add improved printer for Extent
    89c211281b0 os/bluestore: Add improved printer for Blob
    0000c344740 librbd/migration: make ImageDispatch handle encryption for non-native formats
    b20a897061f librbd: don't make an extra copy of image_extents in C_ImageReadRequest ctor
    82d26909cb1 qa/workunits/rbd: perform cleanup in test_clone_encryption()
    830cbee7a5f qa/workunits/rbd: no need to chmod in luks-encryption.sh
    100d1b63bd5 rgw/beast: spawn a cancellable coroutine for the accept loop
    b6f8f83470f qa: enable the git clone debug logs
    1d25782903e qa: increase the http.maxRequestBuffer to 100MB
    ae3faac004e qa/cephfs: fix TestRenameCommand and unmount the clinet before failing fs
    42358c6b1af doc/cephadm/smb: Add missing user_sources option to service spec
    19dbe686dcf crimson/os/seastore: report outstanding requests per phase
    c9e423facea crimson/os/seastore: wait ool writes in DeviceSubmission phase
    140e77638dc doc: documenting the feature that scrub clear the entries from damage table on repair
    c105a45c900 doc/README.md - allocate information correctly
    103d65ea678 doc/dev/peering: Change acting set num
    9b8d72f15a9 RGW - Zipper: pull in upstream fix for zpp_bits
    5c5e6724c63 script/: add cpu-map.sh to aid manual selection of CPU cores for threads for profiling
    9f355b681b3 mgr/vol: improvements and cleanup for "list_volumes()"
    8c536f78907 mgr/vol: move reusable parts from async_cloner
    a035b5a22fb thrashers: standardize stop and join method names
    21b4b89e528 qa/tasks: watchdog terminate thrasher
    bc45e9a77cf cls/rbd: add functions to get group snap orders
    c2ca0561bcb crimson/os/seastore/transaction: cleanup, drop unused getters
    a6cac66baa7 crimson/os/seastore/transaction: rename ool_block_lists
    1c9112091ce crimson/os/seastore/epm: RandomBlockOolWriter to update extents upon submitting writes
    382357dcd4f qa: simplify postmerge construction
    126184fcc98 qa/crontab: force priority for main rados nightlies
    fe4f03dfcc5 rgw/notify: visit() returns copy of owner string
    6c7253be6f6 qa/mgr/dashboard: fix test race condition
    7f723017454         cephfs: Fixed a bug that read operation hung in Client::get_caps when the Fc caps is wanted but revoked by the mds, and the Fc cap refs is no-zero
    56feeb4373e os/bluestore: BluestoreRepairTest ch cleanup
    bdcc7dab995 blk/kernel: Fix uninitialized discard_stop
    3662bc7b3dc cls/rbd: save max group snap order
    a71990f70f5 tools/rados: Fix extra NL in getxattr
    ec6224db3e5 cls/rbd: save group snapshot creation order in a new key
    1f21057e416 doc/README.md - add ordered list
    e26545f86f9 PeeringState.cc: Only populate want_acting when num_osds < bucket_max
    d595505eea3 librbd: Reduce use of atomics in librbd throttling
    03c839e14fa test/cls_2pc_queue: prevent list+remove race between consumers
    8c6cedea0af crimson/os/seastore/cache: introduce maybe_add_to_read_set()
    6933f4c9980 crimson/os/seastore/cache: verify pending extents in get_extent_viewable_by_trans()
    a5329cbbaa2 crimson/os/seastore: consider segment_header_t::modify_time as the segments' modify_time for no-tail OOL segments
    48ff8f0e73b crimson/os/seastore/epm: SegmentedOolWriter to update ool paddr upon submitting writes
    bcbc069ae03 crimson/os/seastore/record_submitter: return record-base immediately upon submit
    8c494150bb0 crimson/os/seastore/record_submitter: cleanup around write_base
    ab608c0fa24 crimson/os/seastore/record_submitter: minor cleanups
    73a7ecfe265 crimson/os/seastore/record_submitter: refactor to make write base available
    6c4e50a8bf0 crimson/os/seastore/record_submitter: refactor JournalAllocator::write()
    dc366fafec0 crimson/osd: send empty transactions to backfill targets that haven't backfilled the objects yet
    484e9d2b9d8 doc/glossary: add "ceph-ansible"
    8164efe5d09 qa/cephadm: use cephadm ceph-volume directly to zap devs
    4fa39268921 cephadm: limit mounts for shell and ceph-volume commands
    4424f55c760 rgw/rados: RGWRados::Object::Read::read() uses rgw_rados_operate()
    4475fcbbe69 rgw/rados: delete_objs_inline() uses rgw_rados_operate()
    19399def5bd mgr/cephadm: add SPDK log level to nvmeof configuration Fixes https://tracker.ceph.com/issues/67258
    d3cc2377f4f python-common/ceph/deployment: add SPDK log level to nvmeof configuration Fixes https://tracker.ceph.com/issues/67258
    a24f3cf1e90 src/osd: pg stat are not synced between osds after deep-scrub. So if primary osd is killed, next primary osd has wrong stats. Reason behind it is PeeringState::proc_primary_info does not process or update any pg stats.
    214328d9daa common/Formatter: dump inf/nan as null
    c052e12f35a os/bluestore: remove unused functions
    d95e8511eb6 mgr/cephadm: fixing Grafana domain handling
    c30cdbd14dd qa/cephfs: update ignorelist
    f4b3943fb2e mgr/dashboard: Dashboard not showing Object/Overview correctly.
    a81d36caadf crimson/os/seastore/cache: adjust get_extent_viewable_by_trans()
    2bb39c50f3a crimson/os/seastore/cached_extent: cleanups and comments
    3d056148d5d crimson/os/seastore/cache: add comments about the correct usage
    563950f8b0d crimson/os/seastore: fix names get_extents_if_live
    c69f860ffee mgr/dashboard: make multi-cluster context switcher scrollable if we have many entries in it
    9607b66e97f doc/cephfs: edit "Layout Fields" text
    d5e013f5928 mon/NVMeofGwSerialize.h: tabbing, bracing, line length fixes
    e0f0469f14e mon/NVMeofGwTypes.h: tabbing, bracing, line length fixes
    bff9dd47068 mon/NVMeofGwMon.cc: tabbing, line length, formatting
    1f470f0388b mon/NVMeofGwMon.h: tabbing, line length, formatting
    58d16c73845 mon/NVMeofGwMap.h: tabbing, line length, formatting
    8bf309ecd7b mon/NVMeofGwMap.cc: tabbing, line length, formatting
    5890a156524 doc: Improve doc/radosgw/placement.rst
    89a547822d6 submodule: remove the boost_redis submodule again (again)
    9dc630b00db mgr/cephadm: add SSL support to ceph-exporter
    862a38e3386 mgr/cephadm: adding mTLS support
    039bd045563 rgwlc: fix typo in getlc (ObjectSizeGreaterThan)
    beb4d2286ac osd: fix partial reading during multi-region EC reads
    30921272dde workunit/dencoder: fix corpus test for backword and forward compability
    02496a86650 corpus: update forward incompat for cls_rgw_reshard_* ceph-object-corpus submodule Fixes: https://tracker.ceph.com/issues/67263 Signed-off-by: NitzanMordhai <nmordech@redhat.com>
    6911df2c834 nvmeof gw monitor: disable by default
    d0c4182bf57 qa/suites/rbd/nvmeof: add multi-subsystem setup and thrash test
    2946b195edf mgr/cephadm: ceph nvmeof monitor support
    bb75ddee819 mon: add NVMe-oF gateway monitor and HA doc
    5843c6b04ba mon: add NVMe-oF gateway monitor and HA
    80edcd40e80 debian pkg: record python3-packaging dependency for ceph-volume
    cb421a46636 RGW|BN: fix lifecycle test and http server issue
    0596664c402 mgr/cephadm: introducing new cmd to generate self-signed certs
    25a4f2adada mgr/cephadm: introducing cert_mgr new class to centralize certs mgmt
    7e08760a0e5 mds: add the event when creating the batch head
    5d8aa5245cb mds: print the path depth to help debug mds issue
    1a76464999c doc/glossary: add "Prometheus"
    6e7bc284e63 bluestore: record omapiter init latency if one object has many `internal keys` at its omap beginning, it maybe very slow for the underlying seek to reach the first `user key` when initializing a omapiter. this may stuck osd when build_push_op, seek recovering object's first omap key again and again.
    62562ec65e3 doc/rados/operations: remove vanity cluster name reference from crush-map.rst
    b6c7f69b804 librbd/migration: make FormatInterface::read() void again
    63159d6b431 librbd/migration: close source image in OpenSourceImageRequest
    cacf7ca9418 librbd/migration: don't instantiate NativeFormat, handle it via dispatch
    3bbf1f5ddba librbd/migration/NativeFormat: refactor source spec parsing
    1ba9a32598f librbd/migration/NativeFormat: do pool lookup instead of creating io_ctx
    f172fb97be9 librbd/migration: make SourceSpecBuilder::parse_source_spec() static
    c14356b1f9e librbd/migration/OpenSourceImageRequest: rename io_ctx -> dst_io_ctx
    e99fc5c82fd doc/cephadm: edit "Using Custom Images"
    b81d6af1b48 doc/dev: improve basic-workflow.rst
    2e2adb2719c client: Fix leading / issue with mds_check_access
    983f893fb93 qa: Add mds caps test for testing fs read and a path rw
    789df2ce38f librbd/migration: massage some error messages
    b92ad49a355 librbd/api: clean up leftovers in Migration::prepare_import()
    872adf5ac5e qa/standalone/scrub: fix the searched-for text for snaps decode errors
    4f321056dec RGW - Add Multipart and Versioned to POSIXDriver
    091625e6fee doc: update 'sync_bytes' in peer status
    3fd00ebc578 doc: update current_syncing_snap in peer status
    7c32d159965 doc: document labelled perf metrics for mds/cephfs-mirror
    6efe049dfc9 mgr/dashboard: carbonize block forms
    5535e72364f qa: check last successful snapshot sync metrics in perf counters
    fb985c4830a cephfs_mirror: provide metrics for last successful snapshot sync
    cc721a55bd3 cephfs_mirror: show 'sync_bytes' in peer status
    2c8802a3dd5 qa: some test set `refuse_client_session`, so the cluster log is expected
    ccb292c818b osdmon: Remove any pg_upmap_primary mapping during remove a pool
    d1c049d24be doc/glossary: add "ceph-fuse" entry
    66fb04fa55f mgr/dashboard: carbonize breadcrums
    7d55db51b44 mgr/dashboard: carbonize general components and styles
    d14119e37e0 doc/cephfs: edit "Dynamic Subtree Partitioning"
    5925880d178 tools/ceph_objecstore_tool: cleanup collection handle on exit
    cbdecc1f34d crimson/osd: clear ondisk temp objects on startup
    1251345231f crimson/common/tri_mutex: avoid hobject_t formatting
    12f98a23598 crimson/os/seastore/circular_journal_space: cleanup, write_ertr vs submit_ertr
    ff17a966aed crimson/os/seastore/epm: add checks in ool writes about the writer type
    a5cea810cce crimson/os/seastore/epm: fix an incorrect type
    724f52cc15e crimson/os/seastore/block: fix log
    74b03a8cb2f doc/cephfs: fix "OSD capabilities" link
    c5a6226f06c script/backport-create-issue: handle ResourceAttrError when getting CF_TAGS
    f5a581b9806 mgr/dashboard: support rgw user level NFS export
    8452eb88904 test/store_test: Make ceph_test_objectstore run faster
    f8becaaedb2 test: add a test for `fs set down` on online cluster
    6bfce64f7e9 mon: fix `fs set down` to adjust max_mds only when cluster is not down
    e2fb2c63ea2 reshard: limiting the number of log to be recorded
    98723d51b96 doc/radosgw/qat-accel: Update and Add QATlib information
    1f82dc8b8f1 mgr/dashboard: Add initiators add/update in dashboard
    b827fe706a3 crimson/os/seastore/lba_manager: correct the range end of lba mappings
    039377fa290 mgr/dashboard: Changes for Sign out text
    6bb5ce94c6a doc/cephfs: fix "file layouts" link
    50390af720b mon/scrub: print detail if get error from store
    cec5e83d8ee test/rgw: add test for logrecord reshard
    72997836c2f reshard: guarantee no duplicated index entries exist before starting reshard
    ab3d3aca8a0 rgw/posix: name the lock_guard in BucketCacheEntry::reclaim()
    6bfa726fafe mds: only authpin on wrlock when not a locallock
    2872c75f184 rgw/async/notifications: use common async waiter in pubsub push
    2e83b77c9f6 doc/rbd/rbd-exclusive-locks: mention incompatibility with advisory locks
    fcae1041c58 cephadm: do not hard code samba debuglevel 6
    64f6b5d1d7e os/bluestore: Fix unbalanced new[]/delete[] in read_bdev_label functions
    1ec999cd473 mds: remove the misleading and redundant logs
    3f62db0393b qa/crontab: update frequency and priority for rados nightlies
    f03d0cec0fc common/async: spawn_throttle wraps call to asio::spawn()
    21a25f41240 doc/releases: add release note about thread creation incompatibility
    7e5d28f4423 common/async: add parallel_for_each() algorithm
    3c62daf69e9 common/async: add co_spawn_group template for fork-join parallelism
    d192ca79862 common/async: implement max_concurrent_for_each() for awaitable
    9217fcc5558 common/async: add co_throttle for bounded concurrency with c++20 coroutines
    057c2a2a8a1 script/backport-create-issue: add debug messages for retry
    ba7b6ec2157 mgr/dashboard: use grafana server instead of grafana-server in grafana 10.4.0
    d8e1567cec0 crimson/osd/recovery_backend: set interruption to recovery related promises, instead of system_error
    80be0ae0aae crimson/osd/osd_operations/client_request: hang client requests when the object is missing in the whole cluster
    4ddae3a7928 librbd: Modify locks and atomics in AioCompletion to improve performance
    2a9f92f2347 qa/suites/krbd: override extra_system_packages directly on install task
    8fee41da8b8 qa/suites/krbd: stress test for recovering from watch errors for -o exclusive
    d3dd910f13e cls/rbd: make group_snap_list return error if it failed
    2e8c0c23e37 script/backport-create-issue: retry without if assignee is invalid
    6dfb20b2c3c mgr/zabbix: fix invalid escape sequence
    6b91f8ecede mgr/rook: fix ivalid escape sequence
    1458405b898 mgr/osd_perf_query: fix ivalid escape sequence
    e12e92c50fd crimson/osd: execute PGListener async operations in order
    8389471b3a9 crimson/.../alien_store: access coll_map under coll_map_lock
    924384f5da8 crimson/.../alien_store: clear coll_map on stop()
    e2b75b56010 crimson/.../alien_store: update coll_map from alien tp
    618bef54243 crimson/.../alien_store: factor out get_alien_coll_ref
    443040bc66f crimson/.../alien_store: add comment explaining coll_map
    4d707415ab9 qa: suppress __trans_list_add valgrind warning
    ee52b19adc5 crimson/.../shard_services: add logging to local and remote reservers
    2b3a1783843 crimson/.../pg: add logging to most PeeringState::Listener implementations
    cdef41d9081 qa: generate valgrind suppressions
    627c466915a test/allocsim: replayer merge files by timestmap
    8476a02bed8 cls/rgw: define lc ops in terms of ObjectOperation instead of IoCtx
    3f11eb905f9 rgw/sal: add dpp and optional_yield to lifecycle ops
    32f58e70d4c cls/rgw: gc_list uses ObjectOperation instead of IoCtx
    00063a964ad kv/RocksDBStore: add kv_stats function to print all CF info
    01a9cfba444 shrink the object-size used for orphan-list test by a factor of 100 from 5100MB -> 51MB
    6f9f52033b0 test/cls_2pc_queue: fix multi-threaded access to non-atomic variables
    6be7a9cc77a blk/aio: fix compile issue when HAVE_LIBURING isn't defined
    4a4f9a3e994 qa/rados/dashboard: Add PG_DEGRADED to ignorelist
    e5ccce14c4b rbd: add group snap info command
    da784bc14ef Fixes: https://tracker.ceph.com/issues/67070
    56504d2ad92 kv/rocksdb: return error for dump_objectstore_kv_stats asok command if relevant config settings result in no output.
    02d5a6a3371 doc/dev_guide: add needs-upgrade-testing label info
    92fea64c1f2 doc/dev/crimson: clarify and rearrange for userability
    8ee137f662b qa/suites/rados: Reduced BlueStore log levels
    811f2979f53 os/bluestore: Modify read_meta()
    721482adc0d os/bluestore: fix fsck fixing multiple bdev label (superblock)
    4adb942a648 os/bluestore: Review fixes
    3c2574c3aa1 test/store_test: Add double check for repair
    4927876f7a4 ceph-bluestore-tool: Fix set-label-key and rm-label-key
    7bbf2a897a0 os/bluestore: multiple bdev label (superblock) fixes
    6acad6d19e9 os/bluestore: Adapt unittest for multi bdev label
    eac365cd1a7 os/bluestore: Small fix to mkfs
    fe764c4fd8d os/bluestore: Made read/write_meta bdev aware
    9b30da39a0d os/bluestore: Add read/write_bdev_label functions
    8a825e133a7 os/bluestore: Modify bdev-label functions operate on bdev
    0891702f23a os/bluestore: Bluefs, expand api for getting BlockDevice on BD/WAL
    e1cc40b133b os/bluestore: Minor fixes
    b89fb919160 os/bluestore: Update test for resilience of bdev label against bad UUID
    82b2ec7c2dd os/bluestore: Only accept bdev labels with our UUID
    a3b044bb9df os/bluestore: Split check* and set* _main_bdev_label
    66070915479 os/bluestore: Adapt multi bdev label tests for !bdev->supported_bdev_label()
    c8d6ab7edd0 os/bluestore: Make bdev multi label compatible with !bdev->supported_bdev_label()
    12236c37351 os/bluestore: Fix of bdev label fsck
    b53a6d04295 os/bluestore: Tests for multi bdev label feature
    f6f5f898f15 os/bluestore: Fix of funny constructor misuse
    9ab22a84ccd os/bluestore: Fix problem with marking unavailable bdev label positions
    140dc2e74d7 os/bluestore: Fix repair for multi label
    b24a4945a6c os/bluestore: Add ability to upgrade into multi label
    733a4513e56 os/bluestore: Hack for fsck with multi label
    c7b4bcbaec6 os/bluestore: Fix bdev_label_main_try_reserve
    28dbacf1745 os/bluestore: Fix write_bdev_label
    12e8c32299f os/bluestore: fix DB_SUPER_RESERVED->SUPER_RESERVED
    7e1d04345d9 os/bluestore: Small fix to check_or_set_bdev_label
    d48f2c6f99c os/bluestore: Fix write_meta; increase epoch with each write
    86f3aad2db4 os/bluestore: Fix fsck() for multi label
    b4a0365741d os/bluestore: Fix _check_or_set_main_bdev_label
    408ff2378cf os/bluestore: Fix _main_bdev_label_try_reserve
    019a88b766c os/bluestore: minor fix in _check_or_set_main_bdev_label
    c4f212ee1fc os/bluestore: Fix read_main_bdev_label
    7c4a8642f6c os/bluestore: Fix write_bdev_label
    c0bd6fff41b os/bluestore: Fix read_meta and write_meta
    7ecaede175a os/bluestore: Add fsck procedure for bdev multi labels
    f955c66290b os/bluestore: Adapt read_meta / write_meta
    aed1e686b3e os/bluestore: Give label multiple positions to replicate to
    75b1a22b959 os/bluestore: Create read_bdev_main_label function
    8e7b9deb653 os/bluestore: Modify read/write_bdev_label functions
    3b904283f33 os/bluestore: Remove bluestore_debug_prefill
    22c3eb548bf os/bluestore: Make read_meta / write_meta cached
    6241be164dc Fixes: https://tracker.ceph.com/issues/67074
    71ba42693e7 crimson/osd/recovery_backend: fix RecoveryBackend::temp_contents usage
    92b07ddece5 doc/start/os-recommendations: remove 16.2.z support for CentOS 7
    9485f9723fc doc/start: add tested container host oses
    8d7cea5b1a1 mgr/dashboard: use assertEqual in test_iscsi
    876ceab888c crimson/osd/osd_operation/client_request: requeue client requests from a temporary queue other than ClientRequest::Orderer::list
    98f2da079b4 crimson/os/seastore/btree: drop unused lines
    a6cf5bba4a4 crimson/os/seastore/cached_extent: add the "refresh" ability to lba mappings
    077cedff6e1 crimson/os/seastore: rename PhysicalNodeMapping::is_parent_valid() to PhysicalNodeMapping::is_parent_viewable()
    b87f6141a88 crimson/os/seastore/btree: add copy_source->pending links to FixedKVNode
    07d066346fc crimson/os/seastore/cbj: skip crc calculation for cbj header if device supports the checksum offload
    e92273a4f15 crimson/os/seastore: disable crc calculation if end to end data protection is enabled
    169a81ee51b crimson/os/seastore/rbm: add handle_exception() to pass_through_io()
    cc5b4a25155 crimson/os/seastore: remove multistream related codes
    5f86c84118e crimson/os/seastore: add nvme_read and nvme_write to be used when end to end data protection is enabled
    71398e2d4fe crimson/os/seastore/rbm: turn on end-to-end-data-protection during mkfs if possible
    364fb38669f crimson/os/seastore: replace rbm_metadata_header_t with rbm_superblock_t
    8f68b3fdaec reshard: small fix and cleanup
    5e7de76407c rgw/reshard: Backward Compatibility
    f19347d43b7 rgw/reshard: stop recording logs when reshard failed
    4d288ac31ce common/async: fix duplicate definition errors from SharedMutexImpl
    4990864eab1 erasure-code/clay: cleanup unused but set variable count_retrieved_sub_chunks
    5194bb6bdd3 rgw/reshard: take into account the object stats of dest shards
    55b404afeb6 rgw/reshard: copy the index entries to dest shards.
    14318e4210a make-dist: replace all '-' for '.' for rpm release
    3b647ec17fb msg/async/rdma: cleanup unused variables
    3b0360bc2ea doc: Amend dev mailing list subscribe instructions.
    59b37e0ec85 rgw/reshard: record a duplicated index entry copy together with version bucket writting operations.
    be852cd8417 rgw/reshard: record a duplicated index entry copy together with prepare and complete.
    14727dd19e3 rgw/reshard: Define the operation to record a duplicated index entry.
    b952558adcf rgw/reshard: Add logrecord phase in resharding
    3c054a140d2 doc/rgw: add design doc for noblock resharding
    55bd03de42d rgw: add support sse-c to bucket policy conditions
    9e1c0342e99 qa/workunits/rbd: avoid caching effects in luks-encryption.sh
    aeaeaae7f5b test/rgw: address potential race condition in reshard testing
    ddbe2c06fd7 rgw/auth: RemoteApplier respects implicit tenants
    019aaa4d101 rgw: donot check for NotPrincipal in IsPublicStatement
    fbb7c3df31e rgw: donot allow NotPrincipal with Allow Effect
    9c77963300f doc/cephadm/upgrade: ceph-ci containers are hosted by quay.ceph.io
    90bc35499eb mgr/test_orchestrator: add apply_mds command in the test_orch
    0a4dda59ca3 mon/osdmonitor: cleanup the code for preprocess_mark_me_dead
    8a20dff09f9 rgw: fixup compressor_message didn't store in some cases
    855c5d6826d compressor: Change data formt to QZ_DEFLATE_GZIP_EXT for QAT zlib
    a242fe3d940 doc/start: update mailing list links
    16b4a892941 osd/scheduler: fix unittest_mclock_scheduler failed
    8036426fe3f osd/scheduler: add mclock queue length perfcounter
    9ae2c89511b qa/cephfs: ignore when specific OSD is reported down during upgrade
    fe644c795ac qa: suppress Leak_StillReachable mon leaks
    cd2042b1ad0 rgw/iam: CreateRole ignores EEXIST after forwarded request
    b45eb557961 mgr/dashboard: Add namespaces views in dashboard
    63f63662483 erasure-code/isa: Use isa/raid's xor_gen() instead of the region_xor() optimisation
    ca4759b8f48 mgr/dashboard: rgw sync policy routing fixes
    abdcc51aa41 test/rgw/amqp: skip TestAMQP.MaxConnections test
    820f8ead891 doc/cephfs: streamline a paragraph
    08347be0b73 Revert "qa/config/crimson_qa_overrides: adjust mgr_stats_period"
    49c9dad15e5 mgr/client: validate connection before sending
    d034fec4633 qa: Restrict rados api tests to large clusters and increase timeout
    ed7f4e8829e qa: Added mon connection score tests
    c05d4e27160 src/mon/ConnectionTracker.cc: fix dump
    7b41aff3f00 qa/suites/rados: 3-az-stretch-cluster-netsplit test
    fb0011a692c doc/rados/operations/pools.rst: Added docs for stretch pool set|unset|show
    4ca1320727d qa/suites/rados/singleton/all: init mon-stretch-pool.yaml
    661e8e22cff Allow setting peering_crush_bucket_{count|target|barrier}
    a4f2eefe21f mgr/dashboard: Create and delete listeners
    d451b4d1795 mgr/dashboard: RGW multisite sync pipe
    f433e2ff456 rgw/rados: set_attrs() falls back to existing attrs for index update
    c0b2db74b2a mgr/dashboard: add NFS export route from subvolume/subvolume grp
    2e54c9a01e5 mgr/dashboard: Add a new chart for replication delta per shard in rgw sync overview grafana dashboard
    f6e65edf9b4 librbd: get rid of AIO_STATE_CALLBACK in AioCompletion
    3a103f2f87b rgw: set correct requestId and hostId on s3select error
    d56779e521c crimson/os/seastore/transaction_manager: consider inconsistency between backrefs and lbas acceptable when cleaning segments
    063d100526e msg: insert PriorityDispatchers in sorted position
    331f1af2803 mon, osd, *: expose upmap-primary in OSDMap::get_features()
    36a4a72959c mgr/dashboard: nvmf apis broken for insecure channel
    699dd28ad5c osd/scrub: fix job requeue conditions
    2187c494a66 test/osd: delete test_scrub_sched (for now)
    58cce757a92 osd/scrub: making osd_scrub_sched.cc compatible with Clang-14
    24647e87e8f qa/standalone/scrub: fix osd-scrub-test.sh
    8a8fa48b8b0 osd/scrub: scheduling the next scrub following scrub completion
    75b8ecbc2a2 osd/scrub: improve update_scrub_job()
    c55c6479f96 osd/scrub: passing the scrub-job copy through the scrubber
    54168d28094 osd/scrub: fix adjust_target_time()
    473177f8f99 osd/scrub: modify scrub registration implementation details
    3edb4317fd8 osd/scrub: the scrub queue now holds a copy of the ScrubJob
    16ad488d27d osd/scrub: Modify osd_scrub_sched.h high-level diagram
    e63101650d4 Fix the handling of HEAD requests that do not comply with RFC standards
    6143b80ef7f include/denc.h: Review fixes
    eb538ebd595 tools/objectstore: check for wrong coll open_collection
    08d985933c5 cephadm/smb: Determine samba version within container
    b687e2eeafc doc: reef 18.2.4 release note
    f1ca0c79de1 qa/upgrade: use staggered upgrade features for reef-x/stress-split
    61a48c5cedd qa/upgrade: fix checks to make sure upgrade is still in progress
    4c4063a0975 doc/dev: add formatting to basic workflow
    67dbd062731 mgr/nfs: Do not ignore clusters from rados pool conf objects
    617c9364bc2 blk/KernelDevice: Unify discard thread management
    decf32e8234 qa: add test for ceph tell with unknown cephtype
    2811bb0dfe3 pybind/ceph_argparse: fixing error message for ceph tell command
    a9de8be0f46 suites: crimson basic adding wait for test
    74297e6abac crimson/osd: adding osdmap subscribe
    ed082dbd127 librbd: fold complete_event_socket() into notify_callbacks_complete()
    db0c7daede9 os/bluestore: remove not used zone_adjustments
    111c54a19dc RGW - Fix copy_obj handling of obj_ctx
    d496d20c803 Fixes: https://tracker.ceph.com/issues/66286 Improve display of ref_count in the rados commandline utility
    5cd1746c750 qa: agetty entry in selinux allowlist is redundant now
    26ee0696a61 common/async: add co_waiter class template
    dc4bd3ea08d qa: improve and add commit ID to comment for context
    c6e2c97c6e9 cephfs: disallow removing root_squash via "fs authorize" cmd
    9a7645e9d6f client: fix file cache cap leak which can stall async read call
    204101c452f qa/multisite: add copy_object tests
    46eef5fb5c0 rgw/multisite: remove source object's RGW_ATTR_OBJ_REPLICATION_TRACE during copy_object. if a copy_object is executed on a replicated object, it fails to sync the copied object to the original source zone where the source object was first written and replicated from. this is because copy_object retains source attrs by default. when a get_obj() is issued from a fetch_remote_obj() call during sync, we check for this RGW_ATTR_OBJ_REPLICATION_TRACE and if that destination zone is already present in the trace, we return NOT_MODIFIED error, thus failing to replicate the copied object.
    b49f82a18b2 crimson/.../pg_interval_interrupt_condition: clarify member, add comments
    252801a0280 crimson/.../pg_interval_interrupt_condition: remove IOInterruptCondition(Ref<PG>& pg); constructor
    eec5d0bfacd crimson/osd: convert remaining IOInterruptCondition users to specify epoch
    61826ec15b7 crimson/.../background_recovery: use epoch_started for interruption
    238f15e42df crimson/.../internal_client_request: record epoch at construction and use for interruption
    cf36ba98177 os/bluestore: fix valgrind's "Invalid read" error in hybrid btree2 allocator.
    97119edd8b1 doc/mgr/smb: Fix a typo in options for cluster resource
    770016d3acd doc/mgr/smb: Add missing option for standalone mode
    48d8279dc77 mgr/smb: Replace "clusters" with "shares" in error status
    0e3400d5dd5 os/bluestore: refactor allocator's ExtentCollectionTraits
    55f65bda78c os/bluestore: refactor allocator histogram to use ExtentCollectionTraits
    3db0e22083b os/bluestore: move and rename ExtentCache to Allocator class.
    54b6d243389 os/bluestore: uniform allocator's error handling
    c448a06ee8e os/bluestore: introduce new allocator hybrid_btree2
    4e44500cd1d include/intarith: introduce p2aligned()
    7b588d3b3ad test/objecstore/store_test: be more specific with the desired allocator.
    f74820cb969 os/bluestore: make hybrid allocator implementation reusable
    5caa16dd81f os/bluestore: Allocator's cosmetic cleanup/improvement.
    d7a2cd5d671 test/allocator_replay: print elapsed time for try_alloc command
    82ae96fa86b crimson/osd/pg: update PG stats on handle_rep_op Fixes: https://tracker.ceph.com/issues/61761 Signed-off-by: Md Mahamudur Rahaman Sajib <mahamudur.sajib@croit.io>
    8e17e9b6752 cephadm: update shared folder python packages dir
    38ab28739e3 crimson/.../peering_event: complete_rctx under the PGPeeringPipeline::process stage
    816c9e9e850 crimson/.../pg: factor out PG::complete_rctx
    0f32fc60800 crimson/osd/pg: limit usage of async for peering state machine
    4f80036480b ptl-tool: Fix token file name and variable names
    a926a4a54ce os/bluestore: assert CollectionRef count is 1 on umount
    acb66c16659 crimson/osd/pg_recovery: push the iteration forward after finding unfound objects when starting primary recoveries
    d25fe4e7860 qa/suites/fs/workload: drop mgrmodules stanza
    8b5e7cc5b5d qa/tasks/ceph: fix "ceph mgr module enable" command
    d77139e74b6 qa/suites/orch: enable cephadm single_host_defaults for smb tests
    0c48ae3af6f mgr/smb: improve error handling for generic exceptions
    96b9564f99f pybind/mgr: add a specific exception for the mgr_pool disabled case
    f9c962a60f0 pybind/mgr: add a log line to hint why mgr sqlite3 db not ready
    28a7ee81280 test/crimson/seastore/test_seastore.cc: should not return a value
    37f772172f4 src/crimson/osd/scrub: fix the null pointer error
    2539c6f3215 CMakeLists: Seastar_DEPRECATED_OSTREAM_FORMATTERS OFF
    220669abbb0 CMakeLists: Crimson - remove Seastar_STD_OPTIONAL_VARIANT_STRINGVIEW
    9328060a1c9 labeler: label seastar submodule as crimson
    425f3338dfd crimson: use get instead of deprecated get0
    9fddade5a9e seastar: update submodule
    91b0207ed8d os/bluestore: improve ExtentMap::reshard readabilty
    859f920e964 os/bluestore: improve ExtentMap::update readabilty
    958ecba9e90 rgw/amqp: lock erase and create connection before emplace
    949f25e1ea0 mon/scrub: add mon scrub latency
    e6468f3db17 crush: avoid out-of-bound access and simplify enlarging buckets
    cc8c7662a7b test/allocsim: don't join caches
    e2203385ea0 test/allocsim: string cache as set of ptrs
    ec604e725da test/allocsim: performance improvements, gotta go fast
    111e1636631 corpus: update submodule with mark cls_rgw_reshard_entry forward_incompat
    8178667fc67 mgr/smb: use the sqlite mirroring store by default
    b1cbf7c9dd3 mgr/smb: filter out password fields in sqlite store
    30ed498e0a1 mgr/smb: add function for setting up sqlite mirroring store
    4d5066832a8 mgr/smb: add SqliteMirroringStore class
    da7ebd543d7 mgr/smb: add transactions to handler funcs underlying show command
    80eed4846e3 mgr/smb: make the new sqlite store our default internal store
    615cd84f105 mgr/smb: add a new sqlite db backed store
    25930c1a52b mgr/smb: add store transactions to parts of the handler
    29ab71466be mgr/smb: add TransactingConfigStore protocol
    11f299f535e mgr/smb: add a unit test to verify the new name in use check
    028fe052bd6 mgr/smb: validate that a share name is unique per-cluster
    fd6d4a77c85 mgr/smb: add find_in_store function to config_store.py
    d28d0c41c73 mgr/smb: add ObjectCachingEntry class to config_store.py
    2d35e4cfda6 mgr/smb: add a new protocol for a FindingConfigStore
    2a82d9b1564 pybind/mgr: add convenient context mgrs for accessing module db
    6472b9bc2a6 mgr/smb: Use the default for minimum protocol version
    5ac43ef8af8 mgr/smb: Add acl_xattr configuration to share definition
    729c5de4f85 ceph-volume: do not convert LVs's symlink to real path
    71ca41dbaa5 include/denc: Not use fmt::format
    867be2c3f59 crimson/.../peering_event: use peering event epoch for interruption
    45b7aafd090 crimson/.../scrub_events: use epoch at which operation was scheduled for interruption
    7a1b91ac5e0 crimson/.../pg_interval_interrupt_condition: allow specifying epoch
    5ad0df3beed mds: generate correct path for unlinked snapped files
    61381768ba9 qa: add test for cephx path check on unlinked snapped dir tree
    9397f464310 mds: add debugging for stray_prior_path
    02e9a4c77a2 clang tidy generates use-after-move warning
    d4a83b71706 test/encoding.cc: Harmonize expected text with exception
    3d4a899d6c5 blk/KernelDevice: Fix several issues with stopping discard threads
    8ffe35e85f2 blk/KernelDevice: React to bdev_enable_discard changes in handle_conf_change()
    d17efaf388b test: Create ParallelPGMapper object before start threadpool
    6ae002460b8 mgr/vol : shortening the name of function
    3ac8b61aaa1 suites: thrash old client missing SLOW_OPS in the ignore-list
    4c58cb58725 osd/PGLog,crimson/osd/pg: remove support for rebuild_missing_set_with_deletes_crimson
    1a56293f2c8 build: split ceph_ver.h
    d8c3c45e00c cephfs-shell: excute cmd 'rmdir_helper' reported error Fixes: https://tracker.ceph.com/issues/66735 Signed-off-by: teng jie <tengjie5@asiainfo.com>
    99a554671d0 qa/suites/fs: pull compiled cephadm for squid branch in mds_upgrade_sequence
    4e54a9034c8 qa: ceph.py mkfs.ext4 has no -f
    0b52d0f8151 qa: ignore container checkpoint/restore related selinux denials for centos9
    bfbfbbfed6c mon/MonClient: handle ms_handle_fast_authentication return
    a4123d08a79 script/ceph-backport: only fetch the merge sha1
    97c49d67eaf script/ceph-backport: do not assume ref layout for checkout
    165869fe8f3 test/librbd: add TestLibRBD.FormatAndCloneFormatOptions
    74eee542ba1 rbd: add the validate of the format and clone_format
    e5cd5469b26 suites/ec-rados-plugin=jerasure-k=8-m=6-crush: roles set with overrides
    2ef093a32dc suites/upgrade/quincy-x: update the ignore list
    9b26784b24b rgw: log bucket name to req done line
    d6d9a3e3d60 rgw: log op name in req done line
    548426630e1 rgw: log x-amz-request-id along with the request
    89d695fb8b6 suites: check for host thrasher
    66b42c3f5c0 suites: host thrasher should check min_in before thrashing host
    afb531019f7 mds/QuiesceDbManager: get requested state of members before iterating through each quiesce set members
    73b80a9a2c3 Warning added for slow operations and stalled read in BlueStore. User can control how much time the warning should persist after last occurence and maximum number of operations as a threshold will be considered for the warning.
    4c5d0e30d2c qa/suites/rados: Cancel injectfull to allow cleanup
    ebd8283e2f2 include/encoding.h: Fix message on compat failure
    c94c8baf012 include/denc: Add protection against bumping up compat
    62aba6df38d include/denc: Add missing check for compat
    2140fbf72d2 mds: use intrusive set for ClientLease tracking
    0a4a5d34929 mds: optimize sending cap messages
    575f5d46170 rgw: delay the RGW process exit until all actice requests have completed
    59eab456911 qa/cephfs: ignore variant of MDS_UP_LESS_THAN_MAX
    2c65f1da969 suites: test should ignore osd_down warnings
    f7bc4e45478 PrimaryLogPG: Keep soid before erase entry
    cf448e83c01 anotated rgw_auth.cc
    d699e23f172 common: MemoryModel: do not discard memory mappings marked [stack]
    705e60f77a1 common: MemoryModel: do not store measurements
    bdc5782a276 common: MemoryModel: speed-up and clean get_mapped_heap()
    cf62ba80110 common: MemoryModel: do not issue error messages directly
    6ed303881c4 common: MemoryModel: use charconv to parse /proc/status
    7752ceed3ca mds/MDCache: avoid using static variables in check_memory_usage
    a6e2a7c53dc common: MemoryModel: keep /proc files open
    e97223399d0 common: rename MemoryModel::snap to mem_snap_t
    e08126880e0 common/MemoryModel: make MemoryModel::snap accessors const
    a1f3c99eb4e client: eliminate duplicate lokups wherever possible
    95b64a65bc9 mon: fix inconsistencies in class param
    9e0744f8592 refactored the code to remove use-after-move warning generation. bl length would be stored before moving
    f17f2d6fee1 qa/suites: drop --show-reachable=yes from fs:valgrind tests
    b931251b259 AsyncMessenger:  l_msgr_active_connections numerical anomaly
    df0073598ea mds: put ClientLease in map container
    b6c79ab6480 mds: reduce Capability size by using elist::item
    d2645fd157b qa/cephfs: add test_session_evict_non_blocklisted test case
    c5a61107b3f mds: cleanup the debug logs to make it to be more readable
    e63b967aeb0 doc/mgr/dashboard: fix TLS typo
    bbce02800b2 qa/standalone: bugfix for latecy repair after scrub
    98c9c8cf157 qa: set debug_ms=2 for cephfs tests
    2ea33487c98 msg: decrease the level to print the sending msgs from the protocol
    41eba3e370c neorados: Fix use-after-move in Builder::build_
    c3fd1deec2d mon: validate also mons and osds on {rm-,}pg-upmap-primary
    3840b2c41c2 rgw/notification: add logic to prevent logging password associated with topics.
    4d1dacf87e6 crc32c optimized for s390x arch
    d37f0943561 test/pybind/test_rados.py: fix warnings
    81382acd1ee tool/ceph_dedup: move signal_handler into SampleDedupGlobal to remove a gobal variable
    59c48b1202b test/denc: Add check for compat
    54516b75782 tool/ceph_dedup: rename make_crawling_daemon to run_crawling_daemon
    111c94e05ba tool/ceph_dedup: refactor globals to put them into automatic variable
    6855b049fb3 mon/OSDMonitor: Add force-remove-snap mon command
    63508ccb96a rgw: eliminate vault token perm for group read
    a4374ab5380 mgr/dashboard: adapt dashboard e2e for grafana
    aae02b6af46 qa/suites/rados/verify/validater: increase heartbeat grace timeout
    55d9682a90e osd: make the chunking in e.g. PG deletion controlable
    c719d8ac2d7 mgr/cephadm: bump monitoring stacks versions
    3163be345c1 test/client: test contiguous read for a non-contiguous write
    a7bd91dafb5 Test: osd-recovery-space.sh extends the wait time for "recovery toofull".
    9eb14fc01c3 qa/rados: Adapt bluestore tests to new naming in ceph_test_objectstore
    c594bb5635a tests/store_test: Split matrix tests into separate test cases
    bd8d7e96956 src/pybind/mgr/pg_autoscaler/module.py: fix 'pg_autoscale_mode' output
    b1ea37c5a6c mds: always make getattr wait for xlock to be released by the previous client
    34b086e702f osd: add watch ping timeout count in osd
    acf7f153afe bli/aio: replace inappropriate aio_read() with aio_write for POSIXAIO
    8e3235975af test/store_test: add a simplified test for readv.
    8238b608696 blk/aio: fix incomplete patch to get rid off aio_size
    8564caf393a bluestore/bluestore_types: avoid heap-buffer-overflow in another way to keep code uniformity
    7b52409ed70 osd: Remove aios_size argument from submit_batch Due to aios_size being a uint16 and the source value for the actual call being an int there was a possible overflow. This was "fixed" with an assert, however that still causes a crash.
    62c1ed82828 blk/kernel: always use ceph_assert
    ccb66145a4e test/store_test: add a case for reading an object with 64+K extents.
    09f3c879f2f ceph-dencoder: MDS - Add missing types
    d3c0a3d0b6b qa/rgw: enable valgrind in rgw/notifications suite
    78d7668dccf osd/OSD: improve var naming identify_splits_and_merges
    ddd741b393f osd/OSD: Add pg_num_history comment
    791614e6eb0 osd/OSD: fix track_pools_and_pg_num_changes on mapgaps
    8e61af9614e tools/rados: allow to read setomapheader value from file
    5f552357af2 osd/OSD: introduce track_pools_and_pg_num_changes
    51acf34e7d0 osd/OSD: handle_osd_map rename i and j
    482e5b85f08 test/store_test: get rid off explicit offset specifications in shared blob repair test case.
    b01453b1c1b osd: remove unnecessary return statements
    78d6bfe54c3 osd: add clear_shards_repaired command
    92fde258bbb qa/cephadm: extend iscsi teuth test
    5b9c08eadcb crimson/osd/backfill_state: set backfill_infos when the last round of scan doesn't produce any object that needs to be backkfilled
    3d712181966 crimson/osd/backfill_state: consider backfills as complete when all replicas have acknowledged the finish of the backfill
    1d99222ffce TrackedOp: Make history_slow_op_threshold a float
    e1a02841973 common/TrackedOp: rename and raise prio of slow op perfcounter
    7830383a1bf doc/dev/developer_guide/testing_integration_tests: Document the random selection operator
    33037eccf07 tool/ceph-bluestore-tool: fix wrong keyword for 'free-fragmentation' command.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
2d99b31d91 slirp4netns: update to v1.3.1
Bumping slirp4netns to version v1.3.1-2-gee1542e, which comprises the following commits:

    d1a900b v1.3.1+dev
    e5e368c v1.3.1
    036c206 CI: bump libslirp to v4.8.0
    1c4eec1 CI: drop CentOS 7
    3c8f086 v1.3.0+dev
    8a4d439 v1.3.0
    436755d Support new --netns-type=tapfd
    d39499f Do not leak socket in case of success.
    c75ce87 release.yaml: fix tag
    a6d372a v1.2.3+dev
    c22fde2 v1.2.3
    cdea74d Dockerfile.artifact: jammy-20240125
    afc3126 main: do not leak tapfd
    fa1f950 main: do not leak sockfd on errors
    f5287ef main: fix some leaks on error paths
    a6c3eb7 api: use g_free with fwd
    63220fa api: allocate ctx with calloc
    e1ec9eb api: do not leak fd on errors
    f9a92bc release.yaml: migrate from `hub` to `gh`
    d5996a4 overmindtech/buildkit-cache-dance -> reproducible-containers/buildkit-cache-dance
    84b878d CI: release.yaml: fix release note again
    15067fc v1.2.2+dev
    0ee2d87 v1.2.2
    f4723a5 CI: release.yaml: fix release note
    0252253 v1.2.2-beta.0+dev
    1e814cc v1.2.2-beta.0
    fbca8f5 CI: release.yaml: add guide for reproducible builds
    c223351 CI: release.yaml: reproduce commit hash
    e5ea9fe Dockerfile.artifact: propagate SOURCE_DATE_EPOCH from host
    a52eda0 Dockerfile.artifact: pin package versions
    9d55a09 v1.2.1+dev
    09e31e9 v1.2.1
    3c2ef5c Dockerfile.artifact: XX_VERSION=1.2.1
    ba0d32f Re-remove usage of qemu-setup-action
    036b88c parson: update to v1.5.2
    b380f0f CI: fix test-centos7
    9103678 Add support for escaping resolv.conf symlinks
    7b798d6 Update buildx actions
    5c4aa63 Fix git://git.qemu.org urls which no longer respond
    8c8bdff v1.2.0+dev
    656041d v1.2.0
    ba68f7e Dockerfile.artifact: strip binary
    da591df Dockerfile.artifact: enable cross-compilation without dependency on QEMU
    6717933 v1.2.0-rc.0+dev
    e3a5714 v1.2.0-rc.0
    873a35f CI: refactor release.yaml
    7d2125f CI: build slirp4netns-riscv64
    67b2b8c Dockerfile.tests: Ubuntu 20.04 -> Ubuntu 22.04
    7b28b6c Dockerfile.artifact: Debian 11 -> Ubuntu 22.04
    e2f022e CI: bump libslirp to v4.7.0
    82c5146 Fix typo in warning message for `--outbound-addr` and `--outbound-addr6`
    2365e85 configure: remove inet_ntoa check
    2b607f2 Replace deprecated inet_ntoa with safer inet_ntop

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
b2342110e6 openvswitch: update to v3.4.1
Bumping ovs to version v3.4.1-39-g7aa5f4270, which comprises the following commits:

    7aa5f4270 dpif-netdev: Modify code comments for function parse_tcp_flags.
    4727d139b ipf: Fix the over-sized reassembly.
    8c2bf8bff debian: Let *-ctl handle runtime directory.
    29dddea09 debian: Use PIDFile with systemd.
    308b441a1 debian: Add X-Python3-Version stanza.
    860b6f985 debian: Drop shlibs:Depends macro for -ipsec.
    9ac8b0fc0 debian: Drop python3:Depends macro for -vtep.
    80cccfbdd ovsdb: Fix asan warning on ovsdb fatal errors.
    034b40fbb netdev-tc-offloads: Don't offload header modification on ip fragments.
    5346c14b9 m4: Fix check for Python 3.6 version.
    84a98a8ba ofproto: Fix default pmd_id for ofproto/detrace.
    65efbaa56 github: Skip clang-analyze when reference generation fails.
    069f5a776 netdev-dpdk: Restore outer UDP checksum for Intel nics.
    acee75730 cirrus: Update to FreeBSD 14.2 and 13.4.
    eb98e20da bridge: Fix log spam about prefixes.
    a234629c3 netdev: Always clear struct ifreq before ioctl.
    118b4f207 netdev-native-tnl: Fix use of uninitialized RSS hash.
    49d8d3066 tests: Use OVS_CHECK_XT6 for all applicable IPv6 tests.
    8886c64c1 tests: Use OVS_CHECK_XT for all applicable IPv4 tests.
    985f7ee31 classifier: Fix the fieldspec comment in the prefix tracking section.
    07720bc3f tests: Handle marks using nft if available.
    f3de3ab1b tests: Add nft support to ADD_EXTERNAL_CT.
    5931c6feb tests: Add nft accept support.
    e4d76aacd ovs-macros.at: Correctly delete iptables rule on_exit.
    2cdd886fc system-traffic: Do not rely on conncount for already tracked packets.
    2463a1bf9 system-traffic: Fix syntax errors in FTP and IPv6 curl calls.
    77e82fa31 ovsdb-idl: Fix use of uninitialized datum for graph consistency check.
    fb1dad5be db-ctl-base: Fix uninitialized datum fields while checking conditions.
    9bda0df40 ovsdb-types: Fix use of uninitialized reference type.
    3ed582f4a ofproto-dpif-upcall: Fix use of uninitialized missed dumps counter.
    fcc8c2a91 ovs-vsctl, vtep-ctl: Silence memory sanitizer warning for longindex.
    76c3deb14 tests: multipath: Fix use of uninitialized wildcards.
    b359f1cf7 stream: replay: Fix potential NULL dereference on write failure.
    4d8155a5c ofp-actions: Fix use of uninitialized padding in set-field.
    6d02d8749 system-traffic: Standardize by replacing all wget instances with curl.
    a946d61f5 system-traffic: Replace wget with curl for negative and ftp tests.
    87efb3c94 classifier: Increase the maximum number of prefixes (tries).
    5338f3ebe Revert "github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel."
    c25085f3d Prepare for 3.4.2.
    22a6b1110 Set release date for 3.4.1.
    fde8912b0 tests: Fix transient failure in ping6 header modify.
    5cefc1114 github: Build Libreswan v5.1 from sources.
    3d0246e3c ci: Update GitHub actions runner from Ubuntu 22.04 to 24.04.
    5c13ad000 dpdk: Fix dpdk logs being split over multiple lines.
    c6fc230a5 ipsec: libreswan: Reduce chances for crossing streams.
    e9f9e1eff tests: ipsec: Check that nodes can ping each other in the NxN test.
    94aeab7de tests: ipsec: Add NxN + reconciliation test.
    992e09e4d system-tests: Verbose cleanup of ports and namespaces.
    a5b5fce08 ipsec: Make command timeout configurable.
    49b066b5c ipsec: libreswan: Avoid monitor hanging on stuck ipsec commands.
    729b4813c ipsec: libreswan: Try to bring non-active connections up.
    cb981fdb3 ipsec: libreswan: Reconcile missing connections periodically.
    f95b566db ipsec: libreswan: Fix regexp for connections waiting on child SA.
    f1fcf08b3 ipsec: Add a helper function to run commands from the monitor.
    77dc74395 meta-flow: Fix nw_frag mask while parsing from string.
    7e6a298c0 ci: Remove dependency on libpcap.
    b2d2ca05c github: Remove ASLR entropy workaround.
    b00d1115c bond: Always revalidate unbalanced bonds when active member changes.
    d9f146931 ofproto-dpif-upcall: Fix redundant mirror on metadata modification.
    7e0f702fd dpdk: Use DPDK 23.11.2 release for OVS 3.4.
    a15ce086d ofproto-dpif: Improve load balancing in dp_hash select groups.
    f6329c428 Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions."
    b7a277b73 ci: Use sarif-tools v3.0.1 due to issues in earlier versions.
    d17dbccf0 netdev-dpdk: Disable outer udp checksum offload for txgbe driver.
    e05a76931 selinux: Update policy file.
    7d074979f github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel.
    76ba41b5c vconn: Always properly free flow stats reply.
    fa840997f mcast-snooping: Properly check group_get_lru return code.
    64cb90507 ovsdb-idl: Fix IDL memory leak.
    9e9433ec5 ofproto/bond: Preserve active bond member over restarts.
    05b752082 ofproto-dpif-upcall: Avoid stale ukeys leaks.
    a91553ef0 ci: Use previous sarif-tools release due to issue in latest release.
    a67c12d51 userspace: Correctly set ip offload flag in native tunneling.
    32ff65ac6 docs: Fix argument formatting in ovs-appctl(8) man page.
    c45794afb Prepare for 3.4.1.
    c598c05c8 Set release date for 3.4.0.
    a71dd64a2 releases: Mark 3.3 as a new LTS release.
    b0e749ba8 dp-packet: Correct IPv4 checksum calculation.
    6b6823a57 netdev-linux: Fix unaligned access to rpl_rtnl_link_stats64.
    d49f51a05 route-table: Fix another UBsan warning about pointer type.
    cb121f4ea netdev-linux: Do not offload IP checksum.
    6cea2b36c tunnel, tests: Add test for mirroring over tunnels.
    a1afd8369 ofproto-dpif-xlate: Add a recursion limit to tunnel address lookup.
    1532c15a5 netdev-dpdk: Fix race condition in mempool information dump.
    6743a83e1 ovsdb: transaction: Remove incorrect transaction abort in pre-commit.
    a2d11f1be netlink-notifier: Silence the UBsan's function pointer mismatch error.
    a1fca3d17 Documentation: Update QEMU documentation URLs.
    f4f199af5 match: Fix false-positive snprintf size warning.
    2eb49ec25 util: Add non-NULL format assertion to xvasprintf.
    4cf2073cb ofproto-dpif-xlate: Initialize observe_offset for sample actions.
    7ca0d3fee docs: Define Read the Docs configuration for Sphinx HTML parameters.
    41c4034cb ofproto-dpif-xlate: Remove misleading wc NULL check in packet mirror.
    2bf43ea3c flow: Fix unaligned access to the ND target in miniflow_extract.
    7dbf2a836 ofp-actions: Fix reporting observation point bits instead of domain.
    86f7db6c1 dpif-netlink-rtnl: Fix netdev leak in out-of-tree tunnels probe.
    12f9e1410 dpctl: Fix netdev reference leak in "show" command.
    0aa14d912 Prepare for 3.4.0.
    3b1882261 ofproto-dpif-mirror: Add support for pre-selection filter.
    04c090c61 ofproto-dpif-mirror: Reduce number of function parameters.
    600125b2c ofproto: Add ofproto/detrace command to map UFIDs to OpenFlow.
    9e6d43ef3 rhel: Make the version, displayed to the user, customizable.
    1aa9e137f ofp-actions: Load data from fields in sample action.
    c2e683646 ofproto-dpif-xlate: Avoid allocating mf_subfield.
    516569d31 ofproto: xlate: Make sampled drops explicit.
    45034c206 tests: Test local sampling.
    742de01a4 tests: Add test-psample testing utility.
    c10dbcec7 ofproto-dpif-xlate: Use psample for local sample.
    d54b967e8 vswitchd: Add local sampling to vswitchd schema.
    5b99ebc26 ofproto: Add ofproto-dpif-lsample.
    d0afbf094 ofproto_dpif: Check for psample support.
    1a3bd96b4 odp-util: Add support OVS_ACTION_ATTR_PSAMPLE.
    d9de6b01c ofproto-dpif: Allow forcing dp features.
    d7e77143f tunnel: Allow UDP zero checksum with IPv6 tunnels.
    4935e8932 ofproto: Add JSON output for 'dpif/show' command.
    379d036ac vswitchd: Add JSON output for 'list-commands' command.
    3c572af65 python: Add option for pretty-printing JSON output to appctl.py.
    a0925cef7 appctl: Add option '--pretty' for pretty-printing JSON output.
    97a1bce6a python: Add option for JSON output to unixctl classes and appctl.py.
    939a5cea5 Add global option for JSON output to ovs-appctl.
    f8ed13355 ovsdb: raft: Don't forward more than one command to the leader.
    773b0fb59 cirrus: Update to FreeBSD 14.1.
    239b59bdf ovs-monitor-ipsec: LibreSwan v5 support.
    802df1e37 ovs-monitor-ipsec: LibreSwan autodetect version.
    c1dce72a3 python: ovsdb-idl: Add custom transaction operations.
    56e315937 vswitchd: Only lock pages that are faulted in.
    639fcf200 netdev-dpdk: Check pending reset when adding device.
    481184944 odp-execute: Check IPv4 checksum offload flag in AVX.
    3f4df4c7b odp-execute: Set IPv6 traffic class in AVX implementation.
    2f196c80e netdev-dpdk: Use LSC interrupt mode.
    6b09799f0 ofp-prop: Fix unaligned 128 bit access.
    24907bd1b ovsdb-client: Document "--timeout" option in help.
    8b405f45d ovsdb-client: Add "COLUMN" arg to help for 'dump'.
    c00dd0c94 dpdk: Check other_config:dpdk-extra for '--lcores'.
    85d19a5ed appveyor: Fix caching of OpenSSL installer.
    2c1a432e2 python: ovs: flow: Fix nested check_pkt_len acts.
    fad8c8f7f python: idl: Fix index not being updated on row modification.
    d40129195 python: ovsdb-idl: Convert new_uuid insert() arg to UUID.
    79a306565 python: ovsdb-idl: Make IndexedRows mirror hmap.
    35e647051 checkpatch: Don't warn on pointer to pointer.
    f01a768e9 ci: Restore vhost-user unit tests in check-dpdk.
    2efae5894 system-dpdk: Fix socket conflict when starting testpmd.
    c39a84c13 netdev-dpdk: Refactor tunnel checksum offloading.
    844a7cfa6 netdev-dpdk: Use guest TSO segmentation size hint.
    d618d0917 netdev-dpdk: Refactor TSO request code.
    3d2c8223a netdev-dpdk: Fix inner checksum when outer is not supported.
    29abd07e4 netdev-dpdk: Disable outer UDP checksum for net/iavf.
    041d6aded netdev-dpdk: Fallback to non tunnel checksum offloading.
    6280f5d04 netdev-offload-tc: Reserve lower tc prio for vlan ethertype.
    792e8ee86 debian: Fix tabs vs spaces.
    ac4df0c8d nsh: Add support to compose-packet and use it in system tests.
    cd4ea33b5 tests: Convert ND, MPLS and CT sendpkt tests to compose-packet.
    40f0ac48f tests: sendpkt: Allow different input formats.
    16f688535 ipf: Handle common case of ipf defragmentation.
    3a6b8c836 ipf: Only add fragments to batch of same dl_type.
    1d681ffe3 AUTHORS: Add Ville Skyttä.
    90b8e4d05 docs: afxdp: Fix CONFIG_HAVE_EBPF_JIT Kconfig option spelling.
    4a838f627 AUTHORS: Add Jun Gu.
    8e2b06af9 ovs-ctl: Fix typo.
    4c0e1a1d7 python: ovsdb-idl: Use monitor_cond for _Server DB.
    474ebd6dd ovsdb-idl: Add C IDL test for "monitor" fallback.
    6003a8875 tests: Fix non-portable plus match in python vlog test.
    f2e4195b0 netdev-linux: Fix uninitialized gso_type case.
    d97eee88e db-ctl-base: Initialize the output variable in the ctx structure.
    361d7bce0 ofproto-dpif: Define age as time_t in ofproto_unixctl_fdb_add().
    f673d0cd5 sflow: Fix check for disabled receive time.
    11e48b8ca sflow: Use uint32_t instead of time_t for tick handling in the poller.
    e42d3ed29 sflow: Replace libc's random() function with the OVS's random_range().
    b253d74d4 cfm: Fix possible integer overflow in tc_add_matchall_policer().
    18436bed8 netdev-linux: Fix possible int overflow in tc_add_matchall_policer().
    488ad8bee dpdk: Use DPDK 23.11.1 release.
    7af0716ea odp-execute: Fix AVX checksum calculation.
    4d25656a2 netdev-linux: Initialize link speed in error conditions.
    0c1b9b015 netdev-linux: Return an error if device feature names are empty.
    4837b5fed socket: Fix uninitialized values in inet_parse_ functions.
    51a2476bc dpctl: Fix uninitialized value when deleting flows.
    8359cc422 netdev-native-tnl: Fix use of uninitialized offset on SRv6 header pop.
    8e5a89cd0 netdev-offload: Fix null pointer dereference warning on dump creation.
    ce1663b5f netdev-linux: Fix ethtool_cmd is partly outside array bounds.
    d4bd0a2ad atlocal: Replace deprecated pkg_resources.
    4d2c64ca1 atlocal: Fix setting HAVE_PYTEST on unexpected errors.
    320f7e1a4 srv6: Fix misaligned writes to segment list.
    0c8e62640 utilities: Correct deletion reason in flow_reval_monitor.py.
    ec405e857 compiler: Fix errors in Clang 17 ubsan checks.
    8d5486b65 AUTHORS: Add Amit Prakash Shukla.
    325ca0455 packets: Assert for incorrect packet.
    f61e1da46 AUTHORS: Add Pengfei Sun.
    ac7a10721 table: Fix freeing global variable.
    90cd797da vlog: Destroy async_append first then close log_fd.
    3833506db conntrack: Fully initialize conn struct before insertion.
    4989dc7e0 conntrack: Do not use {0} to initialize unions.
    cbc54b2fe AUTHORS: Add Martin Kalcok.
    5dfbc643f ci: Set platform parameter when building DPDK.
    0940a51b1 ovsdb-client: Add missing arg to help for 'dump'.
    b91f6788c ofproto-dpif-trace: Fix access to an out-of-scope stack memory.
    f0e0e48ec hash, jhash: Fix unaligned access to the hash remainder.
    855df0ad2 sparse: Add additional define for sparse on GCC >= 14.
    01a0fff36 docs: Document manual cluster recovery procedure.
    139b564db conntrack: Key connections by zone.
    c176635f5 test-conntrack: Add per zone benchmark tool.
    bf82d2cce Documentation: Update Pacemaker main page link.
    bd8e9f48f sparse: Add immintrin.h header.
    169ff9ea9 tc: Fix -Wgnu-variable-sized-type-not-at-end warning with Clang 18.
    1876b2796 tests: Fix build failure with Clang 18 due to -Wformat-truncation.
    8ce5c95f0 dpctl: Fix segfault on ct-{set,del}-limits.
    fb46f5d29 netdev-dpdk: Improve error print to the user for flow control error.
    bcacd805f ovsdb: raft: Fix probe intervals after install snapshot request.
    d7f2150ea ovsdb: raft: Fix inability to join a cluster with a large database.
    153d563c2 AUTHORS: Add Chris Riches.
    e876b0466 rhel/systemd: Set ovsdb-server timeout to 5 minutes.
    fbade819d ovsdb-idl: Add python keyword to persistent UUID test.
    2b7efee03 socket: Increase listen backlog to 64 everywhere.
    4f29804f2 netdev-dpdk: Fix possible memory leak configuring VF MAC address.
    66a8430c7 appveyor: Fix too wide OpenSSL version regexp.
    e1e0c6a3e checkpatch: Allow rST manpages to be added.
    16b747541 github: Update python to 3.12.
    dd24c57de ovsdb-dot: Fix flake8 issues.
    3cd0299aa ovsdb-doc: Fix syntax warning with Python 3.12 and flake8 issues.
    acf653712 github: Remove reference to master branch.
    b34dac4c6 appveyor: Remove reference to master branch.
    241365b6d python: Remove hacking dependency and use recent flake8.
    751e14c63 cirrus: Update to FreeBSD 13.3.
    a35fc4ae5 checkpatch: Don't spellcheck names in tags.
    a75e1c37a vlog: Log stack trace on vlog_abort.
    74cf01436 Documentation: Updates for rename of primary development branch as main.
    120140f89 ofproto: Fix Coverity false positive.
    9185793e7 tests: Fix compatibility issue with Python 3.13 in vlog.at.
    95f5012bb checkpatch: Add additional words to extra_keywords.
    ed379a810 ofproto-dpif-upcall: Fix ukey installation failure logs and counters.
    337db5865 tests: system-offload-traffic: Verify re-probe of drop action.
    edf56245b tests: system-traffic: Add coverage for drop action.
    3c8d069b9 dpif: Probe support for OVS_ACTION_ATTR_DROP.
    54d94f8f4 dpif: Support atomic_bool field type.
    dec09fd7b dpif: Make get_datapath_cap() access support by pointer.
    8bb065961 dpif: Stub out unimplemented action OVS_ACTION_ATTR_DEC_TTL.
    9ec849e8a netlink-conntrack: Optimize flushing ct zone.
    6439d694a util: Support checking for kernel versions.
    b5e682925 conntrack: Do not use icmp reverse helper for icmpv6.
    b674e7e04 conntrack: Fix SNAT with exhaustion system test.
    2324596f1 Documentation: Update references to kernel datapath in OVS tree.
    95ff912ed appveyor: Prepare for rename of primary development branch.
    5b9feacfc ovsdb: raft: Fix inability to join after leadership change round trip.
    e987af503 ovsdb: raft: Fix assertion when 1-node cluster looses leadership.
    af5a99737 ovsdb: raft: Fix permanent joining state on a cluster member.
    bcad733e2 ovsdb: raft: Fix time intervals for multitasking while joining.
    aab379ec2 ovsdb: raft: Avoid transferring leadership to unavailable servers.
    bf7c0b0a9 ofproto-dpif-xlate: Fix continuations with associated metering.
    c6538b443 dpif-netdev: Fix crash due to tunnel offloading on recirculation.
    e6a8a8e90 AUTHORS: Add Jun Wang.
    6f93d8e62 netdev-dpdk: Disable outer UDP checksum offload for ice/i40e driver.
    3ddb31f60 ovs-monitor-ipsec: LibreSwan autodetect paths.
    840979663 route-table: Avoid routes from non-standard routing tables.
    3388c3451 ovs-tcpdump: Fix cleanup mirror failed with twice fatal signals.
    9d0a40120 ofproto-dpif: Fix tunnel with different name del/add failure.
    5339ce386 ofpbuf: Prevent undefined behavior in ofpbuf_clone.
    679b068ac AUTHORS: Add Kevin Sprague.
    b89a6b814 rhel: Enable USDT scripts by default in Fedora builds.
    86b9e653e revalidator: Add a USDT probe during flow deletion with purge reason.
    0ce82ac45 netdev-dpdk: Fix tunnel type check during Tx offload preparation.
    05e9f05d1 netdev-dpdk: Fix TCP check during Tx offload preparation.
    f8809760f netdev-dpdk: Clear inner packet marks if no inner offloads requested.
    7df30c86c netdev-dpdk: Clean up all marker flags if no offloads requested.
    fa0dfa18d github: Reduce ASLR entropy to be compatible with asan in llvm 14.
    33f45ded6 ovsdb: Don't iterate over rows on empty mutation.
    2c4ffd2f8 netdev-dpdk: Dump packets that fail Tx preparation.
    07c2ef5cd bfd: Improve state change log message.
    d2a42f396 tests: Fix "SSL db: Implementation" test with openssl > 3.2.0.
    6c082a831 conntrack: Fix flush not flushing all elements.
    e0aa15f89 utilities: Use localhost as sample hostname.
    b3ebc34a0 netdev-linux: Rename local variables as primary_*.
    f92b30a0f netdev-linux: Rename struct nedev_linux field as is_lag_primary.
    0c255bf76 Documentation: Update to refer to main repository.
    29e09c809 vswitch.xml: Use member wording for bonds.
    9d8208484 appveyor: Build with OpenSSL 3.0.
    68e931221 m4: Fix linking with OpenSSL 1.1.0+ and 3+ on Windows.
    f5fa9a0a3 ovs-pki: Fix file permissions on Windows.
    d439c2017 appveyor: Print out config.log on configuration failure.
    436aba68d bond: Reset stats when deleting post recirc rule.
    6fc215de3 ofproto-dpif-trace: Fix infinite recirculation tracing.
    99c86c6c4 github: Temporarily disable SNAT with exhaustion system test.
    cc0e79518 Documentation: Update links to upstream Kernel documentation.
    2d7a2bddb Documentation: Update Pacemaker link.
    3c52cd15a Documentation: Anuket project updates.
    786a89aba Documentation: Correct spelling errors.
    5639aa7b6 Documentation: Extend copyright to 2024.
    4c32b6d09 dp-packet: Don't offload inner csum if outer isn't supported.
    f0d1beca6 dpif-netdev: Do not create handler threads.
    166ee41d2 ofproto-dpif-xlate: Fix ignoring IPv6 local_ip for native tunnels.
    7992a26ef netdev-dummy: Add local route entries for IP addresses.
    f9e42c668 tests: Move the non-local port as tunnel endpoint test.
    46159983d ovs-thread: Log pthread failures.
    afdc1171a conntrack: Handle persistent selection for IP addresses.
    99413ec26 conntrack: Handle random selection for port ranges.
    5f2af0b7a utilities: Add TASK_STOPPED accounting to the kernel_delay.py script.
    9aeda62cd Set release date for 3.3.0.
    619d4e679 system-traffic.at: Add tests with UDP tunneling of UDP traffic.
    f81d782c1 netdev-native-tnl: Mark all vxlan/geneve packets as tunneled.
    a2d4ad651 netdev-linux: Only repair IP checksum in IPv4.
    cb0cbffbe netdev-linux: Favour inner packet for multi-encapsulated TSO.
    3e666ba00 rstp: Fix deadlock with patch ports.
    5df46a44e dpif-netdev: Increase MAX_RECIRC_DEPTH to 8.
    c7dd0a7b0 ovs-pki: Remove umask trick for self-signing.
    dda253293 ovs-pki: Remove executable bit from private/cakey.pem.
    19cffe30c netdev-linux: Avoid deadlock in netdev_get_speed.
    0061a4892 ofproto-dpif-monitor: Remove unneeded calls to clear packets.
    8cebf7efb dp-packet: Include inner offsets in adjustments and checks.
    281b8d24c bfd: Set proper offsets and flags in BFD packets.
    bf921e567 dp-packet: Validate correct offset for L4 inner size.
    11b62f5e0 appveyor: Move from MinGW 32bit to msys64.
    b3fc82220 AUTHORS: Add Roberto Bartzen Acosta.
    2832faa22 Documentation: Adding note about using the jemalloc library.
    be695f26f netdev-offload-tc: Check geneve metadata length.
    61003d028 odp: ND: Follow Open Flow spec converting from OF to DP.
    027ae2ba1 faq: Update DPDK releases for older branches.
    6bdca1579 github: Bump Fedora version to 39.
    1be7f896a github: Update versions of action dependencies (Node.js 20).
    7b838a24f mcast-snooping: Remove typedef from mcast_group_proto.
    96990ea1e dp-packet: Reset offload/offsets when clearing a packet.
    3f74d6bf3 tests: ovsdb-server: Fix config-file same schema test.
    432a0b935 ci: Run system tests in a separate namespace.
    3eb91a8d1 netdev-dpdk: Trigger port reconfiguration in main thread for resets.
    9ca8d3a4d tests: mcast-snooping: Stop time for the group protocol test.
    bacd2c304 dp-packet: Avoid checks while preparing non-offloading packets.
    335a5deac ovs-atomic: Fix inclusion of Clang header by GCC 14.
    85ceed7c7 Prepare for post-3.3.0 (3.3.90).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
638e163e28 passt: update to 2024_12_11.09478d5
Bumping passt to version 2024_12_11.09478d5-9-g1b95bd6, which comprises the following commits:

    1b95bd6 vhost_user: fix multibuffer from linux
    f04b483 test/pasta_podman: Run Podman tests on a single CPU thread
    2c174f1 checksum: fix checksum with odd base address
    725acd1 tcp_splice: Set (again) TCP_NODELAY on both sides
    3876fc7 seccomp: Unconditionally allow accept(2) even if accept4(2) is present
    898e853 virtio: Use const pointer for vu_dev
    324233b udp_flow: Don't block multicast and broadcast messages
    2385b69 Makefile: Report error and stop if we can't set TARGET
    e5ba8ad README: Mark vhost-user as supported
    09478d5 treewide: Dodge dynamic memory allocation in strerror() from glibc > 2.40
    e24f026 pasta: make it possible to disable socket splicing
    947f5cd tap: Call vu_init() with --fd
    2139ad3 tap: Use a common function to start a new connection
    8996d18 udp_vu: update segment size
    1908297 flow: Remove over-zealous sanity checks in flow_sidx_hash()
    1db4f77 udp: Improve detail of UDP endpoint sanity checking
    966fdc8 perf/passt_vu_tcp: Make it shine
    020c8b7 tcp_vu: Compute IPv4 header checksum if dlen changes
    d9c0f8e Makefile: Use make internal string functions
    b6e79ef tcp_vu: Remove unnecessary tcp_vu_update_check() function
    a6348ca tcp: Merge tcp_fill_headers[46]() with each other
    2abf5ab tcp: Merge tcp_update_check_tcp[46]()
    08ea3cc tcp: Pass TCP header and payload separately to tcp_fill_headers[46]()
    2ee0769 tcp: Pass TCP header and payload separately to tcp_update_check_tcp[46]()
    6715109 iov, checksum: Replace csum_iov() with csum_iov_tail()
    f931103 iov: iov tail helpers
    804a7ce tcp_vu: Change 'dlen' to ssize_t in tcp_vu_data_from_sock()
    00cc230 Fix build on 32bit target
    6fae899 virtio: check if avail ring is configured
    7e131e9 tcp: Move tcp_l2_buf_fill_headers() to tcp_buf.c
    676bf54 test: Add tests for passt in vhost-user mode
    28997fc vhost-user: add vhost-user
    b2e62f7 passt: rename tap_sock_init() to tap_backend_init()
    b7c292b tcp: Export headers functions
    5a8b33c udp: Prepare udp.c to be shared with vhost-user
    31117b2 vhost-user: introduce vhost-user API
    7d1cd4d vhost-user: introduce virtio API
    dd143e3 packet: replace struct desc by struct iovec
    c0fbc7e dhcp: Honour broadcast flag (RFC 2131, 4.1)
    9da2038 dhcp: Introduce support for Rapid Commit (option 80, RFC 4039)
    d6e9e24 dhcp: Use -1 as "missing option" length instead of 0
    14b84a7 treewide: Introduce 'local mode' for disconnected setups
    c6e6106 test: Improve logic for waiting for SLAAC & DAD to complete in NDP tests
    cda7f16 ndp: Don't send first periodic router advertisement right after guest connects
    2bf8ffc test/perf: Select a single IPv6 namespace address in pasta tests
    6819b2e conf, passt.1: Update --mac-addr default in usage() and man page
    b61be84 passt.1: Fix "default" note about --map-guest-addr
    238c69f tcp: Acknowledge keep-alive segments, ignore them for the rest
    af464c4 tcp: Reset ACK_TO_TAP_DUE flag whenever an ACK isn't needed anymore
    5ae2184 ndp: Don't send unsolicited RAs if NDP is disabled
    bf94927 ndp: Don't send unsolicited router advertisement if we can't, yet
    5e24466 selinux: Use auth_read_passwd() interface for all our getpwnam() needs
    6e1e442 ndp: Send unsolicited Router Advertisements
    b39760c passt: Seed libc's pseudo random number generator
    71d5dee util: Add general low-level random bytes helper
    a60703e ndp: Make route lifetime a #define
    36c070e ndp: Use struct assignment in preference to memcpy() for IPv6 addresses
    cbc83e1 ndp: Split out helpers for sending specific NDP message types
    4e47167 ndp: Add ndp_send() helper
    71f228d ndp: Remove redundant update to addr_seen
    0588163 cppcheck: Don't check the system headers
    14dd70e linux_dep: Fix CLOSE_RANGE_UNSHARE availability handling
    d64f257 linux_dep: Move close_range() conditional handling to linux_dep.h
    b84cd05 log: Only check for FALLOC_FL_COLLAPSE_RANGE availability at runtime
    58fa550 tap, tcp, util: Add some missing SOCK_CLOEXEC flags
    71869e2 passt: Use NOLINT clang-tidy block instead of NOLINTNEXTLINE
    d4f09c9 util: Define small and big thresholds for socket buffers as unsigned long long
    87940f9 tap: Cast TAP_BUF_BYTES - ETH_MAX_MTU to ssize_t, not TAP_BUF_BYTES
    1feb90f dhcpv6: Turn some option headers pointers to const
    5f5e814 dhcpv6: Use for loop instead of goto to avoid false positive cppcheck warning
    78da088 tcp: unify payload and flags l2 frames array
    9a0e544 test: Improve test for NDP assigned prefix
    910f4f9 test: Don't require 64-bit prefixes in perf tests
    1699083 test: Make nstool hold robust against interruptions to control clients
    b456ee1 test: Rename propagating signal handler
    867db07 util: Work around cppcheck bug 6936
    6f913b3 udp: Don't dereference uflow before NULL check in udp_reply_sock_handler()
    d8e05a3 ndp: Use const pointer for ndp_ns packet
    0d7b820 linux_dep: Generalise tcp_info.h to handling Linux extension compatibility
    c5f4e4d fwd: Squash different-signedness comparison warning
    1e76a19 util: Remove unused ffsl() function
    1d7cff3 clang: Add rudimentary clangd configuration
    c560e2f Makefile: Don't attempt to auto-detect stack size
    13fc6d5 Makefile: Use -DARCH for qrap only
    7917159 seccomp: Simplify handling of AUDIT_ARCH
    93bce40 Makefile: Move NETNS_RUN_DIR definition to C code
    c938d8a netlink: RTA_PAYLOAD() returns int, not size_t
    f6b546c flow: Correct type of flowside_at_sidx()
    30b4f88 arch: Avoid explicit access to 'environ'
    b78e72d clang: Move clang-tidy configuration from Makefile to .clang-tidy
    8346216 Makefile: Simplify exclusion of qrap from static checks
    8f1b6a0 clang: Add .clang-format file
    5e93bcd test: Adjust misplaced sleeps in two_guests code
    9afce0b tap: Explicitly cast TUNSETIFF to fix build warning with musl on ppc64le
    d165d36 tcp: Fix build against musl, __sum16 comes from linux/types.h
    ee7d0b6 util: Don't use errno after a successful call in __daemon()
    b1a607f udp: Take care of cert-int09-c clang-tidy warning for enum udp_iov_idx
    099ace6 treewide: Address cert-err33-c clang-tidy warnings for clock and timer functions
    59fe34e treewide: Suppress clang-tidy warning if we already use O_CLOEXEC
    134b4d5 Makefile: Disable readability-math-missing-parentheses clang-tidy check
    7442478 treewide: Silence cert-err33-c clang-tidy warnings for fprintf()
    98efe7c treewide: Comply with CERT C rule ERR33-C for snprintf()
    988a4d7 Makefile: Exclude qrap.c from clang-tidy checks
    ba38e67 tcp: unify l2 TCPv4 and TCPv6 queues and structures
    2053c36 tcp: set ip and eth headers in l2 tap queues on the fly
    5563d5f test: remove obsolete images
    f43f7d5 tcp: cleanup tcp_buf_data_from_sock()
    e7fcd0c tcp: Use runtime tests for TCP_INFO fields
    8114381 tcp: Generalise probing for tcpi_snd_wnd field
    13f0291 tcp: Remove compile-time dependency on struct tcp_info version
    9e4615b tcp_splice: fcntl(2) returns the size of the pipe, if F_SETPIPE_SZ succeeds
    149f457 tcp_splice: splice() all we have to the writing side, not what we just read
    9e5df35 tcp: Use structures to construct initial TCP options
    b4dace8 fwd: Direct inbound spliced forwards to the guest's external address
    58e6d68 test: Clarify test for spliced inbound transfers
    1fa4211 passt.1: Clarify and update "Handling of local addresses" section
    ef8a516 passt.1: Mark --stderr as deprecated more prominently
    53176ca test: Wait for DAD on DHCPv6 addresses
    75b9c0f test: Explicitly wait for DAD to complete on SLAAC addresses
    f9d677b arp: Fix a handful of small warts
    2d7f734 tcp: Send "empty" handshake ACK before first data segment
    7612cb8 test: Pass TRACE from run_term() into ./run from_term
    b40880c test/lib/term: Always use printf for messages with escape sequences
    ff63ac9 conf: Add --dns-host option to configure host side nameserver
    9d66df9 conf: Add command line switch to enable IP_FREEBIND socket option
    151dbe0 udp: Update UDP checksum using an iovec array
    3d484aa tcp: Update TCP checksum using an iovec array
    e6548c6 checksum: Add an offset argument in csum_iov()
    fd8334b pcap: Add an offset argument in pcap_iov()
    72e7d30 tcp: Use tcp_payload_t rather than tcphdr
    def8acd test: Kernel binary can now be passed via the KERNEL environmental variable
    b55013b inany: Add inany_pton() helper
    cbde419 tcp, udp: Make {tcp,udp}_sock_init() take an inany address
    b8d4fac util, pif: Replace sock_l4() with pif_sock_l4()
    204e77c udp: Don't attempt to get dual-stack sockets in nonsensical cases
    8f8c4d2 tcp: Allow checksum to be disabled
    4fe5f4e udp: Allow checksum to be disabled
    d836d9e util: Remove possible quadratic behaviour from write_remainder()
    bfc294b util: Add helper to write() all of a buffer
    bb41901 tcp: Make tcp_update_seqack_wnd()s force_seq parameter explicitly boolean
    265b209 tcp: Simplify ifdef logic in tcp_update_seqack_wnd()
    4aff6f9 tcp: Clean up tcpi_snd_wnd probing
    7d8804b tcp: Make some extra functions private
    5ff5d55 tcp: Avoid overlapping memcpy() in DUP_ACK handling
    1f414ed tcp: Remove redundant initialisation of iov[TCP_IOV_ETH].iov_base
    6b38f07 apparmor: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
    116bc82 selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
    a33ecaf tap: Don't risk truncating frames on full buffer in tap_pasta_input()
    d2a1dc7 tap: Restructure in tap_pasta_input()
    11e2905 tap: Improve handling of EINTR in tap_passt_input()
    49fc4e0 tap: Split out handling of EPOLLIN events
    63513e5 util: Fix order of operands and carry of one second in timespec_diff_us()
    748ef4c cppcheck: Work around some cppcheck 2.15.0 redundantInitialization warnings
    afedc24 tcp: Use EPOLLET for any state of not established connections
    aff5a49 udp: Handle more error conditions in udp_sock_errs()
    bd99f02 udp: Treat errors getting errors as unrecoverable
    bd092ca udp: Split socket error handling out from udp_sock_recv()
    88bfa38 flow: Helpers to log details of a flow
    1166401 udp: Allow UDP flows to be prematurely closed
    7ad9f9b flow: Fix incorrect hash probe in flowside_lookup()
    0ea60e5 log: Don't prefix log file messages with time and severity if they're continuations
    3836396 Makefile: Enable _FORTIFY_SOURCE iff needed
    eedc81b fwd, conf: Probe host's ephemeral ports
    4a41dc5 conf, fwd: Don't attempt to forward port 0
    1daf6f4 conf, fwd: Make ephemeral port logic more flexible
    712ca32 seccomp.sh: Try to account for terminal width while formatting list of system calls
    e0be6bc udp: Use dual stack sockets for port forwarding when possible
    c78b194 udp: Remove unnnecessary local from udp_sock_init()
    620e19a udp: Merge udp[46]_mh_recv arrays
    418feb3 test: Look for possible sshd-session paths (if it's there at all) in mbuto's profile
    1d6142f README: pasta is indeed a supported back-end for rootless Docker
    f00ebda util: Don't stop on unrelated values when looking for --fd in close_open_files()
    05453ea test: Update list of dependencies in README.md
    1a66806 tcp, udp: Allow timerfd_gettime64() and recvmmsg_time64() on arm (armhf)
    6e9ecf5 util: Provide own version of close_range(), and no-op fallback
    7291b70 udp_flow: Add missing unistd.h include for close()
    3963075 test: Duplicate existing recvfrom() valgrind suppression for recv()
    d6817b3 test/passt.mbuto: Install sshd-session OpenSSH's split process
    34be8ee test/passt.mbuto: Run sshd from vsock proxy with absolute path
    aded2b6 test/lib/setup: Transform i686 kernel architecture name into QEMU name (i386)
    2aea1da treewide: Allow additional system calls for i386/i686
    57b7bd2 fwd, conf: Allow NAT of the guest's assigned address
    8436c0d fwd: Distinguish translatable from untranslatable addresses on inbound
    e813a4d conf: Allow address remapped to host to be configured
    dbaaebb test: Reconfigure IPv6 address after changing MTU
    935bd81 conf, fwd: Split notion of gateway/router from guest-visible host address
    90e83d5 Don't take "our" MAC address from the host
    356de97 fwd: Split notion of "our tap address" from gateway for IPv4
    4d8dd1f fwd: Helpers to clarify what host addresses aren't guest accessible
    975cfa5 Initialise our_tap_ll to ip6.gw when suitable
    8d4baa4 Clarify which addresses in ip[46]_ctx are meaningful where
    a42fb9c treewide: Change misleading 'addr_ll' name
    c9f0ec3 util: Correct sock_l4() binding for link local addresses
    57532f1 conf: Remove incorrect initialisation of addr_ll_seen
    0b25cac conf: Treat --dns addresses as guest visible addresses
    a6066f4 conf: Correct setting of dns_match address in add_dns6()
    7c083ee conf: Move adding of a nameserver from resolv.conf into subfunction
    1d10760 conf: Move DNS array bounds checks into add_dns[46]
    6852bd0 conf: More accurately count entries added in get_dns()
    c679894 conf: Use array indices rather than pointers for DNS array slots
    ceea52c treewide: Use struct assignment instead of memcpy() for IP addresses
    905ecd2 treewide: Rename MAC address fields for clarity
    066e699 util: Helper for formatting MAC addresses
    e6feb5a treewide: Use "our address" instead of "forwarding address"
    32c3868 netlink: Fix typo in function comment for nl_addr_set()
    f4e9f26 pasta: Disable neighbour solicitations on device up to prevent DAD
    d6f0220 netlink, pasta: Fetch link-local address from namespace interface once it's up
    74e508c netlink, pasta: Disable DAD for link-local addresses on namespace interface
    0c74068 netlink, pasta: Turn nl_link_up() into a generic function to set link flags
    8231ce5 netlink, pasta: Split MTU setting functionality out of nl_link_up()
    b91d337 netlink: Fix typo in function comment for nl_addr_get()
    9462064 test: Speed up by cutting on eye candy and performance test duration
    61c0b0d flow: Don't crash if guest attempts to connect to port 0
    baba284 conf: Don't ignore -t and -u options after -D
    c16141e ndp.c: Turn NDP responder into more declarative implementation
    f6d5a52 conf: Delay handling -D option until after addresses are configured
    86bdd96 Correct inaccurate comments on ip[46]_ctx::addr
    fecb1b6 log: Don't prefix message with timestamp on --debug if it's a continuation
    baccfb9 conf: Stop parsing options at first non-option argument
    09603ca passt, util: Close any open file that the parent might have leaked
    755f9fd nstool: Propagate SIGTERM to processes executed in the namespace
    5ca61c2 nstool: Fix some trivial typos
    a628cb9 log: Avoid duplicate calls to logtime()
    2c7558d log: Handle errors from clock_gettime()
    b91bae1 log: Correct formatting of timestamps
    95569e4 util: Some corrections for timespec_diff_us
    fbb0c95 conf, pasta: Make -g and -a skip route/addresses copy for matching IP version only
    ee36266 log, passt: Keep printing to stderr when passt is running in foreground
    3a082c4 tcp_splice: Fix side in OUT_WAIT flag setting
    031df33 util: Use unsigned (size_t) value for iov length
    e877f90 udp_flow: move all udp_flow functions to udp_flow.c
    623ceb1 udp_flow: Remove udp_meta_t from the parameters of udp_flow_from_sock()
    a5bbefa log: Make logfile_write() private
    f30ed68 pasta: Save errno on signal handler entry, restore on return when needed
    0149d11 pasta: modify hostname when detaching new namespace
    8fae3b7 Fix typo in README file
    f87b11c fedora/rpkg: List myself as author for changelog entries
    57a21d2 tap: Improve handling of partially received frames on qemu socket
    37e3b24 tap: Correctly handle frames of odd length
    4684f60 tap: Don't use EPOLLET on Qemu sockets
    9e3f235 tap: Don't attempt to carry on if we get a bad frame length from qemu
    a06db27 tap: Better report errors receiving from QEMU socket
    77c092e log: Fetch log times with CLOCK_MONOTONIC, not CLOCK_REALTIME
    e5c37ba log: Initialise timestamp for relative log time also if we use a log file
    327d9d4 log, util: Fix sub-second part in relative log time calculation
    2ce1d37 test/lib/perf_report: Fix highlight
    e9a5423 test: Fix spurious test failure with systemd-resolved
    becf81a fwd: Broaden what we consider for DNS specific forwarding rules
    0ada84e fwd: Refactor tests in fwd_nat_from_tap() for clarity
    4a333c8 conf: Accept addresses enclosed by square brackets in port forwarding specifiers
    6ff702f tap: Exit if we fail to bind a UNIX domain socket with explicit path
    f72d35a test: iperf3 3.16 introduces multiple threads, drop our own implementation of that
    606e0c7 test: Update names of symbols and slabinfo entries
    f16f8f5 test: Fix memory/passt tests, --netns-only is not a valid option for passt
    1cd7730 log: Drop newlines in the middle of the perror()-like messages
    1329558 tcp: Change SO_PEEK_OFF support message to debug()
    d19b396 tap: Don't quit if pasta gets EIO on writev() to tap, interface might be down
    a09aeb4 tcp: Correctly update SO_PEEK_OFF when tcp_send_frames() drops frames
    9cb6b50 tcp: probe for SO_PEEK_OFF both in tcpv4 and tcp6
    882599e udp: Rename UDP listening sockets
    d29fa08 udp: Remove rdelta port forwarding maps
    d89b3aa udp: Remove obsolete socket tracking
    898f797 udp: Direct datagrams from host to guest via flow table
    b7ad193 udp: Find or create flows for datagrams from tap interface
    8126f7a udp: Remove obsolete splice tracking
    e0647ad udp: Handle "spliced" datagrams with per-flow sockets
    a45a7e9 udp: Create flows for datagrams from originating sockets
    8abd06e fwd: Update flow forwarding logic for UDP
    c000f2a flow, icmp: Use general flow forwarding rules for ICMP
    060f24e flow, tcp: Flow based NAT and port forwarding for TCP
    4cd753e icmp: Manage outbound socket address via flow table
    781164e flow: Helper to create sockets based on flowside
    2faf6fc icmp: Eliminate icmp_id_map
    2f40a01 icmp: Look up ping flows using flow hash
    6d76278 icmp: Obtain destination addresses from the flowsides
    5cffb1b icmp: Remove redundant id field from flow table entry
    508adde tcp: Re-use flow hash for initial sequence number generation
    acca423 flow, tcp: Generalise TCP hash table to general flow hash table
    163a339 tcp, flow: Replace TCP specific hash function with general flow hash
    f19a8f7 tcp_splice: Eliminate SPLICE_V6 flag
    528a651 tcp: Simplify endpoint validation using flowside information
    e2ea10e tcp: Manage outbound address via flow table
    52d45f1 tcp: Obtain guest address from flowside
    f9fe212 tcp, flow: Remove redundant information, repack connection structures
    4e2d36e flow: Common address information for target side
    8012f5f flow: Common address information for initiating side
    ba74b1f doc: Extend zero-recv test with methods using msghdr
    01e5611 doc: Test behaviour of closing duplicate UDP sockets
    66a02c9 tcp_splice: Use parameterised macros for per-side event/flag bits
    5235c47 flow: Introduce flow_foreach_sidei() macro
    71d7985 flow, tcp_splice: Prefer 'sidei' for variables referring to side index
    9b125e7 flow, icmp, tcp: Clean up helpers for getting flow from index
    2fa91ee udp: Handle errors on UDP sockets
    6bd8283 util: Add AF_UNSPEC support to sockaddr_ntop()
    4e1f850 udp, tcp: Tweak handling of no_udp and no_tcp flags
    272d1d0 udp: Make udp_sock_recv static
    f79c423 conf: Don't configure port forwarding for a disabled protocol
    a740e16 tcp: handle shrunk window advertisements from guest
    e63d281 tcp: leverage support of SO_PEEK_OFF socket option when available
    8bd57bf doc: Trivial fix for reuseaddr-priority
    ec2691a doc: Test behaviour of zero length datagram recv()s
    299c407 doc: Add program to document and test assumptions about SO_REUSEADDR
    be0214c udp: Consolidate datagram batching
    69e5393 udp: Move some more of sock_handler tasks into sub-functions
    c6c61a9 udp: Don't repeatedly initialise udp[46]_eth_hdr
    55aff45 udp: Unify udp[46]_l2_iov
    9f9b15f udp: Unify udp[46]_mh_splice
    fbd78b6 udp: Rename IOV and mmsghdr arrays
    f62c33d udp: Pass full epoll reference through more of sock handler path
    8f8eb73 flow: Add flow_sidx_valid() helper
    74c1c5e util: sock_l4() determine protocol from epoll type rather than the reverse
    b625ed5 conf: Use the right maximum buffer size for c->sock_path
    403a7c1 tcp_splice: Check return value of setsockopt() for SO_RCVLOWAT
    21ee1eb conf: Copy up to MAXDNSRCH - 1 bytes, not MAXDNSRCH
    1ee2eca udp: Reduce scope of rport in udp_invert_portmap()
    0546975 Revert "udp: Make rport calculation more local"
    c66f034 log: Don't report syslog failures to stderr after initialisation
    e7323e5 conf, passt: Don't call __openlog() if a log file is used
    dba7f0f treewide: Replace strerror() calls
    92a22fe treewide: Replace perror() calls with calls to logging functions
    c1140df log: Add _perror() logging function variants
    afd9cdc log, passt: Always print to stderr before initialisation is complete
    8c2f24a conf, log: Instead of abusing log levels, add log_conf_parsed flag
    bca0fef conf, passt: Make --stderr do nothing, and deprecate it
    b748016 conf, passt: Don't try to log to stderr after we close it
    65923ba conf: Accept duplicate and conflicting options, the last one wins
    62de614 netlink: Strip nexthop identifiers when duplicating routes
    1544a43 passt.1, qrap.1: align license description with SPDX identifier
    f301bb1 netlink: Ignore EHOSTUNREACH failures when duplicating routes
    450a613 netlink: With no default route, pick the first interface with a route
    54a9d38 tcp: Don't rely on bind() to fail to decide that connection target is valid
    020ff7a siphash: Remove stale prototypes
    7e87bd9 udp: Move management of udp[46]_localname into udp_splice_send()
    ff57f8d udp: Rework how we divide queued datagrams between sending methods
    63db7dc udp: Fold checking of splice flag into udp_mmh_splice_port()
    523fbc5 util: Split construction of bind socket address from the rest of sock_l4()
    4070bac tap: use in->buf_size rather than sizeof(pkt_buf)
    7290335 iov: remove iov_copy()
    0c335d7 vhost-user: compare mode MODE_PASTA and not MODE_PASST
    377b666 udp: rename udp_sock_handler() to udp_buf_sock_handler()
    e7ac995 udp: refactor UDP header update functions
    9ecf7fe tap: refactor packets handling functions
    fba2b54 tcp: move buffers management functions to their own file
    ec26fa0 tcp: extract buffer management from tcp_send_flag()
    d949667 cppcheck: Suppress constParameterCallback errors
    8a83b53 selinux: Allow access to user_devpts
    ec416fd tcp, flow: Fix some error paths which didn't clean up flows properly
    3f63743 util: Use 'long' to represent millisecond durations
    f9e8ee0 lineread: Use ssize_t for line lengths
    c919bbb conf: Safer parsing of MAC addresses
    bda80ef util: Use unsigned indices for bits in bitmaps
    0e36fe1 clang-tidy: Enable the bugprone-macro-parentheses check
    7094b91 Remove pointless macro parameters in CALL_PROTO_HANDLER
    c80fa6a udp: Make rport calculation more local
    d2afb4b tcp: Make pointer const in tcp_revert_seq
    b3aeb00 log: Remove log_to_stdout option
    7cb2088 conf: Don't print usage via the logging subsystem
    e651197 conf: Remove unhelpful usage() wrapper
    e84a01e tcp: move seq_to_tap update to when frame is queued
    765eb0b apparmor: Fix comments after PID file and AF_UNIX socket creation refactoring

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
bf7e72e649 cni-plugins: update to v1.6.1
Bumping cni-plugins.git to version v1.1.0-345-gabfac4a9, which comprises the following commits:

    abfac4a9 Remove scripts/release.sh because of no longer used (#1137)
    eded0afc build(deps): bump the golang group across 1 directory with 3 updates
    41d54859 build(deps): bump alpine in /.github/actions/retest-action
    e8c7d9b9 test: enable unpriv user namespaces
    ba8bc7d0 Bump Go version to 1.23 in scripts/release.sh (#1123)
    7f756b41 portmap: fix iptables conditions detection
    3ffc42cd build(deps): bump the golang group across 1 directory with 7 updates
    6de8a985 ipmasq: fix nftables backend
    9296c5f8 portmap: fix nftables backend
    fec2d626 Pass status along ipam update
    a4fc6f93 feat(dhcp): Cancel backoff retry on stop
    d61e7e5e fix(dhcp): can not renew an ip address
    e4950728 build(deps): bump golang.org/x/sys in the golang group
    93d197c4 VRF: Wait for the local/host routes to be added
    c52e02bc add problem hint
    24b0bf96 make test working again
    d44bbf28 Revert "Merge pull request #921 from oOraph/dev/exclude_subnets_from_traffic_shapping2"
    8ad03619 resolve merge conflicts
    8324a2e5 build(deps): bump the golang group across 1 directory with 2 updates
    a4b80cc6 host-device: use temp network namespace for rename
    3a49cff1 Fix txqueuelen being accidentally set to zero
    c11ed487 Ignore link-local routes in SBR tests
    fa737f82 build(deps): bump the golang group with 3 updates
    e5df283a ci, go.mod: bump to go 1.23 (#1094)
    cc8b1bd8 dhcp: Add priority option to dhcp.
    03712a57 .github: add check to verify vendor directory
    01a94e17 Add nftables backend to portmap
    3d1968c1 Fix portmap unit tests
    a3ccebc6 Add a backend abstraction to the portmap plugin
    61d07864 Add nftables implementation of ipmasq
    729dd23c Vendor nftables library, add utils.SupportsIPTables and utils.SupportsNFTables
    a6d6efa5 Use of Scope for routes in IPAM
    01b3db8e SBR: option to pass the table id (#1088)

Bumping flannel-cni-plugin.git to version v1.6.0-flannel1-19-gcc21427, which comprises the following commits:

    eca5d1d Bump alpine from 20240923 to 20250108
    055b015 Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
    2f6a5c2 Bump github.com/onsi/gomega from 1.36.0 to 1.36.1
    7838b98 Bump alpine from 20240807 to 20240923
    9b7cc09 Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
    773a5f0 Bump github.com/onsi/gomega from 1.35.1 to 1.36.0
    4a32784 Call Unmountns in addition to calling ns.Close()
    1da6802 Bump to 1.23.3 and cni-plugins 1.6.0
    8453685 Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0
    5ee8096 Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0
    d3a492d Bump github.com/onsi/gomega from 1.34.2 to 1.35.1
    d3c964a Bump github.com/containernetworking/plugins from 1.5.1 to 1.6.0
    b691133 Bump github.com/onsi/gomega from 1.34.1 to 1.34.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
0b75eead63 lxc: update to v6.0.3
Bumping lxc to version v6.0.3, which comprises the following commits:

    fe31d844e Release LXC 6.0.3
    b63c630fd github: Improve progress reporting
    eb5095c3c github: Cleanup OSS-fuzz
    8fa61eea5 github: Rework test workflow
    0be2aed41 github: Introduce shared testsuite logic
    1fce28876 github: Introduce shared build logic
    8fde2ff28 github: Update coverity workflow
    787a0f821 lxc.init: Allow SIGHUP from outside the container
    17fea37cc lxc.init: Ignore user signals coming from inside the contianer
    5dead1d05 lxc.init: Switch to sigaction
    3011e79f9 lxccontainer: fix enter_net_ns helper to work when netns is inherited
    537986ec8 fix return code of recursive all of cgroup_tree_prune
    7f148c284 lxc-net: Replace random IPv6 subnet
    1fc5314ff meson: fix minor typo
    f7681840a Avoid null pointer dereference when using shared rootfs. rootfs->storage not set by lxc_storage_prepare when using a shared rootfs.
    27f02b8c8 create_run_template: don't use txtuid and txtguid out of scope
    acc334a9c Add suppport for PuzzleFS images in the oci template
    f9992d819 meson.build: drop suggest-attribute=noreturn build option
    277ac3640 meson.build: add -ffat-lto-objects
    2444f5841 Release LXC 6.0.2
    a85dc4b3d fix possible clang compile error in AARCH
    f5a5ea3cf README: Update security contact
    226fe3d54 doc: Fix definitions of get_config_path and set_config_path
    a4c5d7ee0 Exit 0 when there's no error
    19e14a26f idmap: Lower logging level of newXidmap tools to INFO
    704504e3d Remove unused function
    f1be0d814 Release LXC 6.0.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
876864dd59 riddler: update to v0.6.4
We refresh a patch and re-organize the go src for building

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
b6460736c9 riddler: update to v0.6.4
Bumping riddler to version v0.6.4-1-g66698f2, which comprises the following commits:

    66698f2 update generation
    11e1ff9 Bump version to v0.6.4
    111df66 docs: Update TOC
    94c8242 update to github actions
    97bd55f update vendor
    1f6525f update travis
    77bd627 Update ToC for README.md
    875f920 toc
    0b055dd update travis
    e5f037e Fix golint import path (#21)
    80f5b35 update vendor
    d0acd29 update vendor
    de29e40 update vendor
    dd2873d Bump version to v0.6.3
    0e5c8db update vendor
    8b87d31 update makefile
    692c487 update makefile
    417bb3d Sometimes the field "c.HostConfig.Resources.MemorySwappiness" is nil. (#20)
    6148709 Bump version to v0.6.2
    a86aac4 update cli pkg
    1fdb9b1 update generated project files
    eb5bf13 Bump version to v0.6.1
    da3cd49 update deps
    350749b update project template
    d2f5596 update deps
    bb1c9ed update makefile
    dd24e84 update generated project files
    7a7c7c9 remove deadcode
    ecc2b82 update deps
    5a3924a move repo from jessfraz to genuinetools and update paths
    e2650aa update generated project files
    114151b update deps
    fbfdbf7 fix travis
    ac17aed Bump version to v0.6.0
    64fdb81 update gofmt
    657e255 Bump version to v0.5.0
    7220bc6 fix gofmt
    894bdd7 Bump version to v0.4.0
    d059cb5 update vendor
    1b91705 Bump version to v0.3.0
    7333db3 update vendor
    26fbf35 Bump version to v0.2.0
    4354179 fix lint
    f72494d fix staticcheck
    99043f1 update readme
    c945270 Bump version to v0.1.0
    e96ba2a update build
    69e4f0b fix main.go
    fd7d91d update generated project files
    ebd6e08 fixups
    eab9733 update readme
    bdef87d update
    4cb0876 Update spec version to current version

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
6b4793ce2e umoci: update to v0.4.7 -tip
Bumping umoci to version v0.4.7-260-g8f807a3, which comprises the following commits:

    e9fff47 pkg: fmtcompat: remove now that there are no users
    63bbda0 errors: drop remaining errors.Wrap-like fmtcompat.Errorf users
    73fffb3 errors: drop fmtcompat.Errorf for complicated err != nil checks
    00a632e errors: drop fmtcompat.Errorf for explicit err != nil checks
    5339feb errors: drop fmtcompat.Errorf for non-%w errors
    1c67765 *: migrate to Go stdlib error wrapping
    cd18171 pkg: fmtcompat: add a compatibility shim for fmt.Errorf
    aaa6de8 fmt: use %q for quoting
    97cbde3 *: fix new golint warnings
    094e766 gha: enable CodeQL scanning
    e597e6a idtools: return errors for >u32 specification
    71d012d oci: casext: mediatype: switch to generics for parser functions
    0a5d0dc build(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6
    3405ba8 Fixed typo in rootless.md
    3cf87e0 build(deps): bump codecov/codecov-action from 4 to 5
    7bc95ad build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0
    a357a4e build(deps): bump github.com/moby/sys/user from 0.1.0 to 0.3.0
    7e48118 build(deps): bump opensuse/leap from 15.5 to 15.6
    3e5ade3 build(deps): bump actions/cache from 3 to 4
    a59f5ba build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
    3078d6b build(deps): bump github.com/vbatts/go-mtree from 0.5.3 to 0.5.4
    ce130df build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
    6fd54fc build(deps): bump codecov/codecov-action from 3 to 4

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
617bca3a4b skopeo: update to v1.17.0
Bumping skopeo to version v1.17.0-41-g0633de63, which comprises the following commits:

    6483de48 fix(deps): update module github.com/containers/storage to v1.56.1
    b5a13bcc systemtest: update quay.io registry image
    eae9e886 chore(deps): update dependency containers/automation_images to v20250107 (#2488)
    b68afb1a fix(deps): update module golang.org/x/term to v0.28.0
    2a47dff7 chore(deps): update dependency golangci/golangci-lint to v1.63.4
    83efeea4 chore(deps): update dependency golangci/golangci-lint to v1.63.3
    deda9663 chore(deps): update dependency golangci/golangci-lint to v1.63.2
    fb777d39 fix(deps): update golang.org/x/exp digest to b2144cd
    568d5d1c chore(deps): update module golang.org/x/net to v0.33.0 [security]
    1866ecbd fix(deps): update module github.com/containers/ocicrypt to v1.2.1
    b116c5bd fix(deps): update module golang.org/x/term to v0.27.0
    27baed91 Fix handling of errorShouldDisplayUsage
    a71a8b4c fix(deps): update golang.org/x/exp digest to 2d47ceb
    4541d649 Packit: remove rhel (epel) jobs
    96f38043 Packit: switch fedora copr targets to fedora-all
    e9755957 fix(deps): update module github.com/stretchr/testify to v1.10.0
    2a3c8ee5 chore(deps): update dependency golangci/golangci-lint to v1.62.2
    f423f01d Update an expected error message
    186e9b4f fix(deps): update module github.com/masterminds/semver/v3 to v3.3.1
    f818827f chore(deps): update dependency golangci/golangci-lint to v1.62.0
    bae8ccd7 fix(deps): update module github.com/moby/sys/capability to v0.4.0
    293ac065 Bump to c/Skopeo v1.18.0-dev
    e354a143 Bump to c/Skopeo v1.17.0
    34f06441 Bump c/common to v0.60.0
    fa1762f5 fix(deps): update module github.com/containers/image/v5 to v5.33.0
    15f69ac6 Trigger a rebuild of the ostree-rs-ext container
    33a629dd Update contrib/cirrus/ostree_ext.dockerfile for DNF 5
    bc57843b update CI images to f41
    8d3fb4b3 cirrus: use dnf remove over erase
    c0cc7ed2 fix(deps): update golang.org/x/exp digest to f66d83c
    602c121f fix(deps): update module github.com/containers/storage to v1.55.1
    7fbdd714 Fix format string inconsistency causing a build failure
    3f66d002 proxy: Add various debug logging
    43d066e0 chore(deps): update dependency containers/automation_images to v20241010
    10a9e24d * Added option to create digest file for syncing images. * Digest file output would have docker reference of source and sha of of the mainfest sync'd with the target. This file would not be created if dry-run flag is enabled * improved the sync document to include the correct output for manifest file. * added new line for the manifest file once all images are sync'd * Ensuring we log on manifest digest if the copy operation was successful. * Check for errors if any once sync process is complete. * Ensure to capture the failure when closing the manifest file. * Ensure we are not writing manifest sha for failed copy of imagesand aborting the process in case write to file fails
    6ad77a1b Packit: constrain downstream koji job to fedora package
    9b960383 fix(deps): update module golang.org/x/term to v0.25.0
    01ad0ed0 fix(deps): update module github.com/containers/common to v0.60.4
    60b5f0e8 fix(deps): update golang.org/x/exp digest to 701f63a
    f240ce07 vendor: switch to moby/sys/capability (#2428)
    ee618142 Document that zstd:chunked is downgraded to zstd when encrypting
    0fd65fb7 fix(deps): update module github.com/containers/common to v0.60.3
    e39efb10 Packit: split out ELN jobs and reuse fedora downstream targets
    7da6ea07 Packit: Enable sidetags for bodhi updates
    6d2672c9 chore(deps): update dependency golangci/golangci-lint to v1.61.0
    b113a2de fix(deps): update module golang.org/x/term to v0.24.0
    9166a97b Use a range expression
    795705e4 Update to Go 1.22
    bebbbaee Restrict Packit targets to those that support Go 1.22
    6b13950b fix(deps): update golang.org/x/exp digest to 9b4947d
    115a6de9 chore(deps): update dependency containers/automation_images to v20240821
    a8170067 Update skopeo-generate-sigstore-key.1.md
    dd5ce5d9 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
    229c9fad fix(deps): update module github.com/masterminds/semver/v3 to v3.3.0
    6e0b7a12 fix(deps): update module github.com/containers/common to v0.60.2
    b9620327 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
    3151e088 fix(deps): update module github.com/containers/image/v5 to v5.32.2
    d3827613 Replace egrep with grep -E
    df598d7f [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.1
    17da5826 fix(deps): update module github.com/containers/common to v0.60.1
    38e29cdf fix(deps): update module github.com/containers/image/v5 to v5.32.1
    84558d45 fix(deps): update module golang.org/x/term to v0.23.0
    39dccc2a The fakeroot package doesn't exist in RHEL.
    d17c8093 Bump Skopeo to v1.17.0-dev
    88aad2e5 Bump Skopeo to v1.16.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
ea15fd0614 runc: drop runc-docker
The changes carried in runc-docker are no longer required, and if
they become relevant again, they don't belong in the base recipe.

This is the first part of the change, we drop runc-docker + patches
and update runc-opencontainers to RPROVIDE runc-docker in case there
are referenced that we don't know about. There shouldn't be any,
since virtual-runc has been the RPROVIDE of choice for some time.

We keep runc-opencontainers for now, since there may be alternate
runc implementations in the future. In about a year, we'll unify
the .inc and .bb if no new implementations have been proposed.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
79db703e34 runc-opencontainers: update to v1.2.0
Bumping runc to version v1.2.0-149-g610aa88a, which comprises the following commits:

    06f1e076 libct: speedup process.Env handling
    6171da60 libct/configs: add HookList.SetDefaultEnv
    c49b8916 tests: add test to check StartContainer hook env
    390641d1 libct/int: improve TestExecInEnvironment
    9a545947 libct/int: add BenchmarkExecInBigEnv
    a69d289f build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2
    061483b6 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
    48ad17f4 build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
    83350c24 libct/system: rm Fexecve
    c0abf76e Update README.md
    f8483049 build(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1
    57462491 libct/configs/validate: add IOPriority.Class validation
    7334ee01 libct/configs: rm IOPrioClassMapping
    5d3942ee libct: unify IOPriority setting
    ec465d39 utils: simplify newProcess
    2dc3ea4b libct: simplify setIOPriority/setupScheduler calls
    93091e6a libct: don't pass SpecState to init unless needed
    8afeb583 libct: add/use configs.HasHook
    171c4149 refactor init and setns process
    5855ba53 build(deps): bump github.com/cilium/ebpf from 0.17.0 to 0.17.1
    e809db84 build(deps): bump github.com/cilium/ebpf from 0.16.0 to 0.17.0
    c2b11a63 build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
    71327d7f build(deps): bump github.com/cyphar/filepath-securejoin
    af929228 RELEASES: add formal release policy for runc
    21c0968b remove broken fuzzer from oss-fuzz build script
    9468986a ci: use a specific ubuntu version
    e845f4be ci: bump golangci-lint to v1.62
    705382ac build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0
    394f4c3b Re-add tun/tap to default device rules
    b15fcc1b keyring: update @kolyshkin key expiry
    5a838ccb tests/cmd/sd-helper: switch from configs to cgroups
    a56f85f8 libct/*: switch from configs to cgroups
    04041f21 libct/cgroups/*: switch from configs to cgroups
    ae477f15 libct/configs: move cgroup stuff to libct/cgroups
    85c7c99d libct/cg/fs2: fix some revive linter warnings
    66fe7db3 Move test helper binaries
    47dc1858 Add runc_nocriu build tag
    c487840f Remove main package dependency on criurpc
    2f1b6626 deps: update to github.com/cyphar/filepath-securejoin@v0.3.5
    c0044c7a cgroup: ebpf: make unexpected errors in haveBpfProgReplace louder
    9bc6753d cgroups: ebpf: also check for ebpf.ErrNotSupported
    dea0e04d cgroups: ebpf: use link.Anchor to check for BPF_F_REPLACE support
    d5694eed build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
    ec7e90b3 build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
    66969827 Switch to github.com/moby/sys/capability v0.4.0
    fe73f1a9 libct/cap: switch to lazy init
    cdee1b38 libct/cap: preallocate slices
    b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
    fffc165d tests: add test for 'weird' external namespace joining
    fadc55eb nsenter: implement a two-stage join for setns
    a97d7cb2 nsenter: refuse to join unknown namespaces
    49bee5c4 cfmt: use the Linux { a, b } decl style

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
ac82e30c68 podman-tui: update to v1.3.0
Bumping podman-tui to version v0.9.0-406-g37019c2f, which comprises the following commits:

    37019c2f Bump to v1.3.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
9924532fa8 podman-compose: update to v1.3.0
Bumping podman-compose to version v1.3.0-4-g60ac5e4, which comprises the following commits:

    48c6c38 build(deps): bump virtualenv from 20.25.1 to 20.26.6
    ac5291e RELEASING: Fix release command
    9cbc4c1 Release 1.3.0
    6de335b Release notes for 1.3.0
    2379924 Add documentation for how to create a release
    eda4815 scripts: Add script to make new release
    cbb0cab scripts: Add script to create release notes
    483103a Declare compatibility with Python 3.13
    804852b Provide support for cache_from and cache_to fields
    f11e08e Read log output by chunks if a line is too long
    35cf4bc tests: Add test for container_to_build_args()
    9964604 Extract container_to_build_args()
    ac7ec5c Support network level mac_address attribute
    346f7a5 Ignore creating networks on network_mode=bridge.
    5564224 Add integration test for network scoped aliases
    978a138 Support network scoped service aliases
    4a232f5 Merge single and multi network handling in get_net_args_from_networks()
    aa8c6fd Simplify network handling in get_net_args_from_networks()
    fb0bbd6 Cleanup network alias processing
    b324029 Simplify network name processing when there is single network
    590c371 Move network alias processing to common location
    16196a1 Simplify ip address processing in get_net_args_from_networks()
    2dfbb59 Extract multiple network handling in get_net_args_from_networks()
    a34d1d1 Remove unused ip_assignments in get_net_args_from_networks()
    d6da65e Extract get_net_args_from_networks()
    de2c33d Simplify get_net_args_from_network_mode()
    2891be0 Ensure that network_mode and networks are not present at the same time
    a023dc1 Extract get_net_args_from_network_mode()
    420d19d Add integration test for default network behavior
    2cfc617 Support docker-compose like default network behavior
    054c66b Add device_cgroup_rules support
    145ae47 Simplified statements to retrieve keys from dictionaries
    a67fa0b Adding support for conditional dependencies
    3ba0396 Normalize depends_on service property
    973e15b Wrap dependencies within a class
    002c2e4 Extract run_container()
    a9cfdb6 build(deps): bump actions/checkout from 2 to 4
    c0dc3e4 build(deps): bump softprops/action-gh-release from 1 to 2
    41e69be Fix Dockerfile link in readme
    4203f79 add release.yml workflow
    69e95be add Dockerfile and related scripts
    db0aad9 podman-compose down removes networks
    ab33954 add ssh support for build command
    90f54b9 Add x-podman.no_hosts extension
    df8fa58 tests/integration: Automate manual 'nets_test2' test
    5c81bbf tests/integration: Automate manual 'nets_test1' test
    deed4d5 tests/integration: Automate manual 'ipam_default' test
    08b3ac2 tests/integration: Delete 'netprio' test
    0de7e13 tests/integration: Automate manual 'multicompose' test
    cb294d7 tests/integration: Automate manual 'nethost' test
    8d0dd21 tests/integration: Automate manual 'interpolation' test
    4a7329b Revert "Use defined environment variables in the image build process"
    de3f93c tests/integration: Relocate 'filesystem' test
    f4bf69b tests/integration: Automate manual 'extends_w_file_subdir' test
    124879a tests/integration: Automate manual 'extends_w_file' test
    368efe2 tests/integration: Automate manual 'extends_w_empty_service' test
    5610949 test: Use stable apt-get cli for package installation
    ea239c4 Simplify secrets assignment
    9fdee76 Initialize default values in PodmanCompose constructor
    0a6e0a3 Fix services replicas type
    26e6651 Type hints via annotations
    4626033 Remove is_dict,is_str for better pyright inference
    8411db4 Minimum Python version 3.9
    ed58ac0 clean up redundant default_net variable
    305f25b clean up redundant proj_name
    dc04108 tests/integration: Automate manual 'extends' test
    92dbd36 tests/integration: Automate 'env-file-tests' manual tests
    9e11c6b tests/integration: Automate manual 'exit-from' tests
    0d24c41 tests/integration: Automate 'env-tests' manual test
    34f5268 Add unittest for rec_subs
    b5eaf31 Support variable substitution with service's environment
    b3c49df podman_compose.py: support "platform" property in the build command
    7d7e64f Update docs+messages to reflect uidmaps/gidmaps code
    3c9c18c tests/integration: Automate `deps` manual test
    1e66c28 Remove references to nonexistent devel and stable branches
    d95b4d0 Add newsfragment
    e2eb883 Add `--network=none` if `network_mode: none` is set; fixes #1001.
    8505009 Support python direct call _parse_args or run

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
c2e487745f podman: update to v5.3.1-tip
Bumping libpod to version v5.3.1-21-g8dc23e107e, which comprises the following commits:

    d9a47a6d87 Revert "win-installer test: revert to v5.3.0"
    957b4da983 Avoid rebooting twice when installing WSL
    439136d76e Avoid rebooting on Windows when upgrading and WSL isn't installed
    434b0b6e4f Add win installer patch
    d4a7688b06 Bump WiX toolset version to 5.0.2
    1ca5ab6e9c Add man pages to Mac installer
    139fd2a7cf Replace ExclusiveArch with ifarch
    cd1b2981b4 Fixes missing binary in systemd.
    d4976e0677 Packit: remove epel and re-enable c9s
    fee50f0f31 Packit/copr: switch to fedora-all
    0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
    62c096bbce win-installer test: revert to v5.3.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
7e6b171487 netavark: update to v1.13.1
Bumping netavark to version v1.13.1-1-g443d164, which comprises the following commits:

    0935a20 Release v1.13.1
    56428e7 Release notes for v1.13.1
    ce52673 setup: on av errors cleanup again
    f6fe9ed nftables: add daddr match to port forward jump rule
    00e7472 Release v1.13.0
    04650aa Updates release notes for v1.13.0
    84f8e89 run cargo update
    6ba9d5d fix(deps): update rust crate hyper-util to 0.1.10
    5a31988 [skip-ci] Packit: Remove epel targets
    4bc65c2 fix(deps): update rust crate nftables to 0.5.0
    ca9c45e fix(deps): update rust crate anyhow to 1.0.91
    31fc658 fix(deps): update rust crate tokio to 1.41.0
    6284e8b fix(deps): update rust crate anyhow to 1.0.90
    571e26d Updated to zbus4
    bd29d93 chore(deps): update dependency containers/automation_images to v20241010
    8114c82 test-dhcp: fix NOP test
    acd2a9d fix new lint errors with rust 1.81
    e848ea5 fix(deps): update rust crate clap to ~4.5.20
    08333ad contrib/container_images: remove no longer used images
    dc440ac cirrus: check for msrv build
    bb0359d add new rust image to check for MSRV
    e2eea81 define a MSRV policy
    ef66137 [skip-ci] Packit: constrain koji and bodhi to the fedora package
    bc6ad66 chore(deps): update rust crate once_cell to 1.20.2
    7b6df6e fix(deps): update rust-futures monorepo to 0.3.31
    0a3f78b OWNERS file audit and update
    c198914 update tonic and prost dependencies
    97d56bb update tower to v0.5.1
    dccb834 fix(deps): update rust crate sysctl to 0.6.0
    503298d fix(deps): update rust crate netlink-packet-route to 0.21.0
    f0738f2 chore(deps): update rust crate tempfile to 3.13.0
    6433c1c chore(deps): update rust crate once_cell to 1.20.1
    4025d42 fix(deps): update rust crate nispor to 1.2.21
    df781e3 fix(deps): update rust crate anyhow to 1.0.89
    b497d6b nftables: add dns dnat rule first
    22b5110 iptables: add dns dnat rule first
    78ef87f fix(deps): update rust crate anyhow to 1.0.88
    38c90f5 nft: remove port forwarding rules correctly
    f599796 fix(deps): update rust crate tokio-stream to 0.1.16
    ad840ab nft: do not parse localhost string ip
    a7b65ac nft: use append() over push() where possible
    17f8b04 Packit: add sidetag to release with aardvark-dns
    34c742b fix(deps): update rust crate tokio to 1.40.0
    6782bbf fix(deps): update rust crate libc to 0.2.157
    e650a76 fix(deps): update rust crate tokio to 1.39.3
    678beff fix(deps): update rust crate libc to 0.2.156
    4f37d9f aardvark: on start failure delete entries again
    23ac90f iptables: make dns rules cover tcp as well
    7d2882a nftables: make dns rules cover tcp as well
    a21509b fix(deps): update rust crate serde_json to 1.0.123
    8c08678 remove superfluous formatters from debug stmt
    558078f chore(deps): update rust crate tempfile to 3.12.0
    06d8a9e fix new rust 1.80 lint issues
    f0ae7ef silence new rust 1.80 warnings
    748908a chore(deps): update rust crate tempfile to 3.11.0
    af57295 fix(deps): update rust crate serde_json to 1.0.122
    6dd091f Bumping main back to v1.13.0-dev for development
    a4e1359 Release v1.12.1
    8b6117d Update release notes for v1.12.1
    f307944 Change nv cargo categories
    fa2b5fc Bump to 1.13.0-dev
    30d84df Release 1.12
    f42922c Release Notes for 1.12
    743ed24 run cargo update
    097c32f rpm: use nftables as default for f41
    30aee33 fix(deps): update rust crate serde_json to 1.0.121
    7810238 fix(deps): update rust crate tokio to 1.39.2
    0ab24f6 aardvark-dns: trim whitespaces from error text
    d4da022 fix(deps): update rust crate env_logger to 0.11.5
    74952f6 [skip-ci] RPM: handle iptables/nftables dependencies
    ed0dad1 fix aardvark-dns error handling
    63737b2 fix(deps): update rust crate tokio to 1.39.1
    a2dc538 fix(deps): update rust crate env_logger to 0.11.4
    03a2786 fix(deps): update rust crate tokio to 1.38.1
    cf67881 update mozim to 0.2.4
    1fe10c3 fix(deps): update rust crate serde_json to 1.0.120
    26afe34 netavark: dhcp_proxy: use dns servers from dhcp lease
    74b5637 fix(deps): update rust crate serde_json to 1.0.119
    3a1d4a2 fix(deps): update rust crate netlink-packet-route to 0.20.1
    8c2d015 fix(deps): update rust crate log to 0.4.22
    2f02d57 Fix Epoch so upgrade path is preserved from Fedora/RHEL.
    2052269 test: add macvlan metric test
    351b9dc fix(deps): update rust crate serde_json to 1.0.118
    5728114 fix(deps): update rust crate url to 2.5.2
    38baefb fix(deps): update rust crate prost to 0.12.6
    17e34de fix(deps): update rust crate url to 2.5.1
    60ca130 fix(deps): update rust crate iptables to 0.5.2
    5a4bf12 [CI:BUILD] rpm: Update Rust macro usage
    19e72a0 fix(deps): update rust crate nftables to 0.4.1
    fe96f0f fix(deps): update rust crate tokio to 1.38.0
    9e3e310 Bump to 1.12.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
120a507fd2 nerdctl: update to v2.0.2
Bumping nerdctl to version v2.0.2-90-g1259a55e, which comprises the following commits:

    bcc9fa74 update containerd-fuse-overlayfs (2.1.0)
    6dac2cf1 update BuildKit (0.18.1)
    f9347742 build(deps): bump tonistiigi/xx from 1.5.0 to 1.6.0
    e8bca251 build(deps): bump the docker group with 2 updates
    e3e6c3de [doc] rootlesskit port driver configuration
    c2d8b4c6 build(deps): bump github.com/cyphar/filepath-securejoin
    b4ba0cbd build(deps): bump the golang-x group with 6 updates
    d4130581 fix: Fix --env-file flag behavior in nerdctl compose
    b8f4d9c2 Cleanup namespace validation
    3d944cb5 validatePathComponent tests
    9bbf24db Remove dependency on misplaced helper CreateBuildContext for next-gen tests
    e536ed59 Increase timeouts on CI
    f914ea38 gocontext -> context
    775a0053 gocni -> cni
    32ab7472 Create directory for bypass4netns pid file
    e2708fb5 Fix hosts.toml resolution for docker domain
    e28491fa Enhance CNI config load error condition UX
    531e2036 Marking TestCreate/logs as flaky
    69de5dd4 feat: add force-recreate and no-recreate for compose up command
    5fa9f123 Relax compose concurrency lock
    00763909 update CNI plugins (1.6.1)
    09039a18 update stargz-snapshotter (0.16.2)
    70679d49 update BuildKit (0.18.0)
    4a21ba7d docs: the next release will be v2.0.1, not v2.1.0
    442b01d2 Fix permissions for resolv.conf and hosts
    dcaee106 build(deps): bump the stargz group with 3 updates
    eac99f87 build(deps): bump github.com/containerd/nydus-snapshotter
    159e0391 build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
    2ad3f57c fix redundant error checks and comment format
    b060ead7 fix: add fields such as CONTAINER_NAME to journald log entries sent to by containers
    232b6adc build(deps): bump github.com/compose-spec/compose-go/v2
    788fc0c2 fix nerdctl ps slow on heavy IO system by using goroutine
    0e8abacc Update containerd (1.7.24) in CI
    ba72ac7b build(deps): bump github.com/containerd/cgroups/v3 from 3.0.3 to 3.0.4
    f128aac0 fix: refactor pkg/infoutil in order to resolve import cycle
    1cbc1203 update stargz-snapshotter (0.16.1)
    f572d40f build(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1
    3b3c68c1 build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1
    c41cc9d9 Pass appropriate --device arguments from compose to run
    2463f8b6 update BuildKit (0.17.1)
    37df93d3 update runc (1.2.2)
    1fdb4b0a fix: default json-file log size to 100MB
    ae50153a build(deps): bump the stargz group across 1 directory with 3 updates
    32de57ba build(deps): bump github.com/containerd/continuity from 0.4.4 to 0.4.5
    7dce7c78 refactor: Fix golanglint action error
    9c351383 Use a more direct and less error-prone return value
    130397dd build(deps): bump the golang-x group with 2 updates
    d1ea2d7b build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
    a82ae7bb build(deps): bump github.com/compose-spec/compose-go/v2
    b5a11731 build(deps): bump the golang-x group with 4 updates
    7d116bf1 feat: configure custom IP for default bridge network
    d30f66e1 build(deps): bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
    6f2e0326 Mark `nerdctl builder debug` as incompatible with Docker
    417b6170 typo: remove extra spaces at the lead #3650 #3651
    7e89bd3d typo: remove extra colons and whitespaces #3650
    84cea659 [fix] avoid escaping '<', '>', '&'
    7103b54b update SOCI snapshotter (0.8.0)
    29f3ff63 update containerd-fuse-overlayfs (2.0.0)
    2380710b update BuildKit (0.17.0)
    4f64af98 update runc (1.2.1)
    75be32df update containerd (2.0.0)
    ccbaf82a build(deps): bump github.com/containerd/containerd/v2
    b006beb5 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.1 to 2.2.2
    8ea1d0ac build(deps): bump github.com/containerd/containerd/api
    68bd32d7 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
    83088ef8 build(deps): bump github.com/containerd/errdefs from 0.3.0 to 1.0.0
    c607537e add 'none' logger
    718e7cd2 fix: not to be deleted a container created with --rm when detaching
    b776706a fix: Allow to untag images associated with running or paused containers by nerdctl rmi -f
    dc2c7b93 Enable network_inspect tests to run on windows
    93189e13 Annotate non-windows compatible image tests
    46239308 Enable issues tests to run on Windows
    465b52ca Enable image_remove tests to run on windows
    4254a1fe build(deps): bump github.com/compose-spec/compose-go/v2
    58318d51 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
    de193b39 Enable GHA cache for image build dependencies
    b1e82268 Fix prior test-porting not aligned with description
    f6d36c40 Move from AlpineImage to CommonImage to enable windows tests
    bfc8e0b9 Add Infinity constant to enable windows testing compat
    7b8edba6 Remove leftover workaround for fixed bug
    bdc00760 Reduce calls to data.Identifier()
    04ec4a3c Rewrite container_stats tests
    5862baf7 build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
    75fdc499 Fix convert unable to find image
    4760ee93 Rewrite container_top tests
    54196647 Remove fixed-bug workaround
    20987449 build(deps): bump github.com/compose-spec/compose-go/v2
    8f9eccd9 build(deps): bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
    6b3d6615 Container create tests cleanup
    40ddd34e Update busybox image (support sleep inf)
    708f1725 Fix test leaking tagged Alpine image
    b7227211 Rewrite container prune test
    38f74400 Rewrite container remove test
    2336d3d1 Rewrite container diff test
    a5f487d4 Align gitignore and dockerignore
    4d06e730 Rewrite container_wait tests
    eddb0eb8 go.mod: github.com/containerd/imgcrypt/v2 v2.0.0-rc.1
    fcdd7262 build(deps): bump github.com/compose-spec/compose-go/v2
    443d504b build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
    bb240f12 build(deps): bump github.com/compose-spec/compose-go/v2
    af25fd40 add white image
    50946054 update Kubo (0.31.0)
    90fbd09b update Nydus (2.3.0)
    98442f50 update CNI plugins (1.6.0)
    5551d6d3 update containerd (2.0.0-rc.6)
    247fcca2 build(deps): bump github.com/containerd/containerd/v2
    0ee1a592 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
    bbb5b305 Add new requirements (HyperV, CgroupsAccessible)
    5db8a48d build(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0
    3b203a35 update runc (1.2.0)
    a4b2959b Add container run from oci-archive
    62ad4046 Ensure rm uses -f when cleaning
    05918629 Remove no-op description from top-level tests
    cc78fb3b Remove old build tag syntax
    d8ab512e Refactor load from archive functionality
    ec12b584 Move image load func to imgutil package
    4f20a14d CI: enable no-retry/retry testing separation and workflows cleanup
    c3627e11 fix: Allow to delete images when names of images are short digest ids of another images.
    e1622152 Add legacy tests into the 'retry' bucket
    d963545a Fix ensurecontainerstarted logic and better debug
    564ff06e Separate lint + enable on other platforms
    0cc9d291 Enhance debugability for kubernetes rig
    5609de3d Workaround and document weird docker issue
    9603bf40 Registry testing tooling cleanup
    914238eb Kuberneters testing tooling cleanup
    36f7eb91 Rewrite commit tests
    ca76611c Fix and enable CI unit testing for windows
    54966d87 Rewrite build tests
    83bf7e03 build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0
    ce8e077d Chores: spurious comments and syntax simplification
    d48be62f Fix semantic of Fail to not care about exit code
    1ab6df3c (Un-)marking flaky tests
    468b0df2 Fix duplicated test title
    84b4d942 Change compose lock to use DataStore()
    27a18162 [fix] fix image filter with nonexist image
    d2b2637e Enable image completion on all platforms
    97919c25 Remove unbuffer from test
    7a0eaecb Add pseudo tty support for tests
    76b265af Skip TestAttach until we fix it
    95fe8c0a build(deps): bump github.com/containerd/accelerated-container-image
    645988e8 Add delay to tentatively fix flakyness with Docker
    fc1848b5 "ns:" network mode to use existing network namespace
    24cbe252 Fix over-eager windows path restrictions
    90b96354 Add image load quiet mode
    e7101674 Quiet ancillary image pulls
    320d5c38 Minor debugging / cleanup chores
    d7adf399 RootFul/RootLess > Rootful/Rootless
    7fab74c3 Lint fixes
    fa39963a Global compose lock
    496b2f05 Consistently enforce rmi -f in tests cleanup
    efb9a876 Cleanup code to use simplified referenceutil package
    afba9710 Cleanup referenceutil
    bf395429 Skip TestRunWithTtyAndDetached on Windows
    ad64f421 fix: nerdctl stats on a container without a memory limit returns host memory limit
    516ed82e Update containerd (1.7.23) in CI
    ddeae201 removing ipfs binary from nerdctl-full
    c3c3f91f Add container run --security-opt systempaths=unconfined
    2c6fb772 Alleviate image --filter missing digest issue
    50ac0b6f Fix CNI concurrency issue
    379e8ce6 build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
    33beb322 Migration aftermath
    4451d75d Migrate image tests
    157d1838 Migrate IPFS tests
    7190bc66 ./cmd/nerdctl/. + issues + completion touchups
    91f4eb4a ./cmd/nerdctl/network touchups
    0fafd1af ./cmd/nerdctl/system touchups
    2d2afe08 ./cmd/nerdctl/volume touchups
    0e35a535 Test tooling iteration
    93fb53b0 Enforce global lock in oci hooks
    65363a66 build(deps): bump github.com/cyphar/filepath-securejoin
    93152fa8 build(deps): bump github.com/compose-spec/compose-go/v2
    456337f9 Update runc (1.1.15)
    7ff3c68a build(deps): bump actions/checkout from 4.2.0 to 4.2.1
    3e3517c2 Remove images from Docker Hub from tests, fix #3498
    1fe34f86 Tests for net inspect
    2e3b6365 Fix netwalker issues
    c075a576 switch cosign registry from GCR to GHCR
    92c3297f build(deps): bump the golang-x group with 5 updates
    9755f22f Update BuildKit (0.16.0)
    1ff8d48b Update to containerd 1.7.22, 1.6.36 in CI
    e6c47ef3 build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
    2c1a5b87 Fix tests broken by tooling update
    5ce1e4b6 Fix parallelism for docker
    19fa3d93 Increase delay of delayOnceReader to reduce flakyness of TestAttach
    346b492b Test tooling fixes
    bd1eefa6 Make CreateNetwork safer wrt concurrency
    703bd581 Fix IPFS missing layer issue
    bfeeabe5 3452: Filter Volumes by name if any of the names match
    03c9de57 Update to containerd 2 rc.5
    544991a0 Fix Docker Hub push regression
    5cdb3e0b Fix login persistence regression against Hub
    9d0f54a5 build(deps): bump github.com/Microsoft/hcsshim from 0.12.6 to 0.12.7
    c661d16e Fix broken TestImageInspectDifferentValidReferencesForTheSameImage
    7b64f827 build(deps): bump github.com/containerd/containerd/v2
    f3215269 build(deps): bump github.com/cyphar/filepath-securejoin
    befd089a build(deps): bump docker/build-push-action from 6.8.0 to 6.9.0
    2c2745e8 fix: Cleaning up orphaned directories and files when containers creation fails
    12e63b5d [fix] filter images panic
    2a8d4ae0 build(deps): bump docker/build-push-action from 6.7.0 to 6.8.0
    f231be8e build(deps): bump actions/checkout from 4.1.7 to 4.2.0
    0aef2f2e Migrate completion tests to new tooling
    36ab5832 Migrate network tests to new tooling
    f363e6f0 Migrate system tests to new tooling
    764a2aa5 Fix tests and add regression tests for #3425
    1e52bf52 EnsureAllContent on tag
    8e10d879 EnsureAllContent on save
    ef09d191 EnsureAllContent on convert
    8ba7ce78 EnsureAllContent on commit
    9539f6b0 Add fetch and EnsureAllContent methods
    93b5999a Fix regression from #3446
    845902d6 build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10
    79067831 build(deps): bump github.com/go-viper/mapstructure/v2
    b4f002ca remove is shareable test
    a74f0f30 Testtool initial documentation
    cc56a093 Move root and volume tests to new test tooling
    2c95d090 Adding NG test tooling
    bfc2da40 increase golangci-lint timeout to 10min
    2d297924 Prevent concurrency on commit and remove
    062f4ff8 build(deps): bump github.com/go-viper/mapstructure/v2
    de9a0045 build(deps): bump the docker group with 2 updates
    06a257ef Fix panic 'provided file is not a console'
    bc2a0070 build(deps): bump the docker group with 2 updates
    b2174cbb Fix test to workaround docker credstore symlink fault
    5864ea38 build(deps): bump github.com/cyphar/filepath-securejoin
    646f8409 build(deps): bump github.com/containerd/accelerated-container-image
    e22055bc build(deps): bump github.com/compose-spec/compose-go/v2
    6f685c37 build(deps): bump the docker group with 2 updates
    aeef5bed Fix Windows path check in 'LogURIGenerator'
    4bb3fc02 build(deps): bump the golang-x group with 2 updates
    1ecbd87a build(deps): bump the golang-x group with 3 updates
    1a4a5a95 Hostsstore resolution cleanup
    7bcfc505 Dockerfile: runc: set CC and STRIP explicitly
    ea86ae9a Adding document about pkg/store
    4c0c5a60 Move testing.md to docs/dev
    935ee8a0 Fix TestRunApparmor: relax stdout matching to not fail when testing rootless
    dbc05409 Fix TestLoadStdinFromPipe: do not leak test images breaking tests using prune
    ca0f6453 Enforce linting for freebsd and windows
    e0de7b1c Fix freebsd lint
    efeb191a Fix windows linter complaints
    23aca88a Refactor: cleanup prompting
    bf89c084 Refactor filestores using store.Store
    c9756a94 Remove mock for mountutil tests
    92188e11 Add generic filestore
    04cc74bd Auth code refactor: credstore and registry URL
    9657f2c2 chore: update runc to v1.1.14
    4e89ddf7 Minor cleanup, post-refactoring of cmd
    b02b8f28 Move cmd/system to subpackage
    05074f83 Moving cmd compose and inspect to subpackages
    ca637fd6 Move cmd/container to subpackage
    d5a00f46 Move cmd/internal to subpackage
    c115c49c cmd/AppArmor moved to subpackage
    4b8061d9 Move cmd/image & cmd/builder to subpackages
    3ea64eb9 Move ipfs to subpackage
    c8df501e Move a bunch of helpers
    3b8a098d Move login/logout to subpackage
    9c75f29d Move namespace code to subpackage
    d1bc54d9 Move network to cmd/nerdctl/network
    f7e033d9 Move IsExactArgs and FindIPv6 to helpers
    d2741baf Rename completion.ShellCompleteX methods to completion.X
    a07d9066 Move volume actions under subpackage
    061d0cb1 Move UnknownSubcommandAction to helpers
    ec530147 Move constants Categroy/Management to helpers
    38bca1f3 Move completion to sub package
    b8b5d707 Move away flagutil under helpers
    51af3690 Add Confirm helper
    d3a39fd2 Fix TestDiff failure with docker
    c5d3309d Add a locking mechanism to prevent concurrent subpackage testing
    76a828dd Adapt testing so that subpackages are not parallelized
    5b9cf17d Do not load build output if dest is specified
    7f0dec8e Fix nsenter working dir for child
    95a3d697 Move testing to container v2 rc4
    abb17d72 build(deps): bump github.com/containerd/containerd/v2
    68be0cef Disable flaky #827 test
    19fb8b60 build(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0
    7192451f build(deps): bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0
    fee2b017 build(deps): bump the docker group with 2 updates
    b954c7a3 Prevent presumably bogus reentrancy onPostStop when onCreateRuntime errored
    6296bb35 Namestore hardening, workaround #3351
    f85bba8f Hardening lifecycle state store
    7eb1523e Changing bufio.Scanner to bufio.Reader to support large message
    bc247660 Add lint-imports to the default lint task
    fe677961 Allow Canary to fail the build
    31989a2d Add reg. test for 'stop created'
    971040e7 Release any existing ip lease onCreateRuntime (workaround #3355)
    f353afb6 Allow containers to re-acquire their own name (fix #3354)
    f9b56614 build(deps): bump github.com/containerd/accelerated-container-image
    42adca9f build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
    93586e60 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3
    31debef4 build(deps): bump github.com/containerd/containerd/api
    571799fb stop: do not error on created containers (fix #3353)
    5f30141f Rollback rename in case of error
    fc31dcd2 Ignore
    2327cc85 Fix docker hub lag on golang versions breaking canary
    0cd936b5 build(deps): bump github.com/vishvananda/netlink
    6362afc1 Remove Docker incompat from image prune and build tests
    439086fb Fix image prune filter until test rmi cleanup not running.
    67449bca chore: fix some function names
    f7b71e9c Add regression tests for network host
    132276c4 Fix --add-host not working with network host
    c57dc6ff Rename variable for readability
    a4abf1e2 Use host hostname with network host
    f5e247f8 Fix rename failure with network host/none
    71c1558b Fix panic on malformed add-host argument
    031aa1d4 K8s minor cleanup (rename and -f on delete)
    0e8b3d45 Implement windows filename restrictions
    572d368d fix: filter container state without option "-a"
    a1bd4760 ParentMain/nsenter: do not fail if getwd errors
    1201665e Add builder OCI layout build context
    034f2e73 build(deps): bump github.com/Microsoft/hcsshim from 0.12.5 to 0.12.6
    8352492b build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0
    d2dace20 Fix import order
    bd27d52e Workaround goimports-reviser bug
    613f7c6e update RootlessKit (2.3.1)
    f5a2962c build(deps): bump github.com/rootless-containers/rootlesskit/v2
    3cb2cd1f update soci-snapshotter (0.7.0)
    17a0749e update BuildKit (0.15.2)
    6f7a56f2 update kind (0.24.0)
    9efda227 update Go (1.23)
    ddcf41c2 update Debian (12)
    553ee688 update golangci-lint (1.60.1)
    787b4ac6 Fix govet: printf: non-constant format string
    068866ee Fix S1009 (see https://staticcheck.dev/docs/checks#S1009)
    183b4395 Fix SA4032 (see https://staticcheck.dev/docs/checks#SA4032)
    fd0f9547 Add lint job for canary and minor shell script cleanup
    7c9751e2 Add image prune --filter support
    ec7c3958 Refactor imgutil filtering
    adf40354 Include init NetworkSettings within inspect response
    97c5492b Kube on the CI
    fc4b2700 support ci arm64
    1fbd7766 fix: relax identifier limits
    f5d1d6d5 Add builder prune --all and --force flag support
    4fce7aaa Ensure binfmt does install emulation for arm7 on the CI
    3d2db6e7 build(deps): bump docker/build-push-action from 6.6.1 to 6.7.0
    4de7e5f4 build(deps): bump the docker group with 2 updates
    f23fcd72 fix set go env in windows
    81684636 build(deps): bump github.com/go-viper/mapstructure/v2
    7f05aad9 Fix panics involving -ti when not on a tty
    77b0a291 Go imports tooling
    0b729e9e Import ordering consistency
    6277d8f6 Move projectloader to testutil
    02cb8a92 use slice.Contains
    dc204e92 Get rid of naked returns
    5d6d02b9 archived mitchellh/mapstructure -> go-viper/mapstructure
    41448de9 Use http.ErrSchemeMismatch
    d4152ca3 feat(compose): add mac-address parsing
    9cc9a5bd gofumpt lint
    af50cb59 enforce registry default host for login
    cbe7cfe7 Uniformize import style
    83914c5b Fix docker/errdefs -> containerd/errdefs
    bd59961b Fix godoc to align with style
    bc7e059f build(deps): bump github.com/containerd/accelerated-container-image
    6f84540c migrate to github.com/moby/sys/userns
    732656ad Make windows filelocking exclusive
    98cc3689 Containerd v2
    8cef1ce7 build(deps): bump golang.org/x/sys in the golang-x group
    0721f443 feat: adding filter infrastructure + status and event filter
    4cc911df build(deps): bump docker/build-push-action from 6.5.0 to 6.6.1
    7df0fbd6 build(deps): bump github.com/compose-spec/compose-go/v2
    93dfdaab build(deps): bump the golang-x group with 4 updates
    56791faa build(deps): bump the golang-x group with 2 updates
    99fdb17f build(deps): bump github.com/containerd/nydus-snapshotter
    c6c7e132 add unpack commit images.
    4d3f6988 Add SOCI handler wrapper
    4b50583d feat: tail JSON log
    3b61610c fix: output log after log rotation
    915106fc gracefully terminate containers on nerdctl compose down
    b60185e8 test: increase max-size && decrease log output
    c5e06081 Remove gjson dependency
    140c5fcc build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0
    e8a993b2 fix: sort images&containers by created_at
    cc0f6437 build(deps): bump github.com/cyphar/filepath-securejoin
    68e7ad34 build(deps): bump github.com/compose-spec/compose-go/v2
    fa77fb49 build(deps): bump the docker group with 2 updates
    fea8219d feat: add Status and ID as event attributes
    4d70ed0b build(deps): bump github.com/awslabs/soci-snapshotter
    e86fa4c5 build(deps): bump github.com/containerd/containerd
    d941b4f8 containerd/containerd/errdefs -> containerd/errdefs
    73f22413 build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3
    06f942c1 build(deps): bump the docker group with 2 updates
    83cf033f build(deps): bump docker/login-action from 3.2.0 to 3.3.0
    579f75e7 build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0
    e81fe541 build(deps): bump github.com/moby/sys/mount in the moby-sys group
    9229c007 Reuse Makefile for CI commands
    b76605b6 build(deps): bump github.com/compose-spec/compose-go/v2
    b7025537 build(deps): bump github.com/rootless-containers/rootlesskit/v2
    3e569488 build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1
    760f3560 Add `shellcheck` lint to CI
    eddbb4e3 build(deps): bump github.com/moby/sys/signal in the moby-sys group
    cf0e6e6e feat: support for -a and --attach in run
    57951753 Account for availability delay of golang docker image
    bbf2293d Fix shellscript issues
    6eccd9af build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5
    5affa4fb build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0
    67ade6db Move image pull args into ImagePullTypes
    cfd89822 Enhance Makefile
    e2ede62e Remove no longer useful DOCKER_BUILDKIT=1
    f6308150 fix: add login component username validation
    e7b567ca pkg/portutil: add ipv6 host ip test
    99b05e63 pkg/portutil: use net.SplitHostPort to parse ip address with port
    79b80d68 Update go.mod
    164b9f65 Normalize curl invocations
    db47b319 Adding a canary CI target to test against upcoming / unreleased versions
    f759e035 Silence apt-get and uniformize calls format
    b0288121 Update FUSE and buildkit in dockerfile
    fdd88383 build(deps): bump github.com/cyphar/filepath-securejoin
    41870985 build(deps): bump github.com/containerd/typeurl/v2 from 2.1.1 to 2.2.0
    496c78e8 Test fixes
    3a0df165 CI: shrink test matrix
    c628ef1e Workaround delayed log file creation
    af2f1402 Fix test: wait for systemd to come up
    11a0d9ac Move to 24.04 for docker integration testing
    c3ea8ff4 Fix nerdctl info missing on Windows
    fee1ab36 fix the created tasks cannot be deleted
    81aac851 rootless: add `Requires=dbus.socket`
    c4ea3d0e Fix IPFS test flakyness
    fceea23b Ensure we dont fail if containers disappear (#3167)
    156b5fd0 Do not hard error if containers are gone
    f83f2380 build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0
    fbf9a538 build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
    09739c12 Improve tests debugging output
    15191775 Volume QA: inspect, prune, create and other volume fixes
    019cd003 test-integration-rootless: enable BuildKit for RootlessKit v2
    e0248a4d Dependabot: add groups
    19ae34b0 nerdctl run -v: dismiss warning "expected an absolute path, got a relative path"
    faa28f89 Workaround flaky save
    35424992 Re-enable project checks for .md only changes
    5267e4ef Separate and expand information for newcomers on testing
    1b96d8de Make systemctl happy by not passing an explicit signal for kill
    4455d73a build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0
    e32d75c4 Add logo
    60dc9421 Cleanup login command (remove global var and normalize to other commands
    294caa66 build(deps): bump docker/build-push-action from 6.2.0 to 6.3.0
    150f9cbd Fix wrong assumption about container availability
    d627713b update containerd (1.7.19)
    356b88dc Rewrite container remove
    db152b91 build(deps): bump github.com/docker/docker
    91c0b7f6 build(deps): bump github.com/docker/cli
    3cece1b1 fix missing name container stats
    2ed85e4f build(deps): bump docker/build-push-action from 6.1.0 to 6.2.0
    d56f7a71 build(deps): bump github.com/docker/docker
    6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
    dd52560f CI: update Ubuntu (24.04)
    ae277688 feat: support for --sig-proxy in run
    6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
    c493afcd pkg/defaults: add defaults_darwin.go
    b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR
    8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0
    02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2
    c2fa1ed9 update soci-snapshotter (0.6.1)
    820f7404 update Nydus (2.2.5)
    480fc999 update gotestsum (1.12.0)
    6cc63162 update Kubo (0.29.0)
    f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps
    f35e4251 update golangci-lint (1.59.1)
    85a8bf86 update BuildKit (0.14.1)
    465365a0 update CNI plugins (1.5.1)
    bccfdc82 update containerd (2.0.0-rc.3)
    ead5ce6c Volume QA: remove (fixes and tests)
    a28dbf29 Dockerfile: use Go 1.22 for runc
    97552985 Bump compose-go to v2
    e13ff68b Remove duplicate function
    515c3ade Add HOSTNAME environment variable
    0c300dca fix: close the hosts file
    15a8a8dc Aftermath docker migration: fix racyness in tests
    5dd36b60 Implement network namespacing
    58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1
    6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization
    c0e4e92c Add mechanism to prevent Cmd from executing multiple times
    ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS
    2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
    34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0
    0b201417 build(deps): bump github.com/containernetworking/plugins
    9a76ba10 Disable build and publish on PR for purely md changes
    eace9da1 Add doc note about --ip and bridge
    e789f2cd Docker v26 compatibility & test fixes
    b63f4d6b Add --pull option to build command
    091de746 update containerd (1.7.18), runc (1.1.13)
    a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER
    f4a7e0c8 Restore logger output
    37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
    14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
    4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7
    f942d2c5 test-integration-docker-compatibility: install Docker v24
    972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1
    37c0cb67 Safer / faster convert zstd
    b20070d2 Revamped testregistry and login tests
    edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0
    dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4
    80731ff3 Caching and list optimizations
    b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS
    e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER
    4907e59c fix container list with json format
    b94caffe build(deps): bump github.com/docker/cli
    47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18
    530b0913 build(deps): bump github.com/docker/docker
    2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0
    5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0
    7675d267 update imgcrypt (1.1.11)
    875a962e Remove spurious debugging leftover
    11802cf3 Fix wrong package import
    6917840b CI: .md files changes should not trigger tests
    f491e83f Disabling test on unsupported platforms
    eb001fad Image inspect rework
    4d4fd5fb State how to run a single integration test
    099ef7bd Image history enhancements
    3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0
    838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11
    eb5d4426 update slirp4netns (1.3.1)
    1ec6764f update containerd (1.7.17)
    03bee846 update CNI plugins (1.5.0)
    4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0
    949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter
    11fcb6b0 Do not obtain task info when it is not necessary in commit command
    713851de add retry on test
    cf5073b4 support image label
    0988c9b8 chore: remove impossible error check
    8b34abdf Implement container inspect --size, SizeRootFs and SizeRw
    0d470e7e Implementing StartedAt for containers
    93b13817 build(deps): bump github.com/containerd/nydus-snapshotter
    5f8c0c9d build(deps): bump github.com/docker/cli
    80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
    35a90ef6 build(deps): bump github.com/docker/docker
    64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17
    480eb6ee Support DHCP IPAM opts and set the hostname
    274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release
    cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
    b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0
    6b10870c Re-acquire name in onStartContainer (see #2992)
    c60adf29 Add missing alias for container rm/remove
    fac3d35e build(deps): bump github.com/docker/cli
    c5d1b532 Allow directories for --device and in-container path
    762fe91c Fix some /etc/ file permissions (see #2684)
    926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0
    41bf4414 build(deps): bump github.com/docker/docker
    516503a0 Fix markdown link
    c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1
    83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
    4b9de97d inspect: show mounts info from CRI/ctr containers
    d197e5b7 build(deps): bump github.com/docker/cli
    227505ce build(deps): bump github.com/docker/docker
    c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
    618639b3 build(deps): bump github.com/cyphar/filepath-securejoin
    4e615922 CI: use Go 1.22
    49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0
    ad607362 build(deps): bump github.com/containerd/nydus-snapshotter
    2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2
    54b29564 fix: set mountpoint RW and Propagation in internal mount label
    ff6c1c49 skip Kubo 0.28.0
    bb6f9e66 update RootlessKit (2.1.0)
    f34b02ad update slirp4netns (1.3.0)
    e9535e52 update BuildKit (0.13.2)
    47053926 update containerd (1.7.16)
    a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
    bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16
    93f404c7 fix: error check in the ensureFile func
    a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4
    4f46cf94 build(deps): bump github.com/docker/cli
    8765df23 build(deps): bump github.com/docker/docker
    6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3
    0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3
    199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
    79897c8b build(deps): bump github.com/docker/cli
    a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0
    03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter
    47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
    c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1
    6ffb5466 build(deps): bump github.com/docker/cli
    dc42456f build(deps): bump github.com/docker/docker
    d4257170 build(deps): bump github.com/containerd/accelerated-container-image
    9b8e1dd3 fix follow tail of rotate log
    a3fdaafa fix: cleanup volume dir if create volume failed
    27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
    46acf060 build(deps): bump github.com/rootless-containers/bypass4netns
    b5117a23 Rationalise build constraints for Go 1.19 onwards
    5fac99b3 Implement autodetection of Windows buildkitd socket
    6e6aa4a9 Enable building on Windows hosts
    0d75e34f Remove unused defaults.BuildKitHost
    62e031c6 bypass4netns: allow ignoring bind
    f802ba87 update bypass4netns (0.4.1)
    2c446522 build(deps): bump github.com/containerd/accelerated-container-image
    2cfff270 update containerd (1.7.15)
    a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15
    858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
    6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
    af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
    cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
    fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`)
    f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24)
    9ba9ddca update BuildKit (0.13.1)
    6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2
    da2f576f build(deps): bump github.com/docker/docker
    3809ec53 CI: FreeBSD: use Go 1.22
    c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter
    ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1
    e7608c8b deflake TestImageConvertEStargz
    c1c7e251 not check return of rmi in pushImageToIPFS
    70ee810a pkg/api/types: remove dependencies on nerdctl
    8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
    2122a714 update cosign image to latest release
    3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0
    1c371393 update imgcrypt (1.1.10)
    9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
    0f9c8de4 feat(compose_up): add --abort-on-container-exit flag
    d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10
    5e785705 build(deps): bump github.com/containerd/accelerated-container-image
    8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0
    ee2f8d64 update Kubo (0.27.0)
    4917c16a update RootlessKit (2.0.2)
    4dbac7f8 update CNI plugins (1.4.1)
    046bfc06 build(deps): bump github.com/containernetworking/plugins
    6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2
    0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup
    4d9abe27 update containerd (1.7.14),(1.6.30)
    533f16b9 CI: update FreeBSD to 14
    258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14
    bc8450e8 feat: add extra contexts to buildctl call #2835
    341c60d4 update BuildKit (0.13.0)
    ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0
    41b669d7 feat: create network cleanup function for kill and stop cmd
    da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
    62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2
    74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0
    26c02362 chore: remove useless error check
    f853ab85 Enhance default platform comparision for image shareablity #2810
    45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
    be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0
    f1595262 Use json marshal/unmarshal to copy
    3d28dbf6 fix: typos
    772d4791 build(deps): bump github.com/containerd/accelerated-container-image
    d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0
    18f29fb0 fix: add onstartcontainer hook
    d8412eed build(deps): bump github.com/containerd/nydus-snapshotter
    261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
    41b83493 Rootlesskit Network Design
    8d840dae doc: should use master tag for binfmt

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
0b47478ebc crun: update to 1.19.1
Bumping crun to version 1.19.1-13-g6f010b5f, which comprises the following commits:

    25efd10a Remove surplus ENOENT error check
    99f2824f utils: return error from set_home_env() if the user was not found
    3158e491 criu: improve error handling for CRIU function calls
    3cd9c2c9 criu: do not set network_lock if not specified
    a542ecc7 github: enable unprivileged userns
    38122ac9 test: fix compiler warnings
    ec5947ce TMT: Add sanity tests from c9s downstream
    d08e304a Packit: Remove RHEL jobs
    3e32a70c NEWS: tag 1.19.1
    8b972be9 linux: fix a hang if there are no reads from the tty
    e50e47ca libcrun: add ring buffer implementation
    20ec0982 utils: extend epoll_helper to monitor writeable fds
    77a72bdf utils: use bool for set_blocking_fd()
    5f9ca9eb utils: skip copy_file_range if not usable
    e2380490 tests: adjust test to upstream code
    d7933486 build-aux: use an init process for the nix container
    0ec1522b nix: update packages list
    9b014718 Generated crun.1
    d700d9db Add missing periods at the end of sentence
    1832c170 linux: remove tmpmount workaround
    9e3615a4 ci: build tests_libcrun_fuzzer before fuzzing
    6b2e6193 build: use libtool to create libcrun_testing
    3c5292b2 build: don't compile tests during normal build
    db31c42a NEWS: tag 1.19
    c4f8c87a checkpoint/restore: allow passing network lock method to libcriu
    1942efc9 Handle case where cgroup v1 freezer is disabled
    b366a785 wamr: revitalize wamr handler
    21219504 cgroup, systemd: do not override devices on update
    d1531073 error: 'CHAR_BIT' undeclared. fix compile failure with musl libc
    5d66b309 build: Don't build cloned_binary as part of crun
    fd69065d test: add new test for exec-cpu-affinity
    b941d6c5 linux: move reset cpu affinity to scheduler
    ef33259c linux: honor exec cpu affinity mask
    047b7485 src: move cpuset_string_to_bitmask to utils
    2c8088c4 libocispec: sync
    42b959b5 container: initialize max caps before accessing process block
    46bd62b1 cgroup: do not stop process on exec
    19bbd8da utils: silence compiler warning

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
3dcd679bb1 cri-o: update to v1.31.4-tip
Bumping cri-o to version v1.31.4, which comprises the following commits:

    8aa8c7e42 server: fix panic when default annotations are specified
    88939baf2 version: bump to 1.31.4
    284eb9327 config: add default_annotations
    26bb3c96a Allow to remove pod sandbox on netns removal
    cf112c696 Disable actuated runners
    0b449cebc version: bump to 1.31.3
    ee2d73252 Fix container restore lint report
    6aa6cbcb4 Only restore container if all bind mounts are defined
    165504928 Add `--pull-progress-timeout` / `pull_progress_timeout` option
    d3f39eaa9 RuntimeHandler inheritance bug-fix
    c65eb63b1 RuntimeHandler inheritance
    c918a52d1 nix: don't build gpgme with `--enable-fixed-path`
    677d91db3 version: bump to 1.31.2
    f334f80c3 config: fix validation of allowed annotations
    e0fe09609 Cherry-pick changes from containers/storage/pull#2134
    cae8a3ab5 Cherry-pick changes from containers/common/pull#2185
    e9deb6cde version: bump to 1.31.1
    b6226b8a3 config: pass down PullOptions from the storage configuration
    a673a7ca4 test: fix empty pinned_images test
    7d4f035b5 tests: improve wait_for_log to allow multiple calls for the same message
    2d27da0f3 image: serialize RegistryImageReferences when checking signatures
    4b55a1107 Pin govulncheck to specific version to match Go version requirements
    abb6a439d Use nanosecond timestamp for evented pleg pod status
    fbd73b339 test: fix CR test by unsetting SIGNATURE_POLICY
    a379923f5 server/restore: mark signature validation incompatible with restore
    1a9d36494 server: document difference between userRequestedImage/userSpecifiedImage
    50075247a server: use imageID instead of a random digest
    0dd7eaffe server: only check signatures if namespaced policy is defined
    ec8545d2d server: use cached restore value instead of recomputing
    7a67eb72b store canonical ref differently
    1444e69d9 test: fix crun-wasm test to handle requirement of user_specified_image
    6edecf30e Image verificaiton for namespaced policies
    9d3da707d Revert "contrib: temporarily move to crun 1.15 to fix CI"
    e54ea3407 Fix invalid syntax in test workflow
    fc262592f ci: run setup commands for e2e because they weren't done for some reason
    d24529f7d build(deps): bump the actions group with 2 updates
    efa1690c0 test: setup runtimes correctly so drop-ins work
    bfc509cd7 test: comment out ARM image digest as it's unused
    45ee51d01 test: update memory limit tests to not be in image.bats
    29803ef24 test: fix config test
    fe5bdeb3b gh actions: set crun instead of runc
    f174d5a3d oci: allow double delete
    624b15b9c gh actions: spoof crun for unit tests on arm64
    afe78eb68 config: refactor min memory handling a bit
    d2cb4e4ae config: update min memory to account for crun
    5e21d495c config: default to crun
    c32f7b02a build(deps): bump crate-ci/typos in the actions group
    2b8dfdf48 build(deps): bump github.com/opencontainers/runc in the gomod group
    3fe3b4e81 build(deps): bump peter-evans/create-pull-request in the actions group
    d23951276 refactor seccomp
    f81fea25f Modify test case to verify blocking of clone
    7d0d6ad49 Filter namespace creation args to clone in default seccomp policy
    cc8b071b1 build(deps): bump the gomod group across 1 directory with 3 updates
    f7fee64a7 build(deps): bump the actions group with 2 updates
    dd0cb08d8 Update golangci-lint to v1.60.3 for better go 1.23 compatibility
    1f212dc7b Add Makefile help
    9ad5c5aed Add additional bind mount to image volumes
    ff73a7a0b Fix Makefile `$PWD` when running using `sudo`
    2c37d262f Make `prettier` target run in a privileged container
    33fb00528 Fix lint
    b1bf40749 build(deps): bump google-github-actions/upload-cloud-storage
    1beb59cb8 build(deps): bump the gomod group across 1 directory with 8 updates
    ba846966f config: add /dev/net/tun to default allowed devices
    3ef7f9de4 build(deps): bump crate-ci/typos in the actions group
    f7e8682ef Add `{verify-}prettier` makefile targets
    53d958fa3 Change default tracing endpoint to 127.0.0.1
    9d1a5f437 build(deps): bump crate-ci/typos in the actions group
    13e701563 build(deps): bump github.com/onsi/ginkgo/v2 in the gomod group
    e83973d7d Run prettier on supported files
    8269859fd Make static build a GitHub action matrix
    09bb40438 Change profile endpoint to 127.0.0.1
    5f95cb5ce build(deps): bump the gomod group across 1 directory with 3 updates
    aa1ca0d47 build(deps): bump google-github-actions/auth in the actions group
    f83861120 build(deps): bump google-github-actions/upload-cloud-storage
    a8950ce30 Pass around more contexts in hooks and metrics
    7472e56e9 Trigger `test` workflow after release branch fast forward
    6fb6e8d16 Run the runtime RuntimeType validation first
    dff5305bb Avoid potential reallocs by pre-sizing some slices

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
f8b943afd4 containerd: update to v2.0.1
Bumping containerd to version v2.0.1-6-gce560bb24, which comprises the following commits:

    f34147772 downgrade go-difflib and go-spew to tagged releases
    dca769485 chore: add a build tag to disable containerd plugin import
    5942b3fcb Update golangci to 1.60.3
    b0ece5dc5 Prepare release notes for v2.0.1
    fe6957084 build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
    eb2ce6882 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
    018d83650 internal/cri: should not apply IoOwner options
    5eb7995a9 feat: update go-cni version for CNI STATUS
    a53eff53d update runc binary to v1.2.3
    a2302ea89 Add integration test for custom configuration
    be5eda069 complete cri grpc config migration
    44cdca68b ctr pull unpack for default platform using transfer service
    62b790bfa CI: update Fedora to 41
    290e8bc70 update to go1.23.4 / go1.22.10
    3ba2df924 fix panic due to nil dereference cgroups v2
    73f57acb0 Update differ to handle zstd media types
    34a45cab2 Publish attestation as release artifact

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
5f8055f484 conmon: update to 2.1.12-tip
Bumping conmon to version v2.1.3-168-gaee638f, which comprises the following commits:

    02c6ea6 Avoid bogus journal filling errors

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
343da075d5 buildah: update to v1.37.5
Bumping buildah to version v1.37.5-4-gc0602013a, which comprises the following commits:

    e4deb56f6 [release-1.37][CI:DOCS] touchup changelog
    f31d99d24 Update CHANGELOG.md
    5fd40b989 [release-1.37] Bump Buildah to v1.37.5
    b949f6572 Bump the containers/storage library to v1.55.1
    cffa820dc Properly validate cache IDs and sources
    93986b888 Packit: constrain koji job to fedora package to avoid dupes
    9dfacbb47 Tag v1.37.4
    b55cbb8eb vendor: update c/common to v0.60.4
    e289e285d CVE-2024-9407: validate "bind-propagation" flag settings
    956095ee1 [release-1.37] Bump to Buildah v1.37.3
    8165aae9e Do not error on trying to write IMA xattr as rootless
    a47261ec1 imagebuildah.StageExecutor: clean up volumes/volumeCache
    7b28b9e4e `manifest add --artifact`: handle multiple values
    8fb01fbc9 Packit: split out ELN jobs and reuse fedora downstream targets
    a8f37392f Packit: Enable sidetags for bodhi updates
    1c0e94ec6 Use Epoch: 2 and respect the epoch in dependencies.
    eadda3bc0 [release-1.37] Bump Buildah to v1.37.2
    a18969dea [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
    67cc51e90 [release-1.37] Bump to Buildah v1.37.1
    02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
fb973818ad docker: update to v27.5.0-rc.2
Bumping moby to version v27.5.0-rc.2, which comprises the following commits:

    a167bc5c9a libnetwork/drivers/windows: fix error-matching for hcsshim "not found"
    bdd3a95a13 pkg/fileutils: deprecate GetTotalUsedFds
    5f81af6eaa libnetwork/drivers/bridge: format errors with '%v' for consistency
    0f45f60e9e libnetwork/drivers/windows: fix non-constant format string
    17e8cb2b06 distribution: fix non-constant format string
    60f9e333b6 daemon: adjust tests for changes in go1.24 JSON errors
    95b2f2ed49 Restore labels when re-creating Windows networks
    623af65208 Use the roundtripper during build
    771d1dc44e docs/api: allow for an empty string for Isolation (api v1.25-v1.47)
    68b39f825d docs: Update example section for SwarmJoinRequest
    4767dbd713 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452
    4359c8b08e vendor: update buildkit to v0.18.2
    bbd14fc508 vendor: update buildkit to v0.18.1
    fd86c39cc3 vendor: update buildkit to v0.18.0
    1fd14d845f vendor: update buildkit to v0.18.0-rc2
    68b0c87e05 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2)
    74600d8425 vendor: update buildkit to v0.18.0-rc1
    4830f6db66 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy
    0e43d1f642 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8
    800d735171 vendor: github.com/Microsoft/hcsshim v0.12.7
    a57c1848b6 vendor: sigs.k8s.io/yaml v1.4.0
    26eeb6e414 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
    f6f7c9f231 vendor.mod: github.com/microsoft/hcsshim v0.12.5
    bdecc9d58e pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec
    46a8e5f8c5 pkg/reexec: Command: separate public API from implementation
    d175e4f1f1 pkg/reexec: make platform-agnostic (again)
    ed5c0a79e7 pkg/reexec: use const for name of test binary
    4bf113f9bd all: Remove redundant `units` alias for `go-units`
    7a512a9531 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
    cf4e196e77 vendor: go.opentelemetry.io/otel v1.28.0
    2a3cc83f36 vendor: google.golang.org/genproto/googleapis/api f6361c86f094
    4141379d07 Discard ErrDumpInterrupted and return data after maxRetries
    4c50153e2e Fix comments
    c5e72db8e8 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350
    14b30aeb61 Add linting rules to spot use of un-wrapped netlink functions.
    87fc62a648 Fix merge problem
    3ca9a3be70 Add nlutil functions to retry on netlink EINTR
    4729e446ce vendor: github.com/vishvananda/netlink v1.3.0
    cbe4488a6b vendor: github.com/vishvananda/netlink v1.2.1
    eda0a20deb libnetwork/iptables: deprecate Passthrough
    b51622dd0d libnet/iptables: deprecate type IPV
    08de719cf2 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err
    6855ca1e62 integration-cli: don't skip AppArmor tests on SLES
    224b30556d docs/api: document correct case for Api-Version header
    5b92b3e7e0 Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers
    1df9e896f2 pkg/system: deprecate types and functions that are only used internally
    3a1e495a0f daemon: info: remove bridge-nf-call-iptables / ip6tables warnings
    4082abad8b Dockerfile: update runc binary to v1.2.3
    a379aae924 man: vendor: github.com/cpuguy83/go-md2man v2.0.5
    c3968c6ab7 update xx to v1.6.1 for compatibility with alpine 3.21
    2e6ca227cf otel: Use non-noop tracer provider for grpc
    a5f86f9279 integration/build_traces: Create own tracer provider
    3a05c5dcad otel: Avoid excessive memory allocations if not configured
    adb8773adb Jenkins: don't modprobe kernel module
    ff176d42d5 Don't try to modprobe ip6_tables in the moby dev container
    86126b9af1 Try to load kernel module ip6_tables, when necessary.
    58318d26fc Use ioctl to try to trigger kernel module loads
    4775621ab6 Dockerd rootless: make {/etc,/var/run}/cdi available
    0e34b3956b update to go1.22.10
    7919b806e7 [27.x] vendor: github.com/moby/buildkit v0.17.3
    525b929947 registry: deprecate RepositoryInfo.Class
    d6d43b2912 c8d/tag: Don't log a warning if the source image is not dangling
    e3564b52af Jenkinsfile: modprobe br_netfilter
    46f6b9a259 integration: add wait
    18aa104041 daemon/graphdriver/zfs: ignore non-existent dataset on removal
    052f7d6461 Fix br_netfilter module loading logic
    151c7565a9 Remove buildkit init timeout
    465eb6aee2 vendor: github.com/cenkalti/backoff/v4 v4.3.0
    e4d5bae9c5 vendor: github.com/go-logr/logr v1.4.2
    339572db5d vendor: github.com/prometheus/client_golang v1.20.5

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
f9ba743dad docker: check for seccomp and ipv6
Without these (and their associated packageconfig options) docker
may build, but it won't run correctly.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
b57f8a25a3 python3-cached-property: drop recipe
There's a newer recipe in meta-python and there are no longer any
references to this in meta-virt.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:16:26 +00:00
Leonard Anderweit
74087fc372 podman-compose: Add runtime dependencies
Add missing runtime dependencies on python modules asyncio, json and
getpass provided by unixadmin.
Sort the dependencies alphabetically while at it.

Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-07 22:05:27 +00:00
Bruce Ashfield
c1f668c337 kernel: add v6.12 configuration and support
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-12-10 21:02:19 +00:00
Bruce Ashfield
755520c5fd crun: update to 1.18.2
Bumping crun to version 1.18.2-17-g52ed5880, which comprises the following commits:

    fd69065d test: add new test for exec-cpu-affinity
    b941d6c5 linux: move reset cpu affinity to scheduler
    ef33259c linux: honor exec cpu affinity mask
    047b7485 src: move cpuset_string_to_bitmask to utils
    2c8088c4 libocispec: sync
    42b959b5 container: initialize max caps before accessing process block
    46bd62b1 cgroup: do not stop process on exec
    19bbd8da utils: silence compiler warning
    8a0ee4b5 src: use mount API to self-clone
    85d4db3d crun: check for integer overflow
    10b2146e linux: add check before deref
    2525752d cgroup: drop unuseful check
    1ae190b0 src: run make clang-format
    00ab38af NEWS: tag 1.18.2
    5bc6b50e cgroup, systemd: fix first rule selection for systemd
    c41f034f NEWS: tag 1.18.1
    6628d7a3 utils: check for snprintf truncation
    7c4a3f9c cgroup: skip DevicePolicy if all devices are allowed
    ef60ec90 libcrun: deprecate cgroup v1
    77e4233a cgroup, systemd: ignore rules before a default deny one
    8a30a57a cgroup: ignore redundant deny dev cgroup rules
    369dd95b CONTRIBUTING.md: new file
    3647ecab linux: copy map_file before tokenizing in uidgidmap_helper
    8656b254 NEWS: tag 1.18
    bf0a3516 rpm: use embedded yajl in RHEL builds
    41461290 crun.1.md: add lsm-profile and lsm-mount-context
    ed642593 criu: load lsm functions
    ce89aa66 restore: add lsm-mount-context option
    9efd6a87 restore: add lsm-profile option
    aee13711 github: update run-on-arch-action
    c4a65aad cgroup: split lines when writing raw unified files
    dd7adb22 cgroup: write_cgroup_file_or_alias uses write_cgroup_file
    22b018d0 cgroup: convert block_io devices to IODeviceWeight
    c7745e9a cgroup, systemd: add support for IODeviceWeight
    8e3e693e cgroup: refactor handling of io.weight
    7d0e2cdb cgroup: report errors if value contains not parsed data
    efae52ab cgroup: add support for the misc controller
    d55194b2 cgroup systemd: ignore unsupported properties
    500cf802 cgroup, systemd: honor cpu.idle
    5f64da6a linux: pass down state_root to the cgroup handler
    80d9677b cgroup, systemd: honor memory.zswap.max
    01fa4993 cgroup: specify devices rules to systemd
    667442e4 cgroup: move standard devs definition in a common place
    335d8cfb cgroup: specify TasksMax to systemd
    f6d8373f cgroup: specify MemorySwapMax to systemd
    1a04566d cgroup: specify MemoryLow|MemoryHigh|MemoryMin to systemd
    8d90eb3a cgroup: use macro to refactor common pattern
    34061ab5 add duplicate namespace detection
    b29ccd7e cgroup: rename function
    af034b91 cgroup: special handle value "max"
    2825a579 cgroup: set io weight on systemd owned cgroup
    6cf5324b Packit: constrain koji and bodhi jobs to the fedora package
    7140aea1 nix: replace gitMinimal with git
    27b5a2f6 Fix running on kernel without user namespaces
    b5ff44f2 nix: update list of packages
    3b40d773 build: specify --extra-experimental-features to nix
    da616875 release.sh: update nix image
    dee824e6 Fix segfault in `crun features`
    4ea62f25 Disable criu support on riscv64

Bumping libocispec to latest, which comprises the following commits:

    ed23e6a runtime-spec: sync from upstream
    412ce10 image-spec: sync from upstream
    4b8feed common: make sizeof the last argument for calloc

Bumping image-spec to version v1.1.0-44-gc66e811, which comprises the following commits:

    40d3096 add example using .wh. and move opaque example to its section
    cee95e9 Ignore uname/gname where uid/gid are supported
    d44515e Changes requested from review
    5db69d9 Feat: Pin external references on a release
    76b8bae README: update runtime-spec links to use main branch
    716f83b Implementations should support zstd

Bumping runtime-spec to version v1.2.0-23-g9505701, which comprises the following commits:

    9ceba9f update http links to https
    faf82be doc: fix the invalid hyperlink naming-a-volume
    adaa517 config: simplify final CPU affinity rule
    119ae42 Add CPU affinity to executed processes
    2149fb5 config-linux: describe the format of cpus and mems
    c6af124 ci: remove redundunt actions
    d4aa6d8 chore: format JSON file `make -C schema fmt`
    b983fbf CODEOWNERS: remove vbatts
    bf698d0 MAINTAINERS: move vbatts to EMERITUS

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-12-10 03:47:54 +00:00
Bruce Ashfield
1adf3b6a83 docker: update to v27.4.0-rc.2
Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits:

    151c7565a9 Remove buildkit init timeout
    1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases
    1d1da55382 Update containerd image builder to use lease prune label
    a3afccd409 Fix lease management during image operations
    33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev)
    752c0453d6 vendor: github.com/moby/buildkit v0.17.2
    6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3
    a64812939f Update containerd to v1.7.24
    179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
    7f9c5b278a vendor: resenje.org/singleflight v0.4.3
    b90c6e922c vendor: github.com/containerd/continuity v0.4.5
    e956d4a370 Dockerfile: update to runc v1.2.2
    b888333fe1 Dockerfile: update containerd to v1.7.24
    6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1
    0f0b83a00b vendor: google.golang.org/grpc v1.66.3
    b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0
    2f816b2596 [27.x] daemon/containerd: add missing go:build tag
    3e03c979da update go:build tags to use go1.22
    346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
    f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
    6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23
    31c8d23e7e Dockerfile: update compose to v2.30.3
    2ee3796e3f Dockerfile: update buildx to v0.18.0
    2acf9893c6 Increase test handler sleep, replace deprecated assert
    edfb2048ac deprecate pkg/platform and move internal
    5ab7960b46 logger/journald: plumb contexts into reader
    857fc4730c logfile: Close reader when caller cancels
    a7badb2bb5 Logfile: Add tracing spans
    d48c403efa Logfile: skip files that are corrupted
    c9a7391911 Refactor logfile reads
    49f5431807 Fix time comparison in sharedtemp implementation
    173a9f2091 libnet: don't put external DNS answers in OTel spans
    15b69c4200 vendor: update buildkit to v0.17.1
    3280e50f65 vendor: update buildkit to v0.17.0
    00774deb96 vendor: update buildkit to v0.17.0-rc2
    0a67347003 vendor: google.golang.org/protobuf v1.34.2
    033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x
    0e4ab47f23 update to go1.22.9
    d3b9ec90ba api/swagger: Improve description for platform in images/push
    c902e1a187 c8d/inspect: Fix duplicate RepoDigests
    b089f36796 volume: VolumesService.Create: fix log-level for debug logs
    afd7c9913f client: prevent idle connections leaking FDs
    de0135965e c8d/httpfallback: Handle connection errors
    ddb56edd00 volume/mounts: fix anonymous volume not being labeled
    b7bc29af50 daemon: use OwnCgroupPath in withCgroups
    1e11f2a1c0 daemon: deprecate Daemon.IsPaused
    0183f5dd13 daemon: deprecate Daemon.Exists
    749f9ccee4 Fix: setup user chains even if there are running containers
    8deb557451 api: GET /images/json: preserve original manifest order
    e4c067af91 gha: shorter time limits for smoke, validate
    525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
    ceb41b83f3 gha: dco: small tweaks to running the container
    2690b70a09 gha: dco: update ALPINE_VERSION to 3.20
    f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes
    166565e3ac gha: dco: limit to 10 minutes
    57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved
    8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors
    202aac0eb4 container: viewDB.withTxn: don't wrap errors
    be8be11708 container: TestNames: don't string-match error assertions
    bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
    ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak
    12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors
    01412dacf7 daemon/containerd: touch-up platform not found error
    3c93981344 images: GetImage: touch-up error message for missing platform
    03225b1a41 PushImage: remove misleading error about --platform without containerd
    5376990d4d build: create distinct history db for each store
    34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
    0f8fc3105e Enable bridge netfiltering if userland-proxy=false
    505c4c32be Set NODAD on bridge IPv6 addresses
    c00b3108e5 docs: api: document w (width) and h (height) query params as required
    e39ced5c00 api: document w (width) and h (height) query params as required
    3c258e6011 pkg/authorization: update link to API documentation
    29f0dcd902 client: update link to API documentation
    21c974b281 docs/api: version-history: update documentation links
    0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes
    d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1
    32afa26719 gha: add guardrails timeouts on all jobs
    8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency
    136fdfcdfc vendor: google.golang.org/grpc v1.66.2
    6eed19d656 vendor: google.golang.org/protobuf v1.34.1
    f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0
    5f92ab397b vendor: golang.org/x/tools v0.25.0
    9af7d06698 vendor: golang.org/x/mod v0.21.0
    8fef24d9d4 vendor: golang.org/x/net v0.29.0
    efc5252041 vendor: golang.org/x/crypto v0.27.0
    a8e92fa662 vendor: golang.org/x/text v0.18.0
    80cd75d7d5 vendor: golang.org/x/sys v0.25.0
    a2a544202b vendor: go.etcd.io/bbolt v1.3.11
    418a79d51b gha: buildkit: make sure expected Go version is installed
    43580ccbc1 update to go1.22.8
    af8b897560 Dockerfile: update compose to v2.29.7
    d91a922ef3 Dockerfile: update docker CLI to v27.3.1
    0138291345 gha: add CodeQL Analysis workflow
    a6b772b24c gha: govulncheck: make sure read permissions are set
    cd21af7e41 Do not DNAT packets from WSL2's loopback0
    5c499fc4b2 Only enable bridge netfiltering when needed
    8adc8e405d Dockerfile: update compose to v2.29.4
    576fc88b1a Dockerfile: update buildx to v0.17.1
    e928a0d22d man: dockerd: add description for --log-format option
    82cf138590 internal/opts: SetOpts: invalidate empty option-names
    487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment
    6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value
    bae46f6463 man: dockerd: value is optional for --feature flag
    176e04d73b man: fix duplicate word in --feature flag description
    06c9c72269 Update dlv in the dev-env
    15fbba2169 man: update dockerd man-page to include --feature flag
    b262a95d67 c8d/prune: Keep deletion order stable
    39c17094b0 c8d/prune: Add OTEL spans
    343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch
    95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image
    c40cd54593 Add feature to daemon flags
    dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
    bd71b5d319 Explicitly disable nvidia device injection for --gpus=0
    a5478dde0e Dockerfile: update RootlessKit to v2.3.1
    80d0013217 Fix typos
    ce86fade0d Dockerfile: update compose to v2.29.2
    682b96c479 Dockerfile: update buildx to 0.17.0
    c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1
    ce07360a1c vendor: update buildkit to v0.16.0
    ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
    c7a8942d6d api/swagger: update deprecation version for erroneous fields
    57ba0b05e6 vendor: update buildkit to v0.16.0-rc2
    16bf28ec2d test: update since session signature has changed
    a0650bf67c vendor: update buildkit to v0.16.0-rc1
    f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc.
    da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0
    3e60519c9c vendor.mod: golang.org/x/sys v0.24.0
    e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0
    2514b02677 vendor.mod: golang.org/x/mod v0.20.0
    69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp
    70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0
    54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14
    dca7a36092 vendor: google.golang.org/grpc v1.62.0
    458110ccd0 vendor: golang.org/x/time v0.5.0
    27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0
    6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0
    0890631ac7 vendor: github.com/moby/sys/signal v0.7.1
    508173c39d vendor: github.com/moby/sys/mount v0.3.4
    9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2
    d3884731cd Dockerfile: update containerd binary to v1.7.22
    cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22
    d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go
    fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
    84d78a8ad5 api: swagger: fix documentation for image push endpoint
    e16197e51d gha/bin-image: Also run on branches like `27.x`
    37bf6e81f9 update to go1.22.7
    3a4c589290 vendor: github.com/opencontainers/runc v1.1.14
    10cf2d64b6 update runc binary to 1.1.14
    84cfcb0893 docs/api: add documentation for API v1.47
    edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion
    adb0b8536d update golangci-lint to v1.60.2
    01f7ec0f21 update to go1.22.6
    442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
    a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
    d036255b69 c8d/pull: Same error message for non-matching platform
    b9f56706c5 man: create parent directories in install recipe
    12d4379ad1 c8d/list: Don't exclude non-container images
    0fbb78c187 daemon: fix non-constant format string in call (govet)
    2bc17a1e5c api/types: fix non-constant format string in call (govet)
    fe01a5fc30 api/server/router: fix non-constant format string in call (govet)
    bf7ca4dc4b container/stream: fix non-constant format string in call (govet)
    405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet)
    812b97d559 volume/testutils: fix non-constant format string in call (govet)
    c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
    8dec1f216f layer: ignore G602: slice index out of range (gosec)
    068e82bdd2 internal/cleanups: fix non-constant format string in call (govet)
    8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet)
    c27f7de662 cmd/dockerd: fix non-constant format string in call (govet)
    ec8ff9cbbd libnetwork: fix non-constant format string in call (govet)
    e5bc931f17 integration-cli: fix non-constant format string in call (govet)
    6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
    83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
    4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf
    28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check
    cb2e98cfbf integration-cli: remove redundant platform checks
    875e8aeef2 vendor: github.com/containerd/containerd v1.7.21
    1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
    ecd2b6ff09 c8d/image: Add `hostPlatformMatcher`
    d5b03423d1 man: support bringing your own go-md2man
    56c5c23114 man: build dockerd man pages using make
    77b2eb5734 Removed all mentions of "please" from docs and messages
    805becdc7e docs: add default-network-opt daemon option
    a5828ac742 docs: remove devicemapper
    f7246a0e2c man/dockerd.8: assorted formatting fixes
    f110e779f6 man/dockerd.8: escape asterisks and underscores
    edbcbf8da7 docs: update dockerd usage output for new proxy-options
    b7cc16b0b0 Fix styling of arguments
    ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
    43298ad298 docs: remove documentation about deprecated cluster-store
    8cc7f26f56 Document `--validate` daemon option
    255eaa6647 Update man-page source MarkDown to work with go-md2man v2
    ee27f4cd7f docs: update for cgroup v2 and rootless
    c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns
    fc9029a2e2 daemon: document --max-download-attempts option
    115b10a467 Update document links and title.
    488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
    f623030fac Update docs and completion-scripts for deprecated features
    ac7032bff9 Added docs for dockerd
    161006302f fix a number of minor typos
    a6de17d230 Introduce/document new IPC modes
    6513e80c84 docs: add documentation for dm.libdm_log_level
    3d917f3fd6 Restore dockerd man page
    e854a5c201 c8d/pull: Replace pointer to interface with interface
    ea58dab95e c8d/pull: Keep the replaced image as dangling
    0a38589add c8d/load: Only unpack host platform images
    7c069d3021 c8d/load: Don't fail whole operation if unpack failed
    5002faebe8 integration/TestAPIImagesListManifests: Check `Containers`
    a15a309832 c8d/list: Update benchmark to also have containers
    fd5cede287 c8d/list: Fix race condition when traversing containers
    65c4e49aff govulncheck to report known vulnerabilities
    7ebb277873 Dockerfile: update xx to v1.5.0
    ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers
    3d845e0e8c c8d/list: Add test for total and content size
    3563a707d0 c8d/list: Fix `Total` size calculation
    89757f83ff api/list: Expose manifests
    bb2fec6425 api: Bump default version to 1.47
    0f8fcec1d9 swagger: Disable ImageSummary model generation
    1ec5e86154 api/types/registry: fix godoc, and add some doc-links
    62f32e9a97 plugin: fix deprecation comments
    830c76c6f2 vendor: update buildkit to v0.15.2
    354bf75675 libcontainerd: gofumpt
    4ab7d90669 pkg/plugins: gofumpt
    c11b2d9c7d pkg/archive: gofumpt
    ccdc79d55a libnetwork: gofumpt
    35b1a30028 layer: gofumpt
    9f63aa7435 internal: gofumpt
    4d16ac993e integration: gofumpt
    6d5266a650 integration-cli: gofumpt
    4084dac566 daemon: gofumpt
    c36ab4c2ca daemon/containerd: gofumpt
    904867593b daemon/config: gofumpt
    72876770d0 builder: gofumpt
    e8109ee4da api/types: gofumpt
    ed65e1224e api/server: gofumpt
    d54aff9312 API 1.46: end per-interface sysctl migration in major release
    8f12906274 Migrate per-endpoint sysctls until 28.0.0
    c53be2f3d5 Allow --ip-range ending on a 64-bit boundary
    fc0150b962 daemon/containerd: rm use of regexp
    73c01d0b6a image/v1: rm regexp use
    c93fe4a27d layer: rm regexp use
    31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
    35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd
    80a59c2f1a migrate to github.com/moby/sys/userns
    e7fe276c00 update to go1.21.13
    e8cd19e810 gha: set permissions to read-only by default
    e0c52e0ba6 vendor: update buildkit to v0.15.1
    efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
    f96e26f68d migrate to github.com/moby/sys/user/userns
    78b59867f2 vendor: github.com/moby/sys/user v0.2.0
    018137b01a vendor: github.com/gofrs/flock v0.12.1
    650e06ac75 vendor: golang.org/x/sys v0.22.0
    bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test
    99471ac2fe hack: explicitly control enabling the journald logging driver
    b9b43b3bdf README: replace obsolete Docker EE mention
    1bc907c97c vendor: github.com/containerd/containerd v1.7.20
    1c0885d60d gha: check-pr-branch: fix branch check regression
    ed83a9e3a1 update containerd binary to v1.7.20
    422ef48c2f gha: check-pr-branch: verify major version only
    c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases
    1f16a44b3d pkg/rootless/specconv: move to internal
    c8f1317585 pkg/directory: deprecate, and move to internal
    68587c38fe pkg/directory: fix comment, and remove import comments
    d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases
    31c1b7dc17 pkg/containerfs: move to internal
    6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
    dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal
    bc6ae42031 Dockerfile: update compose to v2.29.0
    af8866f324 Dockerfile: update buildx to v0.16.1
    5e4ddd81a2 api/types/system: remove Info.ExecutionDriver
    c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0
    3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0
    d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0
    03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit
    5ee23b6050 builder-next: Add ImageNamedByBuildkit callback
    53c521a6b2 builder-next: Don't return error from exported callback
    eccccd7577 Fix API version in TestSetInterfaceSysctl
    d9e3d1b815 update containerd binary to v1.7.19
    b91e20cc2e vendor: update buildkit to v0.15.0
    505be6557b vendor: update buildkit to v0.15.0-rc2
    b1613dc2a1 vendor: update buildkit to v0.15.0-rc1
    52f6163746 vendor: golang.org/x/net v0.25.0
    c70e404e9e vendor: golang.org/x/crypto v0.23.0
    d7a3f01421 vendor: golang.org/x/text v0.15.0
    0f2f9e0049 vendor: golang.org/x/sys v0.21.0
    45a1c34202 vendor: github.com/klauspost/compress v1.17.9
    7b31435cf8 Migrate to github.com/containerd/platforms module
    99df4fee0b vendor: github.com/containerd/containerd v1.7.19
    9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7
    d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check
    0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
    b039de78d7 docs/api: Add missing `
    7d99ebe418 rootless: add `Requires=dbus.socket`

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-12-10 03:47:54 +00:00
Bruce Ashfield
f220803306 podman: update to v5.3.1
Bumping libpod to version v5.3.1-5-gc2f09d78d5, which comprises the following commits:

    0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
    62c096bbce win-installer test: revert to v5.3.0
    7bf22277ca Bump to v5.3.2-dev
    4cbdfde5d8 Bump to v5.3.1
    50960afe33 Update release notes for v5.3.1
    d26990702c Update windows installer tests
    2739822424 Windows: don't install WSL/HyperV on update
    a8d61c034b Switch to non-installing WSL by default
    98353f27ed docs: add 5.3 as Reference version
    4886a0ba64 only read ssh_config for non machine connections
    93562b4955 ssh_config: allow IdentityFile file with tilde
    28e7b239ba ssh_config: do not overwrite values from config file
    c49944ea02 connection: ignore errors when parsing ssh_config
    f7877bf9db spec: clamp rlimits in a userns
    dcedf5f211 cirrus: set proper DEST_BRANCH for 5.3
    a39a749ce3 libpod: addHosts() prevent nil deref
    9a9f07aa4b Bump bundled krunkit to 0.1.4
    5546dc6c20 fix podman machine init --ignition-path
    8efa1c1075 Bump to v5.3.1-dev
    874bf2c301 Bump to v5.3.0
    2e3836d226 Update release notes for v5.3.0
    31df1bb97c [v5.3] Bump to Buildah v1.38.0
    9556882bbf [v5.3] Skip FIPS mode secrets run test
    c6dd2c77ab [v5.3] Buildah treadmill tweaks
    0710e83c41 test/buildah-bud: build new inet helper
    d852c58d6c test/system: add regression test for TZDIR local issue
    ac59fb9231 vendor latest c/{buildah,common,image,storage}
    1f0e2db2a9 Reapply "CI: test nftables driver on fedora"
    16acfd7edb Revert "cirrus: test only on f40/rawhide"
    dc97a7e0de test f41 VMs
    9e38b455e4 volume ls: fix race that caused it to fail
    44df7344fe AdditionalSupport for SubPath volume mounts
    17224fcb05 Bump to v5.3.0-dev
    8469dcc4f0 Bump to v5.3.0-rc3
    a18365c665 Update release notes for v5.3-rc3
    10309bfb45 podman: update roadmap
    b237b4dc2a libpod: journald do not lock thread
    2597eeae70 Add key to control if a container can get started by its pod
    c6be5a6684 Honor users requests in quadlet files
    2c01264568 CI: systests: workaround for parallel podman-stop flake
    528b085438 Fix inconsistent line ending in win-installer project
    5ae5ab8c26 fix(deps): update module github.com/opencontainers/runc to v1.2.1
    dbfc8cccda Quadlet - support image file based mount in container file
    e6d987882e API: container logs flush status code
    768ad8653a rework event code to improve API errors
    e3abf5c9e8 events: remove memory eventer
    6348778348 libpod: log file use Wait() over event API
    0acd192b59 Makefile: vendor target should always remove toolchain
    ef20e75a77 cirrus: check consitent vendoring in test/tools
    f4ad93d5f6 test/tools/go.mod: remove toolchain
    3f15f710ce fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
    d8311353b9 fix(deps): update module github.com/onsi/gomega to v1.35.1
    37c8e10031 doc: explain --interactive in more detail
    cd1b6b7121 fix(deps): update golang.org/x/exp digest to f66d83c
    2dff79bd2c fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
    5722304613 fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
    1e7593d17f Bump to v5.3.0-dev
    ffad01fbc8 Bump to v5.3.0-rc2
    b6919a5712 Update release notes for v5.3.0-rc2
    314dece926 add default polling interval to Container.Wait
    d633824a95 Instrument cleanup tracer to log weird volume removal flake
    6b8e8cbbf7 make podman-clean-transient.service work as user
    b455f94ca8 Add default remote socket path if empty
    48a8a9c22c Use current user if no user specified
    e523734ab6 Add support for ssh_config for connection
    c98538db7d libpod: use pasta Setup() over Setup2()
    c7ff3b75cb fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
    5a1bc6126e fix(deps): update module github.com/onsi/gomega to v1.35.0
    bd75a4e0e0 logformatter: add cleanup tracer log link
    2a0a52469c docs: fix broken example
    f4be5e34c2 docs: add missing swagger links for the stable branches
    b9fed4fcf2 readthedocs: build extra formats
    ce24ab0683 pkg/machine/e2e: remove debug
    4a54fd8756 fix(docs): Integrate pasta in rootless tutorial
    5f66277138 chore(deps): update dependency setuptools to ~=75.3.0
    1f44d0f8b2 libpod: report cgroups deleted during Stat() call
    9abc17f1e1 chore: fix some function names in comment
    41a82c9a95 CI: parallelize 450-interactive system tests
    10d056cc5e CI: parallelize 520-checkpoint tests
    e6b7e4ff84 CI: make 070-build.bats use safe image names
    64516e1b8f test/system: add podman network reload test to distro gating
    743a0d49eb System tests: clean up unit file leaks
    c0f4e2ce67 healthcheck: do not leak service on failed stop
    6069cdda00 healthcheck: do not leak statup service
    45e1ffb799 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
    afedb83917 Add Startup HealthCheck configuration to the podman inspect
    d2ba730f33 buildah version display: use progress()
    825eed4bde new showrun() for displaying and running shell commands
    9db04e87b6 Buildah treadmill: redo the .cirrus.yml tweaks
    a925c9f831 Buildah treadmill: more allow-empty options
    ba8375c9e4 Buildah treadmill: improve test-failure instructions
    ee9c681f31 Buildah treadmill: improve wording in test-fail instructions
    eb90154975 doc: Remove whitespace before comma
    da783f3f70 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
    0cdb9b3b22 ps: fix display of exposed ports
    73fb6623cd ps: do not loop over port protocol
    390aec18b2 readme: Add reference to pasta in the readme
    5b131b8273 test/system: Fix spurious "duplicate tests" failures in pasta tests
    6fd0e227b4 Improve "podman load - from URL"
    77ef28c14f Try to repair c/storage after removing an additional image store
    1d7ec1ef5f Use the config digest to compare images loaded/pulled using different methods
    bf8f2b5551 Simplify the additional store test
    3bc6072142 Fix the store choice in "podman pull image with additional store"
    6a11e75c48 Bump to v5.3.0-dev
    d306e80127 Bump to v5.3.0-rc1
    23ab7b858a Set quota on volume root directory, not _data
    1a5ff0765e fix(deps): update module github.com/opencontainers/runc to v1.2.0
    94878af151 test: set soft ulimit
    ef26488fd7 Vagrantfile: Delete
    642b61a091 Enable pod restore with crun
    2e94ca5816 vendor: update c/{buildah,common,image,storage}
    fdc9feea0e Fix 330-corrupt-images.bats in composefs test runs
    67e0fa8b89 quadlet: add default network dependencies to all units
    57b022782b quadlet: ensure user units wait for the network
    203ab6573b add new podman-user-wait-network-online.service
    a6c4e00e9a contrib/systemd: switch user symlink for file symlinks
    1462b52090 Makefile: remove some duplication from install.systemd
    21d0711a02 contrib/systemd: move podman-auto-update units
    9c6b1e20a3 quadlet: do not reject RemapUsers=keep-id as root
    ada75c0bb8 test/e2e: test quadlet with and without --user
    fa920f54c7 CI: e2e: fix checkpoint flake
    fe96c843bf APIv2 test fix: image history
    67e39c1ec5 pasta udp tests: new bytecheck helper
    a92958eb0c Document packaging process
    cf124ee1bb [skip-ci] RPM: remove dup Provides
    927cb7624c Update dependency setuptools to ~=75.2.0
    1ddb15c81f System tests: safer pause-image creation
    40d4f7240b Update module github.com/opencontainers/selinux to v1.11.1
    1227f19393 Added escaping to invoked powershell command for hyperv stubber.
    b7b2ef48e8 use slices.Clone instead of assignment
    768aaadca1 libpod API: only return exit code without conditions
    b3302e8e18 Housekeeping: remove duplicates from success_task
    1bf37eecf3 Thorough overhaul of CONTRIBUTING doc.
    b0f2ebbe9d test/e2e: fix default signal exit code test
    dc55b59987 Test new VM build
    1b57dcab61 CI: fix changing-rootFsSize flake
    feb46513f0 scp: add option types
    06b470d79b Unlock mutex before returning from function
    7ea6120794 Note in the README that we are moving to timed releases
    5d10e6e16b cirrus: let tar extract figure out the compression
    94dcf76eb2 Make error messages more descriptive
    3a4c4468f2 Mention containers.conf settings for podman machine commands
    7dc58c105b [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
    3d57560a21 cmd: use logrus to print error
    71d5ee0e04 podman: do not set rlimits to the default value
    5ebba75dbd spec: always specify default rlimits
    8896ace2a4 vendor: update containers/common
    92a188ea38 Note in the README that we are moving to timed releases
    7f836df303 Revert "CI: test nftables driver on fedora"
    9e35fead03 cirrus: use zstd over bzip2 for repo archive
    6e69978d2e cirrus: use shared repo_prep/repo_artifacts scripts
    7eb4a6fe2b cirrus: speed up postbuild
    04dffbc2c7 cirrus: change alt arch task to only compile binaries
    9082a14d76 cirrus: run make with parallel jobs where useful
    bc3db7c95b Makefile: allow man-page-check to be run in parallel
    39963cc984 cirrus: use fastvm for builds
    4e3a03795d test/e2e: skip some Containerized checkpoint tests
    fe404959ed test: update timezone checks
    a79fec5e98 cirrus: update CI images
    f517e52167 test/e2e: try debug potential pasta issue
    38803713d6 CI: quadlet system tests: use airgapped testimage
    bac655a6b1 Allow removing implicit quadlet systemd dependencies
    05a449c61e fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
    b3829a2932 libpod API: make wait endpoint better against rm races
    3215d5124f podman-remote run: improve how we get the exit code
    3d1a4301af [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
    e7833d52cf 055-rm test: clean up a test, and document
    3cedd0c2b5 CI: remove skips for libkrun
    858472aa83 Bump bundled krunkit to 0.1.3
    43a4bddd10 fix(deps): update module google.golang.org/protobuf to v1.35.0
    385e2ea650 fix(deps): update module golang.org/x/net to v0.30.0
    45df394072 server: fix url parsing in info
    b8dbe09f98 fix(deps): update module golang.org/x/tools to v0.26.0
    e2e1996c6a Makefile: fix ginkgo FOCUS option
    fbd9fe45cb fix(deps): update module golang.org/x/crypto to v0.28.0
    d0cb62aacc podman-systemd.unit.5: adjust example options
    374844817d docs: prefer --network to --net
    1470961e6c fix(deps): update module golang.org/x/term to v0.25.0
    567906ed5b fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
    53785ed055 fix(deps): update module golang.org/x/sys to v0.26.0
    505c585b49 OWNERS file audit and update
    8061553c0f Exposed ports are only included when not --net=host
    e46ae46f18 libpod: hasCurrentUserMapped checks for gid too
    e948c4ed90 [CI:DOCS] Document TESTFLAGS in test README file
    985b57d9f7 Validate the bind-propagation option to `--mount`
    d8b26ac1b4 Fix typo in secret inspect examples
    6f9cc3755a Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
    043b82ef59 Fixes for vendoring Buildah
    83a0299309 vendor: update buildah to latest
    23f256349b Makefile - silence skipped tests when focusing on a file
    dde1c3d98c vendor: update to latest c/common
    fc25a3a5fc Quadlet - prefer "param val" over "param=val" to allow env expansion
    410537808e System tests: sdnotify: wait for socket file creation
    28e01cc8cc Switch to moby/sys/capability
    6a91149b53 platformInspectContainerHostConfig: rm dead code
    b791dfb558 CI: require and test CI_DESIRED_NETWORK on RHEL
    edc3dc5e11 Add ExposedPorts to Inspect's ContainerConfig
    28d3775c4d fix(deps): update golang.org/x/exp digest to 701f63a
    abc4cfb049 quadlet: allow variables in PublishPort
    7cde3abd17 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
    8ef495594c fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
    bb35ad1da4 Document that zstd:chunked is downgraded to zstd when encrypting
    ce9716ee41 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
    ece76a2537 chore(deps): update dependency ubuntu to v24
    b5e1863d1c rpm: do not load iptables modules on f41+
    e07c31068f adding docs for network-cmd-path
    a619c03eff Include exposed ports in inspect output when net=host
    1dd90dbe20 feat(libpod): support kube play tar content-type (#24015)
    1950555b26 podman mount: some better error wrapping
    5c3019e028 podman mount: ignore ErrLayerUnknown
    ebbec00b0d Quadlet - make sure the order of the UnitsDir is deterministic
    f47abd8e1e packit: disable Centos Stream/fedora ELN teasks
    5de7b7c3f3 libpod: remove shutdown.Unregister()
    0bbef4b830 libpod: rework shutdown handler flow
    2de82d523b libpod: ensure we are not killed during netns creation
    27838b26d6 Update module github.com/moby/sys/capability to v0.3.0
    6e4ef2c54d Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
    c67d8baeb6 Update documentation of `--add-host` CLI option
    70c131ed68 System tests: set a default XDG_RUNTIME_DIR
    e9b8564690 Modify machine "Remove machine" test
    73cbc13190 CORS system test: clean up
    de856dab99 Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
    7fbc6d9370 troubleshooting: adjust home path in tip 44
    1f2658e0ef test/system: For pasta port forwarding tests don't bind socat server
    24deec835c Update connection on removal
    c709be3a29 Simplify `RemoveConnections`
    9febd2c27a Move `DefaultMachineName` to `pkg/machine/define`
    7f29233a3f vendor: update containers/image
    c81c77109b vendor: update containers/storage
    fd4c63838b CI: skip the flaking quadlet test
    faf4604883 CI: make systemd tests parallel-safe (*)
    09ba5db035 CI: run and collect cleanup tracer logs
    0b59f67c3a add epbf program to trace podman cleanup errors
    4be6bf2270 CI: parallelize logs test as much as possible
    600634c62c CI: format test: use local registry if available
    d92f2d39ee CI: make 700-play parallel-safe
    62e5eb4734 docs: Fix missing negation
    6ef0288ca6 bin/docker support warning message suppression from user config dir
    6d4006b123 Update module github.com/docker/docker to v27.3.1+incompatible
    133ea31ffb Quadlet - add full support for Symlinks
    792796183f libpod: setupNetNS() correctly mount netns
    f6bda786ed vendor latest c/common
    7dccf8faee docs: remove usage of deprecated `--storage`
    597773464c Update module github.com/docker/docker to v27.3.0+incompatible
    a08ae98161 CI: Quadlet rootfs test: use container image as rootfs
    9c51eead06 CI: system test registry: use --net=host
    e3af5a38d3 CI: rm system test: bump grace period
    3396dabdf3 CI: system tests: minor documentation on parallel
    31cdf1197b fix typo in error message Fixes: containers/podman#24001
    1d5c8ac18e CI: system tests: always create pause image
    5e5c68ffbe CI: quadlet system test: be more forgiving
    6dcda2196a vendor latest c/common
    6fe832d5d6 CI: make 200-pod parallel-safe
    d7335855d7 allow exposed sctp ports
    755a06aa44 test/e2e: add netns leak check
    2d469e517d test/system: netns leak check for rootless as well
    2505381551 test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
    4919440428 test/system: Clarify "Local forwarder" pasta tests
    63e286ac55 test/system: Simplify testing for nameserver connectivity
    6c79fe292b test/system: Consolidate "External resolver" pasta tests
    85045406b5 test/system: Move test for default forwarder into its own case
    5468718f22 CI: make 090-events parallel-safe
    8402b6535f Misc minor test fixes
    7fcf94d7b5 Add network namespace leak check
    b3da5be2b1 Add workaround for buildah parallel bug
    5fc3de5583 registry: lock start attempts
    bf6131780a Update system test template and README
    6502e30cfd bats log: differentiate parallel tests from sequential
    6b621d9571 ci: bump system tests to fastvm
    bcffa9ce30 clean_setup: create pause image
    812c7e9436 CI: make 012-manifest parallel-safe
    00c13afcb9 podman-manifest-remove: update docs and help output
    aa108924ea test/system: remove wait workaround
    fbed3a01d2 wait: fix handling of multiple conditions with exited
    e04668c8ca Match output of Compat Top API to Docker
    d571ca6536 system test parallelization: enable two-pass approach
    8d119f0c2d New VMs: test crun 1.17
    a5e9b4d126 libpod: hides env secrets from container inspect
    111a4bbe71 CI: e2e: workaround for events out-of-sequence flake
    49a07fce49 update golangci-lint to 1.61.0
    432325236b libpod: convert owner IDs only with :idmap
    f4d0e124d6 Podman CLI --add-host with multiple host for a single IP
    a664708f35 Quadlet - Split getUnitDirs to small functions
    1a1001d824 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
    c436a9b658 chore(deps): update dependency setuptools to ~=75.1.0
    fdb2edf46a Fxi typo in cache-ttl.md
    b2e6d53265 Get WSL disk as an OCI artifact
    c6616004f1 CI: make 260-sdnotify parallel-safe
    42a1f5e87c quadlet: do not log ENOENT errors
    91dbd6dc33 pkg/specgen: allow pasta when running inside userns
    9a8e17816a troubleshooting: add tip about the user containers
    95833a6207 chore(deps): update dependency setuptools to v75
    1857d7e50f Convert windows paths in volume arg of the build command
    d124d90e18 Improve error when starting multiple machines
    fe08440ec3 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
    01a1761fd9 Minor typo noticed when reading podman man page
    e041f2a7b7 Remove `RemoveFilesAndConnections`
    54b71b637c Add `GetAllMachinesAndRootfulness`
    ac4a31cc4a rewrite typo osascript
    089d2513d8 typo
    31a1fd8f33 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
    cb03ca31b2 Add radio buttons to select WSL or Hyper-V in windows setup.exe
    297ec1c083 [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
    5f6a22dc1b [skip-ci] Packit: Enable sidetags for bodhi updates
    b9fe4097dd vendor: update c/common
    e61682f50e CI: make 710-kube parallel-safe
    0ff89a00af CI: mark 320-system-df *NOT* parallel safe
    db12343e27 Add kube play support for image volume source
    837755e643 refactor: add sshClient function
    a83fef34a9 fix(deps): update module golang.org/x/tools to v0.25.0
    22ec8ea06d CI: make 505-pasta parallel safe
    18932e0339 CI: make 020-tag parallel-safe
    a165289574 CI: make 410-selinux parallel-safe
    359092e463 Bump VMs. ShellCheck is now built-in
    005d9b543b troubleshooting: add tip about auto, keep-id, nomap
    a1e6603133 libpod: make use of new pasta option from c/common
    2f858675b3 vendor latest c/common
    0abbcfa50a podman images: sort repository with tags
    eb396705c6 Remove containers/common/pkg/config from pkg/util
    2840b21862 fix(deps): update module golang.org/x/net to v0.29.0
    38555305c2 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
    1c23bd5acf fix(deps): update module golang.org/x/crypto to v0.27.0
    133bbd3769 Fix CI
    c203c48c70 Detect and fix typos using codespell
    12b3d01438 Fix typo: replace buildin with built-in
    4700b5a58a Add codespell config, pre-commit definition, and move options from Makefile
    901f621daa prune: support clearing build cache using CleanCacheMount
    1543c5f0ad test/e2e: fix network prune flake
    bdf96e7df2 Add support for Job to kube generate & play
    c317da8deb Add podman-rootless.7 man page
    15bde1abdb Add DNS, DNSOption and DNSSearch to quadlet pod
    0f77363ff5 podman.1.md: improve policy.json section
    579e8b2d7a e2e: flake fix: SIGPIPE in hook test
    01296038dc libpod: fix rootless cgroup path with --cgroup-parent
    5a15e70345 vendor: update c/storage
    7b019e9905 CI: make 055-rm parallel-safe
    e5624510ce CI: make 130-kill parallel-safe
    f38953c156 CI: make 125-import parallel-safe
    0e1ac9cee1 CI: make 110-history parallel-safe
    bca7c20530 CI: system tests: parallelize low-hanging fruit
    8eb7eff899 Add disclaimer to `podman machine info` manpage.
    d803bb3407 man pages: refactor two more options
    beffd05d5a update github.com/opencontainers/runc to v1.2.0-rc.3
    77702d73ef update go.etcd.io/bbolt to v1.3.11
    a269f098cd update github.com/onsi/{ginkgo,gomega}
    e9a4534cb1 Update module github.com/shirou/gopsutil to v4
    54b8c4fb64 packit: update fedora and epel targets
    f93fcf7dee bump go to 1.22
    d03e8ffc56 cirrus: test only on f40/rawhide
    2ca4efb9f4 cirrus: remove CI_DESIRED_NETWORK reference
    e598bcafb8 cirrus: prebuild use f40 for extra tests
    c68c2974a3 chore(deps): update dependency setuptools to ~=74.1.0
    60af13ca0f libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
    70358ecf18 fix(deps): update golang.org/x/exp digest to 9b4947d
    1732338630 Implement publishing API UNIX socket on Windows platforms
    c6fe5e5395 Vendor c/common:8483ef6022b4
    71fd15726d quadlet: support container network reusing
    f40eb5f06a docs: update read the docs changes
    abea5ad4ac CI: parallel-safe network system test
    2b14db2af3 Quadlet - Support multiple image tags in .build files
    3bdddea8fa fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
    6a0ab6f7bc cirrus: remove _bail_if_test_can_be_skipped
    d5c5261e6f cirrus: move renovate check into validate
    ac18b1a0af cirrus: remove 3rd party connectivity check
    34a7d8dd10 cirrus: remove cross jobs for aarch64 and x86_64
    186f50ad7d cirrus: do not upload alt arch cross artifacts
    94431c29b4 cirrus: remove ginkgo-e2e.json artifact
    78be80f2cd cirrus: fix default timeouts
    775d27fcd8 github: remove fcos-podman-next-build-prepush
    63545126c2 Clarify podman machine volume mounting behavior under WSL
    41f945fc24 machine: Add -all-providers flag to machine list
    5389eee737 Create a podman-troubleshooting man page
    33b96e78c8 chore(deps): update dependency setuptools to v74
    565ad236a5 fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
    6e027c0e37 Fix an improperly ignored error in SQLite
    678323efd8 CI: flake workaround: ignore socat waitpid warnings
    00027bc251 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
    4f4ebdce5b Stop skipping machine volume test on Hyper-V
    a89fef6e2a cleanup: add new --stopped-only option
    bf74797c69 fix races in the HTTP attach API
    dbd2adc798 cirrus: skip windows/macos machine task on RHEL branches
    a508d7631f Update module github.com/containers/gvisor-tap-vsock to v0.7.5
    dc724e5e80 run: fix detach passthrough and --rmi
    8e78028e2c podman run: ignore image rm error
    7c5d8bec0d Add support for AddHost in quadlet .pod and .container
    07c9fe82a8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
    df3c9efb03 update github.com/vishvananda/netlink to v1.3.0
    5f57f4ea22 build: Update gvisor-tap-vsock to 0.7.5
    3e58e04d3e Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
    16007e4370 fix typo in podman-network-create.1.md
    6c68f4ad97 Use HTTP path prefix of TCP connections to match Docker context behavior
    cae427e2f8 Makefile: remotesystem: use real podman server, no --url
    215af114ab Update module github.com/openshift/imagebuilder to v1.2.15
    11547942b1 CI: parallel-safe userns test
    7164177c68 Update module github.com/onsi/ginkgo/v2 to v2.20.1
    d55b12f70b Add support for IP in quadlet .pod files
    b2fb944e19 Specify format to use for referencing fixed bugs.
    68efa7e3a1 CI: parallel-safe run system test
    4dc5708f14 Revert "test/e2e: work around for pasta issue"
    17193af962 CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
    4fbfa7de6e quadlet: support user mapping in pod unit
    5ccaa699f1 Update Release Process
    154d832696 Test new VM build
    29071ac498 command is not optional to podman exec
    9c3921ca58 CI: parallel-safe namespaces system test
    13b31845c8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
    1ccccde183 quadlet: add key CgroupsMode
    458ba5a8af Fix `podman stop` and `podman run --rmi`
    e5c91ff03a quadlet: set infra name to %s-infra
    990fc335fa chore(deps): update dependency setuptools to v73
    76e1bbb57d [skip-ci] Packit: update targets for propose-downstream
    fc30620cdb Do not segfault on hard stop
    d5cd388729 Fix description of :Z to talk about pods
    145c7511aa CI: disable ginkgo flake retries
    b755a1c60b vendor: update go-criu to latest
    84a85319e1 golangci-lint: make darwin linting happy
    666d839157 golangci-lint: make windows linting happy
    cd2a4c7cac test/e2e: remove kernel version check
    6c0d94328f golangci-lint: remove most skip dirs
    942f789a88 set !remote build tags where needed
    c17daf2b09 update golangci-lint to 1.60.1
    57016f5cc3 test/e2e: rm systemd start test
    e2e2763b0e fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
    80639df27a podman wait: allow waiting for removal of containers
    ddece758a4 libpod: remove UpdateContainerStatus()
    7a7aec355b podman mount: fix storage/libpod ctr race
    480d43748a CI: quadlet tests: make parallel-safe
    420bd16a21 CI: system tests: make random_free_port() parallel-safe
    478b262f9b remove trailing comma in example
    1a1d2646df CI: format test: make parallel-safe
    004c040ca2 Fix podman-docker.sh under -eu shells (fixes #23628)
    6fb10421fb docs: update podman-wait man page
    94fd5fe6f7 libpod: remove duplicated HasVolume() check
    a65aecd260 podman volume rm --force: fix ABBA deadlock
    b6beed9f76 test/system: fix network cleanup restart test
    30eb6b6aae libpod: do not stop pod on init ctr exit
    8a943311db libpod: simplify WaitForExit()
    5b6de98ee8 CI: remove build-time quay check
    6b1c7de3d5 Fix known_hosts file clogging and remote host id
    c4cdb6defa Update docker.io/library/golang Docker tag to v1.23
    0d1c19248a Update dependency setuptools to ~=72.2.0
    9945736a3e Update module github.com/docker/docker to v27.1.2+incompatible
    0d7e14fb83 healthcheck system check: reduce raciness
    30ee9c0114 CI: healthcheck system test: make parallel-safe
    8f191618e4 Validate renovate config in every PR
    0177f74dc6 pkg/machine: Read stderr from ssh-keygen correctly
    e30b0978b8 Fix renovate config syntax error
    36f9a04499 CI: 080-pause.bats: make parallel-safe
    6656a18c3f CI: 050-stop.bats: make parallel-safe
    25d66d97d2 Additional potential race condition on os.Readdir
    5ec413fac7 pkg/bindings/containers: handle ignore for stop
    6fce734f42 remote: fix invalid --cidfile + --ignore
    e111b6c0be Update/simplify renovate config header comment
    6c0b8b64d4 Migrate renovate config to latest schema
    d33abcdf10 Fix race condition when listing /dev
    d26341332c docs/podman-systemd: Try to clarify `Exec=` more
    ecf88f17b6 libpod: reset state error on init
    20f3e8909e test/system: pasta_test_do add explicit port check
    20a32d33cd test/e2e: work around new push warning
    be41ee4131 vendor: update c/common to latest
    4aaa5cb6f0 stopIfOnlyInfraRemains: log all errors
    78cb1e28cb libpod: do not save expected stop errors in ctr state
    f276d53532 libpod: fix broken saveContainerError()
    b0948a5cd0 Quadlet: fix filters failure when the search paths are symlinks
    2043d1647c readme: replace GPG with PGP
    a48cd241ad Drop APIv2 CNI configuration
    dcdb5408de De-duplicate docker-py testing
    ec59508d4c chore(podmansnoop): explain why crun comm is 3
    f2a03e5753 libpod: cleanupNetwork() return error
    61a889de4c fix(deps): update module golang.org/x/sys to v0.24.0
    7936809f75 Reduce python APIv2 test net dependency
    bf091abdc5 Fix not testing registry.conf updates
    be2212804b test/e2e: improve command timeout handling
    52ff2a41fa Update module github.com/onsi/ginkgo/v2 to v2.20.0
    09639a07fb Update module github.com/moby/sys/user to v0.3.0
    f041d059b5 Add passwd validate and generate steps
    4620e91f86 podman container cleanup: ignore common errors
    795851edd3 Quadlet - Allow the user to override the default service name
    1a2e1eb46e CI: e2e: serialize root containerPort tests
    a06a7d7ba8 Should not force conversion of manifest type to DockerV2ListMediaType
    2038d88680 fix(deps): update module golang.org/x/tools to v0.24.0
    6714b6302d fix(deps): update github.com/containers/common digest to 05b2e1f
    f99c7ead92 CI: mount system test: parallelize
    53ae4ea927 Update module golang.org/x/net to v0.28.0
    81003f2d08 Ignore ERROR_SHARING_VIOLATION error on windows
    f9b67cea57 CI: manifest system tests: make parallel-safe
    eb7ce80cf9 Create volume path before state initialization
    84a5119d17 vendor: update c/storage
    029f9b38cc CI: fix broken libkrun test
    1912dd4bf6 test/e2e: work around for pasta issue
    71bcd25ab6 test/e2e: fix missing exit code checks
    082650b68f Test new CI images
    abd586cb1c Remove another race condition when mounting containers or images
    91b3fdbba3 fix(deps): update github.com/containers/common digest to c0cc6b7
    01d739a65e Change Windows installer MajorUpgrade Schedule
    d628e14355 Ignore missing containers when calling GetExternalContainerLists
    37226e2e93 Remove runc edit to lock to specific version
    67ce828152 fix(deps): update module golang.org/x/sys to v0.23.0
    87dad1caef CI: podman-machine: do not use cache registry
    bfb42b3b15 CI: completion system test: use safename
    e429160e5b Temporarly disable failing Windows Installer CI test
    3ae1568933 libpod: fix volume copyup with idmap
    61def05cd9 libpod: avoid hang on errors
    457c64564a Temp. disable PM basic Volume ops test
    029a9aa34e Add libkrun Mac task
    014b7af4f3 Never skip checkout step in release workflow
    83e90a2f5b System tests: leak_test: readable output
    f446f59d71 fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
    75a316aae4 vendor: bump c/common
    fcf7cd7d5c Version: bump to v5.3.0-dev
    7610cedc80 libpod: inhibit SIGTERM during cleanup()
    2550a7290a Tweak versions in register_images.go
    4c3531a1a4 fix network cleanup flake in play kube
    84f57e4ba0 WIP: Fixes for vendoring Buildah
    b8a9b184af Add --compat-volumes option to build and farm build
    286fbf98d1 Bump to Buildah v1.37.0
    7d9c1a2c53 Quadlet test - Split between success, warning and error cases
    77081df8cd libpod: bind ports before network setup
    cfac059d14 Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
    1c46686a41 Use new syntax for selinux options in quadlet
    616005e0ad fix(deps): update module github.com/onsi/gomega to v1.34.1
    396961069c CI: kube test: fix broken external-storage test
    8b5b9d0bb5 Update dependency setuptools to v72
    bf3f207a49 Convert additional build context paths on Windows
    1b91df012d pkg/api: do not leak config pointers into specgen
    f3a86266e6 Quadlet - Allow the user to set the service name for .pod files
    1c4fbe7965 Quadlet tests - allow overriding the expected service name
    41cc3ae6f9 fix(deps): update module github.com/moby/sys/user to v0.2.0
    884c43d416 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
    7bb3b83c17 CI: enable root user namespaces
    b59918e536 libpod: force rootfs for OCI path with idmap
    1d23f3ff11 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
    a18bd3e9c0 Add test steps for automount with multi images
    25fffdb74f CI: cp tests: use safename
    1ecb68d92b [skip-ci] RPM: podman-iptables.conf only on Fedora
    fd0ff9060f CI: 700-play: fix a leaked non-safename
    d9c2806461 test: check that kube generate/play restores the userns
    fef125c7b1 test: disable artifacts cache with composefs
    8403f4c33f test: fix podman pull tests
    90411b2290 vendor: bump c/storage
    eadfbbc809 Update module github.com/cyphar/filepath-securejoin to v0.3.1
    ce7dded38b Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
    599c0d167c build: Update gvisor-tap-vsock to 0.7.4
    2e20681f05 test/system: fix borken pasta interface name checks
    da3edce4e6 test/system: fix bridge host.containers.internal test
    f70976a7e2 api: honor the userns for the infra container
    fa2590a97a play: handle 'private' as 'auto'
    61f0230c31 kube: record infra user namespace
    bf8c3065f2 infra: user ns annotation higher precedence
    bbe0e4a5db specgenutil: record the pod userns in the annotations
    e97bb79b7a kube: invert branches
    64f2d85e4f CI: system log test: use safe names
    84eb640160 Update encryption tests to avoid a warning if zstd:chunked is the default
    059c298389 Fix "podman pull and decrypt"/"from local registry"
    6c55ef505d Use unique image names for the encrypted test images
    b61667470c CI: system tests: instrument to allow failure analysis
    96771eec53 Fix outdated comment for the build step win-gvproxy
    71d6e2fbaf Add utility to convert VMFile to URL for UNIX sockets
    7768cf235e Run codespell on source
    83160b1d02 fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
    a493a584c0 chore(deps): update dependency setuptools to ~=71.1.0
    a05a9cae07 logformatter: tweaks to pass html tidy
    174190132c More information for podman --remote build and running out of space.
    2e4b640ad2 Fix windows installer deleting machine provider config file
    7202e6172d Use uploaded .zip for Windows action
    5e9ab00063 pr-should-include-tests: no more CI:DOCS override

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-12-10 03:47:54 +00:00
Bruce Ashfield
7bdfb7806e runc-docker: update to v1.2.0
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:

    b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
    119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
    068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
    ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
    ba3d026e libct/cg: RemovePath: improve comments
    12e06a7c libct/cg: RemovePath: simplify logic
    db59489b runc delete: fix for rootless cgroup + ro cgroupfs
    ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
    43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
    ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
    9cb59b46 ci: rm "skip on CentOS 7" kludges
    5000f169 Temporary set vagrant to 2.4.1-1
    b9dfb22d readme: drop unused memfd-bind reference
    aa505bfa memfd-bind: mention that overlayfs obviates the need for it
    9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
    9ce7392b Vagrantfile.fedora: bump Fedora to 41
    609e9a51 Vagrantfile.fedora: stop using dnf shell
    80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
    5586d7ca libct: rm obsoleted comment
    f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
    8cc73754 libct: fix a comment
    ee1bced1 script/check-config.sh: add OVERLAY_FS check
    c8f5d033 docs: remove prompt symbols from shell snippets
    871057d8 drop runc-dmz solution according to overlay solution
    34a92855 test join other container userns with selinux enabled
    c78f3f2e libct/nsenter: become root after joining userns
    1e674098 libct/int: add exec benchmark
    cb201487 libct/int: use testing.TB for utils
    4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
    cbb9b309 ci: use Go 1.23
    732806e2 runc update: fix updating swap for cgroup v2
    cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
    69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
    eb2ff52a libct: rm x/sys/execabs usage
    f20f273a build(deps): bump github.com/opencontainers/selinux
    139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
    93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
    af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
    42f96305 VERSION: back to development
    0b9fa21b VERSION: release v1.2.0
    568231cc Revert "increase memory.max in cgroups.bats"
    e6699266 fix an error caused by fd reuse race when starting runc init
    515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
    8cfbccb6 tests: integration: add helper to check if we're in a userns
    54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
    ff775363 tests/int: rm centos-7 exclusion
    76a821fa tests/int: update info about EL9 kernel
    b5bdf592 libct: rm initWaiter
    9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
    324fcea4 Terminate execution for criu that does not meet version requirements
    eff6f049 libct/cap: no need to load capabilities
    9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
    1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
    4fdd5616 memfd-bind: more specific doc URL
    9e554587 memfd-bind: fixup systemd unit file and README
    13a6f560 runc run: fix mount leak
    b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
    f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
    bb2bd38d change go minimum version in README
    faffe1b9 replace strings.SplitN with strings.Cut
    1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
    7a449109 libct/README: simplify example, rm inheritable caps
    0de19533 runc spec, libct/int: do not add ambient capabilities
    3e3f9603 runc exec --cap: do not add capabilities to ambient
    5b161e04 update bats-action to 2.1.1
    35f999dd remove installation of unused bats support libs
    10c951e3 add ErrCgroupNotExist
    319e133c go.mod: Use toolchain 1.22.4
    8671a7db ci: update to setup bats action from bats-core
    30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
    21c61165 tests/int: log when teardown starts
    b1449fd5 libct: use Namespaces.IsPrivate more
    d8844e29 tests: integration: add setgid mkdirall test
    066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
    646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
    457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
    216175a9 Upgrade Cilium's eBPF library version to 0.16
    a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
    429e06a5 libct: Signal: honor RootlessCgroups
    dd827f7b utils: switch to securejoin.MkdirAllHandle
    1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
    5ab5ef3d deps: update to golang.org/x/sys@v0.22

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-12-10 03:47:54 +00:00