mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-19 12:50:22 +02:00
66b5850735
2006 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Bruce Ashfield
|
66b5850735 |
conf: mark layer compatible with mickledore
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Mingli Yu
|
d95762855e |
virt-viewer: add opengl to REQUIRED_DISTRO_FEATURES
Fixes: ERROR: Nothing PROVIDES 'spice-gtk' (but /build/layers/meta-virtualization/recipes-extended/virt-viewer/virt-viewer_11.0.bb DEPENDS on or otherwise requires it) spice-gtk was skipped: missing required distro feature 'opengl' (not in DISTRO_FEATURES) ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'virt-viewer', 'spice-gtk'] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Xiangyu Chen
|
e48b934c83 |
criu: avoid textrel QA Issue warning
Fix some of arch such as arm/aarch64 would report QA warning as below: WARNING: criu-3.17.1+gitAUTOINC+d46f40f4ff-r0 do_package_qa: QA Issue: criu: ELF binary /usr/sbin/criu has relocations in .text [textrel] Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d3acb1a378 |
docker/moby: use generic DOCKER_COMMIT in do_compile
do_compile() is shared and shouldn't have been using SRCREV_moby as that is obviously only set in the moby recipe. Switch to using a generic DOCKER_COMMIT variable and set it in both docker_moby and docker-ce. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
e675e3ebbf |
kvmtool: refresh crosscompiler patch
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Joakim Roubert
|
3002a90c6d |
upx: Use git fetcher instead of gitsm
The current upx will trigger the Bitbake Fetcher Error added in Kirkstone 4.0.5 189a6d452e3037c9e94ccdf6af38359fc6058064 commit. This patch replaces gitsm with git and explicitly adds the git submodules with the corresponding commits. Change-Id: I1b1231f06481f7a1e25dc35277d0f1725c7631e0 Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
3f45dc8e69 |
docker: add seccomp to default packageconfig settings
Much of meta-virt requires seccomp to function properly, so we update docker to match that common default. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
9d84fcdc6d |
docker: add mobyproject:moby to CVE_PRODUCT
Add mobyproject:moby to CVE_PRODUCT to reflect where the source is coming from for both docker recipes. We keep the old 'docker' designation for compatibility. It is unclear whether or not we should also be adding the cli and libnetwork to the CVE_PRODUCT. But since they are on different SRCREVs and not vendored, we keep them out for now. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
bf28d97358 |
upx: update to latest devel release
The upx development branch history has been rebaseed, so we update our SRCREV to match. As part of this update, we can drop our patch as it has now been merged into the project. The cmake structure has changed slightly, so we inherit cmake-native to make it available as part of the Makefile driven build. And finally, the name and location of the binary has changed, so we adapt our install rule to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Markus Volk
|
4169fae169 |
libvirt-glib: fix pointer-sign issue
Update to latest commit to fix a build issue with latest glib-2-0 Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d48db9ba95 |
crun: update to v1.7
Bumping crun to version 1.7-6-gbebd67f, which comprises the following commits:
cb6ae27 handlers: set selinux/apparmor profile
0efbe56 utils: change AppArmor profile for the current proc
f1f286a utils: change SELinux label for the current proc
a1cd1a6 handlers: use only the handler name if needed
40d996e NEWS: tag 1.7
3239c52 container: do not leak container status
ab73033 utils: do not leak error
fe21bee cgroup: fix memory leak
10c1fcc handlers: add an alias field
92e67d7 wasm: check pointers before dereferencing
cc2ab3b copr: enable wasmedge support for f36 and higher
9c5ad48 container: rewrite argv when using a handler
a81b115 libcrun: propagate argc and argv
0a94c5b linux: create parent dir with 0755
5308c49 copr: crun-wasm subpackage
8743809 crun: automatically pick handler from argv0
ddb614b crio,test: skip unrelated seccomp notifier with *
6feeff4 wasmtime: add support for compiling .wat format
7b49b79 NEWS: fill data for old releases
baa98f4 container: use clone3 to join directly the target cgroup
37a438d cgroupfs: implement precreate cgroup
c4af47e cgroup: new interface to preload a cgroup
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
6499f37793 |
containerd: update to v1.6.9
Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits:
5af8d89ce overlayutils: Add fastpath for userxattr check
303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
3f9f9508d ctr export strictly match default platform
df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5
658490b78 ctr import: strictly match platform
4907b4d72 Migrate away from GitHub actions set-output
f1493f665 Prepare release notes for v1.6.9
346412f5a adding support of CAP_BPF and CAP_PERFMON
99578d1fc Update mailmap
a956d8415 Add logging volume metrics to Containerd CRI plugin
29e2dea50 fix pusher concurrent close channel
8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
a9adc7938 cri: PodSandboxStatus should tolerate missing task
b66eb726a migrate from k8s.gcr.io to registry.k8s.io
5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
f2376e659 Update container with sandbox metadata after NetNS is created
06f82efef archive: validate digests before use
28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
7db9d1f76 Fix linter warnings
4dc932e62 [release/1.6] gofmt with go1.19
7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
926b9c72f retry request on writer reset
b9a35c6af Add integration tests with failpoint
1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
a85709c6c integration: simplify CNI-fp and add README.md
d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
a7f956d86 integration: CNI bridge wrapper with failpoint
07c479471 pkg/failpoint: add DelegatedEval API
4a5bc05aa runtime/v2/shim: return if error in load plugin
71ee7de24 bin/ctr,integration: new runc-shim with failpoint
3e2e77849 runtime/v2: manager supports server interceptor
cb935bf49 pkg/failpoint: init failpoint package
2fdfd564c make xattr EPERM non-fatal in createTarFile
89e49609d remotes/docker/config: Skipping TLS verification for localhost
b720be2ce remove stray .zuul.yaml
6b30bc4b4 .zuul: remove the zuul because it is offline
0f7e258ee Set grpc code for unimplemented cri-api methods
fb753e5cd update intergration
6ee5bb7ea bump cri-api
ae8598615 ContainerStatus to return container resources
d3c7e31c8 Update CRI-API
5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
3507d600b update runc binary to v1.1.4
1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
11caf690da |
moby: update to v20.10.21
Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits:
f292bf0f4f distribution: Error when pulling OCI artifacts
0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716
f99cb8297b integration: download busybox-w32 from GitHub Release
3f9dc25f5c update containerd binary to v1.6.9
87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
5b5b5c6f13 builder: add missing doc comment
05e25f7892 builder: fix running git commands on Windows
2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
4b9902bad4 Validate digest in repo for pull by digest
c0d1188c14 builder: make git config isolation opt-in
9f5f3abcee builder: isolate git from local system
10db4c2db7 builder: explicitly set CWD for all git commands
8816c3c2aa builder: modernize TestCheckoutGit
11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
66ddb7f91c Fix live-restore w/ restart policies + volume refs
c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
53313be0f3 docker-rootless-setuptools.sh: use context after install
9c486bd267 swagger: update links to logo
fa17fab895 vendor: github.com/containerd/console v1.0.2
481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
39ba2873e8 vendor: github.com/google/btree v1.1.2
c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
fcd4df906b Update some tests for supplementary group permissions
6a0186b357 Wrap local calls to the content and lease service
3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
97014a8db5 namesgenerator: remove Valentina Tereshkova
e44d7f735e AdditionalGids must include effective group ID
9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
7dac25a3a9 vendor: update tar-split to v0.11.2
8bd86a0699 update containerd binary to v1.6.8
6c8dd6a6f2 update runc to v1.1.4
418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
57db169641 seccomp: add support for Landlock syscalls in default policy
7ba8ca042c Update golang to 1.18.5
f2a3c3bcef update golang to 1.18.4
a99c9cd852 update golang to 1.18.3
82939f536b update golang to 1.18.2
ecd1aa081f update golang to 1.18.1
7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
0bc432241e update golang to 1.18.0
bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
a7299ae72c Dockerfile: update golangci-lint v1.44.0
d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
ae3a9337dd golangci.yml: do not limit max reported issues
9820255a1c golangci.yml: skip some tests
d223f37300 golangci.yml: update regex for ignoring SA1019
ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
f2f387b131 daemon: var-declaration: should omit type bool (revive)
2fb7c9fea7 daemon/config: error strings should not be capitalized
fa6954cb98 reformat "nolint" comments
45fa675a35 if-return: redundant if ...; err != nil check (revive)
9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
db7b3f4737 unused: ignore false positives
b6de0ca7c5 G601: Implicit memory aliasing in for loop
e8b838e99f gosec: G601: Implicit memory aliasing in for loop
2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
7573e32577 client: S1031: unnecessary nil check around range (gosimple)
e738a57a6d daemon/logger/journald: fix linting errors
34f6b94255 gosec: G404: Use of weak random number generator
a6d7b61c8b update containerd binary to v1.6.7
b4ba1ee22f update runc binary to v1.1.3
da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
61fdea902b api: swagger: document BuildCache fields.
c77432c889 [20.10] Update golang to 1.17.13
2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
a8c28260ad api: swagger: add missing "platform" query-arg on create
cfdc075b1c Fix file capabilities droping in Dockerfile
2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
eccaf6d368 [20.10] update golang to 1.17.12
ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:
5e08bdb1 Revert: Added API to set ephemeral port allocator range
563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
bea0bcf5 libnetwork: skip firewalld management for rootless
af0c46d8 Apply peformance tuning to new sandboxes also
Bumping docker-cli to version v20.10.21, which comprises the following commits:
3e3677e47d docs: fix links to BuildKit backend
20e3951aeb Remove "experimental" gates around "--platform" in bash completion
75d7ce92a2 fixed the plugin command docker-runc
a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
1ea8d69d6f feat(docker): add context argument completion
e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
bc6ff39e42 docs/reference: run.md update confusing example name
3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
613b9362d0 Detect compose plugin
b30d250320 Add completion for docker-compose plugin
6b25bc3003 fix race condition in TestRemoveForce
bdac0b38d9 Update golang to 1.18.5
c70b01ec1f update golang to 1.18.4
0389090aeb update golang to 1.18.3
c904936d69 update golang to 1.18.2
386d50c2e9 update golang to 1.18.1
990186f2f6 update go to 1.18.0
86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
b3022b91d1 [20.10] Dockerfile.lint: use go install
f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
779ed309a8 lint: update golangci-lint to v1.45.2
2f7e84be65 linting: fix incorrectly formatted errors (revive)
e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
80fb0d575e [20.10] Update golang to 1.17.13
d72bef2088 [20.10] update golang to 1.17.12
7502d7e560 Fix dead external link
308624c3b1 fix: remove asterisk from docker command suggestions
de7d866b6a [20.10] update golang to 1.17.11
240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
5d4776bd90 [20.10] update golang to 1.17.10
49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
1d8abed17d vendor: update x/sys to 134d130e
31dad66f9a [20.10] update golang to 1.17.9
80f673bf9e gofmt with go1.17
3d4cc8e699 [20.10] update remaining files to go1.17.8
30277a8f80 update go to 1.17.8
cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt
53426025c3 [20.10] docs: reformat table for compatibility
573a664639 Describe privileged mode in terms of capabilities
cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1
d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
870f138250 [20.10] vendor: github.com/docker/docker v20.10.14
198d6b8724 [20.10] circleci: update buildx to v0.8.2
55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15
1f9a0df05a e2e: update docker-compose to 1.29.2
4ae338b33a docs: reference: remove trailing space to fix yaml formatting
6380142dd4 docs: fix (table) formatting, fix some broken links
82f422fcf3 docs: build: fix minor markdown and syntax issues
80fd77903b Update the list of log drivers
c3d4d623c8 Fix CMD --ignored-param1 example
2e82d11def docs: dockerd: fix broken link in blockquote area
738a6ee1cc improve cp documentation with some illustration examples
246d96bb6c docs: unify "docker create" and "docker run" reference
2fd0f17057 docs: add missing documentation for --pull flag
5fa500000a Fix incorrect pointer inputs to `json.Unmarshal`
1e6a8ce2b7 Dockerfile: update xx to 1.1
6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
91bab605f7 [20.10] vendor.conf: don't use git:// protocol
a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921
700364e304 Fix mistake with env var example in docker run docs
62d27c32ff Update WORKDIR command information
c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference
04104a04d3 Update dockerd.md
b721998b7b Fixing typo (his --> its)
4065e1246e format create.md table
f1002eb9fb Fix typo
e97c7b240e added missing closing parenthese
aa78937634 Update stats.md add example json output
40fe0573aa Update Ubuntu version number references in push.md
c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root'
5c6723d080 Correct device syntax to --gpus
fd5fc61ecd [20.10] Update Go to 1.16.14
3624019d83 [20.10] update Go to 1.16.13
f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
ee1ac1b319 fix innocuous data-race when config.Load called in parallel
38dd744a11 [20.10] Update Go to 1.16.12
4de40a825e Update Go to 1.16.11
03fa8f92c8 Update Go to 1.16.10
9989fdbc40 Update most links in docs to use https by default
0e20c1fd21 Update Go to 1.16.9
1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42
adb01ca79d docs: some minor touch-ups in checkpoint reference
8260476a06 docs: remove trailing space to fix generated YAML format
bce2e1f953 docs: create.md: typo fix
44064f51c8 Fix typo in documentation - build.md
292779add5 Add doc for BUILDKIT_PROGRESS env var
f2e79b826c docs: use "console" code-hint for shell examples
fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout
400f81089a experimental: fix broken link to "checkpoint and restore" page
c72057c8db docs: move checkpoint/restore doc from experimental into reference
77db97d595 Use private network address for default-address-pools setting in daemon.json example
cbf0d2b7b7 docs: fix some broken anchors
d0014a86bc docs: fix description of restart-delay to mention max (1 minute)
6c1c8b55aa docs: fix search results by filterd is-official
44fdac11f5 Update Go to 1.16.8
061051c24d docs: add missing redirect, and remove /go/experimental redirect
2012fbf111 Update Go to 1.16.7
42d1c02750 registry: ensure default auth config has address
0b924e51fc Update to go1.16.6
6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test
1e9575e81a cli/config/configfile: various test cleanups
c98e9c47ca Use designated test domains (RFC2606) in tests
8437cfefae context: deprecate support for encrypted TLS private keys
68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption
8a64739631 Update Dockerfiles to latest syntax, remove "experimental"
1d37fb3027 Deprecate Kubernetes context support
0793f96394 Deprecate Kubernetes stack support
b639ea8b89 Deprecate Kubernetes stack support
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
docker-ce: update to v20.10.21
Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits:
f292bf0f4f distribution: Error when pulling OCI artifacts
0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716
f99cb8297b integration: download busybox-w32 from GitHub Release
3f9dc25f5c update containerd binary to v1.6.9
87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
5b5b5c6f13 builder: add missing doc comment
05e25f7892 builder: fix running git commands on Windows
2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
4b9902bad4 Validate digest in repo for pull by digest
c0d1188c14 builder: make git config isolation opt-in
9f5f3abcee builder: isolate git from local system
10db4c2db7 builder: explicitly set CWD for all git commands
8816c3c2aa builder: modernize TestCheckoutGit
11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
66ddb7f91c Fix live-restore w/ restart policies + volume refs
c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
53313be0f3 docker-rootless-setuptools.sh: use context after install
9c486bd267 swagger: update links to logo
fa17fab895 vendor: github.com/containerd/console v1.0.2
481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
39ba2873e8 vendor: github.com/google/btree v1.1.2
c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
fcd4df906b Update some tests for supplementary group permissions
6a0186b357 Wrap local calls to the content and lease service
3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
97014a8db5 namesgenerator: remove Valentina Tereshkova
e44d7f735e AdditionalGids must include effective group ID
9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
7dac25a3a9 vendor: update tar-split to v0.11.2
8bd86a0699 update containerd binary to v1.6.8
6c8dd6a6f2 update runc to v1.1.4
418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
57db169641 seccomp: add support for Landlock syscalls in default policy
7ba8ca042c Update golang to 1.18.5
f2a3c3bcef update golang to 1.18.4
a99c9cd852 update golang to 1.18.3
82939f536b update golang to 1.18.2
ecd1aa081f update golang to 1.18.1
7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
0bc432241e update golang to 1.18.0
bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
a7299ae72c Dockerfile: update golangci-lint v1.44.0
d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
ae3a9337dd golangci.yml: do not limit max reported issues
9820255a1c golangci.yml: skip some tests
d223f37300 golangci.yml: update regex for ignoring SA1019
ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
f2f387b131 daemon: var-declaration: should omit type bool (revive)
2fb7c9fea7 daemon/config: error strings should not be capitalized
fa6954cb98 reformat "nolint" comments
45fa675a35 if-return: redundant if ...; err != nil check (revive)
9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
db7b3f4737 unused: ignore false positives
b6de0ca7c5 G601: Implicit memory aliasing in for loop
e8b838e99f gosec: G601: Implicit memory aliasing in for loop
2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
7573e32577 client: S1031: unnecessary nil check around range (gosimple)
e738a57a6d daemon/logger/journald: fix linting errors
34f6b94255 gosec: G404: Use of weak random number generator
a6d7b61c8b update containerd binary to v1.6.7
b4ba1ee22f update runc binary to v1.1.3
da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
61fdea902b api: swagger: document BuildCache fields.
c77432c889 [20.10] Update golang to 1.17.13
2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
a8c28260ad api: swagger: add missing "platform" query-arg on create
cfdc075b1c Fix file capabilities droping in Dockerfile
2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
eccaf6d368 [20.10] update golang to 1.17.12
ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:
5e08bdb1 Revert: Added API to set ephemeral port allocator range
563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
bea0bcf5 libnetwork: skip firewalld management for rootless
af0c46d8 Apply peformance tuning to new sandboxes also
Bumping docker-cli to version v20.10.21, which comprises the following commits:
3e3677e47d docs: fix links to BuildKit backend
20e3951aeb Remove "experimental" gates around "--platform" in bash completion
75d7ce92a2 fixed the plugin command docker-runc
a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
1ea8d69d6f feat(docker): add context argument completion
e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
bc6ff39e42 docs/reference: run.md update confusing example name
3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
613b9362d0 Detect compose plugin
b30d250320 Add completion for docker-compose plugin
6b25bc3003 fix race condition in TestRemoveForce
bdac0b38d9 Update golang to 1.18.5
c70b01ec1f update golang to 1.18.4
0389090aeb update golang to 1.18.3
c904936d69 update golang to 1.18.2
386d50c2e9 update golang to 1.18.1
990186f2f6 update go to 1.18.0
86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
b3022b91d1 [20.10] Dockerfile.lint: use go install
f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
779ed309a8 lint: update golangci-lint to v1.45.2
2f7e84be65 linting: fix incorrectly formatted errors (revive)
e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
80fb0d575e [20.10] Update golang to 1.17.13
d72bef2088 [20.10] update golang to 1.17.12
7502d7e560 Fix dead external link
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
containerd: update to v1.6.9
Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits:
5af8d89ce overlayutils: Add fastpath for userxattr check
303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
3f9f9508d ctr export strictly match default platform
df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5
658490b78 ctr import: strictly match platform
4907b4d72 Migrate away from GitHub actions set-output
f1493f665 Prepare release notes for v1.6.9
346412f5a adding support of CAP_BPF and CAP_PERFMON
99578d1fc Update mailmap
a956d8415 Add logging volume metrics to Containerd CRI plugin
29e2dea50 fix pusher concurrent close channel
8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
a9adc7938 cri: PodSandboxStatus should tolerate missing task
b66eb726a migrate from k8s.gcr.io to registry.k8s.io
5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
f2376e659 Update container with sandbox metadata after NetNS is created
06f82efef archive: validate digests before use
28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
7db9d1f76 Fix linter warnings
4dc932e62 [release/1.6] gofmt with go1.19
7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
926b9c72f retry request on writer reset
b9a35c6af Add integration tests with failpoint
1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
a85709c6c integration: simplify CNI-fp and add README.md
d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
a7f956d86 integration: CNI bridge wrapper with failpoint
07c479471 pkg/failpoint: add DelegatedEval API
4a5bc05aa runtime/v2/shim: return if error in load plugin
71ee7de24 bin/ctr,integration: new runc-shim with failpoint
3e2e77849 runtime/v2: manager supports server interceptor
cb935bf49 pkg/failpoint: init failpoint package
2fdfd564c make xattr EPERM non-fatal in createTarFile
89e49609d remotes/docker/config: Skipping TLS verification for localhost
b720be2ce remove stray .zuul.yaml
6b30bc4b4 .zuul: remove the zuul because it is offline
0f7e258ee Set grpc code for unimplemented cri-api methods
fb753e5cd update intergration
6ee5bb7ea bump cri-api
ae8598615 ContainerStatus to return container resources
d3c7e31c8 Update CRI-API
5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
3507d600b update runc binary to v1.1.4
1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c005181688 |
image-oci-umoci: add convenience symlink for oci image tar
We have been symlinking the -oci image directory for a while, but we can also create a shorted convenience symlink for the tar'd version of that directory. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
2aea6f9ab3 |
image-oci-sloci: add convenience symlinks in deploy
To sync the sloci OCI image backend with the umoci variant, create shortened convenience symlinks for the image and image.tar in the deploy directory. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
c66e392d8e |
virt-viewer: fix buildpaths QA warning
The file virt-viewer-enums.c in the virt-viewer src is generated by glib-mkenums. glib-mkenums is embedding full paths into this file. There's no option for this utility to use a sysroot style variable. So to avoid QA errors, we sed WORKDIR out of the generated file (after build, before packaging) and make its includes relative. The file can then be packaged into virt-viewer-src without a QA error. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Markus Volk
|
eb411d0c5b |
virt-viewer: add recipe
virt-viewer is a minimal tool for displaying the graphical console of a virtual machine. The console is accessed using the VNC or SPICE protocol. The guest can be referred to based on its name, ID, or UUID. If the guest is not already running, then the viewer can be told to wait until it starts before attempting to connect to the console. The viewer can connect directly to both local and remotely hosted machines , optionally using SSL/TLS encryption. virt-viewer is the required client for the debian based proxmox ve. That's also the environ- ment for which it was tested at runtime (only on x86_64). I have successfully compiled it for x86_64, aarch64 and qemumips. Other platforms might work (as long as gobject-introspection is available), but are untested. Adding the vnc protocol would pull in a layer dependency on meta-gnome. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Markus Volk
|
3fc29f569e |
libvirt-glib: add recipe
libvirt-glib wraps libvirt to provide a high-level object-oriented API better suited for glib-based applications, via three libraries: - libvirt-glib - GLib main loop integration & misc helper APIs - libvirt-gconfig - GObjects for manipulating libvirt XML documents - libvirt-gobject - GObjects for managing libvirt objects It is needed as a dependency for glib based projects that make use of libvirt e.g. virt-manager, virt-viewer or gnome boxes. Compilation was tested for x86_64, aarch64 and qemumips Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
99e93d3f88 |
runc: update to 1.1.4-tip
Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits:
3b958289 Fixes inability to use /dev/null when inside a container
335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally
fb145a2f cirrus-ci: enable EPEL for CentOS 7
276297b6 VERSION: back to development
5fd4c4d1 Release 1.1.4
204c673c [1.1] fix failed exec after systemctl daemon-reload
ec2efc2c ci: fix for codespell 2.2
c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19
d83a861d Fix error from runc run on noexec fs
d614445d [1.1] libct/nsenter: switch to sane_kill()
3ca5673f CI: workaround CentOS Stream 9 criu issue
c3986e53 tests/int: don't use --criu
f46c0dad [1.1] ci: fix delete.bats for GHA
6b94849d tests/int: runc delete: fix flake, enable for rootless
fa3354dc libct: fix mounting via wrong proc fd
eb1552a0 VERSION: back to development
6724737f VERSION: release 1.1.3
91fa032d ci: add basic checks for CHANGELOG.md
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
6dba10357c |
runc-docker: update to 1.1.4-tip
Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits:
3b958289 Fixes inability to use /dev/null when inside a container
335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally
fb145a2f cirrus-ci: enable EPEL for CentOS 7
276297b6 VERSION: back to development
5fd4c4d1 Release 1.1.4
204c673c [1.1] fix failed exec after systemctl daemon-reload
ec2efc2c ci: fix for codespell 2.2
c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19
d83a861d Fix error from runc run on noexec fs
d614445d [1.1] libct/nsenter: switch to sane_kill()
3ca5673f CI: workaround CentOS Stream 9 criu issue
c3986e53 tests/int: don't use --criu
f46c0dad [1.1] ci: fix delete.bats for GHA
6b94849d tests/int: runc delete: fix flake, enable for rootless
fa3354dc libct: fix mounting via wrong proc fd
eb1552a0 VERSION: back to development
6724737f VERSION: release 1.1.3
91fa032d ci: add basic checks for CHANGELOG.md
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
40c9a3afca |
crun: update to 1.6+
Bumping crun to version 1.6-75-g4907f10, which comprises the following commits:
0e4cf20 container: pass the argv0 on errors with handlers
6da989c wasmtime: honor error message length
2f46f21 wasmtime: mark unused argument
baa98f4 container: use clone3 to join directly the target cgroup
2497b9b linux: add run.oci.pidfd_receiver=PATH annotation
37a438d cgroupfs: implement precreate cgroup
c4af47e cgroup: new interface to preload a cgroup
352d8ac criu: use a temporary error
3ebaba3 container: cache the bpf generated by seccomp
18abbfc Typos: a/an
e5d4c07 man: fix indentation for run.oci.handler=HANDLER
74d097b seccomp: use relative paths to open bpf
8cfcc8f seccomp: move copy bpf to seccomp
7a66ccc container: move open_seccomp_output to seccomp
a2de8fb seccomp: add functions to calculate checksum
6861b2a container: compute seccomp options earlier
dd310aa configure.ac: add check for libgcrypt
81d3b16 exec: set context
0cffffe crun: display rundir in --version output
882a054 wasm: inherit environment variables in the WasmEdge handler
1f71880 man: cleanup run.oci.handler and define krun and wasm
d474211 Refer to libocispec header files under ocispec/
5027629 build(deps): bump uraimo/run-on-arch-action from 2.2.1 to 2.3.0
fef6ce2 build(deps): bump github/codeql-action from 1 to 2
5837234 crun: open libcrun with dlopen
5f2464f build(deps): bump actions/cache from 2 to 3
ba0adeb build(deps): bump uraimo/run-on-arch-action from 2.2.0 to 2.2.1
5d2a536 build(deps): bump actions/upload-artifact from 2 to 3
a4ffe17 build(deps): bump actions/checkout from 2 to 3
108d9ec Check for github actions updates on weekly basis
9f2acfc cgroup: account for swap usage for checkBeforeUsage
6666dec list: remove yajl usage
6fdcb89 container: new API libcrun_write_json_containers_list
e1b32c7 update: remove yajl usage
270961f python: Fix argument type in container_delete
17f4e55 container: new API libcrun_container_update_from_values
1c681c1 python: Fix argument parsing in make_context
e666af1 crun: chown std streams before joining the user namespace
391df45 linux: reject sysctl kernel.domainname when OCI knob domainname is set
f94655c test: ack (none) as output of getdomainname
fdb26d0 cgroup: honor checkBeforeUpdate
8758f31 add support for setting the domainname
17ba516 libocispec update
7ea7617 systemd: create sub-cgroup on v1 as well
08bccc7 tests: update containerd to 1.6.8
978e719 Copr: Fix i386 builds
18cf2ef NEWS: tag 1.6
396ac88 seccomp: honor SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
074cd9a wasm: provide an integration test for crun with wasmedge support
399e5ea wasm: use wasmedge library soname in dlopen
3e34345 crun: reintroduce -V (uppercase) as an alias for --version
17337c4 seccomp: use helper process to send listener fd
f34ebf2 Copr: wasmtime support only for non-x86
df20997 crun: now -v prints the version
fdcf83a utils: wrap mmap and munmap
95744c8 utils: unify read process exit status
44c305f linux: move definition of syscall_clone to linux.h
d254d3e utils: run process with timeout restores sigmask
57df79b init mask
430dea1 container: drop intermediate userns feature
2e647e0 crio,CI: skip failing checkpoint and restore one container
8d0dfc3 podman,CI: skip top on priviledged container
ad9008b copr: depend on wasmtime-c-api for shared lib
Bumping runtime-spec to version v1.0.2-114-g494a5a6, which comprises the following commits:
4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
6be797c CODEOWNERS: sync with MAINTAINERS
9e658bc config-linux: add memory.checkBeforeUpdate
1924f6b GOVERNANCE: correct the Charter URL
744912b add domainname spec entity
0da1600 fix rfc link
b57ada5 maintainer updates as per #1101
e78a3c3 Add available `LinuxSeccompFlag`s
Bumping libocispec to latest, which comprises the following commits:
02f231b Move header files under ocispec/
39e1872 Make libocispec installable
6fd1d94 update runtime-spec to latest
1e37c8a rust, runtime: add domainname to spec
d59cc93 rust,runtime: add MountUidMapping and MountGidMapping
ac69f5a rust,runtime: add idle type to CPU
e9c21c1 rust,runtime: rename GidMapping,UidMapping to Linux{Uid/Gid}Mapping
8258e1d image-spec: update from upstream
b2e74e1 runtime-spec: update from upstream
ce973fd parser: allocate empty arrays
845aad5 runtime-spec: sync from upstream
1380666 image-spec: sync from upstream
9bb6aa9 src: fix regression
27763d8 runtime-spec: sync from upstream
8abb1b1 image-spec: update from upstream
2ea0d22 runtime-spec: update from upstream
cde73d8 yajl: update from upstream
fc57095 src: fix generated code indentation
e739a1c .github: set safe directory
f09f411 build: fix bashism in configure.ac
23ed5eb git: ignore newly added test binary to prevent untracked changes in crun
d15ed35 fix bug when contain null value in json
2a622ef image-spec: update from upstream
3dd60db runtime-spec: update from upstream
88241d7 sync: add CMT and MBM fields to Intel RDT
Bumping image-spec to version v1.1.0-rc2-12-g4df8887, which comprises the following commits:
867ce74 ArtifactType is optional, omit when empty
59780aa Add ArgsEscaped field to image config
3625ee3 doc: fix example in artifact.md
94f2431 version: bump main back to -dev
19a74bc version: release v1.1.0-rc2
0a97fe7 docs: Added artifact.md to docs and spec.md
c91663b Update RELEASES.md
0e7e0dd docs: Update release process docs with checklist
5d055a4 version: switch back to -dev
4728b6e version: bump for 1.1.0-rc1 release
a7ac485 Rename refers field to subject (#950)
4c15674 Use go install and full path to commands
ce50f1f Bump from Go 1.16 to 1.17
ca2e500 Embed Platform in Image
a865bc0 Fix whitespace consistency in config.md
da33ef0 Remove io/ioutil references
ed7e07b Add artifact to spec.md
bc9c4bd Update schema for mediaType validation (#933)
b04b320 Working Group Proposal for Reference Types
ba36edd Add regclient to implementations
ba3f174 Add maintainer nomination template
08825b8 Pinning version of golangci-lint to support 1.16
9747134 Move inactive maintainers to emeritus
0bd8a03 Add Brandon as maintainer
c7ca3ac Update URLs to https
874a191 Add Sajay as maintainer
6ffdc78 Move inactive maintainers to emeritus
d6ce48a Add mediaType fields into example manifest & image index JSON references
bc44f5b Fixing charter link
0895292 implementations: point to krustlet/oci-distribution
02c5c05 implementations: adding the C and Rust libraries
a36b0c8 Handle multiple matching index entries
a3eee7d README.md: Remove link to OCI scope table The OCI scope table no-longer exists.
4533d3e schema: use Go's embed package instead of esc
d147780 .tool: remove lint tool, call linter directly
0e094f3 schema, specs-go: fix lint errors
d3cd202 *: switch to golangci-lint
4d865bc go: have the go.mod at top-level
0f6c001 Remove unneeded docker pull of pandoc image
de28903 Makefile: stale installation of glide was failing
3a46ac8 github: bring forward the versions of golang tested/built with
6ced3bd media-types: `.mediaType` is available in both OCI and Docker
3be64d9 version: bump main back to -dev
beccafd version: release 1.0.2
5b82148 specs-go: adding `mediaType` to the index and manifest structures
2eb4046 *.md: bring mediaType out of reserved status
e3885ce version: bump main back to -dev
67d2d56 version: release 1.0.2
dcdcb7f specs-go: adding `mediaType` to the index and manifest structures
5f31485 *.md: bring mediaType out of reserved status
3fee04b Adding ACR to implementations
8087946 Reflect docker dontation of distribution to CNCF
bd2fa25 Minor spelling correction
fc4df0a Fix very minor oversight in config example
0d98a6c Scope data verification to content consumers
83479d4 Clean up portability considerations
fccc435 Implementations MUST NOT populate data arbitrarily
2596ec0 Expand godoc for Data
58c082d Add note about portability concerns
ce281ce Add Embedded Data section
aaf8045 Define the data field
4f080a7 Add go.mod and pin dependencies
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
43396cb671 |
podman: update to 4.3
We add ${datadir}/user-tmpfiles.d/* to package some newly added systemd
files, but otherwise, the recipe is unchanged.
Bumping libpod to version v4.3.0-7-g9ce592fcb, which comprises the following commits:
83b02f8fd Update c/image from release-5.23 branch
14563ef13 system tests: fix broken bashisms
34ebb9af2 Release notes fixes
d5a0dfc1e Bump to v4.3.1-dev
ad42af949 Bump to v4.3.0
9496a3836 Final release notes for v4.3.0
ac7fa8437 libpod: Add support for 'podman top' on FreeBSD
f8a79409c libpod: Factor out jail name construction from stats_freebsd.go
e33306683 pkg/util: Add pid information descriptors for FreeBSD
3810a9dac [CI:BUILD] copr: podman rpm should depend on containers-common-extra
94499aa47 Podman image: Set default_sysctls to empty for rootless containers
8a28b896b Allow volume mount dups, iff source and dest dirs
295d0d1d9 libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
c9c683a58 markdown-preprocess: add generic include mechanism
42a221874 markdown-preprocess: almost complete OO rewrite
ca9eaec5e bump golangci-lint to v1.49.0
6972d47ff rootless: fix return value handling
5a214f6e5 generate systemd: set --stop-timeout for stopping containers
c6ad786ca Change to correct break statements
1a5506459 Add swagger install + allow version updates in CI
78d4af894 Cirrus: Fix windows clone race
fc43751e7 kill: wait for the container
9c01425ad hack/tree_status.sh: print diff at the end
682dd8e45 Man pages: refactor common options (misc)
b98f6b52f Man pages: Refactor common options: --detach-keys
c7e946482 Man pages: refactor common options: --attach
83b5fcf38 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
6d5d84a05 Man pages: refactor common options: --annotation (manifest)
7f88deff1 KillContainer: improve error message
b805a068c build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
42b642509 docs: add missing options
f2a2ab557 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
095aa5c3a play kube: notifyproxy: listen before starting the pod
b7514ee40 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
f7732ae52 Man pages: refactor common options: --os-version
298a2432e play kube: add support for configmap binaryData
2efdff528 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
802118ad1 Revert "Add checkpoint image tests"
dfa55ff6a Revert "cmd/podman: add support for checkpoint images"
eb43d175c system tests: health-on-failure: fix broken logic
ee5bd1e0c Man pages: Add mention of behavior due to XDG_CONFIG_HOME
c88dfbb98 Add and use libpod/Container.Terminal() helper
cbde35e32 Avoid unnecessary timeout of 250msec when waiting on container shutdown
d15b4af92 healthcheck: fix --on-failure=stop
81c645f2f libpod: Add support for 'podman pod' on FreeBSD
546e9445e libpod: Factor out cgroup validation from (*Runtime).NewPod
26df7d97c libpod: Move runtime_pod_linux.go to runtime_pod_common.go
70e0cb509 specgen/generate: Avoid a nil dereference in MakePod
f92360283 libpod: Factor out cgroups handling from (*Pod).refresh
b9d479b72 health checks: make on-failure action retry aware
ead78d8ba libpod: Remove 100msec delay during shutdown
640eac465 Clean up when stopping pods
d31a06ce8 Create full path to a directory when DirectoryOrCreate is used with play kube
9ce61988d Return error in podman system service if URI scheme is not unix/tcp
8041df3b6 Update vendor of containers/buildah v1.28.0
d13509f27 Man pages: refactor common options: --time
c16078f2d Release notes for all content before cherry-picks
3451aac35 Man pages: refactor common options: --pod
aaa9f4ea9 Prevent nil pointer deref in GetImage
f250560a8 Add pods created by kube play to a default network
26468c227 Man pages: refactor common options: --features
2f6c911d6 build(deps): bump github.com/opencontainers/image-spec
62bc8e3a1 Cirrus: Fix tag & branch go checks failing
eaa389262 Man pages: refactor common options: --variant
9bafd9c46 Man pages: refactor common options: --compression-format
eb7f54ef6 cleanup: always delete netns mount
a2581abbf Adds brew info podman to issue template.
73c8416c3 Update for https://github.com/klauspost/pgzip/pull/50
02b0f9fc3 container inspect: include image digest
fe3c91d58 Update vendor containers/(common,image)
f304a1757 Fix typo about e2e tests name
66747351f [CI:DOCS] Add quay-description update reminder
0660f5b7a Cirrus: Combine build and code consistency tasks
6c8a11b74 Cirrus: Combine pre-test checks into build task
0e7d166ee Cirrus: Minor YAML comment/whitespace fix
e7328cb97 Man pages: refactor common options: --network
fe2b4df38 podman kube play allow --network host
e4c0c8994 Man pages: Refactor common options: --sign-passphrase-file
309f4fb54 Man pages: refactor common options: --log-opt
6f821f03d `podman pod logs -l` no longer panics
f00ceaabd vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
3b5171d0e fix "podman system prune networks" flake
ebff193f8 Add test for podman run with checkpoint image
9c3d8bb49 cmd/podman: add support for checkpoint images
b17d8ff46 restore: make IsCheckpointImage reusable
e2fe9eaba Revert "remote: fix manifest add --annotation"
32f54a81e remote: fix manifest add --annotation
496d4c753 System tests: stop deep-checking log-level
ba70dd5ec build(deps): bump github.com/container-orchestrated-devices/container-device-interface
66517d86a fix: kube play liveness probe http path
f5fc0960e Default missing hostPort to containerPort is defined in kube.yaml
359e39744 libpod: Add volume support for FreeBSD
abe8dad34 libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount
9de2a5ff7 libpod: Move volume_internal_linux.go to volume_internal_common.go
065474755 libpod: Move runtime_volume_linux.go to runtime_volume_common.go
95cb14aff fix: liveness check with http probe
3e8093152 System tests: light cleanup
0fb95f95d CI: only make install.tools when needed
2e4e1bb97 podman machine ssh handling
53d604182 Cirrus: Build pkginstaller in CI
c1ae7f193 Add SELinux information about boolean for using random devices
f32b02c7b Bump to v4.3.0-dev
f818eb4a5 Bump to v4.3.0-RC1
527fc409e Cirrus: Add golang code consistency check script
f6724116a Man pages: refactor common options: --env-file
7bc36602f auto-update: validate container image
fa18d35e8 Man pages: refactor common options: --env
911ceb823 Man pages: Refactor common options: --sig-proxy
fde4d21be man page xref: verify page title
8c627dfb5 Contrib: Add containerfile to create podman-remote binary image
9261a5469 Remove redundant log message
52656887e compat API: network inspect do not show isolate option
337f1f586 [CI:DOCS] man pages: fix incorrect title
f5e83f684 Fixup Buildah merge
54653ceeb Update vendor or containers/buildah
3a5b5d04b Fix machine starting state
69ac1e36c Cirrus: Catch use of deprecated io/ioutil package
8ff54cbe8 Fix libsubid detection
326d386ee [CI:BUILD] Copr: also define _user_tmpfilesdir for f35
2478e32ca fix restore API endpoint
6ee582315 Events for containers in pods now include the pod's ID
dc05d1212 Add --pretty to podman secret inspect
fc6dcd12b Add support for 'image' volume driver
5a2405ae1 Don't mount /dev/tty* inside privileged containers running systemd
d5f044ee7 System tests: reenable some skipped aarch64 tests
33c31112f cli: Add signature-policy flag to podman save
ba6f84666 Fix a few missed io/ioutil -> os updates
fb3d55006 Improve generate systemd format
9bb51e8e9 Add labels to secrets
7cfe0328f Add support to sig-proxy for podman-remote
377773ab5 Fix podman-remote run --attach stdin to show container ID
d968f3fe0 Replace deprecated ioutil
bb160be12 libpod: Implement 'podman cp' for FreeBSD
88f82ceab libpod: Move jointMountAndExec to container_copy_linux.go
75d6e7bae libpod: Move part of (*Container).stat to container_stat_linux.go
0b02d4cee libpod: Move container_copy_linux.go to container_copy_common.go
24d129071 libpod: Move container_stat_linux.go to container_stat_common.go
6790deb1b man pages: document some --format options
23195646d pkginstaller: use path_helper to add podman and helpers to path
dc8fdb46c label.Relabel third option is shared not recurse
049b10884 podman container clone env patch
903f551ae build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
4a053a821 notifyproxy: don't set a read deadline
1071098ee kube play: sdnotify proxy: use a wait group
21841dc38 Default to --dns-option to match Docker and Buildah
d63e49a26 remote: checkpoint --export prints a rawInput or an error on remote
cfbc4aaeb Cleanup: fix problems reported by shell lint
e2573b734 Fix broken titles on readthedocs
62d1c487d Man pages: Refactor common options: --dns
7d1f688ff [CI:DOCS] man pages: document some --format options
884fd4575 Revert "generate systemd: drop ExecStop"
3508bd22f Add support for podman context as alias to podman system connection
9ba034293 Man pages: refactor common options: 2 stats opts
c20abf12c generate systemd: drop ExecStop
45d09e65b libpod: Make getContainerInspectData work on FreeBSD
2e4db139a libpod: Factor out platform-specfic code from generateInspectContainerHostConfig
60ef4ad1c stats: cap memory limit to the available memory
cf2118eab stats: map MaxUsage to the correct value
3f8591c2f Man pages: refactor common options: --shm-size
f76390d5e Man pages: refactor common options: --user
e19e0de5f Introduce graph-based pod container removal
51a8635c7 Cirrus: Fix win_installer task clone failure
cb6ad7631 Cirrus: Only run unit-testing on Fedora.
815655b9d Cirrus: Move gitlab test to cirrus-cron "main"
88879d588 System tests: cleanup in --format test
d4a62ff93 System tests: fix three races
14e5d1c15 libpod: fix lookup for subpath in volumes
92dc61d5e libpod: rename function
42937cd9a Ensure that a broken OCI spec does not break inspect
b6c75a3cc Man pages: refactor common options: --preserve-fds, -it
dd53ee599 fix ci: update systemd generate unit test
4df460836 Man pages: refactor common options: --ip6
47fff4b00 improve slirp4netns allow_host_loopback docs
0aedddd3b [systemd] Ensure that podCreateArgs appear last in ExecStartPre=
b47ce9a6e libpod: Add support for 'podman stats' on FreeBSD
b3e978e43 libpod: Split out the common code from GetContainerStats
47bd9e811 libpod: Move stats.go to stats_linux.go for consistency
1e6da1115 pkg/rctl: Add a simple FreeBSD RCTL library
75740be39 all: stop using deprecated GenerateNonCryptoID
76eb06330 Man pages: refactor common options: --tls-verify
fe04c86a2 generate systemd: fix pod dependencies
d4a000312 Man pages: Refactor common options: --publish
9d41b95d7 rework --format system test
dacd59424 Man pages: refactor common options: --publish-all
885bc4742 Enable github labeler, use for api-change
74e0511c9 Man pages: refactor common options: --os (pull)
f30d4852e Man pages: refactor common options: --ip
0ea5080c9 generate systemd: warn on --restart without --new
c8c2aab50 health checks: restart timers
908458d06 enable podman pod inspect --format test
7f8e99ded podman version: use report.Formatter over Template
0c21dcf70 podman machine info: use report.Formatter over Template
e5389e98f podman info: use report.Formatter over Template
1acebdda3 tests for 15673
43f7bdf82 podman inspect return exit code > 0 on print error
00240a0e2 podman inspect: use report.Formatter over Template
377599f1f podman secret inspect: use report.Formatter over Template
f5e13ded9 podman secret ls: use report.Formatter over Template
1463898b0 podman network ls: use report.Formatter over Template
90634d5ee podman volume ls: use report.Formatter over Template
20eccfc9d podman machine inspect: use report.Formatter over Template
a687949db podman machine ls: use report.Formatter over Template
65e78d92c podman auto-update: use report.Formatter over Template
70e6b19d4 events: Fix spelling of newNullEventer
9457549ff build(deps): bump github.com/vbauerster/mpb/v7 from 7.5.2 to 7.5.3
09ba2e0b9 Man pages: refactor common options: --rootfs
07a8eb829 Ensure that the DF endpoint updated volume refcount
e24c2f009 system tests: periodic cleanup and fixes
a63a40c3e podman events --format: fix duplicated newline
2ae4ce799 fix race where podman events exits to early
b3212a680 set default EventsLogFilePath on first run
12a1483e7 Improve --tmpdir and --events-backend docs
72e715a11 Use new secret store API
cd32b929e libpod: runtime newEventer() cleanup
76980a222 event backend journald: fix problem with empty journal
138b09c7e event backend none: return an error when reading events
c5bdb6afe fix hang with podman events file logger
56c880a7e libpod: Move ocicniPortsToNetTypesPorts and compareOCICNIPorts to networking_common.go
221c4d5f0 libpod: Move NetworkDisconnect and NetworkConnect to networking_common.go
f939f3fdf libpod: Move resultToBasicNetworkConfig to networking_common.go
c9de84080 libpod: Add support for getContainerNetworkInfo on FreeBSD
51c70e588 libpod: Move getContainerNetworkInfo to networking_common.go
d014dca81 libpod: Move isBridgeNetMode and reloadContainerNetwork to networking_common.go
1dd0eb467 libpod: Move teardownNetwork and teardownCNI to networking_common.go
2bf050f1d libpod: Move setUpNetwork and getCNIPodName to networking_common.go
3d7f9f67a libpod: Move convertPortMappings and getNetworkOptions to networking_common.go
d1414adbb libpod: Add FreeBSD implementation of container networking
c5f64d9f5 libpod: Re-work the container's network state to help code sharing
36cfd05a7 libpod: Move platform-specific bind mounts to a per-platform method
369d86040 libpod: Avoid a nil dereference when generating resolv.conf on FreeBSD
a1fa9faa4 Buildah treadmill script: various fixes
43da39d31 Man pages: refactor common options: --volumes-from
050ae6181 [CI:DOCS] --volume: consistent wording
d935e9799 update c/storage to latest
6091ff42d Include more environment variables in conmon env.
118546c6a refactor: use `os.ReadDir` for lightweight directory reading
2c63b8439 Fix stutters
b8108d06b Fix CPU usage limitation in play kube for non integer values
8466c4a19 Cirrus: Don't run win_installer in multiarch cron
6210c6723 TEMPORARY: instrumenting for 15488
3a9a7dcdc Man pages: refactor common options: --volume
a82672047 build(deps): bump github.com/docker/docker
6bf8670b6 stop: fix error handling
aad29e759 health check: add on-failure actions
8e1aa7af3 Fixes for vendoring Buildah
eb28a1c08 update buildah and c/common to latest
c7411af9e Ignore cpu realtime options on cgroups V2 systems
27be5eaaf Fix swagger documentation
9a286f712 generate, kube: plug HostUsers
1994f3823 Add --config for Docker compatibility
ad63aa20d kube: plug HostUsers in the pod spec
626ee118c e2e: fix run_staticip_test in proxy environment
d10e77e1b fix podman pod inspect to support multiple pods
911e4a138 specgen/generate: Factor out setting resource limits from CompleteSpec
db33f06a9 fixes data race in system.Events and nil error logging
f75c3181b podman: skip /sys/fs/cgroup/systemd if not present
3f0b5cd40 Man pages: refactor common options: --userns (pod)
8d40bf3f1 proper --debug/-D flag support
4fbc4b8f7 Man pages: refactor common options: --privileged
f85fa9806 libpod: Filter out ENOTCONN errors when trying to close unix domain sockets
6668ac93b libpod: Factor out capabilites code from prepareProcessExec
f6e3cfa53 system tests: fix systemd tests in proxy environment
744878a71 Add win-installer build/verify workflows to CI
ecb9f99b8 Add new windows installer and build
d759576ab emit container labels also for container exited and exec died events
9585147e1 fix Pod removal after OS hard shutdown
e0d5b4e3f Change pipe wait to 20 seconds
63c779a85 Fix manpage headers
4675103c2 Man pages: refactor common options: --sysctl
eb39d56df Bump github.com/docker/go-units from 0.4.0 to 0.5.0
f4c39df25 Add win-sshproxy.exe to windows client zips
40cd1c0ff Man pages: refactor common options: --device
4462305fe Update the displayed warning in documentation regarding the system reset
092690297 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
77ab6125f remove SkipIfNotFedora() from events test
d22aeeec2 fix podman events with custom format
a9a411f8a Add generate systemd -e/--env option
274d34a25 kube play: support auto updates and rollbacks
04f0ac2aa system tests: fix some tests in proxy environment
6a3c28968 Drop stale config value resulting in asymmetric config
c2c910736 CI: Cirrus setup: retry failed curls
fb38838fe Man pages: refactor common options: --memory*
0df291d3b Update system reset warning message to warn against deletion of all volumes
bdfc4df1f pkg/autoupdate: allow updating multiple tasks per unit
cbaa78cd8 Fix list of default capabilities
a3aecf0f2 libpod: Factor out setting volume atime to container_internal_linux.go
7a1abd03c libpod: Move miscellaneous file handlling to container_internal_common.go
d162285f3 libpod: Don't mount /dev/shm in containers on FreeBSD
212b11c34 libpod: Factor out handling of slirp4netns and net=none
eab4291d9 libpod: Move functions related to /etc bind mounts to container_internal_common.go
b3989be76 libpod: Move getRootNetNsDepCtr to container_internal_common.go
a148c1622 libpod: Use (*Container).addNetworkNamespace to restore checkpoint network
7518a9136 libpod: Move functions related to checkpoints to container_internal_common.go
be5d1261b libpod: Move mountNotifySocket to container_internal_common.go
71e2074e8 libpod: Move getUserOverrides, lookupHostUser to container_internal_common.go
232eea5a0 libpod: Move isWorkDirSymlink, resolveWorkDir to container_internal_common.go
a5ee3cb79 pkg/util: Add no-op implementation of AddPrivilegedDevices on FreeBSD
0889215d8 libpod: Use platform-specific mount type for volume mounts
c1a86a8c4 libpod: Factor out platform-specific sections from generateSpec
e101f4350 libpod: Move getOverlayUpperAndWorkDir and generateSpec to container_internal_common.go
6e4b5b007 libpod: Add FreeBSD implementation of container internals
8ade76e79 libpod: Move networkDisable to container_linux.go
71978b0a0 Fix #15243 Set AutomountServiceAccountToken to false
b9df3a6a9 Man pages: refactor common options: --label
d82a41687 Add container GID to additional groups
3e1dde10b [CI:BUILD] Copr: Define _user_tmpfilesdir for rhel
875fd4858 Fix swagger documentation
070dfa3b3 Man pages: refactor common options: --digestfile
3e744e52b System tests for podman-update
c05b6e5d3 Update test per comment in #15555
3d09d47a2 Man pages: refactor common options: --device-X-Y
050f3291b implement podman update
c63830166 Man pages: refactor common options: --name
4a1acccf9 Fix bind-mount-option annotation in gen/play kube
64eb07941 CI: disable flaking test on ubuntu
b667d7340 libpod: Ensure that generated container names are random
5faf4eff1 Cirrus: pick UIDs/GIDs starting at 1500, not 1000
b25d62a4d [CI:BUILD] Packit: Disable until proved in other repos
84352a81c Set enableServiceLinks to false in generated yaml
fed4ce0ea Inhibit SIGTERM during Conmon startup
70a599b57 Man pages: refactor common options: --signal
da57065ab specgen: Use platform-specific mount type for volume mounts
0300271bf libpod/define: Make TypeBind a platform-specific constant
1ed9a4740 Man pages: refactor common options: --restart
98169c20d Add emptyDir volume support to kube play
8637548a3 docs: move userns options to separate file
e015c9e3f podman: add uid and gid options to keep-id
cd6260604 infra: remove dead code
62d87aa9b Man pages: refactor common options: --subXidname
08a2851ba Allow to override default username via command line
4781bc7fe specgen/generate: Add support for FreeBSD
68f4dcf00 specgen/generate: Move specConfigNamespaces to namespace_linux.go and add stubs
39880670c specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs.
a240146a2 e2e tests: try to deflake 5000
08af95f63 updated apiv2 tests to reflect hash compat fix
c1480b39a Improved Windows compatibility for machine command
4e18c8100 Man pages: refactor common options: --http-proxy
0166feef2 specgen/generate: Move security.go to security_linux.go and add stubs
a7d791202 libpod: Make sure writeConmonPipeData is called on FreeBSD
d19438fa6 Man pages: refactor common options: --dns-*
dcb4d4357 [makefile] disable security labeling instead of using --privileged
78aec2130 Fix #15499 already connected network
b4f5a246a remove github.com/docker/libnetwork dependency
0ee9a3129 podman rmi: emit untag events
0b3184a5a pkg/domain: Add terminal support for FreeBSD
11de12097 Fix example sections to follow the same format
e4f816fdb [CI:DOCS] Cirrus: Update meta-task for EC2 image
e448122fe service: make move to sub-cgroup non fatal
167b026e7 [CI:BUILD] Packit: Re-introduce packit with fix-spec-file action
61d842a18 Fix template name inconsistency
39d809d3c Bump github.com/vbauerster/mpb/v7 from 7.4.2 to 7.5.2
e00272cd9 remote: fix implementation of build with --userns=auto for API
15aeccb83 libpod: UpdateContainerStatus: do not wait for container
61fc1870a cmd/podman: Enable --syslog on FreeBSD
cfdca8293 Mark some of the option fields as ignored in pkg/bindings
c7fda06f6 Compat API image remove events now have 'delete' status
9553f3baf Run codespell
b27bfbc71 [CI:DOCS] Automatically set podman version in pkginstaller
e634470fa APIv2 test cleanup, part 2 of 2
42fdc72aa Man pages: refactor common options: --systemd
a5a5c6b3f Temporarily Revert "Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide"
10b460512 Remove duplicate annotations in generated service yaml
61fe95bb4 Preserve all unknown PolicyRequirement fields on (podman image trust set)
ad0c785f8 Reorganize the types in policy.go a bit
a7e88c8da Add support for showing keyPaths in (podman image trust show)
752eceaec Support (image trust show) for sigstoreSigned entries
b36a1d1b7 BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
bba306788 Reorganize descriptionsOfPolicyRequirements a bit
2f6c145e8 Use the full descriptionsOfPolicyRequirements for the default scope
b15afce55 Rename haveMatchRegistry to registriesDConfigurationForScope
1a97c4d9f Rename tempTrustShowOutput to entry
51064acc4 Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
d4c521728 Recognize the new lookaside names for simple signing sigstore
4df1e2524 Add a unit test for trust.PolicyDescription
4b2bd1036 Make the output of (podman image trust show) deterministic
35fa8c16a Make most of pkg/trust package-private
7723a1ea6 Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
ff3f574fc Add support for sigstoreSigned in (podman image trust set)
9828bc445 Create new policy entries together with validating input
e2d1bdd1d Improve validation of data in ImageEngine.SetTrust
cbdbb025a Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
0ff0fde49 Man pages: refactor common options: log-related options
4f6807530 Add a variable for scope
4c5366ee0 Make trust.CreateTempFile private
5be00f227 Reorganize pkg/trust
1d2def8d0 Remove an unused trust.ShowOutput type
df1d8d0e9 Remove commented out code
010d495a3 APIv2 test cleanup
a933269ba System test cleanup
35b4f26c7 test: use private instead of slave for the mount
2fed2a282 Man pages: refactor common options: --pid
ea67d84f5 test: fix comment
19a617eaa Allow colons in windows file paths
1788b26c4 Fixes isRootfull check using qemu machine on Windows
88e4e4c82 vendor containers/psgo@v1.7.3
33ab7e846 Man pages: refactor common options: --ipc
ef6285a6f Man pages: refactor common options: --gidmap
c64a6ba07 Man pages: Refactor common options: --workdir
b0700aa48 libpod: Enable 'podman info' for FreeBSD
ff20c74e9 libpod: Move getCPUUtilization to info_linux.go
694cbaca3 libpod: Read kernel version and uptime using buildah/pkg/util
877e67399 libpod: Split out platform-specific code from hostInfo
e1c206d98 e2e: Add run --memory-swap test
c3dc92a50 Fix rpm packaging error
b4584ea85 run,create: add support for --env-merge for preprocessing vars
b47c54ab6 Install podman-docker.conf on user-tmpfiles.d too
0e6a421ca Use tmpfiles.d specifiers instead of fixed path
9dca68bdd Man pages: refactor common options: --ignore
d45a5d4aa Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide
8b1e88bf8 Fix documentation of use of tcp connections
0f7393556 Add support for containers.conf volume timeouts
7d7aead51 Man pages: refactor common options: --device-cgroup-rule
65efcdf70 Allow podman to run in an environment with keys containing spaces
2c03681b2 Man pages: refactor common options: --disable-content-trust
8f797ab66 libpod: Add definition of containerPlatformState for FreeBSD
5c9bac141 Man pages: refactor common options: --cpus
5f719b533 podman kube play/down --read from URL
5b06b2e77 Document restrictions on transport in FROM
70e103c04 inspect, image: alias .Config.HealthCheck to .HealthCheck for compatibility
f87f6d2fc Improved Windows compatibility
64339d47c Warning messages are printed and ignored if we use an unsupported option
716ac1c86 Refactor: About the RawInput process
74388fe75 Man pages: refactor common options: --pod-id-file
0f768cef3 [CI:DOCS] Update Troubleshooting.md
c6488fe4a Man pages: fix sloppiness
53369aaa1 pass environment variables to container clone
46f31361f Man pages: refactor common options: --cidfile
bd90818b0 Man pages: refactor common options: --creds
fbe2bd87b [CI:DOCS] elaborate on image lookups of foreign platforms
eee0ec97e Add quiet/q flag to podman secret ls
d5f83135b version bump to 4.3.0-dev
be1455ead Update "CONTRIBUTING" file with Debian/Ubuntu dependencies"
f8e73eadd [CI:DOCS] Update how to enable resource limit delegation
a0560eefa Man pages: refactor common options: cert-dir
8ffeb626c events: Add freebsd support for libpod/event
8aa29fd54 cmd/podman: Enable ABI and Tunnel mode for freebsd
1f76ad40a fix CI: remove hardcodeded alpine version
3bf52aa33 Add ProgressWriter to PullOptions
ec9508ea1 Pass io.Writer when pushing images/manifests from command line
e48681e60 Use request Context() in API handlers
b9fb60c68 Simplify ImagesPull for when Quiet flag is on
09ef6fc66 podman generate kube - add actual tests
976ce76eb podman save: update --compress validation
054d64710 libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD
cb4158889 libpod: Move openUnixSocket to oci_conmon_attach_linux.go
d43fac20f libpod: Move moveConmonToCgroupAndSignal and GetLimits to oci_conmon_linux.go
93bad9048 libpod: Move socket label handling from oci_conmon_common.go to oci_conmon_linux.go
6791cdbdf libpod: Move rootless handling from oci_conmon_common.go to oci_conmon_linux.go
68b2450d3 libpod: Move oci_conmon_exec_linux.go to oci_conmon_exec_common.go
8d229c6cd libpod: Move oci_conmon_attach_linux.go to oci_conmon_attach_common.go
bebf55c0f libpod: Move oci_conmon_linux.go to oci_conmon_common.go
20ad12274 runtime: use FindCommon from c/common
86f665a1d vendor: update containers/common
0dd2fcf71 Add podman manifest create -a. Alias for --amend:Docker compatibility
aa197a65f sort hc.Binds returned from compat api
546bb3548 Add podman stats --no-trunc option
f6e7b0b59 Add podman secret inspect -f alias for --format: Docker compatibility
d50ff4f51 Add podman secret create -d as alias for --driver for Docker compatibility
6411f57e7 api: return imageID instead of imageName, for "Image" when Podman API is queried
2a6daa1e3 Cirrus: add podman_machine_aarch64
1572420c3 libpod: Move uses of unix.O_PATH to container_internal_linux.go
5d7778411 libpod: Move rootless network setup details to container_internal_linux.go
1b88927c2 libpod: Add stubs for non-linux builds
7e7a79b07 podman manifest create: accept --amend and --insecure flags
5f09d9b60 Fix podman kube generate --help to show correct help message
06b3a4c1c system tests: fix broken runc test
f0e864075 Man pages: refactor common options: authfile
a78b67a47 Man pages: refactor common options: --annotation
a68e6ddbb utils: Add missing symbols for FreeBSD
a6af67ca9 Cirrus: Update podman-machine comment
22f3dd4c2 Man pages: refactor common options: arch
f14bf91c4 podman images and friends can take one image as argument
7e490e195 [CI:DOCS] Add .DS_Store to gitignore
ab72a371b Don't warn on '/' not being shared while in a container
2d30b4dee Add compatibility support for --debug -D flag from docker
bfae6bca9 build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
b9c094a5d Add Docker compatibility for --dns-option to --dns-opt
1393038c8 pkg/domain: Add stubs for non-linux builds
65641ba8d pkg/specgen: Add stubs for non-linux builds
056917c22 Reword --exit-policy option
d7f6d355b podman-kube@.service.in: Remove Restart=never option with typo
bd0a8c146 added docs for installing certficate authority
5ee3522f5 pkg: Build pkg/machine on FreeBSD
b806e9f36 pkg: Build pkg/util on FreeBSD
6df0ceb9a Add default value for $RM
bc56ee158 Update cmd/podman/containers/restart.go
f26a5246e Fix updated link to install instructions
0dbbb1cb3 Add restart --cidfile, --filter
d856fb43e Add "podman kube generate" command
e2a3f9592 docs: specify git protocol is not supported for github hosted repo
2935c38fd Update release notes for v4.2.0
a4efd401c remote manifest push: show copy progress
79e21b5b1 kube play: sd-notify integration
3fc126e15 libpod: allow the notify socket to be passed programatically
67a2e7351 add `pkg/systemd/notifyproxy`
245be9b39 Document behavior of --timestamp when only FROM is used
e3f029cb8 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
658960c97 build(deps) bump CDI dependency from 0.4.0 to 0.5.0
2bcee9f62 Man pages: refactor common options
25f6fc9c6 I believe that these tests will now run with crun.
a561b7dac check memory test based on range
280f5d8cb podman ssh work, using new c/common interface
d2d7898b8 Cirrus: Improve CI VM image updates for EC2
d7f134d68 Refactor common man page options, phase 2
3738221c5 test: update apply-podman-deltas for new tests
59cb410fe build: implement --cache-to,--cache-from and --cache-ttl
7bd886480 Bump to Buildah v1.27.0
1045647a4 Add interface for apple hypervisor
62e889e2b fix LogConfig type for libpod API
2e3a192bb cmd: refuse --userns if a mapping is specified
696ea7905 specgen: use sandbox id instead of name for annotation
771a35e4b pkginstaller: use correct GOARCH value in case of arm build
b1d1248a1 pkg/bindings: Support writing image push progress to specified io.Writer
f4c53a41c docs: update the podman logo
7ebaabb93 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8
d4c6e056d Fixes #15154 Change order when config and connections are written
83bd7a5c2 e2e: Add rootless mount cleanup test
cc8e4d5fe remove image podman no prune
842c6c7c6 podman generate spec
4cea8adb9 Cirrus: Run Cross builds in [CI:DOCS] mode
3102194f0 podman rmi: improve error message for build containers
5ea4ebb16 markdown-preprocess: force extra newline on comments
9964366f6 start filter flag changes
e67e60226 podman info: hide `--debug`
623b0c57f pkginstaller: use correct GOARCH while building podman binaries
bcfbee986 ISSUE TEMPLATE: remove `--debug` from `podman info`
81a1ea18c pkg/autoupdate: "image" policy: add deprecation comment
43cca5d97 pkg/autoupdate: decompose the update logic
0df51bb6b pkg/autoupdate: move status into `task`
af3ce7084 pkg/autoupdate: document fields of `updater`
3fdd3b1ae pkg/autoupdate: remove image map from updater
82d18a86f pkg/autoupdate: use policy consts were possible
1cc933c6b pkg/autoupdate: introduce status constants
42c4c17c0 pkg/autoupdate: move authfile into `tasks`
3f1928d76 pkg/autoupdate: move more logic under `task`
cfa089c36 pkg/autoupdate: s/updateImage/pullImage/
13a8ebd09 pkg/autoupdate: repull image if other containers failed
2c999f1ec pkg/autoupdate: update unit-by-unit
f8b6a81ae test/system/255-auto-update.bats: add an SELinux comment
87c0c760e pkg/autoupdate: introduce the notion of a `task`
033cc059f pkg/autoupdate: remove redundant branch
328c8ba7b pkg/autoupdate: move policy map into updater
d47609773 pkg/autoupdate: introduce `updater` for shared state
79b10a7c6 readthedocs(sphinx): run the markdown preprocessor
65fb90165 hack/markdown-preprocess: allow to be executed from any dir
031b7dec7 fix hack/markdown-preprocess to support older python versions
7df8d8050 add omitempty to Secret in k8s VolumeSource
328eb2b4c Cirrus: Remove disused env. var.
1e4a141d8 Cirrus: Support EC2 instances in hack/get_ci_vm.sh
44212b90b pkginstaller: makefile improvements to avoid redownloading
e6670cd29 pkginstaller: add makefile target to notarize the built pkg
c5029d2ee pkginstaller: sign qemu-system-* binary for the pkg
56039cffd Refactor common options in man pages
50981cb84 skip pod resource limits test on aarch64
1dbd61653 Cirrus: Fix e2e tests for "mount_rootless_test"
3a7a275c3 Cirrus: use dnf instead of rpm to install packages
1249cbb75 add "podman kube down" command
c5150a571 Add support, and default to rootless w/WSL prompt
bce16a58d Disable F36 service that is incompat with WSL kern
69d7407af switch from "kube/play" endpoint to "play/kube" endpoint.
2685c8dc4 Output messages display rawInput
4dfef202c podman generate systemd --new: allow -h hostname
5ab98f2c0 test: verify manifest inspect must contain OCI annotations
3a05ddfb7 fix e2e sign tests
6c69a2ea1 podman-volume-import: Reword "precendence"
c21306f06 man podman-volume-import: Clarify that merge happens
d462da676 Add support for creating sigstore signatures, and providing passphrases
7075e2e1d Hide podman manifest push --sign-by on remote
68cf11611 Use signByFlagName instead of copy&pasting the string
02f570e4b Remove libpod/common
63d77da5b Update c/common to an unreleased version
5a5624f81 Update the registry server we test against from 2.6 to 2.8
7599fde73 Use existing REGISTRY_IMAGE variables in more places
24a599fe1 Add flag "--compression-format" to "podman manifest push" both in local/remote mode.
53ec47968 Add rm --filter option
68463278e Use httpasswd from the surrouding OS instead of the registry image
49bcb7eaa Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
7a909a3e2 Use 8k buffer to help clients w/ broken parsing
a53a0fca9 Cirrus: Minor YAML cleanup
a24cc463a Remove bats installation script and make target
6764fe03d CI: new check for leftover skips/fixmes
17e3680fb Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools
379bf1080 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
de04d9d75 docs: resolve typo in create,run manpages
de13dea86 With --rm option remove container if podman run fails
da98c8877 Cirrus: enable Fedora 36 aarch64 tasks on EC2
389a4a6cc syncContainer: transition from `stopping` to `exited`
7fab449e3 [CI:DOCS] socket_activation.md: Add start/stop sections
8628c01f5 Fix: manifest push --rm removes a correct manifest list
e4992fb81 Fix: Restore a container which name is equal to a image name
75419c5d8 When removing objects specifying --force,podman should exit with 0
56578c413 Cirrus: Use the latest imgts container
c35ae7640 Add support for building macOS pkg installer
8e56a5605 machine: Fix check which is always true
1b099eec8 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify
52a4642ed Set TLSVerify=true by default for API endpoints
94e0a364a Semiperiodoc cleanup of obsolete FIXMEs
27679d80b pod create --share none should not create infra
4d18a98ec benchmarks: fix create test
4724a0000 prune filter handling
6a9338ad6 podman generate systemd: handle --sdnotify correctly
ad8940cec fix container create/run throttle devices
290116bf8 integration test: fix network backend option with remote
5a80770e8 API: libpod/create use correct default umask
35035d281 container wait: improve error message
cbdda4e56 docs: remove CNI word where it is not applicable
0a160fed7 Bump VMs, to Ubuntu 2204 with cgroups v1
c00ea686f resource limits for pods
bc6a48eeb [CI:DOCS] Cirrus: Add prominent gitlab warning
88b57dd9f fix broken machine test
19f4a463e pkg/machine/e2e: do not import from cmd/podman
604920dd1 fix some pkg/machine/e2e test to read stderr
ee35ce86d enable linter for pkg/machine/e2e
dd2b79406 libpod: create /etc/passwd if missing
b79ac0aca remote push: show copy progress
afbfbe18a compose test: remove cni config copy
56093a3b4 compat api: always turn on network isolation for networks
80ad0cfd0 compat api: allow default bridge name for networks
3a016c6e4 e2e: show command and output when a timeout happens
138d185cc Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0
ab4c58bd3 Compat API: unify pull/push and add missing progress info
c1f04a024 podman-remote pull: fix duplicate progress outputs
af118f7c6 libpod: do not lock all containers on pod rm
139d65be8 Fix machine test
438fef1ca kube secret handling for podman play kube
8d190fc48 vendor: remove unused deps
013300a7c Makefile: remove building pages for man5
19495b9fc makefile: remove processing of pkg/docs
f64985135 rpkg: remove usage of pkg/hooks
ffe5da20a pkg,libpod: remove pkg/hooks and use hooks from c/common
da33f1005 Update init ctr default for play kube
4e72aa586 fix goroutine leaks in events and logs backend
9b152ef20 Add pause/unpause --latest, --cidfile, --filter
a65265942 Fix potential leak on mid-stream read error
10d6586cb Makefile: use order-only prereq for podman-remote
0a2ddc9bd [CI:DOCS] Fix typo in manifest manpage
26ae055a2 Remove return error from "containers.pause"
eef39b69e "pod pause/unpause/stop" append "report.Errs" to "reports"
aa1711e3d Cirrus: comment out f35 for podman4
1f0116817 system tests: new system-service bats file
fdba0d790 Vendor in latests containers/storage and opencontainers/runtime-tools
82b1d85eb Print rootfs download as a specific version on Win
576321729 document isolate option for network create
1aafb01a9 buildah vendor treadmill
f67ab1eb2 Vendor in containers/(storage,image, common, buildah)
5f848d89e Run codespell
18c0c19aa Add --host and -H as equivalent options to --url
c9722c0b1 [CI:DOCS] socket_activation.md: fix typo and layout
5f04f9961 Machine init: create .ssh dir if not exist
56cfdffe4 [CI:DOCS] Tutorials.rst: add socket activation
b513dc4c1 Clean up cached machine images
d95e79ebe GHA: Fix dumb error check
d385914cd Cirrus: Trigger podman-machine task by label
a2f6cc74e Podman stop --filter flag
90607a6d0 Podman pull --all-tags shorthand option
3b5034e91 fix tests for "podman kube play"
8e2add770 [CI:DOCS] Update docs/tutorials/socket_activation.md
2270bc5f9 [CI:DOCS] Add socket activation tutorial
ad7c54e13 man page checker: enforce stricter options format
66cb856f9 Switch to `github.com/blang/semver/v4`
0f53abd09 Fixes #14698 Use prepared image for WSL2 machine init
cc2cfe060 Add podman events -f to be alias for --filter
e08a77ce6 Add "podman kube play" cmd
1392922d4 [CI:DOCS] man pages: replace -c with --cpu-shares
e3419c032 abi: create new cgroup when running in a container
7b4afbf62 podman: always call into SetupRootless
16b8d77f9 utils: call MaybeMoveToSubCgroup once
4b547a72a podman: move MaybeMoveToSubCgroup to utils/
445089421 Fix last machine test
bb8ff86bf Use SafeChown rather then chown for volumes on NFS
c9a82d72a Docker uses "-c" to mean "--cpu-shares" in create and run
e83ff8e5e [CI:DOCS] podman-create.md: replace -c with --cpu-shares
da8c6a8ea CI: sanity check for desired runtime
b8a7e275d [CI:DOCS] rootless_tutorial: Remove incorrect advice regarding volumes and mount points
f6ed7a8c9 [CI:DOCS] man pages: remove non-existent option builtin-volume
27e12aa07 test,manifest-run: declare TARGETPLATFORM before using it
ffbc2adf7 fix wrong log message on Trace level
377057b40 [CI:DOCS] Improve language. Fix spelling and typos.
3ed323e1b logformatter: link by *task ID*, not build ID
3ce0709f3 podman machine: do not commit proxies into config file
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Guenther Meyer
|
cb5dfda6f6 |
nerdctl: renamed upstream branch master to main
Signed-off-by: Guenther Meyer <g.meyer@signum-media.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
b2ab6a11a4 |
conmon: avoid host contamination by GOCACHE
By default GOCACHE is set to $HOME/.cache. Fix: make[1]: Entering directory '/mnt/tmp-glibc/work/core2-64-wrs-linux/conmon/2.1.3+gitAUTOINC+19110c9746-r0/git/tools' | failed to initialize build cache at /home/build/.cache/go-build: mkdir /home/build: permission denied Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
3626f2c9cc |
docker-distribution: do not build for riscv64
Currently docker-distribution has a do_compile error for riscv64. The problem could be reproduced by: MACHINE=qemuriscv64 bitbake docker-distribution So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64. When someone interested in using this recipe for riscv64 fixes the compile issue, this setting could be removed. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
sakib.sajal@windriver.com
|
d2cfa7fac8 |
ceph: support python 3.11
python3 has been upgraded to 3.11 in oe-core causing ceph do_configure to fail with the error: | Could NOT find Python3 (missing: Python3_LIBRARY Python3_INCLUDE_DIR | Development) (found suitable version "3.6.9", minimum required is "3") Support python 3.11 to fix the issue Upstream-Status: sent to upstream (https://github.com/ceph/ceph/pull/48947) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
9f41aca8e6 |
python3-colorama: sync with meta-openembedded
This version of python3-colorama has shown to work with the meta-virt recipes and software stacks. Sync our version with meta-openembedded. We continue to keep this around as a "canary" package. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Mark Hatle
|
3b63ed0e4f |
xen: Make xilinx extension generic
Move the xilinx specific bbappend to a wildcard append. Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Kai Kang
|
0d2f235a4a |
libvirt: remove package config qemu for powerpc and riscv32
qemu is not compatible with ppc32 and riscv32, so remove libvirt's package config 'qemu' for them. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d36563caf1 |
k3s: update to v1.24.7
Bumping k3s to version v1.24.7-rc4+k3s1, which comprises the following commits:
e3c9d859e8 Return ProviderID in URI format
e44d22ca61 Add ServiceAccount for svclb pods
2ca51a3d59 Update to v1.24.7-k3s1 (#6270)
0751b6052e Fix dualStack test
519f13e34d [Release-1.24] Replace deprecated ioutil package (#6235)
c1c7b95dc0 Fix flakey etcd test
6ed1e1423f Fix helm job failure on multi-server tests
87bfc8883b Bump traefik to 2.9.1 / chart 12.0.0
06eb948c23 Fix the typo in the test
3a829ae860 Handle custom kubelet port in agent tunnel
3f5c88e4a3 Fix occasional "TLS handshake error" in apiserver network proxy.
cb0f4bd49c Use structured logging instead of logrus for event recorders
44ae7aa4db Dump info on coredns when deployment rollout fails
a75bbf5f4e Add ADR for ServiceLB move to CCM
69dd30433b Disable cloud-node and cloud-node-lifecycle if CCM is disabled
76f13d3558 Move servicelb into cloudprovider LoadBalancer interface
23c302dccc Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control
307e45e739 Implement InstancesV2 instead of Instances
7198eb2f74 Bump metrics-server to v0.6.1
0be4ef9213 Add flannel-external-ip when there is a k3s node-external-ip
a8e0c66d1a updating to v1.24.6-k3s1 (#6164)
fb823c8a5f Update to v1.24.5 (#6143)
ae7d6285b6 Fix gofmt warnings
1b806f5fee Bump golang to correct version
ee859f7f5a Add validation check to confirm correct golang version for Kubernetes
cf684c74a3 [Release-1.24] Bulk Backport of Testing Changes
b8f05e4904 Bump containerd to v1.6.8-k3s1
35e488c9c7 Bump runc to v1.1.4
e1884e4d60 Update Flannel to v0.19.2 to fix older iptables issue
79bb7bccd9 Fix e2e tests (#6018)
4c9ad2546c Fix dualStack test and change ipv6 network (#6023)
654d2b9567 CI: update Fedora 34 -> 35 (#5996)
2b35f89664 Convert install tests to run PR build of k3s (#6003)
f81138402e E2E: Add support for CentOS 7 and Rocky 8 (#6015)
ab2638a247 mark v1.24.4+k3s1 as stable (#6036)
7d6982d1fa Export agent.NetworkName for Windows
3e394f8ec5 The Windows kubelet does not accept cadvisor flags
c3f830e9b9 Update to v1.24.4 (#6014)
035c03cfaa Remove codespell from Drone, add to GH Actions (#6004)
b14cabc107 Add nightly install github action (#5998)
75f8cfb6ea E2E: Local cluster testing (#5977)
116c977fbf Convert vagrant tests to yaml based config (#5992)
30fc909581 Update run scripts (#5979)
a30971efaa Updated flannel to v0.19.1
6b7b9c5aa9 Add scripts to run e2e test using ansible (#5134)
18cb7ef650 fix checkError in terraform/testutils (#5893)
77fa7fb490 Removing checkbox indicating backports since the policy is to backport everything (#5947)
b7f7379157 Update MAINTAINERS with new folks and departures (#5948)
db3c569b7f Add docker e2e test
aadab55145 Add ADR for inclusion of cri-dockerd
4aca21a1f1 Add cri-dockerd support as backend for --docker flag
b1fa63dfb7 Revert "Remove --docker/dockershim support"
cf66559940 Print stack on panic
abdf0c7319 Fix comments and add check in case of IPv6 only node
d90ba30353 Added NodeIP autodect in case of dualstack connection
82e5da35a9 Upgrade macos-10.15 to macos-12 (#5953)
43508341c1 Bump minio to v7.0.33
1c17f05b8e Fix secrets reencryption for 8K+ secrets (#5936)
118a68c913 Updates to CLI flag grouping + deprecated flag warnings. (#5937)
13af0b1d88 Save agent token to /var/lib/rancher/k3s/server/agent-token
4c0bc8c046 Update etcd error to match correct url (#5909)
db2ba7b61d Don't enable unprivileged ports and icmp on old kernels
90016c208d ADR: Depreciating and Removing Old Flags (#5890)
24da6adfa9 Move v1.24.3+k3s1 to stable (#5889)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
75de565e3b |
docker-compose2: introduce go version of docker-compose
Introducing a recipe to build (and create a vendor directory) for the docker-compose2 command, which is a go implementation of he formely python3 docker-compose. This co-exists (for now) with the python version. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Christopher Clark
|
a2c5c5280f |
xen, xen-tools: remove the version 4.15 recipes
The existing 4.16 recipes are the current preferred Xen version, so per the Xen version update policy, the 4.15 recipes can now be removed. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Christopher Clark
|
0daf29cfdf |
xen, xen-tools: Bump SRCREV of the 4.16 recipes to 4.16.2
Update to use the latest stable 4.16 release. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Paul Barker
|
30c3df4c22 |
openvswitch: Fix INSTALL_MOD_PATH
If the usrmerge DISTRO_FEATURE is enabled, modules should be installed
under /usr/lib instead of /lib. We can handle this by using
${root_prefix} in INSTALL_MOD_PATH.
Signed-off-by: Paul Barker <paul.barker@sancloud.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Jose Quaresma
|
8177e4a6b7 |
tini: fix function declaration without a prototype
This also fix building with clang 1.15 Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Dan McGregor
|
de747b18ac |
cloud-init: add Apache-2.0 as a LICENSE option
cloud-init has been dual licensed for a while. According to the LICENSE file this package is dual-licensed Apache 2 and GPL 3. This has been the case since commit b2a9f3361 in 2016. This has applied to every release since 17.1. Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Dan McGregor
|
fb780101a1 |
cloud-init: package nonarch_libdir
cloud-init installs its data in nonarch_libdir, not libdir, so package that. On non-multilib builds this wouldn't be noticed. Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Kai Kang
|
f8c8b90244 |
criu: 3.17 -> 3.17.1
Update criu from 3.17 to 3.17.1: * update file path and remove __pycache__ directory in do_install * rebase 0002-criu-Change-libraries-install-directory.patch * backport patches to fix build errors with glibc 2.36. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
sakib.sajal@windriver.com
|
5bc9ecc2a7 |
ceph: fix compile issue
rocksdb has been updated to 7.5.3 in meta-oe causing ceph compilation to fail. Backport necessary patches to allow ceph to work with newer versions rocksdb. Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
3fe3e0971d |
layer.conf: set langdale compatibility
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
2542c4b3b0 |
buildah: update to 1.27.2
Bumping buildah to version v1.25.0-420-g13622b14, which comprises the following commits:
9c640b00 tag v1.27.2
264c825f Fix broken command completion
be919817 build: support --skip-unused-stages for multi-stage builds
40cd1053 release: bump to v1.27.1
4a8bf740 run: add container gid to additional groups
db8d5921 release: tag v1.27.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
adba1eafe5 |
python3-udica: skip recipe if meta-selinux is not available
meta-selinux has always been a soft dependency of meta-virt, as such, it isn't in the layer dependencies. To avoid yocto compat errors, and keep the dependency soft, we add a skiprecip to udica if meta-selinux is not present. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
cec0d5ce99 |
kvmtool: update to latest
Bumping kvmtool to latest, which comprises the following commits:
336751f Makefile: Introduce LIBFDT_DIR to specify libfdt location
6c88c26 virtio/rng: Zero-initialize the device
fe21827 virtio/pci: Deassert IRQ line on ISR read
ae22ac7 Makefile: Fix ARCH override
3863f34 Makefile: Add missing build dependencies
6a1f699 arm64: pvtime: Use correct region size
c86ef0b virtio/pci: Remove VIRTIO_PCI_F_SIGNAL_MSI
3d5cefc virtio/pci: Initialize all vectors to VIRTIO_MSI_NO_VECTOR
5fe5eb0 virtio: Add support for modern virtio-mmio
22a0823 virtio: Move MMIO transport to mmio-legacy
b0d56e3 virtio: Add support for modern virtio-pci
930876d virtio: Move PCI transport to pci-legacy
3c8f82b virtio: Prepare for more feature bits
de166e5 virtio/net: Set vhost backend after queue address
73fd136 virtio/pci: Use the correct eventfd for vhost notification
21c9bc7 virtio/pci: Make doorbell offset dynamic
d060729 virtio: Extract init_vq() for PCI and MMIO
c6590f7 virtio/pci: Delete MSI routes
8b91a18 arm64: Allow the user to specify the RAM base address
3f7e48f Introduce kvm__arch_default_ram_address()
a37dad0 arm/arm64: Consolidate RAM initialization in kvm__init_ram()
5e9c654 kvm__arch_init: Remove hugetlbfs_path and ram_size as parameters
a9c24ec builtin_run: Allow standard size specifiers for memory
d6d4220 arm/arm64: Kill the ARM_HIMAP_MAX_MEMORY() macro
1af57dc arm/arm64: Kill the ARM_MAX_MEMORY() macro
cce5a4f arm/arm64: Fail if RAM size is too large for 32-bit guests
abe3f28 builtin-run: Add arch hook to validate VM configuration
28b9625 builtin-run: Rework RAM size validation
9d65519 builtin-run: Always use RAM size in bytes
024c331 Use MB for megabytes consistently
d9fdaad arm: gic: fdt: fix PPI CPU mask calculation
f44af23 virtio/pci: Factor MSI route creation
4842789 virtio/blk: Implement VIRTIO_F_ANY_LAYOUT feature
e74b56e virtio/console: Add VIRTIO_F_ANY_LAYOUT feature
6daffe5 virtio/net: Implement VIRTIO_F_ANY_LAYOUT feature
b231683 virtio/net: Prepare for modern virtio
8b27bcf virtio/net: Offload vnet header endianness conversion to tap
c492534 Add memcpy_fromiovec_safe
902a8ec virtio: Remove set_guest_features() device op
17ad9fd virtio/console: Remove unused callback
867b15c virtio: Fix device-specific config endianness
15e6c4e virtio: Add config access helpers
609ee90 virtio: Support modern virtqueue addresses
fd41cde virtio: Factor virtqueue initialization
a8e397b virtio/vsock: Remove redundant state tracking
3a1e36e virtio: Remove redundant test
7efc262 virtio: Add NEEDS_RESET to the status mask
b4531b2 riscv: Add missing asm/kernel.h header
6f6f384 mips: Do not emulate a serial device
8ec1e8b arm64: Honor --vcpu-affinity for aarch32 guests
1a992bb include: add new virtio uapi header files
e539078 include: update virtio UAPI headers
393e218 util: include virtio UAPI headers in sync
7e22099 update virtio_mmio.h
a68a52c kvmtool: Have stack be not executable on x86
31e0eac virtio: Check for overflows in QUEUE_NOTIFY and QUEUE_SEL
e473028 virtio: Sanitize config accesses
3510a7f virtio/9p: Fix virtio_9p_config allocation size
06e1e6f virtio: Use u32 instead of int in pci_data_in/out
52d4ee7 mmio: Sanitize addr and len
143ffa2 kvmtool: Add WARN_ONCE macro
bc77bf4 stat: Add descriptions for new virtio_balloon stat types
3a13530 virtio/balloon: Fix a crash when collecting stats
324cc09 aarch64: Give up with MTE for AArch32 guest
4639b72 arm64: Add --vcpu-affinity command line argument
1393bda arm64: Add support for KVM_ARM_VCPU_PMU_V3_SET_PMU
083a976 update_headers.sh: Sync ABI headers with Linux v5.18-rc2
0febaae Add cpumask functions
83713e7 arm64: Rework set_pmu_attr()
f57ce44 arm: Make the PMUv3 emulation code arm64 specific
b23aed2 arm: Get rid of the ARM_VCPU_FEATURE_FLAGS() macro
412ee13 arm: Move arch specific VCPU features to the arch specific function
5898515 arm/arm64: pmu.h: Add missing header guards
d9b64eb linux/bitops.h: Include wordsize.h to provide the __WORDSIZE define
443cd88 linux/err.h: Add missing stdbool.h include
5657dd3 aarch64: Add support for MTE
af1b793 update_headers.sh: Sync ABI headers with Linux v5.17
ffa8654 Make --no-pvtime command argument arm specific
faae833 Revert "kvm tools: Filter out CPU vendor string"
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Guenther Meyer
|
bcc7d479bb |
kubernetes: fixed typos
After upgrading from honister to kirkstone the build always failed during the package_write_ipk step, because the package name has been overwritten because of the typo in FILES. While investigating, I discovered another typo in class-devupstream. Signed-off-by: Guenther Meyer <g.meyer@signum-media.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Jose Quaresma
|
2d0f7255a7 |
docker/proxy: don't use -linkshared unconditionally
The linkshared is not supported in some machines like riscv64 and when supported we can use the GO_LINKSHARED instaed. So export GO_LINKSHARED on the recipe to be available for Makefile. This is currently only used in libnetwork for the proxy build, but could be used in additional locations in the future. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Andrei Gherzan
|
758da82203 |
podman: Add ptest support for system tests
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Andrei Gherzan
|
481b716f7c |
catatonit: Integrate version 0.1.7
This is useful for podman system tests. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
3373301f78 |
devtools: introduce udica
udica provides an (easier) way to generate selnux policies for containers. since we already have selinux has a dependency of meta-virt, we might as well make policy creation easier. See https://github.com/containers/udica, for details on how to use the tool. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d9af46db9a |
kubernetes: fix more TMPDIR references
Changing the clone location of kubernetes allows us to remove the vendor symlink "fix". This reduces the number of TMPDIR references in the binaries. kubernetes takes care of most of the rest via using asmflags and gcflags interally which specify -trimpath, but unfortunately these flags are being recorded into the binaries and leave us with 4 references to the TMDIR: -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes We leave these for now, as attempts to remove them have broken the build, and kubernetes uses 'go install' versus 'go build' to construct the binaries .. making our normal solutions non functional. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
a61f6ea090 |
containerd: fix final TMDIR references
restructure the containerd source layout to avoid symlinking vendor dependencies. This avoid go recording paths in the final binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |