Commit Graph

1949 Commits

Author SHA1 Message Date
Kamil Dziezyk
b0c10d29cb xen: Clear TUNE_CCARGS for Xen build for aarch64 machines
Xen build may fail for arm machines that have enabled extra flags,
that can be enabled only for specific architecture version, e.g. armv8-2a.

Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Acked-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Kamil Dziezyk <kamil.dziezyk@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-18 22:43:28 -05:00
Kamil Dziezyk
44dad5105d xen-tools: Load xen related kernel modules during system boot
This patch changes the location of xen.conf file, that contains list of kernel
modules to be loaded during system boot, to "${nonarch_libdir}". This is done
by removing '--with-systemd-modules-load=' flag from EXTRA_OECONF variable.

Previous path based on "${systemd_unitdir}" was not considered by default by
systemd-modules-load.service.

Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Acked-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Kamil Dziezyk <kamil.dziezyk@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-18 22:43:28 -05:00
Bruce Ashfield
cb0884d16e python3-dtc: update to version v1.6.1-39-g4048aed
As part of this update:

  - we drop our backported patches
  - simplify the recipe to use setuptools-scm
  - remove the need to generate version_gen.h
  - adapt to setup.py at ${S}
  - and include following commits:

    4048aed setup.py: fix out of tree build
    ff5afb9 Handle integer overflow in check_property_phandle_args()
    ca72944 README: Explain how to add a new API function
    c0c2e11 Fix a UB when fdt_get_string return null
    cd5f69c tests: setprop_inplace: use xstrdup instead of unchecked strdup
    a04f690 pylibfdt: add Property.as_*int*_array()
    8310271 pylibfdt: add Property.as_stringlist()
    d152126 Fix Python crash on getprop deallocation
    17739b7 Support 'r' format for printing raw bytes with fdtget
    45f3d1a libfdt: overlay: make overlay_get_target() public
    c19a4ba libfdt: fix an incorrect integer promotion
    1cc41b1 pylibfdt: Add packaging metadata
    db72398 README: Update pylibfdt install instructions
    383e148 pylibfdt: fix with Python 3.10
    23b56cb pylibfdt: Move setup.py to the top level
    69a7607 pylibfdt: Split setup.py author name and email
    0b106a7 pylibfdt: Use setuptools_scm for the version
    c691776 pylibfdt: Use setuptools instead of distutils
    5216f3f libfdt: Add static lib to meson build
    4eda259 CI: Cirrus: bump used FreeBSD from 12.1 to 13.0
    0a3a9d3 checks: Add an interrupt-map check
    8fd2474 checks: Ensure '#interrupt-cells' only exists in interrupt providers
    d8d1a9a checks: Drop interrupt provider '#address-cells' check
    52a16fd checks: Make interrupt_provider check dependent on interrupts_extended_is_cell
    37fd700 treesource: Maintain phandle label/path on output
    e33ce1d flattree: Use '\n', not ';' to separate asm pseudo-ops
    d24cc18 asm: Use assembler macros instead of cpp macros
    ff3a30c asm: Use .asciz and .ascii instead of .string
    5eb5927 fdtdump: fix -Werror=int-to-pointer-cast
    0869f82 libfdt: Add ALIGNMENT error string
    69595a1 checks: Fix bus-range check
    72d09e2 Makefile: add -Wsign-compare to warning options
    b587787 checks: Fix signedness comparisons warnings
    69bed6c dtc: Wrap phandle validity check
    9102211 fdtget: Fix signedness comparisons warnings
    d966f08 tests: Fix signedness comparisons warnings
    ecfb438 dtc: Fix signedness comparisons warnings: pointer diff
    5bec74a dtc: Fix signedness comparisons warnings: reservednum
    24e7f51 fdtdump: Fix signedness comparisons warnings
    b6910be Bump version to v1.6.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-18 08:36:55 -05:00
Ross Burton
34c2f32ec1 python3-dtc: fix packaging by using setuptools
Inheriting setuptools3-base doesn't actually define any tasks, so commit
1ef6050 to drop distutils3 had the side-effect of not building any code.

Backport a commit from upstream to switch to setuptools, inherit
setuptool3, and change DISTUTILS_SETUP_PATH to SETUPTOOLS_SETUP_PATH.

Signed-off-by: Ross Burton <ross.burton@arm.com>
2022-01-17 13:05:06 -05:00
Changqing Li
4667e968df openvswitch: systemd: add option -p for mkir command
To avoid "cannot create directory '/var/log/openvswitch': File exists"
when service is restart

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-16 22:59:09 -05:00
Bruce Ashfield
9437f7060b go-fsnotify: update to v1.5.1
Bumping fsnotify to version v1.5.1-7-gaf855d7

We update the license checksum, due to new copyright dates, and include
the following commits:

    af855d7 Final Notice: Maintainers Wanted
    62a598a maintainers wanted
    d696f5c revise contributing
    6e1d4e4 update readme
    83f9fe6 Test on Go 1.18 and two most recent versions (#411)
    0aba082 Update issue templates (#410)
    3eb7fa4 Removed dead link
    466b39d prepare 1.5.1, retract 1.5.0
    b98ede5 Revert "Add AddRaw to not follow symlinks + Fix link folloing on Windows (#289)"
    dfdb645 revise pull request template
    08848a0 v1.5.0 preparation (#380)
    e2e9517 Add AddRaw to not follow symlinks + Fix link folloing on Windows (#289)
    82ee6f3 Update test matrix for go 1.17 stable release (#385)
    16f0d42 add //go:build lines + add 1.17.0-rc2 to test matrix (#377)
    cc8365b Update x/sys to latest (#379)
    2fb15b1 Drop support/testing for Go 1.11 and earlier (#381)
    5ce1ba4 Remove Travis CI and references
    ed6d2f5 Add lint+vet+old versions to GitHub Action
    42e9219 introduce GitHub Actions
    7f4cf4d Fix unsafe pointer conversion (#325)
    45d7d09 Move example usage to the readme
    4bf2d1f Updating the FAQ section for supportability with NFS & FUSE filesystems.
    dc27d96 drop 1.8.x from Travis CI
    fce5a44 2019
    ecf2c4d revise editor config
    0a05407 Add Go modules
    ab058b4 readme: plan to support fanotify
    924410f Open files with CLOEXEC
    1485a34 Also create epoll and pipe fds with close-on-exec (#155) (#219)
    11844c0 readme: remove AppVeyor badge
    85de84f Add windows to travis matrix
    2216558 Fix lint issue with error doc string
    9152fb1 only run golint on latest version of go
    ccc981b Check if channels are closed in the example (#244)
    1f285c6 darwin tests: Exchangedata is deprecated on 10.13
    7b866c9 travis: less verbose tests
    8ba2b19 [#234] t.Fatalf -> t.Errorf in go routines (#266)
    70cc4a1 Fix TestInotifyOverflow (#265)
    1d13583 TravisCI: updating test versions
    c282820 v1.4.7
    a6f391c travis: test on Go 1.9.x
    ea33dcb Fix missing verb on format string (#228)
    3d33f50 Fix possible deadlock on closing the watcher on kqueue (#230)
    4da3e2c Fix deadlock in Remove (linux/inotify)
    ff7bc41 Watch.Add improvements (avoid race, fix consistency, reduce garbage) (#189)
    7d7316e travis: update for Go 1.8
    a904159 Moved FAQ into the README
    fd9ec7d Properly handle inotify's IN_Q_OVERFLOW event (#149)
    bd2828f replace references to OS X with macOS
    629574c v1.4.2
    abf5e85 pull request and issue template (#179)
    11054bc Create inotify fd with close-on-exec (#178)
    944cff2 v1.4.1
    5c1390e deflake inotify stress test (#177)
    b4f2a68 rm go1.5.4 from travis config since the linter doesn't build in 1.5 (#175)
    c07fd86 readme: remove gocover.io badge
    b3baf18 update link to contributing to external git repos
    26b17cd v1.4.0
    c3181d8 add @oozie to AUTHORS
    55579be Add a String() func to Event.Op (#165)
    f12c623 Bump Travis to Go 1.6.3 (#156)
    a8a77c9 v1.3.1
    51d3cc5 Use filepath.Join() (#153)
    30411db global: switch to x/sys/unix
    836bfd9 Update Travis config to Go 1.5.4 and 1.6.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-14 13:31:32 -05:00
Bruce Ashfield
82f9025ab2 go-fsnotify: switch to main branch
The upstream project has changed from master -> main, so we update
our branch to match .. otherwise, we fail the fetch!

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-14 13:31:32 -05:00
Bruce Ashfield
1ef60507d1 python3-dtc: drop distutils3 usage
distutils is depreciated, so we switch to setuptools3-base to avoid
the OE core warning.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-13 12:20:25 -05:00
Bruce Ashfield
88d6fa982a Revert "Revert "kernel: drop 5.14 .inc""
5.14 has been removed from core, we can now go ahead with this
removal.

This reverts commit 22628b76c9.
2022-01-13 08:46:34 -05:00
Bruce Ashfield
22628b76c9 Revert "kernel: drop 5.14 .inc"
The removal of the .inc was pushed prematurely. We'll remove it
again, once 5.14 is removed from core and 5.15 is the default.

This reverts commit 79e0e4598c.
2022-01-12 08:42:43 -05:00
Bruce Ashfield
091d654875 busybox-initrd: update to 1.35.0
OE core commit a7d5150b621c2ab4e4 has bumped busybox to 1.35.0, so
we update our initrd recipe accordingly.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-11 08:20:26 -05:00
Bruce Ashfield
79e0e4598c kernel: drop 5.14 .inc
5.14 has been removed from core, and is EOL upstream. We drop our 5.15
.inc file to match that status.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-10 13:34:44 -05:00
Bruce Ashfield
db7647c53e kubernetes: update to v1.23.2
Bumping kubernetes to version v1.23.2-rc.0-26-gfa546d8cc76, which comprises the following commits:

    cce0b96068c fix nil pointer in create secret commands
    27a66989d0f Fix order of commands in the snapshot tests for persistent volumes
    cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls
    271a9f0e58d Improving performance of EndpointSlice controller metrics cache
    98cc4f9e96a fix the error when cleaning up jobs for cronjob
    6ca361089db Update CHANGELOG to add missing release notes.
    40d718778d4 apf: ensure exempt request notes the classification
    77b0a633575 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
    aef116487af Release commit for Kubernetes v1.23.2-rc.0
    86ec240af8c Release commit for Kubernetes v1.23.1
    1292aee8707 add gce loadbalancer no-op finalizer and existingFwdRule tests
    40c6f562eb3 disable gce service handling if has rbs forwarding rule
    41b00595137 add ELBRbsFinalizer
    036fd24b91c add gce elb rbs opt-in annotation
    78e8cb0743c cherry pick of knp 0.0.27
    0072226ca87 Re-introduce removed kubectl --dry-run values.
    c237c5c78fc Point flowcontrol users at v1beta2
    c836ebae52f [go1.17] Update to go1.17.5
    d065f7ffe77 dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
    ea103cb23a9 mount-utils: Detect potential stale file handle
    1346242fd57 Skip creating HNS loadbalancer with empty endpoints
    38a678fccfb Add regression test for CPUManager distribute NUMA algorithm
    6d437c7e827 Add unit test for CPUManager distribute NUMA algorithm verifying fixes
    53fd9db1629 Fix accounting bug in CPUManager distribute NUMA policy
    9cb973ac5ee Fix error handling in CPUManager distribute NUMA tests
    462f3c90b05 Add a sum() helper to the CPUManager cpuassignment logic
    03666ecf4fc Allow the map.Values() function in the CPUManager to take a set of keys
    22b6be8c2cb Fix CPUManager algo to calculate min NUMA nodes needed for distribution
    471dd78f5ea Fix unit tests following bug fix in CPUManager for map functions (2/2)
    1db0c5136e7 Fix unit tests following bug fix in CPUManager for map functions (1/2)
    18392c0c4ca Fix bug in CPUManager map.Keys() and map.Values() implementations
    4c7bcbddd62 Ensure we balance across *all* NUMA nodes in NUMA distribution algo
    d1248480b20 Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
    3a9b3072612 Round the CPUManager mean and stddev calculations to the nearest 1000th
    5fc309181ab updated deprecation messages from 1.23 to 1.24
    f94a022c1bb kubelet: set failed phase during graceful shutdown
    b63d5a805b3 kubeadm: avoid requiring a CA key during kubeconfig expiration checks
    a18dbc12a46 kubeadm: print the CA of kubeconfig files in "check expiration"
    880e0ac50f7 kubeadm: validate local etcd certficates during expiration checks
    f9c8af54ccb publishing-bot/doc: add component-helpers to the readme
    3245fe216f2 publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
    57f88ec404e Changelog: mention kube-scheduler bits deprication
    f42cbbbff43 rbd: initialize ceph monitors slice with an empty value.
    0a1d2914614 Direct v2betaX users to migrate to HPA v2
    064a272ee03 DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
    dd1b0a12471 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
    8aef834386e [go1.17] Update to go1.17.4

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-06 21:20:15 -05:00
Bruce Ashfield
3638a8848a cloud-init: update to 21.4
Bumping cloud-init to version 21.4-47-ga97fd062

 - patch refresh
 - add bash to RDPENDS

Commit summary:

    a97fd062 Add .git-blame-ignore-revs (#1161)
    bae9b11d Adopt Black and isort (SC-700) (#1157)
    2bcf4fa9 Include dpkg frontend lock in APT_LOCK_FILES (#1153)
    3da3bdae tests/cmd/query: fix test run as root and add coverage for defaults (#1156)
    9a6e65a2 Schema processing changes (SC-676) (#1144)
    35711700 Add dependency workaround for impish in bddeb (#1148)
    3303b704 netbsd: install new dep packages (#1151)
    f4692c5d find_devs_with_openbsd: ensure we return the last entry (#1149)
    e9634266 sources/azure: remove unnecessary hostname bounce (#1143)
    24739592 find_devs/openbsd: accept ISO on disk (#1132)
    b591e9db Improve error log message when mount failed (#1140)
    8df8f43a add KsenijaS as a contributor (#1145)
    6760bf14 travis - don't run integration tests if no deb (#1139)
    65c2cfd7 factor out function for getting top level directory of cloudinit (#1136)
    b21afb0a testing: Add deterministic test id (#1138)
    2969ceaa mock sleep() in azure test (#1137)
    0ed00ad9 Add miraclelinux support (#1128)
    cd40789a docs: Make MACs lowercase in network config (#1135)
    bedac77e Add Strict Metaschema Validation (#1101)
    f428ed16 update dead link (#1133)
    0e25076b cloudinit/net: handle two different routes for the same ip (#1124)
    6e39613d docs: pin mistune dependency (#1134)
    039c40f9 Reorganize unit test locations under tests/unittests (#1126)
    ffa6fc88 Fix exception when no activator found (#1129)
    0fe96a44 jinja: provide and document jinja-safe key aliases in instance-data (SC-622) (#1123)
    ff10fc09 testing: Remove date from final_message test (SC-638) (#1127)
    cf38c2cb Move GCE metadata fetch to init-local (SC-502) (#1122)
    a1cf55e5 Fix missing metadata routes for vultr (#1125)
    c39d4f45 cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console (#1081)
    4bf4de25 sources/azure: remove unused remnants related to agent command (#1119)
    32860627 github: update PR template's contributing URL (#1120)
    b36b4e2f docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
    31daf667 testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
    1343584d Fix Vultr timeout and wait values (#1113)
    7ebf04e3 lxd: add preference for LXD cloud-init.* config keys over user keys (#1108)
    3c6b594b VMware: source /etc/network/interfaces.d/* on Debian
    62721ae7 Add cjp256 as contributor (#1109)
    36adb6da integration_tests: Ensure log directory exists before symlinking to it (#1110)
    7f03da35 testing: add growpart integration test (#1104)
    8c52bb3f integration_test: Speed up CI run time (#1111)
    f0af9f78 Some miscellaneous integration test fixes (SC-606) (#1103)
    918d69a0 tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
    22150a20 Add convenience symlink to integration test output (#1105)
    fff6de4a Fix for set-name bug in networkd renderer (#1100)
    3d150688 Wait for apt lock (#1034)
    6421a202 testing: stop chef test from running on openstack (#1102)
    820e3d1c alpine.py: add options to the apk upgrade command (#1089)
    db6084bd Release 21.4 (#1091)
    ff415cad Azure: fallback nic needs to be reevaluated during reprovisioning (#1094)
    48467aa3 azure: pps imds (#1093)
    d54e23bf testing: Remove calls to 'install_new_cloud_init' (#1092)
    77376534 Add LXD datasource (#1040)
    b1beb538 Fix unhandled apt_configure case. (#1065)
    a90d8338 Allow libexec for hotplug (#1088)
    0f8428f6 Add necessary mocks to test_ovf unit tests (#1087)
    28581988 Remove (deprecated) apt-key (#1068)
    d4fe4bf5 distros: Remove a completed "TODO" comment (#1086)
    d77d6bf1 cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    1d01da5d Add "install hotplug" module (SC-476) (#1069)
    75b26b0a hosts.alpine.tmpl: rearrange the order of short and long hostnames (#1084)
    994339ae Add max version to docutils
    e6f15ae5 cloudinit/dmi.py: Change warning to debug to prevent console display (#1082)
    a8380a12 remove unnecessary EOF string in disable-sshd-keygen-if-cloud-init-active.conf (#1075)
    a4236c37 Add module 'write-files-deferred' executed in stage 'final' (#916)
    81f6aa16 Bump pycloudlib to fix CI (#1080)
    2db71334 Remove pin in dependencies for jsonschema (#1078)
    6cf9dc87 Add "Google" as possible system-product-name (#1077)
    2107ad01 Update Debian security suite for bullseye (#1076)
    8c89009e Leave the details of service management to the distro (#1074)
    3a6bee59 Fix typos in setup.py (#1059)
    150fd30e Update Azure _unpickle (SC-500) (#1067)
    ee296ced cc_ssh.py: fix private key group owner and permissions (#1070)
    a0a68a24 VMware: read network-config from ISO (#1066)
    70f0ee78 testing: mock sleep in gce unit tests (#1072)
    62c2a56e CloudStack: fix data-server DNS resolution (#1004)
    125dcb28 Fix unit test broken by pyyaml upgrade (#1071)
    a9501251 testing: add get_cloud function (SC-461) (#1038)
    b3e31ba2 Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    76166caf VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    ca0da042 Fix set-name/interface DNS bug (#1058)
    1ee2f3c3 Use specified tmp location for growpart (#1046)
    048a825c .gitignore: ignore tags file for ctags users (#1057)
    725a7f7f Allow comments in runcmd and report failed commands correctly (#1049)
    fd595774 tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    9c147e83 Allow disabling of network activation (SC-307) (#1048)
    3d2bac8b renderer: convert relative imports to absolute (#1052)
    1bbb67ca Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    de166ec3 integration-requirements: bump the pycloudlib commit (#1047)
    81a8f0a6 lp-to-git-users: adding vholer (#1044)
    591e97da Allow Vultr to set MTU and use as-is configs (#1037)
    392c3262 pin jsonschema in requirements.txt (#1043)
    ba083245 testing: remove cloud_tests (#1020)
    934c8d71 Add andgein as contributor (#1042)
    82d6f564 Make wording for module frequency consistent (#1039)
    2d67c1b9 Use ascii code for growpart (#1036)
    21aec00f Add jshen28 as contributor (#1035)
    c29c5b1d Skip test_cache_purged_on_version_change on Azure (#1033)
    8cebc449 Remove invalid ssh_import_id from examples (#1031)
    244af3f4 Cleanup Vultr support (#987)
    24a15e9c docs: update cc_disk_setup for fs to raw disk (#1017)
    a1e78b2e HACKING.rst: change contact info to James Falcon (#1030)
    089a307d tox: bump the pinned flake8 and pylint version (#1029)
    e27c3074 Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    dc227869 Set Azure to apply networking config every BOOT (#1023)
    612e3908 Add connectivity_url to Oracle's EphemeralDHCPv4 (#988)
    cb82a450 docs: fix typo and include sudo for report bugs commands (#1022)
    5ea2c669 VMware: Fix typo introduced in #947 and add test (#1019)
    d4fe7bc4 Update IPv6 entries in /etc/hosts (#1021)
    023f97d4 Integration test upgrades for the 21.3-1 SRU (#1001)
    26a92b0d Add Jille to tools/.github-cla-signers (#1016)
    f3cc9494 Improve ug_util.py (#1013)
    f4c47e3e Support openEuler OS (#1012)
    2ce85724 ssh_utils.py: ignore when sshd_config options are not key/value pairs (#1007)
    e69a8874 Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
    7fe0f900 cc_update_etc_hosts: Use the distribution-defined path for the hosts file (#983)
    f6c71fd7 Add CloudLinux OS support (#1003)
    db72c841 puppet config: add the start_agent option (#1002)
    58c2de4c Fix `make style-check` errors (#1000)
    76cff793 Make cloud-id copyright year (#991)
    7fc3f08e Add support to accept-ra in networkd renderer (#999)
    de8931ed Update ds-identify to pass shellcheck (#979)
    28e56d99 Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    6803368d testing: Fix ssh keys integration test (#992)
    03ee10cd Release 21.3 (#993)
    3ec8ddde Azure: During primary nic detection, check interface status continuously before rebinding again (#990)
    7d3f5d75 Fix home permissions modified by ssh module (SC-338) (#984)
    94679e17 Add integration test for sensitive jinja substitution (#986)
    776bd363 Ignore hotplug socket when collecting logs (#985)
    3e63025a testing: Add missing mocks to test_vmware.py (#982)
    0bf8d575 add Zadara Edge Cloud Platform to the supported clouds list (#963)
    b9c96b4f testing: skip upgrade tests on LXD VMs (#980)
    65607405 Only invoke hotplug socket when functionality is enabled (#952)
    f516a7d3 Revert unnecesary lcase in ds-identify (#978)
    04047438 cc_resolv_conf: fix typos (#969)
    1c3b10b5 Replace broken httpretty tests with mock (SC-324) (#973)
    e119cece Azure: Check if interface is up after sleep when trying to bring it up (#972)
    7781dec3 Update dscheck_VMware's rpctool check (#970)
    82a30e6d Azure: Logging the detected interfaces (#968)
    b9d308b4 Change netifaces dependency to 0.10.4 (#965)
    d3271217 Azure: Limit polling network metadata on connection errors (#961)
    c62cb3af Update inconsistent indentation (#962)
    9893dfcd cc_puppet: support AIO installations and more (#960)
    3c858591 Add Puppet contributors to CLA signers (#964)
    8b4a9bc7 Datasource for VMware (#953)
    049d62b6 photon: refactor hostname handling and add networkd activator (#958)
    00dbaf1e Stop copying ssh system keys and check folder permissions (#956)
    13b6a857 testing: port remaining cloud tests to integration testing framework (SC-191) (#955)
    8f42eb54 generate contents for ovf-env.xml when provisioning via IMDS (#959)
    3d9c862b Add support for EuroLinux 7 && EuroLinux 8 (#957)
    758acf97 Implementing device_aliases as described in docs (#945)
    824977bd testing: fix test_ssh_import_id.py (#954)
    6e7066ea Add ability to manage fallback network config on PhotonOS (#941)
    4257e30a Add VZLinux support (#951)
    f0ab1e64 VMware: add network-config support in ovf-env.xml (#947)
    ec6afadb Update pylint to v2.9.3 and fix the new issues it spots (#946)
    a984ee78 Azure: mount default provisioning iso before try device listing (#870)
    4fbe192a Document known hotplug limitations (#950)
    184c836a Initial hotplug support (#936)
    eacb0353 Fix MIME policy failure on python version upgrade (#934)
    881be6e7 run-container: fixup the centos repos baseurls when using http_proxy (#944)
    a185f319 tools: add support for building rpms on rocky linux (#940)
    9b52405c ssh-util: allow cloudinit to merge all ssh keys into a custom user file, defined in AuthorizedKeysFile (#937)
    108611ae VMware: new "allow_raw_data" switch (#939)
    7f5e6822 bump pycloudlib version (#935)
    894dd7c4 add renanrodrigo as a contributor (#938)
    36aeb49c testing: simplify test_upgrade.py (#932)
    db51b656 freebsd/net_v1 format: read MTU from root (#930)
    81299de5 Add new network activators to bring up interfaces (#919)
    78e89b03 - Detect a Python version change and clear the cache (#857)
    6e0aa175 cloud_tests: fix the Impish release name (#931)
    b5aecbe9 Removed distro specific network code from Photon (#929)
    35aa9db6 Add support for VMware PhotonOS (#909)
    f5a24496 cloud_tests: add impish release definition (#927)
    db23b1b1 docs: fix stale links rename master branch to main (#926)
    abd2da57 Fix DNS in NetworkState (SC-133) (#923)
    fbcb224b tests: Add 'adhoc' mark for integration tests (#925)
    1243c5a1 Fix the spelling of "DigitalOcean" (#924)
    c8d3f99b Small Doc Update for ReportEventStack and Test (#920)
    950c186a Replace deprecated collections.Iterable with abc replacement (#922)
    59a3d845 testing: OCI availability domain is now required (SC-59) (#910)
    59a848c5 add DragonFlyBSD support (#904)
    05b0e350 Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    b11632d1 doc: Update NoCloud docs stating required files (#918)
    9c400e46 build-on-netbsd: don't pin a specific py3 version (#913)
    29ac50f2 - Create the log file with 640 permissions (#858)
    503e2d39 Allow braces to appear in dhclient output (#911)
    63f72380 Docs: Replace all freenode references with libera (#912)
    fc161f8e openbsd/net: flush the route table on net restart (#908)
    7c1d27b8 Add Rocky Linux support to cloud-init (#906)
    c8db6032 Add "esposem" as contributor (#907)
    3611befb Add integration test for #868 (#901)
    1793b8b7 Added support for importing keys via primary/security mirror clauses (#882)
    21a0b120 [examples] config-user-groups expire in the future (#902)
    6fe19837 BSD: static network, set the mtu (#894)
    4c3c3629 Add integration test for lp-1920939 (#891)
    57964125 Fix unit tests breaking from new httpretty version (#903)
    86434699 Allow user control over update events (#834)
    899bfaa9 Update test characters in substitution unit test (#893)
    77320bfc cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    8cf40a73 Add AlmaLinux OS support (#872)
    13877549 Release 21.2 (#890)
    f17f78fa Add \r\n check for SSH keys in Azure (#889)
    5f5fa5ee Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    9ea643ff Add Vultaire as contributor (#881)
    ba82b3ef Azure: adding support for consuming userdata from IMDS (#884)
    5c740dcf test_upgrade: modify test_upgrade_package to run for more sources (#883)
    02db2c3e Fix chef module run failure when chef_license is set (#868)
    b2311664 Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    431b3683 Azure: Retrieve username and hostname from IMDS (#865)
    d5cca27a Azure: eject the provisioning iso before reporting ready (#861)
    ced836e6 Use `partprobe` to re-read partition table if available (#856)
    d132356c fix error on upgrade caused by new vendordata2 attributes (#869)
    45db197c add prefer_fqdn_over_hostname config option (#859)
    0d90596b Emit dots on travis to avoid timeout (#867)
    cc16c922 doc: Replace remaining references to user-scripts as a config module (#866)
    9f9e154f azure: Removing ability to invoke walinuxagent (#799)
    0ae0b1d4 Add Vultr support (#827)
    83f6bbfb Fix unpickle for source paths missing run_dir (#863)
    fb38aa59 sysconfig: use BONDING_MODULE_OPTS on SUSE (#831)
    a9d3664c lp-to-git-users: adding B1Sandmann (#828)
    15dd3601 bringup_static_routes: fix gateway check (#850)
    fc5d5415 add hamalq user (#860)
    74fa008b Add support to resize rootfs if using LVM (#721)
    3b7e2e82 Fix mis-detecting network configuration in initramfs cmdline (#844)
    13606a12 tools/write-ssh-key-fingerprints: do not display empty header/footer (#817)
    6ae1145f Azure helper: Ensure Azure http handler sleeps between retries (#842)
    d4acc092 Fix chef apt source example (#826)
    bad84ad4 .travis.yml: generate an SSH key before running tests (#848)
    b794d426 write passwords only to serial console, lock down cloud-init-output.log (#847)
    c6726c2b Fix apt default integration test (#845)
    dae45c3b integration_tests: bump pycloudlib dependency (#846)
    f35181fa Fix stack trace if vendordata_raw contained an array (#837)
    3aeb14cd archlinux: Fix broken locale logic (#841)
    d95b448f Integration test for #783 (#832)
    74e1e50d integration_tests: mount more paths IN_PLACE (#838)
    9bd19645 Fix requiring device-number on EC2 derivatives (#836)
    6fe99157 Remove the vi comment from the part-handler example (#835)
    121bc04c net: exclude OVS internal interfaces in get_interfaces (#829)
    106c57d5 tox.ini: pass OS_* environment variables to integration tests (#830)
    3dd3de7c integration_tests: add OpenStack as a platform (#804)
    3be66630 Add flexibility to IMDS api-version (#793)
    62f7a8b1 Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    a10838a6 doc: remove duplicate "it" from nocloud.rst (#825)
    2757333e archlinux: Use hostnamectl to set the transient hostname (#797)
    402d98ed cc_keys_to_console.py: Add documentation for recently added config key (#824)
    695c4f8f Update cc_set_hostname documentation (#818)
    d873b9dc Release 21.1 (#820)
    a64b7380 Azure: Support for VMs without ephemeral resource disks. (#800)
    e384a543 cc_keys_to_console: add option to disable key emission (#811)
    38aee6ee integration_tests: introduce lxd_use_exec mark (#802)
    66e2d42d azure: case-insensitive UUID to avoid new IID during kernel upgrade (#798)
    08d8902a stale.yml: don't ask submitters to reopen PRs (#816)
    33b6cf29 integration_tests: fix use of SSH agent within tox (#815)
    28d2d4b8 integration_tests: add UPGRADE CloudInitSource (#812)
    5a9008e5 integration_tests: use unique MAC addresses for tests (#813)
    6056ccd4 Update .gitignore (#814)
    7f1cefe9 Port apt cloud_tests to integration tests (#808)
    85e88af0 integration_tests: fix test_gh626 on LXD VMs (#809)
    84e56f84 Fix attempting to decode binary data in test_seed_random_data test (#806)
    09193e51 Remove wait argument from tests with session_cloud calls (#805)
    0497c7b1 Datasource for UpCloud (#743)
    3a0a5894 test_gh668: fix failure on LXD VMs (#801)
    3cebe0df openstack: read the dynamic metadata group vendor_data2.json (#777)
    36ddf1eb includedir in suoders can be prefixed by "arroba" (#783)
    6efe16d8 [VMware] change default max wait time to 15s (#774)
    e7e7b429 Revert integration test associated with reverted #586 (#784)
    5ccc8cba Add jordimassaguerpla as contributor (#787)
    a0fdd856 Add Rick Harding to CLA signers (#792)
    c343e8b3 HACKING.rst: add clarifying note to LP CLA process section (#789)
    5ec01a57 Stop linting cloud_tests (#791)
    4c190685 cloud-tests: update cryptography requirement (#790)
    a9c904dc Remove 'remove-raise-on-failure' calls from integration_tests (#788)
    1527efa7 Use more cloud defaults in integration tests (#757)
    2d0b6368 Adding self to cla signers (#776)
    e051d542 doc: avoid two warnings (#781)
    b3abcdc0 Use proper spelling for Red Hat (#778)
    ad23441d Add antonyc to .github-cla-signers (#747)
    c25118ac integration_tests: log image serial if available (#772)
    cdc5b81f Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)" (#775)
    9db8620b Release 20.4.1
    6fc9da99 Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
    11630044 [VMware] Support cloudinit raw data feature (#691)
    9a258eeb net: Fix static routes to host in eni renderer (#668)
    162fb839 .travis.yml: don't run cloud_tests in CI (#756)
    7b58982a test_upgrade: add some missing commas (#769)
    37abbc43 cc_seed_random: update documentation and fix integration test (#771)
    503435d1 Fix test gh-632 test to only run on NoCloud (#770)
    2b2c7f39 archlinux: fix package upgrade command handling (#768)
    2bfa461b integration_tests: add integration test for LP: #1910835 (#761)
    4f62ae8d Fix regression with handling of IMDS ssh keys (#760)
    88581e54 integration_tests: log cloud-init version in SUT (#758)
    83ba4d18 Add ajmyyra as contributor (#742)
    75eb007f net_convert: add some missing help text (#755)
    ea6fcc14 Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL (#753)
    aa1014ca doc: document missing IPv6 subnet types (#744)
    30da21bd Add example configuration for datasource `AliYun` (#751)
    e5c67478 integration_tests: add SSH key selection settings (#754)
    48b2c5f1 fix a typo in man page cloud-init.1 (#752)
    b85e4a56 network-config-format-v2.rst: add Netplan Passthrough section (#750)
    c5f6c786 stale: re-enable post holidays (#749)
    aa72426b integration_tests: port ca_certs tests from cloud_tests (#732)
    80847b05 Azure: Add telemetry for poll IMDS (#741)
    5d017ab6 doc: move testing section from HACKING to its own doc (#739)
    b9a5da16 No longer allow integration test failures on travis (#738)
    e4f2d613 stale: fix error in definition (#740)
    b944cbe0 integration_tests: set log-cli-level to INFO by default (#737)
    3c076f4c PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
    fad919aa stale: disable check for holiday break (#735)
    f38ba3ca integration_tests: log the path we collect logs into (#733)
    ac17c6a2 .travis.yml: add (most) supported Python versions to CI (#734)
    0b932e55 integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
    a5484d02 cc_ca_certs: add RHEL support (#633)
    91381855 Azure: only generate config for NICs with addresses (#709)
    e5f74595 doc: fix CloudStack configuration example (#707)
    eadadaa1 integration_tests: restrict test_lxd_bridge appropriately (#730)
    9e89ca70 Add integration tests for CLI functionality (#729)
    2022bc72 Integration test for gh-626 (#728)
    ca49e27b Some test_upgrade fixes (#726)
    2af3f6d7 Ensure overriding test vars with env vars works for booleans (#727)
    3339a5a4 integration_tests: port lxd_bridge test from cloud_tests (#718)
    9ea845db Integration test for gh-632. (#725)
    8321f0c0 Integration test for gh-671 (#724)
    00dbc144 integration-requirements.txt: bump pycloudlib commit (#723)
    212b291d Drop unnecessary shebang from cmd/main.py (#722)
    97bfd21d Integration test for LP: #1813396 and #669 (#719)
    1d1649e5 integration_tests: include timestamp in log output (#720)
    05216aa3 integration_tests: add test for LP: #1898997 (#713)
    17ca02e1 Add integration test for power_state_change module (#717)
    7ec314a9 Update documentation for network-config-format-v2 (#701)
    b8df2547 sandbox CA Cert tests to not require ca-certificates (#715)
    54e202a6 Add upgrade integration test (#693)
    aa6350f6 Integration test for 570 (#712)
    974145d0 Add ability to keep snapshotted images in integration tests (#711)
    06f7b452 Integration test for pull #586 (#706)
    6c4e87bf integration_tests: introduce skipping of tests by OS (#702)
    ed9bd19c integration_tests: introduce IntegrationInstance.restart (#708)
    bd76d5cf Add lxd-vm to list of valid integration test platforms (#705)
    f550c876 Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL (#685)
    2bd34bda Delete image snapshots created for integration tests (#682)
    de3183c1 Parametrize ssh_keys_provided integration test (#700)
    53f2bfbb Drop use_sudo attribute on IntegrationInstance (#694)
    6ee01078 cc_apt_configure: add riscv64 as a ports arch (#687)
    4292a47b cla: add xnox (#692)
    bc9c6c22 Collect logs from integration test runs (#675)
    47f4229e Release 20.4 (#686)
    87df9d6c tox: avoid tox testenv subsvars for xenial support (#684)
    6e86d2a5 Ensure proper root permissions in integration tests (#664)
    8a493bf0 LXD VM support in integration tests (#678)
    e454dea5 Integration test for fallocate falling back to dd (#681)
    66a851ac .travis.yml: correctly integration test the built .deb (#683)
    a4d0feb0 Ability to hot-attach NICs to preprovisioned VMs before reprovisioning (#613)
    66b4be8b Support configuring SSH host certificates. (#660)
    5d4a9a4a add integration test for LP: #1900837 (#679)
    12ef7541 cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    73e704e3 DataSourceAzure: push dmesg log to KVP (#670)
    9707a08a Make mount in place for tests work (#667)
    bfaee8cc integration_tests: restore emission of settings to log (#657)
    eea75449 DataSourceAzure: update password for defuser if exists (#671)
    49d5de92 tox.ini: only select "ci" marked tests for CI runs (#677)
    6df0230b Azure helper: Increase Azure Endpoint HTTP retries (#619)
    d807df28 DataSourceAzure: send failure signal on Azure datasource failure (#594)
    96d21dfb test_persistence: simplify VersionIsPoppedFromState (#674)
    cd752df6 only run a subset of integration tests in CI (#672)
    f6801144 cli: add --system param to allow validating system user-data on a machine (#575)
    e1bde919 test_persistence: add VersionIsPoppedFromState test (#673)
    4f2da1cc introduce an upgrade framework and related testing (#659)
    a925b5a0 add --no-tty option to gpg (#669)
    eeef783b Pin pycloudlib to a working commit (#666)
    8a9ee02d DataSourceOpenNebula: exclude SRANDOM from context output (#665)
    38ba6b30 cloud_tests: add hirsute release definition (#662)
    db2ff11d split integration and cloud_tests requirements (#652)
    39cf5c4e faq.rst: add warning to answer that suggests running `clean` (#661)
    2730521f Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    57349eb7 Make wakeonlan Network Config v2 setting actually work (#626)
    0dc2d030 HACKING.md: unify network-refactoring namespace (#658)
    d83c0bb4 replace usage of dmidecode with kenv on FreeBSD (#621)
    b542ce7a Prevent timeout on travis integration tests. (#651)
    c86283f0 azure: enable pushing the log to KVP from the last pushed byte  (#614)
    f4235974 Fix launch_kwargs bug in integration tests (#654)
    cf6c36a1 split read_fs_info into linux & freebsd parts (#625)
    d1c01c1d PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
    8dfd8801 Make some language improvements in growpart documentation (#649)
    0184e536 Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
    7978feb3 Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    2c450039 remove unnecessary reboot from gpart resize (#646)
    0af1ff1e cloudinit: move dmi functions out of util (#622)
    d619f517 integration_tests: various launch improvements (#638)
    2ea3121f test_lp1886531: don't assume /etc/fstab exists (#639)
    0ff34cfb Remove Ubuntu restriction from PR template (#648)
    34f8e221 util: fix mounting of vfat on *BSD (#637)
    815a790c conftest: improve docstring for disable_subp_usage (#644)
    8642e8bc doc: add example query commands to debug Jinja templates (#645)
    f8c84aee Correct documentation and testcase data for some user-data YAML (#618)
    0f8be879 Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    f72d0cb7 .travis.yml: use a known-working version of lxd (#643)
    a6afe9c5 tools/build-on-freebsd: fix comment explaining purpose of the script (#635)
    1431c8a1 Hetzner: initialize instance_id from system-serial-number (#630)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-21 09:29:50 -05:00
Bruce Ashfield
d842978b65 cloud-init: switch branch to main
Cloud-init has removed the master branch, and has switched
to using main.

So we adjust our recipe accordingly to avoid fetcher errors.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-21 09:10:08 -05:00
Christopher Clark
ce2a78aaa0 MAINTAINERS: add xtf and the raspberry pi dynamic layer for Xen
Add the more recent Xen-related recipes to the list.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-16 21:45:00 -05:00
Christopher Clark
acdae1d76b xen-tools: upgrade RSUGGESTS to RRECOMMENDS for ifupdown
Xen's networking for guests is typically configured using bridges and
the standalone ifupdown package, which contains a more capable version
of the tool than busybox, is needed to configure them, so:

Increase the recommendation strength from RSUGGESTS to RRECOMMENDS to
bring the package in by default, which fixes networking for images built
with packaging formats that follow RRECOMMENDS but not RSUGGESTS.

I should've paid closer attention to Corey's recommendation for this, so:
Suggested-by: Corey Minyard <cminyard@mvista.com>

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-16 21:44:59 -05:00
Christopher Clark
1c3cc5b420 xen: drop patch to workaround prelink on aarch64
prelink is no longer default enabled and has been recommended to be
disabled since OE-core f9719cc1.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-16 21:44:59 -05:00
Bruce Ashfield
d4415a1ff7 kubernetes: install kubeadm and misc for nodes
To ensure nodes can join the cluster, and have the proper configuration
of some kernel options we add two more packages to the packagegroup

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15 12:59:18 -05:00
Bruce Ashfield
14025b2ee5 kubernetes: add sysctl.d configuration
The startup of kubernetes relies on some kernel/runtime configuration.
We create a sysctl.d snippet to ensure that critical ones are set when
installing our packages.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15 12:59:12 -05:00
Bruce Ashfield
5b3b2599db cni: add README
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15 12:55:41 -05:00
Bruce Ashfield
308d31d026 kubernetes: add README
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15 12:55:28 -05:00
Bruce Ashfield
24b68f18af cni: don't provide kubernetes-cni by default
The kubernetes recipes can inherit cni_networking and provide their
own PN-cni packages, so we no longer need to provide this by default.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13 15:59:35 -05:00
Bruce Ashfield
491a385ca6 config: introduce hostname generation hooks
Overriding hostname in a .conf file, via base-files:

  HOST_NAME="k3s-host"
  hostname_pn-base-files = "${HOST_NAME}"

Is always a valid option, but if it is not configured, we can easily
have two hosts with the same name on the network, confusing adddress
assignement, etc.

This commit introduces a way to generate a unique hostname based
on the uuid of the build host, and the machine being built.

If virt-unique-hostname is added to IMAGE_FEATURES, like the following:

  IMAGE_FEATURES += "virt-unique-hostname"
  IMAGE_FEATURES[validitems] += "virt-unique-hostname"

Then a rootfs postprocessing hook will override hostnae to something
unique.

Note: this means your image will be reproducible on a single builder,
but not between them.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13 15:59:35 -05:00
Bruce Ashfield
6fe326b680 demo: add flask and k3s deployment files
To enable demonstrations of application container builds, and deployment
to k*s clusters, we introduce a simple recipes-demo/ structure with a
sample flask application and deployment yaml.

i.e. ensure that "helloworld-flask-deploy" is installed on your image,
and then:

 % kubectl apply -f /etc/flask-app.yaml
 % kubectl label pods zeddii-pod new-label=yoctorule
 % kubectl expose pod zeddii-pod  --port=9000  --target-port=9000 --type=LoadBalancer --name=my-service

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13 15:59:11 -05:00
Bruce Ashfield
fc5fdd79e0 k8s: add kubernetes to host packagegroup
Install the core kubernetes package (and RDEPENDS) as part of the
host packagegroup.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13 12:27:11 -05:00
Bruce Ashfield
4d0f0a5ca2 k8s: introduce host/controller initialization script
Adding a simple helper to setup a host to the NodeReady state.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13 12:20:43 -05:00
Bruce Ashfield
9c1f90d46b runc-docker: update to 1.0.3
Bumping runc to version v1.0.3-2-ge0124d56, which comprises the following commits:

    31f7b334 VERSION: back to development
    f46b6ba2 VERSION: release v1.0.3
    b8dbe466 runc init: avoid netlink message length overflows
    e73ff667 [1.0] ci: add Go 1.17, drop Go 1.15
    2c30069c libct/cg/sd/v2: Destroy: remove cgroups recursively
    42bfc63b script/release.sh: fix for opensuse
    8e96a96f libct/cg/fs2: fix GetStats for unsupported hugetlb
    e84e7f93 [1.0] Fix failure with rw bind mount of a ro fuse
    cbb23675 runc run: fix ro /dev
    e802cfae test/int/mount.bats: refer to github issue
    3640499a libct/rootfs: consolidate utils imports
    aa1d1ca5 tests/int/dev: add CAP_SYSLOG to /dev/kmsg tests
    fdee8658 libct/int/checkpoint_test: fix ParentImage
    cbb5ef5c improve error message when dbus-user-session is not installed
    86d83333 VERSION: back to development

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-10 09:42:44 -05:00
Bruce Ashfield
df3cc49550 runc: update to 1.0.3
Bumping runc to version v1.0.3-2-ge0124d56, which comprises the following commits:

    31f7b334 VERSION: back to development
    f46b6ba2 VERSION: release v1.0.3
    b8dbe466 runc init: avoid netlink message length overflows
    e73ff667 [1.0] ci: add Go 1.17, drop Go 1.15
    2c30069c libct/cg/sd/v2: Destroy: remove cgroups recursively
    42bfc63b script/release.sh: fix for opensuse
    8e96a96f libct/cg/fs2: fix GetStats for unsupported hugetlb
    e84e7f93 [1.0] Fix failure with rw bind mount of a ro fuse
    cbb23675 runc run: fix ro /dev
    e802cfae test/int/mount.bats: refer to github issue
    3640499a libct/rootfs: consolidate utils imports
    aa1d1ca5 tests/int/dev: add CAP_SYSLOG to /dev/kmsg tests
    fdee8658 libct/int/checkpoint_test: fix ParentImage
    cbb5ef5c improve error message when dbus-user-session is not installed
    86d83333 VERSION: back to development

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-10 09:41:42 -05:00
Bruce Ashfield
ee1e169f0b kubernetes: update to 1.23.x series
Bumbing kubernetes to the latest release branch (now that our go
compiler meets the minium standards).

We also add a networking configuration similar to the k3s one, but
named appropriately so that CNI will read and do basic configuration.

We also add some missing rdepends that were preventing the controller
node from fully initializing.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-10 09:02:58 -05:00
Peter Kjellerstedt
dbd37caa6d qemu-package-split.inc: Correct a typo
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01 23:06:24 -05:00
Bruce Ashfield
0846bddaef skopeo: update to v1.5.2
Bumping skopeo to version v1.5.2-3-g1d24e657, which comprises the following commits:

    4dcd28df Use a dynamic temp dir for test
    789ee8be Bump to 1.5.3-dev
    8a88191c Release 1.5.2
    69728fdf Update to c/image v5.17.0
    47066f2d Cirrus: Bump Fedora to release 35 & Ubuntu to 21.10
    adfa1d4e Bump github.com/docker/docker
    05a2ed49 proxy: Uncapitalize all errors
    e9535f86 tests: Add new "procutils" that exposes PDEATHSIG
    fa86297c proxy_test: Test `GetConfig`
    2bb6f27d proxy_test: Add helper to read all from a reply
    f90725d8 proxy_test: Add a helper method to call without fd
    644074cb proxy: Add support for manifest lists
    83416068 tests/integration/proxy_test: New test that exercises `proxy.go`
    a3adf36d proxy: Use float → int helper for pipeid
    6510f101 proxy: Add a helper to return a byte array
    e7b7be57 proxy: Add an API to fetch the config upconverted to OCI
    942cd6ec Fix bug that prevented useful diagnostics on registry fail
    41de7f2f use fedora:latest in contrib/skopeoimage/*/Dockerfile
    c264cec3 Move to v1.5.2-dev
    2b357d82 Bump to v1.5.1
    4acc9f0d main: Error out if an unrecognized subcommand is provided
    7885162a move optional-flag code to c/common/pkg/flag
    36d860eb Add --dest-precompute-digests option for docker
    c8777f3b bump containers/image to 2541165
    985d4c09 Add instructions to generate static binaries
    11b59898 Add new `experimental-image-proxy` hidden command
    2144a37c issue#785 inspect command - introduce a way to skip querying available tags for an image
    60c98cac Document container images as an alternative to installing packages
    89ecd5a4 Introduce --username and --password to pass credentials
    119eeb83 Move to v1.5.1-dev
    209a9931 Bump to v1.5.0
    3e4d4a48 Bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
    3a97a0c0 Bump github.com/docker/docker
    ff88d3fc Remove leftover Nix packaging files
    e19b57c3 Update github.com/containerd/containerd to v1.5.7
    b950f83c issue#1466 - Introduce a --keep-going option to allow "sync" command to continue syncing even after a particular image sync fails
    12d01037 Bump github.com/containers/storage from 1.36.0 to 1.37.0
    e0c53dfd Update installation doc with latest steps
    aba57a88 Makefile: drop nix support
    93c42bcd Bump github.com/containers/common from 0.45.0 to 0.46.0
    c0f07d3d Bump github.com/containers/common from 0.44.1 to 0.45.0
    0ce7081e Bump github.com/containers/common from 0.44.0 to 0.44.1
    52dafe8f Update to github.com/vbauerster/mpb v7.1.5
    ee8b8e77 Explain the usage of DISABLE_DOCS in the installation doc
    1d204fb1 Update VM Images + Drop prior-ubuntu references
    61310777 issue#1411 Introduce DISABLE_DOCS to skip doc generation while building from source
    ed96bf04 Bump github.com/containers/common from 0.43.2 to 0.44.0
    a837fbe2 Bump github.com/containers/storage from 1.35.0 to 1.36.0
    9edeb69f Remove the extra (defaults to true) help msg
    a2d083ca Bump github.com/containers/image/v5 from 5.15.2 to 5.16.0
    0e87d4d1 Run (gofmt -s -w)
    c399909f Update non-module dependencies
    102e2143 Bump github.com/containers/image/v5 from 5.15.1 to 5.15.2
    7d5ef9d9 Bump github.com/containers/common from 0.43.1 to 0.43.2
    70eaf171 Add OWNERS file
    61969472 Bump github.com/containers/image/v5 from 5.15.0 to 5.15.1
    ec1ac5d0 Bump github.com/containers/storage from 1.34.0 to 1.34.1
    082db20f Bump github.com/containers/common from 0.43.0 to 0.43.1
    8dce403b Add codespell fixes
    f6ae7865 systemtests: if registry times out, show container logs
    9acb8b6a Bump github.com/containers/common from 0.42.1 to 0.43.0
    a23b9f53 Bump github.com/containers/storage from 1.33.2 to 1.34.0
    be821b4f Bump github.com/containers/storage from 1.33.1 to 1.33.2
    ab87b15f Cirrus: Run checks directly on the host
    1aa98bab Github: Add workflow to monitor Cirrus-Cron builds
    fbf96998 Bump github.com/docker/docker
    a3bb1cc5 Bump github.com/containers/common from 0.42.0 to 0.42.1
    0667a1e0 Bump to 1.4.1-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-30 14:59:07 -05:00
Martin Jansa
ef6d70eeaf uxen-guest-tools: fix -DMODULE not working when building uxenhc module
* undo the unnecessary and incomplete changes from 0001-vm-support-fix-build-for-kernel-s-5.4.patch
  because with 5.15 it was still failing with:
  ERROR: modpost: missing MODULE_LICENSE() in uxen-guest-tools/4.1.8-r0/uxen-4.1.8-72a4af9/vm-support/linux/uxenhc/uxenhc.o

  fix it properly in 0004-uxenhc-fix-DMODULE-not-working-on-module-build-comma.patch

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-30 12:04:09 -05:00
Martin Jansa
788672a973 uxen-guest-tools: fix build against kernels 5.15+
This is a compile only fix to update the uxen kernel modules to
work against newer kernels.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-30 12:04:09 -05:00
Martin Jansa
967bcb26d3 xvisor: set PV
* use something more reasonable than default 'git' from filename
* there wasn't a new tag for a long time, so this is quite far
  from 0.3.0 as git describe shows:
  v0.3.0-231-g6b23764a
  but 0.3.0 is still the closest release I've found
  and matches PROJECT_VERSION in Makefile:
  6b23764a14/Makefile (L29)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-30 09:27:48 -05:00
Martin Jansa
62338f445a singularity: fix build with automake-1.16.5
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-30 09:18:46 -05:00
Bruce Ashfield
844f4e1d7b uxen-guest-tools: fix build against kernels 5.4+
This is a compile only fix to update the uxen kernel modules to
work against newer kernels.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-29 23:13:33 -05:00
Bruce Ashfield
9a7aa013db xvisor: uprev to latest master and fix python reference
Bumping to the latest xvisor tip.

We drop one patch that is now part of the upstream, and we
add another to remove /usr/bin/python from scripts called
during build, since it breaks the build on hosts without
/usr/bin/python.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-29 17:21:36 -05:00
Xu, Yanfei
da0f1599ce libvirt: fix CVE-2021-3667
Backport a fix for CVE-2021-3667.

The CVE discription: An improper locking issue was found in the
virStoragePoolLookupByTargetPath API of libvirt. It occurs in the
storagePoolLookupByTargetPath function where a locked virStoragePoolObj
object is not properly released on ACL permission failure. Clients
connecting to the read-write socket with limited ACL permissions could
use this flaw to acquire the lock and prevent other users from accessing
storage pool/volume APIs, resulting in a denial of service condition.
The highest threat from this vulnerability is to system availability.

Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1986094

Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-24 16:57:20 -05:00
Bruce Ashfield
9148b795f3 podman-compose: update to 0.1.8
Bumping podman-compose to version 0.1.8-2-g1555417, which comprises the following commits:

    1555417 FIXES #361: key error _service
    1f989ed FIXES #356: respect pull_policy
    66ce2a3 release 0.1.8
    d8e11d5 FIXES #312: run starts dependencies
    72c3572 #289: exit code and test for that
    c187e88 up and down specific containers
    31b8bb4 simpler passing of env
    f177712 Fix `up` arguments parsing
    ae3deb1 #355: fix dry run
    117b7fb command list of strings
    5acb997 command list of strings
    02b2f65 Update issue templates
    a36b6f1 Update issue templates
    e3be6dd Update issue templates
    4b75678 Update issue templates
    dcb038e remove tabs
    a2fef56 FIXES #353: down in reverse order
    c753b8e FIXES #167: support ContainerFile
    c9486c9 #115: handle string entrypoint
    f2aeaba #348: conditional --infra-name
    2d80e43 remove print
    d1a77de external name
    c49f070 volumes with names
    6d69b7c Add support external volumes
    ab13503 add support for long port publishing format
    069018c #342: set infra container name
    b33c42b Readability fix for missing commands
    785f7ad Get version info with setup.cfg
    b6a9f8e #335: report version with -v
    4a5fd23 #275 make pipx happy
    dc0ac0d docs: added the transform_policy default and description
    502d7cc #327: accept ports as string
    e85d79d added cpu_shares flag for v2
    bfb57b9 added cpu_shares flag for v2
    2d0aad6 Also pull images with a build section
    ff5b9f1 Support for logging
    62aa337 feat(secrets):  Add support for secrets
    3836094 Update podman_compose.py
    d97a20d #308: fix environment
    f417c9a #120: extend not add
    5ed5528 FIXES #120: parse mem and cpu limits
    3d6ca3c FIXES #120: parse mem and cpu limits
    6e3383d Convert numeric command arguments to string (fixes #77)
    8ef7587 Fix some typos (found by codespell)
    039fe30 Make sure port entries are converted to strings
    62d2024 Add stop_signal service attribute
    9317f98 #278: args
    045cef2 #289: report exit code when --exit-code-from
    a7f97b6 implement -e in run
    0ea18b4 Force adding an .env file for the tests
    00840d0 resolve conflict
    2ad7daa Test variable interpolation in the YAML
    080b8a3 Prefer 'compose.yaml' as per compose spec
    226ac4f fix missing --label flag in volume creation
    030a196 Fix README typo
    901213e Update podman_compose.py
    b337060 Add support for sysctls in compose file
    b3090c3 Mode Python installation and test deps to requirement files
    5fabfee Support annotations
    75a63df fix: check `.env` in current dir with `isfile` instead of `exists`
    08dd36f Add docker-compose labels for interoperability
    669953b Rework argument generation to adhere directly to what podman accepts.
    d3df688 Remove test code
    bda7b5e Add exec support
    6289d25 fixes #236: compatible with docker-compose
    abc0813 Only pull each image once
    9cd837f Fixes #236: Ensure project name works with podman
    a4b8b5e Fix 'podman-compose version' with no compose file in the working directory
    5971f57 FIXES #249: update dotenv with some envs
    ab96f12 FIXES #249: update dotenv with some envs
    f6a3cb0 Allow environment variables to be unset
    497355f Re-order environment/env_files to match compose
    20a86ea add --no-cache arg to build
    4e2e960 build specific service
    efba3a1 support str style configuration for env_file
    9063976 BUG: 'podman stop -t 360.0' called for float, expects int on cli
    3712b54 ENH: add timeout option to podman-compose down, as in https://docs.docker.com/compose/reference/down/
    294f8ee Hashlib to generate SHA256 instead of MD5 for FIPS
    105b129 Fix infinite loop
    d3f3711 FIXES #181: accept init and init-path
    7eacf14 MAINT: resolve https://github.com/containers/podman-compose/pull/180#issuecomment-632722974
    8cd98ab MAINT: extend instead of append
    047820d ENH: Added restart policy forwarding to podmann run, compose build args added to up args
    e7b1382 Add --build-arg to 'up' (Fixes #161)
    64ed554 Allow empty default/error value in substitution
    93bf39e Add Security Policy
    5915ba3 Catch error when compose file is empty
    1ca6a88 target once
    7b40079 Pass "target" parameter when building an image.
    f9915c4 Check for target property when building images
    1973340 Add support for --build-arg option
    e8147e3 Add support for cap_add/cap_drop
    7f210ff fixing "Error: unknown flag: --shm_size"
    cbed801 start detached
    6a42d68 add ports test
    07a2430 Fixes #152: validate that podman is useable
    5215782 Fixes #152: validate that podman is useable
    03cbd29 pass volumes using -v
    796e6a4 Avoid crash when no services are defined
    efcbc75 Pass ulimit parameters when building container
    dacc753 Add Code of Conduct
    8c3b7e6 Added mount option delegated and cached
    147f0ae Update README with dnf install instructions.
    27d3caf Add support for privileged option
    e7a9bd3 Show stopped containers in ps
    ddd582c Add support for logs subcommand
    169eaee Fix override of the run command
    c5f8973  Mixed-case directory names break 'podman create'
    12036aa FIXES #76: a service extends a service with same name
    7222fdb exit if not files
    bb7120f Fix stop command runs start instead
    7ebbe2e Fix KeyErrors encountered with extended services
    29d4cdc Remove unused funtion in setup.py
    a9216c3 podman volume inspect mountPoint/Mountpoint
    e538852 #57: better ps via label
    b1c2b02 podman_compose.py
    9e0dd2d extends with external file
    72c1992 Remove never-shared options.
    3e2381f Support extends
    dee813a #47: version command
    9684429 #52: fix how we split commands
    87e7211 #54: fix ulimits
    7269701 Fixed get of ulimit tag, according to docker-compose specification
    b369073 Fix podman-compose run command parsing
    62f0cc4 Changed -l flag to --label in order to be compatible with Podman 1.0.2.dev
    c152d28 Support for generic  container-compose format
    8e43e69 FIX #41: compare original volume name
    751aaa8 Add support for devices in a service
    243bdb6 Add support for setting container ulimit
    2202e7f Add support for setting container ulimit
    f505e49 a test showing yaml anchor magic
    2e4378f add string check for cmd line args
    2a8d430 FIXES #35: now support multiple composer files
    a512c0c #35: test for multiple -f
    f008986 release 0.1.5

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 11:56:56 -05:00
Bruce Ashfield
b8e53d99f9 podman: update to 3.4.2
Bumping libpod to version v3.4.2-4-g72031783c, which comprises the following commits:

    25f35ac9e Use CGO_ENABLED=1 when building natively on darwin
    7c98d542b Bump to v3.4.3-dev
    2ad1fd355 Bump to v3.4.2
    1d6397e5c Add release notes for v3.4.2
    6d9b1e4b8 Fix partial log line handling with journald log driver
    8b368b5e1 Fix Zsh completion command documentation
    c2fb170b8 Fix flake in upgrade tests
    6770fede7 VOLUME must be declared after RUN chown command
    cedf1a3d4 podman-generate-kube - remove empty structs from YAML
    e456873c0 Exclude already built sources for static build
    e9f6e5194 Match .c files in Makefile
    de852ebd0 shm_lock: Handle ENOSPC better in AllocateSemaphore
    fc1707dfe Minor test tweaks
    c8b7ca2ba pod/container create: resolve conflicts of generated names
    2dc8db773 Add some information about disabling SELinux when using system volumes
    93a3e720d Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED]
    b1ac02dcb tweak a couple of flag descriptions in help output
    718de67f3 Fix bindings container log test
    dd6551055 test: run --cgroups=split in new cgroup
    df9e0fdcb Fix tests of podman image trust --raw and --json
    df736396e Tighten the expected output of the "podman image trust show" test
    18c322d1c Use INTEGRATION_ROOT instead of current directory
    3bd80ac9a Handle HTTP 409 error messages properly for Pod actions
    a8332f694 Fix swagger definitions
    5889c2c24 Cirrus: Authorize rootless user self-ssh
    2a0aad6be Add information on how podman machine is updated
    0ded340e6 Fix help message case for `podman version`
    fa29ca710 Fix pause usage example
    6bf6d7237 Set Checkpointed state to false after restore
    2d6252b98 runtime: change PID existence check
    a208bc24d Set DOCKER_HOST in the VM
    246782133 runtime: check for pause pid existence
    0519e7ef8 utils: do not overwrite the err variable
    2b85684ad Fix systemd PID1 test
    0e1f67b72 cgroups: use SessionBusPrivateNoAutoStartup
    9707ff5d4 vendor: update godbus to v5.0.6
    a67bf0f92 Slirp4netns with ipv6 set net.ipv6.conf.default.accept_dad=0
    47afa6d96 Fix a few problems in 'podman logs --tail' with journald driver
    729310a85 If Dockerfile exists in same directory as service, we should not use it.
    7275d389b Document to not set K8S envars for CNI
    955d01f5a [NO NEW TESTS NEEDED] Fix off-by-one index comparision (reported by LGTM)
    2ff511798 Fix some typos in documentation and comments (found by codespell)
    eead06b9d [CI:DOCS] Fix typo keep_id -> keep-id
    8887cc7e4 podman run --memory=0 ... should not set memory limit
    6f779b230 systemd: compatible with rootless mode
    465e27cf1 Use exponential backoff when waiting for a journal entry
    3b67336b6 Pod Rm Infra Improvements
    f8ede7c5e System tests: confirm that -a and -l clash
    c3f3e6d3b Remove infra ID from DB before removing containers
    b3eaa08c5 Generate Kube should not print default structs
    d489abf26 fuse-overlay probably means fuse-overlayfs.
    34739f441 Replace 'an user' => 'a user'
    9c94530bb network reload without ports should not reload ports
    eca1b6c0b pod create: read network mode from config
    9e78185e3 volumes: be more tolerant and fix infinite loop
    5c2d17e1c [backport] tag: Support tagging manifest list instead of resolving to images
    46f7d2af1 Bump to v3.4.2-dev
    a6493ae69 Bump to v3.4.1
    56a4372c2 Update release notes for v3.4.1
    f05e206bd Fix test failures from backports
    437ec951d system tests: socket activation: clean up
    5aa89c88f Checkpoint/Restore test fixes
    d39e41283 Set targetPort to the port value in the kube yaml
    7923bfcb0 Test-hang fix: Wait for ready + timeout on connect.
    c135ff76d Don't include ctr.log if not using file logging
    9168db8bc Do not add TCP to protocol in generated kube yaml
    b5dd62f31 Don't use docker/pkg/archive, use containers/storage/pkg/archive
    a213661ae Fix panic in container create compat api
    92ed439d2 Don't add image entrypoint to the generate kube yaml
    16fb4161a Kube Gen run as user/group issues
    3082ba8b7 No space in kube annotations for bind mounts
    b470de05b cgroups: use cgroup.controllers to read controllers
    8b87793d4 Use SplitN(2) when copying env variables
    d458bc304 [CI:DOCS] Include manifest example usage
    fbe94088f podman stats: move cgroup validation to server
    338e01f04 [CI:DOCS] oci-hooks.5.md: fixup section in header
    de6a4af5a Change podman.1 man page to show corret log-level default
    326eae3b7 Add podman-plugins to upstream image
    ca33df146 Ensure `podman ps --sync` functions
    7bbf774e8 Allow `podman stop` to be run on Stopping containers
    2cd206d0f libpod: fix race when closing STDIN
    37347c321 It really should be no **NEW** tests needed
    62d12a2ad Add guard for BuildOptions.CommonBuildOpts
    c6be71486 machine: silently cleanup dangling sockets before rm if possible
    835d74ac6 sdnotify test: accept MAINPID anywhere
    14509a92b Allow a value of -1 to set unlimited pids limit
    deb7517cc Gating tests: fix permissions error
    cd4e10fdf [v3.4] bump c/common to v0.44.3
    91f9682c7 Bump to v3.4.1-dev
    6e8de00bb Bump to v3.4.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 11:20:14 -05:00
Bruce Ashfield
9ab81946f6 docker-distribution: update to 2.7.1-latest
Bumping docker-distribution to version v2.7.1-38-gf7365390, which comprises the following commits:

    97f6dace [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
    9a3ff113 fix go check issues
    19b573a6 Change should to must in v2 spec
    d836b23f [release/2.7] update to go1.16

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 11:20:14 -05:00
Bruce Ashfield
b7efc7bce2 cri-tools: update to v1.22.0
Bumping cri-tools to version v1.22.0-64-ga9898388, which comprises the following commits:

    794d57a4 Bump github.com/onsi/gomega from 1.16.0 to 1.17.0
    0f2d4138 Refactor fish completion
    c52d97b1 Rename bash and zsh completion functions
    cad0736a Add zsh compinit tag
    569d1769 Bump google.golang.org/grpc from 1.41.0 to 1.42.0
    082da7c6 Bump github.com/docker/docker
    0aade2a4 Bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
    4e03be78 Add release publishing workflow
    5c0c14e2 Bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
    b4e1615c Add SHA512 sum for release files
    22bdc0b9 Bump github.com/docker/docker
    06422104 Bump google.golang.org/grpc from 1.40.0 to 1.41.0
    b153327c Bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0
    c5fac65f Bump k8s.io/api from 0.22.1 to 0.22.2
    36c9ae70 Bump k8s.io/cri-api from 0.22.1 to 0.22.2
    c104c3a7 Bump k8s.io/apimachinery from 0.22.1 to 0.22.2
    65509de9 Bump k8s.io/client-go from 0.22.1 to 0.22.2
    59cf0fb9 Bump k8s.io/kubectl from 0.22.1 to 0.22.2
    8d019343 Updates E2E test images registry
    6824a581 Bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
    057a0a48 Switch to go1.17 for CI
    d9fe19b8 Bump github.com/opencontainers/runc from 1.0.1 to 1.0.2
    56a2c456 Added dropping/adding `ALL` capabilities case to critest
    1817da64 Bump github.com/onsi/gomega from 1.15.0 to 1.16.0
    9c01f4d5 Bump k8s.io/cri-api from 0.22.0 to 0.22.1
    e3ca48ad Bump k8s.io/client-go from 0.22.0 to 0.22.1
    1e108dfb Bump k8s.io/api from 0.22.0 to 0.22.1
    79ff09e9 Bump k8s.io/apimachinery from 0.22.0 to 0.22.1
    f3863189 Bump k8s.io/kubectl from 0.22.0 to 0.22.1
    32d96cbe Bump google.golang.org/grpc from 1.39.1 to 1.40.0
    de44545a Bump github.com/onsi/gomega from 1.14.0 to 1.15.0
    44385679 Bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4
    dd011a46 Bump google.golang.org/grpc from 1.39.0 to 1.39.1
    3db8a88c Bump Kubernetes to v1.22.0
    231cf44f Bump k8s.io/api from 0.21.3 to 0.22.0
    032832ec Bump k8s.io/cri-api from 0.21.3 to 0.22.0
    64e1ad02 Bump k8s.io/kubectl from 0.21.3 to 0.22.0
    918e5c77 Bump k8s.io/apimachinery from 0.21.3 to 0.22.0
    6ccbb79b Bump github.com/docker/docker
    a2e29a4c Bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3
    0cfc8b32 crictl: Adds support for updating resource limits for Windows Containers
    d6c95411 Bump k8s.io/api from 0.21.2 to 0.21.3
    a9dc7558 Bump k8s.io/kubectl from 0.21.2 to 0.21.3
    88e4d31b Bump k8s.io/apimachinery from 0.21.2 to 0.21.3
    d7f79299 Bump k8s.io/cri-api from 0.21.2 to 0.21.3
    5a43f6cd Bump github.com/onsi/gomega from 1.13.0 to 1.14.0
    e89ffa50 Update GitHub actions to go 1.16 and remove .travis.yml
    e5045b08 Bump google.golang.org/grpc from 1.38.0 to 1.39.0
    31e70ff9 Update critest Windows tests.
    03fa217f chore: switch containerd branch to main
    aef70e40 Bump k8s.io/cri-api from 0.21.1 to 0.21.2
    f6f6a393 Bump k8s.io/api from 0.21.1 to 0.21.2
    b90eefd5 Bump k8s.io/kubectl from 0.21.1 to 0.21.2
    85fa1307 Bump k8s.io/apimachinery from 0.21.1 to 0.21.2
    bb845cfd rm_force_while_container_running_fix
    e866f8ff Bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
    a8e055d2 Bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
    9de2a5e4 Bump github.com/docker/docker
    c83bed06 Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
    c9cb3790 Bump github.com/onsi/gomega from 1.12.0 to 1.13.0
    1d34ea0c Add global handler for Interrupt signal

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 11:00:24 -05:00
Bruce Ashfield
1589b430e3 cri-o: update to 1.22.1
Bumping cri-o to version v1.22.1-5-ge3dfe61ca, which comprises the following commits:

    d89a55e91 gh-actions: add sed for kube e2e
    b1ac0896f release-notes: update to main
    a90fcad56 test: add label for openshift e2e in dockerfile
    1495b80e8 bump to 1.22.1
    4ce3396b9 Skip volume relabel for super privileged containers
    66e3210e0 test: skip certificate check for downloading parallel
    91acfb2e7 test: fix shmft
    325ec64d5 vendor: update to selinux 1.9.1
    8bacf3132 test: fix selinux test failures
    116eff337 server: FilterDisallowedAnnotations of containers earlier
    e595eeb06 server: conditionally relabel volumes given annotation
    69dfc4bc4 test: refactor allowed_annotation tests
    92810c137 server: reduce args in addOCIBindMounts
    54f343719 server: mount cgroup if hostNetwork
    b40d9220b server: use container level host network setting
    53755727a server: don't recalculate hostnet
    a220ddf71 server: set spec when dropping infra
    85043dab6 server: don't wait forever on conmon cgroup move fail
    764e83f44 Do not log if Intel RDT is not supported
    4542e5166 call cmd.Wait() in all cases we call Start()
    2bd8e315b oci: call wait on conmon if cgroup move fails
    d45f1f112 Fix missing quantile in `latency_microseconds_total` metrics
    6a8cb41cd oci: use conmon for exec again
    ddef4d063 install dependency in test step
    f74d274fa blockio: apply annotations and blockio classes to Linux.Resources
    7b3f68fa8 blockio: handle class configuration file if set
    d7444c86d blockio: enable setting blockio class configuration file
    5aacbedb2 fix checking in openpgp_tag.sh
    2bfcfb6fb config: set internal_wipe to true by default, and deprecate the option

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 09:29:22 -05:00
Bruce Ashfield
17e0be0dc3 cri-o: switch from master -> main
cri-o has joined the projects switching their default branch to
main (and removing the old one).

We update our recipe to avoid fetcher errors.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 09:24:34 -05:00
Bruce Ashfield
81e445d1bc containerd: update to 1.5.8
Bumping containerd to version v1.5.8, which comprises the following commits:

    ef071b07b mailmap: Add Kevin Parsons
    2385fd14d Prepare release notes for v1.5.8
    15d8c03e3 schema1: reject ambiguous documents
    833407fbf images: validate document type before unmarshal
    01428ec40 Fix containerd fails to pull OCI image with non-`http(s)://` urls
    2bd3f18d9 [release/1.5] go.mod: Bump hcsshim to v0.8.23
    047ea15d2 [release/1.5] go.mod: Bump ttrpc to 1.1.0
    7b20299bc [release/1.5] update Go to 1.16.10
    641976bea [release/1.5] update Go to 1.16.9
    b988fc918 Output a warning for label image labels instead of erroring
    3109820f5 Update test timeout based on recent cancellations
    16762f3e5 Fix spelling mistake in Windows snapshotter
    6094bc770 Use DeactivateLayer to recover layers that we cannot rename
    bf02a8330 task delete: Closes task IO before waiting
    aa7c9d9da Fix pull fails on unexpected EOF
    bc2f973ff Prepare release notes for v1.5.7
    f95fca079 btrfs: reduce permissions on plugin directories
    68119b417 v1 runtime: reduce permissions for bundle dir
    97db45e83 v2 runtime: reduce permissions for bundle dir
    bc8fdf832 Update release notes and mailmap
    77dafa20c Prepare release notes for v1.5.6
    a4b51d119 Fix panic in metadata content writer on copy error
    147705920 Use github images for integration tests
    514137aa0 cri: add devices for privileged container
    6bfd09f7c Enable image config labels in ctr and CRI container creation
    923088852 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
    4133c775c go.mod: update runc to v1.0.2
    011fb4c0b update runc binary to v1.0.2
    210d3bc15 Fix content copy to not ignore unexpected EOF
    a863339c5 [release/1.5] update Go to 1.16.8
    f3d46f828 CI: Switch to available latest images
    c7ed09d55 Adding testing of two devices in a directory
    0ca2e2751 Fix dir support for devices V3 (#4847)
    0fd19511e go.mod: Update hcsshim to v0.8.21
    c0534c168 [release/1.5 backport] cri: filter selinux xattr for image volumes
    27e164648 Allow expanded DNS configuration

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 09:15:09 -05:00
Bruce Ashfield
433417791e conmon: update to v2.0.30
Bumping conmon to version v2.0.1-288-ge67bb4d, which comprises the following commits:

    a854c52 conmon: fix error message
    5d5b853 logging: set SYSLOG_IDENTIFIER= with --log-tag
    ed0b60c conmon: free userdata files before exec cleanup
    42cecdf Cirrus: Remove disused scripts
    1c7b233 test: drop seccomp tests
    eb808d2 fix gh action yaml
    e7a5e0c ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
    f263cf4 logging: new mode -l passthrough
    f231c7f ctrl: delete the fifo if it exists
    7cfb1ac conmon_test: fix race condition on os.RemoveAll
    c657db7 integration: use the built binary
    fa1fa36 bump to v2.0.31-dev
    2792c16 bump to v2.0.30
    fec62f1 bump go version for podman tests
    89072ea Update VM Images + Drop prior-ubuntu references
    53c9f75 Remove unreachable code path
    9e54dda exit: report if the exit command was killed
    4d3dba9 exit: fix race zombie reaper
    c834521 conn_sock: allow watchdog messages through the notify socket proxy
    423c391 Add seccomp to build dependency
    9c23760 Update nixpkgs
    3a8c913 make: only define use_seccomp if we're using it
    1d67d9e Makefile: correctly check seccomp notify support
    e796a80 Makefile: make conditional-compilation variable setting uniform
    e83c392 Makefile: unify condition checking
    7381063 Cirrus: Remove outdated/wrong documentation
    4a8762d Cirrus: Fix references to 'master' branch
    1ef2468 Fix docs links due to branch rename

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22 09:00:58 -05:00
Chen Qi
fd6e0cda91 openvswitch: fix configure error with dpdk enabled
When enabling 'dpdk' PACKAGECONFIG, the following error appears.

  | configure: error: Could not find DPDK library in default search path

Fix the error by tweaking the configure option regarding dpdk.
Add pkgconfig to 'inherit' because pkgconfig is required at do_configure
when dpdk is enabled.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-19 08:30:42 -05:00
Bruce Ashfield
538d688aad qemu: convert missed override syntax
During the conversion to the new : override syntax, once instance
was missed. We fix it here.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-16 12:38:15 -05:00
Bruce Ashfield
98f88eed32 docker-moby: update to v20.10.10
Bumping moby to version v20.10.10-9-g7bd682c48c, which comprises the following commits:

    7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage
    34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories
    c7edd308ad [20.10] Update Go to 1.16.10
    6611c72b65 cmd/dockerd: create panic.log file without readonly flag
    4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode
    acb4f263b3 Fix racey TestHealthKillContainer
    59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior
    2c6aa5aad9 Remove needless check
    3285c27503 Fix log statement 'failed to exit' timeout accuracy
    a4bcd4c64f docker daemon container stop refactor
    bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill
    80b7e8b5d7 buildkit: normalize build target and local platform
    c2b9a32875 vendor: Update go-winio to v0.4.20
    c580a02873 [20.10] Update Go to 1.16.9
    129a2000cf [20.10] update containerd binary to v1.4.11
    6835d15f55 [20.10] update containerd binary to v1.4.10
    5730c139f7 Bump swarmkit to get fix for rollback
    59f10e3435 quota: adjust build-tags to allow build without CGO
    fa78afebcf Update Go to 1.16.8
    567c01f6d1 seccomp: add support for "clone3" syscall in default policy
    07728cd2bd update runc binary to v1.0.2
    964768f200 cmd/dockerd: add the link of "the documentation"
    80f1169eca chrootarchive: don't create parent dirs outside of chroot
    93ac040bf0 Lock down docker root dir perms.
    b0c0b73798 bump up rootlesskit to v0.14.4
    decb56ac89 Update Go to 1.16.7

Bumping docker-cli to version v20.10.10, which comprises the following commits:

    9989fdbc4 Update most links in docs to use https by default
    0e20c1fd2 Update Go to 1.16.9
    1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79 docs: some minor touch-ups in checkpoint reference
    8260476a0 docs: remove trailing space to fix generated YAML format
    bce2e1f95 docs: create.md: typo fix
    44064f51c Fix typo in documentation - build.md
    292779add Add doc for BUILDKIT_PROGRESS env var
    f2e79b826 docs: use "console" code-hint for shell examples
    fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089 experimental: fix broken link to "checkpoint and restore" page
    c72057c8d docs: move checkpoint/restore doc from experimental into reference
    77db97d59 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b docs: fix some broken anchors
    d0014a86b docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55a docs: fix search results by filterd is-official
    44fdac11f Update Go to 1.16.8
    061051c24 docs: add missing redirect, and remove /go/experimental redirect
    2012fbf11 Update Go to 1.16.7
    42d1c0275 registry: ensure default auth config has address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-15 23:24:09 -05:00