MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2025-07-19 12:50:22 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,881 Commits 38 Branches 0 Tags 9.2 MiB
93abfdb327
Commit Graph

1881 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bruce Ashfield
93abfdb327 colorama: update to 0.4.5 
Keeping in sync with meta-python. We mainatain our own version of
the recipe, as docker-compose and others have been sensitive to
version bumps in the past.

We pick up the following commits:

    f8ab4fd version bump 0.4.5
    f411cb9 Release checklist: no need to rebuild
    372c486 Omit demo06 from demos.sh
    0f5c36f Further tweaks made to support the release
    c29f133 tweaks for build process
    6105ab3 Mention fixed ValueError at exit in CHANGELOG
    e866230 Release checklist includes '.candidate' releases
    35e9a91 Add methods to ``StreamWrapper`` to allow better pickling
    8ba396b Replace deprecated pypyX with pypy-X.Y
    8a364bd Added test
    788106f Detached stream fix
    7899683 Add light colors in README
    912fe9b Add support for Python 3.10
    53e0db3 Update README-hacking.md
    e8e311b Update README-hacking.md
    69f4644 Replace Travis CI with GitHub Actions
    5ed1070 README suggests not using Colorama to print colors
    536e966 fixup! Fix typo discovered by codespell
    1d92c3a .
    16847d7 Make bandit, codespell, and pytest mandatory tests
    f307a6d GitHub Action to lint Python code
    402d236 Note that escapes are stripped out for redirected outputs.
    eea3a58 Added new demo
    f690a2b Use ASCII decoding explicitly in setup.py
    0275556 Add support and testing for PyPy3
    293d782 Remove discussion of unmaintained nose for running tests
    8f0587b Remove unused test imports and utils
    d8a0836 Add support for Python 3.9
    9946cfb Reference my blog p[ost about annotated tags
    9b770a0 README-hacking on tagging
    86bfecd Add --extra-index-url to test-release scripts
    938f5c5 Add Makefile docstring to test-release
    e0a314e Release scripts now include sdist.
    14a21e9 README mentions Pypy compatibility.
    d8a7ff0 fix README-hacking typo
    99765af Fix README link markup
    d080175 Fix README link markup
    5a393b2 Move contributing info to README-hacking.md
    f7efb11 Fix Makefile PHONY declaration
    759d5c7 Bump to version 0.4.5-pre
    b7596ad Fix Changelog markup
    24721c0 Belated CHANGELOG entries for 0.4.4 release
    688f6cc Unicode README chars that don't render on PyPI
    dc8460c Make tests pass on all OS.
    faafef8 Add light colors in README

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-07-07 10:55:15 -04:00
Andrei Gherzan
a33188fab8 podman: Fix host contamination 
The project's internal Makefile uses BUILDFLAGS variable to pass
arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a
patch to align this and avoid using host headers in which case, a musl
build will fail similarly to:

| [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk'
| [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h💯 undefined reference to `__fprintf_chk'
| collect2: error: ld returned 1 exit status

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-07-05 16:25:25 -04:00
Jeremy Puhlman
320f44c6e9 cloud-init: install sysvinit initscripts 
The redhat versions work with out modification.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-27 23:38:33 -04:00
Jeremy Puhlman
c40479b735 cloud-init: add rdpends for netifaces and charset-normalizer 
Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-27 23:38:33 -04:00
Jeremy Puhlman
66a2fa470b cloud-init: add depend on udev in sysvinit case. 
Just as with systemd, the build needs the dev manager installed
as a dependancy

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-27 23:38:33 -04:00
sakib.sajal@windriver.com
13839c7b13 buildah: add recipe for buildah v1.26 
buildah is a command line tool, to be installed and run on target,
that can be used to:
   - create a working container, either from scratch or using an image
     as a starting point
   - create an image, either from a working container or via the
     instructions in a Dockerfile
   - images can be built in either the OCI image format or the
     traditional upstream docker image format
   - mount a working container's root filesystem for manipulation
   - unmount a working container's root filesystem
   - use the updated contents of a container's root filesystem as a
     filesystem layer to create a new image
   - delete a working container or an image
   - rename a local container

Testing:
Setup the build directory:
   $ . oe-init-build-env <build_dir>

Add to local.conf:
   IMAGE_INSTALL:append = " buildah kernel-modules"
   KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \
                       features/netfilter/netfilter.scc  \
                       features/lxc/lxc-enable.scc"
   IMAGE_ROOTFS_EXTRA_SPACE = "5242880"

Build image:
   $ bitbake core-image-minimal

Run the image:
   $ runqemu nographic kvm qemuparams="-m 4096"

On target:
Pull an image:
   > cnt=$(buildah from fedora)

Or build from Dockerfile
   > buildah bud -t <image_name>:<tag> .

Mount the image:
   > mnt=$(buildah mount ${cnt})

Install packages on the container rootfs:
   > dnf install --installroot $mnt <packages_to_install> -y

Copy local files to the container:
   > buildah copy $cnt <local_file> <dest_on_container>

Save the changes to an image
   > buildah commit --format docker $cnt <name>:<tag>

Run the image using buildah:
   > buildah run $cnt /bin/sh

Or using docker:
   > docker run -it <name>:<tag>

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:11:17 -04:00
Chen Qi
e4e136c520 go-logrus: sync SRC_URI with nerdctl and k3s 
Use the lower case and remove the '.git' suffix to sync with other
go-logurs SRC_URIs in nerdctl and k3s recipes.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:10:22 -04:00
Chen Qi
69ea90a25e netns: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS 
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
614b5dbb4f oci-image-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS 
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
0bad7905e5 riddler: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS 
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
08d50052be oci-runtime-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS 
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
7808674c4c umoci: adjust CGO_CFLAGS and CGO_LDFLAGS settings 
The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
ce03a8868f skopeo: clean up depends and fix CGO settings 
According to https://github.com/containers/skopeo/blob/main/install.md#building-from-source,
the ostree dependency is not needed.

Also, adjust the CGO_CFLAGS and CGO_LDFALGS to use target
flags instead of the SDK ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
8f15a73bcf docker-distribution: upgrade to 2.8.1 
v2.8.1 is the latest stable version.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
1a312f283e docker-distribution: fix build error on new hosts 
Fix settings for GOROOT, CGO_CFLAGS and CGO_LDFLAGS.

The previous setting for GOROOT is no longer valid as the directory
does not exist for now. So adjust the GOROOT setting.

Currently CGO_CFLAGS is set to use BUILDSDK_CFLAGS, and this is
incorrect. We need target flags instead of SDK related flags. Such
setting happens to work for some hosts. However, when building on
newer hosts, we get QA error like below:

  ERROR: docker-distribution-v2.7.1-r0 do_package_qa:
  QA Issue: /usr/sbin/registry contained in package docker-registry requires
  libc.so.6(GLIBC_2.34)(64bit), but no providers found in RDEPENDS_docker-registry? [file-rdeps]

The above error was found on hardknott on host Fedora 35.
Tracking down the error and I found it's using host stuff which is likely
to be caused by using incorrect CGO_CFLAGS. As the master branch is
using the same settings, it has the same issue.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Chen Qi
9c8e3597f7 docker-distribution: fix the inehrit and systemd settings 
In order for systemd variables such as SYSTEMD_AUTO_ENABLE to have
effect, we need to inherit the systemd class. We also need to specify
the package which contains the service.

As go.bbclass already inherits goarch.bbclass, we only need to inehrit
go.bbclass.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:09:46 -04:00
Michal Orzel
b9a94a5fb6 xen: Disable highmem on qemuarm 
By default, highmem option is enabled for machine types later than
virt-2.12. This allows qemu to place devices and RAM in physical
address space above 32-bits. This can cause issues as according to the
documentation Xen supports up to 12GiB of physical address space.
Recently the issue was observed using runqemu, that was causing Linux
running on top of Xen to stall when trying to access ECAM space placed
by qemu at 256GiB mark. Even though this issue is most probably related
to QEMU and not Xen (the investigation showed that it can map ECAM
space correctly), it is best to avoid such issues by disabling highmem
on qemuarm.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:08:37 -04:00
Michal Orzel
17f3d28228 Revert "xen: Disable PCI on qemuarm with Xen" 
This reverts commit fb0a7b97db.

Justification:
Commit fb0a7b97db removed the PCI node from the qemu device tree
due to the issue when trying to access PCI configuration space that
was causing Linux running on top of Xen to end up in an infinite loop.
The investigation showed that the problem occurs due to qemu placing
ECAM space at 256GiB mark. Even though Xen officially supports on arm32
up to 12GiB of physical address space, it is able to map it correctly
for dom0. However, when Linux tries to access the ECAM space and the
stage2 translation fault occurs, HPFAR register contains incorrect IPA.
We can say it is incorrect because using hardware AT instruction or
software lookup, we can obtain the correct IPA from the same VA. This
can suggest that the problem is related to QEMU fault handling.

Instead of removing the PCI node the follow-up commit will disable
highmem option in qemu which will cause placing ECAM space in the
32-bit space.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 12:07:45 -04:00
Bruce Ashfield
ec96eab80c k3s: update recipe formatting and map googlesource to github 
Reformat the k3s depedencies and src_uri into a more readible and
maintainable format.

We also map googlesoruce to github for better fetching, as suggested
by Diego Sueiro <diego.sueiro@arm.com>.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-20 11:46:46 -04:00
Bruce Ashfield
4c0f2dbe12 cri-o: update to 1.24.1 
Bumping cri-o to version v1.24.1

We refresh one patch, add add textrel to our QA check skip list.

Which imports the following commits:

    489819e33 bump to v1.24.1
    8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max
    fc852b402 add support for conmon log-global-size-max
    77f0429d9 oci: cap exec sync length
    9441b6700 Fix review issues
    ee1a8519f Fix it case failed
    027ab3f50 Fix review issues
    db4a4aa51 Add integration test for remove paused ctr
    76d1a929e 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one
    3b25e48e4 fix review issues
    eff3af248 Try to force delete ctr when in paused state
    62d81d722 vendor: bump crypto package
    3d516c53b oci: Move exec probe process to container cgroup, if enabled
    8294126fa config: Add monitor_exec_cgroup config option
    9a2723cb4 Reenable pod runtime in package spec
    ae024bd0a dependencies: Upversion conmon dependency to v2.0.27
    1737a4702 Sanitize conmonrs log level and print used version
    5658fd35a Wrap runtime pod errors
    b4bbd4d94 openshift test: use go 1.18
    aa13dfb7b openshift test: add skip_pod_runtime to cri-o spec
    d6aff5b63 Bump nixpkgs and use go1.18
    4864ffc60 Fix golangci-lint errors
    d0664581d add runtime pod
    c33e14fc1 vendor conmon-rs
    3b80d009b oci: add IsInfra method
    0f601939e oci: lock for runtime creation
    1376307fb test: use go 1.18 for lint
    b98f15851 Move WillRunSystemd call after iterating the mounts
    2a75c8307 Add sha256sum bundle files to uploaded artifacts
    9f6a6724d crio:fix a bug about log container
    901310bdd oci: use runtime handler level monitor fields
    12758b2b3 config: assume default conmon cgroup if it's not specified
    240de5f3f template: add comment to runtimes table
    5a8223c75 config: replace Conmon specific fields with runtime handler versions
    de2105a17 main(): don't treat reexec.Init() == true as an error
    1de3e5ed2 crio:try fix integration test failed, because unpause not on time
    6dfc68de4 config: increase pids limit to unlimited and deprecate it and logSizeMax
    9ff165b4e bump ocicni to 0.3.1
    b447dff77 bump containernetworking cni to 1.1.0
    3fa33fe48 crio: unpause ctr after test
    8e9ddee87 crio:fix golint check warning
    019c578fa fix(stats): incorrect id on zfs driver
    153bb668c crio:fix crun it failed
    87f7f00f3 crio:update status after pause/unpause container
    54912d7c8 oci: cleanup log path if the container failed to create
    7a65dc340 utils: remove unused io related packages
    9b111b532 runtime_vm: use containerd deps for container io directly
    2da7482db remove the external dependency on the conntrack binary
    1955cc167 go.{mod,sum}: update CDI deps to v0.3.2.
    a8687861c server: no longer use hardcoded timeouts
    64270ef91 fix builds by passing -buildvcs=false on 386
    48230e006 test: bump to go 1.18.1
    d41e3cbe6 Disable systemd-mode cgroup detection conditionally
    e10376810 crio: Fix review issues and make format shell file
    78308acd4 Add bats test to ensure namespaces are cleaned up on pod stop
    ec1414424 pinns: Check calloc return value
    adfe57b5d bump to 4.11 image
    5e72b4133 crio: Fix code style
    270d195ec crio: implement extended interface for pause/unpause container
    31c278301 seccomp: drop unshare syscall from default profile
    1098cc9b9 Retry to set CPU load balancing before return the error
    7ccafd559 build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.1.0
    9b735153b Fix integration tests
    862b27b8c Switch to registry.k8s.io for the sandbox Image:
    9ebdeef1e Change the mcs order in selinux.bats to test the canonization of selinux label
    1a9a3fdae Canonize selinux label for comparison with filesystem label
    b106fcd71 oci: fix segfault in pod stop code
    3e9d77257 capabilities: drop inheritable
    afe738b18 Bump ocicni to v0.3.0
    7b5a67f51 Switch to ginkgo/v2
    1999baa2f Add bats test for infra_ctr_cpuset taskset
    9fada28f7 Add bats test for zombie conmon cleanup
    15afd20ee Update golangci-lint and config
    13d7b9738 Bump golang to 1.18.x
    1af1f8af2 pinns: Pass sysctls as repeated '-s' arguments
    eb8715d30 Fix shell format
    c3095bf20 README: Update EOL & Version Skew links
    05c443b06 config/sysctl: fail if there is a + in the value
    ea39e74f2 Fix critest
    739379b0c Enable `--seccomp-use-default-when-empty` by default
    98c18d1cb test: update to new runc behavior
    4cb2407a2 Automatically chcon and restorecon on get script
    bef94e1f8 Pin `github.com/u-root/u-root`
    3be4dba79 Switch to `main` for `get` script
    09399e41f Bump nixpkgs
    51a800af0 Pin nixos/nix version
    97df87f71 test: allow state of failing tests to be kept intact.
    32d682800 factory: take capabilities setup
    a643dad27 Add dedicated security information
    d65414758 test/crio-wipe.bats: don't nuke $TESTDIR too early.
    ff36ee6e0 test/cgroups.bats: fix incorrect setup order.
    128165130 test/cdi.bat: add CDI integration tests.
    a0d3fd8aa config,cli: add configuration for CDI.
    f35fba448 pkg/container: implement CDI device injection.
    572616137 go.{mod,sum}: update deps, vendor.
    683baa221 contrib/test: force BATS symlink in place.
    0be4d0611 contrib/test: always install BATS for integration.
    2426bdb4c openshift e2e: bump cri-o version
    e337fa364 bump to 1.24.0
    5cad5f287 test: avoid concurrent crictl config writes.
    bc240fd4c server: stop deleting pod from idIndex if already gone
    a4b5f0c15 CI: use kubernetes from git tip
    03064f4ca test/e2e: update skipped test list
    65f93912d contrib/test/int/build/kubernetes: rm deprecated RunAsGroup
    2e7a4d375 server: use syncfs instead of fsync
    d9102e748 config/sysctls: validate against invalid spaces
    230409570 [gitpod] use latest workspace full
    6c3144af2 hack/build-rpms.sh: fix yum-builddep failures
    52adfe025 ci: bump shellcheck to 0.8.0
    92edea6dd test/apparmor: suppress bogus SC2031/2031
    ca10da055 test/cni_plugin_helper: suppress shellcheck warning
    0655dd213 test/test_runner: rm eval, fix comment
    1acde4379 OWNERS: move rhatdan to emeritus approvers
    d280c71ce OWNERS: move runcom to emeritus approvers
    4041adc55 utils: Sync: use f.Sync
    14d742672 Deny empty `localhost/` AppArmor profiles
    bd02dac92 OWNERS: add first round of reviewers
    626446e5c OWNERS: Move @sboeuf to emeritus approver
    8aab1e8f2 int/storage: getReferences: fix gocritic warning
    f1ca25bc5 server: fix (rather than ignore) gocritic warning
    bc839156e server/streaming: specify the linter
    fa2fd247f ci: bump golangci-lint to 1.44.0
    cc6ed292b scripts/release-notes: fix printf args
    f0e70901e scripts: fix a typo
    b1705dc28 int/version: fix forcetypeassert linter warning
    851916f0d server/container_create_linux: fix forcetypeassert warning
    a2760072b utils: fix forcetypeassert linter warnings
    d295f8b24 server/streaming: fix nolintlint warning
    dd70c87ab int/storage: fix gosimple warning
    f26fafdc5 int/config/cgmgr: fix stylecheck warnings
    bc91cdb57 Format code using gofumpt 0.2.1
    98d945cc9 Makefile: fix a comment
    bb96cd907 test/crio-wipe: fixups
    107fe3853 ISSUE_TEMPLATE: fix grammatical error
    1affa13d9 OWNERS: move @sameo to emeritus_approvers
    4dc761f9f ISSUE_TEMPLATES: update membership form to be reviewer form
    592aa5159 ISSUE_TEMPLATES: add a couple of more
    238e4d009 image: use imageCache value for ImageStatus()
    411e15058 contrib/bundle: remove deprecated kubelet option.
    15048929c minor edit: removed dead link from TOC
    0dd5d2d00 oci: drop WaitContainerStateStopped
    6449ff0d3 oci: fix a leaked goroutine
    40165cb5b internal/factory/container: initialize from pkg/container
    0dabb91b3 internal/factory/sandbox: initialize from pkg/sandbox
    6e2472c92 README: update branches
    a0f88d3a5 Updated format
    a53f1d221 Generate checksum files for artifacts
    728731808 test: add test for skipped sysctls
    1667b5a66 server: skip sysctls that would affect the host
    a7ac4683c deep copy List{PodSandbox,Container} structs
    183ac018f GOVERNANCE: fix links
    18dfcd273 oci: always have conmon log to syslog
    c424e85e7 README: add reference to governance
    008b3541a add GOVERNANCE.md
    33063001c issue templates: add membership request form
    aa8130f62 Add Debian_11 OS variable on installation instructions of Debian Signed-off-by: Wang Kai <persistence201306@gmail.com>
    e5dad09ee criocli: produce diff-friendlier zsh completions.
    b299c80c5 ci: use main branch for conmon
    bcf069b12 server: fix race with kubelet
    0769411bb Fix runtime panic on pod sandbox stats retrieval
    ef1746095 update go to 1.17 in go.mod
    acde72556 Reuse createContainerIO in CreateContainer
    0731a9b57 Fix vm containers couldn't restore after CRI-O restart
    386d4a447 ci: use main version of runc
    28585442e openshift e2e: bump ci image
    35c02b56e server: fix a potential NULL-pointer dereference.
    20370fa95 Documentation: expand on CNI CIDRs in the kubeadm tutorial
    143a623ad test: update tests for allowed_devices
    56929cdb9 config: add AllowedDevices option
    2aceed0f0 pass the main mount point to fix crypto profiles binding
    6b887e9c3 Add Nestybox to the CRI-O adopters list.
    33e25b47b server: drop duplicate log message
    25a2eec40 pkg/container: fix container device GID fallback.
    a68b239af bump crio commit for upstream k8s CI
    d7da8b2b0 adds config template linting
    86e43fc28 adds comments to default values
    ff2a04e8b server: don't set memory swap when it's not enabled
    5ebc4a407 Inherits storage configurations from storage.conf if crio config does not set
    d0d8fb3a7 use cmdrunner singleton
    2237f2658 conmonmgr: refactor for new CommandRunner
    878040d10 cmdrunner: update mocks and add target to makefile
    b3bb86659 config: prepend commands with taskset if InfraCtrCPUSet is configured
    e9f0bb6c8 cmdrunner: add tests for prepended commands
    04e9c61e3 cmdrunner: create singleton
    fd2e2aeec Use timeout for conmon cgroup move
    9af5e3363 build(deps): bump google.golang.org/grpc from 1.42.0 to 1.43.0
    9a051dede Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels
    347f04161 test: add test ensuring a stopped pod is restored
    86fd03b81 sandbox stop: remove namespaces
    e02d5bf15 restore: handle removed namespaces
    334e925ac Partially revert "restore: restore stop before managing namespace"
    948b92bd7 restore: ensure containers are wiped on reboot
    c3f75859b build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    78e1c80af build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
    d8ea9f6ca vendor: bump c/image to 5.17.0
    11c127f3d pinns: Add LDFLAGS to Makefile

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-07 22:02:15 -04:00
Changqing Li
e851963070 criu: fix patch fuzz and remove unused patch 
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-07 10:03:30 -04:00
Chen Qi
2e787b9d75 criu: fix QA issue about shebang too long 
There's a QA issue about criu complaining the shebang
of crit script is too long. We should replace it with
'#!/usr/bin/env python3'.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-07 10:00:37 -04:00
Bruce Ashfield
14427646ae umoci: update to 0.4.7-tip 
Bumping umoci to version v0.4.7-98-gdb97609, which comprises the following commits:

    d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    9db1db9 dependabot: ignore github.com/klauspost/compress for now
    c20d1ba build(deps): bump github.com/vbatts/go-mtree from 0.5.0 to 0.5.1
    defa147 build(deps): bump actions/setup-go from 2 to 3
    d7c6b89 build(deps): bump actions/cache from 2 to 3.0.1
    e76ee78 build(deps): bump actions/checkout from 2 to 3
    852bb73 build(deps): bump actions/download-artifact from 2 to 3
    83706fc build(deps): bump actions/upload-artifact from 2 to 3
    b93cb2a build(deps): bump codecov/codecov-action from 2 to 3
    671fa10 build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
    abd9d71 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0
    597a50e build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
    87f2e17 mutator: allow setting annotation data when generating a layer
    e14c6d5 README: s/anuvu/project-stacker
    c67586e build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
cf21b60f4e podman-tui: update to 0.3.x -tip 
Bumping podman-tui to version v0.3.0-82-gcd51747, which comprises the following commits:

    da1eea3 new ui color theme
    36230ca CI setup
    cb43be9 update vagrant box to Fedora 36
    7ad72ce pre-commit configuration and fixes
    a6749cd Bump github.com/docker/docker
    8cadc6f Bump github.com/containers/storage from 1.40.2 to 1.41.0
    9070e74 doc update - install.md
    ef05222 pod/container top dialog ui update
    91e73ee image history dialog ui update
    097674e container stats dialog ui update
    fb11dc7 image search/pull dialog ui update
    b6bda1a sort categories for pod/containers create and image build dialogs
    5dd3e38 code coverage for ui/dialogs package
    5bde8a5 Bump github.com/containers/podman/v4 from 4.0.3 to 4.1.0
    6ffb274 Bump github.com/docker/docker
    bd08f23 Bump github.com/containers/buildah from 1.25.1 to 1.26.1
    697eb4f Bump github.com/containers/common from 0.47.5 to 0.48.0
    ff98068 Bump github.com/containers/storage from 1.40.0 to 1.40.2
    bc47ea7 Bump github.com/containers/storage from 1.39.0 to 1.40.0
    1c46d42 exec terminal update (automatic resize and detach)
    1ef0c11 adding image tree command
    5db9ef8 adding security options fields to pod create dialog
    aeeba55 adding container create security options fields
    5c90866 adding format and security options fields to image build dialog
    3d0b91b doc update
    0f9ead6 adding format and security options fields to image build dialog
    1091a3f windows support
    26134e7 removing unused connection dialog
    206ac15 fixing golint
    4ef15e4 removing image index from name field string search result
    d9ed9e3 activating left/right key to switch between different pages (#55)
    06f342c adding image import command (#51)
    c986342 activate <delete> key for removing items (#50)
    9a962a8 Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0
    e29ce96 using utils pkg common variables and functions
    61904de new feature: image save
    c9f132a doc update - fedora podman-tui rpm
    372c71f Bump github.com/containers/buildah from 1.24.3 to 1.25.1
    d592f1d error dialog ui update to separate the title from the error message
    1b9045f new feature: image build
    c7f3032 Bump github.com/containers/podman/v4 from 4.0.2 to 4.0.3
    0311f68 Bump github.com/containers/storage from 1.38.2 to 1.39.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
8aa3d557c6 podman: update to v4.1.0 
Bumping libpod to version v4.1.0-8-gcedbbfa54, which comprises the following commits:

    4ae7161c4 Fix strange buildtag edit
    44d253b6c Add support for machine events on Windows
    8e3a991ff test: fix "podman search format json"
    ab4d33e14 Update README for 4.1.0 release
    3b4de8efc Bump to v4.1.1-dev
    e4b039020 Bump to v4.1.0
    e87b07f7c Release notes for v4.1.0 final
    a8b55a3b9 pass networks to container clone
    b2025c64f Add more unit tests
    7b64cd783 libpod: treat ECONNRESET as EOF
    6d1d6cc0b play kube default log driver
    d57bbdb5c Cirrus: Fix ownership of repos. to keep git happy
    4716b6b1b build: disable --output for podman-remote clients
    fbab06796 Vendor in containers/buildah@v1.26.1
    ee4e0aa43 Temporarily skip netavark/aardvark e2e test
    8b897a586 Cirrus: Temporarily update netavark/aardvark-dns
    b73bdcdb9 Cirrus: Test w/ netavark/aardvark-dns in F36+
    80cf4e31c Cirrus: Update to F36 CI VM Images
    0d8ff6fa9 Add 4.1 branch to API documentation
    6ea122f6e Report correct RemoteURI
    2fd178ac0 Misc readme update to retrigger CI
    d3f406e9f podman system reset removed machines incorrectly
    8cbe598fd Bump to v4.1.0-dev
    0abf24320 Bump to v4.1.0-rc2
    d45a68bce Update release notes for v4.1.0 RC2
    9e83826d5 machine events: only open sockets when needed
    a21e11236 Add podman machine events
    bea8301a8 Implement --format for machine inspect
    3ab8fa679 Release notes for more v4.1.0 backports
    8842e9b7a Additional stats for podman info
    642204821 libpod: unset networks before storing container conf
    9d5158e94 Implement machine inspect for WSL
    b7e8b25d4 Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1
    65108dede Use simulated dual-stack binds when using WSL
    95633146e libpod: host netns keep same /etc/resolv.conf
    1cdf18a86 fix incorrect permissions for /etc/resolv.conf in userns
    bbb10bb52 pkg/api: do not register decoder in endpoint handler
    c441a1756 fix broken hooks-dir test
    fb14171cb enable errcheck linter
    724965132 libpod: unlock containers when removing pod
    159d597cd remove unused codepath for creating/running ctr in a pod
    a9a70a949 Refactor machine inspect
    1d2120412 image search --format: add completion for go template
    d4fe645ed shell completion --format: use structs by reference
    524b53610 image --format: fix add completion for go template
    a9deb5c67 shell completion --format: use anonymous struct field once
    835b89c60 network inspect --format: add completion for go template
    68f7349bc shell completion --format: work with nil structs
    07bc615b4 podman machine starting test
    66500b82a Report properly whether pod shares host network
    8627b5151 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
    9f6131e9c Three manual fixes
    ecc39b595 Ginkgo: use HaveField() for better error checking
    e5d6b6b0a volume: add new option -o o=noquota
    77f147468 podman search: truncate by default
    b1089a23b Produce better test error messages
    4ff6884fb Add CreatedSince & CreatedAt format fields to podman image history
    3226561cf Allow changing of CPUs, Memory, and Disk Size
    cb399245b CI: emergency fix for broken go get
    1593e75c6 Bump to v4.1.0-dev
    146dcb28d Bump to v4.1.0-rc1
    b2beb5a53 Add release notes for v4.1.0-RC1
    3bcfd256b manifest endpoints fix ordering
    4a4906b91 pkg/bindings: manifest remove 3.X API support conditional
    e9599fb1a fix manifest modify endpoint to respect tlsverify param
    609b52f72 Bump version to v4.1.0-dev
    652921119 Bump github.com/fsnotify/fsnotify from 1.5.3 to 1.5.4
    70a2c0008 play kube respect hostNetwork
    7259a6315 Truncate annotations when generating kubernetes yaml files
    4f8ece76f play kube: do not skip containers by name
    51fbf3da9 enable gocritic linter
    1a9f110b5 Cirrus: Fix skipping all/most tests
    7c914355d [CI:DOCS]Remove unnecesarry files
    c090931da remote: do not join user NS
    49264c714 vendor in containers/(common,buildah,storage,image)
    facc009ca benchmarks: add more image benchmarks
    ee9d755c5 Robustify nginx tests
    ecd245d8f Unit tests for pkg/specgenutil pkg/signal
    c5e48f12e Cirrus: Re-fix build-cache miss on main
    eb4e53087 Revert "Cirrus: Fix cirrus cache race on bin/podman"
    b0d36f635 Implements Windows volume/mount support
    3b6ffcd29 Update to use new common machine API
    d441a711e machine starting status
    833456e07 Add podman machine test suite
    3d1e40608 Pass --tls-verify option in podman -remote build
    62f4ae98f fix staticcheck linter warning for deprecated function
    a615cb2fe Docs rootfull -> rootful
    2f53259a8 Cirrus: Fix cirrus cache race on bin/podman
    1260bf631 Revert "Switch all rootful to rootfull"
    c7b16645a enable unparam linter
    94d043be8 Modify the pod name suffix '_pod' to '-pod'
    0d83f4b76 Allow filtering of "removing", it is a valid status
    13079abe3 Add support for passing --volumepath
    44642bee8 libpod/networking_linux.go: switch to sha256 hashes
    ad249222d Fix hang in test_connect
    cafb76b63 Increase verbosity and sequencing of APIv2 testing
    5b4af0584 replace golint with revive linter
    454468e03 Update test to run network check in both rootless and rootfull mode
    3e240c3ae Bump github.com/fsnotify/fsnotify from 1.5.2 to 1.5.3
    104042e20 Bump github.com/container-orchestrated-devices/container-device-interface
    e0f5bf279 test/system: add containers.conf test for new /etc/hosts options
    e912f1b68 Improve /etc/hosts documentation
    e4ab8a5be shared netns and --add-host should conflict
    cf1b0c196 network dis-/connect: update /etc/hosts
    128086639 libpod: fix c.Hostname() to respect the utsNsCtr
    696bcd277 use etchosts package from c/common
    1514d5c93 silence deprecated warnings for manifest functions
    2a8e43567 enable staticcheck linter
    56d6ee080 move golang.org/x/crypto/ssh/terminal to golang.org/x/term
    e39f4495e Run codespell on code
    f87f23e3b specgen-volumes: parse --mount using csv-reader instead of split by comma
    93ecafcba Workaround criu re-linking output in system test
    cc3790f33 Switch all rootful to rootfull
    566b6071d Cirrus: Fix missing git-enforced runtime identity
    80c0fceb2 Add support for --userns=nomap
    8080a5f8e Revert "container,inspect: convert Entrypoint to array instead of a string"
    17105028e vendor in latest containers/(storage,common,image)
    537540196 podman container clone -f
    d24507c1e Fix upgrade tests assuming storage.conf exists
    c67d6a52c Fix using --network-backend on podman-remote
    dc02e99d8 Fix size-check to display more context
    b7dcbfed0 Update release notes for v4.0.3 and v3.4.7
    55a5bd8a0 Optimization: skip tests in some circumstances
    df156ab78 [CI:DOCS] podman build --pull=*missing*
    fa239f2ec Bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.2
    eb7171262 systemd socker activation: check listener
    ff2e6291a vendor c/common
    13c6fd067 system service: remove unnecessary pointer to listner
    97ee41146 system tests: add assert(), and start using it
    93b8ef627 Buildah Vendor Treadmill: the script
    d865fcc5e Fix e2e tests referencing generic env. var.
    bbe1063a5 Add checkpoint image tests
    756ecd540 Add support for checkpoint image
    fca3397dc Update github.com/checkpoint-restore/checkpointctl
    80d175279 slirp4netns: actually make ipv6 default
    519535daa healthcheck: set default healthcheck Interval if not specified in image
    0162f678c benchmarking Podman: proof of concept
    a2077e5ea Add missing events to podman-events man page
    be0da4a22 Translate Memory Limit to Swap in API
    1b3dc899d manpage vs --help checker: better error messages
    99bcd6595 Add --quiet to machine ls
    e716790af Fix typo in generate kube docs for selinux labeling
    08d08f995 Correct play kube docs for selinux labeling
    b03466cb7 Update troubleshooting.md
    a4798ab4e Respect "Rootful" when starting WSL API Forwarding
    d68e9faee Update vendor of storage,common
    900739d13 Add container.conf default volume to init
    f38b03d37 Fix Memory Swappiness passing in Container Clone
    2a75164e2 add a regression test for CVE-2022-1227
    3f2939c2e run, create: add --passwd-entry
    97f93dc78 Revert "images --size"
    3da3afa57 Add log rotation based on log size
    2f4874eb0 Update containers/common to main branch
    9ef745d54 System tests: Usage checks: better error messages
    63c38b99f Fix --tail log on restart problem
    02b7eeff6 Allow HTTP attach to stopped containers
    970c8d472 compat api: use network mode bridge as default
    6c878b7a5 docs: fix typo in podman-container-clone.1.md
    20384b037 build(deps) bump CDI dependency from 0.3.0 to 0.3.2
    8710197e8 Introduce machine inspect
    3987c529f Add support for ipc namespace modes "none, private, sharable"
    2c800a717 System tests: fix oops in start --filter tests
    5e680d54e Bump golang.org/x/crypto to 7b82a4e
    8fb9dbdb4 machine,rm: Ignore ENOENT while cleaning machine
    857b36ca8 Update vendor of storage,common,image
    fb4fc03ec Pretty print systemd services file
    81a95fade run, mount: allow setting driver specific option using volume-opt
    923d454b2 [CI:DOCS] Rewrite rootless --userns=auto docs
    61cf22288 Cirrus: Fix unsupported cirrus-cron build status
    ee4a583ed pkg/bindings: document requirements for use
    d8a902a16 API: use no_hosts from containers.conf
    615099ddb System tests: reenable ps --external test
    784a13f57 network create: add support for ipam-driver none
    2508913a0 If newuidmap or newgidmap fail, then check their permissions
    0cebd158b container,inspect: convert Entrypoint to array instead of a string
    dc17195bd Vendor in new opencontainers/selinux
    e133a06d2 images --size
    a95f7f9ca Cirrus: Multi-arch build auto-update + tagging update
    356d53434 Fix docker socket handling
    90ac1ba2a Prevent set command from updating a running instance
    db7d69950 Add Podman Hello to readme.md
    e73547a63 Unify examples section across several man pages: pod rm/start/unpause
    9c72ea343 machine refactor 3: add symlinks for sockets
    bd4b9c3d5 build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0
    dd9eec06a Unify examples section across several man pages: init/kill
    164b64ea3 specgen: do not set OOMScoreAdj by default
    bf4318e60 Allow creating anonymous volumes with --mount
    1cd529b22 specgen: permit --privileged and --cap-add
    d55c46f8c Cirrus: Allow manually running image-build task
    5fcd2a7ac Cirrus: Upd VM images to fix multi-arch build bug
    f8c2df87c Add build test for .containerignore tar file
    e5745139a cli commands: better error for unsupported commands
    daeea48df kube: configmap volume should be reused if already exists
    9cacc18c9 Set permissions for GitHub actions
    a06df4fc1 Machine refactor part 2
    81632722e systemd: enable all cgroups when running as a service
    23cdbf322 test/apiv2: support netavark
    1f1cf7bd4 rootless netns: move process to scope only with systemd
    1ffcc4a88 Add 'Os' to be queried via 'version' output
    b60854e8b Prefer registering both machine and global pipe
    2a882b770 Upgrade tests: reexamine cross-testing matrix
    eedaaf33c fix slirp4netns port forwarding with ranges
    c185d8c0d Add option for pod logs to display different colors per container.
    7a5342804 fix pod volume passing and alter infra inheritance
    c602084a5 size-check: display binary size and growth
    61c518627 upgrade tests: fix networking problems
    21502987b replace hpcloud/tail with nxadm/tail
    f6963cea1 Cirrus: Build multi-arch images + manifests
    cdf74f208 Set systemd mode if entrypoint begins with /bin/sh -c
    a8e6c639e Unify examples section across several man pages
    6e0e1cbdd Migrate machine configs
    1821eb383 Pin actions to a full length commit SHA
    2ac897aa0 Machine refactor - part 1
    38bd4010c network setup: fail if slirp4netns is not installed
    82ed99b6a event: generate a valid event on container rename operation
    798988050 Fixes errors from 'manifest push' being dropped in remote case
    d106b294b Switch all calls to filepath.Walk to filepath.WalkDir
    446c35efd Vendor common Added patch provided by rhatdan to add support for shareable
    ab41037c8 Update filter docs with missing entries and add negation option.
    3cc173937 Resolves #13629 Add RegistryAuthHeader to manifest push
    7680211ed Remove error stutter
    76614c461 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0
    ffbab30d7 Run codespell to cleanup typos
    25345c087 build(deps): bump github.com/rootless-containers/rootlesskit
    640c2d53a test: fix podman run test as rootless
    4f73cf3fc Misc typo fixes
    c01d1f8e3 [CI:DOCS] docs: drop note about upcoming RHEL 7.7
    d4bf6b4d7 clarifying "loginctl enable-linger" section in doc
    61b2d8844 Bump github.com/prometheus/client_golang to v1.11.1
    b469bf5c0 container: allow clone to an existing pod
    eb5b08f62 build(deps): bump github.com/docker/docker
    7189b6f26 podman machine set: clarify --rootful option
    c0bbca8c4 podman machine: fix port forwarding with proxy
    7ae52e86f readConmonPipeData: try to improve error
    809f82bdb specgen: fix typo
    bf6430d18 Remove experimental warning from podman-remote rpm
    e90b35438 machine-set: fix example for setting rootful flag
    752680366 play: kube: use in-memory kubefile and remove tempfile
    9b0c8d23b man pages: sort flags, and keep them that way
    346beec35 Remove nix packages, since no one is supporting this
    5e28cbc5f When running systemd in a container set container_uuid
    da5891130 fix podman machine start log level detection
    59dc70bb4 podman machine start: lookup qemu path again if not found
    5669ffb35 document that using libpod package directly is not supported
    cdda1924a Explicitly use IPv4 to check if podman-machine VM is listening
    a6504963b Fix manifest 4.0 endpoints [NO NEW TESTS NEEDED]
    5b2597d52 Fix a potential race around the exec cleanup process
    aafa80918 do not set the inheritable capabilities
    eedce31eb import: allow users to set os, arch and variant of imports
    13b6ff652 docs: Fix links to Containerfile and containerignore
    41a6dd36f Update swagger to improve compatibility [NO NEW TESTS NEEDED]
    88d4db009 Binary growth check, part 2 of 2
    3627dfc52 podman unshare: document that command cannot be used with remote
    130bcc3a9 podman stats: improve cpu average calc
    0edb3ddd3 podman stats: calc CPU percentage correctly
    1a7f5b3d5 Cirrus: Publish binary artifacts on success
    501355d4a Fix unreadable netavark logs
    5e1e13c18 add contextDir to tar on remote
    c25213c8f fix compose test error in retry logic
    84e7ce82d Binary growth check, part 1 of 2
    06dd9136a fix a number of errcheck issues
    07999b237 [CI:DOCS] troubleshooting: document rm in image stores
    6c030cd57 fix a number of `godot` issues
    68b94338b linter: enable makezero
    0f12b6fe5 linter: enable nilerr
    081e09143 linter: document nolintlint
    7c047bfbe linter: document tagliatelle
    9e8cca26a test/e2e/inspect_test.go: wait for sessions
    fb792f7ed linter: enable ineffassign
    f72a678f2 linter: enable errchkjson
    bb6b69b4a linter: enable wastedassign
    070e40149 linter: enable interfacer
    90f37e1a6 build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
    6d6bdabc8 healthcheck: stop showing wrong status when --no-healthcheck is set
    8961dd345 Makefile: build podman-remote-static with cgo disabled
    1b68c3826 libpod: drop warning for Fedora 31
    63bf3991e vendor containers/storage with https://github.com/containers/storage/pull/1165
    e3cc0717b podman system df: fix percent calculation
    53e770566 pod system tests: clean up stray image
    026bd9b20 bump golangci-lint to v1.45.0
    2460261fb Fix documentation typo
    36ff8f2b3 Add Windows installer support for upgrades
    95dad4d8a podman rmi --ignore
    4408db330 Updated dependabot to GitHub actions
    cc7b5974b Fix type-o and cleanup doc punctuation
    54641f5f7 fix compose test flake
    622d0068e fix dual stack network e2e flake
    57cdc21b0 vendor c/common@0ededd18a1
    ea08765f4 go fmt: use go 1.18 conditional-build syntax
    3c968c3d2 Handle incompatible machines
    d3e3ea843 logformatter: link to bats sources on error
    4b359e459 Set names in compose tests based on version
    bde3ca8c3 Add tests with Docker Compose v2
    1fd76c901 podman machine: remove hostip from port
    0793a5834 Deduplicate between Volumes and Mounts in compat API
    ff54aaa63 podman create: building local pause image: do not read ignore files
    714e5a13d Separator is no longer prepended when prefix is empty on podman generate systemd
    1387b5bd8 Add test for BZ #2052697
    449f2fc0b Set rawimage for containers created via play kube
    c732adf2d build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
    ca7376bb1 Exit with 0 when receiving SIGTERM
    29f24ff68 [CI:DOCS]: Mention netavark limitations for macvlan/ipvlan drivers
    45df70ec1 fix empty newline in version output
    33aa2f2d1 Fix windows win-sshproxy build
    0db184fb0 fix breaking change in pkg/bindings
    19d0c5a8a pkg/k8s.io: add small readme with copyright notice
    dd9e4dc72 pkg/k8s.io/api/core/v1: remove unneeded types
    f106867ac pkg/k8s.io/...: remove more unneeded files
    0612f859b pkg/k8s.io/...: remove protobuf field tags
    f8577766d pkg/k8s.io/...: fix lint errors
    a0ad1f2ad remove unneeded k8s code
    918fc88a9 move k8s deps into podman
    3d82d17f8 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0
    439323cd2 Bump github.com/docker/docker
    daebf50b8 apply-podman-deltas: skip modified test case for --add-host which adds anomaly
    3bb046a5e slirp: fix setup on ipv6 disabled systems
    217197340 Fix typo
    e8968c867 Add support for --chrootdirs
    c845216fd docs: podman-build add --no-hosts
    780d4b2d6 vendor: bump buildah, c/image and c/storage
    edc62b529 Fixes TTY & resizing on Mac and Windows
    6e41d1f44 podman.spec.rpkg: enable rhel8 builds on copr
    c06460bea Bump golang to 1.17 in `vendor-in-container`
    4ab24a068 Bump github.com/docker/docker
    931477461 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0
    e6b64703f Bump github.com/containernetworking/plugins from 1.1.0 to 1.1.1
    a5353207c Bump github.com/vbauerster/mpb/v7 from 7.3.2 to 7.4.1
    e5a86d293 CI: fix golangci-lint installation
    feaa1a134 Add podman play kube --annotation
    30bf065c3 Use github.com/vbauerster/mpb/v7 in pkg/machine
    8f2f8d4ca use gopkg.in/yaml.v2 instead of v3
    166edf00a Fix handling of tmpfs-mode for tmpfs creation in compat mode
    e56150264 Bump github.com/docker/distribution
    db3010279 [CI:DOCS] troubleshooting.md: mention "podman unshare chown 0:0 path"
    a7c4691bf Improve agent install message to add restart instructions
    5b51b42cc machine rm -f stops and removes machine
    8cfdddf50 test/e2e: add aardvark specific tests
    e66c46441 Skip flaky pprof tests
    bd0766e96 selinux: remove explicit range transition when starting conmon
    9ce3c0a87 Move secret-verify-leak containerfile into its own Directory
    611b45c51 Inspect network info of a joined network namespace
    d2f77c256 Set default rule at the head of device configuration
    cdb6deb14 MacOS improvements
    6dfe63463 [CI:DOCS] DISTRO_PACKAGE.md: List the packaging changes for v4
    639e6899b [CI:DOCS] RELEASE_PROCESS.md: cosmetic fix
    f13ca392c [CI:DOCS] Remove "(1)" from web tab text
    01514f33b Fixes: #13301 ("machine rm removes the mounted socket file on macos")
    b20993393 [CI:DOCS] troubleshooting.md: Improve language and fix typos
    d302c08cf Throw an error if kube yaml has duplicate ctr names
    dca2e7924 Move all python tests to pytest
    2fb6a8daf Add ExitCommandDelay configuration use in API exec handler
    63f92d0a6 test: add a test to verify race free concurrent/parallel builds
    a3497cee9 RELEASE_PROCESS.md: build artifacts locally
    a901c919a libpod: pods do not use cgroups if --cgroups=disabled
    0bd0ad594 container: workdir resolution must consider symlink if explicitly configured
    410d28660 vendor: bump c/image to main/9a9cd9
    08036e9af vendor: bump c/storage to main/d06b0f
    e71d497e7 libpod: drop warning if cgroup doesn't exist
    22f331e54 Revert "use GetRuntimeDir() from c/common"
    572e6464f Use storage that better supports rootless overlayfs
    7729afe97 Refactor docker-py compatibility tests
    675d775eb Add --context-dir option to podman play kube
    40c6192e9 Add the names flag for pod logs
    2e14c7270 Allow setting binarypath from Makefile
    569319d39 Vendor in containers/common@main
    3dc1b8e83 Add podman volume mount support
    dbf34bfe7 Clarify v2 API testing for podman vs docker clients
    988190db5 copr packaging: use generic macros for tmpfiles and modules load dirs
    6f71fa6d9 Show version of the deb package in info output
    a7fc8a146 Improve the error message for usused configMaps
    f3e883fb4 Bump github.com/containernetworking/plugins from 1.0.1 to 1.1.0
    e1b298166 docs: generate-systemd: pod requires an infra container
    eab5a4cfb Load ip_tables modules at boot
    fbbcb957c container-commit: support --squash to squash layers into one
    ed73040b3 kube: honor mount propagation mode
    5cba5cbfd play kube: set defaults to container resources
    46b7c5bc6 Bump CDI go dependency to v0.3.0
    6f7a803d0 Cleanup display of trust with transports
    80c5962db Add containers-common spec and command to podman
    4a60319ec Remove the runtime lock
    c4dfbd58f Don't log errors on removing volumes inuse, if container --volumes-from
    b19251242 system tests: cleanup networks on teardown
    ea01f8963 [CI:DOCS]Update networking tutorial for netavark
    9ce61e3a4 kube: honor --build=false and make --build=true by default
    44d037898 provide better error on invalid flag
    f018c07ed System tests: show one-line config overview
    f150f2921 troubleshooting.md: tweak subuid paragraph, encryption
    fc5cf812c use GetRuntimeDir() from c/common
    94df70151 Implement Podman Container Clone
    23a7f4e0d Option --url and --connection should imply --remote.
    d12489858 [CI:DOCS] troubleshooting: mention overlay option for --rootfs
    8c9d37faf [CI:DOCS] troubleshooting: mention machinectl and systemd-run
    db4d15e85 Propagate $CONTAINERS_CONF to conmon
    d615ab81f tests: Remove inaccurate comment
    7b55ab442 Cirrus: Disable F34 aka prior-fedora testing
    632c089cc Cirrus: Use updated VM images
    aa1703037 Update release notes with v4.0.0 additions
    1252f9dd3 Fix a potential flake in volume plugins tests
    38811823c vendor: update c/storage to 26c561f9
    095026c3d Bump github.com/containers/buildah from 1.24.1 to 1.24.2
    90066af62 Calculate device major/minor using bitshift
    13f6261f8 increase subuid and subgid in image
    7a83d16f9 [CI:DOCS] logformatter: handle python logs
    a811acf74 pkg: support passing down options for idmap
    50fbe52f4 Update to podman4 copr stream
    c74f8f04f Introduce podman machine init --root=t|f and podman machine set --root=t|f
    8f5ba05ec Initial implementation of mac forwarding using a privileged docker sock claim helper
    b62816578 e2e: merge after/since image-filter tests
    10580ec19 Unify ls --filter docs for networks and pods
    6a8d29eea Changes of docker descriptions
    5b98efe1d Fix images since/after tests
    4a166c8b6 podman network: add documentation for netavark
    a0991c6f3 create: Fix key=value annotation in the flag output
    a8928a3ca ignition: propagate proxy settings from a host into a vm
    3b5a3f4a7 [CI:DOCS] Add --userns=keep-id, --uidmap, --gidmap troubleshooting
    73f35ff2a Temporarily pull machine images from side repo
    6f9f78f7f enable netavark specific tests
    4b90542d5 Fix checkpoint/restore pod tests
    4966adddb Make sure building with relative paths work correctly.
    3f28d697e Add 409 response to swagger godoc
    40ba9f10e Make the hello image leaner [NO TESTS NEEDED]
    a0b38c071 troubleshooting: add doc for ssh into a container
    87cca4e5e Modify /etc/resolv.conf when connecting/disconnecting
    c4676c571 Add version guard to libpod API endpoints
    1512740e3 Bump c/common to v0.47.4
    829f88d74 Show API doc for several versions
    3762946e6 Do not set the network config dir to cni plugin dir
    411fca0b3 helloimage: header symmetry
    e405fefb3 [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response.
    61f97083c idmap should be able to be specified along with other options
    5bcd9134f Bump github.com/docker/distribution
    58adf1a83 fix: Multiplication of durations
    8d0fb0a4e move rootless netns slirp4netns process to systemd user.slice
    d0d1ffa43 Cleanup: remove obsolete/misleading bug workaround
    3b561a468 compat: endpoint /build must set header content type as application/json in reponse
    44fb431a3 Fix: Do not print error when parsing journald log fails
    f0826b3a4 Cirrus: Expand netavark testing to include rootless
    3cf64a8e9 tests: retrofit healthcheck system tests
    4f77331c9 healthcheck, libpod: Read healthcheck event output from os pipe
    d733c3baa append podman dns search domain
    54cf0f05e Bump github.com/buger/goterm from 1.0.1 to 1.0.4
    1d1b2b150 Update containers/buildah v1.24.1
    7cfe4d3fe System tests: revert emergency skip of checkpoint tests
    185dc5b2f Bump github.com/containers/common from 0.47.2 to 0.47.3
    642a691cb Cirrus: Add netavark/aardvark system test task
    daf51eafe Bump github.com/containers/image/v5 from 5.19.0 to 5.19.1
    ebbf10ae8 Cirrus: Log netavark/aardvark binary build info.
    9eb88ea47 Podman pod create --share-parent vs --share=cgroup
    55c4a1468 system prune: remove all networks
    fee76f6ab Document `schema` values in the `--url` flag
    5468757ad play kube envVar.valueFrom.resourceFieldRef
    725a6f893 pkg/bindings/images.Build(): slashify "dockerfile" values, too
    7d3ad6081 netavark e2e tests
    25e073492 Revert "Move each search dns to its own line"
    3d3e8d8f8 hack/bats: fix broken usage message
    903f9a3a2 Cirrus: Minor - limit release task applicability
    a1bc8cb52 Move each search dns to its own line
    4ddc4e79d Only change network fields if they were actually changed by the user
    c4dfd004a libpod: enforce noexec,nosuid,nodev for /dev/shm
    b6fe7d119 Fix size to match Docker selection
    012e24b79 [CI:DOCS] Add a hello world image to quay.io
    852ca9a7a Cirrus: Add [CI:BUILD] magic that only builds
    cd8b30289 COPR: fix dependencies
    85e8c1c9a docs: clarify rootless net stats
    865f0a197 libpod: report slirp4netns network stats
    6609bb73a Fix use of infra image to clarify default
    2ceab1194 play kube envVar.valueFrom.fieldRef
    e7bdd1260 CI: fix nightly builds
    009d9eb67 Add notes to "--oom-kill-disable" not supported on cgroups V2
    a8fb8f52c Adapt podman images ls filters docs to be aligned with prune filters docs
    636543787 Clarify remote client means Mac and Windows
    6f2b027b3 ignition, machine: delegate cpu,io cgroup controllers to machine's default users
    56d95172f podman image scp syntax correction
    8842dab68 Cirrus: Also download aardvark-dns binary
    b381d7565 Cirrus: Add e2e task w/ upstream netavark

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
cd0a2c949a cni/plugins: update to 1.1.1 
Bumping cni-plugins.git to version v1.1.1, which comprises the following commits:

    b1782e5 ipam/dhcp: Fix client id in renew/release
    b03deb6 call ipam.ExceDel after clean up device in netns fix #666

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
a40e168766 cni: update to 1.1.0 
Bumping cni to version v0.8.0-102-g940e662, which comprises the following commits:

    99eac24 cnitool: address golint error
    1054f8e libcni: handle empty version when parsing version
    54f1587 Switch to ginkgo/v2
    aba8f8b add security heading to README
    4b46fe6 Maintainers: add Mike Zappa
    2f6d8b1 introduce hybridnet to thrid-party plugins
    48fac6a Update README.md
    798e63d Updated README.md to include Netlox loxilight CNI

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
b7485d340d runc/docker: update to 1.1.2 
Bumping runc to version v1.1.2-9-gb507e2da, which comprises the following commits:

    bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
    1feafc31 ci: bump golangci-lint to v1.44
    89f79ff0 libct: StartInitialization: fix %w related warning
    3b7f2605 Format sources using gofumpt 0.2.1
    eeac4e77 build(deps): bump actions/checkout from 2 to 3
    cd7fa00d Vagrantfile.fedora: fix build wrt new git
    cdfdbe55 VERSION: back to development
    a916309f VERSION: release 1.1.2
    364ec0f1 runc: do not set inheritable capabilities
    8959e372 VERSION: back to development
    52de29d7 VERSION: release 1.1.1
    2636e1cb CHANGELOG.md: add 1.1.1 release notes
    036cc348 CI/cirrus: add centos-stream-9
    db953158 README.md: add cirrus-ci badge
    ea19181e README,libct/README: fix pkg.go.dev badges
    8290c4cf libct/cg: IsCgroup2HybridMode: don't panic
    ee7ba6cb configs/validate: looser validation for RDT
    96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation
    35784a3e ensure the path is a sub-cgroup path
    986e7c53 libct: fixStdioPermissions: ignore EROFS
    5053a065 libct: fixStdioPermissions: skip chown if not needed
    d2939b6b libct: fixStdioPermissions: minor refactoring

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
3012689f5e runc: update to 1.1.2 
Bumping runc to version v1.1.2-9-gb507e2da, which comprises the following commits:

    bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
    1feafc31 ci: bump golangci-lint to v1.44
    89f79ff0 libct: StartInitialization: fix %w related warning
    3b7f2605 Format sources using gofumpt 0.2.1
    eeac4e77 build(deps): bump actions/checkout from 2 to 3
    cd7fa00d Vagrantfile.fedora: fix build wrt new git
    cdfdbe55 VERSION: back to development
    a916309f VERSION: release 1.1.2
    364ec0f1 runc: do not set inheritable capabilities
    8959e372 VERSION: back to development
    52de29d7 VERSION: release 1.1.1
    2636e1cb CHANGELOG.md: add 1.1.1 release notes
    036cc348 CI/cirrus: add centos-stream-9
    db953158 README.md: add cirrus-ci badge
    ea19181e README,libct/README: fix pkg.go.dev badges
    8290c4cf libct/cg: IsCgroup2HybridMode: don't panic
    ee7ba6cb configs/validate: looser validation for RDT
    96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation
    35784a3e ensure the path is a sub-cgroup path
    986e7c53 libct: fixStdioPermissions: ignore EROFS
    5053a065 libct: fixStdioPermissions: skip chown if not needed
    d2939b6b libct: fixStdioPermissions: minor refactoring

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
3cf7b71086 docker-ce: update to 20.10.16 
Bumping moby to version v20.10.16, which comprises the following commits:

    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10
    be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf
    414a9e24a7 update containerd binary to v1.6.4
    47b6a924b6 update containerd binary to v1.6.3
    6d7c2b2d26 update containerd binary to v1.6.2
    91708bf704 update containerd binary to v1.6.1
    53ae17008e Revert "[20.10] update containerd binary to 1.5.11"
    961b9a78d5 update runc binary to v1.1.1
    97972dac5f update runc binary to v1.1.0
    033a819714 [20.10] update golang to 1.17.9
    a80884126b Jenkinsfile: add workaround for CVE-2022-24765
    09d6fcdfec update to go 1.17.8 to address CVE-2022-24921
    5957684b2c Update Go to 1.17.7
    55b72c70ba Update Go to 1.17.6
    fdf3020bd5 Update Go to 1.17.5
    36e164ba80 Update Go to 1.17.4
    ecfba8f588 Update Go to 1.17.3
    4e14dcc125 Update Go to 1.17.2
    c32b5ece31 Update Go to 1.17.1
    7096508811 vendor: update archive/tar to match Go 1.17.0
    a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17
    95cc7115fb hack/vendor.sh: allow go version to be specified with .0
    949c33b1c5 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    4e81bcf380 Makefile: update buildx to v0.8.2
    74e699c8d3 Makefile: update buildx version to v0.6.0
    bc3cc2e7ac Makefile: install buildx from binary release, instead of building
    492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41)
    3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41)
    55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41)
    c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41)
    c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32
    7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41)
    29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41)
    77f6564369 api: docs: document MountPoint fields (v1.25-v1.41)
    51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41)
    3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40)
    6e8b9809b7 Correct type of Mounts in ContainerSummary in docs
    621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41)
    bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41)
    88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit
    3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41
    b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait
    ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41)
    19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1
    32fe0bbb91 daemon: use RWMutex for stateCounter
    ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus
    3bd611d7a5 log error message when receiving an unexpected type error
    7dfe7a1752 [20.10] update containerd binary to 1.5.11
    af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791
    5f9753ae73 client: remove containerd "platform" dependency
    4df345e65d client: remove unused Platform field from configWrapper
    dd38613d0c oci: inheritable capability set should be empty
    2825bf7123 Only check if route overlaps routes with scope: LINK
    f5c56eaca8 [20.10] bump swarmkit for config size increase
    ce3b6d1ae9 distribution: retry downloading schema config on retryable error

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
ade7848788 docker/moby/libnetwork: update to -latest 
Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits:

    9db86fb7 Only check if route overlaps routes with scope: LINK
    7b9c2905 fix port forwarding with ipv6.disable=1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
ea4c3c3eba docker/moby: update to 20.10.16 
Bumping moby to version v20.10.16, which comprises the following commits:

    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10
    be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf
    414a9e24a7 update containerd binary to v1.6.4
    47b6a924b6 update containerd binary to v1.6.3
    6d7c2b2d26 update containerd binary to v1.6.2
    91708bf704 update containerd binary to v1.6.1
    53ae17008e Revert "[20.10] update containerd binary to 1.5.11"
    961b9a78d5 update runc binary to v1.1.1
    97972dac5f update runc binary to v1.1.0
    033a819714 [20.10] update golang to 1.17.9
    a80884126b Jenkinsfile: add workaround for CVE-2022-24765
    09d6fcdfec update to go 1.17.8 to address CVE-2022-24921
    5957684b2c Update Go to 1.17.7
    55b72c70ba Update Go to 1.17.6
    fdf3020bd5 Update Go to 1.17.5
    36e164ba80 Update Go to 1.17.4
    ecfba8f588 Update Go to 1.17.3
    4e14dcc125 Update Go to 1.17.2
    c32b5ece31 Update Go to 1.17.1
    7096508811 vendor: update archive/tar to match Go 1.17.0
    a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17
    95cc7115fb hack/vendor.sh: allow go version to be specified with .0
    949c33b1c5 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    4e81bcf380 Makefile: update buildx to v0.8.2
    74e699c8d3 Makefile: update buildx version to v0.6.0
    bc3cc2e7ac Makefile: install buildx from binary release, instead of building
    492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41)
    3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41)
    55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41)
    c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41)
    c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32
    7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41)
    29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41)
    77f6564369 api: docs: document MountPoint fields (v1.25-v1.41)
    51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41)
    3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40)
    6e8b9809b7 Correct type of Mounts in ContainerSummary in docs
    621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41)
    bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41)
    88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit
    3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41
    b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait
    ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41)
    19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1
    32fe0bbb91 daemon: use RWMutex for stateCounter
    ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus
    3bd611d7a5 log error message when receiving an unexpected type error
    7dfe7a1752 [20.10] update containerd binary to 1.5.11
    af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791
    5f9753ae73 client: remove containerd "platform" dependency
    4df345e65d client: remove unused Platform field from configWrapper
    dd38613d0c oci: inheritable capability set should be empty
    2825bf7123 Only check if route overlaps routes with scope: LINK
    f5c56eaca8 [20.10] bump swarmkit for config size increase
    ce3b6d1ae9 distribution: retry downloading schema config on retryable error

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
f1c385030c kubernetes: update to 1.24 release 
Bumping to the 1.24 kubernetes release from May 2022.

We refresh one patch, and drop another as the build race looks to be
different (since it is no longer installed seperately).

Otherwise the build is the same, and smoke tests have passed.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
420cb45082 kubernetes: inhibit package QA warning 
WARNING: kubernetes-1_v1.23.6+gitfbcfa33018159c033aee77b0d5456df6771aa9b5-r0
do_package_qa: QA Issue: kubernetes-misc: ELF binary
/usr/bin/kubectl-convert has relocations in .text [textrel]

This textrel is acceptable, so we can inhibit the warning.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:32:13 -04:00
Bruce Ashfield
1004c059c9 kata-containers: add skip message 
Let's skip these until someone is interested enough to fix the
recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:31:54 -04:00
Bruce Ashfield
6e2826e6f5 kata-containers: add protocol=https to SRC_URIs 
Although the components of kata containers aren't functional, we
keep it around in case someone is interested in fixing the recipe.

It was skipped from the global protocol=https addition for that
reason .. but in case someone is running global/world fetches, this
can cause a problem. So we add the missing procotol specification.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-03 09:31:54 -04:00
Bruce Ashfield
cba2694dac podman-compose: switch 1.0.3 to stable branch 
It looks like 'devel' in podman compose gets rewritten, so our
1.0.3 commit is no longer on that branch, breaking fetches.

Moving to stable and changing the commit to avoid the issue.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-06-01 12:41:54 -04:00
Christopher Clark
8e8f59d007 xen, raspberry pi: replace linux-yocto-dev with linux-yocto 5.15 
The default preferred Linux kernel for Xen on the Raspberry Pi 4 is
linux-yocto. The alternative provided option is linux-yocto-dev, but
this is unintentionally a branch tracking configuration rather than a
fixed revision.

Remove the linux-yocto-dev in favour of the linux-yocto kernel version
5.15 which has been tested and verified working on the board.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-25 12:19:57 -04:00
Ross Burton
55bf71938e xen: make LZO dependency optional 
xen-tools has an optional dependency on LZO.  As this is a unmaintained
compression format with better alternatives (such as Zstd), disable it
by default.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-25 11:39:14 -04:00
Chen Qi
d9189db0aa ceph: fix gcc-12 compile failure 
Add two patches to fix gcc-12 compile failure.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-25 11:39:13 -04:00
Bertrand Marquis
fb0a7b97db xen: Disable PCI on qemuarm with Xen 
Remove the pci node from the qemu device tree when runqemu is used with
xen-qemuboot.

Linux is ending up in an infinite loop when trying to access PCI
configuration space when running on top of Xen on arm32.
As we do not need or support any of the devices on PCI on arm32 at the
moment, just remove the node from the device tree generated by qemu.

The problem does not appear at the moment without Xen and it is unclear
why it is with Xen.
This will be investigated but in the meantime provide a working
configuration for users.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-18 13:52:14 -04:00
Bertrand Marquis
b5b3fcf492 xen: enable qemuboot for arm32 
Add required variables to generate a qemuboot devicetree for qemuarm.
With this change, Xen and dom0 can be started using runqemu.

Xen is started using qemu kernel argument and the devicetree is modified
to properly boot dom0 (which is loaded in memory).
This is using the same system as qemuarm64.

At this stage dom0 is hanging on PCI device scanning.

This patch is also using qemuarm64 as machine for arm64 bit instead of
aarch64 to allow adding support for other machine (an example a Xilinx
board that can be emulated with using an other xen machine).

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-18 13:52:14 -04:00
Bertrand Marquis
8bf2e18234 qemuboot: Fix command line and enable other machines 
Fix qemuboot-xen-dtb to properly add dom0 bootargs by using a parameter
instead of directly using the QB_XEN_DOM0_BOOTARGS inside the function.
When not done, the variable is empty and dom0 bootargs are wrong in the
device tree.

Use QB_MACHINE to generate a device tree with qemu instead of always
using the armv8 machine. This will allow this class to be used for other
machines later.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-18 13:52:14 -04:00
Bertrand Marquis
3e6c50b794 xen: Fix class inherit in xen-image 
Remove inherit of qemuboot classes when not build for qemu in
xen-image-minimal.
When reverted the handling for only adding inherited classes for qemu
was kept but the line always inheriting them was kept to.
This patch is fixing that so that qemuboot classes are now only added
when the image is built for qemu.

This fixes commit 27e5ade0ab

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-18 13:52:14 -04:00
He Zhe
b7e5662405 libvirt: Fix keeping restarting 
LIBVIRTD_ARGS has been moved to libvirtd.service since v8.1.0. Move our mode
setting accordingly, otherwise libvirt would keep restarting and VMs would be
constantly stopped.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-18 13:52:14 -04:00
He Zhe
c578929ca3 criu: Upgrade to 3.17 to fix restore and fix build 
- To fix restore Segmentation fault
criu restore -d -D checkpoint
8306: Error (criu/cr-restore.c:1480): 8331 killed by signal 11: Segmentation fault
Error (criu/cr-restore.c:2447): Restoring FAILED.

- Inherit pkgconfig to fix build warning
pkg-config not found

- Define PLUGINDIR when doing instll to fix build failure
mkdir: cannot create directory '/var/lib/criu': Permission denied

New commits since 3.16.1:

4f8f295e5 criu: Version 3.17
991f27c84 ci: skip new hugetlb maps09/maps10 tests for pre-dump
0c1f0256f kerndat: handle the case when hugetlb isn't supported
17a19676c zdtm: handle the case when hugetlb isn't supported
c1380c077 ci: workaround race between sit module loading and bridge test
550eafc5d ci: print kernel modules list
f635b61f4 test: install criu in /usr
2f0f12839 readme: Add badge links to workflows
d14dbb8c7 sk-unix: rework bind_on_deleted() return codes
5b872c718 proc_parse: Fix parsing bpf map_extra
d40b332ce bpf: update deprecated API
f641e0c4b ci: print mountinfo instead of mount cmd output
5c0b4fbcd ci: criu-fault: skip inotify_irmap fault-injection on btrfs
7ac85cab8 scripts/ci: fix ZDTM_OPTS variable passing
ead227994 zdtm: temporary disable rseq02 test
db9ec1361 zdtm: add rseq02 transition test with NO_RESTART CS flag
1e0bed3d6 rseq: handle rseq/rseq_cs flags properly
13338dee5 Revert "test: disable rseq also on Archlinux"
064e9925a zdtm: add transition/rseq01 test for amd64
2d3354e7b cr-dump: fixup thread IP when inside rseq cs
4c7ece0bb compel: add helpers to get/set instruction pointer
441310c26 zdtm/static/rseq00: fix rseq test when linking with a fresh Glibc
f70ddab24 pie/restorer: unregister (g)libc rseq before memory restoration
e1799e530 include: add thread_pointer.h from Glibc
267c1fdad ci: add Fedora Rawhide based test on Cirrus
03aff7e82 Revert "ci: disable glibc rseq support"
51e0d3e29 zdtm: add basic static/rseq00 test for rseq C/R
c5162cef5 rseq: fail dump if rseq is used but host doesn't support get_rseq_conf feature
f81e3062c rseq: initial support
bd9ee3255 cr-check: Add ptrace rseq conf dump feature
ca54dfcac util: move fork_and_ptrace_attach helper from cr-check
8b3a76b64 kerndat: check for rseq syscall support
de03eb435 compel: add rseq syscall into compel std plugin syscall tables
4adec8e8e cgroup: test for --manage-cgroups=ignore
2b6901707 cgroup: fix --manage-cgroups=ignore
c71d4a54a cgroup: fix "unified" path
8ddd7f483 ci: add codespell to lint target
e7b1c8579 Fix remaining codespell warnings
0194ed392 Fix some codespell warnings
3f1800477 Add .codespellrc
f16976c03 test/zdtm.py: rename a var
fab46c310 test/exhaustive/unix.py: rename a var
2a60b4974 Rename useable to usable
c4bdde213 criu/mount.c: separate \t
51837a65e criu/files.c: some renames
bd3a21e0b test/javaTests: rename ser to s
777ad1966 Nit: rename sie to se
716e56f37 Typo: mmaped -> mmapped
d9411c948 test/zdtm/static: s/NODEL/NO_DEL/
58d76cb16 test/zdtm/static/inotify_system.c: s/inot/infd/
0cb8b9c04 test/zdtm/static: use param not parm
58b120b06 criu/pie/restorer.c: use param not parm
747ec75d9 criu/arch/s390/include/asm/restorer.h: fix comments
8bb05e3bf ci: Switch to non overlaysfs tests
45e048d77 criu: generate unique socket names
75064b742 mount: fix -Wunused-but-set-variable for Clang 15
46e4773c3 style: delete some redundant code
5109fccf8 apparmor: Fix -Wfortify-source for Clang
791651f1b criu-ns: add a helper to hold a pid namespace
805559c1d scripts/ci: mount test cgroups once
ab6191ccd zdtm: use unique holder for cgroups
73a783ac1 mount: make error messages differ in different places
165d5a2cd mount-v2: make mount engine fallback messages loglevel debug
8867840c8 zdtm/mount-v2: disable pty-console test
c8121ed74 test/jenkins: test for old mount engine
3c0e99ccf ci: make others/mnt_ext_dev also run for old mount engine
642abd133 zdtm/mount-v2: disable mnt_tracefs test
f736d88c9 zdtm: add propagation group with mount flags to mount_complex_sharing
ef53df471 zdtm: add mount_complex_sharing test
486e1fd85 zdtm: add new mnt_ext_sharing test for mount-v2
3db949d82 ci: run tests for old mount engine
8d6e2d044 zdtm: enable mounts compat mode on restore with --mntns-compat-mode option
b35c842d0 mount: add new mounts-v2 engine
c29675c9a mount: export global variables for mount-v2
972a59862 mount: export several functions for mount-v2
3229e7f58 mount: export common defines for mount-v2
0723d0cd9 mount: remove double ns_id declaration
1f4a9a531 files-reg: export parent dirs helpers for mount-v2
f032741cd mount: add plain mountpoints
f2d1c7fab config/rpc: add new option --mntns-compat-mode for old mount engine
f6b52c711 crtools: move check_options after kerndat_init and log_init
6a25420d3 util: add resolve_mountpoint helper
cef8366f5 kerndat: check whether the openat2 syscall is supported
387f4652b compel: add open_tree syscall
a946b946e kerndat: Check for MOVE_MOUNT_SET_GROUP availability
0ca89b99b files-reg: teach clean_one_remap to work with mount-v2
9a0918497 files-reg: teach create_ghost to work with mount-v2
169f95c39 files-reg: split create_ghost_dentry out of create_ghost
9fb3984a7 mount: add service_mountpoint getter for ->mountpoint
65967a84b mount: use ns_mountpoint instead of mountpoint where possible
eedbc6f47 mount: use ns_mountpoint in mnt_depth
ae0b218c3 mount: use ns_mountpoint in aufs_parse
7b968ceea mount: use ns_mountpoint in collect_mntinfo
f2bf6597c path: simplify mnt_get_sibling_path via get_relative_path
abbc70adc mount: use ns_mountpoint for children-overmount check
c17695cb1 mount: use ns_mountpoint in root_path_from_parent
010295b8f mount: use ns_mountpoint in validate_children_collision
07eb01593 mount: skip root yard children from mnt_needs_remap check
e8de10a4f mount: use ns_mountpoint in mnt_is_overmounted
b954e5136 autofs: use ns_mountpoint in autofs_create_dentries
7a67949e5 mount: make general place for shared variables on mount-info on restore
0c41c1187 mount: fix broken remounted_rw check
718247045 mount: move root yard tree merge as early as possible
770cdbfb9 mount: prepare is_overmounted as early as possible
83bbf1b05 mount: add helper mnt_get_external_bind_nodev
0fd0e03a2 mount: do not override master_id to -1 for root binds
4f156f32b mount: put external slavery mounts to separate mnt_ext_slave list
ef79912c1 mount: add can_receive_master_from_root helper
b52fcb284 mount: replace CRTIME_MNT_ID with HELPER_MNT_ID
4736a7240 mount/restore: leave ns_mountpoint NULL for aux binfmt_misc mount
16085b5e6 mount/restore: create auxiliary binfmt_misc mount in the root yard
a379d4d94 zdtm: add mntns_pivot_root_ro test
2a3d2bc28 mount: apply superblock flags to nested ns roots
77f67973f zdtm: add mntns_pivot_root test
2fdb4993a mount: allow nested mount namespaces with different roots
cf6fe2d48 mount: add mnt_is_root_bind helper
e50abbd3b zdtm: add mnt_ext_collision test
a963ceb77 mount: restrict mp-external mount map to init container mntns only
007501f98 zdtm: add new mnt_ext_root test
4f9414934 mount: mount external mount before mounting it's binds
d5cb7764e mount: show more info about why we can't mount
685a53eec mount: rework skipping external mounts in dump_one_mountpoint
3b2b80812 mount: split mnt_is_external(_bind) and can_receive_master_from_external
c09bd8941 mount: add mnt_bind_pick helper to pick the desired bind
9d1f39f28 unittest: add some tests for get_relative_path helper
97bd9511c util: add get_relative_path helper
261b7a8fd mount: setup mnt_bind list before using it in mnt_is_external
30261a751 mount: skip fstype and source checks for external mounts in mounts_sb_equal
8d5300aa9 mount: mark mounts of external devices external
e17c1cc12 mount: do not detect non-fsroot mounts as device-external
eda1e5fdb mount: add mntinfo_add_list_before helper for adding to mntinfo list
9649356e3 zdtm: fix mnt_ext_master test to correspond to it's name
5a8fd343f uffd: fix __u64 print format specifier
9e7473516 sk-unix: fix e_str leak in unix_sk_id_add
87d373514 criu/plugin: Add support for criu image streamer
55370b720 criu/plugin: Store BO contents directly to file
ecdf740fa criu/plugin: Add whitepaper document
99a2380fc criu/plugin: Dockerfile for amdgpu_plugin
2095de9f0 criu/plugin: Fix for FDs not allowed to mmap
bd8333009 criu/plugin: Implement sDMA based buffer access
6d7926622 criu/plugin: Restore libhsakmt shared memory files
a218fe0ba criu/plugin: Read and write BO contents in parallel
ba9c62df2 criu/plugin: Add unit tests for GPU remapping
4856e0d4d criu/plugin: Add parameters to override mapping
72905c9c9 criu/plugin: Remap GPUs on checkpoint restore
6e99fea2f criu/plugin: Implement system topology parsing
c4e3ac7fe criu/plugin: Adding check for kernel IOCTL version
55a5993bc criu/plugin: Support AMD ROCm Checkpoint Restore with KFD
71ff9cc04 criu/plugin: Initialize AMD KFD header
91157315b criu/plugin: Skip plugin vmas during premap
63e127fc8 criu/plugin: Add dedicated flag for plugins
e04db0241 criu/files: Add function to return unused FD by pid
653eefea0 criu/plugin: Do not reopen vma fd for plugins
5b0a639a5 files: fix inh leak in inherit_fd_add
060567042 net: fix e_str leak in veth_pair_add
2856d06e3 config: fix ns leak in parse_join_ns
a8dd7d290 ci: run criu-config tests
1c54c45fc zdtm: drop redundant config_inotify_irmap test
d2073cd4d zdtm: add --criu-config option
fc38a01e5 zdtm: use long form cli options
0734fc807 zdtm: sort import lines
0b7965397 zdtm: refactor main
1b4a9df9c sk-unix: fix uint32_t id variable printf format specifier
09fa32a75 tun: fix tun_link leak in dump_tun_link
7e9a9dc34 cr-dump: fix cr_imgset leak in dump_one_task
2747bb2a7 mount: fix e_str leak in ext_mount_add
be78b853d proc_smaps: remove useless nonlinear check
97a998567 compel: set mxcsr during error injection to zero
ef98a71b1 zdtm: fix missplacement of err=True
6b842635b test: disable rseq also on Archlinux
51099d2bb test: remove test for LOCK_MAND flock
247cdc90d bpfmap: handle new field in fdinfo
56df8aeeb ci: skip MAP_HUGETLB tests in stream test
2dc6d146b zdtm: Add MAP_HUGETLB mappings test for parent-child relationship processes
87a5694b4 zdtm: Add shm hugetlb test
d22e472cf zdtm: Add memfd hugetlb test
ffa268896 zdtm: Add MAP_HUGETLB memory mapping test
a26b692c4 uffd: Skip lazy-mode restore on hugetlb mappings
456e50b59 mem: Skip premapping hugetlb mapping
8941b63a4 proc_parse, files: Add support for hugetlb memory mapping
e4fb1dd5f memfd, shmem: Add support for checkpoint/restore memfd and anon shared memory
4d77b19eb ipc: Add support for checkpoint/restore hugetlb System V shared memory
f69c36591 kerndat: Collect hugetlb device numbers
9c7bbfa69 check: Add a check for using memfd with hugetlb
e8087fcff files: generate unique transport socket names
408a7d82d util: add an unique ID of the current criu run
b13b95e52 compel: fix how PTRACE_GET_THREAD_AREA errors are handled
b2ba14a15 restorer: Fix sys_mmap's returned value check
7177938e6 criu-ns: use os.waitstatus_to_exitcode()
bb1b1681a criu-ns: fix exit code o for criu dump
fdf4fda20 pstree: when updating sid for shell job also update matching pgid
89267dbcc ci: install libbsd dependency
48d53b699 Fix formatting in criu documentation
73d6a2c0e test/autofs: fix use-after-free
4d31105c7 ci: set continue-on-error for cross-compile
0568889ee compel: fix parasite with GCC 12
db352ca48 criu: fix configuration file scanner with GCC 12
bf6975c3e compel: fix GCC 12 failure (out of bounds)
6be10a232 zdtm: fix zdtm/static/maps00 case in arm64
6cfad77f0 pagemap: tiny fix on truncating memory image
908e5dd95 lib: added tests for feature check in libcriu
b00b61f0e lib: introduce feature check in libcriu
4c4b2159d ci: added .lgtm.yml file
7f4265dc0 ci: update to latest Vagrant and Fedora images
7400d91f8 contributing: remove old badges and logo
29e221bb7 readme: add docker test badge
6f9d62eb3 ci: test criu-image-streamer with all tests
8ec214d3c mount/btrfs: make check_mountpoint_fd fallback to get_sdev_from_fd
bbf5f642d proc_parse: add helper to resolve sdev from fd
15c42696c mount: remove mnt_fd argument of __open_mountpoint
1e7c62047 mount: split check_mountpoint_fd from __open_mountpoint
1b912802d zdtm/static/uffd-events: add more log messages
ebd03383f zdtm: print tails of all logs if a test has failed
f65098746 test: log testname.out.inprogress if a test has failed
8775cf3a5 ci: reenable the lazy-thp test in the lazy-remote mode
c59abfa81 page-xfer: stop waiting for a new command after a close command
13b726ebc tls: allow to terminate connections synchronously
73d1d0769 uffd: call disconnect_from_page_server to shutdown a page-server connection
4fdf3db31 tls: add more comments
5a2250b1a tls: use ssize_t for return value
89e8e8e69 tls: fix typo
0da88b6da zdtm: Add SOCK_SEQPACKET variants to unix socket tests
530ad9c89 sk-unix: Add support for SOCK_SEQPACKET unix sockets
3d618d0f4 crtools: check that cpuinfo command has sub-command
233f1f1d0 crtools: use new opts.mode in image_dir_mode
3fa85bcdc crtools/rpc: export current criu mode to opts.mode
1b015df9b crtools: remove excess always true condition
be092e25a zdtm: remove mntns-deleted-dst test leftover from git
f92c7f1af zdtm: zdtm_ct fix compilation error with strict-prototypes on
e62e05c2d zdtm.py: clean up MAKEFLAGS env variable before running make instance
af4b26519 tests: added test for single pre-dump support
51a1adbc0 libcriu: add single pre-dump support
119a79885 ci: disable glibc rseq support
9fd000c58 ci: use unstable release for cross-compile
0e04a3c6a libcriu: add setting lsm-mount-context to libcriu
af298353d usernsd: UNS_FDOUT should not require an input descriptor
efe5d9a12 Add documentation for --timeout option
583e8ca05 ci: enable x86 xsave fault injection tests back
1ba443982 x86/compel/fault-inject: print the initial seed
fc1eb01ff x86/compel/fault-inject: bound xsave features set
6186bfa0c test: another try to correctly fix the kernel version
d79d73e3a ci: install procps in Alpine
3eba68089 ci: Enable disabled unix socket related tests
94111596f sk-unix: Fix TCP_ESTABLISHED checks in unix sockets
6930d6a32 util: make page-server IPv6 safe
d57f27bc9 files-reg: try dump_ghost_remap if link-remap failed with error ENOENT
14075baf7 test: do not use --keep-going for single zdtm tests
a52185ffe ci: disable broken tests until fixed
4ab2facb2 make: Explicitly enable FPU on ARMv7 builds
d514bacb4 ci: Run cross compile with debian testing
4c1330bb0 ci: Run cross compile on debian stable
718eb06be clang-format: disable wrong struct pointer declaration format
858002483 zdtm: add ro-mount check after c/r to mntns_ghost01
17357d67f files-reg: temporary remount writable the mount we do unlink on
bd219b69a ghost/mount: allocate remounted_rw in shmem to get info from other processes
cfed6f35e files-reg: fix error handling of rm_parent_dirs
5a0943c90 files-reg: fix error handling in open_path
64b58b514 check: cleanup child processes
156cce78c ci: switch to centos-stream-8
c2fd81903 crtools: ignore SIGPIPE in swrk mode
a491706cc ci: Use latest Fedora for lint ci runs again
eb0dee408 seize: restore cgroup freezer to right state
781676f10 clang-format/zdtm: fix clang complains about strange elseifs
d2b6faf8f tests: improve the deterministic behavior of the test suite
94092ce00 zdtm.py: make tests with --link_remap exclusive
1f9e2c420 ci: disable socket-raw test on centos8
a9d9fb8aa clang-format: make x86_ins_capability_mask human-readable
4ff252656 cr-dump: fail dumping when zombie process with sid 0
26db7adbb clang-format: do automatic comment fixups
206479322 clang-format: do several manual comment fixups
bbfd9031a clang-format: enable AlignTrailingComments
718f4cae2 zdtm: make sock_opts02 also check lock change by SO_*BUF*
3a875cc4c zdtm: add test for socket buffer size locks
e69be16db sockets: c/r bufer size locks
ce5ce285a kerndat: check for set/getsockopt SO_BUF_LOCK availability
2bd709664 sockets: don't call sk_setbufs asyncronously
37a8090d8 tests: improve the image streamer process control
dae0704b6 ci: use Fedora 34 for lint CI runs
f7bc3bdc9 ci: fix userfaultfd test failures
d17eb325c ci: replace deprecated codecov bash uploader
c1659c386 net: optimize restore_rule() to not open the CR_FD_RULE image file twice
e3a853ab9 criu-ns: make pidns init first do setsid
c750e62ca util: use nftw in rmrf helper
485a83c11 tty: fix the null pointer of get_tty_driver
7ba4d3bf1 pie/restorer: remove excess hash printf specifier
bffaa7d07 ci: enable coredump tests
bf8382a80 make: enable lint for coredump
8aa769455 test/coredump: fix shellcheck errors
0b3cf5c9e coredump: lint fix visually indented line
3a689ed9a coredump: fix comparison to true
c1eab7d06 coredump: fix too many blank lines
baad88d5e coredump: fix missing whitespace around operator
579066633 coredump: lint fix for block comments
06306c8b1 coredump: drop exec permission
1b368238b coredump: drop unused variable
a92a7887a python: replace equality with identity test
c71a81a6b coredump: convert indentation to spaces
bf8a3c9f6 coredump: sort imports
a0b738cb8 coredump: remove unused import
1c866dbb5 Add new files for running criu-coredump via python 2 or 3
3180d35fa Add support for python3 in criu-coredump
f24360658 criu(8): Add more detailed description about --tcp-close dump option
abf6b15c1 zdtm: Dumping/restoring with --tcp-close on TCP_CLOSE socket
795973055 tcp: Skip restoring TCP state when dumping with --tcp-close
74d1233b5 criu/files: Don't cache fd ids for device files
7b6239b6d criu/plugin: Implement dummy amdgpu plugin hooks
17e2a8c70 criu: Introduce new device file plugin hooks
dd46e7919 criu(8): add --external net option
be239109a github: update the stale version

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-12 00:01:55 -04:00
Khem Raj
aa86460a93 ipxe: Pin to use gcc 
Use single quote instead of double quotes to help bitabake syntax
highlighter do right job

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-12 00:01:51 -04:00
Khem Raj
d32042ea1a xen-tools: Fix build with GCC 12 
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-09 13:08:06 -04:00
Khem Raj
6a43be4c3e seabios: Upgrade to 1.16 release 
Pin to use gcc as compiler always

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-09 13:08:06 -04:00
Bruce Ashfield
27e5ade0ab Revert "qemuboot, xen-image-minimal: enable runqemu for qemuarm Xen images" 
This reverts commit 1c746a9768.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2022-05-09 12:22:11 -04:00