Commit Graph

1907 Commits

Author SHA1 Message Date
Bruce Ashfield
bd60f149dc docker-ce: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits:

    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
    6f3f2b6d08 update containerd binary to v1.6.6
    b3bcb15da8 update containerd binary to v1.6.5
    f55b030fa0 system: unbreak build for darwin
    63ab12cd3a Port pkg/system/mknod.go to FreeBSD
    081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea
    8e9d647c01 [20.10] update golang to 1.17.11
    87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8
    27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b
    829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42
    6cbe73bfc0 Rename Reservation to Reservations in the open API
    d9ed3d7e28 update runc binary to v1.1.2
    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10

Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits:

    af0c46d8 Apply peformance tuning to new sandboxes also
    23ffb31f Set ExternalPortReserved for dummy proxy
    9b82e422 Bump hcsshim
    9db86fb7 Only check if route overlaps routes with scope: LINK

Bumping docker-cli to version v20.10.17, which comprises the following commits:

    7502d7e56 Fix dead external link
    308624c3b fix: remove asterisk from docker command suggestions
    de7d866b6 [20.10] update golang to 1.17.11
    240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd9 [20.10] update golang to 1.17.10
    49e9c2ae3 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17 vendor: update x/sys to 134d130e
    31dad66f9 [20.10] update golang to 1.17.9
    80f673bf9 gofmt with go1.17
    3d4cc8e69 [20.10] update remaining files to go1.17.8
    30277a8f8 update go to 1.17.8
    cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c [20.10] docs: reformat table for compatibility
    573a66463 Describe privileged mode in terms of capabilities
    cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f13825 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b872 [20.10] circleci: update buildx to v0.8.2
    55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05 e2e: update docker-compose to 1.29.2
    4ae338b33 docs: reference: remove trailing space to fix yaml formatting
    6380142dd docs: fix (table) formatting, fix some broken links
    82f422fcf docs: build: fix minor markdown and syntax issues
    80fd77903 Update the list of log drivers
    c3d4d623c Fix CMD --ignored-param1 example
    2e82d11de docs: dockerd: fix broken link in blockquote area
    738a6ee1c improve cp documentation with some illustration examples
    246d96bb6 docs: unify "docker create" and "docker run" reference
    2fd0f1705 docs: add missing documentation for --pull flag
    5fa500000 Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b Dockerfile: update xx to 1.1
    6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e30 Fix mistake with env var example in docker run docs
    62d27c32f Update WORKDIR command information
    c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d Update dockerd.md
    b721998b7 Fixing typo (his --> its)
    4065e1246 format create.md table
    f1002eb9f Fix typo
    e97c7b240 added missing closing parenthese
    aa7893763 Update stats.md add example json output
    40fe0573a Update Ubuntu version number references in push.md
    c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d08 Correct device syntax to --gpus
    fd5fc61ec [20.10] Update Go to 1.16.14
    3624019d8 [20.10] update Go to 1.16.13
    f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b31 fix innocuous data-race when config.Load called in parallel
    38dd744a1 [20.10] Update Go to 1.16.12
    4de40a825 Update Go to 1.16.11
    03fa8f92c Update Go to 1.16.10
    9989fdbc4 Update most links in docs to use https by default
    0e20c1fd2 Update Go to 1.16.9
    1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79 docs: some minor touch-ups in checkpoint reference
    8260476a0 docs: remove trailing space to fix generated YAML format
    bce2e1f95 docs: create.md: typo fix
    44064f51c Fix typo in documentation - build.md
    292779add Add doc for BUILDKIT_PROGRESS env var
    f2e79b826 docs: use "console" code-hint for shell examples
    fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089 experimental: fix broken link to "checkpoint and restore" page
    c72057c8d docs: move checkpoint/restore doc from experimental into reference
    77db97d59 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b docs: fix some broken anchors
    d0014a86b docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55a docs: fix search results by filterd is-official
    44fdac11f Update Go to 1.16.8
    061051c24 docs: add missing redirect, and remove /go/experimental redirect
    2012fbf11 Update Go to 1.16.7
    42d1c0275 registry: ensure default auth config has address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
dbe9ce60c2 docker-moby: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits:

    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
    6f3f2b6d08 update containerd binary to v1.6.6
    b3bcb15da8 update containerd binary to v1.6.5
    f55b030fa0 system: unbreak build for darwin
    63ab12cd3a Port pkg/system/mknod.go to FreeBSD
    081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea
    8e9d647c01 [20.10] update golang to 1.17.11
    87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8
    27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b
    829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42
    6cbe73bfc0 Rename Reservation to Reservations in the open API
    d9ed3d7e28 update runc binary to v1.1.2
    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10

Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits:

    af0c46d8 Apply peformance tuning to new sandboxes also
    23ffb31f Set ExternalPortReserved for dummy proxy
    9b82e422 Bump hcsshim
    9db86fb7 Only check if route overlaps routes with scope: LINK

Bumping docker-cli to version v20.10.17, which comprises the following commits:

    7502d7e56 Fix dead external link
    308624c3b fix: remove asterisk from docker command suggestions
    de7d866b6 [20.10] update golang to 1.17.11
    240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd9 [20.10] update golang to 1.17.10
    49e9c2ae3 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17 vendor: update x/sys to 134d130e
    31dad66f9 [20.10] update golang to 1.17.9
    80f673bf9 gofmt with go1.17
    3d4cc8e69 [20.10] update remaining files to go1.17.8
    30277a8f8 update go to 1.17.8
    cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c [20.10] docs: reformat table for compatibility
    573a66463 Describe privileged mode in terms of capabilities
    cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f13825 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b872 [20.10] circleci: update buildx to v0.8.2
    55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05 e2e: update docker-compose to 1.29.2
    4ae338b33 docs: reference: remove trailing space to fix yaml formatting
    6380142dd docs: fix (table) formatting, fix some broken links
    82f422fcf docs: build: fix minor markdown and syntax issues
    80fd77903 Update the list of log drivers
    c3d4d623c Fix CMD --ignored-param1 example
    2e82d11de docs: dockerd: fix broken link in blockquote area
    738a6ee1c improve cp documentation with some illustration examples
    246d96bb6 docs: unify "docker create" and "docker run" reference
    2fd0f1705 docs: add missing documentation for --pull flag
    5fa500000 Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b Dockerfile: update xx to 1.1
    6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
7ac3d53888 cri-o: update to 1.25
Bumping cri-o to version v1.24.0-189-g78992d160, which comprises the following commits:

    3e085ffc3 build(deps): bump github.com/containers/buildah from 1.26.1 to 1.26.2
    4ca27d0b0 Remove enable_custom_shm_size
    4149fa03e Add annotations to allow power management configuration
    0f4d79209 Fix release notes pull behavior
    44d42542f oci: unconditionally set as not stopping after a stop stops stopping
    56b807510 container_server: drop StopContainerAndWait
    b4ddab0e7 server: take container server Stop method
    7cda39bb4 container server: drop duplicated Remove function
    f03e563ec config: set version-file-persist to empty by default
    935652c90 version: don't wipe if filename is empty
    2e3b19475 bundle: always install runc
    c57d3b05c scripts: install runc if not found in get script
    6d729cd4d remove Vagrantfile
    87a4e8eb7 Fix a link in install.md building section about dependencies
    e8e523dda Retry release notes push if failed
    ee80a2b9e Bump version to 1.25.0
    c00962a51 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    a2d1ca204 server: userns support
    41f67c326 vendor, kubernetes: update to kubernetes-1.25.0-alpha.2
    df5e39094 Fix release-notes tag determination
    b068d17cf Upload release notes for each tag
    66d33db6b Fix unit test coverage
    f61332ed9 hostport: don't use unexported symbol
    01a7c0276 server: use k8s.io/utils/clock
    20ef6c73e update ubuntu releases
    8a981fef4 Pin upstream node e2e test to latest `main`
    7f0604ceb Verify SBOM for static binary bundle
    489caa132 Use default token for stale bot
    0a3bfc078 Switch to golang native error wrapping
    b86d8c343 build(deps): bump github.com/stretchr/testify from 1.7.4 to 1.7.5
    80d1d7908 Run more stale operations
    da2dce1e1 chore: Set permissions for GitHub actions
    c800d043b build(deps): bump github.com/urfave/cli/v2 from 2.10.2 to 2.10.3
    e30ae00a1 Add stale bot workflow
    863d1a334 cgmgr/systemd: don't recalculate cgroup path
    d94e48924 build(deps): bump sigs.k8s.io/bom from 0.3.0-rc1 to 0.3.0-rc.2
    8c7cc72e4 Generate SBOM for static binary bundle
    26138ec52 build(deps): bump k8s.io/klog/v2 from 2.60.1 to 2.70.0
    0cdf37c86 Verify signed artifacts via `get` script
    fdb6c3b30 server: unify logging in resourcecleaner
    896456bc8 server: move cleanup funcs closer to function that provisioned resource
    49ad4b0ad build(deps): bump github.com/urfave/cli/v2 from 2.10.1 to 2.10.2
    7b2475303 build(deps): bump github.com/stretchr/testify from 1.7.3 to 1.7.4
    0f46b58cb Fix container status for HostToContainer propagation
    99d86536e Fix docs validation
    9f105d8f0 build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.3
    748fd5d2e build(deps): bump github.com/urfave/cli/v2 from 2.8.1 to 2.10.1
    93fc6b72e build(deps): bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1
    491b03a30 Update cgroupfs cgroup manager
    de8672f7e contrib/test/int/build/runc: rm build tags
    0b3153d7d Bump runc to v1.1.3
    a3171b395 Sign static binary bundle via cosign
    704f9aeb6 dependencies: update conmon
    333cc8988 contrib/test/integration: skip installing conmon via ansible
    4b120cbef Fix lint CI
    40df9c9ae Bump `go.opentelemetry.io/*` dependencies
    06b6e86b2 Bump `containers/*` dependencies
    67c18103e Cleanup: remove BuildContainerdBinaryName as it is not called anymore.
    b480e8a3b Bump golang dependency on containerd
    864733f77 build(deps): bump actions/checkout from 2 to 3
    e2a32f36c bump ocicni to v0.4.0
    63399460e build(deps): bump github.com/containers/ocicrypt from 1.1.3 to 1.1.5
    e67e36753 build(deps): bump google.golang.org/grpc from 1.46.2 to 1.47.0
    24d401919 Bump golang dependencies
    f72969022 Fix unit tests
    37c1a01fe drop use of deprecated package io/ioutil
    8bdadc77c security: add 2022 audit report
    79e404fa5 conmonmgr: query help text to see if it supports log-global-size-max
    a4080bb34 add support for conmon log-global-size-max
    b7f15ac3d oci: cap exec sync length
    1e277b836 utils/RunUnderSystemdScope: fix wrt channel deadlock
    03e4aa482 Bump cri-tools to v1.24.2
    2fbf71963 test: set cri stats more idiomatically
    efff3878c server: reduce object creation in List{Containers,PodSandboxes}
    0cde0a6de update kubeadm init instructions
    e5bb0c600 docs: update for CNI package change
    62a14cf91 oci: reuse helper function to reduce duplication
    9fea6e219 oci: kill children of container if it is in the host pid namespace
    f6d963871 Add pause/unpause description to readme
    35ca21623 Fix review issues
    fa435f79c Use a default umask of `0o022`
    6293c07b9 Fix it case failed
    5d75cc24a Fix review issues
    26432e631 changesinREADME
    908111147 move 1.23 to 1.24 in README
    85bcbe8d1 OWNERS: remove fgiudici
    eb41d30e0 build(deps): bump actions/download-artifact from 2 to 3
    c14faa62e build(deps): bump golangci/golangci-lint-action from 2 to 3
    7fe39c7bc Add integration test for remove paused ctr
    33997ae93 vendor: bump crypto package
    8a090364d 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and   restart one
    1e61f1318 build(deps): bump actions/setup-go from 2 to 3
    c40fa5350 fix review issues
    985c182a4 build(deps): bump google.golang.org/grpc from 1.43.0 to 1.46.2
    cef56110d build(deps): bump actions/upload-artifact from 2 to 3
    e932964fc build(deps): bump cachix/install-nix-action from 12 to 17
    bf67bfd4f build(deps): bump actions/cache from 2 to 3
    7db2b3b39 Try to force delete ctr when in paused state
    0c1bf03fa chore: Included githubactions in the dependabot config
    c657f4623 Fix some uses of Atoi
    54d7da638 typo fix
    2b8a7055c Typo fix
    d4ec76bd4 Add CodeQL Github actions
    ed53fa23b Use go 1.18 buildinfo for version output
    21c8f6bde Bump third party dependencies
    d68931ddb Run critest with conmonrs

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
d36e757d42 cri-o: update to 1.24.1 -latest
Bumping cri-o to version v1.24.1-18-gb0d2ef327, which comprises the following commits:

    81ef20b38 Fix unit test coverage
    7b4941478 Fix release-notes tag determination
    0dde66a3c Upload release notes for each tag
    29762438c Fix container status for HostToContainer propagation
    2cf9cf9df bump ocicni to 0.4.0
    5481d35e9 Fix unit tests
    b0040ddd9 test: set cri stats more idiomatically
    cf0037d1a utils/RunUnderSystemdScope: fix wrt channel deadlock
    5b75a4763 oci: kill children of container if it is in the host pid namespace
    489819e33 bump to v1.24.1
    8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max
    fc852b402 add support for conmon log-global-size-max
    77f0429d9 oci: cap exec sync length

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
038b48664a runc-docker: update to 1.1.3
Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits:

    eb1552a0 VERSION: back to development
    6724737f VERSION: release 1.1.3
    91fa032d ci: add basic checks for CHANGELOG.md
    7219387e cgroups: systemd: skip adding device paths that don't exist
    93d1807b libcontainer: relax getenv_int sanity check
    8242c05d script/seccomp.sh: check tarball sha256
    017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4
    51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid
    3a09da6b ci: drop docker layer caching from release job
    8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
    fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError
    d105e052 libct/seccomp/config: add missing KillThread, KillProcess
    e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d
    dc083b2b fix deprecated ActKill
    bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
    1feafc31 ci: bump golangci-lint to v1.44
    89f79ff0 libct: StartInitialization: fix %w related warning
    3b7f2605 Format sources using gofumpt 0.2.1
    eeac4e77 build(deps): bump actions/checkout from 2 to 3
    cd7fa00d Vagrantfile.fedora: fix build wrt new git

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
d8ecc12a13 runc: update to 1.1.3
Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits:

    eb1552a0 VERSION: back to development
    6724737f VERSION: release 1.1.3
    91fa032d ci: add basic checks for CHANGELOG.md
    7219387e cgroups: systemd: skip adding device paths that don't exist
    93d1807b libcontainer: relax getenv_int sanity check
    8242c05d script/seccomp.sh: check tarball sha256
    017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4
    51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid
    3a09da6b ci: drop docker layer caching from release job
    8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
    fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError
    d105e052 libct/seccomp/config: add missing KillThread, KillProcess
    e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d
    dc083b2b fix deprecated ActKill
    bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
    1feafc31 ci: bump golangci-lint to v1.44
    89f79ff0 libct: StartInitialization: fix %w related warning
    3b7f2605 Format sources using gofumpt 0.2.1
    eeac4e77 build(deps): bump actions/checkout from 2 to 3
    cd7fa00d Vagrantfile.fedora: fix build wrt new git

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
fec43d04a4 kernel: add 5.19 inc file
The major stacks have been tested against 5.19, so we add the
tracking .inc to indicate support.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:25:04 -04:00
Bruce Ashfield
58f5ac62e8 kernel: drop 5.10 .inc
oe-core has removed 5.10 from master, so we drop our tracking .inc

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:25:04 -04:00
Andrei Gherzan
cca772a457 cni: Use gcc-based toolchain
clang-based builds are still broken due to:
https://github.com/llvm/llvm-project/issues/53999

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Andrei Gherzan
eb1f9b1e1f podman: Use gcc-based toolchain
clang-based builds are still broken due to:
https://github.com/llvm/llvm-project/issues/53999

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Andrei Gherzan
89abebb0fe podman: Backport patch to fix duplicate switch statements
This will fix clang-based builds.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Bruce Ashfield
52ec02f96d containerd: update to 1.6.6
Bumping containerd to version v1.6.6-10-g4e92d8e7e, which comprises the following commits:

    37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing
    fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0
    99c56d217 ctr: fix label args used in NewContainer
    51de785f8 [release/1.6] Make building static binaries simpler
    2ea4e6348 update runc binary to v1.1.3
    61213742a Prepare release notes for v1.6.6
    f92068350 Implicitly discard the input to drain the reader
    2eb67213b [release/1.6] Limit the response size of ExecSync
    185e87275 Prepare release notes for v1.6.5
    5c9c83d3e [release/1.6] update golang to 1.17.11
    fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version
    e33b9e709 archive: add human-readable hint to Lchown error
    3bb5a9d19 config: improve config v1 deprecation message
    6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3
    f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    9f99be51b [release/1.6] update golang to 1.17.10
    246a1b42e vendor: github.com/opencontainers/runc v1.1.2
    43717e03a update runc binary to v1.1.2
    82a77be2d reverts removal of parallel run from critest
    06bdfeb67 Allow git commands in Vagrantfile
    70839a344 Bug fix for mount path handling
    1520bae0f update critools to v1.24
    0d1d2953b Prepare release notes for 1.6.4
    42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1
    e9f22e008 Update go-cni to v1.1.5
    be4909e95 cri: close fifos when container is deleted
    baa386dc0 Prepare release notes for v1.6.3
    e8da82adc tracing: fix panic on startup when configured
    1764ea9a2 CRI: improve image pulling performance
    9cd76d465 [release/1.6] update golang to 1.17.9
    c09cc1242 check for duplicate nspath possibilities
    fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect
    8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main
    f2ba2041b update runc binary to v1.1.1
    b736b4dab go.mod: github.com/opencontainers/runc v1.1.1
    72f1e58c7 CI: add Rocky Linux 8
    7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4
    5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events
    da35c19da Test turning off golang CI lint cache
    a0213573b Add nolint:staticcheck to platform-specific calls
    ad0036ed6 Update prometheus client vendor
    c7bbf316f Mount devmapper xfs file system with "nouuid" option.
    a1de89c3e Make the temp mount as ready only in container WithVolumes
    82a12edf2 moving up to go-cni v1.1.4
    28b44826b native: fix deadlock from leaving transactions open
    8461dd6e5 Prepare release notes for v1.6.2
    91800c4e9 Add static checks to shim for Windows
    ca51d7f85 Update go.mod go version
    765df6609 [release/1.6] remove empty go mod to allow building for go 1.18
    e9af80859 Fix the Inheritable capability defaults.
    7c929318a Update TestNormalize to only test Windows
    06985e7d0 Upgrade golangci-lint and its GitHub Action
    b13d3e05c cri: relax test for system without hugetlb

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:05:21 -04:00
Bruce Ashfield
8915d8d54b python: synchronize colorama with meta-python
Our "canary" recipe for colorama picks up potentially destabilizing
changes in meta-python, but is kept in sync to avoid autombuilder
issues. If we can't stay in sync, we'll fork the recipe and change
our dependencies to match.

There has been a change in the meta-oe version, around checksums
and native integration. Both those changes are fine, so we update
to match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-28 11:57:34 -04:00
Christopher Clark
fb52b8d574 xen-image-minimal: reduce the x86 wic build dependencies
The Xen image recipe provides a default WKS_FILE for x86 builds to enable
booting the image either in qemu or directly on hardware. Add settings
for WKS_FILE_DEFAULT_DEPENDS that specify the wic image build
dependencies, which are lower than the defaults used without it.

This change reduces the amount of build resources required for CI of
this image and images that are derived from it.

Since WKS_FILE is specified separately for x86-64 and qemux86-64
overrides, do the same for WKS_FILE_DEFAULT_DEPENDS, even though the
dependencies for the two separate WKS_FILEs are currently the same.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-20 16:04:53 -04:00
Bruce Ashfield
7ec4b4746d podman; fix patch fuzz/failure
patch a33188f [podman: Fix host contamination] appears to have
introduced fuzz/failures. Which strangely wasn't picked up on
merge testing.

We refresh the patch to fix the issues.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-17 14:37:43 -04:00
Vasileios Anagnostopoulos
fb14913e22 image-oci-umoci: add parameter for stop signal
Add an optional parameter that allows to override the stop
signal that is used.

Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:14:57 -04:00
Pascal Bach
064a96fe1b image-oci-umoci: properly handle tags other than latest
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:14:57 -04:00
Andrei Gherzan
21cd0c24e3 fuse-overlayfs: Update to v1.9
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:13:35 -04:00
Andrei Gherzan
81d62914ce fuse-overlayfs: Fix buffer overflow bug on workdir path
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
cf8a763b28 podman: Add support for rootless mode
This support is disabled by default and exposed via PACKAGECONFIG.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
2e05df2f43 podman: Silence docker emulation warnings
Podman can run in via a docker symlink emulating docker commands. By
default this generates a runtime warning. This change silences it via
the provided interface.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
d9bad067f7 slirp4netns: Runtime recommend the tun kernel module
slirp4netns uses a TAP device to connect to the internet in an
unprivileged way. Without the required kernel support (TAP/TUN),
slirp4netns will fail at runtime.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Bruce Ashfield
8364fd6c98 lopper: update to -latest
Bumping lopper to latest, which comprises the following commits:

    9159040 lopper: assists: baremetallinker_xlnx: Fix race condition in memory domain handling
    38d18ca lopper/fdt: add /memreserve/ to preprocessing routines
    33ee8e6 sanity: add /memreserve/ test
    c6431bf fdt: fix dtb handling of common prefix nodes
    211c902 lopper: add support for /memreserve/
    4545eed base: add powerdomains to default phandle meta data
    bc95bc2 tree: handle variable sized phandle properties
    69d8849 openamp: Update YAML handling to match spec
    578de1d lopper: assists: bmcmake_metadata_xlnx: Fix race condition in the assist file
    14d2aa3 tree: ensure that phandle is initialized before export
    a6b38e8 tree: make label generation more robust
    9faf923 extract-xen: add [extract-xen] prefix, and write xen,passthrough
    00c14d5 assists: add imagebuilder wrapper assist
    d879eaf extract: use lopper.write for export of trees
    ca80fbb extract: improve xen passthrough configuration
    791f0f5 lopper.py: allow execution from any directory
    0c62984 lops: fix comment style
    3598d54 lopper/tree: handle invalid last phandle
    697aa62 assists: create generic tree extraction and xen-processing assists
    5ae6650 lopper/tree: improve phandle and node operations
    5a230a5 lopper/assists: allow chained command line assists
    bbb92ee lopper/tree: make import/export more robust
    b8aeb54 lopper/tree: improve node iteration and resolution
    692cbc9 lopper: lops: lop-domain-linux-a53-prune: Remove unneeded nodes for Linux boot
    cd25873 lopper: assists: baremetalconfig_xlnx: Fix KeyError exception
    58dd00c lopper: assists: baremetal_xparameters_xlnx: Fix KeyError exception
    01ae242 openamp: xlnx: Update RPMsg-kernel mailbox information
    fbc4329 lopper: assists: petalinuxconfig_xlnx: Fix indentation and width params
    5c3074b lopper: assists: petalinuxconfig_xlnx: Add support for additional meta-data
    cc3de25 lopper: assists: breametallinker: fix race condition in memory node handling
    7723fed lopper: lops: a72 linux: remove axi intc node
    743432e openamp: xlnx: remove TCM compat strings
    53746be lopper: lops: lop-domain-linux-a53-prune: remove amba_pl pruning
    0d56f35 lopper: lops: lop-domain-linux-a72: move prune operations to separate lop
    fdbbe7b openamp: xlnx: add support for Versal platform
    1839bdb openamp: xlnx: add 'power-domain' prop for Xilinx R5 remoteproc driver SRAMs
    14d1caf lopper: lops: lop-domain-linux-a53: move prune operations to separate lop
    7169df0 openamp: xlnx: remove dead code
    ec9fdce openamp: xlnx: remove definitions node
    07f48d0 openamp: xlnx: Add text file for OpenAMP Channel information
    637863f openamp: xlnx: update IPI for mappings for ZU+ platform
    1b41e52 openamp: xlnx: rpmsg: generate rpmsg device tree nodes
    a643273 openamp: xlnx: remoteproc: generate remoteproc device tree nodes
    a833729 openamp: fix bug for domain-to-domain subnodes for openamp relations.
    ea6d8e1 lops: openamp: describe OpenAMP relation properties as phandles
    40c2070 openamp: translate YAML Remoteproc carveouts to DTS
    fda40d8 openamp: translate YAML RPMsg carveouts to DTS
    9d938f7 openamp: xlnx: parse pre-existing nodes in YAML
    eafb17a lopper: process .dtsi input files the same as .dts
    ce4638a lopper: assists: petalinuxconfig_xlnx: Add assist file for generating petalinux tool required configuration
    cfa0593 fdt: make node prefix lookups more robust
    2f3f2d2 lopper/format: allow tabs to be used when writing dts
    c7b22ce lopper/subsystem: update access to latest specification

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-14 15:17:08 -04:00
Ross Burton
11c1003e87 xen: remove obsolete sdl PACKAGECONFIG
Nothing in Xen respects --enable-sdl, and nothing in Xen links to libSDL,
so this PACKAGECONFIG is obsolete.

It looks like the last user of SDL in Xen was removed in "Remove
internal tools/ioemu tree"[1] back in 2008.

[1] xen 19dc3860dcfde9bc4ec4ef35bb1337e13276f630

Signed-off-by: Ross Burton <ross.burton@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-13 16:31:43 -04:00
Christopher Clark
40a4c292e3 xen, xen-tools: pass prefix maps to fix buildpaths reproducible build issues
To fix warnings when the buildpaths QA test is enabled, pass the file
and debug prefix map options that were previously supplied only for
reproducible builds, adding them to the DEBUG_PREFIX_MAP variable
and supplying that to CC.

Testing indicates that passing the prefix maps needs to be via CC
rather than the EXTRA_CFLAGS_XEN_CORE/TOOLS variables.

Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-10 21:25:42 -04:00
Bertrand Marquis
aa0ac74a03 xen/sysvinit: add hvc0 console only if not there already
The base inittab recipe is creating inittab entries for consoles listed
in SERIAL_CONSOLES.
For qemu, this contains "115200,hvc0" so an entry is created in inittab
for it.
Prevent to create a second entry if hvc0 is present in SERIAL_CONSOLES.

On qemuarm, this solves issues with the console when starting on top of
Xen as dom0.

Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-07 10:55:15 -04:00
Bruce Ashfield
93abfdb327 colorama: update to 0.4.5
Keeping in sync with meta-python. We mainatain our own version of
the recipe, as docker-compose and others have been sensitive to
version bumps in the past.

We pick up the following commits:

    f8ab4fd version bump 0.4.5
    f411cb9 Release checklist: no need to rebuild
    372c486 Omit demo06 from demos.sh
    0f5c36f Further tweaks made to support the release
    c29f133 tweaks for build process
    6105ab3 Mention fixed ValueError at exit in CHANGELOG
    e866230 Release checklist includes '.candidate' releases
    35e9a91 Add methods to ``StreamWrapper`` to allow better pickling
    8ba396b Replace deprecated pypyX with pypy-X.Y
    8a364bd Added test
    788106f Detached stream fix
    7899683 Add light colors in README
    912fe9b Add support for Python 3.10
    53e0db3 Update README-hacking.md
    e8e311b Update README-hacking.md
    69f4644 Replace Travis CI with GitHub Actions
    5ed1070 README suggests not using Colorama to print colors
    536e966 fixup! Fix typo discovered by codespell
    1d92c3a .
    16847d7 Make bandit, codespell, and pytest mandatory tests
    f307a6d GitHub Action to lint Python code
    402d236 Note that escapes are stripped out for redirected outputs.
    eea3a58 Added new demo
    f690a2b Use ASCII decoding explicitly in setup.py
    0275556 Add support and testing for PyPy3
    293d782 Remove discussion of unmaintained nose for running tests
    8f0587b Remove unused test imports and utils
    d8a0836 Add support for Python 3.9
    9946cfb Reference my blog p[ost about annotated tags
    9b770a0 README-hacking on tagging
    86bfecd Add --extra-index-url to test-release scripts
    938f5c5 Add Makefile docstring to test-release
    e0a314e Release scripts now include sdist.
    14a21e9 README mentions Pypy compatibility.
    d8a7ff0 fix README-hacking typo
    99765af Fix README link markup
    d080175 Fix README link markup
    5a393b2 Move contributing info to README-hacking.md
    f7efb11 Fix Makefile PHONY declaration
    759d5c7 Bump to version 0.4.5-pre
    b7596ad Fix Changelog markup
    24721c0 Belated CHANGELOG entries for 0.4.4 release
    688f6cc Unicode README chars that don't render on PyPI
    dc8460c Make tests pass on all OS.
    faafef8 Add light colors in README

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-07 10:55:15 -04:00
Andrei Gherzan
a33188fab8 podman: Fix host contamination
The project's internal Makefile uses BUILDFLAGS variable to pass
arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a
patch to align this and avoid using host headers in which case, a musl
build will fail similarly to:

| [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk'
| [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h💯 undefined reference to `__fprintf_chk'
| collect2: error: ld returned 1 exit status

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-05 16:25:25 -04:00
Jeremy Puhlman
320f44c6e9 cloud-init: install sysvinit initscripts
The redhat versions work with out modification.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-27 23:38:33 -04:00
Jeremy Puhlman
c40479b735 cloud-init: add rdpends for netifaces and charset-normalizer
Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-27 23:38:33 -04:00
Jeremy Puhlman
66a2fa470b cloud-init: add depend on udev in sysvinit case.
Just as with systemd, the build needs the dev manager installed
as a dependancy

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-27 23:38:33 -04:00
sakib.sajal@windriver.com
13839c7b13 buildah: add recipe for buildah v1.26
buildah is a command line tool, to be installed and run on target,
that can be used to:
   - create a working container, either from scratch or using an image
     as a starting point
   - create an image, either from a working container or via the
     instructions in a Dockerfile
   - images can be built in either the OCI image format or the
     traditional upstream docker image format
   - mount a working container's root filesystem for manipulation
   - unmount a working container's root filesystem
   - use the updated contents of a container's root filesystem as a
     filesystem layer to create a new image
   - delete a working container or an image
   - rename a local container

Testing:
Setup the build directory:
   $ . oe-init-build-env <build_dir>

Add to local.conf:
   IMAGE_INSTALL:append = " buildah kernel-modules"
   KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \
                       features/netfilter/netfilter.scc  \
                       features/lxc/lxc-enable.scc"
   IMAGE_ROOTFS_EXTRA_SPACE = "5242880"

Build image:
   $ bitbake core-image-minimal

Run the image:
   $ runqemu nographic kvm qemuparams="-m 4096"

On target:
Pull an image:
   > cnt=$(buildah from fedora)

Or build from Dockerfile
   > buildah bud -t <image_name>:<tag> .

Mount the image:
   > mnt=$(buildah mount ${cnt})

Install packages on the container rootfs:
   > dnf install --installroot $mnt <packages_to_install> -y

Copy local files to the container:
   > buildah copy $cnt <local_file> <dest_on_container>

Save the changes to an image
   > buildah commit --format docker $cnt <name>:<tag>

Run the image using buildah:
   > buildah run $cnt /bin/sh

Or using docker:
   > docker run -it <name>:<tag>

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:11:17 -04:00
Chen Qi
e4e136c520 go-logrus: sync SRC_URI with nerdctl and k3s
Use the lower case and remove the '.git' suffix to sync with other
go-logurs SRC_URIs in nerdctl and k3s recipes.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:10:22 -04:00
Chen Qi
69ea90a25e netns: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
614b5dbb4f oci-image-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
0bad7905e5 riddler: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
08d50052be oci-runtime-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGS
Adjust the GOROOT setting as directory specified by the original
one does not exist.

The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
7808674c4c umoci: adjust CGO_CFLAGS and CGO_LDFLAGS settings
The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead
of the nativesdk ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
ce03a8868f skopeo: clean up depends and fix CGO settings
According to https://github.com/containers/skopeo/blob/main/install.md#building-from-source,
the ostree dependency is not needed.

Also, adjust the CGO_CFLAGS and CGO_LDFALGS to use target
flags instead of the SDK ones.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
8f15a73bcf docker-distribution: upgrade to 2.8.1
v2.8.1 is the latest stable version.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
1a312f283e docker-distribution: fix build error on new hosts
Fix settings for GOROOT, CGO_CFLAGS and CGO_LDFLAGS.

The previous setting for GOROOT is no longer valid as the directory
does not exist for now. So adjust the GOROOT setting.

Currently CGO_CFLAGS is set to use BUILDSDK_CFLAGS, and this is
incorrect. We need target flags instead of SDK related flags. Such
setting happens to work for some hosts. However, when building on
newer hosts, we get QA error like below:

  ERROR: docker-distribution-v2.7.1-r0 do_package_qa:
  QA Issue: /usr/sbin/registry contained in package docker-registry requires
  libc.so.6(GLIBC_2.34)(64bit), but no providers found in RDEPENDS_docker-registry? [file-rdeps]

The above error was found on hardknott on host Fedora 35.
Tracking down the error and I found it's using host stuff which is likely
to be caused by using incorrect CGO_CFLAGS. As the master branch is
using the same settings, it has the same issue.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Chen Qi
9c8e3597f7 docker-distribution: fix the inehrit and systemd settings
In order for systemd variables such as SYSTEMD_AUTO_ENABLE to have
effect, we need to inherit the systemd class. We also need to specify
the package which contains the service.

As go.bbclass already inherits goarch.bbclass, we only need to inehrit
go.bbclass.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:09:46 -04:00
Michal Orzel
b9a94a5fb6 xen: Disable highmem on qemuarm
By default, highmem option is enabled for machine types later than
virt-2.12. This allows qemu to place devices and RAM in physical
address space above 32-bits. This can cause issues as according to the
documentation Xen supports up to 12GiB of physical address space.
Recently the issue was observed using runqemu, that was causing Linux
running on top of Xen to stall when trying to access ECAM space placed
by qemu at 256GiB mark. Even though this issue is most probably related
to QEMU and not Xen (the investigation showed that it can map ECAM
space correctly), it is best to avoid such issues by disabling highmem
on qemuarm.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:08:37 -04:00
Michal Orzel
17f3d28228 Revert "xen: Disable PCI on qemuarm with Xen"
This reverts commit fb0a7b97db.

Justification:
Commit fb0a7b97db removed the PCI node from the qemu device tree
due to the issue when trying to access PCI configuration space that
was causing Linux running on top of Xen to end up in an infinite loop.
The investigation showed that the problem occurs due to qemu placing
ECAM space at 256GiB mark. Even though Xen officially supports on arm32
up to 12GiB of physical address space, it is able to map it correctly
for dom0. However, when Linux tries to access the ECAM space and the
stage2 translation fault occurs, HPFAR register contains incorrect IPA.
We can say it is incorrect because using hardware AT instruction or
software lookup, we can obtain the correct IPA from the same VA. This
can suggest that the problem is related to QEMU fault handling.

Instead of removing the PCI node the follow-up commit will disable
highmem option in qemu which will cause placing ECAM space in the
32-bit space.

Signed-off-by: Michal Orzel <michal.orzel@arm.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:07:45 -04:00
Bruce Ashfield
ec96eab80c k3s: update recipe formatting and map googlesource to github
Reformat the k3s depedencies and src_uri into a more readible and
maintainable format.

We also map googlesoruce to github for better fetching, as suggested
by Diego Sueiro <diego.sueiro@arm.com>.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 11:46:46 -04:00
Bruce Ashfield
4c0f2dbe12 cri-o: update to 1.24.1
Bumping cri-o to version v1.24.1

We refresh one patch, add add textrel to our QA check skip list.

Which imports the following commits:

    489819e33 bump to v1.24.1
    8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max
    fc852b402 add support for conmon log-global-size-max
    77f0429d9 oci: cap exec sync length
    9441b6700 Fix review issues
    ee1a8519f Fix it case failed
    027ab3f50 Fix review issues
    db4a4aa51 Add integration test for remove paused ctr
    76d1a929e 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one
    3b25e48e4 fix review issues
    eff3af248 Try to force delete ctr when in paused state
    62d81d722 vendor: bump crypto package
    3d516c53b oci: Move exec probe process to container cgroup, if enabled
    8294126fa config: Add monitor_exec_cgroup config option
    9a2723cb4 Reenable pod runtime in package spec
    ae024bd0a dependencies: Upversion conmon dependency to v2.0.27
    1737a4702 Sanitize conmonrs log level and print used version
    5658fd35a Wrap runtime pod errors
    b4bbd4d94 openshift test: use go 1.18
    aa13dfb7b openshift test: add skip_pod_runtime to cri-o spec
    d6aff5b63 Bump nixpkgs and use go1.18
    4864ffc60 Fix golangci-lint errors
    d0664581d add runtime pod
    c33e14fc1 vendor conmon-rs
    3b80d009b oci: add IsInfra method
    0f601939e oci: lock for runtime creation
    1376307fb test: use go 1.18 for lint
    b98f15851 Move WillRunSystemd call after iterating the mounts
    2a75c8307 Add sha256sum bundle files to uploaded artifacts
    9f6a6724d crio:fix a bug about log container
    901310bdd oci: use runtime handler level monitor fields
    12758b2b3 config: assume default conmon cgroup if it's not specified
    240de5f3f template: add comment to runtimes table
    5a8223c75 config: replace Conmon specific fields with runtime handler versions
    de2105a17 main(): don't treat reexec.Init() == true as an error
    1de3e5ed2 crio:try fix integration test failed, because unpause not on time
    6dfc68de4 config: increase pids limit to unlimited and deprecate it and logSizeMax
    9ff165b4e bump ocicni to 0.3.1
    b447dff77 bump containernetworking cni to 1.1.0
    3fa33fe48 crio: unpause ctr after test
    8e9ddee87 crio:fix golint check warning
    019c578fa fix(stats): incorrect id on zfs driver
    153bb668c crio:fix crun it failed
    87f7f00f3 crio:update status after pause/unpause container
    54912d7c8 oci: cleanup log path if the container failed to create
    7a65dc340 utils: remove unused io related packages
    9b111b532 runtime_vm: use containerd deps for container io directly
    2da7482db remove the external dependency on the conntrack binary
    1955cc167 go.{mod,sum}: update CDI deps to v0.3.2.
    a8687861c server: no longer use hardcoded timeouts
    64270ef91 fix builds by passing -buildvcs=false on 386
    48230e006 test: bump to go 1.18.1
    d41e3cbe6 Disable systemd-mode cgroup detection conditionally
    e10376810 crio: Fix review issues and make format shell file
    78308acd4 Add bats test to ensure namespaces are cleaned up on pod stop
    ec1414424 pinns: Check calloc return value
    adfe57b5d bump to 4.11 image
    5e72b4133 crio: Fix code style
    270d195ec crio: implement extended interface for pause/unpause container
    31c278301 seccomp: drop unshare syscall from default profile
    1098cc9b9 Retry to set CPU load balancing before return the error
    7ccafd559 build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.1.0
    9b735153b Fix integration tests
    862b27b8c Switch to registry.k8s.io for the sandbox Image:
    9ebdeef1e Change the mcs order in selinux.bats to test the canonization of selinux label
    1a9a3fdae Canonize selinux label for comparison with filesystem label
    b106fcd71 oci: fix segfault in pod stop code
    3e9d77257 capabilities: drop inheritable
    afe738b18 Bump ocicni to v0.3.0
    7b5a67f51 Switch to ginkgo/v2
    1999baa2f Add bats test for infra_ctr_cpuset taskset
    9fada28f7 Add bats test for zombie conmon cleanup
    15afd20ee Update golangci-lint and config
    13d7b9738 Bump golang to 1.18.x
    1af1f8af2 pinns: Pass sysctls as repeated '-s' arguments
    eb8715d30 Fix shell format
    c3095bf20 README: Update EOL & Version Skew links
    05c443b06 config/sysctl: fail if there is a + in the value
    ea39e74f2 Fix critest
    739379b0c Enable `--seccomp-use-default-when-empty` by default
    98c18d1cb test: update to new runc behavior
    4cb2407a2 Automatically chcon and restorecon on get script
    bef94e1f8 Pin `github.com/u-root/u-root`
    3be4dba79 Switch to `main` for `get` script
    09399e41f Bump nixpkgs
    51a800af0 Pin nixos/nix version
    97df87f71 test: allow state of failing tests to be kept intact.
    32d682800 factory: take capabilities setup
    a643dad27 Add dedicated security information
    d65414758 test/crio-wipe.bats: don't nuke $TESTDIR too early.
    ff36ee6e0 test/cgroups.bats: fix incorrect setup order.
    128165130 test/cdi.bat: add CDI integration tests.
    a0d3fd8aa config,cli: add configuration for CDI.
    f35fba448 pkg/container: implement CDI device injection.
    572616137 go.{mod,sum}: update deps, vendor.
    683baa221 contrib/test: force BATS symlink in place.
    0be4d0611 contrib/test: always install BATS for integration.
    2426bdb4c openshift e2e: bump cri-o version
    e337fa364 bump to 1.24.0
    5cad5f287 test: avoid concurrent crictl config writes.
    bc240fd4c server: stop deleting pod from idIndex if already gone
    a4b5f0c15 CI: use kubernetes from git tip
    03064f4ca test/e2e: update skipped test list
    65f93912d contrib/test/int/build/kubernetes: rm deprecated RunAsGroup
    2e7a4d375 server: use syncfs instead of fsync
    d9102e748 config/sysctls: validate against invalid spaces
    230409570 [gitpod] use latest workspace full
    6c3144af2 hack/build-rpms.sh: fix yum-builddep failures
    52adfe025 ci: bump shellcheck to 0.8.0
    92edea6dd test/apparmor: suppress bogus SC2031/2031
    ca10da055 test/cni_plugin_helper: suppress shellcheck warning
    0655dd213 test/test_runner: rm eval, fix comment
    1acde4379 OWNERS: move rhatdan to emeritus approvers
    d280c71ce OWNERS: move runcom to emeritus approvers
    4041adc55 utils: Sync: use f.Sync
    14d742672 Deny empty `localhost/` AppArmor profiles
    bd02dac92 OWNERS: add first round of reviewers
    626446e5c OWNERS: Move @sboeuf to emeritus approver
    8aab1e8f2 int/storage: getReferences: fix gocritic warning
    f1ca25bc5 server: fix (rather than ignore) gocritic warning
    bc839156e server/streaming: specify the linter
    fa2fd247f ci: bump golangci-lint to 1.44.0
    cc6ed292b scripts/release-notes: fix printf args
    f0e70901e scripts: fix a typo
    b1705dc28 int/version: fix forcetypeassert linter warning
    851916f0d server/container_create_linux: fix forcetypeassert warning
    a2760072b utils: fix forcetypeassert linter warnings
    d295f8b24 server/streaming: fix nolintlint warning
    dd70c87ab int/storage: fix gosimple warning
    f26fafdc5 int/config/cgmgr: fix stylecheck warnings
    bc91cdb57 Format code using gofumpt 0.2.1
    98d945cc9 Makefile: fix a comment
    bb96cd907 test/crio-wipe: fixups
    107fe3853 ISSUE_TEMPLATE: fix grammatical error
    1affa13d9 OWNERS: move @sameo to emeritus_approvers
    4dc761f9f ISSUE_TEMPLATES: update membership form to be reviewer form
    592aa5159 ISSUE_TEMPLATES: add a couple of more
    238e4d009 image: use imageCache value for ImageStatus()
    411e15058 contrib/bundle: remove deprecated kubelet option.
    15048929c minor edit: removed dead link from TOC
    0dd5d2d00 oci: drop WaitContainerStateStopped
    6449ff0d3 oci: fix a leaked goroutine
    40165cb5b internal/factory/container: initialize from pkg/container
    0dabb91b3 internal/factory/sandbox: initialize from pkg/sandbox
    6e2472c92 README: update branches
    a0f88d3a5 Updated format
    a53f1d221 Generate checksum files for artifacts
    728731808 test: add test for skipped sysctls
    1667b5a66 server: skip sysctls that would affect the host
    a7ac4683c deep copy List{PodSandbox,Container} structs
    183ac018f GOVERNANCE: fix links
    18dfcd273 oci: always have conmon log to syslog
    c424e85e7 README: add reference to governance
    008b3541a add GOVERNANCE.md
    33063001c issue templates: add membership request form
    aa8130f62 Add Debian_11 OS variable on installation instructions of Debian Signed-off-by: Wang Kai <persistence201306@gmail.com>
    e5dad09ee criocli: produce diff-friendlier zsh completions.
    b299c80c5 ci: use main branch for conmon
    bcf069b12 server: fix race with kubelet
    0769411bb Fix runtime panic on pod sandbox stats retrieval
    ef1746095 update go to 1.17 in go.mod
    acde72556 Reuse createContainerIO in CreateContainer
    0731a9b57 Fix vm containers couldn't restore after CRI-O restart
    386d4a447 ci: use main version of runc
    28585442e openshift e2e: bump ci image
    35c02b56e server: fix a potential NULL-pointer dereference.
    20370fa95 Documentation: expand on CNI CIDRs in the kubeadm tutorial
    143a623ad test: update tests for allowed_devices
    56929cdb9 config: add AllowedDevices option
    2aceed0f0 pass the main mount point to fix crypto profiles binding
    6b887e9c3 Add Nestybox to the CRI-O adopters list.
    33e25b47b server: drop duplicate log message
    25a2eec40 pkg/container: fix container device GID fallback.
    a68b239af bump crio commit for upstream k8s CI
    d7da8b2b0 adds config template linting
    86e43fc28 adds comments to default values
    ff2a04e8b server: don't set memory swap when it's not enabled
    5ebc4a407 Inherits storage configurations from storage.conf if crio config does not set
    d0d8fb3a7 use cmdrunner singleton
    2237f2658 conmonmgr: refactor for new CommandRunner
    878040d10 cmdrunner: update mocks and add target to makefile
    b3bb86659 config: prepend commands with taskset if InfraCtrCPUSet is configured
    e9f0bb6c8 cmdrunner: add tests for prepended commands
    04e9c61e3 cmdrunner: create singleton
    fd2e2aeec Use timeout for conmon cgroup move
    9af5e3363 build(deps): bump google.golang.org/grpc from 1.42.0 to 1.43.0
    9a051dede Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels
    347f04161 test: add test ensuring a stopped pod is restored
    86fd03b81 sandbox stop: remove namespaces
    e02d5bf15 restore: handle removed namespaces
    334e925ac Partially revert "restore: restore stop before managing namespace"
    948b92bd7 restore: ensure containers are wiped on reboot
    c3f75859b build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    78e1c80af build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
    d8ea9f6ca vendor: bump c/image to 5.17.0
    11c127f3d pinns: Add LDFLAGS to Makefile

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-07 22:02:15 -04:00
Changqing Li
e851963070 criu: fix patch fuzz and remove unused patch
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-07 10:03:30 -04:00
Chen Qi
2e787b9d75 criu: fix QA issue about shebang too long
There's a QA issue about criu complaining the shebang
of crit script is too long. We should replace it with
'#!/usr/bin/env python3'.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-07 10:00:37 -04:00
Bruce Ashfield
14427646ae umoci: update to 0.4.7-tip
Bumping umoci to version v0.4.7-98-gdb97609, which comprises the following commits:

    d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    9db1db9 dependabot: ignore github.com/klauspost/compress for now
    c20d1ba build(deps): bump github.com/vbatts/go-mtree from 0.5.0 to 0.5.1
    defa147 build(deps): bump actions/setup-go from 2 to 3
    d7c6b89 build(deps): bump actions/cache from 2 to 3.0.1
    e76ee78 build(deps): bump actions/checkout from 2 to 3
    852bb73 build(deps): bump actions/download-artifact from 2 to 3
    83706fc build(deps): bump actions/upload-artifact from 2 to 3
    b93cb2a build(deps): bump codecov/codecov-action from 2 to 3
    671fa10 build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
    abd9d71 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0
    597a50e build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
    87f2e17 mutator: allow setting annotation data when generating a layer
    e14c6d5 README: s/anuvu/project-stacker
    c67586e build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00
Bruce Ashfield
cf21b60f4e podman-tui: update to 0.3.x -tip
Bumping podman-tui to version v0.3.0-82-gcd51747, which comprises the following commits:

    da1eea3 new ui color theme
    36230ca CI setup
    cb43be9 update vagrant box to Fedora 36
    7ad72ce pre-commit configuration and fixes
    a6749cd Bump github.com/docker/docker
    8cadc6f Bump github.com/containers/storage from 1.40.2 to 1.41.0
    9070e74 doc update - install.md
    ef05222 pod/container top dialog ui update
    91e73ee image history dialog ui update
    097674e container stats dialog ui update
    fb11dc7 image search/pull dialog ui update
    b6bda1a sort categories for pod/containers create and image build dialogs
    5dd3e38 code coverage for ui/dialogs package
    5bde8a5 Bump github.com/containers/podman/v4 from 4.0.3 to 4.1.0
    6ffb274 Bump github.com/docker/docker
    bd08f23 Bump github.com/containers/buildah from 1.25.1 to 1.26.1
    697eb4f Bump github.com/containers/common from 0.47.5 to 0.48.0
    ff98068 Bump github.com/containers/storage from 1.40.0 to 1.40.2
    bc47ea7 Bump github.com/containers/storage from 1.39.0 to 1.40.0
    1c46d42 exec terminal update (automatic resize and detach)
    1ef0c11 adding image tree command
    5db9ef8 adding security options fields to pod create dialog
    aeeba55 adding container create security options fields
    5c90866 adding format and security options fields to image build dialog
    3d0b91b doc update
    0f9ead6 adding format and security options fields to image build dialog
    1091a3f windows support
    26134e7 removing unused connection dialog
    206ac15 fixing golint
    4ef15e4 removing image index from name field string search result
    d9ed9e3 activating left/right key to switch between different pages (#55)
    06f342c adding image import command (#51)
    c986342 activate <delete> key for removing items (#50)
    9a962a8 Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0
    e29ce96 using utils pkg common variables and functions
    61904de new feature: image save
    c9f132a doc update - fedora podman-tui rpm
    372c71f Bump github.com/containers/buildah from 1.24.3 to 1.25.1
    d592f1d error dialog ui update to separate the title from the error message
    1b9045f new feature: image build
    c7f3032 Bump github.com/containers/podman/v4 from 4.0.2 to 4.0.3
    0311f68 Bump github.com/containers/storage from 1.38.2 to 1.39.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00