Commit Graph

9 Commits

Author SHA1 Message Date
Bruce Ashfield
3cd2f56a16 oci-runtime-spec: update to 1.0.2-tip
Bumping runtime-spec to version v1.0.2-79-g7ceeb8a, which comprises the following commits:

    600a8bd cgroup ownership: clarify that some files may not exist
    0608c1f Switch to GitHub Actions, CODEOWNERS, etc.
    f4ef391 specify cgroup ownership semantics
    104385d config-linux: MAY reject an unfit cgroup
    411082c add youki to implementations.md
    6641127 alphabetize the implementation list.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:29 -04:00
Martin Jansa
baf9e1a06f global: convert github SRC_URIs to use https protocol
* apply the same also for recipes using PKG_NAME starting
  with github.com which the conversion script doesn't update
  automatically

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-03 09:37:00 -04:00
Bruce Ashfield
e13ea7df92 oci-runtime-spec: update branch specification to main
master has become main in the runtime spec, so we update our recipe to
match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-03 09:33:46 -04:00
Bruce Ashfield
ac399ad091 global: add explicit branch to all SRC_URIs
As introduced in the oe-core post:

  https://lists.openembedded.org/g/openembedded-core/message/157623

SRC_URIs without an explicit branch will generate warnings, and
eventually be an error.

We run the provided conversion script to make sure that meta-virt
is ready for the change.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02 09:57:03 -04:00
Bruce Ashfield
cf81b3dec5 oci-runtime-spec: update to 1.0.2
Bumping runtime-spec to version v1.0.2-71-gab23082, which comprises the following commits:

    411082c add youki to implementations.md
    6641127 alphabetize the implementation list.
    15f418e fix the lifecycle reference in the states listing
    f0ac327 defs-zos: [Fix] prevent schema parsers from hitting recursion-loop while resolving types.
    cc7f6ec config-linux: Add Intel RDT CMT and MBM Linux support
    c83b45e Introduce zos as platform.
    0c021c1 config-linux: clarify the handling of ClosID RDT parameter
    9e65944 config-linux: fix indentation on IntelRdt
    0f84938 schema/defs-linux: Fix inconsistencies with seccomp notify
    7c549cb seccomp: Add missing const for seccomp notify action
    58798e7 Add Seccomp Notify support
    8c363e8 Proposal: runtime should ignore capabilities that cannot be granted
    f02cd4a config-linux: mark memory.kernel[TCP] as NOT RECOMMENDED
    76f7818 README: Fix broken link for charter
    f7ef278 seccomp: allow to override default errno return code
    ec964df seccomp: expect error with invalid errnoRet
    2978430 config-linux: fix personality link
    e9429bb Makefile: Fix golint URL used in go get
    8f65443 travis: fix go_import_path
    3866eec MAINTAINERS: update vbatts email
    2fe0475 Add support for SCMP_ACT_KILL_THREAD
    fd895fb Change all references from whitelist to allowed
    11bfea2 Fix int64 and uint64 type value ranges
    57a316b docs: Added enclave OCI runtime rune to implementations
    938cf9f Update seccomp architectures to support RISCV64
    d3f079a config.go: make umask a pointer
    a02a293 Update State structure to use the new ContainerState type
    7571d3d cgroup: add cgroup v2 support
    66ad83f Use dedicated type for Container State
    89419f0 Add State status constants to spec-go
    09fc3b4 Remove superfluous 'an'
    0e72101 Add Giuseppe Scrivano as runtime spec maintainer
    6042999 Define State for container and runtime namespace
    a9f1170 Add seccomp kill process
    d759f35 MAINTAINERS: Add @cyphar as maintainer
    f9df045 seccomp: fix go-specs for errnoRet
    3bfcde2 seccomp: allow to override errno return code
    1ac6f8d specs-go: bump master back to -dev
    c4ee7d1 specs-go: update version to 1.0.2
    ce773cb ChangeLog: changes v1.0.1...v1.0.2
    5ef5c78 Makefile: avoid SELinux for making docs
    d22e8e0 *: release process is duplicated in RELEASES.md
    41c3e47 Review (tianon)
    9be9595 Clarify case with pre-configured Intel RDT closID
    76c0da2 config-linux: describe more about rootfs mount propagation
    353ddcb config-linux: add SHOULD to linux.namespaces.type
    37fab77 Fix typo in RELEASES.md
    baa7978 remove unneeded indent
    a87fe24 Makefile: no DCO with git-validation on travis
    bacc285 MAINTAINERS: remove philips
    d5bfb2b MAINTAINERS: remove Vishnu
    dda13dc PullApprove: No need for 3 DCO checks
    12fd09a RELEASE: document how to do the release
    c166268 Add create-container, create-runtime and start-container hooks
    e6e17ad schema: drop id from umask
    fac34e2 schema: fix indentation
    03c526b schema: add missing definition for personality
    2b844a0 Add support for SCMP_ACT_LOG
    66f4ffa Add new seccomp action.
    d1ef109 config-linux: support seccomp flags
    ff32f02 implementations.md: fix repository for crun
    23c4be2 Update meeting info section to point to "org" repo
    78ab98c Fix markdown escape in config-linux
    5cc25d0 Add Linux personality support
    234aa0b config-linux: Add Memory cgroup's use_hierarchy
    6b04c63 config: add "umask" field to POSIX "user" section
    dba5778 config: Collapse extensibility to a single MUST
    574182a schema/defs-linux: change weight type to uint16
    ec0fc3d runtime: Clarify ociVersion as based on the state schema

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-18 14:04:15 -04:00
Bruce Ashfield
d876cfc5bf global: overrides syntax conversion
OEcore/bitbake are moving to use the clearer ":" as an overrides
separator.

This is pass one of updating the meta-virt recipes to use that
syntax.

This has only been minimally build/runtime tested, more changes
will be required for missed overrides, or incorrect conversions

Note: A recent bitbake is required:

    commit 75fad23fc06c008a03414a1fc288a8614c6af9ca
    Author: Richard Purdie <richard.purdie@linuxfoundation.org>
    Date:   Sun Jul 18 12:59:15 2021 +0100

        bitbake: data_smart/parse: Allow ':' characters in variable/function names

        It is becomming increasingly clear we need to find a way to show what
        is/is not an override in our syntax. We need to do this in a way which
        is clear to users, readable and in a way we can transition to.

        The most effective way I've found to this is to use the ":" charater
        to directly replace "_" where an override is being specified. This
        includes "append", "prepend" and "remove" which are effectively special
        override directives.

        This patch simply adds the character to the parser so bitbake accepts
        the value but maps it back to "_" internally so there is no behaviour
        change.

        This change is simple enough it could potentially be backported to older
        version of bitbake meaning layers using the new syntax/markup could
        work with older releases. Even if other no other changes are accepted
        at this time and we don't backport, it does set us on a path where at
        some point in future we could
        require a more explict syntax.

        I've tested this patch by converting oe-core/meta-yocto to the new
        syntax for overrides (9000+ changes) and then seeing that builds
        continue to work with this patch.

        (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284)

        Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02 17:17:53 -04:00
Bruce Ashfield
cf875d9ee9 containers/runtime-spec: update to v1.01
Updating the reference spec to v1.01. No functional or runtime changes
are expected from this.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Jason Wessel
a31f735bda oci-runtime-tools, oci-runtime-spec: Uprev to runc 1.0-rc3 versions
The config.json has elements which have changed in the latest runc.
These changes are not backward compatible with older versions of runc.

Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2017-07-13 13:53:58 -04:00
Bruce Ashfield
b18acd8bc4 oci: introduce oci-image-tools (and dependencies)
The oci image tools allow the easy manipulation of containers and
bundles.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2017-02-15 14:57:35 -05:00