MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2025-07-19 20:59:41 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,288 Commits 38 Branches 0 Tags 9.2 MiB
c431b46959
Commit Graph

2288 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bruce Ashfield
c431b46959 crun: update to v1.9.2 
Bumping crun to version 1.9.2-12-g8af8ee2, which comprises the following commits:

    bdb95d6 features: export intelRDT status
    e2f9853 update: support update of Intel RDT
    05bc600 libcrun: support update of Intel RDT
    41ae2a2 libcrun: plug Intel RDT support
    52d5faa libcrun: add Intel RDT support functions
    a7a1af9 container: fix early return
    122f8ae linux: open mounts before setgroups if in a userns
    64105d9 Use overlay and single nix derivation
    35274d3 NEWS: tag 1.9.2
    8f6b76f tests, podman: enable more tests
    255268d Reset the inherited cpu affinity after moving to cgroup
    745b6d9 tests, podman: run tests on overlay
    f42e279 tests, podman: get more information on the environment
    379b17c tests, podman: avoid deprecated options
    bd251c9 rpm: do not special case krun man
    fe4e15d build: install krun.1 only if krun is enabled
    0cabf0c rpm: fix manpage installation
    67ee730 Packit: notify @containers/packit-build team on failed tasks
    1f2769e linux: fix fallback mechanism in a userns
    a0b7e18 NEWS: tag 1.9.1
    bb4e975 utils: partially rewrite improve error message patch
    14afa8a utils: fix ignore ENOTSUP when chmod a symlink
    0acb237 oci-validation,test: lock tap to @16.3.8
    bbb1c87 tests: install device-mapper-devel
    75dd83c podman, test: disable more tests failing in the CI
    98db1d2 utils: improve error message for ensure_dir
    57262a2 utils: ignore ENOTSUP when chmod a symlink
    523eed3 linux: add new fallback when mount fails with EBUSY
    2239c50 linux: teach MS_MOVE to do_mount
    c9a1a12 Add man page for krun
    8645d1a Fix CentOS 7 Build by Checking if FSOPEN_CLOEXEC exists
    a538ac4 NEWS: tag 1.9
    1e2f0c4 fix: correctly handle unknow signal string
    41fa779 crun delete: call systemd's reset-failed
    76b80ae fix random errors

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
8933a2cf4c cri-tools: update to v1.28.0-tip 
Bumping cri-tools to version v1.26.0-353-gf8733ddf, which comprises the following commits:

    f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0
    75c136c8 Validate sandbox and container metadata
    4f3475f5 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0
    93bc1bf2 Bump golang.org/x/net from 0.15.0 to 0.16.0
    57d7848c Switch to `github.com/distribution/reference`
    f61309ae Bump github.com/docker/distribution
    6a1c7883 Bump github.com/onsi/gomega from 1.27.10 to 1.28.0
    024268e7 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1
    04fb3af1 Verify required checkpoint parameters are set
    544d4792 Remove duplicated import "k8s.io/cri-api/pkg/apis"
    dbd6c086 Enable staticcheck linter with SA1019 to find deprecated methods
    06bb4c99 Use executor.StreamWithContext instead of deprecated executor.Stream
    092eddc1 Address deprecation of Strings.Title
    9059543c Remove unnecessary rand.Seed
    52fcfd43 Address deprecated io/ioutils
    833ab93c Address deprecated call cli.NewExitError of urfave/cli package
    3e036cfa Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0
    b84b1817 Bump actions/checkout from 3 to 4
    4b5c3fe1 Update version compatibility between Kubernetes and cri-tools
    7458ab35 Bump golang.org/x/net from 0.14.0 to 0.15.0
    aa049113 Bump github.com/docker/docker
    71beb1da Fix containerd tests

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
82d2ac74cb cri-o: update to 1.29.0 
Bumping cri-o to version v1.27.0-662-gf8ccf314a, which comprises the following commits:

    3b7ab35ff build(deps): bump crate-ci/typos from 1.16.17 to 1.16.18
    f7d3228a7 Avoid an unnecessary c/storage lookup in ListImages
    96e6aa9b5 Inline getImageCacheItem into ListImages
    e4f2b888d Split imageIsBeingPulled from ListImages
    c7188518d Simplify ListImages more
    1cfe3c8bb Simplify appendCachedResult
    ae597ba16 Remove the "filter" parameter to ListImages
    e0750462f Turn ListImages(filter) into ImageStatus
    50ce23e89 Simplify storageImageStatus a bit
    2cb166512 Simplify ImageStatus a bit
    1b0e82a22 Split storageImageStatus from ImageStatus
    ad8be44cc Simplify error handling in ImageStatus
    203612b23 Move the ImageResult -> ImageStatusResponse conversion out of the loop
    97329e4fa build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0
    013a0998c Update release-notes to v0.16.1
    dc44bac35 Fix quoting issue in usage help text
    f22040da2 crio: add support for --imagestore
    1d0e5d074 build(deps): bump crate-ci/typos from 1.16.15 to 1.16.17
    bb4ab8110 Run GitHub actions in `update-nixpkgs-*` branches
    45a6e70e7 Update nixpkgs
    8ec74c5fa contrib/test: pin the latest release of runc
    2505851e0 Update crun to 1.9.2
    f3e53a058 test: Add test for image pinning behavior
    12cabc651 internal/storage: compute Pinned field from recently loaded image
    0fd641c6d build(deps): bump crate-ci/typos from 1.16.14 to 1.16.15
    347194d3f build(deps): bump crate-ci/typos from 1.16.13 to 1.16.14
    f532cbd89 Add nixpkgs update cron
    8fa9260fc build(deps): bump crate-ci/typos from 1.16.12 to 1.16.13
    72280f09c Update install.md removed spaces (markdown lint error)
    fe9ed4e3a storage: add support to split filesystem using imagestore
    544db3209 RFC: Use RuntimeContainerMetadata for passing container data
    c9309ebb6 Add a layer name in one step
    4f5a2e95c Microoptimize reference creation
    3a77cc956 Eliminate the now unused imageAuthFile and isPauseImage parameters
    61d86923c Simplify createContainerOrPodSandbox again
    a936e6861 Simplify CreatePodSandbox
    39095cbb4 CHANGE: Simplify CreateContainer image lookup
    a09320639 Eliminate the clearly dead part of the just copy&pasted code
    a7f841955 Blindly copy the image handling code from createContainerOrPodSandbox into callers
    6cabaaee1 Remove an imageID parameter to CreatePodSandbox
    2b4652c52 Fix/Add error handling
    8e1e1e672 update containers storage to 1.50.2
    5d8538318 build(deps): bump DavidAnson/markdownlint-cli2-action from 12 to 13
    6c1574efc Fix nix `dirty` build
    d951faa32 Make the release branch fast forward a cronjob
    5dee42bcf build(deps): bump crate-ci/typos from 1.16.11 to 1.16.12
    91b83b10c Fix release notes job
    096f803a3 Bump golang dependencies
    7d86c2e25 docs: fix CI failure
    f182fb411 Bump version to 1.29.0
    51bae7a96 Remove the IsFullIdentifier check from Server.pullImage again
    7eb248b1a Don't silently modify the caller's SystemContext
    2d72e13e6 Fix a VERY misleading comment.
    472d2c5f9 Remove an unnecessary check
    23d7c35d5 Remove an unnecessary parse call
    6f9a7173f Remove an unnecessary check
    8c3e301da Optimize handling of full image IDs
    5f45d232a Remove the ErrCannotParseImageID special case
    335d4b0f3 Fix a VERY misleading comment
    b489507c9 Remove a completely unused ErrImageMultiplyTagged
    98f171147 Make Server.pullImage responsible for rejecting image IDs
    e292f17c0 docs: Update the containers/image branch name
    6005b03f2 contrib/test/ci: remove the redundant golang setup file
    059a7b5f8 Add conmon-rs binary to bundle
    4ac3aeef2 internal/storage: address unpredictable behavior of image names
    61a0b7c79 config/server: add functions to check IDMap support in runtime
    9ce778351 Remove golang-go from debian installation
    3d450274e Pause container during checkpointing
    e069cc827 contrib/test: fix golang version extraction for CI
    0774b644d build(deps): bump actions/checkout from 3 to 4
    d6f4c7100 Adopters.md: fix linting issue
    d805d28fd Add new adopter
    940de5009 build(deps): bump crate-ci/typos from 1.16.10 to 1.16.11
    ac9c6fbfe Don't vendor main Kubernetes repo any more
    4a1e406b0 Mention Roadmap GitHub Project in README.md
    bacc5e638 build(deps): bump crate-ci/typos from 1.16.9 to 1.16.10
    9cbd8d555 build(deps): bump cachix/install-nix-action from 22 to 23
    798a8d701 build(deps): bump actions/checkout from 3 to 4
    758e3d8c3 cgmgr: reorder setting of sched_load_balance for pod cgroup
    0e6b13e08 build(deps): bump crate-ci/typos from 1.16.8 to 1.16.9
    ff434ba27 build(deps): bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2
    0002792fa build(deps): bump DavidAnson/markdownlint-cli2-action from 11 to 12
    3aa18aff3 Switch to go 1.21
    5b9f7f96d Add dependabot group for OTEL deps
    d7ad3fcbf build(deps): bump github.com/containers/buildah from 1.31.2 to 1.31.3
    85c3d9db1 Bump conmon and crun dependencies
    5ab387fe5 build(deps): bump github.com/containers/common from 0.55.3 to 0.55.4
    a4f2d8071 server: remove deprecated functionality
    28ae1f81a Fix bundle e2e tests
    a9afa0442 Add ppc64le binaries to release notes
    c8f8ca498 Add Kubernetes package test for static binary bundle
    734e1538c build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1
    873c0f420 Policy: Allow backport of independent features
    bebd421b5 Configure systemd install path based on OS
    ec4bbac12 feat(cmdrunner): add support for context
    59f9b823d move shmSetup in server/sandbox to internal/factory/sandbox
    d1946b30a blockio: add blockio_reload option
    ce1cdfa54 main: create parent crio dir before creating clean.shutdown.supported

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
022ec69e9b containerd: update to 1.7.7 
Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits:

    d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint
    04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler
    6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
    0e2320398 Uncopypaste parsing of OCI Bundle spec file
    a34fa5681 Prepare release notes for v1.7.7
    6ca0aebf0 Allow for images with artifacts to pull
    7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository
    7779ce64e remotes: always try to establish tls connection when tls configured
    b3db314a5 Bump x/net to 0.13
    a83c66813 Require plugins to succeed after registering readiness
    171d76849 cri: call RegisterReadiness after NewCRIService
    6013b5e03 cri: stop recommending disable_cgroup
    3d27bc738 Handle unexpected shim kill events
    4ffa3ed29 Build binaries with 1.21.1
    5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1
    09633b539 deprecate logs package, but disable linter (for transitioning)
    cb201519f alias log package to github.com/containerd/log v0.1.0
    a5024e6dd vendor: github.com/stretchr/testify v1.8.4
    7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3
    3ca015e55 nri: update mock plugin handlers
    4cd208c1f vendor: update github.com/containerd/nri@v0.4.0
    8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status
    3e09c65b2 Prepare release notes for v1.7.6
    5ebf05d97 push: inherit distribution sources from parent
    d206896dd content: add InfoProvider interface
    423693d7b [release/1.7] update to go1.20.8
    c7a35ccdc Fix transfer service dependencies:
    38d4e506d Invoke Stable ABI compatibility function in windows platform matcher
    ddffc7c9a Update hcsshim tag to v0.11.0
    b449440a4 CRI: Support Linux usernames for !linux platforms

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
62d5c5a4f5 kernel: drop 6.4 .inc file 
6.4 is no longer in OEcore, so we drop our associated
kernel .inc file.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Mingli Yu
5cec30aae4 umoci: Remove the buildpath issue 
Pass -trimpath to the build to fix the below build path issue:
  WARNING: umoci-v0.4.7+git-r0 do_package_qa: QA Issue: File /usr/sbin/umoci in package umoci contains reference to TMPDIR [buildpaths]

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
01da1f2a29 buildah: update to 1.32.0 
The new version has an internally stripped binary, so we inhibit the
QA warning.

Bumping buildah to version v1.31.0-159-g4f3d7b0b6, which comprises the following commits:

    5151ccff5 .cirrus.yml: run tests relative to the release-1.32 branch
    2326d4929 Tag v1.32.0
    e90b3502b GetTmpDir is not using ImageCopyTmpdir correctly
    ccac7ca0b Run codespell on code
    6be719454 Bump vendor containers/(common, storage, image)
    9545744e8 Cirrus: Remove multi-arch buildah image builds
    206cda149 fix(deps): update module github.com/containerd/containerd to v1.7.6
    0191bc671 Split GetTempDir from internal/util
    6e6827b27 Move most of internal/parse to internal/volumes
    292b429f6 copier: remove libimage dependency via util package
    4f3abf936 Add some docs for `build --cw`, `commit --cw`, and `mkcw`
    e89fac6c9 Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`
    cc619c28d Make sure that pathnames picked up from the environment are absolute
    4ee5f020a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
    fd72bbee2 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
    754568580 Don't try to look up names when committing images
    d5b02e551 fix(deps): update module golang.org/x/crypto to v0.13.0
    3fc5274d3 docs: use valid github repo
    f94689199 fix(deps): update module golang.org/x/sys to v0.12.0
    6ec6f046f vendor containers/common@12405381ff
    df1bc3834 push: --force-compression should be true with --compression-format
    9c5cde533 Update module github.com/containerd/containerd to v1.7.5
    3ebeaa2dd [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2
    cc9f15f09 docs: add reference to oci-hooks
    3454d5b29 Support passing of ULimits as -1 to mean max
    f330c77be GHA: Attempt to fix discussion_lock workflow
    4942cc908 Fixing the owner of the storage.conf.
    f4e43f0e8 pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD
    2b57cef2b Use buildah repo rather then podman repo
    a8bbc9f5f GHA: Closed issue/PR comment-lock test
    82069390f fix(deps): update module github.com/containers/storage to v1.49.0
    4c4ff3128 chore(deps): update dependency containers/automation_images to v20230816
    af3891258 Replace troff code with markdown in buildah-{copy,add}.1.md
    e997a966f [CI:BUILD] rpm: spdx compatible license field
    a3f2aa3c7 executor: build-arg warnings must honor global args
    f6fb75d9d fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    5643a7fa8 chroot: `setSeccomp` add support for `ArchPARISC(64)` and `ArchRISCV64`
    8428dee36 make,cross: restore loong64
    e3cd4d790 Clear CommonBuildOpts when loading Builder status
    d68d9a237 buildah/push/manifest-push: add support for --force-compression
    3445a775a vendor: bump c/common to v0.55.1-0.20230811093040-524b4d5c12f9
    2d6e43071 chore(deps): update dependency containers/automation_images to v20230809
    065b95599 [CI:BUILD] RPM: fix buildtags
    3964ca9d6 fix(deps): update module github.com/opencontainers/runc to v1.1.9
    591b5390d chore(deps): update dependency ubuntu to v22
    204c5a1ce chore(deps): update dependency containers/automation_images to v20230807
    9ab3b526d [CI:BUILD] Packit: add fedora-eln targets
    ed2a501c9 [CI:BUILD] RPM: build docs with vendored go-md2man
    5bdb8c70d packit: Build PRs into default packit COPRs
    fc7329d7c Update install.md
    f6c4ead1b Update install.md changes current Debian stable version name
    2254ca208 fix(deps): update module golang.org/x/term to v0.11.0
    248f5a2b3 fix(deps): update module golang.org/x/crypto to v0.12.0
    ae36f6542 tests: fix layer-label tests
    f888b3d84 buildah: add --layer-label for setting labels on layers
    239b2a877 Cirrus: container/rootless env. var. passthrough
    65c1c9327 Cirrus: Remove duplicate env. var. definitions
    978be7796 fix(deps): update github.com/containers/storage digest to c3da76f
    62d405771 Add a missing .Close() call on an ImageSource
    e588986fa Create only a reference when that's all we need
    fe947ed9c Add a missing .Close() call on an ImageDestination
    597d30880 CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    b9ac8d5e0 manifest/push: add support for --add-compression
    d27a82356 manifest/inspect: add support for tls-verify and authfile
    071f851da vendor: bump c/common to v0.55.1-0.20230727095721-647ed1d4d79a
    512273587 vendor: bump c/image to v5.26.1-0.20230726142307-8c387a14f4ac
    3d8616537 fix(deps): update module github.com/containerd/containerd to v1.7.3
    c20d0164f fix(deps): update module github.com/onsi/gomega to v1.27.10
    2e7dcc143 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
    6a236937a fix(deps): update module github.com/containers/image/v5 to v5.26.1
    d78f6c2a2 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0
    dbc71b7cc Update vendor of containers/(storage,image,common)
    331fac670 fix(deps): update module github.com/opencontainers/runc to v1.1.8
    9cc5d5e8c [CI:BUILD] Packit: remove pre-sync action
    09a1cd698 fix(deps): update module github.com/containers/common to v0.55.2
    11cec8523 [CI:BUILD] Packit: downstream task script needs GOPATH
    70cb4c7e0 Vendor in containers/(common, image, storage)
    173ac7dc9 fix(deps): update module golang.org/x/term to v0.10.0
    8b84d9b8a [CI:BUILD] Packit: fix pre-sync action for downstream tasks
    97b84029a contrib/buildahimage: set config correctly for rootless build user
    cba7b9fae fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
    e00845797 Bump to v1.32.0-dev
    f704a67a1 Update debian install instructions
    4c72c25a2 pkg/overlay: add limited support for FreeBSD

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Patrick Wicki
7e17ee02a3 catatonit: update to version 0.2.0 
Main change is the relicense from GPL-3 to GPL-2, which will allow
catatonit (and hence podman) to be used in deployments where the license
previously posed an issue.

Contains the following commits:

        7f0c9bb version: release catatonit 0.2.0
        fe191ef license: switch to GPLv2-or-later

Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
51a017123d k3s: update to v1.28.2 
Bumping k3s to v1.28.2, which comprises the following commits:

    6330a5b49c Update to v1.28.2 and go v1.20.8 (#8364)
    550dd0578f Bump kine to v0.10.3
    b3bb7e5a11 update channel for version v1.28 (#8305)
    0d23cfe038 Add RWMutex to address controller
    cba9f0d142 Add new CLI flag to disable TLS SAN CN filtering
    2cb7023660 Use already imported semver, bump kine
    f2d0c5409a Add check for support on cp nodes
    51f1a5a0ab Review comments and fixes
    42c2ac95e2 CLI + Backend for Secrets Encryption v3
    e45a674457 Add new encryption test
    b967f92785 Replace os.Write with AtomicWrite function
    ced330c66a [v1.28] CLI Removal for v1.28.0 (#8203)
    62db5fa27c Update to v1.28.1 (#8239)
    af50e1b096 Update to v1.28.0-k3s1 (#8199)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
77d31a83ed oe-go-mod-autogen: add extra information to duplicate module paths 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-11-06 16:21:12 +00:00
Bruce Ashfield
4c88600803 devtools: fork python3-flask-cors 
It is currently unclear if we have a hard dependency on this version
of the module.

meta-python has a newer version, so we are now breaking tests for
yocto compliance (the layer changes the hash).

For now, we fork the recipe to avoid the error and start preparing
to drop it.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-10-30 03:20:22 +00:00
Bruce Ashfield
d258c3d499 python3-nacl: drop recipe 
We introduced this to support python3-docker-compose, but docker
compose has moved onto being a go application.

meta-python has a newer version of the recipe, so our old one
is causing signature issues.

Dropping the recipe keeps everything happy

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-10-25 14:52:19 +00:00
Chen Qi
827092c2ec docker-compose: fix textrel QA issue 
Fix textrel QA issue like below:

  ERROR: QA Issue: docker-compose: ELF binary /usr/lib/docker/cli-plugins/
         docker-compose has relocations in .text [textrel]

The problem could be fixed by adding -buildmode=pie, as this option has
already been in GOBUILDFLAGS except for mips and riscv32, let's make
use of GOBUILDFLAGS.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-10-02 16:15:20 +00:00
Bruce Ashfield
7e9472c72b kernel: add 6.5 support 
The 6.5 kernel has now been tested against core and meta-virtualization
so we add the .inc file to show that status.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-10-01 15:12:56 +00:00
Bruce Ashfield
77fc0a2613 podman: mark incompatible with mips 
Some of the (current) rdepends for skopeo are not compatible with
mips.

To make this restriction more obvious, we also mark skopeo itself
incompatible with mips.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-28 01:25:29 +00:00
Bruce Ashfield
4e602f8949 skopeo: mark incompatible with mips 
When building skopeo for mips(64), we get the following errors:

| go.go:(.text+0xdd07fc): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC
| go.go:(.text+0xdd0830): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC
| go.go:(.text+0xdd0864): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC
| collect2: error: ld returned 1 exit status

Tag the recipe as incompatible with mips to avoid having it built
at all.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-28 01:23:12 +00:00
Bruce Ashfield
ccddfb1f8b libslirp-virt: remove recipe 
The external to m-virt users of libslirp-virt have been validated
against the OEcore version.

Having this recipe in world builds causes errors with sstate with
recent changes to bitbake.

Until we hit another runtime incompatibility, we can drop this
recipe. A previous commit excluding the recipe from world builds
was created as a reminder that we'll need to have that in place
if the recipe returns.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-27 01:04:05 +00:00
Bruce Ashfield
71041030c6 libslirp-virt: exclude from world 
Recent changes in oe-core have made the sysroot error on duplicate
files and symlinks.

We have this recipe as a compatibility fallback to some older
container stacks.

package lists and recipes that need this, can exclude the oe-core
recipe as required.

For now, we exclude it from world build, and mark it incompatible
with the oe-core libslirp.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-26 14:38:45 +00:00
Chen Qi
b65fe24b8c nerdctl: fix textrel QA issue 
Fix the following QA issue:

  ERROR: QA Issue: nerdctl: ELF binary /usr/bin/nerdctl has relocations in .text [textrel]

We want to use -buildmode=pie, in order to avoid duplicating codes with
go.bbclass, make use of GOBUILDFLAGS.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-25 01:23:34 +00:00
Bruce Ashfield
5510a784ff oe-go-mod-autogen: add README and extended --help information 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
ad460da806 oe-go-mod-autogen: add -v alias for -d 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Chen Qi
65b6286994 iptables: add kernel-module-xt-nat to RRECOMMENDS 
docker-compose needs it, otherwise, exporting port would failure
when running `docker compose up'. To reproduce the issue, use
commands shown in https://docs.docker.com/compose/gettingstarted/.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Chen Qi
96598a7d71 nerdctl: upgrade to v1.5.0 
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Chen Qi
0e2058840e docker-compose: upgrade to v2.20.3 
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Chen Qi
03085cfb54 docker-compose: fix installation location for multilib 
In case of multilib, the location is /usr/lib64/docker/cli-plugins,
which cannot be recognized by docker. We should use nonarch_libdir
instead.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
ae22af84a0 oe-go-mod: enhance help message 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
ff3dd2d68e oe-go-mod-autogen: whitespace cleanup, license and copyright 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Chen Qi
23ea9c77f9 oe-go-mod-autogen.py: add script to help adding/upgrading go mod recipes 
oe-go-mod-autogen.py is a helper script for go mod recipes. It follows
Bruce's initiative about how to deal with go mod recipes in OE.

Example:
cmd: <path_to>/meta-virtualization/scripts/oe-go-mod-autogen.py \
     --repo https://github.com/docker/compose --rev v2.20.3
output: src_uri.inc, relocation.inc, modules.txt

Copy these three generated files to replace the original ones,
then we only need update PV and SRCREV, and docker-compose is upgraded.

Below are some technical details.

* get module's repo from module name

  This script checks the following two URLs to determine the module's repo.
  1. https://<module_name_tweaked>?=go-get=1
  2. https://pkg.go.dev/<module_name_tweaked>

  The module_name_tweaked is derived from module_name, with the last components
  removed one by one. Let me use two examples to explain this.

  For module_name sigs.k8s.io/json, the sigs.k8s.io/json is first used as
  module_name_tweaked for searching. And we can correctly get the repo URL, so
  the search stops.

  For module_name github.com/k3s-io/etcd/api/v3, the following ones are used
  as module_name_tweaked:
  github.com/k3s-io/etcd/api/v3
  github.com/k3s-io/etcd/api
  github.com/k3s-io/etcd
  And when searching 'github.com/k3s-io/etcd', we get the repo URL, so the search
  stops.

* determine the srcdir:destdir mapping in 'vendor' creation

  To correctly form the 'vendor' directory, the mapping is critical.
  This script makes use of tag matching and path matching to determine
  the subpath in the repo for the module.

* avoid subpath being overriden by parent path

  We need to avoid subpath being overriden by parent path. This is needed
  for both SRC_URI ordering in src_uri.inc and the sites mapping ordering
  in relocation.inc. This script simply uses the length as the ordering key,
  simply for the reason that if a path is a subpath of another path, it must
  be longer.

* the .git suffix is removed to sync with each other

  Unlike normal recipes, go mod recipe usually have many SRC_URIs. This script
  remove the '.git' suffix from repo URL so that the repo URLs are in sync
  with each.

* basic directory hierarchy and caching mechanism

  <cwd>/repos: hold the repos downloaded and checked
  <cwd>/wget-contents: hold the contents to determine the module's repo
  <cwd>/wget-contents/<module_name>.repo_url.cache: the repo value cache
  This is to avoid unnecessary URL fetching and repo cloning.

* the ERROR_OUT_ON_FETCH_AND_CHECKOUT_FAILURE switch in script

  The script must get the correct repo_url, fullsrc_rev and subpath for
  each required module in go.mod to correctly generate the src_uri.inc and
  relocation.inc files. If this process fails for any required module, this
  script stop immediately, as I deliberately set ERROR_OUT_ON_FETCH_AND_CHECKOUT_FAILURE
  to True in this script. The purpose is to encourage people to report
  problems to meta-virt so that we can improve this script according to
  these feedbacks. But this variable can set to False, then the script
  only records the failed modules in self.modules_unhandled with reasons
  added, people can modify the generated src_uri.inc and relocation.inc
  to manually handle these unhandled modules if they are urgent to
  add/upgrade some go mod recipes.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
86ec0fea15 k3s: update to v1.27.5 
We refresh one patch, but otherwise, the build is unchanged.

Generated via:

 scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.27.5+k3s1

Bumping k3s to version v1.27.5+k3s1, which comprises the following commits:

    8d074ecb5a Add RWMutex to address controller
    f365a9cb98 Add new CLI flag to enable TLS SAN CN filtering
    8d6483a59e Update to v1.27.5 (#8236)
    e31f00f863 Move flannel to 0.22.2
    f8727f56d7 E2E test for token coverage (#8184)
    84ded911e9 Bump helm-controller/klipper-helm versions
    66bae3e326 Bump dynamiclistener for init deadlock fix
    e83b1ba4aa Fixed the etcd retention to delete orphaned snapshots based on the date (#8177)
    561db17a31 chore: Bump Trivy version (#8178)
    38a0b91c1a chore: Bump Trivy version (#8150)
    7f58a1cb23 Run integration test CI in parallel (#8156)
    c97211866a Fix for cluster-reset backup from s3 when etcd snapshots are disabled (#8155)
    9702f92345 Fix for Kubeflag Integration test (#8154)
    b2e71553ce Use VERSION_K8S in tests instead of grep go.mod
    bc332ac667 Use 'go list -m' instead of grep to look up versions
    53fc3eef0a add --disable-cloud-controller and --disable-kube-proxy test (#8018)
    e551308db8 fix for etcd-snapshot delete with --etcd-s3 flag (#8110)
    45bc26309f Remove terraform test package (#8136)
    fd531140e5 Bump kine to v0.10.2
    ca7aeed090 Etcd snapshots retention when node name changes (#8099)
    23d6842f9a Bump versions for etcd, containerd, runc, kine
    a0da8eded3 Bump docker/docker to master commit
    aa76942d0f Add FilterCN function to prevent SAN Stuffing
    3515d712a7 Fix typo in terraform/README.md (#8090)
    a87b183f9c E2E: Support GOCOVER for more tests + fixes (#8080)
    46cbbab263 Consolidate CopyFile functions (#8079)
    59eec78c62 Fix tailscale bug with ip modes
    468bddb59c update stable channel to v1.27.4+k3s1 (#8067)
    767b64ba58 Fix coreos multiple installs (#8083)
    cc9dce5764 Security bump to docker/distribution (#8047)
    f21ae1d949 Make apiserver egress args conditional on egress-selector-mode
    546dc247a0 Add support for `{{ template "base" . }}` in etc/containerd/config.toml.tmpl (#7991)
    6d360e6473 Unit test for MustFindString (#8013)
    946c8ea842 ADR on secrets encryption v3 (#7938)
    780e638099 Update flannel to v0.22.1
    e56839b329 Update cni plugins version to v1.3.0
    36645e7311 fix update go version doc (#8028)
    d8ae6ef59b Update to v1.27.4 (#8014)
    be44243353 Adjust default kubeconfig file permissions (#7978)
    0b18a65d4f Revert "Warn that v1.28 will deprecate reencrypt/prepare (#7848)"
    58a8deb25d fix image_scan.sh script and download trivy version (#7950)
    3eb4e12c3b Don't use zgrep in `check-config` if apparmor porfile is enforced (#7939)
    34617390d0 Generation of certificates and keys for etcd gated if etcd is disabled. (#6998)
    2eddfe6cf4 Add retry for clone step (#7862)
    782a3a1cb4 Bump google.golang.org/grpc from 1.51.0 to 1.53.0 in /tests/terraform (#7879)
    8405813c12 Fix rootless node password (#7887)
    607320d670 Improve for K3s release Docs (#7864)
    b9a2bf11ee Support setting control server URL for Tailscale.
    4ab01f3941 Warn that v1.28 will deprecate reencrypt/prepare (#7848)
    9e334153cf add e2e s3 test (#7833)
    bca0adbca8 Fix code spell check
    7f50b40cfe Fall back to basic/bearer auth when node identity auth is rejected
    ce3443ddf6 Allow k3s to customize apiServerPort on helm-controller
    324f9ad4da fix e2e startup flaky test (#7839)
    72d50b1f7c Add `--data-dir` to the `k3s certificate rotate-ca` cli (#7791)
    d593c83603 Remove file_windows.go
    f21a01474d Check if we are on ipv4, ipv6 or dualStack when doing tailscale
    0809187cff Adding cli to custom klipper helm image (#7682)
    c7dec8ed24 Update stable channel to v1.27.3+k3s1 (#7827)
    70691a95ee Faster K3s Binary Build Option (#7805)
    2215870d5d chore: pkg imported more than once
    fe9604cac1 Update Kubernetes to v1.27.3 (#7790)
    d968e64de0 Add commands to logout from tailscale
    43611bb5ad Fix the error report
    b66a118362 Bump helm-controller to v0.15.0 for create-namespace support
    a5874f855f Remove unused libvirt config
    c6a6e8ef57 Fix spelling check
    cc22c80e49 Add issue template for OS validation (#7695)
    efa86a63e8 Remove unnecessary daemonset addition/deletion (#7696)
    7c151d468f add private registry e2e test (#7653)
    869e030bdd VPN PoC
    1e73bb8967 Run integration tests on E2E changes, ensures correct coverage values
    8f9502233a E2E: Inject gocover ENV for k3s commands
    4a68fbd8e9 E2E: Use sudo for all RunCmdOnNode
    00f3e2413f chore: Bump Trivy version (#7672)
    dc6c569b98 Shortcircuit commands with version or help flags (#7683)
    3a8e98a3b8 Bump docker go.mod (#7681)
    e5e1a674ce Enable containerd aufs/devmapper/zfs snapshotter plugins
    5170bc5a04 Improve error response logging
    45d8c1a1a2 Soft-fail on node password verification if the secret cannot be created
    b0188f5a13 Test Coverage Reports for E2E tests (#7526)
    afc88cec88 check variant before version to decide rpm target and packager
    fa0dc5900a Use el8 rpm for fedora 38 and 39 (#7664)
    7c0a7687c6 add format command on Makefile and remove vendor
    9227e0bde2 Bump vagrant libvirt with fix for plugin installs (#7605)
    b64a226ebd Make LB image configurable when compiling k3s
    a5928ee137 chore: Bump golang:alpine version
    612473755d Add ADR
    7b61aacb56 Fix test file list
    64a5f58f1e Create new kubeconfig for supervisor use
    8748813a61 Use distinct clients for supervisor, deploy, and helm controllers
    e9958cf070 Bump metrics-server to v0.6.3 and update tls-cipher-suites
    93279d2f59 Bump klipper-lb to v0.4.4
    0485a56f33 allow coredns override extensions
    85e10cf9d2 update channels (#7634)
    9543470eb7 Add el9 selinux rpm (#7635)
    d1b0254b91 Update flannel version
    213d7ad499 Revert "Add el9 selinux rpm (#7443)" (#7608)
    d55ec08675 Add el9 selinux rpm (#7443)
    fe554fe703 Pin emicklei/go-restful to v3.9.0
    91c5e0d75a Fix iptables rules clean during upgrade
    d069a85fcc Update to v1.27.2-k3s1 (#7575)
    290f67c939 Add '-all' flag to apply to inactive units
    2b24c9917c Bump alpine from 3.17 to 3.18 in /conformance (#7551)
    266926693a Bump alpine from 3.17 to 3.18 in /package (#7550)
    9bcfac8b88 Add Rotation certification Check (#7097)
    4aafff0219 Wrap error stating that it is coming from netpol
    cbe8d33c93 Bump containerd/runc to v1.7.1-k3s1/v1.1.7
    8f450bafe1 Bump helm-controller version for repo auth/ca support
    06296815e6 Adding PITS and Getdeck Beiboot as adopters thanks to Schille and Miworfi for the additions (#7524)
    607cbf0ad6 Bump containerd to v1.7.0 and move back into multicall binary
    239021e759 Consistently use constant-time comparison of password hashes
    9ec1789c21 Bump kube-router version to fix a bug when a port name is used
    c6dc789e25 Add support for `-cover` + integration test code coverage (#7415)
    3982213f06 add kube-* server flags integration tests (#7416)
    b32bf49541 Bump kine to v0.10.1
    c98137ddca Fix token startup test
    cf9ebb3259 Fail to validate server tokens that use bootstrap id/secret format
    7175ebe2be E2E: Startup test cleanup + RunCommand Enhancement (#7388)
    bbb8ee0b2d Add dependabot label and reviewer (#7423)
    cedefeff24 Bump cni plugins to v1.2.0-k3s1
    a736b4b1b9 local-storage: Fix permission (#7217)
    437ad128c7 Migrate netutil methods into /utils/net.go
    e1d4cff14c Enable FindString to search dotD config files (#7323)
    132b41c3bf Add v1.27 channel (#7387)
    d5f560360e Handle multiple arguments with StringSlice flags (#7380)
    a3ddff2f29 chore: Bump Trivy version
    e61fde93c1 Fix MemberList error handling and incorrect etcd-arg passthrough
    91afb38799 Retry cluster join on "too many learners" error
    f1b6a3549c Fix stack log on panic
    c44d33d29b Fix race condition in tunnel server startup
    1ca035accc Add e2e test for --disable-agent
    31a6386994 Improve egress selector handling on agentless servers
    5348b5e696 Improve error message when CLI wrapper Exec fails
    bbda54b332 Add longhorn storage test (#6445)
    0247794aa9 go generate
    0bbc6ad3f0 Bump traefik to v2.9.10
    1ac03aad43 Add integration tests for etc-snapshot server flags and refactor /tests/integration/integration.go/K3sStartServer (#7300)
    ef648b7a5d Bump Runc and Containerd (#7339)
    9539147ee1 Bump k3s-root for aarch64 page size fix
    ad41fb8c96 Create CRDs with schema
    bc5b42c279 Cleanup help messages (#7369)
    f076080b2b Bump cri-dockerd (#7347)
    87f0dc5dd3 update channel server for april 2023 (#7327)
    66fcca66cb ensure that klog verbosity is set to the same level as logrus by repeatedly settting it every second during k3s startup
    36699bbd60 Changed command -v redirection for iptables bin check
    944f811dc5 v1.27.1 CLI Deprecation (#7311)
    f2bde63eea Kubernetes v1.27.1 (#7271)
    8d0255af07 Bump Trivy version (#7257)
    779d5f3aa2 chore: Updated the content of the file "/tmp/updatecli/github/k3s-io/... (#7256)
    554ad87c8d chore: Bump golang:alpine version (#7292)
    257fa2c54c Update to v1.26.4-k3s1 (#7282)
    d9f40d4f5b Update install script to clean iptables rules before start
    0c683720ad Update kube-router to insert iptables rules right after kubernetes ones
    6b51ed478d Fix call for k3s-selinux versions in airgapped environments (#7264)
    027cc187ce Add coreos and sle micro to selinux support (#6945)
    30638072c9 Update klipper lb to v0.4.2 (#7210)
    6c394abb32 Add make commands to terraform automation and fix external dbs related issue (#7159)
    3e3512bdae Updated kube-route version to move the iptables ACCEPT default rule at the end of the chain
    d95980bba3 Lock bootstrap data with empty key to prevent conflicts
    12091fc724 Bump actions/setup-go from 3 to 4
    2992477c4b Debounce kubernetes service endpoint updates
    ece4d8e45c Fix tests to not hide failure location in dummp assert functions
    e54ceaa497 Fix issue with stale connections to removed LB server
    5dece799df Update remotedialer to silence errors when disconnecting
    4182dcaac8 [UpdateCLI] Improve Klipper Helm and Helm controller bumps (#7146)
    127cea1f3f Upgrade helm-controller to v0.13.3 (#7209)
    d2e04b826a Don't apply hardened args to agent (#7089)
    d388b82d25 go generate
    de80c07053 Ensure that loopback is used for the advertised address when resetting
    b010db0cff Ensure that loopback is used for the advertised address when resetting
    877247a691 Bump runc to v1.1.5
    eb982bbbde Bump etcd to v3.5.7
    cee3ddbc4a Bump Local Path Provisioner version (#7167)
    ddd9665fed Improve Trivy configuration (#7154)
    fdf994dc35 [UpdateCLI] Improve workflow (#7142)
    37b3f4d25c Run go generate in local-path-provisioner Updatecli pipeline (#7181)
    8ec7d5e6b0 fix_get_sha_url (#7187)
    a99376663b Drone Pipelines enhancement (#7169)
    fb491f5ebf Update stable channel to v1.26.3+k3s1 (#7161)
    d13ee64403 Enhance `k3s check-config` (#7091)
    01ea3ff27b Update flannel to fix NAT issue with old iptables version
    c97370be6f Clean E2E VMs before testing (#7109)
    7c32f88fec Pin golangci-lint version to v1.51.2 (#7113)
    dc4a148725 Update to v1.26.3-k3s1 (#7108)
    561ec056c1 Drone: Cleanup E2E VMs on test panic (#7104)
    9980504196 Fix to Rotate CA e2e test (#7101)
    85b261096c Add automation for Restart command for K3s  (#7002)
    19ac384929 Remove Nikolai from MAINTAINERS list (#7088)
    7d2f997b3e Added multiClusterCIDR E2E test
    262cd7de0a Added IPv6 check and agent restart on e2e test utils
    15ee88964b Added multiClusterCidr feature
    822ee79eb8 Remove deprecated nodeSelector label beta.kubernetes.io/os (#6970)
    a912902aa7 Add missing kernel config checks (#6946)
    8503d0143c skip all pipelines based on what is in the PR (#6996)
    977a85559e Add support for cross-signing new certs during ca rotation
    68fcb48a35 Update/rename certs.sh; add default cert rotation script
    b7f90f389c Wait for kubelet port to be ready before setting (#7041)
    a45d081027 update stable version in channel server (#7066)
    d218068f34 Adds a warning about editing to the containerd config.toml file (#7057)
    c259403af1 Bump various dependencies for CVEs (#7044)
    e098b99bfa Update flannel and kube-router (#7039)
    c78dc4db71 Add flannel adr (#6973)
    522ad1e697 Add E2E to Drone (#6890)
    ea094d1d49 Update to v1.26.2-k3s1 (#7011)
    ee28c20b62 Bump kine to v0.9.9
    cbe4bcfeee Add test for filterByIPFamily
    cc333d8d0c Fix ServiceLB dual-stack ingress IP listing
    2156015521 Improve default umask for certs.sh
    23d98cec22 Fix CACertPath stripping trailing path components
    0c302f4341 Fix etcd member deletion
    9efa0797b7 Don't default to local K3s for startup test (#6950)
    7739c8b97e Update flannel to v0.21.1
    b8e69712a3 Updated flannel version to v0.21.0
    3d146d2f1b Allow for multiple sets of leader-elected controllers
    0d416d797d Wait for server to become ready before creating token
    290d7e8fd1 Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent
    ddcc4d4034 go generate
    c6d0afd0cb Check for existing resources before creating them
    32d62c5786 Use default address family when adding kubernetes service address to SAN list
    a92f163c9d Add NATS to the list of supported data stores (#6876)
    b43dd7746d Add CI test
    c900089e88 Add ADR
    87f9c4ab11 Ensure that node exists when using node auth
    992e64993d Add support for kubeadm token and client certificate auth
    373df1c8b0 Add support for `k3s token` command
    7d49202721 Ignore value conflicts when reencrypting secrets (#6850)
    be7f751863 Add e2e tests for CA cert rotation
    8a6404f97c Add basic test for custom CA certs
    9b6b72941f Clarify ADR based on design review feedback
    f13768c247 Add ADR
    215fb157ff Add `certificate rotate-ca` to write updated CA certs to datastore
    3c324335b2 Add utility functions for getting kubernetes client
    58d40327b4 Fix CA cert hash for root certs
    0919ec6755 Ensure cluster-signing CA files contain only a single CA cert
    1ec242d816 Add example certificate generation script
    7e59376bb9 Fix check for (open)SUSE version (#6791)
    ee007bc7cf Bump deps: trivy, sonobuoy, dapper (#6807)
    bb353f5d2b Fix reference to documentation (#6860)
    7cad3db251 E2E: Consoldiate docker and prefer bundled tests into new startup test (#6851)
    32086717fc Ensure flag type consistency (#6852)
    750cff561d Bump vagrant boxes to fedora37 (#6832)
    9fcc7c0db8 Fix cronjob example (#6707)
    0d4caf4e24 Wait for cri-dockerd socket (#6812)
    1c6fde9a52 go generate
    369b81b45e Honor Service ExternalTrafficPolicy
    94d1a87509 Bump wrangler version for EndpointSlice support
    86e36225f5 Consolidate E2E tests and GH Actions (#6772)
    808c71a63e Add Ayedo (#6801)
    75f77ab951 E2E Rancher and Hardened script improvements (#6778)
    f0655f153e update stable channel to v1.25.6+k3s1 (#6828)
    3cb6fa5cc7 Set cri-dockerd version at build time
    f72649d1bd Bump cri-dockerd
    89f7062431 Add build tag to disable cri-dockerd
    f10af367c3 Update to v1.26.1-k3s1 (#6774)
    f19892c2d2 drone correct plugins/docker tag supporting linux/arm (#6769)
    291f8bfe00 Slow dependency CI to weekly (#6764)
    2007cdd54f generate report and upload test results (#6737)
    7bbcac92fd Bump download action to v3 (#6746)
    d71ab6317e Update stable to 1.25.5+k3s2 (#6753)
    f54b5e4fa0 Fix CI tests
    23c1040adb Bugfix: do not break cert-manager when pprof is enabled (#6635)
    a4549cf989 chore: Bump golang:alpine version (#6683)
    8340b54309 Pass through default tls-cipher-suites
    cc3583399a Add explicit permissions to workflows (#6700)
    d85952d6a0 Bump ubuntu from 20.04 to 22.04 in /tests/e2e/scripts (#6686)
    674a05478f Containerd restart testlet (#6696)
    d78e490716 Bump containerd to v1.6.15-k3s1
    e53500f37f Bump alpine from 3.16 to 3.17 in /conformance (#6687)
    c7151e8b61 Bump alpine from 3.16 to 3.17 in /package (#6688)
    3cafc8e6dd RIP Codespell (#6701)
    fd8481a29d Adjust e2e test run script and fixes (#6718)
    a298bfdb18 Add jitter to scheduled snapshots and retry harder on conflicts
    f0ec6a4c12 Exclude December r1 releases from channel server
    bc6bebc998 Bump containerd to v1.6.14-k3s1
    454440f9a3 Add Dependabot config for security ADR (#6560)
    870d9c32b0 Fix OpenRC init script error 'openrc-run.sh: source: not found' (#6614)
    97f162291a Change Updatecli GH action reference branch (#6682)
    beafd9eaff Update stable to v1.25.5 (#6618)
    8f28de259c Add initial Updatecli ADR automation (#6583)
    9e97a3b4aa Current status badges (#6653)
    fae8817655 Bump k3s-root version to v0.12.1
    0c9b43746b Preload iptable_filter/ip6table_filter
    f8b661d590 Update to v1.26.0-k3s1 (#6370)
    b5d39df929 Deprecation of `etcd-snapshot` command in v1.26 (#6575)
    d723775792 Remove deprecated flags in v1.26 (#6574)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
7ed351dbdc docker: drop docker-ce recipe 
docker-ce is now the same as moby. We've had a warning for
quite some time now, so it is time to remove the recipe.

We don't RPROVIDE docker-ce in the docker-moby recipe as
part of this removal, as all docker packages have been
RPROVIDING "docker" regardless of the variant. images and
packagelists should be using that provider, not docker-moby
and docker-ce

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
103695c7b9 docker-moby: update to 24.0.6 
Bumping moby to version v24.0.6, which comprises the following commits:

    c35376c455 volume/local: Don't unmount, restore mounted status
    5d4cc0b5b5 integration/liveRestore: Check volume content
    1d983e2e8a update golangci-lint to v1.54.2
    d2e9a19358 CONTRIBUTING.md: update links to golang docs and blog
    73f6053bb3 api: swagger: update link to Go documentation
    de13951b9d docs/api: update links to Go documentation
    377af4c9b4 Dockerfile: Windows: update Golang download domains to cut down redirects
    088cec8f0f hack: update link to GOPATH documentation
    ed2f5d1d85 c8d/builder: Don't drop fields from created image
    1d10e8633d daemon: Handle NotFound when deleting container lease
    63422515ba c8d/run: Allow running container without image
    49671250f6 c8d/commit: Don't produce an empty layer
    b83f5a89f4 Don't return an error if the lease is not found
    4ac2355d62 hack: use long SHA for DOCKER_GITCOMMIT
    ac2a80fcc3 ci(bin-image): clean up metadata
    5eef5a7f59 ci(bin-image): clean up env var handling
    aaf84dd4cf remove Dockerfile.e2e
    a99e62fa3d distribution: show image schema deprecation on all registries
    e239799583 distribution: update warning for deprecated image formats
    bb22b8a418 ci(bin-image): check repo origin
    fb6784bdf0 gha: set 10-minute timeout on "report" actions
    74bf46aea6 c8d/diff: Reuse mount, mount parent as read-only
    b76a0c7d00 c8d/export: Use ref counted mounter
    54953f2f5a integration: Add test for not breaking overlayfs
    3897724f4a volume/local: Fix debug log typo
    0c131f58ba ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    448ae33f87 ci(bin-image): populate DOCKER_GITCOMMIT
    3ce0dc7e35 bakefile: Remove default value of DOCKER_GITCOMMIT
    600aa7b7a5 c8d/inspect: Ignore manifest with missing config
    5d2c383d72 remove s390x and ppc64ls pipelines
    15bd07b4fd update runc binary to v1.1.9
    cc39fb9f6b Integration test for capabilities
    bf2b8a05a0 Do not drop effective&permitted set
    e67f9dadc6 hack/make/.binary: use with-go-mod.sh
    314b84b023 hack: enable Go modules when building dockerd and docker-proxy
    72947f5022 hack: use Git-free ROOTDIR convention
    7e7bc0f1bc vendor: github.com/containerd/containerd v1.6.22
    5f0df8c534 vendor github.com/containerd/ttrpc v1.1.2
    25b709df48 windows: fix --register-service when executed from within binary directory
    b7d1e98ae7 libnet/d/bridge: Allow IPv6 ICC from any IP address
    749e687e1b integration/windows: Unskip some kill tests
    128838227e hack/test: Don't fail-fast before integration-cli
    b7c5385b81 update to go1.20.7
    4cd50eb1ed TestDaemonProxy: use new scanners to check logs
    a49bca97df Fix daemon proxy test for "reload sanitized"
    d6536d44e9 TestDaemonProxy: check proxy settings early
    a6f8e97342 Improve test daemon logging

Bumping docker-cli to version v24.0.6, which comprises the following commits:

    fab55e13c cli/command/system: fix "docker events" not supporting --format=json
    d3485b9e9 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    613380299 cli/registry: fix client.pullManifestList not de-referencing manifest
    b83959e00 force TestNewHistoryCommandSuccess to use UTC timezone
    28a08a22b un-skip history test and fix golden mismatches
    8e0393932 update cli-docs-tool to v0.6.0
    efd052eb8 docs/reference: run.md: remove stray whitespace
    d9770a962 adding -c option for docker run/build in manpages
    6efe73abe cli/command/manifest: update link to Go documentation
    d97753101 man: update links to Go documentation
    e9f843bf0 docs/reference: update links to Go documentation
    cfbaee468 CONTRIBUTING.md: update links
    daeee4697 update flag-description for --cgroup-parent
    08ad72160 Update docs/command output for volume pruning
    3c4fe7b3e docs: add missing docs for "DOCKER_TLS" env-var
    dc45bcc99 Stop slowing bash init by caching plugins path slowly
    710dd00e9 replace dockerfile/dockerignore with patternmatcher/ignorefile
    bf632329d vendor: github.com/moby/patternmatcher v0.6.0
    3c6c0bce1 cli/registry/client: set actions when authn with token
    65655cc26 cmd/docker: areFlagsSupported: don't Ping if not needed
    11606268f login: Add message about using PATs
    a8987063b docs: document special host-gateway value for add-host
    c0e376854 update to go1.20.7

We refresh one patch to adapt to the new build script structure.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
81fb357125 crun: update to v1.8.7 
Bumping crun to version 1.8.7-32-gf8fa497, which comprises the following commits:

    76b80ae fix random errors
    d602fc0 build(deps): bump actions/checkout from 3 to 4
    d348000 linux: fix check for oom_score_adj
    382edc9 wasmer: inherit_stdout instead of capture
    5057f98 wasmer: use latest wasix API
    f60a903 linux: do not join already joined namespaces
    46ef792 lua: fixed luarocks package directory structure
    0e506e5 linux: add support for ridmap mount option
    44e51fa linux: honor rbind
    f6f92b8 utils: tighten check in check_fd_under_path()
    58fa192 fix typos in comments
    9e66109 linux + cgroup-systemd: fix error return values
    668f5d5 features: Support mountExtensions
    1836bed lua: rename variable to fix spelling
    2779f02 linux: support arbitrary idmapped mounts
    08def0a linux: move function definition forward
    53a9996 NEWS: tag 1.8.7
    a867e35 lua: fix missing dereference of pointer
    c90c3ca cgroup-systemd: fix error return value
    b6c8708 tests: Update expected features output
    7c524e7 features: Fix annotations formatting
    f0054ea src/libcrun: Mark we implement up to OCI 1.1.0
    59e2b84 build(deps): bump uraimo/run-on-arch-action from 2.5.0 to 2.5.1
    3a50988 use just enough arg_unused to silence -Wunused-parameter
    9864f09 Packit: enable eln builds, enable wasmedge on all non-eln builds
    cf72f8b container: fix error return value
    88441d9 linux: simplify setns with pidfd
    261a4fa mount_flags.c: regenerate
    f9f4e06 mount_flags.perf: add get_mount_flags_from_wordlist
    387d3ac packit: Build PRs into default packit COPRs
    907d032 libcrun: handle SIGWINCH by resizing terminal_fd
    57a252b nix: rename `default-nix` to `default-amd64.nix`
    5224aa2 build-aux: simplify `release.sh`
    a7102e8 github: simplify `release.yml`
    8908248 Add support for riscv64 arch
    31eeb19 cgroup: fix error return value
    fec9b0f RPM: include criu dependencies
    02ee7c4 linux: do not create error twice
    c786d4c linux: simplify error handling
    c972772 linux: do not write twice errors
    74a3874 linux: use helper functions instead of custom read/write
    35a0166 linux: define helper to ack on the sync socket
    c3e518e libcrun: drop symbol for crun_make_error

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
d79b200eda cri-tools: update to v1.28.0 
Bumping cri-tools to version v1.26.0-318-gd5f3f2df, which comprises the following commits:

    71beb1da Fix containerd tests
    7d7fd9bb add --pinned flag for `crictl images`
    f74240d3 Bump github.com/google/uuid from 1.3.0 to 1.3.1
    25ae10aa `crictl images -v` prints Pinned when image is pinned
    163da8b9 Move events streaming test to own suite with BeforeEach and AfterEach
    5461a963 Validate template
    aa7bd9a9 Fix tests
    88b0bedc Update cmd/crictl/events.go
    3a881ad2 Address review comments
    459ff574 Remove the Kubernetes incubator reference from README.md
    9d084877 Vendor Kubernetes v1.28.0
    b703e6a9 Add crictl events command
    7f5104d9 Bump latest version in README.md
    552f7387 Use previous and latest tag from git in release script
    db0bc1a3 Vendor Kubernetes v1.28.0-rc.1
    2b86addd Bump github.com/opencontainers/runc from 1.1.8 to 1.1.9
    26d35da6 Fix seccomp value in test
    a8a71d9f statsp: enhance description
    e373e4a8 crictl: add metricsp command
    5b337756 Dedup test code and activate linter
    ba784045 Bump golang.org/x/net from 0.12.0 to 0.14.0
    86ca3498 Bump golang.org/x/sys from 0.10.0 to 0.11.0
    306ebdfa crictl: deduplicate display boilerplate
    16975aba Make `haircommander` an approver

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:40 +00:00
Bruce Ashfield
5569d65881 cri-o: update to release 1.28.0 
Bumping cri-o to version v1.28.0, which comprises the following commits:

    23dec8c7d version: bump to v1.28.0
    c104a0608 build(deps): bump github.com/containers/storage from 1.48.0 to 1.49.0
    5524b65d3 add info about pulling image before doing the tutorial
    922573ffe build(deps): bump crate-ci/typos from 1.16.6 to 1.16.8
    67724cb6f build(deps): bump github.com/containers/podman/v4 from 4.6.0 to 4.6.1
    a2d46ae01 build(deps): bump github.com/containers/ocicrypt from 1.1.7 to 1.1.8
    7e3522a9c Added a flag internal-repair
    39ea33e29 feat: Added a feature to check at reboot time shutdown was clean or not, If it was not clean then apply repair logic
    c5def7f72 build(deps): bump crate-ci/typos from 1.16.5 to 1.16.6
    b873985b8 Add `conmon` to ppc64le static bundle
    3e3f70c22 Update install.md
    9c3d622a6 Vendor Kubernetes v1.28.0
    a7f160b49 build(deps): bump crate-ci/typos from 1.16.3 to 1.16.5
    d2fa125a4 Update nixpkgs and use overlay
    80fdf486e Add containers_events_dropped_total metric
    e19002329 Fix indentation in installation instructions
    94f5e75c8 Update cri-tools to v1.28.0
    a8d7c29e1 Vendor Kubernetes v1.28.0-rc.1
    23f51c3e1 Update OWNERS_ALIASES
    f1bb83127 Update runc to v1.1.9
    581a388ac build(deps): bump crate-ci/typos from 1.16.2 to 1.16.3
    5022d956a test/image.bats: add test for checking crun-wasm workflow
    05ef7a189 *: add platform_runtime_paths to RuntimeHandler
    6a0c4b9ec build(deps): bump github.com/containers/image/v5 from 5.26.1 to 5.27.0
    f18d122e8 Revert "devices: fill the FileMode field in spec"
    8937245b0 build-static: misc fixes needed for 1.25.4 generation
    abfc2d616 build(deps): bump crate-ci/typos from 1.16.1 to 1.16.2
    3f06640cf contrib/test/ci: add crun-wasm
    3a9232c62 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0
    bb98e2b2a Set mount type HostToContainer for mounts that include container storage root
    309d045ec add script bumping
    927843ea4 test/metrics: simplify oom test, add debug
    64fdfbcaa build(deps): bump github.com/opencontainers/image-spec
    15a586215 build(deps): bump github.com/opencontainers/runtime-spec
    f30ef84ad build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
    ecd7f9a3e cri: implement RuntimeConfig rpc
    2463fdf78 vendor: update Kubernetes to v1.28.0-beta.0
    edc5ece7b build(deps): bump github.com/containers/podman/v4
    ef1653c8e internal/config/seccomp: Sync call signature of (*Config).Setup
    67b43c4b5 internal/config/cgmgr: add non-linux stubs
    1dffd7e71 internal/config/node: add non-linux stubs
    ecb372986 internal/config/device: add non-linux stubs
    10168b534 internal/config/nsmgr: add non-linux stubs
    8edfbfd45 internal/config/capabilities: add non-linux stubs
    2bd7fcbd8 internal/config/apparmor: add non-linux stubs
    da69490d0 oci: update unit tests for new stop code
    be5bac87b oci: simplify stopping code
    7371b1e77 oci: don't return ErrContainerStopped from StopContainer
    c0e34644c build(deps): bump github.com/containers/buildah from 1.31.0 to 1.31.1
    41b13e28d Fix ImageRef field for containers to default to an image ID
    930f49889 runc: 1.1.7 -> 1.1.8
    b563cd728 Add Adobe to ADOPTERS.md
    3bc609eb1 build(deps): bump sigs.k8s.io/release-sdk from 0.10.2 to 0.10.3
    4e0f88970 build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.8
    e6af91f6a oci: change IsAlive to Living
    320671ed2 devices: fill the FileMode field in spec
    126bd4ca9 build(deps): bump crate-ci/typos from 1.16.0 to 1.16.1
    b79391fe1 Update bats to v1.10.0
    5e86a5261 build(deps): bump github.com/go-chi/chi/v5 from 5.0.8 to 5.0.10
    92e1d1910 Bump vendored Podman to v4.6-rc2
    a3d229acf internal/factory/container: get CDI devices from CRI field.
    21181672b Add Debian 12 as a supported OS to the install doc
    b7c826d38 build(deps): bump github.com/containers/common from 0.55.1 to 0.55.2
    151572a56 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    c0c7ce5ae Add OpenSSF best practices badge in favor of CII
    0d92db47e build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0
    70e5b76ca build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2
    79859a9d9 build(deps): bump crate-ci/typos from 1.15.10 to 1.16.0
    7ebe2f614 Update vendored Kubernetes to v1.28.0-alpha.4
    c28303fad container_test: fix "AddCapabilities ALL" test case
    e176397c8 vendor: drop podman replace and update runc
    eff07b834 Run irqbalance tests in serial within the actual suite
    059dce220 build(deps): bump crate-ci/typos from 1.15.9 to 1.15.10
    d43833d61 Bump bats in ci jobs to latest release
    66ac754c7 build(deps): bump github.com/containers/buildah from 1.30.0 to 1.31.0
    59952bf00 build(deps): bump github.com/containers/common from 0.54.0 to 0.55.1
    ff3bb58db build(deps): bump crate-ci/typos from 1.15.7 to 1.15.9
    4fe0b8164 build(deps): bump github.com/containers/image/v5 from 5.26.0 to 5.26.1
    cb51739b1 server: use platform struct to set OS details
    bac73aa42 Pre-check request values on container creation
    5a85cfc95 Remove non existent Debian builds from install instructions
    73cf5597a test: fix make mockgen test failure
    dfdd2acde vendor: update release-sdk to v0.10.2
    abcf50239 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.1
    9c78a1e23 vendor: update containers/storage to v1.48.0
    87b126342 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.4.0
    8a9d4ef17 vendor: update containers/common to v0.54.0
    cb247caf5 build(deps): bump github.com/containers/image/v5 from 5.25.0 to 5.26.0
    ad3dd698b build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0
    b8bb276a0 build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus
    0882a1dcb build(deps): bump crate-ci/typos from 1.15.6 to 1.15.7
    6b9e49d3b Try to find `CONTAINER_CNI_PLUGIN_DIR` by binary lookup
    40bbe8218 vendor: fix vendoring issue
    f6317807c typos: add WRONLY to the list of extend-ignore-re
    6a10113c7 build(deps): bump crate-ci/typos from 1.14.12 to 1.15.6
    1062a4cd3 build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0
    91d6bd38b vendor: bump github.com/onsi/ginkgo/v2 to 2.11.0
    7f66c1428 build(deps): bump cachix/install-nix-action from 21 to 22
    d0526337e vendor: bump github.com/urfave/cli/v2 to 2.25.7
    7a2b9a220 vendor: bump golang.org/x/sync to 0.3.0
    ba0751938 vendor: bump golang.org/x/net to 0.11.0
    9f0680cde vendor: bump github.com/prometheus/client_golang to 1.16.0
    67a132dc6 runtime handler hooks: run default hook when container stops gracefully
    49d9efe8b vendor: bump github.com/stretchr/testify to 1.8.4
    001733570 vendor: bump github.com/sigstore/rekor to 1.2.1
    d274dd121 Use a variable to manage the version of kata used for testing.
    4a7d0857b Update supported version and variable guide for adding repository
    0534d7eff governance: tweak voting behavior
    bfc7cf55a Use kata 3.0 for testing
    db4b8eaab kata tests: Enabling more than one test file for kata tests.
    0f08aeb6f kata tests: Update list of skipped tests for the ctr.bats file
    4310e3342 Modify ansible files to re-enable kata tests
    8224bd8a5 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    f84eb7874 Move reload watcher into `Server`
    e3b7406b9 Update golangci-lint and config
    159aaf6c6 utils: make this package build on non-linux platforms
    c088d69aa fix function name in comment
    c702bb78a build(deps): bump DavidAnson/markdownlint-cli2-action from 10 to 11
    098fbebf7 Add a test for log linking
    5620764ae linklogs: add support for symlinking container directory
    5d7ecfe4b Add support for linking pods logs
    a7d314bea build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3
    e614bc756 server: ensure pod labels are present
    d84cc85c5 build(deps): bump github.com/BurntSushi/toml from 1.3.1 to 1.3.2
    72b735603 OCPBUGS-14750: Pod termination must succeed when a hook fails
    98c43d537 Add OSFF scorecard action
    85c7e712e main: Added a call to GarbageCollect
    ccb91bc8a docs: fix eol test
    08f7c0776 build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8
    f2feb7c6f Use staging k8s.io/kubelet/cri/streaming package
    72011b3c4 Add support for namespaced signature policies
    3939fba97 Apply markdown linting, cleanup docs and fix broken links #6890
    96e6aed74 Apply markdown linting on the tutorials folder #6890
    2ead2413a Apply markdown linting on the contrib folder #6890
    5d7b64018 Add markdown linter action #6890
    d58f408f5 test: fix timeout metric test
    5f74e7994 build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1
    c87b11115 server: do not take lock to populate pid in container status and inspect
    28b34889a build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
    b373909cf build(deps): bump github.com/containerd/containerd from 1.7.1 to 1.7.2
    d456a11ef crio: deprecate config migration
    259e7980c metrics: add metric for resource stalled at stage
    85a4ba091 build(deps): bump crate-ci/typos from 1.14.11 to 1.14.12
    75aacdb04 Drop support for path based seccomp profiles
    e18e2e90a test/helpers: rm useless code
    b7d1c2e61 test/helpers: use cli to set container dirs
    459372c24 test: adapt for sched_load_balance disable after stop
    6da8e46b1 runtime handler hooks: add DefaultCPULoadBalanceHooks
    23b9179f9 server: call hooks and NRI in stopContainer
    e1c68ea2a Update `README.md` version table
    56ac8ac79 crio: remove DefaultsPath config feature
    b2a20a418 server: call hooks on infra container creation
    2efd04aa4 high perf hooks: workaround libcontainer quirk when disabling cpu quota
    9ec701691 cgmgr: export CrioPrefix and use containerCgroupPath more
    775690b1e build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7
    cf7e0946e tests/timeout: skip for conmon-rs
    c1c431836 ci/gha: add space-at-eol check, fix existing ones
    0a35354c4 build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0
    65792546b ci: bump shellcheck to 0.9.0
    6b2f35e2c test: fix a few cases of SC2086
    d6b793c46 contrib/kube-local/kube-local: rm unreachable code
    b6014826c test/copyimg: use log.Fatalf
    587e3d595 test/*.bats: rm useless echo "$output"
    bdb765635 test: rm explicit $status checks
    933e33c1c test: simplify assigning IDs
    22978429a test/status.bats: simplify exit code checks
    ff7bc1b52 test: simplify non-zero exit status checks
    0bf509d35 test/cdi.bats: rm run_cmd, use run
    21e5dcebe test/nri.bats: fix checking exit code
    2fab13028 test/README.md: fix wrong bats example
    9c2fcb3bd test/*bats: drop fail()
    84ee0c931 Fix using ! in bats tests
    045c026da test/timeout: fix "dup ctr" test
    1da9bf5f7 ci: require bats 1.9.0
    c5a1c1b1e test: separate var setting and img preload
    7b9e5201b ci: bump bats to 1.9.0
    9ad33da53 build(deps): bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1
    2604665cc Update nix and nixpkgs
    792a5d0ad test: limit number of parallel jobs
    1cc1958de test/cgroup: fix for cgroupfs
    aa86e94f0 ci/gha: fix double caching
    47c13e037 [FEAT] Add new parameter disable_hostport_mapping in CRI-O
    df7df847d build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    f7f085f6f Makefile: Remove GOPATH references
    1eeaad851 build(deps): bump cachix/install-nix-action from 20 to 21
    7cc3e206c build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7
    3b5c9f115 build(deps): bump crate-ci/typos from 1.14.10 to 1.14.11
    7003312b0 OCPNODE-1286: Add a CI job to run cri-o e2e tests by enabling the evented pleg feature
    47958dc0b Update crun to v1.8.5
    9b6a4cff7 Wrap CRI errors on image pull
    defdf1c9e build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
    6a3ee4e6b docs: update cri-o podman doc and remove stale information
    7ed2cfc7f deps: bump runc to 1.1.7
    f59c1f72a sandbox: Handle PodLinuxOverhead and PodLinuxResources CRI fields
    f5e58c0ea build(deps): bump crate-ci/typos from 1.14.9 to 1.14.10
    1009668bb build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
    42e0f7fac go.{mod,sum}, vendor: update NRI.
    d97ac8a10 contrib/test: reenable Statefulset Basic tests
    3761965f8 contrib/test: re-enable block volmod tests
    003edc26c high perf hooks: disable CPU quota with libcontainer as a pre start hook
    a875ef486 test: add test for cpu-quota.crio.io
    e1c3cf960 Check and fix typos in CI
    fa57ffd3e *: switch to go-chi/chi mux
    6330b1d5f build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
    786109a6e build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1
    ecc712850 Support image policy verification error
    ccaef6a7d build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5
    484870532 build(deps): bump sigs.k8s.io/release-utils from 0.7.3 to 0.7.4
    3480e9efa Fix GitHub action `bundles` test
    937ed8cf6 - Convert status cli as a subcommand of crio - Moved commands to the internal criocli package and used them in the crio and crio-status binaries - Adding the status subcommands directly to the  binary
    a247c52d9 pkg/config: update the description for templateStringCrioImagePinnedImages
    4fadec5f1 internal/storge: fix CompileRegexpsForPinnedImages test case
    5e751fda3 vendor: fix vendoring
    5ecc82e6f contrib/metrics-explorer: fix nested modules
    640624ec9 Update CNI plugins to v1.3.0
    9fc177ed4 build(deps): bump golang.org/x/net in /contrib/metrics-exporter
    8b230dec7 clients connected to container event stream now receive the same data
    3fd71bdc9 vendor: fix CI due to incosistent vendoring
    20fd7770e fix kubectl version in bug report template
    21b47b11c *: update sandbox/pause image to 3.9
    edbd4890f internal/storage: add sandbox/pause image to the list of pinned_images
    b0531365f build(deps): bump github.com/containernetworking/plugins
    22ad8957b Changes to build binaries for ppc64le architecture.
    32ec246ba Update README.md and associated files
    f10ea341d build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0
    c9bb988d1 *: fix warnings related to gosec
    0e65290c4 .github/worflows: add go vulnerability management check for cri-o
    f9abf50c9 pkg/config: reload pinned_images when the new config is provided
    bbe9a7a2c *: add support for pinned_images in crio configuration
    dfcf222c3 refactoring vars
    386509caf Use native crierrors package for registry unavailable
    a90d00103 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
    16ab25339 Vendor latest Kubernetes master
    6a095aef7 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0
    5c064914f build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0
    639b6dddf OWNERS: add sohankunkerkar to cri-o-reviewers
    4477a804b tests: add a fake pinns call to delay things and cause the timeout
    6fa761497 tests: use crictl binary directly when checking its capabilities
    1ff3303df cni: configure cgroupPath capability arg
    e52e63a41 vendor: bump ocicni to tip
    914763fb1 Remove vendor specific changes
    08cd56fc9 Migrate image registry to registry.k8s.io
    3311658af build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus
    02fe074f2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4
    0b8a2c068 build(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1
    660b63bd7 cgmgr: set sched_load_balance to disabled on sandbox cgroup
    5a1707e4c test/pod.bats: update to current setup
    f83a4faba cgmgr: create cgroups for systemd cgroup driver for dropped infra pods
    f21e178f8 build(deps): bump github.com/prometheus/client_golang
    bf23f5c01 Support `RegistryUnavailable` type
    e80464e07 Update generated docs
    ed9c419e7 OWNERS: allow cri-o reviewers to approve dependabot PRs
    58c101634 build(deps): bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3
    a4fc119af .github/workflows: remove auto-approve workflow
    a0009cb25 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    541b6563d Extend cpu-c-states.crio.io annotation to add max latency
    2417374a6 build(deps): bump k8s.io/klog/v2 from 2.90.1 to 2.100.1
    249c340d3 contrib/test/ci: fix the bin folder location for cri-tools
    cf30845e7 #6833 user ns: Fix segfault while constructing id mappings
    38774e14a Use ImageRef instead of ImageName for restore
    1f224d1e0 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    7c6676f02 contrib/test/ci/build: use `force:yes` while linking crictl/critest
    c9cc1529f .github/workflows: fix the github_token field
    a1c09ad99 .github/workflows: fix the token field
    30ddd6d89 Fix events generated by Evented PLEG
    b8d8ff14b Update c/common to v0.53.0
    b34038f8f build(deps): bump actions/setup-go from 3 to 4
    4c828dc48 build(deps): bump github.com/opencontainers/runtime-spec
    928d5d49c build(deps): bump github.com/prometheus/client_golang
    e806005d6 test/network: skip flaky test running on a node with cgroupv2
    e914f0e15 test: combined oom test to avoid CI flake
    d5048e7ff test/seccomp: fix the syscall
    473ee6b73 contrib/test/ci: remove duplicate code
    a1c6ae7e4 test/*: consolidate images used for integration tests
    25fb4fa76 build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1
    a950c837d Download more dependencies instead of vendoring
    839bd1203 build(deps): bump github.com/containers/conmon-rs from 0.5.0 to 0.5.1
    edbe9c27e build(deps): bump github.com/go-logr/logr from 1.2.3 to 1.2.4
    e53dcc003 Stop vendoring release notes tool
    1c26776cb .github/workflows: auto approve dependabot PRs
    e967a178c user ns: fix segfault when host id mapping is empty
    19c0b4d7b server: fix failing tests
    edf6a88a9 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1
    7a612bc4b Allow restoring of containers with different names
    86b36ee6e build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
    6da5b1272 build(deps): bump actions/stale from 7 to 8
    1c1cfb92a Fix Flannel PodCIDR in kubeadm tutorial
    bac3a79b6 adding support for configmap namespace
    603f176a0 Add debug to identify when a relabel was not requested
    f9fa10915 Update tutorials/debugging.md
    75c8b181b Added documentation to force the Go garbage collector for CRI-O
    11f5c4326 Remove remnants of CONTAINER_MANAGE_NS_LIFECYCLE

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:39 +00:00
Bruce Ashfield
13fe43d1e1 containerd: update to 1.7.5 
Bumping containerd to version v1.7.5-8-g86dc86e62, which comprises the following commits:

    ed4bac11e Blockfile: Enlighten blockfile copy on Darwin
    4d1cfbbdd Revert "log: define G() as a function instead of a variable"
    a34e93241 make repositories of install dependencies configurable
    b449440a4 CRI: Support Linux usernames for !linux platforms
    503ab21bf go.mod: github.com/containerd/continuity v0.4.2
    93b23eb10 Prepare release notes for v1.7.5
    fb1292c8d Bump version to v1.7.4
    7a0cae3ca [release/1.7] Prepare release notes for v1.7.4
    537d7526e integration: issue7496 case should work for runc.v2 only
    0f4885c16 Add configurable mount options to overlay
    8804a27d7 feat: make overlay sync removal configurable
    5add172be Vagrantfile: add strace tool
    207e28f36 integration: add ShouldRetryShutdown case based on #7496
    b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
    88ff575c5 pkg/cri/server: fix leaked shim issue
    9f61dfb7c integration: add case to reproduce #7496
    2a9ae3c51 log: swap logrus functions with their equivalent on default logger
    01445bb73 log: add package documentation and summary of package's purpose
    932795f45 log: make Fields type a generic map[string]any
    707ca94d8 log: add log.Entry type
    0a79e67e4 log: define OutputFormat type
    dbbe28b7d log: define G() as a function instead of a variable
    93b6cb784 log: add all log-levels that are accepted
    e8e086e02 log: group "enum" consts and touch-up docs
    7aa4f8fdc log: WithLogger: remove redundant intermediate var
    bfdce4ce4 log: SetFormat: include returns in switch
    6621e0888 log: remove testify dependency
    df76aaede removes/docker: remove unnecessary conversion (unconvert)
    1c2dd5198 Remove temporary replace
    2bf6bd143 vendor: update github.com/containerd/continuity
    30a163086 snapshots|pkg: umount without DETACH and nosync after umount
    c9eebe3d1 mount: support direct-io for loopback device
    1c2977db0 Modify loopback size
    cf9c78d2d snapshots/blockfile: fix lint issue
    b823b4f54 snapshots/blockfile: deflaky the testsuite
    6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator
    99b61aee3 snapshots/blockfile: use loop if options is empty
    fd39769ac Add mount options to blockfile snapshotter
    8d732c6c2 Add sync before unmount on snapshotter layer test
    8472a407e Add blockfile snapshotter to snapshotters doc
    6740d77ca Add blockfile as a builtin
    07cc24b32 Add blockfile snapshotter
    32e3b76ee Add diffservice to contrib
    661e505c8 Add proxy differ
    af79c07fd update runc binary to v1.1.9
    c0b1c8f74 fix ci Linux Integration test fail
    4e97a115f cri: Don't use rel path for image volumes
    34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr
    c5e7b84c0 update to go1.20.7, go1.19.12
    2eaeb3205 Fix ro mount option being passed

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:39 +00:00
Bruce Ashfield
dae8061c08 conmon: update to 2.1.8 
Bumping conmon to version v2.1.3-87-g6d88cb3, which comprises the following commits:

    6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0
    00e08f4 bump to v2.1.8
    57d5e7f fix(deps): update module github.com/containers/storage to v1.48.0
    adc748c cli: log parsing errors to stderr
    b0bdc23 Update nix and use an overlay
    04cf7ba chore(deps): update dependency containers/automation_images to v20230809
    ccdae54 gh actions: bump to go 1.21
    4e61870 gh actions: drop perma-failing jobs
    730d92c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.11.0
    73ab92e Changes to build conmon for `riscv64`
    53b3691 stdio: ignore EIO for terminals
    77ce312 refactor: handle a broken pipe with write_sync_fd
    fa67ce6 ensure console socket buffers are properly sized

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:39 +00:00
Bruce Ashfield
48b63ed575 buildah: update to 1.31.3 
Bumping buildah to version v1.31.1-23-g0926e05c3, which comprises the following commits:

    f449589dd [release-1.31] Bump to v1.31.4-dev
    3ae75d4a4 [release-1.31] Bump to v1.31.3
    68fa52ca5 [release-1.31] Bump c/common 0.55.4, c/image 5.26.2, c/storage 1.48.1
    140f028d6 rpm: spdx compatible license field
    20b479ec4 RPM: fix buildtags
    d1e3a7bf3 [release-1.31] Bump to v1.31.3-dev
    d4d1d7513 [release-1.31] Bump to v1.31.2
    4d9260cc3 [release-1.31] Bump to v1.31.2-dev
    800b1549b [release-1.31] Bump to v1.31.1
    0a63bc63d [release-1.31] Remove zstd:chunked from man, bump c/common to v0.55.3
    98f684ff3 [CI:BUILD] Packit: add fedora-eln targets
    708c07761 [CI:BUILD] RPM: build docs with vendored go-md2man
    68fa9389a packit: Build PRs into default packit COPRs
    95e1dfb3d [CI:BUILD] Packit: remove pre-sync action
    806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:39 +00:00
Bruce Ashfield
22989818f3 runc-docker: update to 1.9.0 
Bumping runc to version v1.1.9-2-g26a98ea2, which comprises the following commits:

    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9
    f44190e0 libct/intelrdt: check if available iff configured
    6cf9ac15 libct/intelrdt: skip remove unless configured
    4796f49c libct/intelrdt: elide parsing mountinfo
    6a7a6a57 libct/intelrdt: skip reading /proc/cpuinfo
    7c83dbe6 libct/intelrdt: delete IsMBAScEnabled()
    5ebcfa62 [1.1] libct: rm intelrtd.Manager interface, NewIntelRdtManager
    69473d0a libct: rm TestGetContainerStats, mockIntelRdtManager
    dfdc7d07 libct/intelrdt: explain why mountinfo is required
    5ba1b8ec libct/intelrdt: faster init if rdt is unsupported
    a5407b9a libct/intelrdt: remove findMountpointDir test
    dc8d0cc1 libct/intelrdt: wrap Root in sync.Once
    929d04fc libct/cg/fs2: use `file` + `anon` + `swap` for usage
    bdbfe042 ci: bump golangci-lint, remove fixed exception
    d398ad2a gha: disable setup-go cache for golangci job
    5888c55d ci/gha: rm actions/cache from validate/deps job
    a47c15b4 build(deps): bump actions/setup-go from 3 to 4
    44a53f08 ci: fix TestOpenat2 when no systemd is used
    cff41a89 ci: fix TestNilResources when systemd not available
    37405ca0 Fix running tests under Docker/Podman and cgroup v2
    1c524242 [1.1] ci/gha: rm unsup Go 1.19.x, add 1.21.x
    ac310917 ci/cirrus: improve host_info
    ecccc432 [1.1] ci/cirrus: use Go 1.19.x not 1.19
    bb2401ee [1.1] ci/cirrus: use Go 1.20
    aaed58c8 add a test case about missing stricky bit
    3d3a2b38 fix some file mode bits missing when doing mount syscall

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:39 +00:00
Bruce Ashfield
606fe98a98 runc-opencontainers: update to 1.9.0 
Bumping runc to version v1.1.9-2-g26a98ea2, which comprises the following commits:

    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9
    f44190e0 libct/intelrdt: check if available iff configured
    6cf9ac15 libct/intelrdt: skip remove unless configured
    4796f49c libct/intelrdt: elide parsing mountinfo
    6a7a6a57 libct/intelrdt: skip reading /proc/cpuinfo
    7c83dbe6 libct/intelrdt: delete IsMBAScEnabled()
    5ebcfa62 [1.1] libct: rm intelrtd.Manager interface, NewIntelRdtManager
    69473d0a libct: rm TestGetContainerStats, mockIntelRdtManager
    dfdc7d07 libct/intelrdt: explain why mountinfo is required
    5ba1b8ec libct/intelrdt: faster init if rdt is unsupported
    a5407b9a libct/intelrdt: remove findMountpointDir test
    dc8d0cc1 libct/intelrdt: wrap Root in sync.Once
    929d04fc libct/cg/fs2: use `file` + `anon` + `swap` for usage
    bdbfe042 ci: bump golangci-lint, remove fixed exception
    d398ad2a gha: disable setup-go cache for golangci job
    5888c55d ci/gha: rm actions/cache from validate/deps job
    a47c15b4 build(deps): bump actions/setup-go from 3 to 4
    44a53f08 ci: fix TestOpenat2 when no systemd is used
    cff41a89 ci: fix TestNilResources when systemd not available
    37405ca0 Fix running tests under Docker/Podman and cgroup v2
    1c524242 [1.1] ci/gha: rm unsup Go 1.19.x, add 1.21.x
    ac310917 ci/cirrus: improve host_info
    ecccc432 [1.1] ci/cirrus: use Go 1.19.x not 1.19
    bb2401ee [1.1] ci/cirrus: use Go 1.20
    aaed58c8 add a test case about missing stricky bit
    3d3a2b38 fix some file mode bits missing when doing mount syscall

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:39 +00:00
Kai Kang
64c7c56236 k3s: not compatible with mips 
k3s depends on 'virtual-containerd' provided by containerd-opencontainers
which is not compatible with mips. So set COMPATIBLE_HOST for k3s that
not compatible with mips to align with containerd-opencontainers.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:14 +00:00
Kai Kang
14a3a03937 packagegroup-kubernetes: set COMPATIBLE_HOST 
packagegroup-kubernetes requires kubernetes which is only compatible
with x86_64, arm and aarch64, so set COMPATIBLE_HOST for
packagegroup-kubernetes to align with it.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:14 +00:00
Kai Kang
33a437dc42 docker-compose: not compatible with mips 
docker-compose rdepends on docker which is not compatible with mips.
So set COMPATIBLE_HOST for docker-compose accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:14 +00:00
Kai Kang
ebcc1cd73d packagegroup-container: not compatible with mips and riscv 
The recipe docker-moby which is required by packagegroup-container is
not compatible with mips. And it inherits goarch.bbclass, so it is not
compatible with riscv32 too. Update COMPATIBLE_HOST accordingly for
packagegroup-container.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 17:30:14 +00:00
Bruce Ashfield
bbc93424c9 conf: drop mickledore, only specify nanbield 
- mickledore was incorrectly spelled
 - we aren't actively going to test both branches with master, so
   go to only nanbield

If there's demaand, and test results to support it, we can
reconsider later.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-15 16:10:00 +00:00
Bruce Ashfield
76208ca880 conf: update compatibility to match oe-core 
OE Core has bumped to the next version, we update to match.

For now, we keep both mickledore and nanbield as compatible while
progressing towards release.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-11 14:38:08 +00:00
Bruce Ashfield
113af45b75 lxcfs: add systemd to REQUIRED_DISTRO_FEATURES 
lxcfs requires systemd, so we add it to the feature check.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-07 21:00:53 +00:00
Martin Jansa
ca01a630e5 go-context: add CLEANBROKEN 
* fixes:

DEBUG: Executing shell function do_configure
NOTE: make clean
make: *** No rule to make target 'clean'.  Stop.
ERROR: oe_runmake failed
WARNING: exit code 1 from a shell command.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-04 03:14:17 +00:00
Changqing Li
8f25bfcbae oci-image-tools: don't build for riscv64 
Currently oci-image-tools has a do_compile error for riscv64. The
problem could be reproduced by:
    MACHINE=qemuriscv64 bitbake oci-image-tools

So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64.
When someone interested in using this recipe for riscv64 fixes the
compile issue, this setting could be removed.

Also don't build packagegroup-container/packagegroup-kubernetes since
they depends on oci-image-tools

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-04 03:05:49 +00:00
Martin Jansa
72a943b5f1 virtiofsd: add seccomp to REQUIRED_DISTRO_FEATURES 
* otherwise causes world build failures for DISTROs without seccomp:

  ERROR: Nothing PROVIDES 'libseccomp' (but meta-virtualization/recipes-extended/virtiofsd/virtiofsd_1.7.0.bb DEPENDS on or otherwise requires it)
  libseccomp was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-04 03:05:40 +00:00
Markus Volk
ecdb3aa7e1 libvirt-glib: fix introspection and documentation build 
Building Gobject introspection during cross-compilation is not an easy task.
Therefore, the meson.build file disables the build for introspection and
also for gtkdoc by default.
This commit adds a patch to enable this, as introspection can be easily built
on newer platforms with yocto/oe.

The options to enable/disable introspection/doc are defined as feature
while the corresponding bbclass defines it as a boolean.
Override this so that it should be possible to be enabled/disabled by using DISTRO_FEATURES.

Inherit  gettext bbclass as used in libvirt-glib.

Add a missing dependency on libxslt.
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2023-09-04 03:03:14 +00:00