Commit Graph

1616 Commits

Author SHA1 Message Date
hongxu
c1bd680e12 skopeo: fix native skopeo failed if no libdevmapper.so.1.02 on host
If host does not install libdevmapper.so.1.02, run native skopeo failed:
...
$ tmp-glibc/sysroots/x86_64/usr/sbin/skopeo -h
|tmp-glibc/sysroots/x86_64/usr/sbin/skopeo.real: error while loading
shared libraries: libdevmapper.so.1.02: cannot open shared object file: No such file or directory
...

Create wrapper to set LD_LIBRARY_PATH which using native
libdevmapper.so.1.02

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-07 15:42:51 -04:00
hongxu
6459b6544b Revert "nagios-nsca: blacklist recipe due to unsupported libmcrypt"
The libmcrypt build issue has been fixed by oe

This reverts commit e7a0ea3e0f.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-07 15:42:17 -04:00
Martin Jansa
92f976404b podman-compose: remove pypi inherit to fix do_fetch
* now when pypi uses SRC_URI_prepend since:
  https://git.openembedded.org/openembedded-core/commit/?id=8f17b8bce85efb0e9a7e15d0b98a5cf7b6bd9750
  both entries end in SRC_URI (because of delayed nature of prepend):
  https://files.pythonhosted.org/packages/source/p/podman-compose/podman-compose-0.1.5.tar.gz
  git://github.com/containers/podman-compose.git

  causing:
  ERROR: podman-compose-0.1.5-r0 do_fetch: No checksum specified for '/OE/build/oe-core/downloads/podman-compose-0.1.5.tar.gz', please add at least one to the recipe:
  SRC_URI[sha256sum] = "fb229362f188980ea3fbdee2a25d0a2dd6a0b886d925d5213e22e09f1062ebe9"
  ERROR: podman-compose-0.1.5-r0 do_fetch: Fetcher failure for URL: 'https://files.pythonhosted.org/packages/source/p/podman-compose/podman-compose-0.1.5.tar.gz'. Missing SRC_URI checksum
  ERROR: Logfile of failure stored in: /OE/build/oe-core/tmp-glibc/work/core2-64-oe-linux/podman-compose/0.1.5-r0/temp/log.do_fetch.55855

  drop pypi inherit to restore the previous SRC_URI with just the git:// entry.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-03 23:41:04 -04:00
Bruce Ashfield
b8f2edd39a crun: add seccomp distro features check
Since seccomp depends on libseccomp, and seccomp is only available
when the distro feature is enabled, we add the same dependency and
distro feature check to this recipe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:22:42 -04:00
Bruce Ashfield
fd4b46ce22 cri-o: add seccomp distro features check
Since seccomp depends on libseccomp, and seccomp is only available
when the distro feature is enabled, we add the same dependency and
distro feature check to this recipe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:21:19 -04:00
Diego Sueiro
66994bf37e packagegroup-container: Include podman if seccomp is in DISTRO_FEATURES
Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:19:21 -04:00
Diego Sueiro
4a86cfb8d9 slirp4netns: Add seccomp as REQUIRED_DISTRO_FEATURES
The libseccomp package is only available if seccomp is in DISTRO_FEATURES.

Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:19:21 -04:00
Diego Sueiro
dd3bc51e3f podman: Add seccomp as REQUIRED_DISTRO_FEATURES
The libseccomp package is only available if seccomp is in DISTRO_FEATURES.

Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:19:21 -04:00
Ross Burton
e0bf8958bb dev86: don't require dev86-native to build dev86
Instead of installing binaries and patching the makefiles to run external commands, simply
build ifdef using BUILD_CC instead of CC.

This patch is now upstreamable, the recipe is less complicated, and nativesdk works.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:19:03 -04:00
Ross Burton
449cfdef60 dev86: work on all hosts, other cleanups
Remove COMPATIBLE_HOST, whilst this is an x86 assembler there's nothing to stop
you building it on or for arm64 and assembling x86 code.

Override INEXE so that binaries are not stripped and remove INSANE_SKIP.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:19:02 -04:00
Martin Jansa
5c1388998d conmon: add dependency on libseccomp and seccomp to REQUIRED_DISTRO_FEATURES
* added with to v2.0.29 commit:
  106cad5 seccomp: add support for seccomp notify
* fixes:
  | src/seccomp_notify.c:9:10: fatal error: seccomp.h: No such file or directory
  |     9 | #include <seccomp.h>
  |       |          ^~~~~~~~~~~

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-24 12:40:22 -04:00
Xu, Yanfei
bbf7ddbe02 skopeo: add native and nativesdk support
1.Add native and nativesdk support.

2.Replace "multipath-tools" with "libdevmapper" and "lvm2". Because
the really direct DEPENDS package is "libdevmapper" and "lvm2". Log
of do_comopile as below:

-----------------[cut here]---------------------
DEBUG: Executing shell function do_compile
NOTE: make -j 40 BUILDTAGS= bin/skopeo
CGO_CFLAGS="-I/...../usr/include"
CGO_LDFLAGS="-L/...../usr/lib
-lgpgme -lgpg-error -lassuan" GO111MODULE=on go build -mod=vendor
"-buildmode=pie" -ldflags '-X
main.gitCommit=8efffce8befc2de87670ba75d6c86ada61e869fd ' -gcflags ""
-tags "" -o bin/skopeo ./cmd/skopeo
Package devmapper was not found in the pkg-config search path.
Perhaps you should add the directory containing `devmapper.pc'
to the PKG_CONFIG_PATH environment variable
No package 'devmapper' found
pkg-config: exit status 1
make: *** [Makefile:134: bin/skopeo] Error 2

Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-24 12:40:18 -04:00
Xu, Yanfei
daac3b630f umoci: add nativesdk to BBCLASSEXTEND
add nativesdk to BBCLASSEXTEND

Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-21 09:04:47 -04:00
Bruce Ashfield
7a59023229 conmon: update to v2.0.29
Bumping conmon to version v2.0.1-250-g1ef2468, which comprises the following commits:

    1ef2468 Fix docs links due to branch rename
    24c73c2 seccomp: fix for unsupported versions
    fc7830d bump to v2.0.30-dev
    7e6de66 bump to v2.0.29
    b033cb5 Reset OOM score back to 0 for container runtime
    106cad5 seccomp: add support for seccomp notify
    77dfb4b .cirrus.yml: raise the timeout to 60m
    87330dc call functions registered with atexit on SIGTERM

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-21 08:52:18 -04:00
Bruce Ashfield
950b24b2d5 conmon: add branch specification to SRC_URI
The upstream project switched from master to main, so we add
an explicit branch specification to avoid fetch errors (as
the deafult of master no longer works).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-21 08:52:18 -04:00
Bruce Ashfield
299c418144 crun: update to latest
Bumping crun to version 0.20.1-7-g7ef74c9, which comprises the following commits:

    b07c389 criu: fix error check
    09401bb linux: fix unitialized variable
    b222968 cgroup: fix a memory leak
    1182975 cgroup: honor memory swappiness set to 0
    38271d1 NEWS: tag 0.20.1
    923447b container: ignore resetting keyring SELinux label
    b26493f Dockerfile: install required python3-jinja2 package
    0d42f11 NEWS: tag 0.20
    9042ac5 seccomp: drop SECCOMP_FILTER_FLAG_LOG by default
    0f4156f cgroup: Refactor libcrun-cgroup-destory to support picking subsystems dynamically and clean custom controllers.
    d6be344 cgroup: ignore devices errors in a userns
    6e187fb cgroup: do not join empty controller
    badb23d seccomp: report correct action in error message
    5201956 container: apply SELinux label to keyring
    4b664e9 linux: attempt to open existing dev file first
    dd1c419 libocispec: sync from upstream
    5f74e2a Makefile.am: make sure libocispec uses main branch
    f0c76e1 utils: close_range fallbacks to close on EPERM
    1596ab1 Update crun manual with recently added flags
    1d84d62 Fix type for LinuxDeviceCgroup.linux.resources.devices.allow in default Spec
    62d251d container: call prestart hooks before rootfs is RO
    48bc33d Exec: Add --process-label and --apparmor to allow modifying selinux_label and apparmor_profile
    0e53e87 Exec: Add --no-new-privs to and adhere if noNewPriviledges is false in basespec config
    2de8b43 Fix SIGSEGV for rootless container caused by case when def->linux is defined but def->linux->cgroups_path is NULL
    54e77c2 Add support for spec --bundle
    ae11886 cgroup: fix regression in mode detection
    194b72d kill: fix race condition with pidfd_open
    2910d9b cgroup: add custom annotation run.oci.delegate-cgroup
    407eef9 cgroup: drop argument from function
    0485de6 cgroup: report error if the cgroup path was set
    bf5020a cgroup: improve error message
    a131715 cgroup: fix recursive cleanup
    6e95060 cgroup: kill procs in cgroup on EBUSY
    0274d6f tests: disable go modules
    1272eaf tests: skip podman create --pull
    04f1a6a container: read the error from the init process
    29afcd6 Update README.md
    9863a8e Update README.md
    55f5ed5 utils: use /proc/self/fd to open unix socket
    fa40930 contrib: fix warning from the rust compiler
    1535fed NEWS: tag 0.19.1
    227e0be spec: add cgroup ns if on cgroup v2
    3fbe777 libcrun: add const to spec_file
    eb34661 libcrun: annotate cgroup_mode < 0 checks
    92bcc81 tests: add fuzzing tests
    af3509d cgroup: support array of strings
    9effaeb On exec, honor additional_gids from the process spec, not the container definition

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-21 08:52:18 -04:00
Bruce Ashfield
6adc4f64d5 crun: switch to main as specified branch
The upstream project has moved from master to main, so we adjust
our recipe accordingly.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-21 08:52:18 -04:00
Bruce Ashfield
aa2c70a3ad cni: inhibit go.mod build for main cni
The cni plugins already have mod=vendor, but we also need to ensure
that the main CNI build is not using go module based builds.

To avoid inconsistent vendoring messages, we switch all plugins to
no module builds as well.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-15 10:33:41 -04:00
Bruce Ashfield
0f59d98670 podman: update to 3.2.1
Bumping libpod to version v3.2.1-2-gab4d0cf90, which comprises the following commits:

    60752b320 Bump to v3.2.2-dev
    152952fe6 Bump to v3.2.1
    c5d9c0a6f Updated release notes for v3.2.1
    4f56f7f13 Fix network connect race with docker-compose
    e42d727a9 Revert "Ensure minimum API version is set correctly in tests"
    f69789155 Fall back to string for dockerfile parameter
    5a158563c remote events: fix --stream=false
    38fbd2cb9 [CI:DOCS] fix incorrect network remove api doc
    26eae3bf8 remote: always send resize before the container starts
    c751544fa remote events: support labels
    c28f442b2 remote pull: cancel pull when connection is closed
    2993bdf1e Fix network prune api docs
    8ba0c92e6 Improve systemd-resolved detection
    c3f6ef63a logs: k8s-file: fix race
    f1e7a0747 Fix image prune --filter cmd behavior
    5ddd76edd Several shell completion fixes
    2afb5eeab podman-remote build should handle -f option properly
    6beae86f0 System tests: deal with crun 0.20.1
    80362b34c Fix build tags for pkg/machine...
    c85b6b3fe Fix pre-checkpointing
    b61701acb container: ignore named hierarchies
    e0dcffa8d [v3.2] vendor containers/common@v0.38.9
    d46deca8c rootless: fix fast join userns path
    f2b3da502 [v3.2] vendor containers/common@v0.38.7
    78430ee1d [v3.2] vendor containers/common@v0.38.6
    b6ef7cf21 Correct qemu options for Intel macs
    9647d8844 Ensure minimum API version is set correctly in tests
    72455ece4 Bump to v3.2.1-dev
    0281ef262 Bump to v3.2.0
    cff73766f Fix network create macvlan with subnet option
    8688f54ea Final release notes updates for v3.2.0
    f62c6bf6e add ipv6 nameservers only when the container has ipv6 enabled
    4b8ca6303 Use request context instead of background
    ce5c3b554 [v.3.2] events: support disjunctive filters
    dd83f5c0c System tests: add :Z to volume mounts
    32927f5d6 generate systemd: make mounts portable
    abb57e5cf vendor containers/storage@v1.31.3
    1e4563182 vendor containers/common@v0.38.5
    fbf8b78a3 Bump to v3.2.0-dev
    684729482 Bump to v3.2.0-RC3
    f49023031 Update release notes for v3.2.0-RC3
    ee5dd0603 Fix race on podman start --all
    6c9de9382 Fix race condition in running ls container in a pod
    69bae4774 docs: --cert-dir: point to containers-certs.d(5)
    934f36df5 Handle hard links in different directories
    5eecc2761 Improve OCI Runtime error
    ba884865c Handle hard links in remote builds
    c53638e9f Podman info add support for status of cgroup controllers
    ac8b7ddd8 Drop container does not exist on removal to debugf
    18e917cdc Downgrade API service routing table logging
    efa15b96c add libimage events
    a9108ab25 docs: generate systemd: XDG_RUNTIME_DIR
    bb589bec2 Fix problem copying files when container is in host pid namespace

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-15 08:15:57 -04:00
Bruce Ashfield
60c4c54984 runc-docker: update to rc95
Synchronize the 'runc-docker' with the opencontainers variant. This
allows the common patch to be used once again, and we refresh our docker
specific patch to the new content.

Bumping runc to version v1.0.0-rc95-28-gbfcbc947, which comprises the following commits:

    37767c05 ci: lint: show all errors in PRs
    07ca0be0 *: clean up remaining golangci-lint failures
    00119c85 integration: add repeated "runc update" test
    d0f2c25f cgroup2: devices: replace all existing filters when attaching
    98a3c0e4 cgroup2: devices: switch to emulator for cgroupv1 parity
    dcc1cf7c devices: add emulator.Rules shorthand
    54904516 libcontainer: fix integration failure in "make test"
    c7c70ce8 *: clean t.Skip messages
    a95237f8 libctr/cg/systemd: export rangeToBits
    df0206a6 errcheck: utils
    0c65f833 errcheck: signals
    3b31e3ea errcheck: tty
    b45fbd43 errcheck: libcontainer
    463ee5e1 errcheck: libcontainer/nsenter
    7e7ff872 errcheck: libcontainer/configs
    a8995053 errcheck: libcontainer/integration
    b93666eb libct/cg/fs2: setFreezer: wait until frozen
    1069e4e9 libct/cg/fs2: optimize setFreezer more
    5d193188 libct/cg/fs2: optimize setFreezer
    8a7a374f VERSION: back to development
    b9ee9c63 VERSION: release v1.0.0-rc95
    0ca91f44 rootfs: add mount destination validation
    c61f6062 libcontainer: honor seccomp defaultErrnoRet
    d519da5e Dockerfile, Vagrantfile.centos7, .github: bats 1.3.0
    bdad2859 Dockerfile, Vagrantfile.centos7: use go 1.16
    f96530f2 EMERITUS: recognise previous maintainers
    c73a6626 VERSION: back to development
    2c7861bc VERSION: release v1.0.0-rc94
    12e9cac9 Vagrantfile.fedora: set Delegate=yes
    ac70a9a1 tests/int: run rootless_cgroup tests for v2+systemd
    601cf582 tests/int/cgroups: don't check for hugetlb
    40b97919 tests/int: enable/use requires cgroups_<ctrl>
    44fcbfd6 tests/int/helpers: generalize require cgroups_freezer
    353f2ad1 tests/int/update.bats: don't set cpuset in setup
    4f8ccc5f libct/cg/sd/v2: call initPath from Path
    0ed1f802 tests/int/helpers: rm old code
    af2e03c5 ci/gha: bump shellcheck 0.7.1 -> 0.7.2
    2d1bb91d ci/gha: bump shfmt 3.2.0 -> 3.2.4
    a7feb423 libct/int: add TestFdLeaksSystemd
    c7f847ed libct/cg/sd: use global dbus connection
    99c5c504 libct/cg/sd: introduce and use getManagerProperty
    0fabed76 libct/int/checkpoint_test: use kill(0) for pid check
    7eb1405b libct/int/checkpoint_test: use waitProcess helper
    72d7a824 libct/int/checkpoint_test: use t.Helper
    bcca7968 libct/int: simplify/fix showing errors
    524abc59 freezer: add delay after freeze
    e1d842cf libct/intelrdt: fix unit test
    541fc19e Makefile: allow overriding go command by environment
    06a9ea36 script/release.sh: add -a to force rebuild
    91b01682 Update golang.org/x/sys to add linux/ppc support
    ee4612bc CI: enable Go 1.13 again
    e2dd9220 go.mod: demote to Go 1.13
    45f49e8f libcontainer: avoid using t.Cleanup
    1a659bc6 Revert "Makefile: rm go 1.13 workaround"
    abf12ce0 libc/cg: improve Manager docs
    3f659467 libct/cg: make Set accept configs.Resources
    af0710a0 libct/cg/sd/v2: fix Set argument
    850b2c47 libct/cg/fscommon.OpenFile: speed up ro case
    71a8aee8 cgroups/systemd: replace deprecated dbus functions
    47ef9a10 libct/cg/sd: retry on dbus disconnect
    6122bc8b Privatize NewUserSystemDbus
    15fee989 libct/cg/sd: add renew dbus connection
    bacfc2c2 libct/cg/sd: add isDbusError
    cdbed6f0 libct/cg/sd: add dbus manager
    9efd8466 libct/cg/fscommon.OpenFile: reverse checks order
    0bee5e0b libct/cg/fs: add GetStats benchmark
    7e7eb1c3 CI: update Fedora to 34
    d3cee12a cloned_binary: switch from #error to #warning for SYS_memfd_create
    23e3794d checkpoint: validate parent path
    fcd7fe85 libct/cg/fs/freezer: make sure to thaw on failure
    0216716c tests/int: add a case for cgroupv2 mount
    5ffcc568 tests/int: use bfq test with rootless
    ff692f28 Fix cgroup2 mount for rootless case
    3826db19 libct/rootfs/mountCgroupV2: minor refactor
    1e476578 libct/rootfs: introduce and use mountConfig
    deb8a8dd libct/newInitConfig: nit
    2192670a libct/configs/validate: validate mounts
    1f1e91b1 libct/specconv: check mount destination is absolute
    73f22e7f libcontainer/cgroups/systemd: replace use of deprecated dbus.New()
    aa622723 tiny fix iterative checkpoint test case
    ee3b563d Add cfs throttle stats to cgroup v2
    6faed0e4 libct/int: use ok(t, err)
    af3c5699 libct/int: remove unused code
    7b802a7d libct/int: better test container names
    9f3d7534 logging: enable file/line info if --debug is set
    ef9922c2 libct/cg: don't return OOMKillCount error when rootless
    5cdd9022 libct/cg/fs[2]: fix comments about m.rootless
    31dd1e49 tests/int: add rootless + host pidns test case
    a2050ea4 runc run: fix start for rootless + host pidns
    2f1a3ed3 Fix vendored dependencies
    d15c7bb0 go.mod: github.com/cilium/ebpf v0.5.0
    f28a8cc2 ebpf: replace deprecated prog.Attach/prog.Detach
    928ef7af libct/nsenter: add json msg escaping
    52390d68 Ignore kernel memory settings
    b7c315ad vendor: bump containerd/console to 1.0.2
    b6cdb8ae fix a typo
    64bb59f5 nsenter: improve debug logging
    6ce2d63a libct/init_linux: retry chdir to fix EPERM
    c5029c00 tests: fix hello-world tarball name in testdata for arm64
    289a3045 go.mod: github.com/moby/sys/mountinfo v0.4.1
    4316df8b libcontainer/system: move userns utilities to separate package
    e7fd383b libcontainer/system: un-export UIDMapInUserNS()
    249356a1 libcontainer/system: remove unused GetParentNSeuid()
    dc52ed25 libcontainer/user: remove outdated MAINTAINERS file
    72ecf59c libcontainer/user: fix windows compile error
    2515b0c2 libct/user: rm windows code
    0596f6e1 libcontainer/devices/device_windows.go: rm
    b1deba8c libcontainer/configs/config_windows_test.go: rm
    f1586dbd libcontainer/configs/validate: make Validate() less DRY
    4126b807 libcontainer/configs: add missing type for hooknames
    48125179 go.mod: github.com/cilium/ebpf v0.4.0
    44611630 docs/systemd: add
    27bb1bd5 libct/specconv/CreateCgroupConfig: don't set c.Parent default
    d748280a make release: build/include libseccomp
    aa6da82c script/release.sh: fix shellcheck warnings
    3eb46d89 ci: make static built binary available
    f0dec0b4 libct/specconv/CreateCgroupConfig: nit
    36fe3cc2 tests/int/cpt: fix lazy-pages flakiness
    2dd62b3d libct/checkCriuFeatures: rm excessive debug
    0e089002 tests/int/checkpoint: close lazy_r fd
    b09030a5 tests/int/checkpoint: close fds in check_pipes
    e63df1e6 tests/int: really randomize cgroup/unit names
    6e4c5b6e tests/int/cgroups: don't use BUSYBOX_BUNDLE
    adf733fa vendor: update go-systemd and godbus
    f09a3e1b tests/int: don't set/use CGROUP_XXX variables
    4ecff8d9 start: don't kill runc init too early
    b1184302 libct/configs/validator: add some cgroup support
    0f8d2b6b libct/cg/fs2.Stat: don't look for available controllers
    85416b87 libct/cg/fs2.statPids: fall back directly
    10f9a982 libct/cg/fs2/getPidsWithoutController: optimize
    6121f8b6 libct/cg/fs2.Stat: always call statCpu
    9455395b libct/cg/fs2/memory.Stat: add usage for root cgroup
    a9c47fe7 libct/cg/fs[2]/getMemoryData[V2]: optimize
    b99ca25a libct/cg/fs2/memory: fix swap reporting
    79a8647b libct/int: add TestFdLeaks
    b3be2b0b libct: close execFifo after start
    08b52797 Make test specific to disassembleFilter function
    7b3e0bcf Ensure the scratch pipe is read during ExportBPF
    62f1f0e4 tests/int/checkpoint: check all logs for errors
    346cb359 Revert "tests/checkpoint: show full log lazy pages cpt"
    c9b3787b script/check-config.sh: add SELinux and AppArmor
    5fb831a0 capabilities: WARN, not ERROR, for unknown / unavailable capabilities
    e49d5da2 go.mod: OCI runtime-spec v1.0.3-0.20210326190908-1c3f411f0417
    2726146b runc --debug: more tests
    201d60c5 runc run/start/exec: fix init log forwarding race
    c06f999b libct/logs/test: refactor
    688ea99e runc init: fix double call to ConfigureLogs
    dd6c8d76 main: cast Chmod argument to os.FileMode
    69ec21a1 libct/logs.ForwardLogs: use bufio.Scanner
    0300299a tests/int/debug.bats: fixups
    d38d1f9f libcontainer/logs: use int for Config.LogPipeFd
    ac93746c libct/seccomp: rm IsEnabled
    9b2f1e6f runc version: don't use seccomp.IsEnabled
    c8e0486f Fix oss-fuzz build
    d76309f9 script/check-config.sh: add CONFIG_SECCOMP_FILTER
    997e8942 capabilities.Caps: use a map for capability-types
    41f466d8 nsexec.c: fix formatting for netlink defines
    522bd641 Fix checking C code formatting
    1948b4ce cloned_binary.c: rm redundant comments
    b67deb56 nsexec.c: rm a block
    513d89ee capabilities: use BOUNDING/AMBIENT instead of their alias
    dd2caace go.mod: runtime-spec v1.0.3-0.20210316141917-a8c4a9ee0f6b
    a608b7e7 libcontainer/apparmor: use sync.Once for AppArmor detection
    d6e89248 Fix build-tags in libcontainer/devices
    f585cec7 libct/cg/v2: always enable TasksAccounting
    8c7ece1e fs2: fallback to setting io.weight if io.bfq.weight
    74299a1c CI: cache ~/.vagrant.d/boxes
    97f2e351 go.mod, libct: bump go-criu to v5, use google.golang.org/protobuf
    db025aba libct: criuSwrk: only iterate over CriuOpts if debug is set
    051646a3 tests: test nested bind mount restore
    705b6cc7 Re-create mountpoints during restore

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-14 22:23:19 -04:00
Bruce Ashfield
b88e74aca7 k3s: update to 1.21 latest
Bumping k3s to version v1.21.1+k3s1-10-geac48f69bc, which comprises the following commits:

    eac48f69bc Add kubernetes.default.svc to serving certs
    16ae282c7a Fix RBAC cloud-controller-manager name 3308 (#3388) (#3408)
    ff54d8c96d Add a path for wireguard's privatekey
    1932979f44 Update flannel version
    8fd180e0d9 move object channel defer close to goroutine
    69795277be add retention default and wire in s3 prune
    58649c5e85 add etcd snapshot save subcommand

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-14 13:53:52 -04:00
Bruce Ashfield
42cc70df20 conmon: update to v2.0.28
6b18f7e bump to v2.0.28
   dd63dcb Cirrus: Update VM Images
   096e2c1 conmon: do not chown /dev/null
   3efab3e Add Kubernetes e2e tests as GitHub action
   0114f3c move integration to gh actions
   186038c run make vendor
   31c5a2e add tests running a runtime
   c53c155 always set container pid file
   1955f59 write runtime stderr to journal on error
   af1f3c4 some small cleanups
   6c38b5a Use less resources
   355dbf1 conn_sock: fix potential segfault
   4587294 ci/gha: bump runc to rc93
   92867a7 Add Podman integration test GitHub action
   1ec43d9 bump to v2.0.28-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:13 -04:00
Bruce Ashfield
e15bb2b101 README: update IRC to libera.chat
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:12 -04:00
Bruce Ashfield
d281b8b55c libvmi: upadte to 0.14.0
Integrating the following commits:

   3f5b0d5 Wire up cpuid events on kvmi (#975)
   8cdef96 Clear up event example even more (#974)
   548da8d Simplify event-example (#973)
   cffe055 Clean up on partial init failure (#972)
   fb2e006 Add snapcraft.yaml (#961)
   582fc95 Add vmtrace (IPT) buffer offset to vm_event ABI (#960)
   8b88b72 Turn on all debug options for scan-build test (#959)
   719d90f Debug print in volatility_ist can segfault, fix (#958)
   19379a9 Remove temp file accidentaly added to git (#957)
   f686145 Nested support (#956)
   6d65cc3 Add AC_PROG_CC_C99 to configure.ac (#955)
   e21df55 Add more files to gitignore (#954)
   d9e490e Container build test (#953)
   c68d899 Switch to using Github Actions for CI (#952)
   6d07174 Bump version to 0.15.0 (odd-numbered dev version) (#951)
   1ae3950 examples: fix reinjection in breakpoint-recoil-example (#945)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:11 -04:00
Bruce Ashfield
6957b542e3 cni/plugins: update to 0.9.1
Update the cni plugins part of the recipe to the 0.9.1 release:

   c4d4aa7 Remove Bryan Boreham as maintainer
   af26bab host-local: support ip/prefix in env args and CNI args
   f72aa98 [sbr]: Use different tableID for every ipCfg        Check
   tableID not in use for every ipCfg
   40c225e Small typo improves in README.md
   76ef07e Allow multiple routes to be added for the same prefix. Enables ECMP
   d6bf1ea Update to lastest vendor/github.com/vishvananda/netlink
   bdaaa20 tuning: always update MAC in CNI result
   33a2929 vendor: bump to libcni v1.0-rc1
   820fee9 tuning: Add support of altering the allmulticast flag
   f34c600 [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
   8f32968 Fix nil-pointer check
   028fc2f host-local: support custom IPs allocation through runtime configuration
   7da1c84 pkg/ip: introduce a new type `IP` to support formated <ip>[/<prefix>]
   2eac102 go.mod: github.com/j-keck/arping v1.0.1
   f4d2925 go.mod: github.com/buger/jsonparser v1.1.1
   c3d0153 go.mod: github.com/alexflint/go-filemutex v1.1.0
   75b64e0 go.mod github.com/Microsoft/hcsshim v0.8.16
   bc85637 go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
   d2d89dd go.mod: github.com/mattn/go-shellwords v1.0.11
   59a6259 go.mod: github.com/sirupsen/logrus v1.8.1
   3cc1135 CI: Install linux-modules-extra for VRF module
   5b02c2a Fix broken links to online docs in plugin READMEs
   f275746 gha: update actions/setup-go@v2
   b811967 remove redundant startRange in RangeIter due to overlap check on multi ranges
   178d7c0 fix(win-bridge): panic while calling HNS api
   e09a17f portmap: use slashes in sysctl template to support interface names which separated by dots
   9b09f16 pkg/ipam: use slash as sysctl separator so interface name can have dot
   e31cd2c [macvlan] Stop setting proxy-arp on macvlan interface
   8e540bf tuning: increase test coverage to 1.0.0 and older spec versions
   d2e5b5d portmap: increase test coverage to 1.0.0 and older spec versions
   8f7fe6d flannel: increase test coverage to 1.0.0 and older spec versions
   f33eedb firewall: increase test coverage to 1.0.0 and older spec versions
   da52be3 bandwidth: increase test coverage to 1.0.0 and older spec versions
   02cdaaf host-local: increase test coverage to 1.0.0 and older spec versions
   f534133 static: increase test coverage to 1.0.0 and older spec versions
   932653f dhcp: increase test coverage to 1.0.0 and older spec versions
   dd3f606 dhcp: add -resendmax option to limit lease acquisition time for testcases
   4ddc8ba vlan: increase test coverage to 1.0.0 and older spec versions
   f56545c ptp: increase test coverage to 1.0.0 and older spec versions
   bbf7189 macvlan: increase test coverage to 1.0.0 and older spec versions
   5eae558 loopback: increase test coverage to 1.0.0 and older spec versions
   5096b53 ipvlan: increase test coverage to 1.0.0 and older spec versions
   34cee8c host-device: increase test coverage to 1.0.0 and older spec versions
   c3c286c bridge: increase test coverage to 1.0.0 and older spec versions
   c8f341d bridge: simplify version-based testcase code
   8c25db8 testutils: add test utilities for spec version features
   7d8c767 plugins: update to spec version 1.0.0
   9e2430b vendor: bump CNI to 1.0.0-pre @ 62e54113

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:11 -04:00
Bruce Ashfield
9bacb690c1 irqbalance: update to 1.8.0
Integrating the following commits:

   bd5aaf5 Fix comma typo in ui.c
   43751df drop NoNewPrivs from irqbalance service
   066499a remove no existing irq in banned_irqs
   ee6b3bd Fix compile issue with none AARCH64 builds
   d17bcc9 Fix irqbalance cannot obtain the full name of irq
   99ae256 Updating irqbalance to v1.8.0
   47f0f26 Add return value check of opendir in do_one_cpu
   518d81c Hotplug may occur again during sleep, so wait until there is no hotplug
   fe0b99e ui: fix cpu/irq menu off by one
   0cdc7a2 fix uint64_t printf format (use PRIu64)
   31dea01 Also fetch node info for non-PCI devices
   ef9bf64 Add hot pull method for irqbalance
   6ae114f Add log for hotplug appropriately
   0ba4a60 add irq hotplug feature for irqbalance
   004c7ab Remove some unused constant macros in constants.h
   c995237 Add a deprecation notice for IRQBALANCE_BANNED_CPUS
   31c7d12 Add IRQBALANCE_BANNED_CPULIST to env file
   6fe0329 log correctly for isolated and nohz_full cpus
   04e5ce0 Update README.md
   4019fe6 Add some examples for IRQBALANCE_BANNED_CPUS
   b3f95be Adjust how we determine if a cpu is online
   c8757c6 activate_mapping: activate only online CPUs
   677b686 add env variable to ban cpus using cpulist syntax
   f6fcd3e put arg parsing detail into parse_command_line()

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:10 -04:00
Bruce Ashfield
b71f6be77b kvmtool: update to -latest
Integrating the following commits:

   415f92c arm: Fail early if KVM_CAP_ARM_PMU_V3 is not supported
   117d649 virtio: add support for vsock
   382eaad hw/rtc: ARM/arm64: Use MMIO at higher addresses
   45b4968 hw/serial: ARM/arm64: Use MMIO at higher addresses
   f01cc77 arm: Reorganise and document memory map
   7e19cb5 Remove ioport specific routines
   1f56b9d pci: Switch trap handling to use MMIO handler
   205eaa7 virtio: Switch trap handling to use MMIO handler
   579bc61 vfio: Switch to new ioport trap handlers
   a4a0dac vfio: Refactor ioport trap handler
   59866df hw/serial: Switch to new trap handlers
   47a5106 hw/serial: Refactor trap handler
   38ae332 hw/vesa: Switch trap handling to use MMIO handler
   123ee47 hw/rtc: Switch to new trap handler
   8c45f36 hw/rtc: Refactor trap handlers
   3adbcb2 x86/ioport: Switch to new trap handlers
   8230499 x86/ioport: Refactor trap handlers
   d24bedb hw/i8042: Switch to new trap handlers
   f7ef3dc hw/i8042: Refactor trap handler
   fc76962 hw/i8042: Clean up data types
   96f0c86 mmio: Extend handling to include ioport emulation
   9bc7e2c ioport: Retire .generate_fdt_node functionality
   a81be31 hw/serial: Use device abstraction for FDT generator function
   97531eb ioport: Remove ioport__setup_arch()

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:10 -04:00
Bruce Ashfield
76776449ce runc: update to rc95
Updating to the latest runc, which includes the following commits:

   37767c05 ci: lint: show all errors in PRs
   07ca0be0 *: clean up remaining golangci-lint failures
   00119c85 integration: add repeated "runc update" test
   d0f2c25f cgroup2: devices: replace all existing filters when attaching
   98a3c0e4 cgroup2: devices: switch to emulator for cgroupv1 parity
   dcc1cf7c devices: add emulator.Rules shorthand
   54904516 libcontainer: fix integration failure in "make test"
   c7c70ce8 *: clean t.Skip messages
   a95237f8 libctr/cg/systemd: export rangeToBits
   df0206a6 errcheck: utils
   0c65f833 errcheck: signals
   3b31e3ea errcheck: tty
   b45fbd43 errcheck: libcontainer
   463ee5e1 errcheck: libcontainer/nsenter
   7e7ff872 errcheck: libcontainer/configs
   a8995053 errcheck: libcontainer/integration
   b93666eb libct/cg/fs2: setFreezer: wait until frozen
   1069e4e9 libct/cg/fs2: optimize setFreezer more
   5d193188 libct/cg/fs2: optimize setFreezer
   8a7a374f VERSION: back to development
   b9ee9c63 VERSION: release v1.0.0-rc95
   0ca91f44 rootfs: add mount destination validation
   c61f6062 libcontainer: honor seccomp defaultErrnoRet
   d519da5e Dockerfile, Vagrantfile.centos7, .github: bats 1.3.0
   bdad2859 Dockerfile, Vagrantfile.centos7: use go 1.16
   f96530f2 EMERITUS: recognise previous maintainers
   c73a6626 VERSION: back to development
   2c7861bc VERSION: release v1.0.0-rc94
   12e9cac9 Vagrantfile.fedora: set Delegate=yes
   ac70a9a1 tests/int: run rootless_cgroup tests for v2+systemd
   601cf582 tests/int/cgroups: don't check for hugetlb
   40b97919 tests/int: enable/use requires cgroups_<ctrl>
   44fcbfd6 tests/int/helpers: generalize require cgroups_freezer
   353f2ad1 tests/int/update.bats: don't set cpuset in setup
   4f8ccc5f libct/cg/sd/v2: call initPath from Path
   0ed1f802 tests/int/helpers: rm old code
   af2e03c5 ci/gha: bump shellcheck 0.7.1 -> 0.7.2
   2d1bb91d ci/gha: bump shfmt 3.2.0 -> 3.2.4
   a7feb423 libct/int: add TestFdLeaksSystemd
   c7f847ed libct/cg/sd: use global dbus connection
   99c5c504 libct/cg/sd: introduce and use getManagerProperty
   0fabed76 libct/int/checkpoint_test: use kill(0) for pid check
   7eb1405b libct/int/checkpoint_test: use waitProcess helper
   72d7a824 libct/int/checkpoint_test: use t.Helper
   bcca7968 libct/int: simplify/fix showing errors
   524abc59 freezer: add delay after freeze
   e1d842cf libct/intelrdt: fix unit test
   541fc19e Makefile: allow overriding go command by environment
   06a9ea36 script/release.sh: add -a to force rebuild
   91b01682 Update golang.org/x/sys to add linux/ppc support
   ee4612bc CI: enable Go 1.13 again
   e2dd9220 go.mod: demote to Go 1.13
   45f49e8f libcontainer: avoid using t.Cleanup
   1a659bc6 Revert "Makefile: rm go 1.13 workaround"
   abf12ce0 libc/cg: improve Manager docs
   3f659467 libct/cg: make Set accept configs.Resources
   af0710a0 libct/cg/sd/v2: fix Set argument
   850b2c47 libct/cg/fscommon.OpenFile: speed up ro case
   71a8aee8 cgroups/systemd: replace deprecated dbus functions
   47ef9a10 libct/cg/sd: retry on dbus disconnect
   6122bc8b Privatize NewUserSystemDbus
   15fee989 libct/cg/sd: add renew dbus connection
   bacfc2c2 libct/cg/sd: add isDbusError
   cdbed6f0 libct/cg/sd: add dbus manager
   9efd8466 libct/cg/fscommon.OpenFile: reverse checks order
   0bee5e0b libct/cg/fs: add GetStats benchmark
   7e7eb1c3 CI: update Fedora to 34
   d3cee12a cloned_binary: switch from #error to #warning for SYS_memfd_create
   23e3794d checkpoint: validate parent path
   fcd7fe85 libct/cg/fs/freezer: make sure to thaw on failure
   0216716c tests/int: add a case for cgroupv2 mount
   5ffcc568 tests/int: use bfq test with rootless
   ff692f28 Fix cgroup2 mount for rootless case
   3826db19 libct/rootfs/mountCgroupV2: minor refactor
   1e476578 libct/rootfs: introduce and use mountConfig
   deb8a8dd libct/newInitConfig: nit
   2192670a libct/configs/validate: validate mounts
   1f1e91b1 libct/specconv: check mount destination is absolute
   73f22e7f libcontainer/cgroups/systemd: replace use of deprecated dbus.New()
   aa622723 tiny fix iterative checkpoint test case
   ee3b563d Add cfs throttle stats to cgroup v2
   6faed0e4 libct/int: use ok(t, err)
   af3c5699 libct/int: remove unused code
   7b802a7d libct/int: better test container names
   9f3d7534 logging: enable file/line info if --debug is set
   31dd1e49 tests/int: add rootless + host pidns test case
   a2050ea4 runc run: fix start for rootless + host pidns
   0f8d2b6b libct/cg/fs2.Stat: don't look for available controllers
   85416b87 libct/cg/fs2.statPids: fall back directly
   10f9a982 libct/cg/fs2/getPidsWithoutController: optimize
   6121f8b6 libct/cg/fs2.Stat: always call statCpu
   9455395b libct/cg/fs2/memory.Stat: add usage for root cgroup
   a9c47fe7 libct/cg/fs[2]/getMemoryData[V2]: optimize
   b99ca25a libct/cg/fs2/memory: fix swap reporting
   c8e0486f Fix oss-fuzz build

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:09 -04:00
Bruce Ashfield
b22003973b skope: update to 1.3.x
Updating skopeo to the 1.3.x series. Along with the version bump, we
patch the Makefile to stop using gpgme-config and instead using
pkg-config, since OE taints gpgme-config and the build will break if
we call it directly.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:08 -04:00
Bruce Ashfield
f964aeb898 cri-tools: update to 1.21 release
We update to the latest 1.21 commits, and we refresh our patch for
context changes.

   eb0faebe Bump google.golang.org/grpc from 1.37.1 to 1.38.0
   1d34ea0c Add global handler for Interrupt signal
   d2c028aa Bump k8s.io/cri-api from 0.21.0 to 0.21.1
   cac74d4f Bump k8s.io/apimachinery from 0.21.0 to 0.21.1
   0e4c365c Bump k8s.io/api from 0.21.0 to 0.21.1
   4b956efa Bump k8s.io/kubectl from 0.21.0 to 0.21.1
   b3bc7d45 Update golangci-lint to v1.40.1 and fix lints
   a72896da Bump google.golang.org/grpc from 1.37.0 to 1.37.1
   09df93a2 Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
   8a28583f Clone cri-dockerd from permanent repo
   29c6b21e Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
   50a297dc Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
   15eee85f Mention deb/rpm packages hosted on OBS in README
   6ead47bd Trim build paths for binaries

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:06 -04:00
Bruce Ashfield
a781aa5fd9 cri-o: update to 1.22 release
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:05 -04:00
Bruce Ashfield
87460f34d7 containerd-opencontainers: update to 1.5.2
Updating to the released 1.5.x containerd.

We also add a patch to fix the following:

    Since our oe-core go infrastructure insists on both -pie and static
    builds (for the most part), and that is not recommended by many
    packages, we end up with errors like:

      cannot find package runtime/cgo (using -importcfg)
              ...
             recipe-sysroot-native/usr/lib/aarch64-poky-linux/go/pkg/tool/linux_amd64/link:
             cannot open file : open : no such file or directory

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:43:02 -04:00
Bruce Ashfield
e16ec7aebc docker-ce: upate to latest 20.10.x
docker:

   41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux
   56541eca9a [20.10] update containerd binary to v1.4.6
   fb179ff098 update runc binary to v1.0.0-rc95
   4c801fdb7d integration: remove KernelMemory tests
   6174e3cf22 Update runc binary to v1.0.0-rc94
   afbb1277a3 Swarm config: use absolute paths for mount destination strings
   94c1890d39 builder-next: relax second cache key requirements for schema1
   01f734cb4f [20.10] update containerd binary to v1.4.5
   21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init`
   12b03bcb27 Error string match: do not match command path
   8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which`
   9ca66776fa bump up rootlesskit to v0.14.2
   08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build
   404ede5737 Bump hcsshim for error details fix

cli:

   f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors"
   78fcd905c docs: Fix broken jump link
   12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2
   00755d7db printServerWarningsLegacy: silence "No kernel memory limit support"
   8264f5be8 docs: dockerd: fix broken link and markdown touch-ups
   4fbdf3f36 docs: document log-opts for "dual logging" cache
   1ff45aac4 Update stop.md
   ed71df1b9 docs: cleanup / refactor cli doc
   ee20fa1ec docs: add reference for  "docker config" commands
   ffe40dc6b docs: update some examples for proxy configuration
   fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated
   3de2cc6ef docs/reference/builder: update "syntax" section
   234036d10 docs/reference/builder: update example output, and some rephrasing
   0c442dc17 docs/reference/builder: remove outdated example Dockerfiles
   6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes

network:

   56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be
   7b9c2905 fix port forwarding with ipv6.disable=1
   c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:58 -04:00
Bruce Ashfield
cd38144a6b moby: update to latest 20.10
Updating to the lastest moby commits, which comprise the following
commits:

moby:

   41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux
   56541eca9a [20.10] update containerd binary to v1.4.6
   fb179ff098 update runc binary to v1.0.0-rc95
   4c801fdb7d integration: remove KernelMemory tests
   6174e3cf22 Update runc binary to v1.0.0-rc94
   afbb1277a3 Swarm config: use absolute paths for mount destination strings
   94c1890d39 builder-next: relax second cache key requirements for schema1
   01f734cb4f [20.10] update containerd binary to v1.4.5
   21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init`
   12b03bcb27 Error string match: do not match command path
   9ca66776fa bump up rootlesskit to v0.14.2
   404ede5737 Bump hcsshim for error details fix

cli:

   f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors"
   78fcd905c docs: Fix broken jump link
   12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2
   00755d7db printServerWarningsLegacy: silence "No kernel memory limit support"
   8264f5be8 docs: dockerd: fix broken link and markdown touch-ups
   4fbdf3f36 docs: document log-opts for "dual logging" cache
   1ff45aac4 Update stop.md
   ed71df1b9 docs: cleanup / refactor cli doc
   ee20fa1ec docs: add reference for  "docker config" commands
   ffe40dc6b docs: update some examples for proxy configuration
   fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated
   3de2cc6ef docs/reference/builder: update "syntax" section
   234036d10 docs/reference/builder: update example output, and some rephrasing
   0c442dc17 docs/reference/builder: remove outdated example Dockerfiles
   6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes

network:

   56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be
   7b9c2905 fix port forwarding with ipv6.disable=1
   c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:54 -04:00
Bruce Ashfield
30774e6c21 k8s: bump to v1.22-alpha
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:53 -04:00
Bruce Ashfield
78f83d1e98 k3s: update to v1.21.x
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:49 -04:00
Bruce Ashfield
f6bb19c32f podman: bump to 3.2-rcX
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:48 -04:00
Bruce Ashfield
efaa68ded7 conf: drop gatesgarth from compatibility
There have been reports of warnings being generated by the
layer index when the compatibility of a layer exceeds 25 characters.

gatesgarth is supported in its own branch, and isn't being tested
against master, so we drop it from the compat.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:38:34 -04:00
Saul Wold
8ded083436 ceph: Fix compile error with snappy
snappy changed a data type in the last update, this is a known
issue in ceph.

Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-01 08:52:18 -04:00
Saul Wold
638d31de13 ceph: update to 15.2.12 to address CVEs
Updated sha*

Fixes: CVE-2021-3509
Fixes: CVE-2021-3524
Fixes: CVE-2021-3531

Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-21 23:18:04 -04:00
Martin Jansa
950386a988 libvirt: fix do_install with usrmerge
* meson build uses these paths:
  ./src/meson.build:    systemd_unit_dir = prefix / 'lib' / 'systemd' / 'system'
  ./tools/meson.build:    install_dir: prefix / 'lib' / 'systemd' / 'system',

  with usrmerge it fails with:
  sed: can't read TOPDIR/tmp-glibc/work/core2-64-oe-linux/libvirt/7.2.0-r0/image//usr/lib/systemd/system/libvirtd.service: No such file or directory
  because systemd_unitdir and systemd_system_unitdir are different
  with and without usrmerge in DISTRO_FEATURES:

  env.libvirt-without-usrmerge:export systemd_unitdir="/lib/systemd"
  env.libvirt-with-usrmerge:export systemd_unitdir="/usr/lib/systemd"

  env.libvirt-without-usrmerge:export systemd_system_unitdir="/lib/systemd/system"
  env.libvirt-with-usrmerge:export systemd_system_unitdir="/usr/lib/systemd/system"

* set -Dinit_script to none when systemd isn't used instead of
  deleting the files in do_install_append

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-19 09:26:02 -04:00
Bruce Ashfield
51c195d761 crun: switch branch to main
crun has renamed master -> main, so we adjust our fetching to
match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-19 08:48:11 -04:00
Bruce Ashfield
ef7f5e7c58 sloci-image: allow target and nativesdk variants
We now have use cases for sloci that can run on the target itself,
or have it used in a nativesdk scenario.

To avoid the awkwardly named "nativesdk-sloci-image-native" or
.inc files, we rename the recipe sloci-image_git and use
BBCLASSEXTEND for native/nativesdk support

This is similar to the change sent by: Hongxu Jia <hongxu.jia@windriver.com>,
but is updated to the current sloci-image recipe contents.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-18 22:42:27 -04:00
Martin Jansa
07ed07b9f1 libvirt: backport patch to fix compatibility with Meson-0.58
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-17 10:28:54 -04:00
Martin Jansa
af588c3034 dev86: remove the pre-generated token[12].h and force gperf to generate them in do_compile
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-05-14 11:06:06 -04:00
Martin Jansa
09c3281d44 dev86: fix compatibility with gperf-3.1
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-05-14 11:06:06 -04:00
Martin Jansa
d1e08a20d1 dev86: depend on dev86-native for ifdefg
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-05-14 10:06:02 -04:00
Martin Jansa
b67e57e54e dev86: switch to still maintained fork of dev86
* as mentioned in:
  https://github.com/lkundrak/dev86/pull/17
  the original lkundrak repo is no longer maintained

* pass only BASE_PV as VERSION in EXTRA_OEMAKE to prevent:
  | version.h:4:20: error: ‘gitAUTOINC’ undeclared (first use in this function)
  |  #define VER_PAT 21+gitAUTOINC+e254e0b196
  |                     ^

* there are many new commits, we need at least that fix for
  newer gperf

git log --oneline v0.16.21..jbruchon/master
e254e0b (jbruchon/master) Merge pull request #21 from tkchia/master
3473bde [libc] update _signal syscall semantics, per ABI change in ELKS at https://github.com/jbruchon/elks/pull/629
d74e90d Merge pull request #20 from tkchia/tkchia/update-syscalls
541a8d5 [libc] update syscall list & ino_t type, per ELKS tree
710e852 Merge pull request #16 from spacerace/master
b215454 Merge pull request #17 from mfld-fr/master
870635e Move EMU86 & MON86 to standalone projects
84e3d00 [mon86] Latest touch before moving
c2f288c [emu86] Latest touch before moving
f7449f3 libc tests for MSDOS target (far away from complete ;))
6cbd64d fixing problem in string.h introduced by myself -.-
39e04cd Merge branch 'master' of https://github.com/spacerace/dev86
b44e43d Added OpenBSD's timingsafe_bcmp() and timingsafe_memcmp()
857c30e Added BSD's strlcat() and strlcpy(), safe string copy/cat
0764e09 typo in string.h
2fb6a3a swab()
4e09d08 strupr()
2bd985f strset()
5a7bb33 strrev()
56be26a strnset()
c919b2d strlwr()
b63f295 h+Mf bzero() strnset() strset() strlwr() strupr() strrev() swab()
5985246 removed old implementation of strstr. if anyone needs this file => remains in git history
7b481c0 added bzero()
776929c Merge pull request #15 from spacerace/master
8206ed2 stdlib.h + Makefile changes for getenv() and system()
b995d1e getenv() implementation
60466fe system() implementation
12439ac note on __mkenv (related to getenv commits from me)
aae041a removed empty line on top of file
6d6d91f removed uneeded empty file (see sound.c)
ff7d37e formatting (tabs)
246418a formatting in one line fixed
4ff1f48 Merge pull request #14 from mfld-fr/emu86
1b8f8db Add data & suspicious opcode breakpoints
798c4a2 Merge pull request #13 from rdebath/jbruchon
2eb4d82 Add .travis.yml for running "make distribution" tests.
2ea54e1 Merge pull request #12 from mgorny/makez
f14f78e build: Always use $(MAKE) to spawn sub-make
dfb9b42 Merge pull request #11 from mfld-fr/emu86
6ae2b54 Make dev86 working "in tree"
224843f Merge pull request #10 from mfld-fr/emu86
e56a958 [emu86] Test against ELKS - Round 3
0099ec8 Merge pull request #9 from mfld-fr/emu86
32865c8 [emu86] Test against ELKS - Round 2
e1aa9bd Merge pull request #8 from mfld-fr/emu86
c7ebb2a [emu86] Optimize execution lookup
57019a7 [emu86] Complete decoding optimization
de516a5 [emu86] Fix mfld-fr#21 : opcode 90h (NOP)
40f7c99 [emu86] Optimize decoding < C0h
91d4c61 [emu86] Fix mfld-fr#16 : add pcat timing options
d519caf [emu86] Fix mfld-fr#14 : trace support
3a479e7 [emu86] Check vector before interrupt
7eec401 Optimize decoding < 80h
98334d3 Fix mfld-fr#8 and warning cleanup
0579c82 Merge pull request #7 from mfld-fr/master
49492b9 [emu86] Add option for tiny model
da6a960 [emu86] fix #19 : remove PT1 test
e3b465f [dis88] Move back from ELKS
f2ea895 Merge pull request #6 from mfld-fr/master
b0700f4 [mon86] First stage removal after second validated
6ef705d [mon86] Fix #18 : Complete host tool
1fa5a70 Fix #10 and #11 : Target specific code
22c7770 Merge branch 'bug86'
e25c996 [mon86] Tune host tool for read & write
47aadb5 [mon86] Fix #15 : Cleanup in host tool
ae7c628 [mon86] Makefile for host part + more testing
ae6c84a [mon86] New host tool + fix context parsing
c9205ac Add missing void types to libc/misc/qsort.c
7a4f074 unproto: fix macOS Sierra compilation error reported by scontini76
ac6d924 unproto: better CFLAGS
f86ad57 bcc: if EOF is hit before end of comment, report it as an error
fcdbcd7 limits.h: add PATH_MAX
7239fea include: Add a skeleton for inttypes.h
f3e88f9 Remove accidental ignoring of "include"
0ac417a Merge branch 'master' of https://github.com/jbruchon/dev86
74753fa Fix size_t declaration, add ssize_t declaration
4be53b7 Merge pull request #5 from mfld-fr/master
d5ecd9c [mon86] Second stage tested on real SBC
81b0ab2 [mon86] Second stage monitor completed
b55cbbc [mon86] Trace & break interrupt support
18a5ba8 Merge pull request #4 from mfld-fr/master
77f028b [mon86] First stage monitor completed
07689d4 Merge remote-tracking branch 'upstream/master'
e043007 Revert accidental bcc changes in commit 3c83dee
495b99a [emu86] Test against ELKS - Round 1
5508efa Merge pull request #3 from mfld-fr/master
8aa3313 [emu86] Testing against a real ROM - Round 1
d8ac93e [emu86] Fixed #7 : segment selection & override
5b521d6 [emu86] Test against a real POST - Round 2
3c83dee [emu86] Test against a real POST - Round 1
b45a3d2 [emu86] Command line options
345513c [emu86] Fixed #6 : simplified variable size
2d7d316 [emu86] Fixed #2 + FAR call & ret
8ac48bf Import MON86 standalone project needed by EMU86
1da15c0 Bug fixes after EMU86 testing
1dc5fd3 Merge pull request #2 from mfld-fr/master
24935c0 [emu86] Final touch before the weekend
9090120 [emu86] Fixed #5 : redirect serial I/O to PTS
96dfb1a [emu86] Added memory and stack dumps
4fbcead [emu86] Fixed #1 : move reg num out of val struct
205e47d Improved EMU86 for MON86 testing
377ed40 Merge branch 'master' into emu86
fd3cf7e Added partial ZF and CF flags support
c758426 Merge pull request #1 from mfld-fr/master
72ad336 Merge branch 'master' of git://github.com/jbruchon/dev86 into emu86
2d8398b More support of 8086 instruction set
b2eadba EMU86 second draft
9a8e116 EMU86 first draft
fb3b436 Revert "fix linker alignment for .bss segment"
bf19066 Merge https://github.com/anchorz/dev86-1
4e8476e Revert "copt: fix a minor glitch in copt/rules.86"
1bcc185 Merge remote-tracking branch 'upstream/master'
b0426b2 Force output of initial segment directive
a44b267 fix linker alignment for .bss segment
c0832c8 under CYGWIN bcc requires -o option to compile an .o file otherwise it ends up as .exe and cannot link
80d485b (origin/master, origin/HEAD) Add stdint.h header to recognize some C99 types
29dbfca libc/msdos: program name missing in argv[0]
b0e9b25 libc/msdos: __mkargv es register changed
4a350d3 ar: rename of temporary libary fails on some platforms
cf72284 copt: fix a minor glitch in copt/rules.86
ce888f6 Allow copt rules with empty outputs; fix minor glitch in copt/rules.86
4ed1997 bcc/dbprintf.c: ix implicit declaration warnings
9de6f00 Make a.out.h portable to 64 bit systems
7eae1c0 Change strstr() to Jody's two-way implementation
2f53e83 Add a .gitignore file
c21e14a initial version with minimal routines
fa9c32e Add stdint.h header to recognize some C99 types
6e8432b Minor style cleanups
b7a191c Add "make distclean" and make it really clean everything
dab04fb bootblocks: long -> int32_t for proper building on 64-bit hosts
0d9ee41 bootblocks requires as86_encap to build

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-14 08:28:42 -04:00
Martin Jansa
23ea2ea679 dev86: add dependency on gperf-native
* fails to build on hosts without gperf:
  /bin/sh: gperf: command not found
  Makefile:27: recipe for target 'token2.h' failed

* normally this isn't triggered, because token[12].h
  are included in git repo, but regenerating them fails:
  tmp-glibc/work/x86_64-linux/dev86-native/0.16.21-r0/git/cpp$ touch token1.tok
  tmp-glibc/work/x86_64-linux/dev86-native/0.16.21-r0/git/cpp$ make bcc-cpp
  gperf -aptTc -N is_ctok -H hash1 token1.tok > tmp.h
  /bin/sh: gperf: command not found
  Makefile:23: recipe for target 'token1.h' failed
  make: *** [token1.h] Error 127

* unfortunately this isn't enough, because new gperf 3.1 from oe-core
  isn't compatible, we need to upgrade to different dev86 fork which
  contains:
  https://github.com/jbruchon/dev86/pull/19

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-14 08:28:42 -04:00
Martin Jansa
343665d403 ipxe: set PV
ipxe/gitrAUTOINC+18dc73d27e-r0/git$ git describe --tags
  v1.20.1-1-g18dc73d2

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-14 08:28:42 -04:00