mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-19 12:50:22 +02:00
cbad7151f1
2607 Commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
![]() |
61cec3e210 |
libvirt: update to v10.5.0 and convert to git
Rather than waiting for release tarballs for the main libvirt release, we can just use the git repository directory and avoid patch backporting for CVEs, etc. As part of this change, we adjust to git, refresh our meson build patch, and add a new meson patch for the tests. We also split out LIBVIRT_VERSION, so that nested builds can use it to locate tarballs. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7d0768c428 |
netavark: Improve the ptest output
* The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. * Skip some cases related to sit0 device(sit kernel module) and firewalld. * Add nftables to RDEPENDS for netavark-ptest as 250-bridge-nftables.bats needs it. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e15a5484e4 |
lxc: update ptest cases in black list
Released lxc-test-shutdowntest and lxc-test-state-server due to those back to normal since lxc upgraded to 6.0.0. lxc-test-no-new-privs and lxc-test-checkpoint-restore are broken test, already reported to upstream[1][2], move them to blacklist until upstream fix them. lxc-test-usernic always fails when use ptest-runner, but normal with run-ptest by manual. Ref: [1] https://github.com/lxc/lxc/issues/4296 [2] https://github.com/lxc/lxc/issues/4435 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
affb2252f4 |
yq_git: Set apply=no for SRC_URI diff
Fixed a do_patch error use git shallow tarball (BB_GIT_SHALLOW = "1"): $ bitbake yp -cpatch ERROR: do_patch: Importing patch 'github.com.pkg.diff' with striplevel '1' The github.com.pkg.diff is ud.clonedir of git://github.com/pkg/diff: * When use regular git repo as source, oe.patch.patch_path() will NOT handle it as a patch since the directory github.com.pkg.diff exists, and nothing is wrong. * When use git shallow tarball, the github.com.pkg.diff doesn't exist since it is fetched as a tarball, then oe.patch.patch_path() will handle it as a patch, then the error happens. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
93113db99c |
moby: update to v26.1.4
Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits: c1d4587d76 builder/mobyexporter: Add missing nil check daba2462f5 docs: api: image inspect: remove Container and ContainerConfig 17315a20ee vendor: github.com/containerd/containerd v1.7.18 cbd94183ab update containerd binary to v1.7.18 3115daaa91 update to go1.21.11 12072173df Update containerd to v1.7.17 92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2 a046857fbf vendor: golang.org/x/tools v0.16.0 476d9314d0 vendor: golang.org/x/mod v0.17.0 4021fa775e update docker-py to 7.1.0 0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45) 1017246d24 api: swagger: Network: add Peers fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom 5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45) 1033f561af api: swagger: POST /networks/create: inline examples per-field 0fa6816991 api/types: NetworkCreate: add GoDoc eaad6f503d don't depend on containerd platform.Parse to return a typed error fda7b48363 Fix issue where node promotion could fail dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only) 06e19ec444 Explicity write http headers on streaming endpoints c21fe3efa3 Forward DNS requests into --internal networks 9326cda7bf Do not forward DNS requests to self. 76fcf9a8e0 apparmor: Allow confined runc to kill containers 10739af81a update to go1.21.10 2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges. 40618081f1 Allow for a read-only "/proc/sys/net". 2c91196921 Update containerd to v1.7.16 c9689eccf5 vendor: update buildkit to v0.13.2 7d95fe8db5 c8d/list: Ignore unexpected image target 6667e96dad Include more details in errnotManifestOrIndex ab570ab3d6 nil dereference fix on image history Created value 7532420f3b container/SetupWorkingDirectory: Don't mutate config a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path 6c68be24a2 Windows DNS resolver forwarding 745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1 0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0 f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks f07644e17e Add netiputil.AddrPortFromNet() d3c051318f daemon/cluster/executor: Add volume `Subpath` 5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e) f51e18f58e Fix typo 57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks. 9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails cd7240f6d9 Stop macvlan with no parent from using ext-dns 17b8631545 Enable DNS proxying for ipvlan-l3 5ae5969739 vendor: github.com/containerd/containerd v1.7.15 3485cfbb1e update containerd binary to v1.7.15 fb92caf2aa ci/validate-pr: Use `::error::` command to print errors 61269e718f github/ci: Check if backport is opened against the expected branch d8b768149b Move dummy DNS server to integration/internal/network 329d403e20 update to go1.21.9 d66589496e vendor: golang.org/x/net v0.23.0 e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 cf933115b6 Minor fix for illumos support 9160b9fda6 save: Remove platform from config descriptor 0a48d26fbc Fix cases where we are wrapping a nil error c4689034fd daemon: don't call NetworkMode.IsDefault() 4eed3dcdfe api: normalize the default NetworkMode c187f95fe1 CONTRIBUTING.md: update Slack link aff003139c ci: update workflow artifacts retention 1014f481de Restore the SetKey prestart hook. fde80fe2e7 Restore the SetKey prestart hook. 14a8fac092 chore: fix mismatched function names in godoc 61e2199b78 AUTHORS,.mailmap: update with recent contributors ea72f9f72c Dockerfile: update docker CLI to v26.0.0 22726fb63b api: document changed behavior of the `Aliases` field in v1.45 3312b82515 c8d/list: Add a test case for images sharing a top layer ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs 0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve 3d2a56e7cf docs/api: add documentation for API v1.45 731a64069f c8d/list: Generate image summary concurrently dade279565 c8d/list: Add `Images` benchmark e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1 2e4ebf032a c8d/list: Pass ctx to setupLabelFilter 153de36b3f c8d/list: Add empty index test case 4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language 1c03312378 integration: Remove Parallel from TestDiskUsage f512dba037 c8d/list: Fix premature `Images` return 89dc2860ba c8d/list: Handle missing configs in label filter 6f3892dc99 c8d/list: Don't setup label filter if it's not specified fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0 4bd30829d1 Dockerfile: update docker compose to v2.25.0 971562b005 Dockerfile: update docker CLI to v26.0.0-rc2 d742659877 rootless: fix `open /etc/docker/plugins: permission denied` 4f46c44725 Dockerfile: update xx to v1.4.0 25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT 762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS 7b414f5703 daemon: move getUnprivilegedMountFlags to internal package 790c3039d0 libnet: Don't forward to upstream resolvers on internal nw 10bdc7136c builder-next: Add env-var to override runc used by buildkit 1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 f40bdf5f63 Dockerfile: update compose to v2.24.7 3f73d23ea0 Dockerfile: update buildx to v0.13.1 388ecf65bc c8d: Send push metrics to prom bb3ab1edb7 c8d: Send pull metrics to prom da245cab15 c8d: Send history metrics to prometheus 1cfd763214 c8d: Send image delete metrics to prometheus 0ce714a085 images: Export the image actions prometheus counter bcb4794eea Be more explicit about non-TLS TCP access deprecation 0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes` 03cddc62f4 api/image-inspect: Remove Container and ContainerConfig ec19fd6fed vendor: github.com/containerd/containerd v1.7.14 d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3 a6a445d86b set-up-git.md: clarify URL in git clone command 294fc9762e volume: Don't decrement refcount below 0 eef352b565 devcontainer: Use a separate devcontainer target 5a009cdd5b inte/networking: add isIPv6 flag 2f1a32e3e5 c8d/list: Skip images with non matching platform 72f1f82f28 c8d/list: Remove outdated TODO 52a80b40e2 c8d/list: Extract imageSummary function 288a14e264 c8d/list: Simplify "best" image selection b37ced2551 c8d/list: Count containers by their manifest a535a65c4b c8d/list: Combine size 582de4bc3c c8d/list: Add TestImageList a6e7e67d3a specialimage: Return optional ocispec.Index 1b108bdfeb daemon/c8d: Cache SnapshotService 74e2f23e1a daemon/c8d: Use i.images and i.content e8496b1ee4 imageService: Extract common code from `MakeImageCache` d66177591e c8d/cache: Use the same cache logic as graphdrivers bf30fee58a image/cache: Refactor backend specific code f5a5e3f203 golangci-lint: enable dupword linter 4adc40ac40 fix duplicate words (dupwords) 8921897e3b Ignore bad ndots in host resolv.conf 37545cc644 builder-next: fix missing lock in ensurelayer ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled. 49b77753cb builder-next/export: Use leaseutil for descref lease c4fc6c3371 builder-next/executor: Replace removed network.Sample 0f30791a0d vendor: github.com/moby/buildkit v0.13.0 4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams. 06628e383a remove repetitive words 21835a5696 inte/networking: rename linkLocal flag into isLinkLocal b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality 49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2 72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2 83cda67f73 go.mod: golang.org/x/sys v0.18.0 57b7ffa7f6 update to go1.21.8 cadb124ab6 daemon: overlay2: remove world writable permission from the lower file b2921509e5 api/search: Reset `is_automated` field to `false` f04f69e366 Accumulate resolv.conf options 7f69142aa0 resolv.conf comments have '#' or ';' in the first column 91d9307738 Replace uses of slices.Clone() 12dea3fa9e devcontainer: Add Golang extension automatically 9f4e824a6e vendor: github.com/miekg/dns v1.1.57 ef681124ca fix typo in error message 7ebd88d2d9 hack: block imports of vendored testify packages 4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3 a580544d82 Don't create endpoint config for MAC addr config migration ebf3f8c7fe distribution/xfer: fix pull progress message 2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1 fc0e5401f2 ci: Update `teststat` to v0.1.25 7b0ab1011c Vendor dependency cycle-free swarmkit 62b33a2604 disable pulling legacy image formats by default 5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons 84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span" 261dccc98a builder-next: Add `Info` to `emptyProvider` 2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3 b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY) e4de4dea5c ci: Make `find` for test reports more specific 9be820d8ca vendor: go.etcd.io/bbolt v1.3.9 da643c0b8a libcontainerd: change the digest used when restoring 9083c2f10d Test DNS on Windows 'nat' networks 44167988c3 c8d/windows: Temporarily skip two failing tests 2d31532a00 otel: Default metrics protocol to http/protobuf 60358bfcab ci(buildkit): dedicated step to build test image f5722da5e0 mobyexporter: Store temporary config descriptor 951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata e01a1c5d09 builder/mobyexporter: Set `image.name` response key fa467caf4d builder-next/mobyexporter: Use OptKeyName const 59ad1690f7 builder-next: Adjust to source changes b04a2dad6b builder/controller: Adjust NewWorkerOpt call bc6d88c09a cmd/dockerd: Fix overriding OTEL resource a79bb1e832 builder-next/exporter: Sync with new signature e68f71259a integration/build: Use fsutil.NewFS dd6992617e integration/build: Use new buildkit progressui 31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2 f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring 16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer` 881260148f api: omit missing Created field from ImageInspect response 432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true 6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors 913478b428 client: doRequest: make sure we return a connection-error 901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping 349abc64ed client: fix TestPingWithError 05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint c516804d6f vendor: OTEL v0.46.1 / v1.21.0 83c02f7a11 libnet/ds: remove extra space in error msg 14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress ff5f780f2b c8d/pull: Emit `Pulling fs layer` 5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe 1d473549e8 ci: Require changelog description b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3 cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent d9e082ff54 libnetwork: resolve: use structured logs for DNS error 8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable 56aeb548b2 integration/TestDaemonProxy: Remove OTEL span 38827ba290 ci: set codecov token bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry 2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage 70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0 9faf4855d5 Simplify macvlan/ipvlan integration test structure 4eb95d01bc Run the macvlan/ipvlan integration tests 7c2975d2df update to go1.21.7 903412d0fc api/history: Mention empty `Created` 443f56efb0 Set up DNS names for Windows default network b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions 5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs 999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1 ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7 6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b 10a72f2504 vendor: cloud.google.com/go/logging v1.8.1 a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d 03a17a2887 migrate image spec to github.com/moby/docker-image-spec a26c953b94 Add comment explaining network-create flow for Swarm 571af915d5 Don't enforce new validation rules for existing networks b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification 4ab11a1148 vendor: github.com/containerd/containerd v1.7.13 419f5a6372 Make 'internal' bridge networks accessible from host 475019d70a vendor: github.com/prometheus/procfs v0.12.0 63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0 beb97f7fdf Refactor 'resolv.conf' generation. 14503ccebd api/server/middleware: NewVersionMiddleware: add validation e1897cbde4 api/server/middleware:use API-consts in tests 0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs 6b01719ffb api: add MinSupportedAPIVersion const 19a04efa2f api: remove API < v1.24 8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24) ffd877f948 api: remove plain-text error-responses (api < v1.24) b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23) 83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21 d1974aa492 api: remove code for container stats on api < v1.21 ed93110e11 api: update test to reflect reality on Windows 570d5a9645 api: remove code for ContainerInspect on api v1.20 f0dd554e3c api: remove code for ContainerInspect on api < v1.20 dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20 2970b320aa api: remove code for adjusting CPU shares (api < v1.19) ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16) 7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16) 1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16) d26bdfe226 runconfig: remove fixtures for api < v1.19 f1e6958295 c8d: Use the same logic to get the present images 2c01d53d96 image/cache: Use Platform from ocispec d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) 8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 7f1b700227 Dockerfile: update RootlessKit to v2.0.1 f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1 f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0 91ea04089b image/cache: Ignore Build and Revision on Windows 2ef0b53e51 integration/save: Add tests checking OCI archive output 74d51e8553 plugins: fix panic installing from repo w/ digest e910a79e2b Remove 'VERSION' from the text 9fcea5b933 Fix broken links in project/README.md 10d6f5213a Dockerfile: update docker compose to v2.24.5 9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2 89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed" 83af50aee3 libnet: boltdb: inline getDBhandle() 4d7c11c208 libnet: boltdb: remove PersistConnection 8070a9aa66 libnet: drop TestMultipleControllersWithSameStore 82dda18898 tests: add plugin install test w/ digest dd20bf4862 libcontainerd/supervisor: fix data race 0c3b8ccda7 api: Document `version` in `/build` 2cc627932a Add internal n/w bridge to firewalld docker zone 8c64b85fb9 No inspect 'Config.MacAddress' unless configured. dae33031e0 Only restore a configured MAC addr on restart. a2026ee442 ci: update to docker/bake-action@v4 5a3c463a37 ci: update to codecov/codecov-action@v4 9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 a83557d747 ci: update to actions/cache@v3 2200c0137f libnetwork/datastore: don't parse file path d21d0884ae libnetwork: share a single datastore with drivers 835cdcac95 update containerd binary to v1.7.13 f4a93b6993 vendor: github.com/moby/buildkit v0.12.5 b20dccba5e vendor: github.com/opencontainers/runc v1.1.12 44bf407d4d update runc binary to v1.1.12 ecb217cf69 hack/make.ps1: Fix go list pattern 3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3 08251978a8 gha: update to docker/login-action@v3 5d396e0533 gha: update to docker/setup-qemu-action@v3 4a1839ef1d gha: update to docker/bake-action@v4 b7fd571b0a gha: update to docker/setup-buildx-action@v3 00a2626b56 gha: update to docker/metadata-action@v5 e27a785f43 gha: update to actions/setup-go@v5 fb53ee6ba3 gha: update to actions/github-script@v7 0ffddc6bb8 gha: update to actions/checkout@v4 987fe37ed1 d/logger/journald: quit waiting when logger closes d53b7d7e46 d/logger/journald: sync logger on close in tests 39c5c16521 d/logger/loggertest: improve TestConcurrent 5792bf7ab3 d/logger/journald: log journal-remote cmd output 982e777d49 d/logger/journald: fix data race in test harness ca40ac030c vendor: google.golang.org/grpc v1.59.0 0818a476e5 vendor: github.com/go-logr/logr v1.3.0 a0b53f6fd2 vendor: golang.org/x/net v0.18.0 2ddec74d59 Remove unused params from etchosts.Build() 5e13f54f57 c8d/save: Handle digested reference same as ID d131f00fff image/save: Fix untagged images not present in index.json 21136865ac libnet: remove arg `options` from (*Endpoint).Leave() a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp 6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd 905477c8ae logger/journald: drop errDrainDone sentinel d70fe8803c logger/journald: wait no longer than the deadline e94ec8068d logger/journald: use deadline for drain timeout 71bfffdad1 l/journald: make tests compatible with systemd 255 931568032a daemon/logger/loggertest: expand log-follow tests 388ba9a69c Dockerfile: update docker compose to v2.24.3 3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1 7f94acb6ab docs: remove dead links from api verison history 5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe 877ebbe038 image/cache: Check image platform 96ac22768a image/cache: Restrict cache candidates to locally built images c6156dc51b daemon/imageStore: Mark images built locally 537348763f image/cache: Compare all config fields bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language e245fb76de internal/sliceutil: add utilities to map values 3147a013fb libnet/ds: remove unused param `key` from List f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject 3a617e5463 c8d: Use a specific containerd namespace when userns are remapped f7e2357745 image: remove deprecated IDFromDigest 13f46948dd api/types: remove deprecated container-types 4b09bc2145 api/types: remove deprecated service-types 49637d0206 api/types: remove deprecated image-types eccb1a3eb8 api/types: remove deprecated checkpoint-types 0b1921649f api/types: remove deprecated system info types and functions 6f44138269 libnetwork: fix tiny grammar mistake on design.md 9a41cc58d9 libnetwork: fix typo in iptables.go ac2a028dcc api/types: move image options to api/types/image 80c44b4b2e daemon: rename: don't reload endpoint from datastore 250886741b volume/local: Fix cifs url containing spaces f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts df43311f3d volume/local: Break early if `addr` was specified 9f37672ca8 daemon: only add short cid to aliases for custom networks c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup 00c9785e2e fix "host-gateway-ip" label not set for builder workers 0d51cf9db8 volume/local: Make host resolution backwards compatible 05d952b246 Dockerfile: update docker compose to v2.24.2 20bd690844 integration-cli: simplify test-file creation 34668a5945 pkg/archive: fixe some unclosed file-handles in tests 1090aaaedd libnetwork: fix some unclosed file-handles in tests c482383458 fix some leaking mounts in tests 43bf65c174 pkg/system: return even richer xattr errors a3a42c459e api/types/image: move GetImageOpts to api/types/backend cd53b7380c Remove generated MAC addresses on restart. fb19f1fc20 c8d/snapshot: Create any platform if not specified 6100190e5c daemon/cluster/executer: Add missing `StartInterval` 17fd6562bf image/save: Fix layers order in OCI manifest 4979605212 image/save: Change layers type to DiffID fcc651972e daemon: return an InvalidParameter error when ep settings are wrong a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version 13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version 52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API 521123944a docs/api: remove version matrices from swagger files d54be2ee6d docs: remove documentation for deprecated API versions < v1.23 64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs a404017a86 vendor: golang.org/x/tools v0.14.0 41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0 2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0 407ad89ff0 vendor: golang.org/x/sync v0.5.0 94b4765363 pkg/platforms: internalize in daemon/containerd 0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints 058b30023f libnetwork: loosen container IPAM validation 844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath 2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString() f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported e2086b941f remove deprecated pkg/loopback (utility package for devicemapper) f07c45e4f2 daemon: remove --oom-score-adjust flag 307fe9c716 Dockerfile: update docker compose to v2.24.1 dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0 c655b7dc78 Assert temp output directory is not an empty string a8f7c5ee48 Detect IPv6 support in containers. 0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook 5bbcc41c20 volumes/subpath: Plumb context cb1af229f2 daemon/populateVolumes: Support volume subpath 349a52b279 container: Change comment into debug log 42afac91d7 internal/safepath: Add windows implementation 5841ed4e5e internal/safepath: Adapt k8s openat2 fallback 56bb143a4d internal/safepath: Import k8s safeopen function 3784316d46 internal/safepath: Handle EINTR in unix syscalls 9a0cde66ba internal/safepath: Add linux implementation bfb810445c volumes: Implement subpath mount f2e1105056 Introduce a helper that collects cleanup functions f07387466a daemon/oci: Extract side effects from withMounts 9c8752505f volume/mounts: Rename errors in defer block 5bcbedb7ee API: bump version to 1.45 35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals 7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger 5581efe7cd rename "ociimage" var to be proper camelCase 66cf6e3a7a rename "image" vars to prevent conflicts with imports c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface 768146b1b0 Fix isGitURL regular expression 585d74bad1 pkg/ioutils: Make subsequent Close attempts noop fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe? Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits: 5bab750c2 cli/command: more go1.19 ("predeclared any") e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev) 2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18 230d4d0ba vendor: github.com/containerd/containerd v1.7.17 6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2 a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5 c463d968f vendor: github.com/opencontainers/image-spec v1.1.0 0576b3dad update to go1.21.11 60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20 b600054c5 migrate to new github.com/containerd/platforms package dafe63b08 gha: update to actions/upload-artifact@v4 079107e1b [26.1] vendor: github.com/docker/docker v26.1.3 14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2 50bb59277 docs: tidy up CDI docs c4767b314 docs: fix json syntax error 258e27438 context list: temporarily add ContextType to JSON output 29cd8591e cli/command/context: list: add test for JSON output e23a63eb4 cli/command/context: test inspecting context with custom metadata 1e52a86d4 cli/command/context: add test-utility to create multiple contexts e382a5f22 plugins/hooks: Don't show empty hooks 26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d) 326c7138b OTel: implement missing MeterProvider `ForceFlush` ee359a394 OTel: add `command.time` metric to plugin commands 669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init 81b482ea5 docs: clarify that --data-path-addr doesn't restrict access e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae) c1d70d1fb update to go1.21.10 4add46d68 Add e2e tests for run w/ bad entrypoint ccea7d8a3 Fix hang when container fails to start 1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ 6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1) 840016ea0 waitExitOrRemoved: Handle context cancellation aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89) 43cb06e1a hooks: pass command execution error to plugins 9d8320de9 hooks: include full configured command 6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea) c3243a8cc ci/validate-pr: Use `::error::` command to print errors f92fcdef1 github/ci: Check if backport is opened against the expected branch 745704d7b ci: Require changelog description 762a85a10 Warn about deprecation of windows-dns-proxy flag 501175905 hooks: set expected environment when executing d6796c002 Fix OTLP env var overriding c449c1a49 plugins/hooks: run hooks when exit code != 0 287f482e3 Feature option 'windows-dns-proxy' 867061b00 plugins/templates: break on newlines when printing hooks 718203d50 cli-bin/windows: Add .exe extension 5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master) c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e 8a3a7b945 vendor: github.com/containerd/containerd v1.7.15 458580984 docs: add systempaths=unconfined security-opt 5fcbbde4b vendor: golang.org/x/net v0.23.0 4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 c7a50ebb9 vendor: golang.org/x/term v0.18.0 9a2133f2d vendor: golang.org/x/sys v0.18.0 0a5bd6c75 update to go1.21.9 cefcba987 otel: capture exit code as int64 ee1b2836a otel: capture whether process was invoked from a terminal 8f45f1495 command: include default otel error handler for the cli 910d5d024 chore: remove backticks and resolve linting issues 2a3b6c03f cli: add go:build tag to the docker telemetry efd82e1e3 Initial otel impl using our utils b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes 160f65d9d Added some telemetry utils 9a1b0f8bb CONTRIBUTING.md: update Slack link 7c722c08d feat: standardize error for prompt 7ea10d5ce refactor: prompt tests 89db01ef9 cli: add otel sdk tracing and metric providers to the core cli c5016c6d5 cli-plugins: Introduce support for hooks 509123f93 plugin: drop explicit unlink fdb48a066 vendor: github.com/docker/docker v26.0.0 542e82cae plugin: update/improve process lifecycle documentation d68cc0e8d plugin: closer-based plugin notification socket d2ea5adfe fix: flaky prompt termination on reader close test ccfd0b2cc test/ Improve test coverage in volume.go 69575f617 vendor: github.com/docker/docker 8b79278316b5 (master) b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev) f96d8e78c docs/deprecated: update status of short cid alias deprecation b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action 24186d800 ci: fix CodeQL 2.16.4 autobuild 48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0 38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev) f8fc5b6bc scripts/vendor: remove -compat=1.19 a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 115c8d56e vendor: github.com/containerd/containerd v1.7.14 939283181 builder: correct the command path for docker build dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect 3da26a5e7 docs: add description and link for --userns flag 4bb2abaa5 docs: typo fixes and other corrections 90c33dbfd deprecate legacy image formats 800a51d6c Set CGO_ENABLED=1 on riscv64 9349f58b8 docs: clarify what the --privileged flag does adb018084 Dockerfile: update to xx 1.4.0 46afd26c4 cli/command: deprecate EventHandler and InitEventHandler 5c54f75f2 cli/command/container: use ping-result for OS-version 617377c04 Describe an 'internal' network. 860b4f3a7 'docker daemon' flags refer to the default bridge 645b97352 vendor: github.com/docker/docker v26.0.0-rc2 3cf2fe0ff docs: deprecate TCP connection without TLS a8379092a vendor: github.com/docker/docker f4c696eef17d62a42 ab9d56057 bake: Add `windows/arm64` target to bin-image-cross 3b7747794 update to go1.21.8 10bf91a02 fix: cli prompt termination exit code 238d659ff Add support for --detach/-d flag in stack rm b086d7276 Add support for --detach flag in stack deploy 5e8023239 vendor: github.com/docker/docker v26.0.0-rc1 d51ba4179 docs: prefer -it over -ti a5b82e9f8 docs: fix typo in tty example abe78b79d chore: `docker help` should not show plugin vendor and version 5786f2068 plugins: fix encoding for OTEL env var passed to plugin 85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev) 79541b7e2 vendor: google.golang.org/grpc v1.59.0 096ced089 vendor: OTEL v0.46.1 / v1.21.0 f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0 1b42d04d6 vendor: github.com/go-logr/logr v1.3.0 f5a29ff8e vendor: github.com/containerd/containerd v1.7.13 2663c1057 ci: set codecov token 48a670f26 docs: fix invalid daemon.json examples f2e98f9a9 docs: regenerate markdown caf72655f docs: update url scheme for reference docs e24404494 deps: update cli-docs-tool version (v0.7.0) 20b9d489e update to go1.21.7 c514003e6 Fixed typo in bash completion functions ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID 3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package 69ed6588a Cleanup of dockerfiles, compose files and env vars 6b67b9549 Update gha runners and engines used in e2e tests edc09e603 mount: Add `volume-subpath` option 9831fea4d testenv: Add DaemonAPIVersion helper 8bae66271 cli/connhelper/commandconn: inline variables df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev) 30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version 2c214241f Avoid keeping @docker_cli_[UUID] files c986d09bc docker stack: allow '=' separator in extra_hosts 324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev) 93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261 69e0f53a0 Uniform volume prune output msg with other prune commands 809eb8cde images: print hint when invoking "docker images" with ambiguous argument b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI 1328bb338 cli/command/images: runImages: inline intermediate var b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4 1587b70ee Remove dummy circleci config cfa9fef77 tests: add plugin-socket-compatibility tests dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand 690f63e6d cli/command/container: minor cleanup in attach 53e2e54c2 Dockerfile: update docker compose to v2.24.3 1c4d6d85d scripts: don't hardcode architecture in e2e script 4fa2fe9b9 Replace deprecated types.Image* usage 68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev) 4b1ed1f44 vendor: github.com/docker/docker v25.0.1 d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag 469bfc05e tests: add tests for `cli-plugins/socket` 091af560c Dockerfile: update docker compose to v2.24.2 2402dac81 cli/command/container: remove deprecated NewStartOptions b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt a71d39bca info: remove printServerWarningsLegacy 8cd3b0042 socket: return from loop after EOF 337dd82d8 vendor: github.com/docker/docker v25.0.0 d633890f9 docs: move base command to docker.md aff4649cb docs: fix broken links to alias pages 852d198bb docs: add documentation for CDI 1f9573bb0 Add Linode docker volume plugin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
59a433c1f2 |
podman-tui: update to v1.1.0
Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits: 6bcf5993 Bump to v1.1.0 d4bee0e9 Bump github.com/containers/podman to v5.1.0 4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0 b404db37 Bump to v1.1.0-dev 35fb1650 Bump to v1.0.1 834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3 372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0 f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0 4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2 a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2 2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0 9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0 46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1 775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1 ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2 c3440609 Bump to v1.1.0-dev 47c47d46 Bump to v1.0.0 45253e1e Bump github.com/docker/docker f39102a5 podman v5 b5297884 Bump to v0.19.0-dev 64ea1b82 Bump to v0.18.0 bee2b067 README.md update 445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 ff1f99ca install.md update - ArchLinux (AUR) 52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux 34bd6420 golangci-lint update 1.56.2 2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4 aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0 7c81b05b Vagrantfile update (fedora 39) feafd1a9 ghaction update 26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 b793ec2c Bump codecov/codecov-action from 3 to 4 61b81c38 unit test 31fa7523 unit tests 0ec32f51 resolves #438 Substitute env variables in config file 8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1 b3cfedb2 README update 341f1b2c unit test coverage 75c926a5 podman-tui installation via homebrew for Mac 6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3 6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0 b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1 1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0 20985d53 Bump to v0.18.0-dev b4350927 Bump to v0.17.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c3c9c8a01f |
podman: update to 5.1.1
Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits: 7a1f39dc4d Bump to v5.1.2-dev bda6eb03dc Bump to v5.1.1 cd0a0d7d6d Update release notes for v5.1.1 aa031ad1ba libpod: do not leak systemd hc startup unit timer d79b94c82b Check AppleHypervisor before accessing it a9377a8ec3 [v5.1] Bump c/common to v0.59.1 4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly d5cc37f78a test/e2e: use local skopeo not image 2906582149 [v5.1] Mac PM test: Require pre-installed rosetta 7ad138c3db Fix typo in release notes 515e44be74 Bump to v5.1.1-dev 4e9486dbc6 Bump to v5.1.0 2f343ce778 Release notes for v5.1 8ba3626c94 Add configuration for podmansh 8eff425410 [v5.1] Bump c/* for vendor dance 178600e531 test/e2e: fix new error message 7df3715430 Add Hyper-V option in windows installer 6ad6132987 Only stop chowning volumes once they're not empty 65d26b0cde remote API: restore v4 payload in container inspect 3949bf8af1 Fix windows action trigger acf137b342 Update podman network docs 7207461196 Add Rosetta support for Apple Silicon mac d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode c837ebc44e vendor latest c/common main 97251d0ee6 Bump to v5.1.0-dev 6a8f2e7f29 Bump to v5.1.0-rc1 bd4e4a1d8f Add release notes for v5.1.0 (preliminary) c46884aa93 `podman events`: check for an error after we finish reading events 277312d282 Fix updating connection when SSH port conflict happens 2a609b0f74 rootless: fix reexec to use /proc/self/exe d4e40fedaf ExitWithError() - enforce required exit status & stderr 82f9811a8d ExitWithError() - a few that I missed 44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds 92338642d1 Revert "Temporarily disable rootless debian e2e testing" 5901bf52b9 CI tests: enforce TMPDIR on tmpfs 6e655c7fd2 use new CI images with tmpfs /tmp e771618531 run e2e test on tmpfs 3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0 6830d0e3c8 Address CVE-2024-3727 07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions 755fc021f9 ExitWithError() - rmi_test 5e240ab1f5 ExitWithError() - more r files 0c22de7811 ExitWithError() - s files 03f036b515 ExitWithError() - more run_xxx tests 3b1c735b67 Fix podman-remote support for `podman farm build` 71473976ac [CI:DOCS] Trigger windows installer action properly 8433a01aa2 Revert "container stop: kill conmon" 3fa8e98a31 Ensure that containers do not get stuck in stopping 279e2d0cb2 [CI:DOCS] Improvements to make validatepr 9e43e586c9 ExitWithError() - rest of the p files dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1 a2cf948f90 Graceful shutdown during podman kube down 521bbab864 test/system: fix broken "podman volume globs" test 6d1098f823 Quadlet/Container: Add GroupAdd option 7bfac4f349 Don't panic if a runtime was configured without paths d4c7ca39fd update c/{buildah,common,image,storage} to latest main 6bdebea8ae update golangci-lint to 1.58 ee5153c545 machine: Add LibKrun provider detection 641cd7c5a2 ExitWithError() - continue tightening b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1 303d0b398e test: improve test for powercap presence 9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10 be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0 36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora 42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842 e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml` 7d12ae0973 ExitWithError() - play_kube_test.go 02b8fd7156 Temporarily disable rootless debian e2e testing 7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0 b520e909e0 CI Docs: Clarify passthrough_envars() comments 87747ca820 Skip machine tests if they don't need to be run e8ef36e26e Update CI VMs to F40, F39, D13 83ee16b9ba ExitWithError() - v files 22eff26916 Update module golang.org/x/term to v0.20.0 431cbffab6 machine: Add provider detection API 419efb9eb5 util: specify a not empty pause dir for root too 1d1dba3843 Add missing option 'healthy' to output of `podman run --help` b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md 4fd84190b8 Add a random suffix to healthcheck unit names 7a43c2ed1b test/e2e: remove toolbox image 46f247d880 Also substitute $HOME in runlabel with user's homedir 7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5 275c068df7 ExitWithError() - pod_xxx tests c378f2d03a ExitWithError() -- run_test.go f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4 61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible 8942e2dbda GHA: Attempt fix exceeded a secondary rate limit 1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools a140c74ba4 Fix machine volumes with long path and paths with dashes d1f8933a93 Update module google.golang.org/protobuf to v1.34.0 d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0 c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1 88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak 0faded53b8 test/e2e: do not leak /tmp/private_file 88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs 60b5488308 Update dependency pytest to v8.1.2 cd6ff71cc3 Remove unncessary lines at the end of specfile summary e412eff33f Clean machine pull cache d2c1de5993 Add krun support to podman machine ca23774b5b Use custom image for make validatepr 9a0ed6929a test/e2e: force systemd cgroup manager d1bfdc7900 e2e and bindings tests: fix $PATH setup 5040c6e390 Makefile: remove useless HACK variable in e2e test 537c21a49a test/e2e: fix volumes and suid/dev/exec options 31034a1b6f test/e2e: volumes and suid/dev/exec options works remote cc6e999f2a test/e2e: fix limits test c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0 3c1c6a44ef Correct option name `ip` -> `ip6` 30e2c923d6 Add the ability to automount images as volumes via play 693ae0ebc6 Add support for image volume subpaths 5f57571d65 Bump Buildah to latest main e8a9c58125 Update Makefile to Go 1.22 for in-container e4c9910aec ExitWithError() - yet more low-hanging fruit 80c3a22440 ExitWithError() - more low-hanging fruit 4da5c5d3aa ExitWithError() - low-hanging fruit c681df35c0 chore: fix function names in comment 3f78c39c50 Remove redundant Prerequisite before build section fa1fd1646e Remove PKG_CONFIG_PATH 3b28cdfb20 Add installation instructions for openSUSE 83dbbc3a51 Replace golang.org/x/exp/slices with slices from std c04d03ef8c Update to go 1.21 c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible c22eefb939 [CI:DOCS] Fix artifact action 333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals ac04cb4ac5 e2e tests: stop littering 27174ff3fb [CI:DOCS] format podman-pull example as code e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions 2681ab23d1 libpod: getHealthCheckLog() remove unessesary check 2ae6d0d4dd add containers.conf healthcheck_events support 33def2eea7 vendor latest c/common b026e1d635 libpod: make healthcheck events more efficient ce9054ff45 libpod: wrap store setup error message e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs e58972cd1d pkg/systemd: use fileutils.(Le|E)xists acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists 94c699192f pkg/util: use fileutils.(Le|E)xists 0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists 1991990d5a pkg/specgen: use fileutils.(Le|E)xists aab06ac445 pkg/rootless: use fileutils.(Le|E)xists af24326133 pkg/machine: use fileutils.(Le|E)xists cbffddc72e pkg/domain: use fileutils.(Le|E)xists bd00c6fef9 pkg/api: use fileutils.(Le|E)xists 5656ad40b1 libpod: use fileutils.(Le|E)xists 90304dd507 cmd: use fileutils.(Le|E)xists 598fc516a6 vendor: update containers/{buildah,common,image,storage} a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security] dc68a47d7a fix podman-pod-restart.1.md typo eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0 422eb0e58a Add more annnotation information to podman kupe play man page b1736c472a test/compose: remove compose v1 code 2c61ee9a31 CI: remove compose v1 tests 713c026b4d [CI:DOCS] Fix windows installer action d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2 7b3456b5d9 add `list` as an alias to list networks 482ef7bfcf Add support for updating restart policy ddea30e40e Add Compat API for Update be3f075402 Make `podman update` changes persistent 7ef0290a1d Emergency fix (well, skip) for failing bud tests 7c4f2c79ea fix swagger doc for manifest create d4ecae59bd [CI:DOCS] options/network: fix markdown lists 714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target 3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security] 0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0 1600cfffa5 Fix some comments e8055904e1 swagger fix infinitive recursion on some types 5e9725983d install swagger from source f95b9d4e37 Revert "Swap out javascript engine" 5e68fbd132 podman exec CID without command should exit 125 df69b36ee5 (minor) prefetch systemd image before use 49729c82a9 Update go-swagger version 1b6e8d73aa Swap out javascript engine 3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible 08a49389c8 Add os, arch, and ismanifest to libpod image list e773ed42b3 [CI:DOCS]Initial PR validation 4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71 67c6d7ec80 vendor ginkgo 2.17.1 into test/tools 999d6c0750 fix "concurrent map writes" in network ls compat endpoint 26f866b5df chore(deps): update dependency pytest to v8 2d9159821a e2e: redefine ExitWithError() to require exit code 8de92ec912 docs: fix missleading run/create --expose description 0bedf7f1d2 podman ps: show exposed ports under PORTS as well aee1e1408d rootless: drop function ReadMappingsProc 9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3 0313693d48 New CI VMs, to give us pasta 2024-04-05 394820c4f0 Add big warning to GHA workflow 7f0268a2e7 GHA: Fix intermittent workflow error 266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0 847ca1f9ea e2e tests: remove requirement for fuse-overlayfs 36e4d512b3 docs: update Quadlet volume Options desc b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0 0b36126e92 Fix relabeling failures with Z/z volumes on Mac f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0 b9a8a2c61c Makefile: fix annoying errors in docs generation 59ee130048 chore: fix function names in comment a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1 3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0 3560ccd5df Detect unhandled reboots and require user intervention fcf9327773 podman --runroot: remove 50 char length restriction 10995192f8 update github.com/rootless-containers/rootlesskit to v2 156ae500f2 Update module github.com/gorilla/schema to v1.3.0 beb4fd1b4a Update dependency requests-mock to ~=1.12.1 e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1 f2c365c6f6 rm --force work for more than one arg 71f6f50ee1 [CI:DOCS] Update kube docs 81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3 0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2 ff133a544d Windows: clean up temporary perl install 498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors 549dbf8327 [CI:DOCS] build deps: make-validate needs docs a61ae8c0a9 test/system: add rootless-netns test for setup errors ce04fbc16a vendor latest c/common main 519a66c6a9 container: do not chown to dest target with U fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags d27313ad10 systests: conditionalize slirp4netns tests e697631af9 CI: systests: instrument flaky tests d2143fac59 s3fs docs 7d68362cf5 test: do not skip tests under rootless d3927f9076 Add note about host networking to Kube PublishPort option 1a99d87746 Inject additional build tags from the environment d81319eb71 libpod: use original IDs if idmap is provided f3434298df Switch back to checking out the same branch the action script runs in f7b9168649 docs/podman-login: Give an example of writing the persistent path aab4674feb CI: Bump VMs to 2024-03-28 4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0 fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7 ffb8b2dc36 Fix reference to deprecated types.Info c0e32e93c0 Use logformatter for podman_machine_windows_task d305e70af8 applehv: Print vfkit logs in --log-level debug 23bf357fc3 [CI:DOCS]Add Mario to reviewers list c8e1e0034a [CI:DOCS] Document CI-maintenance job addition 48b8d7f8be Add golang 1.21 update warning b56331cd2f Add rootless network command to `podman info` 80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD c62c74970f hyperv: error if not admin 83671f95d8 Properly parse stderr when updating container status 492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream 11415b3e74 Use built-in ssh impl for all non-pty operations 83fe867c14 Add support for annotations a6ffb5656f hyperv: fix machine rm -r f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job 3c611c47e4 5.0 release note fix typo in cgroupv1 env var 3a9968ef81 fix remote build isolation on client side 17aa152459 chore: remove repetitive words b2d0b92db2 Dont save remote context in temp file but stream and extract 493179be45 fix remote build isolation when server runs as root 4740367330 util: use private propagation with bind 9a13b8f17d util: add some tests for ProcessOptions 50d764b0e6 util: refactor ProcessOptions into an internal function 49ab250cf9 util: rename files to snake case c03256e23c Add LoongArch support for libpod f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c 5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1 5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] 77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0 c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0 a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4 b1fd03f9f5 Fix type-o 3f2b8bb314 Use correct extension in suite aa5c4879b4 minikube: instrument tests, to allow debugging failures 15b8bb72a8 libpod: restart always reconfigure the netns dc1795b4b2 use new c/common pasta2 setup logic to fix dns 2566ee2f38 utils: drop conversion float->string->float 816c7279e1 utils: do not generate duplicate range f16ab115ed logformatter: handle Windows logs 0e38815387 utils: add test for the new function cda3dc83d8 utils: move rootless code to a new function 079bfb085a CVE-2024-1753 fix for main 1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst 23433ec7bd test/system: Add support for multipath routes in pasta networking tests 73a12b0c07 [skip-ci] rpm: use macro supported vendoring 7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images 7711833827 Makefile: add target `podman-remote-static` fdad9ab1ff Switch to 5.x WSL machine os stream using new automation 3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context ee4b1efb24 bump main to 5.1.0-dev 3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote e82d196269 pkg/machine: make checkExclusiveActiveVM race free b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM() c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting 1dfd3d3d12 pkg/machine: refresh config after we hold lock d5e0ecc619 Update dependency setuptools to ~=69.2.0 60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+ 2ff5716b7e fix invalid HTTP header values when hijacking a connection c6ae7fd145 Add doc to build podman on windows without MSYS 1901403eda Removing CRI-O related annotations 83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 d7fa0aa351 Pass the restart policy to the individual containers cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ea2a7de432 |
containerd: update to 2.0.0-rc.3
Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits: 531da9960 Reduce scope of permissions in stale workflow ed64e6503 core/mount: remove logrus import ea8265fb1 core/transfer/local: remove logrus import 75fd7a5a7 pkg/shim: remove logrus imports 38e2f0038 Adds a mutex to protect fallback host 587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus 4203e2de8 pkg/tracing/plugin: rename var that collided with import e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates 5b8dfbd11 Allow proxy plugins to have capabilities cc2cedae0 Revert "install-runc: pin Go to 1.21" 3c097352a update runc binary to v1.1.13 8c13ed1b8 Prepare v2.0.0-rc.3 release 86b8a8824 Remove pkg/seed 09d3e20d3 Allow running test in usernamespace 8bcffa944 KEP-3619: Fine grained SupplementalGroups control 87dd4309d vendor: github.com/containerd/platforms v0.2.1 939135ae3 CI: golangci-lint v1.59.1 df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service 686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl 156458e54 build(deps): bump the golang-x group with 2 updates 08c1e12e9 CI: add back EL 8 149ca6880 Update hcsshim tag to 0.12.4 b1a23c495 Fail integration test early when a plugin load fails d23c4b8b5 Use unix and windows specific connection error checks 02b6c6939 Allow fallback across default ports 80ce8bd61 build(deps): bump github.com/containerd/containerd/api cde2527fc ctr: pull: Do not ignore labels when transfer service is used 1c123efb4 Update Go version to 1.22.4 e1e793e4a Update rockylinux vagrant build 5611fdd4a Transfer: Push: Enable to specify platforms 0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs 4123170a3 *: export RemoveVolatileOption for CRI image volumes 3e71ccafc Add type alias for event Envelope da1d9672f Enable imgcrypt in cri pull 9857afda4 Add vendor for github.com/containerd/imgcrypt 359d84351 Update api minimum go version to 1.21 2d73340c2 Explicitly set release latest to false ca59fb0b4 Cleanup shim manager configuration 9831a62d7 auth: add span to FetchToken helpers 58be88189 sandbox: do retry for wait to remote sandbox controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c138943fed |
podman-compose: switch to main branch
The upstream project has made the "interesting" decision to delete the stable branch and move to "main" for recent releases. So rather than being able to simply switch for our updates, we have to switch to main on all releases that had podman-compose recipes using the stable branch. Luckily, the commit hashes haven't changed, so we only have to modify the branch in the SRC_URI. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e96da98e40 |
rootlesskit: introduce linux-native fakeroo using user namespaces
see: https://github.com/rootless-containers/rootlesskit --------- RootlessKit: Linux-native fakeroot using user namespaces RootlessKit is a Linux-native implementation of 'fake root' using user_namespaces(7). The purpose of RootlessKit is to run Docker and Kubernetes as an unprivileged user (known as 'Rootless mode'), so as to protect the real root on the host from potential container-breakout attacks. --------- This is a building block for cross installation of containers and rootless on-target execution. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
aaad95b191 |
scripts: adjust to syhead go source location
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
179ed82251 |
networking: introduce passt / pasta
Introducing the pasta package as an alternative for non-priviledged container networking: https://passt.top/passt/about/ passt: Plug A Simple Socket Transport passt implements a translation layer between a Layer-2 network interface and native Layer-4 sockets (TCP, UDP, ICMP/ICMPv6 echo) on a host. It doesn't require any capabilities or privileges, and it can be used as a simple replacement for Slirp. pasta: Pack A Subtle Tap Abstraction pasta (same binary as passt, different command) offers equivalent functionality, for network namespaces: traffic is forwarded using a tap interface inside the namespace, without the need to create further interfaces on the host, hence not requiring any capabilities or privileges. It also implements a tap bypass path for local connections: packets with a local destination address are moved directly between Layer-4 sockets, avoiding Layer-2 translations, using the splice(2) and recvmmsg(2)/sendmmsg(2) system calls for TCP and UDP, respectively. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e8214becb9 |
podman: Use slirp4netns instead of pasta
podman uses pasta as the default rootless network command since 5.0.0, but only slirp4netns is available when building for Yocto. This commit adds a containers.conf file setting slirp4netns as default rootless command if 'rootless' is set in PACKAGECONFIG Signed-off-by: Marcus Flyckt <mafl@kvaser.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
6ab94f2c68 |
libvirt: convert more WORKDIR references to UNPACKDIR
unpacked source files are now in UNPACKDIR, so we adjust our operations to match. Some references were missed in previous commit as they are behind conditional. Use BP subdir for python, to build it inside ${S}. Need cd - to go back to $${B} so that gnutls-helper.py is executed there instead of python subdirectory. Use mix of tabs and spaces for indentation like other lines around :). Signed-off-by: Hieu Van Nguyen <hieu2.nguyen@lge.com> Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
79a282078f |
xen: fix arm64 build with gcc14
gcc14 isn't properly tracking if the irq array index is greater than zero, and hence generates a warning that chains to a build error. This is a temporary patch to ensure that the variable is greater than zero and hence keeps the warning from happening. If it was less than zero, a different way of dealing with it "officially" would be better, but we lack the insight to know what to do in this case (plus, it really isn't less than zero as it has never caused an issue before) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
acb0653af0 |
conf: update xen preferred version
The xen preferred version fails to match when we add -stable dot releases. We move the wildcard back in the preferred version to pick them up. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
fd55e2a13b |
xen: update to 4.18-tip
Bumping xen to version RELEASE-4.18.2-19-g01f7a3c792, which comprises the following commits: 01f7a3c792 update Xen version to 4.18.3-pre 7cdb1fa2ab x86/mtrr: avoid system wide rendezvous when setting AP MTRRs f3d20dd317 tools/xentop: Fix cpu% sort order dfabab2cd9 x86: respect mapcache_domain_init() failing 3999b675ca xen/sched: set all sched_resource data inside locked region for new cpu 8271f0e8f2 libxl: Fix handling XenStore errors in device creation 9966e54131 libxl: fix population of the online vCPU bitmap for PVH a42c83b202 x86/ucode: Distinguish "ucode already up to date" 0673eae8e5 x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake 2bc52041ca tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC a4c5bbb9db VT-d: correct ATS checking for root complex integrated devices 47cf06c09a xen/x86: Fix Syntax warning in gen-cpuid.py 026542c857 xen/xsm: Wire up get_dom0_console f0ff1d9cb9 x86/spec: adjust logic that elides lfence 0b0c7dca70 x86/spec: fix reporting of BHB clearing usage from guest entry points eb7059767c x86/MTRR: correct inadvertently inverted WC check af0e9ba44a x86/rtc: Avoid UIP flag being set for longer than expected 8bdcb0b98b altcall: fix __alt_call_maybe_initdata so it's safe for livepatch 2d38302c33 x86/entry: Fix build with older toolchains d152a04246 Update CHANGELOG.md with 4.18.2 line b2863e468e Update Xen version to 4.18.2 40f2c69ad8 x86/spec-ctrl: Support the "long" BHB loop sequence 9be85b14aa x86/spec-ctrl: Wire up the Native-BHI software sequences 72a357f4fa x86/spec-ctrl: Software BHB-clearing sequences 73a4229807 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI 2be76f2018 x86/tsx: Expose RTM_ALWAYS_ABORT to guests 62844c4415 x86: Drop INDIRECT_JMP 9fd732d18d x86: Use indirect calls in reset-stack infrastructure 40a6795480 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields fb12e8d8f7 x86/vmx: Add support for virtualize SPEC_CTRL a6cefb2686 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_* ccc6603b79 x86/spec-ctrl: Simplify DO_COND_IBPB 5b28a4af1f x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR} 9bc337497c x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV e382cddcc2 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_* 57e5cab3de x86/spec-ctrl: Rename spec_ctrl_flags to scf 32cdecf1c3 x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests a482be9211 x86/alternatives: fix .init section reference in _apply_alternatives() 855e261337 x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch 125b1a7808 x86/spec-ctrl: Move __read_mostly data into __ro_after_init 594dd0920f VMX: tertiary execution control infrastructure 4c2208d06c x86/CPU: convert vendor hook invocations to altcall 8a8c626281 x86/guest: finish conversion to altcall b6fad02a54 x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking() 0f6696a780 x86/spec-ctrl: Expose BHI_CTRL to guests a546399829 x86/spec-ctrl: Expose RRSBA_CTRL to guests fa7f2f9a86 x86/spec-ctrl: Expose IPRED_CTRL to guests 1fe30f552a IRQ: generalize [gs]et_irq_regs() f7bd03b608 x86/MCE: switch some callback invocations to altcall 9fdbcd84d3 x86/MCE: separate BSP-only initialization b06cf0701a x86/PV: avoid indirect call for I/O emulation quirk hook a2922d8097 x86/MTRR: avoid several indirect calls 5c5d4eeee4 core-parking: use alternative_call() ba951c5f29 x86/HPET: avoid an indirect call a44c2c9f89 cpufreq: finish conversion to altcall 6b8ee35088 x86/APIC: finish genapic conversion to altcall 6d4055b9a5 x86/spec-ctrl: Fix BTC/SRSO mitigations 1166467ed3 hypercall_xlat_continuation: Replace BUG_ON with domain_crash 429a125dba x86/HVM: clear upper halves of GPRs upon entry from 32-bit code 17cf285d87 tests/resource: Fix HVM guest in !SHADOW builds 5c4aacab17 x86/boot: Support the watchdog on newer AMD systems a790c670bb x86/boot: Improve the boot watchdog determination of stuck cpus d0173bbed1 x86/livepatch: Relax permissions on rodata too 4fc27254de xen/virtual-region: Include rodata pointers 8c13f6c565 xen/virtual-region: Rename the start/end fields b576e09b66 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies 03cc579ae3 x86/cpu-policy: Hide x2APIC from PV guests 0a8b92d0a4 tools/oxenstored: Make Quota.t pure 3f3158fc32 tools/oxenstored: Use Map instead of Hashtbl for quotas c9ea3b49a5 x86/PoD: tie together P2M update and increment of entry count cb7b84d3d5 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly 62d9ca19f9 x86/mm: use block_lock_speculation() in _mm_write_lock() 3d67ba0371 update Xen version to 4.18.2-pre ea82c8cdbf update Xen version to 4.18.1 4da8ca9cb9 x86: protect conditional lock taking from speculative execution Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
6bbe7c3205 |
hyperstart: remove recipe
hyperstart is in read-only mode, so we drop it from the layer. A replacement will be provided in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
1b3dfd8ef2 |
runv: drop recipe
runv is no longer used, kata containers is the suggested VM backed container interface. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
bb82580ed3 |
runv: use destsuffix for clone
To ensure that the go code can be unpacked and the license file found, we add destsuffix to the SRC_URI. We still have a gcc14 build issue, but this at least gets us to that issue. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
f487ea4aa0 |
lxc: update to v6.0.0
Bumping lxc to version v6.0.0, which comprises the following commits: 3dee5fb88 Release LXC 6.0.0 17ac6f691 lxc.spec: Align SPDX license id 5fe2de84c Makefile: Align SPDX license id 97f93be72 meson: Align SPDX license id d4cd3741d COPYING: Clarify licensing of files without SPDX 8e67eb07c doc: Add SPDX headers and remove Author field cb94edf53 src/include: Add SPDX headers 7bc33ef6e src/tests: Add SPDX headers 007642c89 hooks: Add SPDX headers 1e9e66be3 lxc.spec: Clear default changelog 202d649d1 lxc.spec: Use SPDX 85abd4026 template: Use SPDX a074b3d27 config/yum: Use SPDX header 7ed43e5e9 COPYING: Remove whitespace 522721216 MAINTAINERS: Remove Dwight from the maintainer list 08bf8b9e2 lxc-checkconfig: Fix shellcheck 0f18db543 lxc-checkconfig: Show namespace limits f71b8e3f8 lxc-ls: list names with whitespaces in `--active`. 816b8973d lxc/tools: set default log_priority to ERROR 989ea3969 tools/lxc_autostart: don't fail when there are no containers dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep 630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot 796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.* dcc4fb929 tests/parse_config_file: fix some typos 6fea67429 tests/parse_config_file: add tests for lxc.time.offset.* ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow 4464cee19 lxccontainer: rework copy_file() 9d1aa932d lxccontainer: improve mod_rdep() 81c1bbf45 Revert "lxccontainer: fixes" 82fe01821 src/lxc/syscall_numbers.h: drop define -1 590a95d83 rexec: Avoid invalid free in rexec failure path f9978b179 README: Correct 'armvl7' to 'armv7l' 046b63cd2 unshare: simplify lookup_name 7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare e88883445 lxc-net: Enable IPv6 by default d78ca00bc tests/meson: attempt to fix ossfuzz builds d18f993b3 github: master -> main 86799f554 meson: link with liblxc dynamically everywhere if possible b90fecfda network: use IN_LIBLXC 9eee450d2 storage_utils: move get_fssize to utils 6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type 42eeffcb0 confile: unhide lxc_config_parse_arch() helper 9bb318881 conf: reorganize/split code to utils.c 863c59dc3 conf: reorganize/split code to idmap_utils.c b7591ad49 confile: unhide lxc_config_define*() helpers f14656ebf meson: introduce IN_LIBLXC preprocessor macro 672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach 8f9733d75 tests: remove old and broken cgroup handling code from tests d51ea224e config: apparmor: add AppArmor profile for lxc-copy 627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl df0665b6d oci: resolve cross-filesystem blob caching failure ec85e5ca4 lxc-test-usernic: drop cgroup handling 27ec0b0f6 test-usernic: don't use ifconfig 44e845b3c Add x32 to the list of recognized architectures 07e3a516e lxc-download, lxc-local: preserve xattrs on unpack 9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases 64341ce7b tree-wide: use container_uses_namespace() helper 6b40e66c1 Fix error message. c8189ee2a Add verbose output in download template. 84cc3155a Align columns in lxc-download.in template 872db5424 build: add more options for customizing install df17ac417 Add loongarch64 support 112d5615e build(deps): bump actions/upload-artifact from 3 to 4 789457f1a config: try to create workdir if not exist 86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree f885a3c56 lxc-local: Re-organize code to use more functions 7c025072e lxc-local: Improve usage info faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear d65fe1b27 Disable IPv6 link-local addresses for bridged veth 8cff8fa1a don't try to delete vlan 0 from veth 0e932812a conf: fix ephemeral copies abffab441 config/init: Drop upstart files 79a4a3cf8 doc: remove the warning mentionning upstart 7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling fb73c18d2 meson: Remove support for upstart cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared a87d6fcc9 lxc/checkconfig: use multiline `echo` f3e01fa80 lxc/checkconfig: replace `echo -n` by printf ba4f810bc lxc/checkconfig: minor cosmetic change d52c345c8 lxc/checkconfig: avoid subshell (SC2235) f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234) 74b9faa64 lxc/checkconfig: check exit code directly (SC2181) 5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236) a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck 8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n` cb2574319 lxc/checkconfig: replace `type` by `command` 003efe6db lxc/checkconfig: replace `cat | grep` with `grep` adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval c02367e59 containers in the FREEZING state also need to be unfreeze aca53bcf7 build(deps): bump actions/checkout from 3 to 4 84169158f lxccontainer.h: Move new fields to the end e2696df93 Remove references to LXD 7cec54455 Update console perms to 0600 3f45443fd Fix start api call to split quoted strings in execute or init command. fbc31691e github: Update for main branch 69e51b919 CONTRIBUTING: add a note on AI generated code 84cfe9772 get_hierarchy: dont WARN about no usable controller 64167f906 Add libarchive tar support for lxc download 213e2f68d github: Add DCO/target tests cf2b20209 explicitly convert *mainloop_handler to __u64 8575ffeb7 tests: fix parse_config_file seccomp test ca25f3bf6 src/tests: Fix container creation errors 539c39772 rename functions which clash with libsystemd's b670f0e75 commands: support timeout in LXC_CMD_GET_STATE 0fed82b26 lxccontainer: extend lxccontainer API with set_timeout 7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI 715fb4eff terminal: make a terminal FDs non-blocking 7eff16cc4 file_utils: add fd_make_nonblocking helper 747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr() f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe 890de0759 lsm: apparmor: allow to change mount propagation 5894cf310 console-log test: make sure container is stopped before restarting 820d2a2b3 switch from libsystemd's dbus to dbus-1 3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC 4ea0b361f Allow fuse mounts in apparmor start-container. 1a2da75b6 Add support for squashfs images in oci via atomfs db3cbfa75 apparmor: don't try to mmap empty files 304bf58fa initutils: use PRIu64 for uint64_t in setproctitle 4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT 311bb8c53 Fix strlcat's return value checks 588b53b19 Fix typo: bev_type -> bdev_type 7914c259f drop broken lxc-test-fuzzers 849d80877 Fix build error on sparc64 caused by using the gold linker 43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts 4fa83282b lxc_user_nic: fix get_mtu() error handling 1b0469530 Patching an incoming CVE (CVE-2022-47952) a8e1070c6 build: force linking against liblxc c27ea96f7 checkconfig: Fix filesystem capability check 3f361da61 checkconfig: Tweak cgroup handling 3ab04999d checkconfig: Tweak layout e027ca711 checkconfig: Hide version if no lxc-start 914fec51b checkconfig: Fix mixed tabs/spaces 70b176b0d src/lxc/meson.build: fix build without apparmor 42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups 0072919dd state: additional check in lxc_wait to prevent OOB 62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope 93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation f8aa61f97 network: always initialize struct nl_handler 6ea4a6c06 apparmor: properly check lxc_strmmap ret value b37cce95b github: fix coverity (add libpam-dev) a8dcf88d0 github: fix coverity build 7e7393413 conf: ensure mount tunnel is a dependent mount 01ae6d471 apparmor: allow shared mounts in start-container.in 81d94a4ee conf: create separate peer group for container's root 68020412c cgroups: only allocate user namespace if we have to 27f69d45b cgroups: use userns_exec_full() during cgroup removal 1029c2a06 README: remove lgtm dcf85308c meson.build: strip newline for variable assignments 8aac58866 meson.build: strip newlines from git output 16c6ff226 tests: lxc-test-reboot: Fix build on ia64 64eb31d02 src/lxc/meson.build: fix the static library path c6c705bfa build: drop build-time systemd dependency f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols 5aff4ea37 build: only build init.lxc.static if libcap is statically linkable c1f87c811 build: fix handling of dependancies to fix build on openSUSE bc318926d cgroups: fix -Waddress warning 4deaa28c0 Unroll IN_SET since the max usage is 2 elements check 73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup 8480c56a4 tools: lxc-destroy: update help message for --force 3cac3fce4 build: add libsystemd to oss fuzz dependencies f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status 4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed 09233897b Update README.md 4a66dabf8 conf: allow cross-device links dc4f1220f build(deps): bump actions/checkout from 2 to 3 2b802090f Update cifuzz.yml 20cc78456 fix error message when use tools with -? option b0abedf60 use sd_bus_call_method_async to replace the asyncv one 589a930f1 tree-wide: split open helpers into open_utils.h 7b1836bce build: prevent the inclusion of linux/mount.h with a hack da8c29853 mount_utils: remove conf.h include 74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h 68cf56489 tree-wide: minimize liburing.h inclusion 06f99c259 meson: fix docbook2x detection 133aa416c tree-wide: use struct open_how directly 63468abd3 tree-wide: use struct clone_args directly 4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion 16ebb29dc meson.build: allow explicit distrosysconfdir cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h ef1e0607b build: detect sys/pidfd.h availability c1115e150 build: detect where struct mount_attr is declared e452c8945 gitignore: Simplify 32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to 7f6643071 README: update security mails 5e704fe38 meson.build: fix build without stack-protector 7d7235489 meson.build: fix build with -Dcapabilities=false 8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P 353f0f992 meson: add remaining still-in-use config checks 3d360cf9d Store mount options in correct variable df3301046 Fix off-by-one error constructing mount options 8ee615c27 add check for statvfs 07a00b78f start: fix namespace sharing eae44ce19 conf: fix append_ttyname() 6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup 7317d2a8a start: don't overwrite file descriptors during namespace preservation fc133a9f3 conf: log file descriptors on error during idmapped mount setup 26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32 c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2 b203e1a14 Fix uninitialized read in parse_cap when libcap is not used e73520adf meson: Set DEVEL flag post release f4d02217e tools: Provide multicall lxc binary 289d6413e meson: Generate compile commands by iterating over an array 132ff8e28 lxccontainer: rework copy_file() f357cb290 lxccontainer: improve mod_rdep() b576a47d5 Read list until process exits We also: - drop two patches that were backported - refresh the context of one Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3373478346 |
containerd: update to v2.0.0-rc.2
Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits: 446e63579 remove uses of platforms.Platform alias 22f2af40c update pause image to 3.10 65024e6fd core/image: fix usage of "unknown" platform 8b3060717 Provide runtime options in plugin info 332caf1a1 Provide ability to set lo up without CNI 288f0592e Prepare release notes for v2.0.0-rc.2 f24a95185 build(deps): bump github.com/prometheus/client_golang 8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6 96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 1cae3dc9b update ttrpc to 1.2.4 e2251f948 Update instrumentation fuzzer with new flag ef76a90e9 Update platforms package to v0.2.0 0b113d78d doc: add the description of sandboxer and io_type 7cead8800 cri: restart created container with correct io type 42f778fc1 modify streaming io url form 25c2f690a Update toolchain to Go 1.22.3 681a083fa Update unpacker to always fetch all 2788604e4 Update ctr image pull all platforms 58be88189 sandbox: do retry for wait to remote sandbox controller 059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts 9a9a8c46a Don't require vagrant tests in merge queues d9dc2811a fix: delete sockets on shim exit 41dc94ee1 CI: bump up golangci-lint to v1.58.0 9ecfac7f6 Integration: Change to grpc.NewClient 8c6183d74 Add lease test for metadata snapshotter c7fb8a925 Update metadata snapshotter to lease on exists b8dfb4d8f cri: support io by streaming api 3b065cddd CI: skip test in arm64 CI 6c3c5376f critools-version: v1.30.0 b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10 4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group 88b52119c Update api version to v1.8.0-rc.0 1c9c64f31 Update release procedure to mention api replace e69efd56d Add go mod replace when proto changes happen 678137199 sandbox: remove PID() in sandbox client 13f2fa1de remove go1.21.9 from CI matrix f0363a7f6 Chore: Simplify some syscall error checks 99ad11a00 core/metadata: failfast on content.Commit 3fb84403b CI: bump up crun to 1.15 55fcebffc Prepare release notes for api/v1.8.0 b811a8879 Add API release action b8060d641 Update ctr shim subcommand to task v3 f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support 05a3171bb Update transfer proxy to support ttrpc ec04e4f63 Add streaming proxy fe01cad20 Cleanup local transfer interface 171fc1434 Update release doc to mention API versioning 2ac2b9c90 Make api a Go sub-module e1b94c0e7 Move protobuf package under pkg 3e9cace72 Move runtimeoptions to api directory 4a4550777 Move runc options to api directory 25a288662 Fix v2 migrate for testutil package fb1f15d30 docs: correct the typo in the documentation 2df04b403 build(deps): bump the otel group with 8 updates 950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates 93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus 4c753d124 go.mod: k8s.io/cri-api v0.30.0 de38490ed sandbox: merge address and protocol to one url c3b306240 add task api endpoint in task create options 72fe47b2a add task api endpoint in oci proto b1fefccc7 sandbox: store endpoint in cri sandboxStore f6e0cf189 sandbox: add address info in Start and Status response 15782881e go.mod: go 1.22 2d5689434 CI: use Go 1.22 by default fef78c102 install-runc: pin Go to 1.21 11d8beff8 optimize error logs by providing absolute file paths 81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2 c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5 b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName 8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup e07b63d84 document usage and design of blockfile snapshotter b6bd12f13 Add Syself Autopilot to adopters 7bc476001 ADOPTERS.md: Fix Actuated italics 416741675 Perform file sync outside of lock on Commit c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic dfdfa206f Update for latest updates to release tool 53c9e6f86 Update release process after 1.7 a12acedfa sandbox: make a independent shim plugin 9ee3bfaba images: tests: Fix typos in the tests c51463010 docs: update registry config guide 7bd4d348e add info of exited event 218e2cf7c Return correct error if CRIU binary is missing bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7179de293c |
buildah: update to 1.36
Bumping buildah to version v1.36.0, which comprises the following commits: 6ceba8838 Bump to v1.36.0 c09e08b53 build: be more selective about specifying the default OS 3fa5531ca Bump to c/common v0.59.0 4d1690bc3 Fix buildah prune --help showing the same example twice 208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0 183582f03 bud tests: fix breakage when vendoring into podman de8510c9d Integration tests: fake up a replacement for nixery.dev/shell d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe 97382f928 Don't expand RUN heredocs ourselves, let the shell do it 864a40cbd Don't leak temp files on failures 97d44ab9c Add release note template to split dependency chores 4a524737f fix CentOS/RHEL build - no BATS there 420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee bbab575ff Address CVE-2024-3727 6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0 d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs da4e2d7ad Setting --arch should set the TARGETARCH build arg 6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f cd1960725 [CI:DOCS] Add link to Buildah image page to README.md f6d49125a Don't set GOTOOLCHAIN=local a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 53f2dc231 Makefile: set GOTOOLCHAIN=local e0077e8c6 Integration tests: switch some base images fdfd2237d containerImageRef.NewImageSource: merge the tar filters f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2 2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947 7688d880d Disable packit builds for centos-stream+epel-next-8 7425f6f8f Makefile: add missing files to $(SOURCES) fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp 89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security] c01061e47 integration test: handle new labels in "bud and test --unsetlabel" f86c2748e Switch packit configuration to use epel-9-$arch ... 14d964d92 Give unit tests a bit more time 8bb87aefa Integration tests: remove a couple of duplicated tests 3e756d507 Integration tests: whitespace tweaks 8ee7bebd7 Integration tests: don't remove images at start or end of test c7f088142 Integration tests: use cached images more b213c5e7a Integration tests _prefetch: use registry configs 8bdd6a66d internal: use fileutils.(Le|E)xists 441bdc927 pkg/parse: use fileutils.(Le|E)xists 705338379 buildah: use fileutils.(Le|E)xists 9dcd1cc9a chroot: use fileutils.(Le|E)xists 358814f69 vendor: update containers/(common|storage) be74b733f Fix issue/pr lock workflow a99fe1513 [CI:DOCS] Add golang 1.21 update warning 77400c4fc heredoc: honor inline COPY irrespective of ignorefiles ff13a08c9 Update install.md 5b414ad08 source-push: add support for --digestfile d9129b463 Fix caching when mounting a cached stage with COPY/ADD 58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e 2cd31a069 Makefile: softcode `strip`, use it from env var f812c8949 Man page updates 5198af7d7 Add support for passing CDI specs to --device 14bf3db27 Update comments on some API objects 2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks c1b43b57b Makefile - instead of calling `as` directly, use it from env var 23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 c1119f886 CI: bump VMs 2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0 9cf83d8f8 Change RUN to comment in bud.bats 5808b9603 Stop rebasing renovate PRs automatically 37994356f Update renovate validation image 4304d618f CVE-2024-1753 container escape fix 516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network 9db5a16f7 buildah: refactor resolv/hosts setup. 8c1fee7e7 rename the hostFile var to reflect the value better f8a7841cc vendor latest c/common 26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring 547d9bf0e Update docs/buildah-add.1.md 80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0 5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] bf3263ec1 Bump google.golang.org/protobuf to v1.33.0 e635558d2 fix links to containerignore doc e53e50f7a [skip-ci] Makefile: update rpm target 87ef84d3a pr-should-include-tests: use GitHub label, not commit text d50122aeb tests: enable pasta tests 1bc5dd692 [CI:DOCS] Migrate buildah container image 7c88bb372 Update .gitignore da81d2e2b Bump to v1.36.0-dev fedbd7967 Bump v1.35.0 3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 b2504c263 conformance tests: don't break on trailing zeroes in layer blobs a2f0ebef6 Add a conformance test for copying to a mounted prior stage e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0 951dccd3f cgroups: reuse version check from c/common bbea3eb54 Update vendor of containers/(common,image) 6474279ed fix(deps): update github.com/containers/storage digest to eadc620 f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4 53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802 8a1bcd51c manifest add: complain if we get artifact flags without --artifact d0ffb9d37 Use retry logic from containers/common e9c3c1666 Vendor in containers/(storage,image,common) 5047a3566 Update module golang.org/x/crypto to v0.20.0 26d5b84b1 Add comment re: Total Success task name 4853c0042 tests: skip_if_no_unshare(): check for --setuid 63975b541 Properly handle build --pull=false 836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 5748595ae Update module go.etcd.io/bbolt to v1.3.9 fee705081 Revert "Reduce official image size" aee02318a Update module github.com/opencontainers/image-spec to v1.1.0 cdb1a4ff8 Reduce official image size eb6269d8c Build with CNI support on FreeBSD 98f870753 build --all-platforms: skip some base "image" platforms d73e21120 Bump main to v1.35.0-dev 90c0d9794 Vendor in latest containers/(storage,image,common) 1def7d6de Split up error messages for missing --sbom related flags aca884a89 `buildah manifest`: add artifact-related options 07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases 4f0b619dd Use golang.org/x/exp/slices.Contains e202d62cc Disable loong64 again e99960085 Fix a couple of typos in one-line comments 302a798ad egrep is obsolescent; use grep -E e6d179476 Try Cirrus with a newer VM version 04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test 56e6ef854 Update to match dependency API update 5d58b88c7 Update github.com/openshift/imagebuilder and containers/common a20d5b2a5 docs: correct default authfile path 9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13 533aac2d4 tests: retrofit test for heredoc summary 1bfd3336f build, heredoc: show heredoc summary in build output 811ee6797 manifest, push: add support for --retry and --retry-delay 1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3 9d516e22e imagebuildah: fix crash with empty RUN e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551 a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security] 79fb3c213 Make buildah match podman for handling of ulimits 13fd5bd2c docs: move footnotes to where they're applicable 011736e12 Allow users to specify no-dereference 34dff20da Run codespell on code 86afc1ffd Fix FreeBSD version parsing 32b8ceeb6 Fix a build break on FreeBSD e3d043ebf Remove a bad FROM line f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1 4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 f157be843 docs: use reversed logo for dark theme in README cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing b3af07dab commit: force omitHistory if the parent has layers but no history de7c1e1f7 docs: fix a couple of typos 89f50af21 internal/mkcw.Archive(): handle extra image content 4cc811f4f stage_executor,heredoc: honor interpreter in heredoc 339839d4b stage_executor,layers: burst cache if heredoc content is changed dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0 a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense 905551f51 fix(deps): update module golang.org/x/sync to v0.6.0 efe76552b fix(deps): update module golang.org/x/term to v0.16.0 d371fc7b9 Bump CI VMs 53c65dd36 Replace strings.SplitN with strings.Cut b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b 114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4 fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1 59ea8af1b Document use of containers-transports values in buildah b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security] b283c48db chore(deps): update dependency containers/automation_images to v20231208 4a9dba647 manifest: addCompression use default from containers.conf 041388f87 commit: add a --add-file flag 81435aadc mkcw: populate the rootfs using an overlay 5b9141887 chore(deps): update dependency containers/automation_images to v20230517 de0c3cdaf [skip-ci] Update actions/stale action to v9 2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee 4276a735b Bump to v1.34.1-dev 471460018 Ignore errors if label.Relabel returns ENOSUP Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
bad7f6f1d8 |
crun: update to v1.15
Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits: c6c1c7f crun run --help: say --no-subreaper is ignored 8801bc4 github: disable CentOS 10 tests 5f0643c github: fix running tests on CentOS 10 d795081 tests: build on CentOS 10 without yajl f00fa22 libocispec: sync from upstream dd9428b blake3: initialize chunks_array 8c80ab9 utils: initialize fd 81b8f45 linux: fix mount of special files with rro e6eacaf NEWS: tag 1.15 08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests 4618d50 status: rmdirfd: try harder to remove mount points c72bf7f linux: cgroups: cleanup unused mount if move failed ff321e1 tests: install slirp4netns a946f04 utils: fix a compiler warning aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests f39bc4a tests, oci-validation: use perl tap driver f5548f2 tests, oci-validation: use tap-18 18e84a1 tests, oci-validation: use git clone 49090f2 Build s390x binaries using musl libc 307d35e Fix clang format test 4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2 e6a8d51 libocispec: update 1809973 tests: use npm-18 475a3fd features: add support for potentiallyUnsafeConfigAnnotations 4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge 631e767 release: use zstd instead of xz 0722689 release.sh: generate .zst release instead of .xz 3ad68ed linux: fixup libcrun_safe_chdir 699564b rpm: remove eln macro f50da23 Packit: reuse non-RHEL failure message notification on RHEL 0b7fc08 packit: podman reverse dependency tests 820471a libocispec: use runtime-spec v1.2.0 9eea9ff cgroup: make error clearer 59ad70a container: validate option flags 7918dca container: split create and run options 8894495 crun: add option --keep to run 35dccc3 libcrun, run: add option to not delete containers a220ca6 NEWS: tag 1.14.4 6cd74cb Add support for s390x 5884fd4 linux: fix mount of file with recursive flags b9e87e7 tests: test bind mounts of files crun/ocispec: update to latest 2236d50 github: test with the embedded yajl library bed19ad configure.ac: --enable-embedded-yajl skips check for yajl b633f89 Makefile.am: distribute the src/yajl symlink 86650dc fix compilation error with clang++17 20d3936 helpers.py: remove __str__() afed951 generate.py: fix some typos daeb197 runtime-spec: use version v1.2.0 66f6f71 optimize writefile e9a99a8 Optimize headers writefile 7a5f2b6 Refresh strings format sources 210f4d3 Refresh strings format headers b085839 runtime-spec: update crun/ispec: update to v1.1.0 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field crun/rspec: update to v1.2.0 b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7cdd07a736 |
netavark: Make ptest run
Fixes: # ./run-ptest /tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found 1..1 not ok 1 bats-gather-tests # (in test file test/README.md, line 5) # `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
dd7724f447 |
ovs: convert WORKDIR references to UNPACKDIR
fetched files should be referenced via UNPACKDIR instead of WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
05959ccaaf |
uxen: convert WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Note: gcc-14 issues remain even with this fix. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
9388aae0f3 |
libvirt: convert WORKDIR references to UNPACKDIR
Converting WORDIR references to UNPACKDIR. Our generated keys and other references to WORKDIR continue to be fine. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7e5d098342 |
diod: convert WORKDIR references to UNPACKDIR
Converting WORDIR references to UNPACKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e0c92af683 |
dev86: ignore various issues fatal with gcc-14
work arounds for: meta-virtualization/recipes-extended/dev86/dev86_git.bb:do_install http://errors.yoctoproject.org/Errors/Build/183127/ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
73a3374eb4 |
helloworkd-flask: convert WORKDIR references to UNPACKDIR
unpacked source files are now in UNPACKDIR, so we adjust our operations to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
2fdfa68445 |
podman: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d79afeac8c |
lxc: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
2aa6da625d |
kubernetes: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. The remaining WORDIR references are to a secondary git repository with artifacts and should be safe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
01a6b4771f |
docker-distribution: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d190fb4a13 |
container-host-config: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. We also explicitly set S to point to the UNPACKDIR to avoid a build warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
27db959787 |
cgroup-lite: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3dc0db19e1 |
k3s: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
5f5a9e7cd7 |
yq: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also symlink our unpacked vendor clones into the build directory since they are no longer directly placed in WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
95852d19d2 |
go-build: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
288d9bdfb1 |
podman-tui: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
34b281d1a9 |
k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
9de2c86118 |
crio-o: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to use UNPACKDIR instead Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
754c3134c2 |
podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d4f36f3ff5 |
docker-compose: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to UNPACKDIR, and the destination for vendor'd source. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
fd30405004 |
netns: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
caec6371aa |
nerdctl: SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our S directory, and references to WORKDIR to fix the build for the new source layout. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
df90aeb1ae |
cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
258742feb5 |
moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
13928411b2 |
kernel: fix fragment path
Now that UNPACKDIR is used to unpack sources we have an extra level of indirection to locate our cloned fragments. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |