Commit Graph

2607 Commits

Author SHA1 Message Date
Bruce Ashfield
61cec3e210 libvirt: update to v10.5.0 and convert to git
Rather than waiting for release tarballs for the main libvirt
release, we can just use the git repository directory and
avoid patch backporting for CVEs, etc.

As part of this change, we adjust to git, refresh our
meson build patch, and add a new meson patch for the
tests.

We also split out LIBVIRT_VERSION, so that nested builds
can use it to locate tarballs.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Mingli Yu
7d0768c428 netavark: Improve the ptest output
* The previous ptest result show as ✓ or ✗ , improve the result to
PASS or FAIL.

* Skip some cases related to sit0 device(sit kernel module) and
firewalld.

* Add nftables to RDEPENDS for netavark-ptest as 250-bridge-nftables.bats
needs it.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Xiangyu Chen
e15a5484e4 lxc: update ptest cases in black list
Released lxc-test-shutdowntest and lxc-test-state-server due to
those back to normal since lxc upgraded to 6.0.0.

lxc-test-no-new-privs and lxc-test-checkpoint-restore are broken test,
already reported to upstream[1][2], move them to blacklist until
upstream fix them.

lxc-test-usernic always fails when use ptest-runner, but normal with
run-ptest by manual.

Ref:
[1] https://github.com/lxc/lxc/issues/4296
[2] https://github.com/lxc/lxc/issues/4435

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Robert Yang
affb2252f4 yq_git: Set apply=no for SRC_URI diff
Fixed a do_patch error use git shallow tarball (BB_GIT_SHALLOW = "1"):

$ bitbake yp -cpatch

ERROR: do_patch: Importing patch 'github.com.pkg.diff' with striplevel '1'

The github.com.pkg.diff is ud.clonedir of git://github.com/pkg/diff:
* When use regular git repo as source, oe.patch.patch_path() will NOT
  handle it as a patch since the directory github.com.pkg.diff exists,
  and nothing is wrong.

* When use git shallow tarball, the github.com.pkg.diff doesn't exist since
  it is fetched as a tarball, then oe.patch.patch_path() will handle it
  as a patch, then the error happens.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Bruce Ashfield
93113db99c moby: update to v26.1.4
Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits:

    c1d4587d76 builder/mobyexporter: Add missing nil check
    daba2462f5 docs: api: image inspect: remove Container and ContainerConfig
    17315a20ee vendor: github.com/containerd/containerd v1.7.18
    cbd94183ab update containerd binary to v1.7.18
    3115daaa91 update to go1.21.11
    12072173df Update containerd to v1.7.17
    92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2
    a046857fbf vendor: golang.org/x/tools v0.16.0
    476d9314d0 vendor: golang.org/x/mod v0.17.0
    4021fa775e update docker-py to 7.1.0
    0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers  (v1.41 - v1.45)
    1017246d24 api: swagger: Network: add Peers
    fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom
    e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom
    5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45)
    1033f561af api: swagger: POST /networks/create: inline examples per-field
    0fa6816991 api/types: NetworkCreate: add GoDoc
    eaad6f503d don't depend on containerd platform.Parse to return a typed error
    fda7b48363 Fix issue where node promotion could fail
    dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value
    e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only)
    06e19ec444 Explicity write http headers on streaming endpoints
    c21fe3efa3 Forward DNS requests into --internal networks
    9326cda7bf Do not forward DNS requests to self.
    76fcf9a8e0 apparmor: Allow confined runc to kill containers
    10739af81a update to go1.21.10
    2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges.
    40618081f1 Allow for a read-only "/proc/sys/net".
    2c91196921 Update containerd to v1.7.16
    c9689eccf5 vendor: update buildkit to v0.13.2
    7d95fe8db5 c8d/list: Ignore unexpected image target
    6667e96dad Include more details in errnotManifestOrIndex
    ab570ab3d6 nil dereference fix on image history Created value
    7532420f3b container/SetupWorkingDirectory: Don't mutate config
    a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path
    6c68be24a2 Windows DNS resolver forwarding
    745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1
    0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0
    f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks
    f07644e17e Add netiputil.AddrPortFromNet()
    d3c051318f daemon/cluster/executor: Add volume `Subpath`
    5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e)
    f51e18f58e Fix typo
    57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks.
    9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails
    cd7240f6d9 Stop macvlan with no parent from using ext-dns
    17b8631545 Enable DNS proxying for ipvlan-l3
    5ae5969739 vendor: github.com/containerd/containerd v1.7.15
    3485cfbb1e update containerd binary to v1.7.15
    fb92caf2aa ci/validate-pr: Use `::error::` command to print errors
    61269e718f github/ci: Check if backport is opened against the expected branch
    d8b768149b Move dummy DNS server to integration/internal/network
    329d403e20 update to go1.21.9
    d66589496e vendor: golang.org/x/net v0.23.0
    e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
    cf933115b6 Minor fix for illumos support
    9160b9fda6 save: Remove platform from config descriptor
    0a48d26fbc Fix cases where we are wrapping a nil error
    c4689034fd daemon: don't call NetworkMode.IsDefault()
    4eed3dcdfe api: normalize the default NetworkMode
    c187f95fe1 CONTRIBUTING.md: update Slack link
    aff003139c ci: update workflow artifacts retention
    1014f481de Restore the SetKey prestart hook.
    fde80fe2e7 Restore the SetKey prestart hook.
    14a8fac092 chore: fix mismatched function names in godoc
    61e2199b78 AUTHORS,.mailmap: update with recent contributors
    ea72f9f72c Dockerfile: update docker CLI to v26.0.0
    22726fb63b api: document changed behavior of the `Aliases` field in v1.45
    3312b82515 c8d/list: Add a test case for images sharing a top layer
    ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs
    0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size
    f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve
    3d2a56e7cf docs/api: add documentation for API v1.45
    731a64069f c8d/list: Generate image summary concurrently
    dade279565 c8d/list: Add `Images` benchmark
    e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1
    2e4ebf032a c8d/list: Pass ctx to setupLabelFilter
    153de36b3f c8d/list: Add empty index test case
    4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language
    1c03312378 integration: Remove Parallel from TestDiskUsage
    f512dba037 c8d/list: Fix premature `Images` return
    89dc2860ba c8d/list: Handle missing configs in label filter
    6f3892dc99 c8d/list: Don't setup label filter if it's not specified
    fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0
    4bd30829d1 Dockerfile: update docker compose to v2.25.0
    971562b005 Dockerfile: update docker CLI to v26.0.0-rc2
    d742659877 rootless: fix `open /etc/docker/plugins: permission denied`
    4f46c44725 Dockerfile: update xx to v1.4.0
    25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT
    762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS
    7b414f5703 daemon: move getUnprivilegedMountFlags to internal package
    790c3039d0 libnet: Don't forward to upstream resolvers on internal nw
    10bdc7136c builder-next: Add env-var to override runc used by buildkit
    1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
    f40bdf5f63 Dockerfile: update compose to v2.24.7
    3f73d23ea0 Dockerfile: update buildx to v0.13.1
    388ecf65bc c8d: Send push metrics to prom
    bb3ab1edb7 c8d: Send pull metrics to prom
    da245cab15 c8d: Send history metrics to prometheus
    1cfd763214 c8d: Send image delete metrics to prometheus
    0ce714a085 images: Export the image actions prometheus counter
    bcb4794eea Be more explicit about non-TLS TCP access deprecation
    0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes`
    03cddc62f4 api/image-inspect: Remove Container and ContainerConfig
    ec19fd6fed vendor: github.com/containerd/containerd v1.7.14
    d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3
    a6a445d86b set-up-git.md: clarify URL in git clone command
    294fc9762e volume: Don't decrement refcount below 0
    eef352b565 devcontainer: Use a separate devcontainer target
    5a009cdd5b inte/networking: add isIPv6 flag
    2f1a32e3e5 c8d/list: Skip images with non matching platform
    72f1f82f28 c8d/list: Remove outdated TODO
    52a80b40e2 c8d/list: Extract imageSummary function
    288a14e264 c8d/list: Simplify "best" image selection
    b37ced2551 c8d/list: Count containers by their manifest
    a535a65c4b c8d/list: Combine size
    582de4bc3c c8d/list: Add TestImageList
    a6e7e67d3a specialimage: Return optional ocispec.Index
    1b108bdfeb daemon/c8d: Cache SnapshotService
    74e2f23e1a daemon/c8d: Use i.images and i.content
    e8496b1ee4 imageService: Extract common code from `MakeImageCache`
    d66177591e c8d/cache: Use the same cache logic as graphdrivers
    bf30fee58a image/cache: Refactor backend specific code
    f5a5e3f203 golangci-lint: enable dupword linter
    4adc40ac40 fix duplicate words (dupwords)
    8921897e3b Ignore bad ndots in host resolv.conf
    37545cc644 builder-next: fix missing lock in ensurelayer
    ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled.
    49b77753cb builder-next/export: Use leaseutil for descref lease
    c4fc6c3371 builder-next/executor: Replace removed network.Sample
    0f30791a0d vendor: github.com/moby/buildkit v0.13.0
    4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams.
    06628e383a remove repetitive words
    21835a5696 inte/networking: rename linkLocal flag into isLinkLocal
    b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality
    49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2
    72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2
    83cda67f73 go.mod: golang.org/x/sys v0.18.0
    57b7ffa7f6 update to go1.21.8
    cadb124ab6 daemon: overlay2: remove world writable permission from the lower file
    b2921509e5 api/search: Reset `is_automated` field to `false`
    f04f69e366 Accumulate resolv.conf options
    7f69142aa0 resolv.conf comments have '#' or ';' in the first column
    91d9307738 Replace uses of slices.Clone()
    12dea3fa9e devcontainer: Add Golang extension automatically
    9f4e824a6e vendor: github.com/miekg/dns v1.1.57
    ef681124ca fix typo in error message
    7ebd88d2d9 hack: block imports of vendored testify packages
    4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3
    a580544d82 Don't create endpoint config for MAC addr config migration
    ebf3f8c7fe distribution/xfer: fix pull progress message
    2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1
    fc0e5401f2 ci: Update `teststat` to v0.1.25
    7b0ab1011c Vendor dependency cycle-free swarmkit
    62b33a2604 disable pulling legacy image formats by default
    5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons
    84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span"
    261dccc98a builder-next: Add `Info` to `emptyProvider`
    2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3
    b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY)
    e4de4dea5c ci: Make `find` for test reports more specific
    9be820d8ca vendor: go.etcd.io/bbolt v1.3.9
    da643c0b8a libcontainerd: change the digest used when restoring
    9083c2f10d Test DNS on Windows 'nat' networks
    44167988c3 c8d/windows: Temporarily skip two failing tests
    2d31532a00 otel: Default metrics protocol to http/protobuf
    60358bfcab ci(buildkit): dedicated step to build test image
    f5722da5e0 mobyexporter: Store temporary config descriptor
    951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata
    e01a1c5d09 builder/mobyexporter: Set `image.name` response key
    fa467caf4d builder-next/mobyexporter: Use OptKeyName const
    59ad1690f7 builder-next: Adjust to source changes
    b04a2dad6b builder/controller: Adjust NewWorkerOpt call
    bc6d88c09a cmd/dockerd: Fix overriding OTEL resource
    a79bb1e832 builder-next/exporter: Sync with new signature
    e68f71259a integration/build: Use fsutil.NewFS
    dd6992617e integration/build: Use new buildkit progressui
    31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2
    f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring
    16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer`
    881260148f api: omit missing Created field from ImageInspect response
    432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true
    6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors
    913478b428 client: doRequest: make sure we return a connection-error
    901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping
    349abc64ed client: fix TestPingWithError
    05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint
    c516804d6f vendor: OTEL v0.46.1 / v1.21.0
    83c02f7a11 libnet/ds: remove extra space in error msg
    14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress
    ff5f780f2b c8d/pull: Emit `Pulling fs layer`
    5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe
    1d473549e8 ci: Require changelog description
    b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3
    cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent
    d9e082ff54 libnetwork: resolve: use structured logs for DNS error
    8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable
    56aeb548b2 integration/TestDaemonProxy: Remove OTEL span
    38827ba290 ci: set codecov token
    bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry
    2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage
    70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0
    9faf4855d5 Simplify macvlan/ipvlan integration test structure
    4eb95d01bc Run the macvlan/ipvlan integration tests
    7c2975d2df update to go1.21.7
    903412d0fc api/history: Mention empty `Created`
    443f56efb0 Set up DNS names for Windows default network
    b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions
    5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs
    999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1
    ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7
    6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b
    10a72f2504 vendor: cloud.google.com/go/logging v1.8.1
    a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d
    03a17a2887 migrate image spec to github.com/moby/docker-image-spec
    a26c953b94 Add comment explaining network-create flow for Swarm
    571af915d5 Don't enforce new validation rules for existing networks
    b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification
    4ab11a1148 vendor: github.com/containerd/containerd v1.7.13
    419f5a6372 Make 'internal' bridge networks accessible from host
    475019d70a vendor: github.com/prometheus/procfs v0.12.0
    63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0
    beb97f7fdf Refactor 'resolv.conf' generation.
    14503ccebd api/server/middleware: NewVersionMiddleware: add validation
    e1897cbde4 api/server/middleware:use API-consts in tests
    0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs
    6b01719ffb api: add MinSupportedAPIVersion const
    19a04efa2f api: remove API < v1.24
    8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24)
    ffd877f948 api: remove plain-text error-responses (api < v1.24)
    b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23)
    83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21
    d1974aa492 api: remove code for container stats on api < v1.21
    ed93110e11 api: update test to reflect reality on Windows
    570d5a9645 api: remove code for ContainerInspect on api v1.20
    f0dd554e3c api: remove code for ContainerInspect on api < v1.20
    dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20
    2970b320aa api: remove code for adjusting CPU shares (api < v1.19)
    ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16)
    7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16)
    1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16)
    d26bdfe226 runconfig: remove fixtures for api < v1.19
    f1e6958295 c8d: Use the same logic to get the present images
    2c01d53d96 image/cache: Use Platform from ocispec
    d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
    10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
    df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
    8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
    6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
    4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
    1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4)
    7f1b700227 Dockerfile: update RootlessKit to v2.0.1
    f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1
    f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0
    91ea04089b image/cache: Ignore Build and Revision on Windows
    2ef0b53e51 integration/save: Add tests checking OCI archive output
    74d51e8553 plugins: fix panic installing from repo w/ digest
    e910a79e2b Remove 'VERSION' from the text
    9fcea5b933 Fix broken links in project/README.md
    10d6f5213a Dockerfile: update docker compose to v2.24.5
    9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2
    89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU
    e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled
    c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed"
    83af50aee3 libnet: boltdb: inline getDBhandle()
    4d7c11c208 libnet: boltdb: remove PersistConnection
    8070a9aa66 libnet: drop TestMultipleControllersWithSameStore
    82dda18898 tests: add plugin install test w/ digest
    dd20bf4862 libcontainerd/supervisor: fix data race
    0c3b8ccda7 api: Document `version` in `/build`
    2cc627932a Add internal n/w bridge to firewalld docker zone
    8c64b85fb9 No inspect 'Config.MacAddress' unless configured.
    dae33031e0 Only restore a configured MAC addr on restart.
    a2026ee442 ci: update to docker/bake-action@v4
    5a3c463a37 ci: update to codecov/codecov-action@v4
    9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
    a83557d747 ci: update to actions/cache@v3
    2200c0137f libnetwork/datastore: don't parse file path
    d21d0884ae libnetwork: share a single datastore with drivers
    835cdcac95 update containerd binary to v1.7.13
    f4a93b6993 vendor: github.com/moby/buildkit v0.12.5
    b20dccba5e vendor: github.com/opencontainers/runc v1.1.12
    44bf407d4d update runc binary to v1.1.12
    ecb217cf69 hack/make.ps1: Fix go list pattern
    3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3
    08251978a8 gha: update to docker/login-action@v3
    5d396e0533 gha: update to docker/setup-qemu-action@v3
    4a1839ef1d gha: update to docker/bake-action@v4
    b7fd571b0a gha: update to docker/setup-buildx-action@v3
    00a2626b56 gha: update to docker/metadata-action@v5
    e27a785f43 gha: update to actions/setup-go@v5
    fb53ee6ba3 gha: update to actions/github-script@v7
    0ffddc6bb8 gha: update to actions/checkout@v4
    987fe37ed1 d/logger/journald: quit waiting when logger closes
    d53b7d7e46 d/logger/journald: sync logger on close in tests
    39c5c16521 d/logger/loggertest: improve TestConcurrent
    5792bf7ab3 d/logger/journald: log journal-remote cmd output
    982e777d49 d/logger/journald: fix data race in test harness
    ca40ac030c vendor: google.golang.org/grpc v1.59.0
    0818a476e5 vendor: github.com/go-logr/logr v1.3.0
    a0b53f6fd2 vendor: golang.org/x/net v0.18.0
    2ddec74d59 Remove unused params from etchosts.Build()
    5e13f54f57 c8d/save: Handle digested reference same as ID
    d131f00fff image/save: Fix untagged images not present in index.json
    21136865ac libnet: remove arg `options` from (*Endpoint).Leave()
    a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp
    6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd
    905477c8ae logger/journald: drop errDrainDone sentinel
    d70fe8803c logger/journald: wait no longer than the deadline
    e94ec8068d logger/journald: use deadline for drain timeout
    71bfffdad1 l/journald: make tests compatible with systemd 255
    931568032a daemon/logger/loggertest: expand log-follow tests
    388ba9a69c Dockerfile: update docker compose to v2.24.3
    3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1
    7f94acb6ab docs: remove dead links from api verison history
    5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261
    96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe
    877ebbe038 image/cache: Check image platform
    96ac22768a image/cache: Restrict cache candidates to locally built images
    c6156dc51b daemon/imageStore: Mark images built locally
    537348763f image/cache: Compare all config fields
    bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language
    e245fb76de internal/sliceutil: add utilities to map values
    3147a013fb libnet/ds: remove unused param `key` from List
    f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject
    3a617e5463 c8d: Use a specific containerd namespace when userns are remapped
    f7e2357745 image: remove deprecated IDFromDigest
    13f46948dd api/types: remove deprecated container-types
    4b09bc2145 api/types: remove deprecated service-types
    49637d0206 api/types: remove deprecated image-types
    eccb1a3eb8 api/types: remove deprecated checkpoint-types
    0b1921649f api/types: remove deprecated system info types and functions
    6f44138269 libnetwork: fix tiny grammar mistake on design.md
    9a41cc58d9 libnetwork: fix typo in iptables.go
    ac2a028dcc api/types: move image options to api/types/image
    80c44b4b2e daemon: rename: don't reload endpoint from datastore
    250886741b volume/local: Fix cifs url containing spaces
    f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts
    df43311f3d volume/local: Break early if `addr` was specified
    9f37672ca8 daemon: only add short cid to aliases for custom networks
    c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup
    00c9785e2e fix "host-gateway-ip" label not set for builder workers
    0d51cf9db8 volume/local: Make host resolution backwards compatible
    05d952b246 Dockerfile: update docker compose to v2.24.2
    20bd690844 integration-cli: simplify test-file creation
    34668a5945 pkg/archive: fixe some unclosed file-handles in tests
    1090aaaedd libnetwork: fix some unclosed file-handles in tests
    c482383458 fix some leaking mounts in tests
    43bf65c174 pkg/system: return even richer xattr errors
    a3a42c459e api/types/image: move GetImageOpts to api/types/backend
    cd53b7380c Remove generated MAC addresses on restart.
    fb19f1fc20 c8d/snapshot: Create any platform if not specified
    6100190e5c daemon/cluster/executer: Add missing `StartInterval`
    17fd6562bf image/save: Fix layers order in OCI manifest
    4979605212 image/save: Change layers type to DiffID
    fcc651972e daemon: return an InvalidParameter error when ep settings are wrong
    a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version
    13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version
    52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API
    521123944a docs/api: remove version matrices from swagger files
    d54be2ee6d docs: remove documentation for deprecated API versions < v1.23
    64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs
    a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs
    a404017a86 vendor: golang.org/x/tools v0.14.0
    41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0
    2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0
    407ad89ff0 vendor: golang.org/x/sync v0.5.0
    94b4765363 pkg/platforms: internalize in daemon/containerd
    0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints
    058b30023f libnetwork: loosen container IPAM validation
    844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath
    2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString()
    f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported
    e2086b941f remove deprecated pkg/loopback (utility package for devicemapper)
    f07c45e4f2 daemon: remove --oom-score-adjust flag
    307fe9c716 Dockerfile: update docker compose to v2.24.1
    dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0
    c655b7dc78 Assert temp output directory is not an empty string
    a8f7c5ee48 Detect IPv6 support in containers.
    0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook
    5bbcc41c20 volumes/subpath: Plumb context
    cb1af229f2 daemon/populateVolumes: Support volume subpath
    349a52b279 container: Change comment into debug log
    42afac91d7 internal/safepath: Add windows implementation
    5841ed4e5e internal/safepath: Adapt k8s openat2 fallback
    56bb143a4d internal/safepath: Import k8s safeopen function
    3784316d46 internal/safepath: Handle EINTR in unix syscalls
    9a0cde66ba internal/safepath: Add linux implementation
    bfb810445c volumes: Implement subpath mount
    f2e1105056 Introduce a helper that collects cleanup functions
    f07387466a daemon/oci: Extract side effects from withMounts
    9c8752505f volume/mounts: Rename errors in defer block
    5bcbedb7ee API: bump version to 1.45
    35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals
    7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger
    5581efe7cd rename "ociimage" var to be proper camelCase
    66cf6e3a7a rename "image" vars to prevent conflicts with imports
    c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface
    768146b1b0 Fix isGitURL regular expression
    585d74bad1 pkg/ioutils: Make subsequent Close attempts noop
    fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe?

Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits:

    5bab750c2 cli/command: more go1.19 ("predeclared any")
    e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev)
    2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18
    230d4d0ba vendor: github.com/containerd/containerd v1.7.17
    6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2
    a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5
    c463d968f vendor: github.com/opencontainers/image-spec v1.1.0
    0576b3dad update to go1.21.11
    60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20
    b600054c5 migrate to new github.com/containerd/platforms package
    dafe63b08 gha: update to actions/upload-artifact@v4
    079107e1b [26.1] vendor: github.com/docker/docker v26.1.3
    14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2
    50bb59277 docs: tidy up CDI docs
    c4767b314 docs: fix json syntax error
    258e27438 context list: temporarily add ContextType to JSON output
    29cd8591e cli/command/context: list: add test for JSON output
    e23a63eb4 cli/command/context: test inspecting context with custom metadata
    1e52a86d4 cli/command/context: add test-utility to create multiple contexts
    e382a5f22 plugins/hooks: Don't show empty hooks
    26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d)
    326c7138b OTel: implement missing MeterProvider `ForceFlush`
    ee359a394 OTel: add `command.time` metric to plugin commands
    669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init
    81b482ea5 docs: clarify that --data-path-addr doesn't restrict access
    e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae)
    c1d70d1fb update to go1.21.10
    4add46d68 Add e2e tests for run w/ bad entrypoint
    ccea7d8a3 Fix hang when container fails to start
    1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ
    6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1)
    840016ea0 waitExitOrRemoved: Handle context cancellation
    aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89)
    43cb06e1a hooks: pass command execution error to plugins
    9d8320de9 hooks: include full configured command
    6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea)
    c3243a8cc ci/validate-pr: Use `::error::` command to print errors
    f92fcdef1 github/ci: Check if backport is opened against the expected branch
    745704d7b ci: Require changelog description
    762a85a10 Warn about deprecation of windows-dns-proxy flag
    501175905 hooks: set expected environment when executing
    d6796c002 Fix OTLP env var overriding
    c449c1a49 plugins/hooks: run hooks when exit code != 0
    287f482e3 Feature option 'windows-dns-proxy'
    867061b00 plugins/templates: break on newlines when printing hooks
    718203d50 cli-bin/windows: Add .exe extension
    5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master)
    c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e
    8a3a7b945 vendor: github.com/containerd/containerd v1.7.15
    458580984 docs: add systempaths=unconfined security-opt
    5fcbbde4b vendor: golang.org/x/net v0.23.0
    4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
    c7a50ebb9 vendor: golang.org/x/term v0.18.0
    9a2133f2d vendor: golang.org/x/sys v0.18.0
    0a5bd6c75 update to go1.21.9
    cefcba987 otel: capture exit code as int64
    ee1b2836a otel: capture whether process was invoked from a terminal
    8f45f1495 command: include default otel error handler for the cli
    910d5d024 chore: remove backticks and resolve linting issues
    2a3b6c03f cli: add go:build tag to the docker telemetry
    efd82e1e3 Initial otel impl using our utils
    b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes
    160f65d9d Added some telemetry utils
    9a1b0f8bb CONTRIBUTING.md: update Slack link
    7c722c08d feat: standardize error for prompt
    7ea10d5ce refactor: prompt tests
    89db01ef9 cli: add otel sdk tracing and metric providers to the core cli
    c5016c6d5 cli-plugins: Introduce support for hooks
    509123f93 plugin: drop explicit unlink
    fdb48a066 vendor: github.com/docker/docker v26.0.0
    542e82cae plugin: update/improve process lifecycle documentation
    d68cc0e8d plugin: closer-based plugin notification socket
    d2ea5adfe fix: flaky prompt termination on reader close test
    ccfd0b2cc test/ Improve test coverage in volume.go
    69575f617 vendor: github.com/docker/docker 8b79278316b5 (master)
    b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev)
    f96d8e78c docs/deprecated: update status of short cid alias deprecation
    b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action
    24186d800 ci: fix CodeQL 2.16.4 autobuild
    48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0
    38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev)
    f8fc5b6bc scripts/vendor: remove -compat=1.19
    a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
    115c8d56e vendor: github.com/containerd/containerd v1.7.14
    939283181 builder: correct the command path for docker build
    dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect
    3da26a5e7 docs: add description and link for --userns flag
    4bb2abaa5 docs: typo fixes and other corrections
    90c33dbfd deprecate legacy image formats
    800a51d6c Set CGO_ENABLED=1 on riscv64
    9349f58b8 docs: clarify what the --privileged flag does
    adb018084 Dockerfile: update to xx 1.4.0
    46afd26c4 cli/command: deprecate EventHandler and InitEventHandler
    5c54f75f2 cli/command/container: use ping-result for OS-version
    617377c04 Describe an 'internal' network.
    860b4f3a7 'docker daemon' flags refer to the default bridge
    645b97352 vendor: github.com/docker/docker v26.0.0-rc2
    3cf2fe0ff docs: deprecate TCP connection without TLS
    a8379092a vendor: github.com/docker/docker f4c696eef17d62a42
    ab9d56057 bake: Add `windows/arm64` target to bin-image-cross
    3b7747794 update to go1.21.8
    10bf91a02 fix: cli prompt termination exit code
    238d659ff Add support for --detach/-d flag in stack rm
    b086d7276 Add support for --detach flag in stack deploy
    5e8023239 vendor: github.com/docker/docker v26.0.0-rc1
    d51ba4179 docs: prefer -it over -ti
    a5b82e9f8 docs: fix typo in tty example
    abe78b79d chore: `docker help` should not show plugin vendor and version
    5786f2068 plugins: fix encoding for OTEL env var passed to plugin
    85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin
    acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev)
    79541b7e2 vendor: google.golang.org/grpc v1.59.0
    096ced089 vendor: OTEL v0.46.1 / v1.21.0
    f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0
    1b42d04d6 vendor: github.com/go-logr/logr v1.3.0
    f5a29ff8e vendor: github.com/containerd/containerd v1.7.13
    2663c1057 ci: set codecov token
    48a670f26 docs: fix invalid daemon.json examples
    f2e98f9a9 docs: regenerate markdown
    caf72655f docs: update url scheme for reference docs
    e24404494 deps: update cli-docs-tool version (v0.7.0)
    20b9d489e update to go1.21.7
    c514003e6 Fixed typo in bash completion functions
    ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID
    3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package
    69ed6588a Cleanup of dockerfiles, compose files and env vars
    6b67b9549 Update gha runners and engines used in e2e tests
    edc09e603 mount: Add `volume-subpath` option
    9831fea4d testenv: Add DaemonAPIVersion helper
    8bae66271 cli/connhelper/commandconn: inline variables
    df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev)
    30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version
    2c214241f Avoid keeping @docker_cli_[UUID] files
    c986d09bc docker stack: allow '=' separator in extra_hosts
    324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev)
    93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261
    69e0f53a0 Uniform volume prune output msg with other prune commands
    809eb8cde images: print hint when invoking "docker images" with ambiguous argument
    b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI
    1328bb338 cli/command/images: runImages: inline intermediate var
    b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4
    1587b70ee Remove dummy circleci config
    cfa9fef77 tests: add plugin-socket-compatibility tests
    dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand
    690f63e6d cli/command/container: minor cleanup in attach
    53e2e54c2 Dockerfile: update docker compose to v2.24.3
    1c4d6d85d scripts: don't hardcode architecture in e2e script
    4fa2fe9b9 Replace deprecated types.Image* usage
    68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev)
    4b1ed1f44 vendor: github.com/docker/docker v25.0.1
    d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings
    ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag
    469bfc05e tests: add tests for `cli-plugins/socket`
    091af560c Dockerfile: update docker compose to v2.24.2
    2402dac81 cli/command/container: remove deprecated NewStartOptions
    b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt
    a71d39bca info: remove printServerWarningsLegacy
    8cd3b0042 socket: return from loop after EOF
    337dd82d8 vendor: github.com/docker/docker v25.0.0
    d633890f9 docs: move base command to docker.md
    aff4649cb docs: fix broken links to alias pages
    852d198bb docs: add documentation for CDI
    1f9573bb0 Add Linode docker volume plugin

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Bruce Ashfield
59a433c1f2 podman-tui: update to v1.1.0
Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits:

    6bcf5993 Bump to v1.1.0
    d4bee0e9 Bump github.com/containers/podman to v5.1.0
    4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0
    e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0
    b404db37 Bump to v1.1.0-dev
    35fb1650 Bump to v1.0.1
    834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3
    372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0
    f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0
    4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2
    a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2
    2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0
    9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0
    46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1
    775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1
    ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2
    c3440609 Bump to v1.1.0-dev
    47c47d46 Bump to v1.0.0
    45253e1e Bump github.com/docker/docker
    f39102a5 podman v5
    b5297884 Bump to v0.19.0-dev
    64ea1b82 Bump to v0.18.0
    bee2b067 README.md update
    445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
    da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
    b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
    ff1f99ca install.md update - ArchLinux (AUR)
    52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux
    34bd6420 golangci-lint update 1.56.2
    2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4
    aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0
    7c81b05b Vagrantfile update (fedora 39)
    feafd1a9 ghaction update
    26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1
    b793ec2c Bump codecov/codecov-action from 3 to 4
    61b81c38 unit test
    31fa7523 unit tests
    0ec32f51 resolves #438 Substitute env variables in config file
    8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1
    b3cfedb2 README update
    341f1b2c unit test coverage
    75c926a5 podman-tui installation via homebrew for Mac
    6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3
    6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0
    b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1
    1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0
    20985d53 Bump to v0.18.0-dev
    b4350927 Bump to v0.17.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Bruce Ashfield
c3c9c8a01f podman: update to 5.1.1
Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits:

    7a1f39dc4d Bump to v5.1.2-dev
    bda6eb03dc Bump to v5.1.1
    cd0a0d7d6d Update release notes for v5.1.1
    aa031ad1ba libpod: do not leak systemd hc startup unit timer
    d79b94c82b Check AppleHypervisor before accessing it
    a9377a8ec3 [v5.1] Bump c/common to v0.59.1
    4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly
    d5cc37f78a test/e2e: use local skopeo not image
    2906582149 [v5.1] Mac PM test: Require pre-installed rosetta
    7ad138c3db Fix typo in release notes
    515e44be74 Bump to v5.1.1-dev
    4e9486dbc6 Bump to v5.1.0
    2f343ce778 Release notes for v5.1
    8ba3626c94 Add configuration for podmansh
    8eff425410 [v5.1] Bump c/* for vendor dance
    178600e531 test/e2e: fix new error message
    7df3715430 Add Hyper-V option in windows installer
    6ad6132987 Only stop chowning volumes once they're not empty
    65d26b0cde remote API: restore v4 payload in container inspect
    3949bf8af1 Fix windows action trigger
    acf137b342 Update podman network docs
    7207461196 Add Rosetta support for Apple Silicon mac
    d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode
    c837ebc44e vendor latest c/common main
    97251d0ee6 Bump to v5.1.0-dev
    6a8f2e7f29 Bump to v5.1.0-rc1
    bd4e4a1d8f Add release notes for v5.1.0 (preliminary)
    c46884aa93 `podman events`: check for an error after we finish reading events
    277312d282 Fix updating connection when SSH port conflict happens
    2a609b0f74 rootless: fix reexec to use /proc/self/exe
    d4e40fedaf ExitWithError() - enforce required exit status & stderr
    82f9811a8d ExitWithError() - a few that I missed
    44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
    92338642d1 Revert "Temporarily disable rootless debian e2e testing"
    5901bf52b9 CI tests: enforce TMPDIR on tmpfs
    6e655c7fd2 use new CI images with tmpfs /tmp
    e771618531 run e2e test on tmpfs
    3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0
    6830d0e3c8 Address CVE-2024-3727
    07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions
    755fc021f9 ExitWithError() - rmi_test
    5e240ab1f5 ExitWithError() - more r files
    0c22de7811 ExitWithError() - s files
    03f036b515 ExitWithError() - more run_xxx tests
    3b1c735b67 Fix podman-remote support for `podman farm build`
    71473976ac [CI:DOCS] Trigger windows installer action properly
    8433a01aa2 Revert "container stop: kill conmon"
    3fa8e98a31 Ensure that containers do not get stuck in stopping
    279e2d0cb2 [CI:DOCS] Improvements to make validatepr
    9e43e586c9 ExitWithError() - rest of the p files
    dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
    a2cf948f90 Graceful shutdown during podman kube down
    521bbab864 test/system: fix broken "podman volume globs" test
    6d1098f823 Quadlet/Container: Add GroupAdd option
    7bfac4f349 Don't panic if a runtime was configured without paths
    d4c7ca39fd update c/{buildah,common,image,storage} to latest main
    6bdebea8ae update golangci-lint to 1.58
    ee5153c545 machine: Add LibKrun provider detection
    641cd7c5a2 ExitWithError() - continue tightening
    b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1
    303d0b398e test: improve test for powercap presence
    9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10
    be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0
    36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora
    42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
    e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml`
    7d12ae0973 ExitWithError() - play_kube_test.go
    02b8fd7156 Temporarily disable rootless debian e2e testing
    7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0
    b520e909e0 CI Docs: Clarify passthrough_envars() comments
    87747ca820 Skip machine tests if they don't need to be run
    e8ef36e26e Update CI VMs to F40, F39, D13
    83ee16b9ba ExitWithError() - v files
    22eff26916 Update module golang.org/x/term to v0.20.0
    431cbffab6 machine: Add provider detection API
    419efb9eb5 util: specify a not empty pause dir for root too
    1d1dba3843 Add missing option 'healthy' to output of `podman run --help`
    b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md
    4fd84190b8 Add a random suffix to healthcheck unit names
    7a43c2ed1b test/e2e: remove toolbox image
    46f247d880 Also substitute $HOME in runlabel with user's homedir
    7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5
    275c068df7 ExitWithError() - pod_xxx tests
    c378f2d03a ExitWithError() -- run_test.go
    f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
    a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4
    61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible
    8942e2dbda GHA: Attempt fix exceeded a secondary rate limit
    1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools
    a140c74ba4 Fix machine volumes with long path and paths with dashes
    d1f8933a93 Update module google.golang.org/protobuf to v1.34.0
    d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0
    c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1
    88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak
    0faded53b8 test/e2e: do not leak /tmp/private_file
    88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file
    eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs
    60b5488308 Update dependency pytest to v8.1.2
    cd6ff71cc3 Remove unncessary lines at the end of specfile summary
    e412eff33f Clean machine pull cache
    d2c1de5993 Add krun support to podman machine
    ca23774b5b Use custom image for make validatepr
    9a0ed6929a test/e2e: force systemd cgroup manager
    d1bfdc7900 e2e and bindings tests: fix $PATH setup
    5040c6e390 Makefile: remove useless HACK variable in e2e test
    537c21a49a test/e2e: fix volumes and suid/dev/exec options
    31034a1b6f test/e2e: volumes and suid/dev/exec options works remote
    cc6e999f2a test/e2e: fix limits test
    c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
    3c1c6a44ef Correct option name `ip` -> `ip6`
    30e2c923d6 Add the ability to automount images as volumes via play
    693ae0ebc6 Add support for image volume subpaths
    5f57571d65 Bump Buildah to latest main
    e8a9c58125 Update Makefile to Go 1.22 for in-container
    e4c9910aec ExitWithError() - yet more low-hanging fruit
    80c3a22440 ExitWithError() - more low-hanging fruit
    4da5c5d3aa ExitWithError() - low-hanging fruit
    c681df35c0 chore: fix function names in comment
    3f78c39c50 Remove redundant Prerequisite before build section
    fa1fd1646e Remove PKG_CONFIG_PATH
    3b28cdfb20 Add installation instructions for openSUSE
    83dbbc3a51 Replace golang.org/x/exp/slices with slices from std
    c04d03ef8c Update to go 1.21
    c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
    c22eefb939 [CI:DOCS] Fix artifact action
    333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
    ac04cb4ac5 e2e tests: stop littering
    27174ff3fb [CI:DOCS] format podman-pull example as code
    e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions
    2681ab23d1 libpod: getHealthCheckLog() remove unessesary check
    2ae6d0d4dd add containers.conf healthcheck_events support
    33def2eea7 vendor latest c/common
    b026e1d635 libpod: make healthcheck events more efficient
    ce9054ff45 libpod: wrap store setup error message
    e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs
    e58972cd1d pkg/systemd: use fileutils.(Le|E)xists
    acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists
    94c699192f pkg/util: use fileutils.(Le|E)xists
    0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists
    1991990d5a pkg/specgen: use fileutils.(Le|E)xists
    aab06ac445 pkg/rootless: use fileutils.(Le|E)xists
    af24326133 pkg/machine: use fileutils.(Le|E)xists
    cbffddc72e pkg/domain: use fileutils.(Le|E)xists
    bd00c6fef9 pkg/api: use fileutils.(Le|E)xists
    5656ad40b1 libpod: use fileutils.(Le|E)xists
    90304dd507 cmd: use fileutils.(Le|E)xists
    598fc516a6 vendor: update containers/{buildah,common,image,storage}
    a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
    dc68a47d7a fix podman-pod-restart.1.md typo
    eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
    af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0
    422eb0e58a Add more annnotation information to podman kupe play man page
    b1736c472a test/compose: remove compose v1 code
    2c61ee9a31 CI: remove compose v1 tests
    713c026b4d [CI:DOCS] Fix windows installer action
    d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
    7b3456b5d9 add `list` as an alias to list networks
    482ef7bfcf Add support for updating restart policy
    ddea30e40e Add Compat API for Update
    be3f075402 Make `podman update` changes persistent
    7ef0290a1d Emergency fix (well, skip) for failing bud tests
    7c4f2c79ea fix swagger doc for manifest create
    d4ecae59bd [CI:DOCS] options/network: fix markdown lists
    714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target
    3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
    0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0
    1600cfffa5 Fix some comments
    e8055904e1 swagger fix infinitive recursion on some types
    5e9725983d install swagger from source
    f95b9d4e37 Revert "Swap out javascript engine"
    5e68fbd132 podman exec CID without command should exit 125
    df69b36ee5 (minor) prefetch systemd image before use
    49729c82a9 Update go-swagger version
    1b6e8d73aa Swap out javascript engine
    3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
    08a49389c8 Add os, arch, and ismanifest to libpod image list
    e773ed42b3 [CI:DOCS]Initial PR validation
    4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
    67c6d7ec80 vendor ginkgo 2.17.1 into test/tools
    999d6c0750 fix "concurrent map writes" in network ls compat endpoint
    26f866b5df chore(deps): update dependency pytest to v8
    2d9159821a e2e: redefine ExitWithError() to require exit code
    8de92ec912 docs: fix missleading run/create --expose description
    0bedf7f1d2 podman ps: show exposed ports under PORTS as well
    aee1e1408d rootless: drop function ReadMappingsProc
    9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
    0313693d48 New CI VMs, to give us pasta 2024-04-05
    394820c4f0 Add big warning to GHA workflow
    7f0268a2e7 GHA: Fix intermittent workflow error
    266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0
    847ca1f9ea e2e tests: remove requirement for fuse-overlayfs
    36e4d512b3 docs: update Quadlet volume Options desc
    b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0
    0b36126e92 Fix relabeling failures with Z/z volumes on Mac
    f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0
    b9a8a2c61c Makefile: fix annoying errors in docs generation
    59ee130048 chore: fix function names in comment
    a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1
    3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0
    3560ccd5df Detect unhandled reboots and require user intervention
    fcf9327773 podman --runroot: remove 50 char length restriction
    10995192f8 update github.com/rootless-containers/rootlesskit to v2
    156ae500f2 Update module github.com/gorilla/schema to v1.3.0
    beb4fd1b4a Update dependency requests-mock to ~=1.12.1
    e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1
    f2c365c6f6 rm --force work for more than one arg
    71f6f50ee1 [CI:DOCS] Update kube docs
    81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
    0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io
    ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
    ff133a544d Windows: clean up temporary perl install
    498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors
    549dbf8327 [CI:DOCS] build deps: make-validate needs docs
    a61ae8c0a9 test/system: add rootless-netns test for setup errors
    ce04fbc16a vendor latest c/common main
    519a66c6a9 container: do not chown to dest target with U
    fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags
    d27313ad10 systests: conditionalize slirp4netns tests
    e697631af9 CI: systests: instrument flaky tests
    d2143fac59 s3fs docs
    7d68362cf5 test: do not skip tests under rootless
    d3927f9076 Add note about host networking to Kube PublishPort option
    1a99d87746 Inject additional build tags from the environment
    d81319eb71 libpod: use original IDs if idmap is provided
    f3434298df Switch back to checking out the same branch the action script runs in
    f7b9168649 docs/podman-login: Give an example of writing the persistent path
    aab4674feb CI: Bump VMs to 2024-03-28
    4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
    fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
    ffb8b2dc36 Fix reference to deprecated types.Info
    c0e32e93c0 Use logformatter for podman_machine_windows_task
    d305e70af8 applehv: Print vfkit logs in --log-level debug
    23bf357fc3 [CI:DOCS]Add Mario to reviewers list
    c8e1e0034a [CI:DOCS] Document CI-maintenance job addition
    48b8d7f8be Add golang 1.21 update warning
    b56331cd2f Add rootless network command to `podman info`
    80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD
    c62c74970f hyperv: error if not admin
    83671f95d8 Properly parse stderr when updating container status
    492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream
    11415b3e74 Use built-in ssh impl for all non-pty operations
    83fe867c14 Add support for annotations
    a6ffb5656f hyperv: fix machine rm -r
    f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job
    3c611c47e4 5.0 release note fix typo in cgroupv1 env var
    3a9968ef81 fix remote build isolation on client side
    17aa152459 chore: remove repetitive words
    b2d0b92db2 Dont save remote context in temp file but stream and extract
    493179be45 fix remote build isolation when server runs as root
    4740367330 util: use private propagation with bind
    9a13b8f17d util: add some tests for ProcessOptions
    50d764b0e6 util: refactor ProcessOptions into an internal function
    49ab250cf9 util: rename files to snake case
    c03256e23c Add LoongArch support for libpod
    f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c
    5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
    5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
    77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0
    c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
    a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
    b1fd03f9f5 Fix type-o
    3f2b8bb314 Use correct extension in suite
    aa5c4879b4 minikube: instrument tests, to allow debugging failures
    15b8bb72a8 libpod: restart always reconfigure the netns
    dc1795b4b2 use new c/common pasta2 setup logic to fix dns
    2566ee2f38 utils: drop conversion float->string->float
    816c7279e1 utils: do not generate duplicate range
    f16ab115ed logformatter: handle Windows logs
    0e38815387 utils: add test for the new function
    cda3dc83d8 utils: move rootless code to a new function
    079bfb085a CVE-2024-1753 fix for main
    1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst
    23433ec7bd test/system: Add support for multipath routes in pasta networking tests
    73a12b0c07 [skip-ci] rpm: use macro supported vendoring
    7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images
    7711833827 Makefile: add target `podman-remote-static`
    fdad9ab1ff Switch to 5.x WSL machine os stream using new automation
    3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context
    ee4b1efb24 bump main to 5.1.0-dev
    3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote
    e82d196269 pkg/machine: make checkExclusiveActiveVM race free
    b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
    c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting
    1dfd3d3d12 pkg/machine: refresh config after we hold lock
    d5e0ecc619 Update dependency setuptools to ~=69.2.0
    60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+
    2ff5716b7e fix invalid HTTP header values when hijacking a connection
    c6ae7fd145 Add doc to build podman on windows without MSYS
    1901403eda Removing CRI-O related annotations
    83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
    d7fa0aa351 Pass the restart policy to the individual containers
    cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Bruce Ashfield
ea2a7de432 containerd: update to 2.0.0-rc.3
Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits:

    531da9960 Reduce scope of permissions in stale workflow
    ed64e6503 core/mount: remove logrus import
    ea8265fb1 core/transfer/local: remove logrus import
    75fd7a5a7 pkg/shim: remove logrus imports
    38e2f0038 Adds a mutex to protect fallback host
    587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation
    ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus
    4203e2de8 pkg/tracing/plugin: rename var that collided with import
    e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName
    e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates
    5b8dfbd11 Allow proxy plugins to have capabilities
    cc2cedae0 Revert "install-runc: pin Go to 1.21"
    3c097352a update runc binary to v1.1.13
    8c13ed1b8 Prepare v2.0.0-rc.3 release
    86b8a8824 Remove pkg/seed
    09d3e20d3 Allow running test in usernamespace
    8bcffa944 KEP-3619: Fine grained SupplementalGroups control
    87dd4309d vendor: github.com/containerd/platforms v0.2.1
    939135ae3 CI: golangci-lint v1.59.1
    df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service
    686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl
    156458e54 build(deps): bump the golang-x group with 2 updates
    08c1e12e9 CI: add back EL 8
    149ca6880 Update hcsshim tag to 0.12.4
    b1a23c495 Fail integration test early when a plugin load fails
    d23c4b8b5 Use unix and windows specific connection error checks
    02b6c6939 Allow fallback across default ports
    80ce8bd61 build(deps): bump github.com/containerd/containerd/api
    cde2527fc ctr: pull: Do not ignore labels when transfer service is used
    1c123efb4 Update Go version to 1.22.4
    e1e793e4a Update rockylinux vagrant build
    5611fdd4a Transfer: Push: Enable to specify platforms
    0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs
    4123170a3 *: export RemoveVolatileOption for CRI image volumes
    3e71ccafc Add type alias for event Envelope
    da1d9672f Enable imgcrypt in cri pull
    9857afda4 Add vendor for github.com/containerd/imgcrypt
    359d84351 Update api minimum go version to 1.21
    2d73340c2 Explicitly set release latest to false
    ca59fb0b4 Cleanup shim manager configuration
    9831a62d7 auth: add span to FetchToken helpers
    58be88189 sandbox: do retry for wait to remote sandbox controller

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Bruce Ashfield
c138943fed podman-compose: switch to main branch
The upstream project has made the "interesting" decision to
delete the stable branch and move to "main" for recent
releases. So rather than being able to simply switch for our
updates, we have to switch to main on all releases that had
podman-compose recipes using the stable branch.

Luckily, the commit hashes haven't changed, so we only have
to modify the branch in the SRC_URI.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 14:43:11 +00:00
Bruce Ashfield
e96da98e40 rootlesskit: introduce linux-native fakeroo using user namespaces
see: https://github.com/rootless-containers/rootlesskit

---------
RootlessKit: Linux-native fakeroot using user namespaces

RootlessKit is a Linux-native implementation of 'fake root' using user_namespaces(7).
The purpose of RootlessKit is to run Docker and Kubernetes as an unprivileged user
(known as 'Rootless mode'), so as to protect the real root on the host from potential
container-breakout attacks.
---------

This is a building block for cross installation of containers and
rootless on-target execution.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-06-04 17:44:50 +00:00
Bruce Ashfield
aaad95b191 scripts: adjust to syhead go source location
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-06-04 17:40:35 +00:00
Bruce Ashfield
179ed82251 networking: introduce passt / pasta
Introducing the pasta package as an alternative for non-priviledged
container networking:

https://passt.top/passt/about/

   passt: Plug A Simple Socket Transport
   passt implements a translation layer between a Layer-2 network interface and native
   Layer-4 sockets (TCP, UDP, ICMP/ICMPv6 echo) on a host. It doesn't require any
   capabilities or privileges, and it can be used as a simple replacement for Slirp.

   pasta: Pack A Subtle Tap Abstraction
   pasta (same binary as passt, different command) offers equivalent functionality,
   for network namespaces: traffic is forwarded using a tap interface inside the
   namespace, without the need to create further interfaces on the host, hence not
   requiring any capabilities or privileges.

   It also implements a tap bypass path for local connections: packets with a local
   destination address are moved directly between Layer-4 sockets, avoiding Layer-2
   translations, using the splice(2) and recvmmsg(2)/sendmmsg(2) system calls for
   TCP and UDP, respectively.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-06-04 13:03:44 +00:00
Marcus Flyckt
e8214becb9 podman: Use slirp4netns instead of pasta
podman uses pasta as the default rootless network command since 5.0.0,
but only slirp4netns is available when building for Yocto.

This commit adds a containers.conf file setting slirp4netns as default
rootless command if 'rootless' is set in PACKAGECONFIG

Signed-off-by: Marcus Flyckt <mafl@kvaser.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-31 16:20:17 +00:00
Hieu Van Nguyen
6ab94f2c68 libvirt: convert more WORKDIR references to UNPACKDIR
unpacked source files are now in UNPACKDIR, so we adjust our
operations to match.

Some references were missed in previous commit as they
are behind conditional.

Use BP subdir for python, to build it inside ${S}.

Need cd - to go back to $${B} so that gnutls-helper.py
is executed there instead of python subdirectory.

Use mix of tabs and spaces for indentation like other lines
around :).

Signed-off-by: Hieu Van Nguyen <hieu2.nguyen@lge.com>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-31 16:20:17 +00:00
Bruce Ashfield
79a282078f xen: fix arm64 build with gcc14
gcc14 isn't properly tracking if the irq array index is
greater than zero, and hence generates a warning that
chains to a build error.

This is a temporary patch to ensure that the variable
is greater than zero and hence keeps the warning from
happening. If it was less than zero, a different way
of dealing with it "officially" would be better, but we
lack the insight to know what to do in this case (plus,
it really isn't less than zero as it has never caused
an issue before)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-31 16:20:17 +00:00
Bruce Ashfield
acb0653af0 conf: update xen preferred version
The xen preferred version fails to match when we add -stable
dot releases. We move the wildcard back in the preferred
version to pick them up.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-31 13:58:22 +00:00
Bruce Ashfield
fd55e2a13b xen: update to 4.18-tip
Bumping xen to version RELEASE-4.18.2-19-g01f7a3c792, which comprises the following commits:

    01f7a3c792 update Xen version to 4.18.3-pre
    7cdb1fa2ab x86/mtrr: avoid system wide rendezvous when setting AP MTRRs
    f3d20dd317 tools/xentop: Fix cpu% sort order
    dfabab2cd9 x86: respect mapcache_domain_init() failing
    3999b675ca xen/sched: set all sched_resource data inside locked region for new cpu
    8271f0e8f2 libxl: Fix handling XenStore errors in device creation
    9966e54131 libxl: fix population of the online vCPU bitmap for PVH
    a42c83b202 x86/ucode: Distinguish "ucode already up to date"
    0673eae8e5 x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake
    2bc52041ca tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC
    a4c5bbb9db VT-d: correct ATS checking for root complex integrated devices
    47cf06c09a xen/x86: Fix Syntax warning in gen-cpuid.py
    026542c857 xen/xsm: Wire up get_dom0_console
    f0ff1d9cb9 x86/spec: adjust logic that elides lfence
    0b0c7dca70 x86/spec: fix reporting of BHB clearing usage from guest entry points
    eb7059767c x86/MTRR: correct inadvertently inverted WC check
    af0e9ba44a x86/rtc: Avoid UIP flag being set for longer than expected
    8bdcb0b98b altcall: fix __alt_call_maybe_initdata so it's safe for livepatch
    2d38302c33 x86/entry: Fix build with older toolchains
    d152a04246 Update CHANGELOG.md with 4.18.2 line
    b2863e468e Update Xen version to 4.18.2
    40f2c69ad8 x86/spec-ctrl: Support the "long" BHB loop sequence
    9be85b14aa x86/spec-ctrl: Wire up the Native-BHI software sequences
    72a357f4fa x86/spec-ctrl: Software BHB-clearing sequences
    73a4229807 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI
    2be76f2018 x86/tsx: Expose RTM_ALWAYS_ABORT to guests
    62844c4415 x86: Drop INDIRECT_JMP
    9fd732d18d x86: Use indirect calls in reset-stack infrastructure
    40a6795480 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields
    fb12e8d8f7 x86/vmx: Add support for virtualize SPEC_CTRL
    a6cefb2686 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_*
    ccc6603b79 x86/spec-ctrl: Simplify DO_COND_IBPB
    5b28a4af1f x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR}
    9bc337497c x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV
    e382cddcc2 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_*
    57e5cab3de x86/spec-ctrl: Rename spec_ctrl_flags to scf
    32cdecf1c3 x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests
    a482be9211 x86/alternatives: fix .init section reference in _apply_alternatives()
    855e261337 x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch
    125b1a7808 x86/spec-ctrl: Move __read_mostly data into __ro_after_init
    594dd0920f VMX: tertiary execution control infrastructure
    4c2208d06c x86/CPU: convert vendor hook invocations to altcall
    8a8c626281 x86/guest: finish conversion to altcall
    b6fad02a54 x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking()
    0f6696a780 x86/spec-ctrl: Expose BHI_CTRL to guests
    a546399829 x86/spec-ctrl: Expose RRSBA_CTRL to guests
    fa7f2f9a86 x86/spec-ctrl: Expose IPRED_CTRL to guests
    1fe30f552a IRQ: generalize [gs]et_irq_regs()
    f7bd03b608 x86/MCE: switch some callback invocations to altcall
    9fdbcd84d3 x86/MCE: separate BSP-only initialization
    b06cf0701a x86/PV: avoid indirect call for I/O emulation quirk hook
    a2922d8097 x86/MTRR: avoid several indirect calls
    5c5d4eeee4 core-parking: use alternative_call()
    ba951c5f29 x86/HPET: avoid an indirect call
    a44c2c9f89 cpufreq: finish conversion to altcall
    6b8ee35088 x86/APIC: finish genapic conversion to altcall
    6d4055b9a5 x86/spec-ctrl: Fix BTC/SRSO mitigations
    1166467ed3 hypercall_xlat_continuation: Replace BUG_ON with domain_crash
    429a125dba x86/HVM: clear upper halves of GPRs upon entry from 32-bit code
    17cf285d87 tests/resource: Fix HVM guest in !SHADOW builds
    5c4aacab17 x86/boot: Support the watchdog on newer AMD systems
    a790c670bb x86/boot: Improve the boot watchdog determination of stuck cpus
    d0173bbed1 x86/livepatch: Relax permissions on rodata too
    4fc27254de xen/virtual-region: Include rodata pointers
    8c13f6c565 xen/virtual-region: Rename the start/end fields
    b576e09b66 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies
    03cc579ae3 x86/cpu-policy: Hide x2APIC from PV guests
    0a8b92d0a4 tools/oxenstored: Make Quota.t pure
    3f3158fc32 tools/oxenstored: Use Map instead of Hashtbl for quotas
    c9ea3b49a5 x86/PoD: tie together P2M update and increment of entry count
    cb7b84d3d5 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly
    62d9ca19f9 x86/mm: use block_lock_speculation() in _mm_write_lock()
    3d67ba0371 update Xen version to 4.18.2-pre
    ea82c8cdbf update Xen version to 4.18.1
    4da8ca9cb9 x86: protect conditional lock taking from speculative execution

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-31 13:38:28 +00:00
Bruce Ashfield
6bbe7c3205 hyperstart: remove recipe
hyperstart is in read-only mode, so we drop it from the layer.

A replacement will be provided in the future.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 16:07:56 +00:00
Bruce Ashfield
1b3dfd8ef2 runv: drop recipe
runv is no longer used, kata containers is the suggested VM
backed container interface.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 16:03:19 +00:00
Bruce Ashfield
bb82580ed3 runv: use destsuffix for clone
To ensure that the go code can be unpacked and the license file
found, we add destsuffix to the SRC_URI.

We still have a gcc14 build issue, but this at least gets us
to that issue.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 15:23:08 +00:00
Bruce Ashfield
f487ea4aa0 lxc: update to v6.0.0
Bumping lxc to version v6.0.0, which comprises the following commits:

    3dee5fb88 Release LXC 6.0.0
    17ac6f691 lxc.spec: Align SPDX license id
    5fe2de84c Makefile: Align SPDX license id
    97f93be72 meson: Align SPDX license id
    d4cd3741d COPYING: Clarify licensing of files without SPDX
    8e67eb07c doc: Add SPDX headers and remove Author field
    cb94edf53 src/include: Add SPDX headers
    7bc33ef6e src/tests: Add SPDX headers
    007642c89 hooks: Add SPDX headers
    1e9e66be3 lxc.spec: Clear default changelog
    202d649d1 lxc.spec: Use SPDX
    85abd4026 template: Use SPDX
    a074b3d27 config/yum: Use SPDX header
    7ed43e5e9 COPYING: Remove whitespace
    522721216 MAINTAINERS: Remove Dwight from the maintainer list
    08bf8b9e2 lxc-checkconfig: Fix shellcheck
    0f18db543 lxc-checkconfig: Show namespace limits
    f71b8e3f8 lxc-ls: list names with whitespaces in `--active`.
    816b8973d lxc/tools: set default log_priority to ERROR
    989ea3969 tools/lxc_autostart: don't fail when there are no containers
    dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep
    630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot
    796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.*
    dcc4fb929 tests/parse_config_file: fix some typos
    6fea67429 tests/parse_config_file: add tests for lxc.time.offset.*
    ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow
    4464cee19 lxccontainer: rework copy_file()
    9d1aa932d lxccontainer: improve mod_rdep()
    81c1bbf45 Revert "lxccontainer: fixes"
    82fe01821 src/lxc/syscall_numbers.h: drop define -1
    590a95d83 rexec: Avoid invalid free in rexec failure path
    f9978b179 README: Correct 'armvl7' to 'armv7l'
    046b63cd2 unshare: simplify lookup_name
    7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare
    e88883445 lxc-net: Enable IPv6 by default
    d78ca00bc tests/meson: attempt to fix ossfuzz builds
    d18f993b3 github: master -> main
    86799f554 meson: link with liblxc dynamically everywhere if possible
    b90fecfda network: use IN_LIBLXC
    9eee450d2 storage_utils: move get_fssize to utils
    6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type
    42eeffcb0 confile: unhide lxc_config_parse_arch() helper
    9bb318881 conf: reorganize/split code to utils.c
    863c59dc3 conf: reorganize/split code to idmap_utils.c
    b7591ad49 confile: unhide lxc_config_define*() helpers
    f14656ebf meson: introduce IN_LIBLXC preprocessor macro
    672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach
    8f9733d75 tests: remove old and broken cgroup handling code from tests
    d51ea224e config: apparmor: add AppArmor profile for lxc-copy
    627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl
    df0665b6d oci: resolve cross-filesystem blob caching failure
    ec85e5ca4 lxc-test-usernic: drop cgroup handling
    27ec0b0f6 test-usernic: don't use ifconfig
    44e845b3c Add x32 to the list of recognized architectures
    07e3a516e lxc-download, lxc-local: preserve xattrs on unpack
    9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases
    64341ce7b tree-wide: use container_uses_namespace() helper
    6b40e66c1 Fix error message.
    c8189ee2a Add verbose output in download template.
    84cc3155a Align columns in lxc-download.in template
    872db5424 build: add more options for customizing install
    df17ac417 Add loongarch64 support
    112d5615e build(deps): bump actions/upload-artifact from 3 to 4
    789457f1a config: try to create workdir if not exist
    86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree
    f885a3c56 lxc-local: Re-organize code to use more functions
    7c025072e lxc-local: Improve usage info
    faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear
    d65fe1b27 Disable IPv6 link-local addresses for bridged veth
    8cff8fa1a don't try to delete vlan 0 from veth
    0e932812a conf: fix ephemeral copies
    abffab441 config/init: Drop upstart files
    79a4a3cf8 doc: remove the warning mentionning upstart
    7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling
    fb73c18d2 meson: Remove support for upstart
    cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared
    a87d6fcc9 lxc/checkconfig: use multiline `echo`
    f3e01fa80 lxc/checkconfig: replace `echo -n` by printf
    ba4f810bc lxc/checkconfig: minor cosmetic change
    d52c345c8 lxc/checkconfig: avoid subshell (SC2235)
    f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234)
    74b9faa64 lxc/checkconfig: check exit code directly (SC2181)
    5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236)
    a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck
    8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n`
    cb2574319 lxc/checkconfig: replace `type` by `command`
    003efe6db lxc/checkconfig: replace `cat | grep` with `grep`
    adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval
    c02367e59 containers in the FREEZING state also need to be unfreeze
    aca53bcf7 build(deps): bump actions/checkout from 3 to 4
    84169158f lxccontainer.h: Move new fields to the end
    e2696df93 Remove references to LXD
    7cec54455 Update console perms to 0600
    3f45443fd Fix start api call to split quoted strings in execute or init command.
    fbc31691e github: Update for main branch
    69e51b919 CONTRIBUTING: add a note on AI generated code
    84cfe9772 get_hierarchy: dont WARN about no usable controller
    64167f906 Add libarchive tar support for lxc download
    213e2f68d github: Add DCO/target tests
    cf2b20209 explicitly convert *mainloop_handler to __u64
    8575ffeb7 tests: fix parse_config_file seccomp test
    ca25f3bf6 src/tests: Fix container creation errors
    539c39772 rename functions which clash with libsystemd's
    b670f0e75 commands: support timeout in LXC_CMD_GET_STATE
    0fed82b26 lxccontainer: extend lxccontainer API with set_timeout
    7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI
    715fb4eff terminal: make a terminal FDs non-blocking
    7eff16cc4 file_utils: add fd_make_nonblocking helper
    747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking
    ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr()
    f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe
    890de0759 lsm: apparmor: allow to change mount propagation
    5894cf310 console-log test: make sure container is stopped before restarting
    820d2a2b3 switch from libsystemd's dbus to dbus-1
    3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC
    4ea0b361f Allow fuse mounts in apparmor start-container.
    1a2da75b6 Add support for squashfs images in oci via atomfs
    db3cbfa75 apparmor: don't try to mmap empty files
    304bf58fa initutils: use PRIu64 for uint64_t in setproctitle
    4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT
    311bb8c53 Fix strlcat's return value checks
    588b53b19 Fix typo: bev_type -> bdev_type
    7914c259f drop broken lxc-test-fuzzers
    849d80877 Fix build error on sparc64 caused by using the gold linker
    43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts
    4fa83282b lxc_user_nic: fix get_mtu() error handling
    1b0469530 Patching an incoming CVE (CVE-2022-47952)
    a8e1070c6 build: force linking against liblxc
    c27ea96f7 checkconfig: Fix filesystem capability check
    3f361da61 checkconfig: Tweak cgroup handling
    3ab04999d checkconfig: Tweak layout
    e027ca711 checkconfig: Hide version if no lxc-start
    914fec51b checkconfig: Fix mixed tabs/spaces
    70b176b0d src/lxc/meson.build: fix build without apparmor
    42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups
    0072919dd state: additional check in lxc_wait to prevent OOB
    62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope
    93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation
    f8aa61f97 network: always initialize struct nl_handler
    6ea4a6c06 apparmor: properly check lxc_strmmap ret value
    b37cce95b github: fix coverity (add libpam-dev)
    a8dcf88d0 github: fix coverity build
    7e7393413 conf: ensure mount tunnel is a dependent mount
    01ae6d471 apparmor: allow shared mounts in start-container.in
    81d94a4ee conf: create separate peer group for container's root
    68020412c cgroups: only allocate user namespace if we have to
    27f69d45b cgroups: use userns_exec_full() during cgroup removal
    1029c2a06 README: remove lgtm
    dcf85308c meson.build: strip newline for variable assignments
    8aac58866 meson.build: strip newlines from git output
    16c6ff226 tests: lxc-test-reboot: Fix build on ia64
    64eb31d02 src/lxc/meson.build: fix the static library path
    c6c705bfa build: drop build-time systemd dependency
    f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols
    5aff4ea37 build: only build init.lxc.static if libcap is statically linkable
    c1f87c811 build: fix handling of dependancies to fix build on openSUSE
    bc318926d cgroups: fix -Waddress warning
    4deaa28c0 Unroll IN_SET since the max usage is 2 elements check
    73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup
    8480c56a4 tools: lxc-destroy: update help message for --force
    3cac3fce4 build: add libsystemd to oss fuzz dependencies
    f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status
    4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed
    09233897b Update README.md
    4a66dabf8 conf: allow cross-device links
    dc4f1220f build(deps): bump actions/checkout from 2 to 3
    2b802090f Update cifuzz.yml
    20cc78456 fix error message when use tools with -? option
    b0abedf60 use sd_bus_call_method_async to replace the asyncv one
    589a930f1 tree-wide: split open helpers into open_utils.h
    7b1836bce build: prevent the inclusion of linux/mount.h with a hack
    da8c29853 mount_utils: remove conf.h include
    74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h
    68cf56489 tree-wide: minimize liburing.h inclusion
    06f99c259 meson: fix docbook2x detection
    133aa416c tree-wide: use struct open_how directly
    63468abd3 tree-wide: use struct clone_args directly
    4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion
    16ebb29dc meson.build: allow explicit distrosysconfdir
    cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h
    ef1e0607b build: detect sys/pidfd.h availability
    c1115e150 build: detect where struct mount_attr is declared
    e452c8945 gitignore: Simplify
    32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to
    7f6643071 README: update security mails
    5e704fe38 meson.build: fix build without stack-protector
    7d7235489 meson.build: fix build with -Dcapabilities=false
    8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P
    353f0f992 meson: add remaining still-in-use config checks
    3d360cf9d Store mount options in correct variable
    df3301046 Fix off-by-one error constructing mount options
    8ee615c27 add check for statvfs
    07a00b78f start: fix namespace sharing
    eae44ce19 conf: fix append_ttyname()
    6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup
    7317d2a8a start: don't overwrite file descriptors during namespace preservation
    fc133a9f3 conf: log file descriptors on error during idmapped mount setup
    26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32
    c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2
    b203e1a14 Fix uninitialized read in parse_cap when libcap is not used
    e73520adf meson: Set DEVEL flag post release
    f4d02217e tools: Provide multicall lxc binary
    289d6413e meson: Generate compile commands by iterating over an array
    132ff8e28 lxccontainer: rework copy_file()
    f357cb290 lxccontainer: improve mod_rdep()
    b576a47d5 Read list until process exits

We also:

   - drop two patches that were backported
   - refresh the context of one

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
3373478346 containerd: update to v2.0.0-rc.2
Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits:

    446e63579 remove uses of platforms.Platform alias
    22f2af40c update pause image to 3.10
    65024e6fd core/image: fix usage of "unknown" platform
    8b3060717 Provide runtime options in plugin info
    332caf1a1 Provide ability to set lo up without CNI
    288f0592e Prepare release notes for v2.0.0-rc.2
    f24a95185 build(deps): bump github.com/prometheus/client_golang
    8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6
    96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
    1cae3dc9b update ttrpc to 1.2.4
    e2251f948 Update instrumentation fuzzer with new flag
    ef76a90e9 Update platforms package to v0.2.0
    0b113d78d doc: add the description of sandboxer and io_type
    7cead8800 cri: restart created container with correct io type
    42f778fc1 modify streaming io url form
    25c2f690a Update toolchain to Go 1.22.3
    681a083fa Update unpacker to always fetch all
    2788604e4 Update ctr image pull all platforms
    58be88189 sandbox: do retry for wait to remote sandbox controller
    059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts
    9a9a8c46a Don't require vagrant tests in merge queues
    d9dc2811a fix: delete sockets on shim exit
    41dc94ee1 CI: bump up golangci-lint to v1.58.0
    9ecfac7f6 Integration: Change to grpc.NewClient
    8c6183d74 Add lease test for metadata snapshotter
    c7fb8a925 Update metadata snapshotter to lease on exists
    b8dfb4d8f cri: support io by streaming api
    3b065cddd CI: skip test in arm64 CI
    6c3c5376f critools-version: v1.30.0
    b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1
    a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10
    4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
    42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group
    88b52119c Update api version to v1.8.0-rc.0
    1c9c64f31 Update release procedure to mention api replace
    e69efd56d Add go mod replace when proto changes happen
    678137199 sandbox: remove PID() in sandbox client
    13f2fa1de remove go1.21.9 from CI matrix
    f0363a7f6 Chore: Simplify some syscall error checks
    99ad11a00 core/metadata: failfast on content.Commit
    3fb84403b CI: bump up crun to 1.15
    55fcebffc Prepare release notes for api/v1.8.0
    b811a8879 Add API release action
    b8060d641 Update ctr shim subcommand to task v3
    f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support
    05a3171bb Update transfer proxy to support ttrpc
    ec04e4f63 Add streaming proxy
    fe01cad20 Cleanup local transfer interface
    171fc1434 Update release doc to mention API versioning
    2ac2b9c90 Make api a Go sub-module
    e1b94c0e7 Move protobuf package under pkg
    3e9cace72 Move runtimeoptions to api directory
    4a4550777 Move runc options to api directory
    25a288662 Fix v2 migrate for testutil package
    fb1f15d30 docs: correct the typo in the documentation
    2df04b403 build(deps): bump the otel group with 8 updates
    950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates
    93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus
    4c753d124 go.mod: k8s.io/cri-api v0.30.0
    de38490ed sandbox: merge address and protocol to one url
    c3b306240 add task api endpoint in task create options
    72fe47b2a add task api endpoint in oci proto
    b1fefccc7 sandbox: store endpoint in cri sandboxStore
    f6e0cf189 sandbox: add address info in Start and Status response
    15782881e go.mod: go 1.22
    2d5689434 CI: use Go 1.22 by default
    fef78c102 install-runc: pin Go to 1.21
    11d8beff8 optimize error logs by providing absolute file paths
    81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
    c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0
    6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5
    b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName
    8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON
    f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup
    e07b63d84 document usage and design of blockfile snapshotter
    b6bd12f13 Add Syself Autopilot to adopters
    7bc476001 ADOPTERS.md: Fix Actuated italics
    416741675 Perform file sync outside of lock on Commit
    c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
    dfdfa206f Update for latest updates to release tool
    53c9e6f86 Update release process after 1.7
    a12acedfa sandbox: make a independent shim plugin
    9ee3bfaba images: tests: Fix typos in the tests
    c51463010 docs: update registry config guide
    7bd4d348e add info of exited event
    218e2cf7c Return correct error if CRIU binary is missing
    bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
7179de293c buildah: update to 1.36
Bumping buildah to version v1.36.0, which comprises the following commits:

    6ceba8838 Bump to v1.36.0
    c09e08b53 build: be more selective about specifying the default OS
    3fa5531ca Bump to c/common v0.59.0
    4d1690bc3 Fix buildah prune --help showing the same example twice
    208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
    c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0
    183582f03 bud tests: fix breakage when vendoring into podman
    de8510c9d Integration tests: fake up a replacement for nixery.dev/shell
    d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
    97382f928 Don't expand RUN heredocs ourselves, let the shell do it
    864a40cbd Don't leak temp files on failures
    97d44ab9c Add release note template to split dependency chores
    4a524737f fix CentOS/RHEL build - no BATS there
    420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
    bbab575ff Address CVE-2024-3727
    6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
    d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
    da4e2d7ad Setting --arch should set the TARGETARCH build arg
    6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
    cd1960725 [CI:DOCS] Add link to Buildah image page to README.md
    f6d49125a Don't set GOTOOLCHAIN=local
    a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
    53f2dc231 Makefile: set GOTOOLCHAIN=local
    e0077e8c6 Integration tests: switch some base images
    fdfd2237d containerImageRef.NewImageSource: merge the tar filters
    f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
    2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
    7688d880d Disable packit builds for centos-stream+epel-next-8
    7425f6f8f Makefile: add missing files to $(SOURCES)
    fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp
    89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security]
    c01061e47 integration test: handle new labels in "bud and test --unsetlabel"
    f86c2748e Switch packit configuration to use epel-9-$arch ...
    14d964d92 Give unit tests a bit more time
    8bb87aefa Integration tests: remove a couple of duplicated tests
    3e756d507 Integration tests: whitespace tweaks
    8ee7bebd7 Integration tests: don't remove images at start or end of test
    c7f088142 Integration tests: use cached images more
    b213c5e7a Integration tests _prefetch: use registry configs
    8bdd6a66d internal: use fileutils.(Le|E)xists
    441bdc927 pkg/parse: use fileutils.(Le|E)xists
    705338379 buildah: use fileutils.(Le|E)xists
    9dcd1cc9a chroot: use fileutils.(Le|E)xists
    358814f69 vendor: update containers/(common|storage)
    be74b733f Fix issue/pr lock workflow
    a99fe1513 [CI:DOCS] Add golang 1.21 update warning
    77400c4fc heredoc: honor inline COPY irrespective of ignorefiles
    ff13a08c9 Update install.md
    5b414ad08 source-push: add support for --digestfile
    d9129b463 Fix caching when mounting a cached stage with COPY/ADD
    58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e
    2cd31a069 Makefile: softcode `strip`, use it from env var
    f812c8949 Man page updates
    5198af7d7 Add support for passing CDI specs to --device
    14bf3db27 Update comments on some API objects
    2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks
    c1b43b57b Makefile - instead of calling `as` directly, use it from env var
    23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
    c1119f886 CI: bump VMs
    2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
    f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
    9cf83d8f8 Change RUN to comment in bud.bats
    5808b9603 Stop rebasing renovate PRs automatically
    37994356f Update renovate validation image
    4304d618f CVE-2024-1753 container escape fix
    516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network
    9db5a16f7 buildah: refactor resolv/hosts setup.
    8c1fee7e7 rename the hostFile var to reflect the value better
    f8a7841cc vendor latest c/common
    26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring
    547d9bf0e Update docs/buildah-add.1.md
    80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
    5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
    c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
    550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
    1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
    bf3263ec1 Bump google.golang.org/protobuf to v1.33.0
    e635558d2 fix links to containerignore doc
    e53e50f7a [skip-ci] Makefile: update rpm target
    87ef84d3a pr-should-include-tests: use GitHub label, not commit text
    d50122aeb tests: enable pasta tests
    1bc5dd692 [CI:DOCS] Migrate buildah container image
    7c88bb372 Update .gitignore
    da81d2e2b Bump to v1.36.0-dev
    fedbd7967 Bump v1.35.0
    3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
    b2504c263 conformance tests: don't break on trailing zeroes in layer blobs
    a2f0ebef6 Add a conformance test for copying to a mounted prior stage
    e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0
    951dccd3f cgroups: reuse version check from c/common
    bbea3eb54 Update vendor of containers/(common,image)
    6474279ed fix(deps): update github.com/containers/storage digest to eadc620
    f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4
    53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802
    8a1bcd51c manifest add: complain if we get artifact flags without --artifact
    d0ffb9d37 Use retry logic from containers/common
    e9c3c1666 Vendor in containers/(storage,image,common)
    5047a3566 Update module golang.org/x/crypto to v0.20.0
    26d5b84b1 Add comment re: Total Success task name
    4853c0042 tests: skip_if_no_unshare(): check for --setuid
    63975b541 Properly handle build --pull=false
    836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
    5748595ae Update module go.etcd.io/bbolt to v1.3.9
    fee705081 Revert "Reduce official image size"
    aee02318a Update module github.com/opencontainers/image-spec to v1.1.0
    cdb1a4ff8 Reduce official image size
    eb6269d8c Build with CNI support on FreeBSD
    98f870753 build --all-platforms: skip some base "image" platforms
    d73e21120 Bump main to v1.35.0-dev
    90c0d9794 Vendor in latest containers/(storage,image,common)
    1def7d6de Split up error messages for missing --sbom related flags
    aca884a89 `buildah manifest`: add artifact-related options
    07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
    a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases
    4f0b619dd Use golang.org/x/exp/slices.Contains
    e202d62cc Disable loong64 again
    e99960085 Fix a couple of typos in one-line comments
    302a798ad egrep is obsolescent; use grep -E
    e6d179476 Try Cirrus with a newer VM version
    04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test
    56e6ef854 Update to match dependency API update
    5d58b88c7 Update github.com/openshift/imagebuilder and containers/common
    a20d5b2a5 docs: correct default authfile path
    9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13
    533aac2d4 tests: retrofit test for heredoc summary
    1bfd3336f build, heredoc: show heredoc summary in build output
    811ee6797 manifest, push: add support for --retry and --retry-delay
    1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
    9d516e22e imagebuildah: fix crash with empty RUN
    e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551
    a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
    f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
    79fb3c213 Make buildah match podman for handling of ulimits
    13fd5bd2c docs: move footnotes to where they're applicable
    011736e12 Allow users to specify no-dereference
    34dff20da Run codespell on code
    86afc1ffd Fix FreeBSD version parsing
    32b8ceeb6 Fix a build break on FreeBSD
    e3d043ebf Remove a bad FROM line
    f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1
    4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
    f157be843 docs: use reversed logo for dark theme in README
    cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing
    b3af07dab commit: force omitHistory if the parent has layers but no history
    de7c1e1f7 docs: fix a couple of typos
    89f50af21 internal/mkcw.Archive(): handle extra image content
    4cc811f4f stage_executor,heredoc: honor interpreter in heredoc
    339839d4b stage_executor,layers: burst cache if heredoc content is changed
    dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0
    a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense
    905551f51 fix(deps): update module golang.org/x/sync to v0.6.0
    efe76552b fix(deps): update module golang.org/x/term to v0.16.0
    d371fc7b9 Bump CI VMs
    53c65dd36 Replace strings.SplitN with strings.Cut
    b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b
    114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4
    fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
    59ea8af1b Document use of containers-transports values in buildah
    b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
    b283c48db chore(deps): update dependency containers/automation_images to v20231208
    4a9dba647 manifest: addCompression use default from containers.conf
    041388f87 commit: add a --add-file flag
    81435aadc mkcw: populate the rootfs using an overlay
    5b9141887 chore(deps): update dependency containers/automation_images to v20230517
    de0c3cdaf [skip-ci] Update actions/stale action to v9
    2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
    29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee
    4276a735b Bump to v1.34.1-dev
    471460018 Ignore errors if label.Relabel returns ENOSUP

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
bad7f6f1d8 crun: update to v1.15
Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits:

    c6c1c7f crun run --help: say --no-subreaper is ignored
    8801bc4 github: disable CentOS 10 tests
    5f0643c github: fix running tests on CentOS 10
    d795081 tests: build on CentOS 10 without yajl
    f00fa22 libocispec: sync from upstream
    dd9428b blake3: initialize chunks_array
    8c80ab9 utils: initialize fd
    81b8f45 linux: fix mount of special files with rro
    e6eacaf NEWS: tag 1.15
    08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests
    4618d50 status: rmdirfd: try harder to remove mount points
    c72bf7f linux: cgroups: cleanup unused mount if move failed
    ff321e1 tests: install slirp4netns
    a946f04 utils: fix a compiler warning
    aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests
    f39bc4a tests, oci-validation: use perl tap driver
    f5548f2 tests, oci-validation: use tap-18
    18e84a1 tests, oci-validation: use git clone
    49090f2 Build s390x binaries using musl libc
    307d35e Fix clang format test
    4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2
    e6a8d51 libocispec: update
    1809973 tests: use npm-18
    475a3fd features: add support for potentiallyUnsafeConfigAnnotations
    4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge
    631e767 release: use zstd instead of xz
    0722689 release.sh: generate .zst release instead of .xz
    3ad68ed linux: fixup libcrun_safe_chdir
    699564b rpm: remove eln macro
    f50da23 Packit: reuse non-RHEL failure message notification on RHEL
    0b7fc08 packit: podman reverse dependency tests
    820471a libocispec: use runtime-spec v1.2.0
    9eea9ff cgroup: make error clearer
    59ad70a container: validate option flags
    7918dca container: split create and run options
    8894495 crun: add option --keep to run
    35dccc3 libcrun, run: add option to not delete containers
    a220ca6 NEWS: tag 1.14.4
    6cd74cb Add support for s390x
    5884fd4 linux: fix mount of file with recursive flags
    b9e87e7 tests: test bind mounts of files

crun/ocispec: update to latest

    2236d50 github: test with the embedded yajl library
    bed19ad configure.ac: --enable-embedded-yajl skips check for yajl
    b633f89 Makefile.am: distribute the src/yajl symlink
    86650dc fix compilation error with clang++17
    20d3936 helpers.py: remove __str__()
    afed951 generate.py: fix some typos
    daeb197 runtime-spec: use version v1.2.0
    66f6f71 optimize writefile
    e9a99a8 Optimize headers writefile
    7a5f2b6 Refresh strings format sources
    210f4d3 Refresh strings format headers
    b085839 runtime-spec: update

crun/ispec: update to v1.1.0

    535d657 Fix a typo in the annotations spec
    89fee07 MAINTAINERS: move jonboulle to EMERITUS
    f17d647 CODEOWNERS: remove vbatts
    818209a MAINTAINERS: move vbatts to EMERITUS
    652ec7c Add note about `ImageID` to the `config` section of `manifest.md`
    2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64
    e191267 Update Go versions in release scripts
    4da0cfc Update GitHub Actions packages to resolve warnings in CI
    a32e6c3 Pin golangci-lint for Go v1.20
    8baa69b media-types: Fix broken links
    0a41c19 version: bump back to +dev
    e7f7c0c version: release v1.1.0
    d0f90e6 Clarify that subject references a separate DAG
    8b1e951 version: bump back to +dev
    6c2b5fa version: release v1.1.0-rc6
    53d9855 new section for projects no longer maintained
    b391bc0 fix: SPDX licenses URL
    dd66b54 Test older versions of Go with toolchain=local
    93f6e65 Makefile: remove stray trailing space (#1126)
    d881fa8 deps: remove deprecated github.com/pkg/errors (#1125)
    072574d add ORAS to implementations.md
    9954739 specs-go: group MediaTypes
    344b098 fix markdown table formatting
    c7a064f Update supported Go range to 1.19 - 1.21
    f0ef80e version: bump back to +dev
    1e54f01 version: release v1.1.0-rc5
    061cba3 Fix golangci-lint install on older versions of Go
    a2a5750 Add step to update website after a release
    0c1622e Add `riscv64` arch to `check{Architecture|Platform}`
    e6a75e6 Provide a decision tree for artifacts
    9ac8f92 Quote lint-md wildcard expression
    a6af2b4 Add a markdown linter and fix linting issues
    af9c838 OCI has a distribution-spec
    37bac87 Create artifacts guidance
    ddf2dfd chore(descriptor.md): correct canonicalization reference
    d36ccf1 MediaType is required in the descriptor
    f6c60b5 Clean up the markdown in considerations
    da8994a Cleanup broken links and markdown spacing
    56877ad Remove deprecated golangci lint checks
    b29a06c Hacking markdown and Makefile cleanup
    73aca56 Cleanup markdown in governance
    fd95ded Fix label schema link
    aed07a8 Test subject field in index
    8620a49 version: bump HEAD back to +dev
    82e8329 version: bump for release of v1.1.0-rc.4
    988df0a specs-go: remove artifact prefixed annotations
    a845c7a image-index: add artifactType to specs and schema
    73f386c Add constants for "index.json" and "blobs"
    25fc553 Switch from scratch to empty
    749ea9a Add artifactType to image index
    32036d8 Apply version change from #1050
    e13840d Add language from artifacttype field to forbid allowlists of media types
    77efc6e spec: clarify descriptor, align with de facto artifact usage
    c6854a6 image-index: add the `subject` field

crun/rspec: update to v1.2.0

    b983fbf CODEOWNERS: remove vbatts
    bf698d0 MAINTAINERS: move vbatts to EMERITUS
    12b653d Update golangci-lint to v1.56.1 in CI
    8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
    1a729af Update GitHub Actions packages to resolve warnings in CI
    65cd1f8 Back to +dev
    36852b0 version: release v1.2.0
    021ba94 config.md: allow empty mappings for [r]idmap
    5e98fec features: add potentiallyUnsafeConfigAnnotations
    cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
    4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
    2f6b090 config: improve bind mount and propagation doc
    0ec4e6b fix link to hooks in features
    6ffddf6 mount: Allow relative mount destinations on Linux
    f329913 features-linux: Expose idmap information
    7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
    2547bb0 config: add idmap and ridmap mount options
    3f552ce version: release v1.1.0+dev
    0625254 version: release v1.1.0
    d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
    5430e36 ChangeLog: Document changes since v1.1.0-rc.3
    2bd22fa features.md: add a note to avoid confusion about annotations
    5612d21 Remove outdated meeting.ics
    085728a README.md: update chat information
    8b4cadd version: v1.1.0-rc.3+dev
    ae35e39 version: release v1.1.0-rc.3
    d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
    1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
    fccfb09 config: add support for org.opencontainers.image annotations

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Mingli Yu
7cdd07a736 netavark: Make ptest run
Fixes:
  # ./run-ptest
  /tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found
  1..1
  not ok 1 bats-gather-tests
  # (in test file test/README.md, line 5)
  #   `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
dd7724f447 ovs: convert WORKDIR references to UNPACKDIR
fetched files should be referenced via UNPACKDIR instead of
WORKDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
05959ccaaf uxen: convert WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Note: gcc-14 issues remain even with this fix.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
9388aae0f3 libvirt: convert WORKDIR references to UNPACKDIR
Converting WORDIR references to UNPACKDIR.

Our generated keys and other references to WORKDIR continue
to be fine.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
7e5d098342 diod: convert WORKDIR references to UNPACKDIR
Converting WORDIR references to UNPACKDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Martin Jansa
e0c92af683 dev86: ignore various issues fatal with gcc-14
work arounds for:
meta-virtualization/recipes-extended/dev86/dev86_git.bb:do_install

http://errors.yoctoproject.org/Errors/Build/183127/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:41 +00:00
Bruce Ashfield
73a3374eb4 helloworkd-flask: convert WORKDIR references to UNPACKDIR
unpacked source files are now in UNPACKDIR, so we adjust our
operations to match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
2fdfa68445 podman: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
d79afeac8c lxc: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
2aa6da625d kubernetes: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

The remaining WORDIR references are to a secondary git repository
with artifacts and should be safe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
01a6b4771f docker-distribution: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
d190fb4a13 container-host-config: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

We also explicitly set S to point to the UNPACKDIR to avoid a
build warning.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
27db959787 cgroup-lite: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
3dc0db19e1 k3s: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
5f5a9e7cd7 yq: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

We also symlink our unpacked vendor clones into the build directory
since they are no longer directly placed in WORKDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
95852d19d2 go-build: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
288d9bdfb1 podman-tui: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
34b281d1a9 k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
9de2c86118 crio-o: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

We also adjust our WORKDIR reference to use UNPACKDIR instead

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
754c3134c2 podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
d4f36f3ff5 docker-compose: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

We also adjust our WORKDIR reference to UNPACKDIR, and the destination
for vendor'd source.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
fd30405004 netns: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
caec6371aa nerdctl: SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

We also adjust our S directory, and references to WORKDIR to
fix the build for the new source layout.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
df90aeb1ae cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
258742feb5 moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

We also adjust our paths to the new source location and drop references
to WORKDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
13928411b2 kernel: fix fragment path
Now that UNPACKDIR is used to unpack sources we have an
extra level of indirection to locate our cloned fragments.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00