6d45724b26
Bumping crun to version 1.23.1-9-gca8e5c74, which comprises the following commits:
eb9912e0 build: add check for static builds
bb04c555 libocispec: sync
a9d12996 linux: never chown devices
eecadda9 tests: fix test_mount return type
38c5795e tests: add capabilities to net test
d20b23db NEWS: tag 1.23.1
f56fc445 utils: add bounds checking for Unix domain socket paths
59066cc9 ring_buffer: do not use the reserved byte
abc42863 utils: write to ring buffer whenever there is space available
7d21fa1e tests, podman: skip auth test
3fc25616 NEWS: tag version 1.23
69c3ba16 krun: define KRUN_NITRO_IMG_TYPE_EIF if missing
aa9e1c51 krun: drop unused variable
55d603f2 krun: enable virtio-gpu
e76c7451 container: refactor container_init_setup
7acad117 container: refactor libcrun_container_run_internal
e83abf35 linux: refactor do_mounts
f9edd528 container: use xmalloc instead of malloc and OOM
2dbee366 criu: Add support for tcp-close
3040a07f cgroup-resources: extract common pattern
d30d1512 linux: fix regression in libcrun_configure_network
220a39a6 krun: Give container access to nitro_enclaves device
ac297b79 krun: Allow /dev/kvm to be unavailable with nitro
500f1c92 krun: Configure nitro enclave data if enabled
d9ddb935 krun: Use nitro flavor when indicated
702d09b7 krun: Open libkrun-nitro handle during loading
54771724 krun: End loop traversal when SEV device found
72b35020 linux: add missing crun_make_error
e2789c70 container: propagate error from exec setup
4e5375cb libcrun: inline can_skip into write_cgroup_resources_v2
ad9f90b7 tests: add test_bpf_devices
6f466dcc cgroup,systemd: do not install duplicated ebpf
edf66788 cgroup,systemd: check for loaded bpf on update
227bd0f1 cgroup,systemd: use BPFProgram=device if supported
832db004 write_devices_resources_v2: refactor
1dae52ba cgroup,systemd: allow empty slice in cgroupsPath
5610c0cf RPM/Packit: wasmedge support Fedora-only
39bdaaef Packit: disable propose_downstream for CentOS Stream
c6dfc871 RPM: placeholder check to silence rpmlint
8d61001d crun: print version even with invalid rundir
76805119 Remove dead code after exit
0b9aab09 handler: add NULL check to handler_manager_free
a755e043 utils: Add NULL pointer check to cleanup_close_vecp
66d710ce linux: add NULL check to cleanup_free_init_statusp
ce47a219 linux: Add NULL pointer checks to free_remount
54d4b042 string_map: ignore empty map
f25352f9 linux: limit mounts creation outside of namespace
d51df096 lua: clean up unused defines
4b7257d4 linux: fix regression with idmapped mounts
83f601d3 lua: fix build errors
4de19b63 NEWS: tag 1.22
aa082854 tests: install catatonit package
72e5468e tests: improve cpu_weight_systemd coverage
4998c928 cgroup: improve conversion from shares to weight
aaeeefc3 tests: install gperf on alpine
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|---|---|---|
| classes | ||
| conf | ||
| docs | ||
| dynamic-layers | ||
| files | ||
| lib/oeqa/runtime/cases | ||
| recipes-containers | ||
| recipes-core | ||
| recipes-demo | ||
| recipes-devtools | ||
| recipes-extended | ||
| recipes-graphics/xorg-xserver | ||
| recipes-kernel | ||
| recipes-networking | ||
| scripts | ||
| wic | ||
| .gitignore | ||
| COPYING.MIT | ||
| MAINTAINERS | ||
| meta-virt-roadmap.txt | ||
| README.md | ||
| SECURITY.md | ||
meta-virtualization
This layer provides support for building Xen, KVM, Libvirt, and associated packages necessary for constructing OE-based virtualized solutions.
The bbappend files for some recipes (e.g. linux-yocto) in this layer need to have 'virtualization' in DISTRO_FEATURES to have effect. To enable them, add in configuration file the following line.
DISTRO_FEATURES:append = " virtualization"
If meta-virtualization is included, but virtualization is not enabled as a distro feature a warning is printed at parse time:
You have included the meta-virtualization layer, but
'virtualization' has not been enabled in your DISTRO_FEATURES. Some bbappend files
may not take effect. See the meta-virtualization README for details on enabling
virtualization support.
If you know what you are doing, this warning can be disabled by setting the following variable in your configuration:
SKIP_META_VIRT_SANITY_CHECK = 1
Depending on your use case, there are other distro features in meta-virtualization that may also be enabled:
- xen: enables xen functionality in various packages (kernel, libvirt, etc)
- kvm: enables KVM configurations in the kernel and autoloads modules
- k8s: enables kubernets configurations in the kernel, tools and configuration
- aufs: enables aufs support in docker and linux-yocto
- x11: enable xen and libvirt functionality related to x11
- selinux: enables functionality in libvirt and lxc
- systemd: enable systemd services and unit files (for recipes for support)
- sysvinit: enable sysvinit scripts (for recipes with support)
- seccomp: enable seccomp support for packages that have the capability.
Dependencies
This layer depends on:
URI: git://github.com/openembedded/openembedded-core.git branch: master revision: HEAD prio: default
URI: git://github.com/openembedded/meta-openembedded.git branch: master revision: HEAD layers: meta-oe meta-networking meta-filesystems meta-python
Required for Xen XSM policy: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default
Required for Ceph: URI: git://git.yoctoproject.org/meta-cloud-services branch: master revision: HEAD prio: default
Required for cri-o: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default
Community / Colaboration
Repository: https://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/ Mailing list: https://lists.yoctoproject.org/g/meta-virtualization IRC: libera.chat #meta-virt channel
Maintenance
Send pull requests, patches, comments or questions to meta-virtualization@lists.yoctoproject.org
Maintainer: Bruce Ashfield bruce.ashfield@gmail.com see MAINTAINERS for more specific information
When sending single patches, please using something like: $ git send-email -1 -M --to meta-virtualization@lists.yoctoproject.org --subject-prefix='meta-virtualization][PATCH'
License
All metadata is MIT licensed unless otherwise stated. Source code included in tree for individual recipes is under the LICENSE stated in each recipe (.bb file) unless otherwise stated.