Go to file
Bruce Ashfield 6f7bdb7bba runc-opencontainers: update to 1.1.7
Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits:

    f0ecf30b VERSION: back to development
    860f061b VERSION: release 1.1.7
    c1063b1c runc.keyring: add Akihiro Suda
    b0fae8c4 scripts: keyring validate: print some more information
    79a52b43 libct/cg/sd: use systemd version when generating dev props
    6a806d4d runc.keyring: add Kolyshkin
    b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key
    63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key
    3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys
    853d5e38 scripts: release: add verification checks for signing keys
    bd1d5370 release: add runc.keyring file and script
    7cd72cc3 VERSION: go back to development
    0f48801a VERSION: release 1.1.6
    e4ce94e2 libct/cg: add misc controller to v1 drivers
    10cfd816 libctr/cgroups: don't take init's cgroup into account
    d30d240b tests/int: test for CAP_DAC_OVERRIDE
    840b9539 Fix runc run "permission denied" when rootless
    165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test
    26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits
    8d9d1d25 libct/int: make TestFdLeaks more robust
    b66d6d56 libct/int: wording nits
    ddbb6d41 libc/int: add/use runContainerOk wrapper
    3531cc2d ci: add call to check-config.sh
    ed9a0e1d ci/gha: bump actions/cache to v3
    7683e508 ci/gha: switch to Go 1.19.x for validate
    568d4407 ci/gha: bump golangci-lint to 1.48
    1f9e36c0 libct: fixes for godoc 1.19
    50f06554 ci: bump golangci-lint to 1.46
    77472ef6 libct: fix staticcheck warning
    9994fe3f libct: suppress strings.Title deprecation warning
    403ea1f0 ci/gha: convert lint-extra from a job to a step
    d2c83bdf ci/gha: switch to Go 1.18.x for validate
    03a631df ci: switch to golangci-lint 1.45
    e5a5522a Add supported Go releases (1.19, 1.20)
    3ce12483 Dockerfile: fix build wrt new git
    bac06cf6 ci/gha: remove stable: when installing Go
    e74040e0 build(deps): bump actions/setup-go from 2 to 3
    55462355 Require Go 1.17, bump x/sys and x/net
    3ce9c1e2 tests: Fix weird error on centos-9
    abd6adde ci: bump shfmt to 3.5.1, simplify CI setup
    1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck
    9201794a script/check-config.sh: fix remaining shellcheck warnings
    8b976428 shfmt: add more files
    b0fbd2f8 script/check-config.sh: fix SC2166 warnings
    7f8cb3d6 script/check-config.sh: fix wrap_color usage
    f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7
    12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver
    e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists
    931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1)
    b46ac860 libct/cg/sd: refactor startUnit
    822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section
    54cfb25d Makefile: add verify-changelog as release dependency
    7b3ac330 verify-changelog: allow non-ASCII
    37e586ab CHANGELOG: fix a typo
    de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link
    1fe2ec53 tests/int/mounts: only check non-shadowed mounts
    9b8ebe4d tests/int/mount: fix issues with ro cgroup test
    17a2d451 VERSION: back to development

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:42:33 -04:00
classes conf: make container recipes parseable when virtualization is not set 2023-03-20 09:06:47 -04:00
conf conf: introduce container configuration values 2023-03-08 17:08:02 -05:00
docs podman: Add support for rootless mode 2022-07-15 17:11:58 -04:00
dynamic-layers xen: Make xilinx extension generic 2022-10-26 10:09:57 -04:00
files fs-perms-nagios.txt: add perms conf file 2018-09-06 12:45:17 -04:00
lib/oeqa/runtime/cases xtf: add testimage integration to run XTF test cases in OEQA 2021-09-02 16:36:23 -04:00
recipes-containers runc-opencontainers: update to 1.1.7 2023-06-07 16:42:33 -04:00
recipes-core busybox-initrd: update include 2023-01-31 22:50:41 -05:00
recipes-demo app-container: temporarily copy contens of .inc file to recipe 2022-09-12 16:45:26 -04:00
recipes-devtools yq: Redefine do_compile 2023-05-17 11:48:46 -04:00
recipes-extended xtf: Supply DEBUG_PREFIX_MAP to the compiler flags 2023-05-17 11:52:29 -04:00
recipes-graphics/xorg-xserver global: overrides syntax conversion 2021-08-02 17:17:53 -04:00
recipes-kernel kernel: add 6.2 kernel configuration include 2023-03-08 17:08:01 -05:00
recipes-networking ovs: update to 3.1.1 2023-04-21 11:34:42 -04:00
scripts/lib/wic/plugins/source wic: add support for bootable pcbios partition with Xen hypervisor 2020-02-27 16:59:22 -05:00
wic xen-image-minimal: supply bootloader config for qemux86-64 machine 2021-09-02 16:36:23 -04:00
.gitignore buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURES 2023-04-12 13:10:11 -04:00
COPYING.MIT Initial meta-xen layer documentation. 2012-06-21 15:51:11 -06:00
MAINTAINERS MAINTAINERS: add xtf and the raspberry pi dynamic layer for Xen 2021-12-16 21:45:00 -05:00
meta-virt-roadmap.txt docs: roadmap: add missing workflow items 2019-10-28 11:56:10 -04:00
README README: remove some cri-o specific layer dependencies 2023-02-17 15:34:51 -05:00

meta-virtualization

This layer provides support for building Xen, KVM, Libvirt, and associated packages necessary for constructing OE-based virtualized solutions.

The bbappend files for some recipes (e.g. linux-yocto) in this layer need to have 'virtualization' in DISTRO_FEATURES to have effect. To enable them, add in configuration file the following line.

DISTRO_FEATURES:append = " virtualization"

If meta-virtualization is included, but virtualization is not enabled as a distro feature a warning is printed at parse time:

You have included the meta-virtualization layer, but
'virtualization' has not been enabled in your DISTRO_FEATURES. Some bbappend files
may not take effect. See the meta-virtualization README for details on enabling
virtualization support.

If you know what you are doing, this warning can be disabled by setting the following variable in your configuration:

SKIP_META_VIRT_SANITY_CHECK = 1

Depending on your use case, there are other distro features in meta-virtualization that may also be enabled:

  • xen: enables xen functionality in various packages (kernel, libvirt, etc)
  • kvm: enables KVM configurations in the kernel and autoloads modules
  • k8s: enables kubernets configurations in the kernel, tools and configuration
  • aufs: enables aufs support in docker and linux-yocto
  • x11: enable xen and libvirt functionality related to x11
  • selinux: enables functionality in libvirt and lxc
  • systemd: enable systemd services and unit files (for recipes for support)
  • sysvinit: enable sysvinit scripts (for recipes with support)
  • seccomp: enable seccomp support for packages that have the capability.

Dependencies

This layer depends on:

URI: git://github.com/openembedded/openembedded-core.git branch: master revision: HEAD prio: default

URI: git://github.com/openembedded/meta-openembedded.git branch: master revision: HEAD layers: meta-oe meta-networking meta-filesystems meta-python

BBFILE_PRIORITY_openembedded-layer = "4"

Required for Xen XSM policy: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default

Required for Ceph: URI: git://git.yoctoproject.org/meta-cloud-services branch: master revision: HEAD prio: default

Required for cri-o: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default

Community / Colaboration

Repository: https://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/ Mailing list: https://lists.yoctoproject.org/g/meta-virtualization IRC: libera.chat #meta-virt channel

Maintenance

Send pull requests, patches, comments or questions to meta-virtualization@lists.yoctoproject.org

Maintainer: Bruce Ashfield bruce.ashfield@gmail.com see MAINTAINERS for more specific information

When sending single patches, please using something like: $ git send-email -1 -M --to meta-virtualization@lists.yoctoproject.org --subject-prefix='meta-virtualization][PATCH'

License

All metadata is MIT licensed unless otherwise stated. Source code included in tree for individual recipes is under the LICENSE stated in each recipe (.bb file) unless otherwise stated.