summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* openvswitch: fix CVE-2020-35498 limitation in the OVS packet parsingdunfellHitendra Prajapati2024-05-132-0/+152
| | | | | | | Upstream-Status: Backport https://github.com/openvswitch/ovs/commit/0625dc79aec73b966f206e55655a2816696246d0 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Backport fix for CVE-2021-25735 and CVE-2021-25737Vijay Anusuri2023-10-024-0/+1279
| | | | | | | | | | | Upstream-commit: https://github.com/kubernetes/kubernetes/commit/e612ebfdff22e4bd27ad8345f7c82f074bfedf26 & https://github.com/kubernetes/kubernetes/commit/d57f0641d60b73934ebc2cdf4b6a63182217d10c & https://github.com/kubernetes/kubernetes/commit/901e8e07e1f031456ecd7fefce965aaa05916825 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Backport fix for CVE-2020-8565 & CVE-2020-8566Vijay Anusuri2023-08-273-0/+93
| | | | | | | | Upstream-commit:https://github.com/kubernetes/kubernetes/commit/f0f52255412cbc6834bd225a59608ebb4a0d399b & https://github.com/kubernetes/kubernetes/commit/e91ec4fad3366d2dee020919f7c2a0d7b52fd3ea Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Backport fix for CVE-2020-8564Vijay Anusuri2023-08-222-0/+167
| | | | | | | Upstream-commit: https://github.com/kubernetes/kubernetes/commit/11793434dac97a49bfed0150b56ac63e5dc34634 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: backport patch to fix CVE-2022-47952Xiangyu Chen2023-05-192-0/+77
| | | | | Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.12Bruce Ashfield2023-05-192-16/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refresh our wget -> curl patch for context, but otherwise, no other changes are required. Bumping lxc to version lxc-4.0.12-8-g5ba5725cb, which comprises the following commits: 5ba5725cb cgroups: modify cgroup2 attach logic 1e4631641 ttys: ensure container_ttys= env variable is set correctly 8ef019a6c doc: Fix reverse allowlist/denylist in Japanese man page f1c4a17e7 cgroups: log fd of newly created cgroup f7446b4e1 cgroups: check that opened file descriptor is a cgroup filesystem 71ba7f656 doc: Fix reverse allowlist/denylist f314419d1 lxc-checkconfig: Fix bashism ca4c25c6e lxc-net: don't start by default inside lxc 7e37cc96b Release LXC 4.0.12 d678aa61e lxccontainer: allow xdev when creating the container dir bc61d2354 github: Clear default ACL on /home fb0e0b3dd github: add systemd-coredump 53e0d390c github: more detailed compilation instructions db84a8b6b github: log system info e9282b6a6 github: ensure system liblxc is wiped ad8a3bd68 lxccontainer: properly wrap lxcapi_create() bceb81cd2 build: simplify thread local storage handling 919da35b0 build: only enable LTO for regular builds d0a1e9c44 lxccontainer: simplify partial file creation 62b5c0051 lxccontainer: improve create_partial() bfe24cb6a lxccontainer: improve do_lxcapi_create() 1a5c236ac lxccontainer: improve do_lxcapi_save_config() bae0d7196 conf: log termination status 4eb09aaad conf: improve userns_exec_mapped_root() 928943280 github: stop installing gnupg now that it's unused 7c70b0d14 lxc-download: Rely on HTTPS only 199d2077c Update README.md: Fix broken link (403 Forbidden) 0b6b230e3 attach: don't pointlessly call cgroup_init() dbef704fb commands: log command during file descriptor retrieval 733f9c909 lxc-checkconfig.in: CONFIG_NF_NAT_IPV4 was removed from the kernel 2019-03-03 ce392e230 (trivial) Fix error message, failure was connect not bind 5628bff79 seccomp: close seccomp notifier fd in cleanup handler 1f2af83a9 seccomp: only guard seccomp notify behind HAVE_DECL_SECCOMP_NOTIFY_FD 9451303d5 api-extensions: don't advertise seccomp notify support if it's not compiled in 23d07c315 use 2 sysfs instances for sys:mixed 0dd3258bd Revert "api: ->save_config() doesn't need to create container dir" 93edd510a api: ->save_config() doesn't need to create container dir 28b2e04f1 cgroups: fix compiler warning 15515f9a3 Revert "initutils: use vfork() in lxc_container_init()" 41d2530d1 macro: ensure necessary io_uring flags are defined fc4e948c9 autotools: Avoid multiple liblxc.so with --enable-pam a616a311a build: refuse to compile with unsupported liburing version 93be4e512 tests: add lxc.proc.* test d8027e49c tests: add lxc.sysctls.* test 6f580343e test: improve logging helpers a10ff3418 conf: improve logging setting sysctl and /proc/<pid>/ parameters 334cf7beb conf: apply /proc/sys and /proc/<pid>/ parameters 1b74e01ad tests: include config.h c36379431 build: move _FILE_OFFSET_BITS to common option f24c234ee start: log signal name and number 4915c9112 process_utils: add signal_name() helper 78baec37d build: improve liburing support detection 1a102b310 mainloop: make ifdefs easier to follow cf931928f Replace last occurence of 'which' with 'command -v' 1ec5939b4 Replace deprecated backticks with $() construct fdfb4a13d Replace 'which' with 'command -v' in tests too 71743e811 start: check event loop type before closing fd f69e6b4d3 mainloop: make sure that descr->ring is allocated 1a8895855 Replace 'which' with 'command -v' 9219277cc build: add io-uring-event-loop option d04eb166c build: add static libcap to output bc51048b7 confile: don't use path_simplify() on lxc.{execute,init}.cmd 48728e988 conf: add cgroup2, cgroup2:ro, cgroup2:force, cgroup2:ro:force options 4d3aad49d AUTHORS: Update to point to git history e328a988e conf: handle kernels without or not using SMT d40b0deb4 doc: fix typo in English lxc.container.conf(5) 49fab27fc doc: Add lxc.sched.core to Japanese lxc.container.conf(5) 1ad1cab80 doc: add loglevels to ja and ko common options 1505f0780 conf: make it more obvious how auto-mount flags are defined 429233cf0 criu: support restoring containers with pre-created veth devices 48e079bf3 Release LXC 4.0.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.11Xu, Yanfei2023-05-195-182/+15
| | | | | | | | | | | | | | update to 4.0.11 1.drop two patches that have been integrated to upstream repo. 2.drop tests-add-no-validate-when-using-download-template.patch because it is no longer appropriate as the "download" has been replaced with "busybox" 3.fix the apply failure of templates-use-curl-instead-of-wget.patch 4.update lxc from 4.0.10 to 4.0.11 Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix -c command for lxc-attachsana kazi2023-05-192-0/+37
| | | | | | | | | | Added fix_c_command.patch the -c command seems to be broken because the passed context is ignored and always overwritten by the context specified in the config file. Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Sana Kazi <sanakazisk19@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.10 and switch to gitBruce Ashfield2023-05-191-6/+4
| | | | | | | | To more easily pull in fixes / backports from newer versions, switching to git. This also allows bisecting and easier support when we run into upgrade issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Enable seccomp support for lxcsana kazi2023-05-192-0/+48
| | | | | | | | | | | Enabled seccomp support for lxc. Also added a patch to enable seccomp.profile only when compiled with libseccomp. Currently, seccomp.profile is silently ignored. This could lead to the false impression that the seccomp filter is applied while it actually isn't. Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.9Bruce Ashfield2023-05-194-128/+29
| | | | | | | | | Bumping lxc to a newer 4.0 -stable release. We drop two patches that have been integrated to the upstream repo, but otherwise, things are the same. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: CVE-2021-3905 External triggered memory leakHitendra Prajapati2022-09-202-0/+29
| | | | | | | | | | | | | | | Source: https://gitlab.com/libvirt/libvirt MR: 121447 Type: Security Fix Disposition: Backport from https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 ChangeID: 8f3a31bbf11be6a5aef9b7cf6ed1c2e56c28ff44 Description: CVE-2021-3905 openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets. Affects openvswitch < 2.17.0 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: CVE-2021-3975 segmentation fault during VM shutdown can lead to ↵Hitendra Prajapati2022-09-132-0/+45
| | | | | | | | | | | | | | | | | vdsm hang Source: https://gitlab.com/libvirt/libvirt MR: 121161 Type: Security Fix Disposition: Backport from https://github.com/libvirt/libvirt/commit/1ac703a7d0789e46833f4013a3876c2e3af18ec7 ChangeID: 747f58e69ce4b1dc4b77277a6acf4e5742d19fad Description: CVE-2021-3975 libvirt: segmentation fault during VM shutdown can lead to vdsm hang. Affects libvirt < 7.1 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: CVE-2022-0897 missing locking in nwfilterConnectNumOfNWFilters can ↵Hitendra Prajapati2022-07-052-0/+58
| | | | | | | | | | | | | | | | | lead to denial of service Source: https://gitlab.com/libvirt/libvirt MR: 116994 Type: Security Fix Disposition: Backport from https://gitlab.com/libvirt/libvirt/-/commit/a4947e8f63c3e6b7b067b444f3d6cf674c0d7f36 ChangeID: 628f3cc089ee965dda670aa8f9ab169cec5cb63a Description: CVE-2022-0897 libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service. Affects "libvirt < 6.1" Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: CVE-2021-3667 Improper locking on ACL failureHitendra Prajapati2022-07-052-1/+33
| | | | | | | | | | | | | | | Source: https://gitlab.com/libvirt/libvirt MR: 116398 Type: Security Fix Disposition: Backport from https://gitlab.com/libvirt/libvirt/-/commit/447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87 ChangeID: 342935ee7e30ea636d14f2d53c503da511c4a04e Description: CVE-2021-3667 libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API. Affects libvirt < 6.1 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: add EXTRA_EXTLDFLAGS and use it to fix build with ↵Martin Jansa2022-04-063-2/+11
| | | | | | | | | | | | | | | | gold * Work around internal error in gold triggered due to DWARF-5 by forcing to use bfd even with ld-is-gold: _/OE/lge/build/webosose/dunfell/BUILD/work/qemux86_64-webos-linux/containerd-opencontainers/v1.2.14+gitAUTOINC+3b3e9d5f62-r0/git/src/import/cmd/containerd-shim /OE/lge/build/webosose/dunfell/BUILD/work/qemux86_64-webos-linux/containerd-opencontainers/v1.2.14+gitAUTOINC+3b3e9d5f62-r0/recipe-sysroot-native/usr/lib/x86_64-webos-linux/go/pkg/tool/linux_amd64/link: running x86_64-webos-linux-gcc failed: exit status 1 /OE/lge/build/webosose/dunfell/BUILD/work/qemux86_64-webos-linux/containerd-opencontainers/v1.2.14+gitAUTOINC+3b3e9d5f62-r0/recipe-sysroot-native/usr/bin/x86_64-webos-linux/../../libexec/x86_64-webos-linux/gcc/x86_64-webos-linux/9.3.0/ld: internal error in read_header_prolog, at ../../gold/dwarf_reader.cc:1678 collect2: error: ld returned 1 exit status * alternatively we can backport DWARF-5 support to binutils-2.34 used in dunfell like in: https://git.openembedded.org/openembedded-core/commit/?id=d07d4d739ae17787017f771dd2068fda0e836722 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: change branch to mainBruce Ashfield2022-01-271-1/+1
| | | | | | | The upstream project has renamed master -> main, so we change our SRC_URI to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-fsnotify: switch to main branchBruce Ashfield2022-01-141-1/+1
| | | | | | | The upstream project has changed from master -> main, so we update our branch to match .. otherwise, we fail the fetch! Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-{distribution,systemd}: convert github SRC_URIs to use https protocolMartin Jansa2021-11-062-2/+2
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun/oci-image-spec: specify https in github src_uriBruce Ashfield2021-11-052-2/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: convert github SRC_URIs to use https protocolMartin Jansa2021-11-0319-19/+19
| | | | | | | | | * apply the same also for recipes using PKG_NAME starting with github.com which the conversion script doesn't update automatically Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: convert github SRC_URIs to use https protocolBruce Ashfield2021-11-0361-70/+70
| | | | | | | | | | | github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update runtime-spec branch to mainBruce Ashfield2021-11-031-1/+1
| | | | | | | runtime-spec has moved to main instead of master, so we tweak our branch name to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-spec: update branch specification to mainBruce Ashfield2021-11-031-1/+1
| | | | | | | master has become main in the runtime spec, so we update our recipe to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* busybox: Add nsenter for podman runtimeNathan Dunne2021-10-182-0/+2
| | | | | | | Add nsenter to Busybox configuration as it is required by Podman at runtime Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Security fix for CVE-2021-3631Armin Kuster2021-09-162-0/+57
| | | | | | | | | | | | Source: https://libvirt.org/git/libvirt.git MR: 112956 Type: Security Fix Disposition: Backport from https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2 ChangeID: 314727e329e5b1351326737eb9c9232f465db184 Description: Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Security fix for CVE-2020-25637Armin Kuster2021-09-165-0/+271
| | | | | | | | | | | | | | | | | | | Source: https://libvirt.org/git/libvirt.git MR: 105864 Type: Security Fix Disposition: Backport from https://libvirt.org/git/libvirt.git ChangeID: 99bb9b4fc1b608e4e9a56b9d2308bfa54d9ba33c Description: * https://libvirt.org/git/?p=libvirt.git;a=commit;h=955029bd0ad7ef96000f529ac38204a8f4a96401 * https://libvirt.org/git/?p=libvirt.git;a=commit;h=50864dcda191eb35732dbd80fb6ca251a6bba923 * https://libvirt.org/git/?p=libvirt.git;a=commit;h=e4116eaa44cb366b59f7fe98f4b88d04c04970ad * https://libvirt.org/git/?p=libvirt.git;a=commit;h=a63b48c5ecef077bf0f909a85f453a605600cf05 Affects <= 6.3.0 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Security fix for CVE-2020-10701Armin Kuster2021-09-162-0/+40
| | | | | | | | | | | | | | Source: https://libvirt.org/git/libvirt.git MR: 110898 Type: Security Fix Disposition: Backport from https://libvirt.org/git/?p=libvirt.git;a=commit;h=4cc90c2e62df653e909ad31fd810224bf8bcf913 ChangeID: 73bff4861d76b0674547ead4d4b251b60705bb8c Description: Affect libvirt < 6.2.0 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.2.2Bruce Ashfield2021-09-091-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to 1.2.2, which along with the following commits, needed a slight tweak to the build target, and the location of the binary. Otherwise, everything remains the same. af2d2b41 Bump vendor/modules.txt in release-1.2 8237787b Bump golang.org/x/crypto to the latest 2294113c Bump to v1.2.2-dev bdb117de Bump to v1.2.1 fe57e80c Update nix pin with `make nixpkgs` 3c33cb45 Add a smoke test for signedIdentity:remapIdentity f94d85aa Split copyWithSignedIdentity from TestCopyVerifyingMirroredSignatures 6ee4b2dc integration test: sync k8s.gcr.io/pause instead of docker.io/alpine b3a15e72 integration test: use fedora-minimal for most manifest list tests f771cb0d Update vendor of containers/common and containers/storage c4fb9364 Fix reading the after-sync list of tags in SyncSuite.TestYamlUntagged 74420528 Bump github.com/containers/common from 0.31.1 to 0.31.2 fc78c93a fix creds sync from yaml 4987a672 Spelling 131b2b8c Bump github.com/containers/common from 0.31.0 to 0.31.1 6b260e16 Update nix pin with `make nixpkgs` 8cc9fcae update debian/ubuntu docs 0fb1121f Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 f36f7dbf Bump github.com/containers/storage from 1.24.1 to 1.24.3 07c0e6a5 Bump github.com/containers/common from 0.30.0 to 0.31.0 13ef9174 Bump github.com/containers/image/v5 from 5.8.1 to 5.9.0 8cd57ef8 Bump github.com/containers/common from 0.27.0 to 0.30.0 f3a8a736 Update to macOS 10.14 4597c095 update OSX Travis env before running tests 2ec251c2 Update installation docs for debian and ubuntu e717a591 Update install.md 901f7e9c vendor in containers/storage v1.24.1 containers/image v5.8,1 4b4ad628 Fix naming and language 6b007c70 Add information about multi-arch image to README 5d73dea5 Add --format option to skopeo inspect 82e461ff Switch to using errors.Wrapf rather then fmt.Errorsf e30abff3 Bump github.com/containers/image/v5 from 5.6.0 to 5.8.0 58c9eccf Bump github.com/containers/common from 0.26.0 to 0.27.0 958c361c Support namespaced logins for quay.io 72e8af59 install: make commands copy-pasteable 873fbee0 Fix #858 Add --all sync flag to emulate copy --all 1a3eb478 Fix #858 Add support for digests in sync bc0ecfc8 Bump github.com/containers/storage from 1.23.9 to 1.24.0 19f9a6ad Update nix pin with `make nixpkgs` 6d7d0e7d Bump github.com/containers/storage from 1.23.5 to 1.23.9 39f8117c add multi-arch builds for upstream and stable skopeo image via Travis e709329b Avoid overriding LDFLAGS in Makefile 35daba11 Dockerfile: install openssl 65c5b0bf integration tests: disable `ls` for logs cd884fa5 Travis: bump go to 1.15.x 3a724640 Use osusergo build tag for static build a7f4b26f Update install.md 98fdb042 Fix `skopeo login` example in README a75daba3 Bump github.com/containers/common from 0.24.0 to 0.26.0 67d72d27 Bump github.com/spf13/cobra from 1.0.0 to 1.1.1 035e2549 install.md: mention Nix/NixOS 0954077f Update install.md bde39ce9 Update install.md a422316d Update README.md 21aa04e3 Make Makefile a little easier to use 50ff352e Update nix pin with `make nixpkgs` 69f51ac1 Bump github.com/containers/common from 0.23.0 to 0.24.0 f9773889 Add Subject Alternative Name to local openssl cert 4ba7d501 Makefile: add a local-cross target 12729c4d Bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0 1c45df1e Bump github.com/containers/common from 0.22.0 to 0.23.0 248a1dd0 include OBS install steps for CentOS 3a75b51b Move to v1.2.1-dev 2b4097bc Bump to v1.2.0 467b462b Keep options order in code and add missing bash completions 242b573f Adding periods 2d5f12b9 Add --registry-token tests to utils_tests.go 3c73c0c0 Add --registry-token flags to support Bearer token authentication ec17cfcb Update nix pin with `make nixpkgs` 1d0b1671 Bump github.com/containers/image/v5 from 5.5.2 to 5.6.0 05d172a1 Bump github.com/containers/common from 0.21.0 to 0.22.0 62bafb10 Fix problems found by codespell 4eda1d09 Bump github.com/containers/storage from 1.23.4 to 1.23.5 23cb1b7f Remove an obsolete documentation of (make binary-static) c1f984a1 Bump github.com/containers/storage from 1.23.3 to 1.23.4 8767e73f Bump github.com/containers/common from 0.20.3 to 0.21.0 07146219 Update nix pin with `make nixpkgs` 3bb23e35 use base image golang for build c8c8d5db Bump github.com/containers/storage from 1.23.1 to 1.23.2 ad3d4aec Fix skopeo-login docs typo 69116421 Bump github.com/containers/storage from 1.23.0 to 1.23.1 3ede91cc Bump github.com/containers/common from 0.20.2 to 0.20.3 5ad62b94 Bump github.com/containers/image/v5 from 5.5.1 to 5.5.2 b05933fb Bump github.com/containers/common from 0.18.0 to 0.20.2 e5f54909 -buildmode=pie is not supported for some arch 915f40d1 Build static binary with `buildGoModule` 0c2c7f40 Update docs/skopeo.1.md 135ce431 Add oci-archive to transport list, and link to the authoritative man page c750be01 Use an inter-registry copy as the example for (skopeo copy) 84d051fc Use c/common retry package 56f8222e Add an extra clarification to skopeo-copy(1) c24363cc Bump github.com/containers/storage from 1.21.2 to 1.22.0 4fb724fb Make InspectOutput an external object e23b7800 Fix make clean to actually remove binaries d9058b30 Switch containers/libpod->containers/podman 26e6db1c Dockerfile.build: Upgrade to Ubuntu 20.04 b7cdcb00 Bump github.com/containers/common from 0.16.0 to 0.18.0 4012d0e3 Bump github.com/containers/storage from 1.21.1 to 1.21.2 84c53d10 Retry on skopeo subcommands 960b610f Bump github.com/containers/common from 0.15.2 to 0.16.0 ebc43826 vendor golang.org/x/text@v0.3.3 8f5eb45b Bump github.com/containers/storage from 1.21.0 to 1.21.1 5e2264d2 Bump github.com/containers/storage from 1.20.2 to 1.21.0 19f9a5c2 Bump github.com/hashicorp/go-multierror from 1.0.0 to 1.1.0 0858caff Retry skopeo inspect command 2e343342 Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3 0382b016 Fix macOS builds in Travis 142142c0 Bump github.com/containers/common from 0.15.1 to 0.15.2 52b3a5ba Bump github.com/containers/common from 0.14.3 to 0.15.1 b17fb08f update enc/dec docs to be consistent with buildah dd2e70e9 nix run -f channel:nixos-20.03 91dc0f3f Bump github.com/containers/common from 0.14.0 to 0.14.3 0e2611d3 Run htpasswd from our build-container instead of registry:2 0f458eec Add nix derivation for static builds 6b960ec0 Cleanup Dockerfile builds fdc58131 Move to v1.1.1-dev 63085f5b Bump to v1.1.0 dd7dd753 vendor github.com/containers/image/v5@v5.5.1 b70dfae2 vendor github.com/containers/common v0.14.0 9bafa7e8 Bump github.com/containers/common from 0.13.0 to 0.13.1 6198daeb Correct a typo in docs/skopeo-sync.1.md 9e99ad99 Bump github.com/containers/common from 0.12.0 to 0.13.0 c36502ce Bump github.com/stretchr/testify from 1.6.0 to 1.6.1 4eaaf312 Bump github.com/containers/storage from 1.20.1 to 1.20.2 5284f6d8 Bump github.com/stretchr/testify from 1.5.1 to 1.6.0 ae97c667 Bump github.com/containers/common from 0.11.4 to 0.12.0 8b4b9543 Fix error handling on invalid regex c103d652 Drop redundant fmt.Sprintf inside erorrs.Wrapf/Errorf c5183d0e Use MatchString instead of Match with a manual conversion 16b43525 Use reference.Tagged to extract the tag from a reference 35f3595d Inline isTagSpecified into its only caller 0ee81dc9 Use a reference.Named, not types.ImageReference, in imagesToCopy 80588509 Clarify imagesToCopy control flow 97ec6873 Work with a reference.Named, not strings, in imagesToCopyFromRegistry d16cd399 Use a reference.Named, not types.ImageReference, in imagesToCopyFromRepo 7439f94e Remove the repoReference parameter of imagesToCopyFromRepo 44338073 Don't use path.Join to form repository names 56c6325b Share the logrus.WithFields settings over the loop bodies 0ae9db5d Clarify control flow when handling the tags list 677c29bf Only create a SystemContext once per registry 72376c41 Fix the recently added example in the man page. 322625ee Use a separate field for the "sync images with tag matching regex" feature 9c1936fd Add upstream and testing container images a51af64d Bump github.com/containers/storage from 1.19.2 to 1.20.1 a31d6069 Bump github.com/containers/common from 0.11.2 to 0.11.4 2330455c there is a brew formula for skopeo bec7f697 Add tags to support regular expressions in yaml conf add relevant test cases and documentation update the sync doc 60ecaffb Add Skopeo Stable Image Dockerfile for Quay 2fe7087d Move to v1.0.1-dev bd162028 Bump to v1.0.0 5093d5b5 Update skopeo readme and man page 1b2de8ec Update docs/skopeo-sync.1.md ab230050 Add links to configuration man pages 4244d682 Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0 3247c0d2 Bump gopkg.in/yaml.v2 from 2.2.8 to 2.3.0 eb024319 Bump github.com/containers/storage from 1.19.1 to 1.19.2 b79a37ea v0.11.2 containers/common 0ec2610f Add skopeo login&logout e21d6b36 Update containers/image to v5.4.4 a6ab2291 Add tests for using signatures with mirrors 8f845aac Update c/image for https://github.com/containers/image/pull/912 439ea830 Add Security Policy 8d252f82 fix copy doc 46fbbbd2 Use cobra in skopeo a6abdb85 Bump github.com/sirupsen/logrus from 1.5.0 to 1.6.0 02407d98 Fix TestCopyAtomicExtension 116add9d Bump github.com/containers/storage from 1.18.2 to 1.19.0 5f8d3fc6 Move to v0.2.1-dev 1119299c Bump to v0.2.0 cf4dff47 Fix for yet another breaking podman change 17848a18 Run (go mod tidy) before (go mod vendor) 2873d8ec Revert "Bump github.com/urfave/cli from 1.22.1 to 1.22.4" 702165af Fix (make vendor) 8c8d9bd2 Bump github.com/urfave/cli from 1.22.1 to 1.22.4 5b479b10 Bump containers/image to v5.4.3 f68b53af make vendor: run `tidy` after `vendor` 65692366 vendor c/image v5.4.2 0eef946e Bump github.com/containers/image/v5 from 5.4.0 to 5.4.1 82e79e3f Remove dependency on buildah 325327dc Bump github.com/containers/image/v5 from 5.3.1 to 5.4.0 6e3f4c99 Update on #834: force runc only when cgroupsv1 27b330f6 Revert the removal of buildah dependency f231b777 Update docs/skopeo.1.md 55044627 Add example with repository Fixes #854 aa20fbfd Skopeo should support for BigFilesTemporaryDir (SystemContext) 274efdf2 Update containers/image v5.3.1 33616424 Bump github.com/containers/storage from 1.16.5 to 1.16.6 970af7d1 Bump github.com/containers/image/v5 from 5.2.1 to 5.3.0 1e7fe55b Use fully-qualified image names 081e4834 Bump github.com/containers/common from 0.5.0 to 0.6.1 bd59677a Bump github.com/containers/storage from 1.16.3 to 1.16.5 dda59750 Bump github.com/containers/common from 0.4.4 to 0.5.0 ebeb1c3f Bump github.com/containers/storage from 1.16.2 to 1.16.3 33ebce08 Bump github.com/containers/common from 0.4.3 to 0.4.4 0752e837 Bump github.com/containers/common from 0.4.2 to 0.4.3 406d3eb1 Bump github.com/containers/storage from 1.16.1 to 1.16.2 bae33781 Add Ubuntu/Debian install instructions 7dcfc183 Bump github.com/containers/storage from 1.16.0 to 1.16.1 4e45fcc5 Mention CentOS/RHEL in installation instructions 2e65e64c CI: force Podman to use runc ef1b005c Bump github.com/containers/common from 0.2.1 to 0.4.2 7be2a1bf Bump github.com/stretchr/testify from 1.5.0 to 1.5.1 f489ba7b bump to a supported ubuntu release df2966b7 add support for REGISTRY_AUTH_FILE 8d1a4649 Partial image encryption support 377ba25c Bump github.com/stretchr/testify from 1.4.0 to 1.5.0 1d136f05 Bump github.com/containers/storage from 1.15.8 to 1.16.0 7b9629d6 Bump github.com/containers/common from 0.2.0 to 0.2.1 07c89b49 Fix wrong import of docker reference a9854e11 Remove the list_tags integration test since it does not cover much not already tested by the upstream container/images repo or local unit tests 36fdc062 Updates based on code review to simplify logic and tests 5554964a Fix inconsistency in manpage example for list-tags b0cfab1d Fix formatting on test cce44c45 Adds "list-tags" command to list tags with no known tag required. Fixes #276 f8302650 Bump github.com/containers/common from 0.1.4 to 0.2.0 ba8417ed Add Code of Conduct 759dc98b bump to v0.1.42-dev 7d080caa v0.1.41 b6e7fbdf Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1 b59c018a Bump gopkg.in/yaml.v2 from 2.2.7 to 2.2.8 e3f9f55c Bump github.com/containers/common from 0.0.7 to 0.1.4 2c0a4c9c Remove the reference to openshift/api a7297d4d vendor github.com/containers/image/v5@v5.2.0 7cbb8ad3 Manually update buildah to v1.13.1 4489ddd8 add specific authfile options to copy (and sync) command. c6a731bb Adds override-variant to man pages 222beaf4 Adds the --override-variant command line flag 6c7dc9b7 Bump github.com/containers/buildah from 1.11.6 to 1.12.0 27b3e218 Add context to --encryption-key / --decryption-key processing failures 17b921cb Bump github.com/containers/storage from 1.15.2 to 1.15.3 2f2dc646 Bump github.com/containers/buildah from 1.11.5 to 1.11.6 b0da0858 remove direct reference on c/image/storage 7d3c3ce5 Makefile: set GOBIN 21613f19 Bump gopkg.in/yaml.v2 from 2.2.2 to 2.2.7 afaa9e7f Bump github.com/containers/storage from 1.15.1 to 1.15.2 9c402f37 Introduce the sync command 8ccd7b99 openshift cluster: remove .docker directory on teardown 04bc64f5 Bump github.com/containers/storage from 1.14.0 to 1.15.1 73248bd6 document installation via apk on alpine c6bc2367 Fix typos in doc for image encryption 39ff039b Image encryption/decryption support in skopeo 88fd1172 make vendor-in-container 5f3219a8 Bump github.com/containers/buildah from 1.11.4 to 1.11.5 23d9383a Travis: use go v1.13 af073483 Use a Windows Nano Server image instead of Server Core for multi-arch testing 81caa0fa Increase test timeout to 15 minutes dd66c1d3 Run the test-system container without --net=host 6991ba85 Mount /run/systemd/journal/socket into test-system containers db877dca Don't unnecessarily filter out vendor from (go list ./...) output 8eba94f2 Use -mod=vendor in (go {list,test,vet}) 05ae513b Bump github.com/containers/buildah from 1.8.4 to 1.11.4 876595e6 Bump github.com/urfave/cli from 1.20.0 to 1.22.1 140b47e8 skopeo: drop support for ostree cd8c0085 Don't critically fail on a 403 when listing tags d83d0819 Revert "Temporarily work around auth.json location confusion" ce2db022 Remove references to atomic df92a33c Remove references to storage.conf b21a5970 Dockerfile: use golang-github-cpuguy83-go-md2man a18a5eae bump version to v0.1.41-dev be6146b0 release skopeo v0.1.40 8f24d281 vendor containers/image v5.0.0 2553a230 systemtest: inspect container image different from current platform arch 7d251f5a copy: add a --all/-a flag 58248412 System tests: various fixes 4962559e Temporarily work around auth.json location confusion 7922028d Update to c/image v4.0.1 51b54191 systemtest: copy: docker->storage->oci-archive 1c243a5b systemtest/010-inspect.bats: require only PATH 8d1bb150 systemtest: add simple env test in inspect.bats 8c96dca3 bash completion: add comments to keep scattered options in sync 1d8f5f29 bash completion: use read -r instead of disabling SC2207 b31f0da5 bash completion: support --opt arg completion a02e57dd bash-completion: use replacement instead of sed a000c194 bash completion: disable shellcheck SC2207 86e35643 bash completion: double-quote to avoid re-splitting c61a5ea2 bash completions: use bash replacement instead of sed 89bb6158 bash completion: remove unused variable 646e197e bash-completions: split decl and assignment to avoid masking retvals 699c2556 bash completion: double-quote fixes 0c579aca bash completion: hard-set PROG=skopeo bc8281c0 bash completion: remove unused variable 91510e39 bash completion: use `||` instead of `-o` 7b0db25a bash completion: rm eval on assigned variable a36d81c5 copy: add --dest-compress-format and --dest-compress-level 976dd83a flag: add optionalIntValue a1c5a1f4 Makefile: use go proxy 43b014c8 inspect --raw: skip the NewImage() step f1d8451b update OCI image-spec to 775207bd45b6cb8153ce218cc59351799217451f a778e595 inspect.go: inspect env variables 0f1ded2a ostree: use both image and & storage buildtags 89d6d0c7 bump to v0.1.40-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: uprev 1.8.1 > 2.0.1Ming Liu2021-09-091-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to 2.0.1 to pickup bugfixes and security changes. The following commits comprise this update: a11c4ead1 Bump to v2.0.1 6a541f680 Merge pull request #6780 from mheon/even_more_201_backports f7b16d017 Update release notes with further v2.0.1 changes 8bb986137 Fix inspect to display multiple label: changes 2ad9dcc07 Set syslog for exit commands on log-level=debug 723a9e308 Friendly amendment for pr 6751 68543bbec podman run/create: support all transports c69ce171a systemd generate: allow manual restart of container units in pods 9de1581e9 Revert sending --remote flag to containers dc22350be Print port mappings in `ps` for ctrs sharing network 48ce67fb5 Merge pull request #6776 from vrothberg/2.0-vendor-common 6eefff647 vendor github.com/containers/common@v0.14.3 0b9143df8 Merge pull request #6758 from mheon/v2.0.1_backports 915f8698f Update release notes for v2.0.1 8e428fa4e utils: drop default mapping when running uid!=0 eb9fd40d2 Set stop signal to 15 when not explicitly set 6594d5d65 podman untag: error if tag doesn't exist 639b809c8 Reformat inspect network settings 01bc6bdda APIv2: Return `StatusCreated` from volume creation 1cc603c1f APIv2:fix: Remove `/json` from compat network EPs d26662484 Fix ssh-agent support d94644d35 libpod: specify mappings to the storage f425aede4 APIv2:doc: Fix swagger doc to refer to volumes ddf78b2ba Add podman network to bash command completions bfd303e16 Fix typo in manpage for `podman auto update`. 9a4517b37 Add JSON output field for ps 61bd64573 V2 podman system connection f81ad0058 wip cd0b18c24 image load: no args required 8fbfffc08 Re-add PODMAN_USERNS environment variable 0b4dcc7a3 Fix conflicts between privileged and other flags 7ea37dfe1 Bump required go version to 1.13 36d8b6979 Add explicit command to alpine container in test case. 03f952cfa Use POLL_DURATION for timer 07f535d8b Stop following logs using timers dbce3468e "pod" was being truncated to "po" in the names of the generated systemd unit files. 5d9ec1ce7 rootless_linux: improve error message 37abb88aa Fix podman build handling of --http-proxy flag 27120bfba correct the absolute path of `rm` executable 4af208142 Merge pull request #6711 from lsm5/v2.0-custom-GO_BUILD-backport 0ac4061bd Makefile: allow customizable GO_BUILD 13924bac1 Merge pull request #6695 from cevich/update_v2.0 bade38c32 Merge pull request #6697 from mheon/bump_v2.0.0 c866e584d Update release notes to reflect we are now v2.0 f458c5968 Bump to v2.0.1-dev eec482cae Bump to v2.0.0 64ba72363 Merge pull request #6694 from mheon/release_notes_2.0 5bda75cfd Update release notes for v2.0.0 89dbd1a91 Merge pull request #6674 from jwhonce/issues/6670 ed91524ae Merge pull request #6637 from jwhonce/issues/6574 ea8e61e4e Fixes #6670 bda4a6982 Correct logic for demux'ing channels 1a2eb3e61 Merge pull request #6677 from baude/pollOnEvents 33a602761 Merge pull request #6690 from vrothberg/fix-6687 f46664546 Poll on events for file reading bba433ed9 podman images --format json: pretty print 5ec29f8d4 Merge pull request #6684 from vrothberg/fix-ci 334d3b1ef CI: force registry:2.6 a2661b1c2 Merge pull request #6673 from ashley-cui/master 4dc934080 Fix remote docs e6b9b3ab2 Merge pull request #6656 from mheon/recursive_init 2e621aece Merge pull request #6662 from containers/dependabot/go_modules/k8s.io/apimachinery-0.18.4 1099ad6ac Merge pull request #6669 from vrothberg/unflake-rmi b20619e5b Allow recursive dependency start with Init() ec7822795 Bump k8s.io/apimachinery from 0.18.3 to 0.18.4 59cd8a0cf unflake rmi tests 3eb0ad04a Merge pull request #6663 from containers/dependabot/go_modules/k8s.io/api-0.18.4 ad33b2363 Merge pull request #6661 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.5 b5f7afd04 Merge pull request #6658 from mheon/experimental_no_more d0b3035c3 Merge pull request #6611 from lsm5/fix-Makefile-for-varlink 5d161c8ca Bump k8s.io/api from 0.18.3 to 0.18.4 16dbc160c Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5 6472b44c3 Merge pull request #6654 from rhatdan/keepid 6e410ede7 Merge pull request #6647 from rhatdan/caps 43ead88e8 Podman system service is no longer experimental fe69aa9ba Handle dropping capabilties correctly when running as non root user 7b00e49f6 Merge pull request #6560 from mheon/fix_exec_logdriver daabbc1a1 Merge pull request #6657 from mheon/bump-2.0.0-rc7 c385e6d36 Don't ignore --user flag in rootless --userns keepid 4b08d9ea5 Bump to v2.0.0-dev 5460ea87d Bump to v2.0.0-rc7 7b5073b46 Merge pull request #6655 from TomSweeneyRedHat/dev/tsweeney/b1_15_0 30c0fc9f1 Makefile: install.varlink needs to create dirs a76bf114d Merge pull request #6620 from jgallucci32/api-logs-separate 70f6cf7ff Merge pull request #6634 from baude/v2buildfixes fde8040fa Bump Buildah to v1.15.0 fd184fa4a Merge pull request #6522 from mheon/unless-stopped 585b14a9f Move logs functionality to separate file for APIv2 5694104c2 Merge pull request #6644 from jgallucci32/revert-log-follow d97b5b04a Merge pull request #6630 from ashley-cui/master 96b442172 Merge pull request #6641 from vrothberg/harden-units 6645e0d6f Merge pull request #6648 from vrothberg/vendor-image e5c343294 generate systemd: `ExecStopPost` for all units f29360648 Merge pull request #6631 from rhatdan/hooks 03e99c9b4 Revert #6591 to fix issue with failed tests ac4f4b148 vendor github.com/containers/image/v5@v5.5.1 6f1440a3e Add support for the unless-stopped restart policy 0e171b7b3 Do not share container log driver for exec 1acd2adcc Merge pull request #6640 from edsantiago/fix_flaky_logs_test 78ad57ebd Merge pull request #6636 from mheon/add_warnings 200afe7a9 Merge pull request #6583 from mheon/inspect_ctr_before_img 65c3a5660 fix misc remote build issues 38391ed25 Merge pull request #6622 from goochjj/podman_fix_init 6d5a432c2 "streaming output" logs test: fix flake 0d2b5532c Merge pull request #5852 from baude/v1prune 241326a9a Podman V2 birth 88c6fd06c Merge pull request #5837 from vrothberg/ignore 57f389728 Merge pull request #5848 from jwhonce/wip/options 8b178f12c Merge pull request #5839 from rhatdan/troubleshoot 1d93d2125 V2 Enable rootless 5def21140 Merge pull request #5842 from baude/v2bloat2 a8a61d976 Add SELinux volume information to troubleshoot.md 8c4d4b58e Merge pull request #5597 from sujil02/systemd-updates ba430bfe5 podman v2 remove bloat v2 c1bafb8b5 Merge pull request #5844 from baude/apiv2filteridfix e154249b4 allow filters to work when listing containers 8857ba20a Merge pull request #5835 from containers/dependabot/go_modules/github.com/containers/common-0.9.1 a037d9cd4 Update podman-generate-systemd man page 155a7d661 Merge pull request #5826 from cevich/gate_pip 09e821a8e Merge pull request #5690 from rhatdan/selinux 04e83f63a .gitignore: ignore v2 remote 084cfb81d Merge pull request #5834 from rhatdan/version 897847ccc Bump github.com/containers/common from 0.9.0 to 0.9.1 62803f8d3 Add version to podman info command d6b3bc18f Merge pull request #5752 from mheon/pod_inspect_structs c7d17613e Merge pull request #5827 from baude/v2bloat 0f7162d79 Merge pull request #5817 from rhatdan/selinux1 82ce9703e Add basic structure of output for APIv2 pod inspect 30d2964ff v2 bloat pruning phase 2 3500a8bc3 Merge pull request #5830 from baude/v2runtime c4ca3c71f Add support for selecting kvm and systemd labels 6e9622aa9 Merge pull request #5775 from sujil02/v2-container-prune ac94a96a7 Fix up SELinux labeling 195cb1127 Merge pull request #5671 from edsantiago/swagger-check 693a8039c Merge pull request #5776 from vrothberg/au bbc0c4a97 podmanv2 fix runtime assignment 97bded830 Merge pull request #5823 from mheon/update_readme_19 337e8d6d2 Merge pull request #5786 from containers/dependabot/go_modules/github.com/containers/common-0.9.0 e394ff407 Cirrus: Fix gate container build failure 2aca1b7f9 logformat: handle apiv2 results, add anchor links ef297d466 Merge pull request #5767 from edsantiago/logformat_add_anchors_and_apiv2 9b78bf929 Merge pull request #5770 from baude/v2events d522755b5 Update README to reflect that latest version is v1.9.0 cc9b78f07 Merge pull request #5820 from mheon/bump-1.9.0 ec4060aef Ability to prune container in api V2 4489440aa Bump to v2.0.0-dev d98572350 Bump to v1.9.0 37ed662f3 Merge pull request #5814 from baude/v2specgenprunelibpod 165aef776 podmanv2 events a756161e8 Merge pull request #5813 from baude/v2edtests2 ffcb99d83 Merge pull request #5818 from vrothberg/fix-nil-deref 123158e83 podmanV2: fix nil deref d83213634 test case added for image prune cache image 1e8e4bb33 note for skipping cache image added. 9dc9f5cf4 image prune skips images with child images. 714718794 v2specgen prune libpod 60dde457f More system test fixes on regressions f0b6cdede Merge pull request #5812 from jwhonce/wip/options d51727642 Add support for the global flags and config files ba26c763c swagger-check: new CI tool to cross-check swagger 0d01f09bf Merge pull request #5811 from mheon/bump-1.9.0-rc2 bf97e803d Bump to v1.9.0-dev 443aab15e Bump to v1.9.0-rc2 a6caae0b5 Merge pull request #5808 from baude/v2psformat2 01c5915a5 Merge pull request #5809 from mheon/release_notes_1.9.0_rc2 246ee9320 Merge pull request #5801 from baude/v2mount 548645e75 Update release notes for v1.9.0-RC2 1be617891 Merge pull request #5445 from sujil02/podFilter-new d1c26af14 apiv2 add bindings for logs|events e87fe4dbb Merge pull request #5550 from giuseppe/rootless-hidepid fea5f913e Don't include SUBDIR in windows.zip 1091440e5 rootless: fix usage with hidepid=1 68a5a85cc Bump github.com/containers/common from 0.5.0 to 0.6.1 fbe743501 V2 podman command bd9386dda Merge pull request #5542 from rhatdan/vendor 464a1cd48 Merge pull request #5540 from jwhonce/issues/5531 d66d54282 Merge pull request #5544 from baude/apiv2serveswagger c9c95a7e0 Merge pull request #5543 from edsantiago/swagger_fixes 52c835053 serve swagger when present f557cf91d swagger: more consistency fixes 67d0d1e50 Vendor in containers/buildah v1.14.3 45e7cbfef Merge pull request #5480 from vrothberg/auto-updates 651ddd356 Reduce CPU usage when --timeout=0 81005f463 New test: man page cross-ref against --help e89c6382a Add inspect for exec sessions 118e78c5d Add structure for new exec session tracking to DB f138405b4 Populate ExecSession with all required fields d9eb078e2 Merge pull request #5532 from baude/filetimeoutflake de43a00b5 Merge pull request #5533 from mheon/bump-1.8.2-rc1 f08b992f3 Merge pull request #5536 from giuseppe/avoid-conmon-zombie a6f5b6a48 podman: avoid conmon zombie on exec 15326f051 Filter pods through pod list api e9846b962 Bump to v1.8.2-dev c617484c1 Bump to v1.8.2-rc1 f3a28de32 Merge pull request #5528 from mheon/fix_master_vendor d47dc63cf Fix vendoring on master 14186ca28 fix timeout file flake bcdcfeb3e Merge pull request #5529 from mheon/release_notes_182_rc1 7c5ffe377 Update release notes for v1.8.2-rc1 83d2686f4 Fix vendoring on master 8f1ce4bdd Merge pull request #5524 from rhatdan/vendor f4e873c4e auto updates 68ef7aa4f Fix path of tmp_dir 9ef5d2875 Merge pull request #5449 from baude/manifests c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc a95e9e5b4 Bump github.com/containers/common from 0.4.2 to 0.5.0 40ac4779e Bump k8s.io/api from 0.17.3 to 0.17.4 e7e5d125f Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9 e6fba1e44 eat signal 23 in signal proxy 2099643aa add apiv2 healthcheck code c9f148fb1 Merge pull request #5470 from containers/dependabot/go_modules/github.com/containers/storage-1.16.3 d586e16ad Merge pull request #5484 from baude/bindingsnocolor ac6c8fb68 Merge pull request #5482 from baude/removeimagefilter 9215eb033 Cirrus: Disable non-docs release processing 194759b96 turn off color-mode for bindings 3aa58ccd0 remove imagefilter for varlink remote client 925da7411 Bump github.com/containers/storage from 1.16.2 to 1.16.3 9c7481dbd Merge pull request #5474 from giuseppe/detect-containers-rootlessport-child-exit 235f36786 Merge pull request #5469 from giuseppe/no-size-create-container 358578087 run --rmi test: make it work 19f5d557b Merge pull request #5468 from Akasurde/5244_follow_up 647dc33e1 rootlessport: detect rootless-child exit 8741eb8a9 create: do not calculate image size eb2d0a228 Follow up changes from #5244 78e090092 Merge pull request #5458 from baude/apiv2eventslibpod 9cfcf5692 Merge pull request #5460 from edsantiago/man_page_xref 9bc27118b Merge pull request #5372 from sujil02/podstatus dbb3de990 Merge pull request #5459 from mheon/bump_readme_181 3d1bff6db man page cross-reference fixes: part 2 29c071d4f Update version in README to v1.8.1 da9d21635 Merge pull request #5457 from mheon/bump-1.8.1 216a6091d [CI:DOCS]Add libpod event endpoint 8877fed86 Bump to v1.8.2-dev Testing has been performed across x86-64/arm/arm64 via cli and podman-compose. Signed-off-by: Ming Liu <ming.liu@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compse: update to latet 0.15 hashBruce Ashfield2021-09-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest commits, and switching to the named 'devel' branch (from master previously). The following commits are part of this update: 6289d25 fixes #236: compatible with docker-compose abc0813 Only pull each image once 9cd837f Fixes #236: Ensure project name works with podman a4b8b5e Fix 'podman-compose version' with no compose file in the working directory 5971f57 FIXES #249: update dotenv with some envs ab96f12 FIXES #249: update dotenv with some envs f6a3cb0 Allow environment variables to be unset 497355f Re-order environment/env_files to match compose 20a86ea add --no-cache arg to build 4e2e960 build specific service efba3a1 support str style configuration for env_file 9063976 BUG: 'podman stop -t 360.0' called for float, expects int on cli 3712b54 ENH: add timeout option to podman-compose down, as in https://docs.docker.com/compose/reference/down/ 294f8ee Hashlib to generate SHA256 instead of MD5 for FIPS 105b129 Fix infinite loop d3f3711 FIXES #181: accept init and init-path 7eacf14 MAINT: resolve https://github.com/containers/podman-compose/pull/180#issuecomment-632722974 8cd98ab MAINT: extend instead of append 047820d ENH: Added restart policy forwarding to podmann run, compose build args added to up args e7b1382 Add --build-arg to 'up' (Fixes #161) 64ed554 Allow empty default/error value in substitution 93bf39e Add Security Policy 5915ba3 Catch error when compose file is empty 1ca6a88 target once 7b40079 Pass "target" parameter when building an image. f9915c4 Check for target property when building images 1973340 Add support for --build-arg option e8147e3 Add support for cap_add/cap_drop 7f210ff fixing "Error: unknown flag: --shm_size" cbed801 start detached 6a42d68 add ports test 07a2430 Fixes #152: validate that podman is useable 5215782 Fixes #152: validate that podman is useable 03cbd29 pass volumes using -v 796e6a4 Avoid crash when no services are defined efcbc75 Pass ulimit parameters when building container dacc753 Add Code of Conduct 8c3b7e6 Added mount option delegated and cached 147f0ae Update README with dnf install instructions. 27d3caf Add support for privileged option e7a9bd3 Show stopped containers in ps ddd582c Add support for logs subcommand 169eaee Fix override of the run command c5f8973 Mixed-case directory names break 'podman create' 12036aa FIXES #76: a service extends a service with same name 7222fdb exit if not files bb7120f Fix stop command runs start instead 7ebbe2e Fix KeyErrors encountered with extended services 29d4cdc Remove unused funtion in setup.py a9216c3 podman volume inspect mountPoint/Mountpoint e538852 #57: better ps via label b1c2b02 podman_compose.py 9e0dd2d extends with external file 72c1992 Remove never-shared options. 3e2381f Support extends dee813a #47: version command 9684429 #52: fix how we split commands 87e7211 #54: fix ulimits 7269701 Fixed get of ulimit tag, according to docker-compose specification b369073 Fix podman-compose run command parsing 62f0cc4 Changed -l flag to --label in order to be compatible with Podman 1.0.2.dev c152d28 Support for generic container-compose format 8e43e69 FIX #41: compare original volume name 751aaa8 Add support for devices in a service 243bdb6 Add support for setting container ulimit 2202e7f Add support for setting container ulimit f505e49 a test showing yaml anchor magic 2e4378f add string check for cmd line args 2a8d430 FIXES #35: now support multiple composer files a512c0c #35: test for multiple -f Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-spec: explictly reference main branchBruce Ashfield2021-09-091-1/+1
| | | | | | | The oci-image-spec repository has dropped its master branch, so the fetcher default no longer works. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3: remove the no-longer required bbappendRuslan Babayev2021-08-012-9/+0
| | | | | | | | | It has been carried over from python2 and is no longer required. More importantly it breaks the python3-native build due to ${STAGING_DIR_TARGET} being "" for native recipes. Signed-off-by: Ruslan Babayev <fib@cisco.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* uxen-guest-tools: inherit dos2unix to fix do_patch failureMartin Jansa2021-07-231-1/+1
| | | | | | | | | | | | | | * fixes: ERROR: uxen-guest-tools-4.1.7-r0 do_patch: Command Error: 'quilt --quiltrc /OE/build/oe-core/tmp-glibc/work/qemux86_64-oe-linux/uxen-guest-tools/4.1.7-r0/recipe-sysroot-native/etc/quiltrc push' exited with 0 Output: stdout: Applying patch fix-Makefile-for-OE-kernel-build.patch patching file Makefile Hunk #1 FAILED at 1 (different line endings). Hunk #2 FAILED at 19 (different line endings). 2 out of 2 hunks FAILED -- rejects in file Makefile Patch fix-Makefile-for-OE-kernel-build.patch does not apply (enforce with -f) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: adjust image-spec repository from master to mainBruce Ashfield2021-07-141-1/+1
| | | | | | We need to change our branch to avoid parse errors. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: switch to main as specified branchBruce Ashfield2021-06-211-1/+1
| | | | | | | The upstream project has moved from master to main, so we adjust our recipe accordingly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: add branch specification to SRC_URIBruce Ashfield2021-06-211-1/+1
| | | | | | | | The upstream project switched from master to main, so we add an explicit branch specification to avoid fetch errors (as the deafult of master no longer works). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add upstream-status to patchBruce Ashfield2021-05-311-0/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc-recipe: Fix compilation without seccomp when libseccomp is installedRameshkrishnanX Geddy Sekar2021-05-313-0/+97
| | | | | | | Original URL: https://github.com/lxc/lxc/pull/3623 Signed-off-by: RameshkrishnanX Geddy Sekar <rameshkrishnanx.geddy.sekar@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.6Bruce Ashfield2021-05-313-70/+2
| | | | | | | | | Updating to the next minor revision in the LTS. We also drop two patches that are included in the main repository as partof this bump. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: remove deprecated options in lxc*.serviceMingli Yu2021-05-313-0/+68
| | | | | | | | | | | Remove deprecated options in lxc*.service to silence below warning: # systemctl status lxc [snip] /usr/lib/systemd/system/lxc.service:17: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. /usr/lib/systemd/system/lxc.service:18: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Disable warnings as errorsKhem Raj2021-05-311-3/+1
| | | | | | | | Instead of disabling particular warnings, its better to use configure switch, since some of these warnings could be compiler specific Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to v4.0.4Bruce Ashfield2021-05-313-6/+9
| | | | | | | While we are updating, we refresh one patch to remove fuzz, otherwise there are no significant changes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: upgrade 4.0.2 > 4.0.3Wang Mingyu2021-05-311-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix compile failure on gcc10hongxu2021-05-311-1/+1
| | | | | | | | | | | | | | | Since oe-core is upgrading gcc to 10.1, there is a compile failure ... |../../../lxc-4.0.2/src/lxc/cgroups/cgfsng.c:2100:10: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=] | 2100 | *slash = '\0'; ... Add gcc option `-Werror=stringop-overflow' to workaround the issue Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Update python3.5 reference to latest python versionSai Hari Chandana Kalluri2021-05-311-2/+2
| | | | | | | | Python3.5 is no longer supported, update references to latest python version using variables from python3-dir bbclass Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Upgrade to 4.0.2Mingli Yu2021-05-311-2/+2
| | | | | Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: switch branch to mainBruce Ashfield2021-05-191-1/+1
| | | | | | | crun has renamed master -> main, so we adjust our fetching to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-systemd: explicitly specify branchBruce Ashfield2021-05-121-1/+1
| | | | | | | | | | | | The upstream project has removed the master branch in favour of 'main'. We were relying on the fetcher default of master previously, and now that master no longer exists, we get a fetch failure. Adding an explicit branch=main gets things working again. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: bump 1.2.14dunfell-nextBruce Ashfield2021-05-041-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to the newest 1.2.x, which contains the following commits: f8777f130 Add release notes for v1.2.14 abbb17959 Add comment clarifying fix for security issue 1ead8d9de treat manifest provided URLs differently f52fbb8a9 Bump Golang 1.13.15 0732aa7a6 Bump Golang 1.13.14 f6b342959 Bump Go 1.13.13 2f4dfde54 Bump Golang 1.13.12 cbdfca815 Build runc with selinux support f8ae16778 Fix incorrect backport of setting octet-stream 17a506c94 golangci-lint update and fix 4f6dc01a8 Bump Golang 1.13.10 493665bd5 Bump Golang 1.13.9 053f4d6fd Update containerd/console vendor for fix e72c2b5b1 Bump containerd console for os.File changes 8810a1387 bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f f8be3cf7f when kill container, check if container has been deleted 35a174382 Update Golang 1.13.8 305703670 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) 1591eb809 Update Golang 1.13.6 fc95ae8ed Update Golang 1.13.5 77499e24e Update to Golang 1.13.4 2adf308a2 Revert "Update Golang 1.12.14" 9d53ba930 Revert "Update Golang 1.12.15" c5843f944 Revert "Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919)" 012c4c0af Revert "Update Golang 1.12.17" 30267a8da platforms: update known OS and arch values 591f6f491 Move flag.Parse in tests to TestMain 598f7a7b5 Try set GOGC for golint dfff5b146 Switch to golangci-lint a18c08347 fix additional linting failures c1ceae579 Update timestamp atomic write 82ddedea2 Ensure close in content test 961c23a57 fix killall when use pidnamespace a386eb648 Fix linter errors 971ad613c bugfix: cleanup dangling shim by brand new context f141d0f7a Prepare v1.2.13 release 0c10aca55 Update .mailmap with changes from master b97098762 Fix container pid. 567ca6785 Set octet-stream content-type on put request 28eb964b0 script: use github.com/kubernetes-sigs/cri-tools directly 2a0ca2d07 Update Golang 1.12.17 a7c9b7605 Fix incorrect comment from copy/paste of starting script 6ad255383 Pin to libseccomp 2.3.3 25a806c50 bump cgroups dependency to address blkio issue 79d65767e Prepare v1.2.12 release 9be62a7ee Update mailmap 8761b1bf8 Update name for btrfs headers package 5db3987eb Fix dependency in BUILDING.md 945611681 [release/1.2] vendor: bump containerd/cri b1052f3b73fb9f0a6805d3c20e884a4cef265a38 520c8cb84 bump google.golang.org/grpc v1.23.1 c12aaf0e5 vendor: bump gopkg.in/yaml.v2 v2.2.8 9d1954f2e vendor: bump containerd/cri b075cc4e9f394780dbed101601c48dcc3d37c828 (release/1.2 branch) 1bc2590d9 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 44b5bac0c Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919) 4c03d5dfb Pick up fix for CVE-2019-16884 in opencontainers/selinux 87648d2a7 Bump to opencontainers/runc new version - v1.0.0-rc10 f106ae4ab Update Golang 1.12.15 4288ba10f runtime: only check killall for init process e7b06baa6 Update Golang 1.12.14 34978bf3b Disable criu tests in Travis CI de8ed89b1 Fix cleanup error on content client test 1b4aebd68 Prepare v1.2.11 release 128664b67 snapshots: return error if readSnapshot fails 342c953a5 Update to Golang 1.12.13 6b94990c1 Revert "[release/1.2] pin travis to go 1.12.12" 0b9135f1d Catch up vndr with state of vendor/ dir 435e05fd0 [release/1.2] pin travis to go 1.12.12 e319caedc Update Golang 1.12.12 (CVE-2019-17596) 0877136a9 Use cached state instead of `runc state`. f71f6d39b Robust pid locking for shim processes 42aba6e0f Add timeout for I/O waitgroups c471c95bc Add local-fs.target to service file 847f74c28 Fix delete error code on the containerd daemon side. 611766aff Fix shim delete error code. 639be3585 bump runc v1.0.0-rc9 b30190905 Bump runc to 1b8a1eeec3f337ab5d94f28980 8fb208fb1 Revert "Revert "bump libseccomp-golang v0.9.1"" 889f5f803 Automate CRI tarball release. 9e6b7bb9f Prepare v1.2.10 release 8d33d0351 AppVeyor: bump golang 1.12.10 (CVE-2019-16276) 0c961b186 Bump runc for CVE-2019-16884 4be2ad78f Update cri to 40affe7c7402d41618b9791a8cf105ac74ce56d0. 5d464752c Update go-runc to e029b79d8cda8374981c64eba71f28e b3a846068 Update mailmap 413609294 Prepare v1.2.9 release b1e40b64f [release/1.2] Update cri to ad5dcc6cba067488d017540d06ebc08b21bb82bc 14ff021bd archive: truncate modification time 86ea2b726 Use default UNIX env when image has no environment 99c2e56e3 bump containerd/zfs 2ceb2dbb8154202ed1b8fd32e4ea25b491d7b251 0d6d883a6 Compute manifest metadata when not provided. e6275a02b Add user agent header to all requests 4bffd8855 Explicitly stating utf-8 when fetching oauth token 09c68d083 Add custom headers option to dockerResolver 5c284a771 Revert "Add user agent header to all requests" 08325686b Update gRPC to v1.23.0 5fbd02f81 Update ttrpc to 92c8520ef9f86600c650dd540266a00 a9ba2e681 Prepare v1.2.8 point release 1c309d804 Remove the process default ENV f1c661f78 Change bufferSize back to 32 d161ab632 Try to preserve exit event order 7e2864b8f Add retry and non-blocking send for exit events dbf9a5017 Unifi reaper logic into package 9b5b55b14 Fix shim hung c8d75ca5e do not mutate defaults in replaceOrAppendEnvValues 6c6b7e297 bugfix: override image.Env with process.Env, rather than be contrary 17690cc2f AppVeyor: update to go 1.12.9 8c0ec3c35 Revert "bump libseccomp-golang v0.9.1" 941dd9f2c Update cri to d928a4dd337fd2a992dbe72380eff2063c3ec62f. 4097217bb AppVeyor: update to go 1.12.8 (CVE-2019-9512, CVE-2019-9514) bb238e05a AppVeyor: update to go 1.12.7 150468fcc contrib: Dockerfile: bump go 1.12 c675ea30c contrib: Dockerfile: add a base stage 59134eb99 contrib: Dockerfile: reformat, and use --no-install-recommends ad3bfc9e3 contrib: Dockerfile: use build-arg for go-version 11a25c8a6 Move ctr run --isolation to Windows only 47e5d5fd4 Limit multiple platform manifests to one for size check 116e770a8 Call CloseIO when stdin closes in ctr c8bbceb4e metadata: merge snapshot labels with metadata's labels 227ebf36a runtime/v1/linux: ignore ErrCgroupDeleted in Task.Start d528a69a4 images: only fetch the best matched manifest info 46920a60f test/snapshots: umount before committing snapshot 452e9c532 Improve ARM platform matching b207b3329 Skip rootfs unmount when no mounts are provided d8f4da4fe bump libseccomp-golang v0.9.1 ed35eec32 Close the inherited socket fd b2d260c4f Ensure labels is not nil in differ 1b2230eb3 AppVeyor: Bump golang 1.12.6 d0b89fd57 Add travis_wait to prevent vndr timing out aab8e9d13 Update to Golang 1.12, and prepare for ppc64le 56f8ef8ce Update travis to xenial worker bad4fdd76 Prepare release note for v1.2.7. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>