summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* go-build: export GO111MODULE=offBruce Ashfield2021-03-261-0/+1
| | | | | | | We aren't setup for go module builds, so we need to disable it in the go-build recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: update to v1.20.4Bruce Ashfield2021-03-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Moving off the 1.20.x-rc and onto a dot release tag. This pulls in the following commits: e87da0bd6e0 Release commit for Kubernetes v1.20.4 5682545c2da Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3 f8f2fa827d3 Release commit for Kubernetes v1.20.4-rc.0 01849e73f3c Release commit for Kubernetes v1.20.3 58c5493f22a kube-cross: update image to use v1.15.8-legacy-1 e000e9722bb [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8) 3365196e9d8 Use go-runner:buster-v2.3.1 image (built on go1.15.8) 91f2745f08c staging/publishing: Set default go version to go1.15.8 3c777448311 Update to go1.15.8 b570189cf1f Revert "make hostPort match test linuxonly" 6698a4e7afc Revert "conformance changes" 6a31f8d17ef dockershim hostport respect IPFamily a456eb4eaf6 dockershim hostport manager use HostIP 5d9910a0172 Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate ac866d63911 make podTopologyHints protected by lock b84ee98db74 kubelet: Fix mirrorPodTerminationMap leak d381d6c52cc kubelet: Delete static pods gracefully b2576fb35f7 kubelet logs print 'kubelet nodes sync' frequently 7826a1c6b87 WIP: node sync at least once Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to latest -rc93Bruce Ashfield2021-03-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the runc version to incorporate the following commits: 2ae56653 Move fuzzers upstream 053e15c0 tests/checkpoint: show full log lazy pages cpt e618a6d5 curl: add --retry 5 4b98e4a7 MAINTAINERS: update Aleksa's email 8a3484b7 libcontainer/factory*: adjust the file mode 71ca6432 fix integration tests README.md 916654ff libcontainer: fix LinuxFactory comments c3ffd2ef Do not convert blkio weight value using blkio->io conversion scheme 38b2dd39 runc exec: report possible OOM kill 5d0ffbf9 runc start/run: report OOM 7e137b90 libct/cg/fs2/hugetlb: use fscommon.GetValueByKey 9fa65f66 libct/cg/fscommon: add GetValueByKey c54c3f85 libcontainer/notify_linux_v2: use fscommon.ReadFile 494f900e libct/cg/fscommon: rename/facelift GetCgroupParamKeyValue 1880d2fc libct/cg/fs/memory: handle EBUSY 27fd3fc3 libct/cg/fs: setMemoryAndSwap: refactor 3cced523 libct/cg/fs/memory: optimize Set 65c2d3c2 tests/int/update: add test case for PR #592 53d3b552 Update README.md for libcontainer 6c5ed0db Fix memory stats for cache in fs2 af521ed5 libct/cgroups/systemd: don't set limits in Apply fa52df94 libcontainer: fix the file mode of the device d0cbef57 Makefile: rm go 1.13 workaround 4019f08d make validate: rm go vet f9c21133 make lint: use golangci-lint 671bb978 Makefile: remove ci target 95940855 script/validate-gofmt: rm 91f0ae18 ci/gha: bump go 1.16-rc1 -> 1.16.x 5b14a261 README: add gha badges f3f563bc apparmor: try attr/apparmor/exec before attr/exec 41670e21 tests/int: rework/simplify setup and teardown d73b4443 ci: enable -race from matrix b7744547 libct/int: fix a data race c34a9b10 tests/int/hooks.bats: don't use DEBIAN_BUNDLE e40a369e tests/int/list.bats: don't use $BUSYBOX_BUNDLE 985546b4 tests/int: BATS_TMPDIR -> BATS_RUN_TMPDIR 85d5fea4 tests/int: stop reusing HELLO_BUNDLE for alt root 76532fac tests/int/events: rm unneeded eval 49766140 tests/int: use wait_for_container where appropriate 4d6ffa39 tests/int/helpers: reimplement wait_for_container e7052dcd tests/int/spec.bats: don't use HELLO_BUNDLE 0cfc2e32 tests/int: rm teardown_running_container_inroot 78f0e4b2 tests/int: rm wait_for_container_inroot 64d5702f tests/int: don't depend on BUSYBOX_BUNDLE var efb8552b tests/int: add device access test 81707abd ebpf: fix device access check c3428722 libct/config: fix a data race 51ec5db1 ci: add i386 unit test run b142a70e libct/seccomp/patchpbf/test: fix for 32-bit 2831fb55 cgroup2: devices: handle eBPF skipping more correctly d1007b08 cgroupv1 freezer: thaw to increase freeze chances Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: initial READMEBruce Ashfield2021-03-161-0/+30
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: clean up READMEBruce Ashfield2021-03-161-11/+41
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: rrecommend required kernel modulesBruce Ashfield2021-03-161-1/+11
| | | | | | | | If the required modules aren't in the image, k3s will fail to start. Set the requirements as RRECOMMENDS for image types that don't install the kernel-modules meta-package. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: drop ctr symlinkBruce Ashfield2021-03-161-0/+3
| | | | | | | We build and depend on our own containerd, we don't need the ctr symlink to k3s for proper operation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add additional build tagsBruce Ashfield2021-03-161-1/+5
| | | | | | | | To more closely align with the rancher/upstream build, we add additional tags to the build. To make them easier to manage, we also introduce a variable and use it in the go build line. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add seccomp distro feature requirementBruce Ashfield2021-03-161-0/+3
| | | | | | | | | k3s requires seccomp, and a runc with seccomp enabled for proper operation. runc has a distro feature check to enable seccomp, so if we enforce it as k3s feature, we'll also get a properly built runc and we'll work out of the box. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to latest -rc93Bruce Ashfield2021-03-162-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the runc version to incorporate the following commits: 2ae56653 Move fuzzers upstream 053e15c0 tests/checkpoint: show full log lazy pages cpt e618a6d5 curl: add --retry 5 4b98e4a7 MAINTAINERS: update Aleksa's email 8a3484b7 libcontainer/factory*: adjust the file mode 71ca6432 fix integration tests README.md 916654ff libcontainer: fix LinuxFactory comments c3ffd2ef Do not convert blkio weight value using blkio->io conversion scheme 38b2dd39 runc exec: report possible OOM kill 5d0ffbf9 runc start/run: report OOM 7e137b90 libct/cg/fs2/hugetlb: use fscommon.GetValueByKey 9fa65f66 libct/cg/fscommon: add GetValueByKey c54c3f85 libcontainer/notify_linux_v2: use fscommon.ReadFile 494f900e libct/cg/fscommon: rename/facelift GetCgroupParamKeyValue 1880d2fc libct/cg/fs/memory: handle EBUSY 27fd3fc3 libct/cg/fs: setMemoryAndSwap: refactor 3cced523 libct/cg/fs/memory: optimize Set 65c2d3c2 tests/int/update: add test case for PR #592 53d3b552 Update README.md for libcontainer 6c5ed0db Fix memory stats for cache in fs2 af521ed5 libct/cgroups/systemd: don't set limits in Apply fa52df94 libcontainer: fix the file mode of the device d0cbef57 Makefile: rm go 1.13 workaround 4019f08d make validate: rm go vet f9c21133 make lint: use golangci-lint 671bb978 Makefile: remove ci target 95940855 script/validate-gofmt: rm 91f0ae18 ci/gha: bump go 1.16-rc1 -> 1.16.x 5b14a261 README: add gha badges f3f563bc apparmor: try attr/apparmor/exec before attr/exec 41670e21 tests/int: rework/simplify setup and teardown d73b4443 ci: enable -race from matrix b7744547 libct/int: fix a data race c34a9b10 tests/int/hooks.bats: don't use DEBIAN_BUNDLE e40a369e tests/int/list.bats: don't use $BUSYBOX_BUNDLE 985546b4 tests/int: BATS_TMPDIR -> BATS_RUN_TMPDIR 85d5fea4 tests/int: stop reusing HELLO_BUNDLE for alt root 76532fac tests/int/events: rm unneeded eval 49766140 tests/int: use wait_for_container where appropriate 4d6ffa39 tests/int/helpers: reimplement wait_for_container e7052dcd tests/int/spec.bats: don't use HELLO_BUNDLE 0cfc2e32 tests/int: rm teardown_running_container_inroot 78f0e4b2 tests/int: rm wait_for_container_inroot 64d5702f tests/int: don't depend on BUSYBOX_BUNDLE var efb8552b tests/int: add device access test 81707abd ebpf: fix device access check c3428722 libct/config: fix a data race 51ec5db1 ci: add i386 unit test run b142a70e libct/seccomp/patchpbf/test: fix for 32-bit 2831fb55 cgroup2: devices: handle eBPF skipping more correctly d1007b08 cgroupv1 freezer: thaw to increase freeze chances Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: add selinux and seccomp package configsBruce Ashfield2021-03-161-1/+8
| | | | | | | | | | | | runc can be built with both selinux and seccomp tags. These tags are a requirement for proper operation with some frameworks (like k3s). So we add checks for the appropriate distro features and then automatically add them to the build tags, allowing us a coordinated enabling of the functionality. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: bump to v1.20.4Bruce Ashfield2021-03-151-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: bump to v1.19.5Bruce Ashfield2021-03-151-2/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: bump to v1.19Bruce Ashfield2021-03-152-17/+14
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add kernel module rrecommends (and PV fix)Bruce Ashfield2021-03-151-2/+5
| | | | | | | | | | Fixing up the PV to use SRCPV for tracking future version bumps, if the tree is dirty or not, git will tell us. We also add some additional kernel module rrecommends, so that the tools called by k3s can find the support they need (mainly iptools) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers: add a base container and kubernetes base packagegroupBruce Ashfield2021-03-152-0/+86
| | | | | | | | To make it easier to build container host or k*s host images (as well as guests), we start to add some packagegroups that wrap the required elements. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add notes / tips to READMEBruce Ashfield2021-03-151-0/+208
| | | | | | | Clarify some limitations / tweaks to get up and running in a qemu virtual machine. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: add ca-certifcates dependencyBruce Ashfield2021-03-151-0/+2
| | | | | | | | | | | Many of the CNI plugins require authenticated connections, as such they are looking for elements of ca-certificates. CNI isn't small, so we add this as a general rdepends. If we need to slim things down in the future, we can split the CNI into specific implementations and add the dependency to those packages. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* config: prefer opencontainers runcBruce Ashfield2021-03-151-1/+1
| | | | | | | | | The docker split/requirement on their forked version of runc is not relevant any more. While we keep the docker-runc around, we should prefer the opencontainers variant, since that is where development happens. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: add runc runtime dependencyBruce Ashfield2021-03-151-1/+2
| | | | | | | containerd is rarely used without runc, so we add the runtime dependency to make installation and image construction easier. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s/k3s: add kernel configuration featuresBruce Ashfield2021-03-153-0/+25
| | | | | | | | | | | | | We already have docker and some other fragments that are relevant to k3s/k8s, but the addition of ipset as a depends for k3s highlights that we should have a reference configuration that sets all the options for proper opration and runtime dependencies. When k8s or k3s are distro features, we'll apply the new fragment to any kernel that supports fragments (and matches the supported versions). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipset: warning fix, use BPN instead of PN in SRC_URIBruce Ashfield2021-03-151-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: package remaining binaries into 'k3s'Bruce Ashfield2021-03-151-0/+1
| | | | | | | | Grab any remaning binaries into the main k3s package. Both k3s-agent and k3s-server rdepend on it, so we'll be sure to get them intalled in both scenarios. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: use cni-networking bbclass to install / package networking configurationBruce Ashfield2021-03-151-1/+4
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: introduce cni networking bbclassBruce Ashfield2021-03-151-0/+18
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: import version locked ipset dependencyBruce Ashfield2021-03-151-0/+20
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: import version locked upx dependencyBruce Ashfield2021-03-156-0/+527
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: drop symlink to 'ctr'Bruce Ashfield2021-03-151-1/+0
| | | | | | | | | | containerd itself provides 'ctr', and it is in our rdepends. So on target, we have a conflict for the provider of the ctr binary. Dropping the ctr link from k3s, since having the actual containerd package provide its binary .. makes sense. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers: introduce k3s recipeJoakim Roubert2021-03-158-0/+342
| | | | | | | | See recipes-containers/k3s/README.md for basic usage and testing instructions. Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: add hardknott compatibilityBruce Ashfield2021-03-151-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: change download folderRobi Buranyi2021-03-111-1/+1
| | | | | | | | | The URI has been changed to 'https://linuxcontainers.org/downloads/lxc' by the site maintainers recently. Updating the recipe to reflect the new path. Signed-off-by: Robi Buranyi <rburanyi@google.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: uprev from 2.13 to 2.15Zqiang2021-03-114-35/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - OVSDB: * Changed format in which ovsdb transactions are stored in database files. Now each transaction contains diff of data instead of the whole new value of a column. New ovsdb-server process will be able to read old database format, but old processes will *fail* to read database created by the new one. For cluster and active-backup service models follow upgrade instructions in 'Upgrading from version 2.14 and earlier to 2.15 and later' section of ovsdb(7). * New unixctl command 'ovsdb-server/get-db-storage-status' to show the status of the storage that's backing a database. * New unixctl command 'ovsdb-server/memory-trim-on-compaction on|off'. If turned on, ovsdb-server will try to reclaim all the unused memory after every DB compaction back to OS. Disabled by default. * Maximum backlog on RAFT connections limited to 500 messages or 4GB. Once threshold reached, connection is dropped (and re-established). Use the 'cluster/set-backlog-threshold' command to change limits. - DPDK: * Removed support for vhost-user dequeue zero-copy. * Add support for DPDK 20.11. - Userspace datapath: * Add the 'pmd' option to "ovs-appctl dpctl/dump-flows", which restricts a flow dump to a single PMD thread if set. * New 'options:dpdk-vf-mac' field for DPDK interface of VF ports, that allows configuring the MAC address of a VF representor. * Add generic IP protocol support to conntrack. With this change, all none UDP, TCP, and ICMP traffic will be treated as general L3 traffic, i.e. using 3 tupples. * Add parameters 'pmd-auto-lb-load-threshold' and 'pmd-auto-lb-improvement-threshold' to configure PMD auto load balance behaviour. - The environment variable OVS_UNBOUND_CONF, if set, is now used as the DNS resolver's (unbound) configuration file. - Linux datapath: * Support for kernel versions up to 5.8.x. - Terminology: * The terms "master" and "slave" have been replaced by "primary" and "secondary", respectively, for OpenFlow connection roles. * The term "slave" has been replaced by "member", for bonds, LACP, and OpenFlow bundle actions. - Support for GitHub Actions based continuous integration builds has been added. - Bareudp Tunnel * Bareudp device support is present in linux kernel from version 5.7 * Kernel bareudp device is not backported to ovs tree. * Userspace datapath support is not added - ovs-dpctl and 'ovs-appctl dpctl/': * New commands '{add,mod,del}-flows' where added, which allow adding, deleting, or modifying flows based on information read from a file. - IPsec: * Add option '--no-cleanup' to allow ovs-monitor-ipsec to stop without tearing down IPsec tunnels. * Add option '--no-restart-ike-daemon' to allow ovs-monitor-ipsec to start without restarting ipsec daemon. - Building the Linux kernel module from the OVS source tree is deprecated * Support for the Linux kernel is capped at version 5.8 * Only bug fixes for the Linux OOT kernel module will be accepted. * The Linux kernel module will be fully removed from the OVS source tree in OVS branch 2.18 fix some do_patch error about local patch. Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: upgrade 1.6.0 -> 1.7.0Yanfei Xu2021-03-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | Miscellaneous bug fix release, consisting of: Strlen checking for IRQBALANCE_BANNED_CPU env var Typo cleanup in SOCKET_TMPFS consolidation of numa node creation on non-numa systems fix uninitialized use of package_mask in affinity setup use num_online_cpus instead of core_count fix a null ptr crash in do_one_cpu make list searching common from glib fix a calloc parameter bug remove some unused variables use g_list_free_full remove redundant call to free_cl_opts fix some resource leaks in main() fix some use after free issues in check_for_irq_ban fix resource leaks in irqballance-ui, and in add_one_node Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* seabios: upgrade to version 1.14.0Bertrand Marquis2021-03-091-2/+2
| | | | | | | | | | | Upgrade version of seabios to the latest one. This is solving compilation errors happening with newer version of gcc introduced in poky which in the following error after some warnings: "x86_64-poky-linux-ld: cannot use executable file 'out/rom16.strip.o' as input to a link" Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-core: update RDEPENDSChangqing Li2021-03-091-1/+1
| | | | | | | | | | | | fix following error during do_rootfs: nothing provides php needed by nagios-core-4.4.6-r0.corei7_64 (try to add '--skip-broken' to skip uninstallable packages) Since commit c4ffcaa2 [php: split out phpdbg into a separate package], package php is empty. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: set CVE_VERSIONChen Qi2021-03-041-0/+1
| | | | | | | | | CVE entries are using version 2.xx.xx, our PV is 2.13+xxx, this causes problem for CVE detection. So we need to set a CVE_VERSION for better CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Bump SRCREV to 4.14.1 and current masterBertrand Marquis2021-03-048-95/+92
| | | | | | | | | | | | | | | | | | | | Bump SRCREV version of xen recipes to use the latest 4.14 release (4.14.1) and the current status of master. This allows to remove some patches related to gcc 10 support which have now been merged in Xen. Xen-tools is modified to include the latest tools installed with Xen: - a rename of the bash-completion, - a new xl example, - xen-access, - xen-memshare (only available on x86). A new patch to fix python and pygrub is added as the makefiles have been deeply modified in 4.15 which require a new patch (but doing the same). Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: export GO111MODULE=offBruce Ashfield2021-03-041-0/+2
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* yq: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: export GO111MODULE=offBruce Ashfield2021-03-011-0/+2
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-md2man: export GO111MODULE=offBruce Ashfield2021-03-011-0/+3
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* initrd: bump busybox to 1.33 to match oe-coreBruce Ashfield2021-02-261-0/+0
| | | | | | OE core has updated busybox, so we bump to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: use service file from source treeBruce Ashfield2021-02-242-13/+1
| | | | | | | We no longer need to support both the docker and opencontainer variants, so we can just grab the service file from the source tree. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to 0.18Bruce Ashfield2021-02-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to the release, which pulls in the 808420e release: distribute CHECKSUMS file c2b0064 build-aux: provide arm build without systemd 7cc03f7 .gitignore: update file f5274bd NEWS: tag 0.18 94e8364 src: add missing definitions baed691 libocispec: sync from upstream 8d0ebf6 Add arm64 static binary build b66d5d9 tests: fix make check in a user namespace e10205e linux: remove temporary mount logic 7819f4c linux: use targetfd for move_mount 891cd3c linux: use safe_openat for masked/readonly paths 6c5577f linux: use new function 9aa264d utils: add function to safely create and open 436daef src: add function to cleanup container struct c955ece src: pull function out 7bd51a0 build: check for linux/openat2.h dcb1914 utils: add function to remove initial slashes a1c958c utils: memoize check result 25c6f07 container: rename function to get_root_in_the_userns f08bd31 src: fix leak of the descriptors buffer df88061 tests: disable more Podman flaky tests 052bab7 utils: set HOME to root if the user not found efe35f1 linux: ignore ENOSYS on keyctl 1b65163 tests: enable asan sanitizer a0f322a tests: build init always statically a656698 configure.ac: allow to disable dl support 6adb26b tests: disable hooks_stdin for oci-validation 06199c7 tests: update to podman 3.0 bc888b9 tests: disable podman pull test f1373f9 tests: install crun under /usr/bin 257f442 Fix permission error when using both user namespaces & NOTIFY_SOCKET 617a212 cgroup: skip +cpu on EINVAL in cgroup root b6ac8de linux: use safe_openat for tmpcopyup 2d1f910 utils: avoid reopening the root during lookup 3ce74e8 utils: fix symlink lookup cbb67ae container: set working directory for libkrun df01709 seccomp: custom annotation to load raw bpf b229dca linux: refactor allocate_tmp_mounts 68bb50f linux: disable temporary mounts with [r]slave d6ae36b libocispec: update from upstream 487e792 github: enable clang-format checks 61d6844 src: run make clang-format 1d559d0 clang-format: change ColumnLimit to 0 643d05b linux: disable temporary mounts with [r]shared de6082f cgroup: fix conversion from blkio to io 1db8312 Update nix pin with `make nixpkgs` 540444c Makefile.am: crun depends on libocispec.la 1df96e5 linux: fix build without CLONE_NEWCGROUP Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix service file to not reference containerd-dockerBruce Ashfield2021-02-231-1/+1
| | | | | | | | | We are not building containerd-docker anymore, so the containerd service file should not be changing it in as the binary. It is confusing when you see 'containerd-docker' in the process list, when you've built and installed containerd-opencontainers. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-09 05:09:19 +0000