summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* conmon: add branch specification to SRC_URIBruce Ashfield2021-06-211-1/+1
| | | | | | | | The upstream project switched from master to main, so we add an explicit branch specification to avoid fetch errors (as the deafult of master no longer works). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: inhibit go.mod build for main cniBruce Ashfield2021-06-151-1/+3
| | | | | | | | | | The cni plugins already have mod=vendor, but we also need to ensure that the main CNI build is not using go module based builds. To avoid inconsistent vendoring messages, we switch all plugins to no module builds as well. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: restore _git recipeBruce Ashfield2021-06-151-2/+2
| | | | | | | | It was unoticed in the 3.0.x update to podman, that the _git was changed. That was unintended and this restores to the _git so we can more easily track changes in master and do updates. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "podman: Update 3.0-rc2 -> 3.0.1"Bruce Ashfield2021-06-151-1/+3
| | | | This reverts commit 571767ad2039c9c29d3a5ca164f4ce09c670a8b8.
* ceph: update to 15.2.12 to address CVEsSaul Wold2021-05-251-5/+4
| | | | | | | | | | | Updated sha* Fixes: CVE-2021-3509 Fixes: CVE-2021-3524 Fixes: CVE-2021-3531 Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: switch branch to mainBruce Ashfield2021-05-191-1/+1
| | | | | | | crun has renamed master -> main, so we adjust our fetching to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, rpi4: fix typo in raspberrypi dynamic-layers inclusionRichard Neill2021-05-131-1/+1
| | | | | Signed-off-by: Richard Neill <richard.neill@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Update 3.0-rc2 -> 3.0.1Diego Sueiro2021-05-121-3/+1
| | | | | | | Update podman to 3.0.1. Signed-off-by: Diego Sueiro <diego.sueiro@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-systemd: explicitly specify branchBruce Ashfield2021-05-121-1/+1
| | | | | | | | | | | | The upstream project has removed the master branch in favour of 'main'. We were relying on the fetcher default of master previously, and now that master no longer exists, we get a fetch failure. Adding an explicit branch=main gets things working again. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Remove deltask for setsceneMark Hatle2021-04-291-3/+0
| | | | | | | | | As of the gatesgarth you are no longer allowed to remove setscene tasks as the eSDK generation expects for tasks to actually be executed. Signed-off-by: Mark Hatle <mark.hatle@xilinx.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: add CVE_PRODUCT to recipesRalph Siemsen2021-04-292-0/+4
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: add CVE_PRODUCT to recipeRalph Siemsen2021-04-291-0/+2
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add CVE_PRODUCT to recipesRalph Siemsen2021-04-293-0/+6
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.4.4Bruce Ashfield2021-04-292-4035/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dropping the backported CVE patch, as it is part of this version bump, which contains the followig commits: c64cfa03b runtime/v2/runc: fix the defer cleanup of the NewContainer 60c139c9a gha: use sudo -E in some places to prevent dropping env-vars e0d452986 GHA: use setup-go@v2 ac87e05f6 [release/1.4] update Go to 1.15.11 425a6e4f8 night ci fix: add packages for ubuntu 20.04 80de6e2b4 vendor: golang.org/x/sys 5cba982894dd4e8879e3ef0a0c308ceff39f6154 92da2dbfa vendor: golang.org/x/sync 67f06af15bc961c363a7260195bcd53487529a21 b24c8a2ec vendor: golang.org/x/net 69a78807bb2bb6d1599c68698c6b009505012083 ebdd88cc0 vendor: sigs.k8s.io/structured-merge-diff/v4 v4.0.3 fe197b9b5 vendor: update kubernetes to v1.19.10 07e347903 adds log for each failed host and status not found on host 18a271509 need to bring critest backup 8c5422eb6 Fix error log when copy file f9d6a7604 runtime/v2/runc: fix leaking socket path 24921417f Fix missing close bfe95947f install-runc: set GO111MODULE=off to use vendor 520d179ed Prevent runc inheriting BUILDTAGS from containerd 039c24043 move runc version to a separate file for easier consumption 0e957e5ad Separate runc binary version from libcontainer version bd5bbbd1a Remove references to apparmor and selinux buildtags for runc fca4a0d1b script/setup: use git clone instead of go get -d 4c875c81a cmd/ctr: fix export command bbde7b700 overlay: support "userxattr" option (kernel 5.11) 4c2f6a7ab Fix advisory link in release notes for containerd 1.4.4 3ba4a3171 Prepare release notes for 1.4.4 cbcb2f57f vendor: update cri 633bfb712 CI: cache ~/.vagrant.d/boxes e7851d743 CI: fix "ls: cannot access '/etc/cni/net.d': Permission denied" f4a6e163e Update continuity 2ec4a495f Update gogo/protobuf to v1.3.2 232cee448 Update to go 1.15.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix fuzz for CVE-2021-3121 patchTrevor Gamblin2021-04-271-426/+423
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xtf: update SRCREV and remove multilib dependencyChristopher Clark2021-04-201-19/+2
| | | | | | | The latest Xen Test Framework has removed the gcc-multilib dependency. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: remove multilib build requirement for x86-64Christopher Clark2021-04-201-37/+0
| | | | | | | | Xen 4.15 added support for standalone x86-64 hvmloader build and previous commit provided Xen 4.14 backports. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: add patches for 4.14 to enable dropping multilib buildChristopher Clark2021-04-203-0/+263
| | | | | | | | Backport Xen patches to enable hvmloader to be built without needing 32-bit glibc. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix CVE-2021-3121Trevor Gamblin2021-04-202-0/+4036
| | | | | | | | | | | | | | | | | | | | The master branch contains an uprev for containerd that includes the fix, so backport the patch separately for hardknott. Tested by pulling a hello-world image with podman to core-image-full-cmdline, with the following added to local.conf: DISTRO_FEATURES_append = " systemd seccomp" VIRTUAL-RUNTIME_init_manager = "systemd" DISTRO_FEATURES_BACKFILL_CONSIDERED = "sysvinit" VIRTUAL-RUNTIME_initscripts = "systemd-compat-units" NETWORK_MANAGER = "systemd" IMAGE_ROOTFS_EXTRA_SPACE = "8192000" PREFERRED_PROVIDER_virtual/containerd = "containerd-opencontainers" IMAGE_INSTALL_append = " podman virtual/containerd" Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* busybox: Add nsenter for podman runtimeNathan Dunne2021-04-192-0/+2
| | | | | | | Add nsenter to Busybox configuration as it is required by Podman at runtime Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Added kernel modules for iptables errorNathan Dunne2021-04-191-1/+1
| | | | | | | | | Added kernel modules kernel-module-xt-masquerade and kernel-module-xt-comment to RRECOMMENDS, to avoid iptables errors with podman Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: fix 32-bit x86 build by setting pvshim configure flagsChristopher Clark2021-04-181-0/+1
| | | | | | | | Enable building the PV shim for x86_64 only. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xtf-image: add a new image for the Xen Test FrameworkChristopher Clark2021-04-181-0/+24
| | | | | | | | | | | | | | Testing the Xen hypervisor, with the qemux86-64 MACHINE: runqemu xtf-image nographic slirp (login as root) cd /usr/libexec/xtf ./xtf-runner --list pv # run an example test: ./xtf-runner test-pv64-livepatch-priv-check Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xtf: introduce recipe for the Xen Test FrameworkChristopher Clark2021-04-181-0/+72
| | | | | | Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: Document the version update process in READMEChristopher Clark2021-04-181-0/+50
| | | | | | | | | Describes the versions of Xen to be included in meta-virtualization and recipe maintenance in release branches. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: uprev git recipes after 4.15 releaseChristopher Clark2021-04-182-4/+4
| | | | | | | | Updated to the branch point for 4.16 development. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: add recipes for new stable Xen 4.15 releaseChristopher Clark2021-04-183-1/+39
| | | | | | | | | | | The recipes are introduced as the non-default version by adding an expressed PREFERRED_VERSION for 4.14 in: conf/distro/include/meta-virt-default-versions.inc to keep the Xen 4.14 recipes as default for the Hardknott release. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add upstream-status to patchBruce Ashfield2021-04-181-0/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc-recipe: Fix compilation without seccomp when libseccomp is installedRameshkrishnanX Geddy Sekar2021-04-183-0/+97
| | | | | | | Original URL: https://github.com/lxc/lxc/pull/3623 Signed-off-by: RameshkrishnanX Geddy Sekar <rameshkrishnanx.geddy.sekar@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-boto3: Upgrade 1.14.7 -> 1.17.48Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 1.17.48: - api-change:lookoutequipment: [botocore] This release introduces support for Amazon Lookout for Equipment. - api-change:kinesis-video-archived-media: [botocore] Documentation updates for archived.kinesisvideo - api-change:robomaker: [botocore] This release allows RoboMaker customers to specify custom tools to run with their simulation job - api-change:appstream: [botocore] This release provides support for image updates - api-change:ram: [botocore] Documentation updates for AWS RAM resource sharing - api-change:customer-profiles: [botocore] Documentation updates for Put-Integration API - api-change:autoscaling: [botocore] Amazon EC2 Auto Scaling announces Warm Pools that help applications to scale out faster by pre-initializing EC2 instances and save money by requiring fewer continuously running instances Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-dotenv: Upgrade 0.13.0 -> 0.17.0Leon Anavi2021-04-131-2/+1
| | | | | | | | | | Upgrade to release 0.17.0: - Make dotenv get <key> only show the value, not key=value - Add --override/--no-override option to dotenv run Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-newrelic: Upgrade 6.0.1.155 -> 6.2.0.156Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | | | | Upgrade to release 6.2.0.156: - Improved CPU metric sampling - Improved memory metric sampling - Increased custom attribute limit from 64 to 128 - Fixed a TypeError with Uvicorn and unix sockets - Fixed a crash when using a FIPS compliant system with Cross Agent Tracing enabled Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-webob: Upgrade 1.8.5 -> 1.8.7Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | Upgrade to release 1.8.7: - Decoding deflate-encoded responses now supports data which is packed in a zlib container as it is supposed to be. The old, non-standard behaviour is still supported. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-paramiko: Upgrade 2.7.0 -> 2.7.2Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | Upgrade to release 2.7.2: - Update our CI to catch issues with sdist generation, installation and testing. - Add missing test suite fixtures directory to MANIFEST.in, reinstating the ability to run Paramiko's tests from an sdist tarball. - Remove leading whitespace from OpenSSH RSA test suite static key fixture, to conform better to spec. - Fix incorrect string formatting causing unhelpful error message annotation when using Kerberos/GSSAPI. - Fix incorrectly swapped order of p and q numbers when loading OpenSSH-format RSA private keys. At minimum this should address a slowdown when using such keys, and it also means Paramiko works with Cryptography 3.1 and above (which complains strenuously when this problem appears). Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: bump to latestBruce Ashfield2021-04-121-3/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As part of this update to crun, we now much run autogen.sh before running configure. Otherwise, these are incremental changes and comprise the following commits: 9effaeb On exec, honor additional_gids from the process spec, not the container definition c25a2db tests: add explicit python3-pip dependency e67a756 NEWS: tag 0.19 18c0274 gitignore: update 471a7b8 libocispec: update from upstream f642968 tests: fix check for cgroup v2 3e7fa1d linux: always remount bind mounts 78aeac9 linux: ignore unknown capabilities f11d742 Add linuxdevicecgroup to maintain parity with runc spec 9aa382b cgroup: skip parsing empty file d9c9fd0 container: initialize tmp_err 00371ae src: initialize statx struct 2e88d19 src: initialize first_arg 5e4efb7 seccomp: always NUL terminate lowercase_arch 7812572 tests: add test for seccomp listener f80e98d init: add check for seccomp listener 5d9010b init: fix check for nargs 5a627f4 seccomp: support notify listener c3361c1 status: use function to convert from yajl errors 873b62d container: use new error function for hooks JSON 14083ab error: new function to convert from yajl errors 6e19235 linux: pass own pid to container process 8fd3320 contrib: new tool to test seccomp notifications 8722858 crun: always use absolute path for the bundle ae9ea92 container: improve OOM error message 919aac9 utils: receive fd detect closed connection a52e480 cgroup: new function to detect OOM 2e37d2a sync-libocispec 75ad96b Let autogen.sh generate m4 14c260f libcrun_warn if newuidmap/newgidmap invoke fails 5598401 README.md: drop pids limit comparison 9ea6857 github: add fuzzing test 0fd03ba tests: add container image for fuzzing libcrun bbd5c7d fuzzer: reap child processes c7350ef tests: add more fuzzing tests 816f95b fuzzer: merge two tests effa508 linux: cleanup zombie on errors b32f1eb linux: release only on error 5ca72f5 status: attempt open again on interrupts 9b5d4c1 Added static analysis Adding clang compilation Fixing comparison of integers of different signs 3b199ef Update GNUmakefile dcd1a34 linux: label the tmpfs for masked directories edf7f15 seccomp: check if the action supports errnoRet bc222b6 seccomp: fail if no default action specified 0c5b920 seccomp: honor default errno value 92c0afe yajl: support static link of containers/yajl f3d920d src: fix unitialized variable 7d89a02 src: add error check 765971c status: fix memory leak on error 31274d8 utils: fix check for fd 62d1c4d tests: add test to feed honggfuzz ab75091 ebpf: return the program instead of NULL 8b16552 src: check if seccomp is defined f721efb container: fix error ownership 4472e35 container: allow config from memory 6b369b8 container: fix memory leak 0fede0f container: initialize variable 2b6c0b6 container: fix dereference of def->linux if NULL 1dd9b5b container: check for def->process before deref 1b1a691 fix: cross-compiling for Android b25cb2d tests: add device access test 86251b0 ebpf: handle access(dev_name, F_OK) call correctly e2d79dc fix: access violate if ret < -2 4f35406 cgroup: read controllers from /proc/self/cgroup Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipset: drop recipeBruce Ashfield2021-04-091-20/+0
| | | | | | | | | | In the time between the k3s work starting and ending, meta-networking picked up the support we need for ipset. Now that the recipe is in a layer we already depend on, we don't need our own copy. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: fix clobbered SRC_URIBruce Ashfield2021-04-091-12/+8
| | | | | | | | | | | | | | | commit 1b83c21436b2 [openvswitch: Fix build with musl libc] mistakenly copies common files and then clobbers the SRC_URI. While we could drop the SRC_URI components from the .inc now that we only have one active version in master (_git), we avoid that for now, since it is possible that a LTS version will be introduced in future cycles. So to fix the oddity, we drop the common components from the _git SRC_URI and append versus clobber. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: fix ldflags QA issue by passing LDFLAGSMartin Jansa2021-04-061-2/+3
| | | | | | | | | | | | | | | | | | ERROR: dev86-0.16.21-r0 do_package_qa: QA Issue: File /usr/lib/bcc/unproto in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/lib/bcc/bcc-cpp in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/lib/bcc/copt in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/lib/bcc/bcc-cc1 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/ld86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/ar86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/size86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/nm86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/as86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/objdump86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/bcc in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) [ldflags] ERROR: dev86-0.16.21-r0 do_package_qa: QA run found fatal errors. Please consider fixing them. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: upgrade to 0.16.21 and fix SRC_URIMartin Jansa2021-04-061-6/+3
| | | | | | | | | * don't use github archives * upgrade to fix build with security-flags.inc enabled, fixed upstream in: https://github.com/lkundrak/dev86/commit/537e806f8c62b26c5d5fa912f383f4a7d558574d Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: force using ld.bfd even when ld-is-gold is in DISTRO_FEATURESMartin Jansa2021-04-061-2/+6
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: fix SRC_URIMartin Jansa2021-04-061-1/+1
| | | | | | | | * git.ipxe.org is gone: fatal: unable to access 'https://git.ipxe.org/ipxe.git/': Couldn't connect to server Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o, podman, packagegroup-container: replace anonymous python function ↵Martin Jansa2021-04-063-33/+3
| | | | | | | | | | calling bb.parse.SkipRecipe with conditional PNBLACKLISTs * PNBLACKLISTs are IMHO a bit easier to read and easier to override from distro which e.g. provides own recipe for libseccomp Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: add the same COMPATIBLE_HOST restriction as syslinuxMartin Jansa2021-04-061-0/+3
| | | | | | | * this depends on syslinux Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-*: add conditional PNBLACKLIST, because of the dependency on ↵Martin Jansa2021-04-064-0/+8
| | | | | | | meta-webserver Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* packagegroup-container: skip without meta-security because of podmanMartin Jansa2021-04-061-0/+9
| | | | | | | | * copy the skip from podman recipe, because this packagegroup depends on podman Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* packagegroup-kubernets: add seccomp to REQUIRED_DISTRO_FEATURESMartin Jansa2021-04-061-0/+4
| | | | | | | | | | | | | * fixes world build: ERROR: Nothing RPROVIDES 'k3s-server' (but meta-virtualization/recipes-core/packagegroups/packagegroup-kubernetes.bb RDEPENDS on or otherwise requires it) k3s RPROVIDES k3s-server but was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES) NOTE: Runtime target 'k3s-server' is unbuildable, removing... Missing or unbuildable dependency chain was: ['k3s-server'] ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'packagegroup-kubernetes', 'k3s-server'] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* boto3: satisfy runtime dependenciesBartosz Golaszewski2021-03-302-0/+14
| | | | | | | | | Currently boto3 can be built into an image but it won't work without additional dependencies. First: botocore is needed at run-time, second: there are other packages available in meta-python that need adding. Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: uprev from 15.2.8 to 15.2.9Zqiang2021-03-301-5/+5
| | | | | | | | | | Notable Changes: 1. progress module can now be turned on/off, using the commands: ceph progress on and ceph progress off. 2. PG removal has been optimized in this release. Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvmi: uprev from 0.12 to 0.14Zqiang2021-03-301-1/+2
| | | | | | | | Bump version to 0.14. This upgrade is mainly to fix some BUG. Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runx: update to v1.0Bruce Ashfield2021-03-267-1703/+87
| | | | | | | | | | bumping runX to the 1.0 tag - drop patches that are part of the release - bump kernel to v5.4.104 to work with our gcc10 - tweak initrd install to use externally provided busybox Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>