summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* containers: introduce sloci for generating OCI image directoriesBruce Ashfield2019-02-271-0/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are multiple different tools/techniques to generate OCI images. Many of these techniques are part of more complex workflows, or have many options that are needed as part of a larger system or are needed to provide flexibility in the tooling (i.e. they construct the container as well as build the OCI image, or they can push directly to a registry, etc). What we want within the build context of bitbake/oe is to not duplicate work that is done by bitbake, the other image bbclasses or the runtime part of the ecosystem. This means only the construction of an image-spec v1.x image without dependencies on build, or execution of the container within a tool. We'd also like the tool to not pull in multiple, unused dependencies that must be built native/native-sdk, etc, to support the simple use case. The requirements above exclude (for now) tools such as skopeo, umoci, buildah, img, orca-build, kaniko, scratchbuild, etc. Leading us to a from-scratch implementation .. or enter sloci-image. sloci-image is a simple CLI for packing a rootfs into a single layer OCI image. It can easily be extended, or ported to other language implementations in the future. But it brings nearly no native dependencies and is a pure/clean implementation of the image spec that integrates nicely in an oe/bitbake environment. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: Uprev and fix host compiler and linker flags.Christopher Clark2019-02-212-3/+80
| | | | | | | | | | | | | | | | Adds patch to fix detection of the "no-pie" vs "nopie" flag, which needs to be performed for both the host and target compilers; cannot assume that one works for the other. Use EXTRA_HOST_CFLAGS and EXTRA_HOST_LDFLAGS variables for passing the host tool build parameters: BUILD_CFLAGS and BUILD_LDFLAGS. Drop unneeded 'NO_WERROR=1' from the recipe and rewrap line. Uprev commit to latest git revision. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: remove perl-module-warnings-register from RDEPENDSOleksandr Kravchuk2019-02-211-1/+0
| | | | | | | This module is part of the perl package now and is shipped by default. Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: address CVE-2019-5736Stefan Agner2019-02-152-2/+2
| | | | | | | | | | | | | | Use git hash which addresses CVE-2019-5736. Use the same git hash used in top of Docker 18.09 branch. Changes in runc since 6635b4f0 merge branch 'cve-2019-5736' 0a8e4117 nsenter: clone /proc/self/exe to avoid exposing host binary to container dd023c45 merge branch 'pr-1972' Fixes: CVE-2019-5736 Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.2.4Bruce Ashfield2019-02-152-13/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating containerd to 1.2.4 (and switching to the release branch for our git hash). The following commits are in this update: e6b3f563 Merge pull request #3002 from estesp/prepare-1.2.4-release 5d1443dc Prepare v1.2.4 release 2095626c Merge pull request #3014 from thaJeztah/1.2_bump_cri 78286104 Merge pull request #3013 from thaJeztah/1.2_backport_windows_changes 3cbdf9e4 [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964 dfa19e59 Windows:NewDirectIOFromFIFOSet 84a14ae0 Update runhcs options to include CRI Sandbox support 6a8198b0 Forward ctr.exe --debug as io.containerd.runhcs.v1 options d40cc95f Implement io.containerd.runhcs.v1 shim log opts 30ca1c55 Add io.containerd.runhcs.v1 shim proto options 7908802c Fix Makefile to run protobuild on paths with spaces 583472f6 Merge pull request #2998 from thaJeztah/1.2_backport_bump_runc_cve_2019-5736 b4bf3e34 Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) 74133fa4 Merge pull request #2995 from thaJeztah/1.2_backport_remove_normalize_image_ref ed756ffd Use distribution's reference.ParseDockerRef 2fb38236 Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 7f5f1176 Merge pull request #2974 from ehazlett/release-v1.2.3 7216861d Update for 1.2.3 release 5de147d9 Merge pull request #2984 from Random-Liu/update-cri-release-1.2 f7ac34e3 Update cri plugin to c3cf754321fc38c6af5dfd2552fdde0ad192b31d. 0137339c Merge pull request #2977 from crosbymichael/io-panic 7daf0804 Fix potential containerd panic. 2fd20f11 Merge pull request #2972 from crosbymichael/exec-lock 5730c500 Add a separate lock for pid. b9b7ef32 Revert "use state machine management for exec.Pid()" dba2e5e5 Merge pull request #2965 from fuweid/remove-noop 9b6a318a metadata/gc: remove the noop-loop for snapshot reference d86a73a4 Merge pull request #2946 from fuweid/platformruntime dd29d5c3 Merge pull request #2947 from fuweid/pull-oct a0b4da71 bugfix: support application/octet-stream during pull b4d38c0f runtime: add Add/Delete method in PlatformRuntime interface af900154 Merge pull request #2955 from Random-Liu/cherrypick-#2944-release-1.2 ab2cf013 Use context.Background for `O_NONBLOCK` `OpenFifo`. fa60b5be Merge pull request #2953 from thaJeztah/1.2_backport_fix_xattr 2244a20c fix: SCHILY.xattrs should be SCHILY.xattr 8c9ede4f Merge pull request #2950 from crosbymichael/lint-release bf3c932a [release 1.2] fix: linter issue 5c38d942 Merge pull request #2932 from AkihiroSuda/runc20190115-1.2 32f10c77 bump up runc 97548718 Merge pull request #2917 from dmcgowan/release-1.2.2 ef637041 Update for 1.2.2 release 4bb2b0c3 Merge pull request #2912 from Random-Liu/update-cri-release-1.2 f30fd023 Update cri to 0d5cabd006cb5319dc965046067b8432d9fa5ef8 (branch release/1.2). 46e63338 Merge pull request #2893 from thaJeztah/1.2_revert_temp_golang_fix e71a191f Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" aa5e000c Merge pull request #2878 from andrewhsu/backport-1.2-fifo-timeout 31be8649 Merge pull request #2881 from thaJeztah/1.2_backport_fix_ci_golang_1.11 27c6449c Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) 18f57e20 Add timeout and cancel to shim fifo open 9b32062d Merge pull request #2852 from dmcgowan/prepare-1.2.1 51134077 Update version to 1.2.1 dcc47ddd Merge pull request #2861 from dmcgowan/cherrypick-1.2-2857 4c327b8e Update runc to 96ec2177ae841256168fcf76954f7177af b65a1137 Merge pull request #2860 from Random-Liu/update-cri-release-1.2 18e453e4 Update release note. 586807a8 Update cri plugin to 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c. 4b284fa3 Merge pull request #2856 from Random-Liu/cherrypick-#2854-release-1.2 b413e843 Kill should still work in stopped state. a06cddc2 Merge pull request #2845 from nnttmm/backport_2826 176a5621 Merge pull request #2842 from thaJeztah/1.2_backport_update_runc_1.0-rc6 8dc87dd8 Merge pull request #2847 from thaJeztah/1.2_backport_mask_asound 703786c5 Add /proc/asound to masked paths c42c8952 use state machine management for exec.Pid() 93d5b4b0 Update runc to v1.0.0-rc6 de1f167a Merge pull request #2819 from dmcgowan/prepare-1.2.1-rc 27d72ba7 Update version e3840cce Add 1.2.1 release notes 940c0c06 Merge pull request #2817 from Random-Liu/cherrypick-2811-release-1.2 4598ec21 Lock `KillAll`. e429785c Merge pull request #2815 from thaJeztah/1.2_backport_shimlockwhenstdinclose 9be591e4 Merge pull request #2803 from crosbymichael/cherry-proc-lock 309973ed Merge pull request #2801 from crosbymichael/cherry-runc e4c49d70 Update runc to 10d38b660a77168360df3522881e2dc2be cd83a4e0 fix pipe in broken may cause shim lock forever for runtime v1 275f99fe fix pipe in broken may cause shim lock forever for runtime v2 39cd8634 Merge pull request #2795 from estesp/cherrypick-optimize-shim-lock 3afc3f14 Merge pull request #2796 from estesp/cherrypick-exit-ch-buffers f9323ca9 Revert v2 dropped events 4c72befe Fix process locking and state management 14dc3078 Partially revert the event discard change in #2748. 417d6941 Increase reaper buffer size and non-blocking send 7ef5285b optimize shim lock in runtime v1 040e73fd Merge pull request #2792 from estesp/cherrypick-update-hcsshim-vendor c4a256d3 Merge pull request #2790 from estesp/cherrypick-v1v2-runtime-fix 73758765 Temp: add appveyor enablement for release/1.2 branch 090e3e98 Revendor github.com/Microsoft/hcsshim 046b6c6d enhance: update v1/v2 runtime 7ff9f681 Merge pull request #2784 from Random-Liu/update-cri-release-1.2 54895c0b Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a. cd0ecb78 Merge pull request #2779 from thaJeztah/1.2_backport_ignore_modprobe_failures c4acd17e Ignore modprobe failures in ExecStartPre (systemd unit) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: disable ccacheDengke Du2019-02-141-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | When enable ccache for ceph, error occurs: ----------------------------------------------------- ccache: invalid option -- 'E' ... Unable to determine C++ standard library, got . ----------------------------------------------------- This is because variable "CXX_STDLIB" was null in CMakeLists.txt line: 637, The "CXX_STDLIB" come from: ----------------------------------------------------- execute_process( COMMAND ./librarytest.sh ${CMAKE_CXX_COMPILER} ${CMAKE_CXX_FLAGS} WORKING_DIRECTORY ${CMAKE_SOURCE_DIR} OUTPUT_VARIABLE CXX_STDLIB ) ----------------------------------------------------- The script librarytest.sh in ceph accept argument: compile and flags, but when enable ccache, the compile replace by ccache, so that script failed. So we disable ccache for ceph now. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: Move /etc/docker to a symlink to volatilesTom Rini2019-02-112-2/+8
| | | | | | | | | | The only thing which docker uses /etc/docker for is a TLS key for connecting with other TLS-enabled services. Make /etc/docker a symlink to the existing docker volatiles directory so that we can use docker on a read-only rootfs. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.0.0-rc6Bruce Ashfield2019-02-114-10/+9
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.2.0Bruce Ashfield2019-02-113-15/+46
| | | | | | | | refreshing the containerd support to 1.2.x. We have to tweak the package linking and update the go compile patch, but otherwise, the build is unchanged. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.13.0Bruce Ashfield2019-02-111-3/+3
| | | | | | Bumping to the next cri-o release branch Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: update to v1.14-alphaBruce Ashfield2019-02-111-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix dependency for libxlChris Patterson2019-02-061-1/+1
| | | | | | | "libxl" package does not exist, use Xen. Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: do not try to build for mipsJoe Slater2019-02-061-0/+4
| | | | | | | This recipe does not build for mips, so set COMPATIBLE_HOST to avoid that. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: uprev from v2.10.1 to v2.11Hongzhi.Song2019-02-033-31/+35
| | | | | | | | | | | | | | | | | | | | | | | | | The v2.11 version fixed a bug as follow. Error info: ovs|00002|db_ctl_base|ERR|external-ids:hostname=: argument does not end in "=" followed by a value. The result of ptest between v2.11 and v2.10.1 is similar. v2.11: ERROR: 2765 tests were run, 317 failed (1 expected failure). 85 tests were skipped. v2.10.1: ERROR: 2662 tests were run, 311 failed (1 expected failure). 85 tests were skipped. I checked the detailed result. The failed tests were mostly related to python2 as the image only use python3. Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-webob:upgrade to 1.8.5Hong Liu2019-02-031-2/+2
| | | | | | | Upgrade python-webob from 1.8.2 to 1.8.5 Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: Add bbappend for linux-yocto-devHe Zhe2019-01-251-0/+1
| | | | | | | linux-yocto-dev would also use virualization features. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* linux/docker.cfg: CONFIG_NF_CONNTRACK_IPV4 was replaced by CONFIG_NF_CONNTRACKHongzhi.Song2019-01-251-1/+1
| | | | | | | | kernel has replaced CONFIG_NF_CONNTRACK_IPV4 with CONFIG_NF_CONNTRACK. [commit: a0ae2562c] Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* Use SRCPV instead of SRCREV where possiblePaul Barker2019-01-169-9/+9
| | | | | | | | This change reduces the length of ${PV} for several recipes and gives us auto-incrementing version numbers. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* runc.inc: Move RRECOMMENDS to runc-dockerPaul Barker2019-01-162-1/+2
| | | | | | | | If we're building runc-opencontainers it's likely that we're not using docker. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* netns: Use correct go toolchainPaul Barker2019-01-101-0/+2
| | | | | | | | | | If we don't explicitly set the GO variable as an argument to make then the native go toolchain is invoked instead of the cross-toolchain we actually want. This can result in a netns binary which is built for the wrong architecture. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: uprev from 3.0.3 to 3.1.0Mark Asselstine2019-01-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minor updates and fixes. Improved ptest results per below. root@cube-essential:/usr/lib64/lxc/ptest# ./run-ptest ### Starting LXC ptest ### FAIL: lxc-test-api-reboot SKIPPED: lxc-test-apparmor PASS: lxc-test-attach PASS: lxc-test-automount PASS: lxc-test-autostart PASS: lxc-test-basic PASS: lxc-test-cgpath PASS: lxc-test-cloneconfig PASS: lxc-test-clonetest PASS: lxc-test-concurrent PASS: lxc-test-config-jump-table PASS: lxc-test-console PASS: lxc-test-console-log PASS: lxc-test-containertests PASS: lxc-test-createconfig PASS: lxc-test-createtest PASS: lxc-test-criu-check-feature PASS: lxc-test-destroytest PASS: lxc-test-device-add-remove PASS: lxc-test-get_item PASS: lxc-test-getkeys PASS: lxc-test-list PASS: lxc-test-locktests PASS: lxc-test-lxcpath PASS: lxc-test-may-control PASS: lxc-test-mount-injection PASS: lxc-test-no-new-privs PASS: lxc-test-parse-config-file PASS: lxc-test-raw-clone PASS: lxc-test-reboot PASS: lxc-test-rootfs PASS: lxc-test-saveconfig PASS: lxc-test-share-ns PASS: lxc-test-shortlived SKIPPED: lxc-test-shutdowntest PASS: lxc-test-snapshot PASS: lxc-test-startone SKIPPED: lxc-test-state-server PASS: lxc-test-utils Results: PASSED = 35 FAILED = 1 SKIPPED = 3 (for details check individual test log in ./logs directory) ### LXC ptest complete ### Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* linux-yocto: cleanup lxc.cfg kernel config fragmentMark Asselstine2019-01-101-6/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixes: WARNING: linux-yocto-4.18.21+gitAUTOINC+9e348b6f9d_db2d813869-r0 do_kernel_configcheck: [kernel config]: This BSP sets config options that are not offered anywhere within this kernel: CONFIG_EXT3_FS_XATTR CONFIG_RESOURCE_COUNTERS CONFIG_CGROUP_MEM_RES_CTLR CONFIG_CLS_CGROUP CONFIG_NETPRIO_CGROUP CONFIG_DEVPTS_MULTIPLE_INSTANCES Configs were either dropped or renamed according to the updates made in the kernel, as capture below. CONFIG_RESOURCE_COUNTERS gone since kernel v3.19 via mainline commit 5b1efc027c0b51ca3e76f4e00c83358f8349f543. CONFIG_CGROUP_MEM_RES_CTLR renamed since kernel v3.6 via mainline commit c255a458055e459f65eb7b7f51dc5dbdd0caf1d8 CONFIG_CLS_CGROUP never existed AFAICT it should have always been CONFIG_NET_CLS_CGROUP CONFIG_NETPRIO_CGROUP renamed since kernel v3.14 via mainline commit 86f8515f9721fa171483f0fe0391968fbb949cc9 CONFIG_DEVPTS_MULTIPLE_INSTANCES removed since kernel v4.7 via mainline commit eedf265aa003b4781de24cfed40a655a664457e6 Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* kernel: update bbappends to match oe-coreBruce Ashfield2018-12-211-0/+0
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* add the py2 version for python-docker and python-docker-pycreds packagesTing Yu2018-12-216-22/+32
| | | | | | | | | | | | | add the py2 version for python-docker and python-docker-pycreds packages. add python-six and python-backport_ssl (for ph2 only) as python-docker dependencies. verify the connection to docker engine at run time - >>> import docker >>> client = docker.from_env() >>> client.images.list() [<Image: 'hello-world:latest'>] Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* linux-yocto: add virtio kernel configsChin Huat Ang2018-12-121-0/+2
| | | | | | | | Instead of setting virtio kernel configs in LXC fragment, just reuse cfg/virtio.scc from yocto-kernel-cache. Signed-off-by: Chin Huat Ang <chin.huat.ang@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: remove virtio kernel configsChin Huat Ang2018-12-121-11/+0
| | | | | | | | The script lxc-checkconfig doesn't seem to report virtio related kernel configs as required, so remove them from lxc.cfg instead. Signed-off-by: Chin Huat Ang <chin.huat.ang@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Amend do_install for FHS 3.0.Eric Chanudet2018-12-121-5/+6
| | | | | | | | | | | | | | Under FHS 3.0: /var/run -> /run http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch03s15.html systemd-tmpfiles throws some warnings with /var/run in xen.conf: systemd-tmpfiles[981]: [/etc/tmpfiles.d/xen.conf:1] Line references path below legacy directory /var/run/, updating /var/run/xenstored → /run/xenstored; please update the tmpfiles.d/ drop-in file accordingly. systemd-tmpfiles[981]: [/etc/tmpfiles.d/xen.conf:2] Line references path below legacy directory /var/run/, updating /var/run/xend → /run/xend; please update the tmpfiles.d/ drop-in file accordingly. systemd-tmpfiles[981]: [/etc/tmpfiles.d/xen.conf:3] Line references path below legacy directory /var/run/, updating /var/run/xend/boot → /run/xend/boot; please update the tmpfiles.d/ drop-in file accordingly. systemd-tmpfiles[981]: [/etc/tmpfiles.d/xen.conf:4] Line references path below legacy directory /var/run/, updating /var/run/xen → /run/xen; please update the tmpfiles.d/ drop-in file accordingly. Signed-off-by: Eric Chanudet <chanudete@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: upgrade from 4.11.0 to 4.11.1Jed2018-12-121-2/+2
| | | | | Signed-off-by: Jed <jed.openxt@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* README: add optional dependency on meta-cloud-servicesOleksandr Kravchuk2018-12-041-0/+6
| | | | | | | | Ceph package depends on libibverbs, which is provided by the meta-cloud-services layer. Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxcfs: uprev from v3.0.1 to v3.0.3Mark Asselstine2018-12-041-2/+2
| | | | | | | | | | | | A very small # of new commits. Most are minor bug fixes, no feature work. I looked at adding ptests but the tests are mostly in an unusable state at the moment, for example several require cgm despite cgmanager being deprecated. So I have opted to continue without them and only when we can work with upstream to improve their testing can we seriously consider adding them. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* Add pidfile flag to store dockerd PID in /var/run/dockerd.pidTing Yu2018-12-041-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* criu: Don't open /run/criu.kdat if doesn't existsHongzhi.Song2018-11-292-0/+43
| | | | | | | | | | | | | When CRIU is called for a first time and the /run/criu.kdat file does not exists, the following warning is shown: Warn (criu/kerndat.c:847): Can't load /run/criu.kdat This patch is replacing this warning with a more appropriate debug message. File /run/criu.kdat does not exist Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* openvswitch: uprev from 2.10.0 to 2.10.1Mark Asselstine2018-11-292-2/+2
| | | | | | Pickup the latest security and bug fixes for openvswitch. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
* libvirt: uprev from 4.7.0 to 4.9.0Mark Asselstine2018-11-293-111/+4
| | | | | | | | | | | | | | | | | | | | | Minor update bringing in new features such as better support for cgroup v2, vfio AP support, support for XEN suspend/wakeup. Basic usecases pass and the ptest return similar results we have been achieving with the last few uprevs: ==================================== Testsuite summary for libvirt 4.9.0 ==================================== # TOTAL: 120 # PASS: 117 # SKIP: 0 # XFAIL: 0 # FAIL: 3 # XPASS: 0 # ERROR: 0 Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
* lxc: uprev from 3.0.2 to 3.0.3Mark Asselstine2018-11-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to the just released v3.0.3. This release is a collection of minor changes, bug fixes, logging updates, documentation cleanup, code cleanup and some new tests. We have an improved outlook as far as ptests is concerned as well: ### Starting LXC ptest ### FAIL: lxc-test-api-reboot SKIPPED: lxc-test-apparmor PASS: lxc-test-attach PASS: lxc-test-automount FAIL: lxc-test-autostart PASS: lxc-test-basic PASS: lxc-test-cgpath PASS: lxc-test-cloneconfig PASS: lxc-test-clonetest PASS: lxc-test-concurrent PASS: lxc-test-config-jump-table PASS: lxc-test-console PASS: lxc-test-console-log PASS: lxc-test-containertests PASS: lxc-test-createconfig PASS: lxc-test-createtest PASS: lxc-test-criu-check-feature PASS: lxc-test-destroytest PASS: lxc-test-device-add-remove PASS: lxc-test-get_item PASS: lxc-test-getkeys PASS: lxc-test-list PASS: lxc-test-locktests PASS: lxc-test-lxcpath PASS: lxc-test-may-control FAIL: lxc-test-no-new-privs PASS: lxc-test-parse-config-file PASS: lxc-test-raw-clone PASS: lxc-test-reboot PASS: lxc-test-rootfs PASS: lxc-test-saveconfig PASS: lxc-test-share-ns PASS: lxc-test-shortlived SKIPPED: lxc-test-shutdowntest PASS: lxc-test-snapshot PASS: lxc-test-startone SKIPPED: lxc-test-state-server PASS: lxc-test-utils Results: PASSED = 32 FAILED = 3 SKIPPED = 3 (for details check individual test log in ./logs directory) ### LXC ptest complete ### Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
* docker: fix broken init scriptChin Huat Ang2018-11-203-6/+10
| | | | | | | | | Fix numerous docker.init issues such as missing runtime dependency util-linux-unshare, incomplete handling of start/stop etc. operations and minor typos. Signed-off-by: Chin Huat Ang <chin.huat.ang@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvmi: add byacc-native to the DEPENDSBruce Ashfield2018-11-161-1/+1
| | | | | | | libvmi is looking for yacc during configuration, so we must add it to our DEPENDS as a native tool. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: remove sse tuning flagBrendan Kerrigan2018-11-081-0/+1
| | | | | | | | | Strip out the sse4.2 tuning flag to prevent sse instructions from being generated in the build, which breaks the hvmloader on some machine types (specifically core-i7 from meta-intel). Signed-off-by: Brendan Kerrigan <kerriganb@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* ceph: fix rbd create operation not supportedDengke Du2018-11-081-3/+2
| | | | | | | | | | | | | | | | | | | | When using qemu-img to create rbd based image: qemu-img create -f rbd rbd:libvirt-pool/libvirt-image 2G Output errors: qemu-img: rbd:libvirt-pool/libvirt-image: error rbd create: Operation not supported Accroding to upstream's advice: http://lists.ceph.com/pipermail/ceph-users-ceph.com/2018-November/031014.html This is because the system can't find libcls_rbd.so, this library was packaged in ceph-dev, we should package it in ceph. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* kata: WIPBruce Ashfield2018-11-054-0/+166
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* runc: refresh to tip of treeBruce Ashfield2018-11-053-14/+9
| | | | | | | docker/k8s and other components have been refreshed to the 18.09 release tags. So we update runc to keep in sync. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* docker/docker-ce: uprev to 18.09Bruce Ashfield2018-11-054-51/+34
| | | | | | | | | | | | | | | | | | | | | Infrastructure changes triggered updated to supporting parts of the docker stack, so to make sure that everything stays in sync we update to the 18.09 release. There were some minor build differences in this update, but in the end, things are better since we can use some more of the Make infrastructure versus calling 'go build' directly. Also, docker-ce and docker are now virtually the same, except for the moby based docker pulling in the cli and libnetwork repos independently. There should be virtually no difference between the results, but we still keep the two variants for flexibility. We also drop the unused/legacy 'hi.Dockerfile'. Tested with both kubernetes and docker unit tests. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* cri-o: update to 1.12 releaseBruce Ashfield2018-11-022-25/+27
| | | | | | | | | | Since kubernetes is now on 1.12, we need to sync our cri-o release to match. There are some build changes to the utilities, and a patch refresh, but otherwise, this is very similar to the exiting build of cri-o. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* cni: update to latest plugins, and skip windows bridge buildBruce Ashfield2018-11-021-3/+3
| | | | | | | | | Updating the cni plugins to match k8s and cri-o. We also filter out the windows plugins, since they use a different build infrastructure than the other variants .. and are not currently needed. This can be revisted in the future as needed. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* cri-o: disable ptest buildBruce Ashfield2018-11-021-0/+3
| | | | | | | | | | We aren't running any ptests for cri-o (it is hard to test in isolation), and the update to go 1.11 has broken the build in the ptest phase. For now, we remove the task to get the build running again. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* kubernetes: uprev to v1.12 release and fix cross compilation errorsBruce Ashfield2018-11-022-3/+37
| | | | | | | | | The update to go 1.11 exposed some issues with the cross compilation of kubernetes. The best way to fix those issues is to uprev to 1.12 and to inhibit the building of the test modules (which query the host for infrastructure that is not present). Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* hyperstart: refresh/uprev core supportBruce Ashfield2018-10-311-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* ceph: fix Distutils.cmake installation for cross compileDengke Du2018-10-302-8/+58
| | | | | | | | | 1. Remove the detection for build host and correct the install destination for cross compile. 2. Delete the build host information in the results files. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* ceph: upgrade to 13.2.2Dengke Du2018-10-254-37/+235
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. upgrade to 13.2.2 2. install systemd service files 3. add pybind support testing steps: # ceph -h outputs: -------------------------------------------------------------------------- General usage: ============== usage: ceph [-h] [-c CEPHCONF] [-i INPUT_FILE] [-o OUTPUT_FILE] [--id CLIENT_ID] [--name CLIENT_NAME] [--cluster CLUSTER] [--admin-daemon ADMIN_SOCKET] [-s] [-w] [--watch-debug] [--watch-info] [--watch-sec] [--watch-warn] [--watch-error] [--watch-channel {cluster,audit,*}] [--version] [--verbose] [--concise] [-f {json,json-pretty,xml,xml-pretty,plain}] [--connect-timeout CLUSTER_TIMEOUT] [--block] [--period PERIOD] Ceph administration tool optional arguments: -h, --help request mon help -c CEPHCONF, --conf CEPHCONF ...... -------------------------------------------------------------------------- Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: Upgrade to 3.0.2Mingli Yu2018-10-229-54/+48
| | | | | | | | | | | | | | | * Refresh patch to avoid fuzz warnings * Update to 3.0.2 as lxc-destroy failed when system boot in nfs rootfs in lxc 3.0.1 as below: # lxc-destroy -n test9 lxc-destroy: test9: utils.c: _recursive_rmdir: 149 Failed to delete /var/lib/lxc/test9 lxc-destroy: test9: lxccontainer.c: container_destroy: 2946 Failed to destroy directory "/var/lib/lxc/test9" for "test9" Destroying test9 failed Update to 3.0.2 to fix the above issue Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>