summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python-pyyaml: Remove the recipeWang Mingyu2020-01-081-32/+0
| | | | | | | Because they already exist in meta-openembedded, remove the recipe. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-sqlalchemy: Remove the recipeWang Mingyu2020-01-081-18/+0
| | | | | | | Because they already exist in meta-openembedded, remove the recipe. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: backport patch to fix compilation failure of boost 1.72Chen Qi2020-01-082-0/+63
| | | | | | | | Backport a patch to fix compliation failure caused by boost upgrading to 1.72. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: remove docker.service.rpmChen Qi2020-01-082-0/+2
| | | | | | | This file is useless and misleading. Remove it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-nrpe: fix compile error when packageconfig ssl enabledKai Kang2019-12-291-1/+1
| | | | | | | | | | | | | | | | It fails to compile nagios-nrpe when packageconfig ssl enabled: | ./nrpe.c:45:12: fatal error: ../include/dh.h: No such file or directory | 45 | # include "../include/dh.h" | | ^~~~~~~~~~~~~~~~~ | compilation terminated. Header file include/dh.h is created by native openssl called by configure script. If no native openssl exists, no header file is created. Add openssl-native to dependency for packageconfig ssl. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: upgrade 1.6.1 -> 1.6.2Tim Orling2019-12-181-2/+2
| | | | | | | | | | | Lateest upstream is 1.6.4, but neither 1.6.3 nor 1.6.4 build cleanly. Release notes: https://github.com/containers/libpod/releases/tag/v1.6.2 Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* meta-virt-default-versions.inc: use go 1.12 versionChen Qi2019-12-101-0/+4
| | | | | | | kubernetes could not be built correctly with go 1.13. Use 1.12 version in layer.conf. Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
* go: add back 1.12 version to avoid compilation failureChen Qi2019-12-1024-0/+1542
| | | | | | | | | | | | | | go 1.12 was removed from oe-core, but currently k8s cannot be built successfully with go 1.13. See link below. https://github.com/kubernetes/kubernetes/issues/82531 We need to wait for k8s to support go 1.13 and update it to latest release, as well as its depedencies. Before this is done, add back go 1.12 and use it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: add k8s distro featureBruce Ashfield2019-12-104-2/+11
| | | | | | | Add support for a new distro feature to control kubernetes versions and related configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-nacl: add 1.3.0 recipeMing Liu2019-12-101-0/+26
| | | | | | | | | | | | | A regression was introduced by commit ab12e48a: [ python3-docker-compose: uprev to 1.25.0 ] python3-docker-compose depends on python3-paramiko hence also depends on python3-nacl but that recipe does not exist. Port it from meta-lmp layer. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-paramiko: add 2.7.0 recipeMing Liu2019-12-101-0/+16
| | | | | | | | | | | | | A regression was introduced by commit ab12e48a: [ python3-docker-compose: uprev to 1.25.0 ] python3-docker-compose depends on python3-paramiko but that recipe does not exist. Port it from meta-lmp layer and uprev to the latest release 2.7.0. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: uprev to 1.25.0Ming Liu2019-12-063-47/+51
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-docker: uprev to 4.1.0Ming Liu2019-12-063-2/+2
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-docker-pycreds: uprev to 0.4.0Ming Liu2019-12-063-2/+2
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: fix meta-virt version / config includeBruce Ashfield2019-12-062-1/+12
| | | | | | | | | | | | | | | As was reported: https://lists.yoctoproject.org/g/meta-virtualization/message/4173?p=,,,20,0,0,0::Created,,conf%2Flayer.conf+is+broken,20,2,0,61269733 The conditional include of the meta-virt versions and config was not working properly due to parse time constraints. This commit fixes that by following the example of the meta-cube layer and instead using a user bbclass to load the .inc file after distro/distro features have been resolved by bitbake. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker.inc: Add xt-addrtype kernel moduleNorbert Kaminski2019-12-011-1/+1
| | | | | | | | | | | | | | | | | | | Trying to use docker info and hello world container without this module causes a daemon error. docker info error log: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? dockerd error log: PREROUTING chain: iptables failed: iptables --wait -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER: iptables v1.8.3 (legacy): Couldn't load match `addrtype':No such file or directory Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: workaround failure since go upgraded to 1.13Hongxu Jia2019-12-011-0/+3
| | | | | | | | | | | | | | | | | Since go was upgraded to 1.13, there is a failure: ... | src/vendor/golang.org/x/net/http2/frame.go:17:2: use of vendored package not allowed | ../../../recipe-sysroot/usr/lib64/go/src/net/http/h2_bundle.go:49:2: use of vendored package not allowed ... Refer upstream suggestion [1]: `or copying your vendor contents into GOPATH/src rather than mapping them in to GOPATH/src/vendor.' [1] https://github.com/golang/go/issues/34068 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: remove maximum version requirementsChen Qi2019-11-273-45/+59
| | | | | | | | | | | | | | | | | Remove maximum version requirements for docker-compose so that it does not require old version recipes. The old version recipes required are as below. * PyYAML * requests * urllib3 * idna * jsonschema The current one has been tested against https://docs.docker.com/compose/gettingstarted/. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-sqlalchemy: drop 1.0.16 recipeMing Liu2019-11-251-16/+0
| | | | | | | | Seems no one is referring this recipe, there is already a python-sqlalchemy_1.1.5 recipe in this layer. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: Disable for all mips machinesHongxu Jia2019-11-251-0/+1
| | | | | | | | | Since commit [a092153 containerd: Disable for all mips machines] applied, and the cri-o runtime depends `virtual/containerd', it should do the same thing to disable for all mips machines Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-guest-image-minimal: do not inherit distro_features_checkMing Liu2019-11-251-1/+1
| | | | | | | | Change to inherit features_check, since distro_features_check has been deprecated in OE. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* meta-virt-default-versions.inc: fix invalid python-pyyaml versionMing Liu2019-11-251-1/+1
| | | | | | | | The python-pyyaml recipe in this layer is 5.1.2, fix the wrong PREFERRED_VERSION_python-pyyaml. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* README: update mailing list addressBruce Ashfield2019-11-221-2/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: fix CVE-2019-16884Chen Qi2019-11-173-0/+203
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docs: roadmap: add missing workflow itemsBruce Ashfield2019-10-281-0/+8
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docs: add meta-virt planning / roadmap fileBruce Ashfield2019-10-281-0/+79
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Set correct PV release numberJoakim Roubert2019-10-241-1/+1
| | | | | | | | | | Commit c97fe5036ef3df2967d086711e6c0c405941e14b is Kubernetes v1.16.2 (see https://github.com/kubernetes/kubernetes/releases for verification) and building with the current recipe generates v1.16.2 binaies although the package names state v1.16.1. Change-Id: I5701c18cc3ce205ad906eda2595d9ad7f5748b17 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: upgrade to version 1.21.2Li Zhou2019-10-193-35/+47
| | | | | | | | | | The python3-docker-compose_1.16.1 requires 'docker<3.0, >=2.5.1', while python3-docker 3.4.0 is provided. Error occurs when running 'docker-compose --version'. Upgrade to python3-docker-compose_1.21.2 to make it work. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: bump to 1.16-relase branchBruce Ashfield2019-10-151-3/+3
| | | | | | | | Updating kubernetes to use the 1.16 relese (instead of the 1.16) alpha. No issues were found in build and runtime testing of this versus the alpha release. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: use GO flags/compiler from recipeBruce Ashfield2019-10-152-2/+34
| | | | | | | | | | | | The image tools were not building with the oe/cross GO compiler and flags. As such, you could end up with a binary on target with the wong elf interpreter (the host one). With this, we properly use the settings from our build. We also bump the SRCREV to pickup a few minor fixes to the package. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: move into subdirectoryStefan Agner2019-10-141-0/+0
| | | | | | | | The layer does not expect recipes in the first subdir. Move the podman-compose recipe into a podman-compose subdirectory. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Fix criu build for aarch64Ruslan Piasetskyi2019-10-131-1/+1
| | | | | | | | | | | | Makefile: # # Supported Architectures ifneq ($(filter-out x86 arm aarch64 ppc64 s390,$(ARCH)),) $(error "The architecture $(ARCH) isn't supported") endif Signed-off-by: Ruslan Piasetskyi <ruslan.piasetskyi@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: add FUSE implementation of overlayfsStefan Agner2019-10-131-0/+15
| | | | | | | | Add recipe for the FUSE implementation of overlayfs. This is useful to improve startup time for podman rootless containers. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: initial versionStefan Agner2019-10-131-0/+15
| | | | | | | | | Add podman-compose, a docker-compose implementation for podman. The current version is not feature complete, hence not all docker-compose file work. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: add default set of configuration filesStefan Agner2019-10-133-1/+166
| | | | | | | | | Add a default registries.conf and storage.conf. Those config files are used by several projects of the containers group like buildah or podman. Provide it as part of skopeo like the other distributions do. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: bump to latest release 1.6.1Stefan Agner2019-10-131-2/+2
| | | | | | | Bump to latest podman release 1.6.1. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: remove comment about runcStefan Agner2019-10-131-2/+0
| | | | | | | | | It seems that docker uses nowadays a rather vanilla version of runc, at the time of writing 1.0.0-rc8. This version has successfully tested with podman, hence remove the obsolete comment. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: introduce crun (OCI runtime provider)Bruce Ashfield2019-10-131-0/+32
| | | | | | | | | | | | | | | | | | | | | | | | Create the initial recipe to provide crun as an alternative OCI runtime provider. This currently has a depdenency on seccomp, but it would be nice if we can make that optional in the future to avoid pulling in all of meta-security as a dependency. Example: % skopeo copy docker://busybox oci:busybox-oci:latest % mkdir busybox-bundle % oci-image-tool create --ref platform.os=linux busybox-oci busybox-bundle % cd busybox-bundle/ % rm config.json % runc spec % runc run foo ^D % crun run foo ^D Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* layer: add zeus as compatibleBruce Ashfield2019-10-081-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix layer check cut & paste errorsBruce Ashfield2019-10-071-8/+2
| | | | | | | | The layer check for podman was copied from cri-o .. and some non podman elements came over as part of that copy. We drop selinux as a check, and fix some comments. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: make docker wrapper configurable via packageconfigBruce Ashfield2019-10-031-1/+10
| | | | | | | | | | | | | | | | | podman can behave as transparent drop in replacement for docker via a wrapper 'docker' script that simply calls podman when any docker command is issues. While this is an interesting feature, we want it to be optional .. since it is possible that podman and docker might want to be installed at the same time. So we introduce a 'podman' PACKAGECONFIG, that controls whether or not this wrapper is installed, and if it is installed it marks the podman package as conflicting with docker (which gets us a better message than a failed image assembly provides). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add build flexibility to dependenciesBruce Ashfield2019-10-021-1/+19
| | | | | | | | | | | | | | | | In a similar manner to cri-o, we don't want to make meta-selinux or meta-security a hard dependency to meta-virtualization. So we implement a similar anonymous python check that allows the recipe to be skipped if the dependent layers are not present (and hence we are yocto compatible). If we get more than two recipes doing layer checks (this is the 2nd), we can move the functionality to a class. We also make the runc dependency be virtual/runc versus picking a specific provider (even if only runc-opencontainers has been tested). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: drop ostree from anonymous python warningBruce Ashfield2019-10-021-6/+0
| | | | | | | ostree is now provided by meta-oe, which is a required layer so we can drop it from the anonymous python checks for layers. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-metalinter: add recipe for gometalinterStefan Agner2019-10-021-0/+24
| | | | | | | | | A tool that concurrently runs a whole bunch of go linters and normalises their output to a standard format. Useful to build podman. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: initial addStefan Agner2019-10-022-0/+61
| | | | | | | Add conmon, a OCI container runtime monitor. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-md2man: add md2manStefan Agner2019-10-021-0/+20
| | | | | | | | This tool converts markdown into roff (man pages). Useful to build podman. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: move cni tools to /usr/libexec/cniStefan Agner2019-10-022-3/+7
| | | | | | | | | Use a standard location to store the cni tools and plugins. This is more in line how other distributions package cni. Keep a symlink to /opt/cni/bin for backward compatibility. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* slirp4netns: add slirp4netns user-mode networkingStefan Agner2019-10-021-0/+16
| | | | | | | | | slirp4netns allows connecting a network namespace to the Internet in a completely unprivileged way, by connecting a TAP device in a network namespace to the usermode TCP/IP stack ("slirp")." Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: add skopeoStefan Agner2019-10-021-0/+73
| | | | | | | | | | | | | | skopeo is a command line utility that performs various operations on container images and image repositories. skopeo can work with OCI images as well as the original Docker v2 images. The recipe originates from from meta-overc commit a497792. It has been updated with the new project URL and v0.1.39. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add the Pod Manager toolStefan Agner2019-10-021-0/+93
| | | | | | | | | | | | | | | | | | Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. This patch adds the initial recipe for podman. Currently the build tags systemd (if in DISTRO_FEATURES), seccomp, varlink and remoteclient are enabled which allows to run podman with overlayfs as root and vfs in rootless mode. The storage drivers btrfs and device-mapper have not been tested and are disabled at the moment. It seems that seccomp is mandatory, which makes meta-security which provides libseccomp a mandatory dependency for this recipe. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>