summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* podman: update to v3.1Bruce Ashfield2021-04-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to v3.1, which comprises the following commits: bce3e6c5f Fix tests ec1a512ac Bump to v3.1.1-dev 9f09fb62c Bump to v3.1.0 1386f9046 Fix test failure 38bb77c5b Update release notes for v3.1.0 final release 670e1ac67 [NO TESTS NEEDED] Turn on podman-remote build --isolation ac4bdd265 Fix long option format on docs.podman.io 96ffce219 Fix containers list/prune http api filter behaviour e772719bf [CI:DOCS] Add note to mappings for user/group userns in build 52cd3ce2d Validate passed in timezone from tz option 633ae014e Generate Kubernetes PersistentVolumeClaims from named volumes c9640bab7 libpod/image: unit tests: use a `registries.conf` for aliases 43c772aa2 libpod/image: unit tests: defer cleanup 396a59b02 libpod/image: unit tests: use `require.NoError` a01b387e8 Unification of until filter across list/prune endpoints 183a68a81 Unification of label filter across list/prune endpoints d1589f280 fixup 31351ad94 fix: build endpoint for compat API 7148544df [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot 88672b58c Check if stdin is a term in --interactive --tty mode 23f3805df [NO TESTS NEEDED] Fix rootless volume plugins 5e3445e6e Ensure manually-created volumes have correct ownership 6b6989206 Support multi doc yaml for generate/play kube d560f168f Correct json field name 573ed9220 Fix filters in image http compat/libpod api endpoints 1b349d79a podman generate systemd --new do not duplicate params 1089f83a4 Fix podman build --pull-never be02c8581 man pages: correct seccomp-policy label 62b49e176 [NO TESTS NEEDED] Use same function podman-remote rmi as podman 3d1aaffdb Add problematic volume name to kube play error messages d498022fd Fix list pods filter handling in libpod api 66b1c2bd9 [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS b55730180 Remove resize race condition e7dc66d83 [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 57e0d8f29 Use TMPDIR when commiting images 505f43c08 Add RequiresMountsFor= to systemd generate 15da607d1 Fix swapped dimensions from terminal.GetSize 0127cc184 Revert go-systemd to v2.22.0 4f11517c0 Cirrus: Update configuration for v3.1 branch 834f4caaa Bump to v3.1.0-dev 1b56ea2d9 Bump to v3.1.0-rc2 1ae87ff46 Update release notes for v3.1.0-RC2 3b609a706 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.3.0 1dfbdd5d9 Fix system prune cmd user message with options afce37671 System tests: reenable a bunch of skipped tests 417f36281 Cleanup /libpod/images/load handler adf652e2a vendor: drop replace for github.com/syndtr/gocapability e85cf8f4a security: use the bounding caps with --privileged f46b34ecd Bump github.com/containers/common from 0.35.0 to 0.35.3 5a18b5eb7 Bump k8s.io/apimachinery from 0.20.4 to 0.20.5 aa2d6e6e6 Fix volumes and networks list/prune filters in http api ec1651fbf Bump github.com/containers/storage from 1.25.0 to 1.28.0 1ca74b00d add a dependabot config to automate vendoring a596d1f5d Bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2 8ea02d0b6 network prune filters for http compat and libpod api 8da5fd820 test: check for io.stat existence on cgroup v2 592aae4f9 test: fix test for last crun/runc 1c873c7da test: simplify cgroup path af3499db5 Latest crun/runc should handle blkio-weight test 82858a97c fix user message image prune --all 3d01d42f2 Docs: removing secrets is safe for in-use secrets 21f229a3d Downgrade github.com/coreos/go-systemd/v22 e8918ff10 pkg/bindings/images.Build(): fix a race condition in error reporting 310eae4ba Switch all builds to pull-never 963d19c75 System test cleanup f4b2d597a Fix for volumes prune in http compat api 8de560703 Fix remote client timezone test 57e8c6632 Do not leak libpod package into the remote client 762148deb Split libpod/network package 955aaccc5 fix use with localhost (testing) 9251b6c8c add /auth for docker compatibility 3803d0a4a create endpoint for querying libpod networks 12fb9e465 Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 660a72993 sdnotify tests: try real hard to kill socat processes 7b0155cf7 Fix array instead of one elem network http api 92a8d69a7 Delete all containers and pods between tests 258749e43 apiv2 tests: finally fix POST as originally intended c9ef26071 Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables f1eb8e816 Removing a non existing container API should return 404 dc0c72a48 Docs: Add docs to access APIs inside container 6d4899745 options: append CLI graph driver options 930bec4d3 podman load: fix error handling 1f2f7e745 podman cp: evaluate symlink correctly when copying from container 2033fa4c7 rm pkg/api/handlers/libpod/copy.go 31b11b5cd podman cp: fix copying to a non-existent dir a61d70cf8 podman cp: fix ownership 2abfef380 podman cp: ignore EPERMs in rootless mode d175fbfdb vendor buildah@v1.19.8 e33f52390 apiv2 tests: add helpers to start/stop a local registry e926b5d73 Bump to v3.1.0-dev aa9616cd4 Bump to v3.1.0-rc1 e9db60492 allow the removal of storage images 9eac4a7f7 podman-remote build does not support volumes d1878cc67 Compat API: Avoid trying to create volumes if they already exist 7e289833e Bump github.com/onsi/gomega from 1.10.5 to 1.11.0 0e36e65ea Allow users to generate a kubernetes yaml off non running containers 80390dd18 Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1 d0d084dd8 turn hidden --trace into a NOP 320df8388 pkg/terminal: use c/storage/pkg/homedir cc7a7568a Update nix pin with `make nixpkgs` 9e75cafd5 build-arg 326f3eda3 Handle podman build --dns-search 01ffe2c30 podman build --build-arg should fall back to environment 2c500a814 Add support for podman build --ignorefile 1a33b7648 replace local mount consts with libpod/define e4da5096b separate file with mount consts in libpod/define 9fc29f63e Correct compat images/{name}/push response a910f74ea [NO TESTS NEEDED] Bump pre-commit-hooks version 3ae580b0e [ci skip] Bad formatting fix in build documentation 803e58b36 Bump github.com/containernetworking/plugins to v0.9.1 d107c3729 podman-remote stop -time 0 does not work 5bb8fa30b Do not return from c.stop() before re-locking 2bcc95257 Fix for podman network rm (-f) workflow 3396343d4 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.2.0 efc592fba Bump github.com/containers/buildah from 1.19.6 to 1.19.7 793c52dd5 Add tests for selinux kvm/init labels 8453424e2 Respect NanoCpus in Compat Create a090301bb podman cp: support copying on tmpfs mounts e43385eca image removal: ignore unknown-layer errors aa0a57f09 Fix cni teardown errors f86d64130 Use version package to track all versions 252aec1c9 Check for supportsKVM based on basename of the runtime 53d22c779 Compat API: create volume source dirs on the host 61e626c85 Makefile: add install.docker-docs-nobuild for packaging use 81a3f8a43 Add /sys/fs/cgroup as readonly path in docs 8f2192922 Add network summary to compat ps 4eed89aca Fix possible panic with podman build --iidfile 9391bfc52 Add version field to secret compat list/inspect api b19791c0b Tidy duplicate log tests 5df625140 Fix support for podman build --timestamp 43e899c2e Rewrite Rename backend in a more atomic fashion 91b2f07d5 Use functions and defines from checkpointctl bf92e2111 Move checkpoint/restore code to pkg/checkpoint/crutils bd819ef7d Vendor in checkpointctl 2c8c5393a Support label type dict on compat build ac992e4b0 Makefile: install systemd services conditionally 63a3b8a09 podman-system-service.1.md: fix timeout example 774aea45e swagger: update the libpodPutArchive operation verb 3908c0079 Makefile: split install.docker-docs from install.docker 2f0fc2911 Bump RootlessKit v0.14.0-beta.0 8b7caa6d0 Compat api containers/json Ports field is null 14d5bd164 Bump github.com/cri-o/ocicni to latest master 7927fe01f Refactor python tests to run against python3.9 9435e5b79 APIv2 tests: make more maintainable e9d94dc90 [CI:DOCS] Improve release process docs 375201633 podman rmi: handle corrupted storage better d9cb135b6 Enable cgroupsv2 rw mount via security-opt unmask cc679d952 podman-image-sign.1.md: typo fix f54ed7269 compat api network ls accept both format options 680dacaea Enable no_hosts from containers.conf fcce1da1b Correct compat images/create?fromImage response ba319e3ba [Compat API] Also print successfully tagging images in /build endpoint 43d010bd0 Fix parsing of Tmpfs field in compat create 24d9bda7f prune remotecommand dependency bee21f1e4 system test image: build it multiarch ef549235e Updated based on Jhonce comments ccbe4ff73 updated common to 0.35.0 836bfebb4 Refactored file 1aa96ed2e swagger: removes the schema type for PodSpecGenerator $ref 431f75519 podman-system-connection.1.md: fix copy/paste error 90050671b Add dns search domains from cni response to resolv.conf f152f9cf0 Network connect error if net mode is not bridge fc32ec768 Sort CapDrop in inspect to guarantee order 79eaadd3f podman upgrade tests 3947feb4b test: ignore named hierarchies for cgroups=split e5ac28f3b container removal: handle already removed containers a775c5920 Bump github.com/rootless-containers/rootlesskit from 0.13.1 to 0.13.2 0ab32d11d Bump k8s.io/apimachinery from 0.20.3 to 0.20.4 874f2327e Add U volume flag to chown source volumes fcf669fd9 Replace Labels and Options nulls with {} in NetworkResource 4875a8fb4 Cirrus: Temp. disable prior-fedora (F32) testing f3a8e3324 podman cp: test /dev/stdin correctly 8577be72e podman cp: treat /dev/stdout correctly e87c5b6c1 cgroup: change cgroup deletion logic on v1 9d818be73 Fix podman network IDs handling d9655b0f0 pr-should-include-tests: recognized "renamed" tests d2f3098c6 --no-header flag implementation for generate systemd af7a68fa8 [NO TESTS NEEDED] Make binding util internal c236aebb9 Two variations of --new flag added to e2e a2e1b3eab swagger: add missing schema properties 5dded6fae bump go module to v3 d333ef82b Fix 'storage.options' indent d886cd930 Bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0 b40d778f4 Bump github.com/containers/buildah from 1.19.4 to 1.19.6 05eb06f56 Turn on journald and k8s file logging tests f06dd45e0 Allow podman play kube to read yaml file from stdin 43a581904 Log working dir when chdir fails d6b0b5412 Fix segfault in run with memory-swap e1ad50654 leak fix in rootless_linux.c fcn can_use_shortcut 612ba6aa8 Fix journald logs with more than 1 container 9016387bb Fix journald logs --follow f2d057c94 Fix journald logs --since fbc50e528 fix journald logs --tail 0 cf2a55189 [CI:DOCS]basic networking guide 71689052a cp: treat "." and "/." correctly caa0bc157 [CI:DOCS] [NO TESTS NEEDED] Update swagger doc for libpod container wait 31eca5c20 Bump k8s.io/apimachinery from 0.20.2 to 0.20.3 e022c1975 Don't switch on a single case 3e168b19f Quote URL b3f9559c8 bindings: support simple types that implement fmt.Stringer interface 9699e81a0 API: fix libpod's container wait endpoint condition conversion a9d548bf7 Change source path resolution for volume copy-up e2d5a1d05 podman ps --format '{{ .Size }}' requires --size option 12b6342c3 infra: downgrade warning to debug 12a577aea Ignore entrypoint=[\"\"] 684290725 Bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1 68a8d397c Add missing early returns in compat API 5d1ec2960 Do not reset storage when running inside of a container 958f90143 podman kill should report rawInput not container id 759fc9334 Fix an issue where copyup could fail with ENOENT 2ec0e3b65 do not set empty $HOME 2a21ecafa images/create: always pull image f2f18768a Fix panic in pod creation 0fd480708 Bump github.com/rootless-containers/rootlesskit from 0.13.0 to 0.13.1 2845f7b83 podman build: pass runtime to buildah 39c1fdb15 correct startup error message 690c02f60 Add missing params for podman-remote build a532994f8 Fix typo podman run doc in flag -pid=mode "efault" 4a9bd7a18 When stopping a container, print rawInput 714acf326 fix create container: handle empty host port 3d50393f0 Don't chown workdir if it already exists bf083c185 Fix broken podman generate systemd --new with pods 227c54813 fix dns resolution on ubuntu 0ab5bfd31 e2e: fix network alias test 704fa8b55 fix failing image e2e test 9a24d5098 Update troubleshooting.md 6ffd05d0b [NO TESTS NEEDED] Refactor generated code 2c31f3839 Fix superfluous response.WriteHeader call in WaitContainerLibpod() 4067f3a4d change ps Created to unix 78b419909 Enable more golangci-lint linters adfcb7460 make layer-tree lookup errors non-fatal 78c8a8736 Enable whitespace linter 69ab67bf9 Enable golint linter ef2fc90f2 Enable stylecheck linter 40c3c972d Update Master to reflect the 3.0 release 660a06f2f utils: takes the longest path on cgroup v1 5f999b6bc container ps json format miscue 8e2fae186 Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 1b5f3ed24 utils: create parent cgroups 9196a5ce3 utils: ignore unified on cgroupv1 if not present f4fd25a00 utils: skip empty lines f28b08fe9 Correct compat network prune response 5ccb1596b Display correct value for unlimited ulimit fdf39e169 apiv2: handle docker-java clients pulling ea910fc53 Rewrite copy-up to use buildah Copier 31b2b2cc2 bump to v3.1.0-dev 68133414f [NO TESTS NEEDED] Update linter 46b014bad Bump github.com/spf13/cobra from 1.1.1 to 1.1.2 1cc387bf7 Add shell completion tests for secrets f4ece018b Docker APIv2 push sends digest in response body f2a856203 Fix compat networks endpoint for a empty result 21deafba8 hardening flags for fedora rpmbuilds e15e170ac [CI:DOCS]First pass at release process 46385dd60 Restart service when CONTAINERS_CONF changes cc846a8cd Support annotations from containers.conf 68414537c vendor github.com/containers/image v5.10.2 ea704da72 APIv2 tests: lots of cleanup 721a1e104 Fix Docker APIv2 push endpoint 48c612cf6 generate kube: support --privileged 08d8290f1 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 832a69b0b Implement Secrets 45981ba29 Bump containers/buildah to v1.19.4 1caace8f4 Allow path completion for podman create/run --rootfs 6c75419a8 Cirrus: Send cirrus-cron report e-mail to list. feecdf919 make `podman rmi` more robust 407e86dcd Implement missing arguments for podman build 3c3e644c1 vendor latest containers/common 91ea3fabd add network prune 821ef6486 fix logic when not creating a workdir 002f2aca7 Bump remote API version to 3.0.0 6c713984e play kube selinux test case 5c6ab3075 Fix podman network disconnect wrong NetworkStatus number 05444cb2c Fix per review request c995b5460 generate kube: handle entrypoint 96adf0e2a play kube selinux test case 2b8d6ca09 Increase timeouts in some tests 3c57bc845 Add test for Docker APIv2 wait 4a219aa23 Implement Docker wait conditions fc385806d Improve ContainerEngine.ContainerWait() 570e1587d Improve container libpod.Wait*() functions 6a6e86829 Cirrus: Collect ginkgo node logs artifacts ebc42f508 Bump github.com/containers/storage from 1.24.5 to 1.25.0 9dc795191 Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1 bc149a4dd bindings: attach: warn correct error d87f54fbb Fix invalid wait condition on kill dfa9a340a Makefile: make bin/* real targets! 3d105015f typo c40cd1be9 Bump github.com/onsi/gomega from 1.10.4 to 1.10.5 bda95bdb6 Update nix pin with `make nixpkgs` 1c50e09b0 System test for #9096 (truncated stdout) 432ee04c5 play kube selinux label test case e0bc8ffb5 Gating tests: diff test: workaround for RHEL8 failure bde23a021 [NO TESTS NEEDED] style: indendation 89df89b5f [NO TESTS NEEDED] fixup: remove debug code 7e4d696d9 Report StatusConflict on Pod opt partial failures bd0e22ed1 Honor network options for macvlan networks 095919680 Make slirp MTU configurable (network_cmd_options) ac3bd4c33 [NO TESTS NEEDED] Generated files 5a746c08f [NO TESTS NEEDED] Improve generator c68b59f97 play kube selinux label issue e9f936a29 Makefile: refactor ginkgo * ginkgo-remote 931ea939a Allow pods to use --net=none 323ab314e Bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0 077fd670b Update release notes for v3.0.0 ee8ee651d New 'make completions' target e11d8f15e add macvlan as a supported network driver 5352df226 Fix podman generate systemd --new special char handling eaafd975a Bump github.com/rootless-containers/rootlesskit from 0.12.0 to 0.13.0 51c11fea8 Endpoint that lists containers does not return correct Status value 3cfd4ce45 Fix --network parsing for podman pod create 9b5b03d1e list volumes before pruning 4a6d042c2 Docker ignores mount flags that begin with constency cdbbc6120 podman generate kube ignores --network=host 073f76c13 Switch podman stop/kill/wait handlers to use abi b842d97f5 [CI:DOCS]build instructions for macOS 280f332bd Vendor in containers/buildah v1.19.3 ca0dd76bf Honor custom DNS in play|generate kube d7c356552 Podman-remote push can support --format b74f939fb Bump github.com/containers/image/v5 from 5.10.0 to 5.10.1 8d979e093 Cirrus: Build static podman-remote c0bf0ba9e podman build --pull: refine help message and docs c450092fd Revert "podman build --pull: use correct policy" 75c3b3389 Bump github.com/containers/image/v5 from 5.9.0 to 5.10.0 59076888d Cleanup bindings for image pull 89bb8a9b3 Don't fail if one of the cgroups is not setup 1fac43654 Add support for rootless network-aliases c717b3cac Allow static ip and mac with rootless cni network 15caebfe5 podman build --pull: use correct policy bfc1b66be Cirrus: Fix running Validate task on branches f8bf509d1 Fix static build cache by using cachix 84f7bdc4d Switch podman image push handlers to use abi fee2fadc3 e2e tests: synchronize test results 21cb3043f podman-remote ps --external --pod --sort do not work. f79d68eea Fix podman history --no-trunc for the CREATED BY field c63599d36 remote exec: write conmon error on hijacked connection e9f4fb975 Fix #9100 Change console mode message to debug 02ec5299f Add default net info in container inspect 1ae410d19 Ensure the Volumes field in Compat Create is honored 35c89ccc5 [CI:DOCS]update state of restful service 0f668aa08 workdir presence checks 7b186dcb9 libpod: add (*Container).ResolvePath() 74a63df05 Fixup search 97f5e9458 Pass DefaultMountsFile to podman build 5350254f0 Ensure shutdown handler access is syncronized 33179c281 System tests: cover gaps from the last month 5623cb9d3 Fix --arch and --os flags to work correctly a86d23c75 Bump github.com/google/uuid from 1.1.5 to 1.2.0 75698b4b7 Fix typo 393a8f026 disable dnsname when --internal ef76b92b8 swagger.go: Fix compilation error 8c1768e38 Fix fish completion issue if the command is prefixed with a space a457c5c92 Bump golang.org/x/crypto 0ba1942f2 networking: lookup child IP in networks c182091b0 Small API test improvement for compatibility search endpoint 6e6a38b41 podman manifest exists c9baa6b93 Accept and ignore 'null' as value for X-Registry-Auth 4b8df5903 Turn on some remote test 94f96c78a Add a notice to remove pod before starting service ef654941d libpod: move slirp magic IPs to consts 5e65f0ba3 rootlessport: set source IP to slirp4netns device 37319dec1 vendor: update rootlesskit to v0.12.0 2fa67fe4b api: fix import image swagger definition 9d31fed5f podman volume exists 4e4d318b7 Cirrus: Upload swagger YAML in every context dbb99433d [CI:DOCS] Cirrus: Skip smoke task on branch-push 836fa4c49 Move the cni lock file into the cni config dir c1cd512cb Use random network names in the e2e tests 3fedb2b6d [CI:DOCS] Update project name in Code of Conduct f43046745 Set log driver for compatability containers c3cbaa355 Make generate systemd --new robust against double curly braces 6518391e8 Fix man page for fuse-overlayfs config in rootless mode a3621a7cf Cirrus: add bindings checks e7df73efa Fix handling of container remove 41a7e11c7 make bindings generation explicit f302ce578 make bindings generation more robuts 175fc3867 Revert "ginkgo: install on demand via `go get -u`" 37abec240 [CI:DOCS] fix go-md2man HTMLSpan warnings 9f6bb3563 CI: smoke test: insist on adding tests on PRs a45d22a1d podman network exists de05e5816 ginkgo: install on demand via `go get -u` d2ee3d815 runner.sh : deal with bash 'set -e' 4ccb0729b Add binding options for container|pod exists 683bab03f [CI:DOCS]Do not run compose tests with CI:DOCS 2df59829e simplify bindings generation 462994268 make: generate bindings: use vendor caaaa2c5e hack/install_golangci.sh: smarter install f38b7f48c golangci-lint: install to ./bin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: update to 1.29.1Bruce Ashfield2021-04-152-17/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following changes are part of this version bump: 1.29.1 (2021-04-13) ------------------- Bugs Fix for invalid handler warning on Windows builds Fix config hash to trigger container recreation on IPC mode updates Fix conversion map for placement.max_replicas_per_node Remove extra scan suggestion on build 1.29.0 (2021-04-06) ------------------- Features Add profile filter to docker-compose config Add a depends_on condition to wait for successful service completion Miscellaneous Add image scan message on build Update warning message for --no-ansi to mention --ansi never as alternative Bump docker-py to 5.0.0 Bump PyYAML to 5.4.1 Bump python-dotenv to 0.17.0 1.28.6 (2021-03-23) ------------------- Bugs Make --env-file relative to the current working directory and error out for invalid paths. Environment file paths set with --env-file are relative to the current working directory while the default .env file is located in the project directory which by default is the base directory of the Compose file. Fix missing service property storage_opt by updating the compose schema Fix build extra_hosts list format Remove extra error message on exec Miscellaneous Add compose.yml and compose.yaml to default filename list 1.28.5 (2021-02-25) ------------------- Bugs Fix OpenSSL version mismatch error when shelling out to the ssh client (via bump to docker-py 4.4.4 which contains the fix) Add missing build flags to the native builder: platform, isolation and extra_hosts Remove info message on native build Avoid fetching logs when service logging driver is set to 'none' 1.28.4 (2021-02-18) -------------------- Bugs Fix SSH port parsing by bumping docker-py to 4.4.3 Miscellaneous Bump Python to 3.7.10 1.28.3 (2021-02-17) ------------------- Bugs Fix SSH hostname parsing when it contains leading s/h, and remove the quiet option that was hiding the error (via docker-py bump to 4.4.2) Fix key error for '--no-log-prefix' option Fix incorrect CLI environment variable name for service profiles: COMPOSE_PROFILES instead of COMPOSE_PROFILE Fix fish completion Miscellaneous Bump cryptography to 3.3.2 Remove log driver filter Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-cached-property: Upgrade 1.3.0 -> 1.5.2Leon Anavi2021-04-151-2/+1
| | | | | | | | | | | | Upgrade to release 1.5.2: - Add formal support for Python 3.8 - Remove formal support for Python 3.4 - Switch from Travis to GitHub actions - Made tests pass flake8 for Python 2.7 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-sphinx: Upgrade 3.4.3 -> 3.5.4Leon Anavi2021-04-151-2/+2
| | | | | | | | | | | | Upgrade to release 3.5.4: - Restrict docutils to 0.16 - autodoc: Async staticmethods and classmethods are considered as non async coroutine-functions with Python3.10 - html theme: The style are not applied with docutils-0.17 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-flask-cors: Upgrade 3.0.8 -> 3.0.10Leon Anavi2021-04-151-2/+1
| | | | | | | | | Upgrade to release 3.0.10: - Adds support for PPC64 and ARM64 builds for distribution Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-botocore: Upgrade 1.20.36 -> 1.20.51Leon Anavi2021-04-151-4/+2
| | | | | | | | | | | | | | | | | | Upgrade to release 1.20.51: - api-change:lightsail: Documentation updates for Amazon Lightsail. - api-change:sts: This release adds the SourceIdentity parameter that can be set when assuming a role. - api-change:comprehendmedical: The InferICD10CM API now returns TIME_EXPRESSION entities that refer to medical conditions. - api-change:rds: Clarify that enabling or disabling automated backups causes a brief downtime, not an outage. - api-change:redshift: Added support to enable AQUA in Amazon Redshift clusters. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-boto3: Upgrade 1.17.48 -> 1.17.51Leon Anavi2021-04-151-1/+1
| | | | | | | | | | | | | | | | | | | Upgrade to release 1.17.51: - api-change:lightsail: [botocore] Documentation updates for Amazon Lightsail. - api-change:sts: [botocore] This release adds the SourceIdentity parameter that can be set when assuming a role. - api-change:comprehendmedical: [botocore] The InferICD10CM API now returns TIME_EXPRESSION entities that refer to medical conditions. - api-change:rds: [botocore] Clarify that enabling or disabling automated backups causes a brief downtime, not an outage. - api-change:redshift: [botocore] Added support to enable AQUA in Amazon Redshift clusters. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-bugsnag: Upgrade 3.6.1 -> 4.0.2Leon Anavi2021-04-151-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 4.0.2: - Fixed an issue preventing code being fetched from files in the project root but not in the PWD - Fix issue where types were not packaged with the library - Added __all__ lists throughout to indicate the boundaries of the public interface. This may affect your integration if using import *. - Removed Configuration.use_ssl and Configuration.get_endpoint() in favor of including the protocol in Configuration.endpoint - Configuration.send_environment is now False by default. Enable it as a part of your configuration to send the full request context (if any) as a part of each event. - Removed bugsnag.utils.ThreadLocals as it has been superseded by the contextvars API - Removed bugsnag.utils.merge_dicts, an unused helper function - Removed bugsnag.send_sessions - Deprecated bugsnag.notification.Notification in favor of bugsnag.event.Event to better align with Bugsnag libraries on other platforms. The Notification class is functionally equivalent and will be removed in a future release. - Added a request property to Event. - Added type signatures throughout the library. - [WSGI] Use X-Forwarded-For header if present to determine the IP address used as the default user ID. The remote address remains available in the request metadata attached to the event. License-Update: Check only a single line from PKG-INFO Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf/layer.conf: add honister to compatibility listBruce Ashfield2021-04-151-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-boto3: Upgrade 1.14.7 -> 1.17.48Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 1.17.48: - api-change:lookoutequipment: [botocore] This release introduces support for Amazon Lookout for Equipment. - api-change:kinesis-video-archived-media: [botocore] Documentation updates for archived.kinesisvideo - api-change:robomaker: [botocore] This release allows RoboMaker customers to specify custom tools to run with their simulation job - api-change:appstream: [botocore] This release provides support for image updates - api-change:ram: [botocore] Documentation updates for AWS RAM resource sharing - api-change:customer-profiles: [botocore] Documentation updates for Put-Integration API - api-change:autoscaling: [botocore] Amazon EC2 Auto Scaling announces Warm Pools that help applications to scale out faster by pre-initializing EC2 instances and save money by requiring fewer continuously running instances Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-dotenv: Upgrade 0.13.0 -> 0.17.0Leon Anavi2021-04-131-2/+1
| | | | | | | | | | Upgrade to release 0.17.0: - Make dotenv get <key> only show the value, not key=value - Add --override/--no-override option to dotenv run Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-newrelic: Upgrade 6.0.1.155 -> 6.2.0.156Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | | | | Upgrade to release 6.2.0.156: - Improved CPU metric sampling - Improved memory metric sampling - Increased custom attribute limit from 64 to 128 - Fixed a TypeError with Uvicorn and unix sockets - Fixed a crash when using a FIPS compliant system with Cross Agent Tracing enabled Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-webob: Upgrade 1.8.5 -> 1.8.7Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | Upgrade to release 1.8.7: - Decoding deflate-encoded responses now supports data which is packed in a zlib container as it is supposed to be. The old, non-standard behaviour is still supported. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-paramiko: Upgrade 2.7.0 -> 2.7.2Leon Anavi2021-04-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | Upgrade to release 2.7.2: - Update our CI to catch issues with sdist generation, installation and testing. - Add missing test suite fixtures directory to MANIFEST.in, reinstating the ability to run Paramiko's tests from an sdist tarball. - Remove leading whitespace from OpenSSH RSA test suite static key fixture, to conform better to spec. - Fix incorrect string formatting causing unhelpful error message annotation when using Kerberos/GSSAPI. - Fix incorrectly swapped order of p and q numbers when loading OpenSSH-format RSA private keys. At minimum this should address a slowdown when using such keys, and it also means Paramiko works with Cryptography 3.1 and above (which complains strenuously when this problem appears). Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: bump to latestBruce Ashfield2021-04-121-3/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As part of this update to crun, we now much run autogen.sh before running configure. Otherwise, these are incremental changes and comprise the following commits: 9effaeb On exec, honor additional_gids from the process spec, not the container definition c25a2db tests: add explicit python3-pip dependency e67a756 NEWS: tag 0.19 18c0274 gitignore: update 471a7b8 libocispec: update from upstream f642968 tests: fix check for cgroup v2 3e7fa1d linux: always remount bind mounts 78aeac9 linux: ignore unknown capabilities f11d742 Add linuxdevicecgroup to maintain parity with runc spec 9aa382b cgroup: skip parsing empty file d9c9fd0 container: initialize tmp_err 00371ae src: initialize statx struct 2e88d19 src: initialize first_arg 5e4efb7 seccomp: always NUL terminate lowercase_arch 7812572 tests: add test for seccomp listener f80e98d init: add check for seccomp listener 5d9010b init: fix check for nargs 5a627f4 seccomp: support notify listener c3361c1 status: use function to convert from yajl errors 873b62d container: use new error function for hooks JSON 14083ab error: new function to convert from yajl errors 6e19235 linux: pass own pid to container process 8fd3320 contrib: new tool to test seccomp notifications 8722858 crun: always use absolute path for the bundle ae9ea92 container: improve OOM error message 919aac9 utils: receive fd detect closed connection a52e480 cgroup: new function to detect OOM 2e37d2a sync-libocispec 75ad96b Let autogen.sh generate m4 14c260f libcrun_warn if newuidmap/newgidmap invoke fails 5598401 README.md: drop pids limit comparison 9ea6857 github: add fuzzing test 0fd03ba tests: add container image for fuzzing libcrun bbd5c7d fuzzer: reap child processes c7350ef tests: add more fuzzing tests 816f95b fuzzer: merge two tests effa508 linux: cleanup zombie on errors b32f1eb linux: release only on error 5ca72f5 status: attempt open again on interrupts 9b5d4c1 Added static analysis Adding clang compilation Fixing comparison of integers of different signs 3b199ef Update GNUmakefile dcd1a34 linux: label the tmpfs for masked directories edf7f15 seccomp: check if the action supports errnoRet bc222b6 seccomp: fail if no default action specified 0c5b920 seccomp: honor default errno value 92c0afe yajl: support static link of containers/yajl f3d920d src: fix unitialized variable 7d89a02 src: add error check 765971c status: fix memory leak on error 31274d8 utils: fix check for fd 62d1c4d tests: add test to feed honggfuzz ab75091 ebpf: return the program instead of NULL 8b16552 src: check if seccomp is defined f721efb container: fix error ownership 4472e35 container: allow config from memory 6b369b8 container: fix memory leak 0fede0f container: initialize variable 2b6c0b6 container: fix dereference of def->linux if NULL 1dd9b5b container: check for def->process before deref 1b1a691 fix: cross-compiling for Android b25cb2d tests: add device access test 86251b0 ebpf: handle access(dev_name, F_OK) call correctly e2d79dc fix: access violate if ret < -2 4f35406 cgroup: read controllers from /proc/self/cgroup Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipset: drop recipeBruce Ashfield2021-04-091-20/+0
| | | | | | | | | | In the time between the k3s work starting and ending, meta-networking picked up the support we need for ipset. Now that the recipe is in a layer we already depend on, we don't need our own copy. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: fix clobbered SRC_URIBruce Ashfield2021-04-091-12/+8
| | | | | | | | | | | | | | | commit 1b83c21436b2 [openvswitch: Fix build with musl libc] mistakenly copies common files and then clobbers the SRC_URI. While we could drop the SRC_URI components from the .inc now that we only have one active version in master (_git), we avoid that for now, since it is possible that a LTS version will be introduced in future cycles. So to fix the oddity, we drop the common components from the _git SRC_URI and append versus clobber. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: fix ldflags QA issue by passing LDFLAGSMartin Jansa2021-04-061-2/+3
| | | | | | | | | | | | | | | | | | ERROR: dev86-0.16.21-r0 do_package_qa: QA Issue: File /usr/lib/bcc/unproto in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/lib/bcc/bcc-cpp in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/lib/bcc/copt in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/lib/bcc/bcc-cc1 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/ld86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/ar86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/size86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/nm86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/as86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/objdump86 in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) File /usr/bin/bcc in package dev86 doesn't have GNU_HASH (didn't pass LDFLAGS?) [ldflags] ERROR: dev86-0.16.21-r0 do_package_qa: QA run found fatal errors. Please consider fixing them. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: upgrade to 0.16.21 and fix SRC_URIMartin Jansa2021-04-061-6/+3
| | | | | | | | | * don't use github archives * upgrade to fix build with security-flags.inc enabled, fixed upstream in: https://github.com/lkundrak/dev86/commit/537e806f8c62b26c5d5fa912f383f4a7d558574d Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: force using ld.bfd even when ld-is-gold is in DISTRO_FEATURESMartin Jansa2021-04-061-2/+6
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: fix SRC_URIMartin Jansa2021-04-061-1/+1
| | | | | | | | * git.ipxe.org is gone: fatal: unable to access 'https://git.ipxe.org/ipxe.git/': Couldn't connect to server Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o, podman, packagegroup-container: replace anonymous python function ↵Martin Jansa2021-04-063-33/+3
| | | | | | | | | | calling bb.parse.SkipRecipe with conditional PNBLACKLISTs * PNBLACKLISTs are IMHO a bit easier to read and easier to override from distro which e.g. provides own recipe for libseccomp Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: add the same COMPATIBLE_HOST restriction as syslinuxMartin Jansa2021-04-061-0/+3
| | | | | | | * this depends on syslinux Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-*: add conditional PNBLACKLIST, because of the dependency on ↵Martin Jansa2021-04-064-0/+8
| | | | | | | meta-webserver Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* packagegroup-container: skip without meta-security because of podmanMartin Jansa2021-04-061-0/+9
| | | | | | | | * copy the skip from podman recipe, because this packagegroup depends on podman Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* packagegroup-kubernets: add seccomp to REQUIRED_DISTRO_FEATURESMartin Jansa2021-04-061-0/+4
| | | | | | | | | | | | | * fixes world build: ERROR: Nothing RPROVIDES 'k3s-server' (but meta-virtualization/recipes-core/packagegroups/packagegroup-kubernetes.bb RDEPENDS on or otherwise requires it) k3s RPROVIDES k3s-server but was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES) NOTE: Runtime target 'k3s-server' is unbuildable, removing... Missing or unbuildable dependency chain was: ['k3s-server'] ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'packagegroup-kubernetes', 'k3s-server'] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* boto3: satisfy runtime dependenciesBartosz Golaszewski2021-03-302-0/+14
| | | | | | | | | Currently boto3 can be built into an image but it won't work without additional dependencies. First: botocore is needed at run-time, second: there are other packages available in meta-python that need adding. Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: uprev from 15.2.8 to 15.2.9Zqiang2021-03-301-5/+5
| | | | | | | | | | Notable Changes: 1. progress module can now be turned on/off, using the commands: ceph progress on and ceph progress off. 2. PG removal has been optimized in this release. Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvmi: uprev from 0.12 to 0.14Zqiang2021-03-301-1/+2
| | | | | | | | Bump version to 0.14. This upgrade is mainly to fix some BUG. Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runx: update to v1.0Bruce Ashfield2021-03-267-1703/+87
| | | | | | | | | | bumping runX to the 1.0 tag - drop patches that are part of the release - bump kernel to v5.4.104 to work with our gcc10 - tweak initrd install to use externally provided busybox Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-build: export GO111MODULE=offBruce Ashfield2021-03-261-0/+1
| | | | | | | We aren't setup for go module builds, so we need to disable it in the go-build recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: update to v1.20.4Bruce Ashfield2021-03-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Moving off the 1.20.x-rc and onto a dot release tag. This pulls in the following commits: e87da0bd6e0 Release commit for Kubernetes v1.20.4 5682545c2da Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3 f8f2fa827d3 Release commit for Kubernetes v1.20.4-rc.0 01849e73f3c Release commit for Kubernetes v1.20.3 58c5493f22a kube-cross: update image to use v1.15.8-legacy-1 e000e9722bb [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8) 3365196e9d8 Use go-runner:buster-v2.3.1 image (built on go1.15.8) 91f2745f08c staging/publishing: Set default go version to go1.15.8 3c777448311 Update to go1.15.8 b570189cf1f Revert "make hostPort match test linuxonly" 6698a4e7afc Revert "conformance changes" 6a31f8d17ef dockershim hostport respect IPFamily a456eb4eaf6 dockershim hostport manager use HostIP 5d9910a0172 Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate ac866d63911 make podTopologyHints protected by lock b84ee98db74 kubelet: Fix mirrorPodTerminationMap leak d381d6c52cc kubelet: Delete static pods gracefully b2576fb35f7 kubelet logs print 'kubelet nodes sync' frequently 7826a1c6b87 WIP: node sync at least once Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to latest -rc93Bruce Ashfield2021-03-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the runc version to incorporate the following commits: 2ae56653 Move fuzzers upstream 053e15c0 tests/checkpoint: show full log lazy pages cpt e618a6d5 curl: add --retry 5 4b98e4a7 MAINTAINERS: update Aleksa's email 8a3484b7 libcontainer/factory*: adjust the file mode 71ca6432 fix integration tests README.md 916654ff libcontainer: fix LinuxFactory comments c3ffd2ef Do not convert blkio weight value using blkio->io conversion scheme 38b2dd39 runc exec: report possible OOM kill 5d0ffbf9 runc start/run: report OOM 7e137b90 libct/cg/fs2/hugetlb: use fscommon.GetValueByKey 9fa65f66 libct/cg/fscommon: add GetValueByKey c54c3f85 libcontainer/notify_linux_v2: use fscommon.ReadFile 494f900e libct/cg/fscommon: rename/facelift GetCgroupParamKeyValue 1880d2fc libct/cg/fs/memory: handle EBUSY 27fd3fc3 libct/cg/fs: setMemoryAndSwap: refactor 3cced523 libct/cg/fs/memory: optimize Set 65c2d3c2 tests/int/update: add test case for PR #592 53d3b552 Update README.md for libcontainer 6c5ed0db Fix memory stats for cache in fs2 af521ed5 libct/cgroups/systemd: don't set limits in Apply fa52df94 libcontainer: fix the file mode of the device d0cbef57 Makefile: rm go 1.13 workaround 4019f08d make validate: rm go vet f9c21133 make lint: use golangci-lint 671bb978 Makefile: remove ci target 95940855 script/validate-gofmt: rm 91f0ae18 ci/gha: bump go 1.16-rc1 -> 1.16.x 5b14a261 README: add gha badges f3f563bc apparmor: try attr/apparmor/exec before attr/exec 41670e21 tests/int: rework/simplify setup and teardown d73b4443 ci: enable -race from matrix b7744547 libct/int: fix a data race c34a9b10 tests/int/hooks.bats: don't use DEBIAN_BUNDLE e40a369e tests/int/list.bats: don't use $BUSYBOX_BUNDLE 985546b4 tests/int: BATS_TMPDIR -> BATS_RUN_TMPDIR 85d5fea4 tests/int: stop reusing HELLO_BUNDLE for alt root 76532fac tests/int/events: rm unneeded eval 49766140 tests/int: use wait_for_container where appropriate 4d6ffa39 tests/int/helpers: reimplement wait_for_container e7052dcd tests/int/spec.bats: don't use HELLO_BUNDLE 0cfc2e32 tests/int: rm teardown_running_container_inroot 78f0e4b2 tests/int: rm wait_for_container_inroot 64d5702f tests/int: don't depend on BUSYBOX_BUNDLE var efb8552b tests/int: add device access test 81707abd ebpf: fix device access check c3428722 libct/config: fix a data race 51ec5db1 ci: add i386 unit test run b142a70e libct/seccomp/patchpbf/test: fix for 32-bit 2831fb55 cgroup2: devices: handle eBPF skipping more correctly d1007b08 cgroupv1 freezer: thaw to increase freeze chances Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: initial READMEBruce Ashfield2021-03-161-0/+30
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: clean up READMEBruce Ashfield2021-03-161-11/+41
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: rrecommend required kernel modulesBruce Ashfield2021-03-161-1/+11
| | | | | | | | If the required modules aren't in the image, k3s will fail to start. Set the requirements as RRECOMMENDS for image types that don't install the kernel-modules meta-package. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: drop ctr symlinkBruce Ashfield2021-03-161-0/+3
| | | | | | | We build and depend on our own containerd, we don't need the ctr symlink to k3s for proper operation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add additional build tagsBruce Ashfield2021-03-161-1/+5
| | | | | | | | To more closely align with the rancher/upstream build, we add additional tags to the build. To make them easier to manage, we also introduce a variable and use it in the go build line. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add seccomp distro feature requirementBruce Ashfield2021-03-161-0/+3
| | | | | | | | | k3s requires seccomp, and a runc with seccomp enabled for proper operation. runc has a distro feature check to enable seccomp, so if we enforce it as k3s feature, we'll also get a properly built runc and we'll work out of the box. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to latest -rc93Bruce Ashfield2021-03-162-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the runc version to incorporate the following commits: 2ae56653 Move fuzzers upstream 053e15c0 tests/checkpoint: show full log lazy pages cpt e618a6d5 curl: add --retry 5 4b98e4a7 MAINTAINERS: update Aleksa's email 8a3484b7 libcontainer/factory*: adjust the file mode 71ca6432 fix integration tests README.md 916654ff libcontainer: fix LinuxFactory comments c3ffd2ef Do not convert blkio weight value using blkio->io conversion scheme 38b2dd39 runc exec: report possible OOM kill 5d0ffbf9 runc start/run: report OOM 7e137b90 libct/cg/fs2/hugetlb: use fscommon.GetValueByKey 9fa65f66 libct/cg/fscommon: add GetValueByKey c54c3f85 libcontainer/notify_linux_v2: use fscommon.ReadFile 494f900e libct/cg/fscommon: rename/facelift GetCgroupParamKeyValue 1880d2fc libct/cg/fs/memory: handle EBUSY 27fd3fc3 libct/cg/fs: setMemoryAndSwap: refactor 3cced523 libct/cg/fs/memory: optimize Set 65c2d3c2 tests/int/update: add test case for PR #592 53d3b552 Update README.md for libcontainer 6c5ed0db Fix memory stats for cache in fs2 af521ed5 libct/cgroups/systemd: don't set limits in Apply fa52df94 libcontainer: fix the file mode of the device d0cbef57 Makefile: rm go 1.13 workaround 4019f08d make validate: rm go vet f9c21133 make lint: use golangci-lint 671bb978 Makefile: remove ci target 95940855 script/validate-gofmt: rm 91f0ae18 ci/gha: bump go 1.16-rc1 -> 1.16.x 5b14a261 README: add gha badges f3f563bc apparmor: try attr/apparmor/exec before attr/exec 41670e21 tests/int: rework/simplify setup and teardown d73b4443 ci: enable -race from matrix b7744547 libct/int: fix a data race c34a9b10 tests/int/hooks.bats: don't use DEBIAN_BUNDLE e40a369e tests/int/list.bats: don't use $BUSYBOX_BUNDLE 985546b4 tests/int: BATS_TMPDIR -> BATS_RUN_TMPDIR 85d5fea4 tests/int: stop reusing HELLO_BUNDLE for alt root 76532fac tests/int/events: rm unneeded eval 49766140 tests/int: use wait_for_container where appropriate 4d6ffa39 tests/int/helpers: reimplement wait_for_container e7052dcd tests/int/spec.bats: don't use HELLO_BUNDLE 0cfc2e32 tests/int: rm teardown_running_container_inroot 78f0e4b2 tests/int: rm wait_for_container_inroot 64d5702f tests/int: don't depend on BUSYBOX_BUNDLE var efb8552b tests/int: add device access test 81707abd ebpf: fix device access check c3428722 libct/config: fix a data race 51ec5db1 ci: add i386 unit test run b142a70e libct/seccomp/patchpbf/test: fix for 32-bit 2831fb55 cgroup2: devices: handle eBPF skipping more correctly d1007b08 cgroupv1 freezer: thaw to increase freeze chances Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: add selinux and seccomp package configsBruce Ashfield2021-03-161-1/+8
| | | | | | | | | | | | runc can be built with both selinux and seccomp tags. These tags are a requirement for proper operation with some frameworks (like k3s). So we add checks for the appropriate distro features and then automatically add them to the build tags, allowing us a coordinated enabling of the functionality. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: bump to v1.20.4Bruce Ashfield2021-03-151-3/+3
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: bump to v1.19.5Bruce Ashfield2021-03-151-2/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: bump to v1.19Bruce Ashfield2021-03-152-17/+14
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add kernel module rrecommends (and PV fix)Bruce Ashfield2021-03-151-2/+5
| | | | | | | | | | Fixing up the PV to use SRCPV for tracking future version bumps, if the tree is dirty or not, git will tell us. We also add some additional kernel module rrecommends, so that the tools called by k3s can find the support they need (mainly iptools) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers: add a base container and kubernetes base packagegroupBruce Ashfield2021-03-152-0/+86
| | | | | | | | To make it easier to build container host or k*s host images (as well as guests), we start to add some packagegroups that wrap the required elements. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: add notes / tips to READMEBruce Ashfield2021-03-151-0/+208
| | | | | | | Clarify some limitations / tweaks to get up and running in a qemu virtual machine. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: add ca-certifcates dependencyBruce Ashfield2021-03-151-0/+2
| | | | | | | | | | | Many of the CNI plugins require authenticated connections, as such they are looking for elements of ca-certificates. CNI isn't small, so we add this as a general rdepends. If we need to slim things down in the future, we can split the CNI into specific implementations and add the dependency to those packages. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* config: prefer opencontainers runcBruce Ashfield2021-03-151-1/+1
| | | | | | | | | The docker split/requirement on their forked version of runc is not relevant any more. While we keep the docker-runc around, we should prefer the opencontainers variant, since that is where development happens. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: add runc runtime dependencyBruce Ashfield2021-03-151-1/+2
| | | | | | | containerd is rarely used without runc, so we add the runtime dependency to make installation and image construction easier. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-09 22:46:18 +0000