summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-docker-compose: uprev to 1.25.0Ming Liu2019-12-063-47/+51
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-docker: uprev to 4.1.0Ming Liu2019-12-063-2/+2
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-docker-pycreds: uprev to 0.4.0Ming Liu2019-12-063-2/+2
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: fix meta-virt version / config includeBruce Ashfield2019-12-062-1/+12
| | | | | | | | | | | | | | | As was reported: https://lists.yoctoproject.org/g/meta-virtualization/message/4173?p=,,,20,0,0,0::Created,,conf%2Flayer.conf+is+broken,20,2,0,61269733 The conditional include of the meta-virt versions and config was not working properly due to parse time constraints. This commit fixes that by following the example of the meta-cube layer and instead using a user bbclass to load the .inc file after distro/distro features have been resolved by bitbake. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker.inc: Add xt-addrtype kernel moduleNorbert Kaminski2019-12-011-1/+1
| | | | | | | | | | | | | | | | | | | Trying to use docker info and hello world container without this module causes a daemon error. docker info error log: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? dockerd error log: PREROUTING chain: iptables failed: iptables --wait -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER: iptables v1.8.3 (legacy): Couldn't load match `addrtype':No such file or directory Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: workaround failure since go upgraded to 1.13Hongxu Jia2019-12-011-0/+3
| | | | | | | | | | | | | | | | | Since go was upgraded to 1.13, there is a failure: ... | src/vendor/golang.org/x/net/http2/frame.go:17:2: use of vendored package not allowed | ../../../recipe-sysroot/usr/lib64/go/src/net/http/h2_bundle.go:49:2: use of vendored package not allowed ... Refer upstream suggestion [1]: `or copying your vendor contents into GOPATH/src rather than mapping them in to GOPATH/src/vendor.' [1] https://github.com/golang/go/issues/34068 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: remove maximum version requirementsChen Qi2019-11-273-45/+59
| | | | | | | | | | | | | | | | | Remove maximum version requirements for docker-compose so that it does not require old version recipes. The old version recipes required are as below. * PyYAML * requests * urllib3 * idna * jsonschema The current one has been tested against https://docs.docker.com/compose/gettingstarted/. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python-sqlalchemy: drop 1.0.16 recipeMing Liu2019-11-251-16/+0
| | | | | | | | Seems no one is referring this recipe, there is already a python-sqlalchemy_1.1.5 recipe in this layer. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: Disable for all mips machinesHongxu Jia2019-11-251-0/+1
| | | | | | | | | Since commit [a092153 containerd: Disable for all mips machines] applied, and the cri-o runtime depends `virtual/containerd', it should do the same thing to disable for all mips machines Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-guest-image-minimal: do not inherit distro_features_checkMing Liu2019-11-251-1/+1
| | | | | | | | Change to inherit features_check, since distro_features_check has been deprecated in OE. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* meta-virt-default-versions.inc: fix invalid python-pyyaml versionMing Liu2019-11-251-1/+1
| | | | | | | | The python-pyyaml recipe in this layer is 5.1.2, fix the wrong PREFERRED_VERSION_python-pyyaml. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* README: update mailing list addressBruce Ashfield2019-11-221-2/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: fix CVE-2019-16884Chen Qi2019-11-173-0/+203
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docs: roadmap: add missing workflow itemsBruce Ashfield2019-10-281-0/+8
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docs: add meta-virt planning / roadmap fileBruce Ashfield2019-10-281-0/+79
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Set correct PV release numberJoakim Roubert2019-10-241-1/+1
| | | | | | | | | | Commit c97fe5036ef3df2967d086711e6c0c405941e14b is Kubernetes v1.16.2 (see https://github.com/kubernetes/kubernetes/releases for verification) and building with the current recipe generates v1.16.2 binaies although the package names state v1.16.1. Change-Id: I5701c18cc3ce205ad906eda2595d9ad7f5748b17 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: upgrade to version 1.21.2Li Zhou2019-10-193-35/+47
| | | | | | | | | | The python3-docker-compose_1.16.1 requires 'docker<3.0, >=2.5.1', while python3-docker 3.4.0 is provided. Error occurs when running 'docker-compose --version'. Upgrade to python3-docker-compose_1.21.2 to make it work. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: bump to 1.16-relase branchBruce Ashfield2019-10-151-3/+3
| | | | | | | | Updating kubernetes to use the 1.16 relese (instead of the 1.16) alpha. No issues were found in build and runtime testing of this versus the alpha release. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: use GO flags/compiler from recipeBruce Ashfield2019-10-152-2/+34
| | | | | | | | | | | | The image tools were not building with the oe/cross GO compiler and flags. As such, you could end up with a binary on target with the wong elf interpreter (the host one). With this, we properly use the settings from our build. We also bump the SRCREV to pickup a few minor fixes to the package. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: move into subdirectoryStefan Agner2019-10-141-0/+0
| | | | | | | | The layer does not expect recipes in the first subdir. Move the podman-compose recipe into a podman-compose subdirectory. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Fix criu build for aarch64Ruslan Piasetskyi2019-10-131-1/+1
| | | | | | | | | | | | Makefile: # # Supported Architectures ifneq ($(filter-out x86 arm aarch64 ppc64 s390,$(ARCH)),) $(error "The architecture $(ARCH) isn't supported") endif Signed-off-by: Ruslan Piasetskyi <ruslan.piasetskyi@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: add FUSE implementation of overlayfsStefan Agner2019-10-131-0/+15
| | | | | | | | Add recipe for the FUSE implementation of overlayfs. This is useful to improve startup time for podman rootless containers. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: initial versionStefan Agner2019-10-131-0/+15
| | | | | | | | | Add podman-compose, a docker-compose implementation for podman. The current version is not feature complete, hence not all docker-compose file work. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: add default set of configuration filesStefan Agner2019-10-133-1/+166
| | | | | | | | | Add a default registries.conf and storage.conf. Those config files are used by several projects of the containers group like buildah or podman. Provide it as part of skopeo like the other distributions do. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: bump to latest release 1.6.1Stefan Agner2019-10-131-2/+2
| | | | | | | Bump to latest podman release 1.6.1. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: remove comment about runcStefan Agner2019-10-131-2/+0
| | | | | | | | | It seems that docker uses nowadays a rather vanilla version of runc, at the time of writing 1.0.0-rc8. This version has successfully tested with podman, hence remove the obsolete comment. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: introduce crun (OCI runtime provider)Bruce Ashfield2019-10-131-0/+32
| | | | | | | | | | | | | | | | | | | | | | | | Create the initial recipe to provide crun as an alternative OCI runtime provider. This currently has a depdenency on seccomp, but it would be nice if we can make that optional in the future to avoid pulling in all of meta-security as a dependency. Example: % skopeo copy docker://busybox oci:busybox-oci:latest % mkdir busybox-bundle % oci-image-tool create --ref platform.os=linux busybox-oci busybox-bundle % cd busybox-bundle/ % rm config.json % runc spec % runc run foo ^D % crun run foo ^D Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* layer: add zeus as compatibleBruce Ashfield2019-10-081-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix layer check cut & paste errorsBruce Ashfield2019-10-071-8/+2
| | | | | | | | The layer check for podman was copied from cri-o .. and some non podman elements came over as part of that copy. We drop selinux as a check, and fix some comments. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: make docker wrapper configurable via packageconfigBruce Ashfield2019-10-031-1/+10
| | | | | | | | | | | | | | | | | podman can behave as transparent drop in replacement for docker via a wrapper 'docker' script that simply calls podman when any docker command is issues. While this is an interesting feature, we want it to be optional .. since it is possible that podman and docker might want to be installed at the same time. So we introduce a 'podman' PACKAGECONFIG, that controls whether or not this wrapper is installed, and if it is installed it marks the podman package as conflicting with docker (which gets us a better message than a failed image assembly provides). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add build flexibility to dependenciesBruce Ashfield2019-10-021-1/+19
| | | | | | | | | | | | | | | | In a similar manner to cri-o, we don't want to make meta-selinux or meta-security a hard dependency to meta-virtualization. So we implement a similar anonymous python check that allows the recipe to be skipped if the dependent layers are not present (and hence we are yocto compatible). If we get more than two recipes doing layer checks (this is the 2nd), we can move the functionality to a class. We also make the runc dependency be virtual/runc versus picking a specific provider (even if only runc-opencontainers has been tested). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: drop ostree from anonymous python warningBruce Ashfield2019-10-021-6/+0
| | | | | | | ostree is now provided by meta-oe, which is a required layer so we can drop it from the anonymous python checks for layers. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-metalinter: add recipe for gometalinterStefan Agner2019-10-021-0/+24
| | | | | | | | | A tool that concurrently runs a whole bunch of go linters and normalises their output to a standard format. Useful to build podman. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: initial addStefan Agner2019-10-022-0/+61
| | | | | | | Add conmon, a OCI container runtime monitor. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-md2man: add md2manStefan Agner2019-10-021-0/+20
| | | | | | | | This tool converts markdown into roff (man pages). Useful to build podman. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: move cni tools to /usr/libexec/cniStefan Agner2019-10-022-3/+7
| | | | | | | | | Use a standard location to store the cni tools and plugins. This is more in line how other distributions package cni. Keep a symlink to /opt/cni/bin for backward compatibility. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* slirp4netns: add slirp4netns user-mode networkingStefan Agner2019-10-021-0/+16
| | | | | | | | | slirp4netns allows connecting a network namespace to the Internet in a completely unprivileged way, by connecting a TAP device in a network namespace to the usermode TCP/IP stack ("slirp")." Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: add skopeoStefan Agner2019-10-021-0/+73
| | | | | | | | | | | | | | skopeo is a command line utility that performs various operations on container images and image repositories. skopeo can work with OCI images as well as the original Docker v2 images. The recipe originates from from meta-overc commit a497792. It has been updated with the new project URL and v0.1.39. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add the Pod Manager toolStefan Agner2019-10-021-0/+93
| | | | | | | | | | | | | | | | | | Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. This patch adds the initial recipe for podman. Currently the build tags systemd (if in DISTRO_FEATURES), seccomp, varlink and remoteclient are enabled which allows to run podman with overlayfs as root and vfs in rootless mode. The storage drivers btrfs and device-mapper have not been tested and are disabled at the moment. It seems that seccomp is mandatory, which makes meta-security which provides libseccomp a mandatory dependency for this recipe. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fixup multiple shlib providersMark Asselstine2019-10-021-0/+2
| | | | | | | | | | | | | | | | | | | | | Build libvirt results in the follow warning: ERROR: libvirt-5.5.0-r0 do_package: libvirt-ptest: Multiple shlib providers for libvirt-admin.so.0: libvirt, libvirt-ptest (used by files: ./tmp/work/aarch64-overc-linux/libvirt/5.5.0-r0/packages-split/libvirt-ptest/usr/lib/libvirt/ptest/tools/virt-admin) ERROR: libvirt-5.5.0-r0 do_package: libvirt: Multiple shlib providers for libvirt-admin.so.0: libvirt, libvirt-ptest (used by files: ./tmp/work/aarch64-overc-linux/libvirt/5.5.0-r0/packages-split/libvirt/usr/bin/virt-admin) This is caused by the introduction of a shlib provider check added to openembedded-core (commit 61c413690034 [package: Multiple shlib_providers for the same file should error]). You can see the issue and solution discussed more here https://bugzilla.yoctoproject.org/show_bug.cgi?id=4628 Since the ptest version of the shared library will only be used by the ptest package so we can use PRIVATE_LIBS to have the shlib providers list. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netns: Fix build on qemux86-64Paul Barker2019-09-261-5/+11
| | | | | | | | | The build has broken again on master, even for non-static builds of netns. The simplest fix is to extend our existing patch to cover this case as well. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* layer.conf: Change dependency on meta-selinux to recommendationPaul Barker2019-09-261-1/+1
| | | | | | | | | The recipe for cri-o already has an anonymous Python function in place to skip the recipe if dependencies are not found so there's no need to force inclusion of the meta-selinux layer. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: 19.03.x updateBruce Ashfield2019-09-262-66/+4
| | | | | | | Updating the moby recipes to the match the 19.03.x updates pulled into docker/docker-ce Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add transient configuration packageconfigMatt Spencer2019-09-243-4/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since commit: [ Author: Tom Rini <trini@konsulko.com> Date: Fri Feb 8 13:22:35 2019 -0500 docker: Move /etc/docker to a symlink to volatiles The only thing which docker uses /etc/docker for is a TLS key for connecting with other TLS-enabled services. Make /etc/docker a symlink to the existing docker volatiles directory so that we can use docker on a read-only rootfs. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> ] We've had a transient / volatile docker configuration since we point our /etc configuration to /run. This is not always a good thing if a static configuration for keys, etc, is desired. We maintain this functionality under the 'transient-config' PACKAGECONFIG, and also allow the existing static/permanent config to be used. Signed-off-by: Matt Spencer <matthew@thespencers.me.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: set docker-ce as preferred provider for dockerBruce Ashfield2019-09-241-0/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: rename docker -> docker-moby and introduce virtual/dockerBruce Ashfield2019-09-242-0/+9
| | | | | | | | | | | | | | | | | | The recipe which was providing the default "docker" package was aligned with the moby repositories. In order to make that alignment clear, we rename that recipe docker-moby. To allow easier switching between the docker providing recipes, we introduce a virtual/docker PROVIDES to the common .inc file (and hence each recipe). This allows users to chose what they want via the standard PREFERRED_PROVIDER mechanism. Also to allow existing package lists and image installs to continue to work without changes, we make sure that the implementation specific docker-<foo> packages RPROVIDE docker. If any packages are missed, we'll add them to this list in future updates. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.2Stefan Agner2019-09-231-2/+2
| | | | | | | Bump the git hashes to Docker CE v19.03.2. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: improve hardcoded CC for cross compileStefan Agner2019-09-232-0/+62
| | | | | | | | | | | | | | | | | | | | Since commit applied in moby [61a3285 Support cross-compile for arm] it hardcoded var-CC to support cross-compile for arm Correct it with "${parameter:-word}" format, it is helpful for user define toolchains (Use Default Values. If parameter is unset or null, the expansion of word is substituted. Otherwise, the value of parameter is substituted.) https://github.com/moby/moby/commit/61a3285864d3f1b489f48f765b61b2c7bd300372 This fixes a build issue seen when building docker-ce: exec: "aarch64-linux-gnu-gcc": executable file not found in $PATH Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: fix compiling failure: execvp: /bin/bash: Argument list too longHongxu Jia2019-09-182-0/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | | Use GNU Make 4.2.1(such as fedora-29) to build k8s in a long directory, it failed with `execvp: /bin/bash: Argument list too long' [snip] $ cd /buildarea1/hjia/wrlinux-1019/I_/suspect_/that_/if_/you_/create_/your_/project_/in_/a_/very_/deep_/directory/build_master-wr_qemux86-64_faw_2019090509/build/tmp-glibc/work/core2-64-wrs-linux/kubernetes/v1.16.0-alpha+git7054e3ead7e1a00ca6ac3ec47ea355b76061a35a-r0/kubernetes-v1.16.0-alpha+git7054e3ead7e1a00ca6ac3ec47ea355b76061a35a/src/import $ make cross KUBE_BUILD_PLATFORMS=linux/amd64 GOLDFLAGS="" |+++ [0804 16:38:32] Building go targets for linux/amd64: | ./vendor/k8s.io/code-generator/cmd/deepcopy-gen |make[1]: execvp: /bin/bash: Argument list too long |make[1]: *** [Makefile.generated_files:184: pkg/kubectl/cmd/testing/zz_generated.deepcopy.go] Error 127 |make: *** [Makefile:557: generated_files] Error 2 ... [snip] From make manual [1] $? The names of all the prerequisites that are newer than the target, with spaces between them. While two `$?' was passed to bash in a line, it caused above failure, drop a duplicated one could workaround the issue. [1] https://www.gnu.org/software/make/manual/html_node/Automatic-Variables.html Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* templates/lxc-download.in: Use curl instead of wgetJoakim Roubert2019-09-182-1/+51
| | | | | | | | | When curl's MIT license is preferable to wget's GPLv3. Which it is in several situations. Change-Id: I72ee1ce66493c564557b73fae80f5219ef83af6d Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-16 04:03:37 +0000