| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.4-40-g19430264c, which comprises the following commits:
9037069da update to go1.23.1, go1.22.7
18725f010 integration: regression test for issue 10589
5f37a2c20 fifosync: cross-process synchronization
421a4b568 runc-shim: handle pending execs as running
299a9717f update runc binary to 1.1.14
f4529ace1 build(deps): bump the otel group with 8 updates
e7357916b runc-shim: refuse to start execs after init exits
def477b07 Bump crun to 1.16
3d7955bf7 remove duplicated descriptor from/to proto
93d6f0f92 remove duplicated sandbox to proto func
bfc1465a2 Reorganize mount/unmount code so it is easier to add Darwin-specific implementation
9c3400572 reduce ptypes.Empty creation by defining it in as a var
7f3bf993d runc-shim: remove misleading comment
f6677a4ec Cumulative stats can't decrease
94c163209 TestNewBinaryIOCleanup: fix a comment, minor rewrite
d83184ced avoid repeated calls in Tricolor gc
6b97a08ee add benchmark
1b03ca57c build(deps): bump github.com/prometheus/client_golang
9906fac59 build(deps): bump github.com/vishvananda/netlink
cdbfcc257 Prepare release notes for v2.0.0-rc.4
4ba502a03 Update api vendor to latest tag
a36d38fb4 Add mailmap entry for Michael Zappa
bf5fc240b build(deps): bump google-github-actions/upload-cloud-storage
faaafd6de build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3
47350982b build(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11
3cd8f9734 core/mount: use ptrace instead of go:linkname
35b029257 remove sha256-simd
1195b68eb build(deps): bump github.com/prometheus/client_golang
50b06182f Register local content plugin from separate package
021063c4a build(deps): bump the k8s group with 5 updates
1bff3bfed build(deps): bump dario.cat/mergo from 1.0.0 to 1.0.1
429085c84 build(deps): bump google-github-actions/upload-cloud-storage
93abc2fdd Update hcsshim to v0.12.6
bcdf50736 core/mount: add benchmark test for GetUsernsFD
6f3833f25 CRI: remove `disable_cgroup`
fc1637d16 Attest artifacts in release workflow
337d8c52c Update release job to generate artifacts attestation
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The routine calculating the -native depdenency for configuration
fragments had issues with variations in kernel PV definitions.
To avoid making the routine even more complex, this commit switches
to using the same variables that include the correct virtualization
include file. This way, if bitbake has located and included the
file that adds the -native dependency, we know that the variables
will find the correct recipe.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Podman requires /etc/sub[g]uid for rootless mode but the file is being deleted
if shadow is in ROOTFS_RO_UNNEEDED (even if different package like the
podman itself provides it) and rpm backend is used.
Signed-off-by: Pavel Zhukov <pavel@zhukoff.net>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping xen to version 4.20-dev-288-gc23571fe31, which comprises the following commits:
57338346f2 x86/IRQ: avoid double unlock in map_domain_pirq()
1ddc8c1bad CI: Add Ubuntu 22.04 (Jammy) and 24.04 (Noble) testing
6db222eb1f CI: Refresh Ubuntu Focal container as 20.04-x86_64
51e5081c6e CI: Refresh Ubuntu Bionic container as 18.04-x86_64
1ab414b915 CI: Refresh Ubuntu Xenial container as 16.04-x86_64
e85ff1f1af CI: Refresh OpenSUSE Leap container
a8bc31be01 CI: Refresh OpenSUSE Tumbleweed container
1e66e18806 CI: Refresh and upgrade the GCC-IBT container
248200bd5b CI: Swap to debian for riscv64 build and test
a507bd7d1f CI: Introduce debian:11/12-riscv64 containers
d46e4264c3 CI: Refresh bullseye-ppc64le as debian:11-ppc64le
155c9d7f1b CI: Use debian:12-ppc64le for smoke testing
a2a0ee0eaf CI: Introduce a debian:12-ppc64le container
5e1773dc86 CI: Mark Archlinux/x86 as allowing failures
4b716647f7 CI: Drop Ubuntu Trusty testing
2617d2f141 CI: Drop Debian Stretch testing
aabccd1018 CI: Drop Debian Jessie dockerfiles
83754331a7 CI: Remove useless/misleading randconfig jobs
3420cc1a50 CI: Fix CONTAINER_UID0=1 scripts/containerize
5d3e2140bb automation: Use a different ImageBuilder repository URL
d49ba6bf8f build: Drop xorg-x11 as a build dependency
47f465d485 build: Drop libiconv as a build dependecy
cb3a371469 build: Drop openssl as a build dependency
37810b52d0 tools/libxs: Fix fcntl() invocation in set_cloexec()
8e7c08a336 stubdom: Remove more leftovers of caml-stubdom
c4ebeb79d1 CI: Refresh the Coverity Github Action configuration
64cee18837 build: Fix the version of python checked for by ./configure
7cc95f4166 build: Regenerate ./configure with Autoconf 2.71
0d2b87b5ad x86/physdev: Return pirq that irq was already mapped to
c2a66d0b58 CI: Rework the CentOS7 container
7878756565 CI: Adjust the usage of inline files
aa2b6e4d84 CI: Formalise the use of heredocs
56b77d7db0 build/mkheader: Fix Syntax/DeprecationWarnings
31618bf80e build/mkheader: Remove C-isms from the code
5d8c784783 tools/xs-clients: Fix `make clean` rule
7e3701b6ce xen/vmap: Document the vmap header
a771e02594 xen/riscv: use .insn with operands to support the older gas
63c66274d9 xen: Fix XEN_EXTRAVERSION after 4.19-rc1
fb76e08a8f cmdline: "extra_guest_irqs" is inapplicable to PVH
1f56accba3 amend 'cmdline: document and enforce "extra_guest_irqs" upper bounds'
08daa72cdc xen: avoid UB in guest handle field accessors
d2fe9ab304 x86/entry: don't clear DF when raising #UD for lack of syscall handler
17f6d398f7 cmdline: document and enforce "extra_guest_irqs" upper bounds
a2ff677852 tools/libxs: Fix CLOEXEC handling in xs_fileno()
1957dd6aff tools/libxs: Fix CLOEXEC handling in get_socket()
bf7c146470 tools/libxs: Fix CLOEXEC handling in get_dev()
4c3a618b0a tools/dombuilder: Correct the length calculation in xc_dom_alloc_segment()
9ec74bdb25 xen/common: fix build issue for common/trace.c
daa90dfea9 pirq_cleanup_check() leaks
4a73eb4c20 Update Xen version to 4.19-rc
7584e39986 Config.mk pin QEMU_UPSTREAM_REVISION (prep for Xen 4.19 RC1)
08f9b1dd9c MAINTAINERS: Step down as maintainer and committer
6d41f5b9e1 automation/eclair: add deviations agreed in MISRA meetings
402e473249 x86/traps: address violations of MISRA C Rule 20.7
bfea273b7b automation/eclair_analysis: clean ECLAIR configuration scripts
8f5581d7e1 x86/irq: address violations of MISRA C Rule 20.7
c7e195fac0 automation/eclair_analysis: address violations of MISRA C Rule 20.7
f39642c308 xen/guest_access: address violations of MISRA rule 20.7
4929fea7bd xen/self-tests: address violations of MISRA rule 20.7
0dca0f2b9a automation/eclair: address violations of MISRA C Rule 20.7
ecadd22a3d CHANGELOG: Add entries related to tracing
dde20e47af tools/xenalyze: Remove argp_program_bug_address
188e5f1a80 CHANGELOG.md: Fix indentation of "Removed" section
4712e3b376 Config.mk: update MiniOS commit
853f707cd9 automation/eclair_analysis: deviate and|or|xor|not for MISRA C Rule 21.2
0ac3b175e7 automation/eclair: configure Rule 13.6 and custom service B.UNEVALEFF
11ea49a3fd gnttab: fix compat query-size handling
735865f884 xen: re-add type checking to {,__}copy_from_guest_offset()
93db2f64f3 MAINTAINERS: Update my email address again
b14dae96c0 x86/pagewalk: Address MISRA R8.3 violation in guest_walk_tables()
6e07f41b27 common/unlzo: address violation of MISRA C Rule 7.3
c2f4ea4dc9 automation/eclair: add more guidelines to the monitored set
5add709cc6 automation/eclair: add deviations of MISRA C Rule 5.5
912412f97a automation/eclair: add deviation for MISRA C Rule 17.7
c56f1ef577 xen/arm: static-shmem: request host address to be specified for 1:1 domains
908407bf2b xen/riscv: Drop legacy __ro_after_init definition
8c3bb4d8ce xen/gnttab: Perform compat/native gnttab_query_size check
ebed411e7a xen/xlat: Sort structs per file
90c1520d4e xen/xlat: Sort out whitespace
6a17e11993 x86/shadow: Don't leave trace record field uninitialized
8765783434 x86/shadow: Rework trace_shadow_emulate_other() as sh_trace_gfn_va()
578066d82b x86/shadow: Introduce sh_trace_gl1e_va()
2e9f8a734e x86/shadow: Rework trace_shadow_gen() into sh_trace_va()
ba52b3b624 tools/xl: Open xldevd.log with O_CLOEXEC
9e7c26ad85 libelf: avoid UB in elf_xen_feature_{get,set}()
c5746b021e x86/ioapic: Fix signed shifts in io_apic.c
62071a1c16 livepatch: use appropriate type for buffer offset variables
e2bb28d621 x86/irq: forward pending interrupts to new destination in fixup_irqs()
74970165ba tools/libs/light: Fix nic->vlan memory allocation
f16ac12bd4 hotplug: Restore block-tap phy compatibility
43d5c5d5f7 xen: avoid UB in guest handle arithmetic
267122a24c x86/defns: Clean up X86_{XCR0,XSS}_* constants
71cacfb035 x86/cpuid: Fix handling of XSAVE dynamic leaves
fdb7e77fea x86/cpu-policy: Simplify recalculate_xstate()
df09dfb94d x86/xstate: Rework xstate_ctxt_size() as xstate_uncompressed_size()
a09022a09e x86/boot: Collect the Raw CPU Policy earlier on boot
d31a111940 x86/xstate: Cross-check dynamic XSTATE sizes at boot
9e6dbbe8bf x86/xstate: Fix initialisation of XSS cache
aba98c8d67 xen/arch: Centralise __read_mostly and __ro_after_init
82f4809447 xen/irq: Address MISRA Rule 8.3 violation
efa6e9f15b Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor"
443c488a0b Revert "docs/features/dom0less: Update the late XenStore init protocol"
988f1c7e1f xen/arm: static-shmem: fix "gbase/pbase used uninitialized" build failure
53c5c99e87 docs/features/dom0less: Update the late XenStore init protocol
6f9d90ea94 xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor
cb1ddafdc5 xen/arm/static-shmem: Static-shmem should be direct-mapped for direct-mapped domains
bd59af9970 xen/ubsan: Fix UB in type_descriptor declaration
369558924a x86/irq: handle moving interrupts in _assign_irq_vector()
817d1cd627 x86/irq: deal with old_cpu_mask for interrupts in movement in fixup_irqs()
fa4d026737 x86/Intel: unlock CPUID earlier for the BSP
77b1ed1d02 automation/eclair_analysis: add more clean MISRA guidelines
0f0235e9e9 automation/eclair_analysis: address remaining violations of MISRA C Rule 20.12
8b4243a9b5 xen/docs: Describe static shared memory when host address is not provided
3deac416a3 xen/arm: Implement the logic for static shared memory from Xen heap
a21bfc9126 xen/arm: Rework heap page allocation outside allocate_bank_memory
1544d355b5 xen/arm: Parse xen,shared-mem when host phys address is not provided
3e2121ce47 xen/p2m: put reference for level 2 superpage
79a43c8838 xen/arm: Wrap shared memory mapping code in one function
e90f8d562d xen/arm: Lookup bootinfo shm bank during the mapping
4fdd8d7556 x86/EPT: drop questionable mfn_valid() from epte_get_entry_emt()
777c71d313 x86/EPT: avoid marking non-present entries for re-configuring
5540b94e81 x86/EPT: correct special page checking in epte_get_entry_emt()
b490f470f5 xen/arm: ffa: support notification
452551c723 xen/arm: add and call tee_free_domain_ctx()
dd348eb005 xen/arm: add and call init_tee_secondary()
67ef3db45a xen/arm: allow dynamically assigned SGI handlers
282c33cec3 xen/arm: ffa: simplify ffa_handle_mem_share()
4d2b1b5d69 xen/arm: ffa: use ACCESS_ONCE()
66e6e47511 xen/arm: ffa: refactor ffa_handle_call()
401448f2d1 x86/physdev: replace physdev_{,un}map_pirq() checking against DOMID_SELF
c7564d7366 x86/irq: limit interrupt movement done by fixup_irqs()
0e8cde5884 x86/irq: describe how the interrupt CPU movement works
171c52fba5 x86/smp: do not use shorthand IPI destinations in CPU hot{,un}plug contexts
b0e5352c60 MAINTAINERS: alter EFI section
d05d97c090 MAINTAINERS: add me as scheduler maintainer
5ea7f2c9d7 CI: Update FreeBSD to 13.3
43de96a70f automation: add a test for HVM domU on PVH dom0
ea1cb444c2 x86/pvh: declare PVH dom0 supported with caveats
0a5b2ca32c x86/domain: deviate violation of MISRA C Rule 20.12
e63209d3ba x86/irq: remove offline CPUs from old CPU mask when adjusting move_cleanup_count
c2d5e63c73 xen: fix MISRA regressions on rule 20.9 and 20.12
5f7606c048 xen/bitops: Rearrange the top of xen/bitops.h
04e70af5f2 xen/bitops: Clean up ffs64()/fls64() definitions
54b10ef6c8 xen/bitops: Implement fls()/flsl() in common logic
5ed26fc076 xen/bitops: Implement ffsl() in common logic
989e5f08d3 x86/bitops: Improve arch_ffs() in the general case
ef1dd8dff4 xen/bitops: Implement ffs() in common logic
95ddb7e9b0 xen/bitops: Implement generic_ffsl()/generic_flsl() in lib/
ea59e7d780 xen/bitops: Cleanup and new infrastructure ahead of rearrangements
1408cf7a28 xen/bitops: Delete find_first_set_bit()
03147e6837 arch/irq: Centralise no_irq_type
8aeda4a241 arch/irq: Make irq_ack_none() mandatory
16884ac6c8 CI: Improve serial handling in qemu-smoke-ppc64le.sh
2ff6d17bc3 CI: Use a debug build of Xen for the Xilinx HW tests
1250c73c1a xen/riscv: Update Kconfig in preparation for a full Xen build
db04be9e7d x86/hvm: allow XENMEM_machine_memory_map
9a905d7dc6 xen/bitops: Replace find_first_set_bit() with ffs()/ffsl() - 1
1773a74469 xen/page_alloc: Coerce min(flsl(), foo) expressions to being unsigned
e807b137f7 ppc/boot: Run constructors on boot
6ef4fa1e7f tools: (Actually) drop libsystemd as a dependency
12f9599a3b Partial revert of "x86/MCE: optional build of AMD/Intel MCE code"
845a60b63b xen/x86: remove foreign mappings from the p2m on teardown
0291089f6e xen: enable altp2m at create domain domctl
8ef1e96a04 xen/x86: account number of foreign mappings in the p2m
0840bc5ea1 xen: Introduce CONFIG_SELF_TESTS
2bc462f645 x86: address violations of MISRA C Rule 8.4
19b6e9f914 x86/MCE: optional build of AMD/Intel MCE code
5effd810c6 x86/MCE: add default switch case in init_nonfatal_mce_checker()
498a4ded74 x86/intel: move vmce_has_lmce() routine to header
d27c2835e0 x86/svm: Rework VMCB_ACCESSORS() to use a plain type name
58b3437bae xen/x86: Address two misc MISRA 17.7 violations
2d082710f7 xen/x86: Drop useless non-Kconfig CONFIG_* variables
56d3b24979 xen/lzo: Implement COPY{4,8} using memcpy()
2d93f78bfe x86/traps: address violation of MISRA C Rule 8.4
8b977fe572 CHANGELOG: Mention libxl blktap/tapback support
96af090e33 automation/eclair_analysis: avoid an ECLAIR warning about escaping
841f437a8b docs/misra: exclude gdbsx from MISRA compliance
1eba1fe18d automation/eclair_analysis: add already clean rules to the analysis
4bc8dc01a3 automation/eclair_analysis: set MISRA C Rule 10.2 as clean
ac572152e5 docs: Add device tree overlay documentation
2c4fbadf73 tools: Introduce the "xl dt-overlay attach" command
4c733873b5 xen/arm: Add XEN_DOMCTL_dt_overlay and device attachment to domains
1c77496bc8 xen/arm/gic: Allow adding interrupt to running VMs
6f588194d9 tools/arm: Introduce the "nr_spis" xl config entry
1d2b4f3049 xen/arm, doc: Add a DT property to specify IOMMU for Dom0less domUs
c8cbc5eb1c tools/xl: Correct the help information and exit code of the dt-overlay command
2172a01c4c tools/xenalyze: Ignore HVM_EMUL events harder
320e644616 x86/hvm/trace: Use a different trace type for AMD processors
701190abb3 xen/arm: Set correct per-cpu cpu_core_mask
2a40b106e9 tools/xentrace: Remove xentrace_format
ae26101f6b tools: Drop libsystemd as a dependency
caf8644826 tools/{c,o}xenstored: Don't link against libsystemd
78510f3a15 tools: Import stand-alone sd_notify() implementation from systemd
219cdff3fb LICENSES: Add MIT-0 (MIT No Attribution)
9e58da32cc xen/arm: mem_access: Conditionally compile mem_access.c
d6a7fd8303 vpci: add initial support for virtual PCI bus topology
9c831e429c vpci/header: emulate PCI_COMMAND register for guests
7db7bd0f31 arm/vpci: honor access size when returning an error
2c15fa332e x86: detect PIT aliasing on ports other than 0x4[0-3]
249affc129 x86/PIT: supply and use #define-s
e6ed98863b xen/riscv: add required things to current.h
3cd46d4ec8 xen/riscv: introduce atomic.h
51dabd6312 xen/riscv: introduce cmpxchg.h
9f482c6a7e xen/x86: Simplify header dependencies in x86/hvm
212cb5effa iommu/x86: print RMRR/IVMD ranges using full addresses
3a3111d018 xen/livepatch: make .livepatch.funcs read-only for in-tree tests
ced21fbb28 x86_64/cpu_idle: address violations of MISRA C Rule 20.7
1b0b050bd6 x86_64/uaccess: address violations of MISRA C Rule 20.7
670b7ec65d x86/hvm: address violations of MISRA C Rule 20.7
1b9311da4b x86/vpmu: address violations of MISRA C Rule 20.7
bba4eb88fd xen/common/dt-overlay: Fix lock issue when add/remove the device
24dbf5bd03 x86/p2m: Add braces for better code clarity
ed1ac3e968 xen/riscv: introduce vm_event_*() functions
7e036f7e0c xen/riscv: introduce monitor.h
44b69e9c17 xen/x86: pretty print interrupt CPU affinity masks
9c5444b01a xen/trace: Drop old trace API
aa60520cd3 xen/trace: Removal final {__,}trace_var() users in favour of the new API
26da08059e xen: Switch to new TRACE() API
d64693df1a xen/sched: Clean up trace handling
df50666449 xen/rt: Clean up trace handling
ab8bc19850 xen/credit2: Clean up trace handling
e978b462ec xen/trace: Introduce new API
26b122e3bf tools/xen-cpuid: Drop old names
bbb5c171d7 tools/xen-cpuid: Use automatically generated feature names
e96fefdb06 tools/xen-cpuid: Rename decodes[] to leaf_info[]
f79189cb29 x86/gen-cpuid: Minor cleanup
54aa34fc89 tools/golang: Add missing golang bindings for vlan
594b22ca5b x86/msi: prevent watchdog triggering when dumping MSI state
21611c6870 include/ctype.h: fix MISRA R10.2 violation
53dc37829c xen/arm: Add DT reserve map regions to bootinfo.reserved_mem
d946787a27 xen/arm64: lib: Use the generic xen/linkage.h macros
fe1b97d321 xen/arm64: cache: Use the generic xen/linkage.h macros
c9906bd79e xen/arm64: mmu/head: Add missing code symbol annotations
8151fe503c xen/arm64: bpi: Add missing code symbol annotations
fdba3ff11f xen/arm64: debug: Add missing code symbol annotations
fba250ae60 xen/arm64: head: Add missing code symbol annotations
78ce1dc625 xen/arm64: sve: Add missing code symbol annotations
8d92a26a41 xen/arm64: smc: Add missing code symbol annotations
1125f3529c xen/arm64: entry: Add missing code symbol annotations
977d98e67c x86/ucode: Further fixes to identify "ucode already up to date"
ae7584f636 x86/p2m: move altp2m-related code to separate file
f1fa994d89 x86/MCE: guard {intel/amd}_mcheck_init() calls
71b5eccbdd x86/MCE: guard access to Intel/AMD-specific MCA MSRs
a3ec23a940 x86/vpmu: separate amd/intel vPMU code
6628bacc81 xen/bitops: put __ffs() into linux compatible header
d0c6114058 x86: detect PIC aliasing on ports other than 0x[2A][01]
c09960a1a2 x86: allow to suppress port-alias probing
762a848223 automation/eclair_analysis: deviate macro count_args_ for MISRA Rule 20.7
7fe9679db9 automation/eclair_analysis: fully deviate MISRA C Rules 21.9 and 21.10
abd00b037d x86/mtrr: avoid system wide rendezvous when setting AP MTRRs
0cc01c603f tools/xl: add vlan keyword to vif option
3bc14e4fa4 tools/libs/light: Add vlan field to libxl_device_nic
e27fc7d15e tools/xentop: Fix cpu% sort order
9b7d793889 tools/hvmloader: Further simplify SMP setup
8a78d89881 x86/cpufreq: Rename cpuid variable/parameters to cpu
7270fdc7a0 x86: respect mapcache_domain_init() failing
d104a07524 xen/sched: set all sched_resource data inside locked region for new cpu
319a5125ca xen/console: fix Rule 10.2 violation
46aa3031ae docs/misra: add R21.6 R21.9 R21.10 R21.14 R21.15 R21.16
9110072b76 x86/io: Don't cast away constness in read{b..q}()
2d8d7481ca Revert "evtchn: refuse EVTCHNOP_status for Xen-bound event channels"
90a1bc9e82 xen: Use -Wuninitialized and -Winit-self
0b01395c44 xen: Use -Wflex-array-member-not-at-end when available
d31d0665f1 automation/eclair_analysis: tag MISRA C Rule 1.1 as clean
531d3bea5e libxl: Fix handling XenStore errors in device creation
b2cd07a044 x86/hvm: Allow access to registers on the same page as MSI-X table
e9607d4061 x86/msi: Extend per-domain/device warning mechanism
5cc7347b04 libxl: fix population of the online vCPU bitmap for PVH
996576b965 xen: allow up to 16383 cpus
b0082b9083 automation/eclair: hide reports coming from adopted code in scheduled analysis
f4cd14e502 automation/eclair_analysis: amend configuration for some MISRA rules
93c27d54dd xen/arm: Fix MISRA regression on R1.1, flexible array member not at the end
1672df9ebd xen/kernel.h: Import __struct_group from Linux
53959cb830 x86/boot: Refactor pvh_load_kernel() to have an initrd_len local
49c810e867 x86/boot: Explain how moving mod[0] works
fcefb2a247 x86/IOMMU: address violations of MISRA C:2012 Rule 14.4
3d1033c911 automation/eclair: add deviation of MISRA C:2012 Rule 14.4
14424d90e1 xen/pci: address violations of MISRA C Rule 20.7
8e22c78e17 xen/unaligned: address violation of MISRA C Rule 20.7
1dd6b50dc4 x86/hvm: Defer the size calculation in hvm_save_cpu_xsave_states()
752ec9a9b1 tools/hvmloader: Wake APs with hypercalls rather than INIT+SIPI+SIPI
754a29cacf tools/hvmloader: Move various helpers to being static inlines
1c6112b8f5 xen/gunzip: Move crc state into gunzip_state
7a4483358f xen/gunzip: Move bitbuffer into gunzip_state
d386a383dd xen/gunzip: Move output count into gunzip_state
fd273a5690 xen/gunzip: Move input buffer handling into gunzip_state
461eacc76b xen/gunzip: Move window position into gunzip_state
02e32883f3 xen/gunzip: Introduce struct gunzip_state and refactor window
473156eec6 xen/gunzip: don't leak memory on error paths
648db37a15 x86/ucode: Distinguish "ucode already up to date"
3c228e24b2 automation/eclair_analysis: unblock pipelines from certain repositories
0c79b7bc9b automation/eclair_analysis: tag MISRA C Rule 8.2 as clean.
e8e8afee99 svm: Fix MISRA 8.2 violation
a2330b51df x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake
f4f2f3402b tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC
ebab808eb1 x86/platform: correct #undef in compat checking
d7032b4ca2 AMD/IOMMU: add helper to check whether ATS is to be used for a device
b5996ab284 VT-d: parse ACPI "SoC Integrated Address Translation Cache Reporting Structure"s
426dbf404e VT-d: tidy error handling of RMRR parsing
692f6199bd automation/eclair: add deviation for Rule 16.4
50a4f7c177 docs/misra: add Terms & Definitions section to rules.rst
6654248f22 ppc/riscv: fix arch_acquire_resource_check()
b801ccfe7e drivers/char: address violation of MISRA C Rule 20.7
04e31583ba VT-d: correct ATS checking for root complex integrated devices
f95cd010cb xen/Kconfig: Drop the final remnants of ---help---
2d4ba20559 tools/tests: let test-xenstore exit with non-0 status in case of error
642005e310 tools/tests: don't let test-xenstore write nodes exceeding default size
feb9158a62 automation/eclair: make explicit there are no adopted files by default
7556f46a9b automation: do not allow failure for triggered analyses
c1aa6fb5f6 automation/eclair: tag Rule 7.2 as clean and temporarily remove Rules 1.1 and 8.2
9e30bd8f4a x86/cpu-policy: Annotate the accumulated features
b819bd65f4 revert "x86/mm: re-implement get_page_light() using an atomic increment"
bf0059282d xen/riscv: improve check-extension() macro
08e79bba73 xen/x86: Fix Syntax warning in gen-cpuid.py
647f7e50eb xen/xsm: Wire up get_dom0_console
abc68e78a3 x86/MCE: guard call to Intel-specific intel_get_extended_msrs()
64b21662b1 x86/msi: passthrough all MSI-X vector ctrl writes to device model
be5b08dd6e xen-livepatch: fix --force option comparison
13893a58e2 xen/spinlock: use correct pointer
a505890d81 x86/entry: shrink insn size for some of our EFLAGS manipulation
fd4ff921f7 gzip: clean up comments and fix code alignment
232ee07c23 arm/vpci: make prefetchable mem 64 bit
a0e29b3163 CI: Drop glibc-i386 from the build containers
4edbbcd0c0 automation/eclair: reorganize pipelines
23cd1207e7 VMX: no open-coding in vmx_get_cpl()
7ea3a3e44f MAINTAINERS: Update my email address
656ae8f109 x86/spec: adjust logic that elides lfence
049ab0b2c9 x86/spec: fix reporting of BHB clearing usage from guest entry points
6d5111b10e tools/ocaml: Fix warnings in config.ml
524eee7ce0 x86/hap: Refactor boolean field assignments
bd5213384b x86/shadow: correct shadow_vcpu_init()'s comment
9a73b4e210 x86/paging: vCPU host mode is always set
8c01d0e336 x86/msr: add suffix 'U' to MSR_AMD_CSTATE_CFG macro
ea3272f845 x86/pci: add suffix 'U' to PCI_CONF_ADDRESS macro
62a72092a5 livepatch: introduce --force option
fb2716a191 xen-livepatch: fix parameter name parsing
4a75f2ffc0 x86/mm: address violations of MISRA C Rule 20.7
445f66fe00 x86/debugreg: address violation of MISRA C Rule 20.7
c717d52a5d x86/vhpet: address violations of MISRA C Rule 20.7
4f900035a4 x86/acpi: address violations of MISRA Rule 20.7
0440fcad2a x86/pci: address violation of MISRA C Rule 20.7
489d13da93 xen/spinlock: address violations of MISRA C Rule 20.7
0d02b75d7c xen/page-defs: address violation of MISRA C Rule 20.7
8189230d80 libelf: address violations of MISRA C Rule 20.7
d7c4d59b51 libxl: Support blktap with HVM device model
76a484193d hotplug: Update block-tap
31d6b5b4a7 automation: Add arm64 test for running Xen with GICv3
db49973411 automation: Add arm{64,32} earlyprintk jobs
c05b97fc7a automation: Drop some of the non-debug variants of the same Arm jobs
7846f7699f xen/arm: List static shared memory regions as /memory nodes
51a2b3f109 xen/arm: fix duplicate /reserved-memory node in Dom0
a0fee882c1 xen/arm: remove shm holes from extended regions
2b557af192 xen/arm: Reduce struct membank size on static shared memory
e5816ad4e8 xen/arm: Introduce helper for static memory pages
9f657d8832 xen/arm: Avoid code duplication in check_reserved_regions_overlap
b3e66aa1c2 xen/arm: Avoid code duplication in find_unallocated_memory
e13499b3c4 xen/arm: Conditional compilation of kernel_info.shm_mem member
2209c1e35b xen/arm: Introduce a generic way to access memory bank structures
8d5ff14477 xen/arm: Pass struct kernel_info parameter to make_{resv,shm}_memory_node
6d14a742f8 xen/arm: avoid repetitive checking in process_shm_node
ab327c8e8b xen/arm: remove stale addr_cells/size_cells in assign_shared_memory
6c04a0bf2c tools/golang: Run `go vet` as part of the build process
9c08a88ad0 golang/xenlight: Ensure comments aren't interpreted as docstrings
27c176d298 tools/golang: When returning pointers, actually allocate structrues
0d19d3aab0 svm/nestedsvm: Introduce nested capabilities bit
410ef33439 x86/monitor: allow fast-singlestepping without enabling singlestep monitor
77e25f0e30 x86/MTRR: correct inadvertently inverted WC check
f82c43a384 xen: introduce header file with section related symbols
70d46b51e2 docs/man: Add xenwatchdog manual page
9c872b5766 tools/misc: Add xenwatchdogd.c copyright notice
e906bfae48 tools/misc: xenwatchdogd enhancements
f0fa75c9ea tools/misc: xenwatchdogd: add parse_secs()
43a0706986 x86/rtc: Avoid UIP flag being set for longer than expected
cccb7878f3 x86/pvh: zero VGA information
c3b40c95da x86/video: add boot_video_info offset generation to asm-offsets
93d6e6efa8 automation/eclair_analysis: substitute deprecated service STD.emptrecd
bc5827fad1 xen/riscv: check whether the assembler has Zbb extension support
1fc166d6cd xen/domain: deviate MISRA C Rule 16.2 violation
480179bc26 x86/PVH: Use unsigned int for dom0 e820 index
09cb855f33 x86/svm: Add flushbyasid in the supported features
5495ed0cd2 eclair_analysis: deviate x86 emulator for Rule 16.2
1d2d283818 xen/riscv: add minimal stuff to page.h to build full Xen
58798e3f1f xen/riscv: introduce io.h
5b33845adf xen/ppc: mm-radix: Replace debug printing code with printk
78d980071a x86/MCE: move intel mcheck init code to separate file
8763eb782b xen/gzip: Drop huffman code table tracking
052cf1dcdf xen/gzip: Remove custom memory allocator
492fe0778b xen/gzip: Drop unused define checks
489a46c177 x86/emul: Simplify segment override prefix decoding
4cd66fb56d xen/efi: Rewrite DOS/PE magic checking without memcmp()
02fbb2d591 docs/misra: mark the gzip folder as adopted code
2a9a19be13 Revert "public: s/int/int32_t"
83e081b29e docs: arm: Update where Xen should be loaded in memory
afab29d088 public: s/int/int32_t
ad363fb17d docs/misra: add Rule 16.4
487838f13a docs/misra/rules.rst: add rule 5.5
c0f890cd9d docs/hypercall-abi: State that the hypercall page is optional
cfb922bb7d xen/gzip: Colocate gunzip code files
af4cd0a6a6 altcall: fix __alt_call_maybe_initdata so it's safe for livepatch
09abf1b61b libxl: devd: Spawn QEMU for 9pfs
3c7482b73c libxl: Use vkb=[] for HVMs
2b31a1f055 xen/include: move definition of ASM_INT() to xen/linkage.h
6cb501e3e6 MAINTAINERS: Update livepatch maintainers
86c008aa5d tools/misc: xenwatchdogd: add static qualifier
5d09f8cbdc tools/misc: rework xenwatchdogd signal handling
0668d35594 tools/misc: xenwatchdogd: use EXIT_* constants
c304bdf1e7 xen/acpi: Allow xen/acpi.h to be included on non-ACPI archs
2145512e21 xen/xsm: address violation of MISRA C Rule 16.2
bbbbd024e8 x86/hvm: address violations of MISRA C Rule 16.2
eeab8c4619 xen/domctl: address violations of MISRA C Rule 16.2
f509d39d5b x86/efi: tidy switch statement and address MISRA violation
24f204748e x86/irq: tidy switch statement and address MISRA violation
3b51a812e0 x86/cpuid: address violation of MISRA C Rule 16.2
6af626c1da x86/vlapic: tidy switch statement and address MISRA violation
478002370c x86/emul: Adjust X86EMUL_OPC_EXT_MASK to placate MISRA
761358b9eb xen/spinlock: Adjust LOCK_DEBUG_INITVAL to placate MISRA
e5b93b70d5 xen/vPCI: Remove shadowed variable
52bde26c1c xen/nospec: Remove unreachable code
d0a718a45f x86/hvm: Fix Misra Rule 19.1 regression
d37c184236 xen/virtual-region: Drop setup_virtual_regions()
038ba305fd xen/virtual-region: Link the list build time
3434518d05 xen/virtual-region: Rework how bugframe linkage works
337f11ea73 xen/link: Introduce a common BUGFRAMES definition
0e7ea8ca5f x86/Kconfig: Introduce CONFIG_{AMD,INTEL} and conditionalise ucode
2eea952b70 x86/ucode: Move vendor specifics back out of early_microcode_init()
f48299cad5 docs/misra: document the expected sizes of integer types
dfc9455b80 MAINTAINERS: Become a reviewer of iMX8Q{M,XP} related patches
2f85a6d9f5 xen/drivers: imx-lpuart: Replace iMX8QM compatible with iMX8QXP
71d4356544 xen/arm: Add imx8q{m,x} platform glue
a9fa825008 x86/entry: Fix build with older toolchains
d5887c0dec x86/spec-ctrl: Support the "long" BHB loop sequence
689ad48ce9 x86/spec-ctrl: Wire up the Native-BHI software sequences
954c983abc x86/spec-ctrl: Software BHB-clearing sequences
62a1106415 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI
c94e210592 x86/tsx: Expose RTM_ALWAYS_ABORT to guests
0b66d7ce3c x86: Drop INDIRECT_JMP
8e186f98ce x86: Use indirect calls in reset-stack infrastructure
45dac88e78 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields
97c5b8b657 x86/vmx: Add support for virtualize SPEC_CTRL
40dea83b75 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_*
2378d16a93 x86/spec-ctrl: Simplify DO_COND_IBPB
9607aeb660 x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR}
22390697bf x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV
94896de1a9 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_*
c62673c433 x86/spec-ctrl: Rename spec_ctrl_flags to scf
489d93cd0f x86/spec-ctrl: Fix BTC/SRSO mitigations
4b3da946ad x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests
4be1fef1e6 x86/alternatives: fix .init section reference in _apply_alternatives()
9926e692c4 hypercall_xlat_continuation: Replace BUG_ON with domain_crash
6a98383b08 x86/HVM: clear upper halves of GPRs upon entry from 32-bit code
672b26b66e drivers: char: Enable OMAP UART driver for TI K3 devices
c079823df6 xen/compiler: address violation of MISRA C Rule 20.9
dfc9fab003 x86/PVH: Support relocatable dom0 kernels
4d3b8669d8 libelf: Store maximum PHDR p_align
77b219f915 xen/rwlock: raise the number of possible cpus
c286bb93d2 xen/spinlock: support higher number of cpus
0b09531d21 xen/spinlock: let all is_locked and trylock variants return bool
bfbec024b8 xen/spinlock: split recursive spinlocks from normal ones
31be78285c xen/spinlock: add missing rspin_is_locked() and rspin_barrier()
ee1e133125 xen/spinlock: add another function level
3696a9f27d xen/spinlock: add explicit non-recursive locking functions
402c2d3e66 MISRA C Rule 17.1 states: "The features of `<stdarg.h>' shall not be used"
ea33a6e1e3 MISRA C:2012 Rule 17.1 states: The features of `<stdarg.h>' shall not be used
80d28865e1 automation/eclair: add deviations for Rule 20.7
6bdb67d19e arm/public: address violations of MISRA C Rule 20.7
e9b0f8b690 x86: Address MISRA Rule 13.6
b33f191e3c x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch
270588b9b2 char: lpuart: Drop useless variables from UART structure
4932163b35 drivers: char: Drop useless suspend/resume stubs in Arm drivers
6eeb3e86bd vsprintf: address violations of MISRA C:2012 Rule 16.3
226bdb155b xen/sched: address violations of MISRA C:2012 Rule 16.3
21e0c8fc0e tools: Move MB/GB() to common-macros.h
4c41749852 tools/init-xenstore-domain: Replace variable MB() usage
1e6cd4155d xen/riscv: introduce extension support check by compiler
7b02b505bb automation: introduce fixed randconfig for RISC-V
6117179dd9 docs/misra: add 13.6 to rules.rst
538ab07bad xen/arm: ffa: support FFA_FEATURES
be75f686eb xen/arm: ffa: separate rxtx buffer routines
bded3e6467 xen/arm: ffa: separate partition info get routines
8836867200 xen/arm: ffa: separate memory sharing routines
bb584ec036 xen/arm: ffa: move common things to ffa_private.h
b21cbaf6ba xen/arm: ffa: rename functions to use ffa_ prefix
ac682fbac1 xen/vm-event: address a violation of MISRA C:2012 Rule 16.3
cde0c58714 xen/evtchn: address a violation of MISRA C:2012 Rule 16.3
163ea7d9a8 console: address a violation of MISRA C:2012 Rule 16.3
2c205ce5c0 xen/domctl: address a violation of MISRA C:2012 Rule 16.3
795c4e367b x86/amd: address violations of MISRA C Rule 20.7
da88f434bc xen/mm: address violations of MISRA C Rule 20.7
5811fb4816 x86/hvm: address violations of MISRA C Rule 20.7
a9b2a72926 x86/vPMU: address violations of MISRA C Rule 20.7
dd5101a616 drivers/char: mark extra reserved device memory in memory map
7a09966e7b x86/spec-ctrl: Move __read_mostly data into __ro_after_init
3c9e76cd87 x86/mm: Refine address alignment checks in modify_xen_mappings_lite()
8f85af65af tools/oxenstored: Re-format
0cd50753eb nestedsvm: Disable TscRateMSR
4f8b0e94d7 x86: Move SVM features exposed to guest into hvm_max_cpu_policy
e3883336bb xen/efi: efibind: address violations of MISRA C Rule 20.7
853c71dfbf xen/elfnote: Specify ELF Notes are x86-specific
7d8c9b4e8d libelf: Expand ELF note printing
8802230bfa Revert "xen/x86: bzImage parse kernel_alignment"
f6a4139948 x86/public: address violations of MISRA C Rule 20.7
a65d9988ad x86/hvm: address violations of Rule 20.7
e2eeb1b753 xen/page_alloc: address violations of MISRA C Rule 20.7
cab6de6a95 xen: address MISRA C Rule 20.7 violation in generated hypercall
7757981d94 xentrace: address violation of MISRA C Rule 20.7
12a3b90c2a xen/list: address violations of MISRA C Rule 20.7
6f6de10ade xen/xsm: add parentheses to comply with MISRA C Rule 20.7
4b60085b6e xen/console: add comment about external console lock helper
03e484a4f6 x86/vcpu: relax VCPUOP_initialise restriction for non-PV vCPUs
d654612e98 xen/riscv: add minimal stuff to processor.h to build full Xen
5095b610df EFI: Introduce inline stub for efi_enabled on !X86 && !ARM
cbe393b709 Revert "xen/page_alloc: introduce preserved page flags macro"
ee973396f0 x86/cpuid: More AMD features
5205bda5f1 x86/p2m: Coding style cleanup
97b90f9bf2 xen/ppc: Ensure ELF sections' physical load addresses start at 0x0
10e8d824b7 AMD/IOMMU: drop remaining guest-IOMMU bits too
cc950c49ae x86/PoD: tie together P2M update and increment of entry count
f5c2b6da26 xen/page_alloc: introduce page flag to stop buddy merging
75214d5e53 xen/page_alloc: introduce preserved page flags macro
6eb13b6b1d tools/xl_parse: remove message for tsc mode string
eaafbd1134 docs/parse-support-md: Handle BulletList
188fa82305 xen/vpci: Improve code generation in mask_write()
131892e0dc x86/boot: Support the watchdog on newer AMD systems
f658321374 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly
9e18f33983 x86/boot: Improve the boot watchdog determination of stuck cpus
d2276b86e5 xen/nospec: Include <xen/stdbool.h>
d9e709e8c0 xen/wait: address violations of MISRA C Rule 20.7
239b72d874 xen/notifier: address violations of MISRA C Rule 20.7
88822d5fbd xen/arm: smmu: address violations of MISRA C Rule 20.7
8e7207d512 EFI: address violations of MISRA C Rule 20.7
b51d7f39dc xen/device_tree: address violations of MISRA C Rule 20.7
9979cc594a x86/cpufeature: add parentheses to comply with Rule 20.7
a02174c6c8 amd/iommu: clean up unused guest iommu related functions
b053075d1a xen/spinlock: make struct lock_profile rspinlock_t aware
cc3e8df542 xen/spinlock: add rspin_[un]lock_irq[save|restore]()
c9aca2a1f6 xen/spinlock: rename recursive lock functions
475080b6b2 xen/spinlock: introduce new type for recursive spinlocks
a97de92e76 IOMMU: store name for extra reserved device memory
62018f0870 x86/mm: use block_lock_speculation() in _mm_write_lock()
d92a67b60c xen/sched: address violations of MISRA C Rule 20.7
f93d8dd519 automation/eclair: allow parameter name "unused"
a5b90a90ee MAINTAINERS: remove myself from various positions
ad52857efc MAINTAINERS: drop AMD IOMMU and Intel VT-d sections
8a8d5c22af perfc: add pseudo-keyword fallthrough
53b5208de8 x86/svmdebug: Print np, sev and sev_es vmcb bits
2f09f797ba x86/svm: Drop the suffix _guest from vmcb bit
d638e304f1 SUPPORT.MD: Fix matrix generation after 43c416d0d819 and 77c39a53cf5b
77c39a53cf xen/arm: arm32: Add emulation of Debug Data Transfer Registers
43c416d0d8 xen/arm: arm64: Add emulation of Debug Data Transfer Registers
bd06cf74fc xen/arm: Introduce CONFIG_PARTIAL_EMULATION and "partial-emulation" cmd option
af7fed3fdf xen/spinlock: remove misra rule 21.1 violations
68e008db0c xen: avoid grep fodder define and undef
70e549fd44 MAINTAINERS: Remove myself from several subsystems
a6081d0176 x86/svm: Drop the _enabled suffix from vmcb bits
d2686bf964 xen/compiler: deviate the inline macro for MISRA C Rule 20.4
3945b61ddb xen/lz4: address violations of MISRA C:2012 Directive 4.10
ec2587ab4b x86/mtrr: address violations of MISRA C:2012 Directive 4.10
13a7b0f9f7 restrict concept of pIRQ to x86
4dc9a8b060 automation/eclair_analysis: deviate certain macros for Rule 20.12
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Matthis Mauschild <matthis.hauschild@airbus.com> noticed that
commit 3902ac8844a9868ab14f [libvirt: ensure sysusers.d path for
libvirt-qemu] does not universally work.
Adjusting the directory creation to be the same as other installs
in the recipe to ensure it works everywhere.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
In 8138d9cc7e0c31171230110db0cfa881c46a821b the path to
/lib/sysusers.d might not exist, use install -d to ensure
it does.
Fixes:
install: cannot create regular file
'.../libvirt/v10.5.0+git/image/lib/sysusers.d/libvirt-qemu.conf':
No such file or directory
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Some versions of python/bitbake appear to allow 'true' and 'false',
but this is incorrect, True and False are the correct boolean variables.
Fixes:
ERROR: ExpansionError during parsing .../meta-xilinx/meta-xilinx-core/recipes-bsp/u-boot/u-boot-xlnx-scr.bb
Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
When do_rootfs, the following error occured:
WARNING: do_rootfs: Group kvm has been defined with id (47) but sysusers.d expects gid (36)
WARNING: do_rootfs: Group qemu has been defined with id (975) but sysusers.d expects gid (107)
ERROR: do_rootfs: Error executing a python function in exec_func_python() autogenerated:
Create an empty file libvirt-qemu.conf to solve the issue of gid mismatch
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Xen related boot script offset was override from
meta-virtualization for non xen builds.
ERROR: RD image overlaps OS image (OS=0xe00000..0x2610000)
Add to include xen boot script only if ENABLE_XEN_UBOOT_SCR variable
set from the configuration file and xen enabled in DISTRO_FEATURES to
avoid override.
Signed-off-by: John Vicky Vykuntapu <johnvicky.vykuntapu@amd.com>
Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
We no longer need our own pinned version of this recipe, and
it causes us issues with meta-python.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
On qemuarm, time_t is 'long long int', so using '%lu' to print
it out will give us the following error:
error: format '%lu' expects argument of type 'long unsigned int',
but argument 10 has type 'time_t' {aka 'long long int'} [-Werror=format=]
So use %llu to print it out.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
According to this commit polkit rules should go to ${datadir} instead of ${sysconfdir}:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=d5e90541f8e35916abc930b2da6de037b23d51a1
Theres no need to adjust the permissions for ${datadir} anymore:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=6da0fd21c900e32a0693a6b27d38182f19c8c76c
This commit fixes build after:
https://git.yoctoproject.org/poky/commit/?id=ef9a927a3af1dd817fe298bbe45470b738d9ce2f
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
When enable multilib, the following do_package QA happens:
ERROR: libvirt-v10.5.0+git-r0 do_package: QA Issue: libvirt: Files/directories were installed but not shipped in any package:
/usr/lib/sysusers.d
/usr/lib/sysusers.d/libvirt-qemu.conf
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
PREFERRED_VERSION
* it was introduced in:
https://git.yoctoproject.org/meta-virtualization/commit/?id=a940a0e873f9163d4585555b3f3d38e99400d237
but it doesn't work well when PREFERRED_VERSION is set to e.g. "6.6.%",
you remove the '%' but not the trailing dot, causing:
ERROR: Nothing PROVIDES 'yocto-cfg-fragments-6.6.-native'. Close matches:
yocto-cfg-fragments-6.10-native
yocto-cfg-fragments-6.6
yocto-cfg-fragments-6.6-native
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Update RDEPENDS for package virt-manager-install which are required by
command virt-install. For example, the error is as follows when missing
virsh:
Error launching ['virsh', '--connect', 'qemu:///system', 'console',
'myvm']: [Errno 2] No such file or directory
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
virsh can not do anything without libvirt daemon running, such as
$ virsh list
error: failed to connect to the hypervisor
error: Operation not supported: Cannot use direct socket mode if no URI is set
So add libvirt-libvirtd to RDEPENDS of libvirt-virsh.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cri-o to version v1.30.0-387-g20c06a19c, which comprises the following commits:
2562cea42 build(deps): bump the actions group with 2 updates
7472e56e9 Trigger `test` workflow after release branch fast forward
5aa911d5a Update shfmt to v3.9.0
d1e6111e5 Fix space at EOL in actions
a15d14d23 fixed token-permission and pinned-dependencies issue
99b02b97b Switch to go 1.23
c36f2b5bd build(deps): bump the gomod group across 1 directory with 8 updates
8e48b06da Add `crun` integration tests
9f47c4738 Fix tab in Info to string, add tests
8e313e986 Vendor Kubernetes v1.31.0
0262d1980 Squash MetaHostPortManager into HostPortManager
6cdc457b6 Drop port-opening code from hostport manager
aa6d034d6 Skip storage directory corruption recovery tests on Kata Containers
ba0bd3e8b Add crio check sub-command used to check storage for errors
269137ede contrib: temporarily move to crun 1.15 to fix CI
0c7f36a16 Remove custom golang version for runc
211de0d70 build(deps): bump sigstore/cosign-installer in the actions group
a79fa8ba4 Make internal repair the new default and disable internal wipe
fc7a26bea Allow for storage directory removal to be forced
1a20443b2 Wipe storage only after giving storage.Repair() a chance
1348885f8 Remove orphaned mounts before removing storage directory
5cf0fc68a internal/oci: improve container termination process in killContainer
04143e0e0 build(deps): bump actions/upload-artifact in the actions group
9ee915794 Move config warning for NoSyncLog
6d76b7841 build(deps): bump the actions group with 2 updates
895c2cab8 Make the storage shutdown force unmount images on error
7b058f26b Move log message from HandleUncleanShutdown() function
8f5557429 Replace open-coded repair options with the RepairEverything() helper
46b167de3 Use custom set of checks over the CheckEverything() for storage checks
ffcf8ecb3 Log how configuration gets loaded
46ef7a1c5 Update conmon-rs to v0.6.5
af0d3e79d build(deps): bump google-github-actions/upload-cloud-storage
f03eef4d8 Run critest in parallel
07addee6b Update nixpkgs
c8ff7aec7 Add pause image to dependencies.yaml
3a7bfdfa0 build(deps): bump actions/upload-artifact in the actions group
136b3ed5e build(deps): bump crate-ci/typos in the actions group
32ad0fde5 build(deps): bump golangci/golangci-lint-action in the actions group
d1c4129b1 Enable and fix `gomoddirectives`, `gomodguard`, `noctx` and `wastedassign` linters
b98f56996 Make container and image removal/stop idempotent
0c0c7f6d2 Fix unshare index
c60000697 build(deps): bump ossf/scorecard-action in the actions group
a46e1d98a build(deps): bump the gomod group with 5 updates
c20d16cfb Trim `crio version Version: …` prefix from `crio -v`
a048e1530 Fix trailing whitespace in docs
3d778ed26 Rework no_sync_log to be a runtimes.runtime setting
988444bdd build(deps): bump crate-ci/typos in the actions group
877a4b0fa Fix lint timeout option
de0d48a57 build(deps): bump the gomod group across 1 directory with 4 updates
b9b7f089e Remove error log message if mountpoint cannot be found
8b4759730 build(deps): bump crate-ci/typos in the actions group
3a256325a Make ImageVolume garbage collection work
cfa3f2979 Add documentation for setting up CRI-O with Flatcar
b6ad92802 ci: Add timeout value on WaitEvent for TestContainerEvents
6ed96dcaf oci_volumes: require crictl that can request OCI volumes
cca74fe23 Use cri-tools master for CI tests
2cd9ad326 Log version only for main CRI-O command
8bc0487a4 Disable network ping tests for actuated runners
6e98e4210 test: config tests should ignore default runtime environment variable
c39e8014f Add OCI Volume Source support
04c768a26 test: re-enable hooks.bats in integration tests for kata
3f08208eb test: use kata 3.6.0 for testing
50046c72b test: kata test - set skip_mount_home in storage options
14e5af098 ci: kata-specific testing in integration tests
e30e13907 ci: cleanup kata processes during teardown
7f9efe304 ci: enable debug log level for the kata container runtime
2e9d44dbf Use `.gitignore` in nix build excludes
c2c0bae26 KEP-3619: implement RuntimeStatus.features.supplemental_groups_policy field
f05dac5d5 KEP-3619: update cri-api version
5f66ac000 oci: separate out timer logic from the backoff manager
08180027b oci: move oci-specific code into their respective runtime
8693692a7 test: add test coverage for multiple stop calls
c119e524e oci: remove redundant ShouldBeStopped check for stopping containers
bf9b5a309 Remove duplicate `exclude_graphdriver_devicemapper` from static builds
0bc0e6c6f Dedup installation docs
ff047539d updates pause image to 3.10
b8d9714fe Fix "data loss" description of no_sync_log setting
d1a7ee15f build(deps): bump the gomod group across 1 directory with 6 updates
031c6af6b build(deps): bump crate-ci/typos in the actions group
e14676520 Remove go-setup from jobs not using golang
0f4ab88eb Remove config migration
b3c7ebc43 build(deps): bump actions/setup-go in the actions group
481b25a72 Add table of contents to README.md
b4c6af21a Cleanup install docs
8eed3d8e1 Update crio.conf manpage for no_sync_log
6e3685c81 Update manpage for --no-sync-log
beae8bd53 server: propagate the pinned status of an image when queried via crictl
5a2e10ea2 Allow disabling fsync on log rotate and pod shutdown
33ceea55e Add automatic markdown table of contents generation
52707b8be Move hostport tests to use ginkgo
6d6149a0b build(deps): bump the actions group with 2 updates
bc86390e0 Sanitize CRI-O version set in the User-Agent header
fc1bd923a nri: pass around context and log failed pid for not spoofed containers
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping buildah to version v1.37.1-1-g0117c423e, which comprises the following commits:
67cc51e90 [release-1.37] Bump to Buildah v1.37.1
02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
f9de1bbd1 Buildah v1.37.0
7de5d5d6e Bump c/storage, c/image, c/common for v1.37.0
6373be5a1 "build with basename resolving user arg" tests: correct ARG use
dcf3ea5fd bud-multiple-platform-no-run test: correct ARG use
3e38e5e13 imagebuildah: always have default values for $TARGET... args ready
7f1fe46fc bump github.com/openshift/imagebuilder to v1.2.14
f6f2da76d fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
5e20b928c fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
54d84483a fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
3ad0fd1ed CI: use local registry, part 2 of 2
52df6e0e0 CI: use local registry, part 1 of 2
2a99f9bcd fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
b756a3d00 Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
b1dff416b Replace libimage.LookupReferenceFunc with the manifests version
9bb25a6da conformance tests: enable testing CompatVolumes
1861c1320 conformance tests: add a test that tries to chown a volume
a7098c776 imagebuildah: make traditional volume handling not the default
b5eafdf55 StageExecutor.prepare(): mark base image volumes for preservation
5940e721c fix(deps): update module github.com/containers/image/v5 to v5.31.1
e2f080554 Vendor in latest containers/(common, storage, image)
5d8b53910 fix(deps): update module golang.org/x/term to v0.22.0
b08c9cf1c fix(deps): update module golang.org/x/sys to v0.22.0
2d172d50e fix(deps): update golang.org/x/exp digest to 7f521ea
aa6f75225 fix(deps): update github.com/containers/luksy digest to a8846e2
d6771f81a imagebuildah.StageExecutor.Copy(): reject new flags for now
a63fbba3f bump github.com/openshift/imagebuilder to v1.2.11
21fb5ea4f Rework parsing of --pull flags
feb17a95c fix(deps): update module github.com/containers/image/v5 to v5.31.1
d79a36fae imagebuildah.StageExecutor.prepare(): log the --platform flag
3a35d2fd6 CI VMs: bump
14f19e980 buildah copy: preserve owner info with --from= a container or image
bfa84dfcb conformance tests: enable testing CompatSetParent
bfaee577d containerImageRef.NewImageSource(): move the FROM comment to first
66957cc05 commit: set "parent" for docker format only when requested
a7224d167 Update godoc for Builder.EnsureContainerPathAs
75ae17c0f fix(deps): update module github.com/spf13/cobra to v1.8.1
a4cdb7879 fix(deps): update module github.com/containernetworking/cni to v1.2.0
6bef4b71c fix(deps): update module github.com/opencontainers/runc to v1.1.13
fe2fd8620 Change default for podman build to --pull missing
b9c43961a fix(deps): update module github.com/containers/common to v0.59.1
5afd52fd9 Clarify definition of --pull options
1480f147f buildah: fix a nil pointer reference on FreeBSD
8b0ecd787 Use /var/tmp for $TMPDIR for vfs conformance jobs
0569f3728 Cirrus: run `df` during job setup
5891afffe conformance: use quay.io/libpod/centos:7 instead of centos:8
56fb08092 Stop setting "parent" in docker format
ba0947a3d conformance: check if workdir trims path separator suffixes
9565585a6 push integration test: pass password to docker login via stdin
afe1a5dd5 Re-enable the "copy with chown" conformance test
f552bd57f healthcheck: Add support for `--start-interval`
420beb248 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
a4f32a142 fix(deps): update module github.com/containerd/containerd to v1.7.18
04e5423ae tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
a9e5a1496 Cross-build on Fedora
a42019d61 Drop copyStringSlice() and copyStringStringMap()
b8c3530cb fix(deps): update module golang.org/x/crypto to v0.24.0
cb302075b fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
e591844e9 Provide an uptime_netbsd.go
30c2e31d8 Spell unix as "!windows"
e47ffc831 Add netbsd to lists-of-OSes
159425c45 fix(deps): update golang.org/x/exp digest to fd00a4e
bf33b9291 [skip-ci] Packit: enable c10s downstream sync
7602e9e1d CI VMs: bump, to debian with cgroups v2
9521672fd Document when BlobDirectory is overridden
939a58b96 fix secret mounts for env vars when using chroot isolation
7ff83d505 Change to take a types.ImageReference arg
e6c7949aa imagebuildah: Support custom image reference lookup for cache push/pull
a33fda67a fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
f39d5fba2 Bump to v1.37.0-dev
671f29870 CI: Clarify Debian use for conformance tests
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping skopeo to version v1.16.0, which comprises the following commits:
88aad2e5 Bump Skopeo to v1.16.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-rc.2-44-g376e875f, which comprises the following commits:
cc2078cc Makefile: Add EXTRA_VERSION
f4cc3d83 Revert "allow overriding VERSION value in Makefile"
606257c6 Bump golangci-lint to v1.60, fix new warnings
adedeb99 ci/gha: add Go 1.23, drop 1.21
be539412 ensure we can download the specific version's go
a7c8d86f tests/int: fix "cpu burst" failure on new kernels
b437ed30 tests/int: check_{systemd,cgroup}_value: better log
2c398bb4 libct/int/seccomp_test: simplify exit code checks
171304c8 docs/systemd: fix a broken link
1410a698 rootfs: consolidate mountpoint creation logic
6fc2733a document build prerequsites for different platforms
15ec295b ci/gha: bump golangci-lint to v1.59
bb2db7b4 libct: drop error from (*Container).currentState return
c8395b6e Enable govet nilness, fix an issue
a5e660ca seccomp-notify.bats: add fcntl to the important syscall list
e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd"
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.3-209-ge8104a485, which comprises the following commits:
93abc2fdd Update hcsshim to v0.12.6
66817fccc script/setup/install-dev-tools: include patch version in versions
cd4e24ef7 script/setup/install-dev-tools: update protoc-gen-go-ttrpc to v1.2.5
9e2357f33 docs: add k8s 1.31 to support matrix to RELEASES
a3d84a172 docs: update for containerd v2
43568373f docs: Update BUILDING.md
ebc47359e use format string when using printf like commands
1027b314a ignore the static check when using anonymous struct in testing
f8e075336 remove windows check in linux_test file
20ee6de0b update golangci-lint to v1.60.1
fb8cd045b add go1.23.0
3f53e7a6e build(deps): bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.4
1127908ae build(deps): bump k8s.io/cri-api in the k8s group
6ed54e966 build(deps): bump golang.org/x/sys in the golang-x group
1de84c29f build(deps): bump google-github-actions/upload-cloud-storage
a100b055c update to go1.22.6
977604724 migrate to github.com/moby/sys/userns
8ef73c5dd Fix TestNewBinaryIOCleanup on Go 1.23 and Linux 5.4
7d4da0cb2 ctr: shim state query for old shims
d59e8a840 ctr: shim state for secondary tasks
32c2d1493 use ctx object from cliContext instead of a creating a new one
349d2b5c1 script/setup/install-runc: fix runc using incorrect version
267fac568 build(deps): bump the golang-x group with 3 updates
6814cc354 build(deps): bump google-github-actions/upload-cloud-storage
d036988ee docs/content-flow: fix code fence delimiter
83c26962c Remove extra span created in the instrumented service layer
c0cdcb34f Add spans to CRI runtime service and related client methods
0e4f2108b support to syncfs after pull by using diff plugin
551ac0600 Ensure /run/containerd is created with correct perms
4cfeb7b19 core/metadata: migrate sandboxes bucket into v1
a97b11898 Make `StopContainer` RPC idempotent
c6cea95d9 Make `StopPodSandbox` RPC idempotent
ad24ca960 build(deps): bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3
71b5b34de build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0
eddd90d7c remove deprecated pkg/userns
8437c567d pkg/userns: deprecate and migrate to github.com/moby/sys/user/userns
40a315b95 vendor: github.com/moby/sys/user v0.2.0
f9146c051 deprecation: update warnings for CRI config fields
0dcc51aed introspection: regenerate UUID if state is empty
abdb4fd77 build(deps): bump the k8s group across 1 directory with 4 updates
bc51d4b20 build(deps): bump the otel group across 1 directory with 8 updates
025d1161e build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3
81ef46584 KEP-3619: update cri-api version
ee2c0d9e7 KEP-3619: implement features.supplemental_groups_policy in RuntimeStatus
2d97134e5 build(deps): bump github.com/containerd/imgcrypt
f0aecaa2e Fix TestNewBinaryIOCleanup failing with gotip
b41bb6df7 Avoid potential reallocs by pre-sizing some slices
a779449c4 vendor: github.com/moby/sys/sequential v0.6.0
1bfa7c8fe vendor: github.com/moby/sys/symlink v0.3.0
95b429c01 vendor: github.com/moby/sys/signal v0.7.1
08d6c9323 vendor: github.com/moby/sys/mountinfo v0.7.2
fb674f8b4 Add resolver workaround for error: name resolver error: produced zero addresses
63b468817 Use grpc.NewClient instead of deprecated ones
a5be62993 Vendor GRPC 1.64
1a5c711c3 update documentation for content-flow
c8254dfae Include filename in error
9eda0b73a build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5
9315d59bf build(deps): bump tags.cncf.io/container-device-interface
7480de28a Remove static link to images outside of the repository
edd84f4a6 Add read permission limit on link workflow
274de35fe updated the domain in the link
807f32573 cri: optimize ListPodSandboxStats with parallelism
7c4de2821 Update cri-tools to v1.30.1
0772d0a37 Fix for `[cri] ttrpc: closed` during ListPodSandboxStats
300fd770a use typeurl funcs for marshalling anypb.Any
e1adfaeb9 script/setup/config-containerd: Use slow_chown
89a2cac37 scripts/critest.sh: Prepare for userns tests in runc
63b55e6df build(deps): bump the golang-x group with 2 updates
203cb303e script: bump up imgcrypt version to v1.2.0-rc1
efd441506 client: fix tasks with PID 0 cannot be forced to delete
eaa1afe63 Set stderr to empty string when using terminal on Windows.
fe5f85c7d Fix incorrect comment about ordering of parent layers
0f76e35fd added the openssf scorecard badge
98544a358 Add file name to device type check failure message
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.2.1-5-g679276e136, which comprises the following commits:
dbdff97042 Create volume path before state initialization
628446c88c Update Cirrus DEST_BRANCH
30f104cf36 Bump to v5.2.2-dev
d0582c9e1e Bump to v5.2.1
1cec5dc24e Update release notes for v5.2.1
8227722c3c [v5.2] Add zstd:chunked test fix
854e0c2eb4 [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
8f198092d7 libpod: reset state error on init
669767c3a9 libpod: do not save expected stop errors in ctr state
851ec1f81c libpod: fix broken saveContainerError()
6b45888959 Bump to v5.2.1-dev
b22d5c61ee Bump to v5.2.0
3f13c38048 Never skip checkout step in release workflow
c83c891fb2 Bump to v5.2.0-dev
028bee289e Bump to v5.2.0-rc3
23c6e0fb9f Update release notes for v5.2.0-rc3
784856b6ae Tweak versions in register_images.go
d6ae7427f7 fix network cleanup flake in play kube
c0f3ce462c WIP: Fixes for vendoring Buildah
a8f4c12003 Add --compat-volumes option to build and farm build
8bc493324a Bump Buildah, c/storage, c/image, c/common
4fbcece05f libpod: bind ports before network setup
3f14fcf7c3 pkg/api: do not leak config pointers into specgen
02a932372b build: Update gvisor-tap-vsock to 0.7.4
929c64ecf3 test/system: fix borken pasta interface name checks
c231ba8b23 test/system: fix bridge host.containers.internal test
b1ad869560 CI: system tests: instrument to allow failure analysis
5da126dc49 Use uploaded .zip for Windows action
5f4acdf227 RPM: podman-iptables.conf only on Fedora
11f56fa42c Bump to v5.2.0-dev
716874f44e Bump to v5.2.0-rc2
d72fefc418 Update release notes for v5.2.0-rc2
5209495865 test/e2e: fix ncat tests
b6b61a6a49 libpod: add hidden env to set sqlite timeout
0ecd6fa59f Add support for StopSignal in quadlet .container files
55b6e4c3e8 podman pod stats: fix race when ctr process exits
742d29e9d8 Update module github.com/vbauerster/mpb/v8 to v8.7.4
5e8884ab0d libpod: correctly capture healthcheck output
5a7199015a Bump bundled krunkit to 0.1.2
55749af0c7 podman stats: fix race when ctr process exists
7995e3de53 nc -p considered harmful
182224defb podman pod stats: fix pod rm race
e1caf80e81 podman ps: fix racy pod name query
85f4f89810 system connection remove: use Args function to validate
f630eebcfa pkg/machine/compression: skip decompress bar for empty file
7100ead475 nc -p considered harmful
46f4044893 podman system df: fix fix ErrNoSuchCtr/Volume race
1413a28409 podman auto-update: fix ErrNoSuchCtr race
02c094425f Fix name for builder in farm connection
2f7fd64e98 700-play.bats: use unique pod/container/image/volume names
380ed3a40d safename: consistent within same test, and, dashes
6d01ce417d 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
987d15a378 700-play.bats: eliminate $testYaml
48aea083c0 700-play.bats: refactor clumsy yamlfile creation
517c6e6f10 700-play.bats: move _write_test_yaml up near top
ed71000e6d chore(deps): update dependency setuptools to v71
3c52ef43f5 Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
5666100c2e Remove references and checks for --gpus
1ec3edd3f6 Do not crash on invalid filters
692d2a5b08 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
59696341b5 Bump to v5.2.0-dev
973e865422 Bump to v5.2.0-rc1
f3e945c86e Keep the volume-driver flag deprecated
b28027148b System tests: safe container/image/volume/etc names
d26f0ca90f Implement disable default mounts via command line
fa75599569 Remove the unused machine volume-driver
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When more than one kernel is supported in oe-core, we may have
situations where the options from an older (or newer) kernel
are not appropriate for the other version (i.e. options have
been added, removed or renamed).
To support this we check the preferred version of the kernel
and depend on a specific yocto-cfg recipe.
This is similar to how the virtualization .inc files are
chosen.
If this technique proves to be correct, we can factor the
common routines into a .inc and just set SRCREVs in the
individual .bb files.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
update our default xen version to 4.19
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping xen to version RELEASE-4.19.0, which comprises the following commits:
026c9fa297 Set 4.19 version
df9b8a649f README: make heading say 4.19
b2d2878ab2 Config.mk: Bump tags to 4.19.0 final
fe84f5392d CHANGELOG.md: Finalize changes in 4.19 release cycle
6ce22ee4ba SUPPORT.md: Define support lifetime
2d7b6170cc hotplug: Restore block-tap phy compatibility (again)
9d7f7e3444 x86/altcall: fix clang code-gen when using altcall in loop constructs
5eea879049 CHANGELOG.md: Set release date for 4.19
7ae9503645 Turn off debug by default
48acf0fd3e Config.mk: switch to named tags (for stable branch)
57338346f2 x86/IRQ: avoid double unlock in map_domain_pirq()
1ddc8c1bad CI: Add Ubuntu 22.04 (Jammy) and 24.04 (Noble) testing
6db222eb1f CI: Refresh Ubuntu Focal container as 20.04-x86_64
51e5081c6e CI: Refresh Ubuntu Bionic container as 18.04-x86_64
1ab414b915 CI: Refresh Ubuntu Xenial container as 16.04-x86_64
e85ff1f1af CI: Refresh OpenSUSE Leap container
a8bc31be01 CI: Refresh OpenSUSE Tumbleweed container
1e66e18806 CI: Refresh and upgrade the GCC-IBT container
248200bd5b CI: Swap to debian for riscv64 build and test
a507bd7d1f CI: Introduce debian:11/12-riscv64 containers
d46e4264c3 CI: Refresh bullseye-ppc64le as debian:11-ppc64le
155c9d7f1b CI: Use debian:12-ppc64le for smoke testing
a2a0ee0eaf CI: Introduce a debian:12-ppc64le container
5e1773dc86 CI: Mark Archlinux/x86 as allowing failures
4b716647f7 CI: Drop Ubuntu Trusty testing
2617d2f141 CI: Drop Debian Stretch testing
aabccd1018 CI: Drop Debian Jessie dockerfiles
83754331a7 CI: Remove useless/misleading randconfig jobs
3420cc1a50 CI: Fix CONTAINER_UID0=1 scripts/containerize
5d3e2140bb automation: Use a different ImageBuilder repository URL
d49ba6bf8f build: Drop xorg-x11 as a build dependency
47f465d485 build: Drop libiconv as a build dependecy
cb3a371469 build: Drop openssl as a build dependency
37810b52d0 tools/libxs: Fix fcntl() invocation in set_cloexec()
8e7c08a336 stubdom: Remove more leftovers of caml-stubdom
c4ebeb79d1 CI: Refresh the Coverity Github Action configuration
64cee18837 build: Fix the version of python checked for by ./configure
7cc95f4166 build: Regenerate ./configure with Autoconf 2.71
0d2b87b5ad x86/physdev: Return pirq that irq was already mapped to
c2a66d0b58 CI: Rework the CentOS7 container
7878756565 CI: Adjust the usage of inline files
aa2b6e4d84 CI: Formalise the use of heredocs
56b77d7db0 build/mkheader: Fix Syntax/DeprecationWarnings
31618bf80e build/mkheader: Remove C-isms from the code
5d8c784783 tools/xs-clients: Fix `make clean` rule
7e3701b6ce xen/vmap: Document the vmap header
a771e02594 xen/riscv: use .insn with operands to support the older gas
63c66274d9 xen: Fix XEN_EXTRAVERSION after 4.19-rc1
fb76e08a8f cmdline: "extra_guest_irqs" is inapplicable to PVH
1f56accba3 amend 'cmdline: document and enforce "extra_guest_irqs" upper bounds'
08daa72cdc xen: avoid UB in guest handle field accessors
d2fe9ab304 x86/entry: don't clear DF when raising #UD for lack of syscall handler
17f6d398f7 cmdline: document and enforce "extra_guest_irqs" upper bounds
a2ff677852 tools/libxs: Fix CLOEXEC handling in xs_fileno()
1957dd6aff tools/libxs: Fix CLOEXEC handling in get_socket()
bf7c146470 tools/libxs: Fix CLOEXEC handling in get_dev()
4c3a618b0a tools/dombuilder: Correct the length calculation in xc_dom_alloc_segment()
9ec74bdb25 xen/common: fix build issue for common/trace.c
daa90dfea9 pirq_cleanup_check() leaks
4a73eb4c20 Update Xen version to 4.19-rc
7584e39986 Config.mk pin QEMU_UPSTREAM_REVISION (prep for Xen 4.19 RC1)
08f9b1dd9c MAINTAINERS: Step down as maintainer and committer
6d41f5b9e1 automation/eclair: add deviations agreed in MISRA meetings
402e473249 x86/traps: address violations of MISRA C Rule 20.7
bfea273b7b automation/eclair_analysis: clean ECLAIR configuration scripts
8f5581d7e1 x86/irq: address violations of MISRA C Rule 20.7
c7e195fac0 automation/eclair_analysis: address violations of MISRA C Rule 20.7
f39642c308 xen/guest_access: address violations of MISRA rule 20.7
4929fea7bd xen/self-tests: address violations of MISRA rule 20.7
0dca0f2b9a automation/eclair: address violations of MISRA C Rule 20.7
ecadd22a3d CHANGELOG: Add entries related to tracing
dde20e47af tools/xenalyze: Remove argp_program_bug_address
188e5f1a80 CHANGELOG.md: Fix indentation of "Removed" section
4712e3b376 Config.mk: update MiniOS commit
853f707cd9 automation/eclair_analysis: deviate and|or|xor|not for MISRA C Rule 21.2
0ac3b175e7 automation/eclair: configure Rule 13.6 and custom service B.UNEVALEFF
11ea49a3fd gnttab: fix compat query-size handling
735865f884 xen: re-add type checking to {,__}copy_from_guest_offset()
93db2f64f3 MAINTAINERS: Update my email address again
b14dae96c0 x86/pagewalk: Address MISRA R8.3 violation in guest_walk_tables()
6e07f41b27 common/unlzo: address violation of MISRA C Rule 7.3
c2f4ea4dc9 automation/eclair: add more guidelines to the monitored set
5add709cc6 automation/eclair: add deviations of MISRA C Rule 5.5
912412f97a automation/eclair: add deviation for MISRA C Rule 17.7
c56f1ef577 xen/arm: static-shmem: request host address to be specified for 1:1 domains
908407bf2b xen/riscv: Drop legacy __ro_after_init definition
8c3bb4d8ce xen/gnttab: Perform compat/native gnttab_query_size check
ebed411e7a xen/xlat: Sort structs per file
90c1520d4e xen/xlat: Sort out whitespace
6a17e11993 x86/shadow: Don't leave trace record field uninitialized
8765783434 x86/shadow: Rework trace_shadow_emulate_other() as sh_trace_gfn_va()
578066d82b x86/shadow: Introduce sh_trace_gl1e_va()
2e9f8a734e x86/shadow: Rework trace_shadow_gen() into sh_trace_va()
ba52b3b624 tools/xl: Open xldevd.log with O_CLOEXEC
9e7c26ad85 libelf: avoid UB in elf_xen_feature_{get,set}()
c5746b021e x86/ioapic: Fix signed shifts in io_apic.c
62071a1c16 livepatch: use appropriate type for buffer offset variables
e2bb28d621 x86/irq: forward pending interrupts to new destination in fixup_irqs()
74970165ba tools/libs/light: Fix nic->vlan memory allocation
f16ac12bd4 hotplug: Restore block-tap phy compatibility
43d5c5d5f7 xen: avoid UB in guest handle arithmetic
267122a24c x86/defns: Clean up X86_{XCR0,XSS}_* constants
71cacfb035 x86/cpuid: Fix handling of XSAVE dynamic leaves
fdb7e77fea x86/cpu-policy: Simplify recalculate_xstate()
df09dfb94d x86/xstate: Rework xstate_ctxt_size() as xstate_uncompressed_size()
a09022a09e x86/boot: Collect the Raw CPU Policy earlier on boot
d31a111940 x86/xstate: Cross-check dynamic XSTATE sizes at boot
9e6dbbe8bf x86/xstate: Fix initialisation of XSS cache
aba98c8d67 xen/arch: Centralise __read_mostly and __ro_after_init
82f4809447 xen/irq: Address MISRA Rule 8.3 violation
efa6e9f15b Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor"
443c488a0b Revert "docs/features/dom0less: Update the late XenStore init protocol"
988f1c7e1f xen/arm: static-shmem: fix "gbase/pbase used uninitialized" build failure
53c5c99e87 docs/features/dom0less: Update the late XenStore init protocol
6f9d90ea94 xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor
cb1ddafdc5 xen/arm/static-shmem: Static-shmem should be direct-mapped for direct-mapped domains
bd59af9970 xen/ubsan: Fix UB in type_descriptor declaration
369558924a x86/irq: handle moving interrupts in _assign_irq_vector()
817d1cd627 x86/irq: deal with old_cpu_mask for interrupts in movement in fixup_irqs()
fa4d026737 x86/Intel: unlock CPUID earlier for the BSP
77b1ed1d02 automation/eclair_analysis: add more clean MISRA guidelines
0f0235e9e9 automation/eclair_analysis: address remaining violations of MISRA C Rule 20.12
8b4243a9b5 xen/docs: Describe static shared memory when host address is not provided
3deac416a3 xen/arm: Implement the logic for static shared memory from Xen heap
a21bfc9126 xen/arm: Rework heap page allocation outside allocate_bank_memory
1544d355b5 xen/arm: Parse xen,shared-mem when host phys address is not provided
3e2121ce47 xen/p2m: put reference for level 2 superpage
79a43c8838 xen/arm: Wrap shared memory mapping code in one function
e90f8d562d xen/arm: Lookup bootinfo shm bank during the mapping
4fdd8d7556 x86/EPT: drop questionable mfn_valid() from epte_get_entry_emt()
777c71d313 x86/EPT: avoid marking non-present entries for re-configuring
5540b94e81 x86/EPT: correct special page checking in epte_get_entry_emt()
b490f470f5 xen/arm: ffa: support notification
452551c723 xen/arm: add and call tee_free_domain_ctx()
dd348eb005 xen/arm: add and call init_tee_secondary()
67ef3db45a xen/arm: allow dynamically assigned SGI handlers
282c33cec3 xen/arm: ffa: simplify ffa_handle_mem_share()
4d2b1b5d69 xen/arm: ffa: use ACCESS_ONCE()
66e6e47511 xen/arm: ffa: refactor ffa_handle_call()
401448f2d1 x86/physdev: replace physdev_{,un}map_pirq() checking against DOMID_SELF
c7564d7366 x86/irq: limit interrupt movement done by fixup_irqs()
0e8cde5884 x86/irq: describe how the interrupt CPU movement works
171c52fba5 x86/smp: do not use shorthand IPI destinations in CPU hot{,un}plug contexts
b0e5352c60 MAINTAINERS: alter EFI section
d05d97c090 MAINTAINERS: add me as scheduler maintainer
5ea7f2c9d7 CI: Update FreeBSD to 13.3
43de96a70f automation: add a test for HVM domU on PVH dom0
ea1cb444c2 x86/pvh: declare PVH dom0 supported with caveats
0a5b2ca32c x86/domain: deviate violation of MISRA C Rule 20.12
e63209d3ba x86/irq: remove offline CPUs from old CPU mask when adjusting move_cleanup_count
c2d5e63c73 xen: fix MISRA regressions on rule 20.9 and 20.12
5f7606c048 xen/bitops: Rearrange the top of xen/bitops.h
04e70af5f2 xen/bitops: Clean up ffs64()/fls64() definitions
54b10ef6c8 xen/bitops: Implement fls()/flsl() in common logic
5ed26fc076 xen/bitops: Implement ffsl() in common logic
989e5f08d3 x86/bitops: Improve arch_ffs() in the general case
ef1dd8dff4 xen/bitops: Implement ffs() in common logic
95ddb7e9b0 xen/bitops: Implement generic_ffsl()/generic_flsl() in lib/
ea59e7d780 xen/bitops: Cleanup and new infrastructure ahead of rearrangements
1408cf7a28 xen/bitops: Delete find_first_set_bit()
03147e6837 arch/irq: Centralise no_irq_type
8aeda4a241 arch/irq: Make irq_ack_none() mandatory
16884ac6c8 CI: Improve serial handling in qemu-smoke-ppc64le.sh
2ff6d17bc3 CI: Use a debug build of Xen for the Xilinx HW tests
1250c73c1a xen/riscv: Update Kconfig in preparation for a full Xen build
db04be9e7d x86/hvm: allow XENMEM_machine_memory_map
9a905d7dc6 xen/bitops: Replace find_first_set_bit() with ffs()/ffsl() - 1
1773a74469 xen/page_alloc: Coerce min(flsl(), foo) expressions to being unsigned
e807b137f7 ppc/boot: Run constructors on boot
6ef4fa1e7f tools: (Actually) drop libsystemd as a dependency
12f9599a3b Partial revert of "x86/MCE: optional build of AMD/Intel MCE code"
845a60b63b xen/x86: remove foreign mappings from the p2m on teardown
0291089f6e xen: enable altp2m at create domain domctl
8ef1e96a04 xen/x86: account number of foreign mappings in the p2m
0840bc5ea1 xen: Introduce CONFIG_SELF_TESTS
2bc462f645 x86: address violations of MISRA C Rule 8.4
19b6e9f914 x86/MCE: optional build of AMD/Intel MCE code
5effd810c6 x86/MCE: add default switch case in init_nonfatal_mce_checker()
498a4ded74 x86/intel: move vmce_has_lmce() routine to header
d27c2835e0 x86/svm: Rework VMCB_ACCESSORS() to use a plain type name
58b3437bae xen/x86: Address two misc MISRA 17.7 violations
2d082710f7 xen/x86: Drop useless non-Kconfig CONFIG_* variables
56d3b24979 xen/lzo: Implement COPY{4,8} using memcpy()
2d93f78bfe x86/traps: address violation of MISRA C Rule 8.4
8b977fe572 CHANGELOG: Mention libxl blktap/tapback support
96af090e33 automation/eclair_analysis: avoid an ECLAIR warning about escaping
841f437a8b docs/misra: exclude gdbsx from MISRA compliance
1eba1fe18d automation/eclair_analysis: add already clean rules to the analysis
4bc8dc01a3 automation/eclair_analysis: set MISRA C Rule 10.2 as clean
ac572152e5 docs: Add device tree overlay documentation
2c4fbadf73 tools: Introduce the "xl dt-overlay attach" command
4c733873b5 xen/arm: Add XEN_DOMCTL_dt_overlay and device attachment to domains
1c77496bc8 xen/arm/gic: Allow adding interrupt to running VMs
6f588194d9 tools/arm: Introduce the "nr_spis" xl config entry
1d2b4f3049 xen/arm, doc: Add a DT property to specify IOMMU for Dom0less domUs
c8cbc5eb1c tools/xl: Correct the help information and exit code of the dt-overlay command
2172a01c4c tools/xenalyze: Ignore HVM_EMUL events harder
320e644616 x86/hvm/trace: Use a different trace type for AMD processors
701190abb3 xen/arm: Set correct per-cpu cpu_core_mask
2a40b106e9 tools/xentrace: Remove xentrace_format
ae26101f6b tools: Drop libsystemd as a dependency
caf8644826 tools/{c,o}xenstored: Don't link against libsystemd
78510f3a15 tools: Import stand-alone sd_notify() implementation from systemd
219cdff3fb LICENSES: Add MIT-0 (MIT No Attribution)
9e58da32cc xen/arm: mem_access: Conditionally compile mem_access.c
d6a7fd8303 vpci: add initial support for virtual PCI bus topology
9c831e429c vpci/header: emulate PCI_COMMAND register for guests
7db7bd0f31 arm/vpci: honor access size when returning an error
2c15fa332e x86: detect PIT aliasing on ports other than 0x4[0-3]
249affc129 x86/PIT: supply and use #define-s
e6ed98863b xen/riscv: add required things to current.h
3cd46d4ec8 xen/riscv: introduce atomic.h
51dabd6312 xen/riscv: introduce cmpxchg.h
9f482c6a7e xen/x86: Simplify header dependencies in x86/hvm
212cb5effa iommu/x86: print RMRR/IVMD ranges using full addresses
3a3111d018 xen/livepatch: make .livepatch.funcs read-only for in-tree tests
ced21fbb28 x86_64/cpu_idle: address violations of MISRA C Rule 20.7
1b0b050bd6 x86_64/uaccess: address violations of MISRA C Rule 20.7
670b7ec65d x86/hvm: address violations of MISRA C Rule 20.7
1b9311da4b x86/vpmu: address violations of MISRA C Rule 20.7
bba4eb88fd xen/common/dt-overlay: Fix lock issue when add/remove the device
24dbf5bd03 x86/p2m: Add braces for better code clarity
ed1ac3e968 xen/riscv: introduce vm_event_*() functions
7e036f7e0c xen/riscv: introduce monitor.h
44b69e9c17 xen/x86: pretty print interrupt CPU affinity masks
9c5444b01a xen/trace: Drop old trace API
aa60520cd3 xen/trace: Removal final {__,}trace_var() users in favour of the new API
26da08059e xen: Switch to new TRACE() API
d64693df1a xen/sched: Clean up trace handling
df50666449 xen/rt: Clean up trace handling
ab8bc19850 xen/credit2: Clean up trace handling
e978b462ec xen/trace: Introduce new API
26b122e3bf tools/xen-cpuid: Drop old names
bbb5c171d7 tools/xen-cpuid: Use automatically generated feature names
e96fefdb06 tools/xen-cpuid: Rename decodes[] to leaf_info[]
f79189cb29 x86/gen-cpuid: Minor cleanup
54aa34fc89 tools/golang: Add missing golang bindings for vlan
594b22ca5b x86/msi: prevent watchdog triggering when dumping MSI state
21611c6870 include/ctype.h: fix MISRA R10.2 violation
53dc37829c xen/arm: Add DT reserve map regions to bootinfo.reserved_mem
d946787a27 xen/arm64: lib: Use the generic xen/linkage.h macros
fe1b97d321 xen/arm64: cache: Use the generic xen/linkage.h macros
c9906bd79e xen/arm64: mmu/head: Add missing code symbol annotations
8151fe503c xen/arm64: bpi: Add missing code symbol annotations
fdba3ff11f xen/arm64: debug: Add missing code symbol annotations
fba250ae60 xen/arm64: head: Add missing code symbol annotations
78ce1dc625 xen/arm64: sve: Add missing code symbol annotations
8d92a26a41 xen/arm64: smc: Add missing code symbol annotations
1125f3529c xen/arm64: entry: Add missing code symbol annotations
977d98e67c x86/ucode: Further fixes to identify "ucode already up to date"
ae7584f636 x86/p2m: move altp2m-related code to separate file
f1fa994d89 x86/MCE: guard {intel/amd}_mcheck_init() calls
71b5eccbdd x86/MCE: guard access to Intel/AMD-specific MCA MSRs
a3ec23a940 x86/vpmu: separate amd/intel vPMU code
6628bacc81 xen/bitops: put __ffs() into linux compatible header
d0c6114058 x86: detect PIC aliasing on ports other than 0x[2A][01]
c09960a1a2 x86: allow to suppress port-alias probing
762a848223 automation/eclair_analysis: deviate macro count_args_ for MISRA Rule 20.7
7fe9679db9 automation/eclair_analysis: fully deviate MISRA C Rules 21.9 and 21.10
abd00b037d x86/mtrr: avoid system wide rendezvous when setting AP MTRRs
0cc01c603f tools/xl: add vlan keyword to vif option
3bc14e4fa4 tools/libs/light: Add vlan field to libxl_device_nic
e27fc7d15e tools/xentop: Fix cpu% sort order
9b7d793889 tools/hvmloader: Further simplify SMP setup
8a78d89881 x86/cpufreq: Rename cpuid variable/parameters to cpu
7270fdc7a0 x86: respect mapcache_domain_init() failing
d104a07524 xen/sched: set all sched_resource data inside locked region for new cpu
319a5125ca xen/console: fix Rule 10.2 violation
46aa3031ae docs/misra: add R21.6 R21.9 R21.10 R21.14 R21.15 R21.16
9110072b76 x86/io: Don't cast away constness in read{b..q}()
2d8d7481ca Revert "evtchn: refuse EVTCHNOP_status for Xen-bound event channels"
90a1bc9e82 xen: Use -Wuninitialized and -Winit-self
0b01395c44 xen: Use -Wflex-array-member-not-at-end when available
d31d0665f1 automation/eclair_analysis: tag MISRA C Rule 1.1 as clean
531d3bea5e libxl: Fix handling XenStore errors in device creation
b2cd07a044 x86/hvm: Allow access to registers on the same page as MSI-X table
e9607d4061 x86/msi: Extend per-domain/device warning mechanism
5cc7347b04 libxl: fix population of the online vCPU bitmap for PVH
996576b965 xen: allow up to 16383 cpus
b0082b9083 automation/eclair: hide reports coming from adopted code in scheduled analysis
f4cd14e502 automation/eclair_analysis: amend configuration for some MISRA rules
93c27d54dd xen/arm: Fix MISRA regression on R1.1, flexible array member not at the end
1672df9ebd xen/kernel.h: Import __struct_group from Linux
53959cb830 x86/boot: Refactor pvh_load_kernel() to have an initrd_len local
49c810e867 x86/boot: Explain how moving mod[0] works
fcefb2a247 x86/IOMMU: address violations of MISRA C:2012 Rule 14.4
3d1033c911 automation/eclair: add deviation of MISRA C:2012 Rule 14.4
14424d90e1 xen/pci: address violations of MISRA C Rule 20.7
8e22c78e17 xen/unaligned: address violation of MISRA C Rule 20.7
1dd6b50dc4 x86/hvm: Defer the size calculation in hvm_save_cpu_xsave_states()
752ec9a9b1 tools/hvmloader: Wake APs with hypercalls rather than INIT+SIPI+SIPI
754a29cacf tools/hvmloader: Move various helpers to being static inlines
1c6112b8f5 xen/gunzip: Move crc state into gunzip_state
7a4483358f xen/gunzip: Move bitbuffer into gunzip_state
d386a383dd xen/gunzip: Move output count into gunzip_state
fd273a5690 xen/gunzip: Move input buffer handling into gunzip_state
461eacc76b xen/gunzip: Move window position into gunzip_state
02e32883f3 xen/gunzip: Introduce struct gunzip_state and refactor window
473156eec6 xen/gunzip: don't leak memory on error paths
648db37a15 x86/ucode: Distinguish "ucode already up to date"
3c228e24b2 automation/eclair_analysis: unblock pipelines from certain repositories
0c79b7bc9b automation/eclair_analysis: tag MISRA C Rule 8.2 as clean.
e8e8afee99 svm: Fix MISRA 8.2 violation
a2330b51df x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake
f4f2f3402b tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC
ebab808eb1 x86/platform: correct #undef in compat checking
d7032b4ca2 AMD/IOMMU: add helper to check whether ATS is to be used for a device
b5996ab284 VT-d: parse ACPI "SoC Integrated Address Translation Cache Reporting Structure"s
426dbf404e VT-d: tidy error handling of RMRR parsing
692f6199bd automation/eclair: add deviation for Rule 16.4
50a4f7c177 docs/misra: add Terms & Definitions section to rules.rst
6654248f22 ppc/riscv: fix arch_acquire_resource_check()
b801ccfe7e drivers/char: address violation of MISRA C Rule 20.7
04e31583ba VT-d: correct ATS checking for root complex integrated devices
f95cd010cb xen/Kconfig: Drop the final remnants of ---help---
2d4ba20559 tools/tests: let test-xenstore exit with non-0 status in case of error
642005e310 tools/tests: don't let test-xenstore write nodes exceeding default size
feb9158a62 automation/eclair: make explicit there are no adopted files by default
7556f46a9b automation: do not allow failure for triggered analyses
c1aa6fb5f6 automation/eclair: tag Rule 7.2 as clean and temporarily remove Rules 1.1 and 8.2
9e30bd8f4a x86/cpu-policy: Annotate the accumulated features
b819bd65f4 revert "x86/mm: re-implement get_page_light() using an atomic increment"
bf0059282d xen/riscv: improve check-extension() macro
08e79bba73 xen/x86: Fix Syntax warning in gen-cpuid.py
647f7e50eb xen/xsm: Wire up get_dom0_console
abc68e78a3 x86/MCE: guard call to Intel-specific intel_get_extended_msrs()
64b21662b1 x86/msi: passthrough all MSI-X vector ctrl writes to device model
be5b08dd6e xen-livepatch: fix --force option comparison
13893a58e2 xen/spinlock: use correct pointer
a505890d81 x86/entry: shrink insn size for some of our EFLAGS manipulation
fd4ff921f7 gzip: clean up comments and fix code alignment
232ee07c23 arm/vpci: make prefetchable mem 64 bit
a0e29b3163 CI: Drop glibc-i386 from the build containers
4edbbcd0c0 automation/eclair: reorganize pipelines
23cd1207e7 VMX: no open-coding in vmx_get_cpl()
7ea3a3e44f MAINTAINERS: Update my email address
656ae8f109 x86/spec: adjust logic that elides lfence
049ab0b2c9 x86/spec: fix reporting of BHB clearing usage from guest entry points
6d5111b10e tools/ocaml: Fix warnings in config.ml
524eee7ce0 x86/hap: Refactor boolean field assignments
bd5213384b x86/shadow: correct shadow_vcpu_init()'s comment
9a73b4e210 x86/paging: vCPU host mode is always set
8c01d0e336 x86/msr: add suffix 'U' to MSR_AMD_CSTATE_CFG macro
ea3272f845 x86/pci: add suffix 'U' to PCI_CONF_ADDRESS macro
62a72092a5 livepatch: introduce --force option
fb2716a191 xen-livepatch: fix parameter name parsing
4a75f2ffc0 x86/mm: address violations of MISRA C Rule 20.7
445f66fe00 x86/debugreg: address violation of MISRA C Rule 20.7
c717d52a5d x86/vhpet: address violations of MISRA C Rule 20.7
4f900035a4 x86/acpi: address violations of MISRA Rule 20.7
0440fcad2a x86/pci: address violation of MISRA C Rule 20.7
489d13da93 xen/spinlock: address violations of MISRA C Rule 20.7
0d02b75d7c xen/page-defs: address violation of MISRA C Rule 20.7
8189230d80 libelf: address violations of MISRA C Rule 20.7
d7c4d59b51 libxl: Support blktap with HVM device model
76a484193d hotplug: Update block-tap
31d6b5b4a7 automation: Add arm64 test for running Xen with GICv3
db49973411 automation: Add arm{64,32} earlyprintk jobs
c05b97fc7a automation: Drop some of the non-debug variants of the same Arm jobs
7846f7699f xen/arm: List static shared memory regions as /memory nodes
51a2b3f109 xen/arm: fix duplicate /reserved-memory node in Dom0
a0fee882c1 xen/arm: remove shm holes from extended regions
2b557af192 xen/arm: Reduce struct membank size on static shared memory
e5816ad4e8 xen/arm: Introduce helper for static memory pages
9f657d8832 xen/arm: Avoid code duplication in check_reserved_regions_overlap
b3e66aa1c2 xen/arm: Avoid code duplication in find_unallocated_memory
e13499b3c4 xen/arm: Conditional compilation of kernel_info.shm_mem member
2209c1e35b xen/arm: Introduce a generic way to access memory bank structures
8d5ff14477 xen/arm: Pass struct kernel_info parameter to make_{resv,shm}_memory_node
6d14a742f8 xen/arm: avoid repetitive checking in process_shm_node
ab327c8e8b xen/arm: remove stale addr_cells/size_cells in assign_shared_memory
6c04a0bf2c tools/golang: Run `go vet` as part of the build process
9c08a88ad0 golang/xenlight: Ensure comments aren't interpreted as docstrings
27c176d298 tools/golang: When returning pointers, actually allocate structrues
0d19d3aab0 svm/nestedsvm: Introduce nested capabilities bit
410ef33439 x86/monitor: allow fast-singlestepping without enabling singlestep monitor
77e25f0e30 x86/MTRR: correct inadvertently inverted WC check
f82c43a384 xen: introduce header file with section related symbols
70d46b51e2 docs/man: Add xenwatchdog manual page
9c872b5766 tools/misc: Add xenwatchdogd.c copyright notice
e906bfae48 tools/misc: xenwatchdogd enhancements
f0fa75c9ea tools/misc: xenwatchdogd: add parse_secs()
43a0706986 x86/rtc: Avoid UIP flag being set for longer than expected
cccb7878f3 x86/pvh: zero VGA information
c3b40c95da x86/video: add boot_video_info offset generation to asm-offsets
93d6e6efa8 automation/eclair_analysis: substitute deprecated service STD.emptrecd
bc5827fad1 xen/riscv: check whether the assembler has Zbb extension support
1fc166d6cd xen/domain: deviate MISRA C Rule 16.2 violation
480179bc26 x86/PVH: Use unsigned int for dom0 e820 index
09cb855f33 x86/svm: Add flushbyasid in the supported features
5495ed0cd2 eclair_analysis: deviate x86 emulator for Rule 16.2
1d2d283818 xen/riscv: add minimal stuff to page.h to build full Xen
58798e3f1f xen/riscv: introduce io.h
5b33845adf xen/ppc: mm-radix: Replace debug printing code with printk
78d980071a x86/MCE: move intel mcheck init code to separate file
8763eb782b xen/gzip: Drop huffman code table tracking
052cf1dcdf xen/gzip: Remove custom memory allocator
492fe0778b xen/gzip: Drop unused define checks
489a46c177 x86/emul: Simplify segment override prefix decoding
4cd66fb56d xen/efi: Rewrite DOS/PE magic checking without memcmp()
02fbb2d591 docs/misra: mark the gzip folder as adopted code
2a9a19be13 Revert "public: s/int/int32_t"
83e081b29e docs: arm: Update where Xen should be loaded in memory
afab29d088 public: s/int/int32_t
ad363fb17d docs/misra: add Rule 16.4
487838f13a docs/misra/rules.rst: add rule 5.5
c0f890cd9d docs/hypercall-abi: State that the hypercall page is optional
cfb922bb7d xen/gzip: Colocate gunzip code files
af4cd0a6a6 altcall: fix __alt_call_maybe_initdata so it's safe for livepatch
09abf1b61b libxl: devd: Spawn QEMU for 9pfs
3c7482b73c libxl: Use vkb=[] for HVMs
2b31a1f055 xen/include: move definition of ASM_INT() to xen/linkage.h
6cb501e3e6 MAINTAINERS: Update livepatch maintainers
86c008aa5d tools/misc: xenwatchdogd: add static qualifier
5d09f8cbdc tools/misc: rework xenwatchdogd signal handling
0668d35594 tools/misc: xenwatchdogd: use EXIT_* constants
c304bdf1e7 xen/acpi: Allow xen/acpi.h to be included on non-ACPI archs
2145512e21 xen/xsm: address violation of MISRA C Rule 16.2
bbbbd024e8 x86/hvm: address violations of MISRA C Rule 16.2
eeab8c4619 xen/domctl: address violations of MISRA C Rule 16.2
f509d39d5b x86/efi: tidy switch statement and address MISRA violation
24f204748e x86/irq: tidy switch statement and address MISRA violation
3b51a812e0 x86/cpuid: address violation of MISRA C Rule 16.2
6af626c1da x86/vlapic: tidy switch statement and address MISRA violation
478002370c x86/emul: Adjust X86EMUL_OPC_EXT_MASK to placate MISRA
761358b9eb xen/spinlock: Adjust LOCK_DEBUG_INITVAL to placate MISRA
e5b93b70d5 xen/vPCI: Remove shadowed variable
52bde26c1c xen/nospec: Remove unreachable code
d0a718a45f x86/hvm: Fix Misra Rule 19.1 regression
d37c184236 xen/virtual-region: Drop setup_virtual_regions()
038ba305fd xen/virtual-region: Link the list build time
3434518d05 xen/virtual-region: Rework how bugframe linkage works
337f11ea73 xen/link: Introduce a common BUGFRAMES definition
0e7ea8ca5f x86/Kconfig: Introduce CONFIG_{AMD,INTEL} and conditionalise ucode
2eea952b70 x86/ucode: Move vendor specifics back out of early_microcode_init()
f48299cad5 docs/misra: document the expected sizes of integer types
dfc9455b80 MAINTAINERS: Become a reviewer of iMX8Q{M,XP} related patches
2f85a6d9f5 xen/drivers: imx-lpuart: Replace iMX8QM compatible with iMX8QXP
71d4356544 xen/arm: Add imx8q{m,x} platform glue
a9fa825008 x86/entry: Fix build with older toolchains
d5887c0dec x86/spec-ctrl: Support the "long" BHB loop sequence
689ad48ce9 x86/spec-ctrl: Wire up the Native-BHI software sequences
954c983abc x86/spec-ctrl: Software BHB-clearing sequences
62a1106415 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI
c94e210592 x86/tsx: Expose RTM_ALWAYS_ABORT to guests
0b66d7ce3c x86: Drop INDIRECT_JMP
8e186f98ce x86: Use indirect calls in reset-stack infrastructure
45dac88e78 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields
97c5b8b657 x86/vmx: Add support for virtualize SPEC_CTRL
40dea83b75 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_*
2378d16a93 x86/spec-ctrl: Simplify DO_COND_IBPB
9607aeb660 x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR}
22390697bf x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV
94896de1a9 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_*
c62673c433 x86/spec-ctrl: Rename spec_ctrl_flags to scf
489d93cd0f x86/spec-ctrl: Fix BTC/SRSO mitigations
4b3da946ad x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests
4be1fef1e6 x86/alternatives: fix .init section reference in _apply_alternatives()
9926e692c4 hypercall_xlat_continuation: Replace BUG_ON with domain_crash
6a98383b08 x86/HVM: clear upper halves of GPRs upon entry from 32-bit code
672b26b66e drivers: char: Enable OMAP UART driver for TI K3 devices
c079823df6 xen/compiler: address violation of MISRA C Rule 20.9
dfc9fab003 x86/PVH: Support relocatable dom0 kernels
4d3b8669d8 libelf: Store maximum PHDR p_align
77b219f915 xen/rwlock: raise the number of possible cpus
c286bb93d2 xen/spinlock: support higher number of cpus
0b09531d21 xen/spinlock: let all is_locked and trylock variants return bool
bfbec024b8 xen/spinlock: split recursive spinlocks from normal ones
31be78285c xen/spinlock: add missing rspin_is_locked() and rspin_barrier()
ee1e133125 xen/spinlock: add another function level
3696a9f27d xen/spinlock: add explicit non-recursive locking functions
402c2d3e66 MISRA C Rule 17.1 states: "The features of `<stdarg.h>' shall not be used"
ea33a6e1e3 MISRA C:2012 Rule 17.1 states: The features of `<stdarg.h>' shall not be used
80d28865e1 automation/eclair: add deviations for Rule 20.7
6bdb67d19e arm/public: address violations of MISRA C Rule 20.7
e9b0f8b690 x86: Address MISRA Rule 13.6
b33f191e3c x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch
270588b9b2 char: lpuart: Drop useless variables from UART structure
4932163b35 drivers: char: Drop useless suspend/resume stubs in Arm drivers
6eeb3e86bd vsprintf: address violations of MISRA C:2012 Rule 16.3
226bdb155b xen/sched: address violations of MISRA C:2012 Rule 16.3
21e0c8fc0e tools: Move MB/GB() to common-macros.h
4c41749852 tools/init-xenstore-domain: Replace variable MB() usage
1e6cd4155d xen/riscv: introduce extension support check by compiler
7b02b505bb automation: introduce fixed randconfig for RISC-V
6117179dd9 docs/misra: add 13.6 to rules.rst
538ab07bad xen/arm: ffa: support FFA_FEATURES
be75f686eb xen/arm: ffa: separate rxtx buffer routines
bded3e6467 xen/arm: ffa: separate partition info get routines
8836867200 xen/arm: ffa: separate memory sharing routines
bb584ec036 xen/arm: ffa: move common things to ffa_private.h
b21cbaf6ba xen/arm: ffa: rename functions to use ffa_ prefix
ac682fbac1 xen/vm-event: address a violation of MISRA C:2012 Rule 16.3
cde0c58714 xen/evtchn: address a violation of MISRA C:2012 Rule 16.3
163ea7d9a8 console: address a violation of MISRA C:2012 Rule 16.3
2c205ce5c0 xen/domctl: address a violation of MISRA C:2012 Rule 16.3
795c4e367b x86/amd: address violations of MISRA C Rule 20.7
da88f434bc xen/mm: address violations of MISRA C Rule 20.7
5811fb4816 x86/hvm: address violations of MISRA C Rule 20.7
a9b2a72926 x86/vPMU: address violations of MISRA C Rule 20.7
dd5101a616 drivers/char: mark extra reserved device memory in memory map
7a09966e7b x86/spec-ctrl: Move __read_mostly data into __ro_after_init
3c9e76cd87 x86/mm: Refine address alignment checks in modify_xen_mappings_lite()
8f85af65af tools/oxenstored: Re-format
0cd50753eb nestedsvm: Disable TscRateMSR
4f8b0e94d7 x86: Move SVM features exposed to guest into hvm_max_cpu_policy
e3883336bb xen/efi: efibind: address violations of MISRA C Rule 20.7
853c71dfbf xen/elfnote: Specify ELF Notes are x86-specific
7d8c9b4e8d libelf: Expand ELF note printing
8802230bfa Revert "xen/x86: bzImage parse kernel_alignment"
f6a4139948 x86/public: address violations of MISRA C Rule 20.7
a65d9988ad x86/hvm: address violations of Rule 20.7
e2eeb1b753 xen/page_alloc: address violations of MISRA C Rule 20.7
cab6de6a95 xen: address MISRA C Rule 20.7 violation in generated hypercall
7757981d94 xentrace: address violation of MISRA C Rule 20.7
12a3b90c2a xen/list: address violations of MISRA C Rule 20.7
6f6de10ade xen/xsm: add parentheses to comply with MISRA C Rule 20.7
4b60085b6e xen/console: add comment about external console lock helper
03e484a4f6 x86/vcpu: relax VCPUOP_initialise restriction for non-PV vCPUs
d654612e98 xen/riscv: add minimal stuff to processor.h to build full Xen
5095b610df EFI: Introduce inline stub for efi_enabled on !X86 && !ARM
cbe393b709 Revert "xen/page_alloc: introduce preserved page flags macro"
ee973396f0 x86/cpuid: More AMD features
5205bda5f1 x86/p2m: Coding style cleanup
97b90f9bf2 xen/ppc: Ensure ELF sections' physical load addresses start at 0x0
10e8d824b7 AMD/IOMMU: drop remaining guest-IOMMU bits too
cc950c49ae x86/PoD: tie together P2M update and increment of entry count
f5c2b6da26 xen/page_alloc: introduce page flag to stop buddy merging
75214d5e53 xen/page_alloc: introduce preserved page flags macro
6eb13b6b1d tools/xl_parse: remove message for tsc mode string
eaafbd1134 docs/parse-support-md: Handle BulletList
188fa82305 xen/vpci: Improve code generation in mask_write()
131892e0dc x86/boot: Support the watchdog on newer AMD systems
f658321374 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly
9e18f33983 x86/boot: Improve the boot watchdog determination of stuck cpus
d2276b86e5 xen/nospec: Include <xen/stdbool.h>
d9e709e8c0 xen/wait: address violations of MISRA C Rule 20.7
239b72d874 xen/notifier: address violations of MISRA C Rule 20.7
88822d5fbd xen/arm: smmu: address violations of MISRA C Rule 20.7
8e7207d512 EFI: address violations of MISRA C Rule 20.7
b51d7f39dc xen/device_tree: address violations of MISRA C Rule 20.7
9979cc594a x86/cpufeature: add parentheses to comply with Rule 20.7
a02174c6c8 amd/iommu: clean up unused guest iommu related functions
b053075d1a xen/spinlock: make struct lock_profile rspinlock_t aware
cc3e8df542 xen/spinlock: add rspin_[un]lock_irq[save|restore]()
c9aca2a1f6 xen/spinlock: rename recursive lock functions
475080b6b2 xen/spinlock: introduce new type for recursive spinlocks
a97de92e76 IOMMU: store name for extra reserved device memory
62018f0870 x86/mm: use block_lock_speculation() in _mm_write_lock()
d92a67b60c xen/sched: address violations of MISRA C Rule 20.7
f93d8dd519 automation/eclair: allow parameter name "unused"
a5b90a90ee MAINTAINERS: remove myself from various positions
ad52857efc MAINTAINERS: drop AMD IOMMU and Intel VT-d sections
8a8d5c22af perfc: add pseudo-keyword fallthrough
53b5208de8 x86/svmdebug: Print np, sev and sev_es vmcb bits
2f09f797ba x86/svm: Drop the suffix _guest from vmcb bit
d638e304f1 SUPPORT.MD: Fix matrix generation after 43c416d0d819 and 77c39a53cf5b
77c39a53cf xen/arm: arm32: Add emulation of Debug Data Transfer Registers
43c416d0d8 xen/arm: arm64: Add emulation of Debug Data Transfer Registers
bd06cf74fc xen/arm: Introduce CONFIG_PARTIAL_EMULATION and "partial-emulation" cmd option
af7fed3fdf xen/spinlock: remove misra rule 21.1 violations
68e008db0c xen: avoid grep fodder define and undef
70e549fd44 MAINTAINERS: Remove myself from several subsystems
a6081d0176 x86/svm: Drop the _enabled suffix from vmcb bits
d2686bf964 xen/compiler: deviate the inline macro for MISRA C Rule 20.4
3945b61ddb xen/lz4: address violations of MISRA C:2012 Directive 4.10
ec2587ab4b x86/mtrr: address violations of MISRA C:2012 Directive 4.10
13a7b0f9f7 restrict concept of pIRQ to x86
4dc9a8b060 automation/eclair_analysis: deviate certain macros for Rule 20.12
03cf7ca23e x86: protect conditional lock taking from speculative execution
42a572a38e x86/mm: add speculation barriers to open coded locks
197ecd838a locking: attempt to ensure lock wrappers are always inline
f218daf6d3 percpu-rwlock: introduce support for blocking speculation into critical regions
a1fb15f616 rwlock: introduce support for blocking speculation into critical regions
7ef0084418 x86/spinlock: introduce support for blocking speculation into critical regions
c4f427ec87 xen: Swap order of actions in the FREE*() macros
fb5b6f6744 x86/spec-ctrl: Mitigation Register File Data Sampling
1eb91a8a06 x86/spec-ctrl: VERW-handling adjustments
f7603ca252 x86/spec-ctrl: Rename VERW related options
0a666cf2cd x86/spec-ctrl: Perform VERW flushing later in exit paths
475fa20b73 x86/vmx: Perform VERW flushing later in the VMExit path
7c81558208 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite()
1396892d80 xen/ppc: switch PPC to use asm-generic/device.h
e90089db3f arm/smmu: address some violations of MISRA C Rule 20.7
acb13d1b81 x86/irq: parenthesize negative constants
22d0e3487f xen/arm: address some violations of MISRA C Rule 20.7
d937b2d1ee xen/param: address violations of MISRA C Rule 20.7
e51649b4c2 xen/include: address violations of MISRA C Rule 20.7
9106769ea9 xen/spinlock: address violations of MISRA C Rule 20.7
c44cac2290 xen/x86: bzImage parse kernel_alignment
bf7a2eaede features.h: Replace hard tabs
698c35184c xen/domain.h: Centrialize is_domain_direct_mapped()
8395f275eb MAINTAINERS: drop AMD SVM and Intel VT-x sections
8ef780a1cf xen/mem-access: ifdef inclusion of <asm/mem_access.h>
136fff30b3 xen/asm-generic: introduce stub header monitor.h
ef31ffbc3d automation/eclair: add deviation for MISRA C:2012 Rule 16.6
90173fc5a2 tools/9pfsd: Fix build error caused by strerror_r
b52c45b1bd MAINTAINERS: add an entry for tools/9pfsd
b083b1c393 x86/livepatch: Relax permissions on rodata too
ef969144a4 xen/virtual-region: Include rodata pointers
989556c6f8 xen/virtual-region: Rename the start/end fields
08bb338f09 SUPPORT.md: add xen-9pfsd
49b664f5bf x86/asm: add commas to further macros definitions/invocations
4ad4df0964 CHANGELOG: add an entry for 9pfsd
9249a441c9 x86/asm: add commas to BUILD_BUG_ON
5daf46b439 Kbuild: simplify as-insn a little
2f7481d592 x86/EFI: correct compiler probing
66c8e9b76c tools/xentop: Add VBD3 support to xentop
f4900d6d69 9pfsd: allow building with old glibc
e14fece7d4 xen/{RISCV,PPC}/xen.lds: Delete duplicate _erodata definitions
cd53ee9c41 SUPPORT.md: clarify support of booting 32-bit Xen on ARMv8
e7b62fcfd9 x86: i387.c cleanup
57acad12a0 hvmloader/PCI: skip huge BARs in certain calculations
91ed573391 xen/riscv: introduces acquire, release and full barriers
cfbcfce494 Argo: don't obtain excess page references
fc84b4a5a3 xen/tasklet: address violations of MISRA C Rule 20.7
47fdf9a79f xen/errno: address violations of MISRA C Rule 20.7
771c4e3963 xen/arm: smmuv3: address violations of MISRA C Rule 20.7
9174674c3b arch: move array_index_mask_nospec()
2d514678a3 hvmloader: suppress GNU ld 2.39 warning about RWX load segments
856664f774 docs/misra/rules.rst: add rule 14.4
c40bc0576d x86/mm: re-implement get_page_light() using an atomic increment
de17162caf x86/cpu-policy: Allow for levelling of VERW side effects
0263dc9069 tests/resource: Fix HVM guest in !SHADOW builds
e2d8a65225 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies
5420aa165d x86/cpu-policy: Hide x2APIC from PV guests
efad36f1ba docs/misra/rules.rst: Fix entry for 20.12 rule
4cac80e226 docs/misra/rules.rst: add rule 16.6 and 20.12
e1de3a0536 automation/eclair: tag MISRA C:2012 Rule 8.2 as clean
b87697fc1a automation/eclair: fully deviate MISRA C:2012 Rules 5.7 and 18.7
635dd1120a pci: fix locking around vPCI removal in pci_remove_device()
d388673d1b tools/xenstored: have a single do_control_memreport()
8937d44628 tools/xenstored: support complete log capabilities in stubdom
2a750fcf7d tools/xenstored: add helpers for filename handling
0a999849c8 tools/xenstored: mount 9pfs device in stubdom
254c6f787c stubdom: extend xenstore stubdom configs
90c0b97e27 config: update Mini-OS commit
7159164bee xen/riscv: introduce nospec.h
c20850540a x86/altcall: always use a temporary parameter stashing variable
c103bb8ad4 x86: remove redundant XEN_SHSTK check from reinit_bsp_stack()
b36d850c22 docs: Move function and macro properties in docs/misra
6d05d52940 x86/memsharing: use an atomic add instead of a cmpxchg loop
d4f3d35f04 libxl: Fix segfault in device_model_spawn_outcome
54fd7b9974 xen/livepatch: group and document payload hooks
e579677095 xen/livepatch: properly build the noapply and norevert tests
cdae267ce1 xen/livepatch: fix norevert test attempt to open-code revert
d2daa40fb3 xen/livepatch: search for symbols in all loaded payloads
a57b4074ab xen/livepatch: register livepatch regions when loaded
195e75371b x86: Resync intel-family.h from Linux
b2b3d40f9a xen/arm: Fix arm32 build failure when early printk is enabled
ba0d1a7ced xen/lib: introduce generic find next bit operations
801c4e7262 tests/vpci: fix unit tests after locking change
576528a2a7 x86/spec: do not print thunk option selection if not built-in
8441fa806a x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled
6e9507f7d5 x86/spec: print the built-in SPECULATIVE_HARDEN_* options
52ebde3cfa vpci/header: program p2m with guest BAR view
622bdd9628 vpci/header: handle p2m range sets per BAR
99eeb2eb0b rangeset: add rangeset_purge() function
fe62abfcb2 rangeset: add RANGESETF_no_print flag
8c5bca7074 vpci/header: implement guest BAR register handlers
e262826159 vpci/header: rework exit path in init_header()
f20dde9259 vpci: add hooks for PCI device assign/de-assign
80b0eb095a vpci: restrict unhandled read/write operations for guests
4f78438b45 vpci: use per-domain PCI lock to protect vpci structure
cfe3ad6712 x86: re-run exception-from-stub recovery selftests with CET-SS enabled
91f5f7a915 x86: account for shadow stack in exception-from-stub recovery
28154a245c x86: document how stub exception recovery works
7356bb5e47 xen/arm: ffa: reclaim shared memory on guest destroy
ca7c872c70 xen: introduce Kconfig function alignment option
84b9617c03 xen/ppc: address violations of MISRA C:2012 Rule 11.8
150e7a4e79 automation: remove bin86/dev86 from tumbleweed image
37541208f1 x86/entry: Introduce EFRAME_* constants
0603a0c092 x86/entry: Simplify expressions in compat_restore_all_guest()
7d3c91377d x86/entry: Adjustments to "reduce assembly code size of entry points"
6f1b280876 docs/sphinx: Start an FAQ, and add Kconfig/CET details
03fb5f503c nestedsvm: Remove bogus debug message from nestedsvm_check_intercepts
2beef32b42 xen/hvm: Move other hvm_function_table booleans into the caps bitfield
42b8e78b37 svm: Improve type of cpu_has_svm_feature
5cd5e3070b xen/hvm: Convert hap_capabilities into a bitfield
60e00f77a5 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled
21051291ad automation: Rework "build-each-commit-gcc" test
56a9641359 x86: Dom0 "broken ELF" reporting adjustments
164daecb18 x86/HVM: limit upcall vector related verbosity
8de3afc0b4 xen: move BUG_ON(), WARN_ON(), ASSERT(), ASSERT_UNREACHABLE() to xen/bug.h
2ce562b2a4 x86/altcall: use a union as register type for function parameters on clang
ef101f5251 xen/cmdline: fix printf format specifier in no_config_param()
001d7fdb55 xen/consoled: drop return value from consoled_guest_rx/tx
f49fb70d3d x86/hpet: use an atomic add instead of a cmpxchg loop
f0622dd4fd xen/livepatch: fix norevert test hook setup typo
92babc88f6 Revert stubdom+xenstore 9pfs changes
f5e1c527d0 tools/xenstored: have a single do_control_memreport()
a76f8809f1 tools/xenstored: support complete log capabilities in stubdom
93892648ff tools/xenstored: add helpers for filename handling
297a2587e6 tools/xenstored: mount 9pfs device in stubdom
e21d9dbf44 tools: add 9pfs device to xenstore-stubdom
0b761781c4 stubdom: extend xenstore stubdom configs
4287a71f9b tools/xl: support new 9pfs backend xen_9pfsd
ab5a6b5986 tools/libs/light: add backend type for 9pfs PV devices
098d868e52 tools/oxenstored: Make Quota.t pure
b6cf604207 tools/oxenstored: Use Map instead of Hashtbl for quotas
7e5b662b28 x86/altp2m: p2m_altp2m_get_or_propagate() should honor ap2m->default_access
98e79be5b6 xen/*/asm-offset: Fix bad copy&paste from x86
812bdc99f4 xen-analysis.py: Accept deviation comment at the end of the line
d064b429b6 xen-analysis.py: Substitute only the comment instead of the line
ddd6696fc6 xen-analysis.py: Use named group for tag regex
8c5e4ce145 consolidate do_bug_frame() / bug_fn_t
f75b051f78 x86/APIC: drop regs parameter from direct vector handler functions
4da40a267a IRQ: drop regs parameter from handler functions
b31e753fe7 serial: drop serial_[rt]x_interrupt()'s regs parameter
e1e0579afa PV-shim: drop pv_console_rx()'s regs parameter
4f09e51027 serial: drop serial_rx_fn's regs parameter
feb338d843 keyhandler: drop regs parameter from handle_keyregs()
ba3c8373cd serial: fake IRQ-regs context in poll handlers
9ee7dc877b x86emul: make run32 test harness goal work again
cb319824bf x86emul: add missing EVEX.R' checks
54557ee9b4 x86/uaccess: add attribute noreturn to __{get,put}_user_bad()
d34e5fa2e8 build: make sure build fails when running kconfig fails
bb1619ed4f tools/9pfsd: add missing va_end() in fill_data()
d9fe1d743f Constify some parameters
512f88a92d xen/riscv: use some asm-generic headers
a4a790f432 gnttab: fully ignore zero-size copy requests
97883aa269 libxl: Disable relocating memory for qemu-xen in stubdomain too
f8791d0fd3 xen/arm: Make hwdom vUART optional feature
981f722efa xen/asm-generic: fold struct devarch into struct dev
c0dd41e055 xen/arm: switch Arm to use asm-generic/device.h
c2263735f5 xen/asm-generic: introduce generic device.h
c144b9e324 x86: Reduce assembly code size of entry points
1eb013ef97 libxl: Add "grant_usage" parameter for virtio disk devices
f93629b18b build: Replace `which` with `command -v`
4917b9a423 mm: add the __must_check attribute to {gfn,mfn,dfn}_add()
0441c3acc7 xen/arm: fixmap: Rename the fixmap slots to follow the x86 convention
78398afae1 tools/xen-9pfsd: add 9pfs read request support
e93172d57d tools/xen-9pfsd: add 9pfs write request support
01c569f3fc tools/xen-9pfsd: add 9pfs stat request support
34449f8cf0 tools/xen-9pfsd: add 9pfs create request support
052a3a7fd9 tools/xen-9pfsd: add 9pfs clunk request support
7c0d5f3cac tools/xen-9pfsd: add 9pfs open request support
9615e40f47 tools/xen-9pfsd: add 9pfs walk request support
27815b5f8f tools/xen-9pfsd: add 9pfs attach request support
bcec59cf7f tools/xen-9pfsd: add 9pfs version request support
7809132b1a tools/xen-9pfsd: add 9pfs response generation support
8219809423 tools/xen-9pfsd: add transport layer
d43c72a785 tools/xen-9pfsd: connect to frontend
c3e583b01b tools: add a new xen 9pfs daemon
c4d6802d33 docs: add a best practices coding guide
d9bfc2810e iommu/x86: fix IVMD/RMRR range checker loop increment
d670c1a38b libxl: Fix comment for LIBXL_HAVE_VMTRACE_BUF_KB
40da8a7e4b tools: add access macros for unaligned data
03e08d44c8 tools/xentop: add option to display dom0 first
d9d4c5a142 libxl: Allow Phy backend for CDROM devices
4e41947bad libxl: Create empty file for Phy cdrom
4f2c81d509 xen/riscv: define an address of frame table
9bb281d328 Argo: drop meaningless mfn_valid() check
b3bea912a7 docs/misra: add asm-offset.c to exclude-list
a185f88e98 iommu/vt-d: switch to common RMRR checker
e45801dea1 iommu/x86: introduce a generic IVMD/RMRR range validity helper
e72f951df4 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path
2fb516157f xen/riscv: introduce event.h
a541ddadec xen/riscv: introduce time.h
af46249ad8 xen/riscv: introduce regs.h
4988704e00 xen/riscv: introduce p2m.h
6cb8ced1e8 xen/riscv: introduce irq.h
ebb64781dd xen/riscv: introduce smp.h
05ff18b4f0 xen/riscv: introduce flushtlb.h
392c0c871d xen/riscv: introduce setup.h
f9f339d33f xen: avoid generation of empty asm/iommu.h
2c162e2f69 xen/riscv: introduce guest_atomics.h
d42ebc95e2 xen/riscv: introduce cpufeature.h
4c13f9c3fc xen: add support in public/hvm/save.h for PPC and RISC-V
6d7d8d2b3e libxl: Add support for blktap vbd3
cbbca7be4a x86/p2m: make p2m_get_page_from_gfn() handle grant case correctly
772380f754 eclair: remove wrongly added -eval_file
897def94b5 x86/hvm: Fix fast singlestep state persistence
a773adedbd x86/PV32: restore PAE-extended-CR3 logic
4e5bd87d24 config: update Mini-OS commit
06024b2619 xen/serial: Drop serial_{put,get}c
e36c106b0b tools/ocaml: Add missing vmtrace_buf_kb field
837e5144ac x86: convert misc assembly function annotations
00ae55ad76 SVM: convert entry point annotations
e11f576650 xen/arm: Fix UBSAN failure in start_xen()
f4519ee87e eclair: move function and macro properties outside ECLAIR
38ae4739d8 xen/ns16550: address violations of MISRA C:2012 Rule 13.1
e8f1bb803f block-common: Fix same_vm for no targets
878159bf25 VMX: tertiary execution control infrastructure
59a69674b5 automation: Switch yocto-qemux86-64 job to run on x86
57a923bfd9 golang: Regen binding
02c6ad4515 x86/entry: Reduce assembly instruction size
80b01e20d0 x86/paging: Use more specific constant
83afa31358 amd-vi: fix IVMD memory type checks
8ac8999d70 x86/srat: vmap the pages for acpi_slit
861d987726 xen/numa: vmap the pages for memnodemap
f940facaa3 acpi: vmap pages in acpi_os_alloc_memory
ef0873946c xen/vmap: Introduce vmap_size() and use it
2213b5a293 setup: Move vm_init() before acpi calls
1cb7949b37 xen/evtchn: Remove useless assignment in evtchn_alloc_unbound()
3ce2e1f606 tools/xenstored: map stubdom interface
097388d520 tools/xenstored: split domain_init()
5edc819ed5 tools/xenstored: rework ring page (un)map functions
a3e37f7024 tools/xenstored: get own domid in stubdom case
e199a30680 tools/xenstored: move all socket handling into posix.c
aae54458a1 tools/xenstored: move all log-pipe handling into posix.c
511cc30cf8 tools/xenstored: move systemd handling to posix.c
e767a98f04 tools/xenstored: add early_init() function
1c2c7f7901 tools/xenstored: rename xenbus_evtchn()
9c076988fe tools/helpers: allocate xenstore event channel for xenstore stubdom
29f17d8374 tools/xentop: fix sorting bug for some columns
10e0fb655d x86/cpu: Fix mixed tabs/spaces
9eee78988c xen/bitmap: Deduplicate __bitmap_weight() implementations
930605f155 x86/ucode: Remove accidentally introduced tabs
660f8a7501 x86/CPU: convert vendor hook invocations to altcall
e931edccc5 x86/guest: finish conversion to altcall
044168fa3a x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking()
3f819af8a7 xen: Remove debugger.h
d182f9feae x86: Remove gdbstub
583f1d0950 x86/spec-ctrl: Expose BHI_CTRL to guests
478e4787fa x86/spec-ctrl: Expose RRSBA_CTRL to guests
4dd6760706 x86/spec-ctrl: Expose IPRED_CTRL to guests
c852ca5c05 tools/ocaml: Bump minimum version to OCaml 4.05
558e84b7ff xen/bitmap: Consistently use unsigned bits values
4f0b0ffff3 x86/traps: Annotate {l,c}star_enter() as nocall
fb22c33d17 x86/boot: Add braces in reloc.c
ae6d4fd876 xen/sched: Fix UB shift in compat_set_timer_op()
9d701bc9ab x86/hvm: Fix UBSAN failure in do_hvm_op() printk
8e36c668ca xen: Drop superfluous semi-colons
4c2d50d586 xen/arm: Properly clean update to init_ttbr and smp_up_cpu
bc45f20c01 shim: avoid building of vendor IOMMU code
9916fdff4b IOMMU: iommu_use_hap_pt() implies CONFIG_HVM
1aee91fe98 xen/page_alloc: introduce init_free_page_fields() helper
18cd984905 xenpm: Print message for disabled commands
d3df0f180f x86/PoD: simplify / improve p2m_pod_cache_add()
cc6ba68edf VT-d: Fix "else" vs "#endif" misplacement
cb4ecb3cc1 pci: fail device assignment if phantom functions cannot be assigned
4a7e71aa08 x86/iommu: cleanup unused functions
0e1bd15a1d x86/iommu: switch hwdom IOMMU to use a rangeset
79fcc0e9d7 x86/iommu: remove regions not to be mapped
40a7467702 x86: purge NMI_IO_APIC
4396761654 x86/APIC: purge {GET,SET}_APIC_DELIVERY_MODE()
1097878338 NUMA: no need for asm/numa.h when !NUMA
a75c5aa2b2 xen/vmap: Check the page has been mapped in vm_init_type()
c378ff8983 x86/entry: fix jump into restore_all_guest without %rbx correctly set
dbdd7e8df7 xen/arm64: head: Use PRINT_ID() for secondary CPU MMU-off boot code
9a5114074b arm/smpboot: Move smp_up_cpu to a new section .data.idmap
5ed59e62c6 arm/mmu: Move init_ttbr to a new section .data.idmap
b24b540de6 x86/entry: Avoid register spilling in cr4_pv32_restore()
024e7131be tools: don't expose XENFEAT_hvm_pirqs by default
72cad62abb x86/hvm: make X86_EMU_USE_PIRQ optional
cf7fe8b72d x86/ucode: Fix stability of the raw CPU Policy rescan
052d78fbec pmstat: Limit hypercalls under HWP
e047b8d0fa x86/entry: replace two GET_CURRENT() uses
f575f05524 x86/NMI: refine "watchdog stuck" log message
610775d0dd x86/p2m-pt: fix off by one in entry check assert
98ae35cab0 x86/entry: Fix ELF metadata for NMI and handle_ist_exception
55fbecb64e x86/kexec: Drop compatibility_mode_far
bbf7d6acd3 xen/riscv: introduce guest_access.h
f132bb5b6b xen/riscv: introduce domain.h
f67bddf3bc IRQ: generalize [gs]et_irq_regs()
79519fcfa0 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets)
2cfdbd5863 PPC: switch entry point annotations to common model
4900c939cb tools/binfile: switch to common annotations model
7015f337a2 RISC-V: annotate entry points with type and size
ae08d0c304 Arm: annotate entry points with type and size
9de79317e8 x86: also mark assembler globals hidden
b3a9037550 x86: annotate entry points with type and size
df2209f9b7 common: assembly entry point type/size annotations
85ba4d050f x86/MCE: switch some callback invocations to altcall
9f58616ddb x86/MCE: separate BSP-only initialization
1212af3e8c x86/PV: avoid indirect call for I/O emulation quirk hook
e9e0eb30d4 x86/MTRR: avoid several indirect calls
1bc07ebcac core-parking: use alternative_call()
b25607e528 xen: Fold exit paths in find_text_region()
c30021be30 xen/livepatch: Make check_for_livepatch_work() faster in the common case
86d0edda34 x86/cpuid: Change cpuid() from a macro to a static inline
3643bb53a0 x86/vmx: Disallow the use of inactivity states
d1f8883aeb x86/vmx: Fix IRQ handling for EXIT_REASON_INIT
6522ef73fd x86/vmx: Collect all empty VMExit cases together
730d2637a8 x86/HPET: avoid an indirect call
467ae515ca cpufreq: finish genapic conversion to altcall
b1cc53753c x86/APIC: finish genapic conversion to altcall
6bdb965178 x86/intel: ensure Global Performance Counter Control is setup correctly
f3f6c500e2 xen/arm64: head: Allow to use early printk while on 1:1 mapping
d5a2ff06b1 xen/arm32: head: Move earlyprintk 'hex' to .rodata.idmap
c2ce346647 CirrusCI: drop FreeBSD 12
cd574f3ed8 x86/vPMU: drop regs parameter from interrupt functions
7a3bd1cbc4 x86/vIRQ: split PCI link load state checking from actual loading
69c89dd787 x86/vPIC: check values loaded from state save record
c53013da6f x86/vPIT: check values loaded from state save record
c3c6e9b8e8 x86/HVM: adjust save/restore hook registration for optional check handler
5b6cab423c x86/HVM: split restore state checking from state loading
5e600b4fb9 NUMA: limit first_valid_mfn exposure
137c08aa07 xen/riscv: introduce system.h
cef805dce4 x86emul: support SM4
390777414a x86emul: support SM3
aa18530282 x86emul: support SHA512
c8bb7553f2 x86emul: support AVX-VNNI-INT16
1ec3fe1f66 xen/arm32: head: Improve logging in head.S
410837189e xen/arm: bootfdt: Harden handling of malformed mem reserve map
89c384c525 xen/common: Don't dereference overlay_node after checking that it is NULL
0f9a688f60 xen/arm32: head: Rework how the fixmap and early UART mapping are prepared
c27c8922f2 x86/iommu: introduce a rangeset to perform hwdom IOMMU setup
48193fe00a x86/HVM: drop tsc_scaling.setup() hook
0b5f149338 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware
f628fc8d18 VMX: drop vmx_virt_exception and make vmx_vmfunc static
2467ab2a74 x86/mwait-idle: fix ubsan warning
cc5a436002 xen/public: add some more 9pfs xenstore paths
589d8cf146 xen: ifdef inclusion of <asm/grant_table.h> in <xen/grant_table.h>
42b814b7ff xen/asm-generic: introduce stub header softirq.h
e2c7111d65 xen/asm-generic: introduce generic div64.h header
5a3ace21f3 xen/arm: smmu-v3: address violations of MISRA C:2012 Rule 16.3
49818cde63 xen: remove asm/unaligned.h
f61685f1fa xen: make include/xen/unaligned.h usable on all architectures
23db507a01 x86/amd: Extend CPU erratum #1474 fix to more affected models
b74c735f88 xen/xmalloc: XMEM_POOL_POISON improvements
3909fb4692 docs/misra: exclude files inherited from ACPI CA from MISRA compliance
773db8f307 x86/platform: tidy do_platform_op() a little
6ccd2501b4 x86/mm: use "break" in arch_memory_op()
8862c7b8b6 pci: introduce per-domain PCI rwlock
f4d0859da3 pci: msi: pass pdev to pci_enable_msi() function
94039d97e2 amd-vi: set IOMMU page table levels based on guest reported paddr width
ad3a4b7c76 x86/p2m: move and rename paging_max_paddr_bits()
6efc654a0b tools/xg: Reserialise CPU policies with the allocated number of leaves.
ecabcd0d4e xen/bug: Complete outstanding TODO
5f7fd392d9 driver/char: Drop run_in_exception_handler() ifdefary
1fa104ee7a tools/pygrub: Drop compatibility symlink
e9786ba9ee xen/arm: mmu: address a violations of MISRA C:2012 Rule 16.3
2750111969 xen/arm: guest_walk: address violations of MISRA C:2012 Rule 16.3
f1e956cdbf xen/arm: traps: address violations of MISRA C:2012 Rule 16.3
7d18ab2b9b xen/arm: gic-v3: address violations of MISRA C:2012 Rule 16.3
18828f00e4 automation/eclair_analysis: fix typo in deviation.
5171930429 docs/misra/rules.rst: add Rule 17.1
913a177416 x86/IO-APIC: correct RTE polarity comment
e6cb988a3d xen/common: address violations of MISRA C:2012 Rule 11.8
9d8c3bc887 xen: remove unused function ERR_CAST
23a5fb3df7 xen: add deviations for Rule 11.8
1fb1d3e77f xen/arm: address violations of MISRA C:2012 Rule 11.8
725acf8e4d xen/arm: vcpreg: address violation of MISRA C Rule 2.1
2a0f5a11f2 xen/arm: traps: add ASSERT_UNREACHABLE() where needed
c877b90928 xen/arm: address MISRA C:2012 Rule 2.1
51ffb33118 xen: move declaration of first_valid_mfn to xen/numa.h
fba913a21a docs/misra: add entries to exclude-list
ed45dd16c4 automation/eclair: update configuration of MISRA C:2012 Rule 5.6
a128d8da91 automation/eclair: add deviations for MISRA C:2012 Rule 16.3
1b42304fd1 xen/arm: ffa: return fpi size from FFA_PARTITION_INFO_GET
05b6368ba0 x86: don't open-code max_page calculation nor pfn_to_paddr()
11126964d8 automation/eclair_analysis: avoid violation of MISRA Rule 2.1
bfd52e979d xen/shutdown: address MISRA C:2012 Rule 2.1
36a05926b0 xen/wait: address violations of MISRA C Rule 11.9
e66237eb1a x86/hvm: dom0: use helper to get sizeof struct field
985fe473c0 x86/ioapic: use NULL as a null pointer constant
0940d34291 xen/hvm: use NULL as a null pointer constant
3af0a4f922 iommu/vt-d: do not assume page table levels for quarantine domain
64d32b75e6 x86: allow non-BIGMEM configs to boot on >= 16Tb systems
0cc74376d6 x86/hvm: address a violation of MISRA C:2012 Rule 11.8
abdee7b1db x86/boot: address violations of MISRA C:2012 Rule 11.8
b736154e89 xen/efi: address violations of MISRA C:2012 Rule 11.8
5fbb3e9da9 xen/arm64: address violations of MISRA C:2012 Rule 11.8
a57680db1a xen/x86_emulate: address violations of MISRA C:2012 Rule 14.4
c714b8807b xen/x86: add missing instances of asmlinkage attributes
c6dbc6df52 xen: fix compilation issue of serial.c
d2ab1347bd xen: add RISCV support for pmu.h
fa469c5a86 xen/riscv: add public arch-riscv.h
a60067f398 docs/misra/rules.rst: add Rule 16.2
896c191786 automation/eclair_analysis: file exclusion automation
cad6f9a4c1 smp: move cpu_is_offline() definition
68e6b7fc11 tools/libs/evtchn: fix locking in Mini-OS
75571e162b xen/arm: ffa: return FFA_RET_NOT_SUPPORTED on unhandled calls
a236b74b96 xen/arm: don't pass iommu properties to hwdom for iommu-map
666e3c294d xen/iommu: address leftover violation of MISRA C:2012 Rule 8.2
75b6bcbd9e xen/drivers: address violations of MISRA C:2012 Rule 8.2
76ecfc517d x86/include: address violations of MISRA C:2012 Rule 8.2
b9905a04e4 xen/compat: address violations of MISRA C:2012 Rule 8.2
abdbf82448 MAINTAINERS: add me as Mini-OS maintainer
56c633bc8e xen/riscv: define bug frame tables in xen.lds.S
a6a8fe0eb1 Revert "xen: make include/xen/unaligned.h usable on all architectures"
8fe6219d83 Revert "xen: remove asm/unaligned.h"
7fca0463c7 xen/spinlock: make spinlock initializers more readable
a77fcbc389 xen/spinlock: reduce lock profile ifdefs
35431ecb9d xen/arm: smmu: move phys_addr_t definition to linux-compat.h
889af18eee xen/sched: address MISRA C:2012 Rule 2.1
f0bb77bf73 AMD/IOMMU: address violations of MISRA C:2012 Rule 8.2
6d5e94ca7d x86/mm: address violations of MISRA C:2012 Rule 8.2
fbc8cff877 x86/mm: remove compat_subarch_memory_op()
431ada87e5 xen/acpi: address violations of MISRA C:2012 Rule 8.2
190b7f49af xen/arm: page: Avoid pointer overflow on cache clean & invalidate
0fb4b6b0ea MAINTAINERS: Hand over the release manager role to Oleksii Kurochko
6619c6f891 xen: remove asm/unaligned.h
6c4be49503 xen: make include/xen/unaligned.h usable on all architectures
3e3ff7f9cd xen/arm: set -mno-unaligned-access compiler option for Arm32
cf40abbc7f tools/xenstored: potentially split trace_io() out message
1403131596 x86/viridian: make build_assertions static
f45e488e7b docs/misra/rules.rst: add more rules
519c7a1d58 xen: address violations of MISRA C:2012 Rule 14.4
807321b6f3 x86/acpi: remove acpi_pic_sci_set_trigger()
bc4fe94a69 tools/libs/evtchn: replace assert()s in stubdom with proper locking
e6e8c5831a Config: Update MiniOS revision
d2b7c442b4 CODING_STYLE: Add a section of the naming convention
25147005da xen/sched: do some minor cleanup of sched_move_domain()
23792cc0f2 xen/sched: fix sched_move_domain()
02d0a615b3 xen/arm: bootfdt: Check return code of device_tree_for_each_node()
c4ccad6f3f tools/xenstored: remove the "-R" command line option
cc6609eed2 tools/xenstored: remove the "-P" command line option
cddc66b1ea tools/xenstored: remove "-V" command line option
98f2cb76f6 tools/xenstored: remove "-D" command line parameter
dbe69e1c85 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3
add7046baf Revert "x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3"
d4bfd38998 xen/hypervisor: Don't use cc-option-add for -Wdeclaration-after-statement
40be6307ec Only compile the hypervisor with -Wdeclaration-after-statement
59df285131 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3
e4c0489ec5 xen/pci: address violations of MISRA C:2012 Rule 8.2
24b2672695 x86/mce: address violations of MISRA C:2012 Rule 8.2
8b0dc4a88f x86/page: address violations of MISRA C:2012 Rule 8.2
fa9171ed05 config: update Mini-OS commit
2e5e9ec4ff x86/vPIC: vpic_elcr_mask() master bit 2 control
634c6e15ac x86/HVM: introduce hvm_get_entry()
55cd2eaec3 xen/riscv: introduce spinlock.h
204aa245df xen/riscv:introduce asm/byteorder.h
3e5672d69f automation/eclair: tag function calls to address violations of MISRA C:2012 Rule 13.1
1ff6d92938 automation/eclair: add deviations for MISRA C:2012 Rule 5.6
d97d6a7f08 docs/misra: deviate deliberately unused labels
4c6142a1ab CI: Fix fallout from adding elfutils-dev to the build container
01da0aeecd ns16550: remove partial explicit initializer
948e033031 automation/alpine: add elfutils-dev
afb2692c47 ubsan: Introduce CONFIG_UBSAN_FATAL to panic on UBSAN failure
ff11780620 xen/domain: fix error path in domain_create()
d830b0a7bc xen/vpci: header: filter PCI capabilities
a3c8fb450a xen/vpci: header: status register handler
6f7db3e0a0 xen: address violations of MISRA C:2012 Rule 11.8
3e7a3f08ce bump default SeaBIOS version to 1.16.3
06e8d65d33 xen/sched: fix adding offline cpu to cpupool
787d11c5aa x86emul: avoid triggering event related assertions
93d913c6e6 xen/public: fix flexible array definitions
80a7669afd x86/p2m: address a violation of MISRA C:2012 Rule 8.3
f0a00ab1a6 x86/p2m: preparation work for xenmem_add_to_physmap_one()
525c7c094b xen/arm: Move static event channel feature to a separate module
1571ff7a98 tools/xg: Fix potential memory leak in cpu policy getters/setters
02ef46b675 .gitignore: generalize *.new
cd1a4a5709 docs/misra: add entry to exclude-list.json
ebd7074dd0 xen/arm: mmu: add headers for missing declarations
e7c4b68738 xen/serial: address a violation of MISRA C:2012 Rule 8.2
498c130104 xen/perfc: address a violation of MISRA C:2012 Rule 8.2
5dc781b4af xen/param: address a violation of MISRA C:2012 Rule 8.2
13832e2367 xen/kernel: address a violation of MISRA C:2012 Rule 8.2
80aeb9ccec xen/iommu: address violations of MISRA C:2012 Rule 8.2
59f31d970f xen/notifier: address violations of MISRA C:2012 Rule 8.2
24dbf93ebd xen/domain: address violations of MISRA C:2012 Rule 8.2
def73fc144 automation/eclair: improve scheduled analyses
e5aba2909c docs/misra: fix a typo in rules.rst
829b4731df automation: Switch u-boot boot command to bootz for arm32 tests
f0dd0cd959 docs/misra: add guidance on the format of Dir 4.1 docs for ECLAIR
ddf664a557 automation/eclair: make the docs for MISRA C:2012 Dir 4.1 visible to ECLAIR
2f848d3cee arm/bitops: encapsulate violation of MISRA C:2012 Rule 10.1
902377b690 xen/livepatch: fix livepatch tests
b3d3267286 cirrus-ci: update FreeBSD versions
92696bf052 xen/arm64: Move print_reg macro to asm/arm64/macros.h
7e1f5b68ac xen/asm-generic: introduce generic header altp2m.h
f1ac700b44 xen/asm-generic: introduce generalized hardirq.h
7c20d1616d xen/asm-generic: introduce generic header percpu.h
18f3095654 xen/asm-generic: introduce stub header <asm/random.h>
f6082c7b6c xen/asm-generic: introduce generic header iocap.h
2ae2a306f4 xen/asm-generic: introduce generic hypercall.h
94854f1419 xen/asm-generic: introduce stub header paging.h
90309854fd xen/x86: In x2APIC mode, derive LDR from APIC ID
8b15717518 xen/dmi: address a violation of MISRA C:2012 Rule 8.2
022d7d87cc xen/cpumask: address violations of MISRA C:2012 Rule 8.2
b0356bc0e0 xen/acpi: address violations of MISRA C:2012 Rule 8.2
07551414ca xen/console: address violations of MISRA C:2012 Rule 8.2
84eba1dc6d xen: remove <asm/delay.h>
72ec070930 xen: replace some occurrences of SAF-1-safe with asmlinkage attribute
caa221791d domain: add ASSERT to help static analysis tools
18540a313c arm/dom0less: introduce Kconfig for dom0less feature
d7d80e7a32 xen/arm: Move static memory build code in separate modules
8d2c3ab18c arm/dom0less: put dom0less feature code in a separate module
dcb92d4ef1 xen/arm: Add asm/domain.h include to kernel.h
4a6962fa7f arm/gicv2: make GICv2 driver and vGICv2 optional
72d51813d6 x86: amend cpu_has_xen_{ibt,shstk}
17754972fa x86/atomic: address violations of MISRA C:2012 Rule 11.8
fc63c0ebef AMD/IOMMU: address violations of MISRA C:2012 Rule 11.8
fe26cb2dd2 x86/boot/reloc: address violations of MISRA C:2012 Rule 11.8
09c2fe438d x86/platform_hypercall: address violations of MISRA C:2012 Rule 11.8
82182ad7b4 livepatch: do not use .livepatch.funcs section to store internal state
46f2e2c3bc xen/mm: address violations of MISRA C:2012 Rules 8.2 and 8.3
b82b867a66 x86/mm: preparation work to uniform modify_xen_mappings* interfaces
fbcec32d6d x86/mem_sharing: Release domain if we are not able to enable memory sharing
b9eeb19926 x86/mem_sharing: Fix typo in comment
80c153c48b xen/sort: address violations of MISRA C:2012 Rule 8.2
a66b02a6b6 x86/vPIC: correct vpic_domain()
9b3476f13e xen/iommu: use ISOLATE_LSB to wrap a violation of Rule 10.1
80d72670ad xen/vmap: use ISOLATE_LSB to wrap a violation of Rule 10.1
de4f3cf327 x86_64/mm: express macro CNT using ISOLATE_LSB
02d754aa55 xen/pdx: amend definition of PDX_GROUP_COUNT
f02829592e x86emul/test: fold AVX512VL scatter/gather test blobs with AVX512F ones
03d6720a4c tools/pygrub: Restrict depriv operation with RLIMIT_AS
2d63785a8a tools/pygrub: Fix expression before it's copied elsewhere
de577641cf tools/pygrub: Fix bug in LIMIT_FSIZE env variable override
c789c7ff7e tools/pygrub: Set mount propagation to private recursively
16a0e16dab tools/python: add .gitignore file
9b1972dff5 tools/pygrub: add .gitignore file
5d4b948169 xen/efi: Drop image_name from efi_arch_handle_cmdline()
f96e2f6457 xen/MISRA: Remove nonstandard inline keywords
563193de85 x86/apic: Drop the APIC_MSR_BASE constant
e39cbf52b1 x86/apic: Drop atomic accessors
9153b64bea xen: Enable -Wwrite-strings
b1185ce66c arm/efi: Simplify efi_arch_handle_cmdline()
ef2071d45b x86/efi: Simplify efi_arch_handle_cmdline()
858e3bf349 x86/setup: Rework cmdline_cook() to be compatible with -Wwrite-strings
0dd3231330 x86/setup: Clean up cmdline handling in create_dom0()
1e2b13bcf0 xen/arm: gicv3: clean up GICD_CTRL write
8f45862580 xen/xalloc: address violations of MISRA C:2012 Rule 8.2
382257af0c xen/vmap: address violations of MISRA C:2012 Rule 8.2
764851a8be xen/serial: address violations of MISRA C:2012 Rule 8.2
89c1784f5f xen/common: address violations of MISRA C:2012 Rule 8.2
5c72b54b65 x86: add asmlinkage macro to variables only used in asm code
3ea5918ead x86/ACPI: constify acpi_enter_sleep argument
843265ad0b x86/cpuid: enumerate and expose PREFETCHIT{0,1}
9dfc824590 x86emul: deal with decode failure in predicates test
c22fe7213c automation: switch to multi-platform images when possible
3b2ba63994 automation: set architecture in docker files
b78b4de1c5 automation: update tests to use Debian Bookworm
b5739330d7 automation: fix jessie/stretch images to use archive.debian.org apt repos
7440355a29 automation: add Xen timestamps to all tests
24532be907 automation: remove com1= parameter on QEMU smoke tests
b576497e3b automation: remove CR characters from serial output
4b99ce89eb config: update Mini-OS commit
e536a49754 stubdom: Remove caml-stubdom
84915b80a9 x86/hvm: Trivial style cleanup in vlapic.c
0fa916aba8 x86/mm: Fix up bad bool conversion in ept_set_entry()
820ee3ec4d x86: add deviation for asm-only functions
10081c2dc5 arm/platforms: Make compatbile with -Wwrite-strings
6c1d5f6516 arm/duart: make dt_uart_init() compile with -Wwrite-strings
1a177d4669 x86/setup: Make the loader variable const
24b1107449 xen: Drop bool_t
e0d0961f3f xen/treewide: Switch bool_t to bool
de577618c2 x86/treewide: Switch bool_t to bool
ee34444712 x86/ioapic: Check 1k alignment for IO-APIC physical addresses
d9fc66554f x86/traps: More use of nocall
625f2cc66f x86/entry: Use 32bit XOR in handle_ist_exception
7e939abca7 xen: Annotate printk() as cold
71dd0f6e3b x86: Fix XEN_DOMCTL_gdbsx_guestmemio crash
a1f9490ccc docs/misra: exclude three more files
707b8b8717 x86/mem_access: make function static
e7ad219bb2 xen/console: remove stub definition in consoled.h
8b9e6939a0 x86/vm_event: add missing include for hvm_vm_event_do_resume
5c7c09f64e x86/grant: switch included header to make declarations visible
62c84c3031 xen: modify or add declarations for variables where needed
40acb0c111 SUPPORT.md: change current version to 4.19-unstable
983aaa533b xenstored: use correct conversion specifier in the tracing function
c9237aa2cf xen/spinlock: fix coding style issues
fa2da5bce9 xen/arm32: head Split and move MMU-specific head.S to mmu/head.S
a9f931e96f xen/arm32: head: Introduce enable_{boot,secondary}_cpu_mm()
ee0f41fda3 xen/arm: mmu: move MMU specific P2M code to mmu/p2m.{c,h}
1bf5c104fe xen/arm: Rename init_secondary_pagetables() to prepare_secondary_mm()
e6bef277d4 xen/arm: Fold pmap and fixmap into MMU system
672d67f339 xen/arm: Split MMU-specific setup_mm() and related code out
f661a20aa8 xen/arm: Extract MMU-specific MM code
ea59db96a4 xen/arm: Fold mmu_init_secondary_cpu() to head.S
210e83ae56 xen/arm: Split MMU system SMP MM bringup code to mmu/smpboot.c
1bf8a6aafc xen/arm: Split page table related code to mmu/pt.c
cfb777791d amd/iommu: fully initialize array in 'flush_command_buffer'
b264570ba2 x86/sysctl: address a violation of MISRA C:2012 Rule 8.2
05644bd9d2 x86/platform_hypercall: address violations of MISRA C:2012 Rule 8.2
168f87f590 x86/physdev: address violations of MISRA C:2012 Rule 8.2
8976587dc7 x86/pci: address a violation of MISRA C:2012 Rule 8.2
45402cc136 x86/smp: address a violation of MISRA C:2012 Rule 8.2
340a75a4f4 x86/vpmu: address a violation of MISRA C:2012 Rule 8.2
9b1fcb4648 x86/mmconfig: address violations of MISRA C:2012 Rule 8.2
f5b4c5f537 x86/hvm: address violations of MISRA C:2012 Rule 8.2
4709ec8291 xen/sched: fix sched_move_domain()
98758ae489 xen: introduce function type bug_fn_t.
83e9e30510 automation/eclair: add a deviation for MISRA C:2012 Rule 8.6
26cdd09801 xen: address violations of Rule 11.9
71576f8852 automation/eclair: update deviations and accepted guidelines
a2e8d64c80 xen/string: address violations of MISRA C:2012 Rules 8.2 and 8.3
ab9558ef5e xen/compat: use BUILD_BUG_ON in CHECK_SIZE macros
ee409f36b6 xen/types: address Rule 10.1 for DECLARE_BITMAP use
5b2a570f84 x86/io_apic: address violation of MISRA C:2012 Rule 10.1
4bee3b9c2c xen: Add deviations for MISRA C:2012 Rule 7.1
1003608606 xen/x86: address violations of MISRA C:2012 Rule 7.2
652683e1ae x86/hvm: address violations of MISRA C:2012 Rule 7.2
ee7bab7912 x86/vmx: address violations of MISRA C:2012 Rule 7.2
97f8555acb xenstored: print domain id in traces
6cd046c501 xen/arm: Enlarge identity map space to 10TB
02df8ada5a xen/arm: Add macro XEN_VM_MAPPING
9dfcef827c arm32: head: Add missing hunk from previous commit
9b807e23e7 xen/arm32: head: Replace load_paddr with adr_l when they are equivalent
046f13a2b3 xen/arm64: head: only use the macro load_paddr() in the MMU code
c419d2dd35 xen/arm: Skip memory nodes if not enabled
b739e2067b xen/include: add macro ISOLATE_LSB
ef8eba3535 x86/hpet: address violations of MISRA C:2012 Rule 8.2
9c27a730b8 x86/vmce: address violations of MISRA C:2012 Rule 8.2
dc64ba0c41 x86/mcaction: address a violation of MISRA C:2012 Rule 8.2
5310230b61 x86/cpuidle: address violations of MISRA C:2012 Rule 8.2
614417165c x86/domain: address violations of MISRA C:2012 Rule 8.2
21f6d31ed6 x86/mtrr: address violation of MISRA C:2012 Rule 8.2
6f3f60b090 x86/mctelem: address violations of MISRA C:2012 Rule 8.2
fb62aa714d misra: add R21.1 R21.2
06e484767b docs/misra: add R11.1 R11.2 R11.3 R11.6
7ad0c774e4 x86/boot: tidy #include-s
b24a0f3c5e tools: Remove all DECLARE_* op macros in xc
22b773d5c9 x86/psr: address a violation of MISRA C:2012 Rule 8.3
fde774154c x86/xstate: address a violation of MISRA C:2012 Rule 8.3
76fa223438 x86/uaccess: address violations of MISRA C:2012 Rule 8.3
a48bb129f1 x86/spec-ctrl: Remove conditional IRQs-on-ness for INT $0x80/0x82 paths
fe1e4668b3 iommu/amd-vi: use correct level for quarantine domain page tables
fb41228ece docs/sphinx: Fix indexing
ab03b284b4 docs/sphinx: Fix syntax issues in exclude-list.rst
93ad5dd974 docs/sphinx: Fix syntax issues in hyperlaunch.rst
044503f61c docs: Delete kconfig docs to fix licensing violation
8ee1a332b4 docs/misra: Add missing SPDX tags
162a1589e3 xen/set_{c,p}x_pminfo: address violations od MISRA C:2012 Rule 8.3
0e4720655f xen/sched: address violations of MISRA C:2012 Rule 8.2
ecbe563500 x86/msi: address violations of MISRA C:2012 Rules 8.2 and 8.3
06719e449f x86/intel: fix indentation
dec9e02f31 xen: avoid generation of stub <asm/pci.h> header
d0ea916fcd x86: don't allow Dom0 access to ELCR ports
bede1c7e3b exclude-list: generalise exclude-list
d82a8217d5 cppcheck: rework exclusion_file_list.py code
f3795523dc arm/gic: add missing parameter names and uniform function declarations
dc79336075 xen/domain_page: address violations of MISRA C:2012 Rule 8.3
adac94da8b build: Allow setting KBUILD_DEFCONFIG in the environment
f5ff26da32 xen/arm64: domctl: Avoid unreachable code in subarch_do_domctl()
ca1279f879 arm/cpufeature: address violations of MISRA C:2012 Rule 8.2
5704923f94 bitmap: fix nbits signess
25dc15db92 arm/smmu: address violation of MISRA C:2012 Rule 8.2
ffe54cd871 arm/domain: address violations of MISRA C:2012 Rule 8.2
be7f7149c4 arm/vgic-v3: address a violation of MISRA C:2012 Rule 8.2
a17a2b2073 arm/cmpxchg: address violations of MISRA C:2012 Rule 8.2
c07e81f646 arm/p2m: address a violation of MISRA C:2012 Rule 8.2
5d38f3eab0 arm/setup: address violations of MISRA C:2012 Rule 8.2
49604292b0 arm/smpboot: address violations of MISRA C:2012 Rule 8.2
4c910b0461 automation/eclair: update accepted and clean guidelines
78a86b2686 x86/spec-ctrl: Add SRSO whitepaper URL
fab51099a1 ubsan: Fix pointer overflow error message
e3c409d59a x86/x2apic: introduce a mixed physical/cluster mode
de1cc5102b MAINTAINERS: add xen/drivers/char/imx-lpuart.c to ARM section
1f849edc2f golang: Fix bindings after XSA-443
1429f9c548 golang: Fixup binding for Arm FF-A
5ae0a4ad38 AMD/IOMMU: drop tasklet handler forward declaration
b6c7951f23 x86/hvm/dom0: fix PVH initrd and metadata placement
86b06295f6 arch: drop get_processor_id()
ad193a79c2 xenoprof: move asm/ include
7d46710f08 console: conditionalize console_input_domain()
ea3dabfb80 x86/PVH: allow Dom0 ELF parsing to be verbose
9589296e9c build: simplify clean handling of extras directory
ea083911b1 xen/include: make enum perfcounter anonymous
7211904e09 docs/misra: add documentation skeleton for MISRA C:2012 Dir 4.1
202f410721 MAINTAINERS: make Michal Orzel ARM Maintainer
801b804945 x86/time: Fix UBSAN failure in __update_vcpu_system_time()
649c190a1f xen/ppc: Implement a basic exception handler
abb8a88d59 xen/ppc: Add .text.exceptions section for exception vectors
87f37449d5 x86/i8259: do not assume interrupts always target CPU0
26a449ce32 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER
fe0ae3f7dd xen/riscv: introduce identity mapping
af670c14e8 xen/riscv: introduce function for physical offset calculation
86266162fc x86: don't allow Dom0 (direct) access to port F0
306e3dc919 x86/PVH: deny Dom0 access to the ISA DMA controller
9e2c146c38 x86: don't allow Dom0 access to port 92
ee3bcf907a x86: don't allow Dom0 access to port CF9
7b1de98b66 x86/vRTC: minor adjustment to reads from index port
7befef87cc x86/p2m: address violations of MISRA C:2012 Rules 8.2 and 8.3
93ec30bc54 x86/pv-shim: fix grant table operations for 32-bit guests
23eb39acf0 x86/mem_sharing: add missing m2p entry when mapping shared_info page
cfff187ed5 x86/cpu-policy: Adjust CPUID_MAX_SERIALISED_LEAVES to placate MISRA
8e74432dd3 xen/spinlock: fix use of 0 as a null pointer constant
6386f5585c x86/mce: Move MC_NCLASSES into the enum mctelem_class
a944636478 CHANGELOG.md: Start new 4.19.0 section
e4fdec09bb CHANGELOG.md: Finalize the 4.18 release date
bf51f85f20 CHANGELOG: More 4.18 content
d9c1166078 CHANGELOG: Reformat
850382254b docs: Fix IOMMU command line docs some more
df43b54590 automation: fix race condition in adl-suspend test
9659b2a6d7 Set version to 4.18; return ./autogen.sh
7f48e34298 Revert "Config.mk pin QEMU_UPSTREAM_REVISION (prep for Xen 4.18 RC1)"
4294987c7a Set version to 4.19; 4.18 has branched
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
kernel version 6.10 will be the next reference kernel, so we
add the .inc file to enable the configuration
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
The upstream repository has both removed tags and
renamed branches.
To prevent some of these failures in the future,
let's run with nobranch=1 for a bit.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
"bitbake xen-image-minimal -c do_image_wic" fails with:
| ERROR: _exec_cmd: install -m 0644 tmp/deploy/images/qemux86-64/xen-qemux86-64.gz tmp/work/qemux86_64-poky-linux/xen-image-minimal/1.0/tmp-wic/hdd/boot/xen.gz returned '1' instead of 0
| output: install: cannot stat 'tmp/deploy/images/qemux86-64/xen-qemux86-64.gz': No such file or directory
|
| WARNING: exit code 1 from a shell command.
ERROR: Task (/media/build/poky/meta-virtualization/recipes-extended/images/xen-image-minimal.bb:do_image_wic) failed with exit code '1'
Add the missing dependency to avoid this.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping upx to version v4.2.4-54-g03c41840, which comprises the following commits:
03c41840 all: misc cleanups
0a82280f cmake update
a7fa2f87 cmake update
3a11a5a8 CI updates
08a38af5 Workaround bug in Alpine Linux
043a54cf all: minor cleanups
16c8f6d1 src: portability updates
285472bc submodules: update for new versions
a77adcd4 src: new ACC version
cebd4392 Fix checksum error de-compressing ELF with large .p_align and small blocksize
64a3de5a FIX PT_GNU_HASH when "empty"
261609f7 CI updates
17cf7300 CI updates
ad566d79 CI updates
b499ed3d CI updates
de8de9c0 Option --unmap-all-pages completely avoids /proc/self/exe
3b36dce5 Mention PT_MIPS_ABIFLAGS forwarding
dcd8dfd5 CI: add zigcc linux-mips soft-float targets
78f3b629 src/pefile.cpp: default to strict reloc checks
a49fe3b0 CI: remove zigcc linux-mips workaround
f23cc7da CI update: remove macos-11 runner
cafd9d7a Sync stub checksums
1b6c1208 64-bit phdrx[], PT_NOTE, PT_GNU_STACK
99afc50e PT_MIPS_ABIFLAGS, PT_MIPS_REGINFO
3286f7c5 De-compression of PT_MIPS_ABIFLAGS
72ccca9f PT_MIPS_ABIFLAGS, compression side only, 32-bit only
3c294d97 all: minor cleanups
1aff5f5b all: misc cleanups
937ae4c5 Avoid crash on outrageous fuzzed input
056865f5 Detect bad placement of LINK segment
c58246b4 Detect compressed length too short
3495d1af all: minor cleanups
b0ce0723 src: fix compilation on older compilers; update tests
9f4d18ba src: yet more constexpr updates
f65c8f8c src: more work on constexpr
e0633b89 CI updates
c3341ce4 src: add support for constexpr bele.h
43f9b90c cmake update
6ee45dcd CI updates
34424672 src: more upx::max cleanups
57763ca1 ELF stubs: go_lang different placement of DT_STRTAB, DT_SYMTAB
40b7e24f src: introduce upx::max and friends; updates for clang-19 git snapshot
9e0f16a6 submodules: update for new versions
33f4f3a5 all: minor clang-tidy cleanups
07a3b75b submodules: update for new versions
bdea2539 cmake: use recommended CMAKE install variables
ed3d7b0c all: minor cleanups
cba44c45 src: introduce ptr_get_address()
07b533f9 submodules: update for new versions
7b0a79de all: update LZMA SDK license information
befd01aa CI updates
1cc26362 submodules: update for new versions
4daa2c1c testsuite: update checksums caused by version bump
7081c575 all: post-release version bump
3757579f all: prepare for release
2962dc35 CI updates
c04c6854 src: restrict upx::atomic_exchange to pointer-size for now
72c97699 src: avoid warnings when compiling with llvm-mingw-nightly
42759b94 all: more clang-tidy cleanups
aa9e69f0 submodules: update for new versions
0f3939df src: pacify clang-tidy
62265a1b fix typos
76b2cec8 src: fix compilation with clang
3d82f0cf src: introduce upx::atomic_exchange; cleanups
e5546bc8 32-bit ELF escape hatch when no fit on last executable page
6fc0a00a all: update for clang-tidy-18
3e5ba5c0 CI updates
4c32a8e3 Fix attempted recovery from corrupted b_info
2ea316d7 Detect sizeofcmds too small
548227a5 mb_dt_offsets.clear() prevents undef from corrupted input
a831a209 unpackExtent detects corrupted compression method
811f66de Check gnu_shift during unpack
84d80632 CI updates
285d4c4c submodules: update for new versions
8506f5b1 testsuite: update checksums caused by version change
a87fd56b all: update version
f0cb30e2 all: minor cleanups
038743c6 CI updates
0e6cef99 Guard against empty PT_NOTE
92c925fe New i386/lzma-multi_d.S enables unpacking more than one block
4562d545 Some non-ELF --lzma stubs assumed only one block, and <= 0.5MiB
8393ded1 CI updates
b0dc4831 CI updates
3c0ca813 CI updates
157a63a0 CI updates
80e22a7e Fix --preserve-build-id
ddf2da3d cmake: run tests in parallel; misc/podman: add 30-rebuild-stubs.sh
0e6478a6 submodules: update for new versions
aed2c085 misc: update mimic_ctest.sh
a7592b2c all: enhance tests
265c1008 PowerPC64 nrv2d decompressor
84e8288f Propagate yesterday's fix to stub decoding on PowerPC
c69b4561 src: initialize some fields to suppress harmless valgrind errors
6db0af8d PowerPC cannot branch on CArry; requires contortions
842d2cbb testsuite: update checksums
9fb64ded Syscall on powerpc linux wipes arg registers, unlike x86_64
9d26713b Add experimental (and undocumented) --help-verbose and --help-short options.
eb3c55b5 all: add more tests
896596f6 cmake update
e4de1461 CI updates
1d2b2764 all: improve tests
35c6a200 CI updates
90a7faa1 CI updates
91f5fe1c arm64 --nrv2d instruction confusion
d48a7d30 Sync checksums for testsuite_1 (-release)
bb816f0c arm64 --nrv2d preserve sign when decoding offset
93abe97e powerpc64le --nrv2d register conflict
97cf29ff all: enhance CMake tests; assorted updates
ed35613d misc/podman/rebuild-stubs: upgrade to ubuntu-24.04
f5ec8363 CI updates
87956de0 CI updates
0f931538 cmake: only enable UBSAN for clang versions >= 9
3538d796 CI updates
24f38245 CI updates and minor cleanups
70b20d7d CI updates
7b21a062 CI updates
3949af6d Unpacking detects and defends against malicious ELF
d1f62e3a testsuite: update checksums caused by version bump
6e644fa4 all: post-release version bump
5bef9680 all: prepare for release
543cfe0a submodules: update for new versions
3ba91b80 cmake update
a27a9e60 all: and yet more cleanups; NFCI
7e839e69 all: more cleanups; NFCI
809a1b3d submodules: update for new versions
9b80628f src/pefile.cpp: support relocs of large files
a21a006f all: yet more minor cleanups
54d16a45 CI updates; cleanups
cfc5f42e testsuite: update checksums caused by version change
e3d24238 all: update version
56e7b369 src: new ACC version
f2979147 all: yet more cleanups
52d9b53b all: minor cleanups
839a78f2 Better fix for previous commit to avoid out-of-bounds pointer.
680ce0a7 find_dt_ndx defends against overrun
06b0de9c CI: work-around zig cc mips bad codegen for hard-float
76b0b7b1 all: clang-format
fabda4df R_PPC64_REL24 is reallly "PC-rel. 26 bit, word aligned:
fdcdaf59 all: pacify clang-tidy, CI and cmake updates
be44cefb CI updates
c1050e62 submodules: update for new versions
ae6d3b9b all: more assorted cleanups
25aa0e2e un_asl_dynsym() should skip when !dynstr
8f7578ee CI: enable valgrind
29ce4807 all: minor updates
41f6945b Fix auxv_up() to avoid SIGSEGV under valgrind
718ec468 all: more assorted cleanups; NFCI
d4298014 Avoid &file_image[file_size] because some Standards object
024091e6 src: fix previous bounds checking commit
d849e9de src: add some bounds checking to MemBufferBase
c0e40da2 more checking of Mach_header when unpacking for MachOS
dff37665 Detect too-large bit-shift in elf_lookup of DT_GNUHASH
2767ec54 more checking of PackUnix::p_info at unpack
ac72c027 check nbucket earlier in DT_HASH on ELF
69c51eee better checking of DT_STRSZ for ELF
ff5a4eeb ELF versus --brute: addStubEntrySections() needs ph_forced_method()
b48f8707 Detect circular DT_HASH and DT_GNUHASH lookup
10807ebd Unpack 8-byte b_info only if (ph.version <= 11): 2001 or earlier
5d649f83 all: assorted cleanups
65b25adc submodules: update for new versions
d615985b elf_find_table_size() did not check for empty table
b0194409 testsuite: update checksums caused by version year bump
38ed4b20 arm32, arm64 ABI for -static must preserve register 0
2ad0d512 PeFile::rebuildImports(): Allow strlen() up to the very end of a logical block
e4a611bc PeFile ::readPeHeader should check ih.subsystem.
f3728d99 Check ph.method in PackMachBase::unpack
b87f60a9 Check Mach_fat_arch.align
28f26da6 Need more care in PackMachBase::canUnpack()
d3e780d6 Unpacking ELF requires e_phnum at least 2
d549c2b5 More care when recovering from slid b_info
f310ce37 Beware fuzzer setting compressed size too small
553fc9b1 invert_pt_dynamic: Compilers differ, unsigned vs. signed
6dde9f7d find_overlay_offset() did not check carefully enough
3dca1175 invert_pt_dynamic() needs better checking for malformed input
09c5e383 arm64-linux.elf ABI owns x0 at execve()?
fe6f1f0b arm64-linux.elf-fold.S typo (eyesight)
250c656b testsuite: update checksums caused by version bump
9a0b5b65 all: remove unused scripts
57b2fb4c all: post-release version bump
099c3d82 all: prepare for release.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libvirt to version v10.5.0-77-ge5232f6fd6, which comprises the following commits:
e5232f6fd6 virt-host-validate: Allow longer list of CPU flags
8f3b46e30b Translated using Weblate (Portuguese (Brazil))
149ffd964b Translated using Weblate (Swedish)
e8c5ecd3cf Translated using Weblate (English (United Kingdom))
6699341d88 docs: use real examples for QEMU cli passthrough
c019350a76 security: AppArmor allow write when os loader readonly=no
65b54e791f tests: Add test for UEFI autoselection on riscv64
a4fbb7bcc7 tests: Add firmware descriptor for edk2 on riscv64
47d34ffb26 qemu: ROM firmware images are always readonly
f13b3f8098 qemu: Filter firmware images by type
b14c97e007 tests: Add more firmware selection coverage
79941dd3c9 tests: Update firmware descriptors
ea6c3ea2d5 qemu: virtiofs: format --rlimit-nofile
562fc02ac1 conf: virtiofs: add rlimit_nofile element
239669049d vmx: Be even more lax when trying to comprehend serial ports
fcf6beaf3d ci: Refresh generated files
3bc3b7220b news: Mention pauth Arm CPU feature
6690b01de2 tests: Add coverage for pauth Arm CPU feature
1ac1e4dae0 cpu_map: Add pauth Arm CPU feature
bec903cae8 qemu: Don't leave beingDestroyed=true on inactive domain
c9fa43c48c virt-host-validate: Drop extra "PASS"
92333a2c4e Translated using Weblate (Swedish)
d94b31a68a qemu: migration: allow migration for virtiofs
8dc04cafec qemu: do not use deprecated options for new virtiofsd
730eaafaac qemu: fill capabilities for virtiofsd
132bf6d89b tests: qemuxmlconf: adjust test case to new virtiofsd
f64e658df0 tests: vhostuser: add virtiofsd json descriptor
6d3955acf1 Include support for Vfio stats during Migration
7a9e9dfb18 network: allow "modify" option for DNS-Txt records
cf934c87cc network: allow "modify" option for DNS-Srv records
09a5d8165c network: allow "modify" option for DNS hostname
619a915862 domain_conf: comment not match the code below
b5c54df901 virt-aa-helper: Drop needless comments
0d3e962d47 security_manager: Remove redundant qemuSecurityGetNested() call
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Revert [1] to enable support for riscv64.
[1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Build is failing during do_configure stage for lxc as meson
does not support --with-systemdsystemunitdir config parameter.
Error:
meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/
Hence, use -Dsystemd-unitdir config parameter instead.
Signed-off-by: Pawan Badganchi <badganchipv@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Borrowed from Leon Anavi <leon.anavi@konsulko.com>
meta-raspberrypi: commit 434ed33c90b7659152b1e8d7c2d4d785db85105f
and from Martin Jansa <martin.jansa@gmail.com>
meta-raspberrypi: commit c39c2b165e68388767f54dc86acf4595a33ee1e1
This adapts to the oe-core rework to enforce a separate directory
for unpacking local sources (UNPACKDIR) instead of directly using
WORKDIR.
Follows the preliminary guideline from:
https://lists.openembedded.org/g/openembedded-architecture/message/2007
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
To fix the final gcc14 errors, we temporarily disable incompatible
type warnings on two python modules.
We also package a new systemd file and account for WORKDIR being
replaced by UNPACKDIR for patches.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
By building rocksdb out of the tree, we can avoid incompatiblity
issues in the API with a dependency.
QAT doesn't build well, so disable it.
Ensure that we are using our python dependencies otherwise pip
will be run at build / package time.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Waiting for ceph releases means a lot of backported patches
and missing bundled dependencies.
We switch to gitsm to make our updates easier.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping umoci to version v0.4.7-224-gff684ba, which comprises the following commits:
3078d6b build(deps): bump github.com/vbatts/go-mtree from 0.5.3 to 0.5.4
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping skopeo to version v1.15.1-8-g80626759, which comprises the following commits:
0002d9ca [release-1.15] Bump to v1.15.2
260f444b [release-1.15] Fixes an interoperability issue while listing tags
cda43af4 [skip-ci] Packit: enable c10s downstream sync
7e81106f Refer to registry.k8s.io instead of k8s.gcr.io
e2ea4269 [release-1.15] Bump to v1.15.1
5267baab [release-1.15] Freeze the fedora-minimal image reference
cd5f7090 [release-1.15] CVE-2024-3727
99e3c448 Bump to v1.15.0
6d6d5b7b chore(deps): update module google.golang.org/protobuf to v1.33.0 [security]
78ddfd9d fix(deps): update module github.com/containers/ocicrypt to v1.1.10
e46c71c3 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
549fc862 chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
cca855ac [CI:DOCS] Migrate skopeo container image
2ffc4ec3 fix(deps): update module github.com/containers/common to v0.58.0
086701bd fix(deps): update module github.com/containers/image/v5 to v5.30.0
96443048 fix(deps): update module github.com/containers/storage to v1.53.0
a80f634f fix(deps): update module golang.org/x/term to v0.18.0
4d80bf8c fix(deps): update github.com/containers/image/v5 digest to faa4f4f
2db09313 Move a go.mod dependency entry to the right section
95f6eac4 Avoid a warning by gopls / VSCode
dbf465d6 fix typo
55abe69d update docs based on review
439dd5f4 docs: make sure that CGO_ENABLED='1'
f0b07848 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
8b6774b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
e294a380 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
c3e2b202 Update c/image after https://github.com/containers/image/pull/2273
8f2a7c65 Also change the MIME type in manifest when decompressing a layer
812a02af Replace decompress-dirs.sh with Go code
09f282e4 Split decompressDir from runDecompressDirs
9fd98112 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.0
122bf968 fix(deps): update module github.com/containers/common to v0.57.4
149fec0a fix(deps): update golang.org/x/exp digest to 1b97071
d77f7153 fix(deps): update module github.com/containers/common to v0.57.3
c941d813 Update github.com/containers/image/v5 to post-v5.29.2 main
b412ed6e Run codespell on code
58ff9fdb fix(deps): update module github.com/containers/storage to v1.52.0
177d4adb add kubasobon:semver changes
4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
e32dfefb Bump to v1.15.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-rc.2-21-g3778ae60, which comprises the following commits:
309a6d91 ci/gha: add go-fix job
a5e660ca seccomp-notify.bats: add fcntl to the important syscall list
e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd"
b18d052b ci/cirrus: switch from CentOS to Almalinux
8b1c0f7e CHANGELOG.md: dedup v1.2.0-rc.2 notes
6980adb6 libct/userns: implement RunningInUserNS with sync.OnceValue
b3b31ff2 libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS
5b09a712 libct/userns: change RunningInUserNS to a wrapper instead of an alias
30b530ca libct/userns: split userns detection from internal userns code
c1421339 remove pre-go1.17 build-tags
5ea76254 VERSION: back to development
f2d2ee5e VERSION: release 1.2.0-rc.2
ee601b87 MAINTAINERS_GUIDE: rm chief maintainer role
d6563f6b MAINTAINERS: move crosbymichael to EMERITUS
ad976aa1 put the changelog of v1.1.13 after v1.2.0-rc.1
4e2d7c0a update changelog after v1.1.13 released
2cb46c6e script/keyring_validate.sh: fix a typo
d6e427e1 runc exec: avoid stuttering in error messages
a6d46ed1 runc exec: improve options parsing
42cea2ec libct: don't allow to start second init process
e3e10725 libct: fix locking in Start/Run/Exec
304a4c0f libct: createExecFifo: rm unneeded os.Stat
e7294527 try to delete exec fifo file when failure in creation
1c505fff Revert "Set temporary single CPU affinity..."
f8f1bc9a Vagrantfile.fedora: bump to F40
77190360 libct/cg: write unified resources line by line
40dd884a MAINTAINERS: add Rodrigo Campos
3019e842 libct/cg: use clear built-in
b7fdd524 libct: use slices package
a1e87f8d libct: rm eaccess
6b2eb52f go.mod,README: require Go 1.21
17380da2 Dockerfile: switch to Go 1.22 and Debian 12
a3302f20 ci: switch to go 1.22 as main version
e660ef61 libct/nsenter: stop blacklisting go 1.22+
24c2d28d fix a debug msg for user ns in nsexec
3083bd44 tests/cgroups: separate cgroup v2 swap test
4209439b libct/cg/fs/v2: ignore setting swap in some cases
dbb011ec tests/int/helpers: fix cgroups_swap check for v2
8626c717 tests/int: fixup find statements
e530b2a6 tests/int/update: fix v2 swap check
024c2711 make trimpath optional
760105ab script/*: fix gpg usage wrt keyboxd
67f6c37b ci/gha: switch to ubuntu 24.04
40bb9c46 ci/cirrus: rm centos stream 8
48c4e733 ci: workaround for centos stream 8 being EOLed
5c5ebe77 tests/int/scheduler: require smp
b24fc9d2 ci: pin codespell
584afc67 libct/system: ClearRlimitNofileCache for go 1.23
b74b33c4 Dockerfile: bump Debian to 12, Go to 1.21
d697725a libct/cg/dev: fix TestSetV1Allow panic
177c7d4f Fix codespell warnings
a35f7d80 fix comments for ClearRlimitNofileCache
6ab3d8ad vendor: golang.org/x/net@v0.24.0
f8052066 libct/cg/fs: fix setting rt_period vs rt_runtime
e5e8f336 .cirrus.yml: rm FIXME from rootless fs on CentOS 7
36be6d05 libct/int: checkpoint test: skip pre-dump if not avail
e42d981d libct/int: rm double logging in checkpoint_test
62a31465 libct/int/cpt: simplify test pre-check
e676dac5 libct/criu: simplify checkCriuFeatures
f6a8c9b8 libct: checkCriuFeatures: return underlying error
4ea0bf88 update/add some tests for rlimit
da68c8e3 libct: clean cached rlimit nofile in go runtime
a853a826 runc exec: setupRlimits after syscall.rlimit.init() completed
f452f667 ci/gha: bump golangci-lint-action from 5 to 6
bac50646 libct: fix a comment
dbd0c334 libct/system: rm Execv
9d9273c9 allow overriding VERSION value in Makefile
75e02193 use go mod instead of go get in spec.bats
b032fead libct/cg/fs: don't write cpu_burst twice on ENOENT
6bf1d3ad tests/int/tty: increase the timeout
8732eada Vagrantfile.fedora: bump Fedora to 39
d63018c2 ci/gha: bump golangci-lint to v1.57
0eb8bb5f Format sources with gofumpt v0.6
6bcc7361 ci/gha: bump golangci/golangci-lint-action to v5
baba55e2 ci/actuated: re-enable CRIU tests
f6b7167b tests/int/checkpoint: add requires criu_feature_xxx
e5c82f00 tests/int/checkpoint: rm double logging
00238f5d CI: add actuated-arm64
758b2e2b helpers.bats: cgroups_cpu_burst: check kernel version
d618c6fe cgroups.bats: check cgroups_io_weight
053f6a0d seccomp_syscall_test1: use ftruncate instead of kcmp
30dc98f5 CI: run apt with -y
4f3319b5 libct: decouple libct/cg/devices
afc23e33 Set temporary single CPU affinity before cgroup cpuset transition.
cde1d090 libcontainer: force apps to think fips is enabled/disabled for testing
6b1f7308 tests/integration: Fix remount on debian testing
5052c075 tests/integration/mounts_sshfs.bats: Fix test on debian testing
e4bf49ff runc update: distinguish nil from zero
afcb9c2e add a test case for runc update cpu burst
5194bd8d VERSION: back to development
275e6d85 VERSION: release v1.2.0-rc.1
fc3e04dc changelog: update to include all new changes since 1.1.0
b47fb3fd changelog: sync changelog entries up to runc 1.1.12
d4b670fc changelog: mention key breaking changes for mount options
851e3882 ci/test: exclude some runc_nodmz jobs
e377e168 [hotfix] nsenter: refuse to build with Go 1.22 on glibc
ac31da6b ci/cross-i386: pin Go to 1.21.x
bfbd0305 Add I/O priority
ccc500c4 seccomp: patchbpf: always include native architecture in stub
b288abea seccomp: patchbpf: rename nativeArch -> linuxAuditArch
ab6788d3 Remove dependabot ignore
cdccf6d6 build: update libseccomp to v2.5.5
da79b616 fix runc-dmz bin path error in Makefile
37581ad3 dmz: remove SELinux special-casing
eefc6ae2 features: implement returning potentiallyUnsafeConfigAnnotations list
606251ab build(deps): bump github.com/opencontainers/runtime-spec
bb5673f2 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
7ab66b18 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
6056ed2d build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
fc76b136 Makefile: Fix runc-dmz removal
46b72107 contrib/cmd/memfd-bind: Mention runc-dmz needs RUNC_DMZ=true
1dae66f7 libct/dmz: Require RUNC_DMZ=true to opt-in
935d586b build(deps): bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1
86360598 tests/int: fix flaky kill tests
82499d42 Fixed spelling mistake in the Makefile at .PHONY vendor
93e37723 ci/golangci-lint: add checks permission
302b2e89 tests/int: use gawk where needed
3a9859bd libct/nsenter: rm unused include
ea140db7 libct/nsenter: rm unused code
27cbabd0 build(deps): bump golangci/golangci-lint-action from 3 to 4
afd90f44 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
97632a6d build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4
174940a7 build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0
a596a055 update go version to 1.21 in cirrus ci
bc4a869d test: no execve error msg synced to parent process
d0750587 close the sync pipe explicitly in exec
0bc4732c test for execve error without runc-dmz
35aa63ea never send procError after the socket closed
d8edada9 init: don't special-case logrus fds
ee73091a libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
89c93ddf cgroup: plug leaks of /sys/fs/cgroup handle
f2f16213 init: close internal fds before execve
8e1cd2f5 init: verify after chdir that cwd is inside the container
7094efb1 init: use *os.File for passed file descriptors
093c83e1 keyring: update AkihiroSuda key expiry
34eceb21 keyring: update cyphar@cyphar.com key expiry
fe95a2a0 tests/integration: Test exec failures
8afeccc8 libct/dmz: Print execve() errors
b1e3c3c7 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0
2a473a76 Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check
e1e3ca02 build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
68438ba2 fix scheduler validate
55c9d6bf we have implemented idmapped-mounts with no limitations
e90d8cb8 we have supported rsvd hugetlb cgroup
a7c3e07c libct: Improve error msg when idmap is not supported
43306be3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
5a4f5217 script/check-config.sh: check CONFIG_BLK_CGROUP_IOCOST
d87366f0 scripts/check-config: fix kernel version checks
7f65cc75 script/check-config.sh: check CONFIG_CHECKPOINT_RESTORE
6aa4c1a1 script/check-config: disable colors
b94b5590 scripts/check-config: don't check MEMCG_SWAP on newer kernels
3f4a73d6 TestCheckpoint: skip on ErrCriuMissingFeatures
c8113085 remove remap-rootfs bin when running make clean
0bbb7e9f move the target 'clean' next to 'all'
d08ba9ca fix a (u|g)IDMappings type value convertion error
7b655782 build(deps): bump actions/upload-artifact from 3 to 4
482e5637 configs: make id mappings int64 to better handle 32-bit
fa93c8b0 tests: mounts: add some tests to check mount ordering
3b57e45c mount: add support for ridmap and idmap
7795ca46 specconv: handle recursive attribute clearing more consistently
cdff09ab rootfs: fix 'can we mount on top of /proc' check
8e8b136c tree-wide: use /proc/thread-self for thread-local state
a04d88ec vendor: update to github.com/moby/sys/mountinfo@v0.7.1
5ae88daf idmap: allow arbitrary idmap mounts regardless of userns configuration
ba0b5e26 libcontainer: remove all mount logic from nsexec
ebcef3e6 specconv: temporarily allow userns path and mapping if they match
e66ba70f build(deps): bump actions/setup-go from 4 to 5
c045886f tests: remap rootfs for userns tests
6fa8d068 integration: add mega-test for joining namespaces
e6fb7fe5 nsexec: allow timens to work with non-rootless userns
09822c3d configs: disallow ambiguous userns and timens configurations
3bab7e92 configs: clean up error messages for Host[UG]ID
9387eac3 init: don't pre-flight-check the set[ug]id arguments
1912d598 *: actually support joining a userns with a new container
88411747 tests: integration: fix spurious SC203[01] shellcheck errors
c25493fc build(deps): bump golang.org/x/net from 0.17.0 to 0.19.0
b2782965 build(deps): bump golang.org/x/sys
a6f40817 libct: Destroy: don't proceed in case of errors
ab3cd8d7 runc delete, container.Destroy: kill all processes
7396ca90 runc delete: do not ignore error from destroy
d3d7f7d8 libct/cg: improve cgroup removal logic
29283bb7 runc delete -f: fix for no pidns + no init case
dcf1b731 runc kill: fix sending KILL to non-pidns container
542cce01 libct: Signal: slight refactor
d9f2a24a libct: replace runType with hasInit
94505a04 *: introduce pidfd-socket flag
3bde5111 fix some unit test error after bump ebpf to 0.12.3
b2f7614a bump github.com/cilium/ebpf from 0.12.2 to 0.12.3
823636c3 ci/cirrus: disable selinux-dmz kludge for centos-stream-8
9d8fa6d6 libcontainer: dmz: fix "go get" builds
669f4dbe configs: validate: add validation for bind-mount fsflags
4bf8b555 libct: Remove old comment
87bd7846 Add dmz-vs-selinux kludge and a way to disable it
393c7a81 README: fix reference to memfd-bind
b39781b0 tests/int: add selinux test case
b2539a7d libct/cg: skip TestWriteCgroupFileHandlesInterrupt on CentOS 7
a2f7c6ad internal/testutil: create, add SkipOnCentOS
2c9598c8 libct/cgroups.OpenFile: clean "file" argument
98511bb4 linux: Support setting execution domain via linux personality
6d279220 tests/int: fix flaky "runc run with tmpfs perm"
104b8dc9 libct/cg: add swapOnlyUsage in MemoryStats
7c71a227 rootfs: remove --no-mount-fallback and finally fix MS_REMOUNT
153865d0 tests/int: fix teardown in mounts_sshfs.bats
7f5daa88 libct/cg/fs.Set: fix error message
5ea7c60f tests/int: fix cgroup tests
bbf8eff8 tests/int: fix "runc run (hugetlb limits)"
d60d17a6 build(deps): bump github.com/cilium/ebpf from 0.12.1 to 0.12.2
9cd5d6cd libct/cg: remove retry on EINTR in
54d38c61 build(deps): bump github.com/cilium/ebpf from 0.12.0 to 0.12.1
f944d7b6 ci/gha: fix downloading Release.key
b6a0c483 libct/dmz: Support compiling on all arches
4a7d3ae5 libct/cg: support hugetlb rsvd
aec0dc7d build(deps): bump github.com/cilium/ebpf from 0.11.0 to 0.12.0
6f7266c3 libcontainer: drop system.Setxid
2860708d build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
b8f75f39 Makefile: move .PHONY to before each target
bdf78b44 libct/cg/dev: add sync.Once to test case
46bfcac8 Makefile: avoid calling sub-make
961d0f12 Makefile: make verify-dmz-arch less talkative
fa8f3817 ci: skip TestPodSkipDevicesUpdate on CentOS 7
927a5836 build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
0ab58aa2 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
730bc844 Fix directory perms vs umask for tmpcopyup
770728e1 Support `process.scheduler`
efbebb39 libct: rename root to stateDir in struct Container
c89faacc libc: rm _LIBCONTAINER_STATEDIR
6538e6d0 libct: fix a typo
109dcadd fix two typos
f755c808 libct/cg/stats: support misc for cgroup v2
2e2ecf29 libct: use chmod instead of umask
4b3b7e99 docs/spec-conformance: update
531e29e1 script/lib.sh: set GOARM=5 for armel, GOARM=6 for armhf
90606665 docs: clarify the supported architectures (No MIPS)
9976be86 libct/dmz: Move comment out of the Makefile rule
90f5da65 libct/dmz: Reduce the binary size using nolibc
8da42aae sync: split init config (stream) and synchronisation (seqpacket) pipes
ccc76713 sync: rename procResume -> procHooksDone
99469eba Handle kmem.limit_in_bytes removal
90c8d36a dmz: use sendfile(2) when cloning /proc/self/exe
f8348f64 tests: integration: add runc-dmz smoke tests
6be763ee tests: integration: fix capability setting for CAP_DAC_OVERRIDE
b9a4727f contrib: memfd-bind: add helper for memfd-sealed-bind trick
dac41717 runc-dmz: reduce memfd binary cloning cost with small C binary
e089db3b dmz: add fallbacks to handle noexec for O_TMPFILE and mktemp()
0e9a3358 nsexec: migrate memfd /proc/self/exe logic to Go code
321aa20c scripts: add proper 386 and amd64 target triples and builds
d9ea71bf deprecate libcontainer/user
ca32014a migrate libcontainer/user to github.com/moby/sys/user
65a1074c increase memory.max in cgroups.bats
b17c6f23 validator: Relax warning for not abs mount dst path
c378602b libct/specconv: remove redundant nil check
c7ad2749 build(deps): bump github.com/cyphar/filepath-securejoin
e1584831 libct/cg: add CFS bandwidth burst for CPU
1fe9447f build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
2d0cd0b3 build(deps): bump actions/checkout from 3 to 4
d8e9ed3e libcontainer/userns: simplify, and separate from "user" package.
5f05b96e build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
937ca107 Fix File to Close
e8525238 tests/int: add a test for host mntns vs hooks
41778ddc Fix for host mount ns containers
fe6f33b2 build(deps): bump tim-actions/commit-message-checker-with-regex
0f3eeb9b tests/int: add failed hooks tests
cadf0a14 tests/int: rename hooks.bats to hooks_so.bats
6a4870e4 libct: better errors for hooks
f62f0bdf Remove nolint annotations for unix errno comparisons
17e7e230 ci/gha: bump golangci-lint to v1.54
b3e97214 Add issue reference to nolint annotation
cc7e607a features: Expose idmap support
671e211e vendor: Update runtime-spec to expose mountExtensions
b22073c5 ci/gha: add job timeouts
1f25724a configs: fix idmapped mounts json field names
8aa97ad3 nsexec: remove cgroupns special-casing
5c7839b5 rootfs: use empty src for MS_REMOUNT
20b95f23 libcontainer: seccomp: pass around *os.File for notifyfd
f81ef149 libcontainer: sync: cleanup synchronisation code
c6e7b1a8 libct: initProcess.start: fix sync logic
b0c7ce51 makefile: quote TESTFLAGS when passing to containerised make
aa5f4c11 tests: add several timens tests
9acfd7b1 timens: minor cleanups
46d6089f ci/gha: re-enable go caching
5741ea23 ci: add go 1.21, remove go 1.19
ec2ffae5 libct: Allow rel paths for idmap mounts
19d26a65 Revert "libct/validator: Error out on non-abs paths"
61a454cc build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
883aef78 libct/init: unify init, fix its error logic
789a73db init.go: move logger setup to StartInitialization
0d890ad6 nsenter: cloned_binary: use MFD_EXEC and F_SEAL_EXEC
b999376f nsenter: cloned_binary: remove bindfd logic entirely
38676931 criu: do not add log file into error message
c77aaa3f criu checkpoint/restore: print errors from criu log
e4478e9f criuSwrk: simplify switch
cb981e51 libct: move criu-related stuff to separate file
f88a7654 ci: fix flaky test "update memory vs CheckBeforeUpdate"
5c6b334c ci: fix TestOpenat2 when no systemd is used
962019d6 ci: fix TestNilResources when systemd not available
cfc801b7 Fix running tests under Docker/Podman and cgroup v2
ebc2e7c4 Support time namespace
83137c68 add a test case about missing stricky bit
6092a4b4 fix some file mode bits missing when doing mount syscall
06882888 contrib/fs-idmap: Move logic to a new function
855c5a0e contrib/fs-idmap: Don't hardcode sleep path
882e5fe3 contrib/fs-idmap: Check exactly 2 args are received
821d0018 contrib/fs-idmap: Remove not needed flags
7d2becdf libct/cg/fs2: use `file` + `anon` + `swap` for usage
99340bb0 contrib/fs-idmap: Reap childs
c537cb3d build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
70f4e46e utils: use close_range(2) to close leftover file descriptors
57f31c68 libct/nsenter: Show better errors for idmap mounts
701dff79 libct/cg/sd: use systemd v240+ new MAJOR:* syntax
da780e4d Fix bind mounts of filesystems with certain options set
237acdd8 add some important announcements in unreleased section
c875ea85 use the length of UIDMappings/GIDMappings to check whether empty or not
d9494fc6 CHANGELOG: forward-port 1.1.6-1.1.8 changes
11b6c9b6 build(deps): bump github.com/opencontainers/runtime-spec
a3785c88 Remove idmapFD field for mountEntry
46ada59b Use an *int for srcFD
c47f58c4 Capitalize [UG]idMappings as [UG]IDMappings
f92057aa tests/int: update set_cgroups_path doc
19f76b66 tests/int/ps: enable for rootless
867ee905 docs: Update spec conformance for idmap mounts
b460dc39 tests/integration: Add tests for idmap mounts
fda12ab1 Support idmap mounts on volumes
98317c16 ci: bump golangci-lint, remove fixed exception
fe4528b1 libcontainer: Just print the mountFds slice len on errors
73b64970 libcontainer: Add mountFds struct
0172016a libcontainer: Add generic parseFdsFromEnv()
f5814a10 libcontainer: Add generic sendFdsSources()
96bd4875 nsenter: Add idmap helpers
5166164d nsexec: Add generic receive_sources()
4b668a82 Switch setupUserNamespace() to use the toConfigIDMap() helper
fbf183c6 Add uid and gid mappings to mounts
83418f88 build(deps): bump github.com/cilium/ebpf from 0.10.0 to 0.11.0
2c844977 build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0
881e92a3 libct/validator: Error out on non-abs paths
45c75ac7 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
017d6996 libct/nsenter: namespace the bindfd shuffle
3b191ff7 libct/nsenter: set FD_CLOEXEC on received fd
8f671781 libct/nsenter: refactor ipc funcs for reusability
890dceee libct/nsenter: annotate write_log() prototype
35fddfd2 chore(libct/nsenter): extract utility code
37732d1e MAINTAINERS: add Li Fu Bang
ad040b1c tests/int/delete: make sure runc delete removes failed unit
58a811f6 tests/int: add/use "requires systemd_vNNN"
43564a7b runc delete: call systemd's reset-failed
91b4cd25 libct/cg/sd: remove logging from resetFailedUnit
dacb3aaa tests/int/cgroups: remove useless/wrong setting
5cdf7671 libct/cg: IsCgroup2UnifiedMode: don't panic
5e53e659 ci: bump shellcheck to 0.9.0, fix new SC2016 warnings
a57d94d3 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0
9fa8b9de Fix tmpfs mode opts when dir already exists
eb55472e Fix integration tests failure when calling "ip"
a52efc1f build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0
e3627658 .codespellrc: update for 2.2.5
c9209fd2 ci/gha: don't skip rootless+systemd on ubuntu 22.04
1aa7ca80 libct/cg/stats: support PSI for cgroup v2
bc390b2e build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0
73b5dc02 docs/systemd: fix a broken link
62963fef libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.
0ac3376c go.mod: runtime-spec v1.1.0-rc.3
78d31a49 ci/cirrus: enable rootless tests on cs9
41e04aa6 tests/int: rename a variable
e83ca519 tests/int/cgroups: filter out rdma
31e3c229 build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
7d09ba10 libct: implement support for cgroup.kill
f8ad20f5 runc kill: drop -a option
9583b3d1 libct: move killing logic to container.Signal
2a7dcbbb libct: fix shared pidns detection
5b8f8712 libct: signalAllProcesses: remove child reaping
e0e8d9c8 tests/int/kill: add kill -a with host pidns test
67bc4bc2 tests/rootless.sh: drop set -x
fed0b124 tests/int: increase num retries for oom tests
5929b019 ci/gha: add space-at-eol check, fix existing issues
511c7614 man/runc: fixes
bb4dbbc4 ci/cirrus: limit numcpu
650efb2c Fix Vagrant caching
b9d2d8d8 build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
7e481ee2 libct/int: remove logger from init
eba31a7c libct/StartInitialization: rename returned error
4f0a7e78 libct/init: call Init from containerInit
72657eac libct: move StartInitialization
2a347045 build(deps): bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0
62cc13ea gha: disable setup-go cache for golangci job
083e9789 ci/gha: rm actions/cache from validate/deps job
da5cdfed ci/gha: fix cross-i386
b32655d2 ci/gha: rm kludges for cross-i386 job
f6c393da features: graduate from experimental
6beb3c6a go.mod: runtime-spec v1.1.0-rc.2
882a2cc8 build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0
02afa9f1 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
a60933bb libct/rootfs: introduce and use mountEntry
976748e8 libct: add mountViaFDs, simplify mount
5a177463 deps: bump urfave/cli
20e38fb2 init: do not print environment variable value
5f6aafb3 libct: document process.LogLevel field
defb1cc7 libct/cg/dev: optimize and test findDeviceGroup
13091eee ci: bump bats 1.8.2 -> 1.9.0
a1920009 Vagrantfile.fedora: bump to 38
33b6ec29 ci/cirrus: use vagrant from hashicorp repo
14d6c7df runc.keyring: add Akihiro Suda
d7208f59 libct/cg/sd: use systemd version when generating dev props
cfc3c6da scripts: keyring validate: print some more information
a7583103 runc.keyring: add Kolyshkin
42a10919 runc-kill(8): amend the --all description
fe278b9c libct: fix a race with systemd removal
056ec0ca keyring: add Aleksa's <cyphar@cyphar.com> signing key
0c9c60aa keyring: add Aleksa's <asarai@suse.com> signing key
22538f89 keyring: verify runc.keyring has legitimate maintainer keys
957bccfe scripts: release: add verification checks for signing keys
87214947 release: add runc.keyring file and script
d9230602 Implement to set a domainname
6053aea4 Fix undefined behavior. Do not accept setjmp return value as variable.
953e1cc4 ci/gha: switch to or add ubuntu 22.04
439673d5 build(deps): bump golang.org/x/net from 0.8.0 to 0.9.0
fd1a79ff ci/cirrus: improve host_info
873d7bb3 ci/cirrus: use Go 1.19.x not 1.19
611bbacb libct/cg: add misc controller to v1 drivers
9b71787b tests/int: fix some checks
9dbb9f90 ci: bump bats 1.3.0 -> 1.8.2
a6e95c53 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
fd5debf3 libct/cg: rm GetInitCgroup[Path]
1034cfa8 build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
ed9651bc libct/cg/sd: support setting cpu.idle via systemd
b5ecad7b tests/int/update: test bad cpu.idle values
3ffbd4c8 tests/int: fix update cpu.idle failure on CS9
509b312c libct/cg/sd/v2: unifiedResToSystemdProps nit
82bc89cd runc run: refuse a non-empty cgroup
1d18743f libct/cg/sd: reset-failed and retry startUnit on UnitExists
c2533420 libct/cg/sd: ignore UnitExists only for Apply(-1)
c6e8cb79 libct/cg/sd: refactor startUnit
9f32ce6a CHANGELOG: forward-port 1.1.4 and 1.1.5 changes
73acc77b libct/cg: rm EnterPid
4ff49046 Makefile: add verify-changelog as release dependency
b2fc0a58 verify-changelog: allow non-ASCII
370e3be2 tests/int/mounts: only check non-shadowed mounts
a37109ce tests/int/mount: fix issues with ro cgroup test
8293ef2e tests/int: test for CAP_DAC_OVERRIDE
8491d334 Fix runc run "permission denied" when rootless
99a337f6 Dockefile: bump go go 1.20
da98076c mountToRootfs: minor refactor
54e20217 libctr/cgroups: don't take init's cgroup into account
a7a836ef libct/cg/dev: skip flaky test of CentOS 7
65df6b91 fix wrong notes for `const MaxNameLen`
9d45ae8d tests: Fix fuzzer location in oss-fuzz config
0d72adf9 Prohibit /proc and /sys to be symlinks
8f0d0c4d build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0
cecb039d nsexec: retry unshare on EINVAL
e3cf217c build(deps): bump actions/setup-go from 3 to 4
a7046b83 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1
df4eae45 rootless: fix /sys/fs/cgroup mounts
afeffb7e .github/ISSUE_TEMPLATE/config.yml: fix contact links
7d940bdf Add `.github/ISSUE_TEMPLATE/config.yml`
6b41f8ed build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
6faef164 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
7b4c3fc1 Add support for umask when exec container
f2e71b08 libct/int: make TestFdLeaks more robust
be7e0394 libct/int: wording nits
7c75e84e libc/int: add/use runContainerOk wrapper
97ea1255 Fix runc crushes when parsing invalid JSON
b3b0bde6 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
2e44a202 Makefile: fix typo in LDFLAGS_STATIC
92a4ccb8 specconv: avoid mapping "acl" to MS_POSIXACL
2adeb6f9 nsexec: Remove bogus kill to stage_2_pid
4d0a60ca tests: Fix weird error on centos-9
2ca3d230 nsexec: Add debug logs to send mount sources
e412b4e8 docs: add docs/spec-conformance.md
787fcf09 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1
fbfc6afe tests: add tests for capabilities
bc8d6e3b build(deps): bump github.com/opencontainers/selinux
0e1346fe build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0
42dffaaa Dockerfile: fix build wrt new git
14e3ce9e build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
1bb6209a tests/int: test for /dev/null owner regression
7e5e017d libcontainer: skip chown of /dev/null caused by fd redirection
5ecd40b9 Add Go 1.20, require Go 1.19, drop Go 1.18
81ca678f Disable clang-format
81c379fa support SCHED_IDLE for runc cgroupfs
5ce511d6 nsexec: Check for errors in write_log()
3fbc5ba7 ci: add tests/int/get-images.sh check
6d28928c Explicitly pin busybox and debian downloads
e29e57b5 libcontainer: configs: ensure can build on darwin
cc63d074 build(deps): bump github.com/cilium/ebpf from 0.9.3 to 0.10.0
6676f980 tests/integration/get-images.sh: fix busybox.tar.xz URL
eacada76 build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0
0ac98807 libct/cg/sd: stop using regex, fix systemdVersionAtoi
b44da4c0 libct: validateID: stop using regexp
15677e7b ci: fix delete.bats for GHA
c4aa452b tests/int/checkpoint: fix lazy migration flakiness
68352878 man/runc-restore: describe restore into different cgroup
d4582ae2 tests/int: add "--manage-cgroups-mode ignore" test
e8cf8783 libct/criuApplyCgroups: add a TODO
3438ef30 restore: fix --manage-cgroups-mode ignore on cgroup v2
212d25e8 checkpoint/restore: add --manage-cgroups-mode ignore
ff3b4f3b restore: fix ignoring --manage-cgroups-mode
4f2af605 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
19a9d9fc tests/int: use runc features in seccomp flags test
ac04154f seccomp: set SPEC_ALLOW by default
076745a4 runc features: add seccomp filter flags
ab848089 types/features: fix docstrings
8e9128ff Vagrantfile.fedora: upgrade Fedora to 37
9fc707e7 Fixed init state error variable
067ca8f5 notify_socket.go: use sd_notify_barrier mechanism
ee88b900 notify_socket.go: avoid use of bytes.Buffer
313723fd fix libcontainer example
9f383793 build(deps): bump golang.org/x/net from 0.1.0 to 0.2.0
467dd234 build(deps): bump golang.org/x/sys from 0.1.0 to 0.2.0
e0d3c3e0 build(deps): bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
783f9ffe runc checkpoint: destroy only on success
79aedac1 go.mod: golang.org/x/*: use tagged versions
6462e9de runc update: implement memory.checkBeforeUpdate
56edc41c ci: bump shfmt to 3.5.1, simplify CI setup
18f8f482 Fix comment of signalAllProcesses for process wait due to sigkill
2cd05e44 libct/seccomp/patchbpf: rm duplicated code
fbce47a6 deps: bump github.com/checkpoint-restore/go-criu to 6.3.0
b265d128 libct/seccomp: enable binary tree optimization
65840f64 tests/int/seccomp: fix flags test on ARM
6bf2c3b6 ci/gha: use v3 tag for actions/cache
a04363c1 build(deps): bump actions/cache from 3.0.10 to 3.0.11
4a8750d9 tests/int: add a "update cpuset cpus range via v2 unified map" test
77cae9ad cgroups: cpuset: fix byte order while parsing cpuset range to bits
462e719c Fixes inability to use /dev/null when inside a container
04389ae9 libcontainer/cgroups: return concrete types
ae53cde3 cirrus-ci: install EPEL on CentOS 7 conditionally
8584900e build(deps): bump actions/cache from 3.0.9 to 3.0.10
1be5d45d build(deps): bump github.com/cilium/ebpf from 0.9.1 to 0.9.3
79a5c110 build(deps): bump actions/cache from 3.0.8 to 3.0.9
da9126f7 build(deps): bump github.com/opencontainers/selinux
7189ba8d build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
491713e8 cirrus-ci: enable EPEL for CentOS 7
4e65118d tests/int/helpers: gawk -> awk
0ffb49db tests/int: suppress bogus error
6fce0a1c build(deps): bump github.com/checkpoint-restore/go-criu/v6
e965e10c tests/int: do not set inheritable capabilities
29a28848 Add check for CONFIG_CGROUP_BPF in check-config.sh
746f4580 deps: bump go-criu to v6
45041985 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
26dc55ef seccomp: fix flag test to actually check the value
c7dc8b1f libct/seccomp/patchbpf: support SPEC_ALLOW
8206f5b2 build(deps): bump actions/cache from 3.0.7 to 3.0.8
58b1374f Fix failed exec after systemctl daemon-reload
df9e32bc ci: fix for codespell 2.2
b7dcdcec Add go 1.19, require go 1.18, drop go 1.17
0f4bf2c8 ci/gha: bump golangci-lint to 1.48
45cc290f libct: fixes for godoc 1.19
bf8d7c71 build(deps): bump actions/cache from 3.0.5 to 3.0.7
589a9d50 ci/gha: fix cross-386 job vs go 1.19
450dd3e2 build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.28.1
6d00bf6c build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
ea0bd782 libct/intelrdt: check if available iff configured
56daf36b libct/intelrdt: skip remove unless configured
c156bde7 libct/intelrdt: elide parsing mountinfo
9f107489 libct/intelrdt: skip reading /proc/cpuinfo
13674f43 libct/intelrdt: delete IsMBAScEnabled()
d9a3acb9 build(deps): bump github.com/cilium/ebpf from 0.9.0 to 0.9.1
58ea21da seccomp: add support for flags
c152e831 go.mod: update runtime-spec
4fd4af5b CI: workaround CentOS Stream 9 criu issue
5fd3d09e build(deps): bump actions/cache from 3.0.4 to 3.0.5
66bf3718 tests: replace local hello world bundle with busybox bundle
e119db7a tests: enable seccomp default action tests on arm
d2a5acd2 CHANGELOG.md: forward-port 1.1.x changes
957d97bc Fix error from runc run on noexec fs
086ddb15 Vagrantfile.fedora: upgrade Fedora to 36
35e6c3bf libct/nsenter: switch to sane_kill()
7481c3c9 ci: bump golangci-lint to 1.46
66625701 libct: fix staticcheck warning
d370e3c0 libct: fix mounting via wrong proc fd
c0be1aa2 export blockIODevice
56fcc938 Switch to newer v0.10.0 release of libseccomp-golang
cc0feb4b build(deps): bump actions/cache from 3.0.2 to 3.0.4
5ed3fdff build(deps): bump github.com/moby/sys/mountinfo from 0.6.1 to 0.6.2
343951a2 cgroups: systemd: skip adding device paths that don't exist
03a210d0 libcontainer: relax getenv_int sanity check
72ad2099 docs/cgroup-v2.md: update the distro list
65f41d57 vendor: bump urfave/cli, add urfave_cli_no_docs tag
e0406b4b vendor: bump cilium/ebpf to v0.9.0
6b96cbdd ci: improve shellcheck job
e1d04cdf script/seccomp.sh: check tarball sha256
fbafaf31 ci: drop docker layer caching from release job
f7b07fd5 Dockerfile,scripts/release: bump libseccomp to v2.5.4
6a79271c seccomp: patchbpf: minor cleanups
be6488a5 seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
0ca0bb9f libct/cg/sd: check dbus.ErrClosed instead of isDbusError
47e09976 libct/cg/dev: privatize some functions
b6967fa8 Decouple cgroup devices handling
25f18562 libct/cg/sd: factor out devices.go
d1601160 libct: use `unix.Getwd` instead of `os.Getwd` to avoid symlink
cab38885 go.mod: golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5
a14cc405 release: add riscv64 binary
1d7b2971 libct/seccomp: add riscv64
dafcacb5 Makefile: set CGO_ENABLED=1 when needed
21e32d47 Makefile: add support for static PIE
ab5c60d0 Makefile: fix GO_BUILDMODE setting
f2f6e599 Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC
f0f1b5f9 Dockerfile: don't use crossbuild-essential-*
476aa18a Dockerfile: rm dpkg --add-architecture lines
d542ad65 Dockerfile: nit
98fe566c runc: do not set inheritable capabilities
009e627c Vagrantfile.fedora: fix build wrt new git
4d3e52f2 tests/int: fix a bad typo
2ce40b6a Remove tun/tap from the default device rules
68427f33 libct/seccomp/config: add missing KillThread, KillProcess
df2bc138 vendor: bump seccomp/libseccomp-golang to f33da4d
29a56b52 fix deprecated ActKill
9c710564 vendor: bump urfave/cli to v1.22.6
fa83a17c ci/gha: convert lint-extra from a job to a step
de25777a build(deps): bump github.com/moby/sys/mountinfo from 0.6.0 to 0.6.1
d73579ca build(deps): bump actions/cache from 3.0.1 to 3.0.2
66be704d ci/gha: remove stable: when installing Go
b6eb9476 build(deps): bump actions/upload-artifact from 2 to 3
9d2268b9 build(deps): bump actions/setup-go from 2 to 3
b76b6b93 Allow mounting of /proc/sys/kernel/ns_last_pid
67e06706 ci/gha: limit jobs permissions
7260bae6 build(deps): bump actions/cache from 2 to 3.0.1
ae6cb653 man/*sh: fix shellcheck warnings, add to shellcheck
cacc8237 ci: add call to check-config.sh
5d1ef78c script/check-config.sh: enable set -u, fix issues
d66498e7 script/check-config.sh: fix remaining shellcheck warnings
baa06227 script/check-config.sh: fix SC2166 warnings
dc73d236 script/check-config.sh: fix wrap_color usage
6b16d005 shfmt: add more files
01f30162 ci/gha: run on main branch
d77f898f build(deps): bump github.com/opencontainers/selinux
52229286 libct/specconv: use a local variable in CreateCgroupConfig()
d0c89dfa libct/cg: IsCgroup2HybridMode: don't panic
82bc042d build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0
d620a401 tests/int: remove $ROOTLESS, use $EUID
d330f94b tests/int/update.bats: fix extra reqs
a2123baf tests/int: replace CGROUP_UNIFIED with CGROUP_V{1,2}
25ef852a tests/int: use = in test for strings comparison
102b8abd libct: rm BaseContainer and Container interfaces
6a3fe161 libcontainer: remove LinuxFactory
6a29787b libct/factory: make some methods functions
8358a0ec libct: StartInitialization: decouple from factory
a78c9a01 libct: remove Factory interface
71bc308b libct/New: remove options argument
b6514469 libct: remove TmpfsRoot
87cf5d20 CI/cirrus: add centos-stream-9
a0f8847e Drop go 1.16
5211cc3f Add / switch to Go 1.18
7cec81e0 libct: suppress strings.Title deprecation warning
fcab941e ci: switch to golangci-lint 1.45
3618079c README.md: add cirrus-ci badge
f309a69a README,libct/README: fix pkg.go.dev badges
48006d00 libct/configs/validate: rootlessEUIDMount: speedup
a99f82ad tests: Add comment to clarify intent of seccomp-notify tests
9f9acd1a tests: Improve name of seccomp notify test
728571c1 tests/int: runc delete: fix flake, enable for rootless
f7637def ci: use golangci-lint-action v3, GO_VERSION
f7d46134 ci: bump golangci-lint to v1.44
89733cd0 Format sources using gofumpt 0.2.1
a43485c9 build(deps): bump actions/checkout from 2 to 3
1a935208 libct/cg/sd: simplify DetectUserDbusSessionBusAddress
11895cd0 libct/cg/sd: escape dbus address value
38c21694 tests/integration/helpers: set -u
c8c3e852 tests: fix checks for non-existent variables
99d5c023 tests/int/{root,list}.bats: ALT_ROOT fixups in teardown
7da77d80 tests/int: don't add --root if $ROOT is not set
9e2a0463 tests/int: fix runc_spec for set -u
ab9609db build(deps): bump github.com/godbus/dbus/v5 from 5.0.6 to 5.1.0
8c04b981 libct/cg/sd/v2: fix ENOENT on cgroup delegation
01f00e1f ensure the path is a sub-cgroup path
40b00886 loadFactory: remove
d1fca8e5 list: report error when non-existent --root is specified
2b07e751 reviseRootDir: skip default values, add validation
899342b5 main: improve XDG_RUNTIME_DIR handling
eb2f08dc checkpoint,restore,list: don't call fatal
36786c36 list, utils: remove redundant code
1d5c3310 configs/validate: looser validation for RDT
0f0f1f61 build(deps): bump github.com/cilium/ebpf from 0.8.0 to 0.8.1
be00ae07 ci: shellcheck: update to 0.8.0, fix/suppress new warnings
0b74e49d runc run/exec: ignore SIGURG
24ab543f build(deps): bump github.com/moby/sys/mountinfo from 0.5.0 to 0.6.0
dbd990d5 libct: rm intelrtd.Manager interface, NewIntelRdtManager
85932850 libct: rm TestGetContainerStats, mockIntelRdtManager
9258eac0 libct/start: use execabs for newuidmap lookup
39bd7b72 libct: Container, Factory: rm newuidmap/newgidmap
0d215150 libct: remove Validator interface
630c0d7e libct: Container, Factory: rm InitPath, InitArgs
376c9886 libct/specconv: improve checkPropertyName
d37a9726 libct/specconv: test nits
58c1ff39 signals: fix signal name debug print
0767b782 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
7346dda3 libcontainer: remove "pausing" state
18e28626 libct/nsenter: fix extra runc re-exec on tmpfs
6e1d476a runc: remove --criu option
485e6c84 Fix some revive warnings
bb6a8388 libct: initContainer: rename Id -> ID
1b14d974 libct/configs: rm Windows TODO
76c398f8 libct/README: rm Cgroupfs
0fec1c2d libct: Mount: rm {Pre,Post}mountCmds
dffb8db7 libct: handleCriuConfigurationFile: use utils.SearchLabels
3d86d31b libct/utils: SearchLabels: optimize
1a3ee496 list: use Info(), fix race with delete
095929b1 list: getContainers: less indentation
cb364108 build(deps): bump github.com/cilium/ebpf from 0.7.0 to 0.8.0
146c8c0c libct: fixStdioPermissions: ignore EROFS
18c4760a libct: fixStdioPermissions: skip chown if not needed
b7fdb688 libct: fixStdioPermissions: minor refactoring
2eb6ac53 CHANGELOG: add #3306
e4d23d50 CHANGELOG.md: nit
5e201e7c libct/intelrdt: explain why mountinfo is required
c45eed9a libct/specconv: rm empty key from mountPropagationMapping
b5cb4056 ci: add go 1.18beta1
907aefd4 libct: StartInitialization: fix %w related warning
024adbb1 libct: Create: rm unneeded chown
edeb3b37 libct/intelrdt: faster init if rdt is unsupported
6c6b14e0 libct/intelrdt: remove findMountpointDir test
02e961bc libct/intelrdt: wrap Root in sync.Once
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
Bumping podman-compose to version v1.2.0-29-g0866492, which comprises the following commits:
8505009 Support python direct call _parse_args or run
9fe3038 tests/integration: Automate 'build_fail' manual test
0f8348b tests/integration: Automate 'build' manual test
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits:
59696341b5 Bump to v5.2.0-dev
973e865422 Bump to v5.2.0-rc1
eb750f61f6 Vendor in latest containers(common, storage,image, buildah)
b08b630c84 test: drop unmount for overlay
e16e528f39 test: gracefully terminate server
fbc4768a00 libpod: shutdown Stop waits for handlers completion
6832a35f65 libpod: cleanup store at shutdown
54fce37968 Add NetworkAlias= support to quadlet
317a88ee4e cmd: call shutdown handler stop function
3280da0500 fix race conditions in start/attach logic
04fb77efe2 swagger: exlude new docker network types
f90bd48859 vendor: bump c/storage
e24367aa14 update to docker 27
b1e535b911 contrib: use a distinct --pull-option= for each flag
02af4f8bd6 Update warning message when using external compose provider
7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0
830e550073 Ignore result of EvalSymlinks on ENOENT
926547f7d3 test/upgrade: fix tests when netavark uses nftables
5856adb9f8 test/system: fix network reload test with nftables
c4b2015e3a test/e2e: rework some --expose tests
9945981afb test: remove publish tests from e2e
43f6173cc6 CI: test nftables driver on fedora
07b69943a4 CI: use local registry, part 3 of 3: for developers
dd1bcabae9 CI: use local registry, part 2 of 3: fix tests
2e8c074234 CI: use local registry, part 1 of 3: setup
d4c0e7ecbd CI: test composefs on rawhide
176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0
bd71b75de4 Improve container filenname ambiguity.
4336c5a4f5 containers/attach: Note bug around goroutine leak
1dd8a35b2f Drop minikube CI test
6f6e0e7126 add libkrun test docs
766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
4b7aaafb2d cirrus: check for header files in source code check
336c45f68e pkg/machine/e2e: run debug command only for macos
c819c7a973 create runtime's worker queue before queuing any job
34ba26ec52 test/system: fix pasta host.containers.internal test
81250cc5a9 Visual Studio BuildTools as a MinGW alternative
a2c83cb0fd SetupRootless(): only reexec when needed
3350cd3eed pkg/rootless: simplify reexec for container code
049942db04 cirrus: add missing test/tools to danger files
1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0
e2ff5d4e5d Windows Installer: switch to wix5
f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0
5e3d821814 pkg/machine/e2e: print tests timings at the end
527c0f0bfa pkg/machine/e2e: run debug commands after init
ada4e1a8c1 pkg/machine/e2e: improve timeout handling
62956ac192 libpod: first delete container then cidfile
ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0
a181b7bc61 System test fixes
55ad0d6e0e cirrus.yml: automatic skips based on source
2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0
d00e68e550 podman events: fix error race
b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0
1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
5c41eb6df8 Update CI VM images
3c0176b2d0 pkg/machine/e2e: fix broken cleanup
f84f4a9cce pkg/machine/e2e: use tmp file for connections
fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage
e810b340ef CI: mount tmpfs for container storage
9814ed40c7 docs: --network remove missing leading sentence
83863a6863 specgen: parse devices even with privileged set
5e156c424f vendor: update c/storage
22b57d3230 feat(quadlet): log option handling
786ea01a64 Error when machine memory exceeds system memory
0d0418a5bf machine: Always use --log-file with gvproxy
c9e3458c99 CI: Build-Each-Commit test: run only on PRs
d2ca2058c6 Small fixes for testing libkrun
069eace84b Podman machine resets all providers
e58e715583 Clearly indicate names w/ URLencoded duplicates
926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs
fdb736d282 apple virtiofs: fix racy mount setup
67df6d60c3 cirrus: fix broken macos artifacts URL
6db8ff7f7b libpod/container_top_linux.c: fix missing header
3703cbf1d7 refactor(build): improve err when file specified by -f does not exist
905e7ae070 Minor: Remove unhelpful comment
541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11
439fe90208 Minor: Rename the OSX Cross task
02b922ebfc [skip-ci] Remove conditionals from changelog
65ed96585d podman top: join the container userns
6c75a10875 Run linting in parallel with building
7ff4bbae26 Fix missing Makefile target dependency
a3d5842746 build API: accept platform comma separated
180cc6f863 [skip-ci] RPM: create podman-machine subpackage
de58c5f292 ExitWithError() - more upgrades from Exit()
a7415c9316 test/e2e: remove podman system service tests
a0b2b0d34c cirrus: reduce int tests timeout
8f2d403cd1 cirrus: remove redundant skip logic
7562f4ccdb pkg/machine/apple: machine stop timeout
1a6a200403 CI: logformatter: link to correct PR base
d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0
f50734636c ExitWithError(): continued
31888f23aa test/system: Add test steps for journald log check in quadlet
def182d396 restore: fix missing network setup
a158eae7ff podman run use pod userns even with --pod-id-file
5815195528 macos-installer: bundle krunkit
e404976d1b remote API: fix pod top error reporting
29ecf5984c libpod API: return proper error status code for pod start
945226a844 fix #22233
5d009715f6 added check for `registry.IsRemote()`. and correct error message.
e4f64f91fe fix #20686
4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image.
49eb5af301 libpod: intermediate mount if UID not mapped into the userns
08a8429459 libpod: avoid chowning the rundir to root in the userns
c81f075f43 libpod: do not chmod bind mounts
094bc673ef libpod: unlock the thread if possible
d53fee511f CI Cleanup: Remove cgroups v1 support
d810f4187e ExitWithError() - more upgrades from Exit()
4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing
7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope
e48f3137c0 libpod: fix comment
8be9ec7216 e2e: test container restore in pod by name
c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs.
3f785e8735 systests: kube: bump up a timeout
f134ab77bc cirrus.yml: add CI:ALL mode to force all tests
d9183f0587 cirrus.yml: implement skips based on source changes
2f680eb4b5 CI VMs: bump
7dc288dbed restore: fix container restore into pod
6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig
83549ba11f chore(deps): update dependency setuptools to ~=70.1.0
91a5c0de2a Quadlet - use specifier for unescaped values for templated container name
0eaec1a2e9 cirrus: check for system test leaks in nightly
4e0cd49148 test/system: check for leaks in teardown suite
81c90f51c2 test/system: speed up basic_{setup,teardown}()
a2352fa3ea test/system: fix up many tests that do not cleanup
e9c6cd1559 test/system: fix podman --authfile=nonexistent-path
f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1
043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
f4aa71e730 Update module github.com/spf13/cobra to v1.8.1
0627fce798 Update module github.com/gorilla/schema to v1.4.0
5c1e5cd026 pkg/machine/wsl: force terminate wsl instance
bd906cb314 pkg/machine/wsl: wrap command errors
dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution
c20767120f CI: do not install python packages at runtime
54edf3d8ee Release workflow: Include candidate descriptor
19989380b8 Minor: Fix indentation in GHA release workflow
82973c38e4 GHA: Send release notification mail
ad56dc7e2b GHA: Validate release version number
64091777fe Remove references to --pull=true and --pull=false
267d838e38 ExitWithError, continued
730a215025 podman: add new hidden flag --pull-option
5a4416be08 [CI:DOCS] Fix typos in podman-build
8fececcdb9 infra: mark storageSet when imagestore is changed
18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver
5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2
0c587f0246 refactor(machine,wsl): improve operations of Windows API
ad8fc6a74b --squash --layers=false should be allowed
858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
fa4f11facc update golangci-lint to v1.59.1
3825e73120 Rename master to main in CONTRIBUTING.md
cec6859369 podman 5, pasta and inter-container networking
a9de888a15 libpod: do not resuse networking on start
4b29c9dd73 machine/linux: Switch to virtiofs by default
bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default)
406f130590 machine/linux: Use memory-backend-memfd by default
f317eb29ab ExitWithError() - continued
550cb07fc0 Enable libkrun provider to open a debug console
dcec81e694 Add new targets on Windows makefile (winmake.ps1)
5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0
8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0
ffc8522646 libpod: fix 'podman kube generate' on FreeBSD
df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0
e8ea1e7632 libpod: do not leak systemd hc startup unit timer
15a4e1dffd vendor latest c/common
7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
80ed85dc17 run bats -T, to profile timing hogs
350dfabf66 test/system: speed up podman ps --external
8fa1ffbbec test/system: speed up podman network connect/disconnect
8640ce998c test/system: speed up podman network reload
609146fb75 test/system: speed up quadlet - pod simple
7f3bb2d238 test/system: speed up podman parallel build should not race
8852614792 test/system: speed up podman cp dir from host to container
8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label
471e001c7f test/system: speed up podman --log-level recognizes log levels
26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test
c466377013 test/system: speed up quadlet - basic
6b021dd4ba test/system: speed up user namespace preserved root ownership
2e70d4201f System tests: add `podman system check` tests
fec58a4571 Add `podman system check` for checking storage consistency
f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
7243c7109c fix(libpod): add newline character to the end of container's hostname file
6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504
af7bd67d4e Fix 5.1 release note re: runlabel
164573dc34 test/e2e: use local skopeo not image
b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e
e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo
b146f9126a chore(deps): update dependency requests to ~=2.32.3
dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81
900e29549a libpod: do not move podman with --cgroups=disabled
12f634edf0 Update release notes on Main to v5.1.0
5dc1738c05 test: look at the file base name
6243f5cebe tests: simplify expected output
7552735fa9 Sigh, new VMs again
4adb5cbbff Fail earlier when no containers exist in stats
fb4ddf86cc Add Hyper-V option in windows installer
4ece83bdf9 libpod: cleanup default cache on system reset
aa08552bf6 vendor: update c/image
ad661b5b31 test/system: speed up kube generate tmpfs on /tmp
bff0697de8 test/system: speed up podman kube play tests
67356a71b3 test/system: speed up podman shell completion test
01642c64ea test/system: simplify test signal handling in containers
6fa064f991 test/system: speed up podman container rm ...
37120bbe80 test/system: speed up podman ps - basic tests
4f3c691087 test/system: speed up read-only from containers.conf
edf6f1814e test/system: speed up podman logs - multi ...
fe05e25edf test/system: speed up podman run --name
1ae05473c1 Debian: switch to crun
1093ebb72b test/system: speed up podman generate systemd - envar
15606148e5 test/system: speed up podman-kube@.service template
42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds
9e321aafda test/system: speed up exit-code propagation test
94ba2cf1a1 test/system: speed up "podman run --timeout"
82bffb9c50 test/system: fix slow kube play --wait with siginterrupt
7ce3c6bf1e undo auto-formatting
9a7ffaa077 test/system: speed up podman events tests
9f823ecb25 Quadlet: Add support for .build files
9de1d4f653 test/system: speed up "podman auto-update using systemd"
a09152ab28 test/system: remove podman wait test
7f567a4e51 tests: disable tests affected by a race condition
2b43f62233 update golangci-lint to v1.59.0
6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported
b45364254f working name of pod on start and stop
c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
f8cc1b4807 Bump Buildah to v1.36.0
661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0
9c92bc64a7 fix typo in Tutorials.rst
74e8f98772 Mac PM test: Require pre-installed rosetta
db3abd0d28 test/e2e: fix new error message
23c830704d Add configuration for podmansh
4fd425429b Update containers/common to latest main
046c0e5fc2 Only stop chowning volumes once they're not empty
d094a9f18e podman: fix --sdnotify=healthy with --rm
e166f6bfe0 libpod: wait another interval for healthcheck
ad1d3f8fc7 quadlet: Add a network requirement on .image units
d418391ce6 test, pasta: Ignore deprecated addresses in tests
18557659e4 [CI:DOCS] performance: update network docs
08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
93ef340071 CI: disable minikube task
8f8dfb971f [CI:DOCS] Fix windows action trigger
1766a1a24b chore(deps): update dependency setuptools to v70
3ab9e864f6 Check AppleHypervisor before accessing it
e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0
d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
63df724a40 add podman-clean-transient.service service to rootless
9a8c3433c1 [CI:DOCS] Update podman network docs
fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode
54ce5c6af1 vendor latest c/common main
fe7cc67ef4 Add Rosetta support for Apple Silicon mac
ad297b1823 bump main to 5.2.0-dev
8afa06ee89 Use a defined constant instead of a hard-coded magic value
47f01e85c5 cirrus: use faster VM's for integration tests
943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
4b0ae78e00 [CI:DOCS] Fix Mac pkg link
061bcc06ea test: remove test_podman* scripts
cb905f59ea test/system: fix documentation
6408a05927 Return StatusNotFound when multiple volumes matching occurs
35375e0af8 container_api: do not wait for healtchecks if stopped
b06c58b4a5 libpod: wait for healthy on main thread
bcb7edfded remote API: restore v4 payload in container inspect
6c78a72995 Remove duplicate call
164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
590fec7a78 Change tmpDir for macOS
120660e239 fix: close resource file
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runtime-spec to version v1.2.0-17-g7017384, which comprises the following commits:
119ae42 Add CPU affinity to executed processes
2149fb5 config-linux: describe the format of cpus and mems
c6af124 ci: remove redundunt actions
d4aa6d8 chore: format JSON file `make -C schema fmt`
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
12b653d Update golangci-lint to v1.56.1 in CI
8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
1a729af Update GitHub Actions packages to resolve warnings in CI
65cd1f8 Back to +dev
36852b0 version: release v1.2.0
021ba94 config.md: allow empty mappings for [r]idmap
5e98fec features: add potentiallyUnsafeConfigAnnotations
cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
2f6b090 config: improve bind mount and propagation doc
0ec4e6b fix link to hooks in features
6ffddf6 mount: Allow relative mount destinations on Linux
f329913 features-linux: Expose idmap information
7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
2547bb0 config: add idmap and ridmap mount options
3f552ce version: release v1.1.0+dev
0625254 version: release v1.1.0
d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
5430e36 ChangeLog: Document changes since v1.1.0-rc.3
2bd22fa features.md: add a note to avoid confusion about annotations
5612d21 Remove outdated meeting.ics
085728a README.md: update chat information
8b4cadd version: v1.1.0-rc.3+dev
ae35e39 version: release v1.1.0-rc.3
d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
fccfb09 config: add support for org.opencontainers.image annotations
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping image-spec to version v1.1.0-25-g39ab2d5, which comprises the following commits:
a977bd3 Remove validation warnings to stdout
4bbdd7f Switch jsonschema validation libraries
535d657 Fix a typo in the annotations spec
89fee07 MAINTAINERS: move jonboulle to EMERITUS
f17d647 CODEOWNERS: remove vbatts
818209a MAINTAINERS: move vbatts to EMERITUS
652ec7c Add note about `ImageID` to the `config` section of `manifest.md`
2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64
e191267 Update Go versions in release scripts
4da0cfc Update GitHub Actions packages to resolve warnings in CI
a32e6c3 Pin golangci-lint for Go v1.20
8baa69b media-types: Fix broken links
0a41c19 version: bump back to +dev
e7f7c0c version: release v1.1.0
d0f90e6 Clarify that subject references a separate DAG
8b1e951 version: bump back to +dev
6c2b5fa version: release v1.1.0-rc6
53d9855 new section for projects no longer maintained
b391bc0 fix: SPDX licenses URL
dd66b54 Test older versions of Go with toolchain=local
93f6e65 Makefile: remove stray trailing space (#1126)
d881fa8 deps: remove deprecated github.com/pkg/errors (#1125)
072574d add ORAS to implementations.md
9954739 specs-go: group MediaTypes
344b098 fix markdown table formatting
c7a064f Update supported Go range to 1.19 - 1.21
f0ef80e version: bump back to +dev
1e54f01 version: release v1.1.0-rc5
061cba3 Fix golangci-lint install on older versions of Go
a2a5750 Add step to update website after a release
0c1622e Add `riscv64` arch to `check{Architecture|Platform}`
e6a75e6 Provide a decision tree for artifacts
9ac8f92 Quote lint-md wildcard expression
a6af2b4 Add a markdown linter and fix linting issues
af9c838 OCI has a distribution-spec
37bac87 Create artifacts guidance
ddf2dfd chore(descriptor.md): correct canonicalization reference
d36ccf1 MediaType is required in the descriptor
f6c60b5 Clean up the markdown in considerations
da8994a Cleanup broken links and markdown spacing
56877ad Remove deprecated golangci lint checks
b29a06c Hacking markdown and Makefile cleanup
73aca56 Cleanup markdown in governance
fd95ded Fix label schema link
aed07a8 Test subject field in index
8620a49 version: bump HEAD back to +dev
82e8329 version: bump for release of v1.1.0-rc.4
988df0a specs-go: remove artifact prefixed annotations
a845c7a image-index: add artifactType to specs and schema
73f386c Add constants for "index.json" and "blobs"
25fc553 Switch from scratch to empty
749ea9a Add artifactType to image index
32036d8 Apply version change from #1050
e13840d Add language from artifacttype field to forbid allowlists of media types
77efc6e spec: clarify descriptor, align with de facto artifact usage
c6854a6 image-index: add the `subject` field
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping netavark to version v1.11.0-34-ge182147, which comprises the following commits:
ab4f101 Release v1.11.0
8d63716 Update release notes for 1.11.0
8c28d20 update netlink-packet-route to 0.20.0
46e4559 run cargo update
38d0ab1 fix: remove extra / in make install and uninstall
4fb2bd9 chore(deps): update dependency containers/automation_images to v20240529
3ec4fd7 fix(deps): update rust crate nix to 0.29.0
e87aae4 fix(deps): update rust crate nispor to 1.2.19
ecfae2c fix(deps): update rust crate anyhow to 1.0.86
6f445a5 fix(deps): update rust crate anyhow to 1.0.85
e5514d1 [skip-ci] Packit: do not create dup jobs on podman-next
f27cd29 fix(deps): update rust crate anyhow to 1.0.84
abdd8ec [skip-ci] RPM: use default __cargo macro across all envs
c29c09c [skip-ci] RPM: switch default firewall to nftables on EL10+
79bdee1 chore(deps): update dependency containers/automation_images to v20240513
b161e75 Add conditional compilation of default firewall driver
7f69bae fix(deps): update rust crate serde_json to 1.0.117
87fe59f fix new clippy warnings
ed7cfd8 Update CI image to fedora 40
e6c6d99 fix ncat sctp tests
ad5adfc fix(deps): update rust crate anyhow to 1.0.83
b04b3de build(deps): bump h2 from 0.3.25 to 0.3.26
da57e62 [skip-ci] Packit: distinct `-rhel` packages value
5e1484c [skip-ci] Packit: enable c10s downstream sync
4233d47 fix(deps): update rust crate libc to 0.2.154
42c6735 fix(deps): update rust crate ipnet to 2.9.0
5869654 fix(deps): update rust crate tower to 0.4.13
7c575c5 fix(deps): update rust crate tokio-stream to 0.1.15
93b8c98 fix(deps): update rust crate prost to 0.12.4
8242916 fix(deps): update rust crate iptables to 0.5.1
41c3281 [skip-ci] Packit: remove el8 jobs
16de016 fix(deps): update rust crate anyhow to 1.0.82
8f5cbf3 fix(deps): update rust crate serde to 1.0.199
0e03c7c Add suffix to Aardvark internal network filenames
9a73a52 fix port forward with strict RPF and multi networks
6e19894 renovate: stop rebasing PRs automatically
f2f137f chore(deps): update rust crate chrono to 0.4.38
ded8d36 fix(deps): update rust crate serde_json to 1.0.116
0ce4586 fix(deps): update rust crate netlink-sys to 0.8.6
055b37e nftables: only dump netavark table rules
42c634f update nftables to 0.4
b2bcf47 fix aardvark-dns netns check
c309491 fix(deps): update rust crate tokio to 1.37
1df8633 fix(deps): update rust crate netlink-packet-route to 0.19.0
4846563 Update to nix-0.28.0
e506776 fix(deps): update rust crate mozim to 0.2.3
a76f3d9 fix(deps): update rust crate nispor to 1.2.18
829b2db Update chrono
cae2d5e fix(deps): update rust crate serde_json to 1.0.115
92bd069 build(deps): bump mio from 0.8.9 to 0.8.11
1e10e01 [skip-ci] rpm: aardvark-dns is a hard dep across the board
131c28c Update Rust crate env_logger to 0.11.3
370722f Update Rust crate serde to 1.0.197
6288762 Update Rust crate tempfile to 3.10.1
6d67358 Update Rust crate log to 0.4.21
943cd88 Update Rust crate zbus to 3.15.2
1a5850a Update Rust crate serde_json to 1.0.114
fe40711 Update Rust crate env_logger to 0.11.2
1efb4e5 Update Rust crate chrono to 0.4.34
5601e0a Update Rust crate tonic-build to 0.11
09ccedc Update Rust crate tonic to 0.11
bba73d6 fix netavark update to not start a new aardvark-dns
37d6f55 Update Rust crate tempfile to 3.10.0
8c2c8c6 Update Rust crate zbus to 3.15.0
dd1a057 Update Rust crate tokio to 1.36
b6be4de Update Rust crate chrono to 0.4.33
45f1581 Do not perform network namespace detection on AV update
6c69f60 [CI:BUILD] Packit/rpm: fix aardvark-dns handling
733a785 Update Rust crate serde_json to 1.0.113
6786828 Update Rust crate serde_json to 1.0.112
c5a23fc Update Rust crate env_logger to 0.11.1
d8143a6 update README with nftables support
c5acdec Bump to v1.11.0-dev
468f885 perf-netavark: accept fw driver as argument
61a990f perf-netavark: fix missing --config arg
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping nerdctl to version v2.0.0-rc.0-79-gd273fd20, which comprises the following commits:
6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
dd52560f CI: update Ubuntu (24.04)
ae277688 feat: support for --sig-proxy in run
6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
c493afcd pkg/defaults: add defaults_darwin.go
b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR
8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0
02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2
c2fa1ed9 update soci-snapshotter (0.6.1)
820f7404 update Nydus (2.2.5)
480fc999 update gotestsum (1.12.0)
6cc63162 update Kubo (0.29.0)
f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps
f35e4251 update golangci-lint (1.59.1)
85a8bf86 update BuildKit (0.14.1)
465365a0 update CNI plugins (1.5.1)
bccfdc82 update containerd (2.0.0-rc.3)
ead5ce6c Volume QA: remove (fixes and tests)
a28dbf29 Dockerfile: use Go 1.22 for runc
97552985 Bump compose-go to v2
e13ff68b Remove duplicate function
515c3ade Add HOSTNAME environment variable
0c300dca fix: close the hosts file
15a8a8dc Aftermath docker migration: fix racyness in tests
5dd36b60 Implement network namespacing
58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1
6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization
c0e4e92c Add mechanism to prevent Cmd from executing multiple times
ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS
2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0
0b201417 build(deps): bump github.com/containernetworking/plugins
9a76ba10 Disable build and publish on PR for purely md changes
eace9da1 Add doc note about --ip and bridge
e789f2cd Docker v26 compatibility & test fixes
b63f4d6b Add --pull option to build command
091de746 update containerd (1.7.18), runc (1.1.13)
a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER
f4a7e0c8 Restore logger output
37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7
f942d2c5 test-integration-docker-compatibility: install Docker v24
972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1
37c0cb67 Safer / faster convert zstd
b20070d2 Revamped testregistry and login tests
edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0
dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4
80731ff3 Caching and list optimizations
b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS
e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER
4907e59c fix container list with json format
b94caffe build(deps): bump github.com/docker/cli
47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18
530b0913 build(deps): bump github.com/docker/docker
2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0
5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0
7675d267 update imgcrypt (1.1.11)
875a962e Remove spurious debugging leftover
11802cf3 Fix wrong package import
6917840b CI: .md files changes should not trigger tests
f491e83f Disabling test on unsupported platforms
eb001fad Image inspect rework
4d4fd5fb State how to run a single integration test
099ef7bd Image history enhancements
3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0
838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11
eb5d4426 update slirp4netns (1.3.1)
1ec6764f update containerd (1.7.17)
03bee846 update CNI plugins (1.5.0)
4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0
949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter
11fcb6b0 Do not obtain task info when it is not necessary in commit command
713851de add retry on test
cf5073b4 support image label
0988c9b8 chore: remove impossible error check
8b34abdf Implement container inspect --size, SizeRootFs and SizeRw
0d470e7e Implementing StartedAt for containers
93b13817 build(deps): bump github.com/containerd/nydus-snapshotter
5f8c0c9d build(deps): bump github.com/docker/cli
80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
35a90ef6 build(deps): bump github.com/docker/docker
64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17
480eb6ee Support DHCP IPAM opts and set the hostname
274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release
cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0
6b10870c Re-acquire name in onStartContainer (see #2992)
c60adf29 Add missing alias for container rm/remove
fac3d35e build(deps): bump github.com/docker/cli
c5d1b532 Allow directories for --device and in-container path
762fe91c Fix some /etc/ file permissions (see #2684)
926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0
41bf4414 build(deps): bump github.com/docker/docker
516503a0 Fix markdown link
c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1
83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
4b9de97d inspect: show mounts info from CRI/ctr containers
d197e5b7 build(deps): bump github.com/docker/cli
227505ce build(deps): bump github.com/docker/docker
c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
618639b3 build(deps): bump github.com/cyphar/filepath-securejoin
4e615922 CI: use Go 1.22
49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0
ad607362 build(deps): bump github.com/containerd/nydus-snapshotter
2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2
54b29564 fix: set mountpoint RW and Propagation in internal mount label
ff6c1c49 skip Kubo 0.28.0
bb6f9e66 update RootlessKit (2.1.0)
f34b02ad update slirp4netns (1.3.0)
e9535e52 update BuildKit (0.13.2)
47053926 update containerd (1.7.16)
a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16
93f404c7 fix: error check in the ensureFile func
a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4
4f46cf94 build(deps): bump github.com/docker/cli
8765df23 build(deps): bump github.com/docker/docker
6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3
0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3
199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
79897c8b build(deps): bump github.com/docker/cli
a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0
03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter
47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1
6ffb5466 build(deps): bump github.com/docker/cli
dc42456f build(deps): bump github.com/docker/docker
d4257170 build(deps): bump github.com/containerd/accelerated-container-image
9b8e1dd3 fix follow tail of rotate log
a3fdaafa fix: cleanup volume dir if create volume failed
27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
46acf060 build(deps): bump github.com/rootless-containers/bypass4netns
b5117a23 Rationalise build constraints for Go 1.19 onwards
5fac99b3 Implement autodetection of Windows buildkitd socket
6e6aa4a9 Enable building on Windows hosts
0d75e34f Remove unused defaults.BuildKitHost
62e031c6 bypass4netns: allow ignoring bind
f802ba87 update bypass4netns (0.4.1)
2c446522 build(deps): bump github.com/containerd/accelerated-container-image
2cfff270 update containerd (1.7.15)
a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15
858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`)
f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24)
9ba9ddca update BuildKit (0.13.1)
6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2
da2f576f build(deps): bump github.com/docker/docker
3809ec53 CI: FreeBSD: use Go 1.22
c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter
ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1
e7608c8b deflake TestImageConvertEStargz
c1c7e251 not check return of rmi in pushImageToIPFS
70ee810a pkg/api/types: remove dependencies on nerdctl
8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
2122a714 update cosign image to latest release
3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0
1c371393 update imgcrypt (1.1.10)
9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
0f9c8de4 feat(compose_up): add --abort-on-container-exit flag
d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10
5e785705 build(deps): bump github.com/containerd/accelerated-container-image
8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0
ee2f8d64 update Kubo (0.27.0)
4917c16a update RootlessKit (2.0.2)
4dbac7f8 update CNI plugins (1.4.1)
046bfc06 build(deps): bump github.com/containernetworking/plugins
6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2
0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup
4d9abe27 update containerd (1.7.14),(1.6.30)
533f16b9 CI: update FreeBSD to 14
258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14
bc8450e8 feat: add extra contexts to buildctl call #2835
341c60d4 update BuildKit (0.13.0)
ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0
41b669d7 feat: create network cleanup function for kill and stop cmd
da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2
74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0
26c02362 chore: remove useless error check
f853ab85 Enhance default platform comparision for image shareablity #2810
45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0
f1595262 Use json marshal/unmarshal to copy
3d28dbf6 fix: typos
772d4791 build(deps): bump github.com/containerd/accelerated-container-image
d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0
18f29fb0 fix: add onstartcontainer hook
d8412eed build(deps): bump github.com/containerd/nydus-snapshotter
261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
41b83493 Rootlesskit Network Design
8d840dae doc: should use master tag for binfmt
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping lxc to version v6.0.1, which comprises the following commits:
f1be0d814 Release LXC 6.0.1
9fb53cfa1 meson: fix build with -Dtools-multicall=true on NixOS
f92aa6066 github: exclude clang & ubuntu-24.04 combination
6a0b1504e lxc/storage/zfs: ignore false-positive use-after-free warning
6ba6c3208 github: properly check apparmor profile changes
8e72b94bd github: start using ubuntu-24.04
f91ce0d8b apparmor: regenerate rules
cba7a6746 apparmor: use /{,**} instead of /**
e97321ff9 apparmor: regenerate rules
89071ba7b apparmor: fix rule path pattern specification syntax
32c7a157d lxc-local: remove check for template existence before extraction
81a2c8253 lxc-local: fix incorrect path to `templates` file
fdeb88655 lxc-local: fix use of `LXC_PATH` before init
be7179a08 Update lxc-execute.sgml.in
247f5eed5 Update lxc-{attach,execute}.sgml.in
bb23a71af Update lxc-execute.sgml.in
f98b7ab53 Update lxc-attach.sgml.in
e31ce9753 network: netdev_configure_server_veth: reduce scope of disable_ipv6_fd/path vars
bd8d5b747 lxc/network: handle non-existing sysctl <ifname>/disable_ipv6
41aa42e27 github: test the lxc multicall binary builds too
1b3b06d8e meson: fix build on NixOS
3dee5fb88 Release LXC 6.0.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping kubernetes to version v1.30.2-19-g7e92bb98e30, which comprises the following commits:
b5ac4e577a3 Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm
3b5b3a80be1 Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same.
95f23fd9637 defaultMaskedPaths must be kept in sync with moby/moby.
50428ed169f gitRepo volume: directory must be max 1 level deep
dc7f0cac7df Bump images, dependencies and versions to go 1.22.5 and distroless iptables
c1aea3d7bac Fix endpoints status out-of-sync when the pod state changes rapidly
a805b38229f fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod
81a15801b68 Clean up the featureGates during the matchSuccessPolicy unit tests
49a2366ddb6 Initialize terminating field in the Job controller unit tests
46f9e4b41f6 Job: Fix a bug that the SuccessCriteriaMet condition is added to the Job with successPolicy even if the JobSuccessPolicy featureGate is disabled
85fad5b874c Update CHANGELOG/CHANGELOG-1.30.md for v1.30.2
39683505b63 Release commit for Kubernetes v1.30.2
47c36d4bbfa Bump images, dependencies and versions to go 1.22.4 and distroless iptables/setcap/debian-base
cd73ad187cc update driver installer
654c085cb16 Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable
1ddcf348612 Revert "scheduler: preallocation for NodeToStatusMap"
0df7267723b kubeadm: use the actual configured kubelet healthz address:port
398ab938efc kubectl create cronjobs: Manually set OwnerReferences
42b93b35ba7 add an integration test when nodeAffinity specifies a non-existent node.
f73bb17efbf base on allNodes when calculating nextStartNodeIndex
a26f2c59e3e Fix printPod panic with spurious container statuses
85fc4758204 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.1
6911225c3f7 Release commit for Kubernetes v1.30.1
3d896724760 Adding the feature gates to fix cost for VAP and webhook matchConditions.
b762a187f4a cherry pick #124618 to 1.30
1c8b0f697c5 fix requests tracker concurrency
2956e294c44 fix conflict race in statefulset rest update
7d9b913d106 fix stateful set pod recreation and event spam
a58d4f54cf8 fix pods tracking and internal error checking in statefulset tests
f20b6672b8e [go] Bump images, dependencies and versions to go 1.22.3 and distroless iptables
d8c37e81539 Updated & added visibility to apiserver x509 test certificates expiring this year
ad1353499eb Clean up PersistentVolumeLabel admission plugin
42742942f5d scheduler: preallocation for NodeToStatusMap
d17cd6ef75c tag service.spec.TrafficDistribution field as alpha
d3795353625 tag TrafficDistribution tests to avoid running on clusters without the feature enabled
37e7cbdd3a6 fix(api): make LocalObjectReference.Name and HostAlias.IP required (#124553)
1410806d2af kubeadm: check for available nodes during 'CreateJob' preflight
e1594967bbb Idempotent transformers in scheduler & kcm
dabc4428f2f kubeadm: fix bug of kubeletconfig not being downloaded on upgrade
7e5e4c3f616 e2e framework: configure Ginkgo logger and klog consistently
6bb6b07b185 e2e node: fix -v support
4d1dd9cd079 Update applyconfig-gen for pacakges where group and dir differ in name
933272d3333 kube_codegen: expose applyconfig-openapi-schema flag for client generation
502d9434a40 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0
7c48c2bd72b Release commit for Kubernetes v1.30.0
69e332560d0 CHANGELOG: Update directory for v1.27.13 release
128d6cc1462 Add envFrom to serviceaccount admission plugin
fb5140f5622 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
d51a005d25a Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.2
7606cf7b3d7 CHANGELOG: Update directory for v1.30.0-rc.2 release
22140b6a070 Release commit for Kubernetes v1.30.0-rc.2
be4b7176dc1 Fix Abs path validation on Windows (#124084)
d19bff9a022 Update publishing-bot rules to Go 1.21.9
1366f1f4470 [go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
99fac38d286 Update x/net for CVE-2023-45288
f4750e52e66 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.1
6673e7a93d8 CHANGELOG: Update directory for v1.30.0-rc.1 release
77aa9c21c29 Release commit for Kubernetes v1.30.0-rc.1
f338ab5f959 svm test: wait after updating CRD to avoid flakes
363fee59e4b fix panic with SIGSEGV in kubeadm certs check-expiration
0add741012c fix test flake caused by not waiting for CRD schema update
02139c91028 Deflake authz config reload test
fc428df4914 update setcap/debian-base to bookworm-v1.0.2
06e69e4b099 releng: update publishing bot rules for 1.30
d098af353c6 CHANGELOG: Update directory for v1.30.0-rc.0 release
6a00808f1d7 Release commit for Kubernetes v1.30.0-rc.0
c893c484328 Use the right feature gate when updating uncertain volumes
6f5240b19c6 e2e_node: fix podresources test
9ce994af9fc e2e_node: remove `Dbus` test case
247392271f1 Fix admission error
84750fe52e7 Revert "enhancement(scheduler): share waitingPods among profiles"
a67d1dc0102 Revert "Fix flaky test on multi profiles waiting pod"
225749eb68b Undo double run of the TestWatchSemantics test to avoid hitting timeout
4f1c91b24a4 Fix for TestStorageVersionMigrationWithCRD integration test failure
f2d4848e49c add stefan as apimachinery tech lead
0130072b053 Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage.
a7f23e46da4 Fix OOMKiller test warnings
fc555839d73 Allow installing newer containerd/runc on COS
10b6319e64b fix slow dra unit test
2b56de43e5c register Node/UpdateNodeTaint event to plugins which has Node/Add only, doesn't have Node/UpdateNodeTaint
656cb1028ea CHANGELOG: Update directory for v1.29.3 release
e5b497df4fb Add alpha endpoint getStoragemigrationAPIGroup
fa97f37fea6 CHANGELOG: Update directory for v1.27.12 release
bf38ed0e5b7 CHANGELOG: Update directory for v1.28.8 release
26881132bd0 kubelet: assign Node as an owner for the ResourceSlice
80db011202e remove VolumeAttachment endpoints
55302de991e Promote VolumeAttachment e2e test to Conformance
4048598620d Change the API operation e2e test to conformance test.
045d91d882c Add e2e tests for GA API
a0add8d2c75 dra api: NodeResourceModel -> ResourceModel
c78812868f5 CHANGELOG: Update directory for v1.26.15 release
0b8e79580eb Fix enabling consistent list from watch cache also works for resourceVersion=0
c44cc9a575f apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache
f5d945eb43c apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure
8963e73f120 kubelet: fix mixing up runtime classes with runtime handlers
1dc05009fe7 api: NodeStatus: rename RuntimeClasses to RuntimeHandlers
4a776f66ec4 kubelet: silence "unknown runtime class" errors when unsupported
6680700b5dc Add e2e and integration tests for Service.spec.trafficDistribution (#123812)
5a74c8e2202 apiserver/storage/cacher: decrease the running time of tests in the cacher package.
926122c035a apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache
c9384550cbf CHANGELOG: Update directory for v1.30.0-beta.0 release
4f6212fb0e6 generated: ./hack/update-conformance-yaml.sh
2c2d424b012 make type checking tests non-conformance.
19ae61bab0d innocent-pod should not be evicted due to exceeding requests/limits
7ab1ef644e2 Revert "Implement a field selector for ClusterIP on Services"
3ecbb4dee00 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents
a527cab9fce Fix non-recursive list when consistent list from cache is enabled
727d127e6f6 don´t run openapi spec with ConsistentListFromCache feature gate enabled
dc2974c6461 retry policy creation for CRD type checking E2E test
9fcf279e2b9 Fix SetFeatureGateDuringTest handling of Parallel tests
4aed5652ed2 Disable `aws` drivers for `In-tree Volumes` test
21a0dd1d705 dra scheduler: create default claim/class parameters instead of nil
fc2134c84cc dra kubelet: fix error log
51c26b7002a fix test flake in TestStructuredAuthenticationConfigReload
ea14ccdf13f e2e_node: mount_rro: fix error string comparison
5cc1e562483 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts)
3ce6c104e21 Support fetching NPD from github releases in standalone mode
56da06b6dd9 Fix the dirname command in macOS does not have a -z option
62ac88b9ea5 Add metrics for authentication config reload
b4935d910dc Add dynamic reload support for authentication configuration
13a6dcc21c5 dra kubelet: add StructuredResourceModel to UnprepareResources call
d4925ce8f83 e2e: KEP-3857: Recursive Read-only (RRO) mounts
c7f52b34f34 kubelet: KEP-3857: Recursive Read-only (RRO) mounts
6f12e1d8e59 kubelet: expose `containerStatuses.volumeMounts`
dd0882a83e0 kubelet: expose `node.status.runtimeClasses`
8db07446f19 api: validate RecursiveReadOnlyMounts
8828530fd5b node: dropDisabledFields: recognize RecursiveReadOnlyMounts gate
ce1918875f6 pod: dropDisabledFields: recognize RecursiveReadOnlyMounts
d940886d0a4 api: KEP-3857: Recursive Read-only (RRO) mounts
0b1a507b002 pkg/features: add RecursiveReadOnlyMounts
76081a10c26 kubelet: RuntimeHandler: add SupportsRecursiveReadOnlyMounts
27f24a62e30 kubelet: change map[string]RuntimeHandler to []RuntimeHandler
f2508df279e Job: Use the fake clock in TestTrackJobStatusAndRemoveFinalizers
9161302e7fd feat: implements svm controller
121607e8096 Require email_verified to be used when email is set as username via CEL
79fe37537c3 Adjust the validation to the current state
1163c7ed9c6 Adjust the API comments to the current state
ee64b30d05c Check taints as well for control-plane
acf6b500eef Follow up fix to the job status update test
91a7708cdce feat: implements Storage Version Migration API in-tree
04ac13b6b76 Keep providing the deprecated AppArmor CRI API for runtimes that haven't migrated
6a361e1f364 dra api: enable new CEL features by faking their version
7f5566ac6f6 dra e2e: enable more tests for usage with structured parameters
251b3859b0b dra scheduler: consider in-flight allocation for resource calculation
2c6246c9066 dra e2e: move ResourceSlice test
0b6a0d686a0 dra api: rename NodeResourceSlice -> ResourceSlice
42ee56f0931 dra api: implement semver attribute value type
234dc1f63d7 dra e2e: run more test scenarios with structured parameters
d59676a5453 dra kubelet: publish NodeResourceSlices
5e40afca060 dra testing: add tests for structured parameters
3de376ecf69 dra controller: support structured parameters
6f1ddfcd2e3 kubelet: support structured parameters for preparing resources
4ed2b3eaeb6 scheduler_perf: test DRA with structured parameters
d4d5ade7f5b dra: add "named resources" structured parameter model
096e9489050 dra scheduler: support structured parameters
49ee96eed43 pod security test: add user namespaces feature
1f9c271c8c6 PSA: update procmount tests to have hostUsers
23706cb90c8 api validation: validate proc mount against user namespace
e216742672a Job: Support for the JobSuccessPolicy (alpha)
7bd78b06e93 Warn on deprecated AppArmor annotation use
b1341c87957 Revert portion of the GPU testcase
194009fac9d Add integration test for managedBy and cleanup of finalizers
2867be47b31 followup to allow special characters
a92d2a4cea6 noderestriction admission: lock down create of NodeResourceSlice
2e34e187c99 node authorizer: lock down access for NodeResourceSlice
39bbcedbcae dra api: add structured parameters
eb1470d60d5 scheduler: fix assume cache with no index
48daa91857a Update publishing-bot rules to Go 1.21.8
30857658e42 Adjust GPU test to work with latest nvidia daemonset
ffafb2b9ca9 adds portforward streamtunnel unit tests
758dc535107 Enabled conformance test for VAP which is GAed.
df7f5fca27f Don't embed plural exceptions in tools
39e1c9108c0 Support multiple JWT authenticators with structured authn config
2d86cbf2616 Separate feature-gate for AppArmor fields
22068e0cc7b Validate annotation & field match in PodTemplate
06caf32ecd7 Validate localhost profile max length
0eb5f52d06f Rename AppArmor annotation constants with Deprecated
8373f3035ad fix aggregator path filtering to include /
70221e8405e [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
6f2842c08c2 Avoid clearing go version in go.work update script
c6673d2346c Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
1395c801098 Update Job conformance test to do a legal update
2e465cd6fa0 Remove _tmp from test/images/image-util.sh
be7ee821b97 Make verify-vendor use verify::generated
778644154f3 Remove _tmp from verify-openapi-docs-urls
4d6f56d3985 Make vendor-licenses use verify::generated
8a3a299c650 Remove _tmp from pin-dependency
813787489b7 Make verify-openapi-spec use verify::generated
e90782bec8e fail LimitedSwap with cgroupv1
5d83282823d Auto updates
de506ce7ac9 Promote ValidatingAdmissionPolicy to GA.
6a4e19a4ec9 add no swap as the default option for swap
27df75c577a dra api: fix status updates
ec325b328db Match annotations against pod AppArmor field
d25b1ded761 PodSecurity check for AppArmor fields
24537a91317 Stop appending AppArmor status to node ready condition
207a965b3ff Update AppArmor e2e tests
bf3c8464bae Implement Kubelet AppArmor field handling
289ec02e8b5 Implement version skew strategy
b7f620c12b7 Generated code
855bc740239 Adds OWNERS files to client-go streaming dirs
94927afb50c AppArmor API changes
6b03166beda update to inject only the list of excluded resources.
7a57bcea6cd fix e2e test for kubectl interactive delete
646d4642038 e2e_node: use kubelet_exec_t instead of bin_t for kubelet
e568a77a931 Support for the Job managedBy field (alpha) (#123273)
5122fe07323 don't watch headless services on kubelet
0595ec79423 implement field selector for clusterIP on services
b502aa6f31d Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
290f2a7e1b6 Fix AuthenticationConfiguration docs around nested claims via CEL
bc7aa13bf79 Mark StructuredAuthenticationConfiguration feature gate as beta
53d38a31611 node-controller require providerID to initialize a node
3f7d4b787b7 apimachinery/meta/types.go: define InitialEventsAnnotationKey const
221ad9f7c25 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed
01689d0906e add e2e tests for relaxed validation
fa3c1014393 relax validation pod envfrom
e56240b2e1b add validation method at the top level
5b072a59a29 Fix flaky test on multi profiles waiting pod
96a16a7bc9f add relaxed env var name function
af2dadcb18a Add custom debug profiles on top of static profiles
2bd7f4f8e06 storage e2e: update hostpath and mock images
9ac9fdac8f8 Bump npd from v0.8.13 to v0.8.16
4a5fe2decad Addd negative case for the fix in #123570
ec6fd2befac Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field
b04d1177efb extend deadlines to one minute
3d56ff21fd3 adds comments to tunnelingResponseWriter
33af937b4a5 re-write fallback dialer unit test
e8bbb221d36 removes extra upgrade aware proxy logging; returns tunneling connection close error
2443b3fa694 Fix headerInterceptingConn handling
9e154628430 adds return context in RunPortForward()
8b447d8c97e portforward: tunnel spdy through websockets
79b344d85e3 Add authorization webhook duration/count/failopen metrics
1cf4cec449c Test that separation of streams work by using progress notifies
8345ad0bac4 jwt: fail on empty username via CEL expression
606cae9b479 Add new metric servicesCountByTrafficDistribution
05e1eff7933 Prevent conflicts between service account and jwt issuers
57d1b68dc2d Remove deprecated sets.String
c4163a9cb84 Add label with access mode to SELinux metrics
31d404b182d Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior
eb6abf04623 scheduler_perf: automatically delete created objects
51f86b91249 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled
51a3fa2e6ff Start reconciling on the new field
9513f75089f Add trafficdist package for handling reconciliation of new field
646fd200b85 Run 'make update'
996d11d4e87 Add new field trafficDistribution to Service spec
d72448a41c2 cleanup: if triggerValue has a value, fast break
78fb0bae22f wire up discovery url in authenticator
84852ff56f9 Add `DiscoveryURL` to AuthenticationConfiguration
c61b2a3975a Check length of instance name before truncating
ebcb78df529 promote aggregated discovery conformance tests
b33c5a82928 Switch to newer cos-gpu-installer - v2.1.10
968aefd1bf2 Ensure GCP instance names are a max of 63 characters
c2ccb921ea0 e2e pod: fail fast on failed pod
c134bfe9ebc agnhost/mounttest: add new line to output
db115ca929e [kubeadam] do not set authorization-mode in api server when authorization-config is provided
22adf221a14 print nodename
0da5e8137b8 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
a0215badb8d Change `pushd $d; go ...; popd` to `go -C $d ...`
90e6546c689 Use go.work to auto-find internal modules
eb5f31b9e1a Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons
6174f199dfb kublet/userns: Add test switching feature gate off/on
4bb508dd303 kubelet/userns: Add unit test
0b69c2bc81d kubelet/userns: Use kubelet maxPods
39c68156766 kubelet/userns: Remove alpha maxPods limitation
4180284dc97 pkg/kubelet/userns: Remove outdated test
4c81e5c9dc6 features: promote UserNamespacesSupport to beta
87a057d4170 KEP-127: kubelet: honor kubelet user mappings
3bada5d4515 test: Bump CUDA images
30256c8909a Promote StructuredAuthorizationConfiguration feature gate to beta
0605a75c5e3 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
b48b4ebc697 address reviews
1d4be7527f8 increases client-side websocket write deadline to 30 seconds
948d9ca2217 Rely only on `source` cli parameter in conformance/walk
0e9cdf76ad2 Fix discovery v2 conversion registration data race
e2b96b25661 Add a header to go.work
467d5d745c2 Get rid of unused API type NodeResources
d2051503a3e e2e/service.go: remove same node nodeport test
e76fce75666 add authz webhook matchcondition metrics
9633e25579d feat: add csaupgrade option to upgrade subresource
1503997b4f9 Make CBOR roundtrip cases pass through interface{} as well.
3b630ae1af7 test/e2e_node:add more coverage for the kubelet config drop-in dir feature
f34782bb927 hack: re-enable protobindings which use k8s.io/api
9a404b590b1 Filter aggregated apiservice gv
b40b5f86d8e *: promote KubeletConfigDropInDir feature to beta
8854d360a5d printers: add status to jobs table
462dd326c2e Use v2 types with agg discovery
301e804c3f2 Promote AggregatedDiscovery to GA
0593746f609 Remove test for disabling aggregated discovery
dde48918dda promote match conditions e2e tests to conformance
74417b517a0 Tag all feature gates required by a test
99313bea88c kubeadm: remove constants for mirror pod timeout
ded6354a8fc kubeadm: add Timeouts struct to v1beta4.UpgradeConfiguration
ce8bd8584e0 Configure cpumanager policy options in local-up-cluster
ba525460e05 change result size to numAllNodes
45783a630cc increase parallelism on node controller ccm
dce0d8a3d3f increase parallelism on service controller
20b28312ea9 Add namespace to NotFound error for kubectl logs command (#120111)
6b08919473a Revert "[cloud-provider] require providerID to initialize node"
1d653e6185a test: use cancelation from ktesting
d58ff6c0560 allow for cadvisor to detect split filesystem and add some e2e tests
00e09374b6f Make update-codegen avoid sub-workspaces
21715e6bbd1 Fix up go.mod files after reviews
78f82b972f8 Sort publishing/rules.yaml
ac5664086ba Use path instead of filepath for pkg-paths
70d803c1ff3 Make `make` fail better with bad inputs
81ba0f3b44b Make golang::setup-env turn on workspaces
2e2ae029c33 Fix instrumentation tests
706c88863f5 Use go 1.22 for KMS mock
812d5fff401 Remove old gengo detritus
16c26b22cb0 Run latest openapi generation
d6cf98f8ac6 Remove errant +required with no validation code
1a4450f6ffd Get rid of code-generator/cmd/openapi-gen
067a328284e Move import-boss: k/code-generator/cmd -> k/k/cmd
7776496309c EOL code-generator/generate-groups scripts
9cf189f4e02 Fix lint found by golangci-lint
14321ef959b Move doc-generation funcs into only caller
8288c06b2b4 Make hack scripts use `go install` and assume PATH
ea3696dbcf3 Remove legacy references to './output'
242b4e27c05 No need to check nil iterating gengo Inputs
7a084b33528 Renamed gengo SourcePath -> Dir
96b91f364ac Renamed gengo Builder -> Parser
cb86010d206 Gengo utils moved
236ce54aa8a The gengo "args" package is gone
b40e4d7e705 Get rid of gengo CustomArgs
86d2ecbf9a8 Move gengo/examples/defaulter -> code_generator
cb7f0593aea Move gengo/examples/deepcopy -> code_generator
01a18659347 Fix lint in code-generator/cmd/...
b68340e5b6a Get rid of gengo InputDirs flag
299b0453070 codegen: Remove most uses of InputDirs
e78dc862885 Move import-boss to k/k, retool to not use gengo
08ce6a0f148 Get rid of gengo WithoutDefaultFlagParsing
5b2d4384c70 codegen: Make import-boss do it's own flags
1fed36b9842 codegen: Minor: fix wrong comments
6420e646621 Move go-header-file flag to each tool
3a77592b2cb Remove gengo verify-only - unused and untested
d0dd72b01e0 Move OutputFileBase flag to each tool
26a1a13b805 Rename output-package -> output-pkg
6a375b8f4cd Move the OutputBase flag to each tool
875566f997a Type-assert gengo CustomArgs blindly
0ff7dd19430 Rename gengo DefaultGen -> GolangGenerator
2ac119bea94 Rename gengo Target.SourcePath() -> Dir()
fcd6c19c246 Rename gengo generator.Package -> Target
d2c74019109 Drop `generator.Packages` type
b2832697d50 Rename DefaultPackage to SimplePackage
bd31265d23e Make update-vendor log the go env
4627a15ac00 Get rid of vendor baggage in go-to-proto
43206312659 codegen: Don't need to pass --logtostderr
2c0da11c0a0 Make verify-shellcheck take optional args
19b37f046f1 Rename update-generated-* dockerized
94b709c0e22 codegen: Use single-dash for '-v'
dd4e456875c codegen:proto: Use revised API to gengo parser
4b55936ab0c Remove defunct trim-path-prefix
2348e949082 Conversion: Better logging
6dbc754ed68 Retool typecheck to be simpler
4d37426a3ab Update Makefile comments
965341390f8 Remove KUBE_GO_PACKAGE
5a96a56c80c Fix make test-integration for workspaces
4b20f81c194 Fix verify-conformance-yaml for workspaces
d61f2996140 Call verify_go_version at the END of setup_env
e84adf611f4 Remove references to "GO111MODULE"
2a1147a4341 Call setup_env from verify-vendor
d2a4a1958fc Tidy update-vendor-licenses for workspaces
d772f7719dc Remove defunct references to "vendor"
7f5982e7084 code-generator: Remove now unused helper function
10c32b3e2f4 Get rid of most references to GOPATH
3c2940f2ae2 Kill off PRJ_SRC_PATH
651297220ef Fix pin-dependency for workspaces
1c3e701e0c9 Fix verify-spelling for workspaces
032dd890a57 Fix verify-external-dependencies-version for workspaces
bff2e92edd1 Fix update-netparse-cve for workspaces
fad5bb1cdd4 Fix lint-dependencies for workspaces
b2b9de88eba Fix update-import-aliases for workspaces
530c4352fb4 Rename new::setup_env back to setup_env
bece9bc3f4d Remove old::setup_env
f9ca58efe9e Remove run-in-gopath.sh
b32e2072569 Fix last run-in-gopath user: typecheck
91efe7e5712 Fix import-boss wrt gengo/v2
c8b61bb98b4 Fix register-gen wrt gengo/v2
f772410082b Make code-gen subprojects work on gengo/v2
251b22a7f89 Make update-codegen protobuf work on gengo/v2
b0a70dec4ab Fix go-to-protobuf wrt gengo/v2
7506048d3f2 Make update-codegen client work on gengo/v2
b961b39efa7 Fix client-gen wrt gengo/v2
130a9f8426e Make update-codegen applyconfig work on gengo/v2
5ddd6772a4c Fix applyconfiguration-gen wrt gengo/v2
9c62235266d Make update-codegen informer work on gengo/v2
0aa98ee8e38 Fix informer-gen wrt gengo/v2
46665fa76a9 Make update-codegen lister work on gengo/v2
b82527b6fb5 Fix lister-gen wrt gengo/v2
1965f56f59d Make update-codegen openapi work on gengo/v2
5475797f433 Make update-codegen conversion work on gengo/v2
ed35118664b Fix conversion-gen wrt gengo/v2
1e96f4e50a7 Make update-codegen prerelease work on gengo/v2
fd2ca0a3444 Fix prerelease-lifecycle-gen wrt gengo/v2
b5b8c9d8698 Make update-codegen swagger work on gengo/v2
8420278c7fe Make update-codegen defaulter work on gengo/v2
1fb4e824ba0 Make update-codegen deepcopy work on gengo/v2
d5e8e9c29cf Change update-codegen.sh to use new setup_env
db590ecd896 Fix scripts to avoid testdata
514dd0e1f6d Convert all gengo references to gengo/v2
6f2f3735e04 Re-vendor latest kube-openapi and gengo/v2
b3dd7241741 Remove dep on set-gen: gone in gengo/v2
487cd027118 Change verify-generated to new setup_env
c79e5abec42 Change test-e2e-node to use new setup_env
7a7dff1eeb4 Change verify-imports to use new setup_env
3be358ecc15 Make verify-conformance-requirements use new setup_env
08622aa6858 Make verify-no-vendor-cycles use new setup_env
854037d5b52 Change update-generated-api-compatibility-data test to new setup_env
25b97dae82d Change ipamperf test to new setup_env
238b33de3be Change test/instrumentation/update-* to new setup_env
cbc887a1d6b Change verify-govulncheck to new setup_env
024f4e9c09f Change verify-generated-docs to new setup_env
35aa5b3c698 Change verify-fieldname-docs to new setup_env
0d30f918fae Change verify-description to new setup_env
bad67dc973c Fix golangci-lint for workspaces
3163fc4f69a Change update-golangci-lint-config to new setup_env
714f8a0855f Change verify-yamlfmt to new setup_env
3dc447708b8 Change verify-gofmt to new setup_env
d785f13c059 Change verify-licenses to new setup_env
974276e4a08 Change update-openapi-spec to new setup_env
2ee339b0236 Simplify verify-cli-conventions; use new setup_env
2924b90d75a Change verify-api-groups.sh to s/vendor/staging/
b725fd20c2a Fix update/verify-mocks.sh
58ab5eea89f Remove some references to GOPATH
5f490b4fe89 Clarify, document KUBE_OUTPUT_* variables
e6dd36759f0 [kubernetes/scheduler] use lockless diagnosis collection in findNodesThatPassFilters
e9b30a0d29b fix UT failure TestPrintIPAddressList
c05e541793b Bump cAdvisor to v0.49.0
6c1a935da2d Keep streams from being set up after closeAllStreamReaders is called
a51a5b46223 kep-3716 GA, remove feature gate
26484df2108 Make websocket heartbeat test timing less flaky
fc86811cbe8 Avoid logging binary junk for frame write failure
e2575228890 add transient types to admission test.
b57d7d6ad79 add min valid jwt payload to API docs for structured authn config
8b035cd582b Revert "Update kubedns and nodelocaldns to v1.23.0"
e38531e9a23 Add `image_id` to CRI `ContainerStatus` message
e6ed0f37c65 Add apiserver_watch_cache_read_wait metric to cache refresh time
d6851ec7356 scheduler_perf: fail when input YAML is invalid
f47e0cb779a Rename KUBE_OUTPUT_BINPATH -> KUBE_OUTPUT_BIN
aaf6fc07d82 Make build scripts use Go import paths
f3c8e92def7 Clean up test.sh and get rid of GOPATH
8cb8535d9cd Excise KUBE_GOPATH from coverage build
0af31064421 Dedup binaries when building
9256031a871 Workspaces: excise vendor from golang.sh
df42d56947f Remove vendor from ldflags
81d932906aa Make golang::binaries_from_targets smarter
8b579b23473 Change the build_binaries path to use modules
65b841c077e Generate go.work files
e54f2296ed3 Require Go 1.22.0 in go.mod
e2b529fda73 Fix a test that doesn't build on Windows
ffa183a7a41 generated files
01db4ae9e74 Graduate PodSchedulingReadiness to stable
466019b1b27 kubeadm: implementation of API types
3b5a79f6471 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text
d303cec1183 Update test
55e9d509e61 Promote KEP-2681 to GA in 1.30
a3dfba8f506 Create e2e test for VolumeAttachment endpoints
b115df227ab update tests due to change of NewPluginInitializer.
64ee859aa82 make ValidatingAdmissionPolicy ignore excluded resources.
5b1fffa3e40 add resource filter to admission initializer.
a0dc949ce32 Improve error handling for json path results
61d6026d23a Fix field paths
45742d1d9af Add integration tests
31f7efab20f Add cost stability tests for chained and nested CEL comprehensions
7ef3eea8a73 Generate code
291703482d5 Add selectableFields to CRDs
d49949b6420 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix
fa44b9ca150 Fix panic in getNpdPodStat
f46df21cad3 update comments on API
5f7c36a4e97 kubeadm: fix a bug in default apiserver "authorizaion-mode"
2a22b6f6b8d Add information about SELinux test tags
ba3562776f1 Update SELinuxMount stage/unstage tests to allow RWO
52558a03104 Add e2e tests for SELinuxMount
92bdc7b3873 Ensure that initial events are sorted for WatchList
58a826a59a7 graduate MinDomainsInPodTopologySpread to stable
20ded275705 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
e663285ccf4 Add `image_id` to CRI `Container` message
3327bb36749 CHANGELOG: Update directory for v1.30.0-alpha.3 release
b394aac4ce3 Use the websocket protocol header, verify selected protocol
03812ddb169 streamtranslator counter metric by status code
e89dddd4af6 jwt: strictly support compact serialization only
dc4c92f5a56 add support for map
4fe78a17ddd Add duplicate key and field case-sensitivity CBOR decode tests.
374e4b56861 Address review nit, use longer variable identifiers.
3852d1c0c15 Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380)
cb39dfc9deb Promote ImageMaximumGCAge to beta
f832692d980 uid is also supported in field ref for downward api
ecaf2093f51 storage/watch_cache: rework getAllEventsSinceLocked
d629d3fa355 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc
f90bcf649e0 storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested
0e2b4472694 kubelet/userns: Test new functionality with feature gate enabled
658b45cd035 kublet/userns: Test new functionality with feature gate disabled
1fb1218f57f kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format
b2a92406efd KEP-127: check for runtime handler userns support
024146f7058 KEP-127: the kubelet stores runtime helpers
ea69a5ea987 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades.
c3caddf3e69 e2e_apps:stop using deprecated framework.ExpectError
a147693deb2 remote command turn on feature gates
0a1edf8bda8 Re-add KUBE_TIMEOUT explicitly to make test
dd1e617ba0b Scheduler first fit (#123384)
ca41a9222d5 Fix makefile variable expansion for test-integration target
aefaf66d2b4 remove unused service keys from aggregated discovery
0045ef5294a system:kube-scheduler: extend the RBAC with pods/finalizers
fd5019a5468 ktesting: ut flake fix for CI
a24f2c11923 Validate restartable init container state transition
c99996efab1 bump metrics server to v0.7.0
0ab006b8a1e node-controller reconcile node labels on each update
03bd3e25b16 [cloud-provider] require providerID to initialize node
099f26296b2 integration test for cloud provider
ef83ec27536 don't use leader elect on ccm integration tests
08f8be99039 fix goroutine leak on legacy-cloud-provider gce
3636971c39c add aojea as reviewer
b4b4784c6c4 enable ip aliases on clusters by default
3908a46b222 bump cloud controller manager to v29.0.0
b584b87a94d kube-controller-manager: readjust log verbosity - Increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. - Making sure the context is properly injected into the broadcaster, this will allow the -v flag value to be used also in that broadcaster, rather than the above global value. - test: use cancellation from ktesting - golangci-hints: checked error return value
dc7114fa911 fix default IPMode set in UT
9f6b48f1e7f fix node lifecycle controller panic when conditionType ready is nil
0f083966a7a set actual podToMake values
840ef149071 ktesting: doc updates and fixes
fb3ab538221 Replace fmt.Print with printer in upgrade plan code and fix configVersions are not printed when output is json or yaml
e6d6d8e14c2 feat: print etcd ready status
07e0a80216c graduate HPAContainerMetrics to stable
df92ad9bcbf Run autoscaler as non root in kube-up
d7735f32d0b Skip autoscaling tests when we hit rate limits
1ecd4053de7 ktesting: skip timing check in unit test
8980b4b846c Revert "fix flaky ut in TestCause contexthelper_test"
18ba3b388ee fix(scheduling queue): ignore events that interest no registered plugin
bbef156ef5d update 129
b3216214f95 Fix sample-apiserver rbac for v1.27 and bump e2e
e2ff63103df fix for persistent Horizontal pod autoscaling failures
148757903ae release v1.29.2 for sampleapiserver
247233f7b40 bugfix: modifying argument causes wrong fieldpath
e2506906d61 kubelet: fix flaky unit test with TestRotateLogs due to improper handling of goroutine in the tests
75238e592d6 kubeadm: remove bridge-nf-call-iptables and bridge-nf-call-ip6tables preflight checks since not all the network implementations require this setting
e1ac3e1de76 Fix kubectl proxy e2e test
52dd6030551 initial e2e for aggregated discovery
13dddca6a2c Add "disable-force-detach-on-timeout" flag to kube-controller-manager
4760e0cc44f refactor: use shared CollectParams from VAP
64cd09f7208 refactor: use match from generic pkg in vap
96c418a7b73 add generic policy dispatcher
9f9858b6caa Hit APIServer cache when testing healthiness
2e920365766 Rename "new" reconstruction just to reconstruction
e9193b4f336 e2e: remove dead code for providers
d816ab7657b Promote LoadBalancerIPMode to Beta
4cb4228522a ktesting: improve unit test coverage
4ffa628ead5 ktesting: add missing methods to error context
dc6abc3ff8f ktesting: add Underlier type alias
fe10bfb044f ktesting: fix ExpectNoError
2a2542289f9 Remove usage of NewVolumeManagerReconstruction feature gate
513c2a3690f Mark NewVolumeManagerReconstruction GA
78c96102351 hack/tools: update to golangci-lint v1.56.2 + golang v1.21
cc515bd8f13 Job: Fix test case names for the validations
0c4df640920 fix api
aaa9b6ebd75 Fix NFS related issues on GCP/Ubuntu
f3cb5059a7b kubeadm: fix a bug during kubeadm upgrade, where it is not possible to mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory) so that kubeadm stores its information on the mounted device
9bc5257c450 [KEP-3962]Add feature gate for MAP (#123425)
11ed3032c09 test: infer gvk of objects
acf1d850c61 refactor: handle paramKind directly
83751630081 Add test to validate non empty pod log dir
81e4c3002a7 add nil check to avoid passing fakeCh for all discovery tests
ecaf269d3c1 add new test cases to test json output when fetch kubeadm config from server
dd890b899fa Make PodResources API include restartable init containers
16794502eeb kube_codegen: expose external-applyconfigurations flag for client generation
f6682370b1a fix flaky ut in TestCause contexthelper_test
98437cb4be6 fix json output when fetch kubeadm config from server
ce6bacb5acd fix persistent volume docs link
6726e656190 Aggregated Discovery, mark stale before initial health check
5fb002147bd Remove unused Resolver interface in pkg/proxy/util
43ba0bd53b7 kubeadm certs check-expiration support json/yaml output
4172d364865 Codegen: use plain find instead of git ls-files
527d2ea9d0f Codegen: use plain grep instead of git grep
9f4b82bf3b0 Cleanup: s/depreciated/deprecated/g
d7028a8ed50 Add SELinuxMount feature gate
ba8fcb5ef6c kubelet: don't disable gc if max age is specified
8dddf6d3140 e2e_node: add test for max age after kubelet start
a8ea9363648 image gc: don't start until max age has passed since kubelet started
6cd78bc5fc5 node e2e: add image max gc test
be7856e3402 e2e_node: factor out waitForKubeletToStart
da8ffcd1dc3 Switch 'ContainerCheckpoint' from Alpha to Beta
5a8579a3e40 kubelet/userns: Remove tests that fail as root
cb3180950ef dra e2e: fix stack unwinding in helper function
c6b483ea05c kube_codegen: expose plural-exceptions flag for client generation
fe8e896df87 Improve the doc comment for the Job status.active field
3c9c141d980 exchange the order of comparators
7b108d8ee19 Add testcase covering unknown plugin config
611f8ba8153 bump nfs-provisioner-to-v4.0.8
c74ec3df094 graduate PodLifecycleSleepAction to beta
e158a83d9d3 KEP-127: Add UserNamespacesPodSecurityStandards e2e test
65faa9c6800 Consider initContainer images in pod scheduling
b3ba6bda2b4 Add missed clusterEvents to UnrollWildCardResource
fa6429a31c9 Use new 1.4 NFS image
ec394ec53db Fix NFS related CI failures
c29450eb009 kubeadm: apply retries to all API calls in idempotency.go
0f49a1e36e0 fix panic in CRI stats of windows
dfc598b6feb Bump containerLogMonitorInterval to the minimum allowed
01ce36dd9e3 KEP-127: add RuntimeHandler message to cri-api
ae0a813be10 Fix tests after rebase
c8b4d8ebedb kubelet: add reason field to image gc metric
d3a0e296def Update x/crypto to 0.19.
f38852768e3 bump the stability level of apiserver_storage_size_bytes to STABLE
5fcbc9d2fca Fix permission denied error
ff4f2907c51 Use non-default directory for pod logs and limit path to ASCII characters
19d9405a1c3 Update comments and error messages
d9e2487d0c3 Add PodLogsPath to kubelet config
3e431adb036 Add AdditionalLabels to cloudprovider.InstanceMetadata
7db7222592e kubeadm: introduce the WaitForAllControlPlaneComponents feature gate
d5d3eddb95b Add allowed/denied metrics for authorizers
59bf8b02e63 Refactoring to encourage use of switch case
7b2698a5e5c Add handler to run watch serving in separate goroutine
c1f2fe7bcb0 golangci-lint: optionally skip it during "make verify", II
7faa8bbac3b Add e2e test for kubectl interactive delete
6d5133f3ecd add functions to policy accessors for getting match information and params
def05a20e22 flake: avoid flake by ensuring params appear in the initial list
57fc5d24013 Add decode and roundtrip tests for CBOR marshaling.
871279978fc Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
71479b55777 [kube-proxy] add log verbosity to endpoint topology hint loop.
f84d643c204 Use the Defer for pod replacement policy
066421f108c Add CBOR Serializer implementation.
ab8cdae3b1f Reset metrics in the Job integration test before testing
ec7e051bc00 Always test PDB's during service upgrade test
115dc90633f Increase accuracy of the pods_creation_total metric and improve test exec time
b5b62d4f0ed Update kubedns and nodelocaldns to v1.23.0
0feb1d5173c Add integration test for multiple audience in structured authn
bd27c99262e move OWNERS from validating to all new parent policy folder
5dc92ada068 Implement authz config file reloading
3a98e60a719 Move authz construction to reloader
2b00035b5fc Split construction of authorizer / ruleResolver
1fddc948ed8 Split node/rbac/abac construction
49124293c3c Store constructed node/rbac/abac authorizers
75a30692945 Remove unused lookupIP field in NodeIPAM Controller struct
41435d045db Guard empty status.acceptedNames
18c563546a7 support multiple audiences with jwt authenticator
3cc3b002ba1 CHANGELOG: Update directory for v1.29.2 release
b202d053fa7 CHANGELOG: Update directory for v1.26.14 release
cf99360c1f3 CHANGELOG: Update directory for v1.27.11 release
14045bf340e CHANGELOG: Update directory for v1.28.7 release
aac43dc96f2 Bump github.com/fxamacker/cbor/v2 to v2.6.0.
5f4cb8b09a4 Move kube-apiserver authz validation functions
b5e0068325d Support all key algs with structured authn config
630ff96f9d6 Revert "Scheduler first fit"
e8b08cd056f e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
5d861b6f12e promote agnhost to v2.47
aa772d77fbc e2e pod: dump pod in unexpected phase
008b075b462 DRA: fix data race in resourceclaim.Lookup
9c726b015c5 agnhost: v2.47
2383fbe53a8 CHANGELOG: Update directory for v1.30.0-alpha.2 release
b8a59346fe6 test/oidc: extract key type to allow testing different algs
b7e70f0e000 update-vendor after package rename
3094395fa76 bugfix: avoid NPE possibility by making composition environment global
18fbc48b015 refactor: implement VAP off of policy plugin fw
a6366573d5c refactor: create generic policy plugin type similar to webhook
2fa02552ebf remove comment
48b1576980d use table test pattern and replace hardcoded values
19da90d6396 Add AudienceMatchPolicy to AuthenticationConfiguration
6ff675310c9 image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
39606af8c3d golangci-lint: optionally skip it during "make verify"
7ee89440c39 agnhost: v2.46
07c701fecb6 agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
8876b68a604 golangci-lint: add hints for error wrapping
8e2c1b559ac update images to have the full semver in the tag
1b1b902f81d codegen: don't nuke files if only verifying
e53ac426335 e2e labels: add placeholder docs for existing items
445443bd8a5 e2e labels: ensure that the lists remain sorted
a834bd84b54 cri-api: KEP-3857: Recursive Read-only (RRO) mounts
77241d31253 Add `apiserver_encryption_config_controller_automatic_reloads_total` metric
4ae2b3f75f7 Revert "kubeadm: increase ut coverage for app/util"
0e6409873a4 remove --v arg from kubetest2-tester-ginkgo test args
7dd624d3443 ci: bump kind to latest for kms jobs
5b899d9303b make use of latest snapshot controller version v6.3.3 in the deployment
d697f43d738 refactor: move matching logic into parent policy folder
8b14116509a refactor: move vap into parent `policy` folder
8b26b6eec1b refactor: move celmetrics close to its usage in vap
5ba3883be02 Adding unit test for makeWinContainerStats
5c825d8a226 core/v1: remove comment about non-existing constants
a8abed80153 Update publishing-bot rules to Go 1.21.7
da0c9a93aea scheduler_perf: use dynamic client to create arbitrary objects
c46ae1b26ae scheduler_perf: use ktesting.TContext + staging StartTestServer
63aa2615834 ktesting: add TContext
75210d0840e Clean up dead code in node controller
593b1c6c63e Do service.spec.LoadBalancerSourceRanges validation inline
d9302157944 Update service.Spec.LoadBalancerSourceRanges validation tests
73cc31847fc fix
eec508e488f use patch number
ddb0b8da9db [go] Bump images, dependencies and versions to go 1.22
ab8c784ee97 kubelet: enable configurable rotation duration and parallel rotate
36904475db4 kubeadm: increase ut coverage for app/util
d42d9a9b079 features: promote NodeLogQuery to beta
3e777540fda add test case for error inside variables.
13c848f562c self nominate kevin hannon as a sig-node reviewer
3a813049d3a add aojea as feature-approvers on OWNER_ALIASES
6d6398ef926 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642)
e821e0de15e remove error wrapping from builder
de6989041a7 added OWNERS to test/e2e/feature/feature.go
0f5cf6c1cd9 Add image pull duration metric with bucketed image size
c8d18da4377 Scheduler: Fix the feature stage of preemptionPolicy in the API comment
1ef469343f0 Job: Use generic sets to avoid unnecessary string casts in valiations
42672ee2ea1 Make comment about reject action more accurate
c7e48f1ebf5 kube-proxy: flush nftables base chains on startup
7a56b6e3f7a Add validation.IsValidCIDR
658e3308f34 etcd: Update to version 3.5.12
fc610f0941f kubeadm: use current-context when validating kubelet kubeconfig
105ec3d48fb fix linter failures
852c03a49b9 check key is set before deleting from map
4d8c3530f57 fix regular bound service account token test
ac9482d15f4 update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1
eceaed8c075 Put validation utility packages used by API validation under API review
1ae7553744a Revert "print error message regardless verbosity level"
e087acc7917 refuse to allow apiserver to startup if ServiceAccountTokenNodeBinding is enabled without ServiceAccountTokenNodeBindingValidation
1085c0b15a4 Bump sample-device-plugin image version
9e37ccedc7f apiserver: refactor handleError in endpoints/filters
6a98704229a Bump to latest version
63e91ed0232 remove deprecated framework.ExpectNotEqual
dfc20d19c8a fix integration tests now JTI feature is enabled by default
cae710d9e96 kublet/userns: Test error messages on init failures
1eab8be822b KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta
5855f5178f4 Fix the syntax error in the comment of the checkQuotas method. (#121428)
4ddf69a8358 Remove checks of the CloudDualStackNodeIPs feature gate
eba4fd82eba KEP-3705 CloudDualStackNodeIPs to GA
deec79ad8d6 kubeadm: increase ut coverage for apiclient/idempotency
7f12735fffd use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint
becb25c01f9 Bump version for the sample-device-plugin image
f97dec28407 Add comments about wildcard clusterEvent
31c86e38ac6 Update in-tree azureDisk and azureFile tests
0cd9d40a654 Test_Run_OneVolumeDetachFailNodeWithReadWriteOnce use waitForAttachStateToNode instead of time.Sleep
d81023db30c When matching clusterEvent, we should consider the "*" additionally
3a4c35cc89c Comment on QHint for CSILimit when CSINodes are added (#122758)
960d7fbf094 add admission tests
a0770386abe fix copy paste
b0c9a18673b add TestPIDPressure
195a7747180 eviction_manager: add unit test for PID pressure
774d666d1ce kubeadm: better checks if the node is CP during "upgrade node"
f47c2a1ba63 Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch"
9027049f2ce local-up-cluster.sh: Use config file instead of flags for kubelet
dc832c6e59e add support of variables for Type Checking.
b636984004c test: remove unnecessary skip healthz check from test
71bf5630343 Job: Stop unnecessary sting casts in validations
21ba0d59d3a refactor type checking to use CompositedCompiler.
7cab0ad2d2b apiserver: warning should not panic when request times out
c82c80099d8 add some comments, redesign style of enums in simple and long view, fix tests to these new changes
a56d483df06 kubelet/userns: Use t.TempDir()
0f7b9cc4f53 pkg/kubelet/userns: Simplify error messages
fdc20de5004 kubelet/userns: Wrap error message
065066d1aba kubeadm: support digests in DeployedDNSAddon()
1db6e434f3a build etcd image v3.5.12
227c1915db3 enhancement(scheduler): share waitingPods among profiles
8bf03e83d3e Stop claiming --node-labels is alpha
2cab79710d5 kubeadm: enhance encryption algorithm support in v1beta4
2dd81563a96 Update to runc 1.1.12
60483ac1824 CHANGELOG: Update directory for v1.30.0-alpha.1 release
d190fa3e7de Fix race condition between external-resizer and kubelet
593654eaa3b Fix cleanup of file subpaths
97640d3e2de fix test test should assign default SC to PVCs that have no SC set failure
9d4997ea69e change the extractEnum function to add limit, intent and add tests for new behaviours
67926c3777c Update in-tree vSphere tests
01dbb85974d fix: correct incorrect comment & function name about SchedulingGated
717a0002b75 [gce_runner] use metadata file when values have special characters
b8c19dd1d21 Fix deprecated version for pod_scheduling_duration_seconds
77f03c17449 Don't export single-use types
01155f59c35 Merge pkg/util/config into pkg/kubelet/config
049261aca1b Delete unused config utilities
e198938671c Remove deprecated comment about cleanup the target_path of CSI volumes
77fed9d2b7b fix GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction.
0283498ab40 fix gofmt error
0c7281624ea change style of enums
f589b911f85 node_controller: improve taint eviction queue add worker time args
71559bd0267 bugfix: dont skip reconcile for unchanged policy if last sync failed
c222db1429e fixes kubectl explain to shows enum for field types if they were defined
2216361c59e fixes kubectl explain to shows enum for field types if they were defined
d7c1a61e04e kubeadm: increase ut coverage certs/renewal/readwriter
7f2d78656ca Updating FG based tests
8bc63027d9f remove extra space in log
2c829cf29b6 chore: Refactor network load balancer creation in e2e tests
6cc99274872 Add DEPRECATION for CloudAllocator in node-ipam-controller
da05076868a Reorganize a bit of winkernel proxier setup
33bd5fb3c44 Remove unused param to winkernel proxier
4716bf8bd45 Fix issues found by linter
ee86ca9f13b [go] Bump images, dependencies and versions to go 1.22rc2
c9991e42704 [go] Bump images, dependencies and versions to go 1.22rc1
76ea1420516 Use gcloud for gce_runner
a62579a5ebe fix(scheduler/metrics) correct the documentation on plugin_evaluation_total
1baf7d45866 Corrected some spelling and grammatical errors
a7cf7fe55a2 Bump shellcheck to 0.9.0
20ec766adfb bugfix: disable ratcheting for typemeta fields
7353f52bc8c test: add CRDValidationRatcheting e2e tests
768c169dd82 feature: promote CRDValidationRatcheting to beta
5f75c35edf1 apiserver: allow zero value for the 'nominalConcurrencyShares' field
85684ec4852 fixing issue with GetCPUUsageNanoCores on Windows
d60a25b2db5 Add DeletionHandlingObjectToName
a15f4376697 KEP 3458 - promote to stable
ceabc4aba84 DRA: always returns Unschedulable in PostFilter
6cf42037512 dra scheduler: reformat code
a809a6353b6 scheduler: publish PodSchedulingContext during PreBind
5d1509126fc dra: patch ReservedFor during PreBind
6a60a1ddadd Mark conntrack/fake as linux-only, add non-OS doc.go
5ab9f3d15f0 kubeadm: fix the err check bug in certlist test
ebba2d4472d Move some code in the proxiers
536364266c1 Sort messy kube-proxy imports
c2c4f4616d4 cleanup structured authn/authz error logic
c89dcf52b12 convert the expectedValues to be cel.Val.
d6991638029 extra case for affirmative has(map) test.
139c6daf302 Missed a spot! testing verify-licenses.sh
7801173f6ed get the error claim in dra
6e5e1d03177 Remove useless org mutate code
09a1abda998 Update vendoring to take new CBOR library dependency.
ef27338bef9 Add skeleton CBOR package and introduce library dependency.
89db64e0534 collect generated files and logs
39afee443f1 enable testing import check for kubeadm binary
ec1516b45dc kubeadm: don't fail post upgrade in EnsureAdminClusterRoleBindingImpl if the error is crb already exists
4d6c0ba518d kubectl debug: add sysadmin profile
bcf512693a0 kep-3836: promote to beta in 1.30
8bccf4873bd change --nodeport-addresses behavior to default to primary node ip only
9b96ab46eee Fix license verification script
1ad143177c3 Added metric resource name to HPA table (#122804)
af35b7ff2e0 Update Changelog with Release Notes 1.30 Team
b98e47dd801 tests: Cleanup for Job e2e tests global vars (#121695)
e490439262f drop deprecated pointer package
83de1586e08 boilerplate_test:fix pylint warnings
4473dfebbf9 fix boilerplate test
9dc1da1e5bf boilerplate_test: fix bad indentation
65d67101e72 Drop vsphere cloud provider
d0c323fb8fb fix convertField and its comments.
df9620c9f6f add support for equality check.
9bbdbc510eb mutation library for CEL.
eafa9bd24b2 Add validation tests
7972f0309ce Fix service account token projected volume validation
35004e8f77c Fix AtomicWriter may not create user visible files after kubelet was restarted
1d59d6b6c65 Use validation.IsValidIP in a few more places
519dd6887dc Make validation.IsValidIP return a field.ErrorList for consistency
f999b24fad9 Expand IsValidIP unit tests
8fc691be940 Drop validation.IsValidSocketAddr
09abfa46be8 Update knftables, with new sigs.k8s.io module name
367bbd01d76 update testcase on podreadytostartcontainercondition
8371e4cf931 quick break when met
740b4c456d7 k8s.io/client-go: add OverridingClientConfig overriding RawConfig
db80aa56ed8 k8s.io/client-go: add ClientConfig option to override raw config
e92a4debcbd Fix lint warning about unchecked error
d2c1a23a8ae Add stub methods for kube-proxy on non-linux/windows
8b22cb46969 Revert "Make verify-typecheck.sh only check valid targets for a platform"
b88fefad1f8 Add note about directory structure
62eb7cb4f93 make update: add update-golangci-lint-config
31de75f62cb KEP 3836 - promote to beta
0ef42133a18 Reduce verbose logs in MetaAllocator
b8df7e76845 unittests: Fixes unit tests for Windows (part 10)
b46455ddfe9 Fix to previous EnsureAdminClusterRoleBindingImpl fix
b18caee5dfc Fix EnsureAdminClusterRoleBindingImpl error handling
25a40b1c7c3 pkg/proxy/nftables: handle traffic to node ports with no endpoints
4b40299133e pkg/proxy/nftables: handle traffic to cluster ip
01d7de5464b pkg/proxy/nftables: rename constant names for nftable objects
80ca91c90c5 pkg/proxy/nftables: refactor packet tracer address matching
d23483dd7c2 pkg/proxy/config: rename import aliases
212c5dd2162 pkg/proxy/config: use blank identifier instead of ignoring error
43539c855f5 e2e framework: unify logging, support skipping helpers
dd0cee48955 e2e node runner: remove dependency on e2e/framework
3bf2bf81913 chore: Cleanup in-tree credential provider azure and cloud provider azure
a05db0dd22a Add retry around create
ed289f875e3 Remove some dead options in KubeSchedulerConfiguration
1645667297b compatibility fixture
6d65c063caa describer: improve job and pod template output
1a38fb3c354 init.sh fix
a2be736c027 vendor update
0bc023bc28c Add aggregated discovery v2 types
6ae264464ca Make local-up-cluster non-verbose by default
41e706600ae client-go/reflector: make UseWatchList a pointer
0ba903fd574 kubeadm: enable parallel pulls of images
510df7eab17 kubeadm: add validation of ImagePullPolicy in the API
754ffa3477c kubeadm: add ImagePullSerial field to v1beta4 NodeRegistationOptions
a4afaeda372 print error message regardless verbosity level
de014579a18 e2e: enforce usage of WithFlaky instead of [Flaky]
e3ee4e35851 e2e: replace klog.Fatal with assertion
427e0fadbac Fix flaking test: CSI Mock workload info CSI PodInfoOnMount Update
2cdd9a71306 kubeadm: use separate context in GetConfigMapWithShortRetry
5691a7899e7 Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly
1192f313b8b Fix local-up-cluster on darwin
e2222f1e304 dependencies: klog v2.120.1
8a89a1f5a5c mark density tests as flaky
18f0af1f000 dependencies: ginkgo v2.15.0, gomega v1.31.0
26a79e4c0ba kubeadm: special case context errors in GetConfigMapWithShortRetry
365cbe1b41f remove formatted newline
fd5353eb721 check for error message and type
8668c7f718f kube-controller-manager/options: unit test WatchListClient feature gate for command line options
3a6060745cc Remove unneeded permissions of node-controller role
83ff8a2f49f Negative index regression test for json-patch (#122625)
f40ff3d9ffb CHANGELOG: Update directory for v1.26.13 release
14294ce870f CHANGELOG: Update directory for v1.28.6 release
4a9906fd340 CHANGELOG: Update directory for v1.27.10 release
4f8aa21da88 CHANGELOG: Update directory for v1.29.1 release
f8e25eff926 client-go events: also support context for NewEventBroadcasterAdapter
ee354366f58 sig-instrumentation: add rexagod to other groups
6451fb0fe2c kubeadm: increase ut coverage for certs/renewal/manager
8f4c9c7605a k8s.io/component-base/logs: replace klog text implementation
2ce04fc04bf flag PersistentVolumeLastPhaseTransitionTime field as beta
3aa366a3eb1 e2e: remove dead code
041e97af1f0 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on
5ff42b23687 fix issue with using feature HonorPVReclaimPolicy in csi-provisioner
98054dd9d3a Clean unused code in kubelet server.
d21fc96db35 Fix type assertion error in init and join commands for kubeadm
8a32f346a09 kube/features: improve unit testing known/registered features
995135973d6 Inject feature gate instance into client-go for kube components.
54a6e6a7729 kubeadm: keep a function with short timeout in idempotency.go
ec89154276f Handles clean up errors
80fbc4c319b Revert using ginkgo.DeferCleanup as it doesn't run in the correct order
66ea02684b4 e2e: add NodeLogQuery tests for Windows nodes
c65d9e4d59f Replaces path.Operation with filepath.Operation
fcb51554a19 Plumb the conntrack.Interface up to the proxiers
cdf934d5bc9 Remove redundant iptables/nftables conntrack cleanup tests
db12cbe2ae5 Add conntrack.Interface, test CleanStaleEntries
51063cb5c41 Clean up conntrack unit tests
46c4249e3ec Remove code to be removed in 1.30
5cfd75a84ea Ignore vendor folder on client code generation
f29d6970c96 doc(scheduler_perf): enrich the documentation
7773b0f53fd client-go/features: introduce WatchListClient feature gate
9263a66aec7 kubelet: make log more clearer for not create a mirror pod
d652596e429 Remove redundant string conversions in print statements
0d366dd99ae codegen: Use long flag names for clarity
0f849d3b55b update-codegen: rename "base"->"file" for clarity
f2b550180c6 codegen: don't use xargs w/ maybe-empty input
582312d9650 Sync json-patch ver to the same as everyone else
7162b930bec code-gen: Use the passed FlagSet, not hardcoded
8b8f0a70cd3 Make verify-fieldname-docs actually error
0c3e49e64c0 Run test/instrumentation/update-*
5f876b9d0a5 kubeadm: switch from ExponentialBackoff() to PollUntilContextTimeout()
caf53114132 kubeadm: start using the Timeouts struct values
374e41cf663 kubeadm: replace deprecated wait.Poll() and wait.PollImmediate()
9b5ad7e1191 Add processStartTime in metrics/slis
8af9a177b2a If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it.
d2b16b2a21c vac support ResourceDescriber
9860e12d6ee expected and actual field position adjustment
08645984b0a Revert "Save a list of images used by e2e.test"
73565cde13d Use gomega.Consistently instead of sleeping
dcdfd714501 Fix kubeadm init regression
9a3f1a3164a Avoid panics when logging a nil pod.deletionTimestamp
46d0e1d5aaa Support overrides for registered feature defaults.
d954b25b118 hack/tools: bump logcheck to v0.8.1
6cd25f43a63 fix version typo of namespace indexer
4db86556e5f Update publishing-bot rules to Go 1.20.13 and 1.21.6
04b772c6611 logs benchmark: really write through pipe
7f1a30f8d59 logs benchmark: fix config handling
3fb67901642 Update env version, Add cost for previous func, add tests, etc.
5ca73197b3f Document the nftables kube-proxy packet flow
ddbf3ab6629 local-up-cluster: use the newly built library always
a5861a12626 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
3c86d21316c bump klog to v2.120.0
6f021e99cf8 dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake.
6376dd62961 component-base/featuregate: store atomic.Value fields as value not reference
56321a77799 Revert "Graduate Evented PLEG to Beta"
57ec7d20e89 client-go/features: move the defaultKubernetesFeatureGates variable to the new file
9c39f2b7760 Fix kubelet_server_journal --until parms.
b0e929264fb e2e/network/conntrack: rename invalid conntrack state test
6073d1cd3d5 Adds tests for bypassing scheduler processing
9387a66c71f Clean up encryption config reading and hashing logic
4ffa12b9d97 pkg/proxy/nftables: drop ct-state-invalid rule
04bbd3481f7 client-go/features: warn when ordering initialization issue
d74c57d4f59 client-go/features: introduce feature gates
71c3593f85b support nodeAnnotationsChanged event to trigger rescheduling
70e20b58dd8 Add missing string formatting directive
8abe5394ac9 Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies
4df39d89e0b Correct the link to install Docker Desktop on Mac.
ce263d88281 Address comments during Review
1a69fd4cb0d kubeadm: increase ut coverage app/componentconfigs
f21f8d99844 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode
50b3ffc71fd kube-proxy: LoadBalancerSourceRanges as *net.IPNet
9eac24c6563 kube-proxy: store ExternalIPs as net.IP
d2294007b0f kube-proxy: store LoadBalancerVIPs as net.IP
564b80b1e11 kube-proxy: don't use invalid cidrs in unit test
41ba76d23e7 kube-proxy: don't use invalid cidrs in unit test
2e999fff026 Fix compiling e2e.test on macOS
6b5e973e5f6 Migrate cmd/kube-proxy to contextual logging (#122197)
e46778a246a remove dead code
87816ffb2c0 Support ignore scheduler extender error when binding
f8abe71238f Add an post-upgrade condition to ensure the job is running
67cf648ab77 Add a new neverTerminate job behavior just for upgrade
b7012da2ad4 Remove providerless tag in controller_test.go
377f521038e kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support
ca8c27c480f kube-proxy: do not delete previously stale but currently active chains
073cfdfac90 kubeadm: skip unmount on missing /var/lib/kubelet
0fc1b9c9aad Promote LegacyServiceAccountTokenCleanUp to GA
683f7f43af0 e2e/endpointslice: add ready conditions
d5664276bf5 refact IsLikelyNotMountPoint
e25e1d39bd1 Add KUBE_PROVIDERLESS for CI jobs to run with providerless tag
fdf6503e601 Enable more storage tests to work independent of the providerless tag
5704a588101 add test for the registered feature gates
4b296699af8 Add fake GCE provider to make CI jobs happy
549ef5da1bd split ingress tests into multiple files
88bfefad0f5 import providers selectively based on the tag
220a559f45e Add missing doc.go for some providers
7a236bd7e06 Add providerless tags appropriately in test/
c019b51be41 Remove unnecessary providerless tag in azure legacy provider
5c196ddaef5 add patch integration test to disable nodeport for LB type service
4a18b4e9fe6 allow service NodePort to be updated to 0 in case AllocateLoadBalancerNodePorts=false
edff1c3b2fd swap originalPod and modifiedPod to match the comments.
801afbf888f refactor TestPriorityQueue_Update
288c00c0c7b Allow framework plugins to be closed
73bec0f6d95 api: remove SecurityContextDeny admission plugin
d9e48705ff6 kubeadm: make the active timeouts structure accessible from anywhere
ea0fa414457 kubeadm: implement mutators for "config migrate"
492c0619dc8 kubeadm: add a Timeouts struct to v1beta4
2f5121671fc kubeadm: add ResetConfiguration.UnmountFlags
afefc6f4ebe Make EndpointSlice API e2e test faster
af6e653f175 Use errors.Is() to handle err returned by LookPath()
2431a964af3 Drop hack/verify-govet-levee
9c6b42af46e promote contextual logging to beta, enabled by default
d6bfd7daeb8 kubeadm: throw errors on unmount instead of warnings
289bd72631b Add ut for pkg/registry/networking/servicecidr
4aecb151b83 Fix kubectl drain error handling bug.
99979fd98a6 kubelet: cleanup system-reserved and kube-reserved flag usage
1d144f518e2 Fix SELinux e2e tests: add label to observed metrics
246e69fb990 Use http/2 for localhost webhook
55c5db172ed lock GA feature-gate ConsistentHTTPGetHandlers to default
55e1646fa42 removed the deprecated azureFile in-tree storage plugin
a3c4a609950 Save a list of images used by e2e.test
10a6885da15 feat(cli-runtime): wrap meta.NoKindMatchErrors
2e8e2989d15 Removing Windows image from e2e test image utils
af8da8e01c2 [StructuredAuthnConfig] add comment for extra keys unique requirement
5405dd0f9b8 Update goleak from v1.2.1 to v1.3.0
d3b8eba690f Update konnectivity to 0.29.0
be88a79b6ab Remove unused csi-hostpath-testing.yaml
7503440ba85 bump runc to v1.1.11
09abd6be5a8 address reviews
a2f397a4b84 kubeadm: increase ut coverage fo phases/kubeconfig
97db0caf6b6 kubeadm: fix flaky test TestRunRenewCommands
c3775de7479 fix logic error
5ab23179473 run all PreFilter when the preemption will happen later in the same scheduling cycle
e1e035e3a80 doc: make it clear that newly scheduled Pods are Pod/Add events
bf1b3a161b8 add(nodevolumelimits): return UnschedulableAndUnresolvable when PVC is not found
2203cb7dde8 fix: create tls secret cert to crt for --cert flag
5607349e39a remove wrong warning event (FileSystemResizeFailed) during a pod creation when it uses a readonly volume.
8f2aaf63d7b Fix incorrect error checking
20fe2a3539e Add decoding time to the audit log
e3686246ea9 Fix update-openapi-spec to not change caller CWD
41a508f5388 kubeadm: print supported shell types in error message for 'kubeadm completion'
bd269e06baa feat: support annotation in nodewrapper
feb833f1296 fix nil pointer dereference when EventedPLEG is enabled
f73bba51c97 flowcontrol: set the serialization version to v1
430fd83454d kubeadm: increase ut coverage for util/etcd
3b67181c93b remove GA featuregate RemoveSelfLink
719844e196a Fix dry-run flag in go-runner and run_e2e.sh scripts
d849c625ec2 Remove kube-proxy proxy detection & increase timeout
86873d33352 NodeProblemDetector tags
d12416e2f31 remove duplicated check on validateTokenRequests for new object
f8f24cf8e7e ValidateVolumeAttributesClassUpdate also validates new vac
acbbaddada4 Initialize default attach func regardless of the value of flag
041efcd1d40 scheduler: update an old comment
1c089afcf37 Fix a set type
147114e6485 Update some change tracker doc comments
a8a12be3d30 Rename cache's endpointSliceInfo/endpointInfo to endpointSliceData/endpointData
764cb0457f5 Move some code around in servicechangetracker.go/endpointschangetracker.go
a73b275031a Split ServicePort/Endpoint from ServiceChangeTracker/EndpointsChangeTracker
ede0dc1d079 Make newBaseServiceInfo a function rather than a method
0779042a6f1 Remove a useless "_" assignment to appease the linter
452fcc5fd6e Remove some dead code in service.go
51f3b705c64 hack/tools: bump logtools to v0.8.0
90e68e3a024 Update the help mesage of interactive flag in kubectl delete
f89c744b7bb Only run Prioritize() for extenders with prioritizeVerb configured
cd3f7a31e81 Add unit tests for no score plugin scenario
7abba242312 Fix existing unit test (add no op scoring plugin)
e19be41f584 Don't evaluate extra nodes if there's no score plugin defined
4ede571f8bc dra e2e: unify per-node resource specification
bc83cea0eb4 test/e2e: add kubelet test for hostAliases with hostNetwork=true
d317b01244a Fixed Inappropriate Logical Expression
47ee56a7f25 core/v1: remove note about hostAliases not working with hostNetwork
4658f769456 CHANGELOG: Update directory for v1.26.12 release
c0e9fddfd97 CHANGELOG: Update directory for v1.28.5 release
38f4f9d8c4c CHANGELOG: Update directory for v1.27.9 release
c8a2d5684d0 etcd: Update to version 3.5.11
36cceff0a3c e2e: forbid usage of gomega.BeTrue/False
a8da4202c0a .*: bump golang.org/x/tools to v0.16.1
b0d4a8cd6df dra scheduler: fix incorrect tracking of claim candidates for reallocation
32fbb23f3b3 kubeadm: remove usage of the TryRunCommand() function
557118897de kubeadm: drop concurrency when waiting for kubelet /healthz
4a7592f8a42 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30
1f3e668e180 Use semantic comparation for API
725b107f494 Correct typo from 'gingko' to 'ginkgo'
626f349fef5 Drop PendingChanges methods from change trackers, move into UpdateResults
5d0656b1f69 Squash some unnecessarily-chained methods in the change trackers
c8f9ebfb72b dependencies: gomega v1.30.0 + ginkgo v2.13.2
538248df0de More understandable error for scheduler configuration validation
64da4345231 kubeadm: hide unwanted global klog flags
b6eac505fb4 Add testcase setup scheduler
2edb3349933 kubeadm: hide unwanted global klog flags
c1ce1e00ee9 Properly build-tag the Linux kube-proxy backend code
b69510b0690 Remove an unnecessary abstraction
75695dae109 move encryption config types to standard API server config location
868114a41de k8s.io/code-generator: include all metav1 applyconfigs
b6e34187ca4 Update duplicate env var warning
1d0453127d8 feature(NodeAffinity): return Skip in PreScore when nothing to do in Score
85cc2b38336 cluster/gce: upgrade cos-97-lts -> cos-109-lts
1ee81839036 add extra locations to check for release-tars
09a80df1d13 podtopologyspread: scheduler queueing hints
d36a7089cd9 scheduler/NodeUnschedulable: reduce pod scheduling latency
b6c1f8ef08c Fix etcd repository path to prevent redirects.
642574e9643 WatchEvents seems useless
aee1d54a0dc Drop SubcontainerInfo
c865ad532a4 fixing based on feedback in PR
9d1829c33ac Make OpenAPIGetter tolerant of nil
d621e09a528 remove unused GetRawContainerInfo
15e0c416019 Fix CSI migration for vSphere volumes
b3285fa8df4 Add tests for CIDR type
31f9384646a Add tests for IP type
e1f9aa450b7 Add costing estimations for IP and CIDR
4710f085b3d Add IP and CIDR libraries to CEL environment for 1.30
2f585b45123 Add CIDR network CEL extension
13b22b23a1a Add special IP validations to IP CEL type
c6aa360d3ef Add IP address CEL extension
85d08833bfa warnning on relaim policy when it is Recycle
eb8f3f194fe use build-in max and min func to instead of k8s.io/utils/integer funcs
fe29f47372e Remove GA featuregate about ExpandedDNSConfig in 1.30
4d7c5d9257e nodeaffinity: scheduler queueing hints
f676c99d6e4 Wire in field dropping for CRDs
88cfff678bb Drop v1.27.0 API testdata
8cf0c79fc85 Add v1.29.0 API testdata
06679402e75 remove PruneWhitelist, use prune-allowlist instead
c62155a7705 refactor healthCheck's CreateJob with TTLSecondsAfterFinished
be48c93689b Sched framework: expose NodeInfo in all functions of PluginsRunner interface
16b6be1e503 add unit test for the scheduling queue for QueueingHint disabled
e2cf9692fc0 Remove unused code in kubelet - take 1
ced99383d55 logcheck: remove redundant entry for pkg/scheduler
b450224c129 golangci-lint: inline logcheck configuration
49084fe5771 golangci-lint: logcheck v0.7.0, golangci-lint v1.55.2
e706b6ba14b Use a separate function for checking if device was reconstructed
87d817e62d8 handlers/watch: refactor watch serving to prepare offloading
16f35785f9f Drop publishing-bot rules for the release-1.25 branch
8251e4dfdf5 Update kubedns and nodelocaldns to v1.22.28
1160521a4f6 Revert "Scheduler first fit"
86ab185fa1e Migrate client-go/metadata to contextual logging (#122225)
01916625dab Remove unnecessary error catch in scheduling failure (#121981)
7a82c03daa3 nominate self (carlory) as sig storage reviewer
31710a799d4 fix: Refactor TestFinalizerCleanup unit test by asserting job and pod informer state (#121856)
2e388dd7e91 keep existing PDB conditions when updating status
16aad468b65 Replace test.name with test.namespace
a3a4192eb97 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests
8f5efce8e03 Update publishing-bot rules to Go 1.20.12
9573eb54c71 etcd: Build image 3.5.11
221897d7513 CHANGELOG: Update directory for v1.29.0 release
1ae5594fb2a Update cni-plugins to v1.4.0
b0a27ff34e3 cluster: bump cloud-provider-gcp image verison to v28.2.1
7aeecc42a46 Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
329b873e4e8 Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
9e1adced5db noderesourcefit: scheduler queueing hints
324816a883b dra: enable adding ReservedFor entries through strategic-merge-patch
983f6a4a84b Update cri-tools to v1.29.0
917027b42e4 fix incorrect function comment
56dd5ab10ff Add tests for checking of uncertain device paths
87c6b0d69fe Smallish update-vendor cleanup
477176a4674 kubeadm: add supported etcd version for v1.30
34bc590418a Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
1e54c050936 leaderelection: Instrument for when slowpath is exercised
1d9f7fd516b leaderelection: optimistically update leader lock
d5060de93f4 use e2e f.Timeouts.PodDelete instead of 1 minute
7dfe3d866b7 Fix verify-licenses.sh
6fee657d3ac Makefile: enable warn-undefined-variables
2208cb94936 e2e: only select linux nodes for NodeLogQuery tests
b9ff6b25f22 Simpler and less noisy make-clean
39417e9d449 kubeadm: update the help msg for `kubeadm upgrade plan`
7897709ed0f Add timezone column in cronjob get command
1d11bc4aca6 e2e framework: provide more guidance to developers
28f8e56d553 Fix prerelease codegen log string
44898f79099 Address comment
ed0facacfa4 Fix device uncertain errors on reboot
48671a3a20b explicitly stop/start docker to fix up local-up-cluster.sh
048cb8b2ed3 Keep presence cost to 0 to ensure backward compatibility.
20b67a4d1ac kubeadm: increase ut coverage of util/config
78b4ab11d5b also report scheduling_algorithm_duration_seconds metric when the pods is unschedulable
210ed2ebbd8 add preScore for volumeBinding
e92501b8fc6 optimize the comment
56262ca56aa kubeadm: cleanup unused CreateCSR and associated functions
2fd4758359b change func WithTracing parameter naming
51495bb4c59 optimize the unit test
ceb7ca93875 Fix etcd storage_events_received_total metric not being registered
4b1408c2e78 Fix typos: update registerCidrsetMetrics to registerCIDRSetMetrics
2d952528cfa belated updates to feature-approvers for SIG Network leads changes
69c40a33965 fix lints
74a6a4581f0 fix by linters
24c4d6f7c9c add unit test for kubelet trace
eed6e29a5b8 client-go events: support context.Background() as context
5310abe14ad make scheduler_perf usable from other repositories
08e5e8681dd E2E - Sig-autoscaling: Refactor the Autoscaling utils to use gomega.Consistenly according to e2e test framework guidance
a23b26913fc DRA helper: enhance context support
d11511b1e81 kubelet: enhance context support
0c33ada8503 update func CreateJoinControlPlaneKubeConfigFiles variable name
fa31b4d30da Remove GA featuregate about KubeletPodResources in 1.30
eb60b31e6eb Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30
a20093aa07c Remove GA featuregate about IPTablesOwnershipCleanup in 1.30
965b3634ff8 Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30
84c0ed2642f Add SidecarContainers feature beta version
e13dca64cf0 Remove GA featuregate about ProxyTerminatingEndpoints in 1.30
b1ad834dfb1 No need to calculate ResourceEphemeralStorage additionally
a80c3d03011 e2e/openapi: fix test panic when OpenAPI CRD doesn't show up within timeout
d9070623085 Minor cleanup in watch handlers
d8bd150784b support pod namespace indexer
9efff41b8e0 making suggested changes
55e60db88b1 Unify watch handler across http and websockets
a82ee6d4168 fix error check
8acf1857917 Use a generic Set for utiliptables.GetChainsFromTable
7cedc3d7417 Simplify creation/tracking of chains
1f5738df848 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
38c67af789b Use tristate for provideclusterinfo to manage provided flag
f035fea63ab remove unnecessary code
3df00d1bdde Only run Prioritize() for extenders with prioritizeVerb configured
56dcde86270 Add unit tests for no score plugin scenario
6d92b330e31 use ctx withoutcancel
5e7c4c245b9 remove the deprecated in-tree vsphere volume's code
a6e48ef978e Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30
90fc108f6da fix kubelet trace broke in 1.28
f7aca72155e unittests: Fixes unit tests for Windows (part 8)
feb23ec581b Fix existing unit test (add no op scoring plugin)
199dc03bdd4 Don't evaluate extra nodes if there's no score plugin defined
2d943801ad3 Clean up unused type `HealthcheckType`.
5e5f8b1dd29 move provideclusterinfo assignment into correct place
c86189d1de8 clean up unused parameters for volume zone unit test
eddf65849df Fix list_type_missing in k8s.io/apiserver
18f3941c24b Fix list_type_missing in k8s.io/metrics
58fb9f6e66b Fix list_type_missing in api/storage
e96578fb4d0 Fix list_type_missing in api/rbac
b2458e456a1 Fix list_type_missing in api/networking
7fc3ef1fec0 Fix list_type_missing in api/imagepolicy
cddfa437698 Fix list_type_missing in api/extensions
cfe146615ac Fix list_type_missing in api/core
fe902f7384a Fix list_type_missing in api/autoscaling
ad397373970 Fix list_type_missing in api/authorization
b24cffb1744 Fix list_type_missing in api/authentication
a3ea994fa28 Fix list_type_missing in api/apps
460df86f2a6 Fix list_type_missing in api/admissionregistration
b8982be2684 Fix list_type_missing in sample-apiserver
e9bd9262dc9 Fix list_type_missing in apiextensions-apiserver
dd80194d967 Re-run codegen with new kube-openapi
1f55357d993 Re-vendor k8s.io/kube-openapi
44060fb1f36 Fix "list_type_missing" API violations in meta/v1
9f8f55a6ed2 Use DBG=1 for conformance verification
37b7ae6b933 build: use -trimpath in non-DBG mode
2315d3fed54 uncomment ktesting.AnyToString
f86249c68e6 kubeadm: remove outdated notes during upgrade
e38362501b7 dynamic-resource-allocation Update API comments
e5b86c1034c Fix node update event will miss some potential changes
a601ebd6b60 Changed the log message
02b0dc98dd9 remove unnecessary fmt.Sprintf call
57a5db8da3d remove feature-gate APISelfSubjectReview
eb45a8f2f5b Added comments
76be319571b Optimzed the code
5c99f3a24e3 Logged the return value of ListPlugins
3e1dbccf4d3 Don't sort under lock
91c94d007fa fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
f221098d2c9 Fix: modify a flag doc of pod-max-in-unschedulable-pods-duration
468e2dac81d fix: requeue pods rejected by Extenders properly
b088e650077 kubectl config set-credentials: Add InteractiveMode and ProvideClusterInfo flags
c494e8b18e7 fix incorrect getDeviceNameFromMount comment
03b8241fcef put storage related plugins under SIG-Storage reviewing
4d9df1134f6 fix(doc): elaborate the documentation of SnapshotSharedLister
52ff7f8dc0c fix(framework): elaborate the document on PostFilter
9cb2d1cf6de Removed Comments
1dca49157a5 Utilized ListPlugins method
59c75b001a4 cleanup: remove getStorageAccountName warning messages
1dcb31aebbb kubeadm: fix flaky test TestRetrieveValidatedConfigInfo
7ba546cfeb7 drop alpha comment on ephemeral storage
aba817ac1d6 return not-found errors properly from fake listeres
f0aab8c984d encoding: avoid setting GVK unnecessarily
1489a992060 Update mount_windows.go
a3e27aa1ade ad controller: optimize populateActualStateOfWorld
854347ac818 ad controller populator: check for inUse sync in test
a85f5879849 Job: Use built-in min function instead of integer package
140abfc010c Remove `leaky` package and move `PodInfraContainerName` to staging
2076429e434 Enable pod container resources tests on Windows
19da26005b3 kube-proxy: Fix etp:Local for externalIPs
81d040d5381 remove import hack about k8s.io/utils/clock/testing
565ac50bafb Drop testing dependency from shipped binaries
12c9bfc21d6 k8s.io/apiserver: refactor GenericAPIServer healthz code.
5164db066cd Drop testing dependency from shipped binaries
3df90134ca5 add script for restricting import of test only libraries
1dadf576f29 Updated Added Imagefs inodes in default Eviction Hard
b8533f79769 kubelet: add metric for the first pod with network latency
f9ceab37ca3 e2e: pass context into pod helper functions
4de02f2dec9 kubelet:memorymanager: add metrics e2e tests
ddd60de3f3a memorymanager:metrics: add metrics
d6b8a660b08 Fix kubelet panic when allocate resource for pod.
33aa56097a3 Set the initial length of set[T] in sets.KeySet
4c06bd5bbb8 fix bad assumptions in gce network tests
f040d9012cf verify-no-vendor-cycles: set up Go environment
30dc2f0773c Added Imagefs inodes in default Eviction Hard
60520b6d4a2 look for the cm after the lb is created
ae3235aa01b Remove --use-real-proxier support from kubemark
407b9d96104 remove duplicated check in operator_generator.go
bd4707ac9a9 fix dns autoscaling test to run with coredns
4a4940694f4 remove stale comments
1c0044594dc cleanup todo after feature.BlockVolume gate was removed
3fb16abfca4 make the decode function respect the timeout context
fec63d5ea0e fix: use generic set in pkg/util/iptables
ae24846c487 add comments for switch of syncUnboundClaim
29335763feb kubeadm: increase ut coverage app/upgrade/versiongetter
166b71757b9 dependencies: zapr v1.3.0, zap v1.26.0
abaf7a800db increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test
ab1eb8ff244 Add comment in noderestriction on Node-bound-tokens
ed8d10f6605 Update sig-auth aliases
d78a794be22 Remove unnecessary sort in kube-proxy ipvs
1cd1092dd98 Remove NodeAlphaFeature label from sidecar e2e tests
b91f07008cc add ut
c26bb7eb85a update util/sets to use standard package cmp
a00a610d15c move SidecarContainers featureGate checking to PreFilter
6cca6e05246 bump kube-dns to v1.22.27
e48aa093402 Make verify-typecheck.sh only check valid targets for a platform
090b79f65d7 Update version.sh
957e9a7f1a0 adc remove redundant check
a96d21b4b0c Add logs for event handler
84da8e6a532 cluster/gce: add match conditions to PersistentVolume labeling webhook
624169c5b50 k8s.io/apiserver/storage/etcd: refactor etcd GetList.
1186e25a452 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs
6b3476b79fe node labels and taints do not change, node events are ignored in daemonset controller
7b60e7e2a31 Added plugins enabled at each extension point
d96a9858d39 client-go: allow adding indexes after informer starts
58236aa3ebf remove EventRecorder from ControllerParameters of pv base controller
fade7463cd4 Add String() to framework status
083818f9e29 fix wrong condition description in PVC
e2227a24fbc switch to e2 machine types
4fa3247a61e use context for lazy evaluation.
6b00f3a7976 add StructuredAuthenticationConfiguration feature to kube feature gates file
8e5b959e122 windows-tests: Add retries to Windows `assertConsistentConnectivity` func
32db5774a34 Fixed extra lines
81bf3a59d1c Added mutex locks when accessing file object : addressed review comments
63b3085f2a8 fix ad controller populators test
21cf23b4faf Added extra info about default plugins in component config
0e76e2c2bbf Added mutex locks when accessing file object : lint check fix
9ed4c58a1f1 Added mutex locks when accessing file object
e1e6f341999 test-autoscaling stop using deprecated framework.ExpectNotEqual
3c530eea2da automatically setup etcd when running verify/update openapi-spec.sh
4bba73a2bd9 Add comments to cpu accumulator and minor renames
ae5bf8e4c64 verify-golangci-lint.sh: clarify intended usage of warnings
95f2c859a39 snapshot controller version bump to latest
48452fef8de kube_codegen: Add a --one-input-api flag
87d158e4571 kube_codegen: genclient can look in any Go file
a789a9d44bb kube_codegen: avoid dups in dirs with >1 file
3df3b832265 e2e_api: stop using deprecated framework.ExpectNotEqual
e69a960792e skip deploying csi driver if it is already installed
e20ecbe1b49 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual
f53ff68edd1 Generated files
531324cb1df allow FSGroupPolicy and PodInfoOnMount to be mutable in CSIDriver.Spec
d9545976ede using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils
47b1002bab4 fallback to origin IsLikelyNotMountPoint to avoid regression
81ef146e2fe feat: support statx STATX_ATTR_MOUNT_ROOT attribute
dbb6927ec22 Replace stat syscall with statx
b20bc79a602 remove not register event code
6e0ece85c49 cleanup the retrun style for cp execute function
aa9b2b16968 use generic Set in api
567fca7baa9 Use copy() instead of a for loop
61023579c11 Fix Windows credential provider cannot find binary Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly.
76919e95697 Updated descriptions in kubectl create deployment help , added example for multiple images
56c241783e3 fix
ab1f97bd6ed fix
c7549fe340d fix(kubectl): delete pod declare no controllor note
286628b0304 Fix error message for invalid resource reservation
e40d00cf53a fix: 119921
ad0b671b56d getPersistentVolume remove reduant deep copy
12b370cbbb4 bugfix(namespace-controller): Correctly cascade ctx when making API calls
3579674df2d fix comment of rbac decision for NoOpinion
c2049c7961b chore: loop optimization
defe307ec22 chore: io/ioutil deprecated
e6900f5ead7 Optimize the performance of the Clone method of preFilterState
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
