summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* podman; fix patch fuzz/failureBruce Ashfield2022-07-171-19/+17
| | | | | | | | | | patch a33188f [podman: Fix host contamination] appears to have introduced fuzz/failures. Which strangely wasn't picked up on merge testing. We refresh the patch to fix the issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-umoci: add parameter for stop signalVasileios Anagnostopoulos2022-07-152-0/+5
| | | | | | | | Add an optional parameter that allows to override the stop signal that is used. Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* image-oci-umoci: properly handle tags other than latestPascal Bach2022-07-151-17/+17
| | | | | Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: Update to v1.9Andrei Gherzan2022-07-153-34/+38
| | | | | Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: Fix buffer overflow bug on workdir pathAndrei Gherzan2022-07-152-1/+36
| | | | | Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Add support for rootless modeAndrei Gherzan2022-07-155-1/+36
| | | | | | | This support is disabled by default and exposed via PACKAGECONFIG. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Silence docker emulation warningsAndrei Gherzan2022-07-151-0/+4
| | | | | | | | | Podman can run in via a docker symlink emulating docker commands. By default this generates a runtime warning. This change silences it via the provided interface. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* slirp4netns: Runtime recommend the tun kernel moduleAndrei Gherzan2022-07-151-0/+2
| | | | | | | | | slirp4netns uses a TAP device to connect to the internet in an unprivileged way. Without the required kernel support (TAP/TUN), slirp4netns will fail at runtime. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lopper: update to -latestBruce Ashfield2022-07-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping lopper to latest, which comprises the following commits: 9159040 lopper: assists: baremetallinker_xlnx: Fix race condition in memory domain handling 38d18ca lopper/fdt: add /memreserve/ to preprocessing routines 33ee8e6 sanity: add /memreserve/ test c6431bf fdt: fix dtb handling of common prefix nodes 211c902 lopper: add support for /memreserve/ 4545eed base: add powerdomains to default phandle meta data bc95bc2 tree: handle variable sized phandle properties 69d8849 openamp: Update YAML handling to match spec 578de1d lopper: assists: bmcmake_metadata_xlnx: Fix race condition in the assist file 14d2aa3 tree: ensure that phandle is initialized before export a6b38e8 tree: make label generation more robust 9faf923 extract-xen: add [extract-xen] prefix, and write xen,passthrough 00c14d5 assists: add imagebuilder wrapper assist d879eaf extract: use lopper.write for export of trees ca80fbb extract: improve xen passthrough configuration 791f0f5 lopper.py: allow execution from any directory 0c62984 lops: fix comment style 3598d54 lopper/tree: handle invalid last phandle 697aa62 assists: create generic tree extraction and xen-processing assists 5ae6650 lopper/tree: improve phandle and node operations 5a230a5 lopper/assists: allow chained command line assists bbb92ee lopper/tree: make import/export more robust b8aeb54 lopper/tree: improve node iteration and resolution 692cbc9 lopper: lops: lop-domain-linux-a53-prune: Remove unneeded nodes for Linux boot cd25873 lopper: assists: baremetalconfig_xlnx: Fix KeyError exception 58dd00c lopper: assists: baremetal_xparameters_xlnx: Fix KeyError exception 01ae242 openamp: xlnx: Update RPMsg-kernel mailbox information fbc4329 lopper: assists: petalinuxconfig_xlnx: Fix indentation and width params 5c3074b lopper: assists: petalinuxconfig_xlnx: Add support for additional meta-data cc3de25 lopper: assists: breametallinker: fix race condition in memory node handling 7723fed lopper: lops: a72 linux: remove axi intc node 743432e openamp: xlnx: remove TCM compat strings 53746be lopper: lops: lop-domain-linux-a53-prune: remove amba_pl pruning 0d56f35 lopper: lops: lop-domain-linux-a72: move prune operations to separate lop fdbbe7b openamp: xlnx: add support for Versal platform 1839bdb openamp: xlnx: add 'power-domain' prop for Xilinx R5 remoteproc driver SRAMs 14d1caf lopper: lops: lop-domain-linux-a53: move prune operations to separate lop 7169df0 openamp: xlnx: remove dead code ec9fdce openamp: xlnx: remove definitions node 07f48d0 openamp: xlnx: Add text file for OpenAMP Channel information 637863f openamp: xlnx: update IPI for mappings for ZU+ platform 1b41e52 openamp: xlnx: rpmsg: generate rpmsg device tree nodes a643273 openamp: xlnx: remoteproc: generate remoteproc device tree nodes a833729 openamp: fix bug for domain-to-domain subnodes for openamp relations. ea6d8e1 lops: openamp: describe OpenAMP relation properties as phandles 40c2070 openamp: translate YAML Remoteproc carveouts to DTS fda40d8 openamp: translate YAML RPMsg carveouts to DTS 9d938f7 openamp: xlnx: parse pre-existing nodes in YAML eafb17a lopper: process .dtsi input files the same as .dts ce4638a lopper: assists: petalinuxconfig_xlnx: Add assist file for generating petalinux tool required configuration cfa0593 fdt: make node prefix lookups more robust 2f3f2d2 lopper/format: allow tabs to be used when writing dts c7b22ce lopper/subsystem: update access to latest specification Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: remove obsolete sdl PACKAGECONFIGRoss Burton2022-07-131-2/+0
| | | | | | | | | | | | | | Nothing in Xen respects --enable-sdl, and nothing in Xen links to libSDL, so this PACKAGECONFIG is obsolete. It looks like the last user of SDL in Xen was removed in "Remove internal tools/ioemu tree"[1] back in 2008. [1] xen 19dc3860dcfde9bc4ec4ef35bb1337e13276f630 Signed-off-by: Ross Burton <ross.burton@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: pass prefix maps to fix buildpaths reproducible build issuesChristopher Clark2022-07-101-11/+10
| | | | | | | | | | | | | To fix warnings when the buildpaths QA test is enabled, pass the file and debug prefix map options that were previously supplied only for reproducible builds, adding them to the DEBUG_PREFIX_MAP variable and supplying that to CC. Testing indicates that passing the prefix maps needs to be via CC rather than the EXTRA_CFLAGS_XEN_CORE/TOOLS variables. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen/sysvinit: add hvc0 console only if not there alreadyBertrand Marquis2022-07-071-2/+8
| | | | | | | | | | | | | | The base inittab recipe is creating inittab entries for consoles listed in SERIAL_CONSOLES. For qemu, this contains "115200,hvc0" so an entry is created in inittab for it. Prevent to create a second entry if hvc0 is present in SERIAL_CONSOLES. On qemuarm, this solves issues with the console when starting on top of Xen as dom0. Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* colorama: update to 0.4.5Bruce Ashfield2022-07-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Keeping in sync with meta-python. We mainatain our own version of the recipe, as docker-compose and others have been sensitive to version bumps in the past. We pick up the following commits: f8ab4fd version bump 0.4.5 f411cb9 Release checklist: no need to rebuild 372c486 Omit demo06 from demos.sh 0f5c36f Further tweaks made to support the release c29f133 tweaks for build process 6105ab3 Mention fixed ValueError at exit in CHANGELOG e866230 Release checklist includes '.candidate' releases 35e9a91 Add methods to ``StreamWrapper`` to allow better pickling 8ba396b Replace deprecated pypyX with pypy-X.Y 8a364bd Added test 788106f Detached stream fix 7899683 Add light colors in README 912fe9b Add support for Python 3.10 53e0db3 Update README-hacking.md e8e311b Update README-hacking.md 69f4644 Replace Travis CI with GitHub Actions 5ed1070 README suggests not using Colorama to print colors 536e966 fixup! Fix typo discovered by codespell 1d92c3a . 16847d7 Make bandit, codespell, and pytest mandatory tests f307a6d GitHub Action to lint Python code 402d236 Note that escapes are stripped out for redirected outputs. eea3a58 Added new demo f690a2b Use ASCII decoding explicitly in setup.py 0275556 Add support and testing for PyPy3 293d782 Remove discussion of unmaintained nose for running tests 8f0587b Remove unused test imports and utils d8a0836 Add support for Python 3.9 9946cfb Reference my blog p[ost about annotated tags 9b770a0 README-hacking on tagging 86bfecd Add --extra-index-url to test-release scripts 938f5c5 Add Makefile docstring to test-release e0a314e Release scripts now include sdist. 14a21e9 README mentions Pypy compatibility. d8a7ff0 fix README-hacking typo 99765af Fix README link markup d080175 Fix README link markup 5a393b2 Move contributing info to README-hacking.md f7efb11 Fix Makefile PHONY declaration 759d5c7 Bump to version 0.4.5-pre b7596ad Fix Changelog markup 24721c0 Belated CHANGELOG entries for 0.4.4 release 688f6cc Unicode README chars that don't render on PyPI dc8460c Make tests pass on all OS. faafef8 Add light colors in README Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Fix host contaminationAndrei Gherzan2022-07-052-0/+126
| | | | | | | | | | | | | | | | The project's internal Makefile uses BUILDFLAGS variable to pass arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a patch to align this and avoid using host headers in which case, a musl build will fail similarly to: | [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk' | [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:100: undefined reference to `__fprintf_chk' | collect2: error: ld returned 1 exit status Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: install sysvinit initscriptsJeremy Puhlman2022-06-271-0/+5
| | | | | | | The redhat versions work with out modification. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: add rdpends for netifaces and charset-normalizerJeremy Puhlman2022-06-271-0/+2
| | | | | Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: add depend on udev in sysvinit case.Jeremy Puhlman2022-06-271-1/+2
| | | | | | | | Just as with systemd, the build needs the dev manager installed as a dependancy Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: add recipe for buildah v1.26sakib.sajal@windriver.com2022-06-201-0/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | buildah is a command line tool, to be installed and run on target, that can be used to: - create a working container, either from scratch or using an image as a starting point - create an image, either from a working container or via the instructions in a Dockerfile - images can be built in either the OCI image format or the traditional upstream docker image format - mount a working container's root filesystem for manipulation - unmount a working container's root filesystem - use the updated contents of a container's root filesystem as a filesystem layer to create a new image - delete a working container or an image - rename a local container Testing: Setup the build directory: $ . oe-init-build-env <build_dir> Add to local.conf: IMAGE_INSTALL:append = " buildah kernel-modules" KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \ features/netfilter/netfilter.scc \ features/lxc/lxc-enable.scc" IMAGE_ROOTFS_EXTRA_SPACE = "5242880" Build image: $ bitbake core-image-minimal Run the image: $ runqemu nographic kvm qemuparams="-m 4096" On target: Pull an image: > cnt=$(buildah from fedora) Or build from Dockerfile > buildah bud -t <image_name>:<tag> . Mount the image: > mnt=$(buildah mount ${cnt}) Install packages on the container rootfs: > dnf install --installroot $mnt <packages_to_install> -y Copy local files to the container: > buildah copy $cnt <local_file> <dest_on_container> Save the changes to an image > buildah commit --format docker $cnt <name>:<tag> Run the image using buildah: > buildah run $cnt /bin/sh Or using docker: > docker run -it <name>:<tag> Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-logrus: sync SRC_URI with nerdctl and k3sChen Qi2022-06-201-2/+2
| | | | | | | | Use the lower case and remove the '.git' suffix to sync with other go-logurs SRC_URIs in nerdctl and k3s recipes. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netns: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: adjust CGO_CFLAGS and CGO_LDFLAGS settingsChen Qi2022-06-201-2/+2
| | | | | | | | The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: clean up depends and fix CGO settingsChen Qi2022-06-201-3/+2
| | | | | | | | | | | According to https://github.com/containers/skopeo/blob/main/install.md#building-from-source, the ostree dependency is not needed. Also, adjust the CGO_CFLAGS and CGO_LDFALGS to use target flags instead of the SDK ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: upgrade to 2.8.1Chen Qi2022-06-201-3/+3
| | | | | | | v2.8.1 is the latest stable version. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix build error on new hostsChen Qi2022-06-201-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Fix settings for GOROOT, CGO_CFLAGS and CGO_LDFLAGS. The previous setting for GOROOT is no longer valid as the directory does not exist for now. So adjust the GOROOT setting. Currently CGO_CFLAGS is set to use BUILDSDK_CFLAGS, and this is incorrect. We need target flags instead of SDK related flags. Such setting happens to work for some hosts. However, when building on newer hosts, we get QA error like below: ERROR: docker-distribution-v2.7.1-r0 do_package_qa: QA Issue: /usr/sbin/registry contained in package docker-registry requires libc.so.6(GLIBC_2.34)(64bit), but no providers found in RDEPENDS_docker-registry? [file-rdeps] The above error was found on hardknott on host Fedora 35. Tracking down the error and I found it's using host stuff which is likely to be caused by using incorrect CGO_CFLAGS. As the master branch is using the same settings, it has the same issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix the inehrit and systemd settingsChen Qi2022-06-201-2/+2
| | | | | | | | | | | | In order for systemd variables such as SYSTEMD_AUTO_ENABLE to have effect, we need to inherit the systemd class. We also need to specify the package which contains the service. As go.bbclass already inherits goarch.bbclass, we only need to inehrit go.bbclass. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Disable highmem on qemuarmMichal Orzel2022-06-201-2/+4
| | | | | | | | | | | | | | | | | | By default, highmem option is enabled for machine types later than virt-2.12. This allows qemu to place devices and RAM in physical address space above 32-bits. This can cause issues as according to the documentation Xen supports up to 12GiB of physical address space. Recently the issue was observed using runqemu, that was causing Linux running on top of Xen to stall when trying to access ECAM space placed by qemu at 256GiB mark. Even though this issue is most probably related to QEMU and not Xen (the investigation showed that it can map ECAM space correctly), it is best to avoid such issues by disabling highmem on qemuarm. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "xen: Disable PCI on qemuarm with Xen"Michal Orzel2022-06-201-22/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit fb0a7b97db4f419b82309f98a4944ae3330d1e2e. Justification: Commit fb0a7b97db4f removed the PCI node from the qemu device tree due to the issue when trying to access PCI configuration space that was causing Linux running on top of Xen to end up in an infinite loop. The investigation showed that the problem occurs due to qemu placing ECAM space at 256GiB mark. Even though Xen officially supports on arm32 up to 12GiB of physical address space, it is able to map it correctly for dom0. However, when Linux tries to access the ECAM space and the stage2 translation fault occurs, HPFAR register contains incorrect IPA. We can say it is incorrect because using hardware AT instruction or software lookup, we can obtain the correct IPA from the same VA. This can suggest that the problem is related to QEMU fault handling. Instead of removing the PCI node the follow-up commit will disable highmem option in qemu which will cause placing ECAM space in the 32-bit space. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update recipe formatting and map googlesource to githubBruce Ashfield2022-06-202-2585/+3084
| | | | | | | | | | Reformat the k3s depedencies and src_uri into a more readible and maintainable format. We also map googlesoruce to github for better fetching, as suggested by Diego Sueiro <diego.sueiro@arm.com>. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.24.1Bruce Ashfield2022-06-073-55/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.1 We refresh one patch, add add textrel to our QA check skip list. Which imports the following commits: 489819e33 bump to v1.24.1 8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max fc852b402 add support for conmon log-global-size-max 77f0429d9 oci: cap exec sync length 9441b6700 Fix review issues ee1a8519f Fix it case failed 027ab3f50 Fix review issues db4a4aa51 Add integration test for remove paused ctr 76d1a929e 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one 3b25e48e4 fix review issues eff3af248 Try to force delete ctr when in paused state 62d81d722 vendor: bump crypto package 3d516c53b oci: Move exec probe process to container cgroup, if enabled 8294126fa config: Add monitor_exec_cgroup config option 9a2723cb4 Reenable pod runtime in package spec ae024bd0a dependencies: Upversion conmon dependency to v2.0.27 1737a4702 Sanitize conmonrs log level and print used version 5658fd35a Wrap runtime pod errors b4bbd4d94 openshift test: use go 1.18 aa13dfb7b openshift test: add skip_pod_runtime to cri-o spec d6aff5b63 Bump nixpkgs and use go1.18 4864ffc60 Fix golangci-lint errors d0664581d add runtime pod c33e14fc1 vendor conmon-rs 3b80d009b oci: add IsInfra method 0f601939e oci: lock for runtime creation 1376307fb test: use go 1.18 for lint b98f15851 Move WillRunSystemd call after iterating the mounts 2a75c8307 Add sha256sum bundle files to uploaded artifacts 9f6a6724d crio:fix a bug about log container 901310bdd oci: use runtime handler level monitor fields 12758b2b3 config: assume default conmon cgroup if it's not specified 240de5f3f template: add comment to runtimes table 5a8223c75 config: replace Conmon specific fields with runtime handler versions de2105a17 main(): don't treat reexec.Init() == true as an error 1de3e5ed2 crio:try fix integration test failed, because unpause not on time 6dfc68de4 config: increase pids limit to unlimited and deprecate it and logSizeMax 9ff165b4e bump ocicni to 0.3.1 b447dff77 bump containernetworking cni to 1.1.0 3fa33fe48 crio: unpause ctr after test 8e9ddee87 crio:fix golint check warning 019c578fa fix(stats): incorrect id on zfs driver 153bb668c crio:fix crun it failed 87f7f00f3 crio:update status after pause/unpause container 54912d7c8 oci: cleanup log path if the container failed to create 7a65dc340 utils: remove unused io related packages 9b111b532 runtime_vm: use containerd deps for container io directly 2da7482db remove the external dependency on the conntrack binary 1955cc167 go.{mod,sum}: update CDI deps to v0.3.2. a8687861c server: no longer use hardcoded timeouts 64270ef91 fix builds by passing -buildvcs=false on 386 48230e006 test: bump to go 1.18.1 d41e3cbe6 Disable systemd-mode cgroup detection conditionally e10376810 crio: Fix review issues and make format shell file 78308acd4 Add bats test to ensure namespaces are cleaned up on pod stop ec1414424 pinns: Check calloc return value adfe57b5d bump to 4.11 image 5e72b4133 crio: Fix code style 270d195ec crio: implement extended interface for pause/unpause container 31c278301 seccomp: drop unshare syscall from default profile 1098cc9b9 Retry to set CPU load balancing before return the error 7ccafd559 build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.1.0 9b735153b Fix integration tests 862b27b8c Switch to registry.k8s.io for the sandbox Image: 9ebdeef1e Change the mcs order in selinux.bats to test the canonization of selinux label 1a9a3fdae Canonize selinux label for comparison with filesystem label b106fcd71 oci: fix segfault in pod stop code 3e9d77257 capabilities: drop inheritable afe738b18 Bump ocicni to v0.3.0 7b5a67f51 Switch to ginkgo/v2 1999baa2f Add bats test for infra_ctr_cpuset taskset 9fada28f7 Add bats test for zombie conmon cleanup 15afd20ee Update golangci-lint and config 13d7b9738 Bump golang to 1.18.x 1af1f8af2 pinns: Pass sysctls as repeated '-s' arguments eb8715d30 Fix shell format c3095bf20 README: Update EOL & Version Skew links 05c443b06 config/sysctl: fail if there is a + in the value ea39e74f2 Fix critest 739379b0c Enable `--seccomp-use-default-when-empty` by default 98c18d1cb test: update to new runc behavior 4cb2407a2 Automatically chcon and restorecon on get script bef94e1f8 Pin `github.com/u-root/u-root` 3be4dba79 Switch to `main` for `get` script 09399e41f Bump nixpkgs 51a800af0 Pin nixos/nix version 97df87f71 test: allow state of failing tests to be kept intact. 32d682800 factory: take capabilities setup a643dad27 Add dedicated security information d65414758 test/crio-wipe.bats: don't nuke $TESTDIR too early. ff36ee6e0 test/cgroups.bats: fix incorrect setup order. 128165130 test/cdi.bat: add CDI integration tests. a0d3fd8aa config,cli: add configuration for CDI. f35fba448 pkg/container: implement CDI device injection. 572616137 go.{mod,sum}: update deps, vendor. 683baa221 contrib/test: force BATS symlink in place. 0be4d0611 contrib/test: always install BATS for integration. 2426bdb4c openshift e2e: bump cri-o version e337fa364 bump to 1.24.0 5cad5f287 test: avoid concurrent crictl config writes. bc240fd4c server: stop deleting pod from idIndex if already gone a4b5f0c15 CI: use kubernetes from git tip 03064f4ca test/e2e: update skipped test list 65f93912d contrib/test/int/build/kubernetes: rm deprecated RunAsGroup 2e7a4d375 server: use syncfs instead of fsync d9102e748 config/sysctls: validate against invalid spaces 230409570 [gitpod] use latest workspace full 6c3144af2 hack/build-rpms.sh: fix yum-builddep failures 52adfe025 ci: bump shellcheck to 0.8.0 92edea6dd test/apparmor: suppress bogus SC2031/2031 ca10da055 test/cni_plugin_helper: suppress shellcheck warning 0655dd213 test/test_runner: rm eval, fix comment 1acde4379 OWNERS: move rhatdan to emeritus approvers d280c71ce OWNERS: move runcom to emeritus approvers 4041adc55 utils: Sync: use f.Sync 14d742672 Deny empty `localhost/` AppArmor profiles bd02dac92 OWNERS: add first round of reviewers 626446e5c OWNERS: Move @sboeuf to emeritus approver 8aab1e8f2 int/storage: getReferences: fix gocritic warning f1ca25bc5 server: fix (rather than ignore) gocritic warning bc839156e server/streaming: specify the linter fa2fd247f ci: bump golangci-lint to 1.44.0 cc6ed292b scripts/release-notes: fix printf args f0e70901e scripts: fix a typo b1705dc28 int/version: fix forcetypeassert linter warning 851916f0d server/container_create_linux: fix forcetypeassert warning a2760072b utils: fix forcetypeassert linter warnings d295f8b24 server/streaming: fix nolintlint warning dd70c87ab int/storage: fix gosimple warning f26fafdc5 int/config/cgmgr: fix stylecheck warnings bc91cdb57 Format code using gofumpt 0.2.1 98d945cc9 Makefile: fix a comment bb96cd907 test/crio-wipe: fixups 107fe3853 ISSUE_TEMPLATE: fix grammatical error 1affa13d9 OWNERS: move @sameo to emeritus_approvers 4dc761f9f ISSUE_TEMPLATES: update membership form to be reviewer form 592aa5159 ISSUE_TEMPLATES: add a couple of more 238e4d009 image: use imageCache value for ImageStatus() 411e15058 contrib/bundle: remove deprecated kubelet option. 15048929c minor edit: removed dead link from TOC 0dd5d2d00 oci: drop WaitContainerStateStopped 6449ff0d3 oci: fix a leaked goroutine 40165cb5b internal/factory/container: initialize from pkg/container 0dabb91b3 internal/factory/sandbox: initialize from pkg/sandbox 6e2472c92 README: update branches a0f88d3a5 Updated format a53f1d221 Generate checksum files for artifacts 728731808 test: add test for skipped sysctls 1667b5a66 server: skip sysctls that would affect the host a7ac4683c deep copy List{PodSandbox,Container} structs 183ac018f GOVERNANCE: fix links 18dfcd273 oci: always have conmon log to syslog c424e85e7 README: add reference to governance 008b3541a add GOVERNANCE.md 33063001c issue templates: add membership request form aa8130f62 Add Debian_11 OS variable on installation instructions of Debian Signed-off-by: Wang Kai <persistence201306@gmail.com> e5dad09ee criocli: produce diff-friendlier zsh completions. b299c80c5 ci: use main branch for conmon bcf069b12 server: fix race with kubelet 0769411bb Fix runtime panic on pod sandbox stats retrieval ef1746095 update go to 1.17 in go.mod acde72556 Reuse createContainerIO in CreateContainer 0731a9b57 Fix vm containers couldn't restore after CRI-O restart 386d4a447 ci: use main version of runc 28585442e openshift e2e: bump ci image 35c02b56e server: fix a potential NULL-pointer dereference. 20370fa95 Documentation: expand on CNI CIDRs in the kubeadm tutorial 143a623ad test: update tests for allowed_devices 56929cdb9 config: add AllowedDevices option 2aceed0f0 pass the main mount point to fix crypto profiles binding 6b887e9c3 Add Nestybox to the CRI-O adopters list. 33e25b47b server: drop duplicate log message 25a2eec40 pkg/container: fix container device GID fallback. a68b239af bump crio commit for upstream k8s CI d7da8b2b0 adds config template linting 86e43fc28 adds comments to default values ff2a04e8b server: don't set memory swap when it's not enabled 5ebc4a407 Inherits storage configurations from storage.conf if crio config does not set d0d8fb3a7 use cmdrunner singleton 2237f2658 conmonmgr: refactor for new CommandRunner 878040d10 cmdrunner: update mocks and add target to makefile b3bb86659 config: prepend commands with taskset if InfraCtrCPUSet is configured e9f0bb6c8 cmdrunner: add tests for prepended commands 04e9c61e3 cmdrunner: create singleton fd2e2aeec Use timeout for conmon cgroup move 9af5e3363 build(deps): bump google.golang.org/grpc from 1.42.0 to 1.43.0 9a051dede Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels 347f04161 test: add test ensuring a stopped pod is restored 86fd03b81 sandbox stop: remove namespaces e02d5bf15 restore: handle removed namespaces 334e925ac Partially revert "restore: restore stop before managing namespace" 948b92bd7 restore: ensure containers are wiped on reboot c3f75859b build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 78e1c80af build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 d8ea9f6ca vendor: bump c/image to 5.17.0 11c127f3d pinns: Add LDFLAGS to Makefile Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix patch fuzz and remove unused patchChangqing Li2022-06-075-66/+27
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix QA issue about shebang too longChen Qi2022-06-071-1/+1
| | | | | | | | | There's a QA issue about criu complaining the shebang of crit script is too long. We should replace it with '#!/usr/bin/env python3'. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: update to 0.4.7-tipBruce Ashfield2022-06-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | Bumping umoci to version v0.4.7-98-gdb97609, which comprises the following commits: d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 9db1db9 dependabot: ignore github.com/klauspost/compress for now c20d1ba build(deps): bump github.com/vbatts/go-mtree from 0.5.0 to 0.5.1 defa147 build(deps): bump actions/setup-go from 2 to 3 d7c6b89 build(deps): bump actions/cache from 2 to 3.0.1 e76ee78 build(deps): bump actions/checkout from 2 to 3 852bb73 build(deps): bump actions/download-artifact from 2 to 3 83706fc build(deps): bump actions/upload-artifact from 2 to 3 b93cb2a build(deps): bump codecov/codecov-action from 2 to 3 671fa10 build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1 abd9d71 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 597a50e build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 87f2e17 mutator: allow setting annotation data when generating a layer e14c6d5 README: s/anuvu/project-stacker c67586e build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to 0.3.x -tipBruce Ashfield2022-06-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.3.0-82-gcd51747, which comprises the following commits: da1eea3 new ui color theme 36230ca CI setup cb43be9 update vagrant box to Fedora 36 7ad72ce pre-commit configuration and fixes a6749cd Bump github.com/docker/docker 8cadc6f Bump github.com/containers/storage from 1.40.2 to 1.41.0 9070e74 doc update - install.md ef05222 pod/container top dialog ui update 91e73ee image history dialog ui update 097674e container stats dialog ui update fb11dc7 image search/pull dialog ui update b6bda1a sort categories for pod/containers create and image build dialogs 5dd3e38 code coverage for ui/dialogs package 5bde8a5 Bump github.com/containers/podman/v4 from 4.0.3 to 4.1.0 6ffb274 Bump github.com/docker/docker bd08f23 Bump github.com/containers/buildah from 1.25.1 to 1.26.1 697eb4f Bump github.com/containers/common from 0.47.5 to 0.48.0 ff98068 Bump github.com/containers/storage from 1.40.0 to 1.40.2 bc47ea7 Bump github.com/containers/storage from 1.39.0 to 1.40.0 1c46d42 exec terminal update (automatic resize and detach) 1ef0c11 adding image tree command 5db9ef8 adding security options fields to pod create dialog aeeba55 adding container create security options fields 5c90866 adding format and security options fields to image build dialog 3d0b91b doc update 0f9ead6 adding format and security options fields to image build dialog 1091a3f windows support 26134e7 removing unused connection dialog 206ac15 fixing golint 4ef15e4 removing image index from name field string search result d9ed9e3 activating left/right key to switch between different pages (#55) 06f342c adding image import command (#51) c986342 activate <delete> key for removing items (#50) 9a962a8 Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 e29ce96 using utils pkg common variables and functions 61904de new feature: image save c9f132a doc update - fedora podman-tui rpm 372c71f Bump github.com/containers/buildah from 1.24.3 to 1.25.1 d592f1d error dialog ui update to separate the title from the error message 1b9045f new feature: image build c7f3032 Bump github.com/containers/podman/v4 from 4.0.2 to 4.0.3 0311f68 Bump github.com/containers/storage from 1.38.2 to 1.39.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v4.1.0Bruce Ashfield2022-06-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v4.1.0-8-gcedbbfa54, which comprises the following commits: 4ae7161c4 Fix strange buildtag edit 44d253b6c Add support for machine events on Windows 8e3a991ff test: fix "podman search format json" ab4d33e14 Update README for 4.1.0 release 3b4de8efc Bump to v4.1.1-dev e4b039020 Bump to v4.1.0 e87b07f7c Release notes for v4.1.0 final a8b55a3b9 pass networks to container clone b2025c64f Add more unit tests 7b64cd783 libpod: treat ECONNRESET as EOF 6d1d6cc0b play kube default log driver d57bbdb5c Cirrus: Fix ownership of repos. to keep git happy 4716b6b1b build: disable --output for podman-remote clients fbab06796 Vendor in containers/buildah@v1.26.1 ee4e0aa43 Temporarily skip netavark/aardvark e2e test 8b897a586 Cirrus: Temporarily update netavark/aardvark-dns b73bdcdb9 Cirrus: Test w/ netavark/aardvark-dns in F36+ 80cf4e31c Cirrus: Update to F36 CI VM Images 0d8ff6fa9 Add 4.1 branch to API documentation 6ea122f6e Report correct RemoteURI 2fd178ac0 Misc readme update to retrigger CI d3f406e9f podman system reset removed machines incorrectly 8cbe598fd Bump to v4.1.0-dev 0abf24320 Bump to v4.1.0-rc2 d45a68bce Update release notes for v4.1.0 RC2 9e83826d5 machine events: only open sockets when needed a21e11236 Add podman machine events bea8301a8 Implement --format for machine inspect 3ab8fa679 Release notes for more v4.1.0 backports 8842e9b7a Additional stats for podman info 642204821 libpod: unset networks before storing container conf 9d5158e94 Implement machine inspect for WSL b7e8b25d4 Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1 65108dede Use simulated dual-stack binds when using WSL 95633146e libpod: host netns keep same /etc/resolv.conf 1cdf18a86 fix incorrect permissions for /etc/resolv.conf in userns bbb10bb52 pkg/api: do not register decoder in endpoint handler c441a1756 fix broken hooks-dir test fb14171cb enable errcheck linter 724965132 libpod: unlock containers when removing pod 159d597cd remove unused codepath for creating/running ctr in a pod a9a70a949 Refactor machine inspect 1d2120412 image search --format: add completion for go template d4fe645ed shell completion --format: use structs by reference 524b53610 image --format: fix add completion for go template a9deb5c67 shell completion --format: use anonymous struct field once 835b89c60 network inspect --format: add completion for go template 68f7349bc shell completion --format: work with nil structs 07bc615b4 podman machine starting test 66500b82a Report properly whether pod shares host network 8627b5151 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0 9f6131e9c Three manual fixes ecc39b595 Ginkgo: use HaveField() for better error checking e5d6b6b0a volume: add new option -o o=noquota 77f147468 podman search: truncate by default b1089a23b Produce better test error messages 4ff6884fb Add CreatedSince & CreatedAt format fields to podman image history 3226561cf Allow changing of CPUs, Memory, and Disk Size cb399245b CI: emergency fix for broken go get 1593e75c6 Bump to v4.1.0-dev 146dcb28d Bump to v4.1.0-rc1 b2beb5a53 Add release notes for v4.1.0-RC1 3bcfd256b manifest endpoints fix ordering 4a4906b91 pkg/bindings: manifest remove 3.X API support conditional e9599fb1a fix manifest modify endpoint to respect tlsverify param 609b52f72 Bump version to v4.1.0-dev 652921119 Bump github.com/fsnotify/fsnotify from 1.5.3 to 1.5.4 70a2c0008 play kube respect hostNetwork 7259a6315 Truncate annotations when generating kubernetes yaml files 4f8ece76f play kube: do not skip containers by name 51fbf3da9 enable gocritic linter 1a9f110b5 Cirrus: Fix skipping all/most tests 7c914355d [CI:DOCS]Remove unnecesarry files c090931da remote: do not join user NS 49264c714 vendor in containers/(common,buildah,storage,image) facc009ca benchmarks: add more image benchmarks ee9d755c5 Robustify nginx tests ecd245d8f Unit tests for pkg/specgenutil pkg/signal c5e48f12e Cirrus: Re-fix build-cache miss on main eb4e53087 Revert "Cirrus: Fix cirrus cache race on bin/podman" b0d36f635 Implements Windows volume/mount support 3b6ffcd29 Update to use new common machine API d441a711e machine starting status 833456e07 Add podman machine test suite 3d1e40608 Pass --tls-verify option in podman -remote build 62f4ae98f fix staticcheck linter warning for deprecated function a615cb2fe Docs rootfull -> rootful 2f53259a8 Cirrus: Fix cirrus cache race on bin/podman 1260bf631 Revert "Switch all rootful to rootfull" c7b16645a enable unparam linter 94d043be8 Modify the pod name suffix '_pod' to '-pod' 0d83f4b76 Allow filtering of "removing", it is a valid status 13079abe3 Add support for passing --volumepath 44642bee8 libpod/networking_linux.go: switch to sha256 hashes ad249222d Fix hang in test_connect cafb76b63 Increase verbosity and sequencing of APIv2 testing 5b4af0584 replace golint with revive linter 454468e03 Update test to run network check in both rootless and rootfull mode 3e240c3ae Bump github.com/fsnotify/fsnotify from 1.5.2 to 1.5.3 104042e20 Bump github.com/container-orchestrated-devices/container-device-interface e0f5bf279 test/system: add containers.conf test for new /etc/hosts options e912f1b68 Improve /etc/hosts documentation e4ab8a5be shared netns and --add-host should conflict cf1b0c196 network dis-/connect: update /etc/hosts 128086639 libpod: fix c.Hostname() to respect the utsNsCtr 696bcd277 use etchosts package from c/common 1514d5c93 silence deprecated warnings for manifest functions 2a8e43567 enable staticcheck linter 56d6ee080 move golang.org/x/crypto/ssh/terminal to golang.org/x/term e39f4495e Run codespell on code f87f23e3b specgen-volumes: parse --mount using csv-reader instead of split by comma 93ecafcba Workaround criu re-linking output in system test cc3790f33 Switch all rootful to rootfull 566b6071d Cirrus: Fix missing git-enforced runtime identity 80c0fceb2 Add support for --userns=nomap 8080a5f8e Revert "container,inspect: convert Entrypoint to array instead of a string" 17105028e vendor in latest containers/(storage,common,image) 537540196 podman container clone -f d24507c1e Fix upgrade tests assuming storage.conf exists c67d6a52c Fix using --network-backend on podman-remote dc02e99d8 Fix size-check to display more context b7dcbfed0 Update release notes for v4.0.3 and v3.4.7 55a5bd8a0 Optimization: skip tests in some circumstances df156ab78 [CI:DOCS] podman build --pull=*missing* fa239f2ec Bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.2 eb7171262 systemd socker activation: check listener ff2e6291a vendor c/common 13c6fd067 system service: remove unnecessary pointer to listner 97ee41146 system tests: add assert(), and start using it 93b8ef627 Buildah Vendor Treadmill: the script d865fcc5e Fix e2e tests referencing generic env. var. bbe1063a5 Add checkpoint image tests 756ecd540 Add support for checkpoint image fca3397dc Update github.com/checkpoint-restore/checkpointctl 80d175279 slirp4netns: actually make ipv6 default 519535daa healthcheck: set default healthcheck Interval if not specified in image 0162f678c benchmarking Podman: proof of concept a2077e5ea Add missing events to podman-events man page be0da4a22 Translate Memory Limit to Swap in API 1b3dc899d manpage vs --help checker: better error messages 99bcd6595 Add --quiet to machine ls e716790af Fix typo in generate kube docs for selinux labeling 08d08f995 Correct play kube docs for selinux labeling b03466cb7 Update troubleshooting.md a4798ab4e Respect "Rootful" when starting WSL API Forwarding d68e9faee Update vendor of storage,common 900739d13 Add container.conf default volume to init f38b03d37 Fix Memory Swappiness passing in Container Clone 2a75164e2 add a regression test for CVE-2022-1227 3f2939c2e run, create: add --passwd-entry 97f93dc78 Revert "images --size" 3da3afa57 Add log rotation based on log size 2f4874eb0 Update containers/common to main branch 9ef745d54 System tests: Usage checks: better error messages 63c38b99f Fix --tail log on restart problem 02b7eeff6 Allow HTTP attach to stopped containers 970c8d472 compat api: use network mode bridge as default 6c878b7a5 docs: fix typo in podman-container-clone.1.md 20384b037 build(deps) bump CDI dependency from 0.3.0 to 0.3.2 8710197e8 Introduce machine inspect 3987c529f Add support for ipc namespace modes "none, private, sharable" 2c800a717 System tests: fix oops in start --filter tests 5e680d54e Bump golang.org/x/crypto to 7b82a4e 8fb9dbdb4 machine,rm: Ignore ENOENT while cleaning machine 857b36ca8 Update vendor of storage,common,image fb4fc03ec Pretty print systemd services file 81a95fade run, mount: allow setting driver specific option using volume-opt 923d454b2 [CI:DOCS] Rewrite rootless --userns=auto docs 61cf22288 Cirrus: Fix unsupported cirrus-cron build status ee4a583ed pkg/bindings: document requirements for use d8a902a16 API: use no_hosts from containers.conf 615099ddb System tests: reenable ps --external test 784a13f57 network create: add support for ipam-driver none 2508913a0 If newuidmap or newgidmap fail, then check their permissions 0cebd158b container,inspect: convert Entrypoint to array instead of a string dc17195bd Vendor in new opencontainers/selinux e133a06d2 images --size a95f7f9ca Cirrus: Multi-arch build auto-update + tagging update 356d53434 Fix docker socket handling 90ac1ba2a Prevent set command from updating a running instance db7d69950 Add Podman Hello to readme.md e73547a63 Unify examples section across several man pages: pod rm/start/unpause 9c72ea343 machine refactor 3: add symlinks for sockets bd4b9c3d5 build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 dd9eec06a Unify examples section across several man pages: init/kill 164b64ea3 specgen: do not set OOMScoreAdj by default bf4318e60 Allow creating anonymous volumes with --mount 1cd529b22 specgen: permit --privileged and --cap-add d55c46f8c Cirrus: Allow manually running image-build task 5fcd2a7ac Cirrus: Upd VM images to fix multi-arch build bug f8c2df87c Add build test for .containerignore tar file e5745139a cli commands: better error for unsupported commands daeea48df kube: configmap volume should be reused if already exists 9cacc18c9 Set permissions for GitHub actions a06df4fc1 Machine refactor part 2 81632722e systemd: enable all cgroups when running as a service 23cdbf322 test/apiv2: support netavark 1f1cf7bd4 rootless netns: move process to scope only with systemd 1ffcc4a88 Add 'Os' to be queried via 'version' output b60854e8b Prefer registering both machine and global pipe 2a882b770 Upgrade tests: reexamine cross-testing matrix eedaaf33c fix slirp4netns port forwarding with ranges c185d8c0d Add option for pod logs to display different colors per container. 7a5342804 fix pod volume passing and alter infra inheritance c602084a5 size-check: display binary size and growth 61c518627 upgrade tests: fix networking problems 21502987b replace hpcloud/tail with nxadm/tail f6963cea1 Cirrus: Build multi-arch images + manifests cdf74f208 Set systemd mode if entrypoint begins with /bin/sh -c a8e6c639e Unify examples section across several man pages 6e0e1cbdd Migrate machine configs 1821eb383 Pin actions to a full length commit SHA 2ac897aa0 Machine refactor - part 1 38bd4010c network setup: fail if slirp4netns is not installed 82ed99b6a event: generate a valid event on container rename operation 798988050 Fixes errors from 'manifest push' being dropped in remote case d106b294b Switch all calls to filepath.Walk to filepath.WalkDir 446c35efd Vendor common Added patch provided by rhatdan to add support for shareable ab41037c8 Update filter docs with missing entries and add negation option. 3cc173937 Resolves #13629 Add RegistryAuthHeader to manifest push 7680211ed Remove error stutter 76614c461 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 ffbab30d7 Run codespell to cleanup typos 25345c087 build(deps): bump github.com/rootless-containers/rootlesskit 640c2d53a test: fix podman run test as rootless 4f73cf3fc Misc typo fixes c01d1f8e3 [CI:DOCS] docs: drop note about upcoming RHEL 7.7 d4bf6b4d7 clarifying "loginctl enable-linger" section in doc 61b2d8844 Bump github.com/prometheus/client_golang to v1.11.1 b469bf5c0 container: allow clone to an existing pod eb5b08f62 build(deps): bump github.com/docker/docker 7189b6f26 podman machine set: clarify --rootful option c0bbca8c4 podman machine: fix port forwarding with proxy 7ae52e86f readConmonPipeData: try to improve error 809f82bdb specgen: fix typo bf6430d18 Remove experimental warning from podman-remote rpm e90b35438 machine-set: fix example for setting rootful flag 752680366 play: kube: use in-memory kubefile and remove tempfile 9b0c8d23b man pages: sort flags, and keep them that way 346beec35 Remove nix packages, since no one is supporting this 5e28cbc5f When running systemd in a container set container_uuid da5891130 fix podman machine start log level detection 59dc70bb4 podman machine start: lookup qemu path again if not found 5669ffb35 document that using libpod package directly is not supported cdda1924a Explicitly use IPv4 to check if podman-machine VM is listening a6504963b Fix manifest 4.0 endpoints [NO NEW TESTS NEEDED] 5b2597d52 Fix a potential race around the exec cleanup process aafa80918 do not set the inheritable capabilities eedce31eb import: allow users to set os, arch and variant of imports 13b6ff652 docs: Fix links to Containerfile and containerignore 41a6dd36f Update swagger to improve compatibility [NO NEW TESTS NEEDED] 88d4db009 Binary growth check, part 2 of 2 3627dfc52 podman unshare: document that command cannot be used with remote 130bcc3a9 podman stats: improve cpu average calc 0edb3ddd3 podman stats: calc CPU percentage correctly 1a7f5b3d5 Cirrus: Publish binary artifacts on success 501355d4a Fix unreadable netavark logs 5e1e13c18 add contextDir to tar on remote c25213c8f fix compose test error in retry logic 84e7ce82d Binary growth check, part 1 of 2 06dd9136a fix a number of errcheck issues 07999b237 [CI:DOCS] troubleshooting: document rm in image stores 6c030cd57 fix a number of `godot` issues 68b94338b linter: enable makezero 0f12b6fe5 linter: enable nilerr 081e09143 linter: document nolintlint 7c047bfbe linter: document tagliatelle 9e8cca26a test/e2e/inspect_test.go: wait for sessions fb792f7ed linter: enable ineffassign f72a678f2 linter: enable errchkjson bb6b69b4a linter: enable wastedassign 070e40149 linter: enable interfacer 90f37e1a6 build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3 6d6bdabc8 healthcheck: stop showing wrong status when --no-healthcheck is set 8961dd345 Makefile: build podman-remote-static with cgo disabled 1b68c3826 libpod: drop warning for Fedora 31 63bf3991e vendor containers/storage with https://github.com/containers/storage/pull/1165 e3cc0717b podman system df: fix percent calculation 53e770566 pod system tests: clean up stray image 026bd9b20 bump golangci-lint to v1.45.0 2460261fb Fix documentation typo 36ff8f2b3 Add Windows installer support for upgrades 95dad4d8a podman rmi --ignore 4408db330 Updated dependabot to GitHub actions cc7b5974b Fix type-o and cleanup doc punctuation 54641f5f7 fix compose test flake 622d0068e fix dual stack network e2e flake 57cdc21b0 vendor c/common@0ededd18a1f9 ea08765f4 go fmt: use go 1.18 conditional-build syntax 3c968c3d2 Handle incompatible machines d3e3ea843 logformatter: link to bats sources on error 4b359e459 Set names in compose tests based on version bde3ca8c3 Add tests with Docker Compose v2 1fd76c901 podman machine: remove hostip from port 0793a5834 Deduplicate between Volumes and Mounts in compat API ff54aaa63 podman create: building local pause image: do not read ignore files 714e5a13d Separator is no longer prepended when prefix is empty on podman generate systemd 1387b5bd8 Add test for BZ #2052697 449f2fc0b Set rawimage for containers created via play kube c732adf2d build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 ca7376bb1 Exit with 0 when receiving SIGTERM 29f24ff68 [CI:DOCS]: Mention netavark limitations for macvlan/ipvlan drivers 45df70ec1 fix empty newline in version output 33aa2f2d1 Fix windows win-sshproxy build 0db184fb0 fix breaking change in pkg/bindings 19d0c5a8a pkg/k8s.io: add small readme with copyright notice dd9e4dc72 pkg/k8s.io/api/core/v1: remove unneeded types f106867ac pkg/k8s.io/...: remove more unneeded files 0612f859b pkg/k8s.io/...: remove protobuf field tags f8577766d pkg/k8s.io/...: fix lint errors a0ad1f2ad remove unneeded k8s code 918fc88a9 move k8s deps into podman 3d82d17f8 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 439323cd2 Bump github.com/docker/docker daebf50b8 apply-podman-deltas: skip modified test case for --add-host which adds anomaly 3bb046a5e slirp: fix setup on ipv6 disabled systems 217197340 Fix typo e8968c867 Add support for --chrootdirs c845216fd docs: podman-build add --no-hosts 780d4b2d6 vendor: bump buildah, c/image and c/storage edc62b529 Fixes TTY & resizing on Mac and Windows 6e41d1f44 podman.spec.rpkg: enable rhel8 builds on copr c06460bea Bump golang to 1.17 in `vendor-in-container` 4ab24a068 Bump github.com/docker/docker 931477461 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 e6b64703f Bump github.com/containernetworking/plugins from 1.1.0 to 1.1.1 a5353207c Bump github.com/vbauerster/mpb/v7 from 7.3.2 to 7.4.1 e5a86d293 CI: fix golangci-lint installation feaa1a134 Add podman play kube --annotation 30bf065c3 Use github.com/vbauerster/mpb/v7 in pkg/machine 8f2f8d4ca use gopkg.in/yaml.v2 instead of v3 166edf00a Fix handling of tmpfs-mode for tmpfs creation in compat mode e56150264 Bump github.com/docker/distribution db3010279 [CI:DOCS] troubleshooting.md: mention "podman unshare chown 0:0 path" a7c4691bf Improve agent install message to add restart instructions 5b51b42cc machine rm -f stops and removes machine 8cfdddf50 test/e2e: add aardvark specific tests e66c46441 Skip flaky pprof tests bd0766e96 selinux: remove explicit range transition when starting conmon 9ce3c0a87 Move secret-verify-leak containerfile into its own Directory 611b45c51 Inspect network info of a joined network namespace d2f77c256 Set default rule at the head of device configuration cdb6deb14 MacOS improvements 6dfe63463 [CI:DOCS] DISTRO_PACKAGE.md: List the packaging changes for v4 639e6899b [CI:DOCS] RELEASE_PROCESS.md: cosmetic fix f13ca392c [CI:DOCS] Remove "(1)" from web tab text 01514f33b Fixes: #13301 ("machine rm removes the mounted socket file on macos") b20993393 [CI:DOCS] troubleshooting.md: Improve language and fix typos d302c08cf Throw an error if kube yaml has duplicate ctr names dca2e7924 Move all python tests to pytest 2fb6a8daf Add ExitCommandDelay configuration use in API exec handler 63f92d0a6 test: add a test to verify race free concurrent/parallel builds a3497cee9 RELEASE_PROCESS.md: build artifacts locally a901c919a libpod: pods do not use cgroups if --cgroups=disabled 0bd0ad594 container: workdir resolution must consider symlink if explicitly configured 410d28660 vendor: bump c/image to main/9a9cd9 08036e9af vendor: bump c/storage to main/d06b0f e71d497e7 libpod: drop warning if cgroup doesn't exist 22f331e54 Revert "use GetRuntimeDir() from c/common" 572e6464f Use storage that better supports rootless overlayfs 7729afe97 Refactor docker-py compatibility tests 675d775eb Add --context-dir option to podman play kube 40c6192e9 Add the names flag for pod logs 2e14c7270 Allow setting binarypath from Makefile 569319d39 Vendor in containers/common@main 3dc1b8e83 Add podman volume mount support dbf34bfe7 Clarify v2 API testing for podman vs docker clients 988190db5 copr packaging: use generic macros for tmpfiles and modules load dirs 6f71fa6d9 Show version of the deb package in info output a7fc8a146 Improve the error message for usused configMaps f3e883fb4 Bump github.com/containernetworking/plugins from 1.0.1 to 1.1.0 e1b298166 docs: generate-systemd: pod requires an infra container eab5a4cfb Load ip_tables modules at boot fbbcb957c container-commit: support --squash to squash layers into one ed73040b3 kube: honor mount propagation mode 5cba5cbfd play kube: set defaults to container resources 46b7c5bc6 Bump CDI go dependency to v0.3.0 6f7a803d0 Cleanup display of trust with transports 80c5962db Add containers-common spec and command to podman 4a60319ec Remove the runtime lock c4dfbd58f Don't log errors on removing volumes inuse, if container --volumes-from b19251242 system tests: cleanup networks on teardown ea01f8963 [CI:DOCS]Update networking tutorial for netavark 9ce61e3a4 kube: honor --build=false and make --build=true by default 44d037898 provide better error on invalid flag f018c07ed System tests: show one-line config overview f150f2921 troubleshooting.md: tweak subuid paragraph, encryption fc5cf812c use GetRuntimeDir() from c/common 94df70151 Implement Podman Container Clone 23a7f4e0d Option --url and --connection should imply --remote. d12489858 [CI:DOCS] troubleshooting: mention overlay option for --rootfs 8c9d37faf [CI:DOCS] troubleshooting: mention machinectl and systemd-run db4d15e85 Propagate $CONTAINERS_CONF to conmon d615ab81f tests: Remove inaccurate comment 7b55ab442 Cirrus: Disable F34 aka prior-fedora testing 632c089cc Cirrus: Use updated VM images aa1703037 Update release notes with v4.0.0 additions 1252f9dd3 Fix a potential flake in volume plugins tests 38811823c vendor: update c/storage to 26c561f9 095026c3d Bump github.com/containers/buildah from 1.24.1 to 1.24.2 90066af62 Calculate device major/minor using bitshift 13f6261f8 increase subuid and subgid in image 7a83d16f9 [CI:DOCS] logformatter: handle python logs a811acf74 pkg: support passing down options for idmap 50fbe52f4 Update to podman4 copr stream c74f8f04f Introduce podman machine init --root=t|f and podman machine set --root=t|f 8f5ba05ec Initial implementation of mac forwarding using a privileged docker sock claim helper b62816578 e2e: merge after/since image-filter tests 10580ec19 Unify ls --filter docs for networks and pods 6a8d29eea Changes of docker descriptions 5b98efe1d Fix images since/after tests 4a166c8b6 podman network: add documentation for netavark a0991c6f3 create: Fix key=value annotation in the flag output a8928a3ca ignition: propagate proxy settings from a host into a vm 3b5a3f4a7 [CI:DOCS] Add --userns=keep-id, --uidmap, --gidmap troubleshooting 73f35ff2a Temporarily pull machine images from side repo 6f9f78f7f enable netavark specific tests 4b90542d5 Fix checkpoint/restore pod tests 4966adddb Make sure building with relative paths work correctly. 3f28d697e Add 409 response to swagger godoc 40ba9f10e Make the hello image leaner [NO TESTS NEEDED] a0b38c071 troubleshooting: add doc for ssh into a container 87cca4e5e Modify /etc/resolv.conf when connecting/disconnecting c4676c571 Add version guard to libpod API endpoints 1512740e3 Bump c/common to v0.47.4 829f88d74 Show API doc for several versions 3762946e6 Do not set the network config dir to cni plugin dir 411fca0b3 helloimage: header symmetry e405fefb3 [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response. 61f97083c idmap should be able to be specified along with other options 5bcd9134f Bump github.com/docker/distribution 58adf1a83 fix: Multiplication of durations 8d0fb0a4e move rootless netns slirp4netns process to systemd user.slice d0d1ffa43 Cleanup: remove obsolete/misleading bug workaround 3b561a468 compat: endpoint /build must set header content type as application/json in reponse 44fb431a3 Fix: Do not print error when parsing journald log fails f0826b3a4 Cirrus: Expand netavark testing to include rootless 3cf64a8e9 tests: retrofit healthcheck system tests 4f77331c9 healthcheck, libpod: Read healthcheck event output from os pipe d733c3baa append podman dns search domain 54cf0f05e Bump github.com/buger/goterm from 1.0.1 to 1.0.4 1d1b2b150 Update containers/buildah v1.24.1 7cfe4d3fe System tests: revert emergency skip of checkpoint tests 185dc5b2f Bump github.com/containers/common from 0.47.2 to 0.47.3 642a691cb Cirrus: Add netavark/aardvark system test task daf51eafe Bump github.com/containers/image/v5 from 5.19.0 to 5.19.1 ebbf10ae8 Cirrus: Log netavark/aardvark binary build info. 9eb88ea47 Podman pod create --share-parent vs --share=cgroup 55c4a1468 system prune: remove all networks fee76f6ab Document `schema` values in the `--url` flag 5468757ad play kube envVar.valueFrom.resourceFieldRef 725a6f893 pkg/bindings/images.Build(): slashify "dockerfile" values, too 7d3ad6081 netavark e2e tests 25e073492 Revert "Move each search dns to its own line" 3d3e8d8f8 hack/bats: fix broken usage message 903f9a3a2 Cirrus: Minor - limit release task applicability a1bc8cb52 Move each search dns to its own line 4ddc4e79d Only change network fields if they were actually changed by the user c4dfd004a libpod: enforce noexec,nosuid,nodev for /dev/shm b6fe7d119 Fix size to match Docker selection 012e24b79 [CI:DOCS] Add a hello world image to quay.io 852ca9a7a Cirrus: Add [CI:BUILD] magic that only builds cd8b30289 COPR: fix dependencies 85e8c1c9a docs: clarify rootless net stats 865f0a197 libpod: report slirp4netns network stats 6609bb73a Fix use of infra image to clarify default 2ceab1194 play kube envVar.valueFrom.fieldRef e7bdd1260 CI: fix nightly builds 009d9eb67 Add notes to "--oom-kill-disable" not supported on cgroups V2 a8fb8f52c Adapt podman images ls filters docs to be aligned with prune filters docs 636543787 Clarify remote client means Mac and Windows 6f2b027b3 ignition, machine: delegate cpu,io cgroup controllers to machine's default users 56d95172f podman image scp syntax correction 8842dab68 Cirrus: Also download aardvark-dns binary b381d7565 Cirrus: Add e2e task w/ upstream netavark Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni/plugins: update to 1.1.1Bruce Ashfield2022-06-031-4/+3
| | | | | | | | | Bumping cni-plugins.git to version v1.1.1, which comprises the following commits: b1782e5 ipam/dhcp: Fix client id in renew/release b03deb6 call ipam.ExceDel after clean up device in netns fix #666 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: update to 1.1.0Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | Bumping cni to version v0.8.0-102-g940e662, which comprises the following commits: 99eac24 cnitool: address golint error 1054f8e libcni: handle empty version when parsing version 54f1587 Switch to ginkgo/v2 aba8f8b add security heading to README 4b46fe6 Maintainers: add Mike Zappa 2f6d8b1 introduce hybridnet to thrid-party plugins 48fac6a Update README.md 798e63d Updated README.md to include Netlox loxilight CNI Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc/docker: update to 1.1.2Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.2-9-gb507e2da, which comprises the following commits: bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git cdfdbe55 VERSION: back to development a916309f VERSION: release 1.1.2 364ec0f1 runc: do not set inheritable capabilities 8959e372 VERSION: back to development 52de29d7 VERSION: release 1.1.1 2636e1cb CHANGELOG.md: add 1.1.1 release notes 036cc348 CI/cirrus: add centos-stream-9 db953158 README.md: add cirrus-ci badge ea19181e README,libct/README: fix pkg.go.dev badges 8290c4cf libct/cg: IsCgroup2HybridMode: don't panic ee7ba6cb configs/validate: looser validation for RDT 96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation 35784a3e ensure the path is a sub-cgroup path 986e7c53 libct: fixStdioPermissions: ignore EROFS 5053a065 libct: fixStdioPermissions: skip chown if not needed d2939b6b libct: fixStdioPermissions: minor refactoring Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.1.2Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.2-9-gb507e2da, which comprises the following commits: bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git cdfdbe55 VERSION: back to development a916309f VERSION: release 1.1.2 364ec0f1 runc: do not set inheritable capabilities 8959e372 VERSION: back to development 52de29d7 VERSION: release 1.1.1 2636e1cb CHANGELOG.md: add 1.1.1 release notes 036cc348 CI/cirrus: add centos-stream-9 db953158 README.md: add cirrus-ci badge ea19181e README,libct/README: fix pkg.go.dev badges 8290c4cf libct/cg: IsCgroup2HybridMode: don't panic ee7ba6cb configs/validate: looser validation for RDT 96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation 35784a3e ensure the path is a sub-cgroup path 986e7c53 libct: fixStdioPermissions: ignore EROFS 5053a065 libct: fixStdioPermissions: skip chown if not needed d2939b6b libct: fixStdioPermissions: minor refactoring Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.16Bruce Ashfield2022-06-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby/libnetwork: update to -latestBruce Ashfield2022-06-031-1/+1
| | | | | | | | | Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits: 9db86fb7 Only check if route overlaps routes with scope: LINK 7b9c2905 fix port forwarding with ipv6.disable=1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.16Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to 1.24 releaseBruce Ashfield2022-06-033-61/+12
| | | | | | | | | | | Bumping to the 1.24 kubernetes release from May 2022. We refresh one patch, and drop another as the build race looks to be different (since it is no longer installed seperately). Otherwise the build is the same, and smoke tests have passed. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: inhibit package QA warningBruce Ashfield2022-06-031-1/+1
| | | | | | | | | | WARNING: kubernetes-1_v1.23.6+gitfbcfa33018159c033aee77b0d5456df6771aa9b5-r0 do_package_qa: QA Issue: kubernetes-misc: ELF binary /usr/bin/kubectl-convert has relocations in .text [textrel] This textrel is acceptable, so we can inhibit the warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kata-containers: add skip messageBruce Ashfield2022-06-034-0/+9
| | | | | | | Let's skip these until someone is interested enough to fix the recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kata-containers: add protocol=https to SRC_URIsBruce Ashfield2022-06-034-5/+5
| | | | | | | | | | | Although the components of kata containers aren't functional, we keep it around in case someone is interested in fixing the recipe. It was skipped from the global protocol=https addition for that reason .. but in case someone is running global/world fetches, this can cause a problem. So we add the missing procotol specification. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: switch 1.0.3 to stable branchBruce Ashfield2022-06-011-2/+2
| | | | | | | | | It looks like 'devel' in podman compose gets rewritten, so our 1.0.3 commit is no longer on that branch, breaking fetches. Moving to stable and changing the commit to avoid the issue. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, raspberry pi: replace linux-yocto-dev with linux-yocto 5.15Christopher Clark2022-05-252-8/+6
| | | | | | | | | | | | | The default preferred Linux kernel for Xen on the Raspberry Pi 4 is linux-yocto. The alternative provided option is linux-yocto-dev, but this is unintentionally a branch tracking configuration rather than a fixed revision. Remove the linux-yocto-dev in favour of the linux-yocto kernel version 5.15 which has been tested and verified working on the board. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-07-04 20:28:08 +0000