summaryrefslogtreecommitdiffstats
path: root/recipes-containers/oci-runtime-spec
Commit message (Collapse)AuthorAgeFilesLines
* recipes/classes/scripts: Drop SRCPV usageBruce Ashfield2023-08-241-1/+1
| | | | | | | | | bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-spec: update to 1.1.0-rc.2Bruce Ashfield2023-06-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runtime-spec to version v1.1.0-rc.2-22-g720792f, which comprises the following commits: 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS d46c8b2 schema: fix definition for ioPriority 504f70e Add I/O Priority Configuration for Process Group in Linux Containers 05563ea features: update Example d89ef1e glossary: s/features document/Features structure/g 39bd2ef MAINTAINERS: add Toru Komatsu (utam0k) f66aad4 Update ociVersion in config-linux.md example 206251f releases: use +dev as in-development suffix 8947849 spec: add scheduler entity 4ee185a version: v1.1.0-rc.2-dev a5b4da4 version: release v1.1.0-rc.2 54f948c ChangeLog: Document changes since v1.1.0-rc.1 6152be4 schema: remove duplicate keys 9d7c878 Clarify I/O throttling differences between cgroup v1 and v2 b6980b0 schema: fix schema for timeOffsets 689874f Add `features.md` to formalize the `runc features` JSON 167ffb4 Add Go 1.20 support to CI 15d2a5a Switch Go linting to use golangci-lint c9b5d0e Remove references to deprecated io/ioutil package 77c37f1 Update config-linux.md fix time_namespaces url error. 6c638b1 config: clarify Linux mount options 72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern` c42f9ae version: v1.1.0-rc.1-dev 3e013c2 version: release v1.1.0-rc.1 f790b68 ChangeLog: Document changes since v1.0.2 36bb632 Add support for time namespace f225699 config: change prestart hook spec to match reality 4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV d931d4b config-linux: add CFS bandwidth burst 6be797c CODEOWNERS: sync with MAINTAINERS 9e658bc config-linux: add memory.checkBeforeUpdate 3565df5 config-linux: Clarify where device nodes can be created 1924f6b GOVERNANCE: correct the Charter URL 744912b add domainname spec entity 0da1600 fix rfc link b57ada5 maintainer updates as per #1101 9d1130d IDMapping field for mount point fc985aa config-linux: update type of LinuxCPU.Idle to *int64 bc545ec schema: add cpu idle 1fef707 Update Windows CPU comments e78a3c3 Add available `LinuxSeccompFlag`s 600a8bd cgroup ownership: clarify that some files may not exist b8dbce9 update idle type of LinuxCPU from *int64 to int64 9d363b3 config-linux: add idle option for container cgroup b05eb53 typo: seccompFD -> seccompFd a650533 config-linux: add support for rsvd hugetlb cgroup 84251a4 specs-go: export LinuxBlockIODevice 3f30167 schema: make with golang 1.16 34a7544 schema: update README.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* meta-virt: sync SRC_URIs between k8s and k3sChen Qi2023-02-151-1/+1
| | | | | | | | | | | | k3s is using a lot of SRC_URIs and some of them have corrsponding recipe in meta-virt, which are used by k8s. These components' SRC_URIs are better to be kept in sync, because this avoids two local git repos (Yocto supports fetching locally) which are totally the same. Remove the '.git' suffix from these recipes to sync the SRC_URIs. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-spec: update to 1.0.2-tipBruce Ashfield2022-03-211-1/+1
| | | | | | | | | | | | | Bumping runtime-spec to version v1.0.2-79-g7ceeb8a, which comprises the following commits: 600a8bd cgroup ownership: clarify that some files may not exist 0608c1f Switch to GitHub Actions, CODEOWNERS, etc. f4ef391 specify cgroup ownership semantics 104385d config-linux: MAY reject an unfit cgroup 411082c add youki to implementations.md 6641127 alphabetize the implementation list. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: convert github SRC_URIs to use https protocolMartin Jansa2021-11-031-1/+1
| | | | | | | | | * apply the same also for recipes using PKG_NAME starting with github.com which the conversion script doesn't update automatically Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-spec: update branch specification to mainBruce Ashfield2021-11-031-1/+1
| | | | | | | master has become main in the runtime spec, so we update our recipe to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: add explicit branch to all SRC_URIsBruce Ashfield2021-11-021-1/+1
| | | | | | | | | | | | | | As introduced in the oe-core post: https://lists.openembedded.org/g/openembedded-core/message/157623 SRC_URIs without an explicit branch will generate warnings, and eventually be an error. We run the provided conversion script to make sure that meta-virt is ready for the change. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-spec: update to 1.0.2Bruce Ashfield2021-10-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runtime-spec to version v1.0.2-71-gab23082, which comprises the following commits: 411082c add youki to implementations.md 6641127 alphabetize the implementation list. 15f418e fix the lifecycle reference in the states listing f0ac327 defs-zos: [Fix] prevent schema parsers from hitting recursion-loop while resolving types. cc7f6ec config-linux: Add Intel RDT CMT and MBM Linux support c83b45e Introduce zos as platform. 0c021c1 config-linux: clarify the handling of ClosID RDT parameter 9e65944 config-linux: fix indentation on IntelRdt 0f84938 schema/defs-linux: Fix inconsistencies with seccomp notify 7c549cb seccomp: Add missing const for seccomp notify action 58798e7 Add Seccomp Notify support 8c363e8 Proposal: runtime should ignore capabilities that cannot be granted f02cd4a config-linux: mark memory.kernel[TCP] as NOT RECOMMENDED 76f7818 README: Fix broken link for charter f7ef278 seccomp: allow to override default errno return code ec964df seccomp: expect error with invalid errnoRet 2978430 config-linux: fix personality link e9429bb Makefile: Fix golint URL used in go get 8f65443 travis: fix go_import_path 3866eec MAINTAINERS: update vbatts email 2fe0475 Add support for SCMP_ACT_KILL_THREAD fd895fb Change all references from whitelist to allowed 11bfea2 Fix int64 and uint64 type value ranges 57a316b docs: Added enclave OCI runtime rune to implementations 938cf9f Update seccomp architectures to support RISCV64 d3f079a config.go: make umask a pointer a02a293 Update State structure to use the new ContainerState type 7571d3d cgroup: add cgroup v2 support 66ad83f Use dedicated type for Container State 89419f0 Add State status constants to spec-go 09fc3b4 Remove superfluous 'an' 0e72101 Add Giuseppe Scrivano as runtime spec maintainer 6042999 Define State for container and runtime namespace a9f1170 Add seccomp kill process d759f35 MAINTAINERS: Add @cyphar as maintainer f9df045 seccomp: fix go-specs for errnoRet 3bfcde2 seccomp: allow to override errno return code 1ac6f8d specs-go: bump master back to -dev c4ee7d1 specs-go: update version to 1.0.2 ce773cb ChangeLog: changes v1.0.1...v1.0.2 5ef5c78 Makefile: avoid SELinux for making docs d22e8e0 *: release process is duplicated in RELEASES.md 41c3e47 Review (tianon) 9be9595 Clarify case with pre-configured Intel RDT closID 76c0da2 config-linux: describe more about rootfs mount propagation 353ddcb config-linux: add SHOULD to linux.namespaces.type 37fab77 Fix typo in RELEASES.md baa7978 remove unneeded indent a87fe24 Makefile: no DCO with git-validation on travis bacc285 MAINTAINERS: remove philips d5bfb2b MAINTAINERS: remove Vishnu dda13dc PullApprove: No need for 3 DCO checks 12fd09a RELEASE: document how to do the release c166268 Add create-container, create-runtime and start-container hooks e6e17ad schema: drop id from umask fac34e2 schema: fix indentation 03c526b schema: add missing definition for personality 2b844a0 Add support for SCMP_ACT_LOG 66f4ffa Add new seccomp action. d1ef109 config-linux: support seccomp flags ff32f02 implementations.md: fix repository for crun 23c4be2 Update meeting info section to point to "org" repo 78ab98c Fix markdown escape in config-linux 5cc25d0 Add Linux personality support 234aa0b config-linux: Add Memory cgroup's use_hierarchy 6b04c63 config: add "umask" field to POSIX "user" section dba5778 config: Collapse extensibility to a single MUST 574182a schema/defs-linux: change weight type to uint16 ec0fc3d runtime: Clarify ociVersion as based on the state schema Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: overrides syntax conversionBruce Ashfield2021-08-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers/runtime-spec: update to v1.01Bruce Ashfield2019-07-121-2/+2
| | | | | | | Updating the reference spec to v1.01. No functional or runtime changes are expected from this. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools, oci-runtime-spec: Uprev to runc 1.0-rc3 versionsJason Wessel2017-07-131-3/+3
| | | | | | | | The config.json has elements which have changed in the latest runc. These changes are not backward compatible with older versions of runc. Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* oci: introduce oci-image-tools (and dependencies)Bruce Ashfield2017-02-151-0/+41
The oci image tools allow the easy manipulation of containers and bundles. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>