linux/meta-virtualization.git, branch master-nxt

docker-moby: update to v20.10.10

2021-11-16T04:24:09+00:00

Bumping moby to version v20.10.10-9-g7bd682c48c, which comprises the following commits: 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories c7edd308ad [20.10] Update Go to 1.16.10 6611c72b65 cmd/dockerd: create panic.log file without readonly flag 4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode acb4f263b3 Fix racey TestHealthKillContainer 59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 2c6aa5aad9 Remove needless check 3285c27503 Fix log statement 'failed to exit' timeout accuracy a4bcd4c64f docker daemon container stop refactor bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill 80b7e8b5d7 buildkit: normalize build target and local platform c2b9a32875 vendor: Update go-winio to v0.4.20 c580a02873 [20.10] Update Go to 1.16.9 129a2000cf [20.10] update containerd binary to v1.4.11 6835d15f55 [20.10] update containerd binary to v1.4.10 5730c139f7 Bump swarmkit to get fix for rollback 59f10e3435 quota: adjust build-tags to allow build without CGO fa78afebcf Update Go to 1.16.8 567c01f6d1 seccomp: add support for "clone3" syscall in default policy 07728cd2bd update runc binary to v1.0.2 964768f200 cmd/dockerd: add the link of "the documentation" 80f1169eca chrootarchive: don't create parent dirs outside of chroot 93ac040bf0 Lock down docker root dir perms. b0c0b73798 bump up rootlesskit to v0.14.4 decb56ac89 Update Go to 1.16.7 Bumping docker-cli to version v20.10.10, which comprises the following commits: 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield

libvirt: inhibit empty-dirs QA check

2021-11-12T15:46:45+00:00

OEcore has recently added a QA check for directories that should be empty. libvirt (via meson) creates some localsstate directories for the various components. These trigger the QA check and break the build. We still have some non-volatile localstate (/var) scenarios, and not seeing a distro feature that controls the QA check, and/or to coordinate the removal of the populated directories, we inhibit the QA check. In a boot with a volatile /var, the directories will be overlayed and no harm will come, in a non-volatile scenario, they'll be visible and no harm will come. Signed-off-by: Bruce Ashfield

python3-dtc: port to Python 3.10

2021-11-11T13:59:11+00:00

Signed-off-by: Ross Burton Signed-off-by: Bruce Ashfield

kubernetes: update to v1.22.4

2021-11-11T04:25:50+00:00

Bumping kubernetes to version v1.22.4-rc.0-26-ga82c1e72259, which comprises the following commits: a1bc265ce68 Fixed unit test SELinux support 9286d722d5e Add shortcut for SELinux detection 8ddc2963808 Don't guess SELinux support on error 24b725f29f1 Use separate pathSpec for local and remote to properly handle cleaning paths 3bf2248bda7 [go1.16] Update to go1.16.10 bd146ab0e1b Automated cherry pick of #105122: added keys for structured logging (#105137) 98ad7ac4ef4 Update debian, debian-iptables, setcap images to pick up CVE-2021-33910 fixes b9236d7cd4a Fixing how EndpointSlice Mirroring handles Service selector transitions 9e778cb6ede Fix race condition in logging when request times out dee25f4db12 Remove nodes with Cluster Autoscaler taint from LB backends. e565102bce7 Support cgroupv2 in node problem detector test 33b5f0f1eaf Update CHANGELOG/CHANGELOG-1.22.md for v1.22.3 39f5a506c81 Release commit for Kubernetes v1.22.4-rc.0 c9203682049 Release commit for Kubernetes v1.22.3 6765a52acd9 Free APF seats for watches handled by an aggregated apiserver. dd8563b0184 Run storage hostpath e2e test client pod as privileged fc580a41252 support more than 100 disk mounts on Windows 176ba1d5236 [go1.16] Update to go1.16.9 cdfd8141855 Clear initial UDP conntrack entries for loadBalancerIPs b30f24e2579 Verifying the auth headers are set for upgraded aggregated API requests 0dfe8e33143 apiserver aggregator upgrade unit test 36a9689ce81 Aggregator uses the regular transport even if the request requires upgrades 5fb05afd9f8 Fix PreferNominatedNode test 410c0413757 Remove Error Message Check Dynamic PV Tests fcb66167905 go fmt 82cd11e646e Add e2e test to verify kubelet restart behaviour 8fa5ff3712c kubelet: set terminated podWorker status for terminated pods bc392586f01 Fix quota controller hotloop in integration tests af46778d58d remove StartedPodsErrorsTotal metrice message 13d852c73dc Copy VolumeSnapshotContent annotations in snapshottable.go test ae10967d23f Fix bugs in e2e pod test 60e425c9009 Ensure terminal pods maintain terminal status c44db53f2c2 Do not sync Waiting statuses for Terminated pods 4ca2cee155c Adds CancelRequest function to CommandHeadersRoundTripper cd94fec74c9 Fixes kubectl command headers which hangs on kubectl run 60ee69c79bb Revert "Build non-static binaries with PIE buildmode" e989925e232 Ignore VMs in vmss delete backend pools 407cc91f95a Fix CSR test to accept certs shorter than the requested duration 6bf5db2e3f7 fix: skip not found nodes when reconciling LB backend address pools 3ceb7b87649 fix: consolidate logs for instance not found error e15dcbe404c Remove a duplicate StorageClass creation call 6763300949a Update Containerd version - GCE Windows a135518af00 e2e scheduling priorities: do not reference control loop variable cc1eb760389 storege e2etest: Delete restored PVC/Pod in snapshottable 614988c6626 pkg/kubelet/cm/memorymanager: Fix ErrorS key/value pair 2f850d636e8 v1.22: Fix test flake in old svc registry 20fa03d60ea 'New' Event namespace validate failed 2ff2780dcc5 kubelet: Handle UID reuse in pod worker a6539a662cd Add test for recreating a static pod 2d9957274a4 Update CHANGELOG/CHANGELOG-1.22.md for v1.22.2 9f314ed137d Release commit for Kubernetes v1.22.3-rc.0 8b5a1914753 Release commit for Kubernetes v1.22.2 4fa7cdfa93c Refine locking in API Priority and Fairness config controller b23fffb83ed kube-controller-manager: properly check generic ephemeral volume feature 38c7182897c Fix null JSON round tripping aeff924339a Propagate conversion errors a69920a9588 integration test b7854d5f1c9 fix 104329: check for headless before trying to release the ClusterIPs d8ead0e1c7b fix detach disk issue on deleting node c948d8cc53b kubelet: fix sandbox creation error suppression when pods are quickly deleted Signed-off-by: Bruce Ashfield

kernel: add 5.15 fragment enablement

2021-11-09T13:29:32+00:00

5.15 is tested as a kernel now, so we add the .inc to enable fragments. Signed-off-by: Bruce Ashfield

lopper: update to v1.0 and setuptools based project

2021-11-09T02:57:02+00:00

Switching to lopper 1.0 brings us a more standard setuptools based project for install and packaging. This update also fixes the experimental update to master-next, which was incomplete and broken. The only signficant user visible change with this update is that lopper.py is now 'lopper' and any calling recipes need to be updated accordingly. Signed-off-by: Bruce Ashfield

k3s: update to 1.22.3

2021-11-08T14:49:29+00:00

Bumping k3s to version v1.22.3+k3s1, which comprises the following commits: 61a2aab25e Upgrade containerd e1883d0537 Bump klipper-lb image for arm fix 5eb13b6ba6 Fix log/reap reexec 259ceb452c Fix other uses of NewForConfigOrDie in contexts where we could return err cc23fce0a7 Watch the local Node object instead of get/sleep looping 6349aed8e8 Block scheduler startup on untainted node when using embedded CCM db8f54e6af Update to v1.22.3 (#4348) 46eea2f10a Revert "Add ability to reconcile bootstrap data between datastore and disk (#3398)" 9a4ca5978b reset buffer after use (#4279) (#4329) c9f6fa0be0 remove integration test 07f844cf95 Copy old bootstrap buffer data for use during migration (#4215) 48355dce10 Add ability to reconcile bootstrap data between datastore and disk (#3398) 84e9b829e0 Update peer address when running cluster-reset 06b8639068 Bump klipper-helm version f98934980d Added configuration input to etcd-snapshot (#4280) (#4281) 7ede7d2e7c Update to the newest flannel 971854c15b Refactor log and reaper exec to omit MAINPID 3988edef25 Add containerd ready channel to delay etcd node join b65bcdf963 Bump klog fork version 7c78e1c802 [Release-1.22] - Add etcd s3 timeout (#4207) (#4230) c10a0a2163 Fix race condition in cloud provider 6193b1af97 Display cluster tls error only in debug mode (#4200) 737f722315 set transport to skip verify if se skip flag passed (#4102) (#4103) Signed-off-by: Bruce Ashfield

k3s: Add additional required kernel modules

2021-11-08T14:20:32+00:00

Adds the following kernel modules for k3s: * xt-physdev * xt-nflog * xt-limit * nfnetlink-log Without them, the k3s network-policy-controller reports failures in the log related to iptables-restore. Signed-off-by: Richard Neill Signed-off-by: Bruce Ashfield

yq: convert github SRC_URI to use https protocol

2021-11-08T14:18:20+00:00

Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

irqbalance: bump SRCREV to latest

2021-11-08T14:18:20+00:00

* remove the incorrect comment about SRCREV being 1.7.0 * and add +git because the old SRCREV wasn't matching with 1.8.0 tag as well * add -Wno-error=format-security to work around build failures with newer ncurses-6.3 like: | ../git/ui/ui.c:45:32: error: format not a string literal and no format arguments [-Werror=format-security] | 45 | mvprintw(LINES - 1, 0, footer); | | ^~~~~~ Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield