linux/meta-virtualization.git, branch sumo

lxc: make error report compatible with ptest

2018-10-16T14:25:58+00:00

ptest puts the test status at the beginning of the test. Follow the style. BEGIN: /usr/lib/lxc/ptest ### Starting LXC ptest ### SKIPPED: lxc-test-apparmor FAIL: lxc-test-attach PASS: lxc-test-automount FAIL: lxc-test-autostart PASS: lxc-test-cgpath PASS: lxc-test-cloneconfig PASS: lxc-test-clonetest PASS: lxc-test-concurrent FAIL: lxc-test-console PASS: lxc-test-containertests PASS: lxc-test-createconfig FAIL: lxc-test-createtest FAIL: lxc-test-destroytest PASS: lxc-test-device-add-remove PASS: lxc-test-get_item PASS: lxc-test-getkeys PASS: lxc-test-list PASS: lxc-test-locktests PASS: lxc-test-lxcpath PASS: lxc-test-may-control PASS: lxc-test-reboot PASS: lxc-test-saveconfig SKIPPED: lxc-test-shutdowntest PASS: lxc-test-snapshot PASS: lxc-test-startone PASS: lxc-test-utils Results: PASSED = 19 FAILED = 5 SKIPPED = 2 (for details check individual test log in ./logs directory) ### LXC ptest complete ### END: /usr/lib/lxc/ptest Signed-off-by: Sinan Kaya Signed-off-by: Bruce Ashfield

lxc: use compiled tests instead of copying source building on target

2018-10-12T14:30:43+00:00

The tests are already built when we do_compile so we only need to copy them to the ptest path and create a wrapper script to run them. This has the added benefit of reducing the size of the lxc package. We have to manipulate the test sources some to remove gpg validation and a few other minor changes, none of which actually change what is being tested (notes are provided in the associated commit logs). The following are the ptest results currently acheived: BEGIN: /usr/lib/lxc/ptest # Starting LXC ptest ### ./tests/lxc-test-apparmor SKIPPED ./tests/lxc-test-attach FAIL ./tests/lxc-test-automount PASS ./tests/lxc-test-autostart FAIL ./tests/lxc-test-cgpath PASS ./tests/lxc-test-cloneconfig PASS ./tests/lxc-test-clonetest PASS ./tests/lxc-test-concurrent PASS ./tests/lxc-test-console FAIL ./tests/lxc-test-containertests PASS ./tests/lxc-test-createconfig PASS ./tests/lxc-test-createtest FAIL ./tests/lxc-test-destroytest FAIL ./tests/lxc-test-device-add-remove PASS ./tests/lxc-test-get_item PASS ./tests/lxc-test-getkeys PASS ./tests/lxc-test-list PASS ./tests/lxc-test-locktests PASS ./tests/lxc-test-lxcpath PASS ./tests/lxc-test-may-control PASS ./tests/lxc-test-reboot PASS ./tests/lxc-test-saveconfig PASS ./tests/lxc-test-shutdowntest SKIPPED ./tests/lxc-test-snapshot PASS ./tests/lxc-test-startone PASS ./tests/lxc-test-utils PASS Results: PASSED = 19 FAILED = 5 SKIPPED = 2 (for details check individual test log in ./logs directory) ### LXC ptest complete ### Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield Signed-off-by: Sinan Kaya Signed-off-by: Bruce Ashfield

lxc: fixup 'download' template use

2018-10-12T14:30:43+00:00

We have a new dependency on 'mountpoint' which is now called in the download template script. We also hit an upstream bug due to improper use of 'mktemp', so we apply a patch to fix this and sent the fix upstream as well. Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield Signed-off-by: Sinan Kaya Signed-off-by: Bruce Ashfield

docker: CVE-2018-10892

2018-10-11T18:10:45+00:00

* CVE-2018-10892 Docker does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling Bluetooth or turning up/down keyboard brightness. Affects < 18.03.01 CVE: CVE-2018-10892 Ref: https://access.redhat.com/security/cve/cve-2018-10892 Signed-off-by: Sinan Kaya Signed-off-by: Bruce Ashfield

xen-vtpm : fix patch fuzz, whitespace-only change

2018-08-14T17:02:27+00:00

Signed-off-by: Christopher Clark Signed-off-by: Bruce Ashfield

tpm-emulator: apply patch to fix memcmp defect found by gcc

2018-08-14T17:02:20+00:00

| tpm_emulator-0.7.4/tpm/tpm_deprecated.c:437:7: | error: 'memcmp' reading 20 bytes from a region of size 8 | [-Werror=stringop-overflow=] | if (memcmp(&b1, &newAuthLink, sizeof(TPM_HMAC))) { | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Apply patch from Xen: vtpm_TPM_ChangeAuthAsymFinish.patch Signed-off-by: Christopher Clark Signed-off-by: Bruce Ashfield

xen: upgrade to 4.10.1, and apply patches for gcc 8.1 compatibility

2018-08-14T17:02:13+00:00

Adds packaging for new binary: xen-shim. Builds the hypervisor before building the tools to workaround an upstream parallel build bug that causes the shim to be rebuilt during install. Signed-off-by: Christopher Clark Signed-off-by: Bruce Ashfield

seabios: update SRC_URI to: https://www.seabios.org/downloads/...

2018-08-14T16:59:55+00:00

According to the latest seabios download instructions, this is now the preferred source for release downloads. Signed-off-by: Christopher Clark Signed-off-by: Bruce Ashfield

libvirt: fixups for glibc 2.27 - with Sun RPC Interfaces removed

2018-05-10T20:43:28+00:00

With Sun RPC Interfaces removed from libc we need to use an external provider for rpc. Polling other distros there seems to be consensus to use libtirpc so we follow this trend. Unfortunately this should only require the DEPENDS addition to the recipe but the upstream project has a few flaws in their Makefiles and configure which we need to work around so we add 2 new patches to address these to allow for the use of a sysroot and to use the $XDR_CFLAGS in a few more places. Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield

lxc: enable fix apparmor feature name. A typo called it "apparmour", back in commit 7a62620ea09f01c1f2a730cbb1264202276f2b87 Changing the default to the right value

2018-05-09T14:49:59+00:00

Signed-off-by: Gianfranco Costamagna Signed-off-by: Bruce Ashfield