linux/meta-virtualization.git/recipes-containers/containerd/containerd-opencontainers_git.bb, branch honister

global: convert github SRC_URIs to use https protocol

2021-11-03T13:56:50+00:00

github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield

virtual/containerd: don't rprovide virtual/

2021-09-06T14:57:17+00:00

Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/containerd to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-containerd, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield

virtual/runc: don't rprovide virtual/

2021-09-06T14:57:17+00:00

Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield

containerd: update to v1.5.5

2021-08-27T14:50:45+00:00

Bumping containerd to version v1.5.5-11-g69e5db821, which comprises the following commits: 27e164648 Allow expanded DNS configuration 8cfab161f CI: Switch to available latest images b9d5cff5d Update Go to 1.16.7 fe195c343 mergo: Upgrade to 0.3.12 to fix panic 677fade0f Prepare release notes for v1.5.5 166a81f88 snapshot/devmapper: log exported methods correctly eb4ba99fe Install apparmor parser for arm64 environment 0bc1e1d8a update seccomp version Signed-off-by: Bruce Ashfield

global: overrides syntax conversion

2021-08-02T21:17:53+00:00

OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie Signed-off-by: Bruce Ashfield

containerd: update to 1.5.4

2021-07-27T12:43:05+00:00

Bumping containerd to version v1.5.4-12-g1c13c54ca, which comprises the following commits: 7b17268fd remotes/docker/pusher.go: Fix missing Close() 2f11d5855 remotes/docker/fetcher.go: Fix missing Close() 4c1722e2b Update docker resolver to authorize redirects 166a81f88 snapshot/devmapper: log exported methods correctly d2cb9949b go.mod: runc v1.0.1 6807d070e update runc binary to v1.0.1 81cfab8f5 Prepare release notes for v1.5.4 d9b284bfd Try next mirror in case of non-404 errors, too 48d7a5c5c Prepare release notes for 1.5.3 defaec610 Update mailmap 43d089233 integration/client: go mod tidy ac7bd5483 Update Go to 1.16.6 (cont.) 385d9ed00 Update Go to 1.16.6 a695a0704 [Vendor] Update hcsshim to 0.8.18 0515f9d2d Fix missing Body.Close() calls on push to docker remote f5c7cb6e0 Add test for archive breakout test for lchmod 37a44de17 Cleanup lchmod logic in archive 78b95dff2 update runc binary to v1.0.0 GA Signed-off-by: Bruce Ashfield

containerd: update to v1.5.2 latest

2021-07-20T12:22:17+00:00

Bumping containerd to version v1.5.2-18-g9be04c276, which comprises the following commits: 78b95dff2 update runc binary to v1.0.0 GA a2dc682f1 sandbox: send pod UID to CNI plugins as K8S_POD_UID 9d8880816 content/local: inline sys.StatATimeAsTime() 3735a7dfe Fix incorrect UA used for registry authentication 31ecdf77d Fix cleanup context of teardownPodNetwork b441ec19f Add proper Go version before project checks d31f5e6b6 fix invalid validation error checking 3fd01c4ea Change Wrapf of non-error to an actual error cba7b44b6 windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink 354f729a4 Prepare release notes for v1.5.2 Signed-off-by: Bruce Ashfield

containerd-opencontainers: update to 1.5.2

2021-06-04T12:43:02+00:00

Updating to the released 1.5.x containerd. We also add a patch to fix the following: Since our oe-core go infrastructure insists on both -pie and static builds (for the most part), and that is not recommended by many packages, we end up with errors like: cannot find package runtime/cgo (using -importcfg) ... recipe-sysroot-native/usr/lib/aarch64-poky-linux/go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory Signed-off-by: Bruce Ashfield

containerd: add CVE_PRODUCT to recipe

2021-04-30T03:08:39+00:00

Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen Signed-off-by: Bruce Ashfield

containerd: update to 1.5-rc -latest

2021-04-30T02:53:49+00:00

Adding the following commits into our containerd build: 3187b6dc8 tests: Adds consumed memory stats test 969ec8949 Specify seccomp target arch for CC c19b7b64d RELEASES.md: recommend alternatives for deprecated features 8a62aa1c3 Deprecate built-in aufs snapshotter 4e7915f80 CI: allow Go 1.13 for Docker/Moby compatibility 8e589e873 Vagrantfile: update to Fedora 34 5847340a7 tests: Refactors container image usage 9f43eade6 Prepare v1.5.0-rc.3 release notes 4c7b960cb prow needs some additional setup for docker buildx 2e4c1d4b7 Use the multi-arch version of the test images 4e00c4b65 integration tests needs lsof 177273680 Add script to build test images 1b5d59dfe Add multi-arch support for test images 78e529727 add integration tests 2b0e6cdd4 Separate jobs for build and test for openlab/arm64 cdd075853 Release artifacts for Linux ARM64 efcb18742 Add unit tests for PID NamespaceMode_TARGET validation b48f27df6 Support PID NamespaceMode_TARGET 909660ea9 process: use the unbuffered channel as the done signal 0f332dadd Update cgroups for regenerated protos 391b123a5 adds quiet option for ref ab1654d0e Fix PushHandler cannot push image that contains duplicated blobs 00f8d32ef add not found debug out for check cmd; update usage 55734b1c5 Prepare 1.5.0-rc.2 release notes 3ef337ae3 Update containerd vendors to tags fbe1e140f Update Go to 1.16.3 c1d1edbad gha: use sudo -E in some places to prevent dropping env-vars 7966a6652 Cleanup code 5d79d3adb go.mod: update kubernetes to v1.20.6 1c03c377e go.mod: github.com/containerd/fifo v1.0.0 12a2a2108 go.mod: github.com/google/uuid v1.2.0 3292ea586 pkg/seccomp: use sync.Once to speed up IsEnabled 00b5c99b1 pkg/seccomp: simplify IsEnabled, update doc 6dd29c25f go.mod: github.com/containerd/aufs 330a2a809 go.mod: github.com/containerd/zfs 34780d67a runtime/shim: check the namespace flag first c3dde8c4b freebsd: add zfs to the default plugins b431fe4fc freebsd: don't run shim delete in deleted dir 1f4192daf freebsd: exclude v1 runtimes cb1580937 metadata: improve deleting a non-empty namespace's error message 5bf84034d Remove junit test result processor b83d04f91 Add variable names to runtime's interface definitions 993b86399 Add shim start opts 8a4cbabc6 Reimport windows layers when comitting snapshots af1e2af72 ci: upload junit formatted test results Signed-off-by: Bruce Ashfield